mariadb-client-10.6.15-150400.3.29.3<>,e Pp9|N[IH?U]4\=@ih%K~nT)ղd X5oVn^ט @렇 "rQyp y?1roQ8p\j8g[7ꧮ BIaW+UfhMB#̔ܯN^M)`HFO.Pfm]nr\FhowT^͢40 A^_&m4DTv)]7ܴ$Asiη;Y>FE?Dd ' :tx 5;C!D! ! ! L!  m!  ! p! !  ! h  H(89:=3B3F3G3!H4d!I4!X5 Y5$Z5p[5t\5|!]6!^7b8Zc9d9e9f9l9u9!v:(wB!xB!yC`zDDDDDCmariadb-client10.6.15150400.3.29.3Client for MariaDBThis package contains the standard clients for MariaDB.e Pibs-power9-13SUSE Linux Enterprise 15SUSE LLC SUSE-GPL-2.0-with-FLOSS-exceptionhttps://www.suse.com/Productivity/Databases/Clientshttps://www.mariadb.orglinuxppc64le/usr/sbin/sysusers2shadow mysql-user.conf <<"EOF" || [ -f /.buildenv ] u mysql 60 "MySQL database admin" /var/lib/mysql EOF E(8@P@B@@:s   M))(*($1>Bc9zlAA큤e we >e =e Be Be Ae >e Be le le le me le le le }e ve e Be ze ze ze ze ze ze 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-adminmariadb-checkmariadbd-safe-helpermariadb-dumpmariadb-importmariadb-showrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootmysqlrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootmariadb-10.6.15-150400.3.29.3.src.rpmconfig(mariadb-client)group(mysql)mariadb-clientmariadb-client(ppc-64)mysql-clientuser(mysql)@@@@@@@@@@ @@@@@@@@@@@@     /bin/shconfig(mariadb-client)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libedit.so.0()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libmariadb3libncurses.so.6()(64bit)libncurses.so.6(NCURSEST6_5.7.20081102)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libtinfo.so.6()(64bit)libtinfo.so.6(NCURSES6_TINFO_5.0.19991023)(64bit)libz.so.1()(64bit)mariadb-errormessagesrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sysuser-shadow10.6.15-150400.3.29.33.010.6.153.0.4-14.6.0-14.0-15.2-13.2mysql-client4.14.3dddlcc*c @bkb'E@b @a@a@aKaKaW@aba@a~@a^@a]aHwa6a@aG```KW`*b@`@`@_ǁ_#__N7_N7_3_'@^y^א^^Ǿ^@^@^v^y@^V]^U @^U @^O@^=Q@^:@^9\^9\^6^*@^,]@]@]M@]@]p]L]J@]D%]D%]9]8H@]\]@\ڭ\N\@\v{\n\j@\f\eX@\b@\-@\@\w[@[G[t[Q@[9@[[ @[M@[WZ@Z@Z@ZZ@ZH@Z$ZZaZOhZKt@Z;@ZZ@Z@YeYeY@YYcl@Y-^X@X,XpXXbWXAb@X W]NW+5V@V\:@UM@U@U@U>U@UJ@U-@U-@U@U.@T@TPT7T@TT_W@danilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.comgmbr3@opensuse.orgdanilo.spinella@suse.comdanilo.spinella@suse.comsuse-beta@cboltz.dedanilo.spinella@suse.comjsegitz@suse.comdanilo.spinella@suse.comdanilo.spinella@suse.commliska@suse.czdanilo.spinella@suse.comrpm@fthiessen.dedimstar@opensuse.orgkstreitova@suse.comkstreitova@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.dekstreitova@suse.commarec@detebe.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgkstreitova@suse.comdimstar@opensuse.orgguillaume.gardet@opensuse.orgpgajdos@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comidonmez@suse.commliska@suse.czkukuk@suse.comschwab@suse.depgajdos@suse.comkstreitova@suse.compgajdos@suse.comkstreitova@suse.comkstreitova@suse.commatthias.gerstner@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.compgajdos@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comstefan.bruens@rwth-aachen.dekstreitova@suse.comkstreitova@suse.comkstreitova@suse.commliska@suse.czkstreitova@suse.commatthias.gerstner@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comsuse+build@de-korte.orgrick.salevsky@suse.comtbechtold@suse.comnicolas.bock@suse.comkstreitova@suse.comkstreitova@suse.comadrian.glaubitz@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkukuk@suse.dekstreitova@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comro@suse.dersalevsky@suse.comkstreitova@suse.comdmueller@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comdimstar@opensuse.orgkstreitova@suse.comrhafer@suse.devcizek@suse.comkstreitova@suse.comvcizek@suse.combwiedemann@suse.comvcizek@suse.comkstreitova@suse.comfvogt@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comdimstar@opensuse.org13ilya@gmail.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comdmueller@suse.comkstreitova@suse.comkstreitova@suse.comkstreitova@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.commichal.hrusecky@opensuse.orgmichal.hrusecky@opensuse.orgdvaleev@suse.comsweet_f_a@gmx.demichal.hrusecky@opensuse.orgmgorse@suse.comxrigou@otenet.grxrigou@otenet.grmichal.hrusecky@opensuse.orgledest@gmail.com- Update to 10.6.15: https://mariadb.com/kb/en/mariadb-10-6-15-release-notes/ https://mariadb.com/kb/en/mariadb-10-6-15-changelog/ * fixes for the following security vulnerabilities: 10.6.15: none- Update to 10.6.14: https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/ https://mariadb.com/kb/en/mariadb-10-6-14-changelog/ * fixes for the following security vulnerabilities: 10.6.14: none- Update to 10.6.13: https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/ https://mariadb.com/kb/en/mariadb-10-6-13-changelog/ * fixes for the following security vulnerabilities: 10.6.13: CVE-2022-47015 (bsc#1207404) - Update list of skipped tests- Update to 10.6.12: https://mariadb.com/kb/en/library/mariadb-10612-release-notes https://mariadb.com/kb/en/library/mariadb-10612-changelog https://mariadb.com/kb/en/library/mariadb-10611-release-notes https://mariadb.com/kb/en/library/mariadb-10611-changelog * fixes for the following security vulnerabilities: 10.6.12: none 10.6.11: none - Update mariadb.keyring - Update list of skipped tests- Update to 10.6.10: https://mariadb.com/kb/en/library/mariadb-10610-release-notes https://mariadb.com/kb/en/library/mariadb-10610-changelog * fixes for the following security vulnerabilities: 10.6.10: none- Update to 10.6.9: * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-1069-release-notes https://mariadb.com/kb/en/library/mariadb-1069-changelog * fixes for the following security vulnerabilities: 10.6.9: CVE-2022-32082 (bsc#1201162) CVE-2022-32089 (bsc#1201169) CVE-2022-32081 (bsc#1201161) CVE-2022-32091 (bsc#1201170) CVE-2022-32084 (bsc#1201164) CVE-2022-38791 (bsc#1202863) * The package is not affected by the following security vulnerabilities: CVE-2018-25032 (bsc#1197459) - Update mysql-systemd-helper to be aware of custom group, bsc#1200105 - Update list of skipped tests- Update to 10.6.8 (bsc#1199928): * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-1068-release-notes https://mariadb.com/kb/en/library/mariadb-1068-changelog * fixes for the following security vulnerabilities: 10.6.8: CVE-2021-46669 CVE-2022-27376 (bsc#1198628) CVE-2022-27377 (bsc#1198603) CVE-2022-27378 (bsc#1198604) CVE-2022-27379 (bsc#1198605) CVE-2022-27380 (bsc#1198606) CVE-2022-27381 (bsc#1198607) CVE-2022-27382 (bsc#1198609) CVE-2022-27383 (bsc#1198610) CVE-2022-27384 (bsc#1198611) CVE-2022-27386 (bsc#1198612) CVE-2022-27387 (bsc#1198613) CVE-2022-27444 (bsc#1198634) CVE-2022-27445 (bsc#1198629) CVE-2022-27446 (bsc#1198630) CVE-2022-27447 (bsc#1198631) CVE-2022-27448 (bsc#1198632) CVE-2022-27449 (bsc#1198633) CVE-2022-27451 (bsc#1198639) CVE-2022-27452 (bsc#1198640) CVE-2022-27455 (bsc#1198638) CVE-2022-27456 (bsc#1198635) CVE-2022-27457 (bsc#1198636) CVE-2022-27458 (bsc#1198637) CVE-2022-32088 (bsc#1201168) CVE-2022-32087 (bsc#1201167) CVE-2022-32086 (bsc#1201166) CVE-2022-32085 (bsc#1201165) CVE-2022-32083 (bsc#1201163) - Update list of skipped tests - The following issue is not affecting this package: * CVE-2022-21427- Build mariadb-galera on SLE (jsc#SLE-22245) - Add dependency on galera-4 for mariadb-galera - Remove old constraints for mariadb-galera- Update to 10.6.7 (bsc#1196016): * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-1067-release-notes https://mariadb.com/kb/en/library/mariadb-1067-changelog https://mariadb.com/kb/en/library/mariadb-1066-release-notes https://mariadb.com/kb/en/library/mariadb-1066-changelog * fixes for the following security vulnerabilities: 10.6.7: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 10.6.6: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659, bsc#1195339 - Skip failing tests for s390x, fixes bsc#1195076 * suse_skipped_tests.list - Remove upstreamed patches: * mariadb-10.0.15-logrotate-su.patch * mariadb-10.1.1-mysqld_multi-features.patch - Refresh mariadb-10.2.4-logrotate.patch - The following issues have already been fixed in this package but weren't previously mentioned in the changes file: CVE-2021-46658, bsc#1195334 CVE-2021-46657, bsc#1195325- The following issues have already been fixed in this package but weren't previously mentioned in the changes file: bsc#1189320 CVE-2021-2154, bsc#1185872 CVE-2021-2166, bsc#1185870 CVE-2021-27928, bsc#1183770 MDEV-23851- Fix rpmlint errors - Run spec-cleaner- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031- Revert systemd hardening * Remove harden_mariadb.service.patch- Add CONFIG parameter to %sysusers_generate_pre- Update to 10.6.5 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-1065-release-notes https://mariadb.com/kb/en/library/mariadb-1065-changelog * fixes for the following security vulnerabilities: 10.6.5: none - Not affected by [CVE-2021-35604], bsc#1192497 - Drop upstreamed patch: * mariadb-10.2.19-link-and-enable-c++11-atomics.patch- Use pam macros instead of hardcoding directories, fixes bsc#1191038 - Add fix-pamdir.patch- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream- Fix socket address in mariadb@.socket file- Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_mariadb.service.patch Modified: * mariadb.service.in- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir}, remove ownership of this directory. Fixes boo#1182218 - Run spec-cleaner- Update to 10.6.4 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-1064-release-notes https://mariadb.com/kb/en/library/mariadb-1064-changelog https://mariadb.com/kb/en/library/mariadb-1063-release-notes https://mariadb.com/kb/en/library/mariadb-1063-changelog https://mariadb.com/kb/en/library/mariadb-1062-release-notes https://mariadb.com/kb/en/library/mariadb-1062-changelog https://mariadb.com/kb/en/library/mariadb-1061-release-notes https://mariadb.com/kb/en/library/mariadb-1061-changelog https://mariadb.com/kb/en/library/mariadb-1060-release-notes https://mariadb.com/kb/en/library/mariadb-1060-changelog * fixes for the following security vulnerabilities: 10.6.4: CVE-2021-2372 CVE-2021-2389 - Removed support to tokudb as it has been removed from upstream - Refresh mariadb-10.2.4-fortify-and-O.patch - Add new systemd socket from upstream- Support both rpmlint 1.x and 2.x.- Update rpmlint rules in order to work with rpmlint2 (bsc#1179049).- Update to version 10.5.10 * Fix CVE-2021-2154 * Add ST_DISTANCE_SPHERE for calculating the spherical distance between two geometries (point or multipoint) on a sphere * Fix: Crash with invalid multi-table update of view in 2nd execution of SP * Fix: Incorrect name resolution for subqueries in ON expressions * Fix: Complex query in Store procedure corrupts results * Fix: DELETE HISTORY may delete current data on system-versioned table * Fix: Crashes with nested table value constructors * Fix: Server crashes in thd_clear_errors() * Fix: The statement set password=password('') executed in PS mode fails in case it is run by a user with expired password * Full changes: https://mariadb.com/kb/en/mariadb-10510-changelog/ - Drop mariadb-10.5.9-cmake-3.20.patch, applied upstream- Add mariadb-10.5.9-cmake-3.20.patch: Fix syntax error which is exposed by cmake 3.20.- Update to 10.5.9 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-1059-release-notes https://mariadb.com/kb/en/library/mariadb-1059-changelog * fixes for the following security vulnerabilities: 10.5.9: none - Tracker bug: [bsc#1182739] - Update fixes [bsc#1182255] (MDL BF-BF Conflict caused by TRUNCATE TABLE) - refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch - remove fix-lock-rollback-assert-abort.patch (applied upstream)- update the list of the skipped tests- exclude galera files if we build without this feature. - switch from 664 to 644 for my.cnf configuration file (probably a typo)- added fix-lock-rollback-assert-abort.patch fix an abort when a transaction is rolled back - track all patches in a series so we can easily set up a quilt tree without requiring all the devel packages- switch to bcond_with to make it easier to enable galera support via the prjconfig - fix non galera case for building- Update to 10.5.8 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-1058-release-notes https://mariadb.com/kb/en/library/mariadb-1058-changelog * fixes for the following security vulnerabilities: 10.5.7: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 10.5.8: none - tracker bugs: [bsc#1177472] and [bsc#1178428] - refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch - update suse_skipped_tests.list- update to 10.5.6 * release notes and changelog https://mariadb.com/kb/en/mariadb-1056-release-notes https://mariadb.com/kb/en/mariadb-1056-changelog * fixes for the following security vulnerabilities: 10.5.6: CVE-2020-15180 < 10.5.6: none - refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch - drop mariadb-10.5-fix-prevent-optimizing-out-buf-argument-in-ch.patch - mariadb now builds against pcre2 - added binaries aria_s3_copy and mariadb-conv to tools subpackage - added type_test.type_test_double to list of skipped tests- Using basic.target dependencies is not needed with any systemd release unless DefaultDependencies is disabled, remove from unit files- Mariadb uses hrtimers with absolute CLOCK_REALTIME values, this won't work correctly if the clock isn't set and will do funny things if it goes backward after starting the server as POSIX says that the new clock value shall influence them, start the service after time-sync.target to workaround the problem.- Update to 10.4.14 [bsc#1175596] * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10414-release-notes https://mariadb.com/kb/en/library/mariadb-10414-changelog * fixes for the following security vulnerabilities: none * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes at db_sync from Keystone) - refresh mariadb-10.2.4-fortify-and-O.patch - fix patch sequence - run spec-cleaner - build galera for openSUSE only - update suse_skipped_tests.list - tune the testsuite to avoid randomly failing tests- Fix installed .service files to follow the /usr/lib -> /usr/libexec move (boo#1174811).- Update _constraints to make it more readable and request more memory for aarch64 to avoid occasionnal OOM errors on %check- rpm macros: $TEST_USER identified by $TEST_PASS is actually user of the database for which client conf should be made for - rpm macros: database name or names can be specified as a %mysql_testserver_start and %mysql_testserver_cconf parameter - modified sources % macros.mariadb-test- Build with oqgraph by default for all codestreams [jsc#SLE-12253]- Update to 10.4.13 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10413-release-notes https://mariadb.com/kb/en/library/mariadb-10413-changelog * fixes for the following security vulnerabilities: CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760, CVE-2020-13249 - fixes [bsc#1168380] (the same as [bsc#1166781]) MDEV-21244 mysql_upgrade creating empty global_priv table support upgrades from 5.2 privilege tables - drop specfile "hacks" as things work correctly in upstream now: * renaming tmpfiles.conf -> mariadb.conf * installing pam_user_map.so to /lib64/security for non 32bit architectures * sysusers.conf was renamed to mariadb.conf - update suse_skipped_tests.list- move mariadb-client-test from client subpackage to test subpackage so the symlink from mariadb-client-test -> mysql_client_test works [bsc#1170204]- Add oqgraph.social to the suse_skipped_tests.list (reported upstream as MDEV-22280) [bsc#1169369]- Add -Wl,-Bsymbolic -Wl,-Bsymbolic-functions to linker flags so that symbols are resolved locally if possible, this will avoid https://bugs.kde.org/show_bug.cgi?id=391362- Add mariadb-10.5-fix-prevent-optimizing-out-buf-argument-in-ch.patch in order to fix boo#1158405 (MDEV-21248).- Cleanup mysql user creation/handling and use sysusers.d- Bump disk constraint to 18Gb- test macros: clarify who is admin and user of the database, fix build with 10.4 - modified sources % macros.mariadb-test- remove @VERSION@ from mariadb.service and mariadb@.service- disable testing with rpm macros as it does not work as for 10.4, needs to be investigated- update suse_skipped_tests.list for ppc- rename mariadb.rpmlintrc to mariadb-rpmlintrc - for ppc install pam_user_map.so in /lib/security- rename mariadb-10.2.12-harden_setuid.patch to mariadb-10.4.12-harden_setuid.patch to match the correct version number. - add mariadb-10.4.12-fix-install-db.patch to improve default behaviour of mysql_install_db. This prevents performing security sensitive actions to be performed but instead only warns the caller (bsc#1160868).- update to 10.4.12 [jsc#SLE-8269] * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10412-release-notes https://mariadb.com/kb/en/library/mariadb-10412-changelog https://mariadb.com/kb/en/library/mariadb-10411-release-notes https://mariadb.com/kb/en/library/mariadb-10411-changelog * fixes for the following security vulnerabilities: CVE-2020-2574 * don't let mysql_install_db set SUID bit for auth_pam_tool in rpm/deb packages CVE-2020-7221 [bsc#1160868] - add mariadb-10.2.12-harden_setuid.patch to harden auth_pam_tool setuid-root binary [bsc#1160285] - pack pam_user_map.so module in the /%{_lib}/security directory and user_map.conf configuration file in the /etc/security directory - fix race condition with mysql_upgrade_info status file by moving it to the location owned by root (/var/lib/misc) CVE-2019-18901 [bsc#1160895] - move .run-mysql_upgrade file from $datadir/.run-mysql_upgrade to /var/lib/misc/.mariadb_run_upgrade so the mysql user can't use it for a symlink attack [bsc#1160912] - change -DWITH_COMMENT and -DCOMPILATION_COMMENT to be SUSE/openSUSE independent- enhance mariadb.service and mariadb@.service with various options (Documentation=, User=, Group=, KillSignal=, SendSIGKILL=, Restart=, RestartSec=, CapabilityBoundingSet=, ProtectSystem=, ProtectHome=, PermissionsStartOnly= and UMask=) [bsc#1160878] - mysql-systemd-helper: use systemd-tmpfiles instead of shell script operations for a cleaner and safer creating of /run/mysql [bsc#1160883]- update to 10.4.10 * changes and improvements for 10.4 https://mariadb.com/kb/en/changes-improvements-in-mariadb-104/ * fixes for the following security vulnerabilities: none - pack mariadb variants of the mysql binaries (e.g. mariadb-dumpslow is a symlink to mysqldumpslow and the like) - refresh mariadb-10.2.4-fortify-and-O.patch - update suse_skipped_tests.list - _constraints: increase physicalmemory value - package auth_pam_tool setuid binary properly - add cracklib-password-check subpackage but do not build it right now (cracklib-dict-full >= 2.9.0 is not available yet) - add rcmariadb compat link - add mariadb.rpmlintrc file - do not move my_safe_process to bindir but use rpmlint arch-dependent-file-in-usr-share exception for it (this file is used just for the testing and it doesn't have to be in bindir- added rpm test macros: %mysql_testserver_start, %mysql_testserver_cconf, %mysql_testserver_stop First two consuments are python-sortinghat and python-mysqlclient.- update the list of the skipped tests- update to 10.3.20 * notable changes for 10.3.20 * MDEV-20987: InnoDB fails to start when FTS table has FK relation * notable changes for 10.3.19 * MDEV-20864: Debug-only option innodb_change_buffer_dump for dumping the contents of the InnoDB change buffer to the server error log at startup. * MariaBackup: * MDEV-18438: mbstream recreates xtrabackup_info on same directory as backup file * MDEV-20703: mariabackup creates binlog files in serve binlog directory on --prepare --export step * FULLTEXT INDEX: * MDEV-19647: Server hangs after dropping full text indexes and restart * MDEV-19529: InnoDB hang on DROP FULLTEXT INDEX * MDEV-19073: FTS row mismatch after crash recovery * MDEV-20621: FULLTEXT INDEX activity causes InnoDB hang * MDEV-20927: Duplicate key with auto increment * ALTER TABLE: * MDEV-20799: DROP Virtual Column crash * MDEV-20852: BtrBulk is unnecessarily holding dict_index_t::lock * System-Versioned Tables: * MDEV-16210: FK constraints on versioned tables use historical rows, which may cause constraint violation * MDEV-20812: Unexpected ER_ROW_IS_REFERENCED_2 or server crash in row_ins_foreign_report_err upon DELETE from versioned table with FK * Galera wsrep library updated to 25.3.28 * Fixes for the following security vulnerabilities: CVE-2019-2974, CVE-2019-2938 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10320-release-notes https://mariadb.com/kb/en/library/mariadb-10320-changelog https://mariadb.com/kb/en/library/mariadb-10319-release-notes https://mariadb.com/kb/en/library/mariadb-10319-changelog - remove mariadb-10.3.17-fix_ppc_build.patch (applied upstream) - refresh * mariadb-10.2.4-logrotate.patch * mariadb-10.0.15-logrotate-su.patch- update to 10.3.18 * notable changes * Connect updated to Connect 1.06.0010 * MDEV-20066: This bug could cause a table to become corrupt if a column was added instantly * MDEV-15326: A race condition in InnoDB transaction commit that affects record locking was fixed * MDEV-17187: Table doesn't exist in engine after ALTER of FOREIGN KEY * MDEV-20301: InnoDB's MVCC has O(N^2) behaviors * MDEV-18128: Simplify .ibd file creation * MDEV-20060: Failing assertion: srv_log_file_size <= 512ULL << 30 while preparing backup * MDEV-20247: Replication hangs with "preparing" and never starts * MDEV-17614: Remove unnecessary locking for INSERT...ON DUPLICATE KEY UPDATE * MDEV-20311: row_ins_step accesses uninitialized memory * MDEV-19947: Repositories for RHEL 8 ppc64le added * fixes for the following security vulnerabilities: none * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10318-release-notes https://mariadb.com/kb/en/library/mariadb-10318-changelog- Use instead of for _constraints, increasing the worker pool on x86_64 from 6 to >700.- remove sql_mode from my.ini/my.cnf as NO_ENGINE_SUBSTITUTION and STRICT_TRANS_TABLES are already set by default from version 10.2.4 [bsc#1144314]- add mariadb-10.3.17-fix_ppc_build.patch to fix a compilation failure for ppc if ${CRC32_LIBRARY} target has no COMPILE_FLAGS yet. Then GET_TARGET_PROPERTY returns COMPILE_FLAGS-NOTFOUND, which doesn't work very well when it's later fed back into COMPILE_FLAGS. - _constraints: increase the memory because of the ppc build - adjust mysql-systemd-helper ("shutdown protected MySQL" section) so it checks both ping response and the pid in a process list as it can take some time till the process is terminated. Otherwise it can lead to "found left-over process" situation when regular mariadb is started [bsc#1143215]- update to 10.3.17 [bsc#1141798] * notable changes: * MDEV-19795: Merge upstream MyRocks. * MDEV-17228: Encrypted temporary tables are not encrypted. * MDEV-18328: Disks Plugin is now stable and requires the FILE privilege. * Merge relevant InnoDB changes from MySQL 5.7.27 * Adjust spin loops to the x86 PAUSE instruction latency * CREATE TABLE: MDEV-19292, MDEV-20102 * ALTER TABLE: MDEV-15641, MDEV-19630, MDEV-19916, MDEV-19974 * Indexed virtual columns: MDEV-16222, MDEV-17005, MDEV-19870 * FULLTEXT INDEX: MDEV-14154 * Encryption: MDEV-17228, MDEV-19914 * Galera + FOREIGN KEY: MDEV-19660 * Recovery & Mariabackup: MDEV-19978 * MDEV-19781: Add page id matching check in innochecksum tool * MDEV-20091: DROP TEMPORARY table is logged despite no CREATE was logged * MDEV-19427: mysql_upgrade_service throws exception upgrading from 10.0 to 10.3 * MDEV-19814: Server crash in row_upd_del_mark_clust_rec or Assertion * MDEV-17363: Compressed columns cannot be restored from dump * fixes for the following security vulnerabilities: CVE-2019-2805, CVE-2019-2740, CVE-2019-2739, CVE-2019-2737, CVE-2019-2758 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10317-release-notes https://mariadb.com/kb/en/library/mariadb-10317-changelog - add "BuildRequires: python3" as some tests and myrocks_hotbackup script need python3. Make the PYTHON_SHEBANG value configurable [bsc#1142909] - remove "innodb_file_format" option from my.ini (my.cnf) file that was removed in MariaDB 10.3.1. Also remove "innodb_file_per_table=ON" option that is by default ON and it's redundant now. - remove mariadb-10.2.9-galera_cnf.patch as it's not clear what the correct path to galera wsrep provider is while users can use galera 3, galera 4 or galera compiled on their own - add "Requires: python3-mysqlclient" that is needed by myrocks_hotbackup script- Use FAT LTO objects in order to provide proper static library.- remove client_ed25519.so plugin because it's shipped in mariadb-connector-c package (libmariadb_plugins)- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- update to 10.3.16 [bsc#1108088] * notable changes: * MDEV-19490: show tables fails when selecting the information_schema database * MDEV-19491: multi-update with triggers and stored routines * MDEV-19541: InnoDB crashes when trying to recover a corrupted page * MDEV-19725: Incorrect error handling in ALTER TABLE * MDEV-19445: FULLTEXT INDEX fix * MDEV-19486: System Versioning fix * MDEV-19509: InnoDB skips the tablespace in rotation list * MDEV-19614: SET GLOBAL innodb_ deadlock due to LOCK_global_system_variables * MDEV-17458: Unable to start galera node * MDEV-17456: Malicious SUPER user can possibly change audit log configuration without leaving traces * MDEV-19588: Wrong results from query, using left join * MDEV-19258: RIGHT JOIN hangs in MariaDB * Virtual columns fixes: MDEV-19027, MDEV-19602 * Crash recovery fixes: MDEV-13080, MDEV-19587, MDEV-19435 * MDEV-11094: Fixed row-based event applying with an error anymore when the events aim at the blackhole engine and row annotation is enabled * MDEV-19076: Fixed slave_parallel_mode=optimistic did not always properly order replication events on temporary tables in some case to attempt execution before a parent event has been already processed * MDEV-19158: Fixed duplicated entries in binlog occurred in combination of LOCK TABLES and binlog_format=MIXED when a being locked table was under replication unsafe operation * fixes for the following security vulnerabilities: none * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10316-release-notes https://mariadb.com/kb/en/library/mariadb-10316-changelog - fix reading options for multiple instances if my${INSTANCE}.cnf is used. Also remove "umask 077" from mysql-systemd-helper that causes that new datadirs are created with wrong permissions. Set correct permissions for files created by us (mysql_upgrade_info, .run-mysql_upgrade) [bsc#1132666] - remove mariadb-5.5.28-install_db-quiet.patch and add "--rpm" option to the mysql_install_db script that does basically the same [bsc#1080891] - remove mariadb-10.1.12-deharcode-libdir.patch because it's not needed - we don't build libmariadb library in mariadb package anymore so we don't need to take care about LIBDIR and PLUGINDIR here. Moreover we shouldn't (and we don't) touch *_RPM variables as they are internal) [bsc#1080891] - update suse_skipped_tests.list- update to 10.3.15 * see changes in 10.3 series https://mariadb.com/kb/en/library/changes-improvements-in-mariadb-103/ * fixes for the following security vulnerabilities: [CVE-2019-2503] (the rest was already applied for 10.2) - remove mysql-community-server-5.1.45-multi-configuration.patch as we have the same configuration in /etc/my.cnf and it doesn't make any sense to keep it twice. Moreover the patched file support-files/my-medium.cnf.sh was removed in upstream - remove mariadb-5.2.3-cnf.patch as all patched files were removed upstream - refresh mariadb-10.2.4-fortify-and-O.patch - refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch and use a simplified version from Debian - refresh README.install and suse-test-run - remove caching_sha2_password.so as it's shipped in mariadb-connector-c package (libmariadb_plugins) - rename libmysqld subpackage (embedded library) to libmariadbd as libmysqld.so was renamed to libmariadbd.so (MDEV-14953) - simplify removing static libs (we don't need to have .static) - add perl(Memoize) and perl(Symbol) to BuildRequires and Requires that are needed for tests - replace Requires pwdutils with shadow - build RocksDB only for x86_64 as other platforms are not supported - remove xtrabackup scripts as we already removed xtrabackup requires and it doesn't work for MariaDB 10.3 anyway - run spec-cleaner - tracker bugs for version updates in between: * 10.2.25 tracker bug [bsc#1136035] * 10.2.29 tracker bug [bsc#1156669]- update to 10.2.24 GA [bsc#1122198] * notable changes: * MDEV-18968 - Both (WHERE 0.1) and (WHERE NOT 0.1) return empty set * MDEV-18466 - Unsafe to log updates on tables referenced by foreign keys with triggers in statement format * MDEV-18899 - Server crashes in Field::set_warning_truncated_wrong_value * MDEV-18298 - Crashes server with segfault during role grants * MDEV-17610 - Unexpected connection abort after certain operations from within stored procedure * MDEV-19112 - WITH clause does not work with information_schema as default database * MDEV-17830 - Server crashes in Item_null_result::field_type upon SELECT with CHARSET(date) and ROLLUP * MDEV-14041 - Server crashes in String::length on queries with functions and ROLLUP * MDEV-18920 - Prepared statements with st_convexhull hang and eat 100% cpu. * MDEV-15837 - Assertion item1->type() == Item::FIELD_ITEM && item2->type() == Item::FIELD_ITEM * MDEV-9531 - GROUP_CONCAT with ORDER BY inside takes a lot of memory while it's executed * MDEV-17036 - BULK with replace doesn't take the first parameter in account * Bug#28986737 - RENAMING AND REPLACING MYSQL.USER TABLE CAN LEAD TO A SERVER CRASH * MDEV-19350 - Server crashes in delete_tree_element / ... / Item_func_group_concat::repack_tree * MDEV-19188 - Server Crash When Using a Trigger With A Number of Virtual Columns on INSERT/UPDATE * MDEV-19352 - Server crash in alloc_histograms_for_table_share upon query from information schema InnoDB * InnoDB persistent corruption fixes: MDEV-19426, MDEV-19022, MDEV-19241, MDEV-13942 * InnoDB recovery fixes and speedup: MDEV-18733, MDEV-12699, MDEV-19356, MDEV-19426 * MDEV-14398 - innodb_encrypt_tables will work even with innodb_encryption_rotate_key_age=0 * MDEV-17036 - BULK with replace doesn't take the first parameter in account * MDEV-14784 - Slave crashes in show_status_array upon running a trigger with select from I_S * MDEV-19060 - mariabackup continues, despite failing to open a tablespace * MDEV-18686 - Add option to PAM authentication plugin to allow case insensitive username matching * bugfix - multi-update checked privileges on views incorrectly * MDEV-19276 - during connect, write error log warning for ER_DBACCESS_DENIED_ERROR, if log_warnings > 1 * MDEV-17456 - Malicious SUPER user can possibly change audit log configuration without leaving traces. * fixes for the following security vulnerabilities: [CVE-2019-2614], [CVE-2019-2627], [CVE-2019-2628] * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10224-release-notes https://mariadb.com/kb/en/library/mariadb-10224-changelog - refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch- remove %{extra_provides} definition and Provides/Obsoletes where it was used. It's just a remnant and it's no longer needed.- update to 10.2.23 GA * notable changes: * InnoDB ALTER TABLE fixes: MDEV-18016, MDEV-18630, MDEV-18775, MDEV-18732, MDEV-18749, MDEV-18637, MDEV-13818, MDEV-17595 * MDEV-18878: InnoDB Purge: Optimize away futile table lookups * MDEV-14984: Regression in connect performance * MDEV-18936: Purge thread fails to exit on shutdown * MDEV-18272: InnoDB fails to rollback after exceeding FOREIGN KEY recursion depth * MDEV-9519: Data corruption on Galera cluster size change * MDEV-18204: fix incremental MyRocks backup * MDEV-18611: mariabackup terminated while copying InnoDB redo log * MDEV-18669: mariabackup writes timestamp in version line * MDEV-18855: Mariabackup should fetch innodb_compression_level from running server * fixes for the following security vulnerabilities: none * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10223-release-notes https://mariadb.com/kb/en/library/mariadb-10223-changelog - remove mariadb-10.2.22-fix_path.patch that is no longer needed (applied upstream)- add mariadb-10.2.22-fix_path.patch to fix a path to resolveip in mysql_install_db script [bsc#1127027] MDEV-18526- my.cnf/my.ini: move slow_query_log example to the error log so it's logically together- fix references path below legacy directory /var/run -> /run- remove xtrabackup requirement as MariaDB ships a build in mariabackup so xtrabackup is not needed unless a user specificaly wants to use xtrabackup as sst method (also solves [bsc#1122475]- add slow_query_log example to my.cnf and adjust the logrotate configuration to rotate all /var/log/mysql/*.log files . This is useful when the slow query log is enabled. In that case, this log file should also be rotated (bsc#1112767)- update to 10.2.22 GA * notable changes: * Backport Information Schema CHECK_CONSTRAINTS Table. * MDEV-17475: Maximum value of table_definition_cache is now 2097152 * InnoDB ALTER TABLE fixes: MDEV-16499, MDEV-18186, MDEV-18237, MDEV-18222, MDEV-18256, MDEV-18016, MDEV-16849 * Mariabackup fixes: MDEV-18185, MDEV-18201, MDEV-18194 * Galera crash recovery fix: MDEV-15740 * Encryption fixes: MDEV-18129, MDEV-18183, MDEV-18279 * Fixes for the following security vulnerabilities: * CVE-2019-2510, CVE-2019-2537 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10222-release-notes https://mariadb.com/kb/en/library/mariadb-10222-changelog- update to 10.2.21 GA * notable changes: * MDEV-17589 - Stack-buffer-overflow with indexed varchar (utf8) field * MDEV-16987 - ALTER DATABASE possible in read-only mode (forbid ALTER DATABASE in read_only) * MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle DROP DATABASE * MDEV-6453 - Assertion `inited==NONE || (inited==RND && scan)' failed in handler::ha_rnd_init(bool) with InnoDB, joins, AND/OR conditions * MDEV-18105 - Mariabackup fails to copy encrypted InnoDB system tablespace if LSN>4G * MDEV-18041 - Database corruption after renaming a prefix-indexed column [bsc#1120041] * MDEV-17470 - Orphan temporary files after interrupted ALTER cause InnoDB: Operating system error number 17 and eventual fatal error 71 * MDEV-17833: ALTER TABLE is not enforcing prefix index size limit * MDEV-17989: InnoDB: Failing assertion: dict_tf2_is_valid(flags, flags2) * MDEV-17765: Locking bug fix for SPATIAL INDEX * MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX * Fixes for regressions introduced in MariaDB Server 10.2.19 by the backup-safe TRUNCATE TABLE (MDEV-13564, innodb_safe_truncate=ON) and innodb_undo_log_truncate: * MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885 * Several improvements to MariaDB Server and backup for dealing with encrypted or page_compressed pages: * MDEV-12112: corruption in encrypted table may be overlooked * MDEV-17958: On little-endian systems, remove bug-compatible variant of innodb_checksum_algorithm=crc32 * MDEV-17957: Make innodb_checksum_algorithm stricter for strict_* values * MDEV-18025: Mariabackup fails to detect corrupted page_compressed=1 tables * fixes for the following security vulnerabilities: none * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10221-release-notes https://mariadb.com/kb/en/library/mariadb-10221-changelog https://mariadb.com/kb/en/library/mariadb-10220-release-notes https://mariadb.com/kb/en/library/mariadb-10220-changelog - update suse_skipped_tests.list- remove PerconaFT from the package as it has AGPL licence [bsc#1118754] - use a new syntax for cmake variables that specify which plugin will be built- Add patch to link against libatomic where necessary and use C++11 atomics instead of gcc built-in atomics * mariadb-10.2.19-link-and-enable-c++11-atomics.patch - Add two tests to suse_skipped_tests.list for ppc * encryption.innodb-bad-key-change2 * encryption.innodb-bad-key-change4- update to 10.2.19 GA [bsc#1116686] * notable changes: * innodb_safe_truncate system variable for a backup-safe TRUNCATE TABLE implementation that is based on RENAME, CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default value for this variable is ON. If you absolutely must use XtraBackup instead of Mariabackup, you can set it to OFF and restart the server * MDEV-17289: Multi-pass recovery fails to apply some redo log records * MDEV-17073: INSERT…ON DUPLICATE KEY UPDATE became more deadlock-prone * MDEV-17491: micro optimize page_id_t * MDEV-13671: InnoDB should use case-insensitive column name comparisons like the rest of the server * Fixes for indexed virtual columns: MDEV-17215, MDEV-16980 * MDEV-17433: Allow InnoDB start up with empty ib_logfile0 from mariabackup --prepare * MDEV-12547: InnoDB FULLTEXT index has too strict innodb_ft_result_cache_limit max limit * MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY check causes hang * MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and FULLTEXT INDEX * MDEV-17532: Performance_schema reports wrong directory for the temporary files of ALTER TABLE…ALGORITHM=INPLACE * MDEV-17545: Predicate lock for SPATIAL INDEX should lock non-matching record * MDEV-17546: SPATIAL INDEX should not be allowed for FOREIGN KEY * MDEV-17548: Incorrect access to off-page column for indexed virtual column * MDEV-12023: Assertion failure sym_node->table != NULL on startup * MDEV-17230: encryption_key_id from alter is ignored by encryption threads * fixes for the following security vulnerabilities: CVE-2018-3282 [bsc#1112432], CVE-2016-9843 [bsc#1013882], CVE-2018-3174 [bsc#1112368], CVE-2018-3143 [bsc#1112421], CVE-2018-3156 [bsc#1112417], CVE-2018-3251 [bsc#1112397], CVE-2018-3185 [bsc#1112384], CVE-2018-3277 [bsc#1112391], CVE-2018-3162 [bsc#1112415], CVE-2018-3173 [bsc#1112386], CVE-2018-3200 [bsc#1112404], CVE-2018-3284 [bsc#1112377] * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10219-release-notes https://mariadb.com/kb/en/library/mariadb-10219-changelog - do not pack libmariadb.pc (packed in mariadb-connector-c)- add "Requires: libmariadb_plugins" to the mariadb-test subpackage in order to be able to test client plugins successfuly [bsc#1111859] - don't remove debug_key_management.so anymore [bsc#1111858]- update to 10.2.18 GA * notable changes: * MDEV-15511 - if available, stunnel can be used during Galera rsync SST * MDEV-16791 - mariabackup: Support DDL commands during backup * MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup * MDEV-16934 - add new system variable eq_range_index_dive_limit to speed up queries that new long nested IN lists. The default value, for backward compatibility, is 0 meaning "unlimited". * MDEV-13333 - errors on InnoDB lock conflict * Report all InnoDB redo log corruption * MDEV-17043 - Purge of indexed virtual columns may cause hang on table-rebuilding DDL * MDEV-16868 - corruption of InnoDB temporary tables * MDEV-16465 - Invalid (old?) table or database name or hang in ha_innobase::delete_table and log semaphore wait upon concurrent DDL with foreign keys * fixes for the following security vulnerabilities: none * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10218-release-notes https://mariadb.com/kb/en/library/mariadb-10218-changelog - refresh mariadb-10.2.4-fortify-and-O.patch- add ssl tests that are failing with OpenSSL 1.1.1 to suse_skipped_tests.list [MDEV-17184]- update to 10.2.17 GA * notable changes: * New variable innodb_log_optimize_ddl for avoiding delay due to page flushing and allowing concurrent backup * InnoDB updated to 5.7.23 * MDEV-14637 - Fix hang due to DDL with FOREIGN KEY or persistent statistics * MDEV-15953 - Alter InnoDB Partitioned Table Moves Files (which were originally not in the datadir) to the datadir * MDEV-16515 - InnoDB: Failing assertion: ++retries < 10000 in file dict0dict.cc line 2737 * MDEV-16809 - Allow full redo logging for ALTER TABLE * Temporary tables: MDEV-16713 - InnoDB hang with repeating log entry * indexed virtual columns: MDEV-15855 - Deadlock between purge thread and DDL statement * MDEV-16664 - Change the default to innodb_lock_schedule_algorithm=fcfs * Galera: MDEV-15822 - WSREP: BF lock wait long for trx * fixes for the following security vulnerabilities: CVE-2018-3064 [bsc#1103342], CVE-2018-3063 [bsc#1101677], CVE-2018-3058 [bsc#1101676], CVE-2018-3066 [bsc#1101678], CVE-2018-3060 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10217-release-notes https://mariadb.com/kb/en/library/mariadb-10217-changelog- switch to libedit as control sequences were already fixed there so we don't have to avoid it [bsc#1098683]- update to 10.2.16 GA * notable changes: * MDEV-13122: mariabackup now supports MyRocks * MDEV-13779 - InnoDB fails to shut down purge workers, causing hang * MDEV-16267 - Wrong INFORMATION_SCHEMA.INNODB_BUFFER_PAGE.\ TABLE_NAME * MDEV-13834 - Upgrade failure from 10.1 innodb_encrypt_log * MDEV-16283 - ALTER TABLE...DISCARD TABLESPACE still takes long on a large buffer pool * MDEV-16376 - ASAN: heap-use-after-free in gcol.innodb_virtual_debug * MDEV-15824 - innodb_defragment=ON trumps innodb_optimize_fulltext_only=ON in OPTIMIZE TABLE * MDEV-16124 - fil_rename_tablespace() times out and crashes server during table-rebuilding ALTER TABLE * MDEV-16416 - Crash on IMPORT TABLESPACE of a ROW_FORMAT=COMPRESSED table * MDEV-16456 - InnoDB error "returned OS error 71" complains about wrong path * MDEV-13103 - Deal with page_compressed page corruption * MDEV-16496 - Mariabackup: Implement --verbose option to instrument InnoDB log apply * MDEV-16087 - Inconsistent SELECT results when query cache is enabled * MDEV-15114 - ASAN heap-use-after-free in mem_heap_dup or dfield_data_is_binary_equal (fix for indexed virtual columns) * fixes for the following security vulnerabilities: none * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10216-release-notes https://mariadb.com/kb/en/library/mariadb-10216-changelog - refresh mariadb-5.5.28-install_db-quiet.patch - refresh mariadb-10.2.9-galera_cnf.patch - pack wsrep_sst_rsync_wan file to galera subpackage - update suse_skipped_tests.list- Don't require systemd explicit, spec file can handle both cases correct and in containers we don't have systemd.- update to 10.2.15 GA * notable changes: * PCRE updated to 8.42 * The embedded server library now supports SSL when connecting to remote servers [bsc#1088681], [CVE-2018-2767] * MDEV-15325 - Incomplete validation of missing tablespace during recovery * MDEV-15720 - ib_buffer_pool unnecessarily includes the temporary tablespace * MDEV-15764 - InnoDB may write uninitialized garbage to redo log * MDEV-15553 - Virtual Columns: Assertion failed in dict_table_get_col_name * MDEV-14705 - slow innodb startup/shutdown can exceed systemd timeout * MDEV-15507 - Assertion failed in dict_check_sys_tables on upgrade from 5.5 * MDEV-15916 - Change buffer crash during TRUNCATE or DROP TABLE * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752, MDEV-15566, MDEV-16092 * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374 * applicable changes from 5.7.22 - MDEV-16142 * fixes for the following security vulnerabilities: CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810, CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766, CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761, CVE-2018-2781, CVE-2018-2771, CVE-2018-2813 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10215-release-notes https://mariadb.com/kb/en/library/mariadb-10215-changelog - update suse_skipped_tests.list and add tests that are failing with GCC 8 [bsc#1092544], MDEV-16127 - do not build TokuDB as a build without jemalloc is not supported upstream- update suse_skipped_tests.list and add failing tests for s390- update to 10.2.14 GA * notable changes: * MyRocks is now Gamma (RC) * MDEV-14533 - Added the DISKS plugin, for monitoring disk space * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work properly when used with DATA DIRECTORY. * MDEV-15333 - MariaDB (still) slow start * MDEV-12255 - Wrong result with innodb_prefix_index_cluster_optimization * MDEV-12396 - IMPORT TABLESPACE cleanup * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL PLUGIN does not allow the storage engine to cleanup open connections * MDEV-15249 - IMPORT fixes * MDEV-14988 - innodb_read_only tries to modify files if transactions were recovered in COMMITTED state * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT index (fixing a recent regression from upstream) * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the doublewrite buffer * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs * MDEV-14545 - Mariabackup - Backup fails due to MLOG_INDEX_LOAD record * fixes for the following security vulnerabilities: none * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10214-release-notes https://mariadb.com/kb/en/library/mariadb-10214-changelog - remove the following patches * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream, MDEV-15254) * mariadb-10.2.13-aarch_compilefix.patch (applied upstream, MDEV-14318) * mariadb-10.2.10-disable_openssl_compatibility_check.patch (fixed upstream in https://github.com/MariaDB/server/pull/558) * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON compile option that are no longer needed - systemd is detected correctly now (discussed in [bsc#1080891] and MDEV-8379) * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed upstream in 52516706c86f9f66c76836eabde7e2477694bac3) * remove mariadb-10.2.3-group.patch that was just a half solution of the group support (missing server part) and moreover using a group option in mysql-systemd-helper was removed few years ago as it caused troubles because MariaDB resolved it as 'group_concat_max_len option' (see https://github.com/openSUSE/mysql-packaging/issues/15) - remove jar files from the tarball (used for testing from the source) - build TokuDB without the jemalloc support for now. Jemalloc 5 is not backwards compatible which leads to the errors in the testsuite at least (MDEV-15034) - update suse_skipped_tests.list- change %{extra_provides} macro from "mariadb_102" to "mariadb-102" and use this macro in Provides/Obsoletes for mariadb, test, tools, bench and errormessages subpackages to ensure a smooth transition from SLE12 to SLE15 [fate#323756] - remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't be needed anymore- fix build on aarch64: compile a few more files with -O0 from https://jira.mariadb.org/browse/MDEV-14318 add patch mariadb-10.2.13-aarch_compilefix.patch- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)- update to 10.2.13 GA * notable changes * InnoDB updated to 5.7.21 * Galera wsrep library updated to 25.3.23 * MDEV-13869 - MariaDB slow start * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work properly when used with DATA DIRECTORY * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE * Foreign key bugs: * MDEV-15199 - Referential integrity broken in ON DELETE CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation for every updated row * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will not resume after lock wait * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error 1032 (Can't find record) * MDEV-13205 - InnoDB: Failing assertion: !dict_index_is_online_ddl(index) upon ALTER TABLE * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2 * MDEV-15165 - InnoDB purge for index on virtual column is trying to access an incomplete record * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed * MDEV-11415 - Remove excessive undo logging during ALTER TABLE…ALGORITHM=COPY * MDEV-15016 - multiple page cleaner threads use a lot of CPU * MDEV-14941 - Timeouts on persistent statistics tables caused by MDEV-14511 * MDEV-14985 - innodb_undo_log_truncate may be blocked if transactions were recovered at startup * MDEV-14441 - InnoDB hangs when setting innodb_adaptive_hash_index=OFF during UPDATE * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles data file sizes exceeding 4GiB * fixes for the following security vulnerabilities: * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2612 * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10213-release-notes/ https://mariadb.com/kb/en/library/mariadb-10213-changelog/ * fixes [bsc#1058729] and [bsc#1068906] - refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch - refresh mariadb-10.2.3-group.patch- add dependency on which for galera scripts- change owner of mysql-test directory from root to mysql. It also fixes sys_vars.secure_file_priv running under mysql user (e.g. if ít's started via suse-test-run script) that needs to be able to create a test file there during its run [bsc#1012075]- update to 10.2.12 GA * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10212-release-notes/ https://mariadb.com/kb/en/library/mariadb-10212-changelog/ - remove mysql-community-server-5.5.6-safe-process-in-bin.patch becuase this moving is done in the specfile - get rid of the archive with patches (remove mysql-patches.tar.xz and series files), handle patches in the standard way mysql-community-server-5.1.45-multi-configuration.patch mariadb-10.2.4-logrotate.patch mariadb-5.5.28-install_db-quiet.patch mariadb-10.1.1-mysqld_multi-features.patch mariadb-5.2.3-cnf.patch mariadb-10.2.3-group.patch mariadb-10.1.12-deharcode-libdir.patch mariadb-10.0.15-logrotate-su.patch mariadb-10.2.4-fortify-and-O.patch mariadb-10.2.8-systemd-cmake.patch mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch mariadb-10.2.9-galera_cnf.patch mariadb-10.2.10-disable_openssl_compatibility_check.patch - add comments to the section with removing unused files (based on https://lists.launchpad.net/maria-developers/msg11028.html) - put rm statements together - install the new upstream systemd-tmpfiles configuration file 'tmpfiles.conf' and rename it to 'mariadb.conf' in order to follow the manual - remove the new upstream systemd-sysusers configuration file as we handle creating of mysql user in the specfile - mysql.service: remove calling of the wait function and let systemd to do this job. Switch from 'Type=simple' to 'Type=notify' and add TimeoutSec=300 - rename unit files from mysql to mariadb and add mysql alias for the backward compatibility [bsc#1067443] * mysql.service -> mariadb.service * mysql.target -> mariadb.target * mysql@.service -> mariadb@.service - remove configuration-tweaks.tar.xz and move configuration to my.ini/my.cnf file (omit default_plugins.cnf as all configuration here was commented out) - add a numeric prefix for galera.cnf file in order to allow users to speficy in which order the configs will be loaded within the my.cnf.d directory [bsc#1055268] - add 'bind-address = 127.0.0.1' as a default option to my.cnf file for security reasons (disable MariaDB to listen for TCP/IP connections by default) [bsc#1058374] - update my.cnf file and add a section with SSL configuration [bsc#1058374]- switch from deprecated 'net-tools' to 'iproute2' for mariadb-galera subpackage. This dependency switch is sufficient for making wsrep_sst_rsync.sh script to use 'ip' instead of 'ifconfig' command- Do not manually delete %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something: The file is listed as ghost and thus properly owned by the package. - Use %tmpfiles_create which can cope with transactional updates.- update to 10.2.11 GA * release notes and changelog: * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/ * https://mariadb.com/kb/en/library/mariadb-10211-changelog/ - pack additional mroonga/groonga files - change default charset to utf8mb4 for full Unicode support [fate#324329] - remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer needed- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401). Upstream bug: https://jira.mariadb.org/browse/MDEV-14256- Disable openssl compatibility checking * the check uses CRYPTO_set_mem_functions() to set debugging memory allocation function. The setting only succeeds if no allocation was done before. Our fips self-tests, which are run from the library constructor, however, do allocate memory, so the subsequent call to CRYPTO_set_mem_functions causes the compatibility check to fail * add mariadb-10.2.10-disable_openssl_compatibility_check.patch- update to 10.2.10 GA * release notes and changelogs https://downloads.mariadb.org/mariadb/+releases/ * fixes for the following security vulnerabilities * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365 * 10.2.8: CVE-2017-3636, CVE-2017-3641, CVE-2017-3653, CVE-2017-10320, CVE-2017-10365, CVE-2017-10379, CVE-2017-10384, CVE-2017-10286, CVE-2017-3257 * 10.2.6: CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464 * 10.2.5: CVE-2017-3313, CVE-2017-3302 * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738] - refresh and rename the following patches: * mariadb-10.1.4-group.patch to mariadb-10.2.3-group.patch * mariadb-10.1.16-systemd-cmake.patch to mariadb-10.2.8-systemd-cmake.patch * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch * mariadb-10.1.12-fortify-and-O.patch to mariadb-10.2.4-fortify-and-O.patch * mysql-community-server-5.1.46-logrotate.patch to mariadb-10.2.4-logrotate.patch - add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files - start building without client library part, use mariadb-connector-c for getting libmariadb libraries. Remove libmysclient* packages - remove baselibs.conf because we no longer build client libraries here - update %{soname} to 19 (libmysqld soname) - change '=' to '>=' in Requires:mariadb-errormessages for libmysqld%{soname}. Versioned libraries shouldn't require regular packages with '='. It also causes problems during update (Problem: libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25, but this requirement cannot be provided). Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages subpackage that solves this problem for the current update. - pack new files, remove mysql specific files - remove README.SUSE as it was outdated - package cleaning * run spec-cleaner * renumber sources * reorganize subpackages order and update summaries, descriptions and groups * tweak and add some comments to the specfile * remove warning about mysql-packaging repository that is no longer used for this package * remove checks whether we build mysql or mariadb (we build mariadb only) - add galera subpackage * add missing "Requires:" (lsof, net-tools, rsync, socat, xtrabackup) for proper wsrep scripts functionality * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf configuration file (add wsrep_on=OFF and set the location of the wsrep library) * rename README-wsrep to README.wsrep so it corresponds with the other README names * move galera_new_cluster, galera_recovery, use_galera_new_cluster.conf, wsrep_* scripts to the galera subpackage - remove the following macros definitions: * %{_tmpfilesdir} - it's been defined in systemd macros since openSUSE 13.2 * %{preferred} - we no longer need to distinguish between preferred and not preferred version (we build mariadb only) * %{with_mandatory_lz4} - mysql specific * %{build_extras}, %{pretty_name}, %{build_readline}, %{builtin_plugins} and {libname} - they are no longer needed - add the following macros * %{run_testsuite} macro that controls the run of the regression testsuite * %{ignore_testsuite_result} macro - when set to 1 it ignores results from the regression testsuite (debug purposes) * %{with_mroonga} macro (enable mroonga build for x86_64 archs only) - rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't enable it for SLE12 (missing jemalloc dependency) - add the following BuildRequires: * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034] * krb5-devel to build auth_gssapi.so plugin * libarchive-devel * use libboost_headers-devel instead of boost-devel for TW. Boost package has been split up and will migrate to using multibuild. This results in packages that unnecessarily build require boost-devel to cause major bottlenecks [bsc#1062583] - do not use "BuildRequires: lzo-devel" for i586 and arm because it makes build fail - add the following Requires: * hostname - as mariadb_install_db depends on this tool [bsc#1060110] * libaio-devel for libmysqld-devel because libmysqld depends on libaio - tweak build options: * remove "DWITH_ASAN=OFF" - this option was added because of mysql and it's no longer needed * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system" * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath during build and fixes quite a few test suite failures. When installing the file -rpath is still disabled, so this should not have any effect on the installed binaries * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON" * remove -DWITH_BOOST=../boost/ as we use system boost now - enable OQGRAPH to build (openSUSE only, SLE is missing Judy requirement) - disable Cassandra storage engine build as it's no longer actively being developed (See MDEV-4695) [bsc#1055165] * Remove "BuildRequires: libthrift-devel" and %{with_cassandra} macros that are no longer needed now - disable make test (Connector/C unit tests) as it requires a running server. These tests are part of mysql-test-run now (MDEV-12470) - add suse_skipped_tests.list - the list of the tests that we want to skip (they fail correctly or the fix is in progress) * adjust mysql-test-run options to skip tests listed there [bsc#1041891] - remove mytop utility that is packaged separately - remove *.jar files from mysql-test - remove python scripts remains from tokudb upstream - remove generating of the MySQL NDB Cluster filelists - remove removing of manpages for MySQL Carrier Grade Edition - provide a symlink for the my_safe_process executable that was moved from its location to bindir - update filename in /var/adm/update-messages to match documentation and build-compare pattern - README is now README.md - fix "file listed twice" build error- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package- Drop INFO_BIN from package because it is not needed and differs for every build (boo#1047218)- Explicitly require libopenssl-1_0_0-devel, to successfully build once we switch openssl to 1.1 (bsc#1042632)- update to MariaDB 10.1.25 GA * notable changes * MariaDB can no longer be compiled with OpenSSL version 0.9.8 and below. The last 0.9.8 release was in December 2015, it is out of support and is no longer getting security fixes. * MariaDB Backup is now beta * release notes and changelog: * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog * refresh mariadb-10.1.12-fortify-and-O.patch * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358), a fix was merged upstream * update file lists for new man-pages and tools - switch from 'Restart=on-failure' to 'Restart=on-abort' in mysql.service in order to follow the upstream- Add mariadb-10.1.22-xtradb_null_checks.patch (boo#1041525) (See also https://jira.mariadb.org/browse/MDEV-12358) - switch from '/var/run' to '/run' as /var/run is just a symlink to /run - fix permissions for /var/run/mysql that were wrongly set to 700 instead of 755 due to added umask. This prevented non-root from connecting to the database [bsc#1038740] - change permissions of the configuration dir/files to 755/644. Please note that storing the password in the /etc/my.cnf file is not safe. Use for example an option file that is accessible only by yourself [bsc#889126] - set the default umask to 077 in mysql-systemd-helper [bsc#1020976]- increase required physical memory in _constraints from 5 GB to 7 GB in order to try to fix i586 build that fails because of "Out of memory" error- update to MariaDB 10.1.22 GA * notable changes * XtraDB updated to 5.6.35-80.0 * TokuDB updated to 5.6.35-80.0 * PCRE updated to 8.40 * MDEV-12160: ed25519 authentication plugin * MDEV-11842: Fix a 10.1.21 regression with failed INSERT, BEFORE INSERT triggers, and columns with no default value * MDEV-12075: Fix a 10.1.21 regression in the InnoDB data file extension code * MDEV-11027: better InnoDB crash recovery progress reporting * MDEV-11520: improvements to how InnoDB data files are extended * Improvements to InnoDB startup/shutdown to make it more robust * MDEV-11233: fix for FULLTEXT index crash * MDEV-9734: systemd compatible bintar files now available * release notes and changelog: * https://mariadb.com/kb/en/mariadb/mariadb-10122-release-notes/ * https://mariadb.com/kb/en/mariadb/mariadb-10122-changelog/ * fixes the following CVEs: * CVE-2017-3313 [bsc#1020890], CVE-2017-3302 [bsc#1022428] - refresh mysql-community-server-5.1.46-logrotate.patch - refresh mariadb-10.1.16-systemd-cmake.patch - remove mariadb-10.1.20-incorrect_list_handling.patch that is no longer needed [bsc#1022428] [CVE-2017-3302]- update to MariaDB 10.1.21 * notable changes: * Innodb updated to 5.6.35 * Performance Schema updated to 5.6.35 * release notes and changelog: * https://mariadb.com/kb/en/mariadb/mariadb-10121-release-notes/ * https://mariadb.com/kb/en/mariadb/mariadb-10121-changelog/ * fixes the following CVEs: CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894], CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884], CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875], CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877], CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882], CVE-2016-6664 [bsc#1008253] - add mariadb.te file to the filelist - add mysqld_safe_helper to the filelist - refresh mariadb-10.1.4-group.patch - add mariadb-10.1.20-incorrect_list_handling.patch to fix incorrect linked list handling in mysql_prune_stmt_list() function that can cause use-after-free error [bsc#1022428]- Replace systemd and systemd-devel BuildRequires with pkgconfig(libsystemd), which matches what the build system is actually looking for.- update to MariaDB 10.1.20 * notable changes: * XtraDB updated to 5.6.34-79.1 * TokuDB updated to 5.6.34-79.1 * HeidiSQL updated to 9.4 * The limit for the table_open_cache system variable has been increased to 1024K * Galera wsrep library updated to 25.3.19 * release notes and changelog: * https://mariadb.com/kb/en/mariadb/mariadb-10120-release-notes/ * https://mariadb.com/kb/en/mariadb/mariadb-10120-changelog/- update to MariaDB 10.1.19 * notable changes: * XtraDB updated to 5.6.33-79.0 * TokuDB updated to 5.6.33-79.0 * release notes and changelog: * https://mariadb.com/kb/en/mariadb/mariadb-10119-release-notes/ * https://mariadb.com/kb/en/mariadb/mariadb-10119-changelog/ * fixes for the following security vulnerabilities: CVE-2016-7440 [bsc#1005581] CVE-2016-5584 [bsc#1005558] - add mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to fix mysql_install_db.sh script to find data files in mariadb directories when a user uses "--basedir" option [bsc#1006539] - switch to xz compression instead of bz2 for the following tarballs: * mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz * configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz replace occurrences of "bzip2" with "xz" in README.debug- update to 10.1.18 * Release notes: https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10116-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/ * Changelog: https://mariadb.com/kb/en/mariadb/mariadb-10118-changelog/ https://mariadb.com/kb/en/mariadb/mariadb-10117-changelog/ https://mariadb.com/kb/en/mariadb/mariadb-10116-changelog/ https://mariadb.com/kb/en/mariadb/mariadb-10115-changelog/ * fixed CVE's: CVE-2016-8283, CVE-2016-6663, CVE-2016-5629, CVE-2016-5626, CVE-2016-5624, CVE-2016-5616, CVE-2016-3492, CVE-2016-6662, CVE-2016-5440, CVE-2016-3615, CVE-2016-3521, CVE-2016-3477 * fix: [bsc#1005582], [bsc#1001367], [bsc#1005569], [bsc#1005566], [bsc#1005564], [bsc#1005562], [bsc#1005555], [bnc#998309], [bsc#989926], [bsc#989922], [bsc#989919], [bsc#989913] * refresh mariadb-10.1.4-group.patch * refresh mariadb-10.1.12-fortify-and-O.patch - requires devel packages for aio and lzo2 - remove mariadb-10.0.21-mysql-test_main_bootstrap.patch that is no longer needed [bnc#984858] - append "--ignore-db-dir=lost+found" to the mysqld options in "mysql-systemd-helper" script if "lost+found" directory is found in $datadir [bnc#986251] - remove syslog.target from *.service files [bsc#983938] - add BuildRequires: systemd-devel - make some dependecies switchable - add systemd to deps to build on leap and friends - add mariadb-10.1.16-systemd-cmake.patch to allow more (case-insensitive) values for 'WITH_SYSTEMD' variable in systemd.cmake - replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro - remove useless mysql@default.service [bsc#971456] - replace all occurrences of the string "@sysconfdir@" with "/etc" in mysql-community-server-5.1.46-logrotate.patch as it wasn't expanded properly [bsc#990890]- update to 10.1.14 * What is MariadDB 10.1: https://mariadb.com/kb/en/mariadb/what-is-mariadb-101/ * CVEs fixed in 10.1.x branch CVE-2016-2047, CVE-2016-0668, CVE-2016-0651, CVE-2016-0650, CVE-2016-0649, CVE-2016-0646, CVE-2016-0644, CVE-2016-0642, CVE-2016-0641, CVE-2016-0640, CVE-2016-0616, CVE-2016-0610, CVE-2016-0609, CVE-2016-0608, CVE-2016-0606, CVE-2016-0600, CVE-2016-0598, CVE-2016-0597, CVE-2016-0596, CVE-2016-0546, CVE-2016-0505, CVE-2015-7744, CVE-2015-4913, CVE-2015-4895, CVE-2015-4879, CVE-2015-4870, CVE-2015-4866, CVE-2015-4864, CVE-2015-4861, CVE-2015-4858, CVE-2015-4836, CVE-2015-4830, CVE-2015-4826, CVE-2015-4819, CVE-2015-4816, CVE-2015-4815, CVE-2015-4807, CVE-2015-4802, CVE-2015-4792 * adjust mysql-patches.tar.bz2 archive for mariadb-101 * pack new MariaDB 10.1.x files - remove '%define _rundir' as 13.1 is out of support scope - temporarily disable OQGraph It seems to need the boost library with the version not earlier than 1.40 and not later than 1.55 (MDEV-9479) - add "BuildRequires: systemd-devel" for SLE12, openSUSE 13.2 and openSUSE Leap in order to enable systemd features during the build of mariadb-101 for these products. Otherwise we get "Performing Test HAVE_SYSTEMD - Failed" and systemd files aren't installed. - re-enable profiling support - don't remove HandlerSocket plugin [bnc#979524] - add 'log-error' and 'secure-file-priv' configuration options (added via configuration-tweaks.tar.bz2) [bsc#963810] * add '/etc/my.cnf.d/error_log.conf' that specifies 'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked up by logrotate. * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that 'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with files in the directory specified by 'secure-file-priv' option (='/var/lib/mysql-files'). - run 'usermod -g mysql mysql' only if mysql user is not in mysql group. Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have '/bin/false' shell set. - don't delete the log data when migration fails- fix constraints conditions for 32bit architectures- fix information leak via mysql-systemd-helper script [CVE-2015-5969], [bnc#957174]- update to 10.0.22 * Release notes: https://kb.askmonty.org/en/mariadb-10022-release-notes/ * Changelog: https://kb.askmonty.org/en/mariadb-10022-changelog/ * fixed CVEs: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826 CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861 CVE-2015-4870, CVE-2015-4913, CVE-2015-4792 * remove the following patches (applied upstream) * mysql-community-server-5.6.12-srv_buf_size.patch * mariadb-10.0.16-header_files_const_warnings.patch - add mariadb-10.0.21-mysql-test_main_bootstrap.patch that fix main.bootstrap test (change default charset to utf8 in test result) [bnc#937787] - add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to fix compilation with '-DENABLED_PROFILING=OFF'- update to MariaDB 10.0.21 * changes: * https://mariadb.com/kb/en/mariadb/mariadb-10021-release-notes * the following patches were processed upstream and are no longer needed: * mariadb-5.5.28-hotcopy.patch * mariadb-5.1.50-strncat-overflow.patch * mysql-community-server-5.1.51-mysql_config.patch * mariadb-5.5.32-upgrade-exit-status.patch * mariadb-5.5.41-mariadb-admincrash.patch - use syntax in mysql-systemd-helper that is accepted by both mariadb and mysql [bnc#937767] - fix spurious macro expansion in comment in specfile - install INFO_BIN and INFO_SRC, noticed in MDEV-6912 - replace readline-devel for readline5-devel (MDEV-6912) [bnc#902396] - use spec-cleaner - Tweak some cmake switches to enable more things * WITH_ASAN=OFF adress sanitization WITH_LIBWRAP=ON tcp wrappers ENABLED_PROFILING=OFF profiling disable (for mysql) ENABLE_DEBUG_SYNC=OFF debug testing sync disable (for mysql) WITH_PIC=ON by default we want pic generated binaries (for mysql) - set cmake options for MariaDB Galera Cluster - remove superfluous '--group' parameter from mysql-systemd-helper - make -devel package installable in the presence of LibreSSL - cleanup after the update-message if it was displayed - add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly [bnc#943096] - remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both 'x' and 'X' options is redundant and causes a warning message. Leaving only the 'x' line fixes this problem. [bnc#942908]- Sync to git state, fixes bnc#937754 too- Sync to git state fixing few triv issues- Enable testsuite- Update to 10.0.20: https://mariadb.com/kb/en/mariadb/mariadb-10020-release-notes/ * Fixes bnc#934789 Logjam Attack using 512bit dh groups in ssl - Sync the package to git state, redoing initscripts to be more robust- Update to 10.0.19, sync to git state of repository: https://mariadb.com/kb/en/mariadb/mariadb-10019-release-notes/- fix parent directory has insecure permissions error- disable optional features for mariadb * still possible to use them from mariadb_100 package- Adjust _constraints. 11GB is not enough for ppc64 builds, increase to 13GB- fix build for openSUSE 13.2 ppc bnc#921955- Updated to the version 10.0.17 * Release notes: http://kb.askmonty.org/v/mariadb-10017-release-notes * Changelog: http://kb.askmonty.org/v/mariadb-10017-changelog - merged patches to packaging git and regenerated * few fixes mainly to upgrades- README.SuSE is now README.SUSE; fix name in some places.- Fix undefined initial status in systemd script (boo #914370)- Fix include dir in alternative cnf files (bnc #859345)- run spec cleaner on spec - update to 10.0.15 * Release notes: http://kb.askmonty.org/v/mariadb-10015-release-notes * Changelog: http://kb.askmonty.org/v/mariadb-10015-changelog - conditionally enable more storage engines - updated packaging to the latest templates- fix bashism in posttrans script/bin/shmysql-clientibs-power9-13 1695152976  !10.6.15-150400.3.29.310.6.15-150400.3.29.310.6.15-150400.3.29.310.6.1510.6.15mysqlaccess.confmariadbmariadb-adminmariadb-checkmariadb-dumpmariadb-importmariadb-showmariadbd-safe-helpermysqlmysqladminmysqlcheckmysqld_safe_helpermysqldumpmysqlimportmysqlshowmysql-user.confmysqlplugindialog_examples.somariadb-admin.1.gzmariadb-check.1.gzmariadb-dump.1.gzmariadb-import.1.gzmariadb-show.1.gzmariadb.1.gzmariadbd-safe-helper.1.gzmysql.1.gzmysqladmin.1.gzmysqlcheck.1.gzmysqld_safe_helper.1.gzmysqldump.1.gzmysqlimport.1.gzmysqlshow.1.gz/etc//usr/bin//usr/lib/sysusers.d//usr/lib64//usr/lib64/mysql//usr/lib64/mysql/plugin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:30339/SUSE_SLE-15-SP4_Update/ab0091404d14e741bd181ce92145794a-mariadb.SUSE_SLE-15-SP4_Updatedrpmxz5ppc64le-suse-linux ASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=da5581e9b240e88a749e15273d502ed718614431, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=bff0fd88258ea07738a0dae650c7f5c7b35d99bd, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=b8534bdbca8a59496edc9783c7002c28860ca681, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=0849dda7bf16d546397c16cfe0f98a774b00c629, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=82e5a922d8aa6594e1dd74d4a76137184fde223a, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=a937576729d4a5fd5e3860ee5d5a2051b8e1c791, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=16a6996eb645949eaaad9e20a5a5c7d01e7028ba, for GNU/Linux 3.10.0, strippeddirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3ca84c3a8b29e77602ca4af3fed75dae0006610a, strippedtroff or preprocessor input, ASCII text, with no line terminators (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)#0=JW[] R RRRRRRRRRRR R RRRRRRRR RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRPPRRRh@C!ȮR|T:utf-848d24232a737911debbebee2e4839511fee2bd74accac1837d07df71bd76639f?7zXZ !t/ ]"k%hASDui0o%HQԥ/8E. enal(,ſpDhiUZQm)J볘y<3FuDsp,z]d-z{`)Wg;<ɱ ggSL5YQ}nJkͯGF궃=2WzǰCʖƘ/ c%/-Bk:q)1D8$&_A/̈́1}afX^XqT9Q{9_AiZK;7`v ʼnn}V;K<'pq%!U sнg zj|9AKFfG{Bxw *6p90V:V)we;?ob7Rnuϲnj(Z ;_ft"":fLzffOw[rFbhp"ۃS$G\ڡ !?1 _&Rc> 6P`C}:Ftt>{/6c|˟p^W ȱ爧/ {n$NnG)]eb1 zhT/;!/ dfʛY)VcU<~MKlrt쫮0pf_sAX/⫊?B*dTspC*u2g5 ?ɅXf5Th\s|-vJňTtDl.1or ZbZ@WГv1 W [́,EX~kܝOpr 䪭N! VX÷ۜTBgԱ#Co/5}-*=RԜAKhOlPo]Γ^{dZTv9|Bi\I؀T*- Z\r͒,/ăY*d{d~:{ ͔]xwL@6w,'LoCM9nƿLw$$XLQ|;QBr;։^H$*wjf5t*3hmfZah́9InQsh_*։`ԖP|~JW$7Vjy9]:b)1D#q5[#3ۚiC {Uk G 鎔.`M78m# "ueX4r>% ?Ύ7~86XHlHo TH!#콺}o޼Ɩ ߹k5'E9jUmA} 6ͥilFsdaJ-&Yx]Y F ;<2(D@a9*bmW Cp4j2SbPI˯75RwKp Mܓm#|1,`*F ` p"ͱ!֯Pe\Sy[)W'Jh.+XcZ)LoWUHI@$1 +ٮ ܅;|[&iޕ{FGBM'GoBBDq)<>ڝSƒbt)+}!qqq=o4.GG:"uBa5?^:xJxܸ/'jC(-ID1f-Ufc=1c/Pc*Im 5?Y 4x|OHiEivc>+W(p%[zZLy3Eܯ:ٮ&05[VֲZp#-'x` kkHeh"a|0++ǵ $w|NlY.O]K4%<\$)d--h@Ez{9bCsQUҀJLQ |"bwHDhV@+Jd,O& tp6@%f#W6ةZuA. M< "Bg^q̌M"y2,Bj~_D$Fݨ3/"ʳOC)Gp q9Z'qGU;~!B ^q+JI>+Um&jjS *#; +#=ͷv-;#[0]c:{3:EKЀ¼A7LID_ڏ;#֟C7{c Lz wy1QXPel-ϧ/]x/ ʩ'q,mm#dˉk\SӇoojU!*҆_\p]weIͨU'_ϨWp="A|5b"RɽZUY.|ia^z;iCf;:7Ǝ/&Z  6nu&7"WU܏.^3 ]&)0ɨ}V1Ȫʱ׵3zyK~m*H7:-?(a9a':3W|=; o$Ey] _6|8Qew:K"Cji;F6l`z},g<Eb_ݖ&Y5@=)5[Or@I/.ڞl5)2@[Cu8 Z20Tp~e3ZϿ\ܰȣ8ͻKdW\#i_ޕ2j\[>p$w+>f;CO*ѯ32WHS\r\0.ʒp%=5d6zΞ. GL<UX.\%kT(ѷ*WCB%!zx d!O-#-M :Hb.\{c N؂Ϳ,dps7Ϥ^PHR̫bZbl#`;cِwS78BDzK ZɼK- UZ˳ʄjL ]a0 (~2K3p&3bQ^Or}ay8J=V2g˛Y>dM z%_Ø\k }Sl\-Q{$1, 5QshkB <-UX(7Acvq6]OGv!>e/DC0۠h$xP(_i#Z;tH Gv܉-d$mR /E 7 ŴvZeX ٤#@*>8/WN7۸<~o@Tf}j\y({VdvO&Z`U5w g1xJorX~1zcT%ڞQZ0c8Mm2TRKX %7tف GYWB MI [vOI  ixoӖ$Caq{P,VSkaxv>jMS&$/*ψU<^;#eP,Y3/"ᬢf&1Pn90FM[uSK xEhh;՝\F.Hދ1AKcEM bbk\~af,pxwR]⡸T{#FfhX'!s]Ёz GAd] Wl@Znj$h!Ι"'o*W 0zh0GOaeRP\7U8/3_b!ƭuܴo5c\zwҍY [xQ&^~ħ"m0Kϕ9h:8 >(Md6]i0;\:'x+SoquP,^̓ ـWҔ1lfŮG?8:NW9Z-uhߺ/b 43Q,,-oDiGqqfb&Db#U\RF@x3Tt%㌥|; 5#uA=ć5q+N~G)x5U3{_›g9 [V6}LڄK`rq!׹ۤԪ\ }mB | /N;d®tD _-p\|g'M֡04jyUN@A L!]4kvY8D0n8Sd.,W:?ݒ cq"9WU4UԞ\ Lw͠ f"JGJa[j- ~! 5q|@6q_cAHcNo;a? kML%_Y|JZ*= #DDW*qZD=dW;*:-def&]]C/'D2zȲՆ܎x$m9jvrlڜ3|;&VFE_ҿ2MN ҿPk/@3zCU(g_;YXtˏƾ?uI,VUߔaӀ>J_!vL@gh-q® V7vr}$ 1_k\C.6Fq-5G?/p)fBh=]?yB1D %*+tD=0_X4 7fm1kL: Jf[@bC UyߍOB(T޳T4_8qF%&rӬ&H)򗃽k #P $:7~i0]>>r_p|jXj{:SQGh9n 0]@ivns58JX* 鉄ÛoA&Dii.mbm)s'd] )14&J8o pvp g~47FbZL03q"'c*Oo54IP-pk$ȳ| g]{o/o!Z6F;8"9C:1t0Cj/Ex[moCxi t jS™5; hJ{*]G:2ͽ ދ223J&<} m)nqsrD^sŐ`ިѓg{h/nw$-d[aGr\CA2chd*ObWdYj Jb邁{CBHJ#+po>89l<߶?!+=G-lIgbxÅ6{֠h_cݛ'IQ# &hihH-d{z:ŮD\TK.(Qdt,&,7m.Lg C/B7ۀU1Gr񐁏EHHp+ ||߈d:[:s~Uru5c63_BJVrhd:sO2#;tt dCPҟaXlž(c,cn>nT+G˅m^4W2ڲނEj3a(%9)zwo?n82B!7E?ϳLu6䟺/L}u[Ҵ+r|4z76x|K<(Tg-R&2VLr(Wu1bd ?7/ X5Ҙͦ6{yf㸙C8_?:r`B=kw<L?]|#|at-¹)~GUSG!MloX_Nv8r aG鐄 q5[P|<]W<^,<};9͉sQuAH3!Y` c_\sn`?O'EArI2'|CiBeBa42@M.3b]N*7.kSV}„6' DFT ^  qB^LmG7K LB$%/ПyXݼ>l?;nT7cV ӸH>Go ; չěy{ pۉ`瀸lVPft$Qx Uq^ͳ(Eߴ`<*zx0ɞ(QĄ0{)+ y 2䯛0zHIާK*FA ü4x_sd*VdgԞ({rO#R_Z?G* `ḁ8Qtӫ5m1 gLRkB M acG]3kCDNV2<xb~1S;+1 Dޛ܉}ҌX(zdR8oTahKPX͞:8wdӕvD~ܥ[??mU[TF0\gIJgy\>PRp> r~)"/=,& @n؇16צUmR6AD:z`B5~(KJQ]pAGQTJ7wD52zm<"c%Y˸m|6rH?)+ܟtkiX}ɚe4b'4 Ĥ럾̑|! 4}'rNMaݧkkނdDž,i-"o=f}0pKP 7yW!T/Yr#;?f ^`Ǣ{[XL$3v)c^@e8Xf7~{2D43HE)s:#zp#z^`'΅2szIĦ'[wB H+Su+5`DUYgFIX%P8jx<=N%7fS'F³!-3@^NzEسU I jN~lyaO(, =6N4(KCsi\ltpCH6迈ކpaj#\ j >1s82dva7$iNXJUE' Ɣ.7ڵkfq~5?k q8z#R2xs1HfM] 2a%~L𽾹u!tM*q@sQBẔMڵX=jEۘ?KY| K w-m(<ؑs3gB uR'Ai1.+TF*r}A*e[ŴXדd+H{)ugwF<ϛC`gy`=Q!Xw}|\ >z~kSujqcֻVL_PAacB^ Ja.w{)Ɋd`o<Zv|hĺ+ӎ΍.WE"؀>p#Y)Eg_R>71x -.b 0 #ȋ O?T0=u<CErQhO MՐPr[h&U&.g9Oy~ U ' }MTȉX>HnМDie1,yPֺ@DEOqYVD' |Mđմ I9DG]<:A L3Pڋ&Jysu=$ }BR4 g$dгˎZNJfӏԍoi$dʦ+=k‚ qt«ZS~ȴ`S4fNc33;*| |?P%vM+/[eaD罖ratfiAӷ).Z5ԳN3$&GL5p$BU܋ RJ/st.pa߹X A֦ fb7n)&M\8^ك-C'Fj/n;yA5 ƶP~3NdW'W:}aF(|3@]#c43pd'+'Q +ͺ,3]ȆHz1Rv?F/كR1"tnik0*gs҂T ?^fEoYy9+h_vyvdy3x{#VjХF[ a,Y,=Z8=8C&[e1{ ]܇;X":Z ?T+PБUw|=eBz̛jd fDF T:{" vEKT=$}Ou7k;PS|Rc!)j7R,}`BYܹ=6M'cjAM &:Wc6uk/oW$UN.h@.,8n7.,#eI˼On>!p}_{X^#ds>1) (sXI atQ3Oi\O'͞'Q[eþ$Wc䰳qU;8, +"Lp0LxTY^9Be9ەnμ`(ȸ:O="!4aDfTs|D]/r9y90-{lt"$@amەdP2РsZRyo" ޅlIӶՓy/JZ7MW5z/u:8J<1Ocpn.`dvL6dȺ9'OwnMQ#(2/ެjPբjf=wU1dkAfC)}=:si7z仯gZ+NVdEՃ4Yk7UV۞T+'Z˳6&KX(]ji\^{)3o|j 9{vX9Ԅ"5oGPM-x+>B|=~Vij ò\lF6Nl|f!Uk]Ӻې YW5qxnڪ𯗨|4ip#gI)[7ʲWlY/L;)ѹ"PE ck.3dĊ_ `Z|֛,z}lϧhk9lm}Mm'z2b/;/= ʒvcć~Dmf2͕A>$kɨOC!u"i#i~<|ʉ':{}Rs43J! !}$S̱ĦxFo3QETQAnhGQyA⬐\ɐΣjX_Hln ۢ ʉ_Re-lo܈o3n^P,DZ^2 R$'Ka. ;"}oUbėk BC𦰦H .O0/P7M*.w[^>t-`Ro?t/tXG/Ƥ򐇈Wov5t;rIQőA&w)HZ*Ӊ't l{6NJy`OJWdX1zӓ v^)^aO -50C o'v+\SxS>[ `BEf{⍳4+2IfD6ۍWǫ)7}/ìƌ5FI[uyKZ)N _! `\'^oքn[?::O]6J.#?!ŧ}T!V;Z 'Aߖ &msGf@"^&8|ʳ<6#ū"SLoNڐcqWFuC%2:TXw y/v Ɔz#ALtkϰٗZXgq%eNZ(Ao"lS_3|*=/L".O2 i'ns?qD`Dvu\Y6UgiQ n69X0|cS2A#JΉǰy | 9tTgVbg[Lj't++̺h=#1mcd.^Y"c~, *h0'.n{жzprG pVGJ)p Uq tĩv/0)eRD}^A,6ޣ'~ $~Aԡx̙w2siKvSE஋M~Ѫ, m~ @W׸}0*AG ny?uV`҈E 3`HIHU/ op2Lo %6QZyMԡ/TIMT= ʍ$JIS^qWOB^Aqb'Q̙+7)j'&Qǔg~A&Q,7}38a3[Īj^H8uWWa*'3Ngv8LvᗘY8a~Bg͊\M]sK!&.kA_H>77`&7yc*isyr亰y2qk`GVk JǴ&Da/ؚvWsM/L8nf+@V,DPQ.޹qcCИ-C rK$\57UuNw[5e/}S\2}0' 8.Ғu/{oV`ܢ8 QY΄X룑gMRhȓü3`jvwƝ'W92 ?K19  ,o͟TP^k??")w!kcnaB2V g&,}H[הR6㪋&~x|#1tɚLX"3e* gDJ(by#qP˧ϸ7_ gFte-qo铑h{d/ cIzî \V>1ʾv2Qg͝Գ(^n|umz @T/*jYS7Q?,VMjN X OCw8pS!^fॵB:4>ڋ[u{۬Z}D?F<-Č|'iV>5*cEOՉހs&kQv EGkZL#cz0_6U ,[-#ȇZƴwgXGfs8rHn3c.lD  A">9O6~fC2Lwj l5Rh ֽb>f.*~10[/kX`HbC/Jڻ;;wqNjl”̓q3+nLn4w0dSnHe]ptf0y($D*zdr0O&nտq*y"oX+0eɢ)Do9+ `0&|1rYq8&%$a>pAzNt+]H>ݧ9XT.Ѝ=z~ ZaW, p,v蘟GRBS*H}KĚ@ѠK/?jZJv.7˽ejAsѾ"(our_eo>Iu9>u&tJM B'Wӭ1.CUMhe?'w9uU]*_dich2C4=kUrGp=nT3)0 Laj=r4ÖmD^p4G xDXɭؓk^kЮ+(D>H3b n!hxVzHIۭlI9ZTWxNxc"a9НՔ%LSpyZ}ڻr:cmkpGc_{*Fӎ,Zβh/^v,6Hͼ2o`Q`;s6l(/)mARB5yEh\eqYؔPQa)Ƀ-cMl|@_ߨkL¦gYBGi' \mf^AżUQ)&"ۣMt29@p߻tRB2}12ZW?Dg|/g:~|i!*߶TeK:*(1"Њ1ju6r'gx ,`qUxr8ֹ=_kP>Md5ޗJ}܅80>&ip%UJcЊ . p}p PST2:Pr @(G)7Zn6{Z=|Y?׭YqKHĘ#ts&`8RR7=+{îy[Gןy׷;kf=1E|1Pm?1-'20-#/6G"^Hak/)rf6l Bns<@loo08#XLIMnh8xN&U#jqq؛qZ)ȶ1%˳Yw%bw0S#p{IԬ.#/KtO3V[9az2GEuΡ5!"ivҢGr"S|s1cc"g\@Eo_H9S˲湒}7O v- |ͺQMw72!hX *gn{"ZGmritZruA0?$514$hC|NsPoL=T&ptw4>Be1eOMT*cU=O؆ën5cI1jR.Ǣ~ C{o98TDʸ7dsA^Kq.k aOA:)u[G7NKz4G+N6:fH ] &x;絑{s4fYb^NebW:C/"`X*2<ש[zgaa+kNnoC ׽| nƌ-~P͛жyc(;Ng&3F&nHaO0rz('̰tONy}6mln;ZRG1C"AlLJq t]dj̋REAx^l MX.3Pt%Gz.㟊) 25ͪ4{Aڇye[J̌f]~mv#F40MkܢCāwDRCOݝ;JP 33KD1p-D ,[|G^GK} Y_Qjѿ {%JBYtk6+S&ЩKYbx`Щ>.(:j\v`>vAsОEE8%c͂/A!ȓPЩm@:'{FAe\Ǔt{e-=Y[HW͊פR\/IN+Kdz$s{MKroD*!b"l v5*V)L@? z Hay\M]Xç=BMD&*_]UXF <6## Qk6䃀u{g6 zuN;kEhԍ;lYnir)Ii3dXM׽ |;r:6kϰDSLKj`x I6#dZO~D=CiFx?]]nNYǓvn *;hq !v74.yZ\QY4KkA /iﻦdzY; qtc 4Q+PAB*|o0ԓm4@xVH{>p֕J q\zoP{o~ 7fp_6FNS\W3ϩJp2iҼ4(g*jW>J%0S{:E.bNjo7 xEF77w!o%1\GAߥJCKN8] 3h.煩>M6_a`ӼCMU&TOwyy Ӳ BvD(:+jjE,tѯ"'S߿N$T7?kz} E0Y]]M]`S3JUF{nvpi`{( s-kD}0 ʝʋ-(HQqP6(+si9DV{WF3,]̺ʙЙ{BdcI#gwܧ§u^#fBHпI_A9Tn !3pP WkOЩU#C;?!1pMe Ϝ;rT@鞁;5NvçEeC,_KFyl8]/ePOqϮIF@iQU _%QC7 nGHgTg.C4XݯxOX$kiiVS]꿢]S5js0@Vt{'N$lk~̇C%vY44O&Oˮ.l4-n&rEч>֔ޅUtMft}Sr*TP8?v g64:"đ5CKϪK!)91<+̀|*;C*󳮓VMǮa^ɓf TB @ \oFĪW^Bv< w E<<mYu,++UZzk1.: 9YÕG;?-`ʚ 'R8 `O]?)Ć0'%r,@ ThxN&ݛWOYg׈c>rtwjZÆ80#j>-(cWt@'˚;ɇSJ뜞y%1]طI DX.%sFif8Ѯ[&_Ɔ>Xp )],5mev.GSs :W绠s̓W*Ka%* }|5MB`*=viFMtQ7sY{QIv ߻+LI!oPQFLdsRv Ew_ rM|!?S 1r.0c|4ɚ*oE.(JSw;SfLp qc{y&´Ѝ,7>>L6r1# {ȕ;oD+8R1$lb8gbQ00^THbuiR .;Ky jX8*~ Q*8^%Jw0GbΪ3ıag\6 UskEuPh{jsKAZx.9LμÒ3J2!K*ɏZ}Erpc]zyn08"V#?*r  *+ih([ljHKM ys҈V@ y_Ny |zk9_u(Y.$ʻecJn獑 [xl֢@q!}d1Is;>gcM-#Q/b傈s#P(;2ȀB=m\0x6[̊}Ns`4ޒ+3LX!*(L\rZ:g8p \?94sp|@R ܾP{\'ib٠x1mKT[ 'dqwۉ$DsJgCHu!Ug1lgZ*2G2ҵӏ`ЕF]VՈ-i%G1|,~H%iGĘA-,B+Bӆq[tO&b.36 7Pwl] [5f% wo h]# u g7h;QWCUīPlg,<gapy(Qz@VԬXd~Jzz84`:}@( yI;R(g\Tey^sl:|Y,ߣʶ!H!|6u b=9Mx}ԇ']1M$gyP<`F*&![+N61LkCgZQs:֥n>9vVA0ٽ2:'gC?@sw"uQ!Sc,83d|q^Txx(m{HP댓jlPsb,.hf7[BzɧP NK-u'pZ$hL׃R!pS WyGM[3gKmZIvIrה6%I˷feUY?қIڽ<,U@rtBvU#{?ڄnsZLVcH J5ǵ ?ߑGDVx?ZlaLHM'}߱ ^&|א2(26侟`NeNNq ?v`䞥^ٽDXf}϶T_sNag+Ǹ M?O8WdF<|r+HQZ. vnx~Ȱѻ[.|n6Î&b]U!8ûwA0*P|k$4y/dY((,Qa58E=eBb0=S(T Ԙ Q6/R;>yO<05W.xyb9<701.Z:j-ٖ߂oq8{-h2[:t{m*m<158B%2 Hf}kU+sf 6bjP=F|ڲ }}+ ta 쑯)n8;F$N"mrt9hS On\P:|S] kE"ḮПz(Dn9FOt Gv|`|Vm h2&d7F~cBh5#ՃitZjhu?ĕ4-JGJ|]Į~Yk+sMd="S(1b'Kl!S9z 8w#}Mg-Bso}5CZxm_ iX_f9z~(< TE~ڍ1w`@cMV:ч^Plk尩rWi MudzT1%E[|S 0_zuFܮ97 ZpST;!n%=~K)!f?!d`S1bg/9b9D0Q|aǡڻĶ8S癋񇏳WkSu@icݳM [~AՀ, Z/1gGEDtuTu&ܒpʰ*5j8}GD@Mώg1Q⽕U_6o%7ռ&ySݘ?o1Hj c '->}gdY: NjN"={ ȕ7ijgA5&fϗ{٬f>x' 5,o7i^@JZ]~Nz0i! jFT67Q83VJWg9c:[[5]x"gH:_&:ӧDD [X"G1r/~=h1#7}̾tpJjA\H4![ee5A?K3hpcv 0V1*+qk{m8tPJ%w[tpЊrײsaה{:У Ť89t(qA ـW¬.;QVVOK9T|<"ϣezc\xv0&oЮ5|/ ̲څur_rӠ756qlt6cI&49.Gqṅ &yO6! J&"+8LN ` l ݅bbC+@>oeƿȇ)%TQ4K W5%7oM ߵwrP$Z3b- U#(^DdSfU-'2Ѷް vOmK, [7Cͯ ds2|A}^[\?c~+h/a~s1-c|x (J*\0@ u6b[D0x٣VIs.z$I1<.yB?1v\q)RA춤8K[,:d3TBE7v@Y1Y,]`:~A>B)Ի׶|??~ F1_sڙ'P:-L)$8 wp2cgS /Au1RL4c\Ͳ s~]7В8@WN?M 3ӱCmq bIU8ms€[( OlI_![Ȑ-;N+n9ovW@XT#j邙'|CHq1wm=z%},SVt)"LfL VH"uSx|S=\5\G qmeoH%DVQl]({/WrhL:!G8@wDyJ}htV9eixei9z{Uxc KeL@xsx5j d@J=ΰ'NveM|{f*<7 К;J7 s‚;g0H}ڷ(ݓL;'I'صK4 69n/՛t ^~K.^` v'F74QLEyF|1G|J|Gt{[45bo5pYXX73 k'0Ez/aOf_B/")vv>7@+:{PG1g|Pﺦ$u> =fsh_;ox(8-7dL=D?пC𥜆>} 8馭ւb!:!FN - ;Yeo޹BGz @ָXqחJ4aY`̒2q!X\= lbBIUY%Bʚᵅ+0* mQUԴ~>S Qd| pxa/.C(ow#'hgT[vZ6v9P]՝R+&()\`o+zD7& Z1u[082l#'Hh5WZyu4.ֺmI¾lщ a/*=mYλ*#۰ΩhWh+@G[&NROpnQꯟ rPGґV T$'U`c e5߄xa;I]5F{,e˳gOz :A,=/b^ռb~']Nf'#Y,Qm o w:k[k_zP{0Ih?J${ufpyX7l'V9M; _&XɧgEt%܀U9´A\oބ?϶&w/bFj 3MlWK.]˧N-T)i=+JsQ'5ɒq ԏmU 3z9!vIs6}{,ȵDvfÇx&r1έYqzx؍;hQ`U.X}'/ԙʃeKO¯4YWG6ڤ}}ѐ: ƦY$t8Ger33wErIqډ}BL,4$O_Soۨv0^A''V#%cmKMzxz4z ʊ[;-oH tJ[xy oφWf\8QTrBDPo};hT"{21:WHoSb9qQ9v,4"16n*$ oI٘;пe)K0 >"͠XlF)1rP{:dwGhE'h@nUɲ$iIpG9$.5gyIjΊN+NSF$5w. b~AL)e#*f+H΄\u@uDd@5;Yciϋ: d1F73ӟ-m|ie<wg\Tʕ,AsJ ߵcɴ,ٌe[r֋&m`\.\ƒC)W:DPyMC;bKJO|#$a~V*QL ~E&,k;06M oIB3rPrT(f'(rs=+!,hB5_QڂH"Tu;㞮)i~A \#$%6lw"qD[)r?=FYn2:pX.~}qJzy aaV=,qJ`6 FCڌ uC*)ڸl3KSrC D|9?/ Bvasp@~~JISʾ*k\RZ2a}UICYngUlF3QY{/ufQQZ2u) ,8E{-&l EpPqQv3yCϥ9p|hy?&#+1dU.=(h|s;zQ6n\OMk.s^$[N[1D:#_Ԫ3E۬ES@|F? 8oѨN%Ӣ7|w/l 27 fg X [<$Ψt=vVg%1؝(uzWm \WV}!vq#^qp9fvו-"i( fD ?Px*},B{"n”(/ۇ#{racǧH;VCk%@3վˢn#$Dz+/zCnd>r4dl^ bblw@QZ>0@I$Gza 6CwA:8l"+],oՊi!w"RioV$a#Hy!Er?.ȼh=Q'::jq PG8S ` u*m`|ߚJ3&6,ј8k٣e#! sءhq%)Y:tDԛg4^_}G:!J[bߠ(CtVwVXqpt F9 \Q pVyAJnpzV ,cI'=+ћT6 '?;Y+Pؖ&l:Dx?4]($WEP1qY.7  m?VMLe6@PB1dw35PD.!fmM<yfνc=[u'&Z=ܚlx/!@KZ,?=:ܹxN9B]Tx:-vFd.L# @Η|" kgm^jS(}  ZF\¨ |*atZ7T qEa-뮉fh?,^{S*ʙFa1ǣ٨H`LԇXBm{o@[]q6QԾܒ1b&{edZh{ '%jPu YMxCa HJxz $pD~)N~rUv))寷ީu"o`+*r\䕵AnyiQMP{~t,a5+ ׅ#x^,a'K0@-xQ ?T,K)i%:)0yFrl)te|%NJ]msKp!25}U*8B裃k?;gCI>?@BX?Y' /_vfH>S kKD˝lU~>oSO/ڌuz/ITK0Ƥ=ja`75hsȰ X:f AjD;0oGH$Yxmg.=oHtr<׮$֩~.X}T#FA ߸K2k=3GaVUZ2mzqۧ;8[0^su y90kʍVyv4cyqH XTh7ՍܰU!+cı^#8Sw!5$$N9ND΍GVH+(*^>6WX(+á; @7G"K-&5 D?,ypĊbMZ a#z6L<$ݾvQPԼ!LDz]吸 pƮ\jvK@ "a#/Ƞֈ4%^bz!(ZZ˒K!Uq~VnʨM/bbqkM{v&EbcZ $KtR̅]ePW$ f_r[: Cfɣ >&-@QEz1I>#mj$s1B=D0o}V=)OlY^C]zt;GԽ0#zPw%լh,jhW=4G^Q' 4J^V_Q{@#7EHkpv m M^"io 7W=p[(%f|Q{VEEkbԔ!={NS֡dńـc'.*T_!rz)s&H 5lǫ%;{S[@:5RǙ;z Yv1+6l#0CبZA6B:(pHYzTz;( Xkf Y^o@bSXRSkU `X ď;CXpl8ǀ=c^flоTl'F91>8skqnyDQ2ëu?,@VR3gg?P\z7֋rsckiWH]!ǩ<᯵ngYr^SF(w=&Κ;87A FICބV+ER`,m2r{Zh"TϹHM_rF( &U~ЍS-h5(IZAA UeE{{+oLnD1}}6'dEƯ=+EhߔyNq؞n^d ĕV6˦;P.:jnp{5 ysVR,j H0N:]+d?+~C(f$9F{v7zٟ}8On'x=9h?{bb9!q)_4 Ⳙ,Eb)L\lF[^ddХ>{{yda$B3IiRLH$~ZO|b1r @yizSg`́$ H9uו+1ң{4oV/_5[Cmiɹ2 r(ڝ˼ a ;zcj|WL:Yg&_ S5y@>q^4l13coYɕZj:0ŦF-fWiobhzTrc^[`RL/^w8l4Kь6^\"d &]}EAn{>[`AE}ׄp LCNaE:0Orzp fY4 R{E6H߭=@0 ~;,Ա }<<(U-WTY4wfzD@3SYhwi.WRxmoHkwRoJ"Zݐ#0JzM X[ͧ@ N30pQݭOx_`yJGTK.ĸ\q&%vɎU7EKLAt)QP|>4~\z`r< +8!k1[F&^Ldm` Ewc'} ͒8u*1&Ѣ0K?nn5^lhjx|³c4(uX6 3|!aDԹHR A'3J"ƛ)7́*ʄDF57ji.^c[aM4)&I^SX؏gZՂOus߻G(Ej;t_&I>k׶oZw4[VP::^#uK(ъm5_XTNq°df|Ҧ9f;@`nȏH d<B Yս]xceZ5}ذ#?-x) %syI׼Ӏ13K@H0;tb0l0Bta4Ե5} <z_EfE:g(fRgKE(ϸw k?! Vva-  >x;IY_&"^Q9 n{e[lgP=OBAZ6XQH`gZzEf-L& uoHVUh`#-pʭmrguJk3V$>i@ q5 RSwM]N*7Nkuᛁa6X݌4ߴX錞[\Ϸ{2f;$/1DS$$%ܝtcۓU׍J'Bح:6ZhlVg҇+^F#CO~2eVhQ*BtѴ<AC4|J!YIق.(@#4Fd;ULh̢fцAIQ(33fMe =i(z $ ^I<O|g?105Csno+&%Ÿ&Ц$agͷZo[alT!#4}A)6x:|kAqH:J%~5<jiJ 1\&٨7dEOޭW00Mp|g,vjK̴sj_-IN6JoB-7cHjj69қW0Mv)W\Y_rPgRs]\vr!z0 96p|FI =l!4S/U>Ć_ !Eݒ\#GLtd(0%6$'W0?(9:Y ] \OW~HD%["T*(!ۯ}+~PqOYiTegwфaj,5[y& XIs9F']d*M~[=vD V IcfJC᪠ y E]#L`lo^V4G'_>\FϛgO/ܕEOm̐YG9g|F> 1yXB},CxEZYS!Km-wXZ4uG+ij2},L9b H5k-G| WrB((.M֓i &|vnK:v] {_uh8o\@DitG" k{gn+!!@2IňM bUC-Y%J~w?U;+Ä\_F8(D(\h].oHۗp+Qd T cxC ɟ/yIN6%+_+)ef \|ç9W!j%rr=uDY &聇(miL2=pGrSgQ<Q(H2lDaWDwwC_+EC~o1ɽEo=~} (](4@d ?{v34j+XGbhPvSw$}7v>t[_NB/N K,oM%۠@Շ%3΁O&loR<6У#{qL[Ud*TVE~:#"V”JF|oTNL->wt]}kω|@d#nq|WŴ#^oa?1kA#/>X{v*K@{*X|śo\Ө"C(t;I=V lNDNs->E&E2)kIAm/dIǾkXt-qjsjDւ͢SzD#-X|z5?H"=<V _C6F䝕PAgov33CI[B(Y@=mSnw!я Y8^cdE dD L MCsIŘ|9I}0x4F+N4nJ9+TM*O|{w|lxH|*(5f2"ņW⿙B ڌכ˒hzSY´]Z/qٮ`X(,. .B8kcK,@VM1c}^Ѡ [%Hiw"K ٤D>QYd8⌁e GBcW5m7"K MVXo<"Z qɲM-L95 (F^dWj- >jlZ)6$X#HUuLWM״1'u"F+9cby_~Y*D[;&Em u PЈ|> j?9Gc(>g!f73N6*ב,r?i{1n푼ca᭦Wj, q@ʵ#f⨬YZ}0 xbpv*7 :*y!.$5~c~4 `5L% FP7&b БO>uȲ?|djB~5*C]1x"BmZmmOWї}LcF='++/A& $w] tc&$̏5`%,wEE.ˌ9؃dI|Oxq}b~U2}_\|dM;0f ]2f25{}Q`%^M3x9j^8Xr7`;B3 a]oa, p F;vjUwa.(sdW* d_*NVr_s7tToµA*:_}g?/^KFDX0oy]yTGYYTQ6( X;Oϸly p4#DZaE^핣87K&d.Re= Ȓ\HH|S9۝sQæ"{%^A Oaڸe? ,9]kS nb"Qޭ'¾4^krw4 Ļ*89g`m9~Aȱ #:*:B'zώ$xTipަq)s s(/ J>A406 y}>\-DQUN^!!1r5 +DF(+P\0^հԊ͋Zn2挽t1p9 TR[\j;޴{& :-< L,c~pȁ`T:1ƣ7u" avrZAxq43>xǫ4C*u+;VlN?~KZp3M5t>Ix_Oo¯pY@A:rS/.^bŴ*ިE~g& !no$3DcZC%*T'H8y18XJoviA#lH\H/9N#CW%"vFv3JVWxQnt>fvڧIi@]kn O ![8wVPjO̢ k=xf otM(-aH/](=ȗnT;qq!V`7V j*JG꧑`;BRQ+1;Ա3O(ӊF I$_Vi`ZPx\Vح2 Y<0&EUKTvUA\-^aXI}TbhaM@K9%.YD`+vLiX++|qoܟy/8FKȠf 'v(t׳fiE>p!zHx3IHlN-xcRy_7("(.PB`~JԌ> n3OcuJ彨gYA;GͩeMEQ[TvèșLZg8lQI"06G+|MGf~o`xjļHU=+5,@JZvũɑka$$s:=@e {T䣀Xꭊ ſ'1n2 d%^WvJ$ɒ34iCG>3(u23/߽wWĝ:LX:ߗܓSvhXImkAIecv1@q㩚>?p`M6[;q3iU:9;Eೖ]!r+SOlFp[1UZs w ;J"]Leձ!\/2 fF"$dX2׾;e&>DOKl\okLwJW ciT'vWlM7I?PBeުD0veBwJfP;{ҟ0z?>stG|mޔP /Mm06}%f&;vmI28ds67c6ams ;%+)x}_|rJs Rd,>8(,/`:='ZX "Ho,Iԟm p),G*9@o:L3y4zS 9 `*Q̒唚wQUsbI^q W-yD24"X&1`j8BN:&qqsDW,LY>8qaռ1^HBY^ qWzWKERQy.P\y&m6DjݳɤU 1@̕Y5XXFSu C=@rs%&kVA%CcS.F ⵣyܢy#W XOGBk*<1f[sT┤R+Ҫ`/S5BAvNjh\( $ cFubtllJb0ӘDiu]∭ցs} Br@(ee r0}!>~=.S o* 8tYl.C^wWe&5G'ʫ{D/،ąފm\Qcе3pD7؄۹Ҝk 6QjBS%u^0joVƦ }RQ6zmf^gxP'@H ߤ5LNkOH)UQl!nS$2O)=& M){ fl)}bPB6KbvKb٣^"  :91KqzbSn}l t(χv-<\Grڹ/[rPVRn)v +,NW#q z[R" ڬAF))Bs*./+%S7GBўT%33 Sa?>Qq,P{ Y|kL;oώe]v/P6F Utc~ QKʈ)MOIOy|2߅ N>ݲM߁5/"nVt!/^Zc 3B}*VBkPC1aY(#PF5qWG >"PwoQ49DFvOG>3p,)vXX ӃGV/KV!h60Q<͘YE|UQD&i t˕3~'?b.I[v§]JF]* OPi80Ի6eY##7܃nTyev뀃>?d Z ٞ@gCS\챫Maխ࢝.ŵz |됬:t#-.ce/ʿ1jʶiBlEIr] J&`ɩW^cN)skܓNۻ&Į.(&g/x[dn14\b6);):5 qʅGKr~ڭ{u+/r&?У8@} ?2j p:Éuҝ?صUt#ɸIb-֧;LbQB0," $K5CCIv\i]Q Oe q>$Y#A{b^M}G }xiIu\iOV߈d>Bksl=Uϟ3~_>a4E08YpAO.k+bGjХ+$;PRrah|2՜9D.O|@'ӴlF)ftXA{px\)n4& VNr$;iS}GP wFy@L`r_9&w錛:,5^-(|| 9%3jIߎ{(89}ЎՃ0-'w au &F1?G-B q6;߇r;vlԣSB$F4KQTG?zm 5AS5PW['{cѻrl ,$4MIi!d{ ڳc5 !QC;@*).K=ϒ8o|)O g,-MItջH;6gxGɑ">J(4!bGtJ醖Tne O`k ys)NoT$-<(ZR[+аnߺ>bFjVY&*V4%Q;5nipogxheIX-V+|t=`Xcn1C4N2qxoaH406d¿rտ|r"4SYXjHtyL,aKTz'OKX~=.Dt$Rݛ?e7 ޠP :UG/A>j(O1% 1 0W9E=aSv98B`ΗQl54  7orwm0ZjObBF>ZlPUG(iK?<Wx!vš6`.@|ҿC Ndnb nwp@w E0j8z5䕖Ɏ _նbYq 8a'U,{" Ą8M;)P^2 ?ކK5V+Zypjn3ɇ-1z-Ϲޜg?y#Ek2UBg!2P?Kb82LAc:y?F07A?%Ot]BQ>Qt ⎰Xb]D۳ndx(@rY>J*xLa[^ᓏۻ2$ʶ~0X^EX=3vuFxC23H-K96]'*i{CI?obc[]ŶPb*G{i8W૱>~j&g҈"GDM\aBAP(m062QXQ@'7\3g0u\z][e*t뵨lVad ^n["=T!| I:qlx(6sc K9D?">Eퟂ#|p}vRRf*$f ˏsLVjL%ܝ|-|:6%tǠbl=gcJ. ,&c>Y$W;DNEANn22q嘮ַLe͛w"*oyª׮[GG6e{;$fikXFbL3qj~>wB(rcKu4N;y/$Dȅ!c1ѨB\X%W]CK囻(aPclb MN aI(Ja@I&nr063(_N+B$OI3җi֜Z6A ؂d 1)xED-|3X5^ĥ6ؔ宷(We/g%1pVA"r3Oԫ%[öMȔhaON%clsDoQB+?:#⻜ \?,N|1v6խER%3{94+2-$71Í)p݅SGBHofaacxЩK{FåSӡk>d5_mHAP.xT>5%7տٰ\wENɶf\\'3.- ޮвKR3/¯TpZ<QX4Ty8!3 ܋OPwqDZLS@&a, p̫ObHlXv1ט&ո9Ncq`ϚFkh]y~:N:3"{ms~*0F+~.sgjԤ_.ub}PGӢƇ =w|HKE=mG>鄾9]^ke#ɫ_2 Zд%v,Ϭ!4P39U}pɏݬL {̍6HR#t$HjC*o`:*;sʦ{@ E&>Xa:: _ulb@VnYaB:31Fo @ro@`6t! pG ]D=8,߈<, jM F]2WJ PG$#Cum\׵8_.%L⎖# -HUB/(; yy+'eۍ'Lvb&ݚD")k18[˖1kCQ3r*QuًЋ/9_:P:;AvASB(Fj ?{QU.2x ѝs{WcB9꿓38>; ĒJ|WTqK?6 +ŸW@fRF ?sN][R'Wb*&Bf@tGNBdjiCqդ=ƶ.=pJGhI589Pլ*姢BǑ0p!<|ʀi> X-٬RxE]?("55qRDN Oi@)6/5C$RG`8Z%H@/Bnj,sa kp`|XxMXQtџbhSSFlκt-75 qLsH[q$bN1^p͂,+ 9 Ez`ypu <B1)l{0`M˝ҁV=/Aٗ:uI& ];^0@Q5ڨ|%I.jDNW!\.6mTo ˵Rstt䜢GԈZ͌Eb.Ovqe D_TtpXg>< Yzab~ju! ^ys?_ƱGqfn]s{D3%[vakjK_ tRlDN}7+np\fϨ~%dž]unIr.˫Y,n8ܦ7'ͰkKS(#Wwv :'PH.´(y#+^+^%,k4 K}~ȦJ(Jh/d~"mzσ!, ,p;&D$ =éa%1׷ ϻUf^Bո$$ >0F-lm.aSt??!f!ɩ^ia*Ueѝyj,$%v,_B3 zq/CnGreKNDXIϔƬb%pS;LL TiYZQ J #> Iw\Rz՚22mNVMԁ W>@!;ҥGR7vkHlOn؅ <@jnK+nr c32ڌ{p .,љgTe+huL;-Fr)u6s1pu^P0$/MU P9`s;?"ZG8Tt&8Zqh  pLaarHAn=LKmzZ s=DRw+IX%kތBeFx\azz"Fa/Yn5>vܠO' `{?\ajktFJ #<5o%# Xatnw6c>&7 WOX&[[K:jV/fڲ%c+=%颳nŶZ#hhEu_/2("MAqFZ`⤨aO8uw &J7 n2ɷfkTT9lm "6kaMP6a" s²>. ZOLL46/m:k  Mq"F&,MbU\Tb{H%툩I2QO%:;([ -V2ͺ/# c5p,3nc4/ v}VڨzVZi˹{"7(myõJ +Eq m܌wF trOIߞ-q {g=Crv|PFA,=&OkN~(%(rpd DhAӨ>KQ[:'yxlŢ)G{jϐi1 TnpN]Id2{=3wG^WX!~/c|Yr̍Mwq(&8 `hq,~|jWW#gC^Ȳ!X b4n3w@P3")Uq,jw9q,D$0-^$+QEZ8iQz&9p76+}pdX=zDآAxؔPĎC[\ene ӳN l LYrS{V|8cêpwgЭ2OCj)wI( n ,\)WBTY60JXu:hH悇l^#t#Ť)blD}_j|\ښ|˼RԪ&#YfpYJW PH~"{ڪ 'x7D!49Br9V)vMƃJ@~ސ07"Y[җ^:Jrr1ov<:KOV.KD"?O'**r9n_6a}7< j{7# 88]Yo/I!V~uR+xsXC=)*dsb)S<XLk9T7c%=/@J=f6?!gU݀J$C)bmOPPS)/ݹ-r}9N\Bm7N&/)P[JsIPb(C((4lܥMTaoV鶛] 'P6%ʡ>=d`: Bggo ThVVҨ/ 9'{ОlN8p|JF=ˁw<죚tI"|Zq m;D.H0jb1_鶾+Oأ1!ڗGۙz7IEqH22`DڽF?TɀG/ !֕6MOzV}gd2𙧀`]/2*z+ C4OKD/&gdqM(. 8U%NQw+߁2b%{cii@T96+CP:,SYꉸO.. 5>ZŚ$XKN"[r͵ףmF~)jf|btͣvcwq5z!т|NCRG;7+uVhkr "6OɄ ]ьߤ0b+6,5-fM c#,3tۜeXq]̑otb^MW;XW?6h%+Sp'#K#U:QyJ} O߮D6`qQ=k_OqpN1bvyYyL+v%~xgQa/XTa;KTmNkO@,ƽB!cPY7 _^`'?E#/jCt'wY9*(!ӕ_CƵS;|YDn8㠶j]#\ DD/4xk/t2V8;T^uKLByԝb3PZViR'j z62^^hciwȔJƼWj^͹vꤓt9Q5CS G4%֯G;cTIE`O;3HICuQּs{nd)B=kl傇MOZOZ+5U=R4Bx7eTx00/+7DD'3oDB'ￊyi^_\omyPH; _Q!lZM/dVaǥ D& ,%J#Y2])i1$_>$w,,`I|u {[gĊl5[:ǂGuJiFAȰ뎧g3:S 6pxU|h$l_CDR@/ %yaRae%>xh8ud)i%hxw^z7P_'zbTѣY]@&᫮<_FO- 5[i0c 2<KݻJ뒌YYޚAK2-X-<ټCXrH¤:Lc1]Od"ob)ډKmiH08ܳ ܍ W̩|* S:uh$2xU|Pe$,†">&][ʬ3x$8=Z0j;c_(/!3ԛ ԕL]ػq%R 3g fuh8֜FHWj[iH4t]9Վ\'rDY1UEYP7}^^hh6mk)*L ^({IB3qp7pn2k%lJXzeJ}b:@Q{ZQxv;]WԫB[y5e~e֌x%NsMd4nˌZf&U4M"ez..Rmꩧ^So^_&sgzH8i~{.s8 7XOq)_8yּ֜ϩؗY" Tl!Ya#H3==9x>_u]yHy ShH4rOos܌  DnZm幎t>KA?k.{n(Pn{TY6jL!RP U\-OĦA`ԠD(\h9r"37oC~<΄ޱzω.j Zh-huj!-U HymВξ K^kɺS!J{Lk`APf O!t (24o˳Ňٵx.,,븒VJ_ƛB-C{NU[39ikgj5ٟtj{ǦU B_9J^Gq9zc{(R jވ0~z_ÃU@N C 30"rW%[sſys}tgKl A K'feQ[C& *"s1ݧQc /ɡee㮫m:8-9* SL[(R@N۸!&Mm`=QÐ0ClSE>n}?7W|cL4]|0`20ffU< 풶ZLKp.[VӢ7ߟzHƛ: HGK&6ƛmn54% w%yV_ 9krpos!!ZS=@aMҔC)Bա9ĹQ= [v}bF[v1{.Un_/0 ?B'󼗃 \ve|XnEiŶb(=vBf6x  (5-ZSFVN2'v`7(E>׿;SA7%˽˽i:eGOq%; 99JwZ~=ϔ}sIlLjJ@0 9L~m2Y,J-erϟO;0Q @|O'&a z.fPsZ:8lCC%HdȾ@jUijf>=_hMƥJ֢t<8KU/&8[ ";_"Ţ@  6/߿qZ]厡nX)ӤڋAfES~ts;g^0P[kZIv߷%۶B [H&!v.#H-ۛ,?f:n8k-A>NtfcNcɻΉ]0ɚ@:rmFkXB4FE]!p CH d&PА@ʃhq#B[$D%CPZM+(wDv l{zuU#~]-\ĵ|?w}(DDH\*0CPk/{җhS>-٪ME #GF?8W;=װdžn5izCz3A1زZKZl18zAQ(+\5z{ZiW^,T (PU@=X`4E^8VPN1=A W[k^I?SqF9j$+(IB 53o[y~SM;A50Y -~\oP꧒ǻI9oޤiZ=\XҤkcVL]$c,)ijщ(A$||/v-jWwKtsaә?|&i~]K? Sv5zn8{=OKnT=*!\p3;W5|jbszE7hKP:Yn "tָۮ7WVw{!$r{䞫38Wy+ g2 \.ikʧZ1! ЩUq U:ݏM,hPႚx\93XSOtm|*_{z[58bQ8ၙt ~uw^+`Q#3T(0 f3J[J `ͿLxn10 D\H "'fJ}~J;νM #@;IҴ6 f2ĭB*JR"hu ^ b{c˪[&\Aiӝd(̝OOPKh[C&qv0&}˱MUquj'̯ΫӾ#n^ "ڿ³UhlMUF}`NE2:@W@>LJ3(UIÓ3;3eJ",>upiS(ՇV"3;߈z%m)FY""Ijgў?mt1([^#H2ۈ}$x{3uxd&<2<.⟉ $Gs=7V/SF")iHw~mP:E-4яƀS"Q_` ^P@ ݞzQް.Jkw@A˫# EPPqXg:"=#圛e{iw8 *z՛mQM|=I!իװ%ܸVߨ8\D4Q+eYqhy;ؽkߐ;Y7vG൵kS:-BSC  $DLƞh~uݨ/v֒uP5:{-W_ eAͿ.+ZۥSW*f+o:f/#BNB XUJĕ"/ocVpԍ:A-=CŬ7`!m9WgthϜg` Ҫ0jU \U+z--S»8d=#&IlS*fzN Jk¼jT5uP FJO;2 tkLt$*о,(CF =޻UFP70@(&z/_uvJѵ5N=lML*^UJ I 8]eFZ*} o8;U۝zv.imgWGEI߽GQIM#CAaR  VH!pFDW:g& 9^7@:˯,<$мj XC?ԟzͶD/k:FLs'wsݮC_YPb Ȕf8`cG$Kt$0\Zlp $#,7&CqdJ;`/#O?Ah?XYւ\ Bym1/,w09D1AxnwWwWHk6m$vQ< [j_Xɴ>^i/E1)GAKDVڴznL 6#UcŚA{n+ޞ\ KGb|'04.eP‰)\x.b^w*-Q62LX+$ȋ rU3lTB]٥̈"J#@ITS5AF!7:|OWw\@Ձpsm_ż'u?>v!~^JJjTp" kuOb?zI4 Ld٧%ܽeʖٻHqPj& d,+@?Q7 -BGoe\)$W[;?cbh_V:Vjg,GCd.m]Bv3Gkw:Q$+'aY6 &mEGViv1>t^l8K0p#ixM"w"#xѴA ]6F^PB&ݷ3kĖte_vȊ~ҠGtfYkhRNb. DLPkUjBqKxok:n5ΖwVnνd] lmh):f&ל4')K)][Qwy'LKV&8]FO8æxlU3K3D+_|Dȓ{׭cY=3ߎHoS`Ρ"ADE/GkY{{-f6lRYD~%}lu7+@mݩ|$a t?@mc7ёBc-.4ύ+?Y&<-&S!>3|?} 7kV4Nem NƧOC,(P̓mKѾT'Ea Om,q!}V_˙Iq$@^^CGc c/P\ɉ¥?|4eG{|Lr#o31P #-) oH.VQ}U}0zѠ|s݈sA]BCS$S~Z R{Ԉ.?vZ nEq4|)6Rp"5@C[KKx->yw*7vR_3LKl.w^_p/9]?uu~o~nge| ?n 3!oM35'/0AIefaX9+Q)Zj ()TPSP둤wSZ@oߨq|OLG~@d&kqIN`dP%7yaLp*n^NAVmtBj4(h2-_}f(oąsV$@Qu763MJ>ݾE*<ֹLl%5WɝT[wǂV9NﴣY(nֻ1] qm䩻J(g{-Ŗs/x]O"Zήgf6=0f@d_ E`/9Il3{xclI@0`OU%sh1?9AKz@ 7.(ݒ';j)SBuG<ӳ Q+zm ew:˟,wݯ'ׄNK_! LV~}?jEp#*p^fmT 0ʍ@ۨ((cn ^,I8%eQGl`f!HGH$1]]\kz6K6a VȽF`eX dmV|;˕wxFhZ@WopW^ڽ{h>$;K,[}{Gllcywg|~N*opGA f`".D" Bq?~1*~ȓg&x|U3mNqYc$S1Tu`1zX@A](.M`ȎjmBB=laȠ,m lRAMO%_q8[RiI)*ot΋TJ?\z p3o+!t5 jkAϧE^qmБP?Z5=FŒKs5,d&}Np]A-j?i e9Ȏn/yCe2GzN,-G.^;\5 >/{\>g.k20kM(v:#kgc5p92G )hK4L|6yiA+[27/ѹ[Tm+YD"5mCO}fhJ79>*؀MUݴn6K̃bG3f#j|8a^9 n~#׷:In:7 +8vv2Q++aAZu=J.꺽.q=|P>QPITp57}׻gyo =)0J' FqW<=w1`(ڼD:%*P`ؤʹZj\AE q1L#w hXaӦ+AƙLݱA‚Jup9v`Pn[sj[hՈLV P&DW.[soMjnk.iQev_xan)r[6B22d5uC0} I)pE !X W˭y@eb,Iz#d.D\dicjrԗOGoMG$< &TGRU!*.lD- ƓF涼^JԌPast] x~ _${)SmUu aØihR" D*c2ǝh-RHJZƱj*EJҁ@H!J5h5Qm6+FE,kIi)TNRh}ݖעN6gܤtd2?r I2^)-V`SMg¼aWee9gZto=>ϓR)BM 6xvb$ƈ2klix%#0"Ǥ~G~l1ćQC]*3pS>l机U/kGGV޴7^2o7[ĕ;TD T@['ozt&G17G3,QHs*3&@"aY6Ӿr7XL (PFfd*^#4S.d&$ >M:Q!n#TQ*>eww;(ؼ7>SGAn݇׼! PP (H"J }33a>6NS}0r) FgT}?{n{_rdO<JCb h4F3<GҎ*VTy:ܚ옝{{"/Q"LB4pֿl5w2mm `ݴCRbYbSεв4VM 3!G} hmoiC㨔9šec[J&$MP=]( z29wpj&ոtkE06NDHI@pB%kia'Xcͷʪj-jjr~SIJi5uoL1f6; L̉`^ft^|8\ȁuUhM%g ZƿUb/9*+Gjײi }CV>EM=K8>$zbrȜrBYO]3XTm’̨sRޫ4vu߫_WҠQ?Nd`D@w$kڨӱ@ (=j r$˙hEHzGs[Yr u~OE{}/͕7F4BxI2k)|dH:d E1_9-u""BLYDy~%}P+o#pz2t.^j"~X=N>{uF{_k6AFaf6\rQ>B  4mT2eQ( {Gr9H& X)DdH@JA2:٩N[ͱ.R.P/MwW2>?(Q)sFCTQAb’h+͛{njPT4=w=A-]>qnz4_h;MCi GRx2!_'E92HI019cDjw0trt? >(E"S #cEm/XH6@L@C[$GmzcR0^iKMw=%h8 lH+[kC0o*4ɹ&y\KWMIz[LnfktsPPиoGGG`dCjaԧ5@bS/ 8hUCB$:^XI&&M] .VuoΤ4ZP?Xn TKVP@C0E/>z?d`r}HN])kaW( `ˋ5T"Pȡ" = K3 /:㪍 )h#'ߚo}?G_P|EĘnYcffgz)F;2$I!˾5"&Df~/L j>o !V ~Q3PX+lsv;Z<9P M2\]5}ƌcυ2>F9 7(ABWIDp&X jh~ N?kgʯ}_=mN$},RtJ?y>Dj;[t1UO`S1E26BVf+oouNg&͋ѳr^晑VjyGtn^ZkwV6lҧ֢z֎W ; \Ie7@$ޫ4nC jYMX@OLxwp0yESyD$WԷR1z_6zM L9P[(ɻْ0^Lo\n-;SksynJn'X'h8ƤO6䋜o0B#+]Ǯ9ruT.N0 WTՎzJMx2B<)5!jCRF^ŀXg2okzRMZI(SzW(@I=G$D|TcLOB:*1\pr++kBT_LIE n8ҏW2; zb=%! ̀aE6zF\eƳYfv-Y,ptwls/#W{bM< $-tn$Y˺e8ƛw>ٺgǐ3bj"+PSci*q>kPz`x ^J6-maJ!ۍ0H(Ԥ̢ 3nښ[oN|{=REZ,B6wᘻmv[(AA=+0+%%u%kQmbɱ T1dfmVƴmHHRJ E)d% BĦ89#InkUѨb#*JU[F5F Y(fQ[**mbL-:tSM]:U⍮ub2%s {=4ΑD!@R2,\uڑL0S+WQήRLd5E&ؿ mbM^'Z!лN+*ҴVIXbV&daP2PɍeIehe23%SdBJ"2FB ZZ(+2l$ٍRlF(FƵ축Z˵& JJ6 fLWulMvvSm'+3(ɹo2?wkw\NRk 6J3f6ԉ-&hѬ c lIjTHIT2w\cblSViݭ6Lʢ,WmX@cb( i51"* F-.wvݦ-l (,lT#5(S+66+b5hkЖ*QѢ(+ulk"hR3.)kEhѻYYet֘ B))K,c^~'_0U]$Ώ?.> nf@mo_ gsڮ8V">!7$ђ:ernl웝h^B6 i ~nJ kaYv3 *]UB}$WT]jnrÏFzwX,%ӓ0 k~ NlaʄeI%OfVt0`4/ =Y_~mGsi9OQڻ*)-ٺ:7:kv0 !RBJ8C@uԐ.zҪ c@ _nh|V}%}Ufg6f5e#Bƻ뮶H@2dI|O">9=jKO Hw OJc0!BI$nI ]j߸h}#ɥ'Նz3.' xe@)[92ʺB&?=QmO~5.1rBRa %.EU_d<bdU/S5>sn3wЪeXcN)O-7q?/¢0.ġSݤ .{#Vn*t| R з%_hv9=X<.GpP碒3b0Gb۽QB$4dQ9@S]aE7Hd @P @ J Q1 * /O9.b}| Cj n,I/ u $_[>fPT"U B4'o߫E@lkE+Y-I"R 0Z-ڟ6z}н0W1=¤~wCϳ'>;~zA=5d*Mo] "@b* Mnosi6|W㜏,0f2b@̘3N|v_/"/@ ""a[_:yMw~+?u3M{hVN>rTpW+4'@e璜XԒ#I`!Σfg!VCK]m;I+dF6ډ&%ZƷ-6h-ID F`23>!8CxAwq $z9s?Dgsn&ǩ ׸C\)p܂}mhyǦ켖!" Jb9 0u;:ikyfJ wch16e(Xt~U(^0J}&w0@Ւc,Vy#ւIkUk ?lx!nEqALFIA{b|'t!͋;F<6}Zkfz0JCpAk| (dERk?9L|U D9&@GAIyl=:ѩB٥eB몰)@c\d;V·,P4srA K6AmsKWÀ^,`5c[² h*5Jj>TbY"wp?2]Ԗv(SD2rRժT%4Ij׫?}󏟟k_| 2ܶJa *DES x!P3QtX i6oȺ|}Utog-ev> _)j:;SA& ,&8kksHi)gkpڢh wsRߕJVYey+Բ~hZ0VM,sv;$I$$.iw>gǟjKI UW%|[TO5H۩XZ"UstQLwR{LخU%U(H$]zYYj tWu׬M7~Q$儒Mc]CG9k؟BXÌeÞy,cƬ1Sҟx<&'b Սɧ?L?Tv8uy߹F۟{ecu#)F轎ݺ9##FFZe<˖+Ub>F”~x-$?s+ 0 ؍H3e+l?@[Y,rrV@n+ĠpOZNEz [u-єlsO7bTGOsý=AO49PfF\y$!sDAYX6?fsf^Ѝ&]*ڤ6Ԉdw% 8𳆒Dy2G)d@_,l(EtgoyO݌0Y|/5G`Mӌ%>(CQITDL8I}4G kBoH^S-fnw}QĶ׷¿Ps{_/ _ [7т6phճ,01=Vfp}ejd@Ψ[3.tb궲[4jPZh*ZRgh~b[ ?/B|>w-L2w*}y&9}nۢO*o@g9)~WhXea4&oH`c̥E1kOKMt}3{V Ƕ#NU& 1n"f̨e(%F\S+[ BsL/* ƺ&;yF3/Uɑ Ĝk\ ?+Cu;NG,-ӟZO!BlKdÑhЊ(|u:2JYQ;!pN vg'Wݏe˄~8 sB׏<xR4 !"h2f% Q˨/ O~#S G}n55wmb+b@ǯLJM 15E*P7rT&D-,f&hX҃NA1/ `}39 >HA&eS({vLO3?# 5S3=Z؄g 5:aScQr ' B #2G[3ߜ))j:\hذY(_kv{ :ʃޫđ4M4P*31(H)Ja85WP@}P؝3SO<]l [<_E$^&8{|.:,}7s[v/(&B4`&0H" OoggtmU0ffAaQdMPgTb4m\ V&UM"`%#Բ9d_G+GTMLkMn>{ "sSATt0s&T׵-^)S,B1:l(@/UEc(h'q\D[λdw*YŹ_U$=-+œ~AkktSaEN t^/9ť!yA|yxj4ַ@٨<`i9X"GI^]9g]NӶ\7ni%kߧzVGM U]-tK~p[誏]k'źm%nwʷ'f1 E8CED'M<_)eze>Ηsq {=byƪ9KW}F%n6praC޾J]]02i ^N,<>5yYp#`=M81Xis"0?1\VʪgƘ#rS0P6qXi-2h0W+ Sfxt:7Y67lɵf$QY=oYneÀ+4΂^ݐf3YUG4rڊmٖ7 Yda|O\! L>}\hRXNb[&MQck9OqƒPAi%x ?hւDO-ԈKV u`(l*jxx.ڽp)ip"^X[+pwgqbKrQٻ Lد"ԾY{^D-&^ 4rP%,zAGDCoVzΛ1KmٮԈYWİ U QN?O/p3VlD=a;TseH2Kb8E&Z5^$ z*<ЛKmL=S"J 4bVɶD[-u.UVE<9KՋKqU}[  OGɾ9 G0OEixvk~ `hڡuhmN#kKR򘂪^m[ E8rFϱp52riz<&\- Ag6~Y  T'~_Jeo^ aXM0cYV_];7hgǵ1PFyS[6H[$l}cQ{|}O*g,ӌSI5"P0JOLѣ /D/Y.!2!>Fd_/ _h3/?~H{;ґ\\&'/iŶ;SdK+EZKy] FQ.\ʳf{2,- @d""hR @&b-Xj9QjqoY#}y)Q{|wYA&㨮R)U͵q~_i BwP =īx?EFٍ&{~EEJ_ڈ%(U\3,~l}" B!0/$^2( ʎwU98U7@]KgѼ 7?Q3 `1֞fwssF:}Yo<@X>K($TMpBI=xNc>|g{|WE@ f @*2QqM P vHAQhȵ[}4@u r?,I 2pv2^/ 0f/AVw־M| U}=&մ[{Ķy^);5+">o_sxo:ٯ-{cp#}vG]q׾>vٗ$6wt^j=aNv;fW*Z1$$E׮E(M]TVVU@lɫW@ulf1 6QlV6gAJ*1qr/_vcn۾{u˽Y@Ի^=#c o7}ϹMyt|=#Ӿf]zmM2>= jw/{wז>׷@un {} q׫[4:]{ Ǣ w}%oy@4ڵP+nKY Uϧw݀xo{1}>e{47s388W*}'P*sp(vj^z/|/ hN1Gqb@1 sP au 9:ץޭqz}e4WJѪs/W>>}2ew{ճ>yͽuB*: I> bdh i ɓM@&&0# L4 <#A@h dLѠ3B0hjR~OH6?OFO4bzC4iO 馃J{HؚHfQ @@i OS@ɉ Bi<=$0Ldɧ=45= Ds*|icuM=XMpޢ\[W!mF4P4"L 0!P $Ȩ"̀"3[Ko9$ n$4t\iЙB#{2ڟ?TpzN9!ޙ" _yGzL,$=-* O֑T.ӣ%xfB#H"\)"  H}zoA@6dR}h#h HZHo $L:e6n#,>k)";uYQM19QAhr5gZO5O"+V(*YHDK2/&+)jNh@]X0-bf# 6&?%gE/`knpj4P(QXDPB@4*v 4IHjPRQψ~xȇbN\q"`֋$7X9WBHVb@) pGh 01Q"qLH # iW$@2PhEN(A $^4졐`U&R)L!ۦ8`eERf6e͕OhmfZ٩,̸W[7/\#9 F܁"ڍMdVTk 'zmiVTZK5R,FMeMYj*vE( eIZif+2kMCbU5M2b!a0ҕ3Df֣N&R5$Zv9%̻Yk_݅Skc3[$6 P>֠,,veq}rBFzn#à4 ύSY@KviE1Z1M6 >.BowD ϵЦn] L TO3#7%#r0ţZEsEWVl@l9qQ(u̙E0Yǯ؋!{'ui~!cNj+2q0sC$BH@T& LQChPOl!8 C?1DCF4<DžOEv?$1BEK$AaS;,*,H&( sܷMvx'=#Kq3Gh4@Mr.}LX£k%RV)nB2 Ȋa=Rui#2-3m W*ijDz  }-Ub6{|A} ')N7!`0KS71!jfئpa\40zE#!}6=ce5##j.dsrfiGvXY"Ŭ%q 6F4NAWCSR!(}&UwmӆB!V ;I~'"I#+iB:vP U(&UB>{M,1UF G"H4}C~)6:![# R:4 n @) gxBtJfv A.Y AePɤ0@8JPEh]j`o33ܒ6(k՞W>߿i ^2tLA@%E4-^,ɁƄ^!lv53˟S!goApa$l-=N羸g{cy1)M]ebɼp%SfzFjLyӜhVc`1 ]#a=Wog3gن8!w8WW5b6H`="2-. WV邯W 5g e6 ;*:5#ӣ gI;xN }D,څuEc7Z}*-nuvt:eb37f.9ՋՔN`w'Rf`{w;[?6 3j2|xO484_@6^S i2سz-cȂ4)H `0WiphaL){KvdbNIfm#\Ԁ3M c3g.gJ\|䎾[+,: ٱU[cRM͂)@45$N> \1@ E(]Ѐ@"Ɓμԇ$"7v_^GkEF ci61"TllL*inŀ;%ֶGv6͵ҴADTbz2.K :xMc=\nm `6\%(VuG?n2ٔҪ Ш u¨e J l|p("N/w|hv$b[ZJJ4"Љ*RJ)G,hmZZWmԲlwQ3lG'{3{zbgtEQm<ˤ $B{j'=__JN% ]||vu(BV,stʹZ[\{ksg(9L"@ƌ @4 2Mĉ$Y I#^Q`a!bf==&fN7<{Zv6ZTu_K0["%Lm{l6ev@a!t9Z x=ڌBNִl"vnӀ?{lhs U  ;^hQ-!3 dX:~sz.h}G=WiSӧtGdˎiam׳߽UI&CkVn$W@}Bem?8;?|L/|" {w$ `1X`̜gѬkN΅X0f0f`2biwӝP<ޒ Z׵{p~Ϙv`w2zNTIJh -dԐP4Mp9 #O7SWo=^>н3)2 QQٵggg٣6\wBnٴCR3dݼ hі!* J=%мx[0c,a&Vnv;9Fa^XޕTI]/olz601?vx:?J}-:S*0f@:bq+{ŀEu!m}vZ낇C)XDAh <ȨZwܿ6y(X5$2RVB0l#Z,d7׋~ vg}ݢ:4D؆>^22g| s !)" "@49O4LR3kv_Ẽ ch *(( _ONރ:1A"9¸TdX49^`${Mˉ=QEUE5QE&Y$1 >_KϏojM2L䫬b4=hA4bps[ˮE{1u1 /ɯgR#(]B 2bLIޮ459 vlp켭kc}sy M2mnȰ 2qP*DC,Zs=EcjƦTMvii\|_l3}3aU*L~yÒ6pb`F53phD + 8'-pOh1v=69h֣WeϓVdeF 3YqTTTt`5+l&ʹ pMM_)Z Ґ6z'Qv:UksSV%;>^l~'^Zik6=\ܰn\Kb0‚)Ȇk< < ݇<η-Pn-[1N4Y$d @}όZ,JJ*CE` wVȉ59V29!zܞwg3`€teyZMv\rpd6^ 8ed2WC˶{oI! #@vR{%pmy rv!l.b˟B+" >ι?Z0f (bHf3/ow)pH `|neP9-k(vTd6*%.J'fk!󦧶Z_ #0qm@ɟg3ţ6d8'QH2#40bLv[@M߯ڛnto"il}\YGk驖5ifS ʩS*#c+LbfYjYX؆xUt\j3P`u:k*jA1z4fLQЍ֢ZG$?i%OGߌ!"Y%!щH%ڂe~}cJ z~`I#Sukr@ >(?̆Wnk6hl`q0y,P` %W3ouG^w}ns<$8(b[ٺX̚_zq0ᥛlPՖ0$$JW_nQL:3:h1OOHwxY$6LX .fb`ڷ#fbeWq<zlԘ3!uEt2##"D#FZ|&aFOa;y9<]|yar/Z9q@ {Ti5GEOntqzm{\o<1I i᯾i?5pe W9`{CќN|Sci'1TqNax1tmTal^ھO&_`|c|å/vQh AQPE{!KxcI>ficVlXY2յU-zF=؝\  ߧlK7{V[M{VHћ wIw` .5UDH06n v*ArjZ[n  J$"Hknmwֈ9B!J-}';t@ЂA1''Zbl3 Qñd45j^錝^:Gp@(*">Ϭ6d .7=vGyD3kw)Vic:@L`fe=x.@yZUtUUwŇ@̹YҪFC*ʽ( 4h_)gڝ^B/MxՍۮLC-֦q^Oc.e 3*uiq<6^fU 䶚;W;21Zt,70W[+fYڴ(կ+53>~]erROw2D4v]chM" 1D@ltCr OAVuk`F4HT*&+mU:F]CtDE L ="j$0L|({CрD hjf.WJѴDoz;egy4thN?UEQd Sf1bȂ >6"SVS! -+s^!/Y\Pm@Z;),1Lag Sq c DC_~)hר>KT*RKmmT3l^I_M:ԃ-siV|\)Z2ufCVHlCg[x$TaZ֔3 F(/9a6gl[~Z#ڟo۩ 'X[msSυ4!'OHt0`{kz=y,DOz~T!gg}Q4G嚈o%h{Љ BP*Ye?Fb8vqLTf?,g|AZe#'u)V~9djeEdC1")]{So-}>:`Um ǴmVYS1VUժdI)q|LD٧؊yɅʻv>>4 0 !1E? ]c{ҧZ{|04wrvUfe 0 JsI~3w==-}_ 64@#7 '/\:p1 lavӒ4OYNl D7fFFUi!"):Ҳ4\ܤ._{]=VZbױqL3e͹e==2%Elf]QF!vxG+,DraExT iW!#VYOߣճoeCǑg=Mˡs2 L B!]YyNѼlR+|5_&h`=o<2sa>sgDUr43 PBa|ْwOQM= 8$N8kؕ\v/U(HŶ["5V/a5Rgm[&JXV,lb}u/6j̧('xv>G|<Wۍ[!FMw'@\)JP*KNófb~@ LZ84?e8qpDs3#CC(/6x jwq) k9ռ\&\!.(V0F B |6uҁ0T C |c6pm2YFʘ]z,> C,/JgƊMŴ b\S("rejuFAh 9 G!pYjDT-"a,722;80d@0`J;_] ~WeS|ƪ#k7@@.G缟7ځ탪*i ,dGS_|0{%zW Df@̌I0wfr#eX@ at*20BbXһ Cyh-jLhzMׄvhh+][\)m'RC]n0pB #횶j<з-96 lUQC:&mHZn0E"=r'"52{A+Win1/hU(]#3Jr3##O=i]l`w`,6+0aD{|Qug:қ5ǵ0o5HǯeXyHj,.] 82DX3W&SuYq:Zݐ1[i$: ܴO f]J"I[V P@Ţv,#'"((Ëܠ0d`enB@F=B6Z8t42ۈ'93 :Av-eDA[̴?1<=ŴvʅkR5 3yXb u:F%*O'lY6{W!g8!2Ը`E̤Ʈ|`-!Qdk t>QVtWWC :K݋`ϣ應 ൾprBÝIi@8eoy!ךCrt%E/89 ܥbƪ& JpYl1@VyXԴ8߷Z^VlXNnePx{)c7vii).Nya>5q =F޾s<* Rp80z]gyɠ2kN܄huh5h\ZxlaD^V\% Sr9P1]k Ňٛz&ߴrI`}ɬpq@/{3+z#?,.;Õ+UdԂrE]\ ̀3)gYYx5 B|՝:ZyXr6wʛ-%{Vd5Z .$ɉBZpn?ԈIXDc)8ٌ⬑T, @oT\C*&`ooFdfF6E ~}[ 7:K3͵w9S]xxoI3^j~klep-daLSy:"'cynwA]7}2\LncٯC30}l6@asTa${Ntu,l85( sC~w,y>,P:nBûji)~V4|ۺRUM) 'NOo5]ZV wT"daHj.j5׊b5c>ͪnۧhCKl8N%B@uzdwQ8kl4v i}5Ǵy9=t5UH! =#ʬ3ʅ`MlEަxdg`pvA L/0̙IbYp;C%R0La2Ъ޹M@4@Y:dATdMF|h.LyXwCzף8Z5xEUuś,yC!1*{vL<1`_Fuʻa݇v-l-Xp$% 3Qgr\`/ku\ Zg\B4j, ϐlR}JenϦ(0'1yƵe/]ձt>$!K73i/ aˡpT+5ꨖS"^Q}ҽ2OCA:~9-@) Ri2dמXpq3,kУ @̌L/R{C 3Bd,2B=^.]`$Fs:ܖ(}ءp.N7"nq M*33:㗍q=m]{5ov;sb]^}c^c@ Sw@ RL̑FJh;`Z`G]"yb=,P>X :IsNˌ-&JxP'I k|rd yGku(vB_0]շ<\}24PQi4ZSRM4@ `;z-5De <]+y(1o0ҾG_`vS" 6z3,E&yiu7:fpiCdl+51PJd noPph5P^B1>?al{aFU4DP} pAD3"&QQKZkuҘ9 F,sR"XlsB3!I¯:>-k$MFy5(nsfMYj Ja,EK:7QXM {6VӧЬچ6DMny烽j#mIwr:~if_oebn^Cvj chߝ#7 f}Wç@ CgZSA m@2KA'R@>>>uomNmSmjq@PUsPßS2ECЧ0 VʇlH5tNð2hlgBfsSihQhݽƁ9$8E`@`[dQvhb8x$`pp@cjXx˄eŞV( }BAuqѠfJ BoF.Є2A>VK,"@?3|Gy?x_:Og[yL7KK/ yM2WKS` 9@W=FF==)W321acpm`oD֞.{S76m L)3`[;hH5QJсÁ-b<ٞTq ?fkv 7{m_SZX-6Ap[1~Lש|ͤ4X3iM,67t_ j*pu+qp?ېsn¡:ZSS<,D3}?C:<' YU897LuFg~n쌄7݈ޙh[kbaM @E:Z>-3YQOA+t V9_/no7>%g~Ќ4 Ekvg6.#,73Hc4N\q+/a, Ʉpnj㣞LH ]?[T2b,p5N]viÅD/,JedppZk]ML1v1z+Rx9I8pmr;[1mM+ݝ|ٺO76ħki0hS37:X7k7X y>4v05a\pM6 dKka૳&4˴*iQ)1\* M,A&&1UhfeK~{hCA:czCABi#ֺZrMX١;qDkτ=4M%o#yF`0 PIJՇi\jH8h3~} M#܋iqi_6M$ hnP^w@vDѨ΂<n&̋a5rw6"gh_J H)|ђ2@ز 郄.Pech4a͔HzB ȁm݄^װށ֔4gOItG, sp(IUTJۭ{찋I(kCjqHkdCP00@tjOVEkXHk$Zֵk ֤_пūW>Z_BsiO]6 a^P*mhhj`$2RA6D -5B,"LOt Ce5 4kZ (P tH sף 4J*hFUD"jGK1FJ)#!EM4s02>|@H.o ֎A6TU~pJ+ٕEx (ojщ8A>}RqJ* aQevRy*:σQ ,l$d@O‚{˽ W K-5r {9N=sesd O5QY'4pNj@4@:*'@hB"ެ.gd<<T4qRUP@uF g@"Bª@FOF6]*=*oH>GP" "5mtr"т,z84>N* B0U; '`m)HhQ AӄP(B r0"/N6Q7d P HU^Gp>Nk(Chi4 :%U9E@2hW4UrN2P034A 8 Ą$$J48shD199UEIPSGl( Pv'B ( naiC;D:bUd v )JE)7`ؔR\1QD|$kHhc~־YjHA l{XѲj4i(4%L12(TTEFL31hZcb`6Yd%B2ḍF fF I(Y dd j -0ѱ$EŵbР%"Y 2 6*53ELj(*5sZ6Ŷŵ_j,ETQ^"%bV1$FBjKd 1,Hشkhb$cVHIVFء D bb 0A&Dlj651Ijצ5TV>v7%BF.m.lm&-׹QCE/|1D!4CTE % aܟr@w*'>V4ကs5 '<@_E*METlXll%X64) mch5#?cLU{Rs@Jbin0__cׯ;Q-|;2 zДC *"k$aO @L 4 MIDTEɔAcPB"D¨TQC<".%"@U A>B"A$EiDH!  r̪m0 H0R5$d t GQjEPMMdUTa Q'F%)R(:u?dĈ(dQ;aM0`$*8=T2rSŜk9 [ kipI'jD4aOv*"=VE1##]:Gy]A.Q@ 5Euҝ  yIQS} l1 X G!c2[4:4)BI+#.KaQl@`,\ve`vȡ)uo1<V /;6HEXxy =DQ He2{֫FڍzZ*6*@ZER JZUA(EAiU28{r F<"ܔ5miZH`:@ *`jTPA\mXER d7;&2{8f{+?pv ;/i;'-!E>r7K6U2p:+/!&1{Yo54qp̂MRIoBV+2 EU$c~Y\V'U}Clxu^?i6\2hb'l~d>8>+)*JJ hO9{JkrqXPPy(mIgW;|4$uԈ 䨗p]D7Ȫu#b ޅV4yG=gQV VqW=A /:>`#٩c>WoX}d5\\[V1Y,J, fb); bg-eo/PTcm]?;`1U p)0D&J$SG ZtFzpcՓr% x,"zݯғ|9߽11R@U1A^C螪zc=mR*(DWXfdK@ϑ6TjBlC`aeq?B&5j M6B&%)]z #9 "D4 ߐ"=OoW(j8*M b)uBjݶj+Fzz !=~~mcvtӊ8FTW UDV(%hJDE(QRb)@FV$ؕh2QER JQ E }`z("*s=?x?4v8u'E29FF" ɱ39b*k42jk<)D$vYGdn>v-/ɬQjy!$JS_uz̵ `)+_uQ}Q/%u=cxC'B~<=&B}H p23 ff =RjP@!zHbNp^w'^uϮ{p\ǰIPl)ғ=_/u+.!ɂ&b@ bpX< zfF G"d4T`Ȋ a\inυ_6}`<K쯴emFY>f7iě:^>ai:q4ws\\|@B@̉Q8L@̜?Wnk LjlM't*wNo_z 5릳Yy%]eff`gi\#xG2P}T48m]D{^:TFDZ+ Ab\Sɥ;vZ(_ zC28 @"b J!hZۏ1L {.}&B@Q :^NjWAk D# #,X9 Ӫc&-`(̜ 2_~yAH0@DV# [An -g.oO 0Ǽd1e0c{5_~˧UzMHD㖟&UڌC`1>!YS!cIbn-5\Av=cMX517HԑqA$C1c5PJg־kOZj؏=q fZlDQM~Q9Xyd ϓy:ժ]'{r%=6T"X!7û8?h|ЈD݊ iEăB/-1]+u1yI?[JsNv۪~]WľI]=Un!k<5ty;h'O֞FvOD?V@b  ࢚hHsE\%/q iQN,*ʆ;;}QBPmJ0%0Y%[a}g}=feel>=oVQ(-Jzw3 >#k(VhB<[dPMk[NԾrP._؆俲䏷pa88}oעD`´Obc:znKNUGzأVx;gYާ{k{ii(6:[P^ Z602+,@㱇ߗ/K>g#1TjD<:aX3Ģ A33EW=zC3AILe4S}03bBրm+_S,KjNY?Lm=Mgimh(=g4FGBIz%Lw§Fml8@SD/<7NkrW:kA%,`l΢zVU?ɕ鄠(x|(G2wݴ{|0a @]R" Hekn2+}85t|ug­J4WM'ԴǏ(H=XPSFeiPGp @Hy%~]8EOనN4$};"/ް sYA|ql|zM:GqZ$*S~>sõ0S @GJnft#knkcq30w0fg;/{v!! jm$&OKԶJ;,P3iTLHdJFZX4Pq#w?mųO,\1d/Vm*D`ﶄM8f\#P[R) AWm?d F^wgZnaEF̈ȿx@o@2)ә4s_:-#PtoZM_>iL։1z/ࣁQ=gG5C1ń4t++L[ y@3W.عn֯rX)fl@=vbЪfd&ͪ'c{]_6T{/\Y2q].vmpg=MguwEWPM ҂ ;3(ZZmE3$T߿'ғ-vU>~W2}[de#-f_Gm1s:6.6Ll6 ~ni F;)PnJ&! t …̬N0"d(;RѥO6 fԜp{a 9r'`T;\n- u>!LJ~x_ zbFĵ,Ym6c5Q^vܰl(R&!: 4:4=mjZ=NB!@*)ЌB 4 (@ t`Sew=)&&A} BNE (^=k&%z6zpTmKZMnTClQ(V6j1bJ/dh*mi [}zOqr/t?Zy[UwH_8T wȹmZܼ]z?7pTN+]P&s?V}{KT߇r9Ȍ%@A ,g"`,XYt%(a3:0[P ;LESJԅ2Ilꮩ/4 ԍ+P|W0Fݡ%suLÍH`@t*]?!dnM;': 7YL1 Q긲\ FpaZpAdFZ!cDP^4e4aJ3B$T-5S+]54` Q&s>ݐ#׍hje,- ӋyVglo&s0OiI=czoy>Yeќtԍ~e2,wHKn\p2mv+\(<&wBÆz 5N^`s󖦃S.5HW22)W/ 4 5 ˱2Q@/\00YFJDH8qt;[*Wat5"]a"/bEbT'&OƒU!m f`d %1X.4AX#!O1rV-4ԩ5~ں5kr6yQ6bRm:tȃUR>43ꑤSa0ߘ˜$]^7+KDr1h3C!S#1ƶB6,U벶1FCF3JPb1!# !W;?$hv5F#Q4I VwB[h3bQ$t^xg" elORB UDw`ѵ[,.EH4a5I=2L,d FeIT{eN6= hZBJ@)@J(Dꏟ= =n_Qze/LTj0TH0iWWzJBյz_5pt5KXol`wđ’ljƢcSouxصI)(tmC@+현nAc$m1/ˣa2@4;,`Ki9u!Bͭ37,ߏ!O5=hmitϔYn+>3r VE3bi^b"PdJlDp ySdO/Wud?NP!'<$S'bOn㌪\ˁ &W=sGPln8TIrgϨ,ZUPL7Ol#kY5;@ ܲwsy嫡ـ ` *IETJh06[-bM2UEh"-J|9('Å 3b+BFƽ)m*OwG.&P%^٨ح6b~/c~RХG/}̍ OW]jSj(*+IޖE]-cI]>*Tߡ\ѭKꗄRd%w$3b\AfF*bQJ@-To3] lEmZ5bA@(ierEl 0Y ,Bm($ Jt dMulPtsaڶD⒊Z@$R(튻1ʢ V7Fz2U hI$|Ps.Hm1l&\vv9ptw/ w˙ռF.PBvpl#zmH͢4Ϊ6j:6Z|9wr ҍ+-VTrcDnSB S9ߞڬ\܋W`0 \0Bd i5K O0ܷNĻHv i Z#S*GotP-O,XL6FU~Lv xÞy/:ޅq1߯3-|i|YcgٶZ\'vWpy}vROsAΛjr3TΝن{GQ|+e^$>~wwwONw^ "I&1 3!f "+}ת52Žs$1u9K _<aඳ=)򽽵ؑیKS>d*=ۥVrV[\Z=J0DTV-JϥHog`CD4!EP_?<&""i8bH`P0 _ͻbPc74q1Ww6FF?@,zfA0eBvI/sJ.ATvRrR:LRmv Ks*fO4tp\Ɩ+HKX]?L )뫂ښA!#_Iif_~f뷟g ޶qC< rΣA-nwS~Z)VM:(s%@վ2a; ΋^a%ܙR~sb/SFC ܟT*?U @]0'8AeLBi^]1(FSGTU?C /\!NNLPVHQ{YYݵǂ㧨,3"~adFErRMϕ's~kNTI0/&Ǒ e+װJk;Kwo(";YU(*uvwwcs&/Mdzv܍+:zEG:b 03dk@Rim3yjnׯQ/f_qYm&>oBS P #7䡵# ցb˶}A闔HBP@Vm[;ԖJJ:>7OnRd[y:"  xc ]̌yP{Ud~}>R*{ǥ ]ׯkBU)DӨH/I.‹ XBz@d '譮rNRqZ J`چhR:WГ+&J1q䡏1h UqMM,0eoJyt~\M =DCAD^lOgh4"I#ąG(je>/p?/=?Wر~+uD#$>~kM,֚43Bџc7u\ ]nC"ыN2ZUb#?8xm0D ZLq(_Kw&U9n 94kW2M.rsGGl _>KvL`98G[>:4Iy{Yc1sv9ndԒIl>93|ڭ^6?۵{lzYJiS=&>NqtXl_= |h6. ׯEcxpUgsX-zСЊ'В[(zZG<*(-9ѰZm~KB%!ھHw*}_U-Awh!;tBV(:xXr={]װ^WkW Wt}q]zTF.AWqE C,lZ9>;hdTN"{((d=5܃fP>ծWqwPS:gxwa4;Nb`SL ;f:x7\(Y콣?/"81V6+Y⅐z^UYi"SlVsvm,iWˏhy4(4vzI=t8%Tg@@fkIT\6ZΦl+/ȟ?  R`(K!Ld}*mӳv? 6 ٻ 'kkK%rdW--,YJt;JB-].ީԋ(<ݫMz[k6҃.-HTgBBb pjՊ_cChms}{%dd=։,[%`5lt&D71JRK* GidYXYQH _T)'%UjH bp9 mXVfoݚqGt@;-)aCj ctJFxq6&'n1=68Igʙ~[!5]xC(")hjyLtM<̀H$0@bFgs6$]xUTߠ(,k52+A G6tְo՛2ړ FQy9*S|qnxs 9XbdE0Dzd5B>Y͚U΅fcҾ5l7o7J 1 KBr.;2fӕ R^8:.ثƣ4;J*ڕʿ$x-e" @|&MJxh=B籕y-wؾ w=>YrHtlrumhiq#{EW\ :lPtލU>)D@ T!ǺUz.f6%(6 @`O~>bJ&٧&MBI6ykpoP@ǁ:Y_yȋTjN UXEEL;b7x(=v|4 ;VHAPeno8Nerd ȴt'd6O׷!k[7Ё^}JHoYཐͅB[3#-FzB$tͿ߁fY =D%=1mQAATGݴ;F#gi\ o *:A+aMEXd2]Olpo6JUbHP KLAs4=򵵷 %8 nvڙ]KšO @${Fٕqd<;' T nX1FbP}O^q=N=>Y18SI *ľLSEP4PU-?(<ã}) 4mmu8[:1LEP4PW-1~]Q%w>.0 !̌RD8qUt%euܧXguBxGwVzUy6MF.q9^m2 .tHmdus`wuTQn(z\>KYvUzo8x8ztI ,|`uJLsܛ {Dd4P׭D'"cw Mnu}D7-pdb!omWNzuۘղ樊bV']Lp3 vuuDD*BA딕L5Mbj 3̶̣̈́LK,_鳫rC&U/Lmkʋun<7&vx[hA|'0ڝ̸mpp8̅;ч"evgn/#oTNGo?Fj0p6?ok;}&_dF 1#ClCiFcڵVmm[=ZܹMlKOޯ =8odȡK&$NE23onV9V|'GGbɫlJ*bdBWyZEpu.kC]ɞٝ\]mlW)@ Ef++E`z0pdGYE Yj33B{叠W4´QΕ;gH){9XUU ۋFs^=@9DS)$ Ϸڷzz5<"x0˴}uy-볋`#eҶ Dծ֟r2<,^B\f~C|^OO܈ vᅽO{~db篅kRz%FyU;ڷ&eL?+T[[#[:?a؂wpar8'O7ޭQ">kYو :yx<ݘ[w, U;/[*΃sϋ =T39qyu5˿vQIr ft9FZHMذ`4PLD'֖w~4,OHy@c+'5jWG>A1{956s6O<՘*0A!Ln@Lqg['VTü@e}YZ3c:N>6b\xW߲R[nkx<Օ}獕?R5=ޡjFO.ۜ5!9vׇ! $(TWT=&#h}>A #dOz{-fVNEvP 3?g9^3G|5  m %q+=wjʴ՟xt5!ЗL`;a.wShC|kErortT:= U,(o#_4lJ뿺Jß_M~(_Ez.*b^{͇4u}C#"r0xtrj` |w:1 Pv{<}5z)*XBt߿"˕\Sc Js|v@~9]Hmv^Eg2io͞OaE_a16QxY\Hv}{]Մ73DZNarHyvs?: a{t.Jv's{p}"O;"2{A:;=|^_`'['18*d<9ty~Z_[& Nf)],V!qOW|pS1/Vwˤ9z1c ^9bxj{ߺo\^,Faos!{baf Sjc&:@ѵ[JqOc*m5ZUe/ܕdLɎmoR,mlH0bkv&N JcTCB;[+mthKL7/:%Gigv=!Cز U܅CruT>xGҟIp&$2$=p[/@?͐SXИP[ ݧ,~d:(MR/NVkc$]|ßЪiVaaK[= ]:9TCT?p7q_D _v$^Xy~FDSCZ]%~ v:ё;3ӁYJ $- W]:]{!02w]yXdhfr y:kc! &NB*~N-8MEaE?0^[ţ? .n.{P }(yk*rʆycVΕ÷fql =`eƭ2-6O(5~%С<6ɧd^׷pf}z˞z}!y{^}=&{9F`1$^A:C}T€>oH&;v>c<8JJ"Q)/ݿcy`\ czo>Vl٨؟<ғӶ]efoxn}4wxn#|p A$hInbR^n5/WS{^ԑ5< h|#Tql{ݍv]l(XF^Fr-Tp& YF|.1I֫Lk XHYbRmw5]g|^gLSd$6T(=8뮟zdIco>^5°Ytj}vtcH+&9N/,ޥGm܊ L_ʿJ7ο~RQ}g|zcfg $uD!H+U9ci֛燣~?aFLȖ>WzŒ2E`<C)-<ў >lҏ_ G 7dD@Ǹxv{:מ9z!jq2ুt+B[] iG!)dckuiR>N%7_'yhN@ojɵ!MŸUξg5O-]{]SN:hYw|%]FƖݜWr馺UO N8MElx΁E#Zs\TST75:GIX!EȊV#g߳c x*߻nD{5 {:6Z80.Rǀ1E-JkZQ6_|ָ|c 9dVNs<Ƶ&mfwfGu3*L dzi?e?ϩs-{u'Wآoy7t_׎S SS/U.>.Q~N)v$۶q}Vw(8opwN%)cwTO]^8Ճ|7Xo8Nݰy0V39Y{npAdф,=\&<,?VjN(dQ9) $9"TSNWQH:I3JabJfk}r>Ƚ4n&ﰺATEڬ-ohj~E5kG3ijE2‘yP~|T^s E X[`G9kxú^ |W=w_n#vs6!? 效*TJ21ḓ8Ne*-68̵*rT\!̜ o8½\Z+#oE깘l CD #c{-Fy߷ZI\iй㬆/4HDsf{z1Ý#}Va{8uIm"M5ӦEAs`|sN^H_CYoq -oB&5.n.xrJ|y|eAѳUPY'@dOE!%{I9-T=6 "&y[~ޫdUVp/n}"FS_`p-+ _3 D5qbM!DV-C5F^PdTP),]{dƚJ_d2lI_\i7wF-wPn #6;^Z aRZK !P|7>uX@)p5T^V me^֥TH^ILB$iN3+cj3c@ճg:CzgZԸ;x`Q91G3s%2H6^Vt'*CA1tRdhX\ſ=pD A IWv+d>b#-r:L~Cx!ᢙ-6 7;(c*8z6nWSL;6a4Jч,JhTYyJF`Rd,g7WQL_b|#B? x]}UZ?؜9ax); & R9xG!KFJtjuђ֢ȎQ K l#ίJLB ~w̲./* z/0- 書Ȑy ۾~I/l83UFZwTcJlεV*F:BD ͸RtՋ{XGG_U,imc*ʬ3s#&sKLP9x56'^e=U"wa>=.;%W$ٙ!a|gdXl|Hd .{A (j6ŖtA`4mul+ZD>$㾸ir~Z5fH{y-«'E\O,V7 2c m!5-7PPV۫0B=8%l( '‰oW3Aħ[$5FKuBTD4` Y6uR=,єNy;@)'do2JG(2;yoHe~-& 4oj@!OG?x.JWm߹壳E3r3FԚ}CF;jTixM|>l[h4a2lsC! HyaW^늊<6R#Z\]9P铒Dali !mfחѽhiW 󭁾mE^ɧ~;2崕׳'u0Ks| J>tP:j,28k?gER$%.;\Px_~khO9(w ݜfQ4%i2slY4Vw7V$SS2$$C|nՕ%X8Nj5:mY^HǾVL>tCOכ[G"?4GZz0_wge9:CGiW3t{K|Y189>gJ:,RFynXA=: ^V:oƘN_e$yƓY 5apPIHUs$kKP3'=dQWc P9"'_Q_RX{OdEҋmYSܱUڡ2̵[g*f2 $Xk҅AᡥU9 ku Fz^$m|3o  1y)9wzphzr7ox?ejWadB3Haoψ!#LAJ qGM 9Ph `EF>3 7qc vx@EP˭!ܨWq+*Pa*)(!oUXGaY3a2=sZ~X~N"?q)xWK%if pG4%d^]G|!Dh(zGO ۼ\q;0%wej&Rm{Ceu}':V߿d8r CHE6xD}b"CD|-^9y/E\AБv\CaF\:6AIz&i=cj3~]\u]*>w/<<s)J¦߿5-xT/Q{K7.迈F-:Ĝboe@5Ywo;V/B <;R4|=YjY/Wn/o}7_ГEg^"T(t'K*(;FDϦ~yg gw<^XKUzcv{P 8n8Hc|tkb;쀦=F*$T[>ˠ1\ Ztuz !>TEǿaNΣ #L KzÓR୧kU69xw&7 枙ǢQi!vvj=c~M#+E/WoEiƔƉ0:ת1VjtTڞL(a4XBR[!RgEd8sx`O+M_%0/i_m8 V'I)ҔHȒ!=O:/酭Mb 1b1 } ~QH%M!*&_&]j3yyMmb2{|(88kV!DFPYXLD"6Us̍A)xV8*@O{L?R0ߟ#?OWph E<̌&aII%5[x)O;im5Z8/qmάlsz4\=2.^ݏH w`Nimž.XWT2ӄɌЛ`@º`Wtc?Ѣ: fҨ52" ΁̷7$3u;}ȐQI[_z|us`k/)J$MB(thxp{XS@Q|#w6#/N: p߱_h6BA#ؖ $깤x+@8ꋻXEjOmIC7MhYҜ_p7jcφ#qc[nqWdgU(Lߠe#lu5E٥|6^_xES4x7p=KBlOgq,2hϮfgPrmNa0kcJCo8z6_P B52=RG<HfK=ǟ6B~ɾ*٤w+j"2~EmVl̈ 7*Ԓ$%My۫"hR9%e3qS%ElY1l璂Jˌˇ|уϟOV#|1mӨY!yь9N Hrw9Vxæִ 0N43r 5ߓvS}\܎⇁/6}) CJ_ /Ӭ÷jＡZk@Ee`Hy 8ΟQSN $f;]D[~A=%PKfXr"Ub?zghJilybHyٺ>j.Q5I RMu۶f%`XQdTaϳԔt=f4Y }.ZrƜfi3`Cdؓ38 x ~8/TAC9,XP-ˀsoa]mHo5lπ#6#|C؅g eԵI:و:ٗ_ch㰨n'bG=7W3L0dcaad[W+;+hkۯpnfJ U8WP'18uN?oNy)[ *+;;57cN:Cek Dt9 +\2-2gm5l{ًȦebҋPkbCI_ڞ-hh|v5~н~Hg[$wVT~G{VNkC(;A!?V2>} ]*et>9C:qpm>܀,Tdpf>ډ4U!ɆY:\;8?dj/"G j'C ,g/P#XL{RАGMd:Mن+[8 ހ AܟHeh-4oh\YD;UR[:D cκ!/tZZfBoqh ڲgHb8adz%"unt V6vkO=t&v#trWkL d&y?^,2-nԗ״T+Ìpm/Л+O!|$#/+vm 0X52.(>Pz Obl!$h¹/NLۃ< +۴ǖ nM^(zAjQso5BP> {>oz$Kvت3m~ICGv\=UϴåexZFa&qO)lI!9H@3Y%7KmTcr^QXI {ÊI0s7k;a+r$<,S7X؍g-T9ѮXƻzvH~ V. Hp-Ɲ9Q.pYrSW&*gi$ێVFkme1?e1n7PzRZh,?' fC_+OJ֡OhQ)/>>ڒ\'RcEv~jF݆4;{#]0uY6&N!QR.5TUzh0~i(n 챾L'נ#^W]W?//.pvM,,)m$E\s An/k j Q*v`cGoXe8'Ϳ4mM.PVƹtRRb:%߄rOfUgw @.$Qv/ِ+xڬVX29>\xlOVK^{Tr7=$O=JK\M[sAgy;3 UiS44򔨐^vr y(`X2RA:`gHn:NWik.я um?Q#hW;< bB߄=1BB"jf`,y60܋ݙj eXmri'HGr^xZTDa7ح8mVE%a3{ƚul ,5AI\1JO`DDjaW6'8vjmSxHn 7&?X0[0waЀzPGJxb,+Q!t[is݅n;thԙ.*%+ENv= q8E_]үh,?+KZ<՞fݝݛ~4qUzƶܛ#Em} .1uUDV `'êN}7%~ Q:ZQ bP's^N^9VB (lݨon|R\ROw!Lŧ0{D*VD5x>9!sh雘D,, ԫCalm_0ErMG)qM̷s6]s<}F\l;xV*]yTD=4# ˨8 ȅz'WA>n@)r>G@vl޷ sKRCa>"=LQ b]K.అI :3 p=EVCn*Xu*'ezɞL v287׌:vM!X˨U'V)=2e2E9i)w~`{ԏ\n$ ܑ,"UXdEn@ضDB";Zਂ׼|9bkٚK x?و:QyiΊ XcK}~B>wߐ.pmŒ~«aP55ڬ&U!JeܾP-hOǸ010b .}vjx#|_jɕ #B4~5d$L%տ?o6OI nAOL vkD<@9Q}tj>8Bҧ2m^L2֝F%vVImnr ~ʑxJ*zS:n.Hm*{=:9Kaz$X1)ۿڛXCݍ\u=8@e"'Rn;yQqU1un6hGo"J^ uXUI-"ِoq96D_ 8Qdױ///AP HY[PKsp@60+-+nx;ӻ@Zr*!fմT5Rk!٦rD y!pf0$tDi"@q`wIQwUfIHTa( C`Ia=g1Y(iH>oT%ԈGð} 6VMZech*ϟOYPXlwf<0'h` }D&?zlǃ}r?mƙ'Eѥ+u4Z ũDZ 9kyZ'kaFEhN%Spһv"E*ЗQvM6dvNg]ͤl$}M??k‚M.Ӯ'U11B&DYο]/|YslqZ_D-,bdNʷT-3"HHⵘa P~fF/vbW5 w mvkT-/7SFWDw~6vj)Q_eΌBKyhw++qѭtbm(]j'wJwJQ"}FWi%qM8 rL,{c鮜E697̀9A={xe en袧mbd.ZJoPZѦw%ש#~V X!f_I!a0Ag,oZ[ [OJ O pppB/"K=J* t/C6a~4N3s&IY+gEI^,Eu-[n4Kܵ\1^ zm~`ʪU . xz~Sr|5E N0(Ʀ hWxo &Mr.Z _[_{Xt%?1rL O77#uGw4@JƮ xcQv'X·%c<=J'POZ [ev\촥p8m頨#=u2,FdHxrt=Jc~RnM9(YeȾ2)t,a5 oF4 0n%&\A=TiEysDDN| ,H 6<Ljis} -( r;ƘLC @gW7b2Fc@uaF=|b?jtxi'T̒e Gs0IP'7+^ƽLTT⠤-ϑQW/Wm~ We5´t!ɨV:Nt0omxŻq$Ufk/*^ [j|7ƴ:{P "Sϵpe7܂XUL`A sJVNa X'ۓKx]Ml.4l= $Q~QK,D])yR ԏBR 3PZ5ZQ#Pl(HBA`S$1z0NsNYdhMTZϩ̰Œ- M1ERqТ ڃV)o6EWb6ݭ cCwbF̃W2ǀ>\qTtQS', o* Q@v;!exO(ҫHw,F7 : p 5BV Kw$JQ'/@2 _`ɉyo&cb`bƾF<,}p.کe'֣=)1)BLTh^)Q iNQP(j i0r,"W漊uڛs]mWFfEMWcej<]+#?.ZThp?l6 j~e~yZ'KGJþ^-ZѮmRjUU$> an`.58Ha^7 >kH.%Y~:T&qV`d|Ik)&q:C5q u{JI9ZiIzx y\S*[ck ] m9K8⑳_%ūgA7qaGR8R^ODDveYT)2ܙBgF!-T(v\4E3٨IqEID",m-eQ ~PGV 3ǟ@ßq$*R {7P`7#_{ÒsCu4K%nu\|FYwbҋpQnPyw$Ri"t[ժ;\k?V*>:%bsHbH$!  'Rq9Y, Qm; [}@[kflKb"9`u5 BT@…'"qڇ .7_7Ej\YovЁv]KKpzbQiWNCH,b`!vjWH@郹y0;;ݠl>G(t~ߊ!]9 e) (5L)5k~/NY w(O`7zɇz#2WIѼ|sT1t?ja=҇'ĘDLYiU ݀yp@fP܁$9A@IDbEZPK]IɐT ^]L\I{ƉagDTݫvM`b -#J1//姕nh ĩ}mXA5sFxokUW-@W純B?aM3#~r㩽髺Li;5QWz0II*5dt7ҍKi>wŝzafC.qxS 5:wKAcq:bߙP,\n5›`k$<6gt7fz va&͖!:R&'%|cHɏl9\z[Qav3.yHǗėI /2)es׸yƳ{bs9%+`)k5>%L6gc#}/iƛF2:,/Jkkp԰b lVww@wUD7ͱq%$Wb0] +P IJ<ĵXќ 8(=ʘfϥp=2hZ^kˌܨ)'Wq|ՠ[(j/Voɔe6$#2$[9yrb84]/heV/BjԎUxP`/dYB dž*/n;)o?z,>5[,:xv ۾dT;侮cm3T-W}o`#NCeb/5O[O!#FQ>R C;UOVe iڒvZAY '&8/Q_z9BTէu/Gế $OOjBơ$nhHR`,FJ" Cue/$;}lec\dZz^ۯC{+?X0| hj듫} Gg[P;^RdĘrM'`5TPkmһqRuPSW7L l莽;i |qWT#U} /Zzvp>$ܾvM]V ^j4,]ځoRpiG D)d}.ꏯ**%eO z!p/#`츃$'Ӫ dr=>^nexO5<-y ̪aLV9BO'գ^ *,"8aq~իs`K<<Y[n%4>69a:}*q/y`(T\ԄYʒIM+7xD@a#̷S#}c~ZSh;Z `DQ|p݋8t-KeuC M^8B!Ҟk!$ESN&{/N*T@?*8 ,'Q&Ċ PKc$ sQ˝3b<9A`N!#W|!fR2GV-^ 3%$yrϹ{8 <=̏FL=yMQz]%:%Lyؔt}a lj"JvG}%w}o#d!@B]QkOA#ҵ0hGN۔`!B YLrKW51Wx^ :usمqDWzvufǍ3_g4XKAf:SyfsRd\%*KQHa4GSdi*4u՞%0)D`AP i{ٰł|\8ia2׉d6Ԅ:5=Dž6sZJ+L7„u&j3ӴEre6ʵJ+>~Z}1Р4bչܒE\}|^qgäfv;qawo]3zEf;:y0կgY2T*k1{e搓P>%FrQTqhe8% v)-H8J80U&'5 PGB`,kEQxE`<V{BkjEX# qN0cuW8sYfܽAc7gQ9}o&c5-p 7 Kd ^Wa֓a[L~}vD.39hY;{5Ǚ <~-< cҀC9iWe1TҤ ݿ)׮<7&oҷ$fmJ+YH.]'sIOMNby8dˣ#Hc3̝{TsBҦ g#崜c ML7.b#G s==.qcy6AL}ɘz'aԥj} B)+a!'<ѣq9%[GOAN[_%# Qhl${Bf,:J}4r) PC}kbWθ Փ TqfGE<1 Šγч'9쒸EgMIJsWE%pV+9 FF{ȽZLHeSC Q7!zA!YDvnC1IB=R/H8H8l5~p=h?iR?iw~U\1?b&Z#HSG'jY+k>5sˤӯsnA ׊r֪EpQ _.YK63&Z9‡_Rud] ] \BEpƶK;qإRxF073Ԍ%@Hy1ӧqj5D48YoK搂P[ a=uzj:fx> s9M[ N'#x< (ށxgN]vT`o?NPpco{+ɛD<Ճ_݉g :;Hdh:~\ۉm{IN((g+jN3L7 Ek}1n•jxQ9 q0 APU)Ѝ˛]Ȓi[Wl}zDx/(gCTZ%^:AhleN5ei励;!;\ŭP5:o6oX~eہl4]ŝSvǽSm 65m^6xVNUC 5hT>F:3ɑQoJ]ӻG +_ҟ2DӎmfudYr[<6GlίCm:$9,p]<"h~1(΅Ms{ :녽TAFx3N0e?˯2zhD<7Rrz w>c O x,P*Dc8/OS# "kW S!,VnzePޏ9'e4홨^Uj9|Г`f:%̓EfQ-m^;T.M1/ԍˑL\'WI!م5pH(*&OfuQopIx%iP;,.zy %W1&mBQߠ0~"u:J.ԐZ@ gjz#o:IL u/qb49zYEw&w+TJ}i&Սp|NQ`Jm7+i)ž^J΀{UVq_v)'"3΃ IJ (0$ҖM;ڣLa5.(|Zl/쏁lv_Zʡ6;v12OkD抦/"5&8HxGY$Ht͙pf9JC8Z@_?ܴ2aBbm/@^[dzc;Di?C,+ t@#ir f^cr +fkaNvb$)VcMˏ^Lˊ9IVfxa<< sft̏К l,^PI4P6 J!m[2"v@ "kжpwP+^ Ľ ŐR ĊfJ,4X$i-n"F }B{uRZ靭,ߧeON':)Т>qK͜p$8d-B6_+{A) ߴ垿Y޲{9gFQprkŮ^)R~>?@O/[#߰SaWG=na!TH:&W/#^^)p5coIZ,HV@p%9N&jP@82pAY g•u=߄C[`h0CxQGx\c -DnQeЀ"VT15E\JVR W{heBWHeWF/\3-EDkrTT/s4+Dߞs30ݟ:[`IB`AQ 19@|"MMD\$2( N'x3! 4=[X%lLޚJBؕj&2B{uځ S emi"_Um"Q]s8[sxxI^fbҊkn6‡x-0r/ f6 r<8 H c\F @RW})%ڹ0O1:\>Y [=C1}qQ7N]i( ( HX~AmmdsnXSPv8"-s&b3qHSbFqu<3S1]8@:iGjfMɈG6z/F6<'pNl̛99nZʅ} a]4& Lq3mڶZB8HVOdZS_eH$lG[ʣ^o߶CZ *ݐeٗa;E%n޹` |QjfQ DdRa|F.N`.Xvi>,D7,$>Ur5%0tY"j'$!W%gN%G[vŊ-'QdB [Կgf^ [5NEB,)NѥC2pudlV䲥hOĴaC\8H ! o96}·?ws*7¾· t 3N.cG\C-k8~g`.'}yѦ(HlWƀ1[/d4Dj |t.`pU?dSsWmqH]^ $Pmwh_j6K1sTͧo8IںG"FA\xC#QD~Hj <#Ek8[nlV 9RV|vfz"n ֹ%K3ᓑt~JhقO_x->mԯRyvӔ/]<%.5#[?;;[EuʹDG~WO sUKqM_ez ra~qG4F{7n7Nۈq`K;7^Ygʒ0*#2pè `֔k$0,v#Ad3ac}wyOc|?WAN JЄ cWѠ7/ȿzaㆾ*NPH6(EG^ݷѤC9qa /NZV@na5a_E“aTpokl?L 2JS3w ZgW#6勒lZ<}]V;uG bO < x1S+U<؂O[H+8]k*;!-Ζ 7U?i]TAFJxdxu1)ѼUE _b2"DŽpY?W@/HςanßjZð%@%:ipG% wLycў&uu$?'lXU֡׉E \Cȕz>ڗ!ݬեTLhd bR@i |L̆Рwl!y%= Ԏ K6&ynU~s%;gf%` _KXWg%-kLqch|8@Yg r=t)Yt lnp=[3A6:k&N'3AmP80/α՚u7hY*tք/}8jNB ^ͷF/KS?MV. ;tҬhЙx^`t9Jq%Dy @K]R9f._,q Ťw%]NfPZu@a g3s9sl4=зhζ`TsynϚj@@Caώ 0;Jbl᷎PK*")"UFr9>fˈƟ+R/,K"Pz\=s(ؔW2\eI*U;)#ɕ$ j_ww]NbSV7Xul;u($HvX &Z4eJ)~ vL^]{-F 7w /ѿ 4ԇ)ʳ. r5p"7W_m?*m(7. `֚V X%6?Ӛl@a2^4 Մx[$6|)qGf ޴b5,5ˇ_Zd.~ǎ҂2 aEy5#rYu6T5QQ R&sr#o0C]u#1[C30O\ `ǧR*d'(D 1Ɖu-{ KW3GeI]DMs̴||Ilӕ ӢQ>CA_6I@@&  ߡOi p Ê/qC(W5GVY kA[B!>L,Y@N=@υ"M*}v(Ě&nʼnf!%b$\0s}1/b(4;mh/JᾞlIv';&Ǚ}~$:MNMڄ%z9xĖkcl>HQ>őH6Odyz+PZeGCR(ȉP!i A^X6E(YS^lndCI%R J (v"o3|=:a#6AθL&7->[ $ڝFOjM2:ֲ:D'kORr{\ ֛_5肍Mú&nܝHqZS^11Y&7֍r4vo _5sIj37H{B 3QWHA_NI_ܩaoV h"2i609jEw ?2V?~]r35%}K8lRũB>쁃C"~ mWiCqlbob!l)\|'Jjcmٗc}CJ"rV2_.(eL.I*(Zp'k?+ntܧw+=V3O[/NNցc&-QĖO%~n_fN0Ofӻyɉ/]4#rE|CmY*V$ĠKSxA;zZ6jw|A/\ܪ|F[,K " Jö!yzr~k>'u{:+Ș0%,qX,F ^3_b+HޑNi{;_x{J~TS`|.wis'>lHV=4্S6,|nM>O.+*O,ş_v\NaʲY\%@bP9z?V"v##RC$mޣAD]-,F ,FEW E  ]& @."U `ԱMb_v|BY'%itef"3럑E:8{vɆAtXD(Ah>\zQb#8Gg0QHKGbxϺ,IY3+%֚#`}z"y^ea+fqQEF^y>/3_>["S?!Qm n;VqH\\DӀ&nR:3Co+PDȃwSv ^T$HC!S|a@|Lgcg%ƻxȓg_Hgt̬ !ɲړc:^$'xHa!06[l!6_>J$=4k/[x~yg1sn˴(VIXe_,:`My쐾ATX,IFu8Y {;(;pI,`D[ Tz_oV];VnJ8-.F]B+aޞ*1y.7JFު*@YL|YFF_恱!5cN,槶1gǠau‡W:E%4rXv@#sh7arN@In|ղY1)I;]Ǹ_; :V<_h 9mԨ+d@ ǟjVȘIdෑ^K푨6{<1~N4&|H< ,jYogĠQ&as& ~' dUL,8JZ-EEZZ%`2iTa R m'PI!\z9U{ԭ $?`U͠K;,(mZhH0o̊q.)\OO夺f fH}D3ZC @Dc7gj?Yue/:PwV{7^URb^ Go1b/˵Ɔs dRۄ/2A/ȵbݶ=.E+lsT&ݍw EhG8 6hRN?CU)MЖE$쨠dOR_dphjf%)4w*FGW v*[KV(ݛV7%_*g~2cɉzdO,9X7홐i[\nk~l&}cQ$uaVP^v8bn\qf +3^afU iEPϒ6UKgoYbV?bg ed#^SrA8*6ߚj@_u]<+1BĮxOw[2"z)p4Jq#@־LE|_[*O/*>WZ9KEnӦC6WR$1i,9І'L?SBܽ2 /<X3xmMJ2gR$9;AI.6s?LW_{-HbI!|D ;_b=d5scޏS:Qm ojh-G ]괘,o/MTLYvܓ 5=C|j:˿쉅 YEp)r;\kiq6$Gt*=iv|7˓yquz[Dk#{D'l_dw9 տVuaq[]gї=;Td+UW[N.Q=VSv0BA˿üHgl)K4*>H4^l/Ā%x)|b}$xwhH-)YgtDvϑ#ߡ0n'![1`pB^yҷt ;FrG";u`~NCpPb1gTQ93%\&E@m,p଀ "Ed䬨?BFgsՔΑ]Ǹpf7HZ+h ӯ1q+{CViT쀒W69>.ygflDe7[s< m$d-}hd5 6ǩ.bXpe%0r :vGI&33WkuIo4K[%k9)Hor/?i#F]훇$S)TLƐ̀> G #W`\\2]V?Fj/RUd0Mha@EG(Sn7]*'=cZ@ ;YP!]3DW ~T[b__mO-Yۣƹ+Jf8M|nʛsR ?12yd ތ|ZKth8f:)w#L1FssU}Il@́YZGHZHEkDcC̙@p邲Ja|L39{V`t1_-( uɉ$1TL#4A^b+Љwږu&ф tPE樃ƴ9˶4" K O5RW*gڣPwNZ(ÿhwʶ8Υ;Ѡu3a+{! ̃ʆ&̆p?auS9"yWY .<<#ԘKUdwAo 1j7N2+Z=k1}">eyp4>P`r ]o=*5ldz+FDpO^$7sDucP^L! sGPzƒ L YZ