pdns-recursor-4.1.2-bp150.2.6.1<>,+L\P!M@eeeuU{Qոcum L;w~ *4DxCS#E7^Əqx6F+AƶVٽ䅾{IgG-_%l0N}Jh%/`(d%+R[\(G1%zX )ŔlG !0"}T>L0--q)C<{惘D)9ēƑk(k_עr!&dg8 ݫek>Ed?Td " o ,09J c  H x        d  x    H x;;a;(8/9/: /=>?@FG H I4 X@YL\ ] ^mbcd;e@fClEuX vw x y7zPCpdns-recursor4.1.2bp150.2.6.1Modern, advanced and high performance recursing/non authoritative nameserverPowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network. Authors: -------- http://www.powerdns.com\Pobs-arm-7wopenSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttp://www.powerdns.com/linuxaarch64 test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in pdns-recursor.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in pdns-recursor.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-pdns-recursor-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-pdns-recursor-update-$service-new-in-upgrade" fi done for service in pdns-recursor.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset pdns-recursor.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in pdns-recursor.service ; do if [ ! -e "/run/rpm-pdns-recursor-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-pdns-recursor-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in pdns-recursor.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable pdns-recursor.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop pdns-recursor.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart pdns-recursor.service ) || : fi else # package uninstall for service in pdns-recursor.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi+7 p0(F | ߁A큤\P\P\P\P\P\P\P\PZmZm\P\P8982fb8cb72ebf187fd67438f35019589c19544a34ba2eb57a0c76948df053e9fc952a36bbb892703e321a098b90d73bfd9a547eee13b1b8680ef482d6fbfb43f45aa768c839e79e953d6cbc90e14353dc131a5181bfe9a85e93eb3678025716053abc1aae505a1ed898d125c4ddd32d2eb77b91fdd98a0b7c58ceba965f46940054ccf4a38054760b22ad1835068b28c9c4e68f0e1f633af1d7042a2552ec7d4e164a652c935cb2b2fc3dfbfeff767dee77ce13b2a7765a02310a2c120b5ccdf9c375a1be4a41f7b70301dd83c91cb89e41567478859b77eef375a52d78250570afeda621f28f9109f6a42b767524b71286b7aa81269d95fefe4d74b32343d7ff802a350259353d65803f0ff3db65bc7688d250f85b370c4e1052e20413f64a06fe6a0a65980c6229620646fc8701f934f341c07152119e82d9517f521fa4faservicerootrootrootrootrootrootrootrootrootrootrootrootpdnsrootrootrootrootrootrootrootrootrootrootrootpdns-recursor-4.1.2-bp150.2.6.1.src.rpmconfig(pdns-recursor)pdns-recursorpdns-recursor(aarch-64)  @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/shconfig(pdns-recursor)coreutilsdiffutilsfillupgrepinsservld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libboost_context.so.1.66.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_4.2.0)(64bit)liblua5.3.so.5()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libnetsnmp.so.30()(64bit)libnetsnmpagent.so.30()(64bit)libprotobuf.so.15()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libsodium.so.23()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.1)(64bit)libstdc++.so.6(CXXABI_1.3.3)(64bit)libstdc++.so.6(CXXABI_1.3.5)(64bit)libstdc++.so.6(CXXABI_1.3.7)(64bit)libstdc++.so.6(CXXABI_1.3.8)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.14)(64bit)libstdc++.so.6(GLIBCXX_3.4.15)(64bit)libstdc++.so.6(GLIBCXX_3.4.18)(64bit)libstdc++.so.6(GLIBCXX_3.4.20)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.22)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)pdns-commonpwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedsystemdsystemdsystemdsystemd4.1.2-bp150.2.6.13.0.4-14.6.0-14.0-15.2-14.14.1\E@\[@ZЛZZe@ZF.@Z%8Z%8Z@YY5Y^&@Y[@Y?YR@X@Xx@XN@W@WίW WW@U4@Uv@U@U8TܕT_W@TR(@TO@TTS @R8D@Q@QP@PtOO8@K#@K,KG@J@J.Nadam.majer@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.demrueckert@suse.deadam.majer@suse.deadam.majer@suse.demrueckert@suse.deadam.majer@suse.deadam.majer@suse.deadam.majer@suse.devcizek@suse.comadam.majer@suse.deadam.majer@suse.deadam.majer@suse.demrueckert@suse.deadam.majer@suse.deadam.majer@suse.dedimstar@opensuse.orgadam.majer@suse.demrueckert@suse.demichael@stroeder.commichael@stroeder.commrueckert@suse.demrueckert@suse.demichael@stroeder.commrueckert@suse.demichael@stroeder.commrueckert@suse.demichael@stroeder.commichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.dedimstar@opensuse.orgmichael@stroeder.commichael@stroeder.commrueckert@suse.dedimstar@opensuse.orgcrrodriguez@opensuse.orgmrueckert@suse.decoolo@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.decoolo@novell.com- CVE-2019-3807-rec-4.1.8.patch: fix case where DNSSEC validation is not performed for AA=0 responses (CVE-2019-3807, bsc#1121889)- CVE-2018-16855-rec-4.1.7.patch: fix out-of-bounds memory read via a crafted query (bsc#1116592, CVE-2018-16855)- CVE-2018-10851-rec-4.1.4.patch: fixes possible DoS due to memory leak in crafted zone processing (bsc#1114157, CVE-2018-10851) - CVE-2018-14626-rec-4.1.4.patch: fixes a potential DoS for DNSSEC domains via query for meta-types (bsc#1114170, CVE-2018-14644) - CVE-2018-14644-rec-4.1.4.patch: fixes packet cache pollution via crafted query (bsc#1114169, CVE-2018-14626)- protobuf support is available in SLE-15 - Boost.Context library is not available on s390x- update to 4.1.2 - New Features - #6344: Add FFI version of gettag(). - Improvements - #6298, #6303, #6268, #6290: Add the option to set the AXFR timeout for RPZs. - #6172: IXFR: correct behavior of dealing with DNS Name with multiple records and speed up IXFR transaction (Leon Xu). - #6379: Add RPZ statistics endpoint to the API. - Bug Fixes - #6336, #6293, #6237: Retry loading RPZ zones from server when they fail initially. - #6300: Fix ECS-based cache entry refresh code. - #6320: Fix ECS-specific NS AAAA not being returned from the cache.- update to version 4.1.1: + Fixes security vulnerability where man-in-the-middle to send a NXDOMAIN answer for a DNSSEC name that does exist. (bsc#1077154, CVE-2018-1000003) + Don't validate signature for "glue" CNAME, since anything else than the initial CNAME can’t be considered authoritative.- _constraints: we seem to need at least 8GB RAM to build on S390x and ppc64- enable ed25519 support (new BR: libsodium-devel) - enable net-snmp support (new BR: net-snmp-devel) - simplify BR for lua: lua-devel everywhere now- update to version 4.1.0: + Improved DNSSEC support + Improved documentation + Improved RPZ support + Improved EDNS Client Subnet support + SNMP support + Lua engine has gained access to more parts of the recursor + CPU affinity can now be specified + TCP Fast Open support + New performance metrics + For complete changes see: https://blog.powerdns.com/2017/12/04/powerdns-recursor-4-1/- update to version 4.0.7: (bsc#1069242) + fixes CVE-2017-15090: Insufficient validation of DNSSEC signatures + fixes CVE-2017-15092: Cross-Site Scripting in the web interface + fixes CVE-2017-15093: Configuration file injection in the API + fixes CVE-2017-15094: Memory leak in DNSSEC parsing + Fix validation at the exact RRSIG inception or expiration time + Extract nested exception from Luawrapper + Throw an error when lua-conf-file can’t be loaded + Lowercase all outgoing qnames when lowercase-outgoing is set- Added pdns-recursor.keyring linked from https://dnsdist.org/install.html- Don't BuildRequire Botan 1.x * Botan will be dropped as the 1.x branch is EOL and won't get OpenSSL 1.1 support backported (bsc#1055322)- update to version 4.0.6 + fixes ed25519 signer + update root-servers.net entries + fixes handling of expired cache entries so they expire faster- Enable DNSSEC validation by default.- update to version 4.0.5 + adds ed25519 (algorithm 15) support for DNSSEC + adds the 2017 DNSSEC root key + complete changeset is available at, https://doc.powerdns.com/md/changelog/#powerdns-recursor-405- move autoreconf into the build section- use individual libboost-*-devel packages instead of boost-devel - add signature file for upstream release- update to version 4.0.4 The following security advisories were fixed - 2016-02: Crafted queries can cause abnormal CPU usage (CVE-2016-7068, boo#1018326) - 2016-04: Insufficient validation of TSIG signatures (CVE-2016-2120, boo#1018329) complete changeset is availalbe at, https://doc.powerdns.com/md/changelog/#powerdns-recursor-404 - remove 4462.patch: in upstream release.- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-daemon): these libs were merged in systemd 209 times. The build system is capable of finding either one.- 4462.patch: Disable fcontext usage with Boost 1.61+ and revert back to slower SystemV ucontext. This fixes failure to build with newer Boost version. (boo#998408)- update to 4.0.3 A new release for the PowerDNS Recursor with version 4.0.3 is available. This release has many fixes and improvements in the Policy Engine (RPZ) and the Lua bindings to it. Therefore, we recommend users of RPZ to upgrade to this release. We would like to thank Wim (42wim on github) for testing and reporting on the RPZ module. Bug fixes - #4350: Call gettag() for TCP queries - #4376: Fix the use of an uninitialized filtering policy - #4381: Parse query-local-address before lua-config-file - #4383: Fix accessing an empty policyCustom, policyName from Lua - #4387: ComboAddress: don’t allow invalid ports - #4388: Fix RPZ default policy not being applied over IXFR - #4391: DNSSEC: Actually follow RFC 7646 §2.1 - #4396: Add boost context ldflags so freebsd builds can find the libs - #4402: Ignore NS records in a RPZ zone received over IXFR - #4403: Fix build with OpenSSL 1.1.0 final - #4404: Don’t validate when a Lua hook took the query - #4425: Fix a protobuf regression (requestor/responder mix-up) Additions and Enhancements - #4394: Support Boost 1.61+ fcontext - #4402: Add Lua binding for DNSRecord::d_place- update to 4.0.2 Bug fixes - #4264: Set dq.rcode before calling postresolve - #4294: Honor PIE flags. - #4310: Fix build with LibreSSL, for which OPENSSL_VERSION_NUMBER is irrelevant - #4340: Don't shuffle CNAME records. (thanks to Gert van Dijk for the extensive bug report!) - #4354: Fix delegation-only Additions and enhancements - #4288: Respect the timeout when connecting to a protobuf server - #4300: allow newDN to take a DNSName in; document missing methods - #4301: expose SMN toString to lua - #4318: Anonymize the protobuf ECS value as well (thanks to Kai Storbeck of XS4All for finding this) - #4324: Allow Lua access to the result of the Policy Engine decision, skip RPZ, finish RPZ implementation - #4349: Remove unused DNSPacket::d_qlen - #4351: RPZ: Use query-local-address(6) by default (thanks to Oli Schacher of switch.ch for the bug report) - #4357: Move the root DNSSEC data to a header file- update to 4.0.1 Bug fixes - #4119 Improve DNSSEC record skipping for non dnssec queries (Kees Monshouwer) - #4162 Don't validate zones from the local auth store, go one level down while validating when there is a CNAME - #4187: - Don't go bogus on islands of security - Check all possible chains for Insecures - Don't go Bogus on a CNAME at the apex - #4215 RPZ: default policy should also override local data RRs - #4243 Fix a crash when the next name in a chained query is empty and rec_control current-queries is invoked Improvements - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler) - #4140 Fix warnings with gcc on musl-libc (James Taylor) - #4160 Also validate on +DO - #4164 Fail to start when the lua-dns-script does not exist - #4168 Add more Netmask methods for Lua (Aki Tuomi) - #4210 Validate DNSSEC for security polling - #4217 Turn on root-nx-trust by default and log-common-errors=off - #4207 Allow for multiple trust anchors per zone - #4242 Fix compilation warning when building without Protobuf - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)- update to 4.0.0 https://blog.powerdns.com/2016/07/11/powerdns-recursor-4-0-0-released/ https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/ - packaging changes: - enabled protobuf based stats - enabled botan based code - use upstream systemd files- do not use /run/pdns instead of /var/run/pdns in the init script for the rest we have the systemd unit file- update to 3.7.3 will prevent short bursts of high resource usage with malformed qnames.- call systemd-tmpfiles during installation- update to 3.7.2 with a fix for CVE-2015-1868 (boo# 927569) Bug fixes: - commit adb10be commit 3ec3e0f commit dc02ebf Fix handling of forward references in label compressed packets; fixes CVE-2015-1868 - commit a7be3f1: make sure we never call sendmsg with msg_control!=NULL && msg_controllen>0. Fixes ticket #2227 - commit 9d835ed: Improve robustness of root-nx-trust. Improvements: - commit 99c595b: Silence warnings that always occur on FreeBSD (Ruben Kerkhof)- update to 3.7.1 This version contains a mix of speedups and improvements, the combined effect of which is vastly improved resilience against traffic spikes and malicious query overloads. Minor changes: - Removal of dead code here and there 04dc6d618734fc630122de4c56dff641ebaf0988 - Per-qtype response counters are now 64 bit 297bb6acf7902068693a4aae1443c424d0e8dd52 on 64 bit systems - Add IPv6 addresses for b and c.root-servers.net hints efc2595423c9a1be6f2d8f4da25445198ceb8b57 - Add IP address to logging about terminated queries 37aa9904d1cc967ba4b5d5e17dbe41485f8cdece - Improve qtype name logging fab3ed3453e15ae88e29a0e4071b214eb19caad9 (Aki Tuomi) - Redefine 'BAD_NETS' for dont-query based on newer IANA guidance 12cd44ee0fcde5893f85dccc499bfc35152c5fff (lochiiconnectivity) - Add documentation links to systemd unit eb154adfdffa5c78624e2ea98e938d7b5787119e (Ruben Kerkhof) Improvements: - Upgrade embedded PolarSSL to 1.3.9: d330a2ea1a93d7675ef680311f8aa0306aeefcf1 - yahttp upgrade c290975778942ed1082ca66918695a5bd2d6bac4 c65a57e888ee48eaa948e590c90c51420bffa847 (Aki Tuomi) - Replace . in hostnames by - for Carbon so as not to confuse Metronome 46541751ed1c3bc051d78217543d5fc76733e212 - Manpages got a lot of love and are now built from Markdown (Pieter Lexis) - Move to PolarSSL base64 488360551009784ab35c43ee4580e773a2a8a227 (Kees Monshouwer) - The quiet=no query logging is now more informative 461df9d20c560d240285f772c09b3beb89d46daa - We can finally bind to 0.0.0.0 and :: and guarantee answers from the correct source b71b60ee73ef3c86f80a2179981eda2e61c4363f - We use per-packet timestamps to drop ancient traffic in case of overload b71b60ee73ef3c86f80a2179981eda2e61c4363f, non-Linux portability in d63f0d83631c41eff203d30b0b7c475a88f1db59 - Builtin webserver can be queried with the API key in the URL again c89f8cd022c4a9409b95d22ffa3b03e4e98dc400 - Ringbuffers are now available via API c89f8cd022c4a9409b95d22ffa3b03e4e98dc400 - Lua 5.3 compatibility 59c6fc3e3931ca87d484337daee512e716bc4cf4 (Kees Monshouwer) - No longer leave a stale UNIX domain socket around from rec_control if the recursor was down 524e4f4d81f4ed9eb218715cbc8a59f0b9868234, ticket #2061 - Running with 'quiet=no' would strangely actually prevent debug messages from being logged f48d7b657ec32517f8bfcada3bfe6353ca313314 - Webserver now implements CORS for the API ea89a97e864c43c1cb03f2959ad04c4ebe7580ad, fixing ticket #1984 - Houskeeping thread would sometimes run multiple times simultaneously, which worked, but was odd cc59bce675e62e2b9657b42614ce8be3312cae82 New features: - New `root-nx-trust` flag makes PowerDNS generalize NXDOMAIN responses from the root-servers 01402d56846a3a61811ebd4e6bc97e53f908e568 - `getregisteredname()` for Lua, which turns 'www.bbc.co.uk' into 'bbc.co.uk' 8cd4851beb78bc6ab320926fb5cb6a09282016b1 - Lua preoutquery filter 3457a2a0ec41d3b3aff7640f30008788e1228a6e - Lua IP-based filter (ipfilter) before parsing packets 4ea949413c495254acb0bd19335142761c1efc0c - `iputils` class for Lua, to quickly process IP addresses and netmasks in their native format - `getregisteredname` function for Lua, to find the registered domain for a given name - Various new ringbuffers: top-servfail-remotes, top-largeanswer-remotes, top-servfail-queries Speedups: - Remove unneeded malloc traffic 93d4a89096e64d53740790f58fadec56f6a0af14 8682c32bc45b6ffa7c0f6da778e1b223ae7f03ce a903b39cfe7364c56324038264d3db50b8cece87 - Our nameserver-loop detection carried around a lot of baggage for complex domain names, plus did not differentiate IPv4 and IPv6 well enough 891fbf888ccac074e3edc38864641ca774f2f03c - Prioritize new queries over nameserver responses, improving latency under query bursts bf3b0cec366c090af000b066267b6f6bbb3a512a - Remove escaping in case there was nothing to escape 83b746fd1d94c8742d8bd87a44beb44c154230c7 - Our logging infrastructure had a lot of locking d1449e4d073595e1e1581804f121fc90e37158bf - Reduce logging level of certain common messages, which locked up synchronously logging systems 854d44e31c76aa650520e6d462dd3a02b5936f7a - Add limit on total wall-clock time spent on a query 9de3e0340fa066d4c59449e1643a1de8c343f8f2 - Packet cache is now case-insensitive, which increases hitrate 90974597aadaf1096e3fd0dc450be7422ea591a5 Security relevant: - Check for PIE, RELRO and stack protector during configure 8d0354b189c12e1e14f5309d3b49935c17f9eeb0 (Aki Tuomi) - Testing for support of PIE etc was improved in b2053c28ccb9609e2ce7bcb6beda83f98a062aa3 and beyond, fixes [#2125] (Ruben Kerkhof) - Max query-per-query limit (max-qperq) is now configurable 173d790ead08f67733010ca4c6fc404a040fe699 Bugs fixed: - IPv6 outgoing queries had a disproportionate effect on our query load. Fixed in 76f190f2a0877cd79ede2994124c1a58dc69ae49 and beyond. - rec_control gave incorrect output on a timeout 12997e9d800734da51b808767e1e2477244c30eb - When using the webserver AND having an error in the Lua script, recursor could crash during startup 62f0ae62984adadab687c23fe1b287c1f219b2cb - Hugely long version strings would trip up security polling 18b7333828a1275ae5f5574a9c8330290d8557ff (Kees Monshouwer) - The 'remotes' ringbuffer was sized incorrectly f8f243b01215d6adcb59389f09ef494f1309041f - Cache sizes had an off-by-one scaling problem, with the wrong number of entries allocated per thread f8f243b01215d6adcb59389f09ef494f1309041f - Our automatic file descriptor limit raising was attempted * after* setuid, which made it a lot less effective. Found and fixed by Aki Tuomi a6414fdce9b0ec32c340d1f2eea2254f3fedc1c1 - Timestamps used for dropping packets were occasionaly wrong 183eb8774e4bc2569f06d5894fec65740f4b70b6 and 4c4765c104bacc146533217bcc843efb244a8086 (RC2) with thanks to Winfried for debugging. - In RC1, our new DoS protection measures would crash the Recursor if too many root servers were unreachable. 6a6fb05ad81c519b4002ed1db00f3ed9b7bce6b4. Debugging and testing by Fusl. - remove pdns-rec-lua52.patch: no longer needed- Fixed broken _localstatedir- update to upstream release 3.6.2 (boo# 906583) CVE-2014-8601 This is a bugfix update to 3.6.1. A list of changes since 3.6.1 follows. * gab14b4f: expedite servfail generation for ezdns-like failures (fully abort query resolving if we hit more than 50 outqueries) * g42025be: PowerDNS now polls the security status of a release at startup and periodically. More detail on this feature, and how to turn it off, can be found in Section 2, "Security polling". * g5027429: We did not transmit the right 'local' socket address to Lua for TCP/IP queries in the recursor. In addition, we would attempt to lookup a filedescriptor that wasn't there in an unlocked map which could conceivably lead to crashes. Closes t1828, thanks Winfried for reporting * g752756c: Sync embedded yahttp copy. API: Replace HTTP Basic auth with static key in custom header * g6fdd40d: add missing #include to rec-channel.hh (this fixes building on OS X).- sync permissions/ownership of home and config dir with the pdns package- added systemd support for 12.3 and newer- update to 3.6.1 PowerDNS Recursor 3.6.0 could crash with a specific sequence of packets. For more details, see Section 13, “PowerDNS Security Advisory 2014-01: PowerDNS Recursor 3.6.0 can be crashed remotely”. PowerDNS Recursor 3.6.1 was very well tested, and is in full production already, so it should be a safe upgrade. For all the details see http://doc.powerdns.com/html/changelog.html#changelog-recursor-3.6.1 - additional changes from 3.6.0 This is a performance, feature and bugfix update to 3.5/3.5.3. It contains important fixes for slightly broken domain names, which your users expect to work anyhow. It also brings robust resilience against certain classes of attacks. For all the details see http://doc.powerdns.com/html/changelog.html#changelog-recursor-3.6.0 - refreshed pdns-rec-lua52.patch - replaced pdns-recursor-3.2rc1-strip.patch and pdns-recursor-3.5.3_config.patch with cmdline options on the make commandline.- Move control files from /var/run/pdns to /run/pdns.- update to upstrean release 3.5.3 This is a bugfix and performance update to 3.5.2. It brings serious performance improvements for dual stack users. For all the details see http://doc.powerdns.com/html/changelog.html#changelog-recursor-3.5.3 - Remove patch (pdns-recursor-3.3_config.patch) - Add patch (pdns-recursor-3.5.3_config.patch)- update to upstrean release 3.5.2 This is a stability and bugfix update to 3.5.1. - Responses without the QR bit set now get matched up to an outstanding query, so that resolution can be aborted early instead of waiting for a timeout. - The depth limiter changes in 3.5.1 broke some legal domains with lots of indirection. - Slightly improved logging to aid debugging.- update to version 3.5.1 This is a stability and bugfix update to 3.5. It contains important fixes that improve operation for certain domains. This is a stability, security and bugfix update to 3.3/3.3.1. It contains important fixes for slightly broken domain names, which your users expect to work anyhow. For all details see http://doc.powerdns.com/html/changelog.html#changelog-recursor-3.5.1 - adapted patches: pdns-rec-lua52.patch pdns-recursor-3.5.1_config.patch - fixed conditional for different lua versions - started some basic support to build packages for non suse distros- Fix useradd invocation: -o is useless without -u and newer versions of pwdutils/shadowutils fail on this now.- Use LUA 5.2- update to version 3.3 fixes a number of small but persistent issues, rounds off our IPv6 %link-level support and adds an important feature for many users of the Lua scripts. For all details see http://doc.powerdns.com/changelog.html#changelog-recursor-3-3 - Build binaries as PIE. - refreshed config patch: old: pdns-recursor-3.2_config.patch new: pdns-recursor-3.3_config.patch - fix lua linking on factory- patch license to follow spdx.org standard- create /var/run/pdns directory in the init script and package it as ghost.- update to version 3.2 The 3.2 release is the first major release of the PowerDNS Recursor in a long time. Partly this is because 3.1.7.* functioned very well, and delivered satisfying performance, partly this is because in order to really move forward, some heavy lifting had to be done. This version of the PowerDNS Recursor contains a rather novel form of lock-free multithreading, a situation that comes close to the old '--fork' trick, but allows the Recursor to fully utilize multiple CPUs, while delivering unified statistics and operational control. In effect, this delivers the best of both worlds: near linear scaling, with almost no administrative overhead. http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-2 - patches dropped: pdns-recursor-3.1.7.1_atomicity.patch pdns-recursor-3.1.7.1_lua.patch - patches refreshed for the update: old name: pdns-recursor-3.1.7.1-strip.patch new name: pdns-recursor-3.2rc1-strip.patch old name: pdns-recursor-3.1.7.2_config.patch new name: pdns-recursor-3.2_config.patch- update to version 3.1.7.2 This release consist of a number of vital security updates. These updates address issues that can in all likelihood lead to a full system compromise. In addition, it is possible for third parties to pollute your cache with dangerous data, exposing your users to possible harm. http://rtfm.powerdns.com/powerdns-advisory-2010-01.html http://rtfm.powerdns.com/powerdns-advisory-2010-02.html CVE-2009-4009- update to version 3.1.7.1 This release consists entirely of fixes for tiny bugs that have been reported over the past year. In addition, compatibility has been restored with the latest versions of the gcc compiler and the 'boost' libraries. No features have been added, but some debugging code that very slightly impacted performance (and polluted the console when operating in the foreground) has been removed. - Improved error messages when parsing zones for authoritative serving (commit 1235). - Better resilience against whitespace in configuration (changesets 1237, 1240, 1242) - Slight performance increase (commit 1378) - Fix rare case where timeouts were not being reported to the right query-thread (commit 1260) - Fix compilation against newer versions of the Boost C++ libraries (commit 1381) - Close very rare issue with TCP/IP close reporting ECONNRESET on FreeBSD. Reported by Andrei Poelov in ticket 192. - Silence debugging output (commit 1286). - Fix compilation against newer versions of gcc (commit 1384) - No longer set export-etc-hosts to 'on' on reload-zones. Discovered by Paul Cairney, closes ticket 225. - Sane default for the maximum cache size in the Recursor, suggested by Roel van der Made (commit 1354). - No longer exit because of the changed behaviour of the Solaris 'completion ports' in more recent versions of Solaris. Fix in commit 1372, reported by Jan Gyselinck - update to version 3.1.7 This version contains powerful scripting abilities, allowing operators to modify DNS responses in many interesting ways. Among other things, these abilities can be used to filter out malware domains, to perform load balancing, to comply with legal and other requirements and finally, to implement 'NXDOMAIN' redirection. It is hoped that the addition of Lua scripting will enable responsible DNS modification for those that need it. For more details about the Lua scripting, which can be modified, loaded and unloaded at runtime, see Section 12.6. Many thanks are due to the #lua irc channel, for excellent near-realtime Lua support. In addition, a number of PowerDNS users have been enthousiastically testing prereleases of the scripting support, and have found and solved many issues. - In 3.1.5 and 3.1.6, an authoritative server could continue to renew its authority, even though a domain had been delegated to other servers in the meantime. - In the rare cases where this happened, and the old servers were not shut down, the observed effect is that users were fed outdated data. - Bug spotted and analysed by Darren Gamble, fix in commit 1182 and commit 1183. - Thanks to long time PowerDNS contributor Stefan Arentz, for the first time, Mac OS X 10.5 users can compile and run the PowerDNS Recursor! Patch in commit 1185. - Sten Spans spotted that for outgoing TCP/IP queries, the query-local-address setting was not honored. Fixed in commit 1190. - rec_control wipe-cache now also wipes domains from the negative cache, hurrying up the expiry of negatively cached records. Suggested by Simon Kirby, implemented in commit 1204. - When a forwarder server is configured for a domain, using the forward-zones setting, this server IP address was filtered using the dont-query setting, which is generally not what is desired: the server to which queries are forwarded will often live in private IP space, and the operator should be trusted to know what he is doing. Reported and argued by Simon Kirby, fix in commit 1211. - Marcus Rueckert of OpenSUSE reported that very recent gcc versions emitted a (correct) warning on an overly complicated line in syncres.cc, fixed in commit 1189. - Stefan Schmidt discovered that the netmask matching code, used by the new Lua scripts, but also by all other parts of PowerDNS, had problems with explicit '/32' matches. Fixed in commit 1205. - added pdns-recursor-3.1.7.1_lua.patch fix linking with lua - dropping patches included upstream: pdns-recursor-3.1.4_char_casting.patch pdns-recursor-3.1.4_r965.patch pdns-recursor-3.1.4_gcc43.patch - refreshed patches: old: pdns-recursor-3.1.3-strip.patch new: pdns-recursor-3.1.7.1-strip.patch old: pdns-recursor-3.1.4_atomicity.patch new: pdns-recursor-3.1.7.1_atomicity.patch old: pdns-recursor-3.1.4_config.patch new: pdns-recursor-3.1.7.1_config.patch- fix build with gcc 4.4/bin/sh/bin/sh/bin/sh/bin/shobs-arm-7 1548753695 4.1.2-bp150.2.6.14.1.2-bp150.2.6.14.1.2-bp150.2.6.1recursor.confrecursor.conf-distpdns-recursor.servicepdns-recursor@.servicepdns_recursorrcpdns-recursorrec_controlpdns-recursorCOPYINGREADMEpdns_recursor.1.gzrec_control.1.gz/etc/pdns//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/pdns-recursor//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:9544/openSUSE_Backports_SLE-15_Update/bb6c53468f7c3d03e860da9131be0e92-pdns-recursor.openSUSE_Backports_SLE-15_Updatedrpmxz5aarch64-suse-linuxASCII textELF 64-bit LSB shared object, ARM aarch64, version 1 (GNU/Linux), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=ed8df5cf146110146471ad3585eeeaf1d887281f, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=d6a64d02f7eb6eb9e5b7690eda90dd09e4058998, not strippeddirectoryUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)&&R R/RRRRR'RR#R)R!R,R"R&R R(R$R-RR*R%R+RRR RRRR.RRRRRRRR R RR RRR*RR&R$R-RR+R%RRRR R ڠIeNcJutf-811fc144a53add852d55c7bef326173b040241678f1ee50e436ae4fd800e4396a?7zXZ !t/r]"k%I60G`spk <[DVF9c-Y5H&vx{R^C<Í8d'8b|j[ `7$$]DTӊy 7MY\ά#{YJiR#~Ы|}2SO-@q\c;/qNs+]*|h)8XMgaOboLg{Cf@̏Cg ؾ|ʣҦcJAﳥ.ܰDl|mM `G]G7ÐF"yC3CZwVx+W6۷#/be|@ tz#B+LO+ёRDk[fv&h_7wx+YFT9I㤺DT[y m8s1qo2z{:L* V}I⥅8p^CRB._-aR8Y |1q/ "klt/.BLş^v|?1h\)I/,_"/Hč?x ~/< s*v$ K<{e`ʨbxQkގG$,O|D30JmH]LiÖl/lGm^ Ӯ$=fCL&Ob-9mZ[tUZm9urۉ$1Xg\G,wxj"`.v8Gnw&t{f)0[NH ,0.$OMxBHSOt?U-7vNNjA7._^JgT*5SspR/Ý*hkIZmU3IMAjvGpY5vJ~DKx TYk:+e҂+Asi¬֞(M~RV6TU$ڔ;M#3^jaA&,. +F 5u c*dL\֦lZ2~C!Y#:0uUG ̤怢|jL]QIVQ Ƌfү֗b 1(lCqkM2M;*ֺ5[ ;taZI{A%=+ev^Kd f4kvtJje%^6fUI:5r|Vpz׎VK++K_B ߥOhb@S% d[1xNSt{fZݜFxš W%[GN¡(#PGzb@o7be Vt=DPa(A>2r8@/@,8xK$ lF1T:YXDfwf_VUN~LkWq\~V 9£ݳ_ӃGPPB^S'p$(g.Q7NZj} FO9!o\aW]  y0jDS2h:WD Cyb|PE5Ēj] !cz` JZIP]6vpm'0]/ΰ2sw O x?C8-jՐΜ㧅\|LpT,dyCΒ7h\Au`#-]QJڸ `ψ ,#` 4D8Κճe)TJ}‘nj4jW#c!V!r-rȞd| 6<#o]5g m$n8dgKlQRA(D*JdX }i*;V2x|6HX <7^Oxo&FEC2,"6Tk}+ESM/E*Be3Y*υO1^R;7z\*# |).c[)H 5/y!b!B#_Z"nuԕX9V'u.   %fh.'uD kJKPyNLR6O,]bEɇv!XgJ|GL%|k!)v%kq:IÈr sEjJ4!w/0nАhUTH[ر!S0vT},|HRXf nG{y]+c#S@OqE%i>p]gЇoO w&|qkÛ '/=NX)T[k5EZ{uNk1wIdп)@ et[|yZ'ܦ@%)5lQT+0 ?2E I&@dt-|n4sPuֿ:WS@&@O;4iFhqLas̭Zw+ɗw =-S)}"_#"x~aH.ʕjG+vͰݭI_)-ܥ;k?vJ!lKѤ2(-mkt[V4-8{6ܧYJ䑰-[:Zioń'ņ]Uq/%|̎P aጆ){TML٭+AB&z\FTحYk|.qQ̟:Ri:77{G=@V" 7t/} z%g~|[,|u(WXpX,+՟ٿ{ǤV퉶Ġ.k`9>4D+<!_\vUrߞ&0V0{$J*|b~.r-\:h-^:H_g22ٵ>Rw؛^ uqFw@+?o^)B41fa'^߆H螃d Qbj5?ZJ8kG\"-Iǹ2h1IdZx?P ͝is)J*9,SDh$A=peگUDHn5׏nzyeUtɄ$@ײC*Et5,R&b ifxZ %߽#Y/1ݐ"=cx ;\eӻbnԁn5[gLJV;'0D1%y78ui/J4y cG ~Ps5C0~!o['Ȫ,IzsધG߷26)JJ(97 ȈO'oce3;X]a 5,iS+JYEvŸ̛{XiaBY7XTN@vEEwS[2F㿦eh&Cj7$RYM(+yIRحU0kؾK:N& 'AlzUP"+  $HÝb:Wdξ6ZW+f W9 -NRJHM:P~0f#W* K%AQ,&E.^=z\MR]&SM?N+#W$ӹuc}xflJs5/ta{X.Eqq٘mTl#ò%YZs %ͳf7ʄDtT6P ވΈT\96Djm ?540)4SjT셡n+(-0!k@#^7=fiyrC=f+F> (e+]-CF{F]BW꙲wnZ5f !Ir$.@/v@-;A5='O̤L-VLJGdHraKrOtgd( X9u'9K5,W%O/G~cp!zq uGz$ߞ[ {ynvD uǁ 5CumEЧ(MIwU!2W7 QKǮDŪʩJaKH:eSjca#\Lt2+$i4.c= ]b:qz/x c\h蒿 Tt xǢ"vab&аH_rp&]z`6|5E+)2g<8!wwn%KiHJti? ~٦v{+3 @opE&ʍ ;y7f^ܥ~Ϥ ] 4œx7pB,8%TnKu+0] 2ԩ"ȕMusMMQѯ9ǎV>6Y+n T{E~!Ik{'AEIU)ARV/Zq?7`vKwӒE#5rDt}Ώt@(1'ho1png ׅ7S7aT>bᒅ򾨳/ 4l+ؕ874Kl,Β#R笵O'16}{Ӻ6+_ o"PwZAI^􎥷y`Q+;tK|3#^yjMLNٜf^¾1f3W[x;[geH& /O؞RTxVI﨓.XVby1#7r T"&r,YV:Lqm6ԯ>ħM!= _6]!פ.!/13&Dt(^4:xS4hn+V9b-('QyĕUmC#}J51ϭ>>ug[ f#/[n-A݁%k0{2>z(@]cnk;4Kfa%k|:iôg}.0M^W XAW[DH%5N5EX6Ƽ? "d:Ѕe|#ˢL}iQ[}l,ʵ嚟f|[}@@r"v@t)ُO3GF-+L9QxQE9O `GHZ@Qq>܁SNʁ2r= 7Mu^@ 膹051P{@{SO@"Z(e>z_-o/otƺmiHe.0 n͛ ?a$sFm~l!bMx/@ = & !N'rcElsNǪĪ6^r-;s?n(oנoVSNk=<,H@?K9*|)62}&K"z oԮUbQc $MbϜAͣX A6Тʓd G6d~cqT8Er;5ujp ,t3?`yY%irE|EȾTfM`"!U¾ RURpc,_Id%̤&1\au d'*D܉?$ Źg0f+є)=2F$j'fxr]eAg!v9sҙޱsf?Me R}zl'?ߐ3Ch`'+M9lE%ivuapJ>8W BtC_k-ɟדOa?>,[?ػ˕E lNcv+Fv+:omq|4y’1e~>iyr[QIܴ*?CiX^RL Lvf@}4ƿq rEWS$H8:,Ia`0|=2sY irVV"f)O/T]MaO2\[p]Y@ iq3$}(f nR#\3XaΔoz٨x* IنϤd$w|逶Gp͕nJx+ًzǙf.虡u̶9Gai;'Q=Z{&o0(z UCX}wi+hqWB2Ja*db ؽ$DڎwVos|x,Ji]E(B}m5*xYզ*- acG7/퇖myE:&!c5/BLEXGb1$x|Ks);Qo9;F?Ick) .^ݯ΍u)wⲆ8M~P%9 <[~҇8o@rbŪp.`|>ünmwN(AR zT UJ@ozO !x])qWmcO5_>WPB̂ Z2<\YL^_Fz~Ĥ_Y @pH7!M5Y,*B MN@M `C1ٙl\.!w6r;ѩ7ias2a¨㭦 + k2:lRu Gcwi0І%8! W4-4v2,ٶIđ~V@6tt&pOTŸk5%az~Jd\s[ZfqkI?+dnޗr0SbKڟL̓Cl5$C#vT265ME.A%𽨰zݔynwoYcsLomOʦ\HOrW굿g``Eeh5Dpv`Mu4BJQmNDo:xj>X.PrEp&鈇8ef1R *}:h:Pd& )v)"'1`>*ހ3Ѯ΄ehqOl sLRQ4㭘'U~4GGQeGg})%'K1"3G:Yx Ѣ 1-D"B:Q֏-RH'GzLf惬l`-rRVS#W tpi X7^dƝIƝ`$Lr.%ܗQnBj2 %/)ޱ[6>VHɗ늗3ܲO"([ꟃbq+U[vxό".;Q,A[nwG oW1KS 1KB9oHspOWMUdm)+(fݴXBft=UшUHNuz,;:'9@Z)#0aWQ]Mvp\ܠg1KU|'R.DVKQ[%8^T71 `EWćE>mI}$ՙ]#EGde߾֦2<鋘G)|s[hjs=͚50Đl"sGˠ?JW kU&~ ҡscHSYS-Fy 6g:UM]YʭM$JNAט%ck\) ʄ{6&Uۤn\;K@RNw3aH ͦx5[ s!,'xHC_p}p> 1&/>! d9V%ZRY8 njwag1"Ƶ&=8^C4x= ӛiJ 7olvv\r+f+7Qd34ln*Ĥ10tJ< ޶%U+}!Vv~dCxdȺYBڈ. ,;IW|uRŁkA/'t؇kzYh PSpm0[]?HEeXHmx2V)J'!SCk'Bui?h݁HY`If-b_ిma%kȯ,԰"'R*DQ U360$ g1QFFvy)__2 f,')S}vuVQ @PU@#0emP۽!!ZPO=I:kURnYqou5 S|O5w xAհXuv8{"fݬH1 A :K1Bs@녰|>t4b zbP  o4p|:Eg .#FW{!-(ր{z(Wt\rE] B83N) r ֑mwC:~EW>h,cP> j;qQ{S^WmQ}>l$yk@<-82!ROuj=k@̇Τ C)A_ҴJor~6eGҨ#{!oMzY@R X~A;ehNJv茉A0 :5ɹ; wf3t͉>NY"sZ8\wc~y 6p0Cx&5RsdV,ZK9Ko*N}Ƹ'Y݊ PQlE ֲ*^KN4% f,w宇z3xsVDUqc8l M6]+.!_1t9۱.r'ͧ[ Gύ,=z0n`VKFC0if`Y ^D2Jo*,a hdq& ҥ%Ї`SOқȤn@"68]hKvu]JRQѭ b,Y\೏hy hӉ3;]ҹ|*@q?)Cu52w ڮhSqkY LuTfQzZ;"-f)1F <ܱ߬qCʜ%_D%zDb:4F/MRav9H/tISQ?7wsh/ĩ O֠l.7(9O'Deq+PՇ@|EN0ي17+_3~aș˷Ӫr0Zl@rUy&{_eZ0"g]^4raQo_~_eS% `b,geu&l&޸Ds#Ѷ8 -&,9T@cB̰̉zojܵ̀=&NՖְ mK1 ~:O=pJ@*\Ib\EZb4d[nn.|xNl^-)jgfƏ X~GCs]|/!POPb),iF뤣k;lZwJTbrA#7bi84j$ېg}=Ojpo.G267W/rB)YyØ5Nb H~3?A0f|)HZv9lԷ# YU@J82甫ȿ9NB(*#o m1Hgq">ǧb_bE2olS=fŖ,tROA4^w,A%k`lm|9 :ɱ/zkkY x1Ɋta>d%QH%Vh*:L& رGd@krJ%8sQHz{Ӯ|%n?!6bF)5 1љ}_]#? [pT3?ZC?`yg1 2dc+f&a|'Ieh`KJ떪ak*ϛF^5ؙx&ЙY,5յITc/8T,3G۶lA vp}/nO*_y##f@uPo&֪=vc_C&z~ X BV(j7ƠSX³WǻSB 3ZЦTL6s9 5q3‰ջtſZvgc)JY iG滬.@ΖuA0|{ukʃ) N}K~c٭aVG3tŬ(چZ#RK09#dȇ2Um F($ iiQ.Kw5/Ao"차.>)*2mvZkN^vϨ̖J;Z8ϙ+F0<ЛP6֬*af|ߢeuH:g}q[q չ'L1YP%KJ4Czx,rꊏ,v,ȔQ_qp46WѪC2%O1IMc4xrK{qŇ_P?[48=^7l{bdkF]}=Qz'wWⳗUd91l=(HJJʪ*Vtr&y _TRu'h`K! Ee, %o~*iNnpMv]G|A9LP;#R C *2OH#R[ HӋ"MO-ݽ*E'sBaT^I^Mtl6k D}DvS{}B3Hɞ4t1Sgy 4eOl^urWl)o_#/Ci#iV4-\׽A]خUbn-X#S"ybk}R€9ܦ,ȹ(Nt^;XM֝E3viUOEmY_o a^B^#tL~sgšܚ è&h?va=LVü 1hVh5BC,ظ%R>|L]2BwZn< Hts ΐ&eü^&WiBCSR j] N_-)j l_?m(#oP~ņD" DehD2[ʃm7oOuLX)Ǿ.s-,1t,TS;wib<(FO\eف\2HF;+=R/30##iydnʡܮ]Q:^yWÄqhq`F5UC;wHkw5uOEbx[>ɵwt"b LqO_ZAb$FJT503UqG?N E'T`5afMYMҢp<ƲaDF* |@(ҟ吞L1Yܝ 7up˕9ʙfM[ۻ 6DۦZp+T=1Քء Ʀ&dsc-fطƩ]i; W&10|. ԇ]+욠"938T3̾@{E<e9WO4s;%HPg\3p0+Qg$˄Ɗjh5BĜ.&i>+ f'(YH C̛&..u2f B)Q%fRL5-0'S0zFw}H;oJf]HQ@Kg҂5tOЅǥ8\cjUo14K7Y/_K4cIDt0_ ­ 4"EB5_ !wҺ).GEW\Y^|8 JTז iPom)&aYy/A׵~MjQ K :>_-2 1M,L) g=e,J iw y\'{_ guOķ'qR%xөLĩ`#q!$hrot-&u<9ñ](f1, b^G$eQK?7gĘ(Oh|wqvBijoKwJ. //߹\-'mJ=7`6rh(8 \p^x):}Deh1_bxp;N(8U,Fp2$Ŀ/%׹3yXA]g:l^ՒLpnrHpGqPb`}fxxϑİ60'sJAuzv g˲فXo~܍ Aފً NMs5xFX/DP? ;7MBū9ޟ@4IdDsdNNWtRf3]j݂-!~qaLNu_pi_`q=3iQ!߳n9O^kuV/^O'  4B=L -6QJb Ҙ`'u|JDKPqg˵hdBIk U!#|;XWDź˦~P);xv 4 $Cw0`:AW!/j$غ*}@5uٞ8gh0.-dr(^JYef9 9-#./rhT[۹_xũpv[9;(nK_>nܧWvl1 ǏlRCQjߣڵ<^Y\ޡ1#Bˌ@6^ԃ푴$bPw2&ZGu-QiJ̦*!d~wOJ2^}k(/P0ݳY5g,t\@z텋xPBHb&4<Ód(iMulM)ApEԜ3kxȆvƔ ~͂R7}?b޷uۮ}?WhhqB%Å%f>S`Z,v~䑉ivS-(jR›gwTzR&{pM L!) 6)i\ﶋ5SsX*r:%U7d=פ`39<43Jw94䜩,|}E4`Ӑ{|wS0 |å80ק~RɃL̟p9{I7^R% %< 9AEl"+T?l<Tst A<.Ig@l dlEBd%N̟H[p6j'L O\Nšy`;nD%c,1vt X"Ν%'QI"PęH ( σa[18J ބO4~ ["$Uzu!^+5MQC:1 Υ%.3uTaȌS}@\t -&5wsRhNnaVfD)hbHrе*Q@a1m>b^_-FaW/-^`raerC*a>z3c]2İ@p.t-k9^)y =#r7-E 4OTaX! 71PmYDtr"!>j_9~E߃,f;8j$9ʶ$U/W D3m1Dv_y=50 @6qֆdSŚ,Y2Ъޮu3tO>iV {)8QC@bƇPӔdDC6>Xw|@:o.A3}V0Dx`N0jg%Ys7`2Bt1 -,9hSS0=goS$(,l`uWcB@~>=7Kdk}c.Zpco/Ns.p򄏌=WFb3p8syTohy(+@:ԑsJ>'Ph\"l/cǒBH1|;i?RMM< oʞ̌WP>;ȱ9n4& CBְF .o> #f Cj9rPrЖCuҰXZIkZ56CON['Fz Nz299_Iz! F[#t/7sn/ QhLp-MMjHezf_%+< ҡ>Ǎ;MO@D _x!y6dSEI4IŁ"غ=;SV03_1Q=oˮ|IzSS&szs>/zGCT%g As6.pʏ݃3g+֓΁\ nt!!`&1d̟ӛgygVȨ|`U,Zh8V|7gȟa9F2"A%~g; 87Ål]sx̶t':gv!웽j|6g,n%UEQ;NY-&'ʹ[z`+ѬEWlU꘬Oxv! c,ib:>̮N蚀πogZŃ1Ivo52(P6kaCT  k%rmު. p1 Qoи˴v Yh[;c!p8WiZgA<͆j*I9:ZNU'- (=J2 Ev)3h%]c|}'"GWj ./FՖ?~>ƞ7#M $V6-OnX(6#^hԒ/K7\Fx?ޥqGYH6O2W5,6ŽvK4|D춤߇FnkiM1{lL',316 %i$an-oep>0ꆮjޱkMK: Yj d]]ܞK E>@9hus=l4}VPfr+)q IN -%GFjX?#y7lݿm="+& MqЇӨk#nو%լ+#G]f]TD1ԠIJ@4ʙ]H{8ԣXPI)&GaZ;)֪ a=߉f^A捞 M8>ΤF!j 1S)Yf%&m2OQМ9v ͚8RtȪJb/̪W D?cG8iN*nv%t&/ef' 6 M+<ފ9v㸅m㼹9,0}ށ:)(ČTvrm/;5o!c%(EDW{A3#855TlX30m@F_lQN>\Q.Jo5~ӎONBx>D@?P:dfWj {E)pW-Ƅ _t_Cx=3|Ǻ4Ls u t/zJu}HY= ĺ荿^joXBXlE]x*io4ONnruES cUYyQAx/NܩcSNľt.1dTbL6pXVA+xx@1 =g{i. vjį̃h^ 0;T k8?m;rv NXB[|U8|& 2"s;62]ZNx }eV܃8~nYϽ\6QuʵXl1hfwmT9}Q0AإwAPJ`')Zϕ~ O/qZw~`~&4 A۷Ԅ(}UA5d瑊)ꤏR`3F'÷{9?>gUٿJQj58J G Mw#JN5xd~we[t&8wy IuDL¨/kF%@WD[\Dd!s77SVUgƶg#J/}`b5(äka[P ,WA]v:ȚUݰO= J0>x3MTEuC99+weI)s`( D eEmS'9r /Ak-V>rPUpIϛ֧+dY.ɏFEYD9$F:e'W`ٶ>w.iD?ƷȮ-H}EԖceUc.eaA9 w9-mosaN,1|0Suu٦>mFj<'"!I0VU wtɩ=M6tW"o{I uiQ6g|ex֫ }~-=6q5X29!zC4 Q̽=V\[htqA+́Sʖqc͘ɼve~ 겎>< hdwJ[~v]*.kJ*.{qeQ ᰂhVc-0$]b y<3 ;'sA&'X7wOGi"{b=$JzdG5&x}sdjH-4RS.0]f&<7yɆpsܣ>[:$ԑ[.@CCz 1jd2ρW>Y͡X)|׵a1+ *ֻO=rxY|E%ȯ"f)ѯ(S׃taeI==c=чj{ud>q1/>ކ# . ?GvcQq/7Hj>Gbr!lcYWжx(0B3COt kg&D.VOt3n-H";o ex}dymy==_בJSndSTJwoލt2+)<'y>doM/C^e KSwI!`7 \5*d\V[_g<+Kބ`-PX-\j͌LĹ2ykےl-秏Yc j87p#PpQNN<-[E~@!))b iA' UM`@ p9t_ ? [qo7)%h,O%Itb3ًDZ \ G=8}]ZePh{$ߥa^o]K~{hU.56GS fJńZ%moɚjS4+0AϏ,XWWV5<̍[\M wnsd7%r*|jbu"8dym}1sJu S3׊n7x؉{iTJfHCaJ-M7s*A3t B2q?&jl+\p^® }rVegM5#Qc:yh^wL_g;wzN3ESUڠS ,YzA"s 5X9 YS#œKt7aD'{"]omB[+X8f$ #$]81D$|V ׸:[&~X%==9+8 tGGc6Ya5(-ވ)1 텀VL:ĝ ]&ߔ* =<,Yn_\A]'SnJwF,wKS]*b9N3g>35UI(%M :ShG?0M %}rlZBŏQXe* :G`.+)^m쎷SWy飛y D`G AH.OϬ@,=Smaͱ[iO*^̫*MaXš])$y qQIѨDFf%5y{1 ·ZHߟCt z⃮w)94&ٳYÂ8<&N+*s}ށԿ<o#w НƇ-;.9F |-n^k^[MwpItShS;h껁P{T/la3,8aS3]M:phcLj_A1'C3Ƚ7L,{= XQ?ƐEBBͦF֕o-8ಹ: vvN`QF]7cx_WGQ^?C.jw6b~ Š"FMpJ0 $#_8qVF8m1'm PWoZ^O {hsXTYg~Whci9Ʋm(KNFհ@m1QʶNJaV!mum(R|J9m:\^|V<01!HWr?%+ghBxpwy jl&s3"Qa=Gd_ *XE( *32̚*h-GW(,_gd?>9tY29x\gC`Gb c=hb(3& -AI\L ,b;sُZ&k74upUX-RfOhԻKc[hc21\]Ŗ'T2+-6|-@=Tlu5PYv\}7 =#"Qil r)*2w tfQsÛz6[VR;^-LFZq1;KeZ4Ե c`)H;aӗ?w0ĶƎ7Bl@"FδYW)Gr 榈mF>[1a6WrÏ̗1r|N7oeO5{$n_3jdQǰt2շ9V%a$wu=>[p0'RE蚽}˩쑓h^! 4X22X3G{ WM ows,ŖϽhL yΨ4 ?PTpB:/uSlNZVB$"M'y4uXCKB$[l~Ï,ɅF lxws _Y72nl`_~Z͘G9ӻޜJOFIͦiG: PLrY6,bngVG]e1ifdc:j%xb9ZtCܯKJpɖt߻p"]WR y̐"`qP'֞<~VU:<^]}] N gIL]Uއ\-ggI+Y,MH;n(DԭpʋhiBM:W?L)q>, 5n`*BQ-? cj? &c^OP-BŢM8"(D*tX]`A@0טpLZb.5{##nW3^Nv}LZH8xEbze@u9}xbO)9&Cetxh$D = x$GMNjsDc[CIbkqIYg(RؚGH_@6 }|-xeNw8O'2 {]q=_4/e{-, ~hY_{~ͪy6!t8ȒvosLLPCACƩ=&K3}(=.2:ndB( )ߜOa]2o#'qA6?U)ݧ YU;恂Xrj Y> ~(6seU WIn*pb?~Dx11(wa1VL+2C!-Q;wL˴E7PΎ >:D!BLPn>;p783qiWJz*' гS${QkTLkk ~= d1=د8UrhL۫>Bkh)܇A#Cz˃Ӟ R[ ĻcPXt~] G?yF~,__ƇH(B$Xh(3'xKe?Tila{R={;sf\Â%VIgCŚi֋q3x^ؔ&db:m޳Qh`il͒p%ZS%\>̐ =)t*&1^S >M+r:X##ΉUuAJ7 =Z ɒU\OqV wYbóKǨO bTiHN/^h+5E]o:s wg%HP51=1^мScY[`y̗( :>3]`3qP%$%KLψ<:W-!ZzTҶ|>Oq،e="ڑry0V,߂\>Sa@{rNZ~.Iv7zܸ^lGBq'd&$[, 0fZ4&k'2 Fg%l9Y]"a[͑gsHL!#bXr(A %Ac]ж{|:(FZJXJi1G)L"cVu,q^>!pamX;GJ/4}ߘ{yD0)T:Ǔ S$=e2DcZX+3V% :XKew~/XK@ m&K~ˏ&`ͺSM=CFBY_-U|7ύ\XG E D4>|*-ٗ|o8+1**⪱,_S􌁏ΚkDG%!*}$SZzƑ5r2'k.3RiL/ILYk>killP,_[Ep & `NtCCMXc=fi5:#sg~cmI!j 3_#ϐ=0أ.t4"%|ֿg/qlm#9_9UwjgpeX)ńwR6q` 8+̦v5=ṔPz'!ycϦpcy6@cc<+V TKE4s YƢ)cvLA_ܟZ;sCe8Ok\( ^ڷwvZ|^˳x :6?`S+q08ȰL3$,So}KET+48ʿNYDM%V}98 wMYn2J<^tC77O@˩,4_"c!A&$pb議ِNQ"+n6yv^:)jD0{%:W?.m'(OKS)k[-y*^RrAAĎzz%|LJ:+&) f>=N4_ 0;q((.X}"6[϶lQvVBe:##^tRإ8FqHܬ;ɥ{;+r S7:tiiJ<oh>gQJBݛ;䒂L9jqI[l3ed#oh'a)L㕩ڥ{/#U0Q:oKt2%A41a۶j҅kySsݸ4bJ,<+B6d;D}Njg|pB'9wP,mwWLxB<:vs);@bqlZԋ;m ?୓0,e8V o3%a@ s0PkBɚk!ßDRrw6x98!;_ܱ9Pk-߸Zi nB@ë*UVgވANdQRq>=Wej'C"9_ z1B#oإSq[*2ObRR.Z{Ţr-?-7;dq[Ky櫅Oir`O( *C~=+6By; Ͷ0-xwhOf#hOGqgm-7&lcY!5f;V]o %ma2 ): qѴ$kJb "`pוonB8$REWq-dw,>*?Il3@_?He듯4ddnLOcO Zٚ@۪Xٌ1.#*r. ^|.{rXHaS29܏OryHv94H( &e ܄}D%E2zO+1O/RbL9\]w>q-d˨a)o*M!cϨ']jq)Bcoh6:KZpAşY#VN`U55x=(v[ḯǥfvLїG uޫ~fcl߈1}N[bkO-M~o Ru @h#1GIC'S2 -NXȀYozOyx\Q,E3cRFzW.qɾ{L[) KHga:ntY.[i"La~bߗ+#wm+Vg~*lKf{މs=Yչpm^Vؤ10^S݆7n=m9]]KB>1?xP$HʕsXBy]p65냨^;FeuagiQuw9"̲^k(.m!=r׌jVxXzPqb==(ϯ(B@58c·",Mn⊡` TW yo; Lk^I5ˈ-VPxEq n=}Q$r^*'Y٠5v΋Ckl*?ph"瑚W:v͟rMxsz/Nsk:V9gJ^RD2~ύ3=!7`bT6k f@@Z&3 G}vf)5zHBO* *ءOP},h?T\XWJ(uojğSaάSx‡᭫$´AFixw[~p?ŀÑ|ZQBb5 ΗIG$XZf0VEЄՙ{.TcHe?s`xFΡ+Ly1Qa2:NveWC{t7Z c*s@;?eq>b H5[x]wHkxk5[`wON_ Zf[0I\$ OKw}IZ\2tN |R gBLӍ"P^aSJe@U*8F\ڬݒ@N+R(h;u;#gE'?.JȦ9LOxtzNHS&&Y'ԗdSC-G9 h1 #=OPXDwlq?35IlkB}bfI2۪ޒ $X&`& >K3@9 _`3wqߤ,J/̢n_6&PD+{:?O>׾$cE:Jt[[ J:9uByz?4󂼸e1("m 9i(d miʂk$D(lE$. #{Ф~"-`ՎG1JIm E=% 1ҺcPVԺ էd@]JZN~ƭ[U#=i"p\rPYKgN;oayd!Q]*]NqNa nɠO#rZBl3PIExኅmCld!ܠ)\PH5P3rK^QktR =. ?DˤlzKEYb,gbHNʊ:'3W' iV (rQl~m:97>D ubF&:u\~R=UΙj E&`x8`2q_i˔&e 2M^L?wg\ٳhrsW-"Ȗ `6ْRx1[sT3A*ە ,/{4 4<]ϴk(ڑvk1,oט-* FaPESͦC4hߧO mȑwˍ`Ɉt8BU0Jkwl2;]`~ʯk1cw>>qQ/U1C'2T'%dM??+_r_/Y _)InAaID~sq\ٴh4 JW0Au|J&y!b*ۦrB 9@4)zn(Y⪟#!m <]ϗ$T41r|fƵ[2KNBE/BƋ$Ra_*F MGJu1=nN-~=ulOV} i초h) Jp?dnBHT` d`6ρgSIo=X}ū^+!-~wK`d%ՑzjwiGK2OMLW!|b&LH` 1K]/VK)uthW֊7RoB[p̣ij9;I!v4A4q !!EOU=$n̯2hȿ߻AYP[@}x"@JǨG,6TѼ#l{Xᰪ89NM'ҦV0^}6Aw{sDrʫ"H?@*!#1"-%"x\>{IX-Me.&lʖs2yB) Z.*WTm)ۇ:٩#x[G+Tyk&UH[˹2_5aQjlkZ}}>}/ #M`kЃ#6jcNVXJm)0xd` #5ق9 RB=GgN`6#YS>1tnz-"XO~ρӍkLdD05?ӑhp /l-hjg.D<\*)-՘0{/e8H~_r%PBR" ZهJm<lxC|x_1HyFK;7K35^ex2)x@@%c4exsuM c8>ƽM8=M`cnlccCICsFw;RW)ՏF G^][4h$</%w/.!mQ\r c(j,G5g%ƵX?e߻HiXL$r5Y G[#l%nUZ8SrneQdΩf z$,k!JOw@`֯LDK]n1Ei a$ǜXpVaR`md?OA q2S4૒| S%Mk9xneJn^0lxVV.hKUЅ-w !7"P]ϣ)rg~TqkJ I tgpU?,ؐ:_xpΓ6 ?[Ap.1AԂo?͈T +[?#YY1Xzڷ?B2|sYDB\4PV|Z1ބT%su+p>zw'8JʢC+hýeyl߸ƕ`x>G|;])ECXUsQ̢|<ՕIC_>-ء)T`M!]"a"sgz_:J+6n}u0\> z:dt6b$|!8@sb* ! F³V.uW4^ Q_NEt?)z06:8 kߣ2Qw6*4W:N+c4z,no-5> $͟r,Xy /?n_I>ڌms,]}4%sꓒم:edW'̷c1VDʄQl, JT>$WF2-c E4= VwLIɦ)oc1EOHCl9/Ӣ-Lnj')MҎ3ܖAKj&Ż S܏~Dm{.mp*4ˮ GnFYp6-|L|(=tzak:\]Y"4/RFےh5\v]ȅ2FH?@3qQ*tu4 31Z9[vrÔԕ&w$ NR|9[1d~YS1))BW9)ugS 'h@#?+ΨDSpxebĜIܮ-oI[ɔx~ k ! +YE:x/ˬ3JOfwmu+Vv  0sַc>^J o*eg wS+-7x.C!J[ؚ]pA0sΫa)^ncN[Ͷ3#J@Bt; ۩DbȂߚ>j%@يaBfB&c*}O9Hti9T|޳IJ3ǯox͸ihn Cf/tC/ZhxTuoɚE0\p(6'ȪJ\_SoADjfȬeR~w@Uo],@(vPQT ati1wX:OOܱ-okȸ-0픽"aEHJ3X-1f=^=GZr6F`>P hMOZӛxUbnWaLyh&l긍֢ȷi+8}% 5!Qin: *@Ma#jYe ZNc=0Q[:[4}W|=Y𥎂OxXLjp,$ǤjqS.(*nLiYگ ! xN 172u Km8NSpjv6{yBkZxYk9m+F#y>M޾/S#C(LΉ8Yϣ0b8ĂVo`gT(!wx J2xw j !4`"H>s,! d nʭe9$¨75ꗁ2t,mEn 5QA WƓ{Ƙb_Kϙ|Ir.oq"{>(iP&4V+ޫUr>1A1{'YE.u{?5Ӿw}`if,;\KIa Rt\혜.RԤ`X7:Sc€`W4JL@I'PW#Zyͯꮽz?Š tH:koeW~z>Sy7؟rtϗ*!+i!_=tQH L)Lz3j OFj {[~nj=OE]^%Uv v1i2΋)zVHyؾ'P<QA"B,.WMI&fO"Ye93oI Bx0{\w-B92G}ՙ[&C5)h/6$|4/@Y@U{8vx҄C0cr¾3k$ڬ!)X̢gvzןZ]V;ײ"#7q15]Jp^X7u@00'p@hysAI(O6[жXzߋUc"vjdE{@^2#$^Lmi*k0A3LG:_" Y/^|ӨdzB]Z?we G⳻Ij=hWwQ&uBU]q <@EU܍/v69/bDN5_}V(zBr{gu~2o@czI_Jq aGN* :Ԝ&62orlFyMpBQE 'x;U!oĸ_z4[DL~:b@swP&0bVZVCW%W/xI@QN'yv^KQN3Xwږ'l|mMuYuȕPƓsTlrIg!ȰoET("b2w.Yx`( o2O7^ᨢ g I ,bv6tCvfn5:&?4@O|վ0DO t-No>_ >C 76+\,PnYoG tK42C1~šDkR !*5wkn=ydw$Glk,:?BzrʸIA}qRׂw<8VEÉy@mqkZ)Mdoд:bxB@8awF8% `^3`EM$9|LQc9eR@MJ-yÓ>7aNa!N?%#rS@暊ӨJ~'z0+LA€d1 {bvB]H1fs\Q:]>[BxENS- @e/ YD 1eU]H"Q[XChfawIXT'lL`Ʉ~ztýr+`Quwٍ^:׭ח qs{= va #$@uI=xo23>I)^՗7 z!Ó(Λ3@0: & Ջӿh\QMuc 0eRZrmTN4Z3gQw \^("=jh7GT%eY8A! _ r]#^`F4EXQ.Xjk!0AgAXot GB8ѿt`V-讆^ >SN$f|oY/h=J8^Z$V@Y؍g63"dW99u٦~0jh:s4f9|9r pRG 1D!OKѢwTyP <[vS.5Xrd@&ZGe5b뱔u9$| Wbu>{TuXʴf8qz4uNyq-t,νּx&ՏrS D#x>ND3N47b1$[ܞ(eތˏ?gl+*<F[aIyq.KS h9ܿ|öN x6;\zN*S(7/ Ӝ‹ߗYV5~zΝ̢zbf fh=lAʉR#or5,FfrRKKeW@aj!x/d?4F˕-ML覵HD5Rm]DkzC%߲"]}45\p z SݛstY[ɄDZ7696b%(g cFmlIscueu LEM=XMFĺzcbN!r*p- |qDSxlC&Dn4+IW$hoJศI#7B't3U0ZS>˼W伴y)K7 ?,Bt)]&kqQPEL> wA5Pg>άvaq s(_NG?<|࿷z+J< tYof8O~݋Rty 'ߗg`h5NO3Tގ5='w7bjOl,xEXc@B pN[W ziQ@Pa6:et)x+V宭~78jcp=z}D NOhQY wÛ)q^r0(8P|bv"AѦIt#hXY]{QAi>1}Hr~ޕ-h+ظzQ*xwSKɮD`^ղxL aƟY4K@!hE48Bg`H+ \~BW1؞7֫>xU;D` p¾B H|/4+t&wqj=})Zj@ز9&Ӓ>!Ձ"4ʱbOA#&l(\bRmJ)tHHqZu=S1:BlUuʼn )4vNt~Q˙+c޻KSC0W  _fI(&fp\]̃QȖx7+W;s.n'EU=l0˪c]{;GJ$q{^% rPYwLϴ='Yr gk`Ayz+C\NR&M}.FѰ!Z9e˾o ֳ=ODVT͡uVF4saB5!ȃmf!őR\ & JBNF LXNSΘеOx͓yY .<^T;>LۑU/T`_ɪ1D) n8aTػ,8bҧ;RyK3Y?hĆ!Aݽ]y hquB{cφ:Ǖq2'6% vRH*ARuWg\5 >"Є7iŝڇȇzaنcچv%ohւ#^@iUySL<Ã߂M 9왥6EάmNӈ!HɈ (`lI,ajIj𲚥jCn4=C4^rkٺy*c]M,=m5I3G`7ȁ4YZ4N9/tM.*3r Y96tE"3CQ Sa{7o8NglD>Lx9K& cڬ&㯟)yA(%@xSfMHDY@^| &pxgkX)|uAXgW^g칪h ޔwi!U8g!{*Lϓ8"'x\-zbg5oB:ȝmKlmLe^iGziBC >%uTw+ǙwFFWg6c,5  U+,GG=\4%ǥ iM_Yft^Q.hC R{P嘤3JzE3n\pȆ{<] ^ {SiPoOST1w In#R_l.Yq}dno)L 䏵s:xR_w&"&όwI~0FSQYkCĤ6 ;V0D:v#ښ2p- 3V52PwE`:W1/N(QIEI!!=-yie5.'cħxN0p\Ҵ'ffȿXD tӱx3DJ9V 4AێfO MS-rF_yZtlK&Ig4 `̝_V#^P;*)0I3%ďY. ,w.yI<ȌDxɭ#2ǃ+lc_//a^D`coDLPH_`ʭx' 1Ou&Ϋ; M\?tޘogXaW{uiY lS0,L_R$5KItk_f]q7v/Q[کVZKY3I>QQ Uoa};S6Qss5wPG :\zw((ZR1He06.ECEbta~:傤7,o? 飦:(V ڇa7'DU,;Z2ŔΣJ mI:-(e{LI ^nLBՏLSkf`Ƕ`XA;/7doq&bdtGX)$U#k8,eu"YM:Wfᐵl+T^BR{;{Fo 9GS' o*w 9(!>4r ~5Gz"v0y]w C;k^Ü+K~WP9%j(ExYAό]SEuj x"D/?tن| \tYўp.D8b0T%w<ٕP͠AtWjV\TFB|Z+{!zDX,Jb_J]fp>5,<1ɏ#6)yC޷VS}^g`mET?|t:l\JkVP2#S1:R+8z T4~+VZ[d*dŇH42y0tYѩLm%^F5=au 'v1)\6$oH3Pj3(\Śgd=* Ԕmq{xDv>t![I)N E&IUIBX,֋* j*IvRSElUM+ð}ƆPurj`aqdRjR Qj#3vގY2JXHhe%3R2:мU`%WւZe{<&=):&b3qGdɁG;(ZF|<%wcPrS(Sltێ<Hwǯ[/st>7]˥lK!VOB7UDr 롪4MFn@uWa=ktJ KyQU5/t5B64$`S*:ZEFW(vY)ʰ1/N; b=S n`ޑ/X)}&sDǷVW$chc]3nq?EƚiǤV>SWOjY!JD}/3#c7ל{RQk>7b5J򙕖^UdqYQuu p)be/AK"ȅ=%aT<0Pe̦7T.p@o$יk!-Xh6(l}4 A]ŀb=;:[_R,1 (rX+X3R|h,*bUX ll܀C!Ggܢ)Qn{w=n-Dgic!OX?G/8҃qaNC;DYdќ8H6^i^z^!쩈4# ^20y 8VunR-w,J!ʚqJK `yQLo&ݧkTKЛB ] L^Mculumv?+d*׋ #,i7w)O51щ}B="uTdG1تc]g!OcGe]700Y2YL7@׫ HZ⺑`x9mvô_!E~+OS(tJ{:!_ޑirSF2b!΀ iد>`j zAkW~GzQ))DRĕqhᴄV% M{ڣ is;U!AZ#@YȅzUp)DxN5uCBU쁄|8'D:Q4\U56øoА4i RwO1_ F~1&y^9-Aq@ {]5ē52vXGߛo/>1+hԾe ~)Aw ccHjY2 ֋AQ$gM+ڬX#wW /9 ł7?Q[FBrSkK+v fT\`Í|~ŭP-z>2+aL8ch{*t7ĐlmV^@) VP39QظY T'Z\T:.1[>DZ?nmsx9*SbAfCfQ~>oӴJC{mgy)& ezLj#y¨C'c Cy.A;#S󬂿%k9}:$o2~%D mҚQC@A6cj| DV6z~vUSw{!Tpt ~k_8[`Mh$8uڇDx:1 L!'ldG \Y藯K!X\ȊAq83=D!ojldS甐xu3|_R\1s_i! Jm689 T6:*Kg,R(jhv^3CO:gZPOp zL`S&QwZڱ\W}ƃpOzGY-N{1=, wiqгHnG|? v 7O)j>#A/JZ`AΝDZr%u`Eii- V*fXC1! CEwT $+a6,'sj  CHJ#ripaY;0_l&u-9NQy/Rgo]:RxCU$m Ncyځ ĎdeUٕAƉ E eۙQm!%g,#jFЕv;s,+sA`æ =_ rD{ߍ#0zQy7@E`!-4mIszN:`zDT z؝" Q_i!ѯ1%x9X,KD]"Nz {bʣ];?O} 5/(:ˍR:=l^RbpXȵL X2%N__aUZʹqGi\I8ecT=ּ))T\$][F- a@G-LtggM)@'j޼lηw:`*C\b,ȬypظVet`W>ʞM[t%j_C j\s2y=BOj] [eي[J%̥20ZqBvY:zSlCi-`Te 'mq4nڌ\H$CD\Z[\,YͰۭ|Z rB0PPԧ jYgL "qo{<:gGI\w?n  I19Md,^R=t%X3b5ev//^5UV=4d6 ;xHJ `~hfqap ߤ>%wL'8y5WEx{*LZ'vCPf(ЅEѧyJFf9jwu'8ocij2O` =&IŒ;˜-~_yVsG^̱K_ER9 T4J̾c`#Gh'o(i%}}$-۪s-!*HپO D]L 7ki],j[CXkЯ$ \Wkul)$%n"<Oԟ2surUk}3͖$}VZLJ׆)@7JR6A$X^ :^H<`-௻g+!Q_j(&[K[l!3MpWBR\;^<7[$GPyb*L/9È15\]6 f Ԍ CboE۷h8Y@c=٬Lӄ;Ih2(9 ,he-}%}63hqˁy vvFn}r4r{4R3ĦP mϒ)ͪ%? j:=Oƾ`A1H+Z @sC_P9[L?Wp%we[K@}ZO0 dvF/fCMquaY2ti2)CBwٯ4Y? (kJu^[JOKϘ,w\UeA'> {o:YrM(%>礢 b&ĵQirfT;פC2#֛eٓ[+xWsWgԮ|7eG?nvSWEA8^lgkҰ[CUvFOZ. XV' TӅEbP8v%R=X:{Z z/;ԂtM=\ܘK}۠VD;ި3Jӣ|wV=}}WD{HӢ 4^g"$?D{67;X~K?'$3 F^4Ы2 AcY!L|SlxdrIIA UɼJ@;pSל V ^&B|5ۿT-Z'HOy:T,tuoo7LJnGDzv~{Y|x0YxcaA=pq\hG0432 $[+ae.YU|t^T79x5mRόmฉ: M.FcoƄ5IMYBYqz| zײWk8#_I~npΙM(.VIyB4ja#rD߈򫦺I~E27Eث7Ђ̋6q$FtI]uzALx◼lcx;N-2o~ j}VVdB8V(D{ 0H6x gKl͠[AK(@[^e(n "l|VP]߫ay=_48Dlp"r 葇+woqK=/]Uuh<T20iJ,ة+"\ <ׁ2T ֿ~Cwsl1/v(.$9y'pCOxsՌ*[m="gO3-`k"(ZO_WlG1H'} D9 P$]ա5qt\gv'({Rm151E%UoKNhrPóVûh"5kkz0-Z)ˬqb7Rs3PmNIkʫ؜gv *a |CKj2T`k8 ej`NQ4> +d-_ϸW >]ϼ[z~CEm1Ƌ/daRւZՏ摫 \ G~>xHPNR7Xݼcҍ ?'vӑԖVNkbar@&؟%7CϤ`V=|^ƨP`!Z([g1z"Tj3}ӻoGiecif.ș.PL:{b uY>XnnMNݍ:=%7,1%nn@}tQGO#_X&1zB;jk(\eO( {z #S[y<\F(A">a7ŀ|^"VX((7_SbT]FF/TU'릶}3UjxEQ)J(Y d sr1y%3348h*EKF|GDTvu,fog+^mVb& qLd/`ݢk+u0N[l+s2nޯ[l7g_OezA v4Ng"*U*T3?ݤnb:WobP蹶?8DL>8$[aCpo`N[Eڴ ~2&?ٱDV58w!ލZc;ݧv=.ҕ@•2h0jժ B~rHyNsPTS>IIqHV!M"~)ī4'?Vڰ#;o'>W-b0`;_`W]T*l&F֟zR-|j3wh,!0%ȍlQW Z]S? ` ~n?]Q;Ǧ]vo},[j5<A'{azP 5)^wgnpLL&VVq>9ٮ%w7jHjy]|{Ơ%u}@םg4i:TTfخdS$lЛ V](^ME/1]=(:#]HCX!D~I)H4QZDڱ\d 5=#`01!T5ŹWt}yE˲qx8t2k7E?6,ץ:}ջ$E F:4f~MO\ $40ո/YF)§=M뜵e?FQ=]?O_n`fm]Nirt4 gL:(6ee4N r=~4[#HR݁[?)+@tK>y=X&C78 O;A$biZ-Q `2B@$Bﶔ+4m凹dS8璌m9]ߒFR8@1㤜|Ə,n"߸"5GaHŌJ_ NWNjٗ#z+7>;H %XHkۅQ1滚3A!dfQx+#0>_ uCK1)ǒ55BQnjs@ 0)#1wo- -:to#dSa,YKbPyZ1{/Zˣ9U\ˀeaBi˷<3K>6IɕЅZi\a RxQ#YՍ,!WU'@u2.;[}$>csG.X! K.&V%$3D߱U%ML Tf7sVmRaOX3̢?TYԮW-H0$205|D3seùϵp[0-d'((7G+Z륝x v| [\G1HŠ遅@OMQccSXѰ5c*dzU^ 3'bܽ紏~tWw*BcF5;۰Q~FaC{OIiUjMOQ:0W°h`܊8 aCFlLA)ե/U0j˭.^'DIck{&C[ ~1'?c;D<#܂Y/0m"|?O5'&6-`ܛ^Y{#ԙJpE:d,%K {.yQСUaS(MVtgtQ%Y$"۪ct *LelX%CP~zZT)JRI6Ў hh̆ ^tY4eUgC޽Բ%Pj.:Kbݷ9ذ2FLvJ$Xu>d2W68󂞸.E]ioJ 9&W T F_:,daU'FZ!{9":qe}H 9BMѢ띺C HaFITUc:ޏa-oaW0gfS2-zԬ1 ; hm@Д]m0=I1@Q ^h-(B P ϧɫϋmP *LfH/.N<4|Ho'rqIvov![ !טd^Dy  ީra kXBм"IF&[";[󉕀~zƮQdyy27p &R2Y{oVdWI@t;΍ ʅݽ+!K- ?kf$f3]~g*6sdz& $Wl;@7|0ݍGiř1v=( gYA3OrGB+qP=#=9~C46^* #k{%hDNB׹y=_wc?]#I%j( F)&I~;,`PzT$L#Nim~s-QbI=sٕ/CʳG_::lb3|ƞzA0O2-vǚ.Q]B ~<Z|TBZH#ʝcJ;̏ߴi(|| vV$, o|Gg`K-5D4)cBe[D~{0<+dI1zy{ONx:/E8XTbnʹIV,Pra&q*`jZ~*CsE8%18J4&c Xak4xLت us/LZa" |@`m zvP t9Iq1/]wZg"{ Cy).JS[ |l?NzHTw!^U^7gWz]^|אtGZ^NWxr>>Sn&lU$9@Vk$7 wy4; 9Ëd:2ޢ*1+|yY𝵌^6+x[\coȤOꟅ0| &/Y^&rjc:gq7:b$daIwsaAo2`XxF s eox-NadEQlG+u+O$۰:_uFglX6Լ@̽6'`ٖ#OcFs#!+Gְ-cG&NS,gVնEw1|ksNiި*A9EGG 3 k(lex.;جƯ4#p؈B&%Ezܭ+fp!S!/A#ls"o9'uv p`;ca(o=# Sԧyuq|ZB>3OK25u|ӟ-xu!Y`Jc3)8h 9p7G! -&=M 7K&Cm`N-k^D!}e<"g +uc.#8nc+FBD7U,|i͑?F HZ|9E3SH/"MUsv<cQl8X/s/G2o/` )y2$r:BבC 5nDW_8rs'o_b:_= aLeuXfr>$M FXe->%"Mk1/bz!C%ҵ*3i(jaŕfęV`p=KT& HMRKGt]SeD8%(V (s_<~3r!KʤhUU/l`NcnF&"_YD J$ -Gx"Ď!0Pr ڸu |Y '2O/8G~hi؏Lc]=~G[1$xi]{J/ZF?w݈eXu'l=ܢZ<kMi=^> " w }E#mD$A>ΗJ.[i1 禪4ᆴ=F:ˠ0Ș;`tz{#s+7-&8S ^>ԗnW֜UxXhRc.o '7 MWM2F4̵ P돞#d`.sW%bpO Gx2'6g.3`Cڢ/UjKV}Xg-Kv'z=uNnu6O60Eb1f, 7U8"^Za#BhBM*>果Jy}z Ю CB~Ri5` Dy^B ϓhVmP9z= V_*e-|4OsXSr>L%ee@;~9BFQa3 ^qn"S䶕 j€-8CKm7d9X0>ɅbC~VP."YcyL0 /rtҤo& K-~8"X+T+IRM/l=GBR8>(ٚUXރ:9-wOПmMK}m:r?~opvg`^.yMZp@6[ tAcF0*Q=3R_b0({s:v;"Ibx@;6Ϡ.ɃO*yJ>_Dg6s -"OaM[`{*--TV plK4 st:.4F|3Ri(GUaiH4)ˋWO>H01K*۪@DZM# .f4zSwl ,l‡scs UJ]N꿄G" ̝MOwNоALC/Aʱަ4m8rl+Y¼' V?^[紝d$9v2ML2ֻ i(O+F8kVA1<W fqOp|appP`R`QU"X,ܩ#Ue1jNITJHo}{+P*=r-XEN}** jAy.YM 7ZbH;m3TL<:S+L8|pZ0F>n5{K֖f* 57T~"6RUp$ Yizkb^2lZ_Aw-*$q tR<) rȞ|x6p?2GLfn`dKՔG6 ~B 7"eQF\%jr-!67/hzƲ=wb_ umMqQ }X^_ 9O-t2Ȗ$rP87&)Y@" tKYH .Ib6]/U %)WgD^š 8_NF_@<!lwcGc6gܤ (^ap<< }}9Br(n4šwhf;M>xFCG8I)2٫)j%Y&qjN)$g/Omi҉Y`i{%=G#1L)=-G]+@Em ,g xe~ ggb[fGf 2Ut 'wGf dqOy., GJ U6n,ZvcYNJxLz=r ϸFDa_=-Z@>H^L:w&N >^Q׺í^:tʴ8V<_γǘ/R]>vYϩW:# |<,35sFt-g/| (k){ȭrݭ˞b C+'Q -!df$q-aHߋ^!S]燍}w"|0<Êŏʞv_@\*)^@=+r\m,L Vzom^-C`i+RSwU~o2\ϰo;"1?tBG.)F~wS[X`YLXd ?-oRO0ynkWy9<(>Kh-ի$ުYfUI#"^3tG`}&2 FEtlЯ޹u%ďSɣ {lxv/͡'鷹!FiwwB=^B;|P+IC Mb]9^vh4{XDtk`g%(-N$ d#C "lJQ(BS]) N)?WsDЍi(Ԕzڊ4]+=f6()gi2E8ゖ$F7ȌB:01A UQFP'f?鶴Hȟ7TOuytү`ͺNOTpp1BlQk8_[a^9p\&+KjfL^K=w}vƢ6ݹ iՆ2`%73`V)j r-* q9n{ ^[8xl\h(veQXp_Y&WOya"\;& vgQQ ~yfn Aejp.527`9iyOƑ{3>[! !0<ъ-'E} Iss)43g^ud|'ď֞-PHkz|DG*]:JX;cxGNr: H7p7,hNcv:gA@Kg4g7؉ k_^B7Zܜ6Q:m95^W @vP5MwKK birBjئ׿1+as))# t$)[cA7&z; D`3?YZj}2n~'ߗJgIpTC_ǹ.=\y$ QW!S-VM~~Kxj>v{%sX2DYDmM;G_'PG-9z.C Obh3`y B({- q%PL{)G^t}ǂӿJxG(4-hYs3ѕܕ2פ՗1 r4uU7U W|ƕf]e9NkmJ5p% ,F@;d:][$=ȗirQr #@TQv5s'~1H)!-7j1M/P:Pyۊ{jw{^%LPO2tտ0}<ĢD4/=f6_µM -x)3f1Kղ@lgO_w?ڞ20}őR4jјՇ~z0#uٕwU Ѣ̹IjtM&c j!gi#`J&*9.^:t g;$WZ xl%7-(#qǬ(I Zٱ!vp6 #QeTl,hEƎZ<)<39#_њ^t5< {\܎8R`bFphhBÜkݮfGIO9cEVV$ӧIQ 2/>MQg}H=٦Y')@8 plrgX8Ha$#b/.dlM+/( [}|RXxFc늸niu}` ٓcc,SݕЩ6yt+Q>;P߁zZ\Nj{ :sLq$hO+8OF8C4݃ 8>DtM5K_۳S<:=(9 76^y {^?mpbODL&\m@I@ͧ|+7txz$ֲ8I5X1Q *R'Dm5ЄYו'$fQxD.vn]zpaFj$]J9Իӆ7cwBn S=;0q<Re߁Ř z?pYxYib-]% Tͤ>"J|mrj)-JCo[sP xsDE!4hq(5˶ф̠o"S=b0VĶ;zV^KQq5Q!o]$cȔFBݒX^g%xoo I:̀q_Sap(8R🼣5d)4S}MOe qvL1UwrrQ7%}.4[qoόsW 9 bM;cy!kp7_ZmB@M_ΗBi¢WrKOP0^O/]xRmAMeܢ+[Z~kѤfԾ2mhk-B<4a5z !䶠NOsj.}_ ]x 06'~+A t|y`+׿|g+TC3x3Gu,M?f[#UcKuǝ3.o(R}A@&fǠ"FB3V環Bo9z$ga &1QyNPUª5#~ uq̳zTؓ< U̫;K)l-nrX=#kH-Ejҽ|N\3~*͌02z5ԇ?1eۨ>N#z CK[ |ꇄ.*0c^[aKe@LBM\ʢ yJsϲ/?nX3~~C*ǎ=Ph|Ʃ na$pEze`:ϥdx^6Ht 5 {)cu=XX:+A֮&,n4C=cƜ 4S}kiC[Q(dc GGA)~"x i^ԕGOGڄҟ#IdLjg6'V?nxX@@,_Xw8)g6k^ R[@1 ~ހ]BΏ6asmw+yĄйUmmIj)ʱ5kӾ_ĕô?{~jX륔h̦яCetdtȖcIm̬]3O}Dw]-pQx>XCe0I)|BҤ-G¡O"P:A}ZkI%*=G 敹N&; riY57UDҵnٍ A- uȂ8E{ڽ%!g.B+ѢR^Wdb <-?jt 筮.(a IxS5O CPm"|vشek <^(O[`4CEpuӽ aMe 4(ih hO0t%|QCg#'xՁ;ܹI镳ѺC( h7UuA`'¶s2ah]UZcPtUDRJ1VN5J!S6ޡߑ\2ӐB!'hfqB0g Z:CEjP'}v 25_R{5$vǃѣTjЫPTNAizKYq\Jڡ2l?uҹF>h_QX쑌,NvTB뵥HG=A_23!S_myd yJh 7-T3թτ9*ό>8e+BD uܦ/;bמuʬ,iNigY?a*>U36@6 &DjZm;qV&Bh;|sUx\GE;M[uC Dl߁[>%Q6z6~(Tw׊t`4+.tWT1v0xBZJg %3 enc mtB6EXƋ)y.tFȝL ;:. { u:"ofNZ9QOҞrhةW8ؗCW ϰbGa"d-kX\\ zV*\R+Mű_&۲)Ir w҆aA. cԘ*VJG'_;|'>MTyRPoD@P©BySP,VVCtw7WufbqlY$cXf#-F\gbT > ꇽpP 3Y}"ܹBx?](?qbdퟵJʛ|{[?:R,XN:[ȑb a4{$7xU(j)d詩?8ЪL{hGni2KNyB!lP+a88'Mkp/g.)r0!q֚?\tt0ƃj7`oN3Q]܀W'h` +Гu[_uʇogŸ޳ԈEvdѼw >X)q8g KP F5k *" pDGߨ_JuJՅJ0R+A)2 _-'=m0s:ZkۑBaQƦsS+|9eW3+ee\3JTёK߾wv6}7ů3tL]Ng9fnd ]Qo=hatQwܣ1FI6&g G!ُ/(" ?ڐTt I6YG(p~QH]'|x`Lv߬.Wܲn䋅UyG/+DI;HxRнjGI,.5}]2IA ї3K8ty_<2`pG%>-QW*v4 d0i_AZYd]RCe#T{BZ~4In~ϊH[Hz" ]J=f~<ޜ+:oV~묃 j,v3~,7LjmTŗJt50Q1}øb} tj{0>cNŶTk ǢB3#RX= c격[ !1b˶?5M):^>;` PS3|!cE<+zy<8;+ɻˁrq30LP%t8!j/a1r^)9Gr.~WlcyCevT.R cF[&u>>XބjzNR49|؁9|%G mޱOo0_ɟhZRg[48ˑEt[DO磁vn).Vi?HRNX7*\H r,'x L5lX|h% ^\qAQe\kpL}./kQ֊_V>Nk6t;ar@ᐶzd!)g)(i./wfy} Eϝ;Oww!Z#/i'7b+Fe,QJz :*^BbUq^=*7*i*Epn06o<0\+%O=B&?FPZP ChR 61ϕC9Hdh9AuZQL~2STk;s9&(YK|)d\tx'kZZe/ijN!"24if^ץ[].r2bujHS=$'\ ;xN+@+Qq *£[#<$Kݴ#CԤ4l ŗjzd'ۅԄ&xo! ;ZE LG<"CǿNUK?N"ˊIbVϊ5Y7<\efd';wV35/sOlPa\HMge Kf@ebng5|IWҝ :z0-$2s2ՠ倆mwǺMjZVm)hfƽ:@u52]GG} $Öi-wE>hψX2y-NB:0bed2Q@ߜMU'ObH_)Tϊmȋ>NЬQ?fAԯʖ;C ^XBhR XS7ٞ c"{h2"qpFYY>i[娾yS' ns%v i]~x~WQg tZktםNנbz;ft+E*,:!^G ݼFiqň2WޞzJɺG[jɸP,\ĎD{TV+7e*OE ,i.b"LGzt-ה|Hfnt Xr:) }lT S3KTz8䔫&&\KHc8CF`6+ wi-Rx#C{\Symul{~PY%ca;Ft۸:lh.c.pFƧ!,y&b%x1?ϕf|Mu_ã1't(:ֽϒ %'&xqr3"pֹ]pt` ԴzM&6aP5'fTQF+ty2F=Ԅw q|S\1p$$؍܋ pEqM*1]۟Ǘ'mtHw*j華 K ܡ7[$c)7PGn*r8\)JYm&uR~/ E[ԇiiVq^L.珣)A;*( A$?1FSUV0ۅcig @' {uHsMCs)ݴ~\6i0ʔ""BY;6ttR.0H`Wϛzbq{uWp!THWgh ~T߆%K~3>?Br`zNi^@["LLOÕŭSn^2P8 w f2kn3H\'SmvcX9+^lND4%&L@C` I׺g.2N>޵7*m HF$2'Ryѣi#n$8ӓ}1dϠQB/6uy^+Q'`d@Y<$FFyxC@b֪̀P=yV۽J}ep(Ge ;6]Ao7⃮`ObI滿GÈ=WLF2v>TDaR{^ @@i_ζ GSbT5"Y~E5\5r: r{ӽ_4J`Y(EՔeW솇2eul5Ũ! D{)LzV͜ǂsAˇl (Oఴ ܷmLxҥ3H74zήZ$y пXMo~I(zq9+ W᷶@TB  fF{6*Yp#JT2#CQ(W+.;.rdLnJ9EH|lxו~b6-ϛ2[ҀH$* ILrNͱ)؃|ޚףv! `/] ?hY|^ئ޼)PX(%}OA⟦g3"zj;e*Ma=4_|YSE뜪o&06| ܤ: >\ /1Q9Wq;֎>j, ᥱ]xMsܭ(E\i xnzw1]>#BgQF[ (CPłK•$xv6$r~jޕs@)c1 ?r&@1BڷA[{vQi&!zNe`HD:SM_m!rKx}z5ߍ;ڏ+sɂ;%o krGpKM.tmՙ+:>S 8ThHL0EЮ^.YT,Sؒb'磎JvB6,㎑{12%4h,#DZ(L/~RD(C,#q ?+y,m, 57R6 (F]]m 6[EECm6)!iԜãCizC\X ;n) $h7Yx?RKSJfŠVHNǾEq_q;g )8Bg1LE^]JKmD Voُ_JgWAP>c->OX6+W\E5Gxl'5i 1T w*wut p1~,JT¦&,fuRDaҡPa~̄/&o}{[3²o8[P ;Qe AH`ܢyv?-TJi Bg8]9p<< VE~$57H:Rދ`͈cZsG^uӪqnq<;Yϧ%DV-_[l"Rb# I;A~scB]#ߧ1iH~SK73Me j3QJ28yP5"|dgV_f%W?9KAѡ̝Aq RaGzpOF2fH`n|B:-ф+_e_1,ZiK55 >_kے+h*,¡0q? 2CSY29~2oOO*48%@~κahyf~;ս_k5Ce;rC <3bW SFuc$Nbk-l,Wr#ڰStnr#o+Z-5̢arÏJ6NxzsDZ2F82B ڇ iQ5/ŬΚ((pm㪂^ @:"^W7mVS Vm#':Ȏ(d@nzʹaGnp}ht@Eɩ1 rVY5@[va>r]Wpz4OhyUbj,[4pF<`( f- <{Cl>66hIG WT냪!>d~ Z%2r]N#V8x2RpPJu~ d9V,OխSƁ/۠l5^[< x%a fs>IlvL'2 v){173#h-ዠše߼ ؜rru5 w$Ʋk 1NqrQV8twY´݆ښAH?7;k ~r vc~1ڛ9ӷVI"^-,aք٧$uHwzK(3 L>Řt]1f jlp:90ǡV*ÁΑfp3=|53qTG&cJXOLjC1 #w8ހ硕5yӻ8(nvUvMĺtv}f;P4m*swcV` BK *W?^3`앨ٝ{-1KNC>j`_Jv^=D)ej0PէF!N !钛$V2)'=0v[<k=:b\6?{)X'7 $vʾۑ  'WbHӚ YBX ,Ȃxh3{ukxDP)/=DۙCŕqók%F5ro4vb$38L~x}8%$Yuq5`S@? 9v&YYSYMdAaV'+cʰ3'Cs 6 1FtSV;VKEkK^|Rox+.Q;W,xA0ϝ1B)kV U3U4alwٳƝX|Z!c:S#lO8emk*<{UtXPq\Hk4 wmF)@Ύ/z$! 1>goSӱjѻ/ě`Ϯb`0[' R PAfXCy[`cC„60C Vh=Uh;H9!!'uIeGP`37/Na_ XPd;kuX&eE;mfRttvi`e7Fؘ2;ofE4HwB ,6MO3Kpx~13Am/H_g}.oA1Sgٿ$HíL6#^O$] ѷA0t=Z5}0VA6K6(!k}>zU%9Y7|8*ASPsBv5 SJü[`s 8ni*w|.>܊@jlYڰR`lnZwю(cSѯ fs 3M.ZjkO혿p2O!Lq[RH.f+xi-}d"s6) VqF^d{)c1 ۳xnפۀ ë KGӈ>q?gs;= SO[sM,[4V7k%h]G g%^=6m"07MԦr23CV2S|ID5п%9 yo@[T%5^8UiP5$Mp,Nrf^yLuvܥ[낳$ NqYre^ʁ^wRVI}E,%teRN8 +.dkV^Sa|tU$e:q#BEO-v%qHë+3g;6gSС>\~ ],:cJ صEX#>:aRNJ.Uc *vObbEK1`.bIކ3*@)8w(F߲g?h 6Ty }ڞ|٪4yԣI6wr80;LhzlH!>B6}ԁ#4)D۲rg>;b{IzƬZpfѧ3 BX٢-bn;@~!<^Xy=BZERk^{@^XڑM}C%DSb׊ ̡.ۄMc|vrįh<$ia3-$aDsTÅ:9JTzUđE`Ċ)cTazU=イx{BkMђ@vM.;IDCP+6h?"~-&Y1cbn$'Ob]"{r,6*O7D>ip0D!_ {fӡP1@"(_MB6gY]p|#jKJX;Uͧ9oHu;6xo]8Pn.^ʩO÷o#V{}np<@o؂҄^(jo%s&n&]!y+#?0k,pG7un"?|vȠfz4_Z4CsM1Ǔ{ŅŨ!OJ!M(E q~)( l7 >*-"kőNFŮLkj<$ L MeS+ Dt `ط[<(O3l\-֛*!|pt06x`yZu$\_ɑQ 'O?̾52,v MA"i$j(e%fY"S5TMJ3fN%#fd9v?O苘1CU)g)olC^w] @g7}2DV dd&K-M&GC6՛L13$څ246Ώ.hRe!z~XOtYWF.}͡{oeX4ڡ!@ov5uq N*:(Mv[Vy#y7}:/Q.3tj(r,_#V-᩼Ow9NEz0ُJit "xz)wPUHbqk`W`Bcx#U6;mkjѫv*-~<z&VI3)V Ho̰[44q1<Ah ƒ2ϰ["ǘٵVoP-F5T#Hm0N$dy+AR+pq,qNYH貅F?x҇sXnZQӈ'm'2 ^Q=c-YVf:!{gs3u|dtFPIz!I8Zc...F88 bG_Zr686 ͘vQ-5c~Fߢw]?Hk:pPE-ʌGJ3eV;mI=9z C<5)lD?oLI*c DzWE^{~q*+RRrT9/85]@蝜!j$eX&^fN>Xk㍝5 =vgkLKr( ( yAŚK>{r>5rX!و I Ѿ&8-C/7 E^)S޺J1KZ@Ya@5603RݝRI>N> W'|'5NBe%{M9P}a޹C j,U{P]@p0&"Wn$ kHCTfG!ƙ8eo[3T:?ƾ~ ēkzs{{?6L4󀼛yY}CuL! sXUNpcoұB|ȴxfG I_a[",8'۩r=tQtxwݾ;94b;ﰒoM 6$Rbk4_~yRv{1οQZRmOmz[;S)rYp2er CB[Pʄ \8Vp[kA|0]P83" 9Zٲ!K%6%C50tT_/Q~ rb%ڥi>| :_94[ ]T͇K'.1^/c[O?è5(PB% lGI+JTeأdjq%q׮d]cOp宅+;f}wLMP Q`;OtmU ɠQ1N`zLsB\" 6^|%<^#)wicJXV2_Gj€0*¥j#*jum'GG]4`_K4;ȄnpGwE_T4"8 j2*h@iKYCH, (l=#=fVhF^(M`>?C^c7O~(IoLr8Eq;RnXBqoykk6UJMEvN2bAF(*j,.(%c3%ܤo˻zlO+[7 I\!!N|X!b*fd:0bRT 5%R_k kF543ȁмql[ýCa;H9㚜8TcI/ΰykZaΔU>]\9GO000t@H5"[ُL͢{zovYB@"Jye㬛Kd0Kw@B{?{XYafzxd<5+dz|${ ‚H'Jǀ™fXfR)\wHqmb\m ۨf<@HLh9M巚|sC>:_?gA1<ИOpYk9w=6*/;t S~Ѩ'wcc#J.2?8+k'EQ4#טXHGZڎџENׇES}%m< 3ߣ_ƉO6-%TQn8*C0zK\ 0,",K2wj#b]en-+_hp$祯CR9l5*8GOį+%oA~gj _Iy\ܐ-eO@OV`GF@O%q%PYy|ZAo QP@:Pt|@x0ý$},aT@"_p3Z^3o|ċK 1 w*iA-%/S 3 :1 \mV48}Jo j/=ՆՑ[2Yɨ5AHtВyR :WW^v{O8W#)V(g_Az6‰?OQLB  <߈!4šf+DL$KRږ4 ^ zv&>q4Q%w}^cA Wcb?d0V&_ʃN2kkГATqu~7yT#ʤ"/Spi8ax:UϏ=;т_Ir=ygr9@=;D6MrEljh (=rV >@ZBC*n"<-XGMElQGI߆]?gsN#tnGtkzn R }$ۨ*u$QBM7bQ:V<)!{/%afq:u+oKn_i-te>4Jļ@wԵB`9?SgaFyv#hA2xSK8Gh.9^hRWלO _s2rq\_\nB;0 Xpi+^|`Kn3ߩFeMȴ  ATxg3"zEZ { ?w#jӾ-V *ҿwi2 &VWmOgj6f63 (<ٿpdaV-)RXp)*~nJ^V4TV>4UW)% eV= vrVxt9|uD#K{eaF|Csl):G:Zr[Ħ? OT&E{dZU:{ t79~Ȇ_!lm-ƚkNϔEz׬ۏCf. Íxzɐ^=+Z=hT;nu^D*KUh6A#eȈjaO\S5"Vk%0oTs#L9pmGw ;-6n|+Kg SVA2GZc#oXm!tD:SY p R}ܫE u9ц(4*.P*ÃcdCHic'Qd ^' M:SW+ })O,My=F=8[*4":"wX*cF/ߝS%N(~LH6%Z;== /C(੒'j>CKz "v2d { F=[brq2a|RY:#3N3mCYͮk:*Vtxw w{6f85_}Մ\iFࡨk94%|U%y ,OMB>KijG%ӣ*})J Շr%>hD-LOoiWP9xm=HXcɅe>4y>%3AKqI,%8o%(>XKv!ӕbN Pv9kBԠ, `BSjLMg~H=|J+)OӨϫ ߕo%A]Q7^!dBDڼZb:"Fe]G. @0KrRyl zpNN\qIo6sG-#kjGkќd@"\8±<oI%ةǰGH\P*kLOb(dĒZ0I,CD|w?c!G` & ٭_ nU|E~q ~۴~Y2IS 񨶐y(,ca䂘)/bLfVlytWє5?~]QLJha))̭fQ4}= h,O! ࡸC1Lq?F:Rݣ%s|[ѭL˛, Z}{H~{]Tdh69nQab HDZρNw(0aDujG_ꍐ@[hP ي8p%X tu h;1fA߿N $yYNŧ.\'6r؇G>0}YT%)uCؤ'Ll1uQ'7Y\nm߆rmE͇͟8j*Cy[9@s9Kt_N+}'^]&J"XKЭg'! ;IR>suV_ٴf;G5^Vu/~uMXcMUߏ&K6Y$Y{y3``TۢsLj$qЮ4O tgӍ6~[S E@zME9A3ӂICP/ä'à́b8Wƌo"1" J0#XC1vVQ쀾\VSV !}h zc1w0 :2~hwj@ e .NsrJ=11tҡV#Z@nntѢ(=;2*j]}]57 y;F*!dQD\QŷYkcLV/MjdEMH}Y=U=0.+rxT.8/T?Yq fG=GsX.4ڝzp1Nw!)ETobÈH[oĮM] 9ڜ%-Ei]}:a4GŝʬuCi\ހYADX2--/" sh.<VeA>rl*+*$+W)l1(%p !&/k`&7J`VDo2PIO]!.A}:_ۖ'0G[w0ˉ^[٠S~5 g8maFO]TT J.u0g눌Y e =t$/w X;vjwiwVթ[[ڂڛHa `{ yqMrqA<mOoFZ񫥐uO:0D~+$kOwZG8VyBk]d;'3o u'4hŧd8t-8cP~l9‚?td2=.klHoRBc +3FɜN9hNj7Gom3Cq>(u>nx t1} inC|}j2ܚVX%)ِUYMӂ.h!nMTA=I-HP~S&\Kڎ"ҋRDx;b`Qz/9C%n'rl5 Oin;Q՟A{td*=NAQO^o*IF HQE+w>o7EZ0R-Yҹ39A=6D/hdG =t׭0k+1FGOk0smaG?UAؙHWH 06 g xpxIԍd KxkBb%ƹ E%|p=b$Y~Yed~́jVN5ب_v#p߀Ʉj t8RjP=_HRG]: }!B(d{$S&5~ iAѤΜvմhᲞ;;,Rͦ{g dcw}:<"f>Ӎ ?LY1CaǸ ru6u+edN0xxr__.2OITϡ~T~+E\A˰ ocvga~DnԋvlV=;$,iG4k77خq>` Tֆ|@*I{4 r?_"=`.cu*wm@9hCr$ѝf_ptD&:]t9{>zrtlXGA^b&TD$T7LyɌZ%7UoS ܎o10ToXȔHv $€Q!sa}AqE4C|eY XA[֑at*Gו 92tD;߫9d4`?Hdkwȋ52JI;>W®ƚ{էX-}? a!Fp<Ł; ű`#>05.!$tFa9mO!DM&xԏd@>T&AgA=L9VbC2֟rS?v n{7SGc*}Xh, ,c82>% MKť=(`'wll ec5f P #X,r?A-<4Pq$͌U.P(~rzR~6c{&.&`&5u$ٟwgYd]wUt\g?^"gHc΀n1~nW¹"d=FЄ"i/c^ "4, ίCT{GI9B"<'\n53E v%U|ڌ _sqw ؃sW%*F>i=Mbcw6k& {/QrpNʃ"׈ܖa3iDHh..1d1f.qVIg@]k]~07htIePb\1wCh(_ :[{ 7N}S]qÈrb裳ױ|' U[4~ة͏ bX7cdgTn7y !_=a*^SLr6zsxw3f|jwtELb'6i'g6Ga֯LIpzLl]Uʵ)|-.FhW e,r;rYtӅ=')S)3ѻYt5=q n슈jO!Zo2c1>1v1]U"aZH2{0"k1e5ɛd=L. !wH7O(SVgτϲop-ܨ*-{X!;{O a|V=[}h,d[7[П›[h-|3Iye<33:G)0&Z^9gW3%fCEc8̈7VB{" Mbb(kHv9"U kͶؾ|g"UvUoLb[v﫮(i+sA#IZё=3 ϤOvA%T&o+˧F / *^fsyǗd<_EGO ~q2\!]HR-rJ'[,s\}7B}bW8@#ЩC@G W]ۦt}P"ql 3$%g6{U3ј΄{ ,l偪~ $Yzo$i*DmgY>;31 -K|yUs&b{ڱrBXq@A4M0xʫG;d,g7+9X>PQ<r8Rj+c`1~UV[8ĺ a [Ol b`c-x0M-sMkۚ"7p̵eZ xan,Q΄SURA6!(thaeم&?tX. WMihm`$9P-x~cb*7Uxt=bw |waZ{%Kxl|Z q+_”btcFC#xKZq:M!;~c !˹@o7v:}0qSb"v/8aP(mV n|VDOM5ΧN8Pov"#hϝZiB:/7B}'/A8 ޾%\R5siK3 pnvrwBNʵ4o\˷VKj?Y _y'"M9tEp`E;Z8`·[??IW8>H_n0~ x2~/[Nc)%bP<(~̐RӒ,{Jh_QS~;'#!CUU\ !GBu0?Mv#WäJHaK:j 퐆LnZoѠ ;Qyn&'(.$G`~O8[ (ut{hMK"B2S`w=4|la$WHb$j[ 5 9=ypJ,BM/m n+FDjKFlRsоl{pX\CV"H|[yOZ|uo6M{Oke]5UxcMU%ҫb}%Ϭ+p$Q,WWw[Jb5h.m篹-N%*I@7BcJsf.DDGB`^%YEn?(SPJ&~E(W`>?%< y.[)۪[VuP)$S@%j;j~Q|qAcIAs# j`xSqA 3c)pAxN382hB_ud`އl1av8cKD1w/0$M>/ .WGኖժJi&i&Y0%aw^P#Pp$W^/pOqDZV%AtA7NXA2\hxٔ} *(E܂o<Έ >n0$hA&L)F!P:t>V6aKztfCl X7;6H0ܔ+eI 4Zȸ oh FƸvqncN["G8'ydK}@v@,;]O5MO)7xhA&[`?/0۟Ʀ&O;QcVdЉ[wiD6m١dyqTCu G2ygIL6q7kB9Y\n4.]$IK]  6&ָ WmF @@{\uK`p3ñN}BEjO&h MC0FB ~O+'̧b})XtHXR@Uf4eQ[K{4X~;l=`iqǼNWwy&(@>v19_>I]1æ&jfhJϠF@2PKơT"sm $bڭ)}-%zwd1i_)J_)BSW-)Wg)`S[ǕֹS88e"tE%h`Odߖ(žl9߅Wh2.} $>Z49M#WQէ@i-lYRׇDBy};M t`Yo#{9djKJCm$GW"㫥NarNyгAFXeȚI6ƓEedDk")CKXlY9 vK~N][3eA#)\ޞ$]D~zyac̆t}U8OS4:1[$s%]޳(E4(ư^CSHj O1-^]aLMroЮb5sLE`E<@Z=kmqVdW}%x2$\P{|Υ>гp$VȢ`BUQ{ =3'{k/pq 4&2Hk#-?I_z33\@t/C@+V¾fFL ifFj4ڤR.:I/l1R:F1L4p׫) %@ 1w@Q+K麧l ˙3PRs{*&%hYx6o(ZM(s9ҩeګq7#ML -'8 Mk>xaH`ng摁pzm=)ڑ:2)T` F1J_!:kѦ/h@C0oKҝ2Ja\vf!{1Ֆ `IԞ zdNdjqjȍ~kt{窏r3nolnh ҄G  KCُ/mgnT J.HCw`5D~E'-I8xs0 ]sc 9Σί@h:<kAn,bapJu%"g(MEcYKxNwɮG>#`yS@U#cգǃG[D<:S@ZՐ,\TH%UnxP.#gl7B4ī"_=Tzף%>(k*#*+6u.)}9jAm=ED8>QtiPҙ-ҧv$p[2Tdv%MZ;p,ˬQx4f+P{`oŬu$SXst^v7e~OI<銩4`| {,X=}{)M/,ߒE gAn3з}?/2dJ'#9jwl;V"sa!&us! F|3'O\Ndhne@:k;Z E;c;,m˞duK`-׽lR/E ؙ<> $nʮ9;i3FP=M`:O^v1 F|i.9uw)#23 (sp:F"-7 bAf.i1HǿQdF4]Z ijΨs;9\\p9?~ٮ+>j( =R\.I鱛Dc?"#z86G >9XDha?KN@5AJnh<h_|ɚt+$t32qaBLju6H)vzT+`e|Xs_mUe..d/',z, %!'˷=E cݏzQ z 3ost`eٝג{;|1x(kI'4<.{ҜvUX~> ؘW>؝ymRu: օ.Y=&{=EFM9"[jAb=A{Ъٗ;ȩc C륉v y #Q)r'y3wS # m.١98}WAR "0ʓƻ$X 4J;R+4s 5XltǍ*g"Iʨ|S`SoQ4 ᷩ6B߽RNnZb goJ}YD_mk,2_aʙ.h*:BB]]q+Tr&G6T{N_r(W޸Û<&ytkz 1"NnYdL,F?K ~fKV9cČUhqb, ]Z7mIp W;/[in=eMc[Ta#n1IOǵd F`xQVtxU7qR޴3wMvS"''(0_hLަ -tQhc "WR;j +4^ǵ@ B)6 ħk2C;`;[f5T7v{w , H75x03f_GDA<0cH Cn/)0!(@!JrYa03eXXV D='#T:L;ŕpz4TXƩ%EX6?y`z=c _!J[1ᐼa9t%x^C *?a| Mټք:U#n"F+7xՄoD%NnH,Ŕ.MNk!<: g͆f `ۭ5W.-'.Yҳ*I;iPyߒrݵ`c`+lu&Xh$K%f.S>x /=^6OT|Zھ7P.4Iv芦p/Mt:w\! ɽhۆAymK:<%c'FgOa=GqPW('Fe;'S%$〫? vPg#I,^:xQ\$R8*;Ș,I=h;i]\ *[v][-+UgaV gωL8f଱AVw> Hh;;ق"4ƫ^!y.̄^sP^`aSH1roe~~8Ն'tD0BECzofkJ@~It%UC ؙ6ʊN B:|?SU>Ʊy>[QxVYOxZ %ƈ)m[ڤ_ɜ-2s%qA.le}4 7)D=jmL*@%W>X)+0y YU}_ŘpHJ/C.Pa!5甘m坴St|/g>MةCYY/w5_X9:OVԏ/X=rxcou3?d痙M9 m wyˡk3[WHRpVǶ @ӮY0.r`^Q)%n녎ˡ=u0g  z~ՙj͏!3A-D6E7^ 3vxCqtP+px9TSpwF\@0@9ufj4jZ XYP-%] 0A̽WC+J%7Vr -Nae/ôrbK!JB?6&ǯ6kVm3!"=JIKNjf^8:DҳqHu^/q]7?Be9͔BMil/]^0-8f[Xqdh(s @4AGm =|@`E 4h9L cV aP`Cv3F`Tndʌ0}+4L08 `fa5Tw8Xɂ0v^M8DGsS)JF/e)2'kiY8z`7cNtUIr9/9BSSJ;)WC01P<{b=diV='5[:Q{q0" ,):0db+2h~41J=6rE>NqpEgÙ/׬Aq ]+>X Q^jf W[S ԮD=X +ݧ[y] ƄI.ֆ66]4xCȨZ4Ӷaȇy|sߪ8xLO]>xC;s0ScY5- kPya$\ "H.#N fuHsfe/<Cp (Ůshҁ$Gwn#}]lD`v["U8$/SGR\Mz[5U:2mhm!;׉pf}.]LfD" _7[JWkǡɦF0in 0xքqLYxyzX4qwX "AMWǟ}oSzG`)f{[g_S-cP^:-,9įN"b@tKRXTCJa,[}Z'Q)QP|j5sR*}9ɰ0<Q3T?sY9bF4$ʲh$ٺ~2M+P>DuKq7mx65nᰐ2.Z:rCxVcUk6خc! vFq8znD`Mg:#!)HFeg9MވPڌu ST<”⛺Sk_a|7wT+߃\Rgָ@;$ ђ7 f@k( >\ZȂF Ju~AGV)YE2vP.{6'#cr^=\U x4݆|D&©fMuCs| ]*.p< zH A^vT8M, ^{;?+J_% tf =3B|5sy۷"z}/%_pZ4=ߤŸBQiߗ[ 1Eu߻c$v&[IN:ۙBmy|b]A*]=$Jֺzza+L}R-u]Qks֥ HZQ6VBz- n5DD(WOINLXEG#r epv)0J&b,,ֵ1mq0?ks<68Xrb"y-ڧ`oΆ0N-{=\p!"UJx\M.\H{w^[s[ZVn7mn4jҩsx3QDl ׫ q(OX~3n"0.Mb5$nP4 Q]]vf++ ljx`Xrhکp`I wxqa=kץxW$=§1M%\5Z? -vEB~ڱKQQO½42r[w65D|mHz m@d .zOu-O 7S{s V6MMml1Ɉ=`\Z]Rfz:ھ@phGSgNn:3aR;m L )"Gi "HX?atϧ9=-ks zz;Ti4HZAEC o`[ ԋ|~a}qljDKbOM Jp@RGa~Mu+x} ^g:IlFiawcQïqɚ0D&@< q7{:٢uPO%BrJyfXO"/<NW-!1p","| K91 'X"4P{dBʢTUampt*V~ďHY!扊Gyd72P 7sP0(/v:7E^u$95zIuN^>`E=VX9Ն5pslJqJD"ޱ{g_ӾϖCOaٌڀ1F^U ac4o[=VLY QS43/y{0+q v֖8]Ky|4t[A,C})4}<&I"\;ѷHSƸL䉋~y 4*k 9̀w8땢gcIkPX>J6 ،EG׭Y"4x跡]oզ˄ȟ-eܒrZd|F__$9/Z A,Jڷ9?#HMV=tJnqT&B2AU>x0xpE=<·";Hths-%lg..逽Os0 ޚ Ҿ]O YZ