aum-1:5.0-5719.el6.art$>_ \lYO+>@?d   4  4:?FV(V V V V .V VVVbV   ( 8 9$d:OZ=>BGVHVILVXYZ[\V]LV^<b^defltVu tVv w Vx Vyd Caum5.05719.el6.artAtomic Updater ModifiedAtomic Updater Modified (AUM) is utility that can check for and automatically download and install updates from Atomicorp.[TkempsridleyAtomic Corporate IndustriesCommercialSupport System/Servershttp://www.atomicorp.com/linuxi686if ! grep -q ^apache: /etc/passwd ; then /usr/sbin/useradd -c "Apache" -u 48 -s /sbin/nologin -r -d /var/www apache 2> /dev/null || : fi if ! grep -q ^tortix: /etc/passwd ; then /usr/sbin/useradd -r -M -d /var/asl tortix -s /sbin/nologin 2>/dev/null || : fiif [ -f /var/asl/bin/asl ]; then ln -s -f /var/asl/bin/aum.dynamic /usr/bin/aum else ln -s -f /var/asl/bin/aum.static /usr/bin/aum fi3)* j' D H "l  8;-V-2 IQ$y*;8 i0o k SwIAA큤A큤AA큤A큀A큤A큤A큤聤A큤AAAA[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[S[S[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[R[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-5.0-5719.el6.art.src.rpmconfig(aum)aumaum(x86-32)    curlperlbzip2net-tools/sbin/ifconfig/bin/sh/bin/shrpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)rpmlib(PayloadIsXz)4.6.0-14.0-13.0.4-15.2-14.8.0X@W-@V͛@Vn@VetV U@UUUU'@U&iU%@TTl@TG@T>aT*@S׌SSDS@SS|@SKSKSB@S9XS2@S0@S(5@R@RRa@RʚQ@Q@Q@QvwQkQdQb@QHS@Q=@Q@PP@P~@PO@PP @PN@PYPmz@Pj@PM@P;a@P@P@P@P@O@OOROiOĺ@OOr@OgOKp@OKp@O/O"OKN'@N=@Nk@N@Nx@Ns:@Nm@N[@NJ[NI @NBrN?N?N6@N-ZN(N%qN +N7@N N|@M,F@M%M$]@M @LNLΫLΫLeLLLL@L@L_LXLV@LT@LRLRLF@L;L4l@LT@LT@L @K/K@KK@K@KKKC)J@JJ@J:J@JzJx"Jv@Jn@Ji@J`gJT@JMJ8J7@J/@JB@I@IX@I@I@IIzIV@II@I@II@I2IIII@IIl@IXI3I3I)EH׈H|@HWHHHkmHj@HNlHFH=I@H"@H_@Hv@H GRG^@G G G GQGt@G"GG9G@G@GeGrB@G^{G^{GW@GJ@F1Fɂ@F^F@F@F@FFR@FR@F@F#@FFu"@FsFq-F^F^F]g@F\FZ@FF@FAF@E@Support - 5.0.0-150Support - 4.0.19-37Support - 4.0.18-36Support - 4.0.17-34Support - 4.0.17-33Support - 4.0.16-32Support - 4.0.15-30Support - 4.0.14-29Support - 4.0.13-27Support - 4.0.12-25Support - 4.0.11-24Support - 4.0.11-23Support - 4.0.11-22Support - 4.0.10-21Support - 4.0.9-20Support - 4.0.8-19Support - 4.0.7-18Support - 4.0.6-17Support - 4.0.5-16Support - 4.0.4-15Support - 4.0.3-14Support - 4.0.3-13Support - 4.0.2-12Support - 4.0.1-11Support - 4.0-10Support - 4.0-9Support - 4.0-7Support - 4.0-6Support - 4.0-5Support - 4.0-4Support - 4.0-1Support - 3.2.18-37Support - 3.2.17-36Support - 3.2.16-33Support - 3.2.15-32Support - 3.2.14-31Support - 3.2.13-30Support - 3.2.13-30Support - 3.2.12-29Support - 3.2.11-28Support - 3.2.10-27Support - 3.2.10-26Support - 3.2.9-25Support - 3.2.8-24Support - 3.2.7-23Support - 3.2.6-21Support - 3.2.5-19Support - 3.2.4-18Support - 3.2.3-17Support - 3.2.3-16Support - 3.2.2-15Support - 3.2.1-14Support - 3.2.0-12Support - 3.0.35-5Support - 3.0.35-4Support - 3.0.34-1Support - 3.0.33-1Support - 3.0.32-1Support - 3.0.31-1Support - 3.0.30-1Support - 3.0.29-1Support - 3.0.28-1Support - 3.0.27-1Support - 3.0.26-1Support - 3.0.25-1Support - 3.0.24-1Support - 3.0.23-1Support - 3.0.22-1Support - 3.0.21-1Support - 3.0.20-2Support - 3.0.20-1Support - 3.0.19-1Support - 3.0.18-1Support - 3.0.17-1Support - 3.0.16-1Support - 3.0.15-1Support - 3.0.14-1Support - 3.0.13-1Support - 3.0.12-1Support - 3.0.11-1Support - 3.0.10-1Support - 3.0.9-1Support - 3.0.8-1Support - 3.0.7-1Support - 3.0.6-1Support - 3.0.5-1Support - 3.0.4-1Support - 3.0.3-1Support - 3.0.2-1Support - 3.0.1-1Support - 3.0.0-1Support - 3.0.0-0.rc4Support - 3.0.0-0.rc3Support - 3.0.0-0.rc2Support - 3.0.0-0.rc1Support - 2.9.0-0.11Support - 2.9.0-0.10Support - 2.9.0-0.9Support - 2.9.0-0.8Support - 2.9.0-0.7Support - 2.9.0-0.6Support - 2.9.0-0.5Support - 2.9.0-0.4Support - 2.9.0-0.1Support - 2.2.11-1Support - 2.2.11-0.2Support - 2.2.11-0.1Support - 2.2.10-1Support - 2.2.10-0.6Support - 2.2.10-0.5Support - 2.2.10-0.4Support - 2.2.10-0.3Support - 2.2.10-0.2Support - 2.2.10-0.1Support - 2.2.9-1Support - 2.2.9-0.1Support - 2.2.8-4Support - 2.2.8-3Support - 2.2.7-1Support - 2.2.7-0.1Support - 2.2.6-1Support - 2.2.5-2Support - 2.2.5-1Support - 2.2.4-1Support - 2.2.3-1Support - 2.2.2-1Scott R. Shinn - 2.2.1-2Scott R. Shinn - 2.2.1-1Scott R. Shinn - 2.2-1Scott R. Shinn - 2.2-0.beta3.13Scott R. Shinn - 2.2-0.beta3.11Scott R. Shinn - 2.2-0.beta3.9Scott R. Shinn - 2.2-0.beta3.6Scott R. Shinn - 2.2-0.beta3.5Scott R. Shinn - 2.2-0.beta3.2Scott R. Shinn - 2.2.0-0.beta2.1Scott R. Shinn - 2.2.0-svn090717.1Scott R. Shinn - 2.2.0-svn090708.3Scott R. Shinn - 2.2.0-svn090703.1Scott R. Shinn - 2.2.0-svn090617.1Scott R. Shinn - 2.2-0.svn090615.1Scott R. Shinn - 2.2-0.svn090610.1Scott R. Shinn - 2.2-0.svn090521.1Scott R. Shinn - 2.2-0.beta1Scott R. Shinn - 2.1.0-0.svn090423-1Scott R. Shinn - 2.1.0-0.svn090421-2Scott R. Shinn - 2.1.0-0.svn090421-1Scott R. Shinn - 2.1.0-0.svn090416-1Scott R. Shinn - 2.1.0-0.svn090414-1Scott R. Shinn - 2.1.0-0.svn090310-1Scott R. Shinn - 2.1.0-0.svn090309-1Scott R. Shinn - 2.1.0-0.svn090306-1Scott R. Shinn - 2.1.0-0.svn090302-1Scott R. Shinn - 2.1.0-0.svn090227-1Scott R. Shinn - 2.1.0-0.svn090226-1Scott R. Shinn - 2.1.0-0.svn090225-1Scott R. Shinn - 2.1.0-0.svn090223-2Scott R. Shinn - 2.1.0-0.svn090222Scott R. Shinn - 2.0.7-3Scott R. Shinn - 2.0.7-2Scott R. Shinn - 2.0.7-1Scott R. Shinn - 2.0.6-2Scott R. Shinn - 2.0.6-1Scott R. Shinn - 2.0.5-3Scott R. Shinn - 2.0.5-2Scott R. Shinn - 2.0.5-1Scott R. Shinn - 2.0.4-9Scott R. Shinn - 2.0.4-8Scott R. Shinn - 2.0.4-4Scott R. Shinn - 2.0.4-1Scott R. Shinn - 2.0.3-1Scott R. Shinn - 2.0.2-1Scott R. Shinn - 2.0.1-1Scott R. Shinn - 2.0Scott R. Shinn - 1.9.13 Scott R. Shinn - 1.9.12-1Scott R. Shinn - 1.9.11-1Scott R. Shinn - 1.9.10-2Scott R. Shinn - 1.9.9-2Scott R. Shinn - 1.9.9-1Scott R. Shinn - 1.9.8-12Scott R. Shinn - 1.9.8-11Scott R. Shinn - 1.9.8-10Scott R. Shinn - 1.9.8-9Scott R. Shinn - 1.9.8-8Scott R. Shinn - 1.9.8 - 7Scott R. Shinn - 1.9.8 - 4Scott R. Shinn - 1.9.8 - 3Scott R. Shinn - 1.9.8 - 2Scott R. Shinn - 1.9.8 - 1Scott R. Shinn - 1.9.7 - 2Scott R. Shinn - 1.9.7 - 1Scott R. Shinn - 1.9.6 - 2Scott R. Shinn - 1.9.6 - 1Scott R. Shinn - 1.9.5Scott R. Shinn - 1.9.4-2Scott R. Shinn - 1.9.4 Scott R. Shinn - 1.9.3Scott R. Shinn - 1.9.2Scott R. Shinn - 1.9.1-1Scott R. Shinn - 1.9-1Scott R. Shinn - 0.14Scott R. Shinn - 0.13.1-1Scott R. Shinn - 0.13-1Scott R. Shinn - 0.12-2Scott R. Shinn - 0.11.1-1Scott R. Shinn - 0.11-2Scott R. Shinn - 0.10.3-1Scott R. Shinn - 0.10.2-1Scott R. Shinn - 0.10.1-1Scott R. Shinn - 0.9.5-1Scott R. Shinn - 0.9.4-4Scott R. Shinn - 0.9.3-1Scott R. Shinn - 0.9.2-1Scott R. Shinn - 0.9.1-1Scott R. Shinn - 0.9-1Scott R. Shinn - 0.8-1Scott R. Shinn - 0.7-1Scott R. Shinn - 0.5-1Scott R. Shinn - 0.4-4Scott R. Shinn - 0.3Scott R. Shinn - 0.2Scott R. Shinn - New ASL Web Interface - Firewall Interrogator - Kernel 4.4 support - OSSEC 2.9 - Docker support - Multi-PHP support - Cpanel easyapache 4 support - Feature Request #1641, Firewall, active response is written to the INPUT table, it should be written to the ACTIVE-RESPONSE table - Feature Request #1747, T-WAF, raise limits in tortixd.conf if configured as a local T-WAF - Feature request #1876, WAF, add lua rule checks to waf report - Feature Request #1955, Firewall, Lint /etc/asl/whitelist for valid IP's and CIDR blocks - Feature Request #2037, SSH, For UseDNS off on cpanel systems - Feature Request #2050, HIDS, Configure OSSEC HELO message - Feature Request #2055, Add support for Openvz/Virtuozzo Linux 7.0 - Feature Request #2067, T-WAF, Add SSLCertificateChainFile to the T-WAF configuration options - Feature request #2095, ASL Web, Help dialog - Feature Request #2096, SSH, add AllowTCPForwarding check - Feature Request #2102, SSH, add AllowX11Forwarding check - Feature Request #XXXX, HIDS, add support for user defined per-rule active responses - Feature Request #XXXX, HIDS, Add support for a user defined list of logs to monitor: /etc/asl/logfiles. Format: , - Feature Request #XXXX, HIDS, dynamic scaling for real-time filesystem monitoring inotify watches - Bugfix #1782, Plesk, fix scoreboard file in proftpd opture input for f_am_local_port - Bugfix #1906, WAF, add bzip2 and libapache2-modsecurity as debian/ubuntu dependencies - Bugfix #1924, ALLOW_eval setting has no effect. This is not a function, and thus, cannot be disabled - Bugfix #1944, Malware Detection, cpanel ftp upload scanner - Bugfix #1947, Auditdir and Tmp dir for WAF were immutable - Bugfix #1949, Vulnerability scanner, Error: could not find general_firewall_ftp_mod - Bugfix #1962, remove duplicate hmac lines - Bugfix #1978, Firewall, alert if the asl-firewall service is disabled and show a big red X on the gui - Bugfix #1979, Watchdog, _watchdog::watchdog_check 9901 ASLCommon::cmd_system ERROR: '/etc/init.d/psmon restart (1)' - Bugfix #1991, cpanel remote rule support - Bugfix #2001, Firewall, detect if VPS supports low number of rules - Bugfix #2002, Firewall, add locking to ASL firewall to prevent overlap with asl-shun events on long policy loading. - Bugfix #2020, Rootkit detection, replaced exits in rkhunter_check with returns - Bugfix #2022, DoS, correct mod_evasive24 whitelist condition - Bugfix #2024, Kernel, Runtime module loading: fixed [FIXED] - Bugfix #2076, Firewall, prevent /32 from being added to /etc/asl/whitelist - Bugfix #XXXX, Cpanel, for cpanel's use of ~/.my.cnf. - Bugfix #XXXX, HIDS, for custom rule support in OSSEC. This restricts rule removal to just asl channel ossec files. - Bugfix #XXXX, for SSL settings to handle "custom" condition (alert but dont fix) and ASL Web unable to handle + in a named field. Additionally for backwards compatibility we are maintaining APACHE_SSLPROTOCOL as TLS+SSLv3 and TLS/SSLv3 - Bugfix #XXXX, Firewall, the ratelimit hitcount has a max ceiling of 20, unless kernel modules are manipulated. This fix will lower this to 20 if a higher value is selected. - Bugfix #XXXX, cpanel, for Cpanel clamav integration on EL7 - Bugfix #XXXX, cpanel, automatic exclusion for virtfs in the real-time malware detection system. Bugfixes - Bugfix #1782, Plesk, fix scoreboard file in proftpd on plesk 12+ - Bugfix #1714, HIDS, do not monitor files that are symbolic links. Prevents event duplication - Bugfix #1829, Watchdog, only activate psmon if it has services to monitor - Bugfix #1863, Vulnerabiltiy Report, suppress lsof warnings during ASL Report - Bugfix #1897, ASL Web, Condition added in ASLWWindow.waf_config.js to capture input for f_am_local_port - Bugfix #1906, WAF, add bzip2 and libapache2-modsecurity as debian/ubuntu dependencies - Bugfix #1924, ALLOW_eval setting has no effect. This is not a function, and thus, cannot be disabled - Bugfix #1944, Malware Detection, cpanel ftp upload scanner - Bugfix #1947, Auditdir and Tmp dir for WAF were immutable - Bugfix #1949, Vulnerability scanner, Error: could not find general_firewall_ftp_mod - Bugfix #1962, remove duplicate hmac lines - Bugfix #1978, Firewall, alert if the asl-firewall service is disabled and show a big red X on the gui - Bugfix #1979, Watchdog, _watchdog::watchdog_check 9901 ASLCommon::cmd_system ERROR: '/etc/init.d/psmon restart (1)' - Bugfix #1991, cpanel remote rule support - Bugfix #2001, Firewall, detect if VPS supports low number of rules - Bugfix #2002, Firewall, add locking to ASL firewall to prevent overlap with asl-shun events on long policy loading. - Bugfix #2020, Rootkit detection, replaced exits in rkhunter_check with returns - Bugfix #2022, DoS, correct mod_evasive24 whitelist condition - Bugfix #2024, Kernel, Runtime module loading: fixed [FIXED] - Bugfix #2076, Firewall, prevent /32 from being added to /etc/asl/whitelist - Bugfix #XXXX, Cpanel, for cpanel's use of ~/.my.cnf. - Bugfix #XXXX, HIDS, for custom rule support in OSSEC. This restricts rule removal to just asl channel ossec files. - Bugfix #XXXX, for SSL settings to handle "custom" condition (alert but dont fix) and ASL Web unable to handle + in a named field. Additionally for backwards compatibility we are maintaining APACHE_SSLPROTOCOL as TLS+SSLv3 and TLS/SSLv3 - Bugfix #XXXX, Firewall, the ratelimit hitcount has a max ceiling of 20, unless kernel modules are manipulated. This fix will lower this to 20 if a higher value is selected. - Bugfix #XXXX, cpanel, for Cpanel clamav integration on EL7 - Bugfix #XXXX, cpanel, automatic exclusion for virtfs in the real-time malware detection system.- Add ASL Kernel IPMI modules to load by default - Bugfix #2020, rkhunter_check, fixed condition where module would exit instead of returning - Bugfix #2022, mod_evasive, correct mod_evasive24 whitelist condition - Bugfix #XXXX, Upate ASL Web, Adds human readable message to ASL Web when it fails to read the lang file - Bugfix #XXXX, T-WAF fixes hard coded port numbers in t-waf conf gen - Bugfix #XXXX, AUM, removes feed_source condition on updating config from key values - Bugfix #XXXX, ASL Web, fixes ip link in events search table result window - Bugfix #XXXX, ASL Web fixes 0 value insert to datetime field in aslw_mtimes- Bugfix #1991, cpanel remoterules support- Minor update for cpanel systems or those using .my.cnf. This is an addendum to prevent cpanel processes from displaying passwords in non-ASL kernel environment process lists.- Add ASL Kernel support for el7. (kernel-asl package) - Add inode MAX_USER_WATCHES configuration setting - Feature Request #1308, Core, Detect if a duplicate rkhunter install exists on the system - Feature Request #1319, Core, Detect conflicting components in asl -v - Feature Request #1342, general_check, Generate alert of FTP kernel modules are not loaded - Feature Request #1479, ASL Web, Added visual for malware scan window to let user know malware scan is running. - Feature Request #1643, Configuraton, enumerate kernel installation & detection of custom environments - Feature Request #1901, Core, repair broken missing tortix-kernel.repo - Feature Request #1927, Core, implement mod_evasive in T-WAF - Bugfix #1529, cpanel_check, cpanel clamav socket detection - Bugfix #1693, cpanel_check, cpanel exim support for clamav - Bugfix #1847, ASL Web, remove cached amount from used mem in performance monitor - Bugfix #1900, Core, create a symlink to mariadb if it doesnt exist. This is specifically a Cpanel mariadb bugfix - Bugfix #1923, AUM, Add logic for maximum WAF engine version, and lua support in rule class context. - Bugfix #1925, Lint for WAF_SERVER_SIGNATURE token to handle more dynamic quoted strings - Bugfix #1926, T-WAF, ASL incorrectly reporting WAF disabled in a T-WAF only environment - Bugfix #1943, ASL Web, Fix available for user settings update function. Now checks to see if window in array is defined before proceeding to update the settings database and update the GUI. - Bugfix #XXXX, firewall, Increase maxelem to 1048560, this handles very large hashes more gracefully - Bugfix #XXXX, AUM, delete legacy ASL malware files on update event - Bugfix #XXXX, AUM, for Plesk Debian/Ubuntu based systems conf.d directory management - Bugfix #XXXX, AUM, Fixes RBC space check from ASL Web - Bugfix #XXXX, cpanel_check, fix systemd condition to add a startup event for pureftpd upload scanning - Bugfix #XXXX, ASL Web, Fixes saving global settings from rule manager window - Bugfix #XXXX, Configuraton, Add fix for "skip_name_resolve" in database setup - Bugfix #XXXX, cpanel_check, httpd 2.4 fixes for json/yajl support - Bugfix #XXXX, ASL Client/server fixes. This is preperation for ASE.- Feature Request #1835, realtime malware detection, autoexclude directories malware scanning, /var/log, /home/*log; mail; spamassassin - Feature Request #1849, realtime malware detection, report disabled/unavailable as vulnerability - Feature Request #1850, WAF, add fx for aum-only environments on cpanel to regenerate configs post easyapache - Bugfix #1726, configuration, add check for apr & apr-util if this is an rpm based install - Bugfix #1742, AUM, VERSION handle condition when content types are missing (WAF_ENGINE_VERSION, etc) - Bugfix #1783, aum, prevent incompatible MODSEC_00_AUTOWHITELIST_SEARCHENGINE and MODSEC_00_SEARCHENGINE to be enabled in 2.9.0 - Bugfix #1896, rework cpanel updates for rules-only, all, exclude-kernel update types uzzy matching database to the scanner (lua format, MODSEC_99_ADV_SCANNER) - Bugfix #XXXX, Firewall, Update dynamic whitelisting to load from both cron and core firewall - Bugfix #XXXX, Aum, expand environment checking on cpanel to regenerate configs post easyapache - Bugfix #XXXX, ASL Web, fixes removal of 0.0.0.0 from tortixd acl when a valid ip address is added- Enabled Malware Genome Scanner by default - Added new option to apply blacklist to WAF, for systems that are incorrectly configured or behind a NAT firewall or incorrectly configured Proxy - Update AUM, config.template handling expanded to both HIDS and WAF updates - Bugfix #xxxx, ASL Web, corrects ampersand handling in WAF_REDIRECT_URL setting in ASL WEb - Bugfix #xxxx, ASL Web, allows wildcards in malware-detection - Bugfix #xxxx, ASL Web, Fixes mishanlding of unquoted comments in firewall rules in ASL Web - Bugfix #xxxx, ASL Web, Fixes waf category rule mapping in ASL Web - Bugfix #xxxx, Uninstaller, Make uninstaller exit if n is selected in yum- Enhanced IPS reporting for CVE-2015-5477 - Bugfix #1873 - Adds SSLProxyEngine setting to twaf config when end point requires SSL - Bugfix #1872 - Changing tlsserverciphers and tlsclientciphers permissions breaks qmail- Added ip_set_hash_ip to forced module load - Updated low level portscan detection to automatically exclude localhost - Modified syn scan engine to ignore half open requests on loopback - Updated ASL to support new fuzzy malware detection engine - Bugfix #1826 - fixes file read error in ASL Web when cl_clientapi is 0 bytes - Bugfix #1827 - fixes permissions issues for non-admin ASL Web users - Bugfix #1828 - fixes formatting error in memory and swap meters in ASL Web - Bugfix #xxxx - fixes asl/aum cli error output formatting - Bugfix #xxxx - fixes local ip lists in ASL Web- Add support for Cloudlinux 7 - Add IPSET firewall drop support - Add firewall support to define custom types for DNS DDOS attacks - Updates for mod_security 2.9 support - Update configuration, add automatic cgroups config detection - Update to support cpanel apache 2.2 to 2.4 transitions - Retire SCANONACCESS setting from config. This is now merged with realtime malware scan settings - Feature Request #1734, add Cloudflare active response integration - Feature Request #1741, detect existing query cache settings - Feature Request #1768, restrict module checks on openvz - Feature Request #1774, ssh_check, sudo checks for requiretty - Feature request #XXXX, ipset based active response support - Bugfix #1761: firewall, exclude custom domain element if there are no defined custom domains - Bugfix #XXX, psa_check, forces mode 4110 on plesk crontabmng if set to enabled - Bugfix #XXX, database-setup, fix for remote DB support - Bugfix #XXX, ASL Web, fixe issue when setting date+time for integrity scan from ASL Web - Bugfix #XXX, ASL Web, include the generic input and output rules in running.fw when a modification is made via web - Bugfix #XXX, ASL Web, fixes bug in web_validate preventing default user/group creation - Bugfix #XXX, ASL Web, fix for missing privileges check on events_search data pulls - Bugfix #XXX, firewall, fix for case mismatch on IP variable - Bugfix #XXX, ASL Web, corrects html in event detail rendering - Bugfix #XXX, ASL Web, fixes displayed mem usage in web - Bugfix #XXX, firewall, adds firewall restart on unblock- Add CGROUPS_ENABLE- Bugfix for EL5 exception without Rev Limiter support- EL7 support - mod_security 2.9 support - Add Atomic Rev Limiter (alpha) - Add support to enable/disable real-time malware access prevention. Modes allow detect-only, or enforcement. Requires clamd 0.98.5-22 - Add WAF support for Lua based rules (beta) - Added in new firewall configuration settings for RDATE, NTP and DNS restrictions - Added in new firewall dynamic hostname whitelisting support (beta) - Feature Request #1331, ssh_check, add check for small ssh keys - Feature Request #1526, Firewall, do not log drop events on non-ssl pop/imap - Feature Request #1655, Configuration, Disabe 4151 on virtuozzo systems - Feature Request #1679, WAF, add lua based search engine auto-whitelisting support - Feature Request #1697, Configuration, add "kvm", "vmware" and others to list of virtualization types - Bugfix #1645, waf_check, resolve rules sets console output duplication - Bugfix #1686, mysql_check, resolve symbolic-links = 0 duplication - Bugfix #1715, Core, fixes zero byte issue with rbc - Bugfix #XXXX, ASL Web, fixes creation of firewall log rules from asl web - Bugfix #XXXX, firewall, remove duplicate active response loaders - Bugfix #XXXX, firewall, fixes cidr in whitelist module- Update, AUM, add randomizer to hourly update check event. - Update, firewall, add new atomicorp IP's to update policy - Update, firewall, add FW_ENABLE_IPV6 (default yes), this enables/disables ipv6 support in the kernel - Update, web_check,add checks for HonorCipherOrder, add vulnerability tests for new Ciphers and Protocol settings - Feature Request #1518, allow stronger mod_ssl configuration - Feature Request #1656, add rpmbuild as aum dependency - Bugfix #1614, SecResponseBodyLimitAction set to: Reject would always report Fixed - Bugfix #1664, suppress cmd_system ERROR: '/bin/echo 1 > /proc/sys/kernel/mod ules_disabled - Bugfix #1682, custom_ssh_port missing from config and config.template - Bugfix #XXXX, fixes return value in ASLRBC in web; fixes blacklist_remove from cli/web; adds /etc/rkhunter.conf to core perms tests- Add Roll Back Configuration system - Update, firewall, add cidr handling to local-service-acl - Update, firewall, add new plesk ka server IP - Update, ASL Web, Remove geoblock buttons for EU - Feature Request #1630, installation, Detect if we can not connect to mysql during install - Bugfix #1597, firewall, Handle CIDR and ip-ip ranges in local-services-acl - Bugfix #XXXX, ASL Web, fixes line break bug in rule enable/disable - Bugfix #XXXX, HIDS, correct repeat offender logic for x2 and x3 conditions - Bugfix #XXXX, Core, remove hardcoded database name "tortix" from setup - Bugfix #XXXX, Aum, force waf module building on cpanel during configuration step- Update Aum, Add new update servers - Feature Request #1637, Suppress firewall errors on systems that dont support them - Feature Request #1638, Suppress ip_set loading messages - Bugfix #1631 - Permissions wrong on clamav signatures files - Bugfix #XXX, fix for validation behind proxy with no port - Bugfix #XXX, for validation behind proxy with no l/p- Add SSL Protocol management for apache SSL - Add Ciphersuite management for apache SSL - Add SSL Protocol management for Courier POP/IMAP - Add remote syslog/secure syslog server management - Add support to archive logs to Amazon glacier - Update Core, adds ip address to debug / completed with errors output from cli - Update Core, skips sig reload during whitelist add/remove events - Bugfix #XXX, suppress ipset delet message output - Bugfix #XXX, ASL Web, correct issue with adding/removing vhost settings in asl web corrects wildcards when running malware scans from web - Bugfix #XXX, ASL Web, fix condition with scan results not being handled correctly in ASL Web- Add Threat Intelligence Engine - Add ipset support to the ASL Firewall - Add Apache 2.4 support for cpanel - Update, ASL Web, Adds confirmation to geoblocking from report windows; - Update, ASL Web, Updates to reporting engine - Update, ASL Web, adds fallback to tld trigger; cleaned up mysql during web validate - Update, AUM, Add all blacklists to update event - Update, AUM, Add Timestamp checking to download event for files - Update, Core, Add TSA dir for dynamic data tracking to tortixd - Update, Firewall, Added in logic to prevent 127/localhost from ever being shunned to the active-response table - Update, Firewall, Changed active-response asl-firewall init script to use its own chain - Update, Firewall, Updates to Firewall Intrusion Protection System - Update, Firewall, Move whitelist to load before other firewall elements - Update, Firewall, IP's on the whitelist will always be excluded from the blacklist rules - Update, Firewall, Move service acl's ahead of blacklists - Update, Firewall, Move blacklist to load ahead of RBL lists - Update, Firewall, Added in logic to check for firewall comment support and to not use comments on systems that dont have the module loaded - Update, Firewall, Added in legacy ip tracking modules to asl-kernel startup script for really really old kernels - Update, FIM, Ignore /usr/src by default - Update, hids_check, add option to enable/disable tcpwrappers active response - Update, installer, Add logging to uninstaller - Update, mod_evasive, Add more MSN/Bing ranges to mod_Evasive - Update, mysql_check, Add detection for wait_timeout, skip-networking, skip-name-resolve - Update, psa_check, add support for new proftpd.d/ structure. - Update, psa_check, use the new plesk 12 API to manage ssl settings. Move TLS files under /etc/proftpd.d/ structure. Retire the proftpd-tls.conf file and the fixed includes used in proftpd.conf - Update, T-WAF, Add ACL support - Update, waf_check, add vulnerability checks for disabled rules by domain and globally - Feature Request #115, malware blacklist using ipset - Feature Request #900, add mod_qos support - Feature Request #1208, ASL Web: Add in firewall whitelisting - Feature Request #1532, use swap in ipsets to eliminate outage window caused by loading the - Feature Request #1570, Add in "this may make several minutes" warning to "Checking versions ... " - Feature Request #1589, Flush all firewall rules on uninstall of ASL - Bugfix #1594, fixes force mode when enabling a rule - Bugfix #1600, lint whitelist entries in asl-firewall - Bugfix #XXX, ASL Web, corrects check against archive tables when searching the last week - Bugfix #XXX, ASL Web, fixes bug in geo lookup in report windows - Bugfix #XXX, ASL Web, corrects handling of garbage results when fetching scan/aum log updates - Bugfix #XXX, ASL Web, fix parent tags in asl-web for non string types - Bugfix #XXX, Core, handling for 0 byte rules file - Bugfix #XXX, hids_check, fix ossec-execd check is still made if ACTIVE_RESPONSE is disabled - Bugfix #XXX, psa_check, Minor fix to exclude plesk 9 configs from plesk 12 and up - Bugfix #XXX, rblcheck, fix email reporting for rbl check subsystem - Bugfix #XXX, T-WAF, remove t-waf configs if waf is disabled- Add support for el7 (beta) - Add support for Apache 2.4 (beta, el7 only) - Add support for systemd (beta, el7 only) - Update, aum, adds owner check on aslw.key - Update, Firewall, Added in http rules for ASL-UPDATES chain - Update, ASL Web, adds help message if error during web validate - Update, ASL Core, shows help if old --vhost param is sent during enable/disable rule - Update, ASL Web, adds 'locally modified' search filter to Rule Manager window in ASL Web this will display all locally modified rules as found in /etc/asl/rules - Update, database-setup, includes sql setup from ASL Web - Update, ASL Web, adds per-vhost settings to the search results summary in Rule Manager window - Bugfix #1587, handles safari forcing numeric indeces in for/in loops in user group management - Bugfix #XXX, correct condition for remote SSL t-waf - Bugfix #XXX, fixes rule reset from ASL Web - Bugfix #XXX, fixes error when updates pending log is 0 bytes- Add suport for Plesk 12 - Removed support for asl -u and asl -uf, this is now exclusively handled by aum - Update genera_checks, Add abrt to service disable configuration - Update database-setup, Add warning on skip-name-resolve - Update ASL web to handle long report names in menus - Update Firewall, Changed advanced port scan so it wont alarm on loopback - Update Firewall, add IP validation to blocklist event - Update asl_db_rotate, aslw_archive_tmp cleanup when db archiving is disabled - added force_archive option to db rotate - added force_clean option to db rotate - Update cpanel templates to detect if the module directory has been deleted - Feature Request #1576, add syslog & rsyslog to watchdog - Bugfix #1580, ASL Web, omits ASL-ACTIVE-RESPONSE from running.fw - Bugfix #XXX, ASL Web, fixes web display issue when rules are disabled/enabled from cli - Bugfix #XXX, ASL Web, fallback data on waf event detail to be full_log rather than [msg ..] - Bugfix #XXX, ASL Web, suppresses netstat error in web - Bugfix #XXX, ASL, Fixes ALLOW_escapeshellarg typo in config.template- Aum update for uncommon segfault condition through cron.- Add debian jessie detection to AUM - Update cpanel build events, add rpmbuild dependency into templates - Update AUM, RULES_PATH support to the fixed vhost & global file creation (this is needed for planned apache 2.4 support) - Feature Request #1519, ASL Web, Add snat,dnat,masquerade,redirect handling to ASL Web firewall interface - Feature Request #1568, generate vhost php.ini files from master file (PSA_PHP_DOMAIN_POLICY) - Bugfix #1571, waf_check, waf_check error on asl -s -f when MODSEC_ENABLED=no - Bugfix #1573, AUM, fix validate_asl Nothing from request condition - Bugfix #XXX, ASL Web, Fixes event detail viewing on blocked ips- Add reputation system - Add AUM channel support (-testing) - Add domain blocking tab to blocking window in ASL Web - Update, ASL Web, allows modification of default asl web user group - Update, ASL Web, Adds alert in web if invalid config settings detected - Feature Request #1304, ASL Web, makes unapplied updates vuln open a window with contents of updates_pending.log - Bugfix #XXX, firewall, load whitelist before RBLs - Bugfix #XXX, aum, fix condition where a null waf_engine_versin would be detected creating a condition where rules from un-allowed versions would be copied in on an -u event.- Add support for Mod_Security 2.8.0 - Update Firewall, Change of default config so that whitelisted hosts also bypass the firewall - Update Firewall, detect if comment module isnt loaded for blocklist, and fixed bug in blacklist that wasnt disabling comments for blacklist on systems that dont support it - Update Firewall, Added in filesystem kernel modules, in case users create filesystem types that were not added on boot - Update ASL Web, shifts some filtering to cli from php getting iptables - Update Firewall, Whitelist 127.0.0.1/8 by default - Feature Request #697, php_checks, add additional php functions: eval, ini_alter, ini_set, symlink, ink, ftok, posix_access openlog syslog re adlink apache_child_terminate apache_setenv define_syslog_variables escapeshellarghighlight_file ini_get_all posix_ge tpwuid posix_uname - Feature Request #1346, ssh_check, Set PermitEmptyPasswords to no - Feature Request #1363, general_check, Add apache, nobody, www-data, and other users to /etc/cron.deny - Feature Request #1523, hids_check, Add in a pruning system for the OSSEC diff events (HIDS_CLEAN_DIFF) - Feature Request #1550, firewall, Add logging to per port ACLs. Add "LOG=yes" to the acl file and this will enable logging - Feature Request #1552, waf_check, Add user defined domain blocking - Feature Request #1553, Core, speed up performance of asl -dr - Bugfix #1498, aum, fixed KERNEL_CHANNEL= not disabling tortix-kernel.repo when set to disabled - Bugfix #1499, kernel_check, Consistent thread enforcement was mistakenly labeled as Deter Bruteforce - Bugfix #1501, firewall, WHITELIST rules are now correctly load right after RELATED,ESTABLISHED - Bugfix #1524, database-setup, change from localhost to 127.0.0.1 to handle conditions where the system is configured with skip-name-res - Bugfix #1527, AUM, DTC creation issues resolved - Bugfix #1536, ASL Web, displays message when no vulnerabilities are detected - Bugfix #1541, kernel_check, Force load of Asl-kernel modules before running Asl -s -f for the first time - Bugfix #1549, hids_check, exclude 127.* from whiteist checks - Bugfix #1555, t-waf, add lint code to verify an IP address or Port number are valid - Bugfix #1557, waf_check, apache 2.4 needs files to exist if invoked wit Include. This will just create the basic files that are - Bugfix #1559, waf_check, remove old audit/data/ log entries w/ new user type structure (CLEAN_ALERT) - Bugfix #XXX, Firewall, fix on plesk 3306 port rules - Bugfix #XXX, Firewall, fix issue with iptables and "Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned" errors - Bugfix #XXX, ASL Web, fixes country links in ASL Web - Bugfix #XXX, ASL Web, 'view all activity by ip' links in ASL Web - Bugfix #XXX, hids_check, fixes sequencing issue in AUM causing update events to overwrite rule modifications with defaults - Bugfix #XXX, integrity checks, fixes handling for all options set to no in file integrity watch rules - Bugfix #XXX, Core, Corrects yum proxy writing - Bugfix #XXX, ASL Web, fixes ASL Web user management - Bugfix #XXX, Firewall, fixes shuns lost from iptables on asl-firewall restart - Bugfix #XXX, ASL Web, Fixes list buttons in event detail and tld reports - Bugfix #XXX, ASL Web, fixes issue with state when adding/editing firewall rules - Bugfix #XXX, ASL Web, fixes clamav scanning from web - Bugfix #XXX, psa_check, remove duplicate Scoreboard entries from proftpd.conf- Add support for Debian 6 to AUM - Add support for Debian 7 to AUM - Add support for Ubuntu 10 to AUM - Add support for Ubuntu 13 to AUM - Add support for Ubuntu 14 to AUM - Add support for OpenSuSE 12 to AUM - Add support for OpenSuSE 13 to AUM - Add support for metacharacter passwords in AUM - Update, ASL Firewall, whitelisted hosts will by default also bypass the firewall - Update, - Bugfix #XXX, ASL Web, correct country links - Bugfix #XXX, ASL Web, correct view all activity by ip links - Bugfix #XXX, ASL Web, correct sequencing issue in AUM causing update events to overwrite rule modifications with defaults - Bugfix #XXX, ASL Web, fix for ASL Web user management - Bugfix #XXX, ASL Firewall, fix of ! issue with iptables and "Using intrapositioned negation" - Bugfix #XXX, ASL Firewall, fix for shuns lost from an asl-firewall restart event - Bugfix #XXX, AUM, fix for proxy port management- Add Requires on python26 for el5 - Add heartbleed (CVE-2014-0160) checks across all IP's - Add DOWNLOADER configuration step to new install/conversions - Add web checks for cpanel on TraceEnable - Add weekly cron asl support - Added SIP nat module to force load in firewall - Update for port detection, add base firewall policies for cpanel, directadmin, and plesk - Update, Make yum events log to /var/asl/tmp/update.log - Update POSIX acl vulnerability check, lowered from critical to moderate - Retire POSIX ACL method for T-WAF, implement new method for per user directories - Rebase AUM-only installations on the tortix-common channel - Bugfix #XXX, ASL Web, removes waf_classes error message - Bugfix #XXX, ASL Web, blocklist window paging fix- Update ASL Web, removes ip 0 count from SE summary chart - Update ASL Firewall, Add IP address validation to whitelist module - Update mysql_check, Performance enhancement for mysql binary logging environments - Update AUM, key based install/execute updates for AUM - Update ASL Web, support for metachars in web passwords - Update mysql_check, Improve query_cache management to handle pre-existing entries using spaces - Bugfix #XXX, ASL Web, fix for link references in recent events - Bugfid #XXX, ASL, Corrects fp reporting from command line - Bugfix #XXX, incorrect spacing on LK_MODE if statement - Bugfix #XXX, Rule manager, Corrects empty group condition in rule xml generation- Add support for Mysql 5.6 - Update rkhunter check, lowered from a critical to moderate - Bugfix #XXX, ASL Firewall, Fixes for whitelist rules, and duplicate related,established - Bugfix #XXX, correct condition where rules-only settings would be ignored - Bugfix #XXX, ASL Web, waf config window fixes - Bugfix #XXX, ASL Web, T-waf fixes validation in user mod- Add monthly update option - Update database-setup to support triggers on restricted versions of mysql (5.0, 5.6) - Bugfix #XXX, waf_check, do not return errors if tortix_waf.conf does not exist. - Bugfix #XXX, ASL Web, switches is blocked checks to history table instead of active sqlite - Bugfix #XXX, ASL Web, empty array fix in rule manager - Bugfix #XXX, ASL Web, fixes bad error handling in rule report - Bugfix #XXX, ASL Web, malware scan window config write fix- Add alt-distro support for AUM - Add alt location support for WAF log files - Bugfix #XXX, ASL Web, visual fix for rule manager - Bugfix #XXX, add extended service detection for ::: during firewall tcp services setup.- Update to ASL 4.0 (Pineapple) - Full changelog /var/asl/Changelog- Revoke monitoring exim rejectlog - Bugfix #XXXX, Update for WAF rule manager - Retire 71000 dynamic waf rule range- Add detection for exim log files - Bugfix #1433, Rule manager, correct complex rule editing condition- Feature Request #XXX, Add suport to allow NFS (ALLOW_NFS=yes/no) - Bugfix #XXX HIDS, retire use of if_sid in rule exceptions - Bugfix #XXX, HIDS, templates installed before they are re-generated in aum update event- Add support for new ossec platform - update ignored files for integrity checks - Bugfix #XXX, ASL Web fix for stat reporting - Bugfix #1195, T-WAF, fix nat rule creation for Plesk type- Feature Request#1149, php_check, add check for php display_errors - Bugfix #1161, php_check, register_globals set to "no" instead of "off" - Bugfix #1162, php_check, allow_url_fopen set to "no" instead of "off" - Bugfix #1163, php_check, allow_url_include set to "no" instead of "off" - Bugfix #1164, php_check, change safe_mode behavior from yes/no to on/off. While yes/no is valid, other tools test for on/off - Bugfix #1179, ASL Web, Rule configuration for WAF-HIDS bridge rule id's 300000-399999.- ASL Web, performance improvements on blocklist - ASL Web, performance improvements on validation- ASL Web, performance improvements on blocklist - ASL Web, performance improvements on validation- Update asl-firewall, use internal sqlite database for active-response tracking - Update ASL Web, support socket level access to internal sqlite active-response database - Update Requires to tortixd 2.2.24 - Update to cpanel template to create /var/log/httpd symlink from build template and waf_check - Update asl-kernel, add tcp_diag to default load (rkhunter dependency) - Update asl_db_rotate to use smaller mysql packets - Bugifx #XXX, change LASSO fw to use FW_LASSO_LOG - Bugfix #XXX, asl-firewall, improve TOR ruleset checking on clear events- Update ASL Web, safari styling fix - Update asl-firewall, change behavior of asl_flush to ignore when the chain or table is not defined. - Feature Request #122, add rbl monitoring function for hostnames & IP's (/etc/asl/rbl-monitor) - Feature Request #929, Adds detection for audit_log for the t-waf in /var/log/tortixd - Bugfix #1052, When adding a new T-WAF for a local service is added before ASL-firewall-input, but after blacklists, portscan, etc rules. Additionally change behavior of t-waf add / delete event to reload the whole firewall policy. - Bugfix #XXX, changed rules-only setting to not include kernel updates. - Bugfix #XXX, for tor-blacklist, CHAIN2 was not defined - Bugfix #XXX, improve version checking for mysql regex- Fix for asl-config.xml- Update, asl-module, Add inet_diag (rkunter->unhide requirement) to boot - Update, asl-firewall, New advanced portscan detection system added, including grab, syn scan, stealth and multi port slow port scan detection - Update, asl-firewall, Updates to state tracking settings - Update to source-build apache-hook for directadmin, moves routines in from installer - Update, asl_cli_c, use method GET when POST is empty - Update, asl-firewall, additional logging options added for firewall - Update, asl-firewall, Enhancements to UID/GID logging on outbound connections - Feature Request #980, HIDS, add GeoIP support - Bugfix #XXX, AUM, move kernel update check outside of ASL core updates check - Bugfix #XXX, fix for firewall ACL system cant handle names in the same group, and multiple acl files in /etc/asl/firewall/ - Bugfix #1132, add protocol dimension (tcp, or udp)to service checks telnet/rsh/rlogin - Bugfix #1128, run ACL test on /var/asl/tmp/- Update, firewall, Updates to invalid packet tracking - Update, firewall, add UID and GID tracking on outbound MTA connections - Feature Request #1117, ssh_check, allow root / password authentication override for ADMIN_USERS - Feature Request #1118, general_check, add vulnerability check for POSIX ACL support- Add dedicated kernel channel support (beta) - Add vulnerability dialog for the waf not being installed - Update, firewall, to tortixd ACL system - Update, mysql checks, add vulnerability check for symbolic links - Update, mysql checks, add check/fix for query caching - Update, cpanel easyapache hook, will only run fix mode if configuration is complete - Update, configuration dialog, improved tty detection - Update, ASL Web, performance improvements - Update, Installation, Add in old_password detection routine - Update, Configuration, stdin flush event to cover for multiple enter conditions when testing db connection - Update, Configuration, Add test when client IP is not detected - Update, ASL-firstboot, improved network interface detection (post install reliability check) - Update, asl core, Adds better dupe/non-numeric rule checking when enabling/disabling rule from CLI and Web - Feature Request #843, Add basic firewall dynamic ACL rule support (alpha feature) - Feature Request #1080, ask in configuration if the system is a VPS - Feature Request #1083, add vulnerability checks for KERNEXEC and UDEREF - Bugfix #XXX, asl_db_rotate, fix for max_packet_size causing a memory exhaustion error - Bugfix #XXX, fix condition where max email per hour set to 0 would not insert invalid setting in config - Bugfix #1063, safer T-WAF/WAF permissions management on audit directory in mixed cpanel environment - Bugfix #1077, SSH password is not being returned to proper auth condition on update with previously defined admin users - Bugfix #1078, remove references to fixed tty from configuration - Bugfix #1082, improved locking for asl and aum to handle cron conditions. - Bugfix #1085, default value PHP_EXPOSE_PHP - Bugfix #1085, Add description field on HIDS rule customization - Bugfix #1089, enable FW_TCP_TIMESTAMPS by default - Bugfix #1094, add flush event for known named tables - Bugfix #1098, correct typo in Safebrowing setting - Bugfix #1102, incorrect rule id determination for waf rule 340162 in asl web - Bugfix #1113, Installer bug: value 'off' not accepted for Active Response (changed to yes/no)- Feature Request #244, Local DNS check when MODSEC_RBL is enabled - Feature Request #639, Add all clamd switches/options into ASL Web - Feature Request #947, add vulnerability checks for mysql version - Feature Request #995, Report if mysql is not configured with log-warnings=2 - Feature Request #997, monitor plesk httpsd_log - Feature Request #1018, New T-WAFs will default to SecDisableBackendCompression - Feature Request #1023, add firewall policy output group for Spamassassin modules: dcc, razor, pyzor - Feature Request #1039, add feedback to uninstaller - Feature Request #1044, add lint code to test the database connection during configuration. Failure will fall back on localhost, and set the "root" username to reserved. - Feature Request #1047, Firewall: refresh policy on a geo firewall rule update - Bugfix #XXX, ssh_check, default USEDNS to "yes" - Bugfix #XXX, ASL Web, corrects ordering of web attacks report - Bugfix #1002, psa_check, only test for psa-proftpd if it is instaled - Bugfix #1003, AUM, add tortix-waf to the update list - Bugfix #1014, Blacklisting, Change blacklist policy to use the update module instead of a full reload - Bugfix #1058, fix condition where /etc/sysconfig/asl-firstboot is /etc/init.d/asl-firstboot- Add firewall group policy for plesk key updates on port 5224 - Add int/min/max linting to ASL Web configuration for integer based fields - Update ASL Web, to add more debug information to false positive mailings - Update ASL Web, to call aum directly - Update HIDS, automatically exclude high volume portsentry files from reporting - Update to the cpanel include removal regular expressions - Feature Request #534, Add into ASL Web the internals.conf settings for ossec-syscheckd - Bugfix #1045, Configuration: Upate Frequency reported default value of [all] - Bugfix #XXX, reverted bugfix 768 which escaped @ in mail operations - Bugfix #XXX, disable/enable WAF (embedded) through aum- Update to firewall, Enhanced logging features added to invalid packet tracking system - Update to ssh_check, if the banner is not set or file does not exist default to /etc/asl/banner - Feature Request #818, automatically apply (restart) SH rules on -u event if new SH are detected - Feature Request #1011, mask mysql password during setup - Bugfix #1030, mysql_check, incorrectly reporting LOAD DATA vulnerability - Bugfix #XXXX, aum, duplicate cpanel events for -uf mode - Bugfix #XXXX, cpanel exclude mail.local/main.default Include settings - Bugfix #XXXX, asl_db_rotate, fixes for database locking - Bugfix #XXXX, ASL Web, restrict full scan from HIDS false positive reporting - Bugfix #XXXX, ssh_check, if Banner is set to null, or does not exist it can kill sshd (Case #20810) - Bugfix #XXXX, clamav_check, remove reference to proxy settings in the safebrowsing setting - Bugfix #XXXX, psa_check, insert newline after Scoreboard setting for proftpd- Add Self-Healing for tortix db corruption cases - Update to add more correct database locking in asl_db_rotate - Update to mysql_check to detect other implementations of local-infile - Bugfix #1015, Increased timeout on updates - Bugfix #1021, duplicate directives when editing firewall rules - Bugfix #1024, incorrectly reporting Notifications to address failure - Bugfix #1025, if the latest waf_rule_version cannot be determined, assume 0 - Bugfix #1027, restrict umask enforcement to just new-file creation & management- Alpacalypse release! The end draws nigh! - Minor change to handle # in asl-update fw script- Added relro linker build flags to ASL core modules - Update firewall, rapid brute force detection system - Update AUM, increase downloader timeouts from 60 to 300 - Update to cpanel pre/post event detection - Update to file operations, working filenames are random generated with more secure umask to mitigate potential race conditions - Update ssh_check, elimate duplicate file operations that are now handled by verify functions. - Update to ASL db rotate, handle small max-packet mysql conditions more gracefully - Bugfix #XXX, for vrfy_function to enable settings if so set by user. Condition will fix to user setting, then test for compliance. Missing configuration tokens are now added if not detected. - Bugfix #XXX, firewall, Fixes extraneous -m entries when editing firewall rules - Bugfix #XXX, firewall, Fixes incorrect handling of options with multiple space separated parameters when editing firewall rules - Bugfix #XXX against condition where FP report file does not exist. This will now return an error 1 - Bugfix #XXX, Fixes HIDS rule id and description displaying in WAF false positive emails- Add automated allow rules for updates added to firewall - Updates to firewall portscan detection system - Updates to firewall shunning system - Updates to firewall broadcast ignore option - Updates to firewall tortixd ACL system - Updates for Directadmin specific WAF configurations - Updated cpanel/directadmin build hooks to detect pre & post event event implementation more effectively. - Updated cpanel/directadmin build event to run mod_evasive_check - Updated cpanel/directadmin build hooks to clear the configurations before building to prevent Control Panel induced lint errors from stopping the build process. - Updated cpanel/directadmin build hook to validate permissions against the apache hooks - Bugfix #XXX, for setting the standard/nonstandard shun period correctly - Bugfix #XXX, add nat flush & duplicate detection to fw_waf_policy in T-WAF- Removed internal dependencies on perl - Feature Request #XXX, add update frequency dialog to configuration - Feature Request #XXX, add dialog to database-setup to indicate the hostname connections are being attempted. Preventing Motopet conditions when someone says "yes" when they really mean the hostname of the server. - Bugfix #XXX, increase downloader timeouts from 10 to 60 - Bugfix #XXX, fix double restart condition in waf_check on cpanel - Bugfix #XXX, add pre/post easyapache verification hooks to handle conditions where 3rd party cpanel extensions manipulate the file without checking to see if it was there first. - Bugfix #XXX, check to see if mod_sed is installed before installing config on cpanel systems- Add advanced firewall module - New logging capabilities for fast mode - New advanced portscan detection added - Updates to bad packet detection - Updates to Stateful Packet Inspection options - New firewall capabilities to block invalid packets - Added WAF inline documentation - Update to asl, update list modules help dialog - Update to aum, add error messages to detect host resolution & timeouts w/ distributed update checks - Update to aum, install firewall extensions for ASL kernel environments - Update to hids_check, if ossec.conf is not detected, create it (hids_temlate_generate) - Update to hids_check, only run whitelist check if config exists - Update to kernel_check, add GID setup for grsec groups - Update to cpanel build hook, link against /opt xml and pcre libraries - Feature Request #117, ASL Web, add notes field to report false positives - Feature Request #614, ASL Web, Auto-clear the cache, or use versioning to prevent caching when code changes - Feature Request #708, automatically enable mod_uniqueid for cpanel - Feature Request #712, add mod_evasive and mod_sed for source environments - Feature Request #824, enable safebrowsing configuration in freshclam - Feature Request #850, ASL Web, Create individual WAF rule score for reports - and not roll up into 60118 - Feature Request #861, ASL Web, Add "interface" columb to firewall rules manager - Feature Request #882, ASL Web, Add the autocomplete=off flag to the web login form on port 30000 as an option - Feature Request #911, Add initial feedback on asl -u for yum events - Feature Request #916, Add proxy support for FreshClam configuration - Feature Request #924, ASL Web, Set timezone in ASL web console to system timezone - Feature Request #927, AUM, replace wget with internal function - Feature Request #937, mysql checks for load-infile - Feature Request #938, added support to ssh_check to manage UseDNS - Feature Request #939, add checks for telnet, rsh, rlogin. New function, check_open_port to test for open services - Feature Request #946, check for cron scripts belonging to web server users - Feature Request #948, Non-root UID 0 accounts check - Feature Request #950, add checks for running syslog/rsyslog/klog daemons - Feature Request #971, monitor tortixd in psmon. - Feature Request #972, add support for generating Modsec 2.7 compatible rules - Feature Request #964: If cpanel does not have mod_security2.so installed fix mode will restore it - Feature Request #974: firewall, add drop & log for invalid packets - Feature Request #976: enable syncookies in firewall by default - Feature Request #XXX, Add service checks for: anacron, avahi-dnsconfd, canna, cups-config-daemon, FreeWnn, iiim, mDNSResponder, and sbadm (independent SSH daemon used by server beach) - Bugfix #807, make vhost domain excludes case insensitive - Bugfix #905, Duplicates Include conf.d/*.conf in httpd.conf - Bugfix #915, fix for username/password support on yum w/ authenticated proxies - Bugfix #926, ASL Web, FP reports on HIDS events not sending full event - Bugfix #932, disabling local t-waf redirect does not clear rules - Bugfix #933, FW_OUTPUT_MTA off will not clear rules - Bugfix #940, asl -u does not generate tortix_waf.conf. - Bugfix #953, add database drop event to uninstall. Convert mysqladmin in database setup to batch process. Mysqladmin cant handle the TTY (or lack thereof) from the wget method - Bugfix #961: add ability to clear the firewall policy - Bugfix #969: ASL Web, Report False Positive popup does not correctly display URL - Bugfix #XXX, add full path to ifconfig - Bugfix #XXX: fix for monitoring plesk maillog. Retire monitoring /var/log/psa/maillog - Bugfix #XXX, reset disable_functions if set to warn-only (undo basically) - Bugfix #XXX, disable proxy settings if they were first enabled then disabled - Bugfix #XXX, add redundancy for setting permissions on cpanel & directadmin script build hooks - Bugfix #XXX, add Safebrowsing token to clamav template- Added self healing for /dev/null - Bugfix #895: ASL Web now aware of level and options settings from source rule xml files - Bugfix #XXX, change behavior of HostnameLookups to only disable if both set to no, and in fixmode - Bugfix #XXX, handle condition where config tokens contain = in the value- Feature Request #161: Auto-whitelist installation IP prompt during configuration - Feature Request #594: Extended version update checks to support the distributed update system - Feature Request #899: Add support to WAF for Auto-Whitelisting search engines - Feature Request #908: Add reset button to Rule manager in ASL Web - Bugfix #899, support exclude-kernel when initiated during installation to both it & configurtion update type. - Bugfix #XXX, correct NULL condition for managing rules without config tokens in /var/asl/rules/modsec/waf_rule_config - Bugfix #XXX, add reporting to -u event. This updates security modules data- Add distributed updates support to AUM - Add flush function to asl-firewall, this will clear all rules (ASL or otherwise) - Add status support to asl-firewall, this will display the current firewall policy - Update, hids_check, change from /var/log/psa/maillog to /usr/local/psa/var/log/maillog - Bugfix #XXX, eliminate benign GC warnings - Bugfix #XXX, If HTTP_PROXY is a white space, treat it like it is disabled- Update to firewall blacklisting, convert from Add to Insert event - Increased memory limit of asl_db_rotate to 256m - Update to T-WAF, changed local proxy mode from Redirect to DNAT - Added multiple IP detecton to local proxy T-WAF - Updated configuration setup, this moves ASL Web installation into configuration and reorganizes the configuration layout for better integration in ASLe. - Add proxy support to AUM, HTTP_PROXY, HTTP_PROXY_PORT, HTTP_PROXY_USERNAME, HTTP_PROXY_PASSWORD - Add basic HTTP Proxy tokens. This is only going to be implemented in AUM at this time- Bugfix #XXX, remove unimplemented exclude element from asl.repo template temporarily. - Bugfix #884, update to support legacy function type.- Added aum, the Atomic Updater Modified - Added permissions check to /var/asl/data - Removed IP fowarding requirement in the T-WAF - Bugfix #884, add phase: element to vhost WAF rule management- Add support for dynamic /etc/asl/config updates - Add support for dymamic template updates - Merge Anti-Evasion WAF groups into a single group - Deprecated ip_forward requirement in T-WAF - Deprecate WAF_ENABLE setting, this is no longer necessary - Deprecate recursive setfacl, this could take a very very long time. New behavior is just to do the top level audit - Feature Request #721, Add ossec signatures as asl -u updates - Feature request #864, catch the tortix database already exists error database-setup will now prompt to re-install the database if it detects that it exists - Feature Request #877, disable SafeBrowsing in freshclam by default - Add function to create waf-config if it does not exist directory, and subdirectories in that dir - Bugfix #XXX, check for existance of /proc/sys/net/ipv6/conf/all/accept_source_route (needed for older kernels) - Bugfix #XXX, Fixes for removing old asl_waf.conf files, updates for newlines in proxy statements - Bugfix #XXX, add Listen directive and trailing slash on proxy directives - Bugfix #XXX, correct order of asl_waf output for plesk configs- Add asl-port-check to dynamic updates - Add dynamic updates for base config - Add dynamic updates for firewall modules - Add dynamic updates for templates - Deprecate PSA_WAF_ENABLE (now part of T-WAF) - Deprecate internally distributed asl-port-check - Feature Request #721, add ossec signatures to update event - Bugfix #XXX, ASL Web, Fixes disabling a rule for multiple vhosts - Bugfix #XXX, add output rule to accept all from localhost- Update to ASL Web, add HIDS rules to fp handling - Bugfix #XXX, change permissions-check to not do a generic chmod in the /var/asl/data directory - Bugfix #XXX, only reload firewall rules via fix mode - Bugfix #XXX, correct condition where clamav would not be disabled in psa-proftpd when clamav was set to no - Bugfix #XXX, add reject to output policy - Bugfix #867, suppress output from HIDS cleanup event- Updates will now track the release field and in the -v output - Update to open port tracking system - Bugfix #XXX, ASL Web, Fixes scrollbar in connections window; removes presence check for stateful rule in firewall rules - Bugfix #XXX, disable --noflush on the running.fw settings - Feature request #853, return error if DAZUKO use is detected, and ASL kernel / modules are not present - Feature Request #857: Extend --permissions-check to all ASL config files and session dirs- Add rkhunter update routine for recommended ALLOWHIDDEN, ALLOWDEV, ALLOWPROCDELFILE, ALLOWHIDDENDIR, and SCRIPTWHITELIST - Add in "requested" option to the FW_TCP_ECN setting - Update to T-WAF embedded reporting - Update to HIDS suspicous process detector - Update ASL Web to automatically determine the time-zone - Update default for TCP_WINDOW_SCALING to yes/enable - Feature Request #545, adds x-frame denial to ASL-Web - Feature Request #547, Add secure session to cookies to ASL-Web - Feature Request #548, Add httponly to session cookie to ASL-Web - Feature Request #625, protect ASL session, temporary and log directories from change of ownership/perms - Feature Request #705, enforce alpha-numeric passwords during configuration - Feature Request #779, provide option to configure the SSH port - Feature Request #848, make permissions checks more efficient- Add Fast-Mode firewall system - Add New monitoring capabilities added: load, diskspace and listeners - Update, T-WAF, force fix mode if tortix_waf.conf is not detected - Update, ASL Web, firewall rule changes are saved across reboots - Update, Configuration, mysql administrator username defaults to "root" - Update, File integrity, add aqueduct directories to ignores - Feature Request #628, Add MTA firewall rule group (/etc/asl/firewall/mta-output-acl) - Bugfix #XXX, ASL Web, Fixes issues with rule edit in firewall window - Bugfix #XXX, firewall, detect /proc based controls more accurately - Bugfix #XXX, add more redundancy to waf/tortix proxy configs. This will now purge old versions when configs are blank, in addition to linting configs when they are not blank - Bugfix #XXX, only write to file if $waf_redirect has something in it - Bugfix #XXX, ssh_check, fix for enabling password auth when ADMIN users are not defined - Bugfix #XXX, asl-firstboot, fix path for asl-firstboot's network info file, and add in a post-success cleanup event- Add firewall settings for /proc based controls - Add Compliance mode checks - Add disableexcludes to asl -u events - Add asl-waf-module dependency - Update, move firewall rule event to only trigger if there is a geomap update download - Bugfix #XXX, add "" around PHP_* functions.- Add Tortix WAF (T-WAF) - Retire plesk-waf-setup (replaced by T-WAF) - Update, Add UNSUPPORTED to version info when distribution cannot be identified - Update, support for status to the asl-firewall init script - Update, ASL Web Corrects corrupt serialized data error - Update to asl_db_rotate, TODO what is token here for archive on/off? - Update, Changed default behavior of database setup to yes when selecting database installs - Update, create a common asl firewall rule clearing function, used by the global asl-firewall init script - Update, ASL Web, categories are now sorted alphabetically - Update, Add check for /etc/asl/waf-config on permissions check - Update, Ignore /usr/local/psa/var/cgitory by default in integrity checks - Feature Request #425, add support for the Spamhaus lasso blacklist - Feature Request #442, add blacklit support for TOR exit nodes. Adds new config token, FW_TOR - Feature Request #785, add support for the Dshield blacklist of top attacking networks. - Feature Request #792, add syn-flood protection. New config token: FW_SYN_COOKIES - Feature request #814, HIDS limit email notifications to alrts greater than level X - Feature Request #820, WAF deny & redirect management subsystem. Adds the config tokens WAF_DEFAULT_ACTION, and WAF_REDIRECT_URL - Feature Request #XXX, add port tracking field for "embedded" waf type - Bugfix #XXX, change from reload to graceful restarts with tortixd. This should fix blank asl -u windows in ASL Web - Bugfix #XXX, installer will now store network info to / instead of /tmp. - Bugfix #XXX, Fix for remote database support - Bugfix #XXX, Fix for continue y/n prompt in database setup - Bugfix #XXX, Remove a mod_security binary if its already there before installing a new one. This corrects a really wierd condition when it already exists on source/anarchy installs.- Add clock to ASL Web - Add new update display fields to WAF updates, Rootkit Protection, and Shell protection - Update to configuration verification engine, FIXED is only reported if a setting is the secure state. Otherwise the true vulnerablity level is displayed. - Update to integrity checks, /etc/webmin is now ignored by default - Feature Request #XXX, hids_check will now maintain the localtime file in chroot in accordance with /etc/localtime - Feature Request #500, Add in the -warn flag to only show warnings / failures in scan and/or fix mode - Feature request #532, add support for SecRequestBodyNoFilesLimit and SecRequestBodyInMemoryLimit - Feature Request #709, add checks for suexec logs - Feature Request #768, add support to rkhunter check to modify /etc/sysconfig/rkhunter - Bugfix #XXX, php_check can now make insecure settings. - Bugfix #XXX, update to asl_db_rotate to handle rotating larger database sizes (1+ million rows) - Bugfix #XXX, tortixd rule reloading is moved out from the ASL Web interface, and into a queue system. This prevents the thread from dying in an interactive session. - Bugfix #289, correct SMTP_AUTH password checks to map to valid mailboxes. Correct output of FTP check to show pass word column in order - Bugfix #496, detect /var/log/snort/alert - Bugfix #735, hids/waf checks for whitelists under 255 would always report 255 or greater- Add Vulnerability check for out of date WAF - Feature Request #757, Add top 10 attacked domain(24h/72h/1 week) report to ASL Web - Add EOL check for EL4 Platforms (CentOS, RHEL) - Feature Request #699, Update to ASL Web, will create the HIDS databse if it is not detected - Update to Rule Manager, WAF rules now cover HIDS rule 60121 - Update to ASL Web, password fields are now masked - Update to database-setup, will report a failed codition on loading the HIDS db - Update to rule manager, ossec.conf is restored if it is removed - Update to update module, self healing rules are automatically added after an update. asl -s -f is no longer required - Update to update module, detail view for HIDS and WAF update event to list rule subgroups being updated - Update to update module, source environment will now check for and update WAF modules - Update to ASL Web, warnings are now displayed when changing PTRACE_HARDEN for plesk environments - Update to update module, tortixd waf is now reloaded on a rule update - Update to plesk-waf-setup to manage ACL's on directories using the audit dir - Update to plesk-waf-setup, IP can now be passed in from the command line - Update to database-setup to support the resetting the database the command line - Feature Request #XXX, add support for multiple users of posteasyapache - Bugfix #XXX, template correction for accesslog formating on plesk 9 - Bugfix #XXX, for people with bad profiles and /sbin is not in their path. - Bugfix #XXX, deprecate EXECVE_LIMITING in ASL. Upstream merged this into vanilla- Update to kernel_check to deprecate eventve() checks - Bugfix #XXX, add full path info to plesk-waf-setup for environments with no default path - Bugfix #XXX, update for plesk 9 waf template- Add Plesk WAF module for 8.6 thru 10.x - Add vulnerability check for Plesk CVE-2011-4734 - Update to default audit log retention policy, lowered from 30 to 14 days - Update to RBL configuration, this will now warn the user about performance considerations - Update ASL Web to include debug messages if the mysql db has become corrupted - Feature Request #XXX, add support for multiple users of posteasyapache - Feature Request #XXX, Add support for CPANEL_DISABLE_POSTEASYAPACHE, this disables modification of posteasyapache - Bugfix #XXX, rkhunter has been disabled test - Bugfix #XXX, asl.repo will be generated if it does not exist - BugFix #741, Add detection for ossec-hids-server- Add support for Oracle Linux 6 - Update to ASL Web, Moved false pos/neg alert messages to html and made urls in message texts linked - Update to hids_check, update function has been externalized in preperation for a dedicated update module - Feature Request #XXX, regenerate asl.repo if it has been removed - Bugfix #XXX - Update to cpanel-easyapache to support direct install - Bugfix #728 - change skip-networking exit event to a force enable, and restart mysqld event- Update ASL Web, Adds stateful handling to firewall rules - Feature Request #724, Update ASL Web, Forces refresh of vulnerability detail window when updating ASL config - Bugfix #XXX, ASL Web Corrects display issue with manual parameter entries in firewall rules - Bugfix #XXX, fix for vhost level rule disable. Add pass parameter- Add support for Cloudlinux 6.2 - Add support for CentOS 6.2 - Add basic self healing management system - Update psa_check, this now supports reinstall for psa-proftpd - Update to cpanel build hook, fix for conditions where cpanel gets lost and misplaces its build directories - Update to ssh_check, implement password enable/disable in fail-safe mode - Update to ADMIN_USERS, "root" will automatically be excluded - Update to ASL Web, Added request complete check in server monitor swf - Feature Request #XXX, ADMIN_USERS, this now supports , and ; as delimiters- Add support for Cloudlinux 6.1 - Add support for CentOS 6.1 - Update ASL Web, remove validation debug code - Bugfix #XXX, ASL Web, fix for junk html generation fo event detail buttons - Bugfix #XXX, only create HIDS exclusion rules if the system is a server.- Update to cpanel easyapache update, retire internal pcre support and use standard pcre library - Bugfix #XXX, exclude invalid 0.0.0.0 whitelists - Bugfix #XXX, add el6 detection logic to easyapache hook - Bugfix #XXX, correct condition where updates-data is processed before it is updated- Add blacklist option to Detail window - Update to cpanel/directadmin hooks to build mod_security 2.6.2 - Update to ASL Web to include timeout/bad connection detection to mysql - Bugfix #XXX, corrects a vulnerability reporting alignment issue when php53 is installed - Bugfix #691, lint whitelist for invalid entries like 0.0.0.0- Renamed asl-web-setup to asl-web-useradd - Update to ASL Web that adds in error messages for non-existant tortix dbs - Update to rule manager, deprecated level,active response,email and logging fields from waf per vhost rule settings - Update to rule manager, add hids_check event for waf changes - Update to integrity manager to handle missing global row conditions - Update to ASL Web to show the defaults for the integrity manager as "yes" - Bugfix #593, execstack -c update for normalizing input from config files containing ". - Bugfix #671, update configuration to set escapeshellcmd variable - Bugfix #XXX, fix to correctly disable logging for a waf event - Bugfix #XXX, corrects a vulnerability reporting alignment issue when php53 is installed- Update to waf module, vhost rules are no longer anchored - Bugfix #672, configuration, add in configuration checks for curl & ftp exec functions - Bugfix #673, configuration, correct email adding issue during configuration - Bugfix #678, installer, suppress app inventory logs - Bugfix #XXX, hids module, scan_on_start needs to load last in the syscheck config - Bugfix #XXX, ASL Web update to firewall module - Bugfix #XXX, ASL Web update to use yes for defaults on global ptions - Bugfix #XXX, ASL Web update to waf rule manager- Add detection for php53 re-packaging - Add clamav-db and clamav to uninstall script - Update to shun multiplier tracking to be able to handle fractions - Dropped monitoring /usr and /var/www/vhosts by default - Bugfix #XXX, detect plesk during new install and disable HARDEN_PTRACE- Add ASL Web warning pop up in gui config window for high load changes; - Add ASL Web line break handling for event text in event and event detail window - Add to configuration, x3 mysql admin credentials check - Add ASL Web updater event for waf_rule_reporting, the config used to manage FP reporting behavior - Add ASL Web version and exclusion check to false positive and false negative reporting - Update to configuration, minor update for horde detection - Update to hids_check to manage the expiration time for the asl-purge event based on the repeat offender timeout. - Update to version checking routine for ASL updates. This evaluates major, minor, and subminor - Bugfix #XXX, ASL Web, Fixed forced waf checks; Fixed overwriting window state in session - Bugfix #XXX, Corrects newline handling in hids event detail view - Bugfix #XXX, fix for reporting status correctly with the newer named firewall table format - Bugfix #XXX, changes to SHUN_TIME will now restart execd- Add in root login check enable/disable - Add time to blocklist display in ASL Web - Update to asl-firewall, repositions blacklists and add support to clear the active response tables - Update to ASL Web, database errors are now reported directly in the Event viewer. - Update to ASL Web, Increases line size limit on waf rule import to 20kb - Update to ASL Web, logic for forced waf handling in security event detailed view - Bugfix #XXX, calculation adjustment for the repeat-offenders system. This is tracked in minutes, whereas SHUN_TIME is tracked in seconds.- Updated ASL Web to display waf rule id when hids rule 60118 is encountered - Updated Rule Manager, all HIDS rules are now distributed through the ASL updater, and loaded from rules.d/ - Bugfix #XXX, updated default config to use "on" for active response- Added new WAF protection rule classes - Updated waf vhost exclude filename from 00_vhost_exclude.conf to 000_vhost_exclude.conf - Feature request #647, in support of adding the full ASL version to the ASL Web header - Bugfix #653, strip ' from Includes on the web app inventory event- Added basic support for the WAF chroot token - Update to Integrity Checks, add /etc/mail/spamassassin/.razor to ignore list - Update Requires to ossec 2.6-4 - Bugfix #XXX, update events will not run report generation on new installs - Bugfix #XXX, ASL Web Corrects row colors in blocklist display - Bugfix #XXX, for asl-firewall blacklist loading - Bugfix #XXX, Corrects parameter issue in asl_stats - Bugfix #XXX, clean up remote database support in database-setup- Bugfix #XXX, on asl-firewall blacklist order loading- Added the first version of the ASL Stats package, a command line statistics generator for external applications - Added debug output to rule validation routines - Added whitelist suppor to mod_evasive - Added paging t the Rule Manager - Updated Blacklist ruleset to load before INPUT - Updated psa_check to allow clamav to be disabled in psa-proftpd - Updated configuration to retain settings from the last time it was run. - Updated rule update events to force a reload of the dashboard - Feature Request #317 , add remote database support to database-setup - Bugfix #460 , correctly detect when safe_mode is enabled even if it is disabled in config - Bugfix #635, delete update file if it already exists on a -uf force upgrade event - Bugfix #XXX, ASL Web Rule Manager, fixed a conditionwhere the rule manager would not update the policy - Bugfix #XXX, ASL Web Blocklist retrevial fix- Added dependency for asl-stream-client - Added location comments to all template files - Added more default file check excludes - Added kernel version to false pos/false neg reporting - Updated uninstaller to do a more thourough job - Bugfix #637, corrected waf whitelist_1 error - Bugfix #XXX, added checks for curl_exec, curl_multi_exec, leak, and ftp_exec - Bugfix #XXX, correct issue unblocking from blocklist window - Bugfix #XXX, added "no results" to reports when there are none - Bugfix #XXX, added more redundancy to the database-setup routine to drop existing users on a reinstall - Bugfix #XXX, hids 60138 are now parsed by the WAF reader - Bugfix #XXX, If all settings are No in integrity checks, default to disable monitoring the directory- Bugfix #629, rule update events will report a clear username/password failure message instead of raw debug output - Bugfix #XXX, add EOL check for centos 6 - Bugfix #XXX, corrected a locking condition in the rule manager that would prevent writing new config files- Bugfix #607, prevent downstream updates from atomic in the asl channel on -u - Bugfix #612, If MODSEC_99_MALWARE_OUTPUT is "yes" copy malware-blacklist.txt - Bugfix #618, Add in detection for psa-atmail, and roundcubemail to autoallow fsockopen on configuration - Bugfix #XXX, disable updates from the atomic repo if it is enabled on an asl -u update - Bugfix #XXX, visibility permissions correction - Bugfix #XXX, fixed a condition where WAF false positives can be prevented from sending due to locking- Final 3.0 release, see /var/asl/Changelog for extended changelog & release notes- Release Candidate 4- Release Candidate 3- Release Candidate 2- Release Candidate 1- New vulnerability scanner report system.- Bugfix on WAF_DELAYED_VERSION management - Bugfix on ASLe Makefile - Bugfix added psa_clamav_ftp vulnerability data- Added new externalized WAF rule management function. - ASL will now validate the version of the WAF engine to ensure rule compatiblity - ASL Web: Rule ID's are now linked to documentation - ASL Web: Switched to unified heartbeat polling - Add clamav disabled vulnerability data- Added more 2.6.32.x kernel checks - Doubled the size of the common passwords to the dictionary file - Updates to mod_security_check to support new tokens SecReadStateLimit - ASL WAF can now be set to "DetectOnly" mode via the WAF_ENGINE token - KEEPFILES defaults to off now - Feature Request #512, Add support for disabling ftp_exec, curl_exec, and curl_multi_exec PHP functions - Add support for updating the database tables on a HIDS upgrade event - ASL WAF configs are now generated from templates - Add template generation for tortix_waf.conf - Modified the proftpd check to look for the clamav module using the -V flag instead of a straight version check - Bugfix for adding client keys in "agent" mode. - Minor bugfix removing the old stty supression code. This does not work in a php context anyway - Bugfix #XXX, this will properly evaluate an asl.lock file as numeric. If detected as non-numeric, it will assume it is stale and remove the lock. - Add FEED_TYPE token to default configs - Bugfix to change the value of the WAF version token. This was expanded into 2 lines, breaking modsec updates. - Add basic real-time/delayed feed support. - Added in forced path for users that dont run the diag tool with roots environment - Minor change to catch conditions where rpm is not present. - HIDS client template is now in sync with the HIDS server template - ASL Web: Consolidated signatures, security modules, security bulletins, and vulnerability windows into a single window - ASL Web: Partially standardized window size to 700x500 - ASL Web: Changed positioning of default visible windows to auto (cascaded) - ASL Web: Added category to security bulletins - ASL Web: Fixed file/db sourcing for event details - ASL Web: Fixed issue with y position when cascading windows- Added vulnerability checks for psa-proftp SA42052 Vulnerability - ASL Web format update- Feature Request #342, view non-WAF events in ASL Web - Feature Request #380, Track clamav events in ASL Web - Feature Request #415, Add support for SSL settings in Plesk 9.0 and above - Feature Request #455, Add enable rule support to the --vhost modifier - Bugfix #314, /etc/alternatives/mta-sendmail will be linked to /etc/alternatives/mta if it does not exist (false positive reporting) - Bugfix #405, Remove duplicate instances of ASL_WEB_CONFIGURED - Bugfix #453, OSSEC_SHUN_ENABLE_TIMEOUT is set to NO ossec will now restart properly - Bugfix #457, enabling rules will not leave blank lines in /etc/asl/disabled_rules- Add in Basic agent event source tracking to ASL Web- Add new /proc controls for grsecurity - Add /etc/init.d/asl-kernel - Add in support for monitoring clamv virus, update and other events.- Alpha build of new interface code- GA release of 2.2.11- Feature request #410, basic ability to manage ossec alert level and email response - Add support for /etc/asl/rules, this allows for configuring the level and reporting for events- Feature request #402, purge old rule/sig update files after 7 days - Updated routines to detect ASL kernels, this is no longer completely dependent on the KERNELS database - Bugfix #XXX, fixed condition where ossec_check would rewrite config when -f was not invoked. - Bugfix #449, fixed issue in ASL Web that would sometime cause the geo-block list to be dropped. - Bugfix #450, Updated sendmail detection routine to handle more sendmail locations for false positive reporting- Rebuild for final release- Bugfix for geo-block removal on an empty list- Bugfix for Blocklist blacklist/whitelist/unblock multi-taging- Fix for RSS / configuration interface in ASL Web- Add support for 2.6.32.16-4 kernels - Updated ossec_database_setup routine to start mysql on a new install event - Updated configuation to reorder ossec configuration after notification configuration - Feature Request #393, Add local hostname information to ASL Web - Bugfix #XXX, correct condition where ASL Web counld not consistently add/remove whitelist entries- Added category column to security bulletins in asl-web - Add mysql start routine to ossec_database_setup.sh - Minor change to web_app_inventory to improve performance. (about 10-15%) - Feature Request #XXX, added support for Cloudlinux 5 - Bugfix #XXX, fixed case where proftp clamav was not working for anonymous ftp - Bugfix #XXX, case #3466 entries were not showing in the blocklist- Deprecate denyhosts support - Updated security bulletins source and output for asl-web - Bugfix #386, rules disabled by vhost will be set to nolog/noauditlog by default- Updated default ossec server template to monitor /opt, /usr/lib, /usr/local/- Added realtime tokens to the ossec configs by default. - Improved lint check for whitelist/blacklist checks to clean out duplicate/invalid entries - Removed denyhosts dependency from package - Bugfix #383, single entry geo-blacklists could not be removed- Minor change, this inverts the order for the per-vhost exclude config file- Add Fedora 11 EOL check - Removed ipv6 modules from asl-mod - Feature Request #338, Change repo credentials when /etc/asl/config changes USERNAME/PASSWORD settings - Feature Request #355, add new configuration token "UPDATE_TYPE" to control -u. All, or Rules-Only currently supported - Feature Request #356, allow per-vhost rule disabling. New command line parameter to -dr, --vhost - Bugfix #XXX for detecting & symlinking /usr/lib/sendmail correctly - Bugfix #343, rename ossec-hids-active-response to ossec-hids_active-response - Bugfix #354, Blacklist array error - Bugfix #362, Preserve server type custom between upgrades- Added reboot event if the network cards arent detected during asl-firstboot - Add TLS token to proftp config by default - Webapp inventory is now ionice/nice by default - Add detection & configuration for asterisk logs - Fixed the enable/disable notifications code in psmon. - Updates to support module disabling, and grsecurity sysctl features - updates to exclude apache log files from malware sigs - Extended debug info collected by asl-diag - lowered default syscheck frequency to once per day - Added check for blank mysql passwords and event for setting it - Bugfix #XXX, added a match condition to detect if the database user is "root" so the script will not delete the root account. - enhancements to malware ruleset generator and addition of more sources- Add token for newer kernel - Added redundancy to database setup event - migrated system calls to array functions in rkhunter_check- Added support for the dazuko anti-spam kernel module - Added detection for different userid environments for clamd (qscand, clamav, root) - Added new template files, template-clamd.conf, and template-freshclam.conf - Added init script for the asl-av (dazuko) module - Added support to the OSSEC updater to manage decoder.xml - Added support to manage the psa-proftpd user - Added some feedback to the user that clamav is restarting when it takes a long time - Added requires on vixie-cron for el4/el5 environments - Added diagnostic utility for support - Added WAF output redactor (MODSEC_99_REDACTOR) - Added vulnerability check for Active Response mode being disabled - Added requires on denyhosts 2.4-24+, ossec 2.4.1-4+, and conflicts on psa-proftp older than 1.3.3 - Added sysctl disabling fuctionality to asl-mod, this is tied to the ALLOW_kmod_loading token. - core ASL package upgrades will now force asl -s -f at the next available monitor event (hourly normally) - duplicate entries in whitelists will now be ignored. - Extended mysql 5.1 detection for plesk environments - Expanded deprecation module for denyhosts - Enabled safebrowsing by default in freshclam template - general_check services are now sorted by default, removed a duplicate gpm check - rkhunter_check will now disable app scan checks by default - Feature Request #144, fix events that effect OSSEC will no longer reload/purge the active response list - Feature Request #327, RKHUNTER_SSH_ROOT_LOGIN has been deprecated, this check is always enabled - Bugfix #XXX, removed a duplicate ASL kernel detection message - Bugfix #XXX, for asl_user creation events - Bugfix #XXX, fix for detecting the mysql version in a non-psa environment - Bugfix #XXX, corrected a condition where disabled_modules would be attempted when the device did not exist. - Bugfix #XXX, other half of the "too many files" error from psa-proftpd. - Bugfix #311, psa_check will now correct a deprecated setting in psa-proftpd (Scoreboard) that would break session tracking - Bugfix #324, corrects a condition where non-modsecurity 403 errors are defined as "undefined" - Bugfix #344, detect proftp-tls/proftp-asl file contents and replace them if they are 0 length.- Rebuilt to link against the native mysql libraries- Added new templating engine to ossec_check - Added new templating engine to psmon_check - Added new config setting PSMON_NOTIFY, this allows you do disable email reporting from psmon - Added new templating engine to denyhosts - Added in renice and ionice to make the web app scanner less intense on a system - Added locking into update and ck events, now only one instance will be permitted at a time - Add support for status parameter to asl-firewall - Add support for detecting /proc/sys/kernel/modules_disabled in newer kernels - Added support for the status command to asl-mod - Deprecated active response in denyhosts, this is now handled by ossec - Deprecated configuration setting DENYHOSTS_SHUN_TIME - Deprecated the old psmon template system - Bugfix #XXX, psmon_check will no longer always report "fixed" when operating in fix mode - Bugfix #XXX, ossec_check now counts only valid whitelist entries for the exessive whitelist check - Bugfix #260, GUI not correctly disabling modsecurity - Bugfix #305, Retire active response from denyhosts - Bugfix #306, automatically add local IP's to the whitelist - Bugfix #309, fix for 100% cpu utilization if asl -u/-ck cannot connect - Bugfix #312, ASL Web now supports the custom layout upgrades when new interface features are added. - Bugfix #314 - if /usr/lib/sendmail doesnt exist, it will now be created (/etc/alternatives/sendmail-mta - Bugfix #315, resolved condition where ossec_database_setup.sh incorrectly reports success- Added Update button to Signatures window in ASL Web - Added Fix button to Vulnerability report in ASL Web - Added distribution information to the -v flag - Added browser check for old/vulnerable browsers when accessing ASL Web - Added basic clamav configuration module - Feature Request #261, Added Pause function to Events viewer in ASL Web - Feature Request #297, Add support for SecRequestBodyLimit to ASL - Feature Request #XXX, Application inventory will now run in the background on a first time install - MODSEC_40_APACHE rule class has now been deprecated - Back end changes to support ASL-Lite - Started added link fields into the Vulnerability report to the documentation site. - Added new configuration settings, APACHE_RESTART_COMMAND which is used by ASL Lite, and MODSEC_RULES_PATH to define the storage location for mod_security rules - Bugfix #236, corrects condition where only the first page of events could be viewed. - Bugfix #262, restored the whois lookup link for attacker IP field - Bugfix #310, corrects condition where a blank /etc/asl/VERSION is reported as an error connecting to the update server - Bugfix #XXX, ASL Web Event Viewer will now parse mod_security events containing the data field correctly - Bugfix #XXX, ASL Web Event Viewer fix for condition where if not in DB mode the OSSEC event would be displayed over the mod_security ID - Bugfix #XXX, added conditional logic for ResponseBodyLimitAction- Support for Fedora 12 - Support for Fedora 11 - Support for Mysql 5.1 - Bugfix #XXX, correct an imaging rendering issue in ASL-Web for IE8 - Bugfix #XXX, detects and corrects the condition where the VERSION would sometimes be created as a directory - Bugfix #XXX, added mod_evasive vulnerability date- Feature Request #285, Added vulnerability check for php function pcntl_exec() - Feature Request #XXX, added vulnerability check for Plesk XSS vulnerability - Feature Request #XXX, added db rotate event for storing alert events in mysql - Feature #XXX, ossec_database_setup.sh is now safe to run multiple times. It will reset passwords to the default in /etc/asl/config - Feature #XXX, add SSL checks for courier imap - Changed support link in GUI to https://www.atomicorp.com/portal (was http://support.prometheus-group.com) - Added more debug routines for update events. - Bugfix #XXX, Corrected js errors in IE, corrected tag mismatch in /etc/asl-config.xml - Bugfix #XXX, to set the mod_security debug log to on / off. The default is to disable the debug log unless we're actually debugging. This is also a performance change. - Bugfix #XXX, mod_security check will automatically populate the config file with the configuration token if it does not otherwise exist. - Bugfix #XXX, added vulnerability details for the Plesk @Mail exploit - Bugfix #XXX, fixed incorrect mod_security vulnerability detail references - BugFix #XXX, corrected the filename for mod_security_serversignature - Bugfix #XXX, Added missing data for Case #1537, vulnerability info for SA33842 - Bugfix #XXX, Fix to identify fc11 - Bugfix #XXX, corrects XSS issue in ASL Web with False Positive feedback - forced LANG=C for password generation events - Bugfix #XXX, Case #1258, fix for adding rules for non-localhost database cases - Bugfix #XXX, corrected issue with single alert log entry display - Bugfix #XXX, adding in more redundancy for other ASL-Web configuration scenarios. This adds in a basic alpha/numeric check. - Bugfix #XXX, asl-web-setup will now check for the asl_user table, and will inform the user to run asl -c and/or ossec_database_setup.sh - Bugfix #XXX, asl -u 'full debug' mode wasnt working - Bugfix #XXX, Added kernel_randshlib to vulnerability report- added a minor database check to asl-web-setup - Added --no-cache to wget events - Updated text for escapeshellcmd vulnerability report - Bugfix #248, missing plesk button- Added routine to remove legacy psaadm from sudoers - OSSEC-HIDS 2.2 is now a requirment - Lowered Denyhosts disabled check from critical to high - Added asl-web-passwd utility, a command line tool to reset the ASL Web password for users. - Added asl-web-setup, a utility for configuring ASL Web - Corrected circumstantial js error in security events when changing filter options on a display page other than 1 - Added routine to test for ASL Web being configured, the web interface will now report this case - Bugfix #XXX, on Denyhosts being disabled check, would report "enabled" when it was failing - Bugfix #XXX, Fixed typo in psa_check to show correct path to password.report - Bugfix #XXX, Fixed typo in asl-config.xml, that was assigning $EMAIL to a boolean - Bugfix #XXX, Fixed condition with Geoblocking where the interface would not display if there was a blank line in the database - Bugfix #XXX, Fixed typo on OSSEC_NOTIFY in asl-config.xml - Bugfix #XXX, Fix for typo in ssh_check banner test - Bugfix #217, passwords in the web gui are now limited to a-z, A-Z, 0-9, _, ! and - - Bugfix #219, password auth check now reports pass if password auth is disabled. - Bugfix #221, Configuration updates now lint from 2.0 -> 2.2 configuration values correctly. - Bugfix #228, Added detection & upgrade event for ASL-Web-Gui -> ASL Web to force the yum upgrade - Bugfix #229, Changed mode on /etc/cron.d/asl to 644 - Bugfix #230, ADMIN_USERS changed from "" to "undefined". This is condition is now properly ignored. - Bugfix #237, added a field to the gui config interface for the HOSTNAME variable, as well as an upgrade event to populate it - Bugfix #238, fixed updater issue for modsecurity rules, where an update would appear to have been applied when it was not. - Bugfix #240, resolved issue with php_checks reporting vulnerabilities that were corrected by "fix" mode - Bugfix #241, Corrects display issue in blacklist and whitelist windows when removing all entries- Update to 2.2 official release - Bugfix on remove-blacklist- Bugfix #XXX, fix for vulnerability scanner to show details if there was only 1 entry - Bugfix #XXX, fix for ossec excessive whitelists check to show correct vuln level based on total # of whitelists - Bugfix #XXX, correctly install the asl-button for plesk environments- Added migration routine for plesk environments from the old asl-web-gui to the new asl-web - update to KERNELS file to support the new 2.6.29.6 kernels - Bugfix #XXX, on ossec_database_setup - Bugfix #XXX, on asl-mod (adds more modules) - Bugfix #XXX, on white/black/geoblock/blocking .js files- Bugfix #XXX, ssh_check, added missing message for GSSAPICleanup test - Bugfix #XXX, rkhunter_check, added missing message for SSH protocol 1 test - Updated configuration_setup to detect & start mysql if its not running - Updated datase_setup to warn the user on blank passwords - Added routine to kill stale ossec-dbd processes in ossec_check - Added support tab to ASL Web - Added php_url_include vulnerability data - Removed restrictions on the max length of a message field in the Events Display- Activated the update button in ASL Configuration - Added updated turtle graphix, now with lensflare!(tm) - Update mode now launches into a new window, with feedback- Bugfix on multi-arguement/value events - Corrected visuals on Event viewer to show the enable/disable buttons successfully - Added in vulnerability stub data for ET_EXEC - Cleaned up %post installation routines, added checks for asl-mod- Added default layout to gui - Bugfix for missing graphics error - Set default size for events view, resizing for bulletins window, and new interface buttons for event view- Added alternating background colors to rows in bulletin, module and signature windows - Corrected log display in event detail window - Made event detail window slightly less ugly- Moved ASL Web configs to the asl-web rpm - Corrected log display in event detail window - Made event detail window slightly less ugly - Changed file integrity window: removed file name search added result limiter (50,100,250 results or all within last 1/3/7 days) default display is most recent 50 results - Changed event log window: removed time filter fields added result limiter (50,100,250 results) added filters by event type (blocked or info) addes signature id field reversed sorting to date descending - Improved performance of window fade in/out - Fixed js error from empty blacklist - Fixed interface module display for non-admin UI user - Added Layout window to interface module Allows admin to set initial visibility and position of windows, and control access to windows Menu visibility for a window may be set to on, off or admin only X/Y positions may be set to an integer or 'auto', which will leave the window in its normal cascaded position Visibility and menu presence may not be altered for detail windows, but they may be set to open in a fixed position- Bugfix, ssh_check banner test (bareword found issue) - Bugfix, Added a condition to detect /var/asl/tmp/VERSION on new installs - Added additional Dependencies to ASL Web - Added zero entry checks to inventory and events windows - Bugfixes on configuration_setup and ossec_database_setup.- Added new kernels detection - Requires updates to pull the new asl-httpd subsystem.- Updates for the new asl-httpd system- Bugfix #XXX, --whitelist typo on the asl-shun command - Added asl-config.xml for lint'ing config files - Updates to License Manager- Bugfix #XXX, ssh_check, Added more logic around allowed root logins, this will skip the fixed check now and just report it as allowed/vulnerable if it is fact allowed. - Bugfix #xxx, mod_security, cleaned up path checking on SecTmpDir - Bugfix #xxx, php_check, Changed execute flag string to be more clear on exentions check - Bugfix #xxx, php_check, disable_functions check will now create the line if it doesnt exist rather than rewrite it - Added in new License Manager system- Added new License Management code - Added simple FTP account password checks - Deprecated old RSS caching system- Added vulnerabilty check on disabled signatures - Added in stale lockfile check/removal - Added basic check to mod_security_check for "SecResponseBodyLimitAction" - Added purge active-response purge event, to improve active response block management- Modified the audit dir to be apache group writable (fix for the tortix user) - Bugfix for pending updates check - Bugfix for denyhosts bitmask whitelist - Added locking, so only one instance of ASL will run at a time - ASL Web 2.1 fixes follow - fixed security events from file - removed pgui.conf, UI now uses the db info supplied in the OSSEC_DATABASE* - fields in /etc/asl/config for locating its user table - removed UI Options window from interface module - Added Interface module - UI database info configuration window - UI user create/modify/delete window - Added vulnerability detail flash chart - Added server monitor flash graphs - Remaining doc element stylings moved to css - Fixed empty lines in vulnerability detail - Fixed menu tab mouse overs - Fixed missing mouse pointer- Internal cleanup on the web interface code- Added excessive whitelist vulnerability check - Updated whitelist code to handle bitmasks correctly- Disabled monitoring ossec's syscheck daemon - Bugfix to detect spamassassin before checking its permissions - Bugfix for ossec_check and web.conf, deprecated dhtml.conf files - Bugfix for mod_security_check to correctly parse Dir directives - Bugfix for mod_security_check SecAuditLogStorageDir - Bugfix, mod_security_check now supports both "on/off" and "yes/no" values - Bugfix, mod_security_check copies rulegroups over correctly now - Bugfix, mod_security_check copies over tertiary configs now (spam.conf, sql.txt, etc) - Bugfix, mod_security_check, when the whitelist is enabled, it is now flagged as a vulnerability - Added vulnerability check for whitelisting IP's in mod_security - Bugfix, php_check updated to support yes/no, and on/off conditions- Added support to --report-false positive to use both the full and relative paths. - Added additional firewall modules to asl-mod - Added support for clamav scanning to proftpd (note: this requires psa-proftpd 1.3.2-9 or above.) - Merged in new DHTML web tree- Added test to psa_check for SSLv2 o in qmail - Add expose_php = Off check to psa_check - First round of pre-QA cleanup (asl, psa_checks, ossec_checks)- Update to SVN 090309 - Added asl, C rewrite of /var/asl/bin/asl - command line arguements now support multiple entries, for example: asl --whitelist 10.10.10.1 10.10.10.2 10.10.10.3 - Deprecated bin/asl- Update to SVN 090306 - Added ssh_check module, C rewrite of ssh_check - Deprecated SSH_PROTOCOL setting - Bugfix #XXX, corrected condition where ssh vulnerability checks were not being reported for SSH password authentication being enabled. - Setting SSH_BANNER to "no" or "off" will disable adding the banner to the system (For Breun at lemonbit.nl) - Extended APACHE_RESTART setting to support the modes: yes/restart (/etc/init.d/httpd stop and start), no/off (do nothing), graceful (/etc/init.d/httpd graceful) - Added mod_security_check module, C rewrite of mod_security_check.sh - Bugfix #XXX, where config value MODSEC_40_APACHE was not being assigned correctly in mod_security_check - Added web_check module, C rewrite of web_check.sh - Added mod_evasive modue, C rewrite of mod_evasive_check.sh - Added php_check module, C rewrite of php_check.sh - Lowered vulnerability level for safe_mode to moderate. - Lowered vulnerability level for escapeshellcmd to low.- Update to SVN 090302 - Added ossec_check module, C rewrite of ossec_check.sh - Bugfix #XXX, OSSEC_NOTIFY was not previously being populated in the config correctly. This was preventing email notification from being disable-able. - Bugfix #XXX, added a wrapper to lint the config file for the CONFIGURED flag - Added rkhunter_check module, C rewrite of rkhunter_check.sh - Added configuration checks for the Plesk 9 /etc/xinet.d/ excludes in rkhunter - Added denyhosts_check module, C rewrite of denyhosts_check.sh- Update to SVN 09227 - Added watchdog_check module, C rewrite of watchdog_check.sh - Added new config field, HOSTNAME- Update to SVN 09226 - Added psa_check module, C rewrite of psa_check.sh - Added vulnerability check for psa-atmail - Added vulnerability check for psa-proftpd - Added SSL settings detection between Plesk 8.x and 9.x - Fixed Path issues with some symlinking features to /var/log/httpd/psa- Update to SVN 090225 - Added new general_check module - RKHUNTER_SSH_ROOT_LOGIN now defaults to SSH_ROOTLOGINS variable by default - Added detection for Horde and Squirrelmail during PHP functions check in the configuration phase.- Happy birthday Mike! - Update to SVN 090223 - Added tortix user creation event - Corrected issues with kernel_check and config parsing - Fixed typo with db_user/db_name - Added in ASL_USER functionality- Merged in ASL Web interface code- added support for Plesk 9 - bugfix #xxx - improved version detection, -testing builds will now reflect they are newer correctly - bugfix #xxx - added vulnerability information for psmon_installed/not installed check - bugfix #xxx - lowered psmon vulnerability severity from critical to moderate - bugfix #xxx - Corrected append code to proftpd-tls.conf, this should be an overwrite, not append- bugfix #xxx - corrected psa_check to write proftpd-tls.conf to correct location.- feature #xxx - added detection for php functions: escapeshellcmd - bugfix #193 - added /var/asl/data/templates/general_updates_pending - bugfix #xxx - fix for configuration_setup to not check for mysql, when the user selects no. - bugfix #xxx - changed proftpd.conf-tls-template to only allow SSLv3 (was SSLv23) - bugfix #xxx - proftp.conf-tls include is now written to proftpd.conf, rather than proftpd.include - bugfix #xxx - ossec_check now removes mysql settings correctly when mysql support is disabled after it has been enabled.- Bugfix #XXX, enable/disable code for modsecurity, so if it is set to disabled, it actually will disable it. - Bugfix #XXX, asl-firstboot sysconfig to no, to avoid a condition where grub.conf would be modified on an update- Added asl-firstboot routine, to support the new ASL installer use of testmode for new kernels. - Added checks for yum and up2date, additionally this will report missing patches in the vulnerability scanner - Added detection for 2.6.27.7 ASL kernels - Bugfix #XXX, correct unblock/whitelist routines to correctly call asl-shun- Added requires on sudo, even though its supposed to be there by default.- Set requires on mod_security to >= 2.5.7 - Added detection for more 2.6.26 kernels - Added check for updatedb.conf before enabling- Added monitoring for openvpn - Added monitoring for ossec in mysql mode - Added Fedora 8 EOL checks - Added detection for 2.6.26.x ASL kernels - Added support to purge old alerts - Added support for (testing) TLS checks in proftpd - Removed monitoring for Plesk daemons (prep for Plesk 9) - Fix for ADMIN_EMAIL regex - Fix for general_eol_os in vulnerability scanner - Fix for rule updater, an update download failure will not cause it to exit- Fix for mysql use in web.conf - Minor detection for /etc/asl/VERSION - disabled magic_quotes checks- mysql fixes for ossec- Bugfixes on psa_check, php_check, and mod_security_check - Updated vulnerability data templates- Added new kernel vulnerability checks - Added X11 vulnerability checks - OSSEC module will now reconfigure web-interface settings automatically - Added checks for additional services (gpm, cups, printer, kdump, isdn, etc) - Added basic plesk SMTP_AUTH weak password checker - Added ability to set the denyhosts root login threshold - Added --malware-blacklist/--remove-malware-blacklist to add/remove from a local malware blacklist - Added --domain-blacklist/--remove-domain-blacklist to add/remove from a local domain blacklist (used for comment spam)- Added new rule manager, currently disabled by default. - Added support for new report format - Bugfix #XX - added in data/templates/kernel_grsecurity - Bugfix #XX - fix for ossec_database_setup on non-plesk systems - Bugfix #114 - older installs are not upgrading rules properly- Minor mysql tweaks to enable DB mode for OSSEC- Added support to manage geoblocking updates from inside asl - Mysal back end support- Bugfix on OSSEC locking for large rulesets - Added 2.6.25.4 ASL kernel detection- Added Fedora 9 support- Added support for SQL driven block management system - Bugfix #XX, performance improvements for large shun rule lists - Bugfix #XX, psmon monitoring OSSEC in non-response mode - Bugfix #59, non-clearing block list bug - Bugfix #104, register_globals, and safe_mode on/off support- Added --remove-whitelist - Added --enable-rule (for re-enabling a disabled rule) - Added --show-alert, for permissions restricted environments - Added --permissions-check, safety check to validate permissions - Added --blacklist/--remove-blacklist, ability to add IP's to firewall module - Added --report-false positive, to automatically report a false positive to support - Added firewall module (/etc/init.d/asl-firewall), initial featureset only covers blacklisting - Added ability to report a false positive through the interface - Added support for traceenable off in apache 2.2 - Added in horde vulnerability checks - Feature Request #46, whitelists and disable rule is now togglable in the interface - Bugfix #XX, clamav integration checks - Bugfix #60, random permission changes with audit dir on rhel/centos 5 workaround - Bugfix #111, Secremotesignature empty field bug- Added country->ip mappings - Added support for geo-blacklisting - Added support for tracking rule version numbers - Bugfix #102, feature request, added version tracking for modsecurity ruleset - Bugfix #112, fixed cron.daily typo issue.- Added support to update new mod_security rulesets- Added --remove-whitelist - Added --enable-rule (for re-enabling a disabled rule) - Added --show-alert, for permissions restricted environments - Added --permissions-check, safety check to validate permissions - Added --blacklist/--remove-blacklist, ability to add IP's to firewall module - Added --report-false positive, to automatically report a false positive to support - Added firewall module (/etc/init.d/asl-firewall), initial featureset only covers blacklisting - Bugfix #XX, corrected typo in asl.cron- Added support to manage the new sql.txt config file for mod_security- bugfix #XX, corrected issue with clamav updates breaking on a new install- bugfix #XX, corrected issue in psmon where it could not monitor ossec- Updated psmon checks to monitor ossec in both server and client environments - bugfix #XX, corrected update events to display when updates are available when called with -ck - bugfix #XX, corrected issue with clamav updates. Clamd will now be reloaded when rules are updated- Added feature to set the system to automatically update rules and packages to none, hourly, or daily - Added feature to configure if asl will restart apache on a mod_security or mod_evasive update - Added default banner to ssh_check- Added automatic plesk services whitelisting to rkhunter_check - Added info reporting class to functions - Inverted root ssh check logic in rkhunter - bugfix #XX, kernel_check, formatting issues on vulnerablity report - Misc. updates to header files- Added new command line parameters, --disable-rule and --disable-signature - bugfix #74, kernel_check, fixed detection of the kernel for the disable_module check - bugfix #XX, configuration_check, improved input validation on max_emails_per hour - bugfix #XX, rkhunter_check, formatting issues with root checks- Added automatic whitelisting for some rkhunter checks on /dev/.udev - Added check to turn off SSH checks in rkhunter, this overlaps with ssh_check - bugfix #XX, ossec_check if e-mail notification is turned on, don't flag it as "failed". - bugfix #XX, general_check, removed check for messagebus service - bugfix #XX, configuration_setup, lower bound of OSSEC's maximum alert e-mails per hour to one- Requires on clamav 0.92.1-2 and above - Added web-app inventory weekly cron job, determined by configuration settings - Added process monitoring for clamd - Added support in mod_evasive_check to enable/disable the module - Updated rkhunter_check to support rkhunter 1.3.2 format - Added clamd to services modules, this will display clamd in the gui instead of rkhunter - bugfix #XX, corrected issue with process monitoring detection - bugfix #67, ssh_checks are more descriptive on why they will not disable root logins- Added Fedora 9 support - Added selinux conditionals for fc7/fc8/fc9 - Added anti-malware control group for mod_security - Added anti-virus scanner components for mod_security - Added dependency on clamd and chkrootkit - Added support for 2.6.24.2 kernel - bugfix #XX, home dir permissions setting for admin users in Plesk environment - bugfix #XX, added conditionals to detect the psmon config correctly on a new install - bugfix #XX, removed web_check from ossec rules by default - bugfix #47, selinux detection in the kernel - bugfix #50, improved detection on php.d settings- permissions check on /var/asl/data/audit- fixed ASL ossec_check bug with changing from lines - fixed ASL ossec_check bug with max_emails_per_hour - added whitelisting to mod_security with the whitelist_class - fixed whitelisting bug in ossec where the first entry would sometimes be lost - added in notification toggle for denyhosts - fixed spamassassin detection in psmon - fixed ossec detection in psmon - created local cache for RSS feed - redesigned the watchdog_check module, configs are template generated, process detection is much improved.- Added in check for Fedora Core 6 EOL - Update default config file with the new modsec ruleclass vars- bugfix on watchdog, removed broken psmon cron check - bugfix on mod_evasive, issue a stop/start event - added notification function to ossec_check- bugfix on a permissions setting on psmon.cron - bugfix with asl updater, this wasnt grabbing the domain-blacklist file - bugfix on rkhunter check, to detect if the sysconfig/rkhunter file exists before changing it - bugfix on ssh check, to resolve conflicts with password/root login checks - addec check for mod_evasive config file - bugfix on watchdog, resolves problems of monitoring non-existant services like pop-ssl and imap-ssl- turned off permissions check on audit dir- Major overhaul of modsec rule management. Rules are now managed like the conf.d dir - All old rule configuration settings for modsec have been deprecated - All new rule groups, MODSEC_XX_RULENAME are implemented in the config file - Added stub for grsec vulnerability scanner output - Lowered grsec pass/acl checks from moderate to low - Added vulnerability scanner definitions for mod_evasive checks- Deprecated the -r "report" flag, this is now the "add returns" flag - Added -v "version" flag - Added check for EOL operating systems - psmon will now automatically detect and add services - Added support for Fedora 7 - Improved accuracy on file permissions set by ssh_check on users key files - Added check for psmon cronjob - Added denyhosts module tests beyond the install check - Added denyhosts configuration routines to asl -c - Added OSSEC active response check to configuration routine - Added OSSEC emails-per-hour routine to configuration/ossec_check modules - Added mod_evasive module, to configure settings for DDoS protections - Added psa_check module, to detect known security issues - Disabled monitoring of the Plesk httpsd_error log by ossec check. - bugfix on converting from client to server mode with OSSEC settings - bugfix on permissions in the /var/asl/rules dir - bugfix on line wrapping in the asl -m listing - bugfix on the denyhosts module, checks permissions of white and blacklist files - bugfix on ssh_check reporting root logins were permitted, when they were in fact not permitted - bugfix on check_updates() on the /etc/asl/VERSION file that was preventing adding new signatures- bugfix on hourly vulnerability scan, was misreporting vulnerabilities that had already been fixed - bugfix to ensure data dirs are owned by apache - added xt_state to asl-mod - added new mod_security ruleset, rules.conf (called "General" or "Common") - added new mod_security ruleset, rbl.conf - bugfix for lsof operations, where systems have no DNS, disable dns lookups - Added support for xcart detection to app inventory - disabled monitoring multi-line plesk (httpsd*) logfiles. These were filling up the interface with spurious data.- added in support for disabling signatures - added controls on new rulesets, jitp, output, and anti-spam- bumped to 1.9 for the beta 2.0 release. - fixed bug in asl-webapp-inventory.cron - fixed bug in %post that was causing failures when suspcious dir was empty - fixed bug in reporting module that was missing lsof - added a config file validator/converter- added in new whitelisting routines - new flag --whitelist - new flag --unblock - bugfix on asl.cron - bugfix on ssh checks - bugfix on ossec checks - bugfix on rkhunter checks - added sanity checks on permissions in %post- added whitelist checks into denyhosts - set the default denyhosts shun time to 10 minutes (was 30 days)- -2 changes - improved updatedb check (not required on all distros) - added restart routines on fix events - -1 changes - new mod_security format - bugfixes on reporting (dupes, etc)- Bugfixes galore- fix bug #ASL-24 (ssh checks) - Added GSSAPIAuth checks to ssh - Rewrote all the reporting routines - Added "terse" mode for web reporting- minor bug fix on report mode- Happy Birthday to me. I am 34. - fix bug #ASL-22 - added update routine to 1st time config run. ASL app inventory needed this - changed updater to support new signature paths - changed format of vulnerability report for the web interface- -1 - bugfixes - Web integration routines - added rpm-query util, initial stub to handle forensic investigations - added asl cron job- Update routines for modsecurity and ossec rules- updated config routine for ossec client mode support - dropped ossec-hids-server requirement - New Config Setting: OSSEC_SERVER - Rewrote SSH config settings - Major updates to support logging, improved logic in ssh module - Added simple reporting module- Added xt_tcpudp check to asl-mod init script - create modsecurity audit logging dir - New Config Setting: MODSEC_AUDITDIR - Removed Config Setting: MODSEC_LOG404 - Modified Config Settings: MODSEC_LOGFILE, MODSEC_DEBUGLOG, MODSEC_RESPONSEBODYLIMIT - Added support for Concurrent logging in mod_security - PHP checks now default to warn-only - Added config patch utility, and created a %post event to run it - Added OSSEC check to monitor mod_security audit logs - Disabled webapp inventory from asl by default, created/added this to a cron.daily event - Cleaned up configuration routine, added a 1 time run of webapp inventory when this is executed.- quadrupled default modsec bodylimit (2.6m) - bugfix in configuration_settings.sh, should correctly disable php checks - updated init script to ensure firewall modules are loaded (xtables, owner, stealth, etc) - php_checks are either warn-only or fix mode - Improved disable_function regex- Bugfix on php module, this should handle Zend better- Bugfix on php module, that was wiping out safe_mode - Improvement on php module to detect Zend Manager extensions - Fix on ASL version detection for updates- Bugfixes on php routines - Modified ssh module to disable root logins only if admin uses are defined - Disabled web app inventory (for now) - moved mod_sec module up to run right after the general web module- added basic configuration interface - bugfixes on php extension checks- webapp-inventory didnt create a database (fixed) - general_checks was detecting services because it looked for /etc/rc3.d/* this fired on the K services as well as S (fixed) - ossec_checks, smtp_server was broken (missing > in regex). (fixed) - php_checks bug, pointing to wrong config file (fixed)- modsecurity module - added data/msa and data/suspicious dirs - built modsec 2.1.0, added Requires - mod_security ruleset level configuration - created data/templates directory to store mod_security generation template - created basic installer script http://atomicorp.com/installers/install-asl.sh - fixed issues with php detection- added in stops between modules, and -s (skip) flag - made a generic config- 0.2, major redesign. Added in app inventory module- first cut/bin/sh/bin/shasl-lite !#%&'(*+,.02468:<>@BDFHJLNPRTVXZ\^`bdfhjlnprtvxz{|}~1:5.0-5719.el6.art1:5.0-5719.el6.art1:5.0-5719.el6.art    blacklistconfigcustom-domain-blocksfirewallmta-output-aclgeo-blacklistintegrity-checksmalware-detectionrulestld_country.txtwaf-configwhitelistasl-repsendaslaslaslaslasl_cli_caumaum.dynamicaum.staticupdate_config.plvalidateipase-dataasl.sqlauditchecks.tvtcountry-map.gzfirewalllangLANG_en.msgmsapasswords.txtrcsservicessuspiciousmoved_filestemplatesconfig.templateproftp.conf-asl-templatepure-ftpd.clamscan.templatepure-ftpd.init-templatepure-ftpd.service-templatetemplate-00_mod_security.conftemplate-01_mod_security.conftemplate-02_mod_security.conftemplate-50-clamav.conftemplate-50-plesk.conftemplate-asl.repotemplate-asl_waf.conftemplate-clamd.conftemplate-cpanel-apache-hooktemplate-cpanel-posteasyapachetemplate-cpanel-preeasyapachetemplate-cpanel-preeasyapache-hooktemplate-freshclam.conftemplate-glacier-archivetemplate-mod_evasive.conftemplate-mod_evasive24.conftemplate-mod_qos.conftemplate-ossec-3.0-internal_options.conftemplate-ossec-3.2-internal_options.conftemplate-ossec-3.3-internal_options.conftemplate-ossec-client.conftemplate-ossec-internal_options.conftemplate-ossec-server-3.0.conftemplate-ossec-server-3.3.conftemplate-ossec-server.conftemplate-plesk-10-socket.shtemplate-plesk-9.conftemplate-plesk-waf.conftemplate-plesk.initemplate-proftpd.conftemplate-psmon.conftemplate-tortix-kernel.repotemplate-tortix_waf.conftsavulnerability.dbfunctionsasl-installerconfiguration_setup.shuninstallreportsrulestmpupdates/etc/asl//etc/asl/firewall//etc/cron.d//etc/cron.daily//etc/cron.hourly//etc/cron.monthly//etc/cron.weekly//var/asl/bin//var/asl/data//var/asl/data/lang//var/asl/data/suspicious//var/asl/data/templates//var/asl/lib//var/asl/lib/modules//var/asl//var/asl//var/asl//var/asl/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tablesdrpmxz2i686-redhat-linux-gnu                  ASCII textASCII text (gzip compressed data, was "country-map", from Unix, last modified: Mon Nov 5 13:46:38 2018)ASCII text, with very long linesBourne-Again shell script text executableELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18, strippedELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, for GNU/Linux 2.6.9, strippedELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, not strippedISO-8859 textPOSIX shell script text executablea /usr/bin/env /bin/bash script text executablea /usr/bin/perl script text executablea /var/asl/usr/bin/php script text executabledirectoryemptyexported SGML document text RRRRRRRRRRRRR?7zXZ !#,]"k%fstm2Ll=4jB}1uޛ ,:EFQ*Ei:Y6S`6-A@(ՊWzg]fU GkY_3/M"^8Z%RLC 0)`u"G*GYb%Rgk81-ih7)z:Cνd[RxGfI>t=yȪNghTq5 2=Fx?KHiVeS=hUX f[1)ʞs v4pٵӋvi"w /; BmDQi|.4\-D VL dO;rGz .-%VT'PfuCȹWZ+J}.yXM;:55V A]ޒ.R444aߋVZ2 " xRm$an ͈6" *@ [1rҌ,WkzD=$۹9;c`izg`T~"2YYT(KބѪ),gE{jx!nRRd~?zp e=&G02 WgQe:4,1[&^7R17,.NuAu-$ >I#]}e!'*NsX]wcV3A" 旦q^ ?Q>wz Y^O"'W]֏56zgOV_գΟ-F쫅tEr0z)xyzsueI~rW*(@U0Dw^1KGᤜpz:A _ "mF5}XT>#G9}/V 9rV O0|=eK Hڿ P,is a/۫ 4 =g]jr$b*}`yr9C,Y_ZiSDg >\VdB=-[@@w6JDe,8&frg^l38==NsΉç.ӝ]5dG WAj0xh>H"C%EtE mK i#~Ae6#ø+0P)˷V[s[\W989LrJ F\ "?v\ $5dA wG@}O~|1Rh]Z:؋2kE~I5r$]ܚf M *HaM^B pqLM۵+AGFB7_IZo[ϱk',<7H,*~ gXSŃ;nfS0įb%pQ8C TDmz[g~B3x I1I7y|Ng^*M0!î 窞dOGB6 ݏxezZ_Y@o3 &ƐY1 ]y<]4q$h RżTiPA=>,_w'q)=ytŮ g!e=ZD&1VRzTmу\1A>)oX7Ev&|m#E Tz\oybgϐ3Lꡙ!"pnG (>⇵x6D1-nFWL7^|;wKȾЖwD:1 SƱڌu+(_LLmDUF,ְ'*{퍪c'L/+ZVA\ lQ Qg L?/dMKr{Q9c5≮M) ̝10.^! X^垇tj+({-UQj(uH%ҧ @=DMˉ. mpn8"%)dhA ę'dq~CV ̞wnda\+̓aȄ2pʗ=$ƕ/ynxdމa)ŚAq_f=vJNV{J;]h-U \R#s*n)}bpTE1}Hn4((a;Ee별!CsʡۿB;y>(^ B m+",u漢FL@[UGhaC]uP~e :};&0?b[UTcU3dzwv1I8;6Ʊ2/ղp+nr7bQn$uPWlAw,uO^'2tri!t ޝd 3z5Xn ET 4Eq0?#8zYiM;&;;3Duq䏥>wVI-K/:KAX×=ȲW6zU-x'nr |؛mg۩\e;e[aʟ&Lፊ5-mї/JWOEA4oT@JKϒPOw*/ Y\Øg5e{f-)+W/=&fGOleI8R#tin1Bͳ ~Ev87rhL{ Vݧ ŶҳL/^U!,t<4['9]I=nT-a$/sݢ[mί4[d``MYTїѿ>yg kp^@m(+,Rzt4)r,lC -C8'Am`ok򦲲=t,76}C,ژz\BkXSj9:F ⩸>T+4t(|VaQ?4`W:a< P1]^E/9ygqYp+xz1Ϟg }X*MaZ1gM^Yv(0KmNiW$r\>á]PZK4h.ȂSoŦi]yJמ L.|e_Yv"Ѽ=ӣkAIwM-j~u=~($ͩ=9ynfL({aTjNŽ(m!N]_~) ؽqL8 eRz-S8ծgo``d^1[3^ey S;ig40LeJwFTf1Ey:XKc*t '%DM,ʙhxG\hh6,m;gq󰲦=e ]EG0͇ZN&)W0kSL-.^eI Mfç\ab4.(}%3Rɀt鷔jWv4?AJ $Y#]og5 x`)ʗݵ*UŞh">JXx `?BԓkeBrX![~"]xq 3DV=12tƸI;v稒d=02ؐtPw: ~9n &fi%epVF1^HB⺃;>Bt;tT[WhKT~ʶe_XCSsi q/fDgY o*$C)nF%O: ! <] hmda! )泜(RllF4x~ iHt$'MKJ$x)AD63ܾ1Kǵެ:`55ѹiO>W9GXzl.uBGî,4}`f\5G}}^7iT2ŁaeL؁DHܖ8 m)HnV`ēg*T ǫw0QP7P0>n(UCbQJG*Ba"|$DVfj 7 *d W7M<'܊%肓+=F)O L%1&P:mR!eG]Y;%닠ذF WU'8&@|p/ETXzf'3Ev@PJW`%x"u rGZ/\XXui;r9273fnnmXF(/,5ޏ?s)z'J Ʌ#1A[;KLj>n#,|z+ ʼ!v*Yo)U]{ s۾Fy߹DeX.֖ޞ[Ħ&l!*9C)6t˾#O")h ʋ)T=~i2zB)Σb& {^5:_Fox!x3f '~;ih `?9EG9 bg#5d}O~ܙ)ieJT(D]VMm5T-ZmWY" ˈҏ0{y)Ei:UF3)*c9Y!%6Z??aa IEGzL_ w BI\wYz~3a9 f>#Q ՑEim=eiLCU57Tgg6bUF%1a?,_0 fq[Y6h'…D9)Pl3t-NOzq)ߔ[+VH?>̉r-8!`zL֡hdeqMۓu]fM%͜'Ws8YR9_N)ǯD"vW!2*FkS&:kc 1? 7bLa/m..xZ >uD;~@XB{fr@a2.ːe>dEMF?~zn_YRVVT8F+(c^ZGmǍ 8-A cs>U,&A4Ȣ6 LOj}tV)NȪSNh]pY $ ijL-{rb$W( ST12W~v$v߹,(+d0JNf@, gS,%,T\$g2FoIfwjd0L ` DdvAhhj~ze6 ?B_4dH;kh.Ǔ.ejjLj~B9*dO n_,6H^F5ڶovh3Ej!Z)Ì˸ nzӴOQE?]*Sh|nie-q P(yK"vcHvѾz= ? ޅw'U#'0(|_M8LkCQU@=^反^!aB.>ia?=ץr"JZII{0éG M!Xd{nhz#ޮJѽK@vFz;Rɀœj17LL|">k9bp T~`apSF-BjBR%Zjd K2Lzg)eV' ή G`T"P&8}sn O>&oTg{QB+1պAdIV7'|IYkʗ"2H|R) $&iv'gOcCf{* tM@\]zdrͦ 8CS F ҹpA-cR/<2u&LY_+Bۨ%wC3 x%PnQy%ڕfe0J]||@CUz-[50tfv-;Pu͆J1bۇ+T`kMȼyM~dt\'@JɖȾ(78?(ă,^Y!-D owSKK9'(oaׇ&Yʲ|WNpmP퀑A,cL}{+ @NI{P&ODWMc>=Ipz;"j̏$JR[єЉϯyCɯԷRVS<{Kސ_>XZft=ظ Rc0V)/ɡ/CsCq$cEn,(ΗcI:lZ*wir2鹍FÖ,ə>rsC3[fonN;2['JH$ЇfΥ(GK4=lVCM/`d7Y􌎑EDdBF+1[LHp,~n'ў 00VulV/xX5)Li7PP.N Ff ^)wjid}$S@>Bg Y"z'Ppl,~8 U3zZCݻ+7RܖN{6°) ]Hb&J{mH;ϜT\]hE(]5굷g6'$kv4K֫3kNV31DmdXMD̢K g[2|(`QZ?i d\KVfmհCUE*c戣|(6'C`AԚÀoiТ,Wd ;qO0U!!i)LE(O[$%p(&Cf^t}a燃RPfܴ%1Skb[߀nmM q0; yXE7bezMj~E*^=u&82/r$"6-etNSȩ%SjDPUuE DoW7M@>EXGe1ƿ>RwL~w<622+K:u4R/H;pqN܂ǣKhlNJ0R k:e~etkar֋Ui=y|kHIJrŏ+]忯{*.M;dԱ[ om˧W-޿ޗ"gPCb0jesT԰HO ڜXc󹚩cvtp) x;g҃ѫM2pkjΤ93ӝ#5 d6Ѻٹ-_ ^rFͅFd+_#4ԼA$3 չDʕwB{kV4w@bhbJ\ ~"z~6u-aR ɉ:KjdL+hU|/A}Zf! wupo=`@MP#S7b8f?s&FD\8bX.pDpOԕrv7J? YhVa2~(A/g PzY+~UWi1yS`[PR 鸘kGF١q;ȻHdx;( W uGz6:*{IUTh5hwF Si0m(:֏v좆^O1%02- d>.n? cf]hژ r*.7 '.>TVdm/WTM7ӓqW)nv $ɧ(y )BqcB|g(} K PR4 wԍX ^iAxV4#+oƙUhT@IH:'Dqj;\:Po]27c矞c~{֕n\$`H8Nnm I/5~7P#v7([m.]jy^٨AiǴs`ə]6}e i,.Y'(:d9XÃgkMR?p2}r|fnp- :idKD`x,F0l6"Qm2+]j,LmA!li p7J@s<}e;ߛ]7on?Rlk|){G%F)]Glv#{`9 T]+U@ |, ʿ&p~V`Wr &Mm{UmХxm ,Swk\n>gP:k럖Ej$.1aEI5),Z~;86X(tsӌ՛5ڮ縞LZWvvc džZN>&].[:`XPX7bxZ[Z}5X^K,પm79m-~[Z{y0=A38R;r]+v^9*9?#Tb*a;)k ׺ J>RINH** K {? E!yoowز_^Gt}[=FΒ*eBTDTkoYG[qy*݉+cOvK 1p* toWvVCce`?@ /lSWPRKM\P bBCuv@=";c fH\vҶAPVv*[](ZyxF5ouOZX7VLT7R!Aa9椨jTV}غ'?T2ưHMedYRa˗ڼ2VP`XB*gkC~Ka}ԛX0{jAK~{Ӗl",vRj딌}c<'+F=[@ J%gl̡b=4A=H%;ؗH--kW!2ժrA]>^9#I'Ue p'R>;OuGs|XJa\F=T-VI+υ~ *8Y>R0HseeCdKch+kHçJDe#&AXMԤQ>K4Ȳ?DjY;_,uP/u`'a t IņƉIWOÆ_#N`l*3"GK/EǖCVKܯ`anvB3]ԙ_>s>=|zSްQni&@w^MޝjF].pn⼣Vmۈr&;flQy{;>eK7?4`|epJ՘|Yu4.; E6Bj!K1ks;.qUH}A dKq:R|䥹r!u@DJPbKGj?Q(ʦ I6Q;5I8?|o)z=A%9AN*^s_6T\.vB`6pˉ~fpő"PH/\"D-ĥ(쌅l@IEX(~Gၥ,:}!_*8hWӋ*%ȡsj\@LL*%@Z$=IX!Q3-&\'2f_Չlz(tVR$}l(rڑ@6&n[?9 "em حcd% iah(oh lܭbz>G / ͸RNIK5vM CR~ ]K99cb( o'BbR(uبgkӻ9T9G7En !5OK7n.p/en=s#'#(=PAd01\f4 <{Xs#-@J%GR?m'm6Q/ܑx~A-y&vH4mt 4f 8MHMv 3ϱp щ%s6xHXQ~ؠnOтV:\P@H &1VJ!fPd<|n;Q9O7%n0T B˗4{b(ҤC%4Z ka馲Jﭏ aր{WO`GfF9 KdBMr"S o4, @Zci5D#OwwUɚǸ,IVb`׌ѴYEz]Y HͣRHXS$_?bs+ݶ!{S{{,ZRZIk.^R0zHD ?%\ڟgfkz5\vVBFUů KܐN.bF|[sW%џ]>_p("Ckaֿ(Oy3F ,UQ ej.i-[~µTk.n{Jj'iO9Mw'U{2gmDŽf$-O\7! j)sb3N!&4d~H{G7pc F ۅ4'f8 c\Jii}A;W9oWAx!ҕd7U[-Asa ˜*٣ yB ǔhZB\Gaa^i*D[1n'5Ȉ" AČ!qV%'1?h 7IGE9axgj9W[f=>FX6ڥ!h5Q΀Lq= )d<ܮ\603:Y,-=iְ "cR:ӽI`~S[2=ӽJ ;sXr'$+M1NAOfift 3!73f2Z] o|BfjRӗԻ?T#OWtbدw n=⣎}lCݍ7>%.Wtߖ;V6yӗ:.|zy65Gfr;CD,kb0npcS[LvVe9}2k-:IPßyn.sdxx-K_u<sYt"-oۑdrh7D=[ڍ!(0W.{*#Q+/:󒿐iv<0I?1,yt|ĄZAX_&R2bkxhKt{S/"^]GG#r46+lp ԡx:9-twSݥt|x3ܩqnr&m#rJPHz"+-Rr9i /dRҢhuǓ,gR.r "!yMP֨ϡ"C܌e݀bXt)jPpG{%iíD[M8 GBdHT^D;) gm}>F}8N]Obܳ >&: 1@OA!zKJ]24CF[g&̬_0ÿþ`ͧX;1lOAC'v|W(3!  U~XlM$=nt&RP%5wH~"~R 6JD\o\6; |Hue +E?!P!mB>oz)ﺳQ=zIw]x5U֣Yv'FMVo5k4I]fH-nujdUOWiUL)%$-ܨz+k|aBIUA֛#U7.q#{ζ9rXGv܆Zח!~^ Bcv^'qnDZҢВpQưx7 U6,ns6Tb //ep8}0k>;;gT2.у*6*"#? 8[|oIp0o ~}3d\1X70~@ρ3ɬI5H['05)Cl1a\%7mDF)9ݠ ;w2LDD~bqtmɧmIzgtH5="U^g+E8ӡosKg+ĩ!RvGӛwhHM"iq+~LTA'#^|:PG3 < Fd-`uQ>WCHq=W̱~n _ nvam3^tFQ8yS}#-uu(lZզKKt|~,հ)å~(ENnNX^Sv ?x3ȓG?U+Wցl1-:e˳c㨅àdv?)fW'fBp;EW(DYfDlrtުk<1];C!k|.'BP (r|Od@esAWb; TbѢzc^/yPYU}44pGf;+(XP- /QO_BL6UcO~ٯޙttKv5Yr) :WVRN_\V;8kኒӦچMțX7Nc tPן+7F\|pX' nND}pPZ(vsɳ`t=,WsٻhڎR YU0ȩu!,ZL7_uO^t`_/xn(R0O{*%aݔ[l)!e_!hO3aR&ʃW1-y~y/QȀ ^C2>yS&Ẏ KCD6Fi#0w.v4:8hbH,!1\VW ~?紲0:5/\>Xk_̗i%qnHc PAH ;FJ01@< ȧ]#2WVCۖl?JhiD{`R@BWRʀed"5o cyEѓւ ֈI^wc$fS?pU.Zj d`~4N+G3[_ 9YdүxnΕ*͍>@XJ׼I`k}5iay_Fu&Pk/orZ󄢊_xtt AU 0B8ޕA-5;zDy`YSE2!|#X^uuA01Q#Wҁ` :yLLթ< mYn1+B\syꄢ4auctQy3JN(F a$ym\$uox 50F&}[%77Yފ Be>*wF:e4QBR3]aײxp]M @e)N8겶& wPOF=yΝ1e?pܪHdFV(b A8a^\xx,뜥6E'dƛ|~փ0 o"pZJKŌq:˼KmweFB$q(xg-۾L;4F[L(ga Y e\<͘5$ƒ/j]M;S7 y Ž{r)fYN]rfB[G\riAKY(c2Y2%9l?Eh|X>S&"4W5VFf\ΞueuyPt}t `'sۃN@}2(g' +:q⦦f8Ҋ툳o{P[8D >+)+OVE15륕l e*M7HP;oJa QNJf*k3$*T|ˆX Owek,z{>'5ݭ|NyvXH ECxnlNˬSyjhzC!9 Oa_U~eʫm\+Nk9'x]l?2Z{k谬 @>CQ-DV,ԫJb1~X)HO1hIAOjzNW?|E) =p ㈃8eٍoL]@vy@*9).lSlgjbc<}][M~.015{k s¸5f+8~ l±Eq 7dYڼvC[o&RJXW,̲&GwM1DgI J5 뤧 ͫLGGP|Q>%Bi3SǑuHzܲ07IPJlG1nn@j1Ԅ)<<Ւ\˯kQIv,#wnb0rΓ0%5G Rcw-YXq#$XsH+2NW!ho-ݚ{(_xwJs~bcv!ٰtXЭ;W H&N8.],ur}Gqf.Dž; -OyXa?RiW@t˿l.Qw[~Jm[/} {ž싽W.cb`7-Kaw{פ%3>gjAh5;;uTgi`dY|lf08+U>I-KީQK ~=L~VrJxJB^O|Qot0Y,35'`:T7>C,@܏s,'ۈ|*he>"VRx_wU }cW^xK,)7 G߂jUBV/V=%`KtuM+5K :'|]1tD2cRc'k_7.ufݼfE64B8T@+SjLM eg3SڤoXHDZ]⡕ôؑXCİڂ׎'~թPȨ2|5pN56E6B|H_ RCJkZ+qF#be eyT}$ܨ˓5%+29QљWUh$jLP:ށ*$_U^㓖&`;-̷ɘo6# Zg j 4ޒdPهkyj' ݥN ACޏ9R|5S梚lT┈9fh,Әm\K+|?SM@C%֍}b" (/$Dn|bl8`7Q[p |w7`.7b|8hiQ JQ|1 R5z ZPfxXAy;[ĢHHHkV T qu_=|*;As.;R" yX:hC$&یᄶbq+b^)j_'pk9PB"n ?9X]"T5[W "HFMFCL_!hWᗪ!';Le+J~кϣ#sāRšt+c@:!F꥖rZj'D͇݀ dg#(%B 9p 'WJڻ z~Nr)y,&5M-WorKvQ\3WyHLڢ|KIИ jVi?aR)~-# ]&a&T o]"X~w >&m)l z9)owkZai+Kn-y_6tF/դ* !o.4!=aٹ $υBuNo?ΡLB0A +gC 0Lm~&F $5qhs) U[kDc"o"a3_iE0&iKU.p7wk+12ZwHhDrH@ev_,W3 gWz+nӋQJ;%|ꃲde1oʑD9C}CgA+~|U>>P_.NaS~)7U_ɮ{2P!!] W618=r t̹VCanHc[`55n?P@2zK/@LpACAJAsŹVdQ8+꧝mH0ր@ Qga\HG!G1AYwjf`dTqh$١h6ga#4F,ʋ6jԞ)k܋a15QM 8'·E$N߶iQu^fI¤"Q|өJ'Ibp27w:X PuQ_/ID3I@-"?pgf0*^-!ɿ|bi=`,|xzQ)#x}דBG97| Grda;r\Ē48PL@ ƗP.0x[pJI^ǁ4grIqhGYm"c[c AZCސ2qQZm9v;p4.m\mKHV}F8}3(FwQRfV AGPy܀%y"{@Sؼ)D&N;v؈ c^&gpgbb̦KQ|iuYQ=q ;&x6Z(,Ӯ`_d{=XD_бoX-gӒ)Iy]8#0VdftCsַ8W%bT:A;$Ãk1oeh s&Z:#Ԑ uOg.NBP*k5RyP5@h 4zu(uly?c_Pv98kH-FeuQKB=$)sVZ ~+M/?=pY.^Z);wuC-j4~ׄtC!7SGTx#c&;a{=CϚB׹2#`YḞ+W K?f(丁z;&*y vBS+Wy_c$xBhW2،HZE00x:j&e︁䢔& BvJMN)Xd ;aO͈!) k~dMXwD̳vG,=RL/JSԃ$ҽ7>z&%r;:-HVnSoĔVTFjl[]FGhɂrr}||)r<^+8*_zR/y˦l &mF`PEKRhQzJ\ PD]kHqeb^>tde]M@7Lʁ8ͱ6s!v9- 'bl닟:9~ի}]Y0YEOoQ2{=o Hv6{{*P5SvChyICz }IH>t>a72aq۶{C~G j'a3 rEw)+Ϗ.MPZu4㤏F_+=` ,R8YMTekb}S@AS9iF>w̞4ҖDS r# H.z:&VmYt]zAnb׆\¡ޯ"{'do0@{h.=5 |LAj%nh\-1p8>!xP86wWzD+Ԫ)CDI9M&0M$i`s;b戇hJ8| 1=${3ذ\{Բ<9 ߠWh u/_T]}Otkl#HH+e[?n_QNu,4 g'6Ob% n` k<qK4pów(\`M["K {9K42ϰ1dU3~~y肿Dp%gW,1sNhėor&,Dhp牡XB2H kL/*c !ЬU4O-+<W#/iP |闰72}·B] /־T[V{mf?4SK|?HcT0mr87GyG#tJ-P4*V`OCYk>_ ne(ZJqbڋ?1;bz^M-NΉnE.E: WlՋgpru\xW63k yG#RRjE4_Cl\=!񕛥ЬXΑ{*AƔ>7R:} Mߪl+ %CZa[ux|l樎hJ:PEk_6F#=S''6Nx8Q`Uf27S8̘hɠLcOh7ui gQv3{2$ h[v50H{[G޾U2KH4C3xQx&_}xm,1δݢMR3Ԙ/rt/_/)V=:]/DJ(cRxī%kS CEdK 4h b@q/7:RwiX @ Qh.=e{1X*A PYzZy;t>HYyKŽ$l3v'2J;I87  ex1XӼcPBӤrϦ>m[]1B;@nʏcxZtyKXiOmf \[ q% zVv2d(˖h yH<$ =R 0mF~6,Mo搤+@aVoZhQ }l;|;W5bMV\Q{|ۑ0 $ƈ p>;C9[,ð-ڌ[acFE=c1/@qRt/iD8!CxZ] .7J.|(HQ+ӨsEÎ8#{'q"3 H{n jPӤ΀ˮW }8rzq=BF4FY4衷zYG@T_-i 2{9~E ~Ml2R^L"2~[SX+ʼn+S{4#)ҺQhTTFgd v/ s;1he<0ec'gV蒝`Kյy*@jlnL_֥eo׸?ڡ`h3%'&:?71ApPz˂ΫP(s?"#퀦}|hyv*lB^A/+B`rz-D6_컱Ҡ꤮=kh[$ygȨkޠY#0xB2D9\5O @ -|ܗF/xY[@Dh||wqMhF/ů[|ZxGj=|1}=hXNF: Q]j.iФuj.ϭ+\*%'zza#I&bLS^9s~h,俳qjT$/tVCS-)0ʠ>K 2J.^OeY8JtvCl4%i\fwrC2q~K/>ζVrYP^/afw3 k/*?*J;U!˭l>챱%ZV,WbvMA!ohd~+]-@$WFlKk<\0\?!Uiu:&E:vziϹ}ĭ͔+xTd*(.{oS lx 'xVU!/jIԔY:}!Q^&lfJ a5IZI( P0`:q5:D bЋON,TO `#,U2WqJol M<;!PIP} `k(NPͦLڦ7PԓyW6`.xk3R8=cDl+:pi9 ؃%y頉g$W&)0ޑbߗ-m0,1jK@Xyȟ4-sR,2k9m;!^;W4g\4(7QgnOfkn@m4HčYJ3(rNqWBjD1'1+q j歮TE&sZmk x;hG;(4#E"Uo.]'[hSxb$ww@[Rojй<gkp۫) >XD)qP@oI%1ygJ'Qc|,EPOڈʣͯ)j`7ij)&Q%H G3cշo}rV1҃IGW =i%8Q6\;|Y !p83`d'XMfu(}|jX/͠xq6$z`{aR4ntcr:L{ @ WfD|Sf z^n|VX=$毓.7iZ_fAi8YJ9}׋Ŋm9zopYl@40ZnhyI$d"x6 b17,J{tlԣH̍Ix⶙yQç-.A6 6K(u qEH!Gvo\D6|m˒oʧ-# 72ˉ;!b<)Z=LQlGr6/-pF\Ww2螥3@sE 1&ObdY HyM0 tFڕsxW28m*~!W9yO^cW94(~&'9S_\?$-n0$N-;K0#sa6c8fMbXL٬-1(sa~3l ")m h\oe5^*5^m{u^QZPGgf'dp f}룾LϊM^l P8G{{V7n ¡{ZvǶx]2n8Ҁ߅ф$^߬:*hҹ&Yka7ʋWF?k?qިMo#*kdI,BŚp>:ifDAwea,|=~YY(]Z2ˢkH )I\jv&Ui'Q#w' pԸW G EzKY9bɷ&s`ƬYTk  4e{ yL~YY*eEXB&ذwΨfsȤ+4 YILZ޻*p k E"/֍Ꭻ *,<wdViJTߜ,Zƃy(9::Wi#^Kg~8T^S>IgGARJ[{/XQ]V! XrXf_'//+|A%N%k^ kOq(d>"#EY"UbVY rMݺ8&eY(,bQ;E=7)tB#Ų Ti }b ipdHx=\86RU:o'\mCSL{bEJע|G)z!27)NQ4pdZ;V1vM(hHHK?t>GxRXjnn,)_Kz<gcvio<@ [&x %V6Ddg_9d~窪"忘rq Yxĥ{»Jf\ fw쉠 AnڄB竿pq1UzBg{e9%^#<4&.ds6bmM!_+m4BL g4z GI0L㒒m7ZoA4LԮ>Je(`'5v @t30:+n/ H]";>J ]!$ƽԝ ]]EDSF'O)-3=?M]U<sƕ3"3 A7[fqH:-VW*d,2ӞNaD @-a[XUan"[0Q&Oa5|sZB;#k(U[ä=M'ƭ_ sGIF$i]bWܨօm[9ea9abl&g:πpBI;$;*3* c709 m^0ߗx@PxI]Jyu6̕)5SKr0j'D̫<_ $Ď$R团,X._P-%88_ o\ḴL<<+mnۢb8=;hh35c3!/z^g޶Pff7R3UZԛ[EPSֻ?X}afx6bFĦ B7 sCXޛeL>U]DG5>6 剪t!Q4wIvl>5N}"չCJ^1k@@Fpin:<gU aCj6U$/Tl8܎ 4Z9E2~8&KOfxp`Շe""AsM@M$GH܊SQ|p!I*0)Ak!)DFGL`cn-8`67b8KF^lo#A){GR&my8nd.r8e;5mo",!T3SxV>8u w%^D3u73N|&5X⿶BI~ӽ`K~!Z B% UaQ˹GS+‹B+`*|l.~ja$z#vjv0,xj5/I擧ꀍ0iS>P;K&Ai;p~宨eg{-E)~& (7էDsU.xa6uWXD3J1 `X<ǃ³5lڲޚg7O8%I@wZ>Ulg'8aχ"0;f2rIjY:;> h8$J1 xc46l;ORi:US j(E? ]L^˂ۇf0P/mh9Wp(fF槢M,K+oQXSZb.WW `Jf;51"Tȭ$X3 dUuO7&ѷWJ"ꍸh|S 8F:ZLQ+F(*ރ:MN61,B^vf8 4>6 dO7a=pKs}璎 n,$5vP7׫vCWMj +jN ?`q6cbE~ȕ`" 鿌@㓜 ֘a\ 8i >10h{vIeA(LP@G֮!\?aW;?BG|dQ)t`W hM6G爙D#s]Ln.Y'/'"~˛ O/qD|+Mx6+V}rj`bW7Om F{h^ TǍ۲ɝ @\yP(M+UO_?~T+,N]*+JJd3W_9=RAzz䷒}hfE@R*+Xq%:HO[(#jX"[LWQJd] 9a/y$BeA`Egͧ;Qًqj <{Sաk#r`PA7#yL?췉qکt{faۃ]H_u,+cI }'k&C+'!DQA-Y@[jݧan3.Ih7fbRĻUZE{1OBx"ggyG4f\5k4Mtw,~0Yb>8Aա  f,HzQ!:\%Y]q5l΄b_FOyWGGc[ :']6ZV&1hۜ5UvZ [*PNqptؑ}0ena˽id=Ҁ[AF(~ . 9]$~ 䯜"YuJ*^Z[d{P;;p2w IGDRkV:$b[ 602AE$3PͪsI<  (Q0*H8\'u)n yu2&רQȌ`ڄC9yیgO MA>nyX#H`u?(xw{[qz,iz+KqL3]xv@CT}GdJ$pq3YQ\9'C{rƥI4Ҡ8z=XjiH%N"D$h}Tea= 6;[=}%i z:#8Fqqr5a-]"LڇG-㇣C pѣD$6F(jn a'L@K" *n⽳q^p'̂?亨@x<1ٷ;nRzPcɟ蓄 =a)KgʈH?< @D*ZX HI`5yqC­PTU~jOLg^!e.D?ߛ-SGkTj-){}>W!eByւN ‚Q=QJRvtx?)%8U mF )s䳮<}2X8l*ŶA,.lJ:x~Pu=\Q8[ -,N/× H^ndwׯ$Q9 pB37Ϝ P;#MPd]"/vh@z[(yR}1鳾:FCO4qw("dxdU,Y$e%Y*ZxR(wN/Z{GLH^1UYK8L 3 QX6B +Fx[GM@uǏa $ 﨏3Y+N0s DkzYhb>7k?S&otx j/ p?=;yK굴< l돔 Bw=XA箫SG?ߢDķVDeptw?{z@H,¯K@cpNK”§j.˘]̳ČHT Z AqŽC ^M&j>P3ˠFΗQŞLsI|~{в׎ˏ8.5EG iKWKn#/_A )I7bl#%^Y0畑-Kr9ډʚTbŠ@72j(΃u+aq"'nQRO` r@:kylLhu2~>\S EU[&K 2~uT¦ߵ;%JrMKhuyＴ nv]֯0jm3qI7qCuJVgm̬3t' :s"D8ܱeԳ-٭qKK£r. j[*:W m0F$_zfR`HdLy(;2r[o S +%QОGLA¢/r]6hJjg$* eB<(SMW9Ej07hM\[Uܫ&ȡ#h3gKC; bh`u#C)hhj.>&5H/2*4Kُ)}q aE} iQi0TUYkDh#8qYN7X$Y.a#`vB#Ώp}4b :p"#۾_Ǟ_ LR7q;]N҂G8ljO=Pm-{M_e9oHR ̲bO%yxްr hIWT8y6!5ubaf̮J>% *"'43=Κh4rFO]=xZ7&UFE_gEߔNyZ5!?xU_Aaׂy1k/"l,c$_H9)ُh>]x,()P l(~f:vW sx ,}ecvYP塇Y_u4ѥ^D)ͤ%#N"Ń+BIyhL{m MSa_[}[f;Ra!83ȼBtnO@`FEk?ĪtFKL!=.PVI{n[QНH(X\4%YIfF0}PC?'z{zy>O]cg!<5Їhłx$z+U?D-"(vj E}u40lbu^@>BzhK 4mqi-ފ YTjp!c0B@ւT HQ?ж|ۡAYasМ1JT|y-Cl8_ q=e } ,lܢ ϻ{5%mS+Sq3a")e[$㋘$Pb+>v493q0 q>UGf"A/[d4ϑBŚߣӤyb"w X0({ḋ4?il8z;/ MyCB CM؃n¢j/2Hpó@7~FIJ=Q9J:b-9?N.wO:Ƣ!Mu5G~aWonN‹HZykaĠ.!OJS̷hD) uDqZ^zP3V<^I%9VqV3q 첨;N-  iTڨcXwNHE<|^ٛuyHev+BzlQ8!e%OBeCbsohćކ[iu~ZcUEØ&0y|fi5[y7~,02- nc% CEhzkIfq\{4-nh]^yh`2];R-M$u5q)R[,O7[r_bջj2T(3*$';Gt2VsgmNpf]ݮQdſRQPϟ}nAvXOrIS7ΟUf*ʠ$N2bsBۇMmY/6- 5uzէEW)WAD zNwіtga_D{7]{ E^82'!Mn noqn3Q’h"004PoYpey,7Ī'Lw|(FUjqCw̶,,a]d*~bJ9Ipc4H&EPstCiѡ١ hZ3o<^gż?/v߂x6Ly )x},3#faIE3ùqYq)䔀ÞZ%Gf7rldDx\^ =R(nH Gnhz:m0 mˇIԲ{.Zz_1m)"雏ٸ@9̃Uq4lKɲr1tӭcJuziþ |n-ʌ(?|VW"Ɂ˕A':6ֶ(*e9"RZ9<<-DS1o{ > iaj=^ϙ %MNjs j k ^;KzI6RwD뛟N1v5+6q:י]VnYھw"Yifz&W]u=QFX ϭ10ݛJ}Z_~lOmp22P&+.&@:U1irIL_^0b$lx%˭o 9i10w4\nXee"VޘzxөB3]swc#ڀDpiጱaPzs{0ǀ(]F#X0J}3MUW:,IǠB}hH %]6 XIwx6"46 Ը܀qp~{"=*=mNZTh1_*kJp= f((wpM[ >- k]@ K.8ձCm =fԜٮ/k5o\qt\kKk /.= }@dT9%KvCS돍+\m{XgnMpD@S3)c4ҵ=T!KA%0U'yŬAnphNqd ;z1ɢ"%FV_ܪnrZ~k*߹)c}_Apܨk`M9?a6uksoKms8VT`-Ju%oȠe~ v2Wj]5n,y}iO+۟=U "EpP#leo/8`6G{ χOuH[C33dvGe?<IKQc-[[j~̣G:aa#)R/]i qY/3Q,~ksQ%.6mtQ8? 8A*5;)*&<9#髸Z:+4]P^h5PHC$ǏoAuFxH(߂˖6g^GYVrKB&S" m1PWyFVެHoC4Ƚ}YY,dl '*a7{Ȃ6x-ӅYґQELVR0wZ%P[nsMU4E_#SOO0jq«E2B]|[_M].:o8>!Լ}g_9 t9F:(0Miݴz%Jlseܪf<P%飁·yhB^ ̀ f:+qby1 ^1]g Iz@#9KuA9m#XUS/)/9|}2|}["(0MZNq{v_4S6ixLc;\Rm1^$f׵w {T gx'N {+{1rBB[94ΜM_v xP_X[ΩUrcuʖ}/!SHxXscX<1 pYy!RA5> /2Z7B4㟃BhH+aA bF}Nrq9Zimӈj@82ñ4qgnQ1m!X8/i8&}N<\fؼpl~3|@.$5 ".7(@SP7D""gH98v-ɸ14vR5aUnC]}pwr%jNy:\fT8+(儽=8ò#l>d?f)Qҋ#|O/;sO8ebfÅmU0!Ss6S+buU֐g (j01$hF8tҜza`X:Ny@3P$oVRK}#!p:£`7$C54J0">U!mf3V!A)rL|>Ӫw1iMYtϙ%=6Ғ9׫^1?Ѯvh s5S5І ;uLS m5:?fx^c'Q4:aÛ`%|dine\n3r̪}C#i٠(Q?; /$,Nx_@%.E=QFJq_@jlgB%,0x@n+oD}4_z}GOв<,~MYcUR `ZHp IT(k^$-(UYq*H]meΖQa^xZ ]o}" Iq'ww@Nv\Jy`˶78B~?j'y.?e %YL&utZti@,nR@ex*=gCIMI o ,Q罺w!5˥ïF1i((A2&ɻ3kŽ:#>B6nqR!^>5@98eWk$Ň2$3O&ukaZ'q@Ld^6T[/74H[=o)SU,9$g?n o .4˂VFwL>O eP W^Z$ق x]",/CO7ƺhץFMѴ0a^mǩҸ"l¢(.8CkIgwb܎]Nq>9ɍtd\6ț2CaOf,#*\z p9jlvŗ^l ª`ڨDA%&hh#ѭ-uckֿhuM;'´uf^83.Kτe T2 Qҿ&;BWG֊[믑e^|T^^Q4!M~ݑn#S&*.,#]XP&+HwN AZr±*mD䪩5٭"5}4BW"˹+jYsY1h}٘|oD$E?7YvεoA/dSMr0myͪ_IǪ`ƐdkW]? zUT o%I0 \^Pcy2A5^^+dkRx rƨd`Uܨ?R^}+R'+K[wpO׊n+Z|): }Q΁x V9Suf.!PpqovP+O=v݂8ӌ*Nd"I'b%h/shLZ+ ll:[~>^,0n,K/R4;z},nǭLJx?~ns~>_?u ѤgUawT1)|[:M1wӱv3]&0K@=o"(܉dSO99Qk?F /3 هL0 _UW:aRͯ"[4&aHca7Eo29gB)zʢlѢL81!cK fr: 8P 6m+飌RY~T՗8Ҋ0'#^ !G2qG^OaKb]mGbA-:K Sr5:/h 둎F=[>obe/́bU,zjㄺ(Ơ"JUo 7Y?+sxMߣ:HPgP ڙ HxR'4~6q=(+蝬] !Ҵ }L:Sem1_q "zUⶁ|Iɹ-v i~*<S|g&L^?ྦl2,b=f~2Xn}jcbh`@smϭGW }ɩ-%[W^^Mlu $/!MBw(EYfqđl{anlR=y@(!KG1xgo_=[ٞXabkZsh/*(&7iY}4l#k$+`R}PI%a=җxkUьMys.bѡ(lY;*RX{v^,ELUoăU.e !aqI_#E? zs ٦ߵhcՕbfx,g”k̟Hf2_@%i]m\ 6: mS+e^:t8\ěd0"HS3hz?={ )s[fX@ a|xm!e׶t<07cY4@!bH/ا|UɝN|5:8!hYEП&> \gW)W[QFPbFs{Pz645'[g؂hIiÓNҬmt**w+*w2 ?Wk &A-D z.EzL}i?K̒[.N-Kk-"!RaH)J6y x :Y%Q|VsFK);=E;kEFFV 5 :m"ܨ޸v÷OH,,m^yt+(PD!\hݺ;H ~9I™Mp/_Щ:+//eGxJ|{7zhw~O'VQ-x;ZBZ?]kB򅹤Y @M&>%.{C' 7rc=? F+rRl \~%0pbvrMLguIev,8lSRhhdxgAWYx&'asKi8 L܂)9&6jƋ0kF{~}ng釃twz5)/`G)[i "g yF6Si8xL!\; !IP ˍpB^mPnf|ca1|WWI H^+1)ubH!xּXbƤ q]dU#]ZH/X&.?{]^SՖ6925|7Zq5C`z80Ӎ:+dџrͣF`ʃ\ZiJt N!|xж P}Tߑr;63 ^+L 'l=Xq`@n9FJ{6\L/@ҡz"Tv`0{=Jg&5ړj,xH2]v֒-U,@k![X4ib^iV2ʎw)y@nDd-X_8vT!'C݄{Vyl8N}=Q Lq`ݰ7*͑&Fh,Hm(7FY⩾?O]ViH7>j܀VUQ>0% nC嫡 rb )֘Њv<|9c14&Ehec/c 3Ip{vʇŕnZa |RPܞ'dZ!,_ J$5 `>"94.՞ s%J}T8ڦ?Gr5\扪Wrhi\H۔`*^Ij>>âeV H&+lӜF*YY/$6lm H b퇓c~4]K3m3~<.?CLJZ'\1#8T5mx l&N\C۰~wAe%Qs"ΐ;qΈF鵹K)7uڕڝ.7׹!U0LLA[^O 84@gZF߶ZUlv )\a 0Q]jD8 3k5G4=¨nl;0SgT?f6-ʙ@mo[(hmߜN<iJMis{w!d@$վ9LI"()陞= QOsê8d'Gy9&=!O4>AQ-q/#|o+ez$h &ۆi~`=@A!EeLG(E_h` & (j!RMye+q{<~ַuջ4XHq7Q¤N̨ͅ#lKU11/-, j$=x;J0^JLR\_Š} ^5ԾeHĥ[$,m)+' sաa>KCK/h̪Ǽ>>*@k JxJE$wqOxb_jۂeۋ,AO=?D-q$èZw4-ppU2j6W:EPumd_.ÿz (HE9l4%9^$&qWcW j?o!?7̑*m}>TФ=kXg =4˅&]f+TH)G62',a%ݙ|rq>ڙ+?"/H4ۥUWŤY% kL#7iv.~Rƪu֔3L~{)oT Xe>2F#?pވW~8 5B6nZG2rVk(:;P}ӝH^ϪY<g\a+P {^5+PM vI;I7'4oC3M () hvaq<g0+BMMռ6F߿HN}WlbB~7ADA1zY$+@X@ԟ*EBt}y@. g`cJ-P~>*A;= Tc֖|bYd6f!j,$ή[hFϣQ&TF}X5Ŭ!HL#Ƴ=]G2[{MɄ"fϥZTxY+vdN*K7^\懱Sy,S .uɐ&+,0`5b!R% ٣U<Q>HMD͡1HoSyGM웕FwYakNaV 7iɌ<'*2e^R=VˮlBCBšͲXX{S#UaZ'~$^ ΝQ_Ǡ?Ku TQ^aP"0P_87eLmKԣ:5`y+X+V>Ҳ5ˏ3*Y8ֶj!&@Rr܎,p/&yk( @d4 s~3 p Ԛ5=x`o/Y˧Gz4>ޫ僞2ѧˋoZ(Ʊ08psۣҠ_TWniѪ"'-F :ʁ$mcpsN_Z]SD2kMofLl\+ֹ0s7][bI'H6sR9,/ cV@Se0YK6t60x+tA+|),3."h˰=_4w˒^U- <ۉg 7]l>1>ardQiqD3EK/aeV)I$)NcI /b˩H*ٓki U1޵{;<S݂PIM ~Vtֲ7f4\mS h ʐrSHc|Lj8R(*r9,hF܄wU M<7~i/JeedM㏅`lS`Ly; l048-MHqosn{ b mL=o/7 %摥_,YKfVDw㤔ȪksB Ԉ̹aLgVH;a WΉi/.p&֙׺Jѧpl̎^CxwK t<)A5]ySCMrgFs ̞VA m;Zg&%Lۺ&I(X {F)ӰaRpz&V$/EӎnNDqXop=R5wAEYjY{_C1"8'\_zh hu񪥍J_/Ud.VFsmXE)t ?%;YzEb Sv#gٔ>%;=p o;.H'bjǃ|@lc#.Im'>.}Z80V#^,*j,)UAZӏp``ؽQMq=m߮ SIRW"i vM&ߦ 1|ύjKHoe<|8\W.f>%t&ҕGnϿ{I )PkRh k0.Q JcɅg?>,s*7b$wU(*dY޵FשXаe9Nڡ.w;T$8Q7a!]p¤HbAh N1v$`u6t ~eƹxy}kc*G,/P0to k ʪ~{KlADy~i-"7RЦ91idp)CB%xIw&P^ C,-îNi]>NlJ6׭|rcwvg{R+|+aYv=BOxDMxY kCMµ^Ĥ%!$樽iYlk!kZ_"MbwPP.}k`Ow{dXXJ[.c{rFg\OEk.@9'% +f6^ͿC\JɻG껭G)H pmH;)&:s6nz-uBM\z4Nvk ߭㉵Gx{Nv/3 ?)=F eČL ^]0PD{L1"g Q+̾w5(Aj僆k>  q#q}iPHxx3C=C 1dq5*u?KrOA%1XA(~4Ӷa>*O}>>M2nB^Y 1jí^s& Ej<-A5pnbVۣd9c]ipw#t+9ɦ?CWBuL˩/*CL\l_B^ "EY|ɃE^rȈ%l5M^~PE]NGփTjHݫr_dr3`TmT |g-[_Zu-iT$\O%D O"~6܉вmv`1wng1"6c3.?X|0M@fY'Dgj  j_erF_zUD3` ɦԘfOfQIǨ%)aλؓux^v5ϩ [IҲeT'`. gD{.0P\$%5j ^ Kje >A2p͢)@87Z*~jm%,] ˜U.rMj)BɴUXKeU^VQ"7 Qq KuPTG4#|-\(a4H7x w_8!HN T@#PBŕ֖a-hvfP9s_ [@l'ޭ1S/YCۉK~ΈxJ!vZ2ge^G窵̜ 3f,R, rO%ny1ynnDI }uEF &CUL(tB]"~;gnk vt[Vyׯd3!m:W]?1=W#]4;A/|@ M@%]4vVk G $3uei'GKKFӭ?^#Fng`SŲi,!@6dFk4E)үEo|;)$K&Npl}XW d Ę|} S+#}cSIN]1hY7Z :Zr.$] oNlF6)pDGIS01Usb@ 3&n C6X$&Z-0lauc Ћ9P'oagoL?0 (3}{QiSGz(JBDBb@5d;Nr8eYI[GٴsS!Rr1}Mtr*;UQ+I7.>_]0&,e~djA2DTlDpODU`wZ]j<> 0zm[Om#Σ; DzE*UBqn'矑]vcz}# A=z /1,5P~|7&@8Nx"nG:Wa!^J3 0!WmؖE#4/E:0v[`7A  bw+ SգQm%H]6]tExw7lo,Q(+L;M=EiΟ[$5XL1wSZ?t?{_192Pk%or>e_:"ihuَ6~74%f%KnQ1+__NMj;i0۶'9,wI8sGj'vj侜xjk3|!H٭*rVP#˽[f0gk{Un1XB Iw0닥<R& LsdLp=VB ƨ.578<69mwR;8_ gpo~L XhLז6@ދDqY䟣drj*:NOS S n/N>2C+kw;O?j9zc 3:jcT,]*hƻ:X1ѥC:V09GR  a9X >(QF[۩&i#_@梫h=L'A܅?&p2L̬ k@s9fmp%SIGŭ1|;;ֻvv'Vuݏ)BQ Kes{/*n1-OKi7ǂ6\7v.=mw` EE>H%f~v` RPƒ앻6ftJfWToZ8B=7zVw,!OGC\q6j+|n H]yS1Z5:_Y٫Xo_rnC9GAx)ʹ}/~e4 20زVCW-!2vW-p m Q0=mw|?̾Sy%z8`wIeAp%! Kӈ|L}, |Oc"hӵ*o+GB?ǘSp%y ER#BGgP2- aqeyL'n^50}X3Bk` D'!E"s*ՍB3a'iߤL)]M>@)~RWﺈRq,a{P苬OHi`qu3V%"zrl"{2!^\vDԗ H>i3Y{xypt /?ŕ\Z#Dɑ.)eնy6C񤼣Ga?#HP`BBViy/'H2W'Z8Iy?$[4Dl` Λ4X?-wٸ. j{5&/quof7DD,RvqB|KkR{m)93 o,JTq[}0 9Y)0Lpk}C6,.J ŅחAy|~I14GYzܟ)\9Ԥިu7qᣚF3q LG? yڒ&< xB_P|/l q=RdDBmΰ͈HM^G?M0FtNxv}~ʷE(%&`u)ߪWv"&QIAgo -+4B&*jpvys ܔl1j) -$-MXN S/"@ H2ֲփ|A:5L゙1D,Nf܊[qwLNjZGY8~ dw9ۯ+gLn,}B=J&ڰ ʆۺP;Wf<>Q C=jES-Vkn6'iG.),]Vވ2t ;S갲'hy7}"Iz{< 8,[)_`γ 0ͥv-䟙e|g&MD^d^zPAP\nI ѡ3 ӳdv.}'e'1[mfefR!1f=b=a}Vh˲FIr^ϋ8xm/eW/64Kn3tەcDJ(m#(O>'Q5jlotxG՛;RltYC>w"\_jPk#3lzIVe4)! Hrp7%!TkB6ծc}҂$)|%(sy^O+'*>Kz&RZŰK(Q{C|aDIq4qSs[fZ17`ȁk'gOܹn=H,nzp)/jp+4MZ,;:L|x.tb{}ڰ@)83aN):2҅`:~i~),AAɥz/|I.ypwm6reءXsg[Z}@BT^0Yd[=$A*G.Hqkܿ>2%'xX޳/Za]b15Rr!8=UO! |MiBM::Xڷ:΅bVS55G_δ7{F"x/@-HBqO@MD9z9 AZuU3Kmo׮900b7jPp7 첞Za74 C"?)v99(/Nәס UxҲi gHA-ncvj#^Mm35_Zˠ^y gn+˴suWڒpSܮEab3:ǚf{j&FhK'ђ,,R7[&nT-%dϓ*r8oU!j8Ua^.˫YrU+kU9!3yu)%8sC[+2R$]&>'Or1Shcz,r)c5#fD^v.`!Cdv0 x^T}lFX FpMFCݴ[{nD3p#x3؆YuLx-O"k7y/kJ,3 cB{ >mؙT& * n=7} 3h|DEB7 :ƘZy j'V+"dIw#*Ko?>l2\6nرDp dz]" ř-meds+|mwA8e0N^䱽/'V./*:J' wvv~SVkvr{}v *'4%)4@Dd]I,QmUa6UTѲ'_c3M7tIA>,;E _AfZ҉Jm>iW_\^%2k/?<@eF$ Qqs61Ony4䃀y4]{(guJJ)s3smmd|o_\rTaYS ܷzMpyL  +" E&NYELWICUOT,a0єv%9Uˆ)X 7R,O Pvœ-/44\ѤP<>@@|ׅ{Z_y%_h*%FxgXR_b^rIxLAC|>QQ#ggf.T{V 7dä MpEF/@)?$Q]5wD'AeRNe{7PVIl)̋Λ I37x8۬MQ;}B}P*Fz ,-#)">4鉙< ʽ֐!#Yu}e˗HJ}6?J_9Dtp`QoyE)#$G@?f\0msi2=nӭSfBot5!srD%Չ 6aSswo~WF}Z{#5`ꮮ8G֦Pk0dbĺgV:WH:8,3^y(͟R-y*z}#`XLe (lZGf1o{)K+.;8} rJm.Rˀ?\Oe2/t;sx*G}R[ UU<_`T'GIUH8DW9iZ0XXN͛9R*C'UGG$ҕ&cJޭuw$)t[335Kd?L,> =DSbJ_ -E=4!fH¯&n* K1į{ѵ!vz ΥOɁr*4'T9Bָ^9NR2+YYkS&c9h8 nz5v` 19}ED[p<ݸV;\Ĥ~!sܴ,k%,X{CЍd1-1XB>+EZҝY׎  \&kzqP0. E)'iSUqўb/ 5Ʀ_gAhOJ9Vq`LՃYjK^Gn.ݐ?edH>)igڎ ؊w迗9ț05(rb^,w?=¬ZdJ:&E:yn0vX:^]xE3hТۼ. z7*E@}a~\;M%sXC8r /%!]P)kVˑ@{S'j[i@͙J9n%_ !{VFp„&-Dq)idj\,J,wtuȭHxML'HmԑFV>%Z>_h_a'g~j+p-IxDZȸr-\dIflUMAS)b66\S|8okF2f9ڇJm݉86UCU(E޼˕r@nl]= B0%.AM=ЮcE+Nh Izw>vEP20PF@>LR@Pl'4$gye5+QdƜn' qߓ}#?hls]- 暔Tjjm C6۲v˗c٧ɨ^{0D`s}}[ jC싗I D2r-nN#SH D,ߋLJei,{4$ pyg뗊,#i2yք"Ogz'%{XX:y'*Yߚ"' -="~5e9Vd3C D}b"̼:x.`D10ܾ&m{A L%ls)< _h8Xe$!"^p!dg+Kă(Ze'sXx wȚx7'YJ,1g5T&?rvI2HVYMI ktY C?Oz h' )'BC!Ȃfq@wZQӬw44dQZϽqU^{vEi)^ki{t_"jX?CFk0ǵwo[ h1 zgU`ʬ %i|HQ_ [CW1Q6@s{<@c; O]u % Yq:SL.M۹ڛY2Y9Q;aPB5+(bV9[*_B,&C9*==SUDnj5$n9^4~0$:pb0bXOk\ > (qG< M4(tz]XBMwhBTh8YGN&ͪ#2QyS44Xp2΋Æ$ȄSGWQ{NRU=6vC⴬,HmP af-ĢG FWF5XoҌ&MQL53pMHAP6?+beM;? c4KYZi1}Df~2z1돸O09LX llvDp F$~]ʈ] H˔C9S G&Xm Q zt?5j }{bOG;E8́A&~퇚 +OGPgE$w4NsZsPr{W=4aXAJxX QaN%Tȋf uFT_%# %6?.^4c )oro irwT"W{AP A3ݑ{'ǰ5ldW" X Ɯ"d0>q돸|r}9]K9es?¹m< H-bFJb|âSA6PTO~XGh3kN3GV {/Ǵ܊KDyVrPezΑ"w`ScͰ94~[˯MԚ2(5j\֚/vNao?H;B'F@:2[F5Lv)]8ʌ2_ߨƠ2R(K _ҿ2~1>ѹAh!;@f4!4\ b4!;֟ETf{s؉a,?+7fC; ͺv9!fO8\dA[ܜ|׆{}EUh^aMVa "3O}*,1p{Ձj|Hp<߆hy+[lre$!/mL0%{"L:9#1fpW ÁS>ItG+m3*cL/yD;&*wu, 4 c]^*eu7/?zGB@Rh]nqx#cq)*[UcHx:e##ݫ:j\iNʔzO?.0A{B_V/*Xj7mҵCc Viէ 'Ҷ3`|/ )a֊ma0^Go[W e[8klwyl XmdF9H.!?ECӶL BcA;Cq:n Zn!{X{ɇYLd6u9AIN_Ay2gV^}vڌ.% >iSUwp*P(5Vdjԯȯ O+We) i@]7'Pм5YJ}H[˟؂ {|9@ s FmG+t<8 J'H4<ج8Zɐ߭UPQV)Nq8VmxǼ}dbR2[UU΂lv!m { ,;+]A2O ""qKjfw^т_\}:utccnwBIݸ2f0+/xR4=lr}>h@M_Ąd$Ks䣛5"Ĺ"5бH'L48WIxuIDL S<7ӆkrYWŪ蜛mH!;{ae&B$4rS$9 3&ϝj!3vkbLja iC^ϟk]|@ҿj3eg{Y65I1M#9Sk>![Pd} , %5fjjy3oq t#\o`6Dr@176 ˦XI}l OzfʶEĘ |،0#6?s%$)PoHaVzׯ1t#5h3x[FPċ<塥; M&&.%A8ѩbr=Pl^vf +̨ j;GS1_"<%[ꄬ+Pv(k~N?,kMd?H;Y;Ѡ\"S }J.RVw~A'j7b!4gP.7duܶ( 0Ӿ^*,_(V)P^4fi'pl7aB{Ru3[QNi{ݪߘ1Pgl56Er;מ$ѦPW"?):;נZtk^(GM-Kᠰl, Nឥ~-&j K#aOD/u>mtr\L3Lh1lw:yAA2R] 9D(MB'BȎХ#+.e28'®2/)9z$Vo=Bo UT 0k-v<޹>wgsZ~-\%=!f "$AͭΕp(EsQ-o܄th1%B2R1YN~ ֗8 3}gjDy8>7!2'|T'}*t;/Pex--;4F3­ -xԆXz3E.D`>#r^OU('̨5+WL3gLKqI74q;o(utJn5TdﶄJ_H ᢕ3E@AELC'!R:ƙ駆Xux$';!{Ϥ^g.+^Ab&FUZ$jJ^kXc+^ W5_= vmw=5{`'dHC%Y 3z\0d4Mghtǀ1ùJ|UOlq::}'*$90d`dėUB^d$/R< AKzv-Es$W@vG6rk 擀[FS0u_ovPRI`!b E+հwl Bk'uP5S35COP=˽V3AE 6KvR'H)C<"mZIg??X&#/ڬ֬SpsuW?R`zh+[sRD!)504~6ŖܷYTԷ g7H;s*J< k5,hM0P"-xCF33wĿ`UA% 7BiѤvwnbFA# 'tZAѰ_6Rao1Vk U IkLYYa,,wX:B1 [;܉V z5PslInӀ#2>u%X,~K"B6FYDZ>3$?S~Q $jw|piD|7`qKgkhH#hl@s6DF+XJZAi7O0yN# e} 7e1xPO=uCː"\blBVN2Aܺd.~CKzm~8TX5ɤuf3rlT.:1 9/0i[r' 5 z}>1~hnEɵ qc},b>2b4gqp0mC~E@'RQL:e72/!id_}k%T*?>miMAZjƩ밽ǩ}obҬE_ys2sď=ä;cX7ޘkNs*zynO`ak[K92E19;SkJ"Z>ҏ/ޱzq4֡?ndߟҋ'N&^d*vF[Y& _ 4KB:OIq =cW{B-t5)z(˸,XWzy&Gzdړ>ը%kIv;b'YAu)`4h0 GZ|O#.V7-DÁ?'njSgs`6KP1;9~us3S7=\sB!sg)ru:X wB2b=q)r!ׯ`}^Sty32j! "IّZ_nve*ŵ`B*c3}~/o.;v888P(ju<9?ȓj$ё1C GCJmS(KG}ӏLGx\sg,K\ \Aګbvj u`ڪ c4Z~jS._+jIRvzDC}ɣ8h7 :cZ4eY?Iދe:q~kW_]T͖(gi8*gw<|lO[N"s=Mj~_  ̆le237v)?p9s# -N\jQyҼ#Bl2u ©@$sj̆T1zk ApKY(pd+~X l@;م''Xr$ع^%`(ykk8GTq+C\Z"$06q:L(sp~3 *h͟1'[__FO75[NX&5B/:6oLiKT\.*/3 ?R ]#\GۊIc7C.|؉xFFylenҫ8 >9B/vކ{yF/6ˆeNui7-: ,B?'9D`y8M:d'.% V?0/`ztz#\GMFeZj֍kyli1k*=s~\rMZ *A9.3ڿ|qm $OeMdSگP/S[PjS5 #ܯXfSWKm9)mxER?Bɜ5 VHȦ ĂUVv(1FÃ;'(9"YDn;%[Dg Fרc n]V c'S0!Ba衲Yf:TLW/h*AZ;Ej LUavAl}k#˸Dh\$I7Pm-gxD[>Ʊ&[6/UF@*2Ƈ1'N޴ ͚Y/]p)_$*<, 0^7pi٢ߎ{ E6b8S,z</μ#҅@aLs, Nh^Cgf"'Wwq2.|7HJP^wjS^}i\ϵ?DGD#~󽙘U/ T0@S@aɲJw[s7$uPhzPUz $wB@P2G>xsk9+'9|F+AEq 2;u'Qll~Azpf+qracMs1ȅS 5s\7]|F9-Z Y>Kqb8RO4I^ ld]lbA0=DDv, YH!y^eMkj\-!=^ipw]l"yO@1; _AQYgBP X;}fg7+qR^|8tT) tV`J ,3`!< =(M/ O0vgB*M/!>gWTq]tBOV nĒDI,/OX^::6vb3V"ơ8 6 lB6-+Ú,,_ʁSRÜ/ģd)P0şqHun֏'ى{,ߢM-_zu06z,W2Թuu@"l9kW;&\ [_&Pԓ0z?3Я((,r9DESdgfԙ tnm 5/3ê˼mºڌuoٛʨKhf>X{@ɮn*yoשrdn-5[;kO\Q>z(xw1=`+hFڊ3c)iBBUxx[Sl ~lD-'2kC`50t2ٝVжJ^c z{aYeQ>V/A;V[|(9tȁt KjHGUFn2;|P*xQ-HH*Ǿ?HUg1`rB¦#^M_R ݓP:,.{5C(}ԗ 뺹ALQ-jvF;s/(*XGg3N9 [\՞:DNeDfl :FSɺv[*`/bHpyit)bRfHuoQ(x`nxlw̪A' =|W^l,K' Ua 5#Viw?w 4k^w*.\wDr\R2W eS]` [Iq+*^ca+*GbF|%| 4p@},I6M{7HSL(_a#!դ6 ?M+J1 #UC4 PqH9d^Tȟ?YFˠGZzivG06*?ՙ?ʺw$';A A|)ˬraP˽ P]Vll>gC'(#(N{C=@1k(ì1[<ИaivrH:z̯; >BG[.X(KNJ0EL3c?]+__Gsl/@6t$ a|Nk!'pxZ*Ls]tv%v$]EbsjD i=y%6UՁK]C2'FuD]=ʑE!M~Vd/:r?j'*"e9ڛwR_v@/b]rvoy^8Qe @\1 CK eU=YLV@(:+Ed (upJz:L1+Q+3u8`o."\m?9-ZZjL!UB; iobgzE׺=]k`:,U;cZg&(/z`g ?"/ c)eŅv`y\&MB38xBEH7zP{=fWk$Կ/hŞOɢt2O:F$Y+=74d;תdP88M;QZ&{n4QTqI G_pDF= d$HA /sXBK'}:Mh' U!hY,'x\Aq}wj'wg'@>ɹվ hi Dm0o$mVNOx\!Dՠ yld7ƋCb+\Nd V)H9:s3i1/!SW]6lӏǤ(opnwҟЏ'Z;gjYTwAG eh~V!isHO6[S&!&1߉[Ir=-%aX@s#1U1(L~{zsTvѸ#EV+AG'*:O147Uo<xO[%z(ۑҕY8R8f +b4]&T lR(9tuV̏ӺIE97II_ʀX_h}%JuCH=,k  _QP*#eіMC'9"!vW#+n. HfPs @@DҰ"4#5˻r$BNLX=Ȕ0pd ebiSYt|;L+|[s J7X=tcNDۆ*A+NZ%ݒʥJq߆Jh},_Yw~gnqEm1O=_uc2)^"l]XaV"58NaMh8&ދZ(Xmdg,; cà+; DuϸHhT  9%!/#9IEWAmsxh?UIbh!x kmH\k x=N61;_4SyjCG}<|i$R fWL3+!tA ,I1\q@:@3Dtߨ_ (y,f- K(A-aLt^/ #Z4ϳPĴb}gbdt ` n1@7B:!DNyXZ|LOHJ>vW1oMQ~LXHQMDiC4`ʙsQW$6Ψ۩݃"sD*EYLAj4Mh^Id\E3 %SIFF+Ё'q̶g: CrjSXM#OR+! ]ЯRh u/@6smm&΂A@dDsL:`AouuAw#HSm8qg'"\(S; ,kӭNgjl*u<`ޥgUTBTf9Tc*9Yi5W?O韭ڵbZ$4df,W2j UY !p-#a:{MFA Pc\FZ_柾4X )xp~oS]HGLT{Q2KgfCo7z[K4dF1uӶA(G78y+r(q=?_'L76ciFFsaMO?{ 7Jydwj*}bnWOQ t~!݋reѣkvz$w'v+Ld9bMZ\)ԩx$B)?C7_ Њc-ш)ou _It!⧨l o{n#wbb T*_>3)sŞ;; _G)⓺լ9c|FQr଎sSjz׵hauH3Ap# <fj?a#`m|S0vX` "d͎tdk\}Cػߞ; g^ Q8 X-Hk]R6i@l'dy"9<<.ȼ^`dlgCR+ i\KǼ {u(TuAMR%^x.S//: #Hngy ='C j`*#J1oV(Df ^/=i l)#Kt^OŎk3cwxTi!}qG2OW00E?>G1Ԟcf^yclo!jRNZV v}SI<G:4;=6Z4ieur! i%,WlTn?Zt^cb}d z0q >/1͇ S5_'ew@?Ԗ2"oBNzT%Pd˯ÖMggW~lD+8n4 .#)j%ycatw;.J-5s'`(̯ Ag$3C%( C#(XGK,{ ȜyV:y}ݥ"'UQuzS$Le,;R}5R_v/*95cK.m4]Wg-=T( yw*(B_< E8m昛xࣛ%cDm/,ʥYNQ+:+}}dp#1/-=WL'F%ۆ>l"eB]+~*d_6 )2U:!n5-XX s"T B;ǘq_㊙^˯{0iX`ͥ+ݑ=Qh)):\7mN[Y8a*E>:6ElaMEx+ךhy{>Xʿ>͗VקrC -m t+ݸEbߑZ t4HLM4v !͠T#.[\9fNw'~.ryI4L9=?Pp[ @V/6eߡB.XAF6mU=C/#[/Dsg/Q 0cMM?fhʵD2Ag56%0z>ѹtC\vcp"#2 L%4}rYf?]]#e:i23]kOmDf3s6WlB/Qj u-+5dZԌd8b; qk*MbDCg/I4q1k_&lu*ݟDeP8#ʬ| tUi)g+ꖅDTND3XkPxFS~NPdL h*櫽c׭Gp V(>M@ wk`A4> *e^Xf:k/cT;4hG'rKPB 94 BƊ@>F' Q:7+8,Q=J%]eb?U+| OK՘ijjfFw mN0JPHssQQ盨<$\\$fM_ h2^Ы.hY{|rԬ&gy)5]Tmz] ^ |6xup]!j!*ڝ/笽*K.Zf~H´X/? 8x"eJhh.ASs\gbv;24j'SFAEȭfN~,UI++|)U;D?]iC/9ʁvZ\_P,#vU [vO34,Ernĩcv=X,g,* =f^S|wFuaHڋ 鑲|noy| PTĿMPV:sԛ xHIj0k{Q5ww\xG}!c*?tuf[;VdT l8k=HtEA# c,$gQ<ϱ69Udױ !uoE5B2MZxNk?4 m>PK|ʭ\ I[pfȍ[5ZVԩѲKe+fVZ+ qA,{.NaWQ֑~HO׭@t\:3ҿoi`9Pl.S. 7-M|I5̄ȏwM]lLI*CVtCf`\a`AmQƭޣ;ZZ -؀J $#wtl]1D Y/ڨe>*Ց+/r-憼rv0t:iVWx1 *ƼH*y&SY~OYUV-w[=oK3219Xj tlUW8[F5tWQ?+tZ U!<}, 6E q B_4I趻Eo-?U)?\N.>~ ;%l.^8b[U'hBy([NU_V)W@7TlV U dkajѡB "C`o.,&Ql'g> mǮ1F.s |Mьe} ?]>U·VVoE]oܕҶ.3]S㯽e ƀ -4l9Ŵ A (z85?Mkg3 {e.%B4̀L'GrJ"]EV# rM-.I{~ϥ +('dqe\9!Mlqg Yg> <éD68.o#ފL|A9 ϚIۯ_WMicN? 1 ɾy5.}诩Y=)Eu ] #"&35ϴ WP^!*kn ۜQ<{4 QHmDzm7U[u[ ت'.5 = _Wvs^\҄}|.yi"}%<>߄6 FÝ8m{ ,h`cts%'UzL NWc[.gG=ySj]Z-@FG14g:+8$x^զx۝$`MOw;n2).z^1j.aBOl涒d Üd.v;jVka+gnjZVr|_?wE!|:CF@,hmu\BE5WŔ$)Eyj"ٺ;lǙD8;jC_h]P t{Tn CyI؎Ͷ`!E}aE٨ E'vsyeUK}aqVKB8FYcم=R $OǣDD-> 3qTi̓"1+Ś%]ʣ~r=lfs+oY._z|.Ȓw'3硻fXi̴ͿLZI0o?YYXat/c5|^o \Ẍ2@m R}]6 3'v"XY8[tXZ#]e]"]Z So$~.0@9Z &Zw6V%DfBzƴ_`N[J.\3β!er~*!w;,j"Ƣ0T\5|~cn+V`L0@sx J=B3H68Vo,ΏZv1dʴT3)frb4}k}=\@'p P.<Hhpim&Ϣ60S;՟)̒I84gdgPJoYNQU{Zau뷡%o^zf@/bSgέy։k&mVhj\.AoND$TIb@RUx⟟8=8?R34,9~]&`sz&0=UV >47bks4Q!eܖf~E!6F1Ӕf5Aw?q80QE =&؁9!7Ysfi5nV&*+$\mO 6'DH.2I&T]rʶ`~dg/(uGYzҞ: \4Rl$3atlmK#^ңnonhjKm*mĎ0@ȡI:EKF:hܳDc\4!vjriʙPl O݊91!IFpp11LD#'NHiGT\xbέ'ǝp/(;sp ,@9 ٚr :tl_>ںWdJM|H4n]BOLwe&ܱ 9@㐶sݰ =g4p?:4F82bXO$2J[ "ChyjDT0'q a;ާaz$JԶV 롪xWI]HI^-S7|q^asn>ߌP[{:`y*Bn갶9r KbJS)>Ͳ+ҭ4|.!+/7ꈇ^SIrEfПnlHFp\p( QT/WA#%=!d6%FnkQLy5@GH41h>5S#w[p2Qu l݇%)*O~t֯ȔCrUfq-' jS'3ԛ[\Z.^OE_Jr?%1ۊ:~+ 9ٻgYϢq*<?I_Τ WmY˩t(*k:achN#m8LFYCaY,zOcfuGS\w1#8ԫ]trN:+=<^Ǵ,QicCcKB.{^݇zøro)1X`qPi-??Ahbzab{@٬ .yFhpndrܐSniLBd {.gǨ^L܎ T}eD0|P7ozt*8MTq4B`JbX6QTɛ9kdC\Vp0C}ۨSQQ#IL*RxxaVOҢ5Kɡo>d^y9 ȵma |Ɍ BɠT'@`;&fk.' ^`o'êm K,2 uu?vtOje( K(b>"b߂F]d# Y9j@jҪm6\93^&͢n8=l;X.İ\B. !Z-O) Qᜲ,[Y'A`@?Ødw;{ rbx=iX$ WK|2.ޮ11U\ڃyd/F2g1h;EEkjOC>X|dcVg g)%DlU3#M2ѵ _Pd^Y6߮b=w}caUǎt2O3 L|e%$!];NtEP,!3P4R}<)FClqo5i3Jz?m&sׯt5$W||>8nDP ji\z G6+B5%c&P:YzIZW5xkdk%MV~/ Ǔ*"?ñk`ݒ` _ @Em}LV3a€b~s:Ӎ)T氽Ôs\5R#,byl6$V,75)t[@2oO߁xCGcJ Cѹ}Y^7B zj'N$?QwI@)It$ΏcICZ}$Lt-fEFˢC^Qa:yJJԈT >eZhoyM͈)7MKJ.I11Oy'~zAH~C&11M޸+AX*uLA9C!%$z4ph6xiG p֝X)x3y~Rb^݈ NytSmr4C}fvE㗋>u?MV`&wl)vlzCGY =1!<1 *f@LMʬ~hXܣ~#cὼyp~9;MVjKVajVYtX9V~:zX/FrR@^ef7Zb!zu$UWWDp{?^}[up0.~4@Cك+ݼZhvwkp}XEUW 'c\e+'LZeaf}!'>m0c2Ls`P22i(ȏaz=bLvNʹE ?܉c Xn([K<;1ƅZ wp >AN}B~ν+یu ~6{5+J͏!rDp3p=OŽ}c*CٝCzk~:Ӏ%q 0^'96Sǂȡ(yGRHZ]o=X︹  $"٭~Lo\xZ*+#^wVk~ c9i€$<Đn=۵gG׬B@ܺ Q;3)ik'"S7`L;vS|(ţ-/`:jw)*ÉPo-5MH*eB1&*_D\>lHa)i*ko_Bal}uUĦ[-«Gªݳ_SB<,(&҆qn8+4"͑D~$MW R*YG~0!Yt^e`T%nA5J6G#Fy:jl\X"ac8\w;y#%Dcr?/zKʴ%WҮ׶'EҜTFmmmjYWV?;jo4hj1⍌7Ձ A&GFI3 ;(hzP\,+, ,T#㏬3@Ӱ!*iZw _1-frz6@9 0v.\"w0ݟK7=n*{M]|qyEܺ\Ҫ6ynt:ZѪE:X8Ԗ;aegI_D4l:Xg,574FuK[XFn[хc(VKQpNʑ5 ~m;f" ӌM^*OKZϣ~D#1Yw9 %1_U>Qwѥ^JpMI-!/Y|W,1^#4 ,)0' RS3w99܁II. c,P?x~N +4{hA|Fq[51yAlI1yڼD# aܝ/ZJBI?FTvNQ.\-Kia'qєÑ]۫9y/D$1"TDS/Y6)*jT`Q EQ0K}j%+~Vc</M ! [Ai.ʎ] vwXJ|#Z̈&d:nX~:=ԁŲwxCz^WQFI z׌:uNAٺ1D[Jj#_B`"y<)z9MiR@~\]ܡi ۥD\ /ZlO!8FU5>= j@1 /ٔvQ«pO1_jBS2TƅHlAq9|_8 rs}+6VLT E723׼ȐpBVk[ςI!~[Z>o[<b@< bs|58[vELN]NUuhjXӲτ`ta,1jyOK_`n 'ĤKBnigYuD;5!c QE%+w'ڹ?ntbotZ^{#{}Nؠ_ aBH+60s1o{5m˿D|ӣ0GwW'Pwj&*StքWmIvbNf!xr0N SZ&vU`=gFWH"gosR ^L̝MmC`/&o,ۈ*C4GJh3]Ul˷C=>%Lo(f- 2)psS9-3;dLwol@>zS~.H=ًU"Iclm~"+=aihIId$JIݔ.g!MrR?Ħ /'QCͬ=g}T\K/+ybew|g3R IlRBDS-Og^|Ch?B]c"R JD iѣԯHԼrШ<9gP*L¹EAύV9Gz}hB&ҳ#CeM-=͚ް|(yfnsՄp;G; D0~U\۴Wym#V cj"6=o@5f¦v"Pnb)T,%WBoؕ33D%{I1#cA͵[sim4% tBP~: {Klo+N;N8_`h&ԒpMXkxLQL7ڍ7T 18Xx}ɷ-mF$9j*";>=(O1bf"X 5pY:mD;(4'w*<CۚBUꕷ*E+8^:_By Eп{^ &a.X n]umiKIRf̱Vx"T|{1?*RגIyFn#RnH> Jh G:F])qPylNyKkQsfd! :+ r݋$3E"MkY2iDj:7Ay1 /0¯b<&Fz}"ͫX6<_іಱϢ=yJe&W%U`ZIY4O8 !y9@wþX4jd'p2--fTqMʪ8(J ?ל`l/ϦFU4T91n7j.#] B|^_Iv= TIb09\9IsK3]8ldCRAU|?DD7PN_ޔdy}WX٘bMOY ;'q5d!^v_u2H3+M'w.I]|R;H:Ye1]VWMf qE:b$IegNv#kFȘ#.ЄmOCꜪ:Bx>""񑥍YL סRU<~x6_dc{ L>C+KK}Җ`W@/2lcnFH7sϹ%[/Zi-)ڮC%-0@6m|YV]N_bO:]'6I-#%a]1k5٤]~ˆ\&&Ӑ auxLOk|Y3WWmZZ-/mFQ/D] Hۉ8٭fQdmqMJdӅrFG/QukO'֜]Ҩ> ]ƕ5c'ªF1{GlNS;-%ߕ%:g"(۲;VЈU;iPX"n"0ΰ2Y~+"21̐ԥ1ӂ2ݺ2 WQ-Y!y+/۲|,e)fuJh>Dz̕E\&f$DƴblSpgN^?u՚Qq{"NP:ǯ7 ?-jBS!D$ް[E"͂ڥ/&] iH6" FWxb0|u~Kʠ ܯBJRL(s`RC.~ݱ:gGi^E1[!W˓Cyt( t+\Zu(k4i;T9aթ0c>X$ݙ7@਺Dda+g[8*?\=VnSzEG?YQM`v| 8Iia7)f Gjq?K?E{5/%ޡ ,YXVX7 L.n?~ ]G71dP 6ɯ^5:ȡ${Uqn^כ[B2#&' ¦:>cKqh(@oxvp%lr+n ou%N[E@쐙.,nBPy$QWqڿhp(po'KAk>+ӗډUi3Vw(BN4p%Rޘs|"pEPn'/gwJ]X zl c GX\oJJ~ØHEj dLrIPrD' go~ǻ 6`#0@$wvWghؼbxkx~+ѠGrJh2(v|v:Lxf[,ړ(TZ#g6ySf!mA3WVmp0XCwK:pRn(Ie%wGN}솳d墖 T9 o2yu1~d=ifzsHbEh'QMP(]v,:gE  .pn2. k\uIώv`G!^XrUX,4^PH<)@9Pje5k x g]6inUrkhJR JxWLⶉHF`Y2e,#G]7h>j2!:&mb oS/3**Mݸ'~RhZ<0!1Ϙ!`l!*GNj h%YR"IdxC6W>e}P@uʑ % GyK} ړsS0GFtW]` 8MdKps+񤝗%OE9^$n]oQrQ(ts,63񏠼j ֚ X.څk2ڒlKjBJ!NaOTЯ|hT@qI7yPhACr0$Z &B%Q%.&7dB $1j,^$z$4@#{W~Ca_2OE[`@My-$jnU邰+6J̎] _˾*> :v$X1 {)C1ɀE?uකmBȊ%lNcwƳ "^Ahӣ/פ ;4nG/^!.Ɋ|0&䢆+cy\U9YHpj z{؊ۥ k* KTɹw(oR8]y8喱ltLZ$e 5Vd;c*&U[-)Luw6"hl<FGj \tTOgG[Bq?+4PL e#>., m9ីNcflxaOPS%[-XZ 0,b^vIE5DZ곫XwE|jf׻4C72>cݨ Qc_ZwfŠ?Cmj=4zu½>fɊą=}nezT=Q.&vhh.jnl~Ӗ?T+3/qwevY2- ;i$zPp T[0,:),Vq y3%ElͯsR_]<˰$H{KG#&>NrJ[F [@ܷA5y 7fS͗8g@|33$O*21$/A= >@?V6a%FښzXeŭ)J=; -!@$[ߏL#SV4ZGl[;P=i.Ef )`=t M܍[p Q۵/3t^S3̳#5h|0kX@k8Bet@>}5gUviΰҷ$t/F9Œv/.Ӈ*j/0D)<^WI$H\dF ^dwAuKChZ%Mhg%PS٣x" [7c[º` e<ԬB3ň8*\%T_EufB݌FlOMrSA}0yBy>lܚ X Vc 1,܋w5*$4rot>^ó%̀3+D-AY8MɀzHЗx OB x:p;ȭ8U) 2`m&tQlyQPNW;ta7έ}245ͳ`"?φ~YmG>"{41MF [9*D#cS /8y1=pV7 fh$F l.FSd kt'_o72u޸j5_QSHcRRkyU >;H# 1~"囷kRT}]wWϼ\4y1+h?tj4gFmY,pBӇ^DRo .K G!'EYR4x3X^*7 glമdSeɑG (PhNA.~Կir<F#y1D9EB6UmS%D=QkEB@ 3á]na4S <4o4}\S'Ů4Sv=N);2߁`Ȩ+] ;JqVw6Τ\+$9m>P,4JOsս<`aQIҢ .ZK{$/WLM~B r|$W!ufR7VcOT[MA4 pi65(֒VkS׾",l*;4,nvx4)+Pu%bx2phiCl@`_o%Mpn4C~Nfx~qg EǠpD-bulV YyeOeeTnGZsgsun0NGӫvD;R6mJq[*TV'Y5C?&Kc#jkvio'Σ%l\7$ףhXu3]\WϰP ps~?wP pn+"J{"ݘ뵣2мl~݈P+ Jd?moѴS5 %ySHVSf{Q„a4 M{=)9_݀]l~n/WMh9pُvIxs/wV< FF 2lYiA$ڷ-J O/obt.a&(l4OQ ;i6MN~qh-Xj;5ݤ᎓RQx-}i:r K_ 1_3S5<'wZ_K-DC}'@EYUv^l!xBhG k ;\x+4&w"T(%kA lnK7s'_3"CBavv$%Tf+AFkڄK_t8aTI3R3)軸Bc]$E:Τٝ5uԀpgX!Ɔ䘄AFߡ,|p5gFۀ5- axFhHOPɁ^ #1Z]ۋǿ6]}xGbgԮd7ȖkÓv$|R7 TKj A}[  v}B,t5R^oTXtmfhvHG;3nEkv*K:a?%ilJҝ1V sf2i\7SϚiv>i_Ky@<؞kz8!cȀPU2vK7ש?"ǭbu:Nd90%ڣ}rUf'6默D'Z$eDoYD1,8U *v$e 9=) !V&C]P.{:fzOlvd\D/b._]r ]i.kLևǟ pp"IfLP71K*oFՉz]>!#9}eᶊi O~+2f\^ 2Y2!JE6bT?S%lxф*| :4D lb,m:MU;0|93ͥcq+^tinly}6K5V*گa -¤} кo(/AJ ­Tg@2fFӟQȏ;CM`H%!ӎůbW.˺_ wht&%`\'FCjj)+6e4Y61u[(ᾐ2,`+rA-N' c)#^s}itnh%5)^-Ь4is9 ؄hHa&Jwν7T8.,+sݾyu`-{@p`[ԟ"tѩkyR -z$IqQ2>q?,Hb%8)P==+rgi7FU \!RWƌtjEIL,xխR$)KLNTjcJ/!J% TE[YOf5!ҁ̀Ky_4TI.^ǐξ]^eH$0Z J0_αkdv@Jq/Y_1X8 X+.LN,1nVoz S@U ޑˋdm\R'zZkɹH%*9l Pk}DtvxxF] JkAIP_,Bw5WKK Q&Ix{v퉶pi艞0d&lz4ïZ@I9@DmE|㭓 '=CR9ݒjk!\<݊GX? CPIi=_u`?2V`QҵvQ|ޣL1)O:[JIs جΒ4(Y{g[E=d v6zrt,080 Ad`{^~*8it~Z# NIA8L@xpUZDVm%VZ8Pܓ觌aIp{gUH"k9.E74'5uZ]DQ8d?3iWiFTMyJP[JgZe#_}ï'Q ^y':*VW=}=tP'S7_0k†=#aJ|:Ϊh iي=aIokE͇%SpˢZ Ƽ(|RYWUxII roy0KݒQV 4 Up™N­f<6iɆܽn#gf>3,R05a4 _&n" F /Jaw tU1Onesj8 ?A:4~nvplGz BttRtH8ˬN V?fD']asi^F^`7k^jnJ {j&0CC6'>=P4[+> Dɖ&4z>i56J@j By,X(h!ֶe'ZdvHHݠ?/>]gF .scS|<;^ZTQ6\S8L>av jŪ?0~"X"сSBYrܛ̧T-q+$fU35j$!fle/Έωh+SJdxȢi_ qؙLuGVLȕmB8'hALp4psAj*%+9H.5Y$wNo%;8Ë 43p8-]G9Ɔu'i}GB,9u^^G;B &-ݺz$\= {f!{MW|Lѿ>&vlbVNh ʿB' $V#x7M'=se^b)leD]̌z7$థQ4+q4F=34rc cNʳ0eѪqlm=^mBJ3V5`s~aHj)Ϲ6t'1g!JoX0o'xq^L:|r=|5O=S΅@3^[on'sPǎ'In87DǙi.}êPIW*`#p(yl?_T**26Y͓q|Q ->bZ)WB&]fB4d%G DJ-vc-l+e Cu g8U,f/E/*K,8rul؝G63J܊uGy\ /ÄQUƣe:!cL8R$F >1hv7G32DX?׾"A<7燮M,HۗKC@ͣ烛$$'[e\v664Y&þM--=mـr!|L&2ATXjϧsYQ_b`D7hߓ~1h0ś5 նG/M/OǠʶ=~FPUĆUY?4{ٞR3(0q,?243,8a[$R cWQ7~Z{IDP - %ܤ6/&7eq[x`sy+=I4oȘ@A*K[/)by`L udڷ~@~0govC5sl7T4xX ]!SNªw5l* ?;ԪeCW# -ʂ8z$  eŜ_-AĹqcEڸ4&60GuB DۨbeB:. NQ)s\qE"cZ@e S/HR&2)V Pi- mg;M֤{/ %`\x)llˍ3AE9:r`t=f`=Mf|/-~tkFcσ@^м܉<.N[o7~q%V1;vQf~d X =֡rgBFzZG; gh_Bu-gI?k~{gv͠H|`I:%6gaiPBf<xHSFm m~X;/ _-oҙhg;<@xv9$vLBS[>m!%h*PLmLFńY0/~,79u;/ aoL7iYafVvFZHU8(|tKk`[ h=bӭQ̚1w 5i -jW\-XV"Ӕ58tj72CԒJ(/m? SMDfZq:3jim@my ዮ-R Prm;Ҩ*vIc1Dž6P2>X P>3H Hх7?`pƒXIC8t6-ZxkL C BotסlѨ߽a^;0ON-mϤ7m |mȘ "kռji4a@-jM1~{=`3Bv7+HbP@ƄAuKk^1'زKw,aUvo0@e|-PTU5'-,aJ<~|:C(CαǫikǪa)Y4C"%JZ}&;N?co`''5W55,u䂭(5smٷMڌ@)cU:9ŭ糕cc\`Gi䘎Cq?Hu|ܹ!Foٷ孼,ftK,wAc\+ux~t8n=< -׶Tn|$Ď UHܯd:; g!1^ai}w?wyC=(vP%^%f\"~ x~I[.Cn]}tp6辜/,K;0)=dơσiTݧĴ?`L . ]%^͐~ 08`",$aVEf{o'嗓n(g M#λPk; 98fdj9 ee~EuֲsZT^R L^ž8dE/:-Qըd^&E~,9.;x|WuD<޸ScTlOHRp\4Neg#zZM͵)g W5X3U,eP s!tO6A&cb$SӲ eފzL2*jq C 5:I1l*ע"nV.״sU,>&\ ]~L[P3!*a'T&NMxb< ]o"S  \P5qd !;?2א>]Ц9/ j&CMf h^2ccqhxӷmqtg=A&z\Is,/t]^rS.m>2)l (?nvqtxa=8*՗#γXp~DQDg 46~ sd)G6qYT1ɻ_=˒ 8 kJPvՎ+0jPfͯ_$>E+2Ͼ=ƌD^G~5PCo߽H'YѵcmNE RV`I<_y؛G/f{l3|8S$R%VJ%i!.lߢ#G6 OPc}Mj˟}\`#YFZrX OOR29"6C]ehWfvY Nv寍cu^U4w*b~>0lE3tĺrm&/ﱜ0]MHhyp7bh %č-^ЉʒeA7R7ߔ.7 F5"|* ~jPvtZ1Qn y]+Lpbu  /6Nv,25d+(]m^*8vĚHoC%}Vw>$MטpH=aewnJlG ,>G7kmEPfjRA[jV3|w"aMkJf^Gj*AR,6TFK8 żH7M#Cs4¡,G 7(ˡ]H0QH +L ~-g27Ge`L7oK`LY€a~Pp0?2Nk2Ha7<*`Tΰ(mjbilguc7As{r&(<+\?$7 겪Gǃ?Jΐwik]4\6O߾v3w Ž_'5˭{Ƅ?*rbb9싟bDD|G8zʄ=|ɒ+_vEiZ`yAO-CA`~\hepZ8ẬUP7+7J jr#(X~=4FYXNK}/TbJ5v?j_2n Ұ|Q" vدrj-.ˠݪq" XU-RsAeU| +"54DS˓0DʔWUCQO@bo̸K?ܛQ'iU/ 5JvJ%\w]RϩY*5mcjlFP½%Pqjw+,uuBhW^{i_+ vFg71[ٷ>]K@Mg{#L%aV착#f)6˃=^퍀#:I4dԕ9c/l#\'\ØEn©`G_m5֖IMˁNǺhڎsCEⴉ(-z=ɞk]lL*UTT׋$X؉_^d*`l҃ɐCI2fMq@0W)"¸qYN$(<PMGS`gLW dIUcjM{^Xl5X `D@Mg/(iR*}oI Ɖ܋oW~G@V?85qTہPA8jjG   pLߋ *IqQC(K6UAd&&Gȡ}?N9avGL)+Ž40pFֹ:eQ*zeHzZTI$^KIh44SYxǾVf=(C ߰<$]KNu5A0iXdc)& uVM>RS6>ʳ%dR\d1ʒ*)پ%D|)U3z$#3X4ZlK,6@4.k\IE1WMt[Rü*,׵PGޜ.g䑪 zNT29r.{v)"kb2zzA>DήVRwꓸ7cqLVĈk*cbW=HW9~Nj42sv >+5}.W%c"wc\~` A(J"ehN(0Z2>>WIFzk8= = qA4P>diqn{ XYU/kc55l3`ye}l nU-[/*u짔D[񧂋<:c1\8"l)P"=eJ6a,RZgl1v$w=`U pM ""S zyNHdշ)G)g3bdJL)r\4ϵ>sH{|F!]TrD,x7ٖ`]f[x&ȀE1)=TO<Ze:eWH?iy 9cjJ(7}KyQʈڲ,fRN/:xp1N0%2)N|^wq_vζi;=t Eϻ}P*碴\ XVM>'ˏ- l_|t]2$@9`KϷ-nQϾC.3j~wL!qVZA ׅDð mIA^]w+zpW $LΘođkcp΅1a${S-FfXiO _'[.'^A؀˲=e 10;B3&#zt^vLr~Q_yv`愣%IP>{f l6Rϯ*ض{eb"ߋRVJsY=k:QV1 zaLpMn(L٬/qusZ#g&<,M#^ͯqwn(4OP@{j?;;AMĭ5k9AZ۱oYJnnTi"#b辟¼} kkJ̿3JC2gh"l!᨝<ϭ_!=LٯMۆ ĄW`p:-lh(| L?!=GR7hOey4ӡcY=VXʐ5 Z>FԆI(>WMb7-&2dyl,L;|(Pwdc$rL<`41Ø) ۷Os:iKF !M=9Dc֘QxlqL߆{n }co3p8C{>ƃN3Bmp@ณzcoQd@/lߕW#-AQ%m @w? -3&ЯTw`q_lGc IV~/Fuֿ&6ҧa,;~pB{j{%#% 4/=:'2hE=Am[%m-8&q.A`\FԪo} }@'~cT2LJ롯F  <Ƭ ۷6x1דd= 'XɍLBpPwx. Lyމ^ܐ/#j;;>)tllH ȃҟuφP뤁k "75U?H27Ht@G(?ּFW^~at0-y 1x22, Sx7{pojҊdJh])hm1Lj~Ri| 7W35Հs'<^8)A]TQC{)k* 3@[%-$*܆r[T "1c8VB… hsX3^5^B kRZ{si)U±V틭.S_ݔj))FDT)  ^ǍN%x)x)߃)VZӲ\:{6Cwx27P݄k,7"88؀)}?>Tb=ѳ!9OjMpo^i52EL+p%O׸nl\pa ^gl\pJ$p7XSb!a⨭e RI!$ui:K#!)IlX\i]t| ݊IڵI4I\}\-@N"j#FY8tD~>iw5QSbGu 6HI֟`oS()v51-QH1f8|nU_2;Ez;}۠(`q4I3XaiK'0D~ #p@wwwɕ|G2iim,RIqYzGjao/Fn>_QD"9xBhxt7@v_XG`/bMJir›C^>vBǀրśNs 6h^b ]4l4H ?2 3W`CYИs}_B*aDKk^Z7SX}ŲM<̚A LtD~ßʟVVyczc`/̭:++7 zOGF?H@UN>3Cz*ޚxkws1 >˾gr[B831Z֭,XL}/%M9PBQ,ӣL[o 1RqN\R< oQG(6EXMjte'iZ a $n]X!bɸ)N,?p􍝤vz QFG(=_jVg ŢQt;&RW\hԛl%+5/' PyF\ۨFu ,X`cb.#aLs[кQf.@wg WY2sc(cJgc\vdwdF%z„Sc GbI6b5*;Nx]kH՟Thj+‘C3PXC;qI'?ڧayp=6I#7%rk큹(j[xzĸy9/RClQG/һ`hJICfɄ-FL 4Be?Eqٯ׈cs!R;9k>i,joqN6&;k Tb&@qP h{$;s"q!ܭ[j5T4b].Tʎ FZ,vֆ m 5TV+Oco23G0T!NāC5;]DӮKZϽzFl^rݮ3bQ2B,VmN Ыgk&lpFvv^ :f,fZ{av) oe_Kqex1#  ޱJÈr>Wd3`1mPZ/1Ox鯛qQsÇ|6X[n%vtC]`X8#< w25WFVr>7ۍ=$t~:UݢҽǤ%&Zb8ՌyTJ&HSԋd-;rx%TvdG7|DKVwo.E]i7g|뙗/홼Yp):;֤ii- Zv>@ g<+1;Rdkn[6/w5Ogy_|3(`r>nTtiphXLoxJ@tR'0m1r,VYMjע̅WGKhsL)0ŗ9{pXjl꺡irF[!y(l*K04U[,S!|#8< ^X`iA[Ųg%pG*#ʚ / wf:r`6 7X37``AoCDM<L{x:cOjJWAKAcC)T,=|6/ARW_ܾ{MpX'BD(ta!M]oNo:eI;Jf{2:&']"4 X YG#GJ~ 9ƛhʓ9-:܊)$ް`KL ͤF9}y:DoA6ᬡ"4}J !$FS-F|YF~bu9ywPHlY2&#;9= 7lj6e %\i״*y&<35]l>(W$m)LbU|@h8&W똬BD'(GTP)(N|P%|0IP'*^}< P,k-uDoA.@S#G)e{竾\s;X,V_Ë0#ɟ\23|L#߽ƼI!粫_"}4{T+4?"*Ł&x"\L4xMΟɜNTZLfƛrdC=ts%nB vn C⎫ >5|9)hQO(ڇHkF'x.7#⼕a.+L|Ь)`o)-/0zlLI;YMePT >E2\ORE"V`/vׯ7O$*. Zn$4`)5iRƕ-)Ot2 2|ɜ{tC8=xCR[m %_c-<[S .:ER?Fw<PSN[y(?0&}&m6jW+Y/!1FO&xo ,pz}eq*Fv`MUy7KHEd-k.!WG7ahRAE H T7tV:fY,)U $;xj9r%5!^)W70 LVO@>\Lqq>BW0ݩuTا FF-, a&D'>o8 F|`= 5RmY^seޜA 0GH1H9'sk `orbC$ln,Ufˁ|dd4TIZ ZM^LI8 ߿tUʞ8FLx~ޜt)A -EgyB~뮔pfey{fbS. %R*Q̀JG͝0~5>2wK_3F#(Qɖd="}#8KQ7OunE4y8(h0̤v}\J)AL%Dj~PEdN Ա-Gg.GQRN2':َ|N+A+I/(0K VxU\UqIj!CoٷVlUjh:+{lM3 #\g~)@EtV/fqwT{I8[nNS apd8$o[1R37Z$ *`7P*\N5(DGN_j 7,tUԠ ;=JZ/jb;pDDu+RJ %PEMT^?Mo8 \x[z"}r9 \Xwڢ0gجbFy(/$^#0X e3SR'l SK7$u-J$c+~ihq\dvQs'<2p+JS+KxFk#,[kz8M&u$Q9V8}M|ȭZāQk8,Q̀dYxV~rv wL}B@ɮ"R^zdY!}]_= z}Y7!8 ?9F ܵhkIMȣ$(8\um2L4ϭϜ䠧*tS:pۛBb4SYE y$ e߈whn=ț zgQ*\Y )wl V !(#3q #wO{YCvfpq>=S?. йs;hGBL˥367!=ۺL'}q#$VR&i.OMIQC!c=xn"EXtM'ۧг'^LÔڴlq^sv+bAI^Ʀ,Q6Z(SqWm$p`SQϧ>JБhBHr'C>}2c=('(ZrP7 گ=i-!%RvM$nf)]bYgbÇ~'A{x^iLڣ|3XY}(qw &(<-{ҕ̸pRӕT!7݂ U^d77& NӧY cپ_bRh|3Mӏ-a_ᖝm<)w = 04f%6&# {{@ݩ_@-AB~'J*էuP 뇂 WIX'a3*`qtGn yuf@OPx!?LȜ9eS'I1iZφUA~#v65%I;T#823d6NuCn`21nJT; Mk:ӜA&y[1\R9«HT#_P;dN4=HE\Nﶱ2fbUAd:(r [^M%Bn{2O0(yǛȎ<ұӇi߭c: 4 9/Bt :Um 6Nnnɤ1_|Mx+$HVcvCT>(aI:peHQ3-~/$$J&J{cr{,=h9ʇm^(DI)"mSYSIiR*֝qD q$>T߼2fQ5u1#ZH K0UE.s-F":L/gogwXƸFOI#j45뮖8ؓw_7Oĉ$|X.aEY+y]:g=a Odu S .dTWJ +Ҝ|l$j+fFpD0bʖg/S5i&V.`J5#w'u#';P*g_GC _+븕-l4r鉻H;x+O=wMxvuZ!;+'2Hb|GzՀ{ -hT,[xXĽۛl@ogցER{|}[Վ_GE;A;YptyYD漸,aq!i&w9E2>7u >еsPae +ƣ"=ae-1: ?m^Tk= ;)@Wp=NΆ]oHj;сF F"> gs-(BݒB:},D_/ŕbp^58hd8!訞Ćꕝq8ě]MTʮ@i]7-@[/E-텽5ˋ_Zqߒ̴! Ń1m\ܒS"f]3x_fzJ[&Y>][+:kSY}C +buؗ ^| *:-Ե*˄$$&3evhZOWQN)u5 i0^Ӥ⎮?ɿG&6Q8s}D1T5@{4ˢ>N1ԞkU2eCȲDKya67z%u_}. C:&N .Rz o.bX\ax,] D4:69PGY N]m;|yZaܛwL-X{qPnh6_茿r8 {=b@bv9#?PFPM>o^쁇.F_qd(/ao;R*V2KMFȡx_٭={Od]0V W* *ieʹN v''*m$ D,G5J&{Lj[3j| O놮fH2qplʂ˛if)B!"bvP1Vw.9 S1=O_d 3hu`5T{ wb'$hLmL\tϤ2ؽXf;xEhJ| y2dIIj-D(\j2ءӈmRG+C:GAvj{ ʸO!87۶fs{\S-cŴj+5j E A(FK3kp(e=98ٝW~%ӀnaI%8pAV ɽwʬJUGhd tbmcn~U1~Ul[M =}$pW'X)LJ_f# %4à~X#]$},8fTf|ZĐ@bsaNa xG|_SyN31;Z9EYF AՓjȤPef.oRtjzyBk-qGeE-K݅> En=yz&ٙ&y+Ƚ8j%SeSYNĔѡp=O"@K&ę>C)AU #xQ[<9X+ V}R%~r>X zB ^wn+@Jfr>oDYhBbP J$n Rw&t"\ך'L܋ޢ??[\ܰ=I/#2ۢ6UIkkjޛ+j >wRwgIR%gD:T\2)~@gCVW?L΄EI=php]CWYXҪxab8O~[seR nt'KxJz>F#[cegh@[R(͡hPmA/ǫ]hgAǟ'oMqohݴ<cw2xaTbc(D+{&1!J<*AɖBI ?,*Rw݅ωDWޠv[aEYjۅj_"Gc=~}f"ln/rQ( Se57K[pPpx}%J9_(6:0;{FSmApEN8>W=l+҆ڏ T0Gr?R`Xҿ盌0mM3[UIj~+["0d5 ϧ&6K$`]`0rg0pu XZ(؍Auo)[ʪ,Fcer}TDM&tT lJr2c+<*%\?]B/dZbd~eJވXEiQj~\BtŠXyخBQP&3ddgUE¨6u/8[pu(9Ǧil*2)I7 /tY'Y=ud4t0gMp-svt[ ۘ#4,؏6{7 d;F! < ֳ";HLc/$BΧ+ V#wj%T{ u(DuWrvcH釀ɐX8~]Kdy'c ҊhE==F;~WlHe!9,`ɂNI}jw)W7-#C7-ʴ[܁WC̮@u2 R*q8i;% T:q[k8y(m*v˦0*` s] ΀4ZǖYK>ۤC}4dg6~1N[W0 4{=rUO]+_oёPk04¶3}xd%JgZCWѨ,_goz^46b߸AaB\" Ҿh9)4h `f\Әx( jɷ>\zI9K06svAצ̭DQ^miZ0`vd5k>D;*nػ36qP{2(" M]={UԁrS? @(֧&(ycِLZ}uRtmHp~&ԯo&dȺiӒA0]`J m,vkЏyp$մ@L *CRH 3$#a`Rz'`C?*ߥoS @odk^6v pvݥqtPlA[QB vl8%0YfDsj?rE)1:0R?ϠSp fL evB_&#E8(an}мpҡXQP}!i do0^ΗZ>\*._p"70(AuY{X}&T-UͧHԪk$h3o!uV6g%!5,7b8!J͠B6ƿdZ "l𺚻&س*ǵIwAG_w{.'Ȍ] [-aTs}r(wCQap57š,9dEx8I,{-L^E!A p`vGcwMD<|ÄI-Z*4r;59y]jU q5xA{Q A89Ʉr B4Qi ]m9['#PoC%/2Xp|-erxcGK\E7JЧteǵ:׻DqaOTWأf[~ImxT{>[@@6Bw&pX`=KxOu|EYfCcP9_w+JqFmmhdmq0ܬ_2[7E%Po[g\dzP xcasNEnx#kL<11ývSeWjRZRe=z8˛fI)٬-l=E)"hF ţtK3ǐ9ĎyoQ.&{ΝLu$W < 7bgJע{HP@,@Jq#Og2YUWBwʥl%^٥ %."OaS!qnrn #!2gb@Uth# ,7sKβy [xu2kwD3өYfM 7g4˩]?볇9xL򊎞-"(/?LB.t NW88ǯK@#z șռϻ#8޳#8F'|[YT33( .INO he6tY7kMc~ݲkD`)s@m0`f3z g}w8@-sXܕ7=8p08 VfR*-A2ttw'lo { fp >B:ӃK(˰<d?윛Dk  ethP7 e: l'ILe4*Wb SAxNyO' ث!%FB ;2|@: DSU!|ɶϜg2pw&aI\7,ŮACq_iyUe碞]q>|Mh#g? ̓l@`e}QktEjsv/ LN(B ߕ'ۻ/$ vv,daȖ@V71\m8'ߢ奺6k/OsP8$ k7 !{PYZpB*ZBsŨ ǐ̠i[t^i7 ,{ϻ(u$܏82;;'BsMIΕn J<z!3=Ö3H{(NTW8ݻƒdcJ[m[@!8ЕH?gFƇ}կȈLCy0Hn0F{R vOLSPE:3dEBpN9!: ͹//u^W2aza_Z^@tO{!a6Ɖ[ ` e$&P-~Dۧ&OX49'"3DUj~|(T>W ƢٗI_oEk#QFG1:>3Kj-(e 7y($<, 2 ._ 5ĀZ'+@d^fy$t:46/ph ]corG[3k·@,sՇ R(#c<¬XaaUKT򑳌nmUb25^.ܳRVZ̥Ca c2po!sӍ4Yc j`[ ՛`wl&ofz@ҩИHsh^}UE;Vw -ٯxΆܠ47d? MH&^`u!nQƫx0ab'Tl1Se2Fi5tGGvv6Kl9Fc JFO ذ:Xտ$DNhVt_lB \K ګ1MQNlXE0F{-kyqH 0!xI]iiP*~υ$_OF_:A"VR|_15] ew!ۈ# (jE_=6}Ou>wсpW<5EUKSQlSl,J _AOݐ/ReOysnHW,dQ6oS}#$; 8oi(Ӂe Uu;1G}My >k'm`;Tcwd0Ҕ XIM._5#BlgP8ɤEślp}{5n`HPlN7&7= `Gϳh||G=1&fy@n<Rٕ3޶cH[ܱk'$j>lu&1y Q} KH$:N˰Knm#/Q[EIL8p$Xi~.k׳Pp%{( Iܨ.DJLxD1ǭމs@f͗D>%<U66J;b\)BD9DډJտJ>Qqj=”J&P!Rz%#Sa6=G0H7y&өBkJI$fEXRprq2<pq[BT7_}z<T9hށȸ.y~Zh=S9QVÞO(7<-T ;X^ /ڤҳn/ l8dU+#G,JP)CJ =T} jNR|Ē4Gh33J3+90R(?*X FpW{`=JdC:92N*o hN*iH`=ĘVl?~d$ 8/*q6_Y#y#dc$d Ygl۬AE2$fAZaȈ':&C'f&0'yG}Dm\h@[pM_r` 4(2\QAM\bL`}9o᧭ R[Q/&*y砪{֗>\%Onߒ*`AB:Ĥ%_^\)R_Xn/i#PGV8N;N ϲV j).q8xvi+}'KmP7o]'N椼`6k*&Ḧ769,pاxJbբq*;R'*'DY ;EbW))hyW+x ԰&8o]U HiĝrV,jLrHK)U)ty-CPVB$$ȉ`L)ķ|ɔNX2|@7S鿱 1Ѓ!bZj^%zf EAZ !b!H 0S֔]l}N) !=p4V,iM*{ʴ^'8%ɐ0EI0.;p_iW4 0AtX}d5?5h?B{S>1S \z2tXI#?G`V{n0 ^;E|D*az0q`j>/)k:7`".7eA:Vo}qpP} wKǟ86%G5آ|BZ^b<;) QYVy_#9 ܿXGquvV+rV-bxCDyYmGSt)xJswj* h>1GBhп VD//S {xTA(ۋ* 50fpHZW<#yFgD (ϙYP5s"=cyAt?U\@?XB64WV)^j]2K1T3vXnทWɃN*%0DÊ "|Z)giEl;>ϙEN\ WsS <j&*'!Gj* $=v=ŔϻCrP?u{F,xq&4ldYx;I/|VO#AaINjｆGOR00 +o]i*<%@^3! ';dPr/<-ŮJ ;rG$X.YAi PN`NVqQOqerq[HZPx]kZG䯜l|(rsK} Atwl9Pzb.2}kC&ghEqYeρdFe>[֢PAak:a.·ɴԩ_mzi;SߪƢ 8&ib%  w,y jm LI=3E* Z9ce]mL48vԏ4L'dvB& @gRO<rKNL&6%zMM5]V{e%) ʑ(b<;=ϟa#!C~۞_sAԴv6mw AO)wdrt9#UiZF ϽY%,_Q;0EU䉳SвplCzݤ[*s? = HPxzuJtig.70TmԣwI3M*Td B!lr均xFEǑaU0y1 98#:z :)qq&詯Qs#He=[=O=:T.Ȍ8^r`GwX+@@gZc&Lq"mDxTSaҢpWTpK*3?*:1O'"Z)MϾY& /d}mc^>m3,HPΧYQN^ R 2@CH@a$!Prxa7Xj\b>4V8 ZJT/g㘛=E'lg ̤&DעXvk埠Q01h-kO?jjW[#}G1^YC)ZӈDj[7Jfp58qԶS;V{]'7Vgj u){nν$.f" CFf3crL6ΌP{0/7{7 N^eM^?[Nw%L`f]=J|#ߐֶ=.QZߪVlbXudPTW| ~MVgԇ๽Xy߹8Qs@πt0)4tpcuoBq 5nv=-3dԾ \J(#BSVl!'z?vS"*:">H#굼Ē <&}?INJ}ʥ$[YNQI:C:3AJ[YDGbQ!Ye! >fJYI12o?I߭7=/ϒ'V:焩1޼ aM.#=[/p6]3 Coc6ۉٝ 3&OO|i=BS_erV~b FSE𢷖VH{kr=xu,p+Mת~iH~t_`|OH3_Ja߸f~h.* DpU<p72hr,vW xaf =8q Em}Ïy(uh]hu4{w 18~Z%}9:ߪ[S6^<EZٛGt `dD8yYt6 FWʻCo'zȚ/ȎQBu]N갑)"I&|uyW{a{@֤3)'X c_l醊ٸiͤ\|h!5hCNUEN◉a u`z$1nlB=ZuRg2 9Loow!C\ /x` c7^;g\'K*rs wܫ baq' G[mǮu/mwũVpXvH,[Mq6"Ѯ)W{ .tQáv96Vtnc"΂Gv*Wd7WiڋʴsUg13#d9j\f aЦj ?ն* P+cmh꟮h]~"[XT#.\Yߗ0as8~mƇxmЧė_e5GJWU֤nй;$!oH7=GeGd͚R5XIuz-i K},s, ` :# Nζb]9MA{n9cVcB^29ƇS"|sޚ5#6l\ɀkeSDŽaͷӞXq"RԾҹcY WNz~-*4@T/b0o\cDd!y>엖`9}4+0 c𚹴wd=7d`BJ^{/hFKGO2l%dmkVL_`=U_s{/RkNb3WMVFCŕ=!Mbu}&'.ëYUm. CtH+jˁ,n6c͐+2<v(oD;f>EatIڪJ|hзL9Lߵ[ jmMԱU>!Mx>WX_@BƤA֕LQyQY-"NUlh^3IY܉@ϮM"E|czǰ*ދ)?Zǫ'  VҰ޳Tx<8rPvOW2Xގi2~Rbj+oHCP0S7/uW="(j,4/,HAss0eaYi+}R ޺BN fxk6MA6E*ܻbhȘ 売4#dgT)t3I1C}.sqlpC{ 7^9.A~տic2J>씞o(Z>4Qm^DȤ< 㮩_`T)ꌝ !1RuNOeѐi" JhR*yRaƜf5Oa#jibt!}fmyq#!`y8ۄ>TwTPfeWFVl/% E!^7SH2Usr!ȟ,(۷2lTٰF $|WÉ!O#Y*MSψƩ5VǤ rG]D2y p-SE"yKAG0 |9=>{\޽* <;|uuěOfh}N p|.r *5$OE)~Kh[t*&:avDL'sv40f9YhMMmp]zw7'oo> /TsLRʠgs9Ybî]*,LDI!h^>ycTAi kJۅnf{YMIo.mXZ>Ww}VO\YP暗 {"@Qz][jKH5+5+3ㆾ3+"?|(^':XF"zqټ|H.[x,aE&k̮B}PH_IU81$f0?iluXKcXrB= I *LW&Zթ'%jX(qjY~g6'|ʂ0>kWLwBLm]kkF!ǭnÞ={Z0ݦh(9*$RݣNr*(6IdUxfɢ(4# C+_Ǫ!hEHAۀ7Gֿ zגop诔8J6`*{(Y5:a<'_'A=prꛠiLwLISb7;ucs&3GfΘ8_5aTkw@WrxBpu(iUVQ_OLWd;/B|rྙ]㮁؂AK:[u}9Uhs]Qw}`sSr |Y>BF.]Z=MVM$u; ߲d | d\J") UtzZHxҤ-v|.}-&dUX-pEּaux3I'gB_Q\e+!6P2 UE5DRTÜ}o^C K'*^*|0A^ &H0:qϬWxԱOq XeoKG.Ko'䮿M'nШ--7(64j$Q@DPGm~o3Z25oz&dNc`uV6B5$=a_DC$Pk6c97ݮQbW"q3#:ܝR8Mqc:be߱q4X)4Mݿ2L>R> km'^r9#vZԄ}xN-j]*"\JÞ"'P=ÄO/90WEMDAz=v2/[ciry3̜; `%jJӭL;գN//1_v`I̷<ۆʥ6|\.ٓ=y7flU)se||mn&w`!ѣG8<2XQJC8s^qqgYqnߕw(HOY ?V>+(7O{<Lq+lO`G!sp5nczA8]/r{PQp83 ۟r_IE*B)K%F|_Gmv#Lmғ+ P{I9%-ML[d=կQ! j qUp^wB/*2O=IgZ05cup]CRk>2f- Yvq-)dC_PnMhn]0?Ig}zK%Џ̲d߷滶ZM}9 "IN༢~ibԗʕ6i6uuesT`@v*ߏb;F0w@;x mFaBtv1TI?QP|)|d~P}}}h[UT[ Қ#6W[PPrR!@Gv{<>/&fCQh='5;ѥ̬9 X3H bߝ3c4ijUԁ`6b+KP=8)xZ[,HQ9,97֦߬@U5!OPWjbCw ݮr˛&C,͔ (f\P8@;Cr?U#u䉛{n#9Byv~EJO/A_iʄv "k(;Uv8T{I43JYeUP诬4~\FH|TOw6D9 ξ\G{ ᘯ`J \9 ibm* ;ܺ*]wJY53vAdk~z'V0]}#$ I` x9@szQi3p&mk_] Q{fr0eX˴ Rpgt,IbREpɅ/h}C ,IO<ƍX`_ݭbұ3;KyT쟚G5ѕќv(JFw'g LD O ^s5HYf}ځa}HZ@wˎ?UAZ#A?"vjr{1j<iS O 0C#2чۇX[94.alS1WLZ|J/ R#HC{ վr' UƑSe_T!EX/^g_[JEr_6 t qǹiSq\3KKVvkl%opRyE{ R{MʉO8+`f ~"X-x34Jc*zB62Ki= O+F["M5ŷu]nc׬A_rcOhWU V*D2+fVpnH!q96aqR+8`v|{af*o32b `|3]ܫ,;2p88w"Sб4}n|Kj(tuHal9P G1u|b_(ry:FBlb/}]Q3FkY* qp^Zxlt+AC7ɏ~@R߭Gqn./k{J}Necy6+*^Н4G3&dA UΝEfWxm1jLpy4E i>8nZ曲KU]˲1GfPntfo” 1p?o`%_R^_]{Q6fa1QNK5H ߽v>!r6POq7WX키 !W]Kud{av#NS~ 7V d8`Ns#Hb&}#u*-##+;k {@;s#-|-86^M/ ,H1#s)DY(. vW/5F7^a($FwN};}f)3=m pŒh jYP]6WF+hRPIwE=n.{]6QU m(d])~9 kT˹Y&๢bT?% cL0hP6{ºͪH4}c\[<{DwuA -n͡}cG~&Sf~=L6m!!Lx,FLHo<}O hKҚ1ҰT'c,Tc K(sTnR"R>" OӄA&PӁC}@ck0!0 لDg(hzڙ\<|HYd#ԕ~3V$'O7#Rb{n=^Ap&dK$Miӌ͋^8m/l.[ՠ?qԃY7rq5\5F@o6|P=fk;"1!z퍉UU/2ݦ<1 k]}t2 D@M&4:IJjX6U/v5ɋ3_r TV5Pv0OϖLfM(2UEs)R[ [KrVA]R2 rYy%Ii^g~Ƞ};s.Vt;RYJ 3|,b2x&D_(i<}MI=fCp4SW_o[n @ th5ONA0ri+ TGYӇ ۋcTsŘ+m~c8~rˣ^r+F %{Z-qU^Y+ܬupO$"k*>|MʼnhH1?( t&θ?3eKZ Ga B6-y.XT\ ,asuӿDZVUI':xA@ HkNyR('#8mB/m^H kHdhYr BjSIоӼgvޣmHC\Nr~ -m-ryJg%$&" znßƙɈ3J%QGZ}v&?3}ZH<]KAxJݣwb: |P٨5$j&ץ? 9-AJ.T+]..Vwm7tΊ\Z-L9D] $:i !aJD,&Zp:\=P6 R& }L0Tf"0ԔC(| #şXGc 56uRT֔kXx @[q~XqڥRo^T{_3Gt~w)8mJRAҎQ6UTh\xOf񕐽RpؘY+++ء}BHI_2|U+qhce]:@85scԶcCm;DlR*-aKAm: 3?k, >!]Q,[]ڛܤ/w<,KД{ޯPՈtWuF*yQ!H8?}mȽ΀EDMWG"wp, ϥ<`nA"\\L ">!| V-Պ;vUpW5:lnb֍-AMkq):@%TZ~(RN(lQ&OLicԁ*K;Lt3WB'č+plQJ'pd,5JR%`'~c';p|00ȁlb a,ZӠ ؇~)#Ʌ'dGn| ` k!*B)SאxR/4k&GRnɏ){"h! U:|5g-X:E!$*Ib-,UF#c:5QDgMݳW.Nczx[CK$@h;KC czz y]bZ]䞗}y( ~IχPP2 _DꦺDտ 3NWl'_[-pobHsA?cI/,j}=FK `K{y,)q} 9{Ø&eLd{df h3Yc2?(&9ϖ}g[I;Xg 1zud wNA-X(q <ɄMxk#%8(SS]T֏V6 ֪)zn)!)BuXHn!~r<[y*"BIeXJA'_+O(mޜ΁yA19>ɸ\ڝ =Z7 ҬY-Ϛ]]9}'{j%SP~|1ˏ`}zQU<2yڰzg\Ni>l/۠a[LF4V< emՍ3 @ Yb TU؎ş *x=;YeP Q9r<113[@pߦJV,}1o㗼NV2wh5TYdh@nX@;tB¸Raۊ+WQbxc4I:P,%Ժx*+gÇmjKe9r80!HjMIsYě>Ù~+t^If~%S%S`Qidl7Kw i  偬'<-hkIFnM(ů!/%9`X-"sIf><)2Vg@'C?$*LI@(B_5|IP`o]3 0ՔZ(\0%Z2Ӱs"3v"glђ# 3AMl0|i-js-cֻr° ̀?u,NOmJKE`vI~5'tdău: /ojHo;@4 ý+&t;S6Q}]滎P\W -Gl:ɉcxydĶ*5H2If"2yo ǥ”so'Z=12X,}\pa0e:Z~~WɅ! Nc1¸r%vUxH^|L? IZ1u- '-`ǰ3Mhee@d̛͒bۮmv3oV@=x!yGC+V7Wf⏁Ko.Ht͙o' t_y"qꈊUn.Y]Kw[Ǯ. w%4R7"F+҄qMoXs+J$$[߂5Oix [A50:v%U5e[sw  Ks {xw0]tb;"[wa;kmSjhi>owWtNwjC"mMgIt?B C+]~K3Sz FYjh/1OS[Gq @ K S ExS}Z:GPǦ6k9~H z/15׸ì pP8rgbMJ\YBXYJb+Aib+So ?սǘ؄;|rӎMa` vlJ7m0HؑM9%T>qJ _N98l_cS&4[ou(`O`䜳V2~:S[= P>*G5Úr۟EN.th/"*HjE%_@,ף\: X%zV zYܠ|v,b2SŬNy4_zd!lP_賽:OS9ā]ΫNxPؿZ'o,ꥌUeSʔ ;#H~GE[r*j6CX g WyDk>s騗XM"Wj` @#c4 'Ctc`l'_. "A}<}S!w("VQa%)G)ƌIנb2@Zx?i<g|}fGhȵʂcL"/c{i]rmsQ7|#J"- ڷ=CNqSX_

TbVZI˸ۑO:}?e&1@_s<*S4 T#_OU"x̬h5 Bl$h9u|#tߒ m'+ȵp,IžG[m,Iiy܍ܸI$O|~2?}~ Q !dCo8-_cfSpX * Nrnޗ@skBmp5}~ P-jsx\ϓ 9.뭥|R~=KS$|4a]נ8cM@9?5Mu+E e|WAWô7 u'D{ZXx,+ͅvdHul;ݍ!)'m#NiSu>\9Ke-pA0W}nb=մ e٪w0:*V6mIʣh J4*٪<+|D*ԛWZíR@2v:m|̼ҽ1bS 7dSO^te$O%é4Dދ}Ĕ~No˅T~̓nV3pJD~ܧLHuJĿagkU|Be]G3h ߅n(kwA%mC/p*'KS2I5Ҧ^Z9(` ji"^.Z@JH>CFkQƄsꮵU>~AC;0 ! Vm"LO f,p9/Ep>CNA9bw^DD7G鱵k ]a ^G3Ϻ@=+ jaCΜ)U1}F&8҄瘯j,7uMGLݹ~.׆nc@rbъpN,HoV;L`u"RMOQ> PIXFtL(]XVG);vZx/K#r2ϕhN[5OH"BfOU; `>F ,¨D#6/Mq}|Rmr rR?79-V='նżθ%~4^ o Ԛw:֍<[P}Q]q|.@gzyY_wNˆ 7MgQgnk ON Ed-t|]PcvVOLf OV'5 e-8{r[ĎQ~= ll!E[e]Eo xd `cI2*2-l<4@ŵ:?(,daN]vjbDmZ@OF6~v.Fqa8$cv\GW<VKsoX)G MnUߍ8!t͜NJ~sO1N 'N4'=/q&%j>XAې4Sg&a[k_𓣴4PiQP1vg3Ѱ b}@TG>]cMQA\ 5cw[b]oΩkiA'+ٞh1lE{$Jh*p;$-Sܙ.@IݜC }27D- l<]YC!Z8U)`2H%;<Eebލ_ 'y7RHRPS"r/\ɐ(އV2 vZ8N IgC?N7ƫT6^i}:ҥXq`֥ qPEo*Qq\aI\؇oP @P%6KFאi:˵{accTv ;9/!)թv9e%0z|zy@}D'u~PV:T8nR Ũh)ɪojnhg"͓IXN1vzEƯ7h:& Zm֯=\+#4ba:ħ +xOMv4zPAYNs&[o8%ZT^NX s01boI aFBK09VsƖ߿: nhP O5mrȆI>E!}9)51pЯ:T+4*-Z8j 7leV`rSNjTVL|IR)[~m0,kI>Dp*ѣFWOgMȉ:U3 ]orW, !F+ٍNDm~&cp 9!xn/Xغ{ujڪSuA2w5KD*o1 x~9 }m+V v;djCwSS2~u-!31"U)W¤ 5 U.$K-Q)3F+շ|RwϚ_7j|rNs\Yet6b܈S(gBjZԄΔۥ 0؏Bȿx$n$͈s~T/z*f-YWWD:q4Lmɐ2DžV"@t K`FW+{"_cA R^ z2(}a0:"1~;HlX(,;INCv|YeK UNshĸj](D{PV*)FX5.evi6Σ j;,p8) T [zPR|hb38+6UZ{"[$Q2V ~Ԓ~{, !3. EkoՄ(yÒɞQX'N,EpR| Yb8 Ї37۫"$ 6In3c>EK؁>:`obL1l S.49D-3QM6`;?M? 8kG/[)dlYh]%(oY`*/w w&eMjdlv>HY@(]Z{+M1 UCmbܕ8'r!MZR>eLFHVwArR9682eOx'q{"Csq $a*6Xlރ(+ G͉kxMNpQ@]l88e%"d l:N4*k=6q%5!FTһ1)IֺJa@usFK ٫@*@Sꅙ.K҉|{(Ѫ 5I#2Q{=[;H)i: (=Z&I8 LcDC}&YPdiJ3 &L2keY00CVܘ 8mـż{ nŶEk=Q|dFE ZifͲ`Ĥ6Sk,i7 M3Df1{N;Ov#3ok qHwGh'μ<KBg43\*}o`8Tnly2 Ar|Fv /ūnTB~ւ"2nwCw*I(oK2Xd\ɶMcmZr荣 T gZrMwn3K8-p TF=b\ gOsyMw:sc+9C䵸v=@L$8l"/ ecׅXR$!s9 я _//Yޖ #~eN+uMH "jbϗ35awor(k(re; moqR.)EF I3BJ2$ID%Ž$NWKuEҊV87G%i~TQ.kvզH9?Kjj-MJ0Rk~N݅vr`'G߯v$&i1!ɴhlk=v3#n:iωsw4 igr=+hct [-C kv=ޕ@7,a[QFh( P`yS `A0@]r?~H2&H*JlW2>0?ZxG];R 7GnJ%WQ!ZMw)OAKtxL'YފxzQ2(.(1X5VTΐOGE 'ͽSP)<_4lRhi7-qЭ+^J+o~OwRg' s150n&H /=|K/˔/ yN,';>r"Í*jҩU"Id)ʏfJ.1i NWk[2VPxfvOl? EːhM#ʑ\r>Ѽ{\!83{B@^2ڢWrk_u8›ڥ9%*,se$,=: xj^BG`[E14DJU%s <%HsSۘ+-ާQXּVK5(ɴC9 g܎?Y - ;X3f^M+1AH^=èZQڗ49k\)O#Z1h} FQr'<>6*a&hb1Ί>nT USpivTzO?>FI3$*D; d'\LɝnC(8!Up2dFhe?@߿yE\;簥XYKQkvx(6>~SC gyRnUϬl:OJPr4{VߋUIA-7Iq{->bJ?,ֻMzTV2.y '-7oOF:&oˊFbtvnHn)ӝ,aǰfa} 3H_oDFB\J[?r:Ek'~ե8JUYĞ&t[*j<:4\b(y\1~iɹPUЯhg)ۿi5Yzc΢#syQb73axX{0D0쎥eP?֖L@]ٳ `#)1w"&q)!;8윑:+DHA|$)90ܿ:)RzD1~/ ~Yo&S!KXRb 9qDqAՎ޴kRu(>FhHuZ F0S1I _t>L7sU]7B,*֫ŧ%[Tz8+n)(mq-m=qhU;fʦ0yy)b*JAI3.k-QMVC`ifg V bn˫b3׵QI5ƳXAz-l T@$5h֚F,MPa{ :q04rpř~Ʌ۳^r Ox çUpT"^`\iؑO 3!^jܶʄ`"x%dVݱKCfr(?Id]Wے9}gԬ״C|7`&]ۀOA#yk?#pח2՗qXrE'd h6Ϗnɩ%T;ђ͓&3u 4eOWzKX2$X·Wڎ C0X Wg !`ݩX&1C=jBez[#.r:f]6 |6/Qu\zCN4.؄ W$*&"4UmZx8>MJq >\3$8E (&3HšT)r1rMɗlf4fw@>eG&׳es\\9mrEk6۰t\:.B .3$ !t ~‌UHYkbV+:mxnVrE@KV񋌂bphڡNg,Ni[vRKϟC{p.Kkx/ll򍑱RGT AtzZ~z=2x_|UśL2$,?Hܾ=$I &-f "Tc%ŋ9/uV8el&Fx@@Yv|ogtG e]fʥU]z^38;Ķu(rL!^IWbw1@loGJə&3֑( A '>zT W#^DS3XfqWQqgpS {bfse.KسO3gD3rTw!ze5sB"f+*M_1&P{+g-iN*\`y_skfǶbUn4lHgDK JNyCfPȯJ$#d[$yx05g[= 7+n K(bO*Ll~~"Ю\` SMhغV"WByhMS< ;TY8Yj{8\RZKsJgw[7JB-δiEL86*}y˹X.?Q7 x.Trی/4qI2'Z哻y/Onp4z|ٚ$-HW6Cdb~!qq/5$[C ϸ6.U͝P򴿆fx$7_13-'PvESN4[dS6$;!-]\ c9!K,iWxc<^FJ+9 vx~i]PߙP('} 4J/$Z%7j 7*v󒴴kdk^ (3sKaa;Uuh ?$$3cH'{} E,Zjh ; y(FDrltL^:P42g1a"Oy:*!Kz-bWP5'c. t" JW#xϭķ5lpv{%iyQ_R0DIŁh.у?j`1R2ؼEvAyYwfl<EDri E™(sƥìUY?#u%Qa$Ni?Um5rgV3 تޠ)J, ]L!Դ LqibB8#aWq o`G0"*41@s%SqNh,fP"Jj+J/z5:99 n60tbK+aGh(O}_>S+p8&>kZMfEֶ;Ȋw )(+sL Ǯ TW tj+#$<H!ovx &G2 ڊ2YϞ{~$SO)n }}1 oV HµeڛH'x`Lٖb9nP^ZK~I'=r[4VSU&bIr:˻)7l=4J&c7R~n=H6 ?}q^&]),,8봍"@68~ʒx~C)ll N3dJ\@&4γb|Yp"ݶ!+YBp3%<[k678l gh ް!Xnk4)3ڝdNAdfWiUk)< x?MrN6U W)cx$c@k QX} .+lMݎ NZq561m\7d&ÃiH )M.w&Dh^/wXPf0E =jޙZmQ.v|ϟȹ\S'qnR(`jq*/fe44q!Ualz?XR!^.h16,N|6`#,/4٩dj~D7t0U_+|pM_;7p@Cro Mt$u ;Hm"JKEk\M)WB G#̫NG8Rtq\!X ٚ;JX&6՘)tDuNB".y?]d6B-ط~zHe3VņS8s<8~о{-<1FPʐaXn[5⃠?D듧z}K>oLSݢwS.bM L_>.iSvWd@Vh^ K2C$D9/W;8m9ݜB{: ɸכ:Z}}Z?\Ik-rwdXeyv^% ?J T=8)VcFWXYу+ S oTAi9:wT_-N VjSoD8brrOEó' F6HuX|ÒVy>CNJ pxQ20܎R?ʃ`ۮWR.D i^H}_j=}zíN?u;we+ŘtpODaayHtk>'}<\Ӥbw}C͠~ Cq pאxnlYC_K59Ÿ6N\ j\kap[>&"Zl/;߸=cQ MaT;qɢ];DIgaqTOՉkL<{-t<-‚1/,;$v Eߢ=os K5S髹#,MM.<ߤ5ڹ(@pv)NuNv\ s!eϯrRP W;Y`ϭ fBpQ0 N=twTl:#n0*,JןrC@_ĭK PDE3[0=j@TeuR@8ܢ}fOɐ B #I ِ+-[vI{I9V|u6f_yXc&ޢV0 "0YD3s yxϐc¼Sǩm\%$x-CiVL^E+7^|!wҽ#]!ܮOLk5](Nwzl9<ms^b&a~Vw0OxېWLb\8RD)>m[$GRq,*\8"!ĤnЋmhJ,yR扬 JȓntJ{¿#TrXGM 2ΑWX>#]Z,թi Ǩ!ud{3\v˚%((Y&~]qdMGSW)?h]/]#lA9(p8lsKJM夢lSn24/-q -.T 'eLu~ PMQw2;zep9a*N7i9:rbe975OfZR9h aSx^<12dNay.$iO> :+-. ޼)P9$mh} bڔ3(^Y*lXJ] S Zw ð=?sLǛYR/3JYIBJcנgssXg#i ?E19޹1.SH2xw&k% ֭8v[7jGLʳX v@-Qs0"VfIei!0~'KH?s;Ôb.J`ܹ AuU˄9P̚&hM?qѿj}$>8V6Ios"p*|ENf;!,% ԎH 1Uߦvlx$TZb^jd3nY'ud-yžI}~ 9GCgVZ2 Zc]m}*N&cA% ;KKChFCD[:Ğ4NɉZږ q80%?m2V]ddy>ðCS  Owۜ*y"vui͌X)'w OcӍ`Hg:1J+D%XnACy,G_H~dk$kwf1S- Ψs Z?y# < ?ߚF=SW^xUz$B^<]֭m8%ŽVA*˺OdrLHZa+1EIѷYzC6\ߕuSwwԞ'FV/CP 3s1 e0GsT{[ TM[a< *_r+᭦1cUjeJ((&qCqh d'u~b+4S{P#T`z۸~)l>&e#:gP!5H*i"} . <kc ֻ=3C:+Z3}^ﱶμ3pD&oİ^r P#ݭ E= _'sb}_ޔ{h2x@L!';qt&σY`*&H3bE-=Dz`Ϝ?uvԇ&ήXtFݕ2 ]nc")z#,7:[\h0\PF 6m2FH-BԤU fՖkN>||أa֊{ȯQ,IZ(?;2žI #[p M}XY=exDWg1laŽ׸ޤrExQ@.TH^YqFj}]_FVϞ6xDrjV1Snu}Vg,&ֱVOય/8 khRitIMY hfMnyT-ƌb(/}tN6Y;@7_MḓeRꟄx!_oFD0v}-sDO.Ff\zWx: 3݇*: PU23XISHq*pS'=xiP4ahhhέXT0i0NM k^k dDހ0֚C3i9O0:UuTlBo\KZM.Z?|_MNz$/(a:A (L!1gQznXʁiG9tv[JJPhkIC#{u!# lrjjF)Xk X^Ws f\hAJ["xQ A/qIrclN. Oƍ8*LoM뉍kmwTaԐEngpfrޟ )'S:iNy)>"E\إ-`O]uf~0璀 <:=&xDN,Ţ͕f Y T.q Ux|c-]jHjrB|'rlI!GI6r- K|'> _."4*O0So f@xz+П[ Z ДG<_eڂԽfIè@ U'EWUPN|)~Mh@fֱ y>n p4YŐE$8, !SdK>c&nTbRx>\d= +{u z5*B:dqV y#lӽd ~$I/?Tq%ZD]` a@btй#ȡ t ď5ǽ#eNe nFeፚ2p=Tמ{6U) S=fUMFN.)0=ʣsؕ_#oD<{^Ӻ^({9Sj̷t_S2xoG,6)m~]Y<\QJ]K~cJpDr QRe/:ˊ**X' jBkqöݩ}&*n&n*N M8d۔C26*.B#A{a@Huj@ gC0yqYMPOI7 1 ,0<"/IB~PqҎu5gu㖝CsLE)5HPe3U׉N)_X=3 $A5>iS 0OTQ}sm=Yњ@ѱ.kL+XvVO |-Y8' ½gvSH$?X )lJ4>^ɠÑj7"D-ì) O-^uYwoW̸1G|#5uw1 j&OD*P'=XvMi%h(FHu] UuT(/E?aK&6;6++(g?"p]{ E,@jxy?a|ZȷÔNDu_^U'y`k6 Cc<4Qo߬N˒ sL2p*Pޒh!9I)3YVh D8Z6b-dӵ;E>~']H~ HR )|j޵zv=oGn5ـXQcX;֏[L%VGMxu._p+̏ۓG9qԽa /^i@ɛ)9'S$:WC`1o7s=r1s8RVtP+.W,KMgvkypZڨ)7 Ľ[?6Sʤy .FY{ۯG4Nܣ7fא0zsp >vOpDorWOx-{)@4#c4:K{QWT;r} "6H=>2|lEuVwaK&Y=~ 5RK_J/G_7!˿4=֧q纵 ~@֡jqݘ4%K>d嶫: y55=x*PZ{#ȸ JA 6? VڢoS;yςv TFշ"iODί}]Stu'`d CIoޯPkqzaϵdZ)լ&bO\؞<=9)7PEہӸh.X[;):>P$?6h}I(bijSlo~ 2ժA;ٺl}*R v6Ӟ #nNWODhk3YhS>Ż.ZxR xMj+ZrF@?$vt<]O0OHT-up|r/V$~ߨ<&_$?Gx3J>;Ahȍ^ETM,萍B=lf7,?U#^^>D`\%S,Y K7DHi2J[*_ -t\}繁̫ȃ|:<[7HjLW{m2({@'~Utjj~ykK`.Tx\GrX1鐅+~é O@ Ova<ʚ$aB.){鄬`H s  Xaa*S%=Sb0fPBw+R;t"gUdDM2/QVGõL)3`Q\rpFdfU)x (R`S1Jv~pROq 5uM`I"zl+yMv>.z~A F4rH \%㕜6BW|_LpWbU3>-4!60`ǬmEl ײ?:|BH ;ՋlZCĵE}اn/Ɋ;`2 IW]hW&Qbo6fknx}lc_$Ȥ$.}+YDA7 E&:F4J RRIq7!5nV^X;f[OV)Skop0=[Q\6ZFCiacdA'vnk qI";VqjѮ;Þ[SyI:4Wǐ7]ةE^YJ#7vxti4>5B! q<6)Tb˖67F\)C9H`b4od Hʎ+$J\y59ȷU+Fz~r<]^eohӨW=Oi|6Vc;[p>NX3N>3i73hlx3>iqunC!c7@v*Ss* fnVfp/u{6*#^.:]J< yEeF%U +_3M U4U֒]@T˖e``g5f4VY@#^ 䣽2N@xF|z b,}_lvKwX:./\0hw &K Iz`{몄2401>vxrȵ%YBt !P,qL1y3UZ ɸ~;{UFy]z$|N;|jΏ9v[ 1CB jjߐR:7/9%)-:pވ vzCA)Igv\DϭP'Ϻ}f+{qծ|S9fps}o"Ȣ'cjvQ0ip8?PxvכT\ &{\_&* $).[F“,;S0ƋSh>A]Ϸyg}$5l rH L2$R@|g*x)z8#+tF`pV|ِO8&9@a;^^z=[4vy*"ֺ)>D+D,b(&FVO,WUp>Z r2em@{EZ4xt)>~G&YY x.Hwsduwl>Mփ,.`ĵj!CH*̀-F?MӔ n@i>./C‡.K9Xi'L1 M'WL|kV ree9V?"=e?r !;:ryw^uNdIɲt@Z_U( d9㎨X<U{mهv`/)f;_\e}D4g٠˘0Br]0VfjP=¶+`P؆Lm.y7o"h:OTP(Z@X0(t4A~ Y5 ?;"w>ؠJ}[S3GN c87ʽLC"ϹQZF Ͱnwq&`}nh>XD㢡t u$O&E7*`9ggzb'G8 5gZfF@Ea"`~7 C{K'-)hWV -K8O5F[z.\ -iwwKh!PjAr*:+,B>4e. 7d<4]m \TE~[ښMCpvH؎ۿH;(t3G;AE)x߸m68߽TEQx f<T2JNo*PC2.Xރ-{NmV͉*J;0??lʇhAjH ;zuUHGus.?p4"V <<_do煸R6nDx9 ,nQD\bsPAhʚ/!ayk3^=v`\X`|iĆDȁsM`ޫԚɼ^>qd/)B'&~(AĒ.[Hi3|=[(Y]~L^w$@r@ɊhL;9F@Gډ':c J%p.Hl* s( 73F >[7;2?ͯ\`1& y #<Oʸ1-Үuл7kA-0*qI[\R_]L+qxЂhku!E`;=*gyTiw4^'AV *bFr/v55 'TքB鳓1kHZ+xՅ50HwU5h^I" v|:ZO\:$֝V1TR򳻞ޖ\>۰e=řSqgDd9~8_{HbPlLKsEfW4ԐÎ':"9.g8'৛¦TIǀh姪z im"N:QA!qiRߺ۱yLJ̴M3L"f @ti-)}lׂd< >'4A %FN~Q'l8skݢ8eo( n Q4@j6SѱRC%3;/؀Z H>yb~6p*[ CjYC\i0I!UrmBcrܤXꇯ\Y灹,rA1R{tUHl(\wZ|@"<)bwrqqƨoyܯMYjW)?>g NA 3r]v>^XtzNǩ= a%A;4bO~L}2o KbeYDⓞʌaOTg-,'g‹,(=^R$OxOI! nK9kE⻏:@lN/w̖jB*aXow+2CA0dc?8(:}Je31le eԑl^5P Fl'kO ~A!j륚^AM\L/H4C!')ab#NX@xgG;cQ (޸J#&"d+Q`a-M<uÑuc@?8(uGuq J;tIx/M-vڌl)&IR+b+UFl sP"v,3tT֛(x/Kv'_&zOzOZz#,n3b{|x|vր4eB/ߧ9G V\R83GWѾeJr84aWث%OD,_:3Ju{!TE S#o֧O)>"ԗ^9 VLE!_^CI٤ ZFV_j+p[VƵ՟n߫A\&ӪmD0x W*; ,)51`βu!t:< "c*#QS[[YA!8Y.,c&yHf]0POt彂࿳1sʣzkkwq3{T:Ǒ'xˆ7VhQj?]:6E> WT~A:. .*Eth7s7q!i5v)q:+gl\J/atO7'5,U PM3v%z@YvZT&Leb*+:ڌY]s&e'p9G##I^@-fί(d&QBHn^lM)˹Kx› y$]Ꝭ+DR*_ia=i(yXXӾ~xݷ.6]J@nӣ2yB_|US2x*HU,œ ViMmH:$tptj< D%* j67w.,ٝotU6=a YϿM˄]@vx>@6j; B x`U8.|Dyn30RY;.*Ʀ nQo|̺)sng ơ>eitt&JӍMӘeDȗ!`E$hzN#f0U{Qq^'lw(R2ɋJh{{pz%`^o#C( `Z`ѪP8>MDKX .*]fa{BYȶнۄ!qynvsIjȶP=c p-W1+ľ KV#j_G?*DrA\4XreL r]LWaN9L_LA c$L>#%V1mCε u :y }C0 oLX=w! "J՟ ?͝IC UQ;oT:*3Ţ8BuB} n?0צp)#?LjNҩyYK|^vG:5=0VΚz-֯+LQ%6۳ċ8քr1D*UrDv9(Kj BqP}HbNs:L>7zкb>/75-rjz"m`fcW,cVҡcJﶅf78DYvSCs 0(H_:/c~MY#9ih.jHZ]DEy5!Wd[ӹPMfFeʿЭ)M/}ݏ9nZJH7yvj:Sـ*?cZF>+{f{:GYmPΘyZn(@s ؅c(.|\Hp=|ɮ/ɁfDKn CI wA0]G !' # .໑˲m}`R[D,bRχCg }~e}aJbEʱ5fIn8wh8'2{B.cwO,CngU}b]zqj08B̿rfmbx'T~!{>@gHpde.3-}7߮2 D+7nFP=)I=cʢ%v5LP=GUA3C=>9 VzKWх}j-u:o \lI1$,B=)tK UyPl)#`>L%,-ysbA^r¦sC` +IGBx$k)W2fk0C]Yc{$P{X<_b<gxIl9զUz-$%w+! {3 n6.,RV@dj\Y / QtDoc[XoFD$YY" f5sOwѳKԭF ѫ 92>2xSR…3E[mn@>Vׁҍ˲a!#8.WqT6' xnߴߠ̋q-EgF[kO A $>e|\}~G%MIzzRNŠ^ aM(I%Oa<فuug·#2[,ݡn-"Ą23WHսOLژC$oJ:JpU*)D45=$_j͆)6GOK" =nWO}2U3aawRA1' Dv MNh;ꤷڱE'^>V%ÍBF PJRbU,-SȡVi>.X_~u<ܜ`rFi3kDk7ҷcW~ pj.: &мpVI#|GNg>k(EC'*}Y?4vrMO6 ysS*7q !z kz)(q˹?|NL" dGa=4)"`6J=a ڼP{mM@DeW]uv| *N<%3)=O9 pxc:iTG0/ jNAV!vx`$z/ Rqj8ٖtT< 3>H̷18o2p^s9<D=H+pNmtꕊ} - %Q'n0'ٰsuscaifDHY t8L3`$9Z'ˌG9x.ˌ5q6 壥r[M/B<AΛdeW❰N'cuk|Y<̓(l)gU  ~1++٠Uq)0bڏ_."ibqL&Rœw!W{< 4+Rަl. >rHoFl~ovDŽ_}Ȥ16B~Ic"^s\n$@05{߂G^ʊ3|\;# ^vhsE0HcWS=K#ɘEҧN!5V'pi~[X $D{E훡qhj/Df4SxI" ?M]<{ ;Įzy.}b~[Fq=ڥض ToexDNa熁 ʠwz`:uK$&`ī`y!!Ԗήj|\'Ps%,~Ҳ" ^ڂO ˦s PŜLovR+AKѳ(UW{Brlqup_6Hl^CQ.GWqbRAdlS#0pbKFIf!eV4(0&, S4KZIrK_"rv~*}dSzӶW2:{jT cHoY'^e8WvmӞnr~_KDZ/vOftfk:8CGvR/cȐjM*+j}ԉ=Mw5N>V/ y)a\wWӗXrlOPLl%K` QCGIVsXH^2`~P޻tqfԙ]J"Ԯe/]T5:S& ^g]TO80&>% #wKEu3B^1`}ho )J fDb%"63A0 Az;x.yA.WXM¡X tr['Y`5">Ş&1F ^J9O>"75ñ?ܜk߂(y{%7yOQ>3|V x' i.t&Vb:4ϧߞ|r\kiEv:;ۊw{?·g5GΕiՙ+%u7@&"يɣ[RZأJ-=j+U$[_n^Z @MR?ЕȮa҂bl֩x^͵湹6ko8 a$8r^NE3Q7sXt tKf~EoLl5?2_1sS9@@4xE1wvIYaE3W|r ? Te6;/ݗstd\n^i\4gd*W"xh?KX6L3h*4dxiz;tZQuU,d)]r\udf2,j Q)9TwA=k]mq") asrz1C])\|-XǁDɺ3y~!T؊ѯq0if ^RP.DrJaeR NgI|@eGd"yϧx<3"CSj-j>lM%8CoIp8+<:D/Pv{!N_ ퟏ'=q|w~ܝqݻ'תu6٬G8r~OѾϹgf v 0Z$\^QfBvE= /(A=W4 wd`DhjTxPym/cRE3?B6""^%zφHIWm.7D2YVn&i'a%IcbbA^Ve8fi XJQȚ[n?"s4ԋ9P|0Vֺ{6 T:7p^7P^ xN(CқTšnUҼ9yXYʾLoEK#[DiTv=c%XkTȧ7by*xqw< p]ěM{3ˏ eb?DiODvؕ=6^hNvwch }}?rW|5٨? vnpsc76|d;_9f5!QUaZht^<7#s,;d:eA-ҡ" T[J,?~033>U8kB|rm޳D0'DNj/1>RcʞY+2pje>HXaW6 H {[nΰoʛz& 4/zQ.a?^iѸä6x`f= P> VfAɆzn7xa߸J[_M6D*(>q=WyJRJˤs~P) Km.Sj:1ĞʹnFH蔋?JőZ8&0{D"0Ǹ=êDM9w<^`eL2z\I] ^FrNAW 'PFܡ. Aq 0[5 6TP:{Y?R\I`@jYOjD7Vd#3ả3a|N|E;Olft-^htY؁iLv/_^sbN̥Rw[ɻx l<$mkoJ+`8i2KD 6@[_+ 9GRB6(lڕ$ A8)j)`<8 qOWMr悡W&miہ\jGh ῿.;mpG$BtfqON >̉ﭭq?L*ǹxX^E+Y/a&aƔޫ3%"wp$^f|Td;L==0z olu"2|/ιj/66!m"">h>f7N;=;J}F"%aUґ=z >л۷95Vs4X^]4) TO8j4qN ͂IsZw8u;wA #NHH+g|6J]^M҈uM;jep!jb)-x9`z{~D*g`=0%$ߋh[A2i5cp8xCJM> 7+Ϟw#nlj-TB7gF ~ⴺ<~ pXNt UXj &d_wgTI z: 0{M;G`6zoŖ*RP>yIږ uARN R:1z^ߌNSɅ3AQ NgdtUac$~6zT2yug!dChi,ܸ1\e#=]WVUƊ{Ed<)@G1j ")G0`^!|qtDoJp/VwqƮJcqBtY0)X(]nMXR+,}:˃;`kR-/]~ɢܯ H膵4콽яh30YMe'<>Bw"8F~ +b/"ȋ&()Qof/_Vt47AtB,) 9yQ>3'U|IXlΕ=xYNE/c7;lSm LΔvO|wN|xge+VT 'A Zl:g<|5TA5Pw :nml=2'.t%W 8蠲rAvGITexEU YF[qwuS5u e1BKT2UrpץG]=\H<iAwlKzᙶƲ]5C-h*?~,:1Z-~ #?  W+hd@n1džb>J]:^a}/q.ҹs"Onj;C5dV(IGI%˵A\_9B?$yT*7S=; }p]V} _ ve#pla2/?~Aˑݫ5높]kh>sxߖn$JO_LY*#)c3wlW3RqOmArk`CVW5FwR"CvΒxVӐy~ڀAS_XvNH٣3ϱOJ$6$J6<_JBxo4PDycQ}/&);azIh9Ms/9H%h0?M~ 7} BH;j o"ꄆSI;7vLzs:!sR3{a >I{Xo#CխFS9漠Ol]Sl f ^l`Ih8jxQgZz#^s(ȽQ4ƬۮF3l..l>,0y\:^/Hz2P[)(v)2_)31vU&^DGgOu7fJȂC ijT(dߔ7RpTww~& _U7+LV7Ǜ vYOf3;ܼRf©ڝ]%Dَő/ ~JE(Q ]g|qΛ ]fKp;VG'ɾz_t1})EƝȾ^56xq=Ceǽ ^ 3/A%Y(։Ы~D>\4s-3 o_ " Nr4Lr/XUO73'vl=BK*6j=&'?+ 3vy cr/͙oU9dqOҪ D("^i8#Pn76PxX_}*_].x'XI11z~ԛTԭ!|Sy~} ̇f_XNTv{ːA,~s0s3()#Cҳyy )e JC| Ӷ_D"%I;|ޤmX㨇)V'×=;k]ktA~*u+7![0j U?R-w1GtAX/a`Pgŵ|8p;ɟ5i5H>fڹ*nn6sԝ]JXJp:28e6c4-$UjYX)is@0٠#N6A<^3:G4Of0r.R.B4F>f|'CCaŐOo]}b>K'BU^ư^\J/*anc'q$nݳ++~Q,c9=֞p!vO%KCT9ES+jPw^ŚQ>ղ>TR9_[.6`?U ?G%1lJ_-\+x+*&4+mсor/z fp^߁-IR@H9H;0Dmv`⥄T 2¿%x 4goJs.ΰe<Q 0jIm&=ā4=BmRhW2q"BFr).,ؐ dAqpB>tofݱ@ ~ղGD:z!)fwW!kT,ĕG C4R}U~"l©  ܘ\V& VX D;Jm85G5sSjӟס/-Y.xbQ/>q! yN/_dmp"$a HZ áߕE ^/P| p@60ex42q ldt(+f mA9})ce t<{_#Xgy{qBH8;?IqIl9̖ )38LA|[Mݤ&2my3 iFGwcv6jЍZ15y'KXreNmp"Z@Y9[ںٴP%C+J4[ l^'O'W<'ׇ^}<:6gpU V& ۱dZ J}*@$dB65-χM!pyo-YPPpڣjϊ)UTT *1(ـW,Z1j GT'qϣ~өyBS&Oz_5陲76?unjZl+N`i O~)Wy9[zﱬ=E?#gn%C%\%p0rG UNk{Î$eV2(0Ыi/ZT praއɈ?2>r /YDa]H'Ila]p -)}Se"1~nU6Y1vZ|+vIz-R',ǛM$m` o'eaJ~$nŝ0,q +]+Z'uSZ]PG[:6T4}Cbw Xl(iڬ8aq{b.*a;99ƀź0sӣXMP?dDh(XzKάv'b8vq2 x6Rp{"4!{Z1X )h J&՟BܦF'Գi >.Ȋ | ^H"0hF{]7c dkv , F'F۷FMBfWׯY q9̘Q]T.&PWAG?lR^0\jL1^Unlt*ȟVT@Qz2 JϪqgV'1D:Y*bk ~3 T5e_S-5ocܕ@K\A w)Z LT:N]eU }Gu@rWnșܜu\,#cLwM{K39(q'rSolEКmKY4<3zvtl`'ejMD̛->l]сs|O(gTZ.*V_ٖNeh򁼈X}( vwM͇ =^t*r2]zM/鏖 \D{YcNG h؟P/cܱeު؁QwC ak~Z>>im Tͯqq1!xVRB+Լ/"f|=o:̲yG2SkAj9!3c(iyzfUz*YX{6)q:eE%Tt / %D>&QR‚rn8js-z·(رt1,JJK\PK>`CW#Q`u3^ebWU%v\H ZUEFks1 No1u=jW"`N~4;AnQ4n[9(MM0Z݁M!%XnȄkr6_FZKR ت/l~ʹObY Ho )iOa̭!M;1>^˴krhf]_kY=@ e?f)h%xŒT(J7VOchՇEr&9AΣo>])ءC2%@udgSJD(/FѧcSN]C:KTs^T숹m{ Ʀz4.Bڐw@ٵ\B D Zh0: 7˭~4]1ގFUg_Dys᢯ǂ o1R*4S=7 BE6n g 83Vq90jB9=3&9h& ),syW(,[Ӈ)MoPWz(S/+ -UJ}'*>D~i' 2hOfvq%6)z12亶@Mf,Ml?VAYUNɣ?g,5L(G/qE;& MԳo|G!0l:AڨAyqR8]YK&JWH sJ("k:s|ڛ?Pٶ-\uiuج'SW kY㢠/Pca4#0K+> ɖ雺 <,pDĐ`3x~YiތW0M@†& e;էܪx4SM9}yhHctS}XiL̏8߃1}J5i4xeTT3badJTA{,'uП_Z3=v"zBQ]u 8K[ܫwMF*`t%xCfR~NZ=D̨srT˅}*D(m*Da &/;-rQY-U1ARGlxY -dcS:4NN+VĘZ*'=`k 1 Kdpɠa>Sck;XL$rE}j^(G F Vrux] ?tv>s—5O؛: '(øx ,9a.T|IbB⭜1T29Vy0 ] pÝ3 e( t!֥}k:wL~v?hЫ۫2'e$2s/~c:\;3U&\#l@+<ƣ3OΝ |bkf;5ّaI-`Z'5r# F#ie[nf &+˕h8 "3bGuJ;1z;cwwٲ'$Yt!X)C5rLtvC0r.h{yBv!d6@K49 S;{{a~Vo@UK/bK$Ď,Sn/ȳK^ՈU U9n>=&5OCWO:Kǹz${S<{OT\;lv $NZ4h6+QC7L; @OPR2pmIeI=\]]WVtyK(2_1lJ܊5ZLi9;d#.}k5ҁdS9%Y&I#x ' RlL9(v؂5='; s|<='zXLY {? NJwdT):lu7>4v# ǒCĎANՋ|Rv E2;/Ltai$FC,}@Y(֨_#qqUrZ.zD=?ngq[PmRYPuH7a:č0z5쳾ÈFox;@S}|b5VJ\oEbs˪{Lcr_  ޡbt^魣ŜMa8W[n:*` wq6>2|zTU{SŸ2{3=wW긽rdb:z e"i,\~ 6*D}ae^8q-Hf\so|xS yYEp!(?:j״jPZNQXbK9:җ0Rr8F=Dr[lzNh7߹j(\W!O(m6p}V!8ƞէn[Rt̅hʙ]e wQuC (+{Pg=O|,iBT!26ճтSMLLy TR mL :4P/υR!B?3SQ'?!+k +V)~u"g#&Y}C3A㘊_dXPCz7Mo]-@t$ӚY&-;Ǜ zrew6]KS?ZW rYKl|+ɨ<o\w>JLVH*ubCTm>T \$BpCn Yg͝dFVE8j^׊sB^$˯^<yX-)dpsxKv;"Xܽ3C g?ZMP &6Cٙ#α7˅u⎯d%geXJBᡔõjWs ;kjFT*T"eR@(v"MT;ꄂ$'TgBuT4撹&>B廓TW ,Ո*>eաF67ԏ&tz* Jo(6")C\<ɃVQ*ITyo:3Ff(eJ|6:^}"gGE ЖYJz*^yT3$]aYRK7V -e /cߒ E!wiC k\F`m:n-pXH!0"CKbFG/ZǦE2BNѿL9>BQ F^V~;j/Zp#P~drS 86 _݈Hx_{3̍S0o %/Y_,Či3((ߗ;S{ ?@+lZ'_i>XI#|jZ9o\J U>>F |`5h<0 v(`z67o&Fhkށ]{Ymki_6ljF:5ƸkPY?ОU UkP;5/ymh͙5{6[ "9l۲,ɯJ.SR< 26qܑl8F//X?nhfț:'G9V ,3E{%2cUF@ouxW 9;Q hYpRI2yn@i FڤAS2a6@. ]0Toݥϥ ƩG4S/>/=K83뾔ޞfb ^~@Q9 _ǰ{ҕ˛QE%S\\zVS\~}B=_FY>-GQYr# 4:`B*\rPfjkdTc] Ixt^=ۣF4P֧ޖ|?Ӡa.,ib#ҸUmFkY KwԂBc_(u8'.KKr.drA/ouOqBqI#:OY >dhE!wDrA=q))JH1EMS͋t[4ڄ@~:c=PΛ`dNWܾC2vɳݪ#})N%I "%@XZ'C\p=1oR2ea,/JGJȗ.{׍V5g3^ DJd ;EXC 8 džȒdpmk˙`Auy%Iu±ed0ŊHz?!ġq]܁ !Nyr"v7LPQ. ''H0*Aȧ&LY̠muAG Ddkd 3)L DQag4vzԨ9bIjɯ94+%toOEL,7 ta+Pq*P]Qxub-*,ʧv! hAS;_+=Mok?/oe"0 G%/jbDo'd#,sHs g. S;apYט5Pq;S[_lhf3%z{w.o{ ]?i{q/]U'/CKHHly}Q{A-|,^^ZS> qP5䍶ᩀYA9.ggo#x0%A!(6_E:O*O>oPh=Nws!_5ML=W@T"j;(߼EZG@BG; uY'j=T*2 tbً(N^q}QУ%'}[>9ˁ>ngT_戴>b0z=F_ vy@| ~/خa(4#Ɵ0FП5%uOۦ1L0a c3Ny*p@V>@4+5W~ i}xo B/]G0Lwa".(^"v"[o8)tG,s V:D+kWo0i)xǪ,n,9;'֫ î 1OiMs@  #[q*/ #m~fna7p|匉(O\CN)hP^)Yliⴠ1 $/;<(OߧD\u׶vuI)Tc0}_+֯ij?>揬 hUڪKԆP,LAoC $M(8MKږp~x#Ȕsa 3Lĺxo;iD OTΈbO|w={0_ڰE=LI-n5 o5Bc ao2ضg%U9[-EYI1e9Z/& lÁjUdp* ֓v"wnЦI0_e2tf5![9C%Xn+JCD"iykx2rɯ vh)7BFAXȌb/AY͌!C'A-"Dzjgy=E Q&1h.m7,.=18TݍJM'W ߡ&{v;XC]rF.nPD 7}E? rK\f D?L|zv VQʟJ EXm*0)! jtq0B9yN7Wy[U?Q}J  ُ}N V+J_qqdS8֏>7-{/qU[ #cE%R !UZ= ٭8ˤMS_`VWYJc]Rz,.k[M*TANRţr9\$3ϊ!s^SKt7m 7zF9 l/$:j5E=k`6!1j=^k?_A`Jf&#O+|؛ހ}m}kaBROcOGJ]g#Txwj̖ K;dlXzĮr&Y_Kl=c;&QQJ IZQ 1\ >nZ$k)Ф 1$O-_Fhj Vd {Yw0qt `8}_1{_T{UwCxP¥xc1YjǾh2ҧa{WZe/-bavxʽ#L ee&}ck%ߢxWE}p^ީuK 4/ZZU1jk1/C5lZE|XvF5rN%JT0 vˊ,: W>8^y>YݠMzS$p1H24L D=Y^Ҙy1ޙuwmO6L'zBLgs+ ֭VJN;1j ëڑؑf8i>H$}DU8cZ#Zхdؤ)(( /K5 | e`j: %gwXoUgͮaZ/ {LaLỷD(F=heOV A&~vxS9 @ʓ=k%1Ȣ`x7%V4b Lɑax*BjsOgȞK*N=LxVㅻt忘LbՂKJލJ5oX|Y`Ư"|0{vr#œѠ6 wm|-0[>!Ho>lI}lnxq\K Ůl1 ;оz&5%fԙ "X6 ߸JGի!#r\-.[|Q2a3| VL/$WI34>¸e7 h oQoFSc4=n~O* ;GU :>劷O6{AySLÁGCoRrTg+v4,]%VOGj$ X :L ͵1e9@t4`%0 #n2BB tiˀU7m.l7FL̊>a$2eZF ct`Ն5u WBaiՙ(#A%q/_| rJYB<y5Pϟau=-3&uGR?ђ?7pӸ2.g&JHmE =WQ4q!Z $y|w<>}$dPރ'0*S+ 2CaFruCG@ X Z fV Mq@eBt=n3e.qZJ!2,$"}hbe >qȗ?~WL{ї/ CQuUoUcן'XR  zp* ܅GU<Eecez˔78 "?,uŜ[k\i} g眕i А4vIk 6|ـD2Gp uXyΞ j :8 Y"k6D-7v<2X)04 ? .Kk ROν  J0: WnQ&fd AݢْeQYq"ųK7ND*I8p1}3dt{úkPIy[9=`y8@eDQYl>/1/i"E[&A5 B_1p Z /!+o \BG)L rJdv5^J`bvUBo[N-'ۋ@H_Jap[ .KdrBVhxt䆉S=A3>OSh &1@Sq/* Gm[?@siws6MXwVY:A>R6Z'y7XŽb]H]~rم5K|CsV3lER"+~B$ZU^ӺыRZr(̽H QkaUرHug㫟 yB$A4=MjOc4L)E~@er|K,s; aL?P#/,^'` t-Wؓ&Q7QQ>T6ľ}7^鍁{7ÍY 3!tG}}$ Y#oX*!$ ]|j{SzVhԉ9sse^6}l$9m$L IDrc_s>d@Izs~߁]fS޾āpJb{U y$KuCgM WD̕EtS_N,3ӳHE_5/Xt\7,iS\|sݜ|:NI n1-">:\-")J|W1ZJ{;-U,B kr"O%T ;Ç(!.+{' 64xt b" k(x3SAk hE0&vhuٔ!cSԼRFFhJxZoHْz% BO=ӳKAtlls&;}4`yVĿ ];}sA &|,ü' kPy9egB2pPU(Ostn/f(l@ĺk43D#:~S))!|8_ }IŎ60kV[`dF6ixL{ }55blPGF`U DL $iB$3\;cиʵB[pR/ä'*eHNV>Щb׈nbXTZ)cTfCp=L Q4%qp0P.UQ<\:R? 22>!:? >iD sEn^+1)zZ'e캏]u,Ј"Xz+V,+y_Ii]*/0 Kʏy8#2b7YY]?"LZ~s~cifA.1nnKCg^@`,kfioLۤ_9 % 1@7䠰ޯ+OÖ 3!A DBFSZo+ey/սQ%< $Ɠ]gqcd;DCkŃM)5XR)p!'vI3fn-o!g,rf+]x _CꪈU@D^јln>K+։<''ud8D]<7X !kdRn5}/9EEY92mӦ-iͦ>]D8Сmc EG!$2v1VmREUK "T_OZv:|ˎQ9>5,;`0 5_і7}wa$-VUQ) IycY^ `قoËu?ҫPN<%H@qP%dnE v 2_4{5ޟ/U#%MΨxRL4VG_ ^)Ux4k>sȆ҃CץrBrA~f77[QB`=So7klIl%Q49tod<;G{mYvDCyhYQe#Vf @Qf8E~Dh<ʌmv\ GDY8ӈj="07(l:?1bvf!Y{< n}L(hYo!K4SLKb@h$ /}7A(YN rY^ dEC.gA>VɩH^tgў+w%"5(-{C(y7_qHwAZTZOmzh TPdkڪG∫@j#rC hh-4.-1rxO')6'kG 8\>^,Qw//ڷ-1qɩ@44dg=kxC*-$hBV t|0{M,|a吊b|޴nQ,ӑ٢\Kxjx"QW(۾[b;;j'>O}r{ØkT)-^BTΔ\ ӷ?'Ty㥐>ޥ@ cX5X$b3ډ];SCLH#f?9_OS)`ĨOw6FWO2R{W7Dw2b9c&K 5|ˬ C٘yvx{88 us_/bBȣLt\MI(XnhB Hw$;DTR| =7&0NHXX#/;=@I'faNIŬTy<Rŵ p WL iě' +*&~qE3sRW͆4Vr^Wt\+wE;mBg \*Rv'ں \ŗ<kJƆ %ཊ#"4A̓0t`? t2Zꏊzܡy5 =+"] efvj")U *%8_W#E@N'3L^@ 7@sWvQ6bL~ 'o]>HPpiMU R- !L pOhQckH9ZAW~JeJ@$'8WW+t_3R_:}\dtd (z rkJ]q&(%eՆ<ixߎHJMNyH V}"b?;Cfp~Kfzbli/f`)In;Ik%-K\D{Fz*m5O#E= CEӼ :hml=Tb^en$VHyeK:?U 5+f˗R50Y/ Ӄ2M,O`jbR<:k6(6(P_nVXBnLfpX_E,ԢyKȐW Md=o l\>&g7D+ Bq$5Ģuf7#,4D7TA+.m*؍H>n5 ڝ'/P{FPR\~;Eܽo ~t{?M5 U9Pӷڃ x?`k;q7~#%8^НdANVvq+k4DN|tj{(LHJ=(DyiK UqTMO N<Y p+4.xD׍7<ԧ+dl7B ˧s;-?HQ_kLx? M ?ɡBU ֊Ad ON **:t5٤ypDh˚1kFyv)l'eݴ_,%꨼&d~Ca ;6Bgg6B /@֧Lث+G"ÿ3JIQDE! ΍[ɷO#'B w`ȎWBcިgJ%@:E퉫6uAvZn\H;aTraT d eӲ,3vήOiYe5u7ˮأ>M6rŶٓ1rf=d;mg~I٧:tR/ 3$8-ydqYe6(X2?5~8BuX_xq!x$J֧x+<*[;W,Q<slD#=9<0k_ABNlLXB  /4_r {J/ZEmD4X5B՟}zmt/:U3.2m~bf3z.u;Q@KG>')1x AOB ;-ғ~|WAPq=՘J7Q#IyZ duw ĥ+Jh0ټu WxKj0@3f^ n^%d h6r9"r՚]e9unZmTWrŵ?#^a>ҟpI:;&T׮W'FRYA8K[ąCU5tıRHB7=KgPl/ h5C{h ba_S̠Ѿ.9jK^?<Ώ>@:NvhY;kNFsI{T~\c drt(9oi}SAOOTtE `ϟޝ;ؕ˂x2#KHks1W78 3Y$tguv!ʣm4kd~,wkpiK֞F?߲kuU?wٹ`,Đu%kv$? U$nSA0PJ>M;e$L{9=awv ,LfrT{PtnܓDp }wtqKHWU?8>yCnXb0]wJĥ#jѦWWfdʟ;Ҿ}NPV[)@j<wylY }idT%E X(EA{ 5'fDx !R<V\N6 ]+f%  ti{enDZBaCvj8L9d cHsY*_% |,BےTeѸ}h1ŲW~:zTH}ϪA#wZx:W I)~ezk"9. P`8OH-O {k\ S&z7Y>H2ut2g@"q/Ll,צQH X}S V2O]1+"EM]tyw4a812Q=Te#?xzBS (U A,c{[[)0+*3V"xtSe44qx{SjoQx!j[LO1oPɿ 1faT#M^ d{qhƵlhWPNЩ+KH;gС\i7\FĽF}CB=45p  V/zO/?,a$A)#rs9Gח'EZ 5*mmy  ;`WHz䱐 Fk:KKם(RDTIP:?CX_,;N߻8 C2&G/\𽽓eK FK1' \ -Ip1rK5]oBD1/ sKYB6%,˙LGΦD Rrº{ uaa܎0CYkY`s,/2Q3 7q{]5 r]M9r;|<{U@vT<0s Jp>Y|aM %ҞBISca`~'̘]&UZ1Pu\oVGq#B*߹-]-ݡha&UxaGwf,ϊ{AEn| n:M\39EW?;닸萡'SŏMƫ{y9(pRK|GIppLe2%(eeYS|ȂwL9Fy jC;ә)9uswi i$2v$KpuV/Ŋ"/zfsYZ6N&m3kQ ˹rɆAI"MWbG*1řAFK-vhtfK]Q >{Պj6_ :Kpxvd۰X-?!žgjz|8QrkLeRʎ|Sԝl|%a1t:vTlB)/WMk6ӅzD0ڿ J;+(^=xZu=y-3ptSwV6G뭽\stƹ <œ/?eScE_i ceߖ)nr(È'V-X}ԑp; "yehOc=y-O6B}}(T5"c?0l ][upVAɤ~UӢnm++`#6g+} lL9M$Si>) 5-tޅK{j]Re殄5_TY_7=`W*zg,-}} ֡@+ } IF*)gWݤ_-mh_i(LMxh0? X6R"uݕgkk e}dG?.VHfM[D8"%lb>M79],ODQV”]Jk 6{ fve m4hЬ/5];v=GD@ԋ4k/0]ҋ=VT`ܯH, aC6Cݓ9]Qh$x~8饌I] &۲1nU#;,D@bHHMzsdX "8J^bFQ@`d:7ɞ tt+Ej؞bi )o'ig& WE>N+?ejFř` >Ev@SAܿ?Gv;Gn(0CX[LY>i[{a0%}?5M\1I(&tqJ}UQ[Wkzz5cM.[4{sOPNʸcN]e5Gձ?$Ő NA!/:-m~ړ7KM;5^P˴;p~e z K'4Q|ݟY8w|Xh]hub2Ytx "*7pB7.?L$$֕FJd;BSlCX3(U}mrj6UGu{+zG:nC9UG^]09w6;k-vOUZpƬw螢VuIxBRT-Rc!_mt4H s6Bn\?"Zd UWBc<+˥ڀZ!z-]D!ghSdTrddM2!)fǰg6sdc# qڳCݟeH7th5FУ bm9fۄFA۲ \&8C:XSg_C5Xѱ'vIkYmZ>r* Ss! ~̩HxR-s84jL9ɥHZ.0Q!ื [V@ =.C<!%dd_QQ|nq"dbnRqW o3eP]K5f*AMt0¦˩sV$2 $4_"L|U h+`Y;i#ͪZsM^ !5?^#2= LvI^Koծ۞_ٶw&Sբߟq5*A61)HfScZHq% 0"eU SY_aUY'ȅjnqrC_hJ5W\r@Nv~:E.ױGBP,8[c$$j6` gnnE}8y.Z7J8v(}VQיu)!3@E%5C8=_Gm:CYǢȒ~چj}6Ԛ ʵNNAB!J/+9+:jHJ*;liZ oTZgl@ lݎhp(k`{OufO_‡i@Y ??Qpl21ͤ`DŽ !dCxp؜"+3Ӭ-r/iJ.}:ޥ1GɪX ˂0a0{^"μ%(PyY ٙ$);^awpR#mo|0LR t֠Gmt`fm)Dw.lԈ8Zms?_sݶ`НBFeВEuwj~7ŝ "qp҄ h~vt~ TKĚL0_nw- ;ۡ#$wfwv~KOpoI>qCnS{6||H}}8fpc(Cy%={()UiYm3;5ֵ©Ǖ).;Nhj{18;_2)7Pl8Š$1$G&k:؀T$$7..s.?wY)ne=AsخلwQ=$Djv>cw#>]z Tl;ҧJ1K-\3Ox^[H2 yT#!..Wk+cͨ1 fpN0 TEUX d|f#Q›-WJ4 8 s1TyDSPztS)俑`َ1zI$R %/L֬5ӵq\(l2lfʂM,7,JmQzVT3X/1? `_罓:-pwWod9T&wӻN!r+^Q%Aj]l5#t'YLLYv~  ٥ʊm9e_/905}mp;nH1Yx\]-Uz#h4FMZ#c.xCD=L.SOw¾ƮthՐ;܅gE?L1mdj%5xdQi<1Ak3܃6pf 0C-,Qt؉УϳTAIZ;:5vxY:] ;]ȍbt P=\KeĿ)Ż/ >k+ejˎr_*[O:uD`.8Sy8/#M]43L>=Ќ_}b>6d,ksD#iL [N on*΂sZx#p /q5HUrWY.)H gƏW;$4&ä*:41> {vV#4[LҲc&dxpǎ{Gl 2 fASMQU+r#̷͋hC:N;Uّl(iv:yl%eU=^(»ܗ6آiҡ*t,΀IO^cKF1[ZE=\%'N%1Tuj2XR|MPC;gZ[7FPez;Q2?CgK݃SIrFm,vmn-,p]$GW&U?32$~dAL ^,@x-1&mÜ:# /?`[jgU&d<.nG`? w/Yo/#"Q]_$ihT:;ŽW(a<2v-y081Ě[IN;zw}~Qk o_z( Ү vdg*޴̾т5 Dہio̿ T-J"Qx1> *#P恶M(e!h6ݶut?d r]J+0P>kJsQY];X} vll.i9vcw'.m#p,k䧶p*6}#r^棋Qkf#g'krwJyR'Dj1o<$R),GQCt**\^B OΌɤC{Ԣ(-^@ǒp%L䓉"΍ aȞhݮM_wm;hKB!+{yr?c,:ڣ tfY@-ܠ{[ MH\`:d,eNbX ɲJ:)+')ԹxCVoζ}E<4 n ; ؖfVw@xg؆^'exg5G @=2,{5-w`k?8(HFy O1{:9썪 7H]>I tMAdxӚY21GS:`qkN^ \4D#lɿۼÆUk$goo,j`">0ŸlΜCS_Py~H^F`s ^BR.͆OMH[Xښ[i |Ŗ fa^7c]uc? Ccuou/qz*f?LL8fQ0cXoE!&zc5 D]w=fMW8[z|<Q!yyy6؍?Tar>u0@g嗵;>Ib|'9 4"yyxq%ȧ}CT()emBWU, zNV`h(;<hv2dD~ppm&,=L q* rpXB`9K=fIV0n!(I _/2}06!<6 &v^ySt_+^{צ?$_h#RwkTA2|k6*p` 1z*#)mm1Px<1y!*?`jK6x68x[r&C!Ieͮ [gהP ̭!7v̞>cJX bM=]=ӐY8q>z_d6hfjVhlnJԁVkr,ۥ)3D z_@a(5t XTǀR=4!!4ig-=w0`ͫ`;p}N:=`)FTF1xxrܜWtP'ч Ϊޘ :ս&,tYⲉ,̝6s'7܃ajtòj};iu)&"pKr gѱ>n ` ڗATT}4vًoUi)~ ѸOĮbf28o$nDab,h @3wEj&G*oy fQLHEv<%Uc.ҺL)/zb隑2&C_P^NkBMFu 8ޅ9-/yr j)|g7ژf$f^m,Vka$m 5F a^*uWLF*}#TI`jd3' $;sK7 6PmXYfՁY0,-#f&Ld+=M8F Q @\)8F AO!w|nu zrx:qCd| 1Y*,{C1O n.w sty6p'~!nh׻V˓RUJ-wqne J|N_{1#V^bKTN{D}ޡ1Q}d2x  G:[0NF9KOC[EgٱBx.Rm<@GSxl.sl7滛 ]WL )w“8h]IiɖINB.UE#$]"!74$dׂ 'LoH+=?pК'Ԏܾօn.\e4%F}0W Lxz:m:tǓу2!gzO4ΐ9q=/"bSM$nNY Aο~'7POB3VLbw3\]uѺ yQ on; ѿu!&Q~3Y))tRj^Q_Jpm?ֶF {?Ռk?u wsň71ɹ0WUd{;:ǩIngN /7&̬Ɯzyu\3ԭ{"rTW]h9ngw ,F:L!l. SgGj\HxaCS#Ewsgs|ϯ+$'~gs)nIη{-8 !cxEvl^V`1vXtܴ8ק;&4Fj(7T܆}LbԔe;jx.71uт3y#;}1+dJA ]0Yn;bܹ12P6Ou9ŮJ&\QXgxI1!Kbf*Ʈss#= O iJO獏 r5Ct bolx"ɒ^r q/O1x* aYn:*EȐ9f_O%2Ό.ɦY&BٽK + DlaoB^OC V|Ckm%IS$!^0? vKe",9G]jp9#QD,u+(*`=kÔy ^#$ o@ 2_| {O{2ux*H1˨Zn~Hʀ68)] Fشj~.) ,YU9]RzKP'IKƙIA3TŶ=(COn+Rk&FKRW.7T>YzUb#9|X(]*0CPec!t~Xģ7sy,d ]dfz)K$Hbk}`Vl0lY-CRR}Km'G2O4 7oa!eM @NiIg8̗<ٹџ }9Tgn[E#'eΉl?ӈha?GI*AŢyYUM[6"zGD~EEGzGYۓ<q*m:4%RA[=[֐el5Q\H꜖cs_ۖ^/mjj~y0\X=/=M“63 nj'̜,ऩ쉆[wmߟϡohČ9[aۨ~ߢ6+?AM;ظ#FNlNG_4SM_m^,w+yQ/,~HK'N|L~žy9vxcIr:xj3^o20 ]gQSC.M\FQtƌ2N jHT@lh:<u<<>`'A$+wvY;f>9FW q.6߹&;, 3%O [TL`Kf*EK=u _/-*R(m<1M5EpY2T@Gw5WkD3NG&ѩX6TOE@jt]6/WʿV)" HI]L߼W=bZ=ݼY&DFc83k!{#?zߟ4U;S}ЁQ½^]UCûڇ\tJ䞣l"Σ4]S sK HCVHįB@I~7oTz0L?%0GvaMXsfcr@JQ@g-Q^M;ye 7A6M&Z/0qI<^+n*(ehO/ZJ(AH\+-*u8C*{?>CYvڀZ6mr_'@O=Kn7Mdk=e,Y.3m1= 3*l9AB*HQ6LJ3<Ї"K eiȨL~)i谥1HySy|y_A8*6ҭQF/5l<3#Hl# CQ\{1S 4u{X 'C3%։暭E&nl`GyғIXg$"]m'L!*~>oSwEZA͍e&ҰhܩDcSd7ѡ9\4-a նwAZx425UOiHZ:||_۲x:{Q'sGhj Zcܭrup|Od:rPbi3@cj_A5eJ7閛rmAQɜ: Mt<aY>;+` t/<p5ثN9OxlV #(o|Az+qhz޻Q2i(sA{j`eŞbR(^rÃhE7Rq{gTk1+6A#Ң?8e 6/ EylF@SU!-'u;^t3@g-b=(m-8(vB uD1,&lj[;X/d87x\G]Km /=|ͮu9NP`nYtt_oےdDEw.v!ҫ6tHF0󛫖soַ ssȪ2"]`AeX%oL`4);jpxAt d^J1! QwhuNEJtjNxLl G} d+UK-OKǼ=Blwu/p1,7~4p,+a~eϲ¦Yh?\C^!܊b#w-+45BO֐$n^ T؜O4DMkl -{gaYeC$Ԇ`hRڀ+7BvA/=l6=p R/_TݴԶ¶;peKl| 5 9dhiptez_pOcKs/Au"-ǻ2Qg276e87;Q ]1 P0B5KE+vUVQ )ts$17w^Pn薍<ї# `i\ 39*kiNj7Y7GTH Ep2W7wh}u'\lS'J>ֲڄ~$k Q?gKAg:BQ8Z\J dAA;"烌A&o6`6H{{rXDx5n/L,~-U ׊AُbNH/ebQ,vT01IQAF#4"6^u(m$@J ԈP5NDV‰* Goxﲱa;*p,\(]3 ZV1-*q;2q~N`Fas8 eNY;S-RݿZ?٠0&s aEb%͕a:Ӝfo%o/]Fp_5#ѱn>bs!N֥c1r.Ms]\.%-bo(R[cOfgQdBo 6Ym*y~'4pv?G]$mv=%58.lgMy \JdmR-4x ~9nӤk{8 (lù]߭G28Zr9I%6PqB)Hx[<SJ~ڐȞg&:!uG\{댲F?;YF:- f z59h:OKKFá3pUiI?v;.sS%D,D#mqvslњU1с]MoQ'3i8FJ V7XNL]=kk 5^v\fTkN0( "}SᑑR#è̞&^#_  H'Cl&Not _#cy "dkj\5qFg3;e2 aպu/-ǯ}q8X])Keq+>r}킊[|=iENuTnEȓΤZǤK: y^yñ[A<%wvڵ*oi1*+hq-l+NEkM~Ti,"OPf{i(͍_YM*Zuq_nhG`5~caz2sJr0(Wѵ̰q@c1ph=ǨFX 90R p>Vw`Q<x^Qo8ɌgB'X; ‘#ӺB г5+.O ~97082rX:6"`uc +x=&)cw[!VqheWS.aeJ I \zMtDt}hWdRTO&0[*SY&:B&KMp8`S1QVL $~ڑ㬠Ɩb`%𪾼87K\~0K#<9P{GJi.GRo( Th)u5g }QV.~}XٿctH)(^x|c#zg ѐ8'$G;t'_!Q;6PO7K#:>" Ap*F6kZ:ys;9.LLE*H(^waZ;'kYA5gZzLХ1- JaL<:H2㺓kMGm:Y wa6O>E=c/+#n7OxTi ᥑ-͈݃1Z+sA5dN@EdF,v2Fe־ؗ&yu9,7@Li%OPXߓǐ J<լ{0feN;9#ϯ[7M"73BT'֧n< Ya$=t22RV*lĺgjЄXx7/ت[eJW|*z?R#r_;ް 1*lWܮ& Itrog|D;Gu,h3k=;njx0}9vT7 IE!txd(5wm$Ql)oJdʤT3U"HND3<@č0 6DaO=x5>s[_UC Y͚Pʍ?8`;LxqUZh@_"rz碻WA/dTx[_M{HU>%uZwoDfRlG6y "ai4#4aklFz8;⻓=c&H}<<8WZk d6K@%#I 4>jPm[zZ'R'oE:"nQ^S3'%Xܫ=#W|MHviAp#G(M9gf^SSWԢh%2¸*{-lo7+c끧EрRT ^=JACwo$(Q?K#Ck7"Vz+;YN6L<&K;K_^$xu3aߣʠ|8^Q~W#tsʳ~p0n=__5M}"j~E)yi!<\bx%W Dl?^bgE |[+5d}ZEIPL=/hwx! X-oi!2x}& fu m# ?e듟i/H6EDv3u}}ZdoQrL<χ.99/rWD$wk2 yØ|h707CYQ_6'XªiGƱ e}KY ~G ş{;x+v-6{ߩεn̮P4c -$6_Ά;8;"Zi2 rʭI!~ɸ2K;?Q^M0"Aφl1,xH65w<7,7S5cO?~MAgثeH۲f^j.n4l$'5Ngl(GwԠ8K"/^;q%4D2LkC%G HMBӒ*C!sV>ktW,ғi `ΜC[Pc']?ϔ<ՁL=ձK9Vʿ#hMY1圓bj-&ôŖ̌.\$xΧuF+Lakڡ^kIttl:!RsSܔ̺ 8CJjWlI(,Iku(eszwi}8](dJY{Gz6@V?ju.Of_<1չ KW3us-n4O\-]s ۮW4K:`|L1ƔM1+7D4'LC4n#?sFR0]Quh{}p*1#vYJ%5*/.剿@6n6db&|ܹjd/y?+ Nd?IӶe֩ӆpɴ=C3уVpH!՜PܳLEʹ.9j I8XΨWda!,@x#Ym}@ju Q`Q`ՈoUbC Ʃǵ`4M2C%IU2 SHֈ+udV'C2ppS T_4 $lt.CSHmT~?*~*,`e;MJd:tUV~FѮvIVW 15(2J wK~'gAcK1E2*ŸGW%GWj|螄u+qPFCqOzM$栄Tw³\MRDB+[$f;ʦi=x x=1IWh![3}ɫH  )/#aq"nG_x1;Gd ^Dz \ɅO{gڵtbXף* _ml!dn0ըYEj6vC_Sd(F@\YUL>|cmϙ L3B kyXp76w `S4beFSgB8 N[|G9Ŭ8y=Y:8St!#b jKd T\tc E28(躵# Kr1r6T$^Ķ݂\y7>F |Ggюxh~IvK%"l!J#`_#u}oՔ\&lՑAʜ\7^A*QQ(d9\ȶo`G 3P4 HpĀ-(]ۚ3O3 |ТvⰪ(unJW"?$Vtgt{;&^PJV*⩡X_BOiDW>"ʂ$HobO_Mlbm*;n]bJIR\${{C4@Wjۀ Q֐]Lc=h$+ !# aY,h `sLt *3,h+=#/lU!\aڦ1 UA;k@mN,1^KԼ10+6w[ޑdUK"wf= )4qYJD_RƾEc,6qВoha YZk[U|(: ySآܖP J-JyZۊbrphR[R7Ĉ>KMFZGĄ&蓀6 GB VŹ!$$;̓e%Z1Tq6!RbQF2z_S_mnc&ЃG[Q s1 @6/re}N5D cK,~z݆^lvRu1ouL=6.>g2ᛱ FMIKg.XEw9-ZE4It{hN#kV N4(;f'P:XP_R0hw d25fuH; w*Hn2/dZ?s8F8ݿ r ˙}IJD\PЊو2!e8'&6Fe 2JTC =i 6QS(|Lb=|%j FUz*F1Ş-S`Do)ѰyJƁB A rW`^.ht9 ȇQe7t앁կ)1Qks8<4őx'wLUQ٥(]0OyZr_.⟼wY)DP5.:ǿ` }AKGQ.N'_W| @QW4NVg `\̭$jVz+/__6xMNX?EvGJ;M{qaIdO?}3u&4e *\(JLdM )=S2xWyg>BNS=̦jW31SyDjϊKGqmh:Xgk%JܪAt5WFAu&0?Z~ʾyFS>h>bޖKI1\q$(H}oKt̾@r͊F۔ _d1novh v$t`)q5@vg >&R@8jI&ry/a@A/}eoqtÿ5*[Onl,ߜwI&PV{[>VI@Lx6mDդ-/MfC{]z^\ %t;I ܤhm݊){dn~^[$oCK:I_?rWsMN:\$$1qkh$h Ze3ࡧ% CwsOew Q숡x,[ÂSgpYl Put^S\XNf>GUV0%XŜ2oc] HFt_g/ lq5cHmn B8 [)lze2{y5o4Axy vA0E҅^Km]w_Ҹ qOk /8*Hϕ\뇊Ÿ@_ukX2(ULɝir1k)҂ hW35k|=UNkW$R#F`q}fP7-q|d4ܶ}=G!;ʔΏ@綃X/4bbHeBF3t^8T=p[a!z}2WP,uǺ8UZzmO#(X 4;k!F.i #&%sO9*9-;#S%)>'zԼ"T>rK] |D\|Z4ៈ }$&))1Չl˜/5T76@ ;^MטЍՕe>Nqwa/ `c3 nxV;XUٗ0>D &Paտ&߸YC)3%7,zj̀D^rljR { bt1r❣!s3}i84cg: iAKBV+8J,#ٯi(`jĽ͞uAJekKʰ<<u [k 3?]`|.1]{t7ӵ4A~83a8-[?t(Gxzep0Q[ˢ@NHWrG5b;%Ȳ o^^Щ%[M6fJ I*|"= S[ M]e.Yl^0!va&CW sll[~\G㠵|e!Ue"%|kN^UY9]vH-gոr6I l9N3.)m;ũy% =XyT~~*gzuN/5 <5zCX $N % 0^yaHzKk~rq>FоO蚬nG'\T롙6_lƞeuC$d$Xj *!?qݗ6fhkw q>ǻxUUmnb?(_<-&)nH|x LJ|ɝ 7ݽ.1܎-*D"5T`p&Q1Dfo{K'e 9K.b.,yڋ^6*Euh8 F u%K{+iV:o'Qr?KF ')4=;rZSƕ$hzs4.WfG1, H5eh20Si"(9{=:) =6h磌[𠈇GX8SiFr}eI!V s)̢nM>oo~ʀx7OqGv2tzFQgJR7QJXw%d*M'+ХB ٕ?\"Ӥ\66벨S]HwVner{@^ch70>r.:O2(|Yn#oSK'UqeAh| h F<(r`a*+lYOg8JrҨz;bJߣv y]OT/-tH>;)ӪzUqA#<_ϓ";D%b.V~`U/e;Ga@gǴ֔;_ק4~.R*9Y.HPչ:y65v/"@>qtOl7鮌ʐ2>?yoFmpj`Gt'MLyu/"NLۺ D6[hR=.L!}w8M.2$q~ HŀN/DQGaK}^ >86KNuQ&ҫo+_vmX)tnT7Vp-=O`=v{4A{Hֳ/IOV~Z7lTj0qzVfso-J`U0/IPثiN<6H{bq96dىJfmڡ6]Hl)+X+[K16`oaJϝ/K7<ʾ_;~ƑNQH_\ۡc*2~/O>C/lٷ OQΙeDu<沚vT"X`*=,^K>^7½A0 :xPbo3U8Q<%7c'9w$$ߢeNZ]~03<{kq^R*ҽ OlT؝J0uldJ ɝ $_VҩWulr%n>>1SF-c@O6:@T8F?=iuQ3y>*X8 |U:^(. @٘Z gecPa^jKxztiSRXg--}J,/5rk3Jș*'lye6bhsc(kh+T|Y[?E k  cbC;s?-\F3_!O.;nh}k>{&xz7ndYlӂ{UH< ^:Z t;A|93\LtM/ްP03m2dsmV} hُǕOSF)~E)~n$V+VML$_FGvg+PL<2q`YjT'b$Eӹyq] :F4΀`뀟\FG*tYxRtΙ((cސk^;?hpAzD67޼\Q fz~H]Ov`ߎNݳWhy. wD?;Dx6C\mkF  iR'&:ٮvJ`92,@_:–eȻb fX%e BccN5O:sUi^$мXњ1xoS{9du>GdԄmm+g\\Uޛ)5g*\Y{.=.!{ G:l#;O*Z_m2@M'5ۓt3pܛ^:oĶB$b*ojӵPOY/0;H[;H B4(3#xT'_S7>NmڲgD|Q-_؝ h.8)Uk`SpkTE}dA7n')O.i,1  d#ƌ1o>6CzI8c(bLsb1b ~DUJOL!;D-W#.~Ʀ>I.(|`"8%nЊ6t@>~!nhJwiف1r;0m"ڎyM7RLu%MۿEazu3AāHK%o(()"D9ZGV$GI\6QXcO{BlFvyPhxexkx1s_f1Ud s&?K5CC%LQ1x>Rf ]B.G0,(Nl+rƞѣl[\3< ? k̾ǔ*(1k.O4dn-JZdjڨbldݑ&8:FȨUU#J")Ӂa y1Y]7\ڧ~6!CuT4qݐO)IUunӏs>ӜEL64 Ĝ$ :fRa2b62d{z<=\\\V2xEOl3adtNtJ>Er3p><3r߉pMp_!  /p%:Ѝ_LAg8|2sU &pRb엹@sRmN@2{Ui瓅D_hu,rtm!i|wyD\ik6c'b@3 zdi@$K] ;D6j~ C,ci?Q!jnD@df#gjsBVC;ާp=ZM١{n[{ts+P8O,[`'7P#jbwJ'Gi&P\Uc8&|q[02Z`$PC .\>4=jY-V!JDF-|C\ckx)՜ `3Sޢ׼!& K &E2Sk՜S < 8?^(;Q@5eՋ\!`O:7sI2z {RN|evh y6HH@T8"Aܥ!G-X0nXc!\MPp2;UV=Ֆ&1˳+nCh^De9q&InQiE+0W2h0Q ?P:su~!#_/ytOrxewSis<@Pbm=Gfyzd \.Qj޽k*Xy?ZF/"t@G>!c^e9Bq_}xIjg*HI6Ԋ -sH R\=fQwхL((( iXקVLs[~i[9a8Xt&s Po]gjy**g-(>P. Q TbH r({9 O8Ezzdj\=Ѧ&7Bu=z:wiႸ8ߟhwq&<8!'$( 3y_]ť I2.:}xT\ʝXk)4Ĵ5-C=vtc6V1|m}Mf>1G}Ocl~Sw"ywg oj-ȿ76뮄a5( *dk>>⥷J*(5$܄VaDsO]h2&ssח 2MY.iK3مGYZ=^CZd*W X:C*-_O ~XN ?(^KEZbFqE hz,pP* D ڔn{CWCqTH?"rhzlW* !,4}ez> ES[9rDX%:ks}٦\HM}*`d"!K8l/֒l}֠N־ Rz7׎%t>ѳ`l$jX8ŧ]%h9NFm`~f0߄n;9b_zmCa1prr"#׉gq9+@RT0x쇴H^#'m v Qҍ>ƄÓ*PZj5[w{1'8{Q)ȼ%|TtbxSo-KꓳS SχmĦΔ{N#6-bptx'$\9v`{d#ڮRꍏf_:=kx;+Y *FM4ecoGT[ËenY:ƝNdÑq098& <.SNDY+#װ>`d :4rY]a^RF﯅EŠa3\B)GHXgZn]vMе:*(WY<٦i$?X tT}hWZՎEۍ\ĊcI0@M]vP9 &߽i ߬'KW?SyZ>?bghJh3A״apADZB6uNuYb]iׇc6ر|am:d,慢8ΦS0yƚ@!39\[WB#{OHoZ/f 8D}Gnhr.%!ETy䠩\M澖@<5Xyl~@ƟO.{ N?84iDv `aZ̷vq?t˺]=nu6gFa5CI_S!ck'Z {ʷth,M% xf2bx%Wdf%UE~+)JBO>b Sv3=t} hSoMiJ8.~Q/yiT/f )dAnf"l4[h ^š%9/_sϞ LCIbp XI %ꖀ2oub?\%>ʏ@^_N !rU Gm? XxP4mAm|D!S IQ+9wšẁJiVR=R/+Qk/djLoMw٣ҙwKO<6$wXIoyMH^8dzRO(<͂N6a \*VΑՔy!;Il.N)Ze=X`la@vr7Žq!%ƴ@q9*GW pPx*Բ;2QT-9Q ku'}9_tؤgq#ք S*l07?o˄w2b&DF0k"M`I VGPE,$i£I!ݠtwh,%!(Ǯy_qy+Vasjg>),ߓݖ^zՊ{yê@'Eda*.[ֵnp(*Y}*~.qtuq!*-* C` wG@NS$*lYaQgE2ɖPxҧa2 -vqpP6{7, N|#\Wv(ݍ CMkg_JU2Lp0A]ޛ)\ҟ{;kZTn |ܛ!H@L͖dPatɺlD^1SH@1qV/1ډm Zrz=F& ҉ߘ‡xu'2gRX΢y2dB(~0ngԅjתnRG+㰻2 =v늯cbI m恃 أzA=REF %Ž $oK% -;~nH ۇ8p%_f[L-EIoT[T[ UD :me@rNS_hc #i'#.C -'ғZEXCV_Kx? op槟=79ZU܋ͮEX&N+3,b +vOf}1rIa=-`LRvRbKrG{XP$v2rWR<)%*7bwX櫑mw?yvg+?6f)`W#M^He b -,d}h r}HBSb\#ySlE2 9 ??%!ݰ61oC/ʹ(S@B5Kum\7x:Oz_͟wJpITp`[{1N@ s~/R@u ڱP1fq=cP[&G{Pz^SwAQ~(ۇB4EAQ^JG=_D^{EarWn5fAp5Eup%4(iU5CG[|$? NE>,|VCA\mRyQ$,r8:t+Gap6u-~KE:xW KH*yLk{SKφBrzB`HC &J`Ѝw:'(#@@&y̰(<2MjbquoVWkT-\ x!KNT թme"apJ, ԝ[D5eӪ#*y7mKCP0l\Y_Hpok#9B 8'3Dl3j.b۴ؠs5T~̢lu(+ْV(86uf9eJ*L>8x^iG>:<0OEMpxp!w/hz5plnKU{TN5~Y _w5;8 v,kj %53ORPL-z!FpSs.{Qwq|0:7ZH5sˑ|d604DItmv7$s\7>CreOWtM<7?i-]̓KXC\?5[uXUCT⻦.;!KGΨ, kȈf!8i<9QsktYIgV[ISn3Kk5%\N7g^cdT$ :o3*r.|3˛R,w;Oyr2I yL1o˝urn@\G1b65WjW(ܓT9$_/rJt'v* EKaGaY>rhKAzI4+i/|<"n}eIXjmKAR=w|ȳt 30ٷ%9r34Q^/J眓;I<3WVl_2$Ӣgq04/KܴU Qs/>T15|@1 bY81,zވxͲ! Z.!\/BQ |`Qt񓼁6ُ^._@_[!p\Bw?摌n[ wK0}E.ͷTerk.JbʤO%)8UOfg&·qLײ2kI(6ڃ)JOINOa) ,`UGX['W|Igfal^8̒  ; -F#p|]S ?wǡTSA@pxu甤J:hLp8Z%xRǓZAթ7hZ|W78J/1/Ql9A05:NhɆﯿ`̉N]^N.&BJr_~]y[-KiW4`MWis%5HO}^Xw\ fI맖Qɤۈ/R=Bn<3we  "-[) Gb,;YgPtrԐ1,]xU*i3N0h/[,va sm̳qg rxnhgbo2 {u=1a*ٍ N8}WV%SP"b/5x=hG%G9BJ6d9*qxeΑtEhZYjm qğ@h3-R-]' ]$J<4 [TP"E9^}p[]Q) ?‡a$fۙ97:ޑ#<᪂V3^ /f3WLKrҡZH^WM?rﴒ9^ka 蘦5/pt&ƒ ~SisA"xtPѤe(O7s8yդ xxōK=Ꚇ~k]gyY*9> l2f5LiJtcvB|L:8jc=Xlze9z8RwbtF!21sǩ',G)oW )r*Pu +WAXԧX+yŗ!gZu5zy%BbZlWHu =5>0E_Є7u4^Q_i^39$WKpVM hsO]Oh%h\)Z*;w֋Q[ ќ#6=ȽD D[\tݭ&E6+*1RXRwHM_|K9uhO?ΚDVMFmzm"[p-}+" Zު0oHXN19Ope;;: (#?T[.6ӆȆp֝1{WwzٴVeD8E׮j,mωxd($w|RP6D]7\k>V9>=A?7 0Ť5ĭ5G3 Q̶N;4D>p-Vc,ImF6@qMCe v_XQ*A7'WGvi^B]\ Eh=xCT,"bX@xy/i [)mFꯚQJP,c2ڵLRVۋ`ljMWmS@`.ņUIسJc?bd(" G|p~SCF C8&@HGZ' ϫ 4Uo=&I>]z|T j+1R=6rߌvc6߰g Nwis7{^f{=A0j>z^RX*aX {Oo*{|لaI|I&֟ݜr-WաRe} Gǁ&M|ˣ]&G^n1)lQ%!;`s{c9z#<$cwIHh> YQ5>mɬ fDbeog2˟,2~ݽ-9oNS!ӑɍfݕi,Rp]uhIϺWȲJF3KM+/ ,>uIz:kN7>lN"ХE/]?=8'A{dg!@\ eX%uծ[|T2=(^GCB;լ ̟FgòHs3 0kv閗\8RqrX9F7_!G!ZqF E2~6~Rq9)+3sr"z0rP? ثS/pa} >GάO2=}enq;ij3 cO6ؐ;bQScP#ѩU_\| MxR˄(\hC{8b2gq n벗 ]Jf&gǗDtw˼ r׀ю /Kikq~-ui.HA>mֳTiop! W*O"Ey a\Js6$}@jouLKm~%H|r;}8ض['1]RPP-Fw~EyeE{]uF 3 xsDH5uUN)P_а̊U? :H՛rٯr{>J.sq;8+͖z\oȞmf Qk4b҃^qYXw5$Eѳ-"ں҉1@4['0{0d@)6@ŧibzZjskDCd_k vJrї/;̩opv'sAIg&?v]x`wGάDS(Ԏ'@}r~p$:%gaFHX> lMB;p WvzM tUJ}J=.Y39+91DIk=ut'q)dl8* Hrl!:GvyІT|zGtYEx<~^V,ebѾa>}~Sc5p9Rh[%pޮӴ_02LDœ'h@C(a bAK綀yo-8SxN WƐVb$շnڻjaq&'kǼ,yn 8c!G3Sٚux" E 8Ln[ˉl~/]X-T(v$]L2F%@M2\~~tg`u4[}ig/t=JHQ^?/\Z `Sb:~p_+)Ԗ ^];1]8rNMnbN kHz L9!,lA*/|)fM:dkѰ^_kn!61vn8{qL=~zF@;˻zl:N-u5]GȘ?nL$BNx[-"*mqcCZ[+Ƭ9K4Ё=AT|zu-xw{\bƳMcԐCCiwLK7E-kfn[kʹl0uN*u8ޖ ncVM*r<2퉀cF:6,i\sж>hZ uX6(lm0UllR. QE zoO9  d]+vRz#*i;Wc fm&@k(iGPkQ,~RJLI61內h|.ƙc99h})8ύmSa'X=bdx\o 9r}w^ptwlM54Y y(gʌZ -`J0M+r.B9d GFW}\j%8'Ÿ%;],MRڷ-L@u]9nԝV1{-f>#Va8 ȍ<"C=E4!u_2%ذqAdGBTRvC 줝dCm[f6{F9{([LNU{uZ6??@b;klMFSɐ@7<#!6/6Zz߰&*?QWҿ%Y)yA).iݞi4h 6Վ4 ۝},!ɉl7i-Jϓ+8H==ӕ*jYuljs{>8Z9u$d# Y9`TNBzQy!T~hAǂgspuU~0ϣI$!Yyֆ1:2y.&L-^LqDe]=$ֲɉDw7H܁07۱Zohd6;NҾtyKIۑn+ԥ zM7vj1xڂ 4W/K` +W?r9jmig .}^8DNL;$KpV'ّKfEJSkF 7 d=⺌ ,)S$/0b֘_\O>?1W9P{Ń޽/xIiq^;+wȳ8/nh qIsgڕY|ʟ&ѬR]yZC . ThSoLy<vbj_Xva0`^p`G5 X&Di)7>UNFDvA $'#߫D}T:;IA)8%bШ u;X'A'2?X\)1-ƻNFg|?xhoŠc:zI@eF32#ϭC[֗ʠ,r3oa[\mow+LbbelYP5U f.U"GU]pck?E=F5sJu(T}YWzzpS3?f3)TNy>ML蠤ѹӯ8J!@&3);# QzWPyXb< u,G&[˟~6bk/jkOZb.\⯐[ KX܃@b_φ6e^?>肭S`x3uAz_dbG@dNJeÉYWQ]/_ߔ {iR\x[SߗŶuv1kFb8kl5B6,CV2ft?z'2:xJXhݍM~'{Ţ0N;iŎ} f. "DT #^9)WID1qXx4B1Iv/(I/ڴPCބƉV_P\ͻYtB"E2aIHwLt'gm,}W;;&8.9SdT! WwaЉ/|u}"#EҢuz7d 4HD.(Dwa#MFR s.#='=t{nDX [%2Oԇ78\ذOLVF?_ED-GDh/ڰZHQZ4I(9"E^懍cw*xtCRET |+dÁD'һuL##m1h7l|#s2չd ލHT{hy>Mck U)d8 mRp-f uɲ7e|nxsF(sqqҲ'cbޟh/6ͻu#`DC7O|FQCODg֚-Yy~Wt|4̮5 :i|>_d }D[l?y Heu`5V:c/W*cF#8>mD!4=7nSÈllOδ30l@ Y`|qL"&r%w]x8n\)*2< \`EZ^^K5~==dr.dDiT&bR/|,JYD1`O7ir7B󱱨k oI.rda,~G\ = 7Vu HĊs 0+ky6M|c#@`i" 4t6Jw>A(۬kQo^w,43uaT\ⴴ@Z8]I'C_ a%̓DŽP'7neF9RzӚ-h|ܠP;eEɝz྿-XUT,l<2U$Kp0B 6 azrd8i]vk"%:נH@㏿tњ,LjCTs WzAYv5Ts<:;g.Q$9cV~NuftV 6;$eV^iq'/Gi˝ Z꯭GHs _$Y%"°DŽMsm/[v" j,Aߖ8`g/ :BR$HF'dM̒!ı/uФ,t =MNi|dXwY71F@@%kta׵>\ͮ,/1`~!#*NQ3})ΏߧqIeX{dBZdaV7?1Apke5L'rHzh(jVZJ̪SFʹZOYP 5cj߶!ՠ<:PpX\{R aMJs#+5&tIshק$ݜtʞۯg5g#^R.ϖtQU˄Iv-g3 &,S&ass⒥ž]TuYg}S(=6l ORR% ޵*n6JǪE&L>=`CQBXe5}QL6޲u$ x[Ԝ^bP@ y"IռE` %yۈ4#ceD$]AH聕$ȏ1YvS /\6&\`vzY}zlVq`*Ox$Ǧ{l =;kDLlGSz1i{+C V>"9MBodf#&v3 x׼&r[ĠN޳*n٩j >52" ' Ty'ֳRI)kXhg:-λ *~tLrg6hΎ]A|2smt[_/K:۪bo.XżfUngk!ܤҩ9tOEo3=;!6uUJ_L:GȆ}DʁdY2t} qQhd^t"KVETţ1ēK:$~:T)z}@4M/E]:({yf ЦaE|ms vsi; jrm0YD,ȚB2Ϫ9MVˀn?U›p>8;oJ$-q$ u5IGˆ7P;%HgĢ/W`?*ţWhb^'>*҆z)'hӵel&cdqeC+L,~SEH?Pm&AonWԪ܅ z5 .K f~;0rr.6,h=^7uL0a8O'[+ 83~6-QT4K gd<$ n٪xT:!yvdlE&˫ź8"m~KӀ }ퟑPE" '2X=#EJ9-{|G]_uF Z%+rZWՌVj_~1z$ܵ-GeE6i W/?aCɀ (sܗŴˣ]9t*Pc0tY99=h |j2xD^xwX1htk^~^Y zrڶh,/=8%a@|`JrYo+RN^T )L[i;viiVQW#E-9t7*!Q*} $; ? ؕ:%$2 4Ia[VLL֐@(wGvް:>\3~SoC#ADON &q} & n@rУ< ?r(ȫ;i?A71XBkȎoe*+0aZ T"_? (fkStCd1cZ xtFmֳd0oޖw@x;ó[*LLӢ򫼚v+1g~bE){XȐ:Q>c&;ΐ6 [X ޶#TV)fs#k ܂=iO#Sf@iWBLɐ(m%Um'-#%^:rDyZl|gR2ggKTU7׿W_zwN}M3}_:I6k$} o>ϊ1o#KDeJ_#뱟Vr#<.KهX !߲Y~,-,eGy;l [O7~ >${S筷wq. L 7{ab|B61Й5F ī :稤c uuƐS`* TFja3YC+NlFn] +ƖX>}kmCboMBuF FakL;J.NR UXnxo**ϛ#OR N 3膖ae:KRbxOގ~"d[{BWzVqD(;saEK]Odg`0zj Wph;&m;NQN(;g.9ܲpS(?lb7e}ΑF[O-3aOcDY*8 ׹^.}x *4KbY8[od.rS-<;~%TJ3mXV2Z;&;(}|92,2mFjs[%xYtp)u*Drµ32C7J<O0]M'r8 }D~E<ҏ*b#w1Y 93j,QX`}k{&Jz&l} >--NͧT榩Nq8,"DPkY$QQeX$O.yQK}'*.dzg#Wѩ%+Ƅ&zgMfC`Hԍ*q ډӸ-p}Ŝ=1T;.8 f=%g"/)i?40+2ϰ\"Rڰ➎۶ZW ; AQfؽ >c5ފs MP%LVZOq8՜OGfYD+Q,m%tdm%Yٖ`7qKchvy0d;᛹<\oOM(C`YߕI;a$4Wj/tE0مRë"uy3Z^ S WWqLP;W ɍq=$Ǚ<ƱQ H }b @Vumɴ4eU-bm-;*94p$ []dheޏ !Յ.4g-W?m߅O쵬VV^^<eUəqaX8 t;>x^f, ZhXys6R rO`pyBfDU).rv!Dܚ>ذ\q?'7Ksh4y) {y(v ngOTԑ3W>yc }L|:&i\B'Et|?Wvk|YK}6Z+Neyr̈́#~CbR2@w7W)EUG%rSF^Li9GWI?\Tg1iïpN22]?k~f, ._CЭUb*B+<*R{?}gnCnr8Q1ǸPH$ ;M].&XZa6H=$y?3J bSz4S&ʞKQ5v!7gNm<97zR(DI!0 )ᴎlmE rQMoa9a١df{R׻lrmQ[GWn@RE\rD밳G$+RTb k210bVSY< KޝrVe%㿞J\ X(^usr- uxpY)N6BI?QCΖ5Il0 䲼  ι.Wl7c<{L,攮X\ ~Pt޺}eol]4 N͔y&%$1-cн L?r~pUZmADv̋]kJ[ qKµN̲D_,GRr8uMpA[ \|/:E '*1ΒPVV ܨC 1LOՔ#pja m寵6f5^6DQblA?efĠdF:U({&m"ZW8V'"8o #JN6Y/j;Xz.]D3EnXznV%IMT+C8ęoPJ견z,i<(Vw3ASOחB[RRny)ѿZpmFin%iKYRVdn$V f4H]q /a;q: ^ۮ=!4 4gUGqAds1<v?"Fcb6 5Ӛ3%zw[RNwV ?q;( `k$'wxq_- [Pj&ZxR2?j1%o˸eVp%K,;DZ*|nN2ЃJr >13Q|p` JxO:- jQT_z$xbO e-0%!RADQwCT<*Ϩ\"a{<2D>آL,63'qkoW8[Y,pCW KW@HR ckEbT*oYhI3f*,Ml.BЋ)pr ͏oTG~3 6gr?m$O-Vx^‚6<ާws6Ţ ,l6\0E"gYic>{ǖ=Ģ{$ @qhx }4W5e:;ϔQ~ʰ)< p (:ND%$Ms3fDp7xsLIWMLo*#O;f4"GA8}06igE)Ka>OA[ee`zrg+e/#./GK{H$\)6m6\^fbw`Z}W~4=Egw2) E ^Ԋ džcFOOȠeXdu/57KMO,KJgP L :^NԃjHS$yLqG|NVN" L霆,Y0E@֟P_Iӂ tvi(q w̺ %(|ㅫ4垶 ݇y: 'ZDBKiyI J_ +Q [7=/|b A KOۑfs}Ӎ V,due}Ƕ#PJ^X*XKю`BV?!^g<tEuB6AjLVLOX\ҩ}wph:,(㾍Tqڛ:D6u7!DcGbzQ1>Qˆ4:2fs;noaNYOgTbs(XjX)ynH4lN*(y Ad|9tֱCN(ݾw 伃|8i;b6bVJ/rfɤӣ0 nfŚJaC nm*Ѵ$j\,\Q1<Ϫ5BDbΨ,!I;J\眓.b;cj y̖6y5o3C_WY^(2" AK칅jJ}7X 0Om#%D$mNU 8?4_Ua ٿ(u%]lDĘ QHzj6];QvjJ9ߌ 1E_F& '+IrOԃOfoL)Lz?*Hk{XKZ)CN zCrGEiD*Kkx JO>LN"Yz(ݹnyQd8FR\~L2j6݉5rVmR-E%-7$oh+Hr3c! yqy8oMw EWce_e6qYo!)#}\OChne``8ȒU^uW?]'6W]Hx.; BnW+ـВig)s&W }!a3 ̱`EyYd3]L T*hm@@/yG.ٔ&`V^߳GɓG%{x}K5ayRm)C\rJO>EXkŋPL%kU @y;?n1T `bB%u"U7_ z&y\6HyڵWB Gj;  3o3An$~kLlƃn[Ճ-8_Wbz8 _ =*?bvcHenC(3Uddd;ʸUԓF[C⧔o ׊V nij" ֮ژ *0S*2B;ZZr3UHN"s{!z$'U&M0z?k*}L +#*__g8-aE=xn5n<p& \mS3kܐ+98B%=?b!ſwPlrA]dAH!y)\9kEp)ȉ9̳b>b j ߳NYT< *VJ t]1Mm-pHܮv$ zzW[ ! y(Z:xrR{Xzdz!qCpmluIoCJ'z=[bI *OGa޷r@y853?KeBmͷGMc !֠9j㛝& pWb\ 8A'>8 50.λ"U+bo&N@cbAgd_W-%VfJ>Ưf+UnѵZ *'{k O㷝 *,RoP?|iNDԢDdqnj2*Z"/Dazs79""*P֙-slBAO ph|Dt YIϘɄ<]PYs{h:5 S;. +m㹪Oqs t}*lVֹT}-B_4݀?w]2A%CN;ޙ'\,̈.W+ [E>zb=9g_bO}gEX$HL/kuD<.``tׯs֞|)wJD`=tA7HmܨNo[pi? fwŏ`#L-ƥvRkC|zUvg4d/˰Pc`k-\SÎT*]wV|,:ExQ =z>C /.+0Çb!vn F&yR`-e+$Ěf"M]M \|?f0l܇Իg#ES 4$J? ^EX Sgtb {$ DPHjp6"`xnB3_.Wm5@VG*C(,ŧk#&1]tp e'Q%?J88G̤"hӥHLhi-?`VTw~V *`q$*]{.wîZM#NGqCe $<6d+>D`#&E@*n8GM©II$<E>>6F_VP:~N_ IȴmaRgc2%6Ø9dWBy@DZ ǰʧz06^e.mmXa箞oW.V+'#4KY=>B*`ĎK뀷ݝWqݦosSdINU&g%MzN()lmm\wBRaKzi%2Nveί(ygМN .n(37NRBh눙b]vg|ax[$~xAH9.IZkoZ CM?rw:kM:ְS؉} nF(~B`O0C(P=0RvKt0z'+Ȭ#fH<ifqr78bn~;eݟՃƃ¬l{D)'^Jy#Lwbz #3I[&nEd\-7abhyO/wW:>e]Y3ג BCQI_9h"EGLG:W6*tY%(Rvp#u{6e? v%aXmA"%nS'NT< Y>^ӁdφIJy ar=}0i"68#ESN `b`YK4IZHY#-z + )Uyx6yU&`V$ 5X &H㖮)&\B#PUhJ}ı\{+P= A`Wuqj<*/ R+4X~S=ޛncQbY9h7ϓ3K7 0|?d y[֙gjJ8WA4jG7n"dkHo@DeiS1bhje#qÉ8G3' '<*G^gǓ\piXLV`ιVL5o\ 8 4ZGrӸKKA2)58^p( ,7p_ꌇ}YTDҘ Ry>Çr;Edֈ-"QœpE3J#қ#?\54&в4nd^iKְE $*b_J 3 rYlX˲r!c!;`ׅ&~5' ΧqogHEGld3Q{H:.ɆKҤg}LA2CpCYi:/C%Jl&(BΔ!Z@0]$1T.5M1i e"zKV,è>ޘdMb {7ⓥmlj< R|v`bzڣ) =i@G IFM}gbF[JJf)Vz7`R[TX]Wls;셯q:ʖdgw޾gӪbX鈟K *rVRs-RV?> mї6/|q`+$94#+`þbº-VV ()@8Xd^{{A:GM4IhOX+h$Z[p!0tZ[kSG47n}M 3%e0SQ[qzè_ ]|% df|N`E} h'6|W ^ۗ SZ:8~2sk?qkyE&}v}e 6TGj;0k\xwa;GF]ͺ|I%mw|WFv✷b zd( ѹ)p]k:~\RlW]mGwNTdxe>¹|u4D?ΖEj92݅?or5DɃOiG:oU&P{$/:M1hq*H?{]fhkj/H˽I1@ o/# W"<3T'2` ;xpƐжEW@҄;Qd9 6>d[LB5q7Ow4sEmF۞{&j.TYT=ljȲFT0_g#LRӛ3K[ v ?n%;`#-u/ `ܬ]*NA8nvpasne&?q$Ue1YIjR訂VG% ɯEЀ##≯K")led{ɢgRr&m|OPtM mp>)a} 0D;;ocWLe[u`}bŐd5q^cp$lJE"L:ˉ tW7=<՟1|Hxpr[,KS! 'wlhrLW\{|T_Zz͑>W]zw :"&Dvz;_$u}(kJ"x9Uoi-1JII*w zYX> *f@QͱCW䉨'ioG/YuF2 5#N'SMw/S`[Br  T!i znUiqZH[8: QSђR)+ogqg+[oC(ɖQTqQΨlH] ^=|HK )€"+f0 -k:(Hɴԯj6<QU0&́v:ٕXDDȈsy&r}\lu`(Gʢ&Ə|`K}wΧ=dUZ`]wX^KIZVW|oOF+jl,uGmgG&OP1pqWiyr6`}vZN~z0.zX[VhGEgcoN}0Y^\n*Ɵm!bI{@pL3ષA\X#VD2.o=ߚ6J,X`sDO&n*T / ;Hv0-aLtO?Z\ :fT]\Zо%'mƌIjJbfNBV͙[K5k>}yxD1~p=aGЍ;[tZ~&Vx4KԈz.[P~&Ϣg.簧E^EPTrRs"+}/79M~{Nȳ}sGK0Yaѥ Y|གྷC̎˺Zq /udֱ65^i `hҍ R  oXBd\́Jr-<|_Xq6k7\&X,< ]n\He=4yVO8DC(DYBy(yuݘn"L;kiJD9CqFXZmE~AOT G᛫UnXn 0*!vEV+&=wñ \zkwэ\.vu;g6<ߺ)O n}1E-$$$!w!KmAlb'e\5]٣mE [J5рan1EDĀФ^/FNn"(GHt)A #.))llZKǻTZK|,km`:B|_urQFMF"r\寭$ȅ}ɖ*+KH~A"Oң|t1a;(b)Sg-QkP;/+a3ae΢d8upl8yWḰ9s` WKf1ѱ5d5*Ƕ5tez7ܷ ²f(xIQfɃWHl "aW 060%;Y 4_>f!'6`{5~?-?^ %9.n>$/{`jy}c~Pžf-L&*ŀziKmƧBP_UP_u m#w P;Qm *>ʤ$hȨo羂8dˇ={]ͧ5*tkD/|uzq@RLW.2P!" &B̴vgdJyk. )&P 3bTq4T}c"!lS^:ED̮$.=#`ھvՄod гx?]ҿPA-loD6G.CniTV^Pp+:ZZ{ \BIY= fџeO\b Ŵ9d v^W PnaJ KvDƤe? Yrot@6'>{'#Fcb-v&gb5:uh<^ZڈkEğq6(~W!AE]Ɩ,!{?$g e?SK0 LrGn(>?4!a6CMVTl0eb.HnF w`q,JjU6n.H#ya7_W{6*֠:ę".(K/ 0 } jOQ|23^65G<O< I¯RX+8S2'ة L"~LBC%? a0N!rauY.~]k" Q*y[ӊrtB>er, sy̟/6Sde9w,/-dPپrPWZHUoh~${ר{[ 5Ӣ1?Ho  42$ݫnfT/"C`/(ƒi DYE.Il^+snj.y *&g5p[vrą^B(=t jt\ $ { ӏ?oBt# =FGP6u_/zQ(E^g&~4Nm*#0R:F@i4BG b;i>=_rcBuj_\͖[*eYlmyK?~,OWZ`tx7|+/ Cѿ C^3:3+s6>C/ރ :ZHfS$9^jBS> ' 9{bŭUTb=RMHy$9lҰŶ`dzRJ9 &TWR*2V59-5ⓣBsS k6w(/WlZ)|mx+ oT: z5yf+%ԸEV4-{hBH@yL~SkPp`lꮫqKQ|f&WU}_AZZiHP|3 Q"ҧu Zl@a'gf12ECw)mJƚ5瑡Ctb"N{B_V]#B6>+ߧݦR!^ict@q WkU@nyc7[J@ʣPaHhEW.9'*BԤ]H^7"T~Gmv\~6'1`(w -l=qzEBfYVEr/ !ީI^nfLC O'T?yjk{qLY6jrK],n1i{Ƽp\DglD{iOumQML7 x*up [Gc•A'8uL"/XOȠcs~÷D/nB9SYX &!Bg:  y~sD:|ys$ #On#wÞ՗,2L4/X-汝at^'p_C~\[>£aX'D,g^HfTmW{e T! ++1\ \l>Úy;B5tu_ K6} \zBp%#M7ŒO7%6[G&rXk 6lhD 8TvL\WvOc4IYӲhXM11;",mYS(\87.]8Cpqy5O<`pտ`\ "F1\(P@v봱/^+Rۘvwc,%ՀH$e."b5o'uB_K4v;}G "g ʧU}+z/9v)}VgRsxNM,7*)VvuVKp?ҒsRKZsu 9W i 4;:`yٓWx7/<yhnic3$INpy+Ə NEBG!=IdYKӍlی:F6(zDDx Z!2ݪu7MxDv2^(663sƋ(oCW끋:RT=qځCb- \ySs~aazЋ+ٍ8 Q4F}azo#w ğ+D΋MAd \FѴ8Ug0iB̷{ Wie(EDyw<#/&}L=&VeLm?iEV\wעWe7¿1ƪxmX5;PV?Eڅ8c}sr+~+qwc V- 6DgLXU` ;*5GUV Y-z:K2l/qUsY{Ѩ&+o쒅O~6Wלwf=D-ˡK# @,<=wb wSYK#,RȘ8́6b~B3q1 b҉R qwiAG@ e~C\ 'ŠΒzWXQ|luajofZw0 ZR#xj假^6ﳬ/ĩKTͭkk]#8B( @o!Kĺ}Ih6D2.'TWҨ>S4Zز/p X#yBYcGqaj)q 2IOգՋXV HOqKp|uR$95g|6;Cc RVo͊TҡhoDSUE_cH H_Ezdx8Bņ#o'YGtTZ}3h5SGg1ك2ǷiojёS4K\=VJ[eFdV鍀ရ V z &s2rYSC[@Zm]PǬO(Si?^]9C( lJD͆4uL NM1m*B6y007'^#_+^2s+kڻL(McyHtYJU:3LO`aL-eBK~<|E ҅n>ui o @IOƉG92A%$XEa/ y?>c -4=l̋ԌvY@Br!ʖou !7kؗ]U[kQ%c+(ZZr)nO xyWt~D9s"gQ:N@Y1]!AA-UzDFc28&+Jmo+@m(&ZQɿr ~,ѻ;%y.]5܀+J5YVЎ=bwp0SI!&M Z왬%I2ق4WMb(ŧF;t83u@0; ;p9fpp"bZ+||)hMIF.@y]gKX^ _(a0-rHA9M(/4qlzAD}\/S(1֔'8mہ+QdƃV%YobCIh^\\ pE" ] B ɧrOl1!E 'Gi DџXBO ɇrg^(ks ޱbmnCakp!_S_VbxPPyEO^,ň& R|bǖmݻUiZV;oF,b[]ŽZ5 5"N'.zlB le43;WZb#Ӕԧ´(cxhgm7[tigK &7*l. ;!yZ%#a%M|1{l{S8DywةAckkjO@&1>04n$X#wϴjkA;+E{) 60-'E}l,$̄y+^咃v)a %dﮗ 2.HĴ&mZBW.u$.#;8Y٨}R-dq$7QjoT jnT ˁ=WW E8GA>] Թic hbd,6?R=\UTL6 =RC9|mco|媇L?U$u>y~衔|~$Zi'k L+6t{GBz^lYkz8Ŕ&;quW ()v9?)zRv`|6U9qصQvdW"):h!ju5վAPI!.>ɛidbzz C|#42?#@Z ~yVĂѧ_>;ޑ*ݘ#6̯e#~98oY5q'̾TS9Œ6t \`M*|d܍ Ԍ "&6o¥ZV*8͍Fcs;ZJﶢ>WKm{@?NX/s=^JV^ 9|;s6ږ8muB`uҢqIuk46E}5Zu5uU^ )Ji.gYԈLvdwpړ4y8~D :`:N-4-Ӛ{I##s (!KZ)(hE)?x `S^C.2NP;{h:<-3o7KH뤗mwAMYHN@?BOs>Yd@r/q#Js\oD&ԋOz$g+wI:U{k C]ܛU&X'`qA9JSt.VQ{c9۰3RnӱTX?Cl-<]:{S>d5lwt*ggqt*?KVe_?S|wr@,ˀw ňk4Q#o-u`۩(<. !LU0̀jOzLTklÏ^jaƗ@o]* FwDOD0if̼7*);xRSq{0,IF~w̏VxA-g/Ty80&u#QP^$u~nHn .x)ZܧokO;ֆL+dzDy/ZS108 QUP(꬀]ӕޞ۬!9N{{<14Aдi =rG|UˤLUSdRG{qP eYihlr|vFv5_UZX5aI81TvAȡd`-l%ǏdArHZtln LHaZW.XqZ7MNT+T(]O-U*X["NwII|ՆA2:;<,e4N5h40 Y cWoeL_=-iq3|Jv \Өk8"{2\064>9@ǐ<{ej$nhc:JIUbAw i[Ȋc;W*0 {N50n!eT ch^a,>˒ɔ@HVDɁTTIJ8e)38V7It'D{\a* :7EPHivoN5tZPbf ;($7 ޷0cJNϛk &c^!fWdvLۼl}<@XFXɔRv@^P5D3s\ZJS@gِYtLAu\|볭((Q@ K>';6;BQ21u\one׾!ʹSC`Kq)mt4Lm_* Hܬ\=u \ >ncO\H>NYݎRC>6ijǡbӚ{ڛ\oD$󘲿tFHRyx0bWs !*aوʽ"xćOI$kb6t|R~cWAVuU}>( ^I&21H4\i@0 砊a%w8uibz"6$K60݃sWJ1% $8Y\@̠އ e [uQs{ Ղ^\} ׁ]< hk~K>Q\MpA[Yw\!74pGf@ba-r&7"9MCu)'qHfL;űb|s޻yg?Y"BeG~FHu]YqX`Ԑ(Sh ,t4Ȗ~JAd;Po((E61zK)˓8a ۽;;b^k7Ln緦>Q"Y睩0 i/̲~:'%)%mҜ'F(0[Dm0"yAC?xs$3*mn DICAN@SK8KTRl) I^GHsjc]Qt[e`$~PÆ{Vu3R-23o)r<.<3|s C*TώqbTq2_- (c<%#)<_8f:x+^0W(~w47KqNLփ==VHnmU7M)5j H%AQ6Uzh_pd%;3؂R:z _,"l>bE0`/ɴ2[]釨,-I% I7jNR *A?>hsFunѿxyu&/mGU;]3dE)v_r#n̆4χgqHrZtA'*W?M?fhk rVK]l:$e]qK!yp(Prw_n8 (w[E*Fb'ɆVpe~ͧ,H0 fk̰ 9֙ 1ߪI3qv+}[ƜHk7 G 2%Ej1]wUbcU%o"pjdZ D`\< t" lL_A&+s1(DkN0 oƈ*m%I=yiXC{jJ9\pb)=x xh)$dAl 2ϦN\XbũGHI/C8aI;,O}VEPK/XP ]somia}{VM{#\T  68 }8$Y A b+,!6fS'Y$$zEB& JQFSn2$r53_tɅ0q} /)OA3ҀMLu(ZC&@"v! !L,J8M1"ux(BeHooAۻ\uLBM߾ )2)mlbG$A"[m3DJs / &_T`xv\ZVmMO23w~qεvAp[Er=.~ӠyH%_29K =?*կ 3"N+>yQΰO.CT:r j̖vpԫIuh$3]{iĶGL*f4<:*;XxnBR>vgA3+DߺA G`>D7ـ&ťd*td,Pz軗it *$yQGiǡt0.c]u%ة6fꭓ' QqkpAEy=8ݺʰ"26C6VVf( p8P,Ol>fІg`ʟLyxxhNټy<Σ^UoYb0PLx '+- 31sco)I:mq'PP(%|Ez>Q6~bE0 NꍝHػj +f3Z57EYV]0 ,YSŔk  +CϋP/Û2kxNC/kя#^Y?q(VvɏyA?-nj>o>;8"盳Ryi-+vPe$W<ľ4i- OSFd*A˅Ҝne%`ї -Ղ]քNse2^M"OޥGda?r\It-7.:Rb?DjkdN2L+PSe:XSe ;V[hE'w*\<\{ \:⹬i=bwՔ@%렄w@3Z5m|6JXԫJpiK= ׏Hޥi+ ~Lss(V,YKF#sJB<&ĥzhJ(j^حQxൡgqZ K?;?;1xԀnP)ts^ 湜f亁f*~@j(]HV /Gx5@B W_dʋ~O|5e뢼24`쒐5쀂ks".="R*j9}t55Bt'Ռ0UVchEHtH=5S ]n %ݾ⳴~/)xЅbTߒn.cWcn7Wt a,mP!-ΔZ{)bh.35C\98 ZT l1,2x*+ iC#NcuۨѮIɮlMX$O ӇE_ZzAlkk,\&T<́F2@~ӘLAu~z9.A * -rI̎͏oAA 1owA4l4v7Bm+>&Iqb^hݷ}Aܧc<`d)a sKAȐ> /Y 4 ۲6NrR^?Hׂukʝ_S2=ld[M ٫q%1? fU%rL5OGZ5"Ì%*Iӗ@Ig*\`D"SDc_ɸ-6WYe q!.ڠ%[*xǙ-I-4Bh c_\P kJM +Lo}"NMra(^J!mk;?<×׮KtTnVD ժX;VρC[S*;5`ΆIZT`=Ī&L=;pWTT[gvfܐi-?AsM9ƶBTzr?M,zḼ:6s\j+e |75P`Rˣvi rHEvP .65{Ҙ1z DGc60=":h,6GN%_\TԘSfk4ox{;yݶ7PmFc):q'tQm?#0k`|y_?%n2ɦO Vg&}=l&u8c?'K:\ -3.4[ am})%'-nݕ4{3S8TmǼ:.FG]CP!xQCcu00n-J +6)}ߡ0 dwU+yXɚvaR6-eLw"=| F**$~*~S#CV4zCj댰 5caEIvT~$JN7P\y4bٺ9$I$'*-sD YJ&Fߗ-@hv3مڼ_sUI'|(2+`zn>oa󢵉*_e i!IΑHKX?!\MXa\y7 f]G#XXUk~?G Ge 4 f0̱3QZ{cd^ǂ*cޑT\-] ruE?&|<7QaOL6@8J/INV/mտJ'4%?^$xΧaBERMmڳQ뛪϶ T$9ִ_OVaP맼h8PҒSO)&$r}}ȬyOZC2QU)c 3.Yȵ49WTZN ɒW=phfOԀyae֯rQixC( d I-5p`̈́/͡o4| s9fsW`VNc527,7Q'$93[vy(ZXq;*1M;땍A*F1H>WԼk2Nbd Or٨lKva +m sW'-CLn7,}n[5 NV\U x{ؿz%T+:2 ՈSaN-HGsCs0#>1=n-*@"MZKZ%WӅS7#KڥBRP +-r+J2OIhP!Qu=G\Q\k[mBN-#4| ^ )6pn12 ">Ë&nǤMn~R$g2K]iiK-I v*{ md@(8q㽁ϽuN.&UTd?VbR)։[+B A9Lt5Hx_ טƦ`6,r5iy'xhdJHMZBW6\Y@"_zI??E,?:B1fxڣ6[#z:hT !\JxP⭎fEOdAFs |U~aT .Cq^|7ފw:5 ZZ9Q>IO<Ȱ}! 鶡԰SM1q|Kw" A[MY)v$W&nDWuz*urRp~ F1t'%g\bYڔtqqN{w_D퓬%<$}}23@cJBư ˤP\7 ƏFjEyR x*ks aHVyQ5:JӧJnT($ͼWru/iQ;t;.te +{E_젰Gʇؕi; 2s>V%UnT7H) xB ^۪kS[{U{l3ha=`~Sy&SE Kr`qDsL a%g5b<Y Xz1blb'ZXM~ֻ=9yH܀^3q4@$3R>dW_;1!&kvt{XDǼ3)9%SaOR.'l`J(#Wkj+'wm[}(k{R}M&H^{VڌA 4Xkyw7t梩fw1QUV*wVI@n`3iVJ7?&ǂw I3h Ռ =l s2m)RLAn^Zgi*3oM!t*W:_͍v=t?X|ɯZJ8[a EY[ Z*P*ՊMKz xZݩķC+(fZx(TciRUs}K揺 {%mm* ɡuw-l7aK1l%ڢ~m? &P{7"J,Vs)-0@ΈHa˄ и u7E d)+)'Af0]Ǧ@L5{UH :%KXP_>XCa| mM"8>GA@ *Y H6QX|L7%%{JR?l @Ń4Y@ `&J]?%)7C`aEB`NM|Pb0<;6|5ח )b2~L@('2 BժP`%B =\~5;c, bXa=>+gc\nB(q֫˥>d϶m])?a-wYiz1GJ`S B }o*&e‚2p,Xk"n*=׌R]ƼL))Mz Ȯ%-[r>|9)h06Z xmO)Y""Lap^=<D`"l&V%e4L#ݮ -Z5|51__̗=.zL@^O ݝ{4}¥VƎ 5 ȗ}:#1:&u0|`lP 7!V淥Ik!H"N/[oGBg[D0 ?SrG:'Ajz]Htrw,z3FfǖIٚitQO7J^qcJP:_-nVl!]C6_s)m</ٺf|O`k .dL _ W+Q +}]3%Df4WRDu]da<^c b#II,f4"qrg$OӝQ4e:_ ''L>cpM%*:*Q&W y$hh3WheyX$l%b cY(ճɊ\nv>\ӄﬕ@AZ # l=ng^ KDɻ1Q8۠DOwnrn2&6SQN}Hc_faƙzzIV?*rB|#%8T~&߆+)hC`8~ 1]8PcH.Zwg:18i=Ot,IRϊ)jS#D̨%_Meի8o*ƁUuz ?yT|a6.Bzf^mB]MU 4ZOq6מ`]8ߋϩLlJia* S4BE16Lϸv2;4b+;DSsbo={H\,` Y[Z;Ol9x2[K_7[Cٜ̀V6Ş$Q~쐰^T-}YYQCSTTb/bX'c 8n'ETII>9J&24gT=lj|QkT6 %TU 0V+ذ3vr5wKVQNQ@n <@9# Nm-#.#,g[U0b[wj>T@4nqU19 ;a:{^PIcogB 뵶[<`癛ϭ pi([W4od+{Ԉt„$k7uf&P‰6ovg$fɝ@id7愀oDt x:#.'쾙RO%"^끬 V.Q,.0#[6[TiW{},)ݵŨW{OS:>uG._8+[;LJu"fPv  OymR/fND>ϣg*!2pHUA'yP@gILOv`H=wX>}/Mϕj#dKL8)6Pco_l{IJ<X\4MP8R(6 'N)$7r)Y=ܝ=^oϫD3ǚ6vDM{)BwñQh򒗕f{^ڙA?Lfûd(eɯwB:+#tpox!<Dk)hPPW%Qp(R5- 뒬 V^=%ĨyJ& EhPD%:k< Ꝕ`WW+ >' 뉸JslI{;թie#T\Y~@xAVdjGi[:)Qaℵ[@jQ|{fE+1-7U9368>{L+cf܈J/_saJ2R ֍ޔ^ V+p~8=^|FiK_0+vH@e"W;>[E>ɘo*Y$rZuԔɼemtkz< !ŵG[-~=uW\4d=u| 4Rx@`kmLqI"wVx2.2?Wa(iq';Р$J@shxTNt)83JR, /|̔ "FhAwGLj~Hi8:Y(^;w\SWj^WʚbN.S<4u /HqDq}s 'l( lEN),cmw>7Ӑfft gܗviJn:?С|,'úI7OEZG?sIğ:j@]R%I+|s2-xT0 #u(*(@ab__S6gV=&yys_MS(=&_'njzɍ&p'o"JUy6狽BȕBll@v1 -$Zw]7ۖ95yLCZtT*"nVܧqQw*n9m Ez(\ʸvqPPit~_rWD|t#!07b^ @-1B F ebMjM=rM!,TV\[ o } "b9%6"~$tT H{nS. Yq+om#7kK;kkEtJ}6T̄7Y.EI]AK1͈j"9W.kx\;ֵ5 ?WИ/{+d,97MRo;Q4%E᢬y܀Zburnohv{s_gUY9$1ǎh5;R8C-}9VP$<5JB:9])7ck̰p]9PĪdiE̢QJ񏘱wx dD'\&p~pG%܇;㱿za RsOUoDU =8LC&]4f[fmSJTOvqypյۅuۣtwña!gN!2HgSE3fp(>jQk)p71 E'w;ڷޠ><ұ|Pd:Oޅ׬m/"p&μk-G̰ètkY~Q`BUaYi԰tJ VMİt5Viq&Z,bG3PrBtZ>߯nsŅN$@$a&E-09orӋ~iˋ[ }P2wҀH}vįʐ)d}^EhƶIDޫqȍ2B!N$LҲ+{6-L?H.9BKo i8\1:E9ǘG8:A[J_|4l'-ݓt '|o <^|D7 d$UVBc`gw&F5|:E_O#adSQ^!sXv0eݣjsd/(uy7O)فĮ̕#{=m"%)C|JL?&*dP$Ѝ>,f59J*t",frZ(3O{}\}MQmZtm6X+:㙁 ,P xYV >fE _큒˽+E D ^o?RP2&dY@37[\rO8b03iTEvfKBL|w.Foː{*Y{}}%bDŧ ӯnK0#"Ң"x!:kzd2DRU! ήN7* _a@9=[=T7]G*4b#%6fA a ),FEW!HE:@2=qᨭ1 6[2W?%Uyt>3<4>˯tH OKA=IQ_!#DG9Wdi߁9'--}Eͱ5v\Q&{d AylJ0p߼$b-4stIޟ]5qnfWT/A5vEl&(W'ArpItj:)HB}Лp @V`S`SxY-?q zpXDӾPnWFvzcp҇gJQ~eӮ { Hsaprb%7P3*.QM҈Խ6 |3D/NtCҚE{*ÿv v;N,۸xI]"Q[˯UGYzb:b(98V?*.g;潀&6Sg8`pni&.ypȼCկ֢XG,'e]2HO1A[2}MTIi?׵AqbۻkE[tYl0D)K$6+ Y#N? >KʁO!Ov0tU=*:xL|'"Xv=+~)w&UK묶lڮ{e(D _f_{" u`<<x"xնez~ɍ(lkE1LX`DE3=~qXC0LW7+t(?._U_! @?~y~.rUկB#'?Fck Y(sS9{_)mU!㋋[#[ S P8֡9}oG)+&'j;wHz Ìg)%1}E0d)auU)][qKx@c xmR.3b̅S玩;k;(VW4%Rl8An 65-4x6.Y҅TsQvZٻap^S9؞Gf2jCj)m[CTq,ΛNQ??7n\{\vSYAP7]E؆k eQzMʷ,̴? &B) {x ;Hņm/BAz *yJҝ@2c52a*3gzzv_Qa0%c9X.ѡ2(WGj;%>q#לW~Ou4kMɈ"z$7A;$6n=g ~a3!.F[ք20k ibO\p&5ۦߍ<Д"fa\'F/ycNѱoQ>\~2wt'BI}N'=#~4OVCQHiN8tM{rE,~SYm^ryjBnSGG:5(Yo5pΕ~f"q-U\E!xb b*9}1 'dj67&PʬZ< #bCVڵ'+DL'j$ƀ]#RId>(f[r!qt+3b|%hIL1UF hv nfg 7)UztǠ\w7!4J|{~5tƲűp|-!ڸ e0k S0|CHQ=e Me$*u`*Ҵ#A׌WtE;O2(7D 1&_g͍k?Y,!ty-#Bsk5{ X8A(c&v}ouVJ܋3 y`F <(qt3ǛRUz{Ff* 3ߐ1}h7J\ (]L2 p %jI܃?vs~f׷[ &pXt$k(2;c$ MVb4H[jxAw$ ~$"v#Qk{Ppk Hw-QHQ@Ff ڤ4T,q=XH%4}OE}]HAI6R5~]M搅 m#,$C[ɴ/d'3lš:Ub0Gj\mLP,fUʖY@"M *†1ul~ͯZݣ(h%anf<"|BۜZ.̔p1ݲ+&=`=1)mXI7 n?SUh[e>1k6&Ao6b?áO%$??; ,xErĎ>i4DOU,a_RI ((Bѹ nKt,Zb\UE5u܆<~1}X"_p4%#OuBߦ;Iw6">F#k?]~UXݳܮ4s ,} z7 hW݉!}kBu={g1^ }1yVr$c,2OSP-(&.0>VH0l㧫ai.O9S9o7 M3[1%]MؚTDD)B a:DXi+U4qer{"|D/2aAɵ W)T|s2-F%=C']m*rHQL9?ͷ T}DkcbE15,:z FYC/|5 @/A2;ZmQjwK4bcH`K͐]Gz0Պ_a*͵_I4=AE[EhvѾslAl \ &<^Cy$xlLn>z'D\pt-f_B T߃N]Cx^&8812s3!t;P "0l-ޤjghݲ._'(dMc(3AVUsӺx_H{'iTb?::xpzIwkѡHվqA'=`,F/X/=]k&* IDMZy0mG x=J3Le`.rMPꧻY WK3@ku`t%۱ f_ CxSHMC*QF-8BŅ̨¹H!rQdSwZMMD*Ɯ9 |ϲ=Q9RwD3=WAdbyaَpũTP}Bֹ$L.Y& ,4`%^9;Uqe/D^hRY/oϷ)(@$(gO"A?,ӺEfl-B p0[?iNSO:LswVCzP7in%-pDQQg4JR[` >4pyO3݌k{0/ %Bz JƇ]%NwOYA@߰5A̮FuBYj a*O77Ȭ-KCF dxL*+ ajb~s ۰5zU'3(0鿦H@x4@"m.ns&B{K 3o FNQ/?d֟nO~޾bYL {T.3'R_M IjRrOQiz5>78qlOG03O:0L/ l@AaOWst*Kx7P9DAR +$ỦYoKxcʰ`?ja:!YJCg' 2 $o} 8~Qa;DKǂ]BgWd(/8lb+jSŻ.<]泷 ڙ}P;۸lte/f1齱6Y.5A@Z/D1C_ KH%z_4RSlqFKtVa:1T"Y-2NLC dZo&p\oؿr>zjU> <4Bcy'߅WUJon!q,w)Ah> ̌jU cYDDVxcgz/f}~"漗{{ݦ& /0lEͫ`6 fȻ Ҫ!Hrhf27Ja4BT+\=7g6oﳍ+;7i!5t'k0V2N.G|6٥ʹ<=&1Ʊ,B$Skɰ(?Dv䓑2xd~w%.t[F chgB9ps_I>mqnW炮~>K9O4V=c?W'./y=O(1 X)+TD/ɳYi"ڄԈ>&66 t&sZ N ʄ9Ӎ `Yz h"t&n=I1QHu),N&kC0׆̯lppRW] nP3ֵՑn/Wr2KY7?to BX[n;#kbUOC^4Pu1Lz"/zr_sDEyGxb~e!_.AfD?  ,bQVGI2.Y IqySک{AŹ(#_509sxT]lM̳* nL:w$C:%pɚJ H^ƛhLD!ZQHZLzOtQ B">|H-W2(|G y#v&UGfC\\L3aˁ/FPTMyf~ow>E@)^ M)hUڽ@L7"CfPqh`=T:n|tl;cu)Fς}nme%S}9bNy`D]J[3Wi56>u:lM4[HUQxKK&cl.0_(q_/ "GtTuRruxWb89/*%+4a .L%hy%7NaP}*36]դىM KJjW$4XOP(TmDwŌxHD%C\1ۡ?U:_P~| ~d/'~Ḋt=1<*d鸴7Vo`k5+Q \ z6Y]'m5tq:lӼB,^ZU=U7'uN&g7mVq_GlaE[+lAu>т @xQ"x\vU*\ 1(NjgRqrn:80j-ظ ǁװT78_}se.-VNL$#cX/&ApՆKqL(E'F!I_|/8a@tc|Πj*r[a5+p֖REcGIM^#8s*+&F$3  :w;SAPm}A+$k"Y(( H|M~PԶ4?XR^Ѯc:lNQ%уEW{exkSϠq~:fzPѣF[ZN#dM<1/po+DNPi~3^Խ{tB +IlDsR"JhwGot,m7 <߷Ի*Kxh/8]Aʄ8%$O;l h~jaWY}2>n՗r{h?o!PmւGZ)9OnB#>GL ({j\@co/61M_+ Ѵ%uԯ0(WTBټ/EZ郤. [Zg u> ĎV:0fvȠt6< Ҹ/nM5sUN3Di bYwP$` PJ_</Lvln^a7 u%t-4k6'x1A}! l/V֊ *:@{vCCW,غs+]}uࣹҍ5R }|{W<'k=K8ZmQeoa=@Z  c(+g>}NJa`47YVsmc*ft!>"(:a4rWc%Dyƌ ,r>M]F0n;g ":8P6nGrsyH"HKͫsJ_CeH LS7p<%QR-5'~vLЈVG T:!uչaH*3)xhYaTa *::ޞp#Jk1VN(B_gFcnޙV.U6aݷp21Gƭ!WNPԻ3\44WoG"4G #Íkn[Sy`h:TXDq^~D:J, 띣-L +ER)jS_̰Q4_5z)AYd Z|$V4Ft֖mE,3ta&`-P`6ՑmxPҫ6H;')ogp5UuAg_Ÿh5;|-4#xKlԎva4GiQɸ4.֑C-^$1t_1)ddyCQcoR.=D{zN";&%6s f4[=iLj:~+ P(;B-Vƾ ahc܀ aqV^RȢFaѡS}^NF7Q0yI:WD h1̀kj 9c4jA`_!c5T2\ߙ%6pXOUFH|;BUΨ2IG'^zL72h~dZ tM7Si mbȥ2ng9 Mt =ǀԽ5xk ٭(AF GxȦYp&)<\}'5y#%X?z Y9o_[$&<٭ޠrD$.tbQ_Ҧˤ.^9DHmL4j[Yhi 3 g{X+, *9 Zfu"u#*3ed\swNe;huª|-f|ɦy[ >Bw)N +Ηaѧ'JqBodMekalEtN~Hvmו:xV/&"fr(z3, ,jbM$*n("b w[:WvU`9W9 {U|CSf⧨{ JZӺau&?Ӏ]Ds I;hI[ n,9U=Ra*]Ѐ y-S˭w-?љ *<#LXk\llRT_^̍>+a&D"#Rgg/ B&d3hf5<#OP\`;hѸ&Tf[D,fߗ{Q~GT..]r}=ٗ+Q8k! db`k]PRƐ ,"hS[nHTz(H2L`ѐ|dI[C轸e0[h%b.|48R-w`i^יx71v΍_ji9޻9n?R5⹹՘CH% F$I;s>BV)$sA}Ez $?{k]O f ?0Y%'놖INv&6#b6>NVIRz.lHV @'5Sys3l²O{j $OyLņLZ_HNgmi2lu{EFh{A? zֆfgO Nl煲n29ղtn-G(z')A *G#%pyOW"XZ >O|թ6#GP"kT. |k6Sd%ZiyGbiEgwv=*ȕ"ĵ,G(ZY"G OYݚ,B2VB r_ԠwNwGh葧8EDx獅cg xY"ȃ6ި!m )@5?bDH=P܉`iHΗI^mP K_%325%v<z"Ix$ 4AϦRL)Os,]>|O{ikK2[J\Srp틶) .RPJB%i#\)a`!M E=7r;\lᘕEo~숹 KqLL:C#\,t!X|Aht– =8IY[/L<Ǖe0oss2W)zݩw W=oͫђh흹btKC65m,~(Xi]jP-CySTc,Һ4 ҭF([d!wo1Ax8Xaz]FjxY@-8!zf,p*CUyLJ9IA [\ `41I]\K"5&>"-T|f zGK6&CIFCzs-!EpO.N̝FeAQtq)%nܵ1“Qvݾ:}*TA4{^{i=BvYȵVݖd Ӆ2q}m!)bRmA2YtVzKPե0 E IzZnΡ\dy1|Sz^ˮ2䶟cԽh-nd &^ni|ފkvSro Y 2^m´[Rekb}ՔH?̋P2?1++ 䟢(dd_"`2K}Sj.`;${;`Io%},goSsJJ@kԕBu[u&WWLi0d +쇎pOn T ZSӃ4>2TQcC*Gñ$1\TC:7*ea'dFu50g>3VÄ,-;ח;qFwf~q `;RF|X RvB冪 `>R&KsE4dSicYG%Or^QI2-|P3=ڿ^H=V4@b jàɤzOG8 FLmI$R`q!Fkj avMj65|2yU998)>u|EQ3,'qC?7Mq} g;!S]clORV̛:{Dކ:֬ze^_t;MVhe'B?)Yxf8 D#(/4ݾT7ʹDc݄ȘjI_EGl ^?Cv@  >bFN*az`G_y9 DF' (_SXa<8OPkV`2&bWЫHr9ƽV8u;^:zPi/괡v2}D !DD|΅Z$ sx!$ޟ[ye1TixK`X#XH6[=Wlv هf ]ۊXB Wjqy0Q}\dPM ?CDΏgB+$&@D)56M1^kW#)e~/cøu FQ1u;)&)j> êrG;~C07 )nf2jD:)]p:W%'e& iE3u,(ĆE)33[vRN$8]M2@`&j E(дU=?Y*`*wvw `X]FrmP1PhZFV+[;,\EGXۇ[RQG.Z4(C!loxm%#GqGPAb)ݡMcҀ2fO›+jTHW{G_.(ŪAUri >i4w!W.y˓&K{q{'!T+& ?32g*iS~e pbv2ֺJ&nqGĒ"صx:Ϸg,s)dR 0s!M7G I3m3w`2O[5xYdUYVKMCaK6uT~Bę ,J}aF]Ź+(LV}A@ټ?s%r 6d{.r͚b ]^Vw嚷c]Y'X}*?43)z=QyN.\CU4&ѐ%2-dہ7 }8 ]&gTM2`Ŗ7R*\G5n6^>tR9 X珴=` Hy񷟃>BW)_{q=[\ wӕO՝U9{h,3&;{%u'I6 ^cZbsHE'-ôCt.;b 3xsAeS yw'U(n7ZtîQ|8e 4:bl(H>t*3L- NF== UӽK0+P<1y|NڪBZyup[2"v>{O~h2qyڗm&>uD AS D%ީPMnlWzdլ) ٍ vs% 0?8w^~*wPlDxH]ɋy&xhyiy\Ѭa>DlyTQ:YGxuξiȆWʁ6 vpWK>5@x$.jR&3 fn*S=Kb!ebEU_p3zEzM6iv p8/d f-ONFnlN_]lh6u?:^bPQ}'Pvm:cM>aљп6ȊnUۋ Vo0?d_e7zL \A OԏgV\]ar3*bf̈11X1k@;ϢGYA7ItW] a#9X"oNDkcx[@T#'N8yٟ~ wA&3Ot:sn)SUo9-Xq.JӅƑ ^.]"mT/65"Ij~3iٙm(Ykjzmپ<~jI!@#K}An[U=<wm,2-.FHӋ8 %&9O32cNU]%hXKLs [4?g [wkfHx=Ŗ/ CYn EOь`$&|F>|TQ8Y K247&!q0^%2:Z6uFd }sChЃl/B\Ç8RCQ߿@5lЬ@]/9ʛB|aLsVyvbNH(t~9Z jXb;[}֫%,/˻Cwmg~뙣P`CY,fOW+^}cA!)rOgC<`Ka16boŕ~ꐁnYܽ&9R2r 2莋Y}Re[Q8N]Cw LŀR&.ψ:\$LGO};ޔ$Ȧ3Ib}3ekswC*=>AU*M܏UGh<ro/z'@ P_-nHD %J:cldn@Ni*J ,!r_,:\8=dAc Iϴբ Z P|?R8ޟ-^Ps/g։6Y/mKXRMEpgr-=G"G+M0sJvjf؉/)=˼5<7*i=AZĨ|^ÖRqvLYY!ʎ ?Zx| k:o{h$+wvɢDrY>x"t@lOXAN@Xr{ Pr>A.s*45iہ $r FĀKڠ3. pctW#UGG}P:B5l.*⣺u߇ȔFrp%ս!oO:27C/$N2fu|ͅjqA_cE+7mNpCgQ7,{ &1 EkHO]~؋:ׅq0*nW.lFYZY!QR"j36?tF2rSG9ѥe7A.N]҄$q ]_$2![>6@_r[B=yBhtlǥ"H7KeoWbK5ʅePij"ҝ:(m&2M,~J]㻙sk 8Be2 2p)bD &;vPìwY>跍T~aޔ.Q2UC tQ"Seuos(4' "A!=i˱ ( "9ci hux HwF+Yf )q)MCUՔ^@$-D:;ҁ|_nɳ$ir~|lCpzZOJ}.05׿{5Jg2HfR%jv\-vA;(۾RiygV.+̹񭜈c-ϷYIijShHJt\C~Hm8$Y[ܒ:]& ;qkhf;:N"]"KCUt^^gG{C (퇪˳ב]"NGe,bvd5S:ӯásI6׶<ϖM)cKw=wh+;bg h!N[F5 +ӕG7K с7>" '%y6Xޏ>T/sRn,q bN>nE21CQDʂqm\epǛ;>>(jBWqA;7Qyt0{رWuuLzdݰB3mؗ2?S&=صޒ3[D+,idث0 :j5kkO))aۛ_H'n;%>{QtNqH.rO,2c\ſaG%;ӯiX25sU&y8cltϖm{."uQ>h1S]$Lr4i"H4@as8&h>LB i%Ap):b D:5J!CyA ҥ^@azHYZc[ǐKI8:1|hcWRp/<ɔЍw!*ߕ%y%IߺpW*NSc궏SCwש|Ӓ,Əz[YUé6q-dUcd$M[(ENO[ Yw-!9_/dmL0R1 ?9P- L7ʈwarhkr kϰ (=xYɣ4BJ8A;f F:J%9y̘1X)n Nm;81., OyeMV*Lt^\yF޳۹$%sa}YC`Y (Z|t2|ށrYO6c+Tz)Bqo̴~'([ܖ:~r>A± a yF$gq9gO"Ÿ \m9!H^XM2 IQG:nLx(\K`|8(;V~Fh:9dC?8a[6Mx)tt`Jz>~u~&X/4+2 !I>ggoUlD zgb짹SEv)$JC@rvDU_;SU1@DX[ W;@ D) |9jUο|l/0lx@B8o}n_ =.:ޔJ;Çbf'֕Btft_S&9.BU5W/5j2!#Wzء][9>"/o] ]e`/^ ݪ[_g768*eA!9ȫF35h}tNW'0u!AͰzœՎ$SeaPH^7믅oj\nU?n,Fqp)ȳs@xOZ鼌I[4*~d֣O^Qc| @"@|=蹑e,D50KajR7m F}uԺ:ln_ٲiSd+оol6ȱbSgȨzE(5d9mErB)&?=piLz'0k cT1Y.cH2=fr#l -TvD.@nz"R0 ]hϛެl&D7P'͋|dM6~㠚LUaNP&;7K,z8W7`QuaÓ-e銆-=vNڊmvTJ[V߸os]\@NUn!L6?ߨdj%X; \_ogUS8پLci[[tAH8:O4xE'DC(WSݙ(Q bvnl2k)Y[DkڈEZ(12ݡ'D.CP Xah7-C;bٛ``y[X@͐<}_햶=!O$+~fP c. q$i`͸#Xv1f͂ErP̓*R aIղ/#'ER|nJQSVgTYg.ۓ!OmgK5sMn쭿A@TG,v 6Ǚ&Ʃ? uOfZ7v"%J>, YCZg^ G!<Md=Z xqgW@C7v.aʼlLs(m?҄w#2̸{jZqa1 (bER Yٴ+J{=,ޝCFτѳd YآfDu$)Sw:&2hA_03'̈́7nMUAl1/~ M )*٩z؇RPjz.aQ8]`CG#+^L/7[GB+17/=KypNp`".D5c3@#H0UZ'b#E߸L>gJshxa>Gdn53{hDى.0dJ7 ~~Zm/& Z0/dlFG[ } Nޤ[9[( Ÿε>C+Xs:]<k$+`\01 )4º% ˲~UaL0A/! mW԰\Z{AbaDyd UIo$niqfێSf+eUV0 ,lFm^x䀞4:&.fz3U؆{$Fn)fڤS,.8Ϟk -YFq  zYg2E@D2_=I8Ǭ?ZL\z%~FY{܀}QSܮ-xQZ#Y.MY}㴎k2xF zk- X6x2HHb;>v Jui;njD]b Q,(OѹKT YWCY H&zb_Ą)*t}"vx[r'(d&0x(h{Oi5=XFCL'z因,{wd*Hn-EYۻ\vEgZ /Xvrr|&F́ݫU%k.qqI,^a[>}qk{;@u+v,lj7+UHQJG6ɶ_m/]SK*hH7•QD@E,乇!dDS-N'qo<ŕ#"j^eLw Օ>8_Ƃb#⮶X ůVL*:cy3[5itB:"ڠMv^l@~3,{RɄWy|e^~8ώ!>H=5RUjps./1E20BGB˗iEJV<<յIږ"e9CEooZ m_rat)n%vzjȩ04Ө␋qhC,g~&?S%YTLoZ=p4'?e݉hN,g`*ҤWajqDpH =h[ܴE@G$bSI(rޒVMN9lQgxyLfS]MINݑ6ɌO?bm&,S4|[ >3yީI}(QdDhnLҦ:( _kt/ES]H6(׷DI[G| hbrqRIUwp(?J2@>s5R$'GgW@P꽁 $xf\`Fp4w޿1Êׄ (Q[e9]] Kn.(E+>Q{CFa0.Jd(5zrH#W}ObA#.0?FGj܂ 34q\bWxU~姳&YVcM.M3'z^Dn[aXġ2힊=|ɈΠ袙׀Q݆;VWs (YXõ abCN%)b) AƔ k;ehslihＳ/Ze3fCB^ VoTo.?y4D*)N/hYPIZ.A"9/%/4Ya,r5 dhltNXZi$HW *뤐ь95K '{&}r/6[9<ʫ)` )ImW:Eg2PE{I&\Xh;r:@5x>&vIU& ba0Ͳ<- ҂ סeӹgm'A&u ׿o#Pas;sy w {;[O" qԃK?owzG J3v#3w_՜|1p*a^2Xs/ \ə1^3zFѾXj1*KO-rbYeb*-! "c09 Lj- WEpq0X7;xvޡD 3oz΋b!/@P k"x`'d~!q2V7 [▆#l* iTb?y M?tVjz6~kI;lRI8jן%*!ױNI$[wBPoK,{DgClOmᏹbAWE*eOz )k?`1_8N$*tr6TcdR *&-UL{Zv iLl/j~=eoGy x|%a{{*}.vH ,BC; ͸lM#,?ݹ!lFZ)iariGO1r VKUM(ť7,mY7R%`8-FDux"[ a%Y@'wDy5yyr@AT[-`@hh" [TEj/&R?0mg}_yeP9%<_n.#b<%$ih)D)^"w5DRFCd |*$p}|Uo%?Sm?tȔy(;I5Y1i5LcIi%WϒH0edu;OGonn7>&IwMh-\(6cFbaTỏi]Kn 8L8Өr5,+r%x΋_+dUXI(D 07>sEz1`$![?o\7[g04Ba's@1uz\ )m.-R42mʫ0+&k#K^wI}Y>Z15s$52ޚnB)M`/lHZٔjGN:b)n,+6?q$bWP<+`˝aefyeR`[,opa&n'6 })i<|-z:(888T%+&Nc*o%0<xكIM3^Jf] %I>\2Pg3`ʱo m<|e\N,@9[ n,ɖ2& ]k%j2҉H TA=fxB:yH*6!*ݘNj?rQAkհȢAܺ Q[=8&OsԒ?c?Q'޾juOF%`Ris<%9+%tqʽ夈G,Ǭb'ۤOL 3MݼgtM  _!H}xPŌr{*vƎ }Z8-cl=ѓK.='f4lB)/~"fB8sۘCmKKS%gC$h6'[a61`b"g;1EɅF/;Ҕ*P{?'}\_ +UoЌPc4<=㡘tt!uN\T腤OGYQ-3͉u1~S7^y2 m.`TsdO0D1 35]-*&9c5!V:r]9P hMd?a/JM/iԗ8o\ k@,lŮ6+D 2h;-!MPݽ륢08,&#O&.#$2,=<<2ExF $/oEP a #G>V) 0+fKA~.Y3MOˇPɃŦ ftc㻉 K/l(@$렄[SRwߟ"+)5V!*}0VUd"ꔒ75kHueTkSeꎄ`pgۑ>%$^+܎j' jY8N3I~ou d{ X;FZqHZ#=agȹ"bsK]ӗ/%XPB:tݸ?w',F,[0Wک+4yJfńX L^72+ v> z7Tw6K摖'dDM/gqжAI d3,@ڙ8guNJ x_s)'6KapBpX3>N[xve!;ҠGm^ށgN4>Jħ(rU# oԑ2i0 0_<]ѯq;(cΊ]a1xKN9,ȏi1G0^gD䅃N"BۇqNDˆ['IiNékDqɓ ,mpEt2Y0esOo]gP;bxI#ΥΪݞpPfBetILdItc0#jzQ@ `u)f(#!)HN^Iumx΅_jr\\laF D+ruEozc^-{vfZY[)_׬S<  R| f|fb_Ոv2zVhjP6`2zb^W-"@gʕGT%S'xLӼ>Tcsp Tڝ~P~R' Bswjj/yIk:;͞b=W@jP8^gSg߯ȩ7ZIF}zOjWUrtn3yӷaHzHgiq~R&"9WIpCtP:WT7[X61ɯ+i"(Ńgub^\ bWp 8<6mV?t2zp-,٥$Q>1zr\k{c?6XtY\jfHz-E>jjwRl[zklToLAry!&9 Ch[fEDAqlp:>gʃ(`*_÷gy8f)l7E=cxjhҔzz7{ )?e"4z/giS$%<sf4%,F6@6E_L~m չun2:vXeP>€NW*Gif e3z,z-hȴZ:,qDs\uȮ }zJapa:#PAon莨^EZ'ػb?io:B -fȘ-C  1㢧uChK~܌*bb7F`K mgN=YEAM -U#VQ9zq!l VN)I{7q/ >@>)h9|@CArRBnϖlXE@y7Kxp9[mx޾=,Fگ(f3ʂw[.I犮,0Mo}I_}-+/8Sb6*;_uVm`AP!hy{0:t5ŝH 7g@%=Հ!_N w/\W~*W~! 0.8~ScwP -Qb7Z+0uEU_LH4-y:S3'H GQnNo1SFW=nn_y)OVǬ&uB up&W' hF5HkaI}tfnYkϛ`x `haT2k(O u^3Tl]xjrq_Zط MZL[E'DK+8FvE_k8r:BɞH}Y-0Zc!:aBr1 mGUiA KQE<[YpA:=,K6wdmq8T >@&2CrQK/o&b`S-'U84^58;+4O`~Q2# Ʈ%lgK2u|Dh\G}L9Oǐ#P#orNCZ I,,=<:AhȪoB1Z|T=o0ߴ_=u}rO0޶G+ ry4b9F@s_1^UEӌ>~߷jIbŘ …~yRJ'|kGwv&>;i zLPZ$a^|4-貓96 t}`d? ܟp6W;Ӻv2L:K2a ttJJ 1]gx~EZ ػ 8|fz`FSA )_t]+i5fapU)+| vg@Ȧw`ǔJtndD܎:IMuS! % Bi4{K4 mG`+Z/|H?ՔRb/B[;aswjEeL쩛C,nu5-;)zS4snB~辘ʃUynp~/]Yl EyiH{OK $YHʫFdvqȗ<t0t//lJ*S5$0PZ;7aє#RnFi@+sRdϐbtyבOc*PPv Oi#e#H7 ?h/v8AC=钓~v|-T[eD_oB48blMAt)X ]^ )Fi BUޙ80OoƟo#p5YZxAg +@N֢%dTC:騅,O0/ݚcity I 9gyڐUgߣO5(!+?dy*҇=eGd1 *LͻS߶+N5OTvT 4 If ,vz ̈ZDi_T Y 9A 3 41Z9]7.3F]%f7D=(^ܟ lbq ?),N[nIy<-=LҜE,$TS|'Ys ̶ČyA\ =_mZ91W<Q;>1%[^a&;&.QwU_ܞ\Bg?X / -ګ8 +FaϒȀMڿ\#!g|.8kInN[{'cgZϲ瀠Ynr3;0&ewǮI?&Q2m{?5OnO"K:GD.&֐'BW2q6#U+(u*3YL9 ΐE~Jtl ϰo+6CPMlˣoUpBŵ UHq6, ~QL(b >-ya'4 `\JJx+ƆPC=5{(wό/DEO9)I-Ӗ)2s3]{,6lVgŪ0khzVrRǕ0s]-(2"m>Jg;wHTh=Szd]F].-_=4Z:wJ˷@GwX/Ձ JY]n1bZ aK&H1b\!Ǟ$˯Ո ψI ʻ}feq}R㲹2kG_S[V8^ {f|W)ywvl!Z2/!)2kaG,|k6>_P")5"ߋjY$ZB 7- kK7׵WdQH6^=FK _7+ADnfTo;pJpMSN Tdԯ@=Ҥ+E֊;V8pBv\]9t9}~^r m!+[nGU']N '~'39ܪDzfIpJ.̙i5 s=gEH6ooAo(`,ǖfFЯ >9˿EUSSJzj|aL4)Y61'>$X  嬵cUr|hk̤\nUu%RV|.ÆYj.f[QrKGt+~Sgd+C]WOE # ȑ0:zqcLIkN@w=-y?ez;kƭ1"dsgMqßP9N5Q*ȱb9N{x aL|]#Ya˘V ,zsMKȮyA: ܿuհ*fTZ~. r: .5gو0juH5eP1urbW֯x hcmcr+md#nљK5%й,&CkNz8t 7\mrOZ ӈZjPk3f?e2Zƾ.18%?|.ŀ &.J(TS[dHs+zjb8v`9E4y'ݙxa((-3Q CNl&y Nj:r*Ë[J@M+r5ƚq>KW^H޼c!jSv7&8L)c/T㽣z띊wvuP!D-hb8 ~L M+Y[a$S2qg a^.1rPIDwh_ܱ<}Dz |87,&,PM(Q5@ UJѯ1cpդm2mi z7ڒbGʟJwL^Cobj`IMF_qfiJ<79Zo͡tܻZiVz(1F,[@#ܜB^f'Ώ1Z1m4\NX{4׶`耱.7ib-$FѳGsȅ(!X ɳh֨XݠQ ^MenAIRG |(e6te"yzGˊ>P ك$?+VM}2s얢~oe6p\qJ Tkgvu`S6U,̪4_$Pby("gy(o./en 2TgO!^0f&BGX &4C2fU$G!~|b!h/\Nfvbmd"` /$wF,B4݅aŢrt$SX84!;vE O(EW)qI`QY m0Ĝ-ra%XNrh]Qt/xB