libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-lp151.1.3 >  A \܀/=„iW^]T彸tq>܋ˍ"qx2 }TQ2.[؟{_-"è ."SI ^<γm$P6}$, nEP٪ˤd܀ࢰ5"غ3k)# CJ"N9}8zMcJk̓oXunξ8؆Qsxrcd0rXy9hs &KdfvZPrPB&e 5394078dbea7ebe3d1681b0230f04de4af69de93e47fb28d58ea0f1a22d56535c02064dea3aba7cb57a7b836474a22a8c27b526du|\܀/=„?dS#ؽ~h-Hi&])- [BwM[!v#2ܢnUXAEVQupgTX$9dtRe7p! V:&V_֮hY<^`'?+yJFQTaXב"ё{5$z#RbWMI@)Uhn54Wq|QQ9ݨN]W:WE4l]Oj\~A@6,jWCBTD% i>p>fT?fDd. 8 U /5<LP R T X  8iii(89:#{>aGbHbIbXb Yb\bh]bl^b|bbccDdcecfclcucvcwdTxdXyd\feeef@Clibsmbconf0-32bit4.9.5+git.149.9593f64a5c3lp151.1.3Samba3 configuration librarylibsmbconf is a library to read or, based on the backend, modify the Samba configuration.\7lamb09 hopenSUSE Leap 15.1openSUSEGPL-3.0-or-laterhttps://bugs.opensuse.orgSystem/Librarieshttps://www.samba.org/linuxx86_64/sbin/ldconfig h\7f42d0774a7cd7529c75a568ca3133342704c4d33edd99c7b7ec22f5bfeb274d2rootrootsamba-4.9.5+git.149.9593f64a5c3-lp151.1.3.src.rpmlibsmbconf.so.0libsmbconf.so.0(SMBCONF_0)libsmbconf0-32bitlibsmbconf0-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shlibCHARSET3-samba4.solibCHARSET3-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.2.4)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.5)libc.so.6(GLIBC_2.8)libcli-smb-common-samba4.solibcli-smb-common-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libinterfaces-samba4.solibinterfaces-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libiov-buf-samba4.solibiov-buf-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)liblber-2.4.so.2libldap_r-2.4.so.2libmessages-dgm-samba4.solibmessages-dgm-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libmessages-util-samba4.solibmessages-util-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libndr-standard.so.0libndr-standard.so.0(NDR_STANDARD_0.0.1)libndr.so.0libndr.so.0(NDR_0.0.1)libndr.so.0(NDR_0.0.4)libnsl.so.2libnsl.so.2(LIBNSL_1.0)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.2)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libsamba-cluster-support-samba4.solibsamba-cluster-support-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1)libsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamba3-util-samba4.solibsamba3-util-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libserver-id-db-samba4.solibserver-id-db-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libserver-role-samba4.solibserver-role-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libsmb-transport-samba4.solibsmb-transport-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libsmbd-shim-samba4.solibsmbd-shim-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libsys-rw-samba4.solibsys-rw-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libtalloc-report-samba4.solibtalloc-report-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtalloc.so.2(TALLOC_2.1.0)libtdb-wrap-samba4.solibtdb-wrap-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtdb.so.1(TDB_1.2.2)libtdb.so.1(TDB_1.2.5)libtdb.so.1(TDB_1.3.0)libtdb.so.1(TDB_1.3.11)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent.so.0libtevent.so.0(TEVENT_0.9.12)libtevent.so.0(TEVENT_0.9.13)libtevent.so.0(TEVENT_0.9.16)libtevent.so.0(TEVENT_0.9.21)libtevent.so.0(TEVENT_0.9.37)libtevent.so.0(TEVENT_0.9.9)libtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libutil-reg-samba4.solibutil-reg-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libutil-setid-samba4.solibutil-setid-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)libutil-tdb-samba4.solibutil-tdb-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_I386)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1\N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USanpower David Mulder David Mulder David Disseldorp Samuel Cabrero David Mulder ddiss@suse.comnopower@suse.comJan Engelhardt David Mulder Samuel Cabrero Samuel Cabrero Samuel Cabrero dmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comSamuel Cabrero dmulder@suse.comSamuel Cabrero dmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh4.9.5+git.149.9593f64a5c3-lp151.1.34.9.5+git.149.9593f64a5c3-lp151.1.3libsmbconf.so.0/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.1/standard/f8490f6d0334c3a4fa732b71fd01beb3-sambacpioxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d34293b2b61825a23a0ad9476287c77c72a32f25, strippedfPPR^RRRR>R*R@RdRbRBR%RRHRFR0RUR`R RMR35Ef0֒b ^ 22&#z2vu=n_ [[ ۅ]zhƨ^$ N_4}V2Ӊ|RC<׻`c. 2fvZ lu_tH.- fI(2.:Z-F⍜hv4/as@+JzE-66AFٖ͡-EW ӱۻ,`ӰQ )G@WmW:'TSdHLdjJaʈy~H $S&@n ؎ CŚ6v3eȺq[*&wv HS?DEkKb!V|3o}#h陳at^jIr2Nd(I#:դ6^9o15\s:Ue4\]q:[B&w^ߘPJbHݰc6~YBݤ%[ ݍ3+- 7( dS!q7ż߅JuvoVV'YqY捀ue pyp ozx=swLR6Uv7b>XNYUbmP`]}^[É0iҗVԆ2?ȈQvv/g]֊?CDi,$//[pe(zx*t먷T!G q( euGݢ: ڱŮ pV3%d U41TŪ˴j|7DrkFE =&}bZ7x;f[:^&BW7j.Uo寀7DHgAX**:iW3y RnEqLrMG!e-=E*ʠ(+(x 6DPf }<K*%NtDܶ|UJgE^.XoF[u OU@)l@g8Z)9Xȹ%>.1k~=̯A[AѬnys`3~p@T7 sBYۜ\]v,bZOvv?# Z97 c !H9yV aa&0lFgS)!nE\/Pa^\0^ [Nhѯ*ϴwД=dcf?On-FOnug=4%o~σ΍?1.\ޔV-4مa ( wxJ'_*TycƑwWT `GmU@QhϳƑC/" *Ӓ`51…VŹ:%].ujZWQ.ƫJ"7ZYXg˧kTbxUa#gH(rVxt?Q׀!}nQ|\A0Yֈ1;{WLtjCleƘASڒ?:UEk,\=Oe%S#ߗN?\_VVIMӹšR p?a~Y0RjqwIM{_c*cJ+Øpz"㨔7:RBX }BEBo .f˓sPzf ;Pɕf%?yY\]ȄXQE6le$EyUCujhR r*|,@ٻ4I~lS|ɨ#3zr\ѾSr~S9{A M#8e&O_uH"hAw0ύ7@sesS~ 7K`.Ė9!|JsBAƬO\(a^>ȗ=#M$/R08T7>A11Sgups2K>;컾dA\"&ůш18*W\j4cuTJ0,NDx ˰1Mā6ϒ|#ĈI1z|[Ss?bN4#avU;^P2$G2n[ƙ+{i =?4,D5F+RPXa:w)}`ܯ\x06'lO~;Ju_ Ոjt,Sa@2hg?$CKU8YM P]DDWTڳ s=EeG|Y) c;cwok-#3tzb ht_vfNC3~cKiD_zW^Գτh+)Z 2OOP ^yhoe8XQ$PGca3ZrJk/wPhPK}j>=q- 0M;h-F{2+T5P3yGsa2k)B GMn']QeP,>7[@{ȮxWB2nN-僧i;S4?"qK#4GIEc`S}!Y|Z"|$%c\9IMe*d@ϮޤhTMŰ5YF츒)GATqh}UcC^kOHUq7 {Xyݿ?=?xT g1>X`Cu Pc[iF\bhjzLGN$KSp[=r q _)3leVÜ_~Aa*A\ cшz#? %{Mj`Alóxfk=4[oG10FThG^q+Yj (`{ˆl?+&i> h eNPvm{<еGb]P=¼8nYմLO1#P1? -5G-8;)F+"Ba1M}osM0(Q.\ nĚ%(#"s:`->aO{#3ݑNTG-0)%<+BeQLS 6*2G/i_|lx–V> "2Kih(߫Oy{iFHmW*4/=g&P# s8Klsx?i+s/âxˊ^(W,/ m*jXhQҹ~}!#ԖEFzՂBt؍8>6|^y˼`&ENf/-4xg|Y$$8"{3`X}WСT 4l`n5`>b HI:HFڮJjJT½P[Z2iasv5˨|vXIu0x6K[50SDDq|y(ъYo0H 77^& Ҭc- ɜ~[4Up N#_Kr(gCu@ٙJ9`e ǵ ,:q0,CeaY,%L vUw] PpW~*R^mbIOhG:B1 :kyNvvW"ŸGg)(Yy ܔ1&, }?#ۢ~v(ar[*~1˱}{ȕU/P ;\p} :߂S|_/J?"mQ+O}:YCSHU@|fw۰ŌA)p+*7Lr\|ka>@ZZ^^dAuMrxaW4 Tz^޹m OjE g&W50vO6uu[j 3ƾ8Wūjݲe (DD~uZI EP ة{n'Կ09=}۽^iP7XӅqӪ'|+M6J-ܓ~eDշU@┟,g}Cd}f*ہށ8䈍x"(͹pW~޶EX4j:x"]:lTSa<௓ oD(ұ=3=H?OH~ @iEg68IjMr{stz G 81*ED䷜ WC,[/1!HY;e8@ C A;Ɓ,fSOˍ |fRHq8@2JX(j ztm|Gt$}ːc<=NDRQ–_d2]0kIAKvZi9w8f1Z9p/Dž5:.6^5{n?V.6,|A*:/7y&ȑ}P 1^X$Mo C⾫%ENuD[ 7 ]E{]1HO> Q쵯=+XǢ+俟Y0d^gk[ry@DHoX{վΖEvjCidRnշ=zJ\MX0NJ]pӰf6K?Rz`, GZkIVo,B'(-8kZfjY"uٿH2+ WE+.X3Y}Ի[G Xޣ Zt|ʂ#k7M`D>U=Y%,3`ۡ-d-=gxK8R>ɭeɜ,YLz5$ ?[޻!w,Ag9vqA+\e5I4s|F/E\Qe[/zN*!;|K)ٳt8I=0[]ž{eO6 \adCMϔa$eɦ UÅ^Jc\ 7$Kp39Ho촐",v>$7.>QvE=RCcbMز˙BDsbuLrMCpbIJk}-"ӒSgA|vÙ%v W/e my=vF?晳f1LFe@uEBjG-()!_OQYMڲ%JCUŮIW՚5J=) X"ǁn>6>rE& ͸lߛ>`@ 곤 '{D{(XBb6['c(q3yxɌop+8ba/'' ٲ&D4ܚ7]mS+&<o0ſ&"5$傉x[TӴj5kXG{PY (BqYGY%%z?OaꑋС:4ggdۡ̕}Ѝp6⦋}'<'I̔kQ2BN0g>e{ā@vHV\Fd2Բ.Ȑ{Uj7 tC[Y+~UU9=tZ;wՓKKirre}tOLY Ӷo^kަ5=H؇ؕH]=J*O=hUDP*qd"NN*=zjo|V)Ig)yWePy#)k2 r|ڲœ56!31rm$lNYcRE{ߔoEq?),Bo-:Cv 9_P|q_{]gGŠ,꬝EtZ,1w ah f[k.zV ǃdA6!4HɈAXx[$ jjs,0 X[]Jk.:;v6ȫ, M;tXÚH vș7=,ۨ6x U% ,3/Ik[g$ *xߺIb' .a=91c XaPoƙ~&ؒJʝUtugv>ن\ms9A2} 3޼|,U#o(S׊wsMJzONjh8L/94?~5o?XX,\b6 NG+`#S.Tazuf㬽$ /_.g r|չXVrY݂SkT~"5 r_u /c@p;u,CD/9q(R&j&7)_b֤}&Xߪ~ qy:Ed GpPPn&#Y~]X hSԍ,hvU[^)r9XIS?/M?_yO ;I1YڋZ;>7lgE5dR_f{Ű ٩+&0gEI= b?S|@à#n#gĆl5]NGhqJU=8nFWz7{jqf!hl#VNޥSY{ҡ|Ή|f#Yԩ\:)/y8瞊nz K[da=⬱)9tݢrPk܉ $xէI̼& [:o FrYeNoe9 3)@(ˡG`'qgsXN"֕/pG(VWw3Aa)v6;d:jVbpV:-EAkZ5- SZ_B8fp>Lz}HK!%@ / ʼUP FW2q0CR-XW$uCqy+ |ESQ3㞁Ahm];V|j(\ݣ#_8G_w|*RII?5D ?UcJ Rf𠃨Tat0Cd #D>{M=SvSwCgN=D?^޵%ݿ>qTg=cY|Y^$}2,bvc@٢ަ 8X^U 3r_ӅPk$-񗔍?ƝB%P@ I2LS뽔tJ%cp52g&#ţ6pGOe慵 N!o1ݏ91L084* L~xN ;~_QίqQn KHKu `ROfVb ^`^Ma1'؛ZdqȄY$Ği 9G" A &S+I[8U}eu}D`iD2Y C&Yԣ w=/99-^)*2BID/ E~apSUq7HȺFYGmN.pZhGAш gzV-gqpB0Ԝb9;lP3OüTT#TqJcڼTt^G}g$DsKT`Tp (B^M0e.W""Dzc(ܤY(?eBeo,wǻ R$|hUNF),"HBYK =hk=_$/ZUJoP4s^ ex,Ъã$z_Ȼlh~A2To5-xKȉöp={؅b^@5͜IUNz JzM5Qj`+o-(6#Wp`PBs40b>}8o 6ٱBn6TdaPBRS>.J +Vz5,|S4PTJS f6,.7A┕UcalpN2 )1Ah)ӱ?[˙QCS-|#6NғIR3xrIm\ҧ$r̗җ+{f`* FXX)#`zYfp`}鎄ɓ!oZe|}#/ͲH'$3>ڹ B# :ZE4Y!M!YGl+<uuCBXcɸ7`׭$c-wC¢ چ-60Sا $R7w 5$ \MbmY|17r7;@ |J,0K5bG_'R[!6ʍ^utKyK`ۖp5Z.렩ЋhK*K+.WO2w+}*qg[ïj{+2-dKޭ9Vڏl4ӆ }F#onܬho1|̒Iu[xl}*sjЬD.v)WWK81y!@b֮؁˵>3CaHe5mnDw^ 8G7:} =JVqX P G1p843Yy|ͨSgj9;۠z+DiY^dyێxcL#C1H, \$ƅmm-nb'zO5)S14J)0Qs&>@Wg@ARcEsw ( `L)jgӰq}HKr)6zNpLo Red~D"H*=_%F[~etnID;iF,<_3yx.YÇ\m33jEu`ZC a]Fϑ/N #PHXD] ?-PAfù%a]n|7tnD%g Ox1\TRxIwKeY⚒# X?+K.?DdIHʣi 8eӾ1 [dXS28)q+܆gȘm~M)J_Vқ%__𲂿Pз<.ؗk+>Ws4^$I߷XmHDf1X'%Kܻ\Ia~M\L##xsKAUsԞabC@5mC8\m! 33ܫ+m '9+8TfrY"r{+6;Э~.j"X5%cTzX!uaM/GP?ޛ=/ѝp( R͉D[oI5SN-HI 44ė'y:$x Qy8oy & H<:ѡ1#0w-l)F9tӟ :1kk]mc#>ÒRC&<%y. TOZդbL `㙶̴E' h_WgVI%gǘO<>},:c=?Nʇ1O'ztŕ]811jFizɹg.A 鳲ZiU9ξh_a=QZE*;)-R.Ǽ*mw6`RX %zx3'q%Uzf}8SS%.R9[1U.:B4f4ۡ$  i!E˦I[PlNjw|GVʻy;g2˗X9,I@(&G 39An*OqU?F)~dSE򒡖"m=!@ܽi3ԚIndʧv |W+^NR;pS<[C}{ P܉χ Bk(/ a~ !*h~@)-ׂlRUP1/񊖓OWW.m:W{ POYֿr[WPeAUS8^P;**ӽ.ٿ`Asq*܆ՑA+Q &dh|_Sf129o!eo37x^O'ReȐZftCW[sB+4"-IXmJXͬ3!ϡ cc6I=ElHeR#zu<԰?ĘI7ƏuV|6u-i汫u3D:̀tagևX| d:rn-Ҏw`V"扗@3U~/=[枑u'l %s,!y9]h?'yCTO=q|`A%Flu&N\L#!?'Y9RXB!ѧݎn,ȿOॆK}0G<E7k>!P8*z>*TgʲpRL,W*g0eqͯ3JY⣰Cf5j48zY_@Ym\Y aF˛!ãAѓXScC׎.'a/q \׫v¸KX|F(Os~;rHUM25Tk`;eӋK/7|S֍O ! x@2RG0 3 *0f֍⬃+5Z3*GQ ?8Ld@ V$^el4ꁓ3E5ƴCk(3%;<$ڄ.%O>8# }#"';VVr/bTlJ!#`}dd/fMkv$[1^~.ح>T5mQzV@CI_݁|NiڦvF2)?}֍4\CTBʬ~O#D?j(4&1"FOwjGM6)$"!4>DB(֧ż*5jQt\11B,9{#)nK[26KS$Ovق9qNܒ2"Ć &0!HtdR{&9{a!3% ]’]ȇ?'ļ}T) N:NfPdY˳u `XQВ9 v[ؒ> [4ZGbYfrl:[3>ƨ$014y5cH@=@a\dM[TFyc?P;Yq7l5*%6@H\ b fk|8ЗW.X[{q Ln9ap=DM8'6ty>]`E g WI [)\TRx_Jku 5,5DY{{ H}>RSC4`Qe| ѐ8nO7^){C(ǗBh3@ 6L䃍!]UhԍY`;#"<˞)ƚ;)VeA3Sn}o.c4]D;'K+H4h+%1P o_Ka&;ƻk|HCW J~5o#yQi ނu>VXR/Z.j,H`웈,lߏ[ɐ:VFe}qpoMDD9-O.!pw?KD@& ߏB:UbSI*`-%'/a*.?{mrdG}*j̥AD/C1}Vh",~0µ%q=xyfJUJE.ǝm(T2~E #Ui2e zp.[N]hRv6"|&".'U7bd 7׃Qieĕ]'բK;}5 fSOj(چZF o]\i u#`0!&>!JqgUD;ع 3 9 E{E?9-LAGG ^hX6v%?WC?E?IqsREBFZ&pM_9I #||D|Ws4J&[ দ3n2 3ۛSc (]gO1Dو`ٟwћ_U]=mJEP MfɄJ8D3\z"dv'FID ՔqLuv[ן!a²1Ny~wʹv`$rdE; e4kmmѺ="iA,l:uU;~,pK?A(Zj ~ z4ċ1AHCtp4Rsgu>^Lx6k//Z\8_k8 Z)A3ݾ:jA~x@zrshAc_w6筭Ky@##TL'"pq +jЭ69;ǣ`EB]>ܪAwDM؝Ç[8W~AѤ5,`uaCZ;k1P Wҡ ھbdx?015n(B(b7YrQ~DE ?mm} o[XĬ(lC"X1 %Q+W~Hh$Y`,{F ==rdfXR?y6^WyCK"2˶<\,xB_s TiR5ȉ*js "! ]Śu݊ -2+zi7B#H:z 'SSو 4Mv}iğx~6K]Z/k' 7@Ts/ ʺi=WJUKDGX=R9KL= m]@gMQndWaH8RdE9e;KB}!|nhHlS:lL3+Jl#S݊JAN7t8?]= BSb;J5R_6u.5W"N`<6T2`" ER0-!&$ا*y!nqgT2Mq!Wk/nC#F ?Yޒp T[="0T%Ѷ|xk8 +)dJ~TݾT/mו NkGSH{5ѷo Azqw` >f&}.+xpWkPN¢{#& X"MElמ1(weGMpUp Ó*f=$3 y>k/(ػM >'G /P>v~A ]}{jMb˕D =D)AV7ɦ+\-]33@#YP薃\2.R5:yyOT[[զ8g~]x%"_P*<}A05aeGįx_ps,[_z5a0_GZH ,}E`M?C @K)DV~F_ !€_4uEwxh.fT0nRSH\!7WA,u~HcC̪ Ķ:1*2!iskn7]*v'>22RK&^F[Pc~: Ѵ~ 8URG\xUOv%" 7 Y1^,-SVM;}b :mM#~@?qY"$簮S.2S}߹M"|TOpޱZ8 X`A6-/MJC|-nQߗRP1=K:*,qVNJ8(b.!e`M6wkAm -Ⲷ7w9aG}B,c~sFr$gz?{[B\)VnC*?@_$Sl!B9p2e"A} NͪAHCQb_x|*PEMW,@ REĽ :rF3a] ¤'} ?x>g :t\,65vTJ6 mbsx KLiC8/*1fW?Щ먏H~bD/ _?47xM,dY[ fDؖC{wV}vn hKΏr7>hqG$3V((<ߍry8^9~yXHDLvRsp*.o㯁'm÷m) yrv<ď|oJ]nREn /_cb"1  #r|]qQRRc8E*ٛohd,׭k){S)ewI8b\?3d c|AEŮ JL~ 0e26uOdm/&@JBr.ܙF<,Ypu5C!ޫM =՞,z%~>'7.աeRA9B܏_>PEzIsW oČa6{ڏ\ہz:3KS4z mުfSr\r/5priX]wk*>NI}@p8Dz Ŋ![XR8[f*b3u,ed3mI^tKʷxG@26*C/׮x"hM=al;}ZrI)vΓLVw-$Ifzp ǜmQѳ9Np =\_iZ1|2jq5&͘=أsi *H|pc|\^/.wI,z-.h~`UR֡~] kl)1Kb:w۠V"S}׻a4/~G޶ MGM*B8 _8.L3_KsثZu] 4 'V&=̃Jv8Uunw|4gV0~ y7Y7NZ ;ڲ[mIS[i7p~y9XM6UeS|OzEDuP!i Cp:/8ꊛ!#vS'n|{YAˢ{,{70(^oWfŀˀYcܽJБJ XSNPN_4a~,~tߟ:B/۱~g\ i ۂȭ36 Es ٓM~3&;:knFd vHQ-"@C҂S;]Oɍ&u\KoΉ<&D^˳HǘL9SJӁx˓jB<,MVC*rRgoVR#klYU3T-??D>]vk BbZopD&gNmo 2l8Ѽ:)n`K[7*B$(^R7zcLj,lU;e .3 |$[x4-ATFǼ3uemO_b,Z yU᨝#?cJFpkΒA)eVМJur6")/YUp/@yHYk8}2H~|.;($UZZ[dzEd#t l3RxbχNb,EL1mĐ/'\0wA&'GP嵩3<ܑLA`IY9834E1ľ[4ܞ-~x=$;l{B|gV4C>ĕ,ȩ퀳Fʵ>gAP qup\Ma`#?5mnɼFh{m9<̆yg09 UGYZeAx\HK;/{, D _$qP"i5x}DyEcF7!2I[RKF^2\MJ'pL9vJBLvv^-(Kpзb/#]%J< ی]^LV:(%[$H$X";kiyXX{/ey>0'N $#4cD3x{(Tu Q3a[K7,6v5v|Ρ>IeP-\*Wv~0 ᾙnD`yt0@\B櫟mF_}9>j􉨥ˋWeehu Jy>PA' z^[p#gVQY F}}-)Ս% b"Zw ˢFqN+W'wRwip>105u?XsL+u,&W 85𽖻:P`fuH1VBu՚Jbi5#-^""uÊUz$'#`@-l5p ;a,|Ș$?g%>iv|̨ 7Fve9a ڷ cyUPY=JnV C*x yP0#tYQB2+Mņps9-w)::ޙgdF ;g rAAҢU-!vV>#o/8cM5@[6 ao'^MT?r^A@I_Pm-߇_0P(}QAYlU"ʆ99lZ8lX+y'_v$E^;Po\9܄sr{@DX>eupRT 1'i_w۾n#:.7PQrCn Z &HRk{m>Jt_2L ܁c?C{QnnP_-4Ƶa Xs]H*N*FfIXgb6._X;>V"(s垥\S&ȶZ.Ɋ(' > >@.d c 簘l-5z2#Vݝob 1E?wCRۥ6:udT2|=;v 9GŅ2;Mu(.u/:x'CgNpc>se;j#(~Y~=iyҺiF!kTI%VR ciZoM]4D28ߣ zi),N'ň.LKKO.'(7 zAg؁ */`r#7,e@AXAC5iZ2rҡܡoݫ6R@j+*Jڷ_!Ꙣ=G,L:iO !lJOm^ӄIHfF'IN 5Ź+^tMM9n8 pQ!(aCn>z 9@pV}`6@z)ʹ))1u-W<~|j7CЧA1Y)ck. Ď(1Jy0VWG>^A8I`s줾BNnP6Y5j;+_P]bI)nd( _;SKp֌~pZ3j,YZSpH,Ť-Y`/(8җީW(-"_f/8㼘veCUgHWVK饓Vf~z;0%P+IƔNHR|FInۢ\\PQ<ٽB& _T|#/šl# X7fxG]W"V˃,U7@(ԅq 㔃Y@g;aϒa> ;ˣ; .W(CP=}4љ}8 Z M }̡@U)B`:M\I)A?0ysA E1MVд gUeA8n:q4d&4nnjzM-|,m* H76 .mi۔?nLH6l9GѬ݂iU .ue/LXxC$, 60PPK! AYggʊ zgWH.8&(`}ހ|hG,Y1-{ -^bt@1mԚQX]ql.j.GpQZ=&{y[P9\2eвr,oh|`jU_r"H K3ﾵԳX~p~"g֍08_CE=]@$WR IM$&\qMFȇm?2BBoJ6/UUiKsXd?Þ+֊]CgU|oct[xjޗKt̼}׫uHV`CXZwH_W>3|#m O5?;.PR"!!4fD(ń杦QSʼn)>k0/θ4P5e8W1ӥlGLZS|ћ;0lnb^]\]`*)O,=ExKX kXݫ҆YvRg}_)'kSLЮӾgl bDk}305@/7IQ;>>C\(8PoS,"Gf <#/@2(p$TGZ-;8  `jpF՝U`a{ +zrڱڣMĸmC7R=RĖј#Vp4;F8y懈$ sā+d|nB(Uxf~#?1I@s{-GZ16Hw:-вKNxߚ$V"ubZ{-fsYέ#M]Nh$beJg_sVN˕ګ:[`RѾ&@}OMcǺpaxt|bS/knU3q$W%$=.ֺ,]*&ijSL4KXot%E kb&&7fb)_yˌ¬?l!cwg?[|=[b<K Yl>/*xAw*/a}"LDb뵃*נ/`ԗ'9SEKQ.({UM $r;=5 Z:fWq+%0%|zU{-$w'o8Q0Qem?<&%Lm : e\I.ȌփąDk@Wtߧ6N<"|4 x0v]OߞUb UvOQaQ~u37^v>D,iz!$$aDzڀeX.kfZw(5yM3[;#@wzBbN37mG=R[0Z*'GFU_ /\{WTC;]IPK.ht!I²$7KBٹBF%ĀLR^on$^.2T>i¥Xzt5;_L$P%6VHV5Dy9I'\͸=k Di0wb]MҕlF>[1LÃq\֋uU2˙׬隐>-{٢ƾso2^/Afr=~RGe$qoֲ1ll ǻRZa1zqE*-hB[1#1:WݗeD "0mӑL &-·ڱ[ K]h O.d&QѼ =o߆[A^ EB4tUrZ{'Ş3_KRzRhwf/J!o pm0:T-!TvA"߻BGn~-mm9}c~]hO{awKXDZU9QD}d,Tt\YS_Z:eH4⡂+1ZjɽSޟ&1L|Zl`,-Iib/U2Hgp- fQ6p>v2TA69'v:y%S ~բ%kl0Ʊ8%HhTtՅ.Nq,瑝z؎;+g}3@MT"_Zo0C@~DL, 8eMsihf_oy<khKq $B ҩ\Y|wotJNL2CKNB7Lls`SxX`W{ RϷ/\F D]yJwOVbu7 v_G=Oݾi ;& d_''ćyr6وhAvX~ۆ4L ̓<|:O1'P8Jw*)|QǠ,!6@B#OY>^_ц5Pi<_ݬI`yI+8/"+F`epD0 #T!҈ZłB o=xkߖ<{EUK~iVOZL/Jh.~q=xtx [WA49ˆ$` o[E, [mC:Rg'<3)Zºx4D&,N7 ]v`.._ 6eO(4z BzƵr? %.$ c*KT4vlemј _D3.8,2 伶 I-nY&%%LD|-6~W"ףN/TP%2\|!Vo]_^μ !6v˗LgK'h/vDo+YX]ěfD aq8mqD`^M58Iq 9h8T'rWY!((h#ژ;5.?@C>• =AwFQ'~0:#7W5gL1 <0O4+zKzQJcoL@ʯQб.0͝f NzA&śX,oOk:!lSKq߸L[ng:0G?Pa%!ޜPײQQz)?,h !8&|`K r\V^&;J|1  &2gY1Sc06LBZ4t-}?|, ]3pn7ȗu^ үvU9c6^+?@dqji2EWHUY[hp}z8|tu/C fJ>d2x"lWk^3>4.Aus;gʅ&^t.i8N\~]#™w\wx/TPz҄Lי W m<^A 2*LqF`]F`,t*(Z\ ձ0y#iRX9&d\NYƘ&-c>4,9ws]rw(qhn[ 9\=DR ֍2kDq vAN'ItzC1r -lrO$K";C :X;#DPMI.!?p<4I꼓1O]@ErӢF$lO*QyXxP+w@# *)du%p7/͹S6WS>)jNEOzn+; ~\#2+^=wTΞj)%]wsC CXb$LWuE>ĽCoJ*!iu@gB}u W>ĐLF8bZĹ#ˆloKVj)CYsИdYytZШB;HXױsΓ`` np{"|s^6Psů2 WՂUY 6>-!uщkրEgE֥vJ27&mI&II0x =ycV\/ )6κ0hw+a|o,V ;(jyQI 戀~)]Rils}ܐmH q”?+`r5vbc *}B_ֈ-MzX3q>y$;X<>n1?Ua,$#Ycp<~XrSm U>و MU,("hiEɾNOZtkޚٸװLFeMt6<>0Μr׭1,üaDOw,h@7N\Ÿ[oKf[ +nrsQg ҆uN|ykZYH g8}ޤ %)]h +T,/ mpPWБviq3b6ʘN hC'|A^NlZ X N)N S =h}ͿF fqhKF n@1*]V" ]0#obN ,M_uDoOƀGJF6>GX<['E#^+ݫe<ذuMCU06`miI}aC[q2 NJgşXR@EUk)NECJT{5 ޭ%ֳi"Q/E{q|pTF:!(i T+ =w)TlfrwʆXRd>1W!f 5euŭUV8s&)n;e#%+YTP^e1\G ?V 03TpΠ~`qu *5Ca]3,)PmV6$,VP&o/BʹȫhJHIx!&:I?oΣD5,9?]v C@eG9__knpT]/5٭ Ee'k/D4 &+ɤĈSq?lCT &f, e8493dHY{bum7_Ų; ˘gY)Bd^4w/pצ k̉vYӿk<+|t[ ҌBT/P;*O@a_+"خoP?i*eHZ{ۃ68h^v5l#+WIꌞjm0᚟d؟9`,\j$.bEZ!^*ܺ-Ƿ5VԤw 45']VnʆpTS,*_.%S1ԁ(?z׆2fY  ԚװJJL$c:sbc 1e.W]x/m)!J{@uT55mLQ,eR?:Dy  %^Y uA_[" r]4r)+uVN4*9;#IV2!.zt׿84yR ,;o,Q$s/t-5v5k4aߖ. 8L[ hvܗ2Y݂'V]ҙ&`KȠ|/G0K@%W⌥lm!C8eTXZ%֡=c0B,:CU~2 +^36TcTf!` T̥l )t1B B1mqDuØ|2 O!a% Ԛ pVQ@\ \mA;}n/7_JqY~k8 hK@rdL u$FB]OR%$mtq߼ѦLs_ûyF]ϨT/՞c3Asg0Y _rC2l3<x|n#VoUw$˱Oη8 4ɼp+f g--B7IKjЏ)nJ~\WDkع?NfB @XjUw G337@;w`fFA7x`QMGk#A7, _6_@gV{+z WHڭk@yc,PPu]Ūعu=?,R5᫾srw}5fJɷkfȥ0v^r:[_S/_xNe 8Ş?햼$?HW+O- WRQ6xI!(@W\ a:Lwd`yx#]?btV= [ssh$`Ƽt "xU1{3-2Q*e[m*\q.U4p5?*/Se2lvv0GcX dᴕ%5X?bKFz@oN$?P&c1¦XFŸ-٩5Tv@Lҽ+ 60cpXC{!zzg)^V@`K?^8 d RA+2=x˭8/q7}Y]t5-EP>%QBmGóC|mR7ךhhs6^8b}؆_LcYͪ:5gJޙYB1%8xPz@gq?WeSCZ \T`ā - Q^7m;/R݌lM$~ x̄c}n賨''1ˤVan?L!n&r5Xha+w5nڮ@5ܣd@ 4O=G*#,c~~3 PadaWRB2riI PzʍIg-Æ(*)+;r[ȉ21^AM2?O]ޠnɽ wsMsPrBSY"c'ch~kB-T*;"_[Z[i[%5v˷[%K@vͯr|F[ؒakhStSz[fsܜ%KN~MRp{k+8R(YPRjZW..х"R4ޮ Fz 1 3Md#p҇Swv VN_B lG[P>c^W~'O 3uhD=ycy'qb<@n|RW$ ^Z#6 j^Fؑvuy6 ]$\hc~ҤQ9u5=\yr]tK]DCMˢ%Щya۵mg7@|)pANl@nO**;Aeo1ODb81߬45݊y^ YbʩJku{c.K *E%,~U4tB{걅Ai* /(4 r}yahr/6!̪x]<ƖH6&ŵٱAMlu*3PlKa"ۗ k>J9ʖF mpLܵͶ"fCkp1@PڨSa@ͬ?&CbZ7p_>hI8@{lbqLπ^^P?`*j,4voX }Ǒ-pZ!FjB7}r|]wG?|  tU :\)1Y}t R Aћb~GWߝNru1@5E2٤?Tk!LI㢀f^ t㑮4%2nTs XlU"Pp1i=W삇$Pnc -bcA$^9qɉ ^qe Z}TPYkm浧7}4I'֢(jϝ^AWf0\?=>3=YP|e^ZM@ZG o[VXMWgxJ:O"Rs +.rƂ :2G g'}}BQ<  '>sxf>!c@e5c6ժ{D=>^?GZUKc'[)+j}!{lXzC( }TZ+p٫ú_YTИP v<ۋMEWk%2#"S.~.ʖQFö$d)G|Fkv9R]d\X"A^g2p/&X8_kz` a!%nᇺs<"̡Cy~q|pa,[c&e*Y{^q* eʪc-H ڀ2%>5Ø@q4k̬?vG,y^K^?N Vi EXX tfU?؆K5}"hnMJ.1wf'1,TXE<,1":0q ?J<r|VDUZtBVξ 2)4LVMWgj aJl;ېV=ݻ"fW{vO΂Zoc$U(o &5Y 6v=0J4 f e- +o#w?j4nxY1^8t/݄&%_n6Hkvޤol=ӗӶ@؄"~=n~#a(wOjGv8+ _ Gƛxsӥ< }JnwY ߗ'* %f\_<ܔ L ip=F`FT6!;!ipۄ4hmuiG>ټ5yqPye^z$/;7[dGtߧUlAoB6pm~C Ci|w0΂}P,ױ38^d@ zoob:MK~Co}D7K߸H-@+p2ʪO}$?Y2@ l_((ORp RoPSPⒽFÚUܫ;r+/N g~<S2@"5~{dǿE|Kf X3͗P}BCz2Eeo p$(]l_'BҶs> g?PIw!ѿS(1+_Sŝå>%Y{Y!u-Ib4ߤ ^5)ue:@ @$smA:a=S?B_yReſl:w?I؅ʗ(.3y;w -jL%շZjhx_S#BWnq(U2R@K{aUXD:cgYۢ~6e!%,QqwӦ8y.Dd\DЂ ]!>^XŇYMjVF:L9HvQ;tlcYWUv)]?k|;h/3HwXY REBI4 U@+$ ηã*c@Ik;jaꥶHo8OS~7eHka:􆁳= %Uf~CqL34Bo@R DN8x d,'b8C&u}֏6`,5MN?Q = 0q$scw,aW TuM?)Pi.W-TFCM24))R-7=c' J, (1%^8S]'3O @Kf0l. ި6{gwqoZukJ֊ƣI4Tn(ﮯQaf 7_0<{h8lQ.Hich'NU{jx{E:qM~טgAq]^f1iUEDdF3IoVB3hb73FxO\^[!{Ia/hd!Dj?/#ߘVU:j778@*2>jBPv>WE1{n2w ;$0 =3u[Q<gzT^"!QYN$s #Ȉ#ksG[3,ʟEtcjiy.DDl;{\WnY҅ |E&6y!?uM L}碭%^8p4PQ=!!siqa$*̥GvQ >40:HQRX喀Y+> T.ង-o|6hgL)yunG)e|Ć^Gm4sL\ 8ާZ~1><ցJnbk%g<9Ѵ(+gzv](=4eIEî;*j,r'E5(A:oJtrjFZ$;db='1e}_?~AO.a83gz/7c)dГ6sP)$7B=x΁F;3YEo'x׆Y`|@qTxp58x>,Ebm V~WWb kYfYjcM\_P/>fr{΃ƽ b ´DxD7;WIBx?(.b[ F@7)NA&F6R5ZN3̪a% YhߺQٷ-=h[03LLW&y!O- bpa"J,Mf2.~.l=uD8Пb3rk}A=d= eS!ð,H_3NWLBe{nH~݈``ٗV 0`q">^+kQgnF[| >1jygFʪ:tBs/)_WVO@ +u6q&9DfP%C ߇PjMU$ >Gֶ ⣻"Y5d K$$¯nn[zܯrl ;2\=ˢ՝;828vr8>wOƮntc!w^yȴYY/pgo)P"`CޘHƛ}m0 f5?)!7<2 u Pxl@ Ƈ7ix. -a IKzc]kG~ Qe^XM;MA)qc 떁JZS) 7|Ԉf NZ163 NĪr}9`3&X-fKB !Tux\zXe0VS|̅ufm/\aR0 ۛM6&|#ZN_ Gq,Aef5_nW a13W(ҿ25B[CD02㨨T?sA MFZ;}kTp'IV+0;|fFTL$nN{?AɉZnaL(T9]ܺ_FIA o;7sdb߷:kxޘ$5F-l[~NcpJ#+̗'y[Eřëf8op?lI:542ɳo? *2dDfuf^zx v5\Nԯn z2 4gl='kĔᘶH \ ,KLj j~h9u'I,( u^;qF[ x*Zv;p .g-M"2Zt:Q+k3:eykO/ l%?c Rs9c&ҖZgW+ ay;dl8Ĭ3B$v/jd KғUZmdLM`ր^$~n(E4IN鬺 縁)!-aj3\S݊ YDąē z;NXNgn$\?^^:}_uy'ztxcY󼿈;)W# h[#ck7,U*Oζj -W}`4S΂$f GWpux5קRA_5 :=2U#t4%,r_|$TdfK%}B_ 5M˧OGģ;iH:j&%e: 1(U)d U2b$^Jk, I>%dQcC\_!IwePIou&[@8&zc=){F^ݾFhe8&F)%Yנ%%V}FdȄKm ` ~Βg zg%oT![AjBF&SCVXJށB~LkbKlר:C}uD6uFU#ԅM?^jQEv BdW&,}/ n(y%U'.HR|Π#_$ܹ:GLvyRAWo{*O2l&2aX%u72xiyLr(˻a"GXZňo93}b^(" @prbG)i⧬lD OZ🡖gkomwn cm^5ʔvLǜ8:e8fw$yjfbrdRq@ùBxY#_PjNf>r|uiNKӶC4sE}ۊz^ *5?`[ѳvY37Lr: v@.t$C sa;^@p@q0=-Q>ДZ Q`!z~EImvx7&"`E_^Z^א*& q^=IyG쐐ňWж:mMHvo£cE3bѸ幥nuByzoQ'9[] 5ZJ ,ƒ^hz^ͳb0eƭ1zyǼWu{#B.Yױh+C7TY5bw[eR>D;T0b[V|"o}0!W١7lS]ump릗_cRlp .RQƭ$)|Cn~ɼZwN|8kj HVC2 -Qdl$A~_Sc`3 _xpX;ӬKD;q ]30/n5eG%P؛b |#SrU2X2)^ˇb\3_>hAI(k%>69:;P2͡xn @`P ?EV gNjh3Qm/zadt4;|y3֬WfŌp#P *<5yb/>Pp"-NӜf?A'O$PwIb=FJ8Zq)TJDZM=9Xm&߉|G*23Yh&: ŸsAũŷ$ }&&;X~\Ua;ZjBN,t?^wP"?Nlj52?`g":^,ZSE X//Wр5uQ ZKGGk AcOoW®)EJ);sh ~[:}]Q%~AdGOwscgV%95/\(-9 )H>60EHN_3#XJZixNy>)0yK_-#/3p ÈB˝&~#i-;rN)L^Zo/e4O]r` S,]nŬXa܊' |E*L]ER4싙31-Ka|N*Up+{QbG`ӗ;"P#ʃOQgs8*Rxmm[`O:Z4Y$f%QD<կ ak3krf[|5<2QvOVӗVsӷ_ b(դ,R`ɎݷΟ9Z6)/H tQcEoq4.`1lj.ѩ.% ~;+:pb͈LJgEC9# iy֠~+qHG\Lz ƅVi )vWV5.Sei ۊ^{񶓳'14 F:yFlؖdW5?p%hw0:Hn8zk<=Nَ jfS;Np3kSrK]>vHNJP0 ~-ϩ(`v;bdRZKWo(zwHnIt`$%rt3_)v̞}MP vIubr"bŲ#x)xq8Բd|%l~#QgS"9AiuHbI{sEa50ж,\؁lщS}3kкV_XG VÇi\l;҆'|'D)>opnL=^nw%ncE33ʸثHdJncO֧Zn羭ML[MܽWJ33Y0OCяElWxqksN#=C5öasC{)aXjƽ!Sy:2`LC:Z`nH8Y΁ 6[S(^&aYx( d~I: s,b@4mnN]Y};Vp!"EԵaGX,l?ʲ$>0xޜ4DtB%3LNwOp7RΘaW{,fHR8c8`)eˠ~FN1c/tcϚ-/#b ]KWn8?EdJn KͩWdkA3T |}j@$Eù3j4'cL(2uFԣ'`ԜQq=s^[Sz <#e& IҌ$FKO ֑_.\? E| f)|*%ұP{̹~GnΔai_˫h_=)Y\{,tK܈tbT3ŲeRAEL]1k{FClOut$jGb)ж(4: 4I(+%Kl<@^p8{r]ko*?2gZ:OOnauO v=2/d[jHgYe_Ό"$T-mHaY)VOyfB;Ox(eE1\[s\{K>pXYoOy&j]Uׄscj%rUuHv|(;i&.Vg=PAR4 )Y []i:1% 8Ky銀_{; >j88ܽ~#U@xD|+*y[t!G*-BpbtDC\}6tR`bW0h5TފrREJQ־N-D3%sz?KN"gڤHӫQ椂^`{sArY޿(a4u \C9rܩD%ȚB{ v=ktv{! 5!<[. t3Flͫ}uYb~xlc(\C*bw m-1dvmlJ.{v8{ &H!rB8볺 6ח'QjwR4ʎaT7auHtm\Ϡlp_}4T|Pw܌+=c+l JC =-%a#s9 G؊\ v-Cj-@oޔh<:`puZlԋ|IJ:wnRĹ0**%^NGg_^Edd`rii>u ;zf-RrA/&8͙hy!2]̨ğhهNX^x'{){iW*+qW2xbbYUbEBq1E77z,jOtbOo*G4ӹZ Lkf\mnmeC0^ \u$؀4Dww_6c8%`U4ƅzwBP񣓾.$ا lU{iڶJ,kfɩŐO:WK) aK J&A]T!S| ԆX3Iw!?h5sg\!G r0-?+ 5C8~Wܡ{_ jIƈGm/$uPo 7ao&˱3'"~YߪY=NpRppDeh-] (q@z ,.ҮRݡ_ܸ}؍2P%~>p Y}gPX8j ڬC+DZ=NJ9/|TBw,C}s|OqyV4p{&OƋíV[8<)e 9wSЧQ7D5]f" [nVKvz6mBI{|m(_3bDg6.з*BUNDP;[ e8 E 1F)f8X Wo<ƺSH!Sx iRcY!pzOs4v EVnRT-\^D`SgrH|&ׯ E,Kc[>)g@=x5*[醫/vK$^nI;4/OHlzb}R֕ 2LJw S 5f-"2c[fJj=u-ix&B<炒J KIݎJBo$n`n6!,t,/.d`r<0lсy ;vi 'sNjd[:;/u/j>ݏa? >6RTlo7+w@pf<|0. Mϻְ@ې:".A< 5%"59zwFqgqM72޼O@&bS(V;.(nܐҠ|uI $^e ȭђeZxo]9t:J]na%9^jG_K!f IS*˞ $j M,V79"힌!_Hn;c]eW6v!vM/Fx!?dޞY ZBgs2Y'$dmL#;&PfuA(Q+C^˻Z"^0wnFr4p: MH6TRA=^2;lD5VwrӨtƶ'#Oa.0.Sa2a>xX VգQ!Ƞu:7دGoP^|d9PIU*FVG"µ*-E4m E/K%qΣ`NrS)%PbpDA(0g_F)Z]>(L<|*ŞL~\ ;ˑ-ŻJk4~"KѠҕ}+[Cb4;}KtLB0VUP+p8|aWkw܇3xb1s;.v W̥dGlJh+v1:#(F66.#%G,SKMxvcQ\}U]!]Dg0Hp1ĀS/]J챺c nm,w%P[UJc\)*fPߛUUWc]PWMjL7ɋInͅk{t600 (~g2fkMw}ق{_??35Q o'CA$\+zc>da5*R"_*ڷʬhGvkoQcKSkq]:JPާk( | ?1t3*t"ۀHts%,sJ_hl(p292."Eqzvێ9jJ.E/q%4iOC4]HsXѤdw,n{c fl(SS`<],`և-3bӠ}`* /nM 0&^([byQdFTHnπy؀HH$)h*M~i_~P1&iS:l$rR\́kYXxyՂ', 4yHH7ԇ.5w5(߰u$}tk_>CQ*E-FFkr$ҰU; 4Q?\FR!U+=j [ q{b"(Sw-6ǰVFArAfD] ⮵WU*ΗPbDqdD n'L,Ʌ(Y3m˩yU|/7o.6\o|`(Qi^ ew})l&n+(֞Bp*pSXf:Iwbm+i'A,̞6qڰGSDwv ɇΩ!/|޵.nfـ^niB@{\ٯ2?n/ڄ3U:+AHZm_>G';CІ! 2}N,-jĦT,AWsV(AvYi:[+{gS$ :g^͇R@Ng&@CP0j^~XBP_DάC {? i(7K;˹JpHTSL㕩5AK=0^pL џǶef8c? 6^wtvg ^;ܫ s,Gm/j1[eTp.f%%JrΣ,LnBb! nzV_|=GM{_W.5;l#[OzYW$^}pYr֪B(t$yGQL#/~fjJZ38e o\#h$!B7TnrmYN _<^ PrݱppRgLv:TT] hvk.-lxhӫXr㮌 qnN;nZ(j]aa#e`^4E|(b`X_Wٓuoz6X/: F'ڊ@pc@DTgH}Eeꅭ%Q)\"hىCͶFa&?MY8Qu '&o0#0)g[sZd^eUCc-`ܖc+}%[.y UE!]c9GOj`C+쁖E~(w%Y+_ 4u*b/)"$>3"Gx};s~75{904esYt0oq[WY[kDH<^8}iaK%XZnVYBG0wN٢3բB]@&r%e=w2ӌA}y$mm.VB t G2į1Jϱl? hՠOP Nu+^Ƭ?cғA/tDøOq SL Ydc""xe#cؠZT%CgJY.t~R.Zx0ᤌjo.ES~JWGbuTD^YGA]>YIa17J57YG8v%N kF(^WAgmX\M'Ŝ{2ӄP`vMP,׉`Jdrg_@eD+ҖWw3[^&DwȱRx 0rnۼ=K1r71 Q BB3Pi04iNο+vj{MY`)|C2iЏ犂GBC4aNYw{P_nXAb JΟt4=9'6I~97H4 }?Cz8O}ݗ})p g$f,B])JXXHG;'H#8u]H[֓57bS,:v.5qР0n+|ȯ$ot5/HDZ#)=K 1xB{3H5$9'&R}V~c2t`BN,8{V3}5>-C{H'=2rF~8!2A+\Yᐏf9HH*g8(Rv_լ `4Yܾ{3u*"ÝVjHX'PPƂXI8P& g LBZtQJ1\W)(Jm^ 0t*qNOՄiM/ Y[ĘF1_[[mQڗlG AM}D4AVٕ_L3-{K2+?\Z:In2'ܬ{3td#!SEYCi]eUxVDBvL("-|`pHPoH l+  [+c.WM:~JUcGRk'(t)6yB~;:xY5/v F" &EK"F0Fu[c5T'mܶC /)mgmQMFMSka-68;*5*yRE odC#g*#nVؐfU@υOf?`M4[O9WXIdq;,>`3%vJ 1~Rr-q^X8HDn&䃈eE(x]({uT imfAvj%8.*팜Ĭ,D༖9gx4 ^{zTKƅ'h$w.r Be [g8[sD BPy7ZOTT7$?Ѧtlȗ)xts0$79@mt N(:cC7+O垊:{e7e; V^ۢ(EjBJGG\ a`ӝY*:ߊq"z$K2 `:^[ʧ=ͪvVVg 0߾] 5DfXc5XCld*7?MH[%[d-LS]nv͚ RjveɰrFl=B*<L0 ",̘d3tq ƻ ; a%+럾~VbC;mQ v(hUޡT/ou :|?l7pxpח1 :JBI,?ļ>=#yR5h6p:_wO݃$}e3hqmձXtӌbIk˃KQ-PG`1)w-͛tFKڍ JJ0':GOغ #70=y[%|-חtvPѹފ䭱1g0/HF˵&wW_76G,gVӟd$&W|HDyջEn=$v&Uj U:B6JyE>tASV~5]2/bl)0V> OЏl#N6?>9t9A2>fNw:zOHF90W*:9ff]hVxG(}z 6 `{ͧ$Ka#qZ^ sF0#_R-d+$eGh|}εߠ2D 6Hg\DN;{ K!6X!zDI-bC(TCTFG[{0pN2d:Y+3\"kU $4o+b ZexPہp8*ޮRnM&gA iҡ;S[ZsG/'`ZQXHEʄM68{'ulűȯy~b:PLa .W j瑁n-Y _S9XRal2Byyf Ss-9NZ|}5yqMLzJ"JvZ%tV䟨%Pu^_eSU${[8nUP͹D-P.e *|aG~zblwm{mAPh@5`>1 0ѩ;%JQ47-&/<n᝗Dib3ģCT IБzkKx4:{m5BHxU8 χ@=]&ijMcrV}J2c(Ssp:< o`7KPwMJev8QrDNW#=kPK)FY?{0kޠHAU6`1~eYi_=U Jb$|qfSDdlJ!>PHSCr͘)KH4HF[?1L$;݇EοjJ00FR+ڙ>}J[|=Id͓M(Mn݆W|QCE\[#9%}jŤpWMJOzM34HD/]K+^8 g!qr|v*trY_ZΪ8JmmC9ZM`w@;r =5h?;liMfK5euc_lZGm#3#!`ONn${7@Ehs+22bZV뻰oldd_▐<Uj_$3FE G1$2&}NmQ ~q= Fv&GYp`=C:Oeʗt:ɾ#Bl}~AUȫ~< uиe4:'^'VS4ƞcIWԶJȇB+V<<| ZMgRir&yZ)j;K]]/1[)ڿ_ eBsd=AMFcG=P@*-Fonsȷ'|EbUT( [ 4V<*=¨GP듹Ɩ͒&^"n@H-]IFX. @PT\%XۮuNY'`ko _Ĉ_aR3O{ Gãsw炀ł$AmXuP'hjr7)q'kR%Cdb*r7 PƖ>ީ0iou1#5|lN@IJ?)(M3c^W(y d7'vU[/|wn^  AB[&*oNR SZL@QG]j?zICO˂kQ84K5^bXnԘuX0Q" S|/Er$)xw _Rp2GDd^0AzrY%1Z`zF\^B..G9O/E&d?G /g_}gV8ОV Ⱥ0'-E釼m3Nyr+~w$Y8.|{췄xӽ<裲o`]jz5HruVo7ҬWrE?)bx4'S8tr'?v+k}? ᷎< ;F%oU u=Xɗ | Y%uv}:v+x@C7Xk1v!E$Ȉ>@y 08mb+GéFT>0QZft -<*)[ⷨS汚YLc:xerzj64ά\sa98S VxI;W`!e".$ ԥ\,RVth_\88's66dq@Ҟ8P܀#jHr 3reV[o6LZƒPB (]/)/~Hl`Ý8LcR,jgnK{нhgx/zʃg5(Uul.8h褠9 ➪| $^ZׯFqźgXk Tr 3B|4] "sG\ѫ&B.+j»qߢ M% CT"Fuo~o,$C|e"_y@,uKR@B$abH:y{hUn9 2 8@ ã Gܹb]e"0y A2 y{jKI \(%^"UgM`oEƊ@Q6jsQ"o275W qr}X|%H3AQG- z~viеJ $J8GupFݐ[ j7b;hKsOEnf8v݊=rżO%u/ 4Ny!ZYg=k!$VPmʣn' m[ `.:%WEǭcbuz,*^!w~b,ەRko_;FI(R0Gax 8&hJ-9m捘6S&cg=qq#t%i FL֘(ԪϦA}\JW 6{ih67w1>; /; ~P$.3hʤN8ΐh xV]C6--Ҭ~}{!lD%9d"4sD-0'6Nl$ZR1Yt]SDB 9v,YF:*p b8KZUB  ]ٰ*Cz#)fۆ€)7zrbhq{EO < r0S!CbI{>Ũ\F^:vcȜ0aJk\i|,j{y E JP*hF{1a=~8x l*U"a󬄭2 $4M9D !Kxh秞=<*) {3+doz?oe[tC>hL0f;Cʀ| 2PRg(> /eտbne-<9S {__wjJ=Ft$v, %9:? #ꎹPg_Jp _Dz4DrR1C^؟sC>w%16P<(x3Tn)ˆLs?5}uj VDASu_BeeO]vhȘ-|ˍFI2rJhv#-bp(VoX7y4]/chV'ՈǍ/tSA*lWӕOahGԉTr/9? {/@_qCfAoP!0bJ#ϛEJ)9JNqN ܮ_NWO]?% A[+ii5,z`x[v[bB"i PM{9㓘'9n7`3&T `׌KN!0|t)607J9J`(s:=%FđzĚY_ON,h޲{VOKh箾NDiW |A[L#CS%jI_B5}t?bio=;ۇ @M(#ZZ6M0eo3؀ ĺo\`ϵ1z]ؤӗub2AOFW-z9dM`ls>ZΉ|XF}`8Cf=ʿN= M8B70ɹh(n-%Pԇ4<b p|ENg)7@d)vRΫ#>m-5cF r&xQseu+ldm5 uո~ W0R{}DEeˎAK_N3&.i56dd7#ݤE.(=]eSjh4hPOLtpf-2}4U` <TJEa4=Ն{U古PxcP.|tQ MY@8fe?/˖}v7؜O(v7cޯGn(`߇$dG}\sXXN&ejڡD tUrL(֤olyG3 ʽC|t5kPgH\XX$\|ShMMpVV Q[p2.2DŅ@L19ɍ[a|%P~mdSoylS"e /iCZQ=N{/B  ̧4d=J (QV쉌H@%(dt6,mzяؕKZEvH^ޠЍNjV ?sks`p=@ٱ,sQDYŨUMk˫?890GKZ{}Բ ra˄'Ch%H·hͪR"R/h;]}XZ7]KŦݏ"E66NFmtqMtGV3:g bvM )q1/6$gm "Flu\Qj]x~W0;pFQw#@Іۨtn_n=CdUQ.4X<-Q׋W>ѬḺJgK6hvͶR(G2-RBOF9~͍=ɿ oO6oٵWTlm8?&m'I}jR 4Ff&zC^y}\fc߮AxGzmSBw>j(=|k8ѺZװC;/zpafw6ʷ93[M7OOm|惘ykXPf2bu%B LXZ-l=0?` o*w;x ~Ιs P CxXzgO0MzNhs~77d{UR;*}>ޜLy Z=;ߜBMNז)kk>!,PD5\5I ԇE(Zbݢo-ww_`gUJ+"Uע/Ngڽ.\rrH31n\5U=,s.˿n Zn]cT[Xdt);\x/[ߪtŁviiUXB(їz;#6sˣ~ ɦ ֲ"jAP&\\ZjmlJ}ઓ )MUb@q5pQ};/%aA%^!*fl9OYZ{ #\/RbYQT{@zx1_nV9Ij)%zɽvՊ>S.8ʹvV'3 eji"f?ͥ${BB~߶#dYxj6WuΛP1> ~@e8ec5ۥ'5M0sc^z4 VռW2w%EO⮼C v*\y WErU~/EtA^Ptϛ*P5k`Z]4)__fXgQ%6QbUïb@ѥXGƈM. eQzkR: u&>?$g.b\(КQ(߽Nҙߥzd>o!tڛYbfzuH~%k̔CSƤ3k4 k<xՕ@T3o8ƱE5u8;͆j@]wxCJTX,_\X1Tfsi躷&Gxk'j*^~,9혦CzWS8PMpUi|VqH2a1?ߵ?iŠ܊/5M&ټtHUH6eIYXDi:^w{v⣿˩`R5THa OȐe+av˸P$N\J|R B u:{ @r|Xw5 5A\ Hy{tE)m O1#CפD7 "|?u Vj_f_>J8FL&2UQsYsI$oQcbPU_E+IQ \L]#H]s4hi$2"pZWQ/ Ǹ7Ivd> 1e2[UFZ\)[/XcK8Q~{]0[P00Z7ܸl&~X?s<4i2ܻyȸ)*-Gk4=j,% C\lvz.g_|BJ4eq92;1)Z*@qL;p0m]{E$QA^.ǥ1-]gUw{ 1[SBy"*R7yYl2s\ E΀AW^!@ 8u#)7H LxH :Q̔m\3,\b_Xn$ݛx6X8*`,mKh{w]k?.ޤ5yDPq+/Ti֤PMj',Hq7.rr gάE $cץحD>p*pG+|gDel7Cdf7CI;@60^"~jt ʖ6'g{-1ʉMխemk"zV.ATMqNQrVgBS tFRƱn>]ԜΉa/K2X!0+_fu[Dt%jXl5L-KYlh܊jƦ}6]viR nހ6 ҡV(qӉ0ո%f `śޓQ`hwzR"YLcq.0 SRx 1g_$O4TFxzdWF1g4cC=ţ>58AddU)')laީ%Try**p.N.7Xh>,Dˮ&\:.]P|f0`NQm~ e 5gJPR,RIT’]-ne`#QSuT}ۉ]Uc"{X>2ŕw]wS1Fn/]xub۝V""6@2N2C|st ͺVdTyPr69lz%dYwnNH?-HXBcZoƯ]>O0Ԉ/B% ?L6̞9#i>*%R`)}UsllQHv,FBLȔeVZw#yd-/,a08/q]yvIyN x[i3?7SNo=2sϡx㵦HEO1z[טc=wb_-pwnDE:Wt+1 n!&r$拨ǐ PG_ +Ԃ4\dߑV9{,Uz |,ٺW%&Ys[1HCM-Zߧ:ge`z1z9s`g|"3V}"gJ*lg2Mhۇ S+EKhPC$L&Z:2M joq/Ⱥ$a抩rj/Թ8he){Z~!醉 1:)8Ca6XTEA^FϔEj56n]~H{9CbZ>)X8uZ \wǴXA 9ss z#CF1});4emE':<\jOIIB z/m)\R4`k(oD__;J%>|k VW) [T$jy*ˉ4H|sӤ.J8)}Oa-$u$ h)/W Py_ˈSLܱC בEhYB77!R$(MRJF s[ZH3^Uf׈N' `B!=C0 KPO$hEh H0 8N,'6V =Hu>cC1 =~|:tgaTi_mZ 9a kyF!A<(sp= TPʲ{XrN8l[Ʊ53n,&/}~ L24»$@oY X>-(yEN԰1&ϱPѭl^ݒe: aItB!Z_ q@oNgɪIP" 4q*驇m\[ 3M hσ{&h[x 6_sspw.ʜ7zgzuZ l) SuT^>[д>C%zi!7I͛sElwОJX*UTȨnl⫀p,q/GZ\b$ZԼ/T69:-yj1F(7U˹ ۶$Cd8~X<6݌:mIOIsIގI :֢C0KI# D&hɉoRѝf N՘,|%'p'f|FM-3ȤbN^b-/ǠT_u(Wȵt(LeizS vH-ͭm NQ3p3lut}􃔉-#^UJ00AUi iLڟX,]Fj p|+dln&& Jv]/Ǯݨ1ZZ/j `.W6rrsf}нQH\[ğ`QsR>R8쩐?SP1̆2uH@&h8# ƣ>oΉe q*Von`BHeHAã̈́4y8ENu8]rEU~@㸎S܄fȹEт ;ɒey/N[}ɵ^&?=}^|^o-?jVh0Ox,~Lb`??AG,` A#ƏzOޕNnBP*,;[5lb =M0zh ’.ꙟo{D2\n2A; \ {jɳ7S_Bjt##*HONyvCՁani:\ )בFQn%":H~/' 6p497\k-nv7"nڿ@IƚMNU?xM❕ I92ks;< .ie=|%8`ƕ9ANXgIf  fg"P8A{n$#![u\ $󄄾=1 =zR=rpN|! oI 1f+˧(sS6XH̪94R ,~3Qa ?NZG,>5{<m;ڗ!׼ 4 ̴31cQTN΢i|UMtv+uii!*q9iu[6Dy !h#FXC;RϻPf„9=!"~TA8;}__Lf{)^J@11rn8j>Þ*4O9˚Vb,,¥oadXTϾ5zm$n;I/N[TӀCղnJZ;uDa]Iyf7A3o/Vo#»țMcBmb_d.$yGIRrэ`p+/?k˔eiǑx'V)<ȶH5:eq\>5w?'H0#RUM  c7<*m`|$AwjKVn4XPUi|a^OIQF945,qڬYqf@ qh0i;AaM.eD bW~}@&Gz_O`4j@]ļ2`:ibbak [Le;8cu. : ]Z>'ר_Y3Ig+s {& cz`eMǶlxI 5OGmg{bv١Y`:ӘmA;YDט"W^uXK)R^8'XHaѡG/2t CDs/kZ \srk1&kXrRy%+(n6<֩ɩibuHsj@N> nû!.ඕկ)$̥ #%î[SX8;?5ۙrX'Ea$)rNݱŊ ;@'ň`,v +zyȈp㲪;H5q0mux zWHRl3Jѵ8h "bs_3,JuDذ2f[[]<h"2ߔ]AH f5a  O5) 3$m)]%r^<:4qߋž<6 kJ=2u"H9[NJ:#pTnp00C`n*aCaLT4o5 3j hB۰3[ZaWĨgXXDS.@ի**\Nj^PYŋD4|cBU&/kCXW٪?6<[_}}OQA(?>l<|hՀ+2Č#,&+oB$r_]Zadu/2<ʓ:Ho[~6{yAxߴGz|~<#ڀS}37 BfLvqMXZ H1moMG;]oag\͏ܗq5q-$Ne*~~SHJ@ҾqndU'|#< cR`I2Y)Ҟ {C(q&E!ȫk·)O8WA;,s!Xx3Ix:AΕ{Ԃ7J7}Α-1'+\ -ebol+[Y1qT!x~Ǒ+f!l 6HmjX!G#QaM_"E\iBBɉ'{bⓑ3JZ~Tͤ@pE2hug/!ink'mˍn]RdgiMi3X}s7o}dCbuѮE7 2@\l[eWKc _'sW8yr%y@{[]?usy2d4hosqwn#2e24:7+ic" >FzXpA .? h%rz_N@N~#qÝ ۋ&>1:c?a*jfQګ>k"U7Zƚ-f))(cL‰u7]Xg˧ .Ǘf 9ĺ=v}=̝jܕc}2! M3UNmPUw83/*2ͼ,dSW\j|fxbLj#o|f DKsSq#2܁Wy&'eLiPr YZ^[ >P_"kfJe T(S49#;TLf$ /Anޱ$5K 1LU-QozYHRz ݠ+]0â*Bpu(ji~TaZ?[TG0OLr]~@ՁЃRfM‚[/i `ޱ\J:.'>hsJf 'B_[N_pH(TiR;ѿVzē@ l)юN(3pZ'tqE=jMAU{$K>B _++;g%=;ە9SdKm5X$({ cMx:ǫ-muN?./Srb۞d6X`rO' /[Q<Mz:Y6AJ9EX0h+PjZRDג(ggR- ec3x f Щu]ΈYI?S[rt@Ii.:a~ˆ(ؠ}HXEFv̤dy_?وý,91Yc=֑.T v|&; #5SPо¥ԆY, zyhLjk(ގF}!CrI;A+ L_u%%\mM }5Id)M)DclkffC)dd#3U4Hme_EXrDЗfʞ,!k2{z >U$8FbHirgc=f&[?u]? hM6} V п_lA$N]C[ ӰLL+;7Xr!NZrB˒ !EVג!٢Xc=5.dPq$͗0#KEƦF0B}CXyY=hlC˼5A, dW{&ow ;gXSxft..曪 H 4pdQ^ʹ+&BNYaÅB0/?Cr̖9ʑAŵ:޻Rel<1p5a8ѽqhEc΂d%DJu-%a0 ld)cHo4@I2sB;?z?}ȗ8P%(B2ʾOevBC& mDcʀ~O{oWV^f,qXyt\R*ÅSp^s]7nئ yp> XUP0[}0yzv'[7Oio,HuLHwܖ~{S 4n"${T$DoY,0t= pșښc$ [ͳ޷ [ؾ( Dحf(ioل^8<&ckg5I^TA+_ |6^שXZPd\inOB1@Bb? gX `jkkփç8;g;x1ev'C*b &KM^Yτr3P-=JsLiG5VJM"C4˹lL6zŽt!9 ]/JN1btE%;p'@:5 0IebQԬd.FlAT&Nڷ??rJ?JZp\VG2e|a0Z w{uO훈Ŕ f&y¹ 0RG<]> R̦%(9FH5L;WʈHa*4\d6s|e7.duxv= )U!Y =̰dN^#.s~{֬?RsPbq5 :gu íGwhNכfP4''(,3.W0*J`6t:(`!.t%_Gwz_ --F skW&Į>_ |Ny`fLl)_ok`%>Dk.7;fn<7)棋Rۚ3(Amz"'gVe°5r;yw7-n~7(-(s$>b4~M'˧f0ܨ6/x6H=՘oK&-.$Ÿ%iZAVUjZdүK?LOzC1'+f5=[CJMIHsF~J+:O%@5pf}~UɧArST`0v"Z\砙` (]&zƀAlfgdbK 䕭!y&PtcLԚ8mMփ&fō6YV _)3hM#d h Yڹϫ'DɄyh)NQoѯkCxkmΘjiaQ)aAsX̴9E Re.瓛j3xVk-p4w\UdieY&x).kR1q Y!nN#\y<"0'1qp>-2oL.:nsN9{"mj 5<䳌QC<_ޡC x2 rmM*(=q}E !׸WjϋQ$<^D,9v2>f݀ z_qPJhh{B׃r1f \<"*IH rsL3Yy^E2 _9c޿<,{ 5;l-3ĪeMEcWɰ80O}Sm2 t"wAHX5M_[.Uh:[d J9/AcLi{f U?`91֋iNe:VlO=DLWr(H8?ϖ\࠾ճnDT2o?3MTKa_AMIpƐMmrIt?ZGuO/RgiQ?nP@dQclF5&2<Ʀ"Y?$ƊOq`* EI#iZ*8+SHG:H{XaQ`YBW!Q.ް;+Yd %%W*$PA3''ќEsT4SC`; A8<`\ ܻ׳+h5UpWY'[wbӍJ89L3D2wxkhPӕ_I::,Y̟U\J2H[dI6&.W%f~{0jj%i+c(MUc[D6!ߜC!5؂E"K)S摤<޺uW~#?"Lֵ琽 W]Dw\8myjǵI@z;qw$d{>yT`, }^%;q aKEAK_Fz:`&0A5moi >Z[C@{0]LvL۷!xގ!g#1R̥*&!8:s+nB[$j.{. )yr$cr;zHt.Yh1TZ qF$|B ǼJh[fKbY&dJe:Ή{-4.|H8cM S"'oYrvҁ(U{H""pl$gSqf(N 1K x(5}tU>&%ȩI o?e,~w9.Ożj֌ZێDDsj'kڐ&t N7 VN#\ClK[ט5\ dzh#mRkrM@.{Ƨ/0+|(^Q.K wׂ[ Y #*;DirAYJi5ϙ8 Scq$0𼭒'Ĕ( !dp?l-aq"+;7i${9JkGYvS<(}kۈ BT?IH /|IJmVKtTV赙^݁Ϋl6o2xq?҉9`n l*lU`t+vwNejnla7֑3ģ7xb0(u/XsOQըbi-Lݛrќd2PWx:XƬ<X2 ,^ b 6|}ԫhևPU %уp[YUO0sEƆO4C92 ʂ^G~η;<3OJt@/S;" ?yߦ4u:.dU),2CPN"".5)r>0(Mi& gGغTq S{ȓ0x]gGK)ri%_|vDJKY'V kMLTjՔ=moo=p>B8|.nKͼ:|dY[;N5{#Ԉfxl~b%n۷0`Cء20Z3|S1"ix۬eZRa@rΆ[!cbtpa"" lŏ֘i|{Vqժ#v(2R[,yXEJdU hy9J;&?fJH-(ׄkaJ囌_$Y 4[h"e=:4;ݠSKaA[ "TRy##.smK ;4.cF6vJLt*`|LA0gi)DdRI?9'>5кEo_تo!wDC߆u1X02۫iclv[%K!h_tfUxkqrgcwC~Rm5X9(AXo<6nFMtbw0]Wxr_6-)1)х_CMbkhOƻ؉=D'Vu5ڇ@߭jAmt' J\xܝEacMs 5\A? S!> yzV+Y-|$7^ۨWGXKLښ4Kwlb8:EY+ێ\i*Wj0镳=y?pEgŰ (d$ fz1]CX7 JS;4/HE  $#B:QҐx}(6v@|yH&"8f`=Os%*GnphyCȷ2&*yig0;m3F&&M+P#T=ܴmF.2o JQ| C6I񕝊q K;vJN y[iV5Y/߾I6ա5RƸy5W;v e~QN5XͽT ƷBֽ=BeXKPf؋WZyMiM3!eψ{h7FX-6Cژ[JprFFFr?lW88;]LUZ; TstFL%:Zwq,0m/kcQ:^om:mV}Zt[n7fxQܓ2PP~#= 7~ =[}:pq:VrbB[`CQE%t߸ enHg @&Ġ7`:kœDZ -9cpQ{IuŠ[/$99"%IpT {Ti`UY/r(ٱ=H1e8>צr?Ft^PkPgMѕsLG6WlՇ =U3A`}-ÚԬM `yt w\Lb3I+0 pJϥy'Y27wbElɾޏ3TG٨pUR'N {Ed1|+55S9YWt1@5 ֏x3 *4tϔ~Prd=y0rN)Ҥ ᕉ%[UX2|Fɍ)q"f7R~ݪ6v;WQTSh`TU"ǤҷiG>1-41W|;/A]ܸJGv_}n'.L!8N3܂SFcQBJht}٘Jh*.oO(9jN66xv9a/}HuEr}TX,lYx6CkWt0A`Ki M!Tu sS޶`#%/TL}Ȅ1Ԣ6Xeѳ}9m GuVy5̆2GJ´]\+)"ߟ=tfVIÛs*8&$8Q27+/ 4 74hX:ne,}Q/t(V6mv4kĆBfLe@/ve鯢;lM Bo }(2%^LaBb5n37O {9m6eO#h@dE؈Ɨr:4 5@hg%rSW#.ĤҀDQ@@jsPbf^E-)}~IxfdwXJ j6X)d{1(#TB$mANfՌ[eڑ# `A쿃GpQ]`(qi"ւ0n\5l@iNp0}8[m#ynЪ] LVC5z&#bk ZnaԠ"?2nQhCʍ p)剩cN9NB_$yH>C>R"\'~0Oґ%ǰn+Q"#o}@:Q)Euu4ʋy!ZjukX0/.XV,v0+CR$`t*82yz{wlI?ChqV' A$װ|G‚6׿13,ok$6#  ;~*vkSrJIdK#ڊk:0"Eړ(9@&HB+5@uf_@E&&aȂP/3yBda^AZHov ӕ[FЁ=w2KswZpGhK>ewp}%WHl9cs{ .DF+E&4Ҽʝ7,@wO0[obŊq1Y8]A A#B0 Ϻ̪yN}]cK7Z [Tg*>7ixDnJ/;2H[gyJ {ꅔ&j̗eՌKY){-ž<\ߩp*N>6-hValǛGjkpÝ TmkpcM⛪bTp[[h}RA"sa'm >y ߂|4P<И5js-njѡ@fp1DriP=;pzx$&`S.- Й2]s;5؉7 $L4F_ctj{ ~mjLs4y=ZLRBD)@[ z0+khJ[ȷGzS]3䃲?G}Y8Q uhRP![.Z`#M>Tw.;{z;SJ&9) ?RDz( Y AAUE`8s-ɼN2Wܩ+yI8$ ,LG ^}Q<܌ ^hcU[~7\1(eX/Lҵ$ L1$ܴFjХXz9%E9XZmm?v#DEgC{yB+ B S 49YsW?|[S5%bܴA5ȪC$@_)VnSȀ1dEht-Frʌ,Ղuo@1$v#tCSM^­f9sba5,5~00%͜9^ Yݠ[\\4uO cLN_K0Sd[ B)"4ߐ!oR=kĂ^n4Qy@K8xхϞ.3hEd(l?;?-ef-DeASob b}΋27M͟Ʊ*"Ku0/yaw7c9vKz\A[̦DU1/CF{aS2U:~o(% wΥv$顽lGWfb̦zl$e[i@i/DweK/L-xn3,Yt?cCca~g9pL?2d(b3!TM ZLq牊SB1]za*+VV60(-5޲jUv-E3˷Poq&G k^JQjQ+Ӿ -x7ݤ`?{ups2-UnӖ:V1Bb؜m1* FJz5TœaZU|Cy3H*jQvnWuqbi4:V%mv 4HVuCHAC/ w9'vcbRE$ N.&Y)5bEAB.D}缆"t%f򢭧ag.Q.A}v^0ʊH7n6UecCnD=3ֿF/.3\lN^&r0n2* b`^2(kvLvUT|.&C'0p~1`è,Z R^WG7)@x*KD($¨Q}!ݦ8R/,6w?]OF3^o 'H^gݝwXN2~(5[`yhKzEE1]sQ"rjf+*%$oR?PM7ec*B|a}1<]U$П^ <]iqHh-ι.xPN jGBqDx7'O&,5 k8QT-{Й"jX4>XќWJ0W"{SgF*W=sg͌Zs&G '?j$A^w9םΒ T"2 MwF **l'ƨii^LǹoѮsLJ ڍ·)!~Mzv (c,-%tg;Lݟ\?v8> hV\%d9rJ/rp<"{R /;+*Z^uy5>rELW Dn7${3Ekgʛ`V+yB~uB) 8cm$;`VSIWtט33ر K1LaowWFU })UE#0OVz! <RrhpgjƀQpω92&Q̓i\lw$JlMT~:8&-?bD5;.&)/Po86am.argFι1=̓P,>5jHu080v8fUl(q*Oط!FP_}-%L~#57Ve1hȉ͖ ~!r\X#a]04o#y;Ƌmw,>'5K7aU/eC,; 1Ub/^6k+b1Gva3 e JذV.L񤽲<<`ivl 8oK-&f+Occ̕PN^iE:ޤN~_luŠૂ4Ӥ=4j(UZ[Q*{|HT6pQ ` 2@~Gc+7D=!J ,wV(M՞7BR E}b  =>&0E=ۯ e"x <5 w{h*9FpuZf Wٺhxѫ"ˉK5&I\B <~ dI8-j[,Ặt{=L< )-s0h λJFےJi8W!+ 9CBDE0I撌ehA {/Y'Nn$cdKH+57 fȃ5@:N] z9딎WjGkB  U5n;[7RŚt=Y|>إ؋g3ذБCI|VÍۣc=\4N h@+?"*|I?Q0u ^_cjEmn3?Ȗ7 H>2p(ҫGk9ޟN =u}r@ij&fyH |bS蔩6M2 lf=F~OES+k!H6=v}3#[63@ٳIc=_f eRCW,HtcC^`o!*l(A?M&W{3#SdQ#l5D} T(<0(xda%"Nc",4E-۬,lIĎ.>H$zW%DXJWpPi{2DjBHZ.~GT.7(cM5ypw*.I6*5\4z|/SKP?4G;fG\W7"RN Pm"Ooi,dZOF$?ؖpFX&o5%K}c4+s&`o*{7L)FŐ':-szx_K(ͅ>SQ֛ZFhC'jL/!NdUAN%s<]8RjWwf[H7!`7CPcdзH#W RC9Gx}VB߯Xj*)ٵW!d+)mŧ9w)o`X_% F9DȝϋBqX/j VnJTγpmKsp19-p: k7kT,"]/XqmzG*$$K\kBX݇*:$5EG}TT*H4By ITy+M>5&"T+ yJIV 9&]P;yt ԩfϮh UeuaguChVlyUn'j:<Cђ,5ޘ  h|iwv@11D!oB ('G/Gv&FPZzآJ[]x>z'#5IM3"d%#/Wpe^g0xNa٧J.OZ%gvޏ+,֬`=zrf Uv%wMx.uXzM a,i`lv;Hsf(^MG(]vksA3}VrV DM$`p37"fm^2JQ0.0bBVn]P8G{s}3zcgo_tI!E> pkcց -V^z1_"o~ӱEf+9vq΅hGQㅶSƍtJY[=&)Yf]vU?we.o6rSiӎKk%vy[c. xel: +Z[\/nKV;YÔqwR*tS|hx5h~Hږ! Y.Ea$-%|B;*ܗ:E 'N% 7bR`ڼkwu\ G^1egf̙-H =o^2)$Kʏy[A+)8.w2ռ Uyׄ;ɻMn\եB>L< rL#q$7{2V4PLfᬔm ׾֓T{ڃD(d+n%s_Lֹ?9}54ô}<|^@A#"aB?m!ؔdOޱd=7 A ވw)ɠxYnћ)jvy؀^.0=*j[(tyj.0H5+XcRRTE;#% ko63;QK*]?^P4\5n-#=|s5V5yrsƇA&ixJZ5z*EFib-f+F-gC ON,.u,Ϯ1 O3ddNմN1j~]MU⌆7:֡HCg()C#tc;!n.70y/>1e)W]MGi o--VqpYC $+" mWZQ儤s\Q"XC[5:;0\dt򛀊7ʽKV{;~!%]-3'_m򵆤Tm7 $ Lg[D,yhr7@L N hG|8DK;7{O`9Am.]?F-pkO Z״JE5aɇQϐ{i<P]ϰ ojn>8wu'~}U$8^cGorPK 418pz.K%g;i\rB!";+iPUQڱ>֦xU^@hTA:7b:hP_"D;5%N3oͲbCjMv25)ǜ^ Rn<}_Y&Cj:ҐY\;SGT{1va#d-:Q"`&Qœ0kR,{Et2Vg[:HvQpw.''Y"O d)@%@2)`/zhю/a_%7'_ F=ӱIxI=l \oQ'9p dُ_S^5*(9Bj 9#+CAĴIX0iaq~P@YYofiolx"kqvr!uO"u4}^瑎N'4$%.IBGNŜ0lh..]ޛ]M$.IQg7N>61;4s98{_i0/Cz(~?zcX+Yhn#).St nlj$kFli(U_[NW֨7_Yªcݍ6]Th /iN r5r5LxE<6n%ﵶݻSma8#FRD<; ~J( 21"uvCϸ.4v"W&18Ou>>Eˍ2daMl0fej"2gWPm4r3wѲ. y(RV:/B xD=PY[ ~AV7eDqLl/ewjUWL 2?hև%Ururt%W{NeSمd;!:]\mŢ .'BmVEMiAU05I0p u8:{[(T9TtxlТ8yyY2O!'A4(o_Jə.ya}OKlz]|bRskRis9#2 Cuw MP_mJI*h FF$p&G%~VD=tu|1/JvĴnBr>Yu@&#g{ԥM%>0 (REm"du)UHqM.;z"d0K2& ld4ɪ&':~&xt1ʞ}!PD\AB|V'?xUF` 8!L!P(LF, |&,^ŧcUyM+IZYI?GPKaJHC w;~ 7R/,eH{ÎR^p6ѫx93w?oEgkΟen}ʧq̯!A7GJͷ0(eݘ>q;} ILlcDck3q3-}7ع-Zvm'z 94ƀ'\ӷ^ˋzekux5:8N K[IdpkF'=$6ZYZ( Ic*cn*bXH>ΡWdw^|ۺT9GEˣ8*|TvʚUVFMh)wnPµKi%<3HH(=Kv;UQQLaa) -`JT"J |&Dyq`H,"v$eEnj+rHYS6auL{t/ p>> zqPahu^3|+֒/S At)PwJW9 9+*M%Rt'!$ Ў*jd$m"OާÃO ߝ Y,Y|ty@/9"'*iֱ uAF ȚiLljp2?g*#|@'[FQZ8k9!7kWHCz\ ]~/[鶍gn|}9ˊYog 8TEbQZ]1 &x媇wz-ZL82)%?C5dQZ}Io7#90Fr7y*eI%Nb'rfNۇ݁/p{.%' +@o:J&Id`ߝT}aHDو t&յ41um ?F*ȍt$uSFtyg+0_\kE_o+e@jf`{L ӕ:XᤫvZ@,7 @ijS0$TJ'uE'Mց(<r,!ފd [9[ ieXȉM>a|"sbyc&p%`;gg߶[1~7W'`)/Ө u*&_f&)&C7* qlF,  %k>)r9簚6./F-pz޶@t#KI3-:LSQbZq@sYy7Ǩx޴u:ZWR5"JE7pq.t|b*Ç 8&TCM1I9hcoI.I$b|/KX#ߛ+N)U5NfH)a6uNyjk=y2:8n8Ξ/hp09Kp񡥗L^`S8ʹvΟdncKؿ\9 {SХu+Tfi d*2'_Gsp!CnmBMPvl@]L>b]QΥ0u oKjS"(;tEG]@&7YQa03j>jHcݡ%jw)05R⟴ogܿ< Ӫw}@򐗢J}{FBa&Pŏ8^ #'Ժa۩`2MrU;~6e6עF&1͑C@! rAGtu ^@~a:nz>?(TMO/d~sO]jAAE+:{!q҂w`?}n tpޡtr@a~'Ghtޥ`쑚c>s!:COz^OR(@VuX#1Tm:D0/N:hd^by0 ,>>i.AXSN MFBBH#H\LACUxu _4 Wyw~Ѓ[tMoZ>aQOژcj}j~ ZGh<,g.)?r4O9,f&H`tW/&[%Z[+M`M QPg}'1$]GZRZ;TH4^YEaT_uuC ?MSs:K0CePډoj#LZ`8v񇐠un/dg:Z=ql7zFh; 76um?zK Vp|C׵҃M[ek5L2XUtn`ؓb!ף=~ SF-Զ°_7"H><> LMfb䋼K=Ƙ Pk{[,;ruY:ǚ iTcYS{qFIY\m̶0Swbm )?h?}BHD}oMZxl`<{G!e#Dtei|s7Or645f+*M)1 Bi<Bh~.opN"$A6^ H8_דMz)nԗ;G/}Ha V/B$Ysϊ;9 qXZ09ki֨gIy` ,;B5)^`2~[H,# A) #U1GiHH\6'W!s?1@<*BBG7;ô km:p@3G,(и8,I0<:: 5-GC؄ P5'3 JTO^xdEX)9{eH =ycݽ>!R".de!{Z`\Vg$m.P`w3A1SCX*r?"-IY==pK;d(Spz& o.F OL|?QIrhEH;d/mct6/kE #OcCjL*vA]wC l.v܂so5jcrN'\[BG,uE;˜I."v@s#ct?95 ǏIwu˅Zpz6j(\պ98@j9鯹"SggSlAKfp>\}̹Yڶ9u\~vb ϠliOP 5o|GTyfzp=|@N}aJy+8hqF+C Ƶ0FW P@Ra狧ԂKA1nSK>`ݮgr$',FO>3a t}Wq1޸~oy<MY[6M9=-H=ܖTo|9 E$m\D6s^1Nl,ܗhl|y`~,4J[O1pW`)d[W-G-\ {#(lR6'[1 dd8nkǦNuRMuH!͡1[E=w]SjȍG#gQ~l%׼Ȥyj}WñᴮS߭& |/B?FCg ԰y I4"0SUKNoP,(| oorK<ϐv$Q(e%~2 7${d'd7*Bc H5rm8֢(=VR\tǩO=[Ԗ-Mbur?7\OD3~W6 ˬ.vN6dJ-m xe˪eѵ t!UM04(G`vLMO= ՇS['ి᧷F?,'\{buYJNkvNvT=达f(##Z*0 QlbemxS:9Մ͠ ܉R>(woI(%@uk̔ >@[Y =ѕε7&L3Yi*uQFBe[f 0?LO]F H+Cyɢ&CJs[)`/14c,s͒òl+DdtJ=^}P_=K-V/A$m~8)[I( R-*\Ӳ!J"`az"ybyHtI͋I/c1IWɶBL|FWG钃'b|:3"X0p$D2p.v3e[-]BQ2CHmȋ_y=ZKB =-0 &zd(EcEZ+CHC#{؛5|c!NgkpTE j} 4"!xFFF݄,@PW+#2iȲhW6Z;7PeAqE2ʓ3:hm ڿprsiNo$a9zjD uD/4ܳv[dPj}>wN8} TS$g Xp2F9^LSr^ҲP|:cmMQ|Fw`lGuۖPɒ($!H~+3oc}}UwidfWЙWZ:/s%خIVyjк 0HlhV::mQCO`N?x$VbLP e9,LW@~ΫT}y^ӑ[͜#I#3R뤗fVʎ7%v{k0mh-gkffKd UB2_GYR5K)yhgy@T#%l>O)8TGOvR0sUdaEY xzr6Ҷ&I̛6^)2>5 b+{O T9WaG=p{tgIْ{Si韁&*D^p/Uᗴ' hJy͵$N9S]\ ڭ+t/,#=l [67 `+'IdQ'}hM46[tj=,;{^mh'EbOEW&ǵ(eiWE+{5n;]zn+Q>#ljk|6Cy( b>ʪ/ ϨRm`}\ψvǤW9عR~޽",Z) 23\}N7Py4+_xH?h?9ivt~Bn` 8u4,Bo =UG/B0іgY< %g\:xWW4)ei-Vr -D}F[ίuzcS}Zq,xц 0jl xt;Kho ŇÂxNf]M.yE(fVXV3d5p&?!Nvڅ,n- Ok?hemo#kY%V\Ce6E-Yǧؒ4 j+)KGXU< -3FxPkkڲɏs# O{#p|QoLM_DN%¦ *iuhB`hkReuT6aRT$ߙ>ײ8@b:J+^Bcu+m z P$Kg> .Ƨ?=2pq ˆL-~iY뵴h;K4ejJrW)fҸXzb!aw]9/VG=D=l*Œ:hIFńR >r｀(@GngLh=bz{4a}~Mn(=^cFmH趨 V4vx{+ @Aq[i o8HJ[f3owǻoG*?h]FLtOz;;ӌ `!J)ՁBSq:A+zR|vH 9jz䩓Nm~{SUJO|E̴u͛RH/uHmӭgC+ˇ?{ hQzjaLj%M\y?"98 [S\/R/J+gSn{_7{4S`Y?Z0 QM;sXh-U/wş뿔}3-zfd.'I9w,Ǯ]B9<ܼefM[;bD%ˡ+RJ7$#tgnmFͪ %g~\X90}ﺌmֽg#A h(槇O"a0x<@(`w%iid[P햬S, &UYN{̔^LG:z0IRںW JϼDL~! . *eCxb5㎮:p?gʓZ<#ѳ eMNc1R&4DDT3JU6):8s8/?Rn9 }+Mh4 {<ɟⳜHs،˱x$gUٳLp5mlۥd`;:NMgZ<48/;_LHdR.05bͩ\5ǭ|t_>FslIGnj7HuƯ&2Y@/Zp#yzu\ZHX⬛"j5crW~)Z0ZW#]EzbRD];\sRŹ3 M--S.1d 2԰%aá-0Li%)k5dS7g`P` 5Bl2݇bM sJi- qhIHS.|dOXa*=7.΃]L! YxK7OvOJ"^tP`}E`/.1Ktl37x#@BmsJSΔq OD,MofaVֵeELAwϺZ$ʖ)NUzL&4@f^6Tsm_cq73 wrK n9h$s;bX6 כB1ǟc;T!A=afv|oKHS@`:E DN+[9˞N Ϗjkb^^xNSڟ+Q:Cw)a#+d6g r擛gb\8`ߖˆzU&]ĸ'@a8r]ZB AٳZYłՖauG ?/ޜy(èCZRjdP`d,0-ͦx>Ԕq;I_ۋ tiG7./0ppsfhq{ŠL<+/6͝R 8q|̀KĖ@siYݼɌR %Lf<O}{;R9WYT3#G"\ Ѡ$~:yːu.BU~CMߊp T .N¢?Y̚OsX]CI{{/QpPݙ[bP.3nslJH~$o;cIPq~nCy_ux4}T'7_KS'KY@XR@?[ySwyFc9w'U;..ɑC!FIzY]NM?)yeDQJ@02(Q@GQ5r&8Y;LMXt1 gZU8[ :ŧ Ӑy;\Ԋ?7wVծ"SjbL/Kޕl7''3ꆽ/wYpwĴ37*5mĐ;Jǒ8FJ^q9vS9>hKA>%cK*gr(C!IvN4ֈtZy F ~ ҦN,/ܒ/tc[CAHf??WANIrt*u#Ip>lLw_E͙ARD;F@Ԥ8Q@X (Xq _VtcwJDigv7Cl#%|'3ͼuKek,)fKo7W_0>єT >WQ5^ Ux#uTl49RNpH 3unM[G;J9H|n?[9\pS-V5K[; + ZEry-&Dk)bI_;DF/, zYhoOCБjHlMKZتr3총B>f jHYwrA#0X*3iI&$&'8R+6MڞY(!ypS%A\x3nr܋@De Gi}T&P }+f1)~nJʗ7#U|Jf)YxpΉ;M8q|9 'L ۶ﭘ1InWlPa"+WBxL|)?MP%G֔~ظE)Fp;s񂔿0٨60j B}Eql a1l Uu͓/zlqy-Yy*dV(U.hV8OHpR= QSK3a@$a?0sv9gLaDs.\nnT/& MEG~џiw 3E(O9. !:wﳀ8gsݿo:C/QPgjPjoG/^EZ F)~苮FgE=HRkcݣ$7X=yh9ףjEtATSrft֙Qf#/VQ^Nv:έ4YEj(\X6ީ [e-)PHlSHiv7$~|Nܡ3n y294 *,} /#/@}sW̻C3/a+uizCB8o!ڴJkщn&ҊU;3Ecl HGUNP7/vŐVa72F)1q`쁧 H9ߕoc1ٶhny1 ݗ@piH~8*G9; wZMww>Д׊'qïdepZ5S'نvT bZ/׀i4B E "*ԏ{U}+5 S㌑Xb/>$k6 \JȆ}>z8Tu"Ҷ2WS~T1w GOh"ans{"[El)`a ,z ֊ɤ,1AлWx!<7ȑt)d$1ojQz}"PL6]xIlu>f_d:Zq,f q]u6mX](-Avq"~feţ ye,?;N>s:£\܊#[|iapl=f !)~'xi#,mG 3ny4BW(7+nSr:>%ΙM2f:!OԔu>[;k .nW4TK.rM Oz$v$.b/oKb"IcEl D"YEa  VnhYˡJ 6y6vvlVCuTgO/,.{dC bIߎaU ͚6tK!~ue} G{_ \ֲv|ɱiHKD( Db/⌺X(``wˋD oR874<1b";*L@oJ@a<[IG bf +cApܝH!#L1-r3lJQdg>;w` yiBX=a~'PR&FE8N}\;Fd#Ƈ[o!*91EmI-!m+e7uAOCiGGR@4|ɗ(MeJ!,ǒ!-|Ust$IzU žA9\Z6gPWr`2n]xؼO=RU465<ђ-C)mǴMrƓO@k9~D6>"6Mֿ1I3٥!ؐ'֥ɬ r3^><^V 5tVlXAͤ jn9SKt݉SBیwPDKa0{5L|ܧ޽oR %7dCc2)[A%(hvdQF|ER 0fětMDäA %Vǥn2"lВ fv9.<4 Útw(_2T+V<{pS~ǹ< K;iQXA穅S3y!p)Pϖw6߀uWq`- í75u6?wh\L PIbJ|o6)r'I4#Xu^4<\ }iL(~tC5B,BnS 4P ow zt_g>rRB< 03/#,KLŶc/X-jR=p@+<`o?:# +ˡi݃2(ʳe%Iׇ\]1I.%0Uͥ>$gEޏk0ض@m}I^MIh3SXKjf?7ms2tuV00ɐ"c8/@UWBwo}nAE9b T| M> JS%PtCȣ?lUP:寝Е SvQRNZJ Q&~U[V_b|V4CV+eiZ$[ɓቮAjNf" K a>\2k}ꜧ6k@Wn2თoNilO#Z ~UA;7 XnT)Ȁg㉴!gKG֣blq"zj#iTgWQVVZxS]JՔJi{{_v"[g!AhQi7KL 6S} -d鿗bOY)-_-) j I)R 7yQE&'dv {m6Vqj|҉Jb. KKy䲶}}Gx?@t`=T*Fu-U!+}"4dц8g,uɆ"xdAJrr*TC|O;q>$KK%Km(lq7&Dց Kv@}xM|kĔx͌mV0]|L=Cд -5pTM>j)Q'"!*aT IŜ;וt]1k.:tpt*CQ/.{d>GT;iY A,A>|K;ᑷ (2zV!a_uO6MJGT L9p4i8 Y~_B/{dpABXߐ-4X|p%p08{1N VYf{/s{Քut5/-RE sX1kMU2F̢[b W!Ehi:$$$ rNhIH#]oU'SfRv n =r uS +ވp?R}ˋp1U8Sbo.a&< RZxVk:D,ǡB0妢\uų(|Buk<^(pWOcL(Nz~nIaȾ@VϖlXgNɠ~~h}5418UI MRпV /@6M>wGʘIrwVLHSelkN{3Ƃ%;F 9RX.hoC"6zdYOGcz.Z7浐Om)3wnndg7k kt!TB{T9Gbuh@:W3G;(1MBQӂ%6t@iE ku 9_*4YʹdڊMzw~<Fp~i[4Us@)_ILlpꝿڦ׋'lWl$hEϓ:/4b@:t_[|Wى3fEigLw>٧x픟ΐ!:? F`fD~0Сo9TxFaZIcQhd #}ߊ 98ҵm˞,Sz 1Q]{kbHoe N6z hat&o~@UX*gtDIjp՗"Jg6q.p =hE<_} k-@7:Ux+ c\`|[-Kg6to}̚ߖkͮ*[ïҒ10Kp59_TOЈbz#tYͼ"ah[uQHQ#ox*E@S R+#tXMv#T3?J6/rn9u;cK z,2)}"zY`?&)-v4TD..[[WT7 * a^^4R[!8% &NtބǍ;(dp.G J񷹽Xs*A{ԼTg*0ƾi+2GDrVݬr|ޖm=> Rsz 2F Pk!?pKdx^-V =c~uR`H|sQf7-$29hnѿ\u߲/L@DŽ| zP4@cMXΥ=v.C1nAhѻR#{# eo>!$#45AH]#O׸ 7dZzc2PVq%{daRVOBlɑØ,oDK 6]lwz0zEBTEYo.Դ8L y"- eA5ouY(oQJ+Tyض83=T ^ X Pۅ.!<}QqM^ԠKh6_44DP/+zB'o,~ h]|HΛQ-=UuU/A*<;y WP5j~au&8ȭ*w x-,\ DX?(ALxrɞ6F̓Mn=uenq/yT*2jL@`M7VQT/ (':A|%x l%s=rhK rZwR \@9X9m¤[m^2əa"*m3.LZ|;+2pfKCJw׊W)p`^Co.4/Qͮ8|̮%25e-jXOpdϤms` ehyus !Vƒw9}׿v8LpD2ćޅ}{" ɩ1};RSͯc4c}.Q~!nV9+pIzT+NmmV~@0RW&T.Ș:D]^8(N%HsaD(r@@35 ﯐O$m^Y m];|@73>+Co*9whG)ͩDxM0_"H.)ul*aOF ޯn03+5ܦf?f滻dɬaD7zz$y{B!7Yme6n8ǯ8<  V(/oWܵnb% 7;Ix~Hf02Աk}sA=/QJ2&ŵ#$]#]׵.b.;<Ŵɢ$D/<;Ji{ RBWh5 Wl{͌%22p27-U9q(⍅l ib]eGL yb(x^_\g1nVS@ eK䩎EN[.6]ST:S嵏HTcLBcN=o"j< pN& +Y}8f$8$r,(Zjm>,YOlQݟ5]|թlAV2rY?4#;6AUifU8 +hm[;#r-x3^F.v~Y<4K^668xmҗwq=þ z(MLtQ"61%al],w2nI WĕBІ{q?6AMKkPl gI' O)c7ged],=sêE}G@t8hcBZڑp)*Aaz`9>Lur>@"z m1S-S26^lTw<&[a0hkCcf~B} Hb;s6wH#wYDd^$ҵ:[(mØ>7~ iHus$HF<Ì@\+v YM uC(x1n/; ^)MՃ%/'fRlJ;2A֋Á~DS"&&ZP8kQM ͜3͡N|yM K讹u롱"Ǔ@SY+ZB$ͷxK)-ߗ/,Yr\]v**p&\4" \J@>̃U@n\L%d,J{*_+vT}$(N m܋m'XG jz߭odT աvz=]R\_i{`Fo;EmOjg";3.G&Kkh^{m C#=y&H2r9x)ٳi26{Mӫ;j_}h eۢw).|E-ͫl7  N&l)vw`GX0] r('-YYP WFK,bCYt}Co-8@{͓͌Pb7Smechi{aT-O[n1b}DFOpݧj@T7~ ~t.^nƌ0p T*fՔ)‡pT6~fuyQt 8CA6AT4pOַ"k! ^\(9jtTs2Є}R2(KfGmX潾s8GKGA{% R 3 ɝ7+e\Bk4~͖HuL&J^Dv^td`@jG(>arσ#aD uaYH !(2 N2H_7E!h32鹬fJġbގi:ӳjnV'Ɗ|)PO|gGRU_>"HLƝԗzG!@4Ӏ:"}͗߾ߌ=1 bV /W4g ;\Ns刼߸aZ5MYvL{Լ lw,FO7pOY:GA\&d믪c l•hK bR,H(XZЫ_JqdRI,N.ްz*$=ԪkضtWAADzfmjމ,A[ku J [ǴG9L @PP›usR6D_hY2qDg@Gq*ahDo`!V.}oMJՇ,Su̮{s`m%xکaASMv'V/ǣ] Co9eG[_"me,&-/!g$ǁljE+Q:nǾ([ؽ4 GXZ+ݓLq÷jOr/!`[t OvИ'r9.@ uYjBU\HF tB-[hIo6XnPNl,ݵ"{n/U`xov|c*--bbrsG~?x֜-)jHk8͗U [_8rȥ͎Nإ˰\0ȄEoj,SmI2ߥTvJ\ ]s0oR<:d?(5Nf}A9qSdZmtE$8\ඓ+h ޑиo!Y JȔ1H*e0vPFePz>=dr߾ _N3BF?EUAhTp*X05K9vesAi + o[_y'Eݗrpvv,% !\R}@N~ T͛i糤 &1$+7IEXl"Aqy*  Iu82[\xܔѐE=?Wv᫡[0i'I7'=1u^G뽼w$;~f%G?aV/Ni2S"0 p<k\Ȗۉ_ٛq1ÀԿɰ`)$la"W"=d4ϧ{hlnKO-O$- b߉ g;3n:GڅfWW}P\mWյzkQOZ9 ؓ=]/J89 ASYO\Ikz )=sϸA-R]6.ITr=Om `mQ48EXwDijKy+h ,k(SoP3oM8[b&R844-7#bbLF˖i Q@|Whho`vσA'3}=;{2)}X"&7ؠzOE# ,ֵB+>xXxSRyjf:#>M@U+ {_d{LI{e9- ,QN8Hh̵pP1 !]94ձ?jH?ttJ :fnjS>Dg?M|u4'znZS"ѭTPQFK1cF k/M/L)çc!wy9}sgz,59LW&I`Kps|/ NU |g梪 헮۽`c}c%X WɉǘsV6TrAT95ݽ*`&qQ Hĺ\ЯUw@`ϔ`mN7h׃ M2wvs7EW@7u oq s6ZB;ԸZ6[|G/6U"Tڬd% V"` @v$8+2Ni HǙWI|I߭/G,i]G}Ȗ)̀mů’ ڢ|G$qo-1?p}v!TCʠoU1LIHza`XN5F0Fonf$t/OX7*<uP?Wz\ A>3B.HˣS'dg8ϖ2bW/7pc#UK`ZA 8}f 0 lЪ^K״ȷ8ob3%}o͵ LJ u0x]RQ%>0vٲHaA| gl zvCS.]L& 6) &ͺ#$stovUأM Ml_=;P"fʜypC,:uf6 G@0kE˓3tV>Yo'N(1ktʶ:6/ul\uxM9Ǻ3$`ZbRv]+(2泶FU|;5@&Hӑ_;Yf\+(Q8 S D^AAӥΡW~Lf/1Ҥ"C$)M hZ^F!Uw=~sFRLeErXƃVd[zð0S)awdWCUr[E3R[n:@VpS=~CvDX|)¾WnsQ@BB|8cA3gpR+}ݗGZsO4 qRքNNb<  PjPɬmgm[ҏ[5;dƈJl~d 7QAt!3=b4;z1E;5j)L;-}*`)˭5'[ɂ^"Q$l8Is)/B޸J%٢-px!3ƭw#| yc|#ۈ)4A}qdQyDAE/σHMFg#4L@_&w(Sĸ=3!@WXy\a^8b5ma> ~%(;q9^a}I^d[I ݍ*D5 @:c5?y@[^y2i6_GH]!!Dccf FbSMS v.,FA~qgpѶ$?$i0w$jIEx{ҭ Wdž>MnauE EI&%ӛ7萺KdC?.";e6F8C j0M(M"K`AHUԍJע;yql0?`D`fQABaH;$3sXh# KAG`M>^͌4dP'e~#-CnԁĶ.dD?.-m `^hJ.le 7/.8 B^YU#E h\]xuBNNEU`ԝ9 j9^QAlgUBck Hx#|M]UZrHFVe/0u],NUp_5r>1lӌ2&ejXE͆dc^PeMgx'GBˡg &EU\KX su3g['g*RxR>n LV:|W9gVNh!f_{YTK%p4_A.䈒f Ԗh (ړXv-e$Q%>94֓yɊZ꾒OqW|زĚIEg&~&Rsg`Ғ%;j09F̡Q9/#TģY;$Vgc>?DPPW3TFz},tzaGwثETvAk(v szYh%u$2vسt[Vly6T6b i'd{y9*AC^¶OW0Mqţד0e\Cz)i|0 Ǔɕ `@c> ^.kvAEBIb D5o,-0j7('ǛQIRThkA Vv.FT 3Âef=Д^j@ @ӭf|ʰl1Z Om&N8b=6\Ns@rkC Iθ/!zwPP,R);]d0 ,ؔsaoNP-Қi)$&?6b$1K`QB0Ѣ1 A7LN`_F.CE3S8'f9fqOqP5> 1 1I#EG3U'74`Y`_#uJ8R"' %kPL1%SByzoHUK3 5Mm'ٝ]ŞI}`LP+tEJ` X"lakWC_ڇ*k(`lwrWqւX@%^fT9")vйx[0'dVe} >|QYlW,:u.]P[@K$VZїc'M\?0B=9˻ ;29=(Z]Qt׳dFܚg4=Iv|RYkkQld 5 k^v ȵ1w.ţ~׏C ?xv$F:tEϵCt}I0i&',ˑd-yzw*$SAs7MĒF;J `q[ K̈́; wf^zwڂAD{Z?*b< nӟmf98B-c@'z3ħ4(ըݸSW}r}#6?z$ 5ױha\yp9O wkq8!tr`|yչQ^Sx "D-`?5|6S{lEadLK9E-Z|f0^q:v\g&IT,ĭOӧ0]ap"$ާ, `bxMvp\am;el4*^$W;:~:>l4 %G$fZHR֘5%z|q>űS) s$-;Տm"C6ZDi5Fn6!CpvIWs748|eho25!4RKAߟ}_'՘&Zhh H zU}C;rm˪Te0gR1_Y7ĘlAn0g4}߯ʉ)MS 1tc8ܣo=lE;%p'_;3 zso ْhQT7<:7 dK: ItӠq;{rs=FB=7*򉞖O"}c$i7+M%}}ح]ٴl=;$ɎyQW ;]ڛV?/ŊCz?/n߽;Q@,̵8%>J !uh̨ 5 P6'85"Wɴ]ۇU﯍>UB,Kȑ:*ٴE"R.tJ Z Sfn~&Jݖ](V: 0;z6eBG ~PE^*5gִ$7^}Q5yIs/7+Qmpl8`?JMh]q)l#AO[=E`-ԉyR2O\CG-B@_u2L'GhtHA D6'tFSͱʎ GdX,&+(^>~3HSw2Y ²Z6yS;É8;l1]"(j ?EfpZ 8eKR2 ~&L!(2€ve_`~Lq>a]9t/2'oI'z΁Z7X.A`1K*<@ bQz8Ig1ȅG@3(l qCo#dдfEj6 ĺV_v1Dp ޕ&-D$^zME upIᤊ͢ԭ{ܨBn4y포›5aaP8ַ$Hj;||yYE[̭4&&#u:xձ 4I$sj*ԝ~ U )#~kƬۙ=4:ai)md_Yk0#!$-{! ."<-nT@cG}8̸!7'VbF4]bH3Q]'2#8tZ|ՁG<ͷڤ2Iֽ;PGy0ϯEKN↳!AQh66%{e \ )?E,w)rRyvI*0 X= s ;L C~Bq "yiqnNTчaݵBۓ6pVajrhev F쳗VXuJ P&en&y؄bDQaV`%9L\˨6x?4ƟPE6<ϔZt2Ab/4ς*$c`1?/s&\IUBGW&k3< o0m41 2$͝+TO48d(5{E SlԪ82oWkvҕ ?Wh|ٔl>YH.?cTklg}VD÷2O%U*FT=N‰q}\7C6آ΀$݌"sI8\ > fEkW2#B-y/]m`EkHƘ di53%1Ż:#mI6Ab>H14)T9DJzm}po_NLQb3n1e\>t)j3)wEqg`9J(Eߙm&e!XRG(*|0n,dH"ZwfHu^!~Z2,=% uKL놟ξȀ j_C={p (,&I e O_mw7 i"n@> kfOJde&= iĕ>~W{.6?hQB㿂KK:hE"oC.[ !3?12 )y0LRwcţ$rKD!9muB4p 5ts>"i~lBSBг`6v{17m|'b: Ϝ\,AF'ʄK _VK. rf1W8l™\n/s\202f3&)&=s4v |@em)~TjKaDd14E Lˏ\{8rjl^585Ǡy+zSj$9X=qݯl(GS㮨XjO]بJ [+<>z h*:x9y?Dxa[Oɭ X*B{ %}Sҿf0e.RqT*OLXzsDBxv90KZg, K2|* 7:sr'Z1#~g2"y 'HuqnWQDsݾR`E[{D|mH*X p̋KEq]>F{oo18XdB7:D9TRZiyԴdBƻXA9ԙغ*c{ZK|>3A:wn~Fg9T@RiĺI IYU썁Ƃo*/IGoUk*=u"gVgIYu’s"⣿jQ&wfu5b 睬J;<Pb`%R@"*\:`>#gs,|\@bRIVJY}<`g_QagD Aond,_>XtXm0rq4ዧ .tAqPX'~.\pxY[MreO:_ŜwI)n 8 C]_ֺxvn a i$z>=A/.v̄x^=lNuXJ"v,ޖv.:F `{ оӖGPxRS >}R8;?ɦ+e=2ڨ=buBݱ2ϥ| `nޯ1~`@#ii_;rk[Yd-l*`=Ƕ˃G>;2S"GBpҀ4q/=ǬLܦ/!YYՖNЋ\6("8PλM0pp]USWNImۃ]Z99A8:?@ J" `|f^SIULi/CggaOug/A^S6'hsQr'ya!"VC ~PQ-JPEb?5Fs#6Q6ߗݯ!ܘ?jyٱD8yv.|ۚfK9 @J1pH~ɘMFFq쭪a{ Ѹ=hy]kc4;SQZۡC-(tƺH\3MMg̓CḢevLzOYɂ23Eծ mاh"^LNQ IsrcdtdVtꈎTSp]{,e~Em)7 -,J8p`?Y|͎j҅>#$}Ƕ4#o|r%2+x8 `e-Yd٭F,SN߁!3]V n [~'O,n-2> i!(y'@( o[rCx$@/U&1@?Nظd%^a2bсZˑ^8wZtd},l蛰Þwā:?d1*ap[%~VDdc1oysYЇO8~Y9TAF($Hk s@afa bݱį_ָ,) LT0[x^}ޔdD8|lhNӺ-0IΌ=T @#r!Xn:n#IThG_PLq<8T-۟aou OY)_$XAVX? .'DMdU!uE²MzJL "eW(ūP,{ ,^Pc㏔۶]C یlA_^"Vm*cɌNWwœ̲w~ 1DLu指qp vO^Xh6gkS\iHD`8]h^N%q):N*(M;ǭzQe_͆̑g,:{97S~4mŢ푅CQ2%=7IXrb He` ahrgpif$'hTk^ة u[:Uy!QUw!YͶ4+ aI,XL#`; Dwo^i8wNpv)wk*MpT*ZG4 $, ߫3y+]ak=YӤ3:{l_|+t*se,81c•4MB;KGƚ)>1IOֹ8N}q`Ak?2o`^R7P]y#nbmFheO;Q 0hOϹU{Rk2J*q:ϔC>g=}5 ыx>dˇ&܇xLIiňAoKJASo@k\QDv))8ֈ,쵅+ ݁yޢK\thDܩuu (|2ʔ({";J&'( eN"6 $%Bq,)dWU4:HLOr 9HZAǐW9ɑM :^Z601D `8&2N 2 }D.7b..hX0]2-'tjUī0a6JU /HzjNn;45j{Asé$,9(wGއVt=*c^^ub/U]臻'{_;Ι[Hz$/M?ws^B]r'Ž<|m&oaghv\9y2Ueص?t܀eQNὮN% 4f [ vGqZg5P Z[vAD)q`7lFPI`sY}3RMTJ<50;_` K'`J%c <R>gxJi$o :''HS$`j|UTi.͜>hDmv)wC@Ӛd+A?|kED\>20[Æ {AZ\?K4 ga-}oͥ?m=<lKq/_cُ*`6mVtiRkmn")}DWqn"檈59.ްIQk ^&G#l/!r *3NS~KZ (!{gKL` ρy)exBĒxuQ#HNj5l[eMInU0e1igaߚsY?REz \j9 WJVT|aG^ң.{/ܯ'G/LyGZS6>(Ib}*, i޺\LY<9U]=I`p6pCdo7j^d\vuoQ ޅrfܮ:Sg-3Ʃ /YI9{U>]: ͎3S{e.8Ux.dwGE Me.sozbL81{X$ JЌ@H ^d> 0r*&7yЏ Ndŵ!5nf[{OpV:e#x3Tվb՝0f46/`>ns )7%Bjb⫶Jpmdqt\ݫ9f/LTr9K+½5AӎW0P`07..%<1[~y1O.z(,ڳ<+*+ĻZ"}A^)/ݟȎ> 駳ɜ8E[w։Fۑmug1/ߐcl<mK\,>oaUϐže#%C=f0X'pͼB4<q'8LUf^ \:7a o:YC3 e$T<[S>`?|oRze ̦&Z0_q5=_ -F"JpNnGѷBcsgHR $'1 9xPv+b ٌ =eۙL91Qmh~m1KKQ7+ # փ2vxYn`d-W.& !+}FEz>tݠ:o;H(G}Q@)u;$O lc']CǛXof9K̓΂\AiH^WS%ɸ@|Y#i3Dd #G0tmN]6fM8?@$H ij<mlFG^ƅtb4snޞ[L$,/@[^fU 2(ӀQ5Ru7dsp/G$+G;&,|77d .5l4BTDs~#U 7 w!جH~n[bEDMwj9}^S;#Ӓ(,߳i52^TIME %"%&ۮ X,B_I"<&o<ܜ-L#|0uPXh"/V?S +ˁ 5E=o*ȐU@`bG(X<jR h{ͿQQ'e藵wdg5se P:DyRn &oa}wt-mrWOadNfʕ_M]+OYd [ܝσ]&:` ѨBbȶW ˶Q>ʏRf8V 5PZrs>쭷Ws$F*35g /d}Da4H~Yr@`ӀxF φD+׌K['}c]͚!ٛVX)f/0t`9N:<[i+sy$2OKq*kIZew176+q6k OR dE'!+,ĭ?u5;d4EK2kcQҌA~YQ)#C.ςL7+֏u}07PhVƟìvrt~M̦mnjCTdD`I|7ژC㫑0x; u^e8]Fkr[\tpZ C>mEB5-Yuk:'{R/Jՠp܆[+ 4@%~Ƞ{޹u3۴T߲5P-+`{nm%{=!DfUS ~!TIgv2AɎħZJ::_i9 n7pybQ eʊZ$չ]o"ASRΫHŖo=4W g}+vvz{n[DRy8+vTWxWo}8GŎt+&>2 sO;(ٸ8q2U%SӼ >8R]_s P!CkݼVxK/B,ra;Һ'ԓg}V2f%ض"Ƥ K'E^w!?A3ΣAll؞_QPߓvr%StI@=Yy,dSRRT¾AJ-m%/ pX_8l2LT 9L+ 48dkH_f(g?Z9i¯֪74p7p=ء"t3N/$'S6tkoLjBy:n5vخ1S`κ_xKK3AѪz77˱iɝ%2^ihVL$YN/B,'S7Io;5js$IR%86RS]oFlJQ0d> FVƁs.ϕD/ѦT^JQ*KR'!7eSƶb+m2?Yf+DET$rޅU1`fwGqӒ/o@>1miH$tđx8XPe\Y^r"Ӱv["FQ֒$]&`WyZXJC1`$ۻ<W[l[\#Z _ă.wن,49פo:Ugj8<+ncZ0(`}bgs3@SCc0_zkęH2T`\03"f?;fgQʕH ѿlc/Bz3[EcNzgU@hE,TAfᚪB 0Qual}h\jϮ dB!Kh)ח&EEud_Q~~_i_Ad vWi;HvfdoeOEGx=H^a u#%%drH}Nt/hwX3v۲[YS.lP5+R$nt=k645Z;E6li=ar#Qx!` Nۂk1&>* "B1s]s&km~ }P9T_o82rĭ#sR<4'=6y^aJ}ZPB:ߧА n`r:rԾ-d)VtH[C#B} V_`., $|Y"R\|̼_Oy(,RoW2LwoRꁠy r~KB1gdl6=<9Un 6zX$cN0Lte.ud ooHj$l(ʊTLyR_8]C; b!C?z*F,Sk<0s%v)Umem{srvsʸ+L[('UZ\(.+3 P7=4Yf S^#=/*5̻>zؕ=8ׅ2פm\.8~}Tmu6ΗUXR'zG?<AԢö ~I%nAa% {3XͥX0蘫Y%Bw4oQVneTF՛HL}W[|4J#ޏ1X{v? .>ﶇh]3Ϳl0#Z \S V_y8hω9"`elL,}FF"(gZBt _cjB_. O&aqSh\rβ1Ct n/]ʾem1 =8D2VKwlϭ].j.%`$DFu6kˠ\j{uHu:$Jy3oNOC8a/o\?ȶH}I>-B8^\QQ&U쒏4"Pi)U汤}5\)̕y]e!ЌH`e.w\uI ƘrVRkк)-ݓ5&4V,"))EҠ46ke ڬoS3P5W-cFXag; F}0}\ؠ:@ԽRU(fa߾1Ov1wɕ1vFkKK.Q-m|S-_Y@F8]C֞<2kpXրH?2N0tstcCnUb"4rҕj~˗HLj2ϒ:2}&OvH"Sku=t ҟW5DJ+DJNӒoX,/O~n#2fQq&RIn ӿsDBӤ`7w0NnpŶU[W|"_g/.<İ}oXM\/;be;z(ogCjx8S jJjw1VBFmU tzPgf9& x`V-&WM\mwS:=7 FEDAlLc}%/,P=| 5P㝵8{q1 j |@}vf^̄)$6JM\c"A/O3JҦTpwt$evd"q>q6,tlunAF"|>ȡaFLu_A !RR=Hk J8R?:EvpE"0~oiӛV Aڞ'0fUb'Ov@G3C!0LaI"KEoZpޱ!3(iMPcf9_ӧ pZɌ3RPfNbC$~ݿ طio@1Pl;U6cp%B+JHܠ ףZ:XFB/Z?"QNNxwo QI&z8<Ï9V\ $_"ESSA+Zpb.XjglD*J ZvdL6%tήU?|lכyauV?gԱ.B/g^U :D@25b ^4 0X?eh|F3g 1+,IDF,$0z>~TH<:0d~HDESDS- &7p\ 2 fnqӻ՘e}jJW3;[ I[t]eTZEx?TLuue+O_LSL֚r'^.@7|'e\zk93i`4bMcep_RŖwж*.DZc#Y!gp'1^sG DNQwDH_.ܜ(&U.l;+>#Vq192E迢"{UPhS[D$wlg0?2e#hVu;?;5۵ 3pse'h*8+j MJUC|Qt%mǧEUMm>eUC I1@5B֌[MrxBZyb01Uc,Pm7:.uu`SMuA--a99t)c҆97dtʨFʐК nV^00r̪.@MH,ZFTMkfbRALŵx k tA g MhIW]3H_zpfqJCMV&4צ6Fg`]=sv rڥv+")m.*llu/} '梖ۊPҴ8"l8P1mzn?uOjCW*=ڥj}*;rL=JO};B0X] `5P\bP-~6*;&hx?q"] GQ⨊ۃMfY BZb-I2v3IJm!!) KЗ[se@7k"Tf^"uBu5LB2kmU4GkḻR4;U yQ|9g똗#廑񡚾1CN/Zp %Tnb BJK#J&*84/gc<^ 9*ЙAG[lQ6+H50)45!$|z揰 [#1Ҳ*nҎ7JuS_ac2 cCl |>Fp8~\:+贕W E-riOB S͜ _dZH,"-vyVzmjW %#oAGc7i@ag݊/ |pa}jpf(GOxߣ ۧOs@$%NƧFvDR 1:Y?ء ޴e^ t8d2rn샠q*hBa>Sˢ2l"V`i#&HN(eja DKY=&p{+rK=pZ8`ae@lB>ia7{6᫾|ů2< Xɏ8h&tbћ1b9SDaTfG[c(>@?ގe _Wp1lHlX 1@];oXrMZ læY(2^mEJ7B|N@ & *R-2x=uR4$nI#zaY: џ?5C@ǽ ! -B\cBS=&hVHώIkaJ_P:={l7u3vܓ_e&̅$~8*> #?q9aOsS5N+M6m&Zb+˨\F"Zեi~)W@=+H \-E4C( _J3_%4cy{#]%JK]ewj:<-ckp]t(}5$>Ajg,'tD`z`I)% |x\{-A`~YmC}%jZ~tE1$}u98] Is]y%- oε0H}ltQ>>No y.s+k?/cK-4iif:b| lDO~ci.@-҂WKX`)v}]9ݎEfV-<;^gڌƵ;uhRzi4d$_Ii1 ] $5&JqC>q >je943,:6Ko~`e&8e$3K{L1'@JuS,6fB4a!mMˊ%2Č+ YlTxth!Eϓ 770):F6Gu_Hnc9õ i\e23ffQQ0Ib*â`s)&9,r+QMɍoO S"30 , Ļy;}}ܮsFd7}WQT%8M="B.7]1a .W]Q4h~TOI4{m83'T ƙ CZ_NC+% >Sd(THw]9 'G03&yګtC u▻/jɐu|MCMX=tK_ؚmnデ kU1jwI7[ۓxXSd%EOmR lDזtvQD,%Yq8W%kҡmn{'Fܪ)QI5#MÒK<д?#jwqӘq-ί>Ч.'$MmEqsa{ߺe nfJe6Cmk{SSGޠ!۹PjH{6gkjGIΉnp!. ]$Qcgb!J(mYFZ JHH@xغ&;vYI:[WN|y 5exs!8Kٝ NNC{ .+w\,m0yM%*?6$%*7t_"j^LB3Q7frGF+7"I 1$n$,Mץ(, Ooyꩊq|j`gD(3YuXLB2N@j_۰ "FsR|jdY {Zxu5ktOLMwHGH f۞Ȧ;•ɅfӰJ փ0.WFO Ft^eg92}8zBf@ #@I,)Q2 S腹=-c:gڞYGEq^5ȴ\i4&>b^HQˤ:P\x%\zjr"H-3cNJ3f-T 8z*#L]T{Z|\C=F<7*(% [Ld~_@˺3*3j՛2 ueò6/f*((w6XrךH1 XK#mWW}T(ٱ?N̈́:ύ0w&j 6-5NߴuV0)PƱAӺ77D ?,2_t F:8)p<41oGEg`,zs1N愘@Sb`rb`@dm82 D'D/-.kw7q@h/tN_VS2"6ۿaU\d(1Cšxw67;tw£FY͎ԍVFZUgDUT||%-~S10c.5\ ,)72)z"~4-}TGujjφ46f,{ћ@2п!E/؊*C'Dtx^RԨ d{Ck1g[s8'/TkyJ6wv1Px$ؿ{@ߏ710o89ʺxgz4H Մ_s`2˗f,oQ;"Vaҽ/PH!gҞ$4ߘ~,h{ל2u5oR9sPg0 ?M%-A+D=/*hf !iЎ4 ^зrUb9h(D-q<׶t8:dVzg=]hqE4DwDpz94T{7򯒁diAWvFopZb-:r06]~:UTWv&q9a0Y,Ea1gQ5ad\X)u88G`^Ո>@J,%q(Öo| [blDX!J1}Qo릑21{b'董1 I_ˇq_;>=ˆ!J]8?gYE |g3yd?;AQa^Y|Yb6 4NN(<5Q ݐ1x8'X.fbeJ@N˿G$~O}N巡jtSZ7lUz[59[ U|-+b|c.Udr\/m{ڋMRA,NODa0_t R" 覟ZqٯP%!E𧁵5CqykzG(ȃrzYwg}jICQ Uk5c]>瀋5V^-D"/:7P4PW  mpkcR\~<z+_4e) _VOv&7@V[g%VDULw$d ޯh 3]g ։r6 ,pn(ٖǩ p6/;ħ5aгj]XyWoItԦi9TPUO'py93ڂ0-ْ94}X$~s q҂و](% h-(sҏ5z`s(B֠bqΘB%ҒWpk *aƵ 8~VBOix'rluqV!gTs] %VsgbLP'&ӘsN+mr C4!+>~|:یU'3ͤR S> RYNP9R3{[b fݔA"}Y }h݊ҍ}RgaQ/Q!4CP_8RI@dӂe{`ûQP JO_;I3tbw窖 :v JU9)ftɈ<2tKӠ*5@L@! +kX+rw߹tLg%U-=Cօ;!H;X'-X~˕EQW][Ept.*Q/"aK_o1YaoC T=FƞƓ@^g%eMk쯠=w=1u(b9Δ$"͆;Qe$:6K&<͕N+twye>)U.ΩD0p%Z;M S,zr⡸9|+x<t 5kJZyVQZi7dUt,БL cHD{`Šwq q3msnK\<91._Hs?!FXvکJcUB<@YM4a%M݆)^Fo" ̃0@oD뤦l"hWd@˞|W2f"۶$lS]poVwXK!-I z.6Iա1mB@ zʡhu 0ʟZ ݓ}tN(*a+*j4 J#uQ. =:4~m<ǵwv|BvT{ζ鴺Y>w 6ffQq-j4D`ۿ( 8w`Mm%Ny.9 (C"$!j\S[(O~4 v$+r&-7t E:zgt0,rZۙɌ+I{/895 T]N鴘o $*,JD.0Y%(;{5Q~T'8HGX` Yh$yGj5]@\ݢdzoOSBYrbscA ԍ` U7eXPXji·&mnN3`%3;knp/ܹh9HW]L'qHKTXNEB+Y$agW ȩM^C~JH2o6osKZt0k 妊EP;֜akr109y *_aw\{~f1 X b]L7H2K;(M28&~' 8#S1la]f 3кpV=cOb̘jJ В-ou(1C'ho3V_|re'W D3f0J1Ӝ5NYW3lI*'t5hɬL0[.Nk:sXX o/4j9(*C+5B?5mw9LdްV[X_͎|UI/N:9W"I(1-W{hfLXNpk=LIIߕ0@f6퓾7;pgwmړo79 *p|rTz,9bhY9Yh +npJ}݊ˆa@"<="`,^:JV0oR,427|wpM+MƔ_u7X )>. m7wjNQ;e(`K8wuhK[p Dm≰ǰ2Cl_#^7C85\T&w ݮLNA 26i0NPOTs(1-ۑ#xt؄o9yT^cYEpܩ,LpL9(Mn.}B rBV Z_ M 16B-==* zT?Z3 kJrSEeđ_ǤֆE(2 Dղskm;C4? II.O\Ƹmc&"?Z @$UXyc8WU$AZ'j&H* +:wACyu|r=1t?@ ܻ(.=Du9liezq頞yOYҏCM+neq' gG f{[ LQN6.M^k/$|nN!HğŤ JDYʘ hb "73F UI7 ԯf~:fu{5Z^CKɐY\O, e(T%F%kz҆gh>Ћ!:Դ>3_KiR? ]`xDq?qnbW^/+Gjyߦ[(Ϙw7q`SQ =;o$]܈uO )ٹd&4x[j9M1ן}.z4?RyW kj6xo.hcwE콄S(ϕfI ڱNw#pti>^~[l7`B0J8u:X x-b lJQmK-tnf (V 56On5/hͷmfS%=^vQQ#7qS+4Z ep#iuߗs< P Td.K/U~굵 sƝ "Wo)x9\uQp)y AQ!k?VxAoB(fXS&=ťDž` GLw0'VIS5CU]sLYi)R~i_7n\n/9[mϚq9aQCM eW2 aOa86k 0(Vհ}q8 #l<+ou'"k$HM@T6\%iZvymCx}Ɗ6i|Z妸ww^Dh^jGLMpT2%Pˆ'$L,)RcO}zgsT`=eRt.X!Εm[)WC{`a6ǦJ_Zp`I~V/派ثOb7p|Ջ'0B---w6d>1XEU 4@dztFcv@ ^+ ,T6iSBK=8r77LAx OΓ̨bFvEp02n9xqRKe)wdn;+gBHtAkc4ãuX/D\ܮLmFq99Gq\VȬbW˃pL VX+˺?j|nv0V 5/`@ T X 48#0qf ,۾åZ?pGgsMg9-R[z} P!xMZ4OSPrpCg[ZQ!5`{S2RgrtϮ N`q !U ;%hLxynWZ[&I% -ӎ' {.b{V8d6_h#WjRT43[4 pQSfja6†E=biɏhrWPpGʑ,&ᵺprPC:?"6N`ĄA i!˫egULǹm@(QK[!t̔dE lr |%٢O*47*kea8w`WqQ.SjN%/ *$qܛ^bA!Ma#u tQFmRV/|UY` XYI˸3VLVL]'){wְq&Z5 kaCW!XO#lAkXP⌼_v<6y~q m5 eVR idju8 ܖKxH_ p\AN 1XTu촵 >چ^ #i^6ہhJȍ Ю^,=~fqTn5} OP_}6ϟ\l&S˨xKdE5$Yr[#4QNoGXv3Fl9eۈKutHK% .ޔƔ=b.lʷKn[(f׽bxJm1ζ(kR%CH PF Z]ߌ@YB,*`ۥ!Qʂ7RCw^r"Q<Չ]VZj-0''_F=1W^z||*q•TFR0'Y+fq!^\ m(; 90fD{7[\3IK2ɨ8Q`J9V{ =ObAԂP:鸋wҲLeӬ:^A] uZMgt&i?|KG̉Om|ڢ&!t\ӛE6 Z|2I''-&.³(&(ߌU>ECG&))4^I$fJY5ZlCV mBSdN"COb4q0ۡiA #wPl;w55VAZlDocpo_^5&>wkoqeIgշ ٽ悞xR875[9RB# gG ?Y屹jm tE# JτgJI'ݒ>8ql}b`+p#Ժ*}IKWЄa?493&wq4xIWEU|J:yZ.^@Ϗ,F@®Mp~<9%Xr54dn..'YAf.6`O|v }x,`;o÷Wvǎ&pYϟM8t傹b#lDzbϼ()rTABSΗOH"E[HAl9\3e@L;#׋[RZ4p 8mXReS%u9pV낄%;BO%aU;Hcz]hU/ˡ߮"jV"qIect3Џ'>՘(|ɠ !)bWOAzmlk =}i nbo\"CN4d#[&dE % ͲYz>K4)ƚЮ$:HV'{=26t=N4fi+cInRp&|fЂXU9hi1u<´ .wkt~<8x&2M~Bb NCze/SKDq&y/8&/'O.J>K"5>{}^ṁp{SAn}? FqcO֥WF{:lsaDG6Y:XqV{$Wn '*߸_:"40b"/y^ TZS#C+~ zѲV|pAL=O4kf(?IV YM{&E_}\hPQAtM?瀈g N`1)\`1f\JK5%hB36`z;) =+2W0w2U"KoTf񓍰$֘-ojπ_ HQܛkxxAǺo|[;9))ɎzZ"b8q1l[ItMbI0KG*fr>B(xbh ӽ򪉶$:oJU6:F#cjjLEViVXm _|3A# 3,}f6U'.`h1hI|"M'A~l#|,aO)s}=1i54f)Zb>vÈ"#%nԂy'j^u]u"!ϫ+?bҬ D{x Z 4f#G+2":CQ2I=f8z:7%6'@^Pr((n&}@֔(k@rr'g8t51@]ᳫ LQDNIiHoKnӁ;}41`#>NHdF{q 1AAޣ]Wؙ*GwӭVIK#Zqq{P!2j>3*h" -fS'V)ff Ê~Gy׏rT8:? ]d֗Ρ7jtYA^ju]ҴBw牍ٯA@ac)|AMC(Tor!kLqPZ|-@|s-aIb }c<َCm w G#˙(&, *a*yW?Ah$BHt 'j#0:JM?̣6܅gi/\A^rf JP0m+eAOÙL:(įv.96̚aqL1Um>>vt &H6>%dro[L!c\mL+A~&v̒#v@Z؎qDQ=jҜmISUS'q3۫e)+\+DIـݰ@t )ό"NqlB]8bML"B~ Y k-v"8`IƳ" Y~ǕK0bP@LSV&U1_JB7`}+|K.N+}dƵ Tb_&֭ Ls3beOWM|Q+! r~=Q8UF:$% +,`lG )ۧk*Cw_4I<8 sc baX7%i4UFGU(]Qξ>WqJ_CI'A~ۡS7ۣg+Ӗ,X7w kX:ձؚFYigԴ`aF@Wcbsr -pCQ.r~/'vD. %B4FVc{RYwS>)5uQj,/Sv9f涵4MWstw0Voڦ\-2wbJ5hs at8T CMįHD0ê ( ~lNwF;7 4K>:u^f5J=ZK]il]<*|j:-.Bi _i11':M螿ac_s"Hm1$_k$%F;yޘ}XmU{߻D/0fݓLLV(R|,#ôNZ(Pʼзå"˿]Na|{2ɼϞ x`~ùy6I@btyvm-XF~n#CM6v#C;]%gD#C6T(j7O1 rjRdXrbk} ItI;x*:8dM67u$wrxt\`gӔpAG<E2 `]"`t(Bro{7[iXv¦r1xHv"&}( y~llo/_w etg]n_HTIa͠߸Ghv*xCޥ;~f#_Q({*f&~);?b"*#M=&&~?1BPg 7::-~P<0TR/f"%rޕ2"KPu<{A "dW0pJ> \2脳c#&"n էeoq n ϼW8t#74Q`I_[ f8Ke};b%df.%:gg}ug߄s}AKfal\jBM1IL?p /Dp*涌Q',tmb"B=,ѻGQq+>?Rαm \n%HR =n2z$?S|4B3`*e"8Ky%FPcA gmO& y/`*#{m@ZoLdŁEYcuSB0 IԄZfl4C݄qv:_`X"9c/Je?Q(gRelHߒ)%^Uj'2 pyЯ@GON>?Y&OY'\]W/43b S]E(mϾm)|K0FBR^{%L?jRx(!țF+3cHM3VU"-|\(rz ךp-tքZ}A&ήI]7 zNJK7_95G8Z~x XcA*7[9P(Y~k5/v)d,PW{V4[2/߉hi|Ձ!h0^.ILۛ-if5u}Y> CCWxxngѤ*}Gc=ҴHΑG%#-FոdQP;rCIaMq6˜ 2 $d &=>-_UgζZ^쑕 $H>S :Ʃ\_>2/5Oڳ7dyQGȋ Zkпh=(×F! aMq;x>u-*{a _9،X@o( Еd!HWh*MmZ; GBqg]AS7.>o|| ސG>%?x%,9𤼅XADĮ\\,h Uj+tJ V| 1V(UKRb?\jBtY1)YW|!vXHW=e.JBZ9!Ij$)7uos3q[=;}%!W #)ؗف)> 1 Z"R @F! i`c=y. RVKI|.0; əmqΫ gq L-QZ`-wٴBa'2sne{MG5v/ns)N״iQF!G)BWPȹmib5MT^D(J`&[B!9`ۂujp-ѳc'r)hn8enWrp_w[9ǽy&ĖmJ+iSh%X9t1uv=AA ) 1ZQY&|ݠaOID]=47S>kYa+fߺx]A#L4 .V?*b-;QFI̻V҄o =uY}_S- w. tmh xꅫ϶`Gi"慄c1wc-|a4ALvKiT5,Z-X:,cߴ IBIy{;IT5tN.ŸUQ#sBRq,C>xU23F7&KOLPvR}98&N-}5L FؼC@\5d&Qwc\ ekΝz,Li7O$Idf_S;y 2;U7 :yƖKD)pR8ŘOG^sp)T>8v&wqǿ٭Ά)XWiH-;T/nl) S]iIT@ [h uJj,P8ldr?dRT]^uՂ΁@]jgC!E;ŸʼnբK{Cb_K_x VXD׏ThwPTܓI2M)PbըIU+c1 xE wްb+`0n#z\xRv}=S_oE'S6Ā)Th5q4s(n9躆0/!դx`'QHsQ}|lKB*gԋWw7*m)\%ƒB+6!(bL F==Ɨ~_ZgAG,zP2m:d%[iG~pc lQpc+igZq`BK^|1BUqJ*I%eKn{XkǢ}JU=',ކ_gn zxSn,]Ჰ 1Ozl}wf=h!i^́`TES66}JsgjVKIݯ*M!#u3iچ' zn%"DWkśU eU^$yV)D˹k F S}Ӿ>Tg(3z9b/>d*Ȉs2rה:vTSU׶dMzrH_,8Qxx= ꋐ?𓅉,J-vv|RŀU!uK06`Hߍ*\rJvD-cnnw \3tӢ83w4~]ܗBM6Y` bz*|-`P/Q"ӡoW|w#&Q I[)7.*ṞQp!%:!PD̐v pcL ZG>cA1 @rKd{ _yk"iRLPSia2C_G:xq+ui5z2pP MoVpUDnJyL9y Mwic< /Y ~vYg(#O\ LJ4m3D8%k XTAktHlIݣk[mqzlOOL-@}MtJ5e0VuTWSyUM9."Hk>Pbe,?d)̄r8[K@e6_H狘60s!@wE=~ !,!1ګ*zpHDѵ9lLœ$(~2>b&E; g'9;OIEFbqR%O} * IH2i2xhnsIwȱJD -xd8f.Gɉ>􄗋\J4M~-lj6GR+֌kL­z3!1DL _+Dn'-[멥o*4検"3Y\ ^*;^_c[u=DzK4I۱+-> |<0hR޶2[y*`ts˾˃)h&{լ ȣ"E؛ȵ3ԸU.m&yb,9׊ UM ~C1%2ԣA^6u)EH2"TElUg<9i 7Ff@4h ?a W?ܼE}0y2ggثDmeGEO[}EnOzSZ,4KڏJhZhc3YE] L,C/a(h6}yEy}D-ȑc]@hY!<79QyO $ɔ94s`(hMyvlt=T{ UoZRUeٌZ+!>܋rbJ8=y%Ïh> nI)8XAysz!ĪG@..t^g[,t9(gŹ{"E{sZpgڹk@{#N뿺g2!ErN~urrvUe&ɸ*à}Ղ@8 8aS[u5\5]$Wq~d) Nسm*cyqWtϷS 0=ˉ;b#A :@'Qkg YJ8i#`! fH&D tQYFaAU㥩 ](YBKxa@YFB+*JQ2v/ b1*ppz~Va׺v2crtGþZYJtX#yS>oY/ۑfF;.-(C65]#\HM9٨peGo-tzpD;x"Kܾ>XO0!QYcxϱ~ 4"Gtm] QSH7ߠC1p2 R::\[I`r6/qL_ #CfNoׇeHo:W`QSLP3 oUKNUgn~ب[ .?lUnaeCPяnvQ񆊈bea$J"qڂ.6%-Mirl:Z09adbtW2]`<~9DI&)tLJHR[)03!zҖDfЂ\"Y(nJ,Wx!+fh @2DKbӚ dJ_pk :^"}%&&^[1 lv 6K"IzkpeμjXVG^S&W C BPS`6[KnkRF@^/ؼFٚ}MdA }Sf] Ww|.tAe Hb՘lB|CX͹)AfV)p?ץ`#f"ܧ紞륺̠̾I^_Gbj!J_ݗ2uaTQp#(Gs+gU==8"_BX-%Vj˔}RUe1NQfO* %%Kr{Ԥ OfGzjăO%`_-p2O ÆuE]!g9 >I޻4c\axV$|;f~E/ѻ[殆;pv열OpM>MXO{iQcuҷi`'y !7 {#-EՉSo܋3`!1s0gLH֪:L1ߗw^W#osL[#󋭌ؙ߈mX; :z"^{H%\<6k}&oZ̲ݭP (2aTeO\(fR@ ɦ5RS ye4Jm:{R:X Zdv{lIe9\LrJ) V:kg'abWy7}B$V'Sg)<rmjm8p^0P$f]wT ɭs%߅!YxZ$A!z_"l!c] F'89S ڣs;m(flAn>?p}-Rh?9^0@a1+&ʉ%F6@!ST=fyrTtV<4PX.gE[\'SeEhr>̫ ..jd"mNeuin~*%)Ѧ_ 0ht]ᷘv9pš? ЃaOOnyi/@RSLf2W´@SuGoYؠWpJMH=*1%ڦ׶L=F)CI Wj P>0q20:垅YorcU9!nb7ԇZ ZnMoB'짦#'^Rբ>I3D.DEZ'F3>F УZ07#c:dLM cS  C 'JR*u(zX.R}w1؃jRLx.J/mOw5鍅&15O+]8!i.FsFͤ35!gOu8F*~&MJ%KkY -Ӱ+lVa!E /FQYz4.<"u&>PL<`,nH!a3@;缫k\[;}GA; ?42G2ω׻R 7'WF=s?6Ϝ-t! QŁ>?2%~Bm AFB)hV.30ŝFnDN29<~@λ_h+c1eƿ-/!solw}Xb[Zucb+f 1vcV)j_TH#g9GFǘ޼d"e!v]T?n qqr5QDHГ9 _wX` Ic$ìBQ _6yjEA "¼L~LMx luCBf`QS[nQSG#lʗgiyvm9qG[ʔ O8A^QP V; !!2Kĸ$%"f6i44LRd{Jf|TXjdNA'WnB[f0x[w2h(L+ozwQ4|㐻:oarRNaOeD6_o (Sv$zn2KU~VA6F់^kf]ncv"QWI ud2z8~qE*LeM_Ljkť>/[l]|M cK i"(}%.`,e9:DxAxSl,mO/ntI,CKx, Zy?^I"q1.-EPBCS|rXl cÔ|mW gC"q 7fnvʲR7EiqĘn$QIvQ`9kM\OJBYIA}vb&&J(j[dw+غFVg5-]#:C.7y?I~MpoN-%mM!&2] 𜘄$ZD]sk&yLṝmYV=↾B,r(|Ī 3Wgc_tmB<NՓ/b~ƞlOSfLO xNS+} cr g&ب38M0jMԁ 7SݼRrۖ|O{GblftZ"XtgXK?ڡWsaw0V%ׂ@p+OYsN̼ψI`>I'6|A/b%Za9 KJr7lӅiJD>^?у0G$#ovZԄQw}#j7bz[Ơ|0v JIW!ktF;ɂkvR)d],lEuGUXN^Čr6'6_Ĕw ^'\ƙƒ  Sv_Jq@SN!m0+):-MEjsbxڗRwy?*ۂ_sG5:xnS &DZp_O,U&fQMGrkG[[MDKcf] ҒԹlT # NDLcEbE׌t(eGrFA PIB/!qkP\Љ{>AQn7!CcAB+T}I6 fg_zY\[AdvF\ghsO](fyI PTjL ݑ7Ӳ_fFlv>C"+t/1j\mG˃qYB%2~5,hO9k_Ks@ \קՈWDWʜayB t:m}ͽ {8@\ Hxi?Nn)ffpsq$;u~iW ;G8 6uTF !Biv4҅߂GpK–Ӹ>'| Jza|wQ}MмR QQ(; [H/(v:O}4Q̈́aZ/ͅRgM$_9 @3im#pzb꒻}Ayc[Kr:_`xLeR T|Vֶvfb|UutR=.ESp*OS{eT#}T 6AP2Wd6˦/W ?ҽkĤ%9$.n ,vV8[\br#MӍ uCV۔®wWp:pF}( 3WZ!d'%t5DH;R8tVX RjO$Z$OιqFJz7I%x*xFو9;lm%hWS~˹ 4`?=QD?qr (= `jԯB!S(EQaؓW)=U0s,l3@<;f|]}[IԘo `TXҭ* o-5i/ac]NaπLs+p&Nˀ ,*;8Ȥm7 W ^_[8є@Ҋ.8^Du%Sj!L$|Nl0".1pQ}TwDi|61Iu\ M .mQb"71H-#AyWD K;ͯo?]a ̸<^6 `ݖun>)%ďBV5Bx~O-KϾ$Ma7{%5Vb+vHӁY!)Ȧ n*rj*!KPe=WBdBugzn^([xoan\ P{pZn6bM=oIY?봙~&ϩK#.UQ+tq|g}ida(dBI9 ?!V:HIsBxol| &]4.ٟ Ψ{h5S1<;&9tm.%~rB0 jn=Ԋ[ }DcL8,"Y  s}ITOYEVf] d@)@=rG_(PٵoHwYRWgIy83XUu#2.V.Wdc x3[ څt({g%n!}4jᏆ>Pcp3czPuI#'wzd?;6cTXA븸E&8Bڧ{Z?w%KȩL-H=[.D9o ,U9-Q! QQ OK|X7@WGdNى홡~Ӑ&O.őkL Gjr+Q1j(%K ojʟ0 Z0k%F*o*0 &s&% 1-+7=uapwT5J`u+3{ җ=EgELP Jz O}tn^xMHht|/fhO Y4Q SxQoÙGn# c:#Z4Nk(sm E>gI"fwX om`n!yٽua7QN`-v=N%>퍇>eNU v⬋HNpO=~P\0ǜu{ ?pKӱT,GO &Ft0:S; ?T)]q&1*,;٤x9܉u"@0c t@Rp>|(Ȩd=fX?bwlPK҈0 "YoҔ<|JX=9񑩡st`s>Gz6,zrTԉ<=~ظR]''RH*ꉅ&,&rawݕ~ {&c{!eKtZxHiL#jd V`ZmK'u7Tѿ()hgg"Og甦 ^10^|ɾ\HnG7T<3g顲HeUqHc0;Aq5 VCL4EꍏH̡h/R@wYZmwW/6)@ OfSG Y/ޒ7r'Vp Akﶙ6k;Dn30XXޯQ C~V@|_7k`q߃--@oO J!65mQR'Ẍ́jzXT_+} 5S#=P[u%B &!/H<5bѢ Z^ ̩5tb5Yn]_+G<{l -ӏz8$0U•E#@^ZŒSPyɰ55=S I79*74C`2V{zu4A/JK]:R $#L7l\XSu0[R36ɤbSUC_cVb5a˽ZzFGn6H\ N:isUC'AmluO. ⌭ 0O_EzHBՙc;в;ymx p H`C:c!p~ŞDey}XdX 5l_l^Ȁi?*EڅL3oZs'@um?Yه6ril9<ŜGHG :< n78pܢ 8[5)}K1͋Ttd ݺ(]n&G8ip!m?$IU% #ֵg < (HU@<Rj'&/̍ rt/YJL'䆑 ՋTU#KP9*l&E# پ1KE $"cUX+ey)3. ?2%0"DO*+5| VD^9ȫލĒ{ude)( /gYcIt(3$iF1+3$/cGcQo? Fa4u[Ӟ^?! Yu='`}Mذ\# DD4%P 2I c{:ƹI>"~~~LHڈNF`Ji E߻ϷgE>?>j%s") eDޯI:>Jʍ#lRijt:-+y9iF#Y9'|)VmKzXs6I3M_և/J\5\&))f黖joeEb~A$Yڧ8MDŽJa 4*>͕Ƭǿ(C@(}{(!pWwp F?,Fl#i% ~@ g妦n6s ;" {5ms.K}r,Az2M *eJG ԈmS9}%bsT1{3|В+!GƇ03p/T}٣2QghTVr[pl@Yz|63Fif0ЬtCZC_(7n+"`O\:ȯAqhsg/ Ɣj5:CgQ+9.Y 3}\jJps)7iY)V<εJĝ m[ $az8Xq'OE%͈_ƌFjm>$Tiv4t.tu 4̬`KR:f_,])r>}I#`иFcW:e&l'?Wl{Se]ݙ|KoSlqKZ$ 'zKZlBH(ʹY5ٌCgw  tV&*/KL2}TkS$zuFHz91sU5EwЊS4yŰ-r=ėS XW@Pl]vfǐ 8Jlo<>H̒t7!@ 먢M^Gk1?7~Lfy/`hF4N5D5Ľ͝KщЯ̍2Gs.ꞻ҆`v`ocZiFnaRSaɟؗhqnd.2(9>%촡(w|xU1Xb*OL NaT_laً) cˠ`_GӻC/鵽$ 3\[T"`p;'rpj`kPPС/9 7d7{ʆYc&~~o\L)y0gMeTz5w*ɝWY<7f2~&~ +*A#REd|AIu('7$H{g;NѰ -xOViM1WhcJq]'Qq uA86q{>ˠhw_6EFN-=! v9茐~:u>)[[үn﫲z.?RICȏZQ^&xNE`ko\9\;]ڴTlzʞ3YAPŁtg@!Qٔ%Ō44h? mT1,ǧ`BaOYq=,@$)N*Q*()L O:LJj㓐9}ga* zoQΘw{T#AԯP51$rk*1UW/mi~PO3(UUWꑚj5{j!2Q9ameϑXK_1!O'鮊o .bչFSHalcsdKJwd4n u]뻂Z8ߞPbhS1ŝVH/X!\%$$J‹)ruFvQFӭDaS|b KZwf͋F2n@ȃ!ᗒ"RDN-oILJ]B(LF3̓TO{q nOzI:R\2{uḞ5a-?5뇱eP4&J.;sҖ } }7BhjqҶNNQ Ξ x+SSbᕳ VMÙtyKmG!ͦ֏܅Ԩ1n| S[zg^,uʑK_~^}_P%nL!D#,e>&Jkd?C},edg]]m>ږ,:_\-P I`Ӽ/㪯c ~pE;w0Йhn}(yI't^:ȃե!mTj^ېhdfCKNt -nOȯe]Bz KdNoE*ﴛOf'Nzw^-^ *T)G>AHo8htǜtlAa-kEėF7%˚~BJxિf{&^`Yx%tK$;psk؀]#2?E Н[ zܪfd{c|OHb80K:2\j=]79?`ҫ-\ˎ <4Jԫn7\!$#@#C5^XH|.|X0ƿUGLw& 0[S*~ yQM6SLGPd"[n[r^muyi^dnLL`+W7mqۃQ]4h`WVgE[>\㼴0&29+i*Es%g.B?buu*J!e@-CH;5ASjqBTͼV\>Y ª{gȆV/urh5Sl:vTrw C הLpGGbFrXYvmqhK.gtE%xl m }WjlS@1yF}qO? C(h(}@(~*#8v%0i`2I c-(W97`jĒc130$0%h#JST+iF½axKn_w6>g=GZ}X_Bq2&`؀E%I)' mv3Qn $&ޛlkaWdWxcZ0`-tҢ{\w޼+GenQ?QzJ(dϧ>6RhXC p#a^z]/J@2­3@xh.CC^̏۶; $7'zrd6wy!LMeoڱ_MU[򺝵QylI,Gf\C#9dB%qu63>]w);.野a{rFWϫWIC מz Eڴ0X 1ӏF4)+x%Fj,ُ>,HfLĴзv2U){Ξ6K`6Q*hzVĞH[QBjkzp6DOvM}1Zy^ߌG/kЌTK׍OМ6G!Lg^uY}J2v,d*迡}ܳTܻ$?[퐲QLwq~ޘVyr׉uba5ʂaUЄ%V .s)0f߷kP)#>t98ZPU Va]#1tK04Z0~ʑ ѷyUr>D*B!۱ɪ-\L|SڶMD,ǜ|Mz7 N,Y"tiBWz>.I;* : =ѾJ[@ 5v%IeNد7|R6;vϦX+M6޺pw$}% m?4 fRx1WRs Fp%XdhxxrШ%^/?~@ vعRk ֒zUCc__`S@kTs*AJν'x^w 7Yq'u~_jQvGuWNO'TswR=cKC578DLLRDPHq/Q[Ðiݠقk Dt0?.vAhV3,"*oV5Fnݲ4!`z_#M9ȿcx*.x#Qv@g_$yj46!L!_5>`5л9X)@kq ʲD=@7 9 6Km"ӭBLP\ 3 "3&t/nXwp"EI4FfbE\(ě Jk2lH~ֹcT#.* p amGa/ c8i&v$Vg6{;腁^JP%QNSDHB(V wL)7!HSPԼE }a!s:GB;й`,S* -oιw յPO @nePe@Q9pfO)ށ f^|ΎdtQy 7-M)*[z2ـǎiBH5;9~h Q&U4#.vJKһC&W)$ a2.5R$ [>VercJFy8C ZW!{ZRmGNB7%[u*A饱.|ACXQFB=ܺNcFмJ\<4KP=W`cɬшՃ)Q؜),z5AWuäWPW6LȔ4dM)xN꿗&]Kqo"LP\: f, F)]LXj9 2SF[FB"ǰ*ǚ6_EP7bƋl@xv\c) 0ޅOpdqѡPz2& 1YYYi6cYE!h]W$km".POM'Ŕ"ig@v/:@G`=XYc# r?f34E-,g[fv~yV냸V۩&K#^ZMq\褐]Ӷ g$ Ǿ zp)Qi3(r^}$MqMX%=4>rԻ ܾSjJ\qb#zZ8o"#0- Nv/ow<4kYQbd*f0=Z;}!u/ KS \B!U ԇ:8y6*Prʧ|Pi$ XJ='n{ S-hΏ/h^hfyTQF8f$ V:?;VRz5!T8p5b,|2%$eO镤 Lqp$ 뢕(~zH{<0@J99odT;p8iȧzf.RDuZYIthnj*^A@A [KhP[D^9.L0t9SK fQdy`z҅SRv-_vZ0{uOaM(rY.Ҹf¿$ip[1KgSٳ%N'0YB3RP\*m?00(hZM)Z&b/2"$77+bphVh:#g.`\nhR!j^ 3^TukPv& lxIǛzVbCHQCnNעCm<dU@ @W9|WP<0Y[[]%9bQ}i^'/̂8-5R$PT.?b(5-]ɧpJ@&IxM!m:h5Mbп6.,D8bXK]N_lO,eavỸ':R|#*eQSxb#Mq7SOxbN¦dx@k~lKSv)!2ZAGM3CTn60CrɲD˥xLVj rJ%?jRx}\M5Hg 4͝&STݜ\X8:`~g9A+"R#W$ߏ_2%L00VKjo}{Sgr;A4ۻiiV=[ Zo/&?GGX,,Yc.qTJZyޮRM7rɽ»0~58,;o ?0r΄Js>bgۚJ^C! aF4sI^j.c8;ㅵ ׊>4Vumh@ \4DC x#ʒE06+B$.0bw\rQC(eWݤB7ScS`. +^ ٘w#qa:pW' :;ŧc;Bqclƻؾu%YsOvCcΊ)prdJ@et' y I^ 5fr^C8AZE };#Zcl+VZfPq&\6߱b'Iocs ly&Ko#*il<qu(6,эCfEw`!LQ{>yo7Si7P5u@!_/IXUd,˼rD@mp"Rƞ -"t*%ɒHB,Q' zWp=iW* o 9CR3 voug™͝) 5%W R47a$x..Ng! 9 }zr AyziFWu"њ>L>(lD7݉Aj%RjfaZ~<]D@GӦƯdގF M8fW]8v!RIO!W \O7vE:<0dM|\'\Ew ,0̙}WM;ZĖ`l΀8@1x5lBM?z(_cs6}n؏#9  Tg~5-#m\rAV5Bx#UoB/ֲG%Kn~biwlkztrMVQhEb8͗ؒӶ S;[l*uG)0tlNdmII ޟcxK>_lj]eYS(r&iqqKJWt *#Y{t%58ןuhdr)S&s:4uAtv"Ur*Gj5$ZsîM5-8ܠo]{H}B۴B;)aahSڒi\2;(S0~ܩ 36Whfr7_S0f|+Ocn5$ T{k 6;?(m !:ٜ\n0 ժ>?;u63/(|_5{ϵs0|y%kv۸XhؽI)ͩ{W{ӣ+ԝFbPUGcC/rL?Fr!׹-Y}A0pyBV?hWiL_ʗY(S:-opzbm#lM^!AL|\xq1i :`e?vG}mF[3Fe/*4Ǭv*l M0w'c tHT1eLa $k!k|ݒ967W B\2`ϠMPJ[A ڂ6SD\KSdPx @5 3WC@!G8x3vPO[rN =+&R9};枇m|*oL䐩(w];囔6ɓ +2l u7܀[m$Yrxb྆V\#hk 㝨[|M˅}%_y::Τ9tn >י:%(ZC5 ֓8V' 0qmHXx3]c(K0iydVEmA'Zᚏo8Um c|A;SWF?L#:{ o4bY[GE+Z(rxZ>1;AJ8TnmZ9fNI" U3Gs={GdP0w#;FU?@a^%FcJւ7U*F4Xļ+0y;Σ=PA|D&8O=X6R[Kw=G*}i6-<Ý2慗d@~kx^OȈpi |8;H F'E/I3ʰ dYOWju5U ]-=*Z?X̍2[B;D햓.͹4DG2nKj11 ;q^x2)}7z\2-Fb~:]4#ebERf&PɊP0"%|Nk M]1HGJ]*ӹ{S )vO_ڻсTmS,p<y$C]Ojkv[Uʐ4CӮ으?G {geĀ &># F7ve9id5p-)̌bE衔&vl:w3M>)K>~K`DۇLjNEVC41(VHDXӭUDYH$Žma` g!$_i" zٞ Z-ͭleȣWu #s~LM 0lL&KXB_ |$Q4l^ݙN =uP-]}{n, ws:.KI0ѡ$Z)k⾽/ʙX[m KtN׮t Qj:J-cLH É}co=Hq%F5B~p*b^:9) cXwv×PG EΗ7W0;`t,k29Q ԡKܴSrG ScBG#6]>PE¢u,g&2lHW妐5O uY?cݶjEYcOl>AD3П?%vnXu>p^]^AS3vMH7Kh TǯhO)C37D`ϵLݠ]<5(~r$__XΣqtS%g@M]38b1\m=bvt=k-r?:dl{Ư~iM@XyZ9C91QOFJCY2uŘpZoFǁ.qX]ʻp/{eHB+7r6*<k{/@.WdqE(` IlTr']<ڻʪ bf^\!;f y /:F!-iGa578|:CMSE5-n>ygtP7닅!|LOʆ R%أc/ҷo bW; {⣢[?C]26Av}ϒ77_F_.IJB">2\Slz0tR0+eC 3~n6+.KjK#ǟm?6?Gt͑?mҧrȮgԨw+#V y*=/v(7' MY,۶[ߡ\$^Ɂ)?ˬX<yM3X|'Hwy5,1SIVr~"̚6m#ԛY;ڮR!$NWM :JTg稐V% sT]ʗVUcf1;:=j v|Yl .X@a{r+%H>ߜНզÃɲa ǯlO7Ҿ?y Kf4K%֭T3zYVj?|%Ax//Joss#ky a93lQ$RpNVBsKWKGV'&*-@[P׃^ ! l&`$LfQ ViJ `SuXJB%.c4eHpޞ9)JDT.U~h5;<4ð|}`g_90^2ѩķ-F=,s\;i8*H3(sKMQ(ӍyJٜݛj(`sJ%11ka\cuwqHnAKAi >-ȈljjzjpPh~Beo=V_}-DqB/OG= SzV B念O`J*j p7\{b^aɗuA4fa_T@5?-.e⸪6fvkf$&*{trڌ? v=<AaMzITEinw5<ٔ|ԟ`:dJP9on-3sB@bZE%EMIE=kJ~ufEXPFŕ:hxOE%jv'p] m"Jǹ]Yxr!6l5.pH\/ s4]iq~y 1Sk1=Z@S)|srh,I 9/A6# 2(=1FQmUErMמPAb<˥/vz;d ~yOz&M "VȊ9it&K ٸl(=,=rJsm߇H#8|i@t:ҥĉq6waO[SuuS(0By{STgD28 Gv _' V=uYC}NeI7%t^=STLC3S}~wϫ+xx_ :7ҡ`ԫ*,ww4p,t\l޶RFN# ;TR)E ȕQ&BKQV^t;EI^㝥)Դ 5/ڂ͕4KO6Yy荏%fϹb;d;E XMF_na`8`ШﵪՌsǑrI:UL],u_J̜ۊT}ULԚͩKgrUK8e%đBm#IyGFKlɹ6̬gq%|zUа{T%i<_tT#/ 0KF0ȑW!.$a $%AQ5( \rhwhfh+k(Q,sryBQ y 3lEYյlw=Įuy \yO<0iKQH]usq4;QBwih׬y0a$MF7DkDДrZJ:=Ћta@L]nc9:~ B&L㈈v.m="RZ&_Z*[_ pהfYz+2]Pg@:0mZ@Ie(@ /ݏSw1p-ħ Ξ9<δ{G܅bGV60 P<,RN;Hʹ%--/#6Е/ sqBY')5w!%NsHmKId/2y2P-Zj'J;rdx%!(ΰס/3/&x;&{4v?1=RMs2eafL)g %9[ YZ