python3-openvswitch2.13-2.13.0-125.el8s >  H aH7 !F^(*v>?KrʖXr7TaLY}~dI7pbx4h<)`_5' N< U~'nvuYR4GKt_ԡ:JsRlGR(#1ݫO"Z[}oh0Qgv\Ei53{mTnK1EϬS&e34\PA_IWf;ZG_7(@*T2=7ڀR- Z/7 U9f50321bde5d0fb437f335ff47dd23ba3925ad9c9e7bf3b819581ae308d4ad60164b96194078ea5c1690ab965f99432786cd4aebȉaH7 !F^(*vb[bDM^&ε=C)zlgIdk8+άȑ T 4Ɩ҂N('p'✀y̦^ \^SQzPJOzs7ahعLiE+X%&vh[TMyUD"R+uBDOLg.<[0NoLq,f`@]G>bX35|rKS%nD>p<?d! * Hx| ",|| |  | | "| #|%||'|*T*||,l,-.(.8.z90z:H$zGD|H4|I$|XY\|]|^bsdeflt|u|vw|x|yrCpython3-openvswitch2.132.13.0125.el8sOpen vSwitch python3 bindingsPython bindings for the Open vSwitch databaseaC*kojid-x86-01.rdu2.centos.org=CentOSCentOSASL 2.0CBS System Environment/Daemons daemon/database/utilitieshttp://www.openvswitch.org/linuxx86_64W<:&ss8~8..rr;<";<WMWMTUb M M33oo1PssCxx'~(]j@+'mP&ssBIBk k kCtCO]L?.Y12APM(8^-Mza  d 0^A6$ *AAAA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤aC aC aC aCaCaCaCaCaCaC^FdaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaC^FdaCaCaCaC^FdaCaCaCaCaCaCaCaCaC^FdaC^Fd^FdaC^FdaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaCaC^Fd^Fd^FdaC^Fd^Fd^FdaC^Fd^Fd^Fd^Fd^Fd^Fd^Fd^Fd^FdaC^FdaC^FdaCaCaCaCaCaCaC^Fd^Fd^FdaC^Fd^FdaC ^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../../../../usr/lib64/python3.6/site-packages/ovs/_json.cpython-36m-x86_64-linux-gnu.sorootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenvswitch2.13-2.13.0-125.el8s.src.rpmpython-openvswitch2.13python3-openvswitch2.13python3-openvswitch2.13(x86-64)python3.6dist(ovs)python3dist(ovs)@@@@@@@@     @libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.4)(64bit)libopenvswitch-2.13.so.0()(64bit)libopenvswitch-2.13.so.0(libopenvswitch_0)(64bit)libpthread.so.0()(64bit)libpython3.6m.so.1.0()(64bit)openvswitch2.13python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.13.0-125.el8s3.63.0.4-14.6.0-14.0.4-14.0-15.2-14.14.3aC1a8aaS@aS@a@`` @`@`\`````f@`@`q` @``~@`v@`pA`lM@`lM@`g@`e`c`X`T@`P`*b@`#`3@``@`>`>`>`@``@`@`@`@`@`2@_@_1@_$_$_@_ǁ_^@_@_i_@_@_/@_@__ _@_"_"_P_a@_Z@_G@_FN_;_;_5+@_16_16_._._"@_A@_A@_A@_A@____ @_@^^3^3^3^?@^?@^^^^^^@^@^@^@^@^@^@^@^1^^H^H^H^^k@^^^}^y@^x^x^x^h^W@^U @Open vSwitch CI - 2.13.0-125Open vSwitch CI - 2.13.0-124Michael Santana - 2.13.0-123Open vSwitch CI - 2.13.0-122Michael Santana - 2.13.0-121Open vSwitch CI - 2.13.0-120Open vSwitch CI - 2.13.0-119Open vSwitch CI - 2.13.0-118Open vSwitch CI - 2.13.0-117Timothy Redaelli - 2.13.0-116Open vSwitch CI - 2.13.0-115Open vSwitch CI - 2.13.0-114Open vSwitch CI - 2.13.0-113Open vSwitch CI - 2.13.0-112Open vSwitch CI - 2.13.0-111Open vSwitch CI - 2.13.0-110Open vSwitch CI - 2.13.0-109Open vSwitch CI - 2.13.0-108Open vSwitch CI - 2.13.0-107Timothy Redaelli - 2.13.0-106Open vSwitch CI - 2.13.0-105Open vSwitch CI - 2.13.0-104Timothy Redaelli - 2.13.0-103Timothy Redaelli - 2.13.0-102Open vSwitch CI - 2.13.0-101Open vSwitch CI - 2.13.0-100Open vSwitch CI - 2.13.0-99Kevin Traynor - 2.13.0-98Kevin Traynor - 2.13.0-97Open vSwitch CI - 2.13.0-96Eelco Chaudron - 2.13.0-95Open vSwitch CI - 2.13.0-94Open vSwitch CI - 2.13.0-93Open vSwitch CI - 2.13.0-92Open vSwitch CI - 2.13.0-91Timothy Redaelli - 2.13.0-90Timothy Redaelli - 2.13.0-89Timothy Redaelli - 2.13.0-88Open vSwitch CI - 2.13.0-87Open vSwitch CI - 2.13.0-86Open vSwitch CI - 2.13.0-85Timothy Redaelli - 2.13.0-84Flavio Leitner - 2.13.0-83Flavio Leitner - 2.13.0-82Timothy Redaelli - 2.13.0-81Open vSwitch CI - 2.13.0-80Open vSwitch CI - 2.13.0-79Open vSwitch CI - 2.13.0-78Open vSwitch CI - 2.13.0-77Open vSwitch CI - 2.13.0-76Open vSwitch CI - 2.13.0-75Open vSwitch CI - 2.13.0-74Timothy Redaelli - 2.13.0-73Timothy Redaelli - 2.13.0-72Open vSwitch CI - 2.13.0-71Flavio Leitner - 2.13.0-70Flavio Leitner - 2.13.0-69Flavio Leitner - 2.13.0-68Ilya Maximets - 2.13.0-67Ilya Maximets - 2.13.0-66Open vSwitch CI - 2.13.0-65Open vSwitch CI - 2.13.0-64Open vSwitch CI - 2.13.0-63Timothy Redaelli - 2.13.0-62Open vSwitch CI - 2.13.0-61Open vSwitch CI - 2.13.0-60Open vSwitch CI - 2.13.0-59Open vSwitch CI - 2.13.0-58Open vSwitch CI - 2.13.0-57Flavio Leitner - 2.13.0-56Flavio Leitner - 2.13.0-55Open vSwitch CI - 2.13.0-54Open vSwitch CI - 2.13.0-53Dumitru Ceara - 2.13.0-52Flavio Leitner - 2.13.0-51Flavio Leitner - 2.13.0-50Timothy Redaelli - 2.13.0-49Flavio Leitner - 2.13.0-48Flavio Leitner - 2.13.0-47Flavio Leitner - 2.13.0-46Flavio Leitner - 2.13.0-45Flavio Leitner - 2.13.0-44Flavio Leitner - 2.13.0-43Flavio Leitner - 2.13.0-42Flavio Leitner - 2.13.0-41Timothy Redaelli - 2.13.0-40Timothy Redaelli - 2.13.0-39Ilya Maximets - 2.13.0-38Ilya Maximets - 2.13.0-37Ilya Maximets - 2.13.0-36Aaron Conole - 2.13.0-35Aaron Conole - 2.13.0-34Timothy Redaelli - 2.13.0-33Timothy Redaelli - 2.13.0-32Timothy Redaelli - 2.13.0-31Timothy Redaelli - 2.13.0-30Timothy Redaelli - 2.13.0-29Dumitru Ceara - 2.13.0-28Dumitru Ceara - 2.13.0-27Dumitru Ceara - 2.13.0-26Dumitru Ceara - 2.13.0-25Dumitru Ceara - 2.13.0-24Dumitru Ceara - 2.13.0-23Dumitru Ceara - 2.13.0-22Dumitru Ceara - 2.13.0-21Timothy Redaelli - 2.13.0-20Timothy Redaelli - 2.13.0-19Timothy Redaelli - 2.13.0-18Timothy Redaelli - 2.13.0-17Timothy Redaelli - 2.13.0-16Timothy Redaelli - 2.13.0-15Flavio Leitner - 2.13.0-14Flavio Leitner - 2.13.0-13Flavio Leitner - 2.13.0-12Flavio Leitner - 2.13.0-11Flavio Leitner - 2.13.0-10Timothy Redaelli - 2.13.0-9Timothy Redaelli - 2.13.0-8Numan Siddique - 2.13.0-7Timothy Redaelli - 2.13.0-6Timothy Redaelli - 2.13.0-5Timothy Redaelli - 2.13.0-4- Merging upstream branch-2.13 [RH git: 215f08bbd8] Commit list: a56a8008eb netdev-linux: Fix a null pointer dereference in netdev_linux_notify_sock(). 186ff2a5b2 pcap-file: Fix memory leak in ovs_pcap_open(). b9b144b8d8 odp-util: Fix a null pointer dereference in odp_flow_format(). fea883d3bd odp-util: Fix a null pointer dereference in odp_nsh_key_from_attr__(). ef6d151b04 ipf: Fix only nat the first fragment in the reass process.- Merging upstream branch-2.13 [RH git: b3c7c50935] Commit list: 38efd803dd dpif-netdev: Fix crash when PACKET_OUT is metered.- Migrate openvswitch to gitlab [RH git: 081bad43fc] Signed-off-by: Michael Santana - Merging upstream branch-2.13 [RH git: 775922244f] Commit list: f61f810fb3 tc: Set action flags for tunnel_key release. 0dc609a260 netlink-socket: Replace error with txn->error when logging nacked transactions. d3776e354c dynamic-string: Fix a crash in ds_clone().- pkgtool: Make changelog in spec file more informative [RH git: 42174a9bc1] This is done by adding the body of the commit message to the changelong. The body is indented and has extra spacing separating each entry in the changelog to make each one more discernible since now they could be longer. Also, make sure the bugzilla ID is at the end of the line Signed-off-by: Michael Santana - Merging upstream branch-2.13 [RH git: eda2f50cf9] Commit list: f7e3b47e09 dpif-netdev: Fix offloads of modified flows. 350507b163 dpif-netdev: Fix flow modification after failure.- Merging upstream branch-2.13 [RH git: c2e53c3150] Commit list: f92ce92e53 daemon-unix: Fix leak of a fork error message.- Merging upstream branch-2.13 [RH git: d613ce404a] Commit list: d794934d01 datapath-windows:Correct checksum for DNAT action- Merging upstream branch-2.13 [RH git: 1dbd295283] Commit list: 9b1c0df6ad dpif-netlink: Fix report_loss() message. 17e98772cb conntrack: Document all-zero IP SNAT behavior and add a test case. 305b944a2e ovsdb-server: Fix memleak when failing to read storage. 1aa1f59142 netdev-linux: Ignore TSO packets when TSO is not enabled for userspace. d127fa6d2b conntrack: Handle already natted packets. c8ebe4434c python: Fix Idl.run change_seqno update. 2762bf6895 Prepare for 2.13.5. d72ccdfbda Set release date for 2.13.4. 76fdda2b34 netlink: removed incorrect optimization 9c386761f9 ovs-actions.xml: Add missing bracket. be8c4af1ce netdev-offload-tc: Use nl_msg_put_flag for OVS_TUNNEL_KEY_ATTR_CSUM.- Merging 15251f0e1d datapath-windows: Specify external include .. [RH git: f9d10a495b] Commit list: 15251f0e1d datapath-windows: Specify external include paths 9f05167b21 Remove Python 2 leftovers. 64c3133c01 ipf: Fix a use-after-free error, and remove the 'do_not_steal' flag. fe7bd42d6c ofproto: Fix potential NULL dereference in ofproto_ct_*_zone_timeout_policy(). fc23134227 ofproto: Fix potential NULL dereference in ofproto_get_datapath_cap().- Merging upstream branch-2.13 [RH git: 190762bf5c] Commit list: 8be19f789b dpif-netlink: Fix send of uninitialized memory in ct limit requests. 25dd08492d ofproto-dpif: Fix use of uninitialized attributes of timeout policy. 95570b23c8 netdev-linux: Fix use of uninitialized LAG master name.- Merging upstream branch-2.13 [RH git: 63656e47fb] Commit list: 160bb80a32 ofp_actions: Fix set_mpls_tc formatting.- Merging upstream branch-2.13 [RH git: 43b0d45790] Commit list: 32a197f845 dpif-netdev: Remove meter rate from the bucket size calculation. 1b4d8fe1d9 ovsdb-idl: Consider all tables when computing expected cond seqno.- Merging upstream branch-2.13 [RH git: 3f4fc768f0] Commit list: 9acbf2cff7 ovs-ofctl: Fix coredump when using "add-groups" command.- Merging upstream branch-2.13 [RH git: 5eca61ee5e] Commit list: 058702e3dc raft: Transfer leadership before creating snapshots.- Merging upstream branch-2.13 [RH git: 6022570f3f] Commit list: 3bc41e2b6a dpdk: Use DPDK 19.11.8 release.- Merging upstream branch-2.13 [RH git: 132c26ba20] Commit list: fbebe7377d github: Fix up malformed /etc/hosts. 2a3d1f4971 doc: automake: Add support for sphinx 4.0. 4ab5524dbb cirrus: Look up existing versions of python dependencies.- Merging upstream branch-2.13 [RH git: d2edacdddd] Commit list: ea98fe0743 ofp-group: Use big-enough buffer in ofputil_format_group().- Merging upstream branch-2.13 [RH git: 9a8a649301] Commit list: 798a40ffb6 ofproto/ofproto-dpif-sflow: Check sflow agent in case of race 9984d61124 dpif: Fix use of uninitialized execute hash. 43c2a10922 odp-util: Fix use of uninitialized erspan metadata. 4f68040a5c dpif-netlink: Fix using uninitialized info.tc_modify_flow_deleted in out label. 1c2a5f170f netdev-offload-tc: Probe for support for any of the ct_state flags. a4730043a4 compat: Add ct_state flags definitions. bbd62d7a44 tc: Use skip_hw flag when probing tc features.- Fix typo in rh-mock-srpm [RH git: 5641bf9d72] Thanks fbl for reporting- Merging upstream branch-2.13 [RH git: 0aaf7c02b7] Commit list: 759da53f07 Add test cases for ingress_policing parameters c901a563f4 netdev-linux: correct unit of burst parameter- Merging upstream branch-2.13 [RH git: 1334a398c9] Commit list: d47800bd66 ovsdb-idl: Mark arc sources as updated when destination is deleted. 6cf6f9d0d3 ovsdb-idl: Preserve references for deleted rows. e7d451ab8a ovsdb-idl.at: Make test outputs more predictable. 7fca8a3c94 test-ovsdb: Log steps in idl test. 4ca9dd87f6 test-stream: Silence memory leak report.- Align DPDK config to 19.11.7 [RH git: 62cff1abf5]- Merge tag 'c765f42e31c1baa8f4e7a9e01080f5474596ea98' into fast-datapath-rhel-8 [RH git: 4ef8ee2e1a] dpdk-19.11.7- Merging upstream branch-2.13 [RH git: 02b662f992] Commit list: 68086371c8 ipsec: Fix IPv6 default route support for Libreswan.- Merging upstream branch-2.13 [RH git: 7323d4b8e4] Commit list: 2cb952326e ovs-ofctl: Fix segfault due to bad meter n_bands.- Merging upstream branch-2.13 [RH git: 8e7dc3319c] Commit list: a112239ff5 dpif-netdev: Refactor and fix the buckets calculation. d9d8ebfa00 dpif-netdev: Fix the meter buckets overflow.- dpif-netdev: Allow PMD auto load balance with cross-numa. [RH git: edeaca020b] (#1938162) commit ec68a877db5bbfba49ddeb9929479c033420ea6b Author: Kevin Traynor Date: Thu Mar 18 11:34:04 2021 +0000 dpif-netdev: Allow PMD auto load balance with cross-numa. Previously auto load balance did not trigger a reassignment when there was any cross-numa polling as an rxq could be polled from a different numa after reassign and it could impact estimates. In the case where there is only one numa with pmds available, the same numa will always poll before and after reassignment, so estimates are valid. Allow PMD auto load balance to trigger a reassignment in this case. Acked-by: Eelco Chaudron Acked-by: David Marchand Tested-by: Sunil Pai G Acked-by: Flavio Leitner Signed-off-by: Kevin Traynor Signed-off-by: Ilya Maximets Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1938162 Conflicts: Commit backported from upstream master branch. Commit not present on upstream branch-2.13. Removed NEWS file update as could cause future merge conflicts.- redhat: Update docs for test builds [RH git: 0322f225d3]- Merging upstream branch-2.13 [RH git: bb107a7f7f] Commit list: fc8444fb1d python: Send notifications after the transaction ends. 712193ff1c ovs-ctl: Allow recording hostname separately. 3665d7f805 dpif-netdev: Fix crash when add dp flow without in_port field. 732e17d6b6 Documentation: Fix DPDK qos example. 1dee0a67e5 raft: Report disconnected in cluster/status if candidate retries election. e78d6ffba7 raft: Reintroduce jsonrpc inactivity probes. aea5fefdac connmgr: Check nullptr inside ofmonitor_report(). 26fa38c332 ovsdb-client: Fix needs-conversion when SERVER is explicitly specified. 65582c0bad dpdk: Use DPDK 19.11.6 release. 967d4055e7 windows, tests: Modify service test. ccdfc67b74 netdev-linux: Fix indentation. 81e759618c ci: Use parallel build for distcheck. 6d67310f4d ofp-actions: Fix use-after-free while decoding RAW_ENCAP.- conntrack: add generic IP protocol support [RH git: 6b3ca4b028] Currently, userspace conntrack only tracks TCP, UDP, and ICMP, and all other IP protocols are discarded, and the +inv state is returned. This is not in line with the kernel conntrack. Where if no L4 information can be extracted it's treated as generic L3. The change below mimics the behavior of the kernel. Resolves: BZ1876459 Signed-off-by: Eelco Chaudron Acked-by: Flavio Leitner Signed-off-by: Ilya Maximets (cherry picked from commit a27d70a8984879bc0a66afc2d7c35149659be24d)- Merging upstream branch-2.13 [RH git: 8655a639ac] Commit list: 2be25e3b00 Prepare for 2.13.4. f25820bf55 Set release date for 2.13.3. 9a5e78b5c7 cirrus: Use FreeBSD 12.2. 3512fb512c flow: Support extra padding length.- Merging upstream branch-2.13 [RH git: 2100324b58] Commit list: a6efca9628 netdev-offload-tc: Reject rules with unsupported ct_state flags.- Merging upstream branch-2.13 [RH git: 92b77d1489] Commit list: 9985c46501 dist-docs: Include manpages generated from rST.- Merging upstream branch-2.13 [RH git: ea87c21ff2] Commit list: fcae3177d4 tc: Fix mpls bottom of stack bit mask reporting.- dpif-netdev: Add PMD auto load balance status log. [RH git: 4fd540d8ef] When any PMD auto load balance parameters change, it is useful to also log if the feature is enabled or disabled. |dpif_netdev|INFO|PMD auto load balance load threshold changed to 70% |dpif_netdev|INFO|PMD auto load balance is disabled Signed-off-by: Kevin Traynor Acked-by: David Marchand Acked-by: Ian Stokes Signed-off-by: Ilya Maximets (cherry picked from commit 30de75520277a39ac775d15d4fa1c9cc886ad5d2)- dpif-netdev: Add parameters to configure PMD auto load balance. [RH git: 5935f7a9d8] Two important parts of how PMD auto load balance operates are how loaded a core needs to be and how much improvement is estimated before a PMD auto load balance can trigger. Previously they were hardcoded to 95% loaded and 25% variance improvement. These default values may not be suitable for all use cases and we may want to use a more (or less) aggressive rebalance, either on the pmd load threshold or on the minimum variance improvement threshold. The defaults are not changed, but "pmd-auto-lb-load-threshold" and "pmd-auto-lb-improvement-threshold" parameters are added to override the defaults. $ ovs-vsctl set open_vswitch . other_config:pmd-auto-lb-load-threshold="70" $ ovs-vsctl set open_vswitch . other_config:pmd-auto-lb-improvement-threshold="20" Signed-off-by: Christophe Fontaine Co-Authored-by: Kevin Traynor Signed-off-by: Kevin Traynor Acked-by: David Marchand Acked-by: Ian Stokes Signed-off-by: Ilya Maximets (cherry picked from commit 62ab5594c20cc815592562af69abb5b8ebe85d55)- dpif-netdev: Add log for PMD auto load balance interval parameter. [RH git: a8f4696c20] Previously if the parameter for the PMD auto load balance minimum interval was changed at runtime, it was not logged unless the PMD auto load balance feature was also changed to enabled. Log the parameter anytime it changes, and use minutes when it is logged as that is the user input format. Fixes: 5bf84282482a ("Adding support for PMD auto load balancing") Signed-off-by: Kevin Traynor Acked-by: David Marchand Acked-by: Ian Stokes Signed-off-by: Ilya Maximets (cherry picked from commit e4db0b69e2d81d8d5ca1265fbfbd08a9b30a1a02)- Merging upstream branch-2.13 [RH git: d303f53850] Commit list: a5e068f24b netdev-dpdk: Fix incorrect shinfo initialization. 522d828ae6 github: Don't fail the job if 'apt update' failed. 81026f0bad vswitchd.xml: Fix supported IPsec tunnels.- Merging upstream branch-2.13 [RH git: 2986e0866e] Commit list: 98723e351f ovsdb-doc: Add build dependency on dirs.py.- Merging upstream branch-2.13 [RH git: f2f6b58dd9] Commit list: 484068b741 dpctl: Fix dpctl process command parameter error.- redhat: Use a mock config based on the buildsystem target [RH git: b820a7b894]- Merging b37528cef7 conntrack: Fix the icmp conntrack new state. [RH git: dc913c7d4c] Commit list: b37528cef7 conntrack: Fix the icmp conntrack new state. c06328ae57 conntrack: Fix icmp conntrack state. 8e0a1527d7 odp-util: Fix abort while formatting nsh actions.- Merging f383000ca6 acinclude: Strip out -mno-avx512f provided .. [RH git: 304ba372e4] Commit list: f383000ca6 acinclude: Strip out -mno-avx512f provided by DPDK. 63f2aa2b7d acinclude: Strip out -march provided by DPDK.- Enable AVX512 support on binutils >= 2.30-79.el8 [RH git: 8b3f992902]- Merging upstream branch-2.13 [RH git: b7a6e48410] Commit list: 66fc41bfb2 Prepare for 2.13.3. e8ca014102 Set release date for 2.13.2. 9b00c9c047 lldp: do not leak memory on multiple instances of TLVs 02e48ecf29 ipf: Avoid accessing to a freed rp. 999bec82e1 rhel: Fix libunwind dev package.- Merging upstream branch-2.13 [RH git: 86c9f9af77] Commit list: 6c3d1c9f6f ovs-monitor-ipsec: Add option to not restart IKE daemon. d9edf71d17 ovs-monitor-ipsec: Allow exit of ipsec daemon maintaining state. 7286dc4412 ovs-ctl: Use 'stop_daemon' to stop ovs-monitor-ipsec. 60c6013b7b ovs-monitor-ipsec: Fix active connection regex. d59ec5359d ovs-monitor-ipsec: set correct 'leftcert' and 'rightcert' name 6e1f4ade25 ovs-monitor-ipsec: Add support for tunnel 'local_ip'. 03ee7466ca ovs-monitor-ipsec: Suppress "unknown %d argument" warning. d371c42bbb ovs-monitor-ipsec: Fix _nss_clear_database() parse error. ff48c43a59 ovs-ctl: Don't overwrite external-id hostname.- Merging upstream branch-2.13 [RH git: 2cfb47639f] Commit list: 7312222306 odp-util: Fix netlink message overflow with userdata. b3c09431ad NEWS: Move '--offload-stats' entry to correct release. 7c24762d3e ovsdb-tool: Fix datum leak in the show-log command. a47647c6ec ofproto-dpif-xlate: Stop forwarding MLD reports to group ports. 82093f97c5 github: Fix Ubuntu package installation. 56b81e3ee7 jsonrpc: Avoid disconnecting prematurely due to long poll intervals.- Merging upstream branch-2.13 [RH git: 350e017b66] Commit list: aacf05c5b8 ovsdb-idl: Fix expected condition seqno when changes are pending. db74cd6f4b ovsdb-cluster.at: Fix infinite loop in torture tests.- Merging upstream branch-2.13 [RH git: ece49fb665] Commit list: cdf4cf4966 lib/tc: fix parse act pedit for tos rewrite- Merging upstream branch-2.13 [RH git: 3e10785905] Commit list: ac5c067937 ovsdb-idl: Fix use-after-free when deleting orphaned rows. 60607ba779 ovsdb-idl: Fix memleak when deleting orphan rows. 08c8a29bf4 ovsdb-idl: Fix memleak when reinserting tracked orphan rows.- Merging upstream branch-2.13 [RH git: 773fc1e75b] Commit list: d853716dcb python: Update build system to ensure dirs.py is created. 9ada310291 python: set ovs.dirs variables with build system values 9342d27a26 datapath: ovs_ct_exit to be done under ovs_lock d93d9181f5 compat: rcu: Add support for consolidated-RCU reader checking 505b916b03 ovsdb-idl: Fix iteration over tracked rows with no actual data. 1eb6abd6fc Handle refTable values with setkey() feec8e6888 tests: Add overflow test for the sha1 library. b5a39a7d7f travis: Remove support for Travis CI. db5e2bdd3b github: Add GitHub Actions workflow. 3ff5e400bd ci: Don't use 'native' machine for DPDK cache.- Fix building OVS on ppc64le and armv7hl with Python 3.9 [RH git: a6928f88b2] Python 3.9 changed the architecture naming in suffix used for binary extensions. Use python3-config --extension-suffix in order to figure out the correct extension suffix used for binary extensions. This is not, currently, an issue on RHEL8, but it'll be an issue on RHEL9 and it's an issue on Fedora Rawhide.- redhat: Enable ipsec support [RH git: 2c7306b51f] (#1782141) Resolves: #1782141- Merging upstream branch-2.13 [RH git: 2aae181525] Commit list: abe7fe4486 ovsdb-idl: Return correct seqno from ovsdb_idl_db_set_condition(). 03c12fe076 ovsdb-idl: Fix *_is_new() IDL functions. 1b73731eef ovsdb-idl.at: Return stream open_block python tests. b876447179 compat: Fix compile warning. cb874fa2f2 compat: Remove stale code. 6c5cd45051 tests: Add parse-flow tests for MPLS fields. fa59781826 ofp-actions: Fix userspace support for mpls_ttl. cdf2cf98e3 python: Don't raise an Exception on failure to connect via SSL. 032fd056fe lldp: correctly increase discarded count f051229561 lldp: increase statsTLVsUnrecognizedTotal on unknown TLV 12ffc6118e lldp: fix a buffer overflow when handling management address TLV 46b5101de0 lldp: Fix size of PEEK_DISCARD_UINT32() 364d371c58 lldp: validate a bit more received LLDP frames 3a3c52b8a2 sha1: Fix algorithm for data bigger than 512 megabytes. 8ea7e55eb6 odp-util: Fix overflow of nested netlink attributes.- redhat: Fix conf.db permissions in the spec. [RH git: 46d3617298] Upstream has removed the read permission from the db file because it may incur security concerns, for example, IPsec Pre-shared keys are stored in the db. Fixes: 3e581f43a9 ("ovsdb: Remove read permission of *.db from others.") Signed-off-by: Flavio Leitner - Merging d43d10e10c netdev-offload-dpdk: Preserve HW statistics.. [RH git: a779495d03] Commit list: d43d10e10c netdev-offload-dpdk: Preserve HW statistics for modified flows. 3e581f43a9 ovsdb: Remove read permission of *.db from others. 1440833435 raft: Make backlog thresholds configurable. efc59be2ea raft: Set threshold on backlog for raft connections.- Merging dc5b4e8f69 ovs-bugtool: Fix crash when enable --ovs. [RH git: de7f5508d7] Commit list: dc5b4e8f69 ovs-bugtool: Fix crash when enable --ovs.- Merging upstream branch-2.13 [RH git: 03753de14f] Commit list: 07049d5b66 bugtool: Fix for Python3. 625a6f0f0e raft: Avoid having more than one snapshot in-flight. fc7a644a73 ovsdb-server: Reclaim heap memory after compaction. 49453540d9 raft: Add log length to the memory report.- Merging upstream branch-2.13 [RH git: 373b7e9f51] Commit list: fd29479f04 raft: Report jsonrpc backlog in kilobytes. 7865bc49d3 ovsdb: Add raft memory usage to memory report.- Merging upstream branch-2.13 [RH git: f9a054c1b5] Commit list: 7a69ccf7e4 raft: Avoid annoying debug logs if raft is connected. 3a8897322f raft: Fix error leak on failure while saving snapshot.- Merging upstream branch-2.13 [RH git: 73eb33dcf1] Commit list: 9bd5bf4c3a netdev-tc-offloads: Don't delete ufid mapping if fail to delete filter- Merging upstream branch-2.13 [RH git: 6f80f8c230] Commit list: df3ecbbb6b travis: Fix kernel download retry. 1c9e73f922 Revert "travis: Disable check for array of flexible structures in sparse." 1557ce2673 ofp-ed-props: Fix using uninitialized padding for NSH encap actions.- redhat: Add conflicts for older versioned packages [RH git: b1f563c738] (#1886836) Resolves: #1886836- Merging upstream branch-2.13 [RH git: fa57a21817] Commit list: 75fbada49b travis: Disable check for array of flexible structures in sparse. 12c43c2e64 ovsdb-idl.at: Queue for termination all OVSDB IDL pids. 61e6f03cc3 system-userspace-packet-type-aware.at: Wait for ip address updates. 6d30b86168 dpif-netdev: Fix typo in copyright header. 9400845f88 docs: Add flow control on i40e issue- Merging upstream branch-2.13 [RH git: 38d21cf4eb] Commit list: 3c2b1915d2 ipsec: Fix Strongswan configuration syntax. 610dfdc63d cirrus: Use FreeBSD 11.4. 0cb432954a selinux: Add missing permissions for ovs-kmod-ctl. 9a6d26ea30 netdev-dpdk: Don't set rx mq mode for net_virtio. 183be08223 rhel: Fix reload of OVS_USER_ID on startup. 90443bc5c6 classifier: Fix use of uninitialized value. c38ebe8164 userspace-tso: Document the minimum kernel version. faf6651357 rhel: Fix logrotate group when dpdk is enabled.- Merging upstream branch-2.13 [RH git: 4fbcdeb187] Commit list: 4d6846d4d8 ovsdb-idl.at: Wait all servers to join the cluster.- Merging upstream branch-2.13 [RH git: d5817ddabf] Commit list: ace73aa122 travis: Merge matrix entries. 9eedff62fe ovs-dpctl-top: Skip "eth()" element. 9903c42973 meta-flow: fix a typo in "MPLS Bottom of Stack Field" paragraph. 7f1b52086b python: Fixup python shebangs to python3. 5d1e1c161a test-conntrack: Fix conntrack benchmark by clearing conntrack metadata.- Merging upstream branch-2.13 [RH git: 2fe3a06bff] Commit list: 14c5912a7b travis: Test build of debian packages. 823bea7797 debian: Fix broken build after some man pages became generated from RST 895fc18393 debian: Add python3-sphinx to ovs build dependencies b0e8532d01 debian: Fix package dependencies 0427918d89 connmgr: Support changing openflow versions without restarting. d02892966c ovs-monitor-ipsec: Convert Python2 code to Python3. 8b3fcc65a0 netdev-offload-dpdk: Fix for broken ethernet matching HWOL for XL710NIC.- dpdk: Updated configs to 19.11.3 [RH git: 4e4acaf40a]- Merging 798524b5e3 version: 19.11.3 [RH git: 64c883ec66] (#1868709) Commit list: 798524b5e3 version: 19.11.3 1e5167d97f mem: mark pages as not accessed when freeing memory 4153891ad2 net/mlx5: fix packet length assert in MPRQ 8bec239cff buildtools: get static mlx dependencies for meson 3196e264f7 net/mlx5: fix build with separate glue lib for dlopen f9fde3f8a9 doc: fix reference in ABI guide d455442cac Revert "common/qat: fix GEN3 marketing name" d764b2cd1f test/crypto: fix statistics case b965554c17 eal/ppc: fix bool type after altivec include 9f090f7c97 net/hns3: replace memory barrier with data dependency order 05f23c1a24 net/hns3: add free threshold in Rx 22ae47b85b net/hns3: remove one IO barrier in Rx 7669265b7f net/hns3: reduce judgements of free Tx ring space 4341cd6f0c net/hns3: remove unnecessary assignments in Tx 008d6625ed net/mlx5: fix RSS key copy to TIR context 987ef3cd66 net/ena/base: fix testing for supported hash function 5072ef83e7 net/hns3: fix MSI-X interrupt during initialization 6fdabde3d9 net/hns3: fix Rx interrupt after reset eb23edc7c2 net/hns3: fix Tx interrupt when enabling Rx interrupt 3db4e6aabb net/hns3: fix RSS indirection table configuration 7cfc979bc9 net/hns3: support different numbers of Rx and Tx queues f16148907b net/hns3: support Rx interrupt a4f8b13c12 doc: add NASM installation steps 43e4f20638 doc: fix API index 106dddaf87 doc: prefer https when pointing to dpdk.org 130830b165 doc: fix typo in contributors guide e9aeb99c93 doc: fix typo in contributors guide 029c527ef4 examples/ip_pipeline: remove check of null response 1b2d70662c examples/kni: fix crash during MTU set d9da460ee3 net/ixgbe: check driver type in MACsec API 33189eecd0 net/i40e: fix flow director enabling a6c3bc7236 net/ice: fix setting L2TAG a46186d063 net/iavf: fix setting L2TAG b7a08ea7cd net/i40e: fix setting L2TAG 696a40bd94 net/sfc/base: fix manual filter delete in EF10 bea8e15b59 net/hinic: fix TSO c4d7293707 net/octeontx2: fix buffer size assignment 586faf5a4f net/bnxt: fix Rx ring producer index 1df20ac457 cryptodev: fix SHA-1 digest enum comment 86809db310 doc: fix build with doxygen 1.8.18 121f752786 examples/vm_power: drop Unix path limit redefinition ba5df75ed5 examples/vm_power: fix build with -fno-common 4d1fd43b3a net/mvpp2: fix build with gcc 10 1c2eaf9a98 vhost: fix zero-copy server mode 3ddb8f1d07 net/i40e: fix queue related exception handling 69516f9e3f net/ice: fix RSS for GTPU f956486556 net/i40e: fix wild pointer 3af3834731 examples/kni: fix MTU change to setup Tx queue 4b369799c7 fix same typo in multiple places c85044909a mempool/dpaa2: install missing header with meson fd2cc33835 kvargs: fix strcmp helper documentation 0b45ef6e39 doc: fix typos in ABI policy a7413810b9 pci: reject negative values in PCI id c4d58cd40c pci: accept 32-bit domain numbers 7b732e25df net/ice/base: update copyright 0491724e4a common/iavf: update copyright 75f2750b43 net/i40e/base: update copyright 3c6d1a0269 net/ixgbe/base: update copyright 7c36f2ea8b app/testpmd: fix DCB set 070a7b832d common/mlx5: fix netlink buffer allocation from stack 8fecf8ad1d net/mlx5: fix doorbell bitmap management offsets fc047c800b net/i40e: fix queue region in RSS flow 099b9e280c net/bnxt: fix storing MAC address twice ba15f6288e net/bnxt: fix using RSS config struct 2109b14aa9 net/bnxt: fix error log for command timeout bbcbd194d8 net/qede: fix port reconfiguration f9630f56a4 net/virtio: fix unexpected event after reconnect c651ee6999 vhost: handle mbuf allocation failure 1e2a3beb12 net/hinic: fix Tx mbuf length while copying b191e32975 net/hinic: fix queues resource free 733bc3f639 net/vmxnet3: handle bad host framing a15ee3e4a7 net/mlx5: fix VLAN flow action with wildcard VLAN item 4de7d8bc21 net/qede: fix link state configuration f98d3de913 net/ixgbe: fix statistics in flow control mode 22f701a5d4 common/mlx5: fix umem buffer alignment 348a2c5a9a doc: fix multicast filter feature announcement fc962b01c7 net/e1000: fix port hotplug for multi-process 2e33e6b144 doc: fix build issue in ABI guide da5586fcbe eal: fix C++17 compilation 2d2ba1fb00 doc: fix default symbol binding in ABI guide ef254d821e doc: fix LTO config option f40d9a3cbb build: disable gcc 10 zero-length-bounds warning b02c7838a0 crypto/caam_jr: fix IRQ functions return type 199d2c49a6 crypto/caam_jr: fix check of file descriptors 053c7ff9b5 app/eventdev: check Tx adapter service ID a23ef1c188 event/dsw: fix enqueue burst return value 32b5e80df1 crypto/qat: support plain SHA1..SHA512 hashes 507cda6e23 examples: remove extra new line after link duplex 83e7cafc27 app: remove extra new line after link duplex 40a2233e78 net/mlx5: fix Tx queue release debug log timing ead66a3fb9 net/mlx4: fix drop queue error handling 46cd8f27b1 net/mlx5: fix meter color register consideration 77ca941f9d net/mlx5: fix matching for UDP tunnels with Verbs 23e2c36fa1 net/mlx5: fix match on empty VLAN item in DV mode 425b3ccd2d net/ring: fix device pointer on allocation 39abdde91a net/ice: fix variable initialization 8ec53ab745 Revert "net/bnxt: fix number of TQM ring" ee4518a2de Revert "net/bnxt: fix TQM ring context memory size" 53038c4760 net/ixgbe: fix link state timing on fiber ports 61706cf3f2 bus/fslmc: fix size of qman fq descriptor eeaa4c42b3 net/dpaa2: fix congestion ID for multiple traffic classes a71e30e6b0 net/dpaa2: fix 10G port negotiation ef6d112d7d bus/fslmc: fix dereferencing null pointer f83c2ba6ea app/testpmd: fix memory failure handling for i40e DDP e428b51c18 net/bnxt: fix FW version query dafdf58799 net/virtio: fix crash when device reconnecting abe65fce86 net/bnxt: fix TQM ring context memory size 426e8b5253 net/bnxt: fix number of TQM ring 2befb2f470 net/tap: fix crash in flow destroy 82e2269d01 net/ice: fix crash in switch filter 2e1e12f6a8 net/ice: support mark only action for flow director f05c433b44 net/ixgbe: fix link status synchronization on BSD b639786c5f net/iavf: fix link speed 6c8f2aef2f net/bnxt: fix possible stack smashing 1a476dbabd net/netvsc: do not configure RSS if disabled f815b93c27 net/netvsc: do RSS across Rx queue only bb0fd68c99 bus/vmbus: fix comment spelling 4fe11771a2 net/netvsc: fix comment spelling 024a568578 app/testpmd: fix statistics after reset 556ae6bd83 net/failsafe: fix fd leak 47bd1f0ad2 ipsec: check SAD lookup error 7b842acdfa drivers/crypto: disable gcc 10 no-common errors b64337ffa3 examples/fips_validation: fix parsing of algorithms b168483089 crypto/kasumi: fix extern declaration 0665fb6e09 crypto/qat: fix cipher descriptor for ZUC and SNOW de299dec14 app/crypto-perf: fix display of sample test vector 9b91b991b6 crypto/ccp: fix fd leak on probe failure 6e0bdc2ba1 bbdev: fix doxygen comments abc111ae3d test/flow_classify: enable multi-sockets system a009c7667f event/octeontx2: fix build for O1 optimization 6fc3588de0 net/ena: fix build for O1 optimization c6f6f3d8e1 mempool/octeontx2: fix build for gcc O1 optimization 2cb0536157 examples/eventdev: fix crash on exit fd554a1f8f mem: fix overflow on allocation f0ac3aa2d2 examples/l2fwd-keepalive: fix mbuf pool size deb055888f remove references to private PCI probe function d8aeeb8cfb service: remove rte prefix from static functions 99303c675d service: fix identification of service running on other lcore c4bcf57075 service: fix race condition for MT unsafe service c4c9531648 mk: fix static linkage of mlx dependency d104eb2c03 common/octeontx: fix gcc 9.1 ABI break 9022ffe003 event/dsw: avoid reusing previously recorded events 85c1aae896 eventdev: fix probe and remove for secondary process a309eafc89 event/octeontx2: fix queue removal from Rx adapter 46b7943fda net/mlx5: fix gcc 10 enum-conversion warning 7e01ad84bf net/mlx5: fix VLAN ID check 4fdea813e5 net/mlx5: fix assert in modify converting 831152d0d9 net/mlx5: fix RSS enablement ea6b087b9b net/octeontx: fix dangling pointer on init failure ee263a1371 net/hns3: fix return value when clearing statistics 827eb6ca97 net/hns3: fix VLAN PVID when configuring device 6686131671 net/softnic: fix resource leak for pipeline 60dfeffc23 net/softnic: fix memory leak for thread e399ff6427 net/sfc/base: fix build when EVB is enabled 5862e3fe62 net/sfc/base: use simpler EF10 family run-time checks 68409f9a6c net/sfc/base: use simpler EF10 family conditional check ecd69bfb76 net/mlx5: fix actions validation on root table 58ca518c24 net/mlx5: fix assert in dynamic metadata handling a6ae060e39 vhost: prevent zero-copy with incompatible client mode 5099fb8d59 vhost: fix peer close check fd7ba64cb4 net/mlx5: fix assert in doorbell lookup d6db84d0b1 net/i40e: fix flush of flow director filter a42e979217 doc: add i40e limitation for flow director 74095b0ca6 net/i40e: fix flow director for ARP packets fe42bb4b74 net/bnxt: fix max ring count a131ab7d0f eal/ppc: fix build with gcc 9.3 2acc78a0a1 kvargs: fix invalid token parsing on FreeBSD df17bcb43b eal/x86: ignore gcc 10 stringop-overflow warnings 274dec7548 examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning ea0fb3e5a5 net/avp: fix gcc 10 maybe-uninitialized warning daa2cd115f eal: fix typo in endian conversion macros 9ef2246962 doc: fix log level example in Linux guide aecc7782a6 app/testpmd: add parsing for QinQ VLAN headers 26467e800b net/bnxt: fix VNIC Rx queue count on VNIC free 61c8f03fd4 net/bnxt: fix memory leak during queue restart e09bf2672d bus/pci: fix UIO resource access from secondary process 35348ca71e usertools: check for pci.ids in /usr/share/misc a8e6e27b00 app: fix usage help of options separated by dashes 0d7e4fbf2d fix various typos found by Lintian ccc676944f timer: protect initialization with lock 6be8fba616 eal: fix comments spelling 32688549a0 lpm6: fix comments spelling eee7a4f089 lpm6: fix size of tbl8 group 8426cebb49 mempool: remove inline functions from export list 632fec749f security: fix crash at accessing non-implemented ops 0407d17dae net/bnxt: fix VLAN add when port is stopped a62880c4d4 net/bnxt: fix port start failure handling 6cc939165f net/bnxt: use true/false for bool types 886085974e net/bnxt: fix HWRM command during FW reset c1b7cb6792 net/iavf: fix stats query error code ca2ecc15f2 net/ixgbe: fix link status after port reset 9a673fc544 net/ixgbe: fix resource leak after thread exits normally 4c84ef15a7 net/mlx5: improve logging of MPRQ selection f0a019c950 net/mlx5: set dynamic flow metadata in Rx queues bf10f18c64 net/mlx5: fix header modify action validation da5c4ff51b net/mlx5: fix crash when releasing meter table a9018074d1 common/mlx5: fix build with rdma-core 21 461a2ba67a net/i40e: fix flow director initialisation ac051be918 net/tap: fix queues fd check before close 4c587687f7 net/virtio-user: fix devargs parsing 74a51ef091 vhost: fix shadowed descriptors not flushed 2f48b05305 vhost: fix shadow update d28299df0a net/tap: fix unexpected link handler 8e90f78a02 net/tap: fix fd leak on creation failure 2523e877dc net/tap: fix file close on remove 2b74a885aa net/tap: fix check for mbuf number of segment 2fe4af64f9 net/tap: fix mbuf and mem leak during queue release 908866e6fc net/tap: fix mbuf double free when writev fails ab9701159d net/mlx5: fix validation of push VLAN without full mask d2f4d1ae3d net/mlx5: fix push VLAN action to use item info 1603ade39c net/enic: fix flow action reordering d3c99e41b1 net/mlx5: fix jump table leak 652a21028a net/mlx5: fix meter suffix table leak afca8bc661 net/mlx5: add multi-segment packets in MPRQ mode bbdd1a9c79 net/mlx5: enable MPRQ multi-stride operations a1b3dc84bc net/mlx5: add device parameter for MPRQ stride size 31d1b373d5 net/i40e: relax barrier in Tx for NEON 85897fd567 net/octeontx2: disable unnecessary error interrupts 6075a1ee65 net/octeontx2: enable error and RAS interrupt in configure fd2f1973f4 net/mlx5: use open/read/close for ib stats query 624db5a0ab net/mlx4: fix build with -fno-common b3e01cd3e4 common/mlx5: fix build with -fno-common be0d36b087 net/hns3: fix VLAN filter when setting promisucous mode c6f7d75949 net/hns3: fix default VLAN filter configuration for PF 0bd1d3b49c net/hns3: fix RSS key length c4e9d7e10c net/hns3: add RSS hash offload to capabilities 50daf2acc9 net/hns3: clear residual flow rules on init 1ff55a18be vhost: make IOTLB cache name unique among processes c0c67a2dac vhost: remove unused variable 871773f3ac net/virtio: fix outdated comment 4f5f084c7f net/vhost: fix potential memory leak on close b35cbd50b9 vhost: fix packed ring zero-copy e624761604 vhost/crypto: add missing user protocol flag 11d9847039 net/hinic/base: fix PF firmware hot-active problem f662af80b1 net/null: remove redundant check bfc5290bc8 net/null: fix secondary burst function selection 670758fe8b net/pfe: fix double free of MAC address 175f707d92 app/testpmd: fix PPPoE flow command 03527bd393 net/mlx5: fix counter container usage 2c0c0e4820 net/ena: set IO ring size to valid value 59acd7de4c net/ena/base: fix indentation of multiple defines 3c4bf79460 net/ena/base: fix indentation in CQ polling 3c6ec30057 net/ena/base: fix documentation of functions c6730185e0 net/ena/base: prevent allocation of zero sized memory d5cfa58c05 net/ena/base: make allocation macros thread-safe af84a4f278 net/ice/base: remove unused code in switch rule 5cfef294de net/ice: fix RSS advanced rule 46825a9e59 net/nfp: fix dangling pointer on probe failure d027444df5 net/nfp: fix log format specifiers 61347b53bb examples/vmdq: fix RSS configuration 267e255ef4 ethdev: fix build when vtune profiling is on c6f822199a net/memif: fix resource leak 4f880a2089 net/netvsc: avoid possible live lock 9f54fa3e2b net/netvsc: handle Tx completions based on burst size 62ec946eec net/netvsc: remove process event optimization 81441b4e4f net/netvsc: fix memory free on device close 42916635b3 net/netvsc: split send buffers from Tx descriptors 244193073d net/netvsc: handle Rx packets during multi-channel setup cc1f006253 net/netvsc: propagate descriptor limits from VF 39e690ab3b net/ice: fix input set of VLAN item 175dc210ad net/ice: add action number check for switch 1b23b24565 net/ice: change default tunnel type 8e8fdd68f7 net/octeontx2: fix device configuration sequence 272fcab063 net/octeontx: fix meson build for disabled drivers d50174f38a net/tap: remove unused assert f50974db04 net/ice/base: check memory pointer before copying 3e51abed66 net/ice/base: fix binary order for GTPU filter 7ba59c1fd4 net/mlx5: fix imissed counter overflow e7c5383a09 net/thunderx: use dynamic log type 3e0d3b1204 net/dpaa: use dynamic log type 516f5f9136 net/bnxt: do not use PMD log type 45284045c5 net/pfe: do not use PMD log type 64ca12ff65 net/tap: do not use PMD log type 0bf29e36c3 net/virtio: do not use PMD log type 80e04ea6ae net/mvneta: do not use PMD log type 1b70d8acd0 examples/vmdq: fix output of pools/queues d9a7bf74e1 net/mlx5: fix zero value validation for metadata 5e3859176e net/mlx5: fix call to modify action without init item 24f6ab6d31 net/mlx5: update VLAN and encap actions validation 2491443dce net/mlx5: fix metadata for compressed Rx CQEs c469619b7a net/mlx5: fix validation of VXLAN/VXLAN-GPE specs 4493efb719 net/ixgbe: fix link status inconsistencies 117ecae920 net/ice/base: fix MAC write command d57cbe48b2 net/ice/base: minor fixes b97902938a net/ice/base: read PSM clock frequency from register d1cd22be97 net/ice/base: fix uninitialized stack variables 8081044a6f net/hns3: fix return value of setting VLAN offload 2717e6ab25 net/hns3: fix mailbox opcode data type 70b22c9ed2 net/hns3: fix configuring RSS hash when rules are flushed 7953227c19 net/ipn3ke: use control thread to check link status d57282791c net/hinic/base: fix port start during FW hot update 4710da6ef5 net/hinic: fix LRO 7caa43cc22 net/hns3: fix status after repeated resets 3f9c9bdcb5 net/hns3: fix configuring illegal VLAN PVID b6c05b0781 net/hns3: fix crash when flushing RSS flow rules with FLR 1cd4ab6cf4 net/hns3: fix default error code of command interface e9248b23b3 net/hns3: fix packets offload features flags in Rx ebad6ac59a test: remove redundant macro b54822ff2f security: fix session counter 477f8e08d3 security: fix return types in documentation 4fa404e280 security: fix verification of parameters 48bb740ce1 crypto/openssl: fix out-of-place encryption 8d5349e781 test/crypto: fix flag check 9aa6caeb5a drivers/crypto: fix log type variables for -fno-common 46a37b23ba cryptodev: add asymmetric session-less feature name efd0dea9c8 drivers: fix log type variables for -fno-common 2ef9870118 vfio: fix use after free with multiprocess 5732151922 vfio: fix race condition with sysfs 952892aa67 eal: fix PRNG init with HPET enabled 8eefb8787a doc: fix matrix CSS for recent sphinx da57576513 log: fix level picked with globbing on type register bd5e2ef80a ipsec: fix build dependency on hash lib c4d52beff8 doc: fix sphinx compatibility b0843e5671 event/dsw: remove unnecessary read barrier 09a714399a event/dsw: remove redundant control ring poll b9b72b8815 crypto/nitrox: fix oversized device name b878b432b7 crypto/nitrox: fix CSR register address generation 3b841d16dc baseband/turbo_sw: fix exposed LLR decimals assumption 2193048d87 test/ipsec: fix crash in session destroy 152fadd540 common/qat: fix GEN3 marketing name 196993b705 cryptodev: fix missing device id range checking ca31f0aee2 fib: fix headers for C++ support 1c51807a35 ci: fix telemetry dependency in Travis 39adba3b55 bus/pci: fix devargs on probing again c285902e7b kvargs: fix buffer overflow when parsing list bbf0c2d983 test/kvargs: fix invalid cases check bcdd4476cd test/kvargs: fix to consider empty elements as valid 9aebba7e3d mem: preallocate VA space in no-huge mode 46cd0c98bb eal/freebsd: fix queuing duplicate alarm callbacks 7ad8cd364e test: skip some subtests in no-huge mode 796af72c2d test: load drivers when required 7c8ab0ae70 devtools: fix symbol map change check 4710904861 contigmem: cleanup properly when load fails 6e0c764098 net/mlx5: reduce Tx completion index memory loads 307876a747 net/mlx5: fix CVLAN tag set in IP item translation 7ad364893c net/hinic: allocate IO memory with socket id 75457cff3f net/mlx5: fix zero metadata action 8ea2ea8fe4 net/sfc/base: handle manual and auto filter clashes in EF10 c6ae74f068 net/sfc/base: refactor filter lookup loop in EF10 9e496b76ab net/sfc/base: reject automatic filter creation by users 0e4497208a net/sfc/base: reduce filter priorities to implemented only c239286b98 net/sfc: set priority of created filters to manual 8771074d95 net/sfc: fix promiscuous and allmulticast toggles errors 6c1634ec93 ethdev: fix spelling 7aa0060a2a net/hns3: fix promiscuous mode for PF 32f349234b net/hinic: fix repeating cable log and length check d16cceef30 net/hinic: fix snprintf length of cable info d40bcdfb59 net/memif: fix init when already connected ba2322fb9a build: support MinGW-w64 with Meson 5cdff30419 net/mlx5: fix mask used for IPv6 item validation 7ce629f7f2 net/ice: remove bulk alloc option a42ef6f777 net/sfc: fix Rx queue start failure path 251cb7e722 net/sfc: fix initialization error path 5f0378bb2e net/vmxnet3: fix RSS setting on v4 556cdccab2 net/sfc: fix reported promiscuous/multicast mode 194ca60cde doc: fix number of failsafe sub-devices adf15e37f2 net/ice: remove unnecessary variable 2847184082 net/enetc: fix Rx lock-up aec781c6b1 net/ice: fix hash flow crash 2ce2096092 net/i40e: fix X722 performance 64a38788d1 net/mlx5: fix VLAN PCP item calculation 3e387d591e net/i40e: relax barrier in Tx 2550666028 net/octeontx2: fix link information for loopback port c2e90f337d build: fix linker warnings with clang on Windows 3262e4181c pci: fix build on ppc 5a99c0d994 pci: fix build on FreeBSD 027e022a18 pci: remove unneeded includes in public header file 9ca664d8be telemetry: fix port stats retrieval c20055f471 service: fix crash on exit d0e456e9b1 mem: mark pages as not accessed when reserving VA bcf4069ff2 eal/arm64: fix precise TSC 40a7c85881 eal: fix log message print for regex 2a46dc5951 drivers/crypto: fix build with make 4.3 3425ff8896 drivers: add crypto as dependency for event drivers 25fe1c8b05 examples/qos_sched: fix build with gcc 10 4de659fdc0 examples/eventdev: fix build with gcc 10 84119ecce2 examples/vhost_blk: fix build with gcc 10 5fb297ba3d app/pipeline: fix build with gcc 10 ef348e22a0 test: fix build with gcc 10 295ba7d0c3 crypto/octeontx2: fix build with gcc 10 Resolves: #1868709- Merging upstream branch-2.13 [RH git: 5dddb2d4f8] Commit list: 0047ca3a02 acinclude: Fix build with kernels with prandom* moved to prandom.h. 8a72db60ad faq: Mention Linux kernel versions supported by 2.13.x. 114ff63e3d Documentation: Fix kernel support matrix- Merging upstream branch-2.13 [RH git: bb436c2999] Commit list: 184a58e8b8 ovsdb-server: Replace in-memory DB contents at raft install_snapshot. 727bb3440d Prepare for 2.13.2. 714caaf571 Set release date for 2.13.1. ac51dcac87 odp-util: Clear padding in the nd_extension. eeef00da2f datapath-windows: Update flow key in SET action 37606fb5ca odp-util: Fix clearing match mask if set action is partially unnecessary. 5ad46c9a4d debian: Fixed openvswitch-test package dependency. b3a9dc6e5e dpctl: Fix memory leak in dpctl_dump_flows() cce57c5e0e ovs-router: Fix flushing of local routes. 8d0b409fcc acinclude: Remove libmnl for MLX5 PMD. 217ac490ac dpif-netdev: Avoid deadlock with offloading during PMD thread deletion.- ovsdb-server: Replace in-memory DB contents at raft install_snapshot. [RH git: 9f646ec051] (#1867185) Every time a follower has to install a snapshot received from the leader, it should also replace the data in memory. Right now this only happens when snapshots are installed that also change the schema. This can lead to inconsistent DB data on follower nodes and the snapshot may fail to get applied. Fixes: bda1f6b60588 ("ovsdb-server: Don't disconnect clients after raft install_snapshot.") Acked-by: Han Zhou Signed-off-by: Dumitru Ceara Signed-off-by: Ilya Maximets (cherry picked from commit 184a58e8b892231b44479b612bdfe2529bb04363) Resolves: #1867185- redhat: Add support to custom RPM releases. [RH git: 7eb5b56344] This commit allows the developer to specify a custom release string to be appended to package NVR. If the custom release is 'bz123456', the final release would look like -Y.bz123456.X where Y is the number of changes until the branch was created, and X is the number of changes after that.- pkgtool: Use OVS static version in package NVR. [RH git: a0b572aaa1] The package NVR must coincide with the tarball version.- odp-util: Fix clearing match mask if set action is partially unnecessary. [RH git: 6d85fea8b4] (#1862153) While committing set() actions, commit() could wildcard all the fields that are same in match key and in the set action. This leads to situation where mask after commit could actually contain less bits than it was before. And if set action was partially committed, all the fields that were the same will be cleared out from the matching key resulting in the incorrect (too wide) flow. For example, for the flow that matches on both src and dst mac addresses, if the dst mac is the same and only src should be changed by the set() action, destination address will be wildcarded in the match key and will never be matched, i.e. flows with any destination mac will match, which is not correct. Setting OF rule: in_port=1,dl_src=50:54:00:00:00:09 actions=mod_dl_dst(50:54:00:00:00:0a),output(2) Sending following packets on port 1: 1. eth(src=50:54:00:00:00:09,dst=50:54:00:00:00:0a),eth_type(0x0800) 2. eth(src=50:54:00:00:00:09,dst=50:54:00:00:00:0c),eth_type(0x0800) 3. eth(src=50:54:00:00:00:0b,dst=50:54:00:00:00:0c),eth_type(0x0800) Resulted datapath flows: eth(dst=50:54:00:00:00:0c),<...>, actions:set(eth(dst=50:54:00:00:00:0a)),2 eth(src=50:54:00:00:00:09,dst=50:54:00:00:00:0a),<...>, actions:2 The first flow doesn't have any match on source MAC address and the third packet successfully matched on it while it must be dropped. Fix that by updating the match mask with only the new bits set by commit(), but keeping those that were cleared (OR operation). With fix applied, resulted correct flows are: eth(src=50:54:00:00:00:09,dst=50:54:00:00:00:0a),<...>, actions:2 eth(src=50:54:00:00:00:09,dst=50:54:00:00:00:0c),<...>, actions:set(eth(dst=50:54:00:00:00:0a)),2 eth(src=50:54:00:00:00:0b),<...>, actions:drop The code before commit dbf4a92800d0 was not able to reduce the mask, it was only possible to expand it to exact match, so it was OK to update original matching mask with the new value in all cases. Fixes: dbf4a92800d0 ("odp-util: Do not rewrite fields with the same values as matched") Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=1854376 Acked-by: Eli Britstein Tested-by: Adrián Moreno Signed-off-by: Ilya Maximets (cherry picked from commit 37606fb5ca76aef478a51d407aaa06caf7fb9376) Resolves: #1862153- redhat: Clean old changelog entries. [RH git: 6cf8d909e8] Fix the changelog shift caused by use of static references and remove the old entries not relevant to the new tarball. Fixes: 90ac9bd6aa ("redhat: Use static references.")- redhat: Update the documentation. [RH git: c9571d2dad]- redhat: Add merge script. [RH git: 752c59ba74] This script helps to provide a standard commit log.- redhat: Use static references. [RH git: f1025c1515] Add static references because there could be patches after SHA_REF not available in newer tarballs. Therefore, it is only possible to update the references if all previous patches are applied in the new references.- Update DPDK configs to v19.11.2. [RH git: 98e6e9823b]- Merge DPDK tag 'v19.11.2' into fast-datapath-rhel-8 [RH git: 755e86c61a]- Merging upstream branch-2.13 to fast-datapath-rhel-8 [RH git: 735b3f94c2] Commit list: bef407fa7f dpdk: Use DPDK 19.11.2 release. 53e0568753 dpif-netdev: Return error code when no mark available. 99a4564348 dpif-netdev: Add check mark to avoid ovs-vswitchd crash. 22c6148a9a netdev-offload-dpdk: Fix Ethernet matching for type only. 9747d5649b dpif-netdev: Don't use zero flow mark. 39cc59dc91 netdev-linux: Fix broken build on Ubuntu 14.04 ac92cdbc4d odp-execute: Fix length checking while executing check_pkt_len action. 08ad9f6483 odp-util.c: Fix dp_hash execution with slowpath actions. 5351651d37 ctags: Include new annotations to ctags ignore list. d5484cf697 lib/tc: only update the stats for non-empty counter 998475d79f datapath-windows, conntrack: Fix conntrack new state 6dbbf0771e bridge: Fix null dereference on ct_timeout_policy record 3e5991a75e rhel: Fix syntax error when matching version. 59cedd3b35 rhel: Support RHEL 7.8 kernel module rpm build. 78ac2896d1 dpif-netlink: Fix Windows incompatibility when setting new feature 51e9479da6 ovsdb-idl: Avoid inconsistent IDL state with OVSDB_MONITOR_V3. 8ba057d345 ovs-rcu: Avoid flushing callbacks during postponing. b24ff56441 raft: Avoid sending equal snapshots. a33880c6e9 ovsdb: Fix timeout type for wait operation. 7077328846 classifier: Prevent tries vs n_tries race leading to NULL dereference. a29fe0d482 ovsdb-server: Fix schema leak while reading db. 1bb5be5138 compat: Backport ipv6_stub change 71acf83c33 netdev-offload-tc: Re-fetch block ID after probing. 23e3ae7158 netdev-linux: Update LAG in all cases. 85fe081852 ofproto: Fix statistics of removed flow. 6bd9ddc829 metaflow: Fix maskable conntrack orig tuple fields 1600e0040c raft: Disable RAFT jsonrpc inactivity probe. 168beb87ca raft: Fix leak of the incomplete command. da9dc791de compat: Fix ipv6_dst_lookup build error a09e22dbdd system-traffic: Check frozen state handling with TLV map change b267889057 tun_metadata: Fix coredump caused by use-after-free bug d323c5398f cirrus: Force pkg update on FreeBSD. 62cede43ee Revert "ovsdb-idl: Avoid sending redundant conditional monitoring updates" b52877a483 dpif-netdev: Force port reconfiguration to change dynamic_txqs. dc389fd319 netdev-offload-tc: Flush rules on ingress block when init tc flow api e2f6393592 conntrack: Reset ct_state when entering a new zone. 314bd235c1 ofp-actions: Fix memory leak. 1f12a91cf9 ofproto-dpif-xlate: Fix recirculation when in_port is OFPP_CONTROLLER. 8315f3cc98 conntrack: Fix NULL pointer dereference. 89c85b997c dpif-netlink: avoid netlink modify flow put op failed after tc modify flow put op failed. 49db27d213 dpif-netdev: Enter quiescent state after each offloading operation. bf2dcbfe5c pvector: Use acquire-release semantics for size. 443f8e2575 tc: Fix nat port range when offloading ct action d69d4c0537 travis: Disable sindex build in sparse. 25a7e5547f raft: Fix the problem of stuck in candidate role forever. 877618fc83 raft: Fix next_index in install_snapshot reply handling. 3ae90e1899 raft: Avoid busy loop during leader election. adc64ab057 raft: Fix raft_is_connected() when there is no leader yet. f0c8b44c58 ovsdb-server: Don't disconnect clients after raft install_snapshot. 78c8011f58 raft-rpc: Fix message format. f0de491257 ovs-dpctl-top: python3 compatibility 00dd014519 dpif-netdev.at: Fix partial offloading test cases failure. 6f86b10549 userspace TSO: SCTP checksum offload optional. b837d1fdc4 userspace TSO: Include UDP checksum offload. ad550ebc36 netdev-dpdk: vhost: disable unsupported offload features. 3f83220418 docs: Update conntrack established state description dd0293c8b5 conntrack: Fix TCP conntrack state 0aefc0eb8e docs: Update DPDK version table d33cc044f3 Prepare for 2.13.1.- redhat: Rename OVSCI job name. [RH git: a61f1d1095] The OVSCI job's name has been renamed to follow a standard.- redhat: pkgtool: use diff instead of format-patch [RH git: da2129ac82]- bus/pci: fix VF memory access [RH git: 2b22bcd9ad] (#1851169) To fix CVE-2020-12888, the linux vfio-pci module will invalidate mmaps and block MMIO access on disabled memory, it will send a SIGBUS to the application: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=abafbc551fdd When the application opens the vfio PCI device, the vfio-pci module will enable the bus memory space through PCI read/write access. According to the PCIe specification, the 'Memory Space Enable' is always zero for VF: Table 9-13 Command Register Changes Bit Location | PF and VF Register Differences | PF | VF | From Base | Attributes | Attributes -------------+--------------------------------+------------+----------- | Memory Space Enable - Does not | | | apply to VFs. Must be hardwired| Base | 0b 1 | to 0b for VFs. VF Memory Space | | | is controlled by the VF MSE bit| | | in the VF Control register. | | -------------+--------------------------------+------------+----------- Afterwards the vfio-pci will initialize its own virtual PCI config space data ('vconfig') by reading the VF's physical PCI config space, then the 'Memory Space Enable' bit in vconfig will always be 0b value. This will make the vfio-pci treat the BAR memory space as disabled, and the SIGBUS will be triggered if access these BARs. By investigation, the VF PCI device *passthrough* into the Guest OS by QEMU has the 'Memory Space Enable' with 1b value. That's because every PCI driver will start to enable the memory space, and this action will be hooked by vfio-pci virtual PCI read/write to set the 'Memory Space Enable' in vconfig space to 1b. So VF runs in guest OS has 'Mem+', but VF runs in host OS has 'Mem-'. Align with PCI working mode in Guest/QEMU/Host, in DPDK, enable the PCI bus memory space explicitly to avoid access on disabled memory. Fixes: 33604c31354a ("vfio: refactor PCI BAR mapping") Cc: stable@dpdk.org Signed-off-by: Haiyue Wang Acked-by: Anatoly Burakov Tested-by: Harman Kalra Tested-by: David Marchand Tested-by: Thierry Martin (cherry picked from commit 54f3fb127d9c265a5724d193e5c7c6db29fb4150) Resolves: #1851169- raft: Avoid sending equal snapshots. [RH git: 3168eba559] (#1834838) [ upstream commit 8c2c503bdb0da1ce6044a53d462f905fd4f8acf5 ] Snapshots are huge. In some cases we could receive several outdated append replies from the remote server. This could happen in high scale cases if the remote server is overloaded and not able to process all the raft requests in time. As an action to each outdated append reply we're sending full database snapshot. While remote server is already overloaded those snapshots will stuck in jsonrpc backlog for a long time making it grow up to few GB. Since remote server wasn't able to timely process incoming messages it will likely not able to process snapshots leading to the same situation with low chances to recover. Remote server will likely stuck in 'candidate' state, other servers will grow their memory consumption due to growing jsonrpc backlogs: jsonrpc|INFO|excessive sending backlog, jsonrpc: ssl:192.16.0.3:6644, num of msgs: 3795, backlog: 8838994624. This patch is trying to avoid that situation by avoiding sending of equal snapshot install requests. This helps maintain reasonable memory consumption and allows the cluster to recover on a larger scale. Acked-by: Han Zhou Signed-off-by: Ilya Maximets Related: #1834838 Signed-off-by: Ilya Maximets - ovsdb-server: Fix schema leak while reading db. [RH git: 92a1e56c8a] (#1834838) [ upstream commit 16e3a80cf646f6c53d22ef98599d5aecb8310414 ] parse_txn() function doesn't always take ownership of the 'schema' passed. So, if the schema of the clustered db has same version as the one that already in use, parse_txn() will not use it, resulting with a memory leak: 7,827 (56 direct, 7,771 indirect) bytes in 1 blocks are definitely lost at 0x483BB1A: calloc (vg_replace_malloc.c:762) by 0x44AD02: xcalloc (util.c:121) by 0x40E70E: ovsdb_schema_create (ovsdb.c:41) by 0x40EA6D: ovsdb_schema_from_json (ovsdb.c:217) by 0x415EDD: ovsdb_storage_read (storage.c:280) by 0x408968: read_db (ovsdb-server.c:607) by 0x40733D: main_loop (ovsdb-server.c:227) by 0x40733D: main (ovsdb-server.c:469) While we could put ovsdb_schema_destroy() in a few places inside 'parse_txn()', from the users' point of view it seems better to have a constant argument and just clone the 'schema' if needed. The caller will be responsible for destroying the 'schema' it owns. Fixes: 1b1d2e6daa56 ("ovsdb: Introduce experimental support for clustered databases.") Acked-by: Han Zhou Signed-off-by: Ilya Maximets Related: #1834838 Signed-off-by: Ilya Maximets - ovsdb: Add raft memory usage to memory report. [RH git: fb32a78921] (#1834838) [ upstream commit 3423cd97f88fe6a8de8b649d79fe6ac83bce94d1 ] Memory reports could be found in logs or by calling 'memory/show' appctl command. For ovsdb-server it includes information about db cells, monitor connections with their backlog size, etc. But it doesn't contain any information about memory consumed by raft. Backlogs of raft connections could be insanely large because of snapshot installation requests that simply contains the whole database. In not that healthy clusters where one of ovsdb servers is not able to timely handle all the incoming raft traffic, backlog on a sender's side could cause significant memory consumption issues. Adding new 'raft-connections' and 'raft-backlog' counters to the memory report to better track such conditions. Acked-by: Han Zhou Signed-off-by: Ilya Maximets Related: #1834838 Signed-off-by: Ilya Maximets - netdev-offload-tc: Re-fetch block ID after probing. [RH git: d14e39f81b] It's possible that block_id could changes after the probe for block support. Therefore, fetch the block_id again after the probe. Fixes: edc2055a2bf7 ("netdev-offload-tc: Flush rules on ingress block when init tc flow api") Cc: Dmytro Linkin Acked-by: Roi Dayan Co-authored-by: Marcelo Leitner Signed-off-by: Marcelo Leitner Signed-off-by: Aaron Conole Signed-off-by: Ilya Maximets - netdev-linux: Update LAG in all cases. [RH git: 8b15547574] In some cases, when processing a netlink change event, it's possible for an alternate part of OvS (like the IPv6 endpoint processing) to hold an active netdev interface. This creates a race-condition, where sometimes the OvS change processing will take the normal path. This doesn't work because the netdev device object won't actually be enslaved to the ovs-system (for instance, a linux bond) and ingress qdisc entries will be missing. To address this, we update the LAG information in ALL cases where LAG information could come in. Fixes: d22f8927c3c9 ("netdev-linux: monitor and offload LAG slaves to TC") Cc: Marcelo Leitner Cc: John Hurley Acked-by: Roi Dayan Signed-off-by: Aaron Conole Signed-off-by: Ilya Maximets - vhost: fix potential fd leak [RH git: a9e6e35814] Vhost will create temporary file when receiving VHOST_USER_GET_INFLIGHT_FD message. Malicious guest can send endless this message to drain out the resource of host. When receiving VHOST_USER_GET_INFLIGHT_FD message repeatedly, closing the file created during the last handling of this message. Fixes: d87f1a1cb7b666550 ("vhost: support inflight info sharing") Cc: stable@dpdk.org This issue has been assigned CVE-2020-10726 Signed-off-by: Xuan Ding Signed-off-by: Xiaolong Ye Reviewed-by: Maxime Coquelin - vhost: fix potential memory space leak [RH git: b39bac1377] A malicious container which has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages which may cause leaking resources until resulting a DOS. Fix it by unmapping the dev->inflight_info->addr before assigning new mapped addr to it. Fixes: d87f1a1cb7b6 ("vhost: support inflight info sharing") Cc: stable@dpdk.org This issue has been assigned CVE-2020-10726 Signed-off-by: Xiaolong Ye Reviewed-by: Maxime Coquelin - vhost: fix translated address not checked [RH git: 7da9061642] Malicious guest can construct desc with invalid address and zero buffer length. That will request vhost to check both translated address and translated data length. This patch will add missed address check. Fixes: 75ed51697820 ("vhost: add packed ring batch dequeue") Fixes: ef861692c398 ("vhost: add packed ring batch enqueue") Cc: stable@dpdk.org This issue has been assigned CVE-2020-10725 Signed-off-by: Marvin Liu Reviewed-by: Maxime Coquelin - vhost: fix vring index check [RH git: 7c4cfd12e3] vhost_user_check_and_alloc_queue_pair() is used to extract a vring index from a payload. This function validates the index and is called early on in when performing message handling. Most message handlers depend on it correctly validating the vring index. Depending on the message type the vring index is in different parts of the payload. The function contains a switch/case for each type and copies the index. This is stored in a uint16. This index is then validated. Depending on the message, the source index is an unsigned int. If integer truncation occurs (uint->uint16) the top 16 bits of the index are never validated. When they are used later on (e.g. in vhost_user_set_vring_num() or vhost_user_set_vring_addr()) it can lead to out of bound indexing. The out of bound indexed data gets written to, and hence this can cause memory corruption. This patch fixes this vulnerability by declaring vring index as an unsigned int in vhost_user_check_and_alloc_queue_pair(). Fixes: 160cbc815b41 ("vhost: remove a hack on queue allocation") Cc: stable@dpdk.org This issue has been assigned CVE-2020-10723 Reported-by: Ilja Van Sprundel Signed-off-by: Maxime Coquelin Reviewed-by: Xiaolong Ye Reviewed-by: Ilja Van Sprundel - vhost: check log mmap offset and size overflow [RH git: 517d8488dc] vhost_user_set_log_base() is a message handler that is called to handle the VHOST_USER_SET_LOG_BASE message. Its payload contains a 64 bit size and offset. Both are added up and used as a size when calling mmap(). There is no integer overflow check. If an integer overflow occurs a smaller memory map would be created than requested. Since the returned mapping is mapped as writable and used for logging, a memory corruption could occur. Fixes: fbc4d248b198 ("vhost: fix offset while mmaping log base address") Cc: stable@dpdk.org This issue has been assigned CVE-2020-10722 Reported-by: Ilja Van Sprundel Signed-off-by: Maxime Coquelin Reviewed-by: Xiaolong Ye Reviewed-by: Ilja Van Sprundel - raft: Disable RAFT jsonrpc inactivity probe. [RH git: 3d9b529afb] (#1836308) [ upstream commit 1600e0040caded7eaa9b1f41926f9619d8e0ec8d ] With the scale test of 640 nodes k8s cluster, raft DB nodes' jsonrpc session got closed due to the timeout of default 5 seconds probe. It will cause disturbance of the raft cluster. Since we already have the heartbeat for RAFT, just disable the probe between the servers to avoid the unnecessary jsonrpc inactivity probe. Acked-by: Han Zhou Signed-off-by: Zhen Wang Signed-off-by: Ilya Maximets Resolves: #1836308 Signed-off-by: Dumitru Ceara - raft: Fix leak of the incomplete command. [RH git: 5c38ccd52f] (#1836307) [ upstream commit 168beb87ca63056e8896b09a60031565b7b60728 ] Function raft_command_initiate() returns correctly referenced command instance. 'n_ref' equals 1 for complete commands and 2 for incomplete commands because one more reference is in raft->commands list. raft_handle_execute_command_request__() leaks the reference by not returning pointer anywhere and not unreferencing incomplete commands. 792 bytes in 11 blocks are definitely lost in loss record 258 of 262 at 0x483BB1A: calloc (vg_replace_malloc.c:762) by 0x44BA32: xcalloc (util.c:121) by 0x422E5F: raft_command_create_incomplete (raft.c:2038) by 0x422E5F: raft_command_initiate (raft.c:2061) by 0x428651: raft_handle_execute_command_request__ (raft.c:4161) by 0x428651: raft_handle_execute_command_request (raft.c:4177) by 0x428651: raft_handle_rpc (raft.c:4230) by 0x428651: raft_conn_run (raft.c:1445) by 0x428DEA: raft_run (raft.c:1803) by 0x407392: main_loop (ovsdb-server.c:226) by 0x407392: main (ovsdb-server.c:469) Fixes: 1b1d2e6daa56 ("ovsdb: Introduce experimental support for clustered databases.") Signed-off-by: Ilya Maximets Acked-by: Han Zhou Signed-off-by: William Tu Resolves: #1836307 Signed-off-by: Dumitru Ceara - raft: Fix the problem of stuck in candidate role forever. [RH git: 9c76350e27] (#1836305) [ upstream commit 25a7e5547f1e107db0f032ad269f447c57401531 ] Sometimes a server can stay in candidate role forever, even if the server already see the new leader and handles append-requests normally. However, because of the wrong role, it appears as disconnected from cluster and so the clients are disconnected. This problem happens when 2 servers become candidates in the same term, and one of them is elected as leader in that term. It can be reproduced by the test cases added in this patch. The root cause is that the current implementation only changes role to follower when a bigger term is observed (in raft_receive_term__()). According to the RAFT paper, if another candidate becomes leader with the same term, the candidate should change to follower. This patch fixes it by changing the role to follower when leader is being updated in raft_update_leader(). Signed-off-by: Han Zhou Signed-off-by: Ben Pfaff Resolves: #1836305 Signed-off-by: Dumitru Ceara - raft: Fix next_index in install_snapshot reply handling. [RH git: cc3d026992] (#1836305) [ upstream commit 877618fc833273d1e29e012b5e925d51cba80ff5 ] When a leader handles install_snapshot reply, the next_index for the follower should be log_start instead of log_end, because there can be new entries added in leader's log after initiating the install_snapshot procedure. Also, it should send all the accumulated entries to follower in the following append-request message, instead of sending 0 entries, to speed up the converge. Without this fix, there is no functional problem, but it takes uncessary extra rounds of append-requests responsed with "inconsistency" by follower, although finally will be converged. Signed-off-by: Han Zhou Signed-off-by: Ben Pfaff Resolves: #1836305 Signed-off-by: Dumitru Ceara - raft: Avoid busy loop during leader election. [RH git: 053b78c8d6] (#1836305) [ upstream commit 3ae90e1899c5a05148ea1870d9bb4ac3c05e3a19 ] When a server doesn't see a leader yet, e.g. during leader re-election, if a transaction comes from a client, it will cause 100% CPU busy loop. With debug log enabled it is like: 2020-02-28T04:04:35.631Z|00059|poll_loop|DBG|wakeup due to 0-ms timeout at ../ovsdb/trigger.c:164 2020-02-28T04:04:35.631Z|00062|poll_loop|DBG|wakeup due to 0-ms timeout at ../ovsdb/trigger.c:164 2020-02-28T04:04:35.631Z|00065|poll_loop|DBG|wakeup due to 0-ms timeout at ../ovsdb/trigger.c:164 2020-02-28T04:04:35.631Z|00068|poll_loop|DBG|wakeup due to 0-ms timeout at ../ovsdb/trigger.c:164 2020-02-28T04:04:35.631Z|00071|poll_loop|DBG|wakeup due to 0-ms timeout at ../ovsdb/trigger.c:164 2020-02-28T04:04:35.631Z|00074|poll_loop|DBG|wakeup due to 0-ms timeout at ../ovsdb/trigger.c:164 2020-02-28T04:04:35.631Z|00077|poll_loop|DBG|wakeup due to 0-ms timeout at ../ovsdb/trigger.c:164 ... The problem is that in ovsdb_trigger_try(), all cluster errors are treated as temporary error and retry immediately. This patch fixes it by introducing 'run_triggers_now', which tells if a retry is needed immediately. When the cluster error is with detail 'not leader', we don't immediately retry, but will wait for the next poll event to trigger the retry. When 'not leader' status changes, there must be a event, i.e. raft RPC that changes the status, so the trigger is guaranteed to be triggered, without busy loop. Signed-off-by: Han Zhou Signed-off-by: Ben Pfaff Resolves: #1836305 Signed-off-by: Dumitru Ceara - raft: Fix raft_is_connected() when there is no leader yet. [RH git: e732012d7b] (#1836305) [ upstream commit adc64ab057345f7004c44bf92363b9adda862134 ] If there is never a leader known by the current server, it's status should be "disconnected" to the cluster. Without this patch, when a server in cluster is restarted, before it successfully connecting back to the cluster it will appear as connected, which is wrong. Signed-off-by: Han Zhou Signed-off-by: Ben Pfaff Resolves: #1836305 Signed-off-by: Dumitru Ceara - ovsdb-server: Don't disconnect clients after raft install_snapshot. [RH git: 8ff30dfee6] (#1836305) [ upstream commit f0c8b44c5832c36989fad78927407fc14e64ce46 ] When "schema" field is found in read_db(), there can be two cases: 1. There is a schema change in clustered DB and the "schema" is the new one. 2. There is a install_snapshot RPC happened, which caused log compaction on the server and the next log is just the snapshot, which always constains "schema" field, even though the schema hasn't been changed. The current implementation doesn't handle case 2), and always assume the schema is changed hence disconnect all clients of the server. It can cause stability problem when there are big number of clients connected when this happens in a large scale environment. Signed-off-by: Han Zhou Signed-off-by: Ben Pfaff Resolves: #1836305 Signed-off-by: Dumitru Ceara - raft-rpc: Fix message format. [RH git: 914d885061] (#1836305) [ upstream commit 78c8011f58daec41ec97440f2e42795699322742 ] Signed-off-by: Han Zhou Signed-off-by: Ben Pfaff Resolves: #1836305 Signed-off-by: Dumitru Ceara - redhat: pkgtool: Use the oldest sha1 [RH git: 4c657a79de] Doing git merge from a branch to another branch the tag:C0FF3E commit is repeated, but the correct one is the oldest one.- Fix building locally on Fedora 32+ [RH git: d1c89e4d99]- Set -fcommon in DPDK CFLAGS [RH git: f8a379e95e] This is needed to build on Fedora 32+- Update DPDK config files for 19.11.1 [RH git: d771330907]- Merge tag 'v19.11.1' into fast-datapath-rhel-8 [RH git: 0b3abfb0e6] dpdk-19.11.1- bugtool: Fix for Python3. [RH git: 71f25b7920] (#1809241) Currently ovs-bugtool tool doesn't start on Python 3. This commit fixes ovs-bugtool to make it works on Python 3. Replaced StringIO.StringIO with io.BytesIO since the script is processing binary data. Reported-at: https://bugzilla.redhat.com/1809241 Reported-by: Flavio Leitner Signed-off-by: Timothy Redaelli Co-authored-by: William Tu Signed-off-by: William Tu (cherry picked from commit 9e6c00bca9af29031d0e160d33174b7ae99b9244)- redhat: Skip NVR check only if building rhel-8 on rhel-7. [RH git: 2b9f32bef2]- redhat: rh-dgit-brew: Skip NVR check in RHEL-7. [RH git: 6280d8d29f] The RPM in RHEL-7 can't parse Supplements tag in the SPEC to get the package NVR. The NVR is used to check if brew is already done. error: line 241: Unknown tag: Supplements: (openvswitch2.13 and network-scripts) error: query of specfile openvswitch2.13.spec failed, can't parse Use --skip-nvr-check to work around the issue.- redhat: pkgtool: Use BZ id from reported-at tag. [RH git: 3ee7ec51b6] Some upstream commits might contain the Reported-at tag pointing to Red Hat bugzilla. In that case, use the BZ id in the package's changelog. Signed-off-by: Flavio Leitner - redhat: ovsci: Schedule the CI job while brew is building. [RH git: 1551e1e70e] The CI will wait for the brew build to complete and this helps to have a single place to monitor and also to record in the CI log the brew build.- redhat: ovsci: Use the correct job name and params. [RH git: 220f32afb2] Jenkins needs to support different use-cases so fix the parameters to be uniform and the job name to allow multiple triggers (formal and non-formal releases processes). Signed-off-by: Flavio Leitner - Add compatibility with RHEL7 git [RH git: 3492995783]- Use the date in UTC [RH git: b53bdb16b8] In order to avoid changing date in changelog cast the date in UTC- ofproto-dpif-xlate: Fix recirculation when in_port is OFPP_CONTROLLER. [RH git: 4ee0f6af9e] (#1775160) [ upstream commit c5a910dd92ecbad24f86b4c59b4ff8105b5149fd ] Recirculation usually requires finding the pre-recirculation input port. Packets sent by the controller, with in_port of OFPP_CONTROLLER or OFPP_NONE, do not have a real input port data structure, only a port number. The code in xlate_lookup_ofproto_() mishandled this case, failing to return the ofproto data structure. This commit fixes the problem and adds a test to guard against regression. Reported-by: Numan Siddique Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2020-March/368642.html Tested-by: Numan Siddique Acked-by: Numan Siddique Signed-off-by: Ben Pfaff Resolves: #1775160 Signed-off-by: Numan Siddique - vhost: fix packed virtqueue ready condition [RH git: 0b4e7827b8] (#1812620) [ upstream commit c5a910dd92ecbad24f86b4c59b4ff8105b5149fd ] Consider a virtqueue ready when, apart from the descriptor area, both event suppression areas have been mapped. Fixes: 2d1541e2b6b3 ("vhost: add vring address setup for packed queues") Signed-off-by: Adrian Moreno Reviewed-by: Tiwei Bie Resolves: #1812620- redhat: permit make to fail when pkgtool --gen{spec,patches} exist badly [RH git: 61807f941e]- vhost: protect log address translation in IOTLB update [RH git: 0d4370404f] (#1806599) [ upstream commit 4f37df14c405b754b5e971c75f4f67f4bb5bfdde ] Currently, the log address translation only happens in the vhost-user's translate_ring_addresses(). However, the IOTLB update handler is not checking if it was mapped to re-trigger that translation. Since the log address mapping could fail, check it on iotlb updates. Also, check it on vring_translate() so we do not dirty pages if the logging address is not yet ready. Additionally, properly protect the accesses to the iotlb structures. Fixes: fbda9f145927 ("vhost: translate incoming log address to GPA") Signed-off-by: Adrian Moreno Reviewed-by: Maxime Coquelin Resolves: #1806599 Signed-off-by: Maxime Coquelin  !!#$%&''))++-.//123455789::<=>?@ABCDEFGHIIKKMNOOQRSSUUWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|2.13.0-125.el8s2.13.0-125.el8s2.13.0-125.el8s2.13.52.13.5    .build-idef4df8941b1dace2ae34738118588f2ab87856c9ovsovs-2.13.5-py3.6.egg-infoPKG-INFOSOURCES.txtdependency_links.txtrequires.txttop_level.txt__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycdaemon.cpython-36.opt-1.pycdaemon.cpython-36.pycdirs.cpython-36.opt-1.pycdirs.cpython-36.pycfatal_signal.cpython-36.opt-1.pycfatal_signal.cpython-36.pycfcntl_win.cpython-36.opt-1.pycfcntl_win.cpython-36.pycjson.cpython-36.opt-1.pycjson.cpython-36.pycjsonrpc.cpython-36.opt-1.pycjsonrpc.cpython-36.pycovsuuid.cpython-36.opt-1.pycovsuuid.cpython-36.pycpoller.cpython-36.opt-1.pycpoller.cpython-36.pycprocess.cpython-36.opt-1.pycprocess.cpython-36.pycreconnect.cpython-36.opt-1.pycreconnect.cpython-36.pycsocket_util.cpython-36.opt-1.pycsocket_util.cpython-36.pycstream.cpython-36.opt-1.pycstream.cpython-36.pyctimeval.cpython-36.opt-1.pyctimeval.cpython-36.pycutil.cpython-36.opt-1.pycutil.cpython-36.pycversion.cpython-36.opt-1.pycversion.cpython-36.pycvlog.cpython-36.opt-1.pycvlog.cpython-36.pycwinutils.cpython-36.opt-1.pycwinutils.cpython-36.pyc_json.cpython-36m-x86_64-linux-gnu.socompat__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycsortedcontainers__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycsorteddict.cpython-36.opt-1.pycsorteddict.cpython-36.pycsortedlist.cpython-36.opt-1.pycsortedlist.cpython-36.pycsortedset.cpython-36.opt-1.pycsortedset.cpython-36.pycsorteddict.pysortedlist.pysortedset.pydaemon.pydb__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pyccustom_index.cpython-36.opt-1.pyccustom_index.cpython-36.pycdata.cpython-36.opt-1.pycdata.cpython-36.pycerror.cpython-36.opt-1.pycerror.cpython-36.pycidl.cpython-36.opt-1.pycidl.cpython-36.pycparser.cpython-36.opt-1.pycparser.cpython-36.pycschema.cpython-36.opt-1.pycschema.cpython-36.pyctypes.cpython-36.opt-1.pyctypes.cpython-36.pyccustom_index.pydata.pyerror.pyidl.pyparser.pyschema.pytypes.pydirs.pyfatal_signal.pyfcntl_win.pyjson.pyjsonrpc.pyovsuuid.pypoller.pyprocess.pyreconnect.pysocket_util.pystream.pytimeval.pyunixctl__init__.py__pycache____init__.cpython-36.opt-1.pyc__init__.cpython-36.pycclient.cpython-36.opt-1.pycclient.cpython-36.pycserver.cpython-36.opt-1.pycserver.cpython-36.pycclient.pyserver.pyutil.pyversion.pyvlog.pywinutils.pypython3-openvswitch2.13LICENSE/usr/lib//usr/lib/.build-id//usr/lib/.build-id/ef//usr/lib64/python3.6/site-packages//usr/lib64/python3.6/site-packages/ovs-2.13.5-py3.6.egg-info//usr/lib64/python3.6/site-packages/ovs//usr/lib64/python3.6/site-packages/ovs/__pycache__//usr/lib64/python3.6/site-packages/ovs/compat//usr/lib64/python3.6/site-packages/ovs/compat/__pycache__//usr/lib64/python3.6/site-packages/ovs/compat/sortedcontainers//usr/lib64/python3.6/site-packages/ovs/compat/sortedcontainers/__pycache__//usr/lib64/python3.6/site-packages/ovs/db//usr/lib64/python3.6/site-packages/ovs/db/__pycache__//usr/lib64/python3.6/site-packages/ovs/unixctl//usr/lib64/python3.6/site-packages/ovs/unixctl/__pycache__//usr/share/doc//usr/share/doc/python3-openvswitch2.13/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnudirectoryASCII textpython 3.6 byte-compiledELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef4df8941b1dace2ae34738118588f2ab87856c9, strippedemptyPython script, ASCII text executablePython script text executable Python script, ASCII text executable  !"#$%&'(123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopq PPRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRutf-839ec2c27d1c9d2fd4d4566dea545afe6e4e62e0172d9b49de171c227e39c0891?@7zXZ !#,] b2u jӫ`(y-!Sί;Σ&LN k~ V*.=Vj7ZBxwGRfuWM*Ϳi *">2Ƿ\68 ?(sesY9}&ȓ.տ?'|6}kyԑCθoCŵQ1{U_wQ(p1IYWP~DL~1L:rw2a}H- ]+[뽭H\ȖT)F[ɹ:O21"x\{Q4[{JC$m7?ȁm?Qpǻ [DKRU'Z2Tc*Opc6iUhˆ\Tl;@_))wz7ƕlI^Zm{HnlpR!([𬘋Oy tpC!SKq5y&>0o4p1|L]mn&Q3%$R,XB?1P1XkFS?Ќ1m (R*h# W ی!"C>9kEOx͵~#$`wA~hg4DmckLŨXKjV[u:*4K{Dxc4{ MgXc vWsZŇ]|%.3ݞ,}Io -BݯmqGy￁pNr[k"J CϐZ˄u[k*w\ȸ$=_LU{< ysQra܄f] ^!dK{O'R,yrUNk0Z;v]C}u>V2gfг]q.^o PD۟u?E# |* k6z1-;[Jyܦl<$zH> htA !JN gc@EKƠrd- ysVN]W9 7<`6H}^ CԈn

lmܨA5'vFDɉᓙ@P6eL7E-Gk[?}{3Id` /ւ[@L,i7?L6UIQW60phYZ`5Ң!ךābEɥ K<{-?+#,6*:j KV=3zf-iioUyIl[QӐ 5A[dVjy4hԙ {IU>l˿8>SugHp7<"P۬Eة&!f$Nq@eGQaZiQrn\nR`hiQ FKǺO("A慷|0E}FЖk#j((ޅ 'Ky{vļg<) yl24.xq4e|ySEc@i#49}eL!ڶ.8tZb׫K|r(Y~%ΓN)wK |[i פ CAp]`A?+jҎ$jR5†C#'Rz-^;@c9B}^]ΛKޛm@K@cG%u 9MUx׃İƑKY53p- &5<6 `I-%ܦkꎋwP%waz.TxV{2UI͔w_ J:VNU2.l#G2S-lkx3HzZſUTjbM8"(R2J>azՀ, \俢 XQ{^]UFr!m;1ylꢴz,(bC~&$ `cSw+Z&GJ+|ˇbϽcʑx?_,fB)t-%UAFQEݿb|}qKV>=⚘q] B.4;m2NX.&sQZͫNkW*M26ya)M{*cJvB>M^zr5g[?0}RUtc;SX;<5"ɬFB@fXN?@.\mmLRqX4T 5JoG. !l /:U Ek1no`]XN*N&REH8|RA9MШCn}s/Ėt٣Da?J7 M0[ 焗Ћ^|$f8{Zmr/79x(WTsjD>ˌoF|piRkAFSs VWsFBPf3*l%E|K1YzOOy'yq Z4ɋR|pY̼Kl">QS[iܢkMxyO{ٲ~wZ},JӣV&ݼw0Pb6V7>Ŕe^x{LI?~i(!-RR/b~;)%gfÜ$$\԰c9'At ^ žkR9r0NڝE%j}aYtK|)*=O(.Vmgl`_e0?X}|\ ]m,+3QN!2l3Nux-;#&R$ )<QcM;u@뀫w4g rg]e H0WDSYVxi?^Y|nqf#?d|R+9I{ zc$j'",bmYy5Qaiv. wƉ_-57[:`'"bIR%+(Ip8%LT[Ul%,dUD!Fe&k&а3tgwV~^Ho?1OK.P1_/ 8p ڕqmP\<+NkC5Iz9-4hQN*n7]rERF'XiO)MR, f*[CBAg!/Ď$+@l\4IF@Lq"nȕ×930]| EJ>MGܳf[lqS4%Uĭ:3)_1?tp鱴f5Y~cGW/\;}nweKs4@]'_s(]jqZzJf~40=Z PtKfya![YQOwof{MQr>Yñ55Qft!Ͱ [ 0Y~qrQxd7,0oTWk|f~XU3Eq[hAck("=Ès>I]J^L4ApZ_+sDc_&pd 7Ә>lzͯ\mi"hb:#PEb v Į̠;Qߠtÿ%Ix.9\ec /F̵L5Ou" r{xݝ),&[?*Dͥ9VoFԖjkN.)_EoȬjBG(G42lۤBP=wm-a=)1}1)h67H̽\)/Y-TdּaZ-fI͕&Nb(iAV[;w<5S})f@RkhG`dE]#J {ΎSgkk '^'̸PKF$>xBJe |%X25'\oi)0JM(g;뾉Ӧ3:Z?qi|%J|chcf洗ߗ լ\yylAM. hɄOyGYzІ&&igkQc}]? ^P϶ĕ~d,R?ZJ1g-BOipU])Kr҅Ev$׿X|4[-rAB$YJfIs0s(zŽ. دaK˟F]AUY^W.Ӹ*90k;鯯 C?slP+5U #}% ]p#rοA1ڱ0s^Ȋ$̥WF 7+dg@ػӘBPttr;*G̝>׮ˌ|j\2FӚM85#) 6<) NQAC% `0983U #`q]:q.֨HcGjR:zU qk:zvW` mh3^K߾l*ϤR+vu?E R3E6tpELQx%Z:h:s)\p?K>P?]! pZ0 e&}MH58[K!smvON?vƳ&4u ;\>Ѩ&h#q`urq[T3s•p$L=l8eE@J wf48c$0%\Ӥ!xLOr 6E)QtlC9`;bf7k5-%I%/]"H)2 >AU~2@U)}rN C`ϽiRC6uHn֛7'7+9N{66kaІK؏@{k&ZD.+iHl)5/YK̄^Lq =Xwg*.?ugyow'X1M"Yݕۃ`&Kr~^},לc3W2çr|(ZbXRJ٢l(rl?C^^_Fc9ňadjdDOHL/ʧJ*D*q)FdYVK5!8~TzIr`FL^ulΧWT~_Hfɜp+`- u(fÀ$j-jK*=,6Mx=` /nz qZms>Y{V]^Nō\̕--EӋIns,XAJZKpX52Ͱ55JgT cl`=;ÀS:n_P!!bM08I[&B?ZOeV'ƙ6hڛv[xV!n[y!dQlEQtpl5h OtZD=LFw *ZI1V[Z 邧 TONF:q2ge{ mWC9@ &#U|{31ovRf|:{_p.aJP}ޫzLsCs%KVED<@L=.[#A&|R5۟ہuFHFf]Fl5+\8Xu7Ma+0Uq+91;oZ`YKb3D&1/n)@<-'S<#0&[7ο?d PKSdj-?9LA~ D&,: .Y-_n BmAڝ֫s-?;4N̨j\5 _KV>\e8/A>ٱSnrxjֶn<^"y;" {*&,$ef2Me,BȍPLNkb HAlAU hD܉ w4`jUærsWwU !׃ՠɻNД =Rqex5MzEp O)0؂L7L&$hCHaƵ>KLG@5 2o\OҢ H#mjV,A7,m=h+qXn=w1PlcY`<6'uH %l5&Wk \z:V; Z!:-NzGU%B5aB[s>qr\N8.Rk#KCh%Z*Q4zgVqAk, O5JxwGob%lTUH^Oq+%jeSR3@sJ9WNR|Lwur5GN{‰rL84As_i[ui9kETVCZ#Fab9h>3G^)O-\{Q>FS?Q5WLl DљWd9D5`칼ItAul\2CemV \sED3:f: 'fZ`3^[[s:=b׺փ+)o-y+2T@$$hb:Ɗ5ܨQYnEuI/~btZ(pe+E3B{]+EЋ8qZ!5hrq>a]lˆfWrleX+<ۅ'|x0j'&Q9(+VHkP))NQYmbNSVfHt_ĥ#T<;-2:f[!>O%GC߇uo,x@J<c:-ȯqF:ݹf9UA"/̑-pW#A9NwxU"W;^9TpPC-7肼 :l@Lr:LO }3&I?R'@a[Ie-<]5ݟglQpr1 ^ZwH-a Iy/RݶMǵ 1L_ %E$`kZ\d Vs›֎Vya}m2A= c1A?*ؿ<`JI7kAgK1b Lm%Y r97sj@ZgN)JjǑ)Տ:;.̺Y_k.}(cc "$-vsÅ#Ӹd،nL˫rgBP.5Y{ *:"©_6Op 3':5dYAސXlȮS{5k>>F1!d4=A@G R< A)G* _F oe(&o.EQ^ϮHir0XW ٯhq c7Z^e[u н:|לV)I?&-p}В b^>" ĖUB$+Mi}GxB_X'+g;RtۉCeX[o ^"]~|A^$&L6ע^KԧݍW+zO+$v5eRh*90TJ 'R%tR'Cp؏?*#.ᆛܤLI&dxTPî7`B5Gd`C|:G~0#ގ u(ّ oQ /#C{wJ,K׾F~H-11,lFA#U``ͣ'!֦w2tC'TWlt>7)ÔMoFf<#t c$O.?Z^OZKoY·͛AH"a=Tatw朘AGȶGuuU>{b$;E9`ӈ]H/ qyy߻WuMSmǗBVxM~J?a#V[]qrJM`HA[SF>uٺ,3:N5e"@`i#DHʏ{۫K(T[9 |Fm8xq{ VC7QLziܤ`FqrY+4y v٧, :){؄Gpoco"(mB:{-B$3]tNTg,~Mw77S/E/w UHz#,?A4"l}sJN]G4\@xY^r$A>aU@K(aUisqFN~L`H,O-83k,q 4Q'MXܕ:F\VpJBROBجM9 Kq(ǔ[0c6YS[$-V{l_Ȟ=0IE|םDK9C̮JmjVX]|$ pZfgl3QoD'\4uz򟶻6akǶΆdz/Y.Xŧ1Bij6UѴ'y6wt.lqvABasa]|u୵J*܂V;m_↻ 0o9`3meN_]Q9fNpl xSuWiqdPM|=n4SgUQܠ{'{xnI RN`"y0bJEt5 KqhSK(7`|9,LC-`7@CppsupɊ7qGmD >܆/lHjD{(^bwjawFFwHc֜b(F^Eu8 ~=p( gm 6bǺflOU庍3.TǪAUԡ{U{nF2P"odo&b]p>s\z@QU]+:7YH{\q 0Ffz2:T`Y+nd$;9}wA/"& ٍ(f[Դ٩Z΀vLj0}0}YEӺ^/p7o ݝ1Ty/:f3(6(cCL%0d˖)֢2X sӐC hĿ:7?p1qg~fzhk1fABе>C\]35$ #2} S_JXWha|#`l%p]#N>~EKtӚYEHس@]j=eD"l E&e$*AyD\AlqIch5oDQ9AwI8Ϻi6 #"RHCr$& $J/s~m߿0$Wnhp =!&m<1K8tY,^qԄǗO*DzSԘ2ӹC~iR|)-j/d*bÀnYa/qXTvT=g$5liP0nz)fmiWB:;ď( 7y]$:,)j|N̯UB]"pb}̉H,Xh(+z*-r*w?G . x tvfzi҅PlgdLȩA5P},x占kF΃QũU!ҚXO3R`Sڪ |>!v2kғ0־WkyP.Xݪ/-*LwFn}`A;--bs]-\j1EL p%ݦǓ Lpxc Ld2$^pI) jtw^ΛcN CG}k|C4 pу0hmYf|8P 2-\c}XN%_J/D%(/cSޜ(%Tj5؏36kG]/\j7ڠ\uOFEU£̜607o/^0I)0TXj>Z.0p<ѿL^cQꈘUy֒YѷlO W}%ּJ1DuiVI|ԐbEcgef"U? v3]dz6 en=<;ɁIT?!\m&=Kv} cFe@;6t|]m>_z<[PV!+E,b˓؇E1^ "Atu@˿0p(5^:D"faJ*k܀UZ?g#rQ9{?εDvѵNJṻ!.r@  4,.)"_>1ud(6 }qɭaZsc\,-(-Cf&9ː.nDM561/ڝGa`&HzA.Zi<5!`/ٿ,Q7~̿ ! 3>wK&+6(WVQv,ΕXcxj 9]̧E0# ^HĆ88JuKIlo6u!Vx-xI9}PlNgc( MoZn7^?]xPq;VbtWJ0TϖWs?.d/y Ӏq)~,qo}M+ -{faot1e5HףO@E*`VR/h+X7{F`}>35Xs,J\H?d|>gxN ˧Hn.g#jbݬW02LٴY*reBEP7ȷ .'=7m/2X]Cv̖vECg)ƃaќ!~=6s}̟{}XP()=_>3 {*eZ3z{Ѱ>-psSEc˳S0İCa-%<(N+lG)nŗe]\,Z#D ttcz 6c1B΂p4A|Tp^,B@'IH\$P/%t*2R4%+~G@PES/4򑬃:qDKERqXWPW8>%s9ņwT)ƾWgƞ Ӥ|kagffYnt-wv58pF\!124fB"bů_E6=5v Ah?*gz T3fhWLɪ6y]nZvvQmt*|?7 BVڶf_{vu.mQ ,zЦ?D<n]#$g% c@%6{YV(%3T\(q9~ޝ,TB8o]_m]zΌY+ \I!CIWP6@cƮ5~?(D{p{`t7Sǚ|c$6W#1ԜtyenE飜Ă%"r\Xh,$(G +vZ!q` n4TNC:g] ,djCQgNA{PW{)RҬ`&a6MM6bFg#,~i;IzQ۾41G*W;xp㽗Ѿ. [(q=S8p/ kP0=/3(]MBwgYcƣ W|udq!PG>e@LZўU (@GWf]IQa =d5>1&vadkiWQ8ͣ%$4 Nwrq#la*qqsp&2{ Gޏ`JB)aDfWq!ά eh{Ʃ"^hҞZ k˴F\>3B.9Xn5M l. v(+tP[y:?>L1*г؀sԐ2ǥLie9jJ".6ibV5~174JGnuܡD|؞69[!vV86ZIF!spe(NcHur7;<=^FBY~>4vG>,UӬ+/Wz;n'g&kb ^;_/M ~<9Z0b\$ G\ecRL'CC<)?F fXE7l9ܕ)k _ٛ㕐&sUfAA j -_g&w7I #(Fvqae!!;l8,: m\/u3"^YwlPH=&hβg\ZD#*G9^"U0 g%.-?&Ir;q_1OGmHΨ2gc Ho6 ǂb0dY7^Aָ]!U5^h*M]{S?[`~/m|WkB?OO6)7 kbk]Bl :?ƒ=CqV*MeM7,^%|3MUkgP#1JC4|T5T v9ϣqq4"Jx7m 6GE{?k:^9ya| u^,t7 ᚠcn[*XX9l+"0kK珫F7p^HtuUQ< ULr4i$O(DP=A`c"…oHioEFUtoɔu:p"WP=o/Oi;8 9 p兪yb4m?Rxt60(P'؍0㦯#?콱o1z`ӝ=ŗ{p?pVyKr [O0Z] 6 ٓZTU٦Ғ -GN0w192~U_ǭhM0-ɗTcJd\a/Ǭ.^7A)P<"XF F+¸OD:}Jۏ#EkݪrEQtC)nȠSyj.mKGs?Hc3. u@; e/ϥE60ĈBZz76Nm!~DOG$~f8@ǎ¦H` X#dOb|惹~&T@f6gw@P3 +YQItaJ[ z}q\'5Cb5F9G-q /<6M<v.--J<1= _ۺ5%&A6; x I| o$[nTY,~%}KlUQ[w)7 J;'N~Tp3_k[p+ȗ 񌙑  ˟ٽo)7kj;]47sCV݆_bJG>0yXrv4X^QH<_ dl X>rE"~W~x!"ng/7X;˿pd J`pK뺢tڇϔÈQ(mȕD`WH^Ll^D/?}?W ګg=%2U$]qmkYR/4 HY@aO=fz͍-b-*9)*ּkō .0w`Qxxdڎo* dH!H#Xg41$L*0 sވޤ$_%nyK1!m%He[8QWLP%57_Pb $Й0?X@(FWwSwsA&^SDB sȹг|l]4w4_:&g8˪O.352oCT콁 R=Kb/+k)T9"F b gf1WM;6|Oo(͈R)?2n{N3q8PuifKwx C԰G4,zpgqP:Jh"c= &co3 -rǧɻ z8"%@{E8l?Vъ`C"bhĀ,c{=ސV|d1Ճ92%&ϕ- )R|g4uU}=L hdӓ:Ҽs_cs@Vii `h˞_wt9*>hB C{\fga\05ɶN'eaeEE5ZX6ƂLF]K͚Rd!ճ@ qI2%*gR6A(&= ~ qԫ7ۧ:l5nȥ-;W0k&?*_@WI{F#ԏOK>NBMUv@;'}ɜKA{(t"CnǨe֤)a0񔧀@-*|ΛZɼ& ’#h?m8@L1J_ƳWfCb{ҩF,0 zj2^ %~{nj_i1 9~ v2d~p)v v]݁~[2n&nMcF tsƟB X]=!U|u|Д/u(?^+&n&?lw@zp# (F4X2ni~)jR΂Azy"o8xk~!y 2v;#Wjl<,&t]]9&p:)Iq}xMrCT_kr L,IyX`y-zh9ҁD`/q0pz%32̣3,ygxK߅"Ewu%,XGG{l%8̛^(2rG'I3l׳c7~EAz٪Qs <H`#yi;}N-8涱 7Xn}6'0wYL]?{W'pԫ)QV$S<ՋQi3.opl7`HfyC6g:V%Mo(١LU0ffmؽ NْlVYN#ٳdm^j(_B0QSP cStȄ; ۲E ʩkmOTq &Ǧ m,/$p?Bt4͍d}jIflѲ- g)mLb򆠨[WwO!S+,U*\h++ )lȏ&T U"DW%9{_ 6'ez,9k\{{9ܥ0K[W3 c7񴻸>@`5wXaDM\-*"1|O}T5F#'Pə|ϲiۅ1QʻF]5tuĈr& ar-^6^6?V.^ ,meOŵէW@FQa('j\Bg\ZܾR~!j$x/cBӄH|!15^/Ad 3hKӱs*7+Wݪb0)͟!96V~ $woX+zߒX ZW5֢U vr^}*5Zs D-uM m }B+úӋ0a)F!h|(? a))!%7xm4PL$H9<mBϋzŝ'=6{%Φ? `Alz' %ee395͸U@3pnErQ63o~!h) 9,/vEn~t'>&{.fȃ5h7b o.-Fm^;`d˽F!%hkٕTGyhXD*UmhRuv% ,E7j$HG+66ڄ[\C97i_0}3Bz E5s{;_\ 3rQܷ<5JGTU#ks ]s/7KU!,m,E:vI<jw6,ޒxnԓ\JŭGsmbP ЫK1ej-lhb^ JJ<Yq@LP-Hd>1yy.YFx`%y6\0P< bԝ Gp܈n̂=fy+՜(? &QxZuIoO fPsggCXEsœi<_m)#0 _Z1b]}:=y^NrXP ),P6/ltCqj)s)9&fovfV_~g X=!?n֬1gs|~ADkʇd &^T&l0ijK'n(?jƪEÜO("?S8[I-΍&>T .N peTP (MH_ krDBBDqX*rS?pq`qc}ghHZm^8q;pC?'%u?8EȖ;wE._rW~8LeAV*@9F X9 7qLsđ*u9K9> ǚ"6 Ci%ǯ!4vCW8@.B}bBQ[B._7{\b9+[E&ًB:ء x˄o+E#f_xlΨ9(q50l<ӹ)ԲN+׋ZgBMJ\@%[/IfuL}^ۦT##x bskԉ,Y~1cymdn)5?-}톜ύd!DdO 1 0=uxîMABerEFP5\m)ߔU T,67RΑ%/4j7bTcK&4+$o?389<f^Ֆ͋z ޸?)渒\w&Xط0] B}nnvi[?8@Vc.|E}h|,{Е L\ 3T1i]Z]Mǥ`0_cUm1(=ʄ4&%޼0u 8I3Tr{ijJ nܰ8,MZ8_/Ra)awjaey)HizYYc+Ց(Lj@[>XgbYZvvJs_6LE0⿘J;Qٻ˺*O&>D. f s\I9E^!bQ1*cN L@ߵa? x!G'lDFaHy~HW[*ImJ;ٻ\Չ H*:qK4&ufbޯBjJy$pY H=bvG7̨HR>$D ƍ9#RtQ6nn!θZV!ƺa WF-".!]8,Bxi$ld-6`Nd^O9!XwTQ2 J_-=;:? u4hh)@g}K&IBȷtk'äu e3N<_:`jw }Q@jk7Y nZ 2?ɘ`:C٭8t /؝$_s=;@?( ֣1]ǫ[\$.zxRsy IW=X7SՇ/?%!J&z4K 4t5{9zVnqlRVp N_ 'R`v湠7j4Ŵ3vr}*r%̧m hҮ n w%W@zo pP s7Eon upJO+{bqǙU߷oRq)jG"cH7quLkFDCVMۥl!Ӽ"'{唢?Iu|If2,Eb+wmvH%YTGLV~'mu­~-4dt`%trR)\7kSC۵FJW׉&O`zңQY5#lGaOy:oZ=-!5$' zYjXdsw #EpL61՝gTPPk=xg'?[Xt"d~[ .Z}B X; W̦R9*ҏȢRڑs- "z>6l}u/$M=ZYeÿ́ m06/6Ad"YCiy?&Z_#u̘SuPsT$J:"':jX8 s;Ws }>ײ 4{VE32֕5-AUG- &lćR v0L>`=kXWUmA_Kպ.tŦ/K![I&4jyg_yi>iqu~k9D,]M$ŵ٘ e5~%8qz Ͳc/H\H+Mm%dt]=G Ot+`KBV}>; ܷ(o+ 7q;Mth"  mk10\*Oy碥CvKmW贞P,[tw֚.Xؽ\>,4&jo0Šg}G2ޙZ/ sRY,ʟ "Nds4.m+ý$g@ t^8Iň{3ya}P/媩+>K<Ƽ6I/aNCw<6n3<śQI:k&*QG_;{ɯB_Э^R4z^-qcvBC@t~P*CHD3`+><0omHć0§ɋv7 g3.D~tH%U+mMn_r3~ofKD3nO ,Nh}1zhZ`s`E/5S{?#`?866| +rF&uu ; kted8A;w_|Vc?hL=.h~>,R)1M/cm {и:&oU \4k?e\`\yp^QqԋuB- hU2]Ҝ+͛a: / ϐG}1 ]- -␫Xh!(j8ݸ%ʗ3ǰS{[O [3RncJ@gK }l:EAbR SBôo4;̧ BLNy'pVb=*yz?&Gc`?r(ro{9 tlb .o2m= /nT&#AƦ [%WGOr^y]C]`C ;84%TbzE EZ Zǹ3vǂ.l =`&b4;NfIW IAJX3γ;asMч wtH A˱8{EY&]T3gee1LW+, \=naDMuw'M }EBHud%b<.YSҋ!߹w(k~^ ElYƙtF*;Hj@/\),r/|-qTQPrIN^-Sq>.MoSp;sBɉ S'~H=Ye/ƫJ$߼ ]ߚhT5dAG$u΅P=9+dJ#Iκux 涵 =N3 v ]iqmȄiI58 )0A 1ΖmтaH Lx[R5 ä=WING+rj9Ɍ2?9,JD3t7yPLIU(!E*uNaHKVajR8Ufun]pʖdzz}yӈe`<;)JDK{!YAD>|f_H:_ RS.$LuCI?y4o680TOFsb1gg@;ހk4Ѿ9{j[~^^$R:ui.W,efĜ7Ty3@4Ec+ȆhTjQ;l+ Lcp*D 黦`;˥5ᙵ^Q dh Wɔ&;'6VɶedwTc_9U7QJCz)umSU[4]# iE)MEhc 5~ILS.uO`ahT<~4􂰢%ySXY%+V7qV:[ T =#^ӋlQlEmYt{Q e@e'l YGX]Ah֦*_Ee^'t̨En5GaYA4c;u5( <}beF;aw͐k45*l]I|ؤug}6嵬 BLKt2L9mR*Ir$  0 sB G#W=0rmex_}+"un/L0 '3m/hKYN*L\\{DUX9{[[%a#&c_Vc! R{3qoՔ)Iq(4g4xw G;? 6׏pQKFV`sj%8Z_ܛ>15J1G_wPB4Ix=K]9-d?I/*ͮ!{Ӌ x50b'w!>Kb3+Yaw>A5?aTL"DXMw%Xoȃʡd,?tGsM Sl4#jT1us=OvdJ8jϸInx*K ;iY7oFj}23Ǽ@X1+[8{@iY\|xfيt(K1`  }=O1#jNGkbᾉk$[P W*^ :_NozhekG26Sɲ9X6kekdMcxk~_kӖT21FdS+a+UnxA͎`b՗oqB6^BiCC+~!L7\pPݻ3@9k& y0 1m Zn-( =ӲdoMV`1{x+l I $dO(dv% 2s :wΠQ.s$`fm&,M3]&$0=9(\/^?7H^TQ_1t";+,DXD h`$/0eQIiV\ F- R"4ݝ5AK\bxA^S3 "Lȿ8fSKN~>)@}'k*$#0sI~53Oq3=ҽ]R_V$ o$6HFWgHKd"Ol(<]  6*p m-".8]elAt<-mb"fÚ3s:sB'OTf 02ī:%Hj@X\/(2ѷiJȎiv輙B N4w<.pr`ԢB;z{caS^шD۷ "=$nDHLM~uf5=S@MY zwΪl7(yʂ$xmS ٙG~V#|ia(nK+J-]PDM꨽ãޅDiP& ` zdYF̣E]𽈀-nLzLGhlß 4YՙW8+9M `˾? u$hK4|ݩA\,ސܰ6-S ~K/rv!qI 3z (տWT1ā B8Osw!+@:CwPͬMȏMC IN I}m]2ިA*OhZ_~7帨arҁ"Q-et KV@uǃu{ɏsN[чU=׭Eh2l9N61"^Y9Y6-O5HLh'bzxouT Q#::Kq%&ozŤ~"؎jFNgܒuٱ#]ZyNɀ</1\Zv&ފ_2jY+G/Z%6"3yÔpѕ5EY++|Ȣyl7>vtuyVm%yc$H{?'%3cP y. mWKRWXnY?6=FAI5<=A "p;SjP8xN I.Y(R뒡QEk[ B*U2081c##QPo] gX4asf5zקA(Ofk@tYԙ>#SGq~_BNWl&K|~8+>smK6K@͏zCt 枏V)Oq.4lALUru6sdTP\XPЭϩ(N䡱D%{t?>y< 3]8J56mRE0X0|ꠕ2?ahԏﵿ{om/)acQD\ Z[]Hb /\玹uY k8R'ƾ:O|k Q>M\1-3!s yw~|G/'zb╎WhYܬ4HhJ]VaIoH~T &_{Q<A'7 y<[n_P(d#%^ě@P*qBzȴl\Uq&razTy܆gnUk2MF· P˒|vW-{/F=\V0VF&qb˖IYAD&KE[^G=6:apAD. *c,dd-U>_X~0";d~2= _ns43I =oO,t7{~>szr2,3m^pXrd~w85|zT}L/t]j2a%ZsDg33ݑͥh tq 1 6RH?33 ak}x0˚徢sVidJ4 UnsM/,t~Z׼UsjT7|}ڲ V )Ͳnkjg+.maL䧠J |3!P%ANm=la ȞCiXׂ9ٟ6<M:YquǓ?Tma\ʊ_!?XM }dߐX,?J`ޒd֤?߱|<#:}Cd!{;yyn YIUVZ=/@8Lq>rǝD)bfR/( -kp6aȍg :YR]T @h PKк0Q36720\DD6m@REWF=}t =sf9i=C^y*ɵ#/wP,Ǵj+z.#lƸ?pe#5*1s%!Q}<{*Knt8 RȤ Lp׃v7PoQkMKә:7AiE&Y٬s`xR<N6JBI x2/*Fƛ5ttЩxFv}mƮq|71Ɔ0orOhأ??} (ZD%&o@2-)(̼tI#LX]Ǧ;gڥ\4 T`vZб(>x11 K:5jD[$ԫ2%S աWu:X,!ʵ0Ô*]SuʱL4lqQo?h0=vj|nRvm/;k=¸esJLZB~F7b;G-z%T@EܒK^@|F&ot"ԯ,d3C*DeRüea Yy8V]snEsf$[<&Q=o綿phEsr7YEN ~.¨({><ƓϼBRI#ɋ$wV@xZ,B8GRQ} acoMgYR#ׅ"MNw8yڽ/r͓W+>0kMͭ7D:đK82`kVB5[U6/` R\+֡op p*m P $*)BFzѐׂI,Q4sX' %KA&fn5>)8Df 1@dlH:E{bx:@AD #]%7#qй.#[N%vT:ԩ<,v 8<.ͪՈ鼟oWB/=Z"8ZZFw{JPFxLׄYH,cOk.lSuoHT].N:8stL!׶&csvw; ^-MN6 Ɲk%Į`ڭUȼ]dڂ`:9PXᅰ*^գqU%sa w{d i(Q\=zk+? @af٨џ2X~\! VA9hG^nU/fwQ*uIuf)8Z`;Cxk+:₮‹M wN=谦LkNVե`OǗSd_3cndՆ .qYQbqLm\};\fCRzTUV#/qi{"?5 cW=fJ- Ée+cP[!m?VpϜ Y\?gH e1O'qFDWJS<֕s8Zo"^ ( wwfۤW;'|4Y0x̂H]/@BnEJCdwڋL֒=> T Շĕa/&еY2.6K\?O{I:0h/DW}$DX zChJ@^E~Uoh Uu,7K/-74ܨ,Sc`1 Kk>3 ظ|\qV#B^%Pa ERMOq X/7 =Wg)qLrɔ+cpiRIux1CW^nrO@36^_ q[f6`5i W <o'j`P)/~ &Nr,P:ސlT젢\4׶\F!0Kj'Jań9(m#bms]a3{!;YNsS̔o,\ȳnw&KF*/6'E֚ŝ 75΂D~sz:m-QV!M<h`k&]9W8-JZjyiPw];Fo >rr\:B c)YgА+6DW<s!벢?h<0˯HޕrSKKjUQ5$pUM| vPzU\An$`ٗbuU[[[bނ lji"ψ)aluxsj!'-9f9E-l0) |4G "NIcgz'_oksI0wC4fH Op'_tQ!GsW:˨]ae{r4Tn)o~=fۤ0Y0wE@|Xq-0]ne%]DpC["e gJ$-ۗM0HtJ|fϐ|vP|^i0CT ~Z*fw\P)_INIIva $Ւ-yY+:( vPVJS8TUrDl8~nYEc${pm+c3Lm0KhU+`- bSr`Y d`&EEW~5 lHs w Luk背[eATpA5ӱe -sOkӏl3'4E6Ԯ] `䅢ČôGr;$ʬi> ֏5k{I'K 蘣%*B黁UCe{u}Ƕto\F2*hz`%;*E}٭'CXC|M"[p.ꊸ0Jk`c&#i=`DvX7Tԫ%CR嚴 x2SI +5Ӱ#>.-2jn)lWmlPn`]ij N>54]7ފr{ŋa{+BԳFkaSErOZ0H.;:Āв5)j <͔#ڒt04l*a5lnMfcjԄPڙK/>:ܜ#ö,XvEը.W-$;TJ.%w-u Iu#&NzaY5h\S:l{QM!1;yr7! 7mi8>YIȼ4's w]7Zv@lO'C ;Yl)ϵAɐ)pS\T ̵:*r]~zz(Ib$WN?J e|Ȯmz]ʝ۞s:HE=Gk!R MUKJSn]yy?T2ƦA@HQTZv Ue 1%ڳ ̘dۈD Ɣm1YAױE8tB\W2mHFh#T<ꗦn-?z}]JZuD062jg-lga2B5L27p4RU7qJ*x ץ hiͻDHiƷZ>H$AՁM4ϘIG6P;G^;O\kWGޑ=(|ڹUo^ӳ 9̆h2ӳFpE4;rY=W_ƅ{)FaT0;X/4U7#9aMIj)}S`nm^PbVs4\ur'ғL@I DcP ˖ Z,p#H{9ʉHå^8k-ҢIOU[ex =ݔT]Mx#DwCy1+;n#|#GH[._Kȿ6|r->)S_ `/^Ci/Ѽps;;h S!>'4C%_\.x9;_}</U2WK}dLsw-*bq"3::EWlO5tDkOQhL.p8aˀ[8x5 Bm0J@%m-k:&PHU%I*] }iuHP\}>$b]uF.⩢!nbѤ$2~/(5,bj@;8Tc|G*$̒[#H2&c]Ap`wQQ@U~:ͻ=TBu7Ya"vَJ10qh4۝)Bb:zq': =V{pWo7jCf'' x,~$OGtq`R=jWUsB6],"N?}VWޏAvLTkdv6tXRfg:Cw}Owـ(ѓY!>K4-J6:}:U9z-E_-֠ՉGOiP' -|iQtC ?73 &W?aq.`Y)u4"'%l=VdO 86Q}Sc6!E. eڙ ?k71 .}XЙutK ky_VvԳJ{:fBSyYylcٳhunQ쪗.0-O,MSk)@ȭnZbиgK(uYe 8\srm\|'p̏<0ۭjB1F>N ,G ۮ[$?99n |#WՋ);P&Aw2p֊=szr:& j\5rkrrjcp:B՞)v l'Tb(kxf]A#|'vtw&__O ?A\/t8N+XkF%Khy dDC7/j4Pru39Nb]^U)tasui3J|$ vL7^-0!oL9Z#<$+:_%) 00ऑIɈ-Rc[Jy[-+gw-r,ZURS$ȩRAד.0}~z>bgP>Doo.'XPjD|,VҵEuugjZ/S6,n_|[Z+.$RH w}7lhܼq#秜(Yk $dvDR"ms4,:/oZEԑGvT^7bp+ #gWRKMLƛ[]Wd냙|  PR!omL.Ӂ32ިX՗7q X(7{d+,@Dr!u0[`F:nw{¶Wq * 3dPhjGW$LK}YNزܯ8Wtr@HXU ZU+2hs9(I(Q4]BI6|T--جQij=Dmwpuߡ]uw~!vzg.nl VW7Иd4ά^oX7]Җ.TAx*̞מP\~7eJ"e[RՠF5ɮs=-FS3Ļ'ա7g—!֔neqv{_,TAbT (_BFyZsU]RC!,1!sM0",(pPx/pZB(YPBapxt,*@5S`wt֍L~H):̉qF"b ym"v*16qXѝcnco:_vCI7WUa,c7ìsc  =Э2@ՙJl9?-[cOP<9WlklR:%FR%I6b <9I& dxM]qSx[źH@ugk7]VҦv=AX1X}M? rhi4o66kl"rVQ|CCUsQ`h~l׳{z}PӂD W @ЪM _9=#P9z9 ]!>߰=KDmPfG)6e;&mԸy-tsTg3vD;xlҿ[\J[YZ:& Gus=0:8|V ؉%ȏ +y P! PnyPp%vfxO"Ó01޾F^w5+uzZ~Ih1ok9eJuB1ŕ]~%set2)J CR1& ]k?a_׃dz6FvNtv;Wjޔ6|aa1Ԅ魌~lW[Tm9@?dwjL7)WkQbM3 ``qd-F?՝'P!T7mBt)pa6!ZV_YYL씶y7: =>?l8a`!39b}znh KY:1phG!@e*T3׺:~1łmxip}=R4]_敵 P\R2cCvl&PN0#p +A4Æ`>Q g8ozƬ8wr}^ >R10®?o˃[I:;SրF}=+j |BԶ~e? Fe0mjW=n`TfF/YaX?W[ "umhY3Bt@%g]D86_D2_{#HF~,"OluBcy!0g^,ډ~zPQrLfE9y^F B&8z[0lKϏ׭Yd1^Tw It&?_'[0}7܎a_.f"|T>-+9R.*<6R{ch=fikD|ǣQ|0ip6e() p9-'r 9ؕ5MncqhTby8B Tc:h@1u}6j)C-ڻ锈dU Wl_uk|Yڂ> sRTL E2ȼ[9T$BR%C5zTJ:VM|Ȣ9xiU[Mp'+XX|oPDbU_S+eL ĖuoV"!Fj M֩xNmD[\fDEX㫽6~U+$@[RV摈Dvj: #:lx:N$_Wnmr5(\g|N"9ruYqLz^IG]J(<2*Jc|`+,T?eW $ zlWe%%v!vkU7T 6SH5T;9iڭiq> e"OfIIv}k.N%# y@6P'6 Or<)(h"UE7`A {ptrX^Zv59KM@P:!dm!MfGL$a^wE*j{&jƲf'HM;MUU~.) 4nL j@a¹/7b~ӏH,{ AﲤV0ES6QYcE/jB3B~<\QfN '\Sm4:ae-]r 6\(gcF_S Qrk2OnT=9~Uir0 +ߪ,}y6B&IUߖ%xF7 gl2FbzV9 &ݐu$m WXHV=zNvš6;PfJ9M;kF LCK2ّe]bOtn1{]ĺ{:B7fpm|)UԕXMzP[p6=ctjQ&6Xzm  VКuA݅PL80*01jUɦոZLj ]ce~\C}]?@DԲɄ M3m,yU9?'@[49ʿUi Q7Ce*lVv|Q/m8SXbKf6ңiϵ !B{WcaX"'U=JC$ "fl[[7ԬAļΒ*{U1ǮHU u8W:'BA!V zO$ fUS!.B_JFS>]{ڣMpSJl>@R~j 6v$K˱[Wlwɿ"d_|–͉2zJ{jr>p8}&XF`D ?Ꞑ͍ S _`4en`D=>Z5|ȩoд4NWԓzudVJ'I;K)E%ߢmIǟ m7AhF,|3Qz:񧠡7*_ - k%?JE=3HTP,LFsnNxsk% ?tl2߃o#AFpL?~/BYR>C ɞddVVZ~U)-+8>$)i4b˓9_g@oڀ=[z%ܮ8YDcZVn  HOar;f=*^*dhoMŭ4I#8&8{O,Z]Ibxg(1Հ_QZU0 UT {*eo=o4xu\DK/.H_ӵhNΪ#thK,bHrN!^; veYe7?e^5rLnn25(pA1|͵)-Pv^k+UfŠI)7^H ߜ[mgWGHsv:SP`5 KT[EM #T^.[M ,.Nr(lXϳCFO0WU"oeVe`xD1R8]D6o]ֱ&*'s Z!f9`?٩|{r݊]fܼ4V~?"qՆO$oC(样U+b莕KQ8=Mz{J 2zݟ` I<iEӕTN~<\Ɍ&~J߃cџ&łl8'X INJ.Gmx(ducs2?:LݳQ424@TVU~ycv-aNeJI5! 5[O\8c_ɱ'u!BpFJ?(Kgpo G Y(Kz<F0ST#4)HBdK$_qȌ>cl DsCT B`jN7MMȁJ >^̛M V/ ; 7 H;]]T+Pz$ >ho$זqX@RzfտX'yvKlJENN뾝.tNnuA">؍O'x ߮,s˻RǹaSJV\_aT֧*4GR@!8wrXjh#$H\{=4p zhVuR< _w5 t08 /zj04fFyZБwWU&M{ec$db4j/pV cR^.hK: As|OzǗjJv'&Y]P-VY)(jڏ,OS湯 %PcTVO܃v]gI&Z0ޓVNn'׳RNQb†RBl 7aڤN^>GVq{VGQw]xʆ=Mߒ^3h:01^J[f{hkC-Ep?qb)Opn0<zxKseRz[){iаVaO4JβY=E`}=yJKQ*.G,>ᾢ2'>DIɴLlR6x)#*d% 3.lbeh3JSzqێ~qnlww75ETKTp٤jnIW}?`U3ΒB-=s qn@tɉ7,ejw_Y鋔!vxG°9$pPv$L( YQ&wBNP 8,g>Ca¼FB kvJ+j ]0qy_K);zCUC೔h=X{:㰽ȝ\$B:m,*E}mY Fގ.tvg[S_|4Gи(aɉODE WEm[DB .AhtuDq"|b+/B͋ZHF EehYS'Y@;r)"lNg~!)bv_5d\)e[yzx.!gl-'7'S|Rƺ M}EuJKmI J*VU%=]fD8q\nh4V^<Z $fyK<"zrJz,m)(+Xh>H=G40"f \}/9!M$!g2⼃ X]Aɤ ]0TJ6,^EEװZb\8ғjCz &u6sCE2G ?T9gpt0g/-u3v_2_V FSNmPLOYHN&6w`I tlPQOnfG("/mN|]o Rwƺ/HCi gϜ˲Qu7JG71Al8pbY:rSS:?9 ϧRtL䐚] >Ux=\J|-pU d &RVEJ5Tގp\J%+&ws s.dՉdI߇+k5 ZG\#CMB8֚w3IN RLCS5qo(вD Y_." X=[c6[6b!T80(qXI5OݺL<@ʛ8f_]xmGW2`'C7-2̾~nOZ56CP% ^Ízq0h:o W: ykOx'kwڭ[@WuX>T܆luSM"G+4ik{~?˫EcgvR:'Vk*k߭Ĵ03RDX֩CҌ?|Dey2,MI꤮ω&ov(Wq9XXc~#S2Iwd1zQͮ/,%DZ&cˍj,fn?J?+PJhHϽMЎ6S݌lK\нճ3ȁ/:B" -dtNkL)ݸ:tל QT-ŵTw4Oqf5vb[5²[w߅Z6*#-G,s8}glp D`P`ur+œ<Ě+z*s kZ"[U-:0]So['C -0jטo$&r o*]tT nHWMb(`xN/5lLgHl QpݙUms5`T74jacnD =kG86i~oYԶ:Q0+tFH(ԡ=<c!9&†U*Bo R<~gpJfa~ hQɵG^(5:7lr<cd>2jJR6\'3hkqJa жLŬ6avZ0̳h$rF''+j0}&EyYeY`} L?曘>2<$g2*Rk ۔bx%yUvK4Pa;Y'K 2w/\e>Lhp+@\$IMGR^yR%` ugYbAV3P$;Y#zw: +|3?UX`|Ur8rCvvdrԸ^Z/5gg'EYGHW^U#j4&ƆWYG7\ 8#rir&WŝJg!A $,!̋K(G9}[}$@3gFi¯he͂VzcO X/}=rFuѣN5p:wX__3=5I[q PfUJ4#;K#F8fnfoVFb;r{ϋBmp iGc# SmzMrGnfesk4rfX2!'p"Z7fC,elcfToZPh%<Ňmއ3\O;6-l b71d (~OiK38HƿS9&!=r|f rs\8*gC7k{^whM!jBʚ5E4-{V]mF UrV2RuݔXH e0T3UVRO@]Ś.[VDF_I*[J=gM#7U+hBfmƸ Bmthmf BsY ₛڅMX:uu] A ao9~ٿm ͜thZF?MR͑R&r _f٤_аi5gcR Jw #o0а]#)dPh `Xʀ#{Z:pׂy1Gߤ.o{*; ְq0p ] o?K7Iysp3@op5(xҏ7H6}⺐:V|YvoqcYR` ߭;43G٠ga;p=Vdʔ՟(3>ze΍hWaۡNPsc"lją̫25>_ oFYQ7`:Ϻ*hy<0j+P6֯XUZLJrHF1vdtMu9$]YAA$ќ"1|;w$f `.+` 2''Cojގy$\ )'myITBpWM6WVJV c9J6^KԬx=HLq>C̀ȕq m&Ѩ_];]udܬ;ZҒ8\ɥDJm65S+ԫ\}2m Dر]#ibWJ2kqN^%HQ );@t-F|4dyjA/>th M+ DBN4U84ajWX!%-~p[}X0*FVPV{F{1'ն6Yg-?7bp"Dܠh7~J|v=(0IJmlJDX 2k}Z=etq,ԥl}w<-Ā M8_F!{tW,E`zJ`@O {gevdnW r$EQ49l,L;*Zo@ jO!Hod<6y&BȌ} qXy6zI@JXzKЦ?5YyǏ9X^EPI|GxfM5#C(cBi(ahx᪼G=UdOuCʎ%-]T@{Z##3 ~e~`2s3%nK|TejkvZO@znEge 300 EWb4HL`SMv% ˲b^,ŵ|ڎK٢:)ɚ1MP]N'|ȏR-,֘~~>%F[ep:9cӒtBw0Kj (S8Ƹ[(܆XwJ?d"FEt@O IutCτEP|`G>7ӥhlт2۵qל 0V'ۯ3T{t,If֍A=*$D'st-o_\9m2Q]NdjIzi zk7[!`*6Ќh߸F9=@.2a6wG3^@4n~&v9`ۀ'Ӡ[b%IqZ=egDpj!YYPf[;xI[p2SXDyQ36tU6X/P62ma2(GoDjoGb04DVdp"k酦0mKgH ]cS'P|oͰԐ#Weh CLΙR~,`P foG47o>pNJ(-P+L7_&rE;cB{,xqt$8[X_0h+NB\3~Ws=w/n_7@GFYJ`Pdžkz:+o9{yD! T/Fv|7̃j7yCowv{:STJ族m&텾SGhܬA#Waάi3[ˡLH^8)BJ>sqEof!Y|E%3")q)MrͿ-:_RVrtߦ3$+?l%sfwԕ )n'e%p˷!.͇9ƿmgT+/k?#*`Y'2ߎբɧθuOI;ך)"G`:PqeR)uR* _w)R/^-z\t;%3MHȥ2Ѕ[@5\ o{=7gXa iz0cNӋ#j plF[eZFq )3JOиv҂3zJb|[Bь 8(?(BШ^E.ϨW.:EMV X C#hąl^Oۉ$:md'6BFokJ> 02aPudjerlr{+J723{2Ugj@3 C!7Hiwю1c[kO n֏)zl-C9m:^:>vK+MOz_K<l_:tQ16ܰ\ YFƑᤂn$j2$)s=S4+[gYzZȠJmI /q* 9qp;WstU r(!nȐp~8wqqA  z&!3M:z5NMi k-_I?i@nϵ~9\N_E+/BMg{s1_ +uv(<+5Jϧ-bEO-kAg  ;GiίwKzC#ʑ:0\3{gV2ZI>e ^M2yFQ l{q53is Ums3U(^x)t-,-#:Y-o~Qe+%ܹ4Tf83? :u=3s̼$a6Y-K1 HܽM 2hY> zފ)7*t-wQdrC3XppF` ^l:W rdA0˪Kh]+O3g|\ ؆ߴ2繷\*XB}C :97 h3$/eIGtg3=v`NR@ǀ!yiI?Wh+8IB LOץCXxEL/MAk*'7<. ˤ:;ߍ_!ݞ%xXTJh@;0h )(P䘈"~EZt.YMb͂\[ 6@ueg@ҫ&j@̽Et8w7X6Iګ]QhN±r;]/@6T iig!47B_>~ϕDq( 3~?Z[\V2iAKHaXu*3aX朋i͓m@ZЎۏToA50O\N]0y4JOJ]nYƅrP)2Xn~veQΊVY>Nr~?CN\M.VX5w,ᡇӷ Uի{쥬7s\ht# AVpg6Hmޔ<6s~b)=U <&gh48/_KTMXҪ~#gKݍ6lpO}gÎ?@Y$ma+d,We&jSd+ tT,I᧑ !6 ەLNV#EUT7M:&w5~Fc~KRUHkr#`Um +Mdͣv8;Pzuxb @Nbi AC :M"r~":%+ MB%ǷSR,}ጙ{JF5OqaiRG> OVmzLH-+tJnW Zޕ3KOWi7 /@+'e0@tZm6_%4 Zjiӯkf;\u䭪Xڷ>ҥ@.DBy}{(L,MGae,t ][}Ub4+m^Ln?Ks .(f2{scXj, 0ȣ@47^F21DD̤#׊kDNm| Kz6Tg OD&V9U9Ÿ(!dH`{GPynB# ֶ۟:ʧ5>xG}M)^7a bz&éJ:S$H0,n%ګy8ЄKM!Y<|pt?%iv=UV[qY`0c ] 5:fPſØ*.%F3JՋSf hXtTᆬ@@Pty^8QcEM YA*of{Aڲx]P:nOUghD (\fE]#+|̂Rp 1њ5|CuBR jvf3 _ 59֒LmȌ7zEfARī,ۼNqy~!L!uTM~+L^sU/½EXBفN𵍾LmE-Sr׫vrَ{ N ?E;wƺ]isj-*9ͼw\:chj#7F ybA PZ@P`v4F=;1([(4OO㧎; _!6Q#e(T ҹ$qV+ MrgѮHxKEk!)*R+vkp(ݳl6g#8pzF B']bWZBS;&k@S&%7ewܠf%ԋ'4ljLrc׼b͠}ܐrbwŠ^1}ƲtWu1v6΍H<uLj-ޯec5VLfH}W]I8'`[w:q"׻s/~L603pzdȶPU46>@T95)R P⎨}_! b }~Aq=S 5"CVȬLdKP 2t0cjL_GFi-gƬн` FYN79/*=NS4sD5_b9Ndr4U= b&qd?<9ն!y> yH,7igÄKzVNODA~АC,ʄݦS"T%Y2OiUB[f`J:R! L0e0Tskp z G$vzZh`wt3չ/Rt018w",y8]#/∨w ܆!x(OŨ =V[tj oX_p~dl#Hu*h%lB9`ߓVѹJf/ i VP=}6L\+帗r]h'k % )>pKx!uS2`,gXf~wfS99j+k,QG`k☿ǯ2dJ+K#ʔjJ ny6)Iu^&~ &J,;za**xnNQPt2 Gi.ݣ(l doGyWC9M@N/Xd n5vh^R,4  >ݲΆֻ8bP-%vxoF] Jp8ic:'il~.Hٹhg9_!4z"g?/;QT]֒F>fנP%ٯy?FX "| _!TGD'<#eA@WK-Wj-q)֢qxM.7]z,s [*vῢJ8>-._=VS-f (Y+V-A!OdSa;0$=r^YJX7H {=VՅ5Okݺ~gנ;<ȁ[1bQ͓2P~#']x勱lIp0tb(IC5vR!sZO׬jMۘ (f;^o1`%]}gPޒ Tw(45C)C;!c#Y{Fx8ް1ں@փY MY)12){"3OI@(zUiH2OsBuﲯc|_ ^.Q\'FV+ }tb;4Bʱ/sF"ȼYL&}WqkwJR:]θad:9f+_Ap9WHZC):`qFɍR?mqir 7LJ\"dlἵF4?uV8ڦٖ[{}r+dn똖+!Q!f$Vdi+%LHj~D QBsཏӮ+I8<>?(@Iႛ]k4Oo3.=Qrq: SW`ЦJtqX,;Cq~z6ALWQQx$[}aTiЍ>~ÒR1̰J]ҽ""`d| 3p~W?r9Ay8#|gJ\Ksp@p]4<@~_aѢ[z%kR3w# UԘwB g_ilfdDr<ȺgR{l]CyèB(su9Lv+ ˹(c.ifK&<#A[9e|1+4x/D.v jIBWFه_Aۗ|qoBF)ƴa_ GX(Ag\H2ơo"ZM.(B㧰l6ONP-3%7IT%hXxV)UorI\I 能)2{e!OLñ .i7^[V8Df7qnpt'm#- v?tLXʗɈ6Dܐ$/^e.DK /370/c+AQ(Wfuq=/ծ %aijZQƮ^l^RXm" d{/ *t>7v$뽶*Qb#=~$1E}Rq8ydL )!튝\t\=o2%UPz}*E84_ ~P]ǩ 2AË%޲r͍2Mnmʜlu~]ez8XM,}" pB!y`PǞvAM^9+Լ]N5f9n-}괡[J@ʌ]4&8sZu9R)_F *iohv6FȀ(ķݼ3#ПI½nlsd_hG EmQ"\In>v-37ou^ y/9ď ?ah&Ỏa!B/h#.klVf}V ?,!2qk ybo1deAg5ڸtWVIS p$3gfJڗ1yT8aLX$GtbY HDGN@tBhl8砠[`>bՇj"D6RB$ټT3;麅*=c^o}|M 5  Ijb#T0 k͎ RYLWk} 'vRcq/&1+Ĺ#  ,w)K1Bdz~V_S_ _jc=,7M}S4-3+ط8Sߘ}>t5l$O^C[kYy>6BurܯM/Q D켗. +GfVOY˱A}F4þއV\˚J0fd}P;)z7ڼ%U! M8tՕy7-OR| Ќ*'"ƕgTȝ=P.&lBDUscrɟlc,@^臘%b;# bZ'Dk+Et HFw~1"iy {)2laVh!J5CT vKe6{3>a7rXK^LW_=yې5i aGˋt9 Gٿ^_XU#o//Cn(Kp5]-dx8{( ʪ>lZ 6GW;Jˏ_"7ym:Wĥd1:VJƗcNdM5+#b8wNo%/aa=6|;c1K}Qhpxxd dti p.9Aa ^(Tfù\K;,Uv0էDf'oʊCͧS%'۪6kt?.vxA dLQ;bV ^w7O8=jg>0j ;Iz7cc2ndWmV y\7pM åZ]S˿r l  ݍU 8,ͥ}a?|]gꡇoD@]41\Wr1V;)iK͆}l'(W 4[|^-Hm`eqsLyi 04mꨠe63>)8l'H!/G+6ezwL:`ӚZ]1ĮDxUtQ#ԾH.EdH?I۫an͘0mN/ TeVPVfp) x=ҩFƀ8hD KprLf`b-;āK9 &ѹ!~q8|ʒ&b)|9A+ yfWlѧr>]*xa;opRye(Q07qB:{#r^ ŢJ6ظZKw'wler(ֱ,"Yۗ_tPv1K ZXeiw,Dh{B]EͳO[zonX `y͞u rs\A6] bxA;MlzK{V2]/fLjhFoġ~m%'a5pKOܼ{JrWт'nge(zڻ߇Aa~3ɋO;Ez79 >}dxE68^A9}c /xe0d 4[ v⭬d ̞շWav|OɫR Q딯Za3'$~49Ǹ} Џ`+!Gİ&J vط].+wyx۳xPuҟ9L 4t' ~ٲAt‘}QEC6,w_F~FTԿu"HosET~bO7Gw"s r}M0|Y=ԻZI%Tr8œS Fa WxG'q*U%Lw!0fPx [NYr_$ӚdKOfB4HGNZ\1i/mE$^xOE( 5#7q *>7Y%GutZcVzG|U6VsJ]%V^9 d# hٛ7$ f+6}oL"@;OO,،3Ȣ:bh3jsW)>2P߯ '}QEL_ASSs GL:rZi8t@~(,qXQι{\7@ء4YTvn0O7Z4R]@^?WMGg+FmOqBǤ5m!G.jDVd \ݔL'ް fn4 Q`p e=+H|UEl㸰kQD8@u,>{bx#F#:\/qz3 I}SԪ^/TH];nP4gJrs"hD[C}LꢼQ5үDY =ٿ!,rgM5HƯ"P)]Q L m4*~x EODvsXy*܏\l$tUb=rXPz'm@w^:Zj( ! Ct0Pfc"+))*y@E=R@p*zYRb* 'bJ©#tQ -dУpZe<]d4S@x*[%LFi pMY)4ϭ@ rarM'= }wA 3T;lXh}btđT,)\36 b O o^N][?{$$PVF6zzx`/$Pc(WJ&(<Ȑ 1'BOÍ]h πι5嬱m?jginVhw{ĎOjdX1kdd0UPlL*Y ڍ/o&3*N>SI8EJGjC|Ӓf*ʔ0{"'1 fW>܄ʪ:EqK[ ="JL38a%Sł Z;cm~ z7] -eoeV.bJ}N5: }l\M/HXYUA1ت/ONԢű$KcncG"eY Ɨ{n4uѺ°FJ8 S|Qr{{Qb楄|LywIR<{@+1i [_t _glG^=rB-j<XhyA_r)=Qh2-!y`=!n6)P=(.?.AN(b ,'7mtIHWKŤVz{S!=Dt8JAorq 94#ΗWxcYnޚ(JojQ n o)!GD%q ,ɧ{!vJV~eCraJvTOeL/C. ? /HdQT򠾓n`De~͜{U apMg\Ф{5P6'n1OA 2TJu/t6f+ݞ}*(^>ZZ/f_-tr&g,E >"0Q,I3%=q 쉼U9t"qb*+ܚU9-uWߩ:_-M?~J( 0ExY!C4,^Rn1Ջ@'95%աЇnj~uPV׽MrW> @滰I&iaTN+$$<"h4٤Mu"lTAo T Ŭ^ @E{RTHgp/NM;sEf Q^Ӈ]iO XWPt he.; .6`=V_mj;xĩ^?X[fu7b$WneE8rб31VƖbiMwBP*2l}X'H=!G̦pDS&)㮉ރ꺟vAI\dY;P,V\UmOXhwQQ!l8ndK@9(c&zZ=<'Z[3N7%ٰd]M]P] m37lJ'ʀ1{MBj@= 0VܗwI h70M{mWv# G '1Q"+m$Ba!"0|]2>klYY' j(̑ڏ%|frwYUs1ЌJf`#@6cu-+WJ*^$Q!{<J5hS}-s #S|SYs&cKyaEv$#[$M <͖0zmfTƮkwzJ(=K[]{|1kP5=Ƃ 9dU5/ur 7cѧx Ք}A]0RɎ_>STn9?^o"@pŬh6Td 6>0_7k6))G")ɰ/瘱fܨ οuFI; ?f;M usMۮʒBIxi}NxWE="Ww{x oOf\wjDa= ;-Zj]yTCuYOud"i)"qKFbyx;(9m꣄٪on:%߁@\\QrAS+:Ka h=N.\ }\T#}_pnO\C5 G~ǁB4jl>^R:QmdX GPgRIV6-l1E:$ tfX2 0ȹ=4%w1{ǬKΒ]ChO֗e|}7RhL5NzdNqߩQ̽02xn]Yr_Dh{ҝ@Cf*wج}o7…&sשǥ.莿k\)"8'[tEFb609 Ͳ{F/ nLʎv=2=ؒ5 qٺd=Ll)z;R5>Ӌ3:₞VXl :5ȭus?DU g̶Eh&)柊KB{ƅݜR?_MEN6%'콬C=wdAd Z ~MY'DAΧ/.GNp5O6ƾ| (i=JE<6(|ěd2CbWBtcFn)/V9Ž4w*^Wu CXo2{(o^V'::>N"&ziۈ;8ڣ4ߩ:ȄL_9GzV@拞gFd+&AC<|'ib;},)<)'wxXN=94l`ʪ㬺3Nوt9LmAp n G^#UR@Zv&4ޱeV[V@uj Is@T:oqokU^!@E HYu)]ӏDiz E6'5⑮Q@gޓʾʩkAro>i\rtqf56l-S5pcĕ ,+ ~Y=UaGN%:Yk".X)_ރL@6+V3t\"VĻ%1듎# }LQ6Ihm^/gȊfcPSs†Qkڣ, O9:NX|]ب{ss{ Ņp旣_H>Za#-?yg*I1=ѝg!,CݔFHLbOs.0 iaLr:11.$H ty|9n~鹖|>&mbc\LZcljI[x,Q򾹠CcUhhݜפFOy Axoy9^NS'˞z~j69٠q8Բ[m?f6-Ә6‰ $ݗ2xuiC0A[1AV[C6Y%!R̴b7=#$ ݤ"ǭledUP~t2WeeF MUC* lC?e -1qKcei؀^L †&aA:/xCG*)A򝘹O)^R<790 &gDsHdj:j1v9$ǂ8̝G"q"pWRULCju$?Լs]llLN l8wN{H(k$XsLy:=OٞNExqOXd2a2Oa:Qܼ=-uOu 2?K7p )Iq\wr)R2R٭CLQư5x}Z0)b It,O-or%/k408)iWmCpCoT=C^۷Z/~`VZoDG See/3;#q>H9bs9%F#i("Ry( 4-~"yZ_z7vSykUYTL|m;c*&D3F##lOXUenu`+/3ɶ* ])P!VcU󳈔6FQ$A- Qp"B yuƟ_"|*E#ϥc!Q#U(A_d&sY$vx*1cPpj˰B˂ LhFY(*;exTZ0kղSV\Oi4mx\e8`ODŽb ,MPgȁP#:4guOAeȃ^QSj{O*J.FCmgSCn?}O)|N#DWE8&dEz="@34|Nf{wYE3 >: V 3 Bg󫙬z1YZ(ؾ,5Y52~@7~7 ylz2 *R~5"jj X&ˀ:!o-_1٧/y}wxTy@yįBQ TR1vBQnx u9vsIstˎipEI* BB+j$)8Y';ӷdǭ؇wYW};X-LxD$<.(U^GyD֦.6))Yݵ>2ĺ_]Eiɱ6=~ @4% ])mX0 UH}P\5]vy#J( YܔbɡS2c͉.ȸ&nO1d;Qt?& s#@x]q i@z+"Ůdtҟ-/Ug p,f"QtMrn,x7ȴlu >|<`{U ]QHE>$ܤ*X(JlS Ře~i$03CFBo7%8{H\Vޡb$;ELlj 4'8! gkiH`Fx~/8tNQ"b ~-CNVxDh{E8`h` +(;ʓ-[`/~\aÎk_rJ Ă∶ϻJІTB/ТHV̭^}S^ই5ĵ_bj$OK8"X 6,l 4&ERH= %Q9Y.1F0*WE"HA>R͜'fSHm[S"5'z2Qi3+";CX$GVX﫨&(С4*jo58/ \`^&n3!@պ3ny5mPVZgAHM$粎R6=;+sKfw@\XKkoCʘb_Yggwk=a&xOD?+ zfsJ \-R$9zF+`|x7_Ɲ( V"1 #PYG^*Ӹ(14TlrZ|}]]9P`cS?qGd_8(RଷV.Ŵ]B^6'b гvwKfG DR<= 7@<LWk[o]/CJPpe|-w…:wԶbw|ZGF\hwHEKY$pUfmY'l] 1C 16k~o{ڴ7HMj@Ҩdž Kp!Qp2DՁaɝJ'4"ϳŬ0ΰ?9x-02bE!*j":=?'||Wk,WFH|hl&:㨵}A-aWbʩ-Vʂk m)Զam.rO|c+&ȳ\t˓s;0͘qCVu8lb`x`ȴT3]ʥ~k x|ynrS֬V;v0ԋy 4 V !jٺyp2ƥ 5%>`\kuTH~Iz5ڷVUQ LA SɄ[vED~[E*T~U0h3YwDrMq8%@Qye|c촞O*Jz[ {P"zHcu6OuN= Huc Hѭ&|;UxFmk'>K^]8?Mw߈tDrޓw2ZxuS-/S*5 +@y_HVxvEC2i!(d0 m0ݹdJ+J_53Rsa7˓_whxO3!A}+rXz\ZPp+^rIh#>vNhE-B/Mj_w塔ax.`;b7./*tQ-#Zqwݮf'XRBK}:CH ^L7K\ӽD<R5DIv R%‹#7a;AtDMBI`cӤڊF {*D>IǣH +|`;bF ɥ")u|cKxjQP*裭5Y8Ln$ ,rY2/?heJSy 6?fu -2[`a!J54kU$vҁ\SR}jxgdk&kΎsVO"]˽#)Qu@u'*h+!i`&?z7JKp!IQft{Atk<;`'u.,pM%nSGy;A ˪GG b}CEܔ(`nH fjRj)d%la_ta0P^Q6a=d"wE\ }z'< .Wץ*QG0s2*H{!1Ivk^lDjq(R ]"=b)>ua<6. `?C2ʂed&!,A-YG:Z&9 \3œצ2xkˉ g\ze%nm܎(EOWՉ۟(YkͫNT :xC 259I ę_5PI8& _2_T;]p 7=`+ [8?J(Z1#ٟz6-/BH8 Ϙ,P}."Ͳ ZY$cP u Q?-LzcMiLSs ЬyWuvo{4 [f(dEr%I*vs΍ɾ]^wó0/.m/C[Kz;ݗ_(&.^DM)\яd9i#On6,0JF\ޱEt}r9lI6uA( e7a,\@ 4Oљz65ſ#ڭ</o[zm<k܍oJ*%F[P. W1?.g by{0s*fWt#BA42W,%S;U9Ba,yKvې]/[ŧ]0"dly0)u Fg:ڂ}X+l8j%P[1ÊOb/U)swy$>hF9@Aߢ報Lw f| 'e'Ǥ ~Zcpo]ȝofRJp<3n~JВHr5skR\F߶cu^_քڅ)U=kZtx h^?NԱo`WgW5Re2a]2`pr. ?١' AsN's)v s +ͳ&GҬ6?l:9 nLY,gX]ti!=t\Ԇ~9:x;ef)濙)ȾZ>(]'o-&˪>ҽwtʻhz٨̔ 4A~%3N޶͜zvHabԆD@!QhinZ.[vK/on)OUX{,h FOVӳ(E 22o0XPZ#($HfQf]㗌 3}iX8r=ADTlx0q[Ut ݩ^N+nVb#?+dHؘp1k&]7j*H6ݣ􁋆ۯ "mB;1 J+ȬD_d p z_xR(0AсN?(Z슖<% Ir?!8cQ?KKyAH"7鬁6(`p!|)<,ɀ@L[dzB06.AȰizjFhy;q1C{[P _iJ]rufdgPAE5Ϧa58|r[Lw?v*j=B&s7鏑[QN9O(%^(Kk4rF`w].ۯ'=7BP.@CՈ??:-W|7f%}o{2æ: l@2pTqϚUL}jJ =zۗ8mShn^!Zx;"`TvVAzY[ 4g(cI&:> s_xzw ӷ@+l_Iqdjy[)NJm(&Rߢ5ps%ZAViL®1ˋ]cB &1B*TDR5{+O 5.ul0 +|WKai ({&BysEHbzwCx 1G7аW-}, 2Tte 2.8(=u:"j1]&hb{X'KEY>Yd9W!7C!aڕopb_:2qu4ʑyҵ"4D-mr|JZL:<04@IǗ 6h֪3-Iݹ{M)q d1GHʢT?~bEȴ@3+Wj0!eF?Elf㗩!G}ǩq=YxlEݠn|i71gz|0fb^o:^=X&3 1$$p.nɪc OҞ]ʑJܭY ?Q+fBChF@g5BpΘ{DHlhųpd:VP׺J'2jle7⡿SfڐNrMRB1Y:GK+yfT@4_x 4wr_wMGt >= XD-dq0l54W?r|umi{T>٥;g$<-/2БLʦDi9(уknf51_ΦfA/ Ioσ1q~qHX?|yNԖqRpTx7HΌ|4T!1҇J>:e.]%0k$NEoSed\Ӏ1Ƿ*8eMta<FciyqK%:MtTtU$+,b! x "*\uX*'(W,f[XXža{x%he̫hds*I;:8&pV TFJUy;N;M7xzUZ-רFu @LaA{9UE@3w/=QPŒoӼtLH_yqČ ŷ6PM|RmE-uofmb?' ϩ)놼YΕ|0Au奊?T"k+x4Γ/] Fm ~쪓% m"HSr\!E`/N1B 4OK1T[Yݢm Õ pz1wu5.؞r,Lpx}6ΜЧ4uJNC ,7jz;i!l@)|zESM-}RG@Jy0Q^k=<6'l D~Uc)wL5+ K]9@)Eq2WСx[mgͿv쁴   9`c8-WCj?Bc5XlpbEx$y4,ew  H);A͆%otͺ1$ʏ$FG-V$axM)PXNG-Dy )P6#fNq/b5 6*߇K{? 0ΘX rNgQ(&+|ߩ#}{qþEY7f$8pr5`# &CQ/yjdVBX94oC= L4Ѭph[rc@?D$wD=kF3߳Zaw½f ςif(xN ,wE't!"} Ib@:2#jGrQkQ,xm}[Ok LwxkgDBl3fM~jԦ>1}2ӹJ'ILhʓXNҨ!IerdA5*JW(SQ`r Er@ lKbpu"-bsAu.1 T)B0\ ,, J[/PuO%m{yZ~2!c߲?ݎ WV&3ɋdgv4JDeM%1'`Xdd ayx 5D9 2 q5Jw|Vrwuyd v3(2|{mzPmے5܍dFSJg}+1KvZOd?f#S5~u}ȕdJ"b鈭"+ rkN'⦒Asd>0G4Tn&o.Ē/,4û <֨3dnbW=%L5WNh b ͆t'Z ݀(IGG}zRvLO*]"h(Y[6LDH@ _ZHjIɶ&aXftR7 䁭򍖁z6FɭEZ$F t$G<:i5 {uPjLg9^mX) _ؤ”Y|a#>Fr]h {,pw\ɉK=O-Ĺy#j@[8jL1@z˪X>?bp8]4Wԥ"郙[~ǤS<Xmcp.SX. "H_y jܚc3 #i)=bb[?|ښx5#5hA]4u1U||CD$kXnr+sUk+Q[/'q#6Xr*>W=VI`8 0︊9K?&Vy ݨY[nE48bJbť¼7C>3rٔ{WV1:ٶ~&֎n aM"4AB>^za+)h P-ҤmXrO/p7 t[om׬"+KQMW},g gG\^bx8u{&i\Eٹ"Ae8"DWS7x("i:5G(Eǖ?̅=oi ;{E0|/2[]cDl] ڌ(oŇ1Ưx+Obϻ5(SM]̓s,QO pYS1ocKH2z0UHe9^IV^ZAwd 4T,m^ja|>FX>EsO7x[lM^g< CmAjrHJcsG fHX>{d'[i;uM`@S=q뛩p+/Pr8u%uHmJIa'PQ*EMBuǸNDvs`S7dnx"Rg )ELDy5g J2fC.z,F#x@˚V~i#V_otAĪ O|xMшPhJeEĻ82,JOhPrTq0K qex;; 6}9-@תС#T

dR9hhv&&!WyIĖiF)G\+:LҤByfD#),3.qƤ:'B~uimz퓤f#4ɮNMS K!;ɏ_4sJͺrLrB74l)D]ܪg6PP֚~3]+!Vl>K ؕfn}-!F<.߸km:dK[(`Sld`.#9-|3Zrq(7J;In'O/)=a3+ kI|a X^V(bELN>hR ,k"GЩZ]䓋NA"@` O2cWs)ntgRD`&*glMi,7;N<Vh2.]HT%x薴 ),g`Ǟu,;P}O2,Jܰ'V]> 9m4?t@ܜ8j_2|&d+݃Tn]?=3sw.5$7T'\֤oJjp+1t*eV̖gCڭ`#ֺg権/UwmaPdF.փ+W1.ؽ64:k_@ ,_QXVMYo?5k)ldroNm)^݊y!Q.'JŪ?)ҥ.\7ڟ,F$(ֲN U[^04I?{>.ĦxuP3\OpY[ rI@o'j }x 2=+{2@K(H+69ސڄQ$Oz33Ϊװ뽇{N7`loE̫ٔY co|m=z+Zt0(BX3"WwU7x [Y["zx4GnXF!_ȎD lq򉰘@L*Z|PTi`mFk?t”| a|v֗BCQZ鸶H 0B׻Ihpa'?G3Z!/0[!m[-g&*n/nS4bUGEm* nI]BQ: BQvl dՉ!2:1LIhgq%jDKUJN.jKԜ+j!WmpK%wU.h hd&(18WHtq b%{YB{$PYXq{zDrZ@40Ӡ!SCG`I}",pAvtlzBH;Ri1Ͷ=lKonEѢ 'CK%:}[ DILBEӓ>̪&Km}4tʆsҭ) MO?]Ge̫SE'weZJ.]Pߙv>QnKG3 oR $7إ1T-+In]|Ϝ(<E^ZM1k\ȉkJnn8;kvCJpt65*w›õ qR!AX@EAI0*m.ݹkvK՗ diج;`PWDAC] AjTKDqFsVϳ_aes-'|dWY:=ƒOWv~by"{km}IjOSWO Fr hq-4,xA- 4kd͎xF?(=@^ez<2AclU>rϺ߼ķ}z4ot5d9"ZTi{,L -i]}JsJFSCFqM1 zs ]+Y@Wa X̌v-FYW ܈ M9m|>RBݠznqKZD T2K@o $c9K/$t2CXS=G $rxΝN-;\pP5Z0dI%!̵~҇zh]c?pd<2~B>싩ɍKo7'8|O>h†V/O;ͽYSYKT9z86y&KG\ wjO%@g,Ag11u` c2ʉ#uOJ)B鍰A*?`!Xj ]!{yOJqJj{SU'ϧ?M\wangd[+]ošNv{( Iб#!(L،]F>iGGc* mQVH=sue=6a2뜈NҽQJ F;; jr*#XLժ Xh:mo)uzP_x-㯆yOʀ7ND$$ZjJy_)o"pH8TvL`&`  īF'5Hj._N+ b8g`¼&$ +ߨb6ƞ:d>!HiЁ .Qۂxû/GViIlFX#٦9BM_ijJd=nkW}=VkG&9fӨ6! 20,i1v>HV0nizb-wK)dEhkgm&U:*UtCJf 7?Eoc]h;kvݼFhku3F{otf[H1g&ֆ#ԯ6[/;oF Oa5eHAe x:oq#*M-*7$x OF邟9@"a+3LI;B{=ST,jrǭ3S=*;1Ӹ$lrW>s y7ټh#yrQ|ڳ}ӆKT1<(&IS@"ĚhuXV)qCH8i8mT kcg\8Lb*=һo'$+Zcc.w,{H618T'{wX3eV\jǘ?Vb&l4i!җ!XۉKF, ǪWyJn55'r?T޿ Pf SD I)EӋ6=]&'66uG5eGkb(*jش"i%t8nmP>512~,BG"˸ :& cvi reHj Jy׻)R$āEukABwK!ۃ>vP3\RZjU"cBmRs(z3>l ط9"É:;j{ϡFU hwX FcH[\%f ~St""Lj$f7xKIxSftg$\C ǹw؂Jbޔ)x%'1Rg /lŠ9׀ ( s]hO=w{mk>x==Ϩ画`X]YiWJ* jͮeX2Got{BBHvÓ7=I#Ac %3=6~^JM[Dz$]Y8j=*rev"[Z)csBR/輔6ncK*uͣtd<íTɎ~#D$[ݏ?"EmԻ)sRQM!xC-T K'd Hf*eӨ:כ~nmMޫ&e=m;n<,+'͹)Pbq>xW_`a=@B\aFak=rCҕ,=@:nPZ^o]U\{/t4XjP[\&hU埣M#?qSۇ !xn2Mj1F8f.39^a2|T3r.0+ߪ7<ԴnS/"@fҠLϒzmѾ{IL[K'(ދV!h𮋵z~ʅ!gd" =mbIXXΑY6c!6сʕ̈́*"n'4P$GԘxel/۱0q;rmo,l">94a/F'v|,!cS},mRxoe0492BL]p{2J:;pzN+"NnLp}ZnvQt~c:%v1*Lj".vX7tk?l!+a̦1(^Z+#COڷ:1&OjcidVE__MŚ{l.tSi,!y)% x(!}Qۺ RjB"[f4Ӷf4;[1 p|sbD%u264]X/V3qk @_oY ?P+Оn65"U9e}($f!L,3Y7Sȍ./) ><(k^Jt N- ls墦lF4q N 'u.Y0 {~GǨߘ0 z~nqy;ޣM2چr6 r \?=]p#Зi=5̋' J?Qт7cm%!(]qk¿v]w]bSKZ xڶ 6/%,u˥WTEnx+X5P܉ގ\)Kl^:q1h+,z XtgJjø;,nd'aEH.>[Kжנ%])t]ϣz[({tS+瞨 :'5Ōh>1d!-gL"%iNlxY MLG$Rr2eqV}N}nR ᫨өLxd+T_4zi8Z*]z2-XU~Ž`t}ZBiCBKr ω DprA *! J{j[^TJhRp|i!ٳ3UNLcSDRPVW bW{\f.~`!eÊeT/FPȭa*^(p~?@H_![s86͉%V45?ɘ ƙD8nȁ tv[B\~Z# ; >EcDYO%JC/G(k ' V6Fku?`!K-CpԱas)7h[HswKWMo2Й)!#}ʉ %p#Lg6UDh  bBf81GJgP7~*hbf%>ҰDt`;Rh fKycΧ`SLM%0P"Cu` XCȉ̪?DJe:CX$W|b`F݋[dS?tW5]+$G%S'Z71r rk{y',]6ى u=;~&ec(_ŵ0JC aNV)%H8PQȗ: ڝi1m,vyk[Aqx*q /Eu2@ H>&c\7&g_$ 1ݎדy$gѶB:EGd4uUR އx@z|0#75X@m~bezsBhwӊŐҭO|08eUg}US/ {~^WPF gm|Ոbe!R2SsѠcr"!fbu1#+;9+VRt\nDFp!aC)$c4JXhɝ-Z+:Ga1K:=Eb3mct;RmkWB9v6~/Z("C{y|efN\g#ɴ7/¾=Jn=adgUY=/UՂxFb׍UJ/"-ٍfC'G!⼌2)4!gM{W>裃XV̗ݜӛ5Өy8}8Bg*[Zɷ_K.9 a š M9s9ڭ0gpN!`DR60tu2d5qFi'c5ޅj֒[d+GGFV Wë,# UES?p.e݊xh㦌1D^%hҍ2}`4/WH಄1>Bh{BmO{ߗ X֊bϢxU$T'O)gרw@];1mJ. E)UmT=3D}lw٥^ƃٖbx_0T‰M)ƆI3P&K蕕leiIPQZ>To*VkTyVbs?սm @?0 oPK?ns͓rcQRAg&+q ;; aIylU__8oq0J0ظ9xj@!.3Cmnu<(=|C<8A>uԃ/Diټ&I| R@%d]?pцlG=h`*JBb2e_EH:! ǜXL1giA&g%,Hu ӧpeV>bˈ IgٰG7&z KC{(%9m,U&%M_KӍr^:?Q_me6R-!nvf3hz !._RsJSHpLwz7i[)3 AL',|Ց+0{fxVCn[#;sLN{(+E!bom(cbz,n8u }}e2wՆ sck&|B2њ/K>גd 3a^6pCM8&ƸB{Xy;Xc*=(PN2wӥTIcO.M5X+0S1ܟ:A ?m)*9|ô[D7Ό=wxa:YM¤Uf-{y7pr0j }[a2x[FJI2|xV$mZi|0M|khJC㳔>~õ Ⱦd& HFTVh8rsXn<_miPN&,P1I e7i3xӲiNJ;^u MEBd¨JӼMJ=M DZJ#Rg [TAF~B~3q/eDĭ=>œU(EGM/t-[i rSpb $B J  %H-ELp4MˇK_!>In|D:1-|F\l).!-@*lxUk vL4q!JHrE閪lWUESK;w^%a \4K&F%N0L QnbTψa33B mO(m 2 DrG&JH8 *g5܌lP})9\n5 JN3@'#XXDaCƯZK׵9ذNTDc?>vU#W T{:PPN*oI,tzDn]_0BV$܀)$@ y\Uhy&MVEv"h~6C9jslU=pq0H kNxVdpHFh=yߟ썇,K.{N۪DQo"ijZv9j>K/u穥#bsvLAV> oV:H"$8*W\X 0"d5ƷDn&',uhKh7ݽЄ+ @$0xk>+Z̋!;\sMQbCHj{]/ l|}-б# $Ʋ']'0;8>+aҲ0AI_oV Qi8 Z>Z±YK|kcGC0 4ZWIzV\x&,QFy�xI+jh:'E4ic`ў'NAq5Zذ_%%J/u.mi! d#9qgKE^j@׿ITUj в+S[MCi0Ɂgfvh(_J;'lso̗]k&0QN)-z|Mbg㭰MdOT|A~>>C拊*3kI$*(b0TS"OT#-d*Wn EF”+N+j4t䢼c:t™g $h-`B5^[@~oȰ/M3#:Acc$s\%TrI h(&k֦ W0VpC(PZX+ҌBeg\kM;=i-Bmbq7=Ъ{$&XS0K)$h̔vA󥓐2ȺwyfĴ#3[6 W6ɸ&N|EC%2DԷh0AR}ŭJŰ!JDn?1"{w (˱#i~Bm^mz|\Y9ZO8^u U-GXC^el%(;YsYĽ(kFK*Zo=X[NNa?xCwnnc26Gh )7wGO6}NBhBg*n`L_/jR"c6 b YCoCU![i7;Ӵ6LBIJp^>bX'/h"ҲRrCqJ@ךߜFl+D_8|MTr(S'Tq k˩. Ft} M8AUܝIB]E1.OXg: D8&YHdL'՝Ĩ wоN<5^R9^83Ve}tz@Sf1]as=uWE.}v5pM< AI.uVs9hh< qWXйkԝ,.d[OgGZpJ!⾧=@JŠX#:`\"Mmx=D>58}UC 8("cǝѷ;I52wİ1\pE #ck!}C{#P`YYf; W2D$у.TXi9!LYyf~Cپvxrℳcͧ`&. #&GMD<8>#n񵶢֙mC>?^lsf^#f^9^\hX-bG(rʥz"Q|w. `bJ Ө\ /ӧht8[s{ˤyLwx70otpf>\oO',;N!B"~Q2 kWTu~ X策Om37L32NB{r`@ ,V S=W4\U=k3X=g_W2ik6F%V1ż^w'= fE=z,tf{x}{YGq;8OCŹR+8|j_ Xt;6N&jNvkաPh* B'?J?HཬMo;|fy*B4Ve EJoߍ㌗>4,oR뚘ueb-TL3^ձo%KBaMp #;!U M=?(lXc2"wc"E4y)1fX> zfs&\}cLppZqz)Y_3N6VE)UWyEFQjΗ>%%6o yg[v;}ԬY :Sn6 @Ovw}rd ٦:M#⢽u"xT0wvĠ)QM_iA6c?hyZ4KĚ>53aaJG> <,Hr4*H )XO ҭnXF;.X"2`}'-F#E#ikF=E>{$G{.0e $b[u@WLzgfg*!<Օ85dKSF[_QyQ^+έٶrzto֝^%Sک7?NYHT0]QR c@%PPnqgUAjNXz&Za7$n!V7o & ~%Qeh-"&8 )xe_>Q,S؀m^jt".L}xd2gl,kKe} p}onܗ{oj[8'_J)( 87'R{uEWW*la/ALUyH5^@ũ.jкDK|4H)sĜ= ^f>eYe %*OZ2[Ysɬڻ=DމA?3nCM͂+ R.d]|ٿ)M=Uo>!P b#v¾VJ.Ip;m&zj͸Ar/xB2f*T$^*\ P-+mي(ڰ{|.\o9eȴTeY2ә{T\WH%9)Ā˒pW < NMSynOҙ EN]3oFx2xx([H#v]ܙyrH{өb5Vw;GJiD; ixnWTIbZJ2֌XRrs6yJRֲQo}-7dcS.tG[_ҧb֑Z)H|?z.C|W ;vn['rJȄ|sAҟF-"j5DȘ&8dҿyLHV$[R~S9@O,4^A&ڬSPIw+֔ V2R63, Ҍ3"Wq}T|x3UcBa+<SW_9ip鷟v%ux[LS3?M6tZt NOu^GǢlDF1'>uLpQ ӵ.}j }7XmmX(.xe!rD f }O `iiXW\Jpu?{M:BU"{$EzFt~NWvg؜ q^,$" [M RF7]kâP [UImi?IҵP2+$d>}ndɖcMß=M u就D^ y%02 UMsHŕ7SH$i`uQ hwP-\DnMyU[).2\=A#f<'mo? r~Jm{(lˡ/c`)R;0ʴ)NO 87"goVn=M iB%%HJ}J3 ;AԄ ~W 6v1Zx[s/V\lJz "h/ fT3Ոf U5\1EQja3\vcK`DԚ*>;δR}Rdk>!djztﰒ8*;m5_7FWӁ)ڪo \C$JG_ѪHlv4WLlƁo~!FO@d^U)' ~.@ja -#vӱ:28'Y:@ g%)cԥeeI\/͘@%AB"sZӕjO}O*MXW)zgY\Oa@s[E[sPV9ʞC&*xQ4ݓ G N(7E/ζ~6>!I+GZ&jobPDxћ<j3)T.Ùw=jorFmg 6ETkƽo1QO!JٛoG; Q4O,%c7,LĹ r,Ϋ ^%_xB26}akm5}68˽+ibIwq2}aoU߉_{؍^>05(\OH _:5Jn4dAOK\Vܶ *a4N/eJFю%9YifoҐ@^F.!1noi͌NJAs]! ԩ*YdX瀝at~'DlFk2J \-ժ,BD*3sAn~ &%v 7 (%0)jo/6 )w;%6O|^Ł7? 0H{ԱڡUTcû\u0%T?Dn*|lc 'ktYS.-8`S3`|ݚW@J(FS=vw3kmZPy3\)kpK ڸ_p$<eXn`kWfZ.˙+s\OHtdv>o]`utw*Fz5OQ,d[ 6CO 4QůIG%KnDf#i/S-) *=/05"%``$!,wC"K C9FLTfJBs 8:PL̿ 8b:}Dz#F)g"V!ߊVeu&m̒汲[0 'M~sn ?}B>{ %+pt4{ xƻVBj#7\|qG:c.kr;0Jiƈ.TH.lZXgiV@x$SFKV*0~Od"%rVczcH`5Yw$;\C{|ΑO)ix1ǡvɖG5^ * dxY6dT|@\4-۳Q.CutdHGCO\TJg]Ah[:> 21Ha$*$:1︒H=G/;4l{ZZr:Uё^$8W5A2mIMF2I([VMzjYx/IDGl^*O>xYhk=2)ADBvcGHe4^ a+ vB2 3j4ڎJP&wJE'XE!3@k5B=\4#,W,F :ғp"gjbh-8N/V:*H@m&W: 2W j!PA#&WIlAuU<=k_/:jV i$@v, cFW_jы]W\ĮܙIQrOiT?oS5̄k߰\>c--.DΡki&m5 dܢR4[y3C $}WKJT[Zmֆ"GiG4+֓~Z/Mp>O %?l@ꮼwưЋV6gRyY)zOָ@Tj60UGwUєZ_U} ;HleR)jUY{kf 鴨 K˳ՖXd>o-tEwg0ŸJ3pjS !$"=DG,W442D~Dy6Xd+k:f^A\rol!0!\o"hJ˾@~ˮ ݝל/@[sW[+ar*_Q z$2F;qh!+H&,`[ʩ龜26z"[0f!Aw W zqo Rg6$fK4{&/۲ViȒYy̭XɸuBBҗ!ia|f#R _Я`FǠ=\ZyR/f}CWaVhU$Ib60`/&*(8_3Ŗ-('h{P4Sid~ xxv"8煥O7*[ֽ4)!VG-%A †X*bEeDKXx5 F^%= $|F2&3+N5VtyFL<#|œ|>/xDZmէC)йA1.1(/4TO,Hyn cn۷=&9t";nJK>&s,Jīh'X.WۘnXIVM jhOUEOEew9CO;Yx!\Bd*AvڄEaFJj?AR.vVs}0)gbuJ+Q?|*LGKT }*ѷ/ؿD˟eu:6|q TH7qi8_^dkS[yY ~c4FbMUp6@X1:bt쫚`31FOn|n: Sy˜lɶxMB໓a\a'9k@Sr['1e'ǵ=Wȫ WA~KEU$7v$*?w/~}x8F>*&3c85ߞ ٹ {(C{aHXJNwɵ_\ኪD؛<oJ-o3Q*d"T}bLjˡd:* ڛ )%͌pArDJi(] @v0,#q TDMa?NOVamd*wЬ!VUt%k\}wrpZAׁV%!MFCQeekק9RZo->v"@]zJ퐪ˆ,u1Nߘ7jb)gq7<%3}1i 39u66Xcen|,OKTlܮ };p~piQ$hxZz qj$O+*,MD#zJqOk [2F~'|x!B'O$lYku؃}~|D>>fĂ}!Gqi% ͕'e^JK(eda?=I$tu9 %"y1?@{m_:n{{R ܟQrnh[G:|nڏ ,m1]OJ8SB6T+iqC)ҋh>1>8S儶o7ganݪ.|Dϓe h|/PME2bpe u:Ƭ'12Ne-bĢz~?f;лȐBI'ԫ 'ZOEު.!;%|ČH uiLjgLOYAX##Cz#{ giwLTӄcKdf.qOhD %ߙ`0&Zx^QK-+U+/o~g .3@JrFO)Cv0,Ⱦш@G9x PMnI.7:r(ā 7PI\5Ņ#\@I( /4$ýAy8`4 38\.R93P:R=2e8pBIл}`L}`kbK(6KOێa=Ow++Ds.NB GތX35e{iWF~BtHWjKB/1|BR.㣱\eNK39㒂Ip.0U `²X~n; 0Q@NE]V^n g)HCƳjiSEz5fQ8me4['ʯ@?VDډZ؃4Ƹvw݌b¶!<vu^Rkl ͗ `zM$465>'9]ZY^h^&_MϿR&Js z0ѠӮ;F*iQH}} ɒ̡;y+zK/(-o%Y'gp(\yK'j'0YHpkEg2gŹxV5kCPٌR>ڟV:#vs[VvU4J$VFB-1rԣ+pUkA{8ͧ́Kt˻@T(,B0v]$\9wsϜ+!4"-L3p9'%xny-o%Ҋ58eTab&kuF)9mф\ȗkT_8Q*tWָ 7l,Hk-]v/O3t t~>#>7 즋>\o}[^dGgQdx|0Y(Y$҉"8/T[_{.?>DмΑtRǗX]ic/Ȭ,{ 16\I$׈oU2jOPG'kAA挎Ze^7;Y|u :d%mN_>ZNCH:F3)l=(ܰ0 5,/V]wMtecxK&@\{&)a~  tx ퟏb$ ji< @hEvcW@|Z6).󖩌1r0P1n/R O|@,Z d;,߈;Y49YyF Z:0RS %~4.bZcB*2gu 1#^hK+IL7g K !.wEځEcJo55HH7N* H+e[=$[HxNGwqݒ_(ُq.7!=[ųC)`u5ΊTsBkr$e'/T uw3zr.|1EZ+tskDA,%ˈ&#cƞ.Ui\K,ŵ=';"Fr\{=rrhh6Ye\Vlq%(/\sG/='Ŧ1АeAiuRv]Ku'مVS^m^۾G=u>EvLeҸҞOy}-|K!K:9r7ӥHF]2[oRg<#.# ֻS7[:$ IũhT /Fz!R*{ȢJz;f߆Ar"C {/K 呤hl'Stv;=TϞnZ8FRc'J"̴aE|rҡ?h:̹ƕmq!b5ƈ̬׼&~Mh[O-/)Zm+MB ܾVB&AsZ߲ #1"(N9 4Hd%z0ZKCPQkߵTA2"#wh)GD 1tH:G{%.F)x N@cՄ>j#CΥFd{62YAQŌop8H"lHJ_[_i|g*Y^: .f'ۡbBx(i3W\R IN?%W)$I˄6w%&:g1Gx!@N-/ji:a!զV;"ZY4d Q5 P4>@ 6Sٖhk`l=mۭ2+DyWQ8jHR+k&oQ *@CEaMsl!~6;eJ J tj+^.ۂ9,%`D*芧h'z%A3sq%FC*l=SedT$/I|oS݃ ?GPb .iStW+Ed~%RܢCV6xl ,J?\oc C$+)LfoG2 ~Ǿ囁{Y/wtbhwI; \tmO,JZ%:r.g#{RgUH4ʌ1#0cqS)Xy=;:.2yF 6xzQr/J s~| ^3[X}`[3=&LmO YT=9Y잨Y&[huzvVeREF<鼺zrPlz?G3Ӌ.mLZs@pGmjiK@PgZ"z+Zyc3A)ѣ/xH Ӏ/zl̮{)?kwQV]cAx{` |f`aJnQz*b]5-LAĝu'w3^ ?2Š4$z sYU+%8aJ@_B3:ʅJvICh%r )2Gr]37e =|q$]pmry.K~62aRvOCRidw)$rR( w jB6߆,< 3Y9FXuxBeW c Uϊ#jcQM$bz>; &&Y 1s͎|!zj۱~j~ V/MBG3 fFV: 5{|E]Vw3[5 ;@_Y%g.<5Cy(: U,eǖ|g#;`淬ahh@G+y.ɷ0 7'-dq|-gGH\!!0ɭ·]r2zh+l\1U9n $yUΎ) %. bo[j¤oyx?dD_aMrwA=ӛDWFJ' 8( N=xQjbEeȥsI᝽A n2'\DꑡrjKQ2j戅7!5# 6EJpdhDKGɣ2J5!K1$4qv8%=JbwV.QHI~Cb$Pb/ ]jX!AWUf1.@& 2*[ɾhgbb!LYSB*-®>K` rpG{URX{22%nk _貁9;*ؤ.,KݬnXd.חkfjm#;G;ޢ'cnʣբXԫDT S[Q_UcH&[olk}v6&[YL8Ca@Zj 8{czrT5ZrGG7`co1q`ETpۆ|ǫ޸{Wz~AOZi ~aGFWdsb'+x&QI'=tBp^Ca۹ Ĺ)y8 J"HA;aCBeR@Ҭl8"P*nKQuL1$-.$w1NԽwVp]$@Pπ ɾ2ƺok<<#OFS@x f(Z6Bz:MhMჁZ-sՑOVϾǙ @tƜ+ӌ=c4ʹyT6 3zW4 I7-B횙afQ"l$ae1զP4WJ*W+ƹ}fJ홐$I_ٍɑ6!`QT[zDR o ^6"SW=ƕvkR(BoQ#1!<4 p Kdb>Jf:3A1V7>D+6kh9U+N `,8Vu:Yuy/# w5ܺ:)eCkS'KG B+-e}Kgr>LpLITL 6W@27L7a3p:{ofUR|XMqPx|8,h#uSv٬pq]uS}}ȖM3_,4:*^ŭ eB+C9a*m:.\3G͓PGY [wz8X9<XZ|<γ2'tBq?a+#b^BAox[3eynNZ(uAEV+IEΆIb98T9w@5vCq!:G_dzswGobZFC^^6P\<xz~J]![fP~=gc_rJܳ צ+kq7co"nŐ&7L |U̥̜T=WũiZy|1M|Upȉ sI"g,N'֊.i0[a:׆85qƛ#xDzJl*:8]ڲ,  tek #ISʞ0%{˼^g3_}'c4k +4&8~}!7j9G`&9qI R4|e*vn7y/[B*Ob47MGXiU`=mo\y_udy MGrG0Y3EUއrSX ]xD5j&چ֧(4^Cްˆ#vNXsۈ_Q̌]YҰH:\ӲkFhfwJۘ} RdN\} c/ dv3<{fa!x[!qKe! l y^ 7Ų1W8=މ+c82Գ&0'DOqE@jm.=їz*ǃq]._v ,VOcUElC,f<065'KX[s6<|kdnU?uuR3{u\ S/tԵ=w E VVnğgdFϴFʰQ, Ѵ؞LN |Qm$ .}%H ÄDit 1G(b' CոĝBz!zT$ʉ!ǛQ_ l%XCDVtVGSSĬs#ɧSf"Ҵ|#΋V򍶋䲬7,DUb>?$T!ut+@zaݨ0\H"$Cl"X9=*[)N*ʢ<.-8&C1.`g@\*7:ӛ:>*e}X ǻKj ~3%T;PD)Bۅ x*$ \ rH̱i5 uy'y.};l3K{l8w&VK72d`V%kۺ q3քbBGA9X zoeWp܎yN 1ُQ1ke~ g6б] KIۘC:OT$ l*{.z cVoLINY9'g/ XF$$(_|hhttE4k2`x 3( Ro"6ySØޣɕ̑8a?~#Ӊ nY4jxB`^ ȼ.|y{AߒIҴҲ۱{d֧T*ƄT&!0~V]tePťxXRs~"B:qJNR4s{"/w\HX97Ǔbvfr9)N]M>?z?PVl FqW-xk((}TOٳ#ъ?z :$9DCein${x% yQD}PtSl0>X[Ë_jhYG1VmM^MCrɏ+rx n[›9M"ӫܬ [~M|zAPyo]. plgⶴc:CtVʫQ=5\y_K5 "7::pǖgW85N%Vf<.wϼ!5Ҙ2-7Q' NV1Ri1}Wbb̓CA=}kQn"@̊Ă)[ڰ.=%>&}nq ~XlFdun޵cV>!FI'xp %QKib7?q+&y&ȉuw+ 4 67 ,r&^x$31J&|]N`2ѧaՏ:U1cKKC "jOƘu7;.dX2ߖ<=p@Ny0m p,fcQ ϪaԔ?W#em|EtuDv䢮QVLBWC}nP$m:-p#7~/0n`b 8U{ D P &1~nB*vatM5F*ΒOUCʰڈ,R͚&*3/ϲ,UNΛ`"4:~H䕘?8 Aql}W(։g(ʎ} na]b/ֈw I1a )bb'5p5i(=n3.Kb|6;kO$#n&r&f *g%c5LJBKB{-*5:[2GJGQ vɇ*p%vۣʵ!ڼ&݈^Kn6ޏSKk:\DZѲIhqbBZ1H=!Bf}!.zfN[Z779!eDxUsvTĒ|.&-VziHjgn>#k8u&欙ܝsʛE<~D('9k, m2LQfI] |O8lkl%R0[4 I}XE94FJ)V +Ib Q֣H>5Y Y̽鼚]/#xC,K)Cab/+2\})QmlLH+|rü3/4AY %=VF7Cfu63yйw:2rcvK `j54"pEujV C='"0&:G,6fEh?E8G/ `X]72@ƒ1ժT{Hr{AMN@M1d>L ϺЊ07"U='dsWY%™[5q"%0Nޤ1 @kXrʿ1A2d"j9/S>ɒ_%jɿqzrsNQCDC?~0 zc>3v9\]ٍ9vPO4AJJZT9 A9U6Γrc6p&(M㤞>D*X*QùhqH[oiR=-<;J&ظo*}Qa|tk'N,f{%( YFwW/uDaJ87Mr}(+iUxtw*@ܥ*θpHJ DU{W+ÛuCNP*C ["% _溼v_<_mUf縹2s8RRټ`Q09$xH:aP59%ӇZUf\*%kf&Rơ >$]4Gx"XGmFWl<+!}=R93Gm-N\b.k~]fhpT~ k &_#:ڎ^S pQd< I _=HB߹FMj(R5~(`UL'yyK7+ԷVDR^CRs|׊Z{x)%mI& Ӵu[Mz[EA3"CE tonA\]{4hUW;Y@rAքx]Bꆫ.ưIBsYg(%; 0n$ K2qr"Nz c( -VIE@={y~bUɡzq:gMMj<[x=AqYCLRlL_#ypq` nKQҖ_WJsJ%IlVk7H@ [5b{/BշPa@xͼqq"X]?ny9[{"9X~!7AUЦB|͙&gHN;aNüQ ?Z02¼*[ Z'B6cd .$0ixkNSa7E2g6-"rL q!iUv2V&e $8Oݯ>1 ,pX )CKWU&y!j >YX1^{bh,[ @& N쎖}8}\_{ yCr, ؕi8g垹,j| /<&R#-ܺ#^_ (FWVyE}]nQɷ gĘǹ+X|]t'Z:-fI@'- sR"Z6MPmf'WgMwe*LZU y,772*fWkLh]u糔tQ)< ܅ kmi5MqP'M;?&7".Sq5(\~팅 .DpP>4Q޵`&8# n:v|&G8%Cx | tPrx8Wz<&  }ײJwڟ1bR4"/J xx/ ~ct?ׁ˃,_7^-DE ߆7+g\=!0q#ɌQX :1~zTZz@bȬlw֯d(%M2z_bߴ 5 MٺoГCu'{y GQ@~S M'`t9fI>3 %t1MSS6(=0 X,<Q3Ko'@,˾_:IjŁgKwiw,*kΥ k@IGԜv2óPӯc8?yV(|g̈+PZ,?8mN?݂Jr1'UJ %e=w}Mfq{D J|?t5Z 98J AJiT8]IRrq%Ƕ%\W*F&+TiA/,F)"RqCI7[^sQwP?-UN7sW`z18C+jXM :(Sނ Oϝ>rBbP+ A:aS_$,(V Naoh"#Rs[ަys; Z~3E+ +%1{3Y/r EfҀ¼4>SRZ{ǐbr ]#gfŬLRV75pOf0`._Vsxp vN6ި=M>i1NEfm*;' Pf5:V:$҈ȉ&yVGrci$^ F6%5MbC8v>d HL'.VOٓDs[{YBPTՓ׾I;iE{t_r=x*}*E$uKEԴ.P T?ꭏfUx;7q%Zt/:Ņ'0LDŽI\eY)1H.u=CⰲoQyXU{ QQ87 Po1[RQH9^S{ 1ɹtbYPޭμS p堋hC? //#˺ zd2ָ7Be+,fQ[Rg!t4\'4ۅ/]M,B)EWBϨ&1<+h5D {_o{>hԗ+ _Jx=@c(D@o3IBzAwuɃ0rwx[VՓR?aF{%#jh:4^,0r#ڒ¯Vehw<#ã_"t8)(2k{}T停<@ɟ~5߲d%!Jcu^scW7Ҝ-K 7?,4rdj9Г-5'y_ŹWʑXfD˯0ڸTuh.TKt#_ m"44\*Mr~#5{γ*O{$`&#Y&XAeҴ :ˤc@a ]9SF6{(>'jeFdAc[<^=iD_Ee4~tP+pԳM gv9*W}g*n.@:`K󱅁OxDm\pJIӛ.I! yL2^ 5u}:1@+dlifm,LEr!} Ii*$hGً!c}++ OZ)뽚E 7#oCޤ#"@ȠQ2.o@1<ĕ {Gg 27w#,z+L鞈E @Ȃ6 K d3a#zAf[|*ӟ+|;?ۥ OZEi6ƨy-~ȈEXLCI-9ܔZQQhH)*~ՠ9 *F(3ȶv;=ch]{f sEBỹ꠫|*Ѫ'+G|sp`goU6(| Bײ[SA~,$I$ZK >ʶuZu$Ltz5mk0^ttE ժf5h 2O`x(`8{n{UT͕`4] ACaSoǎ/uֿYdZgofーBGy@]>|^ynh>2gDvt J5MSAtTXr7%V͖+:[lq|X.eM:lg8B6󤇃c[9 /܃~3VqPvG"ui|k=lke.x[, 1ӂ~oλst>dr=5 Qm0I3ja薢!h{(oUwR ? C֮<0 m譩lв4u_–nR c%R&Y0S:U^CRqE*pA6B%Y(L ۾7;~ɍu0UɺF]53nByIashMj@ s*rꛊm0W$ꝍwVI$(d+k]qذ9؆r:5hD:#΂dT@69n l|:~+ﯴ=r .- ϱy=0%R 9 շ7M&Q`V蓭f8" f;ѿK="!([S:FFu> q@r I1[RKvƫr89Jb mǞDϥWƊq6:W<ZϹ:B_8yǮ fpAһ\ ѩ#ď&@20 _0vhҥX 3' NRgH p*TH%`'Vł"Y*\]IE=qc x'r+[E_Bx$[O &k .YLл"DOL.,uSkZWiSkţ˅oZ" S&u GhL1Zerl~+?aYcj 7 xD+q$zK,03X;mĆ.9]S@*L9I۪?|Ӳ d{)NCm{6|x+4ZFfFʢERԨZnSf^j #)d})h xǍk2k8ygr0:, uqUp+|R-/ PN ?|vTͭsvqbbxPV5Eɯ$^ XfJ!ayW*͟kxc9}Fi ]lGѶXԉla/) uh[JxD^ϻlȠC{Ogtt .qJIv>cB"?QgTzÍV=8{kKS^иJA d2Pɏ<Rn٣HV94X,3!e&'*zKkd6n[fറ^\{v{2PnVrT+1-QYSrNaA)A 0cf&"/_ox<ة@VQJ<$37̩vd6m""1;e'J;7Ȧ ~0qqb; ~6#ܕV_W֭x4]-lGô>,EyK2\V$3۲pOSE(܁7Q>?>|땫q:aH;s/m0a`ی@ʹj <bsn'g?qun grd 2o%fͫ2EX-~qk^ƠW}F.A+8F k\+|l4%CpPpZ.5h@] ee8.>`;[W(<07x>XњZ2:A#}gZjc` zt*{5JFx"qOQCs>l5@u0ƕ5&"2A')XO`-b-poƤ#]2bs" "#_ùgejGCDpWwx:f: nq!pJ0 $Vil8R*[F_ۓ] xU3V"DGD Sx/sts#ͺV!=c8gY"bE&.'GhiPjg{ja7=kR`LhKlUeE uc 2A hd3xv|w'(آ@oȼC`m.oa`)M/J~.g8 zmt(Ͱ!.ٟ*o1m_+iثv`/%pCc#UQ=(HrIPdsjPt:#6>}(.qvet=vwa}dDEn)|"Qd_a==r}$(D_ۏمa[u}qŁv=#:clfַzrSYTerIovfVWpidFTP] ~`jX lzN} E+C'tU3)cU3zr[* GnLCyδ}ơ0JDE*BE=qќ1dm&Qx =U&iTDt.yd"{r~a!ƬI2ep2Y)xXG*4Oc-'fҨr- -2R3th <XE4n?Zx͙~c h`2dzrq:ܤ%rP@6$+11YHw>],o]^ .>OƨXt"n Ez*q*-f*_2JL3:/4^WZ)0Jð)+&2 ٨Vm$NQIưE9vLK KK;.eO`>1H*jXtâ>rח>Misİ`#1 >Q8h{Au/ 7=Ә#J)vQm'Y;[ljsSlϡH;\Υ1@"p(C)p" @n`*fEÿxY>mb9%=to]<~(ZG+9]L%;e$+|u] W=>`[w`wf7 _}SbjhC~CEQVp=k4о-(AoԚؼP5O7[:k7y_r;P8f$i0C 7.z0-2q( D^+; ]?슝PKʔ+wCV*.Y'Map/VH8D~N>1T!. =B~DU_8vMSNl-rC-62853'Zf p:/]DlOg)hMjƒ1w,\]u zqa`I'w=B 8'N=qKS)KDlK--P<WD1Y.Q(( mݟ~o2\jK~Fއwwb]jcQ|Ű$ksKԬ"thZJ`IzUe&Ow{愄 ʽ7h)7vWKd\WQ{7EåK+$n!9~G1=5YUw? bJ^SS#9E"_jy9!&mx ˬ2ag㈬BLLxUxfY —ptW&0/*һ #ߡJ*M1(*6m@q?Yh=HNqA8(7ؑ%!gs[(rjК'_B󓦰{;LbY  Eo#f!]3̦ " ]( .rekEވ5o`Yd%~{|ֱp-Uƕ=ʒJ}m`!z`4ʰ ¿#ナLcBnsZ>] }lN_$G?Q r۫'wӄX&G"ZjNI|eF9TUuK&HfƲ٢lvbY6?NROW-EOŲK۰G+ґG xߍؑ_֏(!n }l Cu{?do#N*ⱒd=$J5%h>,u$Ojxd#qϞ*h6lNLi H*E3I 5]wtfG{5'n/~$aho 4R]/16 {qyqY\YDۮ6 Lʎ &=7 dž`m+Ŀ~zLyd QZALČsv97MQr,.D1z,@n6֣Ug*5 %rdvB"y m3[Og`" +($Fw/u@i* __DtuarRʩݰ;,;1B`?Gy4'xlnKO.gg8{0(\yc:@nqrA+*2 p …V5n5܁:е; fT,++E6yaV alAEHa-{khD?Sc`[/ZmG:P[;aG0(K#ku,Yz *.^//b gD3ėI{ pWʼ(QY=Lӷw <;ae6EtnG򛹰\,Eg{S.pw k_FSP<ZʎXh4\$[%౸^w>|`S9l|@wpi3( (0n ] Q F?L?)Yhz:s(=mo|f!hjm+gDf?hئQ4 .&5%="pjt8ZldL^3R)Mo`[*7ɝOWr4kܜ1HAtS7v]"c0SsR6N5w".DYj7#s8[kkYMsOvP pw0^m0ZQЭA8h=t5}]>&Nt斌eFT0UU'?v> .g wdKx:ibƞ&WڇPKnnb,.^fxRXPzbU2624 fJ|w[hKZUՍWg`-0&ȵlN-)}8'cd9nskg X^'t'Q/e2÷{4Ml!1D7̼]6--G) \ SU*nیp+8yOPxK/fG.!ǵe5S H-2-Рa쵹ssI4& #']Ĉɉ ͈+tHڮdqpQ!VcTuѳN,n;Z#/ ֐PmmZYS 剰Ï'8˟);NT7٦mUmw](V XSўHP9S+hlW?F&CBn5f >J铽Qc=O_Nv)}/t^L"viҎYKq i(:rÉvjyRgu]Qf5^?4dXhF4fyMܴzSlh hyVw 0Nte&W+A\?ԎnЀvhٮ楕p$e^]︂J!BShJ0o:ᬃ 5 UT_i]/òH"Gy<Vv $TL>KGzdyEl%Z|ٜm`P4zgUX&\A_dy~ӻLZ:.|򊖙e --=-Tlyi:0ʽcx&՚z{gMt*D*ͥ7#@(3UղȭXByEA= . =э%S3;BT豾9(EYc3:{QY,>ANhT/7&\vlD84fczlTgfjV/MؖM'SoO={\c{?g/2(F7 -uHF9h8mptc;;9BNףdFȷHk)y8:I2T~r>C@0?띨]֨x̘ɭT qxVxԟ^ zf;YBa84nw^z67CsZ䠈m[l)_%$+ǗYg:hdTZ{>7z5DMv}{b߮O=§O9@_ӋcsPͼAY[FZCI\`elI :X#*w"kC̦5kP r,(Tp9o䠌/g|9iLIx(!i%l7.EMqhʾs952 ,A2S!|+T2#KW,u~4hܫïv3ɧ,`: T`ER~4S JoSfO6^zF|],\@|duf먧P;R4o}Jр%5ǰehg}@-E VKFdFBHҵK`ŊpnncIYJge]39 @.mB$hFVƖsA/OxDX6ױҙǀa󈽻1S w\jοќ(dG:2R[`-Ny}ڸ5(<}6q93'*"UՓ Wkx o"DKfƅ>)xZ&@V>ND-®ی.CMv RCoDzHb^Ѿ*U#bBISEqi|/93_!bﴧYԩbkB)ifN&@p*b3>@þt:/3qo,.],yUlۿOT~'| R@ IqYO-7Ip.ҧ+J0ɗ:h~RaoC 9.=/,?l?=* w'Oڽm! +$QJJ T?=Fvu m 2eX!}'ke$g{ɡp."k=)Pn>w~5r-^f{"i%6a0;[#sdZJ'a ,:VcB̂ޮgVO_#vDlRuI|\$,&^,:]X^uMZ]8D}HpZ{B*s:Hb"a(j$|y/؎0fC+SW( d5+2ŠOA[ :q+EQ|<=$ŋoiiJss]:FaIWφ 7苽[ߜڥ<1 bǑiiu,J#o COZ$篔O^ W~ F~!Mr~Prkp| bYAa0)p`ST4 ?GeC%ϐ$e/>ӽ֒ T<պqUUn=z嘟6CPm]T{.|`sιঈ,!}aoI7'>AFMqㆫ4**ŵ"A~ Da)t`8 ~RjTKە^[DPgVH}D5vvn۪_H4ZfY^wF̈5(80UJLqENC\n U#"ˀÇ'Nj"Sҋ#*Ϛy(vb;).I~ˆ3nᕀÏkIqκ$G̅;Zb/W-[iogߔi˟'y@|VatEƊ"+'?KcT."bgI짇tFq0ELt@'#TCRG5r J}ԛ8WGt^$tZw;|yY Dgm\$D:^i:W5Dw6M.x1%e_q/ 3jƥx |2+˄}iI152%\6:=S0Fن7Rc^82M++x Av-Ճ*Hclj0 =柳;zTp $T3E\<ދyD~W}$b5({,4{m_tY,MmEe3m^F|VK?#3|U>Cyt"dF "dt;JkWisᑝej2HC[e`,-̳ B^!cB 53'41 漗Wz_v*{Lxo1`gSwAg7'1_͂ڿf r|O霦Pd€.mc\"0];C?\l|,IHnYpj䪔;Y)0~蔤'kGw),{T); R7h7Z 6z}媐v VBqGKczl@6~&˜̼n T ~~]V.-H(+6H5XIoV7 }i{f/h[GZ"w݋Ъ-Ww0:&ڟ2k)y/3*ji+Y(`aXLR0an3cۺc|(WޠA6ۄUg<΃p9*)({A: !0_d\xҏ<i mh3" MOn_fLgY Em ^18e1ϩjV#d]a)=]_oy,/)n}}|`*BT 6q~1yQyge`FJx]=oL!h壩v ߘЅ,]IەF| yRggSap eb9i'Pn,KyjmߤUH ]J8dCdFf9 磂߬3N:}f:Nn4d29L[3~--kfu$r>JIV"5_gڡߖ%_9()w޷줋C2Y.A Pc`L!-+PST̃ AJ˘֪aKS) G <SE.[k;LW )}$>^Dɴ!$Q6'b4{1"ֳޥ>ĸ RS1] ?e̔תͺ ݄`D`e=Bo{jE ^Q =Sg%}vz5_A;nwe~ZH `^@5^p)~O E-" c-FO?.-_A)557.ݳcu# ![[;}9f\eo%=zQlU 4(fDGߝ'Aix|'r"M>s6E 90#9cIkF )PIIzq"j OM"/\vWC UWr 9^\nr#s`C̈́w|أ3zTPNZAv3ѽ..KK:j=dkMi51fLLaMi?fM9br~ROb`Qi_Fo!g=ʅm l5Hwn 6O/ո jĚ,+T4F^r[f*ᙰȿsƼH#TqS1"K* نaF|HR\үd듟, t{cs?jzPt勭u@ 3~T*H;FJlNИUúj&W1"^s٪vbl:[q 4M6* MjxǕܐ~efLI·Xj>lx@O0)r$_X)Fn[r5+xKA3*uw?bSԛFM|vVdBRƭ%{"QKgCMd5yRyk9.߯*OaKm@ɁeWa`4+!(OiMFj'kZ Wb`~urúhփ,RDTw5U4-TiF/~2+hs$x:QP4ĕdm/,n$0 - u P'񝀣ڝkY;q42N]5z }ePhg #k¿;&ytXOki/)ŅfH{= ^&&O %g|ԄQD0C 0Wth>0 "lj4 ߪ]c8@P:QpU-pjאHy[YtpP`%̕ 2w&)) %+3DP,0ge@ɔʣS*!=F%CaMZ,2gN/Cyd^vOGx};3ׇĝ m񶌹jk0BZ4^YR>O+t[g^m |HҒT37f30pW@AIX^}qLAuxZ Z%~qY|݉O>IIwWmC[.>RYTw{ZaC슏;يlTxQ\rUjN rhg9YaGdR) y*1f@b'؃85^m~߷ #ckr&g{ȏ!L9 -kL}9c~!4䨷B-c]4ZA+aSv^\p$h TԻAov! X!ߋn6vbgP.)TCqbXŝX I7!dI IӐ <dTÛo/k_6j?LåmTܵ\1_2ɥtR2KigOqT Wu Is9[Qm9eDԘԎI_zH $Jx_3`-j5+al?\mPxb6[ߩ0 տɐ/;3?H vYA$R |yўY\DbJ^ ,\3*ý\AwJudsE\rLp8Hmc-Le,jHq#CU.wQ:[n)aÍM{DGڻ;n%N#6VŪh{-hh(jg:D;kJf&=WFRYSX I%KxoCޛWe$Yŝ@+>4^_[3Ȅfh\}kZabzКێB¹)Go!ry9Bw p.;!ƁTaq5]jFW#-F 2d:"mhjBzghG%ɜqLKըF6rHZ\ G܆N(RN'[6tdrL什y|Gw.(vo\&`BmhΡ}z!z3&v*g'nM%Lq }ܯ#GVYPj^ŐAfɍOHG8߅9Z=œ!j.;1afeaaꭑ~(ɒߜwVfYWT) i Qd譛 VWp6Y3.]<$mb'8BІ"lR:Y~gh}ju 1'895 (Z ? W`T?X=#+Xb C6'vJWo=)MHqh.6Ï u֕Wϣ:Q߻ $NPR)|E= ]l y2nWc˰kE+`#a-ӡ.աG勺Ht P{S.HjBTo)B+ z_>)ohJxt+U VpGZ"QL^bP2X#zB,-/RRoB>`7KJ)|z\ufW ł݇{|89fz~f܂{;DFOJPJ=[;rzl_A(i,.cdn:}S)R&\n7^fatPS\ǀRބ%.tC&j5ρQ =Fc,89@RLŬFfVؕڝ˨ާ, K 3D4'W=Rh]eNX2jedBePu3{(bunxq_"ʵ{h+R=RNR}Lg!#5SFʤEOz<P"|B#a ds<Б -A_.5 K<,v=x;H!| %eUW|ˇ Jzp;xj:BWb";ۃ98=+{7J_}dř5 *YK0VjxA: E/Pkg aZTi / 9kMWQ+^7pDKB&/ٴ@j8?nE8{ FuauT!\MH?]&_\Ɖ,>}>Z bDtCvB'4XNql'{=VX8xV2ϳnYA;ϓ?̕1ˮ`Wcmmϔl%7ߣߩC:@#;FܣRKP{ d)=/']n:-%kw>1ɧ%yE0Ov^8p?];xkUSX] X0G9wHw=bc[+QAjF+&?[3zk@On#P?QFHzip~^ZuI֖T-RAUVRcyFwKDxܙ Y:W}]tX;Q CVdoC($ݦbl2b,GR,)CZǹ]_W\z S!O=Bo4G} Q癤GLIa6fJGE]Cp̵@uXX YV=h(1:TDFMȘ* )9=)/A|sH|!(rmp&ٶ=B3SF T?EZSI&Miu.u:wCB8j6,U 1E#zQtb{dm!vo&| =$7Q7gښdr%]7+TEp7CF[y07tvrj-p,wI@VZ/+;SCik>|ڲ0^aɊm/")Y1˄[+\IeSlG [бg sIʜ_G(;fEf0Ӟ7UQtV$Y6d=6XpKL+t2 SȯC|gSxO'Cl4e\J`34_sP8WË챂wW;jAx%+>|S2AZZ<^ fi;:h!zqvS~xw]=o;8bk8%Ta/,]]=dʋD(-qiŲ>p>">Plku'r=4\CUjiF(9`V0)ѸZt쯴 Dɪ- ]4+l a Mڄł]Pw9p 3EiBiz^Zi⨔ʯ y6kW>6x oIDѫXJy7`2ono@~#cCj&zvz1vJpo4 Xk삌)6?oyfAH)zaam54Dkh -4 uFK`*6n؂ӊГlJZ$Y=;"MQU}xԻO`맇zʽW Ei l}Tbd`)Z5WvEQ:700U}5`}h9[ί@5SA.=`HÅƥɏ _EI)*^):`W|n?L!}'X ny~\Da^0y]\K~3JYFX=%3!YW#J>F kܚНGjfL٨*N'̚y_L%tۙ{ݡqa%Pr pg90crpkF g[_ [net: ?o̚_Y={)T]yy-pq)]^y9@h( >cX0gu=]yK ^R@㢚OJ*2AyÒQːDӆeB&TU5Wn"–Gg@Օ6jt4RiՐ=U 0KJt:)(l5)ǃzN:,vaSp>X@D=, mk hfSB[dʑˬ&1jl}Af{ m4#.6`) N ,4$]+o2 > xC܁HNjMm+#P~c\evh3ܐlMHW dx\XwJ\J.l$PڜxrS]h| M"p`d q.my,&.97xi?K |Y& V! [:˳ hsfKbZQ*w28*>nuOvlD 婦Q'Ҿw-dծz2AD&v\o^M EZ|A< ,1ϷoIOQ g|Mh n%b>tz)Y 2tژ^a|h]칊 k/xF˕݉b5`-˸Yk~SXui]27wyQȗ/g,sQt[0 Wļ_CcO:LUHWxG-ai=x>#/@Mt+A#+q@j>HǕސ["pԧD̤Gs =SXSIh}2'w8aSZVc?h%EMhc0rsfKٟvyGUo޿›t~4I|E$g{]1ҧ|dPID.PzQ3(Λ$ToMl?0ToWN'hU2eu#E gG1`q%EVNb܍F,m!'?3`bUH@tВ51R$ k.NLOχ8['RzםG78KO71O88kfH9JT{$2p^6 +dOl罒LHr !'K/9n7V!e|.lswW?sӟ<1/NVZ.[f2!QU8#ǞICzQZu eyԇ0XaBUpvᑃ6Y%V?R v#bz)7>KU6 KɼeY -5"w01GEVQ^EXK7aKhmjP`[3Wgo$#%4 0Tϭᓏ S޼6Xx) iWܗqRj*wl+dT8ѝQR iʦ@qFWX r3r4 @јio9YOA@}EY;)2fy>Ikn z}GH[{.xy_gJeZ',X)[SẌ́4zrAi,;,.K,,B)3azEiId:;vu+h@>~UuxX-$K-{-n|ڌÕRE}n?."𑬳RU68 w=6%Mhd!鬁mJYawv%ixJ R'W9Jꅷ' ya6s/0kdkQ&k"@}GEd4dK6T17Ɲ]<3eB&ߞdTZ,NOK>+aJo:O'1u#xÄ&[E9nJ2ʴE@ c8[ ݣ'P=Qœr? PPnT!~~#lDsZ CgY6aǮ=T,oԡ|j-hzz.Sw*;yκt)o˝,<< E&B(* -A'rlHnCd&F*h7Mk"R"㔚=f.K4̪psː4W:([uTl ы\{W5qCyݵOA kW̡s3 ?z|)޹4McH:ndxgy]w #j``.u? "V-DjtAF@_>1^Z^o<5 G =mk/d.7 wڦ(MY=JEF@}Ld$bv&1fz`>A͂%~oZbVLom?2XMFI/>ɯ1.?@l[-ʸH%J}m/i1U_3*vAf|n=6!_:q `ƽ9k& a6U04;cDo!4 =7Yӿy%*&ӊZ:"'%4ToX OisSA`Ũ3v?:$p?끣ZE^r92%5]a ȃ˷9"8dKL/QO_ ڕSPCG "V+]Qy4'W7:Dp,Xb]-i=adOO{̙RkLuFUoH *TNg5sƢ5Z}ê+htj3=^Шխy.~GX,S5/-F:a|~VN^\^MoncVW0gQȯs@YzJ[I5Hౣ( x}~-f 2vmY; 47&L(<>XJ/Uh{c!~=-X`f긬4`=3W[-+B[|qqE3:+]Y(':HVp7Gi W@A:eyk 2.8ױ &p ]dž^Tiȅk<(>5zY|^3y\vv:PWuQDcP7cF-ӭLEvH&|j#TmIK8$ZUs wt*ދX"=WZO_8p7kl?%F60f՞䰟x */. pɃy ZuX⥠7O{D6)}їǼ"C݇30J '%܄ WO xDI9"%l'HNJrnoP=w!uNϔVÂGxk_xFa^f!Oؒ>h=>@7NiE3{DA'jNLqLI4xۨNe$H54H g-]N$Μ._ fA) Ѯ6mE|OH%iss*Mr}mB PR*LÜ]+>pcG~R S0qr_H1ӝ;%w5bc:=?g> zǽ'0'm %jgp.xjʌ]Lʨѥ9;Z F,+Y3"u*rZ0oS6C*ހ%*Wa8VnVK&+ٵ]檶_YMr1{=`'@cāv^Xu8*ޔUNWi@ 4?U$&\{h~^KNCbtaQv:8`aI,naoYቑ<6ƧK9_[쯐:EˈS$>W%XFZGR(:GH{Fs`1IПv@`x?}s &kfϻ'.{)XWi.')٫bj5H_KEpOs.Jt6"j[C0?s3.w') r@K"SU@b[r ` ذ@\ $^_所vZӕGvB ]g&aV|@Ϡ[QRU4EDD"R @,[ 'A`-&W $-Mu\դB91tcTᣏ%0fyAY~i0-@IM94g9#H[l@^W1!0_Ń)!F]jм#vEݷ+&.+⟬4Ǥ)ݿf9|Rߠ2sl(! 6we/gk&tbTsHXeX\*Y(Ϝ{O3uMh'N IP*x:UE&oQ0})G_:!JhL sss~7Х(ϙJ$v_udN4 T.Z|8>kF*kȬ%>Ksu ;SZ<~۽jp3"br5-_)Q?R_2Mk)dBHQ00C|#TA XG;vIzwncFSw%#cNjXߙ}Uc=V4k.JgUiK+ @qctqvVaIӪ6)nyu۴}P`m܈d)mt}435ݒcb)/x :Ee$:]Ln2L3݋l54;v\(uaD<`'Q =,8! Uip ׯ=Qja~W)Gdx l9+^` =l2?_Ӄ79F/}G=V  f; ԓz"TOYUF~R|C|n.&z5^0Ty[ɆԻe&KoA qh'{Fʤ~v\(U9s ~qQNMO3DBVTcUaHM!vw6<fw#XғR%;{qSHdӯw^H7_+܃~Z? ѠK3@Ϋ+ڔ *}RRˑΏuэf0塯VNsJzS'Ԑ  pEO~즎m?:<NJaYA/V {%Y:{Vwi4 O'v>n n5/ U6%8p{Nv5P@˼ TX+@Dm?TnCNZqp[vF7CmS>=3D: e;Bm"edcBV|d--OY%u_@c8>aœX_#"3~³A}%]b9 Q`Fa go(r/V (ZMo.}` Bs&*<,20oc2f>21,N0<<+~lwh~QTy]:?݈#aV ?z]. Q=7/R}C#lŵ}bhb\g{+lY{ɐq;uH>0 9B n|^9|cFM6H54sQ%+(t OZ&+ yG^Ǭ2my_sC5Uz{ oO!%MV?_.;j >pհc1@~mE4kvۛ dSou7QqCnzңO512Ua `N GB=7L1Gp^I' (y.I5A: 0G` *zh |^kŽˤf0U5 c)@/b'DJl4pNOf*+*ƷbvbH߶)pyioPf mEE:8s O~HɟƧmW`)9T97ӄ^lYsDʭ9P~ῗabtI ic\T%NbEV6.o!ڵa_"Ce]$nϸ^zԁvo P$"*GMXV\i܌8\㗙[sk_! $PpHR8DNZ o!!0\Gy=4l)*O. άD9[tD-iT9Hri'ιo^WYj/p™DX_J(PD43:Q`T⛍(=.Sv~ʸ%ʳ\J>XOACEBv)loF5ih=Gؓ 3dħvH=q1IliM,\~?/rtu߷[Ee,43U1>$ouJnQQZ \B*Ӝh{gXu ܲ0|`UNƧ5h빙tb-24$+Ds~?Z\9)h& ܖp>A"RVc#fdd6K= wgdvF14:j?+viR, czèP͡o=υzP%t{%#[S33{a~`IFyu{qL\7MeTPfϥ%nⵆ_ԭ+ZY"l@2{-&'>ק)Ml,xʹϾ~(D"bu{/eïb8fMx,Z(%~* 'C4+cxTtBRN&J]TS>+Gޚ:j=jT*5ir1V"NzZ((X 9 Z ]*fY>yV0Pk@S;)1OFLrU0`q518 q.: x P/[?Օ0ҐՐёCw.*v&ySIgGLYPc0]vk/k/GZ űt(FnxNv ZOMrn=té(DӍ㙢ԸHօ5g2iyI IOf}Qfpm(z/hdz_CyrF@W*(q?Q\슗Y,AD,lR;³찧;?Z|@nXf?/xS79\AdpP>D;~\J`!l TnSk\Uk/nõ@Bd+{SMbĨ2Y)uoi~?PBU k #Lb>f GG;D JHLs| vI,tjF+CD SB2eN*UL Ƒo>NMƽ b2Q/;Tf )h|ǠVHVv|,L5D.)6^eOQ2)ZjdyBr@Ʈ۶LHOYJg5)ԚfCxQ 0ՓwuL`SPl_=PMhIb1RQqyWz=ingsAԜ3;*y>Kb:yنi l`=-nPuJw)PN./CF0%ҥr*=nb"_ }"$;{f3p.7qj잌sEUx zK'niVGq 0Y7 Q&V\A,IB7I E9Tt+O3گ,9xR0'|F Z3n%Wt^U=lD{^j8" S77?3в5*?zkh:#O]=_j=@ mT[10.tV : |֌}!ĸ*|Wc!e*H]&~ sXG\>4cdAGVmp6ՉlH*H U\-@5 2">$y@!7s@D/U#@%%ISQE7`! ٣YWPplU 5"My`نe\#waRkRׄ#6 N L!7}C,/ܝ#µ/K쥔7Q 0WI1NcX 'URgIWݢs!L]fхz]qab>`eK>y':QM3^-EԆi㨽&r4z-O߼@75XNPܼðQ Z6 D)xӖ/ MC#wND=%<I$A}OG$ " or4sz4!3aoo ?IJw%KBP9:[cy#x>ɐ/IΌťwYn cťPBF3-6we]00yNx4ZCzjJ{N?S_W'emwyR9eyTeD{SeT0p{.f9ᩋJRMV QWzp L.M{HBgHCg咇ҡ$T\l.K%uŢ$GE1c(;.O4/H>ҭQ,{kW>κF8yXr(|-\#gE,?nehaB)6@ZW<'tE|ǁ΀F~z@dB`U*fmb@qÈQ- KypȊ^nOdػ8Ja?n ގp+;/| eub(K#XY_l+P^=l/k(x !Feb{{!d=^q1ܤ=$5p~Jy'jH(1=SNB"YH%$Xw ~{6O&op^dv o0`F+@݌P4[sz) jOO 4QJ+h"M!<ⳏB﹌M FW:'A|v )h]jG/.q5ImÌE_Aˋh/S,jkror+ 5  l^q,ʃ 3ԂO׫~4S)2b{- GFɝA ZbtT޵׽̨s?.5Dǯ!ipǺݨz?+y Nsvg1`qx_Ȍ4=P|8{-yzj, sWw &Re?=&M~N$lW#4$5nv}~VŅGOgΆ׎,:wJ@GpJC@%k]0`p5/xv{` 3]j˦ BP' 7~'*Sfwك~u~?Z-ċC <˝3Y}GEBvf0d3as8\<ӕeveINNXo!t-A2f30UhG_SCRJ#$dpg4Mw=BxXYp3::h-5Ç a ?2*xPPA>e逴Cy)\FwW}P_8q@GWډж]'{ac^A^XL8 xV9ul͆P X!lZ@B$bx2X'b![Kn A#] UbY?/Oذ/Gv߅8)I- Sb >˥F쪽b{F#c bQq{:Ne(HΙgըɞ(@c&uFwZвb0Ns,pœ3H6- d"$itI+Dd0}D*_YO~ \.nIU֯dt0w#n]5, /snX  -_P!ST%\\WaK;Vхh(J&.SH;ChYm&gU_5m ԩ(Qp \pEBAYS WvLPj \gge6MGw9$Ilb5IA翊Jbe%su"C {xI 37zZZHYst飧.s)ܷB-8{Dγ7twπX nqhg@|;隷irtؖPLe&aTIy޲d81 Og}v0Y3j0X#zLZ^сM WÌcѧs^;UI?~aȖ3΁-N-OD>PC̑M%(xR w'R莫4 Ifg+T+ILA~}n`K&LVS*VB 5 k?>2$Ok5 aGvV,(v9"APe\zCVQE.yljI(\ M[oc$ !J2VzQYZ'á`)Tȗp[_3_`{&%9.nyN~6hTۏFy]uɔ1WHBfk,[IvZ^eE7@[`#Ri+U_|nR^d0zz]؇V,h=I"DPIUH{ muZxv|C\h?uDL;:\GL$<PK \"0Gzx4N+8]ުo1KnGl/xOevPS4>(*Rw)?7f";s&1)۟$ru~񽜽40 x'CA,UYaA">$5/kh1+l2EO?fG~Ie;  Ky}CUn1v!*Em)zx}9ӵ2lylNI:'(| $օO蕽aЩ] 0]L?o~K39$ÄcC)jGI-a2#E=X;VnG4͹-5R-~'6ߦ4Ooj =/jg)pnJi_ rp+% 9JY8IzAR_ъb|ƅSe(Q!"6CkTt 6fFH7;yNCѵwx |}m^q9ZѢ@tL$|V !C]kT ]8Q="njũN Aa}oy CSI]Ktz0˴ y7-J_(º`3y , h@QNA$۴{a",pΈߡO)D`*C^Xv\Y4 ڻ}ىYENr%R*Kٝ1L=+O_!}t]k8} ,MX.y;u0|z "R!a3j`I=eΜrVJH9}.$存x|ǨةzVyGM} =ҝE1bl w 5+@㖄W74eA1f,w[5GM7f4+GzuaXx_x+:nX/v~3[T;-e1(f%13# 8oL[q2m*uNZ24Coh .Z ȷP']:pLW~~TO 40m*2lvtuIOKc oƍ_yߦ (u*A>rv  '6]O^k[cK8+ѷ’i&a3hEN˱[r%mvfƭyh]r'u1_W[(P0vȡXyҗIa7>= Xq,rDs$b{GNn%C&i:tUHKӨ/f@jSeaڃbWgmTEꥶfBmGR&SMhd#kՏ٩2l]1 /@BǮҤ\hM_µ!.X͢R-.ݥ§Tinܯ c|]un?iAote/i1X\G n'|vFm\ yQ]ϽDP$'ygLRu:cj'ߏ0?%:1 >uh3I=6JquLyv0>ۘ1 ÃYLiZ'9a +Br`ɾo,KpP5L:mTHM Pak`۵lg$ͱS^U9V#N>mגUHbLI{y%fc) Ln1iȼASs|{n-˧SǨ9Z^:XL&hѮx7@O[zFjc"L1Y|ɱ"o ٫J $t'3;gvYt:=IJ mt'VϘ~%CN$K@xa{|;nMu.}n𘐬)}\"Mj bVcB=hicF_ mH /x% ɮ~Evq6]DM &2$mL6)_k#T9*%ZI߾a܆>Ny{Gf\O{F#51'9.Co^WG s,Ō݄ZMɘP2Y?5&lS_ldw:5WYWdk,NEGqq-Օgc}|$Dgq7XԵy' !o!(h+^{ %Wmq>L]B닯tK; SEr~@+7I*O\^f8x}RG1I9`lNH ^lՠ/y~g9MT U;wa 扁G#b15VېF{MތԆ7˧]'Fƥ\M8e6RU Ds}P6E qNE-NuT28-u-\faTޙs=Q3ۦ&~&_H]  YΙT#F *!*nb0u7^YibmłD2%XXj`3F ʩdّo!e{R/O]h)3<:AZ9Q˻Ba}" 5J|C\UbX+1!$hm.Eq 9uf3}IOUF:i Pe+.))oP]Mi/xV;ZGt?Hnj8 n|h Pnt%ɩxOފ xl390\=їкoc4 avGU>Ѵi~CHRE`3!UiĿ:0u^3@#n"F8$-z^v˨iN9w7_ `B8aK*@j_LiZ=r/3 /Qe Ŕ*3ck5ޢ>jLY$(mx`wKɄOCt|ǗHʮ{J8U4\T%?2ؐ# ۆj'V'W}ljμ QEmkoH뒥sq,OUm)~l}lA雯.. ڵ5j +{+3O/XtxQvFS W]#".b'Ua`{z顑 Vŗ/܈zX wO7tsz<Aq;)鍫;_D:hm6!iWs O]6KTl(cGj9s05V?u L 8F1 :Aݹj&:bpL*$Wƪ<% ȦfrY BH, Ka,PtV㏆He0]zOF@ xl^=:ǻD։*j 0ԴQ!^K$ϱA׮Geym"5qu? `wgl6Uˌ)z~#oAyK _t`gaVG0~4%g{tre:0В!*N*8F~Vj٨fuzmI,B nmR3UG) t3?t&efC;,WQmޫ p8F[-kLjDo.7,uok:vjQqE68]!y?;kxbh²YUPMV=H4` Xk̕mG(}]o7RNfn*+2b+'lMt+*h,FFe[b}\-Z2,sg/ϤV !b {ko>7g~VIRe]Y4ᬽ}⹖".ZMHb.$hqق? q54qxΓbb'zZsO ŷ_ʼn3uoSb$Yu#|t9A|'zwKa-k/WLxUwyЂpӵfiprn E 0%$U R;*}wK 7EoMÛH׽Tڇ]?ҷc!xzRL:E* D Z}0M6jmjc{p׹k'1C!pw aNNRO*l uGaPDb=H?x "e}ϡz[o(y~MқJoC(!`\8a;^?d6ce xI.±|o_4_י9o&˟FSR94Q=C0k'ʅ^@֝77cAX}A Q'xh>SPyOE +/S-?2j'ν歏iЀYiAn7moM*8ϖ>G!=Jx3אJ^ am41(*/>RBJQoX'ɔ@v[)&ʕ*PT[}|QM:HZ&UM(@]s悐ϩ x"%Nz'h+i_\.}*p:'/ TtGHD"l4ќ:UU)S7R2X822#{QT+Jz;޷cG#[Adpx t:$௦hؠZAc, 8sG}uFc+ڀZ9\v6CeS?"BB!2gǷbҾ"(< beWީ\*wPK\9r-MBm)D$Éԧ&Ն~Ly,tϧXfQ-cB Ѓ h}V_dHV}'fdxHY[%ڲĬT R{ gU1m,{?PjDƜ8˕ANw';m..qqgRoiݘ >gԗOɭ7bjS g Jh5PIq S5a,LkzإlE$yeAQ$_2K8tv?m"CB:+V`Qf_ʱ<$;O:z}YvSr7CΏPF>=`ta7 _ܣ'+,d6 n9cMR`J@rVv Nzƾ7~01FƑǰ ; uJ>eVQ7v2x4yqT]PT ̒oV;4OnV%?at"]o]pLsVfF(;<]RVY@u 4D Wgj;R9_LKo/( M ㍾m}We@2S2b:\azD0yL)*_}.STrNp}&/*z;O +Ը~bzKed GÑq6Qq-zX.k{W w@f Ƃs#A*:Ygr1b1eqy|huWY+s`L4bEoNh bC&X$;A tpI}{ gٚ~]?{y-Xc 5MŸս" cѮFL"|~]yRCdlY4֮w+ :PJRb[kSމ$3.FCEEcmL`~[3;?[A7zVF wsZ ٕX+ZDFBk$>!uvuMub:4WӤWBJ>,N#$u]KQ_vA)2b׮N?ʩ!ZPlPj_ Pη{lc^+.+#Ϧbvi0*4[.Z)Zj :W[n9/F. }EH8/ d LI)vygRjM(P,&ԅ ܎}VOpcIHaWYxfWM<9K5Bԛ )JH11zn$%CȶoF|^WN(?Jʹ4:j1Pm|gT21#^I`9`%Z~s~E?zovh?[> Zo7+r>.i7G :}5VI}RaT)Ԏr y L55gGk{r &((q$Op![ xPnp+l VUqZWJW2@#vϕ #4qV#TzٙF|U']~RF,O/}*ec*UCň -׽z/Q2򞮢'3dDl][D8U_;ܞt,X{a#C悹lOo;GhBܞ2.sڝP4;te=RWTg%IcH;3˗zO>J^`UP0A#=hWw:#DWtjaLn&n YC{><:vwb6=z5F2I$`GL 75MK[zoM-5X*P3V-…+lUGE FUZ..9fԼ3n H[lv/q!^k6[|JJ)j ݄ :o?RKӡ[v8a3K-WňBKDߎeOlP (o`w,܎&vq 6z~$ɜ]t?6;Jr\A# U Ly.WN]i͡*MwxI:gi2}Ze@|[ q@ Sbc+JiK2R0×I{`}ʸψZ噑Uf8#roG)YTTGeH!ockΨPwmP/bf?kD>$,=DJP# uVv4 ̾p9M!U zf1i(= <!R_[ۙҁ|=A(YY8Śa!exT Pʈw:[mïIp^2rK. m\%x1fKJ^"MT(ߝPh~9o1] fA. g(ay$t^J0P"N:UO.NgjAHibjy]y*0p[gC#Ì)LJ(NC{(@) XiZnz:)-JHړ4@NPfQpərUnr,+cY4YԌm~Rtr7Q¨zfQѶwM؛UK(( &qIQ 9~_EAKt4-'=ơ{uF zƖF:hZbs~,]_m1/$GJV`% 5!_?g-'lSI+_ѡ]B9VɴU|9A%%) ꘨=7u@+?y v=h޾ o}_xehJPQ1p 9' >Y K ir_$:k=7o\ qBR vgn҇79S_61&L2 d_[7^}'̕$,iFưo!y ,F_d]hr73 Rmj0ZsNG֊7_ RLnLk) I6ZbUu"7'uL3ZLScHN ujhj;ق:Œg˿VJ:C0zOV{w576ȋZ5Y{j: MHfdxM0;ɫKqYF$bӖE(Fn t ڒ7mg9/Ä m2'Z troF$R& Y2k H1,cDb&_z[9Wџ(? #x|GFW]'{ڀ#P. Q ;peElb8EFC fUoMգP*sDԢ;/j5֔U:Po&Q;e= v4X|?|C \;ƪK8u(}օx*b ̫;ةt?Fw#]1 DC ÈA%E,Ln2ni eq7PCc Uxݑ*@= m.h 3n3vШޓ1R|v)v!u!`lDj{-D+`"gJ X%!2};_u>bx]"eLI5䌫:, %lp]XO|U"B>*ePo=Y Rss]${(k%*F#]HQGm C_RU~w~r^'oGk}Z )IcoVIp.Z֛YVEI>AQm}_늛`\hwRa;dWo8#V&vX_дn9K]%(F)7*pG~q^!r( ˧"[/h7f \r OcPSϳAF KY4we#$*-a^9kR}-g/,Za}^u8@av [/M9W' Z?kJpK^k .>Ǜ!9mb# ɛ R#u>"BuxҡX^{-O.7LԴfB'W^]w6M]eIsF "a&2mݵ"np ꂢHsR8՗]SyY@ ͕.^Lh<-vdE-vuZ>崉 8} T1^9736b܋RB{Ѕ䉫2g/oGeTtHX %7ED6k.4;j?l²6ikD ~̽$;VB4{Q|K'd޴y X lպ3lBMg\!D`H^XI[aRfuXJ9Y)R@NŬTSORzà/Ծ릲vV_ċ.pYY:x ٖ-b7d>B'gSLm :`H(Ч9cZQqd ) Ļ6I= 8Z8}NYR2N , $7r+DsgHUqc$04̙S?!Z5K HK`{htKpSJjky+R0m"K Y EJ*٭C$Ζo^H=A L\"\9+y <=+ذ9%&&vA¼>4gm=prlLqxmuG GH9uO}l9ҵ2^, f Yi_eSDIyb|h\PxouI){uklgGo&v}ڗ&!h 8q(Fx:"ݛn=i $M I^X^ү^9 oj.dYcrz E- $hox.S7ۓ=%}}9K֡|T8MQxcqdDO8#&Ig#FNjKu'Av~|yT0n9Bj}m,,Bi ޭN(8p#Ihm)3_hMʦ V:W7*UţDqX6hXrMBRKː ^2\5G"#.܆T=\恲ч~^,Ƞc}e5h(uipjhEulFDgA>Hoۑ&*3IhCᩊ V-x$_Gp$4[~NMD=ͮG_\.#lsdX8dc`֛U_/Roi_=.C6wS MpxTO|_nj9Weep=EP,I gAI-y$&ȃ3L+$<RWMgմ;Iqd sԐF_8߽N\+r",Da3> :x|L#f 8ddR?PROz ,_T% iy:j{~\XvyuPIV{*b!v]=-OЉd|XߊyIJ^ck`etzS]KK"a Pp&2xęAduZML8˻ԑ|r ,4-GZrER DD܁DQBsh{tv&x%i(FaaAeϔސ Fc,H*]@Kp]t[Z/PaPFucy;\|橤1ZX) ]s*>K7n%1LP{D;YL{ӢC#}܅C s1aFq4fa21GERD-Gl.]P$U\5DXxsZU^ec#~a<g OׁEөRhU4BX~2#fO H$9tnGY-Mc6-`ٰ1ӢT)&0-0 cmD,,]5xv.8WNdJGǦ!`V\ |e"<78dcLGklmSDN^v'^sp5Zn95 1J` njDEԏNu+! 9>Z~43k  Y}HΨmKo6ڱ%")G) (/ْ9ljt$ dgK2—?m8SM󾵘_a|fh;ь!#Bv5Z::ڰ$ff.zU8׺œG.pCbWHօh癹I~Q09[9H?tuh/mo-Wt,vQ,flh 5zdޟ'cyYM'-Gh\q-|ǧVZH"oto)Xk_LJmEHN"H;7dF1q(Zr Wxf 7Xv q%z x?K*=%/ؾ B:]=~)wK$#%b cA<[a[gfFU.<6 hgg5dXf紅 G14'g2e*G[^[1kZR4 ߁Gs6{(eQ &ED@ό l}9O}&g,f-\ B<ԉ0iY7|xiBKvXmFD-XYEWATf<AzS&~s`gexJ  <.- 8}_~F{8-.':UfDA8 5kp#.nt(ƏW_(:GĊ(g%#LQwPZ8//ʹ!t7b ֽr8 r]N+a?O^=Pqg [s J?LyESUzCtZBæľ _ oS?/B_ 0ʽ +qӃQмGM] JH\ߐE ?] B4(?8b+ {]]LC9Em%ưcHwƚ Ū]V(Xv{6 /WKWѡU̠ *0al~2䄏T8f&EўCDZz'.ivlR SEqQĻ[;ҦH3|Qf"!Jk5=.Ư Am?GH+dFFNIEhR=bYM?yDG \9NfҪ15M#xh#٘.{ OF⣹ &;~|ߵ_ߍFkؼ0RcZ@ě;d@65(CFb D2ч/MI<'sChCFx({U3s'Mk' JPi^xMV3͠r7= 屯ܞiҁb3i:`=ukbggScPn졔8+%c|0u2恤лZ})Q*,~z,#u T 'h!Kӟ~7P6?,6/'VͳMnJyUFV#]Sϋ|u3AAQ51sH;<֮{07s\d l{Ѱ$h%x#{ h qUMh#QE:z_6ƣ(fmMi.2& 9 ?M}\+2c6 C/ыͳiXqK9M+3ESئ"q a?''q3@gԎt1ƴGmB1>@ Cl^RjK*~Uf7ʩ("ET[1p쇡7wjql c^kj>g>}3Q(p?1}Ead6drZ; QcI)?iץP&^x$$SvN@TV8l KHNen6tn<0"jW}`̀͢iӝ$n׏s'te6H9Mr/pN.-F(f7b9 %w,e]J+@PTڪ`7o.YE:yխ+Bmf DO.T\ IPjSE.1{XPH;űa\HV;F*̲Ӕ8ރN |Tc޲3?WXW 纒 Pt#!uSPcD:ASIexHl#k2}裭zch&IM Nfyt| )Oi7d75k|Fy"0ckMQɦx!H0؀XR3?SzpxOٷw]e֚ɹ?r$0Mv,n3V'HiT8e1_0x'{/[㈓ ;%$(i$$yǧR"Jd`&*Vc^͘pɻ&yK*v !JŀRC?!Wn}3*Д" 6`BzP.m,RU[\'"|ƍr>*sR| E"_պzQ#"zM qo&QTuF)mm)ȳio)HT´3T1x7e3g}\ác 䊇֛D#sHkW#ڊ /Qd&$soGcN g lBj:Mk:q|$ (HoՒnKb Z;vh6@2(2ti(pyPn# mγ0!/fn# Q!BQ042Px=7"d3i&w)hnrr}VIh'ŹV&5kogk # n19CC8&7 g :XxWx$LdC<69yuH0-JQXP(:uW񜕣B?~}JtSS/p%}ECP,]Qש~̂PvRJ^b^_D'Cz &^Q$K6Q$M^5 fEh%8QDŽP3f\'9Ee`*UmhZwO;(rP^ꊲ1se*\%,WIlò29p*+|Sݠȟ7"z*)?sm)kmyWBHLd`(nZ K~Xg' '.ZxN[Uβ{b-MUXXd)?t3y]2zRʚ}/g\߻v)uɢzdJ\a?vݮ!T$;Sr4vy+|5^E@^jҦL0h|x!_J5:< *k) Dk%9:<,h[$+- fʶ4n 78'NRf\2H[NC}P|rTt25`uDXGr<^)OtJSe纰2-nMJj2_2Z@="WL*adK6A޾_ڟz,)f1PVgcYUQdq_sz&'OR>{;EK t6@ 8vJ^;;T)aSeoE8U13>w)v o54 0+@O?wv~11wr??(x!bۥca#AmnEOzድG#9@A5izP:-y[IP-dkpp؏ߢCyÙV!Rt_hmY&INKjyF7=!o`/b ~1z^wZ Ibpqs`k\W \ o >#Q[VB%'W#G=FI/&-l%r).%EPnV1TMrpP>@,IXttyi~|t )kʩ2?s򒭮t@\t-IJzԯ.kdL{8xl˟N8,C9e򽻊9{Y5g5SF+nFju>bZ~IvNj֞4w^|fXRjKV6ϖaMM'ROW #r޷wINqUj7oZeiIx,R:ȿ5yg*ꋤ%upvB1kXZBfA:-͞pU;U[eQ74oeGOĩ gk4cI5Mp y8*?G yd  th)Wck1zC[ |_$V9ۢVUt?rB;LUDn>W{5#9F;Om `h[P6)i)^:E㵘>[luĴ?T4=̾i_c>DZY-@DOW GW*ݛg 9"L oǤd=Rv_äK6ʿ,W;fneE?Dy⸋]+Ÿ*R? #5M^.lT@N4ͧ)Wkg֋x$&&!w?̓˳ D.2[>Wܜ >hK@( )MmX>Fֶmx $YF@JD'=pyH&;G~Wn )T]+y(΍Œt'~(B@Ej f"ÊZt4T7\q|9Lد&};=M$^-u.9^_bԎǟjI/XL$q 1j@ma2La j.ÿQH#]QJ3Ft"n'MY_%xl_I y_  q]'\M[t,skQ7@ez-f NiF:F粃"΅*'I4ʧ->:U /طgC=2ǭoY*tUp3 i](942"Ï͋{D÷k[jy]D@C1^`f@*hP Q+)`cpB.{j 'b;HNJϞ ,LgQ&f9DWwXZiZ'ICnTxs725T;P12d2 84jTItD:$V ߼r% p MAJ[-TΥA` -1?y4H)A oTzvy 2TN@BqvK]lX l c #'H\,RZ|y9#ަ5 j՘+p/-s-gtm-qNo2Cq5iiIUm{BYP$a{IR)&'ye&7,zٱ+9<6Kw)H^~qM.:oD$4~9Ǒ+ڥK: 3\[=zq,[لbV *o7?ct1PuĒARn<48<֛`wGH81Ny + XXTO0! Z\xTw _\W,iZoY,}r~)p"}C , h35 ;9}g8}TTf+|>Y)u Q%h mM~c^iI}~\QL_̃e+j+I1&u*OP}IӢ'o`G,iMyhϯ%]3a:lPV*ˤbg"`Z 41PLTEIa-f{h|Fܽ|/=1L&;ش]*p8J/q zUolE RS;<YfrbLE4 |u{a44θrX~wvu3c=:jnn[I q#/ʝS26F.Sh{epHHD`:@iU.*l3 v42}x kg^N5䟿L A@^nK)N-hqDtRq>@^Uh"C.Z9Χgw9`pۛ9m 62o:߾}4lT9}F"ZI* $: <$o bؒk _ִ%}OgC|´޶Gh'Rut( *c<<S,}]QJ1zO7u 4^#PW3^"9 EMUWal (4f)ʈ:zQFL!2-e_2SEbjkFd55lÁm魸V7@ V^D4_qӯ?aQݐ-HdF*򺈎Y3Ϸ:)|`ˢupcFFip4'VktQDg\窑{`s Y\O.~ $aR#gYXSWY{r\l熡qÞ9Lbj Q9ac֢Рzʓ0̘6qJ5&@\i[e CC|շ"̸b=eE,jw5b[6S7Z5g,lۜKfY]PzK&ʂ{&eFUn[oއmo=nW@Ԙ2|ec!2g @X{C(vv@$0;405o,Zo ^@-k=ݽ {1t*˅>|qP:cC|WvCު#Elv3[𩶢EB_eX#XPyGA_֣J=gcKk+GVc fɆ݅+KmhO[>y3`FIFSC؈e,NU-}* Y\A/Gd0d=cznLjD9FUJyt6l]2M9HnF-%gc#+΍3[G<9[Rt{CZJ6AGLz !{/fDd6̢JFAJ'6{eV8 ٜX`FAY2#9="Tً^ 9uL&\#O:73M%"JiE0枧cys64 AMQ\b%#Y-m5DZs*% , m5tTu )g0ұdžuSSȻ;&.v˦sP%?jMsp`Cr.l62ʭ7YGv$E68Q]ijF 5S05gB7]*؜36jSMAWsF} ,s$FgA/N^l<$"d8[+~H4mbw]p`@#O7#9b0*.!TJ=1u9%qͧ\GhQ%Өz #Te[Nb@k (/nP&6ͺm 9Hԉ<xW|5 K~,~9xֳyGo(;yTNx~l 3u Ҥ%3' y{/Z㹠d:7.m@6Xז溨qciպM@igh6rsx^Q&E/!PG_'s+Lk ʔϗTJdׇ Yo# #2z}cBrZԫ'?ЋW@j/zequҏK%,MnTi|@@=/{L"˫&opMvzc'd*UNin.8$B=DZIpx,#u_Ydj PCJR1n_ !BC=JYhژsxk掽5~yU%-bL-gUfG10gS\aa ֲPG}C]5+kewd͏Cpp8jіDZ`/]1CfilQH4ȗ oD!J3v)^:q-Q+:4X]vC; ~/>/r=LM2Wv&h`'{ື)\? ^DfnJ:yśWqwp0kt'@uDuT4S/{͖XI ?,nh_]qg *{);p=8М.4P34ԝ`mT Zª]\{iGbYb Ye8~99 @ i4,ѮNdc4vsLncwIOOH._!eIw םF no>B0ں\qE3R1<#Rd}@N1$ bp(6or%**U'x.=TYLΦXvv&nUl^trg@eX‰z* FU_mt0FS)h%!JL5?0][*%l&kH".=lV z}zk(iBbs6Hpm7/H9#/xG EV՜HO*j$=]vЗ<+mWLOWpQ,&̀h(C"x85C@b5h;^/8 3F4sC")Z+Lc!_ ^훥^g4Pp ,-+ 2XZ0l4ip.9蚗L^$SczNE(b/*K-޻8Q}^q jJ!H"C"d8<إObc1&;x re<7拵iTVB,fUS\>W/Pʁ[8->'G$QcÚH+UEvt=-57 c>DWVSZ6 \BHŏ! ]Jq*6)|u*p^ c kSn'ԃ]Q"S3NN?KFXO.;ԫ&Ƭ"@$]MpupVs)/- $Rvg 7f|QZ1ͿFB0$^RTN>:(9CX[}4󤗰.Umo]չrna9Zϣj/wNuT7JO? *(D`68#JSvGf겣DmJw"/>ɮӄ=]P*{$Q 7׬?P`lLl{#YFy! >< lb ]>Y-/8twܘo 0=j(~]WgpI6{ yaau?%]LY%97N4gﮢGE[2.FKΆ:Ar!,`6T!Ŭ/27&V[ٙS#+i(g%U!u^G6T&S£ˊ7{;xі* x iB8qr(DKt-fĨX{$S3i/$ŤdzD:Y;e:bUL♬+Rw4} }A+r;0EC'Q Gש bjCmQV9R@dŕM$4?D:[PKiSKzBh]?*>MR;Vga^bt&ݔ:9w xՠּk1ܒq2R'P٧ ۢF}wgh$''_~Rz쐿ׯ,-2h? c7~2)V.M"/Q>SN,dQ%WM(:bЊ$v\jU:oŕ6znKfvfIK#h3%.Msȗv6$49YJo x<` lrq:,pna`Աa+2k(rl䢖DU EÁ݈]9}!uzrF깏6)}>CZuc5S05;4 : c^<2B^Rظ nhqLIsw&j0]UЋHER kថOi^zr<(JJ9OB. ,.7Ԫ/G3Ok I 2C@0tAS#CChaƕM.O"~OmHj\grr?f#eyI2eN'J\8#B&(OTD'>ux>YOd0_CgzٯYNCwV0[Ds,<4/Z)ʟ醒/Yg2KYh 'Z 5YoM ÿԴEYcaP'ܶstK7)C):R(Oq'!J>_σ@Ey!Z 4UoK3  Y`ep^'Bs/] ("ǁS tʫoCLC'3'@LP'^r {:K-aqlz3 /Sғ-VJ[wn=it4zOM[rƭm"(  O҉%9C// ėJ Q9@d}5Q E]l*I&] #{4ϸ>2\[156!դEi+U?6Ԅ)[8ˣEyt9R6g!oU.Ɲ @:S O;0#d&q7m8ܹWe 8m2.Y~]칈aOL)Q\Jhsm!?=qhۺҸf"6*_y2#8:o\6yH /W[[H@ˮx†J"@P.4)TFI<ߦ)Z`L /IXurC@sovH"b18͙JOn#}_7]zl*ܶU˻̮[ &O gOhx=jTէ86R*|Os XCjD򧾰+*)g }s_=7)d ل:4| Ю򝻷F,YUl`#/FZVxC[@EԼ ZA"BZ~S Es“|1ڔ]kћ'6eI^S>3, 158n#v龺 ?l5䞐y~3|%8)U l obHn&"F+)|P] NYԩoU*T/i#,˵JtSP- xx$w:m)c=*[l:%EzB{ TQ)#ݟi*nNwI94]{MNDg g~=~SHD2!jtt (? >0VNiVk^$9yH#Ft;M=G_sRj8ņ,ݱE ya3Ü\2r^,tvEI$&s7l>:'* y5hjJTKDtB*`1CAPsU30dA)x=tKE9$xPb+9h&$[Ԕ:3GrY7DJe<{?zKk=h( = M8Cྲ2JarW"յ*;.l]{ *- X<< a/4FP(Rf vXu]7^LFS[ݯ%Ì8Oh&p%Zq.Fg]wMl ~->@ M頇`, (H!#X0%|x._繀[W7z#P8ʝ[!r)uhJR1i]W#J+D2 z_;90o^tP YN^'ڬ1wN?a0zqK6Y%ݧVNJDӔ6$E|6LJDa"]\~iדX@6!Kt >NCְn*wu P&I~s#<b"ёȚ$_=)B9){ ݷwҠتDA(ڒ)Pe6+B׼7urX#p,m5i'4ΐp pEVk<4>k0e`- vhBr+<vgLiWjqF6NhSʐ{ ̡.~2ngP*AMotGt[hrxy.;|'w"<=| I` JZg)U,b$s S4jHZƎ^G⯪FL9d"ȥ[{Hba#DtgԮ@!:m#yr 8 gpg^'y%~$fibXu`ˈ6BdS#֊C96z;:Z& #zq_eW^X&"eNh/#2<7e9zZ@.+ 8~f.w00u&UzJHgSq@˿-ӂWNft3LG}RfvQ]pRWq"Z8y'.> p~?YvMpZATiY")=Pgvj#|W3'V?=73=W:RkHg5^$*:߽f[tNo͙Spjai)p"$fe4ڐ}s$V:3`pd(U;kn"K/ YeY9_ɢB:ټ aJ@E388C-\ӄDM87iO:,f*xPRKk3∓`<߫Ida:nTKJmfOlS.0A)ߖ=61;2C9efa@7 LLZ\'脕o``̋v/z[ ӬP,iԂ!IޒQB0&;Kiy}dZ1&k wBvtd(3nD?kAZ}z=O#tW+$cok% L67Rct"Z"⦌7E|E%W׫{A7x``~wNʆ.4[gi*i<˼5"Gr6 W!ui>i`e[lT*jRӳGyT@p]B#:, Dij kPD]7]$T8%4 ) LU.qar~"ãfK!͵[a!t sĖ8͘)D&$ 8b%ueߍNXj$ѐϸߵ$Hw;u41D\b>TlWfkC%(}-cQP*ǭ cW.TQեEj_ flLpek'No( "%\D1C`ˆ*E/_}y**; B@.1 Ims o<߯w@!:Si+)́Zkf1&IpdʙPU1MTB){3wsџ,j$AQO wMuRP!qDL;ge ~Rq9mώ_Vtl*h0""SȂ} 7 [cQ=љnE] [8',%x&/v'k Sle%:odGU, bo0e43a|4d6V{rʱ%R"LZ]?oCbZ_@sĨ*?t޶*ej'oÿ|WvJaҋU <4Ɛ" c߾XavbF_?q=ނ)]dfc Kz wo툡ʎ"@wfeLq{d5{36㍝PU2p+(xߟ5jc36}Ż!u ckSǻ"&jdUc_xk~B]u(k鰥aqFyw߃3R6FE&fâ ++6+r-傃+^j!n0Fչa/.RL!1Rj뛢>zx{w4鴏Θ6I8UYl  2*t5_b62 ƠU.=lx/fϤ'no6f3-猔OS9kP2cMMQTA_\ sA6 D`Y@5ѵ,UsG:ȥ~f⽮\C"Lch..ڮC`{uEcgҙA+m?h >l(=o@$뷎XkXg# ,#`M|~O8r@du_YUx xII.=w3Y mǯޙ 5%"q׭ ĮFW7 YZ