pdns-backend-ldap-4.1.8-bp151.3.9.2<>,7_lL!M@eeeoA0K/h2ĭ^[Ank2Lbg!hqNt8r0Aي"~xzo_q mFn +kW/Lt>]?]xd & < # <`z      $=Vx@Z(829d2: 2FWGWHWIXXXYX\XD]XX^XbXcYdZGeZLfZOlZQuZdvZxw\hx\|y\"z]](],]2]tCpdns-backend-ldap4.1.8bp151.3.9.2LDAP backend for pdnsThe PowerDNS Nameserver is a authoritative-only nameserver. It conforms to contemporary DNS standards documents. This package holds the LDAP backend for pdns._lLobs-power8-05D#SUSE Linux Enterprise 15openSUSEGPL-2.0-onlyhttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttps://www.powerdns.com/linuxppc64le @ %/큤_lB_lB_l_l_l130502024281d08d8f574453164ca962a98ce004ec37c74b9c31372c95b87f8c0435acca87772cd209394e9fd96ce607edbca403a64af5cd660c7c1b8d282e608ff3bf3f9096115b164f10835aff799914b65f4d651e9fa84f0bbbefde316db994d36c21e56b2096d83db548c399f287966ff082fada65f9a5d1bb72fcd51cf2f67b2ec28e45bd8ee0af5e35fca358e7c6521b81a591803814a20635fb64592arootrootrootrootrootrootrootrootrootrootpdns-4.1.8-bp151.3.9.2.src.rpmlibldapbackend.so()(64bit)pdns-backend-ldappdns-backend-ldap(ppc-64)@@@@@@@@@@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.14)(64bit)libstdc++.so.6(GLIBCXX_3.4.15)(64bit)libstdc++.so.6(GLIBCXX_3.4.20)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)pdnsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.1.83.0.4-14.6.0-14.0-15.2-14.14.1_k8^%@^`]A\@\@\@\[[[@ZZZЛZZZ@Z@YeYY5Y}@YMYMXDX@X~@Xx@Xx@XN@WW@WJVV8UUv@U>$U8TPTи@Tи@Tи@Tto@Ta@T_W@TR(@TO@TO@TO@Adam Majer Adam Majer Vítězslav Čížek Adam Majer Michael Ströder Michael Ströder Michael Ströder Dirk Mueller Michael Ströder amajer@suse.commichael@stroeder.comkbabioch@suse.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demrueckert@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.devcizek@suse.comwr@rosenauer.orgmichael@stroeder.commichael@stroeder.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.deadam.majer@suse.dedimstar@opensuse.orgmichael@stroeder.commrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.comLed michael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.de- CVE-2020-17482.patch: fixed an error that can result in leaking of uninitialised memory through crafted zone records (CVE-2020-17482, bsc#1176535)- pdns_maxmind.patch: backport support for MaxMindDB- Build with libmaxminddb instead of the obsolete GeoIP (bsc#1156196)- CVE-2019-10162.patch: fixes a denial of service but when authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. (bsc#1138582, CVE-2019-10162) - CVE-2019-10163.patch: fixes a denial of service of slave server when an authorized master server sends large number of NOTIFY messages (bsc#1138582, CVE-2019-10163) - CVE-2019-10203.patch: update postgresql schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (bsc#1142810, CVE-2019-10203) To fix the issue, run the following command against your PostgreSQL pdns database: ALTER TABLE domains ALTER notified_serial TYPE bigint USING CASE WHEN notified_serial >= 0 THEN notified_serial::bigint END;- Update to 4.1.8 * #7604: Correctly interpret an empty AXFR response to an IXFR query, * #7610: Fix replying from ANY address for non-standard port, * #7609: Fix rectify for ENT records in narrow zones, * #7607: Do not compress the root, * #7608: Fix dot stripping in `setcontent()`, * #7605: Fix invalid SOA record in MySQL which prevented the authoritative server from starting, * #7603: Prevent leak of file descriptor if running out of ports for incoming AXFR, * #7602: Fix API search failed with “Commands out of sync; you can’t run this command now”, * #7509: Plug `mysql_thread_init` memory leak, * #7567: EL6: fix `CXXFLAGS` to build with compiler optimizations.- Update to 4.1.7 with a security fix: * Insufficient validation in the HTTP remote backend (bsc#1129734, CVE-2019-3871)- Update to 4.1.6 * Prevent more than one CNAME/SOA record in the same RRset- adjust buildrequires for mariadb 10.2.x on SLES- Update to 4.1.5 * Improvements - Apply alias scopemask after chasing - Release memory in case of error in the openssl ecdsa constructor - Switch to devtoolset 7 for el6 * Bug Fixes - Crafted zone record can cause a denial of service (bsc#1114157, CVE-2018-10851) - Packet cache pollution via crafted query (bsc#1114169, CVE-2018-14626) - Fix compilation with libressl 2.7.0+ - Actually truncate truncated responses- Update to 4.1.4 - Improvements * #6590: Fix warnings reported by gcc 8.1.0. * #6632, #6844, #6842, #6848: Make the gmysql backend future-proof * #6685, #6686: Initialize some missed qtypes. - Bug Fixes * #6780: Avoid concurrent records/comments iteration from running out of sync. * #6816: Fix a crash in the API when adding records. * #4457, #6691: pdns_control notify: handle slave without renotify properly. * #6736, #6738: Reset the TSIG state between queries. * #6857: Remove SOA-check backoff on incoming notify and fix lock handling. * #6858: Fix an issue where updating a record via DNS-UPDATE in a child zone that also exists in the parent zone, we would incorrectly apply the update to the parent zone. * #6676, #6677: Geoipbackend: check geoip_id_by_addr_gl and geoip_id_by_addr_v6_gl return value. (Aki Tuomi)- Use HTTPS links in .spec file like mentioned in PowerDNS announcements - removed obsolete 6370.patch - Update to 4.1.3 - Improvements * #6239, #6559: pdnsutil: use new domain in b2bmigrate (Aki Tuomi) * #6130: Update copyright years to 2018 (Matt Nordhoff) * #6312, #6545: Lower ‘packet too short’ loglevel - Bug Fixes * #6441, #6614: Restrict creation of OPT and TSIG RRsets * #6228, #6370: Fix handling of user-defined axfr filters return values * #6584, #6585, #6608: Prevent the GeoIP backend from copying NetMaskTrees around, fixes slow-downs in certain configurations (Aki Tuomi) * #6654, #6659: Ensure alias answers over TCP have correct name- Update to 4.1.2 - Improvements * API: increase serial after dnssec related updates * Auth: lower ‘packet too short’ loglevel * Make check-zone error on rows that have content but shouldn’t * Auth: avoid an isane amount of new backend connections during an axfr * Report unparseable data in stoul invalid_argument exception * Backport: recheck serial when axfr is done * Backport: add tcp support for alias - Bug Fixes * Auth: allocate new statements after reconnecting to postgresql * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer) * Rather than crash, sheepishly report no file/linenum * Document undocumented config vars * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate - misc * Move includes around to avoid boost L conflict * Backport: update edns option code list * Auth: link dnspcap2protobuf against librt when needed * Fix a warning on botan >= 2.5.0 * Auth 4.1.x: unbreak build * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)- add patch for upstream issue #6228 https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch- geoip not available on SLE15 but protobuf support is available.- Update to version 4.1.1: bug-fix only release, with fixes to the LDAP and MySQL backends, the pdnsutil tool, and PDNS internals- Update to version 4.1.0: + Recursor passthrough removal. Migration plans for users of recursor passthrough are in documentation and available at, https://doc.powerdns.com/authoritative/guides/recursion.html + Improved performance: 4x speedup in some scenarios + Crypto API: DNSSEC fully configurable via RESTful API + Database: enhanced reconnection logic solving problems associated with idle disonnection from database servers. + Documentation improvements + Support for TCP Fast Open + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK - pkgconfig(krb5) is now always required for building LDAP backend - pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed- package schema files in ldap subpackage- Update to version 4.0.5: + fixes CVE-2017-15091: Missing check on API operations + Bindbackend: do not corrupt data supplied by other backends in getAllDomains + For create-slave-zone, actually add all slaves, and not only first n times + Check return value for all getTSIGKey calls. + Publish inactive KSK/CSK as CDNSKEY/CDS + Treat requestor’s payload size lower than 512 as equal to 512 + Correctly purge entries from the caches after a transfer + LuaWrapper: Allow embedded NULs in strings received from Lua + Stubresolver: Use only recursor setting if given + mydnsbackend: Add getAllDomains + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace + gpgsql: make statement names actually unique + API: prevent sending nameservers list and zone-level NS in rrsets- Ensure descriptions are neutral. Remove ineffective --with-pic. - Do not ignore errors from useradd. - Trim idempotent %if..%endif around %package.- Added pdns.keyring linked from https://dnsdist.org/install.html- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322) * upstream support for Botan was dropped in favor of OpenSSL, see https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released- This makes the schema fit storage requirements of various mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch - preset uid and gid in configuration- fixed use of pdns_protobuf- update to 4.0.4 - fixes ed25519 signer. This signer hashed the message before signing, resulting in unverifiable signatures. - send a notification to all slave servers after every dnsupdate for complete list of changes, see https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/- added pdns-4.0.3_allow_dacoverride_in_capset.patch: Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3 backend- use individual libboost-*-devel packages instead of boost-devel- update to 4.0.3 which obsoletes b854d9f.diff- b854d9f.diff: revert upstream change that caused a regression with multiple-backends- update to 4.0.2: The following security issues were fixed: - 2016-02: Crafted queries can cause abnormal CPU usage (CVE-2016-7068, boo#1018326) - 2016-03: Denial of service via the web server (CVE-2016-7072, boo#1018327) - 2016-04: Insufficient validation of TSIG signatures (CVE-2016-7073, CVE-2016-7074, boo#1018328) - 2016-05: Crafted zone record can cause a denial of service (CVE-2016-2120, boo#1018329) For complete changelog, see https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-daemon): these libs were merged in systemd 209 times. The build system is capable of finding either one.- update to 4.0.1 Bug fixes - #4126 Wait for the connection to the carbon server to be established - #4206 Don't try to deallocate empty PG statements - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer) - #4252 Don't include bind files if length <= 2 or > sizeof(filename) - #4255 Catch runtime_error when parsing a broken MNAME Improvements - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi) - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler) - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler) - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo) - #4192 dnsreplay: Only add Client Subnet stamp when asked - #4250 Use toLogString() for ringAccount (Kees Monshouwer) Additions - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172) - #4142 Add used filedescriptor statistic (Kees Monshouwer)- update to 4.0.0 https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/ https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/ - packaging changes: - remotebackend split out now - enabled experimental_gss_tsig support - enabled protobuf based stats support - no more xdb and lmdb backend - added odbc backend where supported - drop pdns-3.4.0-no_date_time.patch: replaced with - -enable-reproducible- update to 3.4.9 * use OpenSSL for ECDSA signing where available * allow common signing key * Add a disable-syslog setting * fix SOA caching with multiple backends * whitespace-related zone parsing fixes [ticket #3568] * bindbackend: fix, set domain in list()- update to 3.4.8 * Use AC_SEARCH_LIBS (Ruben Kerkhof) * Check for inet_aton in libresolv (Ruben Kerkhof) * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof) * pdnssec: don't check disabled records (Pieter Lexis) * pdnssec: check all records (including disabled ones) only in verbose mode (Kees Monshouwer) * traling dot in DNAME content (Kees Monshouwer) * Fix luabackend compilation on FreeBSD i386 (RvdE) * silence g++ 6.0 warnings and error (Kees Monshouwer) * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)- update to 3.4.7 Bug fixes: * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler) * Don't reply to truncated queries (Christian Hofstaedtler) * don't log out-of-zone ents during AXFR in (Kees Monshouwer) * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien Cauquil at Sysdream for pointing this out. * Handle NULL and boolean properly in gPGSql (Aki Tuomi) * Improve negative caching (Kees Monshouwer) * Do not divide timeout twice (Aki Tuomi) * Correctly sort records with a priority. Improvements: * Direct query answers and correct zone-rectification in the GeoIP backend (Aki Tuomi) * Use token names to identify PKCS#11 keys (Aki Tuomi) * Fix typo in an error message (Arjen Zonneveld) * limit NSEC3 iterations in bindbackend (Kees Monshouwer) * Initialize minbody (Aki Tuomi) New features: * OPENPGPKEY record-type (James Cloos and Kees Monshouwer) * add global soa-edit settings (Kees Monshouwer)- update to 3.4.6 [boo#943078] CVE-2015-5230 Bug fixes: * Avoid superfluous backend recycling * Removal of dnsdist from the authoritative server distribution * Add EDNS unknown version handling and tests EDNS unknown version handling Improvements: * Update YaHTTP to v0.1.7 * Make trailing/leading spaces stand out in pdnssec check_zone * GCC 5.2 support and sync boost.m4 macro with upstream * Log answer packets only if log-dns-details is enabled- update to 3.4.5 Bug fixes: * be careful reading empty lines in our config parser and prevent integer overflow. * prevent crash after --list-modules (Ruben Kerkhof) * Limit the maximum length of a qname Improvements: * Support /etc/default for our debian/ubuntu packages (Aki Tuomi) * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof) * Various PKCS#11 fixes and improvements (Aki Tuomi) * Several fixes for building on OpenBSD (Florian Obser) * Fix several issues found by Coverity (Aki Tuomi) * Look for mbedtls before polarssl (Ruben Kerkhof) * Detect Lua on OpenBSD (Ruben Kerkhof) * Let pkg-config determine botan dependency libs (Ruben Kerkhof) * kill some further mallocs and add note to remind us not to add them back * Move remotebackend-unix test socket to testsdir (Aki Tuomi) * Defer launch of coprocess until first question (Aki Tuomi) * pdnssec: check for glue and delegations in parent zones (Kees Monshouwer)- no longer ship dnsdist here, we will ship a new package based on the snapshots from http://dnsdist.org/- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569) Bug fixes: - commit ac3ae09: fix rectify-(all)-zones for mixed case domain names - commit 2dea55e, commit 032d565, commit 55f2dbf: fix CVE-2015-1868 - commit 21cdbe5: Blocking IO in busy-wait for remote backend (Wieger Opmeer) - commit cc7b2ac: fix double dot for root MX/SRV in bind slave zone files (Kees Monshouwer) - commit c40307b: Properly lock lmdb database, fixes ticket #1954 (Aki Tuomi) - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof) New Features: - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out zones - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and f12fcf7: TKEY record type (Aki Tuomi) - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350, fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9, c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki Tuomi) - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use them for TSIG (Aki Tuomi) Improvements: - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure zones; this saves on one rectify when securing a NSEC3 zone - commits cce95b9, e2e9243 and e82da97: Improvements to the config-file parsing (Aki Tuomi) - commit 2180e21: postgresql check should not touch LDFLAGS (Ruben Kerkhof) - commit 0481021: Log error when remote cannot do AXFR (Aki Tuomi) - commit 1ecc3a5: Speed improvements when AXFR is disabled (Christian Hofstaedtler) - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not part of the dnstree (Kees Monshouwer) - commits dd943dd and 58c4834: Change ifdef to check for __GLIBC__ instead of __linux__ to prevent errors with other libc's (James Taylor) - commit c929d50: Try to raise open files before dropping privileges (Aki Tuomi) - commit 69fd3dc: Add newline to carbon error message on auth (Aki Tuomi) - commit 3064f80: Make sure we send servfail on error (Aki Tuomi) - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof) - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing stack usage - commit 267fdde: throw if getSOA gets non-SOA record- update to 3.4.3 Bug fixes: - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben Kerkhof) - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees Monshouwer) - [commit 3ca050f]: always set di.notified_serial in getAllDomains (Kees Monshouwer) - [commit d9d09e1]: pdns_control: don't open socket in /tmp (Ruben Kerkhof) New features: - [commit 2f67952]: Limit who can send us AXFR notify queries (Ruben Kerkhof) Improvements: - [commit d7bec64]: respond REFUSED instead of NOERROR for "unknown zone" situations - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof) - [commit d09931d]: Check compiler for relro support instead of linker (Ruben Kerkhof) - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where possible (Christian Hofstaedtler) - [commit 5a85152]: PacketHandler: Share UeberBackend with DNSSECKeeper (Christian Hofstaedtler) - [commit 97bd444]: fix building with GCC 5 Experimental API changes (Christian Hofstaedtler): - [commit ca44706]: API: move shared DomainInfo reader into it's own function - [commit 102602f]: API: allow writing to domains.account field - [commit d82f632]: API: read and expose domain account field - [commit 2b06977]: API: be more strict when parsing record contents - [commit 2f72b7c]: API: Reject unknown types (TYPE0) - [commit d82f632]: API: read and expose domain account field- set $LD for now. this fixes the configure check for relro,now.- remove custom PIE handling. upstream does it for us now.- update to 3.4.2 This is a performance and bugfix update to 3.4.1 and any earlier version. For high traffic setups, including those using DNSSEC, upgrading to 3.4.2 may show tremendous performance increases. A list of changes since 3.4.1 follows. Please see the full clickable changelog at https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342 - move man pages to section 1 to follow upstream change- disable botan and geoip on SLE_12 because of missing dependencies.- Fixed broken _localstatedir- fix bashisms in pre script- update to version 3.4.1 Changes since 3.4.0: * commit dcd6524, commit a8750a5, commit 7dc86bf, commit 2fda71f: PowerDNS now polls the security status of a release at startup and periodically. More detail on this feature, and how to turn it off, can be found in Section 2, “Security polling”. * commit 5fe6dc0: API: Replace HTTP Basic auth with static key in custom header (X-API-Key) * commit 4a95ab4: Use transaction for pdnssec increase-serial * commit 6e82a23: Don't empty ordername during pdnssec increase-serial * commit 535f4e3: honor SOA-EDIT while considering "empty IXFR" fallback, fixes ticket 1835. This fixes slaving of signed zones to IXFR-aware slaves like NSD or BIND.- only enable geoip backend on distros newer than 12.3 before the package lacks the pkg-config file and there is no fallback to finding geoip without it.- fix permissions of the home directory- enable some backends that we had forgotten: - pipe (main package) - random (main package) - geoip (new subpackage) - new BR: yaml-cpp-devel and GeoIP-develobs-power8-05 16009521404.1.8-bp151.3.9.24.1.8-bp151.3.9.2zone2ldaplibldapbackend.sodnsdomain2.schemapdns-domaininfo.schemazone2ldap.1.gz/usr/bin//usr/lib64/pdns//usr/share/doc/packages/pdns//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:13121/openSUSE_Backports_SLE-15-SP1_Update/800bb5e90984cb5e1dd903a4d61773d3-pdns.openSUSE_Backports_SLE-15-SP1_Updatedrpmxz5ppc64le-suse-linuxELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=6eeda6d5ed26e6745fe69819383172234c4b438e, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bcd476a1fafaee70b2dd64b5ce2a2c61a36d23f3, strippedASCII textUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RR RRRRRRR RRRRRR RR RPRRRRRRR RRR RRR RRELyTutf-89060bc66dcb9a704defb459b1f349715f2f1022b549f4673bd772109a090cfb4? 7zXZ !t/X-]"k%60E<$#]! L)- 7׊7Z!ۮ:6lQ).WuPmaR(w0DS&8,aQUh%e,LͲ%^۫_2VguWH?mU 76W(S>|3IpS  ÆZAġ;v[BiVi`V=8sAIج /ls8|!Ʊq$rʫa- |L SHFnϣ9y)cXKZli?; LOHb@+c PpXkQy f )ah؂Q,DITzhoQN&#tQ6^Q΅1ebgk{-2ɮXb.N*rX!%*Y>o@:7X֠@. /d?> pTb@_14[KeJ_rAFvE3Omyb_yB~LR2=/GwQh9J40[]=cob5!`+xWwg.<2L?:Dd喏s}iɝS9Di^NĚ㯬"i3?Ջ^v& T>X N&)OhC= . ɑH?:`ce+jD>m ~ "tT4Q{M3q[zWA\@ ܻwϽ/͔]` $dY ~>OJƾnHQyg5tpK]ʅ.p_ I }\0pFYCtN5_#Xs1E v-n+vKh_CV(Iz/OB vN]1VyG0EaDi-~)@|/m䐫z&xhSszfHcJ\AC_)׆w3Pޖui"Җȴ]n,˚;V "K`}U"2? dau^a 0) 5S pd@%bbXQ^"a3$. }o6h,,M$-fŕd,-O9,{[+ 50ŏu0i~TTAuŒhV4`ͪfO,[.rl(L81D,`F$n\!ff'[?}i"0|D\@9 tncuoUIN %1sՃVԙ*?X$¼އ\:YKˊ4yzҲSWl;k\ݣ4EC)QnJ@3p* lywmd웈[#'}K7!B)kňHZL4(uΒ# ʚ $ɡE1wE6܂N/^<{bU6smP"*5VK[](WٜeruSTa(%&~gyѡ-)z^rqOAib.e  :F[P5Sc":=q,2*d _ 5@,d)ʌˮtKΧB׊",5k-M^&NUlcOb2K@2vAn2?OՕr=W/ד|}ysEY 1 Y(k)+τg 3ĸm; ] PS=g t&R)X0F:g,Xni"hg~zЦ f`6SkZ[/J1E`QXP?n$~O.,[,݌^M 6g {iMHA PBiJ$Oy=e'P>;nvMv<6s^Ni76ك"W-3lW@n FÿNu 2o/7'u4$&zވlJI͛tU\㮱C"MQ.;m*ՇqvDfِS'l>PkdU2y~q|za +Ӄ_J)!52F>MAș~TlM\e9W^YذF B2мؔ;g0ڜr@{X|rnnjq._~ʧ0iߝ5Ƕg2!;J)UR-h|;Q-/Y~U#7%r[7dJJ22 Aɛ^~U2-Nͤ%}8`ЛWtQBOnyyX.N3dJQ[~-ĸjv% 62u"͇OϤEw@%*52 mZVevG ֻ"}">``bsN~{RsF( y{ V32p9GH2lnD"Wzo!C{Zd` h(Qg߾(]$9B1J׉Cg7X n3_v9ARE~a_59-A9Qj.R-[ٝzb\;i0; ' Qw,tFt>s^feJ0 aIԖtS!wN^`"ܨYIq EFsOY3C\%x ?]t`!HSltrcC +rME_~ra^%y]շG9U s{Nzbl>&rhF/sbD;5S)O=ڲS.+9  ,쓳uj;eQT7q#ZeU4lϟd\3cOcزKI`d p!N1s=5Fe^k OЁ[ظ~"4,&u})9]+sKmǫ\\;uݫ>Yi\4E>FL"[%3qHuQe4 +ق+"ּ[`+ȃ( Iqb0sm?3p VN-{+ 6^G1f'3;Hǯ{?G ! [& !B"ِU.C< sӎgvXuBqgDzo 'lI%2u>#(A+}4aE&Eڛ.6Xژ)xңa-bW4|C%׬2kauCFShnؐ1 3X\V.Zlj|94Y{e]( îNnD৳Ya{岱uXqX=Kk`Sz.frnm 2isJiPtoOȭeDo*_ T? :Wf|YA.ލEmϐSn!C}& sk}5$t~glB!" {xJ*^3g72hh)&}WxPnh!Q%)6kC)EĿVj[dM3\ػ| q:}Äl&tǷmIOcXw'S8P%]UKuNՌPruE:U䫬a^\Jza7ӂ걠`CxzKnnjRƳbӄ Vfo2g`bl,, BşDl݉diT68gJbpWѣ6J>B +={Э0hyf_[j:K^]ҁ^D8✦FׄzCCFjBŪi$N!&µDsZMGt.yԡ/g!3n΍0G|يNN^*MHCdZҡd] 8^Ug3<|CP2Y^A.̂ `/wӹ<(UCB9oxs"1&ǓH2+qAF?8=AY] 8T_xDo]I(ufm1#|Q$LN(#cp;=LJʭ7Gk덑~V{zҸj|)_vcOG5o(㝤Fq1OE`ljbkX^~>Ӳ_s=Dkޮ\jFv C&Kknp3M]=N\GA iD |lHOЧ}^69zz5!9MIKFay# sCU+ #JM 6XM'Ma"*Q0Z~l#0BcoO0{+j@1c:-%X^ܟ̃H 4)g;Vpu p#2-Rh[+S#WC`r䆫^?<Ӽɩk=37"L -ݩ^T&f{E}g!2?:yRo6K+g`~P2TeL j) vM,㞝6w"_"z*qlaI? Tx1sglA}~(]va\ %3˞IR͒ßXg3]#fPlp{HBˇd[)8G(x7YJBoP3wsc%k?jH7Z>? yTk=o=q_x˂ƘIR{XԡLTD<`r]^3v[u:JN񈪄5~, +(|0d.ސCN.6w2 Í5扢QE4Bs&E+ZA&XQ6A#Xvjؑ٪f@⇭޻j4iXm|R *>]7P\=,p =sW _qqHchHU^X]r@Ed7T?Ɏ 'h -T\t:4rw68ۄt YXjYՍ1ck;wF_9CS Q,CPQ]OO>GܹFAFrj d̰m%=y%8#(l)wA'J˂&/5+ ,zJg|Ҹ0~-ű!1l~ޗ|."I:5|6q$Х`*eMqjd=$%i__:y<#^JD.KG6%S:$T̯bhIgsAZٝM$\w AGJ崺s,fطlH&|V7yrre5um-T Bd0(ꮩn>5NTٱA)$>(Y-y,=/~r͚d9384C#Z%vG (P:3tN&oտd@W [sؽF pBșQWzEim˜r'jèX;|8+ e9Qɵ *7!:t ~vA OEjA87ջUGPpgk;m@-l Q=Qtn\67 x_cY?HR"ebh FrL )t i-Op#=!qBFVۋP֓o@?A=ylٴ/|Q]";B\ 8l"|(Z)І૲zG-# .>׿E5"="x n^%v$yQtEa9>~`ux5]0rFt[,۝TT0SdB!Vxmv|:o5u`Pž~zn|fVcUeӲL3Ѭ7!&^e R'FNQZ(;#Cz~: kaމ18^U^gh,~<vPNtPLBf1H.p *bRM֦xqzZ{-#._F0 }J6yfG(Tm`*bKdYt\)=;xaiZTїԚ"{񭫞TR.10=G0H>vF>S&oxMsJrȚ6·ALôC*8ѪIIf/痢NvDŽ8ο[PyřL7λʟԯnNXYxe;ϓ|?f9@lIĕ0xwۓs_IzQ fzG"DL}T.M ?B3ZD=a@+/; n'r.[_/aWk ,4~ TmB9rꂋ_;)v7ZP+˕zP_& "J4I/UA^f |۲2G|*d*>W®.< L8*k$~kX=zk&Ǹ|QgSS©1Vޗ14{g%|R hJpi 8c;νsRERƓIՃ`W͈·L"(T9[ (f>7ʍM/4 <׸WB0Lp+6_mNIdv%1cvHg4gǚv{rP%:xgj \]lܞ5}#$xFf`|!ۖP*b!#&MJ=9L;zsp\p:9ѝhEaxhI׷ޞGp ^A--W zf@ɗILV#,,[yzt[0MܻH nҥ/QԌ QbC"ִԜ9YQJPTU]Yc]?aHI>aP"3+Cytc jJKse_Il07K#/G=XLKq*ZMk4G RFĉt09:gL,w";RA%R:oJr@&{Vd3!Œ멞O?8Xy:1@+Fwc=K$ٳ<sB lsfSQ}H%꘮Dz8nXl2R;]Pv>|V ։sBĄyS̫DL\*`ܑAU]nByLB['#h*Y4z¹Z^I$6!3)ۨj3b/ČH5bj59CL2+W)+'DžFj Lx'0[20r_N+z˄܂(u"\.'rC06|qu~uѹxs-bXFn9$LTO\T mGuoʡi! 8DNrܩ0]ɐA, zix%P8Nݖ8rKN!+|Mc[K)_~GHhW8[CM89hEt>斍~S c x%˒^&_[lF7j&۴kJ1̆ɪJ"Ҍh:gk"j&.b=ܪ4{J` ]bH^;`!rTkX NeK,oΕ?_qRCOBkqf` yǃ.x4UA-CviuRPή||-jCKSZܻpϰ; 8=(LNANxʽb6GOiޓ[-5y·~P(~4a>N, /Yuz1-qOdߥ`7t ٤k54O֐I-ncLM(89XurB<"=hA|^WldW & @! <^v[l璾protWWu`IIaw{o GޒSt`(5o%24RJ:|oW+& O"O D|B7Fz̏%HF^zˡ7:*"ZnD|WxMj'A;$*jX j_PS*k[H𓝍BP^NJl<|G(5T=xW}~s\яFbmA(s$|aKjeb)oKC> 6$?+`(b/^WWؕ)͢F'8nѡJ<ϱGߦ\'?4\mN?lyJjU0}9ljT:Vd? elҸXz\0#[/Q/"fe ۲ŦX n=6%\*sr(+=jxFh̕;{R D|ơOe{>f'%W$*Y'ADka4g˷陵 /ři!M:s]?ZD[=a`'Xw nX4tQ "?.M!O[oIiۨ29w%at^mJB&u 9_LIF$Y&Z&a8Vc*󩮁|$9=A3 vjr' ]ZfKrqm(zTS2u$!!_os0AzSv]¾jՆ_\.a_. sq%Ja3! tXދF;ii/KۙaUҎEv-K4oQ4c\( 'TPACjae(^eS}&\b_sP֘p[AY0"8DA ='Lq OK9dC/,}ɘJ?2 n43n(K8-Lyvc׾-gIApeD?Ex{ s†eD,f"nI:<58cUSq-}X ~xV**{;!hwI=k%#jg(H_4Gy CJrzeK(щ%s|VHe}W﭂v<3{q@ϋ$jxѳ/N#fȷ4ܭșjvS&2;"bLwzʬ]M`>.oJ;ExFETN<`a?nUP3kb|au_{e%- Bˢ}bSjAπ;^ދ}jO<#s!s)Uؐ>ki!iE+<1T#լ!ż5f5l%F~4oFZ%TZ'\-XnjOӕВ_! kebڻwі;`o-\i",}#Hn]<7>:UuX5}/ Ӝ͘s6g_lA4磃Zp 4;$N.*qQsW\߈Nqڪ,Dc%o@OC@y=:\k˗W+f:gç,u3Vdr5+ek6CIQ@ޚ8Ik}] =!/g poL+S\y0 .Q?BW"x;u~<)5Y ~:ߍV=pꭞ삭!6PL,!^P{w i~'|Q2avƫ2W3c]qh1b"u:5s4z_4n1h͘a8U=Y;B;I{gl$gAT@h ѽ.U:ص2&BLR]D#C5pJ‡lp?β.Tc)طͲ<-'LdӋZW`Bw)2ߒ/rq.na?5EN xڋ4uEk3C||/[s6"@}@ 0htl/8âm~Pr%%4~8]Is !HE/W12 g_%hjD20/e{z&*(WcK`!;=BQͩK8J_2܄Vm%p*}Z6C Wr:!Y-lJu#)X<,3z5[2PŎkC~NkLc!=t v >l*rvX̧_^\SM$ʯWsCyzGɂtuCiq))pZs扛bkz3z ֽ3Du]59qv Rz 5~rO[c3x{ ^sB!-XJҌbB]$-*o} sனAeM&)__ϠFu_v8;RWr^L{(/+OonA+i6 S7/_n%*cD/ߒ4Kw7u|\dh^4QA6q,7r; k-nt"t-W0 d}C-.0hb"h׀Bk58V 0x_c֖ޫ@zh_rmɱNV'&+vF"V[rpcl>;6E. $&LyVM+55cu QDNޝ#X9Cgr,D<$+"MvB 5|Dh Jh7:O&E~eO)bޤj?Q5҅nKh'IRhhD}Hгoȸbژŭ`1"h-˾|jRNфCK@hP% t"5_ȧL\ < R<<ͫ@(59Q_(J\ Ttp? Ӱ/TPܧW>8N*aI֋҄/ (itD>\#EM}xմ87iskޕ>!hE(7F EZBu5BI`oWt籔 ˺%_d?ҽH ?Sk됁ktݢMižR%yyu6bcWڹ /rvT.%etoXreojdrÇA:lp}ڶXB"Oy]YzSY[vYK|pR6qbu Ĥ_q̇`dĔ6\3)<%VCӻU;7%aRTAǕ% C_h1=.Wq]DŽ_/q%PEW@]Xa~xSwe?|a@&-)['m/uQ?o4lN+PknHY]{hC9~#u?uuÄ"&Jq%gcs H(iUVצ.i hgI2KiIˆ:Uhv +(XgrFHʶxICR^*{8n\O+Gn\FT?Bې+MΧ^$gYR|ؗ\w<,YQ'-#3q^$ŗbN1{zd#(Ta' nz?79u.gVNkp q]]~C'# ^QЬU8idsaoaB\**̬7=xI VJz1q>}Cj ('z8*FQ0׮u/F_H)BRq2KFWw.LoTޜGx IDF"dywnPS0/t8b}o 5^ߩ;F_j̻Aᄐ3fTh4Et}墚CygZEm@{rT)i Y2w~1(oC1AX~r8Q+J B]e/sfb_WF";ڍU4(jW9e4gJ`g՟_+%A{Q)}.01tDY`m2En4 uu'W"[R u~DtOۋAXMCSkPWWK^W$7x!y@c/i*~ӓGLݾ^BnRX btj]#jz(g/:3zr2"!$LYCl)3z"@|*=a?l#gƅ]&5{ݧR8'4۵ƅi]XvrA3!E`FG;vG5ʛz- ')KYL?,BJ&^d&8Q3]VDZ9UŵY3΃&9%[r4zU*ćѾzaꣁRs[uL"$P{.͵)s]@ s/JzT;rR=g~Z<$2FDЫDPTB!po@! *WPf< q"yP,%6`2i.EU|ÅOTKdOĆ6#P1}Tdz7Yo7݂?|t.糆|̑-8%F,H,+)m׳CV3T6 :P7ڗ7VV'\5(m7|"69.V~:`^ӋKʩPqY$Z6WÚ"e_٥H UASϡ=nAuٹR*pFɲF&Kqa$yg:WG R’+^8{﨎3Z G[\.1+} cW6Y#Ŕ j`!p`*Hsy~Vp4H^6PlPu󦘔bUə_,k;x f=pSTI:%]b)B;A !! {EK (_wyAmh L*YiΕc ˒/+W@-vFɑ0VDa5-[8'!X N+MmPJH|GxȽX?a:GY 4gB^#hf]Ġ%aҀAWUI-6$o&HJqhT5D5WTdq$Ü(b*ΰ!Y<"9!WE=My0pm7zo%hΣ#đ, 3/֭Y.(z&hjyvQGm;{0KbV=l Уv{gjټvOy_%4; 2s_gL ،P05`/%L0oLѿwxIumC;gj[32W7 l囘ҲMђ]AtȬǰx,~f:`]S0 M_|^*vuT57nMA_MP R1 _9yoq"g3v,IlJPiѯbk4wL;bgUTef-|cgJsfÂY%o.͉g4kRܣcVBsñG/Kz_cˡĈxtռ),ڜiZ\EWI{uշ("0 Kdz.|+_ci@tM.KfftEĤڨ`!my t*oR5IF=JkOn_cLَuv}^HsX#K{Nˊ:9YܧFӧR tkJ *bwyMFl 0_13l}3 Nˣthma $˸:|*\2BX}w u?Mҧm 94iw 4ԧA{7 c,RF8wn8X?@rκsJogH_ʙ^K +h(7/"Y+^px I.I~J@ZݣYnG{4d!6Pd R(hSGjN'.sua2=ڻKUAdT٭`a>sk1<&f^̇.\cدN =xY*\?q[>}c.IϒH7A.Xa6G]k/֫QMo/cu`ch(ݤfI/h؅ܑ &"| DrWOf#͞FeQ8z76TuՔ׈ #T&6t>[^Y/U%=hE~9M:}e簩@i!.]!" V%X(e).*Uq716?=bԭժLP&׭/}ż*ڳ q:ʰϤ-1n7-üNA `%њ%LFaJh|@QYiX_Pjd"o:Yl VNHFP8jG>u^ղLS6O` ;X69Rl@l-ouyw8gIg6#|1+H߫ul^LiOSXݷ.K3 YI90nUOLVwN&9hPA:n?tgnڤ n%j$`tX)0 j]qH)Cx6|LQ<-A(/V1F%1ԬI+ ^-}fY*dQZ8\d!ޔ 8J!sd1k=l#QydžpS G>V,Xئ&fN+揸'}Ȯ$ Y{s@ͨ&d=Q0?qJoqVγ|rP#]_ӌLyѪ /\炚vd*T&ޤhؼ<&2*0Er7[EoɆYg]F7 MfzhTΘfi۞i НMĹI"D!8ɇ7 Xm&m5ڜաG PٛYT$&k =@KeV1aK=zOB47Bonw67q}MnFôf|Pl2z`vai3{@Xao(5?ro-mIGAh, k|覗U7{:r^;W>c(({pTҠ!'ts?U=;L?J79pvUyieՉC?Qv2eͅkߘrc=7wA¡B^fفx9)#g1m5~|B ͢{Y>Zv=O*|*pYCjU󷮵3~7\~ZWhU|̿I=wEd*> ʘGcKg-}y!tZrEu2TmɈ,сr|6o[ =ڽa+շa| I/hOe@ nA?빺)pIPTz}B!m<,d.kUOMdcAw1 .itЃWLChjGj!/ onkTHMF[Vn~bTlLjhIZH#n`:,Ǭ_ G%Pi>T}l5=sxCrKl+˭Peq!pkAAY{U< +Ֆ:RK ﭱdu9F$6%dF\L k\?oހ>GpG[&%՟UKa gTU2w ?m][ oHdtM+ue5&~f %ڍUد`-o9RbM 0ߎJ5+:metZVk{ƜğXud4DGn~hRJe.~TRno#8RɺO@'Ve\*Dcl#8"JƼwo.g@_gUzL`X mutiya%]rtIuV){1p/k+Ivڣu]%94mηdZ(5RgHMt*x-T`cq}v*~=KLpY{z4iә1x S#Yfaz gnD>8Y |\t%1vUa<쥶{/c&`l$WCT=0S>[K$!BT1;i:T0|صPQiVt ^R*T"Xѐw{!eU Qx)"`% K+0FdjjKmԇ&|bh iMYDw[]*v[2F꧍Px]$rH,ޓ-W?ϲ\WhYۖm<L4$(/|<}uܖL¦)=%N3%_rR@nǟubZI f> 7A<|j[R=g8PR>A~a.F)P2J2ZzQ̟(s+ClY5NɎ;W&5IcV_AT;VVG@ ..i\'Tڡ0lFהk j S1͂ZHx?A(_5n 3u; *7` ʋO"L?<\a:٫X%^5摲oSE t<:RE|.A(SElQmxRP/* ,OrكF 1d"Vtz^DN$I+!b;^yTkC,V7O Zypbh'Ry j׳mw<ȧS3I9rA]9֍m~f^ 46Nft?a]ϕ/#M(\xb՛{ɍMˮYIE, }|e&2}CMO)3Bb 6t3~Kd \= =t5Bu3R2S 3خ..~$W 4n>ڍKPP)DX޳o86*G$ßiȣ.(=A& pB{Δ*^&x!-?{Z.Y^{b=nZj5  vP RyK0."Ka9D?xTHpɆ HԚ{]aWwYVr Մc#llE}_C4Hx "T v Ԑ&>Q?R՗W/sn-g}߀%䉽#ǿHk ?n`}qhG #hJEZ{NL; ^t=4ԌQS="@0a,1Dy򜣬@ݻOSL,YSzaK;m͔fdsV!iMcKxh/z菙rXwnN^S?zř-#G~<ɉaOu"%hUL7%1֭{4 [BGgJ=cwcN'X`pm #HA\+S 2x*H:=t\hJ#䂭Ϫx0R㡐s&ґΩ +e;U\,R$ Nwf %)5^D,|ًQ1Nhn<]w1p%+dAXe3+⟚8Ų}To)gq~0(1.V&p1H? R }qKn ؋i#;FJE0çj97| )t'a> WޝjMMyk+Y.E=y80B`P,p#h,g!)W+އ-|(m\ƃij aԁG,`k"Kzݥ%BNӋ eb?v᝴bc\B>*r:khI/=f (đss ,Gca-r@7J^sd9׫9Xz/ OE@2U_WMDQTVO<=Mŷ\_Fe|f:#@V2׃ltz8^Tj.t B0PXt.+1=$/1͸t3XR$[&V&`%b f+TR͘"}sMECuF%,X`YDYT8LB{Lt %բP|3P˰Tubrs SG*irPG6\o'P?'ވ Xv!DNu]eO 3C`Hܳ5' 2AkZL Hpm@G:11AYeh#[Nf߈z>Uhek*!K4_Q,J u!7/e\*cPeg8͋z  P^NFtWyi]T)1{ &rb̀PU(xhֵG֋l݋[e(nd;?U{w>2DioUDNve-ݙ ){TvK_LL& ya9]t #l'eTe:nya2ĕq1{>HG!- Q5BPxuuRnvO uS17z:iؒ˷ɩPsQlk敺h>`;GiI_u߰RP3Yt˨pߣ9Ddng ilMǘ|`lO}7=Н5DSV373'D;mgut q֨i9ޓ0 hEo^~%YXd^ yďA\ ӹlQ| JH.%wG2N>U[$(H:x v+.Ac#!v8Q<77x ;ug}rBpJ q+bnuJ0cJq8$q)D7+%,Ézh!e+7갮в"Su3ڇu~ƂC`7nsEɃ1*.ÜA0es?sNe">~ȋOCϦ'QC"j4&Hxiw@)lhلX9K<>$߉xK`[px VG.ԈOhtb4Q"a)>gW(S|1(~änIݳ.C;JtGVdܺx473ǨTUy}rM0}Uws8Uo>@ jwָ 磞VacM(;\AK.쎈]SyODžVZ*m57D׭i'(oa5MTC\}BD OPlzǍʌ!t(n0tt'6ZK ;#H>F!bm 2`%$˹ea[iA`Դ)+iE](wz=/H'xYO9`L륎n/iq\-\"̝!UӦEH/K| ި*cF$br^{GJ)ƴj{}`VVwH?WmRC;gTȇpM0Nae' ̉=j3;,놪2tP<}Dm`kvd'"VUGe.Vh%&`y6dדԄR]FiPjuybCib.tS:FV3LX9Td1y^7i<ǯ0%8& Zїll_*B`iUpٍ-9sk9mlP M gl O3'+)Ap5I^eAgK#5>3i=&H{j}|JD iVg%`}&_j,缔4`V5 G!m&Y ?.5amr]RNG۩!VL0ŽtqRn2  En5k dv:*d7_Z0dA.`Y{yiԽ*W QVAH1D6]=Zw!ͱ l4Lek )y %$_7^1^'Ŗ͑9{ KZJxt>vomYDhp9\*cH@nzY?ʕK!Y;:΢$y )Ȫe@I_lH;/rλhezҔAxؖ=e# c=żd5^?SO(3{VKjSlEY,4jVBeLbd>u.)ҩk:3Q$ař0G +R+{l =;&^k 30\K`%ud.iTi箮(t_KXgQGIQuWuYup"Vߐ\6(Xudw3苾&77)\F~<ۙAВ݂9 ·UzD>C/ @&T Uoڸ&ݐbֽ; qπprcx#ijo-Ⱦz>-*, VH hqzv*N@SY e%b1y"|{9sk^,"ls8Ʒ:aʺfd,ݔ98FxvAzbaEgzCL޽p5f^m!= 7\’}ΰ53XzvvDsȒBjI`S̠qAZaa4| P뿼ftϡ)e6~=}ih|--ʢ8\6(_$\^d!%0vxs ~Z'NBeM):1yuߗnj] *I}^'RxMB5`f>jGD%=tz4 pF$?}W2 x#o3TA @.>Hab9a}4@ԏ5_Qy`<5DͧO&kAwh=&tr cr t`1PPx 2Ϳ{Z A~b/gP/*jb10Ia_b CDm-$bfѳ0`-J_ ~eR"D2 l#ky52 h\ssߊ.KƐ*;Ůo"qilCMA#5O~ 3 G"Q0 h?AL78hЌPާreWji}qy%R^ K`:P1 jθ#(e}b2*6ÿ~E, ZL-GOS9o`xglx>h%>TH3j'm-Zʯk1t'b'v]4[D%aHN,'$J Y{,)bx0-v{W 1)P;'*l6牑n5ȻOǸt,༔_S89nc(`fmpEIT I s16[|>L ~+;%e`.CpZڎyĔa+ ՊRO#%?a`@\tLPپt+X*pdU2gs6xyxC"!8To'G> i!~ޒ{ge%|X?zUvCkt%=S^W:bttwQᛛ߽[=UMG|M 5YOv.OQqĹc{iã sSjd/U~QFm=֨&<!֛w>d+ mΔ]"p c;1j A^Iyc HCâ2~>{&8+ oDz, kmŹ}4$h* KgDa7B,pa-H+ Ֆw &Yv.?.l֨t߬ybg3#ogzؑ0f֙DОs(%F8w^b.f'L/-y :R|kTmC;h|0L Z3TYG%ۛ6.v^2_;B:>Qi^q$M`TmKV3TSu;FiN10҉9H fJ#6+׉$zlMnh%7s?,6L}5f^Ƶ˽rW]tlrB)Pxwp-Xe=|͚Hq}Cu%)SaM6Zaf#Ҽ%'SSn as+6> <ƕ}q.g(E+ښR1=,Rx$UɐM`VOudSԏ .*+ 댭!6jvdPjP]aWǜ ^Dʓu;%tx5vun 35W!x)Qq7"Tk}9o:M l'~ n(jIrx`EspW\ZJ$' Q F?NL6M׻k48mZ˵]Qaj,}똕3JlǔRC3(|RH@`D#2 $rPVa-E^j$@jI)bQ"͏P}zNC9zVXkjngqBL=Wkт@;s ZKjzS>Cw芾N"̠je'{_gnJ#+&`Y0d1QZJ "TQr_|ӀZ@l=w!oun ә,Uw#W<3h;10sqKa Gр/w_8G\"6O(Čvġ&SCqu&dx+{9Mmp >)`ˆz1&]cH/4w։s %G| ˫EAx̌@.:Xx`CG 4-f*ֵo9K:S.SBBDmKR_)cB l+/L͹ksbZD ; cu+BDYӧۘ5$ {ٷo^R}qaURT~dAތURAWz`I ~BVe)%_ '129EDR>ݴKiڦ/Fsm:mBeheAGV#9d)k;iUҳgOZޕ]*b]y\WCƁh%0>a{;烣.ypS6!Kδ  ʠW|j-c7RM:!>nG32iCx&bQ[xb|PvQ{Hb7^. >g!n[AV@DIUbVr qʪcRLt]Kq) E"5U ^&gk`_*S;e|H`jf!_%PU~"\5ִb'l"J2IS#)/Q=mȮ2Ca)h2j}6۩աRBN?T f j["9K.wI%Of{v'sUhdCⓐbgձ%_닙~ѭY擇4i0/~Rޏ8uŎn%uoK0ّ3hs׺`bx؄w<6 --U( vw^n_ʮط'>@mcVd =W2 %_a)\\PKR.M"-o![]GWj-Y&*i.$EL"7ۃ 5 j; dÎ<'(fxRR:2 H{MM Br`RN"ehq{MF0v98|"5h{`M{Eof"nb$LxSkK[([r2AyR8yDheD]YpkxUr Dq19&ZI^! ;wO"S{>_fԳc+&2BTXSPaZad|QƜ/i قʗxb1{M^ DnrQΖyGx9;*R# @:`luP-cgI 5~W>( +(4 !It8&Z"09,H%|pe9u"D"מSx4Ѥ"3Z ^Sl}gCH|UtL[ޘ(aPf]B/}~a.ޚ)J_/+JQZ\hJqӼpP1o+=#SGEQC1wR$oиމn'nPoesE6MdD!E3PdSD>^5p7IG@N%s JC٤ŦǮoF$r;zk#8N@$ZM9pWa4w#@"IBi'ыΧkZܖiڙ2A~T4QWUf,ix_{wBe`JW q5)]15l$#IO}ᇮkNU֧]< A K&w{ʖP;Mg+Nw҂lؙ ~GXlO2o{qgAͲT޳Hi3&50v^@W,ugiIf*o*DA0PnjK) gw /U=%aY;-?:yER+l=i,KKUЂޯ1BG4ZE-4C MX_†A̔χe'߬H_=!.o]Mϙ{;O &AD(f{ kq'|~>HoPINhKkf ƝmݍRe=ց }43r,w<97}UiP|F'̡Dgquei GNؗ®t҇":5 k*6ttӲ hEHQuWw{yÖ ڦZ.+m%)4ĿA~S*=!H b #[@oqfi虛|$XChXY5^MDx[ϵm ۔;xVC7JB"fd=.tx,-"yĘ0ZQSAj)x?JSsa+;Os ajFSM*B Pn1k㎸z;@0+{Tԋ(^1x3 6 jûU(/ 8 ɧPY^t%DZ){+:*c:JlG:7(|4"ڵ䝨Ī}%&(zu| T-8$/V{ݫ[wA[#~6T"$U}<ǖz{zp]W'ʶn1]!|m L ]V>$qu3ZU\]J;b2.y9\2DD(v8{CQ3*1D_e"܆Ki皫9CmQqI1j8GJn6z$NG̒L:v:w^'bP5yYeϡwM܎J x+6u + W}Oݓ-GQ|m@$,2yr QJ覷K[]Z'['յ|zq}7acCkݳretU:S^CI-\u~2u`z*O4"2yV`l8za=Tu n) 0~G)|Y;A _ 3MܝgܣL4l*!"(|R:[ (aޮm3qFYMx]e1rd_&8z>9J@8ЩqL66d~S$+ aYZǘ>=bάtNQ'l&]+Uo!(Ej#L_~ϑw. "&=qS̞ faC[\n& ūK3?J<|CH|S MI5t`LEu0!yqDzP~v~bBӑ m>ں oG X^@] h; Y9)LcdQֵFU׏~VFx51}mz8EKhss7F&(t:c%#uPfb])%w⸢ 0FypVyehYL\o.ML%Wyv"tOys2 =ZR>']s.&OFmZqpХL Ac2{\,7뮰VBrm4_vr@Nĺ+Uh_* IMSIZ!9I!xIE@@vFQx0LS].6G$ n3ծv"dy $JUr@=V(ym|蒍p)y?1,YyG6k_(BG+mt:Y&xSb,)P ߧ=ڣڠG;f}#^oee%[ڞG6'ȓHYT[ŠQ $sjdTtr9Kb1VUg HR4/53e$>%x z$7O429x* d*cLUYh`F$?|$ZUoя+SB/2Q%l—|s2CY{aVۆn1qcRVh յDuM?*VN=.nׅ!\Oټ=h#_kz&e `#jWF,`b ?)"*i:Dx<_?1 g5ݨIJ}$P{Ū?e'Eap*re%}h̻/[V'ӥ.c Y^wD"?puUBEbo3u& AbR#NIۿ) D;y\ {j>=Z?G~NyHkF64OimSH*j'UzWfo(#/4OEU]\{4$%Ĝ'B=Q)6-oV~'jxy!"Z(;Ɔ}hwL*>}f2qD]xl BMLP )ߠ?)DN8UmTR^Y_e ]X3& b4t'8NIf;]{-T-]8tD@d `ݮzjG+ ӲQe>ܦjijSuK.}4MY[d^TT $6!V5Kur\HnV~Zm@x/W#W5DCqD _"ǝF#}L`sU~*'vT^ț.ևͰ BbUO&X²SH:a&b ӸlIqZM`ct;E8`L %'slyo@Hf`H(?6֯.!Qa{)fSZۭ*J1tOLPԉNm㖲Chm Ϧa)Ӯ(\Cqn$Fگ~l L8Űj*K=1PAC$I@b 9nۚBp15bqsYOWA^Nց\ /Z( S}L~J 5DxE?T90IqD9B@\dUJnGrEa./ +=mR3$ U 1'o&)qywj cֆIEX[qM5T}%rO,yG^:'L瑒-2˳6` dˁ#ƒ-\`\ث=͔%/] Χ\`V5s ?H+f<_ f뷜Z29q=_#uZϨS7y1P Tk2q]CW);:Z!Jxz;{alsmg1r5v9^1IxPo3Cw$M瀚{܅94uz-r_gU&`s3;O.hC~|Hcti CQp,I,?jrޖ[Bci)@.%ĎY_/;J4&/])tL>#:e$N݋_+mG`2v0`Bp8-bڵciP 'C܄06.垷 ΠҀ>S7+UbAyLő=U\+fQE9h| ~Īwܘ[橰x8`L"Q2?SK `% :>i,b ~{za-NӤelbTlL/'.V )s \"eL5m((Ch(2 U|;{@yاt;G@xh=?&,#*{^m^DsXl @+BY5TLNU)?z2Օ\漿2q5žj.4mܵB IʶM`), ՞|BAUwAZ|Y|f̄|tՐsS5dI̕I Lq|He^"v΅>=PshTBU;1dcV}O%w=#D>XJtS9@4:Ui*qNJ2mcJwb:#SP7 ɬ}Md"ҰTpL;dhcRnW*YJې~5C1N{UiVL 2il _TΟH9y$wx9cR;d >v`C|i& bR mO)gRNOqNW賗uJ@V-d3ݏAXmUy &n%F.JّnjW?YL‚G+;G\]}nʙ΄fSWS:0SR[;^6(dwTJlI.*]^"#~N9oRzqt9L fA|;ΐ6M&'ǎֶ6q.E/؁eM\tl"T!gMnSt58h-mBĀ+P/c6B͟,[vKC$vpX2L+R ϫ2(mZ\yHw Ƨx&V㓼/ΆIk:YBn. PȔIZUoS0 bI-2aORإ|'u&_-Wc'<. yn,szMrw$p("i9t#V&eioH>ysHֹ&F!d#7&p\&o)RD Z!EtL~J['.CY~9q+U&YIZfǠ;q(/dzreVx|Ygf4>X11Cګ"u.mS0b{ KPrBD'-:*dl#:%C3W(H2ĺ LPkncN?P F 됿*owkk B4|m?hDJmqIU`dfvKDW<-r۽wn7*يX:MPۅz>8k o͆/r9yd\}*_"c%54g{4PmdXUс1T=Ӭ>$0Wjiq@SI^$ύ^_LJAβw;P+wz ԚIyon>@h,ըo.oȒ˓͂#tI{% uQlGgIDGßɛ#?OL(Aݢ3Fޛ@N5!!c{%%lن+TL6WQjl {٥ewrZHMګ)p??]stԚWU :-[$mk`M<";a,q~>͒MW O4cn'm݋K"* l)zZD[w0NZ@׳K4zS^8^7n_X,;UbGͱc!I!\hhnCY+WW{9%)CGkOZ=}&2Oblt4,ZUzzh50?&JO!P^@>g$ݫX>ZFY$$Xy+,Ǒ.qqo @P x 7 7N$(P:k.m\KA.reN!U;= 98a XuC?BE,Ie2 wz FB~Fb,//];}?OXTحjBuJz!̈  V43$f.*"AJ*gmfgp^mћe} A'}s>5y/0E憰qL;b3Reqc-kjK~I;CL L\gf4oBfDģK֖43BRAQ -+^!%ޕ2eyl嫋?+^X֟},J|ĺ.BFV{:LlQAifM8yCܘbth+׿XFCAiVEQ;|XmIh3(PQdC1yDX[F}CYVE؇cf ,=$PzKU8toT ׊\CBOT}mZf/CiTS7qo9:Y jJ7Ttl C_P/72mF_l38C'/ᲠM_-U]NZi0G+'6\t}0=v~BǼPIu{c~D6<(Y@V9BbDZ.~dk7eh#7Vqci0RzG8 cZcDÔhYњSȃ=>"4v)h]O̭M:q֛& qxl2˂Ȓ6+:P:&`q9Nw"2yUZ4EeE/ u-XBBw|b8`F3FԌ z.J%P2GC r©g<} d!v|٥?ŵ6^RX+*!=/5m+ {=)󗜇u_M44puC? \Ѭ%?oE[ov(~̥Vt4H09C `0EYq,"XFjG^A_z]tQS'c`sW?[h]ьҷȄ4SIn j(SU0rxxQ  rxR4:L |BZ'FP 5C<u/.jԊ~9m߾`-Z~eMhQyy#FY5="gz!y DN6L˸jlM+=5LK[껊>͸#XV{6s*]SGRXK(^c6zwO%[̾݅׷k{3Xj&kt6l̍*YqV`OL׎2/^_E8ۢ|jlĜ@fa '3#E:VUS>(*fRR+ u)9N3e&)uQ+,l>e,4F^~wvXHK8 "0D#JAg;cϗP1KUK7]8eqgY(S1V46{ ߽C>ͪAzl6yE4L,it_njwǑUHoTr1WZ ף%xQUu6]>;Fh85Ok`"ЄLimi`ɜH@K0&г▔Lx)/kEj8Kd݄N2p҃Bʁ cHcPM攎9>uWg,c/(eYZb q>Ztn3ԥ'ߛbL̋4&]kOcCE᧡7U Wi :# "„^Ba;)}ѓE]x0%jU#=N`#7f[#TP7-TCH1?,ތ'1jۣREJډ)'Uns"'2dMچSt&> f[J8'oй.ls~e?{c?K*b7t`ZL2<^B`"{eܝBA9 ;oIv.gG7MP&9,h\?aPS))<ΐY5+v6!_eOt(o3̒.J Y$F'g/汼5VNϏ>.<t(z~ॕXWLLCR@UyFDQSxy)Y&"txq%S:=S}-ȨK6sQW(g,;Sm68Y}3ERu2]o3 vRZid]Vv,?BheD>]U֜A$wiImw>@BN86V=F^UGps?ay>`oUt.d.n[< 6;嘉a!{P\hJ|.P֌4J$NF΢/ o5O|:GIs8b"S*w| caNheuݟWt>O$XnrN4e'k NB]8+tgk[@ Q%wIf22߰l-y>?cq|mm"M9ڈZAjOP[>?XxYqk>/NKWmn-L~{we,'S{~,-AZjN3ʘ3 U?頸\gx.?+']zk۩DŽ[&"_~%<jVNã3u5pGR!'B߰jB Դ8$FR&W5N EVkPNӄX1S F`BgTC֛j&ߩXձ"o ! SDt N8| ԰q&( iw/i%UcdMGJ-fjXuC=;JF3&<0rqEUKBby< Nr5zז_0\Uy!MW|`g]l'ǎ Gp)qD ]MuCb=圚ؘW{bg_8 /t/Ĝ_X(8Wg_%*,*+m3VL<$q;gˮ>˲kn1c8 6VBvp"3Uaxjo ߌxNE*kKD%*7NHQhKrOʚlX )h]iԔ0+BN0#Jp)t mqJfmRJ)pȘ>kg l~C6N,TI*8ojh۟9]YK_= ߜ-6"1Ƨ\ڗ}~ mfRڜwۃ(up5g{{N|mJG*JE'/ IrO}~'A u{xxIEy`3FhKet52[X7Emf?^7vȷcbc>{n]րiԚ ԃ;"޻6V/L7%1l$q2 NE pO@!9T&3dk81a~a\"_ bl ؙM}NyCP1LPc㔚Ŵ]s~A 8`7fjJD!p)X%%^B6IY(]^)U?j\ )VtLBcG*o%YL7iOSZ\hh 4mܢ M`3xb^H#mmJwCf} h|v+5"X0.6T2vNdO\Ij/ \a_69\,|Fh"/$گH,\X?<lJ$0_y!8u]\nPh[h=o+S}uX'Ӎ+E MC{/s.A{[8E",9|mY]v=@(F:^PF=W~Rݾ((Ir~/~Kݍ;t)2q֑JO+gMߨ6U=+^с)O" J߽Fܳ'JTRmyP^ćZ6!b(ZM kL69>XzP׃Md1Υ緐 R@UW`l_^e`bH\ Vr i 쪯0HQ61gлOdQ%dW'P=n\?kBko_.HiCÂ˃ 'AJ&@:aPy8<3\g#+~j lЋW|)[;J\]gs'w/CBG&d ?)Cޮ_Y 3ًuR#,3/QjGeU<4l{!K g5ݬAF>GE WV@tw/S`+<O!1bJYS,pՋPpN}'7{Ё9 Ai_EҰ>жOZڎee8n2xa.< N*N0S~XKԅ[iVPyr_A Cs3п[hr')UOYo3ssuሻy Ǹ̈́=ܶV%%u@[h vVIMoىYz/*XoZCYp#ע@MO\V8o=A;W'ϯw!ia*!I[/=Q4fgV2RE}"z8k;Vu~ .ivVaX.FSEO&_\gI* Ek&$xc`4ƈ@ 7[֜婙|Y~V'o=Ы#$nRlaplR9J*HD[{ B:8h?q\\Uttm1ҙ~d IIvQ%>E/-dYW0!EyC_Ҡ !*bjxVuv J,xq9ٜ_~@rH,-= .l~OG=07{_/b}.7UFMg D,n/4u`<ٿŘM X(h-ob'F 6QuƯY'WNnW~VtEDkHpa-Ov]K0I?uZwt `pE=wB1?_:[ȱq[/7t3}؋bn1ߵIj,N!)&wjfk7/jf@{h,tTžzvUP3?]pY4̑jEOL;E @u0Iࣜj%SvM<,eόqkv wv8h%nfjbӤldhV Uf0u∩hO}"2 Gz\A ѓ6vw$.`R9/?1|1i@!_I~}۟|B.1@@!E|8uXI޿5:$vՌH FD5P8Pu0+ġrު)SAw:*-qNE ֯ BY(cFsuL,8ZP4Y^jG$t/2QV' łqfa[h0x(hrf4tZ^wDѿ0v[f69Am}Þ2|M 5)gM_dXސq7BNa29oFff3~{+q!bq>m196m*!%o,hf UߗUuinJGBpܠ 3B9ˊh%am,9 `rY7*Xij=5`M-JP41Z`ъ,ɌKH\۰QA<]*xYe)LLaìjI_LY#wjtīwP 븍uSVU75JVr)޴q1$& oRY1s Tc+D  <]87x|\mteKzYY`e]RMh-@i) jbǯg=ԡ-_B'hB{om?yS|6O,]/QgA g/ ,V}s[|Qbw/d0jv/UkeX8o6,r\d}\;Id+ KkeFȞ zzL#vBVW ^ W"-k/qv˘%/tft@kJ$9bb4OsA4bcSk3I+j#OšQ@g$~OHYD>4%[~IG<?H< "L]ԶϴtZ5 %T;ke35&L,kh:Co4T bNad=P?_kB&iҰW;pEѺj W#T c aL~LW 7z7̧?LWQƤI]}ʢQEƋ_Y\yNHq{??KNkj'ȉ\ȅDz@ؼB5ls~8=2m]ܼZ`]gK9+iOo.E\2Z0I&i֬%eX7 R3D5:ٔ#0t"*C/ ,vZp} ꤈fjm%VڑaG7*'ޱ*'nHnSayqC4gØsKpEU"^C0㮴~B[:I4rxʧH՜ Ǻ EM+)h(E~`돡&R&_t=v+lͤ7'[m8/bvDI,F-4;άezt0inbi+Kg/t?Z@7f+ql$XUSla¢w,!@ Ŏ˾SL=kpދC4c=mĞ⣷B9lrq@E4-IچdZfO^՗ ~o0(X$o7xi/Yk+.ՙ'8ia~)7lOi,x' CIw?=fNKt!S94UGa)1RG2trvDea[=)}Z ]~nsqZ. 5QF?H=M8ТqKDA0ɷWC)}  -1ZpġuGrzyTdD9Xh&jr/Nrxo:#\Ϩ"w6Co8YTT pڷ ΋p .1F!iʡJM.8ͽ}朚0je‰c:m{hQvGê#;4iؿ򑀧^ m&wlVp#bw0ˆ't2I? Pxs[()x}|< 6{1s6X&jc2y7y֒擏2CehݖJ=2dBzܙ I ɗG|Y ]( 8'Ӂe~?߱Bmsؖk+ǃ+٦K YZ