wpa_supplicant-2.10-150600.7.3.1<>,PTfp9|pB5,h\y# T0(qRFwIsB-{z~do& & j7LMEN n[gb_ }:+M*~ǹ8[_4$i+1ޙIL4ev$nwZw݃ʵy Lb/ɵk(ԣ L;pXq=1I3:mWwX'SUֵ,%jar\:p$gdΊAU* u>Fט?׈d # ALP\`y  1}  << H< < < l< <<<!$!P<"@""&(&^8&h*9'*:*p*=Ą>Č?Ĕ@ĜFĤGļ<HŬ<IƜ<XY\<] <^ bͽcfdeflu <v wԌ<x|<yl/z(8<BׄCwpa_supplicant2.10150600.7.3.1WPA supplicant implementationwpa_supplicant is an implementation of the WPA Supplicant component, i.e., the part that runs in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.fh02-armsrv1c<|SUSE Linux Enterprise 15SUSE LLC BSD-3-Clause AND GPL-2.0-or-laterhttps://www.suse.com/Unspecifiedhttps://w1.fi/wpa_supplicantlinuxaarch64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in wpa_supplicant.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in wpa_supplicant.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable wpa_supplicant.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop wpa_supplicant.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in wpa_supplicant.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart wpa_supplicant.service ) || : fi fi?* . /  x OJ|2 t=J?yG BA큀AA큤A큤A큤A큤큤A큤ffffffffffffffffffaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQaQffaQfffffff3395fd7fd59f2d6145d5417e6f18b351d1e95cf08c037b255b3cbf89a1ded9c63c89cd606359f34c34517720b9b53aad87ec8aecb0a4b1f08fe6f0223665a8e95b58047a5d69389d466f73dafe96ef4a8abf72cf6cf454347d9f943cddb867de679f61e8cece6771c84a9d91e7e8955e83fa9534179f5d40394623d3d1766339f39334c24fd0f4201f15900040991fbb82170081bd248fb8267177c6782085a06bdbcfb9c9fcdbce25b370f85cf30d26a6199f7df6157e4043fd2d8cb719e334b0aebfdcb2559e9319798cf7a9c3dce6b27e20e3803dabd1091c9c8dbbee0af22f57dcd776c290fe03a232463f533171a8565f01eeb9ed6889431cbbc72dfb1601ce02347339b2fdfde893754f864b0318adf0dd39e352d39068b4b89c6e1d0cca1385e218f35305bf4c4f9982b90cf7e1bbe013f0404977b464d2034bcd3cee5a24b54f6db045b68c72b5e555a62db388207b68f0b7137add0117af9f56841c8794cd600c5968ae7e4923dc77f9bfef4f52a86e822280c08ddaa55c57dc06eaf01e1d1ee065a1054d20ebe8a78a016f1fb1133b73e6a9d50801b165bb280c7fdcc84989e7add6b1a1373114f2e26adb1d5eb747a7bc23d3909044a386a44843c4168eb7e00e1789207d1f269c021c32f5d0c5a0355512cd5914259422307b848149f2c763f49de40e07c2ed72a603985faf90d9a2ca138f85136dba6c03d42c9c0c82429f82c4ff2506cd50f0bc352d9181b8aea7d9090697c8b4f1a3bdafdc9daa2ab233a2e995bf18c8252fe877efa6bdbdbf469e4bf823f037d467623c1f80c7718e54719526f0e4e549946bded31755c2989dac859d9fae01ced2d4857ac0b63a71d310be1a9150d54a34042d703970502c27ff46a655a3df8df5afb0557ea468ad96d7d00dae588c5554fb22c5bc9917ef44772014bedf27c1413b2435ab12d1a4ae5a5adca4ca651152ae3d3a0d0ad1caf5f289c02fdedf8a7335aafb7c7cad7b70cb9c4aefa37f372e15f6d832d5a03608088c5be38537a22fbd0b00e777b65e5ff0008b9c0a66a03336e76f482640c788e4d5d715228a6b8cbc8719ef4abeaa34868102550f89f1e8d85de745fae5e7a21d72fa40913e965b127cc2a9977ecf9ffef5ea42326e7e0d602e63bf064830ef4c9c6a3760afb7477e6e9ff544d424323ae066f974844d157ff27268551ad01eeb6ad84292c1e77d5296c7008517a87c1b474403014d2c89fc67344f4636f0c846e247c497f8d7e992f972900f5b36b62449b6566f76c96e5b45e957091a98c99d587462c541b02aee1845ce86cebbae57b5d0bb5c262114ebb78491edc4c86e5e2dfbdc5963f8937bd1267b372773adff540f3dfbded934bc8c54767d2c1347e9a40ac616cd5dedffd2a9a816fd1e667a2fcea0cc35050ecdf217294ee8bb33b0ec826a911c86799541fc3901899b335266a0bc4ca789b89644e4219fb73f9911979196f17c23a192c39833083daa129883704ed1169b5a966f8e4f59360c2144768c832bf31be106943081b173ae5421cc6359c0871726ea0ef7787c66a7b97a6368ea9448f32f070a20c312888635eed4091dcf7a3517aeaf17668aad892a450f9e23994841987002ad9ea77192189257c51f8c740370db7d682ef89a7758f01d3ecd55e193614d823e1f8410bf1869c019efb3cfdd74e760437d7ab59e94b488b5da65fb16e54a80d56d5074da96aada56c53bab20f95b57d3cc66cf0d8f2019056f2f5d9fbbcd3ad19aa2e9b41be539c7e7ba05d45049ba38bcf7c334008893f125a24f3d89afc94b55ed4a6fbc8336ecc3f5a0c8358746f80f8c6d9f404dde5f1a853880ee0b2ddb756f668c1d704a238d45d8c3bdfb15bba68207f4e260677cd3c19ef5d12542118ab6737ef9c237f9c8a94cee036d3b9f6de4088b497bac4193f834e8bf1454da87ac4e333d0f120408a9d814e40c3672cd27f365af89b4f2f6631f7a9338953d1dfb75812db84e1118fc18a73c8840ac0edcd0ec32194da2c8b239f5722e2a09ed64e8d916c95f7f787ad9f3658fc80cd216d051694d6295bb2442f3ff8e3385ae8bb8b0fdc32b9d4debd581ab100124a8723d00bf0f5f55a31c93f541c636e336ef53146feb028d5dd4e87715765502362d388addacb99f5f40be9b2c13a591f0e989ff33edbd0473a8a80c46984fcb4842090243c6ce8d3e0d961e409a6da16036213d2bccf05233ec512358a7574a9591e143c24a80b03364931f2f3d1dcwpa_supplicant.servicewpa_supplicant.serviceservice@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwpa_supplicant-2.10-150600.7.3.1.src.rpmconfig(wpa_supplicant)wpa_supplicantwpa_supplicant(aarch-64) @@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(wpa_supplicant)ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.29)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-genl-3.so.200()(64bit)libnl-genl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libnl-route-3.so.200(libnl_3_2_28)(64bit)libssl.so.3()(64bit)libssl.so.3(OPENSSL_3.0.0)(64bit)logrotaterpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.10-150600.7.3.13.0.4-14.6.0-14.0-15.2-14.14.3e}@c@b@b@`lM@`?z@`:4@`_|\@_i@_i@^@^@^|@^|@^Y]]>[<@[[ā@[[;@[@[QY@X@X]W@VU@VŲ@V`V=@UKSUCjU8U'@U/@TBV@cfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comsp1ritCS@protonmail.comcfamullaconrad@suse.comsongchuan.kang@suse.comcfamullaconrad@suse.combwiedemann@suse.comcfamullaconrad@suse.comilya@ilya.pp.uatchvatal@suse.comtchvatal@suse.comilya@ilya.pp.uailya@ilya.pp.uakbabioch@suse.comro@suse.dekbabioch@suse.comkbabioch@suse.comkbabioch@suse.comro@suse.demeissner@suse.comobs@botter.ccdwaas@suse.commeissner@suse.comtchvatal@suse.comlnussel@suse.decrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orglnussel@suse.demichael@stroeder.comro@suse.dezaitor@opensuse.orgcrrodriguez@opensuse.orgstefan.bruens@rwth-aachen.destefan.bruens@rwth-aachen.destefan.bruens@rwth-aachen.de- Add CVE-2023-52160.patch - Bypassing WiFi Authentication (bsc#1219975) - Change ctrl_interface from /var/run to %_rundir (/run)- update to 2.10.0: jsc#PED-2904 * SAE changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] - added support for the hash-to-element mechanism (sae_pwe=1 or sae_pwe=2); this is currently disabled by default, but will likely get enabled by default in the future - fixed PMKSA caching with OKC - added support for SAE-PK * EAP-pwd changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] * fixed P2P provision discovery processing of a specially constructed invalid frame [https://w1.fi/security/2021-1/] * fixed P2P group information processing of a specially constructed invalid frame [https://w1.fi/security/2020-2/] * fixed PMF disconnection protection bypass in AP mode [https://w1.fi/security/2019-7/] * added support for using OpenSSL 3.0 * increased the maximum number of EAP message exchanges (mainly to support cases with very large certificates) * fixed various issues in experimental support for EAP-TEAP peer * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol) * a number of MKA/MACsec fixes and extensions * added support for SAE (WPA3-Personal) AP mode configuration * added P2P support for EDMG (IEEE 802.11ay) channels * fixed EAP-FAST peer with TLS GCM/CCM ciphers * improved throughput estimation and BSS selection * dropped support for libnl 1.1 * added support for nl80211 control port for EAPOL frame TX/RX * fixed OWE key derivation with groups 20 and 21; this breaks backwards compatibility for these groups while the default group 19 remains backwards compatible * added support for Beacon protection * added support for Extended Key ID for pairwise keys * removed WEP support from the default build (CONFIG_WEP=y can be used to enable it, if really needed) * added a build option to remove TKIP support (CONFIG_NO_TKIP=y) * added support for Transition Disable mechanism to allow the AP to automatically disable transition mode to improve security * extended D-Bus interface * added support for PASN * added a file-based backend for external password storage to allow secret information to be moved away from the main configuration file without requiring external tools * added EAP-TLS peer support for TLS 1.3 (disabled by default for now) * added support for SCS, MSCS, DSCP policy * changed driver interface selection to default to automatic fallback to other compiled in options * a large number of other fixes, cleanup, and extensions - drop wpa_supplicant-p2p_iname_size.diff, CVE-2021-30004.patch, CVE-2021-27803.patch, CVE-2021-0326.patch, CVE-2019-16275.patch, CVE-2022-23303_0001.patch, CVE-2022-23303_0002.patch, CVE-2022-23303_0003.patch, CVE-2022-23303_0004.patch: upstream - drop restore-old-dbus-interface.patch, wicked has been switching to the new dbus interface in version 0.6.66 - config: * re-enable CONFIG_WEP * enable QCA vendor extensions to nl80211 * enable support for Automatic Channel Selection * enable OCV, security feature that prevents MITM multi-channel attacks * enable QCA vendor extensions to nl80211 * enable EAP-EKE * Support HT overrides * TLS v1.1 and TLS v1.2 * Fast Session Transfer (FST) * Automatic Channel Selection * Multi Band Operation * Fast Initial Link Setup * Mesh Networking (IEEE 802.11s) - Add dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch (bsc#1201219) - Move the dbus-1 system.d file to /usr (bsc#1200342) - Added hardening to systemd service(s) (bsc#1181400). Modified: * wpa_supplicant.service - drop wpa_supplicant-getrandom.patch : glibc has been updated so the getrandom() wrapper is now there - Sync wpa_supplicant.spec with Factory- Enable WPA3-Enterprise (SuiteB-192) support.- Add CVE-2022-23303_0001.patch, CVE-2022-23303_0002.patch, CVE-2022-23303_0003.patch, CVE-2022-23303_0004.patch SAE/EAP-pwd side-channel attack update 2 (CVE-2022-23303, CVE-2022-23304, bsc#1194732, bsc#1194733)- Add CVE-2021-30004.patch -- forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348)- Fix systemd device ready dependencies in wpa_supplicant@.service file. (see: https://forums.opensuse.org/showthread.php/547186-wpa_supplicant-service-fails-on-boot-succeeds-on-restart?p=2982844#post2982844)- Add CVE-2021-27803.patch -- P2P provision discovery processing vulnerability (bsc#1182805)- Add CVE-2021-0326.patch -- P2P group information processing vulnerability (bsc#1181777)- Add wpa_supplicant-p2p_iname_size.diff -- Limit P2P_DEVICE name to appropriate ifname size (https://patchwork.ozlabs.org/project/hostap/patch/20200825062902.124600-1-benjamin@sipsolutions.net/)- Fix spec file for SLE12, use make %{?_smp_mflags} instead of %make_build- Enable SAE support(jsc#SLE-14992).- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass (bsc#1150934)- Add restore-old-dbus-interface.patch to fix wicked wlan (boo#1156920) - Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)- With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)- Change wpa_supplicant.service to ensure wpa_supplicant gets started before network. Fix WLAN config on boot with wicked. (boo#1166933)- Adjust the service to start after network.target wrt bsc#1165266- Update to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640) - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) - SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - Drop merged patches: * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch * rebased-v2.6-0009-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch * wpa_supplicant-bnc-1099835-fix-private-key-password.patch * wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch * wpa_supplicant-log-file-permission.patch * wpa_supplicant-log-file-cloexec.patch * wpa_supplicant-git-fa67debf4c6ddbc881a212b175faa6d5d0d90c8c.patch * wpa_supplicant-git-f5b74b966c942feb95a8ddbb7d130540b15b796d.patch - Rebase patches: * wpa_supplicant-getrandom.patch- Refresh spec-file via spec-cleaner and manual optimizations. * Change URL and Source0 to actual project homepage. * Remove macro %{?systemd_requires} and rm (not needed). * Add %autopatch macro. * Add %make_build macro. - Chenged patch wpa_supplicant-flush-debug-output.patch (to -p1). - Changed service-files for start after network (systemd-networkd).- Refresh spec-file: add %license tag.- Renamed patches: - wpa-supplicant-log-file-permission.patch -> wpa_supplicant-log-file-permission.patch - wpa-supplicant-log-file-cloexec.patch -> wpa_supplicant-log-file-cloexec.patch - wpa_supplicant-log-file-permission.patch: Using O_WRONLY flag - Enabled timestamps in log files (bsc#1080798)- compile eapol_test binary to allow testing via radius proxy and server (note: this does not match CONFIG_EAPOL_TEST which sets -Werror and activates an assert call inside the code of wpa_supplicant) (bsc#1111873), (fate#326725) - add patch to fix wrong operator precedence in ieee802_11.c wpa_supplicant-git-fa67debf4c6ddbc881a212b175faa6d5d0d90c8c.patch - add patch to avoid redefinition of __bitwise macro wpa_supplicant-git-f5b74b966c942feb95a8ddbb7d130540b15b796d.patch- Added wpa-supplicant-log-file-permission.patch: Fixes the default file permissions of the debug log file to more sane values, i.e. it is no longer world-readable (bsc#1098854). - Added wpa-supplicant-log-file-cloexec.patch: Open the debug log file with O_CLOEXEC, which will prevent file descriptor leaking to child processes (bsc#1098854).- Added rebased-v2.6-0009-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch: Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).- Enabled PWD as EAP method. This allows for password-based authentication, which is easier to setup than most of the other methods, and is used by the Eduroam network (bsc#1109209).- add two patches from upstream to fix reading private key passwords from the configuration file (bsc#1099835) - add patch for git 89971d8b1e328a2f79699c953625d1671fd40384 wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch - add patch for git f665c93e1d28fbab3d9127a8c3985cc32940824f wpa_supplicant-bnc-1099835-fix-private-key-password.patch- Fix KRACK attacks (bsc#1056061, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088): - rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch - rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch - rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch - rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch - rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch - rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch - rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch - rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch- fix wpa_supplicant-sigusr1-changes-debuglevel.patch to match eloop_signal_handler type (needed to build eapol_test via config)- Added .service files that accept interfaces as %i arguments so it's possible to call the daemon with: "systemctl start wpa_supplicant@$INTERFACE_NAME.service" (like openvpn for example)- updated to 2.6 / 2016-10-02 * fixed WNM Sleep Mode processing when PMF is not enabled [http://w1.fi/security/2015-6/] (CVE-2015-5310 bsc#952254) * fixed EAP-pwd last fragment validation [http://w1.fi/security/2015-7/] (CVE-2015-5315 bsc#953115) * fixed EAP-pwd unexpected Confirm message processing [http://w1.fi/security/2015-8/] (CVE-2015-5316 bsc#953115) * fixed WPS configuration update vulnerability with malformed passphrase [http://w1.fi/security/2016-1/] (CVE-2016-4476 bsc#978172) * fixed configuration update vulnerability with malformed parameters set over the local control interface [http://w1.fi/security/2016-1/] (CVE-2016-4477 bsc#978175) * fixed TK configuration to the driver in EAPOL-Key 3/4 retry case * extended channel switch support for P2P GO * started to throttle control interface event message bursts to avoid issues with monitor sockets running out of buffer space * mesh mode fixes/improvements - generate proper AID for peer - enable WMM by default - add VHT support - fix PMKID derivation - improve robustness on various exchanges - fix peer link counting in reconnect case - improve mesh joining behavior - allow DTIM period to be configured - allow HT to be disabled (disable_ht=1) - add MESH_PEER_ADD and MESH_PEER_REMOVE commands - add support for PMKSA caching - add minimal support for SAE group negotiation - allow pairwise/group cipher to be configured in the network profile - use ieee80211w profile parameter to enable/disable PMF and derive a separate TX IGTK if PMF is enabled instead of using MGTK incorrectly - fix AEK and MTK derivation - remove GTKdata and IGTKdata from Mesh Peering Confirm/Close - note: these changes are not fully backwards compatible for secure (RSN) mesh network * fixed PMKID derivation with SAE * added support for requesting and fetching arbitrary ANQP-elements without internal support in wpa_supplicant for the specific element (anqp[265]= in "BSS " command output) * P2P - filter control characters in group client device names to be consistent with other P2P peer cases - support VHT 80+80 MHz and 160 MHz - indicate group completion in P2P Client role after data association instead of already after the WPS provisioning step - improve group-join operation to use SSID, if known, to filter BSS entries - added optional ssid= argument to P2P_CONNECT for join case - added P2P_GROUP_MEMBER command to fetch client interface address * P2PS - fix follow-on PD Response behavior - fix PD Response generation for unknown peer - fix persistent group reporting - add channel policy to PD Request - add group SSID to the P2PS-PROV-DONE event - allow "P2P_CONNECT p2ps" to be used without specifying the default PIN * BoringSSL - support for OCSP stapling - support building of h20-osu-client * D-Bus - add ExpectDisconnect() - add global config parameters as properties - add SaveConfig() - add VendorElemAdd(), VendorElemGet(), VendorElemRem() * fixed Suite B 192-bit AKM to use proper PMK length (note: this makes old releases incompatible with the fixed behavior) * improved PMF behavior for cases where the AP and STA has different configuration by not trying to connect in some corner cases where the connection cannot succeed * added option to reopen debug log (e.g., to rotate the file) upon receipt of SIGHUP signal * EAP-pwd: added support for Brainpool Elliptic Curves (with OpenSSL 1.0.2 and newer) * fixed EAPOL reauthentication after FT protocol run * fixed FTIE generation for 4-way handshake after FT protocol run * extended INTERFACE_ADD command to allow certain type (sta/ap) interface to be created * fixed and improved various FST operations * added 80+80 MHz and 160 MHz VHT support for IBSS/mesh * fixed SIGNAL_POLL in IBSS and mesh cases * added an option to abort an ongoing scan (used to speed up connection and can also be done with the new ABORT_SCAN command) * TLS client - do not verify CA certificates when ca_cert is not specified - support validating server certificate hash - support SHA384 and SHA512 hashes - add signature_algorithms extension into ClientHello - support TLS v1.2 signature algorithm with SHA384 and SHA512 - support server certificate probing - allow specific TLS versions to be disabled with phase2 parameter - support extKeyUsage - support PKCS #5 v2.0 PBES2 - support PKCS #5 with PKCS #12 style key decryption - minimal support for PKCS #12 - support OCSP stapling (including ocsp_multi) * OpenSSL - support OpenSSL 1.1 API changes - drop support for OpenSSL 0.9.8 - drop support for OpenSSL 1.0.0 * added support for multiple schedule scan plans (sched_scan_plans) * added support for external server certificate chain validation (tls_ext_cert_check=1 in the network profile phase1 parameter) * made phase2 parser more strict about correct use of auth= and autheap= values * improved GAS offchannel operations with comeback request * added SIGNAL_MONITOR command to request signal strength monitoring events * added command for retrieving HS 2.0 icons with in-memory storage (REQ_HS20_ICON, GET_HS20_ICON, DEL_HS20_ICON commands and RX-HS20-ICON event) * enabled ACS support for AP mode operations with wpa_supplicant * EAP-PEAP: fixed interoperability issue with Windows 2012r2 server ("Invalid Compound_MAC in cryptobinding TLV") * EAP-TTLS: fixed success after fragmented final Phase 2 message * VHT: added interoperability workaround for 80+80 and 160 MHz channels * WNM: workaround for broken AP operating class behavior * added kqueue(2) support for eloop (CONFIG_ELOOP_KQUEUE) * nl80211: - add support for full station state operations - do not add NL80211_ATTR_SMPS_MODE attribute if HT is disabled - add NL80211_ATTR_PREV_BSSID with Connect command - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use unencrypted EAPOL frames * added initial MBO support; number of extensions to WNM BSS Transition Management * added support for PBSS/PCP and P2P on 60 GHz * Interworking: add credential realm to EAP-TLS identity * fixed EAPOL-Key Request Secure bit to be 1 if PTK is set * HS 2.0: add support for configuring frame filters * added POLL_STA command to check connectivity in AP mode * added initial functionality for location related operations * started to ignore pmf=1/2 parameter for non-RSN networks * added wps_disabled=1 network profile parameter to allow AP mode to be started without enabling WPS * wpa_cli: added action script support for AP-ENABLED and AP-DISABLED events * improved Public Action frame addressing - add gas_address3 configuration parameter to control Address 3 behavior * number of small fixes - wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff: dump x509 certificates from remote radius server in debug mode in WPA-EAP.- Remove support for <12.3 as we are unresolvable there anyway - Use qt5 on 13.2 if someone pulls this package in - Convert to pkgconfig dependencies over the devel pkgs - Use the %qmake5 macro to build the qt5 gui- add After=dbus.service to prevent too early shutdown (bnc#963652)- Revert CONFIG_ELOOP_EPOLL=y, it is broken in combination with CONFIG_DBUS=yes.- spec: Compile the GUI against QT5 in 13.2 and later.- Previous update did not include version 2.5 tarball or changed the version number in spec, only the changelog and removed patches. - config: set CONFIG_NO_RANDOM_POOL=y, we have a reliable· random number generator by using /dev/urandom, no need to keep an internal random number pool which draws entropy from /dev/random. - config: prefer using epoll(7) instead of select(2) by setting CONFIG_ELOOP_EPOLL=y - wpa_supplicant-getrandom.patch: Prefer to use the getrandom(2) system call to collect entropy. if it is not present disable buffering when reading /dev/urandom, otherwise each os_get_random() call will request BUFSIZ of entropy instead of the few needed bytes.- add aliases for both provided dbus names to avoid systemd stopping the service when switching runlevels (boo#966535)- removed obsolete security patches: * 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch * 0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch * 0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch * 0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch * wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch * 0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch * 0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch * 0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch * 0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch - Update to upstream release 2.5 * fixed P2P validation of SSID element length before copying it [http://w1.fi/security/2015-1/] (CVE-2015-1863) * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding [http://w1.fi/security/2015-2/] (CVE-2015-4141) * fixed WMM Action frame parser (AP mode) [http://w1.fi/security/2015-3/] (CVE-2015-4142) * fixed EAP-pwd peer missing payload length validation [http://w1.fi/security/2015-4/] (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146) * fixed validation of WPS and P2P NFC NDEF record payload length [http://w1.fi/security/2015-5/] (CVE-2015-8041) * nl80211: - added VHT configuration for IBSS - fixed vendor command handling to check OUI properly - allow driver-based roaming to change ESS * added AVG_BEACON_RSSI to SIGNAL_POLL output * wpa_cli: added tab completion for number of commands * removed unmaintained and not yet completed SChannel/CryptoAPI support * modified Extended Capabilities element use in Probe Request frames to include all cases if any of the values are non-zero * added support for dynamically creating/removing a virtual interface with interface_add/interface_remove * added support for hashed password (NtHash) in EAP-pwd peer * added support for memory-only PSK/passphrase (mem_only_psk=1 and CTRL-REQ/RSP-PSK_PASSPHRASE) * P2P - optimize scan frequencies list when re-joining a persistent group - fixed number of sequences with nl80211 P2P Device interface - added operating class 125 for P2P use cases (this allows 5 GHz channels 161 and 169 to be used if they are enabled in the current regulatory domain) - number of fixes to P2PS functionality - do not allow 40 MHz co-ex PRI/SEC switch to force MCC - extended support for preferred channel listing * D-Bus: - fixed WPS property of fi.w1.wpa_supplicant1.BSS interface - fixed PresenceRequest to use group interface - added new signals: FindStopped, WPS pbc-overlap, GroupFormationFailure, WPS timeout, InvitationReceived - added new methods: WPS Cancel, P2P Cancel, Reconnect, RemoveClient - added manufacturer info * added EAP-EKE peer support for deriving Session-Id * added wps_priority configuration parameter to set the default priority for all network profiles added by WPS * added support to request a scan with specific SSIDs with the SCAN command (optional "ssid " arguments) * removed support for WEP40/WEP104 as a group cipher with WPA/WPA2 * fixed SAE group selection in an error case * modified SAE routines to be more robust and PWE generation to be stronger against timing attacks * added support for Brainpool Elliptic Curves with SAE * added support for CCMP-256 and GCMP-256 as group ciphers with FT * fixed BSS selection based on estimated throughput * added option to disable TLSv1.0 with OpenSSL (phase1="tls_disable_tlsv1_0=1") * added Fast Session Transfer (FST) module * fixed OpenSSL PKCS#12 extra certificate handling * fixed key derivation for Suite B 192-bit AKM (this breaks compatibility with the earlier version) * added RSN IE to Mesh Peering Open/Confirm frames * number of small fixes- added patch for bnc#930077 CVE-2015-4141 0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch - added patch for bnc#930078 CVE-2015-4142 0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch - added patches for bnc#930079 CVE-2015-4143 0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch 0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch 0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch 0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch 0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch- Add wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch Fix Segmentation fault in wpa_supplicant. Patch taken from upstream master git (arch#44740).- 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch Fix CVE-2015-1863, memcpy overflow. - wpa_supplicant-alloc_size.patch: annotate two wrappers with attribute alloc_size, which may help warning us of bugs such as the above.- Delete wpa_priv and eapol_test man pages, these are disabled in config - Move wpa_gui man page to gui package- Update to 2.4 * allow OpenSSL cipher configuration to be set for internal EAP server (openssl_ciphers parameter) * fixed number of small issues based on hwsim test case failures and static analyzer reports * P2P: - add new=<0/1> flag to P2P-DEVICE-FOUND events - add passive channels in invitation response from P2P Client - enable nl80211 P2P_DEVICE support by default - fix regresssion in disallow_freq preventing search on social channels - fix regressions in P2P SD query processing - try to re-invite with social operating channel if no common channels in invitation - allow cross connection on parent interface (this fixes number of use cases with nl80211) - add support for P2P services (P2PS) - add p2p_go_ctwindow configuration parameter to allow GO CTWindow to be configured * increase postponing of EAPOL-Start by one second with AP/GO that supports WPS 2.0 (this makes it less likely to trigger extra roundtrip of identity frames) * add support for PMKSA caching with SAE * add support for control mesh BSS (IEEE 802.11s) operations * fixed number of issues with D-Bus P2P commands * fixed regression in ap_scan=2 special case for WPS * fixed macsec_validate configuration * add a workaround for incorrectly behaving APs that try to use EAPOL-Key descriptor version 3 when the station supports PMF even if PMF is not enabled on the AP * allow TLS v1.1 and v1.2 to be negotiated by default; previous behavior of disabling these can be configured to work around issues with broken servers with phase1="tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=1" * add support for Suite B (128-bit and 192-bit level) key management and cipher suites * add WMM-AC support (WMM_AC_ADDTS/WMM_AC_DELTS) * improved BSS Transition Management processing * add support for neighbor report * add support for link measurement * fixed expiration of BSS entry with all-zeros BSSID * add optional LAST_ID=x argument to LIST_NETWORK to allow all configured networks to be listed even with huge number of network profiles * add support for EAP Re-Authentication Protocol (ERP) * fixed EAP-IKEv2 fragmentation reassembly * improved PKCS#11 configuration for OpenSSL * set stdout to be line-buffered * add TDLS channel switch configuration * add support for MAC address randomization in scans with nl80211 * enable HT for IBSS if supported by the driver * add BSSID black and white lists (bssid_blacklist, bssid_whitelist) * add support for domain_suffix_match with GnuTLS * add OCSP stapling client support with GnuTLS * include peer certificate in EAP events even without a separate probe operation; old behavior can be restored with cert_in_cb=0 * add peer ceritficate alt subject name to EAP events (CTRL-EVENT-EAP-PEER-ALT) * add domain_match network profile parameter (similar to domain_suffix_match, but full match is required) * enable AP/GO mode HT Tx STBC automatically based on driver support * add ANQP-QUERY-DONE event to provide information on ANQP parsing status * allow passive scanning to be forced with passive_scan=1 * add a workaround for Linux packet socket behavior when interface is in bridge * increase 5 GHz band preference in BSS selection (estimate SNR, if info not available from driver; estimate maximum throughput based on common HT/VHT/specific TX rate support) * add INTERWORKING_ADD_NETWORK ctrl_iface command; this can be used to implement Interworking network selection behavior in upper layers software components * add optional reassoc_same_bss_optim=1 (disabled by default) optimization to avoid unnecessary Authentication frame exchange * extend TDLS frame padding workaround to cover all packets * allow wpa_supplicant to recover nl80211 functionality if the cfg80211 module gets removed and reloaded without restarting wpa_supplicant * allow hostapd DFS implementation to be used in wpa_supplicant AP mode- Update to 2.3 * fixed number of minor issues identified in static analyzer warnings * fixed wfd_dev_info to be more careful and not read beyond the buffer when parsing invalid information for P2P-DEVICE-FOUND * extended P2P and GAS query operations to support drivers that have maximum remain-on-channel time below 1000 ms (500 ms is the current minimum supported value) * added p2p_search_delay parameter to make the default p2p_find delay configurable * improved P2P operating channel selection for various multi-channel concurrency cases * fixed some TDLS failure cases to clean up driver state * fixed dynamic interface addition cases with nl80211 to avoid adding ifindex values to incorrect interface to skip foreign interface events properly * added TDLS workaround for some APs that may add extra data to the end of a short frame * fixed EAP-AKA' message parser with multiple AT_KDF attributes * added configuration option (p2p_passphrase_len) to allow longer passphrases to be generated for P2P groups * fixed IBSS channel configuration in some corner cases * improved HT/VHT/QoS parameter setup for TDLS * modified D-Bus interface for P2P peers/groups * started to use constant time comparison for various password and hash values to reduce possibility of any externally measurable timing differences * extended explicit clearing of freed memory and expired keys to avoid keeping private data in memory longer than necessary * added optional scan_id parameter to the SCAN command to allow manual scan requests for active scans for specific configured SSIDs * fixed CTRL-EVENT-REGDOM-CHANGE event init parameter value * added option to set Hotspot 2.0 Rel 2 update_identifier in network configuration to support external configuration * modified Android PNO functionality to send Probe Request frames only for hidden SSIDs (based on scan_ssid=1) * added generic mechanism for adding vendor elements into frames at runtime (VENDOR_ELEM_ADD, VENDOR_ELEM_GET, VENDOR_ELEM_REMOVE) * added fields to show unrecognized vendor elements in P2P_PEER * removed EAP-TTLS/MSCHAPv2 interoperability workaround so that MS-CHAP2-Success is required to be present regardless of eap_workaround configuration * modified EAP fast session resumption to allow results to be used only with the same network block that generated them * extended freq_list configuration to apply for sched_scan as well as normal scan * modified WPS to merge mixed-WPA/WPA2 credentials from a single session * fixed nl80211/RTM_DELLINK processing when a P2P GO interface is removed from a bridge * fixed number of small P2P issues to make negotiations more robust in corner cases * added experimental support for using temporary, random local MAC address (mac_addr and preassoc_mac_addr parameters); this is disabled by default (i.e., previous behavior of using permanent address is maintained if configuration is not changed) * added D-Bus interface for setting/clearing WFD IEs * fixed TDLS AID configuration for VHT * modified -m configuration file to be used only for the P2P non-netdev management device and do not load this for the default station interface or load the station interface configuration for the P2P management interface * fixed external MAC address changes while wpa_supplicant is running * started to enable HT (if supported by the driver) for IBSS * fixed wpa_cli action script execution to use more robust mechanism (CVE-2014-3686)/bin/sh/bin/sh/bin/sh/bin/shh02-armsrv1 1726746335  !"#$%&'()*+,-./0123456789:;>?2.10-150600.7.3.12.10-150600.7.3.12.10-150600.7.3.1 wpa_supplicantwpa_supplicantwpa_supplicant.confwpa_supplicantdbus-fi.epitest.hostap.WPASupplicant.servicedbus-fi.w1.wpa_supplicant1.servicewpa_supplicant.servicewpa_supplicant@.serviceeapol_testrcwpa_supplicantwpa_cliwpa_passphrasewpa_supplicantsystem-servicesfi.epitest.hostap.WPASupplicant.servicefi.w1.wpa_supplicant1.servicewpa_supplicant.confwpa_supplicantChangeLogREADMEexamples60_wpa_supplicantdbus-listen-preq.pydpp-nfc.pydpp-qrcode.pyieee8021x.confopenCryptoki.confp2pp2p-action-udhcp.shp2p-action.shp2p-nfc.pyp2p_connect.pyp2p_disconnect.pyp2p_find.pyp2p_flush.pyp2p_group_add.pyp2p_invite.pyp2p_listen.pyp2p_stop_find.pyplaintext.confudhcpd-p2p.confwep.confwpa-psk-tkip.confwpa2-eap-ccmp.confwpas-dbus-new-getall.pywpas-dbus-new-signals.pywpas-dbus-new-wps.pywpas-dbus-new.pywps-ap-cliwps-nfc.pytodo.txtwpa_supplicant.confwpa_supplicantCOPYINGwpa_supplicant.conf.5.gzeapol_test.8.gzwpa_background.8.gzwpa_cli.8.gzwpa_passphrase.8.gzwpa_supplicant.8.gz/etc/logrotate.d//etc//etc/wpa_supplicant//run//usr/lib/systemd/system//usr/sbin//usr/share/dbus-1//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/doc/packages//usr/share/doc/packages/wpa_supplicant//usr/share/doc/packages/wpa_supplicant/examples//usr/share/doc/packages/wpa_supplicant/examples/p2p//usr/share/licenses//usr/share/licenses/wpa_supplicant//usr/share/man/man5//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35766/SUSE_SLE-15-SP6_Update/1481ab215a0b1830ea80ceb6538f4766-wpa_supplicant.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linux    ASCII textdirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=5ef235582e5361711921b1bcb93af17add33f434, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=7a64eb0c21303d4584424bd071f915f308974339, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=8cfbeec3fb0c6625b6ece1cede3d347f0527001f, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=5527243b04253e6f03ba0cf90e94a3788f513ce4, for GNU/Linux 3.7.0, strippedexported SGML document, ASCII textPOSIX shell script, ASCII text executablePython script, ASCII text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)RRRR R RR RRRR R RRRR RRRRR R RR RRRRRRRRRR R RR RRRRRRR R RRe rutf-8ae5c946f97a4cf7de157ae0ddb36146df41cffee6b4b314379410979b18ddaaf?7zXZ !t/]"k%[#rD~d p(8g~ vLt˚o(Gq[ 29, @,7|s\ A GFGKLX!P*juSX N)LF pan=kÝ;lmG&+.$iPx@ہH ~5Ɍ˧׶WNpcF3HH FD uv%mv$4wl*^^2541JJ:\:>XTeh !Pr i~L.02-ޝZBdw)τ7*$Hݵ4$)X8~I Qr.bgk CAi` *rk9C1~[Xr] U9"SM6 y0WNw\ޓ»Iܰv̰{~ ޾bܟn[h}+i{rZ`F/x5B-P[ZSyYPa lCF{k05^V:ɢ !%L ]GuObPH!~قO0.9ٳuQR^g,i+Bl0SKqkjӣvF*i+SK Y4L@h8Fl05Ky* 7f %[@e"q~HQYe"F3'\$VkItpC7ݎ1zt\:(!6%1%4봌G7@vH{@2tw*7Yd!yUw nZKua>!< 5~FE…H .R7o-x5fHЗy,> ķ^4dY+2>FAa~Ww8EOCcŭnoUMGe4 anw <4H`gm@_hgI1ђh ; ۏ"F| |Q3R=&T/ɍV yÍ Nj&<V: 5>cF+d(7T)ʮzg^܄d}%qd]dy_u{ z##D8Jnì3~`FC"QR;,WDH12Bыdҡ1f" D'I=`P"IGB2oPkByk]DqNcJDHRsYarvPE>bavS//TTw`y^|0O٫ôc& sdv7{2,Iտ&^V)*$~`y1C>ZϩkY|ަ#y(7?!Hr?c48`A=BŶWg&9&. 'ֶ\Pi\_֮ғ\YQ#ˎ_˘{Nj?5*XvTSIƾr@g:WKE1e^"s+ȩ(1-$ps 4[ga{z`piDzK.d4t+[" *ک *e{IW̦k ǽ2rL,1)޼qrQaxguLx3]t iL[ QWIPY-S~ET4f_ZJ&ז?m5,[m-t`ϮN >eQ>>sYwdEP2Z'5f8'L3Vch5٤xRju]62ŗƟOՉ!m&dΐxK{Q0 %-5 o鹶VtauΔօ:W+4;ps.⠦6BO  q9'u #c#_=cCtR͟aC{_#)ȇ)=Jw2FeOlőbaG^4x(X~lc6SwQh*?)N :j:&{3,)Qa(QYl0W]4Qs,7e,W[h7HPu$Ic,\K 鍩-ۤrhgQTha(M '-_4cH.X!v0RLygZ" 9Q[:Ϸ淮$~O n]s5=,b 0/}ֈA60҂buf.V7LdXrfЕt*):<  S0_u%&i?<*vk _2ODs]Rɥ13"WkͿ(I+#'ڑX׺'xD,Hey+JٺfQAk㹡a\&!BS (} ׈$v׏j?50"i"87Y@V?q@C8;NŶ֗uNoVs$Ca%UrcS 66F7&E^C5o-o*Ƅ}Mʄ~ao.#?]1PK:N bVzsv# i܇> %$0]TjHߙczr jS@;: fėM{[=w#_6_#j)ުscTA?ˊ_K#$軏YbW6Ѿ_.o"i0TT^MD,M#N :O' oڐ3eE}mP|/yrR<[R'w 㿤59{_g41$Vʐ.Гf<!>#`#c9V:]je5 #k?I ݹ-PqmW2Q +n4^K xT \O֊% ФJ2Q.WVƫ:HvT>NF_/9.FxI7}X~nŤ 3ki exSuڕg* pLY^Թ<.w1` 21%+?5+&>{ 0B0)-83:P QK :].ciX  ZpPH%ZJix~E]،L7:\ geu8QۘO5r_nȘCӹ#ˤג bM;uo*=φhyʵkr{Asw}BNd@kuؤstd9'ݝj YLwOۆ ׽6aI-'=Ďz%jW2Etf/LI6幙T-?5$A:6{p1!*Yʃn~[n>GsL'ָfd~%oWܙ!1Kb8E ^~yp\wNdT* K:$1KfH jPzV1h?'YVU֝@+p j4!b&ufܛR=qzC>ڄ+-±|DU 2T!0 Wq bMOfFb62ð|z9ݻUT_/bo$3%1l3?ʻyQa# F^Q@&`e5ѾhQPޛXaWJ"@1MЛ:G\e\x-j>F*[Ά=m=_0}u_IoH#$ýS>ZrS&%9Rz}:5]VIK)d M0Ӳ xh@&w%h!RzsKPR!&3oPwPPnE~ F}Ae\V-3fF}y5nt=t5Fk92 \G'Xz ݖa%+ʻ LmzgT%6ۇ(ѽIOBMY!py5Q 1F}vGzU%|ͦS7'v:« A/21hxhȘɶ gvxJ'z$$YuH[;Vl`3Jm%|x,L39Ƌ^0\-tYО懺ʟj8ۍٺ1j (oa,H҅V]Xcs4z4j$qa _yhj`ӫTF.YteF4 71{lL"GDƽcb6ey?4Hc zǤHEh&dY B)܆.=g]^G7~ |6Aodլ K4-rki&䶈ݿdNdl7cDd%II~ߴU,A^|TAeAgq $/O}dN;؜ DR]9@\ϣ6񞲠cYE6a2. 2Npò,E_ =.Jea@rf~(N97dXfAd#ޝ9調r4߰gg!(U?.|?;貢8w!hc ި>J>Kc# aU_ _dҘ|/(|?f_[2 !"@;+6FXvs۠m÷/@t BS(CP E+߀LZ X:#J緙n/>I"T!)Z57W%#ʝ򢮥%Z8Dvc̸УvsL/= 2hYTXxH88Q; խ3!*_f,}fi }KϞinJ3Nft$ƥSI3΅KW ̖]SD ",?ՓRӠ]7 ;$3-Q&=YSmXXR1/ 8ZFB|1Ĉ&!$6/yW{R,ٔE>0sd C)*gwz#dKp.9q€#]Uӆ{-m7Gx(S=>Ю]õWH?iruO2W.,vV?7eA/embMZ<63ˋrbSyCYcRYLA.F[A^Xjz^ɵ׌ j.4b`wgtO8| U@Gr!ipY!ڻ"o};4Ð AuVN#TNG?[oSĝ"0cV?{P)lՍ{vG-Em&x Osy;Q BDZYa%{>8vtuQ2(x6VUYtF;%~<-T)Aj=.!WHhV hGj]+j< h d́K~ǵb8Xʘ0^bL5ze'YǙYS  Jۙ(LM^/OڽXRCT7xe:9fr-oBg\W}BwFן50wrD.MͿy.(-W>qo 㺏# ̓ԜZւf} Z0T9a.piQ@Y'TH>ԷyWb ~_CƧЍw g%k8xN7q E0'2DrLf_ɾ IDy4y#Ŭ/*TQoGg4]ɱý:\-bE/ԷjQDRqzt_ɕ걱VDȚFq\R 3BD:#\8_^` 6[PfG$؃3>=: Ոn=dؚ5& uH+K$gύ\`IO'7TB<Qq8yQ[?j|&:WQjw}6̹\‚Yq ľ 1Qu`%ן=wHrp Mÿ ՙ8 ~JR !̍ǃeMV*jsKYᷣo/eg<$AGƂuI<4q,NJ #Z$R qmp1D:~ܸ̻SIljr锝dɤ?P@GYIA-%\۰Ĩ;):]4`) %U;`}<z XcvEEmXCݰܠp&AQ(Q #ahCTR=_u!GQژ#iCԔDgC'ϴS1p/_"Ks8EdʟVԀnܢĩnF6e#r~$2f/Hv=sٯʌw"/^04mJ ja]UWJa@ $E4' ~R>\ }^J&S{W J8<gkD_PhJn4r~L'ѫKs[0~:mcH*Km78Mo+iMX[p:g3VdR"O{x^\,-Da$\Lry9MB{-\JGds=ULE'bA0xt^MTDwV N\7^F q$| Rc{-5{VU/8P H\1l.tDr4X;N"/qz~D׍v|aއ[g¬Շ㋗VQGOΥ}x#1JdܰdM6u@yu$z3X<ƅatD.Q&O7jU/ei]G_LA~J`/T-O9{I3!gP>d%Kxs7p"3d6KH9ZAM)B}n{J{%Y 8I#D<_T<J8u; ;" U|@ ?{;ǹ^SoJހ\3;AJibJO&W_m|1~uO\RT8J8pùa\N@2 {wCl̜o}D1%Oެ /`f-uub9A5#OB!}JNqnLJM(g0 ><'ɿ?gpj'kEIL0LVk4$cELAYN&KZjIrؽkv-_U^(c˓?9rfBq+m}aN r;'SA(a2<, w$]5I饢`)e!vHmk@5Kw yQpur!"dhw5}WcՏD*q4qKNJ:hT(ܪ,1q3hQ6 z\܄d b2q, 7Ě_/)]syZ|/+es?0ҀK F~`=eaK^sapt97dϸ.|6 W ܌p!$,z;r1}I48 ")֦lf{ixpp?_,Ii`Qr4ޟzjV_Lϩ㍫M/^,Sӡguf )mx~` -;B$[}߻0 Bpբq2%ӓ[ [S邫6 UN"~#:*&#_t~kVCB6{gMsٵ9tc?e&S>OjݤR4K 1~?J2P $P)Xk d+kzl{6~ؾH4%Nv*f~ Vx^Ni s"ue7y\P7܉8!y31 _CVt'"^|s>EϣI Οym ^R^! (j?jZ19;0ZVAӖYG@o5:83J =-Im.~Aa(*@ 3Bq4l,5pY;HVaG9:Ḙ`ků:72Fn~*]4G:C>՘,yTgvpe@5c$YEO_R'hai"< UDo%PmpH@$=D3E؏#45SAy(8}isy*Y1>na9S4ID2wH2[F̜Rr$UB+X01!HaKMeYjMTPFXIw(zY?YT"?ČXK=8OYZ\"D!n 6'xʖByOxuBSY Cy97 /Ҭԋჾ=SZXh dwZ m}45><Thv1hM<<â),07[/::5 vZ󁖥* D{1YwD~IVux@CWb>lt-=s8.YwY-A;J5DjzQ/Dzֶϭ,d8ie\(%j7<+xP1M lٶUϵ6B2B.M54-jY{I`3@:$))R_͹x7 X;YizR+Gn [ʱ\܈W Sԅ2ǂ1NRZ 5.^l!ATp-.mꝌ]a@c*FNB&mi"`0Ŵ]$^?>9%9T%% A 1]"N@p@ooQVW$Wv-zRu!pMWt:FL6)|,OU&ocW 5xɛd¦ 7G#p IS_RX[qkk1|_;7uH`YfRx6k/~[b p˾v5 jRVLr7Z _>W{Jʧ>1]Fa"1- =c_ N#CZ5]kʒrAp}2;A6>3\0k. QSaAY!WB@8]Flp)G͊Ca*ۜ9i 솹T )Kd.ю 3UwS^]}}ʲ!S{&V2 LA0ydޠM{>]d~-FJ.IR[@EoZ38zFz&<岄̄u®4&C#`ЋЯD_*Kh&ka*LYCH3lM/eCW >TAƧػ0zq. "4r -W'&[jcUt$RF"^-MYœ<}L0'C6'XiQ(?}9m5'Q]$A$mz%j͂5U?Z?j?T{mS9> ^Dt_}uLQ?̀"g8|䢣A tJSdUX ?1ƍ6l- eK#r)? \#Yd: jv8>NO *HpBt~ٙb +SC TV nycT⩥VcFGZ_Q#6Qu:z:%=I_I.RM $뉸%݂pv&/Xeta?׮/2c}-mB`ߙ:gJɾ<}{XqzTYUͭ3,IBI Q% kU גaI˿͕ D5. \^ 'eQh@&a} > b1QbH滺z>}3q0iNkyY7g_0eW-gͨSG)3֍]/=Źu.HtGJ Ed5 y,H,KJIs9y0B0veu'A *U sdq@(v5 ,E3P`W4-qG,9?d9 ~S'̹ 8rzkgO8H <龒d}[Dl'0SRF!xϪ|$"ƎMmB.BW*/X}36ue\ěF]MMz!vƑx4D +.TN􄛝&fK@K)~*TWLu3ɏ!1qt=S )? dM>^ZҔ7IWụ ڣ5a2w^?') Q@v}&Q  ӮRO,V1]=%yeAA/ʼ:GB (5ȿ/ 2~g+88  ;$ڼn*ɁN4x;jTxl{r aSunz"rGy }bA.1oA|5v^Z+ #e- Կ3(Ҳў&Z#+BVP V×_;uV;&r=F0 :{^k4eCdZlrU2l, mB du! Hc/N‚۪neqe'<&sf@.,W7uo,̞m }EiuڋW%l>,.CﵭsRƛZkltޡf4T\fC3ݴ Q8lGA%RjdvGI+#f&`X5E(banajHeZ^nhNhjCQA}0N'vR}1}@5P \X~HC}OT ,k TW7wq9E19l%]ҳ )HX]_|9\g}0"Oi:ZajkRE|z/ @*}N>.?&OzH|T],ń`YYatzf%wQ7KDK\$l uwYPc.溾I]@)׬}Ls@=r鴱m;9 [< XT@-^P!6z?7L?B#hb.cO[HKfN}r:ͽPh<[Wh$Le-=Εrh!Br'p)24n-IMH3c aԉ\DGLfśBԕݘ"+G0S Q`- i@ʈi#jEjz:4$K2HqiLhb#\WS|Ԝq/=OiO$5w> ;|BDUV.jğ\7Xzj\^ނ-x)5=b}Frg._ɘt$]#lT`?в͆$]lV sL9Uf(fLY)R!s⟖;dÐf$q;},MPUөJ!|1T-v(j޲+BV5uH>zFG/4JagPWTo9>VX/ ƉJ"kdy`%]3sYҐ8I#/hLBlz!dX3o$eXPgSOnhL1c[7 -{cK9*%b}38a; *n¡1_T, 1]-vо"c5: Nj7~ .~A*  4@s:fA9|{en ;1^v3iw(i?EnԞLdF@B ;jŵ.=᧜;2QgDp_It|qxfC ,rk}g?% B];*f SlM!" S*͚㜣e.8:0cp9Dm"f逶d![q0^` |4lϊ2?Dž=ϨkiJuMM#9%\PO0|\3!ϳvVݿ΋1A]*h/EFo1hfȘGV:tt|oDJж*0W̅ zyd~LH9ڃ\C[`f6eZ@*6`ԾHv¼W*RI Rųɬh>/wQ-d|]-ٔ;Z-ì@Y1' *2"<8d /9HKyC<~8 @샔"A.4Kts;`E4KEP [RݭHD1~Л}?r $ qO$03ຘ1GITm- ,/ ;ep)oUWA~2/k3}DAg/=/iDyj+X5X| :A]bZfwwa[X>EgQ ŠČFB<ZH< l< VP/HsD;@Xϸs,ߍoSlF92M(6,z[;`i > RDkhQAF ͿU|Y/gFx^DMz<:fǛk帕,4-O£Jҁo7K=}U !eݤ-lZh1L$„8@禆AbvqII3S"̓Z{U `aOZf46%6n5Vd{>M{J v-H4$ XUX"olhG?^1hSB-ErF]9q0> gV:tWNdWn2J ֖"Qy`^ey€J ۯlrĺŽ3aPoB@7F+ %RL{!pb=ҿWpӵZ' XNy6,P%1P$`g· ._] ѝ}euX5\ ޹ ^hKۉ5E6EǙ1(SZ_o5o_`/j75m9c1=۴.wxt;Io5iA'2g009O-ڝ&hG{8y擦gv'3Ԧ! P#3ξpǠ3* `A[{_˄1] 2YZpo[b!Oxc2X 0"A`m0GMqu$Ô⠃jl|31hf6?/[eL cXHN ŧIj(B8PQ0Yrwkc,2/n$RH`kY=Q} 9k>& O(J|8EOpiT `vQwPDkvs-(7jMTMǭz0]HXPGƭ$)z|: i}*o^!dB%,3#^g~Os/|7+gz|Qځ.?I,r|--߮ Rb\qX?Wa jQ fFh0t/R^9rt^m>v)e֓RsN9O2l. b `}ķQ#Lv5Lu6SQ&Iݣa1||ΈPh1'SVq2aUq<5(M(~dbS O O͖XS{r{+yI~˺JTs;;-sI_W: ̺Ok??,Ԟi_n&w8759u\")\:*;btXK/"M!OQ:ej7P9 "EwaOàN(I:D|.0)++?otkSQarE'f:{ݹaJ!|c3括c-Ol=xq޳{{ woY?-m>XN&l*؅^kq br[/~w(pS%M{,ϦoD_v6JMQ!LlˏIDHo{8!<j;Q Eb]sy2*.a\#L[c+1*|ά~h@ہaDӭY~ vllaM|H_)stJqBT+ nשiiQN2C+F)R7wL\ [& @Zf;T)Sn([S#|;X*rue 6>sG|!e> |]d 5]K=7mu]2R{S":s=>MYLR#D##m; B/9C"c'ͿjȷڤSc373׎EᅫVfg' q_HFqh2Ş  *eBɱAjz%_rPAț%L;x\Acrm@O\JC1-Orf.$OHn;v#!HV-&zhMo0fǮsmkN;8'kd'| '#3CWI}s~݂E='4DKʳ9'A}qz "he3X\x#W\*4RW}M }{kQ-j{JSg #vՆ,C}:[@@m Oka݆d6+Ez1ˁ+T> 0â4ö31~*W ZFo7k4׷A_XC#l`@c! 件ډޜ\/fjnUTu _)VJy%\9K}[MT0ER6/y(Z~Du1GZM΢(睭Das2b#X\oYTڌDTi3~PddTƆEU2v=Lz(pD5Yr*dvz@g[?d5;jm-:MFF/(C6` q.pTBviD0aURO|T?M~iڵ6ꤱPLN6fm ?~SdB(7cl ˆt<=7m@[څ _m&3p;s.p?#s6 $G}Az̉'*AX?p \mb_pf@/@k]]Q-5dCzx3G>SէPBZP_cfsw?&\ՌZeӫ`1&:1̩*X@a%7aAqh6z#)_2CݏXmr ԱR1rwuy6:d-Y(էdC\l'}vK&L&L,4>u>|4`Ҫ!M= Qj(歞9B₞@y郓YD-NA~H,Lz T&G4; gPdzs>E~p': K5@lWkXH Iᵢ'@얼{+yMC&Xњ =}ոY+Y|+8lXD+'(k4Ȕ&DTt6%=HCE?Q><>xbgfpuFװrF *kYj{h<Dpso!rOCzKf\e7&L 7i1gD+BD0ȥF6ZzoBU6牳1^m$uّx/=B?TΗϢ&L]Æ1R !2+ .0+D/a ]^3uiR0dVo~KN+CO?*(zذ+ʯ^<ߴzua/a~Q6KmTbq6N?[ M4RLۙ%/xtP]on2 T93s)b-+]/U!N|\ mM2UuU;lɄmuD,; ah1 ouZ *'etl~(G>"\hV Pɶ]JtrEdxh g&ߍ0 ="qeULnS%2 "tt6=8@ts;ӱxj0ƓݨGľ!]X!BrHg!}OSMME3@/';.jћ&t=e (Bw tmg ߽V g78ktM r{D>A^Ek}' _$С~e` K]Y;CȻq 9ޭNA&Hi5ȣxEߝ:3GyC#:$uwۡdznC@Y"[kIMG alG'z<ٺK!1Lū񣁬[g!S#pT)Me @reX%ٕY9kjbem8Z ݧkUWl{DŽ},_ \)ƶ=Tt'1%w?dp2m`=?%Sr׀PR+^l\+gU${Wj-/Fn+]0GpĠr:9ЩXb.aԷhU©C~×4|AuGQS.,hn뒆J'ˆ҅ʬX 4o.Y5צ1x[\G1#2Nuwd=2s$}~is᫏_O U"+ކ!ES57' -k4`N" >.hb.Se&w!Se4v*,Hi0FJ"0c՘}D!O,5";S3نq/Wz2kG3 :X8>+0axkG,g[͙W/F3wq뤤oS*}~kB# (hRP8Ln+"coY,y`>}0 vF2A4ܛthBێ"iL:Ps?mft}!\Q)^5[ \u@g7vkG0 Qѐu˜8w9l]v,05j7gel^ĵ֡AAfQhc2*?"^a{yi^]vTgL AntRk_ i%r3vJ݋q$g z7^WtJ0Z*?\[9AHJ_dƀE~xP0@D3h\HJ1m6ds.68t @P;Ƿ<{42W\N{ HX9rPS4]udQӘFr#,Sy ˥=|d5ѰTy-\XxwdQ2s8xCć;N͛8[ h6|Vp7Bž?hZ`1.ͰV| ]X3Ctpk LÑTPaK3Duلfv?[xOd9N HXb&JH6@[l^=5S,\OIʼn| dzKT>M)N匒,vA:V0W{k ޞyPc/kH)ٯVQ 7gWR*tZPf[/TnS(;">,$=H@Rs͊t`@1Ox|*25UK`L2 Q!}H!X5"W qb'4e= ?c0pi&8H G3^vO!*GfQ?$nw]'Ys5Vpr=,ي}IedјA<зTr, 1+yRReLȿz$] VIu/3=`3=EŁy B3 Y]d}LXwQqRO^jرM`C}CYB'v}NfEc 44Igv}m&myNhMr.ݩ&ߒ\ۉd=3 ѬCn 1vMM n]Yr{:خ~h:r7%4űP<Lwr0~;0hB*)!#'vcڿJG.`(P4A>) TOo_:ϧ73X) (|3}f1ե ~"@-YNgdWNxi-f OwOm9+P{h|}M?z )iq>S ?!,W**m /tQcc T1Ձbvkk y~>,g7MH̆ E~( xϕ0mϾeuV"k<)IW$D{F, 6jz;[LjU ^ƑSjw |p.n9`݌; yz*yx_mxiTէn@9J :q[w%`$Rt5Mu9dH,00Jw ؗRGN0 YLXtmjOj慠w/n@/%yV`#8X$m% <ݠ>8lWY'SJH|ܢ{}CmT-ݺO1[*^{m^`@ Ƥ[4gY挓ix&@@T۫Xd?(QuSB`=&. j>2f {qOL|U휱7E,C )A)o?\`y]e^!2.,F 7*`Sld`/pIق1Aԇw2^znGҌN^d VuNa-:*DAM ߛw,%NZ3GE~14 /(X.1f.©Cti9xu,ě~\tE6Prًܹ8H?I @1Atɳv!o㑢ɞ"?h ΝiNQawm8Ҁ*bڴRj׼Bv`:es<{a<"'݀@S]`kT6L,'a .Q YUj)cI)ܓi%~6a@LFʙed|EI6]Myx n2MH ݦo?s.h;B]jnNȐv[tpF )'3(I)P)<-4|W<'Kzy uV͡Q9M"p9ry XrQ@Z;&N5c21CoCc|8gpğbXxPE{Zk|g{"'NJ]rzB84'R#" hn;´d8MqRC~u1nf.aME6VR#f۪/U F"u&҅;iIYh }R Jw&9P 8+]h{ţҤTq.tB1%XB0bEC_k+Fլ/x[e:DC@Iqx]Wѵ`$YZ4%Μ 5!`}/)M?KK.Udbw\mD/oX k v;B;V1̰f멪uQk_f*JSV\PRe1׌|lY<~n_-T _RG- g)RLjfZB# P7pTܞXJw65:nO'8+cD^2O8jOFi<5c3D@* ld9rk;d%(IJU!y;>Ӝ\c$vY;7 l%=N;VO(q8?:#kԳ}{W= 2^{#ɯe$J.TB^`p SF C2Kʔݤi4Z!dIuF?$]f8C4!:JO"Lb‘Vc~IrLTˢra5ad4M =l_/4<,hFqAQ/L2aEޥbLz-OX[\k*-AX9|`2_ YK~gűm(y u&Ή"AB-Ԍiq-gF'4v[ksL'c'' &gֹE uf佢M]*o' h?֓{E`ׯ[5m{MnNAw9f^-]_xgu-1b9A,CqXNl&=iU UJ_{# VFlժ- eR4[󎄬Wt`D9/b:U c~gi = ,Q5v/WT.!Q=z@{*L_8*ތB9iϜ Jhl &:C-Un *_gS߃С~JE,VUV8ޱmW#E}1O>szwQ8w7,v0i9Z _LȯȜ&Lp_s-Ɣyc/t4Fz,we.~l+;H?ђ!nv\W֣j:q Z^U{V"Ixbd|1裃.deedy?v<8P)D6(H0@ &Vo[>aaz9}Gi*p%iߔ9 g;(Ԣ_$R  }u3KG9U! l~Ǹ^1."6FSb3Sbv*&c5iaR7שu+@7]/{2SduݖA1Y$_8Z݅r>ka>8lB5S/k6sb+RmA ̩__d$ZOHH{rM|= ⪡0Cǝ@-q xfpb^-o\tS}<JWk4vf %ѻ`>ti9C5 4-9dΈ4y~FjEQW5 _'VPzp%]Z̦3&8ˊ`ENRQ mڸ;&M3~d{;*Q*l)M)SվrV5@fvcMr7ٗ,@咐.|6HHr)XQă o8/S3sWڡ}$Tq5Ij@IB0>q% [ޓ|'Q/iҒwhr ke5SCdbES6EO,ޙĢO_M 0H*جegPI3p6ܾ |ĉL'roޮ 46J*%Ţ)-٦2첉r/ZƳ4>zϹ!d0)/dP|z99XJg4%ZlGnG\1 Ͱf;>eAEiZl AVwGhs.|]FPE5qmXTJh`YPdxk4ZJZ'L*A+T37MŰ⍣phX$e}cց. Ryp$[KnCMztj8Տ#g\6;-㮦I2gP!^q 9ϛק`c/('>3S/טyOut&9 pNBx$h|Kp[d>/n0Iu6(a~ ޘ{,dR' rFꃋb4[@S\v|B'^1!C gi4:NA&,^5Ae+ 艖o󙱦GG2NO'F[~Lo(lQZd 5h:9Ȉ%fp5}Z>יw=~P<$C kNvد/dHq)B)=}BרwQJN_O9I"GԆ(haN^@?V7=S#$&t˦aVw"Gj 3m: ޢ9|0ڻAI(K؜1 E =˳uAoLx[\ 7AAcj>J]p=ʫѰ*vXb)Bb:d: nӺB;۽,Mw W|!}V~Ia[]*Hy$ X~l>|އoڗ3ޥչuzۖpL#؟x?u6U~\8j"[a}zG"B^Vr8 rH6u={s2  83yFrg Uj+0hztwI+r>I](N0"ZLlwzbEz !\amaƁ\ji4iZ?:@7/ϵn3l<[ E: l~6nnAj[!(̗|;:3JW L圛"V"Y-*\^.mn6OJ # ՅB4)\OPGx>G.y1#Hsb N7#PἺo]WL!`GPګz0s0ÌG O%+>˨0l0 TkajУ˄+MA |u.tKB܍w,Q\xF|b%XL9㏤J4=_8`,= V } T9ë=9mx {f'? XEN ]+<8=sE[U{LT-dX>M'-le$8p)u=M۾]Jh&R:[XŇuiMr1sw&p;xʒELidx 'OZ\]pU(R.QINVDg2* +:j.\.j tS-%f3/^+(%;PRKm<>KJ޾%ϴGZSAfl8ޥV KU(bZ լ'I;b#31uEL .}xs\zFYN&A`x堫?;ow%p[Kt}}K qR%>G:os7=n"%&p)NR2;U cu'4gj@ '}5P'ĵJlr񓳓ub6$hOhbXIiw[JS(+ `WGGuCE|Dmn+.s:Euknr40?X?TO?9I*bcÃP3C$"|y39]Jsb^'8/(]C]Hs2cWuIdQ5_"ݴUDqژVc"< f8VkYͣ0(2f8+RϓLЫ)WHi:c`ps8'~'%r6a{Rpo6foy npK:xktح$Lܡ@F:3ۯ߃?0E%ug3$(^ \;=ݿ#]*kC [;`(홸W-L;HKG*fM*١69 G uZ*=?qSBF3c 8}Ѭ!pAb* y1jO!"nff ?q^E@S霫Q9uߜ}KV-Aef`8oGv{p[ӑÎ1ul -1Oٶ#~,>,A2i<G߱DL9Bm,4Lh.4E\ v1wݐG+/yorZ%Ș1d2u]$_č^Lh ,ƫ1=f@beᯀQV#=Vބ1rE8dݹX{>!5A!ah# iwʵ M{̌WTukL2>e;+NWDŽ0hDHC^SKRƢ)MX7?JRm"J*bjƶ JEkwq*đ M][Rc!'l],SS&MN]tś|#tp} cw~;=X#g@*yDuL Z<}s':%Yhi֭ mi^W&=y"}$ ߢBh.k ~OTN6t۲3"ƙBlzȤsah 1=H]Rsx) g] bS &qn4vbz?`%UIS$e&ٔ(~Tv5=_z6@(] K,Ox)pQaXVr.o$T mywaUz|M={%p'{3190?2m:Aj9`店јBC> ly"{)!k+$j=t@{Ňn(Hc(=5B*- f)P6o_Z.|\)F2c#JR laI6=`țΘlg7|tO vuK%/Ce-bmuUMf$ DAڱ:kuHc'`3!uŸ0"&V6Y#6f-ϣ/Kp?,ej?pGXvK|b-./"~.{AB2̐yc5LG+ >|^7ԍbZoйܯ-%7"Ch_`;+0s\i:J,[w%$K!TZq"2\fcE^|ywMLE8kis"#K_5<дip6 kG'xSbtl!0F4vϩwnXzm m:miUӎ-͝0Dzi\$U!ƯXqſ9:l!%N+=J7%HqKZxO2OJ7pDQ)()x$@Ҩ^Z1L tpb&^#՞c k7bG ,,\D/2Bӓ~K,Ot?%oj1`6%9]S,itU% "u+3ؙӰ:t*v-  ͝C+>c$i_%(.w9GM%: [bYN`zk@@"Qy (AIM{⟊[$aaЮ2+Ɯ?pa۟pԆr~kELk.=Ļ |svQe -JN||M5_{oO^{C,KT<3!ji 2p7EXˈ__1ѨLzD-!´jO+Ѝu$ӧa#OA=UN8tDK^L鴝?bem3+ SP'?W~IMX!P\{h5IHR g8 2rI^J%B;}em 4zBR(HPQeڸ\eBd8ɪjas1Ă5IEdJiFm'D[>_>PS tE1pXiά3mj} Hʯ*Tn}WFwkpbUb0O~yw Qd7݈˧P%eږIahv!!>lRW̤Ő %+#Xҁ0= ެƞMQLNo#BPue&NН{pc1v*SB><)i֮F Z10'%N'ב] y`LTiJ<Ф2gS:[hO ƈ XsJR o'Th;) 02?3c Hk0[?o]rӷ[96F?D(1 rBZ ! Sp샟!PD?03 GnT4hddZn[rHh[#CGY=X1ڌ*H201:X/v;1򚞳ʶAѤp JUq Bw{{4PcSDCǦFRo=o iާyVOKtK>wߊ>Qgn޳}H?mAgy{L5h8w6&ߍ_K]I+{D"21 I]sDҒz61@LWj~uETsb S>|fI!0hj@Uǫ#b$i%H>r 6r/ z~i5?},@_YP'e؜Fb ]NB/AFV_{xUƪEL%=Wڃt`؈Y2; l໎zG-F?T.9o}UQ7x)k',6wSu)aUM")7(Irl,Jt_㡈e7JӔnjt/ AcDpț*{ebE9Un`_8pWH@Op<GywL+9]DR Ii'q*YwԾI# GsT{I^%5TFyq0YoKfER/\Fϫ16Ka]_PX_~eq9ȴ^ay֓O)FPU_:OՇ2Q5e9_ͩ $բεk8 , 0<9(e|`avˌ8YF N|*6mUT5Rqb{RL=a>=}w! Ŗ~/]ßQ.sp Hq5G//3ݬQ ! g u]1J?7s?>//CSSYT憨%3Vsa0YE>cjƐ* 0cIR'J-/hb$h°K2J)0LR>7plYkbD=+_ yٗj}wwe >!pfŴ|Trk>}ummݒ XB \"fZ# 9OHyJJt^p"N'1@ae#D1oubaOIYKEAc43CsIٷvgY @>+@:YF<̰f#l2@*Tx lY~EoQl`̬{W 1MV_9V5uAOlBWԥW6 L8pV _:V6"lpD~}nm5)I*r^QBɥuYRb ȘFzQùr9l];o bKQvcH+Rt,X=}ý6{qԏ|oPj] ANRFϯ0~E慫q>3D6_Oh4E7GahyPdjt@ȣNp6kY̛{"Wx]BY+n'?[76LE_I>4tQc ~UׁIGN\VU<ʐ֖.YgpݛЯGXߜLm|lzp֊ɓaf6,OIߘw,\J(ECw̷d=l9vb^؋6m[rx'HAtkH@BJh`m@eC6YsW />#^< mܪYΧBq"lX>d-20׳Խ2"7ѻO-c{LQ{g&# QYod|T]'о}4*F1+;ǵ[;\4ӚTF#/5 Vs*#9.}J|Ą?Ox 6e_TzP5|Кi!+aW B|fzEpd2nA稶w%Kt_zF^N L?D4R$Tz"5U:ƛ'p2LS`,:c4WN;k;QTpfOxg5ME3E9,3 x 3EJY]z?1muʸ[斨TxYwjεgY},B C6;b˼z`S=4$!pS*zrp_@ai.[5=3qjk,"Emns匿㖑yxq!u* e/#ޕ3ZJVj+ N+J:g';^ %:oEhC.g$0Ȧ.k5 1>7֖.&\C70|Vzzs:-4Ƿ•wÒF yem#%nUWR86oݲNi-zOSFސk~'Xr5C,i`M}Uٚv.R:] z@kTBp`[|)|H^% `rB{Z=/SˎpeOBNU߇;-cs[yͮaR 7n+S2%[,ţgmq >-A!%g)@ 3dBb(_iZΖ8t4N/= UM%"" k>Ճi9=i+k\JQdC"|rWPǾk+r3Y<+0tL&]xt-LR'P8ov;½ + Vmcxޭs~v\PQ{ VDG9Sڿu6ok jLdI "SSo,lKpȍRt.D52Ⱏ_3Bu1$F lQga\½Katr>r^ A|'Ľ{\["yyb}]D4å[qȐ:V* %miG?͸f5e}2\!R BQK5ypJVjԍ}{O'M[O۠n25Tt:c j.ʼnwy' /ZÖ \S&zǑUu#,(p<4wC~gµDHJ}] '5_UwaR'vwQHyϙ.תaX(Fp͆v $0TKP[}tƳ/P~![w6v’'UeYMIi/մlDx1# 68XS$XK4w5EMZfh0'߉8 :I-SN k 0f0Mנx, bxR s(ܐrvaGf;WEηN1$j-8-(t\Nc1+$Z?%5-e|/wǛ*Nޓqet(.om\zV?`\~S/M;F{;Tu:ЙqNNW*l'Ruӣ{H(04ʽBXݒHi`ظ4?pX-X LTMv'~)O& >@ y+gE?ؐ"Vxx]64qqխĵ@+y'?>?׾#DϕF'b3\.X?ꑕЯ75 [L- 4SؾjD6 [2ZpD=nipmHHPඳ\$sUK"v4śN|]^̓]?3ݬ& tgx}Q::Pq,pAL{ Ib613mS.gQF2v0UUE)#q>#ϔl\9Jo,m :v^qsc8+Ǔ6NPb[?z@)OV^d0n>o ЖdTͦA?˿7-CSxaFq$;ZÅ: Ytkg17z0,ӜP.!`k/Nd Ga Ҕ>!qQWO. ?HD{1wf>6RBHD{X&I*͚|Z:a}7Jq#GyҬ[kwV'/$x6r1w8.E,őBFk1{d[ojU͖fl2;cd|KCQ('ZXk`?%EFzw brI*7 VS;qf}W~2w/º2`XQ@G͈K!?^#Z;-QTFܼ5{u8+Sk˹YwYVֻ$FZ?3IiZ>܄r\ݙrE6j_ZjR[1Dw|Nws;IB{W5YXn}fLhC"`l$’!9i~y>@_$qpag^ )Q5eы /UKS7 9 ܫ=xQ,̞߮p,L-H E`$ᯐoP3z:#@/7DNQCIq5,qnY%@.ROwu=mΖ}"0YpP/$*_.4ː9A:D \UkqŇ\?`wζ/1ģ:uxΙt|SKB5.2 O}t a*$N|يmaL(}񑔪wڸ[?t`aX}Q̝̃z&ӑ6kع!Bs6OyFe 0}+"WqڛP<~l`kG4̈՟m{mQwһq9E)!nMmqW qKX@w<5A-tpo%tNv/M=xntZOT` ;׽<w]TyNqWTbl1X#hgLWLEd\D9"EMa/Udݽ,MzқFSU^ٲUGa/vc]=rB!q(!SvIIJh @È+":ss@@oŽѩ^b RE\y[ԡoM aTSuH`1o.#܍Ks<*W)h1v6PS7, c4=a 9Fp¯{-mp`#$ҙ{rܞp_t?ƅИZi.ƅݯ|IRyR'Y|<د06EtC'a3Ce[EkD4;U(@SAߍ;F`s ~{.RIw8YW1cnKk}E{7@P \|J$BL\)0ַ/L=gϚ2̎pkvW~} 㕶CKg =mfIJ`h/>^VBׇQh_p<\1c :'*0ng7U {N+h,֏pgE362>f7v)#@v J޵ѓtb1le5yj^j2y<Іw'n_)էp5^eT!S~2\>S~*}`[=|GP% ͉Z0Cዣ6VώY~Z-|Qbh1H bE=?|oCk.T hl}!ǘ7|+b[EsUCSdb=9 YoM H$8-~3vQi{^Wr G~47syAd<MFx#N5z\.'.TpH ][m&b9/zMQgT}X^c&~:wTO>qv8$a,74 a W*:|-5w\cDlFN]"Jؿ ʓKծY)K Ya `b vtb2 d цY[tuaۤ\XtK+55uwV5BxD]9CcGu8)7S@/Ib) *uA ވ & u3:=c=[wG>Ɖ>wqz&8i6Kƒu(=K_tX7!s8cEkI=xB*[ɖꓺ.L+$7cp3`gqيQ"zf،%!td(r&n ?nQ@nq5kZoFB;,2Y$_LCɯSaY1K7h4 ;nf1W2s lIK8D TS1^_f%z݋~=5`G]un}LScMԵS JunC;\<7H:HdK4]G%TC}w8dlY#"^oiI\@-=JN=4b\w0\XJZ2BRx:<C‖ī] W|3zi46=)#DgM ɱ~~ .>>u$r|$OCT`( 8n}֚:UҟJ1ij3f6*Ļ8YKYbNLR0k'#8l.Hjc+48ș9_iŖbw}kbs. ð#K4K#+€Nin\wYްZ&CPvgVx_uWrRtY{Ck71W+ޙ_~I)kO "ڭeվ4)f^ DAP8Z7"'ݾa[vG43_!]q6WSbt9uդ1N֎?y 3hO[sN^m κ&53 u5s Ly[K6oj rgLJ tyZP'潠YeRIAg[ _4-; L; 2jm@j6oќ,@w~Vo-B&֪YN?$ճ6Ηrp!/) ZV NP4dxIjwD$UG 'w~m4,l5 rdm#'툩N=Tqc 010S4G< " ²,*Z/'2ɔH:0Ws/IoFtʍyHsoY4nj WA.n'ŒcLΏ\ˑ'~ӅєoY;5fs^4)e}@I 0Vh"Jh3K;g,P?½\ݮӨ9}`H˴kV* lbZǂ ~b$?,%R g%$e/AKјHt8-kzUdcQ"ѷU͆NuBqz3He6R-:IllÅz>Q˄$`7z{DrsHO* 2RY竊%/<*)!;4Z͵ 0ai M Axf{%:KṔs-~M.F$ϫ@CoB|iA短Z܃ @ÍceL%}0) MpV1%o4ktZ=ufpwT:"o_IAsĪ(Dl-R{n!Ag-mSZei]!fL.$GJ~r$9$xϵLGMD(t|ne!s͈|,ܰ(#<#P=f#c`p[|aYх7g=ڬ\̵^8>޺Zx;)z,QVRwLoefyF`dSuFrTS 7>X GQxE{˳V, $ݡի;8m6<*p'9OçɱФ<=ֱX0oa]yfa64 B,rS-=P%@+N+|~|2[^V,xU- Ƒ\ ҋ$(2;Hӛ%Zuh|5WF`4s)<Z hKk]#;ݘvNi(uO3Nj3s$#9tn`S;p+`VǶ|wd%)BӿݐP%73 ˜'DoR+q[ Jr~MկJvV_6P(G٥jü;;f'GYr~Бd#`*Z+;~n'x ƆmOn$eCcF}'O##U"nj?[sm=Ua\cf*]y[o,S6y*=гV(dJd0UبYxv@ػ=*:dӑ6xe;4>M|̙~ldt)\$:*_XjnV/jv~3J괂E8y Kcp |[Щ󐣺'\<hng1)_1u`ާ?/9tt~%ձ߳ݳ~=9̅G*^uk+ ,~T@+y3{tC׺\-Qmx^D T6ֳNVX4R}\/@On"}|^'=wI5?ߡ?T8+k9( Z)®lؙx;FVb*Y 34|i@c ky' = snq'Q8/ojY.kc 3h2Ck[SJ$ >#%ۙ۞|5qҡˉ)Iyu-Cg2ND/yb_MWo 4a}jTHњ*P}Z*AWZR:'A/Ùʛf]ZAO3cJ;~fUմFH+XŎ5ٓvOba')ioFuMk“8+X>At^[Q=j*H'ax̵A"n'{c5}gm-Fv_7 B";Qi,v2cT&[OlTi=d#ٟH3|Qx^70I!٣I\$"mW i3JjZîwoP.#JH.*gv"1;?_Zq6&kY/BFi'by&N = GPz76_^Srģ+ J*j!MZ8*DT0ɗ!V/#I+IiJ;aΔ%AKy!n7g~jBW]vB5uO m f_a(P]7w(< s<&}h2n( iYqdJ"u6L^c|O@f8mq.r;êL.Tu! ="GJ$Hŵ0BpT66ah.cxl}&- :6Ty|G<vQ[@:vb߅FeZ"6-WPd{.hT:/]T%u+"brK]g!_J7X)I%'SXy,91I4dɷK3/SݡHZpq!RbnCQ!R WDU]^9J9Br2DՋ e4pЊӋ,G 9]g RӞh `ˌM(``4|bVs]Jj}%ӧ@5M7?B]ojߺZ`ȋ5򟉢u93ΜO=#>r'y'(UJ.+"lyѱuB|u5˫5L&< OV uOac~$= JUp0T(K}$-iYH sfD=4h~u nK1OM|nꗈ  oٹqG[^hJk1$ jr7[ qOiz;vq^gُQ!> pj칛p€H4-cI1׬D?.vK.'QO=pi%mW|ؙĜ>(Hp)r͘(4? 1{X@w'L'͏ll_Ҙ-;>@99I)j7 TJoNh#Uv⏂6q2Y:yT0\$&W46څ{J a4{qZ ћy0pHRuyPD6"W5#=K=vTa{fS@pxۋ=2qtS٭q`/"q-T0ҖQ9ˊA d e1ZU(JCDtU\Q<ϵmg]Ug<^N 8dn:Hvi`d.A2ApbZ뢒]r҄Z|P̭{ + q+,vxɗ׬L[nEZ* BM(n'N䜄wu^i9j'\B`xXNzLrR.}NNb`G|ܮ&T3Fl,Ϊ:CڑdP[ދbRoȀ~`5eDkQ-_k^`,M h-'zI?e)NdfoZ",V4rӟH NbJjPLɏ3;Wzy&sFXѠOuט$bt&o84w~9Jm[̀5j KHԤ5hf#jT>4<7 YK K_zYح,~:r,̹[MD\M/ p-?Mўf0ù=kP+$a=4`Qa&:p?>3Mڂz*֫t髂I)e[> xs/LRm|>+פuiXVY+VX]v:Fձ,毖NgBwI.3?`ڒ(|i)hD"r!Z)^4H1(XMi+"AfbPb91,jG0堨Yg if=Ck *`H~Q:@PP@}+Z 6p%JN!'GR W4VN\PthfwʉK!+ԫIɷ1\wif( d@gzN5 M*2zqeDB,=}=,E<{xH5Ѯ/-(3o4z9ב9V@=1U_ЮHGSճ >/ VB?z2>ח%m eL\Jpi(T9cοKnڏ *~{y(-|?.iJ;8@#V~|e~^b t8l@ } r\&X{;Si'wiX:|x~:ps찪̞?gpd`:$D{RMaexSжM. j*0eX碰|3cyh$BaZR= L4Ӄjw^$y!z1i' #wpݎj Myo G@#F^A#mgHڒQt4וp?` ix!Ђ5=r,el1f&r$=MC./$5pp'RWr}&eN&P5_ŚNw6фF7J /K}t魺j@󱄐>_^aqENK;p0nFy!`Ѭij -cxaž<~R^ozz Ĩu i 3ugbfu&8S LuT&BZV&F۞^\#< V$MM7"ei?ȝIx3bI,Fel5H_".hKG^TO5}[`ƕajqT ,3uk& |;q%n+W3>]÷<~[KB3"ds"ҁN޽`rN̖dT\t+@RUBWF>ox`e^^W/spwf0@R!⒊onμ? yn-E~'ZG!&ÐNDT6|X_^{z(Ыdb&e($ (b%Cs}OsO!m>Rx1#owdUUeEb(hWp=LIJ5Q' vӇ q$&s4vpxc B0|(b6g`:{I_nSSEE\LzN'EtfO9_5|zk)TT[N@v0ANA'MR~] \ |d‚*)݃Y1!NZ #a'=V!{2)d!Bf4ڬQrNps8h?*tx&u}zakw$fޯkYΓc8^hu,hűEEy1FՇUP[.sC>)"w#Q8. 61EI%uth'T݌9KV8!o7B%u |,1aتJ+Dhڊ-~\yE>1I63 n pJEYrppmW9 Cxp݆0ՃIc1DZ Xcb$eB&Ð"'I Qn^w<‘N.#IgH@ڐ[!J.df澙{j} $#>7f/TzOs(8EK  tԒ{tJai֝sy7Vnjc ]08wy8+>Vc!\Q[xi\wjn]e1-{̘]fO* ׄ$B~$1p tV׋vLZܽ;8_yN񻡘z_.샋ge#1RQޣE_~'NjDDdI7h=)pMsx{p>(/#פ2Pa> BcBȾ8[䪧W ޼RGW&I`}7tc F%J +1ܟJ'P Afb(MqVcgSp B46a#tpR;2`b82W\\#}B9O fbf0۾swe,RG݊!5vAn"G]٬e̋7u)JX0i 7K$ցE Y O[&|wgL1Lg`\yH:d656;Tj!dȓ@e[ݟ]s=)"! a2H'!+Mh+![d JPmHFUѰUWt9#- zTqkkNB"$/KA@1TʖI7-Dybme$ FoGk;zN ىLE&{}~XyC76""Y >yoVJY,H5yuX]/sa~smֵ9iUDYPA<xp=ogKHV1 E%ld%DDD9?f D9DX6ߊ8|@WNEQf.P"JKВF"A9b}PM\NH-)g^?I P0sBGh5{do9̪+IP a$ɐa#v\0^~0B.ٸ,=ӫI:P0*IJ4-PP4DL:wkumUiEŒڱQEmXV-b)ZMQmg*%\q$R'#|)Gɏr@1&T%f@*"E !HRT-\r&/MjT]}LkilAn)m.Z2X#LH&P3gH2"MMBݻ;O.NEf@(`@bq[aawˮmYj 1!X1҆Wxӝԇ߶ `` 䘴 Q|~@@Gw[Xja!Yzk9.)*Nԃ0  %eU /"\PkϞ`*SWsfͬ*Ald6RB0RJu"T5J&D ⹥5x;R_ɵݸ&5ON(mi2ih%u+zVI3Ҍu1{&v47!/ДПWn ɉ$OEAiJIQ'+r;&7v(R"#58L^>cCfk? ^Jbf _G] D'e㦒"f~KwκھGmu^'OT$>Zd1şy(r4Х A4 DwS/sAkv_{| $(#U\&"F&+XiM&0TȬI*mQHmA+6(ڃJ[LR)Jٛi0mE)m%ddSZTb$kIQeS6QEE.FBՉY R'hJn *ky0L12D -O|rm F=Eӻ_vd"rZ<=$(pܤB!R4UMI$Ѥٔ*xӨ!9J.i3[S$M[3TӔs[5HknmYh+3Tkʷ`%"ZPxo~U5Jk\ݒIffk (ՔdɴZPU2MKIUX5&t-mʨ4h T+95) ( ;-%|3[o"]RrS? &Pi*|.g&UƝD , %HBMI, 2ZꀑD7<ն؟zR=Owz;]>鞯\ =z^}<~)A&\4wm'eӄ#~COw`N"Uo=̾=XmY3@J!V' _1ۣ~>;0}G%|ibNE$,g0"]u fԜ.)A;mWbqQt>X 7,Xiy19ְ,rbYp(" c 'U0rrZb HVrQ$kzu]m6Dl 6xFҤfU }X~5UGr{2K-k;a֋!B , {n_n߯OK_:}xڧs0mqev71>Sp[nWkmpQ߳M\(D&u駊7¼׊m  $}YUh.͘}4fZI_\.]-Ƒ<}G?\)O.J[qp`7kJ(174p,^"3tߊ>>Tv z7D29R?cS\m;nh1a6c$"Q~UhCyd.nժUITMB }5RgnVkEپ9ߝ~0)H;7?/BtMiQ`N<ɗqƝ7.a8!__yKhUx(;ϭ "q4/7;anƂHA}pV736geϑLMQS" g Xp?PV׍uht)հ56Ŷ n/߹0VdX7zWƞ_SvNH| ONϬ/_A[_o܂2G!3l= ɛ,fFf {NgԢYeY`7mD K{#n~a ?"'8SFFRĮґ[k9(o 3gF/K'+6ǖ(rDŽ6ٖ[<АDTLHE !x>tE3;֙~9vb62r++w5ƕWyY5DvkyxpۮE tJ74že]ڡFؼRRk&y.ͣm NK5R\#w/&Vǐgb%NNw_>J]| -n ~oߕZlu6Leͯw6mD$%׿Mp v{cmɔg\Գ\!mww- o'}c~tY =eתK `Mt0 &=`ѣY#FtcFMnY0PG H(YN;Y qnt:mYSJS,9kΗ䛱57齆1u bRqۖ4#: ! F[%n9Kpm/6] )Kqʥlh"K-~ye:ܼUUR[I_JF۞c3\ta݅cZLtH>x#rat݄ԹMܛ {V1rS 9Qh@b?D&RkDE1=;ck8=:72=/~/a_ :u~vKABQ7o 1Vпdgn!\e˩D$Z7,^lƼ&5,5APl֭9eoKrS>Kmz_ 3&tE*>o 6ɦ.V:y~ۆU $-bs`ƊAj[^E2SY3E\".P(\j(.kK oE+ 1tQ/m/.eb4YE]ˀg AH ܡwUφn2Ӿ^D8cn<ܯ7 .hz݄flYoM19XeJN$Jh,[5\3ݖMnwcPH0gMI1 42 "<:jJGHgϕ[DC6Y_ˌ6_v6=x2HRm%.,I%'kUQf$*WQ2hj_Ӥp [n4HplHrE*Tm޿]' \e@O'Gty:7  C}Fo=HH*H-  VR' } 38zbxd 3X !g*$it|smbζb_/kzn;]>^AԈ .>:w,"RB4!ɀRH:wjpc 9㕭#&RS: 1om6|߂PQlVʽ{L*TJJOꥱz:DArs:]-¢ [Ҁ,jTJJM)?~2 AP%R`A@Q1P%?]t1%;_Ax  Η'4&jy5' IJ4 "7Zhݲ7.Ԥc# eM'"oCP[@9\Xk2rfIm-;i#$b#+͙D*1)`.ds!qɎ-٘n5TԘ$nȠ"Y0GNaCynbsfd9]eKb%C:]w ^ b]*y., 8`gFnY0㐙̡0Fpp#aB9ܘlH$Iy%Pp(qi TSǫz=Ǘ ޤ{y/˛w ncs7;s$>"~ٳ^nn%gN9LG)R^R9w";EݺbD$"$\ $4r'u9wG.\vY8HN@fl뫃8Bb8H`"ĐRE" =Zsr(-dw2,"H g2ǎfdDrHBU@ԐLqEU^HfUl&$L%KĒwIՎ N)s$j851a#Tx4ILLMwFgU%ão]ssE.VqtuEæF:5tӓ$& yrvvn]wUșK\srKȺkqݎf]:nL㻺ݥNwEз1:rvD9wN˓+9]wI9Ӥwqۮ w:Q;3'An 22Ɍ,h³WHw y لD:w%ݯliXZG&oX@)=o[^T?[m>-׼˕]38!^;`&\Uq|-o< b/,VY`ZG#L+NIBW)1Ico>f9;N2 ;6 Sꦷˎ]p{7wJq-Flio-4>q/;W\XHf~f{'o܋S {nr.v #JO{jRx ~V\6 ؝U+3Xs=nS 0EDOZ@Y=j>DZ4D]j'|M2βP(,.+Ð],rKbOP4 ^+uhJB~ș'y;^g/-oYk{LL'°lO̝o]t,Pw~շ\kT`"3j +OjQ `6 !`r{,_Uɿ⯶;9Yfw_iZencZvmfW蕜OYzn&ؿq;ɡy+g6qr HJ"@/um& kmN`@aU̺\벼gUm{ _"ٹ3GvC!^tH"GJT*壉1M-%w??s7-qF)jIc@.`h¿C|dm*p;[r7^Bn'v:@2,=c$6aS=aGχAӯN xbbmbZcPVu`G 6Ǖmq4F-pKψpR%Vv5>~0>\S,Ւ`$,,ayx0_|z_l,5N| DeZح> ["ĩ;ditk\&n-񍴠zV*,pV hi0s0TM@hxn=[YFV,?PfGMqZŹHiJ8S7/+1&Ͷi&o`\%j#=%Qڿ p783kʔBw R :Q\K`@Y(Rp|ת\T][c &r`7{9u%b8Oeh!t-Pe,ЅÛ= C#=U?o;K6_c kw >[s}j5 ζg=@Wzt1/|ta2xy68e[km\_Hl22@ -=D͑GMK)uHAX3А(D[;=dGs{?ǡ-`ƪMy~H.h:=4q9*sghÑ|? dK,G"wLmk0k(v3Rv i$k95Bĥ^G`ҁ$F`_e]Z'Xtj؏ȧhAڒSSmIğAI=uU`bb)'>alTDOfhDN2N~}rNt,2ඈ2%ۥc8v2RR\ 2f($v}Y&k4e [<LRJy4{ZbgDeDѵABwoͣZ.]e '~|n=N=J8q@|@[q" gNp-:JwӭS4n Ź;%\FlTuU IھtM,{Лହf+oǮHyY0+ ]K!p`?g)t&K筪{yK܇Eiw#S 1 m|Na{Yic%zxc6> BԳ9v{&[Rӻ&R)W ` Ddaou+¸vZ)Qs/ukCwBEN,"V}M{[-CwsO'u;>,/7ȶ-(ܡ2ֺi·Z[Y.uS[;n?|->zPΛ }2=F\e=[/VMȸ*:Ĝ@,2UNKQhن:)thn1K Kю 'S|9ʰDMH<)Xt>B4@"1`@7Zb􉡙WfG$H*V'Iw>M'9mq~M Ufa%i^`dIELvd'>*~qkR_ p70?eShꄷS0=Θt9wdmdr[׺3u8KIj-9K_*@̆\h 1Ήt`b,l?pJ$ZU6~EBy]Ւiˬ5v :g$Ha"I!!B C ^y6xn}m\g?хؾ":^+kɊݚwL?U.RLrm 2`MՇLpSVcTu8H He".6G XDdbPFY;9dt:U]bW o$ݓ}K0I#?T"3 8=fǻo{ٷ{ڵ3iD&gqd*G c"1ϓXm@6@P;CuhiϤ_?]D&/ѫѝiSȔ'=PA e"bsUp%c.62Rzt/L PRx:,ul2J,]_ˋAE:ŏ+O_ᢘEUAoJwp} si ;RL>.J#fIVB #*:g/i5L[sǬ\K6]OGi:6&v윶sO7gT'BRrSvyLҧpD$?>l7Uc<{p}jws$rk~~G?KE?K|p}s+$ 7S_٧F\H5lm/|?i ]=uv0`bQOo>"=?uѷ&JU Lxhm bH;^7=鐾}{=r8QV H]6,ĻFP]OkX'?AbAyUd}NA5#'=e0^!&?m(~lHRB4w'eE\XɟOE Xzl$ueyyGķdYXk!l[@pE.Esb\@ wsY+Hvv×FqlӒ}jOm*^/(7)LbҹAmXuf0Rl?6*RJjfҿKfXN/w:LO`)dJC+Mo U>axvDeJV;ӑC5`Jah*k?oA,}U ^7w2! ]1P!VSrwaBs9PmHŹ"//a8ɰ4J$,-l-ᦟ?ノ'Ol@6߮쳰I7$!w~"daB3EUu f'F$9yJs#AА.Ǖ̊uo[~mG='2t:3^{ @?]s;Ozt|W YĮȸS|RdQ+4DA3%&+6iSvEbcM~)2#˱646DݚW='.T1c?CKwv&1 cKxAJOԝFr4$& qߦ 63ơk{.OTjjXY )@FHƊlA2LJ$\h3H$ua('5FДwhuţ2]9;뀜xtƋPd.Bw]1dD[qK;w'"RhX$c2`$2&(b!(,Is.3BF$?wnbE( %W._?JSaW{%~Owu|)tI.u8Y/~~owln'ThxH*,+_vJ4{0InȫH}ch|C>TO0CQ YawQwL)tGqMNrVWZ(J!SH 8 A* )ApMZgp1;aEDLmJ(6vstw@[60g'(XqܬNt_Զl?G=#"D2Hd췌P<~yt`[:͇֚٢ ҡd#ဈT2"AwF!w(LiWJωFqT ;}g>*S{ `1AY2?*|ȯ江Hg `UFymɔEaCR 2G73EHfd .k\Eڔ?#jw+jg5k, Sc1Fu`W r⨊젥ratE8+IjOM6dLvu'_l;2óo /Rt{ָN1WK[3ǭ^߶ϮK/&Y_RO> p&zb"QOb{H5Rca7vfYZdc1 $'Y wv@Rm=3/qpH |_H!)>ϩ= ܍.i3D#3>}RJSXMF#.GKi'"0 =7UzλU5ZZL{{SI=iPL*R)pS됰*~joߧA}}?;vЈUUTx_'z9V4pdqV.\ & ) ֨KS S]h+W$%&ARJ-nֹC߶ h?"<)Pnᐪ5top"9p֐rAP?nT\G|UP FadVP%X EY%@  Q$%% F$$%TI ZeiEM6fKMjieDٴSM)Ri)IBR4$š(See ei&DId$LR$,#_=@۳ÄB m[5IY,Qci(K3PfI%EHIJ bBA.8O$P^ëk|!A$< H@^_[G\xߟoiο`:Tvg Y}l8 4 32X ڮ~OCg75muny IC$C I gnGV^,-!SSJ4bv[5Ɓ 8)4޸q{y}G ?5xxwC0A#f?& c&ɂ~ ~b! wdS?OsoFd\(oG(-Az#cE3vo8(m1u v l^$ZF9ؚm w:J*$}Ǵ@dlL0C0h4C%ϖoqhedBP+ 5G&cȉuIa"LHc ?6gTբ5/Z>n:FU\+wB nޚZ+̈yOw0/.{ ̡{^1_TN,Q=NVzsch[ vep_NHWF^h6`E|,ֳJl@$˟Vh$=;G&vT׼yh䳭ttM]1_P1#BCTӨR5=]^xZn99Y?Gͤ];iˎ[ke0)̽?cBؾ#N>d7w8sa>2v$>Cc|zl<%~xךR<3ꫪL} ߯}N|>=xQ$K;?Gg( 1OHk _Fܕ;_SGCia= w5v#GI{D3]xKѸ! G -=eIBNv̜|V'~S"pk /KS4t"BP϶})EB٪]O0:c^XL3!q*qǧ2=Ѵ40A:`CJct ٳUo)}<&]OZS#_9d3hwcU7Jx>=˱d3ɍ),}S~lm9wpka %s<҂߭nfa;uQ{ɀoj$ޢgw\0Fgo!K@J搮Qhl!ɬb+M5tg ѩ,H[mSJP]2F"/e7>+FsB`-h%{:L?*󜉶#`nnZ9. p@>z(So[J uw_]W>E7[ea`vٻ,Yոp]$;1W_e ʭ(ޛ֪0瀞ll6zf$:^;S$cE:Oe K׺ 1.6ّh"Z-ͯ[!b[N z'eb`䱦\ˆBGjEa3v'3,Oᙔy3G$/!s"NXeBcX5f{߻ +,+^u[7DŽ(5|9?T5F͂d5Plztl=vTqV{c#"S;(BctIvHa}2-E|(X|́.Ԛti}5}ZI+P3[})*۸vb<2I\5*ۅ֝g~L6iegߘu"  \) z':(c/jL:+FwQbTKUAK;JgS'I,OAG;DjqɓHh8qːx:?֘[Inyi& )Vz9!T6L;:'x_q/kQO3>(, }T'XP 4P\`=$34V:?|\4qkF6]M {RbLVm?W7,be}+2ߢ#0TвDЫ%]'2<˅[Ӆ 0م4m 1m6nd;c@ RҠ6旐cLC~pXm۲gw67٫IW_fZ@BB!0!B vdjE:yt,t>'D06F:^kž\A~ ,;sj^ b9GڡAi`Ys6Y 'fb/NZmܦXw,fvfFfbDpp NJ % -Ys`#Ȅ=DW׃/uꡩǙ@ ˔?yU woqm+^1uG]4Bf a@˱1̼o6i\9 b딽=p]rB 8p,Z؄/굢f/īm-go8V̍jٷxgZM΅pY@EUVA3w:?c$8NfARX§:3}^tYg2cUsG3S^;'{+(7P }'؝&|SzJ׏KO ɲ[T\j,R;;QoQ\Fӄ]eyjRU1"10 q9ݖ2c՘+M(k{d;mYWhf'  XN*U!™N#5 (Rͅ|~xpwN1'(xG+I)۝}7[vxrDzȋ)CU:߫WSwzVZkp-:Zyq6ͼ6f'Y ]gFf` ?z,oOޣic7ޠ=@ $hQ_G,3.Uüy@u_ UKNY((LCÁncpS V:+*boMMc,H-3<" 0_ܡ`\VXi#ix͡c)TNdkrNU"Y.Ky- 3h<ч=oRKᖹLjig?Y2m2&a C +5)5q c |R͢#L<>L,Jc-M $j $AA̍UB`*F5\'A& 9^C Ja_f/heC-vqF; {l (%6eq'6jݜ~^w->όkrf-cX謳V(5La[Κorit 3%Nsfw~H _?z/@_.%$!(PGeL?|Xn/XPR4vrZn3~?޼ H; K8:Cihטo! V%{} oK5D+0! wJ@} qlooe9a\Cq4jO.R$J%:LeY`B#js +nfz%Y:4'#.K\ϳ۫< !S?hq\R͈bJopJkO?V9Es y rFG2ʛ\6rZZ& wSH/elrA5ɯ \"@0Xv\4eOrA&V7y{4@[D@WPp!b?R44} RaKvϮnB$)s$R;)[ 1 C1 :|2Q~ s_~C쨜;uuG=6ooN˽d+V} {ykmU>n ,ϽhuY}vD.<9]Ȱdݤ .FT`m]c^T]o"@(f ۊ| *5ќ~7t}ޮ* m$h `C 1όcj#o8L( LD0KHvL9nDL?c5밨3i?=L]-]{ &ɚ $`)F4RAiKrxE;]^zCl,[ HAݺW3ޖ',a_R|yZefՙ,wʮ"e7i3\~`.1(=$!4h]*RD;}x|T4R ?mtT oƫ,4sPAKwRYcxQ l&k,%6:B %9(Yezs)k?fݚfWW œ,ܖ^~ {qcLזgΑ*qz.K< z{u'iM7-_K/lIGQf45"šȒ9\~,Nv rB6)pt<|ԖuS"{>YPAo "i5F' |V3ɉ1ϛ˪H/-X6 fU*$d=$͜x((vup^1fbK:+f>l[dJoFcnBTuqTCRzl w}a㧔&h9d5KA/RT> ܸ@ Ǩb Pjb~ {eN2W~ZÂƝ`}ڟr]^}&c= 80o-F( )3-D;uf|o]B*.GȾvg,|}m2\@Y֜{Y)V=K:dA>c=SvI`m/(J qw8+[֯- Ir/}So~G=ux>,wwsq0L系~+$mWXc#=6\꼇:}ʥ:T,λsk/[΢y8!htN^ _fhS#A(R{wR橨J.ρn/+is,w£$._@gLddRv*Cw޷udeOgj0G5trp=ߣS}@ӎu u;)޹v |keSj>''8]/I<<۶~Pve4vy I/()/xք֖ۜILyNCҡRb&ֲx9+FhCOCV(A/O^J1~-';W]QOI|#+b/R\sTP`9Y51].;2,>k̟< ӫ|+g\)1iT[4b'983_gjv&޶][MÊg;sS}/`|:ljS<,o6qSݿ å-9b ָϟ2?i]BU=WBċ+G7C`?G388/jw'F}9OK].uL5)7=WȿS?w.Vܦ342;:m[nɺ~' adse:n?FCo3-1g"g?Ga u0_/_!ѣ߿G,~Nt$%U 6V( ݒqBy8ĵT1/";b.ľYeaeik @Ə]H&-DB`=B>ň>׶;+J{fWY{k'npDȈ6'/@Q%X9"!#vc11,1.N%!*tK$c.blOPF;iX>/qzV{3ݽMI# BV~4O=Zdqt)ml><1L%J[{߭$L~}}(m[h(hs"cz쮩vB&>4?dӳ'6Qww!K~5 sE;fP_̅Yy:,vk|jLo] !M?5tB!=N+=/^뛏IW"Й|=,ͼJCϦAL豥QuhNxAkkOyhS'wJbfIGhs8ofmfjNy>>iN sf/sy*n|nqswySpNxleV__V2:k1/Ks[{.6R[E7 v־}Gkˡw;>IX렮_:Ů7:Wo6-?پ2NggeQe8ݯ_)zZN;=bNd oKKك?6=5~{VyPB~Ӿc_h岁6,A2xx~e̬P/L%(,'CN'wb'~}\і\tR%dl5ZFn@vo/{ZXyZ|ք/¶Nޱ}vw;.?)GtWb"UpX.L`1Ͷ lel H"#nAKHI$Y1~PI TpN65\9@#i8栾jٙ>6f2ncۺ:.t\L!&I# #2$BV#Gk DM_~_a#6:K(CS>~ r>ѲrMI L6'&# T+. 'eq6 tdjFXտ/Wulڳ`ZPWbP],N&&9-f<]'ojmui rnsx긾y{SafnKfLʺ_y_4ޝp?#30-L.&jrp4Ցw/lӲ<2\UopswJo8K5S8x XXoVM’9 Xɽ)N١QrbG'~7m3t"{1PN9tkENi/Ÿz~XBd%>)R.t\ë\/6 |&ja96.gL7g6y*d0Y%+Ƚ4qQyCIww,D;b{/>XIGs>-A7A"CR V)iY7@e!XS-}O"V jHw4Р=^NAΤ .$S@%PugߛO=k Ewypb[o$i7rm8OGMuU˻P{`?#rB" @ T>S]_#;n& ۝ν ~\F~'p/-M(R޵數}[cdw5B4Iy*=>6dnp976ew8טߋ"9>]l(ifnOd~[=4/}]v~ԡ;tƲrxI86=n7sk8z첸I?#/`O:աĜg6Ws奏|mgU/8l4;w;%&F/,;0eM@Ց(>wzN=s+{3G]nu-r=\6;[a\7qa!g",U(-SR \Hl.@i5uG_iԐv q{DBYbF@ :ҷ`;DQqؠq30^?.ƫW]Gm|ns#J4=.ġ$(Z4 TMtF_A[S׆+0@sؘh%k_ay%[ujumdL7 S#q({HSc=)wT ~aAEO(}$'Kf끨یګx$Sթ eӀʉcKqW9tB!Qwغ]QtmIsXMGQ}7P$ MZ`2v} G~0Xs xmP؈%_Iw V`CwCj?%pJ5VqF2iGglmU7cRӬnl7б p<-O-[S˵ nn+(*wJdv3a=;Yo.8n."%smb,>?yR|&LȮ}1TaѰ{kM) A-#zȽ. <_d+8[kM(7 6@N-p6għ.MZ#Xg73 Va6^̡&km92M( rm[h Sߘ,Wq=lՂ/m=͔/aJ]Nngr|['q2C] zOzO3ˆtY #a\DBXgYʁ,t amK$X[Ge2pMEjzDo$t2x]ܜW]<r޷Cg>x*"ew$ , |?mK`{84iQ.n"z!O\vBcOtzS~вh21a1`+CT1* ^[e S:w(~k%^ 1l8cWg#idA"!mp ~}ω_÷_7k:@pݎ7YoHh˼wK R(Ǭ V82.kr3# t# ƢQm2ijƥy-՝Jd\M\1.2|?8'eBpb*} :pm̟y35&5ayP|X"HϠ0O |­2˕ &A"f Q  hE U(JF$('TZ VڙmKkU4*ɄvcdGԴxNU:@U;΋#D}n08\>7tph|:9_7`Z(DD\SG?dŢo޼^SLj1f$3@7@ч l#&QH"d @&$wDzYkuuՔ!v} !ȉ !BC?e#9OM F~|I_j'YwЙYȀ!'wU>v1-C+ps񓪜ߢK&Zp~'_8FmZPEyIīe$\RGpJ w(.C c0W3ݟ[@v}>+$ ;&4|H]b\ LbcK֚TG@W2XPI[W7:?h,Fv-W.$Izq;/xDUnto.% 8_V@~0 Wiۿ֡`8.P0C|}n]>G}wN(;m.,ПwqU]HNo,ƩL1RJ9_{ϳ1mS}ubWe@VXyƺA *};o~&X'9fĹC ̤Я?͙uЋ)Y|-Ex P=$j/r3ez˷ҝs*(wv7~}{ as3hͥɝ;81춷@06k6" _;t \Y]܆(ir65Qgyw RָnQY+LD@V]R! ,y76ech֗[s+^FJ$kqp 3G:6lGy05EDhOmKJ";Fyvԑ v{צ s83P}jujMApog)j]qwlWL3F\VUyo~&#"3:g"bUfcDLM)C(-]I41݂2ԙ bJd.EUo2̮Cq)e67. x;PhPwqҌQIЛ4HnDIR2)f ‰""Ȥм]xxU{/n1{v$I$)wWHsLb.(Ody2t:"s'9H)4@LUTb 0j|+{{}gv;ؿ[{Oq~P )d° ? TRǔ4ޱHlQFf#s'_8|_SwW/k!;(APD褨 "!s\~{<`==kd̖L;dݦ]ͿwR:hc*5v9":RªTwjm$i;j ڧ pVsX&JF@",NzX! }?0㵽NS#!/%P1p@(Hr+ ?g{}ˆ{qtx* 3~)=f:W|ns^$`tZԤZFKU>"~_>eʯ&{ jI4 L DZ:EQs?C>Ϗ=mV UaKa`(Y;~o>0ׯdBG`_Qqb o\(,QISZIϱ}~(AÏ2(I$DDVX@Ak!d/K: 9ywEBE;NXe._*uUKU1D1='øڼsD8d/}0 '_՚c?.ݭ|ωky_hJOu+y*,_O™3ݕ< Q/}ĥ0V aeCFV8X7{W b ,!/X`2$XVv^26cGՍi6ŃXX0HAL={=DS=t.̯أ_[@D\N!D"u{AKS3bpG͗ÅJ Ԧ"=xaB֜jQQUޓKNԩΙBq#2A" \ (jPPeXuɖ)|T,N]ΑGQ(=.VDK[B}sg}\R-~=j'޳~sSaa)c?رX4o.iqp4.R72 ݔ,Š+ |cxWvymɦw] (Yd6T -2㔛;J/ɚ{j|XNYW̅rK{z>^<W_q~1sV (`d +wkM!"6e%T"*eOtim3-ZjZhq*%Pq8(n%zY; }k (ihtS8' o4vzBrnv q2R~A!&߹q0E0iIdM$`tE ґ+xSaE Dx 7ƳXČ"cwWM6H-˳"2M1. fFAQEPTV(2=-Yk1l_gu+Ѱ䌂2@D\Ѷ|t |SkT\,$:lO"%2-/_y~z\t%ѵRWjovG8=YdEc}W7QH /-Y}pגThp6g#7:[sOt?3^CRQM[@~[|\1vu!%n G.~Oۿ>?='KTh:p|v/ԒKn m'v磈sY!I1?< },`uV0V'ܝE/ /$r!\ jyj[E8[bDcg}_sסA9'ܸw[bljH j- xy.$.0;TiFO^:x9/; tE6zP~pL(7"v; qEϩiؔ)*`{1Naձ.9Y]2 i֬R@Ahsxv $NٖD$3;'kH'E j[q2 uRW.!kt54;+8h5Ňv9TNay؀^'ai.4Yi%F(w! ~1n9LL4+P34KTAƕΣ4g})0\ni㶸cذהj =s%ע~N`M5J&힏[D@E[&)}&[tbdB =N6X}N˵_.BAb$)P@ϥ}xrc,+. ,;=@PaZ_p~4 as}q3bDc5Sh@3+_ZyA},2`7O4 CGr]گvv/#@I,?..bX }UẄI=@A&H>q'1b|!l{N0pP.դ1D2 |!"slMNC44I6&nz%#d YvtI&gkVB}P ˜}HGQ#>/ofqɖrY$έ3yZKyt~el0 %/X!4.t' >Ӫ Rt gD@z0>7O3:A?0^v*o^ p=&) ə)[;aQ5*cA{γwg[GyJ$R@iFO@'a40/zafPHT0x*Z5m=yn!Ip$ѿ~Z6:=jP~ (a O?2@;~Yu 2RO$$]оgl~v˓xPbbRW!u^ˍ_:s݊m/k 8%G4w, 'h׃8]П]\ݯ{Re +x 9NإBQ0hCBґ6t0*:Hp4#O˵lk?j)Ɣ;% v?,8U$ ecof*5њ{zď 9n̳lʅbF()ŤImґjP3a,iJ% 5٢jL > ^bhAjKg.Q^Ӫ##`}b?ߚ /U<;u'|[Ki̋MXZah8rMet`֭a:SZF MP#75lo%\k]=|Lkɣcxi/-,{zz`enla؏=ɰ6UlZy5=)ٺZBٜaCZp{OAM'w ?w=z}kE|94̨ g2lu(!*/*x~ `sp SUFN 7z!΢԰\;?C?)9i,'_<9kvv"jAx{POj`ɟ_}oV\G 5tI84&N|a894$SOlٮڍ z@?ן *Bzo/خ,"2F 7Mj; <#\3ޖv!sRK4/m3e} QЫmbaIbN=I-Wg-NjEBk Ʊ6TCJ04Ǘ]=@@\I@S}sS &8'Y!=ʶ.AJI9E<#~..8KUە5}"f߼=HoLĸMآ.X_ !dnX f Eܲ寓,S9#Νp>䅖kX(*Hpw؉Nd_bZgI9j}%3T(Y va-f)hm5MCq**v)ŋ,KUd<) B dJ(E5EdQmֲ9pp-idթ;E÷^WAHdT(& w7=^5х4Izڼ O񬠛mF EN*-aOjPfLA+0ʍ\ck՚hXio٢'¸"G],l2]QrFz-Oa)D 67MPH;ܔ%?2 bap}3U_e>=nƢ!OvUl3[˄qIPXDADTVFG6tgQ!Ql]dv~ςߣC3cu_-{/}~#1%{ola\uűidBj+G ӝ4lpѱ.:gІzzmyZb*a_pң6UM,*L?$(e*>A?9??=g~ R!k| w28N["݌#ӗзB?yczOڄ"s,O9-~c!JH8\? 2Pkx':\D0cshRr[볪=dlZ.=y Nԅ !g)" -AVa}M?ۅ]<5i$"fdR P/$>W,oQ,vo.Os~1]QF$'u'A{bueq/UՠaU!ʒH!uCCO`Fp],xՓGQ= \1Y!<]6e"Yj:@)*%ayjcB+d'cD(TJ|XE"݀wk fۋ[{ x.DLSo0ϳŶ]>s)ѝh3M g=ks_ce$h{ y0S'XTO:wJMŃ<޶_$ܺws^g\WUТtkx,m.O]jdJHmj_ӵBB= ې*μla*9dw͉ -tq|a̠z _xpO $[q[H۔orʎ{܇Lf9!V-Lk. <ݦcKU򉕝U0#elD1Z#qҊ;d$&Iy} ޡ-ݺ#U(dB=דIw6lui8*IOdS,'˟HO tk$ %[7gG]ɀyY } > Ҫ~m\ =8s՚(2]S[XhruKd>T$, M"R\ U:POӃN dz:wުz)>J_|!Pa(?0^!G}%~8.;>׽CӁS@"Y1@ځcY0O2> LΫ)+[ÓepɎJ=HS%ܟ4F3vᙆHki"ѡygCW [8BI3S>>(@e\._:݅xg f(VmI@pXILr{t׸fő C Sڌ3erѠ" ϯ*@ZEBjMB(cGLy< B"|;8Pqq\Q!^_/>_ ~rqz?{kr)Wx4W%Oe8ӱ=pa =7" ]]8ƶx9%Pr=F=<[TRABUIHJ( DjSQX!!H~i]OXz.=ZwKT;ցُZl.㓝+X1;-|&~IBNdWSKA(b\ȲHd}G6΋i*y۴%zѯ1wT`WK48|wbbŷ3.IU ÎnUϲM$ @F32epI uB+#C5w!yGikR Z+$0\̆9Bp6DDmuAtstɊ5\bL0ir" v롇7wü.2뗷mܮ-rlIe0X$O~X2Miw)Aﻜ(S#%  h@8:w] K[ )ol=;{&_܁1ʤO-9P{9P1գd[ 3Ñ~x ؒMPޏ'GߞRq匒 Ő4npEu7z'sʪb Wt]?fT -Wv옱p*6S쮫FSA6pW SߤwtwyOz}OOn=- "}H~ߡ]T RxkUu*RܱZ(/9Wxb0mrχŽ7FX/2⓱+Ǟ#X(o`E7>g?A=+ز u>(?[0]O#\nᐳS˭Ҧfeo:8LtGNr`<ݓ국 P1)/"U4zy7A5p@<;jv^o3 Q 'uVݞ/j:E^1b3Ica<&%m QpQzSg, 0soC\LDy 8V-Wڀʘv.id7A3.yPq2lKY4Vf!H`ɪvFĶͦ0`@4_5@C ^ L%k,IፆDBق TObBA#kc{|~ Ҏ Z`PE-Wo0IN7)8f7 8̼$\KJ8X"&(cW&lD4] ]j9US]w^6_v_Ǖ?(<|yA{7_채,#J|`5/A1*2TrW=,X{ۇuvc18ч c ?g%W4Y.!C7`X|OsKbG(T5vgNu;hr_[ ݻm^ן(&OVSvYe|YsNjBޚJ{}dEr(gL7f:bOqAA٬a6&$&QK~[߷eI ,/Kh0*&SZDGE^^ė!NR;X?\LbuG0%bHbc̮ j!,˰L*q!(& T=/ b%mV@c9_,9'Tg1ۘ.BL%pZ"RE %̝>I°vk7|$ Pb%(di.x,sB uss׳נMy+`H! H\V{"c׬SZRm'%<%vʢ*s|^tD6 bu] gjJezF_I{]P^ cS>dWi Ud]\EȽ}k'FW+0H+vԕSSL=ːtk!$3%HǶ8cQS*$M8`5H"tۢJx9 e =ۋU2g p 6eZFls'^?;%pp8DUN ݸ#iֵ?nǡv_of?~yCP=$Ɔ'/k\⼸(~ICy 0h+*oY6|`IB3sN =QY2(WkbبWzx:.䋈!`hWN(ћ A­\gYy`Jl}uI&&Cnt,)GqfOS |rcKڈpJdUR-t] IU*?,F>!9Oo;yɯr!G8UUnq-`ܯt.c:3.X;g `G}Q?K$ G v5SKtvlʽ6+bMJf<?%h錺o_jl}!n21i圮V;9 j9Q_䬍էEofY[f2Rg(t  w#t˵AF-8$ZG;lYKGBBֈbeC6iM.S&–kj!TyZp2Ɩ+j@x;<,ik.눅 }̲T)5HZk/SK;"sVW Md(} CM +/)Qj_ƦJ_-o.GPW۩_Mv^1K  DQ~F]K9'B]b]jŸaX2h gz/_ڟK-/ycn^dETQdÍ*FG.0 zeԇyqtICޔ)]PxJ(4q7UN@Դ (t{Qinze--VY1i}傥N^v!xAl^/E4|_\ǥO.~;qa^ɿ$iY/&IgRMse. Ȟ. 80{/WQ߭0~h7GTo-'t^wG cz>>@ؚi{".rOda; c7#u}' }wBȎD4|`^EBtFcZ̉">Ķ6^աRS_J|mc\Z.(Np{TkQe; H=Qtkw_quW4pH!)5舲repY=LhE>&! \3gڴ""zO?S$oa~$6{ϲ)KQl_]7z+|0)n ʃv]{XvmB<~AS6GkCUDnAxg qH_T e=pDs }*dF}>譗EubZ<2H|^JTX Ezw<^߰ri;u~Z3я]R l0\JJRdK?i-1: 3*(4ᎬUGAj"@+Ί]mni6agW4ظ5JNUʂAaُ\'8QNv65>oPHE6V|f $# az8ҢO5,Ƥ yQ 5u \{ DPyN4`$w(ORkZsqh^2b]P/Ho#6$ }t$gA^+=Gmh+̌ͯ@H>{4^4ӂߪOk!"] '1lwaɡ ?󮀜-j&b]zg؅,j.Pi9-n֏[j|P1P%Gl}I:SNYXʽo-Շh76Jɪ؜9":vD~DYLhX_c(j/ Z9[8bB"ie? v!iη!G?hwAq9WaA~SB4JWi U{LõHU$_j}T4x&7,mky ȿM,_ܤW]$&'_Dq=i0a"Ɏ %eŠbkp@NF/8͉n aR(O:1)w#"l!]%픫a6$RLUEE9:2dwn0-c':5$EKJ׾ӳ=} λuR '82h{,&8lvL[uj٫w} pmX ,rUrS%iJQj50v8l~}:0\뽹plh0 ň\MaQLC -& +B ŠrhptP{q9[^12*4{?/cm۲Nzo;R/QǙ᳖!rïqADYGnS~ɼ5]Q4R*jS#g ;be SA.tf:\=mJ-zM| Z4ao|v]CmzZpEӃ`Q((u_}e׻HzٔN1 4NI;}x琮7l톥_{Sgu&P+IWkM#Ju1daŁyՖyQAAЛÈ mJr/d0%Kp=SL_5:TC7?_ܒ;1ܽG}3Jy܀%\9h˧P!!Vy/'5|S\$}Bկ5PY Or{?G69!ziW}{t%clFpkgfP3naKY~"N6ȶPc[ji|_d,e)gI.m+ {u2Ķ'X];0<5nSY9!&eXwhZsx9~I[y N%9y'ZbYeJ1s,^SyILBZiZڼϾ0PɹhIDf>b.M*(| n&Ɋ{_Ɛѣ[v[;&4NaY'se*HlTjS$hG\?c%+wDhnϺuؗU)h]̜qkhi?BřHA>=r4=Ya ýNo/J.{F"z e*Fq̫5gLoW:|8u2vΏ{翻QHBTQ8&)S|:]>yW˺)i-$fp(o"f;DzJ}8a[[*'|9>]WOǦ ))2hJK•vfZ,ځ@\YڸCa䳚qoN)%&:wq5[Mqz|Z=I[NI(u2{woe[r1`pD%@L gi( 11`TV)cd?HAEDh8Grkr(f-V6(%dr>M'FDkqK U(`BfTK\`dH] 4*[%$VBL=UjTaiσh_ UY׶QR "rdP(͂D\ "8)]-b\q.7:5g+5X2u[p0N!L/DDmEÍ0gH"? !O(TB}&%<@-=U&YAl5wOmxģ_B|=/JQ0M =h̲ӜHP2H\aYEDXZY;{8> l# _֍5k[SnTukY;#q\"! rTҩZJD=v>x%'TfAdU A%6Ϝ4mM֐gDEKbo] m~?a}Ibvy?32ﶻ[8d26p*xh5 qPgMz*'aL2A2KYQ4PSΰWMR!e(XzOIU%GgMid"Ů~8_g3E.ỵmޕ!}bBWg"f[`a*t5D9 gج,>0c`kQC*eTpcH;q 0]8n\H3zZ! ElI؆yЉB9d-xRXBHNG%z=//wD`C["=TyUE PBѼA/Ꮱ~XگhZzQw!N܅ āTSSpe ͸m*:`Bg|FwpqzU3dκz0_iR*WeQ$aG_;ֶ,!O/Eizݍ + u:S{q|;7YmkFMn  [ p[&-1L<[W5Q"-n.x hZ^/OA[б*k%BxN>gGKOk[JiC=s Z|_ KsRРnj^jnG!(ˆ^c1ƈ٠KMVqiR؞M14W>,11J/ ZRzCe6LÂA} oSfOmĴF0h޲.}lKF vJxvv6e1Mb$-8Vp#DnB}up ~sgᐸ/c04۬RRL%EaXsJXv-"Eq_zJı2\=oLCE3ހ/]SϺȴ *`:l溩K16vH@nG|γ&n='Y:#i Dp|C6:L_h0$]oH`m4G2](ǥ;mWCV2[roSqo൑m _r uVUپ?}M` "]"A $J2i3"a?y BOd^xNMw % [a'2D( TsO(&&eǣ,؈"Q훽"D +Am G͑hu%\=_`=FU]LTWC`J:Tlߛu G`{~7\)7XYO}6_yfTљH$/gRvF#]`"iY/fc(hjy/$tYAm9}K*(xkz0 Aim&xRi02G :;>qʒ ) Dˍt-,KE>ShWooE尻^˼ﶁ 3S+/9-@|ojW_vi~NFGbR-Jf K!mݻ;k/y0BrdRCzHE҅fp#nUipf4,z'7entj3ma~t4'0Bus>ϿNO+Ҕ ҔBDd͒=Q*'|t̩iCD18HhHt&BHؚQQ3N@B҄ h j1%ۭK ~Z\mԣ1xX#=Ikdt$8+zv I̪}5x9~k7$3U&p``&)gAa!ZyV&BvDpهz o++JӀY<ݯ^D-lJXh?qiET҈]٫b[jTL| # z~9Ž 7ܓP6A,u,L'm`9@Ǖ۶n v jݠO5.@DFtP`Ъ@]oCBJ{I8$ UAVA) a:*:L>qZyS?ѓ2;0ù(+mOޅ=uY9 pbF(%2BFR p(Z&[$p:wpEGL4M5ږ>J8:G} Hqf9H]qHS&  ˂}T'm2TuIH(h]g4 cF0_DeW]=ݫK&Y< ,mt ˨h"^}UyhM YI%G@Qޞz $sdIh!ksuHg;cZV%/o]i=9G ȥyeM?o\@U/c75 1mK»%2HBkh^a3(߿ޅG)ٓ817&N'S'wt\6j~S]}g?'h֡="k'ı:d«Gj'X~]\%N zH\@$<=5(!!({ {HM6r/AB uʌ\s4H^G|Tq /Ԑ4Xy]<{$!<NzI iv kd6 gXaر~zw-^@A$Xp#D ^%)Bo.Ղb"|b m rZqRFעGC ^;b>&Ɖf 9/{îw>niqUT@<tk}^djeXcTa%zc;$h;-G!Hy=pDLM"mB yS- ^% nG|+\lќpZ rIMjp /ASڶ>tVMidb@.̅QwC[Y Qh|{d|)NZeZ3~X:"eȼ]3_4#"; .l{4 ˔)&R5fЮPU,\u{=!nQY6 t9QH_Lބn]>P=>:n%NP{)d'-]7-8d, oպa !:4OGK2rxks٦,|B4ZjOeawD:ջ7!SP{@I~#KuHb.|=f;Sɍv:QWU$xK9q8G`J|M|@:ԢF -#O^f@liKԝNQH(y*KfZ(=A$MᕔHa:Uw%( [IUN B@4JzuñC"IJE^ruWK|ClO?jRWC5F[!萪h"N` qC<øC MA/h!) ŸG@f'!O0(( !n˕`|Xe \ Bڳ0D2b^'&t~1ܡ݇Ub@iM[vC] =Aj=7Cr| l[to!taFB8 _ ׯ/.H!Z r-7Z󕝪i^)~ ĝ}`% Hx1"[M(m h3eT怫I2ù gÓ2[azQl!H0#_dަ/߃X$Ryv`a53{,uI%ßE)=;zxFGz#hHV_ _D^YQA?bD Lڧ\QmZR2+&JA^9BYXxg' ,(G' SgC.,%`l(Y 6#HŇ0@74qm VDIi[/5%)ƾs^,jW#7i:QӲ*Elܯ8 =iҰhpN8$-RlGH4^SSfru2j\tr.줣4f?/R<[-W80"w?pǁC~Yp8c"eE]ijsj[ |;:gIL iNLYi>6~f?o\I@TLKAGHBX"˂;Ȩ0K/w;"(nNM a*H-Q`)TTӚ, ׋y!|LE$RdEJ](o yE#-! FҿK^t(O* =3?\ ;\,@0 ՙ/4B\SH _I$U7dTGש z쪘 fjFM2 2Koujjl sBU0ϪqNɑ[F EǴvp31IaDVPTH5:)2fҹrLɏ[ C`~n r|ynk8[ѲRYbP'İGEBǎ'T[w?/f$MxbA l,m ]^{x')5\7+Ʃaߍ8m4HPOZO58\.4=C럡*2b>_(UД 5=_qQTZ t80<7/P-(4hۼ$*Hܰe>dC?3lA9OhDϑz)!E[ߩ͞бM ,Fu#:svǛ{{FwEnn[VHMPm&2;J9sRw~1]>S0d>~ߺ`LCj(LYS,X< ӀFfJ0*WeCp Giocc7u}@sܳd6mѧ?7r=Ɓ3*L P<>b9hˏ#hO;?CWEYh A q,fsd;St>DHPТS=_{7 |ehL :hgW.C)sge9sN {׫A64woUl11/-qI@',lspxN_=g o>^b[Hiy<ǑV(ca< hjҒz(Ive^.p~8Ѯ%nr-kVBWk&x6!yw?s!Sw{9frCKڿ:0I c@kG0!͠ҡIY9ve`݋F"d|*mohϭLDi!xQ˱?"Sv#MZ~4\ &{5O] !jPJ'`f#֔!ca!`H 7"5 u)6cxQ]Zŝn6>Q!` _TA1Ca # Du ^ `O&,T JڡFY?3zd'56H,NPgHᖵemr ICfᓚvIڝ\+KK mcIx*PmAkW⊪֩L0 ];s`5ħzːީdNP /tl,[ pA 0|$>=K#z x%-o@kL,yP:7Uo+—ݳ 5$|k|t8 6`D BDd0.αWVx 0Q?oMuj% d&?}:A`OD'JM?2kek:iy&b֩6ҶIN݀ onx k䔆+x]q_Mi58ia$R/5}"ѡY&!\s|=)}Hq5< ݷb揨$J?`4K#?ܰNյgϾηNc ؗ@BxLL5LwZGwHsc̚$&ӱPdUGyE}+RAฤ˗Q%o SS#>J9ڞw){tgfdԉ@UZj{=WTsěpjDZ#$3hsтjgm[6S%[׸. 22q4S G"D5[DdhhT2a1oIv Y_2G q˴V2˰خ鹦 m}Ak2:gP/.H2X#/_0 kdei! ⷛW"IeNˋ] o8$* W߄1>YaԒ =D]2~p fír%:"@ŴV>A2k 9Hrsĸ;R 3F1b5b{y97>]q۽U߱?Lhʨ. JRS;VhWϫ~Bdo=@DY5t6ztGl[vKJ#rV! -a zR0`B|4"Eոz{&/OsaԞJ0iA־9We.7:0A[)a_B;1svRg̢dRhR񡧰2Rz_h['5Rbb&t+ 3)V$0ĔrX>A`M=(a W5K4gb, ;-1Ši!Oa3Gz 2D.>Gނ&u$l>`A9 ؎1LTlZ Lb5Q5wf)nXt;Z 4ā!Cm)˓*YPRDp/Cq"0U6#&/P`W9w|2^5R?)[V  [2H ԍZdoި6\(A]zW2mD/{/#Dٜ~JpU95oT.7OwmT{Y{dPqz88uJҗ،JJʷ0HJ騝cn&O1}y5 w>?&K @9fCIglRVLY6MلQ?DD&iU,/RH㦅HeaDJJWX'`vz}rW+hAY?*¢֏MKyl˅JZgy- jK[H;O5`V!|3/qůxesiT9&jQ̧G+LU_ULD_WP|@|4^=h6oYRɛ(N(-ɷްqlђLS|ء[WD DSD})E~/><+5_G_^b\["XN^e>5)gNAStPDs͛!oZeD ;ǎpC}AwUruJȐv)(V׾cf rV1,ͨJ{(k9tR'0 XnKw_*Ӂٺ%e$W=lZن7b@@TPy -3DFjG )ic8D TE`/ȭ#jme6 t΄O_Ԡ V(.VNY=|!Ӱwb\ Ĵ\&,=s+ X3JOʹ_y[ t chܗ`g. ;M{ً2/gRdDgy>AҮA´W>4?]^o"vgXlGLX9|`'Z4ehŸY&$r1yļWUvo .)k[2'irh K}pؗ798\:܏R446'm[R2,x #}#ƱGBCxkՙ; W mG5>shmd'S{Y' }צeKiZ.`90T?cʖEZ](uh^M(6H@g #@Q{Vzīu줂TRph,yCڶY4u$/k5)ڄ튋ju?+jrث%5v5WHV{F󌅸0/_+j%tޞ143tnPx/7*^%*>ٴr_nuʂlN%J܇Ck&"sʞ$X v-nK|Bd lS>*h1%v d?p Xp 8a|sIE^p10N{ՇhxV&UkwJEY1.&RLvBFKWK7Ir*)B5+'?_,ɰd6} ˧M ( =|{ v0jti1{gmJTChُ^պ`gӨL>O* IUd+C@3F&LcS~h_˵VQ>2~CM+B,f"g *=cJC&jf8l`@32lO7m+q `DUj4rzЃ:uP.MC,[V2C&v881@{QH[jmE ꣁV ,7~Zό:lcSVؐy#41{p^~ rMgӴ%n/n>.͖F%w y'm9_]IѓC.7)ưjY9YEQc7b(n7P/sQ_f LpjȭV )0%8#4Ui>"ubw|2Γ o*y*Z X$X[%1 Qז2RRb7{<)0ICGZUODOwepbF2rp&F'@J 7IV8Rߎ$ Rn@XE51X,ODIEEEKr4d-tzo\O`czctU,?/8 ?~ 9_vL1[o~L'zgG ה7LTl(aRj~m+u$᭑ty-e§5Um=K7<C"F;#VAy ndL>' m*1Om4}\9`zfLV#߿(7e{q*n&͹(=5ϰ_tdU@D@e+>\ A|lA*d(@eG!h/V*I)lo震߃Z+R:y!> M}na;/Z9jTJWxC1W;Z|+`[b7 (bJ1 :tU f luYc 'b(<~P"uH%nnUQa/U [ՃE-o)ێ1ĺKEKaDk20gGz۩M FjҘ Rf™¼§lXWcN\~|Z_\: 砜Bk :"X9+M4;EK< O~ [e? P훹Ϊpy!Sg?TcrE͙:J 5vRƲePn*j6uWgaKo飲~$a͉BxO%t\EO\sֵim ıW\ȡ [csȟ8kocI,}㷘^Dŕ:c;8dƪI8h F݈UXPlŚnaL=dW]{bwfBֶ2CQ94we-NۢZ(kIup :a/Ux(F1{gd^.I0 SzR* -kA#`*]C-!WWɁZ)b-Wvx *lsá2)mr;J\xelۮ3>/][uA]G}u1J8WIL̀6#2U斈ɮ9).vuS)M7SY9t:Al$CTtH҇@<+`qTe"d/#NKsƜ* 1i3'Ǧj:KX~TuΔ]%tum0=0v}ug .pWXljgs<5n)r*ަ`,V֫ϾzQ:F6q2TF^pK7NS탾l 6IRY5.DmWZBH?EҾÒ;Ifn UAYwInIpHz4& \dLҹWPђF*y*6H QGZbz!`Uslc=l,ygV~M1(YT,1{t+`pJޝ aYQ&V#KyMY:K.h:7Y$+!KS8^UCRol"aT} S Vlt* ?NW߆"0IUpJQWqid61Q[8 7u$d9l[< @d *9qvڤVf{^yד%<'N~WO}+6Ȑ)/%[x~)M2~YÈ~&vEWxtTT]R[Ͽ1n\~NmGMv=Z{WeN?y;3@r? ?px ;KZ}Vj۔ ^qI= <P GV^>]~;+L#J"}")- UW=3}w^xңlq'' 7cSg0p1#: s SUd_^{9qT E@uկaisbq"Ƈ~$N0;sG搗0^f}_ *J )\es䯃K/Z PGVO#|GǭpeJ`,kL^bp*6r2!;#K8ɋ{нw0ɖo']S ]Aew)%Wmۓ*ҡvAB1g;;ͶOg;javA ~;;v̊=^^Vg+2~[^l!^ K>|_sD#n,RPr̄ELkXVXy uꛤٿ qȓzq}zNJqAN~Sbą2lFk]d^*6G!)}pWQ qI5!Fx>s]1?3ߎj+YzYT:tJGBoF|n7޺nJ'atņ*NɐSVAXh'%%[(ZRMnl>~.CJƟ%+G\"[drI[? Ű鸹Į8rw߇.2.[_-5y;B^5l+dҰNSv{szw7 ]!'d&~x%}p_̈́q؇I߰KzѠKbn :m5P4uTX͗S_[: "R@VةQM%ȐGuR8A?ƞl?wZb&9fr-ݏ0;[/WyxGbSvC)FS:A~eenSQZ6'O! TYLJmӚp Z7,ꮏFb&7כ}KiR}B5J³Sbtb~l$> F'`J̢#fkrx89ыIlA;qɀfT= `0aw#Rbw!v*wyM9_clqfsƻzNsQ ))REtEA֞";)W硬a~̫:]I\2pd8)/ }H׸lx.](w]-{X0+FFqŋd`)x3)L& wAՂg*,aKOKs]&P/p3('ǒl[(-̯jFVֽR}ЊR&hfxi2 >"E Z5{$=l<#dr-[u\V٘kpJZCq_]3>L7ileגS~IV$ҹ 82`rBR&KrZPrm@'%ۨ=u#:?gP]: ľ`MM1" k#'4BRݮ77*ũ ޗ77ً-*HJaG3H^c| `Z&d(mߓYt P,F.Bf~v޾R/F/\h3hWɜ3)I2'_; 7.xu/23@o1Ic &ӚtGR"IzEmB^+4~tU$#&1ct Eey~KCJ_-yZN)i6yo+g0Xycӽd]NWoWoUNsن\=໤ gZ|dK]}ΰf!ZPy5ëGDF3M,hQMCER__^嘐]CIęaѣ<-GH+$ }cN]*q5(ȗYxt370BuUп5c!)"!}ק] O(0[ [$nq>&8z1w2JЌjn, Ƈnxk4E$n[#/j5V> Q} ض?"~w%W\ϩe2ӣCp~kb/%AS!c"QBHbz 4\nppǝ[J/qT(J-UX[xI~A$(;}SGNt숤~gTSI 0XN,Nu):\^? r HXQ('a X ~Wk.E>ǂͧJhZ=4 g}$B +T@ܒ h߯s߷Ed*P Fk8ɂuz60CN ZXظ,jӉaHG7@]7w {z?5^(N0);̙x'TN*,i|y9 QdH|9~\5=~_;v&l;{QD1 3z}iZmsDEЉv7- ɆC ҸOaV$K+l|NK {O: 4IMQ"r:rzNKBM\le<֝%|cJ>\N-'` z%̂s.!4iG wۘι却2WOgeT]γU'ɶu 3TSq$s|+P S) [ q xxD*zx_ԉ5qLtN%q$y\G8o96Y7MwAYqn<} eB"y M_ Êih ycL&:2K;\~T֙qQgfX-Pu\h&Q`&0{89]~,o,8Nb́Bt*ү,E p$f̒EEQz]d*ͭM)/hԁ=h e >{F t`hYPY-{S?{E99O? 5uy7%"I)x5u+,u#M ()G7@g1 eY٬xMk #tTG*RlDCNIችv9$LB#N1ՉaY $e٢24W@D5`<0,fy ifSB~ӧ#V[(BKAa5,k"81xZ$U{&(IvbR+E|=a3 a[W;[ZNm[L=l}9K_'-qZD@'|)}-,x j*Kg b{b.*ׁ.a@{F:Gji<޲yPv#W !|vo8r\[}'C6|BYaW f~~wB&<1 @Gr)? #췶gբ5Sꪪ(B]׌;ëLU~ܭ~qĝW X)Óܭ0F 9T 5C,hkq|ҝ; * :))t3zlͨ40ZB+?^Ds!Siߚ0@Њ&Ș-eHk)=J 'Vr)O氓7GnX=ɳ2':p3F8?k a/̨4޷KC޴WW2\q"U3^wh|:%@@(o@Rƿz$L%~NV6 SLgiy_fr]POD\ *䮸 Q@>{Ay`,mٝ4.l!kTj Z idf-_ [[tB{w: m P$dD˂l1\%i%8n9X-z/:"1u#I'͈9z3;*!\4L5i 7ĜA#J7qpKRd[H%`bYX B& W(kfjEse#RX:=oOU4"rPr?!PJ}m}|VGvxv<fZd.-Ƶp#DY'`K=`7U/os6G-$WQs*ӵ8YJHByJa/ϼݙPE6t%KdTx|(хo<+Č\*आH4b\I#L hoی|Zb23୕}Πl*u{BkIz~ME3j"NƟg^7 _)rN>Dq]]PZdU} ȵr/ 43 BCFQG~Ce gQw듎ՃS9xȷR}\c7qNy;:gqQS- .\=D]ьYqok.˺z-~#@-'/.ӐHuNgZAH@DP#yicNh8 aw}jg'xjE2P;%C6/R_drSK}_5Gò|߶bJB^V:tO=ue10mj7RleD3t!2LK w2K;{,4je8 oīv/jr ˝D{+ )':Q@=79`>U^f7"TVl6\Ryc6ƛP3_>ηG:A0̴^C6 _ @mSk F6&V-O—&KN]H0+dj%^r~0̴ѷa(Y5Ol-i) q+UŷULXw\]Q 롃Z]Vyz)nSnȅ62䣖Q1PΦU>aH 4P>} x$[`}K<91f("~5s[^f7U1J|Z.jgL4pOK@it*wb#}l8 F7H(/(Q*0"]4+-# c==:Ex9WK1Ln MMr;ן?TB,Fue=?"5Y(A}nKZ!VY!am_/CD̴Mue`}[4ŇxD OEY=9>d%}4$%)1 1%ҢYGM{?-vEexs5:"]P(5o$v`0nR5Ε=l`B}Aبue$yOPA0OgT82\GgXB jrCCUVœ\+u0$;>и|*TCtѸ9}`u gʲ^{/FcgBOGt 8DTf },l#J8?4qLz;Q@LWj` 2ġcٷYtDR㾘(t#2s:t ^L+wY"u^ 7ͧqOsEukHzkmrkDzT7#G֛Ҝ]@5 &q{O#3S%{v$`Ω~2|QP~jsvJ_%A(s_ybGHٞ)1Ռ(ux?Ea4c+bG} ;ͫ2F<` < LP.? t&hf ϫ;^D*xb&nD0Ob^,`"j`튡6V-Am2 E&v]ٳ; W+_'sl3y IXl%fJ0EA ;*=]*€-Q*֙:"xF`ϑ 2mT,J&@k.J G5Ջs1Uu1g wdsﻪIoп=yۇNe@ZP;E٭J\T u3~r*ѫ*9KݵNln @Ghz7LL y9Pۜ% I0*Mh£|byN| a'+B"y\D zӺdSI|4K=q%c'6PM1`rCasPf=󺅾#^',cL>`}, sh]pm% jz0D&x^997zlI$?VlE*!dh;Z||TΝpnq-j>3ϞHucChV Fdz(JYis.x s<# u} KKRzPĝAL7\3Ln s9\BL/}w(0$l:(z-98J ⍻y /X <| GWuF#OP)RԒU; Y2T0+h2$Hq^,q,<&:Ta+W)b*NI%s`XN$b?kC΂ݗ_ـ.hhDS\Ã[; aaZ1FXJٟÞgBClUo7Rwb,M;r Sxga@f'%}G8.RhF%ɎaJV0C`D}A.)g5P=v6BθJD3zKp.m{YA9Xn`y1*Ԃ {Ђ貰Q";k4k?@KNī٫Ae>Δ`D|YMDl<{8N8fs;!-s5LYwvȲϲES+5V;ə4[ g|螶alC~P-?z nk'_9截TI;kئpvyC*> :lk\vlP bNظj=~~;Zut)-[-q>s^HMW{̇󂔲g5DT`rWqwtbD 軯{4|x]"e|[}-JMrL40s[}FQa^i ߓ-wt7T[Ԍb:~γȞ"ld\8ŰZ֐^%oOz~ Ywd< QM}{SJP"{|̢?M*ƣ[TA[+=4]gbuN?漨șj)o% u 8>PlݝWrPY#z%%\c#fĥyN(W;Vj3 @: /ÁilZkFZx+,KS]ao~#v(M=7MVDIsoiρS~lF͎ܬ5hNTJ3N&Yge)\r8Jqe2LQw㧓-ϊXLY_tN/\H?]E~j~ljJ `ak;֯|$;ъ@LG=7h|Uf pJ\|_ bfdzaw+XKW*Z~b2H0L6Ss$YuUlo@m^=NׄӔΆn(ut˜:v^{⻵$Wlԣ&cRktCQ0o{<|& EL }~z`6dǡ^O]-A`T,z5J-n̆!`c .0h*q\@q ]>Ype;m%OXU{JR9:V dOJ866?[Mь⎔FQPqR+~Hf)Xe(=kGkǼ pf׍$u4)aJ.iB8'!w<@/g*#9D*4sC݃O O{.݋'LcZ5`yM whGA"}ds#56=a+q\5m\1 nj6ʳy#n Uel Œ񍘢}JWkYDp4ͮpNni>:uxWNs>\RNL@obYBP)b7bliEakoTq=Lf/x#Iё8Eqe <$sGZcaNR[=XF (cdowܔ3[/3vdۇܓdq.& Ŷ;ğB$ Kۖm"!5Cza#נeNryNe>f'!7[mH%gƵ;I vdJ,tlNk4bG:/Ѡy>4/ideɔyH'C\r'P@;qv N.h1g00BGPQQiq,?qjnFkn2N+Ft6 1=n'W{v hҽ /'V[FЧ/+A%_<Jst*Mzt$^q%˂>gh1G&Pa@#Q@ibBk |uq!Y`tۚ)_T9 xZ]h|p3❿S! 04&^%d.+>o!RF'BEM\FNH5уhG>&uLOXbC3BSDl}} ˫-8 M郖#u n7.P )[Bqc [j/l_- 912Î ,(׶1;_!}jmbJ6L9T]%QBYN]%|jZSxz!m^3xaKgRڑυ]zZQ[CPΟz}.jdaqT*USzߛ<0bt&_*O voSCC9 NpC1-Qס`4 t˜؜YJz7|x j/(P=Yeyz@ϯ^/b+aT>BM<@@+ ,k{r3n~7(a櫑( ,GnRˋ]lI2 ycN-pP|a',J۾^f\yMQ,&ӫv8ce۬0|LB0<4zS^Sv1렰+`g)}/kzŠ=#uc/N'ßsbRFԽZH6t ;z^Or8u}NyX kvLNƗ^?!4[yffH2eC`\C=$Lɬ9SV ڒġԖQ Y\܄EH̨M@w;)d aRf@ƕn}.` PEva>H-qgP9AkT3ߢ*nkaG@bEd:>mXmثyӤf\ymh I\T|ٔifdg8 *v_bOGy:3Yyc5o# v[3ZmdFCe"i"9ׇ-G~) p•->q^﫻Y)>U&2Uy;ޗ+[ީRm'R coz0,xtg-b$p\+^iCv>*CP&UDL·<7q)7k"~K% 3:286TmFKh6q!gܤ Hrq 7XA Oҷ/tE*_d Hie6H~}[-QՐCk8W1M1I ueAZXlbޅ =xd>)1p; X#,<`~SY`׋ld7ms$-c+xG}c*ۏ(cהD 8\gϜh KZN!]V~KYP:,/is͋/Oqt^hUk?w`+֧ Ɋ_"+8!ΡGpm_|=lo{2%C6, ڤ51S:L* Nֹ<-8t/ot%`&5`QNu$ <~:8/YA5FbsU%$V<]PR9d w 7wQq6PG%Z;&ڸ{vzh@ ! ԩ(aJg4jLK#+7μAh|nH!)A.\'io2{ֈVI UWfM)P\L_ XVn "QHؼ^]}bPyՕ.a;]4=`FB́Řw}]}1U=.+E-!{ltq'=_ /5K͜V=_-2#e+:kzA{֖G%7 x>0{O_M*c\Agc&VI~g|Q)K4ҡe,ːss> g$G%鑄,k{R{HZ+lE!IhMT"N[a<<P3>oEC-3ntF] ZݣhU +7^\ԖTR8FC+3h66ڟT )}5U7r}Rzh,B|5Mô5NTy؞|ޛkXv8'7v֕4VW5p& sg{\2|_f4ڼW4;GH?U~U 3\M$|2JBfE/vd1\B;#)3OR *헇|.N#Hgo(iA.福 ꅭٱg xT/7rr,&sY*j t8}OΓQg8ŦI5ޕ3u38Յ > ^QӺOI:r5}5xn +cXz #W㤝w*8JH-<0*̗SN&ܮx^[Rp+tSS}Saɰ<^=Jjgo =j*{N0\}zO~46 3YYrW[ .ʼOUwoKP 2,ƨN5 e6~e _G9V'r2ƿ,Ly;y6z#G8I,DSeN0kPL7Z@*{J MG?;䴠$ДR`b_+C@nk\OfɒԴ v?A.$ErpES`o 390*5RyE9i] [(n&p}68S^ ak9p (T&l1&O%c=ђ<+#&ꇆNj9W ;#;MYRQ#bAr _*3RD0Av3'UHZB~_R tbz1ik\˒GfkXRVwi_N3z^tRclq2ث>dV_n}o%b_*,[=k p[,ݹ}nۚH_iKRF3k1 K#/&S3D.;mwyb_>{(P _BМSʺd]N4htK^nVYRhF`b5SMrGڳO|R"o\r'2)!YߏzCHiډN*Yi@7J7ʂ.Z.#V<;; HN+'^ֳy_faj|jT|V1i>P8 Q:Na(p[>.Nf\np@- cyqIgSqn`[[4fy踶0YDiyjq{oc叇J KRWY%Ο[o#epaBvC8[>$J N(8:Fc>92VXDHSw8Ў"yϿ.;cO;DU{k)zkj:9bX6k[ޥGlmW7nEFzk hPMWp\&|>I 9|u^ [ ;blW eax@D/:,#6|zԹ$[إDDYYLٳdyRS# gȾKC aqr.HW A͔Y62O'9EW3KҼxrF_ spd%J? &UǹK`1lqg8DD @7#U8B[0oO!>0o NIKÅjF}/1Bݧ I'۴rQf0}ά>ZU2VBwjЀ<@ u@&.^F*vt+E\ 06פ90ޖf=m_ƒcީ>q?s|K||vp@A qr7pҜ@~"Yl'MbV2mcW6v oM{a?fmꄥ-uI[m fGqϊ #de]z~ع(քiHKP˄XȟH!fYf4 y_g4!]/Gk}bG 9TC7M2寈rdB:`2!@a.9Ji5aͩaK*Li@qM8,p,aLLZ' ޜ <⪡Y$ZnuSk5Cr:"in shbg0 Ex0нM} Sc'+kfg z-/- tZ 9+>c_]j.L m$9Bk#0"ʲ 0p"tp.);5|{\njg1\ n⚁^ɦsat -` *>ca)I=AݲLfǢ>bOYiIE F5> o_cfII~@]b k1) #We"l*5':)9hPW"CUYZaKV3~NhJ.E/:iuaЖ 'qfT޾ynqqK=Ӊ-<~Ů\eΚSUe^jڬ N  $63pkWX/F<\=.]4<[w˃[IāPʍDPQ!K76'49UspnCaZ&d\\c Ԑ0QYMԭkmq%tRXw2߮{@jē4ε\WNt Я/WntCNg\ of-& EcRGFv"ڴJ캅~ bl {&M" 6MTsl-ʱxX*{APsUJ.iR V,_1=ܻ %Kem1GTJ=_ ]}6@smDA\Wvր2?7O[? X?cFL]]P7ϔi8 2V5sbOe?HlZ@f/Z@us@\[kvn^d@i-{RЋKK}V#, Q͈S ˠenU2dV jZFEj_,DZ6SQRAsZ5w$aӔVM@&DKY \xXLs|x=9:ehY\PHN 97y"syיhڅ)' &ctWD Oj |c焯igו+?ITת -K޴KF&?A @\( @]]( 2O~@*N)Sg\ˈeyhb-z&&BЈn.: K$ؚ!X۪`Ӂ~xJkb"ig0b.tls Z &37^2ğJUM~ W{&ū}% 5PLA[d?im !F<ٔa+g8O:{zoBn_-uitŷ)RJ3 S^c^.Mm>A: J-XWuqd)V[܌$7g%bW%Xf?-& 7ցc?$EfgV INηUImR.6]R֯(FU ʭJ#ZM"?Bd{K3 -zT)$-|H|c X(`C &th#`(g/[6;uH!',>PŠ<q/vߚLT$Ғ`LckODȬvLjƩ[C.Fg! -m.NJ U7*<8YK0-L&ݝ IZZjΉ]AE*#"! 2oT:tKcJyƍ;Q ]#RTHj!Zv3贪U;bsUr 9Eǿ{FMγ;|0.NK2uGF % .(uE{VfL5Ђ2-Ҿ[(J3,E "n$u3"=;s`VBR;I A#CII@IH VwnQkpՅ Rѳ?p;WjŽYeq-<1 DEG=X2-%{[7ٶ^E%p48H9 iذ~&C(yU"-vsXmΟ'DAcJ>gyS[" {Z;b_{zζE2C/%7<Ĩo݀`uXW(ը.m΋ci{7]W9'6+ p Zs>C$݃cL-:pjdI>¥pB8u=> Ki(Ͳ=d 3tP q䡾s%2|$ R\bKhЂ[H"TBT/Q: 7:vSAK,j=gh;vXԳ'xʾ [SAH{yDn%f`Fp5WS* T>1FN\&r P4Ͻō+^dֵ]A]ڥ>\JE*}_%(fE(^[i.QJLDZyD^X k-2/#>dF檫U d ,=>JɐlPŒVH+qy:M>}NQk<&IJ(.D EUTl@eȶ'2SX(ؔyv ˧џQw +׏jz`,{A҇ӷ7 f p&ezqx~!Rw}\]k!w0$G xGvGpmwzQ'߰[e K“WS}빗}L-m2,_˺]l̓BMqE͟4>2ohD;TxXXC}qih$G S6]omjUDMѣ IoU#Xm\=W-d6Kc 5T pFK#,S.Sg̲L?4 )-nzcE*N-ߒ2 f_xSni,D[3H'/y*-$?bf,vD*<#‘# }Nka䍑KmAUcUR9&Χ扪uiO6Z $z/}¬ȣә F$1*5JUfc/G zj#5K|St澇YLVTrX[#BLY|;] JMœ;ls4 :suGh2bc,If)~e%:,;mɧ6ײG-g {䁦}T\ܓ%IҐiVjژ;2lFw)uվm% .U%{ g!k4䫨\fiK֩D8O!('0LZ习/3 䓶)GU WA +]9')ؼAƼAGRɥ nC8 mW1-}=1SziPzhh3ArzZd@ q$+Lx 9V?ge9O%1Eٰ븊R\Yr0#^u yg V8d>Ox1.rYAj;DOp>+iCJhtZ}g =KDrfx(/u@lԆw-i?57_+HR+`vwҖ/hIp{3*tg83i{0s=_9{}MlIԠKd)¬5:8z2yO+^!T5ֈ)-Y2n+TN╪Qg ;:[dE"9&7sM=#E?4sa㎯%nMб 85pi*#|d33;Kn[6J{Vxēo+ 3`Ը[ ,+eguZ]81h*i҇_yi/KiLWxzot)BucrœpN$.^,ok|2n:M%h~. JZ nCd+ɿT(9Z~ MVlK: Ћu? b[ҧԭ4to@9wzѱ; ͠xÑ_'P$]L6CZÍnXx> dzw*Sd(J!mr@k3p#*)wkBpOPkēpHu|DNGg m A"Zn` FKrt\<~suz䡯}q+4q; ʸ1ڇvL ?Z 6YDPk_S}֥[VƊ+duNH!ieޙ,ψܰ  b"{$6Fa%lFQ_AF&i!NR ;yPk/BGҎ;=(tW|pAV[Nm`⵫-VD c$d 0"ș+,f[|7P|[diY| ^%X'%)MK|3\w]t*ʖj/KXCa(T9fcmמ՞UA=>.h]a @: s~y4>A@P7%_4rqPuE%SPRJט|T!jXKaFMq&x{ƒ)S0?yڏjdD\JgS&ĆS_-#g)A ʩPnEzrcUd)V&]Qo:g0PE߄-QұgH85W"Ã3t̗.R%=hb\T13/XY?TLZ'hb1eK{E3l-Ƣt81#\zBBGWO} DFs CreG0GA|խܟI0Z:WD? ~x~b;ԧ+xc< jՈI̷e8z"F- p-wѐь&pSʴQ&il/^j+S 8U4ו`'<90~ !Ǘ&=tN شP -AHg\EDwS5#Vt~Y)Li.&]VC \O8B)~jClH0 UH(`0-(2 T[{ ʍC EZ `4s KXSHI(K%.%3JqX[iS"/  ;|VOt4^>'CQji6N񙽼T= K(UGJt^vyOrw+vnDjw:t/߆pnO+t㢯K8x]N}hvc̣H sQB`PWyr:رhq^E@ Drh<lO#HW\"$Den+Od5'{>7:piHv;dvvA{Mƀ XESq89%&">. VN.]ٺ*29r.(1uGA#+ gΝ&~EB]X mC 3nfP%VhA_Mx\ s•(`s2>hը:Std9ߠ/C8ǂȸZfX>dtCb AƉf0z<yOFyKÎ)=lCaV78"z7g㌉\)g:97oC 2Ւ\z6E?DL|T ut7gr dsRwъmT f5"/.4dPEp'h,+6"cR~:4P$T^u3EK9"Q:(h!D4Ab\3袗b[ XM.}ǐ~+-v ?LPQ͗3dq[7WR36O)h;F޽ eR ^rZd8&"t:"yP|:ݗASy Dۋ '/I?喕B / Et3]|Ă#g٦ǭ(xݒb.>v(V>׻G !{l^VAa)("$&F4q͈NrmF Г3= ER b)z|FڷV=g2 00Ěf6MB@o—F{xij.j`<{SD:Gګ׹ WwtnNdT w8`Q㔐dCbxs:,1^̖s q Nx Ĥ}NXoTaBs[P01^rtɂeƯM} wmhvǬ`vK4~BA;G}P^qD BKcn59ym;I. p{X'"goG,JwI_ FSc4QvN`Nsb |Q-5+x('!MA X.FJ@aI wסOΝB.7)Yゔ|vh)i֞W%ܬhMznǏ%XӗΓdD@ [f{$VOdfa}E}Z%=Ks 2oĵr ׋y+H[f&!rMwL'ɪՈ4ֆb DZIIFP3H;QxZui MFʒi &yPaJ||Mm=1O 3qďqW~.q7eoK_R07Z@vXM"11 6AO9deVy/-/'6f,=~Apy4 !SK^I%.1$_Foh51%Cz5#v}E yϻFt0 aR}&϶lZN)aݦ*?U7 AnP?UNT<}2I>яCx@Gzp?;p_S/sv|x8S\:ٳ@d*oCK򳅃F&gA1|̀U1">BidG.:/fDqaڰp2| ($p׺I5wQujr; vq<"{^o4"ƬHTܻ=晬d"#5M>P"ѻtp kd{4męP4y̶K8z܀)M?q%'"Gi[9ǎd٦lOh8D6:' 8mB}OrBi3;YpZ&({U3 HC&hr%Ԇc' |s@T3I\)Rz|]&$B(Kyl0#h芌5X'&ϵŐT/ĴjD0u0P"{M3f@TƸ-b֡rZV`k[>iqsILW]z$ht*ueAҳZ۩n,1qgwD-^@y݁0w[@l,t|.4J3>u\©(o}09.?yflU4M-8Z*DrU5b/ޯSb?!c:}cR|ɵHd+{#D[vM#=rov[P5%ZhAPTvFT$ցr>FEX!;cnoX[0՝4 80ju]^=2!Wr1GU[݂K,sE.L SȵŹ0aV9<), P *E[SWiB;>ҔP*:^*3?ͥ-!#*2ʅx7T0".md4'7oc4*\TicpvW 𓰺绯"E>d0i5GR6ߤ15u=sYIRp0;C^{1׈OWcLlO vVVA#Pۊ:J2K{j4(ԣu:_U:z'PgǮ]i+T.Qp4I: p #)U)Ӯ9s}+Uɫ|mxg@@/X{'Φr*P)RKѫ?>?5jVWd?Au1S7SttVʞfܽTPX?ܜ)~W|G<}7P 1ON.`Gߤ4׏TO7NW|SMQB#WC69E4y{ә=!țhw]1R3h-HæPM2l7l9gIcDGx{:(K&H)~8@yyBY:,Ε \N pm:(׈-EgVeIOE,Dh Ҽ$&s씦aL*1nI7QN. _1c3<'n-ɡb \|kt33xf|_=da>`aF]X3PsDa$Wt rTX".,Ш:QKI|!ѓߐDWɯ3A|* 98C 9ķyOX\(@W У ^ YZ