samba-dsdb-modules-4.13.4+git.187.5ad4708741a-1.34 >  A `PMp9|_}3_Z«$jƗYO|%I;ym/n~ӥ>ХD͊'Y xܼ N e EAn lY`\ϖIH)K)re8qSmFEx܊W7Ns]v}9?(7fc xAm1ٗ}`iceJ``o}>l@/sA#,6V$A-尩ò2K=G#PL.Ss͝@򈾷ͺ%N#Zv7FdgU>:G#ܾ,y!<Hڊ[4>pA*?)d0 5 G 3JPX/T/ / / / / ///~/h~~*~(+8+9/:=>f@nF}G/HP/I /X<YD\/]@/^!b7cd7e<f?lAuT/v/w/x/yXz)))))Csamba-dsdb-modules4.13.4+git.187.5ad4708741a1.34Samba LDB modulesThis package contains plugins which add Active Directory features to the LDB library.`Iibs-arm-24zSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxaarch64ln -sf /usr/lib64/samba/ldb /usr/lib64/ldb/samba /sbin/ldconfigh 88 @`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`H`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-4.13.4+git.187.5ad4708741a-1.34.src.rpmsamba-dsdb-modulessamba-dsdb-modules(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libcmdline-credentials-samba4.so()(64bit)libcmdline-credentials-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgpgme.so.11()(64bit)libgpgme.so.11(GPGME_1.0)(64bit)libgpgme.so.11(GPGME_1.1)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.12)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.18)(64bit)libldb.so.2(LDB_0.9.19)(64bit)libldb.so.2(LDB_0.9.22)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_0.9.24)(64bit)libldb.so.2(LDB_1.1.0)(64bit)libldb.so.2(LDB_1.1.2)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.1.6)(64bit)libldb.so.2(LDB_1.2.0)(64bit)libldb.so.2(LDB_1.2.2)(64bit)libldb.so.2(LDB_2.0.5)(64bit)libldb2libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.4)(64bit)libndr.so.1(NDR_0.0.8)(64bit)libndr.so.1(NDR_0.2.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.3.14)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_AARCH64)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.1.43.0.4-14.6.0-14.0-15.2-14.14.1`@___i_@_|\@_{ _l@_i@_d@__ @^@^^2^2^^1^^Y^J@^2@^&^&]]]])]@]@]]@]nU]nU]i]e@]_@]J@]B@] #]:\ڭ\\@\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USascabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/sbin/ldconfigibs-arm-2 1620330879  !"#$%&'()*+,-./4.13.4+git.187.5ad4708741a-1.344.13.4+git.187.5ad4708741a-1.34acl.soaclread.soanr.soaudit_log.socount_attrs.sodescriptor.sodirsync.sodns_notify.sodsdb_notification.soencrypted_secrets.soextended_dn_in.soextended_dn_out.soextended_dn_store.sogroup_audit_log.soildap.soinstancetype.solazy_commit.soldbsamba_extensions.solinked_attributes.sonew_partition.soobjectclass.soobjectclass_attrs.soobjectguid.sooperational.sopaged_results.sopartition.sopassword_hash.soranged_results.sorepl_meta_data.soresolve_oids.sorootdse.sosamba3sam.sosamba3sid.sosamba_dsdb.sosamba_secrets.sosamldb.soschema_data.soschema_load.sosecrets_tdb_sync.soshow_deleted.sosubtree_delete.sosubtree_rename.sotombstone_reanimate.sounique_object_sids.soupdate_keytab.sovlv.sowins_ldb.so/usr/lib64/samba/ldb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/b5c3032238a4e7a6b51699004483c0c4-sambacpioxz5aarch64-suse-linux  !"#$%&'()*+,-.ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=090cd3b6ae1e97b5cd31cd6ba2b5c8f203b960d0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=292d7cd65270d7445f10eec19a6f393289a272c3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=998812837d114b9b98c48e4cc8978e77f7ac6045, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8596ffa017f7b3791e955c046fb39be01d3f5f8d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0a3e61831abe567c56325553a1fea2d0a69fd9f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=22971a3dd3b9aefc6083b9cd38902523f583ba9c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=810099fe557f877d71a62ca9b52a565f5448a1c6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d35380516c05e5253e3a99c63ccb692eb1511716, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ac3eb410649aa8057284623181096882ac781c85, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=be7e0831d3b33488ce44f275ba68cf63c1d8b756, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e0b7f97ab95f8290564eb98a01946f5b7b805370, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=39aebd1bf919de50f77c29f10ee3b7a9d124b5f1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8866780339fd5c7ed3445c27c627fc159daaf334, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=152ab2b2b32ea79d418c85374decd60938a0e103, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f96337f7ef16f0f2b24e31442061a7737dbc63c1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8288b3ce9c2d3c5ddb864f6f9169f5537c1a2254, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=44246da5de7cfefe88bd8b2d0019a8d4056b6342, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb9f35cf85204b392518e8de6f7072f9471cd26d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=df30e657ecbcfa160298bb64ced3a53cdb145e7c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=61ca390292b1564cc932909fd572af6450125c02, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9a185eeb1e9bec2b336fabaaa25015e5ad8aa0c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b860691f11b1bf4913e26848f089e331be865b19, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=076ae47f78fca517fd3a9bc59c89fb7b0f105151, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=84731ac02a28d76b9afa1aeaae45077db6261c04, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c723dd45285697a840f5aac9681a0a276508578f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e5d9e1b04cb38a38ba7272ddc442fe2aa6c87a2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=be825d751d66e708a9053c818d23df66f793b9dc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4e2b1254f532e6d651e02eb1184287a00e77ca62, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e03c4dc15de88d526fa235e67596f12147d06a00, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=076c687707e76a16a331c4d562d4b9dfeece591b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4f8acd51c0d3d5ec9ec6ff62e5c64e8370e9698c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=430ef79437399db3113bfa0fd858419ddca491bf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=873df4bcee2b995c2d9582533b8ed680d786bdc0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d2736a279b9a94018b6cbfb0cb1d311f4d919d14, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=af9d01e1fb1080e82d90897bb248f4b8f81dd5b1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=18cfbc939cdea80c23a6a853fef893041d754727, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=43894d93a8bc7e155df6bcea97252368ddcbff14, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa0146a060f03622313ebebc85f76c08fae0b756, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a9ef51fde1267d531bb2909e2f2f0459ae3eae55, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e5318a69e5b1e466fa4c85bc71020aaa93138789, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3526c4352100a475330bfb8282ea8fd06abfe560, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=154f49991e76499b969947fb1ed5d64213800d6c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b959bea4015334fce1e1eb73a72d000f3b037f02, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a62a7101d29bcade19243eba78830dd08ee9d8bf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1cb91c27c7af6776c89c0dd044c08d4add41a5dd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8af3379732627f865f8e91a6e617c0241e6ce04c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=12ebcfce62274f0326fc2df226a28a9955b1178d, stripped9Fdu'BWbk#Zd#4L]ju    7 & . "  RZR^RdR RR RnRERfRKR1R R/R5R3RRcR0RJReRYRRDR]R.RmR2R RR`RfRZRKR^RdR RRnRER R6RR5R3RRRHR_RJRcReRRaRtR]R!R[R RDRYRvRmR2R RRRlRnRKRdR`R9R3R RJR_RkRcRmR2R RR RfRnRR R^R3R5RReR]RmR2R RRERnRR R RdR@R3R5R8RRcRDRmR2R RRnRR R5R3R8RmR2RSR RRRZRTRKR^R$R R&RRnRERfRdR R6R5R3R`RRJR_ReRDR]RcRR#RYR%RSRmR2R RRRfR\R RnRERZR5R3ReRDR[RYRmR2R RR R^RdRpRR5R@R3R RnRZRrRERRDR]RcRoRYRmRqR2R RR RfRRjRnR R3R5RRRiRReRmR2R RRnRdR RR R5R3RRcRmR2R RRnRR R R5R3RRmR2R RRnRR R5R3R RRmR2R RRnR$RRER R RfR4R5R3RReR#RDRmR2R RRdR`R RnRfRR R5R3RReR_RcRmR2R RR R RnRRXR RdR3R5RRRcRWRRmR2R RRLRRfRnR5R9R3R ReRJRmR2R RR^RRnR3RPR ROR]RmR2R R*n8N\>*Uutf-8b17a67e7d7eed2dca619bfafbbaf31c4b2d6dd5db9023f3b8ab483fdcbef61cf?7zXZ !t/u+] crv9w 37AvԨv֐qt-ȱ•۳%|tm@)E.L1 4{#w7Mb@eHBwC3 ']wEٮ_p/8H>$b5 d:6OxA8'p_.=kAΚzqo Nb{3*1;iȢvƳŏ@V':|!! U^BziK(x:txi/[*rmP@_kHS@[$fי .Bk}*SZ¦#Pj/a>)Y.k0Q"Y^;Le (aD!O f#IYk8IMLjcFPiS03.+@6^\4$ %d`5!~ˋg %?ӒIˍNXs3TP%(fJؼgK<HILd~r-\ea|6A@ ^`& ~ƿV 7ǮZryEZ.\v=R8q7ռBk8޹˝)rAvfLR,.|skA7dNDu}5թ2UQatZYy@a)>&#bǪW IUϾrm_*ɇ ppkŁR1 wvKTWcviZf,Eg>|# }b;f-HOmZ ^ztak)9[ofmP?|DbJyg1΍i4.q<`m ̉[&65k8=)U dV-x  7<1sɵv.w!;qB*ڭ683m^M4(u|C3v׷D¹HV]6DLUn :*\F1 o_) bЫϜ=lxPz?ꗞLd0 fGa:|c\Hu9`X0d&Ojk"h 03 >1 [c.B4 vBi[1$vtkNH^g- <x%ÔBwKsT4=h= AZk ,en(δ*Ap˟|:Ũ'KJ@$iS+?Ig+r'D[;ifk7GF InBf/pe-0 1TDο,NдR j|MOX*" "$efIQ7 VZXmH#BKoɆdL1"!5".X^ R^BE,fmL~ƌªG{SI{8]N z.[f?WkK<3oǗH~IȲ)jwSOO޾O*eS gpE}tØI Ϣ*z2uWQܱ4]এ;7R9kǛ74z6/7ҳ܉gdf W/$ Jۮ =ȕN/)/ w"=_-2эrޭUڒ8c$MmpODx@d+v4t-nyωˠ,2-\ҳpvѿ﨎,-n5[[4TR9z/{\E5es ^iC:dm H[{ܲ G;v H|s6#b g %̙pjb/unÑ"t̿,YQQ!P5U7uN.MohPɚSƐҔGI!")D6i:#3yr0#A=v4UE@z߷&}@ib*IlDk\8'pZ&jI,)Ɨӭ֎ n)bζ+dO)rb Y F3yf]@e#HM&9| oal{s^666R 9l)cxn2(W_&j!8wx* *mkĢlUcEBv|.DH7|,66>ćڽ3t>Ao>_ wV !,tZz 4vlmu!>\gTc+?ˮk kP3+F\='d=' raX)Rj~FD&j<90 FZ6Nc_4/|Eկv9a*C;-57St7<pͪ,jdx%e¤E!yPuno nZWNg +`Js. *4aq_܆JYM]\\km  <;D'sT3lVR`N]^ !P:/ )6[_7Ŭ¼=^î/ez~p4"x L+XP1;=k׸<:9Oe^þ8$N`tg=S>gBQ8kΐ 8ǒcX-g{,=L/XI2ÃFΌ/ 2"V%^eWX@7x G#+ ò{A6;TԻ[evxNsYO_F)~l&w/d-eɵ6v72:{'7y<quMh}\؄E"Q%$.*k4SVwÊ%(ju#s+.c `YiJ )\JC4.B\$Oi!Q~rqE(I|H6¼=z!ouKqXr} "8@盱VbK\Bf 7Of'[ʡ'N=fvgf(K{B!u- eZ:(QfJҜR<= [ Qp[ o2(FVmMai cun$%O5? .Q̀< T[ԟG0ZtD&/C`lR>g-,nHm/%}< |w }s5&:(oC_rebϞ}_zC8f<3 w$3DDzC1? ^G$f?DW~h X+#.Ƽ]KL @_`tWŀ[l U GmTA[~hbd~^K:-sNS@vVѣan1Hp%52Fζ"Ї/gGD+4dzӄF"МPjoaʶCvb<}U} ch?zQ.gg X1!4o" ͪZ?+Њ9brɮQ253uJNYfA`c IOҳH xzq!JSE{ e_'tu 1]InQFB~1UgVq_PlP.],훫.;k^+u0rt+Eqlb7:mbf2s|?v_Gm7ZY#u˫(/6{ԡLkE)a9,50w,)ןV z9Fr|NoW?U,'1abntRf{֝wx&~Zc)Y393[+&>,7U, I mne9u?*eVcH )04KeЖZT1HTY$g٦}-\@ǽ׶3簰ܠ@L?'lY(;qfMy:i8TZ扄!C;I2j'1 l CpӢC[O/YXxxy8+"{?҅h*QTd ѥ{vY̻/E:5x-e$WM Z/@Cm|>Zb%GxqjZ]7f3n S)T @oʶ_"&kzaSDJswQ]Z]dM(s(0-S9Zι^{']hež7EJm/.q)u6|!xme.~Lקvu86jϙt>WG@$g~Lp0SΞ_MGjR."U;cmF&@%`_f\L>d1|lh"K|Mb T_u]T瞲-*5)P?UwFW4bbmAQtR<3ARㅞޫ_yFZHe!hS)Ejg5jU?rQCFke+bl,\F&-^u:-1F{#@ % 1-أY148. WP(l~H1"ۜ},|'LآgG4 1'CEH P>F nVD K6ǏVG/[[[#%ܷˆskcߌߨ!E`֨M7> -|{]QGmHo@ЗC DtW*ŃaW'Kt _ Vs4fŷ3{r)qvDF}قs0"r'V$Fywz']`&ޥ^BxOa=Z0hz|6_ՙ{BCN]{Ӿ(DlidoݤMFAB)9|]dKEjBa@Y/"r rŐOk+O'dC}[Lu.5mtj@*h}"(2 s A3 4+Vkn4)?E4sZtWdMO%t/l,5 }mĦ #֛=?i{m IFS9k;M,d"+o,zN\A wb9QTpD=P}`G6*8J9ɭ;saJcs굏XW0SieA4cmh*%ga6+W<F/6ﰹ, ,ecWiOU$3ƃV@YG8lPFi&bcr$7u)ȈCӵMtR[:ar;Ai0?>0shB" iXuQL}ުCkNӈ_q}a'ضЩxh؆ODUMj[%'  McZ.צIZ:yX6ШИe90$ a4@fAfo)/;])/T,Zel%=H}j .iLӪn4Ts'+EZL*{9U(z)j7Z}ukܶ)?jMmͶ n_;\tV۩ 9Wv1:Z3&E- T^ھjGąA3z]/2Y z`o<\`+;$ӀOhuw&22|]ֶ0Xv0)XI긙}iQNfMAgrp:ֿo.@55;A?Rhϭà-ovP !0clGP,G]ςh,m >N^)}-iNWfDܥ nDĸ2gG^7|!$ǐzZIꓚ|G,qi_Gwm_jF~fhjp#3)|F@g0[7j[>!kU׼ZRԂ;UŻ|D]ںTm~RZ .6*LUQ5*s*A@=J"T>g>#%d;#} & YUړ1K$ mzB?6ZܠY:k;0R`8pQ/ wvryZ]ڂ%82P_zOO\HGϪ]3lch7/nꔄAA9!b (vA.nnE{ъOz صp(ouܢӶr*EkXZQ~$6(RwtUe#Q vaT>)nM}m$]TX:Al6p?é6#DsTJIlBj8aͶ:KQv^_9SPkO.mL7{SVe3[zʍq4BZ(ѷ6_3?f趉Fu&v/>e;k͟i4(rnno6)cD2? YqDY|߇*%9HafP<4Yt5'ؤg!-C;;ԏJXF$R,Ipe֢5Rst$Hhٚnz5 n]XL[@ӑ7[7ϱ Ь%"hcNԴ:E?V2AuNҲ0j" )yN ,KK"^ )Yd,^)7[l|/uX(3 !cY)m^ r S<.7P^ɶwxh?: .0E&FGQ63Mau*V+jlW}[NOĪ+͜]BT8;c8@mT։(]D_à4:}6h3Jc(3);."M12 _d 8Lޏ-byaڞw]M6DtQYGcO)vyD?0'Ǩ%3;Yŝξх&%$RXykd(CWBslʷ#6WY4H6 :_.h̥a fo}=x;{孂2F2w# ͈I=N|[w'`xefFⲞt@%Pn!W &LOzAǥ7Їrv&`m0 5Z-,E^hIE\=J1Q.7UJaCJh۠@qYBE qeUXʩ472*Z+%2o*r,fnS9wP9ywXbΊefL&:ϗ9`8Q] tk౼)&D,6sJ'ޖpO9=u;d'};N<PDE۷qw3a'=û:ҘCM +xs6dM m.Jg #ތNgYݛW y鿚,꿌Y;j怽7S\q}N&3 D&75OkS}? Sq;>tkaۥq#%V?֦Wt_&3tԌh'\U A:/lϕD後}I|:TٴMB Vxԫ ]u׭Uss08€K!da3W)D~]K4+sPAⓟ" 4̓wA?zagQ :(gsOCUkAsGSZ6}G\vLkY_w~{@e\>RZ9?=bnM$*K\#m|klNfVh"xM grb^BNYC"RUy4/j|) "X?Աt G\7҂)C}BEt<KV{B@gRT ah;Ne`u5 >."XQ''*"sig84F|Q,s %1G@^*8Q tTǎO*r Ӝ5ҍ`8/X_P:9rSrv?Nqw4&cKRobjP %ӹJhRi/^7X+VFiGH+_E&RJbHAVLhotۚN4|&h$H!÷DE4kq)2^(+C(m ]H*8k2-M%x`&MVl8)̝wn ~ݔڅĀr3$kX5C [*W D6;YsYەdpgjjΗKPZ>`CmTIXOYbwqš1tn> ]BZ41hf3rD&uuݎN@|le {Gρ*fCRURwh5]D]W慨%v+o v2-jV/f%GiJ:ZJ&4'%en8Q("J2Gc-.h$Q\2ɬk%AfP'{Bl)m5\p!j_W`nJ|~pewyו]e Bk: `Z5Qa?}곖(ǯ#X9"|-lzC̾~ERs:,$!<檪f `0vSPߨ _WZ"h(Q晴AHn2`  ͙۱0N~ !8$zE] y@[7V y+zU\0k˭7kBK,!w)tctp?ؤhPy2켼eYI^XzbGNc@9 po`NLneD:>x#wT=Qk!cݢ ^ek~aZМsX<*~}`镰`IG6@Hrq׷(<υ) (2WUq0] EoVV{,s*h;XzU43G|&m oE2Wa ŴŰr ~+:P_GdZkW3|k@lK$E_O;# uњ{-Q}Ps9vo5}L%]Ȧ&/zVhk$!N[ ex]wvF[gÕ/}a * ~%/US*Awx>Vbuс j8 U_ް0ߜ>-= or{G}1< 2#f5i-xYm } &!&_8#y"Ȝ[Hӑ䵫ibqG!24q8aV]0R&Wot}B)}DBq@R <`~lQҞ^{lKʱbxv-!: <9 Zvz3Smkw`U#'C',$'-Q'{_ etd>9x.T?y%G 3qF<75k is9."٫7/}$ˌiْH)8 iےjWKāfYAP1[l1,!U[sdL껔zJ]:b5T\ns]M(fHXFۄ;%~ެC?ʺ20`iw_~"nt^GHc^]JYap̢9 ֖ΆБQL/w!'d;PuEg<`xg-< q;=y™s8vRneu}DJ{h'lr3mI|,fv6j;rdY\qV 4.! 2h[3gjP -7zp{]X﹍OApw{_sc:3r 'L~ճq{2tЖ&3}0 6񷅦(׷0!wU`nSUUPzI'C R;nGWe;|C@.N^95[C_2Mr[Q[ a埈6F7W60b>|C:1#ʀq]ꅈ wGnGğKt~`"rNnGD+MY,;kjfM`!cޏa5q?őخ^)YJYĕ$Ȓuř,]t3u-hB3 $#E6܊Qc'*DJXËeJװczV :2oMfȜ>V7)xޙ [}֡"N= Sip+z4WS :q*Td So $g6`oJ_ѡFzG .VhNpERJŰ]4!u n#Z_B7)ꣅ֢a|XщbQB]kYX[4y$6rΤoE]#O可#0;c g%%&~zxc]٧fʽ&@nBƮp N'^&uw= 0'kJň(2kz&T.qK4x3SFsұ8Ơ ]-KXB#C5Uݭ \> 9 i#,\vUS3 tA^a!^TyeMeP.Hf# ` :)x]rSvD =:Doksruʵwsg`QUF+=ZGtldv8(R=iUDJv`AOܣ?Ga8O-T^<ٟ%r/>%9TFrjd^дp:G;]6,gw+F/X2 D$Mo?nWGU+]oO-wHåLWd]x?O%{K-@)C1NkةWKK*GLӓfȨo8z+K= }sQ.[u|RXl~2chb5~^vħ4[49@6/ֶaf'̩ &ȒGn1 }bܧb()XiQ} JtIP:Eg@7Ι'htѯ՞^}kpHZ%4 . XN=N'5[nFIvy7*>z6In>pt'-Q*Y8L$( 3B΀6ߡ;b0d2ps QLm D$wu* `뛤5/zX+Β4,&d|8Z :P +\n4SmEVbqliA1aJTGZ1sʗSb1$=mgN&DE3B RV&kIdeS?GŲ{.911Lj %CF̝iVa3a|CSqE4ŷiҽuMUkDml o21*&LoLIU ǃ }A!gاl>B,6co<\H{ My3;A`h95~%B99T]/H@m AV>t\g@bư鶄<Ȱ=mm5\8"|(&3Dtu;G%`BsjGYjI a7Zq1N,ur ?npuRۉ3kDLBf" ȪQE".2mx+B=H9憝bj0{| hondrf P44: ltB]*Or}AKE2ZmIЌo>aŵmsg*cm$_AD@K +l Km%~Xeޞ= Sjëc;ڝgu(( |4p ?1//(ӒAΊ@QwDk4rv8>ULp}Zb,?``GX G@96HjmyS"o2?;_*w$#jc4^Ɖ]=aOj9}V/~.0NlJ\z ~e$QeFZmbCuQc@a4䂜Eui&[Ho=DvMsc+}>Y|BA_z[jY-ݯ0Y9 epa)Nf<Ί?KϥR Jy@VEeBNfw觤.N*`'j Fp m>;EzZjVc&F%m_#7IV68ʷH4~ ,q-l$#$D|f^SWK_ tFn 9 h*;S\,*Y M K|^69>VX8hdvJt9klj{閚!`QP͠ Es>ǯgfEB/hP)D;fIrQf"c"2[71clb'Y8eCW6 #R길Q(a,O#W$ "rbKF,_=E9aVj:<#$pDv\D!N=ȯodeg*SEadA.8<$"p#{ A7Me*rS$vF?c-aG7:8eQ𼕽@0xx`B<9y}UiZco#J7.GԢd{yȥ+};_d Y1QλEqƈ F2zא}`}N,Fe !>;۵YXx_H;ބ'2. (hHٙ7frRcH}i2'QV~)U}ÊR]AO%O\rXȌrJ~$ 1/0! r.6O[4'GkL]qD 7w5‚l[W(&ܰq5GT&hz|/E.`˔5 盔6K(N~%u])a$OR3 \+p3?5DX.CEbw4D8M<Cι;0 KD`(_4TY(Ez-ͬk#Fz&+'d<WNbQ _$B>*gL'ec}KC7p%PѼbuD Z#f+h?21F&j =(:? 83ЅJHC٭UqJf8'[d7y(~Jщw Xg?v^#."ԕ!^$I3'u3.An;7贰*W/,u lYmp%{}BmX`i_:0g :iXˬ`-o}cW'2Y5͸%WL}Ϙ֯ 09[,H"'P-JP͋9Gl:PMf?N`|Pvׅ_R IcCA Ozm ?WC5I~5RӔӮys}G7!!^*3}S㶵GV<+qg@IJ nnGgSKH w 犭PQ-Cr*e %;"&ꏹ;?G:OZ~?rmֈ D!ky(ǯzx+Oq;ZTI!LcX :KdޞceJxl2J`VAID.腡hٳ,mN,L@-U2xG7zw__`tߖɕ{ ܣYv;r؛/h8 DXlz\t|#^=fY?,m/{O,S'2c2oJGÀjpN?:dbZ _FEؾDT"jGM;!0Cx#I )"Ӭ$B) Q~$Dy$1U=8C2Q)l/;?@O4Hނġ|"\Ϙpo͏략KQP(0kڅII>1:w;"]{#ż<TzᤞJr*;ƛMk!zUӽe: rx5**4#.PԲ%mU?ǫ0ԶP<ᨏdzu3*.uD*PhF.GB <߮ςӍ*@2B8t:wsf\4ЯˏKo\-CB[ysϹzPMR iJB-|?vY?ea1B.|yWrƝݤVbBKr&Iu/0B3 |"7VqY cvPɨ/'"O&jMK Y0,M7{`Tɟ)eI1a0-HТ[2 jp@9LHdټX%}wH  µwJv!nz#S%Qt:#?h ~KR%+lL <$ׅ,4kjx]=v8;Jt ?p6\؉z靹Hͩ[gnfG )#*hxT}+U?jZDec,b3U]$t eODl;:G?U傚*.!l} 9-zx`cѲuZj-dl5 @#+9gڧ3 , s~ 5:+FV$a/m*˴'fʔUtnÿ }{YjV*Є0<6/[bFQ)gu'QV# 󛬗^'fVK![-aW~a8nISZΒq‚nE[PG\iq2i z pDv{(n:Sݽ> 7צ?.sذ?0^h&@ݸR)TlG1Qӓ; GOjࢱ,NJYk TJ1zZD{8G%I>z,蘙@CT"!<~0RnYVurX+I9q{ľ{3;S5}+̴0{ /b7Iȱ>eϷ~) ~Q,#e`544=ƣ9yb6.#2& ex!,GZIZ80ĭm1 \4$Olsj^ @ՠr4Sl{Y1xIW_W7<BeWUibws͹h8IA9S9iDj-XKLҙC #T3N!t~]RQ]::X8EPo au]+n&0o3^KjWnhxGEH1@dHpq1*lCJ ŘA/N5PoyґZ邆餑 c8lkdȑ6LXT|v Y͸jz{Rapܔ FZw}+6³O-rc2{F:Ibux1 /ÓY#Q`kw:ٞ*(u4m DAi5|GvڅF4CxW;B jަ4?ryEr~Dү|jlrZ op*T>B+,O[zOjbUbq߅f` 8pǍdb:wq昳yo ً5^yމ[9|ЯR-fE}C}ୋ&1X1Ea9ə pB}/h*N.g|) JZ؁:as1Dw[;dW_2W>xgy^h'X1]s\g>z+ܦƓ$2_ h~ʼ{k`#mU"- j=Ӳ"H Cj+dwN(o"("2P]֚(aT")Cb)82$Vr,67̥5B o훃)إ2ߍcgY>^BҊkګS3kYsۧe/nkUaK`>tO؂=gWY4_TrB DPkJeKX%Kb#)m\1]vPM3Y:ٰMU\Lf4K4c;A ][o8uFmL&Usw4 ۖȀ0Z3)jƎ_bwc2^I+ٰ5Itk |iЛo qs9،H>T;8qFN֊z}M?$ӛk7#]BXc~?4^8 G!/  9!˯L<:1@~4nlc%fv939)*J4̪>I._X*7I @తUTx \)a|0 \wwe(4ϖΓY|ɧ|=W[&/-mʶ̔A$b.;H0Ֆ㺎vފ{c*G*23|H2a4~{/L6-ي{>[:CR2`*f)ls@$!Ys19ͭجYpV!fD].j޵|2)T=-eR/ݱ[/`yE!@.nntaqP&iߑw[ ybSF]"43Zΐ d9~V^ LdIRf񓝩1Du =N',Έx|^a]l$No8wq5&m45{f8څH lTQ誋 nd^K3q$Nq0Tx✴'yDify@(|e# ^E_]I%)xӱWrx(-bFRur0"]XyxuW 2\b0JѥQ^x0۔P)kdǭNkZne.J q#=6h+@IļSEE8uky84p/a$y K܌ 47K 3$6Cp0bEBfۇkbroCAg1_b(z:JQ%M?LG꫕2I 8_~jzS?n?=~)gPlXu z#~ %Ǘl7~Z0[*5$(Ѝ:gK~cw"1H=HO{Oђ:c>J'k?K3?v^K@(o# Oʭ[!TY|>T1"{ ^+a>dʮ%<ц-}wۚYCż%{-Ba[=?4 Y^H,AjuJ2++ )+΋ ֮G|+Eg@ʾr D0g4p#k:`aVGeJY oF- 5կ؈}NeWo&Zء ].6ewͲo0םRʇ+g~:"0U"lU^b9/#gؖ+&<燨i/pi}/q~]CJi8 :Wtfb`_C)_0ΠL{oT.t(1K|w6(-t$I}ntCRӁIFY^z7MNOiSljφp.z ?GPSl)!gb"؇թȐ*@N] 4º,A\Gr{>c@c|,gԦ7TcnKRʹH ëϛ_%+fu?JUGs^!ti{RB%AS,}r 33+s1ث*"l 1 ['Ze,D5-ǡ)v'm,Ot/K@ o~:ϲ푲CKkj&_((m礓@$jq׸Tp-Q#0O- ֚!%$s8ŲC6%{`7,21&>tF3Ξ86C9nPlQӇE9}n4pE; UE a4a)4Hk}{gp7t]|^iEΫtygG?i ѧ ?>!><%cFCwL"RketYШY-SN#iKIw"}}Fvg pc\bX$* ݚ!iOPeHDp^}t`&[ql$dۍ:ȯ-գgGu)aA*ά5y<'Lk,DA 4/"F@1+7c|O=@grnR6޼srI MVȜ`UA wu0jp|+dw_Luosx?>0|v?[!Α,GS Cm,k3+*J3/y,)oM4Ô/Щ,`Y8 +3#hݷP6n⥤~#q3 ӍIbQRIȫu!)\ +ZdŴ3Ep>l?Pi2ubY*d:̧]\- g_ˏGWh F/[Ś~jJf)9`C*lFۦ z^ӈpVm6_وxQš?m١n1CcQanæLxl8~͑r@9Xͦ}4qvB!`B'ŽPC 8#SX D)B2z'QIߕc{_:{ :M*`Jg|H|iG*u_'(Z0 5)w+1w/jNZ4;-}~XW|85ٞQ5[OTW[8LFn+GXpq8 R8rrx{qL1S0r0) "ѐS#Zb^+޵*:䀽l97XhpLvWfh "u>WTXoS lvV -i66" X.p뭢H@l)glKQiTsQlLܑ9Jy*ͨ[=m]C姚>=R;b W`Jg.W $?e裘GwA[0䢭cF%_[bKb@@ĻBx/Y?B #gnϘ\r.OփԘ,&~b EQXdɒiAQi/.\z* VþlPIaT!~86O`:g5>_zTojz\x!!Į͸riPJ秥{F胭_^xؽ'SmkFuj}ѡhhxU;)AZ,"*$erKJ E(%&~EcuwޠKsn%#U`/-ƬA=䠺J uN[;eF5ngih2J3hnb Ѝvzda-#._0\OYȰcIœ=zK`eKn N*{ĠmDqbb59!fVf8.(^0BKܸ7WwNcgh>dSf`ہՌj_4(˒(ڨ3VeUt >%:IǙi I:Kc}fZO1N8$irt2 b 5wkVfv4Bŭ+2b A6b"hUK`X+X(B!5~ W'\'F3f'.w OGϨwOHn,o_3}oFNv{xFw΋ѷs Ƈ#}{o#@9_Ѝ!s\Jl8^Nc 2 )$_",[m hU@fy&[1FÍ?M}UZ+,Q-v.qB.L Ai3YLF_JdW$) WԱyMN,HW!j˳N}XPd;Rg$+gmՃN@A\ Vn@uI9GsBasfKnnxF'l@=c^UXMBIu]yiC'xH;(l鼕k4ȽP紺]^ ahKVsK+:q/4 {!o? 4hG]@5Kё?BAg1HqGY&Gd8)2Įr$JJ@nG焌p}?eڏ+{w1@eQ [ORM5[Ib!̲uwhԒv% 8a'",Ɣ5,ZN[V+]sɇk8Ιpñ֯èyf&Z>uj搿0K]&=q!-_?n> (b2˲m떉Le#]b:t֍pT[D0W&J c/`~>T]AsVz3(-"DPɍ}I(WVPY3AؾcV40N "%ߞޤej~^ ^*5 |6JL E׏L kH/\M-~k=p6x'\?)jHK2(YlJ H#hI*FvT_"L)uuWnͶYuo[9LV -4ƺH}:{Pnw %\ؙn7]w-DR)*K&X4CdQM!|!9jdSU&u=Vy/Ф|9R T&7NJ&_(Kf4,{kKٲfOƳC_[xxx^X!ae ݆KjjM _vU"PO|uJt. ?0zELiqz4&t]`L*so_m*T|Qt*Eo꫟SnSar.XV>/E $>xm`j;ɿ/4*?ھL?nyPaקbm–.\t>DzT59-?lcWFKdW"][$^; _;maZ$nl$E Ht<4˭c64,/^RW  53>&̐fLt&pŻνX=0)m7?Twu *_R@")DҠDhf%FA U?H ;4r ]RC+KD QA -@mW|@9nН NB>tSBDʫP\p2mFI&ʁ)$ mVʶ2oυYE̝o}KT\X['=fڍ%,`ǫyhZ75rn+,߰К:up sđXK%9UެTZS<2]~>v1l)mUȞWٮ(C T>7,6^8ڊ L},>Oѿ5WKGfuM(TYm 8QGK4T8 ;mĵI>u 2 DZ.0b{OQD_B F˴~k-IDZ5C{/Ǖ-|[vMWe((BXf;qgfb/ dP.ЫYagk.E @Il- ;̋bk ӟ㇘J=`1Okے<-RN 韖gSQP01_#d#\%i\:%/G˸@Fg]#ZsZ u, NRu!ׄ+`z]/aC|̺-ٯ3'F,PJq1Ҁ㠁tqi&GK2 :''_yv'L8(TLuS7q(O"H-MmA~o"4 Y GSH%BWEv4 1+A?1#*q)y-~)$dXfIЅm]AΎ&wg*Wf >QEl6́j+ʨ#؈qȧ_hngZ8#B>3VE\¼_Ls7t.ha7z{7E#\{m<$|j궫fj`wb:/e9^+EҼu ~mjb1EsY"1*haۊ 0 hC 00:qu_oUՈ}q*IEB@Mk^*ɋE?mҒcc~Z؄);^ 8{}nUĄ!w؊|4f>M86%- iWߛ Kˋv|`>/tH4ou k<6LwU0YoPGY~zeR)r(oH@A dh`I.]Q5>^L d)3֎NR"-hfsԾ2 D,)X"Ea YpxMMCJl;g(Y>9<ŠŒ)[Cr]xẃY=|d6 / p[<Ք},1s!W6~; s[Ae/p: ڈ@Re^qfH]KCeF 4q- BX+RF|5Q_q#E*f5=@PۑL’BqHH)&g('<3_I'bUEn657bp z'n-{h1PY^?[º1⠤R* .rv5)řY~M>B:F߉u [AV5Cae܆nLv\1%ѶSR H'׺xsט <%n3&*Fi]$Tڣ~6K&\3 ggon?nڨgr;Rr2ʨEn.OƜD%+gaKeToUZnp,I-~,QLJwFs'*LD#C|ɍby'|fۍh%iY")6EޝN%LMFx9ZP$3tV1t! iEۡ%࠱Pd0mjʬ.HY#zĶ̵6,_l|o B&ICR) F' 0oGfR.PRu 28ϾERRE]UF*d{ma-YK.H%샃1ʮAa)HRH7H~Opt9y@qFZtf?&0i!aNXAbD C`6bvc%)mEuRx w+c 2Fr/үA yv>+iLnʪU79b6KR ש]?R qP]a7?Empy}#K؈u@yO`;X֒l OP.*"kΰJik超|RFdhU"=м5)B0s_qM@] AF&k?1jĻ[{8qg[Nhpžhut诳W{K؇.#jC4Uݑqnb V[7[piLYZbپzho<.)1vᛩleydw- iW5lϹqL} #w!g]"Ź.}<#?"BT4'J0?wtQp@$L_N C{񋐢PXZɢ4-k%=w/x؞DXGJ3.s;.]tFJCzk@ ݀_NpV5Hj\K.c]֞9$ Y#xö)֦>YT{ ]m7bTOXnʆkf⹚C͝}&jh8%+C@E|uЖU #4/z~ ͞ٽx#/2ީT-2\@7-ŪGXYu3N.[#%d]OF'9eNH @L%6L\c?ƁO"r̍-!rt$ o4_Ͱ4~8mLl0>uo`@n|4P.%2@7<@t60̇@)Q}M5K|YHQsFr` 8#kyeS`SWT?#!$&Wp^)`>.̥EQcמl~W7 d*8F3BctLb䭶pK$.W "b[ޖu7\6beiXe8a!s`b2w|_ ,9tŸce2"7}리rZ-V% u#\`s[BuBaGڵF5m6ùlUkR?*얯*z>&<|d_uw`+Ka:lhx/inxZ6⊱g=a{VVm(u<0ᯂ}E>¤(]l;(Q^PY-zv(Qćjܥ[W=O+5ͲBPl7{҉WSҿ?Ѷd6Yl}\ьEY1ƬCta6lmNEqkojϣ&EZ$8b縌#'7fl-w^sd2|؎h)У@:-"= 1]N[Z7qR2f]rU(dȝyO3z3dĂ<>&ڋޯ"J5z~KЏBapwj'SR  ,ߞ6+]] hU*P1.u9wG;/+Lv ahJr 8f媊O8>!2f-C(GKu)g . VXt@~38欣}h3cdϹځU&&͍C!j}O&nt*(P`A S.h1,GgRiDC R+~6>H^NNB/tB C:7p0xl]J\ jfۮgq'2'N0*Q?8H5tNӈ~oV&w̰o{hsOT @,WƣGUsXK״ ڧT'k@z-+kQ׈K?)sZwfmh ?r$e=tmFx!qpr" Ű HcZ}I'>2Ֆ&.y˛ZG`?.V|>s87k"348j_ ~qaÉMq|܀ƭ/qsKE>I‡BmQ~^co¨ߕ}i˨ bOX=I'|`!A!б] CBcw1{ͤi',irrCBD=Xy8Ũ\*{а>h\FvT & q;K*WId-Upy@y u֨ٙھrOCJL *≕Ⱥ/!$ָK*rå oKR*Xf[nX~vƘpSzUpz10'f<#xM1uL m3B;A$X\! BH읡GUgЯ\oиg J{r`4QHh S0TXnl4~](PcsywAW`p%hPJC~dLɭ7I.9Јp(OU˒tz>wQ(WՑ/n%d݇ cC ٽoZъrncnx6/ ,6YR6҈.i? 4aW&=;KgR :,¾.+;[+njb؎~tЄиiB ={Uj&P=:ǰK붚h&?Zmxdo@5X0эp0>as6ȡVP[PZ+cLkՀzO0X5"|Lu p*+2%ST56>B[s 7Zo~o˗ՋXQ2wJj(LɊec>&y<y೸ N瀚 BoWH2g -ϲ0'uM&OS0]Wo2Uz [N-0`- ek ygxa]5/JxWwQ24tP@AF;rϙ1;dY(P4zc@JcskQor;7 :f(]VUC7 u<C{nbVTC.츀Cp\Dbjoi p-1*RkO/@pڝJ(#3U}t4?ruzO@(F:ܛV5wH?!y2U1=qt F,.noSv)Xje6zò)2qsozZ`/\Iӟpb- a7ǜ0$sEA/URIſu,moՖ!'ԀC0de0>|#X!qoV0;Pb}q2 ᷴIz™hJSHxKdTH#LdO~.dyKp+E4'0į=nXҶRi +8N=P>M]yh l,um>v3YIg2u(H8!(6}o[ꬂdb0.u y=Zb.[J-7 Zի! ϩe]q`jF:2^-ĩUU3Pe~Va>3]2PiQ쐮Yy"3+!9A6fu9c&Y6gcm1fZf“hcTgCE} ܻ}yќq4#.;?ǸoKmmEs)= +o6qe1}-:`)jQD/XV!h"]\@֧B SiahpI:Oq,tk.@8~0y@SauQP9Sv$za m+ Y >`#UF<^(3B ҚM.xk:-v|Gf4xSmQXT4<+౐@fz!`oKG `t rd?م`}O(=֤͵OV&EB,í+f'P8,pGjxA;sOdn; n`~|)6a'A 8uz&+#KmtdG_#Pbj/G>8uv@2@'OMɝ4/Jt yimBtt&ME&zo'eg@1Y@/ӒE*8iXRGYs2|t([23RR0hv Ӹ{!ybΌ|}~BZ)GfB?6=ͧYymUMfX$[Pv?IrP tJC&jr3ķ莲V} xvܾl7Fj AubX["OAXd[gғD%\ b@X4y>ёg`6%[}!lKx{ohz!d a[*`-xm Xz[h9V玒-PbZE+";Qq!-(xWLz\~|Z[j= -l7aAKFv+J4:qjv3u; &wOf\-TG+T bQ9o&.aW/N}be䤴Cڀ`40 5!$qM;l{--㰹A ~9yS-9_7|.l̸Q%NQ-ZT"Ff8V$&I`4z|YZwii8q̠[KKbH0$Zџt^B2m5I46NI鲂lrgKigѤ7#Ҵva0h_E7݂r3 <~jz/g1zwEɂ&M΀,|r<1?09յ>PQpm 3FVf)ȣϯu&[q<TN*6;g)4>#9U,3;1QnsᴻlQ U޾nDL P%c8ԴfWe[;pMD8DcV|쮔3 Q_d'sl-^UU{܆t=pQ -}; "Bj}ݮֱZ?`m1B-"i_ ;_o!g-H)DiLAXgS:m<)܅LgEb 5ѥ`Ęw=j64H۸dy lՏ yjm2 A/@fGoYTHh]GhukpFoai$H@zQ X'*VUw] uyhף~#Fj&.tC~ +>_ D:|7V yY^u. Xo˵ x'0Dj#p^}\+xQx!K1Wѡ3NM> 1wz<`pqxVRFi6L B"n BA8z?bRS 0RI,ޏ*GPTMt^k>]_4sً#-ōJEO".2uLff3g+QWP<U,PT9($Q>9O#ݟO`qRZ}ہb!!|Evϔ2 kYRG`!zO@޵ݛTTVZJIC2Oܕ$SjG.Rp_I E#e.<Y+T&zGa9E,](lW 21FMvu ~ĵ[5ɮ;iǭ 9;HyuS`٨VCi_[W!ɇyiK`&M H|su[>wa`n v*/'b&f.d@_sBbaAi^$9Gffw5^U,yRGǕ[2hjŘv@I%_QRhզis=nzTf>!`AlNGpvyNKDU75[J^LSYQ,\c ^&5Ż6J2YGFpx)dmtQC.мQ!S2|my 1>p{vX/eʸ!ﵰGLj&ЖrgG*0d{2u.ay/4X<\efW^%1]oRG;Q߯t?CS 1e鞀[Rclu9;_9NT,0&J}66|*ͷQtm@i%WuJMyu~8f+.tͥ*'_N01  p"k[jѠ&[|dk f/<\d舠T p=~b@$7.~K/$bz;htCÕ!l卞1K_BNCZn9hUX~]*q[s5_g]',`<"d(>lߛY!o:VJlP'g !˹ӉFZw]տG:34:8wPC_SX2 !`HP/R6 E=7.r{8[=YV3RusET;!kMO R Qؑ)&F,27goncWrHYJ=%:3ϗLH}+"3UCG?Baʥv)o}4`HΖh?/Q1=j1fP|%mf޳"Akkf.y" q`y grюyy65IFx5pd<{S #0M,4fVX.&N 9WBBcN"^,\0Dft+D1zoSJ`h+0iG|LTս"'h7mlj7َ|g[>GkdFRYƛбsd8 8б`lRʮ ہw5I"6drMc.*8ʺHMȸ@Е 2\Mbb-B$wpf{7Sq/A}K#̀;$&zgŰԳnQƴaO]|k.z{ZԡfT9&5knÆ&eA06~ K4ey15l+'uJ*[7N\`v#-#nZUO70ӹL D ̰`Ly NY9ȭJݡ1F/PMiq4mGTGzlo&SHA=o4uT/gWDg4V-y4[] GUvvB1xfF\ߗUvBzOvf&Oj<>:3WVU-[- [ vMuJ'&k+|O*ZJ4')@HJfi0|֑M'WsQ.G.q"To껔.605R;.FezN L ګEe%KYwI|Ic'dI5Dpei䫊Y2r Po צX[&m7?4>F/8c2atRl`"q\nT䓸I2.P9-fNߑ"{qB!&>BI_bQRW[3aOoe@g0*l/d$b6;vOhʊTDS>Q9@qZ1CzOԐ{h>)[vh'ioB=?nr&k(G=(.JZ%F7VfS4`E zz&Eਲ਼oZ!;G+8}X 7<>Qz[Hf܍ɫEgİZEL)|Dat>_ؖ98AW0 "`O;FCh E$UyL-fˑЖԠ d5UJc8'rUqŝp(cSEDҷ&W^8%4t5hAmICf}x0D x_]Frvvaa;0U48 L d59i!8nQfg _˜96mox#-a:,fuYf\ Mhs&x7QF[˖+WQ^j׮isȠ_}RV</HX'4'eHT#3w? 9hg]G^:BoDgrmR,k"e(:cͅ ʷ} ĭz'oRa24&[C_ B-#AI;¸ ^|Fiy3bKcdZdHP'5&!UakkBm*BB+Q0Jc&=;螎Z$; L|4|΅39q-Ii ?$XMRޫװٵw/ؗBM~9_^`%Ւ 5ޛad$;s}vsWD}S[sϐ8c5,R)9rH1m.{^$nB};>dza")&e/I. `p;}Y5>o[)wGܺX˘}@Ol*VWG: ml(:N ѐ+@YԪukH@՘m_`uogBc_oF5dq|P>J,˝~e{ !)3mEȲ&VsUXdq\SZa-!癝7KdrbM 'LɝPoWS ΣI`#+E^<nKye6@j'M6rH 0ҮcpSiA5Zc] 6Mp' o?|aYηs/TէWFirG.7Qn ]o  g+nwik"Ğj|CS5o-X|bX [~<䌜L4Dbpۧ!k2gd&`Ų1Px!n Ca $h22NCX9' AZR RjMz FY-)E&4%cM)8 "~V upj{S/F:]`ҦPD%d@g˟WHJJ2 v̋+&=ja$$ Hq+2t_V;t#1:9|TAm:~4N((noj)=9- "l gԳP -G``QwϮtQaLgeV8yL865db;P5^ͥr, D"K ڣ͎?G<'6aIGgQd!Fqy*ivKl7LMg )q%0(WX$per>|6 ?R|2SO'6S966#ߑZ-JiNK7'Xni5vH^ZD17Z_ͿӱɊMv&p^!eniGY5M5KlPhw0דeT#)xŐ ƀK`Dlx>)| / d̾G™f 94H~g}ruciq1*kR#=jBx-|4[qt'&&Yʮ+HQ$gZva4plf_u%Z nлuD{:n^DF8liV9{tiSJ$`<>MN퀕ARPM$lu t`#3\hSw"jQCpzyUW@@%wO*E]NeD ]U:}!? |J,t f+[YǃW \E,1"x*.KABJ/'c{k((7-> H0fmȷO _~>O *XJetad袼\ 9X͒k|@ ĉ*Tʬ:Ufv8.o9ṩp+VuZ-6@rQ-3fSIyF9 &@,(){,k˷l_*ߦ(XsH05 5<˟Î_2\JƋiVsjYiqh?X1%!yu<83y߂uX._b;Pss?H ֞0R %ɸv JJ;?1] p5_A2 zJW`Pfod( v@ި7T_IMG{fi~H_S_>j85_ެaG㱙G Gk3(Xno?rNn7-}k]5{ta|cγ}q`rt|Xvtc~2Hk- Կ+ףWbB XdvSO.*`X?<ڑu`z54[*(X jC6O谮h*. v'V$nt[%%flGvw]\\ӚKhVZӾk ElI;a_c`sL~X}hBl璓X'n/B :_.BglcI=7fTh_,$<pOCiHP<L7Ԇcwv_5GJ oY_s!QoC}};|\ue zЕy=ٌuqS6UZsXGHhT']"]r_ *8s/2>|١q4SArk<"b]-I@-BW>w&?9l/LO5tv-Gn0G`΁A+XܴѰ) hOZoc( 4: \U# +kJ#;>щU캧%Dxn Lw8ԓkv4aFX2]Q]A@R+g@hWr|fs C6nޯtJ@2V^^8nc4ϹP*䳼7h`wɬ̡Q+s+I2x{ tJ-~Tlz-dh/)1aY_~/zV`vW8+ZHBl@Ȉ} .< hxC04v3Z^A kԣ;Vd!h C\Y1Ŧonٗ$۽/)PFu5Q pVt az7+XAVQ _izB\r} 2ߖkXZҾ-ihc"[Z"cޒS<>?5 D2#Yd4JO^yHngKl8H 1!)Un?FSG(3Aۈjn;..[_!ĘE`ӝGl_DFv ʥZٴ3ϒC> i!⹺uK mXkz4+ poy?1 }K = !IcX[ @B]cL瞃eջOԒMP_A[2BD3](_tog~U: m4"];>՚W1cG0+L`" 3Dr[p8o;-LPAdߗz5Oz=w#}x_T`FvQ?g{F7[{ *ؚ-!>,ȗqqd؇M-2Jao(r='::kJ63оL3X6 {7e)jגMQ> ܃H%Gylu#){^\7:xYU* ѡ X̲|H6Z :RԙcwL * 48I7T%0!."%uؖdxqsEK栧\N0Q2:.GżMڒ;F=A-0XȠ%3Eiݛ-sxF(m(;ՠE =ߝHd^w;U tT ޫFQI-,>`ehYIf:)F.P,#q9!,--v2$=OANGE= PA( _!kFc˵%9àoIĦBl:[q~}Ȇ9Kyԑٵ{wRSm/69!ah@D@Ѝ<"@!(1.X:ȎVh]h]ay|,D& G(G ?L -#GyaVr%?*1SKONdV8[j^(YT!4*S~=6us*s.L_$I;+QQt!I|6u8laA0#us}y/&=ޡ$ȭ>1]۴y=l\vu\GwjL$F!o_-r8I!o0ڪ[mr|kA-9@; N32FYG `EsZ9V IKs #pRQfj隠+=դU6616sV gofS]L$=ԗC44fsQuHך%!|j6%vHkZzwȶxY.9O{(+JO&#]DWІ#]aS..+eE*og:hGrq+dvt%00tq5e%Ք&Iѡco){5|O׍,=@@@b+2FIՒ;xv+#l|!:զ={0UtnL9v.Oq?i! ٦Z{J$D]Ol+ yi_x!y?#}bsv$!+KorəR/ KTq)Թ{_-=ZI`K~̮i-+DnGA 1\hHj_W Fu1܅ QhZ2Ø[uvgԒ֙MDs?2hwp{ `^sۢJT ] M* IXj2=7 $rfHynUmă=[ jS|pVN< S8d{UE b}Eε iV8Cf.rPrB #f~ B% Uo(d?r/ cejEG0Uf\H/?vbt;;W!7-b8iUL dmyhtQ/m\>1.Ng/>?y 47_Wl*Lky VjB30ѷxĴv%ǟh;1̘;֭dn( &mHuU";l8Uo+Q$xmH+[9Ĝ2ahynؠ)Po`T>k<#U_Ò9V`p7r'7 ں9g"V;Z f{x`O[m?g-%0-a熛βQ3 '=* ب5VxOCSBn#i؝_֍ "|:Vg<6C 1,)[ m7tGG`ߠnxpL]0m(ib{ZL^(!xDToZbW Σ\1|gwVbeʇ*;ԗN JFepDd^ü}ԅ*ksv>{zLp wٗ#TJFEYK"mUv}.[./,:KO O`(n.}^ƍ(GW$}*0Z~6QD㕵n.z5SHI1b Dˍz09#5/hu\9mqsPcPm *:өE~A qzSaxjI̢0uQ8Cؙ+}ݶ EqF]g-]G;cӬ#eo[n\ y$ .?0JbݣJL{"Q}ʶkyb).O_0[r!50?DIw;3ɔ ~b>Hɱp`RANP5vpo,hQF^Hɺ+0}ua6{[6nXAΤq=8)߽l6H .Y6ZlϟSW\+y,s`*QlP~tt)Qv̵D$of bmgUlh'sq+,}16$D_zӍ246YKnLQ@v{Hx_F Y'|Wf -Om_?ZG;ov^ bA=;o+m,%捝TU%7gh"I3YuEZQPTݽ ylӑ=fu*^,k^wQ-jet6Suf)6~˙s9!M10~).!i4c?g\?-O=H ~D!?s?R8 00+E6@q64Wf6~МF#X.]}J9JTA] #,jrrj僐 V*/62E6zO$^Z靂C6%;ANaKDe"x_\FNr["^\9YvQjJkg\r6~}6oLD9 nخ[{7Ϭz3LPbcv&haB\=cGJZRav4}f7G 2I%jl{#{b(l,o^,&b5 pϛV>u$:Ǘ5Nݚ,xyG"3A_T_"'R>@joN;>*Uf$N@+8NȺ濿SN).KlW`h١cvvf̄Kݬş4`FxI˦ @+qmUkTr7/MPR:g( s~p>+Qp(Mwqq3mk#P䭶^yBsvصNOEev=(U^'j?|6/ů–Z1n@(f-z}.Bt˿ ̢ (ܗGݚx]6bOQp6v\/K$ fs=>kŪ},yƱq?#\qDyd3Ҽl(T,rb̀w"Q%3Y+.\ZdbPf/ӗ`y :e~Zغk=3 ͽTA'0ANQk;yJMAHKQp`V9gi]js(Msn$WC݋Z iAw[LM: n06EHc]MC}or۶/EzwN~Jʑ`=Z{)CQ+Uઈɼ(l%?0}Ed&0>?kBv?Q FIrm0c)墤e?=$w>kiz >0f'^r/Wn "*J 21qW0Yfd]T4ptE|Y%/Am/k~@Ta$Uco|0hi,\¥R2C v^)Novdϊ"Hx(agNp˥L qb0T5rV-no:tԬ^Έ rf%6_~Hf됨¦}̖8jsdZ^! im6z4a6A\;5s;d5oCˆ7]zCRXpjiq1DeCyAMA ,Ӽ!o;onboZF8]ףuc!?uSӽQI*P1ms3e`rMt P$[7[L'1- *"3L:/( K!(R0^wSz8}rtaBx쎙9gQ_X}ؒ=S4>3U:[%7#ɻu֌ɑ5Voe/'g tI­+7]fɆ4k>Wj[j~4K#l<.Hcl fPf(S`!`2 :26Y*S\W<ݔZ"`T#l?&˘X+H `F=-[Mc.!Sl,H>2BP w\|RL/<}yqg (IV\.ܪ)zt[Ƽn_@uZ?'*eVQ7#ؐ1Md݋z3>wG.lcNfʁpQVp8$O, W qxKdZKEJBIK5ШZDROuIS0ۻ3ߕA}T93qaC(^ڤ5L|ZLGJS@6l8e(50u:'#v@DzN'Ru%vP)]1^pMѵaNɢ&7_tC8ƕӷh09iK y.1{70lkVʙG S;>z4n]uK"U;7_pnHř eeOP%Qg&(`l$[+ӂ^ʢ4G6OhtyWz|1[8RUNEP)K{ W~<.|?桨;:9j@~trV?v \d/2`#%LTg3 .lBf\As<~0X177:"Ϩx*Pbmp*K;qJ?$7XeZ$WC>V|UZ0qRǿ$?fc&IAu fڝ<"R[n˫"/ 61 ? IKe:!6ȴ]oSd#>41?UxjFFԭo,:τdkŸP|ȥpP+8=rK1aWSPKSD$1ȬIFARhZ92 NoSeո %ipZlW%js1)X(˥@A; dӠ抽L]'1hɨpZ)# f!hɲpD\)/5 [ލB6jK9hiAUG L^KS,rhr\Z335+'&L:,kw4A>gĿ9 ;u!,Bto,,b`_A”Ԝױ[̠IF^CacA|-<^#]mM8}i}:%B/m4OE'̏W$#sdOxea )/QH|ǰ)@1}Dg'5k1i,sL`V:zY i-XRA$ p;\`+ߐEqSo% x'|462y*27} 5ZssnfXm`8 :+lߧ)v I>RőLk)d=l5ѳ=@rƒ T^rdCX9.AL4 CƆ DT|i%MAezѥ 7%6~%W()V=0`0mm5S#!.@Ou#Z)SE h֡^0 6c@C^\>f~aaǁː;jU[f6(O쳿rMBt-qIE!uxN \EbTN}'~6J!lTOOZ  Q֦EX_5 ˍIagc[`:з&o|vG6æWd]=n%7g:_61eAl.)}JfȩޖmTmkma9]g9| GUE4|T[<vF&v{*;XB.% 88),gk]JV/ĦnB\#S ;S5uK%Қ,ʸ "E^2X9gnel| q?mg8ƻO"YO9/hIݤk80f,B!R- $8 =UJ~\rS~89Ӿpo .Q Ѹ쐵'.zv{ܥ E_ʏ L\5[8wmz3`=S S4:֔K$'OEe}˟`j)jRKLkb 9f *KL LB_H|)B#Yȅ;[DhE´]Щxzgfw']6@Bu* a"y..x< ڡ,EB"Ҕ^-|c괙'kL >z6pâ^@Lt3cL~F:Hu]̜ũ:k34Wtdt=3Bee H7-R+nSgkĠ?MKVS噧OC7u0&ǯCS, Vq]%C>+ޓJWto2x#  љ\[7Ƹ,H-k<&&|Fjw&؟τQ^t̺i95 FK7qQ{иe|ÝUQ䉲\ <WGtTcdLːQ} cӗoslzOS=iȸ#L%`{~ wqJVX|0)ȣA&9Nm 4*+ް i -BRH *EֽemH; Noq೒#NJR-RW«Gs5(ɸA)}yHGgp{v:. 1ɜ4ݖt&n\t_IUw1&y8?^jLt<c2)6S`gҰuBҫm+V7wW|}`5m x]-ezY9.V/WPOUz:Я)HT8g ZqW r//B3L{2W +"ZL# K":+Ub HcDx 0eDG] k|8|35Q~z$EqeJ\Jze *:'(($xPY ۨ.I-lo:r\)z8Lغ|!=xm3f:(r243i 6Ϻo;TYqWFXߪBࠌiD$"/Lʞo@ۖb"m#2T*gIYGOD!5ytsznK.@V O΍I_DQJ#F(x [ ׏)K֪5[6F校)\rR۞4زF;aהkrT~2P sN;aTtg.QY u O Mb9.S V]G bԸ !mE(}_$nQ>)=Fxo¤L<,ym؆Ȋ#QXu'9e g*{ЉL@$nZB Qѩj <:azv[ӟgxuf" r0⣝9^Ľ&zց t,m('Qʨz}بHoS 6zP€i1tC +awVrHNLq)̺| p`EsϓasqC^}Ƽo ƗA7ϠBQ|,l:))+  .9ʘWsCrO4 ~|nwmsW\֭;nc`G?ːC˰վAb$J6aW |XhzU_}xb1] ƅ՝ ?i f@c¶peG9 GӵmV)Aua$Ӧy7 c{WGТ.N`[ǙX SϹtN0~EȑN~-~73͜*VgTـO0-7Wh@Q+P{ufaM3bGU$)_8r Xa,T D*a}hlUn]j+@hX= ;1֟(hEزZ>5AYsz7ema+A!Ԁa~vd4sl^F7LˣMex|F{fpo%.):kczOzل oߩE>(]""S1+m;gD&GPg P-<+g 6H_"kP^}"eeMXM'ezɁSjUU\-,`Ddz' js݀Xgʳ\>@Ԫ0[=iiNK/9F.2Xڃl2eςN6˳4ppu!+Fҋɶ9vp"(=dn5>6k4!"u|vJ vI 4-NbF ܁z"=>yN.9tF)]͈kr+7ȡbz]z7,~ T9$ ?rVAs4w_lQ7r 橻[asmHB񳘖z]bUu.{IvBϭ< XOԛ=tdEtD)J`_(cݟ$BH qNu6Lඃ`G`T$r<A`4~(]ΞCԤ\O,M8fCR_N[A= .SO!em籠 q dA<)fD7WWF5)8|5dTQU}9<4`3El@L(- i)6]fc;]Hǿ5;bNMYtFyB8Uz9lMsĺb嬞pD˾,{jRƣȌiU.;s ~ NVJ47/H߉qy@?|%&.cC3d'>7Ӆ$ e@9NxeK0`yqgtA AQ*wJ .['1xVѾ$U\n]kXJT=AR3@/Ag [$HHBpy̸NჶBOCPQG"Ȍw&Ɲfuy߭dzpl͟N cM㦴P@=C]':B1bhRiX:Vm=IPɚ~UT59ac9S8\wE:K"Y'ˑ3mBCsz7+lS=F>ZgkDfK_35/*^r ziGjcܼVZS;WKGd5#ޯh_8x\d2Rf0[ިb9޾SlO, 2DGY=<7j=&Q_װ6xHyo'l38tkplN*zr"k{NJYx98{D rW:PI/>Xħ^NKhqB2eŚ=B U*Mͳ[ESaBT5>وSpwz3oxa F`ـCE(%7"!`ʢ)b~I7{TԄWFeV<1][5 3!$T L#ЕہvRfkdG \c79~ܻ7iI7yaI=)ʥֻ#ɵSkl# ;H~QQ'v/kը_rDv-mI lžظmKM=X]AS4.7[[$_j݌@YNK}Q/K@ l+Fg#=O KJI*T2Qxv)6|aᒮ-(LNUJU嚥R@T@kPV:}޺4Uo=3E rUsuŗ-^g=DE`߄k- ߂V-a{) $`{"e()JF*F%|wMyFo ҕEn4ʴ7aBwJ;c,ķ"%Je >;Pj)5o_z4ݫ ,LmWG@F{T*Sܲߚ22~ž7aߠ.:]3$#[vmPٰPj4F8+^?VM0(E/'M=1 5> }Ф *vpf':M9+®_@86]N!7s^tD& Us J%;ߤoϓ]{,A<ߣa5Et4S?0Zb1X#w1|&J>N~-?\ş>ܖӔwabKxN<[Vt.v$$ A_ Eƻo*KϣAEhZĐ]0F3; <^ǔ7}O -:mtCgb.lH!VSyҐǥQppV DT|N0Նn)Wqg$9 sB.BR2X1S ?8tf{&ǞM4>f.B*$6dDxOCbS F?kq{ hOxX'SQvj~_cj;.Ht̅GbI˩J;,erYAA9<$d=Я슺5q|"LO'bk$PαjDPuXT?ZV퇆.5cf$h'Fuİ;ɮeUvSy-Skጔ-"}`ga%dd\*ۥ9SĞO괕)Vym`\7㽫X2S1v(d& o9[ /T3o]Q8+D;NW%S¨m'h.0AiIĘǞu%Lb~T;A =֢awq}|[K/ٴ%[rm[=/1z1(QLA+IJu`(Oģ|[xWr%+.ܞ3s\;p\^1XV qk*:mUh-"!+^Q%\K&ݕͽZ]cm!}0i<f(]/:xwcNh 豦#@^)* ם,$j({`{l}oڨ{eR~Z8jF>|u(gBa7DK怒GC%4x+V&ĎL-lYp5٣ }JA(IǮMsa-H&(8K~ffUQR@6Lvl=W#VC|^LKT(M[ŸՏsnGre,ܶ1iHި'+P=DZki4].aXy"/uP ږ.*sN&]4JnóMgbQ=Ձ )/}4Bk d)-uBVr ,F;˾h m=TKexO%o<2L ;_ƨ3#5&(@b|BJ6*Q:5<hдZ|à7 S/l)\t @=.e\YKgBk͕8 $aOCQԅj @xgpGņ!"σ #pfAa ik:bID|Yd"ӧ\g{=Q8_dSomz[OR`Ė]A<0-em*%ƨڔ xjlO1fK#k.zm$ȫcNbŰ 9\-Ds0M-<=h̶̝Z4H~3_{zj7KzM?+7tO -Cc7*ȯ{fkܓ?8Sv("HOu#eUS~JQC~NZ3&G{7es37V6Z&:, dPvML6ڳgM81rGy^eYu>)CpHy[vOG>p?G3 ZoNPrO=wSiRSUB"Ւvd*y*.%Ws0lr\sydai&Cu]fcs-]煂En!WՁ}#f4ct˜va1tG&&UP DWQhBvĥs=L隞Ur]"%=Ak4i]yE- @-!#FMUfR q҈rݡlS]@UrHpyw -2c8V^&Gy~U fmť!k]yÌ`y]>-_ <;` { p멩sJ =7r9ўUpjl)I*N^F$DraYRf䳾i~t5ݔk=8I0*; Pck ʣ8fq.%H2[Osa#M\HɎaeޢCWHAzU[d%k  |`Hq֙?a䕍WxR8 F bc,/N_34 qQ!)Q؝ 3&"\yXIVgLPЛID1WϞ;mUm(h$se Zl6UHJ3U#x 劖<I9S=Mš6XLbv=<4ثH.nR̈́_:TʑF.ZĄAG^ʎgĂW`4]& ylÄ)i,m`\_6$*WFF\T*\C* pߢdwoYpʮj|^q ,v Wwq sh.ğg*zg/NX*TԌr-Dpw'7]t9L5b&ummS$OrI$e(+y'C%$' r)SiLq;RN'ҦcNϙj CӽѡNyxH{ran X8]ڎچwN(,9T(AҦ/)3ԵT̓&@;Y;<-H:1d|?#24Od+jq[toX1{AqJtO8B;()Pk}NS08FB1יj~5Έpo~c5}tXO_^%kyU%Yž;;{1H3&uv ilrZ@-|;jtUb|xMv߀M:3k|;xaU*i|GÖBWUbs5hl ߌ͐ѢJ@˞_$uƘЩSjUpʿ 0ŇR=E}qbW`A`8A5oj'ȵW:8s[ıLiO'H Nw[+Ql(mEߕ'Lߔsv؜{Ѥ'_/o߯[%'mUAH!hOBN Aǯ_KYT+ii4!4 PWQ!DPXpVPj&,x18*4`\s8:ZLlS]1O໸*z҄Хdl2O[ :1Q)17hQhgm O'hlltNg,#ns[-MC{xIo50K *<2rB-&e$ő+^nfrcs]dz'o[ް =B[dA0y2 gȇHw19T9$7QQh^CcN0aSwTrv4FɕN֊g=Kus^PZ~erV9-3>wᔭE6R('Y<3TEpE:ѱ`hߦL)(a IEJcf`,3~Ts o!Ju{hV=CohXuC-kj/#1@)%VG5 [^cUB(]"]X.hH֎`}0TjpwLmn\'h&z_מ]qN{BUk'w$s}Hh1NAAhxwưcAwC $@i^4)1aϷNRȉ~ U gGg&$x*gbNJqZgykVUo~<`ac);\AִNe :.{RT]*ӥ(l6DQ/1m%DC&C>' }Hnm7 EZ^_eCڪ>Ch5L"^=^p߻k,>q໲7Ϸ`g8Jp'#`܊EsU! Oj11R k猹f<[fᒰpiyXl,"݊6>(sNw})#WqF)~/֔vߩ*`k}{kqiID6"zחPL(d575oc ,VoCg`8X$)ð /Ia4%nȓ?O{4 7PI:˞g DvhVڨ:BhB 3}_3^dM[5x-Xݒˇ<<'Ђp֓jn+tdwL#);MiϓmD9$]PZT%Lcxs'U:?.&JYH?FJDr٣&dtF* pގz_عL>^^ ZX7 W]kY81|&hV,-RuK/u/@2-t>7)U ]-->f+:ka /k#:9ycY 4*(3Iiϋޓvq5-FOY9E|=4+7H2ȭg rb _aD"$ӷ/wWהPpK[BYEswЗmET%V tЧZ]gI<ب^ L/ʼnB=„Ctfy&YM?%G&o"9x8_@,0eX 狄̐ʰ3a=աA`e}½(r쇜´_:ՂNF~V]p](u}9PvXb/š7OkC/թȝ8ib9/Hf?ж,Gk, zeJX&f)S9%Զ5>ab|k5ӿخsvrf+[n S7V&~04/:<"Wy_F@Y̡2lK8 %n]yXTeĮ E /*>ѷPXW^ą%#7*TRPL`E*x3zni@QAu`mxeՏ<'K< [[$83V![nL=CsөվmƉ{Ĥ-[ !F\]q\gY ;\4h뙕N#0Mܭ'`g8לbLԁJ&:j&Cc Yk*c裸7ÒP>؏^~>CH*y0ym>wu&`/Gl[,=e䇳Sy!b2c%B?nQu(SكUkYi@Yj=EpWD wC|+X,?Xꕧ蟱5!XýW U/¢/%!FSA΍ 4KbXytt49'NMmޑau H79r g~gZ&' nc-lE>qDΣ^m{?j'i=~eUhj>aUnbѦECwj9%xQMV3yz"U|;KB@j򳝙l(ӻs{LTn:1~R *UVL Q.*;{uVa&J(qC^_!hΉF@~d^oJC8 x5M{onJ-y?QA'@ewi08[\cYNLU\ ` 5,ɬO5D }ϡVf 2 #W ySK!8K=@QPRȵVdH/fxl ~*Njƣ.Pp^uUR jĽ2~xVc"z2v{4?!`tL#Sf_Gg# #1-'et;C#242Yh7R`톃@S8#ՂA\dVFaZPY tΰ߸󽚮8w1^GkDB14LÌ^lcÓ TP.rC=:@5tؼ{EHV0ض׳G{绞 ֻfAc$4qavU.7y4(WTNB^|_Rl"j(5_jʗ!q([e'E:&cZKJ5@M|֕=׆tY2bemWۍnFOL4=Ʃ -tk-h~׳7/8n#U)4# Nx*lkkԋޞ$2\$#A)GzD_Ý+@'[s{&)v"TDef}"F%e6c\%P,!5gKH9pD JHK}mSy#U> \IZ g ~u4CKq*p#]\\5U|7K,%A޷y#ؾt8Sk%_Hp 䳌p1G4\hq~ H;tSpLLtES'Λg'Kh[5)zl|yedg\"MRAX]?Re\j6E)P`g4,W/`%~S.=ٌ(G^W17oz!%x[#7𪩖h@’^rq`d]XO 2} !ĐV}-Z["HO w\k9_b,]y˗7m`#P(MsIzӼ/>o WOfK G֮n7bv/Pu\Nw>7Va5BƥaʶJCn1nyeg) t؟ufKA[Nt٪> }װzn ʩ/j:7H4:!P ac6CkZqiZ[[AIfyD싮9,D̃=ގino/w@jóo~eݐ˭{,1}V&M%ɚW*N}m=Zb0GR;%,ND-ɦ|90&w8?Twdik^Г쮽ho!SbV1xD-h7~l:3O&1<0܇dMRE)G!o],s*HEEU8mj|{[!c8Hh78LWd~ / ]P7'eœ+iv\m:9Jm.8Dv+Brs㞏̜4(yZ/T>ƆXk ué5Þ}*U{WOcKy?xnbX:)h l./~BG6 qx-"fI$1> m;X@ '{ib֐rkRW̶pZr 3|?R@_*|2lo -r25iy{jw;]l< J/hXIqGtG氞 UbH:+]Nh{fB#duw>k:t8\gpz8>-he/ fф 4TƾP'H%b+}-'W!6Tuezi LԷ@9VgE ,k}v BV2"6YE1ya7$ʹZ/gԬYf}kt!*O%_c҇kKJP W55A =c{hv̽p#y[2 02hKΑû?s/ȫd!׀ֵS2m|d^*t5I Rb`?UP}aBiLTœŨwl<9N`_J}PW0O1^nB_C*r{VhxW4I> r"zKĚ`Bpvژ|Bzxȼ=u4"}Ĵ+>/t_d;e3|m'1F7+7mQ˞UVue0Hy@U 5WsE56Ou!i*mXðTʶ[$*7W,NLs!_\?"u"8 '6H,9#hSe)CG쫐fpD.[! 𽱺m}b ߪ_)hmQwhfI _Qڏ\8:,ζXQM+!'oLڋ5 ޴ ?z.-JĬ-mD jC*3%5X#$r[1);:Cբ<ǜW(m tYP"&9Ru[(QLm(tOn,*$d'7mGKݓ2wֿm4TCҞpʑ#f_/a{ 9%" G H^Rsݷ*gRΖv'FEZ#X*YFZo ?&[Mʘ =}w锉5T2WMF;k%N7_;x~{g^O2;Y!6+!:ntb0_oy"sVe㚱/)MwT+DjcBJ)4م3K ywmfZW,li I9y pd܏)`Oi?@9>ՏRؠaLn#%SU}%2z~mP3NI)_Y=DAKO";GM VJ?܈Ng5GYS'du̇:I:Js؇m:MUaV'JRڡWa.Hs9iWd9'C}f}E nzжHcog(=v:= BAdƘvY9-kDojӒ\IhwQJDNT/tH=8L Nb/]HBZh\9ȴ[WW3pN8_T?lNW 4wxLy%9Voh+bΆ]LgP@wfyAkU9'7‘'G`e`{/]#H؁2>K jTqK1OSyU*Pr~|pTZ#+s>OX]lkFAzk_9E.FËmJ< tYoQXc zo bTWQydv`zѻglQ"$a!,"F N7 ݺb'ɨyZA1YUB7465+y$hKM7sMF-尫#v)x, ]Ut73.SІډ-φ4n!wa(RKY/%tŸj1a8{~߬<_n@ ߹}ƙ< @OL]x4֠rʞ ^(x UixhaojhN4HKxehiݟ/d*3H্t?dj\-1̇\Me'Emfr[h3U'~GgJ 1ym_6ŃOB+tlć,Stߴ.eoEBCj4_{0ՇUi:+\yA1լbVQ_s0k]($ZǾي%DNj;{qs5=bnpڨO 9tlÕl!- s%|6fh'ߢ'} C nm؞KKhȰp$:d([AOpѽ֣4{& )i^ڂ*aBaod_^K3U^-Uo'tG_Zkw C~Y^J^/=`_ۜ*&>hLI$=Zm99&^|FC@Rt29:]-EJ:H#tpJhw+Cikޙ"M}(`,%+/TP& y:z1BܮUE:LsVGscg˹S윩UИJ͊tOk ^=%s0uof c޺8HB4||a Ac'۠_7qjRNW#*,Z׸?yƑ Eti\t`A`Fuj\j^XyY.u]'kfq\ҢƲZ݈gmedz˝]m셰)ϧިW(#GbpvC'[.ڐ1L:}3pXhڰW~BIUהvrK.O g,asLQ{Oֹ)TiX!'IHኄ6 xQOr='ĵeS_\Ĕތ1,Jᱴ^W~9",%m\*i'HUwng8 ~fBKc;+FxSpz:v{E[ّ"]pW] ӯ#l8'Yg dg'+r-()&p JvJgB@˺J%~䉁7ʕkCqZJCD@ XICV5ê[طP$4j2xPr]\{#1@x; ]Un0n8bsNӨ ;RO>?CR7pV&{gܮ!5' -DVYT'?3WL6ߗhNU;ǐp[(R ֌ỼMGOMBұGv0lcXdޖV;}VA69_ ԰>7oo|O'B%E[ZU[efeK}}9Z#. szG(M!@Ű{/|KQ|8rco TIY!ݸ{eHȨۭ~+jZ 5%u7:>&%R 1R2[u3xVW׈5RFnhҩ?{GFRdKå<8u,[`g)|FklTylvj7`z1Yqy|zz3BUЄ@~4z`hwc$][ۙxՇu `rPn֖XCv` ac^?Yx{mΙNAģLSq0%3}jźͮ|_ ݿc:=v0 +T9y iͿWxj@6ͼBOy1lYoI3a\P2wtԴ+,K Rb X{Բy-8E I_􇡍ۏ'9g& { 5[fĔgx:K,s#N&L%=NڅVÃeD҉?4;}'T$ #blȶdʇO u?5 7ӡR`W4<P!U *aSarQ+\9,*wФYu1׈6tx0/i*a/MھTWEQJ塄:2_eHg;.7D}FP -_–"j7aԟ!-H{^&-ndh x-ӫ9˘SM>{I7a;=) }2σWU)8e+= F، \JѝxRI'c|gɉϽi.*݁Ez~`O^훽6j#B4dպ813'}ptH2E-WͦJIY/vU'7S7}exwӶ b;*͟ %.7G2*l͸:fϦظ|<8J!ԣjKll0p; H EJ;hH)&<"Kzl*0 ^}yg. ;!a;@!~V:{rZ!cnd7 N5yLx=pa6Ȍ5=E֊2/3/RˍZ;m(Y!f8$f\ ȪnJ&oeT$_y3^7…ʨSIBr5H22K ގ-n(јMPt>CyKsxtExe/0~k?\,_R@K GT*NWHpQ$fԻ9%]\K8nҫE+RwKx`{²Ъ]$#o{H4۴(hmC 6nrM%88J1'&%>_CG <ܨrkx,T9'yvuv2k?j_`&]4o2)( A _b+ =>IN 2*ʹ2&a~ !r5$23Q=^dޖ~a7t.kCG^F]Biemb1!m3e&1U=NJ _] 3' }'6T~|l6Mlu*Op9%*y1jkINf76)L@7%nhJ#Ug,<_[q%L}y=T`>C/a<@E;Vs7 8Kgzg$/TQ[VosxuL8htْ̞-HfkB)pE03TL¤~19.c )FϳÞP;tZ3+IP}Q#>EH*ٓ oGE /sKQKr˞ak#>N`vگJOsq~= uBJK1 zV$8F DO^^)?xUe_p# @XB|'ZeUt_²!8MV'7>7 1~97  ,%kxw$9':rܐ3 3K'l=1ۦ|L:>[e7Ò\;zmm?4s!T2>:rQiSg[ SK+yr^^ke yeP4z*A`Pac;7#R6懥ltUb߮Hfa{؏~'wx$eGN x:ly L[+ /]<S0BOtc͗ 4ɈiVM6xev(>q² lxsk^,"$Rȼ?q ^dga7rh WZxO_Al5r󆴣e;sYN30n^20,@>.MFvZS`o>g,KƒOh;Vľ%!todcʟe)jiKn&.-@嚞Ib[7Mѭ~yꃧ3v,`'8oG/9p#u|>b|MSy{w739W40"Zrf8}1) >Ob7x;f <)^#nn|jǪ\gsgc" JbTu?M2F*'㨖5[Ea2A+f;MpRĜ%*2t)hw~ šy #\pRmʱIU!Ɨ#p TƲ8U!38SYfC}gXu[98_;M|p2(ҳ=C#/)fbrXʞa<.Z& vMg/@ ~Cll5sg8x,0Q81xfEE$t9q0yZa1//Zd  ~hGF4J%%JTgw?R=Tjf/=DEFZ*u97bӈ6h't?a+_X10MCيUn:[gSzl TߊrI%}@s{4!ϘxH0"NL$l;rKIBrum` ȟ-6M$ o˹m.'}3QΆxTDj5>k)89zy Ixvf88e?hF #@5~gl(G0n UrQBs-5T.;;!dEY &dV}{ޣ+l|:uЃS?W;ͽ;dKxWQyk)U9ibXOBkc5>KK0A'*~G,{c#`u( 2#`KTNNmʫ8tZ=+tmoc `p`qv-`S|KN?#Q4{W)m2UpcaE_))9O\G%Y0 ׽)! xb[ѷɓc͇yX^,^[F5K!>/52rg.mx PHsµS˟󁩽NȶlUy|JUbym"xvX #2Nt _`|x)F̨S$-v;:%~}xS:Xs(X~A:FZ;efc- 6McTL^?^ Uԍ2fhl )W^Ԫ${;ty}}D3@ alWmn=C:꒸~ R MRbE8|qlfRc s0l`60xuC2pJa*˵tmء)Lhu$vxS'2qYDࢱԺ45^C$N2T+y5x ֌uI=_QPqڷ˳ XkUs5yakXS|0xhJvN)5(WEcޜ8f#A>zR#%*QJ|D9g@>[9E9H|t^E$-Di!#Վf\m z V$d5l{%jmfj.VYB=s#1| | [7XΝȣ[rk2CFMYP擄Gܤvw4# yM $wX5[ ѥ&*5os#Ј'_Ӳ b+/?OpTkN!OdXX U*z{Ez_AX`vZQ,T܉-AQWqaJ̭ ,3%wTI}pi gBu]MZ?H:>aQ-[sSYtK(CmߩS41ITUnoG,F҉;Kj>Yxy6ҥbqZ%w<+6~ȟ@ Wp!=0!p;j0,&vKt))p=lV qi5j^![E|FY us[f o:]\RdFCͅD1dh"I;yۮ`u$*d~(قԬ;U:̪p6NK=)Ks?OAPX)m~I? 4 kAQ(:UC 0ÖZ))&R*3#~:ʠdU@)9ܩG.*lrJ| bXES:e"[ѐKPEC;ALԻ 9-ޔ00SbJ=>GԀ*syޮw[.n$ی_xX0.MN&DtiGR(]h><bDB[8a-[#y(;}b+_"o*$^?ENA,+J/{i՘#GQ>agƩ l/ pRq>K] ݝckb,*cQߵkuwG VwzT^Q23Ơ R!N =ARMSz`uA;j/Kn} Wh cĪPy4: \jV7Y7c[,YGac j1,&+qez*[@D8XJvSZ$8I i 2A;c=T#_呯]W o )7BǙm>{{ܥi|. Y5?N&ɡf)J G5"A i~gWKp:V :3 ~g`2D 0>b)B,ud*H~JE3 ~#2wI a\{RJFdicP[!6+xKoy'(Vyk^q␻<0^Ji(!+ /&kD(u i@S/5_gHW@{Whl.-_\k _ⷪم]y$^8Om< V,i+%ÐXa`% t녮bHa1G 38ky1A&;Rw^^OiK`IGhmu{ ȼ*rkk՛ ι|,ΰ.a4*fB 򢕉\)YJf圱f.XԎƧ=ӟpO7SG~tk\@n,(1TF 6B*>uQp? l?5@n SgfE|!#M]D MabRQu/GQ;Жr~qfXu^|jp40輪4}_݋vJ#%‰:~QL>[! ksuPT&A588<3Y G49mKa ^(*jK')$$ \k/XyȒٕEi‘q=bct8W Qtu뗕J4zkjޯ⹮o}傄V^,Ï;~.Af4hFAvfaHxY0 HͰ@^oȤۣP7&Afp İeZH"Q-qPIa6@Ɋ~1NIrf84z޷ܜռzaP=tτxu(J2 1%UC`Kh}؊[%RlK]4gm4ŸZA H`okzosC=Ow]XSS-Bˉkekŧ>ea]sE`#@>;XALo}CU 7v/1dAn"4D~ڈ t UJ&Ϡ'W@yFcXAMƶ?ʸػ|u/M0%_a~2:{ =c^pi|j% .K &gX8QZ,Y.9e4ߦ25 \T(RIfJapPXզqL& h8,'Zppt~ =i7}{5mFHNp#Xi/M|j%*2Q`븑,#s%tq(uY سZ2zT$ֵq&OP\bCf?hWc8K4Hah`›l4p%VULgzVOmų)^q}<[ᵑ `%*8 g2]\т3a 2&l(=A>I 73aVSًOO ʴWlq [TF2f>`~"œmm$&P4ia5}D/j^@aqc~"3.'>V}}etORM6LaGVMx/e-P5z.\ 1Tj0{rY 4*'F H1 G93   +0M79sE@lPs,Ev1{}wNҥ-]ou j&Ŀ1_:1d 9/"p(CWLy% ߎaE٬|#h! zKpYm C.52kU}f:Fp)(}!챰C{_4}k|Q62f>)A0q[ԯA'zq ~r؞>Rr^{ %RQl?D0LЅt|Lu4̪K(nާ_11@ƒ@fSlY؝2'" )jj;Fn *HlZFՒfGzXf%z5:[`7̔AQ屺\H,ZU,P0\pmۛh?8zXV_eknTT8q2vK@6TKPg) *9A|; fF~M Ѱ4yD# ā?->"$ٗ}OJ(i.KA%7B`^ PL~E9dfK Ȩ|41V+cI|C.'lcs ),y ":&2uJtU<;!Gl޼zDr-5_r{BU' b60"CO H5|/h~i+nVz>fV=,ダ'\?8D6lryئȆ=v1e%aR5x{8N]-`{I ܕ0\<0> 覣BkG%Ȕ<7(cic%$kʇ@5ż3Y[_8ZEf*n d?~kߊ 9Z,轷;.d'PX4rHu _֐KaNaVpāflOc/ghIwҋp)\N6 b!͇Sᣩ"=|xجO3ɰ&m|ʲd=2pOZtض;؄GkڅJkP!0 K"bQv Q?Fz٭*Y?sJ&z-)1_Ą!5bI/9N)gl?D'OjDGW$On<7dHA7G- ^Jv@{.F7e UwQ/L(ߕQ$"{jDA\č;g*TL> J>]}yaJbru>ׅ%& ixZ`P8Vnҡt\|M.\=\ltc'z<5터~2kC/Q㥺1Mr߉Y,5C' 1r&D9&@唆E<,c^"B׷&?,oT |ȑF0e,]K֒:(3#KJh_0+o70EwcQ]H_ K`VAw/Kr'̇*:Z]h*V ,҉;NOPzB[+6"zڍ6q9aeΒL4'wUVM?" }y$3[kQf.VGn 99HlvU A$E2Eu yv\o)CUW4 .n"p Ĝ*Yz`'ouzcUo75 MThrj^zJ;{R{q(,篊GmF`v97>Zdj![uqu@+ W#Q+YEe0JDtwv23OTTLy:VY)Ѱ]~Z 5M>`+o H\U.@`(SYr^qɟ,zL%aY#f9 M 7C˿$n=n\W;BΗ˹{. S$ig,' _~*i?9hID봋bM|}ʅL2Vjw :͒[2Kx c Cx&~* ϋC1֐z@Π)Ks{v}9;Nk lh 荮GW,܎6OB2D:mB|n7OUp e ӎ݄9 <^sl#[6>zuQYCp./%~֢kFRޢjaVPFEp+ k!yj3 asՓl_:&۪{[ǻ\p+5^(WQ$0UmDHq;e X3ļxzZAٮ~^iy9Xv6A~wGRZT``Kw.czn#")1Je9h10㩭adX' ']Ⱥ>gI 5X(C~,60AD3Ww:ƥZxXO~-hE EiUfb{6THuLP]Sl|ۑhNr1xg/I Qg;]h]_ *'dI{}c}!zuAy;!-=l˵[KbP\吖ޱs]Uj{Qp8yyV9b'On6F:=ϩ1η&%!\׻͐AѦ@E߁ub YVV~k=R^2=[tRhN[5v;Tu4>nTt/ HlNV;g=a@ ׫S kgU8~ss|50tWbg %&cGUrPKafT͂@h,j(VeՓw +<6:or^At$~'!w.8rX*Ap@"- A[9nHxH#R[CtIr-d3KNNouD'CF{!4&ѱB<㔸.nO)9`×~sbT k PHvreiL^TAҀOL ! PiW@EZmVD^ZG>Z5d`C'_K@4Pu=|jfFo&`AApc\_eN>m< |IިiĎt6i~\T$^_(iaA(<X,椧{e*$Q)QeO̬Kݦ‹3#QFn4|<|z?9gnZ>Os*_rnR+h\;UZI^V?\Qi: 1$p)>6\8 ewWaq@#|: 16"8=P`RtOBxss{KK4ZzplŦ%ff~zdo}.`۰ZCDo 3XJŘbUH2KYҍGƒk]ePEd]dRg-yAq(+wYG"Oamnl,)Ql5!gIi-2#"@P$(ӱ ot 2=##TV!;NyvqnJLV%++YǚƓ] wUsMz_o{UlɅA#X,$5>#\aDP)gMT\ɁG]*^,8?! `nH@<[n2X~ K?K<|%> q8kh32 %A:!'\)jlUv(WM}=ل [*ƫN7ЂW?t1(#Ҕgۅ n} ˬŤD@6 njK_5C&%MOp˓ o |Y7Nwuj-s^u;D B(#uDMk[Yvm3]ENs ^ 8}軍؃($Uu=kxE%ybɶENEAEHh)mʋԵ ¨xkӂ[5~@$e8#`'/"xct,8i!Wț|7e6OY^uqtMJ_4LZ~>o%R"h^cw01M}Q[e%Pun?[QZî'Ƴial 2&$zOh[R\_?^ 'r.db )`[YNt ?" !=g%㾅nI)h׮kDO)M0xMENXb-+K|$e_O lw ᑏ.]p[SU&24@dmt'"9'DT> )K+ kkpg-Ec^y>trUf̪{J>|n ZK8 x#/*z>@\E˩PᴠD03X_TIS|~#^s$vaX.uVI08MEAEwgwM-~QDmzדiɠ-9)^7ް*:4o 8zD?IAoAyvѼź&Ή-pIħ((NA(vTMҚT6qu*5xQ[&ɥe0ª{^D.l zAwbEnZJ=Hasԗ6. c"SrGSۋ %_ρ wdP 6}+[pp͎_dVChKUuJ=Tt"8~97|> 9SْELffJ𔠽'[˕ʲnp3Bߺ unb7&ŽY<"#>RF/kIlXb 'V@Xxąk4k RSB`cFl B,wE C]%쵄fnI2DEe-w <{)-A8AZ?p|z{b;Jw\"zT iP!iGz>ucn5ܰ J3?Ĺ$q ό>`l P_à82 uwo' wn_>Y+؎K}d.,_L;ԧ#ϹÙpaF!9υ|O)gL)g^9s^!8nfqM],~g}w:d>m|` u‹ eX7P}bl(*D V4 +&%x6 MzVcQz};pMW|LlC2z=q P6]{쁙Kiad\On;=&`DFcR%5td}dUJԻH:!gFlqմ%pd_!JM* uuzԩɸA0 Lp :D1&$Mr KrΏ=&%b:7*CU!Jw;=v Z*{6?}C{HdžwGbyHQ'\Ȯ~f63ނvRs),ђh}-;l MOz/ʚN]l?GB8Po:~/]5azFc8iHYCjjLC&.+(s:gyyw]RXXp!MKoy~A&2L.=ǔɵȼX^t=8\*K3R{ ]ŕ.l]KyHep:nw.[,jƷHkq{ʻ|RP odbIUnpCqvzlNUӞxm_ ={og8 v)2ĺ[đղ( w _lxAKT^jE-Z{;~4ӆ.DG vjt`:O riB3݊qJHVπ#I٣⨱\s_ T\~v|vC6Cy 3CtUj٠A%E$e=C2հa t#;9q :U|~pފf\b7ܬm/VabFS0dΉ@磒(9 fP0̒,pQj .j(7I89(- |$~< :mṀƫfʰiK-N=K+ 6e>Y#LnTU܍Jh4.Cgި 8_rvk@Ffp-fRojU  `С_{lsv*=;t_r%ߚ'3Aa󼡺IzRg|e$a ;nnongL#iEkMN]J83Rѹv{Wz0h pIF#_}K9G5PrP{5v 33kzsjp6aq\D)1ˈ7FF%Pe3WMS%KR{IoE/1YjXZOA$Yk#*ˣthD|v9.ûҏԀ+#tP?vDtS?LՊvqufģRVh# !lO&=l1>A>899$ 0j*].#Y24G *|/\}+cax ͩ:qAѾf,~>i٪z+W@"j A  S^ L>(t}?Nꊽ5j%Rw .ODZO2}ϴYJPeXX+!dʀ?a 5ۗtQ z ){)l_;4ZX + mfW9QJosoxGh.KFƝ3oਸ3!o*f_ĶsqGjmm6 rTFʧi JX,^+.8eCBZʖ5:@"ڑr=@挥۶هU&+OyV".SxInR$1£_{O4+dW`@ epXz*ّVo7='K|t 3m"0aC s-L #aU9!VIO1_a#8-i_}ٛ;SoK m ֫g$Q,Ci'G[-;5] + `/!&BLb‽cRpL6#@^PΆŞZD[T5ަӳ{@ 1˧n7={TU<̬֮i%eYh%B"~i}vN|yu -D1_VhCYlPLO?hZccy-ZҰĩWIH ؆'2Y#~?i C.s_gS]?z4~D7gEGfB"Z,8L}cA!dhz-HBK U ɾj2)Sp}Ap_tVr" *u3CK8MJ^,FooLY,[FU@.\ϑF"\$n*\KAjt3a SAUʌKLUȣUrC^)nvjy(nIWƓ\ؙ᮳{O h"F'n[ |2:rvof :VQL3I`v@g;:1GNH#<{Y_P.dm97X mkSѭ_7nѳOJ/^V!\;/!QkPֶĻjZ}ܟ$]N ]g)a;㋗I RD~!{̆ @|;l&!gK h8Sm`k0:5 /kK$^sN:.;Ҳ&ՃWdLd"$bƒHw(HG;ek!1n?v=KA+ĐX5*;SK^M"Kl0 =XiD2vTõmyAjvt} ُ Zu~_JK=IW{27q'zݨ As h: C@WMS~У]#Xkg>=L}઴tπg({y7yd@b5: mv*K}KM6EIH2X.S;bYށ Ԙi1iï'2k~`6>+rJ6N/3wzwoSQ4K.XaZإ5W-6C^ϣ@-^jU " :eej PbGh-zL=3Afd$5%̧ lN@@J{UYȔ5 k:_8 5;wvwg /Vs@u.a Y0^7&|ܰ*/j|q}ۋVl0Zj$d +!IPe'0:  'Qȯ';yp9n:9Xrrްܪ{/?<2_њK3*Z&V']V -C,(v)Ksv[ťV$Cc,hu8,ru V*3#!y.Jh_oK\\*)GѰ>6bʼlxZZ, Ԥ꣌%q/d?y~TI:3FYo .~a #kl O< ݬ"ZBGpE ʢ'jx ~A q`V^RK%ů42~͛7~zUw%nzhjwhg!Jw? 5"\"۵vie)dzSBtvG |r̓>;bsn;B]06fŎ:G'kW[{_:=0(ϋsND ;//o+=ٓ޸cuZU*m:N v㓕g^,|_3)w藸k(,ft"DK Brn6M'Nb)\,tRwXΨdI('@\)*eu;'Y$ʭjeEA>~O-sT fwpZ JjyQ: -bk( n@_CWi pѴ+g2= Xtm/Ǵk|!`| DrZq[GSd _:vOX,Fń70KﾮEw`x΋Kyb^#,N\'rx$7(&qz) p^2WpT ' *\ YtAH Er>]@G#[i>A%er \yɮC(v 0%8|Jxd:HmG+'[vpܧD.Р3@>P|8OEK#4:8~q 9W$\܏a?u_dl#{hIZ,ŨAg3YG1wN\ &2|4`U nuOS u RkF>FNx XEf0|#RM2b6ny t Mxc׬h>'h7=р;\ѷYDy`x+(T_y&.Uq_elI?_WH:"ma>*n`O<8*9Ry |d?=|vp@぀|V3T Pɝ Q.j+v*ق+GF8nN4 zլdپl>.J9DL: _\!}d)yMv-od5YJ)t(ʑn^Gt)febʷʴC>mvF{j@hwW9[K]{)_vqU)9m忋yEu4 zq y=1T=QPKA+D߳4EkCT 4bOzhtaY3Q\ܯnp2e4M(̴O1^>E0NPF?y!i@n)M"js+svoxilX]jfqo-A5]s}ST1c"@V.Ă|2Q[֎g4a7haXf0_HUaI|!gG;3&d-pa%u.9;`)@}7NϻEoX u{PᶻK&[y1>f.I}ſcγ&cؒ~y)Jӽ/s&'NCZ- #\ki!{#ac!Éx.ETqߊ\ Eһ ұU3w[>0ﯾC_4}ccU{uc7c]t? Qsd)P-n^[ V_`]=CÜ]]H}XS>esP\B%Ӕ>h֖rk+3$imp386Upܠw\fϸJfhwBxС_P_kTl幅"+MGW6*ЩFRJ&m(4u($&{#D2Q>*&؍ey7Z殤U} K'rwAu׵MUZ1UmTV^N~%ؿ5E}Ǿ%UG2"fx{'c@ptF&MZ8$Dß׹QdmB"c{L xq6tkwa힥mDLfP~ t)U`&<,9bUk}qwB>xeNYcfQ_aoI`6a]X~t*퍬 -SLr+ͷ?Em2v7YY(FA`uǧA0A_tа, p;J濯 Sj5d]OVwcp3ivRCȏ\>eR(O>MYkl @rV $EmmξyX;jqs~QRx؟| J_d3#pw.dlw YpnK_M; YDRcVEnlm1lܲ=e)LՓnh+ՍK?X4aE ++1EDi/yu@!Ӊ;EC1^ڝAYS9{}$e2o,5L4yWq䬗zgV*W 5?,@I-S2u ͮ% B2HJ-̭:yl<@'iQΡ\U"USH ~.;E,ַ|g놸2VV5"w3nO~w)2Ja]_Y[J>(0BYv/]_7ʺ$wqGjc2j_Ӹ)eG~e>f ,3!(jWk3E%m˩<_MƟ"ͱ2 FA$D&|Ͷ(5N{NXTȢ0*E ᇼӲ9sYCN`R^g>h hxκC8VL}&p,+%Q ;14F+4u`ztrq &As?8=~KS5qE6:tNA";-#7ZGLYe:V U\C?P&ɄMk"oGӝ?,=?kbQx=h Td؞(b\2XWO{&'<[*1>B8#k(j7&w_WP]'"(2PxXWitf+@B_WbP@xаfx_9QE݀P F+^Q5Ho H)G-œr.ēzIhyZqzm+; Ro M$19?#gGSeu[0ţpH ()'ȃ?e)F>[}i(>4:蒺&K ~!'{e*)hi0&F0j^CuU#tRۉ:ʆʵ]T%Y8Cuj-aQX^}L8-pbRH l4y(t7 ^âfl #/-wvIuUDg3}ʺF(iΡX]S)}ofY.l_Cx@Eٷㄈ;^@}I%(W`ďD9LgoB0 (@A8[e"g:^z7jWK cA¦@|s_: >Y n1xOMw5Dl颇;xNm-{ee=`ob#ƋD] l]eHr";|Fw=K8ժœ! ^z',\hvj31}B H ˤ_$|p3٦16}=ZŜJ;J|J}7DaV) *3."KЁ%b,h[]s9c|]Z`Q? 5[WHc2\s/'✭j1pgax/YpƤꏟX|݉<F_jP+.c:*c<H5li(< ^#nDz͙3ſ1GXg+R)ۯO>HLEF7WEy1T^od#Pۢʘ80 ?,t}Iq^ <mSLc4'wdL;fA(D\8"rH}H0Jd%lї ;a1_Ԁ!WCٳ~/`lAUzWv?MVCiU=~*#׃|CrnM~FD-Yq/[GLƕq);9U%D "6HU>B…N30UKRcZ \l;bnA{{}mYhaX͕K0acuz9$V@+d=mmZsrwcaHw73*Ov77O \iVvkm-eq&e&hܔ4CC]pY]) E͡ n_z;؞67 Y 7Oy0J‘_7mJR O *9LYX-1>p`MKB1V $riF?9aXpFV)AS'STph`vA)xonI_ ˅}!`zZmZǚнVgo|@CVt0Z™0:a -:hB%.1jN:~%N׽t~*hSY)V곳Bnq bϼ[I߆, O,-u)Dhb?cBia"uj1qsGhIC`[i SAd]&t>k"larOXќO ~^/s 1ٺzӶ?u.JU1D>YUI rjgbj@DArR}u$[fȫXMcr]HKm| q-tV0m.svG\$yTQVu!l9!qœJ,$ѳEJh2wnhQRM;i!EQXLŅEgGRX\ѪY0}Gq<=y/ѢW+l]11S Mцo~O2_s  &BodL7&7|F04raGfkU? uarka~'Izsݾ/.FG9GBx zL|?|P5UL#<(Xc6^n9ljv#sB KƧi'2Ƙ$?ܯ-8{~ ͅ'.7a e i3d ٦h 64jQmܻ [3 ebD H\[3ƩQp?4Ot&Z 04<+AUi:PY7k5̻0е I:_2TVw:/JF$?TGqqk\SPi );ϛ&Ci'H6v aS?:<<71~b;b5+̓%m ( 6}wC[ SHlλ7oXM#E$flʥ@\&0 \͚Ej,ԈƗZ*.SZ|xj]?ТfLd{PimcI ۮK+&<YhPG/琯PI,{.sˇpWU n;y/oA)X5kHe13{S֯],q׻H[SŲHD> -ĞuH9`ǂ[ ۟"Zs d@S/7Դn"H˃1P˝,˼g/`&&nƴ_]Tdc YJ~c`#^Ң+֬;JO*$3-uy- 7_>WjB.J !B;fLۇd="5j ;,!as#gc4.#\UI7@s*AXY6)ڢ0A5{p1xS@F d7͈' o`%6zn~~KQQZc}:y惓rM9w@zl Ji}`¹Ҧ/dh~NҒ\Ye_BHXE/^t{!$9!UC@F:JHsI?j=ʌY ; R"YOC @E-+%5;ap1(%,Hl}9;>B\ڤ6xH;Ras7ڮΐ G XaÛ/4!_< ')q?#-=6`vLf'xV-fI@QԠ:[[Z._+hh Ĕ~pR0MS(٨v\f]<Ѩ]#jR|p?I[mLWn/ ,l6]5͈ÏK;7/kKp7(aoG 8ttw[P q{ַtf~ŰcNq \1\FoR\i=i?G*<} #0DeiI{.TQH ݈?0azTs % q4^;XATC Fmhpu aWle8_;14;8eT;WA>Aiv2Tg])0 ġ bbjAxm3Z*Gm˳l+>!OWq'ýW0ҺB22oX`v79/w֡v^7(1:^fލùPE/J4uXk X6j%HH>՛/2'CFqZiaw=&YaLEqQSͶ<^i^n%;(4~dE6"𹶛nTb;J%64ml Ge(T+$4lʾ^j8m L*QMZ^ZpZM)+u\ǐ "4_Ov!s"8gWcHCJ|ɳ+؉`l'"!H({hfrj)p׃S%eǾ4A` kGsU).,ͼVx3{<+@@Ɣ}4ɷsQIw&GB .ײ71k bD0Hw"ºN&Њ `( da51lhWX3tvJ o)pI %eGm"ypUJsX@hqKwzbej%^ZLÜ.zӪq9pƗj{$NS羅j&g \ "Lp]u #sCion\z\5S4_MEyz'U>X֗[&(ڬnJFm̀O օ?W|dL'r9,L)M0ۀ|Sb+%&3 Ogd ԃ͘^xw2hW~ dX lE(fݑc `b0 aV?"M(|m*4"D1{Ќ4*;`L[fTMMM*AeK fJVNު`}g$&C0k[),ewS={f(wjcC}uƬ:'+=9lAj] ͼ1ee e3]ɞW'i\G@Y>YWQY%m.驮s] ?iϢTWh*U%r:n̞ \1;W DHʑc68¨F(fYD VMVxc{P8-81il$E_w"} ai,}U$fCton ['~ (|Z ԆWtQ8䢍6"c: &wjqc6JԱu "u:rMan| %:-jo +1PI0\HO`Yg8|"Fѯ@{0v.n\ vV=.ېx !:#o^I}_xn0zSJN={,xKRŭ"xǦ3#];nKuL+,_R N~;B莛@V0GIO*n̨橖iVcdh]П#;vޜ)IԩFHvh,_U̐ć/-kW0|$w9`#M0y2u_}|jOU,Z9 /cLBD̚0/^WeO c~K>x3X3Xof~'oSNd~+łT2ZMo!]kj~ Gf a6:5pUL2 @H/Qڳ||0sf\oINrSc X%O~!їW+(x{ 1ؙ'";K9eݍv[ǔhCjR:q%EfUۖuM; oAO^F(}Nك)I'.$QO:.m/Ӫ3S*u*aˬ+YFYxISx 3n2NR`1%`څ쑢h>-RiD8!2mP$JЫ`zODu0/-3&kaV ~0G*z_iEϱ BQ63U 8E1+N{5 :Aff ̉)]$2oH#XÄ`D)Zs;6Natٌ["I+U h< I k@i<:%[!80B PFI4S,@sGƠWcocC0|?xQnӢ>*V~Ud{=z G#8؀;ڪUi=rE1A<lhG9G𦏴VlFm.1OLމYpnW i fq]ɫ7=z'aR#`w[ r t꠆(eYFA,PId[Miޜ1=(ͥ,#/R 4K2tdƴ~DcʩG^~le:Mw,Pu^W.\u@Gl߶yT&iIN䪡jkmt-׶_:co1WBЉi;gy]HJ] +gHyeL'gxŗ ejgL})<)VwUak?h#a\SL[kDxp%9Tu76mZmsWzR*݌ D*v9?Y,Q:'vr_WJ%]&,[,sseb7`|GPT=GjS^KZY`Yf'7H?7[)Xq cQƩr}=i@X$C!x}Ȱ(+g^a:Vx!J޹KiG*qNkLt|&Őj⾏4VTu緥4vu*_epJ,]0#^~ tHk|H`=) .e4FS藏%c-?zhPw?[P< :yYfVJ/2y="VtGچ,H6)+4d`tX Q?|1sN~,yx k/X:Y+WtSKu٭̩.&4m;oͳ2{h8%K^מ B ʝZ Zfu/GΏHǀn|q(Mo(h<6H:Mα eznI7'js0rB.Jf#%YvJM@"w XB%_퓀X=U+B;'qf | Xj[BC0XpG^}*Ňe"1ΐ_gEH\FSṗA兿 E՘} alnƷ McEBX{URm.2wsxa <`XEmp*23Xj\})_h<6qp$$x{*D4-0]٥Aa2:} nym`h pԕm/EPo83dGw; 2p]az/2?6^0ik"YSwcULIFYu lWXxuwbd.r uslbxfU۞:(TTL̬{+nM}QLmM;bqÓ!ݞB JȪ|l :Ъm ſߖ_>4U>~\?AT}@Cv]BIRURϏc&88Wr\܀KHaW-<1|2IƗx ͧFnR{z{8w>|)W(,Ӆ$iC]+ɖiM'cvp8FP >hL]i^QޭO}K BNlv ~ r"]P-N_ D>[uiه ~TQr3 Uq0=fGjDgaaHdmݒ<4.]u.C›c1Lsn$"&kQ䭁9!8)V78LTfSO}i3IGQ=-"Q{ngmXL*;x{ՠFy~ZJd2Ȕ;l)N[=9|m}{ $ryQ9<.bhLʄJ\3l888ؚIelg8ThK2(6qY$G=cC#@7=sp1݀*]E{87 vHi]0/&_~QcKق Kեu 6&^@!0m\3!3% 6СC2%_N03 qwL䃫xN+7HۻWYRg!|TeSPw332dp8Iz#ѢC=`J3p_Hݖccv&7ʼ7 uڹha{_e׋Ov D:ZKk6${|/Qa puk1\-4]LbHj9D*gW  ``pn&4g XBڥH*pM%)v` uZeS8njRK]eW%e)Z;fmԧ0-\7N\ilwOr5"#R\ux1UnQ,y5+?#|U -Tai WFR+3 l B/;`YLfx`u__GvMCK9l㘶ſӐx9. |[cJz>2Bݻ\1ggVit`ӽ.~kޒoqӐjƮWw)ETꓻ`pDL/U* hW]ofNwߍ.Gb҈|&ɖ2wxL.˚;AraKE e6H9@E'm|O\} P0iי/Snuv>e*ph7&ݭռϹ!ޛyhSgz-M%ө}\Yl4΄ 4T5XG?q-wl1}Fƚذ_Ѡ9""B)^0HKI.F8_%,ZA^bR@hՏ)MXۈpeGZGs:c(aj"GRyJT$y%3cV82a6~ŢJt?Y$"E!^ xԩ#$e8[Boþ&NIAƦQ4N7T574L舿"Dd$GpĻAN0f4M%P[#\r:7kU $ȓ;0$rCRsw1Sr\a ;㍶<)Ϝ}L%#eg0ڰ%qE CP{񟃻&*jt܋ H5&8Aj}#jV`W9kRΩyrvA%۷[.-rnjVt21޳{XD9ݘء?sIQDstgĴ7&q(h[oPhtG7-99dgÖdz|_PCM<r!;y*,=(IQJΉ]yy=-}U zIS"?5L-%Be,|uPΑ~JƐ઱xI;kHG9N49\y(oL=`eзpOGi4A;V=02}jNKyR^ۯ2lr#:-! /}C=78qm:T!tI p*h%* =ESPaSH) ){-'~(]S*ߏu(\|16x3>(O )LzkxAx"ֺZ}svn9xThOiL#7fɐKmcf;dHlDtm_W#ɑ.Xia! 8h $rsCVe@h>JeLZD}vb!OR:BØR}h$x Uh;&Jy x!\UEc sJxU֖kQGS}N֐\pK~JÈb'm ۤo H0d9'5>Kӵ'uH%]YiwMv}"؈ S  ܘ'O)iDQik'_126!! HUBd#UWzZy:w0>nl*czIbr:]Y.e{&LQ1rKbW5x.j&g,{Q 0VOVwxO(eK&oe]" ^m%2xflPb5Z+}wMTͤ*P/*5iK [B0^QAX:0kO_^{e!kr[ѐ %}(đtD*֛cI$'^2~;߬H}z]WW\ht ] VЮ,荹F^ wJQYj%#%ΒAěϸKZInC⃞%>sArJqh#| 9!:ƌ_-_2dPihӥX"#ㅅEL|D0J{ 9, l`wt>!½k(ş*M5_ثkkw( 19ȁx0;ttPsqG9LQtݕl܏nC Y̔"s`ް.`YLmP?Bv T%zQ55sU>Ǡ b&]5D ^k 2M}"O@d:Fqw%RM[A>h揯;}d͌Fy6ަ[(],KpJPngPuLrah9\TGQ_L&\p?*g>]MJܨą%zج55m*a|0Ɂ|JuH_Dxd=UВ}/sNG#q5PgO؆1BN*j~Zq+Nӑ*/gYπ4<+C<5k#T.XD`XTsjP;v>LE&iOo(Xg'U}2S;p 2E* #uaΒgD|-cg'*e&{4y2Nj6)¦,Cy()*ߗT"CQxjb`[LP·C#=҆:zX\Ft|4ܪ7eN!_S{yעOsn֠85a{j@:m}#y.rX"oglvZNQ`AYB˰I>/DO~htli,r>2Y$pH]R!z|qC+c`t p\BAlFլ8LOecdЗ"շt^4_ o&oE ÐxFLP]C*~!+!LeEoѸ:>$M8mUe`$wVQRT gnlzE\n)qI+a8Y>ZqD}ħ Gc T?nN9}nEmѫpY\j1|y drɽ@g>i}۸=9#⌬%-CluJ~B^|NIOw^R[9*S" 3"" -lF:yXmڢNm7J,QV-GZMy-m+P|`#6$ .WXB$& Y>93Ϗ'09@*ju!_r5̓tًT* چB\aiIOyÒ 0*`᛺fP>g}wfi` 1m馠4@2ߗLCgVQ_(sl~SZ Dtz-@IʤRo )y 'g_}۪_G¨=_W5OhmjLazNh ~%dդQr)ꚺ -!'.馐JsSugdKl~0T8}%:MBP:fM>lH="VuU=q "\" DzdLtPK%2)Hɣ =6 ]R@iĝ*h :Z뾵xAM 3[Ny@fݭakhMFNBg%@>@"-dE%>Cj_o!%U3\\9HaAРkZ(.z;3ܟ t nBG2$`rVwQ]r)S%hXf#\a{AjBrbPZFIIT]vQ"p9KzPck;VsYo痶30jBr\\ ~ÉZ(lF !GRS;Hq/W֔pu'Ka4[UN($OKt޾|2>[npeh1&Cd߇ˀfOØg~dDIQT}hf2,T ~N؞_DTrȔ + ilE67f,G-WD"Y|X̊|J"VKu֝'Ŋp!;:8|ЏhQ]D-ؖփfp:c_OQ&,E{N<6ehn 2kk@ѣ/CpI&@U 2 BavsTؿ0礢X֢Tv_5j*K'mKw j1"r L!$S? \m +o?U~񚫔;J;RBw':rnj'4%;}J6^߄$D "ӛl_+p0اAi"F{ԥ$#v1;`Ø-T1uH ^wzk/7!>!a9ee`nTfa|بE9lʓ4r ^-”{: Ѩn>>)0>K& 'њ e5c ځRq#j\'hDvO8{YBo}oq=">D{qI_}^drϖBt+F{v3+4/YcRIEW-c}l|¹ n.ޠo)d+AM$$ff|e;x%:cI+.L鄷iIAvuOyQSk%PMW,FBAČGDTkY?>9e*s(GR[y##c:^H0b9(<ЬRI 6.d&9褥R:\"()5߽2`)|,ѧ𦏜i^7!3<¨RH`7z$4`rEUqq\#^2o-șͫPos^ _4CX iLsrrPF6INգKх:dFwس G&CC F _iGCW;D/NU~eRO}ԫmH3Ӿ8NvZP X~d-lvpfV"f3J G| t 0M>%50[|k{OW !os@`,ʲi+.\?>5BjP$l.aw:ʓV9VX 0}>uMṁ]VxnE9eW7*G,qf,.}vo1. {e[<=M-?=Т jɠq ? ! Vg!7x.\ L)C"1gp(,h,(bK+0/)a.ed :j=f I ¶If 9(3RjJ5VdbT' ][e^{w =okzk5.X& xF\7CB,C$ªm1rshHH vaW"LC&MgQ3$8ff)FfZpoSh̩Z^9mGލ4zGbʷ p4l2"vw9J=:KdEDx4])pòOF?\Ӭ݊g"4w^O_dB>!a&f(]0)arl?^ЪGSUNƁ2͐ 3"]A4.S ;~2E.Z͵?6%4n8̲|ˢVfV(oRhu37=ruzr7xE@AGJF1k; ?q#=zij:MAʇEqo_296!@0G,Ps0 5ဒ:_n(3AfA ;PQSdjbQXNuZܪ7enHapF ی '̴:/ͣ-0?_u?yDgze͵JTTIQ$#izW?5Gr̝N/jE{OQѪNb7[y0R%aLč"Π,KEyY}^9L$Ŵ=Z@U\Q#u緂gC227Q{zP[_[.YNq PKSjKȎSL`H BT V\֢̭Q:+xoš֔E=d: z56B.JMud$ "{4 a.Bב*ݬAдy4 (H(L9MA}߶-ҋ aA5O҃;dPYHoG&NTѧ^o5@r Tzqccq̪%#S;ހhjRE+r6ǮoQs"\~A:ZU" I"LX?/:3s=!$Lt6뱞>Pnp;I5xfHQY{YhV~M]kafJGK\.gN*9c=ڈl fvq-mQ}RbI Ș6C&P\J@T{&ewn>9GNb4~U XT1o YɦIuEد['x8)ps_CoZ3)CD"B⅊G܁ np=j\<<%4HEs;™ :t4짋#Ah9Ju"@кe"$8iLύw,ZL |$giL0 Q *}CbRpA =ŗPX|Ā 4)^qdY7E{ n 0Aͫ< [~.ٕlpA-ߵWEx/ЛwPfwTN~ؾ+R 3\ae۬3wgzs*#KvS'eҫāMƎ]?uԮ|;m35-{YU}E ^ѱIasl=ϰ%:?,BiAHX2X2te.a !(c;Ro )JmMɢ_j+% Rp !X@ꭍ}dNYܯ }^]7||I)޲Ꮪs{. jem(\Կs`_煝bX_"?S,J':}*̲Ӻ;5R>P8X'-^ˋ|k.E<뇵c ,q6 I38V}̝_@++a=v jQ=CshKYu zKo`g%Ԅs5>S,Ir"v^N;ƩӃ7GShF|њ߄#d{ <)֭RP)|\(,V]^}yyBmqR֥}X], *1L <ѕRIV&MnM4(MRc] NlMpk(6Wd-"-nn$66/` Ð-.YFVwLvDx` ZLhE~-5CA.`ЏlTFjvۖ #ؑ"U uBvB;g"3 ?g];V# } 1Gz C=W ^?9'~b`CTq̢hu4.f]ђa!Y^!LmJ$],}zJhvA;ֳ "3; C7=Z93 %ǼK !&)_R獘6R/jraާ0ϣ![5#5q@kP9g٦~ VW9zM^d='(^% u"hrIҫ0(/$xT!4#䤝 Y)ٺI~~R.jp9Ǖlz9crUa "0I mq U]X('T-HΜ~KS19]'yc5@&ZzXa4@n _EA҈ӕ){uOЎoc]-9dcIleϴ2!Vv,, .V VI0dԜ_;Şl<)"VG/*œiFe F4ˆmMI=ԉ:Af瑝vߝ!Bu~9Nj0YLP/e<~ HV|#l#J^ %4ۈeU#b|E?C~r(2FXšy%L툂0ίgG D'(Q?}Fnn}ͤ1gb3fi QT$[,O1}طW~@a4Al1U5°(?U$Za $H0]+ACFb[gPz0>R,Ԗ/K}fOpeC7dnhzoVz7Sfʎ<_g:,/wM'&?x7b Zdgngd2b;sށvTKΫ*ws4.NxX bm'Q~ bg8yF+9_*ƚm bqa@ v/ykz˿:H>-#(>I$8,V$?Ht!t)׹t]Pq),/5ĿY 4z.]S{r！U b-TOjv}]~Ԍ&"sy;DNpt.ₐfxgl.33Fc7ӯJ_Bu'wqsуr3#7f^!Ks}إj-`zv5p*9^ѥuF^eߧV^~ _`R >?\ 2(M؄l6CqiIݴ4F[@Жؐ廲&Dp3J!N)yDo*]9DfdSt]FbQe&$[8)tp}"N"+ڐwpa*,5PuFiT C2VF5\$ P13|t *ߙ]};j6 IR}ӱ%;拎U}`-Nt;5sU,qht,ʨ%ފz7vs>q!,ᤩ~eD9[%J($NJr <'Լ+eQ.v93 [%Wh\'N{& }6A]Ff~f'v:Ѓ!~H@>) o.n[9 f/(L3Ca7TϨ UlK[t9A?+_Qvm _q[,"`s7 ՖJwcf~'ti}+c/V#&\d.Yo!4P Ef_=:M.֯.WMoPd s{k xtW]Ÿ rtW& |Avʂă̦E}me7N=Wko&6AgZsHX!5ɣyA ǫ/AfθK/.<#r<9"l'Pʵ*]`o㇖w?Zҹ}%s,E5ӥ`>$|v 4pu)X雤$ #,HO4qg<ӑ9BwfÎGvgFz0d @[O8n}34[# Wa5.+(FeGy{oqT R4S*p|2H5~`yA +=-!n\IhgYTM]o2!K? pOA\/7~pQ娾U?3DZaG}?tP&:4?엄q~w6s v[# fr&!"`{ TR +F܂vEKT;-{#i&ClBzq\̤ f. dgL8F2NGW5S&J[_X*/4]s3gAqI%fЩ@n@o>V&wT1Nxh C(CT~mTk3{hF( ۱PϒƗ Ҽl%[uk*[~&~9o6&O/[q }X 69F̌|aY{*]DHtևmxp/I'}#V߁mM}#صz/t9n*l1$r.H_^\Ř{* X!8oq+tXj/' ;X}䀾s9{䝶eQqpp>~ :n[M!Z%"ԘGIY=^,7.<ЪJ1rm]?ZvT.%hT6' N_g\< ^z ~aU)%C~[xRRc#,RB$No/>gl&`"ˌ&v;/[3 P͚%)*`YF)q_'m=ËҐͿ=ɷem(L[DV3$QMu|QE{&knk:BLZgAN?p{VmNIIۃsx #m7QRdX]=ʉ]6f[=cduoP;WjED'yFI[`߼Eťu0coV5ʱR{JB>yopMoRShbN+Uk=m0լdg m~لXokYB;-1R (o`/@CTeZXF^Ƞ_-6s}X'T u}Z?A-*:P[ J(%rj4 Mo: UFjMF 9lWl S)k 2'0Tk 㮱ө81du]ް+ h<5cYvȆZ6ہ*:]J"yt q9pB 3yP ֗߃-SMؚQuYCVNAGo q쳻7!Pܣ{aX;OLjԥtРz)LYew c11^1|)U]?VyoxQ`hrXAXS\׷JbL>i%2+0rQLYK#T tX FO5TFuu [6O Wր8Ш/ζ:,|3떹-S͓/ 6 gS\>AC>S}־?F(ϐS2ik%@y C,l 5潨w[p#H9qG/Lxq@8p2}ʼnt^"_g l$!&] C!^l\vҗyǀ“|[цup.0Huބi`1CE_bhg\Tg) 9kJQt"G}nJhpΡtטL>sdUxr AӔswC&}*Z6*>/sIoRRj݀C㸕+$޳4_6>_8 o JH^Vb|vZhբ5Ylw#n|(i[1g'R CVA7ɻG#Ap `A~DY*t-Bk͌˝@):w fpb&)3Qx'=iLO vCׄrw>Oi 29m?N)v|\iHGshax|JGRa?6(&a?򊮘GS_'{jO9to7'qf! h}8:uDwXwm|x.PbyӘB^9)w^kjA,OJCcyw7z@y![T/cd3iul|rE77="_Iw/e&yrLy~֠Ww.)9IJWsYNyb@갉m|nĔd Fҁ9q",*d2!%$cc+x#w*=PU}DИ#,౤ę=D%RSa@-#WB\PMD?44(zPaQLe9z7 &㯸cS0T+gGz/ m46呰~B߂ns/.:^ˠzY_(0Hae`+^a*0QPh.<P5.mCtgN?|J6-ɨ!̌e{ª۪C[ h7b{H&k?lWʪ@->n>'!0Ῑ4Ab)EͤMeeyr'º&PO/Ȼo! Y5~Q:\NmcGxpz_r1KKF_-$,P"̯c8>, ewaZ;"n_TwpGD`:܂EBȋ>b"hV-Jk {dːj+]#}j'GY0@-_gr}L/żYébsF:FVpTʬ!=Y#s_g g `1G ^P9n X*^=|<,/jS)Qh K L (Ͼ%S9U<2 {pS4#0]_͜vٰ55u?N䜟bgD +RG.QD4 {~W8;kNXlm3 EGl/s3 C*)V!a5cMd\:oi5C^}CD 5%Q@.Ó I]3`"sg/U7Rz0Id݌b"Z\hD WlqcO4qYRmG!܏=ti!\  t9㕵pm-_.y\Ixb>FHErސ-fQ6.0oA =WCf2 -=[b7Rx)­VB'3 Ilj8և|0Rᮟ5*0ZRl7j9|-SJf+suPΦw\a ɓr2!OM̵-Tf W*vHX6;u! 1xHIB H7KUv_g.doI~5JR_`jY&\N#F-NTV:F>( IE ƥI,LFl}3nEsovۓn;Γb)⫁C>|0t2nԩ]w5Bb T-)̶Pr*&97dhf&q:M/1΍RƣU D9EhBNOUM~q?E-J@:c w~*bY#AK[u=e&JM6WNY$g> h9S*SDk '(t4ie |DzMAREj4LeZocm~t'>W-K!yo$fDԌnEW--AwHZ08AЛt/P1s-fdgY2ێR0\(j<>4}sWK&W`)_,!`< /m/0ByTy#6Nhke8TfeyP`h>*ŕ9MwvaLhz~0捥z+.HAN_Z[=^8d*9~ѱeԵ|lzGů:R0 U4r ZEwkiNɍ2uH"R! 0g5c#_(JxuCe@f–,o5߼mSAtztKkmwk$( 3GtU֙q],Q`T8w#(qp [tP$5?;ti|Kyٸ+ɜ@%K~{XMiC d }IeU!:Gsj%YȤC$=+/6x;i_;A}nejܷW*\xcW֎r5/IS'ƻے!kiMr2ə uN%dn`[2^N`Ou\t_+rqyJnܖw=֙YFY$͆VaKi"'#K2u! 23FKM&L8?]Qxڙkp/[ЮziNF(ztO1GU*E& QZkFY(rSb_;]V`&-$:ؗ!%-Z-hJP[E&p gDɤ3B|]RCW#Vvdx`ggrq'R7?!\< OOVI3mޕ*GIߩ !<[̙{@4H.)N=(/$'Z튠}4,iW&edxddH/3M7T̨uLf5gi7Tiwb9Ũ/G 0LN4^)k'ŤF#+X!áL7k H2:}aZwf~DwH"iN1Xslu|3ԀwğJ,nz]P6dNm)ӻC)9+,fVR`R4*,6miO2(`>XsJ(\HRqZɜ &%n⡤y?B]4R/4""]?>| kOg oRB≩]~Z=XeA4fPICdg2.l\)yӾL(xv{uz j^A S_RR.f C8P^)uzj)lz暢/u?Zkfdw!{4XN8'a-gJ|'>Yf9R:Ɖᮍzam"f z_G6 vtKal&3bA'G7N]ccE0nN;Nr<޴;nyp9 2b+Vb<|3_Vk `T"ܳoxiM 9!a&qavK?$~bFYs|].<sGMۿN3f^n۩@7᧙ǀ!D%⿏>=oG :9 nߊ|:zɱ| b80O,8ۜ<3 Y>7ua3J(._dқ M!tCzɳZ,D+vWnk=´a+;H׬VH<=@ϲ!iՎwdd) pJV &|;\Ԅ~Jb@_ɗ6t)%Zjʚ+qu~x;*'0 '5Rnl8PจOv'z J!6? 5תPk ] D]Uԥ3X.ed@RދuٌEƔh`{iAs43qJ)UĖ RP )o{IҡL8#oOyJC~lsU aZAS߸˫w%CٍRBsN]ݱPиۓ9JK /B?\hd z~" Iצ/[=l/1LOAk83lfsȁ~`y@ɮ=m?,=7Ԋ*cSJ}B;08V֌OK(ِԒ~O wZUo㣀MƯ" {ѻ+ `-$)6\0WdsG5lxOnsq9R L?W{4Xv5L .nsHW@VkIlrLY"zgmܮtQ!.S +><Œ'Z巼 ݈Iq16Y5O_J$ -1=D{8A,> Z~"H{dfx/E5J 9'ۥ-xDGAM<̓ cjE_{aHtag{"b|O-Z4e̩Q-[c>o^>?hv%ivIw06@e }^L_U)oM*"A+[p#JֿLdBsV l.6cڛz'oU7tGh,w)w j'|d#ZW挫BʔMHdD9SNPEK603P27UM[%,`ܛ+04cݒ'&gV|r4^F}I}'-uP28t8"xNFzDN=bLbi^(o:|?eEs:0OG҂ܴ^ְ@uژy겦w}សM)^Luk JH4K&_za}laxZg0JBf8 H$ؽWsPa՛c 2;/,KC|v-K0$O!W){)ٲnKH\cSeJ!yk!58[U p"Ohܷ{'r9tK㢄}.W]Q/ۀ.Q6Q9!b7_8/J-ӟJ(2F4۽(mqʺB UxK7{7)R/ĘiٳϓupojK; k6da{~Rю,طF6<*&'iyy.Fvڭ/L Яh o6 Ov~+QقT$Ԣ^v->g;@[>Lڦ]wz,nI*L&kY#FRg#%3,SI;YP p}_Qy>r,f2PjX"G)*;r/Ӫj8͒e޸hQ7((Rm 1]™ i@E#| VX i`@kiBx"󬒈aN,yj2>C1m@ `,Gv@mnt;Aۮ)wa3i/4~` bQǭґѽOM"-ǫC9OSaOѸ @! >0f>|h|zXL4B&ue(G4ڤ^SA^ǽI/DҨ?`}BoO|^Ѣ_) ԇCtǥ$ѬW))(Xm$8}6-헲D ǟ"Sͷ԰k ƈ8st;4SۊIMEeoz^Sy~-"ο-ɯrMoNd6zre[CϺ>Z䖍.'ȘS'V:25.C*~:FZhz/1,x-=G{a4Kv+88i@Ew um쇺,pmTǩ>SkrJ qJҽW.WP\nٯJ/9ĝ-'r3IȌn.?OL.Iq´i6Lv$RL^G5.*T۠WRu%˓pxJ%m2%RʘbWvH`V5(y D %qLmчQRq uς)PN˼A:sipLE/ TrY:+uc#!N;kQ;" zpO_ X7v'iI47Z "Cpf $iYtH[nZ PȤ}aYn^] 7iupϼQW"ɀe6ׅ^Դ feZt)$݉xU 9ANϣB1Vgp!˄ rpSqQScɺh ]0+}L.0c{$YA 2MΖcxL-'_óa+H[`;?p ;ӓm`1$7*u#IߚTDҘ~TLS̃uB6y7tY/ 5 F;K]addEwn@ړop_.%"]CQ͠ˎc鮿eJvG=[WҚKTas{ LBӭ, tih!JV3~͐}3Du_ģit@OE4=̄6R%F1?^U^I۶\А:zYb٥䴹S đŘ{͍X~,xUg2%Z8~~ 3`2譁@aA誛4#==/#ųD7bj- ,T43 J=ٕ9kV4'ț52PI NE녍Mi|ӥʺ?֐S cie dzQ F4;ўW#oĘPn>r4N-C~qR2dySW>+@ l鍃xgLÂY*x<]UX.;ycW&!޽w~RE7zh"w*ȷ)2u T^Iza%xȒEZ;6@~1hf~VXo:A#Hg J^;u[ڏGmg}sG}vdjЂt*Fs>r'Յ~l08ټAX"VYl9,ѕj i+hH>'|sg~P a=![ǻ;nMa̘pt|$c~%g7^E˴mew DB9p;n`;ހVIw v7%* 2{2l>Oaĥϊv/Р!P+D*~tr* >qR$("RGKxAK32/7+u*$ӿMU{E!X7-hp" JЛBGcvyKXt!2®-9<q(a [bZC.GP!XРd/V%~bc-.pr&X6\Ixb,"E :PdWl3ڎ ]Z ޑ/')ui厳iJ>v 2an.#A4ٌ͋I6)15짭]gM2͛;J<Ԫ<e \C=>&#_r3d3z٣>d|X~f]q:MxOt ^Mta,6LzGٯ?;0`ڡo$ۿ,i yu"(]iK[+h=kg0+vϭ8aO7nsqNjR"m}>l}2|S?; 0tIGFle 3f ʁtNxN?|)T@Lڸp,o^Eh+k&rE `s!Mt߮ vJ(Ut Q L/w#ʝbJuPGB)p6c6`,P}w^doQJQ):κ ֽbz>j6KzM-W#[[VzBd ,Y! RtW+esQZ, O g=9"I6k/rA=lk%4PFBr;up`^gxB4 Mb ҋ {m2LݡXЗ!w ec?uW"W$$ܚkܕ \uΌ Rzd0i; p'((-S (5 `+# bC4PNӼq!\_gumk7a$)_sٜ Od&#+ïtAՒjx'5j{42J} ',~OgXpW^Uk.%tY—8C~'4Hu,D.7,D&2/Ix$ղaF1-cOǐqxVLz@;5_Oƿ`Dd!%i|UqN76\C Aٓa[t`Ϗ@z)+5MB~>H(Z7yij0;LsX3ȷ)@C*CڛFLjcyȢ,C:7DG0}O3gPoV=Hk?nwqx*w-, q'L9Tv"f{USyk? l:!⧛{:/X`󼚤0a d<9ԧT J)Z V?BZD6izLx>Ap+}ɧ2gdsPZق'Z=3_D{uANRf!@<| E7W7| 3mT*ch¦*lQ{I.+w9{tI$5 .-rHbcʈT5un?7h?N|{F^/+\? TĹ+ \Z2)M Tk%7/dQ⑟=?3XC*{o"1oBZ.QF~2$yXGQ]e5{o %V75y&8 G 6S1MǎO ͵#{S(a:M]x5Gshu+Z-&k|1\ جr5EYuU$oD-[kCv#-Y*jsN\(6K*nQM<:pM|yB &W3PDڼjԭ ;HDNYنB"v PHގ(0.n!->c k$nj\bxV<%w,YMKlFhU Ͷerd6B>5ADc!A9s.=]8u[*vJ[t#Ey%PJMx{OO7HmrJ6iW3Ba.y_ 2' ֓v9CMCf jqp::";k,L2u=WqofS j:}%a(E X>H|+DMmY}puV[9Y8 ۷rd5U4Vùfwd?&دO$liX݌PN9]>>y)(zTc8 Sq͜*UzLtZ4R nΊcW_: 4p:h:"p ! dm9SLG驍$gح;>ltWY^$'yiofݠM#xKPu{L;n&2>-;Ԯ9Ӎ, Cda<,\565gf l9/O*d1Fxw4w wZ)%/,9Smϩk{;V\z?ڬܰ=17DŽ3a]!iQs<H˜ Pzٛ\XK`(Ew7d`|WtqӣMq)lX% g :X 8ҟg[m8Bf xd*iUIVFYgJQ[U=%Gy/26۾<\p N_%`Z5&OPRw k?H;oao ̶&ghTj--}ej[/+f[hv}v{cERpLMFyebЏ7Xvo T/vsFYYxi_[q΀2_D?+˜^ &$kF/X0xhz}}+|[H q)F`9Cbx(f[fb3SrWB 5B^EIP-*V 5@<&4ש"*2K˹۠͸M?ÓKj7UKU+D 83e*[^8Sk]aXXfk;xFAm4RĖ\)eI2x@=T E2Pc(y$aWfʖ U\uC<b1YDߏp#slʔ(l QKՉK$S6t_o]plz׶\%6>TF&u`ҀB q5YDV\o\ :͐#;z2 vux6]+uQB%􂘪`tzd/ܟ`vVl]Ɇ./-% %lLyZw`Hb"CA=|Pa;OwYB/NWl0.lP,ڞ{G<|YG8P+@07o,p=Tt=Ԡ }/\gӍ1/€흃UYa# Fj'>*7fߢN|3?"Mf+\Qg\j/ ȘXB3Dw?`@2c)K2^c+ bI0I`;VCX{V݋?qԇ_}m$Rm70|!n%ŠbzWi^#Ido %w0ͪ"o"FQkFBO#~:7@kp:$(l<:J(jVhu:רh O_<~Qᗛ#Ym(o\r  a{'X9#vf>_sP&ȼ- pq$Qy<$ >ftsO.u5 %q(dM.K9M ⽱mIHϸ~7,=v1ϓŸʉ L1rΎjTZp"O3,"XsX/c?8=LOR(Cx3C3BD 0( ŶK^^qBǒf# 2]BDhD8 _G/asbhmo@Rz7`I()'51U:1x :` X=9G3A"+ABk v#w ( 'kLJӘ# R*9y'ֺaվܨ(QLEs2KIF5Z9+Y16}-` ,ēv3phpm9bN1=>e6MtuL$R;–h܉RxK6;5T ;%=.PT4"P{m&a6⫆Kq_yjo/z$ۃ>>~C-°_$$1iO;yµC"BIRZvqUǃ#s[CtCt ǫV@=M9GᏺP:Hٰ2l+)+m'>Q8,*_Cb|Ui{LOv=2PWpv J \pQlBkZF5nB^nܽG+؇E6g,!dyqp9cPL5@ & Lԗ:-E2Dʋ+5҅%1%Ј6K!>G#AAMhyq(.>eiHzZtmADږ!P%^o{aۡ&?:\&wgĐ'-|jglYc73W7$S )^s rTriJhKlAl,mIܡّ.u >[U0J*E>Y>-n/rĖp-+~3uĦkAfkzQ0At(0/a6L#EMS9NeO|PMEJ X -{+Q:vu$#e81z ߳vyR}EZ=D=dh7\櫕7e!b>l?6 r H{̚]]m +7nZl?Wd)f/S;^ vFmTt9%-XPfRugǸ5WPM{=-A|%d*^ۡJ+t I[SC\Q*jNGypTr2(NGD Ody;S̄:88YFDa>Ҙsۜ;@yE;tPv i&ʊl'${pboInnu&FN3ŤWnsT4>mGҫ˜ɷi`Er&c8x8Ԟ 9vWt4"aǚ8Qҷϗ>B>6:c\{PXgblz]ݝ Ƹ‹ W -"(FD22Q /mC8,еK?<.T1Yf8|>x_asĨǼOݼIOw,u&.*?[FXǯb3PA?,O!#&_uvWgT4{v?y7]Țiv6xʂ}.YIz}s3f-(o]x>0;ւ|B{vL%κU$72WsB3["T(+38=q3nL4<{<#/N/*WWГznpy499 G8N3(dW8ZUY'/>+Dkwyvfo+.RXUow_gB6o+Bctxx&A0oڔn:$GAv,%KS&ju8m3lKBB[cSEa`w٘Keo%^<8t6Mq"FNt~{jyl{_xNlh"݈Đc=k\DEOGoSu&[!'v~Fnev`p:rg8Ъ\w5'䝫%uD,skk8ˠ=?Υ.j@O|:Gtl%zs12|cX#gMZV2_xN'!Zm>,3h9\;WdNy&L eĔ#?Bx(~gJC $?3?Sq~&G`cTS8n&_.%atG0t x/VfFӹrD,kWi备IPpHjAʏ(1X ]Uay]k\+Vo/D%[dOk=@)3#{}ytV"Yc:xK5i[7̙J6õPZ߷sSfDc% T<.j'@N&$ Pf;

S6LE֫~FuAlgzPu4Uvܿ#L KL-E+*ρdIb=pg"`$wk+tvPR}M /dM1~_HC+3 q14=L7yW\`#|<%N8?4IuIsDV\ߙH*Fӳȓ\7ٸS>k.O< Y SZ:u݈H¤J\"x0齺L"!ր (Wm٠2uH޸ ljA۽ 8 /{Ln!3N!mVH~Ex/Neƒ+1hHOh^owdrAZ]JSG0J{j`QdTn$U@wQ*㭆Jykin*%Q fq>I-su.7og1 ZS&-cRB,| ubͬEJ d8@ϴ$j?0BφKh˟iΊH}'tOP`4@jmXiVC!_ L"{`<[,+uDZwJA5bCr#O6$ZPG6(guMfi8"EΒgq0(V /`oAS ? &$rVI1. yLŖц-A~߼єKuo~J<WoevUQ"qd qc>`irzA)O\ع$:ʀc)N֛:Ty  }pI>>z ߩk.oХWI( #otۺ5CCH/A^a&s{]C' ~[bRnSWf7C9O¹P;uow7]O >mڈ޺T}ڍ1Xs;^/.)Qķ';hl T΃*u9f 5 QU/D&4Ssǵ͒=)r:jwWmQ=q6kzR~uQܚR$muI-Tci$Hwj,u2͋7ǧAhJEdmWS;~p,}!$SR ^܏[%UTE@OUrrhiB|Wz:2M,hE]G!gF1F59gGͣe#hmh}~9AfJA" j\ev)6YF9X؁>+n>#1d0\t 7gtl3TInR"8Vܲ!#twۑWv03 `96iW^¶@ w5F^a{Bh҇V2L. /e9W!MyuECjiHS%1b UG`s+ǧR+ێ@B*A#waHÅ6) ef(Dt?1,ʩbJMMSu4"Ǎf} tZ"N!3Kh杻Af^k/-&$YpjzIVbKXHkW|Z҈n-qU P\^㩛-Wfs:RS'G fS^Sʁ-خ+ΐ *ivnzN`0 ?};`X%pi}&o<9prj$S6B9xm&ǰ"b5t ;Dk=bW5DRhWR/ѡxS ѧm[4*,_Z"MI2p=\9&]zi`3܀~K2!j$%l,p Nj]1=Iُ 5k'p{TcPi}xs͹U}U%;r"|Z6]$3b.c"s?QؤXT-@}T}9laVYf@K\k gZ㚗GWKأKc$v7<*#J`(ΌaPRln.-pv H<,t^AHaQzJ .t=:7N^(~M+Ɓby팆椆8 Ġjmb/'THlG6Cܩ0o3mtvIl/s>6\}ǁpZVӏSbWX8ZB0Fy4a !wj$uX&V;rChfTBϲT2ѯ!I .9J^uQ\(vp(Qt|Rpwc ,?vhIzw kêx?lNT0mpp(i3 Efg~ 4CͱGup(EAKN#zgLjW:M:GySuثy Ò]%~hx6`ٺ3)^;ty6b9gL+?rG(m,rR/2hy(q6riA;1tGG]nI䯋 F+M`N)Ѕ(mE[os|m0:G2'=X6ƴ){v5n3L؎k}oaw9v%(_XOOaU:ޫR07A&&EWϢ UIqLr hZг^ol=ٗ y!*H_858l aIɘv㊔E'UN+/9d-jӶrKFjl\b@m2:[V/Y[ =7g.eB9#8鲏ΐTxk6^_u/B" |7% EycH3nU"p; c7fmTR4 Ľj`ؓn{0z9;f?Ly:5J|iHF4Nշ>c+Fp`;O:8:6m:kTڴ+&167cz!|DW^#Lx.L g 1P$ B$?yІ83;Aؕpŕ;ҳOpX|R!VE;@W˸Qv=E;.l) 0rDWN(ڊ6)yAEh]9>'*ȏKODdU͈uQ2CX>E&, $**G$Ui݉RŸr5G; g''wf͕:^5I!_]'}i>E@*P!j"J1FVVzuN_qs: R:/u|VD_W<.PC6s Krw<9݇y֪ЃЕFxqA:Ѹ]~NAZk@ZW,ذNklZ>P䧪tF3 2ֿAaxt w14TVnG a&W%s RzEظbmvkk۷V&w N;~ˌr*]rs&:,&>TN5tNE9o:)Qko%\MR#W+2/.91Tfv=|ڙ$JFWh`d{q HzFs&{y'Cs|$vy4- 0l}3;4>٦-J؏90pbJ 88Sze}`窗e/7@/3vCަŵR%&b: x]P*ǎRJ$]-HI&Gk]ɃIn:T3><ݟcOF%ہILAOԆܰ >ZnnyCMtCDĦ>2JwpAB0iaM*cāX"@99Uk-BgTg:-g7N5:*gLoKq^nsGוmmtφ*Aj-vv;M>M)W!5C"-"FoAꛈ&z:K @HdT\v8Iz^_B=uzKCP }bz$ټqł;~ Ү?99(J//k̃C#nAd]߳D2rE$S cH=.·UZ-[sO>YF땃 H Do{pG,/%x<`ap m=L;J]eP)lfk"֡e??l9dgNπ[yT3n[Af#S0HXQYz|MѨ SR  ν ~TBFlFė bkٰo mwӗ r Nw_n45"I7Ye-VӁ[ڷtՙFw 9s)VFKl1χEDr6(UN&MN6ƹhUہfj=]|$oyO se?r&5YqpcWn'hDc/!Wm@<"lJt5QgJ0(δ#Æk9tYD0B }ѫ_ˆV9?ۍv¶+V>\bDT1P+ic*nJ*{կbƍs28APebN!*3Bٟ{8DpA>hGrtm2ÀzHqAITq Y=lu(/0c(ܺXf?]6^I"0]j3u-RSʪA|@ld9l 9BXiP|Heev 5(-,oMOW2f\Q![ciYv)lޕnM}%Tj,)R~SӼ1>eQ] Hקr/gbs+ح>nYŊ> eCw (gt,6c.'xhV\oخ;&v [L0j,]cgT/P,2 d0J9ЦːHs ^%x éMtbW vp(\q9gԤRrZ#5  /,6G:rM'<ꃡQyFLNn'3^p璪qd"Dz|F-~i/GΞ<~A^L h,s.*0@f${a{Ʊy 8G(Ehju-LLM۽}V%5J)..!ǐĢ9uqF4(.g l#*͋E-CwYΆ\@O}x#)N9l 'EQtVr\H%Y ŖȔLFs!PV ,;ɺB%}dD!:m:1(ƱrBw RIx30#1I ^zZk@5ҩ%{TQaKʯ嬎 * |M- '6 /-`d}Zg3L |2㡣#P׋qR{<\qFn *[gcX/_1un *ҫjnCzcIx \*s~w)gyg86ך]N(^FJz`wj"4?ˆt6Ks ;fQ7aK}V j|e80&H'v^.n+¼ޖ*b9Y9r!yQ:Ե 1_7`Eo`_:ˡ+qD~.(U"o%bD1K "kdv!ExOreqUtDWb|ujuUzN}I֭ ןe7#2͔kP! "}@'ĉQe7EY-rY 5 c F1 v-n572~sFxaäPX "|vmv OVEGR]2gF-W=~?x lFX )h^%LJzV|9PH'+>K&1!ahɗ~y9>޻T!i/?$Fx_aB8gxeTqw/0UM 8P>I:9NrJonf70_t -!vkt,H,W >o[W!-:2 KRC e5jfUy.a`WT}@;'B/ O}xƓLלfQ3Ud\]/x7$yOQ7+ PC/:FfqZG~rabWsVrV*l 8lFjP{/s#!7~fB# H2Vpu8K$W*-C6Vտ Du4_CږDX\ѤE xa Uz㞿3N -.IШE Ϋd]8`ϡ0?-abٰ~je= Uc$!864T2QMBF\ Bbv@ ΅-`Mv]THJjLԑ߁ V?`AA `{֣F#v̼TnnPe'q,l=INgh" V81|YlM0`I+\q#U!&@l6%RlGOWE5‘O YpA.u?No~ib)IiF>;JQ _~sxiC3#630"xKVG+٫1 6'70kf'GE֜F%gw s4Mf6ODNbtE0~Q; rx*ҟ+2'f8O@o/J\ 59D[ ")5 7Q Ue7ic__QZw[¥yP/O~?01EXA{FE"$\gZr%_{Gy-ݖJC"ɁOCP|ҙ) ${qY'a;9/!]]%yh`lYL5?- ~M:Vc$-̄p^哉Ѯe㏺(.wmcE"nSs<=jéG^g֌ *z~1a` 0Hzr3A&. -[Zj}CFZh,uoch*?j?I뜭5y#OUh Y}wШmMu*Wr++Ho## d$"r! _g{t1- Q6U/iZIi'N%@Az0Cb^Mz(yzJ wcX 0Q}F;jM;5}6UFz6Zrx-SFj Z(ALtP&e:$*)G04^en#[IMI꼖 MD쯞T!wrld 蛨YlCՅszB^,lzZvgD[`ŕeT%7$1I)5&v-ٝ?vmT[T=RJ#K1GOSn . a1K崍 `2:z[IQStV{Gm Ɗo &8u 0I9`,YTǩJ Em {Y+oT֒ Lk=lw/&vf~;:=7D D%/cs I# $]@j?9\G:k;ZŅv,;N= ]팾^DZ ~Qg4uijѵpp@IN@zHX1Tǰ.w1fIu뻩nkyY!EY'^%В`[]Q0I4Truf́:6B`]^w=N3b&Ȥa`l8^X.얔AU n2.]p%c&1+&DZm:ʹ?N{r, 3 s|\ N$)&N?GHE${pXԪwMϛ$˽>v\d$ /'hxڽl Mk,0/YTtXyFwj:kӫ7N ׫k59fMgsʼ%^~?4JdR~xyBrxk{{`h7H;f,3kRy#R%?JM|BbCOM @S@"6.D^#O6HW}pPYuNRɏ!~`@_TcZw`w,k '&"1-wXY#SۣIGid!k)zK ?՜ߣ~V*Q,P}ӡC#%19n {(_ mgokArrčx΋zl/dBX"FS68EOc #u"G~|&3$ zƫW~==\ rvn}|;gFܞp//h <|AweWCTrC95 :3w6NfD@ pĤvz97(M{R>9z~`10h1d٢a>RiL GXYX[zA1a6 р ӦH&J" Z?_.D,NzgL:&|Ivr1=z:?UO"0oc :ҮNcu+ēoOF{B|5\ϴվ5 6 Lq\wDwX< #>f|<@H_R/7C&HsZow*TZ$4(#֣j~S"o3OdwRZNaY/4.֬$NFt^$Lݶa[#0AbU i_PS[^tsc $ufW˕'S꼥B w9IX2y: ߚ&#:Ju]R %a-FZQV]$(po,)+\5!l=Lbs ];fv]8)vwBr/>NeБùVIwߚDW?,Iy"U,Eό qQsVL3[Y)myoxC;ƤB.2kfadx]g_q;uCHUZͩ[nQy.r_Ճ85ء n9'P:" VסOhLB'DpձеOA_W:nnD*cNI+5jsbj@$',Ea t;ݗHxb:ͰT͂!Dm-Bڿ-< ΋:9 #܌NOF%)vgG̮P<24al'T$1CN8-&kTZIsWpysgs75՞t@jQJf傰oW"m&i,gmBC\. ˦g0+KiX fS48Ӝ J 2XsH^r? r˩uJ wQ$orAUˁP2+0I ? %0) I/(/ű}hٺ‚<B]=whaXԣK3dTϙ$T%԰ʲA2dz܏J%V0`UH xyp!;n.)ZdE̓xb{6{Ǯ5xQ%҂+dWxP벃#4"o0'0, "t(̙xP6qݳL3wsWq! 4azo%UI_Sي{L/hj+r6e̺LF}P|3GFf۩-4-ςyr1XI笡j%;PXHK^czj3CZ^9<2?cD@j!kʀ3̣4KڋlҦRKF~!Tg}UDK2'Z9Y:qiyOPmlQ%#=#I7" i%<ϟxI5tʱx^rthWfvEOH{>PSY9i5uW{X.nS~WGljk=XLzҽO?%'KɾRR&؇ %~I)^(S=mcRK"z~t0$c+T3h3X]k.~YTf<K2DMh ?V膛%j'`Kd@>X~ ߌKZj8EQ-oS?{.bd r32Y"Ԙ3J^\f+c4Հ u%{ (Q:} kS@1XvuFh̎nŤD1u8FrM6IfJ(U@l˪w;-Qf}sy&QOMiO@ r 7?5- K WDoP ՅhGp=SOM>0'5<V䋥 Wn%hW #yȲ,K sI1l ~ IkAe2A>5,kgt%%E>͙? T 4}fbb 3LoH;L` pB+wr).3d?gϺ9m|,0n>P~&\cޣrv69§wi!,+N8>jc B Rv⩟,Ӿf!ϢpTYԊq٧(R+F;O֛|f$""U%uՠo:`GGE&kPhFŇC-vQRQ jE%˸'s.&zX ZB&p^Ap(z6?erSExʹYc2Z\Q눛\`[glF(/ȉ>MRAR%>EXFk*c[a4+ٚ%B㯟?]rc'ʎ!-2.D{J1JFt^jS;;a׾ ZFEI"8bk7io ѯ|)uNݜ@Q$oJAUN w/5pнcuc1"E6LIlMNekĤ4R%]!^(9.LGiH,`uJEX]< *`_`U__j=h`גo0QR!W?hB_$>zj(X%tۍR|[Ӧ?9,18UeXV,8VHkP} 1M?Ld c4kߺ97˽:$O[O]ʋψۘ|i܁V_.ӳ+M03g [M[ #K~i֦om?N3|/9~5_ I+'fFZeXw[351QO-{`gjjE~yYIz\;wPR\ݐlw<"<W/u7EF='9.]#U%T^K˂F}.3ڦ1.yuGJ3]RI#g)Vo?[TUKԿBh%|1OKw 4"n)J87n|I(e?JgiN2J&Mm[Iv+SjFD.s Zn,WC"`sMY[lь$Kd} >RT9IϾhaBzUV欋ь\@ײ$i ӽ/ɗX4P4&,)]lZW^<no9m/1Y7LCGiJ{o_mށSL8fB4Z)OE%kKZU VFHG8:"WFS)2_2o( 4s!^Iovg{=*Kځϣ/ CP&3Ou3މDu=YB"+R] ~Y6[  _997]eA!d9sUn_Gʂ @a&|n۟ ݢ\pMbf9r_ ѧv M;gj9uI}<J6yNGChqAe.NhPnNHI*u dabn%,0u~u.HrB\<む,S vPڐ`4ìW݊ÂGm;(6c6hh՞!R--)՝@ Eq|ԃl.u`XB;E }{ IeYSCX0$9goUHv鸍|*<9@\n!ÕݰRJ\f sT"YTxU0fbK>-y* 9kF|oۀT]%ϜCMq[t_jH%# az8>aHylo򡸽+U3G÷-M˘c#*1x ] 0/RŽ@c17<.>z5< :{Ү7Xkrzb|A6PnMW DDD#o(YVeEĤ M5%Ty.:F4"YLC"yg{%g-aF:֧J$C7Fgy`{;B T: 2 aC0;E7Jwlǹ\F:1 RzEas bDj\ry]67tM>?N"hf/$̗fv!sHԹbȦ&t:?)$!i5b&QR Z[bbT ޢ2~XȚ-e~5A-> UqEjok RΝqcpfglz6ñ{vZ>خ^~B2Z7>}uF> B. d" & JJ3!hfC?n[Tf$f]V ^u?a~q'G8 vm9jz;~- 2[z: u n۸f3"/׉Jܰm%Q=cKHx.&$mJE  Psmu wwGS\Oy%NE̅*zK gQ`l:;xaM|''Se7%>ZQ __R7q? D jw݊'7[k~I3p],@}Åޢ [bk˜,Sf,sD׮0SHⰮk2 # 09򔺸+1x2 \|djDxuR=jM'+Qo@^(_N>Y&%_]SS0 }@4O,c],.'=㵐BލI~D"b9ډI s5wy؏qOD+}}8Zj~HOHL6~%򿞩;C:`ɯ\}~O=W[+ ~oy؇G0P<kw8rC,:U;WčH'c:,Қpd韋9G u X-jXhmS8m[cwI| 7Q>5AJKB|eeo|4EV2,tuS,\'[PCo'AKcOq gg/=vʽrٙ 1\2y8<= <#zQ u6Y>B:볟ܯd@鈹°AfXˠHHQ(_$v2RW-o<.p5b7a]f(:R;LpX{G%tИz`XA]u0eQ4AV$ I; Iynq,C\C|dx{"4 &3-Cr"gĥI=Rf^vW֩lHc HkoŬ'Gv04$KW+E[Jx")~>#ON%2UW  AކɄ%e!\K$0 eu9VHٯN)ijΕv" }&K?qC&.6 =] v nѩFYl\h|M[f% P8!t_}-ܥb&uP"o4M_* O0C"dlKʪ{v?Wqܩn JYo>a:;au'l0sDhLpH*8b<1uǠ1侣aQ YH9ߟ74GρŠ9pYrҝMmb x7kM[~E,֗7}2Q%ayXyr>{ETHY֨ns6䮽Yxrl_wkqD?4\{tvacHIckY_Π[%_ֳyxrSj68?ǎ`8ycgUcߨ XiSTUoxK=rDeon hYwdWXP(,>6mPTQ 7nx.nhYT?΃]!tʅKx̨ߺWn -h*cc;cO)&(1Jd XG<̛{Y5{eH8_+3v 8)a=Ur7|ѡJdsut0EV#g_ENɲ!'}X;l N W^vvV{;8ɭk ! Wyx}%4*0o`Y`GLV}14Ы1XD0!|~t(\Rm !C(6e"YzP!tE,URx.,.TNG azS'`C"<&qsW?Us&`nQ,Alq)?8E RTԮ:kUS Y|@1$͋J? nd镘=jMj?,V( tQ}"qk_(;4p.^E5zBRT:7nPǬ${KV/tMD]wR.<~*BG-^CK>~A\Ʊ=I,f-lK"aJE  }My UlQ01$4DE99;eVU@ u44ڈ|#ýab< F@5܏kn.3|ZbƝ[Bz4aHsׄ!0d|\IIO?ikSQbvr/@=3 h7h(./!9@(9kJZIeN|騷K: y33%vyɃ_s%ߚ^َrÇ Ɏ39\:S| ىYWj2: kN-$W&iq G.:'43{`(z2S'VVn˕m괽wbPJ>3L;TT BW:ThzoG~WN IxJ]lPZ߄:)ԽDz+_ +Ĕkt.@Wj,S R[-3p^.|Fm-r @H^a3p*ཱི@/}V8'f ~ik|м7 Y=]PK3Pyl8$[>Ɨ_2J 8[憊XE)2xm#=7Q%MWbx_#BCsHƈ烦njY wSpy@c,\̉ʁ nf Kqm=>(3㑹:ת NF7d7?l?hG]HD0 KYx5T3+])  Fj\$Xm빗1O*13$mzZ+g4H&UJ3QE2ϴQVY#V,߽bQ~U+k&s ?[M{- ~IႻ 5'%TFc|uen+8$Bɹ,*_ΓN /d$zΎX'|L2[V[d_sGTrWX(B cP<&Ǎ3viVXȱKm;S$,ЬȘz ˩4?)Tz2&.Nې $Md~_GJJPd߽*0vTsjh1{^e*SȲ@NL1ʉo Z%MZN8 MK>~ae`HNu7ؠ2ޒ_ VZ.lx73%O6B`C%^>!x *[Be h7iMǃ~-EFٴYZVaHc^񅀩DP7aR!SlɱG-KY}WXqn_9UGg|o|V,B NlKpoL|' HfXFл/ ,xst /$r_4h6{O]&vr,%{CA U.b`>"|TQV+Gw(1 ~(nabEnk/Zr>#L40;<5}ką<ÁH3 y8!=SgS;>a6W[_7cm>y3\-59gKy5SFXttS#=Q|Hp7iFmB^ DiwaGkMO ow󟻮E\p׎=~ٺsJyRE%PaKm:2}jCji/-rcnbq2FH,[cLf8\MV#mlЌaB3|5Z[gu)QXkH%aR4(RHw?4x, v {Ƕ)8ҘT^*75,הhCXgHn4۫i#x*2;@,:z;4Y{eG-h3U"ǭm {9h%Ê|L8(V܏ 9 yDf Z3fkӇzf[؂eS1 ||+w:󁏵X>CDVL*Ϸksz#PCqJ 1[CPZ GN S;  (ucE]A)Z`+MЏasakB}4F_k[Y:`sQI O7Z@̗[^cQ(RMi U`|_Sӟ"RSu""&HalJi3G=,q;40?1{JB]4p *yCqEmH(ߥԖ[mmCVfspݤo%Vq!+cň,XreaLv"$;+&ȍ"ZgYnL]eK0w\yu2QCfp. .=)u1Ș,4m(n >PVlE8 )qC&@c)Mxƕ{RhA yz ;s3Qc %.rQN1}*ۧ |oG)wAPdT JNS#}!qLЩZOrѓ 3Ri_HLd|kn z Z=a;w&ׁ4<32.bKϗ3}YWʸQg hq'SI=춷+d=WL&}V%NMy_ Y47m}9G; U.^{m&A<tF@(7$:10qZWZ[VzkƵnGG!@$E-;GFkW?6?L׌]eis0!$bᗅ v=ĐRdpDѫH= /^MMwk/zBC%3UB=<5h6~Wa6쬭9EX(*h9 cbD**YNy,1mZ[ެ^5gwNr}Y n! w5G)$`M(dS1HyEځ{ ][_JIB*Q_&3 {0#^vƦurRDkÁ(-֠G383 ?xfxѨj,o~ECC>]9h:j >/@|GyA/]FA@zID5(2ast'-}AKdTXHOU{E=s2Dv =Z:JX'وS}h0CBlEj%ꇼ8"f_>ozst9tsmb1d9]OW"/Zzo+W y1h?sگ`XE_TU7 oS[=o++LHbRF #l 6aqo4Ҷ[bOt./vڪiɷ. @2EĪ+,<'hxI3ɳ=zQ%̇}@n&l1X''GTIsF߹XD7$m+I6{>Ɵf6a$so#)W.8r=CEPV}Hu AJNג]:Z eH%3: 5DC6oZm\RP i)zG7X $(c'NO7@-# | 2\zsfK?C?6ɿ(I&bgA_b|0Tw8l HPՊaW[ȭ7Z`]%N6*ڱL ]3A((2)s+ Ҋd=dfȑ-"_`d? pN=jt' Ymq_1>BJ#W<&{ǵïу0'KwC\_.aɱ6r/z <9UawU^ĵ:{5>Rxzfam"9ʾ?2r*B33M2+ M?*%0)eLi'M"<[.k$s"l;κW6`7XTd:Z-Sd vj9XJ7צ,`G`!Vdaaìv={fmk(D8ځTX+6|Rϗ]s~dnIRXDIX+zR+%L-UD:Oo.L,o FK- Js(zZ뿍-9~F[Y,°C3eګ׳]ay[YsG|bhZ9HI?{*Ŷ(g Kr_[p?`+b1"'n, JK~D$Ѐ*+IP /1u4|h)fri0lkY*JeHc' c;ۀa{ Aкt'IZN3Ey~⬍Ezӷ;3;,d+/g>{\dn%TQ2¸Z?M*-'~ȃִ_ l V.OCh;YGΖG7^:gD*Q(F]ܭI_^3 |;R4)j$  _N|`0g$;78w; zcD 9ESX6DATuNN8gN m.;(^ڐ4M~WdY*<^ϥ|[e;}.۱" W۾L.| aȭ=q)=peFz* Qre TޫsIU8pFіP!Z,aH2yc)oґH$W!yF>I5.LxW,ѩ -v/a)1|XVsJ5_ 5rS:H:w0z_ Gh9ݗ ຖ3nJXM1zx78ٰ7כ! KăBe*o2]7{M,]0j| fN nEbVy&01CRTu3%q,__k5x0P 1_$,eEgk کR(<ѧBk:pIT8 +\!F0dK <0;7 2%dLI<󛣹j.g5;Ojڂ&OwKTtQ#sؾ?%=Xm''rT,rg1?;sJ?}*/)8 +eM)/1wIRnR !` 8[Y*Rӱ=S @7=7밦$B( \5ugcy!ԗg/gp_[R0).B<91 /)˷DuO!HchP+ +WA\#!#ecLTN\>ݰ龉%;!4هm&'\ܓ(v/7 Y\@9ιBb}_,AiW{NBXmcib%CK ^9V`V6 t[:"g6\an'W}r5W A >;$Z9p2ӡ`Nk#Kn/G-3Nhy`AV'm\u0lԸw2v(6A=]ݳv卼{T3Sr}11ٓo)wq?:xI=';~{[4` =x$8]jI8#}\i]2]8?f<qpKBߥ5B?׋Lf~(Gji|`(ɷ/JV Zc+/'&ޑI@–g{$[=oƒNuh$c$%^; {yئp'n`ig0bNxͿeNE 2dd0&Էhqxz0IׁBGicM7o;뗏lg >w-80&5\[khcnsв-~{ytQCۜ>9mC7w#aJ"|tR~x$1w>7(,&fcp2el+,8:+%0Y0M;up} .٩j8 @|[\/ 7u5w.iD=ҳ` ynXuz^BdM"UC$Ki8X|bX0qhexjf^例NR.@6.8^^irXcrY~~nLZsVj*ڋ] Fʍ;Y;6w8^`1 7`y#9>Q `oNaL|VgZ 832 8AYck]`{|.B'9:)yCbbǣװgg诨Uj&.gI=xH|JC4fUUtṆ䅦pjIE]OkܚەB=?fFugmYeeuh-C(ym? wCe<雷 x#[M75#G&Y[ɰjYQ^+uk\뎫6܊vgh#Z#Xz\VZĹvT|S=iue“K̈+k\<1@ 7a3*$$΁20'A?|"LiTC﹞Cˏp4la9 mͭ,BegW*ͤEPx(#APͯeLB1 6NRT EYak9Gb(J|N>wzw{ڿ[5 z*+d=RƱ8/Z7#O[s=ѯ } sM!ռ(phTy>/HcNrvoDS"hEP\Lb#MaKGԣ6{TvIq1>0@bNǐVMn;F} ֘ Nobx&~Z--d{}WOSM6m a DLF=i>Ym7 zXE8BBӱ59ӡRpT&C}lhN7Esz#QmE1;`Nfr `^@=X҃lxFM'_Z,lZv+_ 9شj>1LPj,5=\?k ˢ^yg03oO B]d(mٻTf Te׆Bn8Jku$3  {)r  [@JSu18iTpf~YJ ԫ a = *Y)hBBXW أ/TbgqHaVm6E?Ig5RYS>ōA2LLvtc"@:-!a&eXۭr gXODP;nݛG5e .D*j%PgJtaXUW˖0KK0H?U𴩁1/tX%!>p !.?mIaj&bD_6[ '^>#z օOL eVVgsYݨc:ӲI[M$GUi<H 0黊Qu>Wwk;9(.?a?AF?7Z=dؔ %[}U-e=<*!l? S<)Grɦvow]X͍R+ܤ ![G Cw==Vj6ȢϿK#X]KCPK7˨ ؚ+ȅVΕ#ߖ,.[e+ Qh̺LaFnö mPFv oV'B. & Y=9t{ h2LbF ̮&`O^G%*Z oK~Dg_=M‰ʒi@|24ٙ جu-+f)ǐ*ԶeAyj2*PǼk lS [ƙl RmO̴Qxtv@ޏS_S,8  ?!9a7{g]8\Q~WIADhTlnvUmwlЎ0ZS_YA9p* ]Q{gTH˔%ɲ9e\)?eYTիLcΪl]V_ȧx.hg$9*MǮÞz"4c<OawĶI:9*c p,?ԇ衐r7E[ɪ0TKHk<ޑ1E9NzExH`N7Ly*]S&!(h*Ģ&|QQ% q29.GyP`@Q{; -Vs0LJ)Yf%a&w"zR6̈ݕU<>{Rz>!lj=q _SѩLnu옰0*!.`<H11$#q -Ek  Z~چq*i鏛+~٬G~6'mM!/tIfxAIO2)0٦tZZ1`b s|ő&Q/l d/Gk[>龬ke3BaJn~qR4՛@8uMĺʙ3u;; S /3wĆGΘuT C휐ˤ j7ɰT"{EoxPJ-` J9`ҒX>  af<~ԧiX21,gJDD{|9$R Pטn\%ҐH7W`@`w8N:ʩ-z(JYiq~] `\O3ו<墌:#ry6?Zj/-M[3+߮z H8*ܫ |ɦSѳc,MgnLn< Mv80y/u8Q26D[{",ŝ{0x!Cld9*rڤ_ g`4,ƶ~a׭-UZ*{tNSեAFd?/k_6PNnMC Eͨ+kc40}w'u{U췓.rΕ|Wa].g-ee<xЁΙW8 eZ/W쐙ay(۩\k&67iVcx5"[+m e v#~/1DuFhEfe}AS9T֭Iҕ3+~h48s)13iY~q>?gdAg&åŸfKIWvSS^!SMaxj$>#?2V`PʡMDӯA%-t{5C#ԔB4^Bug!(C Ba c]3zE=+ER_H#G< LdƮ[(g?sjpeeAUI} O8 G('`utOź5̆6)wVhl3 V(5 almԑ?(Zo6#P%P{~ȗ>uOn@ Cc7)}̛{=3wa~8p401,"/!YftAMT(i5v5d_#ybSu`;Rz+bATx?p AlS9e ne:=N{<>b{@o5]ɰJwb}ܿC]z c z>CQlڈJW2Q,;:Ԏ߁9P@g_+duJ"ϦBY!vmFFzi͍kH:ӚXUt({a^T&\֒> /KS͹;* SEn1WmB)fvvLA \:Qj@ :U:%|$9={*"C N\u` ,07GoNxQ|#R$E .c0PĂ?3ջ-|ëj A<Oڽu/PEAjA53+~}T0mm[*t#=8o漾AӀ6Y\~9wWW辮"eЊnfye@?tSd2r܆]4'!þR/xi]SB^>aUbt*O16~,g"O?)%&s0;;)1;i PzVƩ߫3_WIp׶"8rP^s7!]GcD{P7uW5q5hV]%<ŧ`=}2/av%;ޘ>.ZE2e/85TJy:Adۿ$1:i=^-׎S2[RHۦqQ" ݅VRxxtis#ePx1{ÉZU/MzM\74z0yԚGJyV!́.cY}| [6T M);r9AAILs;ZW c{ճ+N-["\,/8 )c'f{ח߱$++h?NQ1D<>@w.Cr 9]TQwX4 I2j?N!SNcf 7wރؚ*/$X`CShz`+A-vu}) )fm5ֶw`Q!{%1wtSz&m6^?|_N+RA'lJ+3Sڬ0bBhF]# ]9MexW쪉O8|P6BhKdo-lzՊJEN6'Zd bLd?UYO8hs4t.0Iaz);0\(Ne l5Y+XY7Q"8y5dP&rqcȪiqm*A$`*ͺ {dO54`{Yi|PqJPs6r52ɜHT'+:PoՃiĒ"/˃;, z0mӻ;CAQhbz_%wmD:~MZB:ԎMM=2rNݏ;)nVve>2.Xip9n`$1n Wl.IBs3u2ufd9K#da\>'9z;c8 y2ZC e~Ž#T G6ٶ8(E6mʾ͆23ۛr캛e0OQS`ґK@_g{᧝7Yiݓz+_nt'G]ΰ,iZԵ`j(ʻ *Jpnⱦj!$.gQ ǑRQZ\U{׿g!wp%H;*! =xYMW|ֵ"+1Xޘ[i0}7 M4&KvJIoXO=g,W;bSݔzk%|'n2wE5ؾL4ԧZd6 Q}bYPVa+J 钎BR)=THJ {XÈ -%X-n(0>+c+_:*[-ricK"`ɹ ;^2)#gI7v=UZx9:G*~ί-_b\/. _ \{/qVDIˬ[hpyog·ꮳE1FrQ+^ -ͳ0*![PU΢3[rU:߰\̧XK^=Ƈ<=z)fK"ue8L%.9x&\g鿎{ȡ)p $O-T,{dkv36c2fmUkIѝ *pYr(D JM8Yʦ u%'@IU!.{2#F'I֗CFRfaiLBOބSI)ֹLfƤ|U?^P^%co 9>2V`f3w;HHY:ő?0jU0Ds\qtV\}(<rP$[R'"^V*MN8:%E<؝˟sp+9]͏)W.8&я2GNt{N\K6vp ƀĻ'zv#L*}GϠm^e[-2D#X\iȢl$ep}K-LlNuy|Ϙ>׺wؑWI+V~[̚z{qQoхd4˱FЏު<~ܬ V:kWb,Y/Rԩ'd>fW2ԟ]לm rGA%|yQCIl"|LR(RXR\ھO4ޏ`Y@$U:GorbJU4VAFL0dwWa hLU'Tś?4H0I5w&dFU@hqOo l*!ZpW4sM_d}%"w[܀ݙ?T_\jm!# N+ a_B,]@֬QG 0Bm:"0D5W YHo~ũiid|g{9]XLtP,Iz͇r-mm-\phx#{oNA(JccJqT]!Qžqce9HxZx=LxJ!^ Wqتa94gmDI@`vьY3ިj5a0 !5;';|6y.{;-gp=)&4gX2xZb}=p|e~tXR.%V a]Y-{W4Vc31x,@@ĸ N {hD D|@|e"~X\D ڒ6pȏpɕ.-x0HZ%۳쇔euIjHW 7U.btXki97biqwvD&īD{; ĞF XVD/-#(<w"2npDF6;kBM!ܝQF>~=Hi^s?C=<0sV5wIuŵw\vtfW}&.db[-@#&_%"FF5FOBpP^2hWk㤩̙Y&ׁ{GupZސYάM ǟJ/9:QapAy%{Ѓ?<ƟiJz1o2ʼUKO E\ X ӂΡ.8$󄔟WVS;[2Ho{z2:X3%M2`$Ԇ"L_-b reAN\`BT'W\{v=Ѝ57N_ImCg8wC˛YV 8BVmU/-\z+ك]欭G3&yE2y*FjFM@L\_OYm;4ntS~4޻gyzakMT=nkjUwKҵuO=~wh4n͸w1jO[4v yMDP?v*Q|C$ `ZgE2oBVү էM!Ry2M R夊  |G\.0`?"ZDʈS-xɗbD8o%X.ԯn:zޮ^.l%sO1HmI (vg|?UhOP" oϥ{DjP3\rtoMeH[\j90vn$Yj咢#Ho݄ P2L}5uDh[*eD@.r' N8?{0r&zx4|Xod ZX;Mh4XXp^CaG]@oʸ9 ʠgg}7qLQNU!`Zre4Ja(c&cIA|y#˶)>).'8ALX>{wOu!+lJԫ D߱I,8-O5_ȳ/xZfIKEF/0]4(Jhm1vŌW[ 3fM`wDkC+0u2"C)mc:bfXF$[NiRŔ 5ŭ((70{R3q>B?iLU'A k aVmus8NAng2ڧy2DY3 M0'j>ⲙkń֡3EG]􈻈oX`j_ U!VySKO^^xPy$[A ˾,Iw2{YfS ݨG\"IHNOD s%e8BϠŽz)@BIv,nE>mZt۴SE6\`ݚLiZ{p*g^ [7!W8i譤l\D36,55د+:3`#',X:@A+\fO(rÌʲ߸Z5ŷ5,A^1U#u]tC)fO:!jg=ma.?*/  [j8>Z'^(ؔ+$[Mky#&2lqF[CX_<rF,YW Q"@V`?eЃ0-?ٱ&߼XV9FKy +zNsX5>WwGjQݺUj~Ӳ< ߚtH]="oQ:G%d)Xmٸޏ}!aŚ_,@AYfLoDZ_S_y89qf%V!╨.2)ʙ_nM(pEԞm@|)>cs;jI<>qZbs=BX0Ǡ].~'ʼv<VrRFAO&[+f||y1l|W^2_׀c'k"Ŋ/,ͻ+?c a)(n0Çe"Io!kFe`1,xO9g* qR#/iÆ~B2;+IX P9FʏX^FKT|V5*X^{";rj%.6#$XafӟBt8ble48պ V% ?4ۧ N-kU#Dz.GVev|86\fox?*cf7&P's,.66a|vn/p0*XV?U[7[")7`A @JNsݟ+d &WN)MA"$A{C؞X :;kܸ}G#$3dXTRz(sva-ir;ҁH9OdGbUgςKLFߦ|RXYĩoe2$i+7=:v*I})  6'CP̌IDG)+1=*0*Ri{BIa.?k]+u>45dd ~YoI#ڔʟ"d@^>чUaH7h{'l5( {j2\R3J0- }t\Q-6دW5 Uٹ%O`g|4 K~~ɐ|b![kS'5yhcB{ A0G%W[AdKjj4P?6(h| BNwn@@ %=KZL1/dlہ7@Yj9,\]u0IPX"'bVL$^@z!^šYHck ȞLz1kK[fX9'ZA/)6 Bp0G=k 3 hc`NA ԗ,J4+@:L߼&$W!I\ik>Zq3Н~mhnDW?Mm&qL:ΈV׃_u v$Ta|]>p0V0Q#e9~885KS_))XƯw7G=N`?2B==*W~B;;+&Oe8S~kS(W0Xy<,:^z:n)hV %RFDVgز\yPr#įۜu\?>.XԧP  C D ;SHGi^FA2_~#6גS+%=֊h9,iS$',0x \EQE B퇳1A,.-fcO`Q~%w*E9Gp 1Pl bϕT<5gű^ OǁwfKC|EgC!⋇ .[p( m1<ڎJF(L"fG h#ʼns%(X>[9_[R׋&#qO1jo1A+YwO.f3x} ;mjZIH~$I@HixOV[?e.㚩 {=5Xt'W!wރ|Ҡ%R@>!wQtF[@g,aSj{)7ၤϱ$QQ'N5Aߐ35:5!~Cd@q{3C;?-i.9ЦMnb nB8YzuDDP!M^tnwxy nR`.¥/fTL(w;oMFs]c.XafZxLȂEjX(j+txrN0[aey% |6VjoZMt_3 yU(D&1͒ )4; Uؒ5,vNpt[8r1;#e^ڋL7zP=HrO*7Ɣ(ct@.M>ZM@^:mGb CԶĻ )Kֺ9듲z%N k.l}cr1S[{*,Βv 5f\h =)O[_X{n6l% 9@X!*Oo1Vnvac$-}6= F\50rl*vr)PT>_8&jl5h0Zol'2m'KPk]<"h+nI bj l &t* X)w8tuRSeΔ~ #a)}+#f}%:\5no  }V*g ;Ȟ\w¸qNcoT _E\Fq<QͶͩR-[ =9,WxmmsL0bi'C >D?wf11x)+ އd …fJ@:% 0_bgv+e9"UQ{ e%CKloPRiQcR{zԢV<8C?05eî@CSeĐ>"Ok6) ; 29T,| BXS 7~s#{g#M|?(<79\Ɠ/DnQ<[@[ sγeHbyS`\&.AgCn"=_=QDeSH# \2]l CꅛkIuݧtoTAa/JL&Lsf@</e*p|  aD%58HBwpyа][lJ:tYvcӤ>`ױ@|P2RNeIBb-l0 LqKl4DBkZ|O-=1ׂZC. f$B^Log6ȉ8&SP0*ݚrW0242Yp[{'<@ L.+WT0a/He lXܧL_6(Mjx^١cԸUe!s9Մ\#(2FtgX&+]ӝ@[>hhno'bzk - |IjQz<PagT g=ҭg/&\"07ւ2&2j#UbA'#?q&ƿRs,)!^Q ءtݗ]1/%$5Ȯ ?A^1* (cb MDgO0fk?{OXy/ O)g ªkHefu,JaOkPXS.O.odl.!izB(>y&" H7'yP; 1l]'=O+厅WהzHUd6EZ'냶ne'!;u4=}MŐ] JLnF#M/?hL=p3󘮛e pX(gOnOvcaד(d +k2u_\cKidfh:8wv~]8imq t쉆"\ןF+$`jEbZF{>8A>} 'U1k碍/[CH/bZ2&DžZlpiL[9r]2vXIidK7!0nd /k؟9,|c.6^MS#2ٺO%"'MD.4Ǽ.[dA3q8Wm,]Zv*;_T b"nċx`F7&`GNs6rvt^dx>YAR`+a~zdᛶh'QD:4;S,ylrS9Z([(6F)*c9?G'߭ `R8zBJnr p@UVe^-i.,O:k\3[XVY #ky^-WSu q$6Pgυ+2qT11̛q&5 4?(`S*B G2[ Þ D:#XVo*0HRK ( 4ĉ#iboAxLCKp|-Lx!(Htwky< fW}2D!S,dK[񤐜ruI7ϟ5'[ n"f飆 n!M>7FTVCv')8M7ԚmN!!_'" (y1Z 49;D흣p c{}Ny8:v$BM&ΕIDRXZДѭ9d@Zf~uN {!D0RBI,YQp*.i@r %Qhwx)/xAg^yrbl䋘 5ܗ{#,0:,#!:ޥpHK <-`(=T&4vH4$Mf,4Õb=@h#Pykb ?]g`iwYYG_ż&aGVBdun[SςS7#Vr 6*Od:(ek-ˤbܧCԴ^YA~_o%Xߑ2c|8z&4vxQ D>i&jo%ޏ?=:7k|ϡbg9PEo39IMT"_>0_\ʮ4:ٳγoXKl){ $ 30k% $eXʔ&%q-/j+//UV3_M=)jb$0D|xSRR㩱_w̟je~æגZ T~uV]$S vȧG=zvb|Ek_+Wq$%2xL9Ud38@$D>Xd 2%O(,|^^ڝP(T9v'EG c5^=K?vbؤmW2?&TrP-L"Lz; E#>yٱ;*>o,+^U`67I/6K1Yg!%o"ibP%R9ا*%6VQXڧkd7Y?a\!~XƼhqrJ+ԉ kH{,~ՒG8@Nʓ#~kyYXؾM$ks+7/u1UE[.\}oU+O1!ew?Z$#ɷge4NPw^$ybe6P 삥ոu 9ǝ?iCcs2[>8i(y8ז1Ȏ>x| Y1`[rG$`q@$`fQ^b~P5B\5g]kP:X9L]GJx,G# MuعN~ǎidbש̤8N+] .6+Tl}y~U ?_Pj_UOʷ(E-]!T1* q^Ot8JYVhK mNUl=AvfHxt\{)p$F:'9N6Hk47!,Lw9K1'ݩ+wjџh fGz* `|=eߐqoFWOG D蜩Mrf<ܚs>ʐbCZIJ1„h^OQd֭G{2f rMx(8|&O6.l(( U=f{↣0AY]#+d81N(lNn c]F@<EE`}ftr#7[@Yn)ȏk|T|.c"wwnј0I 5& *OHt;Ѻ"hqe5yA0 LI&fЬIaEzex^caΛo1tRaBhkWpBA<^^s ?aI(Yeklls7_za==H'j-GY&$1ꛫwEWj.o㣣!p?yH ;?Hi'䭲玥^/dIroá0>Ez9ؑ?haL5N`+s‘Q좉EMDy6)XѮfYA(cMe&J 9}S⵻-L]*wlwEF'ZU%ʃ"G𡐍+QA3]θ=|jc9eFezB{=@$.G32Sħ ϵ8Z:ɨ(.$o-vzMJ6 H& 6[,"T:Zk]ˎbSyH Sv.q'ZH۔_ ;L1"zxK%[)&䀷Vz*29 6n!@GCkqkGr8jBӏ!݆ /9FqJXxPt.Rͼ'i;Il)dbd#2 d}jVA5oRns]Nk)-U*޷ ~ǞM:OyW \O0pcQ>p?ҵk?M5N#+XH$^˰nx xk1~'zZ5Y=4wͥ;ug@PMZ&SLw;N|0+B1tݠf1F2b-y0؜ .vHѿ3+FQǑ/(`tRR^Le*}P$qvq3H2+:đ4 y(yfl>r=d|<*gOCh; ZU: CX抦kk^vo/|{2I݈%٪Z9w-9X`a[]zx"ƍ Rwd@nd qgVT Y쫀-'Q׋Si?;?Brу/[s_/],S9l]}6YӒpq_`uA߃K={tr9?e쵨9 ؕ2tҒ".n`d$,价=D@4 c}€e֠|ox; 徱cimK! J2T|1 2"'!SC6?Gs_w[[;$ ʀSWpS>F|tK'B}u+2zMyS{,.oD 3=fPx Q午P/' [Й.p)\yٌm8y/]3 yRd7rbMq++oK#./t"/2FV;/."Y+sI?7juc^R}:T,\o+tG[v+.={+(b"UKfq4ǻUHwnյ)ނX'P˯Acyi6iI\@R?g}2,,UzՔ`8plP>Pj̺xd޷Fy>\~C,Ib RIHaѷ&l)Y<3ܷ{v5%-+F< jut Ժɸuzا;#T+usdۯ-]Lq2kzF_1Jgxp"G%v3Dk|qުQϲS3L.oVZZaOdWUr[zeWDz~TfmF!Ѷ?R95bmYxlHdO^}fd㮬P܍XsizN>xԧ}3EORVH˖ M?ES3XDxTT)+jE-Niǝ^5?u ;1t c9%7ɚ K7'}c | KsCs|nFЙ.HkR. f2%u.}fā=Օ3}4@=Wخ9z=Q6eN)]4h:,|EB$Thӗ? ",J7٤W\f\ftp7:n~=:'A28@`9+ Κ OB GL2*D4Y@tfpO|˗n LwmwRqr"8J>uT|S&tL60țQëDrxYdUH>WXXyYCc+RzZF-:YB )y \—Zg嚊C@^0qjOH9I jWJrvl9g5ͩ+q+- š`MS<Ndën!fG96/4C%6Dr'ͅfőa&;;cS:*a+s9k Dbo=ʺzMulc,3:~4B|^}ާs`mϊFJ''n{C \4b2,-xڼAgNU'c$*St.=X6pjIoh;7 4Ч6fzJGd0)%ZG,Wes "Y!O*rsljf弔NJĮ,HA9Wwy.x@~]^%6"G;QbIҮ\%/|t#'yYn"C妏~U} 7*~&rvʣ T}£/D>xڮD&SC(`(=C9 ~=iss/F5"d_А| Bv9m0D&i?$dwQe.@ $Kg~ЖmS'`{⢀i3nEi`5a3 :WO>7ԊNܠ!MkLVm1' ߼ѲS]fKM5 %( Y1CqCU3#+8B}"0 >ǧ<_>TҠBie!6\, 깕yԶ_yU"n&Fũ\JNH/{yVo)𨔅O@0H=4yҳX٦xðnV%X~&fCu ۄv is?;>459Byk?q/omT0PnYPZUe $uE"ڡKM٫ dp,P:Ln@3\sX%YP|j4Rbi:|R LvؤnLBZ沣mkq[Fvm(51ޤah~vt蔥1XxhdOXe"={ݶ3ּT u ~vB&Kx=C)8$󕪓qʟw \ZB~t`QƃQ^v’nu;IE3C\ 7k8O[Ò O| EGt9-wb%e>Z`Rܡg[ =4 C~msӼ+svp^It83OX &M[dypd1> hlh&.>4-]XfZH6Hḷή_D˲;$XoW 9RΩpv}⹸(rٕ,ыY9spI] FŒ0pA/U2l|f/O<g(?{w2-(M1 "m=bxa.rH@~*ѓQ(?">[d0}>EY=ΚO, +8R/ЪcN}QF^B'}D d`0sUOLn2sׂ_-Hf#Q㉦兝e#=|jdǼTR,/? 6e5vcD=Mjmo*^n_PAbkpTg`6%SypxJPHt3Xd6I"jJV!}\s^gDz$ن2yv7(1dA,UtР3/TܣֺyC+J,qÕ}?/:D':^;V8_Rb`ˁpDٛ?ͦevo`뻨$7ND*Cw]5>O~+ˆ/SQގ a -s+|d_r9=>/AE G13 E O=p(ÈeY ޵ǢT)C@ >G :#}& 5)e"P ,=̡0 zRs.[>HT2i-HI+,$mF}Z*fEB'm i + 3Y )z3Ɂ_ɾ%m9/#o?i9|Z&!OFuhRq6k;ak }qğ"]~PS+fpp5h^Ϗj g FW駮]! }_ƈ^4:X< FcauNO OA[$fBNt?mXXy( E3ŢӮAd{yߩy n ,ϴ­=u{cns>V(^1:vq(|ʭx0IvpozbC P?Q{FBiܥI^G1%'= //A~F/~.`};eMm4>WkqCtĪc;7@/OY?7qOF%-d(jP3,D|C?_ǥB=[C_C/6]iÁ5{1pKXpU,1-8 :`)JTQ{&?ɾf|Aixjr!;J+o^+'@@'>-$ Vhr%Z>Smy`Hp3T;OlR~ILF=*ΤClǾT,d%l"6_6ex9ЙUqXz &|kt"3V[9mȑ8~6ȾGbg\er݉f7Ea$9.vi0bf "P|:d+q/nܹy?PBd!DJxԄ^ γh99VBQnQ;'ғyOF.xӴ1Z'N:Wx$?uPX]A;J> MyaxӜ"6ʫ}qY,[#RGK[~Üxj8Fun*lBV^`KWSKT*jcɡKyd->r:ڈٖe /;;i<8, SMԖG9sk_ҶXaP?(:kn(\eYtU?YHyu%onǜ %Obi.K9W{1i)`͓C9L"NxΉ$] -g M`Dpp/3ޓ AbO1*SpUip g͘M1h4J]Jݧ() ^mj ^cv-&Q:/桀kDIA)ؿG`B|>AU8gܨ 萏]o4qCV^pʞ@j*Gu(I*Ff~u446Bu.={L2SOn_3ha$K\Xht OyQ+5͒,Aڳ`ӴjS=WIo Uԁwj>ˈ!Il͍/;'Q&|(6Zla@L͠4v7,Wsty $+Y; YU_OL@k=~e~2': lY "òyьO hQp|iuH3oDM|0F_AKn)#E`*q4s7$zZ \O@S{F?Ɗ\")>eƠ=M4"&G{oxljw GBtd=}IOiǘ: !EܼWu(S2R^֨ + j& @PIUQ0d0ΑǞ%$аNl؞;xcLȆ0N`|씉 5o9df )dFȍZvXv_2e+š+ʮ46 _.g @b{] 42zDȐQFiWJAO!6fڭ<+|'GE-2/g1f)lRuItF Ģ bSTCAH+R4fֳp mv5 ٭HjNsǩ#b2F'qoows<"z?`^Pѐ ÐMVg8n@Gj)Nu]|Ɨ+x@{)Ivh#= 079~ ņ Jߞjq(AXrd_Un{+%n3`G$ol #d*ny1B2x9T P8jq%k/H)1 c#To'l˙|uc,sRZW\if'Չ?7`DJ@"l ePhyNo` 1$Ή0?idmhDÎehc#ƱYFB4SeT3vX>m@.85+}!ND* 5sVЛ$pPێQ/2CO ’R*+E;8دk\:_aԵ.WZ!w=qRp%}vRXy1a= cKRVxF #C0H`Z¤gLG*V]d"K?=k{+ ~)&}/NnQr3>1JFi0&W!QfئXqe;"4%Vv!S\y#Mee&)e&A.^{${:ԏ)jxl%dYњ9ȘJcPаء|ui1R9# m K5UQHN \[pp@ClԭO4kY:l=Q0)DtzUo{Y㧴GTxxm$?,^2[Rl3)bw 9DT!HDhᬃZ;ڵK‰jQS Ye6}& 5UqbJ,ܦ&F4bYQk/bpS?YgP>_[K_kmd$fG_A6 4Ǝuy(ql9:*NFqK2aT$nh^olc] /r<b(YX/]5)vY4/i7*\<=x'.fo8!ـ2hҽ8x10Mѿ}h?dXtJYڟ׿NFSFL螡Sk,>rbKk8z {c/}""h,-c5Q<^IX?8h˜7'U zЏ0gѐq&(Ǔ_Ҏ<Q㾏ϛ`KܨAnYQUsh6SG[WڷP(Lup}񷊩kËdm;Nl 稨F4&k%/n.[(mm;4П:tƈ%$%%dg횗[m y?*;0jDEjy4D;mv_d7TV1Tyűh:fa[ 1y(uT#$""mjQss+C}s "s(_ v'9-4,ۯ(R/ވLl yуQ^u+ᷚQxJ, ^`yo- mGgv(rS֦։> e<'ȭaC`RTcfϫyUɴGPC@䟣;^Ê:$ӛKfNأ&O=4:蝭<B4cJ)Bˢ;ސɶ35zx?ƚA'.k0zKXLㆈ`栦 x!1:X=tq_N;6'\AHrr׺N췟Ԧ1%FQlXm 7}[ иht`gW@I[*!6TH򏱊lsmN7k WD:rr'9T%- ژ|vlbn}{L`g*#o A:^k *}D [fҬ]K{.>']S#O=^7/ϹZ\F0IVO mSiZ$ ks+rOaM#b5ŋM /y^*aеlo{BHe|~ UEK g̬tQJ 0,.V$9jV1_e0@vK/ :g7SJPOhyC#]VpפP{<-J=`oe=ѸDh6.9'Rji7A_@zA.C=g8vZ`qjR -0PqGjĜTh@]%>+mS-\֮w8&0M?ε ь E]gXkG0жYfDu6zCck•2F;ICXv,= A8_Ƞ)}9%>ϩKKg ɋ,-$M|K'/iaDY>-<=bSP " :1س76ь3y9:HhvR tE_ &)qb\ zK:x=ph X!MA`Mr.h؍}^7w-莗c?ssr,-##$P"[EݵA FU@[{/e=}!"L 6˃qsCa4/mHUCUq%v Lb(bx:I]eIN dhbbc D+ck(́3l)rf<;Nh RH'>F7tCnoH"maq1{$*{$mr Ozg $k-A*@38œa:mSǰסCV72:dç:S4ߕKof{=y^7ib7>?|9ykݸfA IJx!C:l vWfD}u9ƴ`$'Y}\E7 Gw'oFUf.Gu%}ߞ,ngec"jmXХ6 ҀZ0AK `w 0tkM2E(jmReW~T\E'pZx|R@_umF毐ۀes(| +p4íU_x zbQ)-r2 „Vlo!#aHA4(49DŎ + њؾx'C㊎cj̺nQu qд̹&BW@THT<dRyat_߻EĥLL χG*S/e\yqlH%m+1J 06"ԱPКc,xyrr$ۓF[z$h1 zQmVx mlAx+)?㫫c# L,ۊV@_mηVR#f:eͩs}W ?m#xt!)\EzO?15Y[!kgOQ\T[DWj$ߎQ(?賭i*UYYn[pM Jc?E0h*Ozj**_v.Ŭz~hpE`cVŸWi-żڥ?+ ZaYwg*b8|_7G@ʅ{䌌))ЧIi>^/ٔq? ^i:q)Iub;^ T@$@K-d>WZ-V a۩_KSj:p8˥;"e;Q$ji1co$ɇx}61+DTЅPC}&Yi+< }%53*/VdgBL7w:#@I[OCmSn`e̗ ZDB&5I+ʴ%AT?Q;o1:j bY6Ttzߊ9?!&hLAb'Fabe3"Ô$:n!b.תe]P%U͕Of=Niܕ!..@7utdcK[(FAi;PXz| C:[2Fc"'’Q6a+`̃e(?+M 8%x>Lh=ҕ'3hrVקViN|U5 =Q [[TWoWIp)R)4u/!l"SD3c^{HpLՃ~E_}\tk% _=[ڤL ;M643~S}4Xd^.nI;AR-P1?-RD.͎冁]v gOxs\!Yjr+]1h ݳ/ī.x|&4q_wsr&Ml#! P~t z'yXspO;/MJ t$0؜4%p- 갈xϰ ^,Gl7G$,"bq"}ִ^F,O>@NP @lko8vU]Xf>!_).( ?滥ԉ/9t[u< `OaKzѬ[re={Rdvs.`Ve&x-|y"-5ԮW'<R xǛ"5!SmNRdG ]t0WiGNhɫez۽j7F1uXMڔ9p>w E6 <F}J68WD 0MUz"$ߔov$we]|ř@ . 쟑p0s^J0|.z,w#@ӔmxR^`tϚ ~w THY < %ʤ1~87 N܋4kOΆn gv;|ڕ["IR |b~G<\VN@ƮМN˱+=J=_aA-Rw^ mzbwJrΔ1$EvwPJo *lG˄ tmY>B;v tn XkuLWOBuAsdP3eT'#7ʒ0隁xtH'ܡ!"(uF):Ѡ̔_(ղu o6Z T|kf |@?h{j{Fv%Z |!W(8aa{E٤EM\)kQBJE8BJ!LsP߉At8QQ-%]qirng9m.e}~qF_iaлυYx-"fsIt ]&>#H% ӛXϲ~*4U//>id0_#qCv擈6Y \hCrR#$|:q8pr:5\i˽$8#X6V&B$W|I oy|%wlz}2G@WrRuM5쇋vТ8C/WlrTE38k[c:%XAX-_doc vvX fm:|o g^Cp8Am:J1s.8n 22&$/i]be'eeB!YIză#WeA*j:d-3Yjs\3.>A4]̂KE\5H}e 1/5)Yizɘd3:ܞj5 ~i"n!pE:i~=[9mΫ.]iUTZ ~h-]hFXg]%e4&iXz0e鍿0/e)Ygv&4؁dJo *6R1gi["@{Ǚ=mlTj GX#?z!-ӀW8!89$7WJ㭀o'! =^M+o|!2+o/FGdi)g6E2N;Wǀ}B,1zrMHS+"wHRZq=tSQwH1NN=U?\A5~rw(¬vvUJrB<3zTz}`c\YDKfbUMHgMX? N:1o_{e.| !S}Vn.e,ƣ=Iw[vR,:gkn*l/Gix~pS|2KŭC6R,K9< $IoN:B@ n1=J䛳Pi)5vq3LӱwEjGw nաP+"hPܷV&zqN ?Lyj&-LF^bw>B F,\)8(i9CȔY:IU[+fG4=H3YJ%lD^rFT;dJWaKG.? VBc/N; -%-F G0 `l'[Hg9lԁg~ ?.o=`3/aJAرU؃pKyG~ Z:<)}E@4J#ʎP + NM$ ъ3V1֗n,o-s pph5ձz+F!tYr3^.dm@Wci$Y[O,cQ0CAbtQmpZfVg!̿ a|o2F+LRPm!bg'|"ab% ƀ0ݮgw1L̨wp_ Ō0n g^I#!NEs1YJ=؜<̐7q͈,W)e O l_Uc@vSI J=b_R"NbnK851K9kTAݷN̏Od\'oC3{|}.FD.&Y[P7=Y9SSjtHnJ液;%mfWU@:aix<7U\WTzN υ5e+c%uc#ł~LVl(/aI 0Ս}2 &}V biyZ[ g=mmwJ 潓ThZMв[o(N3zam؆kdSl9as nD^GAܩGlmG+ȨB_\=<ʁIYT{q\~-+YV{Fh<:+ rwᝁq5"}ցJ[pTw;1q:'1tܻ]u{X_r-2yM?;J W,a4n00I䟩J0x݂s4s2X)þ";n uF!6P0?wLyvl} *31܎upI>E5KóV@ h=f[8M b5!i)ʘ=4ޱN7iS'XFpi?+ ^1/i1[3v=Ѳwrq!}T(iOEґɌo%swXʿvG-) JQ@|.m]ZlB?ҵ|Ώ_VKG`j-Qkl.ióJ`\@opO:I2Sli3; ^#t(rcFH(P)BM2 3?HIB5̌R6x9>>"6.>̋Uh̡B:5^GQvUȧѯ<9xgAIrI%G{qCGy,d;}㸈WYO}f&ُ#⼿| }t0/$|1Ŋ˴m6!(֥i)2|pԧJctV,tlTﳻiLR5x44xˆ?qLv%dm(.?my-B1{j>O[~vdz^[6&cG>Zx27$[&DVI-WP#sX0$`62YjoN6X 6X]h@ڹ n9bW3K|HqKJ#Cs1;Opwj$iז5Dդi,ْ :{ԋG"~Jmé'j1e3m XhtfOg-pѣ۲e\`:iba؉ 2S g/ɱ4(Dž:Sk.a߅݉,/| ֈVtr'}|*f06ԌE(@'F,Lη9WYK/ oq :)h*JL[/n-#?i`X>w8NQj6%utYSlo gt}:Wf!F98<(%.COk9sxg"Kƚr7m%1]C4lJ vS@9T"p cfD-"0$c o[jɜ`FPuOsjX_ nO4pn+eP7΢^i! R3/j#RdPzs859j]4a5"Aᇣ8jZTe n &$}uQ?Hɲ"a4Yy2-N`v6B\W!dA6 QshH>}"9]n ۅ\ndXǶSy3(!!>ڶ2qWNޱ~>7QMXXFkI#jިT~ $ؠ%y@>3!<:Wߏ^aؓ[iwbf*'X8"妐28)Wn],<~{FY4Y|b.>}ힱ}$s)`&sgv)hR|uӺ(ejoo .؇0 #~ %磐ti; $4.٢ Λ.=9pЋʑn|V*jr5;TbiVZu>V膘橭didy\i"1RCFd ex$ 7}+s u\Z0(xPl1)Sd\!RɘQ5SM` bOm>bIE캒Ҵ3~iE*W?(fN*׹Z:'CHFf6BA'`>vn wVnmɷg^2-]UAIq7+IMfpNʹ'cwF_Ɓ됟)y(/g >yt61NCo)ZFƄsv s2/|t=L"!& n~FTt :@SC4kdP3$~gZyA½ap §,(aKT,'W"5?%(qt1ӓm%ڧ3 q [ԗ2tJ`)}vNkb;m1&Z?:Ew^rRR0Nʥ6@OŜn&h·'H4'eKvb?9zZ;.ݹ0"v?1L4^Ur'Y1龺EBuV/$PaN2amxUdQQ(ן7l-*!P$7띭9јG.: wnmHm6^N{ODۡR i?)m3tT)ЉvkR$F%3f!((h9˜v_ /==1 ρ*KL[͘pfe p+Kղr3Z1ޣ2)pT#\S1$uc =+\S`e<0s2+-EXTŚ۽nҏ7N 'qmN8 )aWRY! Z^,%y G/`aۚlL;t|]oǦic :~_+2/->G7ޘE1a U:LhQPJ^=S Dtjm&hN&A7gˠ$D`w\šc$eܦvJ002銳TX7܅_FU\H QD q\ǹH` "٪ 5ECx\Q*DjMqR&dT_b l1WV?g-S3Y 8o]^|ŐJHp*t|ww` +F\6|$mȜvKbxR&q>o*֜ q w[`@&;*8C㞒NL25).j "\jfn:I#u7@W=ΑGܺӘn]R*׍nT<> `wV!*ʤMm i$1whg8RgTApb@i">א"e<}!Ɔ/xzNCBNIF(HCԤXqI7+2F" jXgU$k4vM}@cplkNS~Q0"u;u",xz~~ƪ[˖^V9K'hz*a5q-!@O-QG_=H{Z MzAYnaP/Z#4x֏a z$ .gw&j[93 .4vJΔ٠lW+^i:( 88)[wj]!'L'"OJ!TX-(Au֒Jk!O`>OպA𺤕m d&uwh6ȫde[{7zd'0IƐvsPрtd~aKRcؾh@\Ė ; KʕnJ&7R Ĭάl-?'Y޲2%#F }@9$"*2Ёt(!&;#uF:@[MS~؈("dz#m hVJS !iQ+N #IfGwL\;Wv4yhPIZs؉Z-5s:OR*L aEdUhK0ԴN/;,:*tB=/BNj[mB)IbQvepxY!1x,9:> 4=;_/쎼Ͱ:I֮CM5waL\w/Җwڝw⭵h/O1j۸v<՟N沯8ci/+F-sk4ު'x93Ėjp8#QQZK֕,~fH5}V Msf!d2> 0LU5>=֍Ts6L^Gx Сi*N!*\C-=KV\ݳ6q{̵"Qr6 6Ɗ!, '7dE?9A6.Iܴ9)ÑbUQ'zO3V7>s4ba I4J|w;Z)ZB1AMl)V/hsL-IBSUSbk$t4qD$\"A籣%>Ƶ =пH*؅p|.x4>j+{fryep'\Fge$ =!EP|h;tJsln^.H$煕5'~nu; U<;[-U$jCETt;M8m'_{Yc|&#K=ĚuK̪5?MLN*TYh15yNLוIhxx ]3joygl 7Z<Z`X?O kd'rlhϴrq)|gZK*ۆ$cj8կ:)Y'>`/<@3{ < z GIV M` @%t&y RcmC0s. "v2mT$yvނRj|313'HR:JtÙMrʽJŀ'l򗋝mnqZܔԌ?;$AQ4GF}m EgBL鴣 RQJ葐Km߾$2:jWĚUo-t#޻ }U|&sbܘN ה(S}D{!mίAu*=&>O )e_eܟʂF;߆g2ZgA(eJ܅)5 =VdWMrO.IaʅLJ4s3_)iud;dNJ_Xػ<Αߘr͔vؙ>JUdN)*rS/9bx{oc0(-X -mCn`!e#NG3̨=7DRż#lܿ%DƳ\s 4(b)p-aAWQ!s7.UJmܨ?+X}є A@W*ëȕP0lTw9CnGL +3g?{n iPM_xgI$rl \,)'CI~55^6/^ *b$ahn7)q>YE"6`rw8Gw;)m|P"O\-.ڗ\#3Q*@ɯФOʇuۣ}h/\ixۼiME1U6z:΋<ƙr-!V.yT#OGklG$T^M5ӌ&h?{PA6hTd?bA< A7Ҋ@!p>ઑ~˵_0fIqHk4߱b¨>4%_Gb@#đC 0V,";-2ң+߈֖qnݚW8w¹Ie"ѸǟLNm?p6nG%pN@'2m&R F blZS˜gIZÖw[,d3L P8G@3c^`;O>%E{NYuBz*F] winۺOV1LvbPūSP ^X&>=A1vwJoV8 Pnp}+TjVT4ظyr<^YմSΧbs۲Ei_j<i+SvVcJ`yWS~_D (<#MFMDP\;|1Y-Ҭk_cGylGf{)DF# /+'<d':*2U@[_Qw 09̕q}.*RSeRި.$3 A몪H6q3!i #d 6lK/s,O<4}U $ObLOvO-V W0*-e{Z_Yr=,۲I(hHQ,ۍ&Q\Ig[| ѫ_&ĿpW&yGy#l Ȓ'Vë՟8Go>?JzVI*^ׯ=Ül$DboFHI\s]cΐNg8F8_yr Hf_L y6n C^ ] 91GkIBf qmO mfHAH2PtS.&$4ֳW7fwC_4+qF (;uc*7I9Y$$m`@"Q_G߿,[>IvYᗕVr]LAAr1ٙ}ZVI jW؂L= o' ?Qi^Eͮ t d) r m9Z>p;Kzf۷o59;itOzR&L[m %.T0 l䔉(3b4}hgϋz?Bή\Erȸ޷Bhıny.=E>\q3RXst6bd&<5Cn$ΔpZ5Niw$?`r\~jӺ7 o#d(d?4RSV0%,=~H7=$pW2xDvӰLqYknlk'u{΋)팉^{<ԽJB$o0 Gj$5<,%%DQ(u`,toكLg*&*tn]E#ޭCi:fC鶻1qȩ ÚE/AyZUۆ%+5-!ikW!'1 ڜɈƻRIMn12P>5 @gp=`"QL Xd06GKw6|D"q3/GBRU,5:d$DI,K9ӂZfq8(7$mR.?>r&Ȼֹ൞+0ՠl,k땣=D=@KJϩ mf{`m֤ȋ'E\\~'O1͐ADfJCRYSt1QlCߤot#թa _s NDܣn|kU9 XέhbìrvWY'nOr{1WDTlC6K%'{$=bV*^\}~9\h *ɣǐq0ֱ B<9aRϗ/_@[T R')k@&<)a8P_04 SO/ W6ߔʸ=KJߓ,o2)r7 zSaBn]*Xf tIeKjMƊ߃<йe7SsMG \c:0}*"R#SokzV|Fww`ZZۋ\(ٗKӰFiX,UCzim Xv@z/we0L' zتITFU;"Bmg*"=fWZ/|%s~8p.6:ajgn/kS62E8;ǘ''"̇%3vuz! >qs:aw-}0al h@Q J:)cu RD?!hNץy{ob`+A92I(),<L N]Z]doj]#S&|D?s?]hVU3)=PÐ|Ǐ=mO]k::D*$% ic8P%ɬT[%L&@{-_@ڝ}n|NcMV횄n ;"_vS[BRI Is NǑ2j%ㆼV'BHpG?|n6$ ^h) w]@zc U!IJbNf@(w |ALe308G>սK7c.LŒ 3tku4J)Kž{kMP+'HvtU3a #b|j"E@Qz qk 9@5p=~>RG#tOpGl1Ȕ "[a٩`JН g'&lџUvHvp4D&aoЮې ՆǝJsvre cU˿lBtmZX$dde,W[;3wudruJ\^RSw#..xc %z }@{60^SQ\ `פ i,jBUԅR0Rr[ ±OI(ىBI!_uUS'_rsl׵ʣ?9/;3{6hAҼJlsP/KB7z`LwGkj>4v&doi ·w{# fnuSSa)I0X;&UeKqm*|ԮbUgYd&~[tйs$UZo%kHJ*XectR%p -3 54+E"h$KbӝjaHouy%沧^RT/h1s{\b٪5ywdAv _9\´9=c ˥ru#n[3XN=|K KtY _>d>)Z xQYL$Z axeԳXzw. `K^Y_yY;Ѕ]/fIv!Y?yq ).TARڂ FLr/_>4Z&>4ޚ*x(iNFP*,`# bq޻lu!YTaل+c\T߫uU݊<>"^]S *2$A?`"ުFt־#Bwg'&ο(ѸS\|R2WҶE|/03f gV IE4mh}%yI-EP}xO|wg8׏Az:oѸ bWh'l4"kjU8[FIC腫R!<~4 J40fb_>f`wy-oomePA\kCGC<[5S#^Qd`(?潨)Ĵ{)AJ;Uoݴ)n{sk`cpp^B'W%C9.Eoam"!oϐ`3xt9ӮT=ǃ{/:[ڂFTz'fE-h$n7sԻGH kvɅAN3MH M|vB[Uj-`RTBc3&1y6eP@AkIZ,>j9˄逫ŔL=jpc[0Fa!-}O>qCN*?u7ʹz"%`$o`HW ,}AQjM#JKA{\JOƼ9U0W'ͪm>"c&iOp=Hg1;+׳8RT@r 1f 2JSldB!Kχ)4Ơ۽& G`uYJ@…I.Sow "vHb3_P̱ݼY ] 5TW+kfҀoў@&bă&0A cߢCt2 z x(/."gږe֢X:*ƮQyLLE|1X㏐b{Xfa F gw4fuN= = E &[ R{8S# ӂr ީ^^;Odp9Se&Av_8?Qc+hƂBRՔ`Sck)v|խ剛n J̷@K#5~7crHۙx؜'\*o՛xqe DF##OaXT:}gc铝ļrHd{ØdҀ }PYGbziڄhC] UH `ɴȰN]d`d(b$M_wo=@!чa5>TW(WSKBvQT'Vx{VP-S0Vtj8[" Lpol uye Ul#z]'jW׼鸌 ,) ;OR\!J2f"˘RwK! SܞYXъ21s24{?q^W[ Yc;8nkO+hL4/p1eA~=) W :Awx^r㯇 0V "BʶS8I ߲%)pTW'bH9 >ÌK@.܆YCo[o"4M/D4 C8پMSy957&I%{s* f442`$9xuߒHHueo$ I-k->?H*z)HYH+;I(fF&JS$lZ 'h/tx]J4S(Wpɬ)wZOYF܋,:mJ0Cz,8I5\uXRXZBo_S=C<.|Nk>q^>ժMf؁D=s'Y6Th9vqaی3'fX3ŝz,z*$kI5b/W Ʌ4HaMe\2FRlURL afc )?;>:ywjaO p6JRݳuTڍ R g4q:Cp0 g٧[\V["|mzzYU2OgXxǏW1W%_>0,̨L B}>6{-\elK+Ɵ1y۞s9V-?hp(+,Bm.Cߛ_|&M Ֆt^ dEGɧv ,3 +;Րڎ{'TBW0YTI&yNe$%iv [][ Ca+-תD%^Y(e?8_rʞ[stBp$ukcp|Za+3\xfLO5(.KyS$>])KWozǣQbt(ϳG K iyRe{oONBHpэCqڃum-^f.,IPnZ(^^|T\D U,Lϋʸx*JP(hQGCe8'ܨ--g%~# 7݁\Ux:0Y͗ٶ#b~/9V:b.}H*gf)ד\sUij :!)YR]e K|(lT!TTmDaBV2ӄ ~yLoO5^>X^e<\ԟTY\ D !KcH0+UІퟭݤ%~N XzW`gjİ/W5%Af. ^1  kDZ=*z0"UWHȻIFy}Aci5>1o1g($Pm QLmǜOA_`ۘQ|5ZغF+Ð^ p*RUKM !VUǭ]_Em nky1szՏ^zLڛy RU*cK.A\FxS  i'RS~~ϔ} DSJ08?/h]FϧbcscpqDcS2ho/>'N4Av}Y5V%RBMۏL:K=g+VDE$\҉ RT_7No쥩p7\UoO=d[Now0y4"zhL*:h~bH)tȝ?Qvt5+(M>=̓K_skY#6ojUCY<+oЖJdXcq0$%cH|"kwgx?7`VPw-&jt{ȝt&Ʃ|Ud2t1)fԜm13Ƶ"0 w&֎|Au Y̓x2,ǧD:X-ʹGwJ)#OZ)o CU21u&KYpEu 8pAla7hM4 獆gF WrS1'aO坁0b(y?QXJt=X] /JưC`s0ov\Gת4Ammx޼ LiSwgjW%^/?Ueqt˓Ra& Ȇ*qe鰈5b?M])7-MVwOYE}֩ѐ$t eT'Df!9jqqqczSlvkP3nLEҚP:b/*-n7bSD9Qւ&)g^<,YMN\N_FBsFyKs U~c_ma;*wH? 0#_UVm>>zd4ops裪i+Q?%ݯ͕e *<Ǵv+"J<ZHaBǎs7 ehlP$]P8DblbZDLI직!/2AoUρ?II1:.3;*kJ?.qxڊUC䦡R{F|b4ĝ^6f6,OC4ivL1E**]%zfyC|C۫2MEn}ySL}vJ[@>4ETa}5T@EOO|yho-(-+hM}Gg,_=P5B]DSt2X1p!c>}1 wb޴apuh8]nqW..t}.~  |y0V}TR ? @ʘ!OC`TqsbLiv[5 HN%j.e, *ỤeMagQTY젫1 VK֡ɾOcMOxˆPH=j1b!<^l9,1aEۺXxn#3ɒ~+R3iS!$WC̩,^hto~uZ<݌ꅹƈf7 Ek{=kgOH<XɂǭDKqɆCZ$WU4zD# zSX WR2EvM;,~|A*qNE/=Wa-Kh&Jp#6(wU\M`/HmTLA~Qa2rF>3t:*Mm QSҐcj|b?.UQOqnh[gkۢz}出6 O"q~elAɧt}W+qyvBY4GcIHh):R냛u^|&)6|+8)TH,ɂ*v>ne~h a,~ə= iiwt kBmH(rnR[gu-Ba:_q/xs%=hJO@İ "=ew4l!}s2u,eLFT}Oe G$c(<ł>Z-` [%*<;IcQ_k)$utleZw.UpLEB%Qz$:qdl28߬dէ@tW'RdQ#'_J7L #nh^F&u 'tNxoS8\4.H$uQORGңD {~=û X{Z~sm!DFeD+ݺDžc"[lˆR kytF8f3+}0D??' & tЃ'͟z/*[\5ɺ+<,Upm&".W,]zמKK٪$(؂|)YȜd)2eT4?pݱ'i@s<-xi"IEfa&p ӫ7l1BbNOz!mzt@6Vlթfmq {ӛ`ºIKHP uA\f-,)vfυľ2s#@4[7Ԇ_X$_5>?ѱcNXw)z2vh" L ]/l pʟٸW=ؽ6EfVZڎ4):Ajw~[{Kg#NMxB8C"7PEah 89*F9+,V#nH(6s} 7ll$y.@@=po !EnY3ޝO=f:h4bvy;:+kxn ]Cj|yӴ?uN~݇PKDo HT2.woGcǝ c,Z9 ?wLZ<.Ab}B"ΜSBΡ䐯7(L`*g t/y|đo=8J+vO r+dP_X~/Nx7cg4b#doyhNX_?%AyvU'LRy*RbD^>mF$Uu&fhF؆T>OɹQV -?l,cr҄B.DR1MLW,jy`N[^ <cyГ kW;_MXRYJnT{%\8ԓ"3 Syү5xPL@% _&=sͥs|dtL'H憇i) y3`lH;۩G-XG%Dq̐tY4%}*NCIT3m&_3K$w6g-Peu , #"Ղyd x!U#y3-6#"@-|wH-cśp6f=a4J'rLmNZM<>HR zb-O{>4ѴhZ AyUG ")@61AvjsUWI⧺+A tymCz3i_ ָ[m<48Xr$(Gm \b5C\Ƈ/ {[`jIÈꪃRXT#5}'s#Qvhvū ɸ\+/$ʥO=yQ hu#7|=`(u B~e 0i_ِϩu[7h[Dάu~y\t_K?)H$ xaU2lV}w1a1cttZnH"WH`tš`Xf~XP,KޫHuܰx[sKu`#k4"e?fOBKck \0vrq`09 wYsq:ʯ߮ r ) 65+`zpBАEbI Y1/ɍ:ІIR!_J}TlWMLq\f]ĺE[!RX㎜h& 1$}lqn@>e(!Frh-g&Խk{-LEf"€ '|mxϩYF9>BAV>PLn,KG2X8YcU5 k&$ $_HS!։L\Q}8qMO } )2K HLVھ~g~Fz m=]exz潈xeMwAD2D9uaE-* 4w[u oݐ߮9#E:Idcj2"^3T3p&r4o%XR0rIJl_V>q ';қy-|5L1&3p |p"% t9dap-G"O6`]USU,%kD^Z=Əa=MKr>\3mPRCChӖ}ʮ  T!NE<2e^a"MD񁲨%1 L%TO<yf!׷L}YfW+х2q!嵧:2Wn$zc!5=ٖأ^FX_q$?fDJC<6=Z\ߌ-& 1կ֍F=0SZ<&U+W*h.xWn2YM$сjHp?AkL:`O瞖.eBzR#.6,9PaV w|9<Ժd_i[vmo"+_[~Z8CDpegW_ > B@Pਉ+2T6\ @q+1m[{_R^J{TR(%-P)=Vdb{Η142҂8\9M ~!]M}s5./F3(/)"-]{E17bbޖߔ̭TFgNڛjɭDP(7fWkJu>^NPN`]dGj mLYc@\J}wde &)!,>Wnbg40c)'+A91JФR1=DId>5FR#Y,=%(zpi@SPW˗4s)7_Xًªc!jLyeyNp"% RYhN_9oR7VA}_[2aH$Qal|\um!5am-nn܏d#H &ΦiCc{ 5aYD{q=|[%: dA*ێ/TFFʝp/h$[ې2̏䶸tYTOp8zv`;hа0,o,.Sfi%h}^aq5E.kK,hOl9]c\gAhG8`(Y`jw)W#>Ù昀`1AohjPrRS{)$ܾvzC{^Mr&B f-D! o¬lB:!0l k]}XZ=@2Q TqcB.U%.8Z~یe{?]ω쥊~*t lTIQ4vQKs1 q-şoriQBVǝTY^vբSY|Oj^yqIȼU@ Mxu4 [sqfxv5=hrIHCOhsyٝˊ?ˡaCPqd mS=ZDIs)X Nuheȝ>Frdx5." 2l0%8ww=L S({3=%6~ m-:$(S|Ca3K{/؝k鬜_GQͱh=2bCȹY@v _'~T{c"('IlZ O[X0<=*/zHn4'.Qm1",uzCk6d!*{h^V)—Qc9TvZi?旼Nz* hFg0'W שT|DAnjIdt7΃I.|#HgM@uF)m;~UTY!@6 /w+qu<Ƈ8Sm㹍aBM#Q&(0j5$%Z8k1wDrLi^f@gթ }0L/F6U, "z\}|('ӴYDI&ōΓN#?{@ZNB΍ݏgD=PqwVNޏg MvJ0-abQq\`PaN_y *cl܊+v<),ğx@Cso.u4TӞHIVCxfU &_;Xt-WPY}!*{LY)&eA(4"οYMW x4PGSE5 d }WQ1a&IÇ=ǯ^긯*ut(/B!}yKuK.q+A*vb*tM̪3@Nb6MImR7+lkB=G]^c Eoj*,춓}iCf6-x/Y&l#*BCmL?8Pb^9 A̹hM~QRP}SsV˞u+͈+j+2돡;ٕ :9۱#X hO2A!Q~j)Rآ|;4 ƩGD}/& eO FUFYo`!!$S (ϱV/duvgP ESW7GI\+2Y+#yKTy4ym$=zu\f[yzb05;>4 _%30MN+IBT%\P.@Y o:浵~R(8nyXVؾt /[}!C86#x>A ;~'8*8Q1av U#AJC<5Ö CU>_jQSe!!zTq]vLK+a* %$9,cB^!P!@?`us﯒^UH_'%؆ '~W 5T D9;>!AdֲlO /#u tiҴ-A.N0iNR"TT|gN6,kOмp&7[ g QpWU*ɵ׽ JZn:~=Mkٟyu^TC[^bnv$|xnbHZ<]m.r k{r AMi:LOfoIhINC,#)y=k{eQȖ~VWS:z` #lʬx2tWnl=ʭ߃KGʪSa 2}o23f)*cRpsMvc, ns7'# $fmgP-`~s"8w_}ⶬ\i=!mKb> G3:)JGyQ/G [|䟠8z M {a.x~Geyj5l& kyooe-t=VWY۶*Q^LU=ziC8IAo*se |: W$DUʝKBfyu,`/sX|K,~ $w#T͆o(9,gfڕuL˵^I3Pď"mmc=uƙnb^h{~h^B&qW,%l54WŠYK+;oY3 B\#Y4bʕ(sZlWF3sT/VmKPW;=D7YPul2|E(Cc\ᔭR !fe_=/l<|5A{ Y~뚰~p{EmkUac}wE/>ǎ$k3wտSȬjPkxlɳniV8 #DGI[*(s{!)x~x@YFk.%1v.v%~I%tY4.7}bQh#g8(ȊoxX^^,c4슋b8w' )K~}+lS-܅0Q0&ar_Ajr\*}[bh}0.#4*DL=^Wm/1B , U՗'Ors@f0J}' snBmP3MG20Asֱ z_\(EbC(&0 I2;neƿx#$AH&ᳳ|@Agޢ4ٚ́~H[^H1\};f<tA)lEjm^w {*AunMLcS\wG\+~9tgjE}Q@3UE86glӢ`'+e~P*ܵn}iUMjPd-yhcU!mY<vGN9a٪ {R]{51#!b>g qmǵTybz,EhScCzیK(<_?(mG.!n Ø[ 3zOwX AȔV`j͖/RC]o k&"c{>tjN2l2 I,!6䴓S'k+vPsGb]ou}djrhɞ$ J(Wr9Son`RJC9zX0+يp}ng`Cyeޙ[(g''^t2u†B9O: Ip+/|gs|3?= \:%kx"T_<ԁ`S{le ,[Px4|GE'Q{9-SkqS :鈛Vp]r_5u|qlO[Xe,>ogF@b97|=t>x'nNOmn341>vD(eNC5Ccemwk `*KlFۃEt4EH1gB"iⅈu,b/lx Go|%N>=WQ~BKnנv!tǣN,'Kjy3ϜF:t/y/ڬ-⸪BJgMُ(^9J1&4WS)CKfZrFB_E$nS2}MjK/45Pokaa-u'u,,ZؔTĞs]!BdK kcJwzrbw4 8cn}u;K %ktcBx,`[ k>8@hI6I]x$`VπR |bI8inŲqQ jz%a]fSQV?rlO0(-R=nv΁͂[|&s_FTwŔ1wm,S$Oh`Yꯉ3TOT 9'-: YZ