samba-dsdb-modules-4.9.5+git.149.9593f64a5c3-lp151.1.3 >  A \쁸/=„uk fxfR_Afx&awLnƉCpHw5N4^ !E.CD8"CqnBϞ*lBE#'HPB+;D,Z/6׉U}",Q@f6pPyNۀ(St+OrGr3}8E0JQl-jq.JS8$}Mjs*D޼6!jݖ&zP%KpYkG=OPUZpe72c37fb6cf918b7805839559b4f7a092fd522f3fac0f33362511140d1d299f0958cf45257bde795aa4e0367067360fbf71f0434@\쁸/=„y|EOyֳ,0J]XJK<_EGEo Jqfz3BXy<ˬUVfb2B`1]mjjgI㓀:VT=Z!shgePksnU{ P,, ƞݢ< Z{pλK۳BŻP5ϐBcl$gc6>Yg5l%Luhj)r1r[R;8)ZWNma24,lwG6>pAx?hd/ 9 K 06=0@0 0 0 0 0  0000}}+X}(+8+9.:;_>y@yFyGz0Hz0I{0X{Y{\|0]|0^bczdeflu0v0w$0x0yz"dCsamba-dsdb-modules4.9.5+git.149.9593f64a5c3lp151.1.3Samba LDB modulesThis package contains plugins which add Active Directory features to the LDB library.\[sheep83popenSUSE Leap 15.1openSUSEGPL-3.0-or-laterhttps://bugs.opensuse.orgProductivity/Networking/Sambahttps://www.samba.org/linuxx86_64ln -sf /usr/lib64/samba/ldb /usr/lib64/ldb/samba /sbin/ldconfigX7ww(hH X@X xG('_PxX(wH8' (8'7ZP(GYH('x((8(HG'\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"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-4.9.5+git.149.9593f64a5c3-lp151.1.3.src.rpmsamba-dsdb-modulessamba-dsdb-modules(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfig/sbin/ldconfiglibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libcmdline-credentials-samba4.so()(64bit)libcmdline-credentials-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(GLIBC_2.2.5)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgpgme.so.11()(64bit)libgpgme.so.11(GPGME_1.0)(64bit)libgpgme.so.11(GPGME_1.1)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libldb.so.1()(64bit)libldb.so.1(LDB_0.9.10)(64bit)libldb.so.1(LDB_0.9.12)(64bit)libldb.so.1(LDB_0.9.15)(64bit)libldb.so.1(LDB_0.9.16)(64bit)libldb.so.1(LDB_0.9.18)(64bit)libldb.so.1(LDB_0.9.19)(64bit)libldb.so.1(LDB_0.9.22)(64bit)libldb.so.1(LDB_0.9.23)(64bit)libldb.so.1(LDB_0.9.24)(64bit)libldb.so.1(LDB_1.1.0)(64bit)libldb.so.1(LDB_1.1.2)(64bit)libldb.so.1(LDB_1.1.30)(64bit)libldb.so.1(LDB_1.1.6)(64bit)libldb.so.1(LDB_1.2.0)(64bit)libldb.so.1(LDB_1.2.2)(64bit)libldb1libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libndr.so.0()(64bit)libndr.so.0(NDR_0.0.1)(64bit)libndr.so.0(NDR_0.0.4)(64bit)libndr.so.0(NDR_0.0.8)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.9.5_GIT.149.9593F64A5C3LP151.1.3_SUSE_OS15.0_X86_64)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.4.33.0.4-14.6.0-14.0-15.2-14.14.1\N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USanpower David Mulder David Mulder David Disseldorp Samuel Cabrero David Mulder ddiss@suse.comnopower@suse.comJan Engelhardt David Mulder Samuel Cabrero Samuel Cabrero Samuel Cabrero dmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comSamuel Cabrero dmulder@suse.comSamuel Cabrero dmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/sbin/ldconfigsheep83 1556933467  !"#$%&'()*+,-./04.9.5+git.149.9593f64a5c3-lp151.1.34.9.5+git.149.9593f64a5c3-lp151.1.3acl.soaclread.soanr.soaudit_log.sodescriptor.sodirsync.sodns_notify.sodsdb_notification.soencrypted_secrets.soextended_dn_in.soextended_dn_out.soextended_dn_store.sogroup_audit_log.soildap.soinstancetype.solazy_commit.soldbsamba_extensions.solinked_attributes.solocal_password.sonew_partition.soobjectclass.soobjectclass_attrs.soobjectguid.sooperational.sopartition.sopassword_hash.soranged_results.sorepl_meta_data.soresolve_oids.sorootdse.sosamba3sam.sosamba3sid.sosamba_dsdb.sosamba_secrets.sosamldb.soschema_data.soschema_load.sosecrets_tdb_sync.soshow_deleted.sosimple_dn.sosimple_ldap_map.sosubtree_delete.sosubtree_rename.sotombstone_reanimate.sounique_object_sids.soupdate_keytab.sovlv.sowins_ldb.so/usr/lib64/samba/ldb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.1/standard/f8490f6d0334c3a4fa732b71fd01beb3-sambacpioxz5x86_64-suse-linux  !"#$%&'()*+,-./ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=234ba1aec104b213e04eeb6ab9e4f29d5c697a93, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=309b0aebfa1fd67e8e8ebe27e86256996d482464, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc292a62fcb423206ee0ed3ecbfa0308cc9ed717, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=748cb82f8efbec52ae1e8dbc3d8fa5643ea9b1ad, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=25fcf6aaec64b6cf9e44abb7246aee909f1f7e85, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec3926155841c7c1c90fe4e76db34079cd5be738, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff792daf9fbf34140deafcac010f195314287ac0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=165629e81b54c83d517eeec2a052819b330a3500, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8801f0b1e919ffa71ab011f801b749b94d968b68, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c60cb23199250c5f65cde0b6f59a4a5909c8b2c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ddc3c28389d8df9230c934cff569c287f34c835, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e1dbace604e5a6dcacdc1e3ab080f9bc241cd29, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7076f2e7e40396531e00265ea6ac83aff271ede9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9574333e579d12c5cd66c9a729f5b175022a2906, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=195b4c2facdaacebcfb1a4cc142ce14678ddfe96, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f553eca0e8d391c1d4db83b3bc399a19ade167e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed3b570057c82e25b8b4b884c246469c55c4fa31, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=124ba0e05b50b2c71e459da2938220f756554695, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=14193e57fe46a3c62f9e1315cd28d78057336112, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=deb51c65b81f11b82484cbad7ef92825723b1ce5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b644cf0364d3f2a08e03b3396eeaec74e95abcac, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=93dd42b30b1d55976fff8c1e94babfe0634bf08e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dbbba56f9f0e5f50fdce4013eb8a827e0984000f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4952da7bfab0cd62bd913fe9bb0205e13236952c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=48653fb4497d20572b77068b9262f943aac89ca4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9fb7b02ca9d10ff6df8e10053194ac7cf7cd1231, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4554c4173d1daa9862f2dbccb240d614b6fbb7c2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f4c03893866c5b09545c57d681d56bda59cd0d09, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=32f489d694b6dbb7367fc3f26bf533948a59bd34, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=20e20a4a9b71541cb8769865540cf4fa1a830e10, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ae9f563b899f3f8f955961f8d884568f58435d8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f9c07c1cc50e8e5b710e8c20b748f0e56c93621f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=334b89579a19dc8b7d49930c3a0ea948d86101e4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=69510b9f8829a4513fb213714d814bc136332404, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea4858229fd82443272686d9bc9184dcb3daeb28, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0937992660dd28cce655fa2b97dce6a103d76c5e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b12e55abafc57f00cbab9c0dad67fc95e07912b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c80df4525ee6f1bde82c591be7265523b4694af1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e3eb7a6623730260fa351590301d4c434b482a26, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed85176cf01107d881b2893e221a9ced8425d7f2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d945bd5d205055ef49141fe1d7195de20a0afda6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3cc455379df4b9d41c1991605417fe806ee463e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d01bc204eb9301fb15a44d00e80de95aa0b4b14e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6fe909454f8f05324baa94f71e79c1e954df5ae1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e70282a4a36fbc2dc85055ef003d15265c520892, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a6dcc52bef587ecc1a2b2ff60504f820af03bbf, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=406fc52ca3810bd17657de04ee907b716a598048, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=14233b528787b5ddb5af4e27df8ba0bdd6492f43, stripped9Fd}1EPYyIRv 8IVas~   6 $ - "   RFRR^R3RdRfRZR"RnR R R RLR1R7R5RcR!R2RYReRR]RERKR0R4RmRRFR`R^RLRdRfR"RZRnR R R R8R>R?R7R5R!R_RcReR]RERKRYR4RmRRnRdRFR5R7R R R RcRER4RmRR"RdR^RRLRMR\R`RZRbRnR R R RR7R5RcRYR!RaR]R[R_RKRRR4RmRRdRZRfRFRnR"RLR R R R`R6R=R7R5R!RKR_RcReRERYR4RmRRFRdR"RZRnR R R RLRfRHR;R>R7R5R!RcReRGRERKRYR4RmRR^RFRJRtRR"RvR\RZRnR R R R7R5R RIR!RR[R]RERsRRYR4RmRuRR"RdRnR R R RfR7R5R!RcReR4RmRRTRLR"RVR,RnR R R RHRdR7R5RSRcRUR!RGRKR4RmR+RR"RfRFR R R RnR?RuL 9/18h=#HʍEkPU (#,{Ҿ2͋ 1%uU# GwQ$r`qB6Q QWK3;eY xʜU}P싐u;b௫@ V ) -OۑZJr]jW_n8RwSpCf3n㾅JP$|<΁; ѯ%p񫄥X#̐j|jZzcԭb>t`;I=[50`yհ1 Q9I ĈF|!YDFBiͤr:-<ɺ$E=Lچ`..8t5̓")[q ,![̀ Hb1L`ӴM[ S9iR$_A8%a&+)U@8wjFO1}xDc/ <ĿR7^_ WCdd.u.dӾK83OQm# e=uRQ lirq]UW7*#@= k U*~]KRH3P{iYЄGa+7خ?(L]ڇd55a=`6'3aA$nzoĖ:Hn=d81(”b8Q1sߞΎhj1pt}VQ!%#qRK]r4?Y Y*Gn /?5F^)_Gc^pk+?A!^kSc)Dsh&c&8[~6OD6եDL*:mO"5 Epyf[۸'Z0=*4.7x mZ x./~{*f娄w|2ȍׂy '5N˼KJ9Ip淆zu>ScSEg^ :>y&".7P㮥k z#/ 3ÙLW(j&|;n"D*fl*S-[ l/M<{ZL8L=+ԖbB0%PK']鍫fBa{ڋn|aW6%5Cff32~_uOt73/w$vX60dB)\'; QtGm݂뵰G y~|rڈ!+`Кӿ-Lnu \cU1]oZ;zOHųh,o.r?Wxr@0ӊ!3бqy/g##eՊ҅^,d{:O ' ,xQikubޭsĈ3<zusӗpZPؒæ FuҲ94ʧ-3Ep=9ҡuξ/%` ~X0):h!L~VQcgbjc#iO@3bc)yjQC_o_?;,gy, w&j3#?d8im,k_ZMu)=Zk}"/>ML'hD 7ieTD?R@#Ԍi $. h}'ϱ-'%!*Z|cw0G}Sq1󈘧E"6v.p`G Kj='o:\kA%JU[pB*Ξs$Iσ0+/e*7|qwO_|`!z Woj""(.N̮W3μ6\C R"t5- i;3[o$:JLFld2UEʵuhnEuw7yN<~L}!΄&Y' F)1Cb`xs-%bQZ5mR@(?=M  SFc1J;8 QC睓Or.s,ťvjy x$B쟝I@8NaS4Qە`8ni  yx#u=I%P\޼%A-sfddk} i3Fǀw&$+7SU҂B/>Î}@⑥ {Xb1<նΕwj<{7| 2jbډD&At,unDwVyYH,/!;w_:eRB'ӊcO'hC %Gl!/qūo֩@Yw^0s&|B -/!́v[Oe+ _IEdZR^hO? Ug&]87ھ/!Ȋ.mû 'p"`4V!pG:2]/#bmZ{Y֑>]~fBJ1C9^y;OzTpSS%i)Pd`Rk& Dq-PSD5warSGu#mDIYp@PT?*a EsW13q5:ktg&zGjE{=o%CPm`([URgI`847ٞ*v΃&;qxdߝy_}Mޝ\C3 #خPI4[(?\E8(ƋhR~)mRcA;mt{W"yFs]~,Mj#OQJ❌ [7i%sIkCF֎-fVhftA橉X%X²-[Ɏ SQ*uյɐHd@c1D;|뜴tNSݵ0_'VL{~2NjM% ʔdk,2Q7z$Z&g쭯vDADȁ-e,xi;X[քrr]:^:~ҝY-_gS+ )67i+Mw֊ht+݂Y(b:]RT#0jB1+ x( %BeLz!3J~q'Fb-I⛍Z'AN 3gm:`J,oqS%x+%hz)i\=Ż !4wJcN: زEeWzoPpa]F=^9NJD=rTD#|DՏò֤Qì.8U,Q\ V]9v,-ۻg|l"v*$ *g9@˨6Gu_tp;"a.z4&9kD}2 yZ*UwSս1k=@M %$(a̘0;]Y 5 ~tUlٜvy>z0!,#j:܁c@N'=^Ӻɇ%!WA wV1ziig#ⷅzllBN̈́ P eZNsNz)Cz8o! ;V_9PL4fRbfTQdiw&||2D9r"^܉JLX.Sh74I҆@rڝjJՀ͔}q<蟲H_ѡtNH#c-BTW>M|ijG }8)(h|ƴޭCe "X8&vQ&Ngs.I[(+T,pOsT~n b O<ՇbFGJ](L4l8kOHff\ڡN5CAtsܜ5OK*pԆ_Dg NYCdgVk\bN q݅,^Y'iAn>s|Xaoy2 [;BGli,˲#ëz[1d5?1u@ <ʎ.iG3,7&MM]>΄ph#:jzoi-bwdҒb.Fw7 #~dT?VP ~]ɀ!][`އ'&M->IX>} ~z"ZAΛz8.AMA~ $½&.>rF]oiSb1$y-.{3TWy~8v%#![nSn#;dW&ѿҤxEڜ!ʉO GJ1|Lc33邓૗$.p;6l 2,ic|+9Y D4/XBb+z!EJ duL*B֝KQpLm%C<\ _ۀ*j(:ޮI`K:U 1PJ amqd36iJU2(n Ӷ<;R;3ήęC0k' ƴ*`N$TIvgcOO#8D5GbKZ,&Hˤ;QetJ<Ǜ $`a݋B7T(vYx5lXڿpU6^7m΋~sU7k:z2ڌ STaf-c-}CxŦK$_tKsUrbkvkl+g{Xp/gW` ـnx0;>HkGuwkcqx6٠ ЎJBe+H`QBF&.b8ҭaJuOK X`"iyY]OU>XCbaiHFM]!GD6Xz蘆u*}qQ\|AF Y.:nV7nH9XVvv _IDDRT`l=ق}lVۆ5kR6{V2:$UY7xm9Δ\# yhhMQ}?I$3<|0=K88 ?4X)|vQ<[g^e3WH7MFm:QI0sÀa#O"jJwgܼ}' S` ˂֤77a?gFV(R9A=0dg%{}*ޝT14-7[|JhN4IQgRL <EAzGAmNCyFoǷ4T$ށŀ4T߽&-/f孽*jeE.hbRgHS :bR=cgLw"eN`#s.9Гzvo}?;̔-{ITr1ezR-6õl@(d!VEtWZpLTvJiЕtθpK0,*@t:itaO `B<)MWQ)[ӎIT'Y.9tԗPkvZ R͡9sgAaQsܞABPjQg; g w`c)iNA] cnVw 9ֹ;Sah>s `]_8 * YG7c}Q%O?٧EY4b9t %M0zԢN5:zS49L{ E~R?la1=Yp@v/`yw֫%ϲ\Rgo [>sl[(i4D/ake3e$#HeD11Cg<&b7 S Qw'x+ױjڃ  ^0M@E)]"XIz/E8O""WOh QoS4x.?N*$܍[L';8{u5Z^>KzEC}}ECDG@*u93{D̳#2mft'4O_LDG[<3b àg|WvP>F1#84X J&zP+Kx%h0c@JzK5 zhVmLH/%C4NKoV=b)즃 Y e'cKw^Md &;}[Qd(ơd%ZG70*|:$/e:e*9{=җ"'K$sX/' Iz0(IznKb\Bս1ܐm:g?qLi^ƟssB#Zɨ"3o3hwP<0 yogx5Y/b8~<!21$ػg-_vԚӄ,b,h;W'?KͽdHqV+&M[Y{Ϳs.)֚ހ՟񪫚q€Au׊@eJbb\䪺d ,G'kDV+3\(:1Rkk*|;γ,,&ȒMwU5(P)lNJ MsCU5;Ts8\x|S<-_Klhe-he~1HX@ɘ/z 5XzV6 o:Md5A^GC&ޙs <n ڲNxECLy:tw:d hf':#fJ;RzH()\Ac/8Vbu&Ԕ~_}Rs6'KIR9BgE21EؿR7.mn6>4z ji#'#h/%6; Wp_~zo<_69I =8ӐWFp šcսr&P#ʇx/z*z5Q*{ߠ|h<筰-cj _A&ɚNrNc3^/Wj/xB+b}صgUy}R9j' Fϭ!\5я:eo#bń$3 =ڄsR)|2&-uB6uQ]5'9scݩj&9dvդEYVt}jc 4{^tod e$C.L|ni7NhRb0̴KSp 4L| )o}Te@ *G~SrǠ^ Q%xe\'H mA{7qċG' ᖆsӉҘshb,#UۀTFY3r |a9 e71S箿b3xs_u҈)?3MC:̮Vc{@ۣ@d|Կ/_|]̘A#R}-j:n;3Rbr** ,i9_iqnOH Zv*l<V kQ „/ I\FJ0Ĝ.?J .qNqcBK; g*DN7xDKD=PŸI4QxG1^榭n(&8*ikڌ?4EE xW0koE=,ĕ\86䂺E&G&_1o->J0*ܥG"pl{pfkIiȎI$Z,\2ufYCRĘB/D CmQVŋ[NLA&A*K[xoj>W>s )B;No'(SUҴU20:hY^"m脭ǸoP\uQpDu/͖[T撾c*I_-Jy5A-VdU[e ,qօ-mhw;Jf#j1|Z-LqKJjj[ b+gI AHYߛS.FNJc#XRP}uH(fX >7Bpd' Y,^.w0k#-},8W!"HW~KU1R? ACt鮯˩9qj{"UA(,5eOB PoMXA&l52{sdje![Qԁ{0+ܛkNt?M`2fsV6[@4)|yVwJoͬui̶THc0uBO;FV3WdA2X]mPKr1iz#C?ڄlPCp<FT;bqFYf0p'%"XxG+WsspYF00t.OH$)*֒ZHS7Tw/R-;S kdJoKMB n٨{ )@ S<a Iܹj:=K4R`UH풦܍U95?NGT S#4HU @qQӔ/D侣L+OFϤݓ8@?ǘsPL&ZE2(T5HyCHk<3[v)u۰9PxֺEh%Ŏ\%8<:r@?vv7ä;#>7z|{\OǤ<ó-ÁHU(RN.%?J0h_Kn=3;mHM4A_zNoEc a@,I:UdC{˿cUO63 ]r9y8b *L~|(q1P&+n3+Ǧ[-4ot{CTq_f)FnR$Ii 4zThզ!s͗HЀfJ"cĨ.DXflN5 }G|zgc1շiY/']?EO6g} d^5QC, s, 4i*ګlIOHo xOlz@HA> \8V&F4hez_=D`Pњ *6Rs; HlQfō۔&^# Zk'7 /k6H"}x0S ͜M`VW.ĻQ]k5`!xMP7Qvykz<6,23BۘIG5Urg[N(ҨDIטm94:`OjI{GI!9 91G -uZ7"SrF?{+Ez=+ i͔}:lm& ^ cvh3E.zdaoH&ian@]j>u *k8*@C7}c#X? }!n+wDnERNidM O98݂Uy7PJΫL1_Tu!Pv4#xuZEBjt{jL̵#F`H x5AP0džd')tӕmC\72vFS˧+MOw'&X[ԥjL! +9k[~Jܷi EPD|FXb|˛}FlQ"XF8yK4.1Vk}݀d*b$a%}#u^ysr{e:!^(S_Q#gpxzhP ?zVCte\=@59i85+pR؃NM{=ńgP/xyg6avtڝ%l?'Yb8ͦ) fqMCC29rMFLJ`'Z(*F;3p;Jªi ԖQwKJ8uP=g"wZ^RSKkFQr;B#inj|>iZw_Z'V}WKDҰǛsqD{(Ub=>[[^bB*ܳmXb>Ӵ#+l*_ tBs.abn̓jem?Tx;ZZvo-m3_ U0LA](& *dq4ͽ3t@+(\U/"~USkT:2H٪9V(?ԦIyMяb+Z[8ws Y(̾z{!>e9yu&<c ;?eb]u7$b"B+Pf@25nεS eoDF`czq~> U aS MWM>)ehyd7ZXrN_.4ϔL`v Iy̨ rU [;-"48v&ƗlB O Q R?diRƄ"ղv&h.Kn9H|ξCg-n|y4_p!l@`׶ڃ~0vY%̎ɵFD3`£&1]Sց%iE`dӮ̀CӍr?ֹ.1ZcoRͽCmǎ<0ʥM׮g:ц!=#`~E([R-@tлndwd҇ _g?Eraf=2ZӣpDd8{8c[c>>Mޕ^Ċ!hŎPlin>Cjm2hy3֙䣒P28 |x`4gEa;5xvv; I|Y+ tXp xmR!SdE&/4SqV~&ꂸw[RL7%\^/-H>"N}NZ3,nu,q}?I;=::,WxGlI@dP@+)z(A˝PZgyLhwŨa#-F(ERuw'tPFt?/ ֽh=_b;WN_ӬZ~`[ \QP2E)|Qwo_0bx{ YwG ƷO^Xھv:u:RZ,kf 3N?rmn "nuN{qldYgxLq0REφhkkSV38Tzgcq&q5a %we.*dwO/!rIm@Sj4Lz\8%xUe}#H=`j{Jzc2Hv4;k pk/QMe@ܚsq)h1DKS+3k4AuezSu"gWzmo{l>W7gIC6aL"pC17JƂ#L?JsX٠wfPT,+L>\ ┨d02s{[a¥9F$>enG8kY{T=PZylBwmmCPPS7IH=uI=\mHx~r\oo:]nWqqwvw0U0btW23UޭLDW2ynw,SsЀ 7:eM$|UOz6[(لI,f:\ #d|ԯyp/v\'SsFfh?d Ci>un{/aᘬ_MW  z7;#o?7ǵ}E2; P8~\ݓ|t/?_Nש2wb JŹ*h<臶g^l놙!]'1^]'$d|M5mcP$ H'?]0&n%}R0EPzC۴X_;䪠[D5{V_7=:=!$C.ܠz{?o`x2ܘ9֯.6ާ+(:09̾^qOgX -] ;j1ŲcJs@3j 6;h{>B}RȖl)͛@fH Ep` E/ PkWn gwD5]`Sݳ ]"%iU -pv7ȇih8<}@^C{>s&;d; Rk3bdߠ 4>vT5* g",_4aa* jw NJu}iLtβӄh,ǝ HVk 6{4 PM}ࡄyhwϜ\.>mgx\o.,2M=}2)^J'^K|/kMx"Hy?W4 (0&쇜ĸp'ٓglijTf~)o^sђU6V:A *4W=2 M="9= k) pcUf09lre'Gل̈'s B} &!_8ѻi[ u=F;O%N- } {z;Ms7 Z݋BRxWDT@U׾p7G"G@@9q60妺`V@g"T8X8>:%E4 F epsxY $X#˃EbK`3le$C ~YdLaB&"ݮN!Fb|h.PLlF0<9[tf ^)9* 0lPMR3dbO5I`!@N3tY7ci޷|*;ۻ,2tdU,-pp[iW| ŁBtl*ݮVO5Z"$|X̼SfN5Χmp8nJ"KG5yW(b*d_k"B%:ھ'x_|Jd$v0 Z1rnפs@M+u:r pznfG d ˺uJS{ww_$P {b4'өTg\ƾJܲ <,8G-"eMj6D4 "x[Fs'l,0Tj]H%lSK~{ꆡO4k# ʟϚ,1fsQvv+J~? --a0`uᤷ-_?}NSp q_<z{"soIhq^) G*j.Lx^[%1fߘ(N+:VkL Eamɀ [ld9c] | jf2hL)F]1'l78ei=7M !*6.øĽٿ!pF=;fvV9 xw(APP*hBH@But{wN1}KeG]S%O=d^Ӡ,lRcpEpNwh*2>E{Bs괻45Ibς*xf mZ3ÐSM}> nt#x32ޖ, x>&O| M:( \ or$ "RƷ-ܙwh+ݜIʒ{:>inٽBHpp. |()4܂}ސzXTg pg#pGJ*ߝ+<306R Dg6&OJ:cbڛ;~[# %wDٍkY(xҚ5V5Q(`-mȆzg9( f TM,- ¡5R 0'~=\B rkC7 lGވvC߼(GAvxBtJil}пv(y ټ ,:͏}2r{d~&{m Bg[ ywM*)<a䯊m.6&g(J$?´5yPw=W, <#xA_3 ͘~t4KC@2 _k=ӫt#4Ux$S#CTmTa>&+?&Pߠ@b H5!.}2U{c8R MN "* Qgwj=zK>P6H<=>N3y񏇿Fgl8[E|<'$u|~qȥ$rqKk>J=#qΞaꎣ;ЅEHӷ\E΂ ӫ8󸰵֋2%z5Ǒ tO(BqYO1왊)Y>cUtrL.ఊ`nA6!/ 퉧z@J8?jf_w|{dYit1l}֖*.4xuڢ (`e̾PZ<9dN4䊯%kRY?v)$N;Ru:6B]cOGA]GIzeXk`ȧ*C@^h>˭b*V]3issbE氮^A(2ۋsߑSƁWzk Oi@a×q,F,.MB#~$@/ [hT__׈>NHeB0;u_mէKy>Fz?tl"j~x$'چ,f69*7MQC+dydx;eѰGѧd㠮* 3Lf؟1r.|l+Kep6tj3yIr. KeV|XҍO!%@Y ; skz=0f&@Nw 20 ڎ.frr>ȕNBn &20Y_&*ٌfM:\bAzTg+U$(@Ȣ!d2FX뮰Kְ Zu e;9o=ՂFFbrTj{kLC$o(ʣ<  כkW] fQۡ'[(\a3g "S$˓ƍë'H3m ͼyJXEa\6==MKгdE h:`H.tj4^GnoSxiRuR@u̇3sak1~)%قLb`Z@7zN5Nhd"S\8Ҧe2 e 2ɑ3Z7DT?u6P/:8e>8ƬpzLíhʶ1 _"\:c|d| (#_C9!y}G8 Uh-,{G*=篁5e+ݩZTDTWS.ӫ/6lN?+l<NĞdld39ǡ8R 6 @;:\7nq2'ܓy G i\(t.Vn{`.<⮮O1=hm4F֤d $A59x<_Gtt{NϨNX\B~CrܟNZģ8D 湂SY ΃t*_ 76@-0Oċm!-z^5:h"#]6vY2{DI;T(q2"l@mQes1V=$bT :c)}cISG_f4D~X=lL oWi0UrPNn'WuB-Q6`oauVf}0 њJf8x>_hnF}H~eA*-Z1!hF"x(34N)KW/݂9i&Rx&㒍 _ VO^Q'Nd>|o8š{#]xCӇ4wJ཈(Rܲ.Ni1]} m@a9Zw(5??>?>){:Q b*6 j+Qs˪@䳡]̸ў_g-jGj.ٞ@X~"y?վfEgvo-sxה5䃿wϖF( j. E 2,zXVRAjB$fFI!<(,3_t[ܳ:G3&p$Nqm%ݶ#߯{JC'Dhuʅ"M*(;bHim75^/ɷޣ2if tGcW@2h|&޼$"L&X''Pc\5[LHz%p.z&P8ZEg>HPzG#&4,JXQn.Lh$}IP-Onv|P^gF!EqA>r VڽS8٤`#6Ʀu 2i|)YS} 63Qq9uV;}.S2Dc'Y+@QpnfnS&!dc3M7srmA+?n4wzXR+QRCqL_ӑ)7T6~4fJ$ћlF+q2uE;m_GQp8^#gCBƛ"z`97Hr=*BgDPZ4z%D;83kuN"ۥЦf3aK99+IMQN6qp`.#ܖtsKr_&6Gf>Dagx\a2%Pb#];:˳i v;-6qG Uۑܓ:_Q!xJ|ʲaUN7,)F1QhR'wI=YPl܏H#t^x/Ve??\$3 bŏTyj|lp)we{*<,{f`T+oERDLiFNL PLܱHkAAo mյ͊ \D %\q?KSQ5*{x̪O^SUBk=_y^W<#R02{ _ #2fաh-my`YYQecզhf9{D$0} prG~ƪ %91_"QY\"WJmIV/i߯UrR(͉D' 1rNf0 Wh)ARBK>όvrBZEtz?)+P)5%fcadgE]E׸R`A8:P<׷0WhIo=7n?rnNVE"A|u,O>W[ W`+dH ZYp#=VWeHD 9nCϘ=$Qb# E)68 YG~a1>{-dqDŎSҖUcrAKF1pvN\Ųd)I,TB0i]1ؼ a4B(kTIQÉʂpmNIo>+qO2|3-NMyA21&qC !밞aDgv+.6@wi TQZ6w-" 1yrEM;WKRR%"=2k~<L";]w (|S<{./#w΍́G'+}&C)\&܊YEN uz|h)3 Fܐ2RmMB&yGR(&-C6Xa+ IB7>(53Mx Eh0?#k`wNv-6MJQa*1aTrǵzw΅"y?GN@އ[wq5+1oBR5Pe$u~lB Q(%`Oh #:/,j?oՉۏ'WON Rdđ#~^)z-?N(#|gP I[zрw,TSJyѺw/L'Vn+9z8e@[@ zi=|_e{"Wm#ƚa 6p$%𪄅w{Ӓk;\3c 񩅭$JfLd<4NX^'jQtpB.h_W KCf6-t? C~l%ZJZSST:@1[W4Ë(( t5ę\EL箛a>YN>fn#_m+ K Imfufs3so6UG]j G#[08u\3aC J54a8($i[Kuu [%"Aj񜻏b3jUHlG) Au=B =~ v%p@$]Y"R?:1J$03NQлNC G6V~I4a/X]5v$B@9qh)wp ܤH`ߣ,=4& hRy=5 &,c3wRk@9Ɉ6"#qgUCwp;fsaBpst9RH<ň3ZŤ08umMf̿@ ^IđUqk` wRKQl&ѿyF։8LE[b ^%hګ sk9x\NZΔD6eD![앗Y a0BO_&-w`Es 񖼶 `F}b0l+% |>\eey-&{oCYfӻ\b AgMP=S8NyCo*wt0 |U:$ݍ9 lgw!];tNi۪u2O\`G^3$+a4%=|k1 gȳT;F5yu~J?u|S6ڨe]#V ft%jJ3fiw0pt_QPKuJ A\+[p4q$&F΁{S$|P9"xaDa FÝQaX6^$fh_ܰBGo3x:Dp#{NЭz"p/ CEm]US1բhi}6}IARlc!B??e\D Bi&&\0뼙f={Mûz;@5/ E0QOaq>{K}2]6[g)7IӎW[uÞwBW7xjrnV~qSA$EiyY$f'jDp`Hy#Ok 78=)=_P4n)4:vsQTnlxå9j)YsGc<҄K` {%.󃱔ۚ ;uHັxww;aaH}Ud}s;n&M>XtXGiq Ci$3(yt2/N+kTj_sKM[9؟p)M\Cy!=hY@):TXZv^Z\}8u )m,&MG״̔Iyt8Ā}N+ap-l?^/n(. {N\Y 씾#ΚQb WJ Ä"T 4*+3޵JGNg!pTA@EU\6Q|Uc6Mb [ɟmNtZU魪 т=U<@T81DCڛ@ G4s1"|Ҩx#6 y~wm/|5P{%klچ}\0c]un-y߷9QJv*;}\ }l=av׀U; ZoL#t6I.;WB5*&\>8%\\pخQ'l/C~ǩ /1SY\'lt'`V) 鏙59jO?J+˅K*wJ䦹9Րٓg_R@s GI;2 VZ×m HlZ~u WXdNɀ^ [ta`ˊƩGރlUSxJ7̛:J㹓'Gr`k H5Oz=םM[6;oIdW/M|h>'ts nTa #s~OQO9ܗN^!&ӱpó{E%fs'Y961Y~3e[JBm6*3z;JnL6C W<T0EɎXTߏ@vT#&J}PZO9ga'A^V ޯpicZTtt4zp.)!;;׆+bۃO"I&*qȣ}^ێ/45|\Hx"p:s;sDv\& T>< YPt5O)`hPlk[d.:{z=D'MkP+zCPo}:pnK_jn\hzD\^ޱAZ>hi[XsX4X܍Ohl; -c' Dr$QQb["Q%hFQwoH1@1BF.5rQb'<t6;"oXX|{-̎m }\! s\C<wV¯䢹[ɒE7 _;tzNFCwDv/Av/ AvUB6~̌ J}Gd<^'UfM+ p& 9A%rQ% LA'aՖ<ݜvYPwl: >\2h& iY~y L4nh fJ%dHD4~e9T3ҏ]3< Iެ<m.Q.`·\vT]~Ynݟu3?;-JU^7h6 yY4!%9P[^ieL;ȹ!@rܶ_d=@E3q1GQ' N>rԂ{8lOe9kՊ7Q~E%$+ 8ۏ F.VT7ln]k"$B9`bb[Qtۺߔ>V~fm_DvKWC uOقTb e؎CO49^nBpj񡝏f:KgV (9Įrp*+/$;X-C{7Qī[`A8OPc gf״b6nQ^~7*0)dZ/m?q+\楨~Cl7%IzI= $k\ ! ,Dihmۤhm 24B&) 'H\%"mB~6J.gVWP]{~2+zB /|g:,~m@җ؍Gʓz{~ G_DUը.Zv?~h (Z| t<T^Q\}^`̛?BIN*77.: 7.-ØNI7CM P%=\ܐ,^L#QA֪`|Gd\-Wu ==xnt$öAb|]wQ+rDL4]rۅ{G8fWokÕal`l ~1o7ꂉ&c>ݱEio"B \kG+M-$TE([^[Ei;ݨt=ح+IaݠBq*~ G!Шy4O- EmJ"2}񾊇njm/{i ]M*`+ wɟ1.dG6ߒMX_(rhkG8o7+Mmn=~"&etGػs=&S0[YQ\N;Qٝ4#S1Pj]j >A=Jm*۴ځbJz8l;=0>Xȶi\Y`w ?%p 7n#twwY%\aD0k<5tJ>_H9BDjMkm٤ K!{W2 apb\HqK=(JP}1M9heЊ~b|tTсyX!>y_i M)YhktR-p Hb6%fF)%SʶϑcXwau/˞宯4J`( ]޶wJ] $tw˅AJ3'{\9-Jg8Կ-yp|J_!w3s>Jh% I@ a z|vRV5m鷫mdžsiVexinIոӰt#F_z8qۄ+*xT@ǑJ s=>'^E]gp;+OY o-m8Q:8neLGI}yć}ȊN,)0wj$?ћ¸D:]ɻjFǤ4Hz /88- V` P@g ,#_pPYASt'R~e+8Y"wD o(Ǟ5>o= X1[W;1 )0Џژx /6CO/G蟰E:8Rb}k.Ca|њdb ub duڳ>"n#Ep\SpbwӬ)DsuWIer$4vz^\Pqy7k19/p$WԮD:.v[(&1ڛ2ؠ s]mꪉլPrSy:RBLX9`j0 QtOՈG雪? &H)l_l{e9q(=o7 Lt sP<Լ:=6gUYQ҄@_ȚT6I).L֣h;ee"j eOq$p{v&w؇Y u/N$*@H:Mq̣?lfhCE@F>5@Di䈔 2s0  a;1}` n宅&' Di#UX)^C0ցa~rJ!.1A 5gQplǜ=-}%KȦZp=fP0$buCs3=v񢚨Ј}^Q^8+= |axY5m'^D~ .`Τ F@EmC</eCZS}WqGu +J@$v0>T_hSF5\h3)ֻnhiFIM"4i`p7*/k n®\2?JX#D|E3J򭾆څQܪ=ordp#=2MijZ+#>ظm$ tqgswO~?@ܥlބpMOH&K.O2h 5o#?Z~7d*dk'I`l3D g6VeZf.*r9_l̇륞ԱR$XDؒS7+I^m7I*.ըL7P8`JcHVpwxF#x=$AEt;3S»$(}Y}Pe𭦎\1UqѣW͙,\K,خM{LdGMhރ[~4|Q:e $t$<(rkq&^1llb`]pe^xz ptU >6* (QpNy~~ie}=l[;4HEJ8iKH[n6BPt-bM-({u-$3`ԇGtFZc~{ETRSA7j~%<-nMUW^ah2F RG$kF&I :vcKT_$t( O[L ^5,T[1F:e͎rrj 4un4] VW` ,0[նOIƖG݂2Bu޿8NW4bba(r4pLNڰ=yhN5G&CdO"XRGg`.PT'iXǎ}(U!%`&مJ(b)v4u#33`~l/ZM$7^bU[ QԉZٷ^"HnL8k) H/ `:M!Nir<TyAxfCrC/KO+c[I$@Gw!WVh+#Ĵd#1m6c&!cu?mVrHBmQP%p+cz`n5b#Я6L{vw׋b9bB/~ jbE @/]F~qhS#UV4aӳQ5ڟx9l/.L<(z3{ /\WłVV6PgzY>BtTtxՅ]8ܓ%?Ьbjf6MɄy=ӹhE])e]΂%u.F~kslwSH1&5&;~MчE:LU7 )+JN"#YO.83{OQ~8 Y&>xg~:an-XoOA|@|;0/m~C.Ir`B4_WeYC/|zk3 f{^@u8fN8\yiK@#ito֌9VQ4@ܶ`R TNΘaTW4W* :W9-cxn\SBRǠL'>HtS0?`rv0V#ղ3~-SA:CCt;W.!lRVLvO* ڋk&izgv궦!ӫ7W pR/~Z\ J pl66F:[^hggk$ !K-; Y {Q) ?w *KDo  rxnW"wn0ljluK >m=.>S$ BH"m`+!>y#RO>i\$e[smgQFqevwLQʟ6w'іkes~\,,S@I:wBk9"(̽*|S7[<;7BHD֝+HT+3 HQ2)hO57vӜyEyi] Sj!vQz7'AGJcTUdvYoFS3$4H IdR?S/˻U_-+P` ̒Ѿ2`ݽ[u& 64+TQ:Rz)=5R^K I 76L% npHTnvS\!eoHԼ3efl'&3~*{V|7eNr^QXqV%orZbg0lD'6s`-/26d^owMȫFhN=E/ш[r\FҟόHyu#Bg/}k5'"&dcnև w^ |$RKaQ*Ct r96װg[(9UH栅(3@1}0>p fݧ Yh0p-%yC4s`@SrU&- ][҅b^7 6'BO+Ǻ~[H}6(Rbʟ\1 /T$flBh9E96Vv @cR*xy?T0A(k:{;"J Yٮ5s4sskɦr;[Z.Oz＂8ٌ#-O @M# qj?F@Y)(DeChYN9nY(Rt}+uX)_Ŗ>RS/P3}l s+>LN9(Avk`yg%C5)sIA# 6E")8drHz~l(><%0| Q*\z;ưP6{;K:"M.S8Z*4f>ϨMHOO88CR #_2 -D~ P0Jl{Zr 'G9);'l)"a_zWjEه.9眜j 큧l8"SM8Ay%~HTWI[/XK*,3'*+ڢW9qL&%#q)Λݟ\@xYfL.`NZ" nihϭ;r;uM'H~`ʒtڕ<")+<%dosopWh_4cۡw1;9XE2cB\t`g<Y_}c)VԩNk Bg#)ھ;躈Ex$#2Gc!Q!tr4s ;g1qO..{SR]fee-( 4dGKPMBABpYdQ ViIxYP(?UDM~BL~mɶHРwA]%*Kd=ydA\I̖z˩C"9DΪS؆qR-~@{q~u?sZMA\Qg¿' LR;)ȪȾџ~X8>BBH3tSX5Wg\QֵQ'语f=Nl؂}ͤ2$pxm?xΞ,v( ,u alc9B@soӯpKOh3*9 :j7T?Z?DS_w1ZCHKڊiT2.:dVJ=[,mFUn- z3!yW`j˪YbH*je v|8,'i mЎrN[uSaVNhڶ~ɬ^*d߃F[&O AT5?"4 L?x&nj`byYcN魆7ϭG2-7'sʙ5`4 MXS3FQߜu=n6MqroTŤB>>jt#5xrZ] q]ݥfn#RȒ_kDJ04Xi2:9[tjhOwv!2ɷ (jTMpny)TLl?W)t} x'q1QאOdyd)xUC,#fTڸ]Z:1qJq94j-8'*t: :GfIDWPv@ 5gBUO,^Ji]P'vl(_,P<m Aʰ'nS'K$n9n4e11o?`TE_Mʌu5H+7~ ˍ$11=999qjŎTk8~eQG{R 8!QE淽" g_Ab4*OmѹG-&ԓ~+aɛ#cP A#2}OhlY {Mˍnߊdd]EJ:b3ŵ5Cq󟤡~e1&cF#OTc_cL?G$>uQ^d$u@vEGRV}fZt#YjXU1(p_N)munۉP G1BF/21WJh;>s 6FFAgPwmb!lc3:[q7֪#LٮHsUa=1)A'Sj7hyE:8mOuHy&"ڀ94aq̔T fi?N>|9 _iL2= bdJX1Gy#/y2*m߁8o1wn;VAjF/96|Nʉ~{dݢɂe<,Qh?$-Vo&-*FP ZcwpT%kx[\/ڧFh3lFnCc}6gvT2͝yZliRܒIcTlc9o0#HՕQ}RhB,B2pW<7~́@-Pc3*g!**IhLN[1%El c`4Z6e?@^5z哃*TnOFu5ͷ1ݥ-1a&"S!6I&.`5 ؟Ăc_hp).;e4R_Q*y.ql3XMb!vla5jp '"?d&Q9w܄Lg1۴D1pGr^(܄rNO@`czݏTDڣa [1rlLenosK W9(M%,h !n6Xji=a) 6OzaA}8AwFEt :djh~}e8y;OJ'X-?ʗ[L/8VVZt \&RJuRYKQ+/Wp~Pr<Zkt:={קdzͦf!vOm5Qǘ/nJFmhQ̦"j6;-SgӖcmZ]m㪹US-J˽,;AF1lSTz-y:u!: 2HANGƖ$%lBJƝ4Ka- @!U;Ym /J7(j-2ű"F.M_,Y 7*Vbe, bD϶8Flp̘!ŗ^T^ *(6`҇} ϛҳ໧͞HozQ ΅s#ri*`9 ^3|mQK֚yJQ;/'Y?WMdCGЦ9)k[C IzɌ%<pMT)F?T8L]R5aȂpr *m\ۓ g_!H0ι,Z D-dIˢiͤE HMÐѲ㺮՝a"mU L-bHVvg **{0\U/y#TaE ^>PT=+}-)8wN^Kz(CJb s9C@ 3rmj˛ ɠO/<v}K^c*E;6*#Y"mf~6!,51$^벓ۦ;ޙj5כs̥62q ';ՙb*/x=)NѾv)Asec'=Yvد̒iKt(9 ~ mZIQMv<"*އ#$hOaVm*jߨhCFsyݎo L eJ c9)1jKA% i{qwɔYȗ-W"PZ;S3ɶv}JĊޡ1kB+CS4Zh@Vl99v.-%՛D\mşNǰY@|jXuNk Ja9% *Bhx(m'fECGWk9h98I p[tͩP0Ķ:z[7z q/ <Ҕ>}xSq1&*;-5j9"[emwD?QVo wXS&IaN#֚uqt=jGF_[v=x?m'1 |~U(*gsm Wlsɥ,;7q'alʪ;_z"!LozY# ț%kSWt%0Ӆ:)uTX,OhJ96-:!1/;L52ڀDv?5gpycƓB?fh]%0o] :sNuY敂=fh?kI|6 $ATY⑵N[l1޸U\h!c;jû\ %f ,5p1u+{oGVXq.%;~nO>ND*li I Qbi?l2LB1 0q S Ywi/ZV5z? hܑxZ)f5\"aĭhK:@aA7; VMg킦J-YX 0sXNlBai8D (WIph9'mL*xMߙEjADBy1ݘH!i$uiW5aqAIpHPK㎶ǐ9; NtI6K2S! {ĨB(&`6i`(%4gq#Z>A]}:Y ) }퀱oRo,SFPt;=>hŤf}ӈ_Dx Oe )E.-^A] ΋:~+7`,ʴ?Ě5t_ g\d/]΄=irRQT e\O%DxLOSh;I0FCoe}O䂚{u?wϐf _iSRJU\F`~*''%@#,9eDlFx&+sϑ2WyC IP[2Ϥ4ˌnvk]h," 4Y'Udbw&o$5V}򵫢[E> t ' 7s#}N(&|KHޔ qPE)c6( WK\ʙ\˒ޑK~6^ Qw"h|׬eT# t뉓)WxM:&K[OX\ZTrA սM6l ^A҅] p0O6^ X}MF\^j1$]M+.X7P.ݞS= _^w`tV){u}7nj\9Nmstj>.8Niٴkzt>﵂U=b Bz|ѼJ9;Z|aK.ѯ@OV" qZ "釐y`ߍ2z~u4!Z/OV8QbstmsHIc},؃JxZ}!MFƵvJմXÔ'(FϽ{/$3is~R/Y$p4~_=Ui3c-絶;5-ws4!٠w I/ewY5-3࿾u;IN1Lg~GELG!{*ݝlaɻEo;&Pw_Z9*1a%ez*XEBCΘNxچ:_6tCI=I*;w/S r kuj_w9 1,`<˧,օ`gc q3K&kO֜a^ hWƲ}3y/]zYNtK ^k3M[ى0 q}:|ƘyI]=9[^XB\8um>~^xapBձ1qoְ/cCljv Gp7<̷61ԮvGV<rɬ%Y *&_T ԯܵ(!z#pAZAXr ]إRmuFʠ3ӣ/_Ag}sWݷZOaЋoEgOpZGrMAQ%3 !|Kz4phWFW*1{D'џMM8S?N"~'TL3WZ;!X~/>j,+=ʑJHnU?}\qH r;+hG"8QA-Rb`3S_{y JyRePsy8AkwgʹPaTn1t*=_Om7oP yT3F~Eȏ1 mfIoU\"/~KJw&V5hS}'* (I‰xu_G~~U0lFGp.q LQnGq3΂|4x{Xw90߱f8)C&PV5W;HyjQ04UPia2 ;΍1/}t'I_y&o?0xڻJAGW!8 tؗStRMr<ƒY2ͧ,q@9"lDx .25Xⵜ`ج] %?#AwD)q߫}'aP3ҍIܿ#"TJv~D?eU@:j\pkHd(T\ Upl*ͱxG(u=arGB3 Eb.EHV zJ$nM]&aeb?5)$Jm[6k7a]3BmEVl&4XFyoBioE"4&FESbnHr7RTwĝoxA$&4X]r*+ҡG-'y]0IJh@6m(|yW"Nt6o||gp} ut"],: "4Ba1; {nNЯz5!>ۯh S'D=7Gs]멱8։)!mHT' =/ACΩz,awpDv ;6g9> Jŝ1pE%9@bA}/gҚ==L)Lt{pUoXaDkttv!+.}6(LqC9 ؏F=я.[XNٲ]ʗ4yHwJW?7`sX h>,%td^EeuKJw })[DŽ}LNd1)ؠUΟaQVzdncՒ] Vޢ]^cPw6k|\el Y|7=@@ss*)]q]Ar.PIa=X$G!)`&w5Q蠨BCqz, eRn0SW%hŌ)0` cD7cq3kZ "Yp([kҏNc\ ϣJEg|3*%[|%';,pC gsY)aL:{鲶F:yf&N1ʈ5ׅ!Hڪ jjѨƺVq TYW/؅{w1}Ev- ej)Zh̲A䚥)LAE ]Hn]"OkO{I=eN*d"v¸lu}70Bߡ8'󶓉jݱ?iT=hzZoLEbcAKq;3~<$&uU;J8{}S ){]W W~vaZiBs-r40ki25ԶJ[j_@9 j݉`z̮yb.);\-::K>-zay񽵞-|<_D# `__ HRޕj7}Fni&F*5{!W6.@/u+R*v[nčBg$"el1#u࣪l% 2S R{[;6K@N3Z5bw@ֵqT'q)$6\tRg5cFV|˃c}C[%^)+= vŠ]ZP7qJ8G`ϓ87 ?p݂CKYQEWg䝂'GG4aפ m^[{ETp&5ui$S՟>1GQօwot..iK /[ݽdò/]/ 6.Խyd)wvn*6<ZSIX>71b,-… `躠X9$YbHyڥ 13xŎ|.6v`~7n_U}d_t`'4g\俾#~~7fq~^dUs (`0 ˗LMR! {e.dՊ˶UMpO괫DzS74<o៎@_r(7Poʫ{ɿ,JQ UrȐet)t~{a;4x 5 ,t1_fLjtZ 렯A w&Y#"{( y"&kfn Z7V\u[DoU9؆Fq2a@e>06*[ks@I0hRwOvbIu> 6quQ]"7UXF4[~AN+?oMQ>Dπ5]1R,<^pV]M4gmD2!籌v;~)\VxB?ew!g_2ުsb\'^cؑpF(|^O9JK(`cuAU6!&ZcqH2@jql#pSU{v#eNdLɱ*I)ݚ seE_A*^,ֲK'\}|'>g)lS4Y8@Md ykUGF[GJm \Ę+Rv^ϰM~(:nYTU`rk)*5|KXk |oPc!)"qml!i"W=wT״[ۀL;5flB7yr#q^irJ^.NWg.P$|Ha)H-7#^l3!T-t37yilB+PӵœOѧJtU} 3~`4ghs?q!UNWIHmbAJ520]t\"fx֏2Iףg *?iC8t1+J:6QЭԥ/= =!\Q[ӁµGˢq|ɥ90Kx2'( #k(?=L2\b|b^tLDx9RR2ӟ%ԝ|l\ZN:L㫐*J*~_EߍO,%/5nm4IRUoNO7%D)>zGo߀Mj8]U͎5t,f,7No8G3W 2D hGXQ/Z?k(Qb5{SK>m Y79N7-E&3kLJ3Sy[xh;^=EM%0ǽd^ȢH:IO2{uy\ŏ@S]U`TFxhl$IӫWBn?>-H4j:AnMCW@Dt_IΨ^֌M̺|-Rrު_i`R"7ζ*Ѫ{aW AGrg@0ʸ" ,;A (~B!웯q`cNaԴZE4.eQ^,m |" kIK[*_ %UI̸M35T"k#xT54͎5oHd٨1w Oq ީW ,7\qۂOH$h^=^@tN39 O-x7R! ֒ n5u*d\t{6˃vS_w2]s`o lcu`FpIW1}xTH1v~EF)li= ߜI#Z q z["fXk:rtJ nwU mCYLWOSFj#uNös%yz }!Nm =t咤dD9';t6he Ck}Aו=t ީ-\x4,''`BY+GygAD&R&VZ(' ZIUNtƣTh|CNG,b\ꡞ2{Keh#|b@./Cċ(' 6s:x6͆I& >d@9zK:R 5FY-QCNcLU罏g1 ,T<;kmzh='^lƲSkie.aΟ?^ 0Cxm~`Jdj83Cupa0Y|v"flRǗGppǦ_WcWа}Ia{R4 bn(=ε23j{R60n$ N%=7uxXYSc>^chpU)עu%Z8LO?OK]_Y5H[007*Fz`"sgY;lXW: ?gia` 58[<~Yhg &kHbm#+WOM+?EHC+)qޟ6( 2v 02Bg| nj6>O=RI!a0N3Cߍ[KLgV!0հ_TZz0"hptg5٤2uxU[)AU5xL`֢K=5[_+nVҕɞO3W5`@=@} 7 E4߰0u/HCg/+S!;})ڍ$!xn3KN;УNXA"#igIǙ.ut_kV*ZeAG19Uy${[) #)ۻP0{ڈ T>F=-n87~SH܁G1x}`L,7j1*sY_3'gp./2?[\+!~ hOo~lw8wQM-%+AeĒ 2asu"/eo;:0{Hg1%2H!PZȮ?Đyő'|?} Z9}Zn| DnO G׆@x~ys=wJ`HG= +}6q6υ3}۴$sI`h_DOi3~ ?2Y]%Ub[Mơdq\_/"ufwg]nJҽT02g-xBk<^6y4+Q|;JCV6 RDx\(qQUٟ_I:̭QЃ+69UE0ӥʯ PW bl.AvurРCoޫR?j'b1b˰c]6,:z4Ӻ\@qɂQ) J^ʭa9 Ҿôt UWӰջhԯ2[I& qVTPhi\p&>0ںpu;EY^ 0Y0gSy@ϰ*4JhDG;3Ӻ[3(?PBEcF b_=Ͻ:oms_.ܺ)OV "9?= |q/Dp|QFc eh]Qj 8}Eh*K΄۶Ix+`e~L;|a/4ϔޭ~e`~3J7㆏_-dg!BCB{CѤk_ģ0D; =RHZ޴ lwH^ȂGi `"JRǽ<rz2Rkfüm.f'G25%%aŊA7E@Ir *sy5yYò OSZq[-ѿf MDdv VB[?KQٷ+⛵sHpaa6U lhS tf]26J`u1>JM>rMq5IWÀ[ip>s[fmStL,1gߪrA74*s&:5 l$lYgh:p;D\dCbs B4b~[}yhQX;s}vLUg(ȟ QkN xI"c*g ),$;V^ T1T4»^Qo;;w7膆6w\k_œ)Ԧ >iP0<<=4wcCZp saˢ`'bdo#=Xw>>?X&dt&&PÉIh 1p>ӆ}˅-tZ%"qa] u4dHph)8{5LKUʎ<^]A"j#L)!.Il&L>{!h.Kw/FK! +'@}]3ᐫSlYeD@2SuMo/#}'bIz;Q]KAm=ee jH!C H,q/RX wiNƷn&Jk@u/k;o\xN Z^>I`H\= Koζ"if ՟J5/h4Kpd~ <:8HiK*Se}Ta~iܜ˾H1Z_pUv܇18P>w-XD1!6E#_4~O+;7zB3|x'h7v` D~ۊ)|*j1q#I)1Ol߂ԩ6,}b%tUJ=uc6{R@i8Dz5 Y5,[~vՓ,ޥU(QOBv'6zS6^.|hT‡9_gn[mNGqG3^J)}Sk0X&wd̲*j7b+Zlΰur'\]0Bi5Q6h .(9B])`7 Ӱ"Gʣho5H/-/OO ׽ְ)^'HJGQ IbڡڵlX()B̚TEMgz Y:)l z]biR-KʅYN+걈vvpluQpmebL9':~]si7!ӇW_u:e~3O) Hugzj!Y=uO6Y)'8 o_Bm"vJL 5+n\'wuKw hWP9{ݺnYn}rqݗi3ǦWK{rqYv$(bE |~q۷1VJb~XfD@1wrvOnqAr; <"w@q*=G1!>/b bAHjoBfvm=0E;kATR:ڈu"Y~ DLb3>4rͶ;J0 P_ \չ޳5QWS!\뼣;$pB[m>?]ߋ1LҤPωHᕐ&s] [1X*6n9:5#N ;Nf%7iJTV-R 2HtFWU9\ ChXי&ؐ2gz=1_T!6V~RL= }V* .䮀 T/KM_ELnvp|4er _#̅m'ݣd]8њwQ|TU ]anB]`w9Fh.N)X{6>k`ːC\JF)ʏz/F.5d +E3tLiR4 @iiMh_5SUxA9k^Z9;jCȪnS"_#륗 ѶZ Uș( s@Oo/6T.SmZ_C(=E, d cX"ė"Q<`%hiЗPg5ŦlϱᢟH!:A?7=V`ˡ%7w%'kU$ps+C{kxf%A@FY\W`V!ز FA?p^7[ 2a6\ DXׯ DZ.'O FVdY҇լՇ PN΃71qӦm>?F KT<ڨt<ɸ) dI͛c%_td[atZѹm { TM,_*5UOYø r[PbV; Bi)X_׸c/ [8aSMDn޵2VQH\A'/\\;a+Q`_'mv`(`Mj8#3ϦriHӉy fY4KDjWW-˸O2L.kEeG$Q=PC8z<8M#4 :DzTUp&!Whڨ/c6\ vvO,-mG|O\_픞lѧHSgEa$Zw4* 5k;cQwÕEg:nт1(" _6qϡF]B yqi}48kIɿgO8CBƯtIT 10(a/ 8梴) P0 +1G*$-D2c*l6_`E@L1$W];aee˔yglsa[L @F&o@z)Xs<@nуpSp.Y?xkEBLy.:9RKvЧSvH3=9/08.huoTͅh3EUKR?{mZ$CU.ܫ"h~3Dk$O=}$Pxkv>J"*͸,H^^44DDTk`w9Y  ^Č%`yDv؟{5sԭyѺmcZf});N%bSFRGR0:x:~1KxI9[Kk/efA ©Qg0Npz&S>(L-҈Ml{R5~U*IF򙻥EEJQ8>;co\HV6'sGCp yzJMrVC{T;ym>ue_3RfV*1e:W7/KR¨ȇDJO"LCDk7|Զ$2:sy?8:,RI{j^8i6'@{cS`=PRhv;uTri3R:8 +hz9!_ }w%‡h* @znrcjRY0g=b3@O<2-'zTlèDfUR7݃gAFiXM1{X#tUrK$)6Œ) TbY$~1 /v{q=usGfS~U|v`nD m۫,s&O*$C72iρ씁ZܝT3Fxvr'ʝ?k!W͗_/; ˾TdE_"jDW&mv-4C5 f _]ښՍQ&K|-o #ԯ& BztR Fs +F ˥kе$>)FOR!Gk8f{ B_Ēv ~&L`D%C2ij1\obO$ Be$kYoվ_x B apC;Dg] ~NFj˟_ȟ,brs<Jу6Vѣ4I4Pv\: `l2*bARE/ڪj;uÎ}U1'Eo $6D}q#iw[!nN`\Bu 4 ΍ϺE݇OV\Óˮ  bɁpx$>d jW~W qjR?/eMEm>4*lk@Lځ|ifdNkAoF{BsO-OVG@##l˧5땴. ?a0MH_:, CLbʹ֧(r,<~ A_A9캻9:aZ^&Dv$%ˏ1`0W_Z0HВAO?*>͘سYQ?l}3EF֕!l03E@-ԕJt>7p}ӈ9s6ߗ$"~!#Y&R򵺶Lj=;f`5]{l[Ȁ:ⷰ*+/ʒU{:Q+'Eą3&ww㡾yǡ|Ǥ *.u[4|:LsZYqRD9Bu}" p_oy r.@ A62.)Pᓬq{̷;LH-'8^-ݱ预rJtˍxRS^s|z춏lX-? (e{eG2-oM$b軭!R}mZCҬ^4*5) |ħZaGҜr9` XV1oIiOz9 [?wwe[*mx2)">Mb`^ݸ~{,e>!Ѓ CTfJTe ֐2\/uEio3y =i19uP"<8848@vlZ7X2D8QS.aP@p',|Dtf#O pBu C^}q{;n+w2PyJaqi $54Uu*r?%as6[*ݥ)Vٔ6!)cK<_W6V,p:":}z%z6~lDCvUYnQAZ'j& W =NY{8;&8[\EX0Q`Xߋ5*Qqܳo,K76j͙wRDSЅL5ެR隖cQFqӛJ@D }% 1 cmYs2i|2tPUW*ZgSĨ#Y_w lqhZP˒w OBIEuSO.sl4N{րP5v1T.s8U>Hzclbdʳ[ߕ4& #-^ J}Hi^޶@O˒aS`;rM j)O<&!5f.yTG O"NX'QLe5t߸EG/BfsksЁ3@QN*-Cߝ rZ2;hCoŧ_k#J;nbZ46.3 p5uNPok]  bkKX!6ںOhئ)r"VW~=%|;Ҋe Myw!Gmj" F)3<%_&y߅只@+5c!#s:y#'P53#iΏ dq׏E2)xOji S_S9)iSM܋>0y;U}J_E9VҘ"n\GYjfkG51/(Ґ3?f̈]\A},`^mK/2Wz/J!5 kL[e8qn[x>N[*hQQ'￐yЌe,L F&[hƵ]as?P s =0pN*R*BzY{0~ 1]XOKE=`Xx[(RIJVĖ1xO@{XF)/<&k}z`9P`hk:]Ez퉦ćCi \ѷ ’ovQ/ݕ]kU>)B0f㿸E(Yǒ hpS_ lsjK]ZQBQ.r^2KWF⻂."A*e|(<337ZNS~xIuAH0({?GF&x7d)߫\cA^[v*nBb5!o6A֮}eE0c|ƻokvLS)je[¨z,r4|m볩\Cj=4 +m l0 $etn,<B7{  7tO{eTieF_3BT6?͊Q89{V&k]+5j/HFCAjy2֕5 wVj{qiW!4KoոRʹ>aG}8S<k~Dz BN9g}#9\,%Be3XhsCa&u' ,aզ${fpRsflnj[O;x*}N!DɂEi6*R &q4oeϥi2w"`5[$MҖqΘ=#T 9\ -M 5 mkE}MN BHN'V<,#Q<}8ބs>|\l;X٘9g/ٖ,Zd\`{""WyMJ!]6/uY $P24Yhw0:KNni -{s36[[5#sOz/n88\Ұ~e0F`6ߍ,kv˅cVcxZvΊg&FF(Ǐu$AruEM4c5!!iޣh#rI}o (?en$Z@PIX{wP+XSIyO<TRkg<PEqEoHYhK[!ֻzj8[ "σ!y6K2-P8 GMIAKoVTݤ4'7+ERohgVMahzmQ('O]^*k[1|Ixxoq+w٠KP +( Y7)TblL~nP @؊kq5>.=e;9.~oxePl һ˟rsn?MȕbuԋK0/Qn h<QYϐ>Zv'/L#t` +:%Uv楕+Wj BlM+~> `}(%E 7@NQf>rz=3n#Ǥ(?6[;U 3aOd+/Fih,"j> nV01'b0oM ;Jy(%?`p`g†ʔ4, Omf>+'3Ti0CxoJwXs@]{_NP{8wqVy&QD9Ul.;Wokc.AeQ;QGt&_NI"npAE9fp@V>v} G;beNDU3 &TXx]7g쓜^ZqCjڗfڱ ճEh~B3ZFIyV0x!=Z,cn6W,Ju\ܶ1W 8Uaj y]7kJH~mݘ\l'"2UQDVCq렘"OPm?8xh`8hxE| _Zzp_TZ1(JՉšҚ5acD* _D4ɥݠ\_ERXQ5գMi}dT (tFx|cS 5Cf ѨL,d'ԧ8xqI #o3\ l 'A-Y+} ѹmȽq-8rܵ,0e?'PuEQpB@"AH0O)b挖̋Iv90) 3ָ BqAp őy9>5!d3k@8?A+kM0Wɗ{1k,KЌk_kl;r8̏f:O{C@AnU]dȌdgZUϮEOx)TVQ fN%$>#2pSV#U,ilPCt(oZ6DВ-6\hӛ! 53UNEJԦ?UBw$J;[<NBx3M wSk7X,FlB,cٛ}W!=H=ΟL?4`*;6\4le<ڳpA{hWS&NI>ѤдmI!ؚ+'*gЁ!j;IZ*D9 "gm/h:ܐR2M1V`(1U+g`.@`hň?3G9腔&XKh4e"ݿ9c?)d>131Moŵ)WzVw:yS[#"P`41JV xsS?kdtS~:( E!Vܽv_: +i4-Z?I%ID5d1"]06x՝9v #Ϭ_5B3h@4i9eY=q?VʰH ={ Y3=?%ےܜЉJ=*6`{Y >DB$t)[ {yJʝ.|֗&]/~Wk6dOĉ}bJpgѸХ/HU C~p Ge$Z\HmpZkEoUeا0, O [PCrCy/(¿d, ܤ1^FR?e_,/~{d_K]/ '01䆒}ಠW_g>\007n;)a؜%yWkP;fH䪴|"*zq,es*{8MLvƠ=[Vn q*vpICȧ+R+"4Urc˺η 0 O!NfX9ʜ~e!|ï,:5ݥzuLPɼkYa铣Bw |v*ka|"ë0jGdRjX9d`QE׿x n!6.JFʯ4cq=gFZ5hg I|B(#؆?}L}ROR` e= >JD oۓ!IgGI(x uK&)fFKyDhw73ZV]p mQ"'B(_bUcHC?g-D*F³L}($䉦DX/Q FUGwkN|)nZGEZ0ոo[[ 8 Bus>@ϽfeW fLlD:M%f{9YI zN糂 w5$d;?ifXkn/԰yןѨ;?qN͓qdV򰦀gԙʷx֟[cblVj77r|RqᘂjcCa/ 8CUv&g`m_Ip|=9'nj;!虤w'n˖({-N+gac~T’yٮ'- dc 9@]xς#bʷ(#]m~ .4/e[oIkWH !h]h>N)̫YN Ѭq,ynzԸ|κ?)iX0=|L<"P7r2bZCL4DC7-UP C+8p5ŭ}>Fw۪D9jIyyMO5(Gz0DnP#6_}N^f/ޚ(cJ)u@jPh~%AXmr3!hޜMc@$+v5ybLi-|G~}Η(٨gfhj6ʚVe[0PĄ~ml3T Qx=b\ɠ qP?DE5Mmh9!!t7o-<. >?.lllC>]P e9WNݭ.T:FW+? [>lpXEƤylH dDqh`*zDG,:H  ܿY#q !ȄBS8(X"3h;xbgk)nm?Y<՗fhQQnK;;p #  5H$Cg@9/G&!2Xc !"}kh%VKQ2'+=|D 2Ԝ`Qe[S"(C_ѐ=4ǂlHwj}sSڎЁRynOV?.q2F949$j11b:vIX3EF*(pw館.AГ͸0 &L h'dy,U6sj VXY jSo"NFth/Qߞ Xjb+kYEW+*'NS)AT%6 B&xŶP&R@58Ӂ+ai|r89d8'XbAjdӲSv1^|1zލ{KQן^laBToO2$뚱[hxXd˰Gޢdt?[c!db`4 J@Ne=(K6, p?czQݤ~qonҗ|j]/2oŴQ@$.}j8R_&*'K zZwg "&t )2$JMX]epЖesU4VVP_4> 9oF!-թ=59p ,1xURmom``KcGu} P`W kv)>ny".N>*rasgBo_̨LN{cS4%#tm6,b2?{7sUĘs!4@:P.Ld@ i:jua9:pFo;LP5c*%Y)(γW/ 6P\J+A7lo5!==Ҕ:{D n]>Eytc uC๋I41#Zgf^F=Dj"8"/<@RΓ?e1` pO(  T>&#W5AZlCve_S,h V\[m$D)XP\s(!wLYd];X 1T46{X!9e weMp݂VxLh089/K$d[}q~TU4vXnW$!K{w> t8vJpqb\b@Mx`WtHbV_tS?`g]nbwB#͕fJE\Ds\l]}0Zi7l8q\5$p c~(JϪPC_ U?ڙdw-7[K`Lоk(g쥈:7RS.KV58RmrU7ݜo\tOڵ+lŐsExXPX5hr(xS`w [|!:Չ;CΚKvw;"}h!͇P|w>|GpZB7]d]$e1?/i fn Aݝ'ZbP ionG:P-ؕxX~6#O]*de,6oQg-,p;uhx_%"̏0:-&^ 77p/~w ?dX)HW咎7!cW*jzUDD 7 Ӻ&e$<̺65ol[M%&l)!{'!ȼݝ&-Hźȝ_ *mCauWM9>뚰@2m>>krد-LNֻe]]LW^%#]cO!!5azL_Gwm%n%qӼ]PƆqKRj̒;\/h*8sT''KԴs{'-ҕevEB]Foe'E yif&0fZkbBW'ch2MKzAn3Ifbb<׌vw7ZxaT X޻ot8f!-wzR4ɑ=+j}gh|F*+h0zqG)Vܹݎ:+tO j2Jr {Pסys8 }>ua/X<˳7G~X.]ߖ$e0xi/q +pPGY7ΠA/(Ao/{)o?R7!QxoFMfw7a}\NUbELK4=xl;IRP>;;~T B~v[Kj1|Iݴz{1Sa$jH&I x2Y5nZoRf+AoM؟]S Tŕr)z_]Z'K]l"K#4+d4hfץcZ_&!ZszP$C q81#JQBTh]+,) ZGn@P@#>vݭ91nUrtr@PEhS8FgjrZ9%OPOL->V+3fOiy*Y}y̓c\ R(y K80ya LՏ+~x+2y2Bko^YkBhN p톉N>YFoYRol-sxu]v&L݊{WAlRWۤeEĩ=d/n\q43.7;$B*Dv,2*ؠǛD˻µYՊ~}^y.B@B;ˀlSL}7j-BGX%8u: YT(~ O𝋹>wZ4Qn|TUgkYS19mtz8NzfJL{ 5rp똪aJZ^xvX.꺛|B;m\.ZNs2sSrH^2PɗtjR#(W ")\dJ9][ý>t^[#?R/խ q!ȭNX_g-NUZyF AZ0*g ,rl9/QMn;% xEÔ9DyI&LcDKEpaOf=- G Dd寧mJSIQOk`8%~aql'e|q%$j4L䐏Kߎݮii0.7벘GqDef'a!n283< 480JsW+7bZx|FpFw zwd#M2QBBn<%(\dl$Ĩ;I\aQzS= DM+7s&5 s HeZ(a 3s,6P&P gc.9 amEՔ9ffC-<1kj*z sf Z <ǕHS,!JqG{5aʳр\'ly>B_4o& Sor\} `=bf "r>L(xwPKt0}V=g xqٹ;Q ydUk֦Q$䌔ZTI;6Cr(C3CǙ8 ?aORBɐR21(`9+o{ۑu+΋3 X'9̙9> >&i ΍7.<),}*A;P{b?'sԻFpj,gpm^b|vv{gaV@0۷3:PWOjqd|>~;0q*#VНG|v>?[_˲\a4ŘS9H 1|b BJ7Ȱ:_IcLP4#Wh&mu[V0vAg;.2Mw'xoF[@AC5-߷e~' @yKd<9:7GV[l2d$|ڞGf[I/We^k*I'c>sXğ1h)hug*UxvpJ]ul2&=?0I#SÒ3TW_o11N 3J^Amr=d# 8Th'TnSar^{i-RjX2R[.!P[PT6հea ~c$JerTϭ!=-` ]9xw]ޝɾj5vd+Dh cj>7/A{hB(D~bpCFJ3eB!ST ѩi!CE\D<4T|G+wӯKB (j-!uV#oiL} hVn۝ HE4OEv̢_rL6LiuF7c#Uܻi#BO)BRlo뻪0@dL_x PX->@VB;I]ͼ󈝕CѸsINXh@QLhsHGx&jeq2YvM@^繮k*w=oXM| lP7BZ+XI*~6&>WK,y4E|ԡ:នjDP}*Ȉw4Z}6ĀTmua.~r!Uq}'FJ!w/߯.k{$[AH1gw^FH^>243P`kqf<;`Kԗ(9d~xSթ D=g| _67gD:şO)USD@8VX24EJF쎘Bn] "ix8|Eb?@)[_S--#\Ys+#4#sV[Ky jϮCaXɆє`G?2_F۪HObAIFUawsE??6KyL2>U3D_PawY&nHsO1.)͞yQ?JՃ}oԃ=p\?2P0p|,_<;'R3˵f-EQP$6$LGkۑ`YUG77+.Vx{J[8vMBGVZnz.sLSS٦exK@3 .o^@~P2ٝԏ_1-MQXʔ74^EDbBZԢUj_i˼Bwnsjx mP&yk],CIoB36o;Z"YMV"@3Hק+Ft(Ŋ֘5)9*R<WέwGLy˸,޺L6ugR:m(3)Jn-'t#2V '#r =+jja>8rsyt:} 1z؛fq#lfݧ̃~HaG/u?y P0?IG0ԙ?NanO?κ\z=͞Fm+;BW6T̐ɾ M 2z9o}VMרplTlr}a  pvEh)Эݱ nJyYqI,=5'Lƻ59cзӯj`ily+!tշJ>V#Ǻcjw{F!e4+w!S4BZ7SzGk8>D۫#B-lxs;_]1^fc5,~)At Y'ޤj!a%#i"Sni-'eFs>^;"!MBD"s M:E ;B_֢)ƢrNy#29?&';|ihI#Aa2Ge7ݺGGsFބYD({ҫUo۬<&CPؕ u۞y!8~xyjKD$R9Qq?ao x)Gqu~ )n㻁.\o9˵NNBQ)S\vǞ?R`ruQXa tpSceUof庾Hy-k˧t4N'.m\"H-T;9*#[1[)mmm!buPS 0‡.5iJ4{.? ,,y:+KbPbFurL:CE3CFp5?Ч40qfdx1;=#:^tEiE[;X>)B̾ё|!e= ?VK>ojfEb9VK0 I ~6ϸ1t>2Ư:KT 2|ΡKcTVDw:Q_aoN8ƸMΉeGwQA}dyyY4#s` ;AzC-~D{L-=5bAALwm\"*֜l2I\ FnJT<,xt)∖98m E݂So'~o(60Ɉ3^[E5-]ZһZgQ_Yl ;|p9n4é#+k.܋eu#Ωyk[kWVMg}тNE,hZiêTC ~Oc"U$b4 X5`-1MHE KB?q<K т-.zAYL̲$k0!1?U.+j ?+ w `GRW_܉}Ldubo$/~芵7QC]pS'xF [V@+CsgP6HOG>A=e)lT7l_e^ nCk)D}c1~N#z1v/uű㫾76(aI͢x-ZxȵkSYrD]1%1C!5=},2=zaӲ v\LK]}3/\ CѢ,d9Ir_6@/SEdEZy4F: 껏NnP.teȆde 0k+;SFթ"@˜TOts"I!5Z4_([Z^ۃ_Y5WfĆus;~ ÜhGSvQ#x!1/>jf(õrU`2ɸޡ_KlqD=^K3b#4;]瀈b͖VTLEG{h䦢B6vU }/Yp&|JKϝ~\Ge [= 1ksdPޛ^8I1NW-zlJMң`~'84g='&|/^|H" L8DW`|(šWKDedC|x:8fžpXDVhpxnnj*a[+ʡ3׮N7%i-16@[];' %bޏRL'JХz))/1? on+RUjZo_Ѱm:P %҇5%J'wYvKDXКU56RoJo7pF,Wg.?cQ;^v&r |32E<1poj׾,G`gvψMk<.a{7N-.V1(EI )_>? Szܚ[2h/Ln7{UWvޞIXp4-BNtÍU٠|][JRNS_{HJDw{A05jeKCOIϹ-N;?׾j7hDAfn<4U_gav|! ' HgHB%:'&֝Vf`KGn,P/2~K`i5ow-5_XR%BR{~f!a/p}dzf}zR? { )WEYnV (*2'=jbF>u:_Q2^R@Od([vk+دGL+d|x5$r̀K=yupHl͑ĚN}E*pn)TW*H0JN*YϳD%I#!՝X+sݖdr3 Y]a`c_#84;SيL8iXa~+ `>+#l(.FSkp-Q^^\6yZ>t e LQיG/: X6{q*Q\{HIoJs]f[`ma~AB?l4wc|MI]N}jO>7mYDXQ>OmwJ"9 S5ݰ0⹈mKCЩS]3MUvrh>lZP̚G ]ǣhOdYo rL*m앀6bHW?&<}@In^ëmӕd=%Ft3hC`_VkZuWo! ck:<1n%Vp !a ΍WߌS|DjIF<)HiR؁)aIZS0zRo{:,clڷn</w+Oͭ-T+BԶ >(K/G%4輂Way)ﾡt*YTI֦0qXMˢBy@ܘCv})° hmxW1QaM9~̗Lހ%h^,78BP_HF:¯W$RQ =l3)_1@R|x럣ѹKMI2q1hVwH1ԡ4RJUCCOV=ًI+$5xTeaw 3 O&-{ץ8E vp{a?HYzqS`BTrD(;4OB+_>6K#)+ QM,StkFv!ȪO|iЊl8LBcb(A"5l0J`dYhR;Hnd.]tIPQA} H<0:dU7S+姹~5K-3V/%áZ9Œ^ =&pɭə=nEJv?+BoMv)JȺ։$ʍ]@Ɖ~:D`~dەLQDBw<j:\ԥL(%+󓆸( Zyijއ1V|VWrVf>e{w,p&,'gI ʖbUF2C_wn}'jzRT(RWBqtte3L,1тyOfm֭D}+|\zRES+t8:Uô<8Gsl%b2]VP:s :Uēw u/5ge#q #P.-OW4dIScXIlgoš jlR0<4+KjFvAI vyx`-,p Em]޻_a1{py.0d詡ZǾ^4Gs ۦcªo1jX4jQI*L{s1ly҉XB* UC3hD܆?'i| w(ꢇUo|ai@&RHlv1f]Fi+/-юO$"o `hn<P< ҡw:5VPJ(_.MhX51vHjӅ@:3ay21va,E }hBo̎ T7jDVw `Xt{10*q əcTH}|׮ s{b:ɐL > v_VK)2rlW#WH} kKnY2^; o;E>=.em_ѻ~X75qi=е&˳[N~c8#e m57% }; p)\s{`sK4<:`W!I0ԫ&@ /pek [11Un GMS5<ü[p-/__l9&ExqUf/1Bf{3 '04cڨ]W6[ >Je۬'%T1(Vq"g=(6}:)2w%=- H&O'TrjI%i(e Gt0d; y2g8:2JXؽyоNKB숭- >o ?x jZ8rH0u7gh8 Eޡl+F\LaLTu9cA/n,f,4@y:XA񔼰:5sy5䋥7' ԅBOuͪ"r7g:\'t^* yz`Vy&i52(.?Dsa,bLǨ̦t/x)ؗ>l[ӓE_j50tjc*s9`αz ǀ6z(/7BK;ls|LfN=) v;_MTh{W]Rsןk"GfHU,ԳZya[ˉIl ㎍(^GGFYM۔rs~$2l~Dͤѵ_}`Bgif ^\ cŲgh||շZ@6>h͠.[yFH957-k\tQ+um/0O^V =0Ҋ}Ozf84$:B 8C:@K6@cX~PQ X\U40iH_mjE׹ǻ6@M$Stl:8؇HDqЭ\x0zJ߲ A_W?o|K?Ri!zn;\5#)qp7lRfj?k tsl_k !p!JDkOC&\q>*zDt \*P0iF#p%&h Kf;SIxVH6q( \?=Bܧ<ūu{؟M2yWB?N`ٟd3Nas3c*T~ڦg1ѻut\`>B *w~Nyi\.M7-OcY`{ݰ?̏h@8&Hd+^~Z*^44eI]crFrpXy\Yqwю"b)aYv'##TH9git'b5pU=~BtmJVn<ϱZ-&b}Ø<7V{Ol&9N8O,!]d62Vln{'k*"gDFƔ`Y٢=ȹ`Gp[F*EυMj0a_<:Jg]C2zhp?.+AՄPsQ@ mDw`cx ^2cx/دWiJW?(7\#eP:=;P$ ]i8Y5996~ʈr;= YW3=%)i bONadbg`WKL@*k+ Q22&ǬR>xjhF>C@=>9{ 9 KoĿR[eD">FQ׏.C@(J۩ 9sK@NZ1XrffF:D,WMjfH! A7 y)Yrq7[ mQ`({6.#]٭?nd3GJR*$%m{G3 apmȧzƃ!!ù?Rlhj z:=* ~f 3K k_ϛw3{Xj,lkE*bt-;]E kmK?EUO* EL+e&M]ﻂ]jZNŅ[H917OP$fTSXfp;X\YDޘT>Яb3tFb'o:{N?ؗX,ZؒcKZC1qGbxrI*(Z o*|w&$7;^CL8_GEa-uK!Ǡя;qܟ:N$- Ex6֨dlv._X:a:TѶ,űmKR /|\p.\>/"qelCnS9YӡacMw 2I;c32y4 DcrRٽg.Q[Sϵ3C/OV*36tC*j,]lpMcK5 Ut:2d;5v!,!5dmQgU!-NO9oa mӹZdܙ$;qyp{n]%L˞2ȲoP`Ny<㢌|9B8Jϒr3l#2C M]LorkZ!?~mM+i%aOrNm/)ɯ=uPm>j#@VH;l%[*⚢WQZxP@`͑Ft7vUL7b.21PVb)){qD"-].) Ы2O|δl+rIy,'KnskGtdOei.[R1Dg9*/UNkoIeDK \%5>[ *ʔF8g}ڽH0ѓc A-3m׌;b8mxi_p3,2X P;VۜPP6Ǵ)rpԻ,]mvU M%vdJI.dh^#ؘ;K|&ehxG )EG#m6<|3yx tpsH%LjQ=Y0Z5'9ob!)ywj,5lbql%)HdU鰸jg]Bۢ]vj41j ;/&Kꬃ}ܾdTfaRa:skqBܩ*b:#؁Y a 1c$]A4m))Ƥɺ`-l6"A p+_oo^C${"ėi+R:foLh>P~9\zR+(p@ 7{4JpR=;͜_B"uAGuZ.LyޢH(T/,yVj v)RB539~F'GY:! \b%vVQt I )U2AhaCtɗW *FRӖw]{Q%pKUD3R#kiZ$Nocvb)LjI)@a:X)75ڻRaX {\hRR{q"=A-gGH?P6m]pYaO͜瓜cu;u{.v3}LJC H1^W¡$>F-<ӋԵ atdTW\$|eZ FVо72dO25ƏhwB#J. 6pK 0$$yZbi*5 ,{+{'kԴ|ݮt:/f?z9.%o-Atd%HEmX׋U%)H:Q j>Cn6d$5őDD: R5+|6d|;v ĴPu]taȉetgE)r Pw rr͝(*u=ctɱ>Q xoH5zT@Dۙ)p-»Ջ&JwS`*Q0gO>RkAgpPߎq{!E)1_D =櫍Il<xHPB=&.E]j bBݎ٢4_et&YO} K bf[T[28Q-F0ރ["o#yWއ]J#rϠET _k${LHX(;b |תxIxd!(8}b?D%$,: Mk!G0s5Z|"ճv\Y#GYͷtP6ah zRKWySࢭ&7S:.8.W9E_~zK)-s\.#ǙzO̰庢`}5juIߪ{âfxrrz۪Ȧ_&ۯ:O\lN>}1@Bsl^> c' 9[{΍L .XL)^aY.Ha{P@1'Mj Ժ 0wcl!K޼w;+\uJp`hp|j8죎ZO!ħrmX*c_4ӲWJ'ThiqIAJ_!<*ȜIzu7KJ5Ƚ&֮ frPH}"~Į9?%ר ygUXUfힸz>V,[כY8nC3jq/C˻>( KlqqNIMVL5l׮50-+2r<ғE|:Q1,~ѯyNREA~C٘pYT`@qd PnӇ[8icD-ȱ+RBKxt p"9#ܔlQ 'I"idfߘ޽֣a};&k&RTC?.xrߪ%{V5[Gˮ:RlqɤI0ZJipjRK~܅#* +>,4WpۅX?#^_gNMVg]R ;a=Wm-2I7TBcLbw:rlCuG EEp,ߜJ}׵tQ,9m4oQW4sXSH@nZ T~J6}Pho_R4l^Աf1B! c_ Y߼Gf v3h<$ "\W#8Ƙk:$d^ugy80Gk<5\5!@$ǰ3̐\LbuT]tbKAhNCMg4c*2/sдC[E/٬_Ͼ+ .sA4Ԑof8KJ+.⤬֫~3j )m2IC,Ο`epO>M܀}<„#&xZ j!ˠ$3pM[`xvooNZ.@| Ók!"įm'cV )lr P{hwJ"*FOWn}/3dWa]LDS)܉S,3vKԬ@" +ݕist4EQw*|z=]p@)MeG}'C*C,֒ , ̣KcO=e8-ܲ< qH iR\[$u[:0eꋨ0ˢߛP8$v Ė]6OP+"d>vC-kAD!' Z4ﵑcWe'Z=`A`` d&ȟ]5\*M8ž8 N KʋI,2mY B‡qX8TC#ƁkVo1m-Sϸc~@P) ʕ1m h`VbֆCXmb)#UdߤjȨʢ/E0[YK-SA{[\kGFx-c*ƞ]4;BQ' ̎S1TsRη} ](~`dlSZ1:q/FiE~kh\ 7P1 vp#zC[v ~ao XOOSx2 <(*bJ7]krۂ֚M0G=ҏ#VtQettm'y^XΖ3u'hh|z ٞo@*<%4+q5 r-鄀Bnot][9ݹm@wv$DmtWSHic䔳ru2~|nnF &Z1z9hg%' i&.G6"yUZ $_zݽ??L2'%j[xG6 (bZ(c孝q94[>SwLajZbhf2¿`x\]"w5!y=e2?S($YbACvC]ͽQÐj*>׸ϊkώA6yB^,v1d<}`VQEMc 3/_Ч},upєw9~);omLg?yk^'Wɖ SDǤoKzY2cF}̸ "e3I0&b7Oe[E߼!PʦV."r t S%[@za JCJDKu3Q # |3qZ0^`@&^@,XBb wl !,,hEUdi.&FT@^4rHǘP_4IKVDyQ)1wQb3l wuhR0Vx |mbcs8 $%u/?0M$=>G Ae- 5M)pIp,yavEH^:QSGg8E}߫NM/ІH梕UDۆ;L +fBE944OZ!VE!]_E/S(%Ɂ[QcVMJpKr.P]A1?o{%/M#@q:Ļ BTsH:π3;!Iw) u?J&w0TK|j o =R-"+N%7[SCj3_i 0J;Rډv;?EA%uh銨gHЋؔfvFubPP[SYa^!Q©^/xo >Us5!>H`?=H|DfpvqɎmg[Q نMH2[Ś]67іw;ѬJ"4`S 7o6sz3Bx'Ҽ :=['if֡nY3FvD(`){ [1Z7.J#^eqa8YEWFt؆R x yg&؅rJK4*eǘɮ ٭P.1%3wT BJ0&ʨ[H@݀U]g{2Hw{ FŽ0c&AɘB{c@)uRK1~覆{}~+=Cb(KNF3̮5!RH&0%ghͯT-턦P p婚$IC9M~>$ˊIh@6{3q@ hYM^4EP#ӕ%ҹĎE<U@s`bI^*AVe-]2w*WիP4`>ӱ8 K\HSrOo̎(H L."P$}m~keH.Ax blZ˸*9V$;ũUGX:8wՖ3םlAKy(cs1ȓ^wڅ SuY '-/6DU>YMwnmU u WWh+Tny!N+ttCQlUT /eE@JD? Y΂^.@|<8 jmfUMǜ ?芏jG>vsjb fTg4B0?`$J;Q/uzz R7!<7STDאzT.l"d;I9>iq`m/A|mw䊀xκ>v&vB8'7LTP&5/4^4U8=_Zt\^z^4Kٓ 5zӞѳg@Hi=G]P&ȋXiJkZ2+'8+mގ}w5$x C؍yyx̓ ~pNmnLҕ7 4Hb_J +jh~Mvdo]z{lĵ=D6 Rqxؘ!ݾ3]Z~! !N.rK`~S ~Lj_&4Qemˇz6cJ<}n ƙYIP" 5@=yS-]0@|ҰJmdQ+䟟eϞ .1 ='s=]<\?B6!0b8K%< z,rI8{+J`+!صe_fS~ uO:F2Fawh&Y˻.ݙZ" s-a};ϠLf>b9P8oaŻ C03ۀ!,!w1}#_51 L!LF1NK Kh%3NXE# 爵cs"-vw֬N҈>k43ho̅ᙀ7X/:=v :4z<"3\*nOn v<3X:`a5xKUb<9ٗџJ荪<6ھwNC 5UḨ̎h_&4nSnAקOjday˕|tCk44Z5i~/ގhb2r1tZ}]{YtCn27Rd`/im}%ErPau6R7[-X@G|tEݰ{%+N-7f&jn⏡dž3A-.MoʸWK=hZ`>O,2j"|SK$ )笄|N^a,sbo_$"mbIR]*O#wE 5MNZe "0g&krxM% ' !܍t,a) Q7bV,1?E$BRzpCCXTױ՚ϷAFH r~$``Ə a=O *S쉫×dƅ\gǨ; ut,Ɇ/sOo\P]uectĦU==@4 8Ѹ lIGaHAZTlփV=-,/%Pycؽ*<XYߊ~\eNB,ᙟSZ._Hls!rŘA阴d~OS\u$'L[i[P9Ä+vtd#ܺgd9!cҺ9\DP2% }x].ї!up{ zf?[*`qS\2{ZwgԢzb4w 6ވlïƚL|<<|hb]ev:o> XWŬ= !kјoqu]C^LZnԹK d7Zi*ةzOqʾ(%=4P>̉X,PCq}L^`Cf;`󟗑le21,IJ?U5ӽs}s?J &kaF 9i9#32ɐRE}51w9BqMS LJi/_O=^+Ĕ()ՉټRͳkzYxvXqHr*{ Y&%?.0R D6) & 0mW^ţĪ`nذgAlbde=rC!VnzEe3 FDMmq~b_P`0]\b{ҎKl<݈%<ذHvz>{=*z RAvPq(˰3 w$zmE[q4 "v!XyQL !??B›T0vkgp62<3mܵ-xy4 T-xu{]HʗOI7qp5, % 4y_ 9g4;"C8ߢnO .v)+h:6}Õ :gSpNxπȌnBOX#vMr;+#Lm| %x_qB*Ф[`3fhZ쐃MFe8>ZxyWZRHVV$D-0޺{Lt4Dԇ.?뫀:e܋ȉQ={1Ƽ&[IA3e<B8iAOn.v[_,qX~!!g[LLkiOd0^ڷ=9c;k&b94ܘIqNB$eD^MUvHPR+?HXZFcpfrr9.Rۅ˦fxf2^|,m@ m";D(T1= @S ¥Ǝ9ݙ | %kG~|)ߚjw; a VsY "hNm_3q nJڒ9e)bjjH(-1ÿ1G@kBQ A3EG~sax9LUtm@uGnx7d"aq\ښ-4H]lq' В<4~*l]YjU>҂a={C3^kb@\!+Guf0A.@xӧ&B;҆}sc#˥l4kb">  Iힴ'^Z$rLjVy /&g%+tTnnDdl5 9<<4jߙ@925܄"K=R!9j AF6_g(hh]o6[E+V{WP R8+ ? _.t+yAM1 ޙ[Iw 8'BV[18q(/z a6zFPtπT+K2HyaHK25?L}8:b0'/e8D:\~슩R@ "<Y.-Y.(I %FpIM܋AQhaࠇ[siAZ}.E[Ydr 㟪Uzb0?u ;+Y{zhcQ*S STkz,gT_܆[f >>ʃ`Yj^4̻D!FL%#C90|u cT~@l^?%&% yXnjF[:BB؀5sVu #Q̛ϭb{1Uߌ >#Ĺ*A}h>f(Z+r0."W0f U5#anI|YqN$JE+Zm'7ĺm "|at*D30u<8CX<Ǡ,Xu ϒ#[\#̌e6;ƣNZ]ߞ5Ym$wW95|wafzesx5i]baD1E :%5_;R!"dRUA\lyYKR%L GH9֞"IϽnkԮ殝x協4PsӗTvB ?VrĈR|3ݨgHi_f|2{q#5d烪 B'դu6fcNuZ*n(:j:A*P/3;ҽm+TTE}>㪝?8r PHB h(#e# ïtw4F"טՠL>ޥqv TrІ0-CM2K=w-   3v0``EŔØBYM)C)fձ"fPS*9q+d ct>Y2m,rKΪfS:lVcs-K.bWj`dLha *, ݰ]PVZeHgau7 (i-B*Zc":b]=T8 cFqsڼ( hվ(i(K5_3Biy zAuId"ah7x>T@7EE+8} tuR:r- 9)=^#V-iZ^\pR)s 8\՛ou{3h<;tZ=FTQB_-.KQz;.BJw:$E~O̝MC2P /BC T/T>kzޮmQl׿KR', j_|CR*r.H$qhg%zpLL#?p\NZ6lxy:RRrTH Ñs"Uhyq$SKw%wü`5*):ma>w7 FyYX0;IzA@7"g 7c'km{'0-6D `W.$b~qX#WqO0DzіE 8|x)2Z}j;Ez# ;>:iNq`V*K.Ҵtcڗn݃8 L/~{MBmylJs .5lB:笤\SG1|s1Ppn3Ж+sm6^?$r͹k$AbIϳw~P so} >cn/sCVy-T0TKPİKc|ާGEW_;򉧫I)XhP~W=X._V˛/C⒛AuXD1.*;g+M],a[R_7s`; hӶٝ."&/nhV[vD'DK(/s2{xx첯)Mc!J^,1MøhNT\s lKG V"9~\dz#OqcΚP[jZXĉ6"$[[RL5$: R0g\[{[?`Ԝ>$.1(?6Ӄ*c`?ciqɱC3ay|86(@(X1;'=]ռL`oFoWUhzA]4 FܒV]觗' N('askqzcֶմMq*tCNRd&O;i1N? W^RrCW<~oaKI{hdQ-CǼҬ!IE;c^y&WO xYM?upz8K.\ v"Y( BzW<\BxG)I 5#g 2yX.lb%ʠ$[F%v| 2l9a+"5{V"})0i(ns.1yJN*9~H\(4.F,G91$PJ- %=rtC'h#fL U410V{Ѫm;W&T:1j Q<35)1[ԕ$UfRh3[(v~nR%u 'gZ.3 nU߈TVtBv`m]wj=Q;+-iOwE'G-Va~~x Q ށ>Vjvq\:lx{Q*"em,3oYŚ E EPw`1)&hGۋEF]hI2{"hPqΆ*fXrOo60jGXdNWSa0ן[Pڭ= :#WEHf%Clj $xr#\B8An)qـMgp mg_!ƨfBqZFg)Eh?, qܚ\+ORpo!Io=q{~bKT-'aX;A}*x3,R+iQ+8ږ-8"{_x Ŝ/B{ܓugxm8CdkӂP$DWYhYuy 8ebLC0`;{ K;m PНyv 7ۍYS]GR(#r-KY1DCRʛpF񾖊m1r%RIh܇Kdn|U}l\A綹V x.ƩG5CR@ N!V?:LH>kv;q(M&'&|URB NUTr]~7(r9Bdy|N %F[%۾&Gn#5`GK:jBQsXޓyDnPf[B1c_p1qıVn_/AiYyPfDȤ}غ7Sej]'Z];$x\v{/ |elDM"jQ9-ј=tDj<1}R2#Bǩc %<֘ku-RsrY2ؐq "[x9g.#A DBxp*G؝*OK^ J!8y9FLcH3A[~Bc@Iw.7CK[_JJl1=4pُEsmiȿ~wtDkQSx6xge1&*; gMeҙWGOz-m{9#n^/x#`hQ. ,|4598$uikouW)p iB ߚ䋷C3ۋV05>eh8ˆ- 2^3;W?e~كWa A;8BRH%ӎ|Pp%_R<~E`~NFG`0)LԍD:{"5Q'yV,E`]t;EfcһcMHbI~F-FŔƬ{YConE\`Gy1uezRrj7F3 &Jmk(d.Aaˤ@ށhyvlgC/bW`jQQ#-fIT!i2B:XuC;!OD_wrbٹ-Wo 4Y8~bw͖~cWKu޺.\3/FeA[?;$^فdNZErjj΄҆<˘r-Jv:)QZGW 38B Y σ{IJgZF 2l4r (B=0LhEHXSju,h=zc.]pCw1Φ,o}d:.R~IGAM!Tv*:A}h[BwJk opJ"2cQ "AB"aW$E~2LQGQ$=|u|fncg/yS7ح٪XLc:W&和7Up1J*p$1&>RX #F̍{flx!C( kóT 7/[qv+ˀ8g$QWiP=`+ X9yTځ%8hmB9 iJmmXv,noJp"pQ"< 1۩12PވʆB$>&Y\E>a߷".αv6ˋ+:͗φ̚1NؑW!' lu[cY $! J0n.w0@">ǨfH (UȠ>9#5 NXkaۂ: ~<Xf$[KُMq?|\ 'Svq $/S;nx^@ 6#D^i_\b0+4ia\ u-r- NF#(D9S6\dgufnox\ښ&KK7낙]6':}'d5 d9)l< n / r?:3p?mb$sF_.ntR-ܣ G p%,DUI'ZI$3$;fK}|e9- fthA 9>E6wM~평"ؠ;mӖOi܊mgE~D(7Yw 5lU]7鴈g(_"p4NYCM}RH.nEH'c{lP|O_N uNS*rEE)R Nc0$n0jƟGFj א:`lE"]uT0F?36ppLaoa % /Gq7M6W(w |ZY^ykH,!?%! ϒzU3FBA9ݏDG#+Irb㏗N1`-vLݼUAϨ[[6-%~E~c >Mpv| r[(YJg]8>3>BNf%w0MWSuo#kh8%I Rp2̏o=D@/^]-jD?ƌ'qcoOJHU΋D\\kN,'G'v $$9 /"alF`ұIvKnVib^io~Ky,g ^xAshLPRC9ڲ,1,4) յթ;ŸK1XN#姹?K-JӀɕnXA.Ղ[]Ny_6DR!D)qVEDQY37Pc+ I_qzY`/137$TV`DV/E*Ҋɗ,{*+ch#s/UR0+, o`Hd[%7GS ~A0(GW$|ù落G>+=@#W!o.8 }}Vq^VsGҾw=I/ ɏ[jݙ](wREp"fN hZW0t&=oܖbK;] sJi\ "[gM:PI'$}nX;ˉNS9vo8}-So{ÑڱK`o-5!Q˪Knj%2X8at w=v,HZ8ص|]kI6n8BgTY^ڷ Ir RCeGyDMॎP~>,wWYTp3_V #kll!4<IR!0x ;+õEldaȞPTYA62)`6-uGYȐc$ dPzCUdZlU:dFvgL AUwoLߢlgb,BP}O9="ZŨ5j9-b习PE8jSp-DFh'ZSOܜЧ' 1_'1Fz|Cu@ss%ФDMhatG[֪)4{afVH9T4?lHM'Q1>e~"n\ 5Soaԓc_R8*z)ۣ5-_"Wo-LbNRử3oY "i`pL*(֠-u#R$wa}0rL/{y*'ueϟe@B4??~~Zx(4hfthn6ŽϿA\ޢ?#GA9 8hn OKtQK Φ63э?Jo/5KKl,na#M-H|-E{.wCWQ8s.u,̂lc?KVo"Z9O ~i:GsճWNV-T d9/rǴ6%!0f ң𮚧$ ;gyp.`H嶑j!Kz|_0TB.8}䋋9%!-3FByہᦚg#u^أPM1\#ejB$H OI?{3D "FdTehE/\#iXSZYx?2,[FaD[_S] ]XMUCߎJ4QE_{]e 3>Bsrpn%6㽕:HUEʀE3Xh)"x`sbkI&YĶ\?V:^B5z0>^Ss25 *M{l IL"C!^ܹ0 xQ6 MB-=Dsp--ɕ)Q M?L$AD#%\'S ˊn#YB8pĄ'B0pP\ر]Zі#t#Zd"dgY{cCc@\z벇q($o%^,\. ^6"**#f9QwY'daتa=50 L/'xGvt ~xh\pLG^0jPc׷3aK9r* YıiƸ𕠫:2P.,ƿ h3:HdO _-^}bQRp#A5 jyJ g)Ub7v֫D#oJ0X4CP#cy?Z{'Լ,Ń)X*B,ұ=Q3 ׁ@mRqW$h]/`#>V'%[?,8w^"&ysHk";,MhjpTo8)6Mb7lQW.g 8$Wh܀͢1,ݗ<"ќ8|C7= F;U6ݝA&e%G ^Uo@DZ, %fZKk֭N-޿ -$-FGg߫ w '1ί̷̀Y*,8i¸vHA|.@\c9 սaZ7zl0۰8cb HoZ`mMzIXොz]DyNi%RH'xR M!`y's 3oOAͻ**}ZP& 1ot+麦y 0r!g)lzKMOdӿ.]'$B hW2ˉ51mSw)- l<ܜȆ7 Վ(8,:IS ;=x2:^{h\H8Egc1\i`!nӬǸֲTFħhsW`hro~G#ړW^ild4$ mJ.@g璓21A$I?Qx>+$2#2p9Yuk oIʧ7MN{.:uͯT ˁv'[P&u onzKCĚ)hR5iL~6}J2Va,kgwY\s?@rO@njLHRH9Q/C$RE(DĞQ)v6o2=㿨y ?S$tH(|;|4 ,9V'mw߇6@~x`fQP2$돟N*=b RrĈsZǫΤ(ގƂtRb]^ RZKveB*r)>=B 5UV"b.˘[&~;1h +屋A1ZRj;|>?E(cC̗zS GeOz5p{[ P^X,YcZV3.bЫτ.A#yħvϺa)S1UDޫ k9/dK%jX`oUiu8Hx Y7/Ϋzr5SVy~`9T`KPj՜>Kth5 ];a^|>5dow / ۞]:Pt>ٻM5h?q#&ZYN at 4>4+>p(ӟQĂ8y,+74G_Я{:] :@uZij\'̮)g\C (78 #r,Zfiu`:zf*Ig-VOֈJ~d@m}W 3=39{+GgBK-a#x긨#q/δZ ߷Kj*>&RU\eBnzx\_RJ +?i.쭄] ]fY-1)tg/F+>PBN@#YylWl}kN.H4M4rZ!Mo -gfEkŒ"i]!ZGىlDc#C4RRE:oA>Oq'}=HǶ5t7/UVWu}r^s Ny~VUEE4VUZ^/ߠџZ%-lY$s=:xg/lPY Ph7UY;>i0j1ߕjҶ;5~|+n n?cwL^20dǫWtfPk_wd1G2aż8zKfƚZ*4'tYRaq?*tKxZ{Cz& mS: 0.%)MJle rXO&=Jn{qn?wrC]N;8?긘*ePB wIY }4dY(_!|NsD<~fl(gSP}r[s P)qJʼ4]\ZjkcӀo@SO<hkFo+-" `ML֒KO*7wquM41AzNIvmTYz|6~JTɘ׾rߚ` r/wZ4Fb3[mb6wJƤ. rCi0+bG~ef6K 5a;M-dM {]1ͫ\WQH<E-+8 (aշHJA$83v$aFuB&!b-;fUpwZ jb 5\+ <瓏20*IbSہ҈Y$ i|k۴fG1YID:Ё -y0`/y9Vl/ v͑+H_Dk Xs?U-FLΫ+^Vφ3ߓM|ӑ/^ 魚$T$͉ aϒ6:WToM6F}asF[tCJHwv;s8d*tM!ȯix ЄC!"{ d +7cjr%  *Id4 ~(%R9.2a t] W% TuGR%qMմZp% o]TI[v~B,遱a2RiRj:GSxP>Io17Y,..+^Oj ~ͥef\G6ޔ1sٹS=C'c[7VLr AʌJRʒŞ塴Pluf=OUJ'r% ^d&E@#ymQr<|_71eZWbzbJ ^KtU}+kZۗ, ٙy$BFV:zB0]u<| nnޡJ:{pB&YTGseOKKP%跽'&δq.0 ukM*-¸[:4;YL k]8R(Mlj#ANrs" ]5ݺ$agЇV/)R ;lXV="J^_[n+coJ29~q FՖ j?8ݺpp\-]q%E?ݡvRLbivH"J$/$̑mU^c_'IίfbO `Uo7 _/L7"i}%k/`CX:{BoE]fijP:g W(< 䦶7S3(FI"{_Դ"laqi J}+6 S^Fz q*_0hmnH' -a'Qx_dNr*Ɇ/n{oZ_U>.wŀ2ԛ8)R԰8 :/eBWs_"Q>L6Mc9S[1`ޟxWm<~1cDVq 7>/6,ZmLSUKc~8V0_NOLw)8cV,jkڿbr9kd"p~jmeT)ҿCh:R&P>qhr*VV|A"X!_)^ 2A i{%ĠWr_'st,zFDᲳFfUIJ ]lf4gnE@`,X&p#N 9 xZcZ^óA986<[U[׿Lʚ/?`G)7ZbIvbRKN&>928{\s%!8?ʥ3˃52W7cq',®׉5I="ȩff@{ZBs{cY:H뉧ϞK@ß: -͒kW7xnUhI(g6_<>@0GqfjX)Z&ߦ:80$] OH8K bIDmV(+-?,RS&jc=@#!Yb =-6rUW 9n1~\;1`m5qxoրN b8#4 $'ݹH@h %ܯ \@Ng6ک?x14сe/2PW8{O23B2wZ>QuU׏; V~Lㄉ0SuSq4M"Xp΢un聕momÎ&1 l"opȯ~%];z| MݤLyEFn@+$k~kOp5e>LO#":=:EG`;ՓZ)wA3*Bf^E; v[/dT{NpE@>聓L2gcIucPo|4&n2gQC@Cu.>:;qlJ\v(g]BL8ݯJM W f ~~UV}fE9=wxBx4 Ya^eZogS8>AĐI}^j3YR͝|_185|]ezp^@[:,Q`2VU' PXXaBq 8iQ o"6 O RE=>9Uyb,.HX7~%K18%K}]tx0Ƿ{+*tp˻3 Y$!e ?\@XTiO\P>BNwnz=1aE|<Vx}`KU㊟#<Ho4F3"Pݼ\'0q7 Ul61qzbA ^@7[oazk0ޱ(ͱGvx G96V({Q}5'Rolذ-/ /s9ޒN~hJZh#/8AhJqFQE*o4b #bIn L3",==n#2sAaƊ6n7. -ϵA E  #Џ#aA2jf'9PА?-OiP:왼jcd}S^LkOXEpފ*4c&[ī=5Hm<%Dz걙k'\QO6HǓqMPqf*;lWEљ:3ר_q AœT]XʚGG0Y^$)-sc\0~Zi |W4q֦`­`Bs%ni!iG"0Q|?weCz F Zjp#_t}È-`ؿ1}QH/U&=n۶5㷼vQ$IK E 7=Nըj=Ѫʳ<(UBkKTRY <rR_;җ  đPLLo8W ɋC]96}I؋S_ޢQG4U*7ho>L\Wqg <[LE8y7RTʱX9׃XՊH6t,m^`7%0ݮlDw{C+[{j$&ĝT'T[,{ 2&Aw/Q  YIo A)d m&K!H0{> z 9cc15u#3t >KLM8 nyA|!8{\m4Pg0WV,+)2ecefӷ|1 Yh&A5r3-!$e%AbJPư9Q]MF Q\w)UY# fqI%v]5M}QGO6^Ȉ˺Bl<3~q&wnY"2)qꏌ0C6tǾ\Y 1,d {eB\@tnThӶ·UG\2[G^Xƿ0~W'Bx .WnáB\wt`)S-J&iBT[stM!lXw}>'w\}j=/L]&,UPld-n=^r+E$!Er7XLLh5;qǞ bQmq:88kT-.avvLuPM;H&ٺCW\_ԅ\BWQ0syڏ+Cf%RG`(>5B3N EۖWGaxMiq @ kNC 1g<<@}Tg()A~ٲA-]G9ϑ mw@k#:澯QhWh^]rjSZ-c3>'evؐdOc$In9U'FCվtڶƝX{T.θ3|dA?;:$x>AN| Z h[d=#snn3q<ȣz.vF%\m6-qt=tr6e/SMw4su V6TaiO% :/Ş#au a +T1+~֑%ҡI#/\ f 1 T5%؋aAH-XG&߄0J4vjf_d;\ |XŐcዻYw Ha}0e3SΰO8 Rg kqP,t2zjNu6Sic7WS"^Fz̡瑾D\ coKۧSIg*DžV0]>@ OBQzl`p(Z $}hWL&;u o-7 BbUr\zkj)'K%D~64M7۝'<JʎR(xs~w_@>xM bLP^8ܥ#uNmP/rag~ʘHL4g^Ļlº^Qҡ?雳t&ણe}9kաR{$?ĻKrpWgo5_1BkU PCr Ӗnon,?!؎K{ MHatшHyJ?m_6m(I'K[M?sӭ(|زXoZj3|Ը~?I]f陪CO3 *rm6Z$l# $'`["hL6ps>Jz(_˺4-Y=e; !?y:ަ^F|C$ũD8֐D 55Vե:>ϗ䇎]UɅd (a|zc9)=/kBi 32+bw?;< ]${\Ф yX%qi{Xѕ nCHhU)u*aH>p53|4YIMuܗ8#"JkW_R7듰27z|xyÿ< 8Hđ-UT ::~k ,a'pBb7^%,85y#|57c,ji@[@?frFZ[ۦq ,`ҽ'ՕV쨂(2-:z{Ve.%)M.?{жΓk "+.A tl.ֺ RWrtW"T(/_ X)ջY;Tr/$0z=c+OMޟݝE@_/%ǒgNF8;s+͑zקO&x]Ӌz帺!<0^h(;RiJ.>l߱]f1`e;A dh~0n DLYkI)E@B-17|Vblۇķw:G|,ꚺbIϪZTGTV Wb̨2p2fu\11<&ߓ4nq1y &52SEӫI?Kn;h[(NcUхv1A*t<{t4f։'HHƵtWإ6  تj2peg4jA.LtQd $"Y(EijK9꠰ &BjU,p"q:inP cbډz/TVg:R_c)C̵ 3Vi0G7 J ï>\Ĺ@[&෴`p>쎝PYyxK [e{9R>OVs1YYŏ3yD1iLZr˴ SDז)֎ԃjsrCMs̨v!t֩[hM6>=Ēng>-ƋZ#2!o% %nƱd.3K523e|c0U<)T|j z7r5Q "h-h[f/6 2M.?xrӡ->ɨJOUУkq_dm0}EE4!vv?J/G*KkGiQW#R򢺸m_M/Ey8^D{ļ9{YÒvn kcƐ%]SpwWk}$ۑĬ.bkOc + _  ]7o|kOx]J|(&AD٬,8эU,O^آG2Q`3F.[Jqg7YS_;S'dR/JW[Ͽ[+3cTRhn5@wHvpI{D4#Lw !(C'XHͻHhLp |_"@Z m.)3z~^27wa6Pz[=Hq ~/I>՛F7f4'N?0W-ಛ<?IJqeN#л[0Јlb}][}v5My^:xYfwγbL+ 캏tbvkS^ <ҙ{[krB[跑یp_dozȂwkb8mʨÓS4/@zO%I:0`p߬@Hp1=T;[[VhPlj#RTR_~PLK̦ Pzar)wXoI OKV#35/]|]6lݓ }Fu;B$}5T}9W[{1Qi`o۱1 Pޯ1QEI JgpHM)< }6]CiF~86mcWQ+E42Etґw XԎ=hVWS* \P:AyC,b[srk^l2bq8$dx(a[M9eL'i۰20זbBKYUrRplYh\r{cǣJ`7՟CnV*|^%:A6Q a#ٵHe}v~bK(4Jh9 'cuGrF6bu0*ٱ#jv05ct4`T0Z($C+~ w@*@ceԏ5'@&vInO4@06qĻ_oм ҽJK*]L运EuIX{*}QG.\+эWY!;G, 1G :896' 4S(yKu?2 ǹ:T*7y1qZ?gUg軲7PMC>Cl{pJy?ew̪ Nn,FB&/+{suߐ%:hdrexȘ-JQ ^,;K77N5WId#̬eEMooR1Z.K@uw~DcT`o[ .Bwoz&3g.[~f 1V~(CA]l&Tz"*|&6>-d!`^M0-ϡwؐ^=L:bT3`س@pR%Hᜄ.mZ ;Pjysm{6nZ%vdT C^jWtkRu:lqUUSwGݴb?1 W} +5SZfǰn3BNUT[Hk08Q1rybɳ<0:?F9,POMiFe_DO}():R]ªz,X%w;@3,nk Uj,3k'[Bj/W")HmϦGt& aBQư|hvQI.[v^!SjyΉ (aO S#EŹ YѺv|u%u66eV?F=y+ϧ#$G犣b֘5T]86R?Ye6Ilv/{n'?h|XCf\M7~ȟ<,NY f7xrcjH;Vl۽d] &/JFz+wL%P%unve!J:BӬ5o5$1}=_V '<#B6Hn wox¶Z|/VaqS#Ǚg5OlީN* HWE~=ϾGl8C6{q%J#]W .t8[' ep G+vSQ #yW/˖ӨCš함0O5ʝ>R.=ƩO\*&¹ J !Z >8v֍$J’at,{n@[isUgDžCt&Q>⎑mѓj3h[.Zx?MU!W((g rݳ!+.vk,83#@rR8LD30 7v[~ž` DWέE=q x9Ie^zMRy( Ъ,KpCZȇ=5W9= dOnq(7 @Vurvy{̀XAUt#o}KM./R1J4Wa mN[-/9Y9 ӟ5D-s&^:ppeȯ NC~oZЗ:dȏH'7 ޗ*~ДβС]V1 1]~ɻraE$շ+punobLч+;{] h1GA5q6Kn]ngzqs &=%WAՃl'&R蝹ODO_,lQŁ0"RpmV!1nH<_˶9&^`D`PD;5ʳ#pPZ˷oK8G1`f]=O_q D5KuwXte[@5O8+ ݅x\ f#0]0&^n [VrmZ'z FVPİ\ ʑu)h 1Xm47VQhUf3cu ^@Wt1eb3x0i(8i[d\#?K;bb5\議)X +R]]) T,:KR寸U׶:쐱e_.2lBq0;)wIBfBJP>3T2C+q3|FѮhq`AOBz}N?wtI#KSGǹ /p#JM bPY/KRxs"G*LlpJXNvo͎+nЕ8Uo!19\QׁUq 4n=i6dTxhg 7Iehg VSt;>Ɠ_0_AL,Duy K[>{*uŠP-(Fv@qv!9(R @(iX̉me3C'Yd-ӮsJ_mKA:bu/Ea]U2qLckJca9H(nӛ{L65osRQT.!qY7 *VKao!bLWhەomWQ1clnBRLinIX\eVBI&p8L/+|6"_Rk^lA9O94ﰠpY(]!{dR,p4 wG} 6W}d ,GrG{)Lkz9dX 3+mH~Rsdgd˨~UD >fʷؒª5ZMj<).1bϙ~ m噞S9݃Y]У/X֮)CwT ?K2ݙ.tT!M4re+aBwx G ey>^ +bJ]^@/A&cd8]IѸ|L_8G<<6irZ7IЮ,[1 @@D<( DfPaY}*mMq V{bA"S0TtO.VX{+Jʕ ƳE\g#z{p|#-i/{X2Վ#"dP<քZ~: @v_#*ڇ722)܃gvM[]#H4Nr-@EI/Etc?0iy\8)x۔K>21WmhDŗ?S=[9c"իF W z=]>UP;|lcEk+m$Z +W?3"[I!9u2\89_Ŏkoy7wΫσѺ@cn[b_NJA/S& ͯ>\_NQ۸5 &+K)ݣ/9gBIh DP oT4YBeZAx{zeu?!Sҝﮆ9RF)<1Cu٬[tAD-X| kX2}. jwҏ= (X.<7h)]})--wyVOy_o,nr|@+KQw7nyTyt3ZZqiT~?dUS8U c?}'dHcїqYpDo-I] bd p` 潚La8g‰9]^\YGl@hnp ؀+Q,F2F8#7,a4쟨aWR̸gRCpSD$8Mo̷ŝ>Ux!.ԚSR\p<}GѤ_r7))"`W)rCE牕}zF~r`* sMb yF laC_coux8Gh@(#Co߃z͇ (Q7kՐ|īot)J1: zD1Ymϲ-|SGת~@i` cl|@rUeH9b#ǼA?6tJ93ue', ՜uFMXt}" mmD |݉i x\5mefa`-*|EQ7)h="dQtJ  F1M3.63 w l>ihdjȎfJy<x1\c|qLz[e~i)_ƹ sk"x+V>T,v85>#݅Œc9yHm4륁D@'I:>(Fd\GS {p2-zb6O}BT[Ԟ5r3wx8[e$4e؉-,@2rLQKĜ\AP"yzQKs"s愬DYeT:;׊.,ȝfĚG FuU5Dc1]qyFV%B~ΆA"&,kLu)+A+w-gTڰ\W5AD`ත#PRfY}.-Bh!zU !/cbDl瓟픨 RNܐJN 93P|-WqNzK\3u, {\׶c d(r֑GJȊ\*c G :WD+&eI֦>ǖ,wWB9ڻQrXh!GJ#"*y[XҖ3@=f'L3yH4{iu߽ K V5fk幈)mBhwOԹd.?UX|p;;{"h[;6] dA(,^:_9Fpw= F4ks1bP-wJ B@O9btO3 TSSbuVH0~u P{dkꆮDR ڒrNJ/ccaXmM1z'ffT5VXQ 'y~"md!k?c*By |AxSگD2Oa{3|~`0Auް^x '*}֬ok5t. x}7~(:TWU@ *v#?mO1 EU Jf0 XPB$Yay\)' GF;Wѹ`R 1mhZ`ghƀu+坽H}M\v=T k.C57,p0R.^-ux)PCSEWm׼fKtttw ƻ=#2\Nmг]+ћ%x\RڳvFd:xvE vAU L&_#|^d uV2hM3ojGc8{b^07]/,·u D =ԣС57I>iQ'4zm5"^:::M/ùPdЍ7_YsXg\o0\s( 羾Fͥ4G$ϑ `hfD<2xP{2t$&hix%$nCv9"w{M].* h1FT_+κa!(Qx_Db}%TÓC|WX]6k ?eDq7*GMqgU4)bV[Nkpl-0q.ìlj<Qa{ hœ+,9Ǩ[ 'ᥫMOjm9DJUn^D BX8kI& ~t \(:P] j$[Gue@tVBKnraRAGƌ K߫sd1i^e8ן͌D0z,nC%j놤27n&ݎ~x{>'b} YlJJ1Gu@8-h#iŠ5eR}BGfMsu1]+SND"J×L9g5CE+.C>bV)Bh[x4ɝ0F8a9eyNMi2CWNJ!&?AA%2œ@hmÜaMH#<"SObiEzrg<*(^IQ'^=>Y%oGdXdɐ Z Dig=I%o^՛_&Mhn)<26bj#D @eyT7 AV;P-Zh^},Z;FU{NTd`J`q~VHC9_4RNԬy]ӱ!iǹ%T6lߒ0Oy/rkÖT0NC t7]ki*:J,F^22ϲ- _2ŢW)H&ƌh i'Ǒ )b!\C[a@=4"-) |(Wal帬dž#bYۨ{ef"oRP'T&"6 cU \xI\1%Uϡ0jh(5 X fGض*5ꂰM'1b\,(Uk 1W-3u?mA0\Wr ]\AE'y2Kaz.f `'QEtMΏ slrSg&:Vae zԪ d_IuyUn_ miFǼdhg yk}ӟJ/&ßխuMJ |Kqz:hIw8ql7i%;2NCnåB~4^eG<%ڤJXa"R!V_ɛ؟AB.68ωؠ_gMHshyq(Csg f}OL&}2UC0o9H7u*@[FlWԷC qKB+1Q!>kߟ+۩Xv6[8_. ֙sYz5w;>u/"{r{(qX:W46*}2:s T~`@-u1GhH03CGN{;HdyRT܌q-d;}t`A=Okx WRR?-U=͔xF`XUg,Uj P@Cu4H HzK-r$Uˉ(rѧGG{Wo` 0a:5Ml-N/Hf 7:3,͡ X''qt Fu$aPq71xr噼i[H Ǫ8 g 6:Z5ީ8(23>LF)FrHzpP]ws`̠8XhIGA2/=(F\:9}d^=dž'O5ǓHD xx-tvxK Iy!aērAhh{f3&gJJƴ(™SBZ$-L{"=$),*=@؉0 *N.dFEY{2xx5HA *]pD>06?w^k73/Js8j_yJ{ᴛA|(4 Y덲#&ZQv70A9I*NGɹ=QGVe-K `oم-l@11K_isɦwCz,r>d+~Ͳ (P*pM;,ɔ#-%ep\mgIF:|9މu,M\eDv;4rvp qn*FhK+U iKm濁j܇ʩE{dd~sľL!cH˞^Pr_.0KVCۄ(\;+ǚn0-N5W :PUO'Tezf!bI):nDBAbĺUAA"v X(҃G4P#ikf :5pMJFM }tZ"*0qFPۘ P)o9ITע,yO_;s$]c͞C7cÌe)b!롪r{<΁q(ڵnJWCQ{`P@+Uo;b.xA[Ol\+BR`rckzXܾ"3X0/1L2n:VtLݍ{dYd1&^皃K/HS1Wlr+Ѩd`2H[,-?dzqQ*c>\u[9鴝|^Ksgsʧ4t4];@P,!W=+Rt+x5"–,|uG(<4Xܥ%B6M%yx0n#ӓ:aIl"u%vmT[願ek:6gڑf-6 >*:mYgW۰ki#?Iɻ=@"&"\3WC_SX|~h2L!&#0p:mv5Q&\疱p]h+_Tx$=fE+*M0O&H(鬬H1O:| ѣR1HMjjt.,A(ay{I10sVWaB\o UރSQ㱀xHP]I 3}]5D,8 gqV1bp[8_X": 8[-Lz"gK7O6 h&(! =3!gʤZJjGF^Φm|*!^, -" ]?q/%jd\~̻ ϱ CadS`%!w_Js' E}zA!Zg\^q5]rtݭN!O>ӒBYj;Td5 =ڰUC1sZG9 |H'Gi||*GcYޯef!Z"4~O9'9Y hMg+ '׃ ,)ypk5M܉NeðNC`"XMF4Vj2uCo('ΰ n!% j)lUvLb1" ;Vk.F%'G)иt G * h\x׽`YMs*YO'r[28?GbfV-ʻ89R$ⷼch ~єxX/c'E&@U  :oY;:2fmΘ %9%YcbM\׳@tH˟:ѢY<"D3r!p8>*2weAEB &w,׊a2Lem oaLΣNŽԮR$_.u| < r @8J+z0OglPȾ,?;7 _##@٘@] )iνдYQQ-iŴZ{[ntPjJv^`9]Di/W Ec>"3V{u,!8T}?:LA"ѠBh.Ԓn1#p8OY%͘"e]/+\0E2 ~K1u_|f'e+ֺbb 9ݾA)ٟg̘ND˕dFړOYW&.Sg|:V6Q{;&P O(YEq‰k'^/`%, b|&]mXIy4oH.i3OP"&m}oӟ rp `F}iZ&&r`^yNq@/G7ʄӢv>>7gƓڻ` 'Njli[k+s" ǰp!E>PU=i|dMġx1?PFMC[@ IY=*XȾ7[}u=q dk7yfgYK< ԫkPޱ䳫.ndwu6QwS?DFehpz #eTL ȓ=!yȴ=pʬ/!02W]`|C@<*Cmy4~@t-{ U3Xί 34F EHOM[ќ=~n˘QՆV`n|6~^ ޴ ,\ S5Gㆲ;;y3vX~X^`RzN0m!lq\{Ϯ@ DZ7]$WC u=Qk}zVyq~un[͙ hD^a bg d:n|D+JtԺ,T[IbYvi| b#պr\ZF0Dc{z !ڜB ƩArG0fͳsU-S p+~,ILTEra/AZU'ۭ5hg:p"p$ˡ >3ʴ眈q+}cA< pv)ӊ=ʥpq\xZ#yIHBL߱L{2|kޝXt0: *|lE6@mw$crhegb#H:86Yխys9^WIaGEz7 K/ e@-h#O-tqpQnFn?bU뷜lG 86t&؂MdZJ|pA, RݰK<t[R=sGVuN ;qaY!lOX䈢Hfҋ$Ldk}?2{ LvJm)VOGv xz&pq1 *'畻K+^Uys7j:'@ |"ήrXV@3!XwG:)(o+7y ժGh)Hl\.<ߜ/'+st h(:Jjq݁7a|-41;W %dɰЎ9/s$xKKH\<>h\O2SAr#>*?ޕ\lD' ~Ggd5sz* i>ݑ|hC3)gN0E1a0HqB)m>X]V`t}E:~jLo; =smt ooq!ks]q }lػ:z74L+tPƚ5%"ɪswn”Ff |1@zY~뭇m1lXK^Rд/FDq:;>)*^ia9dqI`yeQ'nPE>B6c'0ÿ!ZBDR aRnS淯`.u5J@fy'[ѨT}`s ~aB؝]p?0Ol_LT5?tŖk%}ek$Ylzp2#?h7׭źTRR5y!} 9aQe4CZeO Nh( TցVMqFZGLGQv2򭃰v:I)MIdWiN+WMqiO<|*[X&=!7Scbz_pԺL}Zٕy˸1,Pdَu!-CeHyA#sX^#@oVMϋ51s☿i_QXoC}݅i>PupU,n>1u'6* gyt|ݒ/e>}m2_VKjj6Fvc5r#h0€ו0:< i7٭͓?ԪNe90el&޴*er"aM/' c3zij8dXyNT͜L(y7,I4b-o[hEjfv<Λ^-cpEN9 yӅh)gҹ&fNdlJWInWasPCfND|*4 l=-kБ *[,J (o7^~5yMgn㲓B$Q$. V?v TI皏޿\x\ ccIucT( pER͒gTJҦFwCV}(쮐q;?\L馈{^\*wp:rKw:YpvԃX4-rBO\$)DVAkj*YŧJP"˶,V#ުc^fĩG'û{L@U |{uhc6X%R+c oۯq=wq GiVn?rn lwchM9gIrz[Udb)'=KD hf8>gO$@o2ד9oMP*j[b*S|CiQ.ɍ$Y[s' cU{&XfmA5&ѐs@녦 {Eq^Q-ゆ2m<ՓF4NIa~]ǩ'WOD#ZmǦo*5JoUrfW6\ =UW1;:iC~w&@ -L&U$dY$A \E3h GAqAq嬇3ǥm G) mi9|PO74O|Pڅ%%  Y@vRC:ReDA kF:Z>&BQe,'*꡸C UÓz7r2 /Z6~F#D8C="U }P=ҟ)adc[NdQ:".^(&<)zLȀ!MQ`9)t z0h/^dl1DjW" (R([h;:N%+d{>9;wQ_4w km2ܭ-B k(2RjTꂃmr5]lыnEW*Pr%J߈L8d"І}ģ\\߾wYȒT9ŚJ HW0S"ϴjLo!誕 )񏛀e2  R^ːִ+I7hAqL52DX *i)HR&VKaybE4Xk ziW/^# І[/IYqDqf E̥Ɣٓ@7X4 ) iJڈ蠂.ro+K# Hb쫖X8MV/=~=+]WUz܏_#0/833ٸ4҅tCk[.(-8׼f!~"9O3Px`QYr"~_ǣURt|r:3>[$ ɈA?$LuwWE5?cmX~Ps֍8lsv`\_ɢDjDeDmn/w} Q?g<䝂i}`{̝Yn[ Eĝu50[v@!bojW GPo­wF>G&Zmx vӒlz=X/X;rG^l< N;fډcfmBb V\/g!-ۍp3JbU.y\,:H%! TX>"<_!`sUi JB7-nMWKyU#fIy G6-K-$&?q-K>`HC"z|ƂR#*YwzU`:"ݵǨrjmKyza3x1,R7a}}gÝ_}!!ZDI]y^@ =>;}oZJd pde`h&Y)uM{-8yk]s}*#E1Yı%1։\MP=bGyu]i@# 3TȬq1Z%Er3:8 GPt^UX>$ ˛?QP$OU%|!x8N3A"p>ʶ`q60m]y(aAArD~LP94Eܖ?l#)`*( IU,:vt=<6E֚=I)i(eǥ+*]O 1q?ҹ,:ABӝJsŶy 8y~d0b +b)+IΙi8BQ9P}^?n_n0pwՓU^?Ggz6s"\R}`ADX+'cd3aMҝxl@fIS~#CGMȅU@ St\nne {eQ0T2cLϨS]̙_{*}:ȩlNt JolvI/Z9݋l1_8Ht hz5ASLxuTa|=آzOҳw+3?+}Ob36INuu%+!@&FEn$!#~j^`Nqf+ Wުks&q{8c47[=yq"nHugGlw3B!^ oRg{3ERҊܦ̰XBQ0pWy=5Z?)WpB'ڨʢ ]#韀܉iXR{FªRw[ocEݍK.I K[15~G'2U(di4+ȁD9~<8k_騴RT{A+)_d|\%:ykns#+υ~›(z: |>40&`ɰ?pʎf\]!fv4D%|?L ="8g? c<y VI.:}Xq=)5x$FdI5̤;%%'Vs^o@cDN. ->,o]&Eڑ"&vX~y5GVH+T!hCWoi,yЅRsc!K`x-5ɇ^n{1樀uVc_r6)nk(!Gc r/mH%cĉ|n_.9HuVqkj1KF/CtƒލNviƴ"NLdٖ@$F/Gg?YPIȇm*ɾAL2 )1xO}/fj"d6b*E$JQ^)ca ˸G9#^$X-V4'ic1RkYDeܩ;2fr $m O<+=[bgpю,3iҩqi~zZC]848$lsawGw1"Z4GSRr&5P$Nҷi'6&6YiZ{IfKN}cc"/_err| ?:h&(fawkMk$© -Plǐ99ݿ )9C9^Jvd=:׍Dq!I0Tr>ڨ"V(<Z `X ٯv[%m/{)HXs<.I1n-Γu"R\#u휋`rāWE/^-K4AgtmD*ܨ-O3Ij4P, !hnkKkAk0냙SmzQ.8^xLYc%61t uݥ%uml-[]ۇ8>U( Xzq]]Vu˙4}J_5F> <.\*;D5sL*:0ԹO _1k/VVvEB>%FݓUkX$#8Qw~QdVR')\BDdr91vz*Ap:_bER@+jND$0}%nhx15dh[O@\N:a7>Vlx޲vHx"bȱ%Zgs==ŤZU )}R\N[zpVP"gi agHf8V{KEj@#vzTe5q08+t$Q48]b(T;n, V˹D)l9~! 〷k:Tr89mwи$ `G5aG]^˕a@шs^|suFCrIZHQ,h̅U9+Tc4\tY2Ob.:=*``W߿ υ,|gY]_o[ ~4T\tqoCk_>'d{%S2\%H5XD K^N%&4qRWDVp_]}M1R7ވ61B9]`QN6k l׵5Yn&:-CUA~iq*\.g>R刄JI~|tV58Wcn}yL eR!%gt$$RVⰼn4Yͪdv-yI`9u4BI'E|/eS*kזcɭ: rti'(|uN5@`*}wԏsƇOU4?A F9~ `Ybo&3}5mOGeWw7<`}tQ4VVܨ9#R%z ACNf wwy%ƽޞdS$+ L\Xi0df@lQk6X&@tl>Qs$=O܋L>~tՙ߫x Y> Nt;ބ[0S\>ۄX[uHZyN]bzhAڀꡤ2g/@D%=vtx w9UQMixb_/$EePA>5 Ӵ0K\O2S ]z gMX|M젨J훺9%&Xp|Y^7qhюۘ?vmQ͉Fd3rimj>ᾂ!F-x }у*HubyZ3 ^,˻SMPޜ+84ImG$y EUm>·FɄ>oeQmiQޡ"" "ٝ>\iwݥycC O/"CED!C-SfDw :Qp[_t9'Z[ T8!F{je ظ] /jɨ;¢5rHf>1ޠɿ]-~1U]0@\5ٔE 1\=qi6ch7Atͩ)i:>=Ǥ!*ФJGHvuf ;[ڂ.XJ{^Ozavu.Gdx)7>Pse[ X&0"1RS8ڋms9ӂFDb:DJbc+z'\ҡ,C.׿ESPKve0Hf! AAZGs&Q)kdWt̴~N[OQnS |/k2vo * -8ZucvҝP̜! ]20Szpw^ˇnԬWx3/zݿ=q[eB%!tB.2Fޔ`❞t ; cW`0%P 8АE%V)*cdń," /wޓ'XH#iv_nHG4fك{ەcxEE(uFӤ. JBLj|/#ʻ%ʾF?ŗ4cv LS&ʹ _K {&Pngqv0[M PA.79 [!z"}V8 MڼirΓx؛t,k03`/D֘jM@pͮHr \7x\NP:QA.eֱlVokez2m.A5gZn#<'j,QO/K> s]By_my$K3c(h5j>bem&2at Wdި!7l".`yDJyvRWa?TƗjGѮNyzr'D&S&wPOҿ:+٢37b'.cS[nX#KpDu"d.2)CWOL]Bm ‡C7JhubbH.SSRz׺)yXtRDBXGc:!'!tƁy[K`R:g@7ew#fBҙMЖ?9􄎖sc*ƥ$dҦf_-9$l60Un+˂@IX˰ac .nf̂L{$ee:V2>!2zoH^ՈI|Y~R.aCڔ8J/D-RDUAu5JfzazwWu.8كЏ6Ͱ~m0K.PK瑣ޜ>K'E6s•M`lJxuDT zzdt[V#4^M]4W-m~DӘZv^sq8»u=f&~$ R.4ʲj6'j^êN\/mlۡOQdBW^cJ/ ]'9fd8PrD:(gnvc\>wAg:4j50両ON0٨sկ^h$^Cog$Z.<;s- K*UzpŁ# Тr|4k#Dhҵx xYG'ɯ8ޯk[y# uZ/gECGwm(OG/TA!nhv-D9N#b vNeAYT<"E UId m3Sڨ(303^.$ Eg3NR%W֔([ZPK|{N {E96;Ƈ%J`M* !OI'8B[kI9'ʑt1+;Te\IV>p| Lɗ5Y^ Ѧn$FN35N1j<'t`7c -gH_~$oc{ 2ʊA^r do5Ӊ9DZ)Ƣ!jqa{a#)^!ƾ^1l:RIm_^yg:6ԦȘAQ©miDr]&jpܻ<"ݱBb3ހoi-S0k|VR[I?߈}8ZՄ%7݌7{8Tz/xS&aMp 45fC^KY u/+@ƒh<Дk۴Q]=7h> ?ډ  py9IM6 2->~ Q;R\ |rjЭC9)ksysvB7@""*B@xгQ"T`q#(&IddhpVu[\ږ"̐LʻܽFG9NĨcso3FRRq˩.H9ȫ]`1t9pՐ_o{ &8: F!=13W,$*hqnPn^[9^l+v]S +E*, [y/`Hy3(0Ua*^neHZV#"=]%ll,P/pVE~c\J7E PYtyq8 $m8-/1+q..nO v< 3K)1\Oڐ AdPݤDFaeЕj'|Ţ]iKQib]2 j 0`vGe Nٞ 7 D}Z쇌Y:4 @,O"R/Z~V 1=ԆS`ct RdXI"8qeRbJA f*< @7.gegß"BɅ v +Z{Xa7ܲ#d(g)]?htk^&˜kLsss2pӗoجb^cVCN_~ul9N>Q-[Ymtf-k$M`oⲎDAB~iGā .Vӡ D'om+.r$q)ha!Mӛ\n\/eqTMlOeݿj-MlDr~)4aW=tn8Xj9Aʧ, gtwh>˟H7\L *,7AE%{!i{ ezջU%4:R}ɇfW07sko|}_6 ҾW @%fgXF2F32^dPt'9ԳB#t$hp681H{'RaFi3'PG8Dm[~|WT9XM"Z)PxĞFSvi.CT_gi%§<]UY9kN7 S׺=Qu?أ'2M݄DH`fxC?+N'l4گS{A4YMuѹ/Kux`9Bp%ҊiD=(𿓸!~kLgq>yt>\Lr,(z?gzgczQ$׼hIlj=鿊jI;2( jR%_Nɡc>*lb 3lIyLٳ֘+=Ex*=n1LB' Իl{zd_E˂X{%1zb8r^0*{5F^/Pry0-ܚ, Sn:k)΢Re0jBMf@d=̊ gi3HRTIN >Un_QbX6G1FD` oB?ʔzAI3u Ԛq{ [M+8K=})ȶ-Dygր>l~4:Bߗ #Q!w _| SV33"\+\Ӊ%0wp$K =l(ׁ Y@/nk)n¡o&U#ЌސSO w3V:= hkL0bL ճ<1 Grm[pwUbYKhƄg#F1fe3C|R۸`<)GBLT F74(JÖ-g1֥'D\A&~,̓y4IL%PZIE7pVYާ/@A`0(Y0Ͻ mi?VPtf /Qh=P^"kԸ 1̅_kg'Y #]^;i>w3?wdo"&`=^O'0sxTMWz ]gz9ՙpK3[^G`PRtK Z!N%J3Q^ƚa=JV/#A]'DmSAFPK9d?rm&2Bw3ZKveÞ(5}goCT!.ZҳP`6A%sP5b磿]1veV;h]V4ZI;Q,V>Bl1Y`fSYH005fg BwK?w{n,q4 ~nޛ*J!tQ2\=(P )_N;Kh=*Y(mls,t( _6MUԤ>3X۸IτI<:0L#)?Nc*J[SM?(2,}e=:O[W~wp{vbvx4zF-~lV GE1yp\N-{ 3ØXxq\?,%@)@lQ^fԶkY w _KhCR^na]jж~\{gJћnR9E2jK]( g6v'$D&B\W t=V{H >K.wY5x4 x8+Z D^HK|sn >2 j άaAW^b=qpӫ͜iGs2Z< J/d:Jf_GDXY` ڰ̾OF_*ږ@\uv!M~c)fiksqڑ Z'}վD0f^TlIE *͇ Ez=Tky0umFi U\}"Z&OS a%vlorԜyj61%bL֚Ό?wJٯz=]k޳=uh |d la÷~i  Nѕ^K?{eKm4$+32(Z9=5̹%%RxBаpXt,|yH{..k]aǘQ tiѨĶat^9}"2|Zb;3sѾdT'`u߈Ud;-<~ޥK%6<~fθ$Z{+9"ҔpV*<ĘAPt4t/Ru=yQ0 .{| X{h pO ~C-,OwgY01@, ))%-l^Ga l't:7ihnǬE:Hk+2 wwEŵ;sԷB|R>&gS. _^H1ZC m70Wr6QZyLF2XAXfݚ9D/k'¥Wk)5n~RVe,"/<ӛV gB-S9nCmtw~G5O8%) e SI9Mח/ a'+K$ER[A(рQr*lq[ &q"ϻqC MS'I#BLeQ$T=*l$Azt"{u N읚MY01}>B P!le,u^N,~%cp yDlx-6ktƏk('O^"y^%T`^X3b^[?E2i Yiӈ- x:k[~,8d1@;7ԭ;}rbgʙև55H#ѷ.e=0 +_?_:'Y BufVtN uםr]8k8ӓv0737JZZvk3; KK,bۡÔ*ׯ0KtiF yR\Aya_)v]ڪAfu%,!|ʏY]?)Bmq7M"-/#iVY%0ag E0\QCOy[ xӸIRSf#to/)=]} 'cٳ$':ނ hraiW:0PzzpiEsggո <{;*q*8)9!F+]58^mR4k֏vC.jR|S iJҠZȺSݾ>yz>8&U3)W-W/#h,<'F[=N/卾CZ(7wqRCg 5'F'W8΁U:`7kJmX8i$W[-p>f͇FJ;>ᘟ~)d]<ß:U걲<2cDK &ZKF,xJjNHh1_2 [*/vYpqm$נSvU 0" 4BPs\zC] uP+Ήat5FL,0:i|Ϣ6)*jg񞂑hGnUnh\WskN@|`R赨ȶy}k~2=Rq.?ˍ.HtCwͥ #Uv~yAӔbzWd gDΟ[ROvz~?V%2e'| i$P?] ]Q6ñ`Z<#S+MEg>5T-|̢ |=]ʻ 5uhVVՊJoUG*=EEJ\uo}J _)*M1ۛ:M'yi}FLkh\ͷ}׸ s3m.Ǎ^|2|P2崳CR\g)C6'A3-׼]˯EK@c)d#ͳBX[ܷW=H ^S8.C6ǫ){G1”һ~G=E2U /~$WlޥCfVOct,~^VeDGr7Px}CN %ʓM5((Š5fzDa?bdFMYs\^yHΒ \"_H {RHejw =*(D.Nm j85 Mȼ2BGNC5|}vSѠ,epJTcC)D<@w%xCW+1o!=Yr%&c"*mxyDžc5Ri#I3@;|ˈMc(|^}ls_+P!vtZD>AxVO.UlN`.~k @)_!ar͐).e ߓ%`ܼ3$Qiw,qRZ@1?s,ic./v[[;xǔ "@k|;#<\1MцmOzBގr2Mؙ J"c}kFBKF iĸPB.XR3Q ՟1urt?G~ۓZ!dnasO5`tM?cF!Mѕ·6T1y @qD@=fE<0})Qm$h ̻Fa-! ?<}wDJ0DӪuXI,?]DI|^! 5xͣҘO@ xN1wGwtl WP<4Hj?=Wϴb"nR m 8|ک쐖AQY skp zXJx4bƿhH k$Uz(ڊ7(9)[ \/w ^.u 1%B0!E6+H9=BwGQ# Fmjݻ4)f+mvR$YTO⹦4Y@ؐok5:w3H9.%jcJVFj*o,#;I lO : v-Ĥu,Ziϗr CݟԺ4Z@7<'X57Ĩh\^<i#$f rB=Dɕv>).Asж =ϤS vkC!U D(:bЪQ\r9`)Y!d9JZfhx[ ĝ\ iyEjXڥRK bg~} * VqwNUKXsJfQhhur uHhNN/_2w(pHP8#dQ{Y U pѰ&2͟Jt N#|,QPw` ΄Q4XˬG^;ZYln@޼/zi{>v6Ӿ']yE 2 C) 2CNWn~'S;"p#kZNz9RE/ﴧ@('nE]T &CHC2}^Mv/r@ z21lsEYB|vͺzu^]0Sj`T; vf'ky3%Tł=uPT%*GFiፅkM %*y3G9^*9\eR)#"/Ŀ&/R܃ DHbY$|G=:1;P@kּxK#;e}On.,Trk E#y o.Dd3BעNYY/ p-u\U,xY@#nQA.p9uuqV2,@&8C&{C5>ƻF.8b:+>̢"VAiַ&#Z%>/LN { [8ƚ2܎QIOcnbT~z#vO}S ,$&-IR6ga@ˏ/ⶇppXt7T;mT@MwX{'/ P6?\!S l혩XO%sҁZjOǚgJ~zJV.Ya= ͢G.SZktv$a6u9WmT$Bd9)2k<2{WXL8yOgB8J6zmKsvXfW, Ly VŲ< M?(EGjǍYUC\d(?PJ,#Wc `m~7P Il~yCi0Yȍ& !TblNqp4#ϓK(H*9rڇ6.fLWBP}T9ޓ0_,5ayliاQO[}X(maq vpu;H`%˂E$vY;qMMul;`Nl_QSϜhN3S!%GY5cs"M.mg Ϋ,2x]DJDRSOfF"!% WCvQiՙo)T>aP$+fWx퀰KT4"y}3*OMƀxd[`.?]޽&L`m< 'btx1vVMݣyA5a-E2,>=A'ԉ'^y_!8,'z@DOT>HeK;Qjh7~ K | z]Yӿt>Y~WidPO Wœ\=ь7`hG'_W,Wz2:oW{':cf Ju2K۴vd;b&iE+e=?LhÐzGnFFSl/h HǛ"l:gvD7d6766IP 1>0LrMU.=~.7(c0 /kd逶V?΅ySr_vܵ\ҿC>Љ<1÷OR=M!!$>[8&2ƞF~~lӕT: plUbW%= <@,L&RFu@!NA߀|Ϗm 7`:Rg46+t&k{[Q*kMN! J ڑR5Of2McR9>C&6*Ӗ!JFs͋=cw@W bz7))_sh/aPYab1oҋpy,Kol¯v'ܺu_QyuDla\-b7.?9T ].U }.~/7:$Yi9pt )MR>*5xC:u2M)$1]$Ņ .KAzK b6]gu֚y_ 9<>ex]8CXiq`%yFY 4rUtߖ8^P8< pb(vLYЅFB[iiO3" Eblx/sRI{yD !\e1:`Lyq~WMg08u:aʶQ9TgX;U;T\&EFp]rR<Ǜ>$K*.6_>5__AQ !Sx6 i .k)iT#bI(Ў9];8&Dy2Dbuk ĊVs`JK8]"[*_fn2^oJW3.bcO [GPE˧8,p>ͮ<3SvGZÌ݉LD(,}EC Ev-RNRX*O@{n<Ќ񥴝xВ[2HJ7azl+581d 띟=՘QKw0!*-N2~2v i:GToSLP]h & x sι|g5yvL_ժBCdXw-={C*"0-#r ΥQmoVJMT?}վ!ܳP|V l]h۰s|'@Ev;L?_.5EY6S/e_<]#]1j+_]*wT8ن4p85n(6:PSY1ˉ8g{E@:Ij_4; T0m56s89{]zHiܒ_yZE>9ׁ@͑J{>~=i-?Kk,-T!j$<qE Iy 4nW RlGy}b옜<ອ)9q^U]!rk,VnRc'ܺgdh=Z~AvCެNLbs #2 rmx|*͈C͡ N^uuv0\QDZ7h%lR =5IpG6$ܴą,'}F Kz9Ejv{ >rلᐩvJ' cѰLGa{ʎp;@9`3N Mvh('쫓f?}:|̵V;ˬ}UrZ7'͈RgUKQpJde!>0jg0(eD޶w_e`.ZNYs̾ P z?!fL_8(Se3cFo^[W/>nҩs1Y[;#8,Y"ߕ'pol5ǒe.Vۃ{ զw)3~O/OphC ):*w.2'Dž9”y' sWc-sv@˕rfq/Juz-S-@a,'$Gڱh RΑ-Eȡ*]`dlI|e@^YbBx5e8)*Tef*N^YdL= bx;Ğ$v)A + ZOۢwbrU4 ƴߑw^5r-唏÷kEzrXDZzPa2'-jԟWط^˦ '+rͮ= Z1ǟ8w)Nj^<W@b[F$T6NTzM9`ú_U|) \/5Ϧ: `O'=k~ WJ-tBsF rb,Z?7VC͔qV^:τZS:e&=(hZB!,K%0:=9b VGyzQ2ߌ~{R;ѭJO:~~I{u~}1wb3#@NGG7J/JhVC=o*"8(L۱_/Eg;q) lfAMX^oKA'Gu9/:#[_RN4E9og:jʘ*K2XdWHd>K*jIxJ*18KH?t}ТM|}3agflEbdcJ_xىȳG{<-iЮSxPs,񟭗Wpّ 仸Gs(!(/Һsh99(kp*=4僼*"6e+bGfg);CªE iBvh@a }?όm~I 9\X@=Tҙ@+67t8.v\>ו0&2B&ʟu݅RЈWg`pQWBK/Ӳ9k+S*+@bT/4Α nӨt/u҆Ԩf7Թ~/B:buCrŐJ&9ZV<h~dռ,хpIYV"#6Ǣ`3x>lik$|uҙPjAl>:?(&k\F nFj-`^'s`7-QRP=?QI{"NP NkE7d! NyN$!.;ɷVaxs ]׵ |J|筀? uS%5E⟱F z욄.Vof=?-!"J,6ؑ-BaBħ3`VDT>JM7kQHϡȣvt #H;`bK.J>ZSKK@eA jJӦuS˲|}XW׮kr[Q`5o=o҄+g ѻ`kɇvnD?LZǯ @\fjB T>VӜBt J;}1ÿՆ3? Ẁ)3O'!K7M2+.6^6KkIkI۪t®8n+T$Je'FKGAz,sl`R[WZ:m3VJ)Z >t) K ,FK;ZPRkGԺ /⃆OwB^]yz[ Sev侲nSY(JkV(Bs w*#NŖZZUK/uaQaHoD:ѽ/-SޙֆX}mEcNpdmhݗ;jܼҘ /'*uߙ`۝*BOĵYV&D|VUVE8KOXfk.Ma! -v#н[)%q)kAK0F=.㰗kjz!,(% s5r9mNWY ;Т&YM^n2~H^dW 1U:,0Htiy:N 8(u.%A_&~x#$l0Efa:I4gYDxqoS׎F]Sn*ppX~9ׄK]z2ΙlXk')l͗"&F[e# ~]jEt08lD-zdhQ/tϙsLm HVCTt{bom*Vڶ~}0]&-}Z>~ĄXs_`|koCڃ(t8SfC-͈&ek+6 造#um {C5D?N—@w?e\7E70~:^B.>G US . m'p6G@M cj^FId2KaHDvwh^]q25 ((ywWpI0(Nr6 txaG(<Nݼ.| :YpƬhp4KwSbb @SXt@605ʟlVzLUidSP*a\B2X w$:TBYXe=]|WPf Pwe_/( Μw+S620HtHwEjXhb \beq;Hg`F]·Ap-rB X?q}- wS@k" /x9*;vNzRD&2FR O9tl-f_܃olM9NIU! s m EIm"KϢ 1A3<7MC%Y=vurhE}5QLi N$ ’ruϩ)Scv7y tIVjwIv%O $ %i&4c( PJak͓p+ _u21 ˦΄FmJ+YHxJamA-}WC Q23Z4Fe^q:WZ '`9j_oJdF P)Sq9}5m,6؞ KG$'T`yI P2 |͑kTh{d_HٔtVY+ ̏ulTU:a2z ?o-Vn;ID̵_Bπ?aIQ"B]oz4w< t@G kk Dg n1 0JʾNМU?|>ϭG#j/FۥHQL\Td=AERCP|QK9gyI7I>6a#WXڨw5a#)Yp*/jy.4guCi } ׮(PFb%=@εd凒M3(&EW9y|FĉnFbjvȐGz3 !}#*l]a*'po!zr{e S8+?5ުc{3IAs`O3`99|hx+gy =YM,d"f&?0n55g}SL{y0F`0"^r6j=r_7c&y 4 BqZH\`VuBruN[9\#V6Pw#VP{.uu+@"fޒKv2h_941gb~.k`삽j }]G1FCx몍nvt5t^_eZ?ps<ih6rofY 78ZU7J(fkDt*pӑwN{Ub#J3[o5+9d)x"5 {&X3lKyB,\9^G?&=FQԲ^tHnBJiau)&Qn4Dp>کM8jK}P49P(\?Æ!e'Kf% Y oq?^r 9rş۽h!+܀сn>>6#Vj%YVn52q\kӱ:)Z aBxOB"[VV9'[07G"{e752+v%;~jIrQ>Q?q?ɻ# #Ybx*UUoR }뷙ŒrJ `,ytN)bP[1M ?N}%fQcG;sEC'a[b3x/G)Ba?^bU"ť)[?Qo_q>ڦ{,KM `CS<%ԴpCRчW젿%" #V&Hv-l[d3E'TkY٠35Q4|AH&9%o$" Inf!$A(A~HS]itr:ĖJcF඿ nV]igx +Sg>"8|Eqt?`ڷ OC{#6>GRg4۝!뵂e$L}pqa,|[YfDgl躅]piBfr(Z$nrVWF 0)avqp)ЎXXZ&Λ Ytepu0f/>9@,vf"F . EwgyvqH5d HEJAa&6e&'5xRֹ )rsq UyyZԙ5=aDД42xLpNdNf]gOc=y/a-z2K}n- VrĘ'&_WYA|~XojU䭭h6n¬(lmfMnBN,Ad#ُIk/=I$(ok|1 |q8j`SM*%;! !v*[s3:" lh}.aV .Xm!W0\fIM2H^Ys}JfՋlė`RV"YzEN I5dL }֣:֌MhJr((nS 5q5*)1W9$RueN 8}o|8Ex双9"ϪU;2$"5i@b3iW"͉8L9A'($yZe M6tcХ|ڤ5Q#%%o,x?[kA΋Z URl="7^&2a–!N/5t¦Ke^ TzRLۮ +I18 ?+Qy8q",V_lZCCX{4D8sO+xdYf^,okݷegkŰBJ8_{gDJMikQ|ڄs,/ʎq]`}i4Θ1OJm#C`.T ;*%{a^& YܒA2x-ET*٬ba6=-Q F $!27X!VUAf0gR@M|,d2ԆKEBEdP0dmJML 1,t]YSTI١V0i{ɫp]J|)@77;F,v"p$!j7L# Ԫ* TMaS\`{3(J A!ҵPjm%ZOSvNXV #*_ʊ{- N6D{Z{z%shHՓbxӈ,)?=`A;̧r2\iݻXi͘En;[ԭR**}  qdq}K$)BG]˲2.=_r8)ׄ;&Cb QA((0.IHU^+=DNC`IQ6K\ ؙUEj珶L^\iQӆAL`%!1meŚ_-I~6Ԕ~n/hObqqs؜m5.M{@ɺݫZ[rLsqyp΁\h1o[~ sPM^nfb ]͛CNeŒS Fu^hCFԜ_.p/__0Qgv_E!6*i徫W͹(vl_*q,c&N^ v*wk զBd%ow\UsAc=1Ui=NUc㻛9/U.$b-B)SZhx?HpPf"UHi2{8\Y[@ P&#iw?D.U҆\H.t Βٞ*oNG&TlJ@vD=QQ9N=BB Jzl5b55duNyxfm."o+RQu$qo6PMMl %-=:q72n7m:B >fP  :B;P=k+Qea,u(6k$G6Q&Qݞ8vv+ 8ONJZ[3@ɾ-a% {j=HBwɻru~ %6=&}m<0+ ~A6'_8R( ܇8OY] _0d[;&7|?v2QFo0{{sWĽ"Q 4.$ʏDXRtKaHf"Vr҅IHj;oh'il{b: H*lFi\T? 05ja&xuHW0[^龩B=~eY|_Ue^~v-gx塝 P*/ɝsRRquv2TAwav~τJ0 $:?ЄHi3߅{\Ti0S+Z_.H)jP''8 ]>n,+|@ROIe d\z H f8jq6W%3?:g6oRR6ҩ;bX,Df1g~DOfUhQtKRD["qܣ9Ĥװ^OM]\^!~V 7tgF!(?z}L99r[^lA5-\2Qzױ K;=ms{FG8&9 ?k43 =S\yloME%'Th{RĄCmjS:3Ky7ȯ(eQ Sj=r+zfݼkJ7;:) \Ǟ$_TP!l1vwIa_i%M8-S>N8D}{u8a#<֑,Gv}*|B@D;2E|k{wstJT*bՠp(߫]4 ' !uaEV.N/I7|PoY/؀0JWiclP u(PQ.% eHn mPts IOCjτH5: 8Ze Q`Mnnb)& zk5+gxZ kVR򐈝 \w n7 6i9UPQQϔIF+<*. U\t'K~ݚED`]%7#6bԳZ#q'ـn=Hʫ#+cT=KIRpKHKkfiM, π+g7l_EwB|av-TT0?>Ovi@"N]Ie j0x Re߷K~5̙;ym;\Vv* wi_O_$ʒc@y쏗=Ooy4l#\{G0$}yIUW){(D>frX7sbljOݞFZ66TCcPKj}nZ0kը4< \ʍ;nd?]p}5$3 Qllscp~wgzH&uq`>2|PngYmR[}q=bA~9Zc#khbv+hM9YEo/_5txTD +k <i*<]r!܇F i@Ϥ|p,HZaw%aJzE?&tuo;,Bg)g N5'#Dd<!>*pO3+(ZqoI>_*ODlU&(YL ]r3iAY ҸB,}EL8dr2hg>ྡwYta]~yQ=N.&x2pd@cù_h!ٹ媭hOa6g M_~"Pr>U[z @J2Ox_%eҗwTϱsqX3''9A"M!jT[;`tlNR`rQFAf3(Io#p\G؎P_{@JA."=OP'Ґ1N_CceЙ {0a@OiP ON>uFBqt }%bd(kM#OsDHraR|#9VIJPg@|9РA4o,\35^wC30[,to9F& 8Y2ZYAh% D6 (&'v'X']feخRbTg2ZqTkG}1^pީ7N(GW,-Yjk`>i͙T&ιKtGW<@{jLT{*ҢCeWnTUU+NTY}s`C\B5oHBGa]ak6ĔEszr `1N4,J1u{wg9',s6I'R56Ha17tsXgp/=W:վ.KtZPh/KXz'1k[D6#\E(QVi c=ˊu([q[O,O`fm _xM5l6dmi&RЏag\gӘ~|X)iJ$D * '،%7^n1r&o{O_TOv{f`o +3S:SIeMR_gQ<# J;^^8n(TFwIGmG_bSlFA&oϣ}MU96W$hs+=M ,br<%LsKSp[+67f\IKBg Idߴ]`0д p%0oPYkqʯa4ֈG|k9=rǃğ.doC'[^x56w5=W bϧ\iBKoT#Sˑ'M`nmPqq3IT~N4vL/J [ ==up ` #b =*tO+FVəH@EmCGׄr) jg/1,sc7'.pQ(oes C= FUKSKitXcn1]F;O0k:>JX?v5?P{{lJ*O옃 e+2NmcмCGQi%`\ѵxتr낆7Q%LaK:N:ʬfI/QsJm(fiEf~K3H{&[@AZN18b=_="O"URYF&A,fh]A~eUC| !\,3ufӐ+!0 O;ݦNB]F(t7RRbCZ(T !:]Cȴs E Zh IVۤqʼnlq6 Z4q ,歬g;$,VP9hƲ!$yPSlǷ>cX~6DQ,*vElwM6踮 E| ; ˀVXW('8*2LhaEu^-xrbrtfl44caJB@Hi KI3w1v8gG2dA,EQ:Cno˔'Mgbb}/,.@gBZMR=(T`\?{*K%7bĔ3܏7:0ivǓ@vl]נ5x)y5 hޝ>Хc`A呆0mDj.i[gqaîBW@ "d)#'^B3nyKpƘ^R,۫o>6)36=9ҿ:&o޼fL7нVHEsZGoIl!EqE,fGW/$pz~z3bV,+`r&JF0%c;P쎺qHd^X+L(.G r\_/x;3M*!A!~nrmGܡTr~bDn$I3H=-UAսn`b~Uʸ"L2E#xH9`=z06}:=OgφZ[Լ;{f`M`ߔ f=q)>T\9ce`VpI":vٛDw Ov~BMem0]ôJ,ʶG ګNU]8aPp`셰bO{OX﯆Vj=2g~iT Ae  &P஍~na*)O>*ё*Bd9;zοk`Z]3u0Pxb؏i\3 ^DV P2 MD%op0KVHC!VDL_v~Yyuo?xE]LF؂W§ͼVH8)H4 ӧ=GfvM惫h I- ;DP.LL80, e6+J/,b 'os AgDQ 1ӫ狕I:bܻߎڌ yÎF exĸԈ^2#]cnu o뙱wg_Js EhnW@@Ga4nqeݽ U0dpqcG9 }k96t?D8تsOƙf3c-sa;@`ψRR{*m Z:rJn9-"p!B}XѢfr[?_w / ° Ix wgjylIz$tzѨ+Jn6[t 5M,doYV_3Ȧ1wJaX1TVҟo[,JhR8gd:A2 Y/lXj]JJOo*reώ%t@K|457mFĚWӍF~9vbWlV@'^:S^L=}DI?  .ojMkH%857B<" qkP`@VYnp2 r_KW@LzZ5+2Lz^K{YuVr'R~1S_UcU[2ilw;:W~3RaL QNq+srr;Xopk6ן4]-ֆ;Pvx{(#xxA~)GKd;HFH 7rVfsTs嫏%*ģVP\P 2`lwqYG!lƦEKSxr"Ѡp;\}i:OJ@-ܽЁf{ ĢNw\ fZ!ژݛ+оn oz0n[=SFM9V}DJ/ab-1] o]TǙ9=}oN5%K++5|qZW#iXd4ZqiK0ʐIL\$17"t=.u|%yJp ':t  ʢn˽o~ySn{#=%Ef!y: Ȩ]/︸5( k3),viek@$)NIc-@';hϯx$ae!h#O{O `ROLͣwvR8q/bS-b:?\lmng oTzСnS\<8 M ga:mo>?qO"ZTyZGrI(}9e٢&]5vż (ɉq? ngak'gF˸}S7J}b掘hj]-p%|΢=O's1xua~l7jy'_9 v;q7nq.Q{f|{ U"벗BVY ;ԑ"e_̠k[A_˺1zIVaX,2Df'1x k*縕=Nr+PeҖPrǽʧGD\Pa&x:f՚ENɂtv.*_??kKRv+lA*!EikWVdoC( ,$6pV$va`mg~9}ݾq+a1;!SL1GzvT \w!m)dL,vM%$cusTP;2g9<{I^Sw"GKT 4JtC봔=~"ŗ>7m3Nx l@F+ѦBRmFpmRe;_!9ӹBP53p@- 2|A3[c]e+Zjj+Ժ'm)K% @U 2S'=8:$ s ](z߲fQXRܹ!+ca&lK8ϵ2Y _[9׬Rj76-CO(Nj"ʨWh{{RnPgn]5Wh#̨)f)uM}4ݛWHSxt-QRQg&NX,o"WJ^*i MHgtC,a#"F]F]ӿ(ƯKN9X8"5U@]O|ifڭ7tʹD׊֌p|hlwD&ڰ.`+}ZweA%1C߽y(r1 g}fOA<]Zu< NpKݿmn^H"%e *v%Pʯ&$I/X] XZgↅru $0?=fWoW֬a;+\R*S lɝ5yoCu>(p{k-ϸX饺]ť O4yp. r I{àU+6kX`&oP(qvcj{I>m 'Ѳ@v aCsLdA8E1 vB#ʍ/ApMZK#ջmNJlla?NON'(^7$ 6@`!sU9]@wFz:gsMJ~uen_* 8詨79gr?3wT8"q/%,B@sd; w #[oc a*^F4~hnG%h>H.?Rz,Eg]f/s4o<`SQ} Q7_[UԸ_tA-7So2K;Ԝ؂0s5ru  ~RQXf΁blٸ T%qҼ>:Yâw,I^+r?ei # 5arH92~ߗ;:t{GDT9dȏn[r{Y3`s8@ g Uo?±]vio8a-GEgUy6mc)xcF3|Sn{j/xF`ZɦMF}hZTG5l67qe`[™١ n7;mX_0VQ*EM5Y[4#K'8]RNɔԍy>޹[CxGvVV^d(OO_:ڝ La'&g;]NJ V;!{T -Rcts1R{(%Ne NeB@m]7bPCRA'ݛv_ rˏƘ&~uY(qhjˈheBۃ[@ YݏII}oBTg;VXR_Q0lGyӹr*j3i+~V{TW yR.u,GkO!Wo$@2Mć0[}TCU攢"Q %S6(T\@ ڣyG8&%P!d?/|Ľ-q7F?vQJrm}:) ?xUY+L[}5TT\hzuixr *:/8 J%?~g'^!Ԓ#njIԺ0,`pJ[%)b!2JOU#*{<BK^ C|+ٲ>l%#7u*K,x^Tnd5?=5뾷33r׵qZ3ʞRӊGx2,"MDbJaQ9gYW0*y!NMBkp:[,4)jFL\0XbNs f1dqO,ېّa'jnZީޫ>}y B)> wB, 9i^e ee켗><̍Dp،SkBHe5f7А8>>EPեی6?:{3MNT0տ]i' XjѼ~eCy]N,Ud?8lJ 9`;UИ?i@7SsU.ϱ`V|һ"#DQg?C(c{oոN t!賖D q*[ -v|, +8!(=Fi e@mK7KwB+*v|5QPZ`OXπ+B1`"o,!PD8D%qk*Hog]Κnr.!7ղ*,y'4gA،EZ {6 l1; S2m j*/[K9Wc|ueä7,Z39>3_t #vkOv/[W.kRN(M>,X& QM,|^~5qu{WX0^_B%J>:DX[QI(]3NOy*ΐ -/&nz&sLLz1' V4Kfn^=;&-i&@EާGΒdB)`$\GQbNL*.5M?l(=$Ý^o~IF>;ȳSȊ5}X!d5Cd:7oXJU+s3neS%~TAPY cA֍g8uWZ+9!ƏJ3W9*ticT\|raNV{17Na:2# [wc \`XLIeEO?vDBt`_v)HRHv:1,8q`8#B-U?ܴpć$7v.x,Yek׽0\$c@%HY@Ts\2Z0AL WpK"`O*W4q/Uオea6;U7G'n!Շ´u9f7};DmSx|x,sz-j\MSЧ,-e ]?uAG&:4+yCJ#cFԥ.v۱C%JMN"6X`ci}]uIEIWdgYI5\PpS l('wA̡Ȕݏ#@@"<Lr&R21wEz 0@׮{CkNV>"Q`62. xD6w{џJik>Ll11g¸&+>h< C tNCFsHђ.̨3#C]}j(~6ZV#) G* =0z5 @c'&ϺiґbBn * 'Phܻ(IP1$.g.l. ~ID 6P'FjdT&Mb:L̥Co; b9}DӄaN^%clQZ+\{0Yfh?' GĿڍ-nKMWԶYWuIo V}UŅIh@e>|6"sELꞑ"FކaCPSD!!5vY:>OA f X(LMW@kRݍ/C:y7~Y?&\w3f(IcPoL>/mQ1Ds:*fMQ^-( @lv" nZm3ѕ6|RN4{158~)? #әha;)Mrh#&*(aAwE!w5 ;P`}yʾɵ 7cC ̝˝@8c|v6.7z>?\yܱ"g#`K=l#q:I.f$"*g[cךW)!V%M|jef0ju)i/9GjF<}?K7WCZe|3a.Qdx0yডN&>ih}mô.ѰSktΔr%b6$˘m`V@H/B i`2{y^Baj""-iz),EJ9mǡ(eCcwt>&M #$2@bQTU8F#Iðb:˷ЭGKC(n u&WyF:U| ԍ1E!\|J~q: z'6PRFfsuݨMɳ'݇t%?Z}JC0[2~>Hn])/Li`!Ɵ%waiu0 2vFMNN~X3xΖ[)[Be֣`swJ@otfA7g[sIpN(?X"<(;*S/ bx`6l\],Csw>Ő\22ـ+(hyٛzU6!{LH0!@Im5?èhKgD UHfZvWgW\Z03C&06n&6,> 0KN?=1Ku-liJd0ٶ^'䥯eO.EtS8Y@JRrϵG1V;ZP\G5 ;b)R(1G~xgu)^AD5Q$l*H/2tj{8~:OcsástRZɭ9Jx\ >* &I^,Ppa Ae][#?^|MZބ!\ 0Ⱦ!͵f:-o[.*}{Gn Go]b2MԹ6GbJ!h#J uL#&DݳPa^E>yf b X{/E~8թwk;ޚDN&P@GQMJoOFVgt OWBQ{sȎ4Isq*|c0>^k1]'<T^gTN,dʨFka#/X }[F$~5M"%c]j#Moz]}넘dSVf$I3eƸaxy7yߛ˱YAXDWY?%~ d%W$0uKaцwQc`ϛPΈOii/>!\0/bCrei-KJ)X/C͊. %zz/UPc#}F1AYBN@?Uli˪b-7FRsKQV.mΩ8!mym  XWM!Tipr$ 4Z5e(21iA`A5T!VqI29V Z$d]"*& a{9転vmIzxCq}Q/,3Ňu`ǸbڋYh-( fvoo h@<̪1vh XADFƩ~Z5,4<%ɣ=\0tG%j$I\pzł $)7Įد,({;A 5ne5yF@c?'oq-ضBU1!X,0BRfC\I@VRq-4L3ǻ-W2}[#]Ҙz?3W4~@ 0~n:u{q"kchAaQ8m=B:Yf LA3ٿ&urm~⠠Xw|uKwXT"X4}9ͷkT7 O'Վ34r8_m)'MD :kUa-6.nPPr/t/4LCp@MTj.E:7>i(i-WznN0'ý>yb^K   UN A%<-uǵqP`G8)ulNE xe!խ*/Xg+7< VARE3tv7| nD- +OqTɼO^YPN1A"K+\__:u@`ževzgF F煮<(2e:hRj)LfK`TZr'zAKxN]=yp1ёa3vG9+hH].}Wa0z~ |[qyK巈oξZmǯK̑L|X\ gجYz,yǑP)ʹH}ЧW?4ΉDIi[2G2Ҕ~E8J0҆ tP:A{w+Ta2/`C8_p1Sux zL9+3Hޞj;]Wvd. 4sض™h*_:7km@$0N.nh#_F[wCƓXۏ4|1 R2"ރHlxxNtoXv7jpƵ0١;-\} PWl2R')&F Z^N_76:]&bh3`/O 25V?FD̗e1B=d>FgVE4H[8Ni(FGM[KāKO ~t{~$YfGv!6 frQ E%8Yr]^7@]X\CGb8+LHMxkC '[+gA8uˎ:̛-~b{$"AYQd}lWE ~9A˅;u!yὅk*LaFF|,qUۃ۶ r>W]O#x|":һ]T;H PpR:},szNcĬƤbBf)77d`b&^%PXtݴv2"SȜqOՆc- Bߋ՞% .ʗ6cx&|OQ=ƒ1Q +fyHD]%v[RZV'?ivued_MVq=3:Ŷc֘fe#AQWc'o/΋S忥=-8%Qu6, s5f?OC㝈2YF ɀ2BW0 ۏD-g|:FL (( \]/];nt40pmw=hY/zΜr4xe}ɸc:О\~o y3NY/cs~KàXd[6$b2/x:\xY Yˇ c~#9Rx ˆiQ1:B P՘[ ⑄dEU1XciG @-}I֧7=7:P3>3`5zfL4dpiUTt4W`-gEPgqf7tW+#@tqۼGXF6hW!T ZVu R/=M iA("'Š";U\c{(A? ĩ,ՆGr{QT}jW'4v=>ҙV>$:.i[R&m')qݱZl$w"LBhm%'!qjq^v @NҎ6q1z*FB%W٧[ ugvl;moQi-p'y|yw!isuRLkS@°/f̔Vv=cSh lyE_,r:Zq7Cq{ȧ oթ *ؙ3ť2iK LŎPLD},vJ1q]zJu*4;WM]hyqCE~'@ɠ{&40xu, p/j[G(3_Ze VJQG^%I!龖`/n[CՒ=! LKgՁ\J}-1A_n~,~$)"o; ˻Z,=V[ ϒظ4/0Ż8%1KP0P.d;LO\@޽8Q{jY9~Bb;%6iY` 0O:c3l9{zf-՗뉕N`/y_d3ul/[}&|GB@BP_@`+RZs1uLep_J=GjoP8MCހq6plyV[zUK&ucDsצ=|mZqHx_͂ۀJr {l-àV㐅Ft?0ȍ׈D;th4)᳊aj]!Պk$͹b-%NXG5X? 7 mȏ7!t nA0W$ "4-rHy8n?Aӿ7ה+ KNY jEK9Ł~t@GѠi=iQ_Dr5;T>VJ`k-.1w *Ǎ1pN;{³aڡZX|xɐDCVC-t!k^*:s'Obwx$;EPC.$<;Us ` "jޅEJQѺ:Gz"Ǒ !s!7 RWxG3Yy_D<1!4 GIaƆ0p3I*]! g]H7Y)-Clie/#quXbV7_kK#|(v>o$/P%$rơp=DR< lls` Yc}?XS +A ٛ|&RJ|lsGzmyџ뢥L+A(}F>v!*ZzьŇf& t4o K`28kd¾G~S +Gs6.t$[`~@܀ID{Uǐf,d`ǟWpn D]ڼGo=w6aΩ{3\럈rp}U"g(Бul9p.#N~T3"BamN4jϳnĺ}M3#eHr*OezJdLfdZ11gNΣ9FJ0.mU˂YsfE4f_iY90|u's[M ͧ{'o@\JU<[f-26_)#1):.,A+ٶ<9Slw -~yp[ ږ+@zxg*kAĊ=lBH WTA3u o#g_5$H2**{u ˓6.."%C#e^fN zʍᚁq3S9hnV0F tj6Bw@Krk\V5Ͱ Ohn3S.,\WS@8vlSNSk(5̮hM :n1gQ2/#<8`g&hv2c?Q|kuh#dsUu:2r2?&% l !%9xL]&[# )9V}.Pf.v#0'EiWL"ӁE= *'PR?[3wmj|Z=8ڃeÚEQ8X@Ϫk,Q z%af k4_y^ڲwy?FU`RSEQG/+7qeZp]F^߭ Ge]>rZox@bC$db=ӿLB.?9Bp9Jܢӌ{X=_}!eA!NN֘=97b(<l%@_Pϩ0|[V <5ކLuTgA^zsz#fAa<%]BkQ;A{c*ca~s /$cJWe'p"%6@<*.N6܂k|rw_ }1 _N f&e@,S deŮéhɽ򝗴wx%ƲFZTtZSy [ʞ sA 4ɜe2 d*Ir% Ԧ^7~󊯻qy iCуBGs^pߜw@Й* x^L-&9ɀ Ը}o Pxçrr3Ĩ<msLx_³(x^nU;寀U řsW&WD0mH'lAl.WNQj`]w-M~k^)ac:~[P@I; ?K@nh0m5,n_^D!E{/2Gw_kܑ9^{Xʞb爈6#3K}sLB8!Q 3%3SFv78V`"^?jP떥mAȏ,Iz²T6NsL8"}3\V^0j*-j0wE[, =A8aӭK vO覅 Pxg]Sv6}֑v5^zq6:-/gے{D6s{u+b/f9*̉ @}( pf >δyrqet}Io1Oޚ)VHlh)k Jڷ}9>gsB3V|IDtA%sNHL-0}ت'矙BY8׳J<+gb! &ٹ.34L>31JPR!T#wy<si ­?Rr;o:QC +s$tF Źy4{$@M$F5Q-\?mn.Gzu"hP8.*Ǥr4jwq+!"Qvy\<:U ? e qnN3Fm*˔1Y?.;D7.K$"k~ϰ[,`j ND^©0Yk dK-s<~2cÿ2®)0wcykpyz*da<ҧ[{L<`I:G8A7J>pKJI 6_d ʅ'V'4 #چ%Su ?a1eE5VB }CޤZ,[W1_Ī]ͦiUY4^ǥD]Co$H6!nZgPNEXV˛aES2Ǽvy)·=,H@{*=R`W( -G*[xn_B\XdKj|k vl=FETV ^Җ8"S9P6BDǧZ BЀ.Ӭxa@]4W~2-#B$̤'IA73(  %k+}[[ ތgy_qhNAdSXij$Юz8*&}%C㷄1۟4Vp^G|q~qꋣױauJ![4Ŗ`^Qnw qwd|z6ON Iԭ*Vd:0$џOSlH/D]NQOL`wR}qhnHJ1+קUt}=c2sAXf6/KWvnk1)o\7 %|I^^NNBaF|QQxc_KAIe brQj J.Y5^r:8X]*d\慦ĥ5}r=JOKC H4I򤳘BG!z>xZ~Bn(eݷIEx $X?s.TgRbvD." / 7%#(=Ȁz-KyΉӲ %i=V%y4-_ +f.s?/(4[:ۖVH, 4D6(j+)AbTq=3@HVi&w('CUM? !X` weYь<7 dUQg`A㔺Z1 q$4WȜОdk}GKQzr. %Z2n"\RT/J 53p?IP$m7T6m@z@óMĒ<.cDfLs %JN9ˍ/{ev { t$T 5;D$9!G}]Vq@l!>bAx5ucCG]n*o<ǂnh&AO(:f" ;mBEft#~̳`絊Bq M4npyAlUb'Vc*$B#dR#B/~h͟?#S 0IItCqX۠9Ho,ևm[b7S<(Tv.)i_%=FȎ.o6ڰ f7+\gZ1k啖veΔj [DC'z-tw.oE.uPIygWv;Hj70HHY{mҐC';<Ës>)KTq7~=i}{v@2crQ࿞ڟ?'R~~+>hKjy "19-9Uwq݁ i*h;L.ujښ}]]QGwpc3ON ڤ(4ZgM[Z+B 6yJV} SpsOij|zCJBU}PO ѓ\*ބ<$>*lpÀ4AN[zGiE}db,=X.dʋ}2߅oAmuR<ļ됋1}B4w;I v)Z/ϘɬY)o+" >י @؛ &"}EEWW*6?3 x]_SgvCg? B?9`cS"p 5d zW%m*}yz1s?\ P*$kfMzb]KP|TuzG+tBHiNq15q@]?ĦρgE362J/H3P6žK6 bJ܉x^ )8\nX $N+\ waE93>lŧUIThsE/4v{ɤ\ ԸwpN,8 Fy+KFi "u;@&Fʊ%d'G; -5vhK_Hhn,~I 0 |W$:'u(ݿt'ҿ95@]].@a#Kϑ :&bd|^)|~b(#9>><ǟDC?5HYjx.=>/aJ,O% lM2tوH r94D"hU_>o@ƚz]'$Wzv Mh{sקݬޖuL.{ 1_\`BW.x}ʺf%H]|`DlݭEw:k+o jfSJy7!pϪ$(:ُ̟Ytx&תDyiӳd?'5l# j5)qpUp򊃃ٖ}&E}ucx#qNPKIl!ￋ"zWTTzVЭ:\mxǶd<J@m2JB1vX=? , "+ 5ѯ(_fEHs>Ƨv =Su: s2.fU8cP A( dxF '%k)qHHgv=T0NXSs/vzWѹ738UPRu ZgfbR~hG#k9R~Z!\'s~ί!xm $vjxʰ~_'oq-I: 6̲_Uu !UQ c,N%CUI"/?#lrpcm(93s$6OP38FZ+¤ʊ;a+?ʏy`>,H4'w`#n%4F`GD$|<]AMV^i!ƇΪ |4 Gϒ_qdywxq7 ^) Exe1@ĔKm;9EM-+ݾYԈh+h`ـhqS2fB{c'XNV)X{,L|~eOA­z"фWj!/FHHU8Ȱdٛ~m\|);;E@n~ywWDrcq"%:8ʉK`hf9O"OyMtnN/!n?HlFlCX;!s`yYY4N4p8Z?P`˰dߡxz&\=uJUA:%EWu1b3_A929c+.DR-"4k}2v{¦M0L53cAsS? @F޶F9砂 3?vZG`"wŪEyR?Oh@2sz* },_t?]m\+HG/7_G'O8;P4Oswh .~U;zdp:fU=Uh(%NX%|ࠈs33 ahC^z"ӻw:%w2Nثܒ(mi܋/WSK[qt¸C+TF7!w&{t=vWPajvł!0|;dUDR"]}:~ <C"`*mFϻ8o>+1/gOmLa@fX2gsV܊$HJ[nc=2@3FgYu%S^PXeT$݅Qo).pib +S̯.A"uxvLn]`2 &5e!qa#JYuAΥu}KGvym-a :sŝȍ'W6.4FŎ @)z + =``|{=-N-Rz&uKt04d_t>QGW|Mڽ.dz},F?.d0ErGĥC0?|: = )YXPK1~VJhrX6t Vv3XX!'E X7lw а}]#iupYf%q7_UTBjsSubz9t\8+s{p!Fk:/F xD)FZy~9ySZo*( =_Oa;dyv5vHBT@)V26@cDN+p5[)`)%z_OѫrގN=XnEXIy<܏pw]Bg{+َO7cloG+ !\&d+bLF8+̸4Nد1xs}Rce$.+ƃj^,Hn M1tx3-L0MdQ[ v֪ZkM9aw1)Age~̟"o]+h_ڜٍz.=0}|&CN-tW#;#2W-F,!3ОQtc/;kTw*0h]dWEmk M,Kv)=zJE~اo[*w*b$:l )C)eNk9d pFc߉Qt|7!;ްB/M)?KX,h`4xDK.yA+]&ܛ;=moS*y(/GQuVC~ѫIcBvg&ˤ\X)[;=ar'4V`mTWhA %UIZE HV0H,+9Dv|OMռ|M\xaHBk]W|yLX. "̙\ n}~u Uh7 ѡb"v<<%B72g΁&霢D>p4kX>=EW,('m]*dWrT.EoCAoQZQq; +[ Nx|\_v59N}k5n`qV{RZCoXѦPPn3jAKF/ nsR3"lFd 0 hJ3 $HŇNrx5F=(sϽ C7:f4s.~{wY[W@Ff=d\$hoUy |=Y/%~FAuVO p45O&`DfآX]7 vn  #F goԵzC|qo+y}|Ftt=:O0 =DQtFj7|98YvzRl{=Lfܴ3OJ:lC[#._pq ܀$):fe{V`ߠeM \ ݀īIEAg\yhiehaq^ht#z dۇvM+iNw`$g-0E|_!I5|ʮКfI}F=VLھޮGl7iWʲ"Y5Ŗ⌄̄u"68o9S ^Pž%jXY+ﯱcr Z-"$ɻ ½1~1pTqnaQJz&ADo"KL~t{ Q*"{J.ahX]cO;DRLJjdZ{X9\TN'!yond41Rs1vi驒".Ok-z 3){5^]&y2|E)"@j/kCILf$s³`&OgBggwp@,NkR?ҭs5ryغl5v龩)z LmdR1ʳR8:b}hJKQU}haMM} vQz9lج_xIl]aW -ewzyV!YD"Ye$IahG3d3ơKgIaVyT5&~jry7Uŷu&Q9}@Sp-[!i]xH-p ,QLl*>\D5D lH_F;IX\}IfM*ʢ=b9^pڏpØ`笐zQiϟ!ÝL2 vzhj<B;fgK$>M|槳`ZeՒO@XJ &7*ˇKϧqlپ; sm! 8y'^SOˍ^cz[y0KQDV.<<A:+} ̞hQ0WD nvY竟dM^ɀu`98iM:&m}>M3YuOtleՑ O2:Қ`]٣q`_+"ĽswV]? ϟIհͼAΡt OAI,Z~4;MV:?JAZ+K4~dDbDf[o4n\ZRDr(k$(+8oqAvYbT;-1GQ.mfPv˥;m[Hl}^)4͹̉s#& #lu ^c9=檡.|mza8=+`Mz ʴكo]}Io{z2iq; E*g|ۃ!DP<ߨLh V@'P]~4Q&S/ȴ|Սrò#Ef8:}PM$JMt((㷞}ß<AݵuUZv<5'i |4}y A-;%)" U8@YzdUAlHM%gwIT~ C:4L C;&'6N'W\FNNBD$1[{ir⚛BrNg`-W`p#I %1ȮvgTn8 25 Fo!KXb UcraHJ ڼr]] B!P#W2[nsᔠnLJJ1 z|{14kOg}Gww+y}a ?mب9SWO%9cqFgww2 BIR~P梴de%Ĕ^]\К6bIiFǂCMݺn hIGko2b"˟Q"Z,/|\ `ǣx;h%Wp>ZQE /ɮN[n$I-^5_$zc`>5rΰ|@KƢ d7kޭKv5M kY IHX,Z'IܚeY(pbZ-2\Ve8{Rzf)zq`E B'EM,9ÑCtʝOxdQ>g-=MzY9   hz %/q4i u}iO%X4I MX[@_1k?Ij $ض˾{B3FUf,G}FfA& |ŋ֦~Z2#`pG~ `<'5D]6n> bGD+t caћ/0uKd!|^wv/ uLm1{S+WnñkS Gqu[{tQxThB|R]0~oܕL5ȳC gQMb?6d$Ԛ'Q~Q@ s/viRY\L*Ht+ƻk;4sHڏGTˊ˟"})|¦Pn!`FW 38(}Tΐ%V w+9> x?¶? dVF379$7EκArdZ )=֊ȧgIyqn^r0 ȯ1N%|h^ez4~4W->;àlBU#/s ?RX-&k"mFq}K[=ɜbT,{pR+UEvͺ ֊6(#vڤz"U V lf=64cSp1:Ͽ [~]c!|2ݳǭFVڣ^򆔣/w[?-%t~R?ROw<7T,5[-dI|zS&2\ -xWKݗ mż9wsHUVLeK аZ.p41w?rpQr̹ipY:OZ,H`rv',6ʺk9<'gS6cQoO\r+[ N{<_f gYL4 `iJ(QH~1^ՉKlcA0c~vΣ`.CqsMuDhf^lz^'ߺڸ#]N;&ڞT?O/9m>qǠdSHQ>c q,bB7tf[4oxm.4{#*mF>'M H7 B=i3PXWXhz#a Af95J QPpeˌ NU9j*VR HH$`Hmf ;oGxr3xk@WV%&{6S9`2Y)ӨbRA?B%eV9p CΣ`_z`8.YJ7ߺěIWdIRzHRN0-vE"F"ּes+I*Q56vaY? y~;~t!W+Lp󖠈a  ?&3xJKuKtR \/,x]B/q9">sW =T9-)&m+DfTu! W71gf\7Ÿz}>h3XUލ_){1?A) "l) x7W B$vsCwL|`K|2iH;āHßpiJsDD=ϔ$6AhZL&6BƧf ل7,H'W6N1H@ ]eI- 4uWNP*Ou@i"CFR"t:%eӅ|#kt@aΆR`6A㇆ | I.-?x396ՂۤU, !'< D(dT2NMPԢcPa"[H, sM_Kp᦯ y\Gz(t1옼T2X`5nl%'$(3c#bEMs8;ihvbgXXDS4h1/ iA~6^ϡOZKqnoa(%\ۄ]JPyy,tG`kLV.GUίuĊCwl?uSˢcLŅi:ҟbsdG%gX͂WLc*A8p y:k MI[_y& T4mV2F^'([d;r~Cd+qsYgF d}4P7r/ۻzɋFyMUv ^x_8|x1t MnUR<^aJEV ώ9*i9ֽQ4 (*cdXx18F2`l$QXd#&y>{(m zE 6IL9V{;tP<T{vZz:Sy7$.A:δ^H{JE*wos<j $gF8cܚ:Y⹈\Rio*QיOK Y[Fv)޶YBL'{ǠꦍVkkn9/71hmެ +>Lր0|O#h"cWX_maxrZ6е6'׮m4އkkTHpl~e*-F<y(2ϣ#G_StF+` $eh~\2EDϋc} QWڽ^>zjZu Rqs&@ RJ: m;a gglE@OfT|lrГndۮ~M\YQGOcqB) 4/pP4o)Ы'r:T`Ta>̈́I7Z.~]9jsmm+)=Qt7VFwo$X608 zި?vT0כZYńbXh>b+DX1]qAM"T^3!\`8m䡁L4$JPLlnKf7;+PΎ2J wV7a9y&:l6it t<Z&xG{: m,Ҥq1 !3$3x38@B{Y' 5 ,%_ tB nvSSgu#P]MGqD`p$M֚l`DYš3Wڨ@OVՓy H"?.r;0ġ%cC,_xcVC2er<=,sP6,(1F~'WV$ lcGxq_fAg(0LJqe1=c+vu >w!ܴCWM.9]aE q\  {P!nT^0.(nQ@/H6gX^9-!ЍIJq1=sueW.KkxEEhEֱ`3lTXdTE]iI}Kә)Gl^k h.}oi eїܨDZ WZMDžLiJ%-b4ah;DokNm$ONV`v;I!̭#I$9T9l.E/ĵV}/> I˰rRbUڈy5xQؤ-N*l]á cT(=Ye5!Xh 俆h,Su4 xbp8s8"LꖉWפ"9o}a?/FaK& y!+h+ 3 zdDqF/r !ܒàY,9]ZB8;aqS~JLQjFVAxuM#|HRdn~UQsM5Gfgd4=,s?_O&y6 vƴj}jd3߸C,pI۷GF֨/(7N:YZYN`z8+R,q ^cǚ'g 0E1{4m\'n Aah@er;3RJ-FtU揺n!.<O 5ILjŶQny}'ǘ9-)?J_ĪM3PS]zcf^u4xS3;in~6YJ? l_1a+4v=HմG5aIYK5*dIO_ҪRISiunxozDp߃ @qHw8E.>~wE]AA$ӠM ҖK^ 6O",b!;h ~,bҠO#:ğq瘫dl*(n`MVQ->oታO3w1B 5n06+f?J&޴Hwd>ץgڹr_) c'|k \6\sp>f3tIipd$+j`f.&wNW?BazlggCy0fDEg!/yy }hhD5kI/{byjanu[:l)cumbz7f/D$șBхb$W}a(G>8a'?9~X}AʾHJD^om#Qa;@JGUC~J?_CB./h=0Yz یTiĂڂ0½cb}=E^xVsݔm"k_ 3ݽu[:ޠwq b9^2Ϭ2Qؽ1蕙`;S{|^0ws{YR8}ObZΧ5{j^]hY,_oijezIA2χe] 24H"/ę9pg.FݔB1UӼ)Z.{#h A#y!A5Ik{KϙW9Ƴ`վ{tɎ4l)YnWw>1"+F7ncG.UFbZ&7Cx!_o; F%x~ݗɬ-D#ZsLj- ϤNN0 @| =* ϔ;(|#|/' X)+0̃"_5s°eO2$rIZ"vҢLήgԧ-{»ީkiU؄0}~JO a_RKTQq&PDMJK{@gLؗswVgu&JOʃalcp)XW fly-~9\LW-4Vzon/,zpy9G}+F8u fg(io}}cjy˥>WRWC:t|yT9f'dVT 8RFw pb7ޣLXM\#I@JKZLn#, $y9"h^g,d8]MC_.]ˑ[`V0XXDL:')iڎ[=<}5?R>fx;ER;Rtݻ:P#-ЇC [Wd4;y jP<I/ßDq9_on5aqFܧ!~R-MEۼu/:UiNLzC+k[a9mm=b$hi[?#(21 9K3s$b迼4=z^<4|R#Lhc,0nA=4z!(`?_)12:8LzmTە;7O4s>ډVvy:Mt|U;=D#ꔼ+l׏&㡦I?Ǥ21<_U]X؝C7>M_ `5@z|!Q'/3*+ RJrHb|pϾ.59n]rGP2?NV݋;qh]BIW.*z 개-Dp&*n}I-'{ .=!؛\QwFwe}#$+o+jF#Vziƒl /)_/lyK v[Xm)J-xT37\e_Ow˯Ss ]tGM'\ܰ*aL&!aBǼ)5Z;ʢGA.S+S>CqnT}7l"{y;T?Z-':oh/BBh廔iڱ~U- ɢb)2]q$CVg@XlEjҔS7 1^+߽b{p<ҹ#?1zIu(1bZPNE4 ]7gT"ޥ'@=Íz\I-:=65 b >d i^S a,@$]"5s > n!%^x@Cz;gہ ,)itITזfD"I;&@AW;l:7?X}B*1/2Ә*K}1KEE)dѝ4#VtmG uZlbW;5-jz\)EpnlNtz1(Tc_?Y,U?⃫_[JۮIrLEVm. ۜ$&f58}MTh Y Hj!ow0IPO> 4+Ixok! {~h|9U-8" Q= By (:o"Sڨ(=[t#{{:;`pMn(j'r+TcE<y^ՓTqHT'!^B`i16fVvE ?%*{c  ޤXiP( =૞6||J ؋!坜 (QTլ#GEژWY!<}TqT,V`/el] (ݲ&c@#K!bs[m&+o}V]gQo6jiw*xW=k̚ӳ&jk0uORzݞhtٲì/825WjGi?NfVxp( yXgFh ?s2>. u;?׹ܾ ? Fz e2Ȣ:19lnК bZ]PSlwHf-sG^#/7@K5wL9T<|]mha)#`=tGX23}dkj0JJej,eC.>afW}C^ê%eQem?҄Hy*(-—5*KqUHP]|]Eőb&OR41p@B {B"m:܁'Ռ2}r q8Q.BsziO$G4 =! ' <hPd/6N嗃jHC))@Wɐ񀖒7a+dݚA:޽w)s[IUNMߪ2," -;EٻeiQ\Fu;rS׌Z$AT6{ LWX$`U,b^N|%,/j1lZ=U&A(Y[G qdѥf`XF%;"G'O!hk^.I|9v):oۥϝ,10)Ͽg`SlwTc=neD4D5*%,2n+&ϬBFG9v rhC ,&׀)<ՀCwߙLd0c;D-LGɌH`oѱ 2"ؚU|-[߽iztsp5" ^b ڜ21A~dŦmQr8Kd &XZMH˲:Sx?wv[0"(I +$vnoWIYc^pNR kl^GEF &"Q}Jv+aVN:d);LexEڂ{etPr?VK;bb-пT5T(>uSNxIO#i?2 S2?+'GoYo ǢW/zINꎒ^_"(DR :yBkCO$ۥB ۩?Jsa޾nɖ?|.Q]JZGZ:÷z<2vi_jRAK7?F];Dv!9("syXԥd4k0!a7GWij_RR6^:ǘ hi4 3s˞ *-56U4'Ejۈ0^s5$)K2M8+&`SbcR*mz!6lƈEQ kv)69謅dlrk A9vz$jv0DaꞆE8)F}4.?uCvچC6^ɮ 1Xk'i6qGj}~8DY>j.~${1B&`@$NLrE 8i+˭];Loe%W-{X1v))`\o8=K:?j!/(ztAn[֢`ڕ@Z]$Ĩ拴'#=Ƶ[\F3=-ܠk!y=F0\]ɜ qJ:FrяT7nEG҂N/lu:4 R\Ax ~rҁՉxDA(#NndYRfA/Ի6  nJ p6̕wt0g*% uxirPDMfA#8dm`Zׅ h{GxMĝ^&V/[UTLM5Zf5ȓE hL'.ԖsԍnJv(lV4+Ly3xxcCeLn.Z 56aTsrJG!d߫XJ~xh%;)x3VhL (N)A[4?r^ay{EC5]dfKDSz;%!p랅!3\]߸3s"6\ۍi nKM|a"Fp"W{[=ѩ@J;bCDԼ"ӟa8`6}UHbe6ѩx]eԻ=^K]d'!Z (ckBp%`ڣVlZYj.姗8`3)᎑zOf|G }DJ*W,\jcBe:/'wÓ* ! ~z̀]|Aް}V3.uS|_p'*? Zx4N@BOБNu}y:,AZ^ʏPr[yO΍G޼š[_(_g1 أYɱ"L=:, ޷x0h>Y%F}dxr\v~L%qq >S#g 7s ߎ&1O)i ND 9z{a5BF4C w5_"w%AP}@aS224NN٬* d6E|D`(||sHk'74T2'D˾SM0չ-+ci\)/|t!\'q^w=% i B *3"=p0HxAh)^]sDঀY:fbKҹR$EcAO4E,MNccb3k"4C֪^(K`%U ^٥PiUesU413&_ J<}n{Ҧ\MN:uq򻇱m9AVs-AW,QMb%yvg[z J}IdS8qFf3i8ME۸݋a̛.VJ:i;]ղ%:A[C.QEmrڧԬ2~'rh!@D3Ժ*LH+IiuNPY|p]:Wr~ GYl >:IV5kÇRL!r؁*sےRTRt]8*}5SĦ)<2u6m:Í6LOԴ%t]Iܪ7}j2pG!P2'D}?J O _cSN/uD*%}1^WB:݌jPe!3? _w/:K.c!i  ~l}:=ꭥb?w:R'jz(V1ߟRuc_jh-*{Y>Fvg@CJʧHp @HH A;ڳ6F tOYҫA4"S9}}1]TGIG;@ʜǼ,.) 'L)AA/( "]ǓPgFhX*_#J.;a-՛+LJ%Q/2_S"d1 F (aVp-1%DX/óظ*]Xr^UʢJT/]w(]%~ xc#uȹ~D*LBV RD~7.A83swo |sK!Id((zxdZ%xh*ߕ@|@-dPpQMfIc'GF5z`cS-'m& i鍢a yǀQ~e2K^ć`e*-jet%U^+21껱 2~`1V);VRc 3V& <ױdC@1DfabC6*ȹ(t )V0igA}^W;L[&1߾*,Xն*ʮS SVdN8+c__ߎ"VɁKAgsTh$ǩopqYi#X[q8ͅ)9բ@N+uS*TãB@:#wCWHz{%}>U:Gk)`6qGS#QMyÀZOS;^:!CNm]?wsu}qzیG0հyUP\)WK–&z9$:)I`?*J Gf2ހ"T/5UNQh]S'o2%ŦPک߲=ʌ.s!EC „[[ڗ<_Mڜ& ܻ;,[1 aNjR_Ѩ-YgYhz B$:Vp=Pݽ +d`ZŮή">blA5TC·mJyJⅱȀ*֜j֍ۮ6q>Np͚[4@񳚏}F9s¿mf$[y,=} GAJ}qzZ:գjN~KCɡk_x+FB&CI&]WR#:xr=V8)\JߛJ]Qv0sߠ5TcQ*̬,#>(L!xޠﵟ96o%09'j%$sMh`iXCx. ret-gC v ,lf,KH}p 3}d% 7/wdyU%h7+Y$ Q3\j_DW^d&46EZOK@1]&+-'iNY]9ѬKa c`QB 9`J@ƾhҽ/g7bz4KÓ_^)##G.faF,@Hƨ酸oXGJݽ%pQρѳxo,~p2JBs#$"Zozћ|dqZ.wy751~X$ΊwŹqLv2@VpD ֬D qjPCA?J-㠤e5CZUfca2 ,79 IOt)Ɯg]w(L(楳ކ;nHsD0-\tN1= h4sm9 Ti #+<[[_3T\@$]yixzCs'GGi N\+{\6d%8qʄjuW.N$'Z.cV]C!dM$/j~鶗k|(07VFΤKvV &$`X/$Ig2 "Jxz8<;tvG)*1)-]|bw{˪Pacբ}5^*LΡDu”0d.>oHQc (x@ǰ@*t-Ƈ{SwDM)l'q~[sw 8+f\z>[zux ~xl 8GF1f՝^mYL֞63Pq*ύVy:LOygNW WG=yq3,΢[qrRa t5?gbZbM>QrA<|"2i;5]Yr {h[aQfYqLV ǣDac-*zOy22\ yt 4aH[ť3) GI FkX=Y yɑłrLIx1GF'`-nUsⷡCؼS̍ >OPfd*%x#$B;欻qďd_bB'U `u ZWa=|>{+ޤF?KXMf\\yK ns=^ptu b=}+Ǟ rSz[+6J ꛼d=sOטlMvduL!PʷgJaeӧiM0;ozr!p^$c cbfa)Nǯ>勆pW%厞=M8jҘC7]H*A1-ثP؁~A;D2RȪ؋'8{s|Zw:+i(]#3N!eW5=(mYqHYCϓ=~?4 $K.8hh퟽nKMU7[\wPJ&\*۷ʶy'GE*IOzt٘=#_SFX=F֔t\%YA6a3l{P"sWvgWw5)s.n iۑr"ϡ$,+߹ e$KY$fܓd1{}WCm:rƚMHSii3d ||,R' gq\Zt(?M=H V|Xhx3+?w@nwȤ='kh`%#hhڋl'qz¦·+G\;\U1P1$ 'z Α aC[=z)(*mbSL{YW`Ԧ3jlp|;B\1~1o_;CkNc$).Oۉq o ܖT9`͆t`V}kBKE)S3zΛeu.MNJt2 BԁYʩ6^Q>rG!56'wɣfT`,ƹdtYU |\J|%DQ-Q|!,D܅Pi߁x=`~Ƭ% ds4@o'KFp,.!6Q{b^dv eOyD7bcB[ƴPß (zѥYZ_J(%Q9n:ZMv #7 (o +`G G/!˿$"pjR 1̖?w&m>NV6uZ1hb+N4yKyŔswT>B?b̲GO67fL*l ag1Qe+qc$lߏ2|h - 2b ȝx̆7$LF83Skt cnfD ]&crrA_,?{Ǒi'F#  á-r0e퍧ra.9u)fSslY:Sy3kD< ){#g8ErRն5\UqlNSj/8ܵKd<6^RTJ?~'UăPJ ?,>>!K%.Ȱ6a Z7E"DpJu?U%i1$Օ38ġPetqC؃{REvS21Z=h3U:GO ^ul#I,="p2A Ԭ'+A,'f6 ±f6B']KJS2gx wjWO}-o}@xܓ g>lJtk-Zul%-}J!̻)Z{;61] U7NM#6 J>{jw}iҸɓvUfzWVO|9Ngkp7fUJFȚ:_fPVlƯdQ+"OdhT)JIVvW7'u!oK!*1 'ʊҚ "w/0T>D$2%n &`swuZR@ERH^\>f@V"LHu,[jCd|2 erς_GRtuUvu{ì:YSeȸ˥ONvL$ǰJe춀q7JP!2e )771uLNZERf8To ۉlaONDaO|O+HmV<:Ș_qEyQT]FML(~C:,t~zҽ 7Ό\cf[\ j#Aۈ ;άH`ƌ&r0_#hJj+\Û2-SF?[>v筧)q@n9ǘ㝐 g$)5G%i#oi$5wĔQL- %擨qY٩n~;gq{ @x|^,T qn%p((-$DYE(߃J8LϧA0d_vbŘBx?n\y4)@k$,3w۫F^v li"7-:g,ʇC+RTCAiESWӜA/pqRY~Zj)[PQ.{of 3="09ԛ_='xWh,q( `v6,J#ed)0+y\QI:,9AP:>l TAkx>Zn:!u/xu ^7[zʚ 5GDODKLds73fz+^~FTSfIn$?Nlޝ`]X)h<0#66\^ro08][낎wP'&)& )zv9MfNgYľ xe8˽om׺pIJ^? <$XԘ7ܑr h6aW0"DYVS "'JƗA t!L(#msD PRkFG1/SQd> >*ޖ0e ԡ *>(Y ظ]/ &JǯIGݐiMBq*)AAy9Cswqi}p|ЕƇ`:o Z?:n0b%"'?9]@T\W 9(mWBzjׁE-&ca!\龧]nksh^qL-}Cruʮy͑ݭˇl$+W56_}]Ӣ/|-kh5'(CZ&oL6B[ HҎ߆  \c_{־i:h'<>@KbBTډaSB緸$1MLIq)ZHrw\LUv]˽W~l+nnwG%Ht7?h6p"<FV.%|̟w)(Bg]_B,"q+a7(ohqG@bŖŀ>'oWUQg^>ݤ ׻JRAX?W[+F4Z; PDBcd)g#^?OНucp!-)ϯuNܡKQ@|5dzi"tjx`Fin*ثzm]w wؑQ%jIzoSOZ(/FwaF}9x]Z=52U }1 01wr!Mׁ)Gar˜QTn)Ҟ fi)8O؂)*$qDa\{˼%wq #Yvt5Gj,Zp T (phE͜پmM:dv˖tlIfwaa$@R!i].6"Цx>2k`R*h(r7[օw&Yp<6eGPݷIs b1>u'[2mC }n$5jEt;@^p]|%][K&#$8r\OM'=a9XzԐ5>:^8k3$95 'ј5=&7ϚQJwl\l!$Va Q@BvvBQTnnC/׳?{ #SBdA113):^c,G^J2t(f1ԯ3M`բ >j|h~PvϘ}F{iKl'O1f9TiB8̷ mcnC> 1dƍ[V>UnTMEaaR3;sXYE:FĻLpHxtBkm<((r˓@.^9$a!+<Y/ȪܠD|7Ta& AUwR-3砟A^dȇOViyX&e6;$qX B6[T@W(#S0@QX͠/VF,x,DnVWϨ*9Oo)j=Z;q|Յ]Rш;ZTV iz-xK~@:UuTݧ ŨC?(d eqЋv Lky}_vl~jRuTf.A7~kD<iϾMI/.~b_l%,~ G ͐YUE4Cnƌ!ɰfEڟg{DW!K<G)ҺXnHD:*tBQ6ͼg;"w5ţl8"{~}2}cn!Yc֟6_H @lK_ɲS H,Y'ԬS{V@06`K?}|+l ,A2 `&EȇO\|-1 ?u # X|qDc* j4ӋA}+ߩ*f;fy|ڑpDŽ9"O8|dVZ )cBivBFJ0%;ДFB_2,>iEuǾW+Ix\=3'aqȶ5g"{YPTg,4wok`1?i,ϢPJZuE?H.v)Hl<[mcKF\&P ɀx_иny^E*wȪ7 NZ>ԛ8*5^x1 ߲ {67.#s_L-@t?)s@(k[""#[\K8`Zx BiIOP25]gE{/- YD(nK)q+7tfo9dq.lনc0\4O%UxK n}^`´</X;K&@B3fmcC qxYVD0#~Kr!s@f:k͹, jy8ȝ~{"3v7NQ~{嗚ƃ( nr$|S26*7~EM0 Q~L:8~3ڌ8r[_eg:@ ؚ7!iTz9|LJ.pn+! ue ՌFҥdo4ͩHIPZ$ Ow"^Ӡ P,-tJD֑lxCn0ZbP )9L̏n6SE#DHT#w#+`]f[3 ݣբz[ %OW\k&$Q uxߐ,gcRZ:څ0Ŵ ʧA'f9# DaJ{s[ܕȘ?>Ix!QZ^YE w_"x؉"TC<ԭHXWvBJVgsx8 ͥ Tvmy,Ũ(!.0XldѠWb5FA*=rx8v񊕝/N4h@Zc B5}XJ4Fm=BQlz2_厮ĞC$:o(˴b'LHszd`dD"Pu 6$3s"zT2C,_^ɉĩ?ˀ5 )ٰ05ĸhdC8¦[t'tQvU>qİS̬lӖZA4HXjdKQb[Pl wLƅapۢ d?zLI:d¤9FV⍯ G~єr4.Qħ#c Tȫ6]EڟQC cw x,p.#U9ZY_,FYFrOL;˞< ]EZu/T^_1ʓhZ"iC C/+%n]ظֆK;,S+fH{ d ;k aY-nC،u*F7K[OHSТzuް^%sTⅅu S)XϤ 1[iH&4GFΖ,љHzQt*tDϓQIbq<i !z eecY?>52NB'\._YRv4v>`9iڤmߤN &S:%;C<ưRW *!%γpIY*EHZ l(lԁS"A wRU)ϲjduAX`S#!xA[蛿Nr~K @s?Aflf Hcuڕ`_Ӱ1OBϖEB)<sOZ*pl} S)+$rÚJw9 kwy??i^ vJi."c S:}/vojpF.`G N0虄M̉u$ZK+e)5e~Rvl 'EUvC<2G:wpn 3# Q.Ոְ>]IׅУoeN !(/A,'W[૦ uяw7XmQ.|^`W22H4Y*MpQ"c<& a&IҘ89Vv~,O,!~)Ͼ6IS o3l,xkUR ZG^TeC"xa%<`jg2]f0wNۋ.M-* ӧaz=,S^~(JqMa7 u DG1e:k5H{9<pr6ˎ˧&LkIH<ûvKke hEL L@ˆraq6GT)¸l*F%Gbj6Հ+ w;4uSyHãSvt+XTAn7D29 &5!{IKpLU氤VAY~O},ˠKR{@O?mij5)qZuûId1YqK+|J$5QKAmQُT:~9d69kP i+vCtv!;lWJR@+[b,W7Eil&Rȁi &=6"OO@Pc[o F;B\cOOa)PlBNg&]o%ԉ")ϴl>J yz`4NԊ],̗ʨYm0|~Ą^I:nQjonϱ6qn.,8Bx3(CX?c:M+ v{Ź"8HFpOw- )\4hƒpi@6y(GĥA7%XP $u%.vM+ Ef%5nb C~1ۤ%[Ds6;7]`$ ,4r,B C`!ġIf-T$iiFv%V5yr߹zk/ծ;-|,gczutޗ 9658KlW41m,^96P'*-ARhQ!:|Kb 7i~ E1u )a"~*OJ^mz5!Zb>]1'z%3$@X49:@fraJNj-R"no$ӗ#DP( %d57֝%lfBb`d6ڀ) ČnY(5֖o#ݗ>dtHr?>9 eD|C\;k۫v_~67әq:-u>OZx~NF#˚+#-)mv1g[Ҭ2Z# #v/@影1z3Hm,=82U> ww|gj+3@)V=-W=҄OPj#F EF+԰tzjul,;!:n^tƸ,hkp7,YsRlCxBۨ+e(Ci|89Cki$JFiQ+pNhcs6:0elt/'9s0} RwS^e޿TqYRX0>PƧ98t>2S 6?V"t1^3FT^֎L+vuz' ;)Ǭ#FvɽX(|KRIAxPARipeߍV!yo bA?x0v/Ii=T1Zc?$lk4!rf"\.X%z 3Ӽ cLdD/ ]=|2yS,#ig42NO(1U+@6v{4"C G\ :0>FsջbP |=f(j+n g(1dBto!+C1iPbey cȫHXà"?J55tIGÉ|,ϧcN63xk/ٜk>%C^φA䫎 %Um4w50p19Pb/c֗ڏBaៃǣQ[x a1e lcsi&` 64?n7y i6+iu*bnPzTX3D s̒_{G4ӡ),h|@SUfIbch/hhnӻ}<J`}8g?=b%X&g=3\i"~ݸX/=<+;/]EK~6'Fb`QN |ы7aٷ3kc2 F7[7+jj $6a`:S^ .lkh8꫔ZEGe`܆ˢFXv:kpltb3@` :٪T0ع)vW߸}4b!,E?م;䐪^H$Q[;A( tq᰹ve@l¯#iXY8CsTbH^~1gm2g)IH\G*) #~42C*]~Ve15_7l(mSlq߼s5OQ()tU]FE &Y "Yq %CPh: c)~3Xxp@C;S1oQK\ P쳑٨p[d3R/{:ngpذdO8C%@R 7쁺`qó֤RuM^tY)ȝ{ gDU_=l/ |Oޱujnp>,eu1o)qV& рq;G:mӮd;f$󄭳>g2f[68!^`wK 3ꫡbXܯY=n*HNX;sH mǑ#HW@bCc:rֵ؛N n)R1)Tbt)3X [y:2e'E}uevk 疞P8.ڠ9 t];Y @O` + /rp&S` U,-loIS;( lahcHf格r?Cd`@`3{zRbn:|2?spI6{HO2Jb>\ o2{o^עlmմ_ۊ7O#-6_\#Wf)86܅_1.a/2ꃮؔw4fqEMs̏ID1Oyg2eiҜULTIQ7W;S/F hVg׫kB.4` h cX@DZsA%)찚( ^ρ2%Gh#]S(%ɴ]S@DD z:)?MNrǃ[oyC7,^@4#2xrsmEGYZ.W׻$W$YĊg0Y]h\t=K,!{*?'pvw`@R*H#7K곑:vY*뛮F LC9cYq\c0 oߕ*EVR^V~ߺ8Szb[(A~rcJ8M&JG 4YNAkRx@zĆ 34R S8~16(=Z_UJK3-$5WX%黋G7:s&%v^>-׸<8k܆AFHC{mŧ S,.jGJ֨Cxow٤ v\ה$ 2vzص@Y{Dd"}jKdpQC r|'rsTgYus 쇽V{帊4B4& Kv-":eLmU$}mmK W[h׏<@g̅+鷀cHE-gfTի <0 䤮8#aI`4P䐰IVx,!BL&+6ZCbH8Hu*e eہ;FHg!)I<)RVC* ]5n{0U@6D:݁=Gql[_LfS/$?,Kg8[%R8~$k g[.oF e 7{Ӭ GںH!r Inm0!vPB!vLJeK׾%p1+9mz^P[ܷe(CLϯh vMLỈ4 (.z4r вa Oq^xl洙%Grj uϜk%-R_DLCutFp%2+a˧ȥ[lc"!ߏsA24qU[^M;q`{[GPROdOӫ]oap0I}7^Uv)*0i i3 # f^s\=GYyZ r[qcԎs-S5C;-k}=kDsoN{KsW06ɓXAbQzۊDTF:\-mN@<8v ],q*cO'qw[>9fQB@QY5>nºo [@-Dbwj [=cqn*7 /}mذaB*T1u|rrU%Vi |`&SY™GsEAOB1ԄS⏲ئ`${7aܛanEz&Ԛ# [ɯyLE0fh0"e%e\R^f?xg)p62;7Z.ڳ}J]g <1Ұ!_Jj`aEGv|/!?ﲁ x.+ra~8,xk"6ͺ܅̸B.q<'AAGyv;-ч!HOEk7uvZլxKL~@Nk 6ЕryJȮ>Ʒt$?xD$gn(h<ֆMhs ^?4)*‚aF[ '2]5B^YZkJP݊<4 CPrH4ęWuk=[̩h& -Pt WJ BF7H3zPV8G@vv[%jrg x -4ڇ,#8~p֊RA<^d}8[/tm;)R$ vF j.a#5.PxitB*LP=̕kUh+JQֹ&;x1"hQE&8KkivIRJYK3Vp1IHZXFq܎__ٮ`%D"9=]u%q/t́{Eh$\O0hz/|SS֋rОW\xu. ؿ@*#@OzU59TV[[KQVΤ#tu Jz+P+S¯0uʟ$w]Uo.=^o+&&il&+,踩=t.ʥlkT ;~t 9'ѳ>imf6"h6Zޞ8B<YMDF7q,/4z{QtX-\J;躳Nk_,\+sgnoN)V"@|hsqXXTυһsF*+Qͽ],l@hAÕ:a/.tݵ59ŨKP;F0ڽq2@_$c"ĉ{.iE:&{*cTݎtWgHSExHڑ2 K{sF Lcԕ8rb& G$j#NZC-w".@͇ШYOX&H7$aN,-[蘣AtB)%Ue 7o2sJOۯ<!rPF{ۆX>mA]՟m~՜~p?lWX@w5Μ2(Ii]+e{z/s@{!cxX2^}M #5zxbchXa4&?rX}0%3ń垕10 D[NJH}Qlz:H5i&DKbVa' q2kb\5o8v)왎mjW$%,/o0BɴiTje(=c],\mOxβ OY9gѾG.%>h4١8Kn-'Zt.`n4n7sClFjC5GNe7ͪBz?vV?)Bu \]ETTyg?n>c Vu6\YVv᮲۶[IJ]7a񑀈D+{GKGXyKlWƊ wPLf~KD~>dai * (m 2%u6Wh5ƍ8I[xWP@&\?P "Q|YHKyc,> }+=W^(Q܅"1+1ogՠMyY6޳ۋL;0XR6:z:iŚHAxr5$yEs,Yu3f8c)LE)kn)fM;? ig,ܟ=nXC⧴a

_K*Wd%(l\ƦY#ށZ ɴYKixw$PFZVpRX-xCl?#" i +)C}|;59 >즴!Y+Y'>% m^9W.3RCi 3PsMQ`>sl҉@p䴗2M!s w/ٶ-C%ځ?ENMŘŦ{:8"2vu>VSHC~ݕF+%k2͸+\ ~zNЪ"n}4{ƶ7%ߓXZT9PithF2yʮȇ1ǃ'O&,h^rPeK7Xr \B2VR0";8eI>|7G`I4 V NTC֧ ps& )@\3h)TeFopŬ^IW^G[ƦpPdig6Yt8^0zDiݪǭFpacPfTTť\mqPjlڄ+'ڹlȁ?ӝvz}(gnԯvWn!"X= h׺.^+4D$C8J5"9J?~< akz눡GA>r\U]qIn?R +e4#9I#>3l2 N)#=jZr/&DE2`zš2BVhN<-Ǽ>"|fV u0 2h qI,FQ[4Wfg)zh%= 7Q4(9-R,3+ 0<;-LѹX8Y_$|8Ttch8sm!Ƹx7I*7,{˷,oAoe(rĻx<,6:F5W͎D G5_\U\,CTX\KHz"͉Ie;=`gWZs DRUZ03aEKgyR e[+8t^)PqxO ueYK'џZJtLNtl{1V t5kvًRz;$Fڶj~͢6p+} _>AC6⪬Ҝ1 b!H=[O;؃,)G /wNFhݳaİ,b:w|oPi^Ѥu18VXnf"ѱ;tQDܮC Mԙhv"9C5웶Iñ:wVz 9 &QQ_׃*Qi:΋R;weY 2ٖ;s+xnIPGj:WDD F^#A]^G~цLH[1S1BK\dAms%o%uGWɴx&AX^ڏ%FԦ6# ~(މ`1Bl3!yKWJxIMJ⒓8kN<2/JzM}(+̟4wIJ8H?ԜJXVx]VLГ\iY"P¾s?xGĿfOVǑPS i&vT"R ➦ `8k>cZ7  MBCRj36\X龔Bqq8x`u&b,!]K5A"qjOIo~,[TK,,z(vj5hVO8 j `CrךΟ+> aq|.ג-EC}IHFꊻ(Wku{;#?DzO-<5觸AcJ&d"#c("0ai2|+LxIiytj~1ja2q?IHOc_?wZZ%#$4*{?^ds-u\ʅrG:< 3 /D2F; .2 :+1ÃJ&. )$@`H~2S.y+jFB1Ƒ.NDz'zT3D$nCAƏhTʘ[ӞEj HJe>*/S,GaVJ79sp7w})G"~J6&_.oY'MIrF8*ZP&nsօ0g$:9R WQo*H Upb8;m8Y~pYlÛˈG4rUjOIbaZ@~[1.mv hw^NP7c>؄A9 ~Sn#Q1/HzH泾%3(ÑEvЀmKK7Pb!G39x\JA<e#ڵo `R`>Y; e2'7[_5PvE[W?es`(`y.r`ۺ|h6VFׇX*UX- N;yw;'E65R@ιs4nvBu0X{?CO0.E IS`02FQ; ]D | !ʽ z1UU%Tr,lcSfd׭ReŔBqlh,UNx$8Z!z&C{[(oX}rU: ޟ?K\N VT."L]NZ5$K(lVMN~vC8ctW**hƕ E#Ʊb7qK,\A:=\o]|-X.B $d.@0To=l`@MYݔcrx8c"rGd;'y:[-)h| dot|ݶ3(9_r 쵩D H_wea$c1m.5[%.vaݓXqrϕ 4\YpVi6 5}dȊW /D?ֱ9O1Z92V%Os%‚}QXkڤO y=5~NӷsN7t?Ab蛜E2ϬsQk/JPZG!l?=}Ꙓ].p-:迵ZlFR$_h"tG|t8HߍNrLJ0z􏒯@'l<%<Pѥ Lgȕpg`$;@eN%QK8{V8sY^q⸵s_-W^:rc PkVHx!n{ 57B{&&Z0X'1'y @›NhJ,=V ⃿izf*-?㊢: jV o}mg71=JJ3<Ə5WPR->HE̸ #[)̝_ЪkԔ{W]k?("J,L{@JuB]יH/p:SB;t`[HvUY2fXBK00g!;p[q yz1ܾ7%<|5 vdqjl{$)u܎~kTτx: ArҪ@/F&ٯmN-,5Rĝ=hg0 5#u9ʈ<(v(YՂ0> HIR5D9E#i+L3G[dH'L߮B15b5JЭm4 j=s &K #zBD;C# NzDB3WGۗN}WB5͸##CȴT?F] lM yVz!kyה?ݮ0]!PFkLy$a·uz0J?Oi VHm Fbmu[ml2IkC늈& : myKK=zjڇ9TXg5nbslH#ŭ5;;oU#D\.%JߢMQ:+ا_39_iu T|BX9ȵNPPvk+{/SoKZn ZƹD,ڟY̮S {+)kKc:qƉ8xu`EI;Ӊ3dZ TO/E@S\Mő_mW煾U6iTxI-vjR^H<] iS60=̖'㩳c) SafʒJ;v9Ubv!pKs; j)-;ewr NhnE'Yqu %{f14BUzb99C!q|]ͳi1nyrtCG v HU\5n۫PuSb ۽`5b+۫L%0˂)<(9X8iRZP>#a !4z3>?rzܖQ6 Xn+"u>[]|\'Ѣ5mJ6˲5E\ 1pLvw~-¿rt|qf"._q@ O7ۍ7 78!7!=H83jkC!6sǿt<َsn]>vh@ʊǼ7PU^ |R&Z1m8Q(_/4=oMFϖ9K>\RSn5bR n(K|>Fqx VFiOh;<I{q#hީW~bRQMWp؝6ru['zR#0n`g5=Ec~sf: |o<>W B+&b-3;tN9$$I3$W:ȎsK:":S:FЄ6ރoZSiPΏ((m3QEIFcc5D-o:(g8j~bҷ;6*r^ÂW]R f'P{G#cɄ~Q̛ <]l&U/S6"E:c6aDe/k:-$Yc}xUwYS6bw:i\ i"daq,g30Us;j\] )kf@{q?"٧#Ԍ@su9p&X:5WN06-[yms2hr|s`X'YhԺf2ЍINCHndb˩XwJTYW? 7]śǫX fr28)yE!ue n8CUjz{*xxe̺CZ\V-m3}< 8L-<^-1;b[S@6B9?}\IW#h2Nز\@T䖐9&.x )(:k_;afľLc %TnЗ8yȍzKaU՟d&,1?0@G'gp_ey;pf.Wo/+эi:S۞Iy:GrUH[:|/A{Yn` v& 3)]'C$ۄD3^a2 u~0v}`4D`Ta 9ŢΦZF!≮+j^zn!NXHOɑZ_iZb,Vo+R%E8"m鶳}N(ODTcOږ -'%KfRޞDA4ɏ jp9OlbO[OYC^ĵcN@8'E\1?-\eȶ^e >6pt2N# ћ-WuMr h@PvedAG%'0MH-vpLq_JoFp̴T8''+ 24LA@EP1#;D$'tC n V;ED):- @z!6 =~3uK W4qSлE:6(ş>ͥz$>(.8&/:6j 8xYpWU)Dn=QS6ƹߙP_U34њ3 (~k`**8J5uyj{y2[(Ѯnع{$*ukn1=/ ȈRZx6c}bphQؙZ.$u/h0>_ÅKV%MԬ3òăPE?]M4"OVHգW Wӑ9MQ+nh* +8+-'ҷ,X ]b;%*IIn{~DŽ{7e@. Bn1;=wscjlnJ=*leU)? +b@`8kGBˡ(x4Õ,te;?Jy^fXGX*P:I*,+f,)^\^&SfnX)Ix⪛=1 hzٕwuvs̡f;Һ]/ş 0&"+ͬ؛9bipg-F/꡾9{e=jH܏J3eW`FW)87h0}!/+$׍-MS?AjSxʬ{`M\+LY[!@L?TVb%#;}#S0G]%äZ&;~j9oqh޶A+r"H1L"{6L}u`D,`w- ļ`*AYDT]e>bjPt\"2_AA|`x;oFR旳Z>a!rC(21([J@FAwX:XQpdzO~ TVng/Ӛ5ɀBJ#IzkHKڔ5tlan<Aщ 0Sv"d#%m >Y &?P5gHф6Q6= M3 %SGw,G|qhKU5,] @K3ⷻǠ%n3F`cV He "N)%}̮t pEg=}kZ6$,y/uА5CH۳g9 7c[%l-3+ܓaiƢ;,:d6qMVh`U=:+I揜tX"=wjJ.,7ȏ/ M9Wgz~9\6`轢ȾoX]#fN%X]ҀG@fLO5HVMx5GYj3ï,):'([M2@-Znrd/O#q949?ɯA h|嶟L]պxR5bb~JttF2$w{AVO8N>k;Rv̹] m^i~k lc+ $&P ~ ) զYk U3E_w.!憶3K{*7#on?o;&K\(p5'x{Pc6擾jIv#ÞO=R-F7S[xsMC\—C9%1Q~ATkb>fV;%Ci]!{"VrPra;PhP\*싰r0 W)T'oMNp|VM6Rw3kD0D= %qRq+u<0~Ƭd8xx M`^mb/=|oܜ{8#ݔh黎dT9Xe/8?->6ĚϒYBDW˽k$ӌaكū 7֏=>U!g Z҈>r-֫.6ՍMJvp+duղbGLq ) X6Xmp$),Ҁ_@~dQ ך]zzU. Y(9[F"VSݲ:8GK[=CV-unx~*)fdF.*=>]@n[ѡ<$;7.'s;4HttE+UNьۅ?bP,QPUSHRp0%րh]JaAÃBƗZ9 s0O;g/䇝0m̠ܺ:Y hˆ"s1S?Tj+}&v#]1nI6/' 9˽VRoq&uy摠$(`! `ş;TmGif: z´1N̵SVb`M'?j){9牻u6Y a=qXhCģgQ955 ^M:iH5'Cjnp;AX 3W #s7^).2cTd!&/ - 1x?@jPڨy@&)VզF#U*;{L׋/mV H(|zYb0 ݾK_*8L_4TI]B3rV?L6P7]aMVgcJ ?M LnT}ׯSq;]` Nr*RxJ߳3osjiet:kF%Pph}.qU<CMSd)bI. %[ѕ*_|I#/U),VH` I^yF1{|"[ ok닏lЎg6qfChN"BO后O&Ü#Ϋ!> aFx0W[%j_O*gH T-ػ?ABAX!o|5]O`+m׍'<;?~MMq/]<fCҘ(NߛQu؎]ŵm~HDp%N]J)g@ ]OlBa FY4gm'ڴj-G @މU 7qBJM-?nHNBiyr!e6s Ѯp5$N)gBYg͎L%Pm/Sdj^ь5ߕEDRV"9۹ j :l*\JOZzAO fΦ,z~CX\(˷ğu섥r>u;'0-3ٰm^cݒIvm̃_Ӭ$ˊsИZ}f\)_ԨpR4՟+d94 ~m橃Lx80J"{EdkXT.[Opx˜eE9~81fI.&N.3;C~q{oȜ;klL/k#+L"W}?Qpks fVhD۹8Mfc"F'L!ڷǙ|A#41YV+ ٶ_Ӱ cd-04mce^g_0s2fvLS1uuȽ$E2KRf8Z`8gϧjw[vvM(K^Fт-7λ F?kfa)\Da*".IC[-W='H\ҝXo5nPol# zO߽DDD:+ IC=u ЌFޤ'`|IN)[h.큷u,Obe,/} 񢞳xTudOOQ[.C857Yߞ! 4Cv7? ALrXM@,%.jojl mUiFg1X(^A M4 ;dѧKu;jO螰j C*a'QpH5uL# B#eI/bBMZ G5^n1isR %e`M=W92XhũF Mc*'71@ ʓZ$?m7 (g/I^xv0;6bQumn 8孞[5S J@c`r{Ȩg Y$F~MND} ҤXSgF==[[kN`;Xfq^WbvS=:868Z8랿˚&R* 6Vwe܏gЖd"-+_ ds7];,+'olNM(Dl 畑Mcm@6@X<ԯY$t>|SWF! ZBFѭMEvW!i^9)&O==y=fyϹ-Fgڰ=$9M/[iTҨng%X0/sI_DM#' |zN9as e#}ʐx"ʫƻƿ(sQ{Y:cf/"2vZ֝*WkJ]1 מ\y_nˈr`/E22?pApo'#q,S Mx-G jbj\PGX5mI[nDôC&ZKw]vQ@S/i‹ArhrC (N;P%'&ʈ\dQ@ҹuLRxu8ܣc?*q. 2n*#.Gl1݌O)=SX?),R!fbLڿ !/gؑbϟ\i:rB{,''>.xGK7fsc$kY6̩muW] d#Hw?\ $v!-bרԫlp,AjFSda&Vta6у{='`ÐO]_4=qzu8_&2]R:({t}?p;ò V/㴙8lh5̹iFUG؋%LӔeB"sv!mt{'<ZC!xZBf)lE~a2"u8ΐW;OBQ&B ºzkk(+&RQjoR7*QifӮQPlcZ8E^@ Y!uilyW?_S1ё Lf_ﰻ.5%\CRP.֪4v.Q`[g2L6ڦõq^`KQ%?yy ^Y RInKmr )1\P$>OFO-Y R#Z2X B/CqkKtPQ!)QQπr8ç !>>;oP)굟gB(NF Ě]RkUFrM"oɾ:6UNӮ0@m2xh) 9bk]>Af#|/>^iA[LA= J%5R4!H O2i@I7%jbnQb&1dr]|*Ǎ1(zauKAm\x,iCx/W^}OeHL 1-<[* 0EM'ҿ% 8 N-ibRj6ٸa³yob;B a͜# v|?kC yPṣ`-[f.yRGNAP:| AL[#nݕ* au?*JHIsTa3jA/P~.G߉[ho{|l]ƺֵEp&1-.%:gG*n|FDе:Lnx'sJr2‘ѽ@7o /hUhv8鈡@ieyOr H_^PX3x`4 .,/K߇2j%hз)(H0}9*_Zۅwaư$L" $)NJ^:Ɵt1K_( D4c!946ZvJʫF6;Cu&5iAZ:&1툼!FW~Wj\rk~VWa\2|!+|ݘ+}10.լ5FKQvORZgF}0H?O b@Kk04<Zۡf=>&2BmBuκG@,xGrv ZM @SS99k-QΠ!n D&r_cޒc@;U# )c(j 4}:w"\ &<jY3VE)XOiFhO1._jiu*OWy);6 C]NZjbHkٰ7 F5edԘJ X ܤF(ҞL3B6Bjimt>}uT* "m(èxҭjM!5,EkZ{M5PtoYE >Wq?GH f@7U RnmN4`@;kѡ(Vu\ZU@fv~1 Bg6((OI]1QodSk#Ox!޺6ꔬu﫯h~nշQ h"6u٪5d>|?~*-2oE>/7:KfwBw/aEcݟ0nxJ8GwKMlN~eKw:rrJ|3_*'r[J9O,})28;VqTLo6G-9pxW3N:5 -4SUU'5>ir~g-*6UuY!s$}Ql?ҁ|c:#7Ok昧P-GۼH!lx`O}d !ڇм2^>QuÏׁ] t1ͧ|-0..pINک]v$@k2"SHod Gyy^j$-&?Gĺ;W`N7"zԏ^b.Z?$LƋgk+G\8>t Vd%I/Ҵ: "B3bSNfy,_th`mlw_HyћmFOX!ε"cKѨ nZ7o'@J[]tNph?F&IZgo fK mu.aSW+H y&!LwZzt=+s~TOҕt<;+5ˡ8$!W^mwXA>=3pƿ8k(&~t n, ,XdR:O*Gum(WgrYja褺 <Ѵ]&?3"ؼIAH>'y!iS}3utP6LĮgr TJfB. 0]H>3cx|Q8=vU 0"mDiXk0CPf$߰;CZ%߃Ǟ1߳fo|[P2Xy\Hamv3p LZZy>KW$ *FdDݷVv lZ𱅐<ѳ2Ÿ:. l@q A3V\%^)BLR)! 0 E̪%_F=B[IIK7>zV|]8s<#.2Zc0v*z4m!2A8AR}A Gi~ZM=aɌYd3ޏ&JL-FDD3- pwN'%LuYMa$ki3;u$GY_ ,ݟX{|u߁mTv͔#@? Z<&[Q+Yʚ}oZL7ovcoA/cgϐ]혮Di4@)Lb0XpdhlVؙeyٓt '`ً r,+̣VI1U0uo$Ճ8=AO9jQda;*M t˼:kO ,mnCڠJc*O^шIB)K_ h^K'46XNy aR_̬J w[~}Pd_ljBC i\0#l>*<wk~oK-~SlmK8>:FUh7)[{ *!s"^7ݖ FA*edA$A20J!oAgݚ5xa|f{rI捫7w  RHY!-ZcRF'ºȫQ^\0y km'G3m[6vSj;pé|#h7AtZdm +l!`DxxPF}3 ?YCU y0s ̎("miQRD՟k'Sq'$q+9N&bPL؇SV6&KΩ/iN05A`xT{ Ehx'Hߘ+%^u!lij0bO򬞍2uS) yDB,ʅd7S^p1`Hy7sWxu+֎^f،:=vC|% xfF/Iph81ԅiү34x%}Te&opF^O 1ՌsXo'%oGgrͺB&C\ht'w#_͌x4,n)^63A FN:Wrs˹ҾWPMu64>()^Qd{4 .GegJ_ j?Z 9)^#wCS5"E>La!oi見o5i':B9!m<" sqF\IDY_焟qɼx &0ؗrQ|4&q;2w>bmdi|%{v} f4OeUG:'D3][!+58m*4 ?MX/VPz xc(dp[^ a:QGյi{,>`Ʉ!}Iݘj@^櫬:ݡ3"'xD1\:zX+yXa% lմ{qN'h*DU(3'FXU/DZ`Ǧi~V^ЅuEd)n6U^ ?K NNf (vFږrtgA_N7C:k~YT"RHbh}T4uR@λ DβAR"~T>+Gjn:pyP \ź¦w)ƿ%KSW@:hIЀg82ؑ#蝹VNF?_g}@Z?o1>80T}ip.%7UvW (*SEi[[VoԔoQrCkKGম[!)o (^G:%,azqfLO_ޫewɀAPn^ ܞɄoLFs/$^J4/ s76DgÁy ,}dSS}0et6]٪4g0#U/! )6Fh.ȘΡ/l./!x1@ހ^%٣D5+ ԽAٳ4)8ʜVLC\O -f[W+Zun|2 F^RܵE JxjA9n r-u֛q?Aw8QB5>PW>qD;v𞄛_fc(^knq>Y_w/# %_^4dA'sw +ZWČ?7iK ~# Y6oNIs0.NLA_<ܮ!YM MA gJ`‡jbYr% A S迌kD0iUEy>/cUD~nxOw)'sɭjùjo40E!™q-i4@?t,ԥr+;LDNe86sE+яw2aCī`FL;qbNf2ޞmqLE0#⊖sbo ?8;A_O0vZ{y.98{tӾ`so6yխЭ:rkkntlxYsriv?J$SJ3YIh٤_\t c&WR:;yn4g+ɮBRh4X0{q9h0EmN$[ .o;KW'|A~yex:r#*=J%=zXcuycni^M:#9%p>Y1yyGDnvDUR"ޝ]b2%WB_g\}a #e34ׂϊ5}mr49LS%|gП!J*^EZ\h;UMN~s΀L3W5 C4s㗐TdFP09 m󏣒y!h(J']gSⶤf)Ң'fZ,D =%raB9H#Ya6 Re)hob PIJq6HD+ʽ+kUy>*H3ǃݏG9 FT/sAaȿgDN bmAkfBݒvvTMVVF$aI?υ a]1сH̺2hڍt3mleJ_N_'{7ڨŬ/+ugqy@؅Ǖ3YRx>qa.\aޟU A.09~l2"2l;JTRTt?sŨR7c@rutcݘɀbT-#4UU< I34Oȩ}[9\,D8^`J`=&>||6g݉n ܎xSt1]>_M[O-ԟPy<7GedWHSPcZJ, .WQ}J75#;/3LDOp3"hqZ&D#% 6fWAґ>&ŅYɖ! xwtq~' =)*/oÜJUesdߜD QR~_ˈ)ߤs;V,o!zȬ+JʌQ7  82BZZYX].ϨI#2IaX&>;!ˢ 0cS{?r w%r'-n]@AܒL(3H8?5ym xe#1R =UokAtx?2_!C|3<\x 6Fε =]H.4,Lӊm ML`çМU;ca<:m`BlV΢bэ1̅Yع_IP0mP1=e-A<E=''zOdǶ YZ