unbound-1.5.10-4.3.1<>,[Ը/=„ p'M2lLm13'CV?kW,.Q8m Wo]H(5sWW3CHO ={|a>,8̤ V'3|DsrfHJI[9<+')8RMz4=Mѩ1mNǒfVڗ jHW2W`~[ icjFqθB?d   L $,0CLY rF+"," p" " <" " "X"""lm(89 :"=k>s?{@FG"H("I"XY\"]"^{bcdef!l#u8"v w"x$"y:zCunbound1.5.104.3.1Validating, recursive, and caching DNS(SEC) resolverUnbound is a validating, recursive, and caching DNS(SEC) resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modular components, so that also DNSSEC (secure DNS) validation and stub-resolvers (that do not run as a server, but are linked into an application) are easily possible.[lamb16$openSUSE Leap 42.3openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttps://www.unbound.net/linuxx86_64 test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in unbound-keygen.service unbound.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in unbound-keygen.service unbound.service ; do # The tag file might have been left by a preceding # update (see bsc#1059627) rm -f "/run/rpm-unbound-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-unbound-update-$service-new-in-upgrade" fi done for service in unbound-keygen.service unbound.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi PNAME=unbound SUBPNAME= TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi systemd-tmpfiles --create /usr/lib/tmpfiles.d/unbound.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset unbound-keygen.service unbound.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in unbound-keygen.service unbound.service ; do if [ ! -e "/run/rpm-unbound-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-unbound-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in unbound-keygen.service unbound.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable unbound-keygen.service unbound.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop unbound-keygen.service unbound.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart unbound-keygen.service unbound.service ) || : fi else # package uninstall for service in unbound-keygen.service unbound.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fiYgUh* p MESm/mXA큤A큰A큰A큰A큤A큤[S[RM[RM[RMRM[RMR[[[[[[[[[[SQ(R߇WV[[[[[[[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@rootrootrootrootrootrootrootrootrootunboundrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootunboundunboundunboundunboundunboundunboundunboundunboundrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootunbound-1.5.10-4.3.1.src.rpmconfig(unbound)unboundunbound(x86-64) @ @@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(unbound)ldnslibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.0.0()(64bit)libevent-2.0.so.5()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpython2.7.so.1.0()(64bit)libssl.so.1.0.0()(64bit)libunbound.so.2()(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)sudosystemdsystemdsystemdsystemdrpmlib(PayloadIsLzma)1.5.10-4.3.11.6.163.0.4-14.0-14.4.6-14.11.2[W_@WRVVIV@V`V=@Vii@V@VVUUb@U:0@T@TT`T T@SSS@R@R@R@Dirk Mueller michael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demeissner@suse.commichael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demrueckert@suse.demichael@stroeder.commichael@stroeder.commrueckert@suse.demrueckert@suse.deLed darin@darins.netdarin@darins.netdarin@darins.netdarin@darins.netmrueckert@suse.demrueckert@suse.demrueckert@suse.de- adjust for root KSK rollover (bsc#1112009, bsc#1004165)- update to 1.5.10 Features * Create a pkg-config file for libunbound in contrib. * TCP Fast open patch from Sara Dickinson. * Finegrained localzone control with define-tag, access-control-tag, access-control-tag-action, access-control-tag-data, local-zone-tag, and local-zone-override. And added types always_transparent, always_refuse, always_nxdomain with that. * If more than half of tcp connections are in use, a shorter timeout is used (200 msec, vs 2 minutes) to pressure tcp for new connects. * [bugzilla: 787 ] Fix #787: outgoing-interface netblock/64 ipv6 option to use linux freebind to use 64bits of entropy for every query with random local part. * For #787: prefer-ip6 option for unbound.conf prefers to send upstream queries to ipv6 servers. * Add default root hints for IPv6 E.ROOT-SERVERS.NET, 2001:500:a8::e. * keep debug symbols in windows build. Bug Fixes * [bugzilla: 778 ] Fix unbound 1.5.9: -h segfault (null deref). * Fix unbound-anchor.exe file location defaults to Program Files with (x86) appended. * Fix to not ignore return value of chown() in daemon startup. * Better help text from -h (from Ray Griffith). * [bugzilla: 773 ] Fix Non-standard Python location build failure with pyunbound. * Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures. * Revert fix for NetworkService account on windows due to breakage it causes. * Fix that windows install will not overwrite existing service.conf file (and ignore gui config choices if it exists). * And delete service.conf.shipped on uninstall. * In unbound.conf directory: dir immediately changes to that directory, so that include: file below that is relative to that directory. With chroot, make the directory an absolute path inside chroot. * do not delete service.conf on windows uninstall. * document directory immediate fix and allow EXECUTABLE syntax in it on windows. * Fix directory: fix for unbound-checkconf, it restores cwd. * Use QTYPE=A for QNAME minimisation. * Keep track of number of time-outs when performing QNAME minimisation. Stop minimising when number of time-outs for a QNAME/QTYPE pair is more than three. * [bugzilla: 775 ] Fix unbound-host and unbound-anchor crash on windows, ignore null delete for wsaevent. * Fix spelling in freebind option man page text. * Fix windows link of ssl with crypt32. * [bugzilla: 779 ] Fix Union casting is non-portable. * [bugzilla: 780 ] Fix MAP_ANON not defined in HP-UX 11.31. * [bugzilla: 781 ] Fix prealloc() is an HP-UX system library call. * Decrease dp attempts at each QNAME minimisation iteration * [bugzilla: 784 ] Fix Build configure assumess that having getpwnam means there is endpwent function available. * Updated repository with newer flex and bison output. * Fix static compile on windows missing gdi32. * Fix dynamic link of anchor-update.exe on windows. * Fix detect of mingw for MXE package build. * Fixes for 64bit windows compile. * [bugzilla: 788 ] Fix for nettle 3.0: Failed to build with Nettle >= 3.0 and --with-libunbound-only --with-nettle. * Fixed unbound.doxygen for 1.8.11. * [bugzilla: 798 ] Fix Client-side TCP fast open fails (Linux). * [bugzilla: 801 ] Fix missing error condition handling in daemon_create_workers(). * [bugzilla: 802 ] Fix workaround for function parameters that are "unused" without log_assert. * [bugzilla: 803 ] Fix confusing (and incorrect) code comment in daemon_cleanup(). * [bugzilla: 806 ] Fix wrong comment removed. * use sendmsg instead of sendto for TFO. * [bugzilla: 807 ] Fix workaround for possible some "unused" function parameters in test code, from Jinmei Tatuya. * Note that OPENPGPKEY type is RFC 7929. * [bugzilla: 804 ] Fix #804: unbound stops responding after outage. Fixes queries that attempt to wait for an empty list of subqueries. * Fix for #804: lower num_target_queries for iterator also for failed lookups. * [bugzilla: 820 ] Fix set sldns_str2wire_rr_buf() dual meaning len parameter in each iteration in find_tag_datas(). * [bugzilla: 777 ] Fix OpenSSL 1.1.0 compatibility, patch from Sebastian A. Siewior. * RFC 7958 is now out, updated docs for unbound-anchor. * Fix for compile without warnings with openssl 1.1.0. * [bugzilla: 826 ] Fix refuse_non_local could result in a broken response. * iana portlist update. * Fix compile with openssl 1.1.0 with api=1.1.0. * [bugzilla: 829 ] Fix doc of sldns_wire2str_rdata_buf() return value has an off-by-one typo, from Jinmei Tatuya (Infoblox). * Fix incomplete prototypes reported by Dag-Erling Smørgrav. * [bugzilla: 828 ] Fix missing type in access-control-tag-action redirect results in NXDOMAIN. * Take configured minimum TTL into consideration when reducing TTL to original TTL from RRSIG. * [bugzilla: 831 ] Fix workaround for spurious fread_chk warning against petal.c * Silenced flex-generated sign-unsigned warning print with gcc diagnostic pragma. * Fix for new splint on FreeBSD. Fix cast for sockaddr_un.sun_len. * fix potential memory leak in daemon/remote.c and nullpointer dereference in validator/autotrust. * [bugzilla: 883 ] Fix error for duplicate local zone entry. * [bugzilla: 835 ] Fix --disable-dsa with nettle verify.- update to 1.5.9 Features * generic edns option parse and store code. * Updated L root IPv6 address. * User defined pluggable event API for libunbound * ip_freebind: yesno option in unbound.conf sets IP_FREEBIND for binding to an IP address while the interface or address is down. * OpenSSL 1.1.0 portability, --disable-dsa configure option. * disable-dnssec-lame-check config option from Charles Walker. Bug Fixes * [bugzilla: 745 ] * Fix unbound.py - idn2dname throws UnicodeError when idnname contains trailing dot. * configure tests for the weak attribute support by the compiler. * [bugzilla: 747 ] * Fix assert in outnet_serviced_query_stop. * Updated configure and ltmain.sh. * Fixup of compile fix for pluggable event API from P.Y. Adi Prasaja. * Fixup backend2str for libev. * Fix libev usage of dispatch return value. * No side effects in tolower() call, in case it is a macro. * Fix warnings in ifdef corner case, older or unknown libevent. * Fix ip-transparent for ipv6 on FreeBSD, thanks to Nick Hibma. * Fix ip-transparent for tcp on freebsd. * [bugzilla: 746 ] * Fix unbound sets CD bit on all forwards. If no trust anchors, it'll not set CD bit when forwarding to another server. If a trust anchor, no CD bit on the first attempt to a forwarder, but CD bit thereafter on repeated attempts to get DNSSEC. * Limit number of QNAME minimisation iterations. * Validate QNAME minimised NXDOMAIN responses. * If QNAME minimisation is enabled, do cache lookup for QTYPE NS in harden-below-nxdomain. * Fix compile of getentropy_linux for SLES11 servicepack 4. * Fix dnstap-log-resolver-response-messages, from Nikolay Edigaryev. * Fix test for openssl to use HMAC_Update for 1.1.0. * ERR_remove_state deprecated since openssl 1.0.0. * OPENSSL_config is deprecated, removing. * Document permit-small-holddown for 5011 debug. * [bugzilla: 749 ] * Fix unbound-checkconf gets SIGSEGV when use against a malformatted conf file. * [bugzilla: 753 ] * Fix document dump_requestlist is for first thread. * Fix some malformed reponses to edns queries get fallback to nonedns. * [bugzilla: 759 ] * Fix 0x20 capsforid no longer checks type PTR, for compatibility with cisco dns guard. This lowers false positives. * Fix sldns with static checking fixes copied from getdns. * Fix memory leak in out-of-memory conditions of local zone add. * [bugzilla: 761 ] * Fix DNSSEC LAME false positive resolving nic.club. * [bugzilla: 766 ] * Fix dns64 should synthesize results on timeout/errors. * No QNAME minimisation fall-back for NXDOMAIN answers from DNSSEC signed zones. * [bugzilla: 767 ] * Fix Reference to an expired Internet-Draft in harden-below-nxdomain documentation. * remove memory leak from lame-check patch. * [bugzilla: 770 ] * Fix Small subgroup attack on DH used in unix pipe on localhost if unbound control uses a unix local named pipe. * Document write permission to directory of trust anchor needed. * [bugzilla: 768 ] * Fix Unbound Service Sometimes Can Not Shutdown Completely, WER Report Shown Up. Close handle before closing WSA. * Fix time in case answer comes from cache in ub_resolve_event(). * Fix windows service to be created run with limited rights, as a network service account, from Mario Turschmann. * [bugzilla: 752 ] * Fix retry resource temporarily unavailable on control pipe. * iana ports fetched via https. * iana portlist update.- update to 1.5.8 Features * ip-transparent option for FreeBSD with IP_BINDANY socket option. * insecure-lan-zones: yesno config option, patch from Dag-Erling Smørgrav. * RR Type CSYNC support RFC 7477, in debug printout and config input. * RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07). * [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf, patch from Daisuke Higashi. * Support RFC7686: handle ".onion" Special-Use Domain. It is blocked by default, and can be unblocked with "nodefault" localzone config. * ub_ctx_set_stub() function for libunbound to config stub zones. Bug Fixes * Fix that NSEC3 negative cache is used when there is no salt. * sorted ubsyms.def file with exported libunbound functions. * Print understandable debug log when unusable DS record is seen. * load gost algorithm if digest is seen before key algorithm. * Fix that "make install" fails due to "text file busy" error. * Set IPPROTO_IP6 for ipv6 sockets otherwise invalid argument error. * wait for sendto to drain socket buffers when they are full. * Neater cmdline_verbose increment patch from Edgar Pettijohn. * Made netbsd sendmsg test nonfatal, in case of false positives. * [bugzilla: 741 ] Fix: log message for dnstap socket connection is more clear. * [bugzilla: 734 ] Fix: chown the pidfile if it resides inside the chroot. * Fix cmsg alignment for argument to sendmsg on NetBSD. * Fix that unbound complains about unimplemented IP_PKTINFO for sendmsg on NetBSD (for interface-automatic). * [bugzilla: 738 ] Fix: Swig should not be invoked with CPPFLAGS. * Squelch 'cannot assign requested address' log messages unless verbosity is high, it was spammed after network down. * Fix to simplify empty string checking from Michael McConville. * [bugzilla: 734 ] Fix: Do not log an error when the PID file cannot be chown'ed. Patch from Simon Deziel. * Fix test if -pthreads unused to use better grep for portability. * Fix mingw crosscompile for recent mingw. * Update aclocal, autoconf output with new versions (1.15, 2.4.6). * Define DEFAULT_SOURCE together with BSD_SOURCE when that is defined, for Linux glibc 2.20. * Fixup contrib/aaaa-filter-iterator.patch for moved contents in the source code, so it applies cleanly again. Removed unused variable warnings. * [bugzilla: 729 ] Fix: omit use of escape sequences in echo since they are not portable (unbound-control-setup). * remove NULL-checks before free, patch from Michael McConville. * updated ax_pthread.m4 to version 21 with clang support, this removes a warning from compilation. * OSX portability, detect if sbrk is deprecated. * OSX clang, stop -pthread unused during link stage warnings. * OSX clang new flto check. * iana portlist update.- also conflict the shlib package- add libunbound-devel-mini-rpmlintrc as source- revert the previous change which would not solve the problem as the library package requires the unbound-anchor package instead introduce a libunbound-devel-mini package which holds the shared library and devel files with a minimal build requires.- split off a libunbound package with less buildrequires to allow shorter buildcycles when built by gnutls. bsc#964346- update to 1.5.7 Features * Fix #594. libunbound: optionally use libnettle for crypto. Contributed by Luca Bruno. Added --with-nettle for use with - -with-libunbound-only. * Implemented qname minimisation Bug Fixes * Fix #712: unbound-anchor appears to not fsync root.key. * Fix #714: Document config to block private-address for IPv4 mapped IPv6 addresses. * portability, replace snprintf if return value broken * portability fixes. * detect libexpat without xml_StopParser function. * isblank() compat implementation. * patch from Doug Hogan for SSL_OP_NO_SSLvx options. * Fix #716: nodata proof with empty non-terminals and wildcards. * Fix #718: Fix unbound-control-setup with support for env without HEREDOC bash support. * ACX_SSL_CHECKS no longer adds -ldl needlessly. * Change example.conf: ftp.internic.net to https://www.internic.net * Fix for lenient accept of reverse order DNAME and CNAME. * spelling fixes from Igor Sobrado Delgado. * Fix that malformed EDNS query gets a response without malformed EDNS. * Added assert on rrset cache correctness. * Fix #720: add windows scripts to zip bundle, and fix unbound-control-setup windows batch file. * Fix for #724: conf syntax to read files from run dir (on Windows). And fix PCA prompt for unbound-service-install.exe. And add Changelog to windows binary dist. * .gitignore for git users. * iana portlist update. * Removed unneeded whitespace from example.conf. * Do not minimise forwarded requests.- update to 1.5.6 Features - Default for ssl-port is port 853, the temporary port assignment for secure domain name system traffic. If you used to rely on the older default of port 443, you have to put a clause in unbound.conf for that. The new value is likely going to be the standardised port number for this traffic. - ANY responses include DNAME records if present, as per Evan Hunt's remark in dnsop. Bug Fixes - Fix segfault in the dns64 module in the formaterror error path. - Fix manpage to suggest using SIGTERM to terminate the server. - iana portlist update.- ignore absence of the systemd-tmpfiles command- update to 1.5.5 Features - Change default of harden-algo-downgrade to off. This is lenient for algorithm rollover. - Added permit-small-holddown config to debug fast 5011 rollover. - Allow certificate chain files to allow for intermediate certificates. (thanks Daniel Kahn Gillmor) - Enable ECDHE for servers. Where available, use SSL_CTX_set_ecdh_auto() for TLS-wrapped server configurations to enable ECDHE. Otherwise, manually offer curve p256. Client connections should automatically use ECDHE when available. (thanks Daniel Kahn Gillmor) - Feature --enable-pie option to that builds PIE binary. [bugzilla: 699 ] - Feature --enable-relro-now option that enables full read-only relocation. [bugzilla: 700 ] - New IPs for for h.root-servers.net. [bugzilla: 702 ] Bug Fixes - Fix setting forwarders with unbound-control forward implicitly turns on forward-first. [bugzilla: 681 ] - Fix that reload fails when so-reuseport is yes after changing num-threads. [bugzilla: 690 ] - please afl-gcc (llvm) for uninitialised variable warning. - Fix mktime in unbound-anchor not using UTC. - Fix 5011 anchor update timer after reload. - 5011 implementation does not insist on all algorithms, when harden-algo-downgrade is turned off. - Document in the manual more text about configuring locally served zones. - Document that local-zone nodefault matches exactly and transparent can be used to release a subzone. - Fix that configure script does not detect LibreSSL 2.2.2 [bugzilla: 694 ] - Fix deadlock for local data add and zone add when unbound-control list_local_data printout is interrupted. - Fix get PY_MAJOR_VERSION failure at configure for python 2.4 to 2.6. [bugzilla: 697 ] - changed windows setup compression to be more transparent. - Fix config globbed include chroot treatment, this fixes reload of globs (patch from Dag-Erling Smørgrav). - Fix ub_ctx_set_fwd() return value mishandled on windows. [bugzilla: 705 ] - Fix minor error in unbound.conf.5.in. - Fix unbound.conf(5) access-control description for precedence and default. - Fix unbound-control flush that does not succeed in removing data. - MAX_TARGET_COUNT increased to 64, to fix up sporadic resolution failures. - iana portlist update. - remove manual hacks for relro,now and pie and replace them with official configure options.- enable event api - enable dnstap support- update to 1.5.4 Features - [bugzilla: 644 ] harden-algo-downgrade option, if turned off, fixes the reported excessive validation failure when multiple algorithms are present. If set to 'no', it allows the weakest algorithm to validate the zone. - stats reports tcp usage, of incoming-num-tcp buffers. - contrib/unbound_smf22.tar.gz: Solaris SMF installation/removal scripts. Contributed by Yuri Voinov. - Add ip-transparent config option for bind to non-local addresses. - Synthesize ANY responses from cache. Does not search exhaustively, but MX,A,AAAA,SOA,NS also CNAME. - unbound-control list_insecure command shows the negative trust anchors currently configured, patch from Jelte Jansen. - ratelimit feature, ratelimit: 1000, can be used to turn it on. It ratelimits recursion effort per zone. For particular names you can configure exceptions in unbound.conf. - Ratelimit does not apply to prefetched queries, and ratelimit-factor is default 10. Repeated normal queries get resolved and with prefetch stay in the cache. - unbound-control ratelimit_list lists high rate domains. - caps-whitelist in unbound.conf allows whitelist of loadbalancers that cannot work with caps-for-id or its fallback. - RFC 7553 RR type URI support, is now enabled by default. - cache-max-negative-ttl config option, default 3600. - Add local-zone type inform_deny, that logs query and drops answer. Bug Fixes - Unbound exits with a fatal error when the auto-trust-anchor-file fails to be writable. This is seconds after startup. You can load a readonly auto-trust-anchor-file with trust-anchor-file. The file has to be writable to notice the trust anchor change, without it, a trust anchor change will be unnoticed and the system will then become inoperable. - DLV is going to be decommissioned. Advice to stop using it, and put text in the example configuration and man page to that effect. - Patch from Brad Smith that syncs compat/getentropy_linux with OpenBSD's version (2015-03-04). - 0x20 fallback improved: servfail responses do not count as missing comparisons (except if all responses are errors), inability to find nameservers does not fail equality comparisons, many nameservers does not try to compare more than max-sent-count, parse failures start 0x20 fallback procedure. - store caps_response with best response in case downgrade response happens to be the last one. - Document that incoming-num-tcp increase is good for large servers. - Fix lintian warning in unbound-checkconf man page (from Andreas Schulze). - Updated default keylength in unbound-control-setup to 3k. - Fixup compile on cygwin, more portable openssl thread id. - Use reallocarray for integer overflow protection, patch submitted by Loganaden Velvindron. - Fixed to add integer overflow checks on allocation (defense in depth). - Fix segfault on user not found at startup (from Maciej Soltysiak). - [bugzilla: 657 ] Fix that libunbound(3) recommends deprecated CRYPTO_set_id_callback. - If unknown trust anchor algorithm, and libressl is used, error message encourages upgrade of the libressl package. - rename ldns subdirectory to sldns to avoid name collision. - [bugzilla: 660 ] Fix interface-automatic broken in the presence of asymmetric routing. - Libunbound skips dos-line-endings from etc/hosts. - Fix crash in dnstap: Do not try to log TCP responses after timeout. - Fix that get_option for cache-sizes does not print double newline. - [bugzilla: 663 ] Fix that ssl handshake fails when using unix socket because dh size is too small. - [bugzilla: 664 ] libunbound python3 related fixes (from Tomas Hozza); Use print_function also for Python2. libunbound examples: produce sorted output. libunbound-Python: libldns is not used anymore. Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns. - Fix leaked dns64prefix configuration string. - Removed contrib/unbound_unixsock.diff, because it has been integrated, use control-interface: /path in unbound.conf. - Change syntax of particular validator error to be easier for machine parse, swap rrset and ip adres info so it looks like: validation failure : signature crypto failed from 2001:DB8:7:bba4::53 for <*.example.nl. NSEC IN> - Fix that unparseable error responses are ratelimited. - SOA negative TTL is capped at minimumttl in its rdata section. - [bugzilla: 674 ] Do not free pointers given by getenv. - [bugzilla: 677 ] Fix CNAME corresponding to a DNAME was checked incorrectly and was therefore always synthesized (thanks to Valentin Dietrich). And fix DNAME responses from cache that failed internal chain test. - iana portlist update.- update to 1.5.3 - Bug Fixes [bugzilla: 647 ] Fix #647 crash in 1.5.2 because pwd.db no longer accessible after reload. [bugzilla: 645 ] Fix #645 Portability to Solaris 10, use AF_LOCAL. [bugzilla: 646 ] Fix #646 Portability to Solaris, -lrt for getentropy_solaris. Use the getrandom syscall introduced in Linux 3.17 (from Heiner Kallweit).- update to 1.5.2 - Features - local-zone: example.com inform makes unbound log a message with client IP for queries in that zone. Eg. for finding infected hosts. - patch from Stephane Lapie that adds to the python API, that exposes struct delegpt, and adds the find_delegation function. - Updated contrib warmup.cmd/sh to support two modes - load from pre-defined list of domains or (with filename as argument) load from user-specified list of domains, and updated contrib unbound_cache.sh/cmd to support loading/save/reload cache to/from default path or (with secondary argument) arbitrary path/filename, from Yuri Voinov. - patch for remote control over local sockets, from Dag-Erling Smorgrav, Ilya Bakulin. Use control-interface: /path/sock and control-use-cert: no. - unbound-checkconf -f prints chroot with pidfile path. - infra-cache-min-rtt patch from Florian Riehm, for expected long uplink roundtrip times. - Bug Fixes - config.guess and config.sub update from libtoolize. - getauxval test for ppc64 linux compatibility. - make strip works for unbound-host and unbound-anchor. - print query name when max target count is exceeded. - patch from Stuart Henderson that fixes DESTDIR in unbound-control-setup for installs where config is not in the prefix location. - [bugzilla: 634 ] Fix #634: fix fail to start on Linux LTS 3.14.X, ignores missing IP_MTU_DISCOVER OMIT option (fix from Remi Gacogne). - Patch from Philip Paeps to contrib/unbound_munin_ that uses type ABSOLUTE. Allows munin.conf: [idleserver.example.net] unbound_munin_hits.graph_period minute - Fix pyunbound ord call, portable for python 2 and 3. - Fix unintended use of gcc extension for incomplete enum types, compile with pedantic c99 compliance (from Daniel Dickman). - Fix pyunbound byte string representation for python3. - Fix 0x20 capsforid fallback to omit gratuitous NS and additional section changes. - Fix validation failure in case upstream forwarder (ISC BIND) does not have the same trust anchors and decides to insert unsigned NS record in authority section. - Fix scrubber with harden-glue turned off to reject NS (and other not-address) records. - iana portlist update. - [bugzilla: 643 ] Fix doc/example.conf.in: unnecessary whitespace.- update to 1.5.1 (boo# 908990) Features - Patch from Stephane Lapie for ASAHI Net that implements aaaa-filter, added to contrib/aaaa-filter-iterator.patch. Bug Fixes - Fix that CD flag disables DNS64 processing, returning the DNSSEC signed AAAA denial. - Fix compat/getentropy_win.c check if CryptGenRandom works and no immediate exit on windows. - Fix crash on multiple thread random usage on systems without arc4random. - Fix log at high verbosity and memory allocation failure. - Fix libunbound undefined symbol errors for main. - Patch from Robert Edmonds to build pyunbound python module differently. No versioninfo, with -shared and without $(LIBS). - Patch from Robert Edmonds fixes hyphens in unbound-anchor man page. - Removed 'increased limit open files' log message that is written to console. It is only written on verbosity 4 and higher. This keeps system bootup console cleaner. - Patch from James Raftery, always print stats for rcodes 0..5. - [bugzilla: 627 ] Fix SSL_CTX_load_verify_locations return code not properly checked. - Fix makefile for build from noexec source tree. - Add include to getentropy_linux.c, fixing debian build. - [bugzilla: 632 ] Fix that unbound fails to build on AArch64, protects getentropy compat code from calling sysctl if it is has been removed. - Fix CVE-2014-8602: denial of service by making resolver chase endless series of delegations. - changes in 1.5.0 Features - This release has DNS64, DNSTAP, better random numbers and ub_ctx_add_ta_autr(), num.query.tcpout=value, flush_negative, unblock-lan-zones conf. - C.ROOT-SERVERS.NET has an IPv6 address, and we updated the root hints (patch from Anand Buddhdev). - Patch from Hannes Frederic Sowa for Linux 3.15 fragmentation option for DNS fragmentation defense. - unbound-control stats prints num.query.tcpout with number of TCP outgoing queries made in the previous statistics interval. - Patch from Jeremie Courreges-Anglas to use arc4random_uniform if available on the OS, it gets entropy from the OS. - Add unbound-control flush_negative that flushed nxdomains, nodata, and errors from the cache. For dnssec-trigger and NetworkManager, fixes cases where network changes have localdata that was already negatively cached from the previous network. - Contrib windows scripts from Yuri Voinov added to src/contrib: create_unbound_ad_servers.cmd: enters anti-ad server lists. unbound_cache.cmd: saves and loads the cache. Also warmup.cmd (and .sh): warm up the DNS cache with your MRU domains. - Added unbound-control-setup.cmd from Yuri Voinov to the windows unbound distribution set. It requires openssl installed in %PATH%. - Implement draft-ietf-dnsop-rfc6598-rfc6303-01. - Feature, unblock-lan-zones: yesno that you can use to make unbound perform 10.0.0.0/8 and other reverse lookups normally, for use if unbound is running service for localhost on localhost. - unbound-host -D enabled dnssec and reads root trust anchor from the default root key file that was compiled in. - Add AAAA for B root server to default root hints. - unbound-control status reports if so-reuseport was successful. - so-reuseport is available on BSDs(such as FreeBSD 10) and OS/X. - arc4random in compat/ and getentropy, explicit_bzero, chacha for dependencies, from OpenBSD. arc4_lock and sha512 in compat. This makes arc4random available on all platforms, except when compiled with LIBNSS (it uses libNSS crypto random). - Patch from Dag-Erling Smorgrav that implements that: unbound - dd does not fork in the background and also logs to stderr. - DNS64 from Viagenie (BSD Licensed), written by Simon Perrault. Initial commit of the patch from the FreeBSD base (with its fixes). This adds a module (for module-config in unbound.conf) dns64 that performs DNS64 processing, see README.DNS64. - Patch add msg, rrset, infra and key cache sizes to stats command from Maciej Soltysiak. - DNSTAP support, with a patch from Farsight Security, written by Robert Edmonds. The --enable-dnstap needs libfstrm and protobuf-c. It is BSD licensed (see dnstap/dnstap.c). Also - -with-libfstrm and --with-protobuf-c configure options. - type CDS and CDNSKEY types. - Updated the TCP_BACLOG from 5 to 256, so that the tcp accept queue is longer and more tcp connections can be handled. - Add ub_ctx_add_ta_autr function to add a RFC5011 automatically tracked trust anchor to libunbound. Bug Fixes - Fix print filename of encompassing config file on read failure. - Patch from Stuart Henderson to build unbound-host man from .1.in. - [bugzilla: 569] Fix do_tcp is do-tcp in unbound.conf man page. - [bugzilla: 572] Fix unit test failure for systems with different /etc/ services. - iana portlist updated. - [bugzilla: 574] Fix make test fails on Ubuntu 14.04. Disabled remote-control in testbound scripts. - Documented that dump_requestlist only prints queries from thread 0. - [bugzilla: 567] Fix unbound lists if forward zone is secure or insecure with +i annotation in output of list_forwards, also for list_stubs (for NetworkManager integration). And remove ':' from output of stub and forward lists, this is easier to parse. - [bugzilla: 554] Fix use unsigned long to print 64bit statistics counters on 64bit systems. - [bugzilla: 558] Fix failed prefetch lookup does not remove cached response but delays next prefetch (in lieu of caching a SERVFAIL). - [bugzilla: 545] Fix improved logging, the ip address of the error is printed on the same log-line as the error. - [bugzilla: 502] Fix explain that do-ip6 disable does not stop AAAA lookups, but it stops the use of the ipv6 transport layer for DNS traffic. - Fix compile with libevent2 on FreeBSD. - Change MAX_SENT_COUNT from 16 to 32 to resolve some cases easier. - Fixup out-of-directory compile with unbound-control-setup.sh.in. - Code cleanup patch from Dag-Erling Smorgrav, with compiler issue fixes from FreeBSD's copy of Unbound, he notes: Generate unbound-control-setup.sh at build time so it respects prefix and sysconfdir from the configure script. Also fix the umask to match the comment, and the comment to match the umask. Add const and static where needed. Use unions instead of playing pointer poker. Move declarations that are needed in multiple source files into a shared header. Move sldns_bgetc() from parse.c to buffer.c where it belongs. Introduce a new header file, worker.h, which declares the callbacks that all workers must define. Remove those declarations from libworker.h. Include the correct headers in the correct places. Fix a few dummy callbacks that don't match their prototype. Fix some casts. Hide the sbrk madness behind #ifdef HAVE_SBRK. Remove a useless printf which breaks reproducible builds. Get rid of CONFIGURE_{TARGET,DATE,BUILD_WITH} now that they're no longer used. Add unbound-control-setup.sh to the list of generated files. The prototype for libworker_event_done_cb() needs to be moved from libunbound/libworker.h to libunbound/worker.h. - Fix caps-for-id fallback, and added fallback attempt when servers drop 0x20 perturbed queries. - [bugzilla: 593] Fix segfault or crash upon rotating logfile. - fake-rfc2553 patch (thanks Benjamin Baier). - LibreSSL provides compat items, check for that in configure. - [bugzilla: 596] Bail out of unbound-control list_local_zones when ssl write fails. - Fix endian.h include for OpenBSD. - [bugzilla: 603] Fix unbound-checkconf -o option should skip verification checks. - Fixup doc/unbound.doxygen to remove obsolete 1.8.7 settings. - Update unbound manpage with more explanation (from Florian Obser). - Fix tcp timer waiting list removal code. - patches to also build with Python 3.x (from Pavel Simerda). - improve python configuration detection to build on Fedora 22. - Fix swig and python examples for Python 3.x. - Fix for mingw compile with openssl-1.0.1i. - [bugzilla: 612] Fix create service with service.conf in present directory and auto load it. - [bugzilla: 613] Allow tab ws in var length last rdfs (in ldns str2wire). - [bugzilla: 614] Fix man page variable substitution bug. - Whitespaces after $ORIGIN are not part of the origin dname (ldns). - $TTL's value starts at position 5 (ldns). - Fix unbound-checkconf check for module config with dns64 module. - Fix unbound capsforid fallback, it ignores TTLs in comparison. - [bugzilla: 617] Fix in ldns in unbound, lowercase WKS services. - Fix ctype invocation casts. - Disabled use of SSLv3 in remote-control and ssl-upstream. - Redefine internal minievent symbols to unique symbols that helps linking on platforms where the linker leaks names across modules. - Fix bug where forward or stub addresses with same address but different port number were not tried.- fix bashisms in pre script- cleanup .spec - removed unused packes- disable %check until https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=602 is fixed- Added firewall service file- upadte to 1.4.22 - use /run for pid to clear dir-or-file-in-var-run in factory- fixed the execstartpre for unbound so we actually call unbound-anchor now.- fixed a few rpmlint warnings - added unbound-rpmlintrc: files duplicate on those man page links - changed symlink to /usr/sbin/service - improved descriptions- update to 1.4.21 merged lots of stuff from the fedora package - added python/munin/shlib/anchor subpackages - currently the package only supports systemd/bin/sh/bin/sh/bin/sh/bin/shlamb16 1539776212  !"1.5.10-4.3.11.5.10-4.3.11.5.10-4.3.1 servicesunboundconf.dexample.com.confkeys.dexample.com.keylocal.dblock-example.com.confunbound.confunboundunbound-keygen.serviceunbound.serviceunbound.confrcunboundrcunbound-keygenunboundunbound-checkconfunbound-controlunbound-control-setupunbound-hostunbound-streamtcpunboundCREDITSFEATURESLICENSEREADMEunbound-host.1.gzunbound-streamtcp.1.gzunbound.conf.5.gzunbound-checkconf.8.gzunbound-control-setup.8.gzunbound-control.8.gzunbound.8.gzsysconfig.unbound/etc/sysconfig/SuSEfirewall2.d//etc/sysconfig/SuSEfirewall2.d/services//etc/unbound//etc/unbound/conf.d//etc/unbound/keys.d//etc/unbound/local.d//run//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/unbound//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8//var/adm/fillup-templates/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8948/openSUSE_Leap_42.3_Update/1b96f89353f32b88f07e3bf25d12ed4f-unbound.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linux  directoryASCII textASCII text, with very long linesC source, ASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=dbbba76d5bc1ca0f6702ad1b48141ad1bed03406, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=1a1994fdedbdded804c45f5fcb596702cbe13362, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=a08e56cfb96007243efe473080d4c52ad84121b1, strippedPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=5290030785cce3151a89c9a13a3dfc950a8dcd51, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.0.0, BuildID[sha1]=f44437a26b799d9e9719f1bbfca42964df7833cb, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)&'.  RRRR R R R R RRRRRRRRRR R R R R RRRRRRRRRR R R RRRRRRR R R RRRRRR R R R R RRRRR;,Fn ?]"k%UY~S-*vYDV9/ gOxB);x6201su^A9ԧzQQX͐Z_HȄ"9\d@՛afQ4X|NjEcotڱ4?lQg,jf:p=˓wU=fHra4T4MIL0%oqO(>aXt{[`TR )ܞi)yX0/, {hƳٻxH2e89d!g[b[?.z*4&tHk9Xqݺ!p l=cM ' KK; ٰR4U 2EV[jZo)>?pMܪ3Q*T'Yk(`~ e-a؈iۇP2vI!DтB)zbW[SC%Zh=aҬbuWFnY_5Hb[HˀiUU/2Mϴ&?-EӦ{X@E4˙֗L5_0Ѓ_B9"X??l,ĖH8>JI*2n?ᱰ7ݴaD/⌣KU*Q;XPD6#kbP) Co`5"C`3|X: (ɖh}a$s49-w7Spz@4Y !$#VhQ`6' BBDix@>48?B]b;wVJRoB Oj ݬn9R"D lThpt|tdL7fʺ >:}*`ސsB:cH8LJoLv;Q"\F^^ F5FXٺF}}%QW1eq=bsۃԦ@|v\p㕼&&9@o1'~T[ Dy l{'\vڼ[v'BQ>yK'枍bKY295 U8|\YCu҅ ήACCL%o !K.ꛦ=9a,a/dm<ǀQz `Mڭ쉥Z}%$`t\ 1D)a\MZSUӶ:#FWy/?SIFL>M{RCJ- vZ\O UHt=HKIهdZц? *}dKwCzY躆Ã\?p󜷹dEX^U!,9\жe0"H%a4.PHH ($⎷pSlнr'+/j+rD>o2iA6o/gr?ǃGQI}(;ۢq 4OLRTc ]RAq$'&,攡`; ?m7T圓/jeHj& boJ- =WnMFz]_x9cxxOT)(l =t@_dخs"aAK%/l#Ug0[8@0ESk8 HOWV5@ SgZRa"5|Xt4B( uiu̓}l4:A5ғXb:˵ ^1cB9=剱II5DH9HT7? U+6~U@)fdvz*YDhm|UĚgBvԹJdi]^rAAHDz҂jК8 s̚rrpFiM5`u3@ =IMnX-)J>R=;Ku{3l $mLo:M_hIt= luu .+l( t_eߜM){Iu.Rou qWZqZ$q˒ZxڊVZW&BgVJH`0&]?u/(t^lp/'**Mg:,in݆ C4縖ꎍ^_dFf08ki.2_ٌPg!We"f*'6JM,aXڀ4z4{뇻Ui$淦<ػSI9"hI"ϊ{qithR4K*/&W9|.4D?RuAw]E\Nб:FL=†Lz*E:8A~ 7wZ q1Ż'ԌNiP<)){!4_|ؚ5"jh~ K=/#;{:Rhw/43G>O2VMws=[f/vRcdE6l HXeMnf={-ku 'VàWɷGa*]߀7"qL@7lz?,__oBZ7tzzf6 %@|ZY3q'Ulr/lC&]@ҙnȵJY1Ivfi*_paՅVGcW0l-@?ɑ u )ҿ$<;,ߟX=tWۺ^Y/ZQ\ΟSRa]F[m7Qt0,Tedc,=){zK"O-mx4k& +ϙ jR@ yrf0 Mf/aъOQ-QwS"OK*Hv)86r%cZG>Dz.%I}o͵FЃ/ :ܳl(>]bD/A={(ө6.aܱ3,߱zBUG@}vDŘbT"⇍X$ ]13#HЁNǩb ~GidT]O BQ(Q1,L55K(ayYkMjpomYHl'Sb^w%*z6"= A'z$wDUS  nT3t< mvǗ NW} 5'«繭7rO^ 6nt;a22g! hö?V9?uw,GLNz+_#R3.6b63.7 %wThE#kK03ĢmH:!P*†3,T%DhX}:Ϗ]H) R`R"SRrޟd|Fr?)s|loY,+L51Qpџ:S0o֭Vra^>wT2 v8&<45HiNhgfAg/G+avH-\8Fzf'}%fW)P?ڪafG^j/LߔJ)-q)j1{|iF݉( fo $T$j֎gp G6.7 '((Sp,Wn# G'ARunqU(5f$h_<^m }=w˳l.諉jRir%nP{z3Bb@3ӃBS@#H>drFWZO)|k>%SvձIgo `PTh `CT49&48{5`c )鳲[U»ԓ6{<[D!#YvpZBxH"H^\u~B|hl=au0'*p]VW'MD^sTS  --*̠BU*uSS9= 9QuB!4w oY|Z]#+2H?;VO|i\h$p~{oe|R\m-2|KOaJ&Yh7',\L=jUG.Gl-L̢@YEg !P6xDӿ= $lVDOS:[̠ԕ_ .,㞻Nxow|L>tW .[arpd:gicdا, GQwW$DbE ?1¸5tXwFT8N HG 39ĵG%Kq|i+%!@4GZVEk&\C02퍶cxQr `;t;aAAYBBoY̦t5EqѮOKK3S64olν!$7Pˎ8/H8Β-},݆E&xkZvrn`G2-+TA"FA1o]v.rgC ljY$F0]رtq_Wc<`~w VHjC1O{ E9h؉|ZGQ.ѫ(d& @oCn-UGSРS]0J*fQ }nE5MD|˸= g 8I9~hP؎@4C꯻0I!Iav;2ΜYUl9?U>B',%CL1u~ٟ4Vc⬍׃DCFؿ81IEYfEdi }=Il6ups y=rPtm_i9kj[07st^-^$G3xڒrdm|,a)̓L?ʵ/n$/7 KS %Io4V,s?%$tjχhl~0D!# # ݫj=o{9 e_\|'V{sCȬz5;a.h/\bI3֨ZǮփYԦy)N]\aG32k[7A LQ@(m!Z7N&~;̊շ Un()p^Dyhz?M%„VhG!W{Eg Px 61@=/M|v`zD?sZ>ilS >/|}FUi9~p_|) O氹GLŽJHqob h霥,F8r_#[=jU٫U,>\gM4X'h2ten$^W?Fqut Cџ[sKf5E GOx hߴ_J/ʝ{d5z(EB Q.Ah's~= )x?/1mL/L'15^ ̐u]wj7l }~a pwøqYo\HȀt4en7䬓?+3;`DNp\Ŋ8sn)r\A }̙A:|Rn2Wij&dXKEC~]xJ7 y{yKh ~tKzrЃNZ Hj7Y5wM\>]R_ոOO-𺰬%TX0sҟ&lJ5j5D3}1ߧR{%O%yb ^KoFEB9%mrL0Q}.SwPݝˈ 4rc XI;+V/_1=2 7ՁBh.b nz"}) ӉePr_ym&:I7Udexj|:!sLdU)δHsOw! E*IfRK܃C3&}F" Q:Pc/JSqf=~?J=`0 YSzEOdp暇;@9B/'λQ0TŻO\jw (d(w>~B/2_߮nhOf2eDz+ σI@ݚD)F: V:T&C{:r8%F|Ξ8S;5RB b|P,Opč{G,1R%e^[AI\帓q.~>%`S{u[R$\bJUidvjil bMpFtw)x5KCA !2qjf1[ҝUK@Od/yő h܍ 䒯JJLDH[qX*tSM~m1D^|{Ld#Dp.?&@,"oi^)ͨ/hMK1=wS7`p+ wGPt(^-'3~OAʘBr$:K.y.q_x)=ܒ\cI\K3,eFy +Q&*1+MhB ^\ CRq'_T=7hhX/ӆrmM"s+XlY?^T^ufz!@61^*<Կ~tq5r+є?ɮ M"L¸Bq?*cR %@)Ta*o#6Gfҥ2mtd:ciQ888ҩ}^,.FD;lS1c JRQR")O+=luG~l3xXPR,D=)yԌ$*M8|&q``1ƴX3㉲ KYYH^ cpUú:R(Lm"b ZP5 eًrNq!NL=E/형ޗa:*EAQLB.PhtcfxzoүE.j\LeJ^9hǠ *sGB|'*BL)LG8>r499-(Y jPǶkŐE HVMks'?{Vvi#*MP֋U QOny+2*WX{ܟO%Tb}[ْLƩaf|Bv{սEN'w0D3Lĸ>=06Rw<&FHVS.r<6p#!}3.yǞTKD,4G ZD7^ 'ug T7"1ʳeF q4AEm$qwi-7-m{j\@Ic+J $UNg\-}'/}Qac)+1:2& 9:i~E4;fw?{w6, 4E3u cBKUa@JD/љBD Jܢ d{wgW FeFrXw V{jnQM3/^ixj]Y FJjyB)=7fHmXm+Z#.K(`cw#jGr(cg['׀xflFTm;ه(o``!^]bt-a>\,6ӯ~F<;rՒ<*׹>%\?~jŪFb9z&: ±.Zi'˱5IWp]`VڒLƂq.٣푰G~?B+?z0\ `ȥn$^{ݵŨO$u;BJ6+BeFFXzU Ҷ()d F5M-vl`f'mՍ :GnLT_"uiD,} Z$J Н"9/gǖ ?%,wk1^]' E=9Ͽa=\FkgQtǞɼ8#41352:j|F{ZplU2 aN bzOo %r+wd6XQnxtx&ae69{ɜ-HPr4ƳDTmCw;0u #=zYwwQ8BWݱd0lBEw"9fZz  ]Ƙv+F0%wƄ v ts9 lO XIIw⍐ ȶ: v}֗@)SyhA/x[K;mb?i%/Jt%9QZ KBC(viEV]Q BlҤLG]GjjeA-ո$ߨX&q/3?.]}ΟsemÃUϬHͫt==j):['cCvLU!V$V>~[HBK)L*v ZV_-%nB!<㏿]eN2ܿEy̭(;Vew9\1y}BR܏C;;l]@3̐٭(BAxw:+k h.O㗤td)Ed<ϤY_^V=V%M^gu0s﷈Z C"Qe/\Ve/Q |kYm3zX{%~6n.XA`X\ S5]؋0f-UTUqTwwTwO~(@;3Ѹ 'Bu}n;] #ufś83%<>(p9$)k)~!I'Ú`abPq^VbYưiA.pv!n+R;*Ru۵t4|f_ kRo> 8y{1a[>qjJlڸ6agѼ2~; *%&86騂AKgPrr?g¤ePaw*.5?i "Ϧ_q JnL>oZςqDKS{ VvE 8i^10 Ѣ Lt䣟ghЕ?W~`XQ֕}.YZA fdm,/ 1^ λJ@V ,Ë omA2+5Var:4/dL`'.0(ԵcZì$JڡD]s՗E!, jh; Ԅk7:@gAnlUF"[g\ iXA |./RDځ+ҿs@&#EW+@qN'h{O@26M<<%̲T~l `ŲƖ6($@|кWYaōRUCi$mLt? XuMvѿIp%2w5@V5XJȄyZth*gQv*g I7MPC],hmK̺GxBXҼbn9m:NŒjGi?Jh(*{vӈC/<|#z"- piY ]>;yru|Kw'Pg#6dͫ'Lrkk 0=PЪ(Wܧqa)B!G5+Ԯ $%;v|ſX?br:2k1O 4ݐiR.BEM$Հlo4P!9 Xsl3T t~'rc]i ץIt`vz!^ N*DȂ,^fn }6#?a\ICD`!p^>riLrUm)P8+Ʃ `t%(S#B) ,$͸ȗ2܎ēx43z+Ri[` /v0*-0- KN[=κ;^8.2p3 B)*!Q*WITmF 2'][K}j߾VbzJ~ x HUtc̃B Z&۸aN}=@6Nl xUG=P^: "ð eK4/v,Ŧzxl?>{K>>'9YXFΘ8@oBY[FO?f7BB[QЧ(t=pW/;]ԧ*bi7*ᗀEE);[KTo;ɏL$6"SPVpd/[eRTSy|φ&MEkeMŠKfַvYP_2q$λ=zB+EF*#_>_\HI> _6ў \E?yC=%({7? v<)"8C9łSRr,@`U^S&Y@#5`")oZxwZ#Gie-N\̐/?c͍6ƹ~y9xm[k4R.~Er2t>'. NڷMl>Y0pu6u39 unoahԜv_2YG4=5)o vH= |V6bBIylK,zC^ C+פ%GFNxHcċ+']3r4h s}_,"R:WLlmDjSلikŞ^ni1\M W{8%mIQdXVllٟۯAp7f_fP>”e/y -QtG[J@ŷ#^w 6>Qt]^\Z xclM1:`C9{i (0g#L2'D s譄Q.AO3x ?Q@7asi36ˬoV1d3%Mia$QWD 0;H?e`0-LmE}ge/0֥+Ak\ݽd:ן_I_QkQ]criOhFq ȺW*fuuY,V$P;uܗIYvn|E%ZQ S'wHTVR%'W?!y}D1]"(vxoZ+7ayv1Pǚ?vlk׾ PN˜edI~4VLf;Շ݂ AU'U=wBl6v @z싁F%%?ԏHganFcj(G0:5#`fA!)8=߶'A&s.@TsI! tl1%yIeZ[#w|5^#{U_b.+@F۫O?C|wed*30/oRpM#@È~ͳh<-k̼a]!Hc@?eNU"-1~MD\:Ưݑ; ɐ4 kj]c"貈/K CZS "R~#aKdcx7،!{СpFۃDs |7leuZՁaH`,cu"#.U3|,&GVJqUf K#Ծj,pL,W(9g2 VJ =L2p IUURKց3*w_b aJ/kQURQk (=V ҍ$;2M8_vGPLɥ|8E.c)E:GA\uJگY:L.ǿVڡVf~M# dw*Sr[C1~eq;Al7#suuEujmm/=xp#|I!S^@FԮ1S}|8Uޫ6XuZ6ni +j=B<%rtpV61^RmZNUZ仏]I_xM |c8J$Y*A"B(CI0AYÑq@\2Ulӛt_x@~O-e%WZmԈEv0s.uxf5EyT8-ryWhMr$TUtB73]>fJYAV`a/L5T_ή{23DܤMìK킓Ea) L{a64CӴvAH;qke0t+nFI' /up֑xS;adF(Ti Ǚqt.PzVY7C(Z:Z'0rKd圄\!_ 4c,WxA  a+EA-F=e2 Gpؽۥ6^BhznQ;Cj열qSms71vNϋOcMUlOc7Kׄ}Mg;qo5WQBb+h23a/= Ԕ{=g`Ŗ7K2̼[>D7bͫ`f';!Pr5S|+=.}#Ӓ0cY{,ϻ [a'heҫ6V9Y]K5d(?!/ihvT Xl*!΅QL !Kq fSQd*FIi=(0ͥoG \FvG\W3u&~#w8qէT,! gLE"R]L,ɉ<G4`f 0Ó UYk9Gt=+QHayPʑJ./Z/yoY|![Y>=9W:^+&_]\ Z g\WŒbQR"*C$6X(H~j M X3"3*"yA|uz|@FðQJ֌F8B[)kuPt*(7!J>i PG *>q~>MQpƊ bդG4d\<^ҁśD.Ѿ9ud'09uUg51 9[3YRpLJkY9ck¤dOyARHsg{(OSo<N7*_3)1ℇkT?B("uV>x&!R6DhKB dZd)_:\ͳ ޖP_(7U.rnir}OqLZOh.H`ÖHI+-"3nNsS[P!b[pGh-g V2"QL|*/K:!wމhZ~1h0QT({^TYˠX*|yeBq{h'0BU>Z'KGfdA gwA˿;3S D \w]JF_ڃfaH&?kI|=!ɶCQ{͟Kݛ!!Y*FiC:/R}:" 4Gs~N?h3O ƓPOqS͛ ^5KFlv7"ˇN)a{ƾ{a~KX}?8 ^eH4 ev¿O2{W1r=<"qBUl XyӖ1?ݺ?}CKFO+< ځY)fk+П!>ics?q X"|> ,|H2Q=Ac-=邢Ά nĠLaتL,Rk$gFK;U2n67;E惽@A.ѹ`5 t.-Ѷ=(~@lw#/maiȓ*PcoOzU^=Ę 5 4 &iUlF1 ]\@H\2)t r?xo̻WȇOf>z$@T~LpÐ}Rx=+˽Ŏp2*aᩈFÏ<CQ0}6xE1q֦){٭Rhd<`WJk}/D# (&yʁ(@jitSk$18ue,Xa=mL~ #gNx&i)Gˌ:O0H]c59+OK=xrjG a$Z8vi-2c F۵$եeuI :7< Ǥ{8*)k%RA1/9mȮTT8F.8 Īo]m*͢+ 5=\9!Y:7JYF!?SfWKq\};$:?5ܑcOc_/\$ESL-h$dpT)}}bTw$ji(/=YA@cG_BuD@0hU0YLϢģT) I> 62H%z(z.\~iM=s6 vXZC6%*LQ/4Mb02LȀO/7&֬n=ȓGQ4i4`CkZRq'hC#N<ު2~u=bj/t G(EF"p3^&1tX6*N9T<ȬP/߅Vd׊[,NpU@T昴eS?Ӈh+s4NabV.\  onT2e["x(ZPjr"5[Hzc=y%Xͭ.cʘ+X '1%\_GGx9?:c]̫rQ YuLkNjz!4^{ǎR4k_gWz-Td /\czu3>k9/fZ62 FX^;\Q, *3ӋP&<0VYJkٕ+D6pp|GYuISޑ4xd n7!X@A+uWv8 R-x"U9/&a2cltJl DE+}zhXqjvͼ ӱ#  B4A2Xq^#d|G$v'\aQq=Ky0 <'T]ˍJkmV2Su4=Ey)NtGy:̐{$E+ \xle@!XY8ք2B&˦ =NJ*T8tfHf3>, :}6A\4`Ke>("b}gX $?0OaLz~ygOӰչS7&,UY-'cb"Og&r&1 1AqKF(&eOɮ~\vh`IotL?T=|,]V`/dIR$la! Mb󒍡O'3X}t.4X2OuTϒP.CKe-sP\LFύ1_A:u{ºU^ea,.`0غ\ K1]dc|>lɓ%>ݿ͘ŘHs8(+2\yן[jڈ,ٵ鷭$J*3>#'|J'6|]&)ol6}礑tj$WR>p˻7džX6 C_ΡK6{c^xMK*(+ZkQԏ]D>ꞛ&[Q>zI=Qv۸K2HQlI-ۺ~/^= `Kn_0Q 4_UK~ mJ]uxF_]EﮄƏI1x F2 &jz0DCb rjg*jIЌ?AUՕw DDp`po2F .~GZ pltU ELiEĸ)fώ4}1o'}<7&"`g)Rx_E}.B.\]w[?i*qi],ڨ. G-3Ҡ7w@ܐՓ!f6붶 \Nߗ꾠:;!Ty!d4|U7#u!EK(!rҧ XBfo sT81czrF-UI] |E>%lH56t=S}jH˾{@bC7ssD VmN75?`Fg-?N0K4Kc97<ӮJ0i}(a@ۛ C% `gQ0(,`(Y{~zyRBhN7m/2qc^Qw]f?ʡRcG7pZTf :YN>ލi4םaDNb7 Wl3]^N;/ |Qwjj_0y{9*i (ʁjJH"UG */ڃUmUG" P[Af7Ydc3OQk{x0Rq}}jV p (i %{fqUfV-D v!aBw%2֚4U !w0~}Hm28s%?VJiiGQ354/G`߸-hS JZgv~tRSd=#x CM*Yw/5c맫ȣ{Fpr0k$= P7jAle&{`o(KmE YjΣ43 agSq&"Q["Veљp[)יl8yBy`:O,4$5ݸ' 67H5 ֽZI`YP@i'X |&/쩙` el>af:8sxZȱi… h (4dv} zdÁy K|)k;ýg)x74Dx)yb= |u-DtU2|j1a=^{u՟kMbit->u&(M2x߿ź۱"]:1T=tO3#Fv}" O<<)TD^: ,'nt"E;G!]!aV|(lk` 46?30 Cy` hP8Cញ^/Z,ĹnX)hbXމu@m+4|[@Of|!$cn\xߢy$ !|0 ,6E@XYo! :840=~zqZTNmJPr4ÿ'C!;լUEjJ%S;d-@b{ @ln.iba9Ӳ{%/qutw;L2r 2Sy`Fiq6ٮčّ|fK6|ٜ>Y@67 [DwbId™E5f93]N&"B钞21x;51p||B1]' ob<}5!lMX̭adG[Ɠ] 1m'CgK1Q.e,&`Iڝwm,$ܣ{(>-@:b,m mٺBa4qC^!!mɉiQ;U7FjMHi"tnKWEF7<3ʥ6? (.Ƽp6?tzJB{mq@.,b \pE JyYY2- B MHס0@mQV\CDC6C"iZy՛?72K xAgv =$[3f1bR 2 X[Jv w^A`/@Ul(-KuԮJS g$IjrSm ZǮ(tO\J?p|D3?˔+OͧPqj:>i^Zclk^Or*,ro~蒉ʡ&XҞ0L+"wf|vId250BmܝQ)]g;v>pWkXk9\3r~ev}>ߒ(YEI{Hu80B 5s{&Ы52УೢB fu>(%Q*>o2@f"*οh ox+ɔG## ]־\wK] Ȁa#..)$u4=pRhK5k58t W*Żbx_bgc;X!O\ٚXZLshAj V*  }88DwqHJ+;@%nVh&@o$\`Pte[Y}N YeM쎐?+0E^*5ɒ,/"w4k' 2ܿӝ>DBYL.!\!E/=O(~khlȤ!RcϤ$0PDPtXNc{na(yS:G$y:F62' S/̔p)b81RaHrjq_5)kx}UuC݈jR&_&h 3 Kx)xqdAUl!>򯽙/rev1_Gq@sg 4;c`pBn[\P2d$2mX +96*uk˲IcijG X-\N<ځqM5yʜvl!f5p*}, ƒAiT{# vD6Mv tlS-,vdvͷ]nבZ>^ Q& ~.XWwpE;aݳ8g0d*g!8Z|c&;=4 A]` S=bHzFҨJA6twK(>bMk@^|FPl׆tLi0a ;EHhg:r`s,P^WSkϑod-V"d@{3֣l2u>X/DD7;+1/H{S":sZٵ8KŊfϝ $}gk?#)C "QǛ`{] mMgLg{q]rm [k@Gj+X ;Q ;v[)s~,&/)nט[q2ܑ̼}\% xCҬgzT{/SWb}6`ޡY%ŷc ʆoAaC mRq:=RiF;0[IpcpbS+>^o C@H+ygR]蜧=#V>5lu;r(_gtv?$l9G ^fuvx `TNqAHX={EW je"#.)4A#*UjK1k@ w]|d\+ ϛ d>:PbP6L%ǂB"tHWů[%#HV!*M 䚥BV99NJqΰG0P|u tzL{yҮ׬5ĆmkL܄e*3ܷxR-'QΫɽ  j9yX+F\bsAC֘#6)}ǫhU8A v Lk >/V, 8tȟ,D6fuy4 U[֓aao w¶Y)kuĜ6ۖvC&&,,tFċ'$yqֻo!\C t#W\$Zs|UJ=XGun帑UYYДE;AճmNfO:M'1 ނ1k%"ӆJR0P x[*eDr %!Sgbg{;F4`uiLjMZߊWwĠ+፱"ٛS%梾kMqet46]_X!VY;' Y459 °κLCiز/[6?JX-AO)(CTP(=IDcH65G$mWSMpg #S[OG:Fr;{ygJ*7# ;#34 z̰ /,V<BaHY|oG%Csy$pylZ-4iԠ[Q-ZRON Yvt݃D$ˋn*SIoRn!6d]lI O} IK}BXW[2fQdž-&M\î63LGƒg?S@hD=zGS`GJ\dڮ*׊+_q3djV< awBc.85ݾ.Y)(+6CIfl!mHΰZ[LY6" fU9 ~i "r^0qD0ȬIzo4)ˤMyCrew##w0>!C Dȩa5ӹI$,+0{Q,P8F<wxzO}$OH"U^!2$O<&wG\ATYz@ec{P!S9jTYeL]U]0kƐ"'B]΁.px+COU [2ΜNc{.j8CY-U0qDN+03aMr#Qj=9S~r!~E ]WO%m-ϼCFU^ nS1B,SXutG}kIֽbLzEך&Lc~@YN^pzISE$KÑZ[cR낯M1VR:o) T3M4-`(֤$\{ QBHi"X{rP]+JrbY~FQ5(PPkc$KZ74 tнE:iX_~ऄ)v5 \=4a*=QhxMg^.0LjʫLޜ0z_@y338u$ҝ,s;+*&t Лlp [";<\HC:[fOIN_+= TG{i)SC?NHŀ?g^ 6gIdR nee^bA">my^s0vS1߱P>^c 69WN}Ktf - E& , d)4gexVSZ7}ɊoR ,=c˚E{9W0LO_=.Sㄾ\,LqxlIc*mZ.bCB 0Zۡ{o"ފnlg Ƭ}A*cv!NtL 鵶do:;[$a 0.a5vSx*TfΟb۝iy<_T5Ȟq#p LWz =XQ#VBSf+dXFG!XyXP+u=RX68s74Y>óJQ1len&rI/b1P8$"{!'6)63/ˮC8

vhzKE#Gr¹Jd `c{DބIBG2T|s ^'EX(-\!p  m%R/Pezw N8)Dy0{Vא-b^ĊLgvGڈs?M6e٫z9 (K{kf8T\d%3 I3\W6ѪMge6Ѯ}†pŦH+wc>!]4nPۥ}=ik0:#¥q:j0L ʬgPt{|i}I1 !rc.fv`-V 3w{y8Br ;)! 7E:Yߊd-s0wfbRS>ФW(& |8).ۄ f"ͧS|L{:M7 09{ý| q=6ХՔ#N! u{X8{熭4ȰHכf!? H74(N$"0<V睋iM!^1bՃk]5zxe:07ZK2+ X^ M>V_v *7{awY(6.h=?NA!5 9GISa?i΂S.wMH=g_r 2*Ӭpkh| 4Mͷ"ʃ(6@YPܯ&=IFzcVP\ e/3Wq, m Uljjڎ7 w9*H*d\&\885?~~;D ֝f4h'7eW:$44^EM0ƴT'd(㑫 Q?κ8bͧKR`Q&XsHMוdp!|OYsʚCgԟU mD"*3Μu@'ZmfQBtM鋜t`0 N@ρBEʚj ,(4tإYF;iPF]BFx#CsFz(cg;Y_lG{Yۂ(2MSz^?xs(II |F* ߕJalsI K` <(n_M{783 ~3dӛISV'N42aQ=7.u⃮*jW*jYtBހ8837ctcbu"zyD :Vdw@Za›ױvhӸ[[C-+JI=M<舔 Ϣd _?LqM:3?3efXKt皟C')\# @~왟~s{ 4xzdc'M_֪bTL1g%H񲰻-:;{&BMj6)O!8[B[cz1pkVtq޵uxEm~R^L Ewm1o ./@ u1YOtdaAl Wi< ܪlѼe~\48lM7MN((+StBaCI :4#񠛹j1mv6Pѽ^(Jz :* nw6 OP!Ftb0vwtJHj^  'ˀd ˆ%k !4cpWchS#q|˒I 蓅9dsΠco&t3K'3TvyZ ͖9a\l'W{O>d Pu:s3j"!xx!ii[($.$62h#| c $sKn| c#Ҳ§4N2 4I=ѠUrCORy ߁-픀H ]%畍sTdv\vB9.|={D2r/yC],fdiڴ<`\`B¿t+>U m|?DUGYh=b%R|ho\`vY冬1lADZYA@QMZB!bj&KAwvb0Z!01MHnPSکC1מtIۻ}ͥgW "?ult<4XƓ&9E  ^K-l65~v2RrkL#oHW08'syfaFmP8'}fbԘF|7y͗[TX(lN/^̯ĢԎ U:-Ə`d$]u7<DZćM-ѡ&?h8!*ƩPi S9:_b'l2I֛?WBHBr։k#,K@ c!Bbƻ[~H 57 H maS-vF Pv[n6%[7AT\'e_0֫bYV8=@D\ܠ">EjH0 "DLnV\L?2'twrhhÿgDQ>-R8x6*Nc&7y:E€ϣD?ſGajm.eQ>H-2ՃB!چ/-y52x>&eaJmX$uONyIH_#wXzJ93 \- 'SBm ~}'`iLk(um"%2`馺/~"|W!+1֗@+,1#_#ZuX&M 3L 5.\#fߤgD,JS=şIXՙXܞؔ VG0׉GT> D {ӄ(S{t% I-6 sD]OSx׸'"BF܅5".KoW1 B@xz<<c qpC5U&u/>-G`$hLUV*yY7<|>2ݲbt :Gm9B$<!*h7]j|Jυ"rhOrli@pc~M+Ї Ӟwݮ"padI@Hȋ\UechZcnبC*?NO&D4{ m# ~N{~/6sEB§5+I.i^fՓyD9*-]CS]u8_2 mwrDggD؞7*mi.·Q &u'E`h )=,G~D d"] 0 Bʥ_ Id6VG`E]n[v805K bט(T6G|y@ҿi@.9')sQq zE6QM&msL}[oѠ{@n!h-+@ii86NzrzPl<)l$/ ǘ,(Vą.r8ekWczA/]1}tV^DYG\CԨ _M.ruPlO+S$\dqD!:P)?VԍK䴡NcIm 5@߼>轋bBykDVc]g\1$b JQKԠm+ W]|כMFer YfF⿞s!Aj3ȟ%x-Ochpo^Дy R6q{ἝMURd>ƥ 41+# u:Vg/5OA%p[P6Rwf?^#9Z/ ZȈ hEtvӖ7e>{D3zhذYJV\C{/.  .q$~q 2nGZ1]ت a$w|^ j/g-ڏKj9o%7)w oznbgXwU :7jĠX(ܙo}T]i{75Cޔ !ԯX垑npטPG3&^"UndBjs3)kY]Da(coN,?N ޣbd.J͘85%a03.D\y^KR=b^6wƽx Dwo_{ O'e9ayF=9P"+>szF8a ;p6ilD&]t1$ B=gg6+BXwY^_I>;#k,:\  9 wz"t+ӤeeH\&m[/rl7j JIgLvK)+i䬅3ty Q'W|i)LZ2R%xZQ9\*(v`XxVμ= 7%;3#gZsnV4$ N ~>R<Yz(x#' ;@rt ٻ1PBˎÛC77hF/$Ԋޞ&|nDSR.BqgDZ_,Fl LUre4p?m  &ն鹟.$ "٬E/JSS<^ |. ̺?1Ft,~'P=WYj-믰onoj#dJjF?%->gõb7YlWg9{1$ 6T!еXOMRvμq,~14'=#D z`{ _*,~Q,j#2\Q:0ZTq뇵ڳ( O^,7Ps'0KK[E7||&rTG-u2PFh51,c#Tnky qS1 W?h}MfBjbkY[Q@ch^ PURՐN~`VbiB@"qK׈|eLhq'r;VD`%V8Z?aͪ "baqOr{ rmԝ#ʪ >Iqu0,5|Q#2RvɁ0Ӫqpꖐm-~Ņ^d F;Y#FnuTGG^=X̾f zԡu~Tmv^6Sl)a)\i=RCs0,k(]&Їcq81N`W g["nⲱa7MP( D0|aBv+9?[S03kd*/:.vˍr֘,#k)l!(ɶ>gABmjIG 1[*C`gm'[kPWA64bÒIH)ht:;^?[1 p|*vrHԽ]UMe"qኈsO0Bt%neFXبT 2CG[6*JƟMcddupHDQV(^RU0'R􆬚L"h4ޝqI7W!?RMj qos5?| fo3:@n:% @#˶<U[%]o-k+l6`]RnwWehm+4gT)cofewL\@h7;!eXŵ+D~2&|褄_7Dj _!.m>'˺%`uidYmm8yͳ(V0 >|06KՐq%tҕZɪ'{&[h3!<އ.\&ZmHi=*IEDkƙᛕi0#p߆+\HFb:fjq1/Ztė DS$ vprB|3L- Jfڨ6TqM4 &w;4te&e%$f"fZ@$o*A /zU/CΛ!c'q<#战>V %mU )&ߕ,&e3mm x1eqL0~bw;rMūsS=*.}B?2И9ux@HqNd8!G/9$4zȏ1 f/6L v#cL_ ЫH|.~Kt{M k>=Nœz;+~ր.v-yﻱ hGG~[hɞi R H1^nwqyڱz]6iW3rಇ^b]4;{A]KMy u!e)}|2I1jsbj#-/.hoh%1`l+n6I-%!%&S5xrk>giuY\?o9Ѡ+iAeS ;t' YRVg1\a:{&6kGi=T+};,04 3lSydbI r%bVD9V.'?qOpdҞ {8EK4A"5@aH-|/3ڡ` Dg:u5`9xYD6 l^.6`2R!Ln[1!=l0G}Gg'սchMᢗG@Gahnmdbec;fJ+%_8~ƜEP23HAm'Ҵn}!#1B'SU/Z2̈&S#,fvžr="V3aUEW^!HUd S0_ы=56V%PCɥ%/rNuXhD5ԿBtjLژ"hm_q11-!E Sf2TW\[2iܻl5loϔ%U"Lx2B#)X#ZWjwhJ^Zӌ4ߑoOa7%ԁGnBb'mKid{(M`AiVEGs]RɞQrM}) ~9-zh}e{c*Za%"ƭFZ9&ǒ)[u#/wӋ;ʕMTPڄ >X{]"%n:PxNj~zL!G!  w'"ga8]@F2/uFvX7g촴~z '<$ծAMpXƓ5=1 Ĝ.15 ~S1MW4+d &8az3u/]%QB$&ܟ t7 L+TSNkI ֜xS$ xM'!,%{B񔍩dGJ 9eX$X-A)'h q޶njPơ t+O6R1u kBs80zs/t1@!/u>^lPK42DnM;ۘ9(?W2sYt2璁HG2Q=6ͱ:[0[c|Tdwu tvv/ 7o: Cxòcq4@Ullj4Z Cs'N e5d.g7XpH= l@Q .Mg>:IiոSuS^.BGW>U S 8_؄WJwm 9WA96O8ᮔ8d X vbRԚhlo[P|'E"qO'K<:P'MC~!gU#W^%W~nrajTLBn<aU ֹChFY)рt!ln o;?ÛEV<} N-,~KxNp`#\q0`uxf\ psJwcJY $=;i0OG,5QA :FjǨ  w mFix6s vxӣVu_tG'B“ûj 0Ҷ5L=-ifB{[ ):/ݖgv~`c^ ; N·nUxԁ(i}8/6v;m*! lRBKV8qG;E֤XZb-[9s-iEk 1>{8+4|ЇmA9 dgG<a$XZD]98$H7hb8EXL^?,J1!,F1x3P,8q2j? $udkpLH$MS2'w;Q|"~alif# ބ,L)ˠ ŲyO:cض(Ih^0,HOtփХ=ZuV yDc5!&zȴ/th&wٷ'lvJh>d>}y/{&0 !2^JǑ-Sp^ěJiԽ†zZy(1㌐zfBC$.3ߣs왍o9Ӑ3GJvb/]rXG◤k~mah{EԒ$ }S Ƃw2l_ 8YѬg:9b)!Vm<?O /Gv*5}yyK Mw[;{>"LS5{>yC8'X(ڊ~{DT1܂l arUד5ttfǚqǵޑPH2~9GNUMep=`<`ZfA9\y~Kʖ 1Зbolݷ9rXIѩCN@]1S5O f3-/芊LEa@ǙxC}VC3T 3Y iWhQR{&eiWǤ¬ 1YdYp=.:9mܠM*,pTk8ꏔj=|y+E~ŮR@y:gif<;BTmn7"䶨gcrbƂ;_KP:D U z;Px oggRcə (]v>q(T6P$WBUOJ=ˎ%t52c7ƷuXf?fb9P1~m9<`qiDŽ_ }W˞wBee?ߍzȃl΍NR=GuJ ʹf JXOP*y4 /i V*_(ą7JCbh;iqP5$!!@qlQA(İ?pqRO ym!almxWrP}=Ƚ0{S hqz4ћy="2[e%9RixjC3#~K^Ew76TvAr銢$P[KXG;KB'6J즿p`$̉:/$$j)0z7=䔊qb&Ȼo]rA]bݺMez{%X~ꭑ$r@S kcn[Lx|ID aP-lEk}r OdQr jq/KLު#:!L)-&pdPV럼f8A; :Y#a"(N9:.ӻ\+X\!U$ٝF7y<'Idmmf\v7?hR%}"iYgސ܋ f^dMɓOZzn7PĂ6o1#3Yq͕3F_^gd #&Vwq.SQ? {jIDR@i|n ŋYAqHi.+J") լFXzdcތ~PF-KMծC*3EEldcmzKqݢ/: 3S~;TU mb {Å*:~Z9-\UuҼIEǂB0=`M#]-/vfE@䚍9e)_SyR2ޅA ߬_ea(7}oCC<|(GB#hsG꽰, 6wD'FCb}iGRNYiSlxk"eLz)q07 ;9so;U`^=sU .Qhk^,@YjH;1Wz# Ƽ5cŋ:שz ܇P! Pqo۷ΧH+2&9^sZI2#9QA`q 9%%9ieR 5灬Vqv s̅P/)/g3IM4%Y̬-~ ٴ9cv$HЪaZ+ZΝ F8E%Jt~eE K:FT/MD`q .t3 ynŊf`ow0YrզMd=KIZ3gӱhϲPN9"BO˴(8EGГH.Uq;+6RBK ~y8苜ɑhF<., sx%}0iH7$b; Il0iinGjw솔7{\9*Ovp L1Rm.gXȺt3e.IVܱ\v:ID" ANN>ޣPYtmZ`^7E |tR%ҺBԣ<40rK62 nqꘈ[M,SHbG X+ 82)yA%$Bbߙ1.N`cIbGxjdـq"dINy1Q{T'q1b^g=EV W쭳Ҥ&L !24yLYkw%If'(nXmIka 6,WZUw ˻ϝzgZQT3#:wx= Xl$ֲB?6eZ5X !HE&3"v^f)Ʃ^J@8}[hAחyY-7`&ezf3 .ʽ|ٕ7l5bn\M ry VEB$)qOgroy-߸ #i1|`},4Ї2ێ!d  BV+RwIJݠe#̤U#;Z9gmFc>2 Qy"LN Pu.pmw+j ?θ 44)>2]Cf.>[  6Yi`@ǺuNV{|OR#־0^@lF|Uic턙b_{D9;ӯcHt0m]Oh#,)92?v~ LAөJmmaӲ_FvJԵ&qఎRY&!l1sv[Zz͈5g㼽mJs?Z t;p_VrY7Ej͇yX_F3 KE 9ۆQ^Yz% y+MLX'8$|8FODrezNA !5ZhG(%1Si0Uд?l# >üڛU;>@,#%jD\_OT)qjA勮6Oݸ̒5wBg\LuƎ f/+zdH%dI1(+̀a%C؟i+&tGsz!mv\j 4_@aph.1HbEP@20~xbt$ ]j[=pXR ^j+(@L, (*L \XW m ugg#"K x}"GF",ҝtDo# 0 ~BA $jAԂ!cEϚ;ՆEMAHi}݁z9`OG鴃VAF(X*X|>^ʶ o?ܶneGqV1v/ ܥbyBXS3S'Qa`4:9׽w l{Q WYs$I`skO 6,kaBrќ_;JPCu*G]$ghjNuK\.Zb{8V<^piyw#M^ ;`wOX@;'#lSX n#5H`ǝeDOǵ6:@Z2} j)v'MܼbUՊ4z=eB&I}ߤ8ΩsK^DO XVr.A'W=2EoTJ "8Y+!cF~Aã-Si}m v(ۥO-{7= N?Yz+C^L &)E޹8j|+Oe_GdUX tItU R ~k>7♞no_葻o%iޠDJ:eJ5zN(Ѝ>1i]ትBŚ4<ݢiDHA.q( ('K3KPc ã>Sr!xp*Fa O诠)/|#2ܤk3%5v#ŠrԌ vXI 5]:B0_0=C+Jda7Lnlҵנ-Ͽ{8X?\-l0l挵rƑrY^WS(@q\Y%>I#?2D9ȖfT3qc)(&dbs$G`# J_l|#ifK*s2.sŽV==D3&eIh疍ocᑣ`kǽ:ʬ/r *Uf \<{c̨o;M3 _K_H]ލe7K{goݟ2c1c`2(hbvi} EWW@#dA7G*=V6sKgvCd:(7w| {s@p[Q.ə ,_f.t#ly1A<)Q .. 5Ws 9D'9pzA Q0YZ YIFyD-{\ޅ.AlhtT٪rњFk{ܔh6@inaw\eM}ڑ};|c$Qךf!?Ǩ#qu5糷YNybZrFιM)lÜ voy+Ytp E[)5E'e.mF7P/lLM%(BmC|AO#Eh ,h^%x7yěCsJ6\\^eRVK .{4 ]N 3u0[%wհvsS|o_V"DaG0 ާ0 G *Sv @Qz}F}TgeokVHma v*rWG^S(AfH|Ed{05(ǫLr)Fٳ$a±vUS$NגÕ@yfʣciJ{{O4rڔpƁݢ, 5wu;IpUŽCIsͦ|ט5 6̻şLaZS^ hh(l}4'ҽ(^rfʳu܇l&|-:@ ̄q#+e^Z@{< o"s+c߷pI]Y1PAYj'.Xc܇j6AY^>pCS=o;${_+.r~.<0  Gt-<(}|C:!e/O?*S{5 E{ۅ+k ;;Bc]3ڡ[O:ŐArIœ- agH+]lhɜQ>,B^ND8ϡI$X3Q2_ܣ. uWʱ4;ښ'5ό( l>4#ٷUO. D=oh2D=^8eXEe\J M'D`])A&PYX 7(3nZfUΕj0sCFpDD#25C~IaόwZ dsN"dʶEÌtyg@Dv mۢbי mv~T1`' `Far?݈\1X,^Q[.;ȳO; roUGtCEz+L% M ,\n & vrR'v 9aKl%g Z2H*M%v+$T*7Up]]m-9"Jz !Y_<3L)UG<$+DQr nj*%YPgR .ؿllpR \1XM SHzTحƒ>.9qWIa譇z`Rn!4} 0r#`ڃs*B/trjrdLf^ gO{f|sx$aփa`4m'@O3J@uxaIlmy}4U-҉}V!1w5LV_VH2{ĻtX0z [w2R^3RfGxͲ)2 5zy 3# x \[Z-,AiEMgB&yjPR~ב@!2+=1Au,m |F1q6|};pK!`Zeٮx9-2VLi@OzpݲnKd%G֡pu 80H7"w%jTnՠOoJh*/3oUH^br3[WK[")aQe4Ec0 $%K QNnu0=d L5| NT%Y 5:6b>=$,*o(L C{6YP8sezZwu/e 8<9 :9[`飸zM:c4wl5ؕ"7ڻm֤2H&Zfp]TW8,Ҥ20L.({֨pޔUz#z#R_A1*ZSlV mߤu9+6S޿/d3湎Z*Fo Dt IG_®7~}qAX$:l_ OyS.Ky1J^Y)>4},3 YىVvR'VLL5) H-iwWaD`̤;a3>ܖSnm0%M$U ޑ#LR"/ 5hMuX1UZavpCa"X^_";4O%ֈY :UМևT;OACCU!S#ϯskbn 8p PJ Fde#:=~41$~Zپ-Xnv8xJ^%XȖʼ RDӓT' .w 7Xٷ~&+?*C/أp97C0ӊiZpb%@ aN 9Df5nJ ~qE}޸㮩pP1)A)wA{DF\u(4:~(tO$[R j[XzP}zVj$?1)DYoj'+$gS|1B-1čSN-3"Q<;amjS8e g\:H KyxY\q!2XRx0'L ʨw= 31׃xmU{>pMV6\]̋tܛf9E!%p84r:&BL Z}[s2\%[{ϼ>CJ{LVJ5Y>rQi'emʍ$],躬1klOĭuJu_%u`ګ<&*7dtmʵ UTr;OcpjDocTڿ kf.xPYmx'7Qps2Wgu"^pGfD9Q[6t璁lq~+]c3n5z+߼%[f4HHվ$O]Wf2ʹ`DYT*<nEG]:!eIwVTή.1!_"G/Nc)O*x5/UϞ`"=xqpgfF*Lp>[,O"^"]=jꡋwrnt%$Nj{ܝ~g*xjD˥0KCL%>ʙ0g%wUJB /Qu;ɥ&^A~˕j,oi` ،S'd[5ǨѪ1&CV>ɯ<ڤ0#/Qg"?aQhSElB3ZP֎4GmXN@X B.]H> {8bmR<ҌZL2 .L^~k+__cm"ᔕQ6?|dpkNO1=|SVz9v+-JV[:Mh֗ܣ[R33@_2 0;%Տvǧ  /+cdyXWSEdeY_̝b@5m4 Ufc{O;]٦F^W͘514($pOⱚ`_ TgP&+c/D_E4T.;Xo`o5x¸ 3 ƅBIVR4s~rdt8dr=;ubC//]TYЙ$GO>PCMol"7ż R~JP4$)QVO5ƾRFU1"!j.;hലniׯHqO8(nlJ9_>Mq` _WxYE'rA aW˘hK"%f L^ǃs;q٪XyYjR4*"7ɮDw7_>BM<0n4xŝ@nf3r579yoP%|ܙuJacmfZI!Ǟ f``+ ݦ-ljsWK.?X%g숻3auڲf8" `6+RX@yK34kԱ0"l;e)ԗ=Nx+4Q}EM~!"H3Q?ߜgU2IkK0wT&۱F?v9Yt|ڜhR h='Wȹ,JLZ ^\˯zٔ C)'ZG By(ڞ5IdlQ+/\){im.Kž/0&%Vl4ASyϺ6lTOy>Դ 9GzSXӲ}nœ61HG[Un>|*aW3"n|? -a;*ƦOC@RhA؂0bA&_1hao~p"t΅DmطW>VKDװ4;Mw`?^k[y}lh]d@.܀.V \8Uj'JXT<?QY+pI΅o2$#rkO\&)L4pi/閫C=Zkoq8oV\8K,QoNF霉>2}V#mzW!"QHV/34FtƏ$c&! :iC 2ؑ aRA/ECe+~{À72'gr6fE$s-s6~gۤ{N|ױk@'qCH k 3ee&]XpQCTm|^h8.Iq!9pR4JZ`dN@n@B4 nNWm{Qt#'mu [TSxjoWЎ &ykLvr=kYbwdsB1=?j:MX#sp,6w?W&舩Ć[?U8d?)$9t[ ((kC)_16/=L4}:'"bg>qlKސ* C( vN-ĭXR;_{OɇXmFR atJHMK&ã梻]3t}uvpPpf?f5#rLb$ ڋޭW`n(䷻crñZXqu +RfŢ٪#x Ws]+PT'sSXCN!KlhsHQW ˯V$:Bao c>,1kG=dt@!NyNZܒ5YWNG*Bw1vR?=_<Ɯ(ZO՛MV=GcmydڂlA{7Y XsYIO#zz}e,q+z|Nq2.۟|B#`~j3>WbG7׏تmo!vizn(5PC(?pE$u.8}m;Tp> k}էi·%z&/p]%Dnq aG[xZ6m^f7,j3&wY=< 8ai_|=N_ʴYJERv$X !XֵB@zX1Hrʏ ^zJO΀BWg-m,vͽ4mÑ.ӆlz1&ō'%bCý$ L % ejĖ@kg)da k+XdPMغ!"v,_avCG‘"U3+:A>""3?F wpMqiLx<07{wn2tXiR)}lMM,_~whbԣ:Sͱz!?'#3J90q M ? (aYfyDV VEw;6|݆W-U0uAN\KsRmD 5׋KX=}ud^Z-]w}Dנݽ$v2Ock lY-$6Nm\Fdۆ-RM.~17AfB);Ԣj"WѰlɠL" #o׽YZ*x\>\9.vj5{)fMb--O2F4ψb1~ lyMGf@:MqDEb&a/g6A/KE*kK4x zul1usIL|!އwA5/W{h*ʫ^g>e`‹5HC*'~K' 4pZgZ`]\;ꊵt97O2YȓdijMKf8\(0~,z=o觱~<>F0UO-'r2uoI8}1a%`"KM>)<-#]WJH?#]4{gM?Q5!$ A z&S"^NCgc{2xQк BmUdnI#_M,HEK۵I<7Lң[ 㛧w尶Vic@ ;e} ݩpVYƉc /|o,4 %,J[:7D&#] ~cu  HuQ>GNJ֛M)2{3P'^5(p ǐ#VE`>~4)|c>%$JܹSIJڔ4Q/A$?GWG-R:Iӄq:~DZK`#a8a8@h 7h 2*2D/K2ҖZ"X2E7<} 2\L#tS;|wvX =gxN;{͠j0sbq]&2|B%+_lLa*ut塷=j[VNea0@wkq,Jʒ3˥$#=f9p(\[]z%P=ݫNfe@6&c4rS/}7J]rd:pAǶ~H1k]_MP2\ ҹ HAv-w;L,\$ΔC Zh, Maa+5"~)![$J'VCBd"6XMZ* f 1vExD+ݠB꥾p)TzaxYuFtsDYtAC̈́ "PznFM/Aj+s0;;ǘGEfOk>Kb@̠ZVomc@FtF_i Y fPs /b2yul@z~*3н07r[U;үm82tE[r <VrY/}n[s1MB8%o5&{fMC&c1O7qYԼH JwN iH&^g>x:݉\2X#S'xN+4¾9:}GOӾ,#j!:̡O6m6-RR$ItvhYg7pvbnb3S~w2pߨ 076"sǟs~\iTEt?U\ x-+I7Fz dhYѴq*F$oB%*鏏4D\;*ׁ.F| G6?QJ}be3%PqfE>]a{fET8)#5d.W:>W\H#3O" 5sՐ#*7HZp|̯V, KE.'M 9HAn49 AפD`/{WeȨ~Vg<7"Im ?,5bRk3 |֙iz|]p^xb&NnrǑ@Y4%x5*sӇlJj4&sN#$/H$9ҟ("*Fm!48;(wU8.c6& E=I9*T;]D8ܳKHĬGڷFnZ/q5D.4)6H;5.Z,DAO2h<#+t!݂8W`֯FfKvΏwYUuF!0oPiΠK|ơvs? X9`YУW `'d[Q_/޹-a @iC ] u'[*t pv׊o`v lO)SG_kro/ mgmT sJ'C+SS,%HlUa}lދUy jŧ 75:1ʒoX'G/`գ3A2|dhy n64SG*2ɵ0ki-cz6F+er+ _ieIKZFdvN~LoՇ jɯ|B=#XJgL'IhV# +u oҦzжr>ͼywQd0'vևOJn}` go gym)r ?֯QtGʁb(*Ј/r Jp/UЀӱo9GzàJʹ)x49@K*E݀`Xa3g2.>Kp>rd ]hZSGR<_7 ^@%1C[^hQZQ,OJi-+~TeI,3gc&)Gӳ-D~ǟ~"6<. n B9sy##;FNo-NOR9Bucу`\ S2pNCJ5 F .=%g۲KT{ ?,lj& A+K[ҮMoWQ~qdax΢\>] ;!C)yx %Z? B5PBюjJbRC4z2KQ#pw,tˋ٧?84I 6F{"9vk]2k+c2\f׋ ErsDM%U}:5׹)y%!L2pqvˀ L60BDžM );MtOE yK|,"Bu AKNL*HR=1<2G yJS=˕o iEE_*C9.&Ng58S9"^|k%ⴋWvɎTrw&l  ЪVlU'C ٬!>h$ Oo9Ҧ`$d3c \I0 rI/ss& F0OL` V7<0nܰ 2:0P.i?ls>~]Y]i׳ 4 g&m&ټ3A!1C;VY}rs4]K H64yK9F[>VϮ|'Zٵ͗->*r/@AZ Ό΂3cKnE#}pyD/W c6'>Xԗh\vkIg[Bsnp,?t 2~/!k;bhXkytG>g(CRQG8J;7^VʼnQ/י;UÙ7z=(uFT՛4cZkU ZJbkv>9uhuS=l6(>;EܽqxxU%xfSS.Kx2Z>5rI] sF(ypB Ɛv([SOU'0 VhI7 Q]F\oڦZ6^mzKO 3/ߩ%lf{4Wn)e<3NV *TlOjPq<'"Jxkq)r t-טJ>ŪC҅5Ggz͓"lZU&yd@sį&y",d3f!>FZC?cy90+;߆"@s+Kܯ>MW4'9@Hg 3"'`zO3G`䇧ub-S<"~+5@^<Vbb@+ѧ9{U ~ZuQ>d撊1%CUhV" Tk!v8J_Y+|o|sFu]do Kz { eH0JB;<a^”N65&ӏ% wFT6 ސezEq2P _} 0aSm.?b3^y^{CYVF|h48c$b~d2+i;V}_b,el^l*t?ӡ_ v(_ n #:weM|Ţ*]GFJvh 1| . ms)6^\Z o]:yC0Y=]a=N&ȓd80~V(Ὣ/Odm蟚m}+LӔZg8uE +;)Y2Ao=WB-Lxa )jh+[؋y ĕ8A<9L_ $&<;8,^^l\dy:bL]s0sX2̖+")?k.?X'<Lj5=DjVP5 s <7g)9,hvPp[k'| 44Vt[eP*{Ll9Oe .` jz{wldC qЩ,.e%&83n&lB/MU{ߙ_㪹2Shfۧz֡} ubzZ}Uv"pu:52K9lf*R=^*>Tq̯IVPk*J$]fG!C.4Srnl&puJ)$dirw*Vsx m{c&߀s#uMr37S#鋶 ER-}c&U h{V9vo_{m!" 7e][OW2fio4e#EP!Z~EC sWptvM. :Qb7_N*'cd$BRA+)9EƏ&D#:IeÑ`#1\"P#k &S3qڙE~?Iٛcyv8r|94HCcG>4NFI}P 7RL]<č4MB rdkk-UiaJefq?_f]IC0mGidGfD:$2EܮZ:( !lϑ$6Y5(P\Kp~\ҏ|+ M柺詩WKN:L2+l*.6lRP\srvbUL MMFK%\@yGBq6AwW'34;ܜ_зÏMa93pOX> Ǚu,{Ê\K1 SrqP2Eщ5[V() >SLsW}kB}EdgdM1%a8-0Sq=Z0xo瘥4v:̱&|] U7C;v@hCۧ^LޘFH|GpH%5VQnXn?+$b$q)$2^B&Mv!'H2PxXISͰ$B`*k{$SKK_^B{)ox@g{>Vξ7K5C}T+MP$,,N[di)гUai8ve_%Ry] I?XkM^UI#_ټSɥ1\|%'û0SmusEkXzEK{rt*v=c23om~a&\ p%l*7/E(QuKFLۚKǺ+( Łg(z)Hs,N~<#Oެ_}dlkSlȕ-&k̭ǿzHxہ4KˍAx C\p!. 53]K҄`;@;R )pp  R׷mGe4ղ^W~b?1 J5}#h;aBRƁ=yTͻ4sޒkN>;OeP/[ ._| =J"іYI=)4 cpe( B,GtYT6+^mrN|hsx1?Fsw'=YBYWbzZ(~4kXQ] }͌#]x2ڲDO8X$T". G|uԕaUF ۺ }IXm~q~al#ʣYe]}f|ÁՒ7yfCzsXE/ FeCXحI)&]$Z)"_[@φhq7 w|pDyG/1RTK P1QPvÔ,{/K#݈`_)Z(/ՍSDA,LJIuT'v97Ԅ!n).p'"4&IKj툰X xPO 9Dfn|E_*I ʄ"->QDk՘C1* /Hd]=U_>]H|T3Ne~:x}3k.=<(B8u8mˇ$p|G e8Hfb~dL)b̸(TƸ-^Q X:vW爋nVO&V؟Tc r-4*!ĸ_" ͯ;:Y.Bt4뾤2\a.|M6srIӁBpb \SIt%|r\P,~; PwwKE ƕ#J<>R/ϼ.qJ:Z /U m{5hB@Djȱ؇V%mkI2YiBPfӠyP#>a# |5ƍk5)5yLo,?,m`Z}iT@OdZDXR*t+YP HHZxTĻ;2[ʪ"pں7WLg&3){o:=6샹ǻcx)g]BBz ֤ |3֪g-2<+͓FjFݩ@-=w)nxa2_,-A~jB_=|MbLε#bǏܚU}<ǹ:3((Xyw-^0Mۀ-F~ͶWY ,*7bwt̠}S#Um/ ٚl[;HrB'ǾTldr+j>ߑ*_3n +=ܪyow:EtoOj.;9qZm~#axFG5&^ s.5 C}8G77ܚ黆ku9GddbvhYHY2]Pyj}tK4PsM^dhNw$"}8QL xK -N}Q&MVLUU+k)䰏dalQ^a= k@Zq~~ }~K)K)v!* D8M+XOUBQhA¡R1DV(owm}>iMC_Du,5&+^!w3yKtG[-~6MoN9'' yM&xS6E۹!y, fehqtːTxP )DCu]T@#ho+5H D"VPgkKnA :%wuN;뫡2a{u(e 䐶Ekx ;FS~eeGF͗ya_l8`߰2!1f쮂/ ztӘ`„PϜܪ9rh#2v!?t<7ߒ;[of0I+h2_,N!|ǩӜg`cel,z9Y:`R+қ( Iw7hxъD N%wlf>xS^\9q{ [ܥڑSx`V;Wd)5Zѥ0NMeGXyk&]E97b~Rp4l;{tBEo{Պ!LpD^QgT,kI̿{3cZˡ216wq\Q#(ݍv 'VqcrѴ+i]Z;qv!$At!IĠrKN>p5RBÆ?um['K f`*IoyIs ,wΖ_wc [$="bHmEj m!™:)_fx>VdTZђC&{.Z'kGl!^:XBnwoiʟ_{C~ޒ/N~i~?~'Z>K_jfjwnG>) .3Qȯ9bD!P F{aPr1(}йqkyVl9r + 3 l0&8Dpu/{wVw>DYPHbJz %B ,Vq\hBzLa "di*zU,Y~ ~dEe u7kt5(s렦yBr+վۤB]+izGEyl܊m6 ԋ7,Me4ǒ!+4+ilDmb{7FoϻOlZ0=@4w|mF)6i6*'GSKl+ D?[bg yG]̥o;q5!\;Tg8 \}؊!)_\qqCö2u{ g?@ϡɃ@00&K)4 ӽ1:Q fIQF:EHeX{(gv^#1=df=l]g,۹ZC3 MyQ)4#bw)R;¼8O:1^J^ ` (= GMJI-KePQ` < m4 ls;kBfd$ 265j>2+K1cޒoYV4;8H#+82`5ޤ{Ϯ-jfX^bv;ڌ?8 NXHt&a5*h%[P*ǃCTphOuZ mV5PqsocDɺWH%ńenn+ A U~?Ӽ=#~2D}6nQ*>t=~ D뭋|m+7rOӤA3aB Tx)|w@IԂWuK1A>xlLKOiC>=rFR_Ͷq4~\hć^h$]X2Ÿ@?(gާUCCwAٖd]k#N;9;7ߋ֏~D'Ã_j)١RlQ} d$^ Hl}&ѻT>6mIsNꊭEc| ڊpb*4ġvag^aqnP=ZɀhTb1]zt-&>J`iӍ7,:F{IF(4aϏ2mU ѹᛃTn(4 ;Wri!(+hY(ŪQ0?HPI|KsWUl.^Q?Kٖ0g3(j2eEe x>WnCJ2c)MT3[ޗ: &q?1dVwn#/!:Kg<6VWF=-~Qbtnɒ֫8$y?a֔rRnY`B2-xgo 2TO~x8{ߥ lR(!KMD͓~SؘӄxC;:pK:y XsNm^G6ttײ\HayehCc;~!L ΂%5@($½wi%cq.k~]~\1bZtSQ:h_ɤ>b @JBw)󏕞;Hؕࡇ-z `<(ƽ&u눊gݮVC>r"Z{<0Lp2.X!B)S3d돧T7]qj5Xwo/8, s4u &@4l\I: Af&F^ ͸ǻ2>5KӍ"j|+巶9=#N 7VKT"G!CAll^TK~i/:7yW?fʯ 0>D&QfuY o,DVb#3daIQ{9Ӓ2AOܢŇ՚niSxᑼk9ls]ԩEKIXr3x|A@}7?(|C*8P(59>!5@8fOò% D_^؋e?쭒wFg rn/oR[SVXW9I$ZH(g Q߈;h@&A 3~3~M".\E!,*)HI$̋=֘<;i:]tD+McL#,I xg[}ThaqÃ&I `=dKT-",鴳C#imUt>%n{$ܶI8~b>`,E!6ZsyF6kZt?We2^iӘ ә{ǝ;ynuL*B-q7C! 4H\0A?~pNn*箓LH=W]j\dLRSےO.ETC$'Z_z^B10^j, ^;Lpny1>+ g]\ݬ'zDeqb9A`Ի<0dv$Ymc1}eF/+,R/HGU3hmo#Y H RG<)y¬ QT?Cϖp]w:R~ҐL/δ7/ \ff@jh A^WJG2b^zU߉w&.56`C3"m|F0o(2<gQ %(=hoU*\=@[O@ U{dnERWHaf ?eljι톙yiiD|Gw,Rg=N.{p{~xs g5N~u#C35 T69:yo}-\Rw yʖڕ8kqfCH%C;C>H>8f3(1Wvt*-)񏞩TFv1`8dc7u m,?VMg5_5 )-. Zٛ>5*c'80i"JYahL?ؼRS% {ўrΒY, 'Y~' t-?Egpq>%?qVܐz9Qyh f>cQJzGSy_ (݆uVS~wv$|>Z0k*-+F1N7Q)>*̒' > @!jŵ +Tz*5dm%{,A pfޔiЬ[o>{0OKo}^Ptf2qJ:&D#>oh/߱D4\*|Vq$,gQi85zno6oOf 9AeE0b4ˠ|)o_Iv>pZ)it\{D9hDvjJ0gޫŒ I%B`3?ҭy>;rJxfj.SHԛr 9o4_FFp ngk:GȔķdrXd7.P?=-o=M CBRUb֩ȗpYPBhP5…6+ S<:r1hg)lʷ6[o`f%;m! vUxvkq"{Tcz(BTd֙歋4Zu$cZR a8N{!+rKnwGK|FYCNypAЫ4 #k~]Z [ DTs,@l}n8 Ƙ,`.NnaAfˠ rH-QEd*#ꤢ 0 Tl๥m{35p#_x\h=shg jeBgzz 0WXD1&֫ V&Ÿ,fmV*i ^@S͉Dy.T>lӷ4ߡ"q?wVEu^6SˎG57/,>JN:͢CCU:0ppȢo >j遑%}{TT`pPoMe/4._IcTt>1-`,LQڳ9%yy_bPhuTh/תF ?}Nvf+d6S ˾#%Fql>1Ӭ82.Q;zju:1 4UU &;ZՏ>n