gpg2-2.4.4-150600.3.15.1<>, i{Yp9|aB\YhYv6JMnn4eE8<58C,Jm ~{tLG(2A33 sj]S2TzSEu´~z=+ԴOKH}]?'SuڽO}M=z3a'FE?} s^tHPݵm d^c=EmS!x XwVR>F?d   dLP\`y H{4{ *{  {  { "G{ #D{%0{'{)* {, ,<*,*0*(1B81L93P:=>BFG0{H{I{XYZ[\{]{^b-cdUeZf]l_ut{v`w|{xh{yTz(8<DLPVCgpg22.4.4150600.3.15.1File encryption, decryption, signature creation and verification utilityGnuPG is a hybrid-encryption software program; it uses a combination of symmetric-key and public-key cryptography to encrypt/decrypt messages and/or to sign and verify them. gpg2 provides GPGSM, gpg-agent, and a keybox library.i{Yh04-ch1bBSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Securityhttps://www.gnupg.orglinuxx86_64 [ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || : !xp -̨$(mhI E @(1 H j ˀ`(.MX*4 k)I.&F +4kt%6 > #5  @u o < o=EG& 81S1dY& ZFg-5&!5  ؠ#$3Z o8A큤AA큤A큤A큤A큤A큤i{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Ye2e3i{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yd+߷d+߷i{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yd+߷d+߷d+߷d+߷d+߷d+߷i{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{Yi{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.sv.txthelp.sv.txthelp.sv.txthelp.sv.txthelp.sv.txthelp.sv.txthelp.sv.txthelp.sv.txthelp.sv.txtgpg2.1.gzgpgv2.1.gzrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootgpg2-2.4.4-150600.3.15.1.src.rpmconfig(gpg2)gnupggpggpg2gpg2(x86-64)newpg@@@ @@@@@@@@@@@@@@@@@@ @@ @@@@@@@@    /bin/sh/bin/shconfig(gpg2)libassuan.so.0()(64bit)libassuan.so.0(LIBASSUAN_1.0)(64bit)libassuan0libbz2.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libgcrypt.so.20()(64bit)libgcrypt.so.20(GCRYPT_1.6)(64bit)libgcrypt20libgpg-errorlibgpg-error.so.0()(64bit)libgpg-error.so.0(GPG_ERROR_1.0)(64bit)libksbalibksba.so.8()(64bit)libksba.so.8(KSBA_0.9)(64bit)libnpth.so.0()(64bit)libnpth.so.0(NPTH_1.0)(64bit)libreadline.so.7()(64bit)libsqlite3.so.0()(64bit)libusb-1.0.so.0()(64bit)libz.so.1()(64bit)pinentryrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.4.4-150600.3.15.12.5.01.9.11.461.3.43.0.4-14.6.0-14.0-15.2-14.14.3iy@iy@i_@i_@i_@i_@i_@h]6@h>geM@e?e.w@e-%e%W@W@WWW]@W.@WWbWPW)@VV_V%@Vd#@Va@VTQ@VO @VU@U5@U'U@UU~@Uyx@UXUQ@U) U@U @TgTD@TMT@T~@TuTa@T[bangel.yankov@suse.comangel.yankov@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comangel.yankov@suse.comangel.yankov@suse.compmonreal@suse.comlucas.mulling@suse.comlucas.mulling@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comdavid.anes@suse.compmonreal@suse.comandreas.stieger@gmx.deandreas.stieger@gmx.demeissner@suse.comandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.depmonreal@suse.compmonreal@suse.comandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.deandreas.stieger@gmx.depmonrealgonzalez@suse.comandreas.stieger@gmx.depmonrealgonzalez@suse.comandreas.stieger@gmx.defvogt@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.comandreas.stieger@gmx.depmonrealgonzalez@suse.comlnussel@suse.depmonrealgonzalez@suse.comjsikes@suse.depmonrealgonzalez@suse.comkbabioch@suse.dekbabioch@suse.depmonrealgonzalez@suse.comolaf@aepfle.dekbabioch@suse.deatoptsoglou@suse.comcrrodriguez@opensuse.orgkbabioch@suse.combwiedemann@suse.comkbabioch@suse.comtchvatal@suse.comastieger@suse.comkbabioch@suse.comastieger@suse.comkbabioch@suse.comkbabioch@suse.comastieger@suse.comfvogt@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.commarco.strigl@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comjengelh@inai.deastieger@suse.comtchvatal@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comtchvatal@suse.comastieger@suse.comastieger@suse.compjanouch@suse.deastieger@suse.comastieger@suse.comastieger@suse.comvcizek@suse.comp.drouand@gmail.comastieger@suse.comvcizek@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comschwab@linux-m68k.orgastieger@suse.comastieger@suse.commeissner@suse.comastieger@suse.comastieger@suse.comidonmez@suse.comastieger@suse.comastieger@suse.comastieger@suse.comandreas.stieger@gmx.dedev@stellardeath.organdreas.stieger@gmx.deandreas.stieger@gmx.devcizek@suse.comvcizek@suse.com- Security fix [bsc#1257396, CVE-2026-24882] - gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys - Added gnupg-CVE-2026-24882.patch- Security fix: [bsc#1256389] (gpg.fail/filename) * GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field * Add gnupg-accepts-path-separators-literal-data.patch- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy) * gpg: Fix possible memory corruption in the armor parser [T7906] * Add gnupg-CVE-2025-68973.patch- Security fix: [bsc#1256246] (gpg.fail/sha1) * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904] * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch- Security fix: [bsc#1256244] (gpg.fail/detached) * gpg: Error out on unverified output for non-detached signatures [T7903] * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch- Security fix: [bsc#1256243] * gpg2 agent: Fix a memory leak * Add patch gnupg-agent-memleak.patch- Security fix: [bsc#1256390] (gpg.fail/notdash) * gpg2: Cleartext Signature Forgery in the NotDashEscaped header implementation in GnuPG * Add patch gnupg-notdash-escape.patch- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258] * gpg: Fix regression for the recent malicious subkey DoS fix. * gpg: Fix another regression due to the T7547 fix. * gpg: Allow the use of an ADSK subkey as ADSK subkey. * Add patches: - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch- Don't install expired sks certificate [bsc#1243069] * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119] * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch- Update to 2.4.4: [bsc#1219191] * gpg: Do not keep an unprotected smartcard backup key on disk. See https://gnupg.org/blog/20240125-smartcard-backup-key.html for a security advisory. [T6944] * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit platforms. [T6736] * gpg: Fix expiration time when Creation-Date is specified. [T5252] * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866] * gpg: Add option --with-v5-fingerprint. [T6705] * gpg: Add sub-option ignore-attributes to --import-options. * gpg: Add --list-filter properties sig_expires/sig_expires_d. * gpg: Fix validity of re-imported keys. [T6399] * gpg: Report BEGIN_ status before examining the input. [T6481] * gpg: Don't try to compress a read-only keybox. [T6811] * gpg: Choose key from inserted card over a non-inserted card. [T6831] * gpg: Allow to create revocations even with non-compliant algos. [T6929] * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923] * gpg: Improve error message for expired default keys. [T4704] * gpgsm: Add --always-trust feature. [T6559] * gpgsm: Support ECC certificates in de-vs mode. [T6802] * gpgsm: Major rewrite of the PKCS#12 parser. [T6536] * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654] * keyboxd: Timeout on failure to get the database lock. [T6838] * agent: Update the key stubs only if really modified. [T6829] * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080] * scd: Add support for CardOS 5.4 cards. [rG812f988059] * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09] * scd: Add support for Smartcafe Expert 7.0 cards. [T6919] * scd: Add a length check for a new PIN. [T6843] * tpm: Fix keytotpm handling in the agent. [rG9909f622f6] * tpm: Fixes for the TPM test suite. [T6052] * dirmngr: New option --ignore-crl-extensions. [T6545] * dirmngr: Support config value "none" to disable the default keyserver. [T6708] * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4] * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc] * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28] * gpgconf: Adjust the -X command for the new VERSION file format. [T6918] * wkd: Use export-clean for gpg-wks-client's --mirror and --create commands. [rG2c7f7a5a278c] * wkd: Make --add-revocs the default in gpg-wks-client. New option - -no-add-revocs. [rG10c937ee68] * Remove duplicated backslashes when setting the homedir. [T6833] * Ignore attempts to remove the /dev/null device. [T6556] * Improve advisory file lock retry strategy. [T3380] * Release-info: https://dev.gnupg.org/T6578 * Remove patch upstream: - gnupg-Report-BEGIN_-status-before-examining-the-input.patch- Fix the build in SLE and Leap by adding an exclude in the files section for the dirmngr's systemd user units. [jsc#PED-7093]- Do not pull revision info from GIT when autoconf is run. This removes the -unknown suffix after the version number. * Add gnupg-nobetasuffix.patch [bsc#1216334]- Fix Emacs EasyPG behavior when parsing output: * gpg: Report BEGIN_* status before examining the input. * Upstream task: https://dev.gnupg.org/T6481 * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch- Install the internal executables in the /usr/libexec dir instead of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase, gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.- Provide the systemd-user files since they have been removed upstream since version 2.4.1. [bsc#1201564] * Add gpg2-systemd-user.tar.xz- Install the systemd user units in the _userunitdir [bsc#1201564] * Note that, there is no activation by default. * Rework excludes in the spec's files section.- Revert back to use the IBM TPM Software stack.- Update to 2.4.3: * gpg: Set default expiration date to 3 years. [T2701] * gpg: Add --list-filter properties "key_expires" and "key_expires_d". [T6529] * gpg: Emit status line and proper diagnostics for write errors. [T6528] * gpg: Make progress work for large files on Windows. [T6534] * gpg: New option --no-compress as alias for -z0. * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534] * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0] * gpgsm: Major rewrite of the PKCS#12 parser. [T6536] * gpgtar: New option --no-compress. * dirmngr: Extend the AD_QUERY command. [rG207c99567c] * dirmngr: Disable the HTTP redirect rewriting. [T6477] * dirmngr: New option --compatibility-flags. [rGbf04b07327] * dirmngr: New option --ignore-crl-extensions. [T6545] * wkd: Use export-clean for gpg-wks-client's --mirror and --create commands. [rG2c7f7a5a27] * wkd: Make --add-revocs the default in gpg-wks-client. New option - -no-add-revocs. [rG10c937ee68] * scd: Make signing work for Nexus cards. [rGb83d86b988] * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]- Update to 2.4.2: * gpg: Print a warning if no more encryption subkeys are left over after changing the expiration date. [rGef2c3d50fa] * gpg: Fix searching for the ADSK key when adding an ADSK. [T6504] * gpgsm: Speed up key listings on Windows. [rG08ff55bd44] * gpgsm: Reduce the number of "failed to open policy file" diagnostics. [rG68613a6a9d] * agent: Make updating of private key files more robust and track display S/N. [T6135] * keyboxd: Avoid longish delays on Windows when listing keys. [rG6944aefa3c] * gpgtar: Emit extra status lines to help GPGME. [T6497] * w32: Avoid using the VirtualStore. [T6403] * Rebase gnupg-add_legacy_FIPS_mode_option.patch- Update to 2.4.1: * If the ~/.gnupg directory does not exist, the keyboxd is now automagically enabled. [rGd9e7488b17] * gpg: New option --add-desig-revoker. [rG3d094e2bcf] * gpg: New option --assert-signer. [rGc9e95b8dee] * gpg: New command --quick-add-adsk and other ADSK features. [T6395, https://gnupg.org/blog/20230321-adsk.html] * gpg: New list-option "show-unusable-sigs". Also show "[self-signature]" instead of the user-id in key signature listings. [rG103acfe9ca] * gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367] * gpg: Detect already compressed data also when using a pipe. Also detect JPEG and PNG file formats. [T6332] * gpg: New subcommand "openpgp" for --card-edit. [T6462] * gpgsm: Verification of detached signatures does now strip trailing zeroes from the input if --assume-binary is used. [rG2a13f7f9dc] * gpgsm: Non-armored detached signature are now created without using indefinite form length octets. This improves compatibility with some PDF signature verification software. [rG8996b0b655] * gpgtar: Emit progress status lines in create mode. [T6363] * dirmngr: The LDAP modifyTimestamp is now returned by some keyserver commands. [rG56d309133f] * ssh: Allow specification of the order keys are presented to ssh. See the man page entry for --enable-ssh-support. [T5996, T6212] * gpg: Make list-options "show-sig-subpackets" work again. Fixes regression in 2.4.0. [rG5a223303d7] * gpg: Fix the keytocard command for Yubikeys. [T6378] * gpg: Do not continue an export after a cancel for the primary key. [T6093] * gpg: Replace the --override-compliance-check hack by a real fix. [T5655] * gpgtar: Fix decryption with input taken from stdin. [T6355] * Rebase patches: - gnupg-revert-rfc4880bis.patch - gnupg-add_legacy_FIPS_mode_option.patch * Remove patch fixed upstream: - gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch- Temporarily revert back to the pre-2.4 default for key generation. The new rfc4880bis has been set as the default in 2.4 version and might create incompatible keys. Note that, rfc4880bis can still be used with the option flag --rfc4880bis as in previous versions. * More info in the gnupg-devel ML: https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html * Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9 * Add gnupg-revert-rfc4880bis.patch- Allow 8192 bit RSA keys in keygen UI when large_rsa is set * Add gnupg-allow-large-rsa.patch- Fix the regression test suite fails with the IBM TPM Software stack. Builds fine using the Intel TPM; use the swtpm and tpm2-0-tss-devel packages instead of ibmswtpm2 and ibmtss-devel.- Fix broken GPGME QT tests: Upstram dev task dev.gnupg.org/T6313 * The original patch has been modified to expand the changes also to the tests/gpgme/Makefile.in file. * Add gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch- Updated to require libgpg-error-devel >= 1.46 - Rebased patches: * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch * gnupg-add_legacy_FIPS_mode_option.patch - GnuPG 2.4.0: * common: Fix translations in --help for gpgrt < 1.47. * gpg: Do not continue the export after a cancel for the primary key. * gpg: Replace use of PRIu64 in log_debug. * Update NEWS for 2.4.0. * tests: Fix make check with GPGME. * agent: Allow arguments to "scd serialno" in restricted mode. * scd:p15: Skip deleted records. * build: Remove Windows CE support. * wkd: Do not send/install/mirror expired user ids. * gpgsm: Print the revocation time also with --verify. * gpgsm: Fix "problem re-searching certificate" case. * gpgsm: Print revocation date and reason in cert listings. * gpgsm: Silence the "non-critical certificate policy not allowed". * gpgsm: Always use the chain model if the root-CA requests this. * gpg: New export option "mode1003". * gpg: Remove a mostly duplicated function. * tests: Simplify fake-pinentry to use the option only. * tests: Fix fake-pinentry for Windows. * tests: Fix make check-all. * agent: Fix import of protected v5 keys. * gpgsm: Change default algo to AES-256. * tests: Put a workaround for semihosted environment. * tests: More fix for semihosted environment. * tests: Support semihosted environment. * tests: Fix tests under cms. * tests,w32: Fix for semihosted environment. * w32: Fix for tests on semihosted environment. * w32: Fix gnupg_unsetenv. * wkd: New option --add-revocs and some fixes. * wkd: Make use of --debug extprog. * gpg: New export-filter export-revocs. * gpg: Fix double-free in gpg --card-edit. * gpg: Make --require-compliance work with out --status-fd. * gpg: New option --list-filter. * dirmngr: Silence ocsp debug output. * tests: Fix to support --enable-all-tests and variants. * tests:w32: Fix for non-dot file name for Windows. * tests:gpgscm:w32: Fix for GetTempPath. * tests: Keep .log files in objdir. * tests: Use 233 for invalid value of FD. * w32: Fix gnupg_tmpfile for possible failure. * scd: Redact --debug cardio output of a VERIFY APDU. * common: Remove Windows CE support in common. * gpgsm: Fix colon outout of ECC encryption certificates. * scd:nks: Fix ECC signing if key not given by keygrip. * dirmngr: Fix verification of ECDSA signed CRLs. * agent: Allow trustlist on Windows in Unicode homedirs. * gpg: Fix verification of cleartext signatures with overlong lines. * gpg: Move w32_system function. * gpg: New option --quick-update-pref. * gpg: New list-options show-pref and show-pref-verbose. * tests: Add tests to check that OCB is only used for capable keys. * gpg: Make --list-packets work w/o --no-armor for plain OCB packets. * tests: Add symmetric decryption tests. * tests: Add tr:assert-same function. * agent: Avoid blanks in the ssh key's comment. * build: Update m4 files. * gpg: Merge --rfc4880bis features into --gnupg. * gpg: Allow only OCB for AEAD encryption. * gpg: New option --compatibility-flags. * gpgsm: Also announce AES256-CBC in signatures. * gpg: Fix trusted introducer for user-ids with only the mbox. * gpg: Import stray revocation certificates. * agent: Automatically convert to extended key format by KEYATTR. * card: New commands "gpg" and "gpgsm". * card: Also show fingerprints of known X.509 certificates. * scd:nks: Support non-ESIGN signing with the Signature Card v2. * gpgsm: Allow ECC encryption keys with just keyAgreement specified. * gpgsm: Use macro constants for cert_usage_p. * build: Update gpg-error.m4. * agent,common,dirmngr,tests,tools: Remove spawn PREEXEC argument. * gpg: Move NETLIBS after GPG_ERROR_LIBS. * gpg: Use GCRY_KDF_ONESTEP_KDF with newer libgcrypt in future. * common,w32: Fix struct stat on Windows. * agent,w32: Support Win32-OpenSSH emulation by gpg-agent. * common: Don't use FD2INT for POSIX-only code. * dirmngr: Fix build with no LDAP support.- GnuPG 2.3.8: * gpg: Do not consider unknown public keys as non-compliant while decrypting. * gpg: Avoid to emit a compliance mode line if Libgcrypt is non-compliant. * gpg: Improve --edit-key setpref command to ease c+p. * gpg: Emit an ERROR status if --quick-set-primary-uid fails and allow to pass the user ID by hash. * gpg: Actually show symmetric+pubkey encrypted data as de-vs compliant. Add extra compliance checks for symkey_enc packets. * gpg: In de-vs mode use SHA-256 instead of SHA-1 as implicit preference. * gpgsm: Fix reporting of bad passphrase error during PKCS#11 import. * agent: Fix a regression in "READKEY --format=ssh". * agent: New option --need-attr for KEYINFO. * agent: New attribute "Remote-list" for use by KEYINFO. * scd: Fix problem with Yubikey 5.4 firmware. * dirmngr: Fix CRL Distribution Point fallback to other schemes. * dirmngr: New LDAP server flag "areconly" (A-record-only). * dirmngr: Fix upload of multiple keys for an LDAP server specified using the colon format. * dirmngr: Use LDAP schema v2 when a Base DN is specified. * dirmngr: Avoid caching expired certificates. * wkd: Fix path traversal attack in gpg-wks-server. Add the mail address to the pending request data. * wkd: New command --mirror for gpg-wks-client. * gpg-auth: New tool for authentication. * New common.conf option no-autostart. * Silence warnings from AllowSetForegroundWindow unless GNUPG_EXEC_DEBUG_FLAGS is used. * Rebase gnupg-detect_FIPS_mode.patch * Remove patch upstream: - gnupg-2.3.7-scd-openpgp-Fix-workaround-for-Yubikey-heuristics.patch- Fix YubiKey 5 Nano support (boo#1202201), add gnupg-2.3.7-scd-openpgp-Fix-workaround-for-Yubikey-heuristics.patch- GnuPG 2.3.7: * CVE-2022-34903: garbled status messages could trick gpgme and other parsers to accept faked status lines [boo#1201225] * A number of bug fixes to the gpg command line interface * gpgsm gained a number of new options and got some rework on the PKCS#12 parser to support DFN issues keys * The gpg agent got some added options and UI tweaks * smart card support got a number of bug fixes, and improved support for Technology Nexus cards and Yubikey * The Telesec ESIGN application is now supported- added tpm support, added a new subpackage gpg2-tpm- GnuPG 2.3.6: * Up to five times faster verification of detached signatures, doubled detached signing speed, threefold decryption speedup for large files, nearly double the AES256.OCB encryption speed * Add support for GeNUA cards * Added and improved options for crypto options, and all-around bug fixes- GnuPG 2.3.4: * gpg: New option --min-rsa-length * gpg: New option --forbid-gen-key * gpg: New option --override-compliance-check * gpgconf: New command --show-configs * agent,dirmngr,keyboxd: New option --steal-socket * gpg: Fix printing of binary notations * gpg: Remove stale ultimately trusted keys from the trustdb * gpg: Fix indentation of --print-mds and --print-md sha512 * gpg: Emit gpg 2.2 compatible Ed25519 signature * gpgsm: Detect circular chains in --list-chain * dirmngr: Make reading resolv.conf more robust * dirmngr: Ask keyservers to provide the key fingerprints * gpgconf: Allow changing gpg's deprecated keyserver option * gpg-wks-server: Fix created file permissions * scd: Support longer data for ssh-agent authentication with openpgp cards * scd: Modify DEVINFO behavior to support looping forever * Silence warning about the rootdir under Unices w/o a mounted /proc file system * Fix possible build problems about missing include files- GnuPG 2.3.3: * agent: Fix segv in GET_PASSPHRASE (regression) * dirmngr: Fix Let's Encrypt certificate chain validation * gpg: Change default and maximum AEAD chunk size to 4 MiB * gpg: Print a warning when importing a bad cv25519 secret key * gpg: Fix --list-packets for undecryptable AEAD packets * gpg: Verify backsigs for v5 keys correctly * keyboxd: Fix checksum computation for no UBID entry on disk * keyboxd: Fix "invalid object" error with cv448 keys * dirmngr: New option --ignore-cert * agent: Fix calibrate_get_time use of clock_gettime * Support a gpgconf.ctl file under Unix and use this for the regression tests- GnuPG 2.3.2: * gpg: Allow fingerprint based lookup with --locate-external-key. * gpg: Allow decryption w/o public key but with correct card inserted. * gpg: Auto import keys specified with --trusted-keys. * gpg: Do not use import-clean for LDAP keyserver imports. * gpg: Fix mailbox based search via AKL keyserver method. * gpg: Fix memory corruption with --clearsign introduced with 2.3.1. * gpg: Use a more descriptive prompt for symmetric decryption. * gpg: Improve speed of secret key listing. * gpg: Support keygrip search with traditional keyring. * gpg: Let --fetch-key return an exit code on failure. * gpg: Emit the NO_SECKEY status again for decryption. * gpgsm: Support decryption of password based encryption (pwri). * gpgsm: Support AES-GCM decryption. * gpgsm: Let --dump-cert --show-cert also print an OpenPGP fingerprint. * gpgsm: Fix finding of issuer in use-keyboxd mode. * gpgsm: New option --ldapserver as an alias for --keyserver. * agent: Use SHA-256 for SSH fingerprint by default. * agent: Fix calling handle_pincache_put. * agent: Fix importing protected secret key. * agent: Fix a regression in agent_get_shadow_info_type. * agent: Add translatable text for Caps Lock hint. * agent: New option --pinentry-formatted-passphrase. * agent: Add checkpin inquiry for pinentry. * agent: New option --check-sym-passphrase-pattern. * agent: Use the sysconfdir for a pattern file. * agent: Make QT_QPA_PLATFORMTHEME=qt5ct work for the pinentry. * dirmngr: LDAP search by a mailbox now ignores revoked keys. * dirmngr: For KS_SEARCH return the fingerprint also with LDAP. * dirmngr: Allow for non-URL specified ldap keyservers. * dirmngr: New option --ldapserver. * dirmngr: Fix regression in KS_GET for mail address pattern. * card: New option --shadow for the list command. * tests: Make sure the built keyboxd is used. * scd: Fix computing shared secrets for 512 bit curves. * scd: Fix unblock PIN by a Reset Code with KDF. * scd: Fix PC/SC removed card problem. * scd: Recover the partial match for PORTSTR for PC/SC. * scd: Make sure to release the PC/SC context. * scd: Fix zero-byte handling in ECC. * scd: Fix serial number detection for Yubikey 5. * scd: Add basic support for AET JCOP cards. * scd: Detect external interference when --pcsc-shared is in use. * scd: Fix access to the list of cards. * gpgconf: Do not list a disabled tpm2d. * gpgconf: Make runtime changes with different homedir work. * keyboxd: Fix searching for exact mail adddress. * keyboxd: Fix searching with multiple patterns. * tools: Extend gpg-check-pattern. * wkd: Fix client issue with leading or trailing spaces in user-ids. * Pass XDG_SESSION_TYPE and QT_QPA_PLATFORM envvars to Pinentry. * Change the default keyserver to keyserver.ubuntu.com. This is a temporary change due to the shutdown of the SKS keyserver pools.- GnuPG 2.3.1: * The new configuration file common.conf is now used to enable the use of the key database daemon with "use-keyboxd". Using this option in gpg.conf and gpgsm.conf is supported for a transitional period. See doc/example/common.conf for more. * gpg: Force version 5 key creation for ed448 and cv448 algorithms. * gpg: By default do not use the self-sigs-only option when importing from an LDAP keyserver. * gpg: Lookup a missing public key of the active card via LDAP. * gpgsm: New command --show-certs. * scd: Fix CCID driver for SCM SPR332/SPR532. * scd: Further improvements for PKCS#15 cards. * New configure option --with-tss to allow the selection of the TSS library. - Rebase patches: * gnupg-add_legacy_FIPS_mode_option.patch * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch * gnupg-dont-fail-with-seahorse-agent.patch * gnupg-set_umask_before_open_outfile.patch- GnuPG 2.3.0: * A new experimental key database daemon is provided. To enable it put "use-keyboxd" into gpg.conf and gpgsm.conf. Keys are stored in a SQLite database and make key lookup much faster. * New tool gpg-card as a flexible frontend for all types of supported smartcards. * New option --chuid for gpg, gpgsm, gpgconf, gpg-card, and gpg-connect-agent. * The gpg-wks-client tool is now installed under bin; a wrapper for its old location at libexec is also installed. * tpm2d: New daemon to physically bind keys to the local machine. * gpg: Switch to ed25519/cv25519 as default public key algorithms. * gpg: Verification results now depend on the --sender option and the signer's UID subpacket. * gpg: Do not use any 64-bit block size cipher algorithm for encryption. Use AES as last resort cipher preference instead of 3DES. This can be reverted using --allow-old-cipher-algos. * gpg: Support AEAD encryption mode using OCB or EAX. * gpg: Support v5 keys and signatures. * gpg: Support curve X448 (ed448, cv448). * gpg: Allow use of group names in key listings. * gpg: New option --full-timestrings to print date and time. * gpg: New option --force-sign-key. * gpg: New option --no-auto-trust-new-key. * gpg: The legacy key discovery method PKA is no longer supported. The command --print-pka-records and the PKA related import and export options have been removed. * gpg: Support export of Ed448 Secure Shell keys. * gpgsm: Add basic ECC support. * gpgsm: Support creation of EdDSA certificates. [#4888] * agent: Allow the use of "Label:" in a key file to customize the pinentry prompt. * agent: Support ssh-agent extensions for environment variables. With a patched version of OpenSSH this avoids the need for the "updatestartuptty" kludge. * scd: Improve support for multiple card readers and tokens. * scd: Support PIV cards. * scd: Support for Rohde&Schwarz Cybersecurity cards. * scd: Support Telesec Signature Cards v2.0 * scd: Support multiple application on certain smartcard. * scd: New option --application-priority. * scd: New option --pcsc-shared; see man page for important notes. * dirmngr: Support a gpgNtds parameter in LDAP keyserver URLs. * The symcryptrun tool, a wrapper for the now obsolete external Chiasmus tool, has been removed. * Full Unicode support for the command line. - dropped legacy commands: gpg-zip- Remove the "files-are-digests" option from the openSUSE package. This feature was not upstream and only used in the OBS signing daemon. The recommended upstream feature for separating the data to be signed from the private keys is gpg agent forwarding, available from 2.1. Drop gnupg-2.2.8-files-are-digests.patch- GnuPG 2.2.27: * gpgconf: Fix case with neither local nor global gpg.conf * gpgconf: Fix description of two new options - includes changes from 2.2.26: * gpg: New AKL method "ntds" * gpg: Fix --trusted-key with fingerprint arg * scd: Fix writing of ECC keys to an OpenPGP card * scd: Make an USB error fix specific to SPR532 readers * dirmngr: With new LDAP keyservers store the new attributes. Never store the useless pgpSignerID. Fix a long standing bug storing some keys on an ldap server. * dirmngr: Support the new Active Direcory LDAP schema for keyservers * dirmngr: Allow LDAP OpenPGP searches via fingerprint * dirmngr: Do not block other threads during keyserver LDAP calls * Support global configuration files * Fix the iconv fallback handling to UTF-8- GnuPG 2.2.25: * scd: Fix regression in 2.2.24 requiring gpg --card-status before signing or decrypting * gpgsm: Using Libksba 1.5.0 signatures with a rarely used combination of attributes can now be verified- GnuPG 2.2.24: * gpg: New command --quick-revoke-sig * gpg: Do not use weak digest algos if selected by recipient preference during sign+encrypt * gpg: Switch to AES256 for symmetric encryption in de-vs mode * gpg: Silence weak digest warnings with --quiet * gpg: Print new status line CANCELED_BY_USER for a cancel during symmetric encryption * gpg: Fix the encrypt+sign hash algo preference selection for ECDSA. This is in particular needed for keys created from existing smartcard based keys * agent: Fix secret key import of GnuPG 2.3 generated Ed25519 keys * agent: Keep some permissions of private-keys-v1.d * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and gnutls builds * dirmngr: Fix the pool keyserver case for a single host in the pool * scd: Fix the use case of verify_chv2 by CHECKPIN * scd: Various improvements to the ccid-driver * scd: Minor fixes for Yubikey * gpgconf: New option --show-versions * i18n: Complete overhaul and completion of the Italian translation- GnuPG 2.2.23: * gpg: fix AHEAD preference list overflow boo#1176034 / CVE-2020-25125 * gpg: fix possible segv in the key cleaning code * gpgsm: fix a minor RFC2253 parser gub * scdaemon: Fix a PIN verify failure on certain OpenPGP card implementations- GnuPG 2.2.22: * gpg: Change the default key algorithm to rsa3072 * gpg: Add regular expression support for Trust Signatures on all platforms * gpg: Ignore --personal-digest-prefs for ECDSA keys * gpgsm: Make rsaPSS a de-vs compliant scheme * gpgsm: Show also the SHA256 fingerprint in key listings * gpgsm: Do not require a default keyring for --gpgconf-list * gpg-agent: Default to extended key format and record the creation time of keys Add new option --disable-extended-key-format * gpg-agent: Support the WAYLAND_DISPLAY envvar * gpg-agent: Allow using --gpgconf-list even if HOME does not exist * gpg-agent: Make the Pinentry work even if the envvar TERM is set to the empty string * scdaemon: Add a workaround for Gnuk tokens <= 2.15 which wrongly incremented the error counter when using the "verify" command of "gpg --edit-key" with only the signature key being present * dirmngr: Better handle systems with disabled IPv6 * gpgpslit: Install tool. It was not installed in the past to avoid conflicts with the version installed by GnuPG 1.4 * gpgtar: Make --files-from and --null work as documented - drop gnupg-gpgme-t-encrypt-sym.patch, upstream- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007] - Add gnupg-gpgme-t-encrypt-sym.patch- GnuPG 2.2.21: * gpg: Improve symmetric decryption speed by about 25% * gpg: Support decryption of AEAD encrypted data packets * gpg: Add option --no-include-key-block * gpg: Allow for extra padding in ECDH * gpg: Only a single pinentry is shown for symmetric encryption if the pinentry supports this * gpg: Print a note if no keys are given to --delete-key * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore shown * gpgsm: Certificates without a CRL distribution point are now considered valid without looking up a CRL. The new option - -enable-issuer-based-crl-check can be used to revert to the former behaviour * gpgsm: Support rsaPSS signature verification * gpgsm: Unless CRL checking is disabled lookup a missing issuer certificate using the certificate's authorityInfoAccess * gpgsm: Print the certificate's serial number also in decimal notation * gpgsm: Fix possible NULL-deref in messages of --gen-key * scd: Support the CardOS 5 based D-Trust Card 3.1 * dirmngr: Allow http URLs with "LOOKUP --url" * wkd: Take name of sendmail from configure. Fixes an OpenBSD specific bug- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811] - Refresh patches: * gnupg-2.2.8-files-are-digests.patch * gnupg-add_legacy_FIPS_mode_option.patch- GnuPG 2.2.20: * Protect the error counter against overflow to guarantee that the tools can't be tricked into returning success after an error * gpg: Make really sure that --verify-files always returns an error * gpg: Fix key listing --with-secret if a pattern is given * gpg: Fix detection of certain keys used as default-key * gpg: Fix default-key selection when a card is available * gpg: Fix key expiration and key usage for keys created with a creation date of zero * gpgsm: Fix import of some CR,LF terminated certificates * gpg: New options --include-key-block and --auto-key-import to allow encrypted replies after an initial signed message * gpg: Allow the use of a fingerprint with --trusted-key * gpg: New property "fpr" for use by --export-filter * scdaemon: Disable the pinpad if a KDF DO is used * dirmngr: Improve finding OCSP certificates - drop gpg2-gcc10-build-fno-common.patch, upstream- Split dirmngr into a subpackage to avoid a hard dependency of gpg2 on libgnutls- Fix build with GCC-10: [bsc#1160394] * Always use EXTERN_UNLESS_MAIN_MODULE pattern * In GCC-10, the default option -fcommon will change to -fno-common - Add gpg2-gcc10-build-fno-common.patch- Accept key updates even without UIDs [bsc#1143158] - Add patches: * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch * gnupg-add-test-cases-for-import-without-uid.patch- update to 2.2.19: * gpg: Fix double free when decrypting for hidden recipients * gpg: Use auto-key-locate for encryption even for mail addressed given with angle brackets * gpgsm: Add special case for certain expired intermediate certificates- Update to 2.2.18 [bsc#1157900, CVE-2019-14855] * gpg: Changed the way keys are detected on a smartcards; this allows the use of non-OpenPGP cards. In the case of a not very likely regression the new option --use-only-openpgp-card is available. [#4681] * gpg: The commands --full-gen-key and --quick-gen-key now allow direct key generation from supported cards. [#4681] * gpg: Prepare against chosen-prefix SHA-1 collisions in key signatures. This change removes all SHA-1 based key signature newer than 2019-01-19 from the web-of-trust. Note that this includes all key signature created with dsa1024 keys. The new option --allow-weak-key-signatues can be used to override the new and safer behaviour. [#4755,CVE-2019-14855] * gpg: Improve performance for import of large keyblocks. [#4592] * gpg: Implement a keybox compression run. [#4644] * gpg: Show warnings from dirmngr about redirect and certificate problems (details require --verbose as usual). * gpg: Allow to pass the empty string for the passphrase if the '--passphase=' syntax is used. [#4633] * gpg: Fix printing of the KDF object attributes. * gpg: Avoid surprises with --locate-external-key and certain - -auto-key-locate settings. [#4662] * gpg: Improve selection of best matching key. [#4713] * gpg: Delete key binding signature when deletring a subkey. [#4665,#4457] * gpg: Fix a potential loss of key sigantures during import with self-sigs-only active. [#4628] * gpg: Silence "marked as ultimately trusted" diagnostics if option --quiet is used. [#4634] * gpg: Silence some diagnostics during in key listsing even with option --verbose. [#4627] * gpg, gpgsm: Change parsing of agent's pkdecrypt results. [#4652] * gpgsm: Support AES-256 keys. * gpgsm: Fix a bug in triggering a keybox compression run if - -faked-system-time is used. * dirmngr: System CA certificates are no longer used for the SKS pool if GNUTLS instead of NTBTLS is used as TLS library. [#4594] * dirmngr: On Windows detect usability of IPv4 and IPv6 interfaces to avoid long timeouts. [#4165] * scd: Fix BWI value for APDU level transfers to make Gemalto Ezio Shield and Trustica Cryptoucan work. [#4654,#4566] * wkd: gpg-wks-client --install-key now installs the required policy file. - Rebase patches: * gnupg-2.2.8-files-are-digests.patch * gnupg-add_legacy_FIPS_mode_option.patch- Do not recommend lang package. The lang package already has a supplements.- Update to 2.2.17 [bsc#1141093] * gpg: Do not try the import fallback if the options are already used. * gpg: Fix regression in option "self-sigs-only". * gpg: With --auto-key-retrieve prefer WKD over keyservers. * gpg: Add "self-sigs-only" and "import-clean" to the keyserver options. * gpg: Avoid printing false AKL error message. * gpg: New command --locate-external-key. * gpg: Make the get_pubkey_byname interface easier to understand. * gpg: Fallback to import with self-sigs-only on too large keyblocks. * gpg: New import and keyserver option "self-sigs-only" * gpg: Make read_block in import.c more flexible. * dirmngr: fix handling of HTTPS redirections during HKP. * dirmngr: Avoid endless loop in case of HTTP error 503. * dirmngr: Do not rewrite the redirection for the "openpgpkey" subdomain. * dirmngr: Support the new WKD draft with the openpgpkey subdomain. * wkd: Change client/server limit back to 64 KiB. * tools: gpgconf: Killing order is children-first. * Return better error code for some getinfo IPC commands. * po: Update Russian translation.- Fix secure memory being disabled before fips checks in libgcrypt [boo#1137307] * Added gnupg-2.2.16-secmem.patch- Update to 2.2.16 * gpg: Fixed i18n markup of some strings. * gpg: Allow deletion of subkeys with --delete-[secret-]key. * gpg: Do not bail on an invalid packet in the local keyring. * gpg: Do not allow creation of user ids larger than our parser allows. * gpg: Do not delete any keys if --dry-run is passed. * gpg: Fix using --decrypt along with --use-embedded-filename. * gpg: Improve the photo image viewer selection. * gpg: enable OpenPGP export of cleartext keys with comments. * gpg: Do not print a hint to use the deprecated --keyserver option. * gpg: Change update_keysig_packet to replace SHA-1 by SHA-256. * gpg: Use just the addrspec from the Signer's UID. * gpg: Accept also armored data from the WKD. * gpg: Set a limit of 5 to the number of keys imported from the WKD. * gpg: Don't use EdDSA algo ID for ECDSA curves. * agent: Stop scdaemon after reload when disable_scdaemon. * agent: For SSH key, don't put NUL-byte at the end. * agent: correct length for uri and comment on 64-bit big-endian platforms * dirmngr: Allow for other hash algorithms than SHA-1 in OCSP. * dirmngr: Improve domaininfo cache update algorithm. * dirmngr: Better error code for http status 413. * g10: Fix possible null dereference. * g10: Fix double free when locating by mbox. * g10: Fix symmetric cipher algo constant for ECDH. * sm: Avoid confusing diagnostic for the default key. * sm: Fix a warning in an es_fopencooie function. * gpgconf: Before --launch check that the config file is fine. * gpgconf: Support --homedir for --launch. * build: Update m4/iconv.m4. * doc: correct documentation for gpgconf --kill. * scd: Add dummy option --application-priority. * common: Fix AWK portability.- Update to 2.2.15 * sm: Allow decryption even if expired keys are configured. * agent: Change command KEYINFO to print ssh fingerprints with other hash algos. * dirmngr: Fix build problems on Solaris due to the use of reserved symbol names. * wkd: New commands --print-wkd-hash and --print-wkd-url for gpg-wks-client.- Update to 2.2.14: * gpg: Allow import of PGP desktop exported secret keys. Also avoid importing secret keys if the secret keyblock is not valid. * gpg: Do not error out on version 5 keys in the local keyring. * gpg: Make invalid primary key algo obvious in key listings. * sm: Do not mark a certificate in a key listing as de-vs compliant if its use for a signature will not be possible. * sm: Fix certificate creation with key on card. * sm: Create rsa3072 bit certificates by default. * sm: Print Yubikey attestation extensions with --dump-cert. * agent: Fix cancellation handling for scdaemon. * agent: Support --mode=ssh option for CLEAR_PASSPHRASE. * scd: Fix flushing of the CA-FPR DOs in app-openpgp. * scd: Avoid a conflict error with the "undefined" app. * dirmngr: Add CSRF protection exception for protonmail. * dirmngr: Fix build problems with gcc 9 in libdns. * gpgconf: New option --show-socket for use wity --launch. * gpgtar: Make option -C work for archive creation. - Removed patches that are included upstream by now: - 0001-libdns-Avoid-using-compound-literals.patch - 0002-libdns-Avoid-using-compound-literals-2.patch - 0003-libdns-Avoid-using-compound-literals-3.patch - 0004-libdns-Avoid-using-compound-literals-4.patch - 0005-libdns-Avoid-using-compound-literals-5.patch - 0006-libdns-Avoid-using-compound-literals-6.patch - 0007-libdns-Avoid-using-compound-literals-7.patch - 0008-libdns-Avoid-using-compound-literals-8.patch- Fix build with gcc9 [bsc#1121223] * Avoid using compound literals - Upstream bug: https://dev.gnupg.org/T4367 * Added upstream patches: - 0001-libdns-Avoid-using-compound-literals.patch - 0002-libdns-Avoid-using-compound-literals-2.patch - 0003-libdns-Avoid-using-compound-literals-3.patch - 0004-libdns-Avoid-using-compound-literals-4.patch - 0005-libdns-Avoid-using-compound-literals-5.patch - 0006-libdns-Avoid-using-compound-literals-6.patch - 0007-libdns-Avoid-using-compound-literals-7.patch - 0008-libdns-Avoid-using-compound-literals-8.patch- Allow coredumps in X11 desktop sessions (bsc#1124847) gpg-agent unconditionally disables coredumps, which is not supposed to happen in the code path that does just exec(argv[]) gnupg-gpg-agent-ulimit.patch- Update to 2.2.13: * gpg: Implement key lookup via keygrip (using the & prefix). * gpg: Allow generating Ed25519 key from existing key. * gpg: Emit an ERROR status line if no key was found with -k. * gpg: Stop early when trying to create a primary Elgamal key. * gpgsm: Print the card's key algorithms along with their keygrips in interactive key generation. * agent: Clear bogus pinentry cache in the error case. * scd: Support "acknowledge button" feature. * scd: Fix for USB INTERRUPT transfer. * wks: Do no use compression for the the encrypted challenge and response. Release-info: https://dev.gnupg.org/T4290 See-also: gnupg-announce/2019q1/000434.html- Update to 2.2.12: * tools: New commands --install-key and --remove-key for gpg-wks-client. This allows to prepare a Web Key Directory on a local file system for later upload to a web server. * gpg: New --list-option "show-only-fpr-mbox". This makes the use of the new gpg-wks-client --install-key command easier on Windows. * gpg: Improve processing speed when --skip-verify is used. * gpg: Fix a bug where a LF was accidentally written to the console. * gpg: --card-status now shwos whether a card has the new KDF feature enabled. * agent: New runtime option --s2k-calibration=MSEC. New configure option --with-agent-s2k-calibration=MSEC. [#3399] * dirmngr: Try another keyserver from the pool on receiving a 502, 503, or 504 error. [#4175] * dirmngr: Avoid possible CSRF attacks via http redirects. A HTTP query will not anymore follow a 3xx redirect unless the Location header gives the same host. If the host is different only the host and port is taken from the Location header and the original path and query parts are kept. * dirmngr: New command FLUSHCRL to flush all CRLS from disk and memory. [#3967]- Code no longer uses libcurl, remove from buildrequires.- Update to 2.2.11: * gpgsm: Fix CRL loading when intermediate certicates are not yet trusted. * gpgsm: Fix an error message about the digest algo. * gpg: Fix a wrong warning due to new sign usage check introduced with 2.2.9. * gpg: Print the "data source" even for an unsuccessful keyserver query. * gpg: Do not store the TOFU trust model in the trustdb. * scd: Fix cases of "Bad PIN" after using "forcesig". * agent: Fix possible hang in the ssh handler. * dirmngr: Tack the unmodified mail address to a WKD request. * dirmngr: Tweak diagnostic about missing LDAP server file. * dirmngr: In verbose mode print the OCSP responder id. * dirmngr: Fix parsing of the LDAP port. * wks: Add option --directory/-C to the server. * wks: Add option --with-colons to the client. * Fix EBADF when gpg et al. are called by broken CGI scripts. * Fix some minor memory leaks and bugs.- Make package build reproducible (boo#1047218)- Update to 2.2.10: * Refresh expired keys originating from the WKD * Use a 256 KiB limit for a WKD imported key * New option --known-notation * dirmngr: Validate SRV records in WKD queries- Add basic udev rules for smartcards to be used with scdaemon, taken from debian: * scdaemon.udev- GnuPG 2.2.9: * dirmngr: Fix recursive resolver mode and other bugs in the libdns code * dirmngr: When using libgpg-error 1.32 or later a GnuPG build with NTBTLS support does not anymore block for dozens of seconds before returning data. * gpg: Fix bug in --show-keys which actually imported revocation certificates * gpg: Ignore too long user-ID and comment packets * gpg: Fix crash due to bad German translation. Improved printf format compile time check. * gpg: Handle missing ISSUER sub packet gracefully in the presence of the new ISSUER_FPR * gpg: Allow decryption using several passphrases in most cases. * gpg: Command --show-keys now enables the list options show-unusable-uids, show-unusable-subkeys, show-notations and show-policy-urls by default. * gpg: Command --show-keys now prints revocation certificates. * gpg: Add revocation reason to the "rev" and "rvs" records of the option --with-colons. [#1173] * gpg: Export option export-clean does now remove certain expired subkeys; export-minimal removes all expired subkeys. * gpg: New "usage" property for the drop-subkey filters.- Update to version 2.2.8: * gpg: Decryption of messages not using the MDC mode will now lead to a hard failure even if a legacy cipher algorithm was used. The option - -ignore-mdc-error can be used to turn this failure into a warning. Take care: Never use that option unconditionally or without a prior warning. * gpg: The MDC encryption mode is now always used regardless of the cipher algorithm or any preferences. For testing --rfc2440 can be used to create a message without an MDC. * gpg: Sanitize the diagnostic output of the original file name in verbose mode (bsc#1096745, CVE-2018-12020) * gpg: Detect suspicious multiple plaintext packets in a more reliable way. * gpg: Fix the duplicate key signature detection code. * gpg: The options --no-mdc-warn, --force-mdc, --no-force-mdc, - -disable-mdc and --no-disable-mdc have no more effect. * agent: Add DBUS_SESSION_BUS_ADDRESS and a few other envvars to the list of startup environment variables. - Refresh gnupg-2.0.18-files-are-digests.patch to gnupg-2.2.8-files-are-digests.patch- GnuPG 2.2.7: * gpg: New option --no-symkey-cache to disable the passphrase cache for symmetrical en- and decryption. * gpg: The ERRSIG status now prints the fingerprint if that is part of the signature * gpg: Relax emitting of FAILURE status lines * gpg: Add a status flag to "sig" lines printed with --list-sigs * gpg: Fix "Too many open files" when using --multifile * ssh: Return an error for unknown ssh-agent flags * dirmngr: Fix a CNAME problem with pools and TLS. Also use a fixed mapping of keys.gnupg.net to sks-keyservers.net * dirmngr: Try resurrecting dead hosts earlier (from 3h to 1.5h) * dirmngr: Fallback to CRL if no default OCSP responder is configured * dirmngr: Implement CRL fetching via https. Here a redirection to http is explictly allowed * agent,dirmngr: New sub-command "getenv" for "getinfo" to ease debugging- GnuPG 2.2.6: * gpg,gpgsm: New option --request-origin to pretend requests coming from a browser or a remote site. * gpg: Fix race condition on trustdb.gpg updates due to too early released lock. * gpg: Emit FAILURE status lines in almost all cases. * gpg: Implement --dry-run for --passwd to make checking a key's passphrase straightforward. * gpg: Make sure to only accept a certification capable key for key signatures. * gpg: Better user interaction in --card-edit for the factory-reset sub-command. * gpg: Improve changing key attributes in --card-edit by adding an explicit "key-attr" sub-command. * gpg: Print the keygrips in the --card-status. * scd: Support KDF DO setup. * scd: Fix suspend/resume handling in the CCID driver. * agent: Evict cached passphrases also via a timer. * agent: Use separate passphrase caches depending on the request origin. * ssh: Support signature flags. * dirmngr: Handle failures related to missing IPv6 support gracefully. * Allow the use of UNC directory names as homedir. [#3818] - Dropped gnupg-CVE-2018-9234.patch since it is included upstream- Added gnupg-CVE-2018-9234.patch: Enforce that key certification can only be done with the master key, and not a signing subkey. (bnc#1088255 CVE-2018-9234)- GnuPG 2.2.5: * gpg: Allow the use of the "cv25519" and "ed25519" short names in addition to the canonical curve names in --batch --gen-key * gpg: Make sure to print all secret keys with option --list-only and --decrypt * gpg: Fix the use of future-default with --quick-add-key for signing keys * gpg: Select a secret key by checking availability under gpg-agent * gpg: Fix reversed prompt texts for --only-sign-text-ids * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit systems * gpgsm: Fix regression since 2.1 in --export-secret-key-raw which got $d mod (q-1)$ wrong * scd: Support the KDF Data Object of the OpenPGP card 3.3 * scd: Fix a regression in the internal CCID driver for certain card readers * dirmngr: Improve returned error description on failure of DNS resolving * wks: Implement command --install-key for gpg-wks-server.- Use %license (boo#1082318)- GnuPG 2.2.4: * gpg: Change default preferences to prefer SHA512. * gpg: Print a warning when more than 150 MiB are encrypted using a cipher with 64 bit block size. * gpg: Print a warning if the MDC feature has not been used for a message. * gpg: Fix regular expression of domain addresses in trust signatures * agent: New option --auto-expand-secmem to help with high numbers of concurrent connections. Requires libgcrypt 1.8.2 for having an effect. * dirmngr: Cache responses of WKD queries. * gpgconf: Add option --status-fd. * wks: Add commands --check and --remove-key to gpg-wks-server * Increase the backlog parameter of the daemons to 64 and add option --listen-backlog. - Not enabled features: * New configure option --enable-run-gnupg-user-socket to first try a socket directory which is not removed by systemd at session end.- GnuPG 2.2.3: * dirmngr: Fix crash in case of a CRL loading error * gpgtar: Fix wrong behaviour of --set-filename * gpg: Silence AKL retrieval messages * agent: Use clock or clock_gettime for calibration * agent: Improve robustness of the shutdown pending state- GnuPG 2.2.2: * gpg: Avoid duplicate key imports by concurrently running gpg processes * gpg: Fix creating on-disk subkey with on-card primary key * gpg: Fix validity retrieval for multiple keyrings * gpg: Fix --dry-run and import option show-only for secret keys * gpg: Print "sec" or "sbb" for secret keys with import option import-show * gpg: Make import less verbose * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new parameter "Subkey-Grip" to unattended key generation * gpg: Improve "factory-reset" command for OpenPGP cards * gpg: Ease switching Gnuk tokens into ECC mode by using the magic keysize value 25519 * gpgsm: Fix --with-colon listing in crt records for fields > 12. * gpgsm: Do not expect X.509 keyids to be unique * agent: Fix stucked Pinentry when using --max-passphrase-days * agent: New option --s2k-count * dirmngr: Do not follow https-to-http redirects * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds * gpgconf: Ignore non-installed components for commands - -apply-profile and --apply-defaults * Add configure option --enable-werror- GnuPG 2.2.1: * gpg: Fix formatting of the user id in batch mode key generation if only "name-email" is given. * gpgv: Fix annoying "not suitable for" warnings. * wks: Convey only the newest user id to the provider. This is the case if different names are used with the same addr-spec. * wks: Create a complying user id for provider policy mailbox-only. * wks: Add workaround for posteo.de. * scd: Fix the use of large ECC keys with an OpenPGP card. * dirmngr: Use system provided root certificates if no specific HKP certificates are configured. If bu- GnuPG 2.2.0: * New long term stable branch, replacing the 2.0.x series * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve is again the default boo#1054088 * Fixed a few minor bugs- GnuPG 2.1.23: * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd" are now used by default. Note: this enables keyserver and Web Key Directory operators to notice when a signature from a locally non-available key is being verified for the first time or when you intend to encrypt to a mail address without having the key locally. This new behaviour will eventually make key discovery much easier and mostly automatic. Disable this by adding no-auto-key-retrieve auto-key-locate local to your gpg.conf. * agent: Option --no-grab is now the default. The new option --grab allows to revert this. * gpg: New import option "show-only". * gpg: New option --disable-dirmngr to entirely disable network access for gpg. * gpg,gpgsm: Tweaked DE-VS compliance behaviour. * New configure flag --enable-all-tests to run more extensive tests during "make check". * gpgsm: The keygrip is now always printed in colon mode as documented in the man page.- GnuPG 2.1.22: * gpg: Extend command --quick-set-expire to allow for setting the expiration time of subkeys. * gpg: By default try to repair keys during import. New sub-option no-repair-keys for --import-options. * gpg,gpgsm: Improved checking and reporting of DE-VS compliance. * gpg: New options --key-origin and --with-key-origin. Store the time of the last key update from keyservers, WKD, or DANE. * agent: New option --ssh-fingerprint-digest. * dimngr: Lower timeouts on keyserver connection attempts and made it configurable. * dirmngr: Tor will now automatically be detected and used. The option --no-use-tor disables Tor detection. * dirmngr: Now detects a changed /etc/resolv.conf. * agent,dirmngr: Initiate shutdown on removal of the GnuPG home directory. * gpg: Avoid caching passphrase for failed symmetric encryption. * agent: Support for unprotected ssh keys. * dirmngr: Fixed name resolving on systems using only v6 nameservers. * dirmngr: Allow the use of TLS over http proxies. * wks: New man pages for client and server.- GnuPG 2.1.21: * modified gnupg-2.0.18-files-are-digests.patch to work with obs-sign again bsc#1039899- GnuPG 2.1.21: * gpg,gpgsm: Fix corruption of old style keyring.gpg files, regression in 2.1.20 * gpg,dirmngr: Removed the skeleton config file support New installations no longer generate a configuration file. In the absence of a file, SHA-2 family hashes are used. Existing configurations are not touched. drop gnupg-2.1.19-stronger-defaults.patch FATE#323084 * gpg: Fixed import filter property match bug. * scd: Removed Linux support for Cardman 4040 PCMCIA reader. * scd: Fixed some corner case bugs in resume/suspend handling. * Many minor bug fixes and code cleanup.- GnuPG 2.1.20: * gpg: New properties 'expired', 'revoked', and 'disabled' for the import and export filters. * gpg: New command --quick-set-primary-uid. * gpg: New compliance field for the --with-colon key listing. * gpg: Changed the key parser to generalize the processing of local meta data packets. * gpg: Fixed assertion failure in the TOFU trust model. * gpg: Fixed exporting of zero length user ID packets. * scd: Improved support for multiple readers. * scd: Fixed timeout handling for key generation. * agent: New option --enable-extended-key-format. * dirmngr: Do not add a keyserver to a new dirmngr.conf. Dirmngr uses a default keyserver. * dimngr: Do not treat TLS warning alerts as severe error when building with GNUTLS. * dirmngr: Actually take /etc/hosts in account. * wks: Fixed client problems on Windows. Published keys are now set to world-readable. * tests: Fixed creation of temporary directories. * A socket directory for a non standard GNUGHOME is now created on the fly under /run/user. Thus "gpgconf --create-socketdir" is now optional. The use of "gpgconf --remove-socketdir" to clean up obsolete socket directories is however recommended to avoid cluttering /run/user with useless directories. * Fixed build problems on some platforms.- Use stronger defaults for new users, using SHA-2 digest family for certificates and message signatures - FATE#323084 adding gnupg-2.1.19-stronger-defaults.patch- GnuPG 2.1.19: * gpg: Print a warning if Tor mode is requested but the Tor daemon is not running. * gpg: New status code DECRYPTION_KEY to print the actual private key used for decryption. * gpgv: New options --log-file and --debug. * gpg-agent: Revamp the prompts to ask for card PINs. * scd: Support for multiple card readers. * scd: Removed option --debug-disable-ticker. Ticker is used only when it is required to watch removal of device/card. * scd: Improved detection of card inserting and removal. * dirmngr: New option --disable-ipv4. * dirmngr: New option --no-use-tor to explicitly disable the use of Tor. * dirmngr: The option --allow-version-check is now required even if the option --use-tor is also used. * dirmngr: Handle a missing nsswitch.conf gracefully. * dirmngr: Avoid PTR lookups for keyserver pools. The are only done for the debug command "keyserver --hosttable". * dirmngr: Rework the internal certificate cache to support classes of certificates. Load system provided certificates on startup. * Add options --tls, --no-crl, and --systrust to the "VALIDATE" command. * dirmngr: Add support for the ntbtls library. * wks: Create mails with a "WKS-Phase" header. Fix detection of Draft-2 mode. * Many other bug fixes and new regression tests. - dirmngr: use system certificate store- Rewrite descriptions- GnuPG 2.1.18: * gpg: Remove bogus subkey signature while cleaning a key (with export-clean, import-clean, or --edit-key's sub-command clean) * gpg: Allow freezing the clock with --faked-system-time. * gpg: New --export-option flag "backup", new --import-option flag "restore". * gpg-agent: Fixed long delay due to a regression in the progress callback code. * scd: Lots of code cleanup and internal changes. * scd: Improved the internal CCID driver. * dirmngr: Fixed problem with the DNS glue code (removal of the trailing dot in domain names). * dirmngr: Make sure that Tor is actually enabled after changing the conf file and sending SIGHUP or "gpgconf --reload dirmngr". * dirmngr: Fixed Tor access to IPv6 addresses. Note that current versions of Tor may require that the flag "IPv6Traffic" is used with the option "SocksPort" in torrc to actually allow IPv6 traffic. * dirmngr: Fixed HKP for literally given IPv6 addresses. * dirmngr: Enabled reverse DNS lookups via Tor. * dirmngr: Added experimental SRV record lookup for WKD. See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details. * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record lookups. Avoid SRV record lookup when a port is explicitly specified. This fixes a regression from the 1.4 and 2.0 behavior. * dirmngr: Gracefully handle a missing /etc/nsswitch.conf. Ignore negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out. * dirmngr: Better debug output for flags "dns" and "network". * dirmngr: On reload mark all known HKP servers alive. * gpgconf: Allow keyword "all" for --launch, --kill, and --reload. * tools: gpg-wks-client now ignores a missing policy file on the server. * Avoid unnecessary ambiguity error message in the option parsing. * Further improvements of the regression test suite. * Fixed building with --disable-libdns configure option. * Fixed a crash running the tests on 32 bit architectures. * Fixed spurious failures on BSD system in the spawn functions. This affected for example gpg-wks-client and gpgconf.- Remove the fixme, condition around fdupes- add runtime dependency to match runtime version check for libksba- GnuPG 2.1.17: * gpg: By default new keys expire after 2 years. * gpg: New command --quick-set-expire to conveniently change the expiration date of keys. * gpg: Option and command names have been changed for easier comprehension. The old names are still available as aliases. * gpg: Improved the TOFU trust model. * gpg: New option --default-new-key-algo. * scd: Support OpenPGP card V3 for RSA. * dirmngr: Support for the ADNS library has been removed. Now using bundled libdns, enabling Tor support on all platforms. New option --standard-resolver can be used to disable this code at runtime. * dirmngr: Lazily launch ldap reaper thread. * tools: New options --check and --status-fd for gpg-wks-client. * The UTF-8 byte order mark is now skipped when reading conf files. * Fixed many bugs and regressions. * Major improvements to the test suite. For example it is possible to run the external test suite of GPGME.- GnuPG 2.1.16: * gpg: New algorithm for selecting the best ranked public key when using a mail address with -r, -R, or --locate-key. * gpg: New option --with-tofu-info to print a new "tfs" record in colon formatted key listings. * gpg: New option --compliance as an alternative way to specify options like --rfc2440, --rfc4880, et al. * gpg: Many changes to the TOFU implementation. * gpg: Improve usability of --quick-gen-key. * gpg: In --verbose mode print a diagnostic when a pinentry is launched. * gpg: Remove code which warns for old versions of gnome-keyring. * gpg: New option --override-session-key-fd. * gpg: Option --output does now work with --verify. * gpgv: New option --output to allow saving the verified data. * gpgv: New option --enable-special-filenames. * agent, dirmngr: New --supervised mode for use by systemd and alike. * agent: By default listen on all available sockets using standard names. * agent: Invoke scdaemon with --homedir. * dirmngr: On Linux now detects the removal of its own socket and terminates. * scd: Support ECC key generation. * scd: Support more card readers. * dirmngr: New option --allow-version-check to download a software version database in the background. * dirmngr: Use system provided CAs if no --hkp-cacert is given. * dirmngr: Use a default keyserver if none is explicitly set * gpgconf: New command --query-swdb to check software versions against an copy of an online database. * gpgconf: Print the socket directory with --list-dirs. * tools: The WKS tools now support draft version -02. * tools: Always build gpg-wks-client and install under libexec. * tools: New option --supported for gpg-wks-client. * The log-file option now accepts a value "socket://" to log to the socket named "S.log" in the standard socket directory. * Provide fake pinentries for use by tests cases of downstream developers. * Fixed many bugs and regressions. * Many changes and improvements for the test suite. - drop upstreamed patches: * 0001-common-Follow-up-to-14479e2-fix-void-return-in-non-v.patch * gnupg-2.1.15-bsc993324-status-output.patch- avoid mixing up status and colon line output - bsc#993324 add gnupg-2.1.15-bsc993324-status-output.patch- enable web key discovery tools- Add an explicit runtime dependency on libgcrypt >= 1.7.0 to match runtime version check- GnuPG 2.1.15: * gpg: Remove the --tofu-db-format option and support for the split TOFU database. * gpg: Add option --sender to prepare for coming features. * gpg: Add option --input-size-hint to help progress indicators. * gpg: Extend the PROGRESS status line with the counted unit. * gpg: Avoid publishing the GnuPG version by default with --armor. * gpg: Properly ignore legacy keys in the keyring cache. * gpg: Always print fingerprint records in --with-colons mode. * gpg: Make sure that keygrips are printed for each subkey in - -with-colons mode. * gpg: New import filter "drop-sig". * gpgsm: Fix a bug in the machine-readable key listing. * gpg,gpgsm: Block signals during keyring updates to limits the effects of a Ctrl-C at the wrong time. * g13: Add command --umount and other fixes for dm-crypt. * agent: Fix regression in SIGTERM handling. * agent: Cleanup of the ssh-agent code. * agent: Allow import of overly long keys. * scd: Fix problems with card removal. * dirmngr: Remove all code for running as a system service. * tools: Make gpg-wks-client conforming to the specs. * tests: Improve the output of the new regression test tool. * tests: Distribute the standalone test runner. * tests: Run each test in a clean environment. * Spelling and grammar fixes. - fix build error, adding 0001-common-Follow-up-to-14479e2-fix-void-return-in-non-v.patch- GnuPG 2.1.14: * gpg: Removed options --print-dane-records and --print-pka-records. The new export options "export-pka" and "export-dane" can instead be used with the export command. * gpg: New options --import-filter and --export-filter. * gpg: New import options "import-show" and "import-export". * gpg: New option --no-keyring. * gpg: New command --quick-revuid. * gpg: New options -f/--recipient-file and -F/--hidden-recipient-file to directly specify encryption keys. * gpg: New option --mimemode to indicate that the content is a MIME part. Does only enable --textmode right now. * gpg: New option --rfc4880bis to allow experiments with proposed changes to the current OpenPGP specs. * gpg: Fix regression in the "fetch" sub-command of --card-edit. * gpg: Fix regression since 2.1 in option --try-all-secrets. * gpgv: Change default options for extra security. * gpgsm: No more root certificates are installed by default. * agent: "updatestartuptty" does now affect more environment variables. * scd: The option --homedir does now work with scdaemon. * scd: Support some more GEMPlus card readers. * gpgtar: Fix handling of '-' as file name. * gpgtar: New commands --create and --extract. * gpgconf: Tweak for --list-dirs to better support shell scripts. * tools: Add programs gpg-wks-client and gpg-wks-server to implement a Web Key Service. The configure option --enable-wks-tools is required to build them; they should be considered Beta software. * tests: Complete rework of the openpgp part of the test suite. The test scripts have been changed from Bourne shell scripts to Scheme programs. A customized scheme interpreter (gpgscm) is included. This change was triggered by the need to run the test suite on non-Unix platforms. * The rendering of the man pages has been improved. - drop upstream gnupg-make_--try-all-secrets_work.patch- Fix date call as the curlified parameter for sure are not parsed correctly by escaping it with %- Fix upstream bug 1985: --try-all-secrets doesn't work when decrypting messages encrypted with --hidden-recipient, fixes unit tests of the duplicity package. Adding gnupg-make_--try-all-secrets_work.patch - record the fact that gpg-error 1.21 is required- GnuPG 2.1.13: * gpg: New command --quick-addkey. Extend the --quick-gen-key command. * gpg: New --keyid-format "none" which is now also the default. * gpg: New option --with-subkey-fingerprint. * gpg: Include Signer's UID subpacket in signatures if the secret key has been specified using a mail address and the new option - -disable-signer-uid is not used. * gpg: Allow unattended deletion of a secret key. * gpg: Allow export of non-passphrase protected secret keys. * gpg: New status lines KEY_CONSIDERED and NOTATION_FLAGS. * gpg: Change status line TOFU_STATS_LONG to use '~' as a non-breaking-space character. * gpg: Speedup key listings in Tofu mode. * gpg: Make sure that the current and total values of a PROGRESS status line are small enough. * gpgsm: Allow the use of AES192 and SERPENT ciphers. * dirmngr: Adjust WKD lookup to current specs. * dirmngr: Fallback to LDAP v3 if v2 is is not supported. * gpgconf: New commands --create-socketdir and --remove-socketdir, new option --homedir. * If a /run/user/$UID directory exists, that directory is now used for IPC sockets instead of the GNUPGHOME directory. This fixes problems with NFS and too long socket names and thus avoids the need for redirection files. * Speedup fd closing after a fork. - drop upstreamed gnupg-fix-signature-checking.patch- add gnupg-fix-signature-checking.patch (bsc#981020) https://bugs.gnupg.org/gnupg/issue2351- GnuPG 2.1.12: * gpg: New --edit-key sub-command "change-usage" for testing purposes. * gpg: Out of order key-signatures are now systematically detected and fixed by --edit-key. * gpg: Improved detection of non-armored messages. * gpg: Removed the extra prompt needed to create Curve25519 keys. * gpg: Improved user ID selection for --quick-sign-key. * gpg: Use the root CAs provided by the system with --fetch-key. * gpg: Add support for the experimental Web Key Directory key location service. * gpg: Improve formatting of Tofu messages and emit new Tofu specific status lines. * gpgsm: Add option --pinentry-mode to support a loopback pinentry. * gpgsm: A new pubring.kbx is now created with the header blob so that gpg can detect that the keybox format needs to be used. * agent: Add read support for the new private key protection format openpgp-s2k-ocb-aes. * agent: Add read support for the new extended private key format. * agent: Default to --allow-loopback-pinentry and add option - -no-allow-loopback-pinentry. * scd: Changed to use the new libusb 1.0 API for the internal CCID driver. * dirmngr: The dirmngr-client does now auto-detect the PEM format. * g13: Add experimental support for dm-crypt. * The man pages for gpg and gpgv are now installed under the correct name (gpg2 or gpg - depending on a configure option).- GnuPG 2.1.11: * gpg: New command --export-ssh-key to replace the gpgkey2ssh tool. * gpg: Allow to generate mail address only keys with --gen-key. * gpg: "--list-options show-usage" is now the default. * gpg: Make lookup of DNS CERT records holding an URL work. * gpg: Emit PROGRESS status lines during key generation. * gpg: Don't check for ambigious or non-matching key specification in the config file or given to --encrypt-to. This feature will return in 2.3.x. * gpg: Lock keybox files while updating them. * gpg: Fix possible keyring corruption. (bug#2193) * gpg: Fix regression of "bkuptocard" sub-command in --edit-key and remove "checkbkupkey" sub-command introduced with 2.1. (bug#2169) * gpg: Fix internal error in gpgv when using default keyid-format. * gpg: Fix --auto-key-retrieve to work with dirmngr.conf configured keyservers. (bug#2147). * agent: New option --pinentry-timeout. * scd: Fix regression for generating RSA keys on card. * dirmmgr: All configured keyservers are now searched. * dirmngr: Install CA certificate for hkps.pool.sks-keyservers.net. Use this certiticate even if --hkp-cacert is not used. * gpgtar: Add actual encryption code. gpgtar does now fully replace gpg-zip. * gpgtar: Fix filename encoding problem on Windows. * Print a warning if a GnuPG component is using an older version of gpg-agent, dirmngr, or scdaemon. - disable running test which no longer work - remove 0001-gpg-Improve-the-keyblock-cache-s-transparency.patch is now upstream - the PIE options are implemented in the upstream build, and spec code broke the build. The only remaining broken executable was gpgsplit, which was removed from the package- add g13, an experimental tool for accessing encrypted storage with with GnuPG (cards)- fix fingerprint ambiguity (bsc#958891) * https://bugs.gnupg.org/gnupg/issue2198 * add 0001-gpg-Improve-the-keyblock-cache-s-transparency.patch- Move to pkgconfig() packaging style- GnuPG 2.1.10 adds TOFU (Trust-On-First-USe) and anonymous key retrival via Tor. * gpg: New trust models "tofu" and "tofu+pgp". * gpg: New command --tofu-policy. New options --tofu-default-policy and --tofu-db-format. * gpg: New option --weak-digest to specify hash algorithms which should be considered weak. * gpg: Allow the use of multiple --default-key options; take the last available key. * gpg: New option --encrypt-to-default-key. * gpg: New option --unwrap to only strip the encryption layer. * gpg: New option --only-sign-text-ids to exclude photo IDs from key signing. * gpg: Check for ambigious or non-matching key specification in the config file or given to --encrypt-to. * gpg: Show the used card reader with --card-status. * gpg: Print export statistics and an EXPORTED status line. * gpg: Allow selecting subkeys by keyid in --edit-key. * gpg: Allow updating the expiration time of multiple subkeys at once. * dirmngr: New option --use-tor. For full support this requires libassuan version 2.4.2 and a patched version of libadns (e.g. adns-1.4-g10-7 as used by the standard Windows installer). * dirmngr: New option --nameserver to specify the nameserver used in Tor mode. * dirmngr: Keyservers may again be specified by IP address. * dirmngr: Fixed problems in resolving keyserver pools. * dirmngr: Fixed handling of premature termination of TLS streams so that large numbers of keys can be refreshed via hkps. * gpg: Fixed a regression in --locate-key [since 2.1.9]. * gpg: Fixed another bug for keyrings with legacy keys. * gpgsm: Allow combinations of usage flags in --gen-key. * Make tilde expansion work with most options. * Many other cleanups and bug fixes.- enable tests for PPC64 again, the problem from bsc#935887 went away- Improve upgrade to gpg2 from security:privacy w.r.t. libassuan run-time dependencies (boo#955982)- GnuPG 2.1.9: * gpg: Allow fetching keys via OpenPGP DANE (--auto-key-locate).\ New option --print-dane-records. * gpg: Fix for a problem with PGP-2 keys in a keyring. * gpg: Fail with an error instead of a warning if a modern cipher algorithm is used without a MDC. * agent: New option --pinentry-invisible-char. * agent: Always do a RSA signature verification after creation. * agent: Fix a regression in ssh-add-ing Ed25519 keys. * agent: Fix ssh fingerprint computation for nistp384 and EdDSA. * agent: Fix crash during passprase entry on some platforms. * scd: Change timeout to fix problems with some 2.1 cards. * dirmngr: Displayed name is now Key Acquirer. * dirmngr: Add option --keyserver. Deprecate that option for gpg. Install a dirmngr.conf file from a skeleton for new installations. - update gnupg-add_legacy_FIPS_mode_option.patch for context change- GnuPG 2.1.8: * gpg: Sending very large keys to the keyservers works again. * gpg: Validity strings in key listings are now again translatable. * gpg: Emit FAILURE status lines to help GPGME. * gpg: Does not anymore link to Libksba to reduce dependencies. * gpgsm: Export of secret keys via Assuan is now possible. * agent: Raise the maximum passphrase length from 100 to 255 bytes. * agent: Fix regression using EdDSA keys with ssh. * Does not anymore use a build timestamp by default. * The fallback encoding for broken locale settings changed from Latin-1 to UTF-8. * Many code cleanups and improved internal documentation. * Various minor bug fixes.- GnuPG 2.1.7: * gpg: Support encryption with Curve25519 if Libgcrypt 1.7 is used. * gpg: In the --edit-key menu: Removed the need for "toggle", changed how secret keys are indicated, new commands "fpr *" and "grip". * gpg: More fixes related to legacy keys in a keyring. * gpgv: Does now also work with a "trustedkeys.kbx" file. * scd: Support some feature from the OpenPGP card 3.0 specs. * scd: Improved ECC support * agent: New option --force for the DELETE_KEY command. * Dropped deprecated gpgsm-gencert.sh * Various other bug fixes.- do not run checks on ppc64 for now- GnuPG 2.1.6: * agent: New option --verify for the PASSWD command. * gpgsm: Add command option "offline" as an alternative to - -disable-dirmngr. * gpg: Do not prompt multiple times for a password in pinentry loopback mode. * Allow the use of debug category names with --debug. * Using gpg-agent and gpg/gpgsm with different locales will now show the correct translations in Pinentry. * gpg: Improve speed of --list-sigs and --check-sigs. * gpg: Make --list-options show-sig-subpackets work again. * gpg: Fix an export problem for old keyrings with PGP-2 keys. * scd: Support PIN-pads on more readers. * dirmngr: Properly cleanup zombie LDAP helper processes and avoid hangs on dirmngr shutdown. * Various other bug fixes. - remove documentation make workaround, fixed upstream- Enable workaround for missing dependencies everywhere- fix build with openSUSE 13.2 and earlier, call make to compensate for incorrect documentation dependencies.- GnuPG 2.1.5: * Support for an external passphrase cache. * Support for the forthcoming version 3 OpenPGP smartcard. * Manuals now show the actual used file names. * Prepared for improved integration with Emacs. * Code cleanups and minor bug fixes.- info deinstall needs to be in %preun- update to 2.1.4: * gpg: Add command --quick-adduid to non-interacitivly add a new user id to an existing key. * gpg: Do no enable honor-keyserver-url by default. Make it work if enabled. * gpg: Display the serial number in the --card-staus output again. * agent: Support for external password managers. Add option --no-allow-external-cache. * scdaemon: Improved handling of extended APDUs. * Make HTTP proxies work again. * All network access including DNS as been moved to Dirmngr. * Allow building without LDAP support. * Fixed lots of smaller bugs.- update to 2.1.3: * gpg: LDAP keyservers are now supported by 2.1. * gpg: New option --with-icao-spelling. * gpg: New option --print-pka-records. Changed the PKA method to use CERT records and hashed names. * gpg: New command --list-gcrypt-config. New parameter "curve" for --list-config. * gpg: Print a NEWSIG status line like gpgsm always did. * gpg: Print MPI values with --list-packets and --verbose. * gpg: Write correct MPI lengths with ECC keys. * gpg: Skip legacy PGP-2 keys while searching. (drop 0001-gpg-Skip-legacy-keys-while-searching-keyrings.patch now upstream) * gpg: Improved searching for mail addresses when using a keybox. * gpgsm: Changed default algos to AES-128 and SHA-256. * gpgtar: Fixed extracting files with sizes of a multiple of 512. * dirmngr: Fixed SNI handling for hkps pools. (drop hkps-fix-host-name-verification-when-using-pools.patch now upstream) * dirmngr: extra-certs and trusted-certs are now always loaded from the sysconfig dir instead of the homedir. * Fixed possible problems due to compiler optimization, two minor regressions, and other bugs. - refreshed for context changes: * gnupg-2.0.18-files-are-digests.patch * gnupg-add_legacy_FIPS_mode_option.patch- Add hkps-fix-host-name-verification-when-using-pools.patch to fix hkps support w/ pools. Upstream commit dc10d46.- Ensure secure memory can be used with default 64k memlock limit Fixes [boo#915931], removes gnupg-large_keys.patch - Removed gnupg-remove_development_version_warning.patch, obsolete - Removed gnupg-2.0.4-install_tools.diff, replaced by spec install - Removed autoconf requirement and autoreconf calls thus obsoleted- Fix invalid packet read error when reading keyrings [boo#914625] add 0001-gpg-Skip-legacy-keys-while-searching-keyrings.patch- update to 2.1.2: * gpg: The parameter 'Passphrase' for batch key generation works again. * gpg: Using a passphrase option in batch mode now has the expected effect on --quick-gen-key. * gpg: Improved reporting of unsupported PGP-2 keys. * gpg: Added support for algo names when generating keys using - -command-fd. * gpg: Fixed DoS based on bogus and overlong key packets. * agent: When setting --default-cache-ttl the value for --max-cache-ttl is adjusted to be not lower than the former. * agent: Fixed problems with the new --extra-socket. * agent: Made --allow-loopback-pinentry changeable with gpgconf. * agent: Fixed importing of unprotected openpgp keys. * agent: Now tries to use a fallback pinentry if the standard pinentry is not installed. * scd: Added support for ECDH. * Fixed several bugs related to bogus keyrings and improved some other code. - in gnupg-2.0.18-files-are-digests.patch, change buffer_to_u32 to buf32_to_u32 from host2net.h to match upstream changes - now requires automake 1.14- update to 2.1.1: * gpg: Detect faulty use of --verify on detached signatures. * gpg: New import option "keep-ownertrust". * gpg: New sub-command "factory-reset" for --card-edit. * gpg: A stub key for smartcards is now created by --card-status. * gpg: Fixed regression in --refresh-keys. * gpg: Fixed regresion in %g and %p codes for --sig-notation. * gpg: Fixed best matching hash algo detection for ECDSA and EdDSA. * gpg: Improved perceived speed of secret key listisngs. * gpg: Print number of skipped PGP-2 keys on import. * gpg: Removed the option aliases --throw-keyid and --notation-data; use --throw-keyids and --set-notation instead. * gpg: New import option "keep-ownertrust". * gpg: Skip too large keys during import. * gpg,gpgsm: New option --no-autostart to avoid starting gpg-agent or dirmngr. * gpg-agent: New option --extra-socket to provide a restricted command set for use with remote clients. * gpgconf --kill does not anymore start a service only to kill it. * gpg-pconnect-agent: Add convenience option --uiserver. * More translations (but most of them are not complete). * To support remotely mounted home directories, the IPC sockets may now be redirected. This feature requires Libassuan 2.2.0. * Improved portability and the usual bunch of bug fixes. - removed patch not part of upstream release: gnupg-2.1.0-boo-907198-openpgp_oid_to_str-buffer-overflow.patch - refresh for context changes: gnupg-2.0.18-files-are-digests.patch gnupg-2.0.4-install_tools.diff - refresh for upstream code changes: gnupg-add_legacy_FIPS_mode_option.patch gnupg-detect_FIPS_mode.patch (MD5 removed)- Support for large RSA keys This involves compiling with --enable-large-rsa and - -enable-large-secmem, as well as patching the number of secmem bytes and IPC bytes to slightly larger values. See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739424 * added gnupg-large_keys.patch- update build requirement versions that changed with 2.1.0- fix buffer overflow in OID to string conversion function [boo#907198], adding gnupg-2.1.0-boo-907198-openpgp_oid_to_str-buffer-overflow.patch- obsolete dirmngr (shipped with gpg since 2.1.0) - spec cleanup after previous update - get rid of "THIS IS A DEVELOPMENT VERSION" warning http://lists.gnupg.org/pipermail/gnupg-devel/2014-November/029065.html * added gnupg-remove_development_version_warning.patch- upgrade to 2.1.0 (modern) - The file "secring.gpg" is not anymore used to store the secret keys. Merging of secret keys is now supported. - All support for PGP-2 keys has been removed for security reasons. - The standard key generation interface is now much leaner. This will help a new user to quickly generate a suitable key. - Support for Elliptic Curve Cryptography (ECC) is now available. - Commands to create and sign keys from the command line without any extra prompts are now available. - The Pinentry may now show the new passphrase entry and the passphrase confirmation entry in one dialog. - There is no more need to manually start the gpg-agent. It is now started by any part of GnuPG as needed. - Problems with importing keys with the same long key id have been addressed. - The Dirmngr is now part of GnuPG proper and also takes care of accessing keyserver. - Keyserver pools are now handled in a smarter way. - A new format for locally storing the public keys is now used. This considerable speeds up operations on large keyrings. - Revocation certificates are now created by default. - Card support has been updated, new readers and token types are supported. - The format of the key listing has been changed to better identify the properties of a key. - The gpg-agent may now be used on Windows as a Pageant replacement for Putty in the same way it is used for years on Unix as ssh-agent replacement. - Creation of X.509 certificates has been improved. It is now also possible to export them directly in PKCS#8 and PEM format for use on TLS servers. - dropped patches: * gnupg-2.0.20-automake113.diff * gnupg-2.0.18-tmpdir.diff (socket is created in homedir now) - refresh most of the remaining patches - added new BuildRequires: gnutls-devel, pkg-config, npth-devel/bin/shgpgh04-ch1b 1769691636 #%')+-./013456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~2.4.4-150600.3.15.12.4.41.4.92.4.4-150600.3.15.12.4.4-150600.3.15.11.4.9 gnupggpgconf.confg13gpggpg-agentgpg-cardgpg-connect-agentgpg-wks-clientgpg-wks-servergpg2gpgconfgpgparsemailgpgscmgpgsmgpgsplitgpgtargpgvgpgv2kbxutilwatchgnupggpg-authgpg-check-patterngpg-pair-toolgpg-preset-passphrasegpg-protect-toolgpg-wks-clientkeyboxdscdaemonsystemdusergpg-agent-browser.socketgpg-agent-extra.socketgpg-agent-ssh.socketgpg-agent.servicegpg-agent.socket60-scdaemon.rulesaddgnupghomeapplygnupgdefaultsg13-syshelpgpg2AUTHORSChangeLogDCODETAILSFAQHACKINGKEYSERVERNEWSOpenPGPREADMEREADME.systemdTHANKSTODOTRANSLATEexamplesREADMEcommon.confgpgconf.rnamespwpattern.listqualified.txtscd-eventtrustlist.txtgnupgdistsigkey.gpghelp.be.txthelp.ca.txthelp.cs.txthelp.da.txthelp.de.txthelp.el.txthelp.eo.txthelp.es.txthelp.et.txthelp.fi.txthelp.fr.txthelp.gl.txthelp.hu.txthelp.id.txthelp.it.txthelp.ja.txthelp.nb.txthelp.pl.txthelp.pt.txthelp.pt_BR.txthelp.ro.txthelp.ru.txthelp.sk.txthelp.sv.txthelp.tr.txthelp.txthelp.zh_CN.txthelp.zh_TW.txtgnupg.info-1.gzgnupg.info-2.gzgnupg.info-3.gzgnupg.info.gzgpg2COPYINGCOPYING.CC0COPYING.GPL2COPYING.LGPL21COPYING.LGPL3COPYING.othergpg-agent.1.gzgpg-card.1.gzgpg-check-pattern.1.gzgpg-connect-agent.1.gzgpg-preset-passphrase.1.gzgpg-wks-client.1.gzgpg-wks-server.1.gzgpg.1.gzgpg2.1.gzgpgconf.1.gzgpgparsemail.1.gzgpgsm.1.gzgpgtar.1.gzgpgv.1.gzgpgv2.1.gzscdaemon.1.gzwatchgnupg.1.gzgnupg.7.gzaddgnupghome.8.gzapplygnupgdefaults.8.gz/etc//etc/gnupg//usr/bin//usr/lib//usr/lib/systemd//usr/lib/systemd/user//usr/lib/udev/rules.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/gpg2//usr/share/doc/packages/gpg2/examples//usr/share//usr/share/gnupg//usr/share/info//usr/share/licenses//usr/share/licenses/gpg2//usr/share/man/man1//usr/share/man/man7//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:42496/SUSE_SLE-15-SP6_Update/fea44644a2a95b37260af76f45192047-gpg2.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linux directoryASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6c498f79077b8b20d8f428d3f282ced9d931006c, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=05083d60fb2582ec0a58fe5d7c96b99538d3e78f, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=439cbb6b6bb9847b66b30e1ef241e6759c6030fd, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=e47f54b59c016a6cd9c4c70887177c5c4b286fd3, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2ac88dbf07882c027905464444e6cd0222443cbe, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=871599832b82a23388f52d006548fd9c54b5b6e1, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=ec929737600ec77ef1bc08ee3c7a8d240816a815, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=fb83a9d4fc9a469852eaae34436ca0e1fe5bdee2, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=fef08b3044e0b4d528f7521647695a9e8bc0ee33, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=f9577ca12fcc0da26fe2914f5340db43e9d7e31d, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=28e70fd1501f46f5a01ac7dc12d982a05b32445d, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=96e06b656d79d1af09d1ec4ecaa66eb759c06fe3, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=65b6d1c9437205aaed1d8c74ffe64231d92b6c79, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=66057517a6aaa070f43e6cfa077e7e353fd32a3c, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=e1d2a0411f9ee5ef98f29456a915b6c0c73175a1, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=796b7ef0f546c243bdec2f621a4ab62c3f1ab8b6, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=d2d68bd8c3475eff55bd6b94dc6033e83e3f9a2e, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=95fed02fee7e24a38c8e6e87aa731cf25c2b0051, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=ada0b91f5bf998611ba0840a9dc1750df085bddb, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=b47df9c47564ef986ddada010468e6a0ab217ede, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=16732f21ae41b5fb8883333bb03e39fa692eace9, for GNU/Linux 4.3.0, strippedPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=f2eb1d87165569c720873d81bb06f36760fcb820, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=ac7bd250e2e1a8fda98bda214d2040110154edb2, for GNU/Linux 4.3.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=041d1503bafda0c90a5b9636fec28d8aaeae2aed, for GNU/Linux 4.3.0, strippedUTF-8 Unicode texttroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)*=Pbr-<K\opRRR R RRRRRRRR RR RRRRRRRRR RR RRR RRR RRR RR RRRRRRRRRR RRRRRRR RR RRRRR!RRRRR RRRRRRRR R RRRRR!RRRRR RRRRRRR RR RRRRRRRR RRRRRRR RR RRRRRRRRRRRRR R RRRRR R R$RR"RR!RRRRRRR RRRRRRR RR RRRRRRRRR RRRR RRRRRRR RR RR!RRRR RRRR RRRRRRRR RR RRRRRRRR!RRRRR RRRRRR R RRRR$RRRRR RRRRRRR RR RRRRRR RRR RRRRRRRR RR RR$RRRRRRRRRR RRRRRR RR RRRRRRRR RRRR RRRRR RRRRRRRR R RRRRRRRRR RRRRRR R RRRRRRR RRRRRR RR RRRRRRRRR RRRRRR R RRRRRRRRR RRRRR RRR RR RRRRRRRRRRR RRRRRR R RRRR R RRRRRR"RRRR RRR RRR RRRRRR RR RRRRRRR#RRRRRRR RRRRRRR RR RRRRR;sQZdirmngr2.4.4utf-8b4abee89990b2db3fe4763267065eb167d60e62b13faee07e6542c78b5c9520b?7zXZ !t/ ]"k%ag,Rvw:'Z}Z&exx5Ń)E,1+TʁIlo\}] A ,3ɲhH!'B 1Z2Swi5KQճ#Tnay~'p7*%g?F$0 V|Ac=g#ygsIW*]\=٬J1SVf+|킴=ea^[ 󻚬 r1x5+NSmdө l%cCEҾojaᣦ>VҸ8RJ> 52cS'mT~#N1 ]x(7=.Ss" wzSW6tNhr5g!d["uݏL~KtyKZ^ Kj#HVUES:- Y@D+a&j&JBt( ln h&,ބ ipeƂ% O w:]U/d09M+A斝!!CDuibҰH(a]Б~-{9,wh[,g5?I8OSjTsI1]4歉-o_#Lwdv,"zI'tt /7t^–CBwH# \Fcaʬ˔2LJSg;[;m0 {3fEJ`T0Vzh|Gd[.cvrrq( a(E(53E|.1< 0OGsP~yI.ȃ*;ACD0&+IK6Ӭۗ{vj#"K Ϊ$f&j?|,dW$U?-l'%p._{rX L)naNZ՜br8L]=ꇠQ!OV5{'+ 0<S< Av(aI bI|?r+7&vW$ Rdl`t9*2}Rx1ٶmU )!{ydokw{gY1YeoI/kYɷG:x6M%Ӌŋ!Hn捍k.fȭ K\c-)["A]IOh3<$sNh؀4}%DDn7LDN7ɂⴕ}謜qZ]4a^CuG&JLMjq]lW(4)P%:mnDXO#MLEZwhcck ¬s@/u.1ANе&X'T2Ƿ :0/ׇ o<7Km̊&-RguL~`A*x$^@l qQ૒bS f"35@/![Wrb?QtI!.HnE _{IAMX$E@H ՁM O5t=~{8u|];A̔+m5 ')ju9߲֨ߎQ#n9U}q_: ++9ct԰ CWq3ۛk``:풑l3>:׻ʉUANuq(LA3+9% wCK»XrW`fL:|N}l3"S (YA@M"^x1*.%-q[&&Sθ:N^;fNU笝ܵvvlp0\Wz.oDžN7}+`^hvg%2JŮLKxj19ܣOdKfK z@`,7n<-xK`p܅#"sRU-ʫ&>I$7(UiD֧º&MgTF5Ym+EE{6tEa1븇#G 7.cqSHy^5'`1 Ks+yXor`=CL9 e-Ӿ8}UYca~{$0yfn"#Xdjipfhn_`;ݐz~k(k7w6E3L-,qoL=-kaf~3}q>l /ͽ k~?拥Q<(ŀ2&~DW]'3¨?G:/~8]Tz[vcc907Rޅ[EJ\7w6%8(Ϳ/nB;n|B[?RBpmǓ_顼v,9GK횒(LCRߖLuR!UĖ(A͢A♠Գd;R(h.h}lDj#Ay1.C0 ^O}Q ewU%eP,W7.LsHFV <F5!$m$D¥ Cy1seޝw=.W.`.յܯ"(JY. @S WCu(\}ptUw8MBaj(P'4JYN#TƳ=p}| TZ**e tL Փ6\ *|,'۳#jӇn<**CUe0(|KNSਫ਼C* ̛ V(CwShxk3}Bw|X+K'Ži?tS0ٍ_`ԓ]碿 l0Ziv<@o6ctܢ68S{~ Al@gScj[6c /#< @_x[t~@jgdl7|tOx׳Zd5,_ĹWR0YeL&>:9?"&c%ѫe˹vMS| [a @]$v{m;!3@ΓX z`XEy@kA *7IDuǺT{AvϏO̫?ƣC"m0J>.bkEñPo:/~qѯoc/N-VH$}/ o} ̄2,=QZ.ܙB .|7ARù\4W*+7ݜHhx4X(ȀMqn`W~Pp5XMb1C&pWJ&O9 Hz_)S43؝'eu]tVz0Z!#a_Pi~kwmΡ}TF[,d{@ZPr-Ǒ-_$z'!<'ŖJYq̉Z:*5תoԤcޟ/kW%{%}J:"9Ny,sVo%Fb)UzZA7I_eq;}\iH]S5ZI=-~>(@Bg\o`a& 6{yPK7vSG d2dYWf$.}nw¿\bh6c@X\A RsN؈UOUd+{ MӲq)b٘[A.[*JHi/ u93FvQr " MlA 6w>ow`[60` aRmKGc %oSH1t)_4ZsTD\js잿lČ;\>a'NQSDG9Hl -)OL+a9Բxճ폤p*s'IQM"|3#dIİM윎rρz^΂edVc`-pq؄jV50UY!El\wQڼ8l"%W}Ȋ2W#GVsTNdxnEq-_idMQs4V1/`L{$P<8:eY]ݧ]7j9mpܕ*\dLX,On$]XylqbLu sM)6E=eEz}_K1hv+ -F՛ˆ:9a`F!f:iN)I8VqN;mlIL ?n)in1uV! ]6U'PRf"%w\eְFSerܾrz?r+zc&wERfa ?3* qOJYQK88Mx8qS 5)n1q S>Z*Mg@1WOrpeA1 jYq֢ZZ*-3*< 6Gadg3ڝK{~%N#bgeFDDV,0OMAٜ8jfѺT@eVy$2ɘ9 BMi?ZڮF.gWGj :x H=@f` +dIrWW$tl^WPkcMGKbVVH5j+ʜ.%!To "ǙvLj/ " \)U4N5Sێ+Qz3lBląU} n`#FʬFUg*(pw$$[ZGxa;q"exFGctQd&!D "f@yFI՘콓,:vWǦ'孓TEbFNURO\}&xAXÐ`JHsUhxѾ5GIi4sN`XRk^Heh@!u@~v&ŬK5ưr.]KyEA^T#,=Gky!4۽6.1ke㏌!\5#|:Ey56yݖSsZLkB}ު&Ebz"y#\🡕rvri|Hpml*P&^pcx8]{JV43Cx>+))@0B7 Jf|Eĵ l9&΍wIU֞w=w+.nzYpeMֺ{g ?"HbVv9w  'piǜ\}qV>yvbGm='t|xf|_g0u;I[vƋ*t7^ AIx!Mz̍b^.-a;B9ՆY,^l{ѸBwq9,` Pc6/ XД۩l?PȋROv.[伜<dQܣ1 H4,SSn9Y2ڒzC$xNf+A);yIiL\: lޅlAڵKP(꤉D^ fBJO-D}}p]Um,h iDF{z5cf60Nj:הhd9Cp6!3./&D9P|J]"]vWPt Uw#6/GKLBEFS;62$(@jux}`Qo9x9EK΁kRԤքMR W@WCyv4X }~QVup?lQn(?4PAnB | {2մ2V;`WcIg۩M7y|\̌x!^Zw9IɴmwQ[U"'ֺGA4\;ay qWcfWJL|Q!No g?SvMVCsp0KQL2]D--|[:һu<0?F{Cfr!hGP/ ^w!-03r?]i<:Vm6]$\, 0 hɉa"K c>ɫRSޛŔہhw,dGvv~|Juxegl)( X¾}8yW-.QLZfD(VN0)&ڏ2&ˏX,#)jU$bB:qR憗@YmhRM`+7Vq2:c"G&@]Gm8 k-2]l`R?ڨjc{`1aH"7GMrJzw<!WhFUU2YV s'!#|m ncF^N'7!t>P)maK2qZ_9^7 5{ݣ(ID#+C SS?g&GEXDui:.wl &C[#5u ̓5;S-x+˷9U&>gOI;Q-n~D'h"2M@˨ƻ8nRBqv"&V"c7u"FWkQX\>$`_mq5m#tjur{Ki)ZáBc>N`o PLΛxMie3 F2OLwB*mn1]>A)Зl%r{O`ڪK !si::!#ⱆM`掠G)lDǓTD]f,.&3%Qŕz.RGE䭶!a@Q['>n:˖r9X,.CpI0z{8A}J &"k3%@.ާ2ve<*:QjtG!g<\ :p|)y"V J^}2BTC> @" !IAM5 2FIfL+Gkfx_kܴ@ŚV$^韾@U_F.妥X)Pd7(:G.uX_InROe䗔xXJ2@[r}rlοZe1N6}V=Nlم0KTG23rQ K}yYȃhc@n4{ZP* WR.暆B 4 g847F*.i8L^2ÍF0y7V./,Rܲ.!b%^" oP pU6/ih y5X-;8/X-z:0oّ@I^an[{~&[<9QZ(#  /,239?lHHn: ύW  ,o;bVO*=,>n'Oer+[B$.Qfʗ{vQV:SmsdR1^M޾#+bw5H'uDhA1|! ]+zGX_C/cqe6`R;@\4imQV81a SiE 9n6bP6Mb ¼N-wAʥYaO9Hͺ™fPe D0ky v&so_4Пe˗^V0:es-i:BZ9@U!ע{e`(l+v#5 )+GFY:J'^VWL|uӐ<mӚ?f_\]XVߕ#-@Fw68]% !K%)1sf/3$%JPF~I8pvq,.Bd(CoTLrAl_n@L$ 1 jQDEh >S,B0'*1&8"P6췍ZFqKV_)*ONfuVTGli):պ>roKܱ뭠ڇ8}E|-0dϹaDpJ$pGoJ,1ؘJntsr%ŠP]Pd]}x \'.JhT}9#8a4lɘYq` <#y_v~Y9JFJ'K]-Ak^_ΰ,!Qgί/vd(x fMe~ WvBQ0Hm}As'8 5bά}mAР Rwxs-~9([i3xu{=1PԤyPC|S:d)ō*tM6IB.j{q DvJKbjbԗ)R4wb"gി/@E>$%2%|Hqp/y{T" >$a4X([jYON2L!)'gFyr}\83ͦn5"1@"5ԯdG^xDu:( rLor`tFjVVT:]` e0s3Kd =qR쫵4೦%Lg$%tK[\~$VsB.6O(w$Ɠ2{vEyێmdVfnKWkyկQc0z)L;Et DKsOEAN*.h=~OVR]%TP/EC1z?8L gK)Kkes%Z0 sTk:~ݕ\; sdE!qi8 í)j+2+b0\le',i3Ӊcr C־֋jh(ve!NY;ތM 2/޻yD|nf$#>AW\u>lmΐ7uب\}+,鹲4% i{%?췴,iy]ڝ$NJN ڠH5ŧL.Bw6(P8>4LW"ڦ#?o'_3)|BɯPCby$(̪u-X?ь 4J`EMiW1 EF!v/>th } 6 |#qXfwDHHv8CUՆ1T(\`ox79Y~tz֒7 wD *\wWQq ( c:{{/H 'ⱒ]2#WqZ\MV_g%A!_tlB"ۘ Ly=G S;2$+GZT}:Wg\}SK;動;qcq Kwδ(}\׌*\~Vϫ1$|EJ1,8͵̖@17%W4ޤMq1-' o%Z`߿q0ር13&YyQ^#6?˦$1Gq `߈uFiu*!=;xB xx^{R>ې`FYc:(HdCoaſn$-+B<P+ɼR$̩H!󷐤-d'It6ipFA~.'jiT)\?`R2PTɿUuyX6%ƥnB>6(q*&*]6>Q6> 1w>#pTW!=!?-U4&f!^O’oxNJnN}kwso'9C5UHGb4uizAԜdi%(nC]KtAN"OdVHqq>%PHȶӋZh#ng0q?{lcJA{3^Ct+`cH?e>1#Q{m:nl )qCZ( h層QqڗBumHW׻ +ݟ&"^%f;LjUodKY >s(~ )ͩP (݇x㘟Flg 1<{)>z򝫲Eiҭ/5ra((QnmLlӋڂgbtCSZ@lQFrt.I42; =m~ [_х,'/4{h kDd0Q*7!UԲLhEAIWc/}$5sJw ?Ǿ ksG$6su߾ uTqM<Ч.CoD"5=*y!}")z0a Y%n EF jD*׶,eƸFFOegģEz9v56RQ%U))*217{KoQT&Ʊ:e+jiJ+hf7ͺnH2/= gX-o{]klsT'qojG[]S|NL|+}u }NZF9X̒ uD=JP]b3ßE?vgJ!5XҗU^<{jrҼi06/"lբ[ѓ\n(kaH{J?jt>ȬG2R'/tɝ$3CQs3s0,p}Czğ+~)g6O|Eb&]/ޗ;'U+R>\5sCD~FsCzv7hp9KpuwY"|-Ni,ނyS=3!s$}T_<+RKJ3ylTu{~E7fW8^~5#D跘â ngy mm(nl7L[CS|`,X?6IJ<j ִKՉ<[=2eNK=Y ץŻb \RmulW !'޼c`/,eT ;6-L)<CV7@_kXjwOx靣XgNԅ] ӫޏ {A-tӞJB 2o!)Lt&,/:I]/"^YNP6?92CYݙUkPIln,pffqB2H宇qLn@kO3Z`b]鐓ݽO؞5Q[ f)4OT+u{!'Vtp8=e0$'MYL}Pݿ ;l/E&=}r5& f9 wywbXn(%0in7l\jgE GoD*4nzC<' *8d:.ٌ,4k;/]hh9]nu.gt4q-|38aAۊe& ("cU_9bvU(W ОLOv4y4{02 fA`])&Sm;I[@2poiOþ]ibjLtLcChҬ%6!n>t2cIO򘂌3ևpw M 6XĜWʾȏmܻ=iFZhw9ߪl<.g9778P2LsU\5+|RFH:>~Ͼ?6~yY&uƇr6 yܐ: :0g┢\WoF`|F@EI]x-BXdk5j%A J3@Gu](8)3uBDSiۣl={эGd"@Th(eeuYi 8`G R:&Dm P3PlȽ[ 2 hvaP:%_?(S!څx j7J!R26*?n|6$_7.Ca>3 :s|y<5?I$wt)#,@tr{PK^ vPi"XľXlhz  iF-3ǥ>`05|o=wkB2&+xwuh/v(\*Et+ 6p7aSqR';!| 1<3já,;<-pyJ{Ԏ0Yf0oNMd_{fjaVBm j:J%^v1Ea}UZ_:a_P0oy̑8tBX|f'ha'JrqF_-c0|M_Fn=i)łgƤ4xuZclȂ&ny).ɧ`j*^b0;vG]w EHJ^$.*:j ڣq#]@7sH3A.R%:%vsvg;]4T kBm\^9򫼼qyzw^ |Rб}2 ;09܌iƤ% -ANrS+KߠQLmF8?z"r:;3D([o|l6:٣l jk#qHds^2 R8?Iк 9K Z8W |R=a‰Bm{2Jޱ fgГ]ơ~͉`U/:Jkud ĨWb!Q~}/2+(4;LyE)"`ˍāۑŊjmv~oxn> t/P͛0yJ-*,eU&att;@ "Y 6p@ Ǧ2)|#@˯VWVmKDRkC:{$ϣLEEag~V@lf 6%5K63a6|s5yX.(}g+<3rv؍!P7 tFBp#7_>Q<5-wՕotPJqN;#XHkh-*5< P%ċ ^tս =4/S /dTȁgy7mw'pɨoF"p4DEݶ4h>-c;5&]bTpS0E5Γ*elyLt^UQ מNf~ Z9 XSWqu-[9]cF֟ns0϶^PBq)F f3a RWCws"[~73$AY p9oD7R 8Ja!UꝰS7 2 y Sf.16uê->>:ʋF|=g̼6ٮR.pc/ak`golY4Wǥvxc)jj8&x$ |dm K,2t֭vJ(6ּe%?E]SmtԈ=RUmiK,ȺUs IՃ}jq!.M@qĎ(S;8V>|r]w&<\cwy-=57/-׽6Ś< /e>?DXFd;ƺ LҼiyczpϮfm1WVGg"LYL^#:,ˊ̧xLJ]Ǥ=iyW1:r: S\{S,qBHFy2-mӚ$YdFk%}aՉZ!}RR ObCLWQ&yiXoZݒf&!QN焞WIoZɛ_OkkP7ɷHo|^wl /LqCqxO nަ[M`hh1^5{,)f=z_\>>Naev:m'A΅6)&~\M1kDm9IC}2x9z. ;b煁r&†L7MuāH3ۦ/ů R\عM5~JO-CJ2ҏcfo툜K`AN>͚m:o Wowu"? ^"]r} #";d l?$a&7{~=E[7^+ƍ9qΗox1 eU)Fa-IΘM6:\ڂ~6wu ]~0椠.ʬp-b7@hޯ.R!W H8 fRKRcs'e UP/"c% Q#ܱ''`.7gFq P"?@u9zdfvxs.eᵭ|"W6UtqƳȰ{G&CU1n``UkO['/۳f`8TXف %D0Cq$#:كݞ8~)e+w` \0%.  E}f%_ĭN\mJ( TFf#gV^ SNi)z]~,bҠc+D%eՑ<Ώ{@Tl@*aMR nȘq71Éy,0A+kZOƗ$SUm4&_Szi.˓*D֣w ̤G@_b!ꥑ=_r&5K?6gP7a#GLA\,_\S!!{Tᬽ̣]ĭ!toFxcO9a*BUK<ݜ+͗pѣZjN51\Nz( Jfchpu#9CuݘkR q6-HxrJEyLLxV"-:rEQ;Z;+U lQp渋8|.LXJwش|%y:#:k⽇ʊV$'K:8X/4lFxt:PDGKVބNxMDtd c]9cf7+rhY/XΡ}pˤmYC]ͅ ,w" Od_g9IO}Oןÿ-:\F3Qe2wZGr#%@d-;_T?)ԫ;&xQW22k9k2,Vf5or;w蓯72''ݐFs4 5\F 8s vrp#OV:ߛet# 4K6YE u.qj}dlGOJS+и$ QMhuzv,kmekzN<ZQ\F^"'ҳ_&~6js$Zs:r!L;:EY}6zT>"SdC{'qU`{7ڇSY8Ab4vj _RDneϹf^lcq'abbNUI9%tz/09d8+F9J:ANO9nZn]*^+m%߆'w BMV^z<h'I p|Is|Żx %=O#lLcNX t+Z/H. .CJYv ݢ%q}N_6rP '{0)a5֑2U)oڦL{ @mJpl`&TIoZ$x{C9̟m: aK)|mW! ]| s: ++A; ?iC;̈~+:r55#ZV۽i?g( XX ۇ1 ?Jk\3]@BĘRq_fz|fcz ыeU>i9'@ >H:DWdXKx+is]^c,}c @\3樆Gסl66W$3 $j _сYyFAxM2 X p}}j?M<55(evnص'Nڐ.ΕP@o EQCt u=\w24,A X5Zp@[C? R,`c=nbM"ВkpUۀʙXR= y(r̦ܯq?Ԅ%л(K ״HΨ㲖ٷ&([8RH:y7_HXڳjb͞;F`׷iObLlQ I5DaƢvq + low\~1J ^2hJ>}sbZV1\/vܹ-gO"Ai:r`(n) ٝV߹PVvo \F~&(;"6lZ%1ݍɐDNY ߯MmT|PAƩ5h+^UgR)@Z,"/V x2? M]dk#(_=/fm9 z뜞x]qP]ZtN(?)C$dAeΪkVfaůXdObPYyN逸lt!{r۪@\Ӊc2=ƿ|ZmtG.8г>-w쪝u e%G*jK~xp̐"a^cݘpekL÷;J @&Mtal IPUH8>kJmJֈ}" ٸiصbJc `e7 >B*'ٴR]֗Q9l+ꞥ8=^jp 6\{Yϧ1P81˃K>Gk$\aJ:󯛷˨Xz>AW>,Tf ;w<\c`d#i/?T?k6Kב+z'@ D2~.v,q^\CoJ8> NAL@1"_0J^-)qq|jĠNU+Y܎Mj.ՇyhZa^k[_ߨת0h0U~S̆#{d#Xu*%3[99 -/){65q #ts)ڽXm@9`~I "QR onO䄟h`oeE Z?YV橁6攝MJGw0hxHXdݎGAvIy |0$0T8 qC[&*U?cbLz+Q8F_nTcpOK * T\Ӫ՘5w;ժXﵴ9?km-I.5@ Ю\~죊=R_vɈq<.EjioM<+e uGD Zy lVz^-&<h7A+G1:FT*9٫V`!^|^IMtmGg~,0ϭ.dֺ'^ =(e!ռ.Ӑno [ IӉ`VeKqKn?DNy#s %iS=w<lY I=>VM< p=6W2 } pa#E]}YHK:As Nz8 AkuU"$<l-<#Ώ wx/,Gn>V ?JɄg.Z(wG]y0Xvbe~Ze{%*ҀyzH{o㝬0rYצ q,SLzot0x;ǯ(H$(#/6E`_lD Ƥ(P34cpJF|7DhA@ni5EVE%2>^)LavR'v05y+iw<(Wڋ-na,SLC{[kE.N9L2nLdRgYHGs1ګ/ E#O6]fS ^ӷKu ѵC7!R²^y:-7y*^– 3xV 4U@q~S?NYvѧEGL 9I/8ݾtYz3̆$+nwsW7R F.tlP+ɚnkm${IbBNp ntlڛh2UNd;f1}L;*Cn,[8E#w# ISViT8s2qpqml!(*9sϜ#0:sw0(-b5[ v'n_]1`\nVæ=&fa0DS4~_Rhv G.\it{F2e})@5}|+S0))LDEC@!eZΞ&LֵceTM  M1|WXbRTVGѣ5:SBѕs ?fjK&kT2ltrr  )xn$P2!L Pw]>!4bhq0dp ];σ#4 XE;8^DfB~1sEݢ{vR? ϿƋjSDOk}`2rEet}G_?750zgj|tmmӼ_(,: kPFSҝW\lq_+MoGLv6 G57ʵ%6u Ƭ̥&l0 Ǵ|&dQ/ocR%5JdiFP Xb(^-y#NJg" ,;P>}^5|%Cyd=g>Oe@h8Wy?i=snGݖəփO' 6{K+YQ>*(()V+HV4?ŕ%}eIU$ɀ!s?x$KB$~!t^pJ':# cm^@Lrc+)߅L>C9 `a=xLruE2SQ< 0={efҫ"jHgqQǥh: P!p7]c.U'3G,`[]RuO{eA~A=e Z+t c;@Y{}^K:Qn?jo@v峘u+3\ Ցkx'OJֿ񏑦kғN2N3y n~ X m_JS䆩$9oq C1%}q7et>o9}߯\y51]utoS'Z1cd6F\P47K)N?de3ߚg0^r'a+M&ި]{ޱO͙ Iqy#_iQSwݾ9C-,A3qJȭ[,e,㡢i<*40r.@ǔlxޏ45Bu_FpQ2#.O}(u^:EeD$إN#)M /`l.Fg̣*O+I}Y[- Yv=*)t9“Yy~bqKmkVnڱ,:9tkɈ`]~81XM1|D=8S?.VЩ>5VZ}n,*r;I`H~@pa_Ղ23'5BkKNh&s W04>‹d{lu& 'XQ1G oUB> (ZE:H Dp[g3_k;u9$ܥ_br&{_-4͹ۑFhogCZ/:lDG\Z0S+&zdWLкa57Lɹ^#$pҴ\sDg`V"r#3rT d>R. ~a%Cc5tҪV>|e"5Ͳ^nZWH5NWF*΋KC32S({lpF=!މ-Vb_߯vQv؎%$,Ճױav*ޖs!:~ӹv)G`4{E>EbcO /Gt @)񑥡yCHF3o)嫐<<ٮ=doTL54|-^ /FV2}_6:cHj ()Hi6.]B%͍@ C+K̹w阦[|30m171f;YxU2ONxC?/dJH[%PSY6GZF|nl?+qO.Gy/6 * x1㛮y~aVCCy$Bs QH9zR!OYj]EKIO2a7g4A>&}l}^qc]D( G]xɈ !>XÈ>I0ism:[,n[F<YK _̜͙AXphI_'Pf4/Ӗ~PGBlT|gwhN_L%_9sFuR3 w1B:gY}R$ރ5`2 u .+qʨr0ZbKkzy Kcj+MB._c`O&5#l|Af6V@d222w[ Li_lC"=.Uts)usMMMUc{Rl[F4;G83]d@6LjMuQ5$"EZ"L15leI:M c-o8x8T[cAoTTxjg7I2leҥy VFd >CV>)Tq>3r.B)# ݌W[3|Sb#/LW7ߣaeb !D刀湼!,6=ړ#S ~|#+f8422H7[ LTl{6D,YU@GaTYFsLKB%O ԛZڄ_ gU[ ^, U7J!ؘKILaj`s4[$8)IELhFtT]R: X*~|H4S[;hKfr;;a|c/`NjXҴט+$*rሺD@>Wn@Jhl7,&!h1I)S&}Y#YZNssLpE%0g?HLQB÷t?\yAc`#2[ 3Il R#Chw|r4zxB~ct'*ʃU<wb+=v D*v;#ssm8r`=sWq=q8{cwZvIDn3vk) 3pӜ3RHpcNL;."ڥ/fwsq 6bj^J6ar 1rѱN BK)Zhu6-4[81o_F|\J?qگPK Tp`hM6Ú \]32sY*=߱?є |砦 _Ldyxzךu+^!mƢԽ!|L=j( *AqȅGk)L&0!-j]L?\dDf%h;pI58 +dVJ9B= +.du NLrM$Vd9JV|?0d+fg@t # opWH=()-)ӛ/+cߏMgNd+?KozY[}ŁB,n dl4.d:]Jt! o=ysA1c0}^X|Gn7d[_&-j܌k5Tb׏=fjPţԂ<9]g=$ ~rؠҋʳر5L_9}Jݜ@ b#-&@d)[dzuvs,߭Eރa k;y)%$ "g뀗˝H20œ$T5EoC0V%W\ϋ$_W61rwKpmk6,G;Ui(z +X0g3qM^Ql~QZ&hC@X96(òݙä{NUo9%Wڷ>xc 段3KamA hS %g0|J+QQx*uC`1Ar:P&RĀ.P~|SҪaD~M:e/^f:0 "quul`Gjg3n@0>sLܑ U[Ǿcb%|=t[gVoCZ~8|Ry3?o t&dC Fs"V 7De mY_jpaB/Ҳt]e>e&*u洱1((/{z-z2R~Me Rnɶ.;1gLs#OÆZK]3}GXe8LXfyTJ[Ζ v~y@SLiѺ#Ē. >s]6!߇6<%W% (/޾cE9L& gd e])7v;ߐPRq+U&S(18V:ipA^۾ Y[5_{8b,f<(!$<9Hm1z(~סJ;*DjdvݲKvPa l*&ktPH-ב RZ̄zn; ?O梁Z"47u^$wǗI^LcI, " B 6K-_QE`BtAFȣ$ZMͼŪ~(c74L~Qڰ'pJ,8ob>،ge}aX&3Na]6_M$)Bk>rZ=gx%,N Q!Z U )/{qkNt B MZ9H :ӊ RSy v;AȂ0桱u멓I{.!R3)X_~Bb"es%)x #6^DWel_4U__Hǚ.ee8W0My!0dsԨa{,7 Qi-C I6TX)ȾRIԑ#Xvh/ERe 'te BRاHNPzTM1]4Vn.2;6xV+dsG-шGңlPVGz$qi-f%p7*e%÷4JI<yI~kXūZLpYb.9#%<^PpD- BҔ,k߿ 8r͈G}ɴi/V$%nEƹʑ2ϲ.DLn }iCJBnā`Vj.xz-3BhPJT2=/z /6U{JvڢLO! @-3kS-hMv,z$R3&k8$](xTp&*+(8%7']@}F7`R\޾Xk/x 8ɏh\קdmm{Q+DBrvdp4c),8&aĈl:J$ So PEQ)=k*-_-uh*Jb(ZNۆsdP ~Uڶn |xf X(:Y"H ]cw6Rn x@rC.nd{zӄẇ0 ;L94U/ʯ< ^d7qAلQz%jo/E_Hee.(Z(:ۂP#֠MV-eUǎ]3JWmO&o$LKTι>&_~&apw->]EрUx c` Ӯ?gy(lBb/PEz+? B%O4|`Q6Eg(^17d tE9*^<` =qE:9Zn8rp%Jb#dj~6ߊs;d6 ΅wt R) IռuFFl0轑aϯ>_Γ]|V+uH"8v{Z2}Og~끁)֣ Ʃ+ fkMh<@8,p'n0;P>ʭPll*n܉6S NA c2찈5#Fz%kW$M Ds6Y7dcZQU̚o"rHuL9qzT;/_xNt|}*HO] ;9[G1<[D3mMMi,68j*PosЫcLiF|3PWBlIw>PD;6,e>ZK\q 2Лi65i;(k"ٰK|m;Օ5C#綫]*F7)@_e ufQ(tޟ4}9iA#,w#0+lB,@y0ػNڜ6ʛ`8GDÛ|@:{Q-t8QܥpLZ*<8b_y]$9iu/?XmntwM'ӭ/{Jm]ǥWdo'8Z߀iY tzhg μdJ+ok]=qec1Ϩ*T)=WyW(~OVьmjf^z) ) 5N##OC\f?>HS)  5]3qs xO\.-ohlo?ؘbu"kHrׁ ̈́XJM(SF`UTyTŸSYkz5`S0%Ñyn" V7lE k@`Hg/6GY{p> =Zޣy]"8?{c澞!SD gwW4KEkF4$s#VlOsNuV˃c⓿Wm2]u1X,S=y/ ՚ptA=T1J#s\?"FáBRPU`$ph'F,q)`'kI Wd/I.T#$&7zpUpJt#s9J?:jCͨ3P57Ÿ8@SMS+EI gfei:Jcj}yaNK H;Up›vG`SC`X0ZCCL7﬘""?/e{'!/Ҭqr08/2$/(osP5uϬ8Q!&jP24+ha 6] =`1_jUJ#p 'vUq&"q݂0-.0P):>;Ak!e[띡9qr摏9_0d *!,4}jonMy)12,s—j9)AKXǦeT詵V|_ˮ2 2 _<JHovV$7L5z\~=#wžRwl(4H置6z1o6ugkK| C&\0 V my8糿t9C#䔰ņ;iCya|rwpa߸ Fi"mPqEB&OJMÚ&v:D!,g4ONOvB8YP;ml5`y2'Q1J䰍fmvY[By&D LvX̲^eW͆d,I+"E%?%5-ɱGwOG~k9LN8G==9i 󀈢i}عtY45dѷIWY_1~fê⻔ZKIidR+6v3'KHNEY7C_Aa%ؼg׸oNS@.LN׭:eț, SS>]h,Qu,}L/\]{zH>Qeܣc|Ueͺ$9(}{X3B|Ql/UJ1`Sφ.ۊ"rwmPPJaȊV'/ĝmW:@E!倷&v,0n&x6eL9zQVf1 52J3;녌Uݐ/ QrO3Ȉ b#, _8G[Ro[=4Npi>żU-ey!^0n>mg g6n5vԖa۪bQD"A`' 7`:a9sH,@,yҞSei &I[Brse|e7})%_9Kkʊ3\WL=oTzG]_rzf GBMPk8xHap/S\n$_!pM6!1r*&ZȎ2j)Oh֍eMetfم7 ?&ێR +vj ,=f9a5C|5IK0SRGJC?^B]>[33  XeOc6M Wr[E7&;E%6r p=dhO4xq%XNu'ܮ2%'A|~P;hۭdL֯4Q)6Kc_֧,m^Rܛ]r9uELC2gbw -&Yy;)'ya1*~?0t#Vd2}ypw`[ Mk\5;aTt}pE#DI'0RʼOa*Byɗ*sQLDUw6elf[av3.hIݟ8M?6`~]?F15Y[?\5ewCU%>}nԡ14@.^&GǨ¡T'z.6_qJUmP-^]#G9b-lBallz_ c2T\Ė͏GWMFNMQQ eۆ0[糇,R+u@Og"@@ Ә; nAW*%?:}X+qa @7hB",< Sqنw#t~y` \ J9s2+Bx?Vr,Ŵ`l}B>jh *0Yr2Dyxm6= s3wjQlkOuwe:6()0chqV/,9БJMd7N\#LZ=ys3-߆L@y(as4Y#Vi9[TNn.LQ{LEwI *i؋aRB_> M'LR \\yJ:!&¤&,&ǥ$BBX#,pjԑ vhS%TKLު a%B2c}tϕ,ћ2zil>$|frCΙ@ @RDV)Ej$\w~7XeNj?]GqPBcA7ۉK[YbxS|dJ,Gq- [xSɟSc,btŔ´jy- i߿YƴhDia Y&7VWtт׮pHWdۖfPu?4h{ .{vt_NR-Ihb(7Pm]+u=ؘUX'>+h^m/1R@DH2p2Zkg$ :[خBԉebMOIߓkM!Hv6oa^H5RA\g+b a՚ b vQZ 5V!L~oQDzL%ʑBc[5y#þ) .Qeo%ᘔ bbAR ;L[w:ǟFW^G<W=ԕ.4a;,!/g3AN\fe.xYoT,sɅC֧я/-ǁ2&Xw$DـIzl%6z&Ќ65!vuɕ}sD/`OjQkghu^]sT`BAp> ̅w"LUuX! fį؋IއOZR%mfZK:htTG8.aقqPU8?3Ys<޶xeοhU%&K4)g \.Uʪk:ӎ]s'RkE5q`1'}X:UTU,tfhMon тV0&nJE@<Yky*xHûY>ơ Yk|:[4-8&T5hɋ&`f PeàOy "ZyQi}٭Hc=ҽZ JĈЊ7Pso0x,PrFHq>N >a2}b]BI [@ЙԼ1dgt,JE[Rڡ7YGc75bRlRIhK-_ymм{OӬH7qa_Lx!VrH5D$!hcȧa)jʇL>WMjNj6r3)`) y*q;; =*٩as|4*W0ơk5|,[hj|(J{tp% ^a6ڙoC K|KхU9 :UŦcb\J0RX3D{AdA/mYYXuzb4!ЄAHh)C̡!/p#e^|ǟ 꺯܌̌'M$ÈfX&z` N~j|M6B}c#8trMΦE,w#|O? ΩkI`cE_HooW&Vܮ&myGĺG3uGrS?+dW/7ٌ&!qKRj7vY򛨯wܧwZ=% b 4p]c 䔊M\!̴&jQ?KG"WT{|($)W?%"9z_TJ\h\c =ZB3Ae(ddPU-S&_p Þ3CIX?9A"NvZMq> Q=5ۑ!/U|-U g3(xWVcV6+3y_~?B+~nBcv WaX|Cnh-uÊIE|(qC]hSֆ\P!2L'~"MZ>&VDirSx2zZqn\ \8-Ud`Xm48ntx;,UYbwkIL)57eNΦ h͝RNKŻGc%v&EJW&VX+qV pӹ7pdpFgVkK;zӀx2#Kk<<ۧ7R-Ғ[[[Ge G97Yd!u?3ibZ1n]E>\8tK*lQYϠYޱ/ZU(JnQB{[Dmz6`\&6ָ#~;Y;fNWLp<yWq Фxՠ_N=TU&:JU8BNK6\YZXY'#BjOӻ>-P`c\&9T5oekV48Ԥe\Wkm%+KiMObAՊxBD亾:2hA J3,ŢjŽ94eVr{$ В񠚶n՟V *~qkiqAӄ.69/Iq 09H Uh&@=Gi72*[5ƕ1H'D?e Z>D&^@'#k|-)poeWvhk=TV{jiKMMN?0~InS|usPz6mkļV3 r2BE1>#uԏ3?jzWH;m?~ _ÒNA %"lh0i?w?jTKegA!ll}Lj r-O h}K$ e#G|T֍Q%w}.qPm#,ʷ5m{4xmù8PBZr鐝L_`̳:#̔Q5D("Adn MWV>:-7x1+%*̣ỒD2/ ~nlEI>m@$5tŲa kg%Nb5XdL\ڦ\?OF fPZ;ӷW{tD$ZxIT.bLDLEC/\?,.ѷYt1.N#{1gs~1C}wed$OEG(Dx6pW{IXT3K/[ B<8tf;bu/+w#K~9E~I\Z(lN/T*a0\2szYYmӻ ރD"/^Ԝp \- 5  Xr<@!M#oBva];}?_;J.nnKX%"]FRFndtXx|j\D2#3D'J?YmXM'Io9 IZa R+^[v|m,RE|o )moda]H_JBks U ]g19Q )OvBzŃ%^y+ｿïǚh8X5G &QCiým_c1Ǽa;U+'i/#'N+fVhCEM/\itZQ6c0g羲:cBsE^(g8,P_ť`,2+zr?pݖ ޿Fk.]a2sPq xGZ) ;*UQ;RޜRSS14 ;=E9; M6 2[˒aF4޵v̡V'<*v / 3BOݦQ ,z`l˿k9N%U&PrTfy@h'{u8 MǦqVDRN0#s6 ^n77^i.)<5c\{Crz=J)5]Aq71? jmT^ΏG `xHP#KRp.S}3e9 k)@L}}J ;w1K?zU.p5a%wTE_MqxG^<|G.]:1ޡϛ2^Ef6 x>D*|Zץ|[ KP`^-1 ߵ3Vm;PpDobZb=mR|Hh2x7F>1@ϺAQ䳀.ཥbBt|e} sPDЊ G1 K,1 FqTu~0tG \M'%9`wmOgQ`A͐Fc->ՇeZbFPP|lϏ~|YHEJ͗uc/ѫ+ 9L 2lh} FzzՎ!  S1OyGSTL3J Mْ_M̑2bpumȅݯ'Q9u~,Ў؉8B?}nU;KqI&ni< "&4A[LF&mTx{GDeM0oLwc|('K1ysAC#= Y4m u+U_uS?;'V_EX!QӞ =ĉS,C@r= 6?izȽrFcZdhmtId O3`Vi9w汵`̆wtUȢ7OPIyR Ne)=Fp7ȮR\Z;vp?zIkT37# | Sm],XX|Aj*z\5jQ/ t:to`C3G7hL!ߐBoE꿥Dde*&#~-X+/*>058 o[?nP/=x4Clo7װi)3@ n.%;䃂(P" ]dXf"~Q@um<X,G}Ѕ_'E|}IHx*pK=`=':BnRL{~)mhc> s 8Yx(_uY|@ApXŲ $tDIUM M$V\;O׷|Zt]EiҗY.T+w,80yh6C靖Uʏ 8%InMg)af%O&j%%O#Zs 5Љhܮ͌W~s}ՠTEI #k^PiEdų6ƏE7sPH>a혻I&9$]`r1 @Dߥ$ĸB4PW@lݿkI N=<# :i4ILD #4joPQ(Gs`+X}7uŐB|^ ^8-o"L^lPx WS4"'MPr$v_s]وHGvձ-Ib+Hǿ^tSMU]@|աDt`U/ iV5e?lـsM2L|L|B,2Rq?Qw'ű86FL˯+O^╉[zǨ޺y0#|gؤc&vE%:Q {|hg):qƒ6e8"I+p%y *țg(~LNEʉm NsY 6GhD+3x}% AVwQr=3ء=8r ;kZlA@rޡ+(oFVZpff7@EUש<'4F3'4[<`<>8P34qj ?nLq9F7+޵Q_]ԟmxw|w`Ӎ7Z~`rzëCWds=50.,SmX[{'-QC7ViG?*HAv:UuO[˧Gr,}|N] Cm; `9@OӀ ^?IVtұ٣Js+1MJ\w#4no=.:o$aB_p & VQE .@4j6,㋯poFJ8|]p3&?S "_c2K+N# }69q~ӣ:9t,VMڜ769`Cs*E$ 0P"CԚLD[it*~q$hZ` :*4E8+FOY5s&8C6QT uψm+wP@-h@OaxKxDU^ 8o^|>7A;N V~Qޘ]/#|Α[>+R^qÃɓͻlRjx{9Jjk`n\ |}3FJa/ $ofJ9bzr4dr|>~@a{^(q,'C91%CB݄ٞ<^oAeI/KCQj ?{dL%Zۢ;3A 3 AcM[ANh3`rImkxgٵ:b'Iؾbzj6r'fYgWn_|\C hE$Ź|GKf"Yq mhhdL0u5?C?w?T+H\rgp\m;zдTx Ԋ-ȸ~x*H]Ct1~ ))<~;7O 8]2zP̨U@8oWi'b?xE^w-qۢYl7vr]C'PQ$O zZ s@02nETrŔg4_n;2n.-RhcVhϦ_=Ц9_!Enñ(LX!uur9Y_렂KQ~M e(QCS-oMk KD ^cVrKbrT-@_uꞒpBCg;u <ڠS9*.Z6͛;_`L&lo2S'Oiyڤ:|nQ\/(`*Sp«ӦZ@Fjybm6eTĚgIZjۮ/M4rW tZ:m­ ʫ2a:AQL*26j#"X< #)6;vApBHkGm?4EoEp#'Np :~ :ݳŋ !)c|K #_|%=jٙA(6~ ^ KSrH`y&ҚX7A"UxLKY9O!nU0=E,Ifk~-k06V_{Hg5,BR- hOFPG1I[':9a9ٮh;q-g{G9˻չ`$99g6΅ʹ,vTuo nݵD-\MbRxnտ]Xo:׊+DSf+_A N4'Tfɘ(ØttXyҬuaB$ّQOb0qWzެ"N6T8!>2()}"󑜽[/Kn0p`&Eg_qD-6U-.0{t_];2n囔A^95js4K)uҜY|砓^ozTEү ،>xزV$f߱ϒBA!u6ƓFTKq]7S}X i Hٚ*84uKwsE쓜PHgj~# J][:?\t)uC* Ƴ|6!GK9{"HP欖@<&aG&K'D TXO|ĩtz#ͼ.CjlLv6>tcjIqBb09gbi6t~aerܯ\R}Je_zBaD(U=WN%ɣb1/-Rwq-E>dڃViJ1!bQX *uRx l#'t⟆ȍf.fxp<^8}<6czmOl~4/vH7K/T[4ϰT8I\gX~0lj}a~ MEDbʞZR Ydln~=ZPa\A=G2j8BY atbSH&<8Pf5oO|h&|Sv}|7HNV5]v덨Np4?AVȠ59W.Ň/R)ASy ϲ$GpU9 /cE9/Ձ݈f/ YpwGd76;n8af?S? xWkdvSLDzUK 0ANUI(AWD;6? ΏڊaBRU"LmQ?k/ߌqB D}ŷ N)b( L N\  б}MBTt߿Oj*<`ąuE%yEEqbzm]_N"8!sWL@4M_ l.y@jouDV\ nĿ`k(0+Mj7tiAN>qx82U`-qBJTc^_< C6 KVs[6qo3ҎǺ ¥<' UhR]@76Oae,Pp{嚚M)l/Og8|Ӊɨ: `I+|Qm联e`d#E:_ J__ SKD= 7c/ a`NMS1Mt>vXhFjzA.׿w?Mdt1Ycx yij+eLgۄbcA7C)y !!6ކ*DJ9f|}72hF MYtfa<72rw젇vl&MKddh^: 172QΪX^w8"}SU_NRqo+ߨy ?KHtj^N3_]ؙf4'P5c/4(W1Ur-v^!T3IO7Z|CV UO4%˕q M9B&F\!UFAh^X~]i" ɶM7" l@Eksyxߔwo.$VIQ3ƘP7۬rM09Bpwu?JJ0(Kf1'a8}JHo4%-xiGQ`%D~pDʉiwgV,U64A4.Bһór玥N2bYز ҕ7FEq"1.R̃"wxk Y=e(9.}XҨ״C7(:Z@%8鹷nGjR8b k/k-DFG\sXXf0:4)XCa ŖaїuËiRqB\F88%ڲڱք4g,ed`RMř|5¯J _ Bn2 4ݳ#kyAj?4!!~ư{f\PA20(pEN,Ȋ׍-'|Yv\ow'5$ ;hOw7] D@Tf{'ePk xpg:vni?*P zx Zd7r5x'^D4-vYiA%1X _};4{k*] ^f&=ב4xlr_m!N!xE Ш;VKw|E̢ч5jM!k)KO5GZ6Ҁ?B((_GuɆiA22N&kHz5fDb+f<̛^f{ᓽj.kmVB6U~Aw4*:<=c#O֙( 0>O+2s)28?)B9jcԻo1l#$aXM*"DniW(ӻV2 Z 1aH lZ)PfÂQwii 4R|GOf{(>uE ېw&GK7vP.5uSH QQ7i5Uߴ6 ufH&Y?V_\޳1g´$cI+܈ջSSSy6l] {>k6Jl@m2Cg#r =/ WFM%.BW'622Z'i]dWOf.FI*ѿ)23!~<ъiS'aq(&62An+$_$m53R0>0-QgMP9*1==ַn8dtL$4g52Px EB`lE:ٻ!bo_Irs= m(uno)-Xu + S'OZ.ƈ.UcTcqiX,;<){ j初J˧.vX n}3Pʁl4uu镚B`X p@Bpi}qQ`0#`~@! Bb9i(lkMͩK<f2 ܰWk"4uVℚ%Iˉt"^U 1@MGM˒ yqSr˰$Ij>,Z>DV؋_'f ؞Ńvi0;m`2rvdN3Ő{ V|0W0[~3 b5n˜zk !r\1h =F /oGE 쥷zˊq )nj\Z)2OE;ܓ s._2IѮ.DadȩKxOK8X{Cy\ !Vp z +*|^AJ[}G"Tk jpU7~M =O!dBNʃY~NkNϗB~Y#o6xTQ"(( 337SCħν9OKL ϭB=™`>k/y2Uϕ 2xa <[ ,ቶgpitw⾽'MK V\}A*!7Ѝ0vֹ~̸9Qdd!)9gpQ a9?;UohƢe$& =QyC]wu:T)$_Gkg`miP<iqRzORHI7jj,V>[X~H\9mSHrLVE`E1Ѫ,[q\9YH0f28HR֋[%m}MdD84Hi4UXA#m$4BF}BŦپJHsaH [7g!LrF k_A`4@̾@ˏ/k_`T>iBX̐" /ڕҟ@~1r H@IIw;" H3v̈́kvu^6߻E~7Dr $$}?>\tzܗOyw @OI_\\MJV-`gټ9 03̢t2ux@h4 )fr45U>Lrv[T6gǰH(%:wv<{ 1ndAB[?bfPSpmd=ap\8TbKmsmHꍀs^H gu74-o /wZfrVktctoDžCy\Ck]ZtƸK|G1*:V7PI)""}RP-̓=C1/6īfb,)䯊jŒ@>>Pww,3EypIrͥ.|hOj@ f4H!\ef,SzŤqoPwnw9 ;GC$*b+u :Bh"=@@ E9(qn2d82( /"\CAŊbhAW 3[x7 *彞ɼ/fݪxT.ouhAZ#ܠ3 H!Q~=8Ą@,ʝ?H|S)ε)KzsM%]K5 IqU( 5vgybCȌ jnk)b7#s\CW?Nx2ƨx2?f// nVW(VOJ@>dCA>>1vE#Qn^}dG:[J:Lb"Z_adR#N8]<iYܹgN)Ir_Җ\vayɠ٦*kx'_r& zݸjRS 'vd&9C2|Anm8sg|p GX=,IXc~tQďR2Q wvE%`ьz z|/}Ȋdj*ZU],@׼p(*< x3)=yd8Cbq IWǥF@b"p 0c0X?;1b$q$)0ܠȉirҙ񱄤8A^ W!y%2< Ǜ}c-i TVhHQa t> &IX)Æ a0`a]$& %d6d&Y3le t6 uԛ066MDLSg4Wdɢ6CW dݻ;kbh\_` sy8&}{bRu˖V99P$_Oׄ=c=,<ĀC %@._F[YחJH7vͮY8p&Y) Ye ̍b5ȍJ?7?>$>z&0. >C6+F+{ ۵\qWOd.a&j»k^|n|}2.RB`Aa \Ï0`H^Ya})ƅ~k>Y>J{Qve0hg;y7L#,B0!=&LfZGpc1`}ZSBFsB $jgpr!()&a u%aL\)md:D[ Muʹfwu"N:=+AV2jo l'_ke.p۱TڭUJ`+[xw{!Ϲ a—Q,H3=XR->3=Ku ,wքr2ZBua> G$Ό#9oK;l](+p XC^,~0w2:~c:.DЖrT-Vd>R׵MF^t09n5 R`T C3\,>*gmO q$AVi&gU?~Ux?I_?c>5Nb8<hM ^肵}L{ 8 d5p.1 )RzDQ@\` @:x. ߊ~~{SOyם<7{/~moK̘3#d,<} `!qڄ(G-x *:/g#YU~c/_/WN}ro7CP!vx;~r ܀mr#?[ F6yfOMYlm2-v;6Ұ@@Gw QCL9lr)uK(f;iB(ۗGFt}[^.0x***g!7 y ;I B{KIQ2&h*&+ßSQ(BBFDBHDк~Lq tEPBtS o_eeCxEK]BG=ur(Hit'z/1(褄4a?m}EaMR(`oP8 ?S~I` R$ Y? ~_,u {Ȏ"&1͙8>3U˥;?:iC5ĠنMM)G)skUT0q5x 9iWKb@ 3m(uG 4,$;0JNZfEK V],N"k.qxPm<6eYԢгR4}]Q~p>}t<^R_4d]o{"tdg&PhyIwlmݬVue` LGd~QK??sBݘl U49 a/?`"%ǻU,<4"m$'B*#@,#n(QAĞA0"CDs6 T}ҿ~}_^$} '7|q(e#] P0=Dȟ;CW J#8r@w{6_jO؍߸blR@`WP2 ?(_7XȏꏠG^n6t&#}a;#NWPBjiq@E_O :K~ucnZV(9_˼\D4Wo$"9e7E∜|GAz H")AU*1؈|UQ+" !`h`H@ԟw_$b ?LkbݡLZb9DJ~Mib*;듯e 6/ގ lq[X_/%(פ׎EL:^PcЫp<0XD&/ݗVY~}wsJ87k&aV1eҕA~CJ"Ooit9woX[) x>W'RBXtoPD" ,XklQݘu=*n;bKᇌg;1'@-4S_#D{2w{ޭ(Y!aKR"| Yg$M;kH15c g3IqM9:Ռ 뽃]e\Ufl͔o"w cS@_Y:<wu+$k(Rg{@l-%C-Ii?ͤUV]Y ;\aw{#@<\yמ@kR҃d?;juYqĽ Z ##B??i-h aJj )Jq=J%Xk ~\'L#  Ͳ(%}n`x=чn@ɓ%uK.VYW* )NNFli략!Ă-}VTW!T>y.gUiO3M1itO\ yAQ9 HJovnsmd[2e QDbI\=2Y5J&ܲP`!#0!8 YNf\z|/mw)};])Cj~x4aGY/&kD;{R%B'qE왿{S[mu p syp|}W{D14Cm } ɀz=l*aB@;hQM D3!j eϲE>3<9W]jD9ny,g, OZ'hXu.BQ qpQDD*&V Oܾq^b>ePaEFu,TuSNq~l͌.sW'wz 5"bLjOhGEDj$& y7lU?}?@" @A|^\0(^8mlTC*T!XHD=ՄCO[G'&IޖU)\Ձ_sc㈹:z 'T+4beu=$Ʈ_˵C {e6L2A wh&rR Cʀ_%ҐaD&Z^}P~P U $vSkAJ1aݷHC]8@IĎff QTK݀*ُ*"ޖ EW(Td(dE=~d PY~z@(yR!$28(Ԣo"uU~~+yr4aLM`)D'7S~%(m@ bI&DW]J:]u*=oglmcnݨfW 2w4Ri,"2B6B%<Z&!HG JgJ}W)a& 68^(Q FiJABp1HS IFWfGUl#9a|In$ )@[ 7GxR? 4Ak##D4Wsa7>A͸\knCDLxh ʁp @Ac (؂4(&4~ *dBVkT+~z&F V X 6ڕDT //od!"ן=?]QVn#-W#ɱ"h̀Ubq~k.7_^ p@AD-dWBP $$ߏÇпBO:~BPC0U9~Ѳҏ[A^{[oW~ͮ``WGmj<2azǛs" `vHXjf[u" F*+$2LhBV{BIrFɍ@qqJ|ԟEA[zXɍS@|~Ċ aXmD"  @ xcUJ*_Q#edӓ9o?r$ӉC0.l㒯ƫqk96Ȉ" nmU6r "O[أ+z [z^g6bÂ`+. ]Ky/vSp h){LY~DHYH!IPJZz`zir>ši$V^ 2w138Ox)! Qep޺۽MwIȹϽJ6nrc L\WeLpޥH8;kmCX%gS_bE;e8Q34znѬPK1Ew3bA$R@dVDY ,d,U $D  , $H)",b(HP F( I,7TH,Y"0,I%@PF)"EYE,@BXI$Y"Eb@ (dP B, R@Y &UIAI HೲɈbTV@RH)$<,{zug:CPMYQcA.y\(-D! FEr?lꮟr$"T )Rj\uT'nY]yE G9Śp+~|H<Y.ɇc*MH+j5Rv/|2Yqoi.m]L^ s,^ԐRٯsw*z(L*ŃK V~,0VEI_(!Aӌ~7K_og рB YʕbZBe:9x10jcXO)Q@ZԽ Di;*h%8gznWooOH"q"^r8 ԶAUL @'H@vRcB*˸ΜȮL/@Ȱ똬7>*N m"=tѨBdRyvUDq/'xwk049sd,øB?OLBYJ ȑѮY w ,v SIh@#];PD/C{лD{ >L Nr2b"ಓhɅ9^Gf>-3nLi`,'RpH#Nɬ8EA1(}GZ  >$ ,I`1l1 E;PM_8wA$qkW:ND"m2s f^&$;wzat}WOnup6|x7PQ'xPH{[d9x33?A)'L"N/x ^QaVR9NMo-݆Jt %W桙H[n2XhzNq×M1#XO*<1{;ZwGGܥ6_`?l0}u|(E۞z Ԥg MRx$f& :33KaAQoA-GhP,e Lߞm_pۅ@I]Ac 'po6\4Gs}).D RI pZZqN =]/Ѿg'.)tWF1jZ`i601k3qr^A6OQn-=%mfqJ3P. 3J]QD| ]W݉^_xvfnQjmNDˢ#`ݏ.?acEPH䬇HX|l@Ki(RGغB28 r-!@1Ϯ,f~ߜX4YIH;6ߎ`d<8z GAH-A#?Qw=cUjzytxڃUWLGHzw.HR_ؽ$)6&O#=R^젘XF!kb4Lh+/+VdcAVg0:>q捏@Ⱦ89P[`څ? w3z, \a͍ J̩ݯ/t0׬$3(aeӨ\6$^f+,(H@Hc?dd.meEoeӭ>$*<|  =Ad%ICi {׋6E0"*RSC%X":i8@ye`_g=_'uS4 " P' vNV6,%!)wʑ-ˑC>"C]yk;m"Aq-"e֥Cf Ƭe HI`i_$Q3 (,t"j<+QtаP8[ c=2 dy"|Onݤ uUYP65ьeHqL]G߄!mtU/{%{IBh1XS$U%H}"rB E~wPp!=R3)Ɗ'.xq6NV X"S6 `}uDB[ڏG8(?HOVV٪5;B1rd4GREe'b:ű"_NO/:}R-tZgaZ9$XL5ɳXafS6-4+5owrAAR#HH !-?%cEh{?$e^,KC5Z 1o]j<2ާ:=*uq{2LJ4h`(IcБ)V$#!IkT B(lhTei ^|9uc .a3X΁1*r!L5qwPUZmU!J7А`41H&C4&ڮw&7 FdN|*8]9W`2[pZ!WK׻D;gl-k DsJ9k$Ck.:,Ē-}(sϳ!4%%b@ @`Bnɕ8#J(HTta&6O"DԄM  2ſw'<vYw)2L톞x YdoC@pZ${ )jq\z?cD D"AM:r{mX|]mcAR Eڤ޸Ӏ w|y>[ y&Av-S'9VB;e#>LPҨ/˗5h85NlAh2U@WPFMCsJ;-򡬠Xji|UenWƤ~N<]#f6N.õRnjJ :gsI斌;̷CɔǓKZ(=OsK9!W,H:[ <음T ˒_' t1Zr)V K'q8ac<` \X'lŴ!@$ٯ}>=*[0RMڹE{R|PF1U:ALZb-# wD7~y x5܋7S8{';w]"k<;؍$T8U$5YnVX@f"}@Pd h] &V#j%V 12w, ɋcA" - _b\)_!lȴ^ǹuK^<]:|+L2n7\4GYerUxݤ\_\3C>q6/SF-޽j:eK]5&)#˟sG!:'1Y4c ĸ`m h<%\m\?]!8 8b#ßx"㖮 aV9arBfLϾAꆈe+85}.;|Jt;/#twu'CHZAf@qD렁}(?n@!ODg@M UWTޠ&gC~dLg#$Waϱ,seSs@UyGѱ7ޕ"1至*ߢhV#k֡nW ZշJgD%rOQ=!jl !uUM(D\F( ǯMkH7͗:$jlM%VY;jʾyUx a nBRʻ뵼qPƕLJL-dOط:4)]?=DX")Vޤ/%3"~#%I2mPWsַϗsU#* F핶X┆X&& -0@8 ܹ :˽tJo\f1iҖPp;Y%6@bvnXZV2+t20s;m)a{Z>sҘw006!Xղg.F[i>2n{$˔U>$RLes*1EsHXRD"_W}G;+Uĭ -1mpUTR JxjcÃ$(->EidsTɅx"jc=fXu vG.d{bBPHzODؐӰ" PэhH bX(/vۋg[&8#A}<77aBȇAۈU1?_ k!9 5oT0;{m., M\:G(Ȃ%=zs};1̴mN&Qmw0 U[ˌ&a!k.;#/q-EvɌ {bqa9ןlBq[:\V:tˍwLSɕ|)֫꺱2"".>nc1`eZvbq:@wкpSp(-fyv5ա FfS{CR P̦Lu@ ކA{< \x®܏JDvBHO]{#Qw>hER 'rfҝ+[{x|e<avo_* OrFeUR89I mg[$Ń0kRg`3⊶=d}=*x=LQv y& "Ol|oeҩz"] ڣ;[O5}U*y3>#.C0A<-:B\l*e*ʴK/rKj Gƙ7ۏ `X*X%FBC6+Q XȈՋM3]eH~r@qFfZݎؽBgSy:`]sQbW`B g5#ܗaXq{o6fZ[75"vM%%K׆>ȽlTLLTٷ}:%c᧜"Ym*G} PJi@z`zg=^[BlO*eRxf޹]ukβ'&0g? ̊¡wZ-YjL gOecdcOH)ɐ][7H K`5{C0=ϟ٧Ը{::7@4xT*؂VJX{ks5Չ ύC#ߴhz>0_ڢ;dWs39M1Ij{~9{ rI&_˩pnZ ˂(;Ws#~q,$$q\1Q#K >3Y)Isdw1k #yţ1&W"O^x2y[{yKU"Gh}4wo/;5Siƒ.qX]#J9U{k7'J_?QhJigQ[aNW`_pE< &?[ (Y9>fQ.΋_o)"uK?@r" N( f@P(5E`M~KZpxOo}<$Rp/+~Cl`oNE9)ň^i?(<8yxv^+E - " *U @ D,21=cU@O​(DM}LG^5vU*M;I֜-ljok=V=RYD6?S4rzD6hTb"_{nABQ\*+ݰ x%B Kz;-t'9~a©1sr^ bE&mTE

 p=7m}:?w /ƀQ P<7p$Ȗ̋BY5P-=0)Ht4# A-x> ǧQ[{qwt`mwQrsgY#~zT$$}9*%m,WtGrk%3S߀eR dD LNh{>Ƿq=zg?X_g^~M0!$$ 63teMI=aî7p&ϹņU2x$[ˈ-Z-{APq},/%cAEsж =:L7Mb`g*"NlQkr8?)2C|ٖPϥ̰Kxzzʥ߁<*Agz! &L2 f"u6)B2X{Q.×ɻߕÉ8{%xvA#RCP>@0zI ؉Eo3_XlD@}Ｗ{H, bjWn< ;mM5?Ͼg`{-s:~pAFvl[: h@B0@8.ס^bBݍ^Ϲ2UP^ \ň%̕R~mݝS߿&MYh9*)+#=Zd2e渿gF7d4Hswhx0], VXcYx^؇ ѳuj9%%RD0"nʿ?}/˪?ϖlh;6~@k:[. m&ƶ;^kķ=%ݱPE-YO :rt^Ad"+E,^ǩXz!P"T<5$|o˛sy3>yeJ&d-DDsB'KH.Q-'v?_I` ZV7A\nlR륱~\~ZqH%~A;ӣd0 f l{%yԇ[x''6wW2lLVOAJ u"CC'm't_hs:ٲ5˸>Vqw+bID[]vPBBtp΀>"""'S4Y;`Jg-ʢP$@m(*B!EPlAU0'AEE.9cQ Gln]Z h3 Quxn#abD`FFgqvDanBի+b"C5AbRr>/5Ci•ub=MOGG8~^IJAF9BIZ`Y F()I)04`V,HE"PH,$XUAUAH"EDPX1TYHU/+bdRE" [F*/TIYF*VBR0՘bER,`> (,PϮ\9x,>BkzmrY"H !DXTAd @X,R$Qd++"kTAdXO@ )#dPbV,QEQ*ջS:C'qgD X3j]\r$0b{H*fp3ab:sid8M#$-Dzp 7`7J4F Dg?b|̍\!dܖ-e <$pېwtz1>jB^h4!iыP260,S,XvK1632hs},9‰,XEUB,XE?jMKSo?Oo'b PX0Uqn$~(=ԓ?n<=,;o$42IfAp=x%3wrl^%ڧZ>_kKk9yW;L?ԖYA(-Z߯lY [YmQhXo~Ǩ2Uƽ2KN}۝{kku9B_7Beٮ0WH٣ bdLr\,ܰqw05ܺj<ж:>(ܓUtʋu^Io%YO`[>+]9rӊ+#ĪQО!\H|Z`4j%iDŽq%٤O|V0.L'Jh7{2)>k(j~pE*StQm,~bSYo"Yf9Ȣ:R58Il-Dcςq;uraeMU3Mա/vQ C E:O$iHil"!ØZRzݶu)|t7]zE]B\%|ڲ.,SFDžKPR#;Ơ䤹M0ړ}KZvؤ2tHe5{6{H-N;G,x\X Ӣvv[M׼v :ρSOyb ;HazZ/aҺ3uɿ_V2l`rt9>cФ5VԞUk9iw:C !| ϋ&:҄gSLdJC^yM-TqqO.)in1HuѴ'8?ݚJ,~lj8Y牒keĪ}Z(EDONx'0g-*JOhSZl?n݇>N9e855חo/|Roq2hvF|8BUК@w:D z)R<-]Pfq&~ۖz 2 wǜ/9J {V|jbү~5;W_5p,X̍4"~n%C;-p5ӻ ܰ@Qs@@-9 ED3PQB~@I爄/飠Q qu{u1*y5tT=P0Kl9 $ hOZ\ /UV{s~]$L(c"1,>c--60jk9^;W|_ÉKVKe I6w.s+(k{m|s"\?BDK| y?HhdCb"gwQH {Jy/?QK oy5YU"ڰZw` ۧcy5OO++$;a. =TULjQxɍ*H'*\v`p0!f qYR|{UקYiO>.>FXfެ_[gd>@4^W./^2{jjGKO*BDy;'»:`7l(gOZW+T nsU}iz`'N2!vG\۷&Cp1߂! GxhGn.F0Kɩ2$BͰZXNO&]GRy=l:No<2fp-  G `y$Ph@%yoѡ)HJ.gn9 rh<iouri3Gx}'Rmt!Vh6/ĺon|J_;x/oE"73 E:=[ـCl]W젠YDXPЅiB-4r:JUZn=ٗEdwOT>#\Xn_ݣN,uXA>@OwFBΑy0u"ɓ f #frMBI%<@{cv);AP/|CGC펁ȇO=hs𸆹0F:Bٯd ӥ#3#!qggy} cd$wǕs(!̆N n 9 >J.W$r`0D /h@ t ؑV"H*C@@Ƞ}aM؈fhː6\ ߟE?O5K75YM̈f*RȨ7.:=>>2 DCs".e{a^'TĞ|; ~&rhT `HtWWU> lTݲh/.2mbF*l*`M=KCA@<_So7dw̦^,B;8tt.~ JU2iB29[5|qa${hi?3| $BeC u$qԧ7UZG:}W| d[,&WqXˀE` @=$%HUp )HȓLx[VDخ\+uޑGE<#*9hEE終uO&S| Ioh} Oz1ղG<+(C~A)ؤU(BT ;*:ͦc&݇uZe3MZuV !U"c.e+K HYIîg;8ET2!Y|Kei'f/e0{X\0u݉VP]Aji(ZIw2Ni *Zͽ^~?Cn X;ӏ&[pSYSaݢ]CPb{39\?K$/ 0jXe P;y#=8@ -AO_ӿEIZHȇӏ. GG;u3􄮝>\% xzo޳P~Wy}1:t]ʬ{=L٫= M|OJF}y;g-! ZD ɄPdB ]j(++%Gn$Ge9vݪ;ӶJ $v M!w+(L5FzuիOy13tKE-^(_'>4)@2Q@?8o :mql-IJ32K_ +VO22>q\%z>W{a1l>VZ:LŬ` ` d-HVIұټYKu=7_x-c.OKDx5iJTȈ?{A>$P~٘Af {=og?XnL'  2?han;tTD7R uLjzPw!z(xoo@?H߰ms(qVb a t5m gbG't}Xv F۰px@u@js@U&`Cv]!mK*|1h;[7C"{ xw!B&DS?)ɢl=w:"ygygQxYYiHtPBHsozJxc2\. @xs,dmTSa=/fDg=^A5ڪ\&C+Qm~Ji;N׾; C/7Bmg]EPrTځ=@d f TT"ۃwzǾkG_C tշϿRje_=ZA`tZ_c"I"N=,zlW\?@&˚n?!3~v'n/OQjW|rb/nA_=[4 j Y$Qd=:Yǔ~?EO%,-WXo@9(t4GM:&,I?Lhe鸍7G}W093^"߈7J;l]-aBB]DD Ƣޟg\?ȹ2}hQE;_]buWԿLO 7gnu=g8{)<,| $j0"nKDLYC1R YQO}+n? Q<[EsC6#S&//}D>~/e}nou"w(Um8if7qZguw21qi:dx ~$9œ vh/jrvh,XgglV0Ic3;Db,iEVK"Demݘ.)Lq&pQI6ɥes 'y3R_kTP1Ia[i9\w9n5p.:v:yDY˝n 5 eҲPs;ޣ ,lIR5.r)Yeu*Uhv.0*(!"d]k: D˳D品ݩ!YA6"Gs4i4Ƙy  /{QO+|V xDW@./ Ko̚I@e0b&? P>tENU yHȈ4i9ěBJd>']Ɔt8֥>JzK+₯5<[!#EM-ivWa)svnKu `&Nq8 M'˙kO( p$> ^]P/XHC7lzI>'4aEHe0íta$uX3 ֤V($ܟe, lkH60q72%!4B,W%-WTz~Gv4q&@ Gߏ v z?2'Pcvy`mw}qcb- BӁT@f l2%He_Ykٔ@;h+w qLp0{*yrd $dAa7Ύ<9ԣߏAa*>]߽u g4ߒ?D$Q{ E{hd޷7 !ې.lD:"ͧѷ7 X{?7  *Q ؏fE6 *M>IyBCsp|am57t_C|tj#tvwd36̋|`'M>=`I 5JPᜯWߣMM+h_頟&I$N鿙BstR㣣HIɌExv/(,4C9I! }F7/A#բxƳ? (_bH墡o~ ⪘#fQBk5kZx8Je,Y'3!|| l fcVE<mZD!ϑm5,+vQ=j̇VIgE0Ƅ6=a[׾rWwQa#-շ-21UC<'|Y×*XUVݘA(*X6F)PV,+%9p"Ed-~JzJTfwJ+)w*]4%U=w熚*m5Z\4W^9qz$G ҋ'0fk3PzAsmJ<Z=%xEx1RMϚB!z L4!d) 9|aB+ٱeĮ-Y ʻ`Ń%@c5\t}&ƙ;xk|Bl!YaV6ݴŨ$<6$UA`qd`GDܧX$I$\#d]e]]ن~Q, XDaz؍\ٲ8Ҫ'ᗜV\W3T+=j?G!$wJt~!q*۟Kϴ0p帔n0"Lp77HԑeG+~v/`;c5ϟ>ps˩ ) m8VѣQp)(6XMyhR.ܴ-&4G4/Pb`/V7} I7?;pX_*e%^Jʦq.UȀ"^h-Pc/.=Z}=M8}):.Q ƖkFtp zt~0`b6o Ū彜LmhЉX8ZOM7ecHz+]SG?V8ohX^]C+dta?Sv=j0w%en,Z6$j#SY",t9uW#Š!gih9jw@hS9q CϭL^\Z=HYkzp;b1F4s;_/jlǍé}.t.&,X>m WTo*Δ`p-:͏oqY̳6K2(5ʣ{vVEOq!ZGi87b@u:}r63O%_+ln6ct,ZZ=r0u3gx辏֩Yu̹NtھN{[ 6ش=L })R7 ќP)NncWeY.}Zu,}_}SӲ-"#>t>`F .uQ<ևRٷ( ]cd#~mD%PpjN˖`8tը:LH0fO^ KP6XM7@60c| %t7iwwڊ[ѻzaqcZvYxа/uu<QއjnPChtֹxu; /}Ať:?ҟ?;Rh8S1wnlC[U1Uat{yW\<=ū!@<5,&/Z3ZF8V5-< }=k 򣛨8w,kT% N qy4j8!gOk#7l{7|FkU֫پhz|M8 ?)wj(AVzvH*Y<~n㍯c: wx;b"XK"Fԁ>KEt|\m0wQ, - Wp 2}f"yܩT)vC{&-ټڤҋܲe3Vt]fOҿDIKQbOŻj\6rTc|l؉h&Щ6\:ېB&n+[ [#wVƌo˪+nH1N?d֬ +|=m; ƉVԪ2{B=%*/]ԬBc-nL\:'(1y=F nQ u6Wt^ a *i-nڊ.k)@fsn.pvj2C36ewc[gcE|~Lզ=OޖQЇ%??F] =Y5|Z5noj~V0*t/-N`mh:_;92nNLK[{xWMB"㫜uZ>.]W#u_DXԻ<>]Oac"Ƹs6QpN⧻!N{CfHV< #f6fC?Qj$pKêkI=nNSQO?%x{X,z/V)~30G-,Ẕ̌g. "!*_xA-#Qq!8 =ۖkGӷLBd59gړ;n|~~!v0'14"cy|]CdH".RSw҃W8C#b!W?)TpD\Ey`j6̀=Ề!(aP̓V M)j& %f Je,կ XstbfBsMج$;y'?&"X9BC薓=>^uB_h@o5m* @!lQ⬞P5l((P!jx.?uG4IJ4 *ÆwoMud=3"/,-Tc^^nSL bF鬼x9{bԜx8Ǎ㨨CEWମ fI|rFO'H g<&UCÀ" '&"DxThkw&Ѳ.n+w#F 5S`l?V/*T"s!(Tiu9O^{Gꇙt1]FEFsZXd-hq1(Yy-]ӱ̯b)WDDy9G"IB<~?y[;}8JxvCz}e._q5% {>y ,Jt| "Y$2WKwC]f)BȕlG,BA9?xG@($=D7iJzW35!C3`h*XKIArnЄVk6>Gy~r)9>_($PTB\6lQ[;=]?z3g1H!x#` #ߦ.qhirmĽ# ,o67i1m_['(X/B!Ph<7Kt)O?չbǯ3 dqtt?{hLi`hq?;;$II 6t0)J7x7{]>vg'k1<<:ŋ-Wn2ݽu^J1v)eV pF} U_XqxM.9}g}v#&eu5ց\|I ͼAFj$3OR*êTP[)K33z !k28&ީ . ?s Z("[>֍Xzpޗ3i{Xl4d֎(eQ${ nQ:z`#3O}y.vObr*CqR=7藺:Q+wpةs%ߑS[ ֛lH?Ʈ0א0??뫞O=6M9SBmɷ#XDE$R@@.}M3N_; 4"kS^H r|ϰU~&XgֺuĴ?bᲚEy1NDZ[4H~q?~L7[ 56ڿEk:2=)r*R{k?6XvVi ͦفo_lKNG<~吥O0m"d . g &_;%RojSɟ*TGDoͯgFo 2OylkbBh814.[:Nk.zmGYcanw:+&_=YۥƚUǚqCB3hػ\\W"^^sǜ&ndi>(4թik,ESs: tRֿm.3n^BU~.Wy;wAb$N+yiv1+iwK_jVk@ǧmg܏zlFKEJ"B bNYB{Gq<*vG=zG>v]1':dcGg\ي oOP7H&tz‚'.;ł3jC+)Omh$"W"jwcɄ0bq? 28J9HXC fkt!@cn6Z5O])ә^/˫fivwc&w]CvQ߭~Brf δ( ̏^f`3` =PОɶxT`ek<;Uu/,Dܬ}J!u=mذ -u#bV.nUJ?Aڱ}`A}-Ԁ}{Sڿ] ÿy[?k .~:_IԮs}PgloAeNaCO^<:hj3 t(74pRj $*ӌvsaEs׼׺&FU2F!e0ҒBê0o~/Kyv1uRS eIPjF4jZǞ[XΪVEuJrbJdcuIӦ2BWCg{)|p4Qb%4RiZÕÓ7-#VT |R\mfk?f#ns-0;9UWlx|iVcDxףi0ߵD>ۉ3od $N^!DS'D'7KIsr;T|_{t1D|(WMEu]eu^58Po>WwS5H Jph!X:IUQHFz;n3mso:׳Zip >'=Fc M'0oSWR1RQ/r (_vS\PWIIK,Sks$X#~>f;n|n|.MKBDSF:0΃rE5fzm ܇5Enu:yUNىO">FM/䆨ȁG[ީJP(X!VC0'ݥ>fTE-; C|oO*jA$ɿNmB$~z_$h!1a%8my;i犂ݗW/ݷ20KX}|,9o9&:1M(m@zl-0C&$R_7:K\;TvOQק!H4J<sB3@F_xr\kcpZ?.~9u56rǻUuhƸ2 <~Uͭ ۰t&-Ks&+{?f-4RztsG5ƍ~jM///}'!b:O,K2v݇u~~wwhT}zÓ⸎FF40ddcNrݥa{im+?ns%ObvKpi6䅗v r_Cì7K^>"E<{2_Ϣtgns5\'0k瘳R41 P  =ycv㴠>\$A潴<;#ghljV]|zww KTAv>%>;Ɵ2)[w_[}RB8~4)Q"J+QP+※-"qLtv„&8PZcTZثG2 [~{qnX:#D_ Z!ffR)g{{Yַa7 3Xkt0$œ>G!ig4.dckky t5Hk%QF+}2NoQU/N{>t"@k%>z?'jtW~"wռhSMNcQVڷ,x`^2@0Ud,ᅪ?hi °jߥ[teC@%DOTT@D@ٞ^7ù=hv_廑73?)?(NLbUC!&9Hs?#PJ!~#/oB1-f@2*$FU@75vG(jo.641M1|O :]8#L4Ɠ ZlbnTYɼI3R'si 4Ũ! >_l(%fY$~&^ZIlȡnN4@DP>VE-FE* 5{o=vw,E`T+n8_po"BdV*K@ `v @-by(P}jyMRD1+Ʈ[ /)/iظ[:INdO߆%ՓSUmtCR?ge@rOp,:>N_^wv!$6h` XFLGid ,]<n*+>^wcهPtx]FGdhQd9✔T^J ֻuq4FZdP=>.gF 81g^` "}M1okvzwm+HвI ã l/ܢʯxº^wn]kJd]XgY өHYQs33`1h q W´WTDW <_u)ky*‰Z}elΟLQkF5\$vu_MNb5 t4;J Qyt08 J΍$ivWꠐ.ƪ\mk+_4ݹ"6]B47an잛7s:UXSa樈ZW;]x_$LD{"@OgXD$rQ/GI(1}"i 4YE%NF]{)g,@v\u4&n{F11sRk|myWC/]+/n>j+"bLaP%2hӚĠ*_= _wh75:y}ZR,hmpP h#Ca]j#|bͦoOQP@~,6WR_Ĵo{.5L re|h`Y"Ŧzg%Ur >Ae,Oo:fa0@^-W >˓o7yrU@ޤeC.x)o!d=Wɩk__|Uߠ$^9l6;wZ{Ƿ빗=Bp\@B _T~wUagxt hnNO(-swEy岳5' dNOD|ܛ5]>bL ՙ0S#@zI@VKc1,Yk9~9Z4%lME+vYp߫ds %|M!P_f^1]o$6KKջ.lG5*B̧4IupC@8[}}a[[> #uk"Ia$0n ;#@L ."l̺j8 { ~ CA@宲{ڶXr1ŽQb[QJ+y_ECm}m=@-SBi{Λie2?,5Iڡو~rM;.C7rZS.]Xxu 8GSßUW%Q;+U;,XYev4)BcorZ"ف&E!lAZ 4Au!ĝwr!IHA1 *mӖM7Hq^(ợvH5"%q+IreeW}9{H|_Ŵ3 7p4-o5ƟbSx扸jkxhtFU7VgV>M{^2ZՕ3O87 y~[7{3ǙZi4R6-;gZL,);V~T, ZZUԾM|"KJ+ +.cV3Y\Uc!05Sl=;ʯ),ds,޳pf`WjftSs*]և5on*yt>zhqܦ-U?ߟ wh&ˬrTYпNyݰ,}S[Yo`eq/A7Bg9ƭSwEcզ>YJ)J6ow$lRb h Wg~Il$H;D-d Q/4XO/@5 I*<ÑJ%j|[_.SsfʘɛRXrܦUM4*("yq9`I ;̏jȩo5zںh ,eUG]nM&D D1[NPw"ZOm"r2xrURk(핇G! K.]ع.2D/JOɑbR0|?xf}վ!4haJ WUc~{?fE}Ci' eGI7J $d+6sZ$&cp,>j؄֊ԌU|ATzy恏LD6 6]0lP,AWW΍] k|kN}oFzI`uFJчWo3.n:Ynh/B vՍ:>I䝾pW/HgƸUDU:K(UzkG,űpQ%$t'yU;$YlfH;<^ƻOL'" R?sݶut.Wsga`Sruk]ټڏZO櫶!$;Nսb5ue=V&kҔS\P7w{hj3[kǮW>=jk|J`q'qT#/sq qWa/,k+PQJrǡdV~c3Ś yth?f9xMask,Y':˚#} 5Y'{J46׬׻Ҟ-m}Tr/D!w[>ņ7Mwc/3_?r]-NZ>w"slA0b&(g|翓<8U/ Ućw.:'KQҽ7P웵JċS+,5z>rb*nD/X`GUn҇ Mg|1ˮdޔmoo*pcUݚY~)? 6<<H p$.+? |\B |{)qnۼ 0I )g!0eM՜Wj6E̶Ŏ6.Mޜ0rKpg#ײVzdCZ/X]LfvMqYcҦN:wK,`8S_-iv&ݶ<'^ksgNo˲P:r;91W^d zw7^<*;IXx!@/Dc 0;'k-IjiX Rn܀w)a>w-}ȟ#/]jܙJ =|}` O4Ҭ̧pOb\f~k{/tF}87A,E\8 U&vGנq$M]{ nr*⊗\kt,f98?JWjoN~{e>䇉'yvU^~pjѿ0I;S:ݡTD~#X`2=$NHFkbاbr*\@@ 7m/in]+nݵv`Fd*i;SgTӭa[3uNyPs{+]L`7Ҡ $atJ@ePa>cO,wElx,i$n5`U"D!lWס;U 汾Kz_0ƣO\xYAт`섏^5Zj7w_ctPbfP%$ֹ_뻸/"(emL 1jww!#mq o-; !JUT#KPN!p7vW2 ;v:>'۵xI\ :Z//vYz1_Mӎ|׹?r6C+?M]7@?v?ZYj4jܻWȠqjxIguy=vx9Mv*i|St5Z+l?-y}-tVNo^}OS2P-$MC36(s;Ϧ:8Uٯe.y})D6&֖ t5o37/9DN7\ƕpnmUyOl]\RKxk5zKQ]e:xy5Q}p ]WAǕ\e܆C'LnN'] گ&:k<;O =w_?%V]XmxzE5uZ]v'魬?ϽuӼV־c7oTu+U @Iø6pz |~rk Uʗ56<'AbL9)P6a&Gq=a!=Ht `}cO=l Q%le_Jٵr`\{i̅>̧QjvěoX|5QL0)kDžL 󍖏`+ !DW3_T\ފV)7摝oKVQ,?OD|H-7**4X*}43@q~ Rۜ傏;jNDPFhYO?^K34tp0  >^e~$&8bO+e"/ڪvM>?'ifeb,R2>t O.}%5 I$ƓUV8LpC\AL? y%:s?:7M_=> CV3*嶘Zڪ~PNg)D*W8yAT7b#Fp#c B/rm-s0?|jڂ0rURĺdJqE~M ?5՛h5|rUKm|穬QY2l,nnZ@x.>C&z6o'`5_KjSk[dE4Go Xc&F-]MP)&~V.{$Vlp%=ug㻳q*vFvD>ƃ]>)mE>DwFcPOL}yxr7P`{ͦz]h v~Ӥ2fSћr` 9yo3+pΉ.K* W}٪jLvq!Wvck ""()c6taﻺMG`4w|i>@}xz:'5~Zd;?^*65jV <~iԡʸW^/m$:ywIU*f&_a*9^O(,=grH"6 2GO;6Di~}tp*4(($ $DD-2C?D~$ 81 bdΦN^- R2h^ǂJ=-lԚS~+Gf 1p Ti52DPk@I 師4ofBrAp Ed%Ҡ)$!;sVV9>hϧYQ@Xr:2v.vas"[Y%^Ȼ3E{ռPf œ:C3׏f?RF*="* .iPARR#** U$",IP`,U *(TDdY"*(ŀV/}%#33 VnY{q;nJa4d+ /_Wa-U~ů[AE=ˍKGb<člkޜ.lSoUKc< KqILݬ^P@#˺PQsR$Hf!aXq5R#ƯӘF;~:??hw;O$]_`e?d1}?!Vb*S3/\rA8 (!!Ⱦ~FЈ.i@Z>dцS:r˶wtZ47!|uLIl o;Y:mm;#s,zF+%2[Y{o]; ;'P^6h w2NԙyJpO| ~_Wt*F"-O]b#mm?bK=iجԤNCiX"'Բm9[%G>L(9 fid7nabQ)>{`Db (PPUY+1@c'>>.m [c_Z}Cpr䆸lK:4Vp}U;F9]h>Xyu Δ'HF^| B]MJ\fhVϫq]7%ҒA M/%;~!ߓu+&;rc<~$Yyx(…6#:fEV]nWag Ux?vQRAʺ)8aCJxّ Ԩq-.?;EMA=IsZ;LTfU;8ZsG]]^㸶{奻6$Ws 7sN .9ꖑa z{պkCVMKY~NўB'ؔ߻xeIW*Vx\ܦVjm{ Iu78hz ѭ4ԞLQahu5 dK⟎O٨D ofNW.sw2qr1NLL6?.dnP9iH%WAxQG,=4\J&uY0KJ;2ӆ d'SԾGG&@JΓ i$^+L,'xg.`t{?:17]TE4:DD6;-φ,ڤU [7"ˊ!닾ϋɕLKQ`P^ Ķt[wGmڥqctHܱaКƝzYFJ)گNWΊv"єC4,5IhhTWW!Ca8XRjCj:DR3vX^;ĭغt5S\.QRLO]Q&\۞\4*u%S`c_6A \@y ?Ru1nx:]E?OeMfO1vVg1* AJZYf/\ֻl[kӫ+siߴm>"5K)1OSqMŁMc9!DF7xz2^f5ORU C<퉹k*}Y`*Ej P"WGVl&'_nIJ &V'r!J3/s% Ljj"paʿI-Sӯ_<)1Q[Y^,WBQayZazJ V2~+k D_uyRJ/J$Sqi:ZϒQߛ*Ԛ,& 3~= W7OBD}(3v?܇U LrYZ*J!ݑ:n |jқYo>똹2LLCh9g;>O0 a94% <3-0>R1. ]i=x1H[@G.MƘxۼJY!Q{z@m?-O M2>v.s`qJ=”,Fr"d)ZL,"4c ߇x󞛥2h5m͛y}O[9]TOI$a$ж=zq܋=xt -J_!e)ݠsHt`?J` %|~F.ː6󉚗ȿ Yc+s i OJ5AH9}230#"v\t8'91ϞE2FɘB K0܆k9|/<+BY&9\NiHai '!Ĥyi ~*s.^2CPoǑmYPsNǿX Κ>_ABx`6/RJLWnj/]@ ~" |.t3a ?Nqg>d9K:~2l( 'h"--uEs6ܚ-^ sT%"XlB J1~ =5zQZH =5S|3O]r}:y$U~qm[~Szz[= &(iHth# o t)ոq̒'vGJV!pylk{ 6d'xP\ox 6$g4U 8 VÆ؄!<'̐rE?g HKשf9_yt{<{:>EĴ$^a!=^v0gYa@0ѡtAQv,Xq4rBP+݇'ӷז2B!#~{<2m7+cTM %5+IRY5R _B%M&P6dC!%/w (rQ}$,C0"&ȡ/0 *;z$/4|cٺ.rG14 Iq.Z \@G`ՉnɿBԤۿ0d:؋^I$I)jhyMU c{d o`,bb|dQ֭dܘ]Y?ݼ~8t*>la#}Գx'?|J` wښϛmZS=mI8ϾHXFuV=tnrۃtߧUkQ/z/Ye:T[>;(#r| K U[dݰT}K*̕-Ҍ5nory%uݎIRL?*~DTtUK,1$oS vA/eU²o$e=0fY6}㩐5ګpjsӬ:Cw҉WtVnq600fkٳ$&="F7Ldc*SCfܚvok"iAzI*Wʏ/3zS+n mYn]]UZ9ыJ={CqQly7̢Y[eݓfW$w=N0?Zl6jĐ0 \fW̵ y4svJȟ><e-GZ9lsT`vjr}H?7݊wbo^bhpEun~NQHtAgC9}d[XhU43V}<-I}mmڠ#mjm46|HFO6=UWIXM LI^^֑e:Xv$\i]:"MgڴLA7uBD۔Z1dHB-˪J0Z.cֶK ʍ7} ߛYNMF5^yo#2ҕeE 6n{+aR ݹv.OϨޝy& 5QG`q7.M\O81{r&UU[3 1ih$Mo!D$wTm7=e$NR5|a63IqayU_* ۘL5R ֮Ad۳pӖV-K3- }&, HE+@t nv n 2?g}~WۅRk;'^7ömG2,29Wp`_#"O t嫫Y 9Ub B ޚEߠ*HAILsnjKiJd6BZuԫXK_]?9y60/(!յ&m#A;QpLЕ}#\u$,5,daFy$;Q;:k eFN-Z'Fn7ow=W1y1MA"6RҶp\Lϥxx'$鰇Y>Q8A pCNyQ,R4l\vC.Qtd<7P:7ҩ/N+0o;b%C]q+Yݷj6%0|O,PÊ~&+] io]Oaz'm۪^'GoǷexF~0JUM's1n|L ǺIQ&(Ʀ^;MX,"" EA1DU(TTV+*HO0 QV*X AEX `H$ $=p[_Iޣtq%.ӇN`6Y+*Y>JG!7"ؒhRrQ}w]P/3ND0|pHaz c-eX}NǠZt/ꗎz5Sj#112(BV Z)j[*pjۮ ub0EɶFh#Z(δ>g:JmA+ W' YϪ<ŠH~e-b~{^Ӻ9IÇsKidZwf;ᘆMiBy&z'Fw+¢DJXw1[ye֘W^'aȊڣ`4۵In |ϡݦFU]fo3C_^Q[Yn%%ɵ/wdדH=W 4aʥs+caw3eu#,W8x 82'~T@0{~ØE!_kRkV!.=)=p@0nW?ȲӞ] B)#3UF+14Y-Cj@" ۹bY?\;]h !`e`)7 :ǟGI!]RsiY^6sRzG]AWtD-D4_]pxkdo6txxj8%5t:ڸlCϪ4OQqx?ݱ4XOhȳ 9_f:nS{*GMa|pN1`>ztDc̒2/S|b:-nTO4t)3!Y{AƆ_:z& uE_! B # |e:s AD-V^ / =Vp>7zd>GN<}ɧ;Pu8"&"dW`uTWLo[@D v7^>0F"#0Y[b͜~f.Rp%!ŊwE/yS*$W3GXނ$#{XI]+^Z렷G$T Ȫl3-[?0, zuI?Cy}Oa C@)"uԛ8t`ߖU)?r\`A~Dv?0`{~ G^lH@2CY9"_> 4ps ~Y_滻'P^\*4]DwSސGo9,MgiV5s>2e8hu\9~?O)i&8rbvNҪ QS DUT\9 ҂@z𑱨\&|*\r>d\C+IUARvp4{zψBoYX?~UR6sc 3$VB"FA5͇`T"F % #R^gvKG]O¨a~|g^<]wU*}|f7VK7h !M}JegΒ]m JOY Di >]ıB[m_v6ዬinJ#@i2xPq]T2e:f1 XEgXc͜=-\=R4pE:{z||Т> 5{Oc1#51 ÷sn!*ݢAS& A@`@?lz_<4f}YȒnZ2g+ȪgV6Ly~2Vb-5 a'Q WtCh$ V&̹)jRP1+F2g1ӽ8_S#SC]LĈF[[AИ`& ; 6}#[d!+r#SPM5nxw)X[4p0pkx%XibhV]s|D1мs{W5Ƀ$]]-vK'ieݧ9:;'W2 W-]ԳKS\{sbz- AEnp[g}-TJ }|lk*|Wӛ3=z UϷU6"Ǐ*xWjтEg*)o^W+K y(uVs:;wn_~c&gpj(8Xc暷xo+y&[eo/Uu7:9 } OkS\Ux(hB]TճkWkcy/azQ2e+Un{ZFoωU L/!wQWR l&L9Ae&Cm´g:ܝQ.>}8UqRw\q TYFhvKsGvmN^ڦYǕ+v @|&D_CBčyZס*azc’HJvјPSҝTU&k׼hoSi ,mRG}j8 IE!ݦ뻿e`To|,UU%myi `HA -2_ =ջ~Sg\_̌ݶ˃ok{C] aElBjhtktT e$4b&)Oq5nO|cG0)O:&r0Uۦ[N^Dx)]tW= oڈ ðN^C3ՅIHܹ(&xasT}=AH-UZGV?O?]Y[ ljf1ԝM.yMXDnku-q O*zIuS\9̨-t6Vy6p9}DEa}0/5ą.m,b1+=|U\J*Ÿ:P2_XE=:{׎2,2_˙L7!oW+[ W}>L[۸i%MkNc>oӡq5KO2gej)5JWɹ gmBx#Ĵx]l {n;/O')Itɽ$-2wдQ[K8z2dCk=U5Ms.8Nֳ0?{nnOl%Ɨu~C*(xZY  N#Z+~[ ȅޢ(3CgLs1XĚ5g`F*Mݿ4x)dU06R\$Ut/5Tw{̤VPְ^םebmQkvXwBѪ- ByO!RD:\ʒ_lnâNW9&RKrU)Xċiϯղ ~o1TTKluɻE$kZQ_,eITUi^1 ҭ(1,)G]Ums45v|}l~4.ʔU{"pLpg$xEtM*KϢ,(-vov;ńz([2)&ebe̻:;:E?]Nfڅz5ipyc<:P{l鱵VTɕ1vXK/)&sKWЯpR5..Sṭ%ȉ5l1RrF|;~:S1Yp8$ M̝;Ud{ay6ɸT #jp%я$xajϡL^!wE]ݥںZrZ<Ơ VC/C3LMiI31"Ĉ#oEDڋ|Ņ?Ŕʺ=8R](dq~<;y+5=]RcѫG̔?irj=샓'O^-q~MT AJmO;2eL aUn?W,We.vc]qz(+^Λnڼ>ȷ(W?9@\GI.}I\e\gk [Zs;ssKimS@IFG2ZYJ#5Ϻܞ;~ug^9_q"[?ˣ(T}J< G#Ce7l;g`l{eZ5 N+b(3*j*hB>qR .;Ig.ZjS26z/G|u AB 0߿ >"|3 Pdo4 ̖PZ2I@J[ACM:^ M*|4:}6] VdE9Mc;K1ߺQф6$ /dýCs{]H3@- g[q)|$K]&9բ͇SA_G3x"w5X=Y'46@~?Ϙ-7y>r+>\<,[ Z9鯡l/ަ*|Mh4uIfAmdfIcFeT*-!Rg.BV=q_=]\׳EIF_'y*L?=, xˮ KD@vt $ G1/%J8?Nj8r}30ldgkD<W6ʠt1՟7`٦ 0#G{'! UM^_p46}]ߢz=RE9 1t'Sr:Z)"⢰sU2π91IoiFIGIBOA7gϩZNEt 9A` B .aGbsʯhCؐL=oՒ2ckYL-Xُ׬UJ Å(,ùktxfҸJͮ1'm+J3vq~nF7)ght=^"" r_A0؟K|[StpX76ne$J0!xV)v[YUGWі)QzlKt0yuJ","(**Ŋ (V0ETbz+(*$PVu&q)E1A ł*~ߖ8PQF*UX"AF*`"aUF*#RTa7U$8vա-$&bXc5]՜Fs`*KgYϪ64*!ݙQ޶BU:1a,뺶vD0_u9dt.;Toʗ֤ | ۆ#Zˍ{vp:oFvg߭vC]g{p1%3oи{2 )H-QoYwX*]ȅSBe]I1\}i%,i ^˜GN8;zW|.cC2l9D۸ym=5z ".@gsH颡7"Jj`QV>lz nœːM K ٶ:30!ﻅ/fR@t"pNw=(P)^ijfs iR.Q%ު$E7Ԏ4 h6+zcUSmUEchf'[ï hՒܳ3ի`͚mO[mK%΍@(L=c1CB3>Mn(n1bF~7=}{bWYNn`Xe}xn!p`.u'p]-*c>uJ[;+0P[NRiȁDa3%JIb)HæW%g$2+=ìծۜ J/FQGMzTVa_پc uti~ƽ;Fe>Jok*E:VfKjd_!pQ3 žUtmલ5YG6[t%'2<+/~hAq֡)ԾU:D.z,iHλ/oJaC7j'o493`FNwwD@ۮSw%]&7Ƞ ɱh/́0IkWfh%zӷA/ &V1M$t&A2 #閲 d\my$!-e\iGIᤊ%O&,IpkE*("\Ʊ=l$[Du.Ũ-ô}Z{ [&"Y#"fףMoDS1fV48V:# Ȯ&8U[rųQA`)ĵ=7l+X5Mp%a}&vb+>~M[w16y]p<"4"5nYxƲC';3K+fuvmT237w;f "3Ɣ1F"ڨ&.tw0]( 3M}N:\PĪYf:#ҧeb&e$oyGp=x 3BH.E]c~W<:n{BFO̿~8v|{RE]{-O{ -a5:$E 1ؗ_2g~^+;7TL~^?O5O3l¦Tl18\#o:Gp gO[HRܬz0?32 ]߲ϐCLBß(Hfۼ=[\QyNP8s nB]@@S$;WϚq>@bjba-0I-;S0%=4 S㡴jn]641LFȇLd p5r#vxtߌJ-3T~.BРg2ɛ;' @pd3#nIs@\sb}E ;AEn_J'w2)G?S".St mj.N UaRK( #7&D| T`a!Tych4f)xUԿ<^znLp%4Y z^oCچc,iW@ g-s5C^?Z6%dv>G)(e!&&3MvÚ3,/p%e.L jG #)@ wb.Aڌ  ~~0P)6)A/(O6NfBI'_]hr5|.3lma$ӓĴ45^^5dzp9}3͝hI-Rd^-Y I4#+B1i?G-Їg"6)丈upt~,.Aխg(p|Mn1ި= JMeʅ"='_y4_·[*8),_"vG:YPZɅ A;dTd~$V幦 fREy`a18`Q\{H*i }W~|br}r'cQD$-NRjp798]pSYmy^i=n) q\=|phP0Ujd-nhl]Ҵ1"ϛ 0+ĉ Y;ӳ!괆) H[B?hX) jyi96~'ό%oE8+Q1M5O0u"W;;cxJV}^ˀC@I į_*f &mcx=nJgiWit[~yc"̷T?܉S7. ڎ_8;Rf@7XA˄?i|V6<_ofPȈ/T! \Lq25o8R izd0LJELֵ e^a^8!z} Htu=[w^xp,ç}C*+ե$LI㝬G&?pJPbYbV8'g6;V 0gW*VO=K=42No2PM#j5sM":q!/t빠^޼[v-uc*.Vm9^Of`8&ᒰ˧!'6j]vƎ5bJ-)t%1E2@mD];C6;{ 蜵)G]9^@J@&Lɗ}d.g qgб(誚 B rCFvM=.v0u]< M΅:P 8:A:7~ jG{Mn"?#4xJ}hΜ߁Swa5J`>bz zK&U IWXRkpnt*[K 6#~oHX־D9P{کH/\z "Pk, pNJ$K>E{b`tЯkc%AЬeQ1eT$8`PJ;?9o!sq <'rkQO}]cvO^=Aˏ9A ۹~ xCjãqM # #G1_?/ v<>8 z56UҵzEҫ@0(gJҒq+bΔ`::t< {boH^kXobχ0Jl@qB7A*я>(F`U;mN{2*-z׉ `0ٖDzit9θ )VoL.1u9dDuP-2lSKs;_\*P]:Wg߃'HN(Qӿ9lgd nP QP; jv8CH%xzch?JԩTsΥEI+ ZyVLj "U|ۍW(RϷX^]Ze0L9f=mcF!K{8I̾VSW\T^piQ 4ZvbZWK%4і{|+PI2VX9xD"" >51~~C[FvL ۗ[ I;oF>FJcDRK6AE=Js}JxZ\acZ"@c6̢N`9Yw]CMa`L?&CpDA' 3ŠR)v0: <8ڹ1!,!`A9xsym5=q@X,A<,;C4A簚 Ϙ * Jx[A~x;үBF.41U5[yB+GWU{[04 ,KO(ծir_3="AWC_GscNoUQAY@aVSC'ȳBk@5_1Z nEwaϕyo ^IhJ$J}G\3ò& E^O5Y\#2ScZUd+ʸ'rçw UXL׏{rMUz@#&!&8%JMDž)x\an:<(LQᬀAS lZc+t@Y4*ebe*u0ɨVah{ 0\J(=Kw~:E$D@?+D;f5n4-aqA<}}D 4=h&?q6k ҿ^NntXcvβheD$R*uq3Iu]<]}:ɟuNM\_e*+ژ.#OtwWz7vUJQFG~ d1a-f+Ҙ*/Ϭ+nIu2,^?G>dȈ=X1Be+ZyD 6θ[ţ BumMqq=n;f*U(bDw,d(Ι*"v;Z%GQTj>;iʪlᥩ1tոkH f YO~d."- IU #*JgӃ6Xep$l}IN$B%WgrJ`fv]I5}i򦖬p2šQ($Ix7}/o%${NgvQFtͶdyMIc|Ӏ\/)#x10Ba:@e.ʸsܥ!q Cj/͈J&dX_a֞kܻO8g峣[0PYcbLFŎ벆\3^ 50lMJ輖bj-Z'liD_M1 ~ڂ :_YzR3.q+#EP5kMJw!"DOv!~[*ʧ:W)k +Y]QWwv㝏}?mS`5CY ?TQشj=&ut-;QV%ZgnUD4>B J2.a5wl.[90F,Kkl05I!Eet6ejQ&z[z,#uw |8Td+ ("J9Euֿ?zeo>z-K/3n+pq+yo%⾣k=8Qo@E:hR}Xvjǥ|c*VCoz|¬ԚS/02a'a 3-+Q,;R[T*YHq1A@砆j8髣 R"=C[ƕ5VIѰʒ<^ Jok@3*W^oy|wE&hGfIl~8pcA؇Xg`$$d%$Cy `̂5|׻p~IB)A>c x혖y=?1,;Jt0{ 5Y9UDš@. dU!o']UX =j a¢f*ZDQ \t03#LH0b2q.Nkqԍl4\Ӫ("ZF ձ Ij:J}-̚kvy(g6~ZݠN_,t `DCWbސ&ʑ b{910b,qy7HpIhº 4S]kf޶G?vb.%=4[< +.w;2XhR:)Q^BՑoQW__W}t4s\rt"dm+{ڮGAjz3rWq%@AB `3CWj4#,-V}sfbB&ەF1Ox|s\*^3@P5B>Ҧ;dT X ۪/ 9Bo/Y() `x B" 7`~ICͺDN|2JQW/#]V7WwPGp_ YGbPv򐨮C$pYv.\÷w>uwMPK:BuaA)$<53궞Wtb:^hU_?lBVF0eYe\f J.i.dv#ִodp~U.]8e~={T8m7&^+7+?E7}"196vcT.(=pJ4ڧٮ[dg]Pu!*>WoE+q0?dG2AQ37*i5Z;P}JZnU cuHZR<|5ʜыOS_Y{LI4q Vvt8mx~U~oW_3 : O%ROɈWt]f7sG/ˀ@dVlyvWU'r%LØl*/tݬjBҹQvj/kmD)p}>hV/p˹R޼8w~W)!钋6%, ~LK+KUwz> j)2x5CӽHh0qw7"J LeLyvӆta8~z*t{N _`9;j V"Ʀ;CΫ\Y4ɕeײCa"\ AQE=+ڒovLC6Vc~w_}}%kEG#4\}e6Þ2aqQ'8mYyfXP @*-r1r%&\Ȫ#EsV.}e}K$ri<-ݻ\>ל/E! :'(/$Ŷ;Vڗgg6QڣZ\M3 pVՏXá8"R%51huv gKΛ]|R~R I.xR,qhr?-gRCTq[ --R;Ybw#JKG۸L==v!5}̒㢂̍-ml%sbO*P@V f<5r4t6gZQTRhĢm=ΟnSSW \6[+Y!}Ov &~VD7k5u5}I mǚވuӶ)CBټj#OҧOm*i=LAXSK p$C$zI dV|ct_mVE a<+Xo^}isHidFY0?bZkNbY1ΚRBVS{%=-4; H3&11x_A`\Q DJ'ebT-'#p fSx-S6̍!F$_rt>'Kguh!'ы0iኑmN1-$4[!z{ojY_lwC+=J%YAX|No&'ɾڿ3>8 V@$ZUт4|c뀝Wcu#B'+HcF$Ρ9mXwhҏˡ.u^lr`ZU{o~ϕulYzZKG F gk$ ?Qcy jTw/sMx*TQ,޷b دGkS`OU.-Wy3=hv.0^ݾyiqu7͖ryAΞ_TQ'rEOvV(?kD=UŤ]kKi +Bq6/4WALg#5*wL떯Z!3SiHӍ7{-;Íj1;;J_Ҵm;gJq?"1'o 0Ge|ʸeҖFdP<PiU2̩Z6aE[6Ri5R&62_b>[>xmu^jrq*FE"Kn/2Yʋ|2Iɘ%ߓ41CF ֹEtoSՋ ʆwͮ{U SFH&[6o_O,v9/-s&=9n^ݹ#.-ns.XD!DUKwMKRTn*\?Bߪ롃/PtjBY֖ B=<6x)Ԇn~ 2v\ym1l滅N5TŴtҪA/ԍ*o vQ7[7֨:VY7vyu$1ɫ4렒zѾ>ڒNI[Ѹbqe3nT| ̊qE;?wIӷ<3n٪JݼBI셸Yp£w̯Z-8,W33빜rʭ.G_|₍]9G9,YUiY{:^ SJ].ӹwqO3j*+ъ̹p[|bco?|e+3lWs?[MU塝?b/<8?%4lWC.{, G狥Ersq˽vKኋ<`|[mjC覩cӬ/}r];7'M6-9+ײٻ-b bOe5~4#Szvl7?":ŷؿbu$S˸sU_;&9دNk&.+ QՖ;Tg31ejvڧ t@]z 5*8[?59RFXJ߳G+-3ð<0ŕqA_WF'˄t]T-Ŵ {v?E>5vG&}3UxNVڂ9-6uzUuS&vUŢnw7w=<^ʽu]Y+gGZpocʶuT'Iů;#Oa:̼T2^0ФW=u=sB mݔ.x=̹yJy[ǽpu6Mz<,M-YeqF˦”޷OB~~@lҋ ?c̅uJ֫yM>~鍍ZW83U:upZ9%Q${~D]_,~~%}gVny4K Y~b!G.yq»ALp=we(0$wg3> !Ľׯ_W^A[_Wށ|^9eY S!Xآ/;OG-؝L>nw 킚84ARnFlew\lQ`!%V.E!ĭY 3Q4kvصofN6z}L):t=)ov:!WwrkKX>1p}HPӁ3H*4ZԐqV;-C!dDLEDspsY8u٬rZkf6Y7z Qli1"=?(˩0lݺo5['ɀy![R׸9,[$_hm'1W)0?_v|JT@ |޽Te{ ݘ"]GEpfQt(,# 4hYXjh,uڕ f "A)显=73eI} nl%˴]´͡~s3J&1Fþo`kzq|:1d-OWJ[-vN@.BNـ,FhH6$ ZSabRˍ}C[Pnњ& vo+?8lwq6#PKv]_6c7$?HaB68i5ҕFW, ѷס(*wwhHX GU1d&\0] Ƿ}  L9ߚƇMȬƧSӇ,R%jg\aW/msk9!ŞǧQ{bI b wa$%]s=ӵR{16X%*Hoҫ/-͙8Ux>-]PsuxjWVYyoRm:L<5wi_u..#Lhl1c1 >Qg#ffx;wwFm4 ۑ̟ s (%bZ' ^ B4."Z$!C oratiT0jTaKD;N{H>zv &YR2><kp} &Ai< .߅wφząށꉠIKKPO v̽e _۲`vr 4/F !j95Bs0j$W#+%$x{ kZOw(  ݄M ;E3WG 2`[I5*8~E1 ڡҠ$ՠ QDt`l`L wOȼ1"|u }%pn"_Vl"O4qHsrӇoƻ(V-鹮<7rCNOfOb EHd u!a|MO5B^br yMq 1 4 _'~nc~OSr{{z_y[pw)Ѩ~wγ~.?E^a=:F)~raM_{{Aq~e!(U^:O*F{sূ-43ӌ4޶Qx^[CZtM5il?2i>k%o<*cZu*@hx՟42suD s弅pﳨ_1@BmQժZe}G_BܸsL.AqEc}]ܯjIF]g4KzҫAu(*O{'%Nli_Qs-n! a'<bLxi;ۘP D9A'+Z-v5@BI*L~?].|g/;uS1HȍTLj wAS]1ymCp (C<7}Wcr.K_vfajTԂPYIY<ǥqh~tۡ߶,Huj>ZPߵoj0oX3gd?rnFBA!NBSTٵJ()%Q5);M*t =nin\"-vnP{.pӧAQu2+.ﾥ= B0 jrpLyr`yR{Q&Rz0#+_~u 'zaM}=hSoVcs-D֗D*3xydMk̜蹉V̼N "jp̅ $>ֲRX.Cx]P?E4+N«Z.|UŮ+X5dJQ ID!EuYC*Vvk%jvzD΍Mg7ŭumSxo8y"nke-Zo*݂,j3*2t߲fnDw! 4C t@m 2}k =UEQFY"e-ҊN05i<2 Y $ciy0&~.],p,XS.nuv ~5A#оǘ0RQM/k H!?JHDž%emӼwwna;GGi~Ӕ(HB)"H$R)$ȈRd`T" !RE$)dX " AIXEPU!JBT ,E"(RJ "JX) XEXE)aPRDbHE",$VQ!0 `(TAELr4'$ c>gm _+^Ȭ6q3-H ,2BK;~}~SFk7y~d p{l;z83/=Eӝ.UGKVDC& RD!v 5!.;_r=ϯƺ!CPX.&#+v\HPm[W9=V,~=64қ4?_te"um-_+`2,5l8Ni.Jqi<MO9‹2ywQe|ӳ*xs][Ĝ۲"%rv* i~pH$E[6|Z)VfѳA"[۞3Yxval@Uh|B V#FIœڜUz!v"wzۖMdY3sq^lGz[2䫃 (N uP_a^ZfO @%T>`5lЋ 5D˷FXrbF!_0YOF_G0+ _&Q۞Ve⪾3bs)t{U۹C5څ@C(rd i(8>vTقt tW.vڥ#ޢLj;ʹ$7؍J-[Mׅ9JU!@,g'[=rM _f]زǤ#_| 2d &ocI˻ee{u'>3a(N]j׏ŏ.t'Qpg7-:|{8<Qc^E&bA[ 5[%5=0_U ] @ $$$O#5_g[%6`:%EmM\h0d,Ce0vSPY7[dpԦ=5Wa{|-u,:ò϶ا@fRQlGrF  -1n}UkZV*Πmߛp.uyRث;DМ(^S:$N 4/I.eiE 46R-l?8KR|/왒Yz1=>X(B?i3 v!TX 4\7o"j.]$2Ȯ^fFs1s'N':cJ漪[q{SYSGb1kZ)hñܜM$/ d£-TG7h 8J*M:]NHDQtg\շ]q-JSwyvjfuPTQWUMWz~y ו N8JT~' }yld$XD$xPT[bɄ00m|[ bلC$?aY EaRE"BHHxdAVAP$T@ #P PYQEdDVAPKQ*Ml\(!ƅ H) mn(h(ꮦD_ݕ$#z?EXYpX̥P^<߹'%p H_%d_a9 3:S#{yxrj|7ⴅhx/Z g ݄{>ɻ›D;CF]k{giZ@)O J  χ6Ni!IѱJ ]~|+>IԂ€(D,'ӏaV0.LsVO 5Xмn܍yƨ .Q6L)aS}@sσE#L3tlOe9&w|KCd Ǐ 2CU\xm%-B~׮QF)Z 67[o^t \YD6ȥQX'}EPۏtnsԳvD2abU?1J EA|3kN21Z%m%:esm &vhC" 9 Ck%v\+L`dE@A.&@*_]%$J 5 YjĊ!`Qw%UF$ٚ? B:W;]> XХQRYHZ4.ҍX`oWm<259=vՊ8Oȋ+.y3 dHk Ó?tY !l2[L)~o#`M0s7$J!Di0GѿvxyB.lwbot< oOiU[ TPig]w" Os+kZyj* %w〰et{[95h&4*E<[J׍ǟ[0r Κi)!3vNo3y=.u,,J̷uXD 1/eTH퇘X(ɪ@Z4 9^߫/u8٠zDwE8X58g#<0h^_,Lm(S`Ԛނ#ɂ9 * E˸3]~'~ɶ _zŞQy]YBm evW955kS4VVLƹsl\PARi`܎u}1sldսXg+53 ȡty3% QӰt:j}ppב_T؁<D,0fP\XB}ΓLY̗00ݞВ}X c.Ϗ=j+o16̜Y/!?Cf2sq?IsBmf\}2~U+m|,ø҂t>njn=A6jT",E+v>?:tWJ0=.eHn4+>󫒵~3{ߕ~|ٕuͪƚM`|yt ;5J Hb/^Dtx2ѳ[/h1dõ:0A=es+ l.s3}7;aowb2;胚C%3 µ- AoKj0`Zerjٻ[ jg&k5ք@Ұ+P,NY2jp00`M)+e ^QTo:q זx6pv]O#A6Hf|HÊoqo>Ns9;*c1xv15jA{^7 5}֢__> sX =V>:Le])CkCiѺNJ%oCfի֐+߶Ck@F-z&^֑8XI_6D~k]ftWS(ia}].-z5]OXHww>NޛoS;L0A 03dUj4ݫH#D<ahyxKǶ7\^ vV:zbTǎg?nrˤ  A4@)˛0vjε?r) 2"~Mh#G:BD!NSYUUh^f7Tsf=Ys}dzk#]-Vۋ-lڋܜSBLdK03 $@EQAx_鬒#pr౨*wlp(BKrGQս<^Q4ڒH|l~tF/d9Wղ__spUx;w{:;3+F[~usN5[m] LTT[dJ_<{aԽ}9Co@ԛ3֯iI6WJe%+:2 sx@IWsΑpޚ\?my"v l.$\qA!]AdomFxNJL!'߳Ʈ<=?gnf 9 vVW 5?Z{WKkqMuUa eCB3F>u@({W%nxUzOuA,ή/\xfso~G.:wl `J4F2tJ'tƵ띂Q`?k{UH5εK*,곛qO1ush*Ce:7NƳ7tP[1 iANF@Xqy f&V5~ eǃf!IիdzR֯kJܸ/ (oGjX8ȶΤO=;Q`Ͽ[5)*U jU;'-;V9`jg?ޛMNs9"| ᝥ-E;7}..frt+b<f7uv+n_jw+voq]}wO-lyOaY޻[۵G-~Nd}vvuC׮zAcەH8p ,aenv`zPƿ4M1,=`Uf.8'ueM{JjҪZMUIF&vye?Y[?Ѐҳc꺁?6z_[=W=Sڪ`~8J S4񫇪i?zr#qRv[ -r}{ڳ[Ԛv?Vw`vlk%(Cvu{PhrO)?\TTtH!@oWf2ýCӪ30;?]~ЁvϥevWB՚^1&VZ[D"3w, ǿPf!lwEܮ3첚1&:r+gG,yNNY<6=Len垊 ѻ=h0BzϖSfKbl.Z-iЁqj9>Sv]w9_ 2U'aύF0僘x\~: >_WDž|ِ 67.iIj[<]{-zCyfz+^J`cB'[?2']p{2߳׈ T-.,?_ֻr<O)K-Wqt)Z{|" _(+gQ/^]UQ0"X^ʱ)̟}a&nLm0^b;.N3zy\c(#Pypj(v@stGӵ*!`nCQ]D>tq?bO3AbU= }3 wE&m6[עZޯy~+YD *O95M2yW -:CM&|e-[ F۠8J:cSkAT?ּX+!ɗsNկ>*hRc]XQx{$om9Ǽm̧g_N*ҷoe_*Dȸ&=xKy]M_j\u$'f5Q$:O}Zg qznI~aGo+-k*Jb9kم>YDt):O1L򪅗~MJybun-[?Ǹ⣃NO;n;ewֹ1@#ҵc@;k+'"Gl%x GB(lgV=fEI=;Qw+b8kW7 ˷d -um_&U'Ԓkqx!z&DAk 1QU5;fgS`Q妟>ߏÙdUnAה̒0ܙ8OY.P,I,ÞuӚ#S]$( 2GySҰզO=VC0߁M2\Li.kr!6.XNs ߻g¼ꪌ= i_F異)lM푖' Xsn %#)+{,i (.!7B5nMm )ѿ']l# )= 1ӓC7iE#=d ~ykT,Tz.N2rKW]4q24`xȀCSEJtJT-MMd9}-r2TeW~oQ[d@ 6Ȫz!C&V]L8=y&ȼ'(*a7BFO.sQn*VQ55TfSic{RҦsgOҺ++rӛp|)`5ȹl\ZsMh:e?DRc'H#Nfs#Y> 7b|Q0H"z0`S_1O%Cfoż?UH$vh0EAB6i\g/Z.,N%z sKDTpriS GJ5;šuxU"ݾ:hb(2eGUY8bTS J `Ȁp+vXARU**'n=+ُsC_=װDhnH=WdvN^^.O~X2Mݯqˆpxc T1#@VnEuXHOOy /Fo>(ueJ켥bP9M$P& eoٚ0x`΍"ZgޏV5!:7ȧB)EA5 1s9Yzy.P2E,ysAO_yW;]m I{F7ܔJ,D[aO!T}9yS,( pti#+^7?ެ)Ww;TQ^_1r;ɐ@<쩗prK RU0Am36yZ~ݤG.:uZM%`=iVc!x;Oű? =gߝC/1K =( cCX-U[n#@PFX7# ^?u^ą4()D+kuP.O,‹τMj#EP[dd@?}tnvok{XO@h]&IK!7  UN,q]UIk*Om;95o"YlAyN!2ogcz䀕X154s.:6+f\tIx-۳S0.kx3z Rl۩ C@!FPIc =kuc5K3ՔcĒ;ةLN;NckTg˳/ϭuF?{?>/[o/FGB^&d@%&z:~Ok2ۄ:0yJco6LV{嗏\86tʾzm1 92N? f;Ŀ"!/j~mטBOI** R*1H(Bb^M|u58d=K'\9%IuD#d@2Zzee3Be?݆ 9#B$wHk*1fDQMx tEɊ,Q0<3mMnLhf?r 9UCp*UM? ,2bHr#Ye\S Ԁ@pR{"*}i~!$Eݽ,-{bWW:|l 1"g?\T!6Q 4ݷu[dI#d~/-T P`L2 Sa G+fޑ 0x%xR]'uG/ye} ~l:]HLFQz ]s jm3Aƞ jbFoA vޚFFxФS%Ol+ANsq;^ncI;*Ƥ-+c~cxW$p~E<& 0vO9)\y%#:ZϿJH`v-!R_E  y,bq*$5}YJyXVW" `g 6؁\V,PILXA=-l6tn8%z<$|0jqDm;2M ҄c/j< * LQ 0\M7}ٰ̀LɄ@%Yso^ ˟ؗQXI{)w g`cR,e}xC!ʈ/ ]` | /{_o?GƹXĘV <ޟ N-x3Rf1Nb"5hP % |A02Bf)Jjp`S"HQQq% g*220Su}01\FRLV1gʾȾZex?qmx%$rz<! A "\N)x_>Vw^kl!B"XLNl|(+H zwf(?#(0Si- Zx-7* $CvNnzε ( <^rLolY+sbPA%յPTWOjB ('<Ģ(Pxևc p tusσ;l)uO&zmCrn9) `irDM\GVh;,;9relj̚$bi@jIRyzY $#§ n8XmӃfe6a!lHL2IRbҠa X`lå p@!@SïDT<:e!(]S<d18(.XTق-"L\w 5cX%I5fwj$çVtaz}~N]<^{t>(?O imwCWM{i>{o/3exzkWӀt_у,RMT-,D$t=nED@G˪p`9Q;@t$œ+2B" ѨD>d?ķ]/ϼp> w. <JtBd!%gk_ Huc@E4Q=ԁ` Y#``Zyɍ|}׻};9$тmrQM&Y"tObOqݸd\;,Dz~Q1d=u@&Lp:UP1uip'oqu|ևC2U'#P\ .QJIJ Q)B''5_Xg.T#~r'\0!YOqZ5@TORkn=m/$#iW(o(P"N7ŬmE_?9xa6Vvc]2` Dna:Xn(iBlJ±A; ۙ,N'pJ|Em͌@!*w$Қ$ =6 AHP+W9ΉbYxed>t7@b찛BCe2$P.c . $0(B2q}F]45-s=Yktޙ8DP{=ިrG n8zʺXM$,9d!ސPAIkDB^{袽::xffk0E:%O|ua AWO\_Ǚ Gr<ds JbMKki赀}J{(?ߟ}9_p#B_mlN6{ﻃq4T"}?]M58ZI"&1 H jM#t?(`EeJԪTV *NLD2~Sjk8=*L9s,7d^I=ԼYBb^k21Q/$E*rՅQŻ6Xa)dgi92qқA[aR Hd8 BU[Y7}PdF(txaY426ԆC2A Y-[%^]~ApHn-7@T',)p&FmP5+ox"?|²( "DDE[<0:a@I#9yAkѱwI4aU6ьODȱLbJBATG";?* NJ@dSB2+`^`! ̑"a4fLoƣ`B-Gei[Td Bj5o_j xȃ6J!3etu02hʓsy,0iج{7k[5@Gl/ko{>.$XTDKT[.,CY7bj5trĺWI|1t1thlj+ŶĠe$CN$# Y$ګܾY?mAH!\ĸ;t((-% mTr $襷RVbeNAX^rQCP݃H,әwZÑFw|5LȨl@[LEc"(8#iPN|p:.ܙJk]G "D`(FDI<'N@R).q4rʨ$$O5D{fktJh&ЫwJtƞpj3B\}CjLlNX 낥.w׫MQy8A)ʀI%H"!8|~=ubcW Q O6fn )h?ZZ;T&Ajuc0g[^h<$_{?ÕH:]E'Q2x<;Sd7:2rk>Ⓚ;C#(NV#aaH;H~7{>NΜۥEм^Ia0%) W XH D-) rxP+'gY^$UjF!dђ,R X/Id3ޯ~;J dzzZ/.D&ĕI_?= CK(cqM<pHWtdы O ^l>Ät-|N 7:f3Ad!Iҡ[ EmBP,|\vf,7N,FB,D+3AOc}w R\Cdc~4C*|gڻSJ|Os$F",AA SCUɟAlvZ\x$#\jG{Ŀr.OK(P~}ϩmN+BH@5QD; ﵪވDTbrp]=<>%o1n$0wBEz+'/]5|_GpmчF[Sؘ,NRd40^Ce7dfً&z &{|~lG3X]$Tw]BRBJt@5r͆g?ˆeƚV  I5U!T: &/io_`?9lt~fMv~`1=xBQ H>پ6|-Aܛs \F\A{qYQd[wuz{0hFGѼʻik+D$+hZ]n 8}huST`D@%6&AQs0stKu3Pe=y ǂ(HB@@dC -iS! 4Vf &RґsP X~OV )wsNp;d(P1@>PB6ۣ^_jds([vĤ mVBI)B")ˣۖ'RI0z}Q(3PW u踗ƑAaz%^,HRJ_k5l#F]vOEGnȀ8Z)aJ1DB@χs [ $3lr.P"{?n&5yKH ٻ,EvJ|ǭ#SvSwb;|?fXẎmڍTwi H$gђ qOWW'D P(k2ZCb~/|"epIbJoA1DyBP@ 8w:ow$7R/(~>\p#S[dO4mۄWF@bjV͹a#sy^΂;Y՞e=Z_.x%cRP VV( γCUb-~V/&A(N(PQ/v@r[1=(>JtSwl1sBևܐ2G=1-` ?b? ;>%kA _O',J SS]pcU|v̞_P٩K*[#ѫkOhʀ&+I.P8Qg-%H$B$lrQ_ZaCRW(3\e]T#> j1!POlƏ"Pv{"Cp$JZsq:/_E$ aZ IV G0(du"~Ghu8.9 A*g99ݷ>)E,c%+|_^~zթ#eِf):r(0V'oS#MC9lDې%f.G9KkL*'ud%FgI}&xZRV#!6@ 0O¨s ˥Ed'9Aќ˖#ja'vRk~ >8'**4h_*PKN"J%6M[B}Z 7ex.nMuLpb3r[C+kjqQbj@Q3#K+`<)(>2̀R.n)7ơ&Ӂ*gVwp4gvum{ ml(񲮴ؗKRuU$'zAV*$X 5ko$ O8=xn PZf3L]uf qb !^F aͅwC:8mH~@H N=Ar95Z <8DCx/mwϬL,B)!`B# lqhf+h}ʶ̭D ¾?%5 DUIX.ht!O3(5&%(gPbv1 d8pv)؈ N Jv$p\[ӹ2T`cz Eܑ la<O+ 'eEp|˅@HH!Cv<:2e,/~wSwtBg$H@; :+&H}=h{|׽!^bx nmaXw2A!Đ i InoνaE\=-_LoH2잃cQIiMV!g]grae -xc+ CW C;4%!FϠ3o@ Ѹ2F7TJ_ TW 8 (Y&f8.htQ_JKh 92/IZAٻjpDH0Θ6\-2Hs{|D_F!l l(_z54t6B=N|޿/#Fy&Xxh,W9qOGr:o#VW a5%h)hmEܶBtYim3|}5n$v_n ,2!~ fchkQS%Xԏ.mw6N?OY<o˛Y9Z FEДDH,hm1z!\0CCB1ORjW @`>1c;jBpZ4!u<À&p| S\ 8A`Dq{IBl3li7@*Npe.bꏗ\cW7*IP7?xI wїϗX|v*G},:,N <#u>ڵvzB$׫62,G+#ͽ6J=TCe8BR$( ^$'?i|@adP˽+SC[L@Y7H7uf;ݠkEHv$ npr5 Ѹ4 !M}pho>$ I_b-}aOpaBeHC] p%m :JneBx̞yj7ޢkP%4ǀWK2 9 Sd2J*BP(=<&>2)T|IͯFpZQ(Zo B mL1,Q)F#Й܊8|I`r )n mޤ *ZHfyis /ۦh$jՁ[hyk(SvR)єj{P29k!B=z#}ŧCH/ָ {;iS 4x9VQ\6_8j[/>Rᬛ5?HeaoVe0ż&_LJD)ҝzɤ2/c:9H1kE[b(eCY0gz/A_{"0אYcd˕<;B zݻ6}.%dY)RB4ÙY\|+QqѰenK:!UJ3*DG7DBD)g!aG z~#YyGc=?{x#~`# bGY׭n HxbUY4=c}4<3.];F#keHG~(q`- Kx6 _ 1vA@2;IFN=Y(/ ,Nb8d3in5j%Ms2v5" s v!Ż/y?u] B*`hIvǍ6fS*SZ+Y<9:}VEV;R" _\JH|Dx-(@`Ur{UޞɐJ;gDr44 <ۊW%AeUz\sꓟwG_56,uc# Q3ʭMO:k)JWĆL)vQoѩHFق!1?i]s*lKwT7϶'0|VgűQ  A0]v>K~"EY?r,ᙎCmx?Bz~yuD9@, ͌##9F&{ p$p( PHB (#yM h%d ~FOck!H##, H zw8e rPF˘a4GJ(c„G(AQ~c 5ִ})c`C ~& } =gQ '^ynwwC42#2P 7MGOC>DA@Uuf>x%r vEDHPR\H1\^KKZ|q,zqzThXvY}dOKBq_Bcִ>{r| S@<hT  ? $eϊ CIXxPzJ\IVaʌ20f$U& %$|Yꭤ?`fpsA rgʸ d 1,) 4Kbo+0Y$E8:4„2zOCGϻs(xMO_iW<7 ޻HlvC0}1ahKh%I4G Ҍ=v$H +~_"05Mۺ6q$E?ž}t$f_yx:]Kʙyrn"/ǩM B9J7-)EA"%IAs⬐DǣCw&4`AzJ"Po JpG-*t.\Q!uɠ{NJ.;svP_eqʀ܈;8lsuS(e Pg'W4Iɪ:~!eFOQ(m SiUZF)r@2d>}0ofKz ixBx9!RW@\`=R7z!Vbl'βH&ɠ~jRIpJQ1pd N78k nшPa";*2O@P>U|cD'xMM OcɌdBp @Җa PX]Ʃ DH }E:א2D B0!dL*d*Ic@? `5SA;C"Aԡin<D׍~$PqZbDb=|Z_iaWKJ۲pG8sPrH@Bp$~NA5rdrD*~#VT/k=g0!n!3q ǫ=-GWEl}9騒M9ŏL 4="@[)x"yه!Y %|q7?|*t =wN'$T(p;p /Of_z􅯚xGbE>L4Y:`4Uh/޼)8B>q|fXY׭GKw p#Bn$ߒp"DzfD4[Jchk BZqʚC{.;eQmB.2ć"ryg7t|oHf /+]^Օ@2Qa*MPX4ɋjtPnved#5KI (uTIsd$"7 G|FtC0~ĆtJZH#~{p=NC,py;M!ETdCsbw}ezdXJ#  -u/<<0p*:5u^ 0.ingP~ ol0*WD-^TBT!zPaa1'YO!K)5!j{'y#uC/Mؾv|_V&=Q*IȰ$$l^i Ҷur'Z _ w'Q_k}Lh9ܓ³8 5mMC(c"-$bsI4L9t.vFCc D8npmlCWǜ=oz"!> TO2C<U2".Ix]&󘅰TEDǍ&%@BMD h:Nq9sB٪$( =>êk3{+=׻T7z4w = (|wVp @4LOS0L`FL 4dM=a0LAzi FjcL#ɂPjd4hLFF&d›BmT&hi6Lh7zOB`1OHاPyQSbf1M(I*~D̍1I3!6i=5=mFfP=O( #FѣFB =FM=MHDzCOiOAO$& !hhiF h#h1 0`4тa =M4%DDQd4i<)=M`i4ޢz&]^I5AAJ^:1CBAx\z xҳ慣x?GY]{`Z Ћ,0\RusEFrҕS4 _HZVRXwy-Z53Jv[] ^:G|Iᮅpn[$>X$Ռ!C^.La'm쟼pɩWy7:dovLqyRdeқa#kR[KjZxͬ9IIⶳUTب\,kgE3N|80OM1h}[*}k گ-=Ũ*"U3j}ֺgn2 _zӯ}vWUbg \1z^_1גG)75M&>'R =)ЭKPIoaǯތAysZyBI`"dDz]\׵S!縲pIUGI9"!11`Ԩ-jLE53zq8)׹_aXfՙ]CԥBtER[Iƃ_-a%g^4  lb9=X3\v~ajV#d")D)TQն(OF462K'<nbj嫎vӬc.xv4X7$ 6;q$É,"TM=Cm""EgO.gbRAD@W bzG(8jp榓o!CSYEm+#b2/I9[-; ̈qj48j$ cHI|u(p" m!+;T5Mu82"VJǢO%At" Qe"@ar1J,Y,TȞѼITH*D3) ',1"ؠKc QH(F$E$Q$@őF0D^>3`µ;$; .(>^F F 4[.h"nShsY{55Af,sڲ tұ,[lX ʒZ*YRPs :2YjAQodsǤmZxM` #3i%@.O7=x9OW[R$.k(=ۧ;R[iW][u!uNx#RrٺL&2^;3 02k&A*V)K/x][ ZþZ"HY FIފ1xitS$dX*9n*F&ZaЉ;Ř8nJQt&X ژ`qbے۴0I ձ%Vcn(Fi(Q Ci;8$ 2DUd<dV8Jŀ p4fDVZUkAE5io .(h88d8N qFf\ =JB)mmvl7Hq,f8eΊb,%Ig^>~O_B]!EKLYjQf0u<&d6:]Eu7c{dKAJsQ1*s'{A7ȃ&W/kkp=ofjJ08CZ|L5rqK yьte* PX"ŢB^l+{ iADc aOӚk[N1w @gm#M*]RgRe bE-9i=-Qɯ X N8Ll٥nou/5aE7DD4$eĔ!W+N6!S/IYeORECN""AE_ "8"@DEP:DPgFԊU"5 FI$#(HnO1B H E H@Y ,RXHH $Cp1@)R节 H a$Pu  _DD>gAE  q$J E (w(!ž?ES$Bے*V I ᵛ s}!SeE޻oVJ:}j0~}CNaNi$h8;-Ї-vkڀJ̆w{3(kh}V0 _RtVd~5T~&>Ji}*S"ipbH"B’fW^^!hU " P!t56ɤal41 DDFEYi H5vIb,! ñ{uU6.kov{_>RA s &myoI8Ga7P̦ Jy;`uZGM(RԠ,ov_a]]^ N]*oe:qSaۜ< tah熱AbTGJRm EȨ@h|8P'=]IC,wOɉ^BuԂN<. Ȍ`:#GyvNfb:dk@?^ ?Ȫ^"B*ؑp`Fr[)gN/x)V c^l\&niW- @DkS]$ĬbGv_|0noi# wL'5I /fd H:|;Etr)ˍxHRe1ӈv@4F諅|w<.[}̄ TI(r]e8F lg:CjL4G;t5JzDR2RR3j"L] a7D'}:^@"Vm"!/DCt_:bb./0nݠ nI-*3)U*){%QD `($; `(cBt}%ӎsT>Dfo{࠙ł&}L rcTJ`:uSCiq8jUG@hEW&E*|Ƴتv;^StDuaʾiufZ7l:b*vS~+S,/E*KwP}j_y/~ZmAȷ} j%rQoŚ\a#pp72#?ud!70sMXQ> pxAL?igTRY}&f)o>ӓ;6!h몆|e$g?9,=Ü3#r;<<"d!ǽd2 W[Щ*aT=@/ep,q(Ao{%4L>!>򕟌 $ 0 B9ʢ:9`3X 9lC CMxA ZJsǘAXA|#Mj{dS0tG~QLLnK"9I+jWT0XFr8).b;!'J C'cq<iIY>lp)- 7U,"AW{VC+D9&$ p!,A+\o&f\|c;:= eEsH:0JaQ2r140{Cd̀-XW b ([l[I fD)f)8Z kk/=}zsaQg- FLt\{2&h+1 ǴpysE ˪pY povS֚rL ')at{osʛ}' 89ޭ %RDIu&>Rt2'UrkdKz(炬:gj:άE)R9ȏ1bvqs}w9ν3) -"+\z*T4EIJ~i;6:шXUSHO`̯|rj7NVy]y'kMῥR͒irhIQxʦz [NF [(:aLC5͛to)SE1Qݑp QfϏDfc2(#[>vr[s58z/-+]goei<ƪm8WtLj:*ap1-$"3<%կ3g8/ 1p$t{@}RK7ЯEv=C6AZ:͢aUEq?\|aKtۊ ^(vTIH< Vƶ"ðEXev&lROp2;QUG}#nA m_d1.F"C+G4ϊ{I:w,3U~Qdk;W[8m8wZN)|2 {14wt-b]MyY(:* 2SZg{Wᝈr:// ]uVIA&> a_hN]5 pU@4lǘ[$>>R#GEIxv"f֣p6ue4倮YwXv.eanxHNJ o`j# gۭ+ϥcu +~|ǑXnK# %Iƞp~6fvM@YI'4. PSwlmI'R6ݘ9鸟(*W"s}}@7HE8m#v }m.=*#û@A˥lsE~?]Sh*N^Zܰ} =$,b[9yMmmgڬ{- wԉ]& "3/4Mz= 1x맖l)d6tlZuVc Mp}"FN3[Wapƒ ײ٪1D9L]&D=hU=D5gTQD)>5\NÈ٫8TEB#UE*=xeQsҹн3w__@$JD7= &^J9@!. ~O8(Ta0PE\np2Xo/<3:(By-(={UP SΠzMH llQ/aD!I)EVʑHIL1'TPY@Y,, P$,Yd"QA` ,RX0T@X).5NrDR X*X"gx {g_.%; ,l%mHC>_ɘa*WOB}|Oβʊw7nhaB~FG-nnFW;bνveha`-,DIخݾ Z݁_-L: ' 688!P$&!;]Ee _UCۻ[N7>CmĻ^?զ?Nϻ"!ߥk}!_mDZBqrMFe&p3Q5:pن~P`t$%YK91}gkMG/yJr^{<=6(7C]+{m1{?sJߋ(d-^"=>/h9UNZg7BݮoGlx^N; f]GOps=! diC JY9*Ys)=Fap}s|.0h֍:9Pph k˸!3olZ:*<"4Y=dBùwEL ⃛U4@x|-{5~"X"ON7`VLEҦ8w#a >-pSƽZ˱1BC^9vKx~μ\@3~@ r<7HJ 5VD%{ep (*?()+ P P"7&DÐov=c«b35j8w070. *0>ڎ&Ty?v3 e+Vi (r~Uv  [% ? _&NuX@yn3sB=N!r e@\_@U#h[_'&DC츎^|6pgp(6FTe+dbz]idlԖ;\9 R迱sq_{BTp1`W&JcoJQOP93c"*p 8o =/7VID s, IȑLzfsְ0]&wQVm1ѫyA'= jE`g0=H3P jG(0 q7-, l3yיvn ZRF,!%_@⿖?KY,ɝqpаbQ,F `" cEbN}t?[Iáϐ.eA7`q oWE5 ׎DCb+Xx&哫2$yNP@a:4}`0h9kH1O/j!P,{Uɱ4 3Htn+q/1@e{ee.`wN8<ǛjLg{U^Gtw-A:)7v0E'E3yΏ7 &at[gl⓯<&oq5uob# [ $mč3ժ]vvBKjW IqtK"xW~S D+gZJҏf%~}0>Sotf_Op~iSG nEe(C+>T= Ŕdvv%A;rMCRnzﵛ j>qT\ æ ӷpIJ!맬g&?OdD@Mo)(9+7F$+&IR1zd Xͭ}N߽eƁ;o#l 6Gm̺]=oZΈ\l9ގ6:Εr5Q@`B Q \ 80xqw1Go$N젚$- rihUeH= sjDsY_HqNlg1N&p2'(B. ,: 4t0hՈS1_2ʋ2% 5籶/+LFdpUö$$ $B@$VOݰQb*H$0!"T"ŀ"$R "ET)Y4R,FEPP  , ET$Ye/4dHhL12hZ؀-CE0 Ơ4/{6tDZn OWæR#t&յ.Sq_!W= ʀu`/H٘oPYhʗoz+/oE0scN@E6OjN_^%_# 6 *;^N`"ÃĠ:-+Co2~%&'e`Ut+|8T\U@W"Ntq¼TP'j[/}fvA-žGxn@%Ad5p;HXAci"!87i\aއ`u޹$řd!/,PThz pO hXC#kPf@XŴpowT.PȮ9=?eVPłtJzV# LBӡ׌S_\wOw71Y!kJpgxs9#[IZaTVbEZWe]Xh bL`ۤu f2U9Jc30>R ܧ|D@DsӘDž&:HXrĂMLu]C9/>,1廌*no [YOt$60F3 >9Z}aͬ^B̋Ѧ.&RHLuac2ۖ@PHq$U-@"'%ZH~vww0yD0y|KF4sV2( (pG5Uirf~Tʸlw04Ч!F Nvl3GE3ں:e_~~5vOfuZS{kW!Q+{-؂$ETi_ rj BP(=P@ֻzq& }mT J aE7贬Oe+k!!g$HXzw /U(1 PU*y2+Je7eT !JlhD M&6 ؊kh@ ׆%wa,3EϠ ϬkI}B`S^"dq N9NmS weտxR5‰"4iv~i8n(J*P)tb'ש!p:@Ø -K걩R,SUz$]u6-$ "w%UW]uNWamZ;9^vK@D)P63BF*b\ybj]7m?2dnƾe;iWÌy<(&@&wډ^~{g4;=9T! ;dL3&H"ĈmECG*r~ymO0_,`blZȟ̲v0 | h ͌7r U:Aqd,D,>oe,F!JT==l#6KN R%<9(c~rMMo#ڳiFuYee .L!ijK3B]NE]0x : Qӻ_VYj0a{v6SY/WԟfiŜSmF_uND_e9lPn*b GA7b!kBWSbPct<J=#-CH$h( 7 JODgEzQHY648C׈tf+ve9wrS jnnjIoa&0%MT S7`|v'"!&WU)v v(zSF57_k [=d]^:"ɔmڌz iE$m2~,!I۱CE!{tD&Ƅ uQ2\+;rBlˆ3`Upm:v0ZZt~R)OAa 8L<޾,ĥ7rXu]p8yzwŦ]J-A$ ueS@ciDƕ],-.Qdʹt7T\/jAGFd Z<7ZL醧q)j(+I+7k:gtg\4Suph >-a^#.<NbV{7toN{ xx;2ټ<{xLkb~k>Qʻ91[HR٧|@:-2.QѰ;(fKֶޚ(ВQ7=l,~@-)%Z|$pt>|X?uFS]@rr't@<Ŭ);8X򙩱t:D,Mv#:=%8# ҉@!INj_O& }LUBB|D'vjCڧ:fGtY>F"a,ftצ5̈Y'Ojτd :;Žzz mZQUIMb-=\ʩ1M5Zom'_/7N [p., ʖ)|\3,m-^?e -iEopKfӓta 7{] 2൦%y:N;2Sp,<ȟ+خ*-@>?>ps"/!%!t/,EMdZ)$;WBVy?+e) m瀒{9I#]\gc3/ ?Yt]ɡLġJg^\@=3|If ƿSfz {{-uWt^/G/ӫὠ^1kYP.~Qc)iQҍ`ۚ&~_ɺљDO^jpt]ac7Nʿv}ĕln.=HͯbR73Z#~ont;cT[8@ ,҅)C҇I1dԴ8YM\ U .ԒWlyhiIZ'׮x-fA׎qK=}ya+T:ǔ "BV.†pVYi~%n1zdTu:[!$UӍx9 Fh;b'kDxx0 o$]/7to5i@"\XfC$VeiTjsĐNՋg=:kpg3ƷAːRUD*5^vŭhq"]5*⥖>"plI =fR eFnREel%Ujž~ =;ߔ_΅# mČz6ϵБZg@$RAƐ^Y[7"v+!SQkBP2y\_}BjLH`Irue25\]<;#]@П5̴>IM$]xr=> ,)}bcE jC휒LItjCEp[b^yI4픿*5:(V$\crޢ#9{.%!ّ))] i+̩C(k!?b@VN;9I?0˽4mV[bELƶ% MmDifm9Lo;&T8\7l,082٫ 4] 2]A2&e!"AQ$JSUMm5V-^||ɩ|TOdǏuv e*UٵPlJXD(S'`XKQ"Ǧ9onl&qdi `x8a?{qX>O$Cfk?wP_ĝ݄\4TwNe8K*f6$Y F7%6+-Y~Ftv  Xz6œze.jOԣb 货,"gCyCe- A`=d-yTO+Xj u^ql̔G`cvO6=4^U %`?9nޯVsrlեyol#"<.( S<*]e%.6rیL3V:k0ydcܫ  exiŻK@yuƒ&,e zgM`݆JlD7M&fh`;C<#r@R~沌Z/7eeбa]53"b4nNGKe֐%!Hx8l7Tbt.n*QGdxled Qg~@l,~%~H"ꃊ3\p{qVzU%zA<`]և伄9hdA?QfF'AG[ H{-˖EVTp3. TKQE. `SQmm-0e*1D_PT h:5F_=[o ;18x(sh;{a-WH`1PSPF3 v}9BBW9ȋx8={)e=v (DԺ 73?@>9T'5qG%bti; xFB=+p Ks%K|~t!&jtL bfs&BNKfut?aqJ!Q'D|_)↛&₃Rn4̵rNb!LXn5QTSDP*sot-e':v7{8:藷j.fF10:rKML {4tO,5?!t?[Ct/s:pfΊe&8Ckg^VA-Is`D7!m6JtnZ:)j]Xq2hz#E!L5|ZPo iYn˶ "4 Ϻ~lҀtC()Ŭ{K=]"}GVżR JwC3h{@=gd0CKGSr2q=kOQ#gR؍\zIN}fcN8à6(LIo;ѓ"LLC/mѣW{i^2jV祳ޢ,Jv0-+B|@N׊)H !a O,I^h@šh5|4ِVs\vAq`ڞ5Lv.H1I O:܋a~bU V9-o(ScC#]ƺW!+ n<ҧXt%{6b>q<Œ%f,x[0d;EWaGZ d>>`qLbYP*oܸZGZ Z[xi!(_Ge]VU7wH c8NG2ǂ?j8t^JF+=g #/\Q=]#N T !xi+hS9ZOM@RP4ɳq>g0^Ͼ}?? ud; @D4sq=/mtFyo`7"pD׳1˗&|̞Y禊17Pc=1R'%WonfܚXrY&=O3#J$.S~`6zǣY$f [ ։87fjTlZ!n5mZ9ux$LHXV52Ygf4#\UP;ÈFs-{2S dSkYkFy`JדC:0j󹼛&x4eg GQ%Ay %=6Y@'DV{ʪv+3ҎjGevdbd`;avgI7YBg֤/׳JaObް:ȼ.rF#[fL'|f qg8- [7 pI\@\VUv>~ҷ$=zbig1]m2|Z7'!z`D.ץm "lݹF ~`C]`~81yg0){'Fԉd%dQ\hیBۼf}񼵺 m䧖p-[n-m<;n)^$M6ehr fo["rGdހT ,xXρ%tI%2`LSO7 kX&aJ`EcS@Fv5^ >`溃DG΂A@@g+䉠M_1+7MVX<%~}#OAWFARP 9hf7ۙh@7_DT/RUҨ鶧MwAWr:N$cdsO'^2eX1 슦*HU^vܱLǽD>б'cK*_Fەy( f81kAJ1סVX<$NIِnh\йJִ:03O? /74T+HN Mf\wciib)n O_F]0$nqZrc .a*y S48,70)ZV .juyR):zR Wv S7mOY'0՞sǫ0GnoMeڭXVlcyl]2؜sWBGMyo! )A*Be9@2FQ[iXLbߐJ$*<R5k/I9N nT"C~,IfbЪoAO-_Ocau/zolQz|v>ݜ^B(45XoK8[Rd9x1~ y .hr۠ejrS( m;`ѢM~=&|quNzwjbgԎ :/UK-t0eBevp${Be XVgsW|8ͱAoë!<̵ܷ5<$QwީxVJrA;z)؎5 != ¿A1+#ߚ"oXE/ U!o D.+Ѭ63A{:C'A,!'r7&zkF`qG-Sm N$L)ތ'I@o Mb8+;b"1a:7|}NSK3!mb5.Y,պ.PͺUϛ9 4J6}*.2]#;tj1a[)[GOEbnx0~8X'k|ࢃߚX3QM-LMI)DRYp$B!os9Bo8|ݫ;s'kaf,X "q)J"/Y%"mU9e<#pH7ߍ$7bh*;,ˍ)!Q͒':p*kܻ;,:`ƍP/%jYWhIta?1#ʨ¬)#Q(#Gi"H[@"P&,"R6QO&ޗYП&G j/;뺕= u7jٛ抅gטy2aZ 3C2{t;3xkD_#DGܳy_ I*Ϫ%{}:JCxSTSzaݨ/JNEg?mgJR,PT+a L\Li։[Go~ YF*GDOto5 -}-/3@}}Ji(qΔL !_~8,DYZHr7싾?cq/ܬy/n0) *C-;}iI;ʡaF^@A O&`]^UHqD+sp97GdԽ÷8h2Y@|Ӿ?' NGKL*k'{d-9pp"j&h -yPA2c;QzƕXqroEuD\Q»xo'0u-ǭ]`VNmdpBa,)xZj>un vNS#d=iD2ETJ%GW`SN;lb୒)[K@N OB\uן6P۳T@zwQ-˦絚1";mc;b;(9GuŁ$IXhVin/vh4Êg9yU RL/R䳪Dm4@8EXNwߠvK bm$SD|Ew ZQW r¥3ToJE6zMgwDsQlvA8Ty!f!2v@SΕGv|5] ,6cCè[74 O"SȿkphތyFZX  ?g\DJ9a:*:嘗NT ?''2+$ z:f/ƼIe.[& Sr3b/ {o?`gIewTl"~J+]x FܘiQΰPMUNӼ-5pU ,W_5H o= ' TIox[`Ag0 c*[ :va@ย=Lz0Vi 3.#Խ3؝ɱu BA=zL8ODB'*(leOr̩ܵ} _U/7 5R.@/Stee2T̼| K#((w' Jm술3;9 2j"m9^"0L'h>I cY&c6W: V蔭8.-昤``xY̓4|FiFȈq6rT h~\!bpX>IXF7$ؕ79/ʮ"pm>#YNc|(;j\&2cCGUYXKaz'(&sqmilaO7L1GA>[ro͑5ec<'} :賓R9_)r [tuv^hw[ts}=?h%&ht}{VPf@}Ipμ8e"VzHCk-s 5SʧͳG`N _BHt/XeNNNVg*Oz2T\I7DTu2wܺ7|°2Pe8?Q!#Y>#gP07ޤ|m2e ʔ2њ FZ[ktπ2T/1 zaQ+_f>Yn et·>CakKnh 'ykMLڗ{%-1TFݲ^uv^[9c5,-7qЉ(N/t/D +> +׳_W3)qN"DOx*iѺUÊ镆Ej%v#x2ҦQ5#^p{ fW99ut\t9c R}Ӱro]M""#ZYt%"X5A %,voE? !-,IWaB#GL~p-loוP6vЮ>z*^o婝޿ S@+_Y u`ǷK(t7cFS؁yUk\˙o 5s,˅X&BxBis#?QIoGv2F)<7I I9&pұ!p埫dњ͓.UG(1:((+j<}snpǘ4.ySFhجqPk`mL:$ɟqT$lgc[Od0&r6H}xYs=-Sl1TQS`]d/qS?<=Zeר5Wuvھf-9S_ή+I7 qS "xC{QkT&T8̗PC' j/s9Eבv>'db8@(vjob+$sS;&MZ=bn2񼻗EXv@wLp%P nSN3S%MY9(F-A>'Դ$ck;`29]Ѹ0 &ZV*)kWy[Mpm''tuu, O_ѶЅTFFKpŅBͶa< [&2x??d3ݐީ Z@]2okfZC=cz;YOKL?5GJFyJ4frV+~,n-Sn{!#|ªA©KU=|9+_8Q>GYoǤcf ""-ruyV Y݅/TwKxnM(9&'}aE{}Ȧm,?o<ߑʐ/ !ؽ|_ЇoN`X7K!8짬d 1WbDo {HAoA !9 蓔H\8WmsL5iSh^nRt)8,15ncfoeNoZ g jRfd^?Fu6PJ;HW=Ch/L9S2 ",a#]C3Vn`ID O`9vȔV-n',(H5$OP lʷߨew;R9%Po - <)6CH@Z%m4ql H~8YbanBN 3,Ur>f`EhCYZ<8l(H㛇 '̣ģqP ! 7C$[29}[c5#MҡA$)Wd gV}?v)E~/U0%dl;4y*S]BX6}-e FÑ^VGL=F'ŊQʨdfY1T]!ps\619&9ri%𢩝Is s`. `mĒm)U12-z4a&%vd|tWe5"C3kyelsʃDjhn,DȊiBVYشhq$俀Dd5Ěם0{~Pu Irp~c=$7 _vS4PzbSKO"?{[PGG ,oH+dc;™xE` 72lǐ xIA LQD:˓t5#xi\Pga}gϴb1߮c!~I!Ԇ5&#,BX > l㿼]=alBq'yL)JH]f{h3+9]Ru8#L| p6Z1xeeKL} >le+}qfDKњfzڽ,r-ūZ +b.8 R0XO_L >:.ƑYzS<"a1_-elOXEwӛ`raAŬޟ?R6< F8h,ph9w鏉U4/xs@fb(H?J!0JBy j⯵V϶q\wa}Bcyו<흼ύ m3p"a%,dQtuTXJjFZ (=h\[' ]nnqxD ?iz6 x"Qfe@t&).6Nȝla 3;4)3)ep}rsP%Uj.[(U:% Jm?YJTV]\X4(ǵgiÍ j)JC LZ|KWHcWx(9E?a\;:36CF ;uQWоnfOHI~ uՆ$V`HdV{Fu3rǺc ]EWe=N B-$S$u3{+.T T7`!Ćéoxu r"SyA%c=щ;' *G4Gg̍HQ5[6?|Gӂx" d999\U9d©;(70;aΛ<(Zx-]q+,}9]7 'Fm.aX:(BӑEMC5g@>&2 )UgNzwOʮa͋ HJ=eJ;w%IL SH*h8z_{1;t͟yzBلVNS[y> '<i%q,p;,i-?x\/ _Hs-k0uհ Wn~v-zJ YUOz_}o7p, )mH4[ )HiA"ShY˾m j-t:f:FI&bWF),/@P- NJc/չ_,675dmg +va(8d,(񠫈fYulIк&[,֤EW̰Pľ5NW;B4aY!\@5ClqD4q_7C(V%j($i e8Ejtg5 ]hce=*{TD}pC58Zҭ$0y8z芮uX8 9TU[|#ֆG8$t#n_`ir}F_ cwQ"/_y\iR_%"31،ʴu2'OiV#mȽO",V!2ZHը&k7VDuv⯁g3$G;#J}N`I-tp G"4tݰP=`?ߣ5UZ`׼('6pƹA(+=L[vBʩPx+Iw׸ڶ)iϞKi88R=~;;둃@,9<· _#oHI57J mP|j dCKۊ<  ~SmކΨt)?O_i'2֢&5Hle9U'` %eP^S=yAw6>"Jd$sl2L /"tc0."K$N_5|m8_TWڥ23)C8&]luk)d>c*WtXT}ԗ!82DZ/b3-J)CW^L!̥ddX)APEއg+Hhb~o4Sck#I"fQXٷƟ٠ۢfzv sv& Y߸r iu;Eogbp/!MЈ *BDo 3YL-QuRCm;/.l_ 1dl1F(FFdMG|' f40( I0UOҩwNV%^{b5Z%'  !-G$OϚ^&bp'wPkmNu|c`s Q$%[l[1]ۢ%'ZxhTW -V"+E! k-4C/"ۈ lϫ@ ZlQei:o3 #?-~XƉq| ߨ_!)#GB8 ItQN0吊up5m &k>)x®'zN҇ [T tPb8i 9!8y3XX߻M` c}Ϲ}3zϜ5֘zcS;΁V3jzlwyې"zVe}|yHHn̩dOg T h|ڦACut^ Y?蟱Ro9c8eR RcFW3vH1B:zޚYʠ4CրxbI&QlN\/x4Flɀ/8[5 ~yZڳ"ꚃ/7!qt㱟m}q{HJhf-uSV(Q >5 ʷg'r~3oz|CKb:.6@amsA7a2 s$ŘFYڤ8Q9`K6(@t]SlLvEq& ޯ)VI% Vcd ˔>v(|J@60^EDXÒT;I:-*ŝ = D 0;O*Ħ4JY\G2&սWR:pٷ{lDq`q3@OYa$[`TO˱#t}3𱛷zA7KM钪:aVhg'~\[CǒUxA4ʸΔtKidO>,4 z],n:\O41|W^qܓ` N^yQ:@+o( X7h[d+&In^&3PV2 {M*g``(c P&\9m+'W|\ox˜YΈX>#SQ]eR"92ՑrV%@|y` :&:۷-i snq<[RE vR`25q5{;?t%lxh]IПx75hL8/x;",n7  *-oLj ,V1:YU&em e;N8Aڷ} 6b8H7{: 9Ou/3I6t/Wȷܹ0':Oڧ(00Ġn*˥v(`=cc ;I0/YϰbUS1Iwz yl[^-nBj*K$H- ZG8SRa|ګq(jw=YxS8%g_DV Φ45{[%.E>4_@;P':X7b n:q|fs]{$q#9Wl#έJ" +DrzKnU `q *BY>/xMc >%M'@,>˒&:S>0M9 vW%ZK6/&ˇ2往F-ij2۟0QU*ԙĬz&׉)p(='[9"q]3J@,>,֭bV(X20e:b6Pʽral$ХsE@!)dD=u?rs:j?k28kuZn7#N4J;-!"x-Krv~0u`D"q$7aA.~l&+" _!2҃;{TB㓛6o1?+mME0)V+SZ4&jҍzz"h>PI\eߊzr>N5~w7 Tn5_dk~=/>^(fL?bLus{x90φO,Y\TglX>_3SccNO:'p2+g~ @ݦ3iP*:~CvDR.`Am+u˟^jH^9usk_}n7oO*WxK|5q+ٻZi?gZn`{I\ !1>5; vHߙ09):m:Ie@ i,NM7b..C]]"CgM>4(hF"h -uda %,459"[dS (<-ͺn+>_i Y?)_թ)yLLcTzr±*@E'C\;%'g_.ԍqJݴJ0w g(/ÒC 3:I S-1(wgo'9`Tk `^єƑ9bܗFQ}xh!(@NW!^J˫ľ Y!?#P}mQE,gld,ܺWos"c}8At~agA$%ZbcјuOV kuA0@ 0?Z<\N./QUQ59˵e1LPxe$@нp1yt0ISg_WD&A+ Ti%=* ;:S?. x ̕~Dq4% 8< 6A O6!E*~$/i0 xDC\+f:  ^mb WcmQ#weyq~vywesWꋕݙ3j@7]%Ҷuύ(ŵ L3 CUm)z^L 15\NTgĉ ^=OvBE;{̘fďMZoVk19\%0.~ ۧRTqih .+Wg0N`.{r> BA$_O.(q5 RrzBK jxnӝvtB .vg–nn.ۢp=Ӝ$ăfeh{` hj#lL҅)Zڼ*k$yCBO7 3$(,HG>,_![鱽4<-ȠL J ,fT=I[@3T;]/a&IFZluIrw-SOvL4ȔLf{--#?T(J&-*>c_z{p0E,*HC>2]FKrZ,N`+Y\)VfLc!Ut-첟_0/:O^t6McDŽ3`OBX 7}5-!}-Y4#| o:{v,9o251K׻wܩן+4yQѨa(VEսb$9R EUq>Afrjgʁ*i7˜bWLFy-s9UĴJ[8Svx}g5QƱbO1!AԧMN[vQd_4iOӔ KnS+FQ5QĺozjB!0Ղb:G] z  t,\r$^%_Z52?uxP_Ƌgς5Ogq1n(Ekw4GQ0ːFfZc<*i2]Zp&F.܁.!VNߛȪ.׳DUtyGu2%1͞Z:yi(r `W٬YFmLvU"`q4fU-tt _{rur. ~x$2Eǥn~Sy8'^Ɍٴٌ7 Tca\xn(M8{K.izCAzu1r] n[ۭFx:) NsoX]p/B .8e |C?Lm}H:PZRu:9g Y>gF!Yt[d!QX]zHDPFˏul]iVZ"{kLZZ+y(T `:ޢ*b-1͛GYkFwR=1v=*ߡ~<1 M|< sC%udhS5Y$BR^Zgg[􂚄T;q% obY0Q5Dw+}=z$nQ]mʐ!nF/nP=}u;Z%B-) !LXTg;>C@V Q7AeNq+UZN9WMwgm#;0P^bOH?z3]t[ tBfm`.&cyU[ϧEŵ]R ^$A|@KÀ&^h1S+Ό`I"*|;+%p>$7`k9\n||e}#cnj2A0 ΛJ"PgAa,yNg-8ųɋRG:0nF*)"e73s5k0޽fyPjc='{9ä磜ȇBt B>޸ݗ뛓d˖ T| Ir\F$%}٢r~`>ґ\(C*d 5!e]Ls\΋(i0?ѥ: ?#uZvXy&E?0ֱ3sRzݦEOɣ]3*գ^e ]{:hpA|]W 2NX14v[=Nx:Pdl;p6T+o~0νsklw+C[3O~tOРEIjy|KTfzq'xWC]PЀ+= p:XA=g j, ^d2`(ѨD k ޿ޡe+ W+Q_ʝuoy0~,5`⛎[ ̬r$t7D8@q˵gθ"Q'QȊAcs&'>S|8! kwD~Cz؋7?~wH_7ޭ[y^S.lׯLP@+6q7lL;m ˾XvTQ rUʬl4!կd" t7#It0/À}"R|@{%}=ꈵ^+nbo1B Atm}3Qй)"N <qsbNt@7IPܹ^1] k/l}YMSWÞzGʫ;ؕ*KR:*r;Beb݊ZGh@;dǠDǡ!7%X i}%NOLCEG>~FQG C()<,, %"Xޫ&f]p4Xgg}Rxq>_nS`B/ˏsjלPbّ>%` 3"qޫ"<] %6ZkRjŗYWY#["W 6-D(dfybGk&([Y/Fmf#~p)2adD4[fF #F1Fɚ֚GJ)U ӖF L,CLCNKPG HF||:v`a| !=WK0b>{3e Ʈ8gʝn^.FܺۉPu2;Гo,SJeT U&Y\uч(>)+آPm,l!ZTݭ5ĔښoՓ6 ׊З'RNB*Yߏґa>h.v'IOOWns3ɾބxGE<"Xyh9bStMQ"= qeگ;c5`f? i;{'ʞQHDeQɘSRO l2@2\JQnA ܦSN;|T5г*ka{]C&_'qzESnw-ho0 ްhA{UWUBu4iCΜC{G St]͍n=J힢L8`īq0Iw7ˌ♡!>%ͪdyz2׏ |5EvzA{vy=ՈPZ{8AWl5Dc'Bv`ly.Ǘyc*!lrlm]W\f_\.GzQ^P; 8x]@iePHP03L ~RXq( އoIes{`BUaT^<_EᓛnZD舡Zt/~Iӣ=? tK[&*-{h J0l&igՃ*.kMU,VMh#IT?,bq|%M\G@镊5'M~Ep53D{]ȖB Y kV(̯~3m;ȏkhg~SN,`3y9FÍը%%Vݵ֋e3+klx^6JןsB0؃zI>YJ\ bYք W0[G93M⎏  K\mZnF:eU_Yn_-p\A}?SOm˹$|: jnJU}kq7cĆZ5 o`ۺ`AZMV zٜ~~t1LA{7k|6V"»;c@x1H38TAnv9B=N5Y 7 {c꤂vά ]ݛF2b%sVS;ipC^PҡUuDh4RLyioؒf[p8VL]\>WF=vfXSI:O>Q)z ]R7xїك:buxv.Jż+M/OVm(TE2BnͽmNEqWZ.0 A P9ʭv9 K ~*!2^uW 0.R}KPVi]ٴ5%hvo,m.nZ5°1*OSpIuR>ty8롥23òM7p{::ںlɓGOp21VaϬ$ѳrY`Ϭ9kUh{+l(} BPBbx7փj+7nN;҆ '=ڻR5l\tܮ:^_qrg4ʼ%"k!hm(miGG 3\YQDՐ_YJSqi:P|!qyºk4ki\N?_#Y۸.w)U@[|[YlffW&d8@0ܽTVpQ{H&R&`ʼnF)>6]]U/W^鰂O̫ja}#3EVwnA\k]ym i3ς%mg==Q}[Vؒ? `$aUs#r<r |R*4WDgD>៣fhnf2;pd$,RWz% Vln<~ p&A'cVudW5mKvTLUwQ5JE0;dN [n 6 l^i. :H{}T3>JQ_LM׵aT(CN0}++ME(Eƒ^di݆I5c5aݘKQ9[s[tt *T Pgy껹-cAZQt)0E 9z9Mw@9N7[Ay)j}W'C}uX[J%zH}W2~bbz3+oqB٠YF1%I?-ɱpBְG=r%IcmPǣm4[Ca_'H:ʘ^`AB]>ϙ8!CB-P|; r!<(㩥=fQZ/B#.*4Z!TZ 4X`v1USsE1`HvY dMNq.EhӤ=`Vֽf&_>PfSYيĢvV"ikWk_6P`Pd% WVDKǽR;B&Z %*hYѩO } ic{ǻvw*.zq(|}g 8 [@xSR0KEwB$4w{Ղ`7>.dS (z*LBV[ADkm*'\oDaq]( ܼ 1+Q3 ĺMc;J$Q ( UkhlVƺbo/V!|f"Q9*g$ ݲ2<.!R&V s80RU;f@c gIROBdȓI[١_n C6L!gt)HU^}7k?d!_GHN90 3J~!Fvݩ;YVS *MiznεŗYz1b`JH|?<e}~5x\ {\4H¬ e2iifJ⃪aVD48`-&a#7TQTN㯒%OJ!AK҆"X&ls\#\D 14!_)t:-ھ3 d߾neFm֏ߒ H$W/RfU>5[j#G+J?҅^@Z~JMyvjR؎@e𵴮q>С42+'R}}1лǥn>qXcdF(|TLGK1a_d7V:e2 H/j&~ytc5 -%]fMИ"^rslvZC?h5:7at5Sc1_$n'@h8ua\ᐽmNy(G9i"Yfe<>(_*Ŭ5jS_$x A/$L>^ m{=K&e`=G0ḽh6IcGw@>Ji>@c$_[r65GQ/rP8V󓓕,pّ$e? 'A9NA4muY]G=|Q&a#gڲIJzF:H_9 %e,WzУ:]'L12}jҿ:G(w,c)M\h6ˢ Vz6sxHD@V$BRD<P  ׶%61M'U߄b`~M"x]lݧ ~n4Fg Rwyi;dJzm Q6Ydh |E:0Ф8XrL[saw!y!5=*QҊ|vu CD8PrЁ&Q2H~~ʱփ@-9j5o(TLچ#|0X$;9/#/m-kiR7t{|˺,LfGFZ A{z ;-KYzXvL=R:=ƙ>C<+;P)G:pS[ ^ #rEK [֯BȭD=f5r-ٵ@è`=;u32U).):j 1n$P0r ,8_ú.,Sۻ!FEXV|*1rFLNFQ2bj/?檋`1ЀHM~t ;࢓,#*}!Ab.-=:`]8PI?Д \|(ސ\#9n]X2h6R .Mb0P,z`bʁ5vjU"Ĵ)k,yJ }rK_;P([04z]ך{%;J)nV̭)C[s[5ŲP]7.ap,t3 a 8X>Q $77#LE!.ę[d ͗@a*FnuE0 ͏?.RaF7=> l0H9AR!pGi VUs.Pu5<Kof*9Ժ&UbqCU8Vt*+]jKqfl;KGxs )yԨخ<ݖ+Awcm}I MTaaQ8SěXsj~Ǫ p҅vxYQ*2~WvMfxSmSĝnA+!БYW'Ґp },PYtå֗l[z@*lwGg4juc]AŤgyK!hhg otP0^>qΧ vA$-ޢJU9UHn]oW.tvV)f5VOY{cnQK+c#CZ P^k3#fSmMXn|X/LD{Da0ӢPlj󹞬_q΋C1.ش~H"7mځm?:R@gE%- V3N7`d;F1j}'L{ɷC;.pctwNuݩ@NEf}_Y]k 1j^u+V6]wMj$S㖟?Pk>(~ݢsSIjhJqok,D)Gh2(RV0e_h%^/$ @̗L?i`7FO]i!e a $Zl''Kd~w ^D TNQw8?iakUx:\Oy+Z$ؘ\Tb5@.Y$fo[t1&IfjԬN>*S4Ǽfl7ӵpMxw1Ι[agblƩn՗!)"Js?]Xm~ eb[U\h7D`쓌Km)hLyj&&@]"襬IJ1aB[dpl.wg%t!85sfe?QhwWozjfc_1S GI@pQ 2:$q= Lo|yHm'SY&YeS #Xf9a|^~,"AM)Z 0v䰣2ˌL2vV[4G1@P*yC>\y]̞*!jᷝDŽ蚖;Wc4{ {(!t1i-Ȥw;#ݦ̓7Ck@F8kChGČ$Ļ좯H?>#ـvD&?š| u0)06a/ j)!͏'Z¨Φ+ ]r @%a\؄(X.2|ɽd E%f&(t ֣eEX CR^xg;O,iMT?<0|W iLC8u.YA #%e5 s?v!NoEIRJUU3uhD^/,0aͷpu0 hFm|#[L'mSهind|[AKT% n!HU=B]zoDS;H>G yjW*t Q\jYc*N-BKNcFS\ճYq5.e0sPy_.Y. mZ]L.P e:5}~9Q ;[@63xVSIU O F?ɑ7:J #37q0F$Დ࿸GMpn_vtSY`lT]>%TwΫg0XVo,j΀Xڵߝ