hostapd-2.9-bp152.2.3.1<>,!`oC!M@eee@<:~1Fam3?)la*; bT+sT5 "Ymq+K fգlX6w"Kxgt' eɒ\$_UIV03#zuqxpD IdX^|vq40DŽDHKY6CaYfC[wQp:-V Oтc%9IHZEvy;20)ECǀͽ7=4У>L\Fl\Hߤ?']Ir51S>I?d   H (6EKSt  0 \   v Z@l!!!(98@9|:\=> ?@F#G8HIXY \<]^ bec defluv(wTxyzdtxChostapd2.9bp152.2.3.1Daemon for running a WPA capable Access Pointhostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators, RADIUS client, EAP server, and RADIUS authentication server. Currently, hostapd supports HostAP, madwifi, and prism54 drivers. It also supports wired IEEE 802.1X authentication via any ethernet driver.`oCobs-arm-8 SSUSE Linux Enterprise 15openSUSEGPL-2.0-only OR BSD-3-Clausehttp://bugs.opensuse.orgHardware/Wifihttps://w1.fi/linuxaarch64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in hostapd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in hostapd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi if [ "$YAST_IS_RUNNING" != "instsys" ]; then if /usr/bin/systemctl is-active --quiet apparmor.service; then /sbin/apparmor_parser -r -T -W /etc/apparmor.d/usr.sbin.hostapd &> /dev/null || : fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable hostapd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop hostapd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in hostapd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart hostapd.service ) || : fi fiBZE>0A큤A큤A큤`oB`oB`oB`oB`oB`oB`oB`oB`oB`oB`oB`oB`oB`oB`oC]JE]JE]JE]JE`oC]JE`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-2.9-bp152.2.3.1.src.rpmconfig(hostapd)hostapdhostapd(aarch-64) @@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(hostapd)ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-genl-3.so.200()(64bit)libnl-genl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libsqlite3.so.0()(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd2.9-bp152.2.3.13.0.4-14.6.0-14.0-15.2-14.14.1`lM@`4@_s!^@]p\O\&@\\ `[@YB@WV#U8T|Clemens Famulla-Conrad Michael Ströder Clemens Famulla-Conrad Clemens Famulla-Conrad Michael Ströder Michael Ströder Jan Engelhardt Karol Babioch mardnh@gmx.deKarol Babioch chris@intrbiz.comchris@intrbiz.commichael@stroeder.commichael@stroeder.commichael@stroeder.com- Add CVE-2021-30004.patch -- forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348)- added AppArmor profile (source apparmor-usr.sbin.hostapd)- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP (bsc#1172700)- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass (bsc#1150934)- Update to version 2.9 * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching * added configuration of airtime policy * fixed FILS to and RSNE into (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * added support for regulatory WMM limitation (for ETSI) * added support for MACsec Key Agreement using IEEE 802.1X/PSK * added experimental support for EAP-TEAP server (RFC 7170) * added experimental support for EAP-TLS server with TLS v1.3 * added support for two server certificates/keys (RSA/ECC) * added AKMSuiteSelector into "STA " control interface data to determine with AKM was used for an association * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and fast reauthentication use to be disabled * fixed an ECDH operation corner case with OpenSSL- Update to version 2.8 * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only group 19 (i.e., disable groups 20, 21, 25, 26 from default configuration) and disable all unsuitable groups completely based on REVmd changes - improved anti-clogging token mechanism and SAE authentication frame processing during heavy CPU load; this mitigates some issues with potential DoS attacks trying to flood an AP with large number of SAE messages - added Finite Cyclic Group field in status code 77 responses - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494) - fixed confirm message validation in error cases [https://w1.fi/security/2019-3/] (CVE-2019-9496) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495) - verify peer scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) * Hotspot 2.0 changes - added support for release number 3 - reject release 2 or newer association without PMF * added support for RSN operating channel validation (CONFIG_OCV=y and configuration parameter ocv=1) * added Multi-AP protocol support * added FTM responder configuration * fixed build with LibreSSL * added FT/RRB workaround for short Ethernet frame padding * fixed KEK2 derivation for FILS+FT * added RSSI-based association rejection from OCE * extended beacon reporting functionality * VLAN changes - allow local VLAN management with remote RADIUS authentication - add WPA/WPA2 passphrase/PSK -based VLAN assignment * OpenSSL: allow systemwide policies to be overridden * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * fixed FT and SA Query Action frame with AP-MLME-in-driver cases * OWE: allow Diffie-Hellman Parameter element to be included with DPP in preparation for DPP protocol extension * RADIUS server: started to accept ERP keyName-NAI as user identity automatically without matching EAP database entry * fixed PTK rekeying with FILS and FT wpa_supplicant: * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9499) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT- Use noun phrase in summary.- Applied spec-cleaner - Added bug reference - Use defconfig file as template for configuration instead of patching it during build. This is easier to maintain in the long run. This removes the patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is copied over from the source directory. - Enabled CLI editing and history support.- Update to version 2.7 * fixed WPA packet number reuse with replayed messages and key reinstallation [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * FT: - added local generation of PMK-R0/PMK-R1 for FT-PSK (ft_psk_generate_local=1) - replaced inter-AP protocol with a cleaner design that is more easily extensible; this breaks backward compatibility and requires all APs in the ESS to be updated at the same time to maintain FT functionality - added support for wildcard R0KH/R1KH - replaced r0_key_lifetime (minutes) parameter with ft_r0_key_lifetime (seconds) - fixed wpa_psk_file use for FT-PSK - fixed FT-SAE PMKID matching - added expiration to PMK-R0 and PMK-R1 cache - added IEEE VLAN support (including tagged VLANs) - added support for SHA384 based AKM * SAE - fixed some PMKSA caching cases with SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - added option to require MFP for SAE associations (sae_require_pmf=1) - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier * hostapd_cli: added support for command history and completion * added support for requesting beacon report * large number of other fixes, cleanup, and extensions * added option to configure EAPOL-Key retry limits (wpa_group_update_count and wpa_pairwise_update_count) * removed all PeerKey functionality * fixed nl80211 AP mode configuration regression with Linux 4.15 and newer * added support for using wolfSSL cryptographic library * fixed some 20/40 MHz coexistence cases where the BSS could drop to 20 MHz even when 40 MHz would be allowed * Hotspot 2.0 - added support for setting Venue URL ANQP-element (venue_url) - added support for advertising Hotspot 2.0 operator icons - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS * added support for using OpenSSL 1.1.1 * added EAP-pwd server support for salted passwords - Remove not longer needed patches (fixed upstream) * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch - Verify source signature- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088): * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch- update to upstream release 2.6 * fixed EAP-pwd last fragment validation [http://w1.fi/security/2015-7/] (CVE-2015-5314) * fixed WPS configuration update vulnerability with malformed passphrase [http://w1.fi/security/2016-1/] (CVE-2016-4476) * extended channel switch support for VHT bandwidth changes * added support for configuring new ANQP-elements with anqp_elem=: * fixed Suite B 192-bit AKM to use proper PMK length (note: this makes old releases incompatible with the fixed behavior) * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response frame sending for not-associated STAs if max_num_sta limit has been reached * added option (-S as command line argument) to request all interfaces to be started at the same time * modified rts_threshold and fragm_threshold configuration parameters to allow -1 to be used to disable RTS/fragmentation * EAP-pwd: added support for Brainpool Elliptic Curves (with OpenSSL 1.0.2 and newer) * fixed EAPOL reauthentication after FT protocol run * fixed FTIE generation for 4-way handshake after FT protocol run * fixed and improved various FST operations * TLS server - support SHA384 and SHA512 hashes - support TLS v1.2 signature algorithm with SHA384 and SHA512 - support PKCS #5 v2.0 PBES2 - support PKCS #5 with PKCS #12 style key decryption - minimal support for PKCS #12 - support OCSP stapling (including ocsp_multi) * added support for OpenSSL 1.1 API changes - drop support for OpenSSL 0.9.8 - drop support for OpenSSL 1.0.0 * EAP-PEAP: support fast-connect crypto binding * RADIUS - fix Called-Station-Id to not escape SSID - add Event-Timestamp to all Accounting-Request packets - add Acct-Session-Id to Accounting-On/Off - add Acct-Multi-Session-Id ton Access-Request packets - add Service-Type (= Frames) - allow server to provide PSK instead of passphrase for WPA-PSK Tunnel_password case - update full message for interim accounting updates - add Acct-Delay-Time into Accounting messages - add require_message_authenticator configuration option to require CoA/Disconnect-Request packets to be authenticated * started to postpone WNM-Notification frame sending by 100 ms so that the STA has some more time to configure the key before this frame is received after the 4-way handshake * VHT: added interoperability workaround for 80+80 and 160 MHz channels * extended VLAN support (per-STA vif, etc.) * fixed PMKID derivation with SAE * nl80211 - added support for full station state operations - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use unencrypted EAPOL frames * added initial MBO support; number of extensions to WNM BSS Transition Management * added initial functionality for location related operations * added assocresp_elements parameter to allow vendor specific elements to be added into (Re)Association Response frames * improved Public Action frame addressing - use Address 3 = wildcard BSSID in GAS response if a query from an unassociated STA used that address - fix TX status processing for Address 3 = wildcard BSSID - add gas_address3 configuration parameter to control Address 3 behavior * added command line parameter -i to override interface parameter in hostapd.conf * added command completion support to hostapd_cli * added passive client taxonomy determination (CONFIG_TAXONOMY=y compile option and "SIGNATURE " control interface command) * number of small fixes - renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch- update to upstream release 2.5 - removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch (CVE-2015-1863) because it's fixed in upstream release 2.5 - rebased hostapd-2.4-defconfig.patch -> hostapd-2.5-defconfig.patch ChangeLog for hostapd since 2.4: 2015-09-27 - v2.5 * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077) * fixed WMM Action frame parser [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078) * fixed EAP-pwd server missing payload length validation [http://w1.fi/security/2015-4/] (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079) * fixed validation of WPS and P2P NFC NDEF record payload length [http://w1.fi/security/2015-5/] * nl80211: - fixed vendor command handling to check OUI properly * fixed hlr_auc_gw build with OpenSSL * hlr_auc_gw: allow Milenage RES length to be reduced * disable HT for a station that does not support WMM/QoS * added support for hashed password (NtHash) in EAP-pwd server * fixed and extended dynamic VLAN cases * added EAP-EKE server support for deriving Session-Id * set Acct-Session-Id to a random value to make it more likely to be unique even if the device does not have a proper clock * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan * modified SAE routines to be more robust and PWE generation to be stronger against timing attacks * added support for Brainpool Elliptic Curves with SAE * increases maximum value accepted for cwmin/cwmax * added support for CCMP-256 and GCMP-256 as group ciphers with FT * added Fast Session Transfer (FST) module * removed optional fields from RSNE when using FT with PMF (workaround for interoperability issues with iOS 8.4) * added EAP server support for TLS session resumption * fixed key derivation for Suite B 192-bit AKM (this breaks compatibility with the earlier version) * added mechanism to track unconnected stations and do minimal band steering * number of small fixes- update version 2.4 - added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch for CVE-2015-1863 - updated URLs - require pkg-config and libnl3-devel during build - replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch ChangeLog for hostapd since 2.3: 2015-03-15 - v2.4 * allow OpenSSL cipher configuration to be set for internal EAP server (openssl_ciphers parameter) * fixed number of small issues based on hwsim test case failures and static analyzer reports * fixed Accounting-Request to not include duplicated Acct-Session-Id * add support for Acct-Multi-Session-Id in RADIUS Accounting messages * add support for PMKSA caching with SAE * add support for generating BSS Load element (bss_load_update_period) * fixed channel switch from VHT to HT * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events * add support for learning STA IPv4/IPv6 addresses and configuring ProxyARP support * dropped support for the madwifi driver interface * add support for Suite B (128-bit and 192-bit level) key management and cipher suites * fixed a regression with driver=wired * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management Request frames and BSS-TM-RESP event to indicate response to such frame * add support for EAP Re-Authentication Protocol (ERP) * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled * fixed a regression in HT 20/40 coex Action frame parsing * set stdout to be line-buffered * add support for vendor specific VHT extension to enable 256 QAM rates (VHT-MCS 8 and 9) on 2.4 GHz band * RADIUS DAS: - extend Disconnect-Request processing to allow matching of multiple sessions - support Acct-Multi-Session-Id as an identifier - allow PMKSA cache entry to be removed without association * expire hostapd STA entry if kernel does not have a matching entry * allow chanlist to be used to specify a subset of channels for ACS * improve ACS behavior on 2.4 GHz band and allow channel bias to be configured with acs_chan_bias parameter * do not reply to a Probe Request frame that includes DSS Parameter Set element in which the channel does not match the current operating channel * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon frame contents to be updated and to start beaconing on an interface that used start_disabled=1 * fixed some RADIUS server failover cases- update version 2.3 - removed patch hostapd-2.1-be-host_to_le.patch because it seems obsolete - hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch ChangeLog for hostapd since 2.1: 2014-10-09 - v2.3 * fixed number of minor issues identified in static analyzer warnings * fixed DFS and channel switch operation for multi-BSS cases * started to use constant time comparison for various password and hash values to reduce possibility of any externally measurable timing differences * extended explicit clearing of freed memory and expired keys to avoid keeping private data in memory longer than necessary * added support for number of new RADIUS attributes from RFC 7268 (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher, WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher) * fixed GET_CONFIG wpa_pairwise_cipher value * added code to clear bridge FDB entry on station disconnection * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop in case the first entry does not match * fixed hostapd_cli action script execution to use more robust mechanism (CVE-2014-3686) 2014-06-04 - v2.2 * fixed SAE confirm-before-commit validation to avoid a potential segmentation fault in an unexpected message sequence that could be triggered remotely * extended VHT support - Operating Mode Notification - Power Constraint element (local_pwr_constraint) - Spectrum management capability (spectrum_mgmt_required=1) - fix VHT80 segment picking in ACS - fix vht_capab 'Maximum A-MPDU Length Exponent' handling - fix VHT20 * fixed HT40 co-ex scan for some pri/sec channel switches * extended HT40 co-ex support to allow dynamic channel width changes during the lifetime of the BSS * fixed HT40 co-ex support to check for overlapping 20 MHz BSS * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding; this fixes password with include UTF-8 characters that use three-byte encoding EAP methods that use NtPasswordHash * reverted TLS certificate validation step change in v2.1 that rejected any AAA server certificate with id-kp-clientAuth even if id-kp-serverAuth EKU was included * fixed STA validation step for WPS ER commands to prevent a potential crash if an ER sends an unexpected PutWLANResponse to a station that is disassociated, but not fully removed * enforce full EAP authentication after RADIUS Disconnect-Request by removing the PMKSA cache entry * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address in RADIUS Disconnect-Request * added mechanism for removing addresses for MAC ACLs by prefixing an entry with "-" * Interworking/Hotspot 2.0 enhancements - support Hotspot 2.0 Release 2 * OSEN network for online signup connection * subscription remediation (based on RADIUS server request or control interface HS20_WNM_NOTIF for testing purposes) * Hotspot 2.0 release number indication in WFA RADIUS VSA * deauthentication request (based on RADIUS server request or control interface WNM_DEAUTH_REQ for testing purposes) * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent * hs20_icon config parameter to configure icon files for OSU * osu_* config parameters for OSU Providers list - do not use Interworking filtering rules on Probe Request if Interworking is disabled to avoid interop issues * added/fixed nl80211 functionality - AP interface teardown optimization - support vendor specific driver command (VENDOR []) * fixed PMF protection of Deauthentication frame when this is triggered by session timeout * internal TLS implementation enhancements/fixes - add SHA256-based cipher suites - add DHE-RSA cipher suites - fix X.509 validation of PKCS#1 signature to check for extra data * RADIUS server functionality - add minimal RADIUS accounting server support (hostapd-as-server); this is mainly to enable testing coverage with hwsim scripts - allow authentication log to be written into SQLite databse - added option for TLS protocol testing of an EAP peer by simulating various misbehaviors/known attacks - MAC ACL support for testing purposes * fixed PTK derivation for CCMP-256 and GCMP-256 * extended WPS per-station PSK to support ER case * added option to configure the management group cipher (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256, BIP-CMAC-256) * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these were rounded incorrectly) * added support for postponing FT response in case PMK-R1 needs to be pulled from R0KH * added option to advertise 40 MHz intolerant HT capability with ht_capab=[40-INTOLERANT] * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled whenever CONFIG_WPS=y is set * EAP-pwd fixes - fix possible segmentation fault on EAP method deinit if an invalid group is negotiated * fixed RADIUS client retransmit/failover behavior - there was a potential ctash due to freed memory being accessed - failover to a backup server mechanism did not work properly * fixed a possible crash on double DISABLE command when multiple BSSes are enabled * fixed a memory leak in SAE random number generation * fixed GTK rekeying when the station uses FT protocol * fixed off-by-one bounds checking in printf_encode() - this could result in deinial of service in some EAP server cases * various bug fixes/bin/sh/bin/sh/bin/sh/bin/shobs-arm-8 1617941059 2.9-bp152.2.3.12.9-bp152.2.3.12.9-bp152.2.3.1apparmor.dusr.sbin.hostapdhostapd.accepthostapd.confhostapd.denyhostapd.eap_userhostapd.radius_clientshostapd.sim_dbhostapd.vlanhostapd.wpa_pskhostapd.servicehostapdhostapd_clirchostapdhostapdChangeLogREADMEhostapd.confwired.confhostapdCOPYINGhostapd.8.gz/etc//etc/apparmor.d//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/hostapd//usr/share/licenses//usr/share/licenses/hostapd//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:16058/openSUSE_Backports_SLE-15-SP2_Update/5843becda614a678af679df612e4d1aa-hostapd.openSUSE_Backports_SLE-15-SP2_Updatedrpmxz5aarch64-suse-linuxdirectoryC source, ASCII textASCII textELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=3885122e11c9d34b2de120966765ba1f06134191, for GNU/Linux 3.7.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=f4103afcf62d423875370dafcae6ca94bb1b103c, for GNU/Linux 3.7.0, not strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRR RRRRRRR RRRR RR R RRRRRRRZ*"4)&Ybapparmor-abstractionsutf-800444c334367c28c90ac6cccd30e8788e6c6b2a46f1c2a55ac3f7305d75111eb?p7zXZ !t/ ]"k%f'@K^TDHl\ɝ 6F2nxbMj`rœ!<rOnuSH*$n_XYQA7+)=Hte%* ^w#4m %  oim-%9ێX'QXk*}q MWx9VY_E?&9YP} ^tH,xvǽap#+X_YwCOakzkwf5'``JEN3a,E3Y˳ \&rVLzr5n)k0@eeiy#[YނK{Qfc|<0ˍ^x 29G}y։SLbR+/ mPƫǹލ*満]<(x!}+UlRTIO. bURϜqٜ;b_ +_bIrو*DHeaBK_fH/u-ǁ^Hl} RFꦊ5=ʼJHH*kf6!nY_JdL~ɠu0݆EAXoaتX?HR5hg<K7[Lz>e݂&\"F߬)'2T"QhM+" 6&<+\:DBD\޵Xǡj`Ҏ- &!jmmW`u0u[)*3}K@[amHFKSG2esZ }~/ jq[E/LW+E'5*e:k=gUrEpB`Z-SWa*:tEUl ]TmCAKIdXEV"snl &Hxz_P,=z oe3)!Nytzp., r7UIkE+;nbY\nLG0L}[?b]cGb` eYHǝ"U8<)9B*}WO*ޚT#"|viX{E[t90F?#>~ɲ<>aLb51cI_Gs0*n*)m-\;@贒q2RBՠYk 5i q ɭRx 煖}[ז~_)tJU2gŖƎa:1Q:g(7$\QbzAF? 8 {89 =\y])2%[fTA;/3Y먆n@d6c#gX fX ZmhR )F^ۏsjIPP'Vܚg v֧E#]~݊W*~u$b$%/T0w̓у 11@T ]W_|/7$'ѫ<ߗc Iu3o0EC.XWJdgպċ"*g` ud"I2vv,ѵ-etn%a7×R!x'uT;YK5%-ã0-j4r#ytxwFPGU)5XbpmEyڜN0)VC*XǗRbe̤Y'߈ ٖm% "=zeAl:a 9YNԲ@@dIEr@ <k\n.tTi)P餴}U@*(@m5ꘙU'艬 5.ZOVxWyh5Ckl_4雏p$쵙S&7~B?A}ڃؖЪ{T{x:EsACAiJ'3M)EA⚆]S;P}ۅz; )IwSS.T[B_o'SՑ=r#ND E_r45]v*\#|9i&`T2 eb{nqͿo u&v/*]L͂!o7 OQxjDu 8ݣZJT.%#/#|k ܶ0ż \h~5U;667F!ՖX:~f}o ad]!YRʝ߆[]K=/379NNN\kt yR`\᥇\6yW6VԡIm8KdhQE#ˢl@^t=n kbDRħpq* PڇTȮBRN-Υ>0n"$@Eʱlŭ{gBSOeBB4]K?UQP[kus6:@EY#I,'16YЌ{8ߢD?>2t~ >d#_L轑tm+ q,x ޅf(Qfd|9,61uOڲӹJ&B1M 5l1 s7~ݪ8@$شNų6kA}}a@yb !eEll="#*gCI}Ӱ چ6u.YKì$(Į$9׫NW>i6bm`Ye(h7.$鷂S{F8~uFM K+`0;}bJ0|?bs[`Y\sHU˷+XH#Y%%I J grGGDd>\U_%)[k,IWobWGklmxFrH tLup@,V<9li4$p_ͿN1}+]<2G-;[IM*~G WHCݫa r>ҫ_c=ڼ<&ZK9UcX/) +J(Zw2;b3X6tlo5H+x,h엙] K Wа!+Fw8=r TJ @?mv/V9yaxI9㫩)6D P|oOkW Z5 < &1N4|Ƹ_l6 Gi뺻E}!}fB)>Mӵ_,?+ҟ9wз ,hJqqzF#DžEVﱪӱsŔ}ϴCGp/C!lc|L"}\siЇ.DĊqa\e<%!Ia(}!5Ns* "mlQ?@_-;k*r۴ S iB@@$aޖeA8N*[oa{MD3h.U ԧ{ZC-,E5d cPjfAW}}ZwDI]m{~lQn& Poj9Y%%^pH_G0q| 䗞0=@va/0Y` |54ΊLWٿ3SOGYO 0)GJLi( ףǤS$ׄ pȚp7]#BM>ܬ*ǾL/g=՜ [Vۭ 8tnZȺ{z}j |VnYf4,cUK&jX$t#%.2T{5Ȉiu)Fߘ[ݯ6,t V4U%]4:˜XB˜W̚aBvrΜ7]:#\ ݥX tldC<2+*9U//5!pMN$FaTt4 O. rJ"7—}>-0J!,/k9H*sӈ&^#O4@pzRAHjof ;P 4jf8 i ٌ;]QieAEzqY9yP4zwBF^N FQa k-7+åBM.FPs CyZ33г;Ŷ~ʪLx='RGR ;{II\^. s_c(y81:=:/x󾆾otvMdgO[G!PEL=ژguh T/=w:P&΁u֠b6gРe goPktd ~ۜ#a3GG'ңۈA쨡δReC,X=>&3Cۄ(x&>jiu)\-v!@+k.r=il b5̕}꽂fЀ&pA1l9`zHu{s';@} ]P㝹^Ç*{Xy6]t4ȡvtV>69Aֱ} v>6 %p#z6+tv_ }뒓[47Y xǢɡ  ̡{2RfCE %liv֪<]7K4z<آ+ ;0"3&c6,,e${;<%Ö6Nzꒄ *f]6X¶~6C57zy8L:Z!W1ù7^R#C]EDf.Z$`t0p+ğL,wS9e@YV#np4QRc{wLR"R[hEݝ;J덗i<#JRWN#i3À6bx4= .Tn"?vr[/={0\1CQ sA_䳆E&ttl3E@tq6K^Ovuno WA 4|Q|Eo1L imn$"Nn Z[p"?/گ eѼV\RyY$ϩ-3^U{fqbcnhD$(T8){̹ h?k3`7Ox#$UO2(. CC-s5`.v,OZuqE'a+R?Ϥd.2`TTP`;GѻL1ğRrܛ%!F:Mlw(X7+t>pl2eXV:,=ӫ&3cSN?Ly|`*dZR&HWEr1'f(zS 2tSo)pQT݉P|M"k2 ]rc>N'(RDGY0-#d`ǪƧ:Ul/ѭŸ)hO4p (h!5Fk<5Q`+JbŒ!{>깬ZpzZñ$wz\ %ކ_19QW\"dmep6Bfg> +@;&0MKoMt蛀)  $5 rJ_.l YrA7!E5W8|j#pmʔo/cT #oH]Ķxj plVeVc_e㡃[n2Qa b҄NsMxؚda؁xLT`M/zUqu)xؼ,x}$;nݟ&sAs=Ng^. cF W4yi(dPh* Ks=1iE>B'NLҍo$2,Xz"ܘaSXbrEu4&isM3GJmvHQg]aȾ]݌|c!NFX/+M m)p51#zJ ?餼]69@J1K./iI.AZmQP'6$>VE=*S%Gki5FJVrxyp~Ivz"@4Tio:Y.H̾rPrn7Z0@3ہs~ZͻIMӍTVlĬҕ r5rYEsR=|::T]A̷<Ƌ@J0~? vU{)TX ewҝ(Z+647$;d\/ztʓed3umqc*GdpW48Q-QgUF\.R<͠W4,d=O8X0l"b=rBMuEPz~)- )3o\u1{dۖ{K2S;"EppxV3hd@ZOB:aU" %SU1hlx7H;)>TΩXTg"!;ʩ5'/;D>S \O%ԅ'aۉ/rzvYڶfGr<)Y; ;U3ϰ${F>N}{IKA>Z뚬D{d2XZ\ou}訝$"̍uəXpݵB63 t$2^eJ|Ofn2~TEthߧG1Δ~ېݷmt%DGKB;OǟF.d@[U;mև y6 & ;@.-X`&[W 0Ш-6E}IbfpII?`>e5O346"E{Bqݪ Lo#bV_p?Xf}g<ǃ2,Mi"@gNdCZ= Sk2mTIB9 ʫ$O^,|uT@ l tl )]', 4]{8+]?'e`Tċ-X+ALN]O7Pai92Kƶ#}= " ?Ko 7l kB2…"AeKjrAAc€j%{(:p,;B-_.|W!D\rGy-{.ܞORTx@6ٗQx=QWo÷tUP;hA+8L|!%N)s=!#6Zm%59UwZ< / vX2+V׃>HζaiMg/E~5rW?PB_*[,Ò(mp*&HLΣpgb|8 S#or2ZO8Eppy'od \. bx&F'V0lu*z`2`0-x&kc'ki2gNq-rІ('0v dtϽCn֥҃%tF$ZYfpG1"+:$}l}#JkhtgI#"}R30xzݪ:nPBs9)iQmLe5pJ1b۶p&&;;(}`ηGTuz ˰Ϭ5ڤ_^iIhB _뿪Gߘ(:t&kjsU"*=E 0 7-YjFRFk" X=|jށrXF7(pQR8s;0q˹OCg[:ƀFm:-{5XoRGL7㖖شwn;xD첼*=9w#Yta'L>J(BҖfqpplZMgg2 rF{9iq+1y4"+G$lHFザ m$k &ds[Քxa.]=o#)kWm;rj.}1HoOW3va:kSc<¨2pfp㻛>0.pǧ[IK( Q]*Я hHnz#<zj,ݔGlS|{^8:+3r(LoVInRsh xo*Z6j =$&nt/F{(>K@5'7U–xҘK^=wI¦e0EjVqT5ac9T>{gHE5p[_t r(vxC38ٵ46 |GeIZ MKtgL:$MU7B-(pwœ}G A$* qLSB$>q{i"erciw= o@^#8.YŞ گh'ӓ+&AƻQ \R<XcQd8qo8S{5|mM^:y_[Ujw~Gr";ڲ0ZU@0) ~xP' }5ML*d?HѢKFBx pZo]9u]裛-$0O 6p(1=%Q70v{d gPܡAn||Ծ[Z6=n[@4|Jv[ɥ|@VX>QL?Wݞu.}MK= Ӧݡd~_c'c9wN|@GO?8~Z^P(;٪o,[* #6ZA@?#?6|MN)F۽HtsؓՌ/ˮrJ+wJ[wBqJI"W{RV88+Wm 򎬫,\+?c3ke2XbqYJ"de&L'ӉhW0h"M%`\hK[wel+mk{T62ߣR?yrTkWVN|  v]HHa0S1rYGtyٷYpYQIr(r_ ڢXs)8hÖrH٥3;H[2W#IsD)9Xf[R03?qߪaQQ!B])_VHexv苵2_^`YGE`_/EllH_ZГRu,g~K^ϴ8GɠFsĥ%QR ߙ7# c}:! F  ]Sh^DsӘu[x0o.Vt@==Yڳu.pԻ`OnQ *p)ݕQN"įo7gK:=*jIO[E Ϫd~S%b 6OyFZVwIX+_o۝Ⱦw#Wfo 7TO+z7"iVcGZ2iL2 2%OoƯ}0®D2_rM"̬B;ki-z8}m @9xeU,^&/G ".so` \(yK5q,RG[sj#w$fHD>X HGr<݃cS,T"PH}e{[( cZg ʳe湴jM+$HO9( 9gk]mBN_*@M;TjY<>J(B5p3Kv_kV>f> ㎩Gt#xV)2"\%-?7r2* eՖ5bfɕy"E"b*bKoy̶cѢi2uK@p=N H`S (&_qsk`{iyoߝ曼9٪n ˕Nu%!_߯sA'w@7Z4. İ~P8_4vWQ >hsk]4o}i 5SG" =SZCH@nLC؇'"`IKxavSNM">2.7[RD*oY6J{v)/c-LZ}syHsMN}z+wpύ(!y= wwBWZG,AGJ˾kJd,n>LO%NiJ@fBa :sDoH.E j2e6hJf=8{wqNB?m\NT*hə&:9r,fas)ؓΞ"5+LeU !M%sfbqYҕ gV`jj J`b7Zta`5)G|t>4)Sk"dck4wYKu~4ţgޫ &7Gj)Aq1/T|DM#uw*i\;j=n۔$WPrݰ8aL= W=+︐;I>r!a (@Tl.; +OiD~TLxY kj pQN'u~>OsiMȍJ9'"v&@4qj~AF{bt4$8|!JP1-zndbǠ}>{[@GYCcZ[zƹ[@2QvCG[u g1]`d+, L$%wA9NtqH}0!ñ3|%)XyPUdKfqO䢫XT62m|(jNH،/s `[J8D/A ˜AkͰQLdZČ~1Ea T0FFضlhxɢT&Če6Sjfqeĩ>=ކA *2j6 ڞ1u'A4336WlMHw'v\F1-CN( 'R @tǽYU# I,vݔFޭD!8ҳK [( FᵝER$az@t Efb'Z->r-3NGPe]!qIE(N˹eԢ;:cA {qVU׸W)A.MGHܑbiEY+dSfi2F[3|RgWզZڙro]Kn4){6Os¯{ݚ۳]J>GwT.m~KM Vo)LL BD:Wm3%B׀HDrC>ICMұ$f3P=M7raNjؾ -_us{6*+_ǃr6مz䄯A3 -Eg:>#'`"L56 ,:cа ӷ6>S_V,u 9RMdI^ͤ#İ'>NX`eu+tG#h=%M8(ghmNOL1}PwpI[ȘhOw[6U}M0.pjeyiLxW^r5R\_QdVW9a'xZWb/Z2{;J6>3S1g,GzXg6 ʈ`׼@Gu,Lg 8۪'(ot3裍+~f>Zq2bꈘiE]|*][k5BUW{i?U䥙N98p?$Hju󏑼ƯJ>.[IM%4o!:; R@@ux Hq sx*{Ne ;4oƺ4^&09> -`YoZ% &Zoa0Qg@nt§0 Zb@f~1=؉&˜'؉̜ F G~`͂5Jޜ"*fcn-Б]LFM3Ulmw(yHV7SSwѡy܂˹ᇠ :QWo_v:9.3?D% ӥØ |mD:~9 \XQ7~e@y91jmU囆1`[RŗZnǃ QhOLvb73^vܫ+ŏt~pe}# bk"%0Y28+!Dpiy4Fm Xl&y"zvڃඡQ~q֔8+BCR؞gi"f6Xip-͕ 0&+ 6D3Rq^4"`|}4Rg~9 -|>iݟ~'YI{$ؚE*<| u5Q^fuzsa4QנNzIݴrmgqg=!yjh* 5~5T=Ț"4Q{dqT1e2\5?eX$<\%j;U*x R FrRg5]@H֏5W S?S"PFǬ85#1!Ȁ34~K{+ ;zi`ҝ!uq^kDZ@fg)="ep~h"usԠ deR}Dk(<#r" \w2+mow~U8/ $uefէ ѺFޞ{#:j|:3^Ju ZAƻ{!BY3t^NyB@Utif$_ .PA U^#pc%|T q14H9X /Cp6a'UBAzԂGoNxDaa Z)Mz|c3SdX <34sR4~wnib/%w̟}m;5;! F1[RC!u<4DWcd~bwe1i1T=а[] L_c4|,Mvb&^w3"{W 6 ]Iw`2~[9V ȟ@j0\oP2Xy()88;櫇_&$T*YDx1 _Y,R/p7!2Bu]"[{VHS!)3ɘ;yzA-6PP4YxuvF[t0;Vz3uL++BQv6*|&8+UOפ#_`O;qF!x)>dd"2@k45e[,22 TPª3htD.PsGhaRn9{T4‰~MOzrP? ?X::wVX0=1,E)}9t1Jq^O4yd?G۵q"\DNeE "(쿓)h%|"wf+U![%VH hU2.h.ۘf&/**|N#:0tWegX|[[HLVF(kΩ[I],-uڸB'dAWL-62'XϜ B9x1pvɰ բR4Q_S۱E \P3y V(`KӲiz{s}Hts_ Y`"0(V2 =5tEx8#g=qQNbM5om_Bn6lciDwJ=5BZfIT(M%sqFd8Q&_ӠLJI_k?T5mcw?(::|yunҚ2 9J_K]T@0aT}o_I.e_}J#g_G,5b 7; b^(c2.:7z0\z֛\떪U-@5(yN|-V^o5ksA1H ۤgSg9.жY%aMV AtSKI^Ԡn @AW(pwx$UkIE1P\Wd猁ϫs瀖hqXm_Oq5`+Mták\f_ݹ9cP^L{8)}R'O? x)KJAj`6-5{Y#!)&PS {缉&4}!d^jlmi7őۡ:y:]~_1Q~!:ˬF OM;#{S63GRYf 3ijgJ<6reu߅ΤYXq7$cUM9"`9h|lX7iI xLbu"ǐ maصN潋uh8m00YlJ =;go%ϕ#ˀjըV[8h1TȐ9eeTQmwMf$ Ӡ dKb4I#vʘÛ@|ۓ[0!J"WM:"5j|d$PGL #Tt'# F# U.Ekn vOD7Gz_,- Ni稗nlnR_gA>?sj#-$s7?x98 Ѭlm*-HbuFس !n/%fa ;Tߒ~~xJ^#@8:2w={FzSfQeY` 51"uO\"eX\;wxv|/w<=8XXc6<0]wUQG[fBeD[Bug$f>F]5vXM&PqVW-&@Dl 1MOELDR]2v|ҋ!KŁ~H83+!'$H%w:e^oM[9#8&#斧3?۱gj߫wlWE^o$h|Y̬OJ5Oo0P!Z ^~fS$6v߫(dѴ)SXE^mx*nE֕zU<\*oAђ˸4=X1@BGp<,ZqԢ4ة~l`!rq1SwcK~pbPXcrh=p?'dfH~A?e*ݛ ~G'S8uRt{ r7&RXz*R$M8=D4Ee7cIv ({|m4kOC'mwOdƌ^,!s0[nl|f }M6+g# (LZ|6\8 S_Fnh#=Ęf|$<XE.]Y_ҒC. ,^S[gLQ$oQ7/j-f 776dg9UD Yי쌘Xh7 =J(s:^?2/#(+U柸z?}P=¡X+6u:2=ƓiZ4qQX_a^!MmV2?KB :V`Y$AA}֯no?`7#׸cҴU(} vsҀ}ȅWKւgBdzEF37vr <'_@bKsA=(^M G@yIM{NuೊuORTW*4}v~4&Og:/aV[5'{}gVzT 8dGeiz\/Y %~js mÌ=WRO_eUStX&f6 lr[н+b[ؔN<e'@ƶ수Qaۺhw NΪOȸ?,#5&Ӽ%46׭+]~ ToC% ~_堣e!jnĄ=T8cr߀_3 {˺X#LD7K$ {U&ЊfM̯z]J!zz#ۍr`VC!8@p .FHMksl&[,n= .7=x=J#Ur12s#L/3R9,nE6Mtk+Y^IO&Y{Mvn^] b4;8 -Bщܐe@[{M]L0nyAS7L)*|TfdWz`s{*Q4p}DbS:zqF9PSTK@ҥ!j,U%\> ę )"εDpglRdJCPQ~CkfE8lW_}ugGy\/hWh3ⲃ!0.V6_ĂLevW*k-\K0OK (u^ Dz@։e y=b9'YeP'W|~ҽ4b{~2 24#̂sI7slFy뤇쏓jtK@|}BNO؞0IDZUΩ>V'ifn5>zTj ngW)pтeS؈(?rSa|,>,M̩yd 2PLOSd ؜q6z> MZ욁KEOARtqOFk~֞bhoIPAa/r `K7{s=}/DM>#P^n55;:zY5@؎?-mt輆;/X+R<;b& jew$hDx˵ #V}Y&DPԺQФ0_5zt;F؋O?S;x%>s0;RD^5^]ܖ^H V>|9(22mR 3$>trZվ(*Ԧ*pNy燑ռ%0μaIhӮt}DϳyX |!㧞I d-',]:Kj}ʨU'~/_Afytu f ĕ .3[*2 ZsW4\0McW epF߆MIQ&6:&_# 9wkh* ec3Vtg7t_ixcPɇy.c*~ P3s?9ʢHgx ڛ^Wm܂. kC=Xh9)wiE˜lfPu PY6N48S_HwURpDkStUWu|"tT2QZͶ6s>wOu{u0(߸s,}v ղRe!<(#< % twBo8_zgHMѻy3/iXN`++DVDd{WPsf#mfԉ0. x0Zӯ<, N%f1YXWyO{I\kJٳ[f},6r@f& xZ<KO; ('=ZEdZH1RR\94LfA&E ߏnJw.DIz{&4hC7rOM&^Qc| ^D @8kn<ш9" ,a;у $.rE+CEJʟTW`$/WQ 'Ѯp`^t4<# 0~"c[d[w Xo/G#-)|*cAeP`BnI!vϬ0 ?WL)sn*@ `/XԳ6Jsc+V1 QHP*Ez`D4`X: i!F;GA̙s-> =]5qY$윰 %=OaYonF Gq0ьEJa9!>+kn nZ~k-I*w:z"5~ p^V^1w}_:ʹ8='yqٛ&TjR[8Dܹc㭐W2_!W0x$yW.Ǧpcu-|;NqP58_"媱[[n[^x|UZ?aIH ˚r :~3~nc{JcR(dC3GW]=iv# 4̫_!TԞ7܅t|j_5`h)|uLinBz*:dH؍Wh.PʺCW@|rëX 2͇@ ' &(mjeWyL"A i1#sc[=^<O`d.gѧNbX1۵yn9A*j?Xj -nDֺ@Bxc*<_l8˴dk8&uOZH .=vCM!K!f5LFDv4\H%Ayuk2i2B~:Y1S S6{@$M}KQFu)!ooʔ(I_WUzeog[( *iAFFɕDi,l$R\ˊM!)!T/̻e\3n| b<wH9Ë.OsDkMbO4J/,ݛGv7n[H'Up}j׎s#dOly_jU:Dւ, gApUyyb%Ui,?<ǧ+E/byw N&g 4!{M3WVNd} S?1T܈G˦ځn3@gHU_U8+԰ˢKB!׏ݥ=F |aź"Fl.t#$qL"SEHYY{2E#IO}^2%̈́lg=@t7ʪcgjh\V7MfP 'm}wk"zC*+ Sa8{Xe(45^ ?ΚR r |@#i rL ߂zztKC${TEӞ 9 Kjit&T5ttf$aWϤNWwP-GUb_\Hde%OYsї;sQ,:J [M1ρtW"eii⹨͊M?1I/6;˥?h>N:\~vĭ@|Q#\1#3hWtpM>ZT ?n.ff`J^/KTeq֪#/3zr7ǼsSbJGA)Q?f$eF{ɗaĐ=l _UJ~YNZ.n͢1I 7GeT5Ia.%VH`,jeZ2P:l,^A7R7[C |qwdUOb/&THtړQ8l[d1Scrxin-xa\KBe4iNyIjeT؍xA{OCfMzFkUy[Z=dRd>4#mdz גoҟ|&)MjD͵ :Mvm4rO5mjX6u㏛2a T'>t""f_߻y.6iZBm5~|)F>vd~!Ds6%fj-;Ӛg|{(,o xZ+Y>ֺW\fM{&  Ľ{!C/̡ٻyn#|-N"X/RCn-$!<(R*^3lVb~-LUBY^u"'LW\10@7*[uCqqZt8]Ӈ"{(Kőw҉դhbFwѾlwk4"Ҭlc/+!ESbqkFsBbxhPkWtC^K#{쫃C7U9:zbAA]&ttMՌtdNlw4cp-\TRdBQǦITvWAXvz]2wcPthb-LϪQSSB1lq;?lX m7 @Wiԇ]vpw]MFVxRE|,:9f^R :wޥp~b6O"w뮗 ɉ>6Ics u !#MTy$fS휷o_2 W nJE;j490[Fviielq뺳q:6aF$"l{)LS__@S;$}Ǥu [˂-w-ſ깜&;8#i?UXlG&]:' @Ņ<ݖnS3K.\޺ 8#i" p̀p˾X*G=0dyhUi0k}9B5?D'ɡ וftBT':&JgŃj ]Q%v:x>ݽ'e5Әj#ȸ!6rx W6N+1>"3RF'x| HMⷄoѨVs÷%H/.!!FU,R`@ G*?}_ѲH?eض_UKh鎣d|&H8ˁc^vl!v4}^V(a>1q7V`3z>|~Úc7<;8oslzmS-eHz6c Zg+&+'&Kq*d|t,xx0YO ]4#ц~.Ls+<|aҠy"0Kk x.FI#Q}qo[>鞏:kQP%V!rJy#+YTм#MҖ; XU{5j# ŜK21>]~9g%aAӫ,_B_=X~C2!GDt@D?a;IaES"d#?+DSRz&R Hxv2S2g JyLAp=,)؊!#a.#TǛEqD ;(6hyA5Co5y\[A ]Y]p!~Ho;ŏ %߿9zug`L\! _I̲ ;!ןg#YlESmâr;Foy;2N1B7UvaiF3?G{^Uٍz W/"qb39W&obTp鼕+`/ͺp¥f= Z S{jv42&];D:7.Oy񰂋ԷzoS5C4}""3KQgCf& >/RЃu -z @uzTj|lב< ig&` P.Mp&53|YR.ƲC #z+=M}c}!.# );"-ZWn $™zk~CP!1};#өR'(.7#E:Ҧ80+:ob2W,\@k 9fD9Xy_r՗\БI8g-y=[>@ Ȃ~fAy96ţp]IQ^^:#VRV zXfmdO^Í /bkogMD=[dD~[ҋ fR D(-0eP^єxiFc,/_,]OkzY ^X+疜q/?S3YhGu0jS3Ȇn;$von-J~V( i~p 酑D]טոGݴCM}guDᷬ$l3GNΘj/-ʊU8|y_Cl<0qm߮1=sa}۵PxD3Or;sv _u\ȰDTM. x}|+NLuEwһ.h&+f!34w ЏbyjW$G\d( 68^.GP@/Uj־v|gV_`sZPCh }{d H4!|jUcٟf5n`~q'֧p@DU,ا-P^9JLW~uwRF`ڇS,lAJP_9 sxozyA䟽S'38r\=rKYH !nCacb_`ei/ADŽ5C`r@J=cȋD{5='nK+&'À#2:%jP)6wԊBbM# $hvLw{1^`o-?TDG"~FHs)'dbwv'tPQ٨9PbsJ ĀnjXW ќkr2] fˢ‹7 e\],vHrKmbPV^PTGw[_1qx Do_0Bȋi{rm L/I.ǁZ̾(֚ŊSKWhUܖMT! P5ˀO43MQţ_ 1SQy*  U{θܗܳ(H71[ldN؅{i!epGn>KhR=1Ȓ}_yGP<2F0ء*z&oP4hoYm10?3D 6Dr+Z9A^4huis g;5DNve'n*16" XgZ cBr#Sx|qmyrypN6+dY㷇#]|)|SvXsP6:t{X+4#;=ԑPu:$Jzys;Y#P#b񒅠*Ab{1eͣIWMQܢ뜼nnDiuswO-oٮ GfMD5IWiK{ Qh{15f0^XՌNrYD<L37i#~P$aWRShE)Peh *xOeQ{NhhL5ZJS2qS\c(-8e9l^ m*]dcf(&uc:8!yb^n]t)jnt~& yo,xT؋]Ȍ"BwH$zT:QCp?%gv,wg˳8IvCa"8ȀiUSkPU}˙/QP&?5fp)ӿ~jQ%7>9lmE+d#$ʠw|Qс FlZbkJ)]pDRd Spέ&(PWV XF]zxn5Gcthju@w[vzzhCK.Ȃ2P,0)z6QNU'ÈS#rxbzfiơ2d`Sw)lA]J҉g,4b \ȩex;A`.eB44M!}%q/ u M֣ ;hD%ԒŤhGm,,~@>_bc`CGDʄwF3FV/d%޸[l6;>b 7N:QycZ/h=35'{ўQYoAI!E<{Xfȫœ;n }[֒N6v2X3Eޝձ߫־gi\[u%d$g ÝyDD!`W o8.3z  ѻ -䝳Eub+ #[~ju7*>:z|Ύӱex`nqu)_ -nm{c(g[$߸ȍmHZM-\V*"Q.?0d=/W! 8y <ػ9㷖 W9>3t.)0EԆ!!7(Cp<B8ˑS8,ru6~`C`=IE 2 tFܕN  zuI+E{oK1dmGd:kY(JvJƖ;_L9zC&/W_ktps@6C BxN"Nxg"@ &z#@&64 #,~M*|:l~Rt7njG75x4QۘX=K@L]dž3˨)wim x壺1跡rz;-uI;%2zaG AbAPfH<}0^mdmۛPYb'H5dBw6ZݔRsB<v&IU91ZKE UR="by=oxJ[lvJ&vFaMkpUZkvߝڻ~\UĘTT*>g".z qg3>&?o֐ӷ/iiPn/lNJ77Iܹ6|L"9 6̣^ezqrY vW%D^;Wj\)vM 2`SjE:vK %%^7N;dIWAqUx`aoG!,d4 }sqhȔb[3 pQOq^=o z[@vbD >|`jM~:v0wK{=ُ2Lܢml)-/ݟ aģ8} y !<=4B3,wMd3#vFQE_& B *Zn&Ep&խښNen#i}[RdRzp`wާٍc6eaB .j$ZEbnž/'="I-6д" `o2,e-l"XY KǓH-\ncnQtls;wdedp XvVfL#W%$rw$V{f`RIEOx;#vk G JvIZ$/pU`:>Y[}C83Kqww nX c}kƠk1ZL$;߽jsZGɌz!^f9 f$4U[(CKa[c+'Ux:Qx` yD/MS;݀ߛt; ]6\ET<A`sd)Eb7ήgrHWF 7ʼn瓚[!3JvB`"y~Js%rlnm/&6F jՉ ݃s{dxr+4^jbRb^̤R)[GZS2Yџ>!Vj`F)uتMQ*-I@#jx5d ]_7Yn|/(3&6 A]6.ErҎb|d-}g!,L (M4@,qi{2ZtngD ap3URCԉFq4TcWyh@\-Oqz7iW!VUȈ8SaeIs JԽ\1JY_FLY⸲/w&QeՒhU 韷mW/ DXG3vMAR՗}Ik׬/84+edI'#ABA#划Iz@Zxob'+8Ūĥp>˯gp9ɦ} 78d<` ̂lɉR=eQu[_<2P+?_SBՁg:ZVm8.vR[8,)Êx ƩY$!OEK=%a:R\G. / u; s`$xh_q؇^b24TZzS!@xKOKy`.I\ɶ6FGO (F2w9kVn m(^ebB\TQsOa^م=[:|n]DeX f?'/Ef3ɾԜ+oS鑽wE 3<6eIEfBG(!uIVU\69*kȫ@q}HC@FviΒQ$ۡK`c=k8HAkmhc Âa`N?lg{8 ė^TZ~tNڿG`\I银CUO9ra"FͿchJC5bQM QƞѺ\aH!ЅJ8 vj?2uoJ>!D-ұ*Tl9ʢiyIB[ܳ\ ș&ʻ6N;;mCG| )X&l&>WǠő&~PU(gPp#^ԗ<[ߐ͓I_GǒPMxڌ 5trJOUKv֐p<"zmx̶?c'* p֝;с.co\E!8? K mm f yMQVIcIkug.DwڒS4K8#0E9zE~aJYp݋.`eZ'&I ál}Iip :r IŒc.LH5Y+آU"p"Cw|5O7r%ࡈaJ4yw. (})b3I [ANΘ(T%I܍o75{U)XݑlT-+(O_Ğcj@87Km bzWlUT$ L[5AXIF蘉CK!2r і~bV@Ԡ>aLЬvVDk򦮭xB]FY+un7l{݋ R'0 K\ˡѵƳ7{r~`ȟTk\>ΟaHϼt;Ѳ **Ӆ[*榖e´Bf4»bj˽5)^klf;WMc6}^ŭz59~JiI_Ɨfk!ZdnxP˧Kt@JʣjbD:{{MK` bԴU7:phoO"1%!M&.4|jNJI?hK`׿Nz?@f*fY{u< jW &eklgpHg֜JU6ʿr6ӃՕ; UÛJ`/Q Z %Bdo:K:|n.)U-jYQˤ:3'Rw5Itg@ܜd^a&ydULKŰ5<_}L|ny]M]/kK8,X Oe6 > jY$ we@2>۠B;;CWt1; HÒ4ߐ~V"Qy8JUyY'Of@&["'$[ UJFG傂+'1ƛu.KDÑ!rp=vRJC/(NwW3~:r!ЧdYBZh;)2Z$vP|D\oi-VG O.Nu4+C_DvN^lC8H$ziwٿ2o2LzW}Nj6 JA+c6uy|ɒ1\aIХ^QV #LJ}B+Y\6FK5ga !(laSMURJgIc$Ibj-e j _ f -!ZN(XѤ7pBT+22IO;koL-h7^n8X ֖ c.;j(zzb @MndxQɀ#'x B8 `?H{VAԕ?Q M-kD7kOfϾg. :{\ m ˏTos.iX_OJFȯS7ظ3:ڒ/vGhCXƨ;KL- Z7ٵ(8CbR찍%!101 [E/ 7  {$q[ n|-ÐxD߅3H1ˬC6M\@FрN"J_6ϫv.д-C^U k^{OVɳ3"eA灒0l@χ571QxJW"$1D~hB 5ZQ+Uk_wUXIXWw@B$rf+ µC8'PI3̠M"p` {1F$חeeKȿs3Os3Tfg.d$Vtz]GEI&8*^6K;bd*O MWQ(J 1Ntu@Hj`-( .WkU3K{g酮VgmYrzOᲑH b3j :&NX6AhPAЫѣq쭢Z8tD}'s#FR1bDɊr ̷Ɯ;(;kT0|A*a`,L@>i/Edh]\PO8fYLO>Gix3~u9tmPƇ%gӵg$ųXȀN4Q{ O~E⪭X)."V:+a1on}AW+qv"ON7(1Pb`{R؊K LX`ŅU54ٕ}pEI,."(_My8c# 7f݌\}ҟ0`wZҽQdk{j&Ѥ^;.ӡoq^ޘ'3Y\}Ȉ%@ĂBŰ͋.FM4&iTnYd<9 w}O9EK?dƤzٗyqvt\ k;tT5IUfQ e 92+16 4RG]OTv~?[q9k[<G1 FO7$f G}dqtM~58bZ!4&>w/tgjNM7T}ZBN9Eꕡ*!& ~[6k,&lW})(@ApЯ)w<0ĚͿf^ 8zʫ7Gk6>&$K9IjEvYFrUf_Q5WtS^)G@s*Ko[3@QegRmYϗ*.Ge <('+gs) EROֽV6*xmt7<|jFOsGF.=;ЃGr.<4bOa GXRjP vigK؇X8x MQ,"6H6uHs 鱈l!CG0ْU;5Y74 Ur>ߕFn>[G7!FZ>@caݴȺXчt֭0Y$jP# jx M>8pW0{rL">1c$;GqS7zmi;}Ϝ%#{dK}OOJ{ZPŽ 3~lvTIt:H1RGΣmܟoFr7*|(xc2mqpQjwg<,cս8Ր?W | _[byr^&T`JBS,- 34 c.?3(dKMDS!(~ih ;K#k5J5QhYoد/Kہs;6nM!fm|du,bfi?v<"Oo D{eI{1K! T]<꟔Q>jL{Ј0!"1x!DP M^Se{<7.\!YQ\X",)+TEDRUK Mt,Et=H%鲮U:I"Yt6ܺ'+BbSfLƻN|_U^o9:B"e{0UFCg7,`M=os` ;v<TS5eq W:KRҠԉB c##Y{v/6 m!k20K @6BnO٭o ;S`۔= U`(1&-lX4M}GNdVy %*tx*H'c][1hLDV장Ec2+s٭TA?A9+_NOyO\o!||$-Ŷ+t'w3sŀ-Ntw;KʬA$|S jxe07.dnPXp K:0LeϤ(y%Zհ._?r Dx7ANrlH3|1rf\J^_@n&]M:اKvPt03rPQATUN98S77pf`c[s؟C|iyƞز_l7n[1 eJW-x9s49: ыZj`Ӳѥ<‚T-쐫뷒4zPcb<{"z~" [R$5HB*ii AG%l\FQ49GI-Drsv{7FӨM+k$D;(vz[աRgPߩxlcNY.1 ԹFac k%_ cJeBnr?NЗӈ\鯽r\|K~8Y(l+g|SpԛZh}S>Z7Fwop9h PIPqZ ދ߷g̱CH~$p~-Ѿ-{;=B3{&׃{wqkz0#NsŔrag\|WtIP|QmF(pd7c>"FoBk.Vϫ eHraZgk!d; Hzut݇a˸{ 1cS1 ߎ0DrXM2J̻^ GLwDQ]\7~L!'3]( .=6T*l' S:pim['\Xࡧ-Y&h_#Fpĸl+i^8Ap"(v"eoۺQ%"u'G'YxOcq (`xvD`#6j7@uUfvrX|u[lSLʾ)7f!=5mٍd-q# ƪ,Iʬx׀j46M7#yBM.v>\ fB:ۘ=@k%>K0(.$G_#Ks{KK:I_=n~m3sl7Mk_d!r~E =\ j:Cp+XMDxa3AMuG_UTn)w]IL/qy(e @HN~ %_+brR_+~'R,d<ٚoj# UluDy\qr6vp<*:sKt}Hil=->}B?9ylļ pLPnС];ӟȲ;i&X4,Sgpfp -\g$Mih1DJtעl32s%> K6FC^Za/U0n*j⼕wd"d"KZttF (!74kۏޘ*֤hX_&MsoKKʨwNSq.w'7Gk>y9,^ɆAS,Zg34~|+{|{C{&8=-2' Yv.IX1e/Lsl}j fR,W[}|@_\ ].u9ND"mEizaVs  $ق?e-`9J_4N& 0\co+X S3QcU[J{ &XEpg nR%k<0ŤNh_LGP':~Gaku0 %\Bjد6#q:q'%}MFW{sheT \Ͳi4[ j$p7tMH2xY1Frʹ_5#oLC'Mbߎ0ő/J-v"+=qCTt2wxHLDf8huqa6;l)+HquPޝ¼mNFZ# ҀGW՞spSo}*golZ]aW506Gݍ{vAX?qPZ6Sh↶|0_ֆ+iG7Z{oN4^ug,\3pG'Эܒcsh5-C ye4uʗxP'm,*Obdۈ8|1ҧm_s 'i`S ,fG/&][ˆ5Ow) &1u"HXSĺkWb4 Pr<:Ox59nR%ړ.kzr2Q(a0ET@S0;.dW$0qcDh`EiJ\ 6E_#;A}5=n`[ C#4$bHs 0Z0t&C; 2hj ڗIu3rl:D:|=wXFK|5JĿQEsSڰL]:4pql_C5nl.yfնiW;;؊ʥ[$y쎴$h#'M F2f/?5M 3sxM!BPn&㶨C0weWpGr}I]Ըp~ ,0KH*ckFL6 ZOwQgWmV/y8X3#^yU0 Hl,zeU0quqmGF)qA=]?o~̣/9qSL'+_AE|wqFoK?eCjӭvSfX7l3*帝Ҳ*hrNg^9' ЍMu'P'%I^ #FeYp(فW- {DYfu z%+(}u}3b)r0(f*ݘ^/݅YG!IkԄ? &~}TxYŨ C#rk#[f& KdpҬGSvi%+p}Qyh+^}|k5ۭ)%!M q֖ á|5jmɢňQgeg aI,_y"EжTXE_(?Akh. %/Y|7-s=[VA魷ulhsh,-6Wκ*8xAQ  ~_b? D?En 0~U|ؼcX#&:]B4$j?B8WS}*yĸ Lga10fW1|b*fUR˛k &3fI@%n+$dH1h%1 {DSIa[GvqNwP4=5xZ$`;{ lEҧu9vN-B_LXobA%Ih('nV1-{J>Zq9quG:"WnX"li=m4Nխm!@|v^-N&v[1 zW9UqSMUu0KmI̓_m%7#P9E|\9ZrK|Y܄PVǿnKO ľ|KLNtF㕡cV~K!GEK*vi]&E |"gtU HmN}~Wn@)$̂YC )7t 4eE,$Uq?:TrZég%F6"CȶewJ/nñG4. ie>싌dyF/g6\XPJN<^4L>.^uM`` -~a{߰] @-)cc. ?Lٗ*>#pIbޮp 4 q9C<ΦB4p!AYkŃ|flvh4A_ Yg5)vΟ^Yp7VRQ |PO;Ũ3 3;\h$8g1@KnO F(a+/8yT1} R$ӋmNM]x)7}TP1իLvW7fUbD˩=c4;D\ Qʆ-v~2v3rjd̎wROM7:ElB~D/)6Hrd r\:̠bYHo=v%̜ALȯU<(?Ja'$,{v,nFU7b7f,0nP YEZp) aiýB I'l|X5IOÄ{W1#m Q"d`I5xE)OA T 8KY/0<&rm\_RH@ȎQ\WEsi`e c=KfUZSPV% p#{-C)LwZOq jT\򛡒?]T }-'Typ4>`IۆQ(h4|mo2hoe? GR㛶<޼þivVm%~F;/`?;fG/OYdjmqˎ(/FgH΍5%nYWJJOf yV;("{ʓB>\^LtVoEYJƆ#O@9>( f׼.\7ඡ n˺ܸt|a2GМ LeMz>Ⱦw-RqoÝ{l%`W+Ej<ѸzE˚nM"v $i6!NJDQw\+X4p9G(L,q[2)DT C .x;Eڶ7ѱQN!m\&8p->9 TQKK.v0M^,J6,1w$mVf6E=t2q"]⪌aWRh DjNތSUIh#S> DZ!TޡM?887Isޜ<ˤo4b4;z,{_X*'>pB4A@k>* =W@D&6,B8ŹV54#GKy J>׸uY{Ln(/t^۽&LwKu!:Ggq^ @#74/ѾG]MG)ėpߤ Ȍd sph\qVL2\~J3Xy.Ȃ: ^-r3-ZY-ic|tMN$ Se0>iL6R$G\x;'L=uvS[3%=+X9cG`/N=X:\!wC&JZ;[DV?t//Bź"8NSf3Gw 3 dXwT؎e3ɛq KRච.K ztågJ1ڢ*/sKhi)!o0 UZ%)}~ǒX'$q4q[뇩Mq 6Xyѻ5X k5C8.'[^-1D=OF7*}I[~T*YղmmJz0'_"z Wh;`E:M4Z$үe/C_O0iE9@ ]D >:Eoy!ڊ;ɢҊu=>P).Z \5b瑱ic(`Ow3.$QFE:Ϯ#Ipn)!kHPbS7f9m rLud>'>D}:>@:y/  ƿTh^4-OKeؐ=<(T[~tw%sWjZxE> ɝhNOc)qYɡn3Y0mD $=?xL2"3z-},G o?:1{&(+o^5;RP) JVZP\7u*l\ІHb)oBKg ]\0>:b= j=ntSm` ˠ77>P; 8[|m1h})@Kg cDuk3@^R&h^gv)-^JDpš5l4,E@Ul㒎{;>わìaCy2z,Y\l/cgf?_!T&R&Bް˄DS쭁}H>W8u6g "P i7ro'*>C taTÍOKkNs9&}{_gK9 C0IH錑lL$.ق&7f )$: udZ3(#jxVd#2ETqqQ4#v: "ƕ @'*eT^\F3VI%i 'l#yIRǹOKWiT̽E%U\5 wAڪNx=? eKeYI4Qs!U{b-ld\sR OZ0a`JXuAI27=qĖKnJz`c-V7;r:#pωvS VPIJőM(9>^ETlZ~\l| )츪QiȠryK S+iZrҢ r\@8,̡wGsC?fB6j" M}w3c0 wˮneB=G~ڦވi0fsKWT@ؖ-ٰV\3\A`.f˂w^Hnnڄ"U o/ z)-{<_=K%U% HF, ;k:~6Qrr֒i} ߧ?SI`Έ.gIHfT.Kю 9;21y|F.L7]hnZ+UC6S Gq|kğ6 uӑ![\LD89ƫ]F~đP2dG!c 8и:`hg ?`=']Mc8k-|^*1j:$]ZsI4>IISk+F+t^ y(%XLϡ?`BwbYC+J`>\ ľ 9g>M؜U=%i7 z0ag=eG+;LC0@Ӗ~pR׉Vhly Bnc?HRFr!7Rr(9`P,( D/tΔlt;j7}D-l!Bv3(6c^۬#sMyH*6Z=D`~4jf8{3 xSX݂v Efdy]*^ `J'zBOM^h=v,/ f9sD!p7͸Lo,k+HfHZk$Kx0ǸVg/Qvu߬YU[M]+\pg=6ѺU:|.ҧ`Bϕ"`m>c?3E ZlY$=y}]@ k+|ѳc+rT:t=JwrS' :ɯ23s^nefaqYW1mGk5U:)$ol٢r`rl|?~ i*{u鉹v7q|WK~fܪFo$l`y7ĮCQkt&enGd ڻϛK}^n2 [ f&v3pȇQcBŇ[K]KHR $G-/\+f|n)@eqǔ67RvbGR%nx y#=Q&0=k`YWnGIǴ[kxxsw!@ /.8J P'A3\t7I?QmagMVAtrn[4xq[D76HC9 }G6 (ЄH )϶ > ֞cp]b-{~ɓۊ>_hdQu㢶(WVc|;28Jƪvpo~YO2iAa.@a$jdu|ɭ{d4g5b#x r*${FkфV #6I A3UP1d5|A[SDNLƀ7f_zj1L_|!:GH7zrvQs6;mkoܤ5K5*Y!V^^o*koNjZ˷9 ,= `"V&)(]wYC.V)sǨd{rYh~!d%cȝI k_QVԁWg`+{SU Ι*C,FwīL_ uT8EbYyٟdѪ-=Ʈ 5&>OV[X4v\\ŁVsP.8T>iHȥ5mCAEZe ,%فɡ[ RGI9>y*4gqr̐iq+*ZF8䝽33TA|jaW>gGb # L :~m .Xu;d{G46@P1%Xzcw>eDީjMUm s˛O9rN76w|$̨$ӻ YRX仰GY@A#2ъA UQТb1 IT1g@ؾ>0y\;hGYƍpLtNTp(6Nua]90vIcb tyi5)1]B[Th>+!'4M{@ùO~{n?f>պX=*h6QZ9~&\t8qH"p[S~((TF|v{oo]UB1 V0yhOQi4Td)aFzm >N''3^uU9ѣ,X0]3[M뗢U1l__YPT!>d\4 yD>hI8e,Bfikzʡ&2Pڹ n%=q eA?U.Q`+^B00*3L j?6|p.CgH{wӺ @^GE&s񥔶BC+eʊ!dM-|ˮ/ xsSw}szo2Jo)6e޶p3<+ۂoAavsk8 &x\U9)A֌;.c@xPd`2b@WCP셈t˩񰓊o.Bi-~m*V2p #:<R[wyjnA:l8" >V,>`rGsm[$6%/<;e"vRڻHVٛ;2/`nM Πvt5@Wp"cRas-*z!u!%є=k`d21KM!;ulGH{W[ ӫFo1Lz=UG&v^d ߭] RTkNk$.)6;K }4"D10hE}QH[V)=xD}Ta!!.tPDnyוSh=梲 Q6RruJa4oҕ41 ց E=O/xj*>4t;台X30'p_~m՚iY„Sb{)ؐ#[3ppzP[;+8K:拘fOm$DZӾ< tc Z@l`5Ƙ)vMF:rET =p;}5`ĔM5 _h6L78"*JoC%#bȃ/Zhy3IOr w%6gAl^m`4DhdH<òp5H#'F ?1v,4:Ǒ'اs?0%q!MV$aJ(qk1>r }[uzˡ-*V1JBJBQ/&9/̫oss! j^p3«ȁ] zkv% ŔTf1+&(QB\H:?PBI"rHvըP3΃‘&]㴧͆;oDjk;D@`}M_C]B5pZ(.5hP"6uWuKף_96, )DZ) pDe˨('_D$v9!knrZ Gp xM>Q1崬!CZn^XrJQG>!e=Fuz7)ze .*%9#y)H,1|F V꧆PAͤ۳^͛J栁ժVIǚ7g4m~N뼛iO:Tyz.]3Ŗ:/1a6-ij# au_THDvS֞\ MFϑDGvښA]"* ʊOAcu|Y8kql2D:4}P K| Ԙ-FPJ1YT ʺ FΩ>.5YMzC$xI'F,nɇ->feJ'~Q+W %-kOd'2pĠ.౬Ga{ќ("S B ZkBsHDev+mmtC, ]w?gMkJ^M`%;&O,2'Š!rb 5r6綺L dԣD! OpX3RߴU-\t` ³0•&A9t5[MЋc%@ͭ ޟ#k T›F $䆈a=gz琗@bŠʭ_7@tZg2:` [ύ1u+"hidN!2"/`SƆ1yaw~k@;nkU?>~'qWB@jXMaTN:=Yа +&cG& 4\sX gpD=FK *8h,b:SI`__SJpd3Bj| F[c,)1UE UD?+5͑pmvt["ؙ}ˡn9p 0YDzG1ȁ_y,P} y\lf6)nDV/{7zG0)9w` ۆm󮝀\.6|'r6ynVUq0)ו̮`4 @ic VBSwgdaD+wpzmBsrlh?O_.Pb9`6\uCIx;Iy b4!D27e~\GZ buSQ>y7܎.b/tsKׅg&>Q{( X,[ɣBg)k5dw ItRgK8.=zr}l +ȇwOUz9k E`׸[oԘxyŏNo=zyRrB٬?1G)O/쮫S*[b&-r=]ܷƏM0HF͵)4J `Žs`jY~\FđM?I0CWFjikٔ<.tu-'+Iu:aVyÚcKldzmhO=Ab&n"IF%?#NSXi].@!7;p; Yxx\IeqN  \nf49m/ ֲ2?v?aUq1mkvgnwIòi6'];$Ғ,k4µSC`׍cLT"Jx48\ǔdg۪lK҉b fG #=pϴQ*`Ts:jpwLV`ѝ%[QR,3! ꊯpO_er [ w&[>$J -7˷@+DqгX"-QSVS$JT{Rto W ɨ@@~t>j04e$0v&v,!SnSʼ%Ik]a&ٓz͵#6 *Q]F2еKJ+Q )pv5K`T%`vT"$oЄw5A"uO`nA>8[|4m>|(W3u7WZCop$'g_]:)B |~+YǸ2 pkBWr^hD$ ljɹQ:FT쪽B ^[Jvrnj5duOkT2{9ؑkDx֤ͨHvܜa"h"N)0 Ra8x3f G.l}O{g3o3֚3D~ j{69`.b^E8&"Ҭ` (KT@fV)0q_QX) bǕa' jr*pSduD׳11]bJD 'uDŬs&tb^n"V KUmi-k茐I"z"POk])u%# KE CR>tq rGC~X 3 ՏVpOa:u23 `$ #n|)`2& !x'QaQRd#K;|4A)rlB%L8nߟ9FU=vV/23:6DujFxÄRic{QzVtiU~ZQPF\ZWx[A>/|KFtȞgOi۾1s%'4cwsก$aJo#EAXSHI-*ҍ ~#➐:BD'-h3إH3>s;dμ=$󀖠⏔`nIg [}dҳlǜf!svY-D6"!ˌ.%yUc  |ÒB;A~pv}K;<} .ݳ2JbIr9N18Mv_P2SyFAtJ*ăB0XSH$B/*KűK<b,$IwV"dFDio#A|QOefsSt} ")8%һWCƺ h֟ʓ=c4!_:v{u[sTaJLJtz*oܱW~{ mFgxϸb.f8pf^˙,a0ؒwԻ:@I #~X_6L K%%kcB2&IV!PDMoQЁ4Sɟ[IsHZ Ŝ a &8):&v/a7iVD,D '\{8&\$s<^P.1]SJ2(YŮPf`ltLvՇSVtghS:3%!ÉRWϓٴ朑 2JgDnpnX!edDta_!~ǡǰcxhl|ټ#ܖFy8 `b.gpLZ2VftHolk=0RYT=8;{f kԁJVpj꩷ShP3f*j[Zw.o+MWK@א<ǕOI,ۅn97G }zoyK)q(s BUZj'bN97Qn 51}&,&f0ybeY(3gn tic8C$BTTMgu:_?O?|?|[PLA=}Ȗf=%H;Ls/,>ogc-$.;]QߓRnkJ_]Dpo|~-ɓ4oJk8$pmWn1˥`1[{(}k*UBw0f68 "WMcK##)&IJozxB2pˍF(H|TFK/-Q2{C`9C助*%UW( ^@{3QCSg{{S kr.C7;\.F 9ئzEqDT5wTXd >$r$DBIWsDAb@.\&W?)V!oKnf__Eb^k;S7LԕEx$MNe T& T_T_+h gUS~Ȱ6i`(2*N1wH[?^)X{,[:wuwMςpcIFU6y\//% #G#(ev|m 3l]M a(L I]28 H #B̒+(rD16~mza̡г= k@&z04_ mNw̒ƿ6:f'A KIܰ{3"7EzMc: Eu#*F)V/$E>7cU]B)wh)[4i,W.Y$t<{}vw:2,2V\!F{wј)MACQ!Wy(F*6o,=dwӪѕq3m^Hv7)ߙyTM@=$-u?RdyRmҖ#$Ln+q* ze䣶f{6%\hmJumQ~<$_UCP,UEyV[ ydz iс~[:ۏ q|UFAȡvo-Eϥ}Z2sR%r / H7%;( ߐF0F/8Xyh*~60U+gS0LXSҨ.X Z)q;s0eͳ呕". A%eVy}_0z^ ,3QA_^壋8^g') |cl"ZŲ6VscU V%*ZeςN <;5 1׮qz5$#U6@_+,_(pbǷD< UG\nhNG2DT@{;q#䫒TZN6czڭ`6mJtbh~ǫk܃34eix#ŐF3G-.|6JR,l1Duvjݔ0Ð6.%/%-^D_oN]!6/:0*g(|_n-1>?i$T\6rB4ÍsǢrOn̑_K'f:9mn)B i3ZMξ|QҤ+]P̿45 ֝Z sʜ^ R$k3lw`xRS\.>>* R|'imQHP'H P%U?$#hfoJp M/wQ 8͟w'v7 VG,ar|x3rM \OfC^ɔvԮ&̺U7x͕'RlNnW+0 ?쭈؂T [;Ӥt,ܞ /VL"{d(q0P xTnXq(ޞ̕c<FOKTFkuh;4'yVy-ND ΓD{LnfB&(>:,r%~<עUyl67 ЯZGõmR%|7Ҷt).D2s抖ԋ~G)WNx@M3۞ qx]mY}SKAr[ 4?WEՐ ra{G,7wa f벬F-ҥJG Ц ⑚L))K5J. n ?As7T{uH9QOlA #u/ 5 ΰ3X W_6y9T,/YC ?e;gi!E>݈#h d:S/"ȱ8nKvJБ|-!"'wM9LvmP0ו >{nA\>;<qKm| P1e*I5ҕQ?OL' An-LRRи[diީ}TpB LNx GVjþT //ŵG`0n;(#JbE "E=0oG)FhI`!AH ٬-3wHO?sɫulWxR>!+k[=z=S> i(%Wx0?BΔ~0xp$xͱ,^!d5b?wx xhe.)%iRHeX7X+g36O SX̸&i3 n/T+m+<ӟ2LpOʣS";6D[Z+g`A#ٶ)i TTnm= .+qsۅz^-z!Z6gSLm!#E-Fj[A'nK"4c׫uܛh ;|o^*̡@%{ނ=خZx?bbIZP/@̐j?y1d5}Ngwoyy<]Sш76?ƱV=Nkgo~i ֡@xiS9Bo,[z34xd^aFvHKTy_]/ʴeMyJJi.fx#%.،ѭզjWI~2vP,HVUIGNiDe֤(;K ﯒C3/X6d6+sI HE2G<6膓İ@?IzS*\ƝsJ%tT hWx|wGΓ{VnMY0VbwP@PQ&Nϥ70b,T309[]O< xۼ\YzY+9BF5q{Y-/6NcY;GrZ)E:mכo]0ST &4%f,ME_^J}O{Γc9unR#tj/(cwV7níz#dsFֽg3=.Ee9T4u[ftqy= ctev~R Jt`<˚/YB5o ph籴}bsF+*y1>Șm 7STU8-pD$p;}Ƶfυo?f Eȷ!>:${e@U~੺'g]rT!8ESSպ׃LR~ύs%F##a%.r.  qLdѽ=;{ _^J=֐:u2p `'CEp]Lr<6(_7Ʋ.*[ _݀&hk"ٚKNv+Nzd6ΣOҮ2g,Y*`GlãIߍ2ޢQvԔVJZ{YGgqDVˣJC9?Tl[1oa f׼tΦ&#V" ?暖+XRDz87\hkSI8{1A9wƱmkeKhpPM.ƈ80bZ!mo{2Wv6j׼D9ʅ\-zP$vx* d.xp昭#:h\Ywo_[1ϢOh[SfN!6tg?10JZ[I3W%ċ47.U?ϹS0i{y pFp&Or0UphA7Cpe=DY{ȰjC j( =/Ra16n6Ea4sO`$HSX1B;`mkׯ;tyb/b"l24F~&n*z2hl:Q h{v/[[[l:2a@:+P#}Tu(8v d. W*o<@26)?# 8;p0d|>+$SDx-Ҋ]NR+?QMWay]j0al,zcAו}BDMZ"+iCkrkZz(D;ޫ\mpLNOkDy}"E,$K/QRO[[ >Hô{'Gcg6mBRW< #9v 4pivVpq7rl_/E?])h#OY0aۻbuHArS"5'7wufANCѬ X/]T/6зkz ̌K^f%2chw`%XMlݨhti!OR߿EK[6_`$`Qb808J' ?&P 8&v7g0[ьMʒ#Z6LK"pMv_%bԌKW_ NϞK`¨dlz 䰄߸n'd]9>0/_vP!P zφ*,J\/^)>r%dQgN s%ѪLqYio\GY 6 ["Ŷ}-|{v<]}{ʺeUiLtxA,ݺ(xZ;8gFK!˦Xƛ a!Af)&y0\]H !c [zDC߮<&1w~BMcYbqE0*y!)A KAɆ4y#T9 l#eD'?aԈY5ir8S+)ɶljFEGU!~8U6;qVn9"¸[0-c\`T"o*P)㇣V`FHdgԯײ×e]3nhLǪD^Kܣ '́/#Nqo"bxK' L995n9cU aVٯIjs[OtG}2vA)N2ɬb9!,q BUwܙҲ~+<ņ.k EB|#6w.E<.-RB #g4kfMs8 m ~;kߕR`8CMo>梕\~@UUR+O tcL5~aWJ}jDOgRnjK78SFIX mTQ-LL̸"E/IPR}*&tINNAGZG]G]eha(aS`6@ SwFOH=r>zz 7R]}Cr)UʜՉ+M{&I>7I6TwNְr܈ihHgES>>&OfSch8<~D nnRHRaūȍ8KpzD9 Tb6[m>6l2KR v)Pֿ?C#F`Xp|DXGv֜FδՈFB$SPY@X).WI[xg)e`yAUJGmMNz8 Q¶w3Ǖs9[IOgx~Wz ?: bwIρ~bsdQhl1$oY4Xӓ:7$lGo!F0F(?C 夬<,Fg^1mz (_9X`'#^ 5fq'>U h C'CiY 8I|/t|]'Ļ$Zt?@Z-;%WlQ^ w]wjzr>P9csqrw`u֚+$Czw9A`󿫺Vw4de a+绵No3ͤB Oཎx폲 r[KˡZ XDX طq2EF 9}q!lY4\,4t{]%, }IaEe]T䘳\#FN`ss,1c.5iU/x=Fr B v|5*㗃To7p/fjGs> v'Ju.;X -g3xjLԁ:\Kw0tH-LՀyWBZ+JȵGug .DZZ5n4KEߺ-N?CMNC^6v)+:IBR3?9MrB%aU2ipŏ6Yy`L-ń˘n8y.eY+pg(is$0f"†SA^Ja=1ְNpϱ"i, b qY36F-w7O#bzRj1f)h_e#LY^ |< Sxas(eOby ^mL>koR_ `TO0"5{@IK 5Ep&E.!y@^A(+iZYOVxwaבֿף0Hr3(EF Rƕs?ב41q.*eF 1^Zsl~=_E;̱oDxxWj 2NoRxqrU}>!$rќ/U3Wiufqp~6G7g7~惾;9#Y;cNR1r՟P߁n% l"SKGqUBesh>+!If[:\n‹0 I;C00}:,7cRN ;|rK;l[ޤͩT8yXNPےшA=d?c+vqx=@D6xbH3MQ1 pc=NvM֞ǂd[MY| >âcy 0i*D}umnѓ r.Hg(XtVts\u‚u?Z^ CzV}Șz@%y0dZ}_)TDrm^*N" wS<}Zh;*%qD #<(#*Ng%` ̆L՜˅귑v;i=NmZJysLϴV.!8.p@ ؓ-ᐩ v/{àqUL^@OF|0[as8o)bO%x h`AJ0ޒh )߿cdd=|/9>oT}y ERP-cI LElK5}%Uir ~ 0PzKPI9apDM_,g5o$v%X_;hB;ڝ>j嗱.u޸YV˟$ΥMuP1-k26M=ڤ: kQso< ѼՋnՈşՙIHfq6M\[H'-|M/ih N钔l-3B) !į3a\7%hqֺ2}OC&A#%? `ix$½>#``= %,r >PMv]b9v ? ެ~O`OD5s>HG"y~RdhEas+H.q>w&R)@N'=.X Bmg\zJtKy^ۢo ^Dk:;mǥ 1f];q5M);f_@vF!Z$]0Pv8n ^|\SiE07DD\||b'JQzΘ3Dm"-h95$@2뮘 FE[u|l NRCsEum4b"*tXY Ơ &@] DMRǙX㋐?`G+/ Z6Zț K,ܐת swrb¥b;`>iCkV$A|Fu-@,lRC ;DY(\}@(d'q?C2{~hӖa4 `KT,Qқ4&יkI4N򱗶B?зE&or޿*DR:d3*WKHT)ފk$O~uBLu;w!Lg7Ѿ@IGhܫ>VvzsZ?"v?lcA|~.<ْ|67]Vd4 ZEKݯ3FKf?ןK~,:A4ahgqF"`X;8b5{Dii~DJY1r&z*YFzwȕ)GM^_"?GLFvF=w&u c U1I 0,`'ۺgCQfjNz~ZH %҉Dߏ!M@Wrы ˀHnY$GdIkC=VMl2HDfu_26QYWeL'}ʄ8jYf/62J<njlgiQ?Aܻ3%gPCkQC,|̀t\6)ha ʾbo$%n6>pM-(v*iA$gt5Oe$~MJd=hm@tm;&:(Owslfԟ=#Si#B? 6h kuB_F8[`#gRTsS̭G!~TV\=/a_L|,f#1'lt:s+4rp @PjkB5|y[Q7kdV7QGT#$Y̲ܥ&DkR({NFN@y=:ARcUn{jV !qBC]FT섭_`h@B|GpERIV*Cj;CS5j",3|Yx-x(}~9p^${ sC>L)!<+`X? F"t#OMeoy*='Vf$Y&sq,[_'Gߠ? ֐`죉 ܀ㄌÆN6Ѕ%1+ ?&ԭ>N\q[Їku?TTpn`{s‹e]~iT n{o?3ojZh1-ȹZKαoI(!K$X#]+3@_|%ҏ0e0KVg[NH5Ty23쁓i72'6:Wm ƓD 0V%(]sM/q/,b>n㒢KG -r2 $Q#X7t؁`n RY-0H+j*sG%e?̑܊\l0S]d>% n[E2 yVINN=kѨtK9(鶆G1dpAx+5b+qdץS`Jk&K qiiS ^Ï3+ƧMxUQ*`Azޙ=h3e3rG2Z\zZ"!?:Qc _`ؿ`6?Njݫ#%]7Dw {(T/^ U@rv#mzhL=221-"biegf`2lQE&mZ RA*l4V5 Uʹ&̆uilpKjq^0!8S0eSZʵxэQرB) s4ZuIJ˼H"O9yywd0z?SSGtNMʧ5SW]r.PVE~N~UX q.A &P!s,^M*jTF`(9ebnKek8/Y+ͺY*p@:aZƼ\, R)- ԕ  95Ϣ{e ?+NAn͌/r-B95hUhfTQPr[,Y]-E3&3k,kiO)w4&HE؏QFŌ3uBAwN){?-HU=Te *b jiְ! ]uLD%]2 EVO2x_KGt(jRO#⽡7;%C+'w i3Ѯn Q$,?$g`LB.<4zs}%>t*]"*Д:Ai^K ^Q=<f-u7O!X&ޞ1;jCPWxKSk?*@>Р =lgkSxLa8Qr^}6"^|[r2*ATtڮ)94$)Vu\,t!f>jht톢PŹx%lE!2BsacPKH ]%M0 f?"%"IFQu`{L/sc ]_]%_g)(DRZ71]>YQFFrl` RWdʟZxsǵpժ 9^O[uW 8Dtww2ݵbH2S@ikP脂`]% ]8J1Dܜ?'4/hhX5є!TfG.&po-~Aa۳C=q. >sej׀{S)r}ĺFϒwIetY@,BFp~YX sC|+^]MlŶl=@ZZa!?__ ӁkȪaHE;2M/6~oP6@_e n:Զ[:.#Ӊ>ևH1(Jg[0#7RQP%N˵nn0@FISDX KPF}6Ӹ{ 8 t0ͯ>&JW?2j TjcM#eXanB]$dKhQLq&[vĞ0Lv%UI5'ɣS+դPzѵbAܾ7?aHć>秂RA"2˾c6ը8ӉbƉ6Y :|>J[裳JG7-?NU3Qb =RM,p m *؀.3E!:}H[vʼˉ; 65J32=Xc9;/]+{P x >ƨ2~9кGbR8\ngSFCzzWV _ڬ햙 6](ʩ"T;VedV8 674XIJM1AK 7̻|+}XT qD:zt$N}.?{\gx<9nfNh{|,W$?JڴةKeMz _֋ 0! >5tu!4D_ $<\uÖSB_xT0X3x>`͐ +/$/3gf,/Rs%>?\[2CZi\$Wc)O`Ps!k@kȕw H 1&Zr`Uu͈*Z[@=I9.ϒ fӸ7-* xa3zgŁ$Z!u>Fa]:eT1:&C (&v:`>ES,7SM=s\H)zXO^OMm:k6?HGz?3)T.lqMIB^v8HQlvBhz~fb՝Gy$!$ŝm`P'e _} '. 32JTq3I44cYI*qJl=ncEB`+A4P?宠d~=h!XmsU[6ԓKD#m 2,BP|483 [3IujoaTI+8v$c9iG'd}'|x&1G@Vfd flpڱ6o[8; 2"C͞˅"1 )O/PUDܤt!uK; Z (܁zj`ՀhWg[jҫѳ+c+I|5h)Ǐ&&=VhGYQK8ylBqhkl̊DL6y<3|ijȶ+jJڠRH-~pP5Nu8!ϓBۧG>floF *& la .w]`@e83,E͔aDNu}+]2D`mf=F^̨9YX.9Jl@Pu򨐸dIm-i} 1"ɼ޾|嶺xn {nT{^Zh/)^ F ?cN>?=L7 낽q+Fq϶hd Sw@/]svQ%]߁r4dحNMbSSmҨ1*c5+{Cztȡ#[! 6i3׭BN'|" 4{:%I]A<Rp })|=L.2L^IvF5w@me$ Qr? r7mL& Ƨ4@jzC9wQ,G(0$W ZLC2tqM72,mAXM%k4bЗ3-j@K)JNLp> `@v"6gTz,┥{H+)mٟ6t1R TQzLƪ!UOTk>qxE|6O5eaI0)xKL)>7&J#LD YW'M8P^*PΟS;k8NXG`86|U{[`JwJZێn1t2)ij'PvTך>(Ej=w t0J2-3>sT '.̾oD\9E9#tf%{6ӮGS;oQɀ;a 4/RB%cB5WIj4q=wʖ0/`9o._ˋtc6/Sp>#&>r~2ML /#9fCқA8>V}f@t5ϩץ+9*/K<əs~EoiNК9ya1Z;1ݮ/Rq渁j'HoçY7dDf(?xY?֏?6WڋY-CŇ^ zF@;{7Rt I6& ?\į\I[L+` Hg"PJRTut+`qy8r {.NOX48ɦ(e(4tΛ o&qzTˀŶ V!.|),)=瓿j`XV]#GVA]kkebDz¼axEӷ\Q!SBgMWBpQ 'IBe DDRwm>XݤtGWu$u>nI^^>mF}FL npnUգظ3%1_gWflB`6Qӊj-&D Pc9}IЌ`}A="QLGdgXiϲV6ad\6VsA']n#*?_܅X%Q^'&CWT#C@C49DPͲدA5bz8 h㗹K" :/;> l[m#fa0ѫAU|̍#xXIJݔІSbo ,-`PӐ7|S|, H |SLs!X'1kEz$ D(QW龡(5ՓdF3H4DIs. qxFB"gWU2RZPR eeoQq_6'ULS6u> $cIeWHu~Cױ?Y v3I/KAIӋ=@}[vub#oFw&POai@Z,fթKRgp 5[rrBBqn*v]q49e@'BDŽW|[KNT24eCI/%A5˞@9q 8{Ui;ɇ}3n/CS%GPiN/oi*'٭[t5馝Vا[nHB*Np ./)W9&FJoFQ-OP+;>1;ʼiǢCŘbd(2wF^Ծ RBi/BMi63J)WG[NlUpG-d"}7 lu j e*(q< ё*yK[|0s9aH4*4$47lk^AV+Ƒc xGQ%dU'ADMf9EOy҉ ?X5{t-mywl4@R!NG D!=SdR.y3i1zPhn팂C]-RN=($$߆P|HJuJ7KQ}_hHuI4O9 jyAƞ`8Al%=8 i?C:`=a)X竿D@( ۓ|VF"C_{[6x [lCd=ƺm\"Oo  7 lO\stri*BLjn:>3H'R19"wWϓM ,AK$Еo:&قj桳@;pi!Hp"s#;p6r~7Z,Z:.Ls"~x"r4΀MYđA^!iqRs)b3m̕ιIԭ~Rh]btL;T`8n#P b@G ,Jl[# /ձmdldE8vN_o` :UM@951v9RvZ5&;VpowDX) -m~]HA:*-] q%Z@*wpؒک8t`$*N{!~%J|B(HU0HҤ>u- WvʴL 1#&;e&= zFF{,|Jƾ-) c zKɀal@zd|_9-n >/)Mr3|<|K~d' 2*#q{"poEk>&W-U,JGhZԠh wNf h[)ufN-^}a Ԭ ܿB:& 1;ZHfS%!ېoSθ$GdɡNm8.&-Y/br 5Ǣ3hqcz.'TRQ(Sks$MҨrN<8D(z]:z "$jSebٯLEǣ(D|=KїЊL3*X @]er)'T0 yFsU)}IY>o~0;6'!UmJ]+-=vlK_͜ v-+̳K0C?,sk>m 2߆6hXI0AU(Ԇ:F'@ 98c1U[X Zs)!z,ҿX^q8r̢>kr[!E߷.Z0sĊe|v5_B3|+(Vր?X/~-enCf^;ȇQJ!v9 hUe隧YO6e@=Y(e?8 J{kQ[# }h܁6\S fx՗`L,rbCUŌh5)G&nr[q nBH8rJPW(1Y (j"&rJ IéNjLCȻ*-5ǹT;+H8_5B{?!{F}/H0WB<Vߗ'X33SѯSx||lnS}yVgbW~C Ƚ\LełQuA" }.& h & wkc)J^hkyA3-vJ~B@.oCHhj4Uf;FѱՂ6G9ThQ(OByo\{ŗqØS} #_{.jU;zG~SF !(&cao$ZZ·00l[+}Z> E }Ҝ+0"q%>DgQT \;(#]~8WzkƒCH1v9!DT]!p 8|D#AluCxW_ *̎"Bq9R}ݡ&ۦZ%]·c[A>!H#`{I@bs}J$DAm0R`?11W+$vrpg+A|[P#hz#xJnKztb&O]嵶ce[MD ܜ]`@{&dԃKs,`8_G1蟅XL 1;[z^9гIA}RpgV'ސmUœS< ~|K0rmO\zL^޼p M=M|"~?lmXX=esT8N!GqsQ6!Iyچo7*HPHZEB=8_ }Q<;:6xPj/62}B}妘ixq+ck)`ķI|$4eki jN òDȡV%$zRڔ|ڲNvWiu_cs({$0( 箘kN 6t̊U ⶮqFѾGӵ(9Q \̴ykuYHf6+3UmG2T*Sc9Kc*ǧYNil?c0 w6b#X0SDÿ(}O^R ?. L6L"{bYLoJ݌B*5UHZTBJEvbu HwiH|%` +}q̦NXK=9 *H}g DrMNӘ蠟[?($L 3w~|`f0(ol?cFU|15Ӗ,c'Iʵ)rnv8@$jU9*1'F(1܎,C/c=θmRPZռu6y'N%pa -6Iu:+ >~fm31i}3޼]H jΨ15~P51m@+mꑉW2Ւʙc$p]D3sH@,$F(:C0"@\ {b8ŕ aMR]Z5,/Z—#oR\k[eg$?w!Daoh1vdw+]VIejjv4?s)wRuҁ=dC~&h5Y䯋]yG}/ѵ3([NDź}L|W%ZNfK^MU.-#]ky4L .{!,ğu<6OE!QMI,'[`AŧزCԵt1?p<+4o2Bti? f ֆ0ZbnPh6%2դ% {`nV*v6SC4rK՜HSu%8'mݤJw_\k]0O,ҭ N`FOi2@qtl&O+K>fSlcyָBV0q)i-ٌ<6N,QTO֚Qc%#SW4w'Ӡ~3L dfyFAKd^/Ma jGK\%-ic"̓zebW5|*Rʮ)ʯh V&I]1DYJ|_d&m~@&@U$Y1_H4|mn:WD?"&㐐SR#P !us $Mdwȳ#IHmWOʳ>~ĖXfW]u-;}D$<+z8TMp[GS O/Y?w]rh꽴Mo ŧbtdMeUsF r0oLMUWm͹`VPZn`eƵL]PpHpGNQuCkWm4:>7u}U|z)碌ZI!þ1% xEߋ0ɂ||Ꟈ>b !&?WD)l|ͅ12%{"ucFz#"Ξ\9ϯ!qX{㬘q ~;I7 n1OPU[3R|By΄v'l5rVOmvu k=E|8F\#I<- =LeoI?k}? DI: cD߆!)$nH9S@wC1PA\`cHC $$Õf󢀒ʖ`p]4&eŬ^ Z*vāvžjߵ './ Q_{=s&PkH-gP['Tl=r  qZ&:~?A _~t ,d5nPd;|]:Xh7Λ#q&8wH8'CJ2XOBu.Azm-wzw$9< ybM&O+^4,'yG<\f̹ F'ۗ a֐oAJumkg0MD [%q+}DL ^2VڞpٺڿݐM4\qOR9ھmrـ[3WKՇ-8YtL'+,zF6I.x4X=T͏:&X^ )?P}"nh9t w G=t j2؅MKzTCᑨGvZeq[@@\dRA:=**cA%GEaڅf tv%D-̅lG-#SelVvcCGH]> h4OLoxN^_3 9 #ZNhcxl{iQ(\y߻<׳|x<-P ,+:t&{e4(ZAg"z$68V۠7U]嫃:"ړҚS!Nq_dXu\-=]nepVU*G4wp-l ^FUIIL=V.MY05X.Y} 'mbZܺpab/DkO +:h5Zm='bd_%)?Zׯ ϊvG$+qeJ͌iAr$kS'S!W/jt✱)6Slogdd?Q\b#XJLcVϲ TkJ1%F2/6O4D(CIr =AǣY-aשP*sU}^&Erj= qB="jQjWC/ ACP\ W'?c!ZdD_]uك4b0x%Q5y! H5EEp!ǐ˂5*s5PlX Y/ ޑ1Nūk d[zMYl$ȴA?aۇTNS~DFOicMU<)nOrόV,,.=p 2}u ^pk$'qgu4_636;ohl_ z@B@0k[C׀bZ%yyBGF. .dϋ[jDNzXkؑǪЖ2y( '*æ|ls>eҏ S>*ḛ ɚ¡i6Cqu?LHa^ ]; Yg[7Sj'}o]ZiE}"tV.uJs3nU7ikWFxAMu?uMwWmIZw2Z^ bOC7ݼ;,o U$c[~e":n$7:q'քޠ\o@\ F-r.R*8c_-oU"#>kBy#qf^U:C J0Ma~r(1}TWѺ\(>EDo|zrg 3+Sk+(EUsM#b 仁g#ペ%bxgJ{W1'w2 F:%!y@ҀicgZh#GmjC:X.`:P/~Ǟ>բ:m׃8 U>Tf{Isp+V3_/PPxf>) QRᴭ!qHjJrz<`o}Y|bI }8|Х1%doNg%+Xʷ5?Ǫ:e]i+RoD:M#ŽnDY~ J ֪e)UtYpXkB*^R8 Ø-F.2Nj0d?$[Krj1fbp8)n {v(YRˉN~a('@{NDب2uRf?Dַg+Q|= ,AZ3F5̧vj*0,|waXUJsig x[Uh)b.4_ ]:237̀Ms0PUz6I~-%3+ы#u9 HoRhnGg5a Ԗ5E cIm0f @ool<;;_J~qƾ>dhF1(kOF\/&H5p@\U㱘i_]qoP桍}N# ;WA+nUIH%GE7pv6>aLfH=1Ĵ9$l8Jcu Mvr){T@ yS*fOuv.vf)nTHW5%RiȄ{laO_ P1@##keJO0j}9| I%On0S%%āYчP*E!88e[J3*^oGzFN`?-+ j\]ũE`\G۸lug$-}\Q4i31[Un ކ/_zU=?(_vgZ,eM# )ְ /cEzp ~0$͂ )-@v#Q[u9䰇"G^Mo=i([Q >/2t?ݯRQ-l'R|^|DmXZz"uVͬ) 0[׋?,pr"q8!DMucU5Ω]u^(eMGոiA; 3kqZ_.wk{"7:dIWy . Z~Fn݅`.:qTh!btǣ;X/#$AE5|%zNtooԇL!;q@Fn?nZD􊿌JogڜL(BQLrsq:1 i%O#~1(= ѓ1֒ۧ>h"2,e3aKLʯC?- 9MV:I)CvbC9Y-{X""M{ `СG ᣍ.M͕ϥs*+-p" hޡs4}o7PBҏ$߯>B}8KH`ʸ=gT#q} DJe >])#IZ& 5`jʅ~h`azq%0CͬsAO&hQM-'yGSdS$33Ö+&YTgM߲+26 ~iO]쯭yLK =WgX} >'#h_dݯ!8-SABu懷','d7j L %RY.9TvԍЪ=2)q%YN oY T S~ }򍾢D=*H1+KJapwԱֆ8!r&c7rO0I?EМ93&E= Jk/L3v5Uꕉy4r.iQL#MO 7nJ;\]Y9A\|M ܹ۷joLR=wS̊6_-Q$JщҞl@ ܞ)N5X3YXM$3[P}(&Ȓ ..D@yZ`BiGP4nτL޴PyH\NM;C$~7Vv{ɏ9워:WnMC)jZ,&ٖcvmO@ _ %)ZRbs T;&+LL`.X:!NUUdA$&ĠOZjT_>jv#+vTI|DFSX*K8~1p4UB#edOq߲}:U9h2HEƶ6[!M革trxA;U_ /V!-Q[K]y Y +h_[kttܲnԚ]rp.]=i71K |܈>lu aͣ[S렽_0 b읋 .ӄMRg87k 7E7nwq}!v{:] R qT+uKmb3.+GaM0RD+] 8o%R(69C?Pܝ`cDl.qS[#(ԃg.-ⵅ ;2YAm>u](5j# R $`ZH̵,RuwIo'{?!lovUk./zX"P ?-zs$M'2j'DQGh8d!Zb\ `XD4"BkƞG5>MQ!1kɟ]ڧo7;v+(C(@Oi/R puX \"8ܑGַ]J94 zGfLF#|~ꟿ2G c`2q֧`D|3w+CT_L v{, {Hm*@Qٍ6_G1:!bBȁG*Pو`RI2qc$!ۻZUǰv4Ճ~a."REb j-C"=,B;[r`"*Ld-j#g٥As\e6RP6 ai+tlQt٥| Zgjv@@n RMAtbc;IrimHԽd730%1 opCK Ntv :goƣ V̲bѳ#Ը9ȝEMwP6=U^ Xiiu̱NX"-Z?#mRb)e`R.]P:ߑnuhVÐTB Sv0 Wc}( =֛AI5 ejخx/e..?&;LI4@JyYN; }g{8>~``J|F]@nÍ sx{-b$oL~g*x[g}rZD_SoM1[;v]l1{gr$Ǻjۆ¾@U8yFˬQ,4T3“8q2BMNbwЧWGkhdw1+trtp"x6ylviG/KǷ#4#H0Y̘F&u"!{(KT"r0 dFN_xc (?57@X܁(QPAmkҿ=iPTB klJr[*4>;>=`G]~˰J:[#E;XY FDbY,Hė[J_P،cyKQ[ʻey;'Rlk-K5'WUqA'_g#LgM| k?lAR]v88Qs. tc=%G em4OiL,͂h _FoElE<¬4tvi)et؎^O`y0Z^G?|~@Y s|z f TS[y,>_(Jy,&(^ph *wN)N>N?_[40&!4[S1@MU5UsALim:r{2r'E\|1[t6 ϐ΂mJo׾.G%(/ am.0p6:%bHxɖ܉q\\:[ ;(>ZZJ$J }P qʺ\TNĴ*E 1_%_*)pʖ6p~}\:1jO1(hC*B 2T'H? [[$z_K\4$ϯ1tim[fیzHh7 AsjT#=c%׌Шjctڤ.w"ouF~j|*tƼQ07hT-V/tWxKPUI[B*cX?v7+iA-xe#Tl zɆ¦7fl$7)4p[H!g:EnY_l#qpƻ 8 8{u1E:H`I-͞ p5\Mʴ"!H_M&slք 絅 BXRw~zմG2G`E܆25|K*i1m.$ISI~Xjg,*7VbOwE)=+d8Ə\ƙ>r_6F՜[`xF|npG8*\QŗǢF1ۢ-Mrz7On&Q@*hY!1"&IswhX +lB6_%(jHi}b\*lS|ZU$0w+19{j*3v(wcX^]M4|e`< tSCؽ\uͼ EnJz ;Gn7X<< IaCtֲ+MFmfef|܀2Qs$+>42Y}zb;BgHDraHl/"3lhr:``6tp¯]8s:XNX^(za'2udPB`LyޚqONJTɴcJt=*}"z+#  fn"ȁ {9Z)M{X+e[Dl1Rì53Wv; ~JYrd7a9pb׍L$ZC 쀐9慖uƦ׈3jmż%g:\8XĂ*oTtY|~]ƿߛ]F"3@IFj{! Nfu kJRnڋ*L "zi |љ-@Kt9aGz\CF,(HWJٽʱm{r}|_\QopH\:FhQxf3թlꡅZZ(739 7vfcjY?}I-q00_-AQo`V[Ficxo5Cz)=#}ltut,8;%ǏvRZu2AV+a_ƺ5]oɮ+ $= y0]Yh w8 Gr'|KU$\t?]sVݼd "T_vě5">c|2A66YQ|[ oޕ8q3v!Aj 8BZ˙33 YZ