libpython3_9-1_0-3.9.20-150300.4.58.1<>,ԉgIkp9|1ZX$ Q"JEG֭eM24䖝+"(6kxTLAO9a9lX☑U֒"ǔT\5t# ]j7Klލ#bU (@RS=uR 9s462]X9Zxe&D- 7LDիkPf&6\tw3x,@u"k_瘞sC\ ;Ȓse:Y@|8oqO0&/BX5?xM>@4?$d ( J 7=HL N P T  $(N8X9 :>@FG H$I(X,Y8\d]h^|bc1defluvwpxtyxz Clibpython3_9-1_03.9.20150300.4.58.1Python Interpreter shared libraryPython is an interpreted, object-oriented programming language, and is often compared to Tcl, Perl, Scheme, or Java. You can find an overview of Python in the documentation and tutorials included in the python-doc (HTML) or python-doc-pdf (PDF) packages. This package contains libpython3.2 shared library for embedding in other applications.gIkh02-armsrv35SUSE Linux Enterprise 15SUSE LLC Python-2.0https://www.suse.com/Unspecifiedhttps://www.python.org/linuxaarch645ЁgIk35033fc096561cee22de79a70ef00a19a6b1e08af70471220cf1a8f78420c984rootrootpython39-core-3.9.20-150300.4.58.1.src.rpmlibpython3.9.so.1.0()(64bit)libpython3_9-1_0libpython3_9-1_0(aarch-64)@@@@@@@@@@@@@@@@@@     /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libm.so.6(GLIBC_2.29)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libpthread.so.0(GLIBC_2.30)(64bit)libutil.so.1()(64bit)libutil.so.1(GLIBC_2.17)(64bit)python39-baserpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.9.203.0.4-14.6.0-14.0-15.2-14.14.3g5@g4g$g6f5fcf@fٝ@fٝ@fըf@fafIf@f|fuk@fe!@eZe @e؈eԔ@ee4@did˖d@d@d8dd dVA@dRLd>@c>@c@cӼcGcck@cc@cRcOccb?bbb?@b@a@aaan@a}3af@a.a(a'@aa@`@`g@``r```@`N@`/@`"y@`!'`_T__԰_ _v@_u@_P_|\@_m_O@_N7_>e__@__A@___ @_X@_X@_X@_X@_X@_X@_X@_X@_X@^z^z^z^z^)@^^^^@^(@^3^@^'@^H^|@^h^`^>^>^8 @^8 @^ P@^[]f@]f@]]]]W]]c@]]]z@](]]]@]V]w@]i]g@]W@]Ik]6]!]G@\\9\~\@\\@\7\+@\\s\b@\b@\Q\C@\4\4\,\2\\\\&@[[@[^[ @[ͻ[ͻ[$@[ā@[/[[@["@[D[;e@[6@[4ZnZ@Z@ZZԐ@Zx@Z@Z Z Z Zz@ZxG@Zhu@Z`@ZLZ"Z }YYX@Yo@YY@YY@Y@YP@YI@XӸXƉXqX@Xv@W@V@Vm@VVhVCV }@U@U@U@U@UU[%UT@UT@UCjU@TeTBV@T;mcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@suse.commcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eumcepl@cepl.eupmonreal@suse.commcepl@suse.commcepl@suse.commcepl@cepl.eudaniel.garcia@suse.commcepl@cepl.eudaniel.garcia@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comsteven.kowalik@suse.commcepl@suse.commcepl@suse.comkukuk@suse.commliska@suse.czmcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comsteven.kowalik@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comsteven.kowalik@suse.commcepl@suse.commcepl@suse.comsteven.kowalik@suse.commcepl@suse.commcepl@suse.comdimstar@opensuse.orgmcepl@suse.commcepl@suse.comschwab@suse.deqydwhotmail@gmail.commcepl@suse.commcepl@suse.commcepl@suse.comdmueller@suse.comdcermak@suse.commcepl@suse.commcepl@suse.comcode@bnavigator.demcepl@suse.commcepl@suse.comsteven.kowalik@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comcode@bnavigator.demcepl@suse.commcepl@suse.comdimstar@opensuse.orgmcepl@suse.comdimstar@opensuse.orgmcepl@suse.commcepl@suse.comschwab@suse.decallumjfarmer13@gmail.commcepl@suse.comcallumjfarmer13@gmail.comcallumjfarmer13@gmail.comtchvatal@suse.comtchvatal@suse.commcepl@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.commcepl@suse.comtchvatal@suse.commcepl@suse.comtchvatal@suse.commcepl@suse.comdmueller@suse.comandreas.stieger@gmx.decallumjfarmer13@gmail.commcepl@suse.commcepl@suse.comschwab@suse.demcepl@suse.commcepl@suse.commcepl@suse.comtchvatal@suse.comtchvatal@suse.comtchvatal@suse.commliska@suse.czmcepl@suse.commcepl@suse.comtchvatal@suse.commcepl@suse.comstefan.bruens@rwth-aachen.destefan.bruens@rwth-aachen.demcepl@suse.commcepl@suse.commgorse@suse.comtchvatal@suse.commcepl@suse.commcepl@suse.commcepl@suse.comtchvatal@suse.commcepl@suse.combwiedemann@suse.comtchvatal@suse.commcepl@suse.comguillaume.gardet@opensuse.orgjayvdb@gmail.commcepl@suse.commcepl@suse.commcepl@suse.comschwab@suse.demcepl@suse.commliska@suse.czmcepl@suse.commcepl@suse.commcepl@suse.comjayvdb@gmail.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comtchvatal@suse.comtchvatal@suse.commcepl@suse.comtoddrme2178@gmail.commcepl@suse.comjengelh@inai.demcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.commcepl@suse.comtchvatal@suse.commcepl@suse.commcepl@suse.commcepl@suse.comtchvatal@suse.commcepl@suse.commcepl@suse.commcepl@suse.comtchvatal@suse.commimi.vx@gmail.comhpj@urpla.netjengelh@inai.detchvatal@suse.comtchvatal@suse.comtchvatal@suse.commimi.vx@gmail.comadam@mizerski.plschwab@suse.debwiedemann@suse.comtchvatal@suse.comtchvatal@suse.comnormand@linux.vnet.ibm.comjmatejek@suse.comnormand@linux.vnet.ibm.comjmatejek@suse.comdimstar@opensuse.orgmimi.vx@gmail.comjmatejek@suse.comdmueller@suse.comvcizek@suse.comjengelh@inai.deschwab@suse.dejmatejek@suse.comkukuk@suse.dejmatejek@suse.comjmatejek@suse.comasn@cryptomilk.orgjmatejek@suse.comjmatejek@suse.combwiedemann@suse.comjmatejek@suse.comjmatejek@suse.comjmatejek@suse.comschwab@suse.detoddrme2178@gmail.comarichardson.kde@gmail.comtoddrme2178@gmail.comtoddrme2178@gmail.comjmatejek@suse.comdimstar@opensuse.orgjmatejek@suse.comfisiu@opensuse.orgdimstar@opensuse.orgmeissner@suse.comschwab@suse.dejmatejek@suse.comjmatejek@suse.commailaender@opensuse.orgrguenther@suse.comp.drouand@gmail.comcrrodriguez@opensuse.orgjmatejek@suse.com- Remove -IVendor/ from python-config boo#1231795- Add CVE-2024-11168-validation-IPv6-addrs.patch fixing bsc#1233307 (CVE-2024-11168, gh#python/cpython#103848): Improper validation of IPv6 and IPvFuture addresses.- Update CVE-2024-9287-venv_path_unquoted.patch according to the upstream PR gh#python/cpython!126301.- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote path names provided when creating a virtual environment (bsc#1232241, CVE-2024-9287)- Drop .pyc files from docdir for reproducible builds (bsc#1230906).- Add sphinx-802.patch to overcome working both with the most recent and older Sphinx versions.- Update to 3.9.20: - Tests - gh-112769: The tests now correctly compare zlib version when :const:`zlib.ZLIB_RUNTIME_VERSION` contains non-integer suffixes. For example zlib-ng defines the version as ``1.3.0.zlib-ng``. - gh-117187: Fix XML tests for vanilla Expat <2.6.0. - Security - gh-123678: Upgrade libexpat to 2.6.3 - gh-121957: Fixed missing audit events around interactive use of Python, now also properly firing for ``python -i``, as well as for ``python -m asyncio``. The event in question is ``cpython.run_stdin``. - gh-122133: Authenticate the socket connection for the ``socket.socketpair()`` fallback on platforms where ``AF_UNIX`` is not available like Windows. Patch by Gregory P. Smith and Seth Larson . Reported by Ellie - gh-121285: Remove backtracking from tarfile header parsing for ``hdrcharset``, PAX, and GNU sparse headers (bsc#1230227, CVE-2024-6232). - gh-118486: :func:`os.mkdir` on Windows now accepts *mode* of ``0o700`` to restrict the new directory to the current user. This fixes CVE-2024-4030 affecting :func:`tempfile.mkdtemp` in scenarios where the base temporary directory is more permissive than the default. - gh-114572: :meth:`ssl.SSLContext.cert_store_stats` and :meth:`ssl.SSLContext.get_ca_certs` now correctly lock access to the certificate store, when the :class:`ssl.SSLContext` is shared across multiple threads (bsc#1226447, CVE-2024-0397). - gh-116741: Update bundled libexpat to 2.6.2 - Library - gh-123270: Applied a more surgical fix for malformed payloads in :class:`zipfile.Path` causing infinite loops (gh-122905) without breaking contents using legitimate characters (bsc#1229704, CVE-2024-8088). - gh-123067: Fix quadratic complexity in parsing ``"``-quoted cookie values with backslashes by :mod:`http.cookies` (bsc#1229596, CVE-2024-7592). - gh-121650: :mod:`email` headers with embedded newlines are now quoted on output. The :mod:`~email.generator` will now refuse to serialize (write) headers that are unsafely folded or delimited; see :attr:`~email.policy.Policy.verify_generated_headers`. (Contributed by Bas Bloemsaat and Petr Viktorin in :gh:`121650`; CVE-2024-6923, bsc#1228780). - gh-113171: Fixed various false positives and false negatives in * :attr:`ipaddress.IPv4Address.is_private` (see these docs for details) * :attr:`ipaddress.IPv4Address.is_global` * :attr:`ipaddress.IPv6Address.is_private` * :attr:`ipaddress.IPv6Address.is_global` Also in the corresponding :class:`ipaddress.IPv4Network` and :class:`ipaddress.IPv6Network` attributes Fixes bsc#1226448 (CVE-2024-4032). - gh-102988: :func:`email.utils.getaddresses` and :func:`email.utils.parseaddr` now return ``('', '')`` 2-tuples in more situations where invalid email addresses are encountered instead of potentially inaccurate values. Add optional *strict* parameter to these two functions: use ``strict=False`` to get the old behavior, accept malformed inputs. ``getattr(email.utils, 'supports_strict_parsing', False)`` can be use to check if the *strict* paramater is available. Patch by Thomas Dwyer and Victor Stinner to improve the CVE-2023-27043 fix (bsc#1210638). - gh-67693: Fix :func:`urllib.parse.urlunparse` and :func:`urllib.parse.urlunsplit` for URIs with path starting with multiple slashes and no authority. Based on patch by Ashwin Ramaswami. - Core and Builtins - gh-112275: A deadlock involving ``pystate.c``'s ``HEAD_LOCK`` in ``posixmodule.c`` at fork is now fixed. Patch by ChuBoning based on previous Python 3.12 fix by Victor Stinner. - Remove upstreamed patches: - CVE-2023-27043-email-parsing-errors.patch - CVE-2024-6232-cookies-quad-complex.patch - CVE-2024-4032-private-IP-addrs.patch - CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch - CVE-2024-8088-inf-loop-zipfile_Path.patch - CVE-2024-6923-email-hdr-inject.patch- Add CVE-2024-6232-cookies-quad-complex.patch to avoid quadratic complexity in parsing tarfile headers (bsc#1230227, CVE-2024-6232).- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with patched libexpat below 2.6.0 that doesn't update the version number, just in SLE. - Remove old-libexpat.patch, of course.- Add gh120226-fix-sendfile-test-kernel-610.patch to avoid failing test_sendfile_close_peer_in_the_middle_of_receiving tests on Linux >= 6.10 (GH-120227).- Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, CVE-2024-8088).- Add CVE-2024-6923-email-hdr-inject.patch to prevent email header injection due to unquoted newlines (bsc#1228780, CVE-2024-6923). - Adding bso1227999-reproducible-builds.patch fixing bsc#1227999 adding reproducibility patches from gh#python/cpython!121872 and gh#python/cpython!121883. - Add CVE-2024-5642-OpenSSL-API-buf-overread-NPN.patch removing support for anything but OpenSSL 1.1.1 or newer (bsc#1227233, CVE-2024-5642). - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999)- Remove %suse_update_desktop_file macro as it is not useful any more.- Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378).- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448 (CVE-2024-4032) rearranging definition of private v global IP addresses.- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch fixing bsc#1226447 (CVE-2024-0397) by removing memory race condition in ssl.SSLContext certificate store methods.- Add old-libexpat.patch making the test suite work with libexpat < 2.6.0 (gh#python/cpython#117187).- Update to 3.9.19: - Security - gh-115398: Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425, bsc#1219559) by adding five new methods: xml.etree.ElementTree.XMLParser.flush() xml.etree.ElementTree.XMLPullParser.flush() xml.parsers.expat.xmlparser.GetReparseDeferralEnabled() xml.parsers.expat.xmlparser.SetReparseDeferralEnabled() xml.sax.expatreader.ExpatParser.flush() - gh-115399: Update bundled libexpat to 2.6.0 - gh-113659: Skip .pth files with names starting with a dot or hidden file attribute. - Core and Builtins - gh-102388: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds - Library - gh-115197: urllib.request no longer resolves the hostname before checking it against the system’s proxy bypass list on macOS and Windows. - gh-115133: Fix tests for XMLPullParser with Expat 2.6.0. - gh-81194: Fix a crash in socket.if_indextoname() with specific value (UINT_MAX). Fix an integer overflow in socket.if_indextoname() on 64-bit non-Windows platforms. - gh-109858: Protect zipfile from “quoted-overlap” zipbomb. It now raises BadZipFile when try to read an entry that overlaps with other entry or central directory (CVE-2024-0450, bsc#1221854). - gh-107077: Seems that in some conditions, OpenSSL will return SSL_ERROR_SYSCALL instead of SSL_ERROR_SSL when a certification verification has failed, but the error parameters will still contain ERR_LIB_SSL and SSL_R_CERTIFICATE_VERIFY_FAILED. We are now detecting this situation and raising the appropiate ssl.SSLCertVerificationError. Patch by Pablo Galindo - gh-91133: Fix a bug in tempfile.TemporaryDirectory cleanup, which now no longer dereferences symlinks when working around file system permission errors (CVE-2023-6597, bsc#1219666). - Documentation - gh-115399: Document CVE-2023-52425 of Expat <2.6.0 under “XML vulnerabilities”. - Tools/Demos - gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.11 and multissltests to use 1.1.1w and 3.0.11. - Remove upstreamed patches: - CVE-2023-6597-TempDir-cleaning-symlink.patch - libexpat260.patch - Refreshed patches: - F00251-change-user-install-location.patch - python-3.3.0b1-localpath.patch- Use the system-wide crypto-policies [bsc#1211301] * Use the system default cipher list instead of hardcoded values * Add the --with-ssl-default-suites=openssl configure option- Update SPEC file to build on SLE-15-SP5 (jsc#PED-7886).- (bsc#1219666, CVE-2023-6597) Add CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from gh#python/cpython!99930) fixing symlink bug in cleanup of tempfile.TemporaryDirectory. - Repurpose skip-failing-tests.patch to increase timeout for test.test_asyncio.test_tasks.TimeoutTests.test_timeout_time, which fails on slow machines in IBS (s390x).- Remove double definition of /usr/bin/idle%%{version} in %%files.- Add upstream patch libexpat260.patch, Fix tests for XMLPullParser with Expat 2.6.0, gh#python/cpython#115289- Refresh CVE-2023-27043-email-parsing-errors.patch to gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043). - Thus we can remove Revert-gh105127-left-tests.patch, which is now useless.- Update to 3.9.18 (bsc#1214692): - (bsc#1215454, gh-108310) Fixed an issue where instances of ssl.SSLSocket were vulnerable to a bypass of the TLS handshake and included protections (like certificate verification) and treating sent unencrypted data as if it were post-handshake TLS encrypted data. Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by Gregory P. Smith. - gh-107845: tarfile.data_filter() now takes the location of symlinks into account when determining their target, so it will no longer reject some valid tarballs with LinkOutsideDestinationError. - gh-107565: Update multissltests and GitHub CI workflows to use OpenSSL 1.1.1v, 3.0.10, and 3.1.2. - Refresh all patches: - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch - 99366-patch.dict-can-decorate-async.patch - Revert-gh105127-left-tests.patch - bpo-31046_ensurepip_honours_prefix.patch - decimal.patch - distutils-reproducible-compile.patch - gh-78214-marshal_stabilize_FLAG_REF.patch - python-3.3.0b1-localpath.patch - python-3.3.0b1-test-posix_fadvise.patch - python3-imp-returntype.patch - subprocess-raise-timeout.patch - support-expat-CVE-2022-25236-patched.patch - downport-Sphinx-features.patch- IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED! - Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941) partially reverting CVE-2023-27043-email-parsing-errors.patch, because of the regression in gh#python/cpython#106669. - (bsc#1210638, CVE-2023-27043) Add CVE-2023-27043-email-parsing-errors.patch, which detects email address parsing errors and returns empty tuple to indicate the parsing error (old API). (The patch is faulty, gh#python/cpython#106669, but upstream decided not to just revert it).- Add bpo-37596-make-set-marshalling.patch making marshalling of `set` and `frozenset` deterministic (bsc#1211765).- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for stabilizing FLAG_REF usage (required for reproduceability; bsc#1213463).- Revert faulty fix for CVE-2023-27043 (gh#python/cpython#106669)- Add downport-Sphinx-features.patch to make documentation buildable even on SLE-15.- Update to 3.9.17 (bsc#1212015): - gh-103142: The version of OpenSSL used in Windows and Mac installers has been upgraded to 1.1.1u to address CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464, as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 fixed previously in 1.1.1t (gh-101727). - gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329 (bsc#1208471). - gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. - gh-104049: Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. - gh-103935: trace.__main__ now uses io.open_code() for files to be executed instead of raw open(). - gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have a new filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files outside the destination directory. See Extraction filters for details (fixing CVE-2007-4559, bsc#1203750). - gh-102126: Fixed a deadlock at shutdown when clearing thread states if any finalizer tries to acquire the runtime head lock. - gh-100892: Fixed a crash due to a race while iterating over thread states in clearing threading.local. - Remove upstreamed patches: - CVE-2023-24329-blank-URL-bypass.patch - CVE-2007-4559-filter-tarfile_extractall.patch- Add 99366-patch.dict-can-decorate-async.patch fixing gh#python/cpython#98086 (backport from Python 3.10 patch in gh#python/cpython!99366), fixing bsc#1211158.- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix CVE-2007-4559 (bsc#1203750) by adding the filter for tarfile.extractall (PEP 706).- Use python3 modules to build the documentation.- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329, bsc#1208471) blocklists bypass via the urllib.parse component when supplying a URL that starts with blank characters- Add provides for readline and sqlite3 to the main Python package.- Disable NIS for new products, it's deprecated and gets removed- Suppress warnings for Sphinx 6.0+.- Update to 3.9.16: - python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log. This is done by changing the http.server BaseHTTPRequestHandler .log_message method to replace control characters with a \xHH hex escape before printing. - Avoid publishing list of active per-interpreter audit hooks via the gc module - The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name (CVE-2015-20107). - Update bundled libexpat to 2.5.0 - Port XKCP’s fix for the buffer overflows in SHA-3 (CVE-2022-37454). - On Linux the multiprocessing module returns to using filesystem backed unix domain sockets for communication with the forkserver process instead of the Linux abstract socket namespace. Only code that chooses to use the “forkserver” start method is affected. Abstract sockets have no permissions and could allow any user on the system in the same network namespace (often the whole system) to inject code into the multiprocessing forkserver process. This was a potential privilege escalation. Filesystem based socket permissions restrict this to the forkserver process user as was the default in Python 3.8 and earlier. This prevents Linux CVE-2022-42919. - The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed). - Removed upstreamed patches: - CVE-2015-20107-mailcap-unsafe-filenames.patch - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch - CVE-2022-45061-DoS-by-IDNA-decode.patch- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding extremely long domain names.- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid CVE-2022-42919 (bsc#1204886) avoiding Linux specific local privilege escalation via the multiprocessing forkserver start method.- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to allow building of documentation with the latest Sphinx 5.3.0 (gh#python/cpython#98366).- Update to 3.9.15: - Fix multiplying a list by an integer (list *= int): detect the integer overflow when the new allocated length is close to the maximum size. - Fix a shell code injection vulnerability in the get-remote-certificate.py example script. The script no longer uses a shell to run openssl commands. (originally filed as CVE-2022-37460, later withdrawn) - Fix command line parsing: reject -X int_max_str_digits option with no value (invalid) when the PYTHONINTMAXSTRDIGITS environment variable is set to a valid limit. - When ValueError is raised if an integer is larger than the limit, mention the sys.set_int_max_str_digits() function in the error message. - Update bundled libexpat to 2.4.9- Update to 3.9.14: - (CVE-2020-10735, bsc#1203125). Converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. This new limit can be configured or disabled by environment variable, command line flag, or sys APIs. See the integer string conversion length limitation documentation. The default limit is 4300 digits in string form. - Also other bug fixes: - http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. Vulnerability discovered, and initial fix proposed, by Hamza Avvan. - Fix contextvars HAMT implementation to handle iteration over deep trees. The bug was discovered and fixed by Eli Libman. See MagicStack/immutables#84 for more details. - Fix binding of unix socket to empty address on Linux to use an available address from the abstract namespace, instead of “0”. - Suppress writing an XML declaration in open files in ElementTree.write() with encoding='unicode' and xml_declaration=None. - Fix the formatting for await x and not x in the operator precedence table when using the help() system. - Fix ensurepip environment isolation for subprocess running pip. - Fix problem with test_ssl test_get_ciphers on systems that require perfect forward secrecy (PFS) ciphers. - test_ssl is now checking for supported TLS version and protocols in more tests. - Removed upstreamed patches: - CVE-2021-28861-double-slash-path.patch - Realign patches: - bpo-31046_ensurepip_honours_prefix.patch - sphinx-update-removed-function.patch- Add patch CVE-2021-28861-double-slash-path.patch: * http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. (bsc#1202624, CVE-2021-28861)- Switch from %primary_interpreter to prjconf-defined %primary_python (gh#openSUSE/python-rpm-macros#127).- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the command injection in the mailcap module. - Fix building of documentation and the universal configuration of the %primary_interpreter. - (bsc#1196784, CVE-2022-25236) Rename patch: support-expat-245.patch to support-expat-CVE-2022-25236-patched.patch and update the patch to detect expat >= 2.4.4 instead of >= 2.4.5 as it was fully patched against CVE-2022-25236.- Update to 3.9.13: - Core and Builtins - gh-92311: Fixed a bug where setting frame.f_lineno to jump over a list comprehension could misbehave or crash. - gh-92112: Fix crash triggered by an evil custom mro() on a metaclass. - gh-92036: Fix a crash in subinterpreters related to the garbage collector. When a subinterpreter is deleted, untrack all objects tracked by its GC. To prevent a crash in deallocator functions expecting objects to be tracked by the GC, leak a strong reference to these objects on purpose, so they are never deleted and their deallocator functions are not called. Patch by Victor Stinner. - gh-91421: Fix a potential integer overflow in _Py_DecodeUTF8Ex. - bpo-46775: Some Windows system error codes(>= 10000) are now mapped into the correct errno and may now raise a subclass of OSError. Patch by Dong-hee Na. - bpo-46962: Classes and functions that unconditionally declared their docstrings ignoring the - -without-doc-strings compilation flag no longer do so. - The classes affected are pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and types.GenericAlias. - The functions affected are 24 methods in ctypes. - Patch by Oleg Iarygin. - bpo-36819: Fix crashes in built-in encoders with error handlers that return position less or equal than the starting position of non-encodable characters. - Library - gh-91581: utcfromtimestamp() no longer attempts to resolve fold in the pure Python implementation, since the fold is never 1 in UTC. In addition to being slightly faster in the common case, this also prevents some errors when the timestamp is close to datetime.min. Patch by Paul Ganssle. - gh-92530: Fix an issue that occurred after interrupting threading.Condition.notify(). - gh-92049: Forbid pickling constants re._constants.SUCCESS etc. Previously, pickling did not fail, but the result could not be unpickled. - bpo-47029: Always close the read end of the pipe used by multiprocessing.Queue after the last write of buffered data to the write end of the pipe to avoid BrokenPipeError at garbage collection and at multiprocessing.Queue.close() calls. Patch by Géry Ogam. - gh-91910: Add missing f prefix to f-strings in error messages from the multiprocessing and asyncio modules. - gh-91810: ElementTree method write() and function tostring() now use the text file’s encoding (“UTF-8” if not available) instead of locale encoding in XML declaration when encoding="unicode" is specified. - gh-91832: Add required attribute to argparse.Action repr output. - gh-91734: Fix OSS audio support on Solaris. - gh-91700: Compilation of regular expression containing a conditional expression (?(group)...) now raises an appropriate re.error if the group number refers to not defined group. Previously an internal RuntimeError was raised. - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown the per test event loop executor before returning from its run method so that a not yet stopped or garbage collected executor state does not persist beyond the test. - gh-90568: Parsing \N escapes of Unicode Named Character Sequences in a regular expression raises now re.error instead of TypeError. - gh-91595: Fix the comparison of character and integer inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu. - gh-90622: Worker processes for concurrent.futures.ProcessPoolExecutor are no longer spawned on demand (a feature added in 3.9) when the multiprocessing context start method is "fork" as that can lead to deadlocks in the child processes due to a fork happening while threads are running. - gh-91575: Update case-insensitive matching in the re module to the latest Unicode version. - gh-91581: Remove an unhandled error case in the C implementation of calls to datetime.fromtimestamp with no time zone (i.e. getting a local time from an epoch timestamp). This should have no user-facing effect other than giving a possibly more accurate error message when called with timestamps that fall on 10000-01-01 in the local time. Patch by Paul Ganssle. - bpo-34480: Fix a bug where _markupbase raised an UnboundLocalError when an invalid keyword was found in marked section. Patch by Marek Suscak. - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve names for socket.AF_INET or socket.AF_INET6 families. Resolution may not make sense for other families, like socket.AF_BLUETOOTH and socket.AF_UNIX. - bpo-43323: Fix errors in the email module if the charset itself contains undecodable/unencodable characters. - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor exception memory leak - bpo-46415: Fix ipaddress.ip_{address,interface,network} raising TypeError instead of ValueError if given invalid tuple as address parameter. - bpo-44911: IsolatedAsyncioTestCase will no longer throw an exception while cancelling leaked tasks. Patch by Bar Harel. - bpo-44493: Add missing terminated NUL in sockaddr_un’s length - This was potentially observable when using non-abstract AF_UNIX datagram sockets to processes written in another programming language. - bpo-42627: Fix incorrect parsing of Windows registry proxy settings - bpo-36073: Raise ProgrammingError instead of segfaulting on recursive usage of cursors in sqlite3 converters. Patch by Sergey Fedoseev. - Documentation - gh-91888: Add a new gh role to the documentation to link to GitHub issues. - gh-91783: Document security issues concerning the use of the function shutil.unpack_archive() - gh-91547: Remove “Undocumented modules” page. - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of shutil.copytree(). - bpo-38668: Update the introduction to documentation for os.path to remove warnings that became irrelevant after the implementations of PEP 383 and PEP 529. - bpo-47138: Pin Jinja to a version compatible with Sphinx version 2.4.4. - bpo-46962: All docstrings in code snippets are now wrapped into PyDoc_STR() to follow the guideline of PEP 7’s Documentation Strings paragraph. Patch by Oleg Iarygin. - bpo-26792: Improve the docstrings of runpy.run_module() and runpy.run_path(). Original patch by Andrew Brezovsky. - bpo-45790: Adjust inaccurate phrasing in Defining Extension Types: Tutorial about the ob_base field and the macros used to access its contents. - bpo-42340: Document that in some circumstances KeyboardInterrupt may cause the code to enter an inconsistent state. Provided a sample workaround to avoid it if needed. - bpo-41233: Link the errnos referenced in Doc/library/exceptions.rst to their respective section in Doc/library/errno.rst, and vice versa. Previously this was only done for EINTR and InterruptedError. Patch by Yan “yyyyyyyan” Orestes. - bpo-38056: Overhaul the Error Handlers documentation in codecs. - bpo-13553: Document tkinter.Tk args. - Tests - gh-91607: Fix test_concurrent_futures to test the correct multiprocessing start method context in several cases where the test logic mixed this up. - bpo-47205: Skip test for sched_getaffinity() and sched_setaffinity() error case on FreeBSD. - bpo-29890: Add tests for ipaddress.IPv4Interface and ipaddress.IPv6Interface construction with tuple arguments. Original patch and tests by louisom. - Build - bpo-47103: Windows PGInstrument builds now copy a required DLL into the output directory, making it easier to run the profile stage of a PGO build. - Windows - bpo-47194: Update zlib to v1.2.12 to resolve CVE-2018-25032. - bpo-46785: Fix race condition between os.stat() and unlinking a file on Windows, by using errors codes returned by FindFirstFileW() when appropriate in win32_xstat_impl. - bpo-40859: Update Windows build to use xz-5.2.5 - Tools/Demos - gh-91583: Fix regression in the code generated by Argument Clinic for functions with the defining_class parameter. - Add patch support-expat-245.patch: * Support Expat >= 2.4.4 (jsc#SLE-21253, CVE-2022-25236)- Update to 3.9.12: - bpo-46968: Check for the existence of the “sys/auxv.h” header in faulthandler to avoid compilation problems in systems where this header doesn’t exist. Patch by Pablo Galindo - bpo-47101: hashlib.algorithms_available now lists only algorithms that are provided by activated crypto providers on OpenSSL 3.0. Legacy algorithms are not listed unless the legacy provider has been loaded into the default OSSL context. - bpo-23691: Protect the re.finditer() iterator from re-entering. - bpo-42369: Fix thread safety of zipfile._SharedFile.tell() to avoid a “zipfile.BadZipFile: Bad CRC-32 for file” exception when reading a ZipFile from multiple threads. - bpo-38256: Fix binascii.crc32() when it is compiled to use zlib’c crc32 to work properly on inputs 4+GiB in length instead of returning the wrong result. The workaround prior to this was to always feed the function data in increments smaller than 4GiB or to just call the zlib module function. - bpo-39394: A warning about inline flags not at the start of the regular expression now contains the position of the flag. - bpo-47061: Deprecate the various modules listed by PEP 594: - aifc, asynchat, asyncore, audioop, cgi, cgitb, chunk, crypt, imghdr, msilib, nntplib, nis, ossaudiodev, pipes, smtpd, sndhdr, spwd, sunau, telnetlib, uu, xdrlib - bpo-2604: Fix bug where doctests using globals would fail when run multiple times. - bpo-45997: Fix asyncio.Semaphore re-aquiring FIFO order. - bpo-47022: The asynchat, asyncore and smtpd modules have been deprecated since at least Python 3.6. Their documentation has now been updated to note they will removed in Python 3.12 (PEP 594). - bpo-46421: Fix a unittest issue where if the command was invoked as python -m unittest and the filename(s) began with a dot (.), a ValueError is returned. - bpo-40296: Fix supporting generic aliases in pydoc. - bpo-14156: argparse.FileType now supports an argument of ‘-’ in binary mode, returning the .buffer attribute of sys.stdin/sys.stdout as appropriate. Modes including ‘x’ and ‘a’ are treated equivalently to ‘w’ when argument is ‘-’. Patch contributed by Josh Rosenberg - Update to 3.9.11: - bpo-46852: Rename the private undocumented float.__set_format__() method to float.__setformat__() to fix a typo introduced in Python 3.7. The method is only used by test_float. Patch by Victor Stinner. - bpo-46794: Bump up the libexpat version into 2.4.6 - bpo-46762: Fix an assert failure in debug builds when a ‘<’, ‘>’, or ‘=’ is the last character in an f-string that’s missing a closing right brace. - bpo-46732: Correct the docstring for the __bool__() method. Patch by Jelle Zijlstra. - bpo-40479: Add a missing call to va_end() in Modules/_hashopenssl.c. - bpo-46615: When iterating over sets internally in setobject.c, acquire strong references to the resulting items from the set. This prevents crashes in corner-cases of various set operations where the set gets mutated. - bpo-43721: Fix docstrings of getter, setter, and deleter to clarify that they create a new copy of the property. - bpo-46503: Fix an assert when parsing some invalid N escape sequences in f-strings. - bpo-46417: Fix a race condition on setting a type __bases__ attribute: the internal function add_subclass() now gets the PyTypeObject.tp_subclasses member after calling PyWeakref_NewRef() which can trigger a garbage collection which can indirectly modify PyTypeObject.tp_subclasses. Patch by Victor Stinner. - bpo-46383: Fix invalid signature of _zoneinfo’s module_free function to resolve a crash on wasm32-emscripten platform. - bpo-43253: Fix a crash when closing transports where the underlying socket handle is already invalid on the Proactor event loop. - bpo-47004: Apply bugfixes from importlib_metadata 4.11.3, including bugfix for EntryPoint.extras, which was returning match objects and not the extras strings. - bpo-46985: Upgrade pip wheel bundled with ensurepip (pip 22.0.4, bnc#1186819, CVE-2021-3572) - bpo-46968: faulthandler: On Linux 5.14 and newer, dynamically determine size of signal handler stack size CPython allocates using getauxval(AT_MINSIGSTKSZ). This changes allows for Python extension’s request to Linux kernel to use AMX_TILE instruction set on Sapphire Rapids Xeon processor to succeed, unblocking use of the ISA in frameworks. - bpo-46955: Expose asyncio.base_events.Server as asyncio.Server. Patch by Stefan Zabka. - bpo-46932: Update bundled libexpat to 2.4.7 - bpo-25707: Fixed a file leak in xml.etree.ElementTree.iterparse() when the iterator is not exhausted. Patch by Jacob Walls. - bpo-44886: Inherit asyncio proactor datagram transport from asyncio.DatagramTransport. - bpo-46827: Support UDP sockets in asyncio.loop.sock_connect() for selector-based event loops. Patch by Thomas Grainger. - bpo-46811: Make test suite support Expat >=2.4.5 - bpo-46252: Raise TypeError if ssl.SSLSocket is passed to transport-based APIs. - bpo-46784: Fix libexpat symbols collisions with user dynamically loaded or statically linked libexpat in embedded Python. - bpo-39327: shutil.rmtree() can now work with VirtualBox shared folders when running from the guest operating-system. - bpo-46756: Fix a bug in urllib.request.HTTPPasswordMgr.find_user_password() and urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated() which allowed to bypass authorization. For example, access to URI example.org/foobar was allowed if the user was authorized for URI example.org/foo. - bpo-45863: When the tarfile module creates a pax format archive, it will put an integer representation of timestamps in the ustar header (if possible) for the benefit of older unarchivers, in addition to the existing full-precision timestamps in the pax extended header. - bpo-46672: Fix NameError in asyncio.gather() when initial type check fails. - bpo-45948: Fixed a discrepancy in the C implementation of the xml.etree.ElementTree module. Now, instantiating an xml.etree.ElementTree.XMLParser with a target=None keyword provides a default xml.etree.ElementTree.TreeBuilder target as the Python implementation does. - bpo-46591: Make the IDLE doc URL on the About IDLE dialog clickable. - bpo-46400: expat: Update libexpat from 2.4.1 to 2.4.4 - bpo-46487: Add the get_write_buffer_limits method to asyncio.transports.WriteTransport and to the SSL transport. - bpo-46539: In typing.get_type_hints(), support evaluating stringified ClassVar and Final annotations inside Annotated. Patch by Gregory Beauregard. - bpo-46491: Allow typing.Annotated to wrap typing.Final and typing.ClassVar. Patch by Gregory Beauregard. - bpo-46436: Fix command-line option -d/--directory in module http.server which is ignored when combined with command-line option --cgi. Patch by Géry Ogam. - bpo-41403: Make mock.patch() raise a TypeError with a relevant error message on invalid arg. Previously it allowed a cryptic AttributeError to escape. - bpo-46474: In importlib.metadata.EntryPoint.pattern, avoid potential REDoS by limiting ambiguity in consecutive whitespace. - bpo-46469: asyncio generic classes now return types.GenericAlias in __class_getitem__ instead of the same class. - bpo-46434: pdb now gracefully handles help when __doc__ is missing, for example when run with pregenerated optimized .pyc files. - bpo-46333: The __eq__() and __hash__() methods of typing.ForwardRef now honor the module parameter of typing.ForwardRef. Forward references from different modules are now differentiated. - bpo-43118: Fix a bug in inspect.signature() that was causing it to fail on some subclasses of classes with a __text_signature__ referencing module globals. Patch by Weipeng Hong. - bpo-21987: Fix an issue with tarfile.TarFile.getmember() getting a directory name with a trailing slash. - bpo-20392: Fix inconsistency with uppercase file extensions in MimeTypes.guess_type(). Patch by Kumar Aditya. - bpo-46080: Fix exception in argparse help text generation if a argparse.BooleanOptionalAction argument’s default is argparse.SUPPRESS and it has help specified. Patch by Felix Fontein. - bpo-44439: Fix .write() method of a member file in ZipFile, when the input data is an object that supports the buffer protocol, the file length may be wrong. - bpo-45703: When a namespace package is imported before another module from the same namespace is created/installed in a different sys.path location while the program is running, calling the importlib.invalidate_caches() function will now also guarantee the new module is noticed. - bpo-24959: Fix bug where unittest sometimes drops frames from tracebacks of exceptions raised in tests. - bpo-46463: Fixes escape4chm.py script used when building the CHM documentation file - bpo-46913: Fix test_faulthandler.test_sigfpe() if Python is built with undefined behavior sanitizer (UBSAN): disable UBSAN on the faulthandler_sigfpe() function. Patch by Victor Stinner. - bpo-46708: Prevent default asyncio event loop policy modification warning after test_asyncio execution. - bpo-46616: Ensures test_importlib.test_windows cleans up registry keys after completion. - bpo-44359: test_ftplib now silently ignores socket errors to prevent logging unhandled threading exceptions. Patch by Victor Stinner. - bpo-46542: Fix a Python crash in test_lib2to3 when using Python built in debug mode: limit the recursion limit. Patch by Victor Stinner. - bpo-46576: test_peg_generator now disables compiler optimization when testing compilation of its own C extensions to significantly speed up the testing on non-debug builds of CPython. - bpo-46542: Fix test_json tests checking for RecursionError: modify these tests to use support.infinite_recursion(). Patch by Victor Stinner. - bpo-13886: Skip test_builtin PTY tests on non-ASCII characters if the readline module is loaded. The readline module changes input() behavior, but test_builtin is not intented to test the readline module. Patch by Victor Stinner. - bpo-38472: Fix GCC detection in setup.py when cross-compiling. The C compiler is now run with LC_ALL=C. Previously, the detection failed with a German locale. - bpo-46513: configure no longer uses AC_C_CHAR_UNSIGNED macro and pyconfig.h no longer defines reserved symbol __CHAR_UNSIGNED__. - bpo-45925: Update Windows installer to use SQLite 3.37.2. - bpo-45296: Clarify close, quit, and exit in IDLE. In the File menu, ‘Close’ and ‘Exit’ are now ‘Close Window’ (the current one) and ‘Exit’ is now ‘Exit IDLE’ (by closing all windows). In Shell, ‘quit()’ and ‘exit()’ mean ‘close Shell’. If there are no other windows, this also exits IDLE. - bpo-45447: Apply IDLE syntax highlighting to pyi files. Patch by Alex Waygood and Terry Jan Reedy. - Removed upstreamed patches: - support-expat-245.patch- Add patch support-expat-245.patch: * Support Expat >= 2.4.5- Update to 3.9.10: Bugfix-only release- Remove shebangs from from python-base libraries in _libdir (bsc#1193179, bsc#1192249). - Readjust patches: - bpo-31046_ensurepip_honours_prefix.patch - decimal.patch - python-3.3.0b1-fix_date_time_compiler.patch- Update to 3.9.9: * Core and Builtins + bpo-30570: Fixed a crash in issubclass() from infinite recursion when searching pathological __bases__ tuples. + bpo-45494: Fix parser crash when reporting errors involving invalid continuation characters. Patch by Pablo Galindo. + bpo-45385: Fix reference leak from descr_check. Patch by Dong-hee Na. + bpo-45167: Fix deepcopying of types.GenericAlias objects. + bpo-44219: Release the GIL while performing isatty system calls on arbitrary file descriptors. In particular, this affects os.isatty(), os.device_encoding() and io.TextIOWrapper. By extension, io.open() in text mode is also affected. This change solves a deadlock in os.isatty(). Patch by Vincent Michel in bpo-44219. + bpo-44959: Added fallback to extension modules with ‘.sl’ suffix on HP-UX + bpo-44050: Extensions that indicate they use global state (by setting m_size to -1) can again be used in multiple interpreters. This reverts to behavior of Python 3.8. + bpo-45121: Fix issue where Protocol.__init__ raises RecursionError when it’s called directly or via super(). Patch provided by Yurii Karabas. + bpo-45083: When the interpreter renders an exception, its name now has a complete qualname. Previously only the class name was concatenated to the module name, which sometimes resulted in an incorrect full name being displayed. + bpo-45738: Fix computation of error location for invalid continuation characters in the parser. Patch by Pablo Galindo. + Library + bpo-45678: Fix bug in Python 3.9 that meant functools.singledispatchmethod failed to properly wrap the attributes of the target method. Patch by Alex Waygood. + bpo-45679: Fix caching of multi-value typing.Literal. Literal[True, 2] is no longer equal to Literal[1, 2]. + bpo-45438: Fix typing.Signature string representation for generic builtin types. + bpo-45581: sqlite3.connect() now correctly raises MemoryError if the underlying SQLite API signals memory error. Patch by Erlend E. Aasland. + bpo-39679: Fix bug in functools.singledispatchmethod that caused it to fail when attempting to register a classmethod() or staticmethod() using type annotations. Patch contributed by Alex Waygood. + bpo-45515: Add references to zoneinfo in the datetime documentation, mostly replacing outdated references to dateutil.tz. Change by Paul Ganssle. + bpo-45467: Fix incremental decoder and stream reader in the “raw-unicode-escape” codec. Previously they failed if the escape sequence was split. + bpo-45461: Fix incremental decoder and stream reader in the “unicode-escape” codec. Previously they failed if the escape sequence was split. + bpo-45239: Fixed email.utils.parsedate_tz() crashing with UnboundLocalError on certain invalid input instead of returning None. Patch by Ben Hoyt. + bpo-44904: Fix bug in the doctest module that caused it to fail if a docstring included an example with a classmethod property. Patch by Alex Waygood. + bpo-45406: Make inspect.getmodule() catch FileNotFoundError raised by :’func:inspect.getabsfile, and return None to indicate that the module could not be determined. + bpo-45262: Prevent use-after-free in asyncio. Make sure the cached running loop holder gets cleared on dealloc to prevent use-after-free in get_running_loop + bpo-45386: Make xmlrpc.client more robust to C runtimes where the underlying C strftime function results in a ValueError when testing for year formatting options. + bpo-45371: Fix clang rpath issue in distutils. The UnixCCompiler now uses correct clang option to add a runtime library directory (rpath) to a shared library. + bpo-20028: Improve error message of csv.Dialect when initializing. Patch by Vajrasky Kok and Dong-hee Na. + bpo-45343: Update bundled pip to 21.2.4 and setuptools to 58.1.0 + bpo-41710: On Unix, if the sem_clockwait() function is available in the C library (glibc 2.30 and newer), the threading.Lock.acquire() method now uses the monotonic clock (time.CLOCK_MONOTONIC) for the timeout, rather than using the system clock (time.CLOCK_REALTIME), to not be affected by system clock changes. Patch by Victor Stinner. + bpo-45328: Fixed http.client.HTTPConnection to work properly in OSs that don’t support the TCP_NODELAY socket option. + bpo-1596321: Fix the threading._shutdown() function when the threading module was imported first from a thread different than the main thread: no longer log an error at Python exit. + bpo-45274: Fix a race condition in the Thread.join() method of the threading module. If the function is interrupted by a signal and the signal handler raises an exception, make sure that the thread remains in a consistent state to prevent a deadlock. Patch by Victor Stinner. + bpo-45238: Fix unittest.IsolatedAsyncioTestCase.debug(): it runs now asynchronous methods and callbacks. + bpo-36674: unittest.TestCase.debug() raises now a unittest.SkipTest if the class or the test method are decorated with the skipping decorator. + bpo-45235: Fix an issue where argparse would not preserve values in a provided namespace when using a subparser with defaults. + bpo-45234: Fixed a regression in copyfile(), copy(), copy2() raising FileNotFoundError when source is a directory, which should raise IsADirectoryError + bpo-45228: Fix stack buffer overflow in parsing J1939 network address. + bpo-45192: Fix the tempfile._infer_return_type function so that the dir argument of the tempfile functions accepts an object implementing the os.PathLike protocol. + bpo-45160: When tracing a tkinter variable used by a ttk OptionMenu, callbacks are no longer made twice. + bpo-35474: Calling mimetypes.guess_all_extensions() with strict=False no longer affects the result of the following call with strict=True. Also, mutating the returned list no longer affects the global state. + bpo-45166: typing.get_type_hints() now works with Final wrapped in ForwardRef. + bpo-45097: Remove deprecation warnings about the loop argument in asyncio incorrectly emitted in cases when the user does not pass the loop argument. + bpo-45081: Fix issue when dataclasses that inherit from typing.Protocol subclasses have wrong __init__. Patch provided by Yurii Karabas. + bpo-24444: Fixed an error raised in argparse help display when help for an option is set to 1+ blank spaces or when choices arg is an empty container. + bpo-45021: Fix a potential deadlock at shutdown of forked children when using concurrent.futures module + bpo-45030: Fix integer overflow in pickling and copying the range iterator. + bpo-39039: tarfile.open raises ReadError when a zlib error occurs during file extraction. + bpo-44594: Fix an edge case of ExitStack and AsyncExitStack exception chaining. They will now match with block behavior when __context__ is explicitly set to None when the exception is in flight. * Documentation + bpo-45726: Improve documentation for functools.singledispatch() and functools.singledispatchmethod. + bpo-45680: Amend the docs on GenericAlias objects to clarify that non-container classes can also implement __class_getitem__. Patch contributed by Alex Waygood. + bpo-45655: Add a new “relevant PEPs” section to the top of the documentation for the typing module. Patch by Alex Waygood. + bpo-45604: Add level argument to multiprocessing.log_to_stderr function docs. + bpo-45464: Mention in the documentation of Built-in Exceptions that inheriting from multiple exception types in a single subclass is not recommended due to possible memory layout incompatibility. + bpo-45449: Add note about PEP 585 in collections.abc. + bpo-45516: Add protocol description to the importlib.abc.Traversable documentation. + bpo-20692: Add Programming FAQ entry explaining that int literal attribute access requires either a space after or parentheses around the literal. + bpo-45216: Remove extra documentation listing methods in difflib. It was rendering twice in pydoc and was outdated in some places. + bpo-45772: socket.socket documentation is corrected to a class from a function. + bpo-45392: Update the docstring of the type built-in to remove a redundant line and to mention keyword arguments for the constructor. * Tests + bpo-45578: Add tests for dis.distb() + bpo-45577: Add subtests for all pickle protocols in test_zoneinfo. + bpo-43592: test.libregrtest now raises the soft resource limit for the maximum number of file descriptors when the default is too low for our test suite as was often the case on macOS. + bpo-40173: Fix test.support.import_helper.import_fresh_module(). + bpo-45280: Add a test case for empty typing.NamedTuple. + bpo-45269: Cover case when invalid markers type is supplied to c_make_encoder. + bpo-45209: Fix UserWarning: resource_tracker warning in _test_multiprocessing._TestSharedMemory.test_shared_memory_cleaned_after_process_termination + bpo-45195: Fix test_readline.test_nonascii(): sometimes, the newline character is not written at the end, so don’t expect it in the output. Patch by Victor Stinner. + bpo-45156: Fixes infinite loop on unittest.mock.seal() of mocks created by create_autospec(). + bpo-45042: Fixes that test classes decorated with @hashlib_helper.requires_hashdigest were skipped all the time. + bpo-45235: Reverted an argparse bugfix that caused regression in the handling of default arguments for subparsers. This prevented leaf level arguments from taking precedence over root level arguments. + bpo-45765: In importlib.metadata, fix distribution discovery for an empty path. + bpo-45644: In-place JSON file formatting using python3 -m json.tool infile infile now works correctly, previously it left the file empty. Patch by Chris Wesseling. * Build + bpo-43158: setup.py now uses values from configure script to build the _uuid extension module. Configure now detects util-linux’s libuuid, too. + bpo-45571: Modules/Setup now use PY_CFLAGS_NODIST instead of PY_CFLAGS to compile shared modules. + bpo-45532: Update sys.version to use main as fallback information. Patch by Jeong YunWon. + bpo-45405: Prevent internal configure error when running configure with recent versions of non-Apple clang. Patch by David Bohman. + bpo-45220: Avoid building with the Windows 11 SDK previews automatically. This may be overridden by setting the DefaultWindowsSDKVersion environment variable before building. * C API + bpo-44687: BufferedReader.peek() no longer raises ValueError when the entire file has already been buffered. + bpo-44751: Remove crypt.h include from the public Python.h header. - Drop patch incorrect-deprecation-warn-asyncio.patch, fix included.- rpm-build-python dependency is available on the current Factory, not with SLE.- Add incorrect-deprecation-warn-asyncio.patch to fix bpo#45097 (from gh#python/cpython#28153) to remove incorrect deprecation warnings in asyncio.- BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation.- Update to 3.9.7: - Security - Replaced usage of tempfile.mktemp() with TemporaryDirectory to avoid a potential race condition. - Add auditing events to the marshal module, and stop raising code.__init__ events for every unmarshalled code object. Directly instantiated code objects will continue to raise an event, and audit event handlers should inspect or collect the raw marshal data. This reduces a significant performance overhead when loading from .pyc files. - Made the internal putcmd function in smtplib sanitize input for presence of \r and \n characters to avoid (unlikely) command injection. - Core and Builtins - Fixed pickling of range iterators that iterated for over 2**32 times. - Fix a race in WeakKeyDictionary, WeakValueDictionary and WeakSet when two threads attempt to commit the last pending removal. This fixes asyncio.create_task and fixes a data loss in asyncio.run where shutdown_asyncgens is not run - Fixed a corner case bug where the result of float.fromhex('0x.8p-1074') was rounded the wrong way. - Refine the syntax error for trailing commas in import statements. Patch by Pablo Galindo. - Restore behaviour of complex exponentiation with integer-valued exponent of type float or complex. - Correct the ast locations of f-strings with format specs and repeated expressions. Patch by Pablo Galindo - Use new trashcan macros (Py_TRASHCAN_BEGIN/END) in frameobject.c instead of the old ones (Py_TRASHCAN_SAFE_BEGIN/END). - Fix segmentation fault with deep recursion when cleaning method objects. Patch by Augusto Goulart and Pablo Galindo. - Fix bug where PyErr_SetObject hangs when the current exception has a cycle in its context chain. - Fix reference leaks in the error paths of update_bases() and __build_class__. Patch by Pablo Galindo. - Fix undefined behaviour in complex object exponentiation. - Remove uses of PyObject_GC_Del() in error path when initializing types.GenericAlias. - Remove the pass-through for hash() of weakref.proxy objects to prevent unintended consequences when the original referred object dies while the proxy is part of a hashable object. Patch by Pablo Galindo. - Fix ltrace functionality when exceptions are raised. Patch by Pablo Galindo - Fix a crash at Python exit when a deallocator function removes the last strong reference to a heap type. Patch by Victor Stinner. - Fix crash when using passing a non-exception to a generator’s throw() method. Patch by Noah Oxer - Library - run() now always return a TestResult instance. Previously it returned None if the test class or method was decorated with a skipping decorator. - Fix bugs in cleaning up classes and modules in unittest: - Functions registered with addModuleCleanup() were not called unless the user defines tearDownModule() in their test module. - Functions registered with addClassCleanup() were not called if tearDownClass is set to None. - Buffering in TestResult did not work with functions registered with addClassCleanup() and addModuleCleanup(). - Errors in functions registered with addClassCleanup() and addModuleCleanup() were not handled correctly in buffered and debug modes. - Errors in setUpModule() and functions registered with addModuleCleanup() were reported in wrong order. - And several lesser bugs. - Made email date parsing more robust against malformed input, namely a whitespace-only Date: header. Patch by Wouter Bolsterlee. - Fix a crash in the signal handler of the faulthandler module: no longer modify the reference count of frame objects. Patch by Victor Stinner. - Method stopTestRun() is now always called in pair with method startTestRun() for TestResult objects implicitly created in run(). Previously it was not called for test methods and classes decorated with a skipping decorator. - argparse.BooleanOptionalAction’s default value is no longer printed twice when used with argparse.ArgumentDefaultsHelpFormatter. - Upgrade bundled pip to 21.2.3 and setuptools to 57.4.0 - Fix the os.set_inheritable() function on FreeBSD 14 for file descriptor opened with the O_PATH flag: ignore the EBADF error on ioctl(), fallback on the fcntl() implementation. Patch by Victor Stinner. - The @functools.total_ordering() decorator now works with metaclasses. - sqlite3 user-defined functions and aggregators returning strings with embedded NUL characters are no longer truncated. Patch by Erlend E. Aasland. - Always show loop= arg deprecations in asyncio.gather() and asyncio.sleep() - Non-protocol subclasses of typing.Protocol ignore now the __init__ method inherited from protocol base classes. - The tokenize.tokenize() doesn’t incorrectly generate a NEWLINE token if the source doesn’t end with a new line character but the last line is a comment, as the function is already generating a NL token. Patch by Pablo Galindo - Fix http.client.HTTPSConnection fails to download >2GiB data. - rcompleter does not call getattr() on property objects to avoid the side-effect of evaluating the corresponding method. - weakref.proxy objects referencing non-iterators now raise TypeError rather than dereferencing the null tp_iternext slot and crashing. - The implementation of collections.abc.Set._hash() now matches that of frozenset.__hash__(). - Fixed issue in compileall.compile_file() when sys.stdout is redirected. Patch by Stefan Hölzl. - Give priority to using the current class constructor in inspect.signature(). Patch by Weipeng Hong. - Fix memory leak in _tkinter._flatten() if it is called with a sequence or set, but not list or tuple. - Update shutil.copyfile() to raise FileNotFoundError instead of confusing IsADirectoryError when a path ending with a os.path.sep does not exist; shutil.copy() and shutil.copy2() are also affected. - handle StopIteration subclass raised from @contextlib.contextmanager generator - Make the implementation consistency of indexOf() between C and Python versions. Patch by Dong-hee Na. - Fixes TypedDict to work with typing.get_type_hints() and postponed evaluation of annotations across modules. - Fix bug with pdb’s handling of import error due to a package which does not have a __main__ module - Fixed an exception thrown while parsing a malformed multipart email by email.message.EmailMessage. - pathlib.PureWindowsPath.is_reserved() now identifies a greater range of reserved filenames, including those with trailing spaces or colons. - Handle exceptions from parsing the arg of pdb’s run/restart command. - The sqlite3 context manager now performs a rollback (thus releasing the database lock) if commit failed. Patch by Luca Citi and Erlend E. Aasland. - Improved string handling for sqlite3 user-defined functions and aggregates: - It is now possible to pass strings with embedded null characters to UDFs - Conversion failures now correctly raise MemoryError - Patch by Erlend E. Aasland. - Handle RecursionError in TracebackException’s constructor, so that long exceptions chains are truncated instead of causing traceback formatting to fail. - Fix email.message.EmailMessage.set_content() when called with binary data and 7bit content transfer encoding. - The compresslevel and preset keyword arguments of tarfile.open() are now both documented and tested. - Fixed a Y2k38 bug in the compileall module where it would fail to compile files with a modification time after the year 2038. - Fix test___all__ on platforms lacking a shared memory implementation. - Pass multiprocessing BaseProxy argument manager_owned through AutoProxy. - email.utils.getaddresses() now accepts email.header.Header objects along with string values. Patch by Zackery Spytz. - lib2to3 now recognizes async generators everywhere. - Fix TypeError when required subparsers without dest do not receive arguments. Patch by Anthony Sottile. - Documentation - Removed the othergui.rst file, any references to it, and the list of GUI frameworks in the FAQ. In their place I’ve added links to the Python Wiki page on GUI frameworks. - Update the definition of __future__ in the glossary by replacing the confusing word “pseudo-module” with a more accurate description. - Add typical examples to os.path.splitext docs - Clarify that shutil.make_archive() is not thread-safe due to reliance on changing the current working directory. - Update of three expired hyperlinks in Doc/distributing/index.rst: “Project structure”, “Building and packaging the project”, and “Uploading the project to the Python Packaging Index”. - Updated the docstring and docs of filecmp.cmp() to be more accurate and less confusing especially in respect to shallow arg. - Match the docstring and python implementation of countOf() to the behavior of its c implementation. - List all kwargs for textwrap.wrap(), textwrap.fill(), and textwrap.shorten(). Now, there are nav links to attributes of TextWrap, which makes navigation much easier while minimizing duplication in the documentation. - Clarify that atexit uses equality comparisons internally. - Documentation of csv.Dialect is more descriptive. - Fix documentation for the return type of sysconfig.get_path(). - Add a “Security Considerations” index which links to standard library modules that have explicitly documented security considerations. - Remove the unqualified claim that tkinter is threadsafe. It has not been true for several years and likely never was. An explanation of what is true may be added later, after more discussion, and possibly after patching _tkinter.c, - Tests - Add calls of gc.collect() in tests to support PyPy. - Made tests relying on the _asyncio C extension module optional to allow running on alternative Python implementations. Patch by Serhiy Storchaka. - Fix auto history tests of test_readline: sometimes, the newline character is not written at the end, so don’t expect it in the output. - Add ability to wholesale silence DeprecationWarnings while running the regression test suite. - Notify users running test_decimal regression tests on macOS of potential harmless “malloc can’t allocate region” messages spewed by test_decimal. - Fixed floating point precision issue in turtle tests. - Regression tests, when run with -w, are now re-running only the affected test methods instead of re-running the entire test file. - Add test for nested queues when using multiprocessing shared objects AutoProxy[Queue] inside ListProxy and DictProxy- Add decimal.patch to add building with --with-system-libmpdec option (bsc#1189356).- test_faulthandler is still problematic under qemu linux-user emulation, disable it there - Reenable profileopt with qemu emulation, test_faulthandler is no longer run during profiling- Update to 3.9.6: * Security - bpo-44022 (bsc#1189241, CVE-2021-3737): http.client now avoids infinitely reading potential HTTP headers after a 100 Continue status response from the server. * Core and Builtins - bpo-44168: Fix error message in the parser involving keyword arguments with invalid expressions. Patch by Pablo Galindo - bpo-44114: Fix incorrect dictkeys_reversed and dictitems_reversed function signatures in C code, which broke webassembly builds. - bpo-44070: No longer eagerly makes import filenames absolute, except for extension modules, which was introduced in 3.9.5. - bpo-28146: Fix a confusing error message in str.format(). - bpo-11105: When compiling ast.AST objects with recursive references through compile(), the interpreter doesn’t crash anymore instead it raises a RecursionError. * Library - bpo-43972: When http.server.SimpleHTTPRequestHandler sends a 301 (Moved Permanently) for a directory path not ending with /, add a Content-Length: 0 header. This improves the behavior for certain clients. - bpo-43776: When subprocess.Popen args are provided as a string or as pathlib.Path, the Popen instance repr now shows the right thing. - bpo-43318: Fix a bug where pdb does not always echo cleared breakpoints. - bpo-43295: datetime.datetime.strptime() now raises ValueError instead of IndexError when matching 'z' with the %z format specifier. - bpo-37022: pdb now displays exceptions from repr() with its p and pp commands. * IDLE - bpo-33962: Move the indent space setting from the Font tab to the new Windows tab. Patch by Mark Roseman and Terry Jan Reedy. - bpo-40468: Split the settings dialog General tab into Windows and Shell/ED tabs. Move help sources, which extend the Help menu, to the Extensions tab. Make space for new options and shorten the dialog. The latter makes the dialog better fit small screens. - bpo-41611: Avoid uncaught exceptions in AutoCompleteWindow.winconfig_event(). - bpo-41611: Fix IDLE sometimes freezing upon tab-completion on macOS. * Tools/Demos - bpo-44074: Make patchcheck automatically detect the correct base branch name (previously it was hardcoded to ‘master’) - Upstreamed patches were removed: - bpo44426-complex-keyword-sphinx.patch - Refreshed patches: - subprocess-raise-timeout.patch- Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858).- Add bpo44426-complex-keyword-sphinx.patch allowing generating documentation with Sphinx 4 (bpo#44426).- Revert previous skip over test_capi - Add skip-test_pyobject_freed_is_freed.patch to skip failing test on SLE-15.- allow build with Sphinx >= 3.x- Exclude test_capi on Leap (test fails there)- Stop providing "python" symbol (bsc#1185588), which means python2 currently.- Update to 3.9.5: * Security - bpo-43434: Creating a sqlite3.Connection object now also produces a sqlite3.connect auditing event. Previously this event was only produced by sqlite3.connect() calls. Patch by Erlend E. Aasland. - bpo-43882: The presence of newline or tab characters in parts of a URL could allow some forms of attacks. - Following the controlling specification for URLs defined by WHATWG urllib.parse() now removes ASCII newlines and tabs from URLs, preventing such attacks. - bpo-43472: Ensures interpreter-level audit hooks receive the cpython.PyInterpreterState_New event when called through the _xxsubinterpreters module. - bpo-36384 (bsc#1185706, CVE-2021-29921): ipaddress module no longer accepts any leading zeros in IPv4 address strings. Leading zeros are ambiguous and interpreted as octal notation by some libraries. For example the legacy function socket.inet_aton() treats leading zeros as octal notatation. glibc implementation of modern inet_pton() does not accept any leading zeros. For a while the ipaddress module used to accept ambiguous leading zeros. - bpo-43075 (CVE-2021-3733, bsc#1189287): Fix Regular Expression Denial of Service (ReDoS) vulnerability in urllib.request.AbstractBasicAuthHandler. The ReDoS-vulnerable regex has quadratic worst-case complexity and it allows cause a denial of service when identifying crafted invalid RFCs. This ReDoS issue is on the client side and needs remote attackers to control the HTTP server. - bpo-42800: Audit hooks are now fired for frame.f_code, traceback.tb_frame, and generator code/frame attribute access. * Core and Builtins - bpo-43105: Importlib now resolves relative paths when creating module spec objects from file locations. - bpo-42924: Fix bytearray repetition incorrectly copying data from the start of the buffer, even if the data is offset within the buffer (e.g. after reassigning a slice at the start of the bytearray to a shorter byte string). * Library - bpo-43993: Update bundled pip to 21.1.1. - bpo-43937: Fixed the turtle module working with non-default root window. - bpo-43930: Update bundled pip to 21.1 and setuptools to 56.0.0 - bpo-43920: OpenSSL 3.0.0: load_verify_locations() now returns a consistent error message when cadata contains no valid certificate. - bpo-43607: urllib can now convert Windows paths with \\?\ prefixes into URL paths. - bpo-43284: platform.win32_ver derives the windows version from sys.getwindowsversion().platform_version which in turn derives the version from kernel32.dll (which can be of a different version than Windows itself). Therefore change the platform.win32_ver to determine the version using the platform module’s _syscmd_ver private function to return an accurate version. - bpo-42248: [Enum] ensure exceptions raised in _missing__ are released - bpo-43799: OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1 to suppress deprecation warnings. Python requires OpenSSL 1.1.1 APIs. - bpo-43794: Add ssl.OP_IGNORE_UNEXPECTED_EOF constants (OpenSSL 3.0.0) - bpo-43789: OpenSSL 3.0.0: Don’t call the password callback function a second time when first call has signaled an error condition. - bpo-43788: The header files for ssl error codes are now OpenSSL version-specific. Exceptions will now show correct reason and library codes. The make_ssl_data.py script has been rewritten to use OpenSSL’s text file with error codes. - bpo-43655: tkinter dialog windows are now recognized as dialogs by window managers on macOS and X Window. - bpo-43534: turtle.textinput() and turtle.numinput() create now a transient window working on behalf of the canvas window. - bpo-43522: Fix problem with hostname_checks_common_name. OpenSSL does not copy hostflags from struct SSL_CTX to struct SSL. - bpo-42967: Allow bytes separator argument in urllib.parse.parse_qs and urllib.parse.parse_qsl when parsing str query strings. Previously, this raised a TypeError. - bpo-43176: Fixed processing of a dataclass that inherits from a frozen dataclass with no fields. It is now correctly detected as an error. - bpo-41735: Fix thread locks in zlib module may go wrong in rare case. Patch by Ma Lin. - bpo-36470: Fix dataclasses with InitVars and replace(). Patch by Claudiu Popa. - bpo-32745: Fix a regression in the handling of ctypes’ ctypes.c_wchar_p type: embedded null characters would cause a ValueError to be raised. Patch by Zackery Spytz. * Documentation - bpo-43959: The documentation on the PyContextVar C-API was clarified. - bpo-43938: Update dataclasses documentation to express that FrozenInstanceError is derived from AttributeError. - bpo-43755: Update documentation to reflect that unparenthesized lambda expressions can no longer be the expression part in an if clause in comprehensions and generator expressions since Python 3.9. - bpo-43739: Fixing the example code in Doc/extending/extending.rst to declare and initialize the pmodule variable to be of the right type. * Tests - bpo-43961: Fix test_logging.test_namer_rotator_inheritance() on Windows: use os.replace() rather than os.rename(). Patch by Victor Stinner. - bpo-43842: Fix a race condition in the SMTP test of test_logging. Don’t close a file descriptor (socket) from a different thread while asyncore.loop() is polling the file descriptor. Patch by Victor Stinner. - bpo-43811: Tests multiple OpenSSL versions on GitHub Actions. Use ccache to speed up testing. - bpo-43791: OpenSSL 3.0.0: Disable testing of legacy protocols TLS 1.0 and 1.1. Tests are failing with TLSV1_ALERT_INTERNAL_ERROR. - Refreshed patches: - bpo-31046_ensurepip_honours_prefix.patch - python-3.3.0b1-fix_date_time_compiler.patch - Add vendorized files from bluez-devel to enable building support for Bluetooth.- Make sure to close the import_failed.map file after the exception has been raised in order to avoid ResourceWarnings when the failing import is part of a try...except block.- Update to 3.9.4: - bpo#43710: Reverted the fix for https://bugs.python.org/issue42500 as it changed the PyThreadState struct size and broke the 3.9.x ABI in the 3.9.3 release (visible on 32-bit platforms using binaries compiled using an earlier version of Python 3.9.x headers). - bpo#26053: Fixed bug where the pdb interactive run command echoed the args from the shell command line, even if those have been overridden at the pdb prompt. - bpo#42988 (bsc#1183374) CVE-2021-3426: Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of Python modules can contain sensitive data like passwords. Vulnerability reported by David Schwörer. - bpo#43285: ftplib no longer trusts the IP address value returned from the server in response to the PASV command by default. This prevents a malicious FTP server from using the response to probe IPv4 address and port combinations on the client network. Code that requires the former vulnerable behavior may set a trust_server_pasv_ipv4_address attribute on their ftplib.FTP instances to True to re-enable it. - bpo#43439: Add audit hooks for gc.get_objects(), gc.get_referrers() and gc.get_referents(). Patch by Pablo Galindo. - bpo#43660: Fix crash that happens when replacing sys.stderr with a callable that can remove the object while an exception is being printed. Patch by Pablo Galindo. - bpo#43555: Report the column offset for SyntaxError for invalid line continuation characters. Patch by Pablo Galindo. - bpo#43517: Fix misdetection of circular imports when using from pkg.mod import attr, which caused false positives in non-trivial multi-threaded code. - bpo#35883: Python no longer fails at startup with a fatal error if a command line argument contains an invalid Unicode character. The Py_DecodeLocale() function now escapes byte sequences which would be decoded as Unicode characters outside the [U+0000; U+10ffff] range. - bpo#43406: Fix a possible race condition where PyErr_CheckSignals tries to execute a non-Python signal handler. - bpo#42500: Improve handling of exceptions near recursion limit. Converts a number of Fatal Errors in RecursionErrors. - bpo#43433: xmlrpc.client.ServerProxy no longer ignores query and fragment in the URL of the server. - bpo#35930: Raising an exception raised in a “future” instance will create reference cycles. - bpo#43577: Fix deadlock when using ssl.SSLContext debug callback with ssl.SSLContext.sni_callback(). - bpo#43521: ast.unparse can now render NaNs and empty sets. - bpo#43423: subprocess.communicate() no longer raises an IndexError when there is an empty stdout or stderr IO buffer during a timeout on Windows. - bpo#27820: Fixed long-standing bug of smtplib.SMTP where doing AUTH LOGIN with initial_response_ok=False will fail. The cause is that SMTP.auth_login _always_ returns a password if provided with a challenge string, thus non-compliant with the standard for AUTH LOGIN. Also fixes bug with the test for smtpd. - bpo#43332: Improves the networking efficiency of http.client when using a proxy via set_tunnel(). Fewer small send calls are made during connection setup. - bpo#43399: Fix ElementTree.extend not working on iterators when using the Python implementation - bpo#43316: The python -m gzip command line application now properly fails when detecting an unsupported extension. It exits with a non-zero exit code and prints an error message to stderr. - bpo#43260: Fix TextIOWrapper can not flush internal buffer forever after very large text is written. - bpo#42782: Fail fast in shutil.move() to avoid creating destination directories on failure. - bpo#37193: Fixed memory leak in socketserver.ThreadingMixIn introduced in Python 3.7. - bpo#43199: Answer “Why is there no goto?” in the Design and History FAQ. - bpo#43407: Clarified that a result from time.monotonic(), time.perf_counter(), time.process_time(), or time.thread_time() can be compared with the result from any following call to the same function - not just the next immediate call. - bpo#27646: Clarify that ‘yield from ’ works with any iterable, not just iterators. - bpo#36346: Update some deprecated unicode APIs which are documented as “will be removed in 4.0” to “3.12”. See PEP 623 for detail. - bpo#37945: Fix test_getsetlocale_issue1813() of test_locale: skip the test if setlocale() fails. Patch by Victor Stinner. - bpo#41561: Add workaround for Ubuntu’s custom OpenSSL security level policy. - bpo#43288: Fix test_importlib to correctly skip Unicode file tests if the fileystem does not support them. - bpo#43617: Improve configure.ac: Check for presence of autoconf-archive package and remove our copies of M4 macros. - bpo#42225: Document that IDLE can fail on Unix either from misconfigured IP masquerage rules or failure displaying complex colored (non-ascii) characters. - bpo#43283: Document why printing to IDLE’s Shell is often slower than printing to a system terminal and that it can be made faster by pre-formatting a single string before printing.- Update to 3.9.2: - bpo#42938 (bsc#1181126): Avoid static buffers when computing the repr of ctypes.c_double and ctypes.c_longdouble values. This issue was assigned CVE-2021-3177. - bpo#42967 (bsc#1182379): Fix web cache poisoning vulnerability by defaulting the query args separator to &, and allowing the user to choose a custom separator. This issue was assigned CVE-2021-23336. - Upstreamed patches were removed: - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch - bsc1167501-invalid-alignment.patch - skip_random_failing_tests.patch - CVE-2019-5010-null-defer-x509-cert-DOS.patch- Add Obsoletes for python3-base when primary interpreter is set to properly replace it during upgrades. (bsc#1181324)- Update to 3.9.1: Security bugs: - Prevented potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format. - The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities. This should not affect users as entity declarations are not used in regular plist files. - Add volatile to the accumulator variable in hmac.compare_digest, making constant-time-defeating optimizations less likely. Core and Builtins - Allow assignment expressions in set literals and set comprehensions as per PEP 572. Patch by Pablo Galindo. - Fix a regression introduced by the new parser, where an unparenthesized walrus operator was not allowed within generator expressions. - types.GenericAlias objects can now be the targets of weakrefs. - Fixed a bug in the PEG parser that was causing crashes in debug mode. Now errors are checked in left-recursive rules to avoid cases where such errors do not get handled in time and appear as long-distance crashes in other places. - Fixed a possible crash in the PEG parser when checking for the ‘!=’ token in the barry_as_flufl rule. Patch by Pablo Galindo. - Fix handling of errors during creation of PyFunctionObject, which resulted in operations on uninitialized memory. Patch by Yonatan Goldschmidt. - Fix a bug in the parser, where a curly brace following a primary didn’t fail immediately. This led to invalid expressions like a {b} to throw a SyntaxError with a wrong offset, or invalid expressions ending with a curly brace like a { to not fail immediately in the REPL. - Fix possible buffer overflow in the new parser when checking for continuation lines. Patch by Pablo Galindo. - Run the parser two times. On the first run, disable all the rules that only generate better error messages to gain performance. If there’s a parse failure, run the parser a second time with those enabled. - Document the default implementation of object.__eq__. - Fix peephole optimizer misoptimize conditional jump + JUMP_IF_NOT_EXC_MATCH pair. - The garbage collector now tracks all user-defined classes. Patch by Brandt Bucher. - Fixed potential issues with removing not completely initialized module from sys.modules when import fails. - Star-unpacking is now allowed for with item’s targets in the PEG parser. - Fixed stack overflow in issubclass() and isinstance() when getting the __bases__ attribute leads to infinite recursion. - When loading a native module and a load failure occurs, prevent a possible UnicodeDecodeError when not running in a UTF-8 locale by decoding the load error message using the current locale’s encoding. - Correctly count control blocks in ‘except’ in compiler. Ensures that a syntax error, rather a fatal error, occurs for deeply nested, named exception handlers. Library - types.GenericAlias will now raise a TypeError when attempting to initialize with a keyword argument. Previously, this would cause the interpreter to crash if the interpreter was compiled with debug symbols. This does not affect interpreters compiled for release. Patch by Ken Jin. - CGIHTTPRequestHandler.run_cgi() HTTP_ACCEPT improperly parsed. Replace the special purpose getallmatchingheaders with generic get_all method and add relevant tests. - inspect.findsource() now raises OSError instead of IndexError when co_lineno of a code object is greater than the file length. This can happen, for example, when a file is edited after it was imported. PR by Irit Katriel. - Fix handling of trailing comments by inspect.getsource(). - ChainMap.__iter__ no longer calls __getitem__ on underlying maps - TracebackException no longer holds a reference to the exception’s traceback object. Consequently, instances of TracebackException for equivalent but non-equal exceptions now compare as equal. - We fixed an issue in pickle.whichmodule in which importing multiprocessing could change the how pickle identifies which module an object belongs to, potentially breaking the unpickling of those objects. - Clarify the error message for asyncio.IncompleteReadError when expected is None. - Extracting a symlink from a tarball should succeed and overwrite the symlink if it already exists. The fix is to remove the existing file or symlink before extraction. Based on patch by Chris AtLee, Jeffrey Kintscher, and Senthil Kumaran. - Fixed tkinter.ttk.Style.map(). The function accepts now the representation of the default state as empty sequence (as returned by Style.map()). The structure of the result is now the same on all platform and does not depend on the value of wantobjects. - Fix various issues with typing.Literal parameter handling (flatten, deduplicate, use type to cache key). Patch provided by Yurii Karabas. - Fix the threading.Thread class at fork: do nothing if the thread is already stopped (ex: fork called at Python exit). Previously, an error was logged in the child process. - The onerror callback from shutil.rmtree now receives correct function when os.open fails. - Fix os.sendfile() on illumos. - Fixed writing binary Plist files larger than 4 GiB. - The repr() of typing types containing Generic Alias Types previously did not show the parameterized types in the GenericAlias. They have now been changed to do so. - webbrowser: Ignore NotADirectoryError when calling xdg-settings. - binhex.binhex() consisently writes macOS 9 line endings. - Fix a stack overflow error for asyncio Task or Future repr(). - The overflow occurs under some circumstances when a Task or Future recursively returns itself. - Fix memory leak in subprocess.Popen() in case an uid (gid) specified in user (group, extra_groups) overflows uid_t (gid_t). - Improve asyncio.wait function to create the futures set just one time. - InvalidFileException and RecursionError are now the only errors caused by loading malformed binary Plist file (previously ValueError and TypeError could be raised in some specific cases). - Pickling heap types implemented in C with protocols 0 and 1 raises now an error instead of producing incorrect data. - plistlib: fix parsing XML plists with hexadecimal integer values - Fix an incorrectly formatted error from _codecs.charmap_decode() when called with a mapped value outside the range of valid Unicode code points. PR by Max Bernstein. - Fix pickling pure Python datetime.time subclasses. Patch by Dean Inwood. - Fixed a bug that was causing ctypes.util.find_library() to return None when triying to locate a library in an environment when gcc>=9 is available and ldconfig is not. Patch by Pablo Galindo - C14N 2.0 serialisation in xml.etree.ElementTree failed for unprefixed attributes when a default namespace was defined. - Fix a bug in the symtable module that was causing module-scope global variables to not be reported as both local and global. Patch by Pablo Galindo. - str() for the type attribute of the tkinter.Event object always returns now the numeric code returned by Tk instead of the name of the event type. - fix tkinter.EventType Enum so all members are strings, and none are tuples - Fix SQLite3 segfault when backing up closed database. Patch contributed by Peter David McCormick. - Fix the tarfile module to write only basename of TAR file to GZIP compression header. - Allow ctypes.wintypes to be imported on non-Windows systems. - shutil.which() now ignores empty entries in PATHEXT instead of treating them as a match. - Fix time-of-check/time-of-action issue in subprocess.Popen.send_signal. - Fix --outfile for cProfile / profile not writing the output file in the original directory when the program being profiled changes the working directory. PR by Anthony Sottile. - ZipFile truncates files to avoid corruption when a shorter comment is provided in append (“a”) mode. Patch by Jan Mazur. - Fixed KeyError exception when flattening an email to a string attempts to replace a non-existent Content-Transfer-Encoding header. Documentation - Fix the URL for the IMAP protocol documents. - Document __format__ functionality for IP addresses. - Clarify that subscription expressions are also valid for certain classes and types in the standard library, and for user-defined classes and types if the classmethod __class_getitem__() is provided. - Documented generic alias type and types.GenericAlias. Also added an entry in glossary for generic types. - In Programming FAQ “Sequences (Tuples/Lists)” section, add “How do you remove multiple items from a list”. - Fix RemovedInSphinx40Warning when building the documentation. Patch by Dong-hee Na. - Update the refcounts info of PyType_FromModuleAndSpec. - Fix tarfile’s extractfile documentation - Document some restrictions on the default string representations of numeric classes. Tests - Reenable test_gdb on gdb 9.2 and newer: https://bugzilla.redhat.com/show_bug.cgi?id=1866884 bug is fixed in gdb 10.1. - Fix test_asyncio.test_call_later() race condition: don’t measure asyncio performance in the call_later() unit test. The test failed randomly on the CI. - Include _testinternalcapi module in Windows installer for test suite - Fix test_logging.test_race_between_set_target_and_flush(): the test now waits until all threads complete to avoid leaking running threads. - Avoid a test failure in test_lib2to3 if the module has already imported at the time the test executes. Patch by Pablo Galindo. - Tests for CJK codecs no longer call eval() on content received via HTTP. - Fix test_site.test_license_exists_at_url(): call urllib.request.urlcleanup() to reset the global urllib.request._opener. Patch by Victor Stinner. - test_ssl: skip test_min_max_version_mismatch when TLS 1.0 is not available - Add tests for SIGINT handling in the runpy module. - Fixed a failure in test_tk.test_widgets.ScaleTest happening when executing the test with Tk 8.6.10. Build - Fix a race condition in “make regen-all” when make -jN option is used to run jobs in parallel. The clinic.py script now only use atomic write to write files. Moveover, generated files are now left unchanged if the content does not change, to not change the file modification time. - Update Py_UNREACHABLE to use __builtin_unreachable() if only the compiler is able to use it. Patch by Dong-hee Na. - Addressed three compiler warnings found by undefined behavior sanitizer (ubsan). IDLE - Fix reporting offset of the RE error in searchengine. - Get docstrings for IDLE calltips more often by using inspect.getdoc. - Mostly finish using ttk widgets, mainly for editor, settings, and searches. Some patches by Mark Roseman. - Use ‘IDLE Shell’ as shell title - Rewrite the Calltips doc section. - In calltips, stop reminding that ‘/’ marks the end of positional-only arguments. - Typing opening and closing parentheses inside the parentheses of a function call will no longer cause unnecessary “flashing” off and on of an existing open call-tip, e.g. when typed in a string literal. C API - Fix potential crash in deallocating method objects when dynamically allocated PyMethodDef’s lifetime is managed through the self argument of a PyCFunction. - Py_FileSystemDefaultEncodeErrors and Py_UTF8Mode are available again in limited API. - Readjustet and reapplied patches: - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch - bpo-31046_ensurepip_honours_prefix.patch - python-3.3.0b1-fix_date_time_compiler.patch - skip_random_failing_tests.patch - sphinx-update-removed-function.patch- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution.- (bsc#1180125) We really don't Require python-rpm-macros package. Unnecessary dependency.- Make python39-doc building again - Add no-skipif-doctests.patch, because SLE-15 version of Sphinx doesn't know about skipif directive in doctests.- Update sphinx-update-removed-function.patch patch to the latest version in python36.- Last try before this results in an editwar: * remove importlib_resources and importlib-metadata provides/obsoletes * import importlib_resources is not the same as import importlib.resources, same for metadata * The backport packages from PyPI needed for older flavors are specified as such for setuptools or in pyproject.toml. If a package requires them they typically add them with a python version qualifier and the packages have their own version numbers.- Add patch sphinx-update-removed-function.patch to no longer call a now removed function and to make documentation build independent of the Sphinx version (bsc#1179630, gh#python/cpython#13236).- Don't require packages which break build on SLE-15 although we really don't need them (python3-python-docs-theme and python3-sphinxcontrib-qthelp).- Fix build with RPM 4.16: error: bare words are no longer supported, please use "...": x86 == ppc.- Update to the final version 3.9.0: Complete changelog with all (many) changes from previous version is on https://docs.python.org/release/3.9.0/whatsnew/3.9.html Changes from the previous RC versions (not that many) are on https://docs.python.org/release/3.9.0/whatsnew/changelog.html#changelog- Buildrequire timezone only for general flavor. It's used in this flavor for the test suite.- Update to 3.9.0rc1: * Core and Builtins - bpo-38156: Handle interrupts that come after EOF correctly in PyOS_StdioReadline. * Library - bpo-41497: Fix potential UnicodeDecodeError in dis module. - bpo-41490: Update ensurepip to install pip 20.2.1 and setuptools 49.2.1. - bpo-41467: On Windows, fix asyncio recv_into() return value when the socket/pipe is closed (BrokenPipeError): return 0 rather than an empty byte string (b''). - bpo-41425: Make tkinter doc example runnable. - bpo-41384: Raise TclError instead of TypeError when an unknown option is passed to tkinter.OptionMenu. - bpo-38731: Fix NameError in command-line interface of py_compile. - bpo-41317: Use add_done_callback() in asyncio.loop.sock_accept() to unsubscribe reader early on cancellation. - bpo-41364: Reduce import overhead of uuid. - bpo-41341: Recursive evaluation of typing.ForwardRef in get_type_hints. - bpo-41182: selector: use DefaultSelector based upon implementation - bpo-40726: Handle cases where the end_lineno is None on ast.increment_lineno(). * Documentation - bpo-41045: Add documentation for debug feature of f-strings. - bpo-41314: Changed the release when from __future__ import annotations becomes the default from 4.0 to 3.10 (following a change in PEP 563). * Windows - bpo-41492: Fixes the description that appears in UAC prompts. - bpo-40948: Improve post-install message to direct people to the “py” command. - bpo-41412: The installer will now fail to install on Windows 7 and Windows 8. Further, the UCRT dependency is now always downloaded on demand. - bpo-40741: Update Windows release to include SQLite 3.32.3. * IDLE - bpo-41468: Improve IDLE run crash error message (which users should never see). - bpo-41373: Save files loaded with no line ending, as when blank, or different line endings, by setting its line ending to the system default. Fix regression in 3.8.4 and 3.9.0b4.- Synchronize formatting and fixes with python38.- Increase testsuite timeout to account for super long running test_peg_generator- Removed CVE-2019-20907_tarfile-inf-loop.patch: fixed in upstream - Removed recursion.tar: contained in upstream - Update to 3.9.0b5: - bpo-41304: Fixes python3x._pth being ignored on Windows, caused by the fix for bpo-29778 (CVE-2020-15801). - bpo-41162: Audit hooks are now cleared later during finalization to avoid missing events. - bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (CVE-2020-15523). - bpo-39603: Prevent http header injection by rejecting control characters in http.client.putrequest(…). - bpo-41295: Resolve a regression in CPython 3.8.4 where defining “__setattr__” in a multi-inheritance setup and calling up the hierarchy chain could fail if builtins/extension types were involved in the base types. - bpo-41247: Always cache the running loop holder when running asyncio.set_running_loop. - bpo-41252: Fix incorrect refcounting in _ssl.c’s _servername_callback(). - bpo-41215: Use non-NULL default values in the PEG parser keyword list to overcome a bug that was ' preventing Python from being properly compiled when using the XLC compiler. Patch by Pablo Galindo. - bpo-41218: Python 3.8.3 had a regression where compiling with ast.PyCF_ALLOW_TOP_LEVEL_AWAIT would aggressively mark list comprehension with CO_COROUTINE. Now only list comprehension making use of async/await will tagged as so. - bpo-41175: Guard against a NULL pointer dereference within bytearrayobject triggered by the bytearray() + bytearray() operation. - bpo-39960: The “hackcheck” that prevents sneaking around a type’s __setattr__() by calling the superclass method was rewritten to allow C implemented heap types. - bpo-41288: Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now UnpicklingError instead of crashing. - bpo-39017: Avoid infinite loop when reading specially crafted TAR files using the tarfile module (CVE-2019-20907, bsc#1174091). - bpo-41235: Fix the error handling in ssl.SSLContext.load_dh_params(). - bpo-41207: In distutils.spawn, restore expectation that DistutilsExecError is raised when the command is not found. - bpo-39168: Remove the __new__ method of typing.Generic. - bpo-41194: Fix a crash in the _ast module: it can no longer be loaded more than once. It now uses a global state rather than a module state. - bpo-39384: Fixed email.contentmanager to allow set_content() to set a null string. - bpo-41300: Save files with non-ascii chars. Fix regression released in 3.9.0b4 and 3.8.4. - bpo-37765: Add keywords to module name completion list. Rewrite Completions section of IDLE doc. - bpo-40170: Revert PyType_HasFeature() change: it reads again directly the PyTypeObject.tp_flags member when the limited C API is not used, rather than always calling PyType_GetFlags() which hides implementation details.- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091 (CVE-2019-20907, bpo#39017) avoiding possible infinite loop in specifically crafted tarball. Add recursion.tar as a testing tarball for the patch.- Changed bpo-31046_ensurepip_honours_prefix.patch to include fix from py3.8- Spec file fixes - Re-added subprocess-raise-timeout.patch: now compatible - Removed bpo34022-stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch: contained in upstream- Fix minor issues found in the staging.- Do not set ourselves as primary interpreter- Update to 3.9.0b4: - PEP 584, Union Operators in dict - PEP 585, Type Hinting Generics In Standard Collections - PEP 593, Flexible function and variable annotations - PEP 602, Python adopts a stable annual release cadence - PEP 615, Support for the IANA Time Zone Database in the Standard Library - PEP 616, String methods to remove prefixes and suffixes - PEP 617, New PEG parser for CPython - bpo#38379, garbage collection does not block on resurrected objects; - bpo#38692, os.pidfd_open added that allows process management without races and signals; - bpo#39926, Unicode support updated to version 13.0.0; - bpo#1635741, when Python is initialized multiple times in the same process, it does not leak memory anymore; - A number of Python builtins (range, tuple, set, frozenset, list, dict) are now sped up using PEP 590 vectorcall; - A number of Python modules (_abc, audioop, _bz2, _codecs, _contextvars, _crypt, _functools, _json, _locale, operator, resource, time, _weakref) now use multiphase initialization as defined by PEP 489; - A number of standard library modules (audioop, ast, grp, _hashlib, pwd, _posixsubprocess, random, select, struct, termios, zlib) are now using the stable ABI defined by PEP 384. - Remove upstreamed patches: - F00102-lib64.patch - SUSE-FEDORA-multilib.patch - OBS_dev-shm.patch - subprocess-raise-timeout.patch - bpo36302-sort-module-sources.patch - bpo40784-Fix-sqlite3-deterministic-test.patch- Update pre_checkin.sh and regenerate- Convert few dependencies to their pkgconfig counterparts- Remove release requirement on libpython, it is not really needed to be equal as the abi changes with versions- Add provides python3-bla on all the subpkgs in case we are primary provider of the functionality- Remove unversioned files from devel subpkg too - Remove main python3 files from -base based whether we are primary interpreter or not - Fix idle to be co-installable - Add condition to be primary to provide/obsolete python3-* - Fix doc to build in versioned folder so the pythons can be installed next to each other- Revert the full versioning of calls on the macros. These are generic so they should really just call python3 X- For the doc package we can build with generic flavor, we don't need the our-interpreter based one- Add provides for pytohn3X-typing/etc to allow BR on those still to work when needed- Change macros.python3 to use full versioned 3.8 instead of just 3 for python interpreter- Reduce some now unused conditionals- Redux the -base dependencies to match up pre-merge layout- Generate baselibs in pre-checkin too- Generate the importlib-failed using pre_checking again - Add back the information about skipped tests on the pre_checkin output- Use %python_pkg_name instead of hardcoding python3 where applicable - Sort out preamble with spec-cleaner- Calculate required variables instead of relying on their continuous manual update- Fix the -base module build again to generate only the deps we need- Replace OBS_dev-shm.patch with the upstream PR#20944- Use the %{python_pkg_name} on more places to allow easier multiversioning - Switch to _multibuild approach for easier maintenance of this package. All is now in one spec file with 3 conditionals: * bcond_with base * bcond_with doc * bcond_with general- add requires python3-base on libpython subpackage (bsc#1167008)- build against Sphinx 2.x until python is compatible with Sphinx 3.x (see gh#python/cpython#19397, bpo#40204)- Fix build with SQLite 3.32 (bpo#40783) add bpo40784-Fix-sqlite3-deterministic-test.patch- Update to version 3.8.3: - Complete list of changes is available at https://docs.python.org/release/3.8.3/whatsnew/changelog.html#python-3-8-3-final, but most of them are just bugfixes. - Removed patch CVE-2020-8492-urllib-ReDoS.patch: contained in upstream- Add #!BuildIgnore: gdk-pixbuf-loader-rsvg to python3 SPEC- Add patch bsc1167501-invalid-alignment.patch (bsc#1167501, bpo#40052) to fix alignment in abstract.h header file.- Update list of skipped tests for qemu linux-user build, test_setegid (test.test_os.PosixUidGidTests) is confusing it- Update to 3.8.2: - Complete list of changes is available at https://docs.python.org/release/3.8.2/whatsnew/changelog.html#python-3-8-2-final, but most of them are just bugfixes. - Updated patches: - F00102-lib64.patch - OBS_dev-shm.patch - SUSE-FEDORA-multilib.patch - subprocess-raise-timeout.patch- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug "Python urrlib allowed an HTTP server to conduct Regular Expression Denial of Service (ReDoS)" (bsc#1162367)- Add Requires: libpython%{so_version} == %{version}-%{release} to python3-base to keep both packages always synchronized (bsc#1162224).- Do not pull in bluez in base again, explain the cycle, it needs to be solved by bluez maintainer for us by providing just the headers separately- Reame idle icons to idle3 in order to not conflict with python2 variant of the package * renamed the icons * renamed icon load in desktop file- Add importlib_resources provide/obsolete as it is integral part of the lang since 3.7 release- Add -fno-semantic-interposition as it brings speed up: https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup- Update to 3.8.1: - This is mainly bugfix release and no significant changes to API are expected. The full changelog is available on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-1 - Remove bpo-38688_shutil.copytree_prevent-infinite-recursion.patch, which is included in the upstream tarball.- Add bpo-31046_ensurepip_honours_prefix.patch which makes ensurepip to honour the value of $(prefix). Proposed fix for bpo#31046..- Move bluez-devel dependency to base as it is needed for socket.AF_BLUETOOTH and otherwise does not work- Reintroduce QtHelp with the help of the new BR python-sphinxcontrib-qthelp.- Fix SUSE-FEDORA-multilib.patch, the platform agnostic infix for library installation is "lib", not "dir".- Move idle subpackage build from python3-base to python3. appstream-glib required for packaging introduces considerable extra dependencies and a build loop via rust/librsvg. - Correct installation of idle IDE icons: + idle.png is not the target directory + non-GNOME-specific icons belong into icons/hicolor - Add required Name key to idle3 desktop file- Update to the final release 3.8.0. . - New Features: - Assignment expressions - Positional-only parameters - Parallel filesystem cache for compiled bytecode files - Debug build uses the same ABI as release build - f-strings support = for self-documenting expressions and debugging - PEP 578: Python Runtime Audit Hooks - PEP 587: Python Initialization Configuration - Vectorcall: a fast calling protocol for CPython - Pickle protocol 5 with out-of-band data buffers - New modules: - importlib.metadata - Improved modules: - ast asyncio, builtins, collections, curses, ctypes, datetime, functools, gc, gettext, gzip, idelib and IDLE, inspect, io, json.tool, math, mmap, multiprocessing, os, os.path, pathlib, pickle, plistlib, py_compile, shlex, shutil, socket, ssl, statistics, sys, tarfile, threading, tokenize, tkinter, time, typing, unicodedata, unittest, venv, weakref, xml - C API improvements - bdist_winnst command has been deprecated (use bdist_wheel) - https://docs.python.org/3.8/whatsnew/3.8.html remains rest of changes including documentation on how to port your programs to the current version of Python.- Add idle3.appdata.xml and idle3.desktop (originally from Fedora) to make Idle3 full GUI desktop application. (bsc#1153830)- Drop intltool from BuildRequires. Doesn't appear to be used.- Add folder version to allow tarball downloads even for beta/rc releases- Revert patches from Fedora (F00102-lib64.patch and F00251-change-user-install-location.patch) into their original prisitine Fedora versions, SUSE-FEDORA-multilib.patch refreshed accordingly.- Correct quotation of platsubdir in Lib/distutils/command/install.py- Replace python-3.6.0-multilib.patch with two patches from Fedora (F00102-lib64.patch and F00251-change-user-install-location.patch), and our own SUSE-FEDORA-multilib.patch to allow better cooperation with Fedora and better upstreaming. - Add OBS_dev-shm.patch fixing bpo#38377- Pull in just gettext and let solver to sort out between: gettext-runtime-mini and gettext-runtime- Update to 3.8.0rc1. Overall changes from 3.7: - PEP 572, Assignment expressions - PEP 570, Positional-only arguments - PEP 587, Python Initialization Configuration (improved embedding) - PEP 590, Vectorcall: a fast calling protocol for CPython - PEP 578, Runtime audit hooks - PEP 574, Pickle protocol 5 with out-of-band data - Typing-related: PEP 591 (Final qualifier), PEP 586 (Literal types), and PEP 589 (TypedDict) - Parallel filesystem cache for compiled bytecode - Debug builds share ABI as release builds, also the 'm' ABI tag was removed (irrelevant since 3.4), bpo#36707 - f-strings support a handy = specifier for debugging - continue is now legal in finally: blocks - on Windows, the default asyncio event loop is now ProactorEventLoop - on macOS, the spawn start method is now used by default in multiprocessing - multiprocessing can now use shared memory segments to avoid pickling costs between processes - typed_ast is merged back to CPython - LOAD_GLOBAL is now 40% faster - pickle now uses Protocol 4 by default, improving performance - Refreshed patches: - CVE-2019-5010-null-defer-x509-cert-DOS.patch - python-3.3.0b1-fix_date_time_compiler.patch - python-3.6.0-multilib.patch - subprocess-raise-timeout.patch- Add bpo36302-sort-module-sources.patch (boo#1041090)- Try harder obsoleting importlib-metadata- Update to 3.8.0b4: Many bugfixes, full list on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-4- Re-enable test_threading on aarch64- Remove xrpm from subpackage tk description- Update to 3.8.0b3: Many bugfixes, full list on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-3 - Patches reapplied: - python-3.3.0b1-fix_date_time_compiler.patch - python-3.3.0b1-test-posix_fadvise.patch - python-3.6.0-multilib.patch - subprocess-raise-timeout.patch- Add Provides: python3-importlib-metadata- Update to 3.8.0b2: Many bugfixes, full list on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-2 - Patches included in upstream: - bpo-37169_PyObject_IsFreed.patch - Patches reapplied: - 00251-change-user-install-location.patch - distutils-reproducible-compile.patch - python-3.3.0b1-localpath.patch - python-3.6.0-multilib.patch- Update list of skipped tests for qemu linux-user build - Don't do profiling in qemu linux-user build- Update to 3.8.0b1 (changes since 3.7.*): - PEP 572, Assignment expressions - PEP 570, Positional-only arguments - PEP 587, Python Initialization Configuration (improved embedding) - PEP 590, Vectorcall: a fast calling protocol for CPython - PEP 578, Runtime audit hooks - PEP 574, Pickle protocol 5 with out-of-band data - Typing-related: PEP 591 (Final qualifier), PEP 586 (Literal types), and PEP 589 (TypedDict) - Parallel filesystem cache for compiled bytecode - Debug builds share ABI as release builds - f-strings support a handy = specifier for debugging - continue is now legal in finally: blocks - multiprocessing can now use shared memory segments to avoid pickling costs between processes - typed_ast is merged back to CPython - LOAD_GLOBAL is now 40% faster - pickle now uses Protocol 4 by default, improving performance - Remove patches which were included in the upstream: - 00251-change-user-install-location.patch - 00316-mark-bdist_wininst-unsupported.patch - CVE-2019-9947-no-ctrl-char-http.patch - raise_SIGING_not_handled.patch- Set _lto_cflags to nil as the package is using LTO via --enable-lto. That will prevent to propage LTO for Python modules that are built in a separate package.- Update to 3.8.0.a3: - PEP 572: Assignment Expressions. - Other (mostly small) changes are on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-alpha-3- bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch Address the issue by disallowing URL paths with embedded whitespace or control characters through into the underlying http client request. Such potentially malicious header injection URLs now cause a ValueError to be raised.- Fix metadata of patches. - Rename boo1071941-make-install-in-sep-loc.patch to 00251-change-user-install-location.patch which is the original name, so it can be looked up in the Fedora VCS.- Mark distutils bdist_wininst command unsupported with 00316-mark-bdist_wininst-unsupported.patch - Remove Windows bdist_wininst executables from runtime package- Update to 3.7.3, which is the maintenance release without any significant changes in API. - Updated patches: - CVE-2019-5010-null-defer-x509-cert-DOS.patch - distutils-reproducible-compile.patch - python-3.3.0b1-fix_date_time_compiler.patch - python-3.6.0-multilib.patch - raise_SIGING_not_handled.patch- Remove building of Qt Develop help files.- Return distutils-reproducible-compile.patch which is still missing (still unfinished bpo#29708).- Update to 3.8.0a2: * List of all (mostly small) changes are on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-alpha-2- Build nis module again.- Update to 3.8.0a1: * The most visible change so far is probably the implementation of PEP 572: Assignment Expressions. For a detailed list of changes, see: https://docs.python.org/3.8/whatsnew/changelog.html * Recover building of nis module properly in python3 package - Update patches: * CVE-2019-5010-null-defer-x509-cert-DOS.patch * python-3.3.0b1-fix_date_time_compiler.patch * python-3.3.0b1-test-posix_fadvise.patch * python-3.6.0-multilib.patch * raise_SIGING_not_handled.patch- Put LICENSE file where it belongs (bsc#1121852)- bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch fixing bpo-35746. An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.- Do not require full gettext in order to avoid pulling in the glib2 as a dependency- Update to 3.7.2: * bugfix release: https://docs.python.org/3.7/whatsnew/changelog.html#changelog- Stop applying python-3.6.0-multilib-new.patch (which is still WIP), and apply the old proven python-3.6.0-multilib.patch instead.- Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros.- Upgrade to 3.7.2rc1: * bugfix release, for the full list of all changes see https://docs.python.org/3.7/whatsnew/changelog.html#changelog - Make run of the test suite more verbose- Write summaries without em dashes.- Remove python-3.3.0b1-curses-panel.patch it is unnecessary anymore. - Add boo1071941-make-install-in-sep-loc.patch to make pip and distutils in user environment install into separate location (boo#1071941) Set values of prefix and exec_prefix in distutils install command to /usr/local if executable is /usr/bin/python* and RPM build is not detected to make pip and distutils install into separate location - Remove finally python-3.3.3-skip-distutils-test_sysconfig_module.patch - Remove distutils-reproducible-compile.patch which doesn't make really much difference in reproducibility (see gh#python/cpython#8057 and discussion there).- Rename Stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch to bpo34022-stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch- Add dependency on bluez-devel to build support for Bluetooth (boo#1109998)- Add devhelp subpackage and split qthelp into another subpackage.- Remove python-3.0b1-record-rpm.patch and Python-3.0b1-record-rpm.patch, as they are not needed anymore- Switch off test_threading for optimization builds.- Update to python-3.7.1. This is just a brief overview, complete changelog available at https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-1-final: Library bpo-34970: Protect tasks weak set manipulation in asyncio.all_tasks() - Patches already accepted upstream are removed: * 00307-allow-to-call-Py_Main-after-Py_Initialize.patch * 00308-tls-1.3.patch - New patches added: * Stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch * raise_SIGING_not_handled.patch - All other patches refreshed via quilt.- Add raise_SIGING_not_handled.patch to fix bsc#1094814- Add patch to fix importlib return types: * python3-imp-returntype.patch- bpo-34022 still not completely fixed, so we have to keep excluding test_cmd_line_script, test_multiprocessing_main_handling, and test_runpy from the test suite.- Update to python 3.7.1~rc2: Core and Builtins bpo-34879: Fix a possible null pointer dereference in bytesobject.c. Patch by Zackery Spytz. bpo-34854: Fixed a crash in compiling string annotations containing a lambda with a keyword-only argument that doesn’t have a default value. bpo-34320: Fix dict(od) didn’t copy iteration order of OrderedDict. Library bpo-34769: Fix for async generators not finalizing when event loop is in debug mode and garbage collector runs in another thread. bpo-34922: Fixed integer overflow in the digest() and hexdigest() methods for the SHAKE algorithm in the hashlib module. bpo-34900: Fixed unittest.TestCase.debug() when used to call test methods with subtests. Patch by Bruno Oliveira. bpo-34871: Fix inspect module polluted sys.modules when parsing __text_signature__ of callable. bpo-34872: Fix self-cancellation in C implementation of asyncio.Task bpo-34819: Use a monotonic clock to compute timeouts in Executor.map() and as_completed(), in order to prevent timeouts from deviating when the system clock is adjusted. bpo-34334: In QueueHandler, clear exc_text from LogRecord to prevent traceback from being written twice. bpo-6721: Acquire the logging module’s commonly used internal locks while fork()ing to avoid deadlocks in the child process. bpo-34172: Fix a reference issue inside multiprocessing.Pool that caused the pool to remain alive if it was deleted without being closed or terminated explicitly. Documentation bpo-32174: chm document displays non-ASCII charaters properly on some MBCS Windows systems. Tests bpo-32962: Fixed test_gdb when Python is compiled with flags - mcet -fcf-protection -O0. C API bpo-34910: Ensure that PyObject_Print() always returns -1 on error. Patch by Zackery Spytz.- Add Stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch to fix problems with SOURCE_DATE_EPOCH variable (bpo-34022)- Add patch to fix build with tls1.3 supported openssl * 00308-tls-1.3.patch - Add patch to fix Py_Main calls after Py_initialize * 00307-allow-to-call-Py_Main-after-Py_Initialize.patch- Add -fwrapv to OPTS, which is default for python3 anyway See for example https://github.com/zopefoundation/persistent/issues/86 for bugs which are caused by avoiding it.- Fix ownership of _contextvars, _queue, and _xxtestfuzz- Switch off LTO for distros with older GCC - Fix %files- Add dependency over libuuid-devel- update to python 3.7.0 Complete overview of changes is available on https://docs.python.org/3/whatsnew/3.7.html, these are just highlights: * PEP 563, postponed evaluation of type annotations. * async and await are now reserved keywords. * New library modules: contextvars: PEP 567 – Context Variables dataclasses: PEP 557 – Data Classes importlib.resources * New built-in features: PEP 553, the new breakpoint() function. * Python data model improvements: PEP 562, customization of access to module attributes. PEP 560, core support for typing module and generic types. the insertion-order preservation nature of dict objects has been declared to be an official part of the Python language spec. * Significant improvements in the standard library: The asyncio module has received new features, significant usability and performance improvements. The time module gained support for functions with nanosecond resolution. * CPython implementation improvements: Avoiding the use of ASCII as a default text encoding: PEP 538, legacy C locale coercion PEP 540, forced UTF-8 runtime mode PEP 552, deterministic .pycs the new development runtime mode PEP 565, improved DeprecationWarning handling * C API improvements: PEP 539, new C API for thread-local storage * Documentation improvements: PEP 545, Python documentation translations New documentation translations: Japanese, French, and Korean. - drop python3-sorted_tar.patch - drop 0001-allow-for-reproducible-builds-of-python-packages.patch - refresh python-3.6.0-multilib-new.patch - refresh subprocess-raise-timeout.patch * new C API for thread-local storage * Deterministic pyc files * Built-in breakpoint() * Data Classes * Core support for typing module and generic types * Customization of access to module attributes * Postponed evaluation of annotations * Time functions with nanosecond resolution * Improved DeprecationWarning handling * Context Variables * Avoiding the use of ASCII as a default text encoding (PEP 538, legacy C locale coercion and PEP 540, forced UTF-8 runtime mode) * The insertion-order preservation nature of dict objects is now an official part of the Python language spec. * Notable performance improvements in many areas.- disable lto with gcc versions below 7 (results in link failures)- Use faster find subcommand execution strategies.- Do not mention the testsuite disabling in opts as it was moved to main pkg so base is test-free- As we run in main python package do not generate the pre_checkin from both now- Move the tests from base to generic package wrt bsc#1088573 * We still fail the whole distro if python3 is not build * The other archs than x86_64 took couple of hours to unblock build of other software, this way we work around the issue - Some tests are still run in -base for the LTO tweaking, but at least it is not run twice- update to 3.6.5 * bugfix release * see Misc/NEWS for details - drop ctypes-pass-by-value.patch - drop fix-localeconv-encoding-for-LC_NUMERIC.patch - refresh python-3.6.0-multilib-new.patch- Created %so_major and %so_minor macros - Put Tools/gdb/libpython.py script into proper place and ship it with devel subpackage.- ctypes-pass-by-value.patch: Fix pass by value for structs on aarch64- Add python3-sorted_tar.patch (boo#1081750)- Drop python3-tk and python3-idle recommends to reduce python3 always pulling X stack bsc#1081751- Add patch to fix glibc 2.27 fail bsc#1079761: * fix-localeconv-encoding-for-LC_NUMERIC.patch- Update skip_random_failing_tests.patch (for PowerPC) to avoid test_call_later failure- move XML modules and python3-xml provide to python3-base (fixes bsc#1077230) - move ensurepip to base- Add skip_random_failing_tests.patch only for PowerPC- update to 3.6.4 * bugfix release, over a hundred bugs fixed * see Misc/NEWS for details - drop upstreamed python3-ncurses-6.0-accessors.patch - drop PYTHONSTARTUP hooks that cause spurious startup errors * fixes bsc#1070738 * the relevant feature (REPL history) is now built into Python itself- Install 2to3-%{python_version} executable (override defattr of the -tools package). 2to3 (unversioned) is a symlink and does not carry permissions (bsc#1070853).- move 2to3 to python3-tools package- update to 3.6.3 * bugfix release, over a hundred bugs fixed * see Misc/NEWS for details - drop upstreamed 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch- drop python-2.7-libffi-aarch64.patch: this patches the intree copy of libffi which is unused/deleted in the line afterwards - fix build against system libffi: include flags weren't set so it actually used the in-tree libffi headers.- Fix test broken with OpenSSL 1.1 (bsc#1042670) * add 0001-3.6-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3093.patch- Update RPM group for python documentation.- fix missing %{?armsuffix}- distutils-reproducible-compile.patch: ensure distutils order files before compiling, which works around bsc#1049186- Add libnsl-devel build requires for glibc obsoleting libnsl- update to 3.6.2 * bugfix release, over a hundred bugs fixed * see Misc/NEWS for details - drop upstreamed test-socket-aead-kernel49.patch - add Provides: python3-typing (fixes bsc#1050653) - drop duplicate Provides: python3- drop db-devel from requirements- Add missing link to python library in config dir (bsc#1040164)- update to 3.6.1 * bugfix release, over a hundred bugs fixed * never add import location's parent directory to sys.path * switch to git for version control, build changes related to that * fix "failed to get random numbers" on old kernels (bsc#1029902) * several crashes and memory leaks corrected * f-string are no longer accepted as docstrings- prevent regenerating AST at build-time more robustly - add "--without profileopt" and "--without testsuite" options to python3-base to allow short circuiting when working on the package- Add 0001-allow-for-reproducible-builds-of-python-packages.patch upstream https://github.com/python/cpython/pull/296- reenable test_socket with AEAD patch (test-socket-aead-kernel49.patch) - reintroduce %py3_soflags macro (and better named %cpython3_soabi equivalent)- update to 3.6.0 * PEP 498 Formated string literals * PEP 515 Underscores in numeric literals * PEP 526 Syntax for variable annotations * PEP 525 Asynchronous generators * PEP 530 Asynchronous comprehensions * PEP 506 New "secrets" module for safe key generation * less memory consumed by dicts * dtrace and systemtap support * improved asyncio module * better defaults for ssl * new hashing algorithms in hashlib * bytecode format changed to allow more optimizations * "async" and "await" are on track to be reserved words * StopIteration from generators is deprecated * support for openssl < 1.0.2 is deprecated * os.urandom now blocks when getrandom() blocks * huge number of new features, bugfixes and optimizations * see https://docs.python.org/3.6/whatsnew/3.6.html for details - rework multilib patch: drop Python-3.5.0-multilib.patch, implement upstreamable python-3.6.0-multilib-new.patch - refresh python-3.3.0b1-localpath.patch, subprocess-raise-timeout.patch - drop upstreamed Python-3.5.1-fix_lru_cache_copying.patch - finally drop python-2.6b1-canonicalize2.patch that was not applied in source and only kept around in case we needed it in the future. (which we don't, as it seems) - update import_failed map and baselibs - build ctypes against system libffi (buildrequire libffi-devel in python3-base) - add new key to keyring (signed by keys already in keyring) - introduced common configure section between python3 and python3-base - moved pyconfig.h and Makefile to devel subpackage as distutils no longer need it at runtime - added python-rpm-macros dependency, regenerated macros file, drop macros.python3.py because it is not used now - improve summaries and descriptions (fixes bsc#917607) - enabled Link-Time Optimization, see what happens - including skipped_tests.py in pre_checkin.sh run - run specs through spec-cleaner, rearrange sections- move _hashlib and _ssl modules and tests to python3-base - recommend python3- Skip test_asyncio under qemu_user_space_build- Add Python-3.5.1-fix_lru_cache_copying.patch Fix copying the lru_cache() wrapper object. Fixes deep-copying lru_cache regression, which worked on previous versions of python but fails on python 3.5. This fixes a bunch of packages in devel:languages:python3. See: https://bugs.python.org/issue25447- Build the docs in .qch format as well- update to 3.5.1 * bugfix-only release, dozens of bugs fixed - Drop upstreamed Python-3.5.0-_Py_atomic_xxx-symbols.patch - "Python3" to "Python 3" in summary * This seems cleaner and fixes and rpmlint warning- Add Python-3.5.0-_Py_atomic_xxx-symbols.patch This fixes a build error for many packages that use the Python, C-API. This patch is already accepted upstream and is slated to appear in python 3.5.1.- update to 3.5.0 * coroutines with async/await syntax * matrix multiplication operator `@` * unpacking generalizations * new modules `typing` and `zipapp` * type annotations * .pyo files replaced by custom suffixes for optimization levels in __pycache__ * support for memory BIO in ssl module * performance improvements in several modules * and many more - removals and behavior changes * deprecated `__version__` is removed * support for .pyo files was removed * system calls are auto-retried on EINTR * bare generator expressions in function calls now cause SyntaxError (change "f(x for x in i)" to "f((x for x in i))" to fix) * removed undocumented `format` member of private `PyMemoryViewObject` struct * renamed `PyMemAllocator` to `PyMemAllocatorEx` - redefine %dynlib macro to reflect that modules now have arch+os as part of name - module `time` is now built-in - dropped upstreamed patches: python-3.4.1-fix-faulthandler.patch python-3.4.3-test-conditional-ssl.patch python-fix-short-dh.patch (also dropped dh2048.pem required for this patch) - updated patch Python-3.3.0b2-multilib.patch to Python-3.5.0-multilib.patch - python-ncurses-6.0-accessors.patch taken from python 2 to fix build failure with new gcc + ncurses- Add python3-ncurses-6.0-accessors.patch: Fix build with NCurses 6.0 and OPAQUE_WINDOW set to 1.- improve import_failed hook to do the right thing when invoking missing modules with "python3 -m modulename" (boo#942751)- Build with --enable-loadable-sqlite-extensions to make it works as geospatial database.- Fix source list for previous change (add dh2048.pem).- dh2048.pem: added generated 2048 dh parameter set to fix ssl test (bsc#935856) - python-fix-short-dh.patch: replace the 512 bits dh parameter set by 2048 bits to fix build with new openssl 1.0.2c (bsc#935856)- ctypes-libffi-aarch64.patch: remove upstreamed patch - python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for aarch64- drop the PDF subpackage (removes the massive texlive dependency, and most likely nobody is using the PDFs anyway)- python-3.4.3-test-conditional-ssl.patch - restore tests failing because test_urllib was unconditionally importing ssl (without really needing it) - restore functionality of multilib patch - drop libffi-ppc64le.diff because upstream completely changed everything yet again (sorry ppc64 folks :| )- Update to version 3.4.3 - Drop upstreamed CVE-2014-4650-CGIHTTPServer-traversal.patch (bpo#21766)- Add python-3.4.1-fix-faulthandler.patch, upstream patch for bogus faulthandler which fails with GCC 5.- asyncio has been merged in python3 main package; provide and obsolete it - Remove obsolete AUTHORS section - Remove redundant %clean section- Only pkgconfig(x11) is required for build, not the whole set of packages provided by xorg-x11-devel metapackage.- add %python3_version rpm macro for Fedora compatibility - add missing argument in import_failed, rename Novell Bugzilla to SUSE Bugzilla/sbin/ldconfig/sbin/ldconfigh02-armsrv3 17328649843.9.20-150300.4.58.13.9.20-150300.4.58.1libpython3.9.so.1.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36554/SUSE_SLE-15-SP3_Update/add00b7e7ddb5b6c45fa0e7caca4b2a2-python39.SUSE_SLE-15-SP3_Update:basedrpmxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=02801f1f1f4c4d2bb6a2dddf17bed610a1df1fb0, strippedPRRR RR RRRRR RRR RR RRR0Hy*nLutf-8d1571355413f027216e8ec7bc195871a9d97ca5f6e37230ac4aacb9ac9dd443c?7zXZ !t/ g]"k% 5B1w#o)A;"oP(t'OA`(>GJ{?rTŴ!7O/3ȷQ7R6ᵆ7 ;%5-7;G/rknQ- D]{3%g-p(}E./:.$vZK#)U2ۃy&Y'f Ǜ>K AXg|UwlC4YK>8Y)Rը_Qq'NVL=8|.qc*A/16z!lP0%TD 4?hWvh_qjgca9IJh3 9WOW@ ,!d ?l%n1(1T#pT\wOZ3!үM־Pg;sHQ:l!V,/WK1y8 w|7hn{Jҋ{JUrl76kCiSzv]P/6X3e,@AnbɍR6jOQG_8N­Xg'fx-$ (/Ժ)wIxV:8jK*&oaf饄{IJL6wB7yccpsѐ`TQ꿝H@(u]t[&eˬP'%e0>ɺ?;OgקRm;0/Yk\G<<]= ?FhϏٟ@xHO/ U_3r xZ5]Ιavh7~+m`Mp@/~, lW314 wRCG 3+97U޼hwʋn BшFH*1T\hF p3 ~"!3pDb} ǐ2/gTNjL{^m Y._ζ,u+dkkJBho(\N{]aFyeJRbB8WڇO|j"Ƃn7ICЮϟ oW˒g2c@ ;{_a=^j>2*ϲ_kb${ c[nNx H':fZSsbqMm20߻џl3]\W֋l;ux5ݺG1$]!5)EXHnRԉ̈́9(,z~|kgⷢ7B Û@{GH.TN1ϣ ?!alBv \N4nh5*(6H ?QMMkf{)kz^ v,@H3vlsyhfl*  8r}`rݲvאzF(p ]L9Az0nFC<*Pli3Ka@j}cx|CTՐm bP1y+wC&bX <3AK IYQ1@BG5I֚sd WC 7lZw]G 5izce<2\.b϶*$?F˒=qtʄVv)M~$t=?n%H A4.],5c, L9A#7$]JLM4ۊ\Up|8?v>sp敧MlXފh~t܍V (kJFM%)JX= /9«I޶x>2JZm1ea@ Iz'/߫t[϶K?Xf 86rޱ6#xyER64睬WSW)z䦈`Q_|#>r66 ~R7N|w~!:B5VtLMBie2Nȉdg$DGZd?hW {75NQZLJ|M&9p^DSwB>YIX"KnF^$i4_ԣ{]C3(Yjͣi671KפNplhb8YH]&:Z4s9;O!qZ_{/4 *:ݷ&AZgRݪs7U&҃u/S"6J={.H3̩ݢiroux @P<h4XoN(kdK愒w%$xS`O NG|Qr$%Nʂp=Ц uL &BV|䖛+ *I}ԏmsk KG^GhuhXK6 Gtf旉@4c+$Bj_EpT6hb|GSg yvP(Ju,I:Y"1'nМO%RL'qxC4*~0<\VTAStDL~{ml.wRoJxz~.j+pYX=+KE@F:&2I,hgP/SE kckuH晢^5\a̶1!.x Zm E@ Uw?qK|A|WC o5O/Vj]eT4տ@9+*zȿJL1Ҽ൬e6&k yyMC,fy|5Hb0}x< zy|ɹ51ڷя|NWBITm/eݠ4-Ar>cs"-Jc@D&2_8xSj:ʺB#Yhm_u5ܳ86{Oov@f4uOHG2A茏!r×~FӼOrdpgJ69/&cMIa': GC"`xSPT ҽJq͝PQ<56F싞~*)6UǠa@/Qqgae] NdҥDLj'2Q[^]c<7Yf~εm!51$Ř#7Hk)АjFY 泌X_OsOO!Xv!,!Ujr~][\ ʼy^đ[ }g Nj Qcr. 9q۶ytjz4i^HcٍJ%a/AK ٽuGYuiK"&j*lm'y!d4ߨs?5ww7[(qr7h<ޯ|Yjdw$!5̰,cP*e{\+; 80tBFHȪ_W*:Dz> ܇ {  6;{![2P@)[!0$P^ՒmU/l .Y m{2(3cĈziR+[z?he!w^7$){SdAҏ I%Ig޼_dJ=OC XR3Kܥ!Te + Yd; &-`& r`JM2=_]f|uJƗV;zTobU6-=x_+qeb'|EgiqhXeK=D `@~6T#)U/H%9&v$% V<9Ers)Bb[Ɇh̰;g񀿜]܂*w &r$@0*gU߇:NtF$!d h'a w$`׋jwIy>$dz H { ZD"⮦ctK?(%GA(ܔ>!tHz=:K]붗XRtp2s$LhX=WytG-V՘ Up1k6.pXoJ?Q.ö+O|l4~0Gz[ {䀒D]Zra4eCEgkEv pRU팝BZmzfc@$;ց.q$Yn.pÙڢhzww tdiNhI2 M|,`vN#Qp#2xf}BӃ)NN7MvyFQm};9^:?iHmqjV >J2 @ӖW4׻uCHKكѳji_gߩDxa;zH)wKǩ-I* K K$wDZ!Խ}@aefL@^"SPևN8oV:nDx0C_s "hQ^ b9RpvkƮ0ߪ8F= 4}jkOO&HW>3_@ځ5P)lT % E$ܥ1x! \xf)vu9~iN_D%()b ) tFCήF#1"==7_@~IenN=w$E02ˠDni[+4`1&ґkLsgkKL5A}o% -qrzk"E.0ELInaS+j( }(4G ~D8}?BWE=L&-`T"]ݩD,HYo9-3\/f{ĈȗsJjckʳVbpR.YEYw]ǘ(IKe ;94oý`>d;C8wbߔ . &pߡNwi?c-yYeV;%̝̿<:SfY`ip|A1}WXw֩\l0Qi٭BPЅʤu-Z."5ns9[H"tK#qHzCFOmX& i/0䡁tnφsgviՕDNDN7Z|d>&ۣԘzo댄IWBI57&GM}aړkt*;rh@yi?%v7RcG$16tYj O[P$%V#LI J^*_˒FW"]WSBIvU\cnSVRwUtwuT{o`ew D:Eh&ݲqD|Yrk 32p9 ` a%뷡cE͍ϲnc *>CCf26M3!nʣ=7R+tԐeYO)ѿ-r5>]HmVAX:ϰG[4͓=Ag{FoR <[!.ț<+0}EDYSsw)iR؀5kM-:Gke,+hYp *e>Ir$ sI~La5%L„nA{M?2$>jr ccG5xIfPoxJ}(eLC݁K>?#oP$fQTB#[)ۢp"q䠷0zx*ՃZJc۸^\Um|{ B4mr](yMlpDQU!0"Q:u_P SxcW`<4qrUibsis&jxuw8VDcO+ ;XM5NTScӪfP>0{L`kbNN:M~ 3RrPouޢTFT6y*5)۶܉?ހP2Bz1%:?,A6g*3BwgD2b3] MŎqgM}R̬_?Jux_4]7t  ԎWDU¾Rk(O=[g (i$UXm0xёA UbLyPY^Qg!9}yYys&Yi@fEhzݚ~pF-Sߨ;)h`OG>x9`;Z>P6TH\dhMyѦ-gŇBAU5R5_rGR[YgY0s#-=Ɖ{0rITNoi" jZg^#[k T~?O:Րl7&L%'u̎fµt0Y1O'72G6G$d&[ ?Gg4ݮ˅'"/)~Wsiotm} fGI7;61J?5Sӱ1n=h<"ַolśkO\(H wYxh*>(ysv膺pnU$nov3g>R /ew>| )ݶGƵ=Ndrnf<ݺ`<=/A;7(94@/1IVkaI15t IԶs,AkNwi4se)rOBݹl\b >bɓn0!,@~ᖯU ^ 'AZc.K<fg9kF_ADzkyY:qYfn+@/gQuu<" w*no> ޮ_ =XJ@c3e;Cr1;nWz섟;DL! -XdL<с H(/? F2C$7)uxDŽb$8Z1\'/XHQď;WvT’1V7`uBlʹшKΞ0[&^Fޒ[7?TM7ܶvRgf=]Jy,7z1-ibS :oK3_'?6CםN/l~L"I4Qxs=9]'Hp|M+Vc9kGZzJ"T.8Ob?Ql7 o^Nلv!s{%󣟝5W@@ qnSVQ1_)2'#d~ڷJP\Ml%Ο< r(P<#uq ]Piq&0eBݴע&} cjs~5Md?#sGQ\yɉUvI0V֥GM|4MjK6n9$/_-^BU3 rQC6`8 UFěqTΊ5\L9,8/[ٴN2Ҍ|'ciU!-`wMc1E#@de rK}RjsP\Rs,Ù̬;RfBw]M~`0H~.Á kcGXɣeij Ý(e2nt˹~GϲdhpP槚yU>CMDTD5X K}Ewa8L?HBͤɁLqtαmC+F%}R.k&^ v~/ĕֶ;0F(.xؽTq 5nj*ڵv& MO_mF F#+k巋AE}2C%m?W4Fʰ V (DZqHa\pZﱤFi\ 8c*Ս%4|H䎤E>=-Cj1o_9&|3?^FO8%U4D{@Hv'Df+FE嘊r5v4\ fD_SaHOwK6Э14RӪc'{~*Ŋ!!UsNvb24tDvwFT͉_h][h6slEc_6'H~0B" c ׏tj3!7[}+`8.;ݑH4 }Zp qV. mlҐ4myb:,RDQ[lERz}Zej^Y}$867r3 ]wx<6Z /zx֎T"{n^ب!{$&&%Jƙ YbFyN0K Y_JX񾐎/E%]rjr~?Lu_cV*r8Geu cZ$pn: g2iac %=((3I6`m '`T{08o&s`7睨GQnMôcj=ꞏK(- \|4#./7Nmݛy \*-?[%q+7F| 8sZMz|hycDӊ ZGd@&?ɓģwTbeh@H_Mn:!MؤB'$6Z,]wWؘ`Y;$=maK`  ƗFդO%čۨ`>,5#zW. c4-CGp}ChfgƏGo&VP_{ 'YJ,˻kxHݮZj^+/jהr3x|s;)wjDJ1 i{CKNv̤k,VSeg*I2uXZ4+U5vt I5iR?5se ՕΚ[SzAWԩs8)ʢB!oVyH+Vc0ÅEWGNv9m.Hp~.E4~H&~i ŽU %٠lUҨ7ty}f:n 8γ= Ğ+$+#>6%_ퟌVKQcys_1ѹIRƈ vy]Nu.ߩ-t"+pף 8 =?ꏚtsz=:;',2Su XQ9j7Y$=l ^x"HNixv<5MiXp"Gz' hINʮ=2;"Eofvd$L5^nkx6"N VYWa9rA0S\(3;#QŎQ!9UGvHj`NȷJ9:*NEzE3o*:(.\UgyxߙlHvD8lvܙ2XoFo@Sa]zFk5=~ 3@g`+xJ)hVce3'?M` Sdhb"_tyneJ$*eq!DbT'$'k/} u*S4Š-rIb:ΈEሄ0)!mFdWCe}(J!9M=Ny}Un:k6e ʋVH%0&#CP8bܹ90,Pbzb'g"̉~mƮRi@- jZWJ‘A/k{$;LA k#Mݪ |V]b)l%\#ͰahuJ\ϸK.ܻ,4 mJ1D޿ &ze7DL-GiT/'θ(mNo}$#bYY۲5>Nq[-9IBNO)n .p^"PZXC8k&3}\[\ ˏWa3"5C3XX6Ě/"%.BǴy%lFDPG;٭_/)uy#Õ-%*$$ajq$藕q7J_9N[*B3{X xd'q>+?Oe/,fbҸ_`N;{B϶"lI!nfG}b.QA6yH/cG&W<|nQq~{爘>㐎RP sD6wI J`BnyT t5X+ vUTLЄ."O)Jqhe5q#N;+Ǵ97u)Cp!]!{*Ąo%H᪂v$/E{9q>gqN!t7+|j5i#]\ Eqq[؝68$|ڄviA0E!s FN.>Q>v ct s]F6I%[. \giTFO;+IHh]I4w^<E[W{JM4lE\! aЋ,+uܜQ_ сӰM\p'HCپ SZk ^N|X+hĪ<"t8T5PZFoVMCEk,04wsaۂ4+鶑2+@aO!5KN,7HE{{檒<'bǏ8/`E%^{ `nX klq%.%6TN`%Q!|O&9;7 xV8\tyP9O$+49*ڂ^O|m#.DWa/*B :rϕA:T[=qpw guSϱeW T{" ImTB@Ik˘ɍB\Na`ԢbOx9!e,tF}I 9$m4XMΨ%zw gh߉ `<|YO3*ٱ6M@ĕfx>j}U[\*ll]ÇighlOgٰf#;HKTօhug9KN|;5bs]\+^gJxi'CDB\[&4о"w@YZQpMZ9b|:Y\uBc'@*":AWӢEwɓMhg-&L6).e;9=bʮ2u&:8q#ux`ubW_tYY{3TQeq3Box("'gx#l`}bo.Ftuhҳ0=ԺXj*5;:K6a͛ti7(O|gKEQ.nwvDܿo9%Wl}z:/<,IHZBCoHwAw(跞+ 13⵪eLh2Y_LNΟÏ\#iDh^0 I_CO$Ȯ8Q⻽iU| WUC7`&Nyv+ak.1gb,w ѳCB"ӭvefdۗʉ9:Y7s>&ɱZf}U,'Xkpt+m\R_:68]"_lkWm%# h3&uB{U 3lP \93K&Ҥz%rYhnU -] ;x.˰R{P( ਿИ.|a'oJkUx94V_' Tm4闙~U'yGǽݒBo*E c~~۞n'PCQ{@j ,Mff !ؚW?qǤ7b,UqPSكy]Σ6@~~z(R԰لb(* 'ϨޔRbSgjo}ᗱRdl=3̉˰.Y5D{0} 0 Ï8ڍf;'OEj W,8Y9KvGtl20{pS72THG/Cl{~*#NL|2%6 ^ 1u1 AQ(˽~]d$WWxht$eZYoeڥ`"m2 @p2xٖ|KBX'EDBw_ m\Qq1fhd|Ff.1J#|vنM҅Q0 rL 9%|ِ| CV$%*wã$hsھZ#9TBm[`pfIE I|aXg%;&d;gKbmY ˷^\,) M:\@> Tk33Q a|_=V!mZS=?2>{e"U~(8i g%1pbgz#͞ޤ 5<`_6/v!q&MDh"WUe)뚕[m|US' 1(yt")p_#靰ZDU`3!w\I<@oet{bhrX,G{}@O.>sbG ewvU/YNM[{巆z7fϫ3#= 5)徺/b\̬#gx92rN]hKcuﱍg[zE<1 o`8 YDi{7ucYi<,yp*'|JqI+_`le66| 2Duijnmy ƟD7>M!PݙA['348[W%'&KnxKBHֻPg褓Tw*=#4M%-@p@bIŻgڑ%ULjK§er61a{OnW}; ʦ'欦jȚe-?M!c<~um'R*)?c7_-s<^uHTcX&č-|G낤L|\c Hv#sL!̮MB'.Ld0EhQLdeb|_ 码ָ d%fFbk/B$ `v7T )?ZW԰KEatֶ1,UxZ"v1X趭U)|kі.٫eXzO U}ן1JThAE>]>qНVh EBQ~xdGËҖQ^ <;+x~WyT/m>2But*`V: e2czqF٤Mr/x'?;qll0 C73%AFupHad8Is CLK)q6&LGDD$g[(LePY=$cփyh en6@:71T!P0'aofw43wqg; {y'B..At)mqG`: E`]ܽ% ]m[3 r7*˲2Gvg};@H0M/bYc!V;y$;'tlH#Z5arQUÍ=APkDLUfNWJt56Jo$RO{B, r{Y åLl>;07+ [Esɫ`&H~p˹B2azk(D8quM6`i<3er ݨNɻT. S|B˥WyO֒NlS \u{1(xB3 dl-/Yqѝ^Aք<'h^Agҋ\hLD d綾G'!Yλ@|c77e:^LR,'y*ßC@QLaZ[g( U\+սIK haƸL5v_J'3P \a֤&Eqc_Eu,[(S q36#YO'z7a+qL)p\d?Hp |>8i:DPN-;q9/ z5C>&۩濣|"sڏW4~2FIw$oKӴfäk%z#rq|Bm},W];-[r cc6 1e<;>%Rhރӯna[L\IuD  #~ ݄HB?ƭa8ra5K'bp" ς'MUl.$ qK&y%pe?|O{E(,$xS;#ظyFp@(bNɻ#xsFp.m#ߑyI `,w|P-Л"mgHyjZES\:I mĈnOƉ(I—%-%4W~S1("pMs#mg |5pZolI̹nbi]ńH- (M`F0b8ׯׄh TDUs~Ȇa-X.!{󚹫6%$S*eMV4q]/ÖGޝ[Bo͡n(uR\"-)NO25AG}=f&7}ј?`]& -B6`Wҩ6uE$`I%4!:$^k|xsfG,>1Hbuvy3uwꎵXXyK-O# N1 4>J[Nxtpߐk4FYF*H\K|zp7 K1FU›c /+ٹ+<<0n/ K(p 9Hǘ LƬI "mcL牷t9n/.$JuYS;.7mpp|Gޕɵ0n)@*;<9rou>s@F‚pmEvEzU942Jj$w1#O(Zh'pBA\!\Hw'BhF_ 2 U7{Dz@d99dj(>X{PFf?H\Zu+Yw (F!voMO š%@>`U1Eüg6dt>g%WpJ fAݦeU+'!t?vRNzEGUV=6̀N͞k2iWNkE$rC4 I CABoJ(Jͫ{Wq GRbRMŲ*V-,mkSgNBiߛHDD#e̚OAQ)Eй(q#Z}de pJ5FY Vg,J,AqW%DŪNiGimЂR.J(*n=Pån2nd dD6r~yxRBnϭPU;? *F|)@ qJgЁ;܁3Қaތ4;SC@G*t:9^uPSmIt+EqSA_Mpt >ֶؒĤ>}dsqL1LuxC^TΧ0v?ErՕȝ_ϫվ(Ua4>L\yP-}-yV=)ܑiPlruoi$\xh|6󒝂|)z h*8z }&_"5M0~ ]z9SI^#]&L.XqSXbV-´8l`\4[ k֘CCkXXV2~J !l}Dx*hC Z ̉M6ȶJ"56% e}GѦչRCD҈T+uzRʦ=p*'p*px:(C ZK*)ɇ N|5P탷u\rT,1 ®Fd+5G)Tx"zu/@bd|pbD^<+@f(Rϥ*ﯙ(NGY 8;s]u2XKn#XT ix=uVuimhRXu6 ZvE)$\-͙xS6b[E1>JӪfLɊ22Z87"YsJ8[@> ,lV4o6^$1xOr i'g ~a3OߑY|RۛzoĕbL:ޅڠ*Ga[4t"% TS|UuG5&f]YG޾u+Wܢ yl#肧joU-I%m l51IC9hf'ݓptZbk*\qC󋠱+vJWtvdeq.#kJE(4N12Yf!}Cptj))|mu!LZZ4 Q@5@2ahqkno.ـ׀}4JN ջîw<:Od@5lܛ+,VHc!g2֊@GQ.EpCȹv!ԿΆA65YaӠb&ja0}egj%m6W <c;G$[p"^B'ZN*~P\18κGDlHbN1݁i=[n [9ĺ A^[x'Zu1,2w"ͣv^/5UsfGբsR*pyl#v3l@eE׼5[$"i5LD3Ԛ֢`=񎔨+ZV]YտRܦ37e j+-9ʃ0%MDyFA!;.΍iP 2"O}GbT"K}`eX;&܇[wuGwԻ*ʯggB|ՎrG u`H%OGk? yûۚQ)NRa dڭM D/P&B"k,7G6V#S4ֈk+7VM kn(XcA*T~Ri5<`6qOQ zhm) eq4Ưa;sy]ǀ6ٍ@sȅM0K﯌ﴴ:0 N#e#0%$o,:SWI:, g߉+G/&\|nu3Wf7wN[jP9W iRh_li\>Isx pU +^G!=;k PNOQ!7wo9l ۿEt}ۙ-ݰT_z|+/ =pyrho`8|#^nЩiNF뎜Bx̸r3_p?s܋-Ub@ֆ! y ѩϻiD׸lo? DPs~YsmjTwz,O6gTDkIU  LCtDfY 9.-P4PBL-sDQr akݮ`K-A "ӏ ¾.8T/|5ʁ'w38#e2hz0F HҠ_J t״/g(B;lyE ;,7˒e*hk,viM|8=^>u$JRүN|c$MadŜ%w9D ~CAl5iLIZ(%.T傗T~? X| qPڥ}rZ+?w(i<$=ֆ+ٷ8t#~qi+EM_$)|Dٚ|6ZW2~oJy#51t Hwe(]7+M:-$ԝJVuq"ckPzgͦ,r  κx#ti3~v8dGS0:,w0D8z(+٭ 1KP$&׭LVTJ ی/UIV;>SgF]_ZY6CwaQpy9`Uj_ճo >JHaV|ׂNJY.#UXԠUfI'0öHĄ{wǣ"l3K>YN.~/{0=-s!b X w 60v#)hrzlK,'Ah?ե}K3(lBU[߃F 3}ӥgLnom,®;`2ogm#jn3}mb(Z|TIk)jMQq,-r:ZFkf7i7 )N{u6~XTqlFry|aUKA9tyCh(IsRHƩ;+Pc0)ʧ-R܅Jރ06={bӞS$ޛyp(xO\ `yfw #GB58hk;9< Gl,,uv1A\OE) ˸&)6 1(q`×zc/cʭ'=jٳ_F҈r=v_Hqƕ;nТ.x#Jo ;W ei q$"SUݾ HiF2A€;G,1= T2ܽkz i/t )\nP9e׻V,' 7#mKYtM W/gg\kՋO#A;8b&Tv5BvzT\:j7nY%A3:XLRxrG P2iMoA,fX#K c}h2܉P+Po߻B}X!S!lFj]}4SiZR2O{@\+S&h<$gC(┶o0ș>6W>iDEl#ݜИ^v* Q`ڗ2& m :l?njdǶUC~K7j1i{B78@R[9p=|9_>AuY!$7_]as?40-"Zh6bg0!N?>Xk;Y*登09{RSĮ 3jEGNjQ-ҹCiU/7>>gQgg[ | yp ØXs?&JoWW5|R[#,vۃ g@O9;(UՀU#w#B͡tUzmqcJ< v#>PʅW3 1"@ZV.44IXyc91L '0*3 #9Ń^7rcq5K)GrAS ‚'IT/0-~S?Ws6빦&~',T.vS0)ܨɅCj +^M&A߉>hL?LLUmp34<5뷒a?D*g acZ$4vƸV|dpb~î]HqDz(^ћR P"qAdVpd+'yoZX8Wq:[6t:al#%wzf.7{Pw^^Q98͞LZtdLp}뵽v,waR@T v+1U }=-:AWOP SV 3ѳGKg\e=D =>O~+fe4FFD|-mI}rLY3Xh!8u@Ӣg"&xDIUqpJ%Kk /'oxk\ڕ~ߟ? K=m4, yXI#Z ;lw5F-3ƅ(7pErw`o\G} JkgJ竦sOF?Dvƌt@G"+@Y՝<6>xm¥_ }y$sҖI1`#'4\Eb%zb-5o"SӱŲ,MQnȰB/h"/FWLYV"yh$T3S%HBF-euX) @0Аk䦅ɠLdwb?Plu10i@9M zHβJAr!LD5"jdG ;1ڹ@LlVFjaaͦ)ssO.n)=gu1py %~7,/6b#԰e.2-cםZh֫է_aא5"8?{|kS@Xo$+,6ٙLPA_um :X#*(RZf3xҨďXP{AF"tұ&/0EB48UGEЅWֽADYSTo؞<"~^H>ry)*4jE'RVɊǺqP( Jm%9q񎣏rpGQuSRj U/#o鎊hZ<y_7ŏL[E+@toܯԾ )V2Ft9@Hj׾his2RI@\C8$Ne 85# Mck_s"] ]s䞖<1`twhp3-Hrca҆N *PE7HgwBLCٹ PD'6= :m }:5/]2͖UY' mB;ѬFWe"^b#,p>:LDӚ4kRR/Xr[bjz&D}?W4 SF,,J'Rc P(Klީc3$w5I$4Rz:AʎU/ i)-6 syO4^let8<ģVzU४!LiOU~ɉS9³ $D).zՖy2D>W.U<]7LC1Gζƶ )>\9}4Àbx 'X6>^(byw@tIAє778g+*T"OkRAp{ŋk.4sa[{qtK `ܔb+OauI#msUK{e]:5lI/<lS]9?voܼ p*3A]w\t?KObSk,/aw,S_wkL4MYu|xGI? *k%xڮK:<^̦iL~bA%1nrR0h?3zHE{'-%{ J.u/s3ng:PWm@zPM'ls}k:ч5!PhjLBYC P\Dyu3chԵrWk (cD:f l/oX? -ٲtpcD(|6!p@gQr~q:L.-COMl |Mtr! 3r09 1?,$vadIdgAn'RmsPh.Mv;e,oqPڐKd );zA>+$q٪j<329k yMmKG7A-ނƌX+슟::l)C#Ѷpt}*.9]O6y#kMORɘkPJ_wҁIin: 2QT4X* ^<"< Iħ7?j]hzhQ_K 3|s #l7pp~#Wt*q =udMzhC_O'|tުĢB_n8׆+/XTWg;Ld39+d'fcCIZ!;&QܯYBo^Ouh*݅ӘĖZ/L2iWwE'.@w4!27˧:RpOaR\IR'<m(zbpΎHxXЪj~7ן#a?zg `UO _XzHm;ĭy X{0?!">.ab>Z%>t|,ζFs~!qm?fHn>Ne;Ł߮Zyޅtf YЂS˱{$dOϵ *.x"_ʿdlgIͺB G7W7u#vΪR }G[U%EILI;8(n+,D'i8s$hLt[S&ПPuٴLzOW+ EFz[=zsl.Spq LfX:zj|j|fAaUωTT۪؞cUi?ߦ ^4đːf$Lݨ}{>q8y>'@ 9KY--rM^(8UV!# P\ؗe2/n[feTM}G:t:$h?@1K+;h~>ֶ|FM8e7?8ﮧ6 @-"60&q}P`\2c(+}ۯY9U6M!&Y&ItkoFĚ-; ~'9#q#,Y1V؝| f[)bYEMEQcwDIzxd%n2WFxI=y+}]\I&vDoSm,@VpiV֘ȁ N2*H>$b[xŕyP+mKnoNr2I_3"giHlj\lƝcPY`˲W'a~D}5]%%0UHA~gLtܽ1 1!V޳"_nUxd [qb&FfA{ 32dctf=QJ$vr;z?h,,tmw@Gđ Tɒz~/ϔ|ڵ#isUyWoE ]ܴ)k2+ZZ O*x+R=nT_!h orQ>ט4[,}IVؼTC<]6 }.@Ey 3eIT$XTqW- L[M/̵=-)WA?4X)O)=wEh?xM'BX)աA :K̢97(lBXNkuJԲI`"^\u HIcHL[)^(R#M QOvSt&FxPЃÝ8oi@ ZU-XUXwErG كe)Cd:x5{>N )`spS#VhhA7"€;nIV ie$3K5&L>Ǵ AqXɪ`,%r2#;fn%s&8zdyEyf@,Q‰ԪPuЉJs `j7 _Ŕ󙵧ݪGSF,.8(t/P$(P%.no{(XvIpHakk{94$O q#Ĵ7d#̑{ ādjX+vrVДV;%Y{xY7.!i掐=7:-WՒ͑١*"'v1)ɭ2-[ܫUG~<ԠfKv YuPށ<J`Jtv'bnF$)Qz~5) UiCKʮg4_,WA0)ifԾs?Q{} Qz]sI(KCMG:]d(Z i/51kF)p:ݸpjm;C6P!yD mr ae$J5qboW4mILq`ab@Qn>@ p\+ >ְ9SD=5"PQY+Xu.xaۖ&`QLѪLRr^֦pi@M[(+ǽsQzB FRd z{@!"PD:"BAPH!/aS .kȯ%OXm7p`eNO ZY~(@5B5U0SIF~ʄp%V 7l8ܓ(7D\[nTE5O۴Rm2%wN؅way]`"nx| ѫGh.tosa:۪Zsݳ}GKS3C^8 ^Nul>\dg0JyxIL ˖hЎ"0*·ӨE,zp8״tQkN)QtpA*?ܷ~Vge0txz,ZtQwe+[ė1Z ia[(K5ѧф\= en5mOODCc4#Q_ɥo Wbek\S:~O] zȜZȠ vsG$H_\C@|LV`)&h!.PDڕFg͖F,Άtj{S +dQ3;$mB 0 EpBBrQ< fBku'9Κ[K-< BKpxF .4 ^ -X;Z=E\ uאkHackk',lfR$[_2R4Tꡋ=8ͩ7RƼޟJsޡgB9@xNy_1Ebv年b(Á3S@w2m󄕖 V/)$xC8k@wd%.1+( 9lŬy: lKGrX;t E40ϗG' \nt)sNARB/%8[[g]!B22`+badZ̚4c7cLX:ķTn91_ F& S[`.uQJ5df0} $2q='E*)T,zY-(wu)Ho J1< 1:o;QじS#f913PD tOb3w|8'za :*Z(;jF4p 5JSb}e~DvyLW8 \.)"rd{0s#E4_1{8Qr!"r{ Nn1{0jKႃ'kx#/욲w9X(ezEw| }!`ί*Y#uQ3'9(D xNߢC6Np_c(S 2_E gk]R)$#W;_fudHЋJ~1?71ivmC֮ki}kt=6tEؤ: o7 Fm FC\gǿrڔf@$6n,[I8Ȉw%v9B^rJ ,"35l=~'"+FMS9+"o*0g!^9!ϼ3Ĝ38x+  xwtQ`bH?z fT1>MFi9S)#I$ Kৄeն"0A;[pɟ [Ct1v=:) ڛ&K;&e'*$ jw'Dķ0Y]iиǬ<ɩ/^@Z}~>#r7c:* r[m4øf1<<\WJ'y?lΆ3q}%t_yp&q"F|+esmDȠ53qp=5*ks rjuN:b+t/SjR2=k0a=D P$2GO Q$7LkoѪƟ*ꃤ[ 1&$䳰pC&]DhTsDr)S=2iVAw,1RB>zʂ\ך%kéh FwP`YmĚ8/bWc 4r(yW2 si)C !4ط\4RA*ESn|,IƐ ;MpڸZ3M==wi=vNzDj~3jRkJ[]8} D{/uuN$l:~|,ńX%4q R@sTzrq /cDj-Ks#'\܏ٺB#|@XA5y%W6+Ah޽LYNLZ$W Ej#/'.G-{ ۼ5:sZ"\ r_3%&f֨?';4HCt mi7ZpR<~;VQ#(c#hy,i!:}fQq^"}]6W=7ZjnQAOj?S_1z։2W?}]c;/9/ kW_4-u9-#b;l}IpI&zqP; ![_X&m}},ΊL@n01թ1:Pٺu(/ gz7 rc4~fZdVi"k3:pzEoɋEO|݂ wӗF' Nosgd_n[f:r\d8veZ,yG5c֢5 {&jfiXDB}knP{l`<ȲH iZtE.y ftN9\LTg $_pju윌iU\1ӑ%:)$dll_nbS]g;9&jZ2QLt QQm;mhS;mPJc`G= :`ۏQ`cOo)wn"@%F4Ȅk8C1x] 0\?$?#-w;X68 ][6'YP A5RanE%LLh_=ҡD ~Jz,΄Qc)qm?y%vc@ Z,͉;A@ԩO/wfHHb tiE RdȀ5z}&F)E7g~Uo3 O&6L7QePg^i[m]unaQV^=Sgm{zCsZ̒o\p#0AFߪXrÉN$/;\y y3 4TsXޞ{IL&!3D['EBR!WA)N2Y8M@i಩uL)}(+*c|`q8w$k($ /}2!:BUBG< VB;-Lm5*5Jt,G࠶w?hCh^vRXuǵLkI;!'o@6M KKQւ3qZq!12"&3bp#bqKqcFN:W-Hۭ.t6g+_8EP;]aQ= Qs KX:Nl/HgTD|"-Qs,1{ !޹]- &z2tfOCVA+C [v#YT ]Жo3'O9pD-Yxk_11)y}32lzZr"ek0*z+ARqQăAn&KPC],{φ}I(Edpk z!׽_>UPr#:*/~&k6'ng)%HӉ .s0w<d>E#W$ [L&. Ebm)OrRIڴWʢKOs2)<7X[`)IHojҢv}v^*M ֿ[f57/1 oUӬX(rg ׆2x5ρxou߬\DRo 4NwSI+)_DOOHtȁ5Ld.mfNG$KDKCl؝_hG1/."9FW 趝"rv֩F5; [MN s1_sӒsv붱̛uarSSiLXH]asgQ{dz8]#DV,TđM/c1zW .`M?Yg ҫ$5+]~A7a0zbl.Jx-W΂'1[d]R{!!){x8xeoG3>\28rک3,u"~ґ芷6=aok}G ˟5>63rJކ)yC$t_Ս*q;^ 7T(7t Ctppa޿qv6(ltz h%ʐ1J"JW;rVǷ6(͔]dxd4Tdޏjyc˿ ;,J8{mL! AqfzhuA-Sf?J]'KBPjo_B7y#6&~FI13n$ XD$gSr\اҺ#ob>߮OVB[?[ǁbq0!"EQ Fz䔓$qiOmF-0$[!Q)$k'8)Y{N:KÛJs:hǶr?f\h$;-;Nْ \&{۟6{/kHzsLbTAnX`66rom/eMdIO`g̿7+-!ۛ&.%v'*q]Q{0O1X9:Mԗ ,[,,! _aw!:LCT5\$Lsc@B"@@ p"c>E-?) YeHXt>&1L Ep` 6ca,;'I=Eƙ&#a؟ @aDÒREl2K֭p{ul J%vk(T0FgQuoS~)- 9" a? q8X+f8+8AKW.hLOҤwn * uX(Wxs CUjHDQf~XKMSb")A=@4t"Iߒ8ٍeJ.}RLhmb|<ŦXE44L=<Ϋʑb"q@$m`q6Vݞg焹2d{Jtȋٯv3R3Jb02uᯗȥA0d0~ĥ Ae 7jECHH1A* 75-ed/(Vl.#POB ؤEgnfA@ 3ɗs Noiei_-C%vxq2"I%KI!Q oSÿaL^s NJ.kUhu \cؘQG%]Tzy!DSb\f%mn?MD|!Mm-np@fexDwQޱ?tEg:,YQTNu,#)m1F#+FBm쿄;7jB_k!gt&ژBfb7(DũJx+l~ im]ǿ'3""\{F>J 9e=ŕ ]a5)Vz抡$f6l䞫MR)Ȼrmߖ_Jz&xP)96A hi(Pi0U3]*+QxdfZ>w:4a:w`۽xr+8Cr](BCʒK,HPṪ>ѥoǵ 9 M=lJM i f,1lɾJYVfv 9J  *n Ae: -<Գu`C$QD+:);>2=;9g,pZۙ(:䊧`PW/w<1CGJ1vuR0sZ+]V\2ױl䳦(엢 F;Y܌Ubl^/YY w?e2 udۘ,RW0XYluC'%/+16K&oiK؇(nr NI'|/`oy+Nph mB_(|&Z?%,7[l SLBi'M"?!v (ǐOa&wGddP(iFɄ] EF+\ 坱d内spaӌZqUE@ΙY D\2;pcZt3) 7s%Ktz= k(j0!FbAA[|$cPcK}es<:p·' "B L4$8hn۷wS ڝ2w:̏_mzR2aWu3,*%*/-_OmgdDLNċ`TmdWsf -AEPK>Rb _[5^[0?"SdeyCqajS,h*gr;޻/.< zO^Mh.46UĪ3a 5~)IVDC"ZV1H]==C QR.CE^ kvOӫmDN҂6]L@d5A37[~2@0<lj-`0N! SN~@Lb[b5I)JJ'\wpqA.Uw9A[yqh?TGP3wcx7=JDhiq/6nL;YIDjTH?M3R5ҪV! [ȑ҃2W0¤ 0CȁAd΍(qqs l4M7j;`b  )YiDdKePW8D޷@~ o@:( ga#'O1SW v ni"xg$dVPo-mΛ{ Uaz[ hNJBlʕf2"23c5}OUYzi 'x-C;.VM1)(2Q /#G[n&MeF3N#]'H{nPƵ,B]1M%df?m<]1&oXu\T/տil,74̥c^b:fwVg`>!`T|灤>" Y>x'O2%OGUn O02Gk|GH W~^#ݧ+@QOإm'q`A/f_sݿ f)z:E5'J-TivH:-Gq%sbt^&+ihc\dScfxV>SL7YMK\H|x*X~jj⏸UծcP.NF|_Y$1q,@7&>] K%gѸgcoD)!C;(dNA"+7Kԭ͸[LEWi{gy/A1K남8^c%14g{_";.pt?_U%OTIR sRY;'L=g"ٴ i7&@,j^j'2D>?ˆl"8g.PtT>nPθS/:bVk` 4:D Ӽb,E΂wW5;="@N O%#E<#UBf@89TIfLW$q|R8$ 7kvr9 Gw6@+S}x/ǫVisϠɣHUW l-$q$v@/KA>ZRTzb8uq$Hf41w&:m  #`BBQϷuʽ7c;ΊcU)#P!VR9^Q ^_]5sCC;f0h þRMnsG:Pcoۘ`e{87\Q!:%[l(W3DNaYjr/_!4q& P%G<>lPFsa\<ɜ%N^\$ԗt"em`>LQhYom&)P#~1,ɭxIj"  ;/mL^z'Fo y2ĈOn5 "<58SZ?@h֚O3#RU1epN %ʳnHRAY*t&&αLyFP3f,v;Hx}'"w6*0h]qNLCoAIuo)iKyXȃyvIͯxH0Z ů[ jp;$"&=V&_|k$~ g+jc l(IgL= o {K7kCuĔXD>Tno|s;3˹#;]ce(QIT pm-U(d\fvStƱB$[I,%h>~@+ꤓGehjb"=bڰ~mMKZ wG#99@B՚cU$7תiA@v1Z"wxp5Λd'cI;gcmq0cСu8#ނCI9 !G5cryUt%+G"G@_pa$J`oq.T~e7sF;Z!atԦ'X8aAh}]W"%f dKut.AÍ@CǦieF - a9OaRC`J޸ ԿL=IF@ Pqb J xHoo ".1 |gc$˩ڬZϩtQRJBˀI 6pb m,o~,(R#Ioڸvqb]_wk$rM^nI[Pe&_^1q ոd]i)9sw;M@:Cgg )Z7/ k|XjubЄ+jOF}Kj 1uiY{ TGDvV17^@u2jIq˭Ē["ag j~鏏 3K3RvSRC4M]/f#$Ã68=K?nTk3>-K];vPzCo!}Za ze >v*9;e9(73uf 3a<) l/Rq$D.*! ^H("IvHz,Uu`V26{}%B{F=AO?B K+|z#E:^W'Ts͙CH+(G #jlpu2Qq%s_%L@%7-Ԗ-6`JܐՕ \ . CI앲M 6A wgoby4!`te$P`3o3:@(ϔRɃːu^b{8AC.ֵwQ1-E!ޮυ-aw$ w] 9M@iu|]-:BueD=XŸ_[nb|:LRw`) `&|bעv<ڬmyW,)W,ym5ڜAGp?nv)r2-{$LPs5ݟ&ZDB}jߌ ~M $O-|g:I?t;f:pXI:і70.HoE5 =(FCd_TK3Y%’kvp cx%$,<{&s6&_yIk=X:4GC8/_* +ip!EoyGbB"Eﲈ9ʊ4'_=^3r>7$s_@_@F|wj)"wd}] moZ#ȕMr !^*7^rÝB4'ZmØ{,~GbR-[W'҅'Kk>va.":R /Ϩ#5:C,at]FV0'hj2{Ĭa݋/}pyg9?V66r1i@8gڠV>Ӷl"KM? X; Sj^]w>f?soqcq<ÇAіФ^tVae['IF>^Nuqx`Sx ҃śkySmLD*vQJr$N6=2:e9+7^49 IN_P7^kI6EtJ&uuHh.Qu9,t w(_wWqmҎe]qdؾcU*aWhoQBM`J4 t$=(*K狝TaV3~R/}Бőy=&Oe"@HbW5X/&s>2uڨ/z4Ba#j@ #X(Z2i v!˴N2ߵ"Ds@\s#j(>h/oX t4I`"3slh7A\KC`Zi+ED/z* K}*tvW5r!‰h fH[sQ~{8t8FeʾO[Yb{,x)kmƓy/.Rb㋢oS`IpU'ͽ*y顎 a)&3PT6@6$CT$VU@^z>n% "q*$+ E䨛Ǚl)ͷhPqt[_ͷDd+,N73?eDlBKO/5wyzW^":2mCrAG(`TX=m+^"68^bPXNu3N-salHH7~ d݃`WVt3Rf j;m+m{X֥96e@RNJ(>zOi&;2I^MbCw$Cq#0}iR&@LE^b52w2CS):P(|ߋ22dJYp~8aCϵ=FZR7 A'2^W|ɷ_Z|2[P < ŃU'#vDzxP.@JjyO,NUU-,xdQ6ܨTKݠ|&9DPx =I٨ n HmȕukY 1 2!:D4g3VZX}im1A]5[*(pQgxy wFvDvWP6gxe&ʩˉ P>~=oo^kh#bLњ~PD Uq+4mZptC˅Ky|U?_+ g3ZYk"1Obi\L]D\DL3 ~0C FJ'ޢ ;_ MP0s呮܄_0̼LF-Xv֔B3k k^H;^VѺ3V{%bج3ayAZtWq:ᘔ)_Sֵm4}(˨+_[Ez LsRx>8/CbfF8|!8R3RSA {Jwku6Qpw)Ÿ 4σ[Tn{(Ɲ[c6[ kыCI] d͇Kxo(zV>c$Ww+0_ԛƉV9?MBLb3+dZюlox6ۣ@M{#06_6@ 4 Ц8MVdCɄFZB#會8՗\ۨ­X?@!5y*?*I^*˨(-'~R:'1Eoӆ HDN(Qڔ%|pL++֥{"RLgz`+k-Ď4;( GZ=-n6FԊqsu-eXrcFJ-37`g|Q6۴a'Z'!-?^gY:y֭ln|j=\W4`z2FSJ\dYi:;24L+CB4QMy>=yOj.'ΪӊG=Ow ڽkBNĤX&yӐBT͡2.[)?5Ur}JK/|j!#']t\s;xvڲiXY|rv—OTC({۲Np_,?$mf$j? ,աepRWܴb[ӃI(N5׃u+1w% B9^%\`#Hw(#1+ÄQ'xl*8_wBIlRCt;AO:A[N܀gPvYV]H־kTsq;7 r ~z#]?۷$ޘ%ޞhG Cߍzj 2\^,^kd{BĔuIfQY>A͙ugI&9HzR pnaUYU OT8Ówmm pIzn(|\~rL#Ŀ/G?=EGkBRNFƖ#l߈R᧎X}$f &Ǒ~ _Oku#pكsY4#lƒԚx?v!A``Y!]9,e!SK}´X,u$dwN0wn˸R0j(툷,yxmk|jN_86Y_2'R_mUCٖU^](09;?9P12'|S.@ǟ-+n8[ԥ!ɗDn*R+UճNބa[+ƒW(JIa @ם2%<+nn :8 k{_|+r_N*s١WjED{Ⱦ(ƕ ơ]ۊ}ƖB8#"X|^4y"i'9OңO#ˬfyߨu LC;JHGwsF(yT* *\hj-ćh8~ jj'ӯx>R SͿs O1+4vv5ڙfuޕЌzp(&E%퐚+ද3x7 m <: 5yM%k Xi<?XN+`/P̤O()]* Qo`i={$*|Bl$AP,\IXc c, nG.PBg]bfyb!T)h=IgSsai|1ğ!ϩ'a17WS}^`~{8棊Kd:bU:KfvYozg=.X:x JjI'X6d&f/ʛ7Őfw*ƠO/@2$RN:*#B/Z1z}ktܝ ?r=H`BS=] a1 mh݄w*g >ɑ y@#y|!_5>e[ڈLxJॸ(ny@&7tkX5x},{QBu׍:MR z,ӱѨ)I)V_˭cBR1/z}oG swS5cͽ᳥"rX$]? d|2Ix0 M!a)+Fk844-92@7-c;Ne6P2h HG`t{ÒJ" üFjsr/*#dhÔVn魢 p [~.я -0,T6s#AfxگqUA5v,O|P@raf:dZ\,YM 7őHDu8/4\)Ɩ [" 8[Sf82Jo$ʙѮ_@V/鵽Ms.'·!}Nch_Xe=6G K yQ3q:g$\jX|:U债$/EFHe/Tc#IҡW9%l% yfǁg1sbx~ Np\kBI [OD!CLt?IaiIN Pױk۔.GD.LyQ9 Mò9 Gf6]0+h+5dq@ҚʤjںL-~!GʼJ(oi5K0$k$||f 4 #o/l:v`5YUH'!&MLT3P ! 1BC|I)L/!BdL"D&!uJS`R: +M3n*HohzVAoz YJ>z.a2yhX` 5-eL[g0 GЁkd3#wJ¾4Zޣ}`$Gdq!qsyjLxPaMӎlf۶dHiP2~)ΦՎvu :$w>N 0gWb)6+\Y]McD `C15+]/(gѩm|D=sվl !/qIBۇ^+,{ܭ+R%K'*T#ʿxW}3le}wʅUoR~o|>]>FY3bPUt3!@Q7n4MT,]AZzs"~ o(J C{<[w =+kh8f=cOi]$e:ͲLN2P+?(zA%2jԈw0V(sRk1D/Ur6Rw&=cHZm*%0I6;Q=6X]!A;MGMRL䛁]I`ZI:>Pq ;ES9P眞4%%†#Xr!:CMHll{NI).'x E3.b^b!̨ҽܢ`` yRm09-  #4*\\Ub0A+܉Qѧ޹>P:c]ޞ||I2Not`@1InٷOǼmMꥪh(y6 jEej1\^GoTaȦuvK3~ >ӎ)uܫ|ZĨDjh vv*k94Aj]ۛƍ"͂^e^:*H4m5Sgw| sYUx纤ʵk{z238hTxH=skGf4:`:5 e2g׿,=b(T/{РԺ;wۓ9]H 9juI@ks qR=vk%GYڟt'tLerA1IhzB Ɍ: `;v3JپlLBbPx 'H5Qn'2q{bꔠ6[* 3 ip.QG,Y㷨Ŧ& fEO^G̴NO2AY&r>H|܄fPXz+.Iء~WS䏜wvBAF!֭0cAz%~Ԍ LGE1ڝOx*AO&S5smCGL)YxlzvזM;)X ½Hs)]N_XFbj~]PؒP{b,[PvЎ.xþijqs(%[8" $bǑHsw;bK h D/;zm ǽ$-3i+nfS/{{^,g3 yy. 4LK-RjK榗#vV-&ǧBң5* d"!Z{xrAșN,T2u6zەڪ ^MYy-a XGpo%h%eG'G6T4~ʦeW~Dϻ ,TWSM z#,Y1O{V:QS f=;;)uc>>o#mvFlm'˔ICT"/l RJL9Np8Lk+ڨ }4plY6^[K'\o>>'2\tN΂+L_# 6ҎSt̸uh .oF2,"Xy9LN2*l!'H&gpj:{x `܏h[Rbei3rOzqot7)TSpvY"$ }jF3ע%aHN0vo&VȁNX".Z|N4g!fƐ$+{ K JVDt<=ϻtfUriR k M}L(&Osm.DP >%S6/cA-~N)dVlhJ EŋX9JNe/k{7:o{<3²ҨRw?[=x!At2aWғ8bQBVۤ9C<4 3Jq/ Sl˴cٗ[0 кRMLJEʡ+&q#PӠ2hTFZA bWYį>DS/Z3j _ IfBڣ<=6;W/V% jB5kGP'wWÖd?ī<G S`4rBk誣'BEOWB lYMZA(*z45<}[V }-O ѱf3ZmDP`Tov=Å\R+T'ڊ\iu*q1c V~iQW4}wbp1l"\#ZWȭ}ܠ'CBoXѡlajԦja]}Hy6擔< fgk[ L\1 ?)@Bф ]ժYh Xkwu6Dmd ae6sy0Rw=S]NZSp€Nm=M LɦJ(mIc^*";3G'1<$^-[/a~/QH̤i_͞!ga 2є-m.jݵ5ej_cL? 3mKl &Lj) "p+] 6x5pMW_8UfZSTe6A`\K@% لm#x:TӶgSAG sxQm.\l.^]FS8[:T(/SE 5y43B7T` `Y'hyKsb=6^?y"|-Gk2N3MZčXTMo!WY#W/ H<nAs#YY3vXLkv7̷sNm]usStI#mm0y#,Õ5crPq!~`[91O fؤ$$1U­qaD⨚;Z݇wӃ)Q+UHǒv{+ !/M5tT>PgI%(X3xdfqPQ]6hf`ۄ?uԉK6Luj\ʉ_6ޙ^E΅>c|~:(v4C(={e|O#JqZu=[eqʢ%cSALj.'.q7cD6LruVU$U2YyxMsܡธYn՟cĚm\m4q 9J1ELś^tf21k B+p`/'@ajt>n8AbWJij[Pr?Ra8IoS}>΅ @݉r&'*Mst.jNAͬm5n*i !xSoq/sUx5K& g4!0 {SAJl՟_J/l&Cu%[#qn^p m+&l-D_z7F?[)XOߔ)w%uY,,{r+]Qx $2K  E>U RPgkNF܉t?gݏej R76 U:E.͋W0U1m: ЁjE}4ܜcNWbM㲈?7w@A[Y~TcW"-yp\G!JKf~n CE;N\jK](b 5-(;4#,=r˲%*1 A>\;<y(-~!SkvR#M=}eZFʂ qދ{Cjj џD7p.fʹXۺJVqhI<ez`J( u\iṰΗF'Fm9,?hmG\1^K#{[T<@woxIX)0|_Uz&_-̭:hE WU:ɰFHB8ԗkdC 7ebr܀?lѧ3o=|l K 6EkP#'ޡwWD!IaQc}Tz\FFP3=a>ם# G =4-(q{xE귚*N$F:~>Imns_Wse0~'[3R TfNBCh1@kTc?qIËm.]ksq};+ |,<,e:.:-'\\`b@hU 0ts2Mc@J%_. \T4ߗ C 5@-6g\͝`DuΆ\]lѰU%N?Il;R{8o$(Ŧ}q"/ƃZbޞ7*fY@_]ttdܶapQԕܺQ{'%8Dg L8 ?:4 ppx:^5:Ivhބiڛx8*o9=xCxKs(3&T-92P ˿ύ/ccY{aʙĎ~CnU^Y?B_ fJwYV`-* 3%CG&GǶ]nۙ3.S:^c` Y{fSB]5> Vri,ssڋҹRڙrKz2#%0>l1kɝ-65q%D׋M~3TA.=8* ^D xRo3&.wwav*.c.!8Plt8$%犡eKlN5bUת ix7nL_>^7r!εDB^$! 5rWlkG'_Paȉ-yv㥰]Ks'fc^e -B\ B nu?<๐ygQ7Vmxy.1㊺jcaaB$jyUy3MTCN{jga\~ |Z Sp݁3vT|).zނ-N.QNR*LLĦ}o=sʧHm2zZ3ƛ5u\ z+rq'nzmtg<v16$k@ׁدa;5^w`\+%L VH& "M=HY WeqύW*DD$ʒdt`spП Mfait,ϐF2rEM\luHhKj`zx:ꝈДFGf&m^?|.j0"0<ҕz $Єuloܑ!]%*X<3M; o&r]F8Yg:i֛-8h?'eJC-7q)'~*:ǰ`y\hIe -UqU2͂+9Ȁ\;n. t$;m4;Brsk[fVAp׌XIE]"vj<}TU'lYnej>C^gJtgNnyP&꣰tʬ+x[hթ}pA?`.ᗘԨQa찮GudڞHvKvKP]++.о}r ;K,Zl1䗾Zü̓ijݵMH8^7xAYe`=/ ZqЈtEQ /c^Y!Ju!}뛏2ֳ\emB!ZJ~=dyz]7Y=Axx>VOflԞzN fMik$N*qAOVSآ|tN~K9ՠr{r$Aj(v{~P`8ikG$JPE<P\*oIѹש=*N.9\8_fqSKYaP }Z6Cz\KO0KH#'ALܝc8fG`;{WS/9^/<1kHbR'>kekF"W'o)n(Ւ\+7 K3h  4RMz`Qzo_zΑ@k)"դNc%%`3Gcye "qIfՅFs\i +BН"j($"Ii?Tn z6]uw(j1%Wjj_,}3qEMeMMl\_t*B-DJ Cpap7aFFM\z wNj!oyUH|?dAz浗C=k€'}}`Av~ȇv~1]3X AN/ߊQ㢽4Q51""G!zN>C]>CP^DCtDlyeK ,U&8X]F.46-\–!'-A|7W?6yWzA_ݱT_{m҇ ;6mKgzFAnPڵ*8L3Ϫ =f O[y6qN;~?ֈj %a9mKgf#}@s?<E_ވq;pfv5/iõGPʘ9;]jZŨw.iQ[&PƯR*=)R _6d$' y6P3x ;eL8"`$Ed_+o6ߏTrBJ.YqRkP!Q:'k;Xs_:oFRΫԻUcvj?O& ϫNV zLd*sP~ @h ou~Pm?6K350B)\_":tt!GUF瀫M~ eJ GLIlqcR-%v'LɗvHa[G >]So*!0_ګ PLԀKݦaL^e{ߜCp?o=i6V\Q3\ DGy? @0!D} ޢW{؇A<Lne.EO9H ?2An-8v"sQm^PVJ򊧃^ ޡ *yQUaPU`uJ*;x"!ʉ| ;ɖx1E[_ =LWL9\Ek %P}Cۿ%'*pe"pxH*-y-C˧oh&lmOO2&fbR /Ӂ ?"qhQVOA @TP!w>e[Pb:}8& t yx?@@܁TNVւjb>D *pC wQZ s"zȍaDaؤELW.y;oy?+7UAߝd HUzAk=UO"|+ q , dB戅1YG@K]A{[gp~kqxEȺ@L{,q{m=XȊ0%zʥ$EdTL۩$Q[TA>D*X5 hh j"VS#AsbF;|^Tjdvc^FrAR@pP4 iA1.QHyt8wM5/w kH)=EoO5ӽ~ֳ5ulD?,#)V^Gke&*̍g$IVX5%_/}dn_rI|]5ˑӃMm@!:b6RHv5kEä@ ?D3T&WeVw޽x996^n@?C帽!S‡舆Kقֈ)@eK'Q^z$L_N#q\\)l/~H&"k9O$x}b(D[u]ȈWަ#QSg}Ax#N)X'皍m%{Cf}-4[PZ" ,t-pqN9nV-Ŀ7 i9y\rЕI[u3# |>G~(n?C; }1P{|_*yQC wcCE証SOg-;2TR?Yz=M$|Mb97V>)BdG3 ZuI~w@Ѝq/VŃ )H'cǪ^B[(I m2J$,Jεq{}vX4@q^Jp\ "wbQ@_- *^V1z})<}i⽩HxP6GEGA@N +CwL^Ɲ7D=(/oE_Dr)Cu0{X(P zvQ"ި:#TŸ: 0u;jle 42^1 A|>,=e!@>^s}YWOrg}8IESBs"ioø^AO:" ī/4sAABv1)^ڀqC y1a0 xw&@OA=8pG)ssQ?]`HÆ_mw'1eZ[qg>r}Fr8pMe{QD:cgZ0BWW$q`g`b6ٻ{t>L͵Yc̣X UGu7j8^ „ݚnTY~9}bmJFn6۾l/su@Ԛ.GU\wկSqp㐉1>5>'Qm_F'|;[@[=W6_w5o@ ?.pĜY &䋚`?5P5*O=6 IuRowe DpAZ9h+qпjP6QT4fGɂ:(eu?  ਉѤC~e~qyuW54xU/D` &N=zГ4m|EOSQ/-rDq(aT 4lq") D!#zwoA@@GA@w?dxa4Dn )T PQ~78" (@4DD&6~5$DNEQ!cmBdHAR (1u @ }B TTpiI ȣS$))JI {(BR@!"H B "*kb*DdDD*]P"" &@X@ C`DHB(#/9?XPvL>}-4"( ) Rrl@S Λyn P7YA@2[h.kc"urV.OA U*%k)eR>t.6 6(*mep\xޕĿT=(g#A4ѡ lx׷;>!}=_-VB<:<^aAyKELLU ȧQF6Ҁ EP;tPSsY[ Pu&_@hv4UؓFP|]KԲ[eߘ=CC,=yOC 2ڴ<ʙR Ʃ@@l `WRMz&<_Gzb+iUD.i97$D^\e=`KEuljt഼&v:eIQSBI8RLlY* ;!/fW~w&pxNt4_zv_?~kNs8Y>'gV5q?3L)[EZ;Á5G9f%]gۢI.y7QGK>uHs.CvjL>Ь"=\..m=F@)Dg1hO$gb[7]x@TA@Gw0D}րpc?ꀅ+Oзσ9(uCE@|/@3RI~ ({#T. |{~o]GS[ȚO.C$h:-or[]z*|*F"zz+sr'(mGÁyEV]moā D5_Jy@ a3*pH+k&>҆ߩ}jKgU؝A !k pSظn~ݰe ;rE~dfC'Uh;Ͻ!t=(T_7]?G*IJ1ޤķ M=%d~5 "k>jeNq#WoD?^TyUyq(Y}i9^> Mg~vf-ؗ*U`,=/v*&%dzl% kީE~j rcGE#3t*b߲p?gJKRs\x_88Q= :_ 8p(t?~ó){;=!cyΐLK2,feeaVßk; i<^+0QoY> 3;ຸ,K)j HخPW\V%W w5'|LZ^Oj-E1,>N?hluq?j8!n.'Rٜ+O< !\ DlБq J@UwtG.ڻ>Yg /ɒ`b$_կ9a8 'i$أ쟉c;7SeZ̴ Oߺ鬿@[FE )D$Vj4YdXjTϪ x!S-Eu&[27g_Ms ^K R9F"4A简g&;TGnJb<( YߒGA%8vEؼ jdQ|Zp/V @*t4y\8Dtw¢2c?|Oun$u4]A$ ]S@<H{ {w0?bW])̈́"D- m.A"z0 Ȃq1d*;}wX%m"0vicm0o? ]]i$\B\ȱ=Cv=k "!~I8\_4i&AX\w'X8RcDy$B pKgc/(ϔ5GHp"\}_␐>[˜}`K@ttmz B.2^릍gK.J8!̺|3qiݻۀ89/sk&N'aP0rPl7,GI?MPn(f#ų1~%#IwJdh3o4c¯“)Ӄ^A@ (6UQU냽 a\Әɣq|<)[Pl 5.oHXbuK퉞`wLRlB9~8:(M0oN~*a.1S] U C({H*auN8B!R޳bK)ŇӾ򄖟Dgj Q@j Ǎs# uc l7O%ZR;_P O*fetD"'v} wjY.ZwSGт[##3Iwg(]Zjp8\W4tw6jZ[f:ħ=E~ww5Kۆ9D藉КAu7- QKOdOVotK}Ǩ5Pl mlM'q=de}Z9[׾.Pl#:˚p>f};1ѩrgs>hC;i 鎏r].|Wqw> WI#7[91xDۨϢe jxvE7E;h(ww,]ZkF 7*PoFL d7K5\蜦G;|t&4mWɆLexX5m`eL ])=bg~/iwհA5٤N=KU/x$le*4a9+N%qmWDB^.~Š{/Ozy֥|J?>ь`m>٨zW\̙aۗo/(G}QNn}1'&[ʻub|pLITX;[9K~ZiunjyZ-ZlrE河"yY`zGRٻh!vuo6'zO>~HqV{1cUԑ.vW9?6;h-_ߧ c::oxXSQ@^ Szpj74s%eL>Dv>ҋַ^?[c.w_+Mr{ hF/-N󪿃yڷZرS:.'׉z]ʎ(k/o_{K>~ַOe .E!.d@54E,r}Ch?43^qTK 1J@\K~U85m~}\>$}S˹߀Ip|mZ; sv7i9r{9 QNnZфh_ ;{9~#Qő3&}gE+V\xZ1̛̒$5DĂ|eiuc"❹Jw\:طvn MSSuC*vƏP3֮dhIR( vVb~l!؎=j oCFCqǹTa~:|g7KD`E3vU.7ƂE?Fyx;J_sytBZ9Tuo=O@ɭRswMN5khDdyuEo""`aEyCq烼b}Ȼ\?#oբ#xkQ^XJ" ;݌<^Љ -vcFBĸeqT1^oȗV]!e]˙W*!u(i;^t@/ G!8GmʹLmlAN_z˂\%t=JcES;Z1î8#h̕~Z9 Y\l<ĨXI Cò3¹Ə)(_}C>fۻz*?M`X:Q>wܯ3-[XNw[j= ZňvOyf3tDph >FӮbu7gL DVs9eݯ0 'Wvɡ#yBHBNadf hH1fȕNXkha7<ij2ЈSvG<HxUFh-T|5?#F?Q-Ƕݬq<(Y& _zPӮ9K_SiZ#R9G=vlafn4|&)"zo?v7L!3Ա gОʗUC=5H1(Od]B RGZzb`%|FG9Fܜ;NkޮZ.۠=Ehg%GRP|k (WP;[ЊFxg Y3@wE|8=M2ֶvh*;g?)ztCr3a2fwD0j)9hV4PiVVf-vc8C(I(B ndzq]Ud\Vv` j=^Xފ qo18F عLv8s3 X(9S X"^rR/F8ᙐoRѭw>عE&:h_jzJMnqh<1jz/wfU"",3j<|X("=#@zN)j ȫwMժ76CeK9I_>B|{[ f3`s q4 ! о=Ȯ[\c^UmŶSFgץ.ݱiM*qt\}O Sam|緉GLѳoizX޷]˳v\T2oqd3zhe6f%\^s~E;Vs5?Z2t#tdE wufS)[Ფ _yta$oCS[d#b̅(H DG G9t}W.V߳pL0^; 9qymn$hzDj6$Rã;4l7Ə>^[8swܵ < ]:d$T19i՝ _e%1^N7܄*4$a(e^BxTh94NSUMu E$?ӯ ̉3$*{8ڐyѹMe) QEE[zsw߅ l yf7"{ˤ)ȦyroayV PÒHkA}KYV:|끶@8]w*}/Q I>ۧ}8(UUq&ʆWvzM.OYI^f\lYysѨ:+*m ;{v$$R,LeePZ2U B}N":<_{%%`{l֏[/[~Nwy]j_Ӛ=_mRa7Zʧ-!uNJ6-Zɶ[`ʑ/{`t+៭S";>%;Ҝj}Fݲ<i ȳׅ!ðܨ/,CkC~= n-.dmz&ݿ*||c<>ؠ00됚rEo润/1gl5V " "Ȇ(a88$DbdT{xoo;6 [#I ~mǸU%[ K[g!li ;N]HAT;YE4{ď?]y9 ;_QZW$s4ikkF'h?k62RDv@ґ-}Tg n(KnnG!ֿFw걇tv&8jT}tէ4~\;(wК)N?y߯t^ߩv]*[-M[еkC!ڛh1ۭ0^Uk6rQ4p;c_FsA\) 4qf,"*xˠ֙Doo@ {kM==eUdNN0W_m.6'5 w6 K<9vAb2ξZ5Uòo]bFeLz" `P}#9( 4Pt{ozH๨pA?OJ)"\71 & A:x@=ADz9y{ ٻhyܣzQ쩜VCG,OER7^UOi QMFS'eJWT}Xm׊S#KaHy~z-edTIV:Bhj$l![6+?`v&\a&F>gmϜ,|csIurPc9\% #Ckz$~5 &ZggsUKQM&^O{3N :_ ׇOψ_GO}J%nEӽ<םQ' ryG`y|+|ikQd{|O?W}3=ujWL:ק?2P,CN_ǠDohh'e :js 04vxEW' }Ҧai |U/I5.cvzHuԯyuaVa#d$1b_la}9^p.a{+c7ՊJuΨL`x2d(fqb~T- L>>}c#q{)k1+`ipC@ :`J,@;YNjs1wWc.C\Zf X]%.xl3X;ճ"tfͳrH#S/h[UwCWƀ1$`?L1bA=;[D?zΠp'.A#$YmO U{ȃ:-Ϳ ]A JD.Z~mel]P[RF1z~g❉]8Ћi/Ǡ#$C#N;[D~l c4`2ҭzJ}QzUgܳQ@~ڜc( MIu,cw /z~E=W0\W<͜~xk{H_6|(Ax^/* ' }(!;nĠCOZ qQ~='1YY$=P&6'N "WrD.WV3$tcZ'#`Mkznwn;S !nߛ<5F̀$1gؐ,oéN^i_p#|??z3UVFOP)YOгЛ '6hQ~m?'_yz6 V'zJ`r딧ξ'$>5^S/

c:y 4_KYIJuQ^[ˠgOY5gق/ڀ+hai(\w 4PO{0~O\qgJ_IW=gB2>4r~?߷ob*cFƐgwn%9x&| 4`,6`Ѻh3lA#_(nǭ_*}AxwƤuqnn8K[ߐ !@ ^ͩ ~} ocieR;V{8"3+4p e$ϾEYTq]e cSVP=NAfg3Rki|Vؐ fF_LTiGTj 7hpf;(@v|u9~񯰓.:xx{ⰒƮ??'1 .6b$ @΃Gy>WTTdN&.^Q5"'Y,?>E_ \z| m#y2|+{}Wa_=yy1Ă!x^/*^/+է(&NiG}*/SA]'_H$RC%"V?3C}#1h !$JL;|nNvIU:q⟕})0Q%uu8'Q~džy_=UNp ,n)yDA,dR=2CKX{0Хڟ@ IPBt'lOePdC.Ľz8aMEp '!O[ˢtP ]Dhb9Cp `aBLVǾkK8k783pC B%ԅ53 *bt>jo*1P* ~ ױ[zl892)3 `"|C. '&\y{~$-vt8>_$hWKa%4pVSWZ ـ5hZ+j1qW8$^AԭR G]; mx+Wb"$Z@ܮi]_/+jy4͖gX,3aw(9IЈ7t)3?לcWk>ɸyѻ*iw~PQRP唜|𹉀_mVK8b*ǦqMNږZW:AIِQko`$#D i0DWavwra<G2K8GcZ]@,z:xV\,Gy>-RY|oZ"G?*F)ff!I7`xw[pNNAsТ@}G2(#pT[8 =_<`l$k]`IwJO;2{vvj?!\^X*A^c^<5] D1KE| :8#gaJ/H+^))ߏЕM1C^W]}-hrԓ[]tnbqaw?\>z ! ̫Yvv$4o*P9äz)e@ͳa@{KoLN5*iaM٩(J%Ȼ0g2߀j<:nHTsIX&=nPO<) e'9* G0I Tʙ%"Y`؅F圯I˘:}h&JꒄHJxfLʥjy\1e`'+(((*I#@ZM* a7h_9׻b/}@ / 7151};03=7f`Y˥U<`zl$+A`D`-D}5`~˹?-70lY'"zLt3(ҩ1,](:Ko*1;B133G?n`rSJWns&NDhKw  yAZȶe4 pY]i?~7>O}Xq;>/,JAs "H-Cfmҁ4yFV C"x*JHƇ\69m `0>'bv6'AuO17[g[.IY `+;ywMOշxQI0~GApgQªo^Y]U]F\VSc靭P4H4GFG&|xgU4i꡵Y|.>Ua1#a)f>֊jU,uV]wTYPfB!UY:9 jP%?P 7c>diΣpX%gjXxߑӤ$ }rs괨0pcGgipktI_ayyT#8~gǕQZ.KDe|>&l vͺlF}7-YfI˷zIfnJ0aki~t[X:7UFn-!S; se?_kE}4s+iM?LmKS>W P>Xw_W&cW-j]iKML^L J]7~VfCKL4?FLҟQq~MLogk0+bltZRh=.C:w{x8QHT4wJv,,mQ&]MT<mKWRX7APb &럛lE$;!jI$ʘUZOWm1fz 5==*̤fU]jkDW#}\*n'jDF`* .mEEZ<_-n .wdYῌb:܌Lm8._o⓹([̈đ%;NJLYjH4Owe,go,@|tD,>[5k'_&"x_ZJwjbwY|r&R? TC=ʆmSH/O\>W MtIgRgxn6m쫎>QWCܕ@ ̊H#Khfb܁,1tf#mܝ:R>HnSUVItCznUMmX2x T ߇n" ~eϠ c!?OX-Hv2BE󧓎.)gI ?ܝ+NﴛAgJh(^4\!pRXIm}N SŪ;m%P궝~dv|חex=+sp)~Y[1W j NVM[ficX{J? VOLB?yKK쾲uE-g~.H5]w;)AK?G#-{3#LCK/=CnGe,;UtAlѢ :ʖCZP(?gX'㬎м눵eԶYD[W"!C[l(f!EoW~ׁK ՆDbK`FkVH{zDEr=T9UE,UaOǛ=URdͩy[\V̷r- %Oq0 0d+0T4=mq[qyL<r6K}f SfِLsU=qFZ2}r GEYRyJ/ˁvM,ږӝ="mͽ&`Y]mj%׉]8}H>!gGBH*9T K[gYKx B.(C{HOhrZÁy},oJ,qt㎙t[jٶ8$#χ -zTʇڵm5oW&` *Ǡm[RQ;M[PgGV<(%+W83"#yk hxujc˷d]7+\) {#դy (~ټ <&{ކd@k%P޷:2YG,2(@+)`y1߃N{1'' ‡N@eGv}p\]8eMfsR8AEFDfdiHTS*-a(cgDȭijd+ ꧁td֕,  1x ݧVI'V;h̼)i1I. _x!o_8OVʢF-c[SěC}Zj} |?Vyp?~._Ӗض7EEuQtJP0PfR'wNVU!ȓi(y_ׯxu S6D07 pՠ` O- m$ʁ䏣#Wo4G64 &Мf`oYa?Vt~޽&A\T @sIh0y)Li*z(w^^,j_|Xbkl~?=8- "rO(CD>e aތ$>|`HAtL0EBgG[>90sSQ[9UHTP{Vx_O>6 6ܠ_JPFDD1?Hi1H4eYO.a@(y07Y'PCl?í| Q|؁=Í ^槏8ݍHu'g W+I q'9(B~:}X=*ONGt.TANZy"Lw# 79>'9Pd~nZ3yG«$z+<""1!St~S"} ﺢGqR5Mr#vHÈ@@-2p™Ku 7v3ca[Pl)4Imt{֨DZvT~g )!T怖 -1\:(Cw ,eG :<[O>8UCϭܕ)yOk,̢K)ᐐsuZGm=e:N֗y 7<y&ʘ{)\7ʯV}ОЪ8Ǫ#;U!@h4!])O/yR%覊LeDDxLGÀ8Vc` +icwޏ> [)ze^>7R"+s1 { br1Mñb1xgrˁ`4>ϦQ_kz٠Oazp"Y̬磦pu esEh6$ W 2liYX {.m v εfn$@ _9mrCjqЊ6#UfIWn23 !(~-ZWaS@?|i2E·Hjo6mh`b"< puϹ*N=zV~&}xב20p'qrìrs2̹Ҝ[x%~\w 5򻬂;6_rb(D#^q <'kZOgLd ߚO8O ~ 2D'((Ҹ䙢%tH WOSv͖Kye]7;NSd0-BSBn8BlxHw$=1N 4S$0pJjx*?ssS6~~fH0;>;n5ZT&oo].DAA)1 P,]%_y;x6vKusd2UZS6#;T34!. z踙E4J|>r9cV$<  ߂h!hV,@[ S#kXZ@c7yC#At'?}2(tܶCb:? e|q U IpDcW/kxUպ?U+<26HAۯWku/Z:]څi*Nc)N[`o0^Dco3A8f#d20=_ɲ:4.SȆWhK6Xh.f+Q\иϸV r(Rs:9QXgat8zm" zRE{̴W3\Gɜe_Cf+5*l9nfߥȀsH葹 z8 T([É(\Ӳ6>_O} b# C'؆I1l`C*r==;o֡ r2ӦQT&҂..4jӀ4+U;=^Lbx9zV?Gnf@5|T_P=h] ^m Nx&Bo= {j$ZbezA X9N-e м]9+Mu51iN#*?Dc$=.UGt]P23sIJC-Ԫ*|~#©yӪbwt:'Nn6ؒ AI@V"ic ?KNE\Sf+oϠ(B-o)Y~%| b͚gOOZ7xcm3. {{FZ땿ڝ˛Zo*̝Ib_X-0ީ->$oHf -Q2# k4O ʔ;#*Bd@- ؾC`!s3W>O?p8 OJKq`m>21e4nw|$ lody#ivXHW)זaoRމgִ[BheFY )BW>$,e Fi#vC\goZ83c>BWJQE5 { E~RL!K8!c2 p/Ġ(mWӆ=aNX9`,0~V>&$fx jߝ󇆧t2:PGGL:ݜcG9A"$#3XF@l Y:kiZ/ց@oSI)`kX`[%N #iV :Hhs̖>4Xl7~!!c-ey 8?Z?&Durx\]miKClx)'_w!{|UE1Ɨ=a*Jӫ;y50 r#89"tCd /qp7G] ZQTlWI2/~zCՖzb$wMFC} Q1X:kմ909=ԥzp6Lr[|[`(Q}n`{/56\˰\rԄE]Z>-65$ vs/ȇD؟!f;yCySQ)Ӛ\e/_Cxal lgCn #񄂡|m^K mJX:]|Y>]mTVN):8oI6kǂC}A;Zf£RY"g[:k(*GL1Bk&GJ6_ :B7YK>t  :ȥ PY% `eH BXPx/x Km nye Iy`]~jX_Q`JiWw[QEE'G"S_n?+=?QA:K8X  "2-VM-`)~MoV+^d2)@5oTG0ƨ+7\)+a:y7y8/mB(3(b) ѥ:XSa?a5>3lz"m7ԀgLMcb)tj,XVU (t8H@ 9WCrv&%{ Af,C̏9A ,\p@;ؠDXU\??V˞IY ! \4[kdNo_q3 i r26N⏮CiCp\ʬ8$~\9? P<;߫Nk䨢܂dpY@VJ'7CNQ7kbUO]w(,y9 v;h3RgIm`"aj %@Dڨ*xr(L\{Omuy.P$?t;ʝ(2lmD Gciq.Yz#`BQ L1)O.EscT,s"fjA9Pʿ\9iS\H,RFH@xt} s6~v7Ψik9_S}e<k3ۅePn0u4|32ع~]`hnnL8 F9Up.Uyj#R_IM"l"'q""`[{gċ͗.suuDt#aQŗ5J&zb|}Eש5oϵk:m{Aq(+~NG{)}@ B׭k*-?/;a3? ד(=:6u nsUFtakFG-iJK9zevXO[c߇ 9sQCT~T7[] jg)F 0Uf M'}f &ƣ'~ϨXk^j(X8ZިZ>@9F 2<3AS7MCUj yܸe$Xm0O)䝊4\r}g^gEdibkJ |ez?3`,oGamN7Oą_>u]4y8u1O.PzT3֢K 0GAe8-˷sg$w_jW\6rkpj=43`y:[B7dqf*pr{YtakjzB!vOgw jqn/',>Y9T&'"|(n?qw˟}eF?9rKiv8PG( 't P7,ց=7rqkeEGkܫ¿% yO^!Os@#qFH߫9ַ,Qum0ϾUḀ@v4nedD,G.38Iϳ>`BKLd1mꚫI_UBB 1b"\`i.Lu,'sHSy䝫Z'UcS"vkna.~'~?ՠAr~Wgi&0jwQ˧_޳LQh&{=gwA\վ !N4󛻓9ZXTY3#5&$o,GR .ѩPA!`S,֕ZZB"i[u mOVo~oߠpv|F7C[MU$󀶇>Lj:#>PHڥw5rUDɨ6ߐnCW{R}e3N!"\B9 "q**Q?B v#H9rbr=UYrSJ.]rA%F/ :؈vQRr5,*9@F * Gڠp4|6ʽE'wf~E%5|Wo4}_gk#>F?-C"4GVdݑddf@66mgqԞ,fYO3췛I @(1SSow0ЁܗaF\x?XRNr7:u8p~fSOeX z-c\<+G,U'9moÑn[ziIz} a6yND5Fcd_QDX2BuH \fnO20䋇ow;b#sdw"9wԨ[,_~$PeXf0 %(s:.ѷC|& cϬ;d]@mP B~\;ٳhƋ/"~"-%W&8ӺihV5 5 Pᕉ`½jTa$- 9 \lOesGUioi\m4?.XθAuSh'qGINj[s^c Q*YSWN!;ˊR.agy9iK?z: o\EC6n>JýZ=A(/b_<-xyuɪ>EUf̯"^>ǑZE7QoV\o`)d7V(eQmz' :|ĄٌSuڋ-T#h,r}i+3p,M<"TXƇ_~.̈́糃'.X$=,GR%4[ ;021H쟜X ;qK$ѩƄ&xJG2TD._>!^cYh좝Zq R0 7oϣȶl$ nDX_PVb1h,CH{ +8n˷'~ѩZy% caH o?O^)Ep﹣u˗͔f:WAc!}Q@,ޏO#5ɭ‹7bw;ZLNFāxܲo@J襇gj+ ITc4']qNgLJQDhwF . Ʒ9"ǕD=IsGǗҊBEIbԎT7oHh"&'๦M\b0⩧J,S/(6yl:sCљa;R$9rJI-KD?aBiV7E3? C س ]:m ) @gFMϒ70\.^xt,x=CUAQ$p$[\iƓK;Tϙl΋5eEcHAj2ecIBƢMvT<ܧ's|+< -;7L6i电mU+f1b]Y6v'*S:j-7wI=0ž"l wԍ^0rw[ a!,hlhW]k߹ָuE"BnRK7\9 =]?aTq1hFnDLZ7;I9ϲR6.K %ޖv{h̉Ww%S[ˉ^¸ks0YWI!͛*@@mzgϥ_S-;OV~kW,ZYuZ{qXoTgmˢ+iBG!0{tk^ "v)!zJAB"s!.ߊ$H I1 #K[pgKP@P?4zzfkv)줺p56V&ukYe,n0U/_Hx|&_\AV/jiLd5izomݏ puP5ٵl~jƅJ x8 z;0;;*{[hMs}C6aS_D#=3/<c?CrqqH I]+$#vG3œŬK*n*`읏 q hk9`}2ׇM]# 4 B53ALRg exLRX*Kשҹfiz4/ɮ:JR {Aħ{3f}]_\]n9hfxmRf:GO)$)eETpY)8ыy%"MxY[+"Фsڛ E&"!Tdq׼Ro._&:)!{,lC9W) Vxe^- n;R fb:iՏ^dQr" #^I}Ou7KBȥZl`| iQ#YtNu3;$":i}}c){] ӊ 2I?C]l lFdt+Cs*̏Z$,K Å)$RmZ,O!]F㾐dXfsF7U{nkPisG}Yi@sd}]S{;FYF!T?3#YSjȅi])Տ/ɨZbΐI(HE` y*y)o XPHNګ{,Wj܁?%h||`MX@d#ʤé[جQga')!.mV|߂פֿזUt_Mjs&Xbiz]v c#}B~82q B"'^z\KXhlfOi]յDJ\X61?U89υW_ý"q?Ίs]UՈguxtX-NAQCT5ytÃ&qYSnׯ fɒ69-|]bS4/WD{xcGƆ5YI~ )dp11x2ں ٽVۍ]]m3Ƈ<46t0'k͐rz&skppp&nj_ǫB6ɼצqolFdÞr%-ziWlˇߗvn% }/5Mjh8ݽ'Q|/pdF%^fz·>m)[ӆ'KӢiRy!΃$q29‰)ٯ:Ѐ֟bWL59M`9IqlbD!_t4v?VZ96TڽkYͤ&.T4IY}qA]"$zɥ5S źX'X%};֋n1=(.stqx!fj"w#f*-JL}:Mn=/>GD.WW uo*K\iמG.@q6ʙb &|`FmZYWcn;rEOAz/Y!6|qR^@oV%UcWm[MD=`E0-Eҏ˺A;,_Uͤ:]cǩu{MKzOB㿬0є ZF(#x _=`1Axku&.ȁR7;ۓWFf5u6NOaÖckZ鮐N\LmcZAi>2Irɥ;-8MgւMʅ #[WYiDPLA#Kkywf_R)r*1[u#H$BKO;zRfq={CH`Tc66ԊD8zdj} }HzQƯ T?էZ`} mK&דFXJ-ܓ{KE6}uN`-k@=Tz\C[dzF}l#^C7OW~l.I9K#osފײf݃(}2]= Aʃ˃p Q;KY8 ~*O(/5̺,6N'u4?zqL_|~O}T{u+c'+HR^ηJ}Y?UzTbh,y%L~ozc~c̏Xv>1sY+Y.G9ăz0mG.tӝrU-8 6!]3 _Nan ]b)C)/7"Dc{nw1TGuP?}jFnVLJ>zEqw7w)#0]Wp+AX7|yNNrZc,@Hd`ⱏXxj"Pl#r6fRiBQsIQ``zɽ}g͜{>'}LxA%)1&ƀG}lUG /Kga֣*x=zclv*j4VwY1p2B$ٜ?anl}6 jg#+1([Y{;",3-קw09c=&H_@v`7z+ Cرk?&/S |3rUhkw6}S#HsJXp @-bsZl9!9|;CFj[I6۪]9*f[c2*|WQMPI)[n1xg %g ML~9_g5l9Zr7Jݣ?ܩGY+-GRk)7Oưv{=w;RumɄJܧMPZZ؝aOFϘ0JCߢd/.5^y%SgmA0;;-dY.YT$Gj8h{] Khg+lNJ΅x8{P+fk>&uW fvV:mB|8jf?GsEAsܖ{-л8Ӝ$o]֤ICٱz.-ePID:?NK3󣊋+p۝͟rx?O/Ls~-#igb$<%ΓS OkN=Qr,EYh\et^TtkLP6Â> 6Ymuk?J4rQU[[FB<Ļp.+5-Gkv+W.ߖwFcNM1!Z-YKb|m2U6L٢y˕s}Edut'OIaSU>L׉u.ïLsʥ@6=(mș73[1jyF̴M /eTkJ:@W=fj{ck^s}#ѺV I`nHeT@i[]}&7F2ɬ@_C92 'k7޺}cX,nZ77KZy/ջ*`uXeLIJr!QHA=C18Ύ>備U.Uj֝n:=wVɴM*&Y`8oG{J ^z)..xbs9F^ʉGqr֗w ЭZC:(%c9Gqf%O}rwN-`M5GE2+l2j,7s|] H}8oݻ:2G oquWxlvPYym)e'ioFrVZ.q5Fy*-bJt%إ5,1Jyv"k`w? u2}}[PoP+KK@UvӼ䇥ՎᾟL}=a$)^S?zRgr1>;:u/v+Z&%`&eiO ,G*$sWf9y-?$;61]G]_DP֢D:;LOVKڱoo0u JwYdQ<`6pvp7[ =xWh-pjtu5'x&J1d LnBۗ2c /ݷӦqYnc&\{5c-P~,=r~ (єr¾ߗ72otL+<Ykհhgql 8{Չ7g?85y y5{lhq;y&kcj.JT5ft UVآlwN76*p b[patmr?{JtQn f<9]D^]s,Цftٳ;VR%MP<^q݃l3>!#j]WoSpC9:ϤM%t k%&cl4 %|h8속Li;6,}%noR˱qes0Ɖ_ 2RIV{wwͦ28`(zTG7( .Z;;|tS'R'hq;EEA- 9?OR?uS> ,2OSEg{OYTPbw{7O<ÃS4"5Y-ED hyB4̫?Լqp҇DtBN26?fc=$*}"K yki ڌZg]KkCgsVnD,'aL29 L[ KVPŎU g:+;XEegCeH%ى`"(6}S1IL#HsrC25[[J_SG?/[/H^"vq ~%셣YI”?T-gciG_! -A51p=Gz$T6DqRASj P*he*{8uliwO:GMOhiiz"+MY?vitzw28:%gD{aU,3?y/HRW&j_vFTGN/ Xg!x|{" [BOQdIZp!NkڸUY5X9UHTqRVN j;~T6sctjV~#3ME} rnv-u\E*e2Q^-8J^(q &Ӱl/tM Xuϰ{H3Ũ㩧JEZq1t]t9_ [ Su?άJ3~ "zO M+~ ө3&x,b,U:´x#T:nԻY 'k4`O`/(Qqt%xFJ閱/13Ixtk?oWGRڝʤ7sU3^ &*u.!AR@6K2q.d`I%hbx1Gfa,Ϳ`U;;\9˭|hsPUcAgWYbG h1Z뉥9!ۻ%:Л͟k4;g) Cj!̀]c~%i >1nw<o bI#Q!*&?KRHypt+%~q;2B\B?:RGãTS$Ý~/O{\LYҩ{TD(;=L+ b*q.l#TY$O.m:5f܃ e;Ji64ۓR#P@ϜL)~vEcl DiW؏ȃs碌AaQup < "W-TX?ӯv_ܯN.LVe^'QзbVJ:A hV)C2UcQ#${4}ެHf0an3d86@ !_(bE"niֽ%"٧_tv, oJ>'s9o s-)>y:0)oCye-py~qKSVxC\r#Ki:e&Aȉ#PdCb2Qh"fTDcq&. C_vJ?F*Ia\)KbɠM'3Һj.uoݑ9 /XE觎W\>LLqB0{.;̶+:.ǖ3`,*}{@IWo`]^*| EqE 9H/a QP(H&9'ކ(P:0b埩} ohq]V6  *8k(D,]7y?TJ#p@hDۈ%LqC0#=Ùeb);<%exwV QWhY{9n^=1`e*fcBG vrՏ[M@ވXEO&cR*څW%2vclBEy ?81lN$\ ;_ضE'xv17};=<{e' &F"nj,U]YXZvL*uW*(ȉad><׮^+Ni`O}l@bSr%¢ z> 0y<-e#=G^KB]$EmQ`榯0+:}bl_ˣ-euB;tR{c%{\s!9ܦQ7=e.mNy~뤨13)R1A1.Sml21hvmUχḒFvipWٿsk/3:~y,UVlwVyVGˁz)?٘>jAWV$BL%Jq$()QIoR^-FU(!!$VQ7Ѧuٯv:oKKI[́^[@|0Py}ܡNGbɞ;Wywްb HC\#I%&STW{dv/tW K DNFzh3(br7JkE)p}QU5Š6=-~40`-Aݝqgɿ{f\? <,:=]Lt ;D? W87ې.MF}yjLkq)\C1]CM[ ONesQ:t;?vN|ͮ`yk\rm`V{i=ITE#}*ԏRэNj2(׸7E ?%ǓF0/92v.xC4'@6hQ{ ţ0v1a Zu@I7bC,1[Z\YnRd(dNu9ڒg;ɏ#7 3\_,|=&L|hITXrhSOmu2NoJ»43*:pM (*wiy ;e>jC1m2FE$sjDDqyUg8 ب䱅#WT>A'h^:r,\Ρo{.`olYD-c^]\3d %[OY,N:t:e+d'g\aT]{l,QCJɂG`p0z;=r79]{%;.֓9~Gd?nY 8> شR/WsdG}U}r[5vPXal=Y6OD')!<^10j^%$a #>z5vrj6a"T_n̑OҝlaN DDFϹB[[oj֥lOQMs~ߞOǥE8Jȝ0?F) yd$ɂCNE?믐' }vl(9Ő,|r_+#Im7`Css ??̝" DⓅY`F2N _p㷵w_ݻl?/R廴Bw%|';a">y۷&acrqg$yͲ/x},arVG{ZktPd7)ߦ8F!&BbBP3U HأCRh^%n'>noYGES@qŵa/̪( 06p=͟&zV6#*!-/EG]䂭W,'1_PמHd`j_ULiwՂ>96v]LZ3 jz$ԇ4Op.=nIXKvl.z9SlweT*, `[mwiɉ,+Um%c:$ DF4hadK/\#Ԋ=PGQI:NeQQP [}pU0_ H"X׵#raH)v([Nl?`H5fypQf|fSOIdx6&f҃2(r;n;MrW6ZVCk޳0hi9nU}l+\dzOf0#5|ݧW[Qv J>Bcy sPm9[s%wd q TQ Ǐw6^/xxLRtk\CR@[1--=n큿^/ M*BV7,(][@|DYW@b2tj[U8d?l7iC߹ARҫ)*ݎLb?P[01M$Z,|:h9@ Iԏ.nʤ2I"Hk[e]"KSHܮ3Ѯ h`[6VMk˜F{xidAZTD:)~F̈yKܕ_}=u V(E.wBp?nh^jrt|X\cBt Q~Qf3#X H!#i$9/)_esY_ mv(ւULf`y)D)}l_|a|&9U0-BiuQ DĶct<k 8WrM $+\]{vӅo6>a- c}Me2^A~(l3X3}.zqh`;s#+-nJ y2#]d/",<ĜK3PPhF`v5ԗKNŇh򏪉~XR쾤f[SI<11# rG8[VǏScA3p`=S[*kyʗn<,|Ӻ2X6,8\'wtr!0YLO?elKcݹS#Q5jtO}Ǧ* 4}htbvZR: saj" a^qijKXpGw:(:T%!KvbQ3|pcAΪ~WQ`BG|8|^5IpU .O*WjAP)\Y,EL%w:W\Z4~8 ].L-\k55m䱿?" 6tpIm@d%~gSF,ܬoEvz'u4ugd,jBȱriD8$ ac+'S TMFTh_:4=m[7R6"BUJHNDK2`[)m7,&gXF~B]țӛO$(v?',1AA>C-A̽8vc ݩ чLz#½d31E1R+S7eg3M,m - 1ږ{V ~AX}-UWzI!G9c\{gl?O1e'/{ڒ WX)¡14 'Dd*6UͿޞ^vE}c;BaA o:^Fe~L w/ ǘxH*8R;MvƁRӐ8 xms"hھɫT`_bۏ/erW Hʻ*sU+w{;/ ,&ПG :xg5)JH._)AքCˮ_sa8]S;qM\gKn$Wݕ$ɡ#x~bZ,Q-6wuOrL}\Rۭǭ_|8}6`=+#$ʂNtBpVY$eᥧjYSOJ]h''异uy]{=vBb5gO^k)XdT31cDZzUyWkR%7:%.\qW(5mcvVjY-a/-uY;9} sWQ{3\yFuݱ旅^4ꗠ;Cˁok_Ek^7te'F9p?vimk /}6%~AL㬺?Y)oJ_qЋ>"Ղt%>El~87/f_P) MJ k!jDĺ8``Ç=wI-u}{(,VEX!dߊͽM[*^ޫz{ͭ&rj=`>;M\L~£}&3˛OA)"^O *9!*Q}r vم.K 8A,qdQ%XN:U`l\/'TyS<%!5ۇ^alZAjJ$94N¢;P/шAhEǹͰ\~ʎI Sdeo qٮ1S/5Fo{O@4&\Tu^#walK@}Z'%n+\ӻJ3x\W]?8\ψԀP}8!`+jN.!k%,ad*#%#`;7XUgmlϷ [$?2< e˛"?2 *#N[{6PInҟ{oN-^/iM*"ڷg{nJN? ޭ\լӜ r'H>g>ZG%(69U;ZꝊv%w9]@Jݮz^~,EQV( %KP]E\ϔVR>`G?VOM/o>ge>16 (Q:mW~fnֺ$غuӈ~s3g "~jK3`l-rx_}uֵ+ | g35UR:gbsVܟW?:2JF6}sHK`-@5WUb6l[scȥ:ۑ9?2)q\13s}ر*F0h(>"@9m|5M78e#=FסŸ]'[-IE5?ĻYY kL%.m=R}~o2i-<],EøͲ(c|"~拭Xۙ!6 9T9b0&ep'LURinΙ]=J-Ffk^nVJ~_h}O~47ձ^$ĔGq?.-2uK \V(Ҵ+MSEʁv#󉀡ģ)ҟ^m[DQA4Z#϶?O~',~ꤖϤVjͨCzyy)uL]o ۘCh*y1&l:V˳)8[\(OS5C2?_EKdZ#L8T|U)[g_W/dpɻnK sDʡ< ph+mm%:38QvKVb,WAdXW?%H(ŋb=(QvVWl̈[,'_hw(rcF**BңQV0%F -Nل|l!#n'jx3╉Rw0kQF/wY+yQ~3HRceVwh? CgY*O˵ҫ(,X$[Nϻ,+}ZjbjҦG|j1AQDV) ιQWf~z6 b*F +QvEWD',/~)1 vbA,Wѥ&Ri )&&ŠXn Xle7Lg4XKKbjL }SСƌƙ4˛` LG e\K g}0 t9z>쌷&\1) gʶi tZpf[1V.8z${{Eq::ͳ3ʪ@$1Ez[lbLSX| t,+yd{{p*䵡PxXH(+ 0iqL+(ͥ~Z_59x]*SS=M$>kZ- Bc>~}sk"k=ڃ% ףx|%ي֨"ȀPl|7hD%LJDb5,@X bT &imEH頬jc&+$$EA]SҪji*Eb QPAݢ=!QYt1*YX*XȠѪ,h*˘`$ofѤ[ EPRQ 1b1Т*+[ZQLlRUP h,deAcWUAEE;&1b ZYTJTT(",Ee,D=r WU vhic #FDPFFnTE"ְϊE8UF WYVe-="$?o՟O#h(1 V'*10&Qa)* .}WFVBRTbZDebLV_Sx_@=(^/ωC1R>`=WW;_mASqhX[bϡ@UեsqՙSnaV;,DtwWKzLBM:'жo[Ot99֓ X(|mVSjɯ,b:)|Zoj9@ e)qiTf^=+bhX7x&c=3 DRU|7&-bɔ7~ˠ1DWךYtn5,I2~G,A +$.PX?36K? jE@8Z׵09[P>ڢ(iSC*p TCBM4bȢET,B2}/K[oӴ㇃kX:lD7n 15^ K4ڎ~4ӷ";L*\7Y]2%ؖM|=D'އvɰjCڵV.}oYxQ"嵧LpQĺۣl`bAF^ 8H^E͵br0eTYZ6sP0Qb|ĩZpqasFV0AKس1|7 g 6(.*|,ףPy,LEVSוN"ϥk ^$:>r{t'9ʯvၖKwXhm%2\ƥ c*AI0gѵc 1b*S("?^N:Yab[;_-<u갡'/bGtr*;ٕlY% 㕠 jauC9FLͤ.y H%Ub2FU,tūOKJ;6QH $TTIV" lՑS("IwZiN*veP0Tz8O'ZW.,b~2Sg䜮[dʮ3[<avDʒe~ޖvyɳ"Z[O>Y!N{.#vtpK :|{nqsPvn!G*[T4𤸁sݿl1(:Dž??;c>+uTFG)gR%ʋi_.@#Dߊ珙@=ub2'JtFv(ϹP[\Y,!JtuG[3/#3g>+4id)2q%κq+1(H्]%t^PnMO"L3_F(e l!??O^4~|V$r¯}oFw*@̜u`| DzSmk `<+׃mҬ=ڸm=Ge܃dUWZ RkG]r)Fϱ@uS('G]m-N bU,Xoȶo,r\́hkq2"pe[W8S Or}Z wXotړ3nmͻ[%<ĩ8@4s䷒}#GzЉrhwu#d0T+Qqi{O???2H>(_ɓ~{dӴEfŢ\ROxk*{^У'_Q'e]WTLČ&rV ڟ.cD8A<m ;'\co @sr&n!bOI (Ҧ#L=F"l\o4N ՙ*Rmw߯Z-qUt3C)(i+ $/԰65N RުpļM?Xh"Re3X/G2vtC$h{Iߟ#oUlU:zò]jCo̾NG#qG43s-&-xjs޾kw:oҬ,,[h`g@g USOї:`WP;whZ1Bdv&У*O>r,1G3^FGoyMfSsyg'2akji'&SڲkLjBbQ{k.=k^}=)Dߞ*ֲ[EzH!CʤyA*rzϪ"TO6"=KFH՜(DBKKo+\ Hn&xj[y[7^UV@VI+>_smbn-C6[w OsZ8{i y4i cG&-4f٭U#\3wBYu^J1UޯԹ]gWyyû ]OԶKq\v0GtG C;7hpjRb29o-|{ l9<Y2eKTQooԙX-yaEJ@i*«O"q}6԰v}nѧR(.Zx'Bn|j7J9ušC\CsN]l]F/{y)eLcQŽu6FŁ qʓӺsö="~}R,e$ D yCNJV3VQW"L/[ɫ@6*[X5t>wuh)$#DZd "iNpa>@ Pkt's9m 41N瘧d^YY=*((F"=q}YrIP[[Vd=8;O_olUQQdEQLVR{p:M \bC5{WP0gqP%TR&s9|! f⩓%V=׷SO/^֮G&䇵rwqYNe 3R ՕTo|b$l &YӳK"$2Hyɩg5rK(#{轮#̃:7x~PO=&fad (Z0+n ߃ԟ{ԻpoI5CYxx_#sMƒz>64zl,ow_t>b(gx(6OcފgD~{h"$6Dfx'-(oYSY庽Mw|sC eE ߢa3ˍt 5=6{~A[sާ^5*Vб*Swo.!%""}}`c5PyDJ?ČU- O\z,#XJkͽpWo}a* V8L9zrmŔuV=sM`vo4hn57SRj]krwEZ)_Fb`]+DF j_ R2DB7f!<_\\8 h73`x{|bw;x(zǑđ4_+/Yp65͔Gvy~Lwp!akBWCGKFv>W~~m:a`KB_?5Z'Ԁ+䬡2Niyma}-A|KѭGy[ݯq[@ (! 4miFt]{Ldc?qI A24S.zVm>8"dmx(#X`ru~ 6O"GLqgQvW;^L+|M`Ho7,:#R wXuVi6<ϫɨgD7zg@i?3 4kpyW f 5 *7nwqem/Sڤ+h+'Nk|_߫J`J XZ O=,xw[ m%_94^YNtu/ˣd4_\>_F۟^BkҽYlMkq/krb_#6<=WMd7\US![^j]#Zo26/EHA|7W塔\3P~nEc$d!V8޶~NZXָmf$#rԄDwc|bD}~M_۳,p%OYQA⼊ wzKa{ѴUxHik_G6 XR}q+LǿfE]-K/ 6ұԚIwZ~PsW~k7Y3G$ݔZm|ѷJӯ&ƹl I4wQsizӣEJ!aH|>/dBQ`ߎ?C]{s#6˚Ao1'֖6#`CAΑ#殁LҵQR*lqHD 1J B5G;*fZ䚑zf bxD~: կL}%ى6'%Ťmveq$°Gނ$]Q`B8ӧ)OM(:M0͎4~/id5(H gWNIx+gM6mY˄'(wS3͖\W1CMΚkb'~48W~oh?M=s(^Tw,*Nf/r\N }9ȉ7MMgY-<Vp:+F%|=:.G|\OZYBy旧qipR3ΰ#%~PͰjf-Sy8(?ڵ$s2C;o8|C/zOq@+}%[q1e_Vv7Ch/.hq>v`V?ڿz:.sE#xeLxl^U#;CLw1Qr#O+"nS3heꕀiɵv;¡T<mgIĮ}5GRjv`y]mz$3*m0| וasxNsx"4 .8;n/ճ̇hR|@dWUJ;&:#U]#:~.q gNZެߑa:_-ʽī$>ZX/ oWrKL T.G|l9 "e=q!i2{'(!8eHG+wE`$2T QO0C讷s}J7[3RcIx [2%"~yv:'ûGP)_8:iE#{!!/m~2 ;dM+cE,ϦP`#ׂyطi9,tg"s NT)>{^b af cv+IYVLjɠ"-'q$Y4n~le{u{,j@ e#ӌJ`49֛2N"as<#V(=9ztXe.g%ɻo)h?3' ݅opRSēY[^Mz(_׎7ҷ޵u?2Nf^\jXS z+j~8\H^(s؃ZcֻT.e>}_?ŹG˻?fdL6ͺZ>kZYˍ&kbR}NXnɺtEsHah$݃IU+͎N0fR`BCڣ<qcW}h2_AH K?`q'89u8Z;RRx\wqOE'9=m۝.YYcطŝ; YY.f&Wgw ~@UO@z.U`XP'@ Gykk؄r1j'H!-ugOlͧI+ȦUq&oP8$T$ c<0&y$( X^ /fdACu˲l8αu{Vpx5'2q}>$d9( 8val`=G7s&k>_GЈ1_ryno:e`寡Uz~J!uV*W |ӒXm*۟D82O$:(SGR&Ɔ}v$&Z,"ن02'䪉ONϔ{їK`f֪y֊.5r} 7w0δ:t.EdIعa@]8/%mRŭWn |⏉׿SR ƹ凔}/n<FbC#Dfl9*`=~jT7`SoX!ӍOAUl w/k*Bv鎋~|c]Z97ؗCqiҞ%)E[آI7M e_8|4kK4u4)=rb#6($qe!wcZ[#X[5٤,V8Yԅל|~-C^[b@|V^ou[@\_h(y72[DEDPf>YRVyw h@e1yz},g@汯7X8E?0~qDIÊ`ΐ&jc MAfF'&D6N(4[UrzLk;ooh1Et {L?s[k [L\scmP!_9@߸8bDy 5 SYB'' V@u. 9 6VwZJw92Alps:;.1OjoW*0 8:ܟV k>a4ȤA}f)#$I19MqcPUvf1!o 2nZRF|ea:9o|,m~ר.D],3 /B&yDNfģAVJO=KCTTqp:y(9b&֍66\wV,y;jilf70ՙ10\}P1+$*zl h5N؝ihQy-VQ-/Y`>?&jOX&U?@] o. H1}~xLHYv88_WPHEVsA5aE!]ipgaP+Jdk{")d|p,nzN|s a`YLh%0cg|(BP PTLF)wzhmDG.MˉMF %rSqө^ +/Tv5mãpt݆@8` ; ЌfB_+ی-a4>YKJ1jSHY쮛r ׻xi,+'9F-v,4 Kжq=A 1bB|z#tp z$R(q= !nT 1,ϗ}+do[=H4sD,so)gPlz!%-;HӶH 7BR@$KH4[4R wk0?~yL$ڲgw-$[etsjAބ\WzW͞'GP )2m;)\or֞\2$Q\.P?c PEF#";YbPӦ,xY[qf:Z#'Iz@Α)߇T0@0gyE 'CtfTN:i8ĠK2&p,vyzD/xȆ]6(=|2a o48Cz3BH{g.&`1k5z(9 Z;k/{s1%P)ƠU&JY?fw~F&; )nX?8>~sc3AĒu)z'`DZVTB*6vQ.[8>Ơ۱7M::v0X=a~?ye55±AQ.mTF@Cůqm{;ߣHFlԐsr¯= Ph:66? "SrL'I~v +|0yy15 t}k|?yE Oc"-2A"2<&爵( @!c3lz#=P@9]dWmSȪnjn8|S 5"x׀Pz[C \n$*d1D>,{T3'RG ȕo&'(mKf;;º5贊3HKߔuV;cCŬPʘ?Ԣ13\%w-Ӊ,!|r$W1}'l$:lHz79;UȽwjwb^gvDD< $"L6:'rS$ bZkC+lRBcf]J&f·}5)I;"5x.#%nu}^Gz+}Fk &BeokgDL~&WhP-w=⓶|'w!00;X΋5$Rak%d z{#:^G,j'ԡAbUZ{bO "ElDMZ[JѴ+vu7z@|軜;4Bш2yyuAy{.bLk("}/⦳w#ѩA$ٚ' 2de;x 7%( .!zM2 Xcx:l687Y7n'Md$>o>Uu\ސ2>{ J=܆_2vnmh劘Doح-4#2ُωe4? 8Qi[A_e;8 w.DXmX]5[π h~Eܰ>T&+ޝWqQ\-ඐ2k`!#V\(YE9U[r,5}e?Y\,2/׉0?vQ1S`` 'xJ^ ?M.&;)@L<3qMBLdx&MW$Ȕw@fj+6N;"]{ seF-^#լ^̆s QS{gpߊq x3lcPBXsYZ'2a/5pKTۋz0GU芈1ں&Sow?o]q0mFH)Q1\@+D8'n}Vsy,[文\ ['ƈҮ%TsKe{NVt3u"ܽ6$>xl{;YF0iٰkF:< 6QHodLaO6 H̘߅I=m9ϙq fF.K<@QYn1Zc|}9Z#%<ս:Fl!0$H9}c.gJʿS (>+Ė ?t#>?Hߛs i3-֭kxr;RKWo8*)n,UUw,BV@ 9,nbl32{2Zr)R gk¸z(g.-#RL jrpI8,nIf=C!9#ZtG6P( e=g 'o#=;Uʧ(E߂U`X(ouQjVW_bKr(r#ƾ4-t}[#ivt ƘeW}Cˈ/B"ʚ7J`97Brz5T<ơIAu E@rY dã!zVDBرۀ^JI[ev: FwjY/3 [okX1{:D}CŚҿyk+8$E"[l#!lTV >7%,Ewߐ1=i)|Ds[*aN40kY-F,2é Sn/_MI!mw_)4; Vt?1)_7Eoc[E@m-% y #hWPAr.W  %Cx>v{ZDxkp47$gH m\ܒWZF16ˊcl5}щ),Z,z";TDv9H]ui6yl~FpZWAրDmnsHti,|apeNS?蕆:. dNj )P,[@:Fnvlއn-ٸD[ctJ^:d>=f$C?G"%5lfg讔qLY@|*qOx,") XiP){|%wJnT#{&W{|Q#5Bt,\PyqX*ބq͇QÒ\"yFWcX$Tw,=5аwuݑT=@͏Hae`CKcevF^@R{=Q\>}ŕ]@'V.=wjsR8>$kܝáwg23r,C+.vH^`?piuPð!q,mG%gRx՟mxfZmU뿞z _-6b!mnyfL.^0 ?ºPF-UكɁXBl$tI  @]%|&"q9=7~QA~2u^WfbTUi[C'Jثv9d]nd xh.1wVOaI:wawETV"7vٌZaG$ Vۍ[r1YSg k;%Ĵ'CZURp±9Ԁc̦Rrꇀ1'c%i?0:*B_:PC·TV48a";Ai˕2= X+I[܀-VK<d w(_3 K蚼uw+JlJڃ:FX3*Ovb/j$wMٓq(V"~g}sZwkWorB VV|jb_ƤߵT&]{@( b ١SBGnCSlԮjzZ~}? fmqW &DXLJxɡ^#B*Aąd5h/0X; +4Ju*|^E!'D,pwY\l5}7'^*?f!/c̬PPs4JQϥ"p@즽n5 k;ϼ`jQKay$No/ɸʴV8hphF=kL}=DIj[Jjc)I^sD뒷^aׇ7ڄFb[xҫmS j/Vq a*@cEtȍk и:w 9G{[yŌ!?;M#alC ΅/l}I{jah?y|@9BQ8Kߐ# k8@077{;&rGPUc']lksdlkǐrG+FCTk2eMy8%_zbf~WmIH5L(S|db,o+E9wS_O^ 仮rl\.'1-̦ qPw|/i 4>Ruzvy)=zq:y[~' gӊ#TR@ U&6@Uc!s7"7u09s[D1:u+dns #jn"ysbSXGy0 971ᑄIL[F\|(# PJNGS1[ d 8F{OwP^1壪s h}: u_rrEk;7ض0,Ķ3C J'Hvr}iӢcq*4iM&wh]؊ |# qU/6|[3&t71m,Ph]~O0aO:ozJoiyO(z W9ۛUBuV Ų&xgg{ D幡 >}wQ!\h6.yuj}W6iGU7x6Owa7uȶE~)A|F6-a\f*! ҹK'?g?@7i&DZ`Ӎx>mHlr64'~ĶkyG.x<:fLy/W4J Q%? 4vP32g!kpR zBTL̩!-sc`pN-[_bhMl.CM,㉄vB&\ DQb#k0rJEգ_#PP(I?HWlmGwYO v5vbF&>BubE(W2wsӆ 3SC #\-yyϤ,NC7s"<|ʴ&,QIT 0p^7Pŗr47ܯT4xuD1{_휼ȼK >q ܭLI>` C&&iSboT SvݬAE06cIWzDdY^{*05kWx4DF)f@gs=7r(yoF(7*Ι,6v]:4R8aobbd÷̋uR:( 69g]vעJ=8 3yXW11H)\QTdg{7m[iW]ZͳXMn D.?/u/8->. jG׾8VCx** i̟u2wj)yςCkV3Ui "E5uJM^, 8G,g#5&wFg:`!j|ڴDzdآq)}3N41Y|_ +tyBPS~fU2'GP^.X:7h6Tlg%2)ԮPr*!I  nRP9a~uȹɌ$ ڑ= UiiE/NJgnX]h-w_} ]`%\KYk!]b{ UX xhU6z>U3 `ACVw(p:>8Os"d?,7UG `XY\:ĉ!IzBE<^Xې Huue[]G?k2d1{ſsaALS@(De6 Z_Ni{0V |} !qpwx&6zY0aRi:ғ¬ɋp">uS*og"P^Љ~+q,7QE93$d?ڞ"9P/br KJyχVA WrTlD)Nڧ䮌~'T{s״{+R2=!p30d[M|@2cq"7qKc" ۟pE˧ ȍ^eߋr%y?wQw3"ggk\#z='r 9 VKYܧz#""mŕ.?R,3&-j۠Y{5Wd)"ҽ絾i(S̱IF(}C8c3OAc5AG?܈  6O9)m݌q/80Ot\Ìn!I+5?]xtko& lS07 pƳѐ(AKInSޠsʅE)*GXAQYS1T|2%DXԝh@T .!k!C.^ ƛ*d2Ά}DwNr ?KNѮ.4ў0eTlB098?qmƷK-ǜ7Is ;fVvڱWZ.UjBJ*h̆kYfdqON|K6tX™PuքA!N[>U͚ v9%\T6< U4Vz{^PPʠ*LG}08v!n5%&J$2|9qoy͂!Λq8xh,L $Ҕt!&!"' fcR!nؖe?N4*NȡuS Xҁ®}pZZ ̓Cy<eK_S%јA6yTFY%;Ǘ u|Tj@>-縐~0paG:N"c1\[mP0U{?l5,W"Mp-|[Xͭc[lv +{ P3m{QZAWQ44TE0<.-kaVl`t-']2blݲd)2wƽUo&N=SVjʮ"o2ZPܾf*w{2S:<ά*xpi2sQq B YzVJϿH0fpo}158yTaQ PcVU^Vu.2Ld,I֕DRhqÊ{>~oSz4ab-#lf,3v\-eӠ^DVLeҰ*r RxY;t U JD7$F$̎l3grPZV0Gd?! [ 3e_y pFwI{:R-ML G;wy8o%µHM3(M+O*&}@ʿ;Jȟ<߉ ܧuwyoM GT1̳M?'-c1|Qs;viĻ(EQg33Um*ѻmV( 8M%FT5{cG՘xZ)v9t5/7+Ioj)sF=/w5 b_/lL~ˏ3#j?< n{ޗs))f6eGft)$ao`!taW5p4f饇6rOrH/H4rK< VTjC~\Ə.-nSIÕG4Н? wL&`pb=Ξ&J/9_Cؽ]7.i.E[- ӎn.`NPg&[ @`MsƱ6d%r 8ס M(sduQH!~9JD|>\G< 8PO &IKiNslϟ#K_Of .6Gf* JG]JF\q i-s 1dQ c҅ퟶـgcS˹@kf#YO9Ω'ղn^>=FvbIQ_W@ڋɥg8R㘤ysV͔Kta)20lVc:*Ir\2Jʕ&ʼ&1R(1F=ϊmsa\U=Z=`~Izu |(Mﳘ28 |  Qi8HZV ɳq4PG=sY@tmQ|h<=D.]saok9Cd>-?O/pfOaā\' nMr* kKm$gH#Vj85Qj_CG{?(]]Z AAMݬ ~΁tM?$F'd)'K5۳W0{k--ә9гjUˮ96 DtH=TlY\ӃTkJ {7wbEmӧ`kccT@?V9j{obĂtn RFy<Kky$ E=G]sD Uh U;71BR{$bZ*5g1赺:'1Z$/ȥPʫasj(SkgeǎZ wCѵ]\z&#FiA3T}|)ޘ0!K֘XC$un s8 )C-%^&ꕮ=yX5U#}:~ً&:'10:T\*"u?{\u)Z^`wv̰L+:| vi4L'kVR.ﹺ! S{ ]g]nNs1jcaɧ I_Q̠xσ X`>!~ |UszZz %#*m UmtMhuN=ˑ%_jHNs1W1۟T"({4k9n L؉l藉<"mJOhaP f|%bQ*zgidz.ُ[)]k ,;UJ A:OW.2Ue'0{X-hˆ@Une%Ѽ&(;Icq Z>0MFM2|0u2Ѐgspוi;p/䯝f߹u"oZ|gmX\Yvqtn!"Y1H15UcjCUmYZ4j|h C}(JVv:depU&";h݁\lѰ(^NҌTQA߉p)^A3rH%h}@,?E Br%;2*"Cf35: % zwn&֍3Q=\t!t l Q#}ZMl3Ueo!v{|MVthuoyq/e'$ DX8 A䡜0:A 锌|_x?|nn'@כWښS7$>T|uXj 6/WQ!9ifudžn( QQ3r`Ȇ]h='JIYmsPLV0^lq75@B#*9-JM8=l{ 5]gtrjkGix&:癬]!ҍ9XaQ5tl٦X05ÓY $'8:fHv1C,7?l22i./Ȝ  [+?)'oW">Wdy)sW*~)罎',za(wI?j4FVRs< †]xn v~.q du zZvf>̱*,8bM<&#+/Eml%Zif>`!04dL%% J%% ouBJKh}m(g<7U ޔs]yBixTZ~\wږַ:^-Eh{l^7!CTk|~UXFu0p)//L`(B[E͉w_oK'Ӈ>_p%|F p$ e'tA`(/ֈ[6u57ŵ傰w緾yU?֋q(hPB3nOg3e\DHM_9Gh1Zc^_}m8Tz,&:͠$@PU3t'!iaK%jӔT>3hZ uA_H%goK-mKH gU׉L ݷJetMK ;EZ1~⸔]j3;#aL,}p\~Sv_e"҉h$z;!PxPF_SzM;_JGlo(&1VIhH~ $ض6SJJBD"'|JU}d~dkz>Zݦ>v5 ?p5k DC4 jy/i+N`j|!."{騆I8ַe[ Ͽ@ApN r~NMٺ{ȶ{5&2μΐshR5Q)bϻhq>xW\a%}ji.LN*Zۮcj9 PN霽zF9Z!vA%ԶOM [K}bRR  ;OYԍ+6} HRd“޵p^,UT 36Ww1ׂc_HSTv5q:&GF~Jx{A`_vs9 EȍS<;M3Hnѹ T !rףaŜ-/8D9(BOY'`z<4!͌D8#$W˛*boԘiGlUrՁtx BST[aBǥwy^>Tx5%L.G=2 o+A> t,>s2oZ)ʂ *˄s&cо)x $;:k>w_|c.+{&Ì}&x5T_x6A>Iyrqw$F9=;7.uP Ƽ>f˹=׻{7>.ť .ӕd kܬ>I'Kq m*Eγt?K=qЯyouLMnoM[lܠXۂGu8ǽ9s1"eLgb 6B +`EơO?>4BbݒCAw4+^[T¹9q2`KhFߧn=Yg͍e!%3#+uLutHl|V6NxMPP_2h_+;#79TVu_t ʄVRcEj6.GE.XDU/ףoצ ' Q "44I툓-{c8O{%KTsɦOԤ^[R%]؉O@yu3lơ>R٪#MGv2y"0>l.Y;8迴dI`ְ$vŚJjVi%D H!h| {_ssLvfo[!^b #tLkEd57 8v,Ρ叛Q䕺ᶋ ;xaG4%a_ePUVh] )au JluD) qu*{؂i-ڰkGFgvmpt[X.Tİ[T6L Ky3D.><0^$tMl"4s D|2re,4!l͒4ScsdoR͔+\aR{| _I<>:yL5UprvU6R8;91nZK8-x˥ŊMAfG (;&KXS!wLb蘶GŬ:C}4 <^6w#YOL ?(b5]s3sa`oNj̏f[J"]p`"]Ky,?TwhFөSouܽ,=iAnmJ^FC(犐LB96$,mb0[_ۙn3 ;U.U@_/Id/Ԫ{y"ɤ͖*o'E〲9{J:yz8(Q+.J$bbH7igGt)} +h8抉sqfm΂|G)惣DȪU#v J2Hv`$u4>u&<5  W)&|=6" ڏbH4vZ5j b^ށ:w:vA~ n<7a2Py#9 {X8H~ݚۛuiwoAg:yNCat_tH6IcBbRp]w5XeS= `@ӨG;ؑ zXK Uz[U?mGLL%ȪU$.60od, 8bs'0J6xs'4@Æg!}qZ}W8v<*1^WL&;K)kf 534_JȚ2m8II&®< aq~]kOuy>U\h.fj3Y-YBGv5); '-Ua/6?,%[9S\FӠB:ԝo Mh*u2)ie8Ҁ9T^i|A*:fy!!¿<fXSt}e b( qE0UxRx k,@;,;2f9Qػ I @!S;hR2ڎ`cWSP7AY$c^J(^i,";߃DZӂ2CXww Lg_deGrvP|M~}anVKN㑠YO6G.߼~rR|̽`{S`FZVGiٽLAÄLPn4\L3& a_/w#t3zx5v'PVwaT;F.5#/Jzme㖆v4T-:RZ`X)\sq~$D"lip{G{5dVuGk%< o{~F}Ia$ }~>`?>qJ\OQ-;`A͗GӝGUCO?k.NjMD)0b_"ҹ]XZ& Z1M>jU!$ ;_v9paRm U foQR|LߜmSm.5!%*jЫT9BJUF8FPa%j = mY%%v/RͤV+oƼ0~NC-kvuLY}ij45}R*hRPr)CqDqp2LL܆U0j^\UHT+9]%-Ly&/0t77 5Ԙ&;Ab:M8?; wmiGh8ĶNӯW56yV" , n؄r/Ssd,H`n Ps9uO;A}\[m16(*V:e_a(l{fc=8~߆`;/6 !O {6i~qFulKQ]iUY$1Hup!1ZSh6(ܓ.DU7 6uOty@)2^( .*Mqz$*!vP3@5[zֲ̓̎@E:QN^ XKYN~u ;IossbvTIGX0YKÜ3qDmOӘ:IwwA(Lo$ڱx5 -6:8 @~T0U0u<8>4C_Hf6l+WƗL{Qbk>n[$| Q15*&xҧD;X!ٸza2Yw5 a#.]gRbxN ;WgSrwg]DM–P%#s*ZiKN'eT4%Z:S)v볞wXD@;0Vj[XhfGk5."`Wo+7>ÞU@kpZLkZ̤3+dL*z|lY@,o)-c3eMO}Z\< I2cF/kHSE,E@\#z\ZV!s-R{Iue[=r9)BǸ}u1!p>l}P>k/J%Os†=xPE:t~Vtϡ~iՒ!}١3MFQ֭hLټ/'PgHnvVV \PMVlG9$P$'l L'5X(*53ϙ؄2! { j9$B4? *[=p9RUK}d-Mܕ*4Jҹ", ^]p q0K4=s":s2sǔc˱>T^}ыP OҐXXiu5i& ߨ؈9٢ZOgh>X[ tMIRf3w)aOn0Q(w9wi]R!/'++1+X1 jCC $>٩3ś= '/yF-FzoS\U_9-<{{JQ`ɦY] "ly'u>"FcZK I_1܄DOYc~SgY,|;ObZyI|E;RIN˪),.buo  W^{KKS1#z<([5I/X󰡧W$)vZTƺD@|rU،"-Ntվ}fn8X[ pM>D rG}$Jj4fIZEMx֎3{p6~*Y}fѫLSj-@ŝdoJ<cZlӆH:İU>(-cD)3F{IQeFZlA`AM-GiT|U]hԿq=^:Hqd"7W\2)Kn]ax~<Ijj+9"%z ŋߔ:ݒ4 zN"fu0E$?JZ3#J:dHe8$QbEBE-:zQ©D>JCT*y0PQ%FEC`~_ADA<.3<6 &[ %-olĒs2|x\ 8Hj[:@컣6#,&@ 06GmY? P=~y b(V!bŞ\85$urSicڳ>ZLjJ[L!7?jQLt|px /Nv 61 7h\_c8` x/eEPB9ĴaAw2%֭g@l`TDZ,i8q(lxee.l+*~H,8W %`?gbf$Zc(:'ϔ;%Odh|#PG7=],U[UY\%bB'} ׇ*XI-k J/&AkCG@+2BLY1JRzf[UFdG5[*E`<)cyOkV_(V5pSS׿kʳ*2"ai@zöW>jˮ;Iɔ e-2vGMV^ԧ "mղ#6Z5ql3]\/ +kUuH3]fH@ DC0^z~l$ELt>9PYtVnKpqx.8A!c=)F;v 1nbovU^#TKD>2bO[3sp{OFukv;eyE7&p m,k=ww.&D"HR]GX*4a*&[:K 90 tNR$ 7S!~n},1l )D WVQm\N Sjlm<:)@O8AomԮrbLj'pVb̈́/ARcQq6:`kkvD6xv"1VUɬd+ZT< ~^~gN* Ma֦Oʱ#~nh*)MB#=dx^>=@jD-+l {z߿ &0@ĦQN' WLsƙgl6yTKa Ņ2SUPNuf/˄tA\ UPP1D޹ɜ`Ĵ/8@8V_$bf8MZ3qJ~HR@SkqO'Q*GQ7o 2X0h#{Bu%oo rY{$JȲ'jv5r1AGԊ^DD|4͝y p8ɾVf8>]%A:RS@D_z!P_x%: ׋cr悞 #P/&[LxqH,.;ɀ*`n\7רӨcXIRw7-TH- @]3'Ԛnqgukg$0{m4cUs|KFmn7 }%)1 @*|(ЯfK-&.Gi";=Ѱڣ`Vij{2Q/0pfۦҽd@k~|o. eQh `>!+ 8>۳by,?M"p@q1Hh|Wc*+cM0lJR7$u'~E)VXpTc?e5ޮͥT[g.{eQ' 0b` 53u4i8a&R ))pB%<~NʹWiq.Ni)fvB^:1F*Yl=H$T@OZaѹU!Q=}8|#qcm;h<#zÐ6IF, 4v+0=z0ĮѲDJ Vw)`yAK2e 8?p5~vVkAm) 5rꃱm_q=%2xII搦:9~@G><&[F=n],,"毊yi/-IFC'@($XV R4 =E~ײҏ*L(b3 ;bӿ:[H{I졎޶E^"m-NZFq}Óuߴ!YQXaH>UָB $|l#񰼥/zav. - M =B;BpgWjU?, ٰ[,`6IBM\Le-}nF?[4S}.[,F[sPu9e ߄v:"ء \̐y$&+*~zϡIG7tZMfWS0 -/ *MHDmx5U@Z:G3gYAW4HS!i)L=xX 6a9xrQ,e]t鿏) ;jssL}sd# ?ܥgM~l1 R2o7$#%xeXUTח; uTKț,'+\z1}LnP][&_".#Yй7|NhVs=BYgTZ /~6JN +G-j+~~ƼwoU`j3əbvH#;*75;J m-2%ZI B e%.}_&Mmb SjUd^yj$ =.BIXЄzE]p (*Vʌ%ΟYYtf?nK(Ʒa0&^u!_~(QJ))oF  6lEPzK2 8uoФg]lcrY9zZ}*1yOwn0Gk}v[Ť\ Э !0UoFpltp r U5Tmd<ڍsZ8q'wD bU)M'~,_4xN%ўbAtSZ=xGSOt㡖o C JBt(Ub2[Ϋ:G b,}%,PV5u+uS l]g/lE^4vSnY : ;>^;sQJ]>zE 3ض{81`EE]EL"A շw)4hE)A\)>`|AQZ[ #8gV tdØG@OP¹Oߨg!z8|S bx|`c~!ky!";@84|{rHnao7:gSP`+lSy(OckZ;S3Tq4b蝠PW!FesJ68Z`;{eý |IVA0\ P}g>}9܀^&[{nDQGPu's (9\йm |dQ13*}ya4b7v"IռT:z9>tΟ kwB h; %!ꫨoT|/@-5LX@1+sVzk.=Kn7y35(uF LT *Fهl%T31DH7y:V`%bGb]Wǽ qy7 r)H _/ 0p_Lvii}"Fdz7dZXxK9f9蚢jYMvx#7zrkPra)@&Ua`~&&!6_̓$%7zwRʮb9e(<f9cj7JAHޖ6>SٰI 3B,l&^)J%7bT!_fA"'+B`W8f߾{7^W 'U#aސ2+)@kUJ>#ۺxM俛(@:. 2Pcܓi.:'kthLa4R;*O$-m@eZ{>_P c^c(O% )3b]\JO:tuo^#a;ɣHI{]}DLmv|V~j<\y €+S[ki}i-ݛl"o7e”h\lӍ7B0Ԍ1h7/$Y ]9 "dI 8`d IxN.aD@ImJl[!<8ެK]T2! ;bdn[=G[Wtaq.,XcoldE6fsTJgHE,eo6,doB1xZiGΈ_ yɬ2Cލ2 j SG-I&R?/pUItݚ6BfQu,&n0d /QBȥVĦQ#,")"דIs46F ]Unxҿ-kަL9rqj̀!;)&$0RjEMJ]xC3ڍm(; <~t^'\Fd /FAv]RSpetSay]kI?sYX\~Ojn\vG0$zKusx\ M9_G̶jGT&ி>­a]My8 I2Psq:/9T>OpM4[Gs9{ZNB];PZE?V*?-OI378P6nM$.ňish86;2j>五.J~fW,ߙ!o^00+}ZN2&׻^5 K Z^ `Z^(}{)- 6bRnvP'< 8₇Cy˫#V#8_X}sbkݏjn͘SM@m=xOcx FjLنLAfNr'Its`LyF'+IeD]6%qL 9>poِۆnk Z'=܃ЗAϦ+ktg_u=-M{҂[סq8z1˼HHld\h*E23f@ri(FV+dɸ[ 쯉 E._ {yiMeLU(qD-G@u #e 9>AYvhmX{PmkJƤ@}WL^h΀硵X u&m8O/d7+U)jBs'hc?r8q *69%o !3afNȜgkӢjrW,çP*V\Pu\bƬ p6p ٮŏI0 Nk)M.)l2҇\;P>6ENE_U![i]Ġ]C`blIdhAnspRphr_ 19RGJŎk=3ќ, dGgni:n5-)- +eivy5>PsZiZHQV 8td8(vpsЙFZ[J# GWfD㈫{R&)MUΓsZNʫiԨ9y\6duܵQ5 ӭfxYHbqWSu8D6gyCV#? ؍kKۥ<dZϒLʂg]ڌ:4R2T ָt]L#1Z(rf,ƪ剩D5PoFpA`{)#[B' 9/A_ CH_ܺqxT32{vC /q4*-VG"Rrg@.X[=^8ʏ5>O^c-4ܭnɮ%K[8"BzLzœl"XYG LDŹ $W]C5Sd;̏9ǣՋ?|(|5%rBiVYDI5 cujG8[|% I>M]nwޑWNJ>Hx׹GKq|3Ұ l b6ʆL#OF}%v0\qqXqAoȳ.B<ˆHf?1_x~!G "{W ڋ7 L1A8L~B3C%q}b9(nkbz##|"U2ьJ&!&T^tVuGX˼3`ߑ; w-c@jCc"/%+WnV:RyI4=d"ȐN=/ފe&z1-ǶA2|t+]<\ gTDǵøoHɁ]AM1|&kW50_EK{'a[b'I'#GRjP$4mB u:P5C#IF0`n&5 3'3nPZJ 7jSe_c0PgJ,[BQT,iWċw;M(̤-N t|hiA (#вQ\%-ϣmj'rX]ue F%Gj_bɏI2$d6*RjBt 6t 6߄ЪQ:Q9L/@Yߟ{XtGS:?=Yv0گ) 96sTUZ>i`C:هX`9- ض(dFQ1`{T*Ağr $Isb^{lJ.{rqW,b>F]#LLWЬ0w"<'"/HK8b\|7#0 HbA{Puۥ(6YWZ5 ϸ9m~LbotEMTD Z_Oyjbyq"jsįxwuORտ=kgz|!H*ݳHd& ̈́CZpG%]i]巉DtW ձ㤊G_ S)nrw2IDVo|i 8َT2KVǓgWA9%2c9d=4a\AsNOEf&5U"!i[NîI7 3Jul7;CWg$5.tMƵr ZG*|8񀒄g:AD8(<=Bh=a"T')\mwl[9Z_{3oV9-;CRd1&6vt09}]Kb X.@|$ )[):te+{%x!)|!$<-2@H&`KVqqq7Ed٦)Q+L?ꓰhB<{am @ ڍ%İWWSEy2:X5AIKKodiHUtfAɬs_^uzZ.F$ De' \(SqDĆ tEz+Pg͊m.w2!!?pu@YlNJ½>L҃ι1P[WLy_#~ Ym#E*ju ?2i' <:.&hSry; 1P ͏2:ԍ]FjF>]+;[~+CUe|ݸmwjPJrf )HT4~Xg/8$8P|}c k}zb`Z +: wQ̰DRC9N]\|LXPN>фɺ _YP1懑%ri'Ȫn,]B mbJ .a!x) *ie^.487Ru5ئMi'.Wy14~Tfޤ};NH#ɰԝjQ*wf!{ē ]jlng7aa? JdǧK*9VOl P}FlB+h̒`2 9F'Ai{hHtRv">C*[A9 7n6 a|;I&腪WSM aqf]S{{ӠɜtUٙH3/Y;k3׊W3LyhUxg9*J9+j!WGEN+g _y$I7Jb, PK`GsF60_;DmFx=)Y0P*\}B1ݍ}_A$1E`0V ef+gk>/T݆zXv{LcˤYI_OaxAq4nuL[[PeӉiST?(赚z/NdC:}r7~7'.#k-rfuE*^5 'N'>+ w+I$+[yXxB) "2le8-bͮsWLL9/!$_}PwmUX,z)BxɰMyt*g ^.#kOM/ NVE#SFG7\vv./Eۖevߙqc^Iv$^orRaܑ-Ohp1$Z{:52kmЖdAPpz /?zG` g('t@Ε"֟Fn#k$uti6:)koTJ:M)1&- JLğ}&{?\rd&'Q`e Xjtsbn{)N G),^\"McTk.QCBL9iTc۞Z(K4 t,+4@r]\"33{T QPr&W]T#5k@5x xIQ<,LBoA =O|A"*-`L%x'0 lg괩ړysNKm5E8z)E^͕Fp)-jTl\X>I DH:3EG{V2!66#ԩu>F}gUYK7C}! u䦷X1-E@*TH3)6,6mc&'t'Z5 7av5=^EC8"V˄cÌfN>4kc?"uMdGR͆69bE3 y: [=0#/ S}޼o0-C5y5m|Ix[0}HVPƍz^7rp$GH"f+<]GŘs"/;@bW qnnTͤ+ﶙӜߓۉz-=.$B8+Z62Jh)N:~C-i@X de5DRIN:Ujf0ټИjagQ=S%hXv7CYmC y64en7~DlL/<:Ut ОmU/ѴyYWE#,R]rO'F@p53U~1w1 @uQr;'sx*3i|]d$l~>niIѤڥ!S'k=5ʡnu2&1z!`D}M͖>Ys{ fgĞkQAGsnDpe`fͺYUl4ˑ ^YF!r<avs٩)F ZYɅRM~%Ks!s0O(n*p?=cgnmJp_-(DhPi1M^4kxu=I^SZ6x6iWP3?xvʄOȺPbZ;XO>%mK؃?:wF8غ?5BdaxZ6rhNd0uPa`nݦŜ'O ڴE6Dnx#L9uX|8ݲ eIU< vL|Yiq =+_Ƶ>av;U i0De?MH;yYU5 rwQovu0MZ4xJxK&A;~[b 9%uOU]„͸?_"흭Ԋ2| tM7Z>1u;>,R9g] qg2_cTN4"zmS5mV@A a yB:ù1(3B`9Вd^_uA]ol]y5++Thݶd;j΀}y55:mϱQvǟࢻK/JI%wk~B9%jz3_ŠѾwЕ OޡpjVzX*T7:!F8=+?-+vTёcDJPfc؝vE+# bcr;D%(河$#XFby *^fAD_$MnK7r_b2!_=l'a), :X]}=ܶRYUͱ Tœj _%j#PƗR:2dfç[,#|o7W<(i@<-723!A9~jymqZfF8Lq9Ak`6ŬK%o,Mc*@Q_h'p=]'X # aXgrb=tylՃ. V׍\R,!^k@[Vh`/f?Iݾr_,̓#Kٽ`yBmSC<&Ǡ(6ĒiКy7AW*6U&c62f E/Y̊"zm"ZCڄ#&n\FЦc6\/g-)I;u簦Ain禮X&]tXMFihMRs|`!lW73Ͳ1kA @ XXRȮ1p{%0q^ǣuzt%F9ڂO4V7^(c!3] =\ S5o}?5e]maY [>j{uK /ܑj6iwEã_oX|vEFG#xP&Xxi]U+`A"h!1̚Iktࠋ3͆roc32Nq0\a:5/?X>N*pVoxh`!{ [aٱxW/YGH:ZJY#ΠEVc-{0ōsb-~61*2w RL6wJ%v wb2[ پ8@7"F鼆&r`~c8oTAU n#<3LBopބD]wW۶:&ģ:LopL\'E$xm5]J, ဧs2_h?SFvp@rE)bǶG =;_+%"LOeͩl)G _6,Wx *R *^UvvHr14,kχtUUu 7)[bW߇;/ 7lW1!XuIq-UcBg*iK`9?HYe!s>S[a?ߧ,P|LW&H?y^y̹:o?υL\4J ҔOЙݫ+.Ͻ=Ü٩ 7S(F+JSTBOMtC~jhqϟt)n^s̓e :0lNa&V2df,\| %3x끹!m[y wۄϧ'<>^,oFƌK[10XIƤ-$֋ ?LX7|M-fu.S`]g_ܻ}$0H/>/|/"h[pW /ܵlbB2n-[CYBL.[\E}W5_|-ߧK(:9cr`f!uAGS u>'~g Li]*<2u.ORxU쾎c5aG7lso@eh m/'%&߱{ '=к{pj2ٶo!PHCidwuDdU"<(U-8"'91eӡ^|{sVFo(sf5A#}zىġqN|1}2gX١4@oov`z~YHd r~hN^QY \F)^B%hD+a!}j!8L- 3ra=+Z..?djBlj}xQ>kQ@8>];~IU%YX.0fHIȓ?Rd]Coo)˒5|3FVp2+5&gP@E 6sS㋈Ç誷m`n% -J0 J];*܄-7طk뿥EWP|  6om]vՊ7rl+tAO>5qCd!q:W1ێp|4,[ 'hJg½|ZI$Vda+`)pptO( 6-f9iIއn({[TۅZߣX#e $T,PC~!!*Vk;(Gbtf]a^IDW1h c&bUKΏw1S3(خ߻]OZ@#Rq/+䀙Y- ~K.fg; EG,#ˎ3]^L&0NGS[ce/C6pJ(G32dv?ѥd#:`İMн<0biNU">^E]E ywK}d\5. Exdv] GDȶM:"$̗YRT83\w[/v˓ 2<,uaF؊Z( RAfEn E0 b7j0cjS,2wuJ wJWw!';2I)q5$fk@{oAƘP-w&F3?ƪ8%a`ݛ?X ]<'|f'q,:5{>*z$3WQ"6kiѤeؘr  ݍd.M8U,Ѓ We}\=d} DGU4<_>R^%fk؏BSvoFhwơE۷*TXK,sC%?#1A=2 ڍQal'K\,Pͽ޻QS򷼟6`qd%K7*cݐǨE&pY ٨FO*$B:ܞUMh/azVVK>={P=gfY$?bܦKDT˟bN,ӻX#W;Zr3gjCͮdaT6F R#`q @{ 3-E!fIԘQt>t*/ hn~)l]k=r锊6T #iT%yr/PvBnT|i&U\*gV.m*8L=!b6 F8S#R"`498RVw[@@)&8LFu[=8Ad4΄[O6)$mP=<<#=Q/MmEU%Ab(Hܮe]Y^ÄwQX6P^Jŕ èfg% X}T7L_6a!IŇ9`K9(.ځg,dAFjDsqAڍ!-/=y֚Bмlp:j,A-2@{sJd= GEq.}̮FU;̏K}|)G܅ n(Ua =6,&bi.t=A_HxA㢘+s"Q#nFAk?~Qْ@j j;&L@H~`"{¨wp0p7@ˮz 3 kz `HSi_j{$uJ¡8ck֪,DGa¬OB3lX:EƹXp_)jdv׼NlHsB/nԬ!jvMbui j;MJd6 jC:C=?!~hCΝs^47I+Nݣ||F6>1~B5E8!B<sAȪu0?|2лZ$Cyكs%GaHFzzf>cMe?5 [vKФ_av* ~>IQrx(@ʍj足aö|-B4KZ񪋇a-<&ޡc+FcVp;ڽ:L2J '@ <[0 RyMta/[HwPZ ` oD:[ߙ[rIO<”ץ|!or~/1Fz֦L~i B&17逧3Ķ?}G2"E i=$T8Չ⼳ T<g=巶%q1H ;\Ro:y-8$xQ2}\)k?IC!xhŹ|;E"sm 襚Тn-~1V]ΰM27ݽ 9ҕsSPhq5\zAm1"V0F\,C S˨LHҲę*[Q|@Ax%ȸDHfig(&[FdB0>éedJgW:4sb廯#C݀#6 "mǦ*(Wn#jW;cs{ XhJ"kdV:?0|ecpkd9>>vgo:#?ȱzBkBGs,JjVBw4RosP##sdP10` brhj#1R&Ј>-^\ ,dZr><~9n*a 5;EG!a3H9w a8.<*ؑ106 2WX:Z*rGUK":lBVǿm2Y7,KB(M!DcNFʬ3`J :KSc0鏎O OAz䁇ϘEӪZj zo~]X?jdI?W^y>0y Bnɜ2{ Wqg;Sj̉Gw<l2+7/zב8n|04eN?ˤ:'XNP 1Muիve PA`WnnbHiCi=FYP())/=ۆiοn\&arfe Ca&ZYu3i3j(Òź6 +kɦuvay!&V2/2iM"g#I+7z<95obx⅏+:dp1>?&*70~WB.̏R.R R{kԺ37JsL|~=:z]a]=0 05$I/c-v啙W7}f B$\y/ "\2'ï`/n³[^ẴMT f7sv*4A*386w=HC!%+ Α}2dkAFA3^' {(jz+9+Y$&Tw<ˌ"!kaƎ3oSc ('ŹK3}mWm=tпx4BtL!AJ#chyfޫD;ZZ7S=Q$e7l.lG#(`}t 2X,xӰ[*i˸ bl4SrA]>iGh?oX\4~IPYCHy%dqI"n,SOF0Knh eMJbs>*Bv;i%Ox]o @i4['^ <1Îؒuk8 e<cgP ~G xpWQf1"У['l>=TU |iYI#5C6-3 ' #t ( ߦmwiY xͭgHnH½2G}KB8i*w@AwQeɷh5'(gq E?s?f)7DiX0w.>lr%1w1@KG#QNȀ M*ȳQB>#D|Qn,KgCwkMzmݷ>4S"I2.]͆Ԙک85 f` έ)r ߷}> [@Lʪ/l]ú!7ϑ3TRpF)ŧsc,~%U3E̐ 9)Npݪ6z~T M=yŠZ}}V!tDBO_XXٺJ'ϚUp]&|!EB.}gA.;[ krUH>\%Dԥ1,F /HI4e/;s:1 y>*ub:oYrUU%w&j r{E܀=&+XpDuq^}9G!n]A.̯QDF(葮0c>wG{C;=ǹ$ʷ76-2*Xj"'ޘ$XB:TxB['w`&/|5˄Ƞc ;-%3. ^[|@GY;h,QGXxkiyKPbl)a5,"NRL1j.b zxm jޫp^"0g P$֓kt U&`?x[)3->ݬ%h/DCZ&g4v3$pjMMsA~#'ne(LS?;X'LIU%N5ƭ(bw a~nrdi\"jIq0V_)hT;EIhYZy4uͲR1KjnO*)Z%6+d â\&7elFjP?tD>9MFac2HGJ.ˆ-EHeyZ\P_"/wײ &Rlq5T@,rHx%  ]+;~I . fF>C3 :YQ.'Ҭ==>;1IY T`[kb9+iL֘0v3X&Paۍ}Wgs}S 8kpem¤Ա )OQ2b= P' [s^*rYMw͜Y1BFA(eS"?=ROH!@(nfg\xdLYv؉ 1\YVha'$P![J 抖=ܜ[2\IŦfpMY j >/7IR=y\AƩy{\֠Rǚc>{N\Mw %_DOܭ3e\*uVU;7,W1ZŠQ58ٚ_H46x@k?4`*MР1UP4՗.֟&Vb@@YΈ6Zۋ_Yr{n n\)R_߭$' X gۓVFf3Q=ys|FHw uEM )HOngaaKG](zB[<σC [D9Emm"*='Xˀ3?øz4C>Z5퉣LeL"'-)|Ld8:7h=-TM>=aQf6U#򘴵> Ǧo\I}@Y@W8 L+ ?M` u:-DClӧLg'-D73jF9yցɮ#%ВJվݓy2][zF -zezTB')12xAd\4t:L4` _S*%w%{" J-7шj=W7+%`9kbdKT-eꕻ&GdI|2ɨ]W8L(0ʣVT>]~Z2~j/*&PNo-`5 kI*GA>W[ȿ2X7%WSD]|Qʜ{`FVW3H(З7FP#R~ݦROwrE_bv&G$@)wEr1cmmV/-,dD.k^RQr\&QUdNJ^%Q҂{ aUHpUpiZ@e{NU`(Q8|ݣq"\S\piK0T 3`ސђTe5j̕/4sLШnA<yh7SMlA fKb#aq$ Qb /oM@T0KR3sɹ[{%_,Ҹ~E仆  d,P Ƨ\r30G֯#0'oi/+1*#V917|4jw@/삫27E6P@Ѿܕ.u ?!OaO:@yG[<%1%>.}aM)9R}ڊ E܁;PyLх_K2h>d7X^E!6:#ico]Z9KG8/U guXm0: 6|Nޞ.B,v`3QK P:)S.O/MQy!?{ڎ&L=ߩ*VPɈִb\f3ptYw ":c5 >;:&cM;.4-.!AZԎm%Y 6hCc}(a(~Pt-q:,\;_}&|gG9E8oY1h@ju{q5y?F_T鿎<(K8BёaOSGEwC)= 7l@0#Sx+Yk1ZO`+6*p]Lf,qT`54&p^*sCZP % 7p'݄90պ5b&y2}$G.tĩ2{Vxzɔ\:pOٍd+v驴:5oN,hX" *-+Ye(EX;.EAaIܭRPKFPun`ڛFm'Xl}_p J xL*{"FKEPUχh,`E?BC a*A!k$@58= PlV}&UdgG%T "^u0X-06~Q?L|AOU _&M0JISs-Qj=p"W?z%1Ϻa%%j 2[y/l z-1nDB=U1hD'ԡQ&ݱ6KK Mt@"tv r=A+vVLl/I4Bq z7(} q 5^m"iEmupW5(Uu;>u<ͭxᜮ}>RܔۙcB1`/H*X3!M$'3L]@ 4&}1 Ũ=oGgm'ڮ2ac,d%IS=;WfKt1бya)=bι97gL`^<4@"Nb94FN: MQ ?Ũ+ٹ59oQ|ف|i' ÅI.EƊu8mF{I"K/A0SV<HzH8I Q>Y|䮋_#o<$DPp!:Ms+dtPO E3fi˰w=S+M̺b0i0op6%-j6zuRUྲྀQWT+PVȒ,O뉼 at$9%ĺL\>⬧co,9{Z!05$!;Z ),LF彽+mk/ z!KF<߷*dm7&kgҦE~c~f*^ڤiw4T |ዬ9!ep+'>׾/{Ll7[}MCFO?=,XP{z慿cO6ypB `K[_t~Fi})XK|5&Wі=d[j="f'שׂA%g,$ jsՍ9hFZHu뻮BxZPISlu)cad QJ\B>7PEbSQ317=!l/ޘL3fa"W۠wK= aU B( U[F`Em($1DЫaJVҥhqgh XI&#ZTo*Lا^Wb%(tk7a=ǑZr>vSvu_Q9e=> ibQϱV }gvcB8E7iES'MۭFݹ#Z>+.brP73Ҍ$X^W( ~Ti)&krBG{򡪾j  Π:1V('Sʦ_ћ9Hr #i:Q4ie Ʌ_I#E!_[g,gTFS8 %;TO7|`q5 68YPrjKBMIz"[,*L;DFfDz0}q͉ #vu ?ӥK鷥}]yb*e6Ϋ eҸVטs$D5660-M~ݔXgWtbnrcuZ( c>X"z0av%MrWmBVO )h o%/[8=P@24)ř-B9POT;̽0?pQH bD[H [VB6;Yg#th`=.%xlc`tP@br| &dM&s nzhPTߙo"gUU+\%VKeJ _tyH^.3d0M ÷ؕ*]Zߒ sn g2#Ī'u<\~!{H둾tEʆ*tym$X* .j\W)$ d`A'&I; ހAzρ{<"rь Or0$Kv|EaZ:L%9 ~_^;ST[c&5ʹEy32wP&'VT2w$֣jո6+Z|okGYz|Asoew:ႸX-zdERJPd>Q~ 8!CԘ'gIh"FV:6V6}%2 BCD;lUOx-;}]tTzV (aI44-LU[if*ܱOd V\Ā?=,ؒ}4e}/+u{8x6F9]_#RbA(@*O( XXLg8F@$ D(lGcЬo %G29YZt)±pmL!?@ /1p` QAr:\ŗVY|qwqlhl/i}k0}{)Sa W B=Sqg{5r|$A.IŬsF)]0Bm?d@rMz&a679-0 +'gKg٨DgΑ*Tp7t<0/=٦fX[w|@!B{2saR1o?ɹS(0ܑCWBY{*]nMǚ<v*rqQN$_X)7 ҂FXS?Cģ [vlL2*BRA ˈ.N%ZPRPUbڽJd3 iixr*&{6F=o*K,o UXa-Äse1y =ᾶ$ƒ쨃5_&q ~lߪT2tX\A 9UF[Ga][ %f~\Oh['lO?ُ1{j烟~ |KBmL*Y. qZus60Qy5)5W8g)rVC"BZXgC]Ҟ%ڨ7Ye:%*fw;t?B[6b ygV.oaιM8tqS̹a`eI4 \էGMIr5V7ǧɚ?:C$U}ם̽W$,8<1ͮ97=sc|]rի@"J]16" vt8 O#7#c"PՍOI|p$ⱍq!;.Zbi+枺=}q>ܦ'me0n>/+ә߁ =r3 ~\Q{rŎh?K;E HC*H.=x E+ghCwd1N ]dNB/S*9fBow &x]頳B.Rc͘i+96(D#u7bvb3 C4ݵ;ҒݧTTXNK=6ԟ&[:e‚(ړx?pfE>%J/q :!5 ΜUʒrDxUuk{%"//u7AQA;D{QIORa~hf>=2ijlQ>ίeT5c5f1zف6ߟGPQT}C99eOIԞX|5/ so0p =YrGJqiܟH1 8ˋu5K݈h{ϛE"NIv y1ә*\kMj#bZ՗%eSТV$rG}2üntλտ׹i/IE0Uܭ ;FQ8Oxŕ˓ ZYӟi{SLϲq(5z&F=9iMgkܼsF!C0ګg{VK*r$WZV=7͕wkh7V"@L0ڙ _߁`[l,GryuN5M_@ l%YL.IMiۜ%p4RVno(HJA,jMgJ:.]G;%gz _W.4PYm|$ttTor}NPx.tm@8i r_)." Z)./|lx΀to5mdfX$N=_.,s qNx|/ð<#.ޣΰ:[:y4~) fۤ@u'W NGY2zZ<gBhv"^%lCW?#N2Ac cXtIR?5]ֻ` MN6t󢗦=rAvۭ*5Bw:ǖi-adao5'g])Vb2k%0f,K?tZ qMB#oٙTWxF};ZWtv0 %dHO`(푲hV da(6nqSfmT$(¯,_24 l+j)_ڈJUzN F / &p5"t|mb =*l_sC^.9Uu! Xj}V]_ } $0Qza8%<+14G);"f}Z V1ƀYu"DjT Ʈ:/m6•܅(ͥMOuCCVDҠyiKzq׋lmiR;"x;uZ%꽡w@(%`rQ4$qkpeS/[52\/ɂR[8Yy觐)yxc1ADK#^*1)3.R bcTk880oXt: "jAQr0)S3ր)+U~"`bRHD* ִ.L o%#lzX]s$b$o0ʿhp7֕_Hw/n*gi֯B[ҺEDlSĉ]QA?c}&Y(nqYmRn ,zέܵS=U:I&eWoD7T ^~?q+k_< _^쓯S '@8I±KG=iT7(AY*- Mqtl!HF4B-- -p07טּ3W UXeSM2̩ B~Ebq?`X})p>ȱҫi6YSvG`/8Gđ9V ܔTZ)u%T<lV1ݑv:0s- F׿PJ al_o$}nX4lVtwJb!;>S*>oQb ] 耶vدV<10  /3QRZhaO> 2#zX#MiOM,k[LSps4w\?lD|ՇUmqAQ*E<( Ŷj 6\ʹO>)JUst6j(^x͛A[{<#>I,HFUex8xUĭNZJ^V%imGf<}2u,^41&/%jtå<<~\0G5LwBx ޤic3yr,ͅp*6BOb[z]kW(4r8M;0Oi]()Ģqby7DVib@B|N•{#E$ӳlVϮӰHB9_E DoOµUܼľ, KqLh=(SHOmJo+1eH<{rXՌ*Zy}r$F?|K{֤UOlvή i"WrFX/$Ûʦ#JUpU9ov|8@fi9ګ#dzh9W/rTLJ<+q; =SZDMWgsyzc^c.+6pP~5[>7c]NOkf9k~n/l#vɣ^3n+O"`,(X1>ثn/ V@ ]tT%*wk&,_sBzT0>It&S4 j}:|1.̞2zBP!ECtIJ< 4pvXlpŏ,2yN=~܂mVvJbmDfhi !ļjDGoAHl ]w E1Ei{Ծ=ُ@$`2[/qιȌɆ- oPF=s4s/a$ -?Hr+dK.Xlwc0J=vCg /˫"2 4Vzõ%>kEhr:GZ~Fiazf=i:ڧVU9?Ix?~l]FzIAE&nP%67D`h&S-H=n,\ڭf  '1?GcRyZ0:r$:YdysMetaVʏ N`$"L $"ΌUzݑF >=?n⫾ByK1@d0ok miѱbBN:㋒l ?+2a5Z!g^L8U践tA=ʜV ﯘ|#ׇd#"gS>Nk۾li1N{r6BR=!+GKYLD,,ϸa~`!o(aQjRݕ3r'X[F׆`|N@e3ݟ> E؍#,ցds||x?Naُ3B\Y{ћc9/,lA7ݠA>ydaCias@S%H')լ͟PE]@ \I:p>FGv~t)uEovD{G֦Z äAA]^r=T_K i[j' 6&=' H;c__إV|Qk sEX1sgHUԃ @h/[۹)SU*Oil&ЭO[P`->qE_wQlg'|>csx>%,4˄i`4ubBY--:x^iH@r.K2j7mGoA Hn}󮹬Ÿ]d@e9#PyG0=֨NMffMikeDoR%V au]6 K L5$_+ J1CƖ}؁sj 193tѦYAިA@J_j2h'@ ѕu7_۬2y`Dr7:Oo{tgUܺ-SAm9ߍYd uRFe0!AxŚ>nfB̨%~s:*_vj 8+EUeO9[+Bwc# r-IU6ʃq^岘4/Yυ8ׁ+û|q]Xl."1.kk}SEQ l RZT Nh^Eɯ[[>sMPPn<~'ShcmT *} >.tbFCσS,-Sz IVzqPa.|ڭG Ms\qIurچV@J[~mԅo2}&) wgAu(dOč<)O&0n<$F+jލ {OAQA%W>s6gc=qƦap14i&n#+ùlJ_/E S|k7TǹWʸѰLik*cgCW^x 2~>`JV, '4^?^H[̭fw}f[#lA: V$?& U`%x# ;&f ׳Zw,A 9>LE%}Kn|&L&xoijj(" īCW,CXyI:Eb|vJhΘFb-Ta9=8{5Kh6h;dRqg(ofєiWĮ x~2.لE/3]͡2*i= kZ+eK8hP,l>|JO#HO}n$_X܊Oq(2Vw"-ޡS=vn[L4;-½@e=?Q}xkREJ~${icPLTݴEIf5T6=RYs[N&Z)LK8BZxC>9/y"n0m3$.GO;ą/pmᓗthK[%M%lE>Gq@ ͼ:GeG?/c\%pRJT jnI,sQ$S9p04y3-h%3}zS2en*2Gcmo H>)Mu"X9g KL`d:k<(2AXPs^u:mfzH׏ E8 ;R*RM.9c_7Up>oʅ=2.!HW)-8 pk`GvGMt FˎrlQF 侮j3?J] dn ;- J_U .f\VwgtdkB"̍5n2nڜLA]B|S/C~gs\_:FLRa>7 ?L:]Bu0.Ι3Z*3g](azf wUX^J@a&$85Xxtig`&&r$z۝ d_%X84~G-iaUe@2ӎ#Qlh=dܠ}}MR\d885`5o8z8#īBm 15;Ʋ00=KI); T,BQ7Q;t'^m$v?smk$&ȕZtPXc:+i;xmR:C \<ϭ9ZNД,#zzN rKHS$HЪݺEݱ6V"^h8=gkJ:inƈ73L?c8}l7 `ݖqլ鷱eh+Cr秿3*I198t5ZKnv`c澥E_T4kkYyQ%d梮΍L`> Q/܆:,spj˳]-YHyQ4<1RSa5f.KZlɐv1.}>َn2BPvU`2F= Ej1h'z dlKvqSHm&p/P1$𭞞޷ 5݅$;`HuC q9%cL< 0Aq+HūgL[Ƴ˦Dz c"0@x*CYr_[09pLR4/'dRIb]#q?@znI1n$t nnIuS?ݲ &-.M@K0{ܤ~eڿSu) CMfzy/kvڶOz8yzxE^KCnl&( ˂ N#ЃNEOJF-޻| k^ F3̦f3a/Urcn[{W>#ՃHd̒ %[ EjMu`;{K+m1po֢vdp*Wb+CJ dK)PvEM `qV` :a4^3nh3 f [";)hz'#]ƒB8mu[D oAn+ܢ]Y^SX؞SNUy*V8]~?YLʏ}—I_g m/~EŌY̧qv | " q$% df Ȓӱ38um/6}:g,t4 6'k%~S.JF5!W;.gK W^C|U <&D׃ܭx&~Mͣ7.UÜ:UU4/7"Kvh =i\>uNJ':80 ȏ!| &0]N*M9!Cq##[_MuRRy `!% nVGN0RrXS˒=֢و؏O/g*NvF%F`MUZeMwufC?`'"fFGh3W54a]9_-3I#;]I9,|˸JcŴܹ~8@6J,SSTpeY0{#^Nx!|!^281._\ސ{.8ϝZ[fava؀##3mhq2vZ.3CL ݻ̄j%U}Ʊ+cmmJwdSR0rc…f֛g'Z-+.lL"σ4 :#4GT4 ;ʜ^o v&lE3-C=u s񪄡 Kd|Rds{{y*u#7ub^'1"/ԨYXd4Fլ@-itV'vm0 S ]=bҎjFDE'Y*we7n|BlkEun{|rǍ]P;H*8aa'+jj"0U|-:}Wx`$ jM˦FGMat2WWfMmnz[ _ dn66}" wɏ=:5T& )uҽT7[߃,\!lA/NW5)d@ ih|gZo'/1Z GsҶfG"fR*~%HDS,EYՆ3!72Ȭ;0v`(z`kg@k . U1Y#Y%k>N1L=M #|Yx  U8o5..L:C8FfܿύvnHœz~a]ա}$o4& #~669xlȞ~%g.L[V{ͨ-z2xˊs Zļ4 + ! 1*NL|GȊ:7wy0B C+6N hK,5ع+-Â9~ ]07G*6}apFz4p5k.QJ-+ ٨|"dEω_,.o `I>`$&7Ff{WSfT8+rSO`b ǛE||$N_JanO`DdH1O_%b˙e@҉ljMU&28*y [27 KdmL*2˻gVT?z8,ևwXw/+.@:EPco4!ۅe'EJu/N W0WijLlh42 1P+})oex9i^. Q*U |c.8r,$21 \3vO5h$MO  w.j=Q]q\%Օ*cj𜆑JWx/M-]rD/3m'؃,|Bd(ߕ;T ,8](V?q!F43x:Z^%qv7`fH歋qxIL$$%\!9J"Jv]nRxG~+]a2 Tr4''i18)!};~iPN͊i}7EJ&coXcꇳgt$MNiِv}~g I+*._WaCieAjF?Ѵͤx>^Y\+}ܺ`Oi2U$nnC<C~63I7fb 8=L!)=^}{8תG۽,4Xl<gN\Iqц;r[%j|1cwN9r~;O9{9㎌ī1Ws^W4kT>Vp5!Q?eU7^\_P]Ћ&t*5 "AMU+>5up|O7X/^XA&̱0Ó}9o/L'K]Y3d59bX5ɡƐx#H8#4ۄ/9a3+wΝ$J7aGBlbvȸbO/y!*;'= Jٳ#i(Uă^|{qIv X.㍡@~:{-y~I!Zob`JdL)|c귪^9m׍i녵VSGEm0O_<q[z}ݥs趰{O[&ةcM9A&52~By@&^{E͠tWZ>UJ/P9)KgjpU9yT<~N%DqSD.g,zppRܠ,VgeqS,rjI|wh&:{NAIzœY˸ۼ\l~%b^d3BDe8R}t+RM9$xf)5mNMVG@sǨ>1[u@X ~fܴ |o[6eV;FdqBWc@ocԚW}dYP}, "EB,g,\~m7]i~ f&7MUgi0Gafok\~dp@\eSӛr3EE"dཫ#YX0RtF56W./dk':'^~  y*ժp]-<J&>1pd ګẤ]7>۶lB_@&w'~PtnQΓrT^ x %;.*w BGjLLh+ w_¬7ojQQM-7}=GtFC9M[\N4Gqc;俾Oy.34 A6: ikQI`׵|,D9Vd4VR<#vG˼ ]Pd u)yBDO }̟xX| )0|Lh#afĘzD^eXRTQ?V9< ͂@6;^F,Bj04#!aˁG~gu\r;0zwE)6x&/5HHi/z6`CK)/Жm(<荴Kq>?c(㌠St>6B0'WUG2l3gQ;$@;:v * " ]1@H;f{oHF7!l6>ZcdtLy/ ^G IW}NL|5c!ԌBۋvBTV" ͽv*S5Y-H3QyNOSR\3'P p( ׌a=Q vIT1ȋ]HDv{$dpcBk%R.TF |L)_-tЏ3Ә+D,4i0sj|M)o _ [$ S2=?6" gӔx43Z ݽkmB5r7ađZ<91u'^8fںgFS !;w+XXcoXB4B)HѴ=ًޚ;+qMf`oÓ>Pnkٶ61}؎{ i\p'; z(bi,% \RQr-u%D]sq)vO;4'o`S\y^v) BQ)IxKd΄u|+0r_8w@8Ѯ3P42b$FdYoW!:/Mo4yd_,خFYc7(/z+4( VWͻJN'~^"~B n0-Bvo!jWek۟zf"Ush iKĴ/Qn8Tr#HxKpcx+r`nCx\`) @{cٙ'*/G{jA (֠9X5gB< ]%?FMԡjc*|ɇJa/l6xZ~ϔRη8-VsR~6lp_vs2ة[}b,*л4/F2-RN d%S=?DH3Mt\(א?zz& Hv+u+tY4&I [ (kձ{? v:VBr H Oʆ̟3n oBiKխ>\u)#6-!2x|eI{ł~Σq Wa*sAUԹmWgz&\L.!O~=i=@ mX-y+]ۧxT_n gXP~9Gq=A %Hԉ$ _0)ω%dWѽRC(Ovo ` TS2/6| ߢF=ngƽA>-h,\ɨP ,8P“#[aCc2_Iq]osKV7^ *NxJz5@[A'%V̯V7*cpHG6S?<8%/a />~> =^f3wUI WQ_Vɹ&$cja tKdXXt?"z3dG%+wА[z?RD, pUEPIK{ y]j~{UTD~9`ꈓ|\'FMTC"P%%VEO9K,Z,%_@hMI/ȸAE pyjǬR~:urIKUAC z%i-Nq`3Vr=5u 23VUVm޲1;ZnBDji.ra^1:Nl&N?h0b"PSG w;QTm?7Q>ިm9bhO´M@P8=vL[+ h_T;k]rϸSN"|r 9RMk}ˍNh?$_XnƦQLbjc?aR:j>B)٦4KOIi5˛CI&;on]3żol)bOsZA:N#;l:\iԆl>(=`8̢,PoT!>VǪgѽ셛ZeѪ;eW Ɗ* 5KN=^{v^w~=T)3q( M(#Qj!R/#*p֫]DL~뾕-czImq%:ccJP'-y Ao1EX8smܭ(P>/XR-`'ݨ4÷A LCD L3i۶ϔ"bI2fKlWh ;C..5|Ɛm̆=b`v`@z~K"ŐO ߢ7e@~#l>07|7DP-/cuV!8m1jg(7Y1GGW-hNNG7"ǒMC e3k*u|PڐOMW*e$ \K! \ohu[њס5J]]UCmDLR*^"aq^CG(f ŨFZa|236ZJ(ߛB~ƩЇG/X#ض,v 6nģK2Z];WRV JTgMcBT =txK԰{,>oXIBkx{01t4j{Aжd@Kql,9C3)AˁxƀW^_Ӝ[U3-SSbKHC(Bq1nHܘN+#~cM .$U̮;/\_]_c6t_g*Ƞ WOH$.tGIqSפ Πxr/d+rD] 9-]Eq̲z zo~ A 762{^|nRczWb;CJq~0 ߌnYn `,@Ufa`x# qSBI͒t :> Wo@)|Gy[8LyCmrOO)wЙin.u:dnN"G5  3Kfk9+.ft N)}.Θ" t2L'ڶΰ >rW0Dr S)#eᓼb5`u?NFP&&{;ẕNyfw?I2rp 5g!C΍đ *uD0kdeG'6hBeR9[` _(c]$T;.!dL w~=Ϟ V/'\lynds1׶fʽƀ"-۪_O ݾ3`UpWIϗ2_6ZVzwrm؀l. diA ANE) TjOPbUS%5@WmkVcb][T%Ή^Tz6E U@A 7#\> Ŏ )1NWwJr)M}3%$r0Y]7 Q[ "K`pEX+Py[̛{*̑*gsTJfL Ӎ&^EO7oݫye/;q[,<%2]$jؾ2l x7ANQb,M ERDCUJ(ǂsp.ANYz߂B}gtdlPi VYHX]vw09B޴@`+_BOc$5h\cBIq ?FYNyLp/kmx߅!fp W[ Ft|$ܤy׀~b:ojƳ!W紮 {L?SHf?3"ȯ_^tH6+}/ؒpQ`cF\ec}|}2{dNowj46$F]TOl5xBߟ97Ʃ+{AIڠP[ PovAɸ sir/`o NpCIG-̺ۈ%&MZ ;݄+EVÕCxF4$Ky$b"|qW0FmSVʃyXgi{rH@\Qf.PEW)ȇBB :$pyD)No(7HbM#mSxTa\mޏ0 z_S Nd4k@1 xǹmŤr>E=|q)8ChZ(4 raGW@'&ȮBYN~Kq)GE6dJꅤRX(WCꓔWL'J7e]Wfˤ)5 >v0gЮ+5$ ;ʁbef-B*B"炣ۂc[>Qj_1~ cd ~s>/m~Vؙ\"+ ה vtS*Ro 9MWs,1PG dAr&6BAYpRu_L2z-XArC <0hGVb]E)a/6d@+!+l맿6˪;Jl8"]1ՠ !>t{ƃȨ>D]:ñַb 14vvU%hpS$%\P^IIA5i%昡m ^AN؀Q>HwK_^Gی L/*bW}^lIJ U7bM8h t=4)"\,OàyTe[aF69u#Iẃc][U&@8 ܅^ Ve罺Iv}ON y:E N({ [P_&G9|d\L{G q!307$ qpXK< Aoюzc3lfSaˁzp|赑6,1m{uKD.7k*ScR"Q4LYVWH+Ŵg3Kۇи95!]6|`/w0{W`z9`P[]a6fx(4dE{ WVTÎZm+7(V}qAw`mOr:Iӵ?*l X.Ykc[Y >z}'vƚmW*HX ӛ-̐fΜOQ!x_B.8vcL Ýc ]$ʦ>Y2 ЏPr4k'4WxcKu&Wla Iv+ԥ133+Htel!B{ A^s<*ͷ%3gGU{G^c#j] 1qN"7N_#|y-?L"w M%ů #-[2{?gVs_)_\JO'?l%5Z֮ =/ 6fn.UOAi5PzF'- w  9燂)="B2M >*hxW½`(;Aѽ, ۠%b[9E(ܞ#ֽ~n Fr­n,j'~:F(*|S(AC?[-=`~E@co/zӣx܀ 5Y0rmf:2:6Y7[Fmt >*E\>TR~)7i1ʹ<H d{ 'g({ 2T2=N_I1]7uT>L+/.~c˼y>]=R Rl- g** .|M7>i3R ERpF,:uƦNn`fٲw>PsQǞg>9jg#^6d[Vl܉rC((GŶ7+AR%Y~c1]Ù!sŪ.4<&*=?w>ɭv]:pt3E>F”GK/!<87 e]vF6s#zhV_-87 d(<4h//'rPsm1fL 'hֲUTus)A )E#+\..lؔxA}O]R.ݦXab_cPAj8T"/aLOs%jnDT<~ܾ8=4 {p@xSmh^ )Nٶ~TMDM?=Ȳl",΍4 22|/#\bK1i.e~h376 3 ?_3 QyU;]je wM_)Sk]ǡfP,qK<nZWys6F™A:RyI?% ߘѪJ;Kc[soIPQIl'Db q=PAԹ?FOl1j>"o q#EU'4%IÏ`bT{SRs8/Y/^ZBe 'x:m9[عKam`^> P3["&`oV:k)d8Rfe^|\ԙ$~Nm2f{w:hv!$[C:oWJ$UK|Xnoۡ|Oe߭%R1XB:PB~%L7/KцÅ:$m/g*|Zx@"է<&/7jr3]0nI2>qkʅm#-žn.Vk8E/yR##wJH|Y;_iw^֨[S(s3RljKm !Ku%G8NC 5(vTDl' CFķOxo6QL V SLRZ[/[] T7KYG{F~&=aJjBd^-h¡1-M[J9^7o&+ED\FAfU[(O3Îr܆`$@Q=wtc9W7{Sm0BHneM8(lK"h4yg=(^BiYQs۹#{&E#!trK񡵖@'BO;yE}*oMg͟GȵHW>!Q \K;]V%U7C=uxGUqy|D\p]&uy4E#V>K9|sQm& is}fAd҂%>,ٷ{h $2C]ԽYJ곏a-KuEh <-PpplRf{ ~],HN[Ҵ? s>3~HiYslFH9e$v"Pm~A%[`<'0u֨veR̵gCF_'hS-kѢU3D$.`7TDv=56C|o"]pbtD-)iM@&D Tو'A&N9|R%~3O |y= Ƴ=N=߯2bd!$Bϡ ,808ftPIӧP63loM %vH1>%σ9cMдN ;2SM¯Um{Lc=#-g?hK p>̌(Rld9j2vʘT\~N+Q7#(Y+B42 F'2t:`]Gٌ+\s_ki]5d┖yCh:;#INY#I9dӥDfkџE§ӝ7Ckd|y5U.eoBZJ]7h-G#AZ4g9EN>ܠיCv'%;R/3F=!3CYZKM69tZsg\9,QӝTFie]x?^f#X>>OBY}ij.ϥI׫%wW&iKcQaIjB1L3KzJYVSMEFæ}ti(E0nZϏCJ⃱86bYhɷһrcc@N#ή}udsDEdPLHߗ"紸߱K_lEHcpTyz0j5VQ&2.E%ACU-ڵo286{DV%wfcAq[՝&Ry}p?3G4S7'c|ygFE+d)=Q5d#O'.6 L"54^Ԭkկˉ qvPn6KALEf&ߓ쪂F+xZ1JPLC04Q3UzT??v 2ܦSF_*uNܡCWu{V`gۛ\S9-?(y l!T8܍,ﯶE("N^C۪.4 !Q )oq(&^r eEG&_|w.'|9 *O rPm9("ɠj i{9ϋ2KHGrn30Do…#-`U|5n f 8Ë ͅQ~Bcަ߁#hů=˰KXLȽ\MxbkE+-DvbG (J}$rhFy)rI$aJai7y5sSFɛ׌8J8ʼnR]W3oLj >7OxUr=+>У !􅷬Ca/G/۶6]Vt j>qGkЊ9-wLw k-chx1̸2Lm0Nql0̄+aUPJ>l ʚxˊ)ܭ?[5r>6KPێeJPW'E#= <#f 7j0^4O2 屺k2P*me>1wіgː.ugv=B]ztfԙ+qְZ8 Hm)Ϙ ˈ{՞kuHvZjx8Z[{8O~wT&&8&૲D-:??|R_A 0Ayl9t?4eYxjL_8l?MCQ=}eg$]M~<2#;+PCJ(#gЄ!*Ȋ K98`4}x Zj4$y/kumĽim٠Ah~Cۗ;8 N#QvR@ Xl^Y^0\9A1[kW)wpP̈́R r=GgKsiu#t&7\̍f+ A$v 3SK! °K¿걨ru9SǏb1^n}ߪWi~'oqO>r0ϤFYۥ6۲e?Gv ᡠGVp5uK~`nn]O$N ا3z)rGE2)e)4W L09Dşhe-*FYޭ펋CzRO_R;34a:Veh.(%d5kbcF`(5 ҢP+"$H3p?LʄU);!] 4hV>Vޢ(9S1 )OGɜ/3 }gp*K+j>3qv_Hm:}]9|04\t(^q^zڷճp:#9Ubq΃܅hik!,mB#',C&oNM2s{pKaS \tnb)cZȦwe|]Tai-o@0 U>^:K[Ed5Z6:,f t>-%;\PS++sս䋟T.= : 5Jz I1[KNka%R(V9e'Mq@i>uv)=b?_Q["y$ r2J:=R;roMisx jGxv:8Wⰻ-% -<}T]3 *e^Ҍ<̷v*nR-(~U7pG&.O8Md3}w {.U*^'WS{0Ps{TB`5lwbIv[;h W\Pw+"b]Se+/<‘@*ouPܣj~:E%/GN#dpp)CH@/|.80"< 0SS;NC(rX*-! 0*Q}GNd03&xaMK*oǷ=ʡ`;QA#NZ/G<̖?+,#X`g_+(PqX}@u6vޟEW캔l] 率he^lثNOvP& %-F 4tn墡+{Z֧ /wUYWv*^s:}K'ُ'uYepxj9Z=L LzTp&&fwf NlcB2a'Dt^^2"]E(SXOPDz=";OވN'BzPxɲ;%|RR^F1%ӌHZFT,0Y#)-ũNX)~YFJoz 'sAk)aTk@pMP=|DRbYt EeRtt"Yv)eCA]ٙHk2IpC:2Bx܌ g rI9^*$|{tW$13骎qgǔArVW'/Dmx?5}UE\9|²ԍO~FJS,Pٖ7x?0S6i9A!`i `u@4 dYsO_EڄظXbA .$,kLøہ򨩲rMy<w7i@ ֤eatvb{̈́ Ȣ =0 0Nke{c8Γm4v}!#\վ@YX;;Q  >Gx4-08{pi c: as~VuYL7F%RAr'5`ޚ>FaZ̘WZ-rXJVE.EǒEb \RvUL n R+.m/'–#9u7z{v^=`M_օ| 8$<9%X'`D'fnw *GMCYn;/~g{pq4 1 HSB] >K sW tܩa2|K.SCx1GJe}c#*Zf2xS :mP3#Ä'?cPx 3ΞӥU(`L;$0=Gs4{ѦNoŸac-xAd./ 7*`cg>%2ۧ5Nq{RUvJNޒٷDvKY|rM}I>~Yhde4 ܅i~0M9#ibwyYd^s",2Oa#̙A AU Z҅)1"٢3HwKϑ"d/GASE]GF_gt0cv,?vJ xaԼ8N}e䟧1BĈwD#_f,uE6_ъ9h`J@탿kZ%18XtXfT-Y/RDpzi8!L!L}a͵s"R|#{Q{2|íp%:]{c,r<f~rGEQٸRn;ZG2*17,8vQL 2 Qxݎ\édid>Ft3AŪ4kOף WMt d!^/-Uiɲj}Bgra3%);-KB+ږbt¥ 4g0q+a!Av~BىxObP¾Aߺ p6nq8cvؚgzjwQgA0IYܑbs̀ >rOq%A"껒# N}{ܯG<0faZ^xrvM 旆f⤅[g~> !/31[gM;i,5/_žbߍͧN^o;-{ -B`/tX4mx.jRYmz,bs韗Erӿ)ƅ6~/;\%\Hʨ.3rr.yf-}]ܤQS)>A27!5L]gO~xr\Ec91AQw!&9ub_o=}kdD`KÂ1Vd: y`mNƧlP6̑+QځtO We''X]ϒ]QZ lw\]t,[Xox?o#Nh Gu";_JEvRIv[#r7݌ȽFkG1W3D`B@\^wC;B$1 z1v $j\{c+2 <"${ZOqd(k~w"MhE ˊ?!0y 7xu) ߁h)DOqq`U4#`!mqwG׊ HYW=:@(X):39s듩F^ͱ=%("=CB"E%0Ōwi3YX"pk**EE~NOid \A$EzI)"t BvB4-)w 5mW=W0#A[63s T5CAuM7W+k'dk_~fc. 1J6A?sW>hu>&teQQH[%O uPFu'YdLbF{IyV.M6T5*%S\;a料k+h@kYʻ^\}ouCF\.&,aqRJx=ux*ſ= Z6Ou5Puqa03~TodJ=&m1CpSz5g"og6%(ҰK%aaޯkR_eɅxz\DṢn-IUܾRU]A5>][  ÞF \r,f%!ߡ>`> p7O!J `$՟9ow!c=wPa_FluV:^d}7dܽlgH~Ye ^bp7ENs@`Eyѷ4~qrVIRhB|8e,:W+47=1U<%OcΪ#bL o$g*)ln[XhAHb'3Ca" 0amE2!ZT9OF&DEۮ  YJe<״aNе4H+[ $sdIn,>*^ VKڝbL0>͆VU;]SNzKG* g9c^S>ks'@(ѹHlY=ZQ.}6l#պӐ3'GZ;(4x(!-&m0a۞P/"?^%c z>ti-H:%l0KEOvéh qdvSO"hlh!<;C/@q,?tm5\."U/Q䘥$O]jfk$e?Oğvac0M{UZ`\m7EL=.$|a_`FN%_JɞK|aJH] WI(B$HLTo7U6flXdb.z9u۵nDiTmQ fk7HmҀ C&l)z7vjLΏb0x)3,ߵ11'  JneoZN{Fn\KAz:jqһz]o'uPXE+p@e= FOn &ƧI@"r]0]>nAi" -%^)mÃBx%x_me|J-t-*O{03UoP/6-Ws [>VDuqh D1ьD>ph[P@w)H0%KI \Wl.9KFj%DF1 &'VE+yԱ ќL{{moӾw0&EO~4I{:ԖH BPfVe]pC&L+ 2ɮL1Ύ.|b>~H=P:t^΅CC>5:3P(Iro[OwpESL#vA-2x$ jM<6r;#%w)7=&i|ֱIQ|RO [B0ԣZ՞n=X_߳fZMM&W]Ldw̽, ̞@0j`ƙU*iGR"WE[ fjF$ al>\ fW7aa'|`-Q$ i<- q,3_q.44Ofطs=dD2U (W~7Qmu@FCP3 ϹS_e0IUse6;P}ugWw)b%ΰ螿zߜ!CܰS8>" lXl1̓' c6l!,$am.dE`$ǣӋ8x'yʤV4戄zoн 7%lW, b#{mpdp$u]%˙1j},Oc"ƺl(Ъk.98!Ь.P$R+1_)d]pd Anv<O2}Q`-ᐿ^1u;m9''Y!AwI#H]eh[/v 5 LI4I%J7S\R!Li3'=aN+wZ Bg2AdG(-ءBVuZ rW0^ 3DpKPv/cau<-(~Su{b*ǜp\x.I17+SR#V}NagNǫPT`zM(~Vi6Ow1.-YB:&tA]>l&9vY0rB AD.rCTZM %_6j7kcx.bf`AiG8Ut+PoNTGj wsp7`,}+?Wì:*{Zӄ6zk W!XSG2t_Si?GmKc˴{ a=0OϸV,_9T]D4:yY엝e^_@p)xZ߳=|YhR;t$ L 0\: 5^_Z[#2Rĝg)V++\!FY}5HݍFXנ2Kq7*R|Cm6 O ~4'`ջ }qkە . Ҵ% CZEG<61wCm+M >8y5Jk}T%WrXhe' # C #2$,X:əd/mޟo|e2Y[|8_Yb<]~A}Yk@5$h 5kOf. !͵#}=$휛l4JxǠӌ{Zl^gߪp+vq/>uy[$4e8ҩ܄ 5wlĦf5RإEN&lT>H jcyj?{a5 a֘a߀Ux-])1@W=CҢVt/z+C1yeۻWP6(-C}{ '7r yؿvc`>i Tθ[pA[#S`BJ9O;<2d7d'(E(eFh-L,HT@ G "퐚þcwHByh:lRm_-=g\)[:_&^z"t}ϫj3K[ڦ(vhrϝ-3%*b$5_!wSmN@bZti1tX6;Pςګc Ul02NHt7%7k9'f&x3EJ鴿Ok;t'Ň.5Zr/%{X14mon =c2ƗuK-u@X̅`w?m xgPJiÖK(.H!]cɅM`֬Al&716XI1pp}dlʮtYOeqq:Rx9E9+VFPAJ,D,&JP7I~ʖob=vN~0XTF$&v 5zJ%z[ÁqomHyJ:mA%q-k2M%ҝȤ2k#oC}K3}qx-'m`g~k0Ar5F}WkrSpv{Afбw3e >R*8)އ὾ciS bE6%t[d"L+jh<`_XI?u~O3V6FJ}_.DfF6/Ǭ_yr q;4K&K,yQ#+) $ -mM((Q;M[<ϊO-"ʐ9+~//^F_dCTϭj䪰.[ҤIdІ溪~' U`{37/B e>F<շ߀cn5&%v\ULd ]=Munz D'lfEǩhOo(i\ 0Me'  O$o,,ٟreEccڲ7Q$`* Ht1Oεm{ŝ:Q+y)Zcl4$]:dGklBdJYg{ sAQd: wk"4KunLHO?=g r:0 $&%Zz " H6᱑w7 -CUG]S@qjq9o O8@碗o뭗E_ ֊g.ҏIX~qDdC+󻿘9{LfjY LMQy-Y=u WXVO ƟM`|tii*Ѱ(S_䭈HOl?h X}Oy`)ᛤ-uZbT+(Zg $ ʿ N, ~5Ԏ^[xؿBҶXErMlY>PK5ir32`&e|AH*ڗ6sW$-/m1`jsQ"wIT#þ/V}qޮWߨ]1>8NqDɘL:0\N:+dqRdhx%AO[QH+b~[dTkG?E?.פBr"} sl~__ 1ɘ-G:GL`VKg,9˝3N393풦 VX {VMJj_9وFQ!0( iC̈́ 2ޥ c{9Xڃi&NCTހ78.Hr @i$doE/gZ#nG߳3!y;wVΔW /m>iHWx_^+b.ge>Xg^a1b. Ҝݮ0xS&J>ӾwyQͬ,E4DÓz&8GgiccbBT/Za2A\M+#łȈ1JBCQWߝOm:5mxg񆊙)ɍ8XEh޷Hm*莛Y/vBFڍrezy"v5g^BLe?= *#{r3g9cv,t.fGĄQ=Jv,6{ZH}LъI3y$ J^_"ǍCcK[095_0TAw팂:&l!'գ8%ab":X^,NCXuk=6L@#}|ѝ0#Fg.:ۏ1ItOserL<̙AӺ\}y:Ef:L6CJI D  RKF)O O0!-J¨n o͛܊!33e)3j 2\|U6HÉfERu|;"nHiܼu-RI)Wθ)lK7 &K D[<5ז46O}VF S?;@g؝_1-#Ȍߣo4T^Ҭ\;/dfPF]9,:icT?ǃHp<3zE]DE]t<[Y0^qo(˖SP8YLznw=:g +^ %(<=?'ŻDH:7ywk3( VUKZx9yڢHKh3`*Set=wFvYg@d''泈֑ҋ5å ' Q~ \R]e,"<Z*GVUeG"3n}`N0H1j? Ӗ_ܦdz5#"NQ#Гv>Sfy*[ H]!LW2T)%걨}$vɺ\w4.Qpc`θ`Czٗ$ OJ?3Z~"fnkwMkJiJ?I&\_Ky('\Cv$7 i]'BY|PN-|EȊP1E,6h/F< Z*-KzFo@G!>91{٘CƧ?ʴ`@u"Vk\N8-XCxbFwjZSTmʙ}O9$f/,CE{ õDk59h}0p40S7@=F[OMj(B5}و'ܴ5[ ж YZ