����wpa_supplicant-gui-2.10-150500.3.3.1���<>,���o�eܲ�p���9�|�� ƓUg�䓍J �?��VA���σYrV>��+���`�LBY(�Q�8Ȝ���VZn�M�P�����΋���Y�S�-��۸fO`i����(�h���s�)i4���&���Ю(��_��GO�p�ƃg |�6�g�Rʯ<��5�wЪ�0�U�d��<��۾򊒀PϾ_Zj!5[� �S޷'�N)1i�r�����6M��ܺW�5���F�߄}vd����������Hx˃�xf�@�f;��kS�s�yG[��Y>�������>�,?�d���� '� J����������� �,� B�N�k�qx� � � �  &0\d��( 8(*9�*: 0*F�DG�XH�`I�hX�lY�t\��]��^��b��c�~d�e� f�l�u�$v�,w�Tx�\y�dz�������������Cwpa_supplicant-gui2.10150500.3.3.1WPA supplicant graphical front-endThis package contains a graphical front-end to wpa_supplicant, an implementation of the WPA Supplicant component.eܲ�h04-ch1c �SUSE Linux Enterprise 15SUSE LLC BSD-3-Clause AND GPL-2.0-or-laterhttps://www.suse.com/Unspecifiedhttps://w1.fi/wpa_supplicantlinuxx86_64 ���큤eܲ�eܲ�16323e1ec3db1b4fae0f7e1563694391effc60f4d49663a38d805b3d8f553d22d57783ead2cca37539bf8b5c4a81b8105c2970de177652fe1a027433593467aarootrootrootrootwpa_supplicant-2.10-150500.3.3.1.src.rpm��������wpa_supplicant-guiwpa_supplicant-gui(x86-64)@@@@@@@@@@@@@@@@@@@@@@    libQt5Core.so.5()(64bit)libQt5Core.so.5(Qt_5)(64bit)libQt5Core.so.5(Qt_5.15)(64bit)libQt5Gui.so.5()(64bit)libQt5Gui.so.5(Qt_5)(64bit)libQt5Widgets.so.5()(64bit)libQt5Widgets.so.5(Qt_5)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)wpa_supplicant3.0.4-14.6.0-14.0-15.2-14.14.3e�}@c��@b��@b�@`lM@`?z@`:4@`��_|\@_i�@_i�@^��@^��@^|�@^|�@^Y�]��]>��[�<@[���[ā@[���[�;@[��@[Q��Y�@X��@X]�W�<�W�g�V�@V�>@V�U@VŲ@V�`�V�=@UKS�UCj�U8��U'�@U/@TBV@cfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comcfamullaconrad@suse.comsp1ritCS@protonmail.comcfamullaconrad@suse.comsongchuan.kang@suse.comcfamullaconrad@suse.combwiedemann@suse.comcfamullaconrad@suse.comilya@ilya.pp.uatchvatal@suse.comtchvatal@suse.comilya@ilya.pp.uailya@ilya.pp.uakbabioch@suse.comro@suse.dekbabioch@suse.comkbabioch@suse.comkbabioch@suse.comro@suse.demeissner@suse.comobs@botter.ccdwaas@suse.commeissner@suse.comtchvatal@suse.comlnussel@suse.decrrodriguez@opensuse.orgcrrodriguez@opensuse.orgcrrodriguez@opensuse.orglnussel@suse.demichael@stroeder.comro@suse.dezaitor@opensuse.orgcrrodriguez@opensuse.orgstefan.bruens@rwth-aachen.destefan.bruens@rwth-aachen.destefan.bruens@rwth-aachen.de- Add CVE-2023-52160.patch - Bypassing WiFi Authentication (bsc#1219975) - Change ctrl_interface from /var/run to %_rundir (/run)- update to 2.10.0: jsc#PED-2904 * SAE changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] - added support for the hash-to-element mechanism (sae_pwe=1 or sae_pwe=2); this is currently disabled by default, but will likely get enabled by default in the future - fixed PMKSA caching with OKC - added support for SAE-PK * EAP-pwd changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] * fixed P2P provision discovery processing of a specially constructed invalid frame [https://w1.fi/security/2021-1/] * fixed P2P group information processing of a specially constructed invalid frame [https://w1.fi/security/2020-2/] * fixed PMF disconnection protection bypass in AP mode [https://w1.fi/security/2019-7/] * added support for using OpenSSL 3.0 * increased the maximum number of EAP message exchanges (mainly to support cases with very large certificates) * fixed various issues in experimental support for EAP-TEAP peer * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol) * a number of MKA/MACsec fixes and extensions * added support for SAE (WPA3-Personal) AP mode configuration * added P2P support for EDMG (IEEE 802.11ay) channels * fixed EAP-FAST peer with TLS GCM/CCM ciphers * improved throughput estimation and BSS selection * dropped support for libnl 1.1 * added support for nl80211 control port for EAPOL frame TX/RX * fixed OWE key derivation with groups 20 and 21; this breaks backwards compatibility for these groups while the default group 19 remains backwards compatible * added support for Beacon protection * added support for Extended Key ID for pairwise keys * removed WEP support from the default build (CONFIG_WEP=y can be used to enable it, if really needed) * added a build option to remove TKIP support (CONFIG_NO_TKIP=y) * added support for Transition Disable mechanism to allow the AP to automatically disable transition mode to improve security * extended D-Bus interface * added support for PASN * added a file-based backend for external password storage to allow secret information to be moved away from the main configuration file without requiring external tools * added EAP-TLS peer support for TLS 1.3 (disabled by default for now) * added support for SCS, MSCS, DSCP policy * changed driver interface selection to default to automatic fallback to other compiled in options * a large number of other fixes, cleanup, and extensions - drop wpa_supplicant-p2p_iname_size.diff, CVE-2021-30004.patch, CVE-2021-27803.patch, CVE-2021-0326.patch, CVE-2019-16275.patch, CVE-2022-23303_0001.patch, CVE-2022-23303_0002.patch, CVE-2022-23303_0003.patch, CVE-2022-23303_0004.patch: upstream - drop restore-old-dbus-interface.patch, wicked has been switching to the new dbus interface in version 0.6.66 - config: * re-enable CONFIG_WEP * enable QCA vendor extensions to nl80211 * enable support for Automatic Channel Selection * enable OCV, security feature that prevents MITM multi-channel attacks * enable QCA vendor extensions to nl80211 * enable EAP-EKE * Support HT overrides * TLS v1.1 and TLS v1.2 * Fast Session Transfer (FST) * Automatic Channel Selection * Multi Band Operation * Fast Initial Link Setup * Mesh Networking (IEEE 802.11s) - Add dbus-Fix-property-DebugShowKeys-and-DebugTimestamp.patch (bsc#1201219) - Move the dbus-1 system.d file to /usr (bsc#1200342) - Added hardening to systemd service(s) (bsc#1181400). Modified: * wpa_supplicant.service - drop wpa_supplicant-getrandom.patch : glibc has been updated so the getrandom() wrapper is now there - Sync wpa_supplicant.spec with Factory- Enable WPA3-Enterprise (SuiteB-192) support.- Add CVE-2022-23303_0001.patch, CVE-2022-23303_0002.patch, CVE-2022-23303_0003.patch, CVE-2022-23303_0004.patch SAE/EAP-pwd side-channel attack update 2 (CVE-2022-23303, CVE-2022-23304, bsc#1194732, bsc#1194733)- Add CVE-2021-30004.patch -- forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348)- Fix systemd device ready dependencies in wpa_supplicant@.service file. (see: https://forums.opensuse.org/showthread.php/547186-wpa_supplicant-service-fails-on-boot-succeeds-on-restart?p=2982844#post2982844)- Add CVE-2021-27803.patch -- P2P provision discovery processing vulnerability (bsc#1182805)- Add CVE-2021-0326.patch -- P2P group information processing vulnerability (bsc#1181777)- Add wpa_supplicant-p2p_iname_size.diff -- Limit P2P_DEVICE name to appropriate ifname size (https://patchwork.ozlabs.org/project/hostap/patch/20200825062902.124600-1-benjamin@sipsolutions.net/)- Fix spec file for SLE12, use make %{?_smp_mflags} instead of %make_build- Enable SAE support(jsc#SLE-14992).- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass (bsc#1150934)- Add restore-old-dbus-interface.patch to fix wicked wlan (boo#1156920) - Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)- With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)- Change wpa_supplicant.service to ensure wpa_supplicant gets started before network. Fix WLAN config on boot with wicked. (boo#1166933)- Adjust the service to start after network.target wrt bsc#1165266- Update to 2.9 release: * SAE changes - disable use of groups using Brainpool curves - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * EAP-pwd changes - disable use of groups using Brainpool curves - allow the set of groups to be configured (eap_pwd_groups) - improved protection against side channel attacks [https://w1.fi/security/2019-6/] * fixed FT-EAP initial mobility domain association using PMKSA caching (disabled by default for backwards compatibility; can be enabled with ft_eap_pmksa_caching=1) * fixed a regression in OpenSSL 1.1+ engine loading * added validation of RSNE in (Re)Association Response frames * fixed DPP bootstrapping URI parser of channel list * extended EAP-SIM/AKA fast re-authentication to allow use with FILS * extended ca_cert_blob to support PEM format * improved robustness of P2P Action frame scheduling * added support for EAP-SIM/AKA using anonymous@realm identity * fixed Hotspot 2.0 credential selection based on roaming consortium to ignore credentials without a specific EAP method * added experimental support for EAP-TEAP peer (RFC 7170) * added experimental support for EAP-TLS peer with TLS v1.3 * fixed a regression in WMM parameter configuration for a TDLS peer * fixed a regression in operation with drivers that offload 802.1X 4-way handshake * fixed an ECDH operation corner case with OpenSSL * SAE changes - added support for SAE Password Identifier - changed default configuration to enable only groups 19, 20, 21 (i.e., disable groups 25 and 26) and disable all unsuitable groups completely based on REVmd changes - do not regenerate PWE unnecessarily when the AP uses the anti-clogging token mechanisms - fixed some association cases where both SAE and FT-SAE were enabled on both the station and the selected AP - started to prefer FT-SAE over SAE AKM if both are enabled - started to prefer FT-SAE over FT-PSK if both are enabled - fixed FT-SAE when SAE PMKSA caching is used - reject use of unsuitable groups based on new implementation guidance in REVmd (allow only FFC groups with prime >= 3072 bits and ECC groups with prime >= 256) - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868) * EAP-pwd changes - minimize timing and memory use differences in PWE derivation [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870) - verify server scalar/element [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644) - fix message reassembly issue with unexpected fragment [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640) - enforce rand,mask generation rules more strictly - fix a memory leak in PWE derivation - disallow ECC groups with a prime under 256 bits (groups 25, 26, and 27) - SAE/EAP-pwd side-channel attack update [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443) * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y * Hotspot 2.0 changes - do not indicate release number that is higher than the one AP supports - added support for release number 3 - enable PMF automatically for network profiles created from credentials * fixed OWE network profile saving * fixed DPP network profile saving * added support for RSN operating channel validation (CONFIG_OCV=y and network profile parameter ocv=1) * added Multi-AP backhaul STA support * fixed build with LibreSSL * number of MKA/MACsec fixes and extensions * extended domain_match and domain_suffix_match to allow list of values * fixed dNSName matching in domain_match and domain_suffix_match when using wolfSSL * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both are enabled * extended nl80211 Connect and external authentication to support SAE, FT-SAE, FT-EAP-SHA384 * fixed KEK2 derivation for FILS+FT * extended client_cert file to allow loading of a chain of PEM encoded certificates * extended beacon reporting functionality * extended D-Bus interface with number of new properties * fixed a regression in FT-over-DS with mac80211-based drivers * OpenSSL: allow systemwide policies to be overridden * extended driver flags indication for separate 802.1X and PSK 4-way handshake offload capability * added support for random P2P Device/Interface Address use * extended PEAP to derive EMSK to enable use with ERP/FILS * extended WPS to allow SAE configuration to be added automatically for PSK (wps_cred_add_sae=1) * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS) * extended domain_match and domain_suffix_match to allow list of values * added a RSN workaround for misbehaving PMF APs that advertise IGTK/BIP KeyID using incorrect byte order * fixed PTK rekeying with FILS and FT * fixed WPA packet number reuse with replayed messages and key reinstallation [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant [https://w1.fi/security/2018-1/] (CVE-2018-14526) * added support for FILS (IEEE 802.11ai) shared key authentication * added support for OWE (Opportunistic Wireless Encryption, RFC 8110; and transition mode defined by WFA) * added support for DPP (Wi-Fi Device Provisioning Protocol) * added support for RSA 3k key case with Suite B 192-bit level * fixed Suite B PMKSA caching not to update PMKID during each 4-way handshake * fixed EAP-pwd pre-processing with PasswordHashHash * added EAP-pwd client support for salted passwords * fixed a regression in TDLS prohibited bit validation * started to use estimated throughput to avoid undesired signal strength based roaming decision * MACsec/MKA: - new macsec_linux driver interface support for the Linux kernel macsec module - number of fixes and extensions * added support for external persistent storage of PMKSA cache (PMKSA_GET/PMKSA_ADD control interface commands; and MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case) * fixed mesh channel configuration pri/sec switch case * added support for beacon report * large number of other fixes, cleanup, and extensions * added support for randomizing local address for GAS queries (gas_rand_mac_addr parameter) * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel * added option for using random WPS UUID (auto_uuid=1) * added SHA256-hash support for OCSP certificate matching * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure * fixed a regression in RSN pre-authentication candidate selection * added option to configure allowed group management cipher suites (group_mgmt network profile parameter) * removed all PeerKey functionality * fixed nl80211 AP and mesh mode configuration regression with Linux 4.15 and newer * added ap_isolate configuration option for AP mode * added support for nl80211 to offload 4-way handshake into the driver * added support for using wolfSSL cryptographic library * SAE - added support for configuring SAE password separately of the WPA2 PSK/passphrase - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection for SAE; note: this is not backwards compatible, i.e., both the AP and station side implementations will need to be update at the same time to maintain interoperability - added support for Password Identifier - fixed FT-SAE PMKID matching * Hotspot 2.0 - added support for fetching of Operator Icon Metadata ANQP-element - added support for Roaming Consortium Selection element - added support for Terms and Conditions - added support for OSEN connection in a shared RSN BSS - added support for fetching Venue URL information * added support for using OpenSSL 1.1.1 * FT - disabled PMKSA caching with FT since it is not fully functional - added support for SHA384 based AKM - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128, BIP-GMAC-256 in addition to previously supported BIP-CMAC-128 - fixed additional IE inclusion in Reassociation Request frame when using FT protocol - Drop merged patches: * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch * rebased-v2.6-0009-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch * wpa_supplicant-bnc-1099835-fix-private-key-password.patch * wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch * wpa_supplicant-log-file-permission.patch * wpa_supplicant-log-file-cloexec.patch * wpa_supplicant-git-fa67debf4c6ddbc881a212b175faa6d5d0d90c8c.patch * wpa_supplicant-git-f5b74b966c942feb95a8ddbb7d130540b15b796d.patch - Rebase patches: * wpa_supplicant-getrandom.patch- Refresh spec-file via spec-cleaner and manual optimizations. * Change URL and Source0 to actual project homepage. * Remove macro %{?systemd_requires} and rm (not needed). * Add %autopatch macro. * Add %make_build macro. - Chenged patch wpa_supplicant-flush-debug-output.patch (to -p1). - Changed service-files for start after network (systemd-networkd).- Refresh spec-file: add %license tag.- Renamed patches: - wpa-supplicant-log-file-permission.patch -> wpa_supplicant-log-file-permission.patch - wpa-supplicant-log-file-cloexec.patch -> wpa_supplicant-log-file-cloexec.patch - wpa_supplicant-log-file-permission.patch: Using O_WRONLY flag - Enabled timestamps in log files (bsc#1080798)- compile eapol_test binary to allow testing via radius proxy and server (note: this does not match CONFIG_EAPOL_TEST which sets -Werror and activates an assert call inside the code of wpa_supplicant) (bsc#1111873), (fate#326725) - add patch to fix wrong operator precedence in ieee802_11.c wpa_supplicant-git-fa67debf4c6ddbc881a212b175faa6d5d0d90c8c.patch - add patch to avoid redefinition of __bitwise macro wpa_supplicant-git-f5b74b966c942feb95a8ddbb7d130540b15b796d.patch- Added wpa-supplicant-log-file-permission.patch: Fixes the default file permissions of the debug log file to more sane values, i.e. it is no longer world-readable (bsc#1098854). - Added wpa-supplicant-log-file-cloexec.patch: Open the debug log file with O_CLOEXEC, which will prevent file descriptor leaking to child processes (bsc#1098854).- Added rebased-v2.6-0009-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch: Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).- Enabled PWD as EAP method. This allows for password-based authentication, which is easier to setup than most of the other methods, and is used by the Eduroam network (bsc#1109209).- add two patches from upstream to fix reading private key passwords from the configuration file (bsc#1099835) - add patch for git 89971d8b1e328a2f79699c953625d1671fd40384 wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch - add patch for git f665c93e1d28fbab3d9127a8c3985cc32940824f wpa_supplicant-bnc-1099835-fix-private-key-password.patch- Fix KRACK attacks (bsc#1056061, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088): - rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch - rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch - rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch - rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch - rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch - rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch - rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch - rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch- fix wpa_supplicant-sigusr1-changes-debuglevel.patch to match eloop_signal_handler type (needed to build eapol_test via config)- Added .service files that accept interfaces as %i arguments so it's possible to call the daemon with: "systemctl start wpa_supplicant@$INTERFACE_NAME.service" (like openvpn for example)- updated to 2.6 / 2016-10-02 * fixed WNM Sleep Mode processing when PMF is not enabled [http://w1.fi/security/2015-6/] (CVE-2015-5310 bsc#952254) * fixed EAP-pwd last fragment validation [http://w1.fi/security/2015-7/] (CVE-2015-5315 bsc#953115) * fixed EAP-pwd unexpected Confirm message processing [http://w1.fi/security/2015-8/] (CVE-2015-5316 bsc#953115) * fixed WPS configuration update vulnerability with malformed passphrase [http://w1.fi/security/2016-1/] (CVE-2016-4476 bsc#978172) * fixed configuration update vulnerability with malformed parameters set over the local control interface [http://w1.fi/security/2016-1/] (CVE-2016-4477 bsc#978175) * fixed TK configuration to the driver in EAPOL-Key 3/4 retry case * extended channel switch support for P2P GO * started to throttle control interface event message bursts to avoid issues with monitor sockets running out of buffer space * mesh mode fixes/improvements - generate proper AID for peer - enable WMM by default - add VHT support - fix PMKID derivation - improve robustness on various exchanges - fix peer link counting in reconnect case - improve mesh joining behavior - allow DTIM period to be configured - allow HT to be disabled (disable_ht=1) - add MESH_PEER_ADD and MESH_PEER_REMOVE commands - add support for PMKSA caching - add minimal support for SAE group negotiation - allow pairwise/group cipher to be configured in the network profile - use ieee80211w profile parameter to enable/disable PMF and derive a separate TX IGTK if PMF is enabled instead of using MGTK incorrectly - fix AEK and MTK derivation - remove GTKdata and IGTKdata from Mesh Peering Confirm/Close - note: these changes are not fully backwards compatible for secure (RSN) mesh network * fixed PMKID derivation with SAE * added support for requesting and fetching arbitrary ANQP-elements without internal support in wpa_supplicant for the specific element (anqp[265]= in "BSS " command output) * P2P - filter control characters in group client device names to be consistent with other P2P peer cases - support VHT 80+80 MHz and 160 MHz - indicate group completion in P2P Client role after data association instead of already after the WPS provisioning step - improve group-join operation to use SSID, if known, to filter BSS entries - added optional ssid= argument to P2P_CONNECT for join case - added P2P_GROUP_MEMBER command to fetch client interface address * P2PS - fix follow-on PD Response behavior - fix PD Response generation for unknown peer - fix persistent group reporting - add channel policy to PD Request - add group SSID to the P2PS-PROV-DONE event - allow "P2P_CONNECT p2ps" to be used without specifying the default PIN * BoringSSL - support for OCSP stapling - support building of h20-osu-client * D-Bus - add ExpectDisconnect() - add global config parameters as properties - add SaveConfig() - add VendorElemAdd(), VendorElemGet(), VendorElemRem() * fixed Suite B 192-bit AKM to use proper PMK length (note: this makes old releases incompatible with the fixed behavior) * improved PMF behavior for cases where the AP and STA has different configuration by not trying to connect in some corner cases where the connection cannot succeed * added option to reopen debug log (e.g., to rotate the file) upon receipt of SIGHUP signal * EAP-pwd: added support for Brainpool Elliptic Curves (with OpenSSL 1.0.2 and newer) * fixed EAPOL reauthentication after FT protocol run * fixed FTIE generation for 4-way handshake after FT protocol run * extended INTERFACE_ADD command to allow certain type (sta/ap) interface to be created * fixed and improved various FST operations * added 80+80 MHz and 160 MHz VHT support for IBSS/mesh * fixed SIGNAL_POLL in IBSS and mesh cases * added an option to abort an ongoing scan (used to speed up connection and can also be done with the new ABORT_SCAN command) * TLS client - do not verify CA certificates when ca_cert is not specified - support validating server certificate hash - support SHA384 and SHA512 hashes - add signature_algorithms extension into ClientHello - support TLS v1.2 signature algorithm with SHA384 and SHA512 - support server certificate probing - allow specific TLS versions to be disabled with phase2 parameter - support extKeyUsage - support PKCS #5 v2.0 PBES2 - support PKCS #5 with PKCS #12 style key decryption - minimal support for PKCS #12 - support OCSP stapling (including ocsp_multi) * OpenSSL - support OpenSSL 1.1 API changes - drop support for OpenSSL 0.9.8 - drop support for OpenSSL 1.0.0 * added support for multiple schedule scan plans (sched_scan_plans) * added support for external server certificate chain validation (tls_ext_cert_check=1 in the network profile phase1 parameter) * made phase2 parser more strict about correct use of auth= and autheap= values * improved GAS offchannel operations with comeback request * added SIGNAL_MONITOR command to request signal strength monitoring events * added command for retrieving HS 2.0 icons with in-memory storage (REQ_HS20_ICON, GET_HS20_ICON, DEL_HS20_ICON commands and RX-HS20-ICON event) * enabled ACS support for AP mode operations with wpa_supplicant * EAP-PEAP: fixed interoperability issue with Windows 2012r2 server ("Invalid Compound_MAC in cryptobinding TLV") * EAP-TTLS: fixed success after fragmented final Phase 2 message * VHT: added interoperability workaround for 80+80 and 160 MHz channels * WNM: workaround for broken AP operating class behavior * added kqueue(2) support for eloop (CONFIG_ELOOP_KQUEUE) * nl80211: - add support for full station state operations - do not add NL80211_ATTR_SMPS_MODE attribute if HT is disabled - add NL80211_ATTR_PREV_BSSID with Connect command - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use unencrypted EAPOL frames * added initial MBO support; number of extensions to WNM BSS Transition Management * added support for PBSS/PCP and P2P on 60 GHz * Interworking: add credential realm to EAP-TLS identity * fixed EAPOL-Key Request Secure bit to be 1 if PTK is set * HS 2.0: add support for configuring frame filters * added POLL_STA command to check connectivity in AP mode * added initial functionality for location related operations * started to ignore pmf=1/2 parameter for non-RSN networks * added wps_disabled=1 network profile parameter to allow AP mode to be started without enabling WPS * wpa_cli: added action script support for AP-ENABLED and AP-DISABLED events * improved Public Action frame addressing - add gas_address3 configuration parameter to control Address 3 behavior * number of small fixes - wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff: dump x509 certificates from remote radius server in debug mode in WPA-EAP.- Remove support for <12.3 as we are unresolvable there anyway - Use qt5 on 13.2 if someone pulls this package in - Convert to pkgconfig dependencies over the devel pkgs - Use the %qmake5 macro to build the qt5 gui- add After=dbus.service to prevent too early shutdown (bnc#963652)- Revert CONFIG_ELOOP_EPOLL=y, it is broken in combination with CONFIG_DBUS=yes.- spec: Compile the GUI against QT5 in 13.2 and later.- Previous update did not include version 2.5 tarball or changed the version number in spec, only the changelog and removed patches. - config: set CONFIG_NO_RANDOM_POOL=y, we have a reliable· random number generator by using /dev/urandom, no need to keep an internal random number pool which draws entropy from /dev/random. - config: prefer using epoll(7) instead of select(2) by setting CONFIG_ELOOP_EPOLL=y - wpa_supplicant-getrandom.patch: Prefer to use the getrandom(2) system call to collect entropy. if it is not present disable buffering when reading /dev/urandom, otherwise each os_get_random() call will request BUFSIZ of entropy instead of the few needed bytes.- add aliases for both provided dbus names to avoid systemd stopping the service when switching runlevels (boo#966535)- removed obsolete security patches: * 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch * 0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch * 0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch * 0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch * wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch * 0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch * 0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch * 0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch * 0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch - Update to upstream release 2.5 * fixed P2P validation of SSID element length before copying it [http://w1.fi/security/2015-1/] (CVE-2015-1863) * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding [http://w1.fi/security/2015-2/] (CVE-2015-4141) * fixed WMM Action frame parser (AP mode) [http://w1.fi/security/2015-3/] (CVE-2015-4142) * fixed EAP-pwd peer missing payload length validation [http://w1.fi/security/2015-4/] (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146) * fixed validation of WPS and P2P NFC NDEF record payload length [http://w1.fi/security/2015-5/] (CVE-2015-8041) * nl80211: - added VHT configuration for IBSS - fixed vendor command handling to check OUI properly - allow driver-based roaming to change ESS * added AVG_BEACON_RSSI to SIGNAL_POLL output * wpa_cli: added tab completion for number of commands * removed unmaintained and not yet completed SChannel/CryptoAPI support * modified Extended Capabilities element use in Probe Request frames to include all cases if any of the values are non-zero * added support for dynamically creating/removing a virtual interface with interface_add/interface_remove * added support for hashed password (NtHash) in EAP-pwd peer * added support for memory-only PSK/passphrase (mem_only_psk=1 and CTRL-REQ/RSP-PSK_PASSPHRASE) * P2P - optimize scan frequencies list when re-joining a persistent group - fixed number of sequences with nl80211 P2P Device interface - added operating class 125 for P2P use cases (this allows 5 GHz channels 161 and 169 to be used if they are enabled in the current regulatory domain) - number of fixes to P2PS functionality - do not allow 40 MHz co-ex PRI/SEC switch to force MCC - extended support for preferred channel listing * D-Bus: - fixed WPS property of fi.w1.wpa_supplicant1.BSS interface - fixed PresenceRequest to use group interface - added new signals: FindStopped, WPS pbc-overlap, GroupFormationFailure, WPS timeout, InvitationReceived - added new methods: WPS Cancel, P2P Cancel, Reconnect, RemoveClient - added manufacturer info * added EAP-EKE peer support for deriving Session-Id * added wps_priority configuration parameter to set the default priority for all network profiles added by WPS * added support to request a scan with specific SSIDs with the SCAN command (optional "ssid " arguments) * removed support for WEP40/WEP104 as a group cipher with WPA/WPA2 * fixed SAE group selection in an error case * modified SAE routines to be more robust and PWE generation to be stronger against timing attacks * added support for Brainpool Elliptic Curves with SAE * added support for CCMP-256 and GCMP-256 as group ciphers with FT * fixed BSS selection based on estimated throughput * added option to disable TLSv1.0 with OpenSSL (phase1="tls_disable_tlsv1_0=1") * added Fast Session Transfer (FST) module * fixed OpenSSL PKCS#12 extra certificate handling * fixed key derivation for Suite B 192-bit AKM (this breaks compatibility with the earlier version) * added RSN IE to Mesh Peering Open/Confirm frames * number of small fixes- added patch for bnc#930077 CVE-2015-4141 0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch - added patch for bnc#930078 CVE-2015-4142 0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch - added patches for bnc#930079 CVE-2015-4143 0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch 0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch 0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch 0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch 0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch- Add wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch Fix Segmentation fault in wpa_supplicant. Patch taken from upstream master git (arch#44740).- 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch Fix CVE-2015-1863, memcpy overflow. - wpa_supplicant-alloc_size.patch: annotate two wrappers with attribute alloc_size, which may help warning us of bugs such as the above.- Delete wpa_priv and eapol_test man pages, these are disabled in config - Move wpa_gui man page to gui package- Update to 2.4 * allow OpenSSL cipher configuration to be set for internal EAP server (openssl_ciphers parameter) * fixed number of small issues based on hwsim test case failures and static analyzer reports * P2P: - add new=<0/1> flag to P2P-DEVICE-FOUND events - add passive channels in invitation response from P2P Client - enable nl80211 P2P_DEVICE support by default - fix regresssion in disallow_freq preventing search on social channels - fix regressions in P2P SD query processing - try to re-invite with social operating channel if no common channels in invitation - allow cross connection on parent interface (this fixes number of use cases with nl80211) - add support for P2P services (P2PS) - add p2p_go_ctwindow configuration parameter to allow GO CTWindow to be configured * increase postponing of EAPOL-Start by one second with AP/GO that supports WPS 2.0 (this makes it less likely to trigger extra roundtrip of identity frames) * add support for PMKSA caching with SAE * add support for control mesh BSS (IEEE 802.11s) operations * fixed number of issues with D-Bus P2P commands * fixed regression in ap_scan=2 special case for WPS * fixed macsec_validate configuration * add a workaround for incorrectly behaving APs that try to use EAPOL-Key descriptor version 3 when the station supports PMF even if PMF is not enabled on the AP * allow TLS v1.1 and v1.2 to be negotiated by default; previous behavior of disabling these can be configured to work around issues with broken servers with phase1="tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=1" * add support for Suite B (128-bit and 192-bit level) key management and cipher suites * add WMM-AC support (WMM_AC_ADDTS/WMM_AC_DELTS) * improved BSS Transition Management processing * add support for neighbor report * add support for link measurement * fixed expiration of BSS entry with all-zeros BSSID * add optional LAST_ID=x argument to LIST_NETWORK to allow all configured networks to be listed even with huge number of network profiles * add support for EAP Re-Authentication Protocol (ERP) * fixed EAP-IKEv2 fragmentation reassembly * improved PKCS#11 configuration for OpenSSL * set stdout to be line-buffered * add TDLS channel switch configuration * add support for MAC address randomization in scans with nl80211 * enable HT for IBSS if supported by the driver * add BSSID black and white lists (bssid_blacklist, bssid_whitelist) * add support for domain_suffix_match with GnuTLS * add OCSP stapling client support with GnuTLS * include peer certificate in EAP events even without a separate probe operation; old behavior can be restored with cert_in_cb=0 * add peer ceritficate alt subject name to EAP events (CTRL-EVENT-EAP-PEER-ALT) * add domain_match network profile parameter (similar to domain_suffix_match, but full match is required) * enable AP/GO mode HT Tx STBC automatically based on driver support * add ANQP-QUERY-DONE event to provide information on ANQP parsing status * allow passive scanning to be forced with passive_scan=1 * add a workaround for Linux packet socket behavior when interface is in bridge * increase 5 GHz band preference in BSS selection (estimate SNR, if info not available from driver; estimate maximum throughput based on common HT/VHT/specific TX rate support) * add INTERWORKING_ADD_NETWORK ctrl_iface command; this can be used to implement Interworking network selection behavior in upper layers software components * add optional reassoc_same_bss_optim=1 (disabled by default) optimization to avoid unnecessary Authentication frame exchange * extend TDLS frame padding workaround to cover all packets * allow wpa_supplicant to recover nl80211 functionality if the cfg80211 module gets removed and reloaded without restarting wpa_supplicant * allow hostapd DFS implementation to be used in wpa_supplicant AP mode- Update to 2.3 * fixed number of minor issues identified in static analyzer warnings * fixed wfd_dev_info to be more careful and not read beyond the buffer when parsing invalid information for P2P-DEVICE-FOUND * extended P2P and GAS query operations to support drivers that have maximum remain-on-channel time below 1000 ms (500 ms is the current minimum supported value) * added p2p_search_delay parameter to make the default p2p_find delay configurable * improved P2P operating channel selection for various multi-channel concurrency cases * fixed some TDLS failure cases to clean up driver state * fixed dynamic interface addition cases with nl80211 to avoid adding ifindex values to incorrect interface to skip foreign interface events properly * added TDLS workaround for some APs that may add extra data to the end of a short frame * fixed EAP-AKA' message parser with multiple AT_KDF attributes * added configuration option (p2p_passphrase_len) to allow longer passphrases to be generated for P2P groups * fixed IBSS channel configuration in some corner cases * improved HT/VHT/QoS parameter setup for TDLS * modified D-Bus interface for P2P peers/groups * started to use constant time comparison for various password and hash values to reduce possibility of any externally measurable timing differences * extended explicit clearing of freed memory and expired keys to avoid keeping private data in memory longer than necessary * added optional scan_id parameter to the SCAN command to allow manual scan requests for active scans for specific configured SSIDs * fixed CTRL-EVENT-REGDOM-CHANGE event init parameter value * added option to set Hotspot 2.0 Rel 2 update_identifier in network configuration to support external configuration * modified Android PNO functionality to send Probe Request frames only for hidden SSIDs (based on scan_ssid=1) * added generic mechanism for adding vendor elements into frames at runtime (VENDOR_ELEM_ADD, VENDOR_ELEM_GET, VENDOR_ELEM_REMOVE) * added fields to show unrecognized vendor elements in P2P_PEER * removed EAP-TTLS/MSCHAPv2 interoperability workaround so that MS-CHAP2-Success is required to be present regardless of eap_workaround configuration * modified EAP fast session resumption to allow results to be used only with the same network block that generated them * extended freq_list configuration to apply for sched_scan as well as normal scan * modified WPS to merge mixed-WPA/WPA2 credentials from a single session * fixed nl80211/RTM_DELLINK processing when a P2P GO interface is removed from a bridge * fixed number of small P2P issues to make negotiations more robust in corner cases * added experimental support for using temporary, random local MAC address (mac_addr and preassoc_mac_addr parameters); this is disabled by default (i.e., previous behavior of using permanent address is maintained if configuration is not changed) * added D-Bus interface for setting/clearing WFD IEs * fixed TDLS AID configuration for VHT * modified -m configuration file to be used only for the P2P non-netdev management device and do not load this for the default station interface or load the station interface configuration for the P2P management interface * fixed external MAC address changes while wpa_supplicant is running * started to enable HT (if supported by the driver) for IBSS * fixed wpa_cli action script execution to use more robust mechanism (CVE-2014-3686)h04-ch1c 17089624512.10-150500.3.3.12.10-150500.3.3.1wpa_guiwpa_gui.8.gz/usr/sbin//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:32791/SUSE_SLE-15-SP5_Update/92c4c1ac4c1b5c1bddbd97dfd31e26c2-wpa_supplicant.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=009d78ffa518ce75f85e7ce2b8ca6143b89e1df9, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RRRRRRRRRR RR R R R RRRRRRR� ������t��\�t�utf-83ed9c2319b59b25056da5c85ba1c56393fe974499ac1b74fd9285ba9fc6b723c?��� �7zXZ �� �!t/��IO�r]"�k�%{m{�#r���D~��d t����G��Jf͚���F`=6���鷎��-�^Fa@c◦7��d#��c|;p�d�� ��h��\Sų�L�W�S���m 0?LO��p����R��O�扇:Eޢ��� �pK� 5�`0�Fz��H�������٤�3 I��w�.NXB����gÚ�<����;0�S�Q� �N���v������!*�����]jPB���;� r� ����T�Y$�o���s ����T�ݎ'���! z�#76 �� �)���� ~�I���7":�@Y��N]��b���6@6ә�����=`�~w�:(;�����r��dYX/��G�F�J�%�����d@�W��Yr>��o:(0����t������5�p�]�|��n @D�Xպ-�����63�q��7`8��� (TJ��-M�4��]%Ŗ�?no,ʸ2�nd&Ӄ)J�i����z� K�F��x��X.��]���?mV yud��}N�mj�V�G��w�B�2�j��� �`�W��0l����CqL� �<+c�>�@��^{/��s���<�`T�?Z����Z:�kn DT�'�H�o��F��Rz�I�s�-X,�&��{�i���M�xt�ύ���G[� �o)�E�j0"������t��V�x�b����ύ��Э�(���,��M��S����#jaTH�;���bHn�Q��ڠ�O}i���b������2;�k�k�%����ƞ�v]��n���Ƒ`�w����"���4��l��E�̈etb4�yz�5�L����F���?�-bl��:Ld�J&����E�H�8-���(�����5� �ָ��J���Ƨ3���P�d�?c�@�k���H�� 5�������U�z�x��c�E�^�!�©ՠ�=�U�^���p��һn�O�T�^Ôҽϐ(V��A���X���c7m����7��9�x}y�|p�8t�]��^'4!��Si���2l���~��K�6��h����^+�ڮOڲ<�0k 5��xlu��*$���,o�0I���PБ��|Q�v���1u����YU�������`����ZcB۔�.,xwN'`Lф*�A��9��N�0�*Y�5K��Y� ;�s ���ꭣ`1���z�5��dS�*'i�e%o�Bv|��i�~��/�7����˄�?������Bō��.��N��c��¯��W.��� ��oVw���f���Z<4U��9SX�乭b2���ۂ�D�$���1s5�;����ۑKY�W�}\z`O�1�w;�q�����'��������}O�hq��u#D�$)Ah�9�3]�G�@hp�NaT��6O��7KM�˯d���a��oB���F>�ZJ�)V�5r�� XBkF���L��W3�r+�u��+�����_�|R�x��ZF}�ҧ�$��iLI����=㑂m��;� �j�(S̸��3��{p�%|֊)�)�}X����7�T̙�}�=2�x�2^k][O�n����:���O0��z�YmU/��<(�����ً��/_�7����t�R���C3�}��r�\e�[���{����Y�:�}9-s�ϛZ�J���T��n�RPD����BٛQ§���;��}��s��B�q�['�1T.Cl�������]�d� ���9��H��H�e?����������V�dV�$�:��N}�/�;�i/��2�D^��i�n���D��J�Q"���o��d��o���H ��zg�"#�F������η�6>E���^�*E�o�4F�ѵE��sQ��E��XY���Ԅ}��{m-�.��_�3y�Sl %�����ɪ*1f��$�ĭ�YQ!��XO��Ŝ;C*�G��[�"�f5����P�t���0��4ׅom�LY�֟B�s�Im\^g��q��e�m!��<8ov����=�{�]�Bj�8����9�i^�k�����d[��k�����6p��g���È��|P�d`�ut1�N~F�|����8ʼn8��ϻ���X�\�������(������ЦRm���9�h1�*  b�7�J�XkO�a�ˈ[D㴒T] /�ќCKpx�L�>�����{��<ς�b;�]�>�HJPpa�����槥�F={�R:�;�����і5�* �SU�a�q. %7� �m��TNGE�3s��E+{��/hA�}�h�����E�<�U��٢7f� ��2hM��� ��Y�,8�z��K䩅]���Y@ ũ�uHW`G�Oj���h�۷ 1.�P �kӽ�/�]��Tݸ��0�`����Ĉμ�I����ږj���}9#�*���m�i�~��C���@k�^����l���]�i��Sh�� -V�c��.��(�j�2/͑<;[ڲ�,q�@�/.1�B�wSoڞQHځ 23ʖ������}��h{@m�@x��,[A�N��u���h��h�E�j�*I������.�~�׻����8bJ���U�{K���:� <�b�Iy��m��K��G�k���7��`�ϰ��ɜ֫hw�,�.�_`�O�����i|�T_��>�TY�f��\8�Nj�^�"z�\��R��^���3����dA�[�̧nO��ZM�Ɛw>%QE�(�Lr�3����Q�q� ��2F?�Zjq]��Im�Y��-t�F�&�ꢦg�)���n��LR�ƒ\�.��f�OV�JUJ>, '~ŠX��(���:������+V��G������/46�/��W�i�Y ��N�&G��N-@S�g����{9�;���[ `��r�H> �<�dʌ�,Sw���Y͠<#ud|�Y@$�! :FWCú�S� !ql��@�I x�f]QrWP���XLBD��'s�o{���y�vS+�� �������7���V5V�K�"ů�� ��t�ud^UN�#�N�<̹O�,��5{�@u�U6�ר�ͷb�>lAT� v��c�<�r��*��\J?���G���s��v�i�NՉ �'&A5�j��X)�_�erB�f�����7.���� ���N�Z�)2�EC̷���(�d����?�iҡ~`9��.��szڭ��aI��{��$)��4��kƈ��0'v�M�^��}5����җ��ċ��"z�:�p#Y`@a�v?g��P�R��,Q�T{o�L/�U�T���r>i�9n��a&qȒ�M�����Q��dz�N�>l����Vl��X��2-�3S� m��S@�F'�G# '_͜e�����D��g�r ����[q(�����h��XDV6��P�p��� ��# l��I�.^JA��)�ۂnJ��8�${!�����Չ�� �Z��Mrd�.`��\��g�ض���C0Xb�~�$њfս�� ��~���Z-��c�n3@�$E�2���ذ���'ƃB�5���ٓ� {�e��۸�q]�}�b/L��P�M߫�k�b���@I�����B_aKP�� ���9��-*%w�H�Z���8�Lc�� r���ك�Ŋ.�gA7Jkǽ�i��B�[��˅p�{� F}�S��^��-���nj����e#:Ɗ��.\�=9�o�w/y���d�T���.R8����d�4��|\���_q�_�U�����@3G�K�]!$��'Jơn�� DŽ��_}���s����Y��B�S2o�xwô`��J3���s$S��Y��w3�W�������0��{5�4���̬ܙXԴ�����l����~�v9����C4W���D'm�U�gf�B�apbK��vA푐�Uϡ�ǣѕ�o��-��쮎�{�Q�*�[�i�A7%]�9�F�uF"-�|s�t���~  �Z���%Δi&X�W\� 5��`���� )K�� MnU�%3[l\i%��a���,�M���&g��B�& s �G��BO���PF�z=9oc������"ܗ'�4ckT�P�������r������X��wU鵥���Ѻ�h��`B���3�C�4�����z6�{�:BQQiz�� ��9C<�' D��r�n�:�J9��:&�?�]�Ž.���?�c�X�E�@����Sb���l�y�Հ\�b�<~B]p&b{��op ��� ��D:��k��[T��d� [Zc����ȩf�0���<_�����)��C�q �[�Â*��/g�����$��X�p��%!�kGJr'�w*��}BN~<��J$! 'z��Œ��ѵ)���}Z�V�r���ݒ8���8^��*��`E����a�jZ��E٧�>P!VYX�7Y�� ���兯?��2'.���SB^��b)Ss� k�Q�ۤ�F�.QK�M�we;֗K��^W�L�:&a�HL�rg���3�ܧwb�2��n#k���C:�F#Ò���3� ���:�H��b9k�@�e�� ��=���P�����Y�l�(���J�"�5�fz�,�u%����bT�[�!q��Q��:�bz�0�=|z�{�i�&B:�T�$��� Wj=�����m�21o��7����S�u9}�#'�Vk[����� @��b��*������m���WQ��/.X���3��?Q�>�o.�"G|��ŠKiH2�s- ώ�������w��f�{�@�{񒘸�$��u�`#H:Ab�%� 6�8Q)���i"wG�M店�y*�,s�n��R<�N����M>�g�Z���z�a���(��} "��GJ ���(���Ex�֎X�|Dq����{��ئ�:�_����GUg�Kx3b����ãB7o;��BՍ݁�`m��Gֻ#l�5o8�= 2yyd��L&Bf�Ǟ�ܥw�.��Hm.4���h���Ƃ�u�9���g���g�{-A���k+ڮ���k=����CǞC�?~��2o�t�_(��P���O�YC�*�˸��9��Ԟ��u-��DŽ���R��?�F������5>��n��t�c�ㄏ|���t��a�Pd��S�C��(t�T<;6��u$�,Ψr�<���(����AXW���0lj��#o��݈����9�� ��}�ѪT�V3�4��o�.h& ��t�nP�lUT{��l�7�o��SOu ��bF����Ѐ��O����Lz��������M�T�N�!Mc�u&Å�9I��:�1:���j:��b���Q�@�$�h��� �K;"+J(�—p3�sP�0�]a�K�yrc}��E���es�0u�������� �{�����o:D�8�ή��G�lef���RagJ�0ո�z�}Q�h����,nF���ə�+��T��O j��{�S�]";����E�*��>玣w����e��bF���ǩG�a�����h�a��V��K���U��u���S�yϥ�|��K�r@��Eŷ=���JgR�"\��#��U�����@��lܖ�s�Jc%N�e�4��%��0�DÞ�?`g���ue/�%۸PW4x!}d.J~���}k\�$}�3$�B1����b?p��Jήu�s6�����2��x��j�Nɝ��[�$���n,�k�)Φ�}��ơ�b~5 ��ܽ �@��Q��+h{S+�I�܍�B��b�.J]�ٷ{�K#��em��~,��e� �Q��R����Z�/C�2��z$i[ (��k �˗�d4���'�ߤT��� ��0�D�-Ў+�w�w��>Y��4�#��i Ȇ�tG��I>�w珦4�o���j�_D�ӗ�uUGBU|�����c��S&}�F�>��7�fc���UL����n]������J]7���kdw�;��`� �U��=z�N��d2�$j��9զ����ϊ=��PUx��vN��D]�r��{T�bꤖr`+���� *鋳��~̀Ю����Ӻ�$�w�1m�+� Jm�#���=�����]9��4���Z��2-��ޗT�C �΄m)�wߟL�a�x��i1�� (\���f�{nw�joհ���E��`ȈU���@Ȑ�>�N�-_�|_� �u���%����.3�s9��[wD u|�~\Ed�'�.dQu���;ҕ��3;�~�/'O��C?���Gs벅�3�5His���ƧK��ԉ�lx�SΗ�c�>�8�:��qp�9k*�v��\�mH Oї�C�m���$n�s�8��j�s8��%��5;_ޕ��{[�/����ح�� Ո"���)[SA��!�Ѥ��M2��q��<ߙ��C %��e��_�˻�᭮�A�~��{�t&�����s5Ԧ6�����&�rR�ti0{�*�4c��̦:��`q��Ǔ�(�^�u�v�p��Jwr��"2�蛏(��X�p8,�Lx�`&�;ťLv��-a�7(�g�� �%��?O~¼�qE�U�Siy"� �R�@C���+&:�Y:F���}�� c�-�B��܄X�L@�VO���9�h��#�Lm���x��wm.[�u��[4%ޖ��v�X��$�G��B��y8�� �g�� /�JqmOI��r� �z��b�n2��l9����K\�  "2�O� �$g@�|Lꈣ�%�q����of��R7ԯ���{b�"��i^Ş1%0i̍P�f1�� 5�t�� \�yw/8�F��ݹ��(8�(��������@Rk���v�U�huU�ٶ�k&��b9��i/���-�{��xk|���g�5���C�$�`1 k�� �,�X�EbDl�N��/'�*l���t��`�`����_�=9���Rm~D��W�}�.�hN[�j+����C>I�0��N41b^[� ��g���`�f��)c�H�Į��u�����2���-;��������1�E�7���r"w+*���@��eg4�5�IdQCL�E�A�X�Ȥ\l��l��WLc�r�˚�@nj�e�3A%MEp�J��k!w�isW�Kf�� �����Ը�SHa�H[R�2����?sy��� e�=��&��W�M���04y?��2>J�=I"ZJ�B��6��|v"�_�V��"&ӕUȽ�~���Z��B� ��E��ɀ�I��; @w�# �~�*���$��;��]#Ek�p(O`�'� �d= A�F\Z`���U�C��e�+3�.�_�AK��J]�UXT%+x�+R9�nZ�o��;�UG����THe�߸� ����\'�v�����uY�`Gdr�9���^N�Ƥ|� ���G�n�_?z������&�k�j�1{.� q���D��Mnn"F����9���z��k�,m&�X~�G]D�3P6�F:+���l��=#��z�k��~�� ��鉺�5�8+_���-O)��x¸] 7X>��.�s� :�>��.�y�OzD�)3ǔ�{��S~�9sY0 �P����+G��"�st��� ����z�?�C�`��˞�OC���m1�1e3W��S�Vl����#�~Q�\U�ž��͌`Cx�ZCfK����d9�6���$�y�V&k�9�(����R�˨��-=�9�@,i_�m�klIVK�cR� Ú)�p2���v�Ez�54�:la�HOu����3W<�� ��qr ��hc[�n~Y����q��A��-U��B[J�n����j����>S1J!Qo8��ɍ�]�-��+���hh�It��b}F�`�iYQ���.91�Kǻ g��nR7�,kj-�H����<�����i��J��Aը�&ׂk:��t��H�w(�?�la�xy��sm�ܵ](~F>���}b4�!?&��0�rm���8���#Q��PJ�`f;�y���X�eWiLoY$�<����j ~\�k�J�v�1%+#y3�l�1G6�� \�䏓�2� �Jx��<;�u^���4���II�h�m���-s�M�O!�� ��Jo�9�*�+|��ia @fPMҖq��/� A��6ES�=^��|8'�!���"[�D�|��H>��O��� 3����65e^��7ѝ�n�2��D����n ��d� W���S��x'���\� ���y��횷� ���q)�_� w�tU�RG����&/\>�=6Q����諊�t��; ��"]_�.�_a$��ny��|ʷ��]�x�l���f�q�rE��ɶ����t���`�-�6P�S37^^m&6�d!2�eMĈ����'T��S(��uSQW�2A#=6��G�#fN�v��Ϫ��,Q^��"2~E�Ē {��榵s��;g�Ake�x�.�u���0��/R�&ہ�Q�] c7���i�CS�+^�Q��&H(���R���+"*մ=tQ�@�͓�*�g��q����Eށ���0��ϧ�<�b�.�$ྲ ӗ�&�S(Hvש���q��@����x�/���l�Z�8k1Q��PjH��;�dal �T ��8��v���x�1�z�l�d�>.�i���� �{�܊z�����g|���?�GM�3Q�ݵH*A�E�Hq�8��j���r��J�=�����n����T���,�T��c��"]��Pz���i:���Re�{Q;�%���u��:x&�%m5�4��.�8G��������� �s-�t;ɯW��b�K�1*�:�9y9����}�����h.�$��������3"02��#�5�-�$��t �"Eo/����6BQZ�x`q�&���23H|�#���E*�������+�* ��F�n�+L0 rk\��-��A�CυK���\��#Q��;Jяc�/І������Goت�� .R���3�N�6+�V�IHy�DR��=�yđ �%#���V� ��&��>����ޯ�)��^ !�c0�>���G7�a�}�E�#3�����f �a~���+������rxk����$��3���x �����P���vK�m�r�׉D|�� J�UZ jЮ����lƮ�B Z~A��$�pq�K��j8#�%�J0�������xhx��P�� 5>��� �w��@�j���-��M@�h���O������+���u$� ��w�3Dx��i�-����K ��nz�!�{lF0�,�����|��i{6o ��d�֎J1�J�j��'�O醒�u�8�0���6o�B,z�x��(/0|�r�;����0(];�މ/��'�t�ՊC�:���S��r�JuA���,"���cj�K�Gl���r��j(��@��2�`�r�*�8�T�Ԉ{�ɝ0���w�D}�B�@g�RD��7�Z�ޣ��$�x�Z^�M/�I������xhP��V�������hލ�j���1x}�5��%��J�i�%����m�f�P� �i��zL���aݿ#�e��6�ߣ�6�k���,�F���4&��:[��E*�O������U>9,��[(BKx����� �|�_E46�B�3�Yb�*J��D���k����=�Lx�(I�=���:s[�F\��k��;V?�N�?yL<����kO�YbG�X���b|=O^uN;=`3a���"����ǩ�ʆ�Yk4���wޝ�h`1P*��!� �hÑ{c'k�@%���\k��2H*@{��0S遚�߶@�Bw�,N�x�G�x��[�h�л���h�)nj�G�%p%M���?)�� ���E� ᪤S�})����K����� )7��\Ԓ�cBs�F`C,��`�^b!�V�����#'R�"P!��::P�ZR�qb�0���F�h�� 1� ��#6���Z�=���-�0��]F�`�A��ՅEF������W�}��>��OB�6��Q���晈Ofc��sk�SL�f�����CEx ��~����i�I�z�i�a̵�0�$*$0�z�=r��uswrm$��n��HT����Hhi�pT� ���27{^3o5���7�:� 9�]��Z������+(�)15�E�����Ȕ�&�4���8���G<��O�M��:?��%g�9aNS�$����W�ݧ�������Yc?� ����^' �$nN�Ϫ<�h^s=pE!oC�k�-�W�ʽfT�]WR�f/��r G�E�Y32ڛ�8e�) @X��w"���#���S��5�S��$��X��ѕX�` ��8����P�h�[���/�O/;ů���L�w������͵-�N�����u��IϙB�����<�ͅ@O���X t�� �&稯s�C8o�9�w�S���� @u�^fM@6X ���4��(GBZ��I=�?�f5��湆����+�r����M��qul�F��Kԭ�q�r(;�S$uוy�"4�w���&�l�]T��F�²^q,т��e��q�� aF���uTT���4�^҅On�;��������g���LX��ŧc|y�1qOJ��#���Ǫ�,��4���G�wj|e��kAE1�Tb���SK~�Z}�J�>�hƶEgG�ic[�Em����dV���%8�8� ZR�њGԿ�@:?�#�Qg0-������e��h���b&����Q�:7���� I�5��G����f��'��!�Ih�\�:O��%�:������V��i�i०�ܵw�(�xN�2���sn]0*��u?�)���#j�V�ˡ 7���7��qHC�M6��SUaF�R�� ��3oW*]R���2o_]��V#�Fu�0��Zr�D�!���b��P� j�o3���݈�iY�x~�u[��. PQouV�ϊ�.�I�7r�!���Bd��v�ț{�d��f�~n� 7s?A�8:`G�D]�ʲ�r~�tY�'�_K�ff���N{��`-��Q�!�v��&�Y��; Q�{����0@'���h�47Ӣ�cK�p�!����:��� ��xY�[�(���O���l׌��ӓH&����� CV_�Rm���[��l�[�_Q|��Z�m�T�H�vڟ= � ��μ~��Gx_������mW�c�\�q-Qy1�<�� �3�J�q:(=��>*�IeH�xR��� P���vq�T �� (d�Ȝ"T�-�HM�E�&��"CS�CN�0TmH ����4Gb�0�_3�U\�VX�W<8]� ����}�����y]̹:n�>���"vU�F�{7�G��q�p�)R�ؾ��/Y�tN�Z�G���,�9���.UUa��,��Wߊ6�3Kz�XP���i1{oaq��Q��g*���Ni�7���X�>�a�|"��ƭ�7yG\t�v��/���?x*Z�$c�<�bZH�~Įۂ�-���f�#�}���#���|��������݀1��M�ju������D�`1�@K!� ��Kc�xCx����&�vת�Ga���/�=]�S��Y&�Õ����:��岧�k�&��b�W���Ί��)����yW�h��*�7���Q��Z�AĹIh0椡h����8�F ��j�I',]�>��ęjǸف��A��L3]�`�*���gy���N�aVR �9F��ɹ2΢�5����h��P�+r�Ğb�|q@h����I�<&}��)�ڵ�>�c�.z�:Dؼ0�=��/s��O���u*�n��a5����[�K"s���3��Qg1}+��E�d� �-f��;�kw/�=bit'/ b���^7���NogPu���V`���EǢ�鈇�FM5Di��^x�G��9 �� L�C&�^�Ɍ�� (廌����+�f�7�6?=ƷUF��G� <��c'2��P�I��XX"�uA$� �{�M�h��T\�㈣�a%����ʿ��M�b�^�g� %��7b�����?+˷�+qh��g1ﮗ]}��O��X(0~ W��y�i\�v��M���ZFF��Jp i�4���όr�x�����Ǣ;;2;B��e��7 ǎ��I]���絡��R��kk$�ʧ;�7�w�u0f�`�S9?���j7�C;Y /�eB!��ʵh���#���B5����vw�U�t��JbW^�$߿m��L-u���f���2�ڊ�&�j�7���������W�~{q$�q>����6�覮��~�!M�U̗+��s.@�J�}�C^܀Sb��8c ���G�Ħ�{��Uﰻ`_�mb����T�V���+�O7;q��M��.��o���FEJG�5$��1oO '�e9�w�.��N^�]^�=wJd�sb��(��y��BG�g�[ձ�'�V��QB���j&t�9�d�����f���N ��Mz=���Z����Ӿ5Y�о������fs~�pݐAZ�����up�j� �P�lTQ#����;Z�t�Y�OP㰹��z�h��M�9�k%�������z9�?�_��+$ht��V�l�K� z6��W���[*�� ��O#�Ac�&O��~_��ֵ��K�~�8��X���˂���-�� ���E�L6�� _����X�i��e�������*��l�Ҡ���(}�A���2h��̠���n�#2e~�"���Ԋ��Ԁ��w�6!� �J��!�� R}��%�#;:V>| E�?�P��D�;%8��Ʀn��]��5"�(^����6�IKT�҈�6�sY���p��K�{o��D��<��Dj6ƨ��L�� �F�K[k��x������%�v���v)���E���ũ�m���Iɦ����� ��`��*�nO��m�.��c�oc��O�V07�4n2�GX�1�A�9��7IE�ͭ��<.���0n��[���;��X�ES�`� o�eԠN�\�fC���3aT�����Y�Q��jH��������iZ#�h%��hcu ��^�� Aa��iQ�eh���!�yR8��z����'��#�]�<�V��i�D���}��1դF����}��'��m���u)�����������V���s�@�����D�� ��eɾ�"T ��� ׼gw�Kt���C�����I`�d�m �~=��jNޥ��!��,��G!?O+;�2�,а� �y8�Qx��y>��9�fq��ъ>\6yp�jQjc������[�U�zCt�9�,���j[���Zx��2���������X�z� ���%��Y�Xy�L� 5;�A��f���g�L�Wˤa՜���3�h�;s��j���,(�*I�A�N "Xi5�z��Z��w�� ��D�P�� 'O0h�|��D�:�w�� n-tF �l4�e;/�q6=eVa���ڴ���� <�fO��ݡ�[�(O�MR�#:� +|C�����~V��1�L(�]����A��MT���+��}ͼlO<��]H���e����z2됡9��T$D��Qf�A���J�%^%|��U��G\���.#�E� ���dO�r��tZ���x��� �a �Gi�nd�S�m,��BRN���Y��� �+�N-�dE S˿�����׼I� A�0o���f���:+���=�$���-�"�9M�����vFz6��*�jF��&�(cZ�f�`���.:m7= ��R���x2 6RȾm� Hdq~v�:G܃fJ����\��`�v�� }�~](��76Q]� �F�h�x,�]�B�ygm꓌�ZŽ;�Q�_9�߆��v{u�3S./�: �_�o�o���?۽J�1���9�|��0a��f��{n�~�� ����Y&8�Z7�_�R^��l����="}��+2��{��&U$4j�� Ͻ����Ԕ���㆓�*֡$��+͡K ��WxA`�8p�7�M�AcJ���C�Zm&�K��|�ޮɸ������f����\�a�I�)^�f"g2�z� D+w @*�l�~;�854�^[�w{�,�Vc��j!�o�[�1���<�~����� �eR��æ��.�m���Xd�4�[�f��>!�ZHx���m(�(6͐�4qf ֪�Q�*$r�*��� ^����r�!�6� 鹦�$L4,�v�٘��k�<�cL��w�׸ (q�`]hB�5Ϯe�Z������I|uǍcC�����Z�|�9��/�2��:�<0�[��ƒ��4�6+���A���s�#�"C�:.!��� �DXW������:�M��l0X���&T=dD�EI�XOcQ���h�OФ��s3�� Nff�iT�8ٌt�J��{�˩)�[앺f�X�l7@ɌЖu��(��b0��~/�@_s3szr7�#*ϏS�\�Dl��I{��=�2��n�T_�q�(Thbp�7�����h�@�Rk�҂G�����:�=�Y� Z?)�A�/�-���9�8�?�uc��!\�<��O�q_fM�A��BD6ݚi� ���6�Ud��ԁc_����)T4[��GG� ��w�K=� a��X�n�s����ryR�;�6��o Ow �Gڸ��_��W������5�P�Z�[+0v.�� V�/ q�m�3s�*Gm��2�j���n/�F9�����.�?+`;Z��#��-�`��iW��"�N�e�z��SOM �C��9��e���sQ��B�Cȩ��=��5� <�5�d�:��1�3��7�Y`���K[[�I��z�J�x���6����E������ęF"��(���f �2Jئ��E�� Vn��:7<� �0�W�e��`m�I#��I5��t� ξ���[: $T9�$QN`�"��uª2��Y�����)���Ꚉ���@��^k9�\*;c:u O �A���8����р�՟Z�<�/����ayQ��!��A�漱�l�� ����!tfJ��4��u���x�ݘz�6�(s�D�5�g�����*]u����>� Nh�����w~x*��]4f�I�f�J4���-���Q* �M�1���A�E�d7���ݨX4u��7hB�$m�e+g!�d&��e�F�����a9K��àr�V���0��X{��}n�A���9��Xz�.- ���̵�x�1 �ֆ.--�Ƶ�G�b7��4+)�B� f,�ð\p�����|��ӥ34P�`�]�Y�c1��c�~�`G��� ������R�gte��$Z}��4�F(�f���N�2-�� ���Z`��~ܡ.�5ڄ���>d� �z���y͊�i�d���#ݎ����=��?��|i�bݫ�]\�!��.T�O{A��u�|�j���d���P;��q1��z�dK��  �1g�.�q�*92 .��>�GC�S�WfZN�d2'r��m�$x<���"'�S�6S��}�2i���F�I�39�P��[���ٲ`�=�z��v�ةފsa'�3�47N�W�O��U���΃� W%����Ŗ���=x4�1�R ���Ǝs1]^�qg�Y�\(UC-���Ei(���v\�0�(��:}�MQQN��ܮ�&�]����,m��눐�P���]�?��^r������/4����6�%RYr�xD$� �G�B^E���YԠt�2q����A!�k��Φ#H)A��Q�M >}�7�D�d�h4h6���T��!��I#�;�-dA���4�����M[��*���QӦ����m�?�<��tB֌�h��r"�w0���m��vG~$]-͸�@���+�r�C�Bv����R��QXt��y�v�{=������'�uZ�����C��#� �x#:���k^%�C�������s�ߏ�}�,�� �'�V.����Y8/�ʑ����c�E�>���@�e��l�}��,�~����q��X�Q�������'���־��e�<�j��&�~��b�Al'���ي���D�EAD��1���#��~�@h�le��M �,yms�N�u�\���d�'����X��)�p�O��k�����0�&p���  �@���ԡˊ�6j�=]�A_�O(�N-T�I��b��&�O����3]�I�og$�pp�K�G�\X5����/l:akIa���)D�uLm>�>6,h��v�,/�|�� ��3}>�vϼ5�� �ĝP�◶N+4�;%z\C�R���.��ND��u�5ͣ��U�Y$�25�/?"$���TF�' ������G���A#��Tt� i b���Ξ��`��|r����f�Ja����7��y!�`�#'�s(KC����: �v�s���&p"Ϭ���6B�bpcN���J��&�GH����2�:�_�,��|k�����]���T;������E#��]�m����+�vM�}���R���[ķ`��f-�>��ac���~����{vϓ_�.q=�{�ؽ�i�`��U�P"����C��R���i��x�S]�-�Qe�t㡱X������N��!"� �iT1�:�A�.��$x9�.d���]ް��3~�Ԅ���~-8�9ԩ�-�Җ�l>�$m�-�����I?!��4;���l4����I��dU�@�ʖS�;gW�i�"}n�[��iƽ��O��f'�9�� ��kC#T�Skt���x �w�|W@��b�#�~%�x���ů&/��#�Nt���2Y�{s~�ޒ�p��j���k��� z�oz��0�;����8��-�`��=�s��3��uf`D\�FJ5�����DI�-\?�R,��L�;}x�����!(T��{儀�o<7���;�4�n���LuȀUl�A�z�ڴ����(��BX���0gb����a�Rz��*��*v&�e؞ g3�7����p�]�K��5�q�0R��D ���Φ'�A�s:>N �!�u�s�[�Bծ�Mж���_%���& ��"wK/P����&}dY{n%ĥH|�O��j��©�2�� �ή6�H��1�a��+�6��?U�s+�[`: F�x"�<��nl���Ȓ������pzPY�Ԩ#�7��` ��@OT�3 ����L�b͹=Fa��R*Do��gX��sGɉ�GT���A&�}$���c���v�Â��ZQ{�Ɖakq]`���q"��>�Ou g=��ϒ�}��^O�R%�A:�~Z{�HC�A�/|vedI ��K�tj�,~D@k�� �r��� 8���%�'a w.=w)�7m�gU��2Ԥ��W�Z��o��N�]�5/��>�š�â�f8J�P��% �����Y8�'wr�Y���t�STu�,�p��S��,Ram~�o����8�$~1M��j�?�-�UZ�>X���틸����yp^%���� �o�!J:[��ne(f�2�t�ϛ�3����a��H��'���U� G���|rh8� �JW1-�eKN�VCMF���F���%�/���.s�թZ�%�%�.��`��PK���f�YG���'G�\D�Z��D��]�H�&k�.u"����4ۙ͵M��l����1צK5cL.��y|:� 4~�0�:�ъ{x��G�@�2�N�W�3+�� ��*a�k�U�՛�P���yW*U+�)!f�l��l�p` ��$��~"�,0.�f���?R�@���5i�����-�P���>*���PWN����e�o��+Z�x wx��(b5\)C)�#?ʎC^!p8��0&��(�7ۂ�g-�1 :�Q�2�����B`�1�[K�Kj�acӅ%��s/��f�����À�0�J �s��^r�Nx;�ܰ�����d��F�Wm�#�S�D�,.��_na�L�ch�I�9M�Y."}R���DBu�BfOS��~�q��:)%l�t�x���dR�Q,��m���[�> ��g�cc���P]Z�*���K���s,��Xt� /G�oDz���/k �ɇ�n�4��޵���|��P�z������od��,T�y&_~h(z'/�̊�V�]��I1O)�}���d��f���D��xL��� �����Js�m�� jP�̭�b])� ��DJC��*} �`3i�]`G>~��͙��i\d��C1�]�&c��c �t*�#_Q1�ˤ�㿢$e���k�yU��cv�ǟθ >~��~�)����t~i�+�G⛊૽�ݜ�+�LӢ�j���s���C^�[�l�]h������W��}lX�k��q�zJRZ�Y\քa���#w ��A}���'���8D�s�ZWj�(������Z�2���/ʔB76 �۫#�Ca���Z$��A�[�������X�~����]��\���4"�������ӽeԉ�*���T%h��TNe:(]U�B�=�! ��<���!ǁ�2�$������ܚ2~�oR/H�%����]eN���RIcc3��+5yC>Qv�}��\����ޑj �.������j���m�-�5!;A�ц������6E�{L�����cJz��H�F��>> /�`>�t?^�U��h;�9V����ᔴ[G��>�F3���X0��L]�O"UKΜ��h'y��ؽ��õ)���A��,����.!��tq�h�`���hl����r�k�k�3�#�>��v���yJ)� x����(F�JۈB۝i�xH7�?YQ OC�SM+{�G��A9M!A�w��*�'��fV�`Qq��x@j�WD�jɞr �90�w���*�o� �\$i@�G���N��k �w�j�WWW���q1х���%c�g���=��:�o�q)�s��κC45ۂ��.RH"�4� %j��kU����P�x�xΗO���xz� A�ΐk�Ur�_ϏF�m�����ʍF!uP��t`[hc�)M��f�|�ޮ\��d�4cy��C���TEm��w�?:�ul{ƶ�s��˧ Mg�m]���ƕ�R_�D�n T��w�HRR�ם� �4������;q8��)����ZHY�u\o �-�����YYz��*9�j��������� �����ʖFI�N�dUt���NԋʶI��%YK���� z���Y`��C�J4B������p���R<��n���=N���u�E@���'�2T�~�h� P�no� ���*��ݰ�� U�.} !1����ҦR2;=a6��'$�Q �|.�x޿�H#T&>r��2y�dϻr�¢.&z���L<륥�����R8u�E' ��Y����&H�'�wxd/���cV�_G�Ud���W�D7� �]{ɬ����I��/��P/�"y�� 4�3���X�8����Ή٣���B*Y����T���{v4eKT��=c<0�@U�1��N 2F�;��Oc�`M������9��ؠ��.��M�H���c�~Q;�(�ZA���@����~1� �|��X�̜C�T�O�᧨6N��*��� A�I��ڜw �' ��B|+�*B�Კ*!�/� 3*@���a�Ĺi�Ƚ��D��k��$�S0�:�2��l��l�d6d��yi�л�T�yej�lٹBX��X.���@FQK��v@6JB+wnZ� 3!�3�v�C�|��zw`�R7��3�����|I�%�Ci�\[�~���A��S2� yüD� O�b�N�,����G��>U��� �]�*�)�*�LI~��p�*����i! vr��M�A�8$�2=�<��u���W�zE6�\������p�]��tg ��vo� LT_�Y�� B�؎p�~2+�D��?Gm��^b���Bҽ�������k�R|�U��>]���A}�%QF�����j1K D�hk�ϼ�P�Q/3�XE�3����;�2r��krj�IX��}�G���-��"M��^��;��Y�IU��Q�+^�w����$�(h)R�"�=��J���{0� �W��P�����ܭp�9���#���i?�.`�)���r8 ��ܻάU���Y��|u��<گ���=�8���a56LL�3\�(_�z��������CI{q߮��G���J\��`����dX ��Pķ�m2�$���� �ÜϳA�9�n�B]Ԉ�*�����g��D8{�BtU�É(�S��P�`(Al� �V���El?�g��5�Ԧ��3�?Tt�rT7 ���O�։��Wd�)|TQޞk�[��I��EwH��1�ub� � ��i`������ ��'������`�?� �(���pdK<�%��&.%�Z�f�P�Sa_�0�\uut�EG�X�>+���Q��U#(���[2"��SL�^X�x0�4��m2�h%]�#���*�y|��2ԶIw"�M��c���)�1ݖ�eΝ#Ŗ��R�\�BznǸ���3d S�75W_I�P!�*�{�[c�h�h �4ϝ-������~��;�0��U�B�sr�Z�{Wt�;Q�/� 0�i;��e��K@����J��-:������V��j��AƇ�4U=/��z��B����%�Ԡa����`�E����d�����Y���׺Q�gԡ(�A��/ڐ�}46�$�B*5��P�P�8^Ys^���ӸG��T����q��O��p�߇I2��������P��e,M��ncY�=d�<�<'UM�ן{�"鰕��5hO��^��=2�!x��^'6Z���� ɸ� c�W�+z�w�Ė�p_����Bd�Ԥ|��d�e�޼����W� ��P�Y4$d�lD֖(�/� �|8~w�Fn�N<�!���m��5��L��1}�����Y*q*��Ra)�f�P��8m\�<�Q#�샞WS�_�|j&�����#Ho�[q�,��t��#7��S��ꊆr��eOs����d�����@�,m�%˓��8�N�Jq�����>ur�R����+�8���U"��O��1�ZۘM�{���P��]�����՞���ئ����R���d|�&vl�:Ym�_���t��ŧk���$��ZI�۠��M"mS��n~�� D( <�(>�zdRv ��ݗ��Q�^*��|�M������棿�(x�j))X,X�{Z1����'�F�n��O�0whء��?& �[-x +��+8� �<��}J�s �B�{�V�Ҹ����'6¶����M���#.`pj���F�T��b6[�ո2�K�������y��6D�V���j>yD��j�S�!��=��B��/ �=hyCȻ�w��x��BtQ���A§���y�`ܞ�������7�S�:5� $kC�^f�E5��|첅��9��TG�"o�@�>1eشCe���-���4�'Th����~��!5��~o��S��m�,�M�/:)�[ Ϲ:#fBN/�.�̲���&m+r^���X3B��Qi�,�hz��.�hw`�``���E���R{��[R���k��Pѻ[sF %m��j(����/�`L�Ԃz5U����w}��i�N��IAc�e(,��,��UB�+u��|1�ڋ���H} ���Y��X�}X� ���F��7 KM��P�����!���&m|�t �梇�!4��ʋ�k����\D�p�$�J����䳸o�@�| Į�mF������!�\"�T��(Y��B�&S�6#�)�e��� ^pV^E�]��_���~���p=��� � #���;����\����9h��`'l_���a�ٷ =�����%�4�����Q�V?�&�Gt��R$X�� �D�dSn,gi?�k׌ҀnH��v��Q�l�Iظ�A�Gf:\tDOz�R�a /N}4Ƃ"�e>��X�x�=�T�jʴ�]�s��!)@0��#�Z��qY��1��f��W� �ȑ�T����t��E��O�%���&�MZS#A�u,r�7H�]�\aK�|4/*�N�ֻ�+���Y������Βr���ˁWj�B~9�L�I�{������˭�(�D �}h�T����0���l�!s;:�f�<-=�f�����4&&F���B���T�jd�g2d�1���v�^���zl3hP�woZܫ�� ѕ�#� ��Z�((�.�ƅ���p6�J��-FAԥ �Κ�ӪAbM��຺e����Ԃi�eB+4˼�Bے1�&� �B��¼R�5��J�+���K�I%ζW75|�`v�'%�M Ϩ�[��F�.-��{_b?�aϻҜbo~��ar\�C���a!���1u�Ǡ�Rd��@��'b0Reb����<"��Un_Q�� ���cm+܎�&E�����,&wb}k��G-��FyD��>�hgX]B"��J,�����E2�ۋF�[tD��Vd�~W.�-�IoK���_PQ��)��mphڍ� �Z룓�wvD����9,MA�x��@Ż���t/G��Tv��oGq!Vϥ�����K�G3D��?�6���of g�o��� ۙ�eG��J��p�0 ݵ�(���d��x?9 ��zx����h:59��}����+�����㷝ZC_V� D��X�`Щ�.0�����j6RK���N �E [���?��k�3�I���{�G/ ;������� ���fd�hÓ����C��Ea���1i�T�#,��j�#Sȯ���i[�k T���Ɵ�[�Rb N���ǽkk��xh�2�YN��>0���wa�߫Uؗ[����͇F:�o�.�^�� 5a��2�#HF�-cF^XBu9KNH�7Ս�RK1� ���fM��5��Ւ��1FN�aH7& ����,i��L�g� S��B�G4��]�G�1��ɀD�.��=ά�E[_0I� 6ˉ�t:,���j������ ��! np���b%��T��Tz�B �5Lؖ[.~G']�A���77�D} MS"5Zw� �])��h��p{��TDw����/����*�7�{.g����h�c<�vʻs�� ��mN Mz2=��'�gE���64���;�{�Q�߼���f����4� u "�>3����"g/1�薔T¨?8���ro��1j�EI�P����Ӊ��+��7�� ��j�ª�m{�D�B�n X�P r��X�`T�ۅ�$�.g���� �m�%��$�s�Q_`��j�(��i�|`�ݨ�4����lhs*�'��%�X���cA4�� ����~f%{��]�x;ǣ��<�ca��%��?2�5�.�ǯ|߃���� ��r,�|)$$n�l��Y�l�Ћ|;�B2kd�����U��]�y�CP��h �|����Qe�]�Inn�3�0���fuQ"�p��)�O 3nw4�S֓�*)���v�����\�!#`�p����� ��!ksW=|Q��mQ��?���;�A������wl,g|'*~�����$ϸ��9���\Ȧ�\���l���l_�����h�(Ep��e� ��<�ۗ�S�4�$b*N��*��_22@�U��x����L��U��( ꉄ;�����J��w�X�����|��v�1�e{��y�Ai#���J���J�[��~����M?�Y�|"���?�} �j˪�锤��A$�?�;�*p�t�>u$T�6zHsX��/�ʶB �||١7!vJ6E��^�$���Ӯ.�5���?�ߝt��K�>�/j��v���s�w,��g3��+A}��z�4D� � �q��6�=ʯ"���㶂/ d`k�&�ꎶ7������������I�5}��j�ԇ�s`�?�\�1��íFn�-�c�����<�4�>5�N�����1��)5P6��$z�������:a)F�L�Vlria�¯��CF�o��Db�6l��?)!OHS�-\��$�]y�n �nV9��6]4���9�6ق��hY,�Dߋ�,�!��zӻR���p��E�Rտ�q�K��7�.���nL<�����H�$�y�4�:�zI5�".�Z��� �U�`)���f� /N���&צ,@�P��-S��~mv#��g��.e�%�6�*zL@aU�y��B�S�{�=F�5�g7�ܙ�\�DG��Q�YF���B�i��L ��:�6ٯ��hk0����`�o���[�a*zB��L�Q��a�*餴��5�i���Z�:EyQ�T:yl��ߑ����@�}��ld�u���ނE����E�� +&{T!��ÖZ �o!wE�TiN�9ƾ�7��kϣ]�B�4�\�.�[���Fr:��p����-P��ͥh���u$��ar| &{�?t&԰�6��3*x�v�V�auԽQ!����~5�W�}�Wd$�y����s��\)�П[�^)���ew@D�^�a�C���hm��'x�.��9��kXØ�,߶d����G����޺�zÉٗB2�s��`�EM)eF0�M_$��Z���X�3���F�\t[{�)��FB�]}���od;Uߜ���j�����"���'�(�y�cu�N��8 ��.$����P��6y_��'ҕ�\�Զ��0�&�U� \�W-�7���{_Ҍ�t�7IE�.P����3�j��^� ��l�*(����{* x ��ɣ�&���JbYJ�Q!' ijǯ~�z�S��� %t�6A�Y��_S_���3X�6�]�1M��45�⫋�k7�ԛU�c�:Hw"�< G;p�4� J�hc;C��7IVr4��}Oo�*ăb��fg��8vA �K���n�"�4$S�c�/R�E���PAqR�R��w'p(��'P�J�V�V��եP��2����ͧWpw�Ż���D��0�4���q����k���8�l}9<���؋*��f��/&i�l��x�_@�Pm!�Xg��H��:�f㫬�:_3Yʫ楒����DEn��_��e��yն�3�R����I����hn �K���ےK�3�{��Ǚ��` ,U���j��K��o�`�W�k�nԶMb̔9�'���w��V��+�'"��\��_��`���ްuΥk:�{���[0¥K{-�I�o_@�#A� 0ٶ��MJ�"���4�?6�i�Hv���_��|Ca� �屢�G@x�,�R��u�KS���ú���[x��xO��GB�P�m�@�����]ߘ�^* &k9���� ;� � <��K����.+������ �is�C��h�$���G�Y�����&��7`&�����grx�y�������VY�?��k|��-��0��J� u��o�9B�"�!{-ۃ��p�o�����=���y[5���M�mi�Y$�-&V2��!�l��E�p�E�'��ɑ]�U��Ϭ�s��0�DJ���m%���gD����&�Dєyr��2%�F}�%0�&����:yu�$9f�RX؞�k���R$��A!#O��}�ٔV���_N��!��h��dN��8����]��٣% ��J a�� �o2�\��|� ����5����%P��养Uv�R`52ͭP��F����L�nܣ�*�47|:a���ɸJ��AoE�4��:29�3$v�ݳ����Y-vL �k↌ �c���/�3o�o�$��sw��o��TG��Pzb�����yg�����S ���N>����\��K�b�� ���RI�b�T��V*S�=-�>,�B9�m���?v��Z�S�$�x�uGʸ!TB��ӗ ����%��L�DU�^�_��-�1P�^��i���B�� )�H���@�����$�ٲ F��2�����Z�Mc�����Pg�c��iF �:�+D�K��(X�Hق֝���N�Q[�#�I�`3� S� G"(�7O;s� �?�:��?x-�]$�0Cp��K��K��8��:���e���$���,���X�� 6ѥ����6�$�X�q)(;��f��K{v'�v~f�MLv���aR�v�Cō0pTwo���� $/>#`X�O�kw�i�LB�Fk�C��1L�w$h�u�r� }�g�9�ז[��R�fL7Y�2��m��*|��,,+�.�G$#�#Vpc)ۗNPm�qT��*/��aG�U�:=u�N.���!�3������͖�)C� H5��������"S��q�=��AvKq攀��ªa̛R$�T�*���ộ�����㢼^�ַ����i��3upvR��ͺFd�0 ��C>��4PuC豃>�g۷?~�{ L�0z6��Eb���r��w���-� [�mrT��4Կ!��7�;�+$۩����T�3V-�m��u3�=�=�����Ro��#����( �Ha��w��{�05BtSjѰ���7����0��F.��g�h�Y���x�qa��%��ob`[�����=��]pO�2d�ם� �3)W���˅ ��_�Õޙ��@$9�� /� �Wo�]푫�:��D- 0���Ga���� ɐr�*�����fĠT���&=��2N\o�ɕ}�\\Q�����tat�"Ndy�������?m��G�^K�}��H�K���my�Z}� ��p@*vz ���:)LK�2�d`Cm��w 0ˋH�pT$�H�[�7;��E����T ��4S���J U�$�m�_��3�� [t�o`�v�=�̢��L(MP��%[�ʏr��s���C#V�o�/�5u�&X�^t�h��B-c�_f�*b�W��U�S0]�U��Yb �.M�t-ԇ�c��M������Һ���[FG����E�ZJU���}@p0�֊c��l4�X�#��hՌ�� �:|2<�N��$��ST�&%Z�y��n�x �,t�{�b��ڡN��7�oAf�38�4��;ڭ�)�~�5�բ-�%J��}�vS��&5E �|ߧ��8����Th�aji�l�= ht�݈���U��k��T�Q�*O��5$�5��e���^֣،���I�"�<��_��QJ�7��M�L���Ԥ�Hy����KǏ-�D�5�T;X�bб8m94�뎛�d��i�IW��\��.Z�10b��D��@��J] '��i���+�Iⷠ�5��Q��붸2M�%N}K�ĥ �x�b��Ҥ�=c��S���W3� �%@�')�x�q� �B��F��&���`غ_^_�M�;�y��~��qG�}�}�d��6 �/�ȳ$Eܲ*)��U�,� q�e�%Jv S��5��v}hܩ�����ѓ�\|�Q|a}ӱ�����y JisJ��g)�t��'ג��/��{�d�€���Ό��d���� ��&��~�4~��f� v ��0'|I�X��`�ѡ��TM�"�_J�����2 ����N���YIA;@�FWun .-g�:�HJ�S$x�Kcp��"��}��Ǻ\ݸqiA��\өrv��Y�ˣ�ê�V;oj+v���ܪV>4�MiP����&X�6�l���vO�h'd;;�o@���Q�u����57r�PRϳ�Rr�Ѩ��o<9����+cz��.��@��-m�s�>����B�&��9BsȒ���:�����p{�=p5�kU /�h�ߣ���5�T:�GyoȡN�Jc�v���B��g����d�#|��=!N��;��')F>��Q����溼������Ēt�|8j7_tǞ�����D�;̽���B�=Xۓt-��?����`hk��{�mf������h,1#d��q nq�����=^s��ΆV�0e��м�Xg�Dq�=)�ys5T�<#8�����]]/L� �.��c�}��-�<x����� �������ڨK�6^�aѶ�j�߃n:�KO�� �#!�N�*��U $�E����roR��)�Jf+o������0#�q�hƓha�� ��������t�������ٍ��'�Ӫ���`ެ�2��bLT$Ο��*W%�\Q?�d���vY�Z���[m&N�ܲ�Uu�1~B{Wgɥ���a5��c��W%1�ޞw���?�ѯ�,��$���t�m�RF� �M�� lN�16�6� ����� Ŕ�W,�U���l�3���g�6���p"Q࠸�٣�C�V���1� =�=@Gp\�Ngj(V�/���>)�u�i':¶�l);' �q�C�/ �������H��挜�E� <��Ma��mQ�EB��*޶���m*����e�8�8cK#����Jc�%��4ڷ��8�"[�$�'�;���=:|��n�˩? ��#0���Ϳ^��Р�MdS��1��T�W��fRms�Xk��U)����l�C�h �����aO�zM5�b�_!�j�o@۬}B/��4�N�K���ĿIW*J_��+����Z5����KxlB/��������$����x��Qw~��#>ΉY�y�nNд�i4�������]� ���Q?5�7Z_�1��%��'YE6���w���3H���%o�-5 ��&u�3�2��OOɥ��t��Ȥ�QX6�����!c^�6h��n��d��*��Y�?�� "���{��F�/�� -OT���Þ?��0 -̼ۗ������:j��Ӱ�T��e�8U�&ȝ�J8�n�q�d.�%�� �Y9UJ���g�dsR� ���F�/�4����K4�) H� ����#��ٽ�|��Ц��y<ɨ#�#��2y�/�-�1�9�%Z��:GJ�Z��fH���$7Һ��u�^X�lg&~ �V(�+��Ŏ�� � V~Cf +ɱ�R� K�$���Y��� u�J@|�6,��� ��9�U�Ĕ{0P�ĵ���U�b"�2p�\f ����2�ʠh*9��T�l��D=��uQ��7�L�:��>�`��ݦ�s`: :o��Y!��G6�V4F>�dH!V���p�E#�7~m��/4�7&���>���kN���<ϫ^-v�/&3�"%_/&:�L\�yH#r��u ����]N۰�@v:��3ͬr���?H��{aV���|(��t��2@�(� x��h5���c1 �#s�i9wm���R�ٷ(�ݛ�"+��t����I��V�;�đr������M�gۙ+�\� ?sD[���Ճ���F��̔���*��˩0?��8�ik���_�E�a�s�d4�*r��*�rX9���=���TlQ ����O:7��r\����Lhj̯�^LI�!�������u�}0�-~C�����oO�U ���?�XG�Aڍ!Q��G@�Ζ�����ulp���-^�j{ySfD 1������:��#�pB� ��[B>-�K�i��T�j|L���n,���a�Ů�&96�IQF'�^<����dk�-�'���O�z�@/����e�����]>pw �P��d1�����J�M����hA�����J �R2z�n��$��Ai�K.��`:�!h6o�w�O���i��yGbWy��zs�{�?K����[-��n�A?��H`�N�cfV��Ү����u̢�́������V��Y�W���_~5��:Ol �i(1����ۃ{9|��={� bі~����5:kG��#s��R��1�&ʂ88mݖ~��+?�� ����z>���v�^�mZk�O���X&�ؾ���|#���#��2�;�92&K�J�#!��&0,�g!y�;43��·���(�Zu���n'%����e����13�(O�Y׋яη#�����5�K��l�1��و�E�D%疿}o�/�18T,����9�ǘ���q}��d�쳣�9| �}���M�N��R��{,Ғ����u���m�S��;9���yÛ�ޕ�g}�|���H�~s ����ο����QUl�>I<�����)H�P<�o��� ���U�8��F���=͐2�O�md�������|�}��/+�!k {9����F�G9hs�DBɮ�'�3&�Sޭ���r�>��E!�O=$� AR֗X��+.�O��� ;����js�\��� �f��v�4 �i�ؘ4[�pl�f�W!���h8���|J��dj_P�������)�Z�N9�Mlf����O�i�3w��ב�:d��`/~@}<�+��F���]%����z����;�E�k���k�UT�k�z��n�a�U��� <��ѝ�~�@�t��9\jŤ<*��pIG���D A\��Y͢���t���-��bԫ�4H���kZ[q�OIA�$���kv�`�S�E��c���!g�W�R����,�^�|ԩ�7],�7�����%u}FBx%QL#�cH���g~O�~* �u�N�&��˹C�[�[�,Oj�i���I�.�4P���3�J\�Ũ���yj�Cvi�v1� V6�i��6��5�D\� ��ۼ�;\�̵0����ZE���r�H�+�6�d)7JC^�W��wK�� ��޲)���/���a��VI㊊RѲ���қ^*ЋR���Px����ś�M��V ��p|����UY�Kj})t0|�?p�*7��6dd��6���Jp8�DQ�� hC�*�9eip�U�lf�3�l|��Yl,t1��ҋ5����G�k���$�Cڌ�.,*��sc����7*ɴ�����}�B�鬃��d0�V�쮲��Ⱥ�DWގc���_�e �׼������[�@I�\�/R}*�uf �G�5*y:O=�Q�M��R�.焲%�8� Q��|*�1�S����1�윾qhm�$( �f�<�,�����i�e��_4'H�����EƑ/D�\����[��ʤ,)�R/%�� t�Z��o����5���5�^��%Sy��� �$�&����¸Ia�iu��,�/8"�W�]��ҋ����aP����*�2���\�i�JV6wn�w��3�W���_���s�?B�6�0I�Q�1@r�E�m��P*�*���F�� �Mڊ��i��,f�mi��� ׽���P� U?Z����N�4��+��æ�E���>F�~� �Tc��`B��eX�;�U����=�ʦH,����f�ٻ�tE*�Hɳf:f�`)��@e �Ͽ]���ǘt���݉.@C �WIL�4�׸۶�'����$z5 b�ܯ�c��K��O^�p\�m�:ѫ�B�Tͬ�Ң�tA�P���.�8ѡF&p�����2����̖�?�D��J���5"���m�k�(}����;��.�U^q�gg�_�R�T�s'�Ӣ�����Y��b�����ǻ&�k.���ޚ��}eWi&���ķ��]�d[#M�;�Z�tQv��� �w�M� ��Ȁ3����&9�:�٘�)H���j��_U/�o���~؞�X�ۭZ�.�� ����9����?���8����ZNb����E�k�{/��wP{,��5��y ^���g��|�̕�/�No��=ftvӼ����nF�q[ �)��)�!9��_���a�^�)�E��nɻ�(�< �Y�ǰl\ =��%���Qa]H����{��UTfؼ$�~l(��tG�N8=� ���Kެ��7��� t3�2�;�}���Mb�^��,S�=����E.�m�K�6�9�w��Z�(�������a2=��M�����ړ��ѐ| ��0G��7�2�� �$�ߘ�Z!s����d9js� ��B����pI:��Z�@����� %_Q���z�I ��V�.��-"���+��.���������E�l'��i&{�7%r��/e 2,�="�Q _C B��4���*v�o��1�X�/Э�� Iv�x��Dk�î���ܟ��-�{E�]]#����o ��VA0$����D�,h���W���m�kd�����x��ū5r�y,�ʲ�u��(�~�h�1|2eԹ�G�w\�B��h��=�"}}��6�������I�� jMTl���W��<\c�y�Q�^>磹��["b�~K����wg�E[�%.B���n� 3Bd��m#����������>#�O�-���6��'�N�G����殂\�Lk���|O�CNޮLx+PŎ *��R���0��v�E�ҥ�D3�D��@��B`�rA�F��:׭4�=���oq"��_�FB�y��_ȣn%�� �׆n��1���YT�?��ho����X��� �R@v<�vV��:�L=L ��cmƏ\B"�{���� 8턠,TW��Ŗ*۝"h��V�������V�ͼ99ɿ�^�,���(����Zfo'鶋5���& 1�R�؆��\�(�w�!��y]A��>��8��œYT��nG�z�J�M�+>�j.�ntrpb���w/�S�n���V_�b�_� ����؍&��-v ��r��PEhQ����G3��F�#uT��T.�b�q~YjW; 9��~v�4�hw!�X��LR4�^B��P����K���<�3ri��S ���3�Ug#3�� �H������(9z��A���P��~���T���f��\�!5jbؚ��'_�r�����ܑ�N�0F[!��87�p���o�;���!jgd��>R� ��Z�Ը�L�gC��H��}�h׏�輞�a���]�n�K/������ƴ�dn���`�(����Tµ�?G��Ԝ�㪉����������Qq�Q٣�Z�9h�u�����jq/��iKjl�b z��[����NP��:�;ƶk49���%xF�K���@�X��g�~�=Q5��H�� �sf] aFVF�u&��`��Y�-�0�F3 �}< "�[�=�\t�����=i�!"�!���7G��8V {�*]�:X�!λ��jH�G� ������.Y��JL7�#-��T�u���v�:k�l9��X�eq���#-��Q�Ԧ e;_3��Ct�� f���B �ێ��֯#�{�6������Z �ȇ�-���u ���.y137۟A�%�뙿6�b����:�K��!O�!�+��X�n�wH8p�k(Y caU�1�oU:��#|��Bw� �� e~x�fеm(���c���b7�w�:�?[�;�P��^�����m$�$�ʮ �3i�>��v������+����D�+[Gu����o�Rf"k]����X��m1$,9����B��co�5���P�|@?�@�LiΊ%�|7���tH�g�������(�M�D�T�%��ᗖ��£���Zu�ϼ$��]9�_̟���1%C Dա��X�n�NBfM���Vϝ:,��$��x�?k/۶uq&6O��7f�=�a*R�3�tS3��^��w��'����r�L�n���_���RP���%�F�Op��OŮ�9� ޭ2�Lc�.:���*�i^��!n���7��S��k�8�E�����C�ܽ|ڏ£���˾�$�Ja���O$����jl�>2��G���A�@��t �X���9mY��{��mHq�M����4���ڈb�Kϯ�����7�q+:�x� �y�5���':�[)�>s���u(k���Hk�`+����TdJu����9�C�����>'��8�J�dG����~i(U���Qsv��J�T�y�z�{�|�E ��W��Q��E�3N�8��� b�����Z��2��_�����X��Ԣ��U40�������J@�|�Ge�Za���|!.P87�3�#�%c ���).���I�`1�M�Xp�y{D�m_ێ��� m(�,KqY�M◃���\/�C�ټ�ú˅���Xh��\X�j�˻GP��B��b�������<��T�g= :����n��&,���m8Ga�ARj����S�Ļ�,��gq�q���`zu5�nPT 뷍��uf���e�No Pj3�J�9�Y5�� ��y�=b��w��s���#]�$�C-�u��S ���zhI�%��$����%�blT�W7��ɀN���x���s�]�4B-�%��."�A�;��[튽R�h���2�h����VUzKDž3= ��V������B�Y��J��Ioe�����){���8�(�S㈗�D��P$ I�D�I2��c����K��OH�̤6�B:�dQ�'`�`Ē�5��&��tO�ͫ���+�sm�Í�;�ԇ��9̊$wjff� ؀���:���k*���^��+��F6KN��I���=z�S��<����M���>�*�*S���|��٧i �5!��/W��S�e�˰6�"�f��ֈ�F'DW � �4u��\� E�J( �e�Ԉ�w�GߵD; ��(��Mt/6��z����6QM�(M�����v��|��4�B=^�́t�H���s.�4#p��"e��="��H�]0�u�G��[�a>$��Rp��&��X��l���;‡�p�C.m1�;�ht)^Y`� ��e�a�m���?�k2[Ftv!K��~u�un��!4 ��Ig����տ����'���Ɖ��G��>8~���'�����ga� �kJN�;�#�I-���)涅��;��A�I��} �{�j�;�K*C�m�#`h�/��=�W�4(I�{�"-m���!�d���2�Ù*ܧ�hs�gX�5l9���W0�i����� '��?%�<�K)�ȬY���%��鵦/� L=r;����χsk��Tj'�]�j�'��YaC15��qc� �%u����Ny@a�����ó� ����phʌy��u�y�&� �,��x�W M�۴i���p�q7M8&�4��g��j�eT"�^�!��P�i�hBק�A�sm�d� �O �s7M��:�ц��뷫�ZUuJ�o-%�B��- M ���]F�@ɓ�wK�E��)�4�럜�T N2ق�b�:���C��Y��BF�f�6i�鑜b�6 �!@�8^f�qo�oƘaƩB8�w�����e��� ����M�8>� z���X�tUj�*F�)%�S��3c,4i}y6�|c�m��(;8���2Q�K{3����<|������^��s<=ֹf5��j��9�L�N�jTse�%�E�ɻ�s6I@U�q�����WznS� t.D�v7r�j�h܏i����K�%�T3�D�\P(@�0�C��G�`^t��s���̋����aĤQ]=�y�{���ET��`���h�6\+�M�c�R/��H�+�G���.�U|[�g��4�f�I�FM�B��ۿ��)���߄��e��$�+�n��Y��yJ�6�n qܬ�@h�p�T>�`ZnȜ�͓�u_8ÉZ��f�@~&&����lB��D����Y�uLɹ����`|���A���%�xA2?V�z��O;�ηO/P�B��A�|0vey�4���y!����jZ��]�H���7�H�uU�뵰�pԃ��P�K�oK��>��T]6��F���m+��1ĸc�K:�� ���p�E!�����C�h� �[`M�����y�3�n��>3����[b�i\��IC�u��J�f��$5� $o^q�_���\�K~�72ѥ΅Q��c� �_�6��=@�)�"���؟؋�8�4u>��A���ds%�����{�r:���v�$�=9R�N=v�� �m�����7z��v�,�i���!�Q�[� ٘~��h2L>k�����5��I�}#͔�l 7,:�}�g|��wG�� ��b������ٛ0[zE�'H�iJ(麫�r��"M�ʊ�?zOIz��H��gK��T��"�U8)em��o7��b&�Qo G�(:��úFp?1�� O�\�WU�G2#E<%��� ���h���7���U�����`�i�ݗ��!R{�N���Pț� 2*}v-@� ��$+�X�і����$qYw�'���IZ���;/6�� �(�����#�Y�v���'"_&ȧ��F,#�� 2�WB�=5 7��'� ѺQ�5��zwM�z��`L�f��ӭQI ����( 굝�:�qt�97iקÙ�����S�[H��W��b���:gu���`hH���7��?�T��m��R~w�Q+8�=!t���� W�%|F�tt��R �ny��n9��U��+�> R�I���̄ҸB�83�āh��|K� �/��Q7��\eoX5#)iҬ�0!���r��h��0-��0IJ��@�F�ǘ,5��==�\O� �CX�k�m�:� ˺m[�q�>�.���6�FU�M�C�R�Sn�e�Vo `���o�^2��3��h� I#�շ�� � \��H�1j�d����m��Cd����5��Ra����OO��p.� ��zl��٠EZ~m�P�+�7.f�^g� ���N�;�g���k#!���?�����HI��E�0&�]+���p��ާ3Q�-H��6�%͜ \��//@�T2�Ll�蠣/i��%T�DNNh���&fp��9��y]��s� �5H |�:��� �8)�������n2�]n�C f�(��Q�@&��<�@\QR��p��? ��ui�o��I��S�������ԓK� �ݝk���E!��9�z��$�eH�Y� �7g�ue��0��ʒR^�y�NO���ݪvK�wY;:�'�1i_'�+��rє��4�����g��Q��X���k����R�,Ta�D�%���D���1� Į�@��Y��d�I6̀�\��=ϓ� �@�������T.S��*c���B������1=�/����j��,�G���y�f�mL���[��0�/����2���)��n`l[=�C[� ߗ3r�H舌��zJQ}��!�pv^*��'�rMdʫB3�c�<�Q�rD���O� ��`1� ��P�Ir�PǞ�/||� �$�������O%�" �ۃ+���_�J(+�_Id���z� �bl@7�� v8�\PS΂�[Z(j3 ��o�?��@&�ҏ�����1�cx��k��d��3zTH?��Gb��S�[ H�g���N�9�sO��]^�۸�]^g���O�Z�c�׼��G!] N�����=��DG��]f.O�|SS�t��Us)���~��|��a�_�m���P�j�`;9o�p���Z1MuV�>ūr�G���ޑ��ˎ�@z��� ��7F�8+l�;��<�qA� ��7��5��Η���M=��|��@�\�k�(��ij�J���Jn�N��<,Y+���s� )E���z]�9nQ��ի���b�P� I�����=O$�Z���^�~��� j��#'�9%e����ц(�L )s��ei��#���X(:�!g�ͤ�ˏ��gPv�����i��/��jβ���L;W �O��qJ�ό K�Wi����*�Y�t���ٶ�!{�.A8�Z�ў��)L��͞K�������.��E��:ٴS�3Uy�[�P�T�ȓ�Zk���3}]�N��>e߶Yk��7b����'�CXf[˷s���{~L�k��{��4��n�����K������G���������휠�� �]i���k={���W���d�)G�Ś��,ՙ���H��S��|��c*@�b���+\�����5� Ԅh�H����_ީV����c�SPy�x-ħ�+�v�:���`o|gиUs�#a �����*� :��)�ʔ�?*�a�����̨���5�ď�H�|�)���J��7!c�����_�7%k=cj�v�-,"�[�����f�fm�{�a�9?�������h8����}��ۙ9��A�Q �Y�?\R��ylt�����o������|�-��{ ii��ajg� hzбX �78�Q��x * �˓�g�P5��g6o�)�?����3?�*��ޅ��K�ړ���� 5�=)���+��#��Ƒ����Z��؞3� q�k��_�b��x��*|�y�BI� @�}�_Nck��Ij�+[�xq=�r��J���ꬭÔ:G�Xz2������!+^y≘��ƴ�����f���ʜX�)¦9�%� �&�� E��bW��9乺)" 3��+.��)��9C�'��EB�׶ac�� ��mX7��>�����bt�D�̏׽�ݬƢ˖�.xL �:�Jߏ:jf��|D���dF�@[��P���p�� EQ��{������>�K�rGT�2^~C4=a���DNj��DV�� �i�.&��4�ȹ�1�<Ƿ���aa{�o���?F�B03��, �?�qJ,�%�#��iunc�V�}g�>��#v_�;|��>ҁV��w�4��`"��8C�;b��xTY�:�n&��a�>4W����yXQ+�&Ҩ� ԣ��d,�]�W���I�����[>K���XQ`��)�/q���e�UI�T]yK��J�mU+�C̛�/�.�UO�����I����~�Mҏm\{��_>%�x�&W�9aj��n� ��xL�p-�� ����`�7�6Z1f�L������_6~y�+�Ga����_ ���jSؘ�� �ImK �@�E�'&���s�h jp]�e��\�1�@�2����|_��d�ᡩcfB T�P�ݚ�Őo=�.�����`���H������>�Q���cI^Ui�2f6���wBl ��`{���!�}�0��l�r��DzAD���X��Q`p��m�K=]^� i�@L��tU�m�G>�>X�z*N�Y`�C��t�]�ә&*�z ����Qz��� ���~p�Fן9�Xȼ6�j�����D�l�ۅȖT��Ń��W!����.��q ���8�o q�o �'6���?��0R�'��^U�,��J7Du${(Z�͆�H�$�e�I]����*$_�&:��E��m�^3y���czKY���oP����.,`��:WsPF�d|X�UQ#qY�>�]T����� *��_��/7V���m�󻜐}�?�M����)�Q��.�GqVx�-� ���ܠsS����?J�f� �]�A30/��W����L"��\�5�r�K�?��O/�.u��,:�^�kBa�G�K�Ҩ�3��c�;,j�ݜZ�b�2'd:����� ����0���PcC�P~\��+s >��%q��ޞ��.��s@�'[� ���T��y?��A��U4��_k ¶nWy��w�u%NE�3�/��yc���^ FO� <�DyC����gg~���=G�p���f� �� c>Q{п��\�xG�D�� [0w���v���f��‹#��Ǿ��$����#����(A5WDrUZ� /��]��G��8��ˮ�?�p�X���h8�w��#4����8�Y~�S�w$S�=xU����\-Q��FRn��cp�D�)G����Z�����p����!��z�Ը��ر�J$ +�j��Q�A�I!c_��_ND�G�O�5����|Μ�qߞ?��Ө���܃�hK�{�~��wKд��h(��g$*T����Y9��t��:#���3�u��|RE�F��N!WLH�� B;�%�U�@�����pB�.�o��k��������;F+v�X�W" �Iyte���7G_Z�ծ̜̻�5�ӏ�^I�foЅ�Q [���D�\� ��Yk�H�PGY�SY�h��kj���!K�e�6�ά�W:��o���M�T�M/\D����kϨ����Y�)0.�S˨�{'���X�^�/���VsT� f�F�ױ &����3lW �a�EC����|%(��� �ckPK�͝������� �1� �Q���;r�D�.uZL��8F6-x��EQD��R!�+�q����k.=�G�|�p̷{�xN��U�| ���d��ֵG(���f��4�y�:j%iL�u��K!�X����Ϩ��2�*˼�%��,`D�Ŭ���T8�ܸ�aI���g�� ���[�6�‹�W����GYR�a��]��wT}����][I��NwQ@����<6~�s�98��Bb��"���cqh���^�OPnǵ��+E��QQ���`_�t�運_�3�3� �<��~���D�@6)N�A>�H.19�|�)����!L�]ȫrM���(?�H���<�� ht�k^Ei&Qv?���p��`��J_�$5�KW��3�<��I�� le���P�y�"{&j�Iܠd������(Š�-�#�{�=w����c���JKB��F �_�=�c��sBU�������5E���t��3;!3����Z�c#�!������{R�6ڹ3�C l|�a=|�yV�(u�Y��#�2���(�q�<�BR���H����:��d�ȧ�?�� %w��b��r��#"��@nP �>f]��M�CՀd\���s���G�a���o�5y�O�Cb�n�����_�Q�/��y=�G�`M b]��X_t7�O�!l�*�������ؔ� /|���)�q+�L8�j�������K��8�/ƾt��sw�AQ�'�|2�� V�a�!��A��}t��Ak]�2���R����5�!|��5ܪ�$�c�0Ɲ��h#��O��YI�F \݃��iQ�Ӛ�8�G[��ZNg�õ�H ��O������3`�� ��RI��\���#�p-�Ď�"�d��&�|��d����� ������jCq4��*8�Mk谦�!�C3U�1�HR����� \$��\�s`v nf�-�F�� �Al�P&Fϰ�����W�1sdz��Q����s��Ļr��0��\^!�\�G�e �0�������l��6ku�U��|�f�q��;��:%#/��Y��T*;�y:��ͷA��o҂�-O3��C� ���ݻ� ��s�凶WBҊdU}��W:����iB0X�\��Zq ��<�� n?3X���8,'C�B�*Y�����s�E���C�c��4��sb�ro���Ji}��� N���VJ8�}���� �[�Ŷ��fD�O��ڼ����M;�D� �4�~����Ҷ� �>zưc'#��zH�t����h�4,�C.�AC� H$�‘� �8\w��™LVR� �HVb�����Ϯ�yǷ��$������Ͳ��fr��UP��b�,f@+�j��˱���*�2;��Yd���x�[6�MA���-�#�!���db�Oh՜>��}Vɯ�#�� >��T�����l�֔f<���6��AZ.�t�f�8Ba�cC��^���k��jP6�iڢ'bЙ*�����f���Z�&O�xWVg5�yqP�H�lJ��S?����q������������47�����$P�Mk��,X����-����bp��ƛ,���y�k �:�Ǖ�Є��6i0�mձݺ�*2%�#m�� J�)"��}�ׅ����-��)�ʽ�80a�:�� �����j@{��G2T�?���� �T�����J��)`�S�K�S ~�w}).���M+\_"J><�lA��ed%�Q��x�<���P�Un:1�5B��u$=�P�����M���I���b�T e� �kx�INjR� y���ƶAYplj��Rf�h�Y'p�vq�x�/l.w�\ŠC~�S�Pٹr�3>�H=�{/4ΉYOtd� S�)�����/���z�+���e�7k�q6PA�i������o�9gf�c��� h�X@��arT��HpF�����s׍�(q�'�1���3['\��R�;�G>]��G�0��7K�|m��T�'fB�rhDž���2A��JEV�:O7F #�XVfI'I "�� NfX�q�ɓ}�-U�� ��"� W���# ΀�%«K@Ȩ��xWY�ףJK ~{��*�w�ۍ}m���˄�3�;r�!� �ZjRHM�,�2 �}�zf�kd���p�Vy�n�m�py����xˮ�1�S���|Arq�?���B�8��U]u����3� ��?9��zYu�`�`a\��9M�cߗ����Ǿ�I��:=b�� �&��Y���d R5q��ԣ��� �F�Q�֡B��;�A��G�� ]�x guͪ��mߢ�$+0x��UUa�IԸ�O� �Y�𐐾�n-�6���+����A�N(�I��m�4D�n�P�cbt�op����U��&;)EW�BH�J]���D�B���J`WՅFp�\}�g �n����7���Вe������ YZ