dhcp-4.3.3-11.9.1<>,(h]/=„!{@ = @ G֠؃ij}a)S:n@ьk֥ؐҶu%m$Av4C8GϪZDZ>&%bj jK܅WYag4{z#p'{M_[H9wǐJox!x Ynu< 0Cc[xr ˜ Ӿa0Q֦eˋ_D<b,b%L_VQHwg.]YGrKn#'h>:?xd   ;(,48KTa z     8Tl(58<N9tN: DNFQGdH|IXY\]^7bc6defluvwx4yLzhCdhcp4.3.311.9.1Common Files Used by ISC DHCP SoftwareThis package contains common programs used by both the ISC DHCP server ("dhcp-server" package) and client ("dhcp-client") as the omshell and common manual pages. Authors: -------- Internet Systems Consortium, Inc. ]lamb07openSUSE Leap 42.3openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Networking/Boot/Servershttp://www.isc.org/software/dhcplinuxx86_64بTÁ큤]]]]]]1d5617856d1cd2d178cb8d518bd58caedbdb0b61cae436467cf5df34214ac61bcbd27e3d3ddecee42d884e964bf5eeaf4c252ea2ee219e663e61f4051fdda23039778f1a35207a254a70138e081ebed890d12b0cb41fb09547736995aa9c73d1rootrootrootrootrootrootrootrootrootrootrootrootdhcp-4.3.3-11.9.1.src.rpmconfig(dhcp)dhcpdhcp(x86-64) @@@@@@@   /bin/touch/sbin/chkconfigconfig(dhcp)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)rpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)sysconfigrpmlib(PayloadIsLzma)4.3.3-11.9.13.0.4-14.0-14.4.6-14.11.2Z%Z]@ZWQZ@Yg`XƉWbW V_V@UT5TmT@S @S@S|@S5d@S&R@RR@REs@R/ Qzl@QZ@QT0QR@Q?Q3;@PP[@POiOr@OgON@N@Nf @N^"@N[@N&@N&@Mc@MM(M@M@M@MlMlMbSM^_@MIG@M L!L@LL@L*@LYV@LN@L-LK@KFKKtK,KEK&(J`@JkJJJp9Jp9max@suse.comndas@suse.dendas@suse.dendas@suse.dendas@suse.dendas@suse.dendas@suse.dendas@suse.denirmoy.das@suse.commt@suse.demt@suse.demt@suse.demt@suse.dero@suse.demt@suse.demt@suse.dejsegitz@novell.commt@suse.demt@suse.commt@suse.commt@suse.commt@suse.commt@suse.commt@suse.commmeister@suse.commt@suse.commt@suse.commt@suse.commt@suse.comschwab@suse.demt@suse.commt@suse.commt@suse.commt@suse.commt@suse.commt@suse.commt@suse.commt@suse.comcoolo@suse.commt@suse.commt@suse.commt@suse.decrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orgmt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.dejengelh@medozas.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.demt@suse.de- Integrate dhclient-script-handle-static-route-updates.patch into dhclient-script. We don't need to patch our own files. - CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd. - CVE-2018-5732, bsc#1083302: buffer overflow in dhclient. - Added: dhcp-CVE-2018-5732-CVE-2018-5733.patch - Removed: dhclient-script-handle-static-route-updates.patch- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144) [+ 0027-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]- Optimized if and when DNS client context and ports are initted (bsc#1073935) [+ 0026-Optimized-if-and-when-DNS-client-context-and-.patch]- Only use 12-bit value from VLAN TCI for VID(bsc#1059061) [+0025-master-LPF-now-only-uses-12-bit-value-from-VLAN-TCI-.patch] - fixed os error "Ambiguous tags: source12, source13, source14, source15"- Modify dhclient-script to handle static route updates (bsc#1023415). [+dhclient-script-handle-static-route-updates.patch]- Relax permission of dhclient-script for libguestfs(bsc#987170) - Enable patch23 whcih was disabled by mistake before- Add patch to limit the value of an fd we accept for a connection(bsc#969820).- renamed freeaddrinfo,getaddrinfo,getnameinfo in the internal libirs library that does not consider /etc/hosts and /etc/nsswitch.conf to use irs_ prefix to not cause name conflicts and override standard glibc functions used in libldap(bsc#972907). [+ 0022-dhcp-4.x.x-apply-bind-changes.patch, + 0023-bind-9.9.7-Hide-IRS-resolver-function.patch]- adjusted interval check. [*0019-dhcp-4.2.4-P1-interval.patch] - Fixed improper lease duration checking. Also added fixes for integer overflows in the date and time handling code(bsc#936923, bsc#880984). [+0021-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch] - fixed service files to start dhcpd after slapd (bsc#956159) - dhclient-script: complain in the log about conflicts, added a see log messages to the dhclient log message (bsc#960506) [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch] - applied upstream security patch fixing (bsc#961305,CVE-2015-8605) [+0020-dhcp-4.3.3-P1-CVE-2015-8605-udp-payload-length-ckeck.patch]- Applied a patch by Jiri Popelka catching dhcp server aborts with "Unable to set up timer: out of range" on very long or infinite timer intervals / lease lifetimes (bsc#947780, bsc#880984) [+ 0019-dhcp-4.2.4-P1-interval.patch] - Corrected patch references in and a missed (bsc#919959) patch description in previous changelog entry.- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes, features and obsoletes several patches we were using before. For complete changelog, please read the RELNOTES file shipped along with this package or online at: https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html - Replaced hostname patch with a dhcpv6 and fqdn aware variant: [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch, + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch] - Removed obsolete patches included upstream now: [- 0007-dhcp-4.2.6-ldap-mt01.patch, - 0009-dhcp-4.2.6-xen-checksum.patch, - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch, - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch, - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch, - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch, - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch, - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch, - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch, - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch, - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch] - Adjusted patch numbers in the spec file: [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch, - 0010-dhcp-4.2.2-dhclient-option-checks.patch, - 0011-dhcp-4.2.6-close-on-exec.patch, - 0012-dhcp-4.2.2-quiet-dhclient.patch, - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch, - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch, - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch, + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch, + 0008-dhcp-4.2.2-dhclient-option-checks.patch, + 0009-dhcp-4.2.6-close-on-exec.patch, + 0010-dhcp-4.2.2-quiet-dhclient.patch, + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch, + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch, + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch] - Fixed to not pass DHCPv6 address lifetimes a positive (unsigned 32bit) integers to scripts and properly format timestamps as long to not break them on 64bit architectures (bsc#926159). [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch] - dhclient: expose next-server DHCPv4 option to script (bsc#928390) [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch] - Replaced infiniband support patch with fixed variant (bsc#910984): [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch, - 0018-dhcp-4.2.6-improved-xid.patch, - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch, + 0016-infiniband-support.patch] - Moved dhcp-devel package include files and static libraries to /usr/include/dhcp and /usr/lib/dhcp subdirectories. DHCP requires a specific bind library version and conflicts with the files shipped by bind-devel package, which is not source and binary compatible (bsc#910686). - Corrected changes to provide complete patch file references. - Fixed server to not report success before send (bsc#919959) [+ 0017-server-no-success-report-before-send.919959.patch] - Fixed dhclient to check pre-init results reported by dhclient-script and fail if pre-init fails for a requested interface (bsc#912098). [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch] - do not check scripts not in the src.rpm - fix bashisms in dhcprelay script - Disabled /sbin/service legacy-action hooks on openSUSE <= 13.1, which does not support it and causes build failure (bnc#891961). - Removed gpg validation implicitly done by osc source_validator and gpg-offline dependency (blocks rebuilds).- Applied fix by Jiri Slaby to not crash in interface discovery when the interface address is NULL, which has been introduced by the infiniband support patch (bsc#909189,bsc#870535). [+ 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch]- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to reorder config to add all global options or option declarations to the dhcpService object instead to create new service object (bsc#886094,ISC-Bugs#37876). [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch] - Applied an upstream patch by Thomas Markwalder adding missed mapping of SHA TSIG algorithm names to their constants to enable hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512 authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947). [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch] - Decline IPv6 addresses on Duplicate Address Detection failure and stop client message exchanges on reached MRD rather than at some point after it. Applied fedora patches by Jiri Popelka and added DAD reporting via exit 3 to the dhclient-script and a fix to use correct address variables in the DEPREF6 action (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238). [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch, + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch] - Applied backport patch by William Preston avoiding to bind ddns socket in the server when ddns-update-style is none (bsc#891655). [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch] - Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409]) [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch] - Updated licence statement and FSF address in our scripts. - Added missed service_add_pre macro calls for dhcrelay services- sanitize release line in specfile- Fixed to require iproute2 in dhcp-client package (bnc#885399) - Disarmed dhclient-script when wicked is the network service, as wicked is using an another dhcp client (runtime conflict), NetworkManager an own script and sysconfig-network is gone on sles12 and opensuse > 13.1, so it is obsolete and unsupported.- Fixed /etc/sysconfig/dhcpd fillup in dhcp server post-install. - Fixed dhcp server start script to use correct libdir (bnc#868250) - Fixed dhcp server to chown leases to run user at start (bnc#868253) [+ 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch] - Fixed to write missed dhcp-ldap debug level messages (bnc#835818) [+ 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch] - Fixed unsupported dhclient-script used by sysconfig ifup to provide a function to calculate netmask. NetworkManager provides an own one.- added necessary macros for systemd files- Applied fixes for DHCP over IPoIB by Mellanox (bnc#870535) [+ 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch, + 0018-dhcp-4.2.6-improved-xid.patch]- Added support for custom for rcdhcpd[6] check-syntax,check-lease and syntax-check actions (bnc#868713).- Initially switched to use systemd service files under systemd and enabled Restart=on-abort (fate#315133). - Update to ISC dhcp-4.2.6 release. See RELNOTES file for the complete list of changes -- digest of fixes not in dhcp-4.2.5: - Tidy up receive packet processing. Thanks to Brad Plank of GTA for reporting the issue and suggesting a possible patch. [ISC-Bugs #34447] - Fix the socket handling for DHCPv6 clients to allow multiple instances of a client on a single machine to work properly. Previously only one client would receive the packets. Thanks to Jiri Popelka at Red Hat for the bug report and a potential patch. [ISC-Bugs #34784] - Added support for gentle shutdown after signal is received. [ISC-Bugs #32692] [ISC-Bugs 34945] - Enhance the DHCPv6 server logging to include the addresses that are assigned to the clients. This can be enabled by defining LOG_V6_ADDRESSES in site.h. [ISC-Bugs #26377] - Fix an operation in the DDNS code to be a bitwise instead of logical or. [ISC-Bugs #35138] - Merged patches for dhcp-4.2.6 version to apply without fuzzy, prepended patch number prefixes to match spec file patch nr, added patch markup tags / bug numbers to the spec file. - Applied contrib-lease-path pach to contrib.tar.gz [- contrib-lease-path.diff] - Changed to require automake and use its config.sub and guess files instead of maintaining a patch. [- config-guess-sub-update.patch] - Enabled to log DHCPv6 addresses assigned by server to clients [+ 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch] - Cleaned up documentation, rpmlint adjustments.- Test if /etc/sysconfig/network/scripts/functions exists before sourcing it (fate#316768,bnc#856591).- Fixed path to systemctl in dhclient-script (bnc#847778).- Added /etc/bindresvport.blacklist to dhcp server chroot file lists as it seems to block its start in some cases (bnc#842360).- Fixed to reload syslog on hostname changes using systemctl as there is no /etc/init.d/syslog script since syslog-service-2.0 (bnc#830467).- Added autoreconf -i option to fix build for the new automake- Install missed bind include files and libraries in dhcp-devel; conflicts to bind-devel providing different versions (bnc#805162).- Use manual patch command for config-guess-sub-update.patch again as patch macro does not work on older distributions.- Update to ISC dhcp-4.2.5-P1 release, which contains updated bind-9.8.4-P2 sources with removed regex.h check in configure (bnc#811934, CVE-2013-2266). - Changed spec make the bind export library build output visible.- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)- config-guess-sub-update.patch: Update config.guess/sub for aarch64- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the complete list of changes -- digest of fixes not in dhcp-4.2.4-P2: - Correct code to calculate rebind timing values in client [ISC-Bugs #29062] - Fix some issues in the code for parsing and printing options. [ISC-Bugs #22625,#27289,#27296,#27314] - Update the memory leakage debug code to work with v6. [ISC-Bugs #30297] - Relax the requirements for deleting an A or AAAA record. This relaxation was codified in RFC 4703. [ISC-Bugs #30734] - Modify the failover code to handle incorrect peer names better. [ISC-Bugs #30320] - Fix a set of issues that were discovered via a code inspection tool. [ISC-Bugs #23833] - Parsing unquoted base64 strings improved. [ISC-Bugs #23048] - The client now passes information about the options it requested from the server to the script code via environment variables. These variables are of the form requested_=1 with the option name being the same as used in the new_* and old_* variables. [ISC-Bugs #29068] - Check the status value when trying to read from a connection to see if it may have been closed. If it appears closed don't try to read from it again. This avoids a potential busy-wait like loop when the peer names are mismatched. [ISC-Bugs #31231] - Remove an unused variable to keep compilers happy. [ISC-Bugs #31983] - Removed obsolete parsing and printing option patch [dhcp-4.2.4-parsing-and-printing-options.patch] - Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff [dhcp-4.2.5-dhclient-send-hostname-rml.patch] - Fixed discovery of interfaces, which have only addresses with a label assigned (linux 2.0 "alias interfaces" compatibility) by switching to use the getifaddrs() as on BSD (bnc#791289, reported upstream as [ISC-Bugs #31992]). [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch] - Applied a patch to ignore SIGPIPE instead to die in socket code before the errno==EPIPE checks are reached (bnc#794578, upstream report [ISC-Bugs #32222]) [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch] - Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes: - Fixed parse buffer handling code to not avoid truncation of config > ~8k from bigger ldap objects. Fixed to free the ldap config buffer passed to the config parser and append new config, while the parser is in saved state (bnc#788787). - Fixed subclass name-ref and data quoting/escaping (bnc#788787). - Fixed memory leaks on ldap_read_config errors (bnc#788787). - Fixed a memleak while subnet range processing, fixed to reset bufix variable in ldap_read_function to 0 and to set buflen to the complete length (do not discard last character, usually \n). This caused a parsing error at further run of the function, e.g. while processing the second dhcpService container that the dhcpServer object may refer to (bnc#784640). [dhcp-4.2.5-ldap-mt01.patch.bz2] - Fixed dhclient-script to discard MTU lower-equal 576 rather than lower-than (bnc#791280). - Verify GPG source archive signatures.- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for an issue with the use of lease times was found and fixed. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue. ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)- Update to ISC dhcp-4.2.4-P1 release, providing following security fixes (bnc#772924): - Previously the server code was relaxed to allow packets with zero length client ids to be processed. Under some situations use of zero length client ids can cause the server to go into an infinite loop. As such ids are not valid according to RFC 2132 section 9.14 the server no longer accepts them. Client ids with a length of 1 are also invalid but the server still accepts them in order to minimize disruption. The restriction will likely be tightened in the future to disallow ids with a length of 1. Thanks to Markus Hietava of Codenomicon CROSS project for the finding this issue and CERT-FI for vulnerability coordination. [ISC-Bugs #29851] CVE: CVE-2012-3571 - When attempting to convert a DUID from a client id option into a hardware address handle unexpected client ids properly. Thanks to Markus Hietava of Codenomicon CROSS project for the finding this issue and CERT-FI for vulnerability coordination. [ISC-Bugs #29852] CVE: CVE-2012-3570 - A pair of memory leaks were found and fixed. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue. [ISC-Bugs #30024] CVE: CVE-2012-3954 - Moved lease file check to a separate action so it is not used in restart -- it can fail when the daemon rewrites the lease causing a restart failure then (bnc#762108 regression). - Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to netconfig for processing (bnc#770236). - Removed RFC 4833 TZ options from client requests [unused].- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert crash while accessing lease on heap (bnc#767661) and providing the following fixes: - Rotate the lease file when running in v6 mode. Thanks to Christoph Moench-Tegeder at Astaro for the report and the first version of the patch. [ISC-Bugs #24887] - Fixed the code that checks if an address the server is planning to hand out is in a reserved range. This would appear as the server being out of addresses in pools with particular ranges. [ISC-Bugs #26498] - In the DDNS code handle error conditions more gracefully and add more logging code. The major change is to handle unexpected cancel events from the DNS client code. [ISC-Bugs #26287] - Tidy up the receive calls and eliminate the need for found_pkt. [ISC-Bugs #25066] - Add support for Infiniband over sockets to the server and relay code. We've tested this on Solaris and hope to expand support for Infiniband in the future. This patch also corrects some issues we found in the socket code. [ISC-Bugs #24245] - Add a compile time check for the presence of the noreturn attribute and use it for log_fatal if it's available. This will help code checking programs to eliminate false positives. [ISC-Bugs #27539] - Fixed many compilation problems ("set, but not used" warnings) for gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588] - Modify the code that determines if an outstanding DDNS request should be cancelled. This patch results in cancelling the outstanding request less often. It fixes the problem caused by a client doing a release where the TXT and PTR records weren't removed from the DNS. [ISC-BUGS #27858] - Use offsetof() instead of sizeof() to get the sizes for dhcpv6_relay_packet and dhcpv6_packet in several more places. Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere of Excentis. [ISC-Bugs #27941] - Remove outdated note in the description of the bootp keyword about the option not satisfying the requirement of failover peers for denying dynamic bootp clients. [ISC-bugs #28574] - Multiple items to clean up IPv6 address processing. When processing an IA that we've seen check to see if the addresses are usable (not in use by somebody else) before handing it out. When reading in leases from the file discard expired addresses. When picking an address for a client include the IA ID in addition to the client ID to generally pick different addresses for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945] [ISC-Bugs #25586] [ISC-Bugs #27684] - Remove unnecessary checks in the lease query code and clean up several compiler issues (some dereferences of NULL and treating an int as a boolean). [ISC-Bugs #26203] - Fix the NA and PD allocation code to handle the case where a client provides a preference and the server doesn't have any addresses or prefixes available. Previoulsy the server ignored the request with this patch it replies with a NoAddrsAvail or NoPrefixAvail response. By default the code performs according to the errata of August 2010 for RFC 3315 section 17.2.2; to enable the previous style see the section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h. This option may be removed in the future. Thanks to Jiri Popelka at Red Hat for the patch. [ISC-Bugs #22676] - Fix up some issues found by static analysis. A potential memory leak and NULL dereference in omapi. The use of a boolean test instead of a bitwise test in dst. [ISC-Bugs #28941] - Replaced our patches with a complete and upstream verified patch: - Fix some issues in the code for parsing and printing options. [ISC-Bugs #27314] - properly parse a zero length option from a lease file. [ISC-Bugs #22796] - properly determine if we parsed a 16 or 32 bit value in evaluate_numeric_expression (extract-int). [ISC-Bugs #22625] - properly print options that have several fields followed by an array of something for example "fIa" [ISC-Bugs #27289] - properly parse options in declarations that have several fields followed by an array of something for example "fIa" This patch obsoletes the following (bnc#739696) patches: - dhclient: parse_option_param: Bad format a - zero-length option lease parse error in dhclient6 - Merged ldap and options check patches for the new version - Fixed dhcp-server init script to check syntax and fail while force-reload and restart to avoid stopping of running daemon followed by start failure (bnc#762108). Added libgcc_s.so to chroot, so the server can report assert/crash line.- Added RFC 4833 TimeZone PosixString and Name declarations to server and client configs [not used yet].- dhcp-server: fixed to escape all values used in constructed ldap filters as a DN may contain e.g. asterisks (bnc#721829, [ISC-Bugs #28545]).- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix: Modify the DDNS handling code. In a previous patch we added logging code to the DDNS handling. This code included a bug that caused it to attempt to dereference a NULL pointer and eventually segfault. While reviewing the code as we addressed this problem, we determined that some of the updates to the lease structures would not work as planned since the structures being updated were in the process of being freed: these updates were removed. In addition we removed an incorrect call to the DDNS removal function that could cause a failure during the removal of DDNS information from the DNS server. Thanks to Jasper Jongmans for reporting this issue. ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239) - Fixed close-on-exec patch to not set it on stderr (bnc#732910) - Fixed incorrect "a" array type option parsing causing to discard e.g. classless static routes from lease file [reported as ISC-Bug 27289] and zero-length option parsing such as dhcp6.rapid-commit in dhclient6 [reported as ISC-Bug 27314] (bnc#739696). - Fixed dhclient to include its pid number in syslog messages. - Fixed to use P2 in the spec version, not in the release tag.- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for a DoS due to processing certain regular expressions (bnc#735610) and several important DDNS related fixes: * Add a check for a null pointer before calling the regexec function. Without out this check we could, under some circumstances, pass a null pointer to the regexec function causing it to segfault. Thanks to a report from BlueCat Networks. [ISC-Bugs #26704] CVE-2011-4539. * Fix the code that checks for an existing DDNS transaction to cancel when removing DDNS information, so that we will continue with the processing if we have a lease even if it doesn't have an outstanding transaction. [ISC-Bugs #24682] * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding configuration files. [ISC-Bugs #24107] * Add support for passing DDNS information to a DNS server over an IPv6 address. [ISC-Bugs #22647] * Enhanced patch for 23595 to handle IPv4 fixed addresses more cleanly. [ISC-Bugs #23595] - Refreshed ldap patch- add libtool as buildrequire to make the spec file more reliable- Commented out all configuration examples in /etc/dhcpd.conf and dhcp6.conf (bnc#715473). - Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file. - Removed useless provides/obsoletes from spec file.- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there are well-defined directories expected to contain additional config files (bnc#690585).- Updated to ISC dhcp-4.2.2 release, providing two security fixes (CVE-2011-2748,CVE-2011-2749,[ISC-Bugs #24960],bnc#712653), that allowed remote attackers to cause a denial of service (a daemon exit) via crafted BOOTP packets. Further also DNS update fix to detect overlapping pools or misconfigured fixed-address entries, that caused a server crash during DNS update and other fixes. For a complete list, please see the RELNOTES file provided in the package and also available online at http://www.isc.org/. - Merged/adopted dhclient option-checks, send-hostname-rml, ldap patch, xen-checksum, close-on-exec patches and removed obsolete in6_pktinfo-prototype and relay-no-ip-on-interface patches. - Moved server pid files into chroot directory even chroot is not used and create a link in /var/run, so it can write one when started as user without chroot and avoid stop problems when the chroot sysconfig setting changed (bnc#712438). - Disabled log-info level messages in dhclient(6) quiet mode to avoid excessive logging of non-critical messages (bnc#711420). - Fixed dhclient-script to not remove alias IP when it didn't changed to not wipe out iptables connmark when renewing the lease (bnc#700771). Thanks to James Carter for the patch. - Fixed DDNS-howto.txt reference in the config file; it has been moved to the dhcp-doc package (bnc#697279). - Removed GPL licensed files (bind-*/contrib/dbus) from bind.tgz to ensure, they're not used to build non-GPL dhcp (bnc#714004). - Changed to apply strict-aliasing/RELRO for >= 12.x only- Correct previous change.- THis is a long running network daemon, link with full RELRO security enhancements. - remove -fno-strict-aliasing from CFLAGS, no longer needed.- Import redhat's patch to open all needed FDs with O_CLOEXEC so they dont leak.- Removed obsolete sles8 compatibility dependencies, fixed to avoid non-functional sles_version conditionals.- Fixed to not introduce separate dhcp-doc package on sles, use versioned provides/obsoletes, improved conditionals.- Fixed dhclient-script typo causing ISC DHCPv6 client to execute ifup pre-down scripts also while renew, when the ipv6 address did not changed (bnc#690859).- Implemented optional ldap connect retry loop during the initial startup of the dhcp server in cases where the ldap server is not yet started. Set the ldap-init-retry option in dhcpd.conf to enable it (bnc#627617). Merged in the actual ldap patch. - Cleaned up init script error reporting, no -TERM for killproc.- Updated to ISC dhcp-4.2.1-P1 release, that provides most of the dhclient pretty escape and string option checks. Merged to use relaxed domain-name option check causing a regression, when the server is misusing it to provide a domain list (compatibility to attic clients) and does not provide it via domain-search option; pretty escape semicolon as well (bnc#675052, CVE-2011-0997).- Discard string options such as host and domain names containing disallowed characters or beeing too long. This proctive patch limits root-path to a-zA-Z0-9, #%+-_:.,@~/\[]= and a space (bnc#675052, CVE-2011-0997).- Updated to ISC DHCP 4.2.1 release (bnc#680298), that provides following fixes (digest): * Several fixes to OMAPI, cleanup of dereferenced pointers in the omapi handle, handling of pipe failures and status code in omapi signal handler that may cause connect failure and 100% CPU use. * Handle some DDNS corner cases better * Several fixes to lease input and output * Corrected side effect of printing all data strings as hex. * Host record references leaks causing applying config to all innocent clients. * Memory leak when parsing a domain name * Fixes to configuration parsing including infinite loop. * Fixed for unexpected abort caused by a DHCPv6 decline. For the complete list see the RELNOTES file, that is available also online at http://ftp.isc.org/isc/dhcp/dhcp-4.2.1-RELNOTES. - Removed obsolete optional-value-infinite-loop, no-libcrypto and CVE-2011-0413.bnc667655 patches. - Merged the dhclient-send-hostname and ldap patches.- dhclient-script: fixed typo causing that only global settings to set hostname and default route were applied for primary and never per interface settings (bnc#673792).- Added dhcp-4.2.0-xen-checksum.patch by David Cantrell to handle xen partial UDP checksums (bnc#668194).- Applied security fix for unexpected abort caused by a DHCPv6 decline message (CVE-2011-0413, VU#686084, bnc#667655). - Fixed dhclient.conf to request the domain-search option.- Updated to ISC DHCP 4.2.0-P2, a security release fixing the handling of connection requests on the failover port. Previously a connection request from a source that wasn't listed as a failover peer would cause the server to become non-responsive. ([ISC-Bugs #22679] CERT: VU#159528 CVE: CVE-2010-3616, bnc#659059).- Enable ldap CASA support on SLE only.- Fixed to use same/correct dhcrelay6 interface variables in the sysconfig file and in the dhcrelay6 init script.- Updated to ISC DHCP 4.2.0-P1 release, providing a security fix to handle a relay forward message with an unspecified address in the link address field. Previously such a message would cause the server to crash. Thanks to a report from John Gibbons. [ISC-Bugs #21992] CERT: VU#102047 CVE: CVE-2010-3611 (bnc#650902) The 4.2.0 version is a feature release, implementing asynchronous DDNS processing and includes "The LDAP Patch". For a complete list of changes from any previous release, please consult the RELNOTES file within the source distribution or on the ISC website: http://www.isc.org/software/dhcp/420 - Fixed compilation to avoid segfaults as soon as ldap is enabled, merged our ldap patches from 4.1.x branch.- Fixed a dhcrelay segfault while receiving packets on interfaces without any IPv4 address assigned (bnc#631305, reported upsteam as [ISC-Bugs #22409]). - Fixed a common infinite loop while parsing options with optional parts in the value such as in slp-service-scope option (bnc#643845, reported upsteam as [ISC-Bugs #22410]). - Fixed init scripts to report correct LSB codes in status action, when the config file or the binary do not exists (bnc#640336). - Fixed syntax of a check in the rcdhcrelay[6] (bnc#648580) - Avoid pid check error message in the rcdhcpd[6] (bnc#646875)- Fixed server lease file path in contrib/listlease and leasestate changed to extract contrib and examples using setup macro.- Renamed rfc3442-classless-static-routes_raw in /etc/dhclient.conf to rfc3442-classless-static-routes for compatibility with the NetworkManager making use of /etc/dhclient.conf now and adopted /sbin/dhclient-script (bnc#625770).- Fixed ldap option number conflicting with new options (bnc#625358)- Added a fix for an lpf bind error messages making it easier to localize problems (bnc#617795)- Updated to ISC DHCP 4.1.1-P1 patch release, which contains a pair of bug fixes including one for a security related bug (bnc#612546, CVE-2010-2156): * A bug was fixed that could cause the DHCPv6 server to advertise/assign a previously allocated (active) lease to a client that has changed subnets, despite being on different shared networks. Dynamic prefixes specifically allocated in shared networks also now are not offered if the client has moved. [ISC-Bugs #21152] * Accept a client id of length 0 while hashing. Previously the server would exit if it attempted to hash a zero length client id, providing attackers with a simple denial of service attack. [ISC-Bugs #21253]- Added rc.dhcrelay6 as source in the spec file- Fixed dhcprelay scripts to source sysconfig file correctly - Fixed spec file typo in arping path require, enabled ldap - Fixed a dhclient option name and new/old ip address check- Updated to ISC DHCP 4.1.1, the current 4.x series production release, providing DHCPv6 client/server/relay implementation. The programs act in DHCPv6 mode, when the -6 start option is set. We install separate init scripts with a 6 at the end to handle them, that is /etc/init.d/dhcpd6 and dhrelay6. Further, there is also a link to the binaries with a 6 at the end, e.g. dhclient6, making it visible, that the installed version supports DHCPv6. - Moved additional documentation to a separate dhcp-doc package. - Changed to provide config files and scripts as source files instead of patches to the ISC scripts. - Adopted spec file and config/scripts, merged in all patches. - Implemented RFC 3442 classless static routes support in the dhclient-script (bnc#555870).- Updated to ISC DHCP 3.1-ESV, an extended support version release which includes a small number of bug fixes (bnc#592178) over the 3.1.3 version: * Modified the handling of a connection to avoid releasing the omapi io object for the connection while it is still in use. One symptom from this error was a segfault when a failover secondary attempted to connect to the failover primary if their clocks were not synchronized. * Fix test in dhcp_interface_signal_handler to check that the inner handler has a signal_handler before calling it. * When using 'ignore client-updates;', the FQDN returned to the client is no longer truncated to one octet. * Clean up some compiler warnings - ticket 19054. - Fixed vlan interface check in dhcpd-restart-hook if-up.d script (bnc#599702) - Touch dhclient.leases in post-install script instead to provide an empty file, versioned provides/obsoletes (rpmlint warnings).- Fixed dhclient-script to call ifup -o dhcp and signal "complete" to ifup when all configuration is done (bnc#585380,bnc#518219).- Enable parallel building - Use large PIE model on all SPARC flavors- Fixed dhclient-script to use correct sysconfig run dir path to not to break the defaultroute/hostname setup (bnc#555095). - Don't request any specific lease-time by default (bnc#516459).- Fixed dhclient-script to forward new_domain_search as DNSSEARCH to netconfig.- Updated to dhcp-3.1.3 maintenance release fixing several issues (a digest, see RELNOTES for the complete list): * Remove infinite loop in token_print_indent_concat(). * A parser bug was fixed that segfaulted if site-option-space was tried to be used interchangeably with vendor-option-space. * Two uninitialized stack structures are now memset to zero, thanks to patch from David Cantrell at Red Hat. * Memory leak in the load_balance_mine() function is fixed. This would leak ~20-30 octets per DHCPDISCOVER packet while failover was in use and in normal state. * Fixed setting hostname in Linux hosts that require hostname argument to be double-quoted. Also allow server-provided hostname to override hostnames 'localhost' and '(none)'. * Added client support for setting interface MTU and metric, thanks to Roy "UberLord" Marples . * Fixed failover reconnection retry code to continue to retry to reconnect rather than restarting the listener. * Fixed a bug where an OMAPI socket disconnection message would not result in scheduling a failover reconnection, if the link had not negotiated a failover connect yet (e.g.: connection refused, asynch socket connect() timeouts). * Versions 3.0.x syntax with multiple name->code option definitions is now supported. Note that, similarly to 3.0.x, for by-code lookups only the last option definition is used. * Fixed a fenceposting bug when a client had two host records configured, one using 'uid' and the other using 'hardware ethernet'. CVE-2009-1892 - Updated to dhcp-3.1.3-ldap-patch-mt-01 including previous fixes. - Merged dhclient script, removed obsolete CVE-2009-1892 fix.- Replaced mt-02 ldap patch from old git repository with equivalent one (dhcp-3.1.2p1-ldap-patch-mt-02) from a new repository with fixed patch history (http://www.suse.de/~mt/git/dhcp-ldap.git/).- Added dhcpd-restart-hook if-up.d script that restarts dhcp server while network restart when a virtual interfaces as bridge, bond or vlan goes up again (bnc#517810).- Applied fix for a dhcp client id DoS (CVE-2009-1892, bnc#519413).- Updated to dhcp-3.1.2p1 maintenance release fixing following issues: * A stack overflow vulnerability was fixed in dhclient that could allow remote attackers to execute arbitrary commands as root on the system, or simply terminate the client, by providing an over-long subnet-mask option. * A double-dereference in dhclient transmission of DHCPDECLINEs was repaired. * Fix handling of -A and -a flags in dhcrelay; it was failing to expand packet size as needed to add relay agent options. * Corrected list of failover state values in dhcpd man page. * Fixed a bug that caused some request types to be logged incorrectly. * Fixed a coredump when adding a class via OMAPI. * Clients that sent a parameter request list containing the routers option before the subnet mask option were receiving only the latter. Fixed. * The server wasn't always sending the FQDN option when it should. * A partner-down failover server no longer emits 'peer holds all free leases' if it is able to newly-allocate one of the peer's leases. * A cosmetic bug in DHCPDECLINE processing was fixed which caused all successful DHCPDECLINEs to be logged as "not found" rather than "abandoned". * Some failover debugging #defines have been better defined and some high frequency messages moved to a deeper debugging symbol. * The CLTT parameter in failover is now only updated by client activity, and not by failover binding updates. * Failover BNDUPD messages are now discarded if they conflict with an update that has been trasnmitted, but not acknowledged. * A bug cleaning up unknown-xxx temporary option definitions was fixed. - Removed obsolete dhclient-no-dereference-twice patch - Improved dhclient-script to apply global dhcp settings, when there is no interface config (bnc#480922). - Enabled casa support in dhcp-ldap for >= sles 10 and => 11.1. - Updated dhcp-3.1.2p1-ldap-patch-mt.11.2-02 merging all patches flying around -- see http://www.suse.de/~mt/git/dhcp-ldap.git and the git changelog at the begin of the patch.lamb07 15616298334.3.3-11.9.14.3.3-11.9.14.3.3-11.9.1dhcp-serverdhcp6-serveromshellomshell.1.gzdhcp-eval.5.gzdhcp-options.5.gz/etc/sysconfig/SuSEfirewall2.d/services//usr/bin//usr/share/man/man1//usr/share/man/man5/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10531/openSUSE_Leap_42.3_Update/3aabafda3c2bf4e567cde83b0799562c-dhcp.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linuxASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.0.0, BuildID[sha1]=7244904f45fdcb95b9d44ee1907265e5e3eb52d1, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRR RRRR)nY[եCk(?`]"k%H\@5<UL3Xmtimi?<%޹v[glPHON0Thﳁ,TAJ}SBwtLhl_9Oe`_kgĶ|>bn sGWg7quܛp+O39 w?>Ќ!hZF88 =Ө^{FL&8֕`v Gq.-y?Y]epX|!K{O@?t9QܪbjJ#n"e㵤%%B%!"CAј%#cT0ֆDjЂ LMlZ:<6ÿV%TJ𺖡ʎn@DO ô0[)Y(|毋^Yn M%?/v@_@e J~⮶H|ʤTCF i3Ri}u<7Wu+&%Fn Bvl)V tmƓ2M}2׊53K_- I_fJPzowX@r"U0fH1M3HM}W$]_U!:%{l꒧k75,am„4GTDVyP/k]X?-C*oW˽H9⁹Ik@`B?jT)^PВbqq3-i*p dfbUf#Cb3CF&W?ٵS\sn_tǿ8YW2Qt;Be:odM&00.^wzwPgF0 ތLmu{H~, 5u7xra1R'ch܊KpS2m(4`D./"=:S hcM;CӥU?l!I^9K 0X 8:jQ a!cδIDA˪@WQOf掝+4<ǭBh/J i>t}M?z-O蠻E"~ t*/ xWq0."9d On$Ƞ3#.'xNj;dH֡A]m&@-%HXG? E%O>TYy)r'y̪tca{WY^Q̡rTQ%fo{;YP}M0 Zm;I;Z3;޻Ъ =*,TL+>yE7ZJq6( `É xO ďdrqGC*A]a쟾"3+lTӑ<{2ձhlqpZP  @"ݣIF^Jt RmJ}d]4&`yVF IҴ9TG*wwVSmb8A^#F(=vf=m' 9 x,G}CgmPqBGm?\#|YA|[:ݳo( ƶOt63WK-= Qז UnTEL3cG8hn0·%K* ϩл0ֆw0ʟ #)HqWx)x g>=cV7\ICXAgBӽY(_9##ᘾ1~H^E.5I ; zDII \Zc>uf"'5[nZne{K<"TӴ<ᴺttǑ' (ZY3Z:ocؚ*d;ۢ&MTIߖ^ 7ݠLQ~.@4b(biHQ RY X-!m>E(ga\X䚫*_aS8[>6 Ԭ8RΡ4>P$w5r(D.,F7iIt'|^9t^u)Y fk_{7AЦ~ADN.z|G6=6q bwj搊!"߿’*BO)~LPR|DYaKTIUY 哻MjIyu5ă^TgUO8139L0K:; `\7hL_V$DyȽ{ .R%XSϳI!mj ;CM[ï.:8/LWFOo/o qSm:bG$gʫ M3wJw!wFDz۟sKHʂQ;`2" CC5 o݇ ?*ԫL3i Fxya3w j9yPv}mvg"X 'yo5ZtaAsNPŒδq/KǠ.u9SJq?kx[>Qk';B\)%[= 1o+9۔3@-͏؋^ՂU$̭}-hmHbuօ!=CG%GbcO$}]gI~8.$$%7Fk&^PЖr>1 k.tW[7ZOaӶ߮g%{xCu9c߰j{! ],fs/@ϩDį)U:ń_եy)<`ZErl\9-R.L#z` Kdjvsm?8\h$7sX5ѾdLAPƓ {~WP;OY^ו#i3@^U#iOpt@$6,o&SIQA'ʝƾ)ݪ<"NO!}bb}qj>Ħr.%<((;/ ߣD7pڬSUJi4-*'DVQYcj#R[ N:߻€_aR]^rϰ:}4-O1nm )x}thqՏD @%%Qg K]a~@O[=pL37,yk? ϙ;x8x`0~J/ .r:G`M O+'&%vZLo{,4yc4qv]Z©pOvsCGCvk OW-ɈJfuu9É#9-MMҭɃRkjK43m:eRMZ4"wJ sI;wiA QVi魺Cfu4% 8p:%ey=`{[(v]PF9Kɳh\d*a &q)-^^Zuމ+"]*VN~fw ߗy8_wc_OySTT[}4,_un(B@מ hȀʣ[ȦSbeCqZ>㡃8lX@:ymNzMns8"]<ùbo;n OJ43Lr 9iuo¬cڳq-KwRYWZАg>c*(D3̅ga7z˿3dȆ1hfU6F}=yPM#̪n EGL8 _tPIsW~;!"k!Ӂ oIg*^Sn(کdd>`߾دmJ( X $Z<` w}u Lrm>OAz(s~=̥.9+ ͏CGcCLZ+)ӛ{-}4v`V>4ʤO⵵ $ms.-P鶆gNoh$Sq-O".j0>H3-5` VB ڄW'gCa! `P/BYQI;Sϙ=t9%tnAC"?T?$$UCŘoV/wŃ=R5AXH亳4KZDф 5 E KoZ?zC跴nWXi"j̷!&zictXwn1Qs 2W.4`pG- x*vQC»UU34fPΰAb'S1Yy$Hv)(G,{FjŽ}[-^t tMyIXW}v❡tQ񯗄q jPzx/yw2^GbsT% qXB9Cm} `E󼋹!z0נX`5vdeYT]XY#Qi0ǁ!@\ur$=[ t#ܶ1, |u"\4 21 9*-Z3=$6?˴(|F`}m7Ԫ\{2+N/K&]L.q grX[[ b>|T/Dw-QG|+pcPck{ h&s&YĢ@Z_Avx$\`Oύa4xD!WlUZ~3!v9`E]T,UKz\ )d+a},= և"y;K, yܑHt^™ w-ԻIߤ]Hq< cWOXPGU-nbd3#n/31bEIh$S]$ Q73?R[;omcIM, {a7d:vzXMr2ŪQptK/ޫq&ME?yw]a;RRQU_bEp(IyeMsq$%e XhRwjJzj@^4^qQ?K2`aHezR7*Qn̸VZpߧ\ ԓG}^o֠!JX@WJ?RڎiJ KZzh~ P0uU7>,ؼ}&Ho 2hDͶU1PXIZBxKJ ꨮ<;!](tOA/lm9sFE1>g.zDm\)l\tۑƏjYB '3=]B"_A8ZѫL^\ӕeAiDl>K_Ɖ^Xk$plYS_oFA[2@ĿK8aD S"5[o-2i? %mhf[y 3"OL5["nt[DZ5eɶ#3^Ucl!pįG xjR4` 0CCn:~ݺc%G3Da!zH+ Ȇ6tvM* Ҁ Cz:j0a:n1(/e C&5sx'ȃ:MD鼐2_O 奲W)rM >a0 _"r$ӜWvVJҧY@+ͤeNbS?&2Zwp/.)et'&} eRCv2BI``1F\?QJ[EM[`dNOpD3kW?w2LސGkZkfK&ע6j@ɃtI6"/8ղ6VCZW,&*vCm:_|`Wg݄#JY+I;Zm4WBͻH>4yl=Ⱥ +ubaz6NgTI(hde.I_jl|,4lBg QQ)wnpQ۞{:cjyr`)W.<99)k j "⩽}33x >յd^# 7t @$QS0e$ fI?$x{W6$^b-U|}mhDncŀ*D˔5ºrpb@U.?[%|Î %=QU.ڊԶ*%)V]jMUGIN eg_D&#+J2i~~~M#Rf(uv%E?5\GqpuS={:Uj !XF]BnHzDY 7Ll+rl$kV#LKal?˦p{wNXB I6!ٺzt{-N̑d@=C&y%I"#$0Oa?bʚ \D"4"IMj}0R3\*1Ӹ+ض4ٹLj^7$cjY7Z$֮܌w"fSM-Re&a!دI *lxHfp=#; >^Z 8a T=VgxƛnJر|,%mB^>T@!Y{jN  = wF!aNLnqSvL{̢T#!oe8vը-czu>}10Ձfm;EvVZn'F`7|M`;( tA8}B?]zA'\%BÚ\k~L.cUP4"LVIU|6+/F#?"%!oȄd1{#OotT j1EGA ɬ3lx>a~]|YZ+022}* Qc&7ѨsxB"8u\C*dLzv7+l+ ~x4"FU{qByYФINa"4~DV>̟D.(˟ 4+3bB+Z*@7sz_BEn/)2 A!"H5#?$spSΰ\_-pbTsDS$8BBj *lIs6}Ƅ4pr iv$#+[N ʶ+o.Ш7_VCe3V!~O7䷳ءe McKJ8Ԡo/<~o,RL[`jʆ\qᅽ@zLl>*ᥗY1JQ8-r,@&uZB REhCt7h m:R1C&~S6j4L_zN|; ewfZh8B6-y'qłJ:]btvhp}/:W+2 H1aO^`Т|3tnQ14,_"'JAa]Hp'/i!uؗ+JJw$ya^ʶT|7\gRl6rp*f'BFM)/?kzb /v.kfAPq/\ZARTk_55*h "A.Fx#p g=GnoTU56(.3] C%/9|;Ӥ4TxM׽ƮwDbF4ʚT6XTuE0i84d#;rԈSz2R+kYrI=3y|ا7ـ[ׯ=`b쟲 7q}hGk >* MNӨ\ߌ ekT.K+vu P\q'@#o(j4i[Icރ:u6eԭemR}}aHFA~֭@E]GEAW ۓUC^JYŗ+^FA.RJR|^SI÷ݽ\c9(-gx^me6'f)?{6e*v*I;-R0eGR- q'h4MoekY"'v.w8T臶+'whOdtGa\xF@]67ʟ/dЫ'#{)CʖHqAսcyE Ϫd+ ]B z.WtoU8UR ݨ`gh9aryq04e?8A[D4I{L!^ > ; Ϣ3 8iۚAݮ8O" fkHˤ7}{c)rgN%@gpLvy7RQ4EĬhίzd1um$cBE6ڴS%L/hք*[Jn?kio4"c'Z=-߻.E)TK qϻuH@6GL"` >>f/뎈r2,M=2 {`KT)%tGkEMp¾zMP}\ [YGU @v2i_&%b?ā!;~ h嗀d}xOq8jЂbf+9!cָ Ռ-smvYowY(!3%rQYwh*?iߝī$W6-GxF|[ȃNm) Iie_8诔R*ڪq.hg+[@<_ukۘ?߄2-z Q* '#,gDz=Qn?)ml)ծgゲ)/R$;$mb_kE+jȊ7ӟ@-!6ue&+z*gx|vH̟&]gop \ ERE1¤P7=QhX*f9?0p6,V%=w!}h^ΐkZذG Y"[7(3epmZ#p؅ו"|w{6Ic/&5: k$(@/TWGZSH:L gCZr0@\Iڸp(QUe^Bg|HUO7]BA =OmL:hPIlIqM--X-fЏs̰}\ F2Y[4]I=`~sߐN B~{U~D/{~}Z:bNؾwG7JiQ$uQ (?\-ҡ(~P$J*Հ]ɰ FDH}[+xG+Ǩa|M^īZT3s4dzGqyzۮ !JC _yMTk @kk,+>nfWgQx>]$N;7pssl\ ?v db Q-Ŭ-olލغBy qcxRiK @9N}A/i+s#򯯋Dr?Gf~bؗEfqW%A7z^T؄RHK)2H`ɛ[cv_bE؋L- lZo<= Q m0d&V0=5 6: I~TBI/S26{F=ĩ'f`-r/fDhA}E<󩪤Yf|`gnpSIdfۑ^Q!`}jHh"k>bh%J2Jw,GPlhB][@!IG$!eLc|/Pz;igF\2 hSʇ㞀3Bլf[V] IWNTtV3Owj^T9"ڈYao*|@|5CͧFs5:[P9Wѧǽp~_BQ.~ Vd^1214ꞍS _ṚKmd(-٬W0=̈́rPX`[L"0HzX(>U(?CTL.wfb_x4Rk QI*z])*q]-zcDzvq./RSܠt+&n:خ&kuє}P>I'"&:G.1>1֮nZj5ͤ ̿ہ'UR65r 5P8HǼN:OzFѦHmcT]djF-RSk݋.]GkٖA$gs@nʦΚ 09p9Y1W2IX3slWVuR_Qhi5@pHyҍSMY'R0kvIO;z~ޞ`Ǿn3_h ^WI:'Lꟈ I.b HyXI0y&F_Kb^Bo\)ƅsNcY pOvބ~?x;zGlajjWA!wD3[/&>jוUj|Gn..ijþP&v-#6Ϟ_^yF=_M碁 6h{]֍M>s7Iz.TasaqREdoGmz8D)h(w=#M-.Dcqf3uMJqlT4& Evv)Za-%l-tJ7-V}p4xPAbe>;A< 4qᘃT,096VU?[X:g(a߮2L)yuw/]EP %ܦiJVd94£0^\G?{IW}8o *<'^v7.-nO!f-~4;Mi5ʌ^FaVֹDžLVc*ּ˖4[A-AIQ7t\ћ;ރO܇hr4L6B$8ra@ R>Oӱ? EPWlRIdCϨXhDgOы=(*l|rC=#)[۹KF轤6 &\ ".]26Hĸs~E_Ӏ>w2i͛퍇\Јϯ߶g({`)7ΔBXzlF=[z$='>Msnk~yewƞ֎,!Ba2G2{6ɯnJ,Rsb2̀l/NpAcu % c/p*W5x;PQRSOt>95dZzt5yhtoAi1j@82ZQLQIrh$t+3 t'䗺g.TIf~n06؂W_"r;VώIHߣ_}YqMG9*V=g7QJ~iWͥFS|KזӐZ80<nQj,;G:bUc/u.O.u2[`<ٺuu`?d`A*FDtGܝaȠ%z DVAV-Ȇ;,Tl7LDH6*ysK0.g6xH]V|UG @rBY&WOQ-#4 7kWVW[" HHEec˻vO,u.]{ uyL_(8+UԔJ+:{zR))caQ W_gDH R(TrO |k++o Gϝ_./zc\JF|2Z1" q3ʗ`=6~ FHE ,D_O  "F`|!obk $s$;So.#Ҳ!}E "p)X*D[1j=ԩpUn'RB"R;ʼn[J.h佸HV^R4e]@ Otaos&8y.]vTQ(o'#2"crGޯ3HTafκףIs/KƒgY8Z~ ^8qוs0n=2|sYGIo)WM,[(J}@( %i{`+nch--`Hkmpb\̣WP-UzE|Wu w&beXg (i)7Cjzb4Bޘ))&-4 Y)ʑi넁zjsdk'g/1&ϓځatJ*D&9/zNZ<d['?vV𮫴] & E5NA{ua.L#uC"9V"WRYkq-\|㔹ϫSN| !\qG@-CȹW5AFz A ~Ui W/xM5O#.dJgBF wME"n7*tYEŽJ?B(ܓI fclw6EĚ&c%-d<`r!ٻ3쌞ڽCJz /!A6j)[lz5.n-xf BJIl$3 W'Dz|OZ4Hvrf>ǎ_{]pSVP%d'Tu[Y6(!;W4E 0'R04 dEF4p&Qm i KVF=Q obPgX ]mzP/z/QJxӶ8tUqs3?PjՄ&"2mݗzؖ4#CO]XSŰs6BWqWr\QfqwC= "JgH w&W ͂:cp׍iD$K B\ VRwcʞIxQP*(lORLDIEʠ Xj.AxiюL|k@-v-g%C'e&!f5{H7n:Lni-"ǻ)нf$BI&az0IU_W;6&!ݫ*_FT$".Ei.hvf׷,3.'`K-,ѕQQ[΃Z(Q(Wy*)F ઑΎ]qWr B+hXa /(U^PB5KpCmvyUwS詫ECjFb '_?בA!V8f?2gqOQQ6NҖ fVcNǢeU9b6bEZ g!HUY,yiPs׀-SMkk}Fqc%Ъ JwmWQsȠN.X_~W6i75I7|qiD|6H,̀-,xzw BU$aRrWk'FLKNŘÜٲu즋y~|;-E 12Eru׳o~:lhA>0Z KsC52мknd=RBaFW &d(-73N]"1,7ecXvdD⁷۵?mU/F3NS&Ct`Qpd9urq[]so~8mӲx_WU *#k!&fSG@lrfM2 ' R}8:h@;x/UԈ{mkϔ~8Bn"[OrL:۝7l_uElSbCiZ i ϬӚy㺍T*ԣ7lP|s&H_>߯94&6 g5|D[n6KsPZ'SIZ,PHDG3 Yȗɮ# ǷT,.@\ >͐u_;rE ;rmW8t_`,GKxz `@ƕ*54]ǀA'Ub}l~ 8:-bO*WDʷrnw'ʑ?1]Q+5'Ap}졌 *(ڣ0}$=UI6,*,un=PQǽbIEz5X_kb`{˼$Rz̚IMFMܺ!s:r)AjfedJ3rGBkRT7 fރm *@mLphg;v ɟ xwE+в%*2uQ;e؈ }e|IL +?OmOyƭ{}qPdޑgaKrV$}Q p+_X@v["TQg9 ])Dz'.Ю;|/ obyY3rbX@551>Kf!G_WI=f} %*dYsQ y>šLTn ĘQi =/uk>d*:,dB5$HAW4dmk#j,5+˃ɭݩ!S)/+Xt/:Ћni{gUv|L U` S¥AoފV끞{"7Ⰳ^`C^e2ws>CY jn6fޮ%?P]:?g;.DuY>ԽsȢE"X:Npv*+upu#tQ;c(JZIiek3d7>:/5ڥYRiȘG吜c zmQS BN.]+IE,+I=j_k糰3gBt}MsX2mV%>-+p8GW5Φ>Is`yd$̚sT|F$~fOrh&s>7t 5Ӻ؀(?,c[ݶVks||yp*>+TPgԝBCYҥ"n U~5N?Fo9zi]ZP(X);Rdm .BszdZ#@&7>[=z| auN|񉱤1'4m=Ʌ5}X^F~$S &a65.^d@|P*^E2.\*Qnp6O i!˷@nmKq@nrk=Sh~@C oŤVFR<:ww0jdX6!$@ ?n7BNԃ|P;v<(n[z !uT(״*]l B2GOnO'%>DGu`B+@N'*3Ϩ('pUȱbrF)v5 iܶˆ<9C#@J'sqXm\.hC;㹽6--QѾDoYn{<ݑ8co-&nie`1h2-,8/׏CU(+$N&IڮiܤECmCRg&i(hkAzDQ $@*S6ڗ.t%2fFnN[|G`F0 vYe@Y'-)tO)ib<ڡWYphy*<$[=0V4Ye/D#2QYñrupoDӟp DPsX_3yt^AnhU+)܊ޫ4IHѴS6SRB` ;|Z.(&UfKE~$5eP:o{d>Lmq;_tpZ)k7cYPPwPg>-Y1I.}+qQ3 K #^N$cӏΠ[Zvzdgg:ZsrEmiHJ 7a,b4ю`4 !~Ԟ?ZkU2| 6Y1ҞV2HBc̆l3:\ z*-- 9L9Mo)]<4$>{wh[!ʲ_b_燰иLZyCCe\!-_.ckX%z+gs &ꇎWyOfJ:7c"ngu\}i7{cD:!Rg[X2ֆWg~9Fo:!eZⅩK=zfj0K2OuB nP ؕJ$iWv-.ibᡔMF9r1)%ć!;~͓Rjކ-[-DdVCDݎ4>' [m%YZMar4o@3>T ljwlD2K$ԐEF:q3&IX5G'^&·x}+CHJؒ& `Iv0lC_-AL<ǎk'$vYfCaA!:04w>Xg±ղdS&e$]#Cmg ~HAɒ j#&_L͜"U`T6dqE^9UԭmVޡ |L:1T敊 yF-:p/e TR(u{zRe%.Gq{FT3)]+_L}WR͕aD!&p3˞8Jd0 0>"!!0$s{px?3"Xa64]xّѸ81bg`{ w[ir Nl a/-wo`M)6feD {(p9}ӱAʨp<-eu5{d~t[m·XIͩK \K  o[hpbotISTjSe TF+YQ#`u4|멉i]LJc[pI qC? ~>,H㔄-S]{2_c"gcM=ĂhVJģBUd(T B1]Ċȟkalx3Y|t1y .)]X2AL99h0[\A@O|CsTfzu:UY, [ ZK_NU;Hr:RZKci4.s` vZިzl`p!䰶<g[&D(~2E嶿E~nbظc@$@o?JJ'J>]ٸ/kQԕwR;CԃxKjW떿~һL+o +-2VfC,0N{؀(S .SclDˣ BY;7z EX^6rՃai!Bb|R֎DP@ ;Ghy@*(]?M&)3֣2j2i7F8к"QӇa6;rJ $+lzU@,yȓMչ>)1%8~;$ݓV>RHӕʘyVco0iυzSvY&%?=ɯƑ@+BH3^VOWteL+Y0GuyJ:U:~6{"Lu2zUGڽY+ _q~G$BUAc}#}E$0^l2c/A.Tfpƒ\мH/0 mS_\е*w3^i \)z<8)p";iF X6_uvx^Uknӥ[Ohػ3^㹇 Mxaiuxq_ZmGރǨ=[? qpAZ,${9fשumdW; #;,p/z 2%6^6@,ELe_L qS#>L X #I4\ י[D\]Z.ZR*cX-#bGn}bg̩ZWhQD,C^ 2oXzVHFu,CVNB!*oJruJ/檩9heb}29OS VZo r,oG>!C^Qo 'UYJ4҂8XX̷}ΏŷSh@4C)燒rbGؕ(m( "Ӓ-Up/ݷKoF-7yv8NJTX* pw=V{[KBK$>jR4|]) 33=XT; B} >R !N1_pt;tSmg$.VTABv-4 hyz1ְm43y[M Q1TotܳaFd,!#v÷d@$yiJICe|f*MVt͑8W S/-)k5_ 20aVqttи:B)gM'ր7&YBN)6jRL M}Ua{=qF<.V"`vk yTw*=~d(븉2[]{XЉr>*=ܣ',67BHFMEԃ}"g'KO ɶ1m֮إ'6W*Ht 50i bkS<5Ԙ|'ow2Z+)J"K} Md@4t]ĀMKu9,P!dDf$hӳ$pk,^tED"Y5h(a,l\8dR[F; q^":óXX@LnV2_-|4X=* %1K;@]= tG ?aCBC^{b'e)eU-rY̅esG Gӝz -_/*7_r-V g:j{S҄8pnwy' tX21? 4ubNWQ4rxl4>ճвؙ j gN' \m'3S?+٦^WU5&k:vݢnIb88FII-vk˓O J"*mފKrEq~jÔ_\̀L1oV?ъ% ~D{Y=0ohic)GQH^݈o6.M:NXdK<[v"f9JB IuOQ=\C O3D%qC5rw'.3GANXɝA zx?zK{:ЙEV'e}$҈|$Koe2kC!@`ϻ 3R G5:_$BY9=g $y):ښq3@o8 ӕMPa?~ 5z5\"$&Ub95o`^s~s5h҈YxFs^r=Ģn6rǭɛVlƐ!'ەL] )=.n% \$4>!?Oo5q ezl+S[Wkр,lJ!?GhyA? Zo&:_euf3,;/Y @(P0|7r}j]`fdD[)9J!4LTY A½txgà%= b9*f&ԸOĝ_vxE._)W }tQi0xGV5Gaxvbmu(`" ޜ],+qv+ fk=zΓK6CLs?iucە㦩 tխ㏚ 4pQ(-s%Auwn:\'ɢoUTEwYa4^L!S&}umFƝf|(#06̕S"5cC ߣFud]즺QlHub()| wlJ[BȒWJ#XYBxx`T,}(YOF4F>"Xmp6w=)L\c`Y.^˞k}72h7hNB(0lQ=@ vJI4r{jeIJw!9DglS 1˷l/ó[o$n$"0LV1K>&J2s e?(iϳGe)oa Jng̱ O<9RnWswL? P!QURB?/#u?ǿ"$UX6 % ?+J!|_tuYreEÌ/^ӭO.J< q<5:O3L 6])xћM$JxhuN+(ME۠z[|h?EKx3 jR>/aZlfW=3i-_ qh ěܲdT :qHo%牾Ƕ}^Q_6\G^hb{K #_*+v ۏڞzu=AtV^tL3J.?q0ҊxzQ ^ad Oғc֛cMG070Y?>ȕh4Rv"5B\nx~.^E9Y|cA"͊5Nݻ8e n;KpՅxeӜ|i99kmͺtvUY;Ωgc7 i9[U9k%3n ^Fz%qCȇ.wct}֋6\+4wh.BS_wzydDlQ9ݡ07@ oAA[ȡH/^Q2_l(ʸB7&Fx%`,1X浢9-\[=U>-YZוCWr^N6@p2TۺT ѣmx[e:^u88pަ#ZbiWS>W)]0ISYo~CP SqղzW8YPR\A#p1ĥ؋ Z%kM=z?å|Z9YC |ocyߣ6 Koް qfX+ jR6)̰D"oG\QwMHGƳ)<.,"Jlk?̠<^.`4ߣN' x1"~0ӶmSSY1w{ R_X*V8ZęCk]zꓮbI=50N e61Qn( 6;esVpC^xml ޳f`f5LC}6\JjK=/ъ-x \0i'#Ǔjm;q7Jh΁ bc"sXޞuGlD^8*m1%6 "+,&NpuՕGbt֘#c:YtM4VoQ}ZhxU#&.v]ٮۑi!ѡϐFQ2UuZX̅TOD[}ܼک!.:si9WEK7..ຟ 9<=gkTaXMʙ~^ߙQt5bsɯ/{m:Bg`( M/uRgH?3"T5:H>ULSH)v;TvsXyEb JK7s A})e|̢ύ(M83&;-YJ^oYbEw@!أ2"k X~@(ӬC~_us{b, Yϭx~ z`k@B_0 /-P9%(")Q0Ť31XW]jBP0ĉWy6#m5 /0^57#ʲũ;.iʙN6хVO"uy۔6 -82N7}=%B3mՂIi}ܧf5s7AqQ0$ن)$>dactD)&}}^@.Xdg<90>`R5>C4JԟnjOO:pOb{Y7P̉AWQedgl:`D D,j'O1F KE*d+mY#C~8RzjW7O\ .]:kJ!nVya9%Hn, [?6>PKD8jWI$P:Pv%>@lU<OBh /;CI&2v(nX\+^+~Az7y i7Zċ4|#_e;)c$8eRDS:YKQdY;~@|Ԛ7x~@!2G9Ƶf+zxIГm1V onH % 7&tr ,-֞k!{L9l~[ HϱA{Sf}E7!mZPS|*J'׬peU`ЀQVP )Gl#h1qcndfU[O⹏$ tdu|6gf_1ݒz P&nŽ8Sv7K^d?$oYξiˮ&=k`+nVT0xjyzvJXt$+h%e8R1#d:0ś-qݾP>܅>S vt~dd;վ;ۘ+] }ѩY֙iH_nԲl|p` \?o)IN]6z- 7Y\^ye@噵Γ}["o1MO0A9 E#S)oxX1Qzж;|,NUx5]St52R+`d?"lvVK;лMN)y1YUa\5_?94LKUw"ʾGsBo=XH*ӥCivpϑލi/])gݛ>&'q:+Ӱ)/y؜n\sApRoH$!HvǜN3쉏ʶ7}KJqTAYe:ly:}W}:NcBݾ=F2؟=ۆ5UBZ?>Warz3nk|}G3RbYuoGޖ ȃ]zW*^ ?V{)uJ!?,γ􌅒޼]؜IF0gW/#Q5VzwJq]>Cгߩ5P):eݜHi/P0Z*Į6<_Ķ$n(yF炵7z58!ڇqڪGMKWV2W_V˹2D:nLÌ&1q؁H\Az kin>dBoe<8T9y"Sv)rx7E#ni`VvgSmkrcf!Pev/)R/@$;"OjxI&Q|?5χ_rB.3,0q}]ԧ!|#m('*#I#vϧО7f++G J?,ah9!"t(z1gVA֛<_3.aw f9PΠ@PpKYf;+墌tB i"7ޕ.Qp[@ BPT{A̯kƴ|CK ۬wي Hw+$/ gb=; yq;M8$ų6 2`N=t1a${Ӑvis.d`#p(BͶM|5?cl2βKrxXDL/]^=m={~X%H({{lg!y\YW5>+%$ >do1fc qŀт$!JKaU md߉0T$`~ r[rz s%gU ĶO]⃽:c. b!/l Ј"9b{Gp;E%p!0kr_"Jb' 8*4x?N14/)c|&^έw@o)3jfl4wN|8%NgsIlܲG'j8J0~Z̆2.tҳ ޏL- Etpw7>=~[BüxowR[J^vU.WXG}6G@_]jѹnbrπhuK$:0 JGnFx4 KSP! 4IYhtzYb%$"kYlDzs|xBe啵v/8i i*]&sv*ȸ~&.حWdHvp]ģ0<9B#5*>I|UriQꡈ>KhJ!\DGMz=scn-BUmz|cTؓA&p,PY]IP-2*ZO|p4mzc՝3+SШ_Z_2 EjһN#D5TXU4ջJNdsEHG^QƷ3'Y)oT#d@y fz 0Gthz&X%zoP€[C)w98yZ]gұxN> O@,Nl)EUaS|g$ώzlvнU?hB_㌫DfoM\:"WVý%ʲmK@ΗZ.('0݉9i2ǢFv7:4orLY3ò 0>>'UpTf 8 e ,Py(+ퟛ.uJ PF00da ZWo 'FOR"-m\_RÆ[NCלŦ<\f%4ɑy\}j8cy Pݓ"ìDDC^ Zs/{;BKioLE2 i Ep4l6DN_ҭaUP{ kOYJq>t^Evt8ۏrGՑ$ޞw;gR_bq%M΄W;PF"YsK?@-J@xcts:&L0tMdZP{H?$IHB_*{hnnh.:'@lp|.gd*~q˂2]!ɲHIJ(|Ek+tѰrj{<|Ph,<0I$݅Niź/"Yt}] "tNItWh#T;>5Z@ΉQ ¼;!CO"PŤv'A^B`G=ai٣N!GH)X D(No} 9 u,Zהw3n@s#=d\w%?{!J.`vrϜkόw J(_ jg}: Jmm (O!^lhJK7^:'k|})O7 |##;h=Ztw?7D6ʠ i(-{`_k$;lZaƭ񙊍/{:i.޽-KNNH0/*KM`,Lc}xz/REST!X.L]?L7b(5Lk01SѺ#mDS,gѴy1 ;pUc|I 6J_KwK>̣Iw=yOIz[uV1җbx/VIwnM-Vh .;tSt# $Q~D:(?!^nh quܣ >dŷ]Ro=S;M ^5ڠ$J̠d1U(Ӏ֙Vv$%Ņf͛PF)4ڛU:V5joۼ;`iKqp!j!|1 F46x(>MS݌pkQo񸌻o-p_an$>gG__^~yB ={k`g.*~5߽#L{p!~߀}_Yp/Qq%$N?H /mQx{cFOC8)n̏AgѝO,w<+sQRG[ޔ.?(g_Y%Ljl.SFK2>|1N9'" 1"a|Q#CEt4'VHR̮鉯!Cx2y"t3HSm<8cCVûQM@BbRnne2CÕ9uϔ"NIRBr L OMY}?Ԣ`irL4)`(]x0VSɬѐVw *E6V6iZU {+-EӄBSs;)monB>"\`K/(K{wIrH<-w%"Gg}3Ox01 .6n2GQͭ?8{o*qtUiߋPN\rk5ه Q8Vݜ.lo몬35r;f0{(r=vu lEɩ1V&GW7 ,'88n2m8@~X#PR"R)JO84ǚ8|{b m]*xq̛3)^h- Ʃ5SJm"8 zƙ$5"l j}F=~sb x86_ABfd CYدcjk bl{.fqNN6 $Qwr9 5ɍv_NEJA70qU\iUD==a0ͣW^m̝ V^XRK w Oh6ɢьBC!/;!NR9%|x_I]6` L?.> :L99ج CU;TUef 4ek!ȑ'HbAG`ĭuV31ٓh5+W]B B4%M/z1;`/įpl靫CګKp ҔuCy)V7@1%6*Dc|h+H@ ̺a 0b-ـ#[Cm.5cN#yXp zͶk\B^M_Z$ *;"Ff<%GM}^q{hN./-]z4mu!kJvKVW_[+﮹!7Ij~3{W1YA#c![g~+&\yZ,rU6;ug .c/1)~ށGDؚA Օ1&aDq,<~2}`ɶ#L* bضrՎ~y&Ε(]c:{gSc{B$H7%yk [CBc8.foFZkwƇ;a2{\ioja+aO:IBj'j&Kǧ(*U{JH,bxlU[" Xנ9ƿedìrBrȯq0adF9 a|QJvt_&"\ܗKkM egqA1zN߄%!'%&Wq:ro1eHc~QC1:_9LK7 4Hݧwt*0;?pj6LZAn\&Yi5c$A_iz% dFt,}R'TbSbFMej$A8{کTqm1:XxSxr/g[|73Lt߮5{=LQ.sכ| !o?C 5 R8|`ߤT3cúVtuY@0yJ0?SNګwZ=PS2Q3 τVd]/K <  Ҥce ۛ?*Nn~nr!D Xl ;kT~' ε-~n臗b1=rںW+ [T?qI'=\:l fͬ1nv] FCpI8|J@omG";]ŧ=uR0kW[:#ZK_T2>}!<}b/I#"'ҷ۔"m:(v9p@pʽ 2H/RB`b~5 A6N%AB0D/WU+OAဈm Ը7 ((Ljn#4|2"۔xSܐē;mkcwzkWɫ;6ɓ J9Ké{hasY]㗔h؅u Ay멐|H..o+uѢ-I>:hܴ-ds.WXYsV܀`3-r0ڷ1iI>lӤlVZ8gf,ƾ5BqjA6a=.n_P%voNbRwtVwFmU(*FnY,31Rcܮʼn_i` (X{+Yr/V񋶠˰MP؁`x\:} q5g_rҋq^ CSY1#;<08+(Ѽ+f#F 4=i8;Y\B4vRʄѧ! 93Sp##qB.暑.tY4gX=F|rf&I>Fbt@3Soxu)]f?}L6$.zkZhʼnǹOC 5\7⦳N 7-05W 5|V&{`5؜j" O[?)u5Y-3)b T'zSQ9bq\tQ&^Z@7Y}f_k B_HQGnNx z,7G]Ս{Ĵ1{֩ejn&V<+:o `RPGq$gn^SZt]-f2u9SbId)t|gф~İȪ* &9y3vkǨVXK]4| ~ ?"g,Xp/U J\\PKȥ >Ty c8]~k7i~(d snɌi *B Rq8ahuq?{۠=btU0Ef-bԜڏ QaOg3a(Fm>H]xXiQ~f|!+#0еqrfˊI TL)T294;Օz[-OEbLnvBlܣF}Q(4E}PPuȵMN~Ѱ'L":HYn'È RdBnF)$Umx̃ `+|:H>lv_=ͦ(= F0vڢyBN)YYl'41UE}6TCds|ɴ9ċ>c<)=YڥZl`3^}4GTrD*TJ!TSSũ3^k`OiM%oFL.=LD$B,kFcK;]T$38^Dqpm]l.-D*&zKC#Ykb|Z)@ײDzڹ0t\b6őxB>=2Z+>6JkgYSV^X.ФU{@=O3g] gW""Y@ꋹ(MG*N)c`Y#{Fn׎^r5lT>,,0bl'߰[|N"Ze[[)Ֆ"aڵ;/*Y9[+PHxW<ȚG{銱40)%:H%nTT)`V|do.Bg4 8 ] AoG؃zz5-wn)@l$blUt(-2ޫ{^Jo@/R1  9kF8IzsvlcMׇ[D+ƶ%BÇN#bgln7'z=K0.RP89 K5&&q{B`C;o&+KST"OL@C?扗VRx%6,7|h|iٰͧi)thjH$*ȟtoZB\R)msb3*U]|}&'ĽqN_PL8X:;Ֆ|0Y=zdžZ@qsf(+i;I-Az3bIxc&C1k3sHokEwΣ'V6dQV^̈́*ŏZbX>N&1]8C$^n 8.Ea[XdD3u ygW*ʫ;)~S楩[8]Amum"ba'Žv%3us:/) ڋWHIvOg} e7@q>mx.F(. *ɑj#?7SW.zr$659;6~i>ҿۇStV+5]_+l`J:¨*@Z&XR]v b;ivh04No=9ǒ^9JϽ&cR#|l r4bkٽ6?4EJ~&J]i5k/oS2zӪ=aLRGntLD{fQkV+dh Iv0<@qcKj3mnP|F_m:uZDSӜ =nI-tkG7w"Ce9f%h񤏖ЀTD-;P}dׂNܖ0RR(F!"3d1 ߄mGSKL/v nQ* ǤlaыʊGkJ].G@=.õtg\O:D!OB/%۸IJ50r *'Eʔ!ٜk+41݃M. 9rݽ '4_BvY2˷Gz6NU5<7ّzT6jԾc ~ C tE6$Epr_QMi/c6YEoR$!$| `AHWؠ@ `ssT̽TXsW庳Ǽr"ʝ1~;Jw2q+Nhp)#93 {׼?\KGizTOpU^~L6B(?3gcO@/V 'P~GPī~/>h`kV5Ҹ{pM9FrTg s Vmx[{sa|8w.Qq!7?Q`7SX|:l̿4QZ\އS?:L!^K!c9!õg9ZMgh- #ߖ^Rm-\xϮu.gX}P(]gWP^ pqyX1;F"AT:9m7]۴jXuo!,福WΚLw&dP1,7 <┏jPa Zߺy ^ 7ʝvnn{fKF%,guh2O! P["YɖR=&鞃BUM!!w&ڒ5 =`HDcq?_G%AB¼0Ynjc㾨ㄇe˔w_hV;t.ulC갪[haњt7G ^} wZ|JP Wk;y/ߗ$SR~ [QݓFL$[m8H *RF !eyYv )U62J2SB?_Kw0!FDBsGZZ g5]x9C{{JTNX~K(ӛ0dR1ݓٺm9PYXBxrs|O.V04ޑE'lq._˻p׊x0g N6V=@tHԝz?Mk?l2hzv5fUirЙlR_fɷ^Bs^-?KТͣ~l-fžQMzO2x_,\@5}i}# rz@:uI(ވ^]TDwQnßkr_1< -%V [f /W@Mz b_NK XqPFΏy)$nuq<;1$C݃,+π{LJtQt`@n&\҇ `SCcl]-zXwd>' )n6C4?( #L$ -]k!gB Y95|so3A~XEzt3' =ݣz8hJ7cSTt,q;^8o%=}0/ߧ"~$ΆT;ĘiN&}"-.\v4Ǯ}kIy5 <]t[a.߮^Zg~$%J,yqfˆ14fpNP96b+jm&):%&!'闼fxBdvY[>KK?\=W,jL/'%5UYIb-t*d|KQegQJZWB@&pKdڼ?鯒.U Z(.X>NߪY_׶-ę) A @XJMȍC?G"lkP,*hAM熍]7ߺGt'%xob6nHk"ށVJ(rR衛Q]{'Z*T%sl7m*G970TiV !v"Ai^fz^[R>7yGwL}0M T'tq'jސ'gc+P,g^=@nE"gOX76;X ȯLc I70]&\̥ȱqOټ(; 2;!L̜|0/; 43mڽ)URsNSFr Xy`;>~8 }_rtgp=E 'ʥOEj%:BNүyWG,Pkэ[j7{2F{gFh4ܐJѢ8x](h@x"%XE ޗq4 h7,)Q{sn|6 4[+Ц9:d󝈅c+__bi0GΫ`C~9R34Qw Q`K)h fFH::1`uR;_'NVŭg CT}O} U-rUQrl^$B*xw)Ֆl13Aց).>'읊t-FӬ(H+B  R/i>^QUB 9O`wܾ(MCU{z+֧C/lP#[7N9^mdaUP< LX,uX=\ta$'X*aW&v2yJ.E(g Q* ">4 yu?:!Ls<̖\A6wjNsUA٣&4,wB dctx^\T7.hXq^V}Hټsx\ĠZT^^kW`?_c:?KX!~ğc1uo)h߮  V3vB 7ܖ0` g ;Dƒ ÉbtEJ;rVHO6D.qx6>[AFOa_B7y8#}&R;l iT)dlՅF;7/ RDZqn ij tv[L_֜Dyõ{99&/C65{jEm\ؔ{xQ- 7F1/v*QrV)a۲ m[`1oit$ުZI;JM)pAB5nµ4cfd9WYM'Bj@ZB:VұW4Q%"2,9]H,t(KgU9'Bԙ6 i6/s'v>sb-0v :~)p^'20ru(LME{4C4h񅖮(N<'"{G"vA!,@Pk8e츨abP'g$i5PACt_!v'%\rf}v7q?RYmGy@B,FwC f8Z]CZ֒>ϻg6 i; 5Gr7ɨRL%ȝPĘ-!A[+kJcIшSs:Okؚ5"௸7., %Ge.O'D~߸i7I`MYtp>mA63/)9F yz+"kM7#=!Q EՠחRZ&n̓y2\SوN[Gx |R0O&[i׮g{`*$kuVm":4zz+{\v$^M$\[a~u*}4夭 ~>.[`>3UV"~c8!`I`kŊ)RH)J~t72$d:?)ιġ+Vң2hY9/hܾ" WI@ʹ(GaۦȢଏ+L\W<3[dܕҚ֐׍CdVD?$p0d|d3a2O2no(J{-I *V21صQ1' ,uۏd3TS7m9e0NMR3}f&PvP a=(\j+nD9_+;1 -_oZ%˦ԑ5\Ѻ'|22'ܻ~˟dBl BH>";_>X oo5cI=*sl콎Pt9Wzp j֓&?D!gʁ)gyͥ0b58Y (#K,H5&xu0g2ps~ C.!)¹=J^߽)S8T¦Sy)REn)m`h!2fnCՁ"p}-l+Wy>ZEd@a ǺjGǡ՞CDHP-FZ:EgyF7BTMu8LGipDq `Gstq>JY*`ㅼh2 {Ɩ&/%]q-.EpV+}΃d_,%͇WyEf=> a`ĸ~H;;IԀ %%{XeBE߹!kgҶOAX b1epTt''ԛ:}chX Zw# 嫹(xv|~T.^Lo$h>޼n.s/^@]3iIVWQ%^f{rBilF&i{_>qTd=WR݆3w,go,लqOL|H '2 wD=QVF"Ԣ[9(\VmA{<,<J A*%}{נ " l|qHWF?#lEL9e ^Vњ@/rI 7f#_|XP2CbQA<~.z ҥԾOML־5)nxzy*8.I ѓ~OxX B]d3>=D5~m莢$.*e@9+ @jGx |f$`$G^ߛ1v,B]z6>Jo,u@9N@cJCEՄ{J翡u=w)nѡ1U·^z1GC Z2UKmi6 P;W'֖};旁 Tc[ۄ`t9sI&4ZXkCn9`X€-1LfI=fU{k WV\9|qjn$#Ű-}5Bm77dQat|RWey)ڸƚ@ n0DFX 9mV7bWpTv5I)Jt4DlQ߄ REwD<9J"a'Ȇ2xM z25w>وzF7>"H Vkߎ)EV7EJ]s6yIｱɸE+xHb_0o5 h"V65-9ZO̸{ i8:1. zT9WD,ɲ>_),d?ˆy~>G jj[0B IqkS\\$5 gy|Ka+iJ?hOQ~.Z*^׎Mubo~<odxQdv& %U֤t.1|<ӮZgE!>83!31E`\ԹVEKl3$:lS49.?R(eMmx'ENr i$>TkZ3T&SSI0U88 -B+կ,hIs`)cgT^\={Sm X([|莌#~z}Ś'1&tecD?&{P`{2S~|`G-\q I:v] '(̍ٴx}.&v5 +zx66mu'W Ǣv ti4 +(6:Z(S}^IuX9>wЀ?hUDH.("`\L f_?>j&!XXVo+X@ރTˁsˡ~1%_gw) |M5RU2!su JM-(^ZW\&upܢ#Nf(M߽^) apFS":rn-M<ȇ7 'yn&fS˃_˂/5{ot Omstl0kveI {*a*_(ݵ&?).job+l8KLt/$04sE Wyk1Yl- h=S4jSm L!+\]) b!] Λd(w]PBF9۟FrQ-U]E2ZI((>] KdZN=1S}zdm-XLJ_'?M6lq0y\* ݎJa2`[qI055 r8p͉@GnlAs$C,bg6diql|3~ouvXW#W *FlT}n?+G֖Zy9s8O\\8]ߍLN(!&bZx =}d&la7s=yZxz3}#Aӷ,ev |@ j8C\25]W G-#Q7Ȥ9u)kC]c؈.˷C+ rjo} uzU'qMѬ8ᴩ[lF7'9tE 9D_n"PoW*E %Pc1!&\TԿ*h I+\v1|q)؞Gרl`L,2 [u[ !  LZ+=fc&& 6Kjֲy.@:!ӕʚjCMC>6B*d.OIF-q \bnV ΂H[X(=pT;Ȭ䙊B;đhsu 㥻`x(НQ#[f+o8!$}a{>G~T۹*++̴$9hup֮HfEU=]:@yiHNdYy @4Z\8|uOLL҃BGAk%xwGVrur^/ iG^2k}__0P4KFW;e@zi;1~4Th̋yfq^Np/"?Z+%X)]6!>ZVː*uOtXw}zUVyL3Ysj7+CA$Q˳7^(—wH|Ȗ`ת䵀jV޵Bb1ɝΠyޠ7X&P;fL UnB dx,mRj k]qĞ'<ݖVsUm +^tFWӭ7i118z lL U\+0V_#( /U$`%p=d.6s0o !of$+O`651дǭ1q- qW0flr+1g~Y&́-._%# MmmN̳J`WZ1 {:,fFW5k^W;-d3Y#Goatk]0FyKm'Kg ZT]A#0R.7 J4)g rޘQ@SiҐSORjrx ?oPRBG]5j&hsC7܂hcZG,5a5x'&Q3 >%iMB`#K#"zSde>yˁ{E)Ix׉RYG3H<_(}SDž.q3 rEn z[HQʒ5^#>IϦ_Q T+)@4qxKmYp\axEa=(W|̷+#wd~Q<\=N p4=J&b.t"Pޠ5s}#6|i9(e=N 㻄G|'m?Z;yYG4q|p~%Mesp6E;8_ogk=~:MD06Yf{aXڗb[T->]=}`]5@]H[Qϔ~EQZfY]s:]e2_ӝ$'RƹgCHiNj>ůpc봔$(si~J}ˑTۗ&vi7f[V^b!2L䊱]ݟh 䤜)ǟ9}w/: EvZT|%7SStQ8#YriOjI"Re?p3Xel{ʩ,DE1ɻʭ\*zINNn?>u3<՚u^* <,AwӞBx&|am4F0KKףA'ďz6 @]Ib촪,zEaM'|n@X+$P[gI[zQ;,t)mVguoG_I*AMks1֯˒6j  >eAdh>{ٜۛ}HLWp@}yЎ M}ez7Kxك피nkemUtFB E#2%Z3O+qݛ*ꑉ-Ru4*\IiCWsu'gu[yE%)j -ƈGt*UM}كPO<ڿZpny ӁqtAcW9> ` eP=߯t{g~<1)ǹ/ZO& Bpџsc}Q&:4xSjxHYqs\9H)[3l.EOO=Tn/ɚ_?"6Vo Е=t9mOAm+,0ٷJZ}90ue3(]TvjXPdґS3[`<׸$]t;Z裔{7aNh',ݥ~WN{}Y\HLԻEHS%:3/ԘɈV %%1|6Bo,-ntЧ-]7q+8ؒ<݇WX-wgȑ}JonεO**'TbQdq9S%aSoΩF'={g xJf)$68C4gzI|&DI-mbKo (V#NUVjH݅ϚFgx,x"3cC ǩϭXP@&?RYzh`^Z)>'@>LTI-z}<5 $}Ȋ3s W@hjDI)RǁKmB#7da%[yMq*u0DL\gU:PpqDk">lյɸkš,XaKXIl q]Gn i "Y>HȘ4G9N}O1u 5Z`ݬn.#y#Y|q'{NuL CixmUi蝫k씋_HPlx+b6!>ZB-KqQMyI5)c"-V :P f sA`!o:;0j0AFDс|6NoyWjI$QcN-|Y{{,T!bhQkR`-Oˈ;+C63TWnB_I 1k:WT9$Kb)fu< j϶66kGi diJЧ'):Dvcy ygH\Kt5 g{́QH8X2;O&3\$ NymV>MK@=R.kWw!߷Uz#Vt DŽe< d;UeύcK}}sj.p 60:=jZ2L]d.͋|aG2;[hψp ̴9%NFSN)8~R!C "@=\`V.[5peQb%OESrkNKZIWF8?T`L((>_TӃ].{ ~ OƒhI,W;U^e߱tAoE͋ùP;bX{aavܡ5B| 88zߘ{(P>F-NK^-Ҧf/h -k-L6S~`5JaUMkn w[lk4S$$DѮXLJ"/zo3plŊ8xJ WMN @1X^~RtmA}PKl;s~8n kT榝+VA R,+U#+DqRcY 憦IXI|XR6պ,rdO bw)fi^}7QSoNL QD/&IVKR`W|cH (g*&~)hcr %lS˞.Na>1j.Sh՗nvz55wL7֦Lk_f?pdoYá9+h/-6MVvJR/R\y+mlSt1a$g(ﭥG Y˦Z F_VNF80uc 섣rSqȩP+=j\95GNl]Ye3S2x:H=Il3 #:E*:-yD"2PcXLkڰuCw;FϪ4P5;Rr?a L,84%A/txLGje';Q᳓aW\mRYM"C֌:-" AjJ05#n 2"]}E<ݾ(G;9a}{ B B*vXv"l Ps$DlGk]NmE tӤ8en1I,I[ ) ~cͯUC2}E>Cgap0{J'gBjj9PGb'7oZ33(oؽ L@, 1nBDޡ) K{lc6^$~8G}VςEH(kJZ/[|7' S@P+G\`}ZRlU#߀Y >.7#E2Z 1UW'/!@D1v(3dWYDwA=S\vfY2fz%UUch&Ҩ B}9 `nN1UjŹHWV, _*ULr:_ľ|~$w"ϐ;RZKK|Yu^$ 7FodeG.}vdT㸔s2ֻڍ!\Hr"})ohʑ3@IɈPREZFv!'m@Abܳ~?pdZ:PR cSفguߣ}׌ŪmВ9w%hы[y0K\WN,'`= fe]ϓW=$[RB+yFզT~ 1x)m!KD;Q2%uΗƓr832RzzCϠ%WԶK%">m.#ٰ ՗Ke3laFB"(A+\?qneV814W|Y)`̛R[T&NO R=!ċ17*E*u@-Fkm}O"/&0mvSSde:N0hȸǁ# >,ǛXRO/*mx 9 Tۢ7rchZ3\L K4(*wsGPsAMSjUC8;AK1}X >rCgzּ`/_>T4ۗ" DADk&*^\R& g 蕴f/~o{U 3kF&i;f &u ls~ߙ5AO=9Ev[r3ےt:՝4v#@\HCL0d$ $,r,E9պ<ԱξgѡlP_h)4qp!96j'ܝS3Upiً,) _E` }Z_?R"zbP| - 5:UE" le5vC>v DEaOK%RR@񺶥'q"4ih܉? V7~$lIcQ*5q<cn-U%S@kY-KL'K E;F jMNAUS&|HEsԺK7Fh20TF6mU(%Sa{eTnnwL*$M{wOSO v 9Q:;qPײv av~.PJfXbܡӣ"4ULyEwjD$3{̋'F Z.-. .ՁIU5Cu[n1< ߁vY+*hPύlv>grI{0I %1z!")V޾OqvҠ > YsՌaG$kMA*4%sR Qfc%3GCE+j8b/GxnF Ci>$b_%xr7)8elaTq\[uXF<_R+}<րK\--eW9?E;_XغE2v7B3ƒ @X+l%q}2"ͥtގ7`%@xJ"o`β[IԈ6Oh"Bcl0H gTpVTolC.V;.ʾY%\O EmzxgV;-{An/݆ka{7Sv3$Dv[ vh-ҙ1 Q Œ}5NuyP%,eKFn.7HK|+uV !Bd(gWMmZh3Y6>~s/ J/cSEn;SA`d` 85pUd%@&vU}P}HrUɭqnx^|`gR_L9E% CӠ"tC'UT"'_7e/ L:+k.!`I.g1,!d $oY4zǾ(Q+:+ 9E\n|>snXcesGG۶ ፼K ^Vm tF6Ek6]k $K\!' 4ർx˨߉Fr/KP08}RM2lB*S)]UF*sB6#TrRb6t/~{=3w%E[^98 U%K/&90m)q.nmgHB,xܖ8Q}wI[ַP@ҋ()`#䲅U21G(Hd%byCQgݙ>i/* Utu6Ԥ2 +%7CU51ohs>ax3͜:ӏ $A:C1_QFlw*QnP I\vؾAǴyHT.*ׅrxrGeu67EneW(k䏦i&uw0'c8k!/hZ̍H.Nmj}oJ*"l\ss eEnD wu!1#ݹڻ`#1XFp㫒l8*>+ l@P#J|#DU5mӎmwy3ީ# <Tp>fiԉza[|޻tߨ{ЋkSC ľE7PqT& %{^7O }_K ,Ssl$@7=+Þ͈VHJ -qIu)ϙ=?љnotdHR-J sS`ɄZсq,ESbZ0*=-D[ ,A]l>sNgi 'dj*:IApvyYo A}[: UM.3t7;vVMe@Y뼃m!FuYn>^aTfP,Rw ɾ-3kjxjH +=/ɐdÓK25-jz0@)ۆi7 bV^1Tƀ+i9_ -]F؁dۄƄ-jɮNxu2 cь Z#ThƯfGۧh¼W ?m3 $SЁMZ@r` k?(0 ;SsRHb4 Eީa/Nd3nEҔK(ɐ5ˍzo%nM\ڕP8v9vyN/fQg6 6~8P' Td-GX\۶M|szS52쑛¶o>O6.^o"_\Zv65`'/79Smz ohJQ@AdirV?)![^@j_EopEZ`lEb ;3eڽ% ><5+E͘y]:eSt\4UC柁udst6WV?UvBwNJG4lXnK @ʔGn䅔M<òcGOCdIgB֚jxq^gSL]49(]J:@] ƂzSKG)LB$@rqBa}N< ;|^GQJxT++augq`0e @ځf5\X"y> jRj j챆P DZXfcJ}}*x'?]k {͚]ޕSv%T-Ei篐Gp<(`~+1UGDi\3|Ɯ;Jp?łW ve<djwWA1qȏ#b13km .M1B_4S[}a d_oD&l ߌ=j.p9Iy4*t9M-<[" o鋣axNqAZoFTؙ7CaWѣu\%:j^[kUf6.P䬱wE?]/Hf"(:͐oPWxqC/|% UmDd S-W^(BO.HNcFhw@4"]3Ɔ7=L GOʮڜ'8GhCnnT$gt#-^]/kwtdP7=Zy?91iCDy}feo kT&:q< q΋S|Q?90z4 s'74#o6vt~"%SSIln*ˡ.#¨(WEDY7`7#ɼTͩ$=e ;AgGGoQ?y*`,0ü|٠6FnjI} G5z*6 q``[?5ZǵC'0)jw`0?\U,FյP9_ʗuGB!h9 ߓ6 w![u+ *$qfwI5z“} Ƭ!p)lkۛo{]"-^^R&B_},_VRlRAf;Z3r|́O ]u@r ws6@6Nj>.9`@ssw3|/gUMl2 =z-A"5>Y 006@/YXn" `nGaQY'ş˨Yя׈KjeFei4V þ3k~l8Q Ş>KKy7Mh f^Zq!?żE!0YY tͽcrr}ސڼf(n g DǢK?pMBZ쉢(ϸ^J5ctQJ3SWl'ZPv⭮{#2*В/J`_v`LUa_^Z/;( 0K텠v[;Isoi)l_IK\~ʸ֯"7S4`lh%eNHi`0\;!U !!Yw@aަSl#@ ~GT ]]ԟA r\gJKd\j@XJ^]0v!ΐUp)ұD~evEY׋ ٧9yr f@:-r1j=c#Hk2klWWN鶜 1)pퟀ@ y91.i>닡$^4arټ 9.6RE@kcW!_-Np|1ځo%sG5X+ט h Pp3QwYln&tqSnv96K{$/I.# >]oڳ:UFFmǎYޖ | @nHb%1m^lOO}ͯa0uhZL;㑨)`4D ג_q9ˉC2}ot\"afż2GNo +j:Ϣݕ;ؐ0"2 F4Ffp_$ Uu[$[ZVj|G9R$$x:x~f zPǡ|3hkK _ٹ5"F%Fcq7 k @OkR#`?y |*;Pׇ %MO:Y&a 2JܙF0VƉS"]+y00B}ۚ\t5i9h;d(Q~%`[?7CXZߤ{2Aje}7 + x@݂DjxL~\l[1@ڡ]qhd܂@ߋ˿I33n԰u5nq<$aj]J߁4tܩw m$-I]MgajP,*A2y;ź͡mXNr7bYj)KݳY}oF¡"ÃPZp/"*1W+ 91x3'1Q2᫫yyNr=ƕaC2Ơ|:^?{ibX IVVtKv&%`&oV p#.j%_UYRf6c,Ө7kG_ؤ@Ye'IǼ mPMɢkUx6Sn%d0N@>-]D$rFoX<NGd"@U;xcK2q43`'@xB]ṅȺDŽ3  l{YWkys_U\/^p)^E.XE3.e7qnBoc5$`a,!҄@tk*uѩ1bҫ[2T}SsqI?b!&P]^{[ecU)Mܴ;D*E|K&H\^u).#!(4=R.ɡ3ăЯ䘾 ~.a󃳩2PXߍx/p> xQ4fOQl-#NN(g`:Et+s@OK!$鐟A=F{qJyY*p߈dJ-p4X\tj_ƣDbTL:'KuW7#zzz&LXd|KVF,^l?7Ic̿W֝h J~AA`߼[6a?V9m]f6 b$ {, 3xQ9kfyZf[Ъ?JMA{gQN770Wdpy ` k'dFr&P=\yޔD`2>DY;5̸wJx(A(?byȎ m$}#8X37얂 1Apr}I/{ZJuyGY |/P /#MÚw"돛y;Yc%:{V,Cw7}6i%/݁h# ׇ W Z@Zu5 Fjbr4!ԙ!-wVH;G| t@6/UOh,#|v6/RI*Hv$>,

5읨^3pAb^GCo!$J'׺e:ߚn]P mKT[kVߒ4lxr^Aij 9Ȁꞧo|2̆;.n R $kvj IY'W9,[ϰ(-ݟ2f5KciOKEpչV"By?; YV̳UdrgG`G*Mҭ3ie&=f%wac.+Ϳ4ZcU /hW[Jƥ+ObP~(\ }S\;Ǫ6 UP¦{T8xAXos#;'P @:X^yd]7.řłfXn1D`yrƣAO-LU eL;շj\<߈la0Dxz8 : b|dqJbj}j6 2oK.pwaKPH,;~wfS&lۉO_ V;,l uC ze#D^f`[eIg4nK:?~&!͒Psn\"R?5|0/rBBCqŪg*q}2C%Td4ҶYk_ {AIcZ`ސQ$Q!6޶vI_ =y]Dx;I&F,dG`Di;um\m3|u33FZYm< K =UH7$D  Ӭ&AuƸk[8Vǻ9nE<j9SKjk.HZ%A_j!:j(p[ 'oA 26;tc]$ZAײQAA !DS)Z(|̓|,aAӪgá SSH6c|F%xwhA!nTYKP;qn4ʹMv])C(:vT1};L_=ֈpiү]5, ڗ9 +;Oo; ,g?b4wRq}w fOBi{Ը 1uv$ƌ~v6֊;vDc^.2؟*dM+fUcSVt]RADZ}1 ݊#Z_uDWΙLT97 g 29N fF+HPdbԖ5Rv_m?bHl`ìV?euhx\x?,a$qx,N4`b[ \Tͯz5uPnF(38^[68 H{ z7[^c hC-_OXq6i4V]FهIJl ^t`6nW unAs?O=nT;;s!#S*Wx/g!{4m0ȳ&.'B\i#m?$a ,LQ"~.: fq'%i=3AVf$sePˏKU< D1:HpT0k1iƖFQP{0\I3aܽ(rmJTG;zNҀU&4!QiWb"3GvJTvm[w,:HV;}MJTgO"K%kXz!W1ߒE vˬTvf>i=H>6q&9*y 1uZC6VY#*!6C T/WaMŃ(m䔹VpJ1 oNTafYDN;,+ ΍2 .a4^WX'CS< W0t]SK*BRE G+Hh)ni.u=Т;Ǿ6ڈ@-vfՊ? S%i'loONA: ^~8]FVu='_!bΐ.G@'?_H[9;%mLVmz5HEhg<|MГbpvY_{TJ N^qK#a_`d$@JĴڀ ,h=I7EHceߝCх 9^)q>M'>կTh)K[pRzG)fO ֖_Ѧ7H)#Q-#  u@ B= E/ZـY.1Y 嚯ftӾ[U =g@n֖&yi9`}h [_'O?m)nu^"joYOHJ#V"p9^<?+{N;ťֳϕFU;.eRվ[X$5>gYk9!QRy'! aK_I< T im/O_Mk!T )∳q^Ha~{E+a=#o,?(D!v;*z ^22X<3L=7Nus(@+bnRLƌYkSc9Q3?@hgl@'Ɠ˵;R߲>X6A ]=<>ww;Ϲubp "ңhN"_NI I>TnLTۖtqipfZP*Kxxz?xӘop>d Cן#[ZՁsMe<ĝf^<+9REpbv\u21ky뼻 3~nUܙE=kKjÁh<  ߙ›F*@Yqȯq!8e0|gT RF %Q0~Q Pȧb҇VF,,5g.znubGOFиb`_Ѕ3f-JvF+|ù8+/QWStrg2l%!ןz:A&7PʠMqЙ{jYjwJOK7ʟwȉy =/5Y rBC&n%oGlqs~䩫I2E?mwÐK %dTxюk`t.;DXqZ|R/^]:h3 5pJ\+<0>!}Ih܅ E~ijTmgkEzM Uߕ{vq\GT/>1Ew/7i%ضk軬d/w1F0<*V6(Jz@(:bݎ~lEw{9gfZ*Y,I76 AdO{M7?.pu:xETW bn[N;LI+l $ %yEw;uz1OwU9#2Zuۈe"Z{V0_,dt#]0᝔)۴ulHyzվtƇLhnw4ҀvJMpZ呃jagK鋢5>J1$s֡wA^Ԯogd^!P@կɝ:_ޢ(eJihs8ߊv:]\-VXGG?nKCȩݽH"V[Q9ggv|97#W)CB^Emܪ\;y@\Dz \I?YƏ>[[}H OUHf_ * 62c2gP y=Ήfl_KXFfbMɞaEfEa3F>=:K{[!h̠ma~"J jf}j@E(P/ыqz!]<9nEڸJ59͂I+ 9$m |(xHP> ͥ:~,H.LPWPDNëQv4h~w?r;'G`XUs8RKs"(tӼі!(õ i6}hp7p;:)a{hFA(17͋JFU!]gGv'`?F* Ⱥ>>"  ^ka<  2zO>0WC~Qe5KP]iJId,j[/I+F%;ȇVUBqI F b<;#̟sA:ڀc3,(1-Pm JC2dտ7I4pɻY؅Qo<`o#>f j;-; *dC=l UXy=z/!)Y2SmO5"F{;%*M=bEű2\d Sw+iohF&>ķ}[K6(` V6ܚ;' çqvPxO;;k>QKv|MNb_O } u1[tgq~KLŶsCs+>^Ne-t[|c4R_QgыSoۗr7 ^EP1@=VyQ,bB. -2ӁӉI>e27_Je6ڇrX0%";d_ E %_GV[T ENPH~Vi}CM@4 K 1On]B2hpUBK4}.s.tq?y8&**,hX)0.,M)ՔY +ӕz@!9iGL_vZ81 eܴhlzu/k5j1 x^*]&FOĝb 2b_$"[QK?#ٿ~㰌t44@j7I)x3:3_%F5-jl~lL[棫q Mhr,yji:uDK? dASr2֪L:7Lߊ*vϠhY,naÊ1J\fɔ,4[RLu,I Brw?ʵ]&siИk,EDZĵ߰|Z#>Hp MKr<#˃y7au,s,iņ[ozJmxss !̟Nͪ;JlXzоYS;`?|s%*0v$񄖠< /"Z,ú"kZ=)Yvp9IOmF’Q^@}/csߌkY(B9G挆}Jvo ȿ(6B]`ci!hrU|zV ?'4< )]bսlf nA4u9|?oE[9#aHv͗ǁJ)߉DŽb-r{(;lii=U04ʒC|av^cnT@ͪ&6m"bq+{- w9"UVe᩹ƁkNrek]oaK4ӑAi(NTaL* 28Ǔ#QoĐB3!֫ wupt >POaL:l$wB?׆YA3rN6^n\xoq~EL<1(vqR5m0BTR,Ifc'gHlģ}0͕;cdl?V%eH3jD6#kR&hpuq^ҜȢl#Odf#ݐEJZͭVkW*rWuZm`S )A8QK(*l6b;(?AӜ >blLwWt:Xh4q{$|2ԑCkn8UvYonl20 @l;K_^6ŋvG,x`Sv ;ݿ~P`lWJf屭rgHZ@uU>Ç'xo)Al="5WSG|q2 &P:KDRXB{T_ ޿Rn2ʣP.Sh^ML_0B|YgV hXRKPUA1C(݊)aSUeR2ұ%HYU,6B v 8*\iJ8ga>=a| u3m 2Vy / 0#AȣmUAl`YANj CZCB)KJZ A>x3j O/ sG1mӸrcB (B=a!Sqe `KXq'D2nM/TjNãW^UpХ [ q!]^2yv7nQ!2;Jm [gT8iлqHxɓ WPM{m99.p}mt_༧M5z՚}ELʬMߕ-A% RvN-҂1k%DMk^G4m !#=+ sIwd]JWѩԩk$Ǘ|o;KV VGfj7u RO]q S(w5qk ǩ eKqe*Ȱi"0IZb+,&z)s"z^hk8LǽTピ)~F޷\GXv4&ݔ*u\RΔdY:%zxHjjrÚ.7Z'e_ԮˬK:(. 2 5hu #[PqJ>ΚB/XhN_]ĕ;tW-k9>=}?Ǜtu5,-XsGh ,0T4(UX#cb9Cxɇ(H"m(A1ðIg4tDLSs꘮ɣ~5S9S4?BA 6ywIlD WW H+އ27?`4ֺNcu@Y}EfspvW&{HLdᲬ6kU)Gy:⎙{)|w갊Rqi/NH6Bl\s-3K) .J;R rgM4Eqvs1]u;zFKw09b؅HLS~S֣6Z>LI )F gkl!Q"<({!"'511z9;{ᦸae;,0׎ )32ʛgz" 8\Ƞdzk,"L?WG`1XKM]Ғ]bkQuq|5Nal{P`ʍe{5Xշ]Og!*ҝ=E9~,OW8ɚ1~lIˀm1;M{ޗ:#I BeQZR~jr{#$㣻;1#/QqȞAڦ:LwcV v|3T.")M.VjnAۈeݢv+&Gxu(x5fn4ҢR a-ظ5d6Z\7M1$IzR ;Zv=6.Q z75TRti z=6I:L~m0?XmW5zu@ޱ ic>` pNץ/I / d.ɣuXװ1s K-@M|sDOI|z_7؛=x>I$5{ v^(WK㖽ESC3˗mu2ձޞFY9s 0DԼ?Ō[ً8U3r+"ᖃVl0 %\"( %~^#u I&ښ ~"; t}T|` K'eWC.X6MlM0`p2IU!SA[n^^*[]|ASטpW EbA&e@8njIF$ gS਌nCԉ91ų%s2s7:CXIrEcO9r~/P 4OEZ8Lg$_| P3P!ifppyrj ?/U֑3- 1f1SZR)U[2?ω6; Aɐ+1TEJ(Zޞf.D}'V́ һ{OA.f{OL r[<) 4CXf-|ZxlA̜]kW#~XX@.Y(r~Jl!E'ݦ$z#i (պ4>i`>zΥ"u1$eyoaoMЂJ;?UZXahcPJN -[ =;8Kfw<?U6 w+d+f'H0dodod=fbrJ}(IqZ Zƅ/BzX~-ED̶l.!_W^̯I1lִ#w̠ng\O9yόЧk0AW,X!g'E8ǾfPGO8z; \2Lx[mp`/ IvBTpnl6z84ǫ;*A<wn}t՞ȡ'h,svّ-p$ZuMU&.9aUf[3A0Dei GC|Q-a:P%Nfk5,*(VF\ >K̰=[9\\c Pәi=fR9PEƃm%)3#!#wX+g>$[;H?-˜j@V1=CyӔ-T9oPR=@Nka^D mQB%5M%ݴo8y*%g޾/ՔO EWuVPe^nNw0E|U-ɡOAr3z(~TJ3e?(XvReMNG,gE#(012[3Ӛ;AbF\9HҶzLJ!%RGqn dw^pA/B!Zm{3Iv>/7j~?'hTFyi;Ua+XDJ9IN7$cv=șm?Órϲ-zUn{Ef%f` Zц),7㌣;[!;hMuKDrϷDy$5~R|;8Gns0HQ{pBzQo5rxmQ> !a4LG\(ׂfCL-7 Y &fbEMJeX lFh W9z@ I3X2֚̈́9DiRLAg>bVŀ ۽@ +䓼^NB $`BQ}YhY2X?\W4O68J.g7aA'"FPe He<ǧc-oߒ7*H.ƴ@zIgIS 3M8~gl!68?2o$xpc>giJQB1GV=3-(w0>?1Y"–sriWr(RWmj<k*P+x烦iMZ1~(Tuƽw@C>о|,mJ=:@@;k?]T'Te$`0g*Gc{X0[mY1nR1<xк$$S6・TH@+m<_}jj˾8e *^1Ɗ9>.Ǹ#`/<8ƻc4fV;Ȓ AP?:1 dlw_̳UF'U `TK(ll@IbK&4L"34RVE0yUZejg@B66 pXJτ9K&*qs4UV5[ بٜmZolx0Bxs&6"άؑ3$R<2<}eR2*4xgΈ)nqaZo#V(oLjӍEx͕)zJYHZۑWtAe<O&Bto%Ty]o;bH|"S!OX"t'xxu'{D-Pq,+p;Qݢ'-tZ6[99n68&w{&aj5+7!| Ӣ ;yTz[ͺ8QYS\K~hv,\:r%6`&hî_A{Z? $4)A#/Vj\ KN[Ң)1P+YrKU}6a)%=tM&LBj>qծA 7fP+׷Mq-WWҹ$2tK7!Q;*ϗp hM%=6wBC 8=C^6+-t[9㮢d&?y[U'f\~k0Zn Du$9 ED1m[]a30D ୚aR^Rsgmmx3\s%!2XrF nR ۯRyٍ+z؝lń|hNv,mAw֚Ď܌$5TDy!|!BvnIn)o sбwCyIw~JiLP:Ii;/V[61i '79+-1}swkYk|?r ٗ ԷfҒaLt==۲n07:GyV)MkHռEri=xק(tNڐ&k\⠹H1[8, N_ GULɏj j={Sby`nG] U˿ ";g++%Jh!BhN9gԐ{8YIayZ('߬DjbH?Vk`x&!z&ٳUx+TS{"PұYILuW'4wd gOƜvt~)T{ :eGT:u[9O\T4FT[kb!ѹ?w洩aTM辔wO6}Cu̍?1;/0pq5ϬJC-yM$SP{)cx1 Ös*r\"*OveMe :& "Z2JJ=.C7l0P}E{9+F)goPiB3R/F0;Ҵ~&Ld hg[%\|DA@ԶsAhTՑzp=w$V>x:"=>ph75d{Se- KM{ Hb=x^}G.O>/ ^[0?ʒIv;ZD K901{wR:h+EoV&X0c HEyD8 AYn!r>-f+vC0.+}ϖD|Zs$ \ JtܴcKsuMqQY0]D"io`~xe:]3$hv8|d'&㖟nD ?ķײ{/ NP9?;JsP,y*rf5ٸC<@:kĸwn5fp9}P,₃Z?*XZe/gFċBm]y"$Gd́Rq#k':]EuLsWkީkpLX ZXjhxXUG^U ̚V1i7\_'zӚX_;.ëvL4qAWW+w@7a6]509p1`KdZ1 b}72R>0ZE|Z`W_1fAf _exŔYD\`bB( zLa]Azq!ùբeB3;)pA!Kĉ+uu|!D,Fҁ@~"<~GIhJM?*3nwµ?YЇ霒P/fxa/0G[y%4rIp3Z5/p4-5\vхm6haQNVW d!ËlkI m!y9N]-lDb\uc VwO|գEp4R1078 ߫7BCHg: n3gesS5㵘룺UL |irפH45]vFƕh1OTbTэiy Ge a֬ ىJŔzLc^H X ftE #ǭr ˟IުQE0m< [F+:+Ӌ3_[#f <ۧE<@:.Yi@pM'Nw&` ׆ r5Kͬb.V;O@'=@x[%']!IEެ鑇zumJFLtː*C-t/QCEOg-T JMmD!&(ʶn5il3VA)m(ݣ6T%l4jGۥ'wcehЕ׿\>`-`*\p@G5r6ZA+1; NCH`O-},@MφUsr5|thjl)`iĠoHT؟*e6Z[`RO*sN1'0oP<|(beUU]zwO]oc`ցt`A:tJ.b`_'-R}| "7}:oZ'M^Q|[1: nۑSނmˤrE8uY%aɰN_bZEBx cױָn7 dA#YH.ª§tA_[bB TrT olYp[Zxiߑ #$kqFhx 1BtR84vH?J\ƑVͰ. ͏H"4])$LQp-FJ1[KfW=śVR?ƍ;=cӿco=a;!󺸎Mؼgh8_1/;3g .N6˼ 㚶O2D(gC:pTR] ULb)e wKmU( >|p9 @oyk{R5 ăYF L]B(ҳi,w6bIQI:JZ h8fBhd%J<|φe]"~xOC'ZHPdϴZ R[4CE7۪_ڴsbشǾB$xk།K  ]Ţ(mY: DYj #Z*=@,7=[v%6/]nOa dG}:Tw`l\%,ڀeo2]ϯuu- A4? h vw8Pp[?mR>n}84C8A,Ր ][f^~OäQtbrOrlwcЯ(D V=qUαbQ%YM#`qF4O*@jY-kcՑZ.(Bi?jtYyp5䭨ز]aVc|%3CF5c[߆0mib  4 q,tp wiWRb(X]*Ysƙ rk"쇂4 [8 `&qOObMCWHTdr%tpp0JT.L ].4q)%:i1lҙpP7dg3W۵cqAn7a&`Ddk~d4Ԋl4]Qh805@S>; z!EnӒ9B@ b'qp JQ,TQJ mM5߃L}ɷߕfdƜK xPu4ʀ{!|S\(KMB~RJT TcocŋK|p0*'L ;}"@Fx6w"uRUOݨ/˾q;4q_ZGo'(4GK-LާB?q6[',ծv@Ɩ2?0Y 9S ʽH,oEdSnv}0#U|[?*ftUDS EߛG)=jC΍7 ?j.4H+3ώ(N>m`h܆MXYUρj`1袭B M= 籿z gKek@^4yfN)~<9-b&skJÞ?/?e~W+T^|T qCIWS^T25KHI'=E4Wm9?w_Wqo,8|me(> <Rȁ 9gmC{{HH>ۿ /1Qh- Qk^"ݫƒ\e Z@-hvaH~4i)l SErBnGiҩM>){l;LB?:CNzVi o#,~q£g 9/KCOOE(׸]gj7)2 A26L0Q@8[HYaei8YBBb[}2pf])0+_80Ņx(.d}s"4);B<}_0?G7EZZB\R7nwDصZ˾۲Ǯ}7HJW>94c9t6(в&Uf~i:&ql1>FzJ]X*䶮Da '>^ƤI]iSF/L%"d$g 6޳@9'&Y)Ss+*C>*frA)">puGƥu.O$)=) 0JYn#6{mi\မ˞Z%ڽuֽ%\_fp"bSg3eq7M6[-d2=W%, ƐWN.m!œ?60KC HY/kFym:9|aEsׁtxk#m;`hJZԶBXAb% ;YZ;5$oCeoϲS(J Wz$+V6_₵ѭY5trHZGb_q$ĎQIsK])MGP^wA]>rϢ[6}Hޜ**΂CN:gU5R0T~aT%.`#a;}%` L}[uuHԘ;&֞I p;n=IApyR#uY$ܾqU|`nPD܊{V2N Uf !80m.ћv"aZ}d #%ұx$4^+4@HYoz'ggi>o3l~>E(cX9RFk=pR(զpb . KƟg+8Ʉ%%DZ~GRUjH?EF-.vmn'A̴*OЦwdhq[9,$:yY御1U AuSKowrGk5p}K`|IN2!sȖVlj%Ok6(97ֵJ3PViو QEC,>8~!>H- z>CUPn.JXlRfIbojlM^MNr\$NXѦW:Cpv㙂~>fx\Mߠ-XOr.!DA2eS=) P՗DsBb#x/9 /aX%,o G~|=ϔ" F~2Ӛ4巁?mdFHeq "ؾ$ۀ8+\G@37jB}1i|bV!Q ԣ\%?ņ}~ů/HubaJ%[ndb5`.}y;`(Ǫz#}nY43?`,`Ēi Vȣ_ȋ. ?mkSK;鑰 $dpF4Ow@(lڛ9V1wz Љ`siV!61@&A!jG`t!f=br85Īc)KB9pJ]`HVBua4p(%Ux_vhe1D}-™@jc{(| D)HK >6AOn55 vuNKUOx Ln68B,U2,75Ɏw4mpVn@SEd^^;Grt H oaksW]e rwwu3ԡس, LH~esEg\'ifѹo)@S3ˣ?< '[OT+; =nI`O7?-B