hostapd-2.9-bp152.2.3.1<>,3`o!M@eee=@!7V5=̴a_7.+9RϚjO Y3`GqKƏ^2뙷V$`3RZ/d˸0K4;1KL**I))(ˆ yfq zk5$vS_md}[u#to ¢H VsQ? 'PnQ$N2~0ڨ#xf}mwLK}p /rB _MLlS 6f9L*7$E_ V1@u9iF}>I?d   H ,:IOWx  4 `   z ^Dl(89,: =>?@FGHDIXY\]H^] bcdfekfnlpuvwxpyz(,BDHNChostapd2.9bp152.2.3.1Daemon for running a WPA capable Access Pointhostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators, RADIUS client, EAP server, and RADIUS authentication server. Currently, hostapd supports HostAP, madwifi, and prism54 drivers. It also supports wired IEEE 802.1X authentication via any ethernet driver.`oobs-power8-05' SUSE Linux Enterprise 15openSUSEGPL-2.0-only OR BSD-3-Clausehttp://bugs.opensuse.orgHardware/Wifihttps://w1.fi/linuxppc64le if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in hostapd.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in hostapd.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi if [ "$YAST_IS_RUNNING" != "instsys" ]; then if /usr/bin/systemctl is-active --quiet apparmor.service; then /sbin/apparmor_parser -r -T -W /etc/apparmor.d/usr.sbin.hostapd &> /dev/null || : fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable hostapd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop hostapd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in hostapd.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart hostapd.service ) || : fi fiBbE>0A큤A큤A큤`o`o`o`o`o`o`o`o`o`o`o`o`o`o`o]JE]JE]JE]JE`o]JE`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-2.9-bp152.2.3.1.src.rpmconfig(hostapd)hostapdhostapd(ppc-64) @@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(hostapd)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libnl-3.so.200()(64bit)libnl-3.so.200(libnl_3)(64bit)libnl-genl-3.so.200()(64bit)libnl-genl-3.so.200(libnl_3)(64bit)libnl-route-3.so.200()(64bit)libnl-route-3.so.200(libnl_3)(64bit)libsqlite3.so.0()(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)libssl.so.1.1(OPENSSL_1_1_1)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd2.9-bp152.2.3.13.0.4-14.6.0-14.0-15.2-14.14.1`lM@`4@_s!^@]p\O\&@\\ `[@YB@WV#U8T|Clemens Famulla-Conrad Michael Ströder Clemens Famulla-Conrad Clemens Famulla-Conrad Michael Ströder Michael Ströder Jan Engelhardt Karol Babioch mardnh@gmx.deKarol Babioch chris@intrbiz.comchris@intrbiz.commichael@stroeder.commichael@stroeder.commichael@stroeder.com- Add CVE-2021-30004.patch -- forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348)- added AppArmor profile (source apparmor-usr.sbin.hostapd)- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP (bsc#1172700)- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass (bsc#1150934)- Update to version 2.9 * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching * added configuration of airtime policy * fixed FILS to and RSNE into (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * added support for regulatory WMM limitation (for ETSI) * added support for MACsec Key Agreement using IEEE 802.1X/PSK * added experimental support for EAP-TEAP server (RFC 7170) * added experimental support for EAP-TLS server with TLS v1.3 * added support for two server certificates/keys (RSA/ECC) * added AKMSuiteSelector into "STA " control interface data to determine with AKM was used for an association * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and fast reauthentication use to be disabled * fixed an ECDH operation corner case with OpenSSL- Update to version 2.8 * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only group 19 (i.e., disable groups 20, 21, 25, 26 from default configuration) and disable all unsuitable groups completely based on REVmd changes - improved anti-clogging token mechanism and SAE authentication frame processing during heavy CPU load; this mitigates some issues with potential DoS attacks trying to flood an AP with large number of SAE messages - added Finite Cyclic Group field in status code 77 responses - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494) - fixed confirm message validation in error cases [https://w1.fi/security/2019-3/] (CVE-2019-9496) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495) - verify peer scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) * Hotspot 2.0 changes - added support for release number 3 - reject release 2 or newer association without PMF * added support for RSN operating channel validation (CONFIG_OCV=y and configuration parameter ocv=1) * added Multi-AP protocol support * added FTM responder configuration * fixed build with LibreSSL * added FT/RRB workaround for short Ethernet frame padding * fixed KEK2 derivation for FILS+FT * added RSSI-based association rejection from OCE * extended beacon reporting functionality * VLAN changes - allow local VLAN management with remote RADIUS authentication - add WPA/WPA2 passphrase/PSK -based VLAN assignment * OpenSSL: allow systemwide policies to be overridden * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * fixed FT and SA Query Action frame with AP-MLME-in-driver cases * OWE: allow Diffie-Hellman Parameter element to be included with DPP in preparation for DPP protocol extension * RADIUS server: started to accept ERP keyName-NAI as user identity automatically without matching EAP database entry * fixed PTK rekeying with FILS and FT wpa_supplicant: * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9499) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT- Use noun phrase in summary.- Applied spec-cleaner - Added bug reference - Use defconfig file as template for configuration instead of patching it during build. This is easier to maintain in the long run. This removes the patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is copied over from the source directory. - Enabled CLI editing and history support.- Update to version 2.7 * fixed WPA packet number reuse with replayed messages and key reinstallation [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * FT: - added local generation of PMK-R0/PMK-R1 for FT-PSK (ft_psk_generate_local=1) - replaced inter-AP protocol with a cleaner design that is more easily extensible; this breaks backward compatibility and requires all APs in the ESS to be updated at the same time to maintain FT functionality - added support for wildcard R0KH/R1KH - replaced r0_key_lifetime (minutes) parameter with ft_r0_key_lifetime (seconds) - fixed wpa_psk_file use for FT-PSK - fixed FT-SAE PMKID matching - added expiration to PMK-R0 and PMK-R1 cache - added IEEE VLAN support (including tagged VLANs) - added support for SHA384 based AKM * SAE - fixed some PMKSA caching cases with SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - added option to require MFP for SAE associations (sae_require_pmf=1) - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier * hostapd_cli: added support for command history and completion * added support for requesting beacon report * large number of other fixes, cleanup, and extensions * added option to configure EAPOL-Key retry limits (wpa_group_update_count and wpa_pairwise_update_count) * removed all PeerKey functionality * fixed nl80211 AP mode configuration regression with Linux 4.15 and newer * added support for using wolfSSL cryptographic library * fixed some 20/40 MHz coexistence cases where the BSS could drop to 20 MHz even when 40 MHz would be allowed * Hotspot 2.0 - added support for setting Venue URL ANQP-element (venue_url) - added support for advertising Hotspot 2.0 operator icons - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS * added support for using OpenSSL 1.1.1 * added EAP-pwd server support for salted passwords - Remove not longer needed patches (fixed upstream) * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch - Verify source signature- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088): * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch- update to upstream release 2.6 * fixed EAP-pwd last fragment validation [http://w1.fi/security/2015-7/] (CVE-2015-5314) * fixed WPS configuration update vulnerability with malformed passphrase [http://w1.fi/security/2016-1/] (CVE-2016-4476) * extended channel switch support for VHT bandwidth changes * added support for configuring new ANQP-elements with anqp_elem=: * fixed Suite B 192-bit AKM to use proper PMK length (note: this makes old releases incompatible with the fixed behavior) * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response frame sending for not-associated STAs if max_num_sta limit has been reached * added option (-S as command line argument) to request all interfaces to be started at the same time * modified rts_threshold and fragm_threshold configuration parameters to allow -1 to be used to disable RTS/fragmentation * EAP-pwd: added support for Brainpool Elliptic Curves (with OpenSSL 1.0.2 and newer) * fixed EAPOL reauthentication after FT protocol run * fixed FTIE generation for 4-way handshake after FT protocol run * fixed and improved various FST operations * TLS server - support SHA384 and SHA512 hashes - support TLS v1.2 signature algorithm with SHA384 and SHA512 - support PKCS #5 v2.0 PBES2 - support PKCS #5 with PKCS #12 style key decryption - minimal support for PKCS #12 - support OCSP stapling (including ocsp_multi) * added support for OpenSSL 1.1 API changes - drop support for OpenSSL 0.9.8 - drop support for OpenSSL 1.0.0 * EAP-PEAP: support fast-connect crypto binding * RADIUS - fix Called-Station-Id to not escape SSID - add Event-Timestamp to all Accounting-Request packets - add Acct-Session-Id to Accounting-On/Off - add Acct-Multi-Session-Id ton Access-Request packets - add Service-Type (= Frames) - allow server to provide PSK instead of passphrase for WPA-PSK Tunnel_password case - update full message for interim accounting updates - add Acct-Delay-Time into Accounting messages - add require_message_authenticator configuration option to require CoA/Disconnect-Request packets to be authenticated * started to postpone WNM-Notification frame sending by 100 ms so that the STA has some more time to configure the key before this frame is received after the 4-way handshake * VHT: added interoperability workaround for 80+80 and 160 MHz channels * extended VLAN support (per-STA vif, etc.) * fixed PMKID derivation with SAE * nl80211 - added support for full station state operations - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use unencrypted EAPOL frames * added initial MBO support; number of extensions to WNM BSS Transition Management * added initial functionality for location related operations * added assocresp_elements parameter to allow vendor specific elements to be added into (Re)Association Response frames * improved Public Action frame addressing - use Address 3 = wildcard BSSID in GAS response if a query from an unassociated STA used that address - fix TX status processing for Address 3 = wildcard BSSID - add gas_address3 configuration parameter to control Address 3 behavior * added command line parameter -i to override interface parameter in hostapd.conf * added command completion support to hostapd_cli * added passive client taxonomy determination (CONFIG_TAXONOMY=y compile option and "SIGNATURE " control interface command) * number of small fixes - renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch- update to upstream release 2.5 - removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch (CVE-2015-1863) because it's fixed in upstream release 2.5 - rebased hostapd-2.4-defconfig.patch -> hostapd-2.5-defconfig.patch ChangeLog for hostapd since 2.4: 2015-09-27 - v2.5 * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077) * fixed WMM Action frame parser [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078) * fixed EAP-pwd server missing payload length validation [http://w1.fi/security/2015-4/] (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079) * fixed validation of WPS and P2P NFC NDEF record payload length [http://w1.fi/security/2015-5/] * nl80211: - fixed vendor command handling to check OUI properly * fixed hlr_auc_gw build with OpenSSL * hlr_auc_gw: allow Milenage RES length to be reduced * disable HT for a station that does not support WMM/QoS * added support for hashed password (NtHash) in EAP-pwd server * fixed and extended dynamic VLAN cases * added EAP-EKE server support for deriving Session-Id * set Acct-Session-Id to a random value to make it more likely to be unique even if the device does not have a proper clock * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan * modified SAE routines to be more robust and PWE generation to be stronger against timing attacks * added support for Brainpool Elliptic Curves with SAE * increases maximum value accepted for cwmin/cwmax * added support for CCMP-256 and GCMP-256 as group ciphers with FT * added Fast Session Transfer (FST) module * removed optional fields from RSNE when using FT with PMF (workaround for interoperability issues with iOS 8.4) * added EAP server support for TLS session resumption * fixed key derivation for Suite B 192-bit AKM (this breaks compatibility with the earlier version) * added mechanism to track unconnected stations and do minimal band steering * number of small fixes- update version 2.4 - added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch for CVE-2015-1863 - updated URLs - require pkg-config and libnl3-devel during build - replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch ChangeLog for hostapd since 2.3: 2015-03-15 - v2.4 * allow OpenSSL cipher configuration to be set for internal EAP server (openssl_ciphers parameter) * fixed number of small issues based on hwsim test case failures and static analyzer reports * fixed Accounting-Request to not include duplicated Acct-Session-Id * add support for Acct-Multi-Session-Id in RADIUS Accounting messages * add support for PMKSA caching with SAE * add support for generating BSS Load element (bss_load_update_period) * fixed channel switch from VHT to HT * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events * add support for learning STA IPv4/IPv6 addresses and configuring ProxyARP support * dropped support for the madwifi driver interface * add support for Suite B (128-bit and 192-bit level) key management and cipher suites * fixed a regression with driver=wired * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management Request frames and BSS-TM-RESP event to indicate response to such frame * add support for EAP Re-Authentication Protocol (ERP) * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled * fixed a regression in HT 20/40 coex Action frame parsing * set stdout to be line-buffered * add support for vendor specific VHT extension to enable 256 QAM rates (VHT-MCS 8 and 9) on 2.4 GHz band * RADIUS DAS: - extend Disconnect-Request processing to allow matching of multiple sessions - support Acct-Multi-Session-Id as an identifier - allow PMKSA cache entry to be removed without association * expire hostapd STA entry if kernel does not have a matching entry * allow chanlist to be used to specify a subset of channels for ACS * improve ACS behavior on 2.4 GHz band and allow channel bias to be configured with acs_chan_bias parameter * do not reply to a Probe Request frame that includes DSS Parameter Set element in which the channel does not match the current operating channel * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon frame contents to be updated and to start beaconing on an interface that used start_disabled=1 * fixed some RADIUS server failover cases- update version 2.3 - removed patch hostapd-2.1-be-host_to_le.patch because it seems obsolete - hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch ChangeLog for hostapd since 2.1: 2014-10-09 - v2.3 * fixed number of minor issues identified in static analyzer warnings * fixed DFS and channel switch operation for multi-BSS cases * started to use constant time comparison for various password and hash values to reduce possibility of any externally measurable timing differences * extended explicit clearing of freed memory and expired keys to avoid keeping private data in memory longer than necessary * added support for number of new RADIUS attributes from RFC 7268 (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher, WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher) * fixed GET_CONFIG wpa_pairwise_cipher value * added code to clear bridge FDB entry on station disconnection * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop in case the first entry does not match * fixed hostapd_cli action script execution to use more robust mechanism (CVE-2014-3686) 2014-06-04 - v2.2 * fixed SAE confirm-before-commit validation to avoid a potential segmentation fault in an unexpected message sequence that could be triggered remotely * extended VHT support - Operating Mode Notification - Power Constraint element (local_pwr_constraint) - Spectrum management capability (spectrum_mgmt_required=1) - fix VHT80 segment picking in ACS - fix vht_capab 'Maximum A-MPDU Length Exponent' handling - fix VHT20 * fixed HT40 co-ex scan for some pri/sec channel switches * extended HT40 co-ex support to allow dynamic channel width changes during the lifetime of the BSS * fixed HT40 co-ex support to check for overlapping 20 MHz BSS * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding; this fixes password with include UTF-8 characters that use three-byte encoding EAP methods that use NtPasswordHash * reverted TLS certificate validation step change in v2.1 that rejected any AAA server certificate with id-kp-clientAuth even if id-kp-serverAuth EKU was included * fixed STA validation step for WPS ER commands to prevent a potential crash if an ER sends an unexpected PutWLANResponse to a station that is disassociated, but not fully removed * enforce full EAP authentication after RADIUS Disconnect-Request by removing the PMKSA cache entry * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address in RADIUS Disconnect-Request * added mechanism for removing addresses for MAC ACLs by prefixing an entry with "-" * Interworking/Hotspot 2.0 enhancements - support Hotspot 2.0 Release 2 * OSEN network for online signup connection * subscription remediation (based on RADIUS server request or control interface HS20_WNM_NOTIF for testing purposes) * Hotspot 2.0 release number indication in WFA RADIUS VSA * deauthentication request (based on RADIUS server request or control interface WNM_DEAUTH_REQ for testing purposes) * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent * hs20_icon config parameter to configure icon files for OSU * osu_* config parameters for OSU Providers list - do not use Interworking filtering rules on Probe Request if Interworking is disabled to avoid interop issues * added/fixed nl80211 functionality - AP interface teardown optimization - support vendor specific driver command (VENDOR []) * fixed PMF protection of Deauthentication frame when this is triggered by session timeout * internal TLS implementation enhancements/fixes - add SHA256-based cipher suites - add DHE-RSA cipher suites - fix X.509 validation of PKCS#1 signature to check for extra data * RADIUS server functionality - add minimal RADIUS accounting server support (hostapd-as-server); this is mainly to enable testing coverage with hwsim scripts - allow authentication log to be written into SQLite databse - added option for TLS protocol testing of an EAP peer by simulating various misbehaviors/known attacks - MAC ACL support for testing purposes * fixed PTK derivation for CCMP-256 and GCMP-256 * extended WPS per-station PSK to support ER case * added option to configure the management group cipher (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256, BIP-CMAC-256) * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these were rounded incorrectly) * added support for postponing FT response in case PMK-R1 needs to be pulled from R0KH * added option to advertise 40 MHz intolerant HT capability with ht_capab=[40-INTOLERANT] * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled whenever CONFIG_WPS=y is set * EAP-pwd fixes - fix possible segmentation fault on EAP method deinit if an invalid group is negotiated * fixed RADIUS client retransmit/failover behavior - there was a potential ctash due to freed memory being accessed - failover to a backup server mechanism did not work properly * fixed a possible crash on double DISABLE command when multiple BSSes are enabled * fixed a memory leak in SAE random number generation * fixed GTK rekeying when the station uses FT protocol * fixed off-by-one bounds checking in printf_encode() - this could result in deinial of service in some EAP server cases * various bug fixes/bin/sh/bin/sh/bin/sh/bin/shobs-power8-05 1617940992 2.9-bp152.2.3.12.9-bp152.2.3.12.9-bp152.2.3.1apparmor.dusr.sbin.hostapdhostapd.accepthostapd.confhostapd.denyhostapd.eap_userhostapd.radius_clientshostapd.sim_dbhostapd.vlanhostapd.wpa_pskhostapd.servicehostapdhostapd_clirchostapdhostapdChangeLogREADMEhostapd.confwired.confhostapdCOPYINGhostapd.8.gz/etc//etc/apparmor.d//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/hostapd//usr/share/licenses//usr/share/licenses/hostapd//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:16058/openSUSE_Backports_SLE-15-SP2_Update/5843becda614a678af679df612e4d1aa-hostapd.openSUSE_Backports_SLE-15-SP2_Updatedrpmxz5ppc64le-suse-linuxdirectoryC source, ASCII textASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=aa90f80ede2e1d520cb59fc4a87a78d8ea7e2f3b, for GNU/Linux 3.10.0, not strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=fcbd40604e419d73b0db6535b8a492c0c47962da, for GNU/Linux 3.10.0, not strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)R RR RRRRRRR RRR RRR RRRR$G*ܸ5)y-Kapparmor-abstractionsutf-874558f24c5d6717c716ff96a336cb6e5a194a6ccba8dba23a9f7b1ef248fb636?p7zXZ !t/]"k%f'@K^TDHl\_ ]_IL C7o OTKK =gj+&wϴy,JN#>۾|[10ˊzlK)?Aeg,ŜQYF>.Vl\G(Hr͌f u4vAƯjʌ**,^I])w{bx:\O q'W Yk8 . 1*D|u$X3wS&jҧ8Ƹe~4n# * T샌RX7ǀw&13 î:$5J՛[DOߖoXrGf}y"?=27\%P^9{Փٛ" _:r.Fzyda$mu~+$Z22H^#n(.´>_@ߑ䳵P5  v|{I "a(X$^$`t _&( EϣmȪ5*86Eb\d2MxšW*zF$8vAI~l8yE9n}(-2?bch_ i&ohyp5o0sAi I[Ɨ:@z!KPn~I.쥎ߖxb` \QSsMGXPpi/WnDYY#O:kv c :@dLF͒)|1ɮԈ .G\mA?$2UFNא}c_r оl$EKf(nk\4fަmjBV'\<Z}IF{&yy4",DQ~qX>> 8l/3ܹ[o{!bLBC&GcC,2H6,FP-+H]紵7ڭ/ҾJTDp7Ŗ0͇ Pe-"dx-LTKө0EDCzLcU (|]- SH#ooNȰmbhoi(dDqqG]+ sG47pWya5Ln)T }ʂ#y\KVxq OLv +2pص S'4DZU?j3j>AR$|2lthQ|2~_7_-NYM{o-[LZi9dlo㸓x|2tp5Sg_8k`oeq:BxWxaQ`<W ,ͫLy)ʫ D1˫[s~lAKSRܥ9w솱;iWMhrrqI%@T@&#bO_G4`;(UxwlΔ m<k,Xy]oIfh`P5Px0r`F#vXhq M cxF3ӡp!5oUYv[!RC G 4\P#1|n-#lDQ"P"+7Rm:G-,'Gr (`$* "_ aLfs&3 >%,UIe8{LKT ̭Eig 진V.Ob9^ǣg!(D)ytV^)99-.XTL؀&=[.ׇHFgřH"u:9h1?\P t`Cp`3V$M, JPŭODGuklEa e%.ұO.,ꥁQ#uMnT6KMYQ6A()$TWzgt'Վ:B]Fn47ZMZA=2A89 5 Ը>!Kf&ijhk#E1V2ZzUS~J[27vƜdA{-SB4h|#>}3;ewnRs.4\cGog~`XweOĔ^QnXgX3לBG.}TGh ` +cK1 hֽu,–o- l";o]F$qӼ|Ts—ѥe'+h#cVk==g%d1=\Lxs ͪslZ 5sS|;_[_"#Ҙ3NJt*~H#>>_}ٺ/F6X d<4Rf,\򂍓!dكPxIhv遤F_HEF;>K0_(| b5"ј9Vk2vp{^qJ;ȦN%h$d Gv`kPe ިj}h> h[fI|D.33Sw:QM] BSer(_H Fyc9bwk? p<ߍbq>> Sot.i#Q^u&HB( NaՅPz/}=.?˜UF2io9oS 빩)xqBey ( CX>HG ՗5UH*Ȏ_ex 3Jo\[rP&g\h @<ixIu,_߹/k _9scd0咿ntx_a~rtMY6"[ wte 0ۄ:k2O+Gg@a{%9*ccv /e>tU73کkDkX:,.#c̙* tXir2$=YIKIV Q0#ga<-M%G*Հm9zbSߞ!89,Nv|(yKO$̶1RFV^gDƾR3#OMvD ΂;{'PKK薗^J@[|?P7@! ϣ Mp t)a7++?Ruf8 3Èřn]xwA 'l͍OβަژytR;;d>ېHm[|jPSyLl'>RK\}vJՔYOۋK{bm-6v.&Ff,vtXVZjMySKV48 rU Zg2qzdi.})rϥe.>sͦţX*Oʏ(LGHH~}2hP??7ﭶoPK!WдQ@H+Q1_暁<=͚ $=yn: @7^ׇI ϼVv`^n1IL E|6ceLs+YRjD1HņY&߻6lL\CB_Jyi~m{I(61j66X$^\{4gcAxdt4Ki`&^ArY3cGe(^'s~_R?.؄dw:{- pa*pDSiBɪ27<[ם $~W{ѬZ}[4/9ZHE"%~C˜sBoMW> ﰝ.(H_.Ix6\5!8RZ|0@ ~>@]ލU85U4 qsaU13`AAm,3M=qNo6( c nFTgRUg|.H3'k0aj6T>u/_ӹy5 N8{M&GYZ$cfZ}I D'~ϭl*\ۀCĚ&-Vm#bi6-nL`j\^(ƈ1* XC \Px:l1L~G-$8y%+.sZ/yߒ^aAmJ(=&@i$5'µ/s0}_S| Ն&DUF6Erm8ԡ!Da\ǝXv0W͒8#"]8b*dw!s%⦽m 0ͣE˒ >Nv-L@bPJŃ!nSj{4MYwHM-pO1-c_ kG>CW#l@@ hEn6WI_r9K`' cGYX\dKŻi˘WUWC18H`ǔdo% >1:܊fHe.YJPR+yr8pEtV$:%`F%Tw0?'fZ뻹&<8voDYb& UHHf@,`+6τ?C̪]+" AuUsIw. $W7QX!Ȭ;b3G%tCkq*N;sG꣜+X#ZzZl_P2,e,L%odڌ u`b3Jtѫ$a_}9a|w1蕔ݫa-H 5=JI]\ݬ򎫹E%S}4-T;,O{{jS<)%N;_ٜ,iB==YJJ *`5N^FN~Q]GT{\bHM%WNO})g yÅe(XG] +J4 *Ww(cF>VT'J4j REQ ! })4kPȚ Kkh_IrGoT 5jF10nKj;q҄%:0eI/!ySU8WUۭ)%KshS!€w=lw<̑O[OΈxz6mmjKŻ}12kS&gBʣ=Y @ 7"o"{">QIVy4 %ǟҳOh>)Wbb]ya.9:9[JZtI){ҊO1yy.+e>62JSY`{cA!~ ßrd3#183 U/<&yΎ7n 5e |8|ȌwS ?6m>F^^. K#W4}=-6ku+S?|mnW(a$^8fl褵hja658(n&Fy .{F_Vҥ\iib`!Ѡb۫UVYː^y9?؁Y#TJl1#V5cQ ML^U!xkVq89DE+{Jnk8 )=3\@fY\ 0x35a5,j8.q:0 mWS: vU$DY4;3K#dDm=I+H(fې25ՐܾJU Nc,x=H~&=w͢ӹslÎ5lzm*HO5pv`hD((`d&9ۇ *{Tf :[U;rn@knESt7^LDVo_ꙛr=hvkXy,:PE<5x*ףߜKDי4ǔҫx1$@%Jp__ ؾܪZ)MP<%PǩͶ{0$޶97U;$/ÃՑSFjȫI8%xlQ/ѝ=5os|Ͷ /{*ɔ\b-m& t@"K ) n-z>ZPB4%Uw%m&{:M=џgg^SԘ9Rl/Q/SWSeJ3@-5rNIiGa#Կ$N A+5y" +ھ_ȏ~*=Lu뎄cq.Pfx!ap{@,>c ri^.-[ȯ;oO^ Igj8-$$.a(bZbIkx%/c{Md }+7w`-5|cn-PTr"<؇v>֍t:2fsWȃ`>qD@̔;KY9o{o|U fN+Ȇ+vF&^Ԃ.3TMsu~\.(o`,SL9l)aūx-[AS}= ь|Gp-E1@|/w@lPŷUgU mYbj",%v/IWa&xI'(HY0ni1tq$-$\0{H!|E# ֚Hm0B&u#Vo+z,*bߔ!kuxܲ(<뮠v<}SǨ;߷yl\EX{nXb<&*{Pl*mUtBz Wb{ >GeFktC4|iUh8C~,2s`tc@\ .HvhŢ82;pz,5ch6dDgKURq7j Nѿt3l1]֞Ul@jj kcWBauiChg"O{_ tk`b,Qd LS9L_|gT]RM)ONay@X{J2tIGCZsd*S,]% B*"V͑ChuD*H WD q{htu'}=y&*LjYï )4!8;R=I NU>_`L7̇,0ew2v2 w5d^Oma Wbm9[h;#i|zpڃyl&CK@m XCO!2U$D߹X0Œvx\4KOq(~I~_1g&[,s$8liVGr\1@3 ┢^(z,E.oUݎHZFK;S0gJʂAqWegbpWC%`033YD)st05+FOS 8Lk⣞+(ۯ2iskO0 2lLL"grO3O4 7t}|b0F69 2p~e>ցM9\]rzYbB,Or8Mprdj"Y_HpfW'kZjxӗ_E',/yaU~"< 9 e8c\U+{[LH.'vǴfSZ2,nk2Viuq y 翈e :KXZ̓8TOlZh bn;;Vu+cՋXOwNHPPRt.ݱ6h#mUNS+u7וwjް5SH~fTf&\o:mjʃܖ6w2yΠw}5B Z- +gvF*j1WQ|b>#wvKhyGr=5?^D`SSA% W~U)";"UT.2jʳ;OMh[C$x$)/rj hv] '=e&pRAAc'6p$UUtپncd]R5{xҀME}q )V.O6'(Jf-eˑI_AfOoI)x(v@{^HLp˕-O2 w~tx$%@W{O7nk;u}'H#nӕ_#-UBB%(Oq7Lߒ.ʂՒ鉔/[|g0fY߼afȞe2q4vekJš7[S,tcD-FjN P+?\>8\H]QSAx)W ;)W&D#L+^⹈FuiBcWRhbP֪xBo[bǹEf^㧗EϢ" v 8j܍r02ӈ %NL Yq`~-M/Ol|B ev@ x(N6D5'DFNTvt) '!?[Dl6y8ϝ PR3qm|J^ fKTS^LH0>#0Cc{ű$;_D1Y-5t$oFf"m8ViH0N* T~`BXHqW0ܹ 3Q G d])KلGu#5[ r藬x6`³pǧxĔ#8;R?cIvx3Ebs=`t?Ubn;ZA:FNn:뭚̆Rj73R7 +LvN=eX2wIvȿmbO5%7'[ٴ2Y/Ϙ-+PCC{KX 5_VI}ZXc&$|\24c(!>TɮOZͳ̅+tzgQ=^y*bvHG>vw![04W'g`A$/m lRj|Bz3*1b%QU5A-,ټVBniXI>)|Ѥr@#< 1Ȭs'f,S$r|a &fP̌h9J2rK&TjL^}}]3p!bq]LJ`و/O.8l $77jꔙ. ("mkljH\_2PO1X2O(40R[\{Kr(h䔢Yk<8u\0PRDkbb{ 9flj(By4MysQhYV&e&#-gW Ne눗UmVZ G@gt5| !'8o5k6.[WEa񠛶 fjA"G"ډE:oJzP=s=(zSNl@Z%4*ub/J|ԨnHь:9-mIؑR._|12א-cO7.)v6A [-f/ڷ[@[-Wo m=.WG aMeSEIY63d:t O8-Vp؄ 0DuxϾfck&nV+U@l@8+Y PZDsn]tCtgv"fFe7 7khgveqz@{`'$}/:i)yZq30N'MI*ٔL}g32ܚ'bV`vtsF[=pg%8KTE(Yw=F!T#X%~;R}~=$ivek!z]Q w<߁y SČ)XyJo[l.-[am5!GwN$g\YXlDr = '&ds ⵎ-On̊;Gfɐ(V&]GBqaFx-Q98ƌT!/Gt~G-:&SةQ ݁h5Þlz7D/f*SOra>%U/s=i>$~YmUGcwNP|boX'@y=FLC:{gbAGi8p7Lo=]21K>dQ:^wh0c-/保fϨj47v^f?/fەN-;Jwm ,mvOx U-g-B!]h #dѯ@,y@Ml+CsC:ժ;JugֻO(^q?U=jZնXX]!)]+q<ǦxPO5Vgߪ؛62Ȏ"a*k-:^jO_C2rʴCI$) gd,E`-ش TIWT DSFC|& oS"i]ЈfwipԮ*f(jv*4n#Jhz72-IɢȄO[Nh{7^2jA,Q|A)rGN|=d)&K260`APO k^0WL*>rʄrרqATajRW[,ʢK*v{jwKNj.@\[⽴a)>"?-L7.G_"#lX tLJ{>vv/8߱ I<|>:Dyu*zUBX\|duw&>p ꈪL?Ur ,+e=զ#;4} ~-ZbO?|"A aGe7Y nb8[4ن B1 ۥgJv5IV9A`gЋvݰoNSL,FؤwLKcuآr{4ng}Z_ xHO-+*jj2\R/ }FGNNGG.2^ {/^S(=|UL0s~:>~RZJM!ϠQ& Q@cAf'*/^UTa[3\6s0i^c GmiȖ9 }oiČ tS#xECHɥ>̨gܷ0Q+!1\|}pg#B7+ tF *^/([z0GoHُJ:O@| ~j"q('LMUz=?!OGڈakCd_ېS8` %oCo5v)D)}\LTd0m-6ņf^Em)|W8lN+fn~ Sz۝|8Z"{Lw΀` ݕHDUy󧌭)@3ecT Bji*ϒcǁbKIΪ.Ciɛ6|eY ʘyq3` yޱxܰh|&>b$i>]7vxr"T1Ȣq=2ՙwh%V^(_ 8T:{"0C@ : Ǡ+W+ן/N+ʼnGƗs.qG)]@  ٣',_AY$ ME{FC=$oSbpjU#yWcE[FPwKvSC-v!+<@WUGP'/=_xs~fЩ;Vo(Kp#KRLFrB:4uȌ'5={-?&-c.tWx')ЫX<5f [f( i죅cvAh9BA5/tIxC2: σL$"S+T62O#7sVqY+/s&>T^-0 P% F~ @FAbwO) fN5tZfyʟcC8;b'Ƹê'#b.T/APnǛ@c/s_`Q99)1Us>N;L}c-L}JN)gG2D PBGbC5{D&)8 rDz=tAAt nAp3{[`1Rc/ qoaZY1LQyj"iUsNP!&6jɇ6$hA5OPJ/rrd8:EդZWuS.t=d>F zUNe [72Blʨ&P͈,bk9Ҋ+qp<"3jWh8=w+ؚ_yNHBǟ÷H-IJiy%0$ud Q%Ś۲Ofp# joi93xm1II?p_dPQ?j95 cu5h^jSds؏G a@ߊ m)O@\?3HN#х;he \>|۳# /TmLJ$QmF~_ rOo/lM2L/T6LVML\Rn99/XO۲9vQ߭( ( "&,w&5[Y<,t',ES^~ #,ƏWTsg?ò,+NWm^Ժ`zۨPTFqN~4BSO-\b~JWJ kE4*Wet&jk#?^(3jl|(Y]? W{29m5 Nl%KDn.A@`ؤ.qeTnZ +({OQ/G!ܔc>{v_e*<,:/h6~FpL'4DBDO0N%N#`p O:CվwRR\)]f=g0F'ߧԢbET}\fʛY {lˈ2ak7O1ۨXv_  9q@V5:#~6?YL+e6Ogѹ3]_\ I…8}g YBAmd:AV\i,BxFacle9&b 9$_4Dxrbۼ@緄,^4DWQ>JAHD7꠽E_ ̃YAq>D{;o}Қ kL_SulpՍJa1BKvO97CoEw⿽aB ʩ ǬzĒRnnJOҏb=$b4FF^]vȒ.G9ӌJf?!1eRN7!Ź g:J,걍mށDDɬy\֐9Vcꄯn}/ֿD̈Yզ\x ^0Q}B{\=ne/x/SwwT{%eP&ZŦ |pUON m9B|&uW6rE Aς( 49էfe0.B]MswjA5x;9xsPq:Y4/I7'KCD닾ꀨVj tRr"%/ޣ+E-&fjCº(a~w |*)`*czCr OSׯH-A@L/6O%s,ެAtVkcJckEҺڏ\ e ՗f-dGL$كI1hU>0͔_sq asKbp#R"T `U > MbT؆?X# 3D= W` H S#?.7gܭ$i iH"\ \i/!ysA915+"] R lFSYP-:)Nx%;l|b  (iQ3SRvFhnEx,vW5wF[Ѧ@5<ɏD|hc/ZwOb"3~2[cݗ=M1՟35 U]ha ɏ WCbS{zMcɔ3UDq!7E(|_'p Gۆ"bd.}KѿB;ܸ[cl?`D˂=G)hџVC%g?N=ehؤ^Ve.ЫzJ솛F7t|ux`Q_H$BY\ XWعI O֟z)K/65W+ ,RէL ;mzܥH$O8Cd{ 50)O2|߁b!)ŋp.NLD,9jC&v81 Q%􏁕t#WSsIt^oo$7`kҴNS?DlPЃ{4}$Mӟ+lB3W;I n,Яbd~tB a0G0v9aNʾl{63_Ǿc = [#}\ N$s3GI #74GsnK jG_[p+XL9_HK_ñ7TtiSj) qͪԈZV4TL %P8,Oco~sG wfh3/b֪9a sصf3 T*b<̓d7nZ}_ߛ&%I"ķ`]QW}7e9~%o cX`!hѹg͌th'&թ‡%@EV4?@ gJ u262<2XW>kq+V{);#\3fP16\KGk/15/0OtE WB0Q6{h\< Gg J_jxFQI|U5r~*PВ Y*6K!\0ƫ7"` dQN lΠi@eE5Ф[ GPVF=o̾_o=T7c%8trMfjsBT W[.;NG% )&BxS ӱahOmó[f vE4C;}xޡ31HԴ"guRjH9R1Ȣ-7Stv`I4h 9Mt $`Sh&n<j؊DyV;W ? Y,}wo_zB:%%9h/.%S[jWj~X:P.Zð^2 cKTB4G?kw֋!@hX&B]UVx^5{13<*IJj$H ~܄"H ]6'%B;Սh $IH9BiKs·h*}m|8%50-I 5.(UCv2`w>.kNj[HNVAs\K ;T٭HGϋJ.,rswNH |co̪)a|j)& ڒ0QF`*RK}U5̴ǥ9&$t5 7NEM;]^JkcH>4zû "W1ꌾ7֐DT_DjµȬ YAD)}4vN+;f=KIKq; ?[[YX]|,A${P)[|Pݳv P66?X:a!є| #(ϱ0J?1B J#0a'T*XY #ʦ@L1,^-dV4n,=# @y䓼óiy;"Dӊ(H~B_vA @M+[0Ia.q?"zJJ bum`DJnfLP]L!x8tkٹdNXTf1EJ,JԳp,N=L(8p-嚧o+߼`5qDP7 |"Ӝ`G# "({Pou CkjA9gEqsL); %?~3bčD )3e4DŽ:8$wvN." ,FiXNYhp#]Na8}"~*])> =67.~(m3t v>d{0VKᙚކZ‹lS,j}mcs.s&֔՘HďheuvXť1Y[ 5UQy )qj+T,F!Oוe3=P{(i8 z8I'm!TEW͋ 'l˖(%5&w*b-,qxgo<2āWv1VGM;Xo}jLe"E&I~7_)_S5yJ=H]8h`n&t}nc-U&E8#Of-u2iũXtb/SJ+9ܬ4" ],XM'PauDcso{=<_nkm+VejxN+~fXl#B+Fš|!箠Ŷ/f*1Ml2Pqw0"MqKSSl;HriaP7p-?xH tT5+E©W+ϛߩSq)MGwnT41{C]ILwǡ64./.2aqǕJ~a"M3Eg%ޜw?c&|kpPI*nak^dD(2/~09~ZH|0S`WKqOGY.xFL1qQ_sItɍPv?iV9XٻZz-i h%14(S86|rFMDci֐(|?Ԍ+ >ڿhJ=H0 N;q4d@Zur/ 60w;Hɗ-Y{|Н|U&ެPVFye9hZ]8U>3Y}%tf4}-:v$t<+Whl <&R8bp6yI8V7m?me +~pÖ0wwi|vIs :?o'Fn"ZZWǮJoEmʊH#Ysb+âkqK*@t6.ph: iPKzK 8v-`erXedCL`W?b^ż]msu{F;E-UE-AK-s3=/cRaA5TnpHFJL+91Z읟=$9譼T=CjAb.a_;F{E°oa@¸g;ƎI2i/!~O2)ˮW#3d|p<7]bhC,95_(hăJ 6DX Ȕ֖7uE_tL^#B"U_/mXXl"F7ȓV)4Ē*ҠX(Л-m ;iKtClc_|6V˼?NRfkz2iJlEE bV1 [[K acNyO70븴`Yd[sJИQZ,gWIQ~0[g9 0dXAZ\LX]\bZ _6X=%Di5Jg%_+F>`CAY#y C$6a} Yx3Yr^t&Pz͟OǦW ǹԡ6qrߵ+bp rq\*vitf&)v[!ђ yF\>(L@oÌG1ϵntfnJVpIrC܉6=In H@,тWr+kppxE Qf\z3Ҝխm傐YD~qУ= MEP䫎W1#W% NcN96IT%(lJ,n.@1T?(%Om)r u(j kHϨFH"qMI`3n,Ҵw_`^ q`G[XiW(Z832?|IqW jn3A_|LtThJ<6t/IYD-dT}'ǢugkCdޙnnZNvءdG##Gr< f#Fesg&HHc^R.L;1 fr=S |N?)P3&’I'22if R䑮3/L5Ϳ#Kڪf$0 ϡȍE ͸%iwmظ- h2b{PHJڎɒQWEMgJ? %𐛉$ UtR1RH}h3ZmBO\9VC4XeOŐ Ʊ R yWRs ri:"$T?&Wkj~g:1[9ٖ|m6Ÿw:>!̛:AThGxJ,ȹ}*X)Nbb{^>u'ZbVHއT8Y'7EF[N:kr}b[F%}Qe@ & W3iAY-fIk/ yyKl0l5`T>~08ǫ7."AeRpoQxW^a\dhǶgWܑZzy "_k:.<8d`LiG)E KJD_spfA}͔Η?#R~o4;^]lZ7)P%Y]/vKv}.Ђlp7Ș愆{<$oJɳ^T7TC 4-ByΆ;4EÃ8-[@9szt8XLٔmNj7\biwT+5h4]f @)I&e m70`> j X1k'{T  bŠChaӳ?`3 `@?,,o%ҕ,c+,?<7.[q-ZxbrsPc+*\Ϯ'5᜶v?vx: ~&df(ȃm0#~P̺K^p1x0I~ΧY|N#mǍ|ZNh,1V:"`7Е_J_vO  {| MA8֯Ոuq IXfY螣7n2wjd՗@c]9OuVeelM#n]*e5Yv~~j_%!Je}1QPեc] o=9U"A'7NK (s]N Z8} RŌ!\~(Ds(EȖ'BHƬEX~M"lldCu%odɔ)m 'Z[h̲TGw.PY0ac׹Z >Ti0s &+ӨL|*ky4 H9LwtVA)%Cz@AhYx6}Ҽfqœ8VBdȓ #_+%>_޹D-/+#"~Fu~֫E`y;) B=OXIdR.xl ?~c9Wv/YH c&f P}+&yق*kW"[zdhLf35dzL20+-K.>U'+t`OfvIh; IxFCLmP{U*5B{ax=ƒmMS9a>O)½jN*]$@f{8mx=hOF4;z"'CSJQ *HaxxwmAh2RYˀUQah:h ) ݢ5_A@Y+ V2]b=n6,bmޏ|o -V { Ƿq rZz|u%f]}x?_O%H QV%_1Q?͉[V<@\~eWX 1׋f.R>.G!Bk\\x(Ek;6rmGР2HmrLuZMXW 6VQ cc<DXOZ+T3Ɖ\ヮ=}3m$Ekyk=#+z(n}'m&i0)_I$uflcLe=$}0"eb'vEX{ A$y[ Twh`94_EWRTq%?Wy2q:d>1=ЅrW9ЈY.>lyn1C_<ܗ\N %CɑB~rEso'M5^bmCR+ulwrlI$3S/VE#- ,zH@ X3 i>_X ]{|֦ppP3X&!VgrLȰHh+ѣkֆuZA[嶨k [m E%ƁcUDS|ӡiC](v?>k@?{tgE@m2|LG{&@MT= Ud:ӏ{r&Xȡn6Bs<͙sz,P<6G2tS-[eye$3T Xe*+!.stExv?R3U3{$SNPr DUTҹβn#Z:SZ Y( QźG;4B'zbuW@Jӫu@һSneV+9N+ وyiWf'jsE2 Vx]c[3L{@' 2,?\v Kע> _?V;W:_°X1HZ]; |z1 ˡLi-Mt&u=X6DN* 8flxZz;y Tf7V dusM@w޲mCq\]t%pQ N!%5oRej.'\Խ L1 cҗPRD1zXҔS:0< ?LWQ i x?%\. :EӷsjG^oد{:aC -_FNz{/5T ,i91pdPE ѐu^^˶Б݃+]ī+UPy'Fד)@OW cɹXS@DmQqTqo$!r)+?W*'dۅ1&\)xTƃ@NÎE5_|W_xm\S|FuA܎do(,Rde[GXZz+efк"W@/~7~ d0(fȷw+B"l] 2 q'8弇Wgw}X-2J`޷btr PCb8T_TV!k IhG{SO1fG"|cni!b6Ubk%ϘHqZV&TfuA$Z8+Qa1.!/Cn4\^]\}'-s6_\&jD#c+H1THQ =08qȓ&~w.n=bZ'0Iߢ ۡ$sYP齞mN;jϦ1n "!z kLh,+?l*-򣥋QZvym'4[PK(-;yRXM5Tf.^ aaNM+$³&CQ+btC.hw@ !$pM51s'ee<.޽F{N4Sޥ)&AUvmvJ>b38^hAmIg H>cf꘧j&z9)TJܭG SFxm[oRC͠W[vN=V ![5/^V8V>s.U{?1-C0pT*X `*%VI*Rj^%o0ǥ)y $ib5> 8F+CAU {gh,]ɗ%AmG"ԛ>Iw: 7>لM`; h*!jUahil?OtB8qK0NYo6:SM0!yCO b#x 1},V6HuwmFmm̽"!NŰ>$OGUDLŲpH6u#Qͤ,xG@41ل29v+W,0̑jTҙvBłĀĊ#9nZS:8- x&e_{!yTw:* ~_'0֕;Aj*);m̺l`Kӓ/UKΦk|ܙ|!ݑk`k<خ%dnw[hi  546%ҝȚO?wUbqH@!`#,?kO"|`,bvjpLvh-&DB5T=ǐ]}[Yg:FWC*MS<5zs&1@G//⣕ qm@@(qi7 mr#ōzGrjIv 2GOpX%s/c0+w ͓m_0<]_0V+ Y錝˽ "oL:#wy=0`g+dKւ͉*U9}}J}?-DҤ_Ʈ=piDT1] k'b.[2i6H=uTs5{ͣL|V6V^q)5«C,W̓n~.IbpY-iKn\ʻ7]$JY̓3Z6\bfKZW)a>/Bp=GeltNFl$A)C${?jϘx0?"]ݨ!x;K29J&G Zy,F* &|pc>^:Q]lU׵#t+%Nƒ̓ޗ}P!Yٖ#}x9'2Jj$wR9%鯋Ab j7t! Ӑ8hyt0l\Pb(L3Lsv?r7_ߥBi$d'$u>,u:ʖu\D$1NzvLCB6_Իۖ3-,}г> c䟬"삢yQwg0ΠY8>diw+\Ђ\T-/P0jГUrD4>QUtqW-^sجI ~V+%+LTV^,i &l_V! /(+].GmQ<ׅO!:"~},$Hyb!%?Te%JbMx- aw-]ۤ8&(ܟ 7_ˆCJ 2@A7إٚ X|0dY-V̥ˏ5.Q&}'KWʻ2 zmﺅu#ܪM[Eː_Bjh?cpܑ##B(,=/&gBfߧs¤<@Y.e/.Lju_6r{kXJrM:3nMcBD<_' rvf?P|-oZef.)Jv59@*$NM&;0ȭ?. pt~b~pg}0w`NkYѸ[Mpnic(^oR|)g5>fhh%6 j~ &+p{{N ;΍cYODu)%wl)+m~vN#^$x+RSsL3]ӻP)۟@ENTsZO6<>^Q6;3>8y˜ifi/M@.;*5Ǜ3rd<|׍3 [4LGx$) H <$\G2=nP6}\#py5d{_Kہ~+lE 繏-11M6i=|ŒLHg]a.{(Mڣʎ`:Wzpc ؤ4J>vp7×q33hZOZˑ!_v,$ o}#?>=|;(Bdt'x 6wDpcOSi^6ɓu[>8臕iado?iI>^|$8HҶ\Y>PPH삩@5M=C]8Os'aj>B,5ۄPk֚.qMyy>ٷy( Ӆ\3qcjqkupW!ೣ<a;KnK k `T7_Rd7T`K=1Qnt%x{ds^lr< SsIH.Ah>P_w`ՃE?iqjUlL˪xJ28n($:htʴş"+ niv2'`\1`ğFklP`" :V/ЩU)YIF3s%y?u}XE@ s,HZd)𝯺\TJuCp(e}ڈ./n <`IoN2ascVpJ,ri5z\?TU[>ئN,J.Z mѦ\q'֌uK 2mDa<۩Ce8:jbFA]RbTXM}vL>IuxbÖ*PM2,*תj@2O*3 $Z\m^w#Yڔ!OIK/4C.mVwL'JvK]ARQ$]AGZl:0s] m}ʌnaź<qnpљOerʇ7FlSQA$юk}o6xy|\^۵f>>7'#d_Ÿ@լEB0ʹoJ\-&7rJLwf-[I/' xq"UOyq ц7+aưy`>ĸT 2Kn.zP\R+0Au>=Ct4bX<ל3q0ֽ%G)98ڮQ ;,Z5@]o,h/&9. K3!IASH:L_J! AdpF`yU B[bWY,sG!O%Gt^};dpXO]-sqL:y-3p@`F^>^|.겎q*U_mFkbJ8s:8f2RYP>Pi T6>0Ffx?zؿ R8SJlID\ٖC5qWTX` jG~mi Nsvdk%X&*ɚ|U[ ł($\xL-}`}˃&#_-fl8hP(7OA%TJ)gOx `MS]\h Sgl=Bw_JSqy yO&8ݚ wI#&\ 0W:)؞v LJ+v<s!M6nT9q B!<\&p67gGD-+lK`i4ѥ. zƒ֗$vDk4RQ6^,ɃOzK1\~Vrq|V>ɤ}J"R]r_LfV x9{.L@aP=*Nu%՟ݶ,Kyx6=MikQ*r-F~g(s[Ly_5M;F;J[ן<ἷ(D$4{'jQJ5V1f 9DjIGXHy҈9j73foE$x3ծlAyR߈{T|[P>Ask;Έ \"E 'f~Wԏ;g?VA\X2uVt`Î;VTlpWeЏLfMow:ϊ$~c !&)GvJEz95SxYea&+;"ݚIOp%6%4y1}=ݺrԬ-I0X|l5H_ck!asBtZeO*Dڕi Vkyfx9K租saa/1RIKRsG-I550Y\)2i{q(#M(>>I&vGKa)}w-M8-m2/vHlsqS_+ل(GB_-0"Y2#1T{ϪfkoYB}‚ǹiC}en cAA\6Ҋlay(+ӧi9Ћ8(D}ΥsNy7 G*1Jg0roݥf73 ;Lpl mVe5CN\ql<̃I3aP;XW95Xy5e]7TF ;H%CuG<@t7؞^ě\l?݉uaduE&3^IJe0Yq/}2-rVnKD 7iGL\r7 7ڏi(䒨W@i:ۧ)-K;8O8/CYѬ&!&D}b^Gqn\mXfVTg/1 z<`g’z[' cv=ڣ%!ěIɕ`2Lx]K6̗3p sFU#5m8sK5N U3Ii[A&9Ԟ**T1}z=О_g:Y$1k-&tBLee&sͬ,J1}rUk/2VCV| 7G8lZFsDhE {PB6ede\PڌJK= Ӡ}.4d:$ھX.\>Nrtkeۙ:3^]ܹK3̖_,Xa$b#^޸^_$q/Xv _I0gsam%L(aX'ѤAqY!4dN;C/uP1Y=zFHK'/;'֡$yo=MQ*khAA_F||{؋Q@/'@ՙ_^*2X|`rݲrcֲrl*k_/H~Ǝ@H{ (O\gkjRdߔW;`f>%e)-Qy($; $wwnn:@O 4*»@`C'r(&Z%xvKoBۏsT/'3^~fˮujC4 LT~k&SI?#6:Z6 Ͱ:ڹ+ P.w.GzJ/L8 'N\R A(싁 aM@x؛4"3]$[=k#J\&sx5HRb>!f0oZaAS M,I*]$V$~eywU[6<E}C Cؙ&%0ΊCM|ڻ BݍG-1|$F <~Q^͕X}q>1h1۟/&oq1<(l&eM67֒>S/;~"CGf~ :xnae(o19C_c\*jT-WZbu:?Æ # tUA|~:Z/'4\Q~U mE SGr  YO ժ7/[QWDNԹCңgLMlvvGxV*Iμxp(,mԩf_k/foRes3Հ%#NV0Qeo Tuh( |EiY 0&ݍ0g9S'#@ { ク0CC*zӜc>OgVwJJk*.z1BcȂbL&1B%GOl"pJgKjh]/hLa,cH!JtzyXd/ķ(>D5'e:t k88"!7`_ FH^WlM$JoYm9!cFB0Y)҉^w v6.Q(8IO4 nt8KO ~3)u XtJMrldxݴb~1Ec #\/'[Z/b:''t|IAפ^Ɔ6՘'6'lN#fAfGdYDi遛A?Ԡ(]2Cy6 Hvj7 Id);@l.k(t䠩\K;/ +YEd5-XElJ0I^ltOu Сi@iQAh{nfJkv6!Ċ῿bk2DPPyU)luaglX5dryn$f%HubCi޵Vޅ7dcQx]SY{ )Hfa:Nm5g *oH+!wz w@D}O:l[<\O b}Rgp蘘B 3BRGwx'KFUki= j9`TLT7n%2s{閖Ȑ@0cg˷yۅ| :@#~OwIi o.#i0EݘP]iVS搜ۻe c/_- IHdiO0x/0>,h $.uCK^ť:mJnj`(wc|cf27pb`F&Z=! S[4ekXȨ:3*Mad;Sk څ/OeK啭jTrWyn][SJi!6"N`7zX}HjY.`$1b1Ϣ p Y2G!J8YB 26QbTRxRH[nvq5X Wh X>O@Y?;YTH<A#n hQ25#6|κy^+|D[vSJ;0riuxOcHP:LqҮ4E|Au.-f&=Idt^uٱguVV*WsPV$6;xP SANOZ^zhq_JGcUt,W:vTM46I+ذm+^t #/63RoBCG=г^tdRF  @XJ8[c sTQ % ktN4QiKOkTX0aqDa9+P}s&`Izq$L۱D,@fMMh2!d ~IRꃇmƣa? 2V!i\M>.Z$,$R2Sﺠ){bDձ9ݒ^ڭ6kާע.1VL/BgZؚ-TC/-I)L k||R\ݩs pVhl(^w}>1L2zFT/Vȝ'j qX٬w$L{&1>l2r%Clbz&ToF礣}v$2[ qB N`Ͱp[b^##~O< )n'$MB'`}ϋ])Wʨd_E\KϘtn .F^7(s}ʄ!qv 8TA`)vqx۴[=x[Q$ϒ ^'aVM^i󮁘CN8DGk 5LJ(e8= "u&OA9v+ʱE.}A}A#M])gt:v(s-@;"{Kn w ~_iq=Dq1@%aLF7;jtLyPm!Ej!`j,](aZZ틥UJeI'Vsה0P;t9@"K.MOexB;֎ۄE /"k'\' ἥn)L'mw~\92(W>U,BD5z@;8Ybd 6nMүh$ƈ,@ʋB+=,6Q'6bL :+:i`Ԋt[ ^UjB#>Xoe= =t3s >] \3hy)Bեr1c4LWTzn>qn1d/KJ *!"Pbwdu樎t[p90gS"vcv4q{nVjsV^"@N c#=ߌFz` Y*=a࡟hU(.dk-T@Noϸ.1OB8@c 9,(n`P pl kYNƾ,FIetW@ѐaH_rãYM3V݇Ng0e < ^MO%'w flfU]yre/ua/cAd^e"bg!>k*K5;f+,n.89񌸽M[ٱK.:Tjs{?g]+x.ڦRb&r|Wi~W([.0e[:S7!^gCu ߼QpHFNQ…qp~yI3avbFUMCy|^(sgr:ئsPBK 1ް\aFwb Ћ%ԔwCФ* JКPu2)^U=RTš(. D}ڥJV:PtBQkOp1kKZCL9P?jmӧN7T,@ ?"VWh 4kHc@ VTrF2ngR06l|TfP*@Y_$;*o9#$}}8:1<$M`RPkG] t-8M <Х+Z\ ?R^qOrN'xzew$ M1)vy2y X>zm>X\-ziRx'CE3܉F`]2᠑gӐ|u\^ ׎D U*w|k]ƻԌ=xtT瓼 ~7dt!StL;0:,avE @ҟJPǔةnaL饔L<.G³4-HE9*у^n6y*eڟr컷gbNAr7KB`.7Nؖ7h=6V^Mz(A2/ۏbE8i蒠im>/6t@3Z"f}A|C3$͐$a|"r=P_L{PiaQ%X*oZ %nLLa;B6'.LnT*zz~j!cyA|k}ᮽ~ќЯVLb{pIÚ CCw,OVTN-%s:-ϖ3,ʊiFt>!58;(ҋa`-T̊.|ـ N)*tqlu3W|aJ{S=?k@\] *8 *ł,9_\6|=>ZyrjX{;;W_?3+SD/? |S!->BATI&͇)+{B VbA!X5@Zڦxd4@R3I8[RO%CO#-yWF?C3x: dr_d)RdM~}ڼ0f>1nq(]TQ13=KϗI* ʑhHdې'/>/lRs da5 [La1L@k^ dhg5u*`4k2#R힞i-S?i| b PgUMw;Lf|ggD='Jܶ~")=ka&e{ˣ֋>%ZG@aBxךǂ:F~ybD`264CtMw :lKK*\Det%5V Ǜ70v xxnp̷^_Ȱ?Rp!o K?a'ZPke)PUE~)YxH!g ffq{P$ 31*/T[ ThMž_>!hyFGepGX_ӂg7:9"UT̔'ef=V+ ZFj3p$]!i jxxmjX7uJDZR >^Xׅ L}ǀf3v~"k0L\5m.FyR$qԊtOL{M[7ﱽ.Wd1,"ĨE.o 3۽i/R$aF_Nl+%6C,! 5CILiu֊iۜiOyd) :KPxBbgVqdk;!ba|d6Q-C+U?3.=}-<3=6!ઙG5Ӡ:1aD݁g.FhPG&Aa6J;:93so蘺m-3̊hF+ӨOY)a,U Q57.43QK$T(._~ի\ؓT@:$HPi󷞗s~ap$~WkP W͙ܺ)\턉 `mk_sӸE (kEI:Aڥ&L%ACpϘFyW=`m%K%; 6  E"HM&RGo^ئ%l윈FgaPs"G`K: cfuCԙl)kuud<к}~7JiT# 2v9v5hJjE#<:;ޮuA0cMSd2.#'ޢKwڀ ֳ&ͧ@Jq`{r$=j¹-*g 3S=(QՁwAO0?IGib- Cۻ{KW..S#1*H)4_77]iXbi7Gʱr qcƄ(F:r$py-#LV&&>FmLϭf[> 9"A1Lrc}Mǂ{p8ԋZAp,K# b![♆Y &N]feAbT6뛗-%PR=+nӲۊv7< (H̦W ?Dϡ4tQTB=Zr̞!iU1dk=("p(EF-OR)_YOw#Iq(+q BMcE<*:zD !Q -J;[Q]!VTF NZ ;3 p ((z%zD_3V!Z 葅"_栘1ˁ=YW 찪h^w-~=[)Ku0W&͓=NoHtjޮں*k՗W!֕tf"8R6m>t?N7\ek;Vji y,@f;S|FDx"eG=\\ȏLo+FqT mFJE#r 5Tדgw|o+[k8X`؃33!RqN(!;65}  fK|VQيK`['zRñh6RQP7ZO7L:~ѣ+{aFhw9$̽#Ԕ@sBP^ Drrrw27EZ. s,_,2(P5PdLdc]({ tZ1pX4~EcG?%ǻI`žTYhG 4O }U/qDG\&E5D5c8֛/H^;K 2I#kop+t*<ߔa}ЖI`W*E(rTFLGbrgEXr(pH  H^{}UtҜ'-D+hN6"!g IGv1A3괣 m;/z_$1?ϒ~^ V`0`?n8wzQݪ#A!`0vS_.(nX5I خ'oSŭv\{xڮ$Oeԇ؝ zZDj7, kIhf& c=n1gĐfEHNEzc!4uG;3Z1p=H'N̚;Zat)}/mI2.s(p"tP[B{ FpW7B~bPxF4֪3_.Vˤ'@%#9s4*,]T%=u0~C->'ds FTyKS"3?ĂHX MDBb;dS>ߘ_Ij@e>:j0i(3[$_S~Pp$l {kr=ƙYb񬔫7hCqy3'2w1 (x*z4.Y3fVUړW \^D*<ͪ6 Hv&luo: j@],iJ8'--{$)kZ)Mg{I֡\iz1d+Ofh2S AkB }=v9Iyg5V/0d>h]a4!^)yZe6eE`k%f @3[xS7Z M`p. 2ʶZd9+c>\l8è7KC?#)2amM $ϛt15SLLJgW7*8{F FTx~vz@BPk,nXbCc*HAwcʹiXa"T>wέEW9sVhLDϛMM+'!76sFc!.^akwɿ63Za,-U\%ϝu!PlBe74x?A]7y:$%Mc 1`SlUxDW"p[͌q1DNo }A$Á|{7kC4 {:XSs.؝}{:UZ<=|9%IMmo2#q/|Jm!`?ԡcc)CPXoM#JYEXF`u5N>3hov};7Pس*GA0c8oBޑU5ցʨs E #  Òն*N:wP,.ܺd񽢧b.Rtl"YDV={O/i~ iNZu=+Ad 9t& E5enti1O5h9 lOM URlN_-y۲s YrA 3uh>|{ϗN-t3U!aqy}2ۨ!ޏOM_\w$'*X+ LEGϭ5^7^$d/  dq]HJp J&Glr( fsٴ$rWtM) OYaH?S:oL`l*̘/&Ӣpeiut Bv)c؞6ֿkM3*s-Cӓ4&q$NvZjB0ΐvrz)灄ԍTY^&_rΎS=F^,^uo(ˉ-MYG\{i2lfn , BQ(ݡ)x^ODS#2 +Qm Q79j(%LsNؔɳ>"V%,]16Mqm yi,9"T]saL `VG̅lcvKY(>4#UcSG!2@ Y/ zCc>1uu(3W 34)|σD.P߯w^3V7cqH AT׽׮HlȀ19Q+p؉@܀dǚl=ژ]RYrynM+JcشqAU? kB2haYe]m1 w"ۀ1tK7ͼt~l8܉MX:fh]6j2@fhy.F68>I4!a' W=Q_=5tkh ^?Uu|{-O2zLr5$y[/Ì&XI-&bo)O+4/WDE.TIq'-S+u!|L13 >0!X9q.NӲO _[RNms\ʷYO>ץQH;WϘ*~ U LmP#`鈻]1pnY#7G bfc[S@5Dƚ֕" )>Sa‚d3iUOlO+8m:N "rQI|t҃!6[,f>cҫ~Ғ =⠹Q7bϣS$4AZ|Y>l pG7*f, LRO P2u"X}]ڥyh~an5I⓹JK^@6Cb}Z3QqG 0G?i,$5|9>lPQzjZXEkgyNC 1!*佅F$yK8آu9 ;coQ o}gqc f#5Ѻj}kHѡdXˊ׳ } zH8bӎzi`-#sC{JYngSVH `@CZ[*錷zQFئb3T< t3'()U6tHtC, xRܷE 2GQxfUry. gDeha%xmfr1 +cʬtI%W71bWB0nk {G#lCfe@DQBY[?/]TM{WgVz䌟xROOlD7 N>R:JzDVöFwLɜJ@,pwtݾof`U) #ad@_KlI6>8|V>LO1}^1;6rAo7yʦ$aADVN`=Gb_sԆ?rb8]ɧ g.o: *,B3k2?dΆbX,MqsWƺdiĜA+dR}w(;8*i{։iҾg/#.v#PQPTF-}ЁU9gˮ#}+q|١>gPrזT\͓ JqzDJni dH.tTpK ڟ 4k5ů 擂(z&Be<|X4wo3l.(P',z1YfM#v]稵$~:l@i.ۋ= .u,fޖC¸;n'Q}3(P땱!iT-n=xWa4] 48ō `T x&Syѣڇ ˓UY>Rvq6iEny]Tx=H;w}Ȇ(Is|z[􊠕/^y;6dR/Px_5]ݙԭ2Hk!oX8]=NIe6k-bncvDl4f MŝC\z 6h&}]7.zt"$r',@[]~IU6dՋ'ElݑY✗ Q' ,TА֖,DB QS|$n=TXĵ:M u57)+3W RۀT`sɩ(.^X+݆B:,&hKCґn V ְs}G[#@ /9GŚ=MTr:7s &A8mb}t1Kнx)g1ǽ\'Noys\فf j*R tݡLjǕea&H Y^Ck8$NM\,UHy(/`Ae''ͤϬg%6=!u9+ơ<Z`jeZGƄ|VƤ((}\B҅vG}gi|sPK,/}ޱ; F:~]Hgq+LYi}(cӃQUe7Dm7]v`7w,d^j/63fc t7³+OHǬn־EKǮ.f'H ,"3E3/㛴>}[ u1s @%Ls}X̳k$L0D5rP")e`R xS|=/VW ;o DӍ6U[YAJ8}vERY($_kk/Уx:K'obe=|N>T U"9IiUlۥEsk=Y e0tLӝ'"NmϿI!_ .܈/ )qWW;\o,!Ey;_dQ|~iA ?n8F!f,מ.Oaśѿ T>.AhC35(TɨAMcK.tV0\i9{6䡱UljbTi[`'aOWetzݯSW% #ΰl/eM<JqKAJ'ò@#= WT^~0 1vkN!{ ' MՒS6vhexWuD{hK(_0Վ~̶*j oS,˭*n̿X|[&Dx KA? ayU;3sŁ0gw/#F#T\WN+g+x4p~;$Ho+$'&wO8}{իg՝&?CsomJ{:H"*r07xG;Ż1J7D妢T5yңVTMP{HbR9B$+i50Tnﶕ3@gO^| ]rsJ%okIy$ ά #Aafŭzg9V"X/<'M}06c569J|.3[&VYL\]N=pHAM+@~QA>u/q1֚dY[ j{>12[8~٥Ⱦloa/(⦜Gh̊3=׋B~$kr:59xViaVj26+B~߮)Y@FG0o]87e7S [6^;^nt]~j<`l.FJ."x7r0rׂB{uNzf9bX/h K>87q ('+8yx/Ǜ&L^d-E8#bne";%kJn԰&1o^6 -3܈'5L` pnLd6`st>u7?<+ |&1yL|xr^ {ϱCϪ%+s&f(tiK zߜ/63n"tKbGU#7(ɩ΁Q|. Ek^ vE.="IťS\n5#@C1$[>e{QC!J9ȷ o)Y1( rg95 d=sH%o넥NktMO[-v v ?ȖO)qiL)™Kv*`@p}Rh7 2X5R1]ݸi<44 t 19ʃðhtSV*d0m|DI|mE(y9^S kx#ћڡ:30WQD (3q|o O[,!)DBGOo"X7O-;A!ыZ3._j~wgC4M(?]rE'Ei 6Ty朿h3rk @Edgz>#?5# :wv $O)#/\eU{g⻠3'f5|}'-WZ(}E<'n*gkE/Rh9`7" z"vQxO&!9)#酻D pvdJ!Bo;0!{[?ሀ+q?'U)zɏ). V!}OpJǖ#ۮeShֱXtIv!Co`j1QKڙ"wzi?>LiWْkila iߦvǹR|y  5(4CC2^G&i;9p7I; 8'هÖ_Fbwh,csH G_,m 23k?qnBb$jlClEW6SĿ2b'=Mafn O[b[3-wNXVcxHji>=] Cղ*nC4rvVlK=CSz*+'Nu4΋z2ffɂӓP2te j]Zj/,t-iW ʧ]_18h);crЗ%0}Ѫ4.k︘"T(&5B(gOeG4"}peݩk2Zie6Rz"rJAcIghlNEckRf-(r=FQIʤ2ځKcϦ> {'r*c k ч#A{0]CО XʹmUUS^g+I/PsBW%d!8H v^ɩن} Z # O˺ǟ+r'KJH0y jP,G'^I: J:jKVь?e o r;Hix%x_αAfRqG^ > cˡD|mYk m㇝ذ/[V3@ 4]|4\Qe2cs FSɧpsHXrߊJZ?44 cz Oe5n;wJ!؀+zS]ƎkISܑWTϒF3lѐA m{"[^puU.^r&u0>ԉ78NLv!hn/H8!\)G-CiQ]B ޜ@*qo7q_t8*2=`oMa:oy6Vz9]'tyhn]86'F(8#7 hiL NO]64HPk X}?n}Y5`xPu*U{N~nkPSah;vQu:+7`E-۴'>wf +wɀ%}} \`s¸MYOAb6e[R\;i+Ȩ:ejȬ(LϠ­4]z1_po{8 79(^4#'{ D8ux<&s;%O sSNùf!j9]T1⾔qWCJi3N|M}' GKѬA&TZf5 0>D3jǐl$7NHUEò^w/zl ~,8xlWɞpZ~zY$Ogfssh(jR~@ܚ/G_"}:uI(lү3 yz>Ua> `י_ 1O*EkeHp @6Y.  *i]ާnZF wvQ!9G;<ۈ\ OR$t"w4=-lgRY 2em@Nd)VD`3>z8h]8|p!!N 4%Ű^}"e$=)4|!z?|@&.Iط-R@޿yssҪz QS͵/l,6g ztT*z?EcWvȞbm"@a=#7,˰UPX΄uE닭jpq {R^hԇs=u0wL,I+(8z-Y9=PǠ%tJ;S0ZkɊ2x 4fXֻ p׷kYCjl*de،u I97 ZTS)(lum؞aga^w9d+cz 9{ۘz_Dᅕl+31%SxF6 hBOL`ـ8M jjztol򱮩w:r&Uj!OOG~E!SZ\ctD]]e4FJ\h^'ZY{d"-o N*q 8<bTd>&f %i3FU|;?x?yz =]R@o,# 0*}BʉS |j>PUIQTSe9E,IhVq24ݒn +zԀ,s<(lHPVpr~Й0v)?-uXN|Q2ʙ#ë]]!y]ie?ʽˣQr+?n`=tV20-"H{{mٷ>;Go~ |h?Ti2<5P^Ad07:_rz61Ii6+3DJikka˵&Q3RCzcee qgW>K@ܫWT|*q7hg'v*+8!o\׀lL6c4ҁpO6rvGKL<2,HF‘>=zK䞾 hXxOQIҍܬvcKxJ[W[ftcXs*0Ch8P"nU׸Ɠ)|kVt'JQm.({)MJ5k6x^ {O3s'{GG9̿>|[\O< _}-IVhOaJOxc󾎥YZW(hA'8[EE|Sy]5D3Jz&wčv jrUXxxh(ݣ('Ga5r 15ԕUj'ɐ6mY[3/ 28T#oLㆁ*2oHGЍy>F׽ĺ(yv@tjzZ:j4P%ݐrquu4(=UTlp(,Bd ly_=3Els<17+X:1ɅU;-( ͐-ّ&.&jllycPi 5ʨ0ÐUqal 4^{zl?@4oQeOJV'B[GٸƦ0Ѻ[M,8L챬@z:^NlaPN>mǬ%XS8 Sn`@HWS#9 @M{=m+Ù @B.Fc ɖ;c2ÏHOzmq|Y{"!hy*;]GTo'ž^jaғjX'{câIN9ZV?2:!.=ͤй&aqYCuIčWt[1Wdxz2LH<3sARzm9P>d 3Ώv(TBĐǶ{MJY^/E릸Ymrӵ`GF;DGka3T|qj6/S+I]J>l ^`$l'- (S Jjó$/^s>DΉ; D}Jcfn u=D/iRe$ѯN+W.ȄlF0j_^.bم#] %9`3xtrtW16 '؊=5Qⶠ;8=β溂a`ixBZ^%``ȿPfy2}jyeztnN, 5;v6bzC(4^J^"F77б 0sU#Z,DtXy)vƥ$DKz i-!^Dΐ,^]BxTf-OodS Xƛs亴Yr*@݅fDkJ9Din?&{+ڽPښq4%OCKze6S-#-k$Btvj|4DԤ>N<93s_2U!| alQU>era맯 9YUT~;w@ko}`­$\EcCo}jN>~of l@{p{U[3o`u{`j'9:$?afYpg3tT}z e]Ѡh׬[iJ!3y_̫駧ǿ,,@{=8ńMy'koknD֣.B/2F_yְ] >VOW,"k%^#'5O5b8|B *`Cޭ'`#+DfMc\ oZ4b9բi@%.vلfTXkuS*2Zat,_'K" 9.Jyvro. yͰq9A#|05n;__V nvzHFuWKtӤjOE+ : o)~@ /_Gp: vN2W-X mKgBѸUjC&A09lf~>JYS☄o">C%pR븙 1dn*ytu0OmXֵdQ,.R,*Pذ`^WpҔ F{MGrP=բ^ yf7ȅ\$nPldu4B! avWϾէ&M,*Œ$BLg`q2C>ŨNK zQV,0_ah%JmM 꿓MHZytgI}u'G XBϲ+H&{.),3npQu3yJ -꾳3Jaaj]?W9SZM5QݗӰmBN̓0J^"3]=7 n4[01XORǞy콛 x(D^>Gr?D$;v?Q&2k~6n@a7\:4jW>mnvW!Q:IW{QgNK(?"JřB;jw;+_T5|j*& 0؜&D AK Y?KdJth68C45+P ՝8g i gs)E`.B4#(xb~s5V"רFy\mjuWH_nzm"ϖ/[5VSA3<+Mʪjрj;(5"wo5 o}gb`_"W?2B vbRBR;.C.Zk&&#dUN@'yrVG13- ˙ѱeI[l$qu(|ހwi͍{UyRT][?=NE$!$smO]S*z `5Hv #JytٖVٱ(0+[` t$[ۤ -J.:Ҭ=}WdtG5,)=;~V|b TڽBS*%\yUyVn{PH3iqr&_U 23azHH o;$vCKH 7@[]3A'k;X>%__ ފ%?Ϸ4ƒ35DchJӸ_zsc+/4*^ f"1J-C+qQrdԍF9W y,'0g@CFaQ= %SN ^ֳ[Z^/v6A& z$c4zcweԡQas]: AZ~hLeyP72z#:1S1(p8g hXj٬} ń1WXiPѥU:kŀKOG}4rTRbG~@ê&,t BtcxgB8 *,Qͱ:BdOM!ɮ "MRgv,xSS9;w&I5y>2z*+s{K2<}ەaG*{ݒѹԨIJ-pd~fɪ](RՄz{bu/Xu޺p)~yRS,-^mBmU)\,Ŵ٨=Sh'2NI@8\b;NFwͩňо^QW,܅}7!@t9tP\;a$s[kӯ`S(v urKzؖD-ѐuF=_!ƒC2פ mi \G{tHC/T%@_OreP:,_94Kܯ1xgOMC*("[twtޞ72[xaPu \η4>B:^~ж͟f+2Mw1GFR&PSr/ސV7=hD}b UjU?%CNe /-6gv8YE^{j(ך-"nVT4% $ tZ A9*Utv A?$*qOW Pf}1Tto$bw9tnאFȥHD}؜< 7W>H)JB9,Un)7l6Bdh/8#N_tPY-=5#z]HBKV`Z5R7P9 c`Tgҙ{MθXJϺA.s5x{K*#ŠZG SJ' ˆ6 ڋfklW{#H]5#isVo"1 -7\?4A Y&vh:57e9[NQ|&뙋WaН^6y?@*}u2>(L]u[)wke0rrh< ='u$^Ru]mEsZ%-8cCNVy|Rit޾&^z||lF[m&@)_jt:~|PR"Yoҷ,0Uycݖ ԝ1 2>F`@YN#%Vhq*8uHri2VS76Wﬓiwuj-!dQ-hR @f*6;$%\4ΰnlh!`\a>wn#UKC\pM`yh)Bd&:)>! QI}k7)9[\ t7k,l(ƄFEx+sll5"gLbR_`vlG'::'˽X&% ge' mnAnRK ),U ;RnTGƘ'ee([͞\=m*\j&Z߈B勫&Qla4q0ԂF!\eȧج(% P@+ZR;ne(FVWq VuIi!PטO[ћoQHk28Ԉ-'pTMW_x6JXA.Q1𙑊e6id et9"[UZ?ii&RBvBqan]aϬ ״Gݯ/Mw3|15oEjP&V OQˉ#bAYW$@`Ջ:LQ';,aelR<}JW|JOjo1E=ښˁ8߬)+Oj^<"3Ku_b_:etI \KqlJ'QQLzXz(R&f0KZPloz .e:h}K"PlUev(+ntYX8<`Pi^֗ jk~dN`  \1}M ^" (ex Κ X~l.a^(eVs_;8g * PY[hݸB.;o|e zYр713} =w5 3LKw4y,sL_,ihb6P (]PgVh)̳TGұp $7I#!P8R<鶑;a)6;:C⅍t8g8FE>Հ}9`\;{aOLesѹ;cVu! n"c8] 2Χt_47_:A:XM€Է6)蘤7 Idl (hߌA!YFU|یbceN; '[f$?q(GcGIjGf2 &#,JU<VZHJx_G1Btt!ˋ+ J:t%A&130<:3$TӐeLo]_Z! ͪr8MdV"W|Ox+q*H[~dحW>p$z~e%ASz; :Yn,xfDW>YBglD ? گMLݱs*M-uC󌢅Ē/eRjnB9uAR[gc!ՈFYL@je*:T!4Բd2'i!_ Mk)^`13P C|@֫V‹B8!7~3A oq,O0]~rz-WpNe|5*Q<1&(9? nRIO+v3[VH =>YOeCq(fhl{|#4YV*h|[pa^%qT ֘lf%0Z\#x}uaT?v-8k|'U %eK&tn?b@@gx` ree%¶k: 1If؝_L#$K9Pxu>xm6(̀un1.^;v4@m}";(!O-v3@H{9zKR#Kk&^7 N#(+{K^&5PbQbx@gI5c[ ִ&)R{Vk\ɝΪ"=z߈ u4C^ܣ'`sS]|_՘D&gdڜRga^n"[n_;Gl[R .k8_5 R?R;dՕSJWi F^Ҁ*@>F;QmPgO ^+MѭA*)h n-'O^(nt5l VФCʭ$g׫mDg80OTM+x! nJ5FDO\G_v šeEn6fILMXQ] jYTa@鯄t*#:I⸪9q'X 25ok%Z8ʲs4#$NH/,S.wYh&"ܓ$Wa3(nDCMc&En7Ju4c;yIV\)yFDJUwp&|h Kx E^59V/eO^@3`&a" )f7uyo&JfJzkw=M׃ ]HOK+vP"T{,Ovi L U28$xB(+V*;S\#soLѱ(=9V&a]6*nilW.AL~&^ݓK a[W_4+z޳JBKuep9 1*fߖ8k'v!Na_AFy(+ FdceDr}jx%A;@Gs!1:f?k];{^\o "/.ɢ|)%Tg}gVeЍT*^h7>\%< ]1xU4Ȳ߭0-! @Lzwpp_«_{_I. ['&  f?dr CFn5*jU8M#RH%ּ>>3eR\g̊GL(kFV![q[2B訲o@%wbKPAoj`DbX} aK@M@ )i9NGt@ޗ/UyɤeP|f*]_3Q)䭬krqmn]}* +&gU?h ww^}iG,[O;a H)_7}~`ϫة juR4uJG؟knP.~#k+&ITJ|݌AipĬud8&:;fht@㮄9R^r_L|Giփ2 *M͎'[!d0c~HZ'@C aدY7g,fIAjJgnPǀ{Ygiz._yiIj'O@\F u=eOp35 FMWrŪ[m8dB0jN|y#c^o(ȥ, `vg__RʷA@;"6I W8xNV6N7-[TcغZW~K\oJi*N8j.⅒F=Qp[!9v$$£`.Os7.ctcf~&k J00Ȝ>HԬCNT-.15?]zV+t"vjA3Lžh#3iiE\~Qa:_>B> k $ .@wAf``av}!E;0:D52qӈF#U 3z*p`}}Udu" ~iYMmK6(cx=3 &G?v1lUD7Hڋ7a\LJUeS47,mUa>jw1ٚn?`@R}tOgH"(."ee::pn_>ccܒ:nUgM-;Jd5Q٥ ] _8]ߒ mBјUz)WF#e{A+.vޙ}ߴz1E_V baS| r )(_ Q`<6`M+y¦pJ|˚5wHoS%4`H n: 47w[ }΍}UǛtVi׬6ɪȻ;d(^* CRYK5ѠFIyB?Un(Ua흖Jو 3YXYGvW~ 0[R2neG֐x Q n <Ή8y]L*(rm`=FéKղ9|Fgih [E/FL)x[G%$CƜ.L"W؟*іF$)itgCE656dJ19F73R- /8r @@flΑzo9s2BLUsZlu]ub{ɥ?gB.䩊v7ݟ( E%G_zaå(UgSG&(qS^lr]JT/Qw3tQBv0%ѷTֲpl2y890Z[~'u2 XˍyD,Y;֙HYhax:lzK&,}n S= p4oӻ=KJPx~L\pD4zm:>aɬIK]X.kÐ_+F-ĝ\zSve Vugp3^lEx!Y7XHD'Qrx݀ȿ'\m'F8|; JX4=Լ>Rf,!aMrݐ&ӱՍC;w͝co-G_ 582vߨ I`ϗD`Ckr1` XaT3Ս,s4]AW)# c\3RppP)? 6O%5bxz2&@ G{69Yai+AҦ5n/39z#^Xs!f*t ۤ4$;Tǚ"LGǿ3"2棏8{ZgL, EY%M?-a?c¨Z~{H~Z t,mlӇ0֘r|]y8cno٢L)ݱaZ>6W Jn#j恮6V9ޟLA!˅߰*|Q= e#0BH^/թi=E4#ȗqcs銂.mْX@ft5[#<2)!lMdy#/p52%oFW' 0."v eUrց!bgZ:hDVAj,$0Mi&hϊ۹9f!}S SзH R m|\IP]`b$O)B_ +I R EĿ#(LC7=7ƒe.* \m9,k c̔.cuv#N~j#֊DG}Naolf0I2VjeC\'g S1z)d>z}%T "m%^df!yM;ЩVcMLe[HJP2bIBgjUdѳ)5$tKDJ /# ${}D?>{-TK Zu'sPfkS-G0n Bczw5^*cTw2lD%/H1N (cӐG7?5C?L`wVQFwS'>^p6<#Y׮x12;$_Xʩ;şdB,7MbE*:"ZrwcH~4R)5Muď6¢t h)ɺ'悞.G/C£.K&d^?nVmC|0S>bM?:w9ĸY/ Oi"[_CsGgrUf<:- Y\]&RW7=koI'zSRnwI~ 5BhTq5*[Q&/CX l kuN8eW1I dO-ycqLJ\غjŭPHONh[&ϗZG~)(SM|c:}bi1 ܅EnJoB b)>f 5l?ehg9Ө# W*A /@% F4?tx{̷ _ Dkè~cHd@RK$Fn~Mat FԢNT"eE>dOQY76ίNDaǡs1we1'0)k%b4_woaϢA t/`ʝn0ɵ .RԶr#[r¬@ђiJ:FzZDƃ ? G%?@"h.Uṗr_g>{>ƦTײ >]7>E W R.`LJ$/?c>ƈAQ5惁͈LQS<>udi.#RHmg*1 ъ:TAjb,|̥\sJo'v[Y}U[}tM@M流mWaغ}XkAaj$*uSk աR)h.Q^?½{@ tN\PVpy浈R.M)L[PY]{RysɁT);NhPJgf=#aCY^/]`L~1 k?4kmCjW+ᘺ%T^M0xe,+q|IB'~ ]g%/-V&ޏ0K9 nTi>vJԕɕ&.ҋ2qvS W}T%;)n n{~sl|u[8ehK<[K'v~7m%:yYih=*ȱRttG_027=+HhFF[zAJڤ@;*|M;8]nًpo~?GѻJˬm쀐*c,0(쪨Wve J^z{d8Q*-V52uŃ唽VͱP#5Cʾ0?ϚgÚr~Nd׸j߉SYT'1~ugŰ'P/kV(Y ?#>*8x>GVEg(zHnc ?< Nl'_:crLɷY 2E'I࿹xҗ+'FXG5NAB }gF"Fo{>F~5Af7:~ΖxrȝIKa#o0j?$Y'ƭË[FLMIt]g=␲? Dbiߺ!l8B^Y/vtL9W0Y(7@Lq 0Huc+dശEgQtrb/ 5QQ6Á3(!K{:"u(ToF)P1Gt_m0WhF! k0IrSɻ2hXn etPqJ䖇鄀SZ 00*Zʈ|~[;9Zk8艚aw5y*!AK|6>c,^ZX6yt S.oE:4x M%uThWk}hwmw:O85"j"}FX[HrZTS:Z,;q7ðI YL]$O~Ad ~WNtޒ)҈cAo4cʉGvíq3ihKOZdCb,3ƞh+`Ҭ n* a[dA0*[*NMm=QiVm7v'V 3\P Xb?,w">Q#[祆B惾?cOA]fؘiwj][qո춆I4&T݈`ʪ)Tje"Rb*N@ѫO7I`F2aE%zIJbg k6{ omk' 6YVa%0&:g]K aAWq[: (SZ!;]qH8Rް0"yn7xx8d l٘@8S3׉=wz޶jJ3$YH Uh(׏eF'@Es~+uIo*5?L !-|THQ]hdf5,p7M YP[ %5oM[t}㟷qҀJ./wiԠ.Ӌ&BvX*1ĭ:Rb=lExHB T,Q6 HrtlP 0gG4gn6[M&𜼝&fsBOmO`AUā&cϜ egU8p G[/ƊEm\y Xl@S&\`Zto\u̘ b9Q  "=P/奫! G򘥉_"ZejM nޕJ w)o>MpUP bLb:S8GħCL@cAt_!Vej_@lT ~+~wz>;Zu,lv6&i2e;2:~X73'A>U>S-_|<f\hIG4`(nu6PT (3т15m]E [+c2LoکlLhR@$͓fю ,BuWyއOCkuZ)5a.^r';BH~b q)rsțP}ִ\/qj!U؍H[]7k]@OVyԊչj&VIagpGO2bdc]o~f$'ĦzœPo(o2ӎ&C3TV|$ b̪g0.v F/ Ć=p?~uøu;/pAV7V ߝ9m g{p.u6 Ul ,ԏvX5YhU}UіK˘yZP# },rb-K)G=ah"[LGKTZ,tmxqJ<kРIАHu{Jet]+ʝ 0г٦@ekoq;lSŎ D\@F$ DpN_)m̛ۭ}Q>@xVFSXY09>9 kO+(g凋w'P RVt 0X p,.Ttw9cOtrbۙtR (6Ns8r[ 4'{ӓ}Վ&- ~'.$cW]VGjWt˝zMaMqo KO n $')Nչy=㵢zYX:0=mW K ʵous=7H96eO5&|ezc {lOn,R"vuP\#\Se JȟQOR*vΣH`DL~W~ci籉ɒGDn Da=_%^N<¾D8Vi=(<'Q%CW/5[:b P|4B;]ϑ/m:XvxQq0 *5lȉi?>N\w77 EN\>1 >JO-P͚/pUmVÎ6 7*bxW(ہVsK{L<Ԋf)nKXJYf(s;W6"CU1%$ +6Cy[4u'it5Gȃg yS-:VHV$I'%z%ϲ&~ 1ѨKcA %9:Ш#c'`P3e:&>ؽ("'b{* itScٰX')% ,-HwVkng\aea,060byC[9 f{~'E$s6Vrh1NJEڹ{o3[A*ڷcF7[## x@7LȎ SR}J]So[Ot|Kø #͞Bլq sRO 瀘n֞V{5D7>~+ޜF:x)M1 ]2h!#Z w&qƫq)h:YTN:8P/֙8<F`"W|e~[|_+cƸ^Vcu2fJz /U-g v_Nn&]okscf(c:2`V32)`E+˞? 脅UzKT]r/gh7>Xdj 2B/*..=[@G%qٲ kjU,Doj""d3,阜44]J7-m[jPӓ]b3[|"36DQEU۽_S\}iS88dR9bգ*˭۸ oCz8Khh9vlj%ՅF̩ bzf݌ +] rEح8Q.{\22G&ёEl4? HM{ bw!PqJ'ыqV|4=|XcUS]P&5`54x$iKPֽ삚Ql>i)@ͮ {̤p2xd{Pd <'6#PphibXFow5ZsZM+:=ʅѓЉD ҾU & u yM֥KP9넓q c_nh{ֽ\j TD{Կn?3{uXU[D@lfK-TQ om904 և1+X@hL]- J2mN#AqcCkIOϢ{u $4nb WdQ/D^^NAy"Ɉ9H-߭#󥦳i1`w\ (Zdɣe,%I3V.EÚ$屣2 * 6Y#|K]˅?j+& ;}Ѭ|(l"vxA\(>N|РcA",#j#U}Q%h՞774#aSImV0[~\ǨU/Qh玷M?p#ǀP 0L/S̴;(>Lz5AwA0w)ro[Z' _@ӿzΏ6@g:ST%^d/'A{ ;l'9{$t+ɝxtV> U2j֟60]i`XYw!uT!=S̈́vowr$iuNi֚:Z=,FH<3*޷=Z֦=kAyy" [u28K^AO.] r^a, lq+t@"" 7SB rMmVA.2osg`*on67CyǑ5LjLH-(J$/1 =QTAt;6)ԨX>~3)fދvw6B/XT3Yqze !H(&ߋS8&--6}r!f kx|KYLXM4LCF"1?˜Ԭ$_eJnS IC2x2d=HHQD9p:RRr,Ŷ,gޕg{wp;xUG(! *L6إ/XnҊcoX! s5CK;8b/ܓ$Hf1rso$1!{>qT“df`e\H[mY?F'7ȹ0ANj׃Cc^N)8Ӳ3<_q8y ]TX R*9PxNZf:"^P޳ո[Gza7ct?N@oi4k7t_̲[e|NE 崢5Ize0 J ů?3PrBd:O$E-r:p~<(u {1yPbR2e=q'Fکəoнl EVslφsꙒHy @% ÆCNauwHZ@}K{aCO!H&N't30t}3QsJ?jOÉ_w2= a_ ?P|a1g#'gy1h߬,Z{6TOz -VsbKyzȆwdo-k48>8eA5v4ʱ2TQ&cU6O-˧}܎k,Ns9|&U_|Dޛ^q^^ 5M>"!r4{>^vsJX M3' - ﮂ]BSg;E}>Tw`P VaT0ۑ8 1[uu֔w~ZCc% Նx r"m(ܹUq|1 #8"[ݣޡzDpײdш&ikфϱ%Imfs!^@-(wU$|#S-/c-m1ZwZ8],w9wMiw2)q͑F2!M-ۆ̓E6t{wp.OqC y;&zǸ7tc'vZp'ܕjKon@BRޱk&R#|6 HS@A.r{3Qf.?wys:_~U=G[%udD5hi;#Y1n@, a޿{@:͡) yJw9էaRhP3km*ouРM ^ЏGt``QYZqO(:Vcu7TrvBZ^KFk*04Y7N&(xsK nCGԮf6nYY-S\J\UCk`BZ"yfVNNwIh?#X#0E^{{OOL@'-rc [b$Yn_T(H?ʉ!j54jCD-*S M6TmoYhP| fە9Jax?}o(p 6kb6Tuݖ`%Rb JvpAAVSj@=q SЇZ•)Ty|#n&J5!X4^Y],]sRq@d ů.<Qg>Hr$"|ۥsg%G w `z(ȸ'X-L[L9?BŖkXee5q0oZٺۑ\FVmh=XIŪN&Wm~cOaL^v~!5Y LJ>AS?aۯ.vxN{Kfh%WL7NTmRnxiH~&kOg'}H50݇ ; sr'ؗd}#n&0k5R t8 }m:Os1|uMW滚@'Z҈6˒g<~$4@ -: zwxIr"M6!q$(8iK*3yJqM,o286Ub*f t(QouC[_;;}?CJl&_Vyﺡ{4l޺ɉ&o( K&91)(qj ?k[+( ]!FiY!P959$?VFU폂FNd[Iv-[t{֧Lc8~r9W}s+vqY֕#)(p!#xp^j{ocNREo~26PnCߝe!{u;1~7Qh[#5ц/sĿ 1%Y 8"@,U2;"Qk d#B2cY^*Ơ:/{4VO_ hh)&xS?(ܛ~:TV W#r2]cMЖk=N&Ÿa O;czh5%[Yc"I˭sb"'[BBFNIF;@ć,Z޸]?#XsG .r5+^;fDxN{Aw\8l`4З+/4U~*1k| šmӗ\ZgAљ{J*R689Z$CCU0a9@ɀ:LqkE!fp+on)X~W?&,l B 縏xm#m=b*Nn)^7yP}}  /ϛ6^v%NhEıV:_e&}k^U=p<:CQ-֌Y_p)=*r歰+\jX@M ! YJ^p,<.ld'jF/v FX71"K3`:u âӮ0J#JQ!AX96]VdhD9oo?oɱVaxh x+xd}XK1_r+x/$(:)^ZArǓ*ν w")m8̦~X=\Шx/Wa'93%yv\d*@+ O\;W4h0Y/>+NI7Ws7]+1ux.cϸ=Rxyw[<}RۂӍk MtB,DC*~yZg A<;h5G*raؔ 6tW9ÈPhb!NP) jxƗ}w +7p{H~aOr>/xTh%ZBW1p I̬Ǯ(>ZqO@p)hMkKiJ̋S]|]e= JۜSA)s$ | >i Zˮ\o8[ FqP3]GQ),IR@^˗1Hj28M5; pIHiuͲ*a/70Ӻ]p\2oAYOaf0/G#}{yp VSwmS.pߐ!5~<8hlLpҫ[_HP.d;!MڝfœQwA;xnN }Cr nSK攥2 0Cگ_<63oH-Gr/0Nи^2$#l]k"' A8Nr3x}FB.k4<μ:J;/:" dYO$mg } Q/8џ/vg}O--zZq1+ 6U䡛c.n*B[.|γtt]I)2PmkHd4A~g#`+`ܥq_|\0Ml;l\ﰆj~%[ʻ;. _*~֜1yas $ U Ufm0X`gEp /riߨm(3v}E]K3`jou)fbgjbBp]|}6"(*hI^a"*ܞO;aE]'I8È~ 0p.Rs{/Q@~f+k'j1Wq _Ajv*÷0 *î$kgp"qlxoskc srtWShd!ŏ4\G2Rl8v"Ϸ I;-zKd~";-tf?kycx_#79y*ւ0HWcs K>hsoOY q=n&+Rf9S-_SE5mUnQ+stYmR/l hGa<^V:!2 8GGjCxWhv*-pd+ #ye"R FPyBi{FQnMlcYڄ.6b%wթ @z<)dtFv[l?7wM 4y:&ssfqa{r lUvPT3Pa 2C ie\{,Mz=Prxڵ+VFL[)\^C^Sunjfd<0H~|$1!xXHG|踳;B5@I ]0lr{n5v۟[r !?N)P{"^7Y|.k'3H(:4,b$S|7t0JuvBb;%`WXԐq@9_jEj)Äb- wOvtgpO+!LܔG:r@M['Kg y}OB)dim ```]<=1i2MyKJh¸ţEa}UH<fC_! jѧYU2*Br6Z[nnf_7M]Rr_S\6PVht򭰥6buWףS5~Ѡ?pm6brsUc w7?)hAQvk]:m[是ٮ^Z)9^UZɚ#TxEa&m^[>+t8&QޢF&1W'g۩t n+4[R+gj y!hM`˩ON]pW8Hy֣>mg0;Ӯeg(ژjP5R-panTA"-Xp1IT# Sy ؄608+3'^UU9_?XN ۍ+sqe+Nc E *K3W37Eqƻև#Ђ+cޕV $I& 1J r! ]/'\-:U&}Dm|&)$lۋ査* 8 PV4x%do@ȍo48RUL[SOS/hAp.Ѹ%JeIT2x"5g|xp /nCg&7t}Gdpӻ9j5aLuAe+ȇQbrAy;,$ո`q[1(g(tO.ۖF]ka0 )ϥ>ykQ{diU":SeV=κx êvzr"v uO=^\x- gnW ZuQ> 8BcGO0 HgF+G Su":'g?;+WU,2d)v _ _ӧζ =ۻdL{Wfs|e| IBDnFD}f O%bK]t3~ÈaȒmS)* #]gG] 4:qM-'/dNy`^#:)Wy,\?eeMV! BX52oR=LVЬ YoPY੘gh|4=έXbǞeh <&|tuN_|Npd#a4U`*uH `2Ou xoe;KC;~D W0O1θm%eN2%Wm ϯeNwE|n5Mȸ06 \k4wy),c d:e0&pV|H?7Z)AnhN9>/F< Jm^z]~=Gt̲uEPnCXUKs+^j8"Y*]~Qȩ+n)?|W~2? 9f)3U﷊Vqe0m"%m]%,t-C&U@jkr^咴^IE\%&_2#${@L)>*̙D jYq6\>mMc?ͻ[ >1T1mB+=q_i!?w~#Ip( 1 ľWo3V;ڲN$$zبa)%EΒ&r[4&kr֍6rA*ܫ OѨ# sJYV7i|Tki8\LT=\xZQMq2lox.'yjr'ZùlIU#H[XDzEeQL?EN2LADP->T\ YQ2Vmh}' -O!<42h#{Ν}O_4~R5t> zIIw60Cdm i؏vW{{_c9Ёan5Rkp E;qS2q|L[^ 9&b EA2AF^3~*["Q?c׮*G&rz,Cc \a«3aưh&o*A[ b Aw;=VJQg`δhLV pl݋*>+dxq]Ru k0*#8 H ^1:W_3~̾+ lP1֗u큰9ڙ|O”n 3k@<>P9Ҕcuݘu L I5m47T9\)yłRcJRGS?$YvfPՑNڻg0{8aNx&1&KrJxlg#I \Z/桜sm 5Ծu!EWLaۄs/R%!ӟfbWo=["3hTY7Q荏` 4OKVBM+AyQI^ 5,CpmC~lɇ)߈gmh /J ~L3|GjE_RxO"Whx#6/e$P$Kbaa Nu@en<,3Jt34VM +o$ s%(>HRLk9˳M;@8e ! EG8G(yW čYpih⑯ғG>qYV;a-* En7ѱHh t)J)EX<#FĐK`i7ŦtIۼZSsOޚ@q>פWޟD3Ԣ~si ,U:[Ep_-vΟ tCSKRBF Bq0}OL`'h$^ߠn_2OP@1̂pvs5b$e iǮ&$93\;V ։bqmpaZt1PhBlSr|!| )Xn;^vi@n!PP>T$2Ϝf!Hs y1g}#-5CYaO 5hT0rJb^T45V vwڨ8ڨ q7& :b[XקdžG2`;xZNe=H"$9\7~o`Bc[dSzu r ap|aN䄍/YC燔fȑT rƘ`Kކu Gb#O˹& J C{\9 Qq7=e2~^E@3z,Fǰ\G'#(ej7*KU)>B<aff42E+ ?:5C[D`e*h#]gq+՞E WT#h" >ƴCfBc,^L_PXN*XHjڅ1JUˣ6|C3 ]&vVٿ}>MDO}G$ !&=;]!L %] 5hB0UMJtS 4.\'`Z(n]U<*&G%d~&VY^B*8dU XZgbo(\\cpߪ~!X%0;21NwמTl#7{gz=+Fզ nj,[2Iab!G͞%$P ҈zPXLʵESp:z"=Kkeujn!ںFoŝ9lk*R׊Ӌ$~_vPWS׏xX/Wi@xc<9f;1@d:͌sԢ"I#k]4p1Ȑ#v{,; ئIØ_8 ){}u@;el/Vyw.T |"l9ё{dX70&1jyMx5(Կg43ך;W]{ce][!W_.O #W5B]"'QexS28 asӗ¼N~Nu\aQ&ݘk{!Zcߓ(Åixj..~Ƌ4<)2Izq\! T>M-ri%_]X֮9`C-0'0.Ô5;.\q=a ҚB>?`O<›V)br)6z&q +-sYAÂ{b_t3-Q\2DRjT8̘fۧOq؏ PV>Kdcc0Ρ`y2wv w Q]+DS6a MN5 ?fr;FzSEkuZ<@Ch$Ru:ųYDK yFW4M}rT\T4hT=Vj숆Ȉ܆|l҅*jTݲro@W6 t7,hB6S^] 9pj^pQ0T_9* lgZN ]ƯYz[Í;1fY)xk1'zz W|U5êF[;>.=ߊoK( >z[M" A8)~p_D{vG/X43\gOLo:m\)3Bx?Pƌa}gĔ&J|*XsŞ[AZ<+ lOkKdCMΐ7~=/O.G/ivC`rܶ7kSB1Y5\%QPSOfabG>@V$/rqpN(x~ˀ|ukN}h/i-pg;G%LÑٛ듴9L8$[94*[$}B"7|l0:*oW1To<-g[f_``"+oR&u:+܇۫<'t rcVn|#=]"QJbL?t@MQ7qm:g*:b[jbM3@-espH=y wjSS"gqn5"ycZUF 2 P d?R.(L a7e*%Ώ g1hIc" ĈM5 ʦeЌfIZIԁc3= וϒWMZG -y?ކYۤP|eTkLD΀@Fnyilدp7!."Q)_WQHح7ĦU_okdirc0m3!J^J Z B1NGʎg(S\IRI kK^ZƷ;[urS;賋*P_IJVb6"a@bɪN't]:iBM;e5.tQc<<({Y;pz)0wzh>0{57;w%`_*bLomI։CYS4:hb^{ lZCEbL8|``?$$$sorXC*xs!hդI /9-&`EYCӹQ0LZto^]u8 [IW^QH n?M| :L~)9wƆaY"Vf}2.f# Tp"&t&dw]Qi%Xf#B7Ŧͦ2LF Ȝ\uQs wAߔGOuq#Wa.S졈*aB&*ChAr*y aނe\qʏ2yڳMm u Mmq̒sx2M(4,`cQ8ij/+${o2BR54B5Ue q_w r_-Ӛt{XCvQ7ON ߙ(]=ߢuaG^/˷_>D'V"e2CJ0Z(RR`u½Wb>&T}OB}&60^nZY;Q…t磼K+L 28~)_mEU78bwǎw#K ,3-J0LL>禳fSv{BڵQ.P+ 63dIT7%4<Zbx)0W:Gft^xقcryo&S=/F"^YįvlJIRT/>>·:wԦDWF+{@x E|Yh&V-'b<=g*t1ϰG&>[4ӝ T\N!'KϷ{@™=k>o d4gPMI\r?X:Ȏ Ts9º"[b!mILlv \_3C6<fщUEoC X"s}q,Av$HueDV"ڐ$xhyod0KJRk~0dk$Lޯ=`PĨ@ _| @ב55yAGȏW4Ӵ0Ibn1/%(v#?66Z< Cs!^L()9[[dbKƙcROr/Mv3 dJE_v .3~TT7Yr/&l+s{{+ądruf"5bOT]h L.u[!қ&7 ʖ\~l5N]䰆:(η2EhӮm Kjq<٪mUb,`؍OM*"1Mէ^2!8ۗ*((>Үj$poYPղpwDj^Le/"GE0 A^6P|kaGy_dK,'TK˷Z 1}bg*N}r33lA9~OƖrWz86f[H7[w6<'ʟ%tċmN_(Ou."e~ѾǏB;:arR03NycRIzZhD5+jJeBR,܁cؼ`wV`Iu0:TU-li4ws|s-0x[\AL}q-Zu̪PuP+?-(؃K..4׮cd>ڣGcoN,7,f_BeeM-̓mf`~V$Q1LNagsaqjǖ(C~Ne )0f.Ilߒ'L<ֳIW9b=Rl7rV,EN%BN E*4b#Mj_>f5㎹@G\QpkRI]f*rkUDz4eWXwy" lͅ/SOݐ?4b2D }%aMy :ŇM /'5T؇Mӟ(ޣ3!p<0g8!w40im%; \3 tsPy%Pֹv88> ?qc%In bZ,}9AO; b -ފ"g7E Gݽ_L5Ml3TqcMu6t s`͚K- ۃR`o\v!Sw.