samba-kdc-32bit-4.7.6+git.54.6e3276c9872-lp150.2.20 >  A ZW/=„<L3ߘI`N<4 ]}u!y2Z`.B=.qȈphCA p:F+/|AiqH ;|qV(tZXJ%ĵ 58 fI0Q=BlBw=6oF Y8qlMZl~+`Ik&|O%I 7z b㔟#x̑|M\4Ȼ \U')lJ.+24r#A&pLio! q'5sQ>WQ@}wE{;4'/^\ g[{0,jY0 Qԥl)9ƥ=*7Ĵ,B(lٻ!>p>?d+ 6 Ddhtx && & 8& &  6&  x& & &  & X,+4(+8+96:c~>[Gd&H&IÔ&XüY\\&]&^ bǧcedeflu&vxw&xڨ&y@ADHNCsamba-kdc-32bit4.7.6+git.54.6e3276c9872lp150.2.20Samba MIT KDCThis package contains the KDCZwildcard3!openSUSE Leap 15.0openSUSEGPL-3.0+https://bugs.opensuse.orgProductivity/Networking/Sambahttps://www.samba.org/linuxx86_64/sbin/ldconfig UupeUeel%uEp5,%0de48d%dedEh%,h%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-server.so.0.0.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.7.6+git.54.6e3276c9872-lp150.2.20.src.rpmlibdb-glue-samba4.solibdb-glue-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libdcerpc-server.so.0libdcerpc-server.so.0(DCERPC_SERVER_0.0.1)libdfs-server-ad-samba4.solibdfs-server-ad-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libdlz-bind9-for-torture-samba4.solibdlz-bind9-for-torture-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libdnsserver-common-samba4.solibdnsserver-common-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libpac-samba4.solibpac-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libprocess-model-samba4.solibprocess-model-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libservice-samba4.solibservice-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)samba-kdc-32bitsamba-kdc-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shlibLIBWBCLIENT-OLD-samba4.solibLIBWBCLIENT-OLD-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libMESSAGING-SEND-samba4.solibMESSAGING-SEND-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libMESSAGING-samba4.solibMESSAGING-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libasn1util-samba4.solibasn1util-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libauth4-samba4.solibauth4-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libauthkrb5-samba4.solibauthkrb5-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.8)libcli-cldap-samba4.solibcli-cldap-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libcli-ldap-common-samba4.solibcli-ldap-common-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libcli-ldap-samba4.solibcli-ldap-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libcli-nbt-samba4.solibcli-nbt-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libcliauth-samba4.solibcliauth-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libcluster-samba4.solibcluster-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libcom_err.so.2libcommon-auth-samba4.solibcommon-auth-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libdb-glue-samba4.solibdb-glue-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libdcerpc-binding.so.0libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)libdcerpc-samba4.solibdcerpc-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libdcerpc-server.so.0libdcerpc-server.so.0(DCERPC_SERVER_0.0.1)libdcerpc.so.0libdcerpc.so.0(DCERPC_0.0.1)libdnsserver-common-samba4.solibdnsserver-common-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libdsdb-garbage-collect-tombstones-samba4.solibdsdb-garbage-collect-tombstones-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libdsdb-module-samba4.solibdsdb-module-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libevents-samba4.solibevents-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libflag-mapping-samba4.solibflag-mapping-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libgenrand-samba4.solibgenrand-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libgensec-samba4.solibgensec-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libgnutls.so.30libgnutls.so.30(GNUTLS_3_4)libk5crypto.so.3libk5crypto.so.3(k5crypto_3_MIT)libkadm5srv_mit.so.11libkadm5srv_mit.so.11(kadm5srv_mit_11_MIT)libkdb5.so.8libkdb5.so.8(kdb5_8_MIT)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)libkrb5samba-samba4.solibkrb5samba-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libldb.so.1libldb.so.1(LDB_0.9.10)libldb.so.1(LDB_0.9.12)libldb.so.1(LDB_0.9.15)libldb.so.1(LDB_0.9.16)libldbsamba-samba4.solibldbsamba-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libmessages-dgm-samba4.solibmessages-dgm-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libndr-krb5pac.so.0libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)libndr-nbt.so.0libndr-nbt.so.0(NDR_NBT_0.0.1)libndr-samba-samba4.solibndr-samba-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libndr-samba4.solibndr-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libndr-standard.so.0libndr-standard.so.0(NDR_STANDARD_0.0.1)libndr.so.0libndr.so.0(NDR_0.0.1)libndr.so.0(NDR_0.0.2)libndr.so.0(NDR_0.0.4)libndr.so.0(NDR_0.0.7)libndr.so.0(NDR_0.0.8)libnetif-samba4.solibnetif-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libnpa-tstream-samba4.solibnpa-tstream-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libpac-samba4.solibpac-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libpopt.so.0libpopt.so.0(LIBPOPT_0)libprocess-model-samba4.solibprocess-model-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.2)libpython2.7.so.1.0libreplace-samba4.solibreplace-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libsamba-credentials.so.0libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)libsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1)libsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-modules-samba4.solibsamba-modules-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libsamba-python-samba4.solibsamba-python-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamdb-common-samba4.solibsamdb-common-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libsamdb.so.0libsamdb.so.0(SAMDB_0.0.1)libservice-samba4.solibservice-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.7.6_GIT.54.6E3276C9872LP150.2.20_SUSE_OS15.0_I386)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent.so.0libtevent.so.0(TEVENT_0.9.12)libtevent.so.0(TEVENT_0.9.13)libtevent.so.0(TEVENT_0.9.20)libtevent.so.0(TEVENT_0.9.9)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USaT5'@T5'@T3T12T->@T->@T%U@T$T!`T!`T@T@TSS<@SS@S@Sہ@Sہ@Sہ@S@S;@S.S@SSSS@S@SS8@S}SxSg}@ScSZN@SXSO@SM@SM@SG@SG@SG@SG@S:@S:@S5d@S2@S,)S L@SSSS@S@S(S @S S 4@S?S?S?SK@R@Rb@R@RRR@R@RRRRRURURURRR&R@RR=R=RʚRʚRʚRʚRʚRʚRSRR@RjRjRv@RG@RG@RRRRR RiRu@RpRW@RUE@RUE@REs@R:@R6R4OR2@R(r@R%@R!R7R@R@QQQ@QQQQޞ@Qޞ@Qޞ@Qֵ@QQo@QzQQɆ@Q@Q(@Q@Qzl@QdQAQ,Q+R@Q@QQQ@Q@QEQ@Q \Q \PP-P-P9@PPDP[P@PѬ@P @P @PPP}@P+P@PP@PBPBPPP@P@P*P6@Pd@PoPoPoPoP{@Pb@Pb@PWPWPQP,PPP H@P H@PP@OjOjOORORO Ọ@OȮOȮO]@O]@O OE@O!O@OOO@O OoOc+@OaO`@OKp@OB5O>A@O=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2.- Rebase File Server Remote VSS Protocol (FSRVP) server against 4.2.0rc1; (fate#313346).- Backport upstream master fixes for samba-regedit; (bnc#896536).- BuildRequire python-xml on SUSE systems only.- BuildRequire python-xml. - Exclude unwanted texpect binary and libhttp, libsamba-cluster-support, libsamba-debug, and libsocket-blocking shared libs. - Add vfs_fruit and vfs_worm man pages and ndr_dcerpc, smb2_lease_struct, tstream_smbXcli_np, idtree, and idtree_random header files. - Remove nmblookup and smbclient4 binary and nmblookup4 man page.- Update to 4.2.0rc1.- Fix small memory-leak in the background print process; (bnc#899558).- Modify samba-regedit so it displays correctly (related to ncurses). Changed code to use menu sub windows, seems to fix problems with display not refreshing; explicitly BuildRequire ncurses-devel; (bnc#896536).- Exclude unwanted libdnsserver_common and libdfs_server_ad shared libs and the man page of the unused findsmb script.- Skip groups that aren't mapped by idmap_ad; (bso#10824); (bnc#897969).- Update to 4.1.12. + s3: winbindd: On new client connect, prune idle or hung connections older than "winbind request timeout". Add new parameter "winbind request timeout". Please see smb.conf man page for details; (bso#3204); (bnc#872912). + Fix smbd crashes when filename contains non-ascii character; (bso#10716). + s4-rpc: dnsserver: Handle updates of tombstoned dnsNode objects; (bso#10749). + passdb: Fix NT_STATUS_NO_SUCH_GROUP; (bso#9570). + s4:setup/dns_update_list: make use of the new substitution variables; (bso#9831). + build: Fix configure to honour '--without-dmapi'; (bso#10369). + provision: Correctly provision the SOA record minimum TTL; (bso#10466). + s3: Enforce a positive allocation_file_size for non-empty files; (bso#10543). + lib: tevent: make TEVENT_SIG_INCREMENT atomic; (bso#10640). + Make "case sensitive = True" option working with "max protocol = SMB2" or higher in large directories; (bso#10650). + Samba 4 consuming a lot of CPU when re-reading printcap info; (bso#10652). + lib: strings: Simplify strcasecmp; (bso#10716). + Allow netr_ServerReqChallenge() and netr_ServerAuthenticate3() on different connections; (bso#10723). + 'net time': Fix usage and core dump; (bso#10728). + sys_poll_intr: Fix timeout arithmetic; (bso#10731). + s3:idmap: Don't log missing range config if range checking not requested; (bso#10737). + Fix flapping VFS gpfs offline bit; (bso#10741). + s4-rpc: dnsserver: Allow . to be specified for @ record; (bso#10742). + s4-rpc: dnsserver: return DNS_RANK_NS_GLUE recors when explicitly asked for; (bso#10751). + samba: Retain case sensitivity of cifs client; (bso#10755). + lib: Remove unused nstrcpy; (bso#10758). + Fix a memory leak in cli_set_mntpoint(); (bso#10759). + docs: Fix typos in smb.conf (inherit acls); (bso#10761). + libcli/security: Add better detection of SECINFO_[UN]PROTECTED_[D|S]ACL in get_sec_info(); (bso#10773). + s3: smbd: POSIX ACLs. Remove incorrect check for SECINFO_PROTECTED_DACL in incoming security_information flags in posix_get_nt_acl_common(); (bso#10773). + Don't discard result of checking grouptype; (bso#10777). + s3:libsmb: Set a max charge for SMB2 connections; (bso#10778). + smbd: Properly initialize mangle_hash; (bso#10782). + dosmode: Fix FSCTL_SET_SPARSE request validation; (bso#10787). + vfs_dirsort: Fix an off-by-one error that can cause uninitialized memory read; (bso#10794).- Wait for network-online.target to prevent caching of pre-network failures; (bnc#889175).- Use domain name if search by domain SID fails to send SIDHistory lookups to correct idmap backend; (bnc#773464).- Prune idle or hung connections older than "winbind request timeout"; (bso#3204); (bnc#872912).- fix FSCTL_SET_SPARSE request validation; (bso#10787); (bnc#893774).- Remove pre-11.2 patch which by default uses the smbpasswd passdb backend.- build: disable mmap on s390 systems; (bso#10765); (bnc#886193); (bnc#882356).- Create the cups smb backend as sym link pointing to smbspool; (bnc#891220).- Fix winbind service parameter usage; (bnc#890005).- lib/param: change the default for "winbind expand groups" to "0"; (bnc#890008).- Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon; CVE-2014-3560; (bnc#889429).- Fix "net time" segfault; (bso#10728); (bnc#889539).- Update to 4.1.10. + net/doc: Make clear that net vampire is for NT4 domains only; (bso#3263). + dbcheck: Add check and test for various invalid userParameters values; (bso#8077). + s4:dsdb/samldb: Don't allow 'userParameters' to be modified over LDAP for now; (bso#8077). + Simple use case results in "no talloc stackframe around, leaking memory" error; (bso#8449). + s4:dsdb/repl_meta_data: Make sure objectGUID can't be deleted; (bso#9763). + dsdb: Always store and return the userParameters as a array of LE 16-bit values; (bso#10130). + s4:repl_meta_data: fix array assignment in replmd_process_linked_attribute(); (bso#10294). + ldb-samba: fix a memory leak in ldif_canonicalise_objectCategory(); (bso#10469). + dbchecker: Verify and fix broken dn values; (bso#10536). + dsdb: Rename private_data to rootdse_private_data in rootdse; (bso#10582). + s3: libsmbclient: Work around bugs in SLES cifsd and Apple smbx SMB1 servers; (bso#10587). + Fix "PANIC: assert failed at ../source3/smbd/open.c(1582): ret"; (bso#10593). + rid_array used before status checked - segmentation fault due to null pointer dereference; (bso#10627). + Samba won't start on a machine configured with only IPv4; (bso#10653). + msg_channel: Fix a 100% CPU loop; (bso#10663). + s3: smbd: Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056). + s3: SMB2: Fix leak of blocking lock records in the database; (bso#10673). + samba-tool: Add --site parameter to provision command; (bso#10674). + smbstatus: Fix an uninitialized variable; (bso#10680). + SMB1 blocking locks can fail notification on unlock, causing client timeout; (bso#10684). + s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap(); (bso#10685). + 'RW2' smbtorture test fails when -N is set to 2 due to the invalid status check in the second client; (bso#10687). + wbcCredentialCache fails if challenge_blob is not first; (bso#10692). + Backport ldb-1.1.17 + changes from master; (bso#10693). + Fix SEGV from improperly formed SUBSTRING/PRESENCE filter; (bso#10693). + ldb: Add a env variable to disable RTLD_DEEPBIND; (bso#10693). + ldb: Do not build libldb-cmdline when using system ldb; (bso#10693). + ldb: Fix 1138330 Dereference null return value, fix CIDs 241329, 240798, 1034791, 1034792 1034910, 1034910); (bso#10693). + ldb: make the successful ldb_transaction_start() message clearer; (bso#10693). + ldb:pyldb: Add some more helper functions for LdbDn; (bso#10693). + ldb: Use of NULL pointer bugfix; (bso#10693). + lib/ldb: Fix compiler warnings; (bso#10693). + pyldb: Decrement ref counters on py_results and quiet warnings; (bso#10693). + s4-openldap: Remove use of talloc_reference in ldb_map_outbound.c; (bso#10693). + dsdb: Return NO_SUCH_OBJECT if a basedn is a deleted object; (bso#10694). + s4:dsdb/extended_dn_in: Don't force DSDB_SEARCH_SHOW_RECYCLED; (bso#10694). + Backport autobuild/selftest fixes from master; (bso#10696). + Backport drs-crackname fixes from master; (bso#10698). + smbd: Avoid double-free in get_print_db_byname; (bso#10699). + Backport access check related fixes from master; (bso#10700). + Backport provision fixes from master; (bso#10703). + s3:smb2_read: let smb2_sendfile_send_data() behave like send_file_readX(); (bso#10706). + s3: Fix missing braces in nfs4_acls.c.- Reduce printer_list.tdb lock contention during printcap update; (bso#10652); (bnc#883870). + Only update the printer share inventory when needed.- Add missing newline to debug message in daemon_ready(); (bnc#865627).- BuildRequire systemd-devel, configure --with-systemd, and modify the service files accordingly on post-12.2 systems; (bso#10517); (bnc#865627).- Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056).- Update to 4.1.9. + Fix nmbd denial of service; CVE-2014-0244; (bnc#880962). + Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler; CVE-2014-3493; (bnc#883758).- BuildRequire krb5-devel, libiniparser-devel, and python-devel in any case.- BuildRequire libxslt and perl-ExtUtils-MakeMaker and BuildIgnore libtevent on CentOS, Fedora, and RHEL systems.- Update to 4.1.8. + dns: Don't reply to replies; CVE-2014-0239; (bso#10609). + Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549). + s3: smb2: Fix 'xcopy /d' with samba shares; (bso#3124). + Extra ':' in msg for Waf Cross Compile Build System with Cross-answers command; (bso#10151). + s3: nmbd: Reset debug settings after reading config file; (bso#10239). + Fix empty body in if-statement in continue_domain_open_lookup; (bso#10348). + script/autobuild: Make use of '--with-perl-{arch,lib}-install-dir'; (bso#10472). + wafsamba: Fix the installation on FreeBSD; (bso#10472). + Use exit_daemon() to communicate status of startup to systemd; (bso#10517). + Fix adding NetApps; (bso#10524). + s3: lib/util: Fix logic inside set_namearray loops; (bso#10544). + s3: lib/util: set_namearray reads across end of namelist; (bso#10544). + idmap_autorid: Fix failure in reverse lookup if ID is from domain range index #0; (bso#10547). + build: Fix ordering problems with lib-provided and internal RPATHs; (bso#10548). + Fix read of deleted memory in reply_writeclose()'; (bso#10554). + lib-util: Rename memdup to smb_memdup and fix all callers; (bso#10556). + Fix lock order violation and file lost; (bso#10564). + dsdb: Do checks for invalid renames in samldb, before repl_meta_data; (bso#10569). + Fix wildcard unlink to fail if we get an error rather than trying to continue; (bso#10577). + byteorder: Do not assume PowerPC is big-endian; (bso#10590). + printing: Fix purge of all print jobs; (bso#10612).- examples/libsmbclient: avoid some compiler warnings; (bso#10624).- Fix printer job purging; (bso#10612); (bnc#879390).- Update samba-pubkey_6568B7EA.asc which will expire 2016-01-17.- Fix byte-order macros on little endian Power8; (bso#10590); (bnc#871701).- Pass through vfs_btrfs snapshot manipulation requests when "btrfs: manipulate snapshots = no" is configured; (bnc#874180).- Clone the base share security descriptor when exposing a snapshot share; (bnc#874656).- Use appropriate HRESULT return codes; (bnc#875046).- Update to 4.1.7. + Make "force user" work as expected; (bso#9878). + Fix build on AIX with IBM XL C/C++ (gettext detection issues); (bso#9911). + Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942). + s3-printing: Fix obvious memory leak in printer_list_get_printer(); (bso#9993). + doc: Add "spoolss: architecture" parameter usage; (bso#10188). + Make 'smbclient' support DFS shares with SMB2/3; (bso#10200). + Make (lib)smbclient work with NetApp; (bso#10230). + SessionLogoff on a signed connection with an outstanding notify request crashes smbd; (bso#10344). + dfs: Always call create_conn_struct with root privileges; (bso#10378). + 'net ads search' on high latency networks can return a partial list with no error indication; (bso#10387). + max xmit > 64kb leads to segmentation fault; (bso#10422). + Fix STATUS_NO_MEMORY response from Query File Posix Lock request; (bso#10431). + Increase max netbios name components; (bso#10439). + smbd_server_connection_terminate("CTDB_SRVID_RELEASE_IP") panics from within ctdbd_migrate() with invalid lock_order; (bso#10444). + Fix 'wbinfo -i' with one-way trust; (bso#10458). + samba4 services not binding on IPv6 addresses causing connection delays; (bso#10464). + s3-vfs: Fix stream_depot vfs module on btrfs; (bso#10467). + Don't respond with NXDOMAIN to records that exist with another type; (bso#10471). + pidl: waf should have an option for the dir to install perl files and do not glob; (bso#10472). + s3-spoolssd: Don't register spoolssd if epmd is not running; (bso#10474). + s3-rpc_server: Fix handling of fragmented rpc requests; (bso#10481). + Initial FSRVP rpcclient requests fail with NT_STATUS_PIPE_NOT_AVAILABLE; (bso#10484). + lsa.idl: Define lsa.ForestTrustCollisionInfo and ForestTrustCollisionRecord as public structs; (bso#10504). + Make 'smbreadline' build with readline 6.3; (bso#10506). + smbd: Correctly add remote users into local groups; (bso#10508). + rpcclient FSRVP request UNCs should include a trailing backslash; (bso#10521). + Cleanup messages.tdb record after unclean smbd shutdown; (bso#10534). + s3:rpc_server: Minor refactoring of process_request_pdu().- Create a new DBus connection for every vfs_snapper request, to ensure correct snapper UID detection; (bnc#866354).- Fix "Invalid read" in method reply_writeclose; (bso#10554); (bnc#873658).- Fix minor compiler warnings in snapshot code-path; (bnc#873177).- Remove references to the obsolete samba-krb-printing package and get_printing_ticket binary.- Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549); (bnc#872396).- User error strings instead of hex codes where possible for FSRVP errors; (bnc#866927).- Fix remote share shadow copy request UNCs; (bso#10521); (bnc#870957).- Add krb5rcache directory to the winbind package; (bnc#870607). - Cleanup and consolidate the sysconfig and systemd service files.- Extend vfs_snapper man page to cover permissions; (bnc#870570).- Fix RPC server handling of fragmented requests; (bso#10481); (bnc#869707).- Default with the cache and lock directory to the same path to have both non-persistent and persistent data at one location; (bnc#846586).- Depend only on %version with all manual Provides and Requires; (bnc#844307).- Update to 4.1.6. + Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224). + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; (bnc#855866).- Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224).- Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665).- samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442; (bnc#855866).- Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484); (bnc#865095).- Propagate snapshot enumeration permissions errors to SMB clients; (bnc#865641).- Properly handle empty 'requires_membership_of' entries in /etc/security/pam_winbind.conf; (bnc#865771).- Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748). - Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561).- Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397).- Use libarchive to provide improved smbclient tarmode functionality; (bso#9667); (bnc#861135).- Depend on %version-%release with all manual Provides and Requires; (bnc#844307).- Update to 4.1.5. + Fix 100% CPU utilization in winbindd when trying to free memory in winbindd_reinit_after_fork; (bso#10358); (bnc#786677). + smbd: Fix memory overwrites; (bso#10415). + s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done(); (bso#2191). + ntlm_auth sometimes returns the wrong username to mod_ntlm_auth_winbind; (bso#10087). + s3: smbpasswd: Fix crashes on invalid input; (bso#10320). + s3: vfs_dirsort module: Allow dirsort to work when multiple simultaneous directories are open; (bso#10406). + Add support for Heimdal's unified krb5 and hdb plugin system, cope with first element in hdb_method having a different name in different heimdal versions and fix INTERNAL ERROR: Signal 11 in the kdc pid; (bso#10418). + vfs_btrfs: Fix incorrect zero length server-side copy request handling; (bso#10424). + s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we can't cope with a symlink when lp_posix_pathnames() is true; (bso#10429). + smbd: Fix an ancient oplock bug; (bso#10436). + Fix crash bug in smb2_notify code; (bso#10442).- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).- Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079). + Improve vfs_snapper documentation.- Fix Winbind 100% CPU utilization caused by domain list corruption; (bso#10358); (bnc#786677).- Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415); (bnc#862370).- Streamline the vendor suffix handling and add support for SLE 12.- Fix zero length server-side copy request handling; (bso#10424); (bnc#862558).- Set the PID directory to /run/samba on post-12.2 systems.- Make use of the tmpfilesdir macro while calling systemd-tmpfiles.- Make winbindd print the interface version when it gets an INTERFACE_VERSION request; (bnc#726937).- Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH definitions; (bnc#860832).- Check for NULL gensec_security in gensec_security_by_auth_type(); (bnc#860809).- Ensure ndr table initialization; (bnc#860648).- Add File Server Remote VSS Protocol (FSRVP) server for SMB share shadow-copies; (fate#313346).- s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662). - shadow_copy2: module "Previous Version" not working in Windows 7; (bso#10259). - s3-passdb: Fix string duplication to pointers; (bso#10367). - vfs/glusterfs: in case atime is not passed, set it to the current atime; (bso#10384)- s3: winbindd: Move calling setup_domain_child() into add_trusted_domain(); (bso#10358); (bnc#786677).- Default sysconfig daemon options to -D; (bso#10388); (bnc#857454).- Add /var/cache/samba to the client file list; (bnc#846586).- Really add the WINBINDDOPTIONS sysconfig variable on install; (bnc#857454).- Correct sysconfig variable names by adding the missing D char; (bnc#857454).- Update to 4.1.4. + Fix segfault in smbd; (bso#10284). + Fix SMB2 server panic when a smb2 brlock times out; (bso#10311).- Call stop_on_removal from preun and restart_on_update and insserv_cleanup from postun on pre-12.3 systems only; (bnc#857454).- BuildRequire gamin-devel instead of unmaintained fam-devel package on post-12.1 systems.- smbd: allow updates on directory write times on open handles; (bso#9870). - lib/util: use proper include for struct stat; (bso#10276). - s3:winbindd fix use of uninitialized variables; (bso#10280). - s3-winbindd: Fix DEBUG statement in winbind_msg_offline(); (bso#10285). - s3-lib: Fix %G substitution for domain users in smbd; (bso#10286). - smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open; (bso#10297). - smb2_server processing overhead; (bso#10298). - ldb: bad if test in ldb_comparison_fold(); (bso#10305). - Fix AIO with SMB2 and locks; (bso#10310). - smbd: Fix a panic when a smb2 brlock times out; (bso#10311). - vfs_glusterfs: Enable per client log file; (bso#10337).- Add /etc/sysconfig/samba to the main and winbind package; (bnc#857454).- Create /var/run/samba with systemd-tmpfiles on post-12.2 systems; (bnc#856759).- Fix broken rc{nmb,smb,winbind} sym links which should point to the service binary on post-12.2 systems; (bnc#856759).- Add Snapper VFS module for snapshot manipulation; (fate#313347). + dbus-1-devel required at build time.- Add File Server Remote VSS Protocol (FSRVP) client for SMB share shadow-copies; (fate#313345).- Do not BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp as they're part of the minimum build environment.- Update to 4.1.3. + DCE-RPC fragment length field is incorrectly checked; CVE-2013-4408; (bnc#844720). + pam_winbind login without require_membership_of restrictions; CVE-2012-6150; (bnc#853347).- Make use of the full gpg pub key file name including the key ID.- Add transparent file compression support; (fate#316266). + Implement FSCTL_GET_COMPRESSION and FSCTL_SET_COMPRESSION handlers. + Add FILE_ATTRIBUTE_COMPRESSED and FILE_NO_COMPRESSION support. + Extend vfs_btrfs VFS module to utilize get/set compression hooks.- Add support for FSCTL_SRV_COPYCHUNK_WRITE; (fate#314770).- Remove bogus libsmbclient0 package description and cleanup the libsmbclient line from baselibs.conf; (bnc#853021).- BuildRequire systemd on post-12.2 systems.- Update to 4.1.2. + s4-dns: dlz_bind9: Create dns-HOSTNAME account disabled; (bso#9091). + dfs_server: Use dsdb_search_one to catch 0 results as well as NO_SUCH_OBJECT errors; (bso#10052). + Missing talloc_free can leak stackframe in error path; (bso#10187). + Fix memset used with constant zero length parameter; (bso#10190). + s4:dsdb/rootdse: report 'dnsHostName' instead of 'dNSHostName'; (bso#10193). + Make offline logon cache updating for cross child domain group membership; (bso#10194). + nsswitch: Fix short writes in winbind_write_sock; (bso#10195). + RW Deny for a specific user is not overriding RW Allow for a group; (bso#10196). + vfs_glusterfs: Fix excessive debug output from vfs_gluster_open(); (bso#10224). + vfs_glusterfs: Implement proper mashalling/unmarshalling of ACLs; (bso#10224). + VFS plugin was sending the actual size of the volume instead of the total number of block units because of which windows was getting the wrong volume capacity; (bso#10224). + libcli/smb: Fix smb2cli_ioctl*() against Windows 2008; (bso#10232). + xattr: Fix listing EAs on *BSD for non-root users; (bso#10247). + Fix the build of vfs_glusterfs; (bso#10253). + s3-winbindd: Fix cache_traverse_validate_fn failure for NDR cache entries; (bso#10264). + util: Remove 32bit macros breaking strict aliasing; (bso#10269).- Let gpg verify execution condition not fail on non SUSE systems.- Add systemd support for post-12.2 systems.- Allow smbcacls to take a '--propagate-inheritance' flag to indicate that the add, delete, modify and set operations now support automatic propagation of inheritable ACE(s); (FATE#316474).- Unconditionally create the CUPS smb backend sym link pointing to smbspool; (bnc#850656).- Update to 4.1.1. + ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101). + Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101).- Update to 4.1.0. + pam_winbindd: Support the KEYRING ccache type; (bso#10132). + Fix PAC parsing failure; (bso#10178).- Unify the defattr lines in the pidl, python, test and test-devel files section by removing the optional directory mode.- Verify source tar ball gpg signature.- Update to 4.1.0rc4. + dsdb: Convert the full string from UTF16 to UTF8, including embedded NULLs; (bso#8077). + python-samba-tool fsmo: Do not give an error on a successful role transfer; (bso#9461). + dbwrap_ctdb: Treat empty records as non-existing; (bso#10008). + Raise the level of a debug when unable to open a printer; (bso#10118). + Add "acl allow execute always" parameter; (bso#10134). + vfs_shadow_copy2: Display previous versions correctly over SMB2; (bso#10137). + smbd: Always clean up share modes after hard crash; (bso#10138). + Valid utf8 filenames cause "invalid conversion error" messages; (bso#10139). + libcli/smb: Use SMB1 MID=0 for the initial Negprot; (bso#10144). + Samba SMB2 client code reads the wrong short name length in a directory listing reply; (bso#10145). + libcli/smb: Only check the SMB2 session setup signature if required and valid; (bso#10146). + Better document potential implications of a globally used "valid users"; (bso#10147). + cli_smb2_get_ea_list_path() failed to close file on exit; (bso#10149). + Not all OEM servers support the ALTNAME info level; (bso#10150). + Regression causes replication failure with Windows 2008R2 and deletes Deleted Objects; (bso#10157). + Netbios related samba process consumes 100% CPU; (bso#10158). + Fix POSIX ACL mapping when setting DENY ACE's from Windows; (bso#10162).- Require libndr-standard-devel due to gen_ndr/lsa.h from libpdb-devel.- Add libdcerpc0, libdcerpc-atsvc0, libdcerpc-binding0, libdcerpc-samr0, libgensec0, libndr0, libndr-krb5pac0, libndr-nbt0, libndr-standard0, libpdb0, libregistry0, libsamba-credentials0, libsamba-hostconfig0, libsamba-policy0, libsamba-util0, libsamdb0, libsmbclient-raw0, libsmbconf0, libsmbldap0, and libtevent-util0 to baselibs.conf.- Add or polish the shared library package summaries and descriptions.- Update to 4.1.0rc3. + Fix working on site with Read Only Domain Controller; (bso#5917). + Add man page for vfs_syncops; (bso#7364). + Add man page for vfs_linux_xfs_sgid; (bso#7490). + When replicating DNS for bind9_dlz we need to create the server-DNS account remotely; (bso#9091). + Winbind unable to retrieve user information from AD; (bso#9615). + winbind_lookup_names() fails because of NT_STATUS_CANT_ACCESS_DOMAIN_INFO; (bso#9899). + Build Samba 4.0.x on AIX with IBM XL C/C++; (bso#9911). + Add SMB2 and SMB3 support for smbclient; (bso#9974). + Add man pages for ntdb tools; (bso#10000). + Add man page for samba-regedit tool; (bso#10001). + ::1 added to nameserver on join; (bso#10030). + Fix memory leak in source3/lib/util.c:1493; (bso#10063). + Fix segmentation fault in 'net ads join'; (bso#10073). + Fix variable list in vfs_crossrename man page; (bso#10076). + s3-winbind: Fix a segfault passing NULL to a fstring argument; (bso#10082). + smbd: Fix async echo handler forking; (bso#10086). + MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba; (bso#10097). + Honour output buffer length set by the client for SMB2 GetInfo requests; (bso#10106). + Fix Winbind crashes on DC with trusted AD domains; (bso#10107). + Handle Dropbox (write-only-directory) case correctly in pathname lookup; (bso#10114). + Masks incorrectly applied to UNIX extension permission changes; (bso#10121).- Implement shared library packaging guidelines. - Correct interpackage dependencies; (bso#10129).- Define the source URL differently in the case of a release candidate.- Update to 4.1.0rc2. + Add vfs_btrfs module. + Add support for server-side copy operations via the SMB2 FSCTL_SRV_COPYCHUNK request. + Fix replication with --domain-crictical-only to fill in backlinks; (bso#9029). + Windows 8 Roaming profiles fail; (bso#9678). + Fix crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + Do not delete an existing valid credential cache (s3-winbind); (bso#9994). + Fix segfault while reading incomplete session info; (bso#10003). + Missing integer wrap protection in EA list reading can cause server to loop with DOS (CVE-2013-4124); (bso#10010). + Fix a 100% loop at shutdown time (smbd); (bso#10013). + Fix/improve debug options; (bso#10015). + Rename regedit to samba-regedit; (bso#10040). + Remove obsolete swat manpage and references; (bso#10041). + Fix crashes in socket_get_local_addr(); (bso#10042). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Remove a redundant inlined substitution of ACLs; (bso#10045). + nsswitch: Add OPT_KRB5CCNAME to avoid an error message; (bso#10048). + dsdb improvements; (bso#10056). + Linux kernel oplock breaks can miss signals; (bso#10064).- BuildRequire pyldb-devel.- Add libnetapi0 and samba-libs to baselibs.conf.- Update to 4.0.9. + Fix crash of Winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + s3-lib: Fix segmentation fault while reading incomplete session info; (bso#10003). + smbd: Fix a 100% loop at shutdown time; (bso#10013). + Windows 8 Roaming profiles fail; (bso#9678). + Add UPN enumeration to passdb internal API; (bso#9779). + smbd: Cleanup disonnected durable handles; (bso#9930). + vfs_streams_xattr: Do not attempt to write empty attribute twice; (bso#9970). + Fix Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + s3-winbind: Do not delete an existing valid credential cache; (bso#9994). + Fix excessive RID allocation; (bso#10014). + Add debugclass for DNS server; (bso#10015). + Fix/improve debug options; (bso#10015). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Linux kernel oplock breaks can miss signals; (bso#10064). + net ads join: Fix segmentation fault in create_local_private_krb5_conf_for_domain; (bso#10073).- Update to 4.0.8. + Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections; CVE-2013-4124; (bnc#829969).- Require krb5 and not the non existing krb5-libs package.- Update to 4.1.0rc1. + Directory database replication (AD DC mode) + Server-Side Copy Support + Btrfs Filesystem Integration- BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp. - BuildRequire libxslt, libxslt1, or libxslt-tools depending on SUSE version. - Require perl-base on SUSE systems only.- Adjust group setting of the test-devel subpackage. - Require perl-base from the pidl subpackage.- Remove libdir/samba/ldb after install if we're building Samba without Active Directory Domain Controller support.- Remove unused ccache switch from the spec file.- BuildRequire docbook-xsl-stylesheets and libxslt-tools to build the man pages and add them to the package again.- Build from the package from the top level directory; (bnc#794744). - BuildRequire pytalloc-devel, python-tdb, and python-tevent. - Also use out of tree builds of talloc, tdb, tevent, and ldb for pre-12.1 SUSE systems.- Remove the empty data dir from the doc package filelist. - Explicitly use samba instead of the name macro to define the docbook dir.- Update to 4.0.7. + Fix a core dump with invalid lock order while opening/editing or copying MS files; (bso#9794). + Fix crash bug from search of mail=; (bso#9967). + s3-rpc_server: Ensure we are root when starting and using gensec; (bso#9465). + Add support for MX queries; (bso#9485). + dns: Delete dnsNode objects when they are empty; (bso#9559). + dns: Support larger queries when asking forwarder; (bso#9632). + s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST; (bso#9805). + Use of wrong RFC2307 primary group field; (bso#9880). + Check for system libtevent; (bso#9881). + is_printer_published GUID retrieval; (bso#9900). + Doc fixes for 4.0; (bso#9906). + Build fixes for 4.0 found during autoconf or debian packaging work; (bso#9907). + build: Add missing new line to replaced python shebang line; (bso#9909). + PIE builds not supported; (bso#9910). + s4:winbind: Don't leak libnet_context into the main event context; (bso#9929). + Fix a bug of drvupgrade of smbcontrol; (bso#9941). + Check for netbios aliases in ad_get_referrals; (bso#9947). + Fix tevent_poll on 32-bit machines (Coverity ID 989236); (bso#9953). + docs: Avoid mentioning a possibly misleading option; (bso#9964). + Fix build with system Heimdal of samba4kgetcred; (bso#9968).- Use SLE as product prefix for SUSE Linux Enterprise, oS for openSUSE, and OBS for any other operating system to define the vendor string while build.- Remove ldapsmb from the main spec file.- Adjust ldapsmb and nmbstatus man page syntax required by a newer pod2man.- Don't bzip2 the main tar ball, use the upstream gziped one instead.- Explicitly BuildRequire cyrus-sasl-devel, libattr-devel, and libopenssl-devel.- Fix libreplace license ambiguity; (bso#8997); (bnc#765270).- Update to 4.0.6. + Fix crash during Win8 sync; (bso#9822). + Fix segfault when loging in with wrong password from w2k8r2; (bso#9834). + Fix the username map optimization; (bso#9139). + Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). + SMB2 server doesn't support recvfile; (bso#9412). + Fix the build of vfs_notify_fam; (bso#9545). + Fix adding case sensitive spn; (bso#9699). + Properly handle oplock breaks in compound requests; (bso#9722). + Properly handle oplock breaks in compound requests; (bso#9722). + Cache name_to_sid/sid_to_name correctly; (bso#9766). + Fix 'net ads join' when called via stdin; (bso#9767). + Fix segfault for "artificial" conn_structs in vfs_fake_perms; (bso#9775). + vfs_dirsort uses non-stackable calls, dirfd(), malloc instead of talloc and doesn't cope with directories being modified whilst reading; (bso#9777). + Fix panic when running 'smbtorture smb.base'; (bso#9782). + Use specified python for runtime installation of Samba; (bso#9785). + Change '--with-dmapi' to 'default=auto' to match the autoconf build; (bso#9803). + wafsamba: Display the default value in help for SAMBA3_ADD_OPTION; (bso#9804). + wbinfo: Fix segfault in wbinfo_pam_logon; (bso#9807). + Package new dbwrap_tool man page; (bso#9809). + Old DOS SMB CTEMP request uses a non-VFS function to access the filesystem; (bso#9811). + Fix 'map untrusted to domain' with NTLMv2; (bso#9817). + SMB signing and the async echo responder don't work together; (bso#9824). + Fix panic in nt_printer_publish_ads; (bso#9830). + talloc use after free in winbind4; (bso#9832). + Function called in unix_convert() path can overwrite errno; (bso#9833). + Fix NULL pointer dereference in Winbind; (bso#9854). + Fix making LIBNDR_PREG_OBJ; (bso#9868).- Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches.- Update to 4.0.5. + Fix large reads/writes from some Linux clients; (bso#9706). + Add 'samba-tool dbcheck --reset-well-known-acls'; (bso#9740). + Can't delegate adding computers to domain; (bso#9267). + Fix GNU ld version detection with old gcc releases; (bso#7825). + Never try to map global SAM name; (bso#9039). + Certain xattrs cause Windows error 0x800700FF; (bso#9130). + Samba returns unexpected error on SMB posix open; (bso#9519). + Fix build on AIX; (bso#9557). + libnss-winbindd does not provide pass struct for groups mapped with ID_TYPE_BOTH and vice versa; (bso#9617). + Reauth-capable client fails to access shares on Windows member; (bso#9625). + PIDL: Fix parsing linemarkers in preprocessor output; (bso#9636). + Rename internal subsystem pdb_ldap to pdb_ldapsam; (bso#9639). + Fix the build of vfs_afsacl; (bso#9642). + Fix the build with --fake-kaserver; (bso#9643). + Fix compile of source3/lib/afs.c; (bso#9644). + Make SMB2_GETINFO multi-volume aware; (bso#9646). + idmap_autorid: Fix freeing of non-talloced memory; (bso#9653). + Work around FreeBSD's getaddrinfo() underscore issue; (bso#9656). + 'make test' hangs; (bso#9663). + Fix correct linking of libreplace with cmdline-credentials; (bso#9664). + Fix filtering of link-local addresses; (bso#9666). + Fix crash in 'net rpc join' against a Samba 3.0.33 PDC; (bso#9669). + Samba denies owner Read Control when there is a DENY entry while W2K08 does not; (bso#9674). + Fix several resource (fd) leaks; (bso#9683). + Fix a memory leak in spoolss rpc server; (bso#9685). + Fix a possible buffer overrun in pdb_smbpasswd; (bso#9686). + Fix several possible null pointer dereferences; (bso#9687). + Make sure that domain joins work correctly when the DC disallows NTLM auth; (bso#9689). + Backport tevent changes to bring library to version 0.9.18; (bso#9695). + Remove incomplete samba_dnsupdate IPv6 link-local address check; (bso#9696). + DsReplicaGetInfo fails due to sendto() EMSGSIZE error on UNIX domain socket; (bso#9697). + Fix vfs_catia and update documentation; (bso#9701); (bnc#824833). + Fix build on solaris8: Do not force a specific perl on pod2man; (bso#9703). + Fix nss_winbind name on FreeBSD; (bso#9704). + s4:winbindd: Do not drop the workgroup name in the getgrnam, getgrent and getgrgid calls; (bso#9711). + Set LD_LIBRARY_PATH in install_with_python.sh; (bso#9717). + s4-idmap: Remove requirement that posixAccount or posixGroup be set for rfc2307; (bso#9718). + Allow forcing an override of an old @MODULES record; (bso#9719). + Do not print the admin password during 'samba-tool classicupgrade'; (bso#9720). + Make samba_upgradedns more robust (do not guess addresses when just changing roles); (bso#9721). + Add a tool to migrate latin1 printing tdbs to registry; (bso#9723). + is_encrypted_packet() function incorrectly used inside server; (bso#9724). + upgradeprovision and 'samba-tool dbcheck' patches for 4.0.NEXT; (bso#9725). + Fix NULL pointer dereference; (bso#9727). + DO NOT install samba_upgradeprovision in 4.0.x; (bso#9728). + Fix 'smbcontrol close-share'; (bso#9733). + Fix Winbind separator in upn to username conversion; (bso#9735). + Change to smbd/dir.c code gives significant performance increases on large directory listings; (bso#9736). + PIDL: Build fixes for hosts without CPP (Solaris 11); (bso#9739). + Make sure that we only propogate the INHERITED flag when we are allowed to; (bso#9747). + Remove unneeded fstat system call from hot read path; (bso#9748). + Don't leak the epm_Map policy handle; (bso#9758). + Fix incorrect parsing of SMB2 command codes; (bso#9760). - Update to 4.0.4. + Remove forced set of 'create mask' to 0777; CVE-2013-1863; (bnc#809624).- Fix periodic printcap cache reloads; (bso#9650); (bnc#807334).- No longer use the cifs- or smbfstab named configuration file on post-12.2 systems; (bnc#804822); (bnc#821889).- Shift the smbfs init script nfs dependency from Required to Should.- Fix SMB1 Session Setup AndX handling with a large krb PAC; (bso#9658); (bnc#802031).- Point LD_LIBRARY_PATH to the just-built libraries while calling testparm to generate the default share snippets on pre-12.2 systems.- Explicitly configure --with-ads.- Fix smbclient recursive mget EPERM handling; (bso#9633); (bnc#786350).- Remove superfluous quotation marks while setting the SAMBA_VERSION_VENDOR_SUFFIX string.- Do not restart the smbfs service on pre-11.3 systems during dhcp lease renewal when the IP address remains the same; (bnc#800782).- Update to 4.0.3. + Fix ACL problem with delegation of privileges and deletion of accounts over LDAP interface; add documentation; (bso##8909). + check_password_quality: Handle non-ASCII characters properly; (bso##9105). + Fix 'smbd' panic triggered by unlink after open; (bso##9571). + smbd: Fix memleak in the async echo handler; (bso##9549). + defer_open is triggered multiple times on the same request; (bso#9196). + Add extra attributes for AD printer publishing; (bso#9378). + FSMO seize of naming role fails: NT_STATUS_IO_TIMEOUT; (bso#9461). + Downgrade v4 printer driver requests to v3; (bso#9474). + samba_upgradeprovision: fix the nTSecurityDescriptor on more containers; (bso#9481). + s3:smb2_negprot: set the 'remote_proto' value; (bso#9499). + waf assumes that pythonX.Y-config is a Python script; (bso#9503). + s4:drsuapi: Make sure we report the meta data from the cycle start; (bso#9508). + wafsamba: Use additional xml catalog file; (bso#9512). + samba_dnsupdate: Set KRB5_CONFIG for nsupdate command; (bso#9517). + conn->share_access appears not be be reset between users; (bso#9518). + Remove superfluous bracket in samba.8.xml; (bso#9528). + Fix typo in vfs_tsmsm.8.xml; (bso#9530). + terminate the irpc_servers_byname() result with server_id_set_disconnected(); (bso#9540). + Make use of posix_openpt; (bso#9541). + Fix build of vfs_commit and plug in async pwrite support; (bso#9544). + Fix aio_suspend detection on FreeBSD; (bso#9546). + Correctly detect O_DIRECT; (bso#9548). + sigprocmask does not work on FreeBSD to stop further signals in a signal handler; (bso#9550). + smb.conf(5): Update list of available protocols; (bso#9552). + s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup; (bso#9555). + Fix compilation of Solaris ACL module; (bso#9564). + Adding additional Samba 4.0 DC to W2k8 srv AD domain (in win200 functional level) produces dbcheck errors; (bso#9565). + Add dbwrap_tool.1 manual page; (bso#9568). + Document the command line options in dbwrap_tool(1); (bso#9568). + ntlm_auth(1): Fix format and make examples visible; (bso#9569). + Fix file corruption during SMB1 read by Mac OSX 10.8.2 clients; (bso#9572). + Fix a possible null pointer dereference in spoolss; (bso#9574). + Duplicate flags defined in the winbindd protocol; (bso#9575). + gensec: Allow login without a PAC by default; (bso#9581). + smbd: disk_free: sys_popen() failed" message logged in /var/log/message many times; (bso#9586). + Archive flag is always set on directories; (bso#9587). + ACLs are not inherited to directories for DFS shares; (bso#9588). + Correct meta data in ldb manpages; (bso#9591). + s3-winbind: Fix the build of idmap_ldap; (bso#9595). + Linked attribute handling should be by GUID; (bso#9596). + Fix timeouts of some IRPC calls; (bso#9598). + Use pid,task_id as cluster_id in process_single just like process_prefork; (bso#9598). + Add 'ldbdump' tool; general code and documentation cleanup; (bso#9609). + dsdb: Make secrets_tdb_sync cope with -H secrets.ldb; (bso#9610).- Update to 4.0.2. + Address SWAT security issues CVE-2013-0213 and CVE-2013-0214 which both don't apply to any SUSE Samba post-3.6.10 as it isn't longer built. + Don't build and package static libraries.- Drop separate build-source-timestamp file as it led to a second, incorrect Source Timestamp line.- Add server-side copy support; (fate#314770). + Implement FSCTL_SRV_COPYCHUNK and FSCTL_SRV_REQUEST_RESUME_KEY handlers. + Add vfs_btrfs VFS module for optimized Btrfs clone-range ioctl usage.- Add filter against shlib-policy-name-error for /lib*/libnss_wins.so.2.- Disable SWAT during configure and don't package it any longer.- Remove dangling references to Heimdal from the spec file.- Remove /lib/samba prefix from the localstatedir configure option.- Update to 4.0.1. + Samba 4.0.0 as an AD DC may provide authenticated users with write access to LDAP directory objects; CVE-2013-0172; (bnc#798364).- Add the missing get_printing_ticket binary path while calling the set_permissions macro; (bnc#783375).- Use the version macro while definition of the branch macro.- Remove references to no longer used devel macros.- Update to 4.0.0. + Honor password complexity settings; (bso#9414). + Install SWAT *.msg files with waf; (bso#9415). + Fix netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES; (bso#9438). + developer-build: Fix panic when acl_xattr fails with access denied; (bso#9456). + Fix "map username script" with "security=ads" and Winbind; (bso#9457). + Install manpages only if we install the target; (bso#9459). + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Users can not be given write permissions any more by default; (bso#9462). + Fix MMC crashes; (bso#9470). + Fix SEGV when using second vfs module; (bso#9471). + Support FIPS mode when building Samba; (bso#9479). + Fix ACL on "cn=partitions,cn=configuration"; (bso#9481).- netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES broken; (bso#9438). - s3:auth: fix create_token_from_sid() to not fail in the winbindd case; (bso#9457). - s4:dsdb/acl_read: return the nTSecurityDescriptor attr if the sd_flags control is given; (bso#9470). - Support FIPS mode when building Samba; (bso#9479). - s4:provision: set the correct nTSecurityDescriptor; (bso#9481).- SEGV when using second vfs module; (bso#9471).- Update to 3.6.10. + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Fix segfault when "default devmode" is disabled; (bso#9433). + Fix segfaults in "log level = 10" on Solaris; (bso#9390).- s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIED; (bso#9456). - Install manpages only if we install the target; (bso#9459). - Users can not be given write permissions any more by default; (bso#9462).- Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094); (bso#9418). - Use work around for 'winbind use default domain' only if it is set; (bso#9367). - Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend; (bso#9374). - large read requests cause server to issue malformed reply; (bso#9422). - s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426). - Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439). - Allow to force DNS updates using net; (bso#9451). - Respond correctly to FILE_STREAM_INFO requests; (bso#9460).- Update to 4.0.0rc6. See WHATSNEW.txt from the samba-doc package.- On uninstall remove winbind from the pam configuration, invalidate the nscd passwd and group cache and only recommend the install of nscd; (bnc#792340).- BuildRequire libnscd-devel once.- Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294). - Add SUSE version depending pkg-config requires macro; (bnc#792294).- Define library names and use it instead of libldb1, libnetapi0, libsmbclient0, libsmbsharemodes0, libtalloc2, libtdb1, libtevent0, and libwbclient0; (bnc#792294). - Provide and obsolete libsmbsharemodes for post-10.3 SUSE systems.- Don't clutter the spec file diff view; (bnc#783384).- Fix fd leak causing 100% CPU in winbind on certain dc connection failures; (bso#9436); (bnc#786677).- Fix spoolss segfault when default devmode is disabled; (bso#9433); (bnc#791183).- Update to 4.0.0rc5. See WHATSNEW.txt from the samba-doc package.- ACL masks incorrectly applied when setting ACLs; (bso#9236). - s3-kerberos: also try with AES keys, when decrypting tickets; (bso#9272). - lib/replace: replace all *printf function if we replace snprintf; (bso#9390). - lib/addns: don't depend on the order in resp->answers[]; (bso#9402).- s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209). - lib/krb5_wrap: request enc_types in the correct order; (bso#9272). - Fix net ads join message for the dns domain; (bso#9326). - docs-xml: fix use of tag; (bso#9345). - s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359). - s3:winbind: Failover if netlogon pipe is not available; (bso#9386).- Execute the run_permissions macro on pre-11.4 systems and else the set_permission one if available.- Ensure adding the winbind group never can fail.- Create ntadmin group only if it doesn't yet exist.- Update to 3.6.9. + When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). + Winbind can't fetch user or group info from AD via LDAP; (bso#9147). + Fix segfault in smbd if user specified ports out for range; (bso#9218).- quota: Don't force the block size to 512; (bso#3272). - Fix poll replacement to become a msleep replacement; (bso#8107). - Fix wrong test == syntax in configure; (bso#8146). - Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344). - Fix builtin forms order to match Windows again; (bso#8632). - Fix RAW printing for normal users; (bso#8769); (bnc#790741). - Initialise ticket to ensure we do not invalid memory; (bso#8788). - Fix 'net rpc share allowedusers' to work with 2008r2; (bso#8966). - Fix crash on null pam change pw response; (bso#9013). - Connection to outbound trusted domain goes offline; (bso#9016). - Increase debug level for info that the db is empty; (bso#9112). - 'smbclient' can't connect to a Windows 7 server using NTLMv2; (bso#9117). - Winbind can't fetch user or group info from AD via LDAP; (bso#9147). - Open printers with the right access mask; (bso#9154). - Fix makerpms.sh on RHEL; (bso#9165). - Remove non-existent option '-Y' from winbindd manpage; (bso#9171). - Add quota support for gfs2; (bso#9172). - Make SMB2 compound request create/delete_on_close/close work as Windows; (bso#9173). - Empty SPNEGO packet can cause smbd to crash; (bso#9174). - pam_winbind: Match more return codes when wbcGetPwnam has failed; (bso#9177). - Fix crash bug in idmap_hash; (bso#9188); (bnc#788159). - SMB2 Create doesn't return correct MAX ACCESS access mask in blob; (bso#9189). - Fix service control for non-internal services; (bso#9192). - Don't take 'state->te' as indication for "was_deferred"; (bso#9196). - Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209). - Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213). - Fix segfault in smbd if user specified ports out for range; (bso#9218). - Signing cannot be disabled for SMB2 by design, so fix the documentation instead; (bso#9222). - Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry; (bso#9231). - When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). - lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259). - Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart; (bso#9268). - Add support for reloading systemd services; (bso#9280).- Warn via the smbd log if AppArmor and "wide links" are in use; (bnc#783719).- Do not write the build date into the header of the default smb.conf as this causses superfluous rebuilds of packages depending on samba; (bnc#781601).- Do not prerequire SuSEconfig.permissions as it's already enough and more generic to depend on the permissions package; (bnc#782293).- Update to 3.6.8. + Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). + Fix Winbind panic if we couldn't find the domain; (bso#9135).- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058). - Fix bad call to memcpy source3/registry/regfio.c; (bso#9065). - "Domain Users" incorrectly added as additional group on domain members; (bso#9066). - Use correct RID for "Domain Guests" primary group; (bso#9067). - Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). - Fix smbclient/tarmode panic when connecting to Windows 2000 clients; (bso#9088). - Fix refreshing of Kerberos tickets in Winbind; (bso#9098). - Fix identification of idle clients in Winbind to avoid crashes and NDR parsing errors; (bso#9104). - Fix compilation with newer MIT Kerberos which hides internal symbols; (bso#9111). - Fix flooding the logs with records we don't find in pcap; (bso#9112). - Initialize the print backend after we setup winreg; (bso#9122). - Fix lprng job tracking errors; (bso#9123). - Fix setting of "inherited" bit on inherited ACE's; (bso#9124). - Fix Winbind panic if we couldn't find the domain; (bso#9135). - Make 'smbclient allinfo' show the snapshot list; (bso#9137). - Fix nfs quota support with Linux nfs4 mounts; (bso#9144). - Valid open requests can cause smbd assert due to incorrect oplock handling on delete requests; (bso#9150).- NMB registration for a duplicate workstation fails with registration refuse; (bso#9085); (bnc#770056).- Remove backup files caused by running configure in examples/VFS.- Update to 3.6.7. + Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). + Fix migrating printers while upgrading from 3.5.x; (bso#9026).- Correct documentation of "case sensitive"; (bso#8552). - Printing fails in function cups_job_submit; (bso#8719). - Fix kernel oplocks when uid(file) != uid(process); (bso#8974). - Send correct responses to NT Transact Secondary when no data and no params for the Trans2 calls are set; (bso#8989). - Fix build without ads support; (bso#8996). - Don't turn negative cache entries into valid idmappings; (bso#9002). - Fix posix acl on gpfs; (bso#9003). - Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022). - Fix migrating printers while upgrading from 3.5.x; (bso#9026). - Fix typo in set_re_uid() call when USE_SETRESUID selected in configure; (bso#9034). - Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040). - Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). - Fix build against CUPS 1.6; (bso#9055). - Fix bugs in SMB2 credit handling code; (bso#9057). - rpcclient: Fix bad call to data_blob_const; (bso#9062).- Create missing doc directories while install. - Remove no longer existing Manifest file from install. - Don't creat a link to non existend html man pages for swat. - Don't call the no longer existing libsmbclient testsuit while build.- Configure with option --mandir instead --with-mandir. - Remove obsoleted --with-rootsbindir, --with-nmbdsocketdir, and - -with-swatdir configure options.- Update to 4.0.0beta4. See WHATSNEW.txt from the samba-doc package.- BuildRequire gcc, make, and patch; (bnc#771516).- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).- Fix shell syntax in dhcpcd hook script; (bnc#769957).- Add missing int declaration to the net kdc lookup patch.- Update to 4.0.0beta2. See WHATSNEW.txt from the samba-doc package.- Update to 3.6.6. + Fix possible memory leaks in the Samba master process; (bso#8970). + Fix uninitialized memory read in talloc_free(); (bnc#764577). + Fix joining of XP Pro workstations to 3.6 DCs; (bso#8373); (bnc#787983).- resolve_ads() code can return zero addresses and miss valid DC IP addresses; (bso#8910). - Can't join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983). - winbind can hang as nbt_getdc() has no timeout; (bso#8953). - Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627) - s3-pid: Catch with pid filename's change when config file is not smb.conf; (bso#8714). - Possible memory leaks in the main Samba process; (bso#8970). - s3: Fix uninitialized memory read in talloc_free(); (bnc#764577). - Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971). - Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988). - Winzip occasionally can not read files out of an open winzip dialog; (bso#8311). - s3-winbindd: call dump_core_setup after command line option has been parsed; (bso#8975). - Directory group write permission bit is set if unix extensions are enabled; (bso#8972). - s3: remove dependency on automake for "make everything"; (bso#8978). - sd_has_inheritable_components segfaults on an SD that se_access_check accepts; (bso#8811). - smbclient's tarmode insists on listing excluded directories; (bso#8922). - Notify code can miss a ChDir; (bso#8998). - s3:smbd: add a fsp_persistent_id() function; (bso#8995).- Call autogen.sh even on post-12.1 SUSE systems.- Don't call autogen.sh on post-12.1 SUSE and post-14 Fedora systems. - Recompile all IDL in any case.- BuildIgnore libtalloc and libtdb to prevent a package conflict on Fedora systems.- Install talloc.pc only on pre-12.2 and non SUSE systems.- BuildRequire libldb-devel, libtalloc-devel, libtdb-devel, and libtevent-devel on post-12.1 systems.- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861). - s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904). - smbd crashes when deleting directory and veto files are enabled; (bso#8837). - winbind_krb5_locator only returns one IP address; (bso#8897). - Wrong assertion/comparison: Compare value not pointer; (bso#8859). - Inconsistent (with manpage) command-line switch for "help" in smbtree; (bso#8831). - Fix incorrect debug statement. - Setting traverse rights fails to enable directory traversal when acl_xattr in use; (bso#8857). - Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877). - s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869). - s3-docs: fixes several typos; (bso#7938). - s3-VFS: Fix building out-of-tree modules; (bso#8822). - s3-docs: Add hint that setting "profile acls = yes" on normal shares can cause trouble; (bso#7930). - s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915). - Avoid null dereference in initialize_password_db(); (bso#8920). - s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend. - s3:registry:reg_api: fix reg_queryvalue to not fail when values are modified while it runs. - s4:torture:rpc:spoolss: also initialize driverName before checking it in test_PrinterData_DsSpooler(). - s3:registry: multiple cleanups, fixes, and optimisations. - s3:auth/server_info: the primary rid should be in the groups rid array; (bso#8798). - s3-printing: Add new printers to registry; (bso#8554); (bso#8612); (bso#8748). - Fix the overwriting of errno before use in a DEBUG statement and use the return value from store_acl_blob_fsp rather than ignoring it; (bso#8945). - s3-auth: Don't lookup the system user in pdb; (bso#8944). - s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952). - Fix typo in pam_winbindd code; (bso#8957). - Fix remove_duplicate_addrs2 previously it could leave zero addresses in the list; (bso#8910). - Slow but responsive DC can lock up winbindd; (bso#8943). - Broken processing of %U with vfs_full_audit when force user is set; (bso#8882).- Disable included build of ldb, talloc, tdb, and tevent on post-12.1 systems. - BuildRequire libldb1-devel, libtalloc2-devel, libtdb1-devel, and libtevent0-devel on post-12.1 systems.- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).- docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845); (bnc#730769). - s3-docs: Prepend '/' to filename argument; (bso#8826).- Update to 3.6.5. - Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576).- Remove all precompiled idl output to ensure any pidl changes take effect; (bnc#757080).- Update to 3.6.4. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "root" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). - Correctly handle DENY ACEs when privileges apply; (bso#8797).- s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). - Allow vfs_aio_pthread to build as a static module; (bso#8723). - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). - s3: segfault in dom_sid_compare(bso#8567). - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). - s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). - Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784).- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454).- Remove obsoleted Authors lines from spec file for post-11.2 systems.- Make ldapsmb build with Fedora 15 and 16; (bso#8783). - BuildRequire libuuid-devel for post-11.0 and other systems. - Define missing python macros for non SUSE systems. - PreReq to fillup_prereq and insserv_prereq only on SUSE systems. - Always use cifstab instead of smbfstab on non SUSE systems.- Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934).- Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854).- s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825).- s3:winbindd fix a return code check; (bso#8406).- s3: Add rmdir operation to streams_depot; (bso#8733).- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738); CVE-2013-0454; (bnc#811975).- s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).- s3:client: ignore SMBecho errors (the server may not support it); (bso#8139).- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is enabled and don't unintentionally use a bogus domain name; (bso#8734).- smbclient fails with posix large reads; (bso#8727).- Use the smbfs init script on versions pre-11.3, or cifs in later versions; (bnc#744614).- s3: Compile IDL files in autogen, some configure tests need this.- Fixes various deadlocks in if-up.d / if-down.d when running under systemd; (bnc#732395).- Update to 3.6.3. + Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724); (bnc#743986).- Use spdx.org compliant license names for all packages.- Update to 3.6.2. + Make Winbind receive user/group information (bug #8371). + Several SMB2 fixes. + Fix a crash bug in the spoolss code. + Add new contributing FAQ announcing acceptance of corporate (C). + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504). + Fix cli_write_and_x() against OS/2 print shares; (bso#5326). + Fix 'smbclient tar' for files greater than 8GB on BE machines; (bso#563); (bnc#726145). + Remove pointless use_memory_krb5_ccache; (bso#7465). + Fix perl path; (bso#8176). + Grant credits in async interim responses (SMB2); (bso#8357). + Make Winbind receive user/group information; (bso#8371). + Fix Windows XP clients crashing smbd process every once in a while; (bso#8384); (bnc#731571). + Make VFS op "streaminfo" stackable; (bso#8419). + Add an allocation pool to idmap_autorid; (bso#8444). + Fix SEGFAULT from net registry export on not zero terminated REG_SZ values; (bso#8528). + Make DSO_EXPORTS_CMD more portable; (bso#8531). + readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). + smbclient posix_open command fails to return correct info on open file; (bso#8542). + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548). + Fix setting the machine account password; (bso#8550). + Make SMB2 handle compound request headers in the same way as Windows; (bso#8560). + Password change settings not fully observed; (bso#8561). + Fix double free error in talloc; (bso#8562). + Fix alignment in the non-extended-security negprot; (bso#8573). + Add systemd service files; (bso#8575). + Add systemd service files; (bso#8575). + smb2_flush: Don't send uninitialized memory; (bso#8579). + Enable inotify if sys or kernel inotify is available; (bso#8580). + Increase a debug level; (bso#8585). + libsmb: Only align unicode pipe_name; (bso#8586). + Fix marshalling of samr_ChangePasswordUser3; (bso#8591). + Don't limit the number of open dptrs for SMB2; (bso#8592). + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). + Make cldap work over IPv6; (bso#8600). + Fix intermittent print job failures caused by character conversion errors; (bso#8606). + Improve configure.in so it can be used outside the Samba source tree; (bso#8607). + Winbind: Don't fail on users without a uid; (bso#8608). + Ensure we correctly calculate reply credits over all returned SMB2 replies; (bso#8614). + Fix migrate printer code; (bso#8618). + Fix crash bug when trying to browse Samba printers; (bso#8623). + libsmb: Don't duplicate Kerberos service tickets; (bso#8628). + POSIX ACE x permission becomes rx following mapping to and from a DACL; (bso#8631). + When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + Fix the vfs_commit module; (bso#8639). + Add an update function for Winbind cache; (bso#8643). + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). + Document the "ignore system acls" option of vfs_acl_xattr and vfs_acl_tdb vfs modules; (bso#8652). + Fix deleting a symlink if the symlink target is outside of the share; (bso#8663). + Fix renaming a symlink if the symlink target is outside of the share; (bso#8664). + Fix NT ACL issue; (bso#8673). + Fix buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). + Fix Winbind segfault if we can't map the last user; (bso#8678). + recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). + Try ctdbd_init_connection() as root; (bso#8684). + Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686). + Fix typo in 'net memberships' usage; (bso#8687). + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket(); (bso#8692). + Make DeletePrinterDriverEx remove printer driver files; (bso#8697) (bnc#740810). + Fix major leak with SMB2 in connections.tdb; (bso#8710).- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).- Use correct license, LGPLv3+ for libwbclient packages.- When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636).- Fix incorrect types in the full_audit VFS module. Add null terminators to audit log enums; (bnc#742885).- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810). - Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).- Buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). - NT ACL issue; (bso#8673). - Deleting a symlink fails if the symlink target is outside of the share; (bso#8663). - connections.tdb - major leak with SMB2; (bso#8710).- Renaming a symlink fails if the symlink target is outside of the share; (bso#8664).- Intermittent print job failures caused by character conversion errors; (bso#8606). - ads_keytab_verify_ticket mixes talloc allocation with malloc free; (bso#8692). - libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). - s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684). - s3-printing: fix migrate printer code; (bso#8618). - Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686).- net memberships usage info was wrong; (bso#8687). - s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628). - Recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). - s3-winbind: Fix segfault if we can't map the last user; (bso#8678). - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). - s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb; (bso#8652). - Winbind can't receive any user/group information; (bso#8371). - s3-winbind: Add an update function for winbind cache; (bso#8643). - s3: Attempt to fix the vfs_commit module. - POSIX ACE x permission becomes rx following mapping to and from a DACL; (#bso#8631). - s3:libsmb: only align unicode pipe_name; (bso#8586). - s3-winbind: Don't fail on users without a uid; (bso#8608). - Crash when trying to browse samba printers; (bso#8623). - talloc: double free error; (bso#8562). - cldap doesn't work over ipv6; (bso#8600). - s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326). - SMB2: not granting credits for all requests in a compound request; (bso#8614). - smb2_flush sends uninitialized memory; (bso#8579). - Password change settings not fully observed; (bso#8561). - s3:smb2_server: grant credits in async interim responses; (bso#8357). - s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592). - samr_ChangePasswordUser3 IDL incorrect; (bso#8591). - idmap_autorid does not have allocation pool; (bso#8444). - Add systemd service files. - s3:libsmb: the workgroup in the non-extended-security negprot is not aligned; (bso#8573). - s3-build: Fix inotify detection; (bso#8580). - SMB2 doesn't handle compound request headers in the same way as Windows; (#bso8560). - Disconnecting clients swamp the logs; (bso#8585). - s3-netlogon: Fix setting the machinge account password; (bso#8550). - winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). - smbclient posix_open command fails to return correct info on open file; (bso#8542). - readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). - s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465). - s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531). - s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated ucs2 string; (bso#8528). - Make VFS op "streaminfo" stackable; (bso#8419).- Fix incorrect perfcount array length calculations; (bnc#739258).- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.- Remove call to suse_update_config macro for post-11.4 systems.- Use samba.org for the ldapsmb source location.- Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile; (bnc #729516).- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572).- Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).- Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).- Fix typo in net ads join output; (bnc#713135).- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).- Update to 3.6.1. + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Several SMB2 fixes. + The VFS ACL modules are no longer experimental but production-ready. + Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465). + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509). + Return error of cli_push when 'put - /some/file' is used; (bso#7551). + Fix usage of cli_errstr(); (bso#7864). + Fix 'widelinks' regression; (bso#8229). + Empty notify servername; (bso#8236). + Add man vfs_aio_fork; (bso#8256). + smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes; (bso#8334). + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338). + While migrating forms, don't fail if the form already exists; (bso#8351). + OS/2 sends an unexpected write&x/read&x chain; (bso#8360). + Fix build of vfs_prealloc on SLES8; (bso#8363). + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364). + Fix the fallback to the deprecated spelling idmap:script; (bso#8368). + Fix vfs_chown_fsp; (bso#8370). + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix smbclient access to NT4 shares; (bso#8385). + Optimize serverid_exists() for Solaris; (bso#8395). + registry/reg_format.c must include includes.h; (bso#8401). + SMB2 server can return requests out-of-order when processing a compound request; (bso#8407). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with SMB2; (bso#8412). + Fix 'getent group' if trusted domains are not reachable; (bso#8420). + Fix infinite loop in ACL module code; (bso#8422). + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428). + Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429). + Fix segfault in iconv.c; (bso#8433). + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442). + Be smarter about setting default permissions when a ACL_USER_OBJ isn't given; (bso#8443). + Check the wct of the incoming SMBnegprot responses; (bso#8452). + Fix smbclient segfaults when dialect option -m is used for legacy dialects; (bso#8453). + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455). + Samba PDC is looking up only primary user group; (bso#8455). + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458). + smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473). + SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474). + Don't call smbd_terminate_connection in smb2_validate_message_id(); (bso#8476). + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476). + Map to guest can return uninitialized blob of data; (bso#8477). + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480). + DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493). + Remove "experimental" label on VFS ACL modules; (bso#8494). + SMB2_OP_CANCEL requests don't have to be signed; (bso#8503). + smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507). + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509). + Disallow "." in can_set_delete_on_close(); (bso#8515). + SMB2 create call returns incorrect file allocation size; (bso#8518). + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520). + Winbind cache timeout expiry test was reversed; (bso#8521).- s3/doc: add man page for aio_fork vfs module.- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).- s3: Samba PDC is looking up only primary user group; (bso#8455).- Add script to create or update an AppArmor sniplet with permissions for all Samba shares; (bnc#688040).- Add "ldapsam:login cache" parameter to allow explicit disabling of the login cache; (bnc#723261).- Retain the smbd startproc return value for correct startup status reporting. unset was incorrectly being called prior to rc_status; (bnc#723724).- Prevent deadlock in systemd triggered by if-down.d handler on shutdown; (bnc#721598).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; changed defaults and documentation (bso8473).- Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client); (bso#8515).- winbindd cache timeout expiry test was reversed; (bso#8521).- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).- s3:smb2_create: fix allocation size return value when opening existing files; (bso#8518).- SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474).- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442).- s3-docs: Fix bug (bso#7908) and typo.- Return error of cli_push when 'put - /some/file' is used; (bso#7551).- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).- smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507).- Default user entry is set to minimal permissions on incoming ACL change with no user specified; (bso#8443).- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft Internet Explorer 9 on Windows 7 to download files; (bso#8458).- DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493).- s3-docs: Fix typos.- s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).- Remove "experimental" label on VFS ACL modules; (bso#8494).- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin; (bso#7465).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473).- s3-netapi: allow to use default krb5 credential cache for libnetapi users.- s3-docs: document -k switch in net manpage.- Map to guest can return uninitialized blob of data; (bso#8477).- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).- Fix 'widelinks' regression intro'd in 3.2; (bso#8229).- Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429).- s3-spoolss: Fix bug forms migration; (bso#8351).- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).- s3: Do not fork the echo handler for smb2; (bso#8334).- s3-spoolss: Fix bug empty notify servername; (bso#8236).- SMB2 server can return requests out-of-order when processing a compound request; (bso#8407).- Remove smb child crash fix. The issue had been fixed upstream differently.- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.- Fix samba duplicates file content on appending. Move posix case semantics out from under the VFS; (bso#6898); (bnc#681208).- Make winbind child reconnect when remote end has closed, fix failing sudo; (bso#7295); (bnc#569721).- Spec file cleanup as suggested by the spec-cleaner tool. + Make all BuildRequires, PreReq, and Provides a separate line. + Use %{buildroot} instead of ${RPM_BUILD_ROOT}. + Use straight commands instead of macros (make, install). + Use -p in post and postun if we only call one command. + Use %{_localstatedir} instead of %{_var} in the filelist. + Remove superfluous AutoReqProv on lines.- Remove %release from all Provides.- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).- Use /var/run for the cifs state file in the init script too; (bnc#710304).- Microsoft Word from Microsoft Office 2007 fails to save as on a share with SMB2; (bso#8412).- Use sys_write and sys_read in fork_domain_child to fix a winbind race leading to 100% CPU usage; (bso#8409).- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).- Fix infinite loop in ACL module code; (bso#8422).- Fix getent group if trusted domains are not reachable; (bso#8420).- smbclient can't access a NT4 share since 3.6.0; (bso#8385).- Optimize serverid_exists() for Solaris; (bso#8395).- talloc: + check block count after references test. + added test suite for talloc_free_children(). + license info erratum in the manpage. + fix typos and better differentiation between versions 1 and 2. + preserve context name on talloc_free_children(). + ensure the sibling linked list remains valid during a free.- vfs_chown_fsp returned in the wrong directory; (bso#8370).- Remove irritating "." targets when recent system libs exist; (bso#8369).- Correctly initialize "idmap config * : script" with NULL; (bso#8368).- Add missing include to suppress compiler warnings; (bso#8365).- Point the chain offset beyond the current request; (bso#8360).- Fix gpfs vfs module build; (bso#8364).- Make vfs_prealloc even build on older systems; (bso#8363).- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).- Add a fallback for missing open&x support in OS/X Lion; (bso#8338).- Update to 3.6.0. + BUG 7462: Make SA_RESETHAND conditional on its existance. + BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined. + BUG 8324: smbclient cannot list directories from a big-endian machine. + BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname. + BUG 8327: Fix the reload of the configuration, also reload activated registry shares. + BUG 8328: Cleanup of idmap_tdb2 code. + BUG 8330: Fix NFSv4 ACL merging logic. + BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id. + BUG 8341: Fix segfault in libsmbclient. + BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file. + BUG 8347: Fix regression for HP-UX, AIX and OSF. + BUG 8357: Make sure we grant credits on async read/write operations. + BUG 8358: Fix a bug in run_poll_events(). + BUG 8362: Fix build issue on old glibc systems.- Remove references to disabled vscan build.- Add missing define, includes, and initialization to get_printing_ticket.- Use /var/run for the cifs state file; (bnc#710304).- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).- Fix reload of the configuration and also reload activated registry shares; (bso#8327).- WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326).- smbclient cannot list directories from a big-endian machine; (bso#8324).- Update to 3.6.0rc3. + BUG 7841: Explicitly pass domain_sid to wbint_LookupRids(). + BUG 7888: Deal with buggy 3.0 based PDCs. + BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb module. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8193: Add new command 'enumerate_recursive'. + BUG 8195: Make rpc client code working against NT4 servers. + BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes" is set. + BUG 8213: Fixes in idmap_autorid. + BUG 8214: Fix smbd crash on printer driver upgrade. + BUG 8215: Fix Winbind unix username lookup. + BUG 8216: Make Winbind returning correct results with 'sids2xids'. + BUG 8217: Do not stat-check the share path in 'net conf addshare'. + BUG 8219: Fix SMB Panic from Windows 7 client. + BUG 8224: Fix the build on FreeBSD. + BUG 8226: Use c99 initializers which are supported by old gcc 2.95 compilers. + BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd. + BUG 8231: Fix crash bug in 'net cache get'. + BUG 8235: Fix smbd crash on startup caused by migrate_printer(). + BUG 8240: Fix Valgrind warnings in winreg/spoolss code. + BUG 8244: Fix copying files larger than 2 GB to a Samba share. + BUG 8247: Fix Coverity ID 2582: FORWARD_NULL. + BUG 8253: Fix Winbind panic if verify_idpool() fails. + BUG 8254: Fix "acl check permissions = no". + BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes. + BUG 8262: Fix build of vfs_commit. + BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl. + BUG 8264: Fix Valgrind bugs in svcctl. + BUG 8276: Close all sockets attached to a subnet in close_subnet(). + BUG 8278: Fix smbd panic when CTDB is unhealthy. + BUG 8281: Fix build of examples/VFS/*. + BUG 8286: Fix smbd crash on premature end of smb2 conn. + BUG 8292: Fix a major architectural flaw in the SMB2 server code. + BUG 8293: Fix log file rotating in SMB2. + BUG 8304: Fix uninitialized variable in error path. + BUG 8305: Fix segfault in nmbd when using 'smbtree ...'.. + BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all locks. + BUG 8310: toupper_ascii() is broken on big-endian systems. + BUG 8314: Fix smbd crash with unknown user. + Mark 'time offset' parameter as deprecated.- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289); (bnc#708503).- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site request forgery; CVE-2011-2522; (bso#8290); (bnc#705241).- Fixed the DFS referral response for msdfs root; (bnc#703655).- Fix CUPS print job IDs; (bso#7288); (bnc#701257).- Make use of the actual library version as part of the package name on post-11.3 systems only.- Fix winbind internal error; (bso#7636); (bnc#659424).- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION; (bnc#705170).- Specify nmbdsocketdir at configure time; (bnc#700953).- Build the tdb, talloc, and tevent libraries ahead of anything else.- Update to 3.6.0rc2. + BUG 6911: Fix Kerberos authentication from Vista to Samba. + BUG 8166: Don't lockout users when offline. + BUG 8200: Add support for multiple writeable ldap idmap domains. + BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer. + BUG 7054: Fix X account flag when "pwdlastset" is "0". + BUG 8144: Fix setting timestamp when touching files with CIFS clients. + BUG 8153: Fix setting up getaddrinfo on IPv6-only machines. + BUG 8156: Fix 'net ads join' using the user's Kerberos ticket. + BUG 8157: Fix parsing a cups printcap file. + BUG 8175: Fix smbd deadlock. + BUG 8189: Support shadow copy display over SMB2. + BUG 8197: Winbind does not properly detect when a DC connection is dead. + BUG 8203: Winbind needs to reset the DC connection if an RPC times out.- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).- Add "winbind max clients" parameter to remove 200-client limit; (bnc#697461).- Disable logon cache for password lockout consistency when running in a cluster; (bnc#694836).- Fix logon of AD users with many group memberships; (bso#6911); (bnc#657026).- Don't lockout users while offline; (bso#8166); (bnc#692607).- Update to 3.6.0rc1. + BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open. + BUG 8112: POSIX extension opens of a directory are denied with EISDIR. + BUG 8132: Fix filling printers location field when using cups. + Remove fstrings from client struct. + BUGFIX when converting from safe_strcpy to strlcpy. + Fix off-by-one calculations with strlcpy. + Ensure we always write the correct incoming mid into the share mode table entries. + Fix the SMB2 oplock showstopper. + Convert user-specified domain to uppercase in libsmb. + Fix Coverity CID #2302: FORWARD_NULL. + Fix cups_pull_comment_location(). + Fix double free of cups request. + Make cups_pull_comment_location() work again. + Fix potential crash bug in display_print_driver3(). + Properly clean up in pthreadpool_init in case of failure. + Make plaintext session setup async. + Reduce fd load in Winbind children. + Avoid a potential 100% CPU loop in Winbind. + Tune broadcast namequeries for unique names. + Properly deal with exited winbind children. + Fix dup_smb2_vec3. + Fix return check in nss_wins.- Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).- Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).- Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).- Package static libraries with 0644 permissions.- Add Requires libtalloc-devel to libldb-devel and libtevent-devel.- Rename libldb0 to libldb1 as 1 is the current major version of the library. - Add libldb1 and libtevent0 to baselibs.conf.- Don't call the suse_update_config macro before building lib ldb and tevent.- Update to 3.6.0pre3. + Listen on IPv6 addresses with IPV6_ONLY; (bso#7383). + Fix wrong output in 'smbget'; (bso#8066). + "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or vfs_acl_tdb module; (bso#8083). + rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null; (bso#8088). + setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099). + Fix the build of 'smbget' on HP NonStop; (bso#8106). + Fix build of tdb2. + Correctly detect and deny symlinks anywhere in a path (not just the last component) if "follow symlinks = no". + Fix timeout in rpc_pipe_open_tcp_port(). + Fix the build of "--with-profiling-data". + Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470, 2471, 2478. + nsswitch: Add 'wbinfo --lookup-sids'. + nsswitch: Add 'wbinfo --sids-to-unix-ids'. + Fix smbd with the async echo responder. + Fix the build of vfs_gpfs.c. + Add a 10-second timeout for the 445 or netbios connection to a DC. + Many pthreadpool fixes. + Fix transaction recovery area for converted tdbs.- Add PreReq permissions to the krb-printing package.- Remove _libdir ldb and tevent from file list. - Explicitly state not to bundle talloc or tdb while ldb and tevent build.- Always use the actual library version as part of the package name. - Exclude shared python modules.- Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).- Update pidl and always compile IDL at build time; (bnc#688810).- Update to 3.6.0pre2. + ID Mapping changes. + Implement SMB2 support. + Add an Endpoint Mapper daemon. + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Quota only shown when logged as root; (bso#7080). + Fix printing from Windows 7; (bso#7567). + Retry DNS updates when connection to one nameserver has failed; (bso#7690). + Unlink may unlink wrong file when hardlinks are involved; (bso#7863). + Fix 'nmbd --port'; (bso#7875). + cmd_spoolss_deletedriver() returned without checking all architectures; (bso#7880). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix cups pcap reload with no printers; (bso#7915). + Fix bug in chain_reply; (bso#7917). + Fix problems with "kernel oplocks" option set to "no"; (bso#7928). + Fall back for utimes calls; (bso#7940). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let winbind try to use samlogon validation level 6; (bso#7945). + Sgid bit lost on folder rename; (bso#7996). + Fix getting username in 'net rap session'; (bso#8009). + Fix inode generation so nautilus can count total dir size correctly; (bso#8010). + Use jenkins hash for str_checksum; (bso#8010). + Add explicit configure option whether or not to enable dmapi support; (bso#8033). + Fix smbclient segfault with Cyrillic netbios names; (bso#8040). + Fix file creation on OS/X; (bso#8042). + Add "--option" to 'testparm'. + Fix crash bug on smbd shutdown when using FOPENDIR(). + Ensure we don't return an incorrect access mask. + Fix bug against the new Mac client. + Fix leak in error path. + Fix error where Windows client spoolss returns WERR_INVALID_DATA. + Fix a segfault in the krb5 locator plugin. + Enable sharesec for registry shares. + Fix memory leak in "security=share" and "force user". + Add "net idmap check", a check and repair tool for the id mapping database. + Add new 'net idmap delete' command. + Fix segfault on missing input file in 'net idmap restore'. + Fix 'net usersidlist' not to skip every other user. + Fix potential crash bug in spoolss_PrinterEnumValues push path. + Internal restructuring. + Don't wipe out all printer drivers when only one should be deleted. + Fix winbindd_dual_pam_auth_samlogon() for NT4 domains. + Fix memory leak in print_cups.c. + Remove duplicate cups response processing code. + Follow force user/group for driver IO. + Initiate pcap reload from parent smbd. + Reload shares after pcap cache fill. + Fix numerous Coverity IDs (2041 and others). + Fix a memory leak in check_sam_security_info3. + Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable. + Make "net sam list [users|workstations]" list only the right things. + Fix a potential memleak in secrets_fetch_trusted_domain_password. + Use the right credentials in check_netlogond_security. + Add support for AF_NETLINK addr notifications. + Fork multiple Winbind children per domain. + Fix a deadlock between smbd and ctdbd. + Add 'wbinfo --dc-info'. + Make "nmbd socket dir" configurable. + Fixed valgrind errors. + Fix a memleak in receive_getdc_response. + Don't grant SEC_STD_DELETE always to the owner of a file. + Fix segfaults on addrchange errors in Winbind. + Allow machine accounts as members in groupdb. + Add IPv6 support for the endpoint mapper. + Free unused memory in the rpc server. + Fix possible segfaults in svcctl server. + Fix possible segfault with client_id in rpc server. + Add a 'svcctl shutdown' function to rpc server. + Fix a resource leak in net_afs. + Fix a resource leak in smbta-util. + Fix possible resource leak in net_usershare. + Fix possible resource leak in 'smbget'. + Fix possible resource leak in 'smbfilter'. + Fix a possible null pointer dereference in smbd. + Ensure we send the direct levelII oplock break to the correct fid. + Fix private libdir and codepages paths. - Add RFC 3454 to the vendor files.- Fix idmap_tdb for big-endian systems such as ppc and s390; (bso#6901); (bnc#675978).- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).- Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.- Don't crash when publishing a single printer; (bnc#643119).- Carry error status in printer list IPC message, do not refresh printers if cups is unavailable; (bso#7994); (bnc#675478).- Define the libwbclient packages ahead of packages with a different version.- Use %_smp_mflags for parallel building.- Update to 3.5.8. + Fix Winbind crash bug when no DC is available; (bso#7730). + Fix finding users on domain members; (bso#7743). + Fix memory leaks in Winbind; (bso#7879). + Fix printing with Windows 7 clients; (bso#7567). + Fix 'testparm' return code when EOF in encountered in param name; (bso#3185). + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Fix "Your Password expires today" message for users of trusted domains; (bso#7066). + Fix maintaining of users' groups via UsrMgr; (bso#7262). + Fix 'net ads dns register' in Windows 2008 R2 domains; (bso#7356). + Raise debug level for "reduce_name: couldn't get realpath" messages; (bso#7409). + Fix updating the time on close in vfs_gpfs; (bso#7498). + Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'; (bso#7594). + Handle Windows 9x adddriver calls without config file; (bso#7641). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix memory leak in the netapi routines; (bso#7665). + Store unmodified copies of security descriptors in acl_xattr and acl_tdb modules; (bso#7716). + Fix incorrect unix mode_t caused by invalid client DOS attributes on create; (bso#7733). + Apply appropriate create masks when creating files with "inherit ACLs" set to true; (bso#7734). + Fix "dfree cache time" parameter; (bso#7744). + Fix a getgrent crash with many groups; (bso#7774). + Fix requesting lookups for BUILTIN sids; (bso#7777). + Fix smbd crash caused by expand_msdfs; (bso#7779). + Fix atime limit; (bso#7785). + vfs_scannedonly: Switch from mtime to ctime which is more reliable; (bso#7789). + Fix copying files from a SMB share using Gnome vfs and SMB signing; (bso#7791). + Make Winbind recover from a signing error; (bso#7800). + ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb; (bso#7812). + Fix "force group" with ntlmssp guest session setup; (bso#7817). + vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835). + Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841). + Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842). + Expand the local SAMs aliases; (bso#7843). + ntlm_auth: Support clients which offer a spnego mechs we don't support; (bso#7855). + Fix 'net ads dns register' in cluster setups; (bso#7871). + Fix 'nmbd --port'; (bso#7875). + Make 'rpcclient deldriver' delete drivers for all architectures; (bso#7880). + Fix flaky Winbind against Windows 2008; (bso#7881). + Fix SMB session setups with Kerberos against some closed source SMB servers; (bso#7883). + Fix stale lock in open_file_fchmod(); (bso#7892). + Fix sporadic Winbind panic in rpc query_user_list; (bso#7894). + Don't set SAMR_FIELD_FULL_NAME if we just want to set the account name; (bso#7896). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix connections from WinCE; (bso#7917). + Fix opening MS Powerpoint files; (bso#7940). + Fix endless loops caused by inotify; (bso#7942). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let Winbind try to use samlogon validation level 6; (bso#7945). + Revalidate the pathname once re-constructed from a root fsp; (bso#7950).- Require a particular library version even if the major version is part of the package name. Using the same major version does not guarantee forward compatibility.- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).- Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Disable separate build of samba-doc for post-11.1 systems.- Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460).- Do not require a particular library version if the major version is part of the package name.- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems.- Abide by print$ share 'force user' & 'force group' settings when handling AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936).- No longer force activation of the cifs service on post-11.3 systems. - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems. - Move the cifs init script nfs dependencies from Required to Should.- Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845).- Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842).- Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936).- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).- Don't tweak with baselibs.conf during %post if not present; (bnc#652620).- Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).- Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux Enterprise 10; (bnc#652620).- vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835).- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620).- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620).- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620).- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620).- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).- Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620).- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).- Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719).- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4.- Add the _build_arch at the end of the vendor version suffix.- Provide and Obsolete samba-gplv3 to replace potentially installed packages.- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4. - Do not package libsmbclient and libsmbsharemodes.- Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578). + Fix "admin users" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541). + Fix 'smbclient -M'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba "write wache wize"; (bso#7715).- Let startproc wait for nmb, smb and winbind pid files getting created on post-11.1 systems; (bnc#520036).- Include the reviewed french translation for pam_winbind; (bnc#499233).- Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755).- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).- Fix baselibs.conf for libtalloc.- Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218).- Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304).- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS.- Complete fix for trusts with Windows 2008R2 DCs.- Fix authentication dialogs when connecting to older systems; (bnc#632055).- Adjust position of conditional ldapsmb %package and %files definition.- Create the /var/run/samba directory on the fly and package it as %ghost.- Fix preexec scripts; (bso#7104); (bnc#632852).- Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient pkgconfig files and BuildRequire pkgconfig; (bnc#632770).- BuildRequire python-devel for post-9.3 systems.- Only create precompiled headers for post-10.2 systems. - Remove mkinitrd scriptlets.- Add vfs_crossrename man page. - Call make basic and remove conditional proto target. - Increase libtevent version to 0.9.9. - Remove wbc_async header from the file list. - Remove remaining cifs-mount pieces from the spec file.- Fix printers not auto loading with registry config; (bso#7280); (bnc#617153).- Update to 3.6.0pre1. + SMB2 support is fully functional despite managing quota using the Microsoft management tools. + Internal Winbind passdb changes to use samr and lsa rpc pipe to get local user and group information. + The spoolss and the old RAP printing code have been completely overhauled and refactored. + The SMB Traffic Analyzer (SMBTA) VFS module got added.- Intilize workgroup of nmblookup as empty string.- Fix net ads join when using parent domain users; (bso#6364); (bnc#630812).- cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246).- Fix "Too many open files" when trying to access large number of files; (bso#6837); (bnc#619787).- Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends "raw" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with "sec=ntlmv2"; (bso#7517).- Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product.- Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935).- Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927).- Update of the SMB Traffic Analyzer v2 VFS module- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697).- Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via 'cupsaddsmb' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on 'net conf import' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via 'net rpc user password' command; (bso#7417). + Fix 'net rpc printer list' command; (bso#7418). + Rename mod_name to module_name; (bso#7421). - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler. - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423). - Winbind not working over IPv6; (bso#7341).- Honor "interfaces" list in net ad dns register; (bnc#606947).- Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049).- Enable the build of the idmap tdb2 module; (bnc#600822).- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.- Add "net conf import" error messages; (bso#7378, bnc#598189).- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).- Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in "waiting for connections" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it's own domain; (bso#7295). + Fix segfault if hide files or veto files has no ".AppleDouble"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix 'net share' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with 'getent group'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix "printer admin" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make 'net conf addshare' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316).- Add SMB Traffic Analyzer v2 VFS module.- Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868).- Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215).- Fix tdb validation for offline auth; (bnc#587014).- Fix "printer admin" functionality; (bso#7255).- An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642.- Ensure to have a valid talloc stackframe; (bso#7251).- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).- Merge missing pam_winbind message translations; (bnc#499233).- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package.- Fix join of Windows 2008 domains; (bnc#567013).- Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683).- Fixed libldb.so link in libldb-devel.- Fix argc handling in net_share, making the command "net share" work again; (bso#7203); (bnc#584253).- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix 'net ads dns' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).- Update to 3.4.6. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first "uid" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for "ldapsam:trusted". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when "ldapsam:trusted = yes". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when "ldapsam:trusted = yes". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.- Update to 3.5.0rc3. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix 'smbget' error status; (bso#7069). + Fix build of 'smbfilter'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new "nmbd bind explicit broadcast" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix some wrong newlines in de translation strings.- Take extra care that a mount point of mount.cifs isn't changed during mount and don't allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).- Don't invalidate cache for uninitialized domains; (bnc#538923).- Signals are processed twice in child; (bnc#538923).- Allow forced pw change even with min pw age; (bnc#561894).- Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).- Fix enumerate domain local groups for primary domain; (bnc#573813).- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).- Build libtevent and libldb and put them into separate subpackages.- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + 'net', 'smbclient' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing "badPasswordCount"; (bso#4347). + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202). + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in "trusted_domains"; (bso#7037). + Complete and improve some German translation of 'net'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with "dos filemode=yes" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments. + BUG 7043: Fix crash bug in "SMBC_parse_path". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.- Free unused memory after a packet got processed; (bso#7020).- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).- Update to 3.5.0rc1. + BUG 6837: Fix "Too many open files" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when "mangling method" is set to "hash". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the 'net' command. + Fix up a share type translation and translate some more strings in 'net'. + Allow to call "pdbedit -N description -u user" without specifiyng "-r". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in 'net ads testjoin'. + Add some German translations for the 'net' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone 'make installdocs'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix "UID range full" error in Winbind (bug #6901). + Fix multiple LDAP servers in "idmap backend" and "idmap alloc backend" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display "none" in 'net rpc trustdom list'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix "Too many open files" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix "map acl inherit = yes". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with "mangling method = hash". + BUG 6967: Fix 'net ads join' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix "mangle method = hash" truncates files with dot "." character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).- Add BuildRequires to fam-devel; (bnc#564260).- Prevent winbind crash; (bso#7014); (bnc#566119).- Fix processing of open modes in POSIX open; (bnc#530683).- Add baselibs.conf as a source.- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: "Too many open files" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on 'net ads join'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing "strict allocate". + Restore "fake directory create times" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate "write cache size" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.- Give the user a chance to change password when password will expire soon; (FATE#302414).- Rename smbfs init script to cifs for post-11.2 systems.- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165). - Simplify the winbind package %pre script and suppress stdout only.- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring. - Remove using_samba from the doc package. - Increase major version of libtalloc to 2.- Fix kerberos refresh chain; (bnc#546162); (bso#6872).- Hardlink duplicate files on post-11.1 systems.- Add BuildArch noarch to samba-doc on post-11.1 systems.- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a "hidden" parameter "share:fake_fscaps". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if "aio write behind" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don't fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.- Let smbclient show special characters properly; (bso#6829); (bnc#544204).- Don't fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).- Allow winbind to ignore certain domains; (bnc#539506).- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix potential denial of service; CVE-2009-2906; (bnc#543115).- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix unresolved home path; CVE-2009-2813; (bnc#539517).- Don't overwrite password in pam_winbind; (bnc#515444).- mods for winbind (when used with squid - ntlm_auth) o winbind adds group 'winbind' o permission 0750,root,winbind LOCKDIR/winbindd_privileged- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified "net join". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix 'smbcontrol smbd ping'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in 'net usershare list'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix 'force user' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix 'force user'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don't require "Modify property" perms to unjoin. + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with 'passdb backend = tdbsam'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the '/' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to 'net'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).- check in .po files for pam_winbind; (bnc#499233); (bso#6602).- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).- Update to 3.0.36. + Fix Winbind crash on 'getent group' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on 'getent group'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it's an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don't install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don't try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build./bin/sh  !"#$%&4.7.6+git.54.6e3276c9872-lp150.2.204.7.6+git.54.6e3276c9872-lp150.2.20krb5pluginskdbsamba.solibdcerpc-server.so.0libdcerpc-server.so.0.0.1sambabind9dlz_bind9.sodlz_bind9_10.sodlz_bind9_11.sodlz_bind9_9.sogenseckrb5.solibdb-glue-samba4.solibdfs-server-ad-samba4.solibdlz-bind9-for-torture-samba4.solibdnsserver-common-samba4.solibpac-samba4.solibprocess-model-samba4.solibservice-samba4.soprocess_modelstandard.soservicecldap.sodcerpc.sodns.sodns_update.sodrepl.sokcc.sokdc.soldap.sonbtd.sontp_signd.sos3fs.soweb.sowinbindd.sowrepl.so/usr/lib//usr/lib/krb5//usr/lib/krb5/plugins//usr/lib/krb5/plugins/kdb//usr/lib/samba//usr/lib/samba/bind9//usr/lib/samba/gensec//usr/lib/samba/process_model//usr/lib/samba/service/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.0/standard/fbeeb8e581c3d1ba878fe350b37834d6-sambacpioxz5x86_64-suse-linux directoryELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c29412660fb2fd6294b08c118ba724d799268d82, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1e9756e04c72e7dd6bad857dbdcb59c4342ff55, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=673c69ca9d782c552f742273479a5a8924cdc71b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d8d2058d91c5673961e7b1d027dcd8159fcc65aa, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=339c135e93820bac5cb7aab18432576abd494845, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3dac499758efc7bfcc2711c4547955b1ffd943ac, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ddc9621a273d6c9a2ee3103668dacb6fd4454374, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ddb6ce7c7f15a1648234ede7d496c3aab6b7c951, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=fcf5169ea177947255837ee81ee216b4efbe8550, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=949913c754edb3eb45387c38a4156d1ed25e63fb, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0309e89d4d71528cf936d53e7c7b435ad79db039, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9a17bfe600bd7ae43d0eed7100bbc42c2857e3b8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=21f94b6536bde4b7eb49807f81404cf905ad5549, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f5afaa4ee980166e9e28da34fa96e22121009157, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=78b1b1d97fd99b262fbb9566d31ba439b3673c22, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca4e4be8eafebd453c821018e47e27350b538f82, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2808f96d7138cf47b7ef16b64de7eb0babaad21e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3ab53243bdf691302923285ccb27c204848ade2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4967064fe694a475c5257a2d014b46bc49d33fc9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f63c4bee95a9ad956cf890b443d81bf6b837ea12, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c2109e08c0b0d2e68600170a635bb6b21ca9792, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3272bb50b022bd1e14be70b6c98ed5ec4c4fb828, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=7fe6df6c98f739139952d94a76baac30049646b0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=518ca6fd491dfbaa2830b08d09bc38a085b8513f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=5273999fb045be0e6b5f4c7354a7eb400aaa8ca8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf0ae802af30c969bed7691cd986a98679631464, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a7b32c6d5ca23d6f94c8dbbb537e9ee5a44128c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa0049dc125ffc53f8ddb1313bc4f95a3b76584a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b07aef69a22c511db2ee8b13d407bf54c22a6b06, stripped'%Sh *EX L'_ ."&(!8$0&B5/(0R RRRKRhRvRxRRIR;RRR%RERRRzRRARGR$RRgRyRRRR RwRHRuR:RFR@RJRRDRR PPR5RRvR;RRR|RR9R RnRR/RdRGR1RtRxRRRR=RRPR RzR#R+RRRRRR'R?RaRbR^RrRKRRZR\RRRRXR)RRRmRRqRsRWRwRyRRRYRRRRR RvR7R RRjRxR1R=RRRRtRzRRRRKRR0RyRw3ǖ8O1Xe$g^N\(dΟ@>ȰIH9,- DM 6%CB)h$?J)*5qC,[zp& 䠝-?W բlP8ZSu% "#(!]#r> *l=Jv'Y@aS"KVs^h$ (DQQRJmݤ P.-yE7\nCN' ~Tb9JO:!k|ٺ19 Oj>1@M,c z*0k}{Tې5yYOc#1;\:8*9nnok~0:1_ 헾y˯(a >UY%Z`.pMkjl0+3 l{߮&AS5Z5S/7 6V MU-N1N wD?5Ή }x=[?MϥWϚE>~pݝόdʚx⬍SCצdHy;lp'裈ro!v(wy\{!Y,ӓν؈#[Vm[+]|֞R&VwtҮ8%y|r*zO@II7F4C3>+/2"Ҳy#UG ̨ A\Nn@älvZv mşvݳ}Q"*JT&|FqQp!{M!Y޽o\yQ{{1LMΧ0-Bk7MNdŋ"S皧n &)N5L@`K~?C]u]'8$'e%Yp`᪯+B>;֢N,KAܯm='[Bȗ%V٦u3?b>7y*r'O%(61#m(2di6KYL (4n^4E8N"lU*:M< ;-P!6.W"ͤB2W ^DMٜÝy;!Ii *FQftSCPz <DŽ섹 OlXEߺv霺4wO8晫)b ?9 ޯeT*K#j7F9q>:/Mnaq&#e{%/-Xi + "] LX_G-/(ֱDV"ɝ`Sq*03'y l*latFo{`YХUz?>k }}=A .l>X^N} , .B7Q`5v'n*,LEjp0;DTH!nV .Z¨0è>>D>(&ɻsb(N`{~צz0֯Jg|-U?V  nnMO㚟NQguJdc?2G .̲fi-=? bv߼RDy|xȧ:CW e' 3~' 扳 2rX0*_XCFx5|pe䒃!ݐ*:6my& xG+U&K=O7w/kBń8)#T{-3%_NȞ)s2x˳sU6Xi; +{Tm[_ aQ`8@ ܏UhX:#Y#j~D^߁k5X.C;!.=F:5 `&Zi? Vo$  vIjX TW?gn.o[xY t @ઓ-93l)/Jk:=sGOzR{3,ɷ#Rd:5eCC`/ 6I 1]'{}dp80b6n=OOwE)~9yL*V,GS?tJFlNj0 ybA09 \=:JE)ʼ5jgodrkh<ŝ~,5_0%8Z4$}Ww1&kP{#ـܛ5|V4ukBH2sкxGdc_y{a?K,N|7w ;l*1։iv4H-᛬nL:[7X2E%g_|(eI.b0Yrθcc1LWkV#$UAsujqϲ"Ջ ɨ͒qWJ*e_YЄ[>hjd[l-yNJ ͠Zj,!l4o,L̙xapZj`:Ax=7Ji|c,0!y$/F$3䣅%8sct"׮~-ٱHPğקl.pT?⯑OP=m'aIF|" N,oځ'JF,irFvVԘ8)5cE1~N#  H!mg7ƅHgGT%IK2dkS7~Ⱥ8Ҽm0KzRX@3HDHU_j±pzK/-JJsYUWtdh7$y?..,x@Yӱ;a="F1ʣV@s_s`~W$o|S}%c4գ:5 [& 5=]nvcz\vF7i?+,.jMvܚEypV"J. 7O zw~s|l@K f*lirZ+oCYۯߘ(%Xl ԩaϬ7m[-{͇%x si_ ˀ6[?Y:`U{bh*DTs݂IU(aK`\pK=} x~D<2 l~e}hcƇ THD̑zļ+TOH@D(\nV\>v$XP<i!ʀ9/&D?,H%Iʉ&G /TcO3JX,S\BoHOrsz?|@ل.lQIÉ 񼈴V8(c6=9A#5':zr_TJ>¶PJvjn:A&NxPmgxW#?ƪK{6ޠF@g26WDosCmԠ.LF:MV9Z%&- G3X[pS@a9k7֠9`ޓ% l7_̝o~6~2r?. @n|Ul~C6 b'׹5n#z~Ӏŕ(H&`+9RԯLNƒX2l` \ /;ъ4`wLq'XM{ yQѳ]>L0S6şg봉?ZkXw5 z#; LJf1BZ# d}0#|I4.H]Ĵ`b5z! "/L2U$2t26+<*mL^Af֭L%bаB*^%|P|(I)2=̈qlkK F$YT :vSj}ot F%)>sB蹾Q+tez j;Y8qz|EZTй wmW4PvXfrDɅy GZ+;+ص,*WgȨS[^9^dB`υrN2M7^tȴ ̰N[~Ɩ)Eˏv nw!=1ھF:S{lc-3Vf5=WZN_>[S$mk5[)L&|ȑ*lZSIOy,()"b!<3qRQRxu bx"7)[&sv@/̪Ϩ8 pA3rX]0םSW4Ѥg|N,G~|)2A69ysCTKQ$גGņ_LMǽ=F#TT½ ,ϡ rбJoU }=F;+yЈYyᛤh5#r ?ǽ畜Hxu"#8#O~ԒP#s{3.s8 ?'sF:kw>I1T! q񽯥 [We۵{,~w#5UCE#ayLĐ"BsaEuuGL٢u˽\KEEP+ſ _K5Ow357;^ m1 sZJuisFCpVep.As\̯]gdRm.ʭEZ :<~=sWS쟀G@%7qnF1-Цr9^}6֧5)2&BTq"o@(GμU D*NPG70?P%=w*!nwz42@i b`b~"mjNL@$JÍt ˴\Q>u}P}. yE9瑲Ej>;7_ufEg[1\r0Ϡ(sЦ$ g=d O;`LO3Du@fG38DRNLsФm9R*`AiS^Mh-u`swЩ FpHvG1Fq=觱h^̀~l /~1|&˩]/[ J ~߭h2 mȾ !ko_ hjv.mΥ,)6o$O/^Ck@ϙvD2tħd"^wRV/H&g%-!Z6ۡ g!xJȹQ$.,D3T~9UGQ%p#+ܪEq ;rwfAtE{)H\}+$!5hOH2me?C.Z֮`셕ư%'lDdjnv9ʙeΰ6Mô #AX=ܷUD,_jjG?ޑwGBR$e fBS\ < :PR$,Lӵ6w%yY}n+#{eJqd=ft̡Ueb/Qоkh?vqu@l΄H3syL-@:2 K? ?Jnlp!\H&U?Nl GA(B?n=܋/'wΓ!op]9':wHGv(P6M-ugN~-$ L!xvSSBwˉP S,(|{Z(G ws 37\w*C(5x 3K;׊qOD')={zzSLr,}nT -+SZpUszXT+Y3AIԡ!3l&3PS1G=;w#S iՠvO;srgo}2V}'"762k?30xz=V>Ua۞f2L`,n&&[Yn,aǜ iqWh&xs)!Ε1ga;B+iZNk#i o^C*6t ǧbVe VJp'>Jsr*̓Sݍ6X.%2Sr R+䞸zA0ܓsPd0ZB﵄x|bԏ+ Urۇ4|v 'Ummty/H9'NGb.N/! 0dIF׀A3HX4dnLӀe#d0!F !WsNּvq. '9#|zV?&P&@E$D6> AH=ljM~H_u䴛1 sy8U1_H: ٗ@,v "}a/ ZCT1cuɣ+IeIQ(‡8c6<>\H=gЊO[bbJZXZ".|n F3b̚SQ9 ;9|ǨZ\MIRmӧ,&֛]׀ݿ^ Kq芝:?PhE7ILfq\? G+ztVxrKU;8l~颪54/SR=MRj %zpI3OXzۚOd&qO8HG ZUD 5Sjd Hnk7:5/PDpD@H ऍS78ӣ48F%\,)Y""Ʌowb `' 6LS_L9v<9oɯ|vlЋ^XB̼66&/1æUd6ML niWA,|IwK^az!z4km[v{_!s oR%i=\n`_зwTKV'#-7x'C~+Q9U ]Ձ$6CmQF@ke]ͨeƘiBY(-xR<@~ll_N-xˮe G0Lܷjگ8nLطYTʈL$h/)$vj[B­:)^ E5eN3^ҹ gH>~F` ?O gsBCLQ |bT ×RYVS*hc}'iơnmmãeb%x 3qb wCIa}VDLVO|ضDkOPpZQB>[+ӡd|YE<\Β@y+c8Zt?|شWFihrn [+ ,&W+ /S@-cfe[,@9?wNBR/fd #!Rjib-+22|? # uAֈ+c_vln p[:.\vwͦӝ#'؅:>@~oR) Q AЍL`Bw,9p tR+i]ul$]3I\?s{X c5YHT`ިҐ(U$ Ao~18槐%Xg~][}r gl;/[~Ϊa&4?G[o˕4x"r-L qo&jaMc#պRAOЀXȌC}RE쉔g I8Vo'JmlEIcK)]vsKCK:z]O G'Z'f晒ηAN9:pP{$rp7eɩʊͶ 9lm QRU'mxUp{U }cmE+)funS1]9R~*׾d d }vz](xâD́Zt_{umࡢi̥/~mO?aYU#][N w2h kct.Rz:ɇPMBUqJ \@`m YD+DPf^+p "qo_Eצ8h^J-93bEzv!>N+w?K8 y246oNA̳r<ׇ\q6 g[X/\^|G_shY* %.NVs_9*#T"]Q RdL NO<,t aymfZi%0 <ȩȚH?f9u 8lL,ڏcXy)3[` ;h)UY~Fպq7 ȑ:0#u6>b3̆v*au3uȤ9prncf``ACZ&S3i[tv;\ /Bir%"a_4 UPXj4S,n> i]'1[c4Y0B-.EԞF+6#-͒fc ﵹSp2 HSAduN k?1|r*_֌Q-~Tp$GRZq#ȖC˻1foc-պէ"G|j6Q[ _Sqc`/ )WOxEQޒjP۲du/ ,P96]% E -WRD s/a~w5z+)5{d) ßlQ)4nv9+3p]:cNeqNz&'ιSHUFՕ%&@ j$^l}[&$}hiB4krI0Q,vߋۄ0Kk1f7wvphw3|GFǹʓ <mK=_(lT(BI?/s],1ev>ݦtEO# &ޯp gmp톑<$Bg`2hR@_XsL>`mQ\godž_˱j6oe ;+'؟P'ݠsʼz}S> rԭ1&ګ)6w?FAgyo)t8{'!&ľb%TO` E5~_y h,%zŬл~R/0QLzXZgCR74k/ﻶ4l0 Gtw%?Ÿn ՖL\AL- U&?$7Z=ͣd6lF0c$΢ Y"fU^Y8"F' tLH+)`0'm6>һ|-Cj_mӒG6[`s{|z%w{eSӖ{U/~TB5I՝&F +qALx9hnJ.7Աqt! -(M{ʰOH(ѓQV-'`l(F#ӵ:Y㊰c{~4јie@ sB]ϣSzº<+>?mj:& Ȑ,/>L*t(ILGp;r [TA rSs(l^ՅQkH\cz>a*_I\>6ցҼڴZ=XZi VY.NYL[վ+ >0n/~ ě~OVb_T %vf.̔ 棪gD] 1)'zP%'mɫhKG'=~s&FlwuP?Ғ=[8Eb5 ?ԅc}!"` 4!{y)KIw ibg#nTB*={G-La^kʙcƘ9+ɿRT* Jqs5oD>s);q6{ԔρqYrU`K%HF7B0[k` {Sh-aֱ2\\; u2eG^3'Hu]ƔaȀ2 '[e|vHS߭Gc87HeNrzQT f)MF>%%,1u ƩmOX=LbQFNNhhmVwo]Ă$}h<LxlT@F+ݳ5Ϸ|%Bb'I4.rw6?y~-*51p$S[sI:u#Z"Tr 1^ڂӱ8dFX;) ][4 D)~}6Az1\WUs2kKof},_I eVˌ'c/A9tktx'C}0+=L\-Rge$+襯DzgWUJ"-qR eMϪlr`i|Y1Ro@˫;2 4r ,|OZ$Xcګ#&ƥIW!fZNYSe|==/O[~ 'FYJ9Q7О<%Q_vCmM~0UXvr-;8~&ԙV% }] X4ZV2 "#姚w&9d-g:slWܚ/oiCl G8SG~R1@b]&oz/aD&2| pOQg Y7ںЄ\ϤXumOmIW`-V1 b;ʃe{Qf =Tj29RdMi8ga6e; ak8W$dF@5_=<5np܏'ǵ%!{0;>oL/ X{zEK2.S:xGƓ0g\d%j>(KOD2i8-i\Ֆ KKȇІgn:ͩ@wWZ[p FIjO k%gtC/&:퇛)gloHFC Vcgvt;ȁeZRM?s~=`@=ƹlQ'zIQŸfSk#h;C:89{Gwak&xS%ä~m&0ZɃj`_K3u A]:71*(נ1obxv*u%oX~Xڛi\^fOıYCų7gug|a 1&/.wG`2s Ilb OPKv)l;Ui !*|H2nə+ǚUaڜ=0渍J8^U"t%`#'3 Zڤ'\} 0&9Qt m_&fbjKsq?\5]:=TH|#ͲքaYd*m߰u`6kN (sF//0Tev4sQ 1}FM]b[!mGN3+.dU8(@CnHIK=Ԭ8CBXs>6 G? -j0R !xm;n1,FgM(Q4w 8CW^+zayRSʕ`A﨡L %[{7UrWԸ 7X6}{J_+]&EЮrS,N0$rۄM!ED_J pZ\mD Lhhnނ?, B[ =I-c&evno)BKRS  2Kt+8U-]D$-0B5RdXDG0OJz (P#vxTD6Bx_!vַdk 2 R.IQ׎k6(E/W9:rɸJ`N=;)jAhXl!ws"!9 f\ ./s{GciM 7M%uydb|k<긽q{xu)F`$aeMf+o$0Nv5 ]!7Y9p5thr݄n.䰻 3MwJ+A펟h#4ECE!AeͭUrL6ua?Nȣ:z@X m%^v$=ŝ~1.4V\)BYHo𰨗~6Oom/aM(O< N)H"fzg&,<ҹ7#n[^Z9X,cIQ^q>s(NMb]r ?"_zW>Rj9mi2q$vU88ߠũA?͵rCZpJ-Y/@o@Y:W$o)b~<5H=T%?:vZr/"rlPb ,裼Ħ!)r8 pzs6O&݉Y.S4MNyF-W> ]v-'N 7 ju6o{ʏp]O]bQ cߘ8}ԛ!{CJO7$L"@kf>Psnq,~ay{eSNs4R spkΧfE{zܪ[8-$^ Ѩ@ a@^wr1Bx z _ # ?Y"b̓4" 6U.S4) PXR2M! 뗥D рGm42?x򡑄<0X(rGx śy4*bjkbm V.ʢˍ:udZiܽŜ &iϋE!_Kp{Y)KDzH(Op 6A%vGC$,<߆ ,*yNĺo`\)7&JxNg,K2AOwH:妻`K.yB,8*f 4KOOWߊ~ &@("=P9c/RP ip/3U԰}\DASkSG ~SMjj*z+}s>-\04]k6Lf.Jyx(wׅ>Wf Y}C~sM` :7cLNǣmuVD ~Yc'2bI$TMPL=otԀ>9yH[pǫp-僕꾱[6]5U; ZRͬNsYdM7 ;xg :W`p؛бoKzBP>ېs| Mi{}u\FK]^+t mTFMSԤ_¬lܶ1c=qj~H%45ۗӹs]>D%F&sQS;0t[гpDX6hE< ^qTlzGvx=>&[\ cs 3*j'"xj3tQ;ryj~B [b ]Pv_H9s՟u>mN(bE;Z198 ̴9)nX_ZmnzV2W0etuM7tchn& NЃJ*hx~ń2sL/gЈ PY`KBƂ'Aou!bBޤ_'`Vhomչ*id@"^;}5 0ƈܰ a(4匾cqPԬft'va4I>}pޢP|]J`y.wRʶ̶y5`_8?Gm@]j:r9$A,C?*>7lWڽaIL `mN9ebXܤ*.'~{ ۝ ya]Ί抂cwkosZ>jgoT> +*K~+.xfZW$O+;qsW5`8r$(c YJtqR $Vw (4+5%G=-%sE;QJj =LdDWВU1-O -C3<[֒Gfg_{KIpn(m {_2K+ 2@# i*6ࢽn :,E/gjfcIb\$&\r7J)Cz399RO li?w_Md#~6wT]nzw;x: kDɵ@Ez/Qzp)*oo@ۆӨ17{nksRwPi@X_/M$X9 ,}ճyCյ+ 2D=uQU6γCNG0Y}bMX6;uSoh?ka-?LɞϮO '"DW1jm,?u&Ha@b L3 Ԡ}PyqxK5qi;]GCf=0Ѓrb:\ry/li`]&*uG|ηm];JgB(`}m$ۦLh ~FwMl ~(lDS7a2lMf1#fkrTX?vU<1-KK2/7;2-_P$"+  Y>7晃-?*ϴnr\ DAmgᶾ P(>cq5U jңv 6*/De1jg\a,QX`"͏zu뒚k;e!Dꋎ`_ϗy C3f0}qc&I.2O$wPqvXfcz]˷pL6}ytH[Zʈ+2$ȱ}ʨF_s ^^#,9ftra@+oz6_sf h#"LhepLV 1QB(IKF>NzhHAIs ]hh2? uhKw{y(!`'ȭά\d%S[#,G^-GGo5p GqCZ(L3>㖠iGb;w}DK9\?qȫ>H%xل:F2j^Trq:VheA%B#^nPND揘/UƵCxڀށN$Vx4CЩDg u74M@Mvn^xlw)AްZX|}?SC}W*&՗ {$[6gq8ƄК!g-*3īu-<^WAD?DyNYOҞHr˻Z9kD˅WQn*0F}4,D[N TKye9|!o5E af1=%4Y JV()Aj?DB/<$ڈT?W6TJ+$E!ԥ^+& NJrmgc3BOǽێKϟmr|L|f?RjW?ډ˜k_vv2L6DӶxI<1`=JэQa݌Wׯ'3u12Hiy1$(4Ŷ)P.1Ǵ(d fDlc'EuZęsXp7dOQHE|%@ ]?mw^ź2mϳqk{69 PB@RS5>ΐSKYs*ٖ_Յ,m K8R;ԇLEgc3),IփV']Yiёq5!k :ןUra2p pDn&vIbN+is_??(v0}TYc@ U2E:ƭ3Ws"\v7Y3[gY9:oȵD0R(u`inro(wPX'{=VH¤8H o.qy ձo5Oۃq=,ٽd× _Bą-aGe~ ^>3DD[G;S#Aމ}I.vekҲDFJ+JSE$OlCFxk%0Ғ"-ڸMPĥ 9mhӬc>@)F?owyVӯCGLV2aG00c[;c>x9JۻUMBLZG>X_. (G@h}k|lTx5~B {@~=ml|u!vƔDaRWru)G!gs'Z/#w;/0`×.aٚEp'3W-c.uPT9)x U>".⨋ wTu-z`Y.APϏ[XBo+CG/MR_Ho4TǼ~7mKzn m5#QH+k~Ӝ}ch*au*G%2 fD f&Ě7iSKB^+}bC1-N6:u\ ;]c]] r\K5Cjc?eg$ ɽ-$K 1ߘdk5*Ңy~v7)? gm/|×˕%I< hz.GL8AjlO 3 x,nw4Q@^`\Wy@(@~ɑ˺LX__v~]>SNldTtXL2D[!'qn5:ߎVq$JKqr^+Fe;[yٮX)WҽJ?:(}[z5- 3OL4θzɤTLk we;6w4A44.px*H[!7O5X̺De]0HG@,h}fAmaC9R2[E [yA+ԛʭNq/<к# xAKXc$9((=&ډn43`0G*vZJBg5bRp"+!Ţa(v}RQ%qE4,̇*ZT-"idlZRaK,!{Vq?Wc;EO{ e)|QydXtD/?+ úa]xGV&Ԗ0ybMYꀅzxs.YYK@S̅Xvczuػy]*REVL_{!-8LJOh,Mü@3;S'vcF6$Ǣ *>*=5f-Cx]Ctuھ < ׼C5*4U<] abW & *BO?YYlkMd#ԵJL)G*ޚO{T()dgzN"o*l8݊et?"l)@դ#pMGvL H4(' jЙjު$Bc/ isht\@$VE6HN/nB6.N>zFkwt)#'+pb sv2 p1&P?E9Fyslİ( 5PSǃE]{>iZƳ73}WNkl{w@Tualv',sǤrq CS>C јRPo];$m8 5WnZ4Ye_D@wυ8gQaOR}Y^ fhnG,*ST8Dș&hFk@RB b{fvP}pDzm fabEʵV-ݔSyyJ$uc_?)J$\pl–w7 :IS:lFdKN0xn!x Ƨ%@%t*3h]B{2z9o{}~^2v 1;zczߐ&F(Mm6,FUHQi o"۶vo\*b>Q(HRO ޥ,ko}8k QvS|BL1J,gW窂^^gE:5Rh&Y36cLֵ}fKKǀ r-ezs8n{n&3˟}" ii0–s8ֹ|o~%=&ӸyK5 됴fo:I>J~%l:T )+Ϊb}p-%l4`("_Vׅ?*#Q};$KkQ >QBŬX|`o?>'[J^Ԝyajb׎ۍ*\>~ӌ$Uqer3 z^kdOLE;]gʏ|Jø5MZC]08^U%Q+b̥0)EA%NJŜ+VJq-0C~DlQJNgĻXEB|+hEMH"ӱ ،xpALi[- <"osJ@@}py`X#}UmMVGi]Okhq?EPqF E20b01Z#+8/gy :YCFk wrmMH" ˡ ?!^Ϫ}`_o58|ί-M` SL7.*pW lVRNDi؟1ĕ* (q3+BA܃qҩ#\v$+Ug'>VJXk]F% ЂJ;qդ"^W)XqO*Ѫu*ەQZ*܈wp[rP_ץWKzRdu,NÕĪf02\+ Ω3/z[}YZ4 4-v#'Ux|&)X1 Za6J كc7\@p%'nC5F[Im*lO&.>GܢLL[9RbjB $q+ ;c>Ucq! LJ ;Sq`m$0[DU~x Yîb):&'H/?,Ƚ(FoU휊5:*Rw&iJUuKb&dTO%WH۲ 1GZ9&Vz!6p { ^TPKֈR"fz1K[̮S#{ M&[k(e ʧW,ۃ-߹G>4#K ek$'~ťSԱ# P,"Hφ/ jaB)oDJ3Ė ?ˍyO4X;IBqGjk+%uN /-z[NEI5VvBF axq^vā:*Jțur4rԣ.BXvQCY}jA&P3 o<1a2.k9L~bS!`/饥nc#=MO%'d}'N;{pϚV~ h"a7@)l\)О!9 (VZ(?Z+y?{0ˑiT*ฯ6eo860A5[O%O/ifyeFW'?%yUDoshc󌁠̼qpD xG=3a_N͹6USG +K˵T;{sXq_xO^'Ф7FEjK5 ![9TG?T-ܚms/Yg8r, W*tO9}aI1uXOR_ r̻;=Ľ,MkXXYXQ&1S%ui T|-8ժvu *t1~q 8/BЪyP" UN) 1 Ul?9j1t[rA D.ԉb`JA3kD<ꞅ7%>23Xs}\U^sDJ >V^i lEy/7&Hi9OoŎֈ9"55ۼ:,S^lÁ00dŊ${a|Y`֜hDC!K0nup(z:3T_uӤvƻ?a|gUo_8df ¦nN.Nhl3ZN QPG]LM^ -,J^S7+Z02lDfTMp1zdsj]{K=Vjg1)4~*ԑN`q;Ѐ__ӡCXO* mof1mXBX/XuSD$xm&șfooClZ3T,ŸwT~XTS76e;jKO+"afP?Q!=-7#ϵvծFx'D%_Q77}jjoʔN"zu"ǢhSv.NH2kkG])/(  wh ,w._)e5nPo)Ĺc=y\9|ֿfO䛒R?%obԬzE?-#сE#p4 ┈+sT3 _>SW^do53{΢;1nBmHdi9Eg'*P?A)5!#]QeK=ACt> R#F=ږY@;:Gse$>ϸQ2 CgmUsOE"2@- hĚZ{ u2S}=V; X0/Ql4(mHxR% B;l$&p@҈Ӄ~Šw32VpN^iQ^TQFwemHӂ OAV \, l}uN&C),Wus迮#ֈ^׆\"qh( J\&5x?ځpAa O(BS97R#O:aqu)z(}sZ>V EJTH=PEeP)?B)qf[Rޖ2,zQ{ A{r ֓Yj;%@~)f2UM]@G{5yOg&1>@h˞W@]eŚ 7:t,$b/ w2LhgQx[$(sidh7s3ІmjV_#FcBeL-u ƪJRٳp FBjef#ke 8C}Q؂4%O{ɴ/.l y@nA+6 G'P!"&x1:f0#4*nױ~ȡW,e(*_Йlߠ<%M q[id/Qs3eFSLq.VZf1CBM7s2|L 2X][ ڽZbdE/%]`(wT+zt5;E,*:0otmSyC2}BNSZbCv A'C~[!i*CtZĴIB|Q=״xFSY3 -;&+G+2^䷂="; aCDcB H. ~.0 vElQē 4\e$,یJ申*cl6;\ PQ L"sg 5[5}ϛe\_P,BHAh57fewN̽1O.A;th`R/w8ĹR7†ɹb`P'hbCQ;4m;ؒB? ?bf_Ғ;G }a$X܏fb|:K [RJYtgLn7T,I- Ԑ:RV0`}[")9[au/WKO^wRgLBn =kVUTt[ۏ;Wnā[`,Ayat9={i%6l4ĬuU,8Cԭ_z<đc˅ox[tx/ g쁞;pvȉUzrY9acVkud88]twW1xd`[R8"aͩ$%;Ge/"uH6 C3 bpIx =ES?(s0͕eCZ>lzB|43O;H,*pKi$ep?R pkj # 8sB'^̩c7b`l2@ƀz td?Rˊ 2;$A$ խ`Ǘ<ZIe@5jIa_l¦BZ{ /s2 k fƌ/q}n8~ . r|K\RxVNN;JѠhKZhR/#n',XH> W8x#T u bڑ;~lx;&mRy_NGS~=ߊ(+iT8K}\F1р@ߝZJ4t;wѧ±Oka61k^xO9\,1>׾̵qI}]ױ2 )nMp|x9gJIF @:KvfTɣ@#4?ۄwQ4˂oJKz0FO5/IJ]kN]iv @]e^"M:\n.uXjgqZEIBi\4UA >A;p/DĈeFȕen%9~ VseBL-Z1^8r`Qc4U$0Joσ$G%YXQn{naψ0Sni DmK斧UiyhqI"A- IS.HMk _@иL4@˽z ;n1[5Pp5F߬ߒOrEHEkt.z.~ViIJ}h#: P;qOoyDiUzc%:+ W"ˑs}2ώQdcmXDӏt%bVK(SO"> ,9udm捓?-KlG 傝׎N ï"UV/?e[~:mJɸadbSުҌA|n_TD_etݻ&&' ~|VNB T:袹4k4Xܦm3y9Nb~R`!"쎪_ٮh_$?]mNQRrR5-lmcG6C`B5ߧ diVW# v9M.O<ID!`}\PuEj8 +I[<yޢa}jQc#"P@@ ?UkLب*[BL3<~+#9B=_fa:S6daH9M)gۘ@m 2 *M? )isiFG{ͱPr0~^lnoN"z} (vdv|䛫oS'1}s^#eg͇ZXyKb!Ѐm4rT'w@L9*?aбe$UQvh'VƐh9;-*zUbCX{vz54!<A0sus+9ik8Z3Խ#Z%>d,a6"7ˁnX"YtkQ`Sra^8${j"ƐbW21>Cs8ޔW~Vҗůɳo f&|敮qF;C@?G%K0ms4!(遞.FOhkq'YR8 87]C}ZVċ&204׃l{dܲ41IQ_yr;,"ؕ~h>5zIBc& Qԡrlyt^Aކ7|GG;4b[4OF1sB,nZ=^7;Wx4dYz|:ݤyÍD)y{뷙50eYOTbdI))8we'VG&[e*M!I-Ĵ`A+8DȮ9H3poєנH<:{Q :Dsיk~_lP+S\CɅK 'z x1+ur1 @sF.eQ5wf4d~k%^zbD|"7?z0g;FU|RD`&RkxJy0Ʋ #7-!@V֮ڣ?@(O3znnH PDj{+a꾥|8ZV܉ea6K`)CEy֑6T&+u9|:|o9LmEն߇t]\,dcovi PJm=R ݇V( GCᑊ"k)e||[1[OC&ʪ-LKEP `kmTuB{; Xꪛa(BЀ1}ZR.טcPp58Lyn?iH9B3vYiqޡe~ |T\eX~] F3%ړW7)8BQmCr4=z_= )v 075SX]80zu%S… om*< ``D aAV66ćW?u]kX*Qwp$_JCFeZkkUޚI:oPؙ$nn Iag%Xw.*(ՠiٍ}ycB7^Hwܜ\pgs׾/fd9kxU.iɪxQ`iWi`y1\rڡJo1\+ mUKTז'K,j\#˕ ]]weiwE} ypnWk#C$h{rK8kENiIˁ=?mêQ2{M?'YW?p.M)Ϗw_ߜbM# RcTզ׺"2 K 4hs|\hQ`C &LqilŽ&czEk1| MAY%J/ZqqܹQ2qfMsL\\fAbA!R-ab&IRaP /q_?|mW7̭~;M@v;H׀Z1zz0zvvSqNҖQ<"K=>-,~0^Ҝ{:Xf5Ah H֌;V8 @d]_YW܊gW1VvA{%npR¿R|%m."ɨzV6 (%"/Цfڨw!Z9O~y9 >5]`Iߙq11 36{- m xj(拑.![V&H a@gBsrDN}d2H= ~0Nij]$_iv.?J(G_kӋH~!lu?9މc~_GUn4n*(S.;G`c%^Co1[^3ioݶe9VQaO ՉGʩL ,P]\P_2aل<3vSLY}!Gd`pؙtLi R8_uM%TCRa-y9dz(ȼpLKkl*4,݇A0yk/ DGE2D-s\\8¾\10Yv5S(<)s=>lE?7YV[G@[/Sc; fK5էFO鬒ĹO󌉒K xaq~P M jԱMJ$ r 棶ۍ̞)<=yӰxWQtwni !65fnm{;9hR SFZc-+Vu>"{Y"+ˊD.Q:v>rp2# `cY<} Iw3X&`Sk޺~UW>F%StL"kZwf9Fǥ4WhNY y6Tc5U?Bcmg!mJvn4OY />j5lD~ ߕp 3EV!2C8p8i9N7ڑ9{4$5~MP2wp ERnʯ!ZtYa2 @׺'ds\ BjFGӸ 14xqi}⣴[Cq.d9BR(}Sy'>]?Da˷MKi>8|e*YQ) uf.sMm:&Ȫ ᚐL~`ÐrrdE* 㝐 ՚mB}JtIś@7r*"ǃѦ<ȯԹӊ*荙 |JO^(N)H;몈2ec]R1qEKl9+gj R!- qfD/0Fhr@`">^ u ZM#eޯ*d`2n0S$ WȆ(0nN+t I}?v 73N/-@$d.>%&@=wJ׼޷6V^qh]@XOn nNǀ Jvm9rذTW"ov \_v&7Q \}njUvb=>T'D3gqƟh얖lF1Qdo١6J[kc }INMivL@iZȊ$۷ TG.2 ! |Ԓ_z W .7w(4$VRC@`A3oAEy7<ݛ%2c@p{p {dRBٗ6Qankп , 2OF&;?72.)Wz<|%b3Z]^fmB8}>-ˍ]'vvK?G:A0`75eU'֦tim`Һϛ%;~,iJjԗ` ~ؚRqq5Mʿ/,'[wR/.[ηeQpཷ꓇ޘEN3?]ICnYpJ|SedCXND@Qۉk)j'^îH nk$d2/j;;JZ1DYvGkwNۂfr ֶEThe ކu=WYʇpsB'J_QblY:Ckw2臤󾇠MKI!Xrn7t`-3a ߮b5?A–)/+Fx|˅`cLN/nB@qH/[՛LTSFbZٳ+:ֵ@&VV/L8zOlcʒ ,N^ҋ1bxmG.\ kc8D%~2Rh^[5K?VZs i# /DcCM5fn? "*џU[Y.(8I4?Hʯl$ GW&J=ak%ܙdyjGoK:I+VD$4q5c}"&tW.oQJinc&&ӸWf^Ҋnzp0tN`yӲR$0#LfՐ[?E2\jlEf81=r& ל}T16Q" `)qЈuJi0#L8\̠T鳡=`V*/=9O_=տ|f%5%w .2r8K& b\ LZL[!bU;wqdn=%:Hȯ&2X8h^R.Hr1a'X Y|" 1ݞ?uB NݳC9Cř2Qҟ'1bc$z(~e!_5o$Gɫg^~ FO_ٿiuiTR-+B3φuWtilF;5B?wi*SDgxH֢b!, =9<:m]^y z"6R hdv]M c hʖp.n%ng|2B_Q/ H 5&7"D7B32f9t]L2*ᢁDޣQL~]'O/5ek(w٭ 8'3'|X.w9 CK4L h@)Ӂ\4LlVPeyp'@FlIqFldw@p*'¨k(\!Pv7B@n) KM'7ef89 ]򚵵guhf >:7ުCNnm.opIE)\i#Q0Cbu/aT#Ȯ8Gzh(H@%* M%st 7h|%E#˝at`e≍T]J?,]7VknU߸.N2s͸IT8V#)Խ ٴrWE?뙧v1SȮs̀>(6\Φ*nǙWA+PTEOb4*k.57Y\igtu+,c-s_ 56μO+:ji; 7Eo@ OG2٬Z.8ڲ|סǹCdt!;ۘ` Ҳ!>1M[4ޖ,~'C KmG}TN 󹢐xcbZFb=Wf8rWywe5(}$ oa~0SAǀ7''35| UD[|Fw{}9)sݘ+V /dBY&ˣ'sы_NkxhD9*;"X)f}X+HX MHqJ4Δ#?B+ظ^ 3op֏ʳb1HD>UB#~̎e&V䪃Qw2C?tȭW3rLJ1nH /ʾr7XbA놺Cʛ :0~xBm)"b`^b&dAo";*pCaڴv~r0lF"3O!6a!]C{ f] d޸ ؙ-5c}`ܸ7M@1oe 0ۃ}MzV7_~j]уLu GHTŵvg4 rzqN" NFoyz_9a"~nI6iSym`p+K#=ŢD J@p- >_`[ȡFQ-AIgm s0jq^)l:Y-B ]Ix6Am3zs#0(J^d$#CNFj=s\33rʺ I0 ~GN8'2U|@[ ?(Fn`GsΓ[Ζcez@7"HZ6+agS[BӲa||;PIԸ^UsDUtÆϼZoݠ _kjլpM۸U/TSO %T_K |*5I9ƕca45QKtNM e>Y?q:#`뇑4|var!=NJJr =&ʷWAu>]We \TQ徿 1 kKp-JLSH!x,)=>F[k$!"PBᚇlc{>AV6&YG()qo-5YS,Ol]2͛w9)u}D.;Vy8[, ҿ4z 2{BH1+d9/"0ʤ<'vB$r i<]W(0:-!8Tx*`J%M|9tޭ)Z]p6[m'd,c6378V' t]Lg|*J²A֭Y>m67P!xueY  zD-pkq \E^݉*#BX]t:d b+iзhS_M};)8W#'F%o^ln7]+W/r]`;~!ffDUb֥)T6Y=Qw=fk##m)^xF ^.4[J!}j`Dd=A]//?*atKi;/)=oqHyn tz+FLL[ԐE"nU#(%'aͯ(kt|5/%MrF,\.+Na*BIE0*F8Edmď͊*_qнagU9_4Y`<<%{K++Ӊ> '՞BC\1襎 :MEn36wxgi?eBڻ0'U8`L@6#ٗڏUBp#:]9(ySM>Vdu.n_QOz&~*eHkB돖VRV? -Q@'pؤvmN%| P)Pfw$dGׅrTpCllA`3'',Mw`,?_db\ybowI,UNٵT1@t::7fNg<E+a3E4$E~((k"] SO\]a50/D_7iޡ;//8qvC=Y]Ou č|RT@'M각,ҘDzU:_w N̡AЕƷ̵NB@ѳ\0WX.N9VNNdOlU,QRBC5t桻~±rϓ u%xԫQO%{mFӡC3jnn/7P: sq-к͌:_'Yo o~mj9#%lr4&cvۋ4{\01cOL2Ǩj뺅ƛƍя,"?f{ Nh֓\FX&;Bڏh¥{*PĚa=v]תih'&vp"xţESV\QWhưk(f~eTv1= oUjIQs@.~}M70̵NnwGHJk< xE"ͫJ-II\,imH'Ϭ!+^6-~k#!Q$Y{$bv]G6x)ɥ$q|ae;IYOʪ) 7[{ ;/LiTH۲ B^&xeDV0ucF7镁S'ɼ,iLvnU,(%=Jᙼ`@<(,Фf M4݂!uuy£w($|Ӓ+hZnpS3Arjxǃ#cz𚖔a1k\K>z7l6p<=ty N+A,Mֽ9wc&źM;^P$ɶbJ7±Ix6C!,`K/EXᐔRh` #̻.YEjLM&/Qn,JVYJ}) f{iE0y(v&)bLg7x:$KG_T"y?~$LTx*U⛮-03 :cv5kEs5Q6@ ׸2몙h&/X ž-jC1X'=SSzЀ#" +zYKPw]p n^> Y!x[cviN^ͲPN&j]hnS -k5zwfē0u)np' +W[lk>h`bp+=׻E r՝wHbIl8bm2aUAmj ngM3HG1s)[AvhekiW٫Az)E[بb,P~T(ۙHm}19jM?hX7_8j5:-A9uO햭9KKG })yL23<'&kĜ/_0>nt;PQsQlk- -!%ĤS/, 2)^;i(2-PwZӲoͶJXpTMY͈4+u(0Z M+ݪAtz V0ԋxX뫺_ n&O\܃7] {"&ű<7u8V,5Rϼ(QPuUO7*Պ jĸ!R6^LFg_?#H\ㄶ݌^+[#u!1IK͡'SӮÖR#h3%33fORz٨`X*YWBjEܸʷ9/ҙ7Æ+l]Y=.6sQe5+gQ;- LvŜ.if $6^q4L vۘ}`wD ;&?eb q54$&rn[;ނZ9Yt}iiܢ,螀7ξK(ԒQ,<[2j}gJR>01Z<-]0mZ_Eulz%ðQul\,2A2a'koI8xɀy!(>ƑI]b@ܕ~(ªxG{%w1 -^xV##3Dgg茧.w"xf&Wp׵9QYv;d S"[޴5"+4InS~ⲉ$"p}#ΐLr׻؈sݪ?,ja9iA?hr ڂ!WR,\ĵJxo7|m}i%]E!\\yƈ.da]q/?qq Qs`Q[1KXȼ:`4_PQL|Y:<ҝq]n7Pjc_qGoL5ke A+Hy pmbVc/ڍ^W&yMI4m)Ta0өskF&U^?¶F2 K=*؎'vp ItHCvisU?e:1 6X6<s(Nfn̲jSjI 0t!2iӲcNHf[0&)l~~sH FTZ|f3j틪! wZ.֍ "cea̱O܄-]vp5@Þ;#Z0B|on}R!LcxUr$Ƕ0@*pEry3JתV?5bMNRQ5oP?Xsx_Tr?tB"b% X|϶&Oc6+NġI.0sXoA.|bi>LYa~=Ųcy"H-c?6RiR71Y,yVO.]qg3'wA#vߜ*أ0T\-ku˄a8 հofwY?RLb:AK[p L f^-HlxH48 fI+uwcJƨۖ-ޝH= rH-l6B a"\?)h2i,l9ݱA 5sίb"d9ׇ(NY @v+Ov;"g#bt|MgɈ(>Sj|JLG뭂[.uMX.&Sl>D̝ilւQmÕȟ`> 58/Gb7b[Sêv]qJns2#yTUC_rk>>C߹F9>ǩP,U˱QL|:gR_neO('Motpj*ڡt&0o6H#yA"xrdH~3a%81߬$[[/K\J?˩n']W&B$\.gȗ Vl䥿`[e:S ,<^i*x b=H\(Wh;^NO{y]hi'l [* s Nz+pJ Ƕ[HCy,Hl2MF ~Ak>nׂl& z,Sdhv"ƚj͗ȵwR7c*ovUR \~F:  ѯ=IZ[ȗi3y2#&$ yU}QNu|gcJCOҺv”COqP*r%%Z_Gc]#vI-l! (m}\Jq4 g5\nN14Wn-4#5HŠ k\+/3Y澚!^1.hU-Bwu 2md1M\s3K^z#k,ӏrNSc;p4Ҳ%yB&'ϋ3q'bnr' |rKx<\@D,%ExJ157|L=F.MyE %-n˕&{s۷Rthg-y giZci|M.Շaޡzǥgs_=!in@ Ow!T)f!Jŷ7u=zEf)uTM䕎>2S<clnovu\Ɗy9@Ula̹# Z ^R/4~ntXRbegzQy-SM2_-tŶsuځYE0f,*MUtZԷ[V# ]^>jo4"hQ1av7Z _l{Z\_cxYBUܑ]=2%#(~sfoAFS$=kɫ>qu595~y=9DJ6/$(,Q=لەL&W%4i7Z-ZקCC^.(dh 8 ]w'N;{2dWw) oUƌKVV2ChvwS@P gF̜A*e BH]bYzlp!'n)_! uw;ұ:řSV72HN=cADF^Lͷl4wLCը1dB豙1ַ4\gIF; #ŜL|xw`E[;_T+#(?!>U, eޜV$vj\GiRAa7dv SxZuO1咁h=Ha8otnh8j>GUa6 N5${6 Az7)-f:fʟk' ^UDR%JQ,C IfIxWf6$m)7#)b2 %4UX9!3 *yng UX]28Tŭt>BDiB=mDc'GYiȽIjPPSxK !ʒBx:t͗[GlF&:{T" w78ghn#,opuA\ 6hYCrݱ<[KVEcxvUB0sS=OD*79 eLk1OxѿK{)Twm3(YM3#=f̺L`Zk% +tMjEKf:AC"u;\@(-leatwUo칦tl1sZ1p/E> sBųWfPwG9KCq[-IƁ*17"uX iSl}old$W},R{o&H># o#ͮ`NjW"g,G=䋅q3'12 v}(HٴQ ZE'ѣbU$|C?%:f4?KyZy FsD@rF~Q a_Dh?oçyntFxoЕ&ƃAztCq˶s<l\ZIZⵯ0{2b.ŁW\ &Gl g4GypAaZKG1@I/ !>q̟ _m=0[83a(_=Ojujjңv:Z.]RʳDwTv2gI{!J 4ntv`i8u+ybd41+VFؗQd"#¨.7gz_o%c5,p T}S$̔scPgd3׆"CߣJf.08LI o":oq\" N=ΗQ)a\ tƍ,O%О($mdW\gցWt 8 #KՅp@X* ΙE g@+V苭Qʎ~n8ݢ3]9`4QBHvdy04-Ls{کd%\Is$U.5V /+4ɝPLjU՜>{C8nп0ꈂ T"Z_t DeT}uZKq0f01yY3ǃ6G>g0# } \Օٚ3 v3D" ar ·jkJ#M2raX觧y%;z|\]QE-`\]Ǻ"iМ%EF Fpy']Rk鵞ӿK2x`{ZGX(Žol,BJuLCՖo`2thsD:!0-~;uV`DjE$pq\[76C8GEu9>ߙd†f?Rhzΐ@T Ѣ+s+v"-3f̀lGȋ Zg:A@]ߴɋniUhT3z\-p4h,^-c>Oɧ+檐ă0fi鬹c;kRS"7#dM "Fs`$H~,,(2Mxm9\{pODsmT#fRQR&+պ"ƚ 5l<=b֦FI`<J?m Q΍w6DE^@ZD q4]-֠RgPm?Qn|:&<ϮMLWu_S$>W/WUЯt3/>u`V4Cf xA}ޑp n6d wJt~~eMH[|Ae5C~{4g T4 ~R.k9]{ 2IW#_AK(Z)÷qGꗨ8d,z 5$K<4:z'SU5 lyī)Wկn$iS1QN"1R\6ܨ>u@tPKp .L 3Uq㢔] .NS;M>m5|>:jpnyTLRzTeO1F(DB$>+B/#."i ˴=h[P5f42mCEqctœ=ӲnqtݛX7G[pH*3eP8a㦸RVZ3)v;PkԸž@$sd䘱-,C޺ +Q<5⁢|x5RǷXk8=_k+/D/jHsNX 8[ZQ/,Kɧ*n <髞!!iXG2ptV# c4ܲ|F9#WDJp"C"ëɩdatPHKƺBX1w! :yQmqu& HK»?;^TfdjaYO Z㹑$H`.'(-4g6vmc)Xmh>m=oK;w['*҈%j</-[QGLÈiLR<4@'{f,F`Dw v3G ȘAI~֯H )P;{dwHR_4&B[ًUET7!H_ cm.k&wY8z+ aQ7GHr?SΌ#u *%~Ng)/AN`ME فF,AjjP9E'ꢧI,ŏ% i`۸_gQ#F1ϙ0 7yZe,o<åA-ڰEJ2KB0(Щ^3k( q0#%kA”=a Lxu==;*su/w/kP!,ϛA>q왶byp]8&KqLVLf`Ԯ[V W|9]buzifXhMW(3=%ZCVp/|j6ISWJ:]ʉ]8,U:ɀdcw-%߈\nS, uiA~xTڑ:)ܭ-7jk,B`k( '3.>^/Jm?Y ޫ(t¤dTk!tK#6~kWbQGW[̙n |K=nP!gd⧍h\e*]doM&ixx"/ax?NRG,Ao_Q L:_s^ڰ& /ZpZ8o'찗Omz%[*d[|7$'X0qzm$G}II2"AŬm\ZJQ&ҺƿhguCdJ]<(G0g\DZ5)3&dxLnSY@۱=nZ l 놾5@o֌ޞ] nQLoBz~*s_h?qZXNEӯEy]xvl& M<^+Y܊zt5K 03%*mvE=3Eϫjg/i>5h&$S5xBƪWO { Nk1:|7>~P\C3Ҽa:(TiNG.2=2e>~ eCދ̙"sJ); 9wv0 p'yl}62g*'Fj"gf"03zؖfd,jl?b3&ߟcP8eCHsArGZVKb![t˟!E2QUFѼe~)Vi$uG ƀマ"ۈ4tS& Nh!rYR* &/yDvy<= 7#7-,I#lZv6Ûlqp2"| v١r\J Gй!Y>$p׉ү1\M$[Ap$A f_iDdr^bY^&>HJ|ևnq"M/%M^F"+7|j"-i'fw7VxxO*%рl6%޷C603e0`,Ybt,R>{oĖq&(*B) W%ZS 8'.li!E:tD lk39gXߣATN ]x66wL5]34zl[v a,-&VogF ZkA~>chyD,z ׄϳ!$̪倃%%d݇B[A)vn[E:wbT1.è**u?wdV^zNAr R,1<]V) E2'[8O*Zt$imA++i|9r4mfbl%)ʧ<ٷSdf}:ywruPos4}[!=.Dm{#,3i{_E':a ͚O\rebIޜSc>Lb;Q4a$ACu*7J 1wb$q54|&,3aJqr )cE!;2/*#.Enׇ9nCz(ESU+}o=94vm,n!qfoI̸VIU&x8M|c򬆅A#`Ơ'OC묋y(7s8~#jhxajEA',>2AgҴD]-ϽGh*)VxƍZ{\U^p9Fkө/z4)RWR->!An4܏5R6cn.zj/hJpj Błi$ .%%7.s55~s-2RpfKO{9 W1dL2 } ]򅷨XB> w[ۘ4QՌ-+bSEcиM? F_ʒ)䕦9UM_lrƌ SWKp7p'jGGK=35XC|vP [_)Gkg ` 8|ٯLZV\Z}0tiFYk!k7O,,C 0D >`e'Mlѱ7 Ԕ$D p4Եß81>dжWsXخ}еNs͑vF+aĬ3_pi5@yU,>> kb頥4o_8>_YgÀ^x9RRx Yfr(,x&D آOhrd[`iȂ .hW&یB Ee&zFMtz{\,rCUl{*(@y&h >QO2^aB,gK_j;"ZLUnamw1F1ɔ]hYbۏyk?CfU)h-0<6m K qCX]-ИOotx˵w[Pf|в|ۡ11v[rדɒlBߡ)h[-lۺ`iK7@_͊zi:VPVzpDiNE;=h{a::L]RsOQu\.^a&qpns\Hx_f0wCtLˣ40TFgXm F_ >:+}sRLhoJ}蹈Tјi[p\SÝ2I$JLM@E\cg^|G=4HI;[ {U*lk;8em"Bwbn0y@ˎ4j|֥U V=y/4]S!w8:xo_2.S[[|0Vp#S)dV#IvxٸMrjSiJ,9 V$FܰdTr˔mWJ]E@@%С,d!J1ԩra3Cr{ÆP"sS̊K ^wBOq: E Jk |%d"3ICƕ'GZS+A 'cqI"pI!& 1a$W8/j+e)f( /@u'fp:b~ʏ8Z=+rwA]Wq= /0ͣ$ƪc`ħ Vۄ8~y{zZ" A\4l+PINj; O3r'SxlݭjPlc[^U/"CI;ҥxJzQ"q]wP y_$/!(6U1JPx(TA,G)'ycCOk a?2"}ڋ1|`7)5a~:/^&xԍGj3ʲZvpg]%KFZ( ߀iR1NAk+im^U{?6<Q`oXMH? e/uPnϸ"fgt܌5U03c*-X nEy'y4"W-m0Ċ̆긹_漷'm umAf~GAD)]E2Hh*ޤ!'&{HҊCGx /O_cIlX@ uN]"Z-0U'M{k 5Ω&.QICR `>MT?b6g~~o"]uW| n֡:ol25E *",ml'= uvR/pӏvw'D}!ac ns].UfK;M#_t-))Õ1#_Ltbf {Gf6v5vGJ.Di^V57:u;;/Ȟ ZT,3L{z'U)E"䮡`ҹTyr5t"|y6CtdygSfatВKpT8};%k$kjVT9«֐%LSfj\:}į8#0N="Mm8w_]& [wqv+9z0bVg_,^4 {5~*C}`gВ)eyh Jk%;kCmq fDM҃g6v>[SKXYG6 WgZ+:d:f2)Io\TXepQ):~>]:s1ʉSĭ8}jkgyGv"΂BA`a7Wlo&pБfv&,Pmtző=a- J+$0Q$SagwW?+=EߨW6Ҭތqvb)$1TYFEzgXGҨ>z}mR^݊CKࠂOCj}Kؒ2V Lj}w bF8ƞD3nIYhjχd,U ٙ?M󧊮M|yda6|ӯ.МK((ko9F7ʜExݴė![vQǼ'V*}y Yru7Lm~a96̊,wNEO,~FeC8Reٚ`!Y!z8 7G1El)phEy-JQ˥[TNkVuHvt_Hrȍݏz ĊbƘ88Ff?@|׀'ưv#i% ; #vO24qƈuf^xL}M,NǞ{vǴx O/*,Jͽơd9͇ߺ@. ?Ϊ |8l@]Hn:KyK58YCOQ71M9ۙ,[+oG^wX Fl"tRUw/2X/@j*eZdQ)cEu ="+҈t~VbJEn 3Aߗ4o5XuA  5@?չ)V $4:T{}uשlO-}!!L~T䕘4_v}W3͞lBk'A(Bіjv/Wܠb/rO|lL]ތj }>*1ӬzηUIҭ ɸrPb؟ Ç=T{U/1{-xȗe)?HZ<2-I&v>nC|0O*WVPf&L VYts (Es4/D,1\q3_*̹ICS,C=p4 (wm@ pnW[_sVp}bgG q5b]>t[: ε#/BpB5)R-Y'H@4 ۫3 K{@_5p)WwREX:}8W`"ujӹpe^,kďAI.Uz׭pz/.~UњQ7@n%4g/ʺ>]/_n'iɵWwȝA&N8zޓLP`ȣYUTfqԘSV%@C>nkk1wW$sYWfcЏy ,\N>e=#hC8ovxKS1BZ^ⴁkMu'g*-~C'RPrU |!QRbRD[3`kޱy=>/0sj]HK̺p=E8\&B1 PM~7J"XH;D(Vr&@iLZVI2}:^9qc)W dZ.GwT#ɝ A;8+D{3պC?N!Zӟ{]xA=c #V'Fm8^VɈJrzSTQf+1Gꥭ2]|Z$-돓⊪-:5'\t&2KtDJV+Q@ILŽCMo|B^L&'-+j,a֙ܛ)Xx֩^:ݽ0k^|<pǹ^R-v (XK^O:w@iKiеlz#K~A@gQd+CQOU*+whCbn YEf~/9e~~1a(tzYIi {= VR[/ګ4 C$^'v?F1  j.g%a}f|kJn2EƢ˧X)C/Jh(L0<, 0[=>d6-<8PZucD+Mo/0v(跢㏹k#-}Z}x]uT-L6:]lns=0Aq?۴#mђ10̒# -QPl= =Q9VOs+h( p3fy/zU2Kl /.Y"Ae./ R`Ӡ/ y!a ~uDMj+ sMc߇˗_7Y-o "|P0w8Bn6,@ 4ҍ8q<]Ϧ?Q-hMs&qm]b}37&T'kWU_V %-V%ݽV; >\ ]]SF:ՆqXxv5S DE7Ŕdΰ")ڈ`شkL/9αd00y& O={`o4^Oش[sZ`Z!:9 Ҫ$G^8O,DasS 9efqa!rslMp͐u?Li8?f INV1.?A('&C|8tO~^a~@h3%S5RlM`iޑ!O F|W5^ȿcsaC%O/RsC1꒛e';6׌X,"OT@埕ysUa>(PGh\rdcJ=^&kdIar}ָ?ڱ?%Sl}s Z iRA&8 MUuh͍ƞ n»Xӯ}:/#^N͉x2 نLiW {7c]$뾧r-Hq+o?csbhЌT9ZIj'ب(-K{R!38AVx%C̏׈_ jN0`gB.eޚH#>eVa.a(/Rc'{ ,j#81  @wL tg|n Uo:LT7SöV_4{{rfSMUoug*WP{_oN'䨀zVO?v jZr -2^ %o') d@cQؑxb-ơGJXppdM'\ )ju-̭=#jicI]&׷Bkϋm DgK ֭T}yt}r#ɿ:֚ 9\>INDl.tĝ*LPx([I'uUW( \X /P! gok Z^'bѳŰLݘh,o;ڡʟ(04*=g-7Ҙ p*ʡ.CԘa"d|rLCEH@ nìWȼr9 ߹e(kU1C_\_.! bmt̤^*%bSʑc8$ЍH@M3 ,c?X^H9®i Vc_Ee8CDJq p6QMїbC|1Q)GC):ݒ#tҢb1c]줉c˖wĮ5d悝~$uFNP,0p˿OV7M*M ÞvV΍ __MeXhj;VʑH CޫvQ%Q.41bV´Mۍ偱Q|r[w$:DPj|pjXc/6:T $mxk}j l :2Y6XsBajVgLjzߟxզ/2qkf i7yVBFT Cֶ~J{%"?~SޏJM"+c!ohRњqTil '-c6IO?|hct%TIiz[tIҫ-I+{N\eR][ݍvF&Ny$R5P `s %7o*ejG~LvP13v>i[ew9(8ᙓV$mD1D\&wڲ󡖶Ohx=,'!r9Ij#K1H6}Bڤl&^tEAwBD!UKtSG z 1P0 zxbt7>FGg6O 86o788x`~gKp?2j\Vꕽo}y +RpYOG 7b|VC5I#W܆EFg ? C\{-sґp #eڑ3sc2]uC)ѽn{)S >1b]=IidndF_<ݳ>+ N*dN!k8PZ(8LW^[^󿈷(gya70 |ʨ5t UW,!B鐈ӡV+ufkvm6vq hd! h7VSoP2\B\F&}okCU95,V; 1d7Oʽ䪍 <:1{UK~}-wvpki˩ae\5i B=$ޤn痙*宧BnVZm3IJ~de"-h߶ӽ`iKO ^d-ojCޭк;WWHP.R6aP&4ީ1{6o\ϯS~3Fd1*, d Ri^pGW̑(I"*LiURQs-{Ꮗl"3"wd.“P@πvpf.Yjh4ȩe/3|?ze{~$aE}ZzmeҨ{WZjҙxu9YgORh!&uz:p3Zk'*%\y8S+3+(q.^lբҢF;up J5ѾW>93jU"4s1+]lh3Cb4hwȲ_i\GUAȝ`lFGL*vhwQD1L}>A@3KҚ4 &@]1Jz PIVTpN%׳1k#\ 'ORǥ$T 1`> qLaBfY&c\,QâX2C80Cj9\ŵ =Շw-.J6ߏ'|Rq^%'q+7Aԙ܆8ƾxB"%)j3|B.6Qg\[>5 xW>4 #)E"ߖU_.%.I[w$[%^V &YݗbτP43i/A=+RmZmؚ13B=aC3hG@T3q]JoiA"l`]Qzѱ~XCe$Q$ Ba.Mߚ(*Ε*7,a{:le54Ct=wIÿ6r ŎYk#rI͍g*+Uc1YĐ+7pV]Z!N( |xXr2?6*Բ G7Ҽɂ ,{qbU0}d.г}ڞ+qǙFqdhq@ ~r/=Dv~ J=E )ԩebF3?Q;^c >p)jf).А9ǬW9 ϐY`25]=$0 CDj-4R;LGYcQ@3ucLФ$l>(^boz}ݶͲrYmԮ>X7&N"37^¼̨m=& Z_h/EH({.(#gs"N `ڮ i/Hʥ`^d4V*%! @HޝAr[Ŵn}ЂT8nM/p>(` b(% !5si2-e9_=4ifB ؇m|#o٦aKlnH8Z|U' 30hW{bC~8Hm$I$M @il@!߭n j'|z@FzE5!ƼGE#=^ub} "yE J\8~` թ(pVЌe%tjb Ld4ѭycͼS_* ?̈́=2,!#XSuq]@S4ؚpxHld4Ԭڅ?lJ7tu\؊JDBfRLFc)%5Y%ƙkF7x29kd,_v#q̏V[@^fE06 K?)q`׼Y CϩqR[Brif7h/B:B |I#9M0yoc: UD؝UpaLG_^1?XBw,:-Yb,i~3pdl r3g+87zb94qnx(y(,-nէs~DU/{e"9C+GgRjԋ}=-ї0;[\ 0aѭhc83w*ɤ=n|4|Ȋ§v#)׫XX;gPY慗rHwH/\@r?4A?+Hvmvw6$z?OM) Fj3ݼNevȀT ,G+|GWOl=;€ZwC1.$ - HHYBԘT '4};kfİDH>hM;ev/{ ntNcp%ṶJ6m~f۲3u!6TUp(WԊA5)yiokT21R*>YJ`MA:clNa6V)ҤWSqJ ŐL.yEW[WM\jo婁*S_L˛F&9o1&iZ #*(A" Ü1WMm N\ s-LG϶T1A$X&9,I9έ[H̅I:W8 >s i/:.x0;ʳÖ[7sVfhV7b8}3RMgSl/憒#Ϙg$E<ﲒ0X4ot9O5OT g4iT.[i+\fIoU|?faji$.Gc}m}Sx59&1Ok@]TBysG-(e4'9Mߝrwp8`2 kIǩ  eQ2ϧy>VעeZ/i`kvGUSl>""a}_n3i!뻳 K(A2?%?pVfhI&>{+inKgJ-o/l)d{GE(RCĬ+mB:Th)lEªv8DEV +o 4Fp=+xI-] FHսR~Z)Y|WUin7..'dc>ꯥ9DFmj?L-j4 U)磗o5mG hYI"_I ĤhiuA&s`ӹBWpR}]ؓ"׀~#(%Vx[FQJK51/cUbHZ(l6yLqn"XhkTH$3bƍQ0$ŧ?Z O6n?%x4h|m;Ą,߃c1^@Kc0]B-.uBcsxMz K;Ï'05Z!p4/K0t4ax_ݯ||uC' 1 ˎ!g'wJąBM G c78 ZD8Y/La^42nl.!@!ԣX۵I;w-\en?KPi پſ sxj\BR$@PןmǕ=$EvZONIó 4Ccwng2y :nxU~lx|0Ӳby%#}ʜ.)0Z72 Ђ2um= +Bۗ!L0X_'iҞ]Bo.eUs&K >.*&~r8й̓UQ$=eF2y+$=,fn, F41S *ٸ}d2vR7k5 ЀOl'DH !u띎u u"D*`?[J_"GnG,ya}@~\3>iOu)"fH}| eE_v$Y(/GmQo̼fY@{]mM&?k3F^FJ<#C2}X@E λ%IC菪5Q5'~iL% ߥǝn7,nb~~'5$/$7 YTV&aj)oF>eڴkk-p=ǀ_khk\14ڞ<|O( =?>_#Y/o/*؛kAiZP_|K:͹|Y3gZjOcXsɵGtH_}s4BKP>҃ߜ% =bį?Z3ڱv`$-oCEf* rN:Ug3XEQ`$QWl$oU* JMRxѽ 1P.M,c"A%[Rt$i-Lk`g ʹGchf;es 'Rc>׶ͥޖ:P^kC ¤S_2K' ajͮ2\@.rp~u4UI1^g1NHd)DwirIn#.NzHnsgwlI90U]؞G, B 7)D9v13RAl =4Lhw#]qwtI.-bvpw^}q {ǚB% )ٗ횻 !>>r.?a*AQF/37T0GXh ص7JRtl:՞._6g> u&X6"}n@5<>D7w^8#ڱo2!煄[Q95+sk#zR99-E4YS)n<&{h,13@b7r]s X~ 9/GfBng'< ){=\!1ǾÀJ>& -Oo :NM&:xgL \&`.F%$eӼ}J;0~"`&-f~W(TK2zVE'=^CM`RSwbS_uȽif[Uٞ?1s: 670'vRe[A`T%g *KRt/Jh#K87KX~fG2Ehh@ܚ5!+)?M~l;ߥh(6ZhQr'ۋ|>A<[DGeXkQ3F) 7;dM DCWT -n N[}jߜ~Jߏ:{-a0] lqr eU{zI"gt*darkת1dݵ>4C̲&G^G% W@PDž9#?'uaUDLt/: ? 0z7:?\HܢXU/[nQINZvl7/.3Fc)KUlY?{C(Mep)'ꕠPԅ9a~l١y Qs]jnʘ Jo$>_K.u<#v-'l/g~7H_Eγ&/QF;ćMKÎ;s?2ڶXg^\gjY߁3~_ 1ׅK@.هdzey~tHY`h&qdGy a`QE&|ƽ\,@ҳwu0TDul"Ɋ=B|ʴQ%ZW?ib=5b)P!j4' 0.֨X/^7#" ~y 2 PzOt+-_aTHm}채G.Hs1ʃG7(bIӕ g8 x:Iqec۔fYGR4"@G_sR(2 y*`5oFV@KfvAwX`%y~qvtJc&9Z dd)Q#'m!i,( IQ1#Z-@ fI[}Kd5 g%0@ 4+dqOiHdVBaaq ,4ꠡrBbllq#uU|ՆvGljAG,ʅl4~'G$Feo!X*q}ԝ'Ey|sBF.]ԞEaI-6m>6z0:CϾk3ޑ%l>#!hftd\땻V;sGaÁ| k[*u]EfRv/ޓQ ;;M~K Zպ.?,bXbvҬ"тmZ%Ӥsb5=&ćklF+1ۜPl;QSujl>w NҪV'}B'$Fx t5*t)Uyj٣Q;|2o*ŜU(v.Ҵ+ hԂ}#B٦O[#I^Z}Xups-|$/k?EL<o)6奊M9Eu޷v, p|ʹgS;vq#-|Yۯe(}/tIso*r&$% ?UZ&oVL\6XGĊ+sHygeyﺈWgD c2Ϸ6N'Lgb ȩe▐gq^|a‘ǜyscC;+⨄u/r:ۉsYj׋)V?GM+Z c$.*Q> (3,P% LLZV8fVjoOۄ<2k^ӐaU)rC >Sa\8浛{u• x('D)8tHAܛdE4+ $ZX9 `aԳcfo%z#hxRwPda2(2<({`ծ`/d?E57ˋb{9 ͨX&X,/Qcv4bCpkWU(. &"\tn'hK8Fe{aX =/g aHT+hOGd5,)'l3#7g;sRGTs%k&jԳ12QV~Hwُs d\'hưaoVR.dh(b:Of~ޠV@7MSW"dʲkb6KD\QL11U=K`Pi^箨:桥6uo=ljFy9p+/ |B"L!Hæ ;ر&M>֮B{q( kc/W hǔnt^APVU 6ZR< Ӵd_ns0T鲪7a $(a!T%c߶lwc/r($/R,E8+v8=td AcX#Cs&umGztdRl$\ YmK}C#.APgoJl x BZ#dJr$@~:nN^ʀZOgGeAV4$lshÁZcsMiqwjH/q&)Whki>ާ@ l+'\) $asQ2uz-r3t ,Ƈ=vֲ=?V&=.Mvt6(t0Qd#뼥y 8>Ei 0A^`y-j9)m$k,]SYD` ,{Z #ȶ^"sAʅMJ-D }{SuєFqJ5d-U5ügj] cmR ? Io'ps b2m sC{[%˸KLމj~IѬFӋZ%eJQLq⎀Od#K,n,BcژRe!϶îw>mXx *rrՕ~Ƚ_у-Qdw$oDŧi)Xg.vM a Z ӓvB9f_0L#{&ja_5&^t|OXi'H+z1)O*vh$5sQ%F!Afᬰc`͞SL3<|]׻z9?W;Qd4\Vc{QYG1D7lgJU>kzc|:)cyIxX))iT7kY )HK8`2nؠt>I!!$Bh^3&*Ohp@•7dcP4 %&r${ GG7hao=J5i8jc3$o~ѻVIs$!>p8gܴ[YJzr)ǗJ{ŝ3o!/}jᢴ<3/ڟuݭShlM:dp.Zwk#KӖmbiB"25|"i]LD?UvDr''R3O1ʫ"0RuIeUjh5ujYT] `Ÿ'NI $kvff*/ 䑃wKJg[RKih7tU|Vp(OOLH ~^;閻BK}k[ ȑtU 0:H5lWzԥ%#~'5#ԪwSKk!A¦Rq^t1~KiKo-b)Q5X Ϋhdqʻ`=tPMv(gDf8ESnԋTr%qN\Ho5\Y>!x Պ=k A .+8 /e^Z( U5 g ԏs-ֹ#HS NeV6su G3Ҟ"W2 @ȡr72d#mNU 9m?σT!yJO2o'O*OˡlqfiLHȕkTMhHk(A,(=GqŖf)گ4\chYDp̎g WpM8u#nI }ԑ;@: uֽNh"Bvw!b99$(a MY+$2b唨 z1#`H7!H]@\ڄsrFL{@l>mD֮ 7hR)!RAni^22SJfN;VKNGPQEݗYr.fF i~&|.xwЮMXU[zö+*FT/y07/+1EF 8z uH 4s#ɽqN!Tsw(y(tQ__\'_q5hq.n-FƩRMxhS-%+5 i]w@P1q@iU?NXW2[[P.jI9anojVCYғn䆷6"@0 Lg Hkь [k`ݲbDFUn2".wL&`0Yjˤm#TYn\okaʔ` 9uopJy+c3 s_=IdmPpXLɚAa9[,D ׭rs6=g_+f䯰n1GR ¼_;Rk}>2-#\FDsp1N0Î.:pCo?eZؤڥh>6u҇o*bx"|$1|g(G.lt*lXB#=+W)j&,㩔IZUpwiKoDFl1~BTN䛓[UqXme:0^yT42sM\D*'KgjҔ8 Yμ8{?άҀgnt`Y_BArO.yP_Nba>qYe0=}V%nΡ\ϤI[Z*JJN<:͘<<"/ v2y*Gei΢"_WJUE[[qG"] W> s~OQ 8k#S,i%`g׭y?Gt VeTw[N7.4p nUQ+!1F.6S% |@e&0`ʶP2-}*z[vq$8m_h k0uo!<<55{l~y{֤&\Tޣ'hh n I>(L/` B7 L$CgǕL~OA*-f==G̤ҧ76gP4)R,dr(xG*vMT$0dzBmJ付tuJB}'4֝u[/,!ĥ Ho ϿoF)+y-}e\{o4oܟab;,p pNa=UT }'Ή间`suZB}F}kb]|G^ք=mN^,'ͨx'Z4(4jU,&߸ajia3 r0E` w B ?9WM8TJ]cRf4R*6?YvlOΖđʗ,ix73@'a4eR$'54JzHZ͘voeyDuЩHmwڣN n[#Ē4Ej +(paY\pڟx]~:AWK{S,P8%6^w%[#֖fx=1qƤ^A(õY"Si۟n/8<[ƧGb-O C$RoƊԥ' )e:4kطKR;nͦCzA|vI 92҄{V2:9&v@RB0|}̲605Kc_$7L]HiT!,%@`4`ʏ"N?Q0["@W @#m[]_LiUS*,~|C*wq#PẔ!n osjDTKTY_A ;Rq@/ZF7^vWWkfvd s)&;;nU'eQG=SSr 5},As[FiH޲bW R"郐KΦK[lvC}64lj87׬}ÄQދzQoeNh7$5h׸IփWU♀<[xLmvN`Mb~6,죜WnO)S[#oe$!X=NjYzj[bhW)ٹZRe0Y7ߋl_n+v 0~+\rjF#8}W&:@[K$ƊX\s r ۙ$WtW#'#cEQ8euO0hef)y5Ӄ!Sx81JcD`dMqM@]AiYqJɿd(jZjdTnM;/FFn729MBDf.8n>ז&'>U\G \EĐ  ˟BxI]|: Fgig3j6@ ZwKrʬ X^}"2| [ afϾynY@KP(CKȼ%xr+pUpZ:*G-K$\7M8c!*ޘHu={1F,FDu1̋0G2H\3:CW&U$*坲|Umt5sBszGl^N Ij%NWH;S͚kǵ%]K4L0x\2Ӧ)* BKd33,ʶmrʩnMehi׹qSЖkJmP+p|_:W1 2R0)[8;W Vb K lзIkEk TIsJmO!P"X# i+ <554Gxp'ːim4x4*pM-u=\ mўᐋXr4>_d#*kf+$S$^f[{g߯{Gd#2C?x:acz^ZO.dm=6!XҖN}SpYdTXsW d F&feMeO#:ɤ.  K}o{]i+\MkvA!|+ ./? CMͅo"6zK##^YwB /b+#DB~܏$bΐwz|VQΉ 3hB~_C‹ſ{rjl7+Ǥx?lj2)OD08!C5+}ETn ߖ{:ZaDԺҧY[׵{/!Y],|o(wDom\府}@1 ǃi! BTD:;YD gO!c-s {7QyڳJҝLvhQ#Qq^VfzZvy'i+e8/10/VM}DŽkښO)n/y &'e[SVM-G5}%&cge+KjqҖ D6޷ ,P8: <;i+CIKz @fӾrJ_5<L)ӖIŘ=9Ih3Ԋ-e44-àuL'JK:At(2"ΝKTw'=aJp^˧:XrodrNy0xIlL|m_NGĒv¼HI)KB>+:#|3E̲l`<2(MU1z\ ` Jv s@\&pbL`P^V>73TppwB\4˒6\I]e]F;}]6ΨVr 8O7B ӵQ~&뒔J=ph;hfG#~7S N-}Ͻvx8?t{(tJ+N-uU Eo'fuh;]_(LKȣ˯W(⼦>d[R<6gFKBvKqcJzCFO8֠jǬ$ι^ji Dd,E|+۪0Lk #8 )4Z\З~t;$ǍP?T^q`[Ivp .O4̒!yȁ FeE ܰZ(-fI繁[%u>I C 1N, fʲ)I sQ_b U[#>{ԮoN1I1D댁`wn3MaR=ӣ%&"axGiSPr4r>T8v5 w*H0GtwW=/WdsO6Y:6{mr9jDvTA:^l8n=Zˇ"(9`L9MĔEmcfV$+FI3[Ϛpz 󳏤ZVVNIE۠Tpaھe4ܡ.}ܮ ߯aLL"{c mGfd{%kf.q搖f 'dցHeAоY}o1^T#P3,|`P1P-* `?| y\bDxj{=/5V͇zs؂PP䚘IsEuJ :wl߁a|&/Wg_jX*Mp3}{bU('` :r=l"?s[ji]44}rt^C05ؐ ̬$e2~p٧luv)cFW闩oM裐r-ČTsy5f MrYdeɥ>ߜyohtX5-\ UǮuDC\T'4^CLapFaσz%y I CpHuJ]>j2Sx,˕kRLpn=z"%.YMM*0P>QZ):1J61I$pOœmд\2&]ۡ!f`b ' X@ % G(UE}0X=?{͋jָ3',`vD{ѡv i;#B=QrX L1XSF d/T-Xm.ގ-lTvr&Q7qKM)LqCٹW&'rŇw]*/z&S7ύ+(^TOsgpUςyݒ"o1 D <1| ݶ{ܟ×q Xns+("@!@vAk&D2]F-HѴ-SZcq t6\4/`,i+^RܩJ.=rق*fG2!5^IyÆL]*^ 21G>C4U4ϝD"4G$oC] >Sv /~N*UP3{Ub\Bjqcږe8Ca7#[ LH!4 4)аg.IvؤBTW%+OIDO!wv >_"0VWVyt}>$4).F>o0{HOxzmo5h(bNKX$.| Mt[= 0oEd9 ~Y=`6$SX{-m8(VrjkBt.4krT0\2 HjF4V^F-8A5'uE~fP>=՝<?&pi=T{ҐOh܊mnB/nis%:`GbnZt7Mh cWHE?1:^06 I5 ZY0bGKmjoUoKe8UA-5c_CoJYP2$A4e#zZ_kkAi4#{sV)=EƗ4#L- d|,+v^kġji9ٱAGxFc^:J cK׭~g60|=Oφ~/=z֡GƁ_=n$:m 0l¬qIk ? rep]{whޗ'3-KP}ogScgh+BHC[Y^T3 ҋ5R6 Y!Õ$Hġ" -X_Zվ BvJ ,pm]"99vڄT (,uΧ_e󘚗 Ұ+/A\U,9[km)|>3xz|3g?ӱ ;[mmx+1R5;(&6s-Dž*A1)})Qv,hYxz"V M)б3:wSѧ äLz}=řfHSd!l PS[u 4TTAD(v7xu6=m{s`jA:y/)SK\>wq)\u&A<1չ51,ВdV:; Bhi1 V)SZ)uVո.K_L~:i3-zJn8wjRfMH_; VK)h 3=O)8<> jÂt/-̺ag"WN Ybtq08u{540nҟ[Ja\K.6:[4CrW]X3DѤ-m^`~x޺ .dN0zëtSRmj?&ΦoL}o%li@ɳ|rX@x>5 k)j¿#'HaD3-XFB}vgneӒdbĊD/o;0Ȥ\JYA ;fjygJ :%Pc`) j%sSVWF|K%8(Xr~~>Z2\'rbYMp Dٱ֢7^ d;G@DZvT'~|B/ȤIJONfKEX!k)XOt^$ ;Ypތc#b&QbmaMS63:gy<\dOh@vvny |⁑%v`ELDC[ぬ;şI ֯ΩK=k ^sdz)&K mx'5\6c G1Vv;\7ooD%:F›.II2aX޽́bNZM$|}S^cO Hchpic2Ju~YȪ1+(@$\|ͽ*{2R7R *БfdRT`wh{[# f ;44GR Mۛk/ycM1%Q^Ip'e}:8Xnkr%HzQ ,^U NܞVfVJo`jwFwYp-?L$#y2df=)8%5qgӖ &Q`x-a@7N!ZHHGX\?d EAP<;&ڙ$/P?bJG>!e4섴Djs͜.o(O6GΒO(lgpY&AQh;$%6stב 4_Cʎ4*EDhGwj{a*xW<6D'$+EnFY/d!{?T#Oф!((bCތ\d]`JG?6L*'T_5?w3 %XC_7VKU" ҵ$|%biz$ە|b@o fg>(G)m]6OKV(t~B'Z()\*ɖҙ T4{@B:(cɉ;YVq`J^6ɸ(%WNy7pj{y;WgKFǎlѿ+E~q*KV ]{`EG NnvvIjG:%FqG0kٓ,]',W ).F l>\`L+#B"#EkM'%¡N9pm0*H탬α! ѭ$iGqrސeIk*ceWqw:cxثfwO#۾a4L-ʉD.BP~3輛v>mqy{9+5{mJ(ü{0fq6^q:E#:m9F5且2ykIlWb"ǴZT֬̅/k /g NpC ,Dґ4Eӑ -5/n?Jrs Ċ;v=(2^Vܑӭч8̾!1kq rLr6@x9<68{vĽ70.G9$%5& ~%0],C4a`F7pZ6dd5֑#HPԗKWcS%u\g]D01yZi73+Cʦb)%JJ8MJ*kNǺgLqia"3]*)n96βIE|e\$f˔Wr.fXCl5E I} >f. ;Fܕ_8i%csleW4[&hc[q Ca3[`N }F[y`smI2G4VG(r|_bjk^x2'ݍt"-nC߶jѯsLnCX/p%FqZ|k7?&XL8; 8QNm}' 511?-ʬP-7! ߽;&(Z:Ȑ+r| &qWv¯*J}# `ZnjY!MlRO@e%D|? nB(VVXQ2$|q^iJ 1=T%l4WYr ;O{M~Avq=Tk]-!z2FZQ@\UCS0mHPUCn_ݶNjA~fu'af2W;,eN^[w71L9vbeR1wsQ7_ÈƻO@6n/ zaԔؠGPLm}Pq Nj3 R!`¯{VnF ax6W9)nvZ y/%qxCDynOdMmYx0V/E@*W i۔FeJqлv#X~ ei)^S rAͭ=uk$'tg :*xZcgbyyOvkM3y'tGL;.}7ŸLݓ}I~>eEWY x%Fzj&:CU KiVsMtzVNٵCSl(lu37mQ*#\9  Ðރfl^X. W.x ޼t;\Ҳr(vK驍 b]NZ{p75 +QN8$o{2[4rs0qҐ3>AT 8ǓtNl-LB*`0f$LkS;L+qpÄjxDHՒ?j=;hu,a5*Br)|k5-́睠!cQQmAB;QE`a&rݰ8egr0Wfƌ jrE`S8q_~Ҋs tR}w8))p>.2 W zR/gxQ8l6"p)=fˆm;}L`w< )auEoS· d<@8Ջ7*i_mSэ7Vߐ6<)MH,>TXu>Z2W|#)#7S Y7 s!٧mB꽼;W$𷿍<-Mc{F#Ci:64Phjh/N_  $I\h<x>[Ju$:S|,0I QzzItM׹_ _ Ovfϐ|8 Ԋ(Tz0d!oj^HCO `"'s#σ]$ qeO!嗽lɶB^UY؀yj"O*xY*@Z}0>v'A"< l.Ce E$b;]stǁ4qDG?ʬ%D|u}*dFYH@GTz{Xa;_Q@ӦC'#n^0KBO$=2(b:;Aj/krMzķ~Y2%ILt FWxYI I@w+#οY lm`/щ%cy^ [/r9ml.!`JZ&X!.\\v$mټog7B:{@q~%i @~iL]KmYF gKtYWNɂdN97SfЂ,>텊ҕ0 Ű>s1,FJ;) 34?>UsԱw:K¯qV/G-YQbAP'CVVJsˇa8gSl7+$3#<$N11|sc8O M ;t!^b ^d`\L+S +uwkI@hчqKSC.AƨFk#\vr+a@\fFI1zjذXW(ĴO4_s;;Zro y3o`"ZEKSѧBfʀS:|[i5D(Ý0/A#'UMCb3s'4y^^]I=C7(S^6>&Mϱ΃FBaa5Vvxi5WvCͲ)+~Zm)[3n0}.#XLܷf%0 Qa WU"ۯ; }H^iïeW~9G΍NWp◚:fsF+Vpj2Xb(kӺ60w8aۡ`.q! ILprMNꢜg :[ '83ǔ(:9Z& '@v6šV03 !/$v]]|q.Mqx嫝l:=AjyuHf.,mY/9c_n z}-Kƛp%jX͠_3R֊6$E[<ڨBRxQ]R"4$zVQ zg,lÌo{'/Z߄̰@Q./UDV6|0Hֿ6E%U*إw+d۴*jp?Ӥ1elۇ\铁W1S<lO~#|VԮ|L7y hYVfxu:aџǶBI/tw˼azedגoIbL||/SZ~X;0L&kK({):y/&j"ͣG:5wiXuZ9:];| R 'wGD|$DW0se[;-FWZDˀ!'Kr6ӁW߬"thA aflV$./fnMT_ީt)Fm0FQJ1FXvd~N#nobO&W>!9;<9y l#Py3o,E/p8In!Aa^)ϋ|m)/Ǡ8jASHAƴR/䢞B<1G٢7{ea 'K>HF^b IBL KxVDU"Xx24`wn #ðH@rESsJ$,:ϑ),fg kr zNl:F Āgpz`_̂gIz NoatO x?"=ѻř׭q,)u2F `z)UHхAb.+跓սPe#z}PgF/Ӭwqn ljĬT/*zx)j>=MNWP~*qk} fB>qԇ*DvmTgC'm?ts_Hf5jytGe;oc`MvF5NYJ8wr(_5iXFdL~ZlP/x]=j)CRU'XH,V}.pЄsTJ,_C%:G_ƑM'\4 |q*9"@f(e9! XMe Bm.,f|KW]QpԳOqKPB9qhpяeGTΗZAHFGaag!@I͘^u,O}8[%lߥ2Ƹ;wG C*s.C8.ք5 DŎÜ"?Q~ΧZsOPo6D9>O rי2NůxY uU kA;TǬ8s 'c`bHsE"d'b(g7ݓ>7hX*h?D|ƝwCF\M-`mz> /Bc/D9%9 :P7gF;(<_!Jُb+|mK{D_f]5'Y~;'Z06.EzTB/tCj8焲@VG`O(&ɮb tva#^>8?K]0" G7Aiħͬvv> Cz=dQt`^JVQg<3a~ljn%&Gۨ3+zqt ݚ3ZzZ!j4& +\6 ߳[G l8m2C5RYqAF.I0^^0Tixʫ=a5^J:ۗNtVx8lp#x*yz,qw>U=EzGL*z[j2:kC@ێ1~J:RK8.>v1\@aJKھXqK^C^s0y[(& ára#$˦mdнԄ0S]hyexN }Z: rQ)| !QO HP1sNzVF^m'hXUKRgKQ )A G(`/u~>iW$5cTf.~rZғFdDGuUHݗ e:o _M8OuZ: ~} 28^l("U,K'hoaH>ptM=|h%7SȌ.:ok#p6Fri>72VQjtюq(hco~An/X,D ,|q+%~SI[=#T2YH5qtoH%9tiJƬ˥oX&锱R C++jCѨC}~jFZ%o%LX/ ;+,bK Q<)qI 8=fg> 1ҧ GgcoXyCUSFu>@/r؀{(Xdvpҟֶ;j>g}Q߻gXuvG>h*)<k=8;xʛY |G01fj*;A4wk2]Ǎ{}pEW|Q]ͬFEArJWQtBsGW{ET߆W@aKI]'2T3-'h_i [1c"wȤ0W'g{Mlww!d$d;ٹtCʌiS`؃Mԏ D7OHq}WKT;l"i8/,Nw^}7+)0(F UQT"pFSp-1SWX-YUWsYdm ASwF¼K.o!,yZ>ԖY<$=4Pjْ-lqw $܂!.Sj:{Cd+Y23D VQMLɸrjp;84YAȕלV3A`x'J^P FP]i db UVch.G Pd+QnaX2^3.!nII)fV ~@ԳU%_'"2cN\>@^z)dUH˘xPbʝ#ˌcb; XˈFj ԙN{ QS; PTb2߬Huydk&ҲaA %Hi[G "R*/!(ϕ/QYG'/L>ɨ ϳH."O[AA$t!LHT08ZdO{M`۵6Dyzq$M_Y?h~"͎ $] $&}u%27g ZhfU$&z-<{'i 9喇N]5_ tg#U `y6Ba;Qr)Sn}6f=Ne: \3u/#mo~VwB#nzyt%nw~~sgtDJw "1b$󿆏+;f@`,8TNH3-v> DŽJDV*0T?J\O*9!&S,%f9Y{܉J1: @J-I9Z b&tOqRw_?q=P&%m[?#=ؓmm.Cm =H/[fԪ-h;m]GX_wih:Ȣcr FXCkf2@B.]soOX֯b|"=Ky{o'Q)ӒQ+ƛDJu9h({I4/VqZ_u(ķb<")ho˝>HGF+K$k I秒o,~<TuL*\m]tPJaB2&N0`d"^ڽ\6vegPԿ1$@dqt-* ՓlۢȊ콿I :cjocB1|Yc6 -L ;}_p3sBB?kr^<Ŋ=٪taٖW#V@ ymph<8SHR&Z&_\ [. %!`DGEk=7vQh'nXm)s.$zZEC ,;$\vucG>xrɘVm/>Ď{psg~xR_8F>=Pi9lwy rf\)P3*s@/]eCDxo&_2nSѴQuYg_+SO9h?2`LuKvZ%^Gyh֑ߒ\[Mi}9R 秙~iB4m2B=V6 [ ׎ykyuk~s{ »A%oaBtҊηn!Ѳ#8{5/df-xrc$Lpk΅-+/lUR9V6*)9r bLqjod/7i:,Pk\[hzD1Z: EB BkA8&*釣j#a_X#;.f9o٨v[*лƿvJ7{ů~_ F bM:6ZICP1v-z [OdtP|*u~@ܮ @ +vг# JܲT|jG7d )1j;“jzHvG]i%1g cb dRGbl&R"u&xp9"1誖OD!,ȪT6i+_^^Ic6 ն%KH([FFȼ3,N^b0]y >sdG^DKJz c 6Pdº9xF^la)BmWkڋ!dYA#JE=A{J,R!ˏtb}uw`~+zn). LM!\ +0@+.e qPۇq~X<۰$pgi︿1q|o>HPG2k] %np@ U^xbu'1rITH*GBN}HRQʉjfSmVgArEdBGŧnXzj9ڠS"8w]3\\1 HE?G|}ffd-ص@~բxU>[yn{j_^p|]^|6PmVɛ'5߫跎#p&9*"*Z`g5|v3PP3~E^k7XZ$^ĭvĮ ?َmmʙԼSQ-H~N4) |zp=˱D^hbՋ]yXAQtC#3,aխѲGJ+Q]H^$mh,W$hG/ltZ=Ym1% ݬ#!5 KSގTSS?OҴǞl! SIu R dX~X9*Wph=SJ?$[V- ~75TA]yL'be$9 OgvE䨞CBov #Gpe.b"aPfUĘm82GrsH jEU)ᾜ;4=:.IVxR@utPB Hm`j AD+EW?uPd0-p $;Wt+׸rJ@(Y3: ,ѭQ*5ǭwp]S|%PI(M\m/h[5_&-G˘.!5eǥfsptxu@}Ew )FżAe]wj[{yE0!wPW 9P#sۉwLO)h96?;Ax,Ib5dW@l7I n7;s l@dFFOWE_6R^$O26SKѸ|#b|BQ"D+Vݨت-h~vWyk܂ro8nj*1Tf5Q-2ϟ*1ӅMjj"NؽE/eJL瓚hE?&' Ԍ;%17`ǤV ddgOc/[8a)F„۠MlQ%q\| _/aq?uy,uyf]]`uo  ev`zf *.0*9ro=w;?3ya<,*=>&4Jh-lO-ug2YXPHZ>Cg 8͚bvԽz){|\4,hS}}@A\&}Vϋ۹Lº [rPFOSr0F}`gqw Ӑ( A SBnq ǐʴ6Ou_/SCS&\:#W“v/ S ѦCLOU3YL.n@[sVIV%LT{|k6h#%oUE|LwrQ-Y T{/陆A30̖Ų`5~9t<wڣ"9xw/n]UaWCeEx۝O Oi(jbW_-.n)odmZ8iI/,Nd('eŇhzeUWifJ9LӻG\3β"H_f> 7tqLs߭O=$ }sI Et&Jz &5$'3W>G hf1B[b;Zu(5$}1}k+n>I>Զ\#In_ٗbjjjܶCsf {bhɠYzcOڬ< }{cdg_ӥaX>+us| x`\[:?/2.<%{>sLF N9H,taz ׹2u3.. 4P[ނmIW5`*CvO1FgCq ]sJJ Bs&'B_BwK6YhZЙ66 9Vgp(͊[{%B,22R9ۜr\ƞj:h5ݖfbWPٲ`U !c<$*@}+ĞA ^Y0$?L:FRuJa cKqzqC-ɪg(@W . (tXWmLJ G,gj9~Ɓ{s0!/g.Ӆ.Mi--akؤAf.c_<|U +*ڳGZR;)Bw8 BT 73#~ I}M,cTFFxOhxSB"ϯn>xZm %j&p 5.b-b o,ii"~fZ/98G\xu\?rvQy˞A-e I6HUZOEEsC1~Ķ:\ ۭQ.-CRa+L+wX+o59%\nng4y2a>l]SE^=~ZƄGc$cÚ=@5+g J[-Lb<` :bxgɄ{_?-v\9>6at/e̙,H&۾}ܔ Aϧ`/b4<5/BDQ] 퉭x٭n6#Y$=k> YuՂ8= y쑢 g3=r) <4i@333ŚOɑ*T/(x" 6~80Or3 B;f9u泻lJK_n5]'@LJ" s3T2uklqJb!g݆p|^fUwCvքPB(`n`a`.LC\p.PƆ\Y4' !$Œ >ئӷ1՞x@NhUA^y[n"cu6+n qsਔ`o3gp{pOf,!eL%VCuB՞Xy5r jpׄ}=j'TJ*M)=*kmG)>O88CTgUຖljhrVI+Qx 0w=p,GorX S%`dn({H0ď`G[18f)X41+jdghJ8_f"n,zژ^蕪V_Dˇ apu˄ϞӘA7>%FYa&>'iY /̐!IdƄ0:C]4!xyE'18qt>?޶}'MPl) Fi^;}}E܎pgjSxT? 4`3NǩB> i UUS,WQsV4g(nIF>+ATK[j|73SP9;ttZca[N'j"ϟҽ=`O֗xk}959#)dY+)3:E~uS) v!w5q9}VH#jY7UuʇN pgZ  =Eן+ӊ+F[>ÒYv0M_rx1:xԡ6lңި6MZ?qaȧsqÔ2ǽ@˱S`}lV m?_W.Beu@]gPWRkk+LݢPE%^m'uZCߧQ0n6,F%I \0}1?cO5;L.'V+bl+Y!o΂&'7Ð( ߬"U6JDXn._ Ɂi⦡^bUo#G.nZ᧍4;Zs狋+=x`Fͧpb筢z5 UB^[ [3%d,-f雊djTDbN8$,.ίH/z7v4:c?.*DmuW3SQ6gXņn/CB_{ڗ!*Fzrtنb-[>=VYIhODPG?Tƿc pφ'xJTScqc'o}`Fr  N`qG,g&JjIcTLb6Qս[2~"ڞY$Z1i[1yxi:ϭ$oej~M̛_-LXϠ髼"YGIuXYhs6܍ν.H_92dD(4qCqeu71)>daa1yQCz-4g$,!l%&v9>wߑ>\'V)Yq{Pm֩φUUJx7髺g4S=&]f`I\O& D`nլnϧB!q7r8G 2/XOՐ<4hU_c=N=! 5;N({.]΢r=\(7-PAu gGdWx:],VmΆۂnwFJ0o$o&$F:aթ4VWC)!*3;{ 7Bk ֹFXi09 rlyt6`KϲE6|nc__DngwpK-f&oÍKŦʧdG?'3|L{.u)>}3bV_Jn{ys68(w*Y^xiHO85_yZFo{ =LF,tYMLHR5"{0qߥW'm͵ ^?]9ٱ%o|.rՔ E !@,P E4g0@:є_y-I2Cs<{vcO>vn;' 0ou܅xYV ^+21US|d6}! 2:utEw*Ev2<}ӣ?Iaz">T'`k7ms{zGKG"b@n'븭^!bf`dlQ`#,]wU 9SI gc.W?QY8a/́ ctҕsEgUWWjV2>êRO$: gAX&$^=icPgZ@(@ l BFңxR*A}OQQJ*Ew@ue$UF6d| h.ܤ(2g/u4UAE~P'iߟݿxW{KGh,% wZE$C J-` [pj[abˇI;Hv aWxmaauw+ $ go (?UO PMHhAҐ.҂7Cz-zsNs3Ƿj=;+Bv Qw3W07U ]δN341tCjh{j@G!n5vP;./e0) v( c7(#v3eGKN(ȟSEEJva=n}B;BךXR^QYEE >`>9L!Y$\@kޣ~҄1cSkR2^;q0_\<ԿI.},gGtcNirSW6dLT%ɦR F*Ҝa)(Y̝ !LBmd$/W` g;*ʔXZh~Gy~j <[(iDSn(n>硷 ;x`Dkɖ6<ޫln$B" 92cDficνmO4$cRt_TiSJ|.‚tƥzV{zF[3|2ryti\ILd|׵. X҅DwDMvu泊gİXk|AJRtY VD~CHQ1H-YS Of˃Mt5UE֎ɖo.X@݀up֞V{i>v j.ܾN?[_ ݒFk/ì놑LH{e1!IHSl:iۅlFdN̸{O+q*~ J#93jIޥL C@ Kzw_ng(Me;RgLYfKYSm8Gth9+6AF}R:gԢAe!3p%~lR ; ( |@]RgrdY=Eg^'KKw0Pq_uLFȯxr?ES)L@E A5D+6 =u^\?KЫ4)9tF76&.1`oUߔBcdbi~o,Ngϋ5ݙ;|]M(-S.R xw`O$w>}c NʗL\vKA^3ּW;q|Pҭ➘>SEP/u[[}x-?{4)8UuBDxaRр= ۍ=h0@V%Rgߛ0fX<!1"C 9'wbqJ }@!QB&e/O|ͪ[z,/eŬ!v}}YzL/eՒܞ@kMk|O ˉ5H~ pkU–JGl!yJں Ӫ9?* (ZnkPG ЧIk/+T|.ZNіB "{'jP74Dn(x"8  ݦѝ?# na3՚EnHRn~qֳhm歖?FuZ=P E, X>5-HLy6T򄀜&ꬭƹiEz5++Z K!5k d9Y5IoFܼNi^Xu5 HAyt Wl87tK=!եdɽ@ :80<fmؐvvj@J,wQ؈kΠAVD;9~Wex'g `=Yܬm!2`5-:~oD;v{8=C8h{ lI G%8{{D8U*(S}i#.#w iGo>6d #jb3hK&*CwDjdLӍ_ɋ`]h}Ɍۑhv$v8g&yyBpO ۻ21`1;DdZC#2sz&Ommߊp%X:űWٻe4UlSp:M>i" 2Hbgn r&pY.^fG<c'p foe[h?"GxgFv$mTjKz/7څ܌Dj9&<|s{YwI1PL8`1؀TOS00 A*835ε6Gi3}SᐣZ58)s5 8 JIڽVU36 Cl~qnD_ϊ cv-f#zqrmL.Ńm dN]kx݂|)[mșSu*?/ ۂTF\b XWCHs3;AJIeiE NgH{[Ɉ6xi@=cd@qYegC/HdG^WD3e({m{J.Q<53*h$CWu?Qt<"(tQ;:+nx%Q,5IL(͉vWrVO*cՖ9AKcgOsy;bU(\apȯ .0d`M=`!,ɺg^P*t0v-%G*L";C1kKpv<-jk!%ë̍Fs&=pnKd$\D+!!Wɯ+zY`1XD OS h;,V<. ɫeǩ"8Nwa}0@V|'mwҐ/gn-#%מR ёz Q$Se'V_ַdwxiɉ)#g6g`WE >KKyom6N%Et(Eeki^Pj'ύSЎH~Uf0 hJy C%0R.oWjoCkjX4W^GCNqK0 KL1TatDYG {'H#ZLH*}KOGs ߄xկ?ig2pR${wkw=#XV`F_0P$G9K 3 HP=j#R#EE10fx|'09UNx wQRgWU^!ULMQˊc#8 [w`Kj>`9VJ UBwopxV|g;} ɫEB$KrG2kS6vbf@T*\pJ ز~U== &.kv9TFU˪ހ@2wQi tٵ(J)Go=ɻfazי=5((t4͊r′!f|,m~q{w% Tz?6,,IBٲ>|U>zR1RJsϗMxƞTjW=Qt0ry%4C$'z tmxÐfWeztGZbpv&sݱOB#\_RgTi>$s8'^ˋX+g= H;8j+>a`W_痡i%؊yG'VE6;bѽe bR.ﮱ+fkF_عVWZ,b0(pE$c)H{$`G;Gdxt_ly=TqdE1ddYLջ&ESYI:1* \:We,"b~c>u^)Ȃ?6pnL>{:X?Yzg͡76]hb#4Yƨu=ӷO`nAyEuHF!JфTu}gckΑ1z= y#'[Jv1YB~i"OG+W17t "*f}D`x7`.fM^؞f&%g:JPڛ~π``'9eFQ1юe? |(U4H{xwkF:qhڈ#]GCvC~xATuRͭڣXϕ/]>*=p.tq{ٺ̒o?-_&SƷ.^T%",@Zm\%Ɨ?|7 Έ툂}v:p"Qa6k-O]E2UntR?F~s*~tc"fNSq$|.߮^U2i-`[!sJ%ĔG7rǞYcH_Ns_7ւ!լZ'8@=.5b@>8&~$;swjgGRv&DDy@by,n5LY̶ [#T،4p>7lWTr~ئTsVXmB៎rF"?-鬍]fOKMepLcNTӱoNkab#`v6~9SJUuM*Fmi1D[Џ)B^,~Dž· EI<]#{GS0eRͨJ$čB:*T!7si?Ly4ȗy {N`xRPP:RIrMTiV J~= B-F+F'W(E X.+Lپ5&WݘQڕd gIs%R1ὺ-3:>0[G%y=I$b(\MHb2;бg,@<җTfpSqg:! ïiR2}J7]⾱h zo?8#VᶗѾl$ب~&:Ie\bwz^5@"A7qy_N1 wO+zwWN qDh_LӴr ԵؠĈ]?‡,{y_ZT7<X OhndA]b x (:MC 1oej0Y%EDWH98KY[ŵe[Ls^HR!tEq.@#^5k9׫T$z؝z2XzT 9^<g o2vT-z K̊FM? -|IS{RW֑^"׆`Cﮘ@|cisO=hFUWaǶgr.X<yDlOMT݁KBx!*cela UU:(>5dQOegJY|*VI(Ꟍq_e$UMۜz7Z}甽|ekO/ KU#2E6c!CWz0BRX6YjʱOǢ0L"w*X5x{jhӴV;wr ut~cSB30TP18rb(f T O4 2Fe)dVhƂ88nl!USX'WG+X ~<sS i?+y!10>@R>|<0L_gN*2a~OLj&:g>[Yэ<+͗x?[GZT cn`_/oבD$ZS,SA_%&݃~G 'm/d4rW@[!Jؽ @Л}_a oĮP@`IvvՊ?{l6E.HzO aaiSffj7`"c_N .C*iX*Ä5gF䴳$2bN8d̮q qgL4%dA~ZF/ϩy&|klI mbiP}.D<n Z{`h7caG.\WhTRWM^ U+Q!\w? +CCJD"ظ/K9l}>qޥk^017z,5ͩ jQ:OX.jk}xZ5lĎlrV6.pDku ,bYrlێ}[+#s_k U`=n+F.XˠZyymC;u 3_᠁̋ZƁBz`ť-gh !2 'A.@3i1r=:| "Y3?&)p> J\DskᤸidPŁ JV^8:zi(4,Hv^^-&\yn\@_y\ k=LoƂ"/Wʹ!"Azt*)D鈤TkocueY8C3AF5DO{4w5ռmPLy? HEߛB5V].h <j]KUburu0< WBV{ovX'֛K7d:@1?3 Y[;k艰[Xt_.i$i.з/"gf)̏y:c'ɝ&b jaPp[4ux s YpL)@mNxU>lY-(AUcQ ~6`ǒXԲuKiaS6`khq  BX$0͌wG+!t fz 2oO 3"('G)/--ZMpq?lR-%K0Vfp9 ҕ8-b">Az2㦛_]'4ՄKiyG5&ݣ8$;H8嵧>Xdj1e1CTCRjr ⁙8qr!7kv#GUVC+mosQI?fAR7)?I<4H鼬3~+|b,$kJd5 TRoߥ;b l:&l TTd&I%l1z6NV/<^IJ﯃,5lUq,V'"̭h4o4=pK$O%艥U1 7XӨPh ?M!9vK +ш?ष 1uy "l~Y>7Q&A 5OY/<.Տx>g'A^Yx(WFwU%)̥Z25,+Flv|gT* гY4In"Wԓhg4#q4ttW?x0` 0{yRV$*B|쟷6]\bgzn/W*4Ulܛw=F\Wu5SI-aڶ. )_iJ;c^$&ǘ $]IYc>_xT]-RyA:Z_D0Zl{(*4ȟoMC͓c' ;i@>ǽMʙ B Fڨo.=PӷBJy4[lgT$ÞR{my~rh (7wV74{kWQh+D>h.Lk|IvP6P='Σߔ.5litW&OJmg8G+*SѲ/+Bo sxk)եnxrdƽ^;fs-IeTq)] \vB *G/d=xT{U~WדtW],qSQ&J+j}z7~O^_Baj Kb!.SKx^s*=ϐ/h[qofk1x _ןO+J6{ڤhQƎQ4.Pk`Qfx2x#&tzQu򋀚އ\\B+Lb>6+FXd)oe%+ v i Nu" oPEIJbA"XLi,\hga{tYT粙hLz{BU1)/mEPLqP8̀_(6c? :s4EvK8.>%Ԓy5 8y#F 4RNC=@}+ptN7S0¢w?x6 3- Y/Xw k!Crx#vr^ p0,ە!֞~Co}±3gDW~_9* ղZاod #jz_zޕsdٱ"M]MBS)⡢۾9“R }䢚 E2% Ҡ k)qs4mpx { f=P tpY9.GA8[y>T2DB5 ]1K4]TX`Uv.Qq\Zesf`mܣ!Tؚ -W."ĄATY*lUD!Xl`T)IP>;uVdql :5DX o=myFkUk-MRTS`$Jkp:wl:0Ҷovwnt!IkBϙ_YJ&}}$/Ә2+!}c#2#Dx5Ţb":S +%b|(/"+e| ov&ۨ VKvBi&0?/c#mk'J籿jҩґVk(?r_fLhPHgw4-T\7}:Ču6v۷8¥||w"߁hvR ;_Yie%>uŖ4i xNCk L䂼󎥗'пY.UXZFy{x%f5 *闑12Xc⥭kGnKm'Ij,sc5 t}̪vvЫgZsc;uT(ܐ;@tWu\~=aIp^nTH9P)qDv18-,^3X] gPf*۽pzJP#k/"iEJR؃ 2,Ra[9*U $)'UG^1sIS\ɀq7K (NV vvZr*QxLxPh~"3Iףcr=o$+̘EcO6 څ3Lc_(k*X/F믥JU7YyG~z!/8-[VlpOE 2c "QLLܤഈO%|U `'@G QH)ĺRw bΕw t-V.q u'"B{&D'uI1{kyx(oa:֕ʁO!ߐ%?J: dxv5BL5Vx T $1&7Ar%f[E(h'Exnza|@)]f!M/ Rs.!!=5)G--FuON2[,٭h+)ɴG ;f% .B^QA(+Gn& vs=Z%hR/&J^ .H_^E8f L񪸼r;IfݟC3q[׾*#BH݌"*8E&B$>.ڥڹIknNYP +׶k 2aF~¹bPAod2P]^bG;/ZeVʻu=YqvOMU|O٬Sp[y Q2p2'cMՓ7f9ç^} x8 tGtY~sJ̅ݠl"up_' ٹ?{vxZm ~ffޖ?E ̚S-ݻ4en\Hf+h Au(8:H >(8.InW& i䗣f)7E[ O.%ųdFѧ蔏mSs`gכrԛL^*C 9ki!4JnR<o _߿o̔ڿm8߳Íwp{ĺBnH┳ *Nm;9DZ;oN&x]}8)C3֞c}Fֶa Nx>sϿ]̛\PٖA(,jj&#;YRFMb'D_8Zum*k80e|.o g#93~&˃ %Gm 23fI%>Xdȍ%zB49p٪b;;t 5(tB7uU\JNM%|' /J|Pṃyq#G?\jApڠE:H| k`9 lϿJ읂/Lq!̾#LV{'l S4(|!b5#'%UG<yzgXc/g>!ʹC|,'e&?P/kZO@{i] e7$ tve>*>kj(kgVd{?Q@V~ bJG<w23 0]ddHi=PD=ɭ)k"yT<*GJ8 2_;_ &S#XC^Ăz+OĹհ؏jkܸKޑjr#ȣHݪV>U%\h>)eѤ+趒o_j)'Iڅ= 6~bKS4ߥ6z +TыCF:=6.9R3f烹lG$fM˖s[)FY3+u?U$Gƒ~> vb]W8Evtkn}ԵeGN-t#I5lҶKǥF9d۾hN ?<~]eST=5KV0|!s^BEaGiG0AcJwJ<}6[Q/XM91$0"E3,$,<(8)U\J@gS"j⊐3E8L+2pfqKX$ĸ c'K2{AqᇻݼXVE([mN /rJf5qN6zL P4v,#7ùͽ'R6NRLiA'ӜJpD]nȭjIv/s[ĵtRHÂlQH*iO1?xZY5(W҉FB*ĀB /I՚Kfb<8pVYʀy0X ^ `zY`QzC?CK_THmT? yYZH m`B'(1\ t#f0aƷ},l_%ul XK$ƢG_'Z/vhuEOmlJnZkpAAm,{2Kჯ(^ ձY䛕Ɨ.f Ř#CR?SzvZҔ(b LP8:DQ3XB8U"G0l` h$JpI(ud2|Ĥ')ORa&đYgx霳%?R%0$z8r 财z/yZVԋP'[EĐ<,PejǻIYTR=0R݋Kyn<Эnۖ/p뵟F[p4N3Ł(k+ ²Z+$)rTqul^4J톔Y[*whA^^Y[ *G xɾ WȢ&Ǵ\W'R=mB0 툘ij|˻/,6l_+PEHokY{PH.LהaZtZJQ/p#*4{cq@ntOkƩv鼌yϰWgYrGҵ]6ηbn ! /G)'7w?㛙a@qƐ^5k)"%GPZ6TxΔ5p=Of\b oj b9QwAMցe|Ey5En?VTrj,tipH V4ӝ^=ԯiA#иI0LY%.d̷+7,V9Ubl\H-m]$'o %ν>8o+lgrcڲuU3q#N m05>h\РG%,QcfϺ\i -s]_b!hZ=/bOm8g]jsA} <&4mv|IEJƷa>ބ8 ۤo\iHxB"+耣\d}xQrP) h>F [opKpQۓQʴ횦 'W{k/1sUsp%?yڠB,J|z}U9-*Kªc^>VwS&f0x'jm!Xp\t+<#,*MQ^;]pw d5&{G]w]Do.GJCRڅ]BD:9/TE ) ;^H>W paia2 FLtn"sOmL`-/č~(jtQ%٠,DU\o SOPGq)WWtO`LdTؠ4D? QG\V#^-ò͓r@&8MgWf_Y3 Rx0n!ݟRHnƒɡ~_g>),1mn p&އ_Zj%}d,N5"FE,5kE ?wu})淾:jZ8VlWssk^-6)R{&{R7!k2@{,߼Gu0TZ[g:y-]ji9PR$L=fk0u:}zRر A[M|'>#QJu[QKqKW4j/uQluQ؏L*W{Fٽ9ʓ& pW őϏ3I2`y/Aڸ3Һ`cS>CѶit6}mh{ t⌐I0\WXziy=8>lۙi(UHKV,Ls@|[FB0=nm:K0nR-VD}r"Jבfk/{ㄱ|eEAw7˧)AZ-! zQK jb}zͣ'1hq{004YyoU7B ]ɚr9[db#[bY:v<چ0\@Yf't"/^qdg!A֏_8C]nJF?Nb?3gM@@ ͂6 r){j$q-ԟ"HȔ }4#靛s/i:VC뀛PTI~+nQKB]s ʲZiPnOnE̯_VS ꨘ|n²%y68ޫ^$iڂ3KEqh Lr?t^V~dEfiogM5Y{V eLOUvXf`s94@ubYso3k/&PfÚ{W`7AzꖵCe!.PHe W7떺9vqeW~%1Yٗ*o6F{>{Q&5WNS.Bo5 o2H>:yXލ,2"[UXZ[qKH,cp u{,*\jx mgA-:C&m|B-ݱtKc՘ͪr"s=nU`'|E;d{BWEDH% \(*KGqw!e=iCa(?wʎK5mB1oԫz5U-4:IorX#e1W0JņF:v8?WgVTb [$4UAz&اϋ rĤ(D8:0quNہژ:rxv:ɜY[ F.^ c @сz"bD۹1nNtUwH1-I[e^4Hg(xMKe{mRۯ0Fz͖`67BN|k@yn:cei(-&dŢi''ePbHquĐFUϡ UW ֆ9Կ:~{?UYDWk%(h= c$zUHImخZܢg8L,y6̲de31)> (d/q.HZ2O9.8x@> wIh|yǻEdŴ|IMH\%Q$LĦP`~ X2ˣbqeRy0~O'UAڊ@-:y9;o[XHt-~~9@ZMʧs*n 07+*t^K/<")c@687 {OrEi6ٶ5Oyt=FFuL"h㍻dz60@%9׸⠵|= Jʹ7{XBvs Hl XwGHUx+!cLyCO &&S4mT#Pt1HѲ cǽH3q^{6U Y"L+'bv;3ʤ-W=ÈmǓ2$ Z V/gcӘqώʫ񸕺ܿ 5&/42 Ժ,b"uwJ 5 ChGVKpȉ{JNd>/p8N|a*F;D̴C!Iȿ/&`?Cwůpƺo֭KUB"MaPk_rFuR\ ~[e"_;V0#qU%D][Rw-hم.AmDe (P;*HԨҰӅe+-DsT}tZvkzݞݏ^wv.AN\3ȹX):OI?|ǧZ#n;16`#> [W |GX^SRWX[)a3"N#7v¤:)TFhWKokBQ:?⟷jJO[*aB:E:BGZf6K4+ƣw)N#9ۄ;ksE2x I#/_(u]rnĥP#Y:nFeIl}lǜ|6UpuHL@8yỲip{ ~MaW\o{v1`[͐ f=˹e}CyS]gTF y$4)wʞN)8tBw ~ B.f5{"O2_N%E-V3'֝j`[V9drQr9`OB r B{& ]GpwQ*1 F^t˕]paH0 ʡ r3$ ("al/>h> Gi?1ac= F߫[1͋{cc;LC Okiв)5! D.A]o5pM{wwiFi  nZ=ONf+>ȡiXɎ yF?maG!G#Cc R+cyXћ}띓A+BO}uUWx&;'JC\cYo>\-Xj-9+̍7ScB/ M\"l&tBuf8 D*VJ[^@ծn<6Tf/zگަ^'ZP1u\ˉg,oՀEX`tUxI&莡ռbQ ŹK:!4oByy*q+P^1SJZ銷̄܈ >xj31ߝ%gOWU#cW)bM# ;Ͼ) A+v qCKp#fb7Xv ^X0YUcz!PE'W(%_x(RxBfSLQI#bm_coc5'6#@jIgK H1_Lg`fK zs5L%Qd_IbkaN#<*SaDp{FhVe^W6ꎔD$U2V,]jRj}eqC,1>Oyc_D^ifCm Q Q!պBMpN>W'kk$ˉ+$̥6Su# eE\.HjQ,:ʲ ɥHuDM`90 Rs1yS%F1?g81j!ŭ5/E?gOƪcvvU r(mGJi"`"Se1;Ls:33癯wvbFng:cSّqω;A 7gst+bAо=el{ay ly<A~䀴PUCeY}xLOvfpq§r:j/^G T6Osc;3;_m]D̮j*"QΆ]fZmB!X4M%"h%R6JlijU}.,:01j[iKpϝc+#߅Ar1Vx\_JkWtzF"J=Σ{D*P$OBqFef~;ZYoE$6 a áӸncVy|D:@%saA #&qf9kX CKU\>v?Cd` ۷@őw]k_`Ua <Â!^YB85^;NKu*ecP1KJ y_ *|秏m*CS(HxQcǕ<7YTxUR3qNx˿C=k5%@dʖw9aG0XI8M$ ߱% ո`h՛@?ķXb(E5~,y6=p^^{r&CI><; |5%#K=RDJtp'#_a0Qi)1P1).@DD9bn;aRRr]\œg)i|lYD6uzz{&*MZF[kc(P;pJH]l_M[!=m}6tNlc7S f 6rFۚʊ< !^ ܃DcPwrsJO_^ۖN#NrқƘZeGMgݠ<ebZ 'k aMObGЌ8t2cljVF߉f~(F!/8y'{(iSԮhZpqqvx:W6zu͋%њ=ϸ;h_+I9\g5` -=4]Z@cIVeS-9lP 炅oO>_{p6[}r*/*Q(EϑoT,eQ@[>7f;0qM/sTTfyp7Z?TP~iwN!~-}gQȎ)!J /M%}BH*@]`x{ 8n^!ΔA:eAP$o_M*tM›%J=Csz[Ӽ;=]7=IQkPIru0 M!Y ד^; ]|? Eqy&fy&f(< 3pI Kq 0xCq%6Eׅ07 *Xrs{q,n ;&#d 蝫dɊO]i}Ge;aX*[s>3yzW9!đ3zJ^g詴p}ӣpqz9@ j9A(, zE$uf@l=n04X 5H@t'Š?!g~G'tlȵ o&2eE$ҧF |dgsܛW/6N*(b hD8C}D)[S7֠b*~"|%Qh=B(Ҩ熲!S#I_ȪY؅}ع Hr d~LnKz([HcSX4P<0kSMw;! 1ȧ! Zs Q%HRZ $ʣ\<ĵܵƦH8$؁Hb[Dr;*+¢qAR_Ֆ@i)E}L;[;BR킄_u.Ɗ!ovAj|dZתYĝm-}lgK<r".}4UIY I"Dɸ1)b`]DpH-jhQ.*K%??5n֔hN{<ԖX!fQуe ,g2*Qm` 8R%Wr㌦1y彺*h(л԰{w,J6*;rU'f2X*f﫮 Yd/>x]>Ρ,X+W154nV9|MT捛0ɶ>jGM58Y|/2v]>ivʯ_]UJ枮4̴q[ Y>> }Ylj.?yMG7[LQ,vI|j9ΡOr50 􎼍OҌS/u66Z뒡;u4jI)ӀLC%o>ow/$8 7IKۿȤ((PȢjsjCv`Lo0MYFUNK(le>jLWR#ʷw^OFj{He[:DB:mաli6C {囃9]kUŞnk5q|z1|ObFn8~wt%Asp,Ku\jyc3Ci9G]uiFnIpcossoЌdaUܖJаZ{ (Us;{1zV`T$^Mؔ,7oŦvWEéDOB=d2nN^g w0mu y -^yVaژKቁw,wgʰ CK)SKK_hP S~u[%XF$=mT˄`{L#j_VbT6[㚪!D2 XP*c_;nM[y؆Uuo#鱓aOQF5 }rуpcQ;h3 u"h65 <ds]|&lsNjΞIn"m.f(ދ;&0tԩ8k+]24,~yO{T.wÛze漫/ 2I7Ï+U|3e)93ri5 ?*uI.] #}O̔w6#m(5FLG1mRvߦ,%i[R rMݖm&jV2E7ϰX6}Kpd)/V+n:{ 'B$KE}}[GX&[#G#E׍M ,!șUiGP 1x`_oR{L2 n /?ȳ|`]0X3"ϙj"rj*NXP }vv6t\z=!pbFnzĺ 4T9SʲvQnίض_9R~g+ĦT"LS oy=C&_qf+[#. bwH>MYS9p%QdjbP{vTF ӌb~#|~aU9_`~є3Do\Gw ?A0`lL4(Rx=S1 JU?_U6o1 =Rm _ΝnjTձ,ъ);挙h[H)J6ve"rxz_XNe.z̅_˘Nc%ûs |N02#8ri0䥩*B/A"XQjsF'R'xg2jVE#-qfd޻ZZC0R|דdagY6)$ ,ծkPxa15r4?ԇLpP+|K l]9{E LxjzȾ"o+SwXlS&^kry]3IXgO_?6[dΈcqw%l^Y-`ō-> aEkx,ܗA3Zh]q^Aے]׆G8'1r w^夊G;0> >/ǻRݎ6L1CK-ZnP.䚉PZkWj?UyU{QΦ.-c =zg>?|7Ǒ)%16b" ]K M#SbJ7e#wy`9x%3BT1V>aV咷>J -BGq[Xt((xRecL/r,PۓҔS쁑Lw1lR&tq6vYFcIYeKMpRJ-+dCSsyYrT}PԣqAQ;iIh-$ L>GA>0#UnWۄآV'N!֙R} *am[ Łf1KWcfBj^[bYhifu@Vs\ۚ!t4ø>aۥ1Q58|CS7Ol$Bf;EL)q_ҋ( }I9ཞ,fPAՈZLM/?>Ff' Bg,D##g|^aGi^*ϲ8ڍzj8i곎r-FLQ=c`I=pR6I@4;r5/.Y+ӝ޸<͕`NgÓsiC==h5g ك.s+>}%dx)#6]5]Vj\ԤGɯeGc[ˆE0?X:xiۖ/*nN`K0~V}gO]TMڒj }}[HPGxwO*J?PMdپ. @.{ȑڌJ^)*|1c(Q,b'Y?e͕йGl~߇-b/5?9߼CG޾trB#>ڪ/O_.U,.zYC2fu"A%,9QVVPhVF`6s人Ku*to[#V$N%W9}9Hu3H($kN)A A?SW4Ȱgɫ F~湈sBd{chZ7LAUEљLT.AvVQˮEhԞ6oOZA7V(`&ޑl_y}_pgRMKɊXvXhnHpkGAlS*;׸]ʄp짙S۸ڗv`KϮxD3upb"%s:(E zړDp8MpDwѫq a^yaQVhjX%ص6ŗ 2`LY}Jс(t8klY"Ozř 0}t@R )yk S}-6^-VH?>C$$#=wX} ;Fn'o:ƾEؿ쭻|2WȞz襜U A k޹e=Q9pK&vb:n'J)k6?tI#Ëߏ<@+ǞI*Wmv M3+}o0qls8M4`~y2"Z"a/C Zxۡ0. p;8+.U؀6q eP0NhXe$E^ 29 *䍽QG*@ kĂ q ߋgl ؜(H%_89+nJhL?SδߜӑgT,]l9oX]]gV%m| ܁ f38vg~SE94rDH!)fp< bHz2 {8Q(8+RxHfP Eecch L莌#iD[ oӎ/'*̵`0[,μl}6@rUy<emɕ,-<L9|iKsb|*ǟv+2PÎ MkI}G:]oC ;lsyZz Pc<8z{pͪp?H臢~ctĊ^rvmt"dK]}5hȘe1zoUjp2-a# eW ŏ%p"]$z(=u'2^sА%x+jn]zSg@z{PZpܰ?`-ro?b<"B̆{I|rcӷKZh; t#8ϋAw#y;En<`]4k#qK}k{ؙH~)!(CRAI.1V#nv"`9SIin ((+YIaM=Vr(+-1YԦ8 0ffR'IE7ASښ >~ H [% EC.ʮ\rj=z6*Nfe^6Uw/.b65.4 `űy>IzΙkЖPJdPc7͘u# U@n[+&&g4]wR_d7uz;seco\إQ!ImW6EhmW_?3%n?Ku#Nz>B)QgXJw)Oԭ B|Bk;;ew΅XqsrNu-P(w=wz9J[ۀCR|r>ųeYo84B2.<|\*=RĐcT ]HwADHY۫A}Qٷ$)<27kjzZ| U[Zm*P&"rOYK۬4CCɾq }FH>JŁC1X+t"^@[Ց4f3.[6Z?%}`=8TB!j`Uߜ(H [ZٌBSy(461v]G і [ޤ\] I\C}85Lﻵ[G{[*+RO\E"7,,] /tt\hnIt-۵ܠv..]f/`=١ܡS"IVE#͔}Dt˄)2J R??<5򞔽ɋcV+YoN5!qneLl8cJVOdK_Qڜ%wvCx.b^l&>FKv^@Mĵa1:fccҕGe]wCvYAPf$U .x:ͫ#6u3_=y/Lr B\H0xtBgƛ-dU p8~X2C4\=|R3_ 2:&پ0UvK#tɐ-9 " UPxMb׏Up#*~YhrNEo?M8pPEs$A})4OEI`X7~e,,>ItY Y U5Կ)\^흯 AqXTua z?s>{kCO4q,))Ob68Bۺ&+#k`6whb!E#->Ta̶FKsJƹ)$3>EKj ==!ătaˬ zJ| 3A\qY^&j1]z[>r}`)W|ZgfeSOOqA ؑ?1Ѵh(uzh߭.n&W:lNTGPxwRA:aC^}@WeԟZ=(Ǡ~Barۏ:LpR@6,8~M(uҜu@i>t@n^dyڻFIY|5x0gsEC381&]X>IV.d1P9`)}?MzƦWV#uRʇ/S{ vRkIUW`AL/_v_!X3h]0*labĶoocKx (K. #ֈTi*ன3}t2́|ęޤD EÐv'ϋaɲ-D>6r|2s)6`E6&qMlsJ$K wV cE՗Z"ߝd~+ oėf & FG)}g(~%KGB8z%׈ŔpYal ixRt a͏+rVfY.kJ x {vrS&)*S~NzH}5](kTƶa)uߍG~bgۍmv.=@Ml\eo=#7{#0?!Hg4S-"t PkB8f0(:MVk.4!6HsN'?L; W ^Ζ ^~='$z7Ws볔Hrg>ij6>n :ң\QV_xRٗh0 \ؤGX~._;w^1Oy zxRKA5:]"łEl$),`B>+ckQM?hPJݙMĢJ?q:p7[mw 0mo)S mX+VZ.!}>Xݿ0RrP5_ YGr}6 f+f Wpm,)b1$Y q 4JS&R<gHٹ-KO%EX_D8[j9&g>f }k^b\tea 9`;M nv{ʶ}YR? ֋NQ= 7T9bbNV/9Kť_d*vʞ0HĭQ8XE[q٣-F>3'> ֩Ztz@pT6:)uAn0񱾺)؝{*ry"=$iw2.Uu_hIf`׏w?{pWf !<2JG,;pg'. M & ^BAC7={XT [!?;!H.kh!]޹KzHpz٥1 3e>e_}YFҹN/8f1<3N8Ԫr +P0?do`NSw~љyg~Mⷍ?I%!C5f8{Ya!!M/#mLa~5,ctHk)>]1EZl/{(I/F* #<|9sE HkHs$VQ1$%H{7z&? c'I`z!ktϩQ|ZD̏rx9-}'|(إ"лy*7NUnpZ fCdzXMVv_eKZh^@^ 8KA_i-kHk:nf7 i4)} &i (EUByA1 T@`8-fXC<`f|?1q,XgR,Ejaӕ / Y[+l ySG"}q\Sn˓"ٗ& rRH(AVb)yKW>ūO_:zh|nޯ]. +u=ZʿEVsW|eTޅxБ96'=kP&:6dF1{}-_gܨV VN@&([ L nIi1-Cx{5qb07T9T,|Xtbb~i k'ӗ!ZĨr%7cKo8QqV4i7S噉Eփn9 [ (tGn%"P;tSy1-AC[v_pADӢ:Ьq9fiH.7P٢G#Ca|}F,u+:l!|amS/يfMq(U'`|aRP-6Z7W+uw-nŻ6vN=@c(dWeû7ۅQD:l;>hGJzӖ-. 9a|F j -o]ʊ9H{휩':h }d5q7~i3бh1@M`cEϴb*cmFG@_ eXoC{GUs/'N=-V1\1)4&(gVjƘ(Ǫ105~Zc;q)ەWu%qGrX)#~,h6ռ{>(IMh[>)(q?@CkʋPE4ʱ$Rڳc'i cA˖{A7~_# 7UMZeļA;Ρ?ۄ?+dF Em!,ҁҐ[PӀ\+a6n"z3x̃},s#QՁwqâMs=%^2yƫ 7ԌpۧVa)vA3VQe ʔ\8u.%4$^!nQJzWT+?'nRgY{(2hvCpBzݕvqBm%ZQ4|ljWRdB&~m{C|g˦?Q !:.3 (΋OwÒDraJT1ͻ=`Gfo&%Jjc5v|@B8H^A E raYͽu;v;(`Ԋf#g\T&wUI/q@K䐹5V_2,L/#< q7 tP{#8 +E`iN|QE;dd .MY0jU<)9EVw=僱`D2cu\4GDesr"stS`Vb4PAy٦M<%yBGM#$m kUt)k kiMs+21pS //'1ù]#r(@2Eٽ뢗.|eW&4Ii85EJ8{n +!T [%^o3/&{Lt[Ҭ}(4zV78a2%Gٴy2/k{wR0%#[]8mJx`Z" e J6Dr-M'yǺ.$<ӫz}/WV@S ?G(^ {:gJY~BLb4菬gz4eH(m-[AxVl\No7[ގ ƆXg|ڱ"}ڽ0{5zbc9:̯R꓍Rr}kЈ@@بS EB!~vmD37(6݅Lr&H)[(!jiC;YBA r ^1Dĸtg b!-Um\|=ft7Ua3㨏ZN]b^5hFwGQ>) YoHb+igj>x9%' !yt{y 'nm_^t+D|-aY*@ 0hB5UN ^0޶g 4MLp$f ?ᶯt .2]g--2uX30J,HM Qr%33\ib4<&>a7[U\Pt穳n&PBS6"}gIhfQz Gnمu&"SϳĬ^\脻db{Us7ˍ"Χ XGgVIњr=zmEҜ?Ӕ4G ||BOuiU4{&6 %Fr*QW8 _s K1ILÂ\ѧ2fBaUKp4~R0c2+5I/?y' Q:P*NR1V%OW sF˱+4(LAdO惙\wU엱w5ׄD(LY2I.Kqys=bhĺ/۱2C͚'s#I~G?I$WlU#Sٜ] w/ kNq;v_\XS$W=KjˇPc=ADPU,d  lT[Z/s4D$ H Ewo^pt;%z8x6v&ƯTi?^p)UR=Bn֙} y.) 5=);{6։)L)um~8">92R1An; ZgBB(Gv|fcv=itmCt sӕYkp:LXnyYTҲC;qfo^d. OYU>Լ^<0(BEƉ9p*U5\'H(hSQG݅׭IzC.2`9dHx_ x:!mO !7[)y2O?;~:J40@qZ&Aֹ| e\*4>#%U< Y?H.;t{PKr7*Ctf#uWw< ;kF8;c{CPQ [=dAE㏱e!yCV?Ӈb3SN7DZ ;,ꋬ/<"f҂BNJNoƷY粘b[NJߟiYZ^kfEZ;iuPMKW4"#C_֫jy# PvyI ϯ&DƑ`3T7^o^P7pU ;H >捐|_leY~,l)撧DH4aحd9a1Ae^eϳ Y;R'T&U:jPk.M٭ pcᲵՅs.Xj(iBJjJ3ņ,z 4tNh,˃.X„M/C|\e$[џ4SkC|i{ܽJ|pdM/fm|'K/m ELyZQ,h QгG?^_2Y"Qx=Zc~ޘTUBR7Bqb[&x>>Tu9%-JgX4w0^(;FD~aGItG7&A4~^_ )ʓq J0J8|".̤ޘ$*aPߗ!`!Z3NlizVMX2%JL 7KDYLz^/V)L  }=692$rS[wƠf+JoRjvmCA2R܋Se_5j+L7{+dFzhs5 +M|͑G| L(Sz퉌<+q_A |c‡uن2L}c+FGzw+3tGfpdo68v6*vOrѥhC:7{vU#R>6xi^,XI6"O2|9P6N|0YjXW(Gϳ'HN *mMjN/4h~B 1nZz ]=Nytg0ն>/m#qɵ!H|%U[e }<ϓzG#'Nԃv'`#ZH/{η>þARCN%*QAf`0'$aǠ|VyQqY/]Pw N0#JAr[e( ;/zFvK_=Mtqc3_6,O(h<>,ȍ_VSP}ԧXT Z.YM%_Sgssrz<8O =Jxg> _5t9cQaKWsMKҔt;<-:cs~IqqXa?p{R\D JHjw+ k BSfFu|DʮiԾS"n 6H<t^:4הKqaI%M"߼+NB^!BmB,ͷ$J^8ar3=UM}vW ,8("_z7EF~THk1krhya^(!gGzeI\7買 [b@YpT76IMgMoS20֚TYEKRatEG2.Ax|4Te}P6#0>/yBs` nZ&<#f/l"!Umjm]ZRQTp~0 hsE'3V g M'X'sk@ l2&E۲=2w`9G:ra/1|]0Q˸1yUVѬ0xIfBv#䔾@ ʵ68S~@Dhk{Rʟ{ˈрQvwțq66&gSw3EX(m xb9J5mhF`)Aӯr<ŨlvV2h6siᲠ؟\Vנ`BS4Mmb2|MXf8gY~h bz,AVnEY&ґd– dBi;Z$t ܸV3ߗu>a U09] K6wUOGdz+DdqEPuQwMuMɵ<{:5u )6f%*Pclo);跸i|VWȪ8YZqKJۜ)8h5ZlmfV`]8)DDYQ$19 hu! }V!# Uۍcsb"ANntHwk az^pc Bx,G0hokׇZ!}Uqzp2Hǂ 46L=$k:7ѕi g]ػ E-\(D!{Z6> GKP,C]$7Wjh9<l~ʼn?a pTjObq]N*D$6.+?‹w GQD372Fů%%9r%rAoC0U('BDR9wv7n9;˚dRF6.eDr1+SRF7\k1DpMze+pTb%`O!x|xwQ`KמJT.o+^3!D0PX ``CwPv8\雟Ɋ [;Qń6D1I8E)23(KH)SPl+I82}oxa'؋3@n0zP]l^(" ٹ*`Jet8j)D=RlĂrE,R| ">`buMh3 +%UpTLKe*BpW zJ1F Û>sF7ƣ;Qxd4?^o@M͕xթߝѺ|b/˿܌c: *B>3I͕5zU>έDkceK}xldٸ;h8vw՟i J6 WA#3qf!') 1N8ī~}m%="xrПWkC)or[:U|ДQσLh + ki)2s'<[o;=9".̄Z\1HkV9Bk+s@'׬N7LA#6m&1!n19V7>m=zE /v_ uhas=9̚Fdt9&C tԞ>dzѡ[X &D=uw 5!Vؓiw}aUDgHz6x}E0RBg}ϲWCSIBYGk|tOhaY׉I)K&b`lLji0Yë-_aH}n8Ng#c1^ A.!CdslbMi5,:'|B<'\IO^`RtTx|}rl}Jj6S؅#1,ͺjZ=hOϿ黨 @|n·!}d>/ 5/hoY 3 7, n+φZ6X f+èW-ŴҎfIqC4. G}LSb .B_$!"A˰@m_}C\08Ps$~IP@yaK>l4WqFPof ~9"qѦ<*o_~ă=/sŔ{B7n1lz5'ð]nk؏6#*آ?!$<*tOy"R3QJBagT{Ǎ }u HLL}7~Hk:CGZ敵#ɡU}T`㨤{@mT<.BA}D,uzZx|\?Y9b1];n̞~7Vsv-L~nr!> UJ-cx鞉khu D˷)<;*T !"-ɱ g:YDUv!>d15mDY2TՉ7ð^:($dka/.UtJ| c%SGFcPZTczÞ99ˠ霂Lj==o6~dQGl>r@ X'N|%K UTT Xf~"| v0JcrS /W6WP$Gt~'0G.$fx-RQCI6"Gr&Lv=F%? FL(G!K)aKH}K扣Z^pB'EE5 oI" P>{8ᘜM*k"mFdc^֛>-§b.ې,21"?PBSЃfLP_( >Ei!miQXKdp #*3I^AD[eKH?ԳI5E V|?rEYy1 Xr~[ߐ@GwNCRfyM(hd{%f݅--(ywrGrMRZ!"F[ك,w:•۬ G| .a :|ۗء{d K'ѺK#t}SJ(jFx_U ?*k@5A4_meTi]D!@=#G*;;\qV&Y\9LbRE9*`R h'VOC/M'& !ܙP.}ut;;>+'g~SO:a]~XV11hdޡD$G_Bt \MH.QT&mX3ze>36ѕ wj*>,8b!m*BNS GH\&;!ĭh;XTJsJHe4 F3I66ķFrm-`P #a a KȴoQ/ޓ'\<Hs$!j.%MiupqüKaե/z=@MūޱQ MVfSw }@^6NH:OqsP% Hj "<[lÛӲE~?YQ m!G횆fc$:WMDju+5Dk`kEnqx+]QwRS 72 Ew&b# CԾɨMoT x* \|!X(>=O)ϧϯ?Na$-"s"Vj;nl>P 9nPWm;W˴3-IQgکrMNU_}Wz5aۜc;ȹ3[*] LIhkm)@V>.t6l &d2$$P|4(Twy$PC2GÝљZ.me^t{+s7p46 ?\W[ (H]0c5t8[9OYh_Od:R(r&ْ>υcTJʔspܛБB 15dHq4:z+e^QDs(\t0HQ(j+!s5eox1KԋPzMBxy环CeI9߿g$3ה>f?Db#jYеQ/s%ΤOOk4]-TO3zJ/6+ta ᛓ!NV%ߞdz"}9j V \=5']૭d[ՏmcXs54\36cbxt[W#00n 11+<H": )Lr_W;?t<p} ΕM)GRiדk͌IvQwt.%썡[儱c,>? +dcvtG3CyU ̳7IN9 7HIj %UMTX=bU^̑ǻEǙ?'uXVE-([KP?!Wb WA]O}95nCq\u3ߗz4 (+γN2>]UMܛS߭-g5O^K!}ѩO@n,eI񘅇_tǺ JЇ;uR'4y)r%yE&@w(za0@_uvq oBR@oZgjϸ&.sw.*y7;a)O<^~ӎw,p)&^~&[XuI?/K7L9TC fcԯaAu}=LGm@3aT.l~L.^\~HWaFfv|u%;^IyX.<}o1 4DV{ 'Ƥ_bEXZJֻ5vh=`SQ_ Y(K1Nɬ-`Q>*BrLf{lՙӡ2_%?"IzF|k^A)~窶ir *;e2.+ N:G~8@xfhQ ΩŃ$);~! jze ~8K^m'z *1ɥ2;% ~?@!p , duM$i̟( dJun;Q =O}daEi] f/^ a!`;v땃ɑabHQpAyu,ir?sǦ=Q{_u0쏤Qk*?tJC0n&U=/GxqrAH%ug^rKBqd%6kQPDA+ҩ7=TDB6I9ֹAsS'~&$콩!vU!9^fS$oڿ"čG z(XHeby~l cda9 wmcB}OGJ~,qTQ#MYU}HE@ x+MZi5_nW:@0oNϲjQ3J\4dž:b#@l8cRc3=徽6="SKtQPaP' _SyUULNUi8qGB-Z):ԩa3oĐO6]PJ(h<D-MkBɽJJihhzfLGNShFcɽj$pucsyKz3O[k\}.aYoppEZ)ɯIFI$#>Mw N3+ZQK#$̩FcTq4|̋c,o!m H_$VNJX#/Yz= Mjuv>IoQ2RU/^ˎQޝCz! x*qv#k*wk>Mb~ !ǔx c"J`Kq-J^'"`AA.k֛wkf*@\9HY!o2-"S6Gc1.>pO?&gEfoٵh=pkڧ!(a̎ `pAiy}nP5Fv"J]Xe3{s3 uW태^H牬OcF̴e[) 5=ܜmGa= [7Fpf+=$^ "X #ό?qs pMǯtuz;1tk8|6< >T~>a8E_j(Ɏlo&ǰ|rks[Zw{%9y**˔>:F9߸id*,2SuAxKi:N&9yJހZM9?DdcA1 k0tCN}jhO}er %Xcbdŭ0ESwdSe dLq^!> Yk}ڤp|τv "xW!Ij&j}b=+ۧ'È}yc%C{b~ӻn7b <&UwSaxU~wkΡZoжWVy?y^ENӢU,R;xdB+9V_0⚪W?վ,}MwKKe7ͯGkIYڥc-!d9,B":.}D?&_x} B3X@|tbj/z$ 42و3/}+T\0#gX ɧqGVcpƷPZ0)%Cm3 f]"Tu^~5 2яxPJlW<^bso s~|J&?ILV&B gF`n)B`<켟ŚSrݨ;kbk ^U^ X+$Yq/ -1HQh(A82#4ͦz3' e00eˢPwbE[.aLY i1Gorc/~N>jYImV;~1:T6闌wڛcC5">GQJbnDd$\MPVfin,̥#\s>C7܇JrO"kD^@:Õj Fk&LvJs[d=~.-XGSCnBU3p|y%Y :i|k-{8=:!O$1Gc1@JCmp,( ?Aɢ5vdjli/AҲqESܔcߢN䃌PA%s|LAѷm1K\\(mK mXRVd- V'r>doP`=33ܡnfܵ\{%{i‰ 902Iqw! {ػEyxFu߅A9رpԮ#ɣ[IDhJf'oJ>[3YpԒ5PY޽+~ }&hJkhh/g0gaAq{ݠ]9Z0fK[HPDvp;Ft9 ::lnO<7$p ̤5"Vw=!߇8B̡Ev.4 EQ;,7JDe]UP.+yPOc]T߬(# {Јz:&Ww'Wh+5M#sp r_㩺w+j'f@~8NѓzM;=_ wĔ(e,:̝6xrT-|NՓ;fzrt5qp(t<1|d?Z[~tz:m J?\hs,~v*j)!d;֝)y#<2$ 9DxPI+OtE}>Ѐwʮb4sm { l"ņ (-F`O5_?)ߓy!U-ڛ,S<W2ԕ2yQ"Drԩ12tR%.V t7K3ƒe =1Q=W 9+:i-#.k'38—l( hpKݨ`?2/L>gxc &&AH4Z %J-S'e8r%kNj$,v1Q|>,[4e2b   +$:L!}4v@;a mɺq-qvFw2͂( jV#T 9EF?;!kͶT#n5_'^В8A0U%grWo<2=5Y\]bRB3i`g],8`U+@R|)9/v ַ߫jHo-Hp/=8xYRѺzG nKAXnc} "#{ `c9Û_#hy'GZ r 3wQF.ƇF|6rAW-J@UAyё3'uQ|BaLw?D'$ u'NDˬsY_ i9XWc}⨻Km1cvvw`s&3/<$#gx0DPk؊w [i ) mҕ2h?cf2hS!Aet8-!$ǰrjz/-V\lMرʥ1Wz§.b* Jn2 ;QjːN֪A?KBl~gTLibJ1ęlks6l+r;u*  Ayc#]{Gg1&zZ͆ؒص Va)VvD S\9J_;kZc ) 열ޭu,N}wA?Y{+~̄ٔ/-X!gB\94Ui$CK6 gzިgrM*OVɀ>pu.Ux=6EXRcC4حuQ܊qOzDXr@#i"%:C_ErIJDhewS9}sV#;ss> ZY_h=s#"#C f=% 禊2^ۑMv3@,k; ?R<z [ 1Nf3Vky8k9oj:%4m&ьVEl$Ua3Œ+*ߥQU 4ǩ8] 3(,{b?SIڷ!`T'i1Ѿ&$VY U[&`/IAW`y,ϥ6L2g8 bn{^ {ewP:}JZؚ"U&Dp=:ˢC뾄"UOW;_yҙfZ y^9c|ª]FmOCfJxsaݶIWb 0B2ɂ}X5;"? ѥtY`Ȳ7qRf^WnDdZ[y2& dNz"4ZԒ饩3Cl?kOh5#_breB _?v7Q>w \mƆQMTɜ8.5*W\GL%.U(7la ״uo-Q5tn؎r~#1aA! Mo *i!6b<&VtZA#stj̨lr}dΑXl_C .ըqS}um35I-lex׬tk.=ЈOKX>4u^1 zm{{>>Y#W8d,&u}EE[s?hL?#ߤϧgȉiղւS؆4>j|RKህ-Lq~!%)E ̝JHRٸNs~ 6Ndo6;mM9t!3cןJ;#'>"qixXBQ\kYr'Y00 Hk};^)XwkrrnMOhc dQ%lrRǟĆ(إc|5lo e vjN&- cnj{'lpkpZB"E:S7<--sU nv O9Z:{wv_vrxCp u뙺@7 ʛƴEQzy3LnS8|`!nc1h.\x̹b48/0)72WLPfIa79v#&[QQcߨ? V^v[kH[MjnG՟SE+@U^l\1y) #xtD9Iqzy(g6 =^2cOբRRp;uhe@ ~>X{:HWvbe9^l`^&vmgj`>#dWpA5׈K|*ž3*^O_}IYoq^y\7d6ňUR,Lj3OmhNm&.[̦pO;,j!gσs=+| I#:Ar^~kPy+!Y<{]mnhPg+ʛ5lTbEի_^om2fZ yC\gV%s/f<|-kqѐ]fQUԡGMe# Dݖ B̲ٻīX]O:Kk4*=*7Kx%?Ia) `h\#-+bҩIFRcVk*x$8 kDkEhK{aLkLeCJqZ|8oJLW<6h1TUʄe@zxxǭI;GsEeη6MoXMw';-rwd)[R&oqJR]]UyU{)|G(C$\Un\d5V vV[RW \YEe[Dt57Rn~hG=QTk~MĿFt|ZF/Z@u0,᝜W fczxD(NHfN! T.Rqz *8`|TTq*ۋSD[ueK7*wƱUӂE.; fzIE,6oX hÂq]b9?#ڰTL4tl@]>^ܶwaLcƂچ,J/=9fM+Ns`a &U1+0%vMPd1iy?kVu^2hBJ-Ae۱Hr)(JȝKH:3W`h!bW;8 V{Rvk= [偖GFBu}e4¡9 }w)nM%%KKLx\=x۵¶LKh~ #(H)ʭD0=A%4<%&:FSx2ǘrMr%Gѿd 7e[%Wj/L:*Q$//+j]C? (YWG5Ɠ)7s>+X(%%4'81W"Z""ZkE񚿹7Ca*,L֙OTܿKD~#] 0ᖠApOyh)`v-@+$92?=75;ӽXE#!;^W:Gqs\m g.h Ff~!2]yWƓ( FTFfFSNEiH8]_јiYC΅Ө™yo?IuXdV_ݩF-:Nʾ_AVXk_{԰=_:L\܆ A956mt=pCB +w{_=zi𸵯W*#`=A-4jYՀ4\%6,Fqʨe6Nt֤)ack;,V Y\NZ@)Yo;{RV cXJt_aw9227 Gb\i%Ε/ٺ?l>&XUGS;,GuSzaZz.#_&EO(Ec֛ 0}!5>5x g/'ZOoC՝/lsup7(9p8EHEʖ)K2Dv5Jvr>M|jaiaP1{a˵%s4ЕX h 3Wu>mW"Qǻd 沶ڬfW hЄ1@h@b#)MR B湡v}0ҘoIˏb-)F?RFтfqo 8)֩OR|m!RD ]⢌h'օ:< 7[;\xQqaxJ''2c\Hڞ+͸ru9=eu}~60Z% q,u j3Sn.|( {$ qʋIyWrƀ#:<4Ԗ_}&4;̂$_U6=P=8.(KcyO`,,鑇d5Avʬeֲb+ݞ-9BCtJB+\3c/-2,@oh@r.?ubqF ׃(-N|Zw<17ME< Rlh_A¾/ۺcQpE@1h3dJ{SC)9ԧT^Tg׊aՐdBJ{7pp%s.dB; @@V|Y5Ʃ)l K(G"#k:Qh 'VIG5l ,uM3(]OzQ]ŐͭN2߫}*6%{DXS=bFI|- gGBs5eÄ96aL:Ԃѵ1[r@9HVCu8O/so=[[.a4%#z׵MIED4K{7\LO^l8# d.0>#RYv0¥}[fkIܮ( 8mT qN#+@PR W/q+Qh)Yɀئ<6>Jlm6׼Nsz$@7֪DiqYDh4X t$gǚ 8:ʔgp1qlB'P_P9#oUυ#CJYʥH3/wr dt5v*Q"k(^l?m'U Gx7m{k}mt3NӃm;HrK6 @a)K& O:~`*~a+%XM;Ui!o=VUSڠe;2)ulʧepwDޣtG>U^Xjw"-ej_Uw<|SyUM^7ّwV]tO] } #Y¼t!$v07L ֨#*g`]pԓ| @.-iXUSzgѺէAkN Vl"jASUlH$Vcq̋">o6'᢫ZSvIm`^j*pRniM & P+t@S{rsz19^YO4fZ h.7nK4Y_X`qRW)ϭES܋tXEt;GC:t܇ϭ{xUS&o#2|cR޵`.D"I8)7S㳑a]֪ɻYbp(IBܑ-ޓ8H˾%oY6F s:BBE~=l|HFl6󤞩݇ڱ}J,6NC9/};NP:r:sewH$#Vsƣ712\H5]gHNV#*4ᾰie/\K{ؿI`mׇրqb*]Dz_:Դ\5yA% '9;7V۽43v K12 ( 9VDh2+~FF7qvIsTS~pf5$T |,57"c<ZOP)NʙwǪ|7mnjL +6.ԜfRÔǓOM8;cM~Yj&zWdmt\g~"Yg(C徉,}mv  vtfEP*Rh"6:lK1I{`DAMo|O6*;}c e1>-઻/<2DYI Of,"hz;GeE&2}ۦǴLf% *WI0S+E#j Hl3:<+9SJ.Dk ;` %.ۭs߃ؘuEgū-Z f DwPdö؈_ HRj#oUqQл]BMhU8f_C}$I, YR&s0bk8h^qX rty$sޓuƍO:<#4ОNv80Ꝋ @[-SZD ן dJkTb ،i nAcq]j2ޑbv Ʒ'NUǤ(UzIFq>8D^0U&èB ]["ϽZAKΤSQhUmŞMs0 MHy>'Q9YQc+~"`ov=دasUAy5- T+H-6s-0SFqzG)?6>dg zwF5ef/#>sʈW )B fwf(Pz+ZjQwj3 I-B-[1^}3-M9]I!y;4h@"oR|"2Å?9 }O1!{G']1Gr6iwfAGsYR[3%\;q=2ރ\Cg5#^,d?%{NQNM)ZMCVr01 ;0鐱9kEWX79ʙe,!1g$~я0Q78B1q8LŴH5Zvv'jp> ^?n8^Z3Cm0|9l:&sqޫ*7wܬ gAA~hI;(#3ǤɱxLPd1{P:B%J̨/'3)?cݷQR NK @D\t%PE?knߊ*qӵmꠊ=KEH(摹޼rz!3[@j(pєQoi"u4r2P^!tnm0WS4Rp\}C}Hy#G8̻nS̆9X8G@W]g{FŻ K~ -/r$kWa@޵g"o'@(D*ˈICLG)_䭻PHwjeaMp1~ymgTYXRr JGˬh&##?*7!XsMFþ6ԑ>fׯeT&F4 R0е1 wN1|!Z?&< 'zrk-? )Rɍ6Z1_hI(/^63Mrh B4 7u^1z^SBK5A%P=-:„bE70kWi V3c͘Bx0xT f9Dl,z1ug?0Q 2o Kc03.o[ʚIN,k":W 2"ly'-Qx֒`J|3ۊo'PkE f]x#ਃ%_4bQ] {XdVN])-"~,_ }3Gpyr-ff. OAץTebIMVW/go ʖ+/"dڇ%£h,Ȣ md 6/]&?0 G:r.4"*$/}D7ƲäzL#p _yŇkw$e"֎+ϥ瞆TK [*(}TWKkVәJNr7e];;}6X[0'%Ez8V?R]c!u 7\>1(>zTYtD7;!NJ4Չ077MG{L&?ɠ,]Dka\([XM[(Cfk[Eơ?`UܲTi1P9m(@.ުt*ŝx6X@}POE:B / N)^p:i r%Leҵ J |KɔOHٖDq(̶?+Y`R+x~A#olaA ҧG7 %:z*RM!e({ Y9G{C)M cm8A~ .;H& 7 Yh_ȜMu1( A;xbrz|t&XST !"B -_ƒti=2uۘ{Qn^ ˖s ]a=e{Ga ]DKdR w+Ŝ=ʑoT\;a/¾9NM@Ub$k C*_=m2Uw0<:`w&?4r67<0~P}<=K !Г6x]X(gDص:0~%*`㔣k]QHOHi8տ8yB,?A sY04|khh{ØjSüMɝiaҿby@ec;ſ z vjtwj/p]4 *kH}:2P՘H ccڂ BVZ15+QeZ/¬g PP9.֘vЦcΧg ;Me"'QieC:.`6Rb.P>< * iٍoN)'߫JAS8\S3~Em?}Hd'hQ2+f_hG"S @"]\} K%G<§ \YF2l5{*_\ Ծthȟ #ndO:4hwqў8'Q" ːmqt zF&|D#,{5 ppW0w^og됄v ƴ#U|3y= NaYFTjld:^7Wbl!]4!%eYUPTCE *LBTe9Yl+~=LP3/FH3;dln݉`-ȺY>j_Wu=_Zvn,H0V%Ќ#fa?ԪD,5\XvhRUDZg2, W4傂:q;adv)+ & T]̾1t)WY Z:WP3o)]ě båS'"fp^.¨8N}T^l;"'mEN3u%D%y K8d"JzٺfKla"] ,SOI+N//"sg# ݸAO^ZUs3k@K9V1(н+b4|g(-&l?\KJDheGt+cF.ԝ$oq\W&1]/ r[#4":pW  Ci޳D~ 2Zk9gPߦPM6?^kSKN,T]6ᬤNiF_i,\s2KP8wMoxi8b4`>PYɐ"e9WlŞ%JYtQBGP炁뾤*a{^ƄU]P+;ǩpXsLvh7R[y7zdV+>C~Oⅉ<H +Zact ZR XJ=#:r! *$>}`y쵃s WUt˟H*@nddZdSZ~E@),iFRz]-z[X,E O4G?6Hj/DE96Y#/+-)#W'ݧZ%⿃缶h94H]9@\I+ ᄉdjFJ"7 :t-BtSI9fBCi;[? drR`^o7zu'̫?nM/L,_lM!fi@!*3&N&'109:rY k\[F1m]IOSy=],GVH2>9xc+UTD;Nucn>|aqU$4\|5໽[Cé9O'2>3sa[,P$'gy=q dw$Bw(*(PcY ox"uDxBbHb._׼CgDRwK"CC,UEOΏl2 ޵|ټ 72Db~<5h^5W;3a|}-U}'#b GNb`T1JXP8ѩ}P}doHl>9w`?X`e1M4[ (Z&-r64F9ёmmS37ěq,::FvC{N5]YiNrE)66p FEij9(HRM4XCSGbfIR }/,y(XVq ! n#SghEB֮Bu bB,WC_XeD b8c alRtqGڼ#̕z]7dկEMޱ"afyԟ_6 -at(q0_@xQb *OhR5flonmyB?)k?^_;uOjn?f$?!P;L"7*Q6b|A#V$nK"Az m )vQvI( ˊ~**eOH<^&)0MF!#9@b4/#Y]oLK= ];<48Mkx}œ'_:?GA6%O˧#"a]Slij/sw7>t<x]:Z>\ːls⑓T<'@>?mYOi` _,UǺq {ڃ<6)'\R9(wN=XVlŃ^" ܘW0zPl6Nc=!sfi`<׉E8.x'`atң)VF.+0hNyUf;Ip/ibZ+Y?HsZ`! .& )"k"$[ti*3hZJz%r NM ԛE@ cg={tR4Tc!۸?$;D ${3lf]g˒ ` ϬV aiX8"㢋Yg2g@(I_POz>xFOQJ  pǸ# #E+Ɔn0=h,e~@\0 דN.R<݀kMߛGt g8kd %h KN30p -u$[ MYT+x vQ*;g1]ư&*ALT8g=t9߱@ЦV4<p]͚SAˡgNg{TІ'i>S^gPO{3mO piPAsa/ X 6Ϝj(=iy^Dj`(?QT͝.n wb urMgٻMZ6W_cȺ.]EnTcJ&[PWV&0L m/k'͝cy(_is<<7R[=o'6/FrjwPx.Nd"Ӧ袬%}r=ʗă컵=+a٨~6)7[-Cŗ\c^tBo8#,$pk+0= ?+5=|]ɬ"':RϨP &*$j&d xjLwuJ0lak.oM.iڲWDqZʒU0h$N`%?DZc,OkWo6Dh;PWx#\*V_ހm_T^.ʡA9*ݕ'&BO&~rXj"#/(/( `3@ \Ѓ e^Suy*)$oTuAum@g QŅpˈR^v"j{Cckrp~q "Aڒ#|~n!qH b8E<Ш̹nTY.2(]Ǝ#Խ /{B d1RŖpQ1_ ڈy-iVDIt"hu!ijf5ŗj!1{2+L OP43"Z/0PY{dw p2 WhtX0s!ʚ իw >?}7Rˎ;uj8˞{ZQsbxv@Q N$8Ĵ̩q*>l.MǢ ",ba <*|aqQ<[se%k+-1EM;g"P0v}`[9a)}(uЕWO͑ $}Ź>XMX]Q?*}nΗ,X5 WCpj^TPRӯ1j2@'מGUfZUI{x(u,fSeAS}CxzЀqW lvdvaq &ڌb#^Pv`N|@U\a<]ZTi"J\+ȝ,/3l7px3S?jIG 75aK@lHA5?[}VXUYřjdFz_3BxaylFKR/`k.NGCJAFLR}ATu)abGgRP  YUB WBX$[h22'%קj<;QƘ4ktJчu 3 @ҩn}Kw Ƨ $>$#vUal&pL)yثSjLN|tt҇ʻ!+9HxR;W$Y_BW[E>36#+E'"b7Ze8eE ɗU\q/a=1.I1oS٧[Ut-^Y#jz`ekqߞomk _~v†rML-Y!{ң#Ɂh= Mi[AgY#d/@q 27,^QzK&ܴ|l헓~}+sQ V (d_\aSwoU le3$֤Ӌ `Xd  /2jѸepiJ @Ì07BCCkG { f8 u8@#$62J2ПҰ&c}XO7lJ!5m+T; ɤcR6+?;q0bΘ(<P(RaF^2Vvw@%X|lD1gS(f0Rڣtf2q c%'r=$ @cPEXD왂F # edRh<[2ŠfnP_XW@,6bI#tTØ;cLHO6qۘ|͑#;?p*(se 2Ј?HV2 ``ispR7BhCKz]AYK|q& ->14NuԗH+pB &kѸ4Yut~"$gLx*-BiXwLtvgJĿSoB5*!nWfněë#@*vB\0ҰG`c.zxzuA£?o\SpC-ul `{p]9nA=ӄ.v"Ņ7oh>cyNTFd"%dddO@2O XSeCA mghO'$>w6~wIGybl. .¯YdݣoBL֣Jl# .;hl _c6+;CYw FsŬy ?%n$[ 8H(roBG<8@6eX;gr1lT `f(v&qTKY4Y-[#1N!F=8zoMmT k՘Ģy͉TwGd^5ޕm.-N<8Aphg t|1)h MTO¢3"G */a@D~H&Թ!!'t#^gayso_ED ]ݨ%Pz:LKe{KOnj!WA`T>n`n?8n Rii3LWއ0r7yVe^a:PZh :[]s*egad,,˨+v~U4y@)hdlChڵ╄jU];1SX  P퀔*u~,!5 b?̒Z1+O厵,׺OmVx9a !B µHdyC\dɔl>Yɚ$R4DMFLufrW+g!F3z6a8JM0MjIV3 ͤ˔af=I)b!Phi?AW?L@(FؙMڟ0KAEhIⰋw'p"(۰tj- TP%)`b—3a\bYi_0JG375,90c8|N)D`(:ͽ?P__+p(T.r 3=-X 9Y><8HH&̧2ߛ"Wa#/Tsbg]p"WmT5ևɞ,RS(vRFN._V6Q%ƺ{^&B{SxE8rh4Rd7mp˷Z!"n/~G[]4_2ks/e(=QWF:i}G7֬FiatLap:m|ΝkS琹[S?`G9ZWT|(mwSnzQbz¯lQ~4?n-&p︃:kJ?{;YFϫ;p(DFap&N/$x%~9͕G+9oGm7zO|B] `=mߎYRnܹQP$!vNOsv՛TWd/Ia_Ϫ:)$$B|x @oX]B: SFv,QAnڔ$! ˭[/7'"}|FlbF4j;IDq9Ég> ]%z)Y].̨`Q;է:xmSc&|$ ]=LM µ*-Wd@)%K$O IQnw7UG4TkAsM)U_e;Ɛ7It]4r<)!4BwÓoSs`z|*A]Px9һJc^KwA׿FEm?9H)v P+]\׮/j>>S'K]duȏ@W˜-]]Հ[s[B,v˳pkGnbK6O!Ls "rv[{{>/ mM$I*S;RE;VG0AhFƣP={Wv:&oe&W_muPF F*[ tf@ m3"] p Ƿ>V O2|,E9r\rHp1Ӗ696ž|Vs?sS R+ >&)eŗ?3,(LcRkB^#8C̕Zam{q̋lV0Ms&, KD3^MSಲ߰36l̜ w2Nge_ȊIW3_#^+8`2HٓH%ݼoYx+c0C-Y@sZRޯE4 yfGq *#E<_{@nqC$W F3'j-Hٍ!M>5ȃe N%[F<.+F)ӢQH/{yM[L ؙ/;K08Hzo3LS P#u'FuGi qp^ޫyA"[ԓ7'ۺ \0jQ6}}9 G& RZ4Zۧ[Rè`I}_a?kX9JͽI_9ٷIx9#Id5Owܯ^X 鸈: V!f*e~޴杢z`֙) 8vT_)2]WHԇ5B!h`SFWǒQ&ES,4n66`\.۾N` U|QN;kq5u)Ybj1~bPn3Xqk솪h#?lKEbh"'Vi ߡL`Ai {d'i>{~[KNo`to{ٿX^5*YWk{TF0DޫÔucc&TsZq*!9|˧ĔYngt.*ZucVLK_Y? a^1Q/Oft inx  .mrA VJ# Jli'zG.\(qkOVGۀDf[s,1m9i=sVW|(?eU*>jX%fO=>bsa8}' ^v1Y4kkTJ+/zYaOXiҳᆦ_xМ)Ȏ,w]YiL vc`u%2)Mĵ;Stv3xH$/S3A_2S&Dy}|%RyqF>OSm7=Z&퉅W$1FuM2©P̿PCGp\Z1A5S- e3KD #% f-9hFf\Vh[A /xj#scjƂʊ 1jtX0eV&):b6B32LXU*f :N}7;̌F~nxU@)ڿǂ s~x+aeFjFq/rM,ᆺRKZs rw;koX5}@SK 뼲WJ~9Iv]OM)by&MN4nӑDtg磌BK%8m tm.#$*NIqK#99"Jhh̀]w[d#[p:!v6ŵXĜ!]>',5<qm'H$/J#n&#?ńm+:=7UTEpii!o:jp<`2~8SW=rCF7TJzHHvTRW:Џ)}X #HD d8zO$hE9הG(Ղ KExND oWIgU4RW욇˼any̰&*_%+j` ^G. 9(Fa:@j #ļ|QpnW{x)~vw9iSvB@ё9r pDz)D;/o4)F_L S\z9m)HHv!ْA%F }7K'Fʔ9(oJ"ė 7MD^W+/tq7rV,ӝ %!;6x_/ -١lDT췑Q:82][I!솋#>\ EKU_" WP0C0tX 1Hݐ`cӡuMsz4]x?5ݻ 5s6-Ri_q"F>,pVb~>hcx3]AA*)Ev/Z&u{1H8NuX=ՓJ5T{s BGI;~|94ĕ$/-OtR,{`\ ft*ޝ3x1[%7V^.6_"QoMx2Y|}Hῆ,r@2X|V) 8o\MAvZfEncll.KOSXp?T[ Jd%a/3n5|#A*ô{hߑ۱P\ #oI6nԊ!>+]]ëgʌ+˾<(xZ_@Jhjt=,襫oMΗG2c\ 3+bix%9MERGcR }kc㸢eݑ%CXeZm-t5o1e~x)DX-Ӵ:BQb*] Uu=d  藚jոkȎLZjHuaOf,EnoCHbqSj|`)B\; kpjzTM-.b= #6k*5cbl&L&4FFk2U-vFFo0ybM,qV?)%5''@"GKI KooizۧJf>hOŻr7._1%_yUlY6Ij?y4a kֺ0{ֱIp)zeWTt ˦XKsb1/}^pҖ$H| )--?oi*L#0J7 {uF\;`s( TS#U&goZ,d9EjѴka'_SfІ+pddrhejFS%zU7Gw Ԉ.:+M$#[mcp9KO0vEx_k{ m8]`үP:z E4Iۏ%CNrk ΙlR>mEt(̷zIzjNdq9ď1?;dz͟g׌ $lh -[Kc\NCԺř]h5c7zS/Vz2ڕӝܶ nxz!1-⯓s^Tww,hb{g%i);m&[0h!OaPζ{A'hwr= M"z?7]A@Wޥ<5<MiDK!ԽllK5j0''A\2Wm"j vsQEes vdlFT#BlDRV[CEP? tO^亰 Ppr̩Pt $) ' \ _O-$ 6Y}R.EEϒ/$DLkIQ9@j]\xM*c0Ji骕Ä# oO(KARПPf#8[#5if6{ ~c JN8x@B[eA~0rɋCQdx} :3V$Lg9:ytF=*:˺YF.nKyP2yŪL]Xb [͝UȽVU?ih(NM- 5X ޤT"`_ "_'_i$+4*ߞV<$85,kmyisKP\tiҠ[=(stȓpeT/|GZdVY$i #f#Vnk8$pQɦ$a iKb! e*S ,g 0Bqp* |D=>Gi}'_qжshB_ mU׭y2!&F_)SyhXKG?ӺP~ 2{<|X=2$Qcjn|1hmCBTS=Fxݤp{CT߃ Isv {$ ~RMG&*:4@?-a tw?z"L'iƈQ++6rYLbg pS '[~I^h즔 } v?K\߭FY:;T# {Uͽcࠓ%V5KJ6ᪧ}[Gw"EpLWa{eI0 ʮSNO#?x⽨M݂aʏ' s(UkF+U0`m)M{@-A{ Z (8q?u׷G>%*tQ*8$WE2CGIw{9|K 7v_C_Ncӿ%tƐUH1/fZښ =r2;:jуc\ z\wok98W*(^[:9 |xeU;ٽw+UbXa~1Yo:٩fwa+_%)@bDETg7Q$8e2(p8"^aXJA@ο;UYB{JON$ҫ'? 5Q,}~1S{ƤJ\/|5ZtVyz!r*XcD%4qsEwʯ3})<F)|96|}>@ikIkRt RM@ 2{02:`yX<)y J5 3nNG-$'R,c8B5KWzW7U'.ay\ I2r9+ٲŜDUơEQ`].W 52xnL_ghG s?+94OH=jQ!j)-R";DQ*ihQ$,26N|A귔q azw8Ph&MiJa_xja=tZ i(: i@q ]ZbPX;(PʥNQ2G |lhsl_9in+zzۆP@_#,:ED8BGwΒ{6/BY#,@Lf;&[D2VAd 3k}ֻsIPqr*MBṀuK%z,#+pGع.o2!~Bk)#[xE<v.[mJ}_%V <0DfDS˼#+ݓ/3Ձ޲/2w! ҧP"O鷸 9"曻r&Wғ&ǪUn|Jh&v_FKdpY9@ z=iq߷`Eb^T)T!)ץ8!!i5yQkE1R@`B۹%| nV4Yxr5'c1GWp4ܦ, SE˙5,0~#.#) h@KZx: |d*YC_=*U _<|?~!wbk7N+i3H\=&Cc8o%̪D\ܓ&yCH@/Aaj[AY{Z^MpKB.{S1qa,y@On%էKE\t9U7ӳ@;XqwV;|8-lB3IIZ4*pRM z~[q&c.L;_5ӝUP-!+Ez ;2R+'l=[M%3 䧍[R&wK3tdV+, N;YI8xxB .ٴK03sA1ͱڅl龜p|?1 "Cgi7`q EyNj dy{gө%hK,~|Kq]Cu|'(Bǖ@ IGl\Ad5~:(+9=j)0kwaD2-8!t0qlЃO.K!ٿ 7ĎWs`b3h]FAewt5TJ>̽Pԉ"KBO0$r]e&%t;a l&*Ax~Y R?#*W3 S࣡[TXMW7w? %Mc(15!t Ro(N6"?:7H[6Q.9ʈ#Q@Q4f7}'{i%%/o0g}- Մ=~tcqS|l*~'^{XpKNz5G4hz4x]#: z :DٳngvA 96'r9*1dqhhFc}ٽ \*]Xjfm?}/,B9@>_Rfy wZ=ww>֮U Sԁ.k֋Vti_tXohPJg\ 98<6ޜ]^IM9 5wSVO>1.]qPry~YUV XLtDvZl2$)^u6Dob69[nc"jᅶ{%_"zqF[Uo 3/-uy|I6/Jr+?ה7 f\k)hE>KЁeVA{6`%`"A[FϾ$a3Ui, bJQaRJ⠼,5 _YjD0MMєlp)}a3ˌ >:v}|k OR~o:R7\!3#`FvL7#141M=f<1+b||H`*lZ-#3u }nd~-#PXvr=%xCtrᤔ:^>8LxV W"AP,5+.=9/CtBStvnA=x/8sV8@ēV4& Z$"(xnBCR;lMrˑ, {d㙴p2y#~&g!388~7?ӵLK)[; ™ؠ;gLXNNFȗ4V,1tB2Z!h G:E3 1\nTYzt dXVZ$!lBeĵѝ(WPZA ŝltvJOv1Eʇʦto^%xen9z-l=q,דh=$ñPfCPÿ#(GN8VW_6+ßȾKBЂeyb#%kSN(go=d\ [h:J0/w?OiPp@pf&(1YM<1)dן1os,*3/ZF83v A%:&m{7xԹڢ:bElbd-=\&+>Iu"|jJt+ b`vfHл! ?AsHp\bdDKr3D!7J9zouK >>|9>,-!d~F$ٰ.h uz Oot,әzbIN۷؝bj3y7K) .Fv8IR'\dzlp \6[%%;8Z^i!r|يЄZsw[Cc-7͔cJjΞzK{:8z]{G>nHm9K F"V]rBWxszXhnmQ:U#4GU ӭj/} 8\*T4(^WASe^ɗZkI;^(*6կ3J'lBjdOmӝ.2f%Zy)^‚?U UOhɥ6oru(c~2WwOF@'f  K170񦛳&Hpˣ86a#mPq {ʠeAm]< Z -X@zZ>IÇ猽eon Dq7\P\ m:1l@ %[ "átczj`ѧVi-s[v@t%4W @uƪ[o,6֝-OƷ(7Uz#}k(5TljHnЪW'ɭ`` }JZYȔt!uCN(|Uƹ{|銝JўmYD}f۠- fR|IÜ G!DYG2fo|3G,a6G`܍'.9VACgJYyqafTRܼJ9DnZAQ賑҄эY OИ)ѝsȬoÚ]kP=μrLC \9Qt̔ -2(Je:RIA9Ê.$iP}*kmUl,_$6_B4:AfͤV ?2 UȳS`2pG7{M,M_cOÌ;Cfu kjTπhS# wLzGC"XժnaccnPe=8 0Ȳ[nPSyߞ&Z%%5]M_[*<"3 ]ziRTۆx(p+^uOJ>TSڼ'2Ѷ_ZI\=qtYv]Jǀ]$m~oGtKuݖyl^"oInaA$/4T?RNuRI߇_"D`0eQݛأ2eH,=*W6E0G|]wjezdׁmx hɼI-gi&=~OQ֟VHi ,Qg^q(wi8Cs kU͟Wzwkj<%s'jP9Ɯ2{lE乕qP) 6dAw>îQҘR"'{.n>LoRSzL/hQwKlE҅%3-+B8Qó.n6$J) 8EմOWX~b%}}w]NףIћ2N@!ג58.ηwH 3d?imꌲ(os-@o. g^Zme/6f Y_lB1;uO)|ŏNͥN2^YX ;N/YcѭJ8_֥?c5&iC 8 +pgZ>4KO+^K>^Sła帥y#f/A1au!po&!mTu zi8`a|FsԺVc߮ѶЯW!ѱx/H6$KdKel}ɽꜙXb/At>냆/5(j8@tEG\hlZ^>7_.m!B,ʅ2%>bqע``[G(BO9R6gq"b2+}#d- B⬵#ޗ&wVU,>eg$}TMF>y$齆QE[ɕOZhdeo\ A c {'9fXg/КCE7ijk`Bpv[ԓa&,C+U(F$m^U~)UBo!8dѡ"4ݐ^2SS ,ʣ}Al3dÅk)?8Vn<#Et$lG ( ydoKg͙v-lɿLHIJh'hEyB^u'Ux*Q 2F8^t思NV/Y0sqk9F ɣlO즥YB@,\-c93<~*M5^:S*Q`FZ<*W>C67uk'H!wbGpqsS[50vz*梕(t}6˓\bߌ+[8B),W v,&HU_ty:ZCŎ%z:J-GxF4x#CC7s,#cn]]jWtʤ`-~4t/oeGR\YX}0O@t[q4 ˑwYFe~|.YkN;ku2_~-`uj挮u -ɞ;lw~J49Q$.*Ĺu<:͜@ds mÝW,tE`էHeho`~3F,bҡVNh>,GDZA.&:Ey 8<ٻ Bl&IȁT Yn  I H&մHX[ ${B* ґ g1b\hCGOHə nT^G>B) DK HPGVCd(6_cnZtI1i? `]Gp kCƧf~?4vC۠dejmMiα2u9C=κ} |.c?J O[ɼ}e.,DhX$'WlB0 ZixfH5~p^4+4ղ(ͪ1׎j3SCwGߛo~I%(SQ6kaDʗo±rEC4e]]I+Q x`$s^6ݒ JRh3AضjX-xR"GΣ{'6u/J=ElKr_SV{p}}"\PLyv кpKSa[b݅Gfe*ʶH=|/T bkm9s`2CK^ᜃF"(dSjjܥ)Emu!Mӓ#u%wZ. Bƾ&>J~Hۤe&ftָg[\Eݳ#ӌ!ё};ysĒhU Uw-!M_8u9tV:C"yur)M󑜸|%}ٟ]-%PgȧX!kzY$ K9˯iR }f~'EhBB4/?MjHD]Shk0&aGNJ65?ڦX^ j *- V+2?GJDfmϢ*9}wU\ oUKF v ^.alDC_RwSY Sa)B|`PжdfjE؈(w-Z-mY/#&w34!|i7暂W3ԭx~A8T-6i1vϜ Fq巭4WTY"eQjé v؋zWMj>p$BL+hF$J8lF*$^v-+5u~IĂOdVGcd}~~h묏Ra)`;d<0T:/7X8N֩ |e6 > 壏߄]svN;qXR"țSφn3mgab2 G[~,؁ru" PH\@ZMy믦fJ ]b򲒭O%Dme&@H:VXrsSJfg=>eFU-܀G=*s;$߯&f}%CxDpGl#68eX , Ǩx:ٗp,LS ÛS2R8h{rX4?{&I'i[BaGn$D-Ƕ!SS4v%J1^q/=\r) @V7~6K/w T˘YKh 2]kG$nMc.݌f'}+B2s෹!:ah Q{3s5rνj>X3h/!4`7/.8szu#؟6<28WAvu9c.'|Cɒy׊,& WPYM&C.;HC% UT1P[."0Te: FYxmg{֢Q  K U^d䞌@;C_p0̬{cpL7@YSYW&K]:Lm C*b0EX%E i-P@yjYjWCQGb+H.(&p )~E"i<d_9F|Iz_a ~Ɔ))e -c~)LݶY^);dvN LB*~!WҷF/F3rΜ"XUn![spUgNh CW|(O!E33r}AtdܬҩqA;|b^I&q:15V t?kOa"v@ TBPU'^s>ìon==NadFLoyLjZ>I"&ݙI`.!: <"Szu~QtUЊ*Z[m>A:iKu28?\wy/mX^ &9S>Z1̯DS>խ(&+.W0f؅j/V6PM)ō*.ޤr JQ%rw٨)7_B<`{9;eUǀ@ 6J;4ྣLKP"Y- [S&(u$@gh.w[G+(,ς"^B₉%n csbjr[B޳EKkkl% wNFr(RÖFy{q _Kzd0%=e5@,XffNa6m|pj lgɢ]jءzVMߴ^tmurvjDSr7Y iq~JmEKv0W׼">рHoH1ZbG]wU~kӖxURPpłB(puJi8tcz;][6xHzRM_f1hDY_0&C6 ]GwuK_? ùfE6݅*(x+eZΌp=ALI/pE7¦An>Vz7ҔhPp)iރq fȲsc UFԀYDl+ odTڔ~4⣧Vľٕ{L(BEjzM L?g*# 0 L+Q@/s{iq hK-O5g0VE`O**cԋPB+-/ʻ䍁R "5pZY5TVq`15>Ul+ilW՟-k"e +r45:?m)i&}5,2qB\c7zo'Rr̃Ŵ^}фQ'.7RQ ;W:h=Jj'~cM`y0^! "fgW3w#o$6sHH3\ >w&n*>ɸdƴ漐X󑁄Wt,<,Z#|(Ybuo~ y|*KbJHT b atc_5aҦg~v_smi"8_å|8Y%Iⷊp:CB@vGAӰևF>mHJ5߹p}ZId}MrrFO8+c}9.u5W։8;]1m Lq`(Mo W"ِR,=dMYi# D@OT/,)8jL=^Sxf3#K7~Sڢ1Bg/TB'NԪ0$)Tޭ}D(#k މs"}7mTHa׶㺓([duZLw轧p.8v XI/k[fҕ%@CwHRVzw9MK6Vwo%}S@|558E/l@`w8qM{n1zB:9hL]CՈun}HԬ].>AlRu0 ˤi(_}0}(o{h_yv}ח0V'њQ wl FV\/犚2?(K$gT8f4ٛ&y_P VMU?cߚgKJ[ lyjV*^xj&4Y܃`3h`?ދf&RCh,g^}{O:emM9*sd)C2DaDQq='TsgN30;onؗtVy@Ċ8 k3`^/i6p kRz. ^Ӱ,A {αOsEĖ+pϭQNvۦɢ(roXfӸa(jǫu:IN@Pۼ9Nr0 ;i'൒.$S$f|$'8Ր>%iπ}oIcһS 㞺k2LJ+D̃b~-W;z]^ui FAßen8"ePtuxsd%V+*`b+C=v}z=ڦjITSu7ZƃgoS7 m65/~ b/!ʃ' ʂWo&EFM=W5aәk؝ceU̖ynԽ vN7b>7,)_UAj(,W,WWXv<&ŭlw֎P\TS7j>d(emavg`aF Lmb 8LʶF<潵Vқav?$ ^K|Mx{Ϲf~ pn׈G휓T΋QC{t^4Ev!, mn:y^Ot1LZ1WZPp{GFzz%Y{7Qn  JykčΚc"@ѝUQ@ S_qqK % OoXRDH dӮ#GҼgx#*omfm^<m7`vS_jJ*#P1O g$r·j}侪Q .'J 9ń# -U/GSu'Vmi!`]q:UM1**4RwHӧHy!;itPÌ.[J~)Ub\" _$9GIҤz ֞:0:-:nWKk89=PRł%d9ʗ-y)՜H-v0" nx1E> k EN>ܨ寄45=d*f~E4}V?F[~K "`_ᝑ ӎvd8KU%u^a frGzM9z ɏ5ݢF1v,}X޶_RSBY_A)yϢ'pn_|NvhdĪ300*k,'"S!"JyAmygpPeT]DABh`ǘvM=Ӆl5g_3mu-Zy AVcW^ qƚ9&] z&/^P睊:7=)ؤG:GM]"r &mx3p*q^ts CWn|W?a mO][ E><+*`dn?P)Xarh\t+tHТ/z%Aee(&&p>Du~̡ØB cA TBn\ź(wC-.vAuCJ9tprI ̓όu MUH7pʢZAsT+(qD QH9Sd~:|AycjM+dvղ])Gn`jWG(^Uۇp?5kp_."%X8  1K jǬ*c]q+^0-c (q< U:zx7`+E5*0B7M|Eyv_WYg{eȩ:l!j{B٧O|4&T}<1kLш_Nhc:8y2m _In!)t 500S] ҐKy8P+V>Ndܰ2b΍|}:a"3˦RS47u^ p vkHq17%anA%ԛuN"e#~:<>Cv*1ƩO+r>@/xhNy^\|H6@% NMLf#78R[^CmK|&G ;3٠bĬ"Z-_o؉w =laկϙ?'/F1%=l? T9yG^@3'c vJ6FpJ>튉-v/_ "f$u/ɼ2Zfmjm№O Fy9LN[8e`b2>9xY^,`gd+i5]g.,ئ w##NôYvL|dc~t3Du䥥v*`,8(OTy(_= SM%{F|U`L0TC054ٌj+4vFDZuG*&v4gM1P%錀t?a&[}RHkx 1(;l&eA.L&;`V21+ -Sy[≠tOjYlwhJStc +Ao^kȷ/\",&+5\%uAh2]@}=1R{s[Ok^6ёޯ! --^3@pn8,S67x΃F5ńdžfzێ^'de4H<$ ?Ar}EhH}q2\zIH4Gmqpؿ>P(+0,-NJ4f0g ӦB}EvS<ϙz&r!:rO$Cq<L!%BB</ԥv_z;vo`:8ɫ͙^o_vS?(U@ś}o[}dI2RX4jŨ+U$Iy(cά׆QE6n \;ebx!NgS|nJZWM_ܣS?nNt_b i<[08#02i8σ V ]V렵?Xc!Z!?rYj&c975UpvVb1 18R d~y*Z,"#J)Y%c %4X$FZý+DBa?[tgWaA<9KS}7Q H:B3ܧ^\&0>{͎L;ÁD~sο 1 Xjk 3h"ZmᎥnJ'ٜ[wfܞITI_.j]!T 96J^Jbj9q9,|RxGȾߌa]Rħ_=Ӎ݇qNzc%W37ⰾJAy%SԢVp/SϕFDXWɮ @85ҹΌ "XCit\, p/ftf/ SE tl7_=OII8Ķ®VX'[%Hj2DP1Ҁ-r}qz@fn"Q)Ɯ HZ7Pԣ-۾+қNCyU5~Ыif"ٗ^kP֑r ͆iW>3%*()9k1X3|[` )yU9ej: GG j57o}YHhx?[E*rizc(%;ZȨ}ݲ!HfyˮB*KZ\w? d}Z,z>8ſDwHizSOCOg2#ꖖZ3AW˜v=/D8ɟ6]R@2IœB\$Ns՜(S^A擑4+OU-`$ g@~ݡe.0/HS 9&:-h»?5i{)k"rldA0YZ +QTfoqL,vZ9Ùg:F@K˥guxwud15t@T|63+1MOw%/k mdQ{xBM jdFc5L<ΡҸhҀn9. lրpTIѽS< ,`, Gf5MޖSj){z!eėWtEʫ7r?') ٩bﱐf;6EPH kzn|~)*&F@:V܄_Ľ^'| e*kt1ff7I(߭..7~:Bh#'~ަ->~n3,X03[_kЊZuvqVt7NH;M,.ŸLb݊pXhdf1~vh s.u뱕P f̗| `VW>@TSKsf@ʆN+Sܥ.$]:ͧA8:ݪO`&ɯCU+ M !K_@S;⚓)#e w-|hpz6At9"\=q6Y>?_Fx/פuB-]ơL*HLx<57D"ľH/;oTio*7) AQ:#=4}L=][:r FvstS-RJp >}7 B@C!)TK{'l8#rI`ɦ_#굖;L]kq:)x+s4”r]bNHW1_(]U{V)-H P%c=$(+w~KfW( [{Qi*K)X# 9pMZ~׽ju|nNw,a '^T6:ގ&kffa'DR?`rFrα]OҵR9MjIP iVynh}U+W[?AY`̺Q4j}$ Ulꁘ) uj'ԱZgipo-RB kjjfcئ8^5!KeO.J7"*6P)^JbW clۆWC`L-+zry9`ҡA[)ncfqh2 .Zr%v]\* #63?EJB$m}0pٓFL=upŹu&U2>T0cӏ&'hKyO(pJ RruQ92h1?w6 R`Š[Tҟy2}:]AOZX|vj&ZW~4Sc8-%uA S䝰ZlUh0ˆeHfX'GjAq'd0;Ega`HqɊE=lrpz4ٖ|k T>s2m`H'Vx[j+OXT];5YjNF3[ aQh\żssD?QѢK1RHڄQ_H3](-fcN>fs7쫲1E/Զ*qb.ѻYR{x )M(x7C 4VN}c^{H˛%Xwd\G_A F%poviⷓk|8zx)1ΰx:$_Hdתw;c>0؜^h=_k-2͵p}m݂6BzH]K;\_JitU7\PnOZ?VH Ɣti \ْD*b _V kCK&;勘Oԝ+exQH |_Ekom %T=*@xأmm ~yvWy4Cl2tPK$C*G}op&;YTtieӥpՃ9ycT+/Z^dnbko|ߘr -<߁U `ge7BȦ[O0!,x4 GPEю_2|F4CnftzJe`XaFmZy?OY8[pU mF־׀R ({%(e U/d. "J!:C3!~aAi:5z#+"#n<ň1$\Qĥ>4잵Y\{'G:3mKYJ"ߐX0-U L0A^QPJ$M vKE9A9g7c䡳;(ڮFk?`Eӭd!MF_,LC`Iح֢ԄS.Bfw"ʺ 4]} y'%-$ha mG1M@=b,}]%]0Gߋ{iuez&M#펩T`k D%Ҧq dL7dcѻKnG1VpV-ĉFMU5krOŹ̼S@ r{@$q6@Ca|'?LV4?B7 k#p}{%4[ 'z4R+rb+TbCd,EuZ<X 0*tHԊ62x)hD8).y]_b"XG¹uD񺦉tT{5LK`[r3ᖊ;XiyA`4~8KD|hm 2E%OʣXMYg^Qԯ r#Ϋ^5 W%?>ߎ @}(=Nڨk33jX:s63CDͽA@D@z,刘$N$$w5܃KKM+=cVšoߕ>}ϭT`#i_D=~i 7A}OpćZod30I pe3g*>aG|=XO5FR.#]x)؎=)<);[&R8vF'b=&a7vRN|+OLٜ[!ڤw#%oЙ˗Y'EޣK:mHN0jgȭn?\Dn3-:v{KQyvH b32F}q֫{tDlvdۤ 0~y^Ai0q/u\>갣 . ;Cp[ɜR֍4=v7y f[UeIpm!'1^Wiz3ѩgqr.esP^wm*]$RʇyfV`h#Ъ&_2o{T fP7{>*Hq8fZ7e7IDlMlq= *b^U]Q!"?= ܰQ] &+ǘ _~J>RX5e lV45&#,WE0w!_s/ <1sVmcskJ",[Z8 [}M{sd ,oq\u ?lgΝixAMȕ|]DBV"JeHMPdE8PO A܌fDTR 0L*ao-m?-74X! YP{wy4m\)ijl IOä PH,ƐKWw2,nEԢ Geg 8'|(rO#]kzLe)r N%^(Q6:,l(x?g.NZ9 Uvm  '^B4 ],װX6c,UGBo{Rk"4:vǪQ~Ypί:݄L}ءԚ6@lB7ZT b*mamFl F/I|"]9nܥ+REkrMwkArOrgG [o&)vnrR$)± =S.oh'IBS9K&|jx{1W%,k}̏NU[ρ^5%hM⯙QRХ95\@ފ|꿥3B4 ՏzgU}a$8tr3:`3^.l $FPud9aY* TQW}ثB I["qQ3%z?ֲnȶ]LnM8cO OZqx͑j`mϤ&TqgrX[n59T<:+迳 ŊC;g ʊe"HZa2u<޹xN*~Y2r)rѰ9pw\Y# buL#ԣ'/Vfw#HxXH: s޿ܼpb< #GomQupR ! *U8߽xHJrGb-%HZߵmJ{MՑ\wUXty+\y݂FbK ;MF.G ΠxZ(l ?>>߰/ā%[ǪhN*S´V斳1Ѻ,tQ/$ \CoЌ qYIzhc, #b:W%L !L}a|45OܝqZҿ:BLM1ò37Ou$kQU8'(,Hs'fP0s'dJIoӒ[\yܹfk-v.:jx(Fa]C B >vj)Uhlıø 7(&)9odJ1 "uTFHih]F!>GelNqa+2C$g9Fq3zoփG^bW(!(ˎr6@Kȭ/Sh>0)NAP)FJ,N}uuԗOGe{vr/WN?V]}Zi"BGx-zJW٭W$"W<ͷ2oVQ(Dź?fdaHGӬ%|r``PF i:ٙ@LnZYNqYocNfZGmQX"+bX÷yA/lbsqK[eyк@<ΩOT8lUAE~T+!/^пSm lr\?ju;C1c`h0痡h_g,`wXb0R+^'6&y 8s kq7W¯0%qhCΊ41i- (q3#OOQx#5e‘UCEv?5jQӓ߰Y68^gBx\ \ARr0Dhtt%٠ d1=~Mx((m{f ȧ$qmnp}:7riDv"1;9 SGV+/ռَ3f:V5މ7&ո Dx^U<:YOSk!{T)@5o{y@~ q; h7JofJMOpX w~ug wT/5r6:is7Vč\'v__SHL1)뽍C܅vG(PJWeyp,jS\ [C\2i}< 0ƾ0tX뀄䉧v|Z:Rj*,LpAg @CY3}CP 'MDfĆn_mҡ-mV^|(?ӹG1vڕech>1$u$%2{` @4ޜ#r Y)j@x>u07n滹tSh߅J9s6!LxOS'w_a-'Qz56xOQlyGYA%!QMSgXGeX.u2cP:*NƤK`snwx@ DXwln{Ccg8i~0,$<֒߃aC#>-N` ɍJ| D7b,j2wZe}-pE԰- R=0Ye,@5fIn 8s^`Ǩ븋59..8h-XA5a LЭ]pL1gwFNih?|ac 6aXt,pA11&eVNйk \K74jPlb0sZ9r%[nH, s\aN8V&IВӽĞ' >SS Z¾ Qfk͸8x- ^c, Ia g:5h,d#=QN-eO˙<+}qxhb6ށlRȮZ8pb=%#[ߣr X# :MJ 큗ꗔa)(iϗCyX\y,>nƉld"l݀nYў~U-{4Ґ,282G7VA/FVu_RNRQ[%6Xsˤ`>U[y-+9l)?-崐-Xj6z5b&*#%b܎7j5Gja<׹Ql!*=Tۊ$" h|IYwvop35)cz" ˆlJ-a1ΧKkplwmb~[.4m)NgL -2ti#u)g>RHC%OmcpYzRO!y~nq1ױYsKe6fyf[xՈц* )YE5 ;혢 8 nX(6]Ԙt`􋧨3Dd[!.զxʈM^CrccRa? 2keR}o}3/}ߠ~ZY?9R d VAQ{y`qɉ9Ҏwy?.uI켐ksrJ9'l楌zySQЃnXS-`_0jw=UHrd$+1w%9?p p 6F%Ge^ 53IDMo 6r"sK4yO({GC0蔜Pm+bcV,r묿^xR5k^U*v$Ƹ t`+S1pŊt_؏F"J{xBr3VO :0*wK;HIaXr,Í{tc0m2 hñdR $):tqtWb0'c@~孻ܥkи3'=tqchF>tA <Ӕ,2b$5eMݑN)3^%$2 gt%2RՕ*)S2D7R3jRQYI۶_G+Z3E[:!Xy Y AKԮ5$mkQGJOE2D QtGGB~Ǝ} TVsdXмBȉ&כ~&ݟ[3z.@{R!z.vI<ʔ=5c1bQ7愈ўmB ϗ0o#8.ٵ|}ÝQg_ٰmjM}Q}tK]^5{y./ (m Q/jmWW7І[t3ͅ'gS " ! WÊI LꛘL{C޶VGqf0hYJ+z ȘȱIy4dTՓP hm`a.`V9*@6(v(o }]=arx݉[&֘¦ҧ -nZM!DD)i3koel4vҸVLL^v*$p YP O*V*zIהAUG}GZ5~\! :u`p0uOcImX39^K3 %d 5& x4zg#LAp&O& s5B|vW=>*o/}uHr#LwzYkvBQ2dV= QM ˗hqbmfBV8P o: ؓZG}9"ڕx <`vs8,LR}H%U4'.}7`^I 4-D<m8d͙!3r#guI]H Mw{UrFTH=8F¤vi+Y8=ӴZǻ̈} DRH2Cj5k;fe=_6&&e) 6j_a] "_BOɕ2ӸȕRZnf*KYQY#6kƉ Qn9 }%Asɹ]ݺw|N6`Bٰ)`E]R*Yc6ɾcWw77g_#$V}T ]t>/;<:-$H.`}0SbzRȘ5=ؿ'}JUIMLϲEg||JSW9܉?¨ q\0U5X^Y 4DTkI.l{s9g*|wn'U1"N?JQȌBu?pӄ~DgMR l׶7pgkkR/`&Q {C}#l@}ek}J,~)Sq2NcAȸ(f߻UhUVv,m:pa-ϐ,oc廩!u\a/m Vz$>3+*Y(ʰ"C.,Ew7V<ࠋ<0MlO _Yp+fBz#󎵋J׿AБaVnGSrRm$~8 Gu}wRYJ&k?.\_-L1!С2n8C +u- ?5*mP_@޴knd{A@$PIN0FQ3&Cr&7(>H @ڰ#O" SKCЋC'A/Z~FW BrZy s,cD=(K},yS5}:^8Cy|ZでRJ:>f1E4;?"[qK2Vo2zaVV<[5:`҅K*&L[?y1A{"!76|+ˇ]xh}H5>r(0PRwҙҿz6N1"dݮƨΨoz7R؊|n4yR^R3 Wga xg`# '⒄䆘݋X#. u(z.MIї0t<9?]Uw#*8t?Hx/q Jm^ ǝc݌#\V3޶$sW++{)ʯIrefp D{S*z} i9 hw([\ؿ,˟W~% JZ/ZE@Z  pz9k"+&,t@@,4(4 kDP|њ_pCe,ֺeTWAz ntL(^he| ∆5RFף~  HjW[/Mt'*-12ncI?\?JpRGLϋ2q:a)=Su:W2e] !7X jܥT^BJmc{ܿ?f 4-AyDmIoeϚugWIwHr@xs'ݭF(.(K[pJbHWXi>(0oi>y:ٖiއ0b hkfc kR݋K Lci~t$33j鼂cD:I-To8 0Q )W d9倠*fM%/Ax;+ӮE}7Mcŏ{oxUmBaQnk%FqL/ 4IJ'4^~= x+(ʉ.@!ROUXl!qI]EaЮ'mV+6"@_ ϓy*,׊ dLAwG"FrY#a`PN^QsZ}"ui 2)̾Ka+*"Jj,S:Z*S{%Lw`'g( bNuP3ا;ٳ_BG]PA 0j15 X#x/AtP-'4O:>[eCw;VI''rB)Q/^Ft7L!6 ճBsS UUS\DSB.I̴ "8`Mm3PdTY0|Z\Vm]r?Ȅݍ^5[`Xw-t M! {;HBjŬ*J&~$,aE.Xd*8d̯DYQwu}47M`z_/S2 &QHR/oF܋%Bz(=d@d`j/ALՒ^I 7J v uejryHj0L8lhz N1ou98K\=$Ā-'P 鄉I^, R~&bgfڙT284'{LY H_m E| Yq>%gLq4.ࣶ6\cvJ4 ` `Q…Nʷ`f?Jڻ{lb=Rjo(Zk^0ߩ%;Z;xĎ}]#9BRjӊG-?;/b$Q}S^UWA$PXD%N¢twυfhק$  mkYrf*ҢwmCͣuW0@1QZhÙ ӻNB;SĆ8]Y_2Q&]d:m0b./zD*]NdћA0*$SHDSƬc?]t魀<8pFi`T17A:^1 fHbuV )"ޡ*MV Ue4Ci~+郴18vn*JY vaI~!`t|vOn3K}d"10KYbYqU)or8IA>ffEw B "Y10@J[xy 'o`o$t̠o[vLܯI7/f+*~h#R} -΢1@oos 0|db?Οٵ zn'-=%=f7] 'Km*y){#Zxv* G;B3PI&+ͰM1V샔kq o;>|Bj8 ;[5֝{N -C!d$9⛴S{-&iϟ *:XYC^lˣ&kl*,Q2 M%aVq ~`?= !SOtG7!Jb/y Ij -t$Xl෾5!ݑAF/F YUp7pWfl-A@hX=ocĬާ4@rj{5>͛y=̈#A=8%fzۀqxY9 E.D(k&2$Q!UuV\'b@7,[UIEvbiILW/C=Í JZKu_m$ ެD;B L]#.~3_R5SJV^j $ zQQgG#.U۸[ \+[&I $V#PߴpDfA~3 &gӛfo%-ACƠoS79ݹ.j$]bVjM1Pzm O%) *q3"kyZFS\*w'0~lJNX^. Pq)'{,io*-?Mw ]B";zR:u̧Ll˦i\ _E/_$lߤXJvF'ϲM ڈڬ{TY).ej/:Sr? YFքƬVద I`c$&b],Ս(ǻ`GYYԮԶy`wAkq BTbQ`$ }Jkȡ4;q9Oe`cSQp4*vY>trxX122_]H~lG̚ ZqEǢ降MSW}$\*icw㠐!&o}C$סɵF 02Z c!>wNu}Vb*ԫ)|㫯ܟPc{#8ިƕ%0?.|b#H+5*~=bT|uܢN*oK:= tziCA #+V74AFz CX(ބ,iD3hrڎƶ)4T=/WfY_F8e:^*CRT# y#:gq+0fcq?Ai&M[bŶJΩ re[3cVi^D0te eL&*~Ci""E9m!bYr&ݟ!9EEg+yrx3sT4_zubs&a,8 Xwj/ӦR RAasct:6iezkJ@MFM߭Hțm劀JYؤ,q g.6ќ+iw͹+%:@L%z&k|}RxSelk`ыxi8`:TfS0oFh=*hX} RX M_V@< m -$[a|S,6yPepz/Uk-~ρ!iY>C5XF|>Och8/rI$?NFFhIG[)]4iIc N~3m}tc.He'Yۯ{yB?ygeĸRQoXhrvE_;B ׹!/i4 M)\5_5=Id^3"!8iVs=9&O(V02O 06weKMĭ? mGrqDu~cX"ڡJb_RH5O USCؔѩ[wS^CD;iV@!pZc q?B0D>xaa!:6n2ُvQ4}O"C闦{>?j4Gk"sV켹C´T L̕@>Yj= WKq}IGMqr(s-lՎ8C΍_ݨLU-% #vC\ Ow1~_j#R Se%'s(.>}ƓRpWagɹ1ʿ uuȶI[m2iSr2OvmIlc 1* ! OVf?R&0hSˣcAO@Kkj tYI*bΈ\lb\Rk|™Ɉa3 _,Y{(ޝ#8fAnbW<&,~F'D7XЊ-z*k8i̧!-);ttNXtm fK11 xm6\gW'd5bnjZ)1{"kfZD U,3fx,!8' w>"H1nJ& XN >%OC #(`b n7 ]$(J&XG7nuح0#AXDp餒p$lH6ЫwPƘ>ĨJ>hQivOJ \jiC$m{OBgUȍ94rfoK[D,σ&0v7 U'{࿯QC h5OGZj̤ @VuI3 lЁO(tܦvpTֿ9͜ R=uL2o^j{rsc,oFeVq<gZ$d: ǕܠXJKO`U[fjBjֈJuXۀ_On3d.#N@*2bh1z'6Lg~! fna5^~faƇYVȼ*.=](Y ME}U95UK.UyFO ؙdŌPRX mj&NrAOCjvj#6Rf]hԑ+gNq:4.ˣ k:+m x{|0nǝuQjqsiBAvU3bU+Q'oh&A1)zz[^!*$` p%oXXj{ykdav2:V" ;? #,IPؽr7\f.;l 6;vIlrbNEA߰I6ʭBɞAjL{)A S~i18/黐QP`<ٚjAǟ9mfUn0"Lf ᮺ 9fJ/@K;BpI[aEĽ{Iyx4 I(Sϣ:&&L:lR5|} ?/S2Ya/yӠ ʑ_rtxru[E3}?pMLMf wI;s3v?oxo$r ,wϑ\]9~N3xy!$"[_ep-٪*Ea$#p2Etx,@i5jLF}`Z/(_?-_>yf~Cn da{@v>YACI`&?OK%MŷWmpF}#bhζ1O61;lAD#YJ2l,zRƖUh[׌fડH ~?\,ve핢K?!:q]W8=WwzüavG@_(FF/'PM1d=hТAo@4 cNi:,k(KK\8}#.=-%hA .<Ɍ}ި?1iLٟhOu2#TĀ,tyS&49R G3(=J>c"W&,1Rd̆ý΋j8Z7>k#z)\p􈤅\F;?VIH!W vGamo`k u/WH.sK%g+()9+[akJ輟X!PvQ>պC$Z<%fh u]N8^Ι>%mKQФE/2kn_;" 3X#K@n)-z]/D:@3a-0~F@ ?r4Ւ׏Qcu}B@ӆqqdvt,#98ge">əVpgdѩ;nV$9B\P(o3I2 2ߜ${uI m̷Ez7B߀Įҡ$v1288zy .BJtNs*&)X̪"S˦OG߬T?RQ֓Gp;$̱~:[/P_#ZXEf<0OaXƬ8} D ZvlDoSE)NވId+CO7ܱRAbb!c4鮉ղ5p=qD Xa&:Y3;;;ު̡IXvG! ^򑂿&ÁMOHk_y*X/{  l qUԵ؏1h-F2ՓrӇ :['b*9"!ai*#.q eu#Kt _"˦ͪ"t ?4P^np5Yrn d7_U *sRecڱPA:oKlºGF>]PgnVߠwFlnh՟oU P6?ZxXHϪ?%!fMƵ 9ѵ2'IX<*kdAfGWP՜=B܀ziт(zl]l֘լ!k:=+M[e@#n*Zz(%)GEdGfb!Պwu }"azFߨ`.we!RG_5 a1ez.Q'vmgk`wL`T^/Gc2UG1bYJ)}XepmjGA@#ar딴)~Iwns՚yϝ-&8 _0FdexiX׋5L }((1)̴0ze/ ?KF>yjxa`Ct@9 d j!{=ktTF k3aTǰ"|lv zod};C~=gNh=! N2tDUtqT7SM޹XtA63 W\$zEѸȿcu~ё`׎A>I/fuG<ߒ"2seO*p.5i_(Ti|c>9ƫQ&/++ ȧZ<1M{ʴJo~OΧF^΅'~ni پ=Spu}bHźwf4@ˡCQAE҆FO^$)A_WJp\-8=9# oM`^oET5s!([OmDT;-\W*xjaǪ,3uFOd:RWdqz}l MMjgˊsQ|K.U"FRwӘT-3Hd6iJA/2ڒDm'  .3:G8BC{`CEW?_plad KĴܩ~д Cm~S98@Jړ폄;L-='`}C9tt_l zWцD^+[-(TS@pp@d>('M (R)5˛А[o\{۽uh(QD6(3tx&!D&КJbWrcI9E}4ydFX>OZpzG>%7=1ӄ;ٮi#`EblƷ1IeZ)x8]{N`AGٮ:0՟p(bMx&Ju㼈k y>*1oŃS a ,B+1].,Hd)A1NOð$BK\2!2ٱ>7u57f&ɞQz#E1M2l!ְo|wOk%UlyiFʻ"=s,/}Yx0QSBn`NEvV 6wH4;;D-823](K?b-9eK"U_}wAEr[Ltqļ -_Kc)Zݛ6̔F:KMYk3gkC!YD< JmF\c7'Eq67#? /[y` !Wנ}p|dS<VAWHC3uO@xm DpH$3x4eT9g.'F9P{B'PoRס'J+9NZ:ou:u6ֵ ZR'K`6?4OzuT,p?3$}Wכ %]vF(Wᥲjx! 5Rjtچ_:{Bt2ŞMQOg|ķɇ|<6_ ]nSTg7ל~ JŒr:ۢb*0U&='PA!+^g+4>Sy `# PDfoG+#v ``6A[6]>qLsisf*]i)1'5'ђrS#DK@+kzYTVl%:V?_[qCi-d|5F,{ Cϕe ^{qDIAĺ w ce pG| >TҦ>l-MBj~P(5P& [o}åjm+f[zZHԔ1?;]rr(eWa7x|./ =X*ڗ 1,&>sDbbL9w790>.`Twsu> a9f|Hqcv+hyty∙ryV6sFdB4iJ_5Dž.!X釚ewyc'W]iHWǨ239}ߡnC.FY ϼKR~w?T8۫Ć_[7* Gk mƙbe}9vjW^ !HNvФǗ>isu6޴3^ge>3Q@"6 T(!\UB"iNjU'ȝ&qO:,ߍK)>7+*-JsK䔍QeK\ZlYfs"YJ&PVvRR P/<~Y5D vqmKe{`@ 1]rLݩ}uu}+$ct>A%y=ΟOz QKj<$>8r3ߖ*H3ϬɥGy6Xi2 f;jKm,jF Ƀ/٥emRp.jyvvSHyqR'~Mф p/9kCX͛Z32VGS*ξfFL#Vk:~^yEG~0)%Ii¥-U7wi=+Eў9=X>'7V%-"!M8ʋ0脀!uS~ .A`b.\y=gC4`j<{e, 1$TܬiѬRi.DX\en>Y2-98s㼛|\Sߨ=owk/Q`iYp^)b4ek<*6fSs@^=Fu ~lg=o8H^W$,VPm0x̵ikt51\q2[Ppѱ +ܓC&FώcdI(0@K?߼ΔЀ8FLaIt+O?@&-7“.EW麠J.b[đE}'qz,Π\YD*2D?b8O u^d&mw<6X 'p6m!I: rԕ]sbu@QyO6ؗ~Kɏl1r0X{FZ8 &]{`Zn]hzˆ!}_ bt)=Ce5ӄ]NŧϊWa|̉X"Zݪƾ䊘߸c5 d`a`TMb4U Ra0N.e-;Q;pc,ըu#i(N;X]tN1f7=QܜlLGع@ۉ˾ ~T6Ae@>j_]Zd~9oQ+;!H*_+4'V!D\"SC.Sq 1 N6{t֨n*4k&ifz"Eb)W7d#G-إ%fЍS(H\!#UGqJ)aGsQIQԋHQNТٍF?jHc;u|,bb!uTcB1񯊡ĉj v8Fsb|$pnxEJ#t3⩿Ս+沋 0Efq)tW`vba\t{~As-BKD169O!;pqہ&r2LUpAoTy[OkcfC~gyO!5UlƯ5 ̔|"]%1L!h͟X^M&Tc#fbss\E!ZNd:w:HGIV"׌ JCkA-v0w 7>e7b^>&puEelO-kְCHG{7P;)I LD|h8E>8&l ]|M,uv\Ā ~u!H? [<]T= ҇{PM'? kTeGsW @)?b C:D$*3tUިX|d4*K}1pQ؋SYIY:w+J~kd@RjK-g&o}RB&IZ~==k,h_EjiUzpuP =v5j Z j#9qG`T1L5[@mNnY G6s&+{8:S5cP8W "5E|V@D/سȰW}-ɓ)d+ȕnԲԇx>&8&FM~]ur|EVjOһž e2Kvc}R12fqJOI/b䩧YGQ2^l4LMүv6"\MDi[vZIj宒X@*UŌ9Հ,Jh7 \}N=u8`B'~0_ 2rlE@FMsG7DR1.FB ?\Q3 Խ4>LPm];]%f(1l%E/P u%҈34f pvR˾b ܯ @uo` 3ui1Vy.^1Y@dUU 6X."'zI?pYˠmM}TVh޴ kzW|ul U!c2 SM&( qdN?h0ěFL2>h*:]h=1 /oȂ\8 ޕ@$22v5VIDZOcA^.\"Ȗ)!C6zCP&xSɬl.4q[TX O*?ف/18ls{S(,ޕۡQ>u{n==uPG~mYRMz'aŵk8aMO\ HNͤ X3Po7wF8ٜ.hii5K$ Nlm8=Z\ma;.tS@L 9x1 4OfαTkgKIȆnJj4Cv]yyʂ .[~NNBDNFW&I05<ro[X/JOA) "{\Mxh;5/.?^JGFW}2BA*2^_*w֐RՎ4!2,³-d ̽C,S3̦4L:~^l93s`F)`Y6YLu15*XAHq~K}9*)ڌt9tVTr>N߷]T˔/Oq$ݔ}7VR19G QՓ>, &9rzUf^n>Q׮@xP(At(5t%HGA'oQ!`UHDnpyߧZ//7ӷk3u8x-!TZ9pn'|vg v[5-F3γ VWtG㉰o/OpG]dR嶆-#4!$ZwQgfPv (jZ_lU?@ःגZs{juңr) ,K {_Wxk dqSiUvݿElji<˪m',ۏ R'Ey/R\ 6cfD6309,.v(l&G4 {sTK5knT?@@<"Sf.q0^Mt&L7 ҏ}~fXsF niP+GoV5[3_ă96J#f+1 E3=)n&qj߅mQPl`_X'NRJU|ezŒĩBc2jZF7,*̀p,X16\Uq:*б3hq)q2)j3 bvwb'{9 ӴxnK>il]L [>,'HhH.Xhy[u=4mkVg\);BY"Q0 yy\Y Reާ5fځ cj5j7;L>r,+.ܿ=y['"CY)[N$scl^;U:gk^Fɤ)VlPW#O:1yJn6}ykxur%7րvܐrRqXX^ ~I1A"'7]Ug5ǿs5EDOH%yT(X6vjQ~f#Ė^ޏg,IXԨYEj+:*C.L& I2 Yw\ݧ:5ثP `{r[R_-A~*ގU:|FF2`>@;=FN!޿ SD~XǂvT8oV CyB#q-!'b픪%Urd!Ôu?bNn?(1O ۏˢ2qT\PU:O0Ȉ_o=RQwl^.j)_\k6{2tf 俨!9˪0{ ̀ue37HZ2w?idHW#~D9c$[E<9spHVЯdBKXɂ[oژ-I.D! UMDiD,IYΗn?{*B5:|Ab D]m R)e ?1'虊c3- ӆ=SY,"u5.R/VՀաHݺ8d&LP{ W],5?(ʫ=4׫R]1Lp.@{> .1v f@TFC#2 vbR*x^UM`˅t7OoxK-ȖnR`o=)M`-߽t@69:/'Qޢ{uCn$ʕ lg!ZƊ! D*R?h.k{E$P5!f%z_=1)9g#O٬FW&5aE 'd@Zx*Fl[eyar"4~Zͽ!~+­yi^U@4:jd~?&.QE] -{FuYgFW$\l׺Ї2䞘0l"# 87eG޵s{BN8qؽ 61¶/|G~Y9 &P%~i~_xDWxcՌ?RQpab$oq;VkIӪ55ayy'`H7:^٨^./;l}W߾;rL9[R,0e^]&=F"MO[ 5mfѬZҌ7? bUCdgfSбD{a镥k̸߳# O;^8eA>D [ w%7g>K\<>=kgaLP#"&nnA6Vkګ}J?9O2}-^q:*UY@ r0#+נV`XڃVWZmˠ >F.jx=5dySyQa4 M8?8$Q3DPcH'JILG'^vNeL1v'kgE>(7lS 84}$l8k.TΣ1T)@&`Nc^,-& K/^j{ȿћYC]jޯ! 9?2%OLWy+`ee~' o1 `; -E< fDaD<Q/TJ{~1Дƭ]-Hktq˂ K1{#xֿd3?,a) Lv]O af_7c9Blj$9; 4`@ڡM}6odoKĦ" h@Ɂ&ib<FDO1[!$tF&k8PkNfy^DmN{d~FIR-HiLōnPǔ3a4/Έ‰:_Z1һe"N/4z'+TLCgcf悾0 ̂M~j1TխT۠Q*s|9L|>XNo|R>ȡZ6>! Ӥ3¤^tl+FĴ79}g<B /S8 2]V*?BX%ݤss|`ݧ/2i{aVuE0K꽂&V z?aZYa(GyXFAN ǔ8P ocyOK j-l"yB\M*][U(N)G4Y%` Iuhq3G>~okwݱ-ry;-rO UWA!B R߀FbۧYR`*+ϒr0"lJߕޚr';ff4sq!^և}LeUh9j_C͞ϐS+x)\7>/-_wJ90BVƴVF,h4u'[FY%V+׶FQ.(/{vnȽr!#܁Tku-wKf*J~9[${e?#Cs?Pu9fk}, Jqd5$w7=WZždvxǔ S4˧BNކeQJ9g%@M%M`5GK$T3P >M PXM[7:{=:I #2/eOS3K]Z,| Q+] 1TW٫]R(vc h<*/3cEwp/O35$Ͻ| ƈek3)V*^syThHoXpwR;֓T9lf,OG;㿉&q aC}L*)5~Vɇٽ[Qu-we+WzqL_e9%Zɇfu"qH9LU5~ly_[Z۩7ze"St{6 |\{3\-a<|$Un`f˩cYDlaŗwd"7MXeDWm5r!GbP~\G!Ӗ߰d$%G)h,Xb71Z]$n4bYm9ssZt+5bSHIUNi8}%ĀsY N>?ق6Vjuiϒqd ) 6 n58Az1up Bbl w0)Tj Y/roQ˘ҫnj' t' ;k(|&F}h/wK\֗{v|%5 ]x[|&"FVDc7UõD:( ozT):n1۟RtǦcn ~+ j9rSӊz! 6aӓXdM1S]qFGCHypء՗PĻ֨coٜi]~Sd$ UkJG_,*DG֓ T~<2 ˟u;c Q|UkP`nm^[B+~OU,!z̪W `mqLŚ2gX,פ܈MqpE#<_r]>=DY#HGj6#v=f)sm#Q6  {Vm[=C0MtaHy %7OF \L#.-yUuz I<*z<5VEC#k^<(ɷ2AOZV#;X &9i~loU]~(u®L:Mubbݪ Pzaf'ArO1_&_x:\59zqjP@JttBTep]l^V-csMLH C,>y]ɟ1\]z1>}MSJ+\jj;pk ׃w] }b*dq[ٕPE{mcf! ջu J]gnfj?yۣ޸6\ѫH<3Ōc$@kC&1' ̽=GeL r@Sc8)1_e3.p6SVD1g- "Pw?9]dD{+vf4 Rw=}P_A07p80*Jz|q%tR:mOFU#(,Q!%zVsk}cyꡢ3/Wg@˼E`s#]tIJ !ba~ͺ" }A][cK ى|x#R2ޯHDB>ǖ턤9/ T@0󚙩U,WZ @T,\{Oָj@xu.wvNK) 3h,sfV%$h+ރJȰɠ;r53(T`xyj=UVRp\C:d;̂)ؒw N]W; r*xi{WCU[tɔӊo ~|6|?mDBX9$k `J WuȶUfqTc bֽ\́*z>gI9.yk,4|ra S8W{{Y w TR(ڄ^ LA4Qڅe.XGqTSGmAگ8G(u5tp3v .yxeȪp},GQ1NJ988KHn A .p@Tf[4Kp#b V2q?w9]HIGي[h"-;IJyb1ld)AkKPkZTpAq!/Df,~=Nix3~U!q0X"`S֦ٻ(5A A]0wa:7E Xѕk>ƽ]4?_Q\oS8u+ED]„߿Dח - =>}8ps֪#jDèJwثFH\l'0tԁ+]X{5%g ?/ZZM>y@HszXOIH Dw&I#';XpIӿy{Ȁdzo'p8x;@%.$1y df0绖ݽeOX4NΑQ]RZ׈N^:TLͼZ{Z`Wmډ%r Sk+d[T a@{Ajǎgq5"3}לReKx!j}]2mib" z7-'4Vi`[I' 4ANEȕ.6FK2Zk}JRvsɇHIMA.F@)SuR7u`çYpF@O(#?f,$7BIqd4B2#W(Q.{ QS?J} ,Êc7ZhJ+v$ȧmߎp \T(.*_԰ML^(#=sHwm"BdנNݹn;[:4J%χ+6CB`mÀS=cP?r7 ‚:Bb :QT;YC,g^KSNqulۖP+[RؓQ 12(LcK)p|h6HU%unK!P8vϻ-+I8-yBme" Ͼ3zMmץd#-$%e1<}0'!?paZN"@&9IZ IQ͐-P/uiݍvM*; k,U U֚(d `z7B+îԴ>kuל7U@Fz {/>S\_\!/\&sϡ(KɣP:0L!5Bbh8#U(I --U^ϜCP&rX[>w+4"0JuN&,p{U37EXcpќLچ`Aܝ)L3=TKf,Q_ʾKZk_'Z4}J+Axj+3&z"GfNj+XC]qS5>.Ivۺ. YHM~cHg^'p `6P؆l<'bqWʐ s0)6E:ɛ&@;[JR4*5dnMG'ΘPE4pg}Jɔ3.epr{vכ`f.t"Q^/c$9DxdR&2 i_s3]@m 𭿜:JJ`q+Dˆx~g/<6*!WG,L/YQMVyH'$)6IrZsDsI-y5POT <~nv3idEF9Aܶie|L1DZ-Daq յ\J\Kmlydil+J+{x ]HA zR`jǭƾƩC&C v۶P S8ԡ_D-%Z.۩[&Yd3?ސM v@_39[\[}`*]R{{Ƴ#E^6r|HAmNE 55loZ^љb'25dx?VJ lliJ ZXM٭!âUKfsQH&S6Аª׆ݍvR_VHțcTY.)E9V# D"tw0fJEˁeӀO3h6#^U)y({`"87n;nYeooh>Q,S̝GЯ'fks*;gհWh9F'/X p@o0742GtcÁ95y}#\QR0aFս8>/M+NڠŇwԧoѝ>椈~ Ƕ :9"p?&tgNn1wbI Cwd!nK1IZ䕻raq`BHdNANM'hx2$Ypݰo$弜oj>0)ŝ1{1U<xؠx=b?+i@RN Ia>#8q;k'KT%98P,5,Aso<ڀ偔k1Ɍ5W)vRIQI7ʃLڱc0d,)ˇ$^y11 8;Ng6ڠ-3WhG[s`8YݺWOW,6{j=d,^3w; UXQi[2QPҴN [e/TK̨!]ltujIoi4Æs P?ı[6Q`jK`ͪJCQ1L{9(owSTz K~J$[-N-rН p)CʺE"\QE,nj;gd.@nC&&&k*㇢7kj#A|= x*f:Ϛ|[̍^Y'ʬ}W3ad'םI*'(A}+X\a*8KiDg0XaaAt3KFgg6=v,)xQr4`v'd,b쥀a'ktfLCWL:mARd8_)hnf;_b٣s&Á }X f=C"QF~Dlց&n#wtй=00TG(5̮|r3! '%@Sgzh{Dqn{;\K,I94 @0"h&0E9`v[^ޞNkA#/ K17Z9 &P(yhHŎݙk6_?ܭl%|'zEja~ e!v¾ l?,3(pdzv'$"~ 3v/ZZVR%f&J lv Bb( ;t ζM4oe{ov5lN;\ &H8'n1ff_v}zYzncB5[ ?y20[|bBڪIGaWT ]n\Cs{_g.{^+X=,o%@/3ߢy6.g@ #'KX)PƵh*AvSfh?@I2F ߻ߢ-k^0s2W2bk7r֒vvH,+b#V6;0Z$>O3fꢍY>]ұTi:iCMd*YxlP]Nf}*0_E165˒)k[Jر"d1Ý6d-@/7 2 R>U+årCK>)av {{kJ:5kAɗ+MX%qSo&K7K˽*Ni('Qs!Njsq'80 7r6 V$7phoTVS!PEqUkqݗASL;|-n \% 1YI<.ZƢ%yo& '%/aE&Bf@q3!T6u)C'yWx5{TbN(76+oս`0P؞$Cx`>8Nd2)y)ma?j;wڀߊ p0q"RLa)gZ9=$џww'J*8W:`j)̳/CTzVcXgҋNU.fWӛWqDž 4LTFm[4|)ZusS7|3͙yUsNX[11G٠jYi!n΍=ÿ[Exi]Dݏ?sd!8AaJ:D e|z. Aʪǰw5&cN$Ax{CG+ ukñ*'D{JMh+xka^FGdN[! Oo#N[3"M S0޽;/IM`Y1uO}c78;ʆD&?]D_Ha3t ǩn @+R:'<pyMȘr$ +QjVv{dRF-me2f"f:IyeN%]j\}lpk41<ᤐU:s+ôIZ2{%\;JN$m0lq? Orh_\K UMC"Ґ $KUyyː}P6Cůқ!ۮT+刡pj/eOWm s|}Vp[@K}],T>srE$~ ~gp]LOP%ibMXO, Z!Jho }6d :>UUΚaG*DګyL/U /}j\C.:}Yq"5չ% VZK;ᵤ1fP/dZOm%}pnf;}Cq[vqhA3jJe28SVL?IzrDFxM16OC&aI^ I6dB@LM#FY0bGqʛڿzwS-B,r <3x&5-ųk #[AH^IYP)#TN*:8*31FwkuWP^YF87gs^'ē 6FLD/ь!M ZIC]]br^r(8Z,Ϋ9 ߮vqܓKK"Q=j6$JhtqS3iQ*M<1'}w?THÃc*HV'qDN;= ρ @\{{`uq%}=jr EeNPE>1ld]ktfzn95H00wW&F߆8 ilQh1@Mb{<i+G)l3?-0C Ρ~! mnjjX\]D&5Zl#jzr)7sV?Oq ѓ y)0h5{ % I|SK3DEZ#z D5$f N~t3#VөnU̴qJ\pP 0Ug#g;죐RiΗx{}(Jo_ߎKpmWov6dʥ2 ~kvlTA_k/8l0`0m!L"[ց#-Xc`:vh%_ ~koC򏄡㡘;̛f!qkδ>,O d,`. o)T[{O,n@MǙVn-;Do~ ~ˋUXp"`/(A: {( Lַ (>^ɞ2u#+6E _RIJs1~rҦr*}IQ1^VechߦA)\5@vrƒ1A3)*wMUUR44Aaz+HM>+l-r "Is_??JW5':ynU<'괴cKAPv J~?Ыcxϥs+#Fդ8Zanʑ-,E_Τז6vSXZ'i]W3xfzLrW<5B4=e"vOnqqsCEd$}ܓQJaHZ֜"unLy6\K8/`-(:S dGh3s%s(}(4]jhPdوރ6 9o0j>FiwoteAjP39S|-e}z ADVn´)>ոA"Pg^|*D`&iT!=}țWdj#d YAw\&MpsuU 7ӚT:я(K\k͔w\ν]m@0k,v^!3žh+w76L,0Wq>U^|ˆU(UXaKrdz/LdC' wgiŖfv"TL?ECf1r;!UqPnҎ ŲOa8B Ey:u5V^ԾSޱKZz\|uѯvjcԑv ^X&t۩/%ņ- QH>hWŒMoۅf"ae7! *Pngĩw]'4l֦C:g>O-̨!,e3LNo\t}'s+ u" ږٸYfzRAfp;}$rdaS0GK3҃~da[, ""^3ퟳGUq]mjRdC#PR9b^2xk# u,Yë7_cis˿v@%k~4:Jfy(5TJ 7ҁrZEmF!H˾8u5V"Ad~WU`S1.D S勇Eyx+">#?9 \L!Meij>['53['8m}(v>Z̊#dĨk'bp,Uj1{Ѡb[.]jpN펞+mnKGAh5a0*.)/JS=I4Y̼mјFϴFzg@V6go4췏z]W4tkq`I(GB5f,ЬJ?1tGfs쏮xf_(Ղr8[G΂\#_4:`nnu=!̺L_0m,j!}gb6|۰g7Z N޺|%rlre@ٰkAO&l 1(PZNzp:,&\S [ʾ kq}:,+4&$\7 ‰Gӝκ# )w"hlX SW74Y>=4Z>g,}k(Y SXJJ*GYm%tZ)<ݽY +5R$Mq[Ml3\P`)*PXʮzwX0 U8m٪lDoѯN/}CDrlMy%hƕ`s oyr^d#YTkLL-i,U8m$sepHWt'51e8$yys/%! %ةv*xL6a"7l?ʌLJbw!#u9EN ruXgEga8<&*\eKQ/mj^T;jh33ߍ_@{SPD)ȐPj/t':&ak]'5^DM]tfZbZ"i8.]>ɼҿqN`D^.1i-P[w5Rn_sK_MTJlvu2EPwXĭ=|E)C@.(̎W\{K!Mb9q|x;C"#rlQ4;qp~"ש&֨|]A=s`iKm:ffP￾*:!L/ (z" 婜!5d+um¯#Kh,Nv QÇE҈mP0t(̘< LYv.7~wT`U㢆Jb`37V*%^DW2 zO\a/3؝71%~,,XԦZ)HQ|69_*xpP-?k~fM>o?|hA e&en@A9/@q6eT7֧8곡>Hqy 2XL+mJ6 գ $-MCWX_0G1@Ch ㆼi_zGx>?M>*k`*.|pU>1W|;VEZUw5ZJ\˕)}MG\zVmQ}RpS@O ?L[T郵J9¯4]ƌ'Fp!'Xb|c>Tnk @J 4vG?#h|'b]2Ι>lD6{T>p%z3Ɇ"뚢k+r':.H`@<]tzvx)~fpa28( vY8&u>/MV51QKV2g#THG5bҸmmJLf?.$ف t}"8%W{Bn1`-i,C=]n!Z' 5rm]h!3ylȗ[W FuB @E4wol\!^'0 =5l5?Q,!р5ڭn<h1pwvkc(B-~Zz3,'ʀN dA$vbG¨kk@d}[$v(ZO@=#+C}Sv&3ՁzDMS]I@mPDKqJaZWcE"X ^d_.je!H :8Yf,£^boY_ a'oUrXsH'(Qݙ &5 6; ɿIJt)dQJS*VoAҗ \fNd]Fb~{Rp9ŧaqȣdoȫtă#%_sWp>\X_o"d2guQgkeAi&fbby$-0ivY5`cW<xkm_QPtsz_{. l-fj^PGngnj?ss.A%RuuHdPI6Yhj]3˩\9' !GeS19N@RuyRD,TÞW4Xkp>?Ygv!;vpPR[νnO,!)Y0?4$:eՂ-G+(svr(p#s&[/QFsg4i71VNC/J9El .%c3_p狥52-hޡwޚj^\ȴNiPzBfZ6柟OJzh<m>}c#ĩ]9\jÕ͌qH ޅ ;r& !RHPH]K}0hjO'4ك 52ӊz;cTKi6(D>Џ\D9c?k[KHaԔ(X&rrm-bB+RX2Yx] 7gG^{%͛9ִ<.Sx=/'$>a4-D3M&\ cHu%)Ƕ@oփ2=~Nq6iѵ!"`oidTYk2;8PBl9.}i?;*(ǩJ+lj-j0V3lxX%4'6=tw|U"K;@ TGdJ6<Iq'^ɴLh5.l=:Vs.)Ȩ+=G ؗ,b5k#ɎՅn])ӶiU'K⻒dP;u:>ϓo*ዛ1YC|gc#_%75<XJ=eQ2{cS0-ae01Ȝ˅l4411fF/Ztft'P 7_?jh*SEj>RAIYDP5h[Y7Rk[4ݙ֨9^tܒs\6}#d"E5:d`w' &غ9AV2C\)̾r; VIlP[ zE*C5tTal}&f&yRl/&㾛H.g='upΙr-!>yԮ6XOVN!Ml~W `h}9w2 }J_M 58ByTZIћvnS']ܑ_4shˊO;a?_V][p2qn#g:;EFfT%L&S$%Ff!Da|$FE/jMln9"Dt4)^*W_&x|ơp7dik .'#&q9mCAXVj]$N!5.=MVVjK~obO뿖rC+%-;"E\QWHf.~&^TȎ: N;]J&椹fg:)+_7"1jaz"H+}tvL@3]R~c~Wզ]kyrhMLE@aW4VG`]lpΦYpK -؋BJەT*!8ɝ2tr԰ؑ "L]S֕rE-[m/rn'doj ;W0.0ƾb-H -47](/Љڅ~E!Yj))|ܼ/S ?@Ӊ;}w8`FJ8T_XCLm@FOf[5ƄV5JeR⬩u%Tˤ݅ϚI;MDQv^&= !td'}أuL$)k Ʈhp/EZ9mӏ_饳"gdj!w/9JD2ř#a5Ί9{68oEa9Hޣ.lKȺ+!ߙM^ḊVk a˔ӸE馒Cnş]>L Om9Y̸˿޷E*ZDZ#7ED8 WHXyk)C T 4 كqZyR4.fgRy{xoŧ$LS_`}#:K쐔vSӉ}BUC,kJr(VQ> i+dC(:w>;xH8ɕ$KdY]=Xq "R p'hl>N: .u%?P 9E_>W(7i5uulJ x%и%:f^s0$wO/JX[)>[tDH33ۨRZRFmF}\S!\H*K7 [nM6Z%ݭӾ ,j~!eo8åS&Ե*%TIg]}r;f.^՞4^[a ;%Fw1(ה( m97GVTyJu2 NZJ :[( j+VI;Ӝ79FXO>K&eAm_ /OUb4]heQkpS, )k$ iNpEZ/brԌ:`wa^Wм2Z$B>Z4IKHUqiۼ}~\2B8RՒeGlBݧ5A^7=-8l*` ڬ~䋟|?#XSKZtgFa=(A3ݚ)F{4Mt)/9*<*h)$Mav"lܴ{^Aq C1LԯL7h!aյ;z4a4ro}Gj7s 7C: ;ԅxzOnBD̍$ZDSDs{J'N[+Srk](֦Bk w,J{m@#ɹA+mE.&=f$c;*(W޶\.EçN _ۜ.cW?e[mj\1U1>j\P]RX8:siMOs_|Rn7Z(ϚJCS~P @j3P9()r5ZhpSxgge@tG}>?TCV\~iG\f7m[l3mƓKą@OU#]&cpL*EEeE%|,iHqrNDBIo pzr*J(3{b[Rٟy)gwHd|J:O|'uuGIzZ#'7p*g+d46 dZm5jjP]$gEXC 5eWQD5_,}ZuIu%vW̊Gu8caվӒـ 2qp/n %L$fd`5Z~V?h C Q|2;~qG8 G)YHϝ %(ϓ`|kFxo7nWa3K~2;R]5.~ߗs13q}tIsMY(i}X9ٚ*#QaֿRΎX=8=gGIEW2VrW{kʢ-P@F<ь*K> 3:@]5ę8ح2v7iaa4ֈӰ?T: [8$ ɔyS;ʇ9F뎉4m<3Z^Y) Þ$@#RU"OSƺxr2+t;,v?͙.P:?S>AJxfkȦS$TvՃ$"-{L ;H@UfKTѭmc'45R1qj i*te-3זsi=54a}ޟC/_7V҂br0Nb5(\]4ZVé$S*<̡%Ne4tz2g+s"fEkm# V|ÙչJZK~e/fY-(p䍜*s|.8S.AOS܈M2]~y]$I~xp+h=AuKG/ACXt ߆˾`W!ϏF\^hѕ@p)ý4|'f}YfȨ X?~pB}]UFa 4&B"Yǔ!C~gP[k\twn|5U$ߨΣLILLO[~Nۃ22y 4SM1}I3 C4)[fq%~KI>u-P/#&n(nzSvPɳ&=ͨ2(q ^VW)8cL$x &2y$xKxQhcU6ΩZ Ge.ϐ)6"5$1d\uIܙ2 dįre+ YDfA}Tp n3!ĬzT8a;g19I{qȐvy.^ ϵ)e/{fD|R']ŜnNtȘ֕CK6kޣ#,=gE}8%}ڜp[ǪͿnZ0_].x(JJLqK1!ڄv#7']}.<iH]59F_4(VoſJ{_zN@~*vAT[*~ x}ݮ+rōC7j݁2 u,y&!/_6a)?&"I bI.$!ŔdPr`OE1( vnOs+Sv Nn 1Y +sPW$v#@ժDfJLsB|? "r E +A6O"tI"'nI>cڈ\瓋]9z⃆nFn1! 4Ȕo'i'vVry8 (cJwZەܷE 9ꈠŔ_sQnC]O=diˆ<[OF,p<&Pjb~2[ρm49/?0afKzڛ h4Kb㉌e$ ] 7Z­D[:8Xճ">X)RNiI槑J>r%o}kIOizV$wR[VQ lta/ w _uΩZO ^65){IRZsk K~Sl3%W$$RO'ۋ5e^o@~pUqd"^7mX3G'N2B%mOdu̇ecڇb:Mڌh{ՊUMl#mVb-8Γ}K- X4F 7z|KJ; ZXCL:8xEuKԈ06WVV|te, ֬b(R8j<Έv$UJVc_,,F!#1T dbX:u _Ndzi8T{(*\+U,&Ua^744Xm`ej|Z[. 7됙ﳜr6r1[C{/g]2I&OKrqtc s:VI{0]v<}驠4тxQNcV4sIJr^64RSeR׳ӎ2ڎZ؍R6sj8)-}ʁ0*eҋДNL_g}UexydXFH!'F!p'D:sC¾0DmlNҎnGs&:$Y,"nDF);B=uO#swo[o`ސ8k6W@f(*4RG?>0jl2A3mdE(~(0ɯ/b"Q#cqx'q=Ql =}Umˉ6-R5z I_#򵚭p"5e8)E; Q1^[wV&7K(nag+^z%Fv;J>7+Ϙ[Z^qQ@sǷ;YgmZ&:QH_/<*^2 Mڦ mgǶhBInUgm[@Dl+_W)GNVlu5u 0ߓ \ c}րNև!F|5]K.}ۄ ?د=9m6ȸ!~ ]|ZpkĂ4 Zs<9@ov0?=Ol[7IsL~Lؔ5Z43AMq5~PB'>U"#)4?¦Л;U1 $k VRc pų/}k5 a).` Nad8W9s4*C( 'ro^%If_&-+1AΧ3Ι0Zɧ2b~s_yCSz!_*606s)uѬ]}gWo:;;ǕԈ0 :PQL^Ă娟ZUs0`v{X-X<:fxDʈk`8j7|>8(7Ht3ekE][g ij`yDK "&| |NpIp| z4('x 6Vqb| DQQe=?VeCFF;T)h6wr2LrFh!ʉdkʰ^ G5_\DHGOࡃOôYy CEN-EKAk.gseL)+g+PvAmߖil8ح{!4DJhrmմ:-*R.oO3J$hjr" >qZdp3#|KF="r 8&U' isKTpV=H+5H}T5]ׇN33QHgX8o4[ Ǹ(ѡEÈ~9' ,tom [JP,e贬>`̯Ӿs4=g5 hE/kxhزLn&عiBvOOj$HmTDy~D 報ԒijС.=*q'In7i~ ];P( q[LZ\nc%2hԲQ4İGкh=ps.q<*,RWޯD$OK(]}lrmO_1',)L6kAr] 5CEUfQ/v~'=c<9'х$G)T8($׸3[!V[HW/49AE='=Z SE)qVs4JP2ox='H-M,ZV=D,b$u$ó"g૕7R>zhfnOYű-@8m4d#S'2Sn*] `rFQU}6j)سCpZnZTU4 Ka@,{˘P]Ʌp%=\@+喙I$ b~X[$Z) n{mDAiN]t. @)uJGPe dԞɅƃQ?f/g1iWK}Ǥ~\j4;¿KA|oFA"^Cw<͍8c#,WU 2*z/B u_rV)黗yZ,ؚR'"2H3;E: X7}r'P!Y/ICuZm3$-bP9sǵػ@LH~bbvǢpb"ۭu!lApt6 ܼ‰N)-P]eT4Yl[f]0BE:;:=Wu^j[;.˒[n{/9)\'%~,S8EFZ3eu>Lho\m}vnׇhvQx{=ئ`|O1ն() {,Kpx0G72*;oJ3nChS4"ǚcBq,@5J[Ou@y>M>5y5)&|"; ƺwVyԨmhV+%; 0sWiƻ#Wb&]S-go^K, pzߙxQrPCs!NTy|뀌Smސd)Z;x8W|~ (#YfY~Xh)ZO"ٶ{cADӸ5 cf7$57~ic ̗J/Z@f`L֞X_MoVRxIڝogN7xVIObhI i5X }y%Cn_-pWZL9ăyI{`쇙 Q080t "cSTуM(ҍձo0\c B4=|pvV:bF[L5m[ce=ǔ>,Lml\bŻV=hMYw47`#8aPnrL؆ȻfϊSՈ͠*m;#F4 ÷U^bN$t0q!ÎW`lWlŤoZ)?(BK`:; 9ʚՑCDOثn6L /ZH z٬ڑ#hetag#BHec(K0wHI&&Kw@R჆9p;:Tb4iuuÓCfLZ;QvE>l U1mYIJADʮ}Kv $' !2TuHq^MJ ർ۽|2Aิ8x\;o/гF+b0S&9CbBъ#826K|+ ~8];Y} LS"nױһ,:U#ܚUʉbEӤekr^ϲn GP]r9UOyP4m}m*כvJٿQ<`tձ;aAUK n<׵ix%@4<9BIT62`Wunhʳyi};W&<I4JڠX{M +#'Ej`Վg} jF]zPF NGMYi CȚv8i,d=' H87 ,{M$gsWKU.x4͓:ˈ B Uds-xj GP$GƣW ԯ >+u-t\&0A̫HB!Nl*`1Y2h-Cz#st#fMdAJgds1CX6j28}IsRcAĢp3 i5HA:ͯN\' Gt: L ڎe:+$4/d=W)6u@VA,eƾf7Ϡz0K4OeWHΔ*.`/)Qlr@g=GnubaЈ'yݬ[)3a܄~8d2 |dFg^/ A}||%G&y5Gj['՟ȃf䛤ySMmL28Ap$͢*V9X5uSL C],"1/e$X7/U(Ty!nY_daĚ@k\VF[G_n4BHPQhYLDMb01.ȗ@*m<{2l; ЍD?M1h@CEƁ}P A!BYK[3rr j׸d}Cp\TS*@ ˙v$KO 0h+P,ys&\ea /` Gku|<-`qwS P׳HĉoZyaBozb `?EWYNpXپ'nZq>f'NJaޜUAMGȂ4T;ьF\G짆4S^5ރ Gd/xpn;E&xOʎRApWl=/xE tߖUj=*%SyxUD+fӤ(T|a7640á.VHvDxyqszLﵬm=& QAhͱknT+T>nN)JNxPnXd CQ:W)>.[7xB&Yɩ'JF|_h\n,\7H7xnr݅O*qYcҊ>k;!:nq[B<b=R #|gg$&3v>F8>.5w3ß9`>#5)YFijr*+. L OҟG}ߔ:8>ZE{ɦ }C}I=>P}eq3}5 ,Ca, <893f7qVU,cV,|Xnp:V`o{cH|8Q/Ȗ!g$7CEhAp յ7vsI!(+þƽMߩ6`[bS]%>*]s~A֦}Ŭ5Ǻml}Rtd&dx-!ge$i4B3ߔoPDKhZWև3olʂ1d!5ykmHb=sp$kIhu&Зǎ#mF-ᡎHp%' xnbhHG<RǍߔMvʹ!.p3515 ^MZ:|M3=Br>;ֵ?Mk\5{hH5j9ȯK8 EwOߵMbuܾ8]g΍E>49U>ex&ZlvOgi\ v5YTf^>MA_'M8[w{6^ʦ鉒osb8Q`J2Rm]K'TAbro=]MiqDC`QH+dpuN <`EDJ ~?#Y3R$*9UzfԻ~7sf/{|_KDaie|v2:dWs !ϲV.v.ٴ/0ѣMӄHZK6=qᲑjELgn$ϩ58C WLHr-Q\}D3- j>cHPW0i:pG(e"$E̥v3E/ N$]# h,[K򬨼PbtUѕlx+nMHi:,RHQ:x RAl1U uV`ْhPt |C8:~yZiN\` h8E+j=Zf?\+2KwL->DXN</ʼnMֻád83; vR*έ'BJ̽(å to1Ϙ,Ƀ esNLŔpjb ,N%o u„T|7+xWMkHgPgnjLй3%)~n&۽r7+6ZQHtY顶}S|1,;\myA;l8z[m.04=,gN}r">b_Z<"?0'OD1X[8:)ʐ;Ġ#w72ux$]F>cUթ I %1okX\<=d^6Ub7/l<8LD?LaI]9'&W[V+'GpWLf*`.򻔜id_\l^XδT(lV4#j*r![=TLLˇcP)Rk16o"U멥m[a8@gL Ѧ . 3vxF|`y^FKHԫ7fc[L-3[]TD΋2d]}t~^7vf T4{jqKЦ{9+%"rm0٥Xj W:p,ڊqlwcw]30Cq`}#GAFebU̲.k1PWy >#'YYzJPWbu)Ln/6$vyqEXqouY(&j]letmRHc&j y ۙPrD oS@bM6pj:sz\i /]H還zFߵ?"@*oҒ7(n2|%Mԍ8-4ag'y O )2:._cdd6`^N Sz~aAd'ݭzXGjG crECQLH|r3MV`3 v˯e4D"{Hpz  v ሎN*y UA_"l>S[=ft˽R6 2ȁUZGX;U:q|Wqv@!6Cz?1~m꓎;5g'vs3mE9ªJx(ndnAޮxkp}'-\)j*4FW/\_;WXKiSo# =3yʨ%K y0()i 햿#ˈkĎYh|SȋơkBWrf[Ԁ}NO ݋52?•LeFJ잙x%GgGkuߜwKƤ0hnN:b2"T`^%&|Z2 +$G?ͩ ͟܉?* jCwǡyHPeSvx!NE܎f'r #$({REg{h-AW[I }f]Ѐ0&d+r$ 2|߀a"b;*ٴ;P'$p tjA_9H~"o\4)N#.ou L7?wcDJ3@B=y<(Zy/Ge-:h j߯R'kܫaA5LIQN37h :SsuO{v >Uis]~ 4I9$ ^H?6:{KZe;8hyh,l{>u3 Y$#M9Ml5>D NnI pe6\9+rԚx8-e1f|'e߿u"07o#酫q7ѫ(r5PS*!T xmlj@HGorSmR6/wl=4SnlSz󤳲DOlڽޝi,0붅wG[*ACzP!/ͤK[ùYE7}o&IG{iw@ʱf4Jc$PmGG\|" pCt#C#:kѡtmEq)O% > 3<-.1ύi~0/"Y~U`m36Ovޟ6RYJ=Dc% ЎQ1;\StS~V0Z !(` b@8o `R2^=C}2\!tB8R%f}&1^<0lb45Ÿ6Fzi ^=~|J!) [_xX)' MP񮌰+k*˭LX77K0trm<& >'F1wq[$@'T[ u~U)XB/wg ~0k(fsD E]&<ev R0 zD}7XaсY MUu!CM;Fe0S!&Tc(V;\%[`7XGñaﭲ@*B:v4 RkWy%x'wQ5"}:Ž[i ^0Sg'؆{0*3g娗dbgHMF+8V^<<|S7D0ޝr1JE+#n ς%kNYKUd;h36G`(!XLo'zfu'=w݀RBZe?*]_#L`<ȭ&m=Ք5?fZrj'L}2}?z٦LEl6|$%uK33V v9FŵVkacO;^*K Aٞh. - .@<8K;jxM 'фⳛ:L:ANf0=ڑWh_{fZoɊ~Mc^Ꚛ# 6mLJgk?erIݓ`S1c `DO\$τP9*`Xѥr0V'1iС+Uhv:q};@K㛓lIPF,[%V*"^dZ3<(6J2Mdݽ*ar@g`{V@JՕ>R:2[H)XB&#r XII,5}@p!B6S;z,6f.Q,9'x);Uv}Qm=a5UL!9U iQ" R HQw);p8uvW% _Q ljJSydړiZV(") ؋\- 6~|.rka9(p'|7%>Z/;-d UHw7wo&zﹱP nC-mV6anY[x˕lf݉E pH8.یb\J jvh8[M`@&Zhg&6k*IBF! OJUI#ҝNJfL|¾fKValdi?[~bƀєe`)k*z}3tb2YPfksJt3 }B'sX*t,R\6W^`]#ok554|9ơ US@VEPm.PToHYܛTfbD24pAj͘B؎"#ģ_73jp!B#'8'v+b^kKV6fۖ(Bg0dfQ=yŮQ3j[z{fh{n]};kd5*PBd5e̦+WLtHq̭dKȇ AAbi 3.LofQɡxVV5yU R?px:m"A6xbA[_5"-w6ri(xgƒz~&PT;n1\^I8|JmGE%A!F+k""Ssʥ4 y%,$.5~ORRl!|K!!xي*Zt)^1E٘_ߓŠN=D(/{2@5ON^&,L4j(`*tϻE1uɁjG z$㌏4f׮\ɖofi .a1${ fvIs 77*A|MWcy{q.w3xnb2:gD0IiNaqtuMJ(H`  S:~5C- h-3w!vx{1Nٷ:֡a0@ 'VS38ˈa،-K Ewm9WtU2T .o}}]4}ouxA;#/Sb\3|Ϥ3VU2Q~xO)aMjZvJGJBf7r 큻 YCY^!RAZ9٫iK^f}8b#D NS5g^ H8e6> .p,M^!bU'>& }1,)g"Au) On5P4J|?e ?StZ=40Ⱦ#9 af'-~/Ȓ@&#!}lpP=l]6qGm)i;.մOܽ# 8t>#'ܱ߅ t-ѿ\)1T#k5up&l:u#l/H;GGFg|) y?`XcnT,RT,A.ڼ8)OqH/\`6;S8>Xi_r2Xf- eԠ9u 9 l?O!#kg_!{wh1;:#x:꺃F{=I4Zۼcͣ]M6g ^֊Bΐiv7&f!FQe}똯)4^Jo{]WDd(S ) ?߇rorkuL@=&+W=z 'PM;Ȩ?|YQK*<*}Lb kLDbBjdS1ܔncO&}|@ܱJaM$2ܬR1Lh*v>~ה2{{1f}%ʩQ9xtq% pPnMz= \\*7>K_Czqk,D*486bDt0=*āAͼnj>Ub#c1NiTa#29">b=%Y-71d 혧ĎUP[ђj+",;IL5YC@?c(XLȓ nOX*A>&`(q~'[c׈xVwB!),*@ъ#nUN.k WilASHy Y̐a􍱪g+=@{l/Rii ԑas(M.繁WkYdC"3x9c"zǨ͛z/m%Zu}}MtBF9yn$eb] p<|(OS R1pg{ "]ѺMItmbdOv0h9Jb01ǺB^{fk!5du (! ubT!F)$sFOx\S(GM ##/E&r}6Or%U|mdTy?sPk;c'γn[.ϋ^9yh'D6kuIQ;ȼTOszSc{A kJnPyBޭW;Fb]%PgٴBހ3na}K`1DG: 3,mD6(I3 <fWXd&k*ԇ(rDu s&1SLb1KQ(2-LaBPF5ڞǧkK$6{#SbD hJD ўj$iBH]0EeEMp$؂dxRd! "r K#c舚ԅo "[ TF mt YАj0M.ntdTFU񅕝_ޙ1!_[>+l4ƕFpBVxN BNsXg"3t=ݵվnE,'fW>~KM:*G3,c?NLjÞ]K:kqc0zAp=hlxNtkI vcV瘶ggU$Z-u?'m,QX%._7\t#weÖz# GGA~ٶyh`v#.;ta[ 7!bwּz6p *( !44$q~J6wqtAe LͩtxkO{N@.}Davx^!24b̸+< qq]Oy']PkmBV3V>Ć='qYGA8 D"X$e~.@0_%j摑d"Β oY3ne^!?g0hI/뗭=]ip7Rv*ظBb]ŕZ[$m]> lh2£΀?H?,!S&cvn է.kaVoePByr)Hb&nh:= ND42rk& "%+AΗ):/O3FS~!i] "y[}]T >\mȖH:z$nOc8Oԡ*yfӈ!q^V%C;N"D;SZ(tn!eF= SZkSb<@jƨ[&fooCj&ab}3wӘa7⣝8r "3m%\YTER-iuLMzt /=r QԱFC+":zOS0}#Adz@1pmP۞BR8tx3 LumCSúSs@3{|rkpTT  vE"^`18 z;8*Z-˕AZ#"te*QȆW[?0Uןhf n3 yyL_]:.VK(`a (:؂}h1ϫ_jP^+Zr "v\l:Jҝfci-q&)=eϹXx-J CۤNAbd4'\vp1Z1J@ta}Q^D_O3S"@86#fēDg52ޤ yR o?gaqNmӸD\rGm\^DBή%ӝ9 ݧ5ҧkylM#?5hAָBth|*ngsU?ƙSg?@?^4c' Qb[Ynftu`\SC%+ e~Nfڋʫž)CP-wz`i/q܊ff/.$S1; -ܾ0sKPA7Tգ>O#RR[V3<ߑ8B?5j.EV&!1Cf>& %ڈqS `o"lD~fCd8QnEl3L-@Pt?]{%ᛯjn.Bƽ!,w3EeXVyqW[4 7Jm-&{G1@$-4$U1 ݐЦ!"Q/hL8FP_F _ɺ3oe1s䪻e$(Ī79*Z-q2afD2qbP]4i-;Rg}m7OH?υhu_]Głx9VkyaHg7MCOi>ӭ({È\DpfGż#uZȱ3X>%@E`B:-N#Zf^ak+$=!K]`@YBw mxnAlN+B .,A xF}'Z*m q iM4s}ze!^j2?ӹz-a3G>7ۗj\l%;.=Zx چ=<9]98gzjogl:c!̐ +cάV!0DѬCv\bG,{75bE,Ss$2d_0-ZF1Y䴫|[URfcd9j01aN&ڔo ǟy#ntOдVlG NJ'!b@O>cwP޴p#!ha|Í#=yREOQ+ /CVW.ohL 䶸|c7S3b?J2?B"أzu}@$R]Z921+<rw" 4a2*a4k3#y{|Z! %۽]IAcԕ~==q->q_"7?3wy\;12mj&ɸHGmGE]f&e:R'8ƀ9o;p,hQs`q+^P xL,.D\ٹ.[51YmdT&DJ!1CTs?R fccp9JytX႖ܡ՗*LΓX IK$7NLlhZ~iLͣc5,O=n>.(bev3lQ_tk{lX'%ȐWa;GUҭj?ڒ׵ m>}Ÿ^ X8[9u.7YVvUʞH,, x'6 $;iuǒ[&1k,BVۆ rɲ٪̻ΨW*ly+GhfiU]nچImHPO@4Sw!Iv~D~8͍bRRf'sr9O64C,TQnFcizF٫r_tA3y}- gL4 ;D[>ILI[ IP08H?TC8bqW0?\qYf9wg֔X7b@+zR`FC>vJg"M-˒YB}|EYbK7z5oF OtbΟ:XX}cQgf!Bb8N` mK2l+#[ݴ7K#mY0IagUD_k2gP/d{:h:vv@ Ơp<29+0uP\nM}L0꾎/c 3{ ޤIs-{"(ȣVy7OW{5`V{gr>A3qγ#r[Ra!MC!vMy`R 8@& ~^}q`Fj$Vel)ZULf58h="nԋT>@>ӂ&SRw>1B0KZ|/Ú!yE\!4f~C0E|Qz9l *4v}%A;_ƊArT/:LIt*jQ,N[#̃7; /;}dd_MmBYeց6;`f/L cJSiq+g]8v*yTCwyWiL ^"8!ҩ_(ߓ f#{v q9U7 K܍'P{IKZ c+ u B+a'I ݒ@י0qHm._>%xX;儶F^X@Hn,p“g<\Ӡ:!&m[vPE[{r7n*#yWLaH29fH@Ea̻v u K{lJ =S&8ui&Lh_QtJl\ly01ѿ)Cʮ3L^I4Ѽ0q?e   ~@ٺ}Ohl )tE@نQ 3I/My&q7V4Ѧ˅lIJt/>zAV$au.NTuWz>"؟T7EXnD[,YG'Ռy;;m&0"G*yLmHyhI_;T ;x\e"gvzyfO{){:Z}@ʊ}s՛^f&|+췋\AH^lϰ,pO %l 7v̶PDC_ՠ^|j%y sR!r'֭q|C/+\ tyTB6'25*}*jfacq^X]5py6T/ܷ/)Agkuljp8=PNA $ct5~l */ŦklIL`I /m2N 9)۞ #9$HkJ_ $g990(pnjJXI9[c4F4h/NxDݼ[iܦ #El8HJ`(0]q΋uvyzȰXi<ϣXmd(6S̯E*yd/+fe©5SZUOBDu,'8h"eQV~myFg H/iv Z'/`VuUMϝA+B>%+\ w:'"@xUl0)IȀ կ/V((cn"K9VV[wj>t tgrcrFNfR PN5k0uLltvH^Pn;I łu(m?[q= 9gm6urg 15bXE?o=mOX|+x~2/' ",Y4r0/MuB5W)G{3$$ L1Cqǵ\5-lgEaXMIm6pLe ^S-==n-sW񅈘,zC (HK= ^зKHk$t93a/:3d-O{ ^NtT a;(!i EbH=@_Hp " J;9!3;=0lDcQsl#obpCRny\G1"ˑ µ{<+Rr&EeS{&3U(hڗ"H$4J.^6b9?b?5{"Irr t.#m`܏ rh (`0sħ<%\K`:UI HIB)Wj@C 4zZrYC>`WhpH{L)[`]H1qAK-d<_0j>}=B .NSVF1v6Q#,nB}j;MI)Ǟ1k-rbn= )+#ǝO2Kpff -|%v'Pg[q>G.eٓfYCYOr)d2 .aV J*Y9eԚ?&/^Ҵ$31Srjs03'o} ͝E.ayR~RȫdW;} ΊҔxP14ck(?v  V+r #>(RM5dݏ*W9<N!~|ҍ?(I$1z#<լxD-,&m;2/@ENY%xbk\_b&ĩb-ؗGT@FEHQ]mwp¬>İ#;>M3F{-{Kdt#s(t9Kg͘;^rD)䉕H\~,l7#zRmxXFC8dӌsPI0퓩}K+ +~~X;AHj־"-Ft#\HI"r PףYZ!2`K'yS\BIF`eXktI <7QD;] Nս?JrRw;<p}D Wdዬ4$ NHM^ kj.™L2/ ӷ')nH:氬αjhƠT lp'֜\K-~ߍ=ʿMTqy:rƎ<Ֆ[F%OIB|Z$˱aG]vF j5cÄf6kMT͚Rȅh/:GUztZܰY[5:.Rbw` ]E.*Ѽ1\3_"n?[YvǕvԶ.FYį52*yb>gl4D4T5H!~IqS'927;Tm[Rn hsB!b-fQ;M!%)!$:&t#uouݞ{{<2/IǰMQ|#Uֽ2cP^?>x}Ƈ+t7obNakVoҔq%;i{*WWۿ43\6Q7>݁n;g?x(:`=֮R໠zi|~1h%V`I $}*ۣTI/E/ (]Fi(hT>]ٲ fpֹr~S!l|}!9Pw$A>2f;&F+U4tXvL7X\r'*.{Dp4zOӴu?s\ |!vV 563 Qm@4>шG! 5wih>ù]IfT(`&/c#;J̱ސ}EYZp5s9͇n]Hg̓R*BHA&kH>.#P\13oc5yDAF،#dZ_Mn6 E%u' p(AGj>36aKW@&pwfbw\j{1F  [$PeScaÏC$/iOV,55V<3LX*̉T䩍Dk|;W4*R 7غNn{q` sպ( AEO/as ߏg.Ӝ $=7췊8I-үvߵ_{-/,~H<Y)MW>^f=q?z6Kڼձs8Z6NhiM@o:S@9.>e nhUŁ/`_5qzPI#O$lFPx{"#0%} w"ґ_;ߔYx3vmP+]jMEɆfӸ'/ :Nv `l/Iy?s6%6C)-0⋕iˆ8 gJ"`.p_AEIa|x}'{:hLH)uyeb[r!85K_Em-ayIp(-/e53B<s>t{MSQeHNDjA:.@xpju^o9D?{\ڃ2v-Ie OMq%Vseph"0b!#\=Y,c+`%S^uөzjj)~kӰP<#R/71! SO-\Vq4 lAa݋JGӧ/J*ÁB%|v?QkbDΎq Z͡C%鄍Le9Aڝ|XTrg&)TĨL[; s̨&ѭTHpΑr6YtEƓ26Uo8S+M8=c ʌihj0d&J=_= T. MY{,{0u$7nyvf8Ag >/zmnY7`yϼ]=d7puTq=;&bm\_3XE sV5S8a(zA<[́ E:;'&*VKt>%MM:3jQ/v2>Yha?+iQaA/HJhv_A;&k  EZkU\[;Ši,ͯ-Q3 k%:g,.H'nWT&=}[q+؅Eݻ )NJ+E[M.)ι/C9^ ufL.EbuqZ4MIpsgEF2k\t&@,+btEx%|+*-/. 5Gʫ@tm3ő@T_E~l٥]H[Ds4J<"n>>ҲhpKVqPCzb,<^@U۳ΒJ1넃Uf?미`)/=dnC2"pJZf]1i0)y<-,6Dbn-bݺ>m%f>2#u%oӓ4MC"g8dlACP5b.#.!F "v*kL+oFA?K{mZH$ !<,Ym<@{Toæ1k$\w^Ν&`%ER+VhV?붾UŒVΧ#s,Xjlc~>D - $pԇpú҂:v V.* ]}HC;O0c~s) +ljv{k ]98B' Xu5uj _#9A;꼖\l(6̹<~q*O_q<! u 2jNz0]s;%(Ki-QTF۸UH(`}Pi+R<=9YvQe,svn{FE>UnR .!Ψ09 o{xNw&[EЉT <Î{0eD2ؙ$TXqW=dy۷|(بd2ї+i#OڶZ::pc1Ե".#9g'\xr3PNxK UH1 rNU ̣??MYgImfΣd=W\4Ip P'.ny-/)$hT Sf))<CSu?h tt$U%Y6̫=?Z_L]dRu̧Fq OԷA@$J"%FpD7HM3qtLW`G+Jd܉&]A5~E3{*\ܓܛGFOOmF{Mi ykwX:><͌ ی5s#1.~ƍe'_z`8-}=$zKHAdp>XZ P} :Cn¡crAɞq&Pb@ 0Q*Xm?'顽C ƴOߧ[gW%ȶ07(JFNQwgut_3395ypfX'nf.1ui&GԂ6z?֕ۈL=05NuyP<2n:>p<[R4 eda:(cBXJX9зd )߳ܠ_1Ã\+kpm tH $ 8*>sID"Ycā"v2]^5x"0ڈi2X~E= O2045ru P!4?*6y:! 0HkH N ]c/&zɿ?]mkXgG5&`ҳÈùu\TtDIsr%S3]yjY{~/D}WT }~%ڹJH-lfI\~5z>P)c&<0g0)$[!ЬܼIK=nd_G45/2Kޘ֫S<0u*n$FXмW?˵_+I1i@xIodRi Cs8v'>nΈ<}膲uiXJ5lW>o|w/ b[q0OY{/< MJ\<ʔ41w%x#=<̮ڴF -p1L'SPqdm%F}ߐ'B_),RXbm<\Y0|Ԉ"sYB($Y w6S&9n;_!d4;A*Y]t{9`'Lu]-|Ab_JsY'fMWV" tQe^~.HGe^|Y;*e$ [s*@g[&DԳզ}4 6Rj sZ:Y7՜[M93pYԡY6z e8IJ9M f6;5,F E#XXLH}erǘOnSX8>d:4l9T=Z%P{hs%7~FmST夤`HDQ6tNAs_ruk)] V̒@ c/ʺ^ n@$#!R\<]hYc%C#2+8(R'yN>N{@%fc~StBB̎7W (';8S%fb<ε/Szo>DLR ]4+' Wn=X91\NĒRSWG"@8= F}jSes}i<;? p$-n(zϐ%͘GNB6ʷBΆF545ag?,vB|4=]**^ ?&[zs>i Mh؉^w´ ޤٔ^/C[U>?LaAc잟exSK8|5 DZב;(N7W8b}ZMo>[q]z\ű$"}jZ5{FG;iY YIE1S{S5xvS*ٳoeiF?zUz&yoC ex]J7z ,#S#lP( _}77+-|H4htqU=<3w*Ul Ѐ.2L*{Nm<H+9׉ :o.~ a t{K'#w&wZ4˒MM~)wŊOb􌔄У({}_BEaיDM׌bi(i5e>1?_;B4x :I,sYGp(W; BK!i+^)b?"x,=6C/yfn[K"KZwh&umDKp"ZDՖ?ړ"rn~r x!ƛJB*fp%Mhw,M6aSwE-Ru)&Pj OP|op/ N$D"e3S#j +tҘCƬ!WJwY 'qsS3ӱ钽C&L'CB[oi[B s]>- JouQQS#D wg"_bՈ+S zD7vݍ{N\/Xu%1wDvaY^e0?Ȫ8,vk}c~4Txn9X& Uլ @EY~fpL:8#dWRh˹#6؜1= =mK;lqIJV΂\lSΉe?uMWNVrE3 z~Jk]'}XV[~Oѽ9`')0-Lכt7ta5QBh-Ը3 A8T+MpUKBJ&\t(^\mm)pݡRr擗2m)HKvD!l qN-Hq87"Vuk~V;l@7oLLum0:kqQ+kbYjٍ#!h(ÔFO|<yI42y)_|rb^`괔a<46>r"݅J¨h^|h|_Jrb+">I[{˄qw&& :MBӭ=rӰ1>]]XcEv*bq k4c58GBfت ͢t5 SYc{A #U)2mfiTPG*L3}Y62tVk UI7d>p݈؊oS~q|_#Fd8b6I`UیQ2`34?j#n2E -93DMe4:$h;սtj)s:zJVM=ܪl0RUjp( x=9 dn#ɧJsTPϸS1hMlwp z?K27$bi]L+j_HܦpXߛ\z;-,[&%ElpҞt*ά;vp4NPzuAMƾh0{*0^ﭠ3\UI3yZ;aN(+CWkPv9 sAHxciO@DntuˇMNvn'_+RR+o B? ToF/0xPݼ iR-6 em 1n 34dMi/Sz7QΠd}*S豞NoA }9gC&hV7`vf/c5a?q' +L}Ü5we/LY㠳~󗍑߸_J|;,im.r)PjSM`qGԳiWڐcI_2*+FK?Ii:5dk b̼U^}=sp3!fTsoFSj@_R|B57OG8;2.=d̸X2{-D}©F#'玘:M6,`wiY=W9%kO7--,I@x M/j]fʕ5^\gj=rƒP M*=$fa2NPH"21#ȧjńD +!KRℿvfԅ;&Ƨ1.tF2YlFZY_sV٣⬔ߚ@M~w$j+o-R#3/1g]MZ,(ptC8w%@AۗEf+@hWC2ݺ%xʈO"jHY{H>cA"|F5.pn `+ݫ[nR\\o3-0d( ^G5'_CKNZ<_qsE:A5v~O8>z.t?Eu` $# O'-MLDq| gDmiUX-|4y)?^0=9p7adDwAK352iڡ2YEAiJ.x6}՘zɚR Or!+K2JV6hjաw8xg^Bw6Q!gdYLJt 7JKG/1.JoCF%yh/ȕ.Y GC,Gb1'HY 0Z/x1k"MWh?n[gObڌzR4Ni@.CqE>-xK݃A I5dv=j'6VAesRWXBwQ-F$v6BswL5[1떹z%9|帻 8BqRz>ɴ}z^E!{v4Έ5?bΕ}lۮ۳q~~DiLUդ{8!y[.A%ղ sXJZ?{slRZѴm(V#\јP[3dڵ8ײMKl+WrJRP$I Y6aO1O3T36pSUq+TO l'F^It(a3_͏{:ϣF DNwճ Oq7,K)'vdI7|.?CY" CA Waـ{TMpG`?v;H6%ƿ4#197 0 EO eh>4KHs^L2i)r~Kƪ'Q咧WAbI, LꇐNȎi-$k=iR"&<$30Yi%*nd{-c -u^94fG/7aA:뺣J_iT8]'5,qy ߨ 4,ع톧U@W OY~iIXOWBfre[ @? HUӊe[O":vnG8cSfl#*$`0< `!EC^_ؕ9Pw_uA!f/ߔvvPW،޾Uq{>|׬~= 2Iu2V']EcFYOJU^ZL.RGc/GMx(#z\!x(DŽj&P(w'7 ` ^f91ڧd:_>[f73-AVq_q0)7ν=F'Qw4?/*)0|L/9&rԍ*WlM:y&92}:} U#Ra~vZaO`{!Zmܯ.$U o fb (FIn vGJZ:T0^`;n~B&}(;ULjm#AѪԀ:ԍ)34TN^ !+k B"Z9!mIW>ACX(_9D _G?Hc*kaU C.*lJn^2&>5hx7e|.djBBCoR=>1ò.x̌D]É"8H6z%3#v7`hY^ce%3H {GO}knjλ4;^C?yļ0Ft.vHeKы"O#,ۻ!B0àF2w"`Q &Su_"> &dJŽyUtwς3>R+ϊXUF J61b=֒(f[Bv\d}ru.eZ*xm{ -hjk#ʜũbySO%/v_vOe>;hub}}KmcR>]<t"PaZNl]o PN~mh^WYAn;>9k™ PYVd~'Oğ9y7' Zfv>A%a*&W:b?o%eKRꝧRvl#<8ȥEU_Bj_ɴt׽(ܸtlt#>&L]%,-U'Nb6@w?PRNt& b8Z" |Z.\j{;*lײ mu)T|ipp"0?4YEvcWdj_A_^Š1B[IuSJ}f"ǧ:j1#7X ҿS߽Ӥi*Mc~_ eV9|籢c]Kq⊋$\mPq>[iE4Q"ضDމkteIN flUҊRÔ6Y^'#2. dt{.Ceֺ7R #Q7ʜ"tI9bta$]6S)#X\*?/O*'뱤ˊ uP&2cBf ~*0Wt\[1ЂgF e—Q $>6Sbc-uC7W0!E]MG0n [-<]G͵H4CpmcL}ޕ3(IJKߖ2i1Mɑ$8|{7!ڔ.˽ׄn5[ɾ|ɘt;i@L'mcw7&X au&G%j.kEja,rAA1,7$9@Ww{$\0`T%)c DwтSuwv#C<4$s8Z1^B{t3̕g]T)>JAsqG%*2m;jtj4X+0Ks8|̱U R77F`Qv$A.Պ~hp:kg{\7B=pd Hꏹz:ZH Q;9}g} yZ>&:eU:?jrsv.gl.T\ߒgKg[Cn Y& &ckw:so㉠Aߴ6Wħ 8: -*kCQ_8>UYK=?P#4sE#V]D<Ұ5\)Ml t^ NEThftL hψsyJ1}ތx963q_X;[AO(<" LmQt"qH7!MdV{φ{ eɭ%է4/Kqi6u벆nk`ZiI9IJWT Ė UcG M$[|Ǐ{~{1͛4_|NtX*4O.ң>Tv gon6#16yl|w*ј(DVJ9 j|$g>ͣ2vda8s nz\Y#"9p45:mPEЧo4~'AӴ9wF@d+POiMժ9|Eoc' Vݵa&ƿ0. ҔJvOȡaZ#Q¾ ߾\a}i m6<$YvC O^crd: BxGӜfJTQdX~84Gv9IH"k}G9C7#%oOᐚr{5I=Hvcz՘Qhy4(UZS[b̸ 6779A3^uoz&V؀c 7?gZjo$Nc̕} :"K"6xB2,pF%2Q2*RC^Qb8. `e7Ofa& &-w{ /g "|K%-t/ukcU(L!coDj+]ʥh Phlq'!j||3ӺySX'nf RwV5n@ูO˺6j9<>]ij${; NPc Pgi4ӻ+b!Az?XXAނ 鋍hT<yPZqarfEyC 5)o>7:$˼;Ii9bMW-7KAVc@>j2ZG_:c9OZVM<P ]XO1(C>u~C߷)g:wkHfh B3td/9S[h\6ЄqMR/)m$Χp"T礳VU? M"&;w/m*fc+;TаR jM-CZ`A=1;\xd0+$^%@+z.' tCAFA/JT ea({Qn Se{}cJ>_Dݑa6&%632*TwdpuM2/gp9[q}&c{QKL3.]PtEDy*,A1 r 'BʲyʳTR?2yim,YϭܝVb_1Yg*`Cm/@h%'_Ih J"sD-znܴ+Ix9cbĝy@R5OS~(G.-]zK-dȹ<~{O)ۯ0x E+yp`%|ucj8BgٱΈT0J`2= cE`Hƿ&NSp:Wo.bюoU4Osx9?%+mnLǒ@SX>)Өÿ 2T//W#xWg37^! [Mϩ Hsnuᬍ/lڹ,]>tAKxZ4&xFX=fwTtYmCᩃ0됮V~-|.հp ymnR;%7@a]hUOVh+1CG'H̎ٮ FcՏkysnGs珞4|Wy}4+Gдה vV'.mxT$++|w`A/B ԽSۨ;{ˢK&(>I[Z/S8u'G&) $g;C@+OSk|7!'c>]¢#}PNf:1$ZE)"h [% S}ɭ.F qp-b4u_ŇCi)dçʈ#g7h-I hSPima""RiV+`_kT`=4, ~>3qe= n)}J& ʘ6r=kjpDc)2{2c+^*-[V}Il.Y`Yjp3PSDžrO@N>L ;Qj&Y yYbznT'~T"NnUDG4%^EmJ08ܢ++}Sv j ²sK1L_Hf$MޜI,cu#+ŗd\;t[)0b 8y 27jsO 6dѼcp݄8,P# / p}K\Gru[<+-V?B/k ~ˌ66*}IA!%y2֓~3ޑT~؞w3u+kb?M`ԴGzo醝@C"1 T ^Vi G!BjS \`َLcO  ~бu7;b-SǷiFb^x:A;RF%:T'-[ևK^&FD7 /kR1u=7cc['&PX^##m 9U_XkXY\53®Q=`M_vi> `p%D<}Cm0h+}9:|Gن$НYϛ܎$G\5* nD85uRlY["LG`&9d\upz[4H )JJ|!ͥd#\e|>ST"FO5"B痂 ްѸ9qJӡHUHDSހXBq묙 ,ʵBP4 ?$꜔"\ΜQ\S&-&R3pOC„7~U9Av/ (x2'ɸ":g'27aOv^dۆ`&b(F0Je;A:(pT e#A#gI|i]>&[PT (^b;!lS_}]@" oY}Vbt8 ҂Rž:;Ç2^;O>vE9ddP~pu5-V-pa3 GM{tsOR0 },*;&όVr_WڏCɌ:Ȩ|h]*l$XYMK[n?źz=O[`ҩ C,P#qDf<(e\+D k-1$,?2r.cua . SVl, J0k#[e6/3E "a&6a1  -fE##|Je(V?䳷 CảPN!Xa 3z"9 D)tnk f{-7MƒIb3M*zh0wC6V.Դ1SխoL۶(NAEHF'FSF43EFGzWә@c3)F^ȬtˠS6 A= aAiJ͋_HWEYJֹʏJ6:yZD>"kv  =p)}FqG\ 9Nf%hOKS CܼGgQ zổhcX$ o3PT^t]w%6[⮇]r thM)" YL_nIj@~@Q֚;s|. 4mD'Ģs_4ev)MCjw),;| V|ؒީ~$.u|ݱzn%zy#0аWFkPCxբ]4]Te|SoO&Y+l&q3:7꨷6U4g,H"Q] O"07U緦SS-,C["xu"FZ[" 6s؛Zjʎbǡ4i/`a$@eFWk7s*<@3knx:%(cW.ħ3sr b )"c`7LPӦV!&A7ߘ3dQx×@d #7r.ki(y،g&uvg}SPI) oj!,H*s֛?4ZHRGKU)烈2/8S35#<趍Dv{I:yg`>[m$bPřղґ@_2EOn d-h`?n>f,H5hZuIE**!9*8Dހ16䃉Vʸ2XK}uVQXNk35Eŗz u>Ey&;Z/oj;srǠLKe&@!a:rve8sP3,/g}0EPD:X6/Ո^SԵrP9K ݩG$WCK'EnkOy:B=- u3˙JG8TgҊKRQQѢja0ގ Ib/F }[0ʱo{X"=ٵdkv{-|(RQlݳ@u O%)ZC;xhӾ]`K54c'4+ۍ5DZAĕԬ{TZ|8Yh*p߇/lO~ ZxPUjMP!TWkq\%=$eowmg  &7BB[4f$~??05SB/ZPopcIDQŁlap~2Ind#nW2L47C}AxXIqLyմBqT '3*bc8k-ؓM}ķLt`)ĝ&.O˯`,p鍖 %P>یF`]eaf!YS ?}@jV |3o/,JA6u^yz soJw%iykQ{2ͼ&VuvZQJ < Yʶ6M1ְbǼ~i2k7QR`!$4e-JTE8DLH`tԭ\ٸa(i?.C&hQhW)+zt 3N#`ؚǚ e N(ao7!ZQ-_Y,I H uZҕys\̇Cȝe"xÛo_aiǥ[sBVS)jo`Tk@fU ٿ\R06fGO@J(X$*uYFi[!2 ŧ:QJs>XK]Ll~vz ǻuDp1&q[ ~7pJ:ʈr#`Ґ`s"JXS{,ۨvUAm؅ u]qO">f`VY*!`;1 ZnȒ-TB{ a+#1ɾ<$O !Iē\bPӤb;E }Wf[{昳*0ܟe3 ż6%d7ș sm`+IњXL/Ǎo J\ )2d#cij>s d_$*!tQ5웈PrqЭؽ/)ĀH*B\Ɩ́^NvDvq5^m܌%J/X! * Es3q`,[iδ7B@Pt֘!y:pT׷K V׌M ALM`<u ?*gllEzSoni+6=miO}D}ѧ7)b{ N* bK4l <-EfoL[VE([R/܇av겕7EVkևJ&D`\w5Y1arklT&wIx>čq;s5($ěf2n|J@ҞA`MO;Y}b"/$HU$-jdj؜2[  З ~0AV`u*\mJA@A $*S kv1>/BBЖWB%hR"|b4&4'|5I|(c}a%ejYtHR|5#@,S:#!^ Jz|#'EKP; : !&# IݰFf[py9)H]{*(͢Idz:(lA6}P_kTyJ?sMoG%mۺY` 4o4}^ p[%YePBkRzr4ivg˃nye>;_pU?U7/DA ]E5 X;ʚ5vgOAZJF%V񂽖NL Ajw-Cv3OZ2=kƙCv0pq6$~%x.×Fr_L4A^lM3w?"a ,;ZFp`MN\~ ߝR5sC ,Hp.S `A &x x?ȅLZ:݋/-}13v֠=Z'kwӌ@I l溼7v$oT7ep۶8-.pHq'̸q܆D7s,u)eհjB8}Vi1_ !E 091D((.7~-bLqοɀ=:/Y&edY&:)4/Oe Qu̖kjN$ wc>*Qb$gh%`T8ҕfEhkqȓeb1Gkb7[gk\NU VDt5;KTDU(a%*XbQ<뎃xrgծ6{,yS66;/Vlfg(DeŒ?ӴOx c7<^TVB;Uj1*E2_I.J˜HiJ=48yW'񺭡:Gcuo/m[YOoѴ?IT To1o2z9(^_x7eKGiOku#f4 !C@чFSg@:vgz9T؅*{~3RO~bhl5S,N5Y(ڙ!y87 ~E)-FC@n$#!ֵΕDl5#L\iC+Dz |7Q>̢e֞&Z)#b?aS톰ΌCUMOp5 ~@)k%k什+\SL%?֞1_a5Uq 㼝d&VйV^)ԑ1q[oMT5"x(xR$FR(ȰsH'd$%(Z]`MhĮ8Ѱ2i:ScKÇ ;T$ Z'C_nnWVg-ܥj?7 BWgOJyI][ bX4}7ډE=cʡ9GKP_*<$Z l̜6iRٚuQt:~VuCB8%SdrvMwH' ~ +G\vʀ:c\muCP:gatyQ'} 0 j-}nT%MKZD\R(((fIhlNawRyM}AOP^{As( 8#ק#(|}<O= ㋨-*>~n"y#-#w:GZ[QIF6oנI$;\v!X~ur6>T7,\KЙq3ZDIUڹ ţ 1#tEtz} YڙmCl`"NP`k7FW8^f+.dnsϥ*a"@Mf,jO= UId5~xݯ%.e2!3"[|# v;Al$+TzG}'R-/<.z0bj?[+`}a#ϊDCjǍnkfA Eы4"ga|WT;I~SuJ>,> C {/dի&}y`Ɓ 䌾[㯄sdl w*mF¿?M!Q9(#"() ˘s 8k8 ʷurȶvrC-^?x6'j3 wp*;A} %ޏ`ܫ$^* !Q4ǺW˴&r=^m&YC"X܀KtzMտc6lQ ? zRZccUEɉ-%.S!O| TCPHbpz`Dq8QZQRMбiy"{7̈́< h/@ߩ<8b8 Fn{ Cx|B+TA:<`Ɯln=}Uݩ8X.uʁYfbBˠ9%wxg+ErB&c]5?TU?غ@g^23stlky:9?ћFEf׭yh 9u\~_S|0 F/Zvfrfh4 kj¾ ,Ķ3ܕDQ+R53)9ٜvTeA*0b{/[g%&!8nє w hZH慖/ѭԣGN|"{ u)xќ  6ᯬ Թ[d: ǧg$q8"cϴ}lM0T-hu>.S*OX}>(Mk|R)")D>;O;18i #OpgcƹrObJ|%>pb[*p6W {/CX^Xx+:"plj?b"g1]eH-i Y SׂG۶^ʹV"[GHRe7 nMԵ5c]hHYcs)3/s:#?'OuB>| zj;;/`J@33n+ 9%2$g4Sf*L-">h8}R'soe RNSGe(ʚihESgIyL60[ky7}PT 73ܔ'ßGYFY"f4Cfa}'F+L֪kkd{k"vhbDq4,0a'aQ!}Mmf`g ҃#Xr1yDZ/;o=Gd54k_|͍e  g H#ёbTm|8 dbRO!x[$z! vu8M> XApv;YΚ2rVvkxfEʵ.0HV7H2>_yw]8RA%E?.s,az$V^j$A?,-b%  F+ hv+i< (鏾mfrccRv/\sz+R+ {(-2`zH U@OZڣc3եX«έ9@-7JǢDztlrZcm4UC9m`0zf|Up~꼁O>ϫy_tӜpqm#-gՂaf2O * RIi!'us~zwyZ7oZ.Ilo7,25%"'ЪyGìSPX۞1m9[\gӬԯ戩+:T!J?Tpi^V/hw8d7!ay&Fzkl Ք')T/mV[ݥphTp#﹫/yQQR+`ktL=Bw8F챤k~.5 f@>i(aKa&MOQS*%1=B9'D+gJlF {d(kS3x(6g?,Ht܊]c~2L &x-޾ND4kD6*>)daQU0JK)qB;VE7m?yY3WqQ餪Mj:&JSg~` ?1iL's>60HV,i$Atu4`7,1 (:fu:w(Рv,l '֦>q~Xg}10pui",olrĦ "L`JK3SM. )ަ?Hr!:*+*ODDrY¹e _sam?8s1FmSM\53WIr~O"Cea^ w`xkbcY͇Wɵn-a{ e*icNu!9K]P< &ː?YGR}l,uqϝEoDg((N`7|\ "vH  sƴ+Yc+s_h m)Ki:cYo) R_%vk)_(lk<h7H(+(<"Bm-_@ckSR%zR1J,be\78xv`U}v wjX84c p.GS&dzʼnTŽXU%aTy\-!eܿ2 N,ϙP>_,ּג8aWR7(6]qq0Z8XpdffO}f3u޽td\(vjS0g"si[ ĭfPO~Z`#Q#Ͻ Ǭ9c ʻDJ6$5u &xދCYm| },חc3^R *oڵ~˛BD鎓m 3?M:0Lb"h{#IRu1!i79*~o6GSd oe^DZbSVLmu)X)GrD oBz+Q-<`(ehEA{i]=,е(bpPV4Puih*CLA8[XɅ'vj }Y1bUVH- gR*ݤ~c ,2R=|EKp.(=їSSY}"dY\?%}:]UA{$6bHWy벇Nz-P]=WLLJ$<pcVC0.ݢHg71RB]ڱ*V|:!>Ci}((k=A'7lE,:b,RC( R{[o'01+*obbVMR/ifxK4$i[\%)Mdz_nSHRk 1 Xl&qݧ:rO^\_V{%nςB$'[ZW9#:қ4D3T-K į^؟ 3JlDGƉqRhMhT@GYj+C-/sxPlR!qɒ,3F4'jގv5 +"ȓ@{[d EbD \{I,mHdKCh5Ԯy0$y.ɭ\=|lYc_XBfc!.APdi70Gw _xK;;[% 6OPؒě9z; {n?v_GU3%zӪ|Z<'4"h>y~v"Jɠ&xqYc{؅hyq0{nj[2u$D[Sia1_o<12aj|Vs[/R#׍SnteZAU(Iөhllt6Md΁]j6\:y9')`FёxMz[v'hx4aRH hrp3{cvf7(f6V- s5N9i1m`@IB(uLș63z%~e6jA} K9]q e9e9Kr#7nG8iI)ũhP\әO1y$l)e5yZSQ |x y9x$=\Y҈Ө;tk'˝]}v{ N}ZbEقQ\\G%~/zRJnDL9e ,,OYg2c&@R}>%KLKFt0A@zg02D:lxlw1MI64dXxa "UfGus\vrНx.;KجdeyH8ҩƑ3ڵL8.aa.^ߣ_V  B'sˌ;3 ~q;~` B;ex̒¹ g1u<ʍΙ("+ q5T7%gn9_9V|:S߀vvedkbO֗۴9JՍZ ([pF?Zpr!5ssguLe?f~Q\Hη"vbE6P>U] Y7=6Xꇏjvơz C so鸣'6_S@p3!.ZU7WJ:nM(C8(q9CJ~ { yN+l*?SЬnYB9r9JôDf}(W'W=*e$C$d1qAR _Ǡd t+Ar+ j_.3 뤢ݯ:j}Պ:_AՏF`FbK%,Z g>m`2/9 N AnL|ι"eI'/DP]1=PZyEUڙ_A 1"sCY* œT(Va!"1( 3[rq# .I7XJ@w P?7!iL}\0hb EŲ %%Y> "\\Qۚu#//X uރgtiuU%t8$_d:mqQ59 R颬b,Rf UN$q >V Q>Z'dQ>~f?*̓zڞ-| yG%$椸Ů]/+9`&BLqRh"m!P+r#|sRPeiQeAΰМUysP[ z ^my? ' qaDjJ-2*F\ 18 b(,Yfy$Y<2Zayo^)liɼ%s]½:f]\L6IiLg~g7_1ojlXf`|oEBNkZW+-n)hL !(|<9 ִA]Z{%2Dh2ƔYy VHk (xrP ".pb-W";EJhh&4-T(y֏v }vHES^ݷg amd0RdRpbvNhV QݓlN}ͬsxsJQzv|O3 Xm%q,^_nUXo^KUGq Nm0ש?m3S!o팼p žޒ%NV",nf3{4M*9@NOZu3J{h*q 7 VCڤS`T Ֆ˙2%7\ ~0ES5wpM># ×/`:rC$HF ?a&4$aM%:Q#[ vSÏ `bq=n5kE ҧg۸w(q߃_!Nn|X}YUGOWBBYʲ5O{"Ra4ˇy:Xw:*ɴ z`0B7>n!BC- l5"Z6E$:t,QDF{S$\ĐoZ S2f 8HnDcŋ@ ٴ:#Jb/oݞyPKe@yAx +'1>9c'&t|vW|V) MOef6eeEGGF8@!j$n"({ Ry~sD:GT6mU*uPb\ Ax+^E+H{ u4QΈ[z-c40ϫBᷛ8Yh-x (ø /鮱lWw rj'2Oh;jZ"l`݌^sc-Q/xdvxY3:r^ l g{5 `U,dn .]I 1BA 6A/q!0v {6%@e.s8)aאpB6Q CI52O5uٞG1:_\B߭TLX6pu-nj\i}A~*G o3R-=LC{+2`z.U}lod3#'jMpHWV:;ۯ8p)!=o͝>rץ}i6y vax|X#a ,c7 $'B Z[,{mB Sí*KQq;?*5  ZY6(-X}>10D3R~ Jc.hPp΢mb\z**8]-BL{ffaV\qD%xBPNBi]%ع4eؖcKbK:7z3I iP0zKǙBt~rWqrFG(PkȪbh1/| UX@|:3 vdGKkdME$3WD#w줍W~6~R8YQ)H18s1+)IVPaO[/(n_f%T9"NgrHI@؄_^i `Q2HOfhV '+9Z&R+Kh5I#= $R)ڥ^AQ$cLN]޺_49Nm ֤[D8z$@֢ *?m&, 0`ggU>If0VV}nŒgS6U˧Q̞Ңَ{MVtuSҜ])dҕT]&=y ̿tOi?`1rj{F;H?rKD@C@辀Gƛ!a^_}FW"b6ڧdg忠zeG$$N9qu!ڪ9(%9(,@[ȋtXLot w!#Uwe#NTWvQts hJq)l*H:\k'mDgܦ@퉞 Y?·S)yK j0\fnU#LsNO-RDWz-~pY;B%յ=Rk5<$\3qUZq~#IuѤ:YY;v3'VW@_]{F2IM;XMV R~ ip , jRok*f_&dgmQc%Π_wZ-"'pGJ 3w ͗].{k_`/+W(`6b.-ek7M]> rSgtYK<džP8 )4̰aSb2S'Ava"_AI;In%q1{\ ІG38 m(,Hzq5Dz6WY_ߔT:*7 1ya^Zl.LFoF˶m3&v708hwUdMelowWi>ډafsoRO29nu8̚Ś=QP3=Ѕ"S#kp̭?>A;cgۆtN4Z_V?$2%jgG f5]] ٪uaL m 0Ff#^F(](%ѮN+2`"soE<&5 qh6\oW++hyF2Tv.itQU܏UC\ܶ 9.aMEz᤭ +ʤ80ki~;INh |m9}aGJxMe3_ڛF'wt}a{=]W(lzv,sK& I"C`*Zj&Ȓ9`m a+M% aVxrf)~ #_Ouo쬰ݤ)2^Ey|K;+EpNEҵԏɀ?UxA# 6t3{Za_ dD:B Q sU SgynGGH6Qe, Fռ Մ8n D9`yko%؋kĂ-4%-œ*L%+hiGvy (Č[DZ=8-Ӎ[ sX&݊o%Q:.0(T av|~"0bUyYk& h7H^mt𜵮Qmb(B}zxTO0E4I95$lߪ߰d.5ڶłB','5 +!uA'vf*X`hQ>؞xMóH#M3jT1p&9Šك`@^6d>  pT, ,%VÐu4Û2SVS~#TUZS>,\&ҕXGh.XHgkKjq/NN^;n7}sdҷ''{Z1g !٭*ښ !J/ׇ5b]] QJ T'1#RrIpڎGtTu#b b_ZƑ_c~͊}?Sh*KL70୆5*Lv+!<͸$.`MqG˾uj-T,u *;7' o*ڼ4.Q݄N,+,>=H(,4(V6,/禃&!]8𒿆?<C.hȷ5Jx[9;\4{  @ow=Y`uUP.)uْPVSb`ɑC=$$Px֣SF16 RWRŬ(zGIG-2ye+KO-lAQ~۷JBɞ"Ϣ~RZ1R!٬{+x5e[5\Zh5]JrFq u_C/<Œ+4v'Ak\ec4OwE?6RTP:a1F.y 9jHiGMU륊CRc!͜Th=a%7wَ9el5 8[Uߐ`/!͘83j9 MߴY\#r.}RYs^o0\XjCG)ujOQ*} g6I ?إ heEDuX ( yi[-Zzj4#F܍][rl#+KiSӺ63phƢ1Wx `orxb=VA`ʪ^L_{ƀʿ<sq#BQ~ s1M>:#{_ɉTd є ߀M,`!>y_iF  [bV7 챭Tpe-d&j>56QӀ, Xh3,2蕞ȝ͟őτVl*}0R2x\ǻuƥs9jk$)c{@*.#1$)SZ|9PM3v=nÇ(,jc̖]Ai/H(Bڅ9k2j/*ۇA5;vm&i"nʪ$)z{ixȲ/f@b_]dMfB3%<粍?}uRzjBP>#Ww[ձH,4%Ă^P'zoz`je^:)DSa dpɄZJLNk$Qf,+a>P C۝Qc`9>*!j{SjcĀ*Q]oCU'-zZr2?)U*ȥ4Ihٳ Iݜ>-zj>|>h5=//${et"{_l3aD 0|L;QkJLaҦ`mPQ*(E$ Ndjvx各%"@p'b8{r@Tz[ Ҥ쁏=o,WSHGH]w,/D?<rÛht"MgB7fFgdQ TW (/JB s嗻)UฦX}QO W?" Q{䖝aq8)TѕhWLN`u%ҥ BcXNuGb>[ 7NXhȈ#0!v,*n@B):]b#B+\Yk͎JdlV?KO@Gxb:s"F+FB@:mbsI|(̩QD(< U{E)l[X<-rH>^o{iSnz$+4 Pg3X{7r\."^'d4CStji"#98J(G=4%Iq:xo1㳬u&g]fq.O#+H N8\]?UGao\.) lPl(4Q Imx~wZuǔklG/>7ff&'D J Nic"5%߸EXPcW=EX :6Qnjλế\iY u E0E "w{Ut&&s6Eʵ7Nb(A۶$ѱ&*_7c)Is_ jїZ|eEN .邞dIaGD*IK0dNPTg`jQF~7AjGz1 5w: *2BJvlMqw\?jSRnϤ^z`Agu9X3 *m擮ܧs@B૜6a;ycXv6#0X/ MTFsLQA!U ;uyͷǣ&_"k':)}j:Jg@MWjvbYw#y2ĴOJ\s]3En6_ ލ,*i~J xye;\[PX2%r_䆄s(|аf4j1~GwAmGTӺ@5 P` n ܲ^Prqk#!듐i^1 fPUnwK2IoJO?KF+C9}A\h0JxUC-(giRJQM>\z[;*TCv˙=fUϮV/9Ő aI'}?`BG(guRw/K͢'1nCj'?ߩKf\F:O-'s aj߫W t"IF[>J1Wa1dcŦ]qi^θQ¿6tbDGp-l=-j I8ުlJ,2f/W7 u4/RƂR^3q`FLэ]No3p$6"MY魝E8V8uiIC;R ҋ/NN)oas7mpYCF/"[G ypKT OYDhJ%:Ն/ .[W]{y>̀~`m]K*8%P0y9Vh̵=>b^&EBDpE#\P0i.u"8ǝMS'_(eŢAA|WsDe`N@VA]8>#q>{&$2mebNIWO(ol'&ݦ;L̈JZf|`tkWMo}W [S/~كp R]Q ql˨B*TNo9bQʴqyLavڀ0p[!SI ]|jOK␮(pdq_%,CY8 $LQv$+-KOZ@O=zPG>cG- E_D*U/y~ )//~QUFDZoELX+y/\0v@=#0\6s %=iJӐmecUT&͵Bv vW"I<SWFlyr$>'Y2yVzKu{ȹ1$S}G:T)?N"Ԛ q5P4Ul("RkGbwx>t̐-% ^:xqx)Z  V5B=|]ր-0<3cST?{ԷˆNxlgbqu̞#jyڡ~W_ @!hyW |aΞx]cšU\rbN(n ^H2 Zl@jq?qVdBIgbg9d)UOS1$z-Iv)#Za+k&8M\Uk,` `G.{9AXݭSh  rF- Oo _y+%7]K]e[N2 {&!Kcl[-W}eq ncd<Ihۆ}H@&wE_h<$qA5+svKG:#i$3M}]m"Dð55Tchyñ:FkzH۩`\,4o!5ռj϶xBW+a;kV; 44 -]?k~c3Hf#2g n Y)MRDF~{z^h6 H.O.+.Okwrp,q"ګ5<&\j[XI>vyaa:&>P={tlj .6[:*Qb`M%J `{ !KʋFC,3↭VfV=6嗋)fpd~Ygp#ͬKe1ήƽ t+٦y)P)EZ[8%(OVW@[}-ԝQGvTtpktH"%3IˌWe(Ha?j$ki;}՟Ź-z&w WxE97I+ l[V4oҴ(P8ĮZY 6M;o:sW48HɕY15-%@Sw`$WClf/r5oZ'傗5,k@;V7Iwl|+ζ(?)M>-D+^x*6){{hA7?O֌ѭV_r2yYsc&tJlCJ ?VcDucf)AA x C դ]WP C+F/>./|O^Xj{k)$.c$^\ܘV@;?ܯ( Ft@UZǒ6&#Z]1J { %bF}D*)<ͽmuI[adžׂ[˷ dq)HoHZ @wvȬʖ֝v!y8y0SdoL{eۙ^o6 ;ܐM*kЛG~{2%iQ^Di QTfIK=" 3V(pg qy'o*<k3)SŠ\o_%._ؖ;z~&e$']7*WbEk<[=4n,c/LP^@rw/0"A!"%3FOy?Itoi>(rNӲ2ƐUDiQEԺعhCR[lzAW,0fw<9̾]^kP+dt(tϛ Oea`juA Ƹz%Td.rERz=8H<+wH>, >(Ȃrb]e׷wB@?rB^jKm#7b,i܇Qh\_纳qLXNNJt$|w٢ Q?7KD¼DVެ:t+9u 3>&j@XkYH6bWfY_ˈM/o ci/%doY*9Ȋ6Ŀ64^nDžM$ʞދV]tԲÞŒ)9ؓ MlLr66e5(5G79pL>b%#I!V \䈈Z @F?g<-nб M^^ N&7 Y=h7^NCK[@ô^^v6{'D]: cws=HRV(1&7oP80/k !;%8A : c%!E{<^՘=VˆH7iT]֎jԯS./S(m> $5h!P\{8޾30f \҆M@.…`Cnδ@я̋'>Q1dwhi,c;yE p:.ܮ-+'[ I-]{.W ?K̶āOO--5 Wt1zkt/SIa5\)FgliCL"@{RJ.Y  Lv.t@Ok?m"eAqO;ս )cQ B(Jdl^o5*/JE*-b~aeJ-">M- /Y*@:]%ۍ S4XX'?y[nѓ *zhS,7+'h tw\tJ#?I ϶M.>4Eu{ai4gw/@Av"~ sxNudɋZy{m@X+b ,JFrt7VdY?gu-bק. I]CƀN{cKqp_jl!|{~_,3ĉ4K-8c?߅Ԑyi ZPNhoJG%8JqMLUU y` 2tt ?\ŇKwr%N,u2ZboFc,EEAK % &l^^X)lфq&~ds)7IP2fR+aIXNmFp#2,:E/ VVjanIbe3<7yi,|u419XlȖS 4:a\Z JXa}MB6ʋ==>J.{_̾?t֛bm "CU\o攻|a1FopժFF5rA.^71s^nDX'Zn$rjz hs“߭-mj(=:ɯߚnr:@T(mx"9Y^l"=C*%k{#ǀaeG:C=9ѹNbM.\Iwk:G"&xT !cBFG%kA2jlXؓጪt5@fD9=cT(ٰ_:Ӕtho|PpbrR5rNY=>x2GaQ=tUށ~CQB~[/uA1zwr.TaȗYtw(@K"Z\*3Ek-s:}ԾDNΕ׎kg_#B]|X Xn31e*]QO< 'a9A1ANgo#4$ ߂N-͙6{S/Rڗ_} p1?FϢYEqZ i6q8Z T=l_5ksX Z\[i[bHPڶq!3( nRyiuuWP=z3/^5lMF3T/F^UzƧi)dk MNsi "θ@#ny0/Nq; teqXACƉ #'_Xa>j)&>!~ELʇzTttd^4ۂGY$E9j+T˭*qL(J`D8ɚ"N8־U0 |iOVe,YOtELawHwe_-?sq0[z;~e6ǒ(&`QYԹ`Y#>]xͤC h+]kZVGN\}_]2Рd<68@qյ]T덺&B,$ w*3F<}BoSԷѽ/io >ӘvZFwsРDRLy1Yr#F1Be,?1Qz#qrCÿ2~g4j5zz^_䡵-:g]l% Dh=)bD.d|kaQbFfaUvH=!/"2GYtdo,AiVc,c<н):p6,UT^P-J]1.Jw._65M% 7mԙc}>>ܖA_/g=x $픠>gFqlml:Wa8ږyry\}DbjN#PgT h.YCֺz:4(KuXV3> ^#uOc9֋b|kܵ܉@3V1,do죒-DfvONUY:D s${hDrtb&㑞 EBr1M,Zq(j[Ȗ< #iI)<Ph VRqM(0?j^SHHwoܸ R,d3 %XgJB;W/EZI5]|8(hvnivJљ:G[I!G** ~l!}D ˽L &C6;*mW$#t';t$)XɊ3150W=x NLq=b/BVZZ\odqg`^ߒLm<0.<ӑ6pI.5"""%xK(xѿC>igl=ػs}olgSͽxwC[5F1YWOE< ,Іo'7mD@(z޻n ,cX<}(h$p\SDv#lgdbt GՔG#RSрZDF/٭%juvƴ/wWd뿝4ݗ1DՅ=rDG$3s?OscG/qUXy+Q?LρG@SfkQ8'WMA gkwT@>_F+(N9=n>,h Ba)T!πFR\:xVOOІl}xAGKd'eMѓu Mp6bE$y,׍ TvKؒ*{34Oy^"@S]5 70\E998#'T/iR_S@iZ+Ả0>z4>o1K}⃘j `, 8GACb?8|#O~bLD朳g $N}$*w*#gw2WɶkIFX|y_ 權;c'!< >eW@ίYs<.^#H 4xNMzsF,r_Fm⑪y8xNW.p+^f󖩖n{DvY9Pf1:3vr|$PIb@6#f2ɺRgkBQOm C#w9{*xh6Tsu-Q"ar]+@QP҈$'S"7+rFYx?۟v7˜M,9}0ܢ">Th1֌A#3ϊV2bJy__;OAN9O]+ulGxw]Qv}P{cF!i|9+A9}ɢV=>E$e!0U!jի;wfFLوM7J=&EqJ"cs YH i4.?m gq95ssv+ Ggb.s51Yjͳ NNRd:U QK«zaD.FjdCb.4ўŎXJ6:28"=u *HZMQ_zd%`ǶQa~C%EW^moP>[o25_8o=;Wܐ&hs7@F(YѰΗ3!ygm lJZ}ih\ _,EZ>Yk.F^STʹ|2?=J7AtPMԱz3'k5JOb sܲaMCF3|R4ǟԁtS(|UMxjp;Z6\ZF܎BC+CGĐS. (t/(_T'HfC- ?MRZ­wRIvm`;7GcP+*4ȑW`Kf<_z?iÆƊҤodI6\Xbv|5~6MqY6 O-mfYqB#OBe|zƧ3jG:)XNJxZ-@P[WV;of髿SdrZ8Z/d0(*_?aoHvUPn_|+ۮXIqsHOiK>B$_ÏM^?>1E'S*D?<1c `޵&!7ϗX^Q ӝThz2~+ 4H6nޓ[jsN]h*Y hv/I|]'x25+Z4}~ X-qf=6_Ο-#;'Um-[5åZSVJQ*^{3^1CR ]_4Go>ךV io$`K.xzrɒFzssN߇! 󭈈 %9ԶCzV,+=2IWb";bX>ZTk5#OuZ5JiUEd,@Yzu,'U9Bm+rBWڰ>yތYDŽ6GՂK2^ _[.Fy6vY F=q=Ȭf,YZ@%juN`M Bv9zQ`B`骭*"]C]C22V≮t Fi^-\00权63C^6!Cy'ZU\>jx=[/n?(yܣbUY׸$x1=++ǹ D?Դ hmyV̒oXRTQ{"L 'UwAl6 +NMdK³sX"NaW6+l謰XJ1giKA."Z T/43oqao v㻄if +lѐq1__=pu^5J42m|T^฾09<4fGe^B{dnY+'*$LU/qڇH兹j ~D \ҚFFчV9<}rqcQw'SlfFq&Gtw'jE;cJί7@czۺY z +g%)3${d U: ܓJ[orK̵PpiK 1=DEWs z2d 5={woK ^YCFz{X ` qNsF`V5Ve@P\M&aLLsbQ[|Q}EҔ@g&ck Ȉ.A/9Wa3U 'lg MMɅi,`Ј3$3ͳE:eGa.hK@~ Vx]s6eYUI ~ Ia7TM$KțOptNⵔ@}U>mACZ['10Vs&ғd[l%Dt !erZ{m,t+ y(sl+ X?UjaD?la\ QzI@qrxSVxQ_Vx_QM W$yoRy,,ɿG4rTTP}Xiܚt}$U@BgYʣ-$23\BeUo ‹C*jЎMG;Ȉ߷S7.A}@oxc(z>v 3HX['93%@<;S_յǧ_gS"60b~uW)kvI&-p<\<11 `BƧlB_$$mUp_vMIO`O\{)M #"SLJ,:(*\0eesC`M7,7S{77v f*<qJU.= ;(x::Ct!qcL@: &ެp>)UPQ&]LEtp|ILqq kMZPM129JAgkYF sbQM 2r;@Fbn6,>rSBJ0MN=dy{h+ KnMҵm2$mAf[tU͌8+> ~eoӅwȡGd;:Sb7QbM$īޞT"5jga*qrVvnf~ %5f`DQ6j^`a(|mpUu+rKګ; &}Єi4}9n4վy{t)_5+QO]]ɞS:xK ܲq׀+]a>W5~ěf.\K6ĝ).wሮ'i,KjٍꚄD}Hq/3N%dr( \{ld ?/[oД8,8@dْx)O3J(s'OW"ڙ1R{1<ض P eJBI]J^ J4i=5RBRQMm9"*;I~@,wAj_Њ@x -MF] E1k*z%K!d~؃`n2Cir"/w82NO.NorXznRw̬ͯ$,K;Yђ|LL)U5~{]gB ;|9 f:HZo!LztT6OЎzstEM獸SΘd4;kJ X A~Fb΃Uʹvr=j YoۿO<ʹ:uUaѓwþ(?%$ur*Y9Aj{{cp"SZ>8<_|liIU!&tI_L eIY:sB@F"8@%>OV뗥v̷'2VmRAʸ\ E72+_פXa-2#}1E! I~;m%^/mn"'QenlDN3o}zwJYf%^,hpH`!*J]76@x`(؟o,%enCh˝T˅瞕_|| |R~f`O1f>Sޞh=xoNa,;UR{\(B{ ev1Y-u( Dl!Į1I/W4TrXm tw Ե?FkDuX7s\{o{?E Ɖ.ʸp03a`!(7s3Ghҷev.I_/@6Ѱ-"բ3ն fa+jS}u, |ӫnJu̡CȭL7Ga3GV5Ak^ReLߕFfh?Lt =%sx61dVK>)ďPl=bW#}9lxC4Bh;tG@&{f;i"jXz$+_;(v*uդ5SsYm8Uv2B Soya_lnQoLu γV \ qs،-LwIUeoGKަL0Etd"sp$dD)2`4ÎF1]N>C mU@eNmXd#4ɋģ7 .gmj7nTM" ~~yZ .:F N x5DzͲ'*[ |KYMJ.b Ԅ&/ MѻG+ynr7o|@�`vqϠ1"9G<D'`ԩ]NȴD!Ld6:>06LI/G?% 3%"APj@X-6E6.X=fo,38or>.؛ նCj9\ԟajr쮷ΑwXwu^mB!92m]'Zk3(`HPKYWZ.LQv ;iM uN@n꥔lͣg uO q MT[)kwxl>)i ӡegțxAKkZ<6L 0KƎ(`67h|ELN6 ɥ9i$"Ņl,pc -E;pGw<WIk*g񼕝|ezϻu@8\?4x(iC2(8G3oh<hׁ!lpPI1ncM089??l?<'J*o]>ۉ"V-pۓ:hhNe,@0KgMt4NA;:Q };>J.}ܭtE_Y6MLu Dϯ1e ;VC@DCOacn#H,_oNEx +ɤW"[Y L8-[Hi<i"4Z_TPQm~-ņU9zh3!1 BuΐbBwjc(I$QȐ)kcqJ !!y& --sߢ/ VzYQrA}OBC̳~D "W! o0 1]z\[MHjI!۞>ՐtKUolh{{Mlm /vI.[ҍ=5VwCF?=Upl`|dTxR#+ 1jkZʿY%`aI\AL[ai{' JW;a~Tbkr=^g14CB7V"1c!^gęXK /yfQ U'\ԫ&/f\%WPTjDпCroJWvEsMo#W$$̶r5̡6)Ld<{ʩڶ/;ELFʼrxvȠQ>?룸> +]9mf2. d"ڎ5dKiiӕaFsaž{r_roFf} sqAiT:e~ZʹScÏ߈gjy^ `V5ੁ#]#F F%*)@*3ڴ[O.b~\f9mEhG{xk^*n)`:b>nh0 {θ$kJvӁsݯ ziId]O±Өꅤz"Q <׿}?EU@?]9=Z]4K#c龛"kI :!p"pcve: Mj_xoY:\fGMg0yșg-SG%FՊfzEgh4bLv[e9Re Xj['UMZlKo`L9.IܧTY{hyY `>oN{rx MQ "ٮ[T?Q9mOjJ&I3la~|VfwѵgZ-jPVڳ;VEH80g7@y9w<DOp(v %Jx,hj1αUxWir7 dL=bK{Y&Ӱ+F#zc x*:VA=,xZtddZU\nO[(~"SeK9l$R)Ӆ;d uگI{0o[I{Z*C\_eq @؄b 5ْ0se[k.g*dN2{U%WϮuqY'49SDIY/*v 6g?[Ͱ+7,`D7( A8t:7hA 3-6 ƁL(pv -[`76Zdy 9qe^ty?@&?c̴QUq֍-\qr_UܬP9" KLǘ{To>_Uu~z%k$b/ Y+?NYE4wsKsY(/KGF1m MUBR2qS -Qh1TFs01Q\gZ9fl2=%Ct^d7OZU1I;Z2 ,ݓvst唶8+v|Z^eǾ Ѥo<nP?n6La $ ?)62J9T{ ftF7(LKܚY9tlO+='B/tLq MpT3zϦ&uӾvBH͓5[Ӓ^b; lNtuSRbM 0\GO۽3 6TUHH;#QvMˠr@|tGBK;/:D*3RHY@t OvT ֬ rݺ1&wfE emGOD̈́o+5$ƷY^ #E@5h>޽xo7%KscيU_`-mzMߗsA[nt7hšdg=swkzN\p14xZ~vykGKz;o(L\hc0.MPH}OWW ,XZrG hZsy)6hQ *pXC Tx^L.&68c{Pخե~^Zk9L%#dvJ,.ۚ퉛W2=?:$l/.qUL!2U?n_|ǭs]yDN(,Fo'8La|^GKկcDB~+){|pUz1貯Q&WSb<u&khw;4Yʽ^\ˠQamKq[*0# εذcmP ;t6G++omѴPyh[~(ru" x: ~.P M]XkmqqBc(trW%u ILS}֫zXh\) @z2/=la%}] kp1"6w- Xʸ蝼ZN&!zvY:0<NJiӰDr&-cp}qNZͩRiɀV_:dG>xJK.L(fa)Wp4j}i%2>$a* F/4$"Cr # ܔhbٵ.Zq 4ED1M> \9+j[Mo% vH_'eyWGknX٠Yۼ9; Vc ²LaWbo1#tP*Ђb7h*O.><MC ՀbG qm`A3xG//Ee]@CMTZE7X]Xn"0Rnb%a<5I[)8C V1[Vβk{0{{!x<("{~gLM iANƍH}s kXVp!Ƣ3_7Kk/XO3(h8q 4{f^*-vѦʱ_3 1 yaCz#Xn By| UzeiH ^E3|& & ah1uNzTk{KuBD́6"e֮2L HFg=dlUjY]rs4Y)0 McmnܯQ)VX4AdY-J וKn08E=fX2,ѳqLQMN>ŵaCsynølG"'BgS-@ͭmXNJñO>FG~:, 9w[ 騛7j^l489DD-˃9Yբ :p0ȒqoTy`ET߅Ț1DHE/Lבx `6<Szv9=/;=B'j)-݈Ӄyx%"WwU#伀$FE{KUZ*JsҌuIv۞ӝuXDVyGO什Œ%LblGYWH]'AqoIkbW])4 ϩ#i~XB1o8627]vSgP|"C `ڐ ҉>lАn-{3g*9c>6+k)(Lu>Z`x~2#-}W)ސ4GLH赺C(߆ 0x<ț9/ȓcK^j^\e!/@kѴ lm6 3w7N04k)f*՚?VG+vݛrV>&3M%9t䆈Ӂǧlgm12Y)< d6tU} 5p8_V_m C}{\ߔpB,Z.4oo%FgaՓOPݗDZJW0_=Wa^G"|j8 )q( {zǑɋɦ3!1"xQc;U0ӹ^3eG՜d_ |*+E{\1.ԗ6kή8C[,N$)}  ςZgsHldM<)vI\?3`^ +4G iQS ݒ*o.8C0@#mV>S Ϋ$j0c'IB=*};@]ehj]D̀Xr(ʼn#!Pm! `A W$N__(!|Ա+if:X͎eJK =7د]$4>zDL6Rxhwj SJJucs|(>T4dIvEAs9Wٹ'BD{ 8}ov/G01#ٮ>ݦ`E5)6HdίfjtoSw,A gMjy6~TK&z}ӷh{8o'Q,3=()shsQ#׳+nQ u!)m5*k"c0x8h䑯 ׎MoS"0"NѠ2~QL7y[d[eS Bw14([733?OQq('5S{U NuJ,Y̦z}vqv/>B=4Un+Ɠ,bʧ' @qomѴh6tMz }ؕ@?1\91 ,+ B*">/D$V:Uw^3Z]Ibe[0 Y'zgI"$ ?'jchmEDQΆB4Kƈ!Qw_wK>@/K[Ǒ,Yv/жan4.D ;VO0 <,޽TILbtL1 (ӕM .ڳ%L &2fQ6mk)O,5=GtDIsFzU1.J ^DIa.* ʋ|F`268Q6>1 M+DˎPdգryHae]>Zw/~Ѓ`e/T?=J/"Rޤ=}yX~A[| Q)} Z6 7B٦3dIA<!]lxU6gѦooI-eQi8|iy*piw- xi/_f/ݢH0!_ &:PtMhi8Kvʧ?GtZ@lH 0o嫀C+)v hq]ۣCGkE(/̂Гa=P6w]>o"ڢY_UB(9&*akv,&0|3Q<ś9m#(Nzċrᤤ3YT-(&D!O '+PLtLg:Tk7Rkh&eUi B1a{S aa4H|!981{;DDbzӎ2DfoڕX8S,_k>]JTД#hp f7Ŋ +XWa+[F LN(ݖQ~Uk]4Օ0 CT,䙮L`9D@dg-P gT_ B8?Bf7C*pa[Y >=~|ΞC[9QL Vi$~(@4)-b lpGϨza3ʊTƛgv\KqF&@-txj vr(]W'Dԏ=Ww][26 b’t{u2ܓ0[?pyO&H%!6Vn TF1;O,0*`k+UV#GCCU]ܘ!p ?'+2(COO'ץ5;chTHp?28 @)/#Vng+98p׃xz2 }ME0jnzs;M+]ez~'lSIrrkDFП}3PTxsSnR"#1E Aj-0wheQC?^r~bx=އ4p^^K 5= Ba=[n߽~WXTi#m 2j}' ei <<+_o&AԠ[[V˺PPBgTo3wI֥Y@B>Q2xsfĊZ޵CM'~*-:UJu."U9:Sd n\+UB(WTk\e{}cZM̛M>H:WXE*9/RvKU#;M70$RYSOױݒcUb>/mXеA9o!ui|̭=$/%#3 L$T_J*]q44t.!J! /2)x0jkX41v_|:tCwO'aHhX 4Nd{!GNfE>/ea7AحWJ)LA*,: 1 8pjY$dP7Z 2tPmjh+XFkēm ,诃Fև]ÈP :+69 r,-pQ\K*1O{ i} M +*;0xYv40R\]5/i\?^6f?E U&8=nm@Slxb6K&ea+.8Cbh _bb_I9eR#OluBiF:yRKв,J)5V+^ZNIFܹD\>*q-3n 6c?@)(j-nׁƽVYиr 21E76/v>Dhs6"IAZj{ʼn0Ճ'~j3 fIom  7zGAɉW<\b[p=4;vzSA iW G73 >,ӯ!<Vg)_*N"h]DbBp=c2.Wl%VF*]0u$SI0l3Q0PPI#y>=pOc@99z]{J`8l!B%%[yyCt학-E |XK _E O3vc~N:\#Wc_yXY"Ǒ.[ɛKҥ8;(f.V>L zAT-._4ƹ- \!!]rh_<+4slS`_gaKuJk+<- Z"kL[iYyz{X@S:A"7i=D ]1$z{nj@qG%ퟤ5=H,fu@dGEEkl\̠TMAd L-c paN w4D]Dj+nl|{ɉ .&I䱺-_$8Ύk|]1,ʴQxrlH\4.m7t 8 )ӊ8$H[! (yis{=2ao!Zٱ*~cxBB3lU63\7.*MܳD7h|(fHc,^:guKaYj'g nx0r_ {yv6QS!9[pb\WδBʠjiq|xSR4yEj:LgYH̖J  B5 LCNɗ|S2yMlt26.0njxeq}. j7w4ɰԴLhn:gN<&]Aa qOTԢ΁t[iC ( Wșj-AtpL{K:gf3 zY F_qԫ.z;|:iPr^&j<@'+dбK-kRHQGjW}svr[cs|oBa2ڊYt~ ˾ ļӋ>F_άE>C^X]\ S+AqCa*{V:ؒ("?ӏBwo121ܞB \V79`\6sY'cG qN ׶Q3ezMv3Ym30'8(ň rO>i9>GOBK_\Q*xQ'낳ˑ/!1ڿJC4Vd"y&E鰑;Iq`BH 3O(] TGN6Pj7N<r5*3-t൶t:5Tq8üږnbBh~j&+eί1Xx=0f5S ȻG3ȗtg,~[]sO乒H ~αGIr~E^?bK K3 uѠ': Nk`5ՍSlf. 5 8>Du7 g˵˨V0]shR߃×_`@0LJxO&S+@>> r{YK=>n7wI@7ZB)\/opTJ5"gΆ\;UeDmo)R(BKN!~Q:,<՛o[[]^p i9:i o"Vy K@#,S*cJ0Ÿf(WdIV0{cH2)QOZ }r-&fvCp\֎E䥞[Uy[,-ܛ5oAty0j1r硐 -&_PL#f5k'J}8PԱ[4IeW{6C]8'ɔ65`ZA"ASBۯ*Nu1~65KjK~l o7ך_g{:5:YfXFb6GO{JR6]̑:HwG!*B$ BjKHlWS0 `MR_D.Q4t(d خ}& \[/TSз" .<.^CUAb.V 0y(Pu1tf'Y4lw^aNǫԜBjܫ#m;r!@gL^);̈Õ|q:Y/W- r?5c,VJmٵHn2N@ijS~DU[;줃},`ebs.42Jȅ;ps%qpGYF#]mU EE^8Dp95?.%f6[gl3 2@GcL9Qk,FhQT$l۾S K@A|) ~dDvķNEZY7COJQV޽dWnwCVaaE#KI2n]tQ3\AT/3?+EDv(خ##Ԗ_ JW)=l^Et߇f1oy94٠١4A̸xAo-! AqkVM@Дa_,ySA߱D]bz $hI'h735UhP\4paxGNIqA_hZyV̝hwN G}s1ARqrϙO"Uk 0 {&8n,XBF9 +sDg <kzC"q d|4kM-{VJ&ûU_<({[ƳP-JYKBX]F8V+"ILG,G%*.Z$9|>J+c[LdC D^hߛ;~"-ӤkWga<; [q"GTD`[/Q5.7U)`PȀ?rp~qHX~q8ί#l\|-r[;6&ŕg+JXDq<,0|DQbOvv?? ph׸1yM,RdUjp{ focm@"m2ԩ Vܓ,oǜY/Wۻ?8Tǒi'UPZ+pS %[1oVTtwaB2)Pks"r/w,b^"ʈ{yp]|1;e,ruRvuB-Y%) +TRފ?ނf\T,9~:J&TUR¤u8nw0`R Usw,M%u_Q Fzγbyf} ͢$B7Ec&1' G`I%N~7.4GFӧ(1uIysŒ0w (i5܄Ԉ`Js#d6N3KQGb)j)r`K/#LC/y7hR*Ii ;; bߵiH+ߔLY+::Yx0^q]8G1xKӆ }w4"-U#c@C~)K?C.TbV.E M6 lR͑b@cjhxdx*dFM{i½]rڴOvpT~:W%S6L36vWӼ=/F&_ֻ? C ?fP(9)ֵ#X,{b~Notb]Jl2Edq/~ =}xt;nBSjGk%WVeџ5qbO܆Y~bTr&[5 "yX'A 7jc˺R.~|{nL%;o3S zȰ4fgUQ= ׉K_+玈rXNw92׏YmZH01mFӡ@iȚz=%xӜv{%O~ ]Pg(GXFX KB:]D_jxaV[!+L { FBxOJ Z^7eN]K m!-}+t֙(.$AžA? ,VᄽWE0BJpUloq ~8`Θ]MOYQNtqxPl#FVz|` 3:|&t:YlxN^~JDnO3;m^pUCZUgb%}]S`0e<9^mZH8})ӏޙȑXͧj;R}cu5nr_bj& ftO9cqvxF iE"/nZgq CpSP~!7um(e%i0hvMnlW6@ě˃њ[m#Zr[G,rS.5]X2X~+_.)`A؝V+ul]dn'I),eN-c ~$ '#B`yi?Lj~4PNh /cJW)4l 1Rn<eTTR`fsKXΊ@,1 o^n<&b[![10%I㏈J|iJ/l9 {9hg4%r@-\ZHsGkfg<ڂL/Nڦ^QWLE5]/ّG=lK{s$}A%~ ^-ED~'X"{"l2zED]Icutƭ0]CI^4ۖ։*AѓXbDR5:_QZXU[%,\~Wg+wp(nW'^*{2SI"snˏV*eboҟğ 1l-'g /.3($@D %ٰh8:ɅJ(aЅDWFశ=6 SWi+, HCgxv~'RfJ.aV^?J}p[~*qUؑ{AzJR|#'r3h|uaxybm *R%#B]LiMȘ7_P'{[V0B]@Xqhcy,fgImfV~6.)SO͉lר ۀP DZfr{PJ,'QH>}iD,\!-{0'f39׳o>j0v,fNЏ"De@0;""AD5QKזiy )n2! >I$u - G7JIc ,MOM ]%O/9l5~$Jr l)e(m|[6F&G扴pDTMT\[A>9?l׍r8p#HTvy!,!c853tu`z()w ODz|59ғ,`sqBtSiÀ]M|Ry QdO4Qh<bE1۲͂ݞ>jtMlVg9{1/4]:b?.>h`aϲ:t6S bېhU x m]=v`-KA-\v%[ @ GE}q7ɜ^xl8TUK6Zv?ǜ&@yNrXE $,嫝T9#\R&lnto}Wipԏj+SN-Q:=Arh+]_>I3wWHj[T,$.LMfLV~OF&mQɵv3s{+ ,F<#jS+{^Luf`:]T!q*g3@# P8ՖBWb ob,h`|ƀrBv~ $" KQ`|@${XVag1pZ peB4 y >=r2Q?νSܗ7_@Re[4ߩS6-`c /6!-k`,k"bV WRJ4݁ߌQ5MUl`i{OX2Ώ]։KQ$~he`mdf1fo)Ϣ@OКcwtb==;v/93h<ArlL{Z]ND3i ,\ՍI΍qOG$;qi!A!`*:Ǣ0i ҋA,A!H,+' dp^LJmg;is8Ke( w6aBLTpLd%DUTGkǑuXNI@R]zovm~19ȪK:; &_qL#^E=%s?xEԚ l|T=0B% ,jܒX#14=]tD}uMׅjgO&04P77$s^| wq?y]}F88w8>Kcg Rj8lhf]0T~Q( )܊ ?Kjq. J&ߌ_Π)5QyЁղ'ګ" Bt.7=|;Bob!t ]AJ)2d2nH-#5D4<猲lyKS.o<5ӋҒ2|:5#Ä\+fdB'V5`(%c92]>UA:kR܍G22ۥ^ffIPAs%uJDП( զ\`lٝDFv9?'QQ(ϭT1º5΋Up8&q/;NڌH"6A"zdEїLKÁO6j/X~zj}ŐlpTP8yO=z޳,9U׌.;> `O7~ht#6ͅc=O9v*귦qJN>dJLTW @|Sp~]G~ö %y pwV׆>쪅f{~j4o8`X7خƑE *tn ʿAHYlN+6O:4$#kHXtcƥT8؃Q_\]=[k" x/R.WpAZ6?7zbvrHk.HIcoo{pCKrQ=?C=dhmқaU-9hE:%xgH)3X Ԡ}ŧ৘׆p/DTZ^P`_kPw`@적 ?: s3pY~`?鍺JȽYw1D8smp9zU=YS%q^YC`|p3DGz$FP0=sHJw7 >6"2=E8r ZX/ޛ O 4 h2<9ÉQG +h["%aȌ{a!ȷF&Q#˿o?NKOIY d`NMb^0B^ս:6{Ta1|0sd`wE]XgAq1*n?@k0AKmNEO$ C&O ݐQkƄF< Hzknyc;qJxq3ViS "xM̡632KmQf9zrX\?ah)S+(e&T5sO*„@Xc^°jr3Ki b'+MF#E8;YmƒDTOc&R 7y1;x3tuYyFG h1j1@h0X69v3yX{?xߤgt*?%QD5WUxԲ/ /)SՈlFs]{u1`#g^"~EmrW794֤> ,k"U`_CΤ>XvBKjg"CF{%k28g`mk6Sݺ~6YvƂ{.1,]ž=VQaNEe nzSǵEAS[+Pex*nAv:R+4]W9@%rU?E_8]GBr9?S T1gz.v>'\b *?3+KڂlZU?+"AM=  YjƯnrNO9BWO,1n DoA읟:$ jȲ>qb=bnJeVBWG%ҽ 3MUc>?;p,QH:Iozvf\gTDٹ嶄4FxTGԪf15+[<ұs}hSi}Km7ĽX:xd)z wl@jM'lϬ4aKoZA[j1ɴ 0L"yg2,H>:4[}}m$FpfK+bGMwق3\ Vs| ҁn_HYH,(u Bfd2s8C_ |`'wbܿ4#gOHk%eO%0+Zz*>rkA9aA6BH{UvٷK'2izsr`U§kthY{Qf2}]A?[[锪!zAv4-1pt9.~}"VHb3p] ?ݝb03tcH*zw  !iF_Fg@y4`6E(Ƥv=yFX@?(y2}/LHdZq[?\E]on:0B4(}kW~wfÈIjw-'aRWS Kgkм|:.$*zcRm"MƣT5mGXM0&06:a`mK W{xY3` %lo(U8ď^OٶLKs#.VU)m`O?קB9=ZU??4OjxYp @u#o0HbBv,-EYqHn|N(XZ~jrܡ3\4ˋ/)a{LL4 uZ J"z)}n_֎ͫ(>r ^5K|ߗ[Kxlu(+pŌ*Mp tP;B,=m#) i -s"v>̮<&jn39_g~ۇtMrm): "#ab!zf4 0mMbpSb蕁DΤ7dc\?.t O~aa, J KJy~t%DVu`{YL]6b;ȹޢաV*ڎ 9/5 ]A/ԛ뎮' J\>wϢn4fʪY}%YWQ끎~@3J*@ c,FLj*/l?76Ȋz)+X%Q+ρ/O hǍon.f.)Ey.$[jl? t+[m_2ƝN$F~.tި `Of7VqS5c(>>Jn_}X  ǟZ]LGa `X<Sj bB/z3_]Sp$u\<~ ?>POכJá?挸>2̎T1 NgR-Zה4\Q6_J4LvtZmo3Z?5Ed`)#}P$A/Bꥒ! fiT]Wkc`kϏ$sZ8*\gj^]:+P7c3;0'f{d{ĘyPvj>)|UA=s-5-k $JIoK? rJ4NU!aٜℵHN#MMX7& "YRuk1IEe5*ybO6ZQ-ŎɆI} FN}ݜqZ,3(.Edf0jZ%2ǘ5{!Y8=R=j]+ȱ`7f*=+6f&:3_jl##7 JY;! ; 5^C57 x$ǹJUv>*02>G\7g@bj @,Y\ۄJsLI[DL$\PD5|~fey;ѬܦWL|`3e+s..F8="NОBzaY.;#OX:Hq1왚IQbǏ (8,{C o t,Jz+s򃽧DIm#QѰ NYG{{[ F?oY%!5LLq:Yop1X[mP R 6sYΫ6V)w !UPaB[fW D0Ě G s`mع"3{ixVNiӗj\?c}\D#0oܳa?๮+ВzX\4ԬS4J=Ep@#^=xB?@hvȐЧ1jY~~ UkT!Wk*f!, :OP2"%b'DžX)k;w&INq<>HI>m_v49ą$8Doh Hg3kʩ>KWè(\;[9lM|C|b1RϢSxS]ơ Q<*@WQ]k!ÅZkEz$P4TJdj+N\IOEY T6Zn à70;ږvJGA 7ָnCP7xv~K焊[5G&?# "Pfr71*qSr܃vJmلrn# \zl*CQ̗s_HiH7yx|2EefC:L*5 EsV}2q/qW72د1i ^swZPt6_I>Ë2 \=}?J7q*\ @E=xl3FYKnqhB.&5/YNd$=_1|My#sQ[J) qfc\M`$ @ev d!FPm[6XN^ܳM/m{)aq.7vhSQ:-p"_'hf\_4/2Gw@j sUȹKsbWTa׳&kdvIw r:`ڦ;Ltx2Y4I1().3O%>?rSW-On,vSU~7.!~4?-}Q_5W.wthRXyD(ޓP 5W3ya=M{KD:ؑ}Nҙ83%,GC)5+|}t0I<C/!? lmzE~q~*~G2c]0I*6BG؝7 G?qXJnj Nm_Mrr %W䠝f')\anY$4ɝݩtR.ˣ*n p%%HP#}"G?gۂSǁͪ?j 94;뻖1ʰ,#\ԭsmJvlWN+9{9寀I2H/bYHlWֵ9G7^q>>l֝+2MËaߗ3-ƒoV e*@ 76$ *z1i"زxIVpֽ!vv; kJ:޵ᕋ%Ymv.$l$r7K>ToiH2 Q&|˧4|_klQK说ٌiaZM?:;d%4-;}亟'Zf  ojZyA$/٧¨k`75]5BxV4h Z|hwgαtj[,J]՞bnɧ65y!)\/4KN8oFsZ( YXSAXxZ]FZXv&Fo94Ǽ#m& &ejETx?m[J&3 DwP<-sb"vU3f7_d[ 7z:f!_>CkKN>aNI5Kgܬdmx >qSu>lXlPdCxl MBjNK 2^ܖY L3ĵpcG]Ҫ%dن/%4"Zm^kQOk]-+kEtU%"Go¾*|DA0'ͶZCG}?XAcHPxSn{) 4m=Q]A(m碷 ?Okkڞ~4{ B@O.$GN* y\PsI%=wg.nˠMR;4L3|d'b1ѵeJ0'X~:2\F׿ >9"gVL)Kq]U%v4 +  sCNS?^D?#9S])lHPiG8rңTndVuc^ȩ \W[@iO_{2/MFj|BG7|4'/3%(Q:? bm@EékYH&&/<ů:l8ȡ5JSTeu-nt-n24U ݗS%[j[yȚNdF "TeN~qTXqRnҔl3' ?:S`ᕋ9_`o}"A|0ƚRGSڣ4ixmJ*Z88G3t%za NRw,2~_j3.jy&,}5zJujNl^@o}CX e)(`TXk5qLQS z${n1,Q|ü&[ {ЙJPpPrqھ6ź1PʥZVN㍛>X .!7E,<%F݈A/al mVf8ZJ+@iͥ6)0pVB j k_C|Bre<`#ӊf{ԧ][ħ90/+ܩPPfJ i *'bkY@+#*?'H/3h!82es>R;$|KP.,Enӻ9H:"lV6/P\Jk_-3\5UܘA_j0_W]*tسʲòޅWOr;1+xmbopWqYh /݀q mL=N!QP~T(#S\BiInn_ȇ*zm<*ȵ$ITA{-Tè @w s?{PEXڎJX*oKZy`|xxT;Ŕb+խ =-?'= g&8me( $H {/J=TD_t:`y9$S"`b0 %^} TSN"VM ɝ9 Xpwrk`uՑ^PTT$SuZAebp L Ɲ%5/q,4j,uʪNgOg(q!GGKW|dteeү S:RZ" 9twgVvvr3{a)7FSȣ0Y,'( 7c_3(~ AEqsl̎>NE(!d s83j`>K^2tT"QtWmY-Kp⫝t<|cx0cܵ۶pMdO@aiڦQ["<%0WT%,]7BB@Y]Q6 J֟5JnmvqK.73;J4}} 7>xlT}%ƍc$\;˿G8y 50}k3ѫ3>?_6f l[m%7MpPGH=C1DNu ^X ?>I~֑F.l_wRIq8˭蠿f1ȅY4)wheo$L+q] POq`%ґWŀKFƑܮ`# s '6%}U_*,y ? TDZ7{IM?sYmˆ~:Zu֞Jgi~A)r!#.&V<@giZ#?>ۺtK_ƴNq!g+b"ޒ7-qoVQJrGnO&O(qP>;613õƼFv9θi ;hpۛ:"Y ʺ!DKEbg֠FwщaZR%*tO6WeWrMä %Ax?,X7)H.J܂RPV)sh*O<4AvK^bʃ$b.8rI9@%[k\*h qrU_廰ThR(56Y/Y/A βfGw|8ؐ@t$hrJTLxb[K3ё1uҝK1w`r+}oxl IFwTfC2*^mǧ0L{;G"&v:i7v sW";֖Q01,6Aņ({yY^%pE"_5P_ f.^<įtE^KC,̴pK.ԸihL= pH, D9V$.}T<'eT3x3 U"4*)NUABVAguA@wŽUPj}y345dݾ/מGw&ys*fc(=='1P]pTEbatJH0>Y_w2g Hy`t~A c GeSnN"RdFUW.̞1)XЅkd:7˧rNM͍SElqDo,m 9tNE&Po߸ig\O%|Hv-pccuN[U F4AgəþKcu W`\|ynL"_.ivqs#`" [ekQ|8hg %H0KܩMA,r_ 4 :X(XpR5舢zOr`K sJb{Ba PdkXVMM3>&n T!\VӃr̻R,(L&b6hp7'6❂yn%}י9Kqh@>m D.F?hXjlZAZQ{i̱5P2@N)\fWk]yD6UxŪW2Y*OI J $rp>응|oC劵zV9c߁Un`mbI׼e% bBU SuZCKz`K.BqKzN{AΆ#܉ƥ ;LO{ >{ecr~K+)D 0XZ|* ى;.ݿHiar0 vƳQɽܔ !_`#EsGޏ^L 0q%lZF(e5嫠w KTL`;^ iNg*@M#s!".YxQi[+f (w_ !0MC{~6YrF|j7dEC̥ JbcwZyXےЭ ƠA8OVׁ8c| JU+c>qMaVބ` j+ ނL&滩J-c)fط&[=ie;`Z"> s{39\wK9]u~?IuhAvp \B/'rJ"芓 {?YNJ) 밍 }wiʖ=\Nb0/([m>y0\*5 gS;E`w RU%iǷ̲*K%=bJ![ =<|0]¹:`' ada =h^r%$lXGbŮwmHEY4MnZ䘤'% ID[orXǕ6#M6A#<0L&dVUɅppPEӔx><υ'qQ.&ETZHz8bmwс,Qpʱ%ّ_0![+]m=twx#t/f'\%>NgvW"=shW$CuȴwEz탣fo*c$'hl5e|{g[V}dO t!]eS/> Kp|R+evkIF: ^!ƶk`'\%gx]Yc-؆Q" %0>GK5 ɻ)fT>} йsng1^yH!A¡ZoZP'88|\@cd{gJG U4ZwWv]Lv螬^H/\'1j #N`W{ҢGQR^^t "_퐶6. 0y&U%!gMkX-cNd#*]]яJ? ^%Ѽ2@!7Eзoh ,v3[u\'[cPPOV5YIBMN:GH8yxʡi>[# [@T Q27O;XK1W:mf4;2n4NB.6{0!^anO"N^=ʨyP̃ Z^MےÕB3 lW3sdս6,E۲ȯhyOqZ7i7c /)GחU\p3jޡlM!Ö@s[ r U%ZYgǒȺZ@Lx48:ܪBIr{hb~])j})G)kBdu2çYij&Vtqp`:gw:02q],"eΤ.hТzp~@iK%sNs.g3*0plMGП@ 0>?L7'- ؘRܴ35/@6n_ⷷɒәF*yqQ!8ؼcM@mih˨4~f-T"QឥymR ~AhЭnh 79s2C.]Q&R( >WgZRt5Zj .yxGRXӾC{] -]!fJejY:B{BuS( #Rfs!ɢ11y^L6kA~6UÜyXǼRJ{{]jM}4\u1K`mvkP&йB1?X#CyR#\T7]vhb\u5O{. #ԮF2~|jiXKuRafNiS}=PU^H*Kja,o*ZA{ʶ1n^ ~M龳XqH58*oKwP7)/dn֑lLk씶|vMU;f%q"t>Y;5R)9-8Y %yΫں7q`*Fu܇c'L~Cj;ZAmfd(&5VFhW+Ǖ4ˌy-DCR}"jbzZoD1H AiZ~|13뮃(9IZl>H^ٻ`>|+`?\~N.SgJp9|7S^ +^m[PgLpDFZ*/k%:_1ji T15ߑ-{uzGKh8/aȇzW@ʱAR΃3Q65}ݱwC.xo )<9R&UyBCC|ted@ACX߰rU7=ixhzl˪9$;I۸w+gW31n˩2zbƫ8jV_pRɯ%Z٭T g;m+ PޕtԜOE&kE8C5'Vp%Δ\_aA@# FdpiEJs;Ƈ >,I⊔_< I:\XR\pKD,ϤDOmZcXBr44Jq#*ۑi쬭|90&J3  KݿJRƂuٝūIc^i fL3BߣZkp_n4/tFOZV-hf MYTzx& j5 yx尽𶒫eL})j%` {bKd][R!:`tэ{bzJ7+ZX"-tvuG9~z)tR4$Xj\V#Nb(`-=,aj8etacgq4UzK?ڍ3;GVwLF[0iFɛ8r=4.U2dtI?1aou QSme'LH~`5WEonҦ:՟*Kߤq]Rٲ1J2hb-u`) JMZjREUl>͋uedG#~]"L~C#,L8VV'NpIe Wb Dv-ng+a-77dڜs"=~3Fy{ P;x3n$^ZD#]}#X8N Bj~2H"X`|8D}.KhL.yП;e6^&تDCŴB/eq4/ErPN,}Mfw,A d1KBR6WuվvA)׉K=MsfpTf}ʙBGk^%>Q 2]2]uǖYV w--T%g`CQXM@ʠ.tBCE YԍGB /R*uBlL6C 9y>i,!]0<#l4ti Ii|L'̀}^ >e2\G(\&hw'60M<2ѓo!o+ 0Fk~ k{6 )fdb({=xs.Sp)p(`.ZUOқ8;1DH騮S4IY<*/玑s epen]!_i9@.3%)OrC5_| ÿ>k@=Et^1 _h)vl0Hw_' ũ*m)`][,J3ڡSU@a`)ir?삢?O5$zE>3j *[Vh*]$փ*BsM&e lШM.hx4sp9#Br p+&[mu Kְ,Պe3_;$,&šDokurLx _#tJ'b8|Rp v[X`4!m֘=$ ;#3|fd\I/rCzH bf f-Adv-"xܲW{~Oݱ*Щr"LD+CT!9Ƨ 2s% wYERTzco6Ѯ=y?XlM>86YV޼&DĎ7w*CJ|Nc!]hҽ'e#SG݋^: i폛M :ڌ$;;i?.B<<.7a‹nai} ozJ;j{xImmG7~5@[HUC _bHpF d\ TDZ 7(}+{|Eb`q8,G=Y@dTCsM˅ V,5]Y,ɤ~/P$qq0kXbU7jO_$3-19ȔN1dGQ)Z"uӮPhW?ܙgýZfC4Jv^ꬺ_Ƀ^έP f\v-PN5[zD<Ow!0t]JQ ԉE}v\?Wsͱg½,Zc (KyA3k&S$P?hq3ueA>!_z F;D+C hvIiqF! jdH W,섽3a4&X*zbU#3 ۯBEǨ jF5a@;,Au- C^k]! DOf ۮu;7e\s}~@v=w'AZ|_x|jI<%!dFO \M.%>s\eѼc ȶmI̔=cy(`wVA7; +zq|[˴,%3NGigOG)y&[BT.c/@+:, 𛯻Q͌U,fb$ٹG7BRĒ-8r|%/Yys_^V9כgMҢa5Fjlj"^GuoZn]1:˴!}!$fjȷx9HKX#ż `ء9nRty.ir-228> '><\Gډ;Ǽ]>{v^us:qTHa9Л\Ldч3jhۢJe sr5b˗ mE'Na-pB3!FAy#\g){=~.R6V;"9eg~}*zR|e}wu^ڑй$Hp9[R /QK=3TǃQI}v= 1mK}4~]:.aI]tnPʧdlp۸[3ο@S.nS49_ECO;-Re6d>>B yh,,Wr&*N:S QjȤr TZȀ'orֹ*GhoMfb]81mv))͚2C0L<*ԟht]i_W*|wN6\`j1i_^F1oC$*5㩫asHUJZʐ;Y|kbI"9M 1?ڗ{et 4x |ٜɷvI1mlApr{{=/^_͹3:"B!59ڟPe#;UDPbnSEWpuIϣWN9Ϧ RGJꢴ3p)tbgN l?*:sт`JsB=6" >n;>6w/f176նn73D ms Dj,$r]ݳ>B .1"\<4!'Bd zsH 򭻅%TAK㊭+N&`}J HOF|&[|ÖDIP,Wj/qM_6zVl;Ip_{2RJ7٥Lūؘ|0)0 a]ٍ*]\@Sy}:Ahnǝ 3*d8XuQc|DDFX䈙n™yδ24 ,db{CL4LuRvX;d4i_=D%_8$ Sp|KJJn(Ԑ5\ߦb()>g9~>f?:CnYP[6 *]Pp0^HUQ!+Q/52ڋ z'{Ьڜ!Hg<iG:" *C97We@76q}(?᳎Ca2? jy#LFyu*b]*9|rUuEڣPv(X} c̷1%-妁g˙gl҅C;XIAIXTUo (2׃2zh&Z8f۰Ωc]妶*n>fF١njlr9BK{Y,QuC:˲Fxȸ1KjulD 5HfAQ)(W0P4|Y +gUxuEE/֣g$ Ⱅl9'ګ턧;,KDﶎ/iI֘Xs׼Fg#܈#iNU"gU7ቚl Z ܄j{ib[qU&qvׄ7Pmvg@k^JNcyfcā%':tRRSUddr%ho{aC&Erլ;alI4`>%K`nYԡ H9hEB;$NɣVA(%|HjHw50Ptyf>8sgRDzkT@{HuY ƨ't(Ycu !u44{'G7[i=vK1r 9ģ OTlP.Sdo+V `"ܛB|Aq{pepF2XqriGNmwK#On]8ۘ'Ps` ͰU'љD&.Qxľ=/kˎ@o0;+hgMOd];4P8o@Օ6EHtM!c"Gh&vLFA`cEU[|>Y j̻f^Lwqt_R)1aW(P 0])TW0Vܝڷ_&O4?.25KUmHcKh!DƋg&M\Q˲d7N'ݶ4(P'+MeA#K0KOJ$jll=h4rU+6,HUt؆^kEUᒬ_:O%tKK|U!zwKP1$Z g7랞B}+'5R.`>K:sbl<)x|my)q0us"!™[:=,x7¹)O>#"Ʌy(;G4K,x0Gw&8hIɹ.Yȟ9%mvߠhEY=PZٝXy ]ea#F*İBϤ9OQ <[gG*m̔j[G3!w?^``cߟ.1v(Jɝ/cce$74;6Ao=D!nwrJuHD@TBB}k.=hS1iR I>,Unvm䓈pH!9-=`ghvP CyɁӵ~i8G2G+id[ŹFܤ1+,~Qty)ls|,7t0q'r|dH7iuTjpaCj zuFϸ}yJ673m?NPᲷ؋bg[S/zai֫;4&vvrc v5|Sj $z|.fE²OU?f۫Y̩i]m@6i o E^ÂT(&xja$G7sΏ$eͨO 20ޱL&)>nLA m벯mo4cH ڠ9 RJ9A=}qzhP!y'У?_r%'_ɯ24]R/IHɡ@N; hD\r > |#:Pe6Np{q޸0"Ƿi%5`Z־pTh {t]ڡd>ߛ]DKSc 10҉"KNIBD޺I' efRkU]1Ev<ۑPt]9hvvIR :Z+vxMX^A/\*+'j! ~y& Ə>|GU]h[ !oAՙ-F} ԕҘrУɂ;,> aل0uQ nӃnҙs& ^KH?RE86mZ@|"b Iaca5I:1at?u(2мR}A™ /rtZ [lb T"/(?AJ\m q =lc]9wP]IsrGܩ`wxΨT5N͈}DIwbhcYdH 1U+qlpvv!ßYU+/p!`qֶUBP=$ܢ̣=AlR'OOATN5+\P*UMd_Y nH8ԙo/Iþ9CFPkNr2O€I9ݡj>ĩ[JwfGTVYSƅ(;yU}N|J5|, #'wVDyɜFm%Kv bVpLxPQ}Ȫ_*L&jrL~0N+b"IzOD^ens4\q ?'ֿ܇ ΠGD Ľx'H>$]P)N$o\S rl{-&t rc'K7 ъ\&^e#hmUǞ|'sA|)!.X&_E`y % U6'zk5֒1[;.x;&dHO2ZQ B亙snݨCmafoڛ.9s4/ApUźy¦/x!87Z ўtPzHy[R5Ug2'wo0k]n;u[qgy 8>!pv}=IZ0MfiϞۊ&OD1?ڌ?q\Z5;Zmїp B_Е7 RqLi^)tI9J3Wϖ .Scs9lC`:%>xq6qAyo2%7 2%ϳ^$_]-IR"ߔg 6.jX@'hQ g)=|>ΣR(~5 Ty2|Qv^LseﱄH)4C^%y19ïZruU WV)0O뒈#-6yG"käױ81f8~E42! AG<,0k:{T MM޵P(=+d쭠;(; Y6f΍!@1^\֬ㅙz r0كѢ! 5 ~"ٯ-2J` kԝ?Z:U'i dbv Z#~m!WmOø>Vܓ,Wh g-e@B8({꺧% k68 dK`m:\a-zF~\PSؕ G]j1n50L8&Q3 ?c$+z=eہM4; /Q۵a4*dXuUm F[0ir:HlgX5egT].ij5ŗ_ˁx/cl5d#$ *.l@" ;e@חb1Sp:.a]pB'n[WxÚzTG 9W,)jt-Xc $.e`#m+s^b1 Aݠԅ՘8.piHO{ ط)2M;i֖.n-}lf4}0a(_lֲN_{=/o5UHTJRzceϦZק!Dv>MH=M +Oۼx30+yߔxdV i|N  4 8 kp>u̻X0D=h OB+>c({jw(z5qgm!r/E Ŝj`ӝ1 h8j]c"MIaօ FЇ*`"iX N䫋]=fƞb5;-RTl<۬_8u D蜋_༜2N v ia5!yȩ_ɊέMkx?r؅|Д2m<$4UUOxɌ>omd Ʌ,6[evsJanRS'yby`M%:ЈVt*nq5y;J@;7uX2hVLķZW $p~T Ύ Ld 8z7_UΤŒA`MçLCua<=,e`n0ApLI]"9Zm6LBG,3z8¾*̭%h^m" B;2YGXQB9P +B9( .W]vES~.j+vpӌHOM{qo2RUj< n܄g{4yGZnX #(7::}?kO2h2nۏ0҃%ǭv pԸ$Ȑ4<}Ѓ&>9'hsԟsf86􂫁biZw}K9fۙ!`+-0KZS0#?`vokB$]=FW4ɕO܇:{y 6e>Y͢ %d{Щl3j t9oK{5\?}tOoҞeh|Pׇ++4+w;oZJfH ȕpU~ѮF;1,<𐲾m| Txde YzL;Q1Ԏ9)=৻Xq 6Nͯ#ni+_R+4ױڌ&U N>Έd>[pR@a엇} |G3D (qv-^٫-y~3P׭ ,VmMzfؾtp x u^=ZvM8Pp a;׫/ >@4'm} M;#':Zd`UM O಻bԠqpڱ*QM* RE?F>YTPFI#@ԒbY;8$cr>~ æ'vmK|ӐOϔت鸐'@<&!z +ʨ}rBVfM{&SYbؙ 21˿ L/4R”2o\J0&g8.' <-NSSE!Gۃ :ԏq9=sͲ%uB yЎpԧwl[hxR(&(ޅȏ*e}+1ef2 n{!X,x~|k;_V䊐*OIS :lKXlo(!zNbRlNP.]08f?iw y<ג|U'6P~=$XCB[3Cd)a jؗe z[*iD=^nXO҉v< *m xxNV$%RYw(p͇҅fayUAj7=ͱkdOju'p|ǩ xjK57'gRuǽ'FSm |<Ҵ:A1v6g4ae!ӂ? rW@~3s3VV>>2i.Sfn)zMJBʝ)atSS&Y zFe+ʁƺe =4ϯδUŧ4&1P.Ʌ-9nltiy/_V% f8u;+l{~9 ec3/߮%iB҈3;K,'@ŌYVe Ca,9l般l94 ;P"cywx]U]g%|rh[a4fbG( G l`̵U%`!%nasagudP$#HfN>@Y;Sthl5c+aop5=妄龽JkZXeA Aeg"'Yvᴾ!;x fE>lo[Cx-:򰭳wr@@mGJ m0?ɲ06g2Mܲ]}ϛb"bEM7Kg5x xwh "$CjRwAPtizz:摩UWi· ?6v&jxȾIUJfT# /{naJ\rȞM ?8X wXٍN:R23]08.`jÌ/*Zcƣđ1 Z;܌.VǾ,J'Fva0gCQ`[KqK'~ß5D۳i,N%RXikQ+LH1BsԚM'8ny8֩VIISR! U tHg%^Rjφ"j^9,t?&?3 y] 0Hyye 1*CB"[r[zl^L8/*ܥ(>Gf^?GtCXN@4ˠJ}.8as{DZL!+::D;m='q.$RВzMժ =.E*McS;7v.>>&ܴ s뷸>p M<\7Z5f mxFaWk4ͥG&,AZ9p0MQW"{vXi'ÅyPepY30TNx,.*^pYЯ.m~dS!5 Q(Wtv5:go s] 3·ªe9hu|kЍaW-hY%ҭ甲<ˢqS[U;@wprdËN !؟ ticEetN138p2UX;ޓ /^ pv~ Wؿvl+JFaWBûiwrc2Cvcb")v-OT GT=|8T:/j{Oy{^XgJb3`lTÚF#vLN3 %/BռrzM=55d"vcPO9`OZ5Adr @ᾖ x"dBM ^B?6H7Ҍ(H/,7`A\sy!v望z<ƶ9]o,?"b9^2f0=%XnxQ XWvM&fĸr\Px)ZBE3}H9SHeH%]sKCɅ$憁Wn_5<3@$"Q.g'km "~*Q5@ϥ˗]>Ku~ϓs%'>-2vWxbSRO.D λ} ڒD0u:KkYy2+#gۀIIM΀i{ ,z?ҀG\E=}}S\ g~ţ@9R xRVc66V+'Z v'6Hft<$*Å5Iv4/17vGT"ŋXGh=O((cfUҼNc2! Z2 zPkr YU?peQ[:DzOp*HM<ؕǭXIi0g9团qmr^_ːWI`-t}+ȹ++eK͜Z%h1e|IqNJa 5yBV9,++ ^\: +7BGs`7mۥ4\Q!RSW#,S1/644 Fl )mXF߱ ?JW ~{ɕα ɝf8az3 rѩ 计"W,nY (K(I>,/w\n4ǩ\lA1OkE뚲xa^H n? Ia|lVu_[Rhm{9 6a3T3A @p $ U1XG_?jrE6sɜwF-&Iщ tNֽ7Y!r.Kpu]~LLH-2sȧv3?k*%IJޚ1\{oLچ ,qm/eJLL/De2$>dG1'~34U~s#WFiyOK$zFWS^ZAV~FsxuG8a&t6YVNXz^yhJb^ Y]@+߸9LRz\$p}#s|d %T|6ppCo3afqaHh [;oQћs?&s[JXP`Nb?:fR^v_pۭjCJӐT#ODP5.]@gͥTWװEeN:wXXHtHvF, iyV:@'蕎Ѽ-@U/܄iȘK';<_?3{,It-[Mv%mmH\.?`A9 &.6V1f}Q!jqU7-㥨rUq{I"+B}y%9nLcq#驑HŤcf~5~"uT`uWN۸>Q |-%VHZ>Mٝ#;a>Vi4'ގ$ ,X=MNgFʛ>F2zMuvƫMavn-t1͸FiW`wEMBur2D6oW dpƮK5rrv.C;_}gMo~d5 +=!Q2SJU2nԸ0M-XtV9"ims27!ObѭW.ʹ4=c|%lB~9"01am\=ao$4wf퍬*|s>PzFA{r[0cßa,1Uz [q(۽I(e$,6Njb9([fEh$q[\Oja?TA}fs@*K +J`w5ʩE=Գ`1kͅA {P5O˹QtEу("M2hFxb=%Qg90Wd7Qct?adHL(Kq>dNo͎'5-q|Jd8zGu ;g5#_xcVۅ[Dv}Nl, |M9i׸IY꒨9 #B6uEZ/ $yg}yeJ]|a'ecʭOr]7yL23cC85a^w`F.o)SMԋTۄ&_-jQ.˜$QO4;e)c OL']Y=y=j?=D8kor%jDmpy((y1[<$(oٗ^f`y6VVhB Ђ}}@5ζƆyK(79\ea^x]A}Wz3li@Ta\}lqn98ٕge`}.lÈA3˫&iVrmz!y15O$aL 7Yx^k؁E,!"eLg %+> ؅Z6(^2C$O:G)J˃rru[y?*L+Gq-2R'ĕ)(6cPΝw:,c Qݒ5"\ T{rc)z!ᜰ|:hi ֗Oab;lVĢōᆻO\GAr51 dj.0gȞ*PYŠrjg7kO\H1ON5A|I[?*oӈ h ﻷ:pK**4]Fӕ};ԶcxLJl yb*1O CUx &PwfLE%T~zzc'ڿzT?1:,܋r!*,:s[=-qsmgJ5I-+Ք̈́Q' M80'D~ڈWQBd%~yIפCNMwm: Rb7-4<̑we]LONBV{j"=`6izĦ{?j:o“{Uq%҂nKwBPQh\ʋ !gYэ>򭹕clW;+ `9w_BvPo"j~ܸ-| H h 7& N#*I_9~_w&9MN<"*Zk*JE>l('hKL?E~8LQ ɬ ta6&JE#L)IApCA{=gd n[`g~1؟lVe"vYQdK+^>%? qD=vy2z*1|ӕ]\X )%D)' %+P2fG$`Rݗ(.'yۗYyXEcwlI])m-]E'"JJ4CW"- )0ԁZ m~++B|um./Phy`jjc.Ia6/5 B!~aX[]#N6kZ6Ynԙ[g~JRG$5n *rzyKMc9uwu(4[A6Uhg/T /`@=&= D AJmiZj^8^ Rtkdm1OQ4l`?Dݳrj*fp"eE#uo!"Aŕ#8.^8yۉmWڜ ^[tYR9""@fbۨz mAkxY9b0ρӋaY˱d3ULO Jca16 1flg ˒Xo2|M,& s0F0b5R~a[+\6= Di0FeϤаSwr%f%$QITHx\2l<+RwQ\޽~8h?NnW3*dνiRz~@ GW”Pw^iZl-CXgੁ/,mGA,URJ( ZmiaFoBw(|4Q/)UPMgDQK1w[B҇GfnU8pŧ,;b6 9x)i/Oh3Gc !ɂXH=t!j5Gq]Ǥ"\h |mD~"(s"癋_V`uo6us6- k48z9GzH(f) %q@WhB&XKg] CąlO/#hnOoe&'FPo=)-%#!Ynn;ChųƺQ#H܁|aO_Ba&CtIM* Ovh]k)g4[Px&kyA)ޠ,2b+*NTfn?o}V<#Rkh]EJʚ{JM}[IJ7}g3X*$?$.#obA3&Π SUQqVanj/2B@3qwfA7`HT$g:adGu.|ɔ|4H*K%X3s.jBgRam@ }$I@p%znw')'+(=陽̦ٔs24&Yo8m6q5)I( R>G=*ļH `qa;B|\I5էL).6L+!; 4&۠+uE36RCV+Y>QFJK@ehuj yiY^nhQoR,' <7~Ft?''꨿r`V%jC00Xr'E^6 u㡹;G=aƘAoL zRg]ncJg?J)Ze"X%vW<ֲbyR1ZQ,w y*v]G"q{m̽qD !%~^UЧF#Y. 4VV'NJc Xe9[\ԁMV0MGR3|w#+֋i+( f*GW7&{?@[|)##԰P)i &_NT;mh:or 8A-)#z&=A &9teSXLD-5qrADGe5x<@,hHAݩQ{);`ڞxr[Ǩ5۴+G N9-k(~9V-kq?;a!mtcڡ2X:2Se}@0t% Q)((tHǾp^*mjst+(W B,["-ek6HP6UH & {Oa !.?]^;8dpBD03~l,&_l5<,a~g+OUQ]mj4\M.$B $\,eE CȖFD>ʏ-KsT=48/+!8h1SXkt41?7SJ*f(e I HZN&/$oCt);bxh9Bq#}ZX2`g`@wf1LB"DR<AsZASP$WWS$YHd;%ƘָMC}E_ia ~U~Y8<^*:lGC-rpÏI)}lw@ g,mZ=*?e*&zYnMM75,*@w|JSs"Q(hBS><^<[h s^^q}^5 U`/% 02_v.!a P<*(S@1\᠂FOO|r;fT`i7Z-CYf8OE*`."зO+qFs>K PK++L9Ra&ٶ3x毐!fG3RU]suxϖt᳑tNYo N}V%N=?Q.2#Fm/ز eJ,r;3~ X%[wbR~-}Ym_# tj˷ ?n.h2'Y79ygJLnj۩~ znl;3j퉸YuDm6w=3ܡ<^Ix tGoە:7[?W4xe):]23)M:D>s215v|'>])0핡T'~wh d@CQّ9a-6 41;9Q3P+ dЉ,êR& ~qYoP,,_l$ ~?zkbg)wQS_!akI4LJ)}0ToRZX,K-0^bikb|fی*VBy݉]oMe unܜ!Mcp1ZԸQ,p줓n|BL*vvfhQ).anD&"Hv5pemzՖoRP%2wH~WBpoK=ƧPLhPoAHO72tĢQ]V0 6G`wDC4)ze>͇F6/=g,P€Dƃj-%,>b+ q+Oh1.*,r;wΟp޳,-5O RXoJESxIt0ˣ/Xv+O({?¿D]04כ ˏ(%L~}vbD>IJTs?4kFtr 0 OP6wr&FRZNVޚFt i9 (,_f[_3R4J ɚA X>:}[9Oa3thyp;j?pUQT],qu/]0,Db*O%(X~'Q76'B,6«M-_!6Ķ{^7bBɴIwX'آ/TȞ9w~0{W1w,Xv뙟Ky.h"pL+@5~?c:*üVx,F҈QRxmd[4ԀfZOu_/uA[m ,R';T`%yuWFs{aÙ}<ڂJQ#!7P2ϤsB\N ?BcC=8w ŏ}OcɏNs#v~'li^ }ε &#:N+Yb^ פZ?ea)9[ !*, [B!)Xn2Broо\""$2K$}HrĈ3V蜾FSܼbt[$(Epj.F \ Vvz՘VLEX =#߼t+8Mށ:X*Z2w"KE^ƏNĒʨᛁ&_a'(pPo,og+1 &yzȻϣC9}x3J̳3F@Ys2{( ȭG X|XR>575 _#< $!w^H@٧(/Zh$$Y9gP[!Xwv gx F5O| glx35H@*Na㨫]un (#tFG&"#r:Elu^JmG-HksxÚIR50C|9 S#/꽃wqEuo GlE ݩ[㇂1Mb,}3U; :{ek5؇K&*Ow^f[O춸Ut"hY}_דFH-f)Zݗ$Eԟfֱ2; ^YN/[[%S2DF>%]pzw>ftY0'D`%y{GpAf#QeQ|igABMr%-E RԔtJNjVy­%a!:mkhؔ~cخ3iB*,x ;7rO 4EZf+λlۜ|nf "AE6 5|`@85<!< O*!MC4XX4(}@_c_DNI;?/_Wx/om@wE77 CԔ]1i*?RznmYXfKbKDۢhdҨ r$]d7 w\F*/ 0a2NU q "l׫.۴Qtty%cZGIOi[?N3;%I ǂ\}O)st>0d`SgUZ ^zkR0*e[u_L*o9LN@&ہᒻX Rt]R5>.#lLLY'k1ٝ9' `9o*K 4ߵџsl - y0`H>nF~jD] yz3Z=Shiˆ-PeG{ ѵ\ K i#:4 ;%7tnۑ }KR-ݝ[aǭ(ٛ{ﺹ@|fD` ʈ۾JD2swagM.ZD ={`1tϹcL5e ]c#? 9;*gc*/*$ @vs@g7!P+ 1S(ǥpE}uONee%ߑ@ S}\$n?yw⛗rM__5 D ~p˓WrFF9hҎ JMA$'. hlԆ{n =GE¿FBJ: $#i]{ c]3??jdd`ƥ΂O.qmJj6@[ډ @'Y]xWF`V,4<23YMrQO[p *K8t5IJL#"n48M7K5f>#ݴ}g,G(~pq !mtvy"|޸FG![P8?,ɺ?$rz[q'\B4~y>9IiyN-aK;O&`!~yݧAvBB'b 9#\GmR~&dA+.BXDB}zZPMwi%h 뎋W]Hܐ (^uͫ"dBĘA0T%TiS(`hEkL\޳UW'MDobyav Bhp@0SGRuU&q]qirl6TJE.ِwj0Hw l3$C/ Y'Q|-Zym=/yV(2 JugjdB@V^չT"ܾJ3ak;J(TIVŌH)0>SŸ 釬mf' nNRTd_5bJ^Ǹ,V$K1 /&Xɤq(βy!Eaj&v SYu:00o/d5?eաC 9мŤaH/t٢k/v'V(\}J1sXk(Űapn~&͜j# /VˀW\YTwx>;ܨ%5r?hZF*3G{d\aizˀUPb,QϾ| K C嚢-1 -}L 2U'm2O2MׁS(ud^Fe)'HEW:O%xh֢ ?'mXZZٯ^'S`o/;^LS؊TܐSOJ9Kg؛_;nNQ&CnB=ew !s]CӺ0ҀR {\6p~=_O/a-E;HGhK.Su5膱_۞1N5Zg."8"d&uS{4Vh.axw|w+{&5%Ft;hpp x(ʗbV6LkLR1LND;P@.K-U )b@&Ƅ{l\Ey*(ϩ`0?L5gf٬]0}b#iģmT̕Q`-`Wckx\tO?+`NeC@v`,ߙmTŷ2<9Z퓖4r75'S~AX,npOˋdߨl'ub2^x:iɘ  E? Dl-{rה#ATyN]1{Aqܩ;:}=[3%Ӳ=djK,V7o@UnH:+N stWůk BmF+b7`*X^4F˶<0oqsNP HdG?e#s1kϧ' eܿ߹%!|  \_z^`~vgrutl-yxX@F2ciR^nn9ߍ|,͟ykݦƿ"e-tƊZv,Wi[Wv5)>fV1S݃2 zYJ7GL:rms˙vzqBʐVV,ƿ2Sq<&P+PΧn#mВO0b;e:r\2)jLT p'+_ ̦0-n^=#ziqs%gG?w+ 뮯 VT |M}c"uFp2"`\^_- ^KH='2o做k\-J Uk^^ye7&n>Rqq1 Uqg>bKL'=ύP>Hk/4s<nj%!okɵy7lY|H$Dw8>0ofQ#AkD3+,V;xGzI? ~r4eU$D+lJ,h0E̼H iIt $KtO,Jk3ZQ M =)^I O6A.t< hw(^O rJ=\^3yǺv+ona)HBf;zvu#qK^uqlW.iYa7YRN%?O̷==#4r=5t\5))FI5nkx @8Z@eݵiz9/˰VdJ%%$t$!Hs6xiR.ādG\n]-+kIl;>cD DMkkΠ5^c3)fjoJ"vKmѫd֚ n,C~@t rfuYSbZ|_Tt=v.G P{„i`/(<&1$DKfXSEZ<ŪmJ9#)q3;Уk_Wi1ɫ|.E1}B%RD? 2a_'V>Rh- G8"tm<!(Ï9e}G(/k. (9(q/lAS&3I|W]e`ĦVAk M^Je ҕB%$0N 3K,w 8cyD"C|aZ^r±(Qʇ tKםmάy’3sIhuجiڏݤ.~G:GË G-F+5 _6jFgH2_I0ctqdx4rîUspJ>TT#:$acV5+ 6i5G "MwZR+JsNZ.T5TogwTFr4[ӹd5LQE<S w3tz+oU;pDBy19ޗV\R_w̟pB+c$e.y w&Q(XҺj[Ga4^ ^} Ԋujy uJBA*0X=hmq]/{hyXJq%T /N<' c"wp^WOO^0ͭ8f#RP[<%EҚ߽ 44ʓ:8x0]d鿢tϏmKc< d=yn@+IjN=vZC|pw]1>[A 67o^uXf7D4kb95[OVkgU7)W81W[wriI@V.K{g~tAS*i./F 1L9 !.}>$>hUH!iR/<' &ӷBmlBBU:fiQ0B%˩'QNu2vaZЉY&Bm-pɉkm.DCZi\8xdD+]))#_D6y*A=R{.Ӱ~5 QcI! `2h1k>Q>>k/+ߐz$3 w\\2،UUw̴|;,~T"lBx듓!ǩ hKT}9^xF UE.fÓ}QЀp%-k.F'H־#.G5ͅjǎ W:Sa$ERP=|$$n;B)eɔ+#Ki6M fuw xnBft]' ~shL@K2+ǽ~d^Xl8a JU,BK(#pSrW}UuB =]م2V`_Ł)i9r)dM>ݡP˷[ѓ#)%Mʪ\՚U$d`S@ &ka+&|щeͅ%~3gYцɚM!QI%v F'k_;z[:d bU#O |2s[e &4mwPL( pi-pZ`l] hv^ai=m%Tz\sxC qu^2ξnȽz?=Qdjm pi@0Kq&"rx5)m_kffVLA&=@0 gD\ R&BwPאT\A#ۥ/,mgM5Bh6# B,=誗)U^AP3?͛&jIDLM/:J]&n &^#rG8i@+,ڣ˽S!,7Nj{m9oi#V#VEapUKD,2Z.GtGE>=YaF=) ݇2tR%ơ NDRK4Q֜Gm7=U=m!e*abҌbn6FD㫶+ѓ+&W#%T>dyIp_v`0R\7\vs}W)0SI] S|bdIvFB~"[l}P&fԍKC۱S4q:Ȓbl7Ǜ #`B^B.Z- C ]Og@1K~WBZSgٔ?q5HMZS5^&k%;;,#I {-ǚH3"=Llإ+utU=z q!)|U\?~yȻ'){#?Wbfwj1C'@3;kNu]+;/ HwV`wLrPڸR8(xDW|V9yH:wfUPpdFf1CE'=$)bqS2J蒷"Ϙ̋( ǵ¸5>3dȠ%9q*]x1.&@cc)J6M%㹲R9Z,<@CcLq?$dWL8˙K|ir3ꔬDNnQI+H,O sGnBL~@-b% ߘ2,d3kZr+~ 3١n+nooGoq^X4u(@{ʕKr;A2`^MzIvt DnU0-ɷÓ5f~czce(6[9pPIM")WP ae*Ow+*@W̹*mn$5&c>9v-~KtD\*ҩ.Ʌ+W^RikF1d ^8a<2Ȼ!;6'{K%ѼgbNѝ]qMU5USaKZe/ q5cD%ђb{J,Z'K_K![VIl1vvS7Ѳ@lbThfT{{F4cgWK~g@}8wkM=JeΣZKQW:"ץKY@ i@uoX誒ݫ̱YTZfheh뎪Cl~ɄVdl:Re[ۑق V;dm^]'-<B):!f)'$_Sh :蛋v?ҫoPSG=m@x% cؿ\ƢM ܔALL ."&뮷"M ?wD*QA,Vp1Ο,V+o $}IUԑH{AwZ&C3dn|7[ةp/!;%̜j.ݨtχ%ΉX±gxy;k+dsTOR;VF܂*XY:'o9ΐqcxq bD9T>ڎ0i?X=1.tlu:0L} j˪T~.Xƞw.9jPwTwVi"Jq&tW={ME(/2Hf߂M;\uK25ͭy6ZBSiU7 _uHb} S|#7OUOQ^^\@'\QF 4u6M91c1p<2<%8Q$~~(T1XhJJx5N^CY뮭jHm9IBN6ՑHn <*CjE$b^;޼\!MV&Dgk7UȫT&At1l rh) ҜC0c쀄#m\/S@BL{"] k9M?rdj[F3/ʃ[Щo#L}̟澋dfqimj{~zģ^5YX`H#[->zg(xϸ&ӫ3(bvWM\],P$* Z]R2? j$esU5gDjfjε? _ MۄWGêiIN)Kn-nvJ_jxy΋|e30//x賄Xj4qhRJ,ܔ?O"γ=5>}d voO~6 d'HudrsMr@3^J-?B_JX U\5^ 3]ư^2!<IeLΚ(]g4ZB+?7vx >D j!8^[lykgkߦW4O!.Ƭe={ED|gZ:'?#Z5 '~5NMQӗRP 4EcY5[ku6p7& n/z7MM\R.f7feEj2>MQO.ńKQuܾ,;rAv7QR0ùNFEoB/BdKe݊7Q:  -vFTx͊_M]IP;W4}qi8zQGkm@iݘ.xc#Wd@BD QӋbMjE77uZbS\m <],g-~\#(<81$~+Vy)7*fv89&k2&@)ž*7;eli&{`kh{ !8P/;>DՉY]+ʎ<ܽ+еzϗx%\u~C$eQ^p3JZ5a;X'%rH ~"S*(Ö)DǦ|?4 }_d.9FxQD tg r|Z0# "WDsc(\`{ * kl=lI5|a v/pT '1oPq MlԞ9jcu (n;Ba ag8þ<΅ `f-vG&r=|Apt lǯtPL\9ci.JjM|Yi %N(9PaZrSuƐd`̺z@ _PDXH "uYQ9DH SY;JL$&`Az C~ShHf@T QB7=񽁍E˧h1|u7f<!5}L_Ʉ yeeh$lqcF+-y<8S87 o`E㼟E: C3G;?Tgglt(zZ$;NCi%QҞN$m*)u&w`p^!]tO<)rRTꜺ JhzݤBJ1 Ӳ^qobxT9YuJy*;ucF|xh dkq W%r$KGmD'.k3`EdUx9 N)~e6ٰG,)y_ƒ{"DFI;v>Q0JfI_#y \4`IwQ}c<( M29nSA2 BpE;I5l&?+>#TK@}v\kSn`ɁŮ|X*,M^:_PQ_fMz&Hա >bǿ=EU.a<JOD ?SOMKNFPuOxЀUO&'G[|/ۊ\\DGjmEyTć(Uv qăD&g!nWX/:IàСawx9I*?sZѥX:͐ua }4(CwRɻ$U·h@ kl)bBDuN eSdp3{3 Հq8xۿBgT#S:È7]DZTK~?a]&qCh>P]K$ 8y,{Ե}~Za9\D׫, XJjQo(xyE\Aec^Aƌ(H=56mc l׃aC$VI bԈ;&}L3Kޭ'Zaƌ ٭|Q,}{:Á:G`X[^Kt0p@|:vN[$*"| o3{ G$HS0ӈ#ɪVكmIksp5O1oD&F4䄦"$gj8ż=}DU[oA!4C m' .`7o2f'?ѣ:U3gh/'>m%GJ^܈V,g3fsׂ̠Fl^U@E8JwePaR`\͈_X:uj $Ϻkܦ u'%P3OqϿǢuQu5uFdn0㷝* u@EJi)oZYvAC:ӲOi? TAcM҅GqK0]~n1ֽtC?]Ge ݰ&E Q 01e:}zu %z䓋I#݁rg<[vdYWkN3\O/a*HP:]*4M?Q.UtZU7UēVL')8 #G^+*eO0tKʠ?? QyATl>B; Pr6p+w0uFwO@KWJdž&DӢPD8/pHmAԓ83T&x4"M3;;PEs`cͮ.>|.}zqH؃ȁ$7 $N mrtxNM3gA}O{pC>2+.#] C軪n9 97G|g~ |M D#\A_ m^mP f/+gcJE$ *.Kе2 91E| >wgUII"bzK'!2g`cdТb!:f4))&#y0LPIH<4Ȋ:;2fާ7 UY0:  bq^l$ Fϝi9ýh"$1Hˆ; Gn)$[=:<9%]#/2s[ 9* /}T4yF 9dgcbeD0^ڣhRe-E~94إ.<8E*SK)q=0|R3EUYi⮆Ǣ3ɿ5Sf ȗp] }$#kltB36:kE 횮/Y_' &ʎ. i fՏ:tLAn7{ђ{v>K`ΘBnV~tLflUcU=E;?6tDC>C(E}9!U@R4~Cxm$pT$ 5J-L`z~Hpb Fãً.8PmUGYAH&q{h\oT.\]Q%-P pIh2S^p#z\!$60U$pYpئXȎ@:j%vתؙPިqy%R]NvT#<cHaQa=T/k&'*dtlڿTdiKǃkvG\Dgr^ P;B3/ّNJ0}{peI7#*D O8;Mr_:CG0CpZ ;7TEbE|Ul ? Hr>FCœC#|A9BC4!=&t@i fO!-#r>.Z-ۍ7UI\e<=EU@^Q}o~dhUG 9w;<ߒ!ށߓ,Xx9ʤY0C48t"KJx@U˗uy5PAp%eLb0(u~3 ;ƍL!o244&dj&KD'j~0"j U,icϋj{{%l6r&ȫ@E}{@`i@xpf Ig1kyA '8.>ԀUga3*N,[)c"Wqѥ>rܿWR&.MF9?X,Hh))nI e~bW1hidEΔ!aZ@dO(6 ]M"P,40Nvv~9*y w+ 9,hElZW/)D[ fʴ|kM~?H3jtf%Cb$-*[~>Id:r/$G8_?.~U^7? Rb\˥,N hRSOm ,CL~iX&Cٷ!)rww=Lz6fBخ"Jl_gƫm["B7omzbh,Q H|ܞ"\6<=N ?/uk%6᪆R}jߤ\!Neaw_DY18l/u!t l]t(Znw?cSŖ=Ed`3Tc'%&%|pۅdǴ8(F+JgWuZIey}>0}+5#Rz2yiIgJT#-~zFV ~H~~9)*,BB0Y4(/]||J_NX}0'Ϟvp7Z-3m̓>x qoKf'fG & ?мFff<¯:RC0AM+7u-k:=$S/[aRIOffO7o@ixn5^$u;Ͱ5`iP ]Js9aP\XhgW ~g]jA3'#NEDs)bAX?+7,_rǸDOG({ _ӣmA۝̚ OcD[I*?DxBWoO3^P,Η"g'Lܿh}6.JxRˆ)/ X_}1U).|gу9R])gpOto7eL@~}`KU;23?^P2&ԗOr jKc}4NZߚ~R@ >S%48vר-oudl0VP=A[ oSr$Xl;l R[@t20>#uRrz{c)ZЀ_f] u`;X*|w*rwgpDY$n~\gJ:xtIQ[/ćMsym+> [@EѭC9Gs˘jk6֥T'n!~͉"=O!wk"UTΫƑ2W-EIg5ȡ$Wth lA=Vs؋(%i Ŕע)v3s#cL;B T"}Zb//Crz)D5䦮z0NYe8tϒWz-']; j<Ʒ5ޱGJ_ oЀܣ1Q[Π0e ^@SbeU׍?NϝAEε98xNG,H5^uHy{հF[z3۫VHBдKX}CAeJ R"{iL-!j!A6R͚c?hh6Un287~F.9XOZ,#Fޚo06u B(+g"W 8~ma$o*[_Th^Lww/EvrUqn,fϦs/mI+oȺqګc.[;N~0mE'M_薍0X݊Hp)p$ճ7ְ@9`IέY9+_V6=&U^ѡx` 'xZ39>++)CPF<?7K~Dџ|YEHCYN*@jé]Iŀ2&D7˹DEsZ*м,L[#,HELU%Xt@V{>ZNo XSxq峔-e"r֡uUR֦|nn Z9=H=Fc~ᢃ⦵' `Uc|ΟߟX-c\[GBrg 8imk ?F:k{$@NLlY-}VM>4F~OoF.oAe d?zطR%xFd@PA.4ǻu*=',_5^qZ;[[Qj㵞oAz e6qD_0xLgbU zdth!FD:\ $+'c^4LRaa[w'Wy:ߩ*|y!/v/̅dn}rVNqVoPHD uYBhkIN-G_30)$[W-8TvJO/硚1_\<oTX:ߕhxmH7$%.'4@o:&\6s$eMGKKSlԎ+wK^:y(;Z{ G^"Xɮ䆨֑=C(6 p"Xgr;?V_2,+bûzr*;4%n' ?E7őJ8sBa(>\P"vtlXxgjFNi4o)^yM.@bZ9\\7Q\tGzu 7N:H hF2Vߞow3_o(KY[PaO{ہ(nOr&Up߂r`R6;DZrF [F`ԁ=x{ǠC;B`/3;IYhu k*x=.(C3M;35~w,jK+ch/g ;4iVaxn leiΚr61fec}s;- ^?9x0l/܌vKaAhq\*!-C"!/tTGc%QqM1dM6G֖ŗxi1ƟO*JQPZ' j+ȜNd~-1SXZƾ :Tt_dY<{t"+덫nK!:C\UhAPy5yf^IƝ1kU\_"յ7FH&'r!*ATHk;nHl/ 4sŬ=(WU*olB;$p*8|GG 9yWM@ ZFU x>꩓*gU4"!CP@ Ch$r&%S:5Rb aH;4wThY#aCNZEFxIڠU Տd0˵l=<Or*`6?JNF{@5JO duj#@3VVZ$JXLf?Ҝ暥!$YOHE^\'Hđ]pגC wg^x}+nk<"ޫtjx|n(T0l JQv.͘~1~I\\3Z>op;/?NIhڤw;+YO1BX}<&w~?1n2Mx),Jז51uU2b,Ʉb`Ubeb!'{ց?\ BV1 { ;Yr%OSZfe#8cO|,o$>!>=~҅bCO`2=q# 2 *y"01$cթϪ:9< PW4/V6.s1LT/sP.3oo Sރ[ƟDXɾVS8zc"hKcjFКw%P{fRVa=dg7K9d&-z )Xv#v(з4]_0+=`Tq+[!YyY+T|\}55%*@^Ac9]t6#^D%J5Ud[asJZ^Ke \?ʁ $问Iw֯f_.J+84Q$O'|p>U5*-JE4Dvļ~@F {O *V̛ϭmVp.V#鯔MҼso!lV @C~rYS' La0;/S7EvKV 1'4WiW*!i8F.;гm?eDI}Yc B?LA%[ dEvrٺЋ2@$%Jje*oo{vK.q=Hf77r0N(h|{j<kx%W.M81&_su8N6wĿ]¨a|&pH 1dC}) R4[9W1o/Ote#j PW3$Mnd9gk0h=v= 7e۱eY=o 4&k˲^󙁍I3pϾH`ͣ><(i%ޫ_lgɆ@c,|(ggoix^l̴8J< )GyY^8r0j5 b9=cl3"`{mK=>bH@zxͼ m7l|qj~Zmi0j/P_(zMN6b.ߤz1Rv(eW2PA[n|dBt@bK~#yCbqQn~ޒ$St=9z\[{*/̑Fc!Ȯ* <$˯>xNji@Q@F xYN<S\ݑ}yj&"P7Sės\HdA"CbQHs:/`}\^*l}7-tB/nDF\pLRZ4Mj{ ȜPOZF&魝VVY㲆QWy+cqߘQ 7s ,Ր '2ɏ{DI^?4J{v4s!* "àROl?UaUfg2Je91w(]>|1^dNbi2[這 ,)0]<pqoQr'ni`gg6S}`vԴB'@i5)05Vpws˯|zUԈ)gXiQ5ރu̫ Fh}NLJr3c=NbHҤ ϶7xYTtǔ(Wb$|YU22DAͫN BԔ8㓳?S*[dsǫ#DlpǓZǴVc΋H ^!JLU] O>M[c(>4lیtV xU۟Cbt~;*tOh  &:+^RYZT\=RDV$džEFpU(1KJҮ0O*{n[iP+8)/w<r:*$yiGC0^3SEb}]Y;x]?f9bbqM0z - 떽'bz$Sqvj||^ݠv^ύ/Wα|!kX3Nq=d۠ri>Y,6k_Є`Qm f;gzX!{N" $r{J…~>9JtZ!; 58QT8=_?Xjߌ%)z{{?[헞W*}^"vM Xʟ F#ksxvF z67JWqY}nK@[v ~{S&}D}?Qb].}I},DHoZDOYfRP>%t_ʯF;]Vu%Ѱץ-Ϋ4+nb, &geezB#o4;ߞT)ӘC;ȚV8vkDpiW&GXi"w ̅`l2@  %;e~PaxW2>;)a8!h>o,2 )x,%^89m@!5%ggeTIދ[RFurTu=wG|1:FT]U ĻmL+j[@GDV! zHpUb'(-y̋q"k<j\X}t%`7sZ .Fխ@Ί/ȱO o. 㨐 {P ̎B6ڛ[TY, [ 9"Cڜ1 b@c&ɔr 9}U ) %<Ӣ4x`HnZi&GP~΋#4c'Soi[kcjh=2ƜLWa1ccw9&(W`_HOry?O{CMe( Ī9_ɜҺm"eZOH&V 9A\4m2JGtiTʩkRR|{NJQ[ɺ]H_Y k]@;a;)݉ \?MrDM4+/$~~5|$Do%k 12PVUOap9e&D Ɣ5i",ѥfZF`7fh ,ӈϪWٗ̏:ad}w; Qw#Ti j { csna78#gHwkGTЁ2fuX2M( os֚{m esa ~^(y/DZPRm,طS㋙-nZ4[OMM @u]4W8m/>%?u @./?*\9)dzwwi\ YEf܅h-Vxُ5':Pn+By';m޹" gBTaDQ|[aBGfEͽv afN*o"=$fuMOԶ&%&@CMôf6y/H%kh¦I'"=ޞ:cfԁ;ZnG'~ܡ,sd3[R|h[)nM--N,Z@m"ڹșWX/ҵZGܧv• 7CՎڂp۫T'HbFy*-m\'R5b29^&nUj\ 28y"akG+8Wd?V%Yspe ]bW31- 8 V؏qf\%woFUZ5_]u3o*,GsNJe=cP g{Gu~q&NKr}Qe(F<⮷\SQѤ4`-^֐2q@JX0Od> h B%`3'<&adc7z.wr7R.=ۘ+/C JGH?X&iMEy~qyچΙd?,`L>8` 2ꕣ\_I鋁1d?W ޺gV @0Rs? #Ԏ&ut=ʥcՀ0^siY⃈JNkd0W*eTȪ\ȸo򙁈O$2D2mZV6 TV! rM7;z9#a$1ydI޿ S#Wryi=|];_/1Im)4M'cRagL 0tb&*VϒٺO'N ߅|4BX/O;R)6jKbc+ ̥6%"ֺ\VXfbҀ+r8QS9 dtQh9a 5&RlHVaY&p$-Ф|Lm+mM`zm _BcbnQ񢲰TK$!Y8'q[LCJ͟6"AO|N-N%0аC`p }A=4m@'it>>Y5f;H@h Ct)u0VR)E*XFX(_Rco^ā\`BPMV0N&~O|A 欵S'BLF`e&Ow <(~j}ΪI[!,uQCn9"_TP*g.+FMW)cf!+@Z{tnX xYM&سҳD #ȦM`4H)2U\#!rXt茽<[oۙ٩%Ptg@㭊tm;=,1sI!SL)VNI,~9Qh+T3q,LUYju>AU./e%ջ KjdV+gBRe ݂Ua~^Tۻ}фt-am/ǑBϕヂ+,=;R^-( ;U;|Gfi3[OS$]YxhB`g8#askVh"z,|["~|'pAt10WdȾ* ]MלK13m*W2S!VODQ$¯FWŕS/YsG_OϏ?}l >&WH' lL)&ػc;'{̧ky#R]r4t*N!Nrd@Q`ZjPq·5kkz 4oOm&Z3KϜ_󈪓7(S YO2Pq2ș]Fl{._wim4v/1?,(r}@8Hmɪ4,Ӄ}y6⤎E sBGJꧬ+LAסj=4?'(`$>GC%/B %efԯUs}XL*/9[3EL#|07⹸O;jf )z]fnvi@bYSJm7|4j5+a IftFLCߵ%uNyf8f[~3ial!'XX&(UQKw(fdk^!x `q뭍]A`u]O;s-],EKg>*]tP~ypK}l=p1dD0e74g]w9$|) 5L_ [־6G 0#4M+1>A,g#EM u0W /|Id$pgQ>C_Ya6k0W-?oбo e0@vPLFTCP)gS-|dcm wesX}릚4f yabAt̉IؙLGIb827 JųZ34pD 0hk䷑]qГڕ!ᅡWc;Y»ekx!5vV"o̝1^aT)y46Bf̌?@Uob%EBtH<ĨM`#1]U!JԒez`+)(o~3{yNY8OQߑ:9Kq2zί0D9~OnH|79UQUI%1 ?-;RB\yJX *o ky$Ca`1uƓmrCu3?Y+5"Yu=fyG3Lga&}^JqGژHFG;`B=>^O*8hG| .}W=WTPx}(cO?zeÜnrJ&lrSkb[T}~^fڰ̙$wQ&?c7l_{@&Վ=isܤMo\\\j[WBj3ڝX2>9:ĦK$Z9%P"Bq>w(kʶl?rGAxb`*{dy/gCL%A؅-{RUq~f|bXoaH{@eŒȽڛUόIYd*.(#z*z*]s_1%$!Kr9ofXDӬrXwV ٿ/wBTT[MܚA2$xu"NnpUp{ <߼^i8_q>9EF{}{Kq?'fE!!هa b!e*ŏX07]߹,!sED^c-wM101XX榞)w붿~xk 7q8}HghHJg]+uCr q{gv`Y**ZeocK$MN+ Ym(s U|V!o%WŪr!#L-1MR}K:D*[kRI`t5 #,A>R}]"U:s?]2!_բ^hMAQjN޶zb5AhOmWH f֚,R_vNJYa"kn_Tl+WNjIe!tYyG %m,EEI_ReX҄aÍ"|j|+3>2LSC+, |=$&BȊMC:Q*MUt׎w֙nva?tUƫJ>%dǍk"5h<ox2 EBM:{1jt#}e^ЎyNk܃vB0třvً,ϋzșxf؋Z')w0N3O0b' >Z T0䛯'2Uʼ sL(4rc7{3 #$(R^g!<|{=;_SSzq:7-NCga\_)SVADSh@Հkj?οc .tA4@+>ǡn+ώ;ZaAEb?)m]]*8ϖ`=~M5FcH&clp vNyhE+@aYOƲft#'@e;a1hvu G^=FyLiaSZ^Ȇ3qP좗e'(8!ۥ[ibx[:,g=NaOBY_~IP,uU>ؑȠn)QX2GJ0`1ň6 b, )h8$YӚVϞȷM4C ropZciaMiR! Rw.QA1oIpT8"?7(_q/R-KFP"/}MH(k[- }xŮ/ӷ;zrB";sŕy jrF}>褏5CXɜ-_83hKj}+&sܺ*5nl9z^mV\ϲhpP $@8&4_<'DsuX Cʦ=W3r,,yqV[;(>Z7w,Iq+{-dptuox@ ^N`M0VUl&10%:g>+լyĊ2'ѥr̈,ƾ=iydqH;?KcCyAţuJΉ{tHjXxx;PY:*<;2 0 =YpTVmC9l/Ҙ|IY]+*<4i1bUX ד[]u@ZLbwx~B!QtW _ [)[ GKܫ~[+jShTڮX4]RdViH؊x]0{7R !pE<ޑ s'`Z.Y5p*j[\w> lkMp@}kÑ{-1JXhdsؐci:Fo_m6QB-~^6ͭT=<,?$HJ>3:s5Qǘm{6eJvJ+Nhc0vuZIڈډOņ"IEV>h0m1-=3Sl> ZqdlFrP:ݑj+}wG.DO 2- >S0tFk#o:sϡ^.:4?:e^77`+Q>Yu|~7g8x Auh[ш '?F\3n#  bwu! 4#˄%tldS &+'] (ʛRKשqEG[dhhlqCٖrH+fZ-c Y=& #tXkЌ_-=7`'5>+*`%\4%AyM=*iX2nV${O(?8nPkNuD8w{"!s9>wJ51\7ld+nťybc/{둪iL#l0o8"0LӖa.>dɱω\[ޭC$cw @^P(4>yI{qFvu=FP^vIF*sJi䀆mQ:DIuCeTۛ˲rs^y^oBQfh}ִeZS*YXPo#&' o!3q_uݎ.`EAJո$6P6GKvoMt"͏z}r^f˺t9[H-mw%wfWC<ҩ}P [% ֩W[eM`FFC* |)+*Zb?"Gm+Gt8;9rFIzTsl5k=(~ #?zVEQ0eti/‹L^c юFxk2H>ox+'e{ҜrkX`ہÌ847(.Y+Sκ8KjR@4wF)YD9}.,>1p)-+Kq viĤy慢qX/݊V_0Ql:KenhOJ:.y`.nܯ?BvN=02/LE/Ȏ݃740s I[W쇳˞p[СAmRr?v [5Kvi4 9,NUf yg!bnϯuLT&qVj.~H+ֵ؄4r~gۆq(DZI'C H6;N{$$LE&A a)k+Q))ܓ̫nCͶ,pz:ڊE\JPQeaU›,OB9\/PnXL Gk>x07Jt:?J|qt' ~eP 48M WFTE.|d&3/ٗ3)GxvvoSWK^-N{{q&F4zh^GpS [ m 1@Bf N}\oI o`TE6Q1'ulzxIMßV} DA7u_U*Ԫi/Hj:z2"~bY1Xףps=BkjOUthL,h_B9W)]C'<5RnЌP_&qD`ƞ! UhT;gUJD,OxnחꝌ_ |8 Xx 5|Jא] .XrW-v.)@y|bl{km]. S7XZ8kz3k|a [FMࣗCUW>U%/W`OR:+tZs\/8nvbd59<@'fZCrZ3s;#/e/9QIL݉+N'6s,s/ւ}A/:SR{:ZdvJԸ/<>}_y8%G]ʜ*#n<^eUפpǩ$t#)Gg:lB ֲnYȳI}'u+C֕l)^޼[Y AvdsHRn5Z zpYb^Kֿ&ftWw[>q?z`EnR|a$-[~ ՘n/_h($7/$?zFa1$PO>f*՞nͽ^@tZYK3SjCCr,)tΏ k0h9!R}757wp7g(&ICF|_;YxT[Hn"%#/"Ѩ=o_4$H$B7S?BV5|d+jj{0c[:PcWmj )yJszA7}4.^SPŭIO-MF= Yߘ 9\-\: Ha,FxQ;2gIÁ;g5_c*!wV5 n8]—֠ZWZV0prO mS#!PyzGU4E>Q INڎg#K/hNY#5&CayԳ.PNƨ"餩vUłven 3ӲY 3SAK5:vW f?BDv)ŊC<~HP-. By텢( م|~mi{OK4_._> Ws#EyGFܽnrr޴HVwPKC*s.`-̄kWwM;R]ڻA &_ݺ)3ؙV$|kv Ymkj=^6Et]ccU1Vh$Z','6K uؿkf¼d$,βb3[\t u!>0Gc"X&g%x w:SU*mcyR -CrtN9-y  ݾVqܫ8L$p!ǝXLT4G QSp\8F:3^\ͷ*Pê"bg\LMܼ!rliI5T/-Ei4o>htIsbG[aT[eQF}rDV`+ԌR:ut;E #-yH~\{!f&RIVTJ"'[E~r:JHz~F\9lje,-IO1ڋАpAsGfZK6i'y .ǖ7Ymre ?:@6sPJ?\\f%7>"0ӓ#U@'6 8XJmqp'H>8M/ԖBC~UK{o]zB[́PSY]i}`/IR*[=hGz b2leWAE NGo/&$/Bu`5ݽ^["aX̾z!SC aAڵ??eCWJ]\Z=Bàq;Y07UhڡPwAR<.(-]j{5SƧDSHs}ׄdhefFyk ']OG:)zI=*3b'GQXtu4)$+.POk~n_!r V-{7ٞm4.FNȰFV' 6M=>iJיQYR%kg=2`{8[O%*=r7)%MhQr*KiwaW_6-~L]u[PȍV ZoTGh\I}o[Aᘬ"ҩ3K~FcC-f`;A'U"oe|4o: "nua epЎhX6eLWSBdϻޱIV˘gyP蕣1+(_il BҋԎMFYQ6G/j;M#_jhBYӻ+fgݢ; T./6zjwW!2UesqS/՞TX-1Gn!S y2!=d'n/oYVSgC&z;].w9#2f W?\E1QWtq[_]Gg3W.(!< 6L)U˚6Eb RH\{xSLAy7Q"t;9r-8U6| ܚC|,^ G~1Xj̋1 ŃA%ձmh_6p̮Ǟk-SAIvN5.B=(GhhH fۺ-++UoaxzYKY RkyyFTy?G'h $GәQ$X:.^JS.1(3ϓB"Ts,E+.uxEFZ1fNZi {T\ #%/ˏSg|El)!#YiNdIԳS_ !'Bn4Vz\kTiIaaDѻ= vmms6ːO6/.#irm-zeoqb?Tb.67BBJJR'8%T-`&IP qlBE4KsC-鍻$1]bV84%qg/9AsojalAbzEg{M*2(; ugsT9ͺEcytqʚP]tfL.ÞyjZLpW+u\Aux-lWBgXa(bg2ڝW򐗐! Zf`| ٶaAUjab~>r+q?2/SvaoHRzMUߗe=(?/#`m?fcB{uJX#o L͡$rJ=8 oPCn\Зϕ?6+D}6ܯ@QVE >G&'8N_$W@-`#+F~\<<8ܨ0խ!*Y ;0 G(\9PWд1dkҸ];zUC*qy~')K\kϭ+qwKOUϓA$qe謕AsނpzTN(s ': YZ