ctdb-4.13.4+git.187.5ad4708741a-1.34 >
A `+p9|eKڦ*
ʫWg+?J}3x<mɑCIƟ*ڹ4cg!m`UEoP#>zʠWmZUC C C#R֔ Zy>a]u,1ed 4IьVAV zAzdWߴA}ID W.9={=?W$'߭'IKGx̀2ŒJTb+>sɞ݂{D13d9117873fa5da0f735eb93326722a995558cee0 d48d9c9697655ce2308804fa98342a8d18d75de9eedb4eaaaa7ec5c3bdde28b1 8 `+p9|: 56b eLT"K ~w"r,yQa#UШ @%Ux1A09[s}}q4Al G&6eeB IuKOM-/svS Z|Y@0y:]5=LfZ,ڠ62u=n)M3@s lժ`m ԝ
1MK\hYdiA *V/Vs 3W)P31hH^pƸ?R3ȲȘÎwu_ 7)\ > p F ?< ? ?, d " ' 5 d h p t
` u 4 u u
u u 5 u
5 u 7p u 9 u < <0 u > > F ? F H F ( Is 8 I| 9 L : [ = V > ^ ? f @ n F v G u H ` u I 4 u X Y \ $ u ] u ^ ! b # c $r d $ e $ f $ l $ u $ u v & w 4 u x 6d u y 88 z > > > > ?( C ctdb 4.13.4+git.187.5ad4708741a 1.34 Clustered TDB ctdb is the clustered database used by Samba `(sheep69 6SUSE Linux Enterprise 15 SUSE LLC GPL-3.0-or-later https://www.suse.com/ System/Daemons https://www.samba.org/ linux x86_64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in ctdb.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -e /etc/sysconfig/ctdb ] ; then
grep CTDB_LOGGING /etc/sysconfig/ctdb >/dev/null 2>&1 ||
sed -i s/CTDB_LOGFILE=/CTDB_LOGGING=file:/g /etc/sysconfig/ctdb
fi
if [ ! -f /etc/ctdb/config_migrate.sh ] ; then
echo "* CTDB Configuration has been redesigned"
echo ""
echo " - Daemon and tool options are now specified in a new ctdb.conf"
echo " Samba-style configuration file. For details, see ctdb.conf(5)."
echo ""
echo " - The event script configuration is no longer specified in the top-level"
echo " configuration file. It can now be specified per event script."
echo " For example, the configuration options for the 50.samba event script"
echo " can be placed alongside the event script in a file called"
echo " 50.samba.options. Script options can also be specified in a new"
echo " script.options file. For details, see ctdb-script.options(5)."
echo ""
echo " - Options that affect CTDB startup should be configured in the"
echo " distribution-specific configuration file. For details, see"
echo " ctdb.sysconfig(5)."
echo ""
echo " - Tunable settings are now loaded from ctdb.tunables. Using"
echo " CTDB_SET_TunableVariable= in the main configuration file is"
echo " no longer supported. For details, see ctdb-tunables(7)."
echo ""
echo " An example script to migrate legacy configurations to the new"
echo " style is available in /etc/ctdb/config_migrate.sh."
fi
PNAME=ctdb
SUBPNAME=
SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME
# If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR
if [ ! -f $SYSC_TEMPLATE ] ; then
TEMPLATE_DIR=/var/adm/fillup-templates
SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME
fi
SD_NAME=""
if [ -x /bin/fillup ] ; then
if [ -f $SYSC_TEMPLATE ] ; then
echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..."
mkdir -p /etc/sysconfig/$SD_NAME
touch /etc/sysconfig/$SD_NAME$PNAME
/bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE
fi
else
echo "ERROR: fillup not found. This should not happen. Please compare"
echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and"
echo "update by hand."
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in ctdb.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
/usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/ctdb.conf || :
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable ctdb.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop ctdb.service
) || :
fi
exit 0
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in ctdb.service ; do
sysv_service="${service%.*}"
rm "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart ctdb.service
) || :
fi
fi
exit 0 ; ? a Y ! 0 ! +s "b 8@ # 8@ Y ( :X hP hP h ` ) 8 , 09 N B ! i ' j K t fm @ V П >% v Y F ) 6 ; ; T . 2 5 B a b e $ AAA큤A큤큤@ @ 큤A큤AAAA큤A큤큤큤AAA ```9`9`9`v`v`9`j`v`9`9`9`9`9`9`9`9``9`9````j`j`v`j``j````````````j``j``````j``v`v`9`9`9`9`9`9`9`9`9`9`9`9`9`9`9`9`9`9``9`9`j`f`i`j`_`h`e`g`b`k```c`9`9`9`9`9`9`9`9`9```d`a`9`9``*`*`)`*`*`)`*`*`*`*`*`*`*`m`k`k 0b553a8d30f0148287ad4ad2d5219dbc0ccfa2d39aa4dadcbf5986d240c9423f 4aa1d70a7a9e2cb94d56a1fd1a832d4cd54278cb5e69ead97e30578e4784e7bf 9537d7db0e92820ca3d2c94637b4ab504613b79fb44ac5ecf937d6aa2c000f86 a258f95199dca4b2752bd3f36bd01ef03254dbf7581816ac7ac60771f1ce0218 ab99d4d4d16811a8d84b2399d74ce011dadac04f8c4fc12822799e7fdb775927 d5679b9ebe057c8770a2c69e20b76e7ec3a9a3a0213dc3357a822667757c82fd 4c2af4da12e46bb1565ecbcb5649ba292dcc67db6974b5d9c770f8443366e9b8 96f617054e8a1cbedfb9e0bf6d38c0dd97f02040502826bbe68167fada888315 55e7c222ed18953f19e6a40210dee4ac1f224ce37e8ede19518990ced301528e c2e38b13cad22ed5f93224c7cb5bee048038801db2d8a2c9210589b46ea1fdfe 548af41b90c9ec097d4f4b17c07ad700e39873d7b2f4514deb60221aa5550a19 f44792b042dcf943fba146b9926071f547b7744c9a6f221a0c243bafba999c3a 1c3447b43700351fbc9bd224e12d636fda61d31e6d19d0196b94d0704d608113 7ab04a1adef3c454d039a8cf125df0943eb524323118169ed0d596871d20a169 6e582a823158d49b1a66f26582dd28aed0676a2ddcca0f5449cba101d171762d 78f6fafe5c99b60dad73c80169f18598678235392a6ef656792e77a52ca35afa 6ddd92d08f5952262a34ab4dbd9d1ce57fafdf16d47eb9bfd5693c8df1f1ae57 9940e6759d758a69877aab85ec4dde2b0103a6ca1c922337e628dfc055774531 deab3c82751a8b9fb6fd0d2af33f39a83c3740940912263565b467781b7eeb0b 2f210d13c24812dc08a878688e358fbab412d074f6719e52693efdb739ee2cf9 357383c0e3360260c9865017e16ff0dc9096018c15fe1c2304d367f8e1197370 07a2fdd68a3a0380d554a2dd75e1b7c07fe344f1e863e2bdb1536a3416794bfa 34cf6e4472e43679c379d77675e2e63d98c106e31a758a44977629e8950ab4d6 c5d94805409e7e397394611706d66123a0abf6e557017d69979d4e996c3d6958 1307e00c1a6fbf97233c916145ed79bc7647a68b35ac2fba2c22b090b6a4571e 77a0dfbf3a56b6210ab2e455c1862a0ca5c52c0363437679e164e727b613dfb9 ea188a10d603e4e820ae2b2029a81812ca53e0f8d89426361752c66bbaca79ea 730e2591ec3f88cf2d48e99e05f0b05cc740c4783f12d6ea494f6a106191b828 dd616aca9afb9db24ddfaf3464ef582b8f12183bbb3b48bec6492fc8dcf53a49 f4b9b30361c921d644d3c1dc17cbafcd6558b6b0069d3e73b7f170927967bf25 3defca1b0d6e5605e60e7e934a7599aba0e17cc3cbc6ec3ec717c362716721cd 71e84711159c54b8cd815a9b457341455f5a43ff24ca7741919b2315484138bb b99aa0fd2b117345aaa6d3ea231eaf9344ec0a530a5f060c257cabe881f4d283 410ca92e05d5d2e445a1b8d447152c8f052cc3c57187abe0f9645488605f15ed 84ed47b3b2c270857bee66f08d9c9176f3f7aabef7678571cb8c37b1f85b8793 cc7b0b697e4e61f1dbe04b353c146f383cd58a9020e6cbd1f4e906da2e3358c5 ddd8a39f6e478a59a5b5358237f5e9fb70b226f4e93c059ab92e71a9b37dc76d 25a12d3937411e2051d277f87647d83f6586c56cbce989162811a88f6dfb1ae4 564e8fb67c071a1f31012f646d599b6f6f2580de8b2dd85624591971f35ff9e8 3f9803273aec7466978fac6da76a81eb7ffcd70e3dde1edb8b5dd742263bb06e 58a7e30b4ecec5ba14b6943ab0c8248651f9a96c2567dedb17fd3402b45a65d6 3b89aba58a0a72a4fa6b626d617f8420191f4995f7763fe4a1ceeb7f4bf5cdd3 a27cb48c654dac579012da66e513f7836d25f92f6ea6767435460e581968bd67 01dfdf4b3f328792f2579a8fdcae30b7d51d9cd7b1b91cc054419da52f045c76 20cababc0cc3ee89fd892a90bc3213ae889fef809dbc4507f80fae58a778c780 2a372adacbc187b1012de59d9a5b5c87ac7406d7e231d22b5f1b453e8108c2cc 58cc2399cfa4d415bf4cb794778158537503c4b5281f1af7e9319f0501d12828 eaed4a0ff50c58bfa3817de0a83206e5b2b63c3f0cbc30a0b7ae15d652171a20 f20368173053b28d6736c11abb44d866748787d8a4fafb162f3daade13e2eec0 941371d406c46a94640226593de62901b515c76944f878a08311a27f9e7f1f98 da39f0ae52f2fb4b1ae8f31d5553a7a169ce07899b3127138f2fb8341d5ee801 d04cb8d3d2fbcd4489807070ccebe1683496581dc51f71c6b48648841047c9c7 37bde192a4cf206329e7ef3b537ad6cb009dd383dea839f89803018045ee3722 7ebf9ca7200ebf6a865bfa9b0226c0ab52157c2a800a43cbd7f33f40d5400616 6059e04cad54a5dcc11031be59a5e8455948db49e080afc66548aebdc929c6a0 c047202c27250e91bc3927259473dafe54ebd955fd23f7ccb52032b86098df4f 4f60f296eb6df4426dc8416a877801600e8af5caacc45ff73abfc590a7ac208f 245a370bd88041263d71549a2def66308b99a072e05dd0f66fa39ab10a530222 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 9f08717526862075c0e646352b1395b48c2e199046cfed84426f4b26a7ddf849 716036b8a06762d0a5599e4c9bb6881e966caa7ba5c1166c12aebf08ec890583 dbb35721c423eb3910bedc2c333359b94adac2c4affbf725cdd178cbc5e659be 50511963727bf61c00fcb90d558c1cacefe5d1620508f3c4078ef3d82eaea80d 2b73348f401d6530d67c90d0cef25298d499829f0dd75a0b7e45738f7316f478 42c99867b15cfce7784b45b8bd51aadda0dd73a87b01ab1b32bc0d1f433d2653 fa993b9d5057f20191db211eb9ced7d255688d63277b7947271ec63b12918996 5caf093b9e925e67bcc01344f5991b9564135d01681f8bbd101502044b9077a1 54965e384686f5d30c25e84603b88c6547f0e0ef30d9e9c26af5bb85fbc8f5c5 1a8622522e9fd9667cf88b9186705226aa71e3172bb8db64cec87020033db336 891446817ba959211b2efdae261b8825df56a722bb3ca1f1ec970b03ac2ee77b 22c263db7b05579e57a80954a3f4842cce974cb9df1f7746ebe446439c2f6e0a 1a780f4df2dc70e49e6c3c7af17a36e8e2eeec1e596bedaff29366f7fc91348c 30826708cc68665a004a8409976e411dda42c504c2591270bf38da0bf3676f92 efab7c2865dc80b8fbca106564d090c7df73f705534d003a6cbab5ddc217fa32 7a65274a38d6297f6b7f574a0b778e9b8953b9600e484cf4ce591ed57f1fdbfb 12cdb2aec7624b42304f4ec0e9bb11df94781bf823c42745424a2b4f42b109be 0b553a8d30f0148287ad4ad2d5219dbc0ccfa2d39aa4dadcbf5986d240c9423f bed1b24f8042a6d7d40037fe18ed5974d1c29fd572562f2266208d5de74ef9ee c2f86511b548c67a272f605dc89d40a700f30b3757d5421e2ed2cf1c2e35265d fa9d840db75ecbd2d335e16a6297d0d5e915d889aca8c3413d9720c9fa012a6e a12464354480d5536f854b11ae2157d98bb8d78f917cde28437aefeca63bfe4e 5316f2d6927173ed0bb5679d30fd4f4146d4cf55f48e3268a2fe98be1a21f8eb af01c3560aa1c24d8d90fab36947835d546794708d62106477dfbe8bfc2642cb 7c3c5726dcd2ee4a343c03258aa26667082b0c2a12391c61672adb6543bbac31 b4c22dee3d057f42da2c290be4ce81364f1d0aebfd4cacd33aa9e17413928e4b f2ff3b9008e9327d65879364ec60476f7d3364dd3c93f253df7aa998941f8d92 acfb4a92140842c239ad26dcba9d28f78f1b10a628639548b8248d4979a58dac 12bc8ff0741dca2e23b1fc575732e99288a60cd38a0a2eb5d2147d2f80c7efd9 a77507640544d39aeb30866f13fecb4461f5eec22ae39d9327f04cf3d6ab62bb 60a818f60a07f762c9ac640717a26e6d655844e6388739b4442d5549102e06a1 658ec7e7dcd9669ad6df3ee60896a6b38199f14f4101077055fbd7836201cc39 3e118ac031b482ee1afc5f54927f6a01b3133c7cec40fcc9a7b92ffcc19961f5 04a0d1a07033b70e885e6bd1a7550b2b6e625507d917663445826e7bcc7092c6 1f9bf240f7e7dcdabccd0f391e09d81c2117817cbe307b176da13f070de9ef5b 4f8fd5d54a0b39827ca2d9e996930de3758d309ff0c7819ad4191a5b4b3e77e8 c57ecbd78d1dc4fc7cbe73c7ff5d7473652d8b36d61a70047db74350d2d307c8 800df94660bccdcb81ae07f95937ab7ad518320f1f521a73fa30fa5089b64231 83b65e12c67ce363d11b05c96582a32e2921065fbef6e475d0e3b78b42f32b06 8a034a80d692235ae48722daefcadec8377a2deddf6d7229652db296522258cc ctdb_run_tests service @ @ @ root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root samba-4.13.4+git.187.5ad4708741a-1.34.src.rpm config(ctdb) ctdb ctdb(x86-64) libctdb-event-client-samba4.so()(64bit) libctdb-event-client-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/mktemp /bin/sh /bin/sh /bin/sh /bin/sh /bin/sh /usr/bin/env /usr/bin/killall config(ctdb) coreutils diffutils fillup grep libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libctdb-event-client-samba4.so()(64bit) libctdb-event-client-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) libiov-buf-samba4.so()(64bit) libiov-buf-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) libpopt.so.0()(64bit) libpopt.so.0(LIBPOPT_0)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libreplace-samba4.so()(64bit) libreplace-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) libsamba-debug-samba4.so()(64bit) libsamba-debug-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) libsamba-util.so.0()(64bit) libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit) libsocket-blocking-samba4.so()(64bit) libsocket-blocking-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) libsys-rw-samba4.so()(64bit) libsys-rw-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) libtalloc-report-samba4.so()(64bit) libtalloc-report-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) libtalloc.so.2()(64bit) libtalloc.so.2(TALLOC_2.0.2)(64bit) libtalloc.so.2(TALLOC_2.1.0)(64bit) libtdb-wrap-samba4.so()(64bit) libtdb-wrap-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) libtdb.so.1()(64bit) libtdb.so.1(TDB_1.2.1)(64bit) libtdb.so.1(TDB_1.2.10)(64bit) libtdb.so.1(TDB_1.2.2)(64bit) libtdb.so.1(TDB_1.2.5)(64bit) libtdb.so.1(TDB_1.3.0)(64bit) libtdb.so.1(TDB_1.3.11)(64bit) libtevent-util.so.0()(64bit) libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit) libtevent.so.0()(64bit) libtevent.so.0(TEVENT_0.9.13)(64bit) libtevent.so.0(TEVENT_0.9.14)(64bit) libtevent.so.0(TEVENT_0.9.16)(64bit) libtevent.so.0(TEVENT_0.9.21)(64bit) libtevent.so.0(TEVENT_0.9.9)(64bit) libtime-basic-samba4.so()(64bit) libtime-basic-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit) libtirpc.so.3()(64bit) libtirpc.so.3(TIRPC_0.3.0)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) sed tdb-tools 4.13.4+git.187.5ad4708741a-1.34 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 `@___i_@_|\@_{
_l@_i@_d@_ _
@^@^^2^2^^1^^Y ^J@^2@^&^&]]]])]@]@]]@]nU]nU]i]e@]_@]J@]B@]
#]:\ڭ\\@\@\ \N\e\e\}@\o@\\ \\ \4\ @[[@[[%@[@[
@[[t[#@[[Q@[Q@[\[[[{[z@[r@[
@[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z @Z OZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y,
@Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W
Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U @UUAUĝU@UU @Uy@UUrUq@UhTU_@USascabrero@suse.de scabrero@suse.de scabrero@suse.de scabrero@suse.de nopower@suse.com scabrero@suse.de ddiss@suse.com ddiss@suse.com ddiss@suse.com scabrero@suse.de scabrero@suse.de dmulder@suse.com nopower@suse.com scabrero@suse.de scabrero@suse.de dmulder@suse.com scabrero@suse.de scabrero@suse.de nopower@suse.com nopower@suse.com nopower@suse.com dmulder@suse.com scabrero@suse.de nopower@suse.com ddiss@suse.com nopower@suse.com nopower@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com jmcdonough@suse.com nopower@suse.com scabrero@suse.de nopower@suse.com nopower@suse.com ddiss@suse.com ddiss@suse.com nopower@suse.com nopower@suse.com ddiss@suse.com nopower@suse.com dmulder@suse.com dmulder@suse.com ddiss@suse.com scabrero@suse.de dmulder@suse.com ddiss@suse.com nopower@suse.com jengelh@inai.de dmulder@suse.com scabrero@suse.de scabrero@suse.de scabrero@suse.de dmulder@suse.com dmulder@suse.com dmulder@suse.com jmcdonough@suse.com dmulder@suse.com scabrero@suse.de dmulder@suse.com scabrero@suse.de dmulder@suse.com dmulder@suse.com vcizek@suse.com dmulder@suse.com dmulder@suse.com nopower@suse.com scabrero@suse.de jmcdonough@suse.com scabrero@suse.de aaptel@suse.com jengelh@inai.de dimstar@opensuse.org dmulder@suse.com jmcdonough@suse.com david.mulder@suse.com jmcdonough@suse.com aaptel@suse.com dmulder@suse.com scabrero@suse.com scabrero@suse.com kukuk@suse.de david.mulder@suse.com scabrero@suse.com rbrown@suse.com dmulder@suse.com scabrero@suse.com dimstar@opensuse.org scabrero@suse.com aaptel@suse.com nopower@suse.com nopower@suse.com aaptel@suse.com ddiss@suse.com dmulder@suse.com ddiss@suse.com dmulder@suse.com ddiss@suse.com ddiss@suse.com nopower@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com ddiss@suse.com dmulder@suse.com nopower@suse.com jmcdonough@suse.com aaptel@suse.com kukuk@suse.com kukuk@suse.de nopower@suse.com aaptel@suse.com dmulder@suse.com ddiss@suse.com dmulder@suse.com ddiss@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com nopower@suse.com nopower@suse.com jmcdonough@suse.com jmcdonough@suse.com nopower@suse.com nopower@suse.com ddiss@suse.com jmcdonough@suse.com ddiss@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com jmcdonough@suse.com nopower@suse.com lmuelle@suse.com lmuelle@suse.com jmcdonough@suse.com nopower@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com nopower@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com tchvatal@suse.com lmuelle@suse.com nopower@suse.com crrodriguez@opensuse.org lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com noel.power@suse.com ddiss@suse.com ddiss@suse.com lmuelle@suse.com ddiss@suse.com lmuelle@suse.com lmuelle@suse.com nopower@suse.com ddiss@suse.com ddiss@suse.com lmuelle@suse.com lmuelle@suse.com ddiss@suse.com lmuelle@suse.com mpluskal@suse.com lmuelle@suse.com nopower@suse.de ddiss@suse.com ddiss@suse.com ddiss@suse.com lmuelle@suse.de nopower@suse.de lmuelle@suse.com nopower@suse.de ddiss@suse.com lmuelle@suse.com lmuelle@suse.com lmuelle@suse.com - Update to 4.13.4
* Work around special SMB2 IOCTL response behavior of NetApp Ontap
7.3.7; (bso#14607);
* Temporary DFS share setup doesn't set case parameters in the same
way as a regular share definition does; (bso#14612);
* lib: Avoid declaring zero-length VLAs in various messaging functions;
(bso#14605);
* Do not create an empty DB when accessing a sam.ldb; (bso#14579);
* vfs_fruit may close wrong backend fd; (bso#14596);
* Temporary DFS share setup doesn't set case parameters in the same way
as a regular share definition does; (bso#14612);
* vfs_virusfilter: Allocate separate memory for config char*; (bso#14606);
* vfs_fruit may close wrong backend fd; (bso#14596);
* Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7;
(bso#14607);
* The cache directory for the user gencache should be created recursively;
(bso#14601);
* Be more flexible with repository names in CentOS 8 test environments;
(bso#14594); - Uninstalling samba-client: Failed to disable unit, cifs.service
does not exists; (bsc#1180388); - Update to 4.13.3
+ libcli: smb2: Never print length if smb2_signing_key_valid() fails for
crypto blob; (bso#14210);
+ s3: modules: gluster. Fix the error I made in preventing talloc leaks
from a function; (bso#14486);
+ s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL
via TALLOC_FREE(); (bso#14515);
+ s3: spoolss: Make parameters in call to user_ok_token() match all other
uses; (bso#14568);
+ s3: smbd: Quiet log messages from usershares for an unknown share;
(bso#14590);
+ samba process does not honor max log size; (bso#14248);
+ vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE;
(bso#14587);
+ s3-libads: Pass timeout to open_socket_out in ms; (bso#13124);
+ s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486);
+ smbclient: Fix recursive mget; (bso#14517);
+ clitar: Use do_list()'s recursion in clitar.c; (bso#14581);
+ manpages/vfs_glusterfs: Mention silent skipping of write-behind
translator; (bso#14486);
+ vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573);
+ interface: Fix if_index is not parsed correctly; (bso#14514); - Update to 4.13.2
+ s3: modules: vfs_glusterfs: Fix leak of char **lines onto
mem_ctx on return; (bso#14486);
+ RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
(bso#14471);
+ smb.conf.5: Add clarification how configuration changes reflected
by Samba; (bso#14538);
+ daemons: Report status to systemd even when running in foreground;
(bso#14552);
+ DNS Resolver: Support both dnspython before and after 2.0.0;
(bso#14553);
+ s3-vfs_glusterfs: Refuse connection when write-behind xlator is
present; (bso#14486);
+ provision: Add support for BIND 9.16.x; (bso#14487);
+ ctdb-common: Avoid aliasing errors during code optimization;
(bso#14537);
+ libndr: Avoid assigning duplicate versions to symbols; (bso#14541);
+ docs: Fix default value of spoolss:architecture; (bso#14522);
+ winbind: Fix a memleak; (bso#14388);
+ s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531);
+ docs-xml/manpages: Add warning about write-behind translator for
vfs_glusterfs; (bso#14486);
+ nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h.
+ vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530);
+ third_party: Update resolv_wrapper to version 1.1.7; (bso#14547);
+ examples:auth: Do not install example plugin; (bso#14550);
+ ctdb-recoverd: Drop unnecessary and broken code; (bso#14513);
+ RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special;
(bso#14471); - Adjust smbcacls '--propagate-inheritance' feature to align with
upstream; (bsc#1178469). - Update to samba 4.13.1
+ CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
easily crafted records; (bsc#1177613); (bso#14472);
+ CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
(bso#14436);
+ CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
(bsc#1173902); (bso#14434);
- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
/var/run/samba; (bsc#1177355); - Fix vfs_ceph query_directory regression; (bso#14519)
- Drop liburing-devel for SLE15-SP2; (bsc#1177245) - Register CTDB recovery lock holder with ceph-mgr
- Add liburing-devel dependency - Update to samba 4.13.0
+ Require Python 3.6
+ Move wide links functionality into VFS module
+ Deprecate NT4-like 'classic' Samba domain controllers
+ Deprecate SMBv1 only protocol options
+ Remove deprecated "ldap ssl ads" option
+ Unify asynchronous DCE-RPC server; (jsc#SES-645)
+ Replay multichannel lease break requests; (bso#11897); (jsc#SES-655)
+ Drop internal byteorder.h header from util-devel package
+ Remove final code for the AD DC LDAP backend
+ Add AD DC Group Policy Scripts
+ Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399)
+ Fix %U substitutions if it contains a domain name; (bso#14467)
+ Fix krb5.conf creation for 'net ads join'; (bso#14479)
+ Fix build problem if libbsd-dev is not installed; (bso#14482)
+ Toggle vfs_snapper using "--with-shared-modules"; (bso#14437)
+ Fix idmap_ad RFC4511 response handling; (bso#14465)
+ Fix panic in get_lease_type(); (bso#14428) - Update to samba 4.11.13
+ CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
(bso#14497);
+ CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
"server require schannel:WORKSTATION$ = no" about unsecure configurations;
(bsc#1176579); (bso#14497);
+ CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
challenge; (bsc#1176579); (bso#14497);
+ CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
(bsc#1176579); (bso#14497);
- Update to samba 4.11.12
+ s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
+ dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
on RHEL7; (bso#14424);
+ dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
+ lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
(bso#14426);
+ s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
+ lib/util: do not install "test_util_paths"; (bso#14370);
+ lib:util: Fix smbclient -l basename dir; (bso#14345);
+ s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
+ util: Allow symlinks in directory_create_or_exist; (bso#14166);
+ docs: Fix documentation for require_membership_of of pam_winbind;
(bso#14358);
+ s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
(bso#14425); - Add obsoletes to libsmbldap2 package to fix upgrades from previous
versions; (bsc#1172810); - Fix net command unable to negotiate SMB2; (bsc#1174120); - Update to samba 4.11.11
+ CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
and VLV combined; (bso#14364); (bsc#1173159]
+ CVE-2020-10745: invalid DNS or NBT queries containing dots use
several seconds of CPU each; (bso#14378); (bsc#1173160).
+ CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
server with paged_result or VLV; (bso#14402); (bsc#1173161)
+ CVE-2020-14303: Endless loop from empty UDP packet sent to
AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
+ Fix segfault when using SMBC_opendir_ctx() routine for share
folder that contains incorrect symbols in any file name;
(bso#14374).
+ vfs_shadow_copy2 doesn't fail case looking in
snapdirseverywhere mode; (bso#14350)
+ ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
(bso#14413).
+ Malicous SMB1 server can crash libsmbclient; (bso#14366)
+ winbindd: Fix a use-after-free when winbind clients exit;
(bso#14382)
+ ldb: Bump version to 2.0.11, LMDB databases can grow without
bounds. (bso#14330)
- Update to samba 4.11.9
+ nmblib: Avoid undefined behaviour in handle_name_ptrs();
(bso#14242).
+ 'samba-tool group' commands do not handle group names with
special chars correctly; (bso#14296).
+ smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
is not valid; (bso#14237).
+ Missing check for DMAPI offline status in async DOS
attributes; (bso#14293).
+ smbd: Ignore set NTACL requests which contain
S-1-5-88 NFS ACEs; (bso#14307).
+ vfs_recycle: Prevent flooding the log if we're called on
non-existant paths; (bso#14316)
+ smbd mistakenly updates a file's write-time on close;
(bso#14320).
+ RPC handles cannot be differentiated in source3 RPC server;
(bso#14359).
+ librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
+ nsswitch: Fix use-after-free causing segfault in
_pam_delete_cred; (bso#14327).
+ Fix fruit:time machine max size on arm; (bso#13622)
+ CTDB recovery corner cases can cause record resurrection
and node banning; (bso#14294).
+ ctdb: Fix a memleak; (bso#14348).
+ libsmb: Don't try to find posix stat info in SMBC_getatr().
+ ctdb-tcp: Move free of inbound queue to TCP restart;
(bso#14295); (bsc#1162680).
+ s3/librpc/crypto: Fix double free with unresolved
credential cache; (bso#14344); (bsc#1169095)
+ s3:libads: Fix ads_get_upn(); (bso#14336).
+ CTDB recovery corner cases can cause record resurrection
and node banning; (bso#14294)
+ Starting ctdb node that was powered off hard before
results in recovery loop; (bso#14295); (bsc#1162680).
+ ctdb-recoverd: Avoid dereferencing NULL rec->nodemap;
(bso#14324)
- Update to samba 4.11.8
+ CVE-2020-10700: Use-after-free in Samba AD DC LDAP
Server with ASQ; (bso#14331); (bsc#1169850);
+ CVE-2020-10704: LDAP Denial of Service (stack overflow)
in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
+ s3: lib: nmblib. Clean up and harden nmb packet
processing; (bso#14239).
+ s3: VFS: full_audit. Use system session_info if called
from a temporary share definition; (bso#14283)
+ dsdb: Correctly handle memory in objectclass_attrs;
(bso#14258).
+ ldb: version 2.0.9, Samba 4.11 and later give incorrect
results for SCOPE_ONE searches; (bso#14270)
+ auth: Fix CIDs 1458418 and 1458420 Null pointer
dereferences; (bso#14247).
+ smbd: Handle EINTR from open(2) properly; (bso#14285)
+ winbind member (source3) fails local SAM auth with empty
domain name; (bso#14247)
+ winbindd: Handling missing idmap in getgrgid(); (bso#14265).
+ lib:util: Log mkdir error on correct debug levels;
(bso#14253).
+ wafsamba: Do not use 'rU' as the 'U' is deprecated in
Python 3.9; (bso#14266).
+ ctdb-tcp: Make error handling for outbound connection
consistent; (bso#14274).
- Update to samba 4.11.6
+ pygpo: Use correct method flags; (bso#14209).
+ vfs_ceph_snapshots: Fix root relative path handling;
(bso#14216); (bsc#1141320).
+ Avoiding bad call flags with python 3.8, using METH_NOARGS
instead of zero; (bso#14209).
+ source4/utils/oLschema2ldif: Include stdint.h before
cmocka.h; (bso#14218).
+ docs-xml/winbindnssinfo: Clarify interaction with
idmap_ad etc; (bso#14122).
+ smbd: Fix the build with clang; (bso#14251).
+ upgradedns: Ensure lmdb lock files linked; (bso#14199).
+ s3: VFS: glusterfs: Reset nlinks for symlink entries during
readdir; (bso#14182).
+ smbc_stat() doesn't return the correct st_mode and also
the uid/gid is not filled (SMBv1) file; (bso#14101).
+ librpc: Fix string length checking in
ndr_pull_charset_to_null(); (bso#14219).
+ ctdb-scripts: Strip square brackets when gathering
connection info; (bso#14227). - Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307); - Installing: samba - samba-ad-dc.service does not exist and unit
not found; (bsc#1171437); - Fix samba_winbind package is installing python3-base without
python3 package; (bsc#1169521); - Require libldb2 >= 2.0.10 after security release. - CVE-2020-10704: LDAP Denial of Service (stack overflow) in
Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
ASQ; (bso#14331); (bsc#1169850); - Fix smbclient crash with double free (with unresolved krb5
credential cache); (bso#14344); (bsc#1169095). - Starting ctdb node that was powered off hard before results
in recovery loop; (bso#14295); (bsc#1162680). - CTDB doesn't retry outgoing connections on bind (and some other)
failures; (bso#14274); (bsc#1162680). - Revert: Allow idmap_rid to have primary group other than
"Domain Users"; (bsc#1087931). - Fix nmbstatus not reporting detailed information about workgroups;
(bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927); - Update to samab 4.11.5
+ CVE-2019-14902: Replication of ACLs down subtree on
AD Directory is not automatic; (bso#12497); (bsc#1160850).
+ CVE-2019-19344: Fix server crash with
dns zone scavenging = yes; (bso#14050); (bsc#1160852).
+ CVE-2019-14907: server-side crash after charset conversion
failure (eg during NTLMSSP processing); (bso#14208);
(bsc#1160888).
- Update to samba 4.11.4
+ Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
(bso#14161).
+ Ensure we don't call cli_RNetShareEnum() on an SMB1
connection; (bso#14174).
+ NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
SMBC_opendir_ctx; (bso#14176).
+ SMB2 - Ensure we use the correct session_id if encrypting
an interim response; (bso#14189).
+ Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
+ printing: Fix %J substition; (bso#13745).
+ Remove now unneeded call to cmdline_messaging_context();
(bso#13925).
+ Fix incomplete conversion of former parametric options;
(bso#14069).
+ Fix sync dosmode fallback in async dosmode codepath;
(bso#14070).
+ vfs_fruit returns capped resource fork length; (bso#14171).
+ libnet_join: Add SPNs for additional-dns-hostnames entries;
(bso#14116).
+ smbd: Increase a debug level; (bso#14211).
+ Prevent azure ad connect from reporting discovery errors
reference-value-not-ldap-conformant; (bso#14153).
+ krb5_plugin: Fix developer build with newer heimdal system
library; (bso#14179).
+ replace: Only link libnsl and libsocket if required;
(bso#14168);
+ ctdb: Incoming queue can be orphaned causing communication;
breakdown; (bso#14175).
+ ldb: Release ldb 2.0.8. Cross-compile will not take
cross-answers or cross-execute; (bso#13846).
+ heimdal-build: Avoid hard-coded /usr/include/heimdal in
asn1_compile-generated code; (bso#13856). - Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320). - Update to samba 4.11.3
+ CVE-2019-14861: DNSServer RPC server crash, an authenticated user
can crash the DCE/RPC DNS management server by creating records
with matching the zone name; (bso#14138); (bsc#1158108).
+ CVE-2019-14870: DelegationNotAllowed not being enforced, the
DelegationNotAllowed Kerberos feature restriction was not being
applied when processing protocol transition requests (S4U2Self),
in the AD DC KDC; (bso#14187); (bsc#1158109). - CVE-2019-14861: DNSServer RPC server crash, an authenticated user
can crash the DCE/RPC DNS management server by creating records
with matching the zone name; (bso#14138); (bsc#1158108).
- CVE-2019-14870: DelegationNotAllowed not being enforced, the
DelegationNotAllowed Kerberos feature restriction was not being
applied when processing protocol transition requests (S4U2Self),
in the AD DC KDC; (bso#14187); (bsc#1158109). - Update to samba 4.11.2
+ CVE-2019-10218: Client code can return filenames containing
path separators; (bsc#1144902); (bso#14071).
+ CVE-2019-14833: Samba AD DC check password script does not
receive the full password; (bso#12438).
+ CVE-2019-14847: User with "get changes" permission can crash
AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
+ Overlinking libreplace against librt and pthread against every
binary or library causes issues; (bso#14140);
+ kpasswd fails when built with MIT Kerberos; (bso#14155);
+ Fix spnego fallback from kerberos to ntlmssp in smbd server;
(bso#14106);
+ Stale file handle error when using mkstemp on a share; (bso#14137);
+ non-AES schannel broken; (bso#14134);
+ Joining Active Directory should not use SAMR to set the password;
(bso#13884);
+ smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
call on an SMB2 connection; (bso#14152);
+ Deleted records can be resurrected during recovery; (bso#14147);
+ getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
(bso#14141);
+ winbind does not list forest trusts with additional trust
attributes; (bso#14130);
+ fault report points to outdated documentation; (bso#14139);
+ pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
trusted domains/forests; (bso#14124);
+ classicupgrade results in uncaught exception - a bytes-like object
is required, not 'str'; (bso#14136);
+ pod2man is not longer required, stop checking at build time;
(bso#14131);
+ Exit code of ctdb nodestatus should not be influenced by deleted
nodes; (bso#14129);
+ username/password authentication doesn't work with CUPS and
smbspool; (bso#14128);
+ smbc_readdirplus() is incompatible with smbc_telldir() and
smbc_lseekdir(); (bso#14094); - CVE-2019-14847: User with "get changes" permission can
crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
separators; (bso#14071); (bsc#1144902); - CVE-2019-14833: samba: Accent with "check script password"
Samba AD DC check password script does not receive the full
password; (bso#12438); (bsc#1154289). - Update to samba 4.11.0
+ For details on all items see WHATSNEW.txt in samba-doc
package
+ Python2 runtime support removed; python 3.4 or later required
+ Security improvements:
- SMB1 disabled by default
- lanman and plaintext authentication deprecated
- winbind: PAM_AUTH and NTLM_AUTH events logged
- GnuTLS 3.2 required; system FIPS mode setting honored
+ CephFS Snapshot integration, exposed as previous file
versions
+ ctdb changes:
- onnode -o option removed
- ctdbd logs when using more than 90% of a CPU thread
- CTDB_MONITOR_SWAP_USAGE variable removed
+ AD Domain controller improvements:
- Upgrade AD databse format
- BIND9_FLATFILE deprecated
- default process model chagned to prefork
- bind9 dns operation duration logging
- Default schema updated to 2012_R2; function level is
unchanged
- many performance improvements
+ Configuration webserver support removed - Fix broken username/password authentication with CUPS and
smbspool; (bsc#1152143); (bso#14128). - Fix auth problems when printing via smbspool backend with kerberos;
(bnc#1148539); (bso#13832). - Update to samba 4.10.8
+ CVE-2019-10197: user escape from share path definition;
(bso#14035); (bsc#1141267); - Fix build on newer systems by modifying samba.spec to use
consistent non-relative paths for pammodules in configure line
and specification of pam_winbind.so library to package. - Update to samba 4.10.7
+ Unable to create or rename file/directory inside shares
configured with vfs_glusterfs_fuse module; (bso#14010).
+ build: Allow build when '--disable-gnutls' is set; (bso#13844)
+ samba-tool: Add 'import samba.drs_utils' to fsmo.py;
(bso#13973).
+ Fix 'Error 32 determining PSOs in system' message on old DB
with FL upgrade; (bso#14008).
+ s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021)
+ join: Use a specific attribute order for the DsAddEntry
nTDSDSA object; (bso#14046).
+ vfs_catia: Pass stat info to synthetic_smb_fname();
(bso#14015).
+ lookup_name: Allow own domain lookup when flags == 0;
(bso#14091).
+ s4 librpc rpc pyrpc: Ensure tevent_context deleted last;
(bso#13932).
+ DEBUGC and DEBUGADDC doesn't print into a class specific log
file; (bso#13915).
+ Request to keep deprecated option "server schannel",
VMWare Quickprep requires "auto"; (bso#13949).
+ dbcheck: Fallback to the default tombstoneLifetime of 180 days;
(bso#13967).
+ dnsProperty fails to decode values from older Windows versions;
(bso#13969).
+ samba-tool: Use only one LDAP modify for dns partition fsmo
role transfer; (bso#13973).
+ third_party: Update waf to version 2.0.17; (bso#13960).
+ netcmd: Allow 'drs replicate --local' to create partitions;
(bso#14051).
+ ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017). - CVE-2019-10197: user escape from share path definition;
(bso#14035); (bsc#1141267). - Prepare for use future use of kernel keyrings, modify
/etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059). - Update samba-winbind script to work with systemd; (bsc#1132739);
- Drop samba dhcpcd hook scripts
- Update to samba 4.10.6
+ s3: winbind: Fix crash when invoking winbind idmap scripts;
(bso#13956).
+ smbd does not correctly parse arguments passed to dfree and quota
scripts; (bso#13964).
+ samba-tool dns: use bytes for inet_ntop; (bso#13965).
+ samba-tool domain provision: Fix --interactive module in python3;
(bso#13828).
+ ldb_kv: Skip @ records early in a search full scan; (bso#13893).
+ docs: Improve documentation of "lanman auth" and "ntlm auth"
connection; (bso#13981).
+ python/ntacls: Use correct "state directory" smb.conf option instead
of "state dir"; (bso#14002).
+ registry: Add a missing include; (bso#13840).
+ Fix SMB guest authentication; (bso#13944).
+ AppleDouble conversion breaks Resourceforks; (bso#13958).
+ vfs_fruit makes direct use of syscalls like mmap() and pread();
(bso#13968).
+ s3:mdssvc: Fix flex compilation error; (bso#13987).
+ s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872).
+ dsdb:samdb: schemainfo update with relax control; (bso#13799).
+ s3:util: Move static file_pload() function to lib/util; (bso#13964).
+ smbd: Fix a panic; (bso#13957).
+ ldap server: Generate correct referral schemes; (bso#12478).
+ s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value;
(bso#13941).
+ s4 dsdb: Fix use after free in samldb_rename_search_base_callback;
(bso#13942).
+ dsdb/repl: we need to replicate the whole schema before we can apply it;
(bso#12204).
+ ldb: Release ldb 1.5.5; (bso#12478).
+ Schema replication fails if link crosses chunk boundary backwards;
(bso#13713).
+ 'samba-tool domain schemaupgrade' uses relax control and skips the
schemaInfo update provision; (bso#13799).
+ dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)]
..."; (bso#13916).
+ python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to
get the ACL; (bso#13917).
+ s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary;
(bso#13947).
+ Using Kerberos credentials to print using spoolss doesn't work;
(bso#13939).
+ wafsamba: Use native waf timer; (bso#13998).
+ ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984). - Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3)
+ CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found
in DnssrvOperation2; (bso#13922); (bsc#1137815).
+ CVE-2019-12436 dsdb/paged_results: Ignore successful results
without messages; (bso#13951); (bsc#1137816).
- Update to samba-4.10.4
+ s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938).
+ py/provision: Fix for Python 2.6; (bso#13882).
+ netcmd: Fix 'passwordsettings --max-pwd-age' command;
(bso#13873).
+ s3-libnet_join: 'net ads join' to child domain fails when
using "-U admin@forestroot"; (bso#13861).
+ vfs_ceph: Explicitly enable libcephfs POSIX ACL support;
(bso#13896); (bsc#1130245).
+ vfs_ceph: Fix cephwrap_flistxattr() debug message;
(bso#13940); (bsc#1134697).
+ ctdb-common: Avoid race between fd and signal events;
(bso#13895).
+ ctdb-common: Fix memory leak in run_proc; (bso#13943).
+ lib: Initialize getline() arguments; (bso#13892).
+ winbind: Fix overlapping id ranges; (bco#13903).
+ lib util debug: Increase format buffer to 4KiB; (bso#13902).
+ nsswitch pam_winbind: Fix Asan use after free; (bso#13927).
+ s4 lib socket: Ensure address string owned by parent struct;
(bso#13929).
+ s3 rpc_client: Fix Asan stack use after scope; (bso#13936).
+ s3:smbd: Handle IO_REPARSE_TAG_DFS in
SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097).
+ smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344).
+ smb2_sesssetup: avoid STATUS_PENDING responses for session setup;
(bso#12845).
+ smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698).
+ smb2_sesssetup: avoid STATUS_PENDING responses for session
setup; (bso#13796).
+ dbcheck: Fix the err_empty_attribute() check; (bso#13843).
+ vfs_snapper: Drop unneeded fstat handler; (bso#13858).
+ vfs_default: Fix vfswrap_offload_write_send()
NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862).
+ smb2_server: Grant all 8192 credits to clients; (bso#13863).
+ smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling;
(bso#13919).
+ s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872).
+ s3: modules: ceph: Use current working directory instead of
share path; (bso#13918); (bsc#1134452).
+ winbind: Use domain name from lsa query for sid_to_name cache
entry; (bso#13831).
+ memcache: Increase size of default memcache to 512k;
(bso#13865).
+ docs: Update smbclient manpage for "--max-protocol";
(bso#13857).
+ s3:utils: If share is NULL in smbcacls, don't print it;
(bso#13937).
+ s3:smbspool: Fix regression printing with Kerberos credentials;
(bso#13939).
+ ctdb-scripts: CTDB restarts failed NFS RPC services by hand,
which is incompatible with systemd; (bso#13860).
+ ctdb-daemon: Revert "We can not assume that just because we
could complete a TCP handshake"; (bso#13888).
+ ctdb-daemon: Never use 0 as a client ID; (bso#13930).
+ ctdb-common: Fix memory leak; (bso#13943).
+ s3:debug: Enable logging for early startup failures;
(bso#13904)
- Update to samba-4.10.3
+ CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed
checksum; (bso#13685); (bsc#1134024). - CVE-2019-12435: zone operations can crash rpc server;
(bso#13922); (bsc#1137815). - Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183). - Fix vfs_ceph realpath; (bso#13918); (bsc#1134452). - Update to samba-4.10.2:
+ CVE-2019-3870 (World writable files in
Samba AD DC private/ dir); (bso#13834).
+ CVE-2019-3880 (Save registry file outside share as
unprivileged user); (bso#13851).
+ py/kcc_utils: py2.6 compatibility; (bso#13837).
+ libcli: permit larger values of DataLength in
SMB2_ENCRYPTION_CAPABILITIES of negotiate response;
(bso#13869).
+ regfio: Improve handling of malformed registry hive files;
(bso#13840).
+ ctdb-version: Simplify version string usage; (bso#13789).
+ lib: Make fd_load work for non-regular files; (bso#13859).
+ dbcheck: in the middle of the tombstone garbage collection
causes replication failures,
dbcheck: add --selftest-check-expired-tombstones cmdline
option; (bso#13816).
+ ndr_spoolss_buf: Fix out of scope use of stack variable in
NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818).
+ s4/messaging: Fix undefined reference in linking
libMESSAGING-samba4.so; (bso#13854).
+ acl_read: Fix regression for empty lists; (bso#13836).
+ s4:dlz make b9_has_soa check dc=@ node; (bso#13841).
+ s3:client: Fix printing via smbspool backend with kerberos
auth; (bso#13832).
+ s4:librpc: Fix installation of Samba; (bso#13847).
+ s3:lib: Fix the debug message for adding cache entries;
(bso#13848).
+ s3:utils: Add 'smbstatus -L --resolve-uids' to show username;
(bso#13793).
+ s3:lib: Fix the debug message for adding cache entries;
(bso#13848).
+ s3:waf: Fix the detection of makdev() macro on Linux;
(bso#13853).
* ctdb-build: Drop creation of .distversion in tarball;
(bso#13789).
* ctdb-packaging: Test package requires tcpdump, ctdb package
should not own system library directory; (bso#13838).
- Update to samba-4.10.1:
+ py/kcc_utils: py2.6 compatibility; (bso#13837);
+ libcli: permit larger values of DataLength in
SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869);
+ regfio: Improve handling of malformed registry hive files; (bso#13840);
+ ctdb-version: Simplify version string usage; (bso#13789);
+ lib: Make fd_load work for non-regular files; (bso#13859);
+ dbcheck in the middle of the tombstone garbage collection causes
replication failures, dbcheck: add --selftest-check-expired-tombstones
cmdline option; (bso#13816);
+ ndr_spoolss_buf: Fix out of scope use of stack variable in
NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818);
+ s4/messaging: Fix undefined reference in linking
libMESSAGING-samba4.so; (bso#13854);
+ acl_read: Fix regression for empty lists; (bso#13836);
+ s4:dlz make b9_has_soa check dc=@ node; (bso#13841);
+ s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832);
+ s4:librpc: Fix installation of Samba; (bso#13847);
+ s3:lib: Fix the debug message for adding cache entries; (bso#13848);
+ s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793);
+ s3:lib: Fix the debug message for adding cache entries; (bso#13848);
+ s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853);
+ ctdb-build: Drop creation of .distversion in tarball; (bso#13789);
+ ctdb-packaging: Test package requires tcpdump, ctdb package
should not own system library directory; (bso#13838);
- Update to samba-4.10.0:
+ s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760);
+ access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
+ s4/scripting/bin: Open unicode files with utf8 encoding and write
+ unicode string.
+ sambaundoguididx: Use the right escaped oder unescaped sam ldb
files; (bso#13759);
+ Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813);
+ passdb: Update ABI to 0.27.2.
+ lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813);
+ lib:util: Move debug message for mkdir failing to log level 1; (bso#13823); - MacOS credit accounting breaks with async SESSION SETUP;
(bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
temporarily unavailable and drops connection; (bso#13698) - Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). - CVE-2019-3880: Save registry file outside share as unprivileged
user; (bso#13851); (bsc#1131060 ). - CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0);
(bso#13834); (bsc#1130703); - Update to samba-4.9.5
+ audit_logging: Remove debug log header and JSON Authentication:
prefix; (bso#13714);
+ Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760);
+ s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso#
CID: 1433607; (bso#11495);
+ smbd: uid: Don't crash if 'force group' is added to an existing
share connection; (bso#13690);
+ s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
code; (bso#13770);
+ s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803);
+ s3:utils/smbget fix recursive download with empty source
directories; (bso#13199);
+ samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716);
+ s3:libsmb: cli_smb2_list() can sometimes fail initially on a
connection; (bso#13736);
+ join: Throw CommandError instead of Exception for simple errors; (bso#13747);
+ ldb: Avoid inefficient one-level searches; (bso#13762);
+ s3: libsmb: use smb2cli_conn_max_trans_size() in
cli_smb2_list(); (bso#13736);
+ tldap: Avoid use after free errors; (bso#13776);
+ Fix idmap xid2sid cache churn; (bso#13802);
+ access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812);
+ s3-smbd: Avoid assuming fsp is always intact after close_file
call; (bso#13720);
+ s3-vfs-fruit: Add close call; (bso#13725);
+ s3-smbd: Use fruit:model string for mDNS registration; (bso#13746);
+ s3-vfs: add glusterfs_fuse vfs module; (bso#13774);
+ printing: Check lp_load_printers() prior to pcap cache update; (bso#13766);
+ vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS)
ftruncate and fallocate; (bso#13807);
+ lib/audit_logging: Actually create talloc; (bso#13737);
+ netcmd/user: python[3]-gpgme unsupported and replaced by
python[3]-gpg; (bso#13728);
+ dns: Changing onelevel search for wildcard to subtree; (bso#13738);
+ samba-tool: Don't print backtrace on simple DNS errors; (bso#13721);
+ sambaundoguididx: Use the right escaped oder unescaped sam ldb
files; (bso#13759);
+ ctdb: Print locks latency in machinereadable stats; (bso#13742);
+ messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786);
+ audit_logging: auth_json_audit required auth_json; (bso#13715);
+ man pages: Document prefork process model; (bso#13765);
+ CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773);
+ s3:auth: ignore create_builtin_guests() failing without a valid
idmap configuration; (bso#13697);
+ s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC
without trusts; (bso#13722);
+ s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd
is not available; (bso#13723);
+ s4:server: Add support for 'smbcontrol samba shutdown' and
'smbcontrol debug/debuglevel'; (bso#13752);
+ Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616);
+ vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330);
+ s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774);
+ notifyd: Fix SIGBUS on sparc; (bso#13704);
+ waf: Check for libnscd; (bso#13787);
+ s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770);
+ lib/util: Count a trailing line that doesn't end in a newline; (bso#13717);
+ Recovery lock bug fixes; (bso#13800);
+ s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726);
+ s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727);
+ vfs_fileid: Fix get_connectpath_ino; (bso#13741);
+ vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744); - Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153). - Fix update-apparmor-samba-profile script after apparmor switched
to using named profiles. The change is backwards compatible;
(bsc#1126377); - LoadParm().load_default() fails with "Unable to load default file";
(bsc#1089758); - Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223); - Update to samba-4.9.4
+ libcli/smb: Don't overwrite status code; (bso#9175).
+ wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164).
+ Session setup reauth fails to sign response; (bso#13661).
+ vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677).
+ vfs_shadow_copy2: Nicely deal with attempts to open previous
version for writing; (bso#13688).
+ Restoring previous version of stream with vfs_shadow_copy2 fails
with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455).
+ CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571).
+ s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708)
+ PEP8: fix E231: missing whitespace after ','.
+ winbindd: Fix crash when taking profiles;(bso#13629)
+ CVE-2018-14629 dns: Fix CNAME loop prevention using counter
regression; (bso#13600)
+ 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686).
+ CVE-2018-16853: Do not segfault if client is not set; (bso#13571).
+ lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679)
+ ctdb-daemon: Exit with error if a database directory does not
exist; (bso#13696).
+ s3:libads: Add net ads leave keep-account option; (bso#13498). - Drop more %if..%endif guards which are idempotent.
- Drop requires on ldconfig which are already auto-discovered.
- Do not ignore errors from useradd/groupadd. - Remove python2 build dependency from samba-libs; (bsc#1116900); - Update update-apparmor-samba-profile script to ignore the shares's
paths containing substitution variables in any place, not only at the
beginning of the path. - Update to samba-4.9.3
+ CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD
Internal DNS server; (bso#13600); (bsc#1116319);
+ CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628);
(bsc#1116320);
+ CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server;
(bso#13674); (bsc#1116322);
+ CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers;
(bso#13669); (bsc#1116321);
+ CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos
configuration (unsupported); (bso#13678); (bsc#1116324);
+ CVE-2018-16857: Bad password count in AD DC not always effective;
window; (bso#13683); (bsc#1116323); - Update to samba-4.9.2
+ dsdb: Add comments explaining the limitations of our current backlink
behaviour; (bso#13418);
+ Fix problems running domain backups (handling SMBv2, sites); (bso#13621);
+ testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3;
(bso#13465);
+ Make vfs_fruit able to cleanup AppleDouble files; (bso#13642);
+ File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646);
+ Enabling vfs_fruit looses FinderInfo; (bso#13649);
+ Cancelling of SMB2 aio reads and writes returns wrong error
NT_STATUS_INTERNAL_ERROR; (bso#13667);
+ Fix CTDB recovery record resurrection from inactive nodes and simplify
vacuuming; (bso#13641);
+ examples: Fix the smb2mount build; (bso#13465);
+ libtevent: Fix build due to missing open_memstream on Illiumos;
(bso#13629);
+ winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662);
+ dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path;
(bso#13653);
+ Extended DN SID component missing for member after switching group
membership; (bso#13418);
+ Return STATUS_SESSION_EXPIRED error encrypted, if the request was
encrypted; (bso#13624);
+ python: Allow forced signing via smb.SMB(); (bso#13621);
+ lib:socket: If returning early, set ifaces; (bso#13665);
+ ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8
encoded unicode; (bso#13616);
+ smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute;
(bso#13673);
+ waf: Add -fstack-clash-protection; (bso#13601);
+ winbind: Fix segfault if an invalid passdb backend is configured;
(bso#13668);
+ Fix bugs in CTDB event handling; (bso#13659);
+ Misbehaving nodes are sometimes not banned; (bso#13670); - lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373); - winbind requires latest version of libtevent-util0 to start - Backport latest gpo code from master
+ Read policy from local gpt cache
+ Offline policy application
+ Make group policy extensible via register/unregister gpext
+ gpext's run via a process_group_policy method - Enable profiling data collection - Change samba-kdc package name to samba-ad-dc
- Move samba-ad-dc.service to the samba-ad-dc package - Update to samba-4.9.1
+ s3: nmbd: Stop nmbd network announce storm; (bso#13620);
+ s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds;
(bso#13597);
+ CTDB recovery lock has some race conditions; (bso#13617);
+ s3-rpc_client: Advertise Windows 7 client info; (bso#13597);
+ ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610); - Tumbleweed doesn't define the sle_version macro, so we must
include a check for suse_version also. Otherwise python3 is
disabled on Tumbleweed. - Update to samba-4.9.0
+ samba_dnsupdate: Honor 'dns zone scavenging' option, only update if
needed; (bso#13605);
+ wafsamba: Fix 'make -j'; (bso#13606); - Update to samba-4.9.0rc5
+ s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only
returns absolute pathnames; (bso#13565);
+ s3: util: Do not take over stderr when there is no log file; (bso#13578);
+ Durable Reconnect fails because cookie.allow_reconnect is not
set; (bso#13549);
+ krb5-samba: Interdomain trust uses different salt principal; (bso#13539);
+ vfs_fruit: Don't unlink the main file; (bso#13441);
+ smbd: Fix a memleak in async search ask sharemode; (bso#13602);
+ Fix Samba GPO issue when Trust is enabled; (bso#11517);
+ samba-tool: Add "virtualKerberosSalt" attribute to
'user getpassword/syncpasswords'; (bso#13539);
+ Fix CTDB configuration issues; (bso#13589);
+ ctdbd logs an error until it can successfully connect to
eventd; (bso#13592); - Update to samba-4.9.0rc4
+ s3: smbd: Ensure get_real_filename() copes with empty
pathnames; (bso#13585);
+ samba domain backup online/rename commands force user to specify
password on CLI; (bso#13566);
+ wafsamba/samba_abi: Always hide ABI symbols which must be
local; (bso#13579);
+ Fix a panic if fruit_access_check detects a locking conflict; (bso#13584);
+ Fix memory and resource leaks; (bso#13567);
+ python: Fix print in dns_invalid.py; (bso#13580);
+ Aliasing issue causes incorrect IPv6 checksum; (bso#13588);
+ Fix CTDB configuration issues; (bso#13589);
+ s3: vfs: time_audit: fix handling of token_blob in
smb_time_audit_offload_read_recv(); (bso#13568); - Add missing zlib-devel dependency which was previously pulled in
by libopenssl-devel - Update to samba-4.9.0rc3+git.22.3fff23ae36e
+ CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against
returns from malicious servers; (bso#13453);
+ CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query
with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374);
+ CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when
not servicePrincipalName is set on a user; (bso#13552);
+ CVE-2018-10919: acl_read: Fix unauthorized attribute access via
searches; (bso#13434);
+ ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540);
+ CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it
is disabled via "ntlm auth"; (bso#13360);
+ s3-tldap: do not install test_tldap; (bso#13529);
+ ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540);
+ CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in
ltdb_index_dn_attr(); (bso#13374);
+ ctdb-eventd: Fix CID 1438155; (bso#13554);
+ Fix CIDs 1438243, (Unchecked return value) 1438244
(Unsigned compared against 0), 1438245 (Dereference before null check) and
1438246 (Unchecked return value); (bso#13553);
+ ctdb: Fix a cut&paste error; (bso#13554);
+ systemd: Only start smb when network interfaces are up; (bso#13559);
+ Fix quotas don't work with SMB2; (bso#13553);
+ s3/smbd: Ensure quota code is only called when quota support
detected; (bso#13563);
+ s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204);
+ s3:waf: Install eventlogadm to /usr/sbin; (bso#13561);
+ Shorten description in vfs_linux_xfs_sgid manual; (bso#13562); - Update to samba-4.9.0rc2+git.21.a1069afb007
+ s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537);
+ s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check();
(bso#13535);
+ samba-tool trust: Support discovery via netr_GetDcName; (bso#13538);
+ s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542);
+ Fix portability issues on freebsd; (bso#13520);
+ DNS wildcard search does not handle multiple labels correctly; (bso#13536);
+ samba-tool domain trust: Fix trust compatibility to Windows
Server 1709 and FreeIPA; (bso#13308);
+ Fix portability issues on freebsd; (bso#13520);
+ ctdb-protocol: Fix CTDB compilation issues; (bso#13545);
+ ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT
option; (bso#13546);
+ ctdb-doc: Provide an example script for migrating old
configuration; (bso#13550);
+ ctdb-event: Implement event tool "script list" command; (bso#13551); - Update to samba-4.8.4+git.37.a7a861d7982;
+ CVE-2018-1139: Weak authentication protocol allowed;
(bsc#1095048); (bsc#13360);
+ CVE-2018-1140: Denial of Service Attack on DNS and LDAP server;
(bsc#1095056); (bso#13466); (bso#13374);
+ CVE-2018-10858: Insufficient input validation on client directory
listing in libsmbclient; (bsc#1103411); (bso#13453);
+ CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server;
(bsc#1103414); (bso#13552);
+ CVE-2018-10919: Confidential attribute disclosure from the AD
LDAP server; (bsc#1095057); (bso#13434);
+ s3:winbind: winbind normalize names' doesn't work for users;
(bso#12851);
+ winbind: Fix UPN handling in canonicalize_username(); (bso#13369);
+ s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
+ samdb: Fix building Samba with gcc 8.1; (bso#13437);
+ s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
+ smbd: Flush dfree memcache on service reload; (bso#13446);
+ ldb: Save a copy of the index result before calling the
+ lib/util: No Backtrace given by Samba's AD DC by default;
(bso#13454).
+ s3: smbd: printing: Re-implement delete-on-close semantics for
print files missing since 3.5.x; (bso#13457).
+ python: Fix talloc frame use in make_simple_acl(); (bso#13474).
+ krb5_wrap: Fix keep_old_entries logic for older Kerberos
libraries;(bso#13478).
+ krb5_plugin: Add winbind localauth plugin for MIT Kerberos;
(bso#13480). - Add missing package descriptions; (bsc#1093864);
- Fix dependency issue between samba-python and samba-kdc; (bsc#1062876);
- Call update-apparmor-samba-profile when running samba-ad-dc;
(bsc#1092099); - Update to 4.8.2
+ After update to 4.8.0 DC failed with "Failed to find our own
NTDS Settings objectGUID" (bso#13335).
+ fix incorrect reporting of stream dos attributes on a
directory (bso#13380).
+ vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412).
+ vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425)
+ vfs_ceph: Fix memory leak; (bso#13424).
+ libsmbclient: Fix hard-coded connection error return of
ETIMEDOUT; (bso#13419).
+ s4-lsa: Fix use-after-free in LSA server; (bso#13420).
+ winbindd: Do re-connect if the RPC call fails in the passdb
case; (bso#13430).
+ cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416).
+ cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd
unclean process shutdown; (bso#13414).
+ ctdb-client: Remove ununsed functions from old client code;
(bso#13411).
+ printing: Return the same error code as windows does on upload
failures; (bso#13395).
+ nsswitch: Fix memory leak in winbind_open_pipe_sock() when the
privileged pipe is not accessable; (bso#13400).
+ s4:lsa_lookup: remove TALLOC_FREE(state) after all
dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420).
+ rpc_server: Fix NetSessEnum with stale sessions; (bso#13407).
+ s3:smbspool: Fix cmdline argument handling; (bso#13417). - Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is
required by some client libs; (bsc#1074135);
- Update to 4.8.1; (bsc#1091179);
+ s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
we don't own it here; (bso#13244);
+ s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
support fdopendir(); (bso#13270);
+ Round-tripping ACL get/set through vfs_fruit will increase the number of
ACE entries without limit; (bso#13319);
+ s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
issues; (bso#13347);
+ s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
delete access; (bso#13358);
+ s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
+ s3: smbd: Unix extensions attempts to change wrong field in fchown call;
(bso#13375);
+ ms_schema/samba-tool visualize: Fix python2.6 incompatibility;
(bso#13337);
+ Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352);
+ Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
+ winbindd: Recover loss of netlogon secure channel in case the peer DC is
rebooted; (bso#13332);
+ s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
+ ctdb-client: Fix bugs in client code; (bso#13356);
+ ctdb-scripts: Drop "net serverid wipe" from 50.samba event script;
(bso#13359);
+ s3: lib: messages: Don't use the result of sec_init() before calling
sec_init(); (bso#13368);
+ libads: Fix the build '--without-ads'; (bso#13273);
+ winbind: Keep "force_reauth" in invalidate_cm_connection, add
'smbcontrol disconnect-dc'; (bso#13332);
+ vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343);
+ dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
+ rpc_server: Fix core dump in dfsgetinfo; (bso#13370);
+ smbclient: Fix notify; (bso#13382);
+ Fix smbd panic if the client-supplied channel sequence number wraps;
(bso#13215);
+ Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
+ lib/util: Remove unused '#include ' from tests/tfork.c;
(bso#13342);
+ Fix build errors with cc from developerstudio 12.5 on Solaris;
(bso#13343);
+ Fix the picky-developer build on FreeBSD 11; (bso#13344);
+ s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345);
+ s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
+ lib:replace: Fix linking when libtirpc-devel overwrites system headers;
(bso#13341);
+ winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid
query; (bso#13312);
+ s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376);
+ Allow AESNI to be used on all processor supporting AESNI; (bso#13302); - Use new foreground execution flags for systemd samba daemons;
(bsc#1088574); (bsc#1071090); (bsc#1065551);
+ Add %post scriptlet to clear old sysconfig flags
- Update vendor-files to commit 880b3e7.
+ Set samba sysconfig template variables to ""
+ Add required daemon flags directly to systemd unit - Specfile cleanup
+ Remove %if..%endif guards which don't affect the build
+ Remove redundant %clean section
+ Replace old $RPM_* shell vars with macros - BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in
place of systemd and systemd-devel: Allow OBS to optimize the
workload by allowing the usage of the 'build-optimized' systemd
packages. - Enable building samba with python3, and create a samba-python3 package. - Update to 4.8
+ New GUID Index mode in sam.ldb for the AD DC
+ GPO support for samba KDC
+ Time machine support with vfs_fruit
+ Encrypted secrets
+ AD Replication visualization
+ Improved trust support
- ability to not scan global trust list
- AD external trusts have limited support
- verbose trusted domain listing
+ VirusFilter VFS module
+ NT4-style replication removed
+ vfs_aio_linux removed - Disable samba-pidl package, due to the removal of dependency
perl-Parse-Yapp; (bsc#1085150); - Update to 4.7.6;
+ CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
(bso#11343); (bsc#1081741);
+ CVE-2018-1057: Authenticated users can change other users' password;
(bso#13272); (bsc#1081024). - Disable python until full python3 port is done; (bsc#1082139);
+ Remove contents of package samba-python
+ Remove contents of package libsamba-policy0
+ Remove contents of package libsamba-policy-devel
+ Remove library libsamba-python-samba4.so from samba-libs package
+ Remove library libsamba-net-samba4.so from samba-libs package
+ Remove smbtorture binary and manpage from samba-test - samba fails to build with glibc2.27; (bsc#1081042); - Update to 4.7.5; (bsc#1080545);
+ smbd tries to release not leased oplock during oplock II downgrade;
(bso#13193);
+ Fix copying file with empty FinderInfo from Windows client to Samba share
with fruit; (bso#13181);
+ build: Deal with recent glibc sunrpc header removal; (bso#10976);
+ Make Samba work with tirpc and libnsl2; (bso#13238);
+ vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
(bsc#1075206);
+ Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
(bso#12986);
+ ctdb-recovery-helper: Deregister message handler in error paths;
(bso#13188);
+ samba: Only use async signal-safe functions in signal handler; (bso#13240);
+ Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
(bso#12986);
+ repl_meta_data: Fix linked attribute corruption on databases
with unsorted links on expunge. dbcheck: Add functionality to fix the
corrupt database; (bso#13228);
+ Fix smbd panic when chdir returns error during exit; (bso#13189);
+ Make Samba work with tirpc and libnsl2; (bso#13238);
+ Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
(bso#13176); - Update to 4.7.4; (bsc#1080545);
+ s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
+ s3: libsmb: Fix valgrind read-after-free error in
cli_smb2_close_fnum_recv(); (bso#13171);
+ s3: libsmb: Fix reversing of oldname/newname paths when creating a
reparse point symlink on Windows from smbclient; (bso#13172);
+ Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
+ repl_meta_data: Allow delete of an object with dangling backlinks;
(bso#13095);
+ s4:samba: Fix default to be running samba as a deamon; (bso#13129);
+ Performance regression in DNS server with introduction of DNS wildcard,
ldb: Release 1.2.3; (bso#13191);
+ vfs_zfsacl: Fix compilation error; (bso#6133);
+ "smb encrypt" setting changes are not fully applied until full smbd
restart; (bso#13051);
+ winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
+ vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
+ winbindd: Dependency on trusted-domain list in winbindd in critical auth
codepath; (bso#13173);
+ repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
+ ctdb: sock_daemon leaks memory; (bso#13153);
+ TCP tickles not getting synchronised on CTDB restart; (bso#13154);
+ winbindd: winbind parent and child share a ctdb connection; (bso#13150);
+ pthreadpool: Fix deadlock; (bso#13170);
+ pthreadpool: Fix starvation after fork; (bso#13179);
+ messaging: Always register the unique id; (bso#13180);
+ s4/smbd: set the process group; (bso#13129);
+ Fix broken linked attribute handling; (bso#13095);
+ The KDC on an RWDC doesn't send error replies in some situations;
(bso#13132);
+ libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
+ g_lock conflict detection broken when processing stale entries;
(bso#13195);
+ s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
sessions; (bso#13197);
+ s3:libads: net ads keytab list fails with "Key table name malformed";
(bso#13166); (bsc#1067700);
+ Fix crash in pthreadpool thread after failure from pthread_create;
(bso#13170);
+ s4:samba: Allow samba daemon to run in foreground; (bso#13129);
(bsc#1065551);
+ third_party: Link the aesni-intel library with "-z noexecstack";
(bso#13174);
+ vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
options; (bso#13125); - Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
glibc) - smbc_opendir should not return EEXIST with invalid login credentials;
(bnc#1065868). - Update to 4.7.3; (bsc#1069666);
+ Non-smbd processes using kernel oplocks can hang smbd;
(bso#13121);
+ python: use communicate to fix Popen deadlock; (bso#13127);
+ smbd on disk file corruption bug under heavy threaded load;
(bso#13130);
+ tevent: version 0.9.34; (bso#13130);
+ s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
+ CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
(bsc#1060427);(bso#13041);
+ CVE-2017-15275: s3: smbd: Chain code can return uninitialized
memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE. - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - samba-tool requires samba-python; (bnc#1067771). - Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
+ Fix exporting subdirs with shadow_copy2; (bso#13091);
+ Currently if getwd() fails after a chdir(), we panic; (bso#13027);
+ Ensure default SMB_VFS_GETWD() call can't return a partially completed
struct smb_filename; (bso#13068);
+ sys_getwd() can leak memory or possibly return the wrong errno on older
systems; (bso#13069);
+ smbclient doesn't correctly canonicalize all local names before use;
(bso#13093);
+ Fix broken linked attribute handling; (bso#13095);
+ Missing LDAP query escapes in DNS rpc server; (bso#12994);
+ Link to -lbsd when building replace.c by hand; (bso#13087);
+ Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
(bso#6133);
+ Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
(bso#7909);
+ Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
(bso#7933);
+ Missing assignment in sl_pack_float; (bso#12991);
+ Wrong Samba access checks when changing DOS attributes; (bso#12995);
+ samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
+ groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
+ Enabling vfs_fruit results in loss of Finder tags and other xattrs;
(bso#13076);
+ man pages: Properly ident lists; (bso#9613);
+ smb.conf.5: Sort parameters alphabetically; (bso#13081);
+ Fix GUID string format on GetPrinter info; (bso#12993);
+ Remote serverid check doesn't check for the unique id; (bso#13042);
+ CTDB starts consuming memory if there are dead nodes in the cluster;
(bso#13056);
+ ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
+ libgpo doesn't sort the GPOs in the correct order; (bso#13046);
+ Remote serverid check doesn't check for the unique id; (bso#13042);
+ vfs_catia: Fix a potential memleak; (bso#13090);
+ Fix file change notification for renames; (bso#12903);
+ Samba DNS server does not honour wildcards; (bso#12952);
+ Can't change password in samba from a Windows client if Samba runs on
IPv6 only interface; (bso#13079);
+ vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
+ Apple client can't cope with SMB2 async replies when creating symlinks;
(bso#13047);
+ s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
+ Fix ntstatus_gen.h generation on 32bit; (bso#13099);
+ Fix a double free in vfs_gluster_getwd(); (bso#13100);
+ Fix resouce leaks and pointer issues; (bso#13101);
+ vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049); - Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
package won't be generated simply based on the fact that there is
no files section for the package. Allows the source validator to
ensure samba-kdc is a built package. - Update to 4.7.0;
+ Whole DB read locks: Improved LDAP and replication consistency;
(bso#12858).
+ Samba AD with MIT Kerberos
+ Dynamic RPC port range: Default range changed from "1024-1300" to
"49152-65535".
+ Authentication and Authorization audit support: New auth_audit debug
class.
+ Multi-process LDAP Server: The LDAP server in the AD DC now honours
the process model used for the rest of the 'samba' process.
+ Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
+ Additional password hashes stored in supplementalCredentials.
+ Improvements to DNS during Active Directory domain join.
+ Significant AD performance and replication improvements.
+ Query record for open file or directory.
+ Removal of lpcfg_register_defaults_hook().
+ Change of loadable module interface.
+ SHA256 LDAPS Certificates: The self-signed certificate generated for use
on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
self-signature.
+ CTDB no longer allows mixed minor versions in a cluster.
+ CTDB now ignores hints from Samba about TDB flags when attaching to
databases.
+ New configuration variable CTDB_NFS_CHECKS_DIR.
+ The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
+ The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
+ The example NFS Ganesha call-out has been improved.
+ A new "replicated" database type is available. - CVE-2017-12163: Prevent client short SMB1 write from
writing server memory to file; (bso#13020); (bsc#1058624). - CVE-2017-12150: Some code path don't enforce smb signing,
when they should; (bso#12997); (bsc#1058622). - CVE-2017-12151: Keep required encryption across SMB3 dfs
redirects; (bso#12996); (bsc#1058565). - Clean specfile assuming SUSE-only system and product >=SLE11
+ %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version}
are always undefined
+ %{_vendor} is "suse" and %{suse_version} is at least 1100 - Update to 4.6.7; (bsc#1054017)
+ Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
+ smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
+ vfs_ceph provides inconsistent directory listings; (bso#12911).
+ Misused talloc context can cause a user to crash their smbd by chaining
SMB1 commands.; (bso#12836).
+ Use-after free can crash libsmbclient code.; (bso#12927).
+ Server exit with active AIO can crash.; (bso#12925).
+ Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
+ fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
(bso#12898).
+ vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
+ smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
authentication; (bso#12886).
+ finder sidebar showing question mark instead of icon when using ip to
connect with vfs_fruit; (bso#12840).
+ Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes
from AD.; (bso#12720).
+ KCC run at selftest startup can fail spuriously due to a race;
(bso#12869).
+ winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
the remote change; (bso#12782).
+ rpc_pipe_client memory leaks due to long term memory context passed to
rpc_pipe_open_interface(); (bso#12890).
+ CVE-2017-2619 breaks accessing previous versions of directories with
snapshots in subdirectories of the share; (bso#12885).
+ dns_name_equal doing OOB read; (bso#12813).
+ replica_sync tests flap; (bso#12753).
+ Selftest should not call 'net cache flush' and wipe important winbind
entries; (bso#12868).
+ Old Samba versions don't support using recent ldb versions (>=1.1.30);
(bso#12859).
+ pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
+ race starting winbindd against posixacl test; (bso#12843).
+ Crash in the reentrant smbd_smb2_create_send() if the something fails in
the subsequent try; (bso#12832).
+ spnego.c passes the wrong argument order to gensec_update_ev() for the
FALLBACK case; (bso#12788).
+ Clients with SMB3 support can't connect with
"server max protocol = SMB2_02"; (bso#12772).
+ A log message of samb-tool user syncpasswords reverses string arguments in
a debug message "Call Popen[...".; (bso#12768).
+ The smb tarmode tests kills the share dir contents; (bso#12867).
+ Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
+ CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
+ manpage/index.html lists links not in alphabetical order; (bso#12854).
+ smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
+ If a record is locked in a database, then recovery does not complete;
(bso#12857).
+ debug_locks.sh script does not log any information; (bso#12856).
+ SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport
after error; (bso#12852).
+ smbclient can't parse DOMAIN+username if a different winbind separator is
used; (bso#12849).
+ Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
+ Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
(bso#12844).
+ cli->server_os not filled correctly; (bso#12779).
+ REGRESSION: smbclient doesn't print the session setup anymore;
(bso#12824).
+ smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
+ CTDB NFS call-out failures do not cause event failures; (bso#12837).
+ net command fails due to incorrectly return code; (bso#12828).
+ Fix building Samba with GCC 7.1; (bso#12827). - Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
(bsc#1048339). - fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
+ CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
(bsc#1048278). - Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339). - Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387). - Update to 4.6.5; (bsc#1040157)
+ Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
startup; (bso#12814).
+ vfs_expand_msdfs tries to open the remote address as a file path;
(bso#12687).
+ PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
(bso#12798).
+ With clustering get update_num_read_oplocks failed and PANIC:
num_share_modes == 1 assertion failure; (bso#11844).
+ contend_level2_oplocks_begin_default oplock optimisation doesn't carry
over to leases; (bso#12766).
+ `ctdb nodestatus` incorrectly displays status for all nodes with wrong
exit code; (bso#12802).
+ CTDB can spin hard on revoking readonly delegations if a node becomes
disconnected; (bso#12697).
+ Printing a share mode entry with leases can crash in the ndr code;
(bso#12793).
+ Fix flakey unit tests for eventd; (bso#12792).
+ CTDB daemon crashes if built with clang; (bso#12770).
+ smbcacls fails if no password is specified; (bso#12765).
+ idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
+ samba-tool user syncpasswords doesn't trigger the script when a user gets
removed; (bso#12767).
+ systemd: fix detection of libsystemd; (bso#12764).
+ Notify subsystem only maps first inotify mask to Windows notify filter;
(bso#12760).
+ Allow passing trusted domain password as plain-text to PASSDB layer;
(bso#12751).
+ Can't case-rename files with vfs_fruit; (bso#12749).
+ wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702).
+ vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
+ Ordering of notify responses broken; (bso#12756). - s3: libsmb: Fix error where short name length was read as 2
bytes, should be 1; (bso#11822); (bsc#1042419). - Revert explicit winbind %{version}-%{release} dependency.
+ The ABI has stabilized since (bsc#936909), so remove to fix cross-media
dependencies; (bsc#1037899). - Fix CVE-2017-7494 remote code execution from a writable share;
(bso#12780); (bsc#1038231). - Update to 4.6.3; (bsc#1036011)
+ s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
from shares with GlusterFS backend; (bso#12743).
+ Fix for Solaris C compiler; (bso#12559).
+ s3: locking: Update oplock optimization for the leases era; (bso#12628).
+ Make the Solaris C compiler happy; (bso#12693).
+ s3: libgpo: Allow skipping GPO objects that don't have the
expected LDAP attributes; (bso#12695).
+ Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
+ lib: debug: Avoid negative array access; (bso#12746).
+ cleanupdb: Fix a memory read error; (bso#12748).
+ streams_xattr and kernel oplocks results in
NT_STATUS_NETWORK_BUSY; (bso#7537).
+ winbindd: idmap_autorid allocates ids for unknown SIDs from other
backends; (bso#11961).
+ vfs_fruit: Resource fork open request with
flags=O_CREAT|O_RDONLY; (bso#12565).
+ manpages/vfs_fruit: Document global options; (bso#12615).
+ lib/pthreadpool: Fix a memory leak; (bso#12624).
+ Lookup-domain for well-known SIDs on a DC; (bso#12727).
+ winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
+ winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
+ credentials_krb5: use gss_acquire_cred for client-side GSSAPI
use case; (bso#12611).
+ lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
+ ctdb-readonly: Avoid a tight loop waiting for revoke to
complete; (bso#12697).
+ ctdb_event monitor command crashes if event is not specified;
(bso#12723).
+ ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
+ smbd: Fix smb1 findfirst with DFS; (bso#12558).
+ smbd: Do an early exit on negprot failure; (bso#12610).
+ winbindd: Fix substitution for 'template homedir'; (bso#12699).
+ s4:kdc: Disable principal based autodetected referral detection;
(bso#12554).
+ idmap_autorid: Allocate new domain range if the callers knows
the sid is valid; (bso#12613).
+ LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
+ PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
trusted domain; (bso#12725).
+ rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
+ winbindd: Fix password policy for pam authentication; (bso#12725).
+ s3:gse: Correctly handle external trusts with MIT; (bso#12554).
+ auth/credentials: Always set the realm if we set the principal
from the ccache; (bso#12611).
+ replace: Include sysmacros.h; (bso#12686).
+ s3:vfs_expand_msdfs: Do not open the remote address as a file;
(bso#12687).
+ s3:libsmb: Only print error message if kerberos use is forced;
(bso#12704).
+ winbindd: Child process crashes when kerberos-authenticating
a user with wrong password; (bso#12708).
+ vfs_fruit: Office document opens as read-only on macOS due to
CNID semantics; (bso#12715).
+ vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
fragmented; (bso#12737). - Generate and update vendor-files tarball from Git
+ SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416). - Generate source tarball directly from Git using OBS tar_scm
+ use version string derived from parent Git tag and commit hash
- remove obsolete vendor-files/tools/package-data version ID
+ explicitly generate ctdb manpages, needed without "make dist" - Update to 4.6.2
+ remove bso#12721 patches now upstream - Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
+ x86-64 and aarch64 - Enable librados CTDB lock helper for samba-ceph package; (fate#321622). - Build and install the html man pages (bsc#1021907). - Fix CVE-2017-2619 regression with "follow symlinks = no";
(bso#12721). - Update to 4.6.1
+ symlink race permits opening files outside share directory;
CVE-2017-2619; (bso#12496); (bsc#1027147)
+ testparm checks for valid idmap parameters
+ add new krb client encryption types
+ support for printer driver upload from windows 10
+ inherit owner = 'unix only' for improved quota support
+ improved CTDB event support
+ new primary group support for idmap_ad
+ idmap_hash deprecated
+ mvxattr added to recursively rename extended attributes - Remove chkconfig requirements for systemd systems - Don't call insserv if systemd is used - Fix check if we need to require insserv - async_req: make async_connect_send() "reentrant";
(bso#12105); (bsc#1024416). - Force usage of ncurses6-config thru NCURSES_CONFIG env var;
(bsc#1023847). - add missing patch for libnss_wins segfault; (bsc#995730). - Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933). - Document "winbind: ignore domains" parameter; (bsc#1019416). - Add base Samba dependency to samba-ceph package. - Update to 4.5.3
+ Heap-based Buffer Overflow Remote Code Execution Vulnerability;
CVE-2016-2123; (bso#12409); (bsc#1014437).
+ Don't send delegated credentials to all servers; CVE-2016-2125;
(bso#12445); (bsc#1014441).
+ denial of service due to a client triggered crash in the winbindd
parent process; CVE-2016-2126; (bso#12446); (bsc#1014442).
- 4.5.1 and 4.5.2 updates
+ various streams vfs fixes
+ various printing fixes
+ ntlm_auth: do not map explicitly empty domain
+ various stability fixes in smbd
+ match file compression ReFS behavior - Add missing ldb module directory; (bnc#1012092). - s3/client: obey 'disable netbios' smb.conf param, don't
connect via NBT port; (bsc#1009085); (bso#12418). - Include vfstest in samba-test; (bsc#1001203). - s3/winbindd: using default domain with user@domain.com format
fails; (bsc#997833). - Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730). - Update to 4.5.0
+ NTLM1 Authentication disabled by default
+ SMB2.1 leases enabled by default
+ Support for OFD locks
+ ctdb tool rewritten
+ Added shadow copy snapshot prefix parameter - Fix illegal memory access after memory has been deleted;
(bso#11836); (bsc#975299). - Prevent core, make sure response->extra_data.data is always
cleared out; (bsc#993692). - Don't package man pages for VFS modules that aren't built;
(boo#993707). - Fix population of ctdb sysconfig after source merge; (bsc#981566). - Enable vfs_ceph builds for Factory (x86-64)
+ Package as samba-ceph to avoid Ceph dependency in base package. - Update to 4.4.5
+ Prevent client-side SMB2 signing downgrade; CVE-2016-2119;
(bso#11860); (bsc#986869). - Remove obsolete syslog.target; (bsc#983938). - Honor smb.conf socket options in winbind; (bsc#975131). - Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522). - Update to 4.4.4
+ SMB3 multichannel: Add implementation of missing channel sequence
number verification; (bso#11809).
+ smbd:close: Only remove kernel share modes if they had been
taken at open; (bso#11919).
+ notifyd: Prevent NULL deref segfault in notifyd_peer_destructor;
(bso#11930).
+ s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796).
+ Fix case sensitivity issues over SMB2 or above; (bso#11438).
+ s3:smbd: Fix anonymous authentication if signing is mandatory.
(bso#11910)
+ Fix NTLM Authentication issue with squid; (bso#11914).
+ pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530).
+ Fix memory leak in share mode locking; (bso#11934). - Update to 4.4.3
+ Various post-badlock regressions; (bso#11841); (bso#11850);
(bso#11858); (bso#11870); (bso#11872).
+ Only allow idmap_hash for default idmap config (bso#11786).
+ smbd: Avoid large reads beyond EOF; (bso#11878).
+ vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls"
is set; (bso#11806).
+ libads: Record session expiry for spnego sasl binds; (bso#11852). - Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849);
(bsc#975962); (bsc#979268), (bsc#977669). - Revert shared library packaging to comply with SLPP - Update to 4.4.2
+ A man-in-the-middle can downgrade NTLMSSP authentication;
CVE-2016-2110; (bso#11688); (bsc#973031).
+ Domain controller netlogon member computer can be spoofed;
CVE-2016-2111; (bso#11749); (bsc#973032).
+ LDAP conenctions vulnerable to downgrade and MITM attack;
CVE-2016-2112; (bso#11644); (bsc#973033).
+ TLS certificate validation missing; CVE-2016-2113; (bso#11752);
(bsc#973034).
+ Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
(bso#11756); (bsc#973036).
+ "Badlock" DCERPC impersonation of authenticated account possible;
CVE-2016-2118; (bso#11804); (bsc#971965).
+ DCERPC server and client vulnerable to DOS and MITM attacks;
CVE-2015-5370; (bso#11344); (bsc#936862). - Fix samba.tests.messaging test and prevent potential tdb corruption
by removing obsolete now invalid tdb_close call; (bsc#974629). - Obsolete libsmbclient from libsmbclient0 while not providing it;
(bsc#972197). - Update to 4.4.0.
+ Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686);
CVE-2016-0771.
+ Getting and setting Windows ACLs on symlinks can change permissions on link
target; (bso#11648); CVE-2015-7560.
+ Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543.
+ s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem
with no ACL support; (bso#10489).
+ docs: Add example for domain logins to smbspool man page; (bso#11643).
+ smbd: Show correct disk size for different quota and dfree block sizes;
(bso#11681).
+ docs: Add smbspool_krb5_wrapper manpage; (bso#11690).
+ winbindd: Return trust parameters when listing trusts; (bso#11691).
+ ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696).
+ Crypto.Cipher.ARC4 is not available on some platforms, fallback to
M2Crypto.RC4.RC4 then; (bso#11699).
+ s3:utils/smbget: Set default blocksize; (bso#11700).
+ Streamline 'smbget' options with the rest of the Samba utils; (bso#11700).
+ s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702).
+ s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703).
+ loadparm: Fix memory leak issue; (bso#11708).
+ lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714).
+ s3:vfs:glusterfs: Fix build after quota changes; (bso#11715).
+ ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719).
+ lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723).
+ smbd: Fix CID 1351215 Improper use of negative value; (bso#11724).
+ smbd: Fix CID 1351216 Dereference null return value; (bso#11725).
+ s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new
file; (bso#11727).
+ docs: Add manpage for cifsdd; (bso#11730).
+ param: Fix str_list_v3 to accept ; again; (bso#11732).
+ lib/socket: Fix improper use of default interface speed; (bso#11734).
+ lib:socket: Fix CID 1350009: Fix illegal memory accesses
(BUFFER_SIZE_WARNING); (bso#11735).
+ libcli: Fix debug message, print sid string for new_ace trustee;
(bso#11738).
+ Fix installation path of Samba helper binaries; (bso#11739).
+ Fix memory leak in loadparm; (bso#11740).
+ tevent: version 0.9.28: Fix memory leak when old signal action restored;
(bso#11742).
+ smbd: Ignore SVHDX create context; (bso#11753).
+ Fix net join; (bso#11755).
+ s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add;
(bso#11755).
+ passdb: Add linefeed to debug message; (bso#11763).
+ s3:utils/smbget: Fix option parsing; (bso#11767).
+ libnet: Make Kerberos domain join site-aware; (bso#11769).
+ Reset TCP Connections during IP failover; (bso#11770).
+ ldb: Version 1.1.26; (bso#11772).
+ s3:smbd: Add negprot remote arch detection for OSX; (bso#11773).
+ vfs_glusterfs: Fix use after free in AIO callback; (bso#11774).
+ mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780).
+ "trustdom_list_done: Got invalid trustdom response" message should be
avoided; (bso#11782).
+ Mismatch between local and remote attribute ids lets replication fail with
custom schema; (bso#11783).
+ Quota is not supported on Solaris 10; (bso#11788).
+ Talloc: Version 2.1.6; (bso#11789).
+ smbd: Enable multi-channel if 'server multi channel support = yes' in the
config; (bso#11796).
+ build: Fix build when '--without-quota' specified; (bso#11798).
+ lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802).
+ Access based share enum: handle permission set in configuration files;
(bso#8093).
+ See also WHATSNEW.txt from the samba-doc package. - Update to 4.3.6.
+ Getting and setting Windows ACLs on symlinks can change permissions on link
target; CVE-2015-7560; (bso#11648); (bsc#968222).
+ Fix Out-of-bounds read in internal DNS server; CVE-2016-0771;
(bso#11128); (bso#11686); (bsc#968223). - Upgrade on-disk FSRVP server state to new version; (bsc#924519). - Only obsolete but do not provide gplv2/3 package names; (bsc#968973). - Relocate existing lock files to /var/lib/samba/lock; (bsc#968963). - Obsolete no longer existing samba-32bit package; (bsc#967625). - Update to 4.3.5.
+ s3:utils/smbget: Fix recursive download; (bso#6482).
+ s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi
with no ACL support; (bso#10489).
+ s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks;
(bso#11400).
+ vfs_shadow_copy2: Fix case where snapshots are outside the share;
(bso#11580).
+ smbclient: Query disk usage relative to current directory; (bso#11662).
+ winbindd: Handle expired sessions correctly; (bso#11670).
+ smbd: Show correct disk size for different quota and dfree block sizes;
(bso#11681).
+ smbcacls: Fix uninitialized variable; (bso#11682).
+ s3:smbd: Ignore initial allocation size for directory creation;
(bso#11684).
+ s3-client: Add a KRB5 wrapper for smbspool; (bso#11690).
+ s3-parm: Clean up defaults when removing global parameters; (bso#11693).
+ Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699).
+ s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703).
+ ctdb: Remove error messages after kernel security update; CVE-2015-8543;
(bso#11705).
+ loadparm: Fix memory leak issue; (bso#11708).
+ lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714).
+ ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ...";
(bso#11719).
+ s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new
file; (bso#11727).
+ param: Fix str_list_v3 to accept ";" again; (bso#11732). - Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361). - Simplify shared library packaging; (bsc#966956). - Enable clustering (CTDB) support; (bsc#966271). - s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703);
(bsc#964023). - Add quotes around path of update-apparmor-samba-profile; (bnc#962177). - Remove autoconf build-time requirement. - Update to 4.3.4.
+ vfs_fruit: Enable POSIX directory rename semantics; (bso#11065).
+ Crash: Bad talloc magic value - access after free; (bso#11394).
+ Copying files with vfs_fruit fails when using vfs_streams_xattr without
stream prefix and type suffix; (bso#11466).
+ samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given;
(bso#11613).
+ Fix a typo in the smb.conf manpage, explanation of idmap config;
(bso#11619).
+ Correctly initialize the list head when keeping a list of primary followed
by DFS connections; (bso#11624).
+ Reduce the memory footprint of empty string options; (bso#11625).
+ lib/async_req: Do not install async_connect_send_test; (bso#11639).
+ Fix typos in man vfs_gpfs; (bso#11641).
+ Make "hide dot files" option work with "store dos attributes = yes";
(bso#11645).
+ Fix a corner case of the symlink verification; (bso#11647); (bnc#960249).
+ Do not disable "store dos attributes" on-the-fly; (bso#11649).
+ Update lastLogon and lastLogonTimestamp; (bso#11659). - Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249). - Update to 4.3.3.
+ Malicious request can cause Samba LDAP server to hang, spinning using CPU;
CVE-2015-3223; (bso#11325); (bnc#958581).
+ Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
(bnc#958586).
+ Insufficient symlink verification (file access outside the share);
CVE-2015-5252; (bso#11395); (bnc#958582).
+ No man in the middle protection when forcing smb encryption on the client
side; CVE-2015-5296; (bso#11536); (bnc#958584).
+ Currently the snapshot browsing is not secure thru windows previous version
(shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
+ Fix Microsoft MS15-096 to prevent machine accounts from being changed into
user accounts; CVE-2015-8467; (bso#11552); (bnc#958585). - Update to 4.3.2.
+ vfs_gpfs: Re-enable share modes; (bso#11243).
+ dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327).
+ s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute
type of zero; (bso#11452).
+ Add libreplace dependency to texpect, fixes a linking error on Solaris;
(bso#11511).
+ s4: Fix linking of 'smbtorture' on Solaris; (bso#11512).
+ s4:lib/messaging: Use correct path for names.tdb; (bso#11562).
+ Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins;
(bso#11563).
+ async_req: Fix non-blocking connect(); (bso#11564).
+ auth: gensec: Fix a memory leak; (bso#11565).
+ lib: util: Make non-critical message a warning; (bso#11566).
+ Fix winbindd crashes with samlogon for trusted domain user; (bso#11569);
(bnc#949022).
+ smbd: Send SMB2 oplock breaks unencrypted; (bso#11570).
+ ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577).
+ s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer;
(bso#11581).
+ s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581).
+ manpage: Correct small typo error; (bso#11584).
+ s3: smbd: If EAs are turned off on a share don't allow an SMB2 create
containing them; (bso#11589).
+ Backport some valgrind fixes from upstream master; (bso#11597).
+ auth: Consistent handling of well-known alias as primary gid; (bso#11608).
+ winbind: Fix crash on invalid idmap configs; (bso#11612).
+ s3: smbd: have_file_open_below() fails to enumerate open files below an
open directory handle; (bso#11615).
+ Changing log level of two entries to DBG_NOTICE; (bso#9912). - Ensure samlogon fallback requests are rerouted after kerberos failure;
(bnc#953382); (bnc#953972). - Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0.
- Always use the default optimization even on pre-9.2 systems. - Remove redundant configure options while adding with-relro. - Relocate the lockdir to the /var/lib/samba/lock directory. - Cleanup and enhance the pidl sub package. - Require renamed python-ldb-devel and python-talloc-devel at build-time.
- Requires python-ldb and python-talloc from the python subpackage. - Update to 4.3.1.
+ s3: smbd: Fix our access-based enumeration on "hide unreadable" to match
Windows; (bso#10252).
+ nss_winbind: Fix hang on Solaris on big groups; (bso#10365).
+ smbd: Fix file name buflen and padding in notify repsonse; (bso#10634).
+ kerberos: Make sure we only use prompter type when available;
winbind: Fix 100% loop; (bso#11038).
+ source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053).
+ s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket;
(bso#11316).
+ s3: smbd: Fix mkdir race condition; (bso#11486).
+ pam_winbind: Fix a segfault if initialization fails; (bso#11502).
+ s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509).
+ s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related
subdirs; (bso#11515).
+ s3: smbd: Fix opening/creating :stream files on the root share directory;
(bso#11522).
+ lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526).
+ net: Fix a crash with 'net ads keytab create'; (bso#11528).
+ s3: smbd: Fix a crash in unix_convert(); (bso#11535).
+ s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix
(bso#11522); (bso#11535).
+ vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543).
+ vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547).
+ s3:locking: Initialize lease pointer in share_mode_traverse_fn();
(bso#11549).
+ s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550).
+ s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555).
+ s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names
is incorrect; (bso#11555). - Fix 100% CPU in winbindd when logging in with "user must change password on
next logon"; (bso#11038). - Relocate the tmpfiles.d directory to the client package; (bnc#947552). - Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
instead; (bnc#942716). - Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051). - Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502). - Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15
systems; (bnc#945013). - Update to 4.3.0.
+ Samba "map to guest = Bad uid" doesn't work; (bso#9862).
+ revert LDAP extended rule 1.2.840.113556.1.4.1941
LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493).
+ No objectClass found in replPropertyMetaData on ordinary objects
(non-deleted); (bso#10973).
+ Stream names with colon don't work with fruit:encoding = native;
(bso#11278).
+ NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291).
+ tevent_fd needs to be destroyed before closing the fd; (bso#11316).
+ "force group" with local group not working; (bso#11320).
+ strsep is not available on Solaris; (bso#11359).
+ smbtorture does not build when configured --with-system-mitkrb5;
(bso#11411).
+ Build with GPFS support is broken; (bso#11421).
+ Build broken with --disable-python; (bso#11424).
+ net share allowedusers crashes; (bso#11426).
+ nmbd incorrectly matches netbios names as own name; (bso#11427).
+ Python bindings don't check integer types; (bso#11429).
+ Python bindings don't check array sizes; (bso#11430).
+ CTDB's eventscript error handling is broken; (bso#11431).
+ Fix crash in nested ctdb banning; (bso#11432).
+ Cannot build ctdbpmda; (bso#11434).
+ samba-tool uncaught exception error; (bso#11436).
+ Crash in notify_remove caused by change notify = no; (bso#11444).
+ Poor SMB3 encryption performance with AES-GCM; (bso#11451).
+ Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451).
+ fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455).
+ --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and
install; (bso#11458).
+ xid2sid gives inconsistent results; (bso#11464).
+ ctdb: Fix the build on FreeBSD 10.1; (bso#11465).
+ Handling of 0 byte resource fork stream; (bso#11467).
+ AD samr GetGroupsForUser fails for users with "()" in their name;
(bso#11488). - Configure with --bundled-libraries=NONE; (bso#11458). - Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284). - Remove libiniparser-devel build-time requirement. - Update to 4.2.3.
+ s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
+ s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
+ winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
+ Logon via MS Remote Desktop hangs; (bso#11061).
+ s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
+ tevent: Add a note to tevent_add_fd(); (bso#11141).
+ s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
+ s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
+ smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
+ s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
(bso#11245).
+ s3:smb2: Add padding to last command in compound requests; (bso#11277).
+ Add IPv6 support to ADS client side LDAP connects; (bso#11281).
+ Add IPv6 support for determining FQDN during ADS join; (bso#11282).
+ s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
+ Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
+ Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
+ vfs_fruit: Add option "veto_appledouble"; (bso#11305).
+ tstream: Make socketpair nonblocking; (bso#11312).
+ idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
+ Group creation: Add msSFU30Name only when --nis-domain was given;
(bso#11315).
+ tevent_fd needs to be destroyed before closing the fd; (bso#11316).
+ Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
(bso#11319).
+ smbd/trans2: Add a useful diagnostic for files with bad encoding;
(bso#11323).
+ Change sharesec output back to previous format; (bso#11324).
+ Robust mutex support broken in 1.3.5; (bso#11326).
+ Kerberos auth info3 should contain resource group ids available from
pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
exists in PAC; (bso#11328); (bnc#912457).
+ s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
+ tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
+ tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
+ s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
(bso#11339).
+ s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
+ pidl: Make the compilation of PIDL producing the same results if the
content hasn't change; (bso#11356).
+ winbindd: Disconnect child process if request is cancelled at main
process; (bso#11358).
+ vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
(bso#11363).
+ docs: Overhaul the description of "smb encrypt" to include SMB3
encryption; (bso#11366).
+ s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
(bso#11367).
+ ncacn_http: Fix GNUism; (bso#11371). - Disable rpath usage; (bnc#902421). - Make the winbind package depend on the matching libwbclient version and
vice versa; (bnc#936909). - Backport changes to use resource group sids obtained from pac logon_info;
(bso#11328); (bnc#912457). - Order winbind.service Before and Want nss-user-lookup target. - Remove fam-devel build-time dependency for post-6 RHEL systems. - Update to 4.2.2.
+ s3:smbXsrv: refactor duplicate code into
smbXsrv_session_clear_and_logoff(); (bso#11182).
+ gencache: don't fail gencache_stabilize if there were records to delete;
(bso#11260).
+ s3: libsmbclient: After getting attribute server, ensure main srv pointer
is still valid; (bso#11186).
+ s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
(bso#11236).
+ s3: smbd: Incorrect file size returned in the response of
"FILE_SUPERSEDE Create"; (bso#11240).
+ Mangled names do not work with acl_xattr; (bso#11249).
+ nmbd rewrites browse.dat when not required; (bso#11254).
+ vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
(bso#11213).
+ s3:smbd: Add missing tevent_req_nterror; (bso#11224).
+ vfs: kernel_flock and named streams; (bso#11243).
+ vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
+ s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
are used; (bso#11284).
+ ctdb: check for talloc_asprintf() failure; (bso#11201).
+ spoolss: purge the printer name cache on name change; (bso#11210);
(bnc#901813).
+ CTDB statd-callout does not scale; (bso#11204).
+ vfs_fruit: also map characters below 0x20; (bso#11221).
+ ctdb: Coverity fix for CID 1291643; (bso#11201).
+ Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
+ Fix terminate connection behavior for asynchronous endpoint with PUSH
notification flavors; (bso#11226).
+ ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
+ ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
+ SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
directory is deleted; (bso#11257).
+ s3:winbindd: make sure we remove pending io requests before closing client
sockets; (bso#11141); (bnc#931854).
+ Fix panic triggered by smbd_smb2_request_notify_done() ->
smbXsrv_session_find_channel() in smbd; (bso#11182).
+ 'sharesec' output no longer matches input format; (bso#11237).
+ waf: Fix systemd detection; (bso#11200).
+ CTDB: Fix portability issues; (bso#11202).
+ CTDB: Fix some IPv6-related issues; (bso#11203).
+ CTDB statd-callout does not scale; (bso#11204).
+ 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
enter invalid values; (bso#11234).
+ libads: record service ticket endtime for sealed ldap connections;
(bso#11267).
+ lib/util: Include DEBUG macro in internal header files before samba_util.h;
(bso#11033). - Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854). - Remove the independently built libraries ldb, talloc, tdn, and tevent and
the post-10.3 renamed libsmbclient from baselibs.conf. - Drop redundant doc attribute from man pages. - Update to 4.2.1.
+ s3:winbind:grent: Don't stop group enumeration when a group has no gid;
(bso#8905).
+ Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
+ s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
servers that don't send the 2 unused fields; (bso#10016).
+ build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
+ waf: Fix the build on openbsd; (bso#10476).
+ s3: client: "client use spnego principal = yes" code checks wrong name;
(bso#10888).
+ spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
+ s3: lib: libsmbclient: If reusing a server struct, check every cli->timout
miliseconds if it's still valid before use; (bso#11079).
+ vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
+ backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
+ replace: Remove superfluous check for gcrypt header; (bso#11135).
+ Backport subunit changes; (bso#11137).
+ libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
implementation; (bso#11140).
+ s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
+ talloc: Version 2.1.2; (bso#11144).
+ Update libwbclient version to 0.12; (bso#11149).
+ brlock: Use 0 instead of empty initializer list; (bso#11153).
+ s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
+ docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
(bnc#913304).
+ s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
fails in the SMB1 case; (bso#11173).
+ backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
+ Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
+ s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
+ s4-process_model: Do not close random fds while forking; (bso#11180).
+ s3-passdb: Fix 'force user' with winbind default domain; (bso#11185). - Prevent samba package updates from disabling samba kerberos printing. - Add sparse file support for samba; (fate#318424). - Purge printer name cache on spoolss SetPrinter change; (bso#11210);
(bnc#901813). - Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374). - Simplify libxslt build requirement and README.SUSE install.
- Remove no longer required cleanup steps while populating the build root. - Remove deprecated base_rid example from idmap_rid manpage; (bso#11169);
(bnc#913304). - Update to 4.2.0.
+ smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115).
+ pam_winbind: fix warn_pwd_expire implementation; (bso#9056).
+ nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299).
+ Make 'profiles' work again; (bso#9629).
+ s3:smb2_server: protect against integer wrap with
"smb2 max credits = 65535"; (bso#9702).
+ Make validate_ldb of String(Generalized-Time) accept millisecond format
".000Z"; (bso#9810).
+ Use -R linker flag on Solaris, not -rpath; (bso#10112).
+ vfs: Add glusterfs manpage; (bso#10240).
+ Make 'smbclient' use cached creds; (bso#10279).
+ pdb: Fix build issues with shared modules; (bso#10355).
+ s4-dns: Add support for BIND 9.10; (bso#10620).
+ idmap: Return the correct id type to *id_to_sid methods; (bso#10720).
+ printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808).
+ Don't build vfs_snapper on FreeBSD; (bso#10834).
+ nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835).
+ idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837).
+ s3: smb2cli: query info return length check was reversed; (bso#10848).
+ s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849).
+ lib: uid_wrapper: Fix setgroups and syscall detection on a system without
native uid_wrapper library; (bso#10851).
+ winbind3: Fix pwent variable substitution; (bso#10852).
+ Improve samba-regedit; (bso#10859).
+ registry: Don't leave dangling transactions; (bso#10860).
+ Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861).
+ build: Do not install 'texpect' binary anymore; (bso#10862).
+ Fix testparm to show hidden share defaults; (bso#10864).
+ libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1
max=PROTOCOL_SMB2_02; (bso#10866).
+ Integrate CTDB into top-level Samba build; (bso#10892).
+ samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895).
+ s3-nmbd: Fix netbios name truncation; (bso#10896).
+ spoolss: Fix handling of bad EnumJobs levels; (bso#10898).
+ Fix smbclient loops doing a directory listing against Mac OS X 10 server
with a non-wildcard path; (bso#10904).
+ Fix print job enumeration; (bso#10905); (bnc#898031).
+ samba-tool: Create NIS enabled users and unixHomeDirectory attribute;
(bso#10909).
+ Add support for SMB2 leases; (bso#10911).
+ btrfs: Don't leak opened directory handle; (bso#10918).
+ s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920).
+ s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921).
+ pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932).
+ s3-keytab: fix keytab array NULL termination; (bso#10933).
+ s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940).
+ Cleanup add_string_to_array and usage; (bso#10942).
+ dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942).
+ Fix RootDSE search with extended dn control; (bso#10949).
+ Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952).
+ libcli/smb: only force signing of smb2 session setups when binding a new
session; (bso#10958).
+ s3-smbclient: Return success if we listed the shares; (bso#10960).
+ s3-smbstatus: Fix exit code of profile output; (bso#10961).
+ socket_wrapper: Add missing prototype check for eventfd; (bso#10965).
+ libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows
client does; (bso#10966).
+ vfs_streams_xattr: Check stream type; (bso#10971).
+ s3: smbd: Fix *allocate* calls to follow POSIX error return convention;
(bso#10982).
+ vfs_fruit: Add support for AAPL; (bso#10983).
+ Fix spoolss IDL response marshalling when returning error without clearing
info; (bso#10984).
+ dsdb-samldb: Check for extended access rights before we allow changes to
userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).
+ Fix IPv6 support in CTDB; (bso#10996).
+ ctdb-daemon: Use correct tdb flags when enabling robust mutex support;
(bso#11000).
+ vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005).
+ s3-util: Fix authentication with long hostnames; (bso#11008).
+ ctdb-build: Fix build without xsltproc; (bso#11014).
+ packaging: Include CTDB man pages in the tarball; (bso#11014).
+ pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords;
(bso#11016).
+ Make Sharepoint search show user documents; (bso#11022).
+ nss_wrapper: check for nss.h; (bso#11026).
+ Enable mutexes in gencache_notrans.tdb; (bso#11032).
+ tdb_wrap: Make mutexes easier to use; (bso#11032).
+ lib/util: Avoid collision which alread defined consumer DEBUG macro;
(bso#11033).
+ winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034).
+ s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037).
+ vfs_fruit: Fix base_fsp name conversion; (bso#11039).
+ vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040).
+ Fix authentication using Kerberos (not AD); (bso#11044).
+ net: Fix sam addgroupmem; (bso#11051).
+ vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055);
(bnc#913238).
+ cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058).
+ utils: Fix 'net time' segfault; (bso#11058).
+ libsmb: Provide authinfo domain for encrypted session referrals;
(bso#11059).
+ s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066).
+ vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069).
+ vfs/glusterfs: Change xattr key to match gluster key; (bso#11069).
+ vfs_glusterfs: Implement AIO support; (bso#11069).
+ s3-vfs: Fix developer build of vfs_ceph module; (bso#11070).
+ s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer;
(bso#11077); CVE-2015-0240; (bnc#917376).
+ vfs: Add a brief vfs_ceph manpage; (bso#11088).
+ s3: smbclient: Allinfo leaves the file handle open; (bso#11094).
+ Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain;
(bso#11097).
+ debug: Set close-on-exec for the main log file FD; (bso#11100).
+ s3: smbd: leases - losen paranoia check. Stat opens can grant leases;
(bso#11102).
+ s3: smbd: SMB2 close. If a file has delete on close, store the return info
before deleting; (bso#11104).
+ doc:man:vfs_glusterfs: improve the configuration section; (bso#11117).
+ snprintf: Try to support %j; (bso#11119).
+ ctdb-io: Do not use sys_write to write to client sockets; (bso#11124).
+ doc-xml: Add 'sharesec' reference to 'access based share enum';
(bso#11127). - Update to 4.2.0rc5.
+ Ensure we don't call talloc_free on an uninitialized pointer;
CVE-2015-0240; (bso#11077); (bnc#917376). - Fix usage of freed memory on server exit; (bso#11218); (bnc#919309). - Fix tdb_store_flag_to_ntdb() gcc5 build failure. - Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238). - Update to 4.1.16.
+ dsdb-samldb: Check for extended access rights before we allow changes to
userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). - Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0. - Fix libsmbclient DFS referral handling.
+ Reuse connections derived from DFS referrals; (bso#10123); (fate#316512).
+ Set domain/workgroup based on authentication callback value; (bso#11059). - Update to 4.2.0rc4.
- Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and
libhttp to the libs package; (boo#913547).
- Rename libpdb packages to libsamba-passdb.
- Drop libsmbsharemodes packages. - Enable avahi support on post-12.2 systems. - Update to 4.1.15.
+ pam_winbind: Fix warn_pwd_expire implementation; (bso#9056).
+ nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299).
+ Fix profiles tool; (bso#9629).
+ s3-lib: Do not require a password with --use-ccache; (bso#10279).
+ s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control;
(bso#10949).
+ s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952).
+ s3:smb2_server: Allow reauthentication without signing; (bso#10958).
+ s3-smbclient: Return success if we listed the shares; (bso#10960).
+ s3-smbstatus: Fix exit code of profile output; (bso#10961).
+ libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows
client does; (bso#10966).
+ s3: smbd/modules: Fix *allocate* calls to follow POSIX error return
convention; (bso#10982).
+ Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute
'supported_extensions'; (bso#11006).
+ idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo;
(bso#11006).
+ winbind: Retry LogonControl RPC in ping-dc after session expiration;
(bso#11034). - yast2-samba-client should be able to specify osName and osVer on
AD domain join; (bnc#873922). - Lookup FSRVP share snums at runtime rather than storing them persistently;
(bnc#908627). - Specify soft dependency for network-online.target in Winbind systemd service
file; (bnc#889175). - Fix spoolss error response marshalling; (bso#10984). - Update to 4.1.14.
+ pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/
Tools/perl.py back to upstream state; (bso#10472).
+ s4-dns: Add support for BIND 9.10; (bso#10620).
+ nmbd fails to accept "--piddir" option; (bso#10711).
+ nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835).
+ S3: source3/smbd/process.c::srv_send_smb() returns true on the error path;
(bso#10880).
+ vfs_glusterfs: Remove "integer fd" code and store the glfs pointers;
(bso#10889).
+ s3-nmbd: Fix netbios name truncation; (bso#10896).
+ spoolss: Fix handling of bad EnumJobs levels; (bso#10898).
+ s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set
STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904).
+ spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905).
+ s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920).
+ s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921).
+ pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932).
+ s3-keytab: Fix keytab array NULL termination; (bso#10933).
+ Cleanup add_string_to_array and usage; (bso#10942). - Remove and cleanup shares and registry state associated with
externally deleted snaphots exposed as shadow copies; (bnc#876312). - Use the upstream tar ball, as signature verification is now able to handle
compressed archives. - Fix leak when closing file descriptor returned from dirfd; (bso#10918). - Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031).
+ Fix handling of bad EnumJobs levels; (bso#10898). - Remove dependency on gpg-offline as signature checking is implemented in the
source validator. - Update to 4.1.13.
+ s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984).
+ s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984).
+ s3-libads: Add all machine account principals to the keytab; (bso#9985).
+ s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to
be NULL. Ensure this is safe with modern AD-DCs; (bso#10717).
+ Fix unstrcpy; (bso#10735).
+ pthreadpool: Slightly serialize jobs; (bso#10779).
+ s3: smbd: streams - Ensure share mode validation ignores internal opens
(op_mid == 0); (bso#10797).
+ s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809).
+ vfs_media_harmony: Fix a crash bug; (bso#10813).
+ docs: Mention incompatibility between kernel oplocks and streams_xattr;
(bso#10814).
+ nmbd: Send waiting status to systemd; (bso#10816).
+ libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL;
(bso#10817).
+ nsswitch: Skip groups we were not able to map; (bso#10824).
+ s3-winbindd: Use correct realm for trusted domains in idmap child;
(bso#10826).
+ s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830).
+ s3: lib: Signal handling - ensure smbrun and change password code save and
restore existing SIGCHLD handlers; (bso#10831).
+ idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837).
+ s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call;
(bso#10838).
+ s3: smb2cli: Query info return length check was reversed; (bso#10848).
+ registry: Don't leave dangling transactions; (bso#10860). - Update to 4.2.0rc2. /bin/sh /bin/sh /bin/sh /bin/sh sheep69 1620310312
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u 4.13.4+git.187.5ad4708741a-1.34 4.13.4+git.187.5ad4708741a-1.34 4.13.4+git.187.5ad4708741a-1.34
ctdb config_migrate.sh ctdb-crash-cleanup.sh debug-hung-script.sh debug_locks.sh events notification README functions nfs-checks.d 00.portmapper.check 10.status.check 20.nfs.check 30.nlockmgr.check 40.mountd.check 50.rquotad.check README nfs-linux-kernel-callout nodes notify.sh statd-callout ctdb ctdbd ctdb ctdb_diagnostics ctdb_local_daemons ctdb_run_cluster_tests ctdb_run_tests ltdbtool onnode ping_pong ctdb.service tmpfiles.d ctdb.conf ctdb ctdb-config ctdb-event ctdb-eventd ctdb-path ctdb_killtcp ctdb_lock_helper ctdb_lvs ctdb_mutex_fcntl_helper ctdb_natgw ctdb_recovery_helper ctdb_takeover_helper smnotify libctdb-event-client-samba4.so ctdbd ctdbd_wrapper rcctdb events legacy 00.ctdb.script 01.reclock.script 05.system.script 06.nfs.script 10.interface.script 11.natgw.script 11.routing.script 13.per_ip_routing.script 20.multipathd.script 31.clamd.script 40.vsftpd.script 41.httpd.script 48.netbios.script 49.winbind.script 50.samba.script 60.nfs.script 70.iscsi.script 91.lvs.script ctdb COPYING README ctdb-etcd.7.html ctdb-script.options.5.html ctdb-statistics.7.html ctdb-tunables.7.html ctdb.1.html ctdb.7.html ctdb.conf.5.html ctdb.sysconfig.5.html ctdb_diagnostics.1.html ctdb_mutex_ceph_rados_helper.7.html ctdbd.1.html ctdbd_wrapper.1.html examples 11.natgw.options 20.nfs_ganesha.check 91.lvs.options README config_migrate.sh config_migrate.test_input ctdb.conf nfs-ganesha-callout ltdbtool.1.html onnode.1.html ping_pong.1.html readonlyrecords.txt recovery-process.txt sysconfig.ctdb ctdb.1.gz ctdb_diagnostics.1.gz ctdbd.1.gz ctdbd_wrapper.1.gz ltdbtool.1.gz onnode.1.gz ping_pong.1.gz ctdb-script.options.5.gz ctdb.conf.5.gz ctdb.sysconfig.5.gz ctdb-statistics.7.gz ctdb-tunables.7.gz ctdb.7.gz ctdb persistent ctdb /etc/ /etc/ctdb/ /etc/ctdb/events/ /etc/ctdb/events/notification/ /etc/ctdb/nfs-checks.d/ /run/ /usr/bin/ /usr/lib/systemd/system/ /usr/lib/ /usr/lib/tmpfiles.d/ /usr/lib64/ /usr/lib64/ctdb/ /usr/lib64/samba/ /usr/sbin/ /usr/share/ctdb/ /usr/share/ctdb/events/ /usr/share/ctdb/events/legacy/ /usr/share/doc/packages/ /usr/share/doc/packages/ctdb/ /usr/share/doc/packages/ctdb/examples/ /usr/share/fillup-templates/ /usr/share/man/man1/ /usr/share/man/man5/ /usr/share/man/man7/ /var/lib/ /var/lib/ctdb/ /var/log/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/b5c3032238a4e7a6b51699004483c0c4-samba cpio xz 5 x86_64-suse-linux
directory POSIX shell script, ASCII text executable ASCII text empty ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=86349e83ffea3020259fb6d4629e2d7e3822eb31, for GNU/Linux 3.2.0, stripped Bourne-Again shell script, ASCII text executable ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=afc0a105f0472d696cce758428d8409a6811678d, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=329df0815af810e87f7e614bd48a5e33fb811cbb, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=88ea77e51adb6008f8a3378acc1cd2fdc7d5ed0b, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=d78df070de5e685fe33ac34e623a03121bed7dd4, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=89bc280a1ce8ccb599f1200672a6785bcbeb5bbc, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=afc945670bd0b183c9476593d9b846cc0c145530, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=0c16876a41bb88b3f4c515a4fa2897a7f93b6482, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=67b732223dd7d79d874ec7d4116a40c8ea975b29, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=306dccf2bd3994a93ee47c423c8c4f2523c72248, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=1e3a58930e815511c1abcb1a245cce6242053468, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=f639273b68aff8eafe4f0793cefc31653caa5652, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=8888e5c88312bc20ebcfeb60bac4801c9dc82cf8, for GNU/Linux 3.2.0, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0bdd8c4c8e053d0525f3df4771a8f8b527ef806, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=71ca2a447cafc11543f583414983bf320c2789eb, for GNU/Linux 3.2.0, stripped HTML document, ASCII text, with very long lines HTML document, ISO-8859 text, with very long lines ASCII text, with very long lines troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix) * + , - 5 6 : Y h > F g # # # # ! + R R R R R R R R ,R %R 5R R R 8R ;R R =R !R 3R 0R .R R )R #R R R R R R R +R R 4R $R R "R R
P P R 5R R =R #R %R )R 8R ;R R R !R R R R R R R .R $R R 4R R "R R ![" m7Ζ xCBX@Հ ފ>Zٱ,NǸ<۰z)'}c<-T6YۄdÂ,X!yA|gpFfL48U~i2 < GHlyLPMppoAPEW!@ GtI0J) N3 f ~uO n@ I,Z;g6AO'%71ϳ[H/01W,_CL$ ?
V
:\W) \Qj/:L3sI#}-jFy-zU'? ^NU :0 L
lȘU'6孟(O;eM^1'oK$6b=6 *& }\/bVؚ
ܳ;[N>bNY8Da
j[O4pEswh vB3SgGM% e,n^([A6@d% Iihu]F;G3ﱜѴߘyQd0*LhBwpDl J(r)#lcq0U hfe-f+Sᗗ`WzUքp=U
UǮs &e+XWz%fCM bcqU[ Ij3"\C{@ֈtVo.Tj!ml Jbϑ}u#{> SЭuHjvp H6 'koNt2o.MSet:0| DNߌG)D{8œ,w%Iu`>݇/h*>&^4w,و"
LwV k|;WF&ɟ`4H:
Yp
Z|Vc {& %myqt3X~FAfv'v߰b3(ĩJ*ˡKg'H{|b6G=^ʭz zo/x}[] #R 3%O2G~uH!KQR!ޖ8GjUIB-uXPƍ\JdL KH[5MzR_,_%hoMfe;#%Ams)vZ*ɂg0|7Hy/ %`
N(. ZԤڣx 8P++Ptp@Χ聐Ud<[Sv`)Տz( i l/ȚL}͏`NRbb&
sԲhf-}zFH.?f R뭣OJC5Ĭ ]x>F!z%Ak!B"Oy$RTDc]a#Du`Hi0;2Wr vۙ3 sF}MJ5wF
A9wԳtgxj%=Ga٠H3gyl ނ;t|sQ .*e{G(RS !gKq*;5/2A| Gr@鯱ǥh2ѧ(#^?w8mDP|3Gſ8m6֧6LG:{)X h^I9>czhK;kV[>TlY}ߊ}:EC[]qB>;Ȅ}"6`mx^wFV|'Gw
i 41LjDfК"ᴤ$]q³y^5bKEQaZnX] A8!!q98tP+;8w'n!b`&r7ޞQi7BCxRc&8` [ٕdJ̳!c+Tr ])05S |PFɫ+z
muou%ߵշ+:͍%
sqjc0o#
M8p !L&R̪itܳ?I0-[fW_7ls,
M sqX2S
wɾj֙Xr U*xE(#KCўxtI֜!b^Rr[RV^SSL!
?M7 e}a=2M$uOԓk
mu|Gp[=kD /^_4P,o9?Dĝ3z^m-/b5D\np/<
%VNdK?bN3¼r W'7y`%zѨClv2F>i{-ZyF|l WKͯy":6{8i0GC`3KU]VK I.$ N?#M>dfg9FN6r6`V@8GdžO6[PŪ,7a58,Tev^ Ra`)yw-MyEy < lUx4#ؑC,*h
SID<^De W
521[SMj!4hV:Vg 2;'pP o}Nt#"E P)W%}܃uƊn)_q܄͵ןNCn_) ]by01@ @/Pd J*`XpFPÙ Nbmш8 |8Ր AYٖG
=ţ۞ WXe
;](\sbҩI[ l# nj{J~M#d:j%/կ4{wX%&BD;|0APHؘ+ T&3;ev"&gg: T}
uMZm$ýNC6%;)' Px Tm*/1 楤3MBY&[7zLKZOM`ݚ p3by.komFmtXI yVq vI=ՑJ X:؏)pgjG՚ @ݪBeN)xrYOTNl,̠Si 35g6˒݇phM'3E6l$ e (8߈!=PUDHJ=0WC Ê,Uc@_10d|Θ,n
q(3 4װ iҿv X^( H\QuSҷ5<3=c!v>?f2mτÿ tRk4| VN_sQT1k rɈ8s>VO_J! %j-cڐc%0_-DeJ\83æMhI+GH~S
ķǟvA Ņz CYs ZBp \pauO?݅k
+пMcQYp?D²vX~)<6\!ztFF|僺ݓ"8ttSQ
Zu.WMfVOQ=)}}76sv?Z3Ne/O(M)@u +ߘ3jdTS)Qa9e@v<ĺy'+9eϟ4Qد=0`"7AҀy (ΐ/i2dK_V3!m2U^J k`v㢵 C抳q'PSB U:v,pamK:#Ɇ4}NSGˁ[$G!E +V
jpΞik]Çqٹ`of$
~C
3g%scF](84ܤ=+𩪾K2/_~$'Ƅ6[YB"L`Γ153!#\!$%c26h zi!URvc>eE#w
HBzaop;)I` AT 踸ܓFtf6wHC}ݫg?%N u-φm{鏯c6Vn{TWƞHkYI<[8zgټg VM=uLi
R^Z̗ʥċ3
c5tH̓_qgDfYL_^N%u/5MQ96;o] N}5j7jJ:QNL}s{&jeG$|ס5աzjӥ$8'S͘7[R \D a CM #MuK鄸nַзBG~Z§9rBNKk[xꬑےsi KIwHxȈ} ,{> Fg.hϐ`h2yo80\U*{) <؇G'
^)偡ꯦDOYMrWTd|X+5+
'
oCX
^M
;9DVs
?# MP4ղxK/;%EQb@l-.QY` uINa{fj[\ d?bC o
_)lc0ae lԍ{((,L1۷mFQz%-%^A3!>ht|>,=C;ݚZlFՐ]lCjN
Enɿ!&t X(@&uF5 J0}F-
U.1GA@a
b30no6c;~XdeiD'Hgט űoD;|8?BM'J"yjAo!w;@;0os_}rj&
*Vx""ѵ&Zb {g/{#ja<POi~96gx݀qH// Yf Ae"_)edSO2wo&B+aTWNh L@qC^L3m}23qəRlQaAf z+ o>HA31\B!@nrЌ"Hu c2MR @-yL;w8=W qv|~::_C )+Yl:*1 dt!H `bfTǭP1$b K"XG@1 L.G?wͨK
aUKGņ&kRʬy>$-B"u˘b{|u`V?5o|qȩwRtKV [[`c3 @F)0F Gߢ!Si#j :a$gKO)(:N2qҿ4ꋛ.~J36b`?Dڨx?`Y =P6*'|zf`*ε{졮Yg Lh!9v|D<[+5. 2HFoxf%zڊ識>%`F
dV|3 O:2T[jG>#T+JEtzڲ;u^0A"«ML $_+#+/VuعXLIKFI* zwP0Iϔu/9[WЧ~cxlcǑ;78e` ٸwU P֕+8{h|[ḦϢl&5 KHS{Pڀ, !݇)E;;1_[F$gy:s2Y)zxJ
%пRJ5@N/C0Lбtf{W=IURÐQe
}L9 :¾D
)t@ƾ4$VL +$HWͧ,JƘ ^_09$L *
/TO-W , s,&RCxzN߳ `vvⲜF9`EsJ"?+-? ,5mcdҽ
~nkIy&h z1z8q' Wp6e;nȣ<0{@İm
.2Պ BT%Tw 8y{#ly儰L=Y:MB'u5 Yg!5Ϊn5Z2o][,&E0t5 MYJ"dVS+{|fB+gCZuA;'õsU+@Riŧ"f'Q[ }TA
6ۨR2]8
&1Eii !DGӝv)7K{Jw.T
zB9,eY0
W2:ܺ0?\}Ρ1.co N
AK
,Dridz}ZawOf"ON NDNLS@P;rYo4&b@{.y@r|vhID _RHFP]~8\ Th FټZ~&
2pfF?p+OXQ߮D4.wѲȷirR˓GboR'5K|Iq>TzcGeig8QiKW^ZIlG^*kvG«Jeן~
^ qۄ!J*` d Nr{N_yɗBkU@1:B(Zah H.sAl廂nag` 8i_$GtY عT+(}xE)I/6J\ϛ % )R Z :'k5ɸiȆ:2"!?sKE AKFl!)t-w*p`){ %ÙBk I7ļx6 c*n_w[(֕U6Q26b[!|Kb"b\wn]V "Ljm۳-xAHE0[C)4+ZӤ xJuE8SKb_ ;nGxvr7%~6%cEW&&UVW0pO֜H>cDnJc*%@@[ Gt^Sd3MrW1kvxI\+Ť 3ZFpł Conѥ/b{C-~
p~e *seO^G? HC{z_Repm gD E[hU5 X n( opoN"\n9MB)3[ch 1 (Md\ C ;㿭gTpOwVEa$} lk4.Dv GH`N.t+cY9ڷ`oQGA*b0OʚP#6*Mh8)֡R6ZR !~_aPEu#2Z4J? {Va뭷[9:?̉FWHa5,a<[b*]@xlGCڣ1S2B|/}U~ -qj/Dr=mP
qޱip[IQQ{w fb96!]N^oU}pTvͷfF$]lO2x>-/O\<"$Cɦ!
}B pgLvU f W[Je^"]ah[:ۅ5qsi<F=7Վ%
,oahOAjV~k3T#ӷ*
~oXFS}e7{K 9qw춂В(6pے3R9R@F "Wʟ2b嬜8lrmH ̝!}im L(2Ԓ8a T>@Ft {;gi'Ӌ%ߡ+MTnE `IZ!-xbWZS 9%8bMkd2uTڦz}ԉY#zpx= D Dnp뫴
>Dž=me1}Z F!471DMKp/ <п| XIGic | Us
f\Ͻ'/,~=SRϒ:ppބ{K~B,.y,ߪb
qWy)Wz,ݫCPpMg!lC gy0N;؉FoՒtk5* 1WZ-ITX~Jv0ĥ+B}FeRe M{CWFk,(c/,weOF%}*ƢYL?\ a*Q \Z+ $5DmVgBE+3:l¤Dom# I;7~ ]ӅQ rc6F kjOXBٵ0K07".sh&>ٌpkgz̀, (zx &#NK@l?R/ͷ&뒂Lї to :tC P5Z&I3 .% XvY]u7or/} @ += Q7 $`Os,-*Usd n˜ t` Rj`Q|pvd, ,=*yPJMKZHX7RȼG~ k,w 2Di
XH[b_9 AvXQAȳ
ӰL_!aX,<Ɵ O[$6MK%]@!='w^î&s/Aiѥ`:oN4p1J m[,R.z Nf(o3K$o>7G sÕFf :deвSئLV7E=
q{n p.W+*YNw+m0aC*y[w5:)avPWh b`-x"lـwB4ơ>fsG =ST]3ZP.J#j5-32A ~I!`r!>z_a생Q
ҨhFL[(^yФ\;BkPoiSY O''P
+yDb
֪[*((/˪RA ug s*WǷ/ОJfԕ%VB3/%lfX[.|5;K#e, Uu:1 qQq@)7 l'QbeQ usqI e y5uC@'$QdZvpyqK "rr>% NA pRQ
R*;oWnM\_i E) A&nA, &dojL^͆ ^`H ,D)e{WU2O&Ϧ|UF~P_S[H_y2@T?BpޜoǤwt[©4AVB蕏I:(PgE='irO>HPӨj0%-&qJ"݀e{>4I{ ʍcMERqR$)JOR*'dS H\*#0E
|so|d
;v?M3e~, FhV HPp{馅 YܝdM;XB\"_ -XߏVn+s`{?$K] j[a @q{z;Yx];R(q_ܑO"|?J oTD.cSޞsr-h !.vq
uUkqse7l c)'H*\ pXaj3ܯgHP4 ѵ350 @G[jD:
JG&y wiGVN@Nt. U2O!z^A0 7` 驍F
M 9&: ӑ1-BV@d z 20Wܐc5 snvRBJlzZSgh|1+jf[ݏkoV}X?s3!L &-[n1R~s4a 3_7䑀\ \3 29vv M{I
Hk 3{HOD}KKZ Ct@'-B'q rVl+hzں 当&P15o6'f$*"7) a,!8S^08:]чv9lL Lڎp8Xzy
} жuާ awπHMN u<[ )Jz /cV*K`i,(`jREHC39yvQߋH jx%H
9nׇgk?) Gm]G}i+n1x t%#}^gE+fuΚ|h@y-*q /W _t,Wg١*j?[~6qUgBLeb3ksVNDWP/2!R&mlsj hW{].$ʧkmYz2~HIAhl;_Pv#+r +?ԫq}gE&|YQ升
sX mװq;RUdW ff@=5]#@FJsx 2ǧO^
6' $},gE`**L[h Q^5fn%nM4Z'e[{a|A]GG .blhN
Nys1ڄТO4pUM nEf۩ 5^rQ "kֺZ J^)Q;]&s_nLaJ ]Fo1οX_n1>{rdBّ C& 5FW D7FXGz~@<Ք2Ɣu @ a.A
XU;%D7u0kLbAi /ã-<
<@l 'OU8;W f4oRN%,' 8V2I=K ؍T@LAZH6u+ *㱲xns.AgEZsco.Ro
]9^2yu }Jalwࣂq v*LQ"εɱՑV{:'A]ׯ"wpMΞV#3>P ::B%7iw4O\ hAJƍB&Z9t0 :?q> gF߱ 3Hڡ6=[} 8oV^ą[f
9kut yJ,u>J3o1dI>e1h C~-3:HR`;
IΘ'I77T6r8q]Fu~Ⱥ;1zp Rwy{0mQn F1o˅Ւ鍛[r%Mkl)V=tE?6ו2Pj
ii?:F
^rȟ6!r(c\ u:1Tfcʺ3)SR?7릞|(5#I~@_^lA
E$NiTdC` /zY/ϝq7t'{ߩ,qcC:%N=Go!X&yT=4}4w] !l4jMsͫ#6pY 0 0Am q+=ݸE\&'%:QfCW:f_4hau BS*Ls. w¿Ҟ>)(@j{5t
tzָGXJ020q>=U.TPQb4_ A02GKy7U VҼvI|dcTYoOf%'݊Ϛڽ$kpk̂:vVvGu3iɫ8얎no1i
4ϘzFU"Taq s!OAx#9Ʉ!*,AkK:ZZ$^WlHֶI"je2X bWMW:GJ;5I]#t$!R/
=G
%R֮{ DnXGѠ m"mP ze>E;\ u~VUc/BOg% 3b$eX-Cl~qGjf Z 0Ɓh'OWS4:RD:U qM9 YzdU(uuCՉ
"pK> A 4F bIAJKS1 :hd$YTY]~1,T F|BHd&HNw-P0t+3Mjj,!oG/]7lb/Obcy>m $*kJo"IB7X{`*&hf!*Ё| X* E p@')nI=ܨl~08H&̆u8㍪I>b 渀0Dzt\:
Z=jeZ
hPD U-oJz ㈎a< {'n.T"ISpa!: ^Q Meq~S. xN:۽l+:l/y%jb\9rnft~ lw!
yBہ5BpjA
5S 5ݨ"Q٥̵S 0u Fd̠!Z/%sOҀu8)SǴ Zgڅa5z'bھNXu=@Л=ۼƩ): d9
ȥ'"LT'8[Af__ByQ5zAb.xwo
m* q3qǢ>0E嵆7o\aN6\D%,
BB% ͱdG n">.22?>dv2P&oî\%DG"wg[G겵x3Li
jϗV$IH@ϊkt` -ߔ-y R0O`d,?@Zu2 *~@Kn5 l1a}U8+=UD>@h;ý-f /LQ &p
\}XUX|m9^SAUFʗ` E ; }JS4V 5O#&_MNc_/0,Ф4zeh "
*(د+8fZ-?S7@ %zgԚ/1rNfwKsYYe
0I?(cTQ^qoINcWtR,\*/vң,D7<$ MY pF5͇n4A70Sp gIDƛ@Q(t
V$+ #X4)%$Yr 1 )
erυOxKS+k F
^ZX,lm@h?xÉ탢:$bfkW`D(~5 =Ksz8LvAb@ZtubNK^vg2nJo猿n6 F¡N,Ct js PQmx5ZEȊ ݴ7ؼlAD19l 'c)Gg
\@6F ;\{>U /nA6 Rt)pэfITcPLwJ'O+f $}"Y_ rԓƿ0\8Ge|>.hsw<.{wuJ?ήtMx2hr ?cNZ0v|?Kށ sۥ VtT5E`aw)4LhB*};7!'דVlFǯ Ŏ+8]߱~$G_WPdG,CI$x?ۆcdi~iē%1iCz .ʴEw.(I? Wދցy~^/eq&M454K~A5nJp#&jּzq#%s=φ($%03i '' PYW7}̚8nņ
&^۹qu뎘12r^ů/)݁
c؛T zFHyo1(ɔעx )pND1Tf9 SqW|1urXbi;1\,ȑfyVB$!` \PIНy]WQu) _0؈ RdWT@`2I15Y #'_S3% G ۪]0sHϒ ({Y m/6븱WpfLyAOrJj'+8 ZPzijmְ r'0^ kV6lxHc`d)$hle]y)z?Zܬ(zݮ@'Q}O x: o;JZIO<:[aˆ *DK!&)VetoHCRs~;I_ '§tw
b
sIh}7KHt(
ZM @DQ[AbiEYsΦir\Q0X옸=Z|%1O~L2vN/,{?ݟ)ӀJbzKd
e3T8㶆 X[{T x(m`22
$}J}">Y {< pױ%I G3o.gH'C%QUG
Xج&D1Wc' 4ZW,N (lQ]~.v0Vr*wJht7
l^\cJ ;vQ#˸ Ji"VLּv|oQx?*- s,u9s;נ)ؙWcU4o#`RE.!P#i#:y }1Έi"36\'=lOu_64d*Ȁ[I4>k H(ӎxoiJG(dTZbYI{ |@i|/g#Ulad`P
~wŪ`9g)Dxhb9k9dz`yM2ACEϹ 8BRX ǿ'cQ ~4Dy R^YD:ݻ)41ڌEq/6E#NjM'9Пq*滁Ǚ>Pa難A K츃i T#_ l2e'0]PCSEG,LY.NBp {3NwPA:`/8 )ygFعlH~Xd
mJ)Qn*+ BiG/^[Qc(@ xEjrR:$%)4%+S;5AÉvYEڃME^UKeal[ك9Vǎ99 H PeIf_w@T UP`^ЉU okeԑ
f4ڥJv4]4L* ÅW,В۹ Q\p,iQRR&sux){WPd"IuWn* 'pVJM@Ѝzk 4hhGMQ,qM T? sItBEXx$K:Tޯ(OUKڍ 5-`@p (۽@$V OJ=#7wFk$́&\r@'? ܣ?Qi1f-RKe<:WV1bXKb>8 <9 &9?˫Vwf Dۜ'6] i9`]6i}t Rr
K=9Y#p CpR*uv XΊ8D0*-cm
yƊ&U)А@.m-b0n]jRK ,Usr2Z L1;,< ;o [о\:cyI> 'DO_1XfLqZ<] *+
h52
-۶_k+@ @nu˔wk(5Z% PӢ
0~Xbʍ!-lYhqtP+T i^k ś oeJZjٻYW0q4`4=\b̥.{G"ڬV'' gA l6=u*[ #J3 |
閚bfyf\,!ʸ!:)YA2*.þ\61 -hRY6s\@+!m E8&j0=tz~Nn L;mS ɡ ؑ?9s
Z(.8 Cӏt1=TO\ȗDתFd$?D*׆C.w 6wT_9CpVdܗ~7TP/x:4)e
bϵj2. ]}7"kTZs|$
Y\rP @
?,AQf ^O!$NP f@
k%r3{)*Kc_
ݙ^ά htU}N+VE&-ܼ}N0e mI2}"k3|#42;xf-ɧF3䲚#!y02Tז l1YZW>.7 L* sV vi k pԠJj{Q&xv)L_ͼ07<"j?3C6'pҌ(Wk2 NY;K8j.d{-=}!>9f潷~~RD}_cƜhzYp . !Y,/h}g}g |O'i&RfA Vj/99!n&#KU@D E|ӎ?SD^2C
uRuˆhSY_y#I|# .^-UUT҇
ۏSe^IݠG
xQƨkDl
[\;tֵK9:+8 t%fDl
ߏ~ mwPv9=u,Z$A1Č8 eӜ)#]c˗A 欰 1>) s "nT ǡX$Ah -H>\ 3 Ԣb/{[*/l~HJZ :)~r8m
Ru
Xζc.8B_7HlsU =yUHO撘 )7\DgkZy!U j| -ZeWf@36h=fo*R]<{hv0CTC80/zSRx='%ȿrom`ʛ-/خE-pmpgc/-pk3@iYr UGXW PqDq Tx]a65cؗXFI
)yTh3wKjf|g{, &)M
vɈ@GxQI"(XU7Cf sYTY.8P*
٠NtJZFE| g{i
b }OR:^*#6V@5Z)w+ 78o5]n#ƛ/5jq.s .O-KudFqbmDT w&MpZ7;/ L̛z J*-ͼ{7z)j M@J LtF䢔Pr_8;*L9ns_gkgY Su?s]"Xtmm-_ :DH{O vC!G&PO8pC+4ēp6buuDr#b.XÚm F(|7~7? pϩ*-bæ{}Om.z#\ {`{L L SճP2K@*-HZQ^F DWQKsFVO + Grg_+s 4qi88X"Z"uJd&: Tl^Ĥ?izrnHPA/0VEf9bxbt1 b;р5'\ʡsoYo`
4QBcvet}|{ 97$ic,[9c_{QtxלdYYr^ jAH6gb L
XcbrRdKi.I
[b*%r(x d!bt\W_nۘ,oAq:jqFr.zYgR;RVm1#Rû`Uir1KD%İ==EY*6z1wWH6]m 3>jBM!FY k RN~ _Gw(5lf %7*-rOmjR9}`R4҂z=C
CO(L$V$T"ޔvϏ
{_<3['9
FEX`ew.q2a{I^aE̐ kLF(n{qxͦ8:.M(rT4u ١/͞ xΣހ k Ys$wC=[KS|&xu@\hkt: UR~RO,¹$Ya֢}Nz mKt a~
#b?c "b\X {M;t8uњZ@uE]fYjzϫ$/sbQ{?C NֲTŁ3[oȷ K,G3bףyZ7y)h4djY'EyO %Gd@6u YC8~mw;, [.)4Rtļ4ٙIum(>J-E~?/J! ")v~RZ"5g 15O
\F#Sv=P-|?-6h6+<7b.dZn}u Xk+_1y3@wSϸ寣}W@k_sVAgUʰAٓNplPiWMW8kϚ
`pZ.miNOQ.^ H-;锍*;h)p!Xd{3~ D>Zwb$Jjjd!6fiA-o(LÚ[b?>:8Uv;arO@ De͔Kr4 Suu*r_:?IY8svt~;* 3q'?@QSwmM ZtK@ko9A T&R\PEHo7B
STVr+֏e
FZ|Epq6q$ŔBQӠn!"Njb械/xFsqe<SI vo!pxN?vWڗJXRf\: p˲]il~4 4lBA*y}%[ѸK^~s
ƜD FqnYas!Ⱥ\>t{#QM eXfb%0/Tv ƨxt}ڂ
ٝi);gP077X| XCTD ~ FB9lGŦ҉ex \sDeD] i>\fm##5#xbB
9nDݛYdV*.P'm t9AOԕYSTn|Ξ-TiBltzқ6b8,5"&9wt(Hq%䍩HԳ w} i`IvF?b z)A*|bTzch=~F=WLE
>34[ ue BM le m7xYҠ=69'Q%zZb?@vHaǒȊ/ "R'w_pQ 2I{U:S͂.*`Woƾ[ ґ]k/v fލcQ11̤Շ a[J Ns{-ԨGҳO_n?k]|E?|6aO^I?mq7:pkYY_]c2f ,XAzV#N&Y!3!)qΥ>=]2H
vWLl@de ݒ_[+h5Y#5ZRbs"T_y&iq@WPhA#3tbDB>=^O F ]- S`D*nU{nyr[@e_J23?Wry%mͥ@P?8=cH?4N?
vJnȚ1i泌؏r)h-aʖ3Eg1.w들3'[2 NaNFUB h4k2-h`"xC'X"3ELp L+}a2I6D@F-$by% ҜOөs'<#!E"0جri-I% U|
58!P~
sP
K2DL`h2jܿu!▅6j ݪٚ _&GQ 6Z5ܿ WtQʹ4fy82[> L_l fRuq$42Hq-Ak'nT@zՄ㊘%ΐ$:zrcx~TB+m_Sz\ iyq M蔻y3PWn@öi*̸zEXY|~yz4bgDN EPeǿjFN`t5`؏Heko1h
WfYH;oeqF}lTKY z u@%ɦjܬBX֔yB Ќx> bx25XzcW|$^٦6Ʉ6pitSH*`# ww! +|9;ėw ((T:ս>`O7L'5;j% kibvS~$kP + 'CC$O?H]gE e$<TSײcpЌb@ܗ"OG4' MQS9.?edV!VF$ ~H]C9s 4[> J:b zыݳO؈-K}S)[6Bܷy2d|
$:]U7ЅO[{ekfKJ<lEKdV
^ܶn ! WmȖ/ 5z_I9$yZ륐; ;zwf to ZIXaP.Q+⑀3|@
C_! 0z(@tBS µW#81a&Q\r4 +v+:|J;/Clȅ
JX4 O$f"GB` /̉48ݩxc SCaK C%cyTn Ŀ2 ) mfoC!kdtvGO&M
ڨR#MHE$;N@ɚvud4w %Jvls~1LGel.+%n,/<8( k{ 3#W*dDXcKDǟ8½\ZcZ9:\gOHDúNP#R Zzq q8HDUZ
k*zQ^5p^b]< JucmBUZLSKRȖ'*W=(UuP[Z0.u7lG^Mu?Baՙ B茱ϱz56_;B `M .Z$r~1K>-U 5zbo/%/ݡtH6IqQe(] o]`i`?+ߙ
Y}%j5[z- ,Mцi߾Iع~dgF> ~
ǒ: aR\ Hg>| xn3 :: lMqM[UZsGccW-46Fyi<=!׆,fp vm E \&Ui VdU Dxl Wޔ!/aqc n>!#p hM_O}i &+҇u
?5 C :/qd_
{ީj\P00%`2fss8֖6Ѿ}̽n#رď< $ܵ0<쭟Hw L6fl+&x6 _
вUꕀ5edG 2у[vZwF286qDYzFWYfسL*a z{SdD
lJbtq* [^2QVZ^*,Jm IŢyI毉t1 ync<4uMdM
I'lLh-$:߮b5kOo|4Z\-hڜ&S=}
)a|:U8T 7J (;FwǮv?`g|Pkbd 9sqy Y/%i$ v
7G2KQ ^ٶ(%t߯Cw<ԵU- @ 3{R7PpD6Z-lnz7/ɀd+$) `b6
D}t{)"
0%Uz~cy3]! wy VX(tc2YU0"]o-1Q4mO:'pڊ cZ0p@x,[/+3LLz NFqf
h#q4Jox4[{ܑ!|3 o.=8[V--ubg["!yQM,9G? ,q5;hT=Kc7V^ p $Bw5ifڛ)#yTS7bL~w!xe>l[Se}|eX&D,\ğI
_!d9K$'x;T1T4*dU5[@OmNKtta{e(|Gjc$,YGDߡ=L%81BP+}bẍXFw@D ).qt
( ŒUiL($& }ok#\ @`Cs8&ޝ%wE$!@ztK(ȋZUsB*g귲2Qʁr +g+ "_}x<7H dY*B9+/k\lb|3.=q[t`aYOΛؘ?~ CZZzp w0W8"[rneE|fkζsfܬ{|~u 1\[ZNUA-Oᶩ>mՔnR2*(o%a3K9aO,`hдaH u98* k uDqhh:3#zPFn4Ȅ_XwB22&$}'b,#ͷ7QT⥾/Xg%1ZJs *c0dd p[;4Kp1I'+X$`=~<ܨa.MWekq,E;& L}{|mhG4٦~&J3`EK99;ީoUϵ[J0ЃA r
_p
(Ljɂm vSA qݷi#'Ip0^ZO {U^|> l@
z ciI2Fxg3)',Vk$+6LtƹbwP>Eb coF!vݤ1li{bKLx^|c4 H_gD-gOtAXaXR%$Џ^Ґ|r/]φRߠASc#}$
jzW=0W纖1uiZd7H!d}0镚1زc&*˖y
s*%&hV< 5E eud@v_ТAɾKGJE-'yPTU0*Iw U)г̯بrO Eࢮf2vjtι\0U:c5-7雋-N&xAOaBaXs $Tpִbq" 'v:p"inwFhdv1 ?5
沈ؙ|Yߐbo*Sug$b#ٲ" &loTqh\鞈`vx\,vVۯ VIc_Ķb8Lkvy\I<[c'g)\Ϥy% &|"l(oo[sF8|%x3(Fȩ NnԇגFG3N-e ~
/r]m]_V~kn:7H{b9a%3_K ꬷ]0"?[0hqۯ j/7{yy
C 3aoӖ"IN'g,יlD3μ9䝧*CRJPro汶\,$ 719`hiaH@hH
S(p$1D\1y GjJCSI6 LuNIٲ&W@[.@/ĎCƀxr|ZsrByж+Юo6ymO2'vpnƊ"_
s*43Qcyc?t%a]$ zmHQn:Z@ F)& }oԥ+5$"
z zBPqr<3Y~zPx_/SG`TVX ُjf'"r[P,wo~HEV
Q<,ԺLaB/FH
⯲}Luy}M~~S0M$C&dɑ᳄kp.(im*t:-$oo4[GA!M&Έ{tq |o!]?\*hsPrRQ8
]>w 0,fCpۼi1HdB7'
,5@l#L͆yv&<'iq 0(9mި ݥW*ɋ뜬
㐮oQZi1߸I_Kପ}eBdqCKv'6˳|xz 焀^k -x%]Y7Z{_|f|LIX~^unjs(?| r;!@ AX5{Ȱﱔ<Ёq I[n+qp7Ah[2{*
ޮU{
J!E5aL˽Ռ>7P_1V)IJ+u|q) :eIR+X ZX־n3eu'91eIc"w SU\P >tnKN6 鮖(6iJs zt6əD[~~SEI(K U 7`i(X n[ hgsnrvA% da\^eǏ툷PJzkcw_l `ϻ")PZL]oMtG 8IϦ i%@̦ Ko8]W3.(GpasHf5+wTckU!2iOQk _{s4 kSQΩ
.o
dG?8, O(
:i
9p&4,Vyc2JZC:Dj45^z/H>|VsmrK;l'N_ar07k`D)eE^i q: Xpk{
OD)t{7ej3ȱ4s#n z=Z;7Q$= _&qT_jzZs,ZAVuRh3{Dz̒oo;x&cJo :wI(=t"$Ԡ1?\:O 3 j!'6 -)c
.4NiDL^{k0O7)ѻGm8ҷW:%bEI$3'~9$T;]{5VoXsV@ZCI*Ket͡A:K8$؍漚!h>mmIQ#ͬScI]a+_
kz#T]:y_ gz&"bѢBuWW< ,E[E=MQ]a 7ͩm` BQ7ٛWcINZa!eF
g⋦*nJ?[ e&FÍ*./ ]
TRgLT> %WPie )TO
]7DO-:Or}q9q*-Ec:a~&0;ͷZ!v# !(k`e ܞb ᓨH!\[m:9mxwX6n ;ϟ8 o0.2)ӟnx8ᄣ٢SNCm ܂n 7X~Nϰ?އ\aӚ3{R-+Ee
JHw 5YTe;Ϗq#0 u*s^go v*ʇ
s-gsقeXtS +k#]{Cžr+ggY5dtuAfMT$:e)}{֎[ғSX| c@m KoSp!h<"#%y ]f16Piok 2_zQ
kNVTv604"1!
ukz 1
ǭ @{@$<Ҵ rA$|G:\W+)(|QΉxZ$@s9fNn@ ~@
:xv{QI aAK hMp2tZgu+|
sb5CūI]E^Jyf8c1
/fIgV0?NOS
UYN&KN CFo"Ʒ{ du1W7]^CuZ$5ɧvsXOq {-JFnd<].(٧)"dw
Kk
^f^]גRNpq-B,?r\>Ͷx3m4KW\Q #= ||Y <$ 'ɂtWkƍ&. LeY
];".ToE*)[uJP.? ʦ-
0[Zg[D^* 2
8Bط5J^@UZ߄RMxq*e *FV > א
못umF 蛣g["F˷*"1:ѬڊV=ea5Y
uR bLpTKC
sdl?فPx
95)A*|>𰍡xYp~L8L3Lۋ^fkȕƅp,zc; \m ІZ9
TݲpE'Vȧy^0:sh5JAhnvm6"N1B[
mrRɯÎӑ4D~Բʖ! $*Vӿ_)}{KNlʞ|=L@D^z,a(lck4`5T#Oou$ܔB+Dz셍ZoO}60ﯙBNziS4ճ"CQF{Z FӰxoO`kt{vu"#G9߳q>%09~߫ZG=|R= j(x^0r$n?WXErbEr 1E_rbq1DSydSX C
AeƖy1VDkd 7l%
t Ԭkӗ#gdW@1 :zhf Y :'ftSBBƽҩPD/U2O'"`&D )
a^ * 5n
!݀~y =JУ <@3q88;nX fَ`o7(Mh~e㚟
=鰤HMCBKr1ܲX֨
v>?E0nσf\ r)geg5 VwXUa1",>$EfiQ
|UO @3 w=0i|LU|g ODhŅ*P.QWM>/RQ
xT2'@Qjכf.&Cc5\# DB=d.,W="JQLX= чַ=e}"rۓM
'q-;]ܿEڡhȥjC®f 1f>35Nt-Og~i
lyXa{MR흲/zl˱J@0?a9>8^;(]e>-Ƙ
H!E!
n8r&HD$H
2syknC~W(3Gh(3eh gY+eym*5þ`b| +/Uk&QZE3?@<,)V(6h$7pUs Fy'1Wnt U#$BIM ?S$2~MH頎$ }SY(#(,iTn⼢n㾷
?کjM,=*p
t 2`${gtQs`W\{v7 Qm.PMOAq^^kQ\xw+\6vk c8ݖV{_ѳ; ˼w֒pi'ld
㔁
=Ʃ0 j-a2pemFbuG33ER,%90g%-NW!F'}邲X>ʃ?GC>$v` -0!љ2bԮ%$B,\JRI'yӒO ;3RAȝ&E) V8W,njlOtotdbڂ-Qw, LYs eYާЙRk&a$: E>Ot~8A]Y&%|o'Ӂok~
Eq]SoÓ |vIi#¸{= ^=oxءSݐkE*ڨ2GQ`E`0jhK;A=tƲY.K<4떀W1Q[d 蝩5J.5ϴ
uw-870V+ACzs3PV:(f?QDΔ"FF`Tm/{ݩbg@EHoDcd>;g>OnyЇ3=Bh 7IGi_zq,:o`O&;}E=Ua7Bo Ҭiء2eP{Q1B⍞-
!op+R ,e & 'lO7ə`s].FUm܍F Dd AS"Dq/zS7+cadO,xRW2_6Fq 2^PԖbrE,; Юbn6]va~)nr,e tR*Ll~1u臤NmԿ~ ]FcD}FZ0em9ԱlyWTipZP Y̞B_ X/8CNtzz JM
J^
ri{Q|ŋ4B.,EXpp?O9:d`sr77r_6
|;aQ6&RRcQt 8Ϭ$uIS"tOSa]A͑]{FF~:xTJ '%ZE \j[MC_y̹(Y fN2寣_J^
愖].1CwrOuT3ng@ASRVЀSh :a VIXī[fI0Q_Mvh2 .I0A YZQH(5=ޔ6-˾p /Kc)"[r2X}En|
`Q%hO2{DגiKVˤ!xט?$yOl
,uK=DS43mFӣK:g1| Z0~Ѩ1o)Xݷqn' n*MVڮb`f eJReUnT>msyF;l"l(pnKܗ~:f^>`X͂k~@?DVrzhɡj.abBe?~Ӣ {$wb,+:y`l±j嗭 /G f;BI f Yrf?!ո%Hc.
x
ִϒ3/vN^Qmߏ,"^DLAu/rݽ/Q[|átFHRƅ\~]B}txk , "u[`J_k71[k qtVW<~@ =XL0YmwV{U9YU 5;ƍ;lԌJ:
7\!Ulm [6%T 'n$gY5m7̓ ^=dk%$e(1~qi5? n\ZXU鎦酼aț q@yc)tPz|[h˄
0 -UQ*9
pu( W9x 2^bۀ(LvecQxLRk%JS"=iiOkG*A[ZE#l ?Ră|H2E|P9g}Rp z8}K rV+xQX&ĺzh Б:ɫ! `@_
5&#T$^.om%sC9Dɫ9%`ۣdRY@.t@ٮRie]:}EhY dTN٣ :P盖>f}tTRP.i$=,_$fHԧܩs*]b9}"{K1:T}}z&cGBeDr֟L nx7v_g;tQ ̦Ywj֪a/69{~-hꭑx ڗZn qd
Eccj̹u+ÏL=DĮSc6vs`²=l
* p6N
1^w@Vrԩn@(p#1ta
Avq;\k @2w /f ZB;+y&LwY
SPⵕQ#
, - <טV^SS=ջp A0 C՛:;175yH, ?5>,k!* Dΰ 9}L}M"d~B ˋc$ekxW2/f1syVU9I^) ۴~..WAvc,
R%ܠx' S+
ObWTCA!_Џ!
=1b-Aْ8TG# `i nߕ&Ųm^>@eovXZo$.nX ;0t8^Bz8 {2u2sC ] &
z쿞 =L" ?C_9X9`f8@"5-Iqp4DN03Aqm_Grj NV ) dS v
Bd?1Quj؟%jxvԬE[8%NR\fٝ.˥Tך $)(_ w{ZMXt0_ܔ8t!P J: O c ❭ tw, P4x8ԗJyG7Lװ@%;M R8V 0LtN@R$ay63mȮyKG ?nu&eRj>feVIim Eļ_6l<5I< fls NG8-
q5Ρ Iԓ-R ~i˂tssĢ%@:ycRmzcn_
|>fc܈K)U;>+>,Ӻl
p Xлp뇯Y(
_ 24úqMjvZMR}02* 4 YmӴmz 5ҬٱA&fIꅓii֔F*BjsGD2ry,rQQS|כ3L˳U@by7m 6+6p8> a&5S4~Sk
dӮ,s- ѨUni_ЌSI>a9_D_f~ @@1> d s;g`U ɵdp(-̕@HfǡBwehc3vBJrfG.
7ei $Uo3_U °mzjڼK)Sg<$O>ErN 7= ;x˼Nyfa«OYEM=ᲲptdTf5ſwhXz+ٖ
5+ %^
p ')Hb^8oaQZE {YQF >M}(* ~'&d1^ 1 l~K'NT^ T3syxR 3umdb7JRXǂA$ Vr ~pL779bQ;) !kj4 e2s^r
ƪ NTfV(h+_-e>.5bQ7s5լ
bCp³ρ; tnf]#Cp/l&ރar>,{MxxwN|KcKt-.}nMS=S;-JyJIxOWd`iU=5!xR8"R9[YkƙE7F>og%34ka bGh.># |`1t 3<?]ٶQ:v-ϕ6%'hGz@}]DCVf}pܴL/nv% s'^qxctL!V_ PMـMf.sd
!pg a[an?~fk2f^6nHWMFI/e`⥫+ޙmR]w%# >y. z0LG7$u{1lNlf j4?tXF@FŮt H.*ي9xHR}8hY)݅ eToE@ P97u:(I Ξz =q
g1|0;uW \K\)TMJ?q1) khRb"' @*жAep wSVdr&4ZJ+"|
AD=<.'QG'~
x8ۿdgfՙb czqpBʻ #j'栬%hU'4g9* ˜ _aIo?yho̦Y/+J0v㜖)\GQ1"'orq)g{?hCY J3L@x0 'bR{.-ad6S&|}G/mWq]'<rVVfVኲݦ%93$.O99+Q3
/=} ӿbzj Ѽ%@PV䓉my~g&4L+-*[fx.#;W5@l6U}Kn
ˢq7*UUGmue+%D*67,.pz+ $y. w#ba _#o(P>6Zsj*G|vF*8^p]5uZ+3䋔ٍٚOt!F2I1>%iB5<
ItBNtZXi XLߧaO'/sT xeQWUc2Z)iM! ?TI
`gbiqA;ͽN6; {+& oE^6zC\BgA.t`19 WqJJ0z)Vz(,!^kU:> I&7
CU^_h(ϬO
y/4\s鲛? l$8{3e8^ 9N{}L 46WFftfv =QӀn-'<J ǃQ0eRfijO'ڠag~i05Ք+/}_T.xf_(QJ[ڗܯ9{)T"Dwv1Ԍz/Ђc4q&c$f!x
v\E;(/Mr` `CV'-z` .E(4=֞E\ 7Vҁe^(n(gU%3gx;N*t/_b"kbzkZ>D^vm`e"2G7وDDzYe.cM;.jN珯"(c_]%vl#8@ZD0BO~oCȟ .V17|*Y91a5ï{9Qxz1vb u:Ğ&kTo'`cht?)j,X@uk?ߐRxܴt1P&m[}%Tt 5lwG|oh 0p,A8(."? $>/t7FbKbMIAiEFT<ʾʅ.57צ˭5＠ inK` -as9t 7۰md"'~|n0'ȚC(Jge` CU9 :F"6@\Z!`c+E#d]ge[ڄ)q {w!9}j7 )J$\ەX 5kKr=_dg
3`x{qكaN;ia@<0uc a>KZ/2ܘ/k~Xd"Y~݁ 8g_,buUS,4)
I)K^mHw) {TCaA3)l/0_5c4Zp76vP{)WwHUm$Mb?.E` ю9(fA5}8U^F5a$M?uHc_ uYl뭪 e-h WK y4AAhE%9/Q
Z ̨`"F2
= Kh"~7Bv=l MMDcPr&Ć;1oVS. ց/X_ &;f;ћmS$ϸO(UH俍ʉ "xy_"d9NMqoPiMHk\'ѮN]è!9lvH5"r_$QE 7honq80f ]:1!nxqA 5yn dxs 3'HZ7}=&EJR!- NAUzFTyϙ$,/t7Q,"dC8\BxH4;5{%CKX=cO;Otx vͨ̂bZY9 > m92mD@YKzW 7ʒפƹ RE
_ʪK#/4
t=N tdIP&}9aZJ)Kf-Hk싧
!CXoDy(a~ S:ZKQ̃
9 :jtg;/e/M;K(%X 5'2Z^ c/A|?|Hq(~_2ŷr(_< -+K\QAF'
NzW8ԕm/P]ycAO,04'_LBNv?zKʂ|{d-* h͐})ʅL{c8#vK
_wS}R8luZL
f+rr ;؍쒢'`:Oޏ L/𫬓-P'%8zBiyx,u-k|f^'U{1{`Ӧ'Vƿ\$i\[ vñ+gPX+%yS bmN9rә-#Tcɪ^#e.4\@w04Rⅳ(d U:Y=X A=DPc{w)dUuE<{s@-m\MLPkB;i?קRHF-Y`1\dFhbCU^,Hmd>IsAOC ,uu+d&
e#BU< F鷊|$_-|˛*˩toй#%Hǯ[px`=6.\ $//5=2 Ӵ8,ޡ JHqsn"SjWA^KK|moP A*̾ ybHģ z Ö! ` Wn"Qu2'`Pd$-j-u*}[+XIe˰k
VnHS(J'*T]N4 e }j ! LZ:L7= RG93qzU!
%{Sǡ~wX,5?A3Zw¹#]2FwQ!tnF*
=)Sg5w=K[U:i:DnO[=~ b6"hX~>H\fgQW)vE9}LL Ĕ&:n¯6O8c,w+ߣ~AKTI*ʷ5XE_^ߊ$QЇ? v 5fLWoKZP"}" XWbϟEp%$#/\ vDГV#PՖ x6`ް
͒y Sy`%͡s^DFf!
C|͘9]jtf _dvצ0fW*㒜o8IB瓄(KTt<*8w_ =*po\Ρ22.ZM{8.Ә=tV|l|`nmAGw,"QoQ*Z uQڕ,[!e0&O1bGtt/GT&za<7eTl ig.7EIl%wOiߵWbɯ=]kb 8u(e.tWi EB)UIk꽈ϨԮ_hL\ ڏRLKG`DΘy]> 5kf)R*J=O3q8>xﵫ,TzP T<;@
TuK~S؎iƾ4^`lW' LbC
h}RJv7SɕKVm&aݿeӴCȌ:_7#3+#GXltEN@@u-j'Yd1T* Ow'
7
eePFR]`4IEi
r/0CPZ:#KO:"vr ي@<;F1C<]V!/v:ŲPh#"c2 QL:DP>y iuf:FZ色q\J-͓O.U.?(ؓ5
,
6> 'ۻ3o̥Z@61`vlxNoÁ6
2Z&HJEZBdEuHM "aδmqMA)q16V&?OM;|O-T.Pa#ka%> zʔ |`S7
ʲ
И*o+24XSAagL|V]DF%\ X jI/V
ٜ n8u&s~Xɸo!9-83 h"3ehkO݈9A94d-]XVc/. :M{1J
h 6qc 5
bE6'w-x֒KMP8 ,w7+|uƎM]灪!
Ȕؖ ޔi3
#ARZ[3ͣ6Um0ly3{Ͼ yE
- zCBmbBdȈGrPMFpۖʱ;fs͜g_j?OHBD)] ~~%>T½GԎCy2Jv%"v=_D)Sp Y~;g &]
.d~f^*;
N\
6~a` v[鲧
_=2ZfϪ3vom D " ugxܐ%]YI"!-
![gn+~Nx5
xWZ|5||? g $}H;4zP P±$q1NǨ XݱB`*PL} <B a9)1lb []f%k5T'n0cQZ%ow+)h`@
}59?yE6S`tׂO 92CϢǓrG0R@y] [ U#*4&pASN$)AS JFt <-Rᰀh2$m1vT}7ƾLM%][-)h
zWrF
v7M^ImJo<\)RyC5gح)ga6P1'ߞN([!b4L۰r]lwrk[,tKJh*Ete_ʋ~3u_;v!*q S,}gF7\yoey 3 Sg( 8(#C!'J~(ԹdZt!Ϯ˃v$c1H k \ h>J?U:c84
8g⡛p )^(Ee b JlvOM;Xw}l|2ew4H|bϚ.HKW$ {?UO)rvuY2/
hNKઃ}{ l
ߖJr5v%eMqh:rJ%bEx5 fwKfw L}\hucͱk EIfJ|gc|ʫsUlDTt:¹3#
fVm>&,IOLh
b(ԩ
p Q -@e0q%rJO'&J=oJD`Fr`vfF CHu ,^M MHUah:Beg]a1<9d!A=Wώ`>6zW\Dį+?Rf6q'u!G9 aaKO| 6% WQjHfaTkٜWے 'li S+ǧ\7PЉXz5_idJ/=P
I Ӫks8!G4߆AG3{-%!҆gp? <[=dMwX*簞bDϨev:5iOHbE~H/aIl| t~ƭTg=4gl?OǴ8Q,#S LsPg품 R o ;4-0$iW?DWI oj5S:_ɒ/A \"6v QDCqaelqjM9?CW-QX@T@~S.qB5 gH$ } Pe .zXp#ֻߝJHP<Ip3 _oehDù>VrH
s ge
8it|mR_w|[5x RVE.kt|#2/3n'q&:ou9 [U+yP5&q׃@^6]Evޘ VgXP !]q痉D>P~cMyӻŭlrT M[xc+3#rdq[l\Fƕ=T )nѾcVEbU)mi8Eq8WCQrH,B)" cOu9Qi
j0\|RF֝As3dC7PY;~MlM!y gy38sj\fUl ѡikdž Mfk7,pXܦ
ŘeUZ״^PԜ$0 &xNW ^}\)LXS؋f]"| h6='4S~Ɯ)u߿"Ux#{L2BP `d4 ! F`;bAsVܶ7P*Zy{.6KkZ! h&D:/P
R x>"d-SL)-nJp*r#4hI .Mf- zgd "fp:γt%Ip[?OKe_2o.wm͔*0:6uvڧ>'Á0WdU aM)?969d"u_RJѫ uLW0φh(PVvqR2F}ldO OBPBq&b3bARW[U~ Gx@zI !Ydz^
cڙQL<`p^deXޚ|)~;u''l^ @~D*I,Aϧቧ"ɘk'B@{] i %
>kfٕc$X1aiuiB{ :+
+0lMt' *5 x&2i1lC0v/+( &hq^E^N}r9#g?e+G#p=q
`RyHed"{:*/v(:)-+/ȿ琏EVMRH7xڪpKf'5A 8^۽-m,JBT4ŢG,.m.AWf6J9KRoUu5=l$FC}.F"V!DݟkswOpM3*
(aHct ،E2T Cb*V8-f 'm09};y40}.cPDG3gn!CʜNks./ʜYy*moF
b\|]/"3nDB
CE(ydt6va_)@$Eد!sP-`w4 Rk+*G(lC@-JRGdd
ޑgꑚ6Y, X E G(xo
5ʢRʇ'zJ`BCʫ W@Ȍ<$ -v=?Jt|"L0H#WLߒD?cZ V6 ~#dWuQ)4#QJ%Ebo6&ix&6˔WfE] {Rnbo&h_\cN ) }aݜsZj]DqA}5vpMlWGGD@
Ն8T咻xH&/ՖMxĿ|mVĤ].>|</lgF9O"bW4Qzt;j'ۍ/bc`-q-Aڲ)
,xIɤM
r..ؗ~Tl[O֮n比A{L Ϝ Ƿۣ{){`|}ÐU'Tyd.9gX$s a4_Q Oo"AI!hey K;~VjiqnoqZ'ś
[B0]YCn~ kc2㉜(I[P_wd!+i`$
6^Qf<|,%6~ь}>@D$uBa 1Y0Zƻ}!'|w[$fs#=C2A!I ˊ_x>N^4Fl\J[tK# r}7]eN
xO |M9z]|LWtϨ$M6bǜ=j8kN˅7cN#l(:ay.Y|2;&kTXu4ijK"_Wͮ L̢8^Mz. kY(@}9cEd]8d,__(@Wph`` 6krt
=1ES"9
>sW
x;0jew>`Q }Y YM\pg~Dh#p;A'$U)@BIcdq~Ez3%sp1g;iVW) Vu'õ [ }Lօ~3lU+'ľ^t6 "`+5~N
RvVm P=e3LSC_{ M =%=,F1эm:7#'(|{ b$@?PDe 0t7 g8k &_=S@'4[ s7o%bڇPHӺ #q3Cd@>P1尾7 wi,:dcL<G.KnDG5^ŨY>QqrLu^lv/X{O~ru`aEqdjiyc/ B '
Syj*! 2plq< b+:_+PjOKR?ʔ@>.{/i9%c 3O0!nL;N.(,i 7DS11Jm=*>:OExslWG%m
XtuI`~!r%O%vIe}m+?,95z0L37 (:\ oȨٚ EN(ugrD
$g:SMofc}Bozw [nR'VN`$Le* u@f_mN=eҨeQaXy 0+f!iޓ(ƿ@9LXvm'WjS1e)<֏ a/9 "a q~!NƢd[l3i$6Rhuߔ בJy)>"u[&I/ }?3/ ҫ0^>4a˕1ciqjE]4]HĽEnG2j3ӇDQnLNv+2M=(p<D6]@C28~[@mfk3ѭp韴
MZ GS 1dbeI[4錀 364W̖X%:_X\Jޝ'Yޣ "+Q2ņØ" TCLk!`Kv6c=-$4M.sN+&@[LRO {t{o6[o)j
PPi(JnW̰&טrwmDRR1.8q+A炖;662l`=0/zM\r8`CE:%/ DhU?
b*
ŔG0RG\q,_>@\߽26@u#U=knW'LH,>*Ɗ9A@18xY{c&SvCH8.afakzW.֞?G/c pէG $[P(o+1sSmxB@άz8<YT0
CG1 rF|
|S(SՔԺ bB}l]$"z4f uVCp PE 59xF<-=~MHlxQy
y`M*w<#Ns|e,C|Auo0[r'XGyJI e©nYviR0#3`,$f7-G .,5 EKgq߅YXi]ϦiM$糆c. }RQB/ ݅24F 2ƴ6V# ħDxcW9@kq(!aNO
1>ֲA(Y!ɥ[R
FZVrq*_nͽwM8`k7 6*qt -{2ڧ:l^_mgwiNHQxp)ㆰN TsfɄ.U]QbE6沖hr[ٯ4CodM'XbXu|Y3 u&c hHwkFy _-^ )GPх,#`_$b_ b>z$:nggBowVfI`iB/]]5s.l t <&)9|~uGEfa({"kעC2P-K4Kv"}
_JŐS&3WZI#Wu@Kq.@#ҜO2.Zk ȼ/jmJnv6dJF
ۋFue|w*su\i/UT~梿(WК! p/y>Ӆ_'1p&ђg1ǯJ NT 9hI'$$\_17ra 0'r8^{k_D7K
T5쟢!N^22D @1&`ynNRwouIZ>ǾZi QFZ[Nө%|PƣkUH]/9yѺ:>] gr 볚QˆN:̍x@M+ڬz[uS (
ӒbvHwX赋1TN 5%}CUSwٝv0Nƞof'%O,C:!%Ř#݊җn}@\G,<*#b zl ś,aEEMM%DI vl>&z(hSZ`l YfQ)6 0.q]?)l.oi{&ӑ-Cs=|R?
lj f9p1. ɥ̅\#VSeEE6"..A&B,C&,hb/6[
"oBؽSyˉ*QB\sȋ Yfv;A5jkvf9zo Mn0P3d?i;K=d
VjTAݒ(5'[E;5L^攱;E#EmqD(¹ -ha/GsvRt[XW?-Ckh0fq[\7>Dt.UI̘
D WNsj{M˳Uw/=j>}Ú`l::1'4 AjGhȿ.6bt' Oڶ+alHYՖuaȚ>i2OP .a?̊VL xug bg{
:҈TUt([۵0d *Հ5r!Y;\nXHϰĹ]=yC_R < q
. i7n Ӑg ?N4NC8"v2њ #:!P4Q~T&sF+5V~1%C 2 ޯ~n>~PERi逸:* nU!˥~OM=R<[9>S+EPfc %~G$U("f8Nе
N;g8(X^%F(5o쓥X!DV9cҡ"3fi5$!k
TT.sun`B)![V"ڞ@P "
X2YRpAo< F9C_IUB000{^/:'k bJH=yĜ^}(`z H㯃0AMa~0+^ 4k =! @Į r!t_$B6cvip=u6Ͷ %JSI =v 4rs3ԐR*F`[?Vޖ-
N)g{~9hoQ r ;FdwA]υb_~* 8MTKNA Á pX6`znQHŅ(l
|n瀼ZN'$&/\P~()%J382 (j1*G#9SqjgbL D VM!
V)w
y 갓?
讠l#H2{ 0-T`!?ɶCaƑk (51rVihhp>;}]#AK}M
5tdy<$ gj,aTjET,.l !Ool ]o頝صKX֩g+ +G.9!~U@w9u5d#1 J!tg t)ü^o\O}VdRx}ӥT}lH8ء}&cUb06+ۉ
.q5& " ҥJMDCvZTԊ$[ f[N5v!'X 2y
feK ${
A-ԴOQ[wk6 ҁSRm>e'LgAi sfUFJ˂m(:%qQ@Hpצ'ֳv;K
>znjd'cK Z8dafLf)I fs_?auv""o R4)dm`jSfb.Sp^FuN[QOOrCw kalQ d?~.#IԜ Mj}{\Fxɳ
jHȗ#OXjfɑ98S.~LXHN̲haP!4d3 4&']gU*q
{g4+Ϸ\cb-:cmtFt/G8u:i!BQ.K
)ʹ㈝DMx'""לBS9l.JeR.Gq0SWشY[DTj?Aꛦ;X֓o Ή$fm]M2Hſ_+ßWI"ë1lEq7Ԗ*K|4Lt3X؈EϮpnp)i v1&S)wSIG $vkbF`8Wk柹mI@QLÄ*@c\)<;\DA⼃yj] u_ʹ#y5-
Ul}LuO!qHdK:J[uIh!WLL|
lqU ( e74Ú0-u`SVI^V 1LdwI&*Nz} .(2p0 i[2hzswQ 0 KY 9\p^#z`}߇ $BZ6mEuamId F:oE
(JlN\VK߇x[=. n:X5J[x'OG3Dֶ-BTF45&׳Jp5 ܑRl1\ X5R%\^РMkf=͒L~)h 9#e =cF5~D~w%b |Flz?s-o[
`{LrAz7l&D93 knh>cl!̚uMaS _* xT0mU5p#je_=*Ύ>M0H[,ppO"~Dv/wΩl6u!:|W
NfBbv,G0
dc)nhEAh]SuaKV2߈b%p5Xoü"D iaQ :*$h kAK5EJd9,Չ >D! \ yӎ5GĀ10HnW ^S%cP eߨ
B O* DhDKCeFmЉ ޭ@;>X<\5yZ`d<4>YRv- xT/>n3GпmcM>];ՁGx %ڜd r0L` < taS FUi"tsKr< t ]* rkeR0u cIˡ-NcdF쩓Rh\ ~, v}s$ _vTtsz9 MD'YdNO7IQ?w =譧Co
f}>oRFZv~ ɵNMdiKXW pcnҙD<|X=vG*[>xo!.3cCئ@\Y}L/+7
,Fig ՝ %d z3ɗiG S,.j}U*O |Ep#76[ HQL ƣ
q+>C=|ζ-a1tZDG~<#Ç(9 -& 0J}/M&Vv\9 얫&i(]}kh陁`
Ȟrg_,L=t(IwgF,v䭓.xAJV6ʑVlI}-; 6QqzV.U`>kb-TTO5 pey _pu ^ZjC~%UJũ:?ڛt zǡ3jƇt A$ ~iL"⋭!p 6.}AGba^F''YcؔpVf 4d^.܉
2miA\\Zto61؋Ld٬9LUBuVoԨ;LBUBv8a.eC
ȫѣ HsQjE?Pr> 5vUK$E0w:Qx@S
<3q%sӧM/$ y0^ꔕrP'p_ߥvěqu GV Cjp><,L8i;{cs,
d g#%ͅwȲd!SE"#Zy@Gd >[ 4%WJ,
D 8[e Í [aFkR10b7C4'GBӜziqqvOS:09pш7GXa~9H=1j0~sSZc%Ƿ|nF &yO_ chUJZ)u5F9p
io
i]Ir1`]X'}?%[d7 <,H&s$Xu|}z| !U\Y{߫X0!0uRlZl隔q$ |,'jir⡦_QC (5/9f A z
x{ Bc \ R17@s7"~UtSyz.^3g`}L@p
h? 6sȀk=0M [:miآqF1WUȒ+ L'
Hx_ԘumcZ6ePnZ'尭QS1M y1~\T*k SVIԮ
ή7ནF~[
! AP1mOuhY11w~ƎW p$F bw'Asۗ fc KhLZX!AX.Bw>sk. #fbx|iFxB.<^
RΛß
^p/
:vK5-{Vt~1٢MO34jb)7 2b)>S_S*0H.
uOz4?D)k
l lg*fnZsUls*N $ xBI%tPS|CwdsyKy8馢-|#L+nERU\_e'w@AH72L.>p670]x;S.5NP #b/ 9ҫc_?`
>7I-eVFѳ+BDTi]ܮa*"`%WQ_бBRyE=aHɪD3/h/б7H?kg}B
lt?8DS- P(jlbgq>Uqm4ε7fOe K˄qub[nhek i!: ;LP@۔rM8.$N
P$3r/8;Q az|{ƭg ]a6ķ
k7Wh47_B1W?<$w~Ry
E7MYmHJ:@.t؍~}V4Yx73kLD
ʐe6y)WhSߨHL[hDh4#C^>iXѕC J؆5%-G` ;TM
,rjo` -XB ,}!]Es,g3kƭ' {-E& h=Sm{W5o
.~W܀q剠Z!<Yp=
mPMpp<тCߌÑ~Fc /7*[' d|c^a. M/I<(Fhެ7;clh#Ψq H;Ikqo@+`09^KpNlmh
ZXG` n-Gź`6u "]eoctH9<w2,)A E}67F, n'ܦ\GEqyۇ-B. `?; =u-F/ɹm*&HW0!`$&zZ)\` ~=@9SNqj L%名^;~$t pB]1=4Ԗ! /k?Q"8 eHh{ZwO "ݮyiADE!z(6 V8Pݾ6dN ϙ|HB S.6kQt l&-wD0g{>ri؎+͜K cA֔eh3A Ѻ 1_gꦵƑqm%5=RW ABi;c,?U{IŗR[踐 w0H(:WcJ\?؉R 0#6%S{4H^+38tYT*{憴9l^r U*뚆9 |
LsV4:维P*D,ڋ;34X߷ ;;J瓆+F>gnUzha"qw:q]4,:qX?>d?8nu4jEQvJȸ?0L{X gh7:c'?I\ QnSKYx3-.r_o|F_Fnem
\5M-tJȕ Xc\̾r'ޟm59>&!u10[hj3BzP^ڰFr P8t@ѽO}hv_{
Bz5͕+fUfn+v2ע{%67瓔qpA"8py eb=qN!#+$j :st?VUcn~
#cu1nH(Ciz(V7'u\Rp +<:<%+vyL3}IW$B{ r ś)M!]mw0\8 А&6-
+ 9fPm$Zs6."P!D]u
X"F; )CQcR5IKt{)%^Opq^ %+R.:Ⅾ)aTQ.ƕ?ʱ6f` Do+(h5C#2
'OJQ
x{qNOuNlωiJ*TF 8KC%rx]U25Ԅdgkjsq
NaϺ.h
Y&$c#.I EU`tyWW=lvN.hV,rL *_{3kcc)V$AK_u5JZ+ \ 4̷`YG%-==N#H>X` P;X]QTg{JKf FEO$ s7c.aQ ^)L)fT:vc{bț ^{&5WKy.$,q -F!J?g
(r"_}~đ=(EjsCE?
{CE\Ѽx7y:1Wa
DP0YU 4!eE:4t;'ΧUϋ&>40iC6!vXw,>nmPE+DOsөṈvgDRݯU>Ym
s1 *˸c>hg.סz`|f.|"[.f)?/1K)ybOZ%; "7ƙԢP_/EX0 rsNͱk_E<]N&cO$K*&Ht!d. ,)j>Ǒ>Ϙ`uPˤFSY5ȥ͙A%Q`}
8QfTJ/8lzbEu:8v O&sO˕,7H u*%P:22meׄ`[=
{G6
9DGGAdbqq Sanhmo0VGjc;sHA6P lr .kB薠 Y8Ep_'$4sx0ꏵRĴ-
+ 9i+8r] Xg~{ tQ"cr.Q8pzǝUZkvh" S&Di~ŦРuF1xC;?Cl]Bu:#Bs`.zSƍL(Y&h uXgT_ w뤼 NK wS Yas)
r9m%ύ X#4bp ,VKb7-@PԋೋP>r2⌦c$0FZ !Z ܊*Xś).-hԘOT?^'BIlԢ ѣ`Q-@FBWi"y PK.V:)«8 &#n/8q-6I-ʿcOa\DNҵ5I[ae v#}-sGkPGTNj+웧X iHI ./=DJb&L`u猧Ǿٓm`֮NR>|l`ƶ[S&%zJƩ*ET PIt([|ۦ0Βɡo#hukD뷣rMAXSm,!I P0VјQ6}48?,.`k ՐmGݲt_8X|ʿ23 _?ʅ}KP4mR?GU[~ JݗSNjzag],,_O)Zfb y_3xOqy;@fM$ 6Z-,&<sY=I'W ADq X~OJ=QkB=j^n,ls2ÎV&9v5/ g,3Õ9L9ƝZf7M8.y|{L!4 Ř3%?ӿ $jMakOz[*bb= ҽZRW8:gvMp RI7>>u )sKNt^DdCo.%= # P*ϳ= OdR{N8F
hg$si9K~\#.3 p?ɞ@ @^6w] |F ggbf=ܱJZjchk[,][ N\;ˈ͇)HuBo/B.B< 7'Ot"?[| \C8[1"Ĵ1=
.ur*l6!m" <0B!#yn`o8*W@]dk-"PԊQ^ѴrB 6ۡRקlfD] ]ߴhVm`L5e|δ UW]2|br&hEl83`G=!̘eV8OrL҃w$}c?|ZΚ)(88Jg)o$[@J1
%PC(ӓ sMnATǫB
>f=?rh <8A@0rtypF
"wֺx?M
ʡx x.5pG OF]jkqO&sύBe=F envGơإ](
N
MKjY}?,d
īX]H \'m4
HKi΄L$`^,x&ɳʧE
fHe\OugJl.&UC*XHwtP! ߫C$|q[s
G- Ob%
kzQSaJz&[g
্j"i jN `1>٘3UpxX/0ff %y Uś(0^"G^qv~7;U;HܖP'c3"#C"aRB
?c^j+̀XҨϱY&Ro[f 8l/5˞脂6b84
O~4[+aRֱ _Wα3X ?bp OaCE ?Xk¶ =Sj癸H CntzVyǽ#dܟ諿)3q-34w
k)jJw(Rmf7Z3O'Gq҈Zz2ī705L$94We9l ~P>$?Ci*]l=dIb|7?s䄎[XƐŭ bD]5NA2@\B}SÊW罀{/vVN@xrP
Wg? >5SXDiB!(%W@ň~BrȱG] {T3`o(/?yB^hm-O0 i;wݠ&"gfjr{VQ eVXن74˰Q^1b% "P7 %|I (Hk闱=#+E 3b0#"'~CK'Ooe<6̲!S3՝^ oqY~f:RxtCk(C ҘIܿ76fv>pŏ
]HdqMaq)EJhRBbHj !ѱ2/ ںc{sBA{p`_J>4(;]`U,TJ'<_qqMofOԹIV=V pO^ͪ !kԢky"= ,YK c)-,54 Qo{3d7Ea0UD c]w}q
s)ԉp'Cι6k5BL]9rKK }
77w!؛j
Qvk&pW HvUioRdg)TLF1W .!46>;Tf[J
)'`L nR=dz}xVW1
͟3Tnw[BP /Əyph@r̛;aU(~ؕ S hiƖJp4=Nm
Gc2M pis~
6Ol4 >~ ,
t\+tW)ÒE.tjGL|ڱjK
{BR
SGC OKFx ګUV]ا[d.B8ѩ< |a5Asvߣ\``"*!v jTt [c;IBZh1=0G4iw$jyOς6됐\)l%ver;,!,X
Ό\1 km+x7#9xͳ۰S՛{=7^Ui#~Ἶۿ"]SgpdƘ ="#F@R.,ΦhbxhX5jdZH4E{ tSMlAzYBe _4݃:ZqmSJDmb˓!?xܹ~WJB6,ք=gr" H $V6.h/bLT/Mz+ :/bSFSzm21Tnqc#d Yf ݱflLZd.y_-!\[ZuK馜 ǘPџ'8pPL$gg#(gHWwgwkdUhk;]
⟛m4/.htf d><ݫ([&ŖיOeR ˠ*uG! OP"^u>PTI;j h;˴G}Q,QQDeߏ ig6:4N}
b}ivJHnؖkxO~TP< ?|d o?6B gְύ '563\_.qǔК~TPwc2[L$×** K\*o([cGbq7+
X?Doe. &F؞2#35rD0cno#]]YrMD4'9Fbs{ _UnHQYsXm dۘgSC9RDЧg; hHyEDlک&O|!H;r7k_p8!Cc e\rh?`]R L'y:dIHv& ~T ޖ~8:$qoD_zx@boE%(ګ*p6a _9Td>:2jtlkSz=翝4642"R^69.b8eFirPK:Rӊc:َyZ,t ~xrc6wҴqlĄ$ kΎ;;q4^glU\3lue ~?S0^wñӞb} p Apvpu-%l[>C?C~`ڦ)Ke7':2rR[˗ 44w a&C֬~zW,#pE:eSqp*+u#!Ji f.8b$Dk%Sy[:]q9>O K(mBpx-d||5~
|jT.
ҨG݊|#{zpW JSau8QdQ3ǫdN`̉ zUGhҸxi. 5yЫ|ZƋm5=j%
[ ]N $Ɋ-,@X#X.v5vy#je(*{$s0Rw=an'^%
,]MI ִ'i HW>#!In0ё vbhw#)WE Q &w f}RgcS"h_Y3P
M`2jV_S?aḥ+^h
[7+U낓;2< 8̀ ӹu꾋$2Tfuf ʂa
"d74ƌ]Lk<ǁz F|]ePxE /JlRxJdoK `M΅sa۰[ 0J :C\@X
*#6#n ]쑏y[5o vp+_fy<MI%6t߆. V& G(Fom@ uߋ]P %Pބ!_h6 ;0t8F1Oe]c_ ItV&1mrgl43_m,[P%kaƨ'6AXӬ!Bgm~k #B Шk -~JD/^|nv:h$rqBhSf2+4)\(
1 m+BAڐ
lfkW@33j5 X*:o"ΥFQ pֶZ;;] GQ CBȡYėDalϛ s1@v;
< e6mX̞p|`kݼNEi졧mkfX()kNNdgpaǁF9 |&:<=⦼Ek>z(٠{-r4ϧS, |[U)0L0 [#4YQᘃmd)l?INe=#e ȡ
NKzѝ |>yzt{m?% 'B
Hd3m4'㉙ S ͫf]uC>|]p_O]ϙ[|xԲ#w֘vjsKI 1G钧Z>:Յ7uT
nvR_(^(dw}O#y*5. v{9G.
5즪h0T9\ ,mMB8ffD~ %_6{ ijY*LP|-jbQXjWjR
4ĐV e^Iw5%ڎAPffY qLIʩ'AuaVO ѤJO#NYK-!5{ sX >c :ԏ]R :-~53O0)*}o`N+ B/
P/f{2~m+:c_6} v
Dž=ki/
u,o \"KLV n+ i ²[[W_ dRGg{OE&
ꡮ3f;3"2D*S~ΩGҌR])a1>{~`]رF> G@})B/J1]o2^hr9k[ >:;EWJ
WK wĕ^i7 GWM_hk"{; dx3V]!EaS JWKZL]ןn ܴ|V3lpJZA`5ocfs mi
9HT.TTUL@{ g1dVH<=Rtp{zL"aJ.L8`VYq7HiqM,E WDKlި < Hc(G4&1w{j
k;f
CUJ`
gk~I6tm5nL+Nj|m- H li+w诚 Lzҽ{/}.eG
) Pz.k!It&Cx.M,2jFP*Tz}C=*8L7
sl3 4gKȟ_2%M
7Ronp~c"tuc:{g5}AT65ū/ B,@'Ӈ΅VB-hg䱩+xyk 2<aHa.o/)z_@',9|=P{-^ ^x9
&EЕ !(ȯ\EQn~Z=3xL(J9m˚5 ?{14&F9N7>90VD1W # -] mN0lZ!Sߢ*5߭{hz_fhfe%Lu{I ͜5^
kؖ4.zL<͙@pO)E uږ;s t RcaM,6>DsK sSQ{R*
Q/ A1 .K%?o kLԫ\\%
_7gy. c?|:̻^u\]9-%Z9IF~l{,;]Xi mM 9Vwq V9]EE0 tG՜,_w-LN[M$ą"OpTT]8):A\ϣ
mfu~cVO v$%|=/Bn:Wp@q3Spz
H:)@R6ŏ1{H" J,ŕYqa/M{E,y sG'3\T8:Åd]0:m0a1QvR^.H X 倢{\igK⃙Jg*x"aMjƢ;>т+LZz A0 wvIs /:]ƛrpF&5(Wt3ichu "|YLE94#T4L*LM#Yu(N -8ΎIa]$ 4j0 TEf-:^"^FsX~F ]elWލ31qF|HS\zK!SOfWQwP04z 92@BfX5';(/Ml9wJd(ĶTJ0$'\b"2Ii..vti9(/k(Ɍp Lyvjf"eK1Tm!@[gvN2_ceoڡ2X|hTR#0XVjjC)Bl*ল-vfJ3ẊZ*9G 7 s3.C딟hĞ%A~e xf}nOB{Lz
.~!|mi#OvČ .+\=$%o@h> 7LjV^uu Kf ¾ F"@=EdLNڋN<0xj*0Ռ/ZWZ}UsXSʰOEu[ JʚKϿ/WG'Q! ~(II{67_DBHN|Og) 9YLq,]I`JSUE8E0p]X89N $_i|_XÀ3Y^0zeZՁŊB| iimFQO31WTy?+BT3g[P6|\ڳC -8/.x aS 19GsF0
PA%qG֞)6wOhXFܩ0qnS8Ig㲄h(s
W5y
W@4 N4?/P %h XuC
MA";
`"'Io3[oyAr|L&N8FM4z ǏHAɔ,vNC)ޟ-!3Y
c+ZmX:/,
Aga)"e ]\wyMtc` _V/xz Ƈ@oԨy|dO4L|ac9 ueȌ|My D1^N˻W~Uz*t+i*N#9
RK RQJ k:!,k@P⍳~2@#t7=u$m7ʪ,cXWՋEҠwuN0;ئjbN8 lAm§JX,@
ХcJaYW.3'MvOH`vQr I9
Aa 28Nя/o}\DO~3?ljCxo
8 \ˑ\
nZ:5{Y
3^.l }ȹO:) S9{ LEcdG331V,,lƍ{@TvVa@X?> 2]IG[ ѻY\4Np tC,|TcP' ۜ10\3(Z *]:Tx20K'B4 ۴j"L&Hs`/D?- +VW0=~|HK3ĉ7~X*BD 5g7Ō&"]33[c[.0Ǡ7)ERwhEt4O%_0 )$-dZc$⃑9Y$@XQ@ kXTV.W 3 ؑeyk-7T뼄& yQ!F25҄X<
?w֢͌{|nMg hy rmTRic'lVF 3 cM2=`$`:F|M< t ߅3rscKb:_^\: ǻX;0\P &CS]j4fϜ=[ek0HMKBPz1ɺĂ-ڱ߱̏ea7ECHIw؆+rqŢ?s6_ؿ0vZg0 (/YiL_%۸,.D<2$GR㽀7ȒX3g9 >k:;e7j#q2#/aiwWZEҺ4PX&vOpcSPXO^`Ns7ueN[dQ(]ܠ~Bm&R(_ ~|q41P|pQ,6VsTu§_?#$|LL3RyzLQ/ ͭ*w4HEp=Wд.~T-B"`D-[3&g^ꥄkxxv&+w^J) 9]y as/ѭYdĂѨ=DysjZ+UA.(mXn4߮9;!5mtKm r!u㜚= i\u-=Iל;-"?F&ן ާb*Lݰ H;oSV 4rIZ Mh=m/_YHgjև&=ov 3;88m 6ؾկH(]uFy#/!jKi!+9 Xݽx@!S x)Aoh%h!IaW̺#<|mLYgP{#k;t[ OFPqԹɌ ͩ}TIf I [y'}L o\f5D$R:?@ -vE0ef0a3|5dňp`V)[elᭇ1U<rPgHYGX$O8Ǭ醣crp[25UCr>MZ QLdV˥ kpśѡ Q5gOk屬 Cca"8,i>-w zf{qşC#\CAy Ι{'EbG #Ċ;X Zt@^qRz8ix943pKyer_\`BE2/;XUPʻoQ,Ck
vRr э"-NEF+6 qa\&aO;*~Wum*L5M2@@en|J
cŪ6,@45[)R[lc2xsrubી& t
,L4dbp??`J tHƞ:Z&Ή!E R rĽ υ)@M%lBUIr ެ
hQ
,t>eDτqI4 şNh}'N*uz\ʼD۳_QW>Gܹf
<NsJg{s]`KwrvC, 9q_<ݑ~DWztT4{[ De@$@uw [oe9rV\>ZEJEE)*`Oԓ'Z5 wSkyܤ[:nXlȃ8錾!䡥e=5<+c&J;.df^mZ<)TY3R #j]ؖt%讗^fʫy~/,$5N@Fv ,H\+&g-ehQpS Cn ]BD
U` `h&KHQzX0*sk-!Iѭpc9iXɚ ՃʹYJ 쁮t#PEqMo?ZyQ<8@p=Iw7Q`\Z!% }bxcޭ ENb ˏ߰s,H *=sт>^byS$[GYWX0n =k;zyî%
k
}c
Ϻ\] Ò5`rJ.d7ILjd N0G¶Dz{E3 fPQL=6A脕߮3 Z_{ *y,qs~"?ζxO;j$W!N9 WAɽ!Vם F=8%@K* >YSo|ЩDfRP)Xw>O&hKb3qlN .5 ' ~'.P>.$KG&6U"dĸ2 1.=qp;vY 23Q/!ےO&FII huwY Vt)0[8zʺiDGwGŗ4 |dv64_ I N) {PhTO0UI GTFƝ(8L ~ѩ_CsJRaJ$
T(pe[A
k"6]H nLUmM#ɿ@J͙GEҧJLrrcu[L"h Ja#uzl:j`g(<-} 4%{S}e*mTW}-.*ob.|Wf4B;ڒ-_Af$݂Xf yh! &=UAEz dO>CH_WL)Q\g˦Vl*kyWٲ3|yे
u7fS̤ţ S
H`_ugdj̊!lF0NKRAE
S+%Be/0"aNAdpбKe\c-.:Ju9ׅ04N fK'GJ]D !*Q zI8bHXݼДᨾ%/ zW]+rvlnI w/ϏR+Cpt:}s
kߩv +dڀP F}6A-j 6W}% tZ@0|p& &
1 v-e몁رa *&g} !$ of1e}(Q(!͍qڒ)n{@9Nb#@fh]@1x
o*bM;B~똌!Ø|1 Ƌ^**u:`MY6AQ@UanYu@^K1E*xX2l%CA@lROGe1s de{I.P2*d܋pn
E^)fԹ>E)z07X]JqKk{Щ4F ͣ%h3lir .B R̦Q4M6$9f4=vC ~qMmngNXi%nW0qj%-:. XR,qo^'O`m`Mc~Tij|NP?rtqz}vUc.(|\
:Y
pv&Ρ~FoHr;b_ByØD;S P
S:\kNDv,~eW p`q25{t&4Z!Fp fDV4N'lT=?Nzcrz(YjA0㗲^#Qri ӕ:cQ `uqa=j8rq(,$ P#\2]v7
4f`@Rs 8JoHt;E2[ >D GwmMHHg'C:]Hj36f ÂNտ|.bv G6CIWrh݄3#wC'z t*k6`
=s5-Ld[9R jQڄIߟL
`
mQq)U'n1ݛW?֜dqb n$U̘(Q mlr)V1uțpLjE(7AɌNL$#uT݂h!D۹3U+RGO,(ӈU0j
iЉ3w%in^w !jo궟?78*mDAhž/?%*Ynx`u<!E fzɱ+*?g;\Hmʍb?T
:I꙼ى"JB@U?o(օwxcEuC ^GΨXR yv?LU?,Ν-H ,nu"I^ <J1 ] 2f>ywU?V ҷ6n96(lcx}kT e"Cvf$
'97jTiEp
:w%.& aĈ*1< ` 4(>˟?mz:_t艚&$-
.%MF]hvk8;Hxw5j:(l 0ͨc\Q4i@DyM
TUd}]߱vTHn /<0P+Bk8$W #zG. %D& JZѹ$'
XM':ViyI MG'w q@=ZBǏ(c+;9;
XoYp:eXTA| #NvQs*((;KkkƠ,R]>a>DS\R]+ DĽCGU-C(6H$$ >}nf|UA̲o/9 \d9^7Wc&$ªB+ſoCv;cG=3h&\39_ꪃpZV$O)k*xqA鿂@1E0h
}?whn<_~ގ|%h;wm53N_9Zb-S ؠzؽxXk%Zk {s &MZ1-V gЁvN9CS<60mu UTq 'p26}ϓp
7{B[yewJ(T ~KUSA,*63T-% s?䒲5
c;(5
q; ga-_ GTն~9l9 Uv+[>F
dBhJgƮX$KwC{tGO \ky]%EnUdɨ;sY :""^iVJO,K ĎV>3ePDS;P f"+u!7C*Ƕ`jN} 4,A>ZO,7 h1:ޚ2uϼhK>lqY3GfL|ClxsWU@7z&gռ)T/1!@1"]985jL,ܻ廨 i2SI( yx
J' [>3Q@=Vcm2z1vM/w++;3e,sR,]ZjwHbC^+F>_w*en/6Ltgv\r(٭X%Vm6Ԙ`6|P S" f0 D͞; <դveE=cl8֎1BQA!e |@A)~TH-ђjbl.6 i0 ۈs9 mHYVQ 6;vG]/*ϢΖine Sp.vUߵ*n6 ٴ@}]prFK>f O 0lY#R)Uy0` ZT=Lr\(*xt F=o[NCt9#έCj|Uڷi8jG"[yE}a
c{68Yۜ'%mzTB
8YMh?? b+!z;F+B;1ӭ9 L"ot֦Z>AؒJ3dr'3m QAt]\Ovf8>C!؋UE1Aл4QS{ =P*\uQ4GLN6G? Dm
[EXOsy7L9{-?G3Y1K WUQ-[4F - Ц~ ^5lHKJP/3^5Y نjA)&F?XڕG!l nq."6jЂH2:o}lKKHBL:WeJc֯3y 4G
HxVrC:n =uq%If+^2 4EȦ@+V},#YƘ.]GG
$Jj7}[Jfx{F1Tc))9|0x@6}ItR_~_wY.kC/=3vV?aWjTw0N: \ ȸ\Z+8+,FZt1f;{9yJ [dp}L?'槅i 5,Vy I?.sWO
oCmh̒ x gH_҃suJ7`,;B\YO8{/J;uՇy-f,Fh.f
+UʚKL iOg,>͒+('TN!^>av͋)E%5D,*u5DQ/ ;i@A>YT7 ?
n1
&iYR R5Եm}TN7P,
t>Dx(LP9,&aS,:KC/W1w6]m褫YhxжJ}QX"^ ZEP#
n.qzE4f>7Oh@0Dg#Isw|V\ c r|́7[B\ʆךh vL>/ʴ J/i~nD^hGݢrYGo (..
SR$8yIC8oM6FGzeU.S:1ؿ-y4|n4m5l\AS[ ٪u,A )q{$b2U?[bFʉ!MXmK M-Cj
ӧLNh79KBYrI6ϔ@@F ] 9Vgg5|0S t`}xmQb.F[*v yƆ5mZ+#0 Hh1Y0/~ K}
C/߮V#E"XB|VWX2B_T4/ |ZX,|z5xnyUɰLw0>E rsj4F&]vxb?Ef察.FԤ2nt=C~&tWE3QWv]Y@As]lt JoV^AAĊ3 nϧxx6̠VR
.3Z 0zX#N1υ0^$ㄸ?G8)E!&eFAQܹ >.sʀgNk}>y@W8v
yTK` h gB8[*VcڦD , wN f&QTu&V\
Ml7Wg邫
oW#KK=Zܢ FwY9BoB*76»;sw7L>'>RkzStw^+{""i|Xv鶙FTsYp&~{Ěd 0k[)Kj}uuhe!#E|of@JU*7{v f *'o*{CP V y&
JE`73=.,gjxS7Vd>5^XM]`GJ Rw\,==K6aifqM>k^ƲyN ȯ1&lj^ >JI#fW.<8,/"OZ㘆gmb `/?[Yg0k:\_ɩ] 5UaLI^2M4tKz3_ݫyk2Ɓ )p ftw,q0nLf}=C'ijN hRr' w7ڝa<
xHˢ5ʚWט;hUMa_#ɜ%+(]QB E.q*>$CXE9pr|oHm8~ v /:ʛչ[П 5֭*%IcȋhEuW i M n)=_=\} FdvhuD%n6M?uM :{S ^ A\qo3)EEp}c"
@~,NM*-W$ S&ݘ1ZI瘲hi&0XLwVQo@j"A(q4.9t8\{VϜ&ʣ? 3/P5f tV3Wp P^hzRBмqVAʉ61kUUnۧxGE H-9s %C+:RůhY%DG @׆W̥nPEz"]2 VD.
JjC~H\5)X1+q)ylt\rS.4;
.&ߨޑy1SMHVŁgN 패$n /$y'{"ޏJ Җ5љs /. GO* yIJM GPNS @v[eڽ0`n2m|[4Ej*4/2wo A^8kKct-}C;xi)VG||ٲ$k (MaTٲ8]`B` B-E~ K2ȊK ɁA&\_e37?D$gG3:+@3@z$>: כa ZOwL¤iy
W U
D H *> Zj`&zJl p!K;A41НO* %[Faf'mD:#!~Ҹ}vuj!z*9^rX [z8 }nuv~ќ Ho/VJ ـ#cLvjkf8fc 㥰ױ
C:E ,> "*jL23^rg=)\߫
"
2pTp
Od[hT%Oh䀯C2`Ƽ~q%N顖d0>-oDO^1_!A>'1nl1ץ< 6di$&h(O(UBmw2{F^ o@|¦R [Z>9k c<
qxLXoIL+!? h$iMRN̜ޙ ͧȬ ߷oϿpP
sNԲFB| D -BnUeuk^١TI&?2PzQ?XȉJ'~@_|H㡸^ h}7,`
^!'!/( Tκnl5QG
V^D5( M;^@-/_'߀dV41nŐ+ dC |)0>t xā돘! 4
2q >d)FwK ?i@g(q%
T]si0o.@)08V48#ՊOL="ˬ 6x@ .עJI |ɼ!L2Jk|oj{ t_7KiaڨR^͵YxJ9Fa osWn.`wɡoUxw<ƲQ3َW30#ſ<
3ABdC&gVJ)E"g[VS|J9Tw* 'da&MC' l}Zqu3wI\+D|#:f~ A 2XLw~&%4OkdBMM_鞍3,3%D>|+deΡ8"@=Nmu0Y vI7՞Á 췇fWqH3=,$BPFye-q
]B+[ ' =*ك(#|l]iF :P[,@GWw
wݤ9Dl
[Lzq{Z\Ry2ӌ̿f} v.8wf) _\P>BG?MI2@?Tڀ('
,U BTx(6⺱WUu
N|hkg'xrPBmBjWԬh[ȯ
"6s,i;kQT&r+3kR0-E-]Bmˑ
'mkSxH}"uͰ0fñ+Qy~r:?ks"^M0t⽓se@hm1] uk2[+1 j rli
SX e_8* K4!6. G!ElfO#^=hboa~]D]ew`Jo愶% .$Ϥs7B
7oGmrA8Ogs]Mk{WIdc6B!em) W|!IQqqCwǦ Ye1< E9x[IB3$`{fd)/KTG(=8N_Qa]$no
Qxaŵk6)xњ3Cv' *: KԓA 1[]"׃V*ip<\Mh=Z"Ǣ4lEsk`BjJ싩mV@#p i%17yo:P m9W _f `|h77gDY]E28E,AZ1Wz1G^ A_t9%p2^eg<.7c"뜜@}DNY7ï֓a=F'bORo5P S rS:Vv"lmaԆoPWul> g
D\uέ-{;xmhv<Vʌ(L YU#s+L;ʅKu1Ũ
3Sb9wF^Wc -H' 54/W"I}^]zDjX$d"O\j \ OMw=lh&Lv!YQWTfՎ'_)U{}8 yHf[U
O^XƳZl8eU_RB"=8!N7\V^."Y< (>%E ?cI?hRgl9CZ[Far\J|'1
zA#kdw8q'B!6 9TM/]jouRn 8E7d[b$6&C4@ Fo@WGZ~W9n01 _VR$#Q{WN#;
I A>#W]p w6c%-EUolb9-e;k 24.SKD"**n;խɀ.yP|HD`{omD 8)w)F'sФuYC;6 .զA3ҀP͐fR|ܪh y*:rrI ͉rߥ $,VynQPd (aPfDp~TF^6C >[6/Ń鎵s+
`D3Rnz `
S\TJFD+.{ij f!`Tdw
LvيCeL7j'@ڡ ي봾z
8\į4"$ >unm~L<_n$Ʃ 2om0; ?'ڞDHKP s\i]rh2?a# .L [FwGt$*3e!omq+yNa,EA]\ ' ТbXc5 쇔֓F4\S+xn}8=z CI]flj{Z $Ce`X(*dR`6{ N M 37 $mX a`b7%f.k~5k ea9p"e-3m# i`(9!]p&*rWJ!77jm3%mӢ "Xqeg+CCa B vfvB \f SucPn}xCy om{2s efW̌AMdS/hajiՔRldž3Sh{1U:ǮɷkUg 1+,.າJuLmԴ
4ek nP|ѨB 6lv-ӎ5v
38@)8r4 jѝ :nzjrmC7YLǕd G' 5PJm`Z>;։ T.y0pf؉H!ל͂d喷Mb!T Hź~g8E\~wK`xB+j 06WXWwPk; HNTnEF*F̐m
]DW1
l:7hVI` 4| s0A"մG*r4L ϭVw
9wH}[h)=7 خҽ z
po'0nieۥ1 2fDD68 ]o9m. u.?O ѡbFN6ZD~^EhDA(-%ervU'1 h3`c_k11-T m
C*
M> z6UѼPfG`<:,iXt<_i'dhpelxn6lfyp1FpHy`p~ȺZ`r½P" 7j% 7ؠw/[]
S&4ϋqr>~*z} ?l|cqs+IL$ĸ)Ec| 5:+7IgVNKϾvwp ۘ Iy 4"J
/fSc,Dʩ =5S_- xu4Zšp.D.b2&pwzJ"ŹL&ԻB
\F <8L lo%+~K|C6v$̅&}4
M[t
r`_ KS!zIRK?32K/<8s#G =D)vt-J0~$V@CH[7# ED}"Y9/&ɞIOv1.q*1!G Nη a6)j&6r#m7CH\D
4zZ ԄpbAMpCZVyX9H27Rh#FL?:AR!5\U5xaNΊQgq6zݯIOPG5o7i'g 9 g~dIH
c2kSΦkr`
H
ZA `7T)KB<jMЮ+e ;2{y|Jo z}܄n }2Ϯ~!U5=ȀFNB]mNFIX5EuޟA[2D '̳<^<IJaR0BE.f DebO pL.],g9:' V [#عSx0
lAGMNa0V* 5/WBEP9Y )]v+a"خ'#U<];'H7m B>
+Beg0 *D< 3wmg8U ܜuJе_ Qѿ ss'Wm\#a[j=agVU>/ >aYx6as-4 X&Wa)X}z YCD hZ}gИcop ??_`C3$B1+VfIjl~ c}a8W 1ȂGqOk8~ M, *3_DNpMAz~b8v-k )5#x[m4SC (?Xpzn; WE 1BBgV4D9 ;`
#UG~RBdCceytȾ
Eg/ {Vef%3ݣ.+qo"j,T ߹*R> 1*K{&'xcv<hAlbO=.(Vc v(K7pJzNQ}7o*{ =ԊZZSt4?\h Nld,X8 ^vJhm=5m1'6Ht(tľU %,se8=Sb@(7;˄!#F>3?|[=*끡49?G(Ӕ9a:LuF
}"e^#lM Fظ%r۫I2/ht* `z k1K` =eR ,&iPt%1d2/8}G$=wLb}79\Gys^#y\ZZ~쉹;)wtքc1 oQ=~*OA?%39|Nv p?pBmz ]v `C ' +DkPe86b'>[?n@) E98! YG:#pFy4`Xei5N0gUsk?FWޗrVܘބöE RW+JEy nyuԂ6EJɈpyRD.EOXro!q -O[Kkk v Z͋
3M.L$ $fFXsgjP"e|О1.gD/u3awnHUJ |6ƭ)"@W2o{ bP0N5R}T$HXJ0 SJ
ijoyy_C-oV;9Ul|Lty qRˋ`7 ]"_%fhdǽ]a"
grS-4纎0`ֱ,cjb /DU6 MŸ>7Tdʮ&CYfvyJ|6i~tw>+,U[R̸$cD=ti|ZNf³g {G =`+uiAf}<^} ]FYȪ w 9nfMzy#-'{1W ?kT0[y@ãIc(-2zw#x-c
#1Is 9=U)8n.RW@+vDj(f+$p?}{t$:.a ?`杨- DB`2 @O~Tgv[7'G"h"
go'V[2 n`X+Ӏ)Vf3kW)80vXJPJ5V< W頻Aכ e)I%6:dIx^̚BǠ; *Dž5YpLH_d[s 5h >
%Cjl<֤FS 3 .7t/ X>lNɥN^|۱#H@at*wUZ^@9|
ᾊ`u4 1J0TMmm5#
(M" :|zyzLpl1COG2+
Wս ^248=
J+ ] Cҏ! Q@9 o0x6 ykel~?Bxr '2Kw=hU +(;rt& CյOe|-Pέ omHe*bg47ȡd& S[=[@N'km 4~m-xw@A>+|
7E`wչAC v%)(PYo2{L#ϓt bȮQW:'}v
bO4/s=~|9Gi3x ݎ`^,hX]?;zc?Ѐo67e^mMs ,&ٕ ("[00#W{$`ʂ%T0To{OW1]
͆+heɽm/(- 7nr IgמDxmD_ ZkDP moϤXͬ-CX≯
cZ~zH h`T~D ATG7K`*bD.*Y?>AF;
i u'eǩyӫ Ml1D]kh|dǗ nׂ@R`e8PS6v]\& X{(:-ݞk6CŅ~"$B61flZγ`$/a=G=*TCrnNDEk|L@TlHKbb$h3:ŷ朴 C ?^=Y( 54lt&۲(&sw$.63!ah$ UIE{>6/r^tavP~J p?=fךarxsy!5io5( BQ2Ի~@Xf'ߺxcl ۂ
ԍ3̈@ _S$dvSۣbsP" OkZAy^0W6u 0%0OtŐrxV51Ew ;Ugnu
þJ90~
kI1#G}I/~uFBGC@:S!(/NPds*T7>BȒP.Z+d!I>K- ?8q晴s =ͪAl!RsʲeB%R+]Q5ξ/ԬewYI 3q vgQ9-\o6 X= 7aĔb똉M-V Jaܮiُ%QJ`9:u 햡ur\FBmsDvW;
g>\XV%[ޯ7<(C]'pY6K+K=!1誰 uN9-^;[1>{hAߠZ+"Ks~Z}Dp@%*!>>B[\
[`g@ozlKshL("kWK06VX59G* |CY* k`dsiT[*rLqVށpa,-/ $\d0#H=>i$ھHFzf.=i./+% J5 qBlhY\ش6SSwk3Cj*|א'])apdȽo:ś>ɨ I5b2ю.M'5=Zx>K`r1 *DBVP8{UXƨ;.w,EB< ;ٹ](#kVd0ʪ}1NqȿA%VJa'
Öol }(!`jExŔ5e]y0%!|^قnEZvM'x~Uq8-QmZqv[s-,[
{~YaP&#YNwa=
|{ʦai [PQʊOvlanZZ:aMJhiub*a!H%5'gb 8U}Jd7m`G pFb^n|#_u Sf fAM$ '& 7_zQBH$V#=[g[s^B{-kTMo|jƪu`'kU`5߲8Tpʎ<Tf|٪V
^8H D
s`2B
CnV'GxE \
%ì*"ϖX{RʉC &,}HNX`:}hQasNq(m U|:#,H@=h:+3hת椑#: k{XNҪ.]`JG{m:kOhmԜBf2Q(dUfwYܤu]TBL/+vQn
x^\RWJa8Ϣ8c6esv Xuz OBhN3++0]"@ןUȔ^ܯF)U#g~v /o Z@Nqd[D
* 6:Y٣x視ׄźAC\x[<]҅sNV"MQj2#[s!Aa)Wf[&6+
(tW<ʷyfhX$>Lк2i"dɂfvɢYI^-d O1ID!wqRegwn + 39F{ h&CMkA \{
:֧ҀY@Ƈd[DbAVh4yy-y7/0}7R7N
|Kx/$6V-]o*cC }n554 h 6mrhV]u$; }~DDZ5ĝo qO ڂm-cTYX!4[ صg^b5^tF`T% 9F@yxcW( O>
= i- M<Ⱌ5/ܥf-dJ*W"H9nʓ Oy< L8 `(ƾʃd1XjsγnmDohQp ܭgVtg;JwM/<Sv`n,mfiqV"Ǥ4QvcA&^ ~XD"ߚĆ #L` 0!LE*27"f.
-1(o >)`Z:
yrc84i >>16&^825X/t=`
x LaF^2z[+wP9J l= 'xKЃtC<0fb축)f"!Q ҳ7~\L'sJ]0 eȅodx>F*ߝ}7$[$_iDZ1t
'+V%8
B ,sm ϭS>`.еa }E@
ZR"w
jl#4Cţ ] Q \DL:t,tp5Y>7mAF]d <^Mo"';m;R)B"MY; O>Ƥ;~[l
e&ht3vaDZ:/eʪ@jK B)*4Gpq$!) U}tkTvˏnγ]O\':pt&L-Nsw:2$E{l-Ѫ /jdj:^, Z xEqLDce(T)
H_'D(`?ZXjVU| )*qQ#.);rՆ@zT#f\=&UYr 64h'זr YMMbjo b B;Ν ̝4< Xݡ/ xT`V wp]N|F8Eu*.L[2t9 <v?r[ To@ڋf/p qV9k/d <+mEVoP_]
ݭ{moJ
/j ctnB*n
,ux^ @%4 یl*#5nkW@2c|0ŧrU,0үIۗ]"7#F`RnҀlL.|t/Eo-p~|%"Mq p
17 bx;fcz>Ȑ4qN6 80 60z6HgJ yúMHՍ-r9z̀Tfxj ~3Qٽ }&e a(5 P^o |>6/,}N7Z&|5s J
kB˓j5ferIY xkߺ
գ [g|~ gf
t迠ٷ/]qZJYb?d)
qVeξuRZQ/i @,sw]#?Eqi(5#R#oLj =TΔ.:^ywDyCvn";3i
f}-% YzOT 4(սfV#Yl23^ǻdB@ 6f b V(w^ ^}s;e6%fRx#A`&eɛ=ֻRf >hf:A²OtX!"H/βѺuJKJӫ
H-O}VA9LjB.Tva~jAVVm|6TAb/FO`L$c%2>w2F+;nK-r@ =¯)K4UP6$vǘ9~!/p~C''?(ZxOsahtM5U$Ygu zi DA`D
2QnF,3WP%bGyȦJNvT
^%r=<
y[(`)(ɩLUMOyE D`oOe^
; #LTS ԯ?`).qp#u`QNX }\j]#ŌDAvo/`Y՞n*\*%HPY9DkLmԿlCǰ9j
Àȣ X=alBcvqprAH3쑫(>u{j%J5S mwIZy- ~҉K7Axb$HR;z`5:Qsͫ,.ᣘ&֜-!GVEOCY:$Sl k[,?T¹P( BTu6<IK 0p^1_>Cb
pOCU 4u dfH>4=j\ & XvZǯ@FX37RK-I.iy]?J;nȢ!lnX睊$* e@=1ޣY3t"K@N̺n>(U|0J
LWs$5zRE8։rWuPV{mQ@-{j v!Ɵ rNb㘅X ˔Ji,v"%N0ϻ-FltpCSH-102ۥ1i5paXl-2 !M Qh mu?\r6稕G7El ,q#vi煮7fͼ. YRY 4wLZu>D{aI HZ y[Q9/;+TWWO*İ%|t ߈K-xt,#PJɐ;/PUG⊻ }r1' G[ i r @ rHf g)7I)WM E'aG<,Wϕl ɌE(ڬ~D;)Kdjwa g9GI2,|; 2˝6KΨkq)dJ&^4 \di0MicN00é9ToZ`4 \l dlO!VW
% l-*{H _j DqVZk0$oI[3 -SՒY i3^H*C Ca.$ikf ph!s>+4bA &pŢKLF:rrZ#|$]$R >ƀcU if2f08sɮ^~יVtktcN9JAwDB u4 "%Xݚ6P~CšAr +¬
=x6 pDidNˋufqR ?
MC.v9fB $ Ȥ"1T2rL흁:@7rǀ fz>SQ
Ĝ3*x?\VRM)Z|۬{W?%qdƈ3i77JjZ5|S퀥7L7!0[R쪳>r5M0e헪y>M y!}QIjc p?xx֑1RVSV 7Ǚ3?҂=BWCJqi' l` ~HڒvCǔJ ˨)U84tqj|
iqO %Y 1AFЈ4]W~lo;M `Uk0 JZj12gݎ5"Ls2gO,
$K` 3}4-""( 5
igsoLKnk2,
) ? ثO An$76Qy 4V+~+۔u?2J̇ YtQF}.. : ,!'y21U^l E9v+ ԏr#B +D-a" y:Ɵ& fZO"в.%%%
aR%_%b9Y[_p"%
$J}]Ig:F+_nӐݍ,#ӦGӤO-g3."
jDsK }L'Jooi991/g<<Α1- ۅ(apQò l>R`Gl.OLFGS+Zmd9NX.)nE >`gƫVp&J%Ë##èplDAuԐyI P\ kIObݢh1
TFwXǨÑd}Ša!IsY[̪Pɯ ViΩtd o׳ :0nN /ø d4w}y<3tC 9( z UeXN= pym47\H 2.%o/.p$Bt4ڗc0b53C ұϫF.UI:"ˈKa X&vk gqcP@"+")]5HSk. yJˢKt
U$Wr<'F Jl T(me*(TwBku{KA+Uj 4{ϞFI9NibXgnQ? j}=ʲvg xQ8_k1>^vͼ|-uSfu]h1 >Y Z°kJE,YȾ>Ei$$,@膋(R~ť Ƃ 3Ԡ *Q& -mu%%' LB6`K_nݹ_5ʿ/;ЧUGl[RaUFckcl $uKn/w,6ׁxثh(BL,Ep! Tk|mߪ}>.&4yܰ@5qpP V L3u2(YY@ikNXւ(CFag4Ls +ЩPuQ=!}l51PҞ 2iMہ[ݎq* NMwYWxGt H yr 5]-] \0V;m0@Wx$JK=as }1 (eRsHMpV y!;/\+23M,>ͦ iTOvZNVc:3O(zhuG .~ 9T+,0z֞( 3\ bjsDț3 Թk5j/uZhTfl&R
MBQXEdCݪ &WGUcMqEhJ=3mAbVU~J qK7؛Ci˪$ᖸJ@V?מ7gD-O$8#3paWPgy]AD]%ѤW g.uoYu,>h\UZټzg+LGZl/KFϼIKwXpc$#*<@@(:Bf,D!WUFnʢTͣ< 7f'Ǻj@NtGe
YE9)"%KkᓓlF K'V-}{DQI0vAJ۱R'uXrjAC^s^CTSeSka_J̘UL&D @1β]k7nZ\(Khqjr8f~|٪dAZ(|Ǵ**CBͮ8$"]|P TxuĭMSAk*Jm7ImŷrN~/lf/^M:L +~Cf?)P zzGo,x]G%ZfK| bKykEG_Sp# /Pi(bX^8 yvPJoek &^Yε+
ngT5:V8%GʝXݞlgvJgmm> ȿ)Z;jI۾MV,%WbP2\%O97vfQf'C9hI& kkNƭ5S4,XniGI?<}6FVhz o)VR^hK 톌}#J~s3dk$~#ju5RX RK CCek=yܨ"q۲fK+̰n6rR!|V6.!
=0>[X"uZ o;[L1^04|:<5w(7Ia
ʹXp 5 KB!Nb2N"RnJTTHYFER7S2 D}w_-R4*NJlַJxPJkR1jGitO+!T# QEaz^dX\ƕrΪ{Qޱ! Z[/
bAuJ 둟Iha+UӾzSI%TaO\_-0yXE_n %G |*]d
q$ i$(]^ ԝE bR myPq%'P1sޅƗ ? 5vfY2y7zu.Z-F0z6 {^uw-q{Kad̖$o||Tdi: q3BPGeЛf"rxGpTݟ
yt a gGa)2zG E
MKr 'I3+.PBX3t"릇:{$2?-ٕ`xo?zH^(ߕ %8m,-eVƂ,. ~L]jY\i q,`rfmIn VbAJ",xq+:\NA/+T _q&,St 3W~{~^ A9 <bWWSkx%UU
PL4PIj6V(TO&ЅtUWY|MG8O+0 uu~7qT46A/{5 eG8.ބ sas Ĉ"#HIr w`b]jd\&y;t۞$ޥˎ!;Qe@" I6I>%ho_}Pv;tj$
,l;e%7Rl,7 dw
dXz=ġR`eҩTa dYxng)deڬDX)EQMom̳Ŀnz _Ip ֛Ra9$3mE<*X6n%|D
8P2o)w+!%vh,"Di9ɍ A5=>X #8b-!A8|%uS݉ 2{}csk -agBnj["/lO P&11KtV] c=5"$?$$y~[Z#zkx*H*}*@^彇y@U8 27aB霟Z948L]ky߽%lOg'k#&P_8!fh7Ɔ~xA0"lp u5`=fA;T^:{I/SIͻٽc7%P_냌-S<+#(XP x)zD glhbsN;!fEG jȚ-슼Z)Bh8{l%mJ h2Kg -!amr; r Ɵf7f
^# 0x|lKX1ohnijactӭsBωVx 3$B.廀q\y))ͳ *(Ըy[
.YVe3
UA; 0soҴgWΡ!
xA|)Ę 'C%J %\T+u]XUn&N]i\TcuECgm-(/+[z EŇim#HH+MzǼxV387?Zי W?X\(POЭLM g7
MY! I,u?z1}% mqϘ
P֥ZyixGOFi >d
j$~,Fnb,LҲt&]O)EotUV5 0M<%]M'\cXHX(}D!\ %= -ͳBJ-O(gic ~nَa _t&+>C˄gQ=n(4H ?oЛ<
% %viӃ+5VJ 3KyOlh%=|$
G n wݝwPBi w^8t1p_Bh͢6 jz;xlC9ONV!xɶeT,kw>mO&+I9ϱn JD 8Dޏ =JK ngFDŶKΊ `78%Z$c.EI*^c`ȤO6"xuW9 8M.71K%hKD9qV^؊|0
V|C!o,XQf#{D9c>z걱|
A vP <:ϣTt"laG h\"6|[raPeÇ-Q=r6 34m_+: 3
>;,^΄}rkAS]]. DWh> Ѥd)/i Zađ SڷңI#̚)2:~Zd2b|*|v:8kp
[H:>$"
, mPA ߁=䩘HЧ&,`VdSI25WPNKh`_CXlq71눃bRtmD4ί#xjڇKLz睻=>/: ̈|5M ث#u.\@-B儬J&jÿGGZQ7jfKsvhT8̓DU* ,`251D(4u./3vr`͟(>lѠ amLFB&s wd5t8TKFνԱ%0HaHo6r$rڿC߿';cK%P o:ڞv. /`Eۥpݵ
) M
ir%c&T`Emc:QnjX'ǕϻI=9xqi+$&%)|XR<`̘(ONo[%싗|s1ƭ,;NQ?AhcW5Of0!? AjJ
oʇ
"6Y2Gb l:$4XGW 䧽9#tG 蔄ӻ rA1Z 2,}\ ]|g)wLak@,6WC? :^:d |#&gzz`ϿuG!=⛉E4[xM3 /NΫ.SF2fSz\g8zY4 u9I>GOz\,CQM| 6ףV$U}0ipJZXp#4;i<38j
ggvkJ7b6!a 9R #Vr~[-禶v+!SK ~b)|!^{%0t Rcɱ;s.^zf$(Jl,| xx-D@ &=R oimE4Fm6E-^ [_2j\b `ѻ|nqLɍ +)^ȑO.,wRjy䏼l@7)#fMu)kW.Qvąd~/0#Em,/ Aoγz g-W8>|O5/ "JP3Q͜>W@cgBBY79֝ir^q喯[1-6ľiCxIO ▽xc# : r`kF9wym(=")a(m{'yݔ|r1S|p/i'@h+1w bi l]LӀXmF`|Qcvow> mL:3j)D ̙Ѭkkƶ=Is&n5|l_ OEf'
xD|a[17ԯ n_~ xYAv<żl:yX$,Е6o4/W^vtfLP| e)[X #|&c_GkZ΅ՎjV%Vb'VJ=b% eJJQjcјL*(J2:o4c$9hq,7){o^I;̹$piOػM
P
@F{Z]:$̻n4k;tAu%(#%_t 9^Qi܊18䋈ۜs2q"&f3?AnrHE:7 G@Ӕ/g :K<ќgm*v"1ZJ5^8'Je2 ?ݠ# KҊ
H SŧQʵSP=} T.|dܱ"aH&\f91$euZ=D X"/O0u H +,cE7= +=N\K{ex-So
O'O<݉N!y\> 39ɳc۷o
S]j
w@ &JK)vu6
;Ţ_#!! ?٩(( T/jK l@;6\~4Yb``
Le;VG~E6ʣ d*y؇tMf9"?d iUJn v& u-$-⮏jq'TG /dXL~y Phx=&R:4MdAe/kOag%X/ Srk[GӀ k
ϧ ؤ\m.6Q&dm(\_;oY,z
5EZɒp?i09 IeOjEP\0@WVwYW8@ߎ%&Ū|ћ5r
迯y4N"sS^P 1,[ K R..egqM٥KHmfUR26W$ݲxdLKʗ^$#2+=siӞ Jm Z#c;?;nU %WnxtϚ)qs"=4*R)p܆4rl0&ƴ/6zdj+h}VzLu,/' ܉oT_U
l{/ j5i1= s* [?GEҿ^ꪆ5`$: ;(De^gblB犞o'f"}T~ʗ[FouO3U5$ģEV ,`nL]}#Syڗ)/ NEg.!Y0\莝˱6ȣka9N0~?Bt|Һ/yrZ۵17JɶgV0P
ݶD&&[ a Q#&n2= uys3xK ˣw1yҠZQ w(8%1 % -чm=rYx $nt9٫fainG ✅Q=(>i#?N8f7vNAbwir'˄rG.D!1F&v/mkVb &:,Suڅ kVŤ} }a@t(R
!}gcQEl| W0<*Nl>zaᘙf
Pkli04Yy}MN=/~[ f ֣ !S=UpцL(yJ~r(:k:ɅM.
3F5\εԲ+L؇Nëqg 9,`5/ÊE`rG+ k2VV``%. dg&\Vx@F,s;m),E璞sm<$3ϗDS
mjR[Z܈qE=άx лJƼv+hRײ( cC=yg~ ־9(ŮӪs⾪VSrnfA
n{Xn&:lgS:|Xκqa DIdXϮKgoqmuAu0u%S]x ,)`dphm"WB},ql.:f;ª/SC0Co^PhCMUHh]'6lG7>U>ӃqBpX@oبdž%4j*wMgrpp˪43E0`P##KD Zl7kSz E%
89(Tv 2ƠA I; ,!=h[I@ _ s 2 YOvs3ဌH]qK(Wu"n|YĭHc<ÏCBZu>w?C#_~8VCԷ @ov^F-@E%ĺb3xyj9z 4
)?^-S{ߩ>x#d1AVTʠh{A7!R*
Q$Su:HQ IȖI;-IeIuZE"v@(i jp) N 0}CE"\N2rꡨ
^l j#Ǯ=^LH Eq`3_
u()sa%93%DM\cR_ K\[WٍlJ:
e>ch!Pt1ӻ [erjc~0_exp;l煆L27d/ nG=H5dكyAD֣V1C23Wֳ3PAvuzwa} (kk Sp )>eE .-'DSLA
4oUnuDU"K#xo!;jڊm ww[ĉ$ E ]6VNzx]Q{ƳZDrqhjL#/EY&i5}ԷcƱũ DN1)
*g`%YؚZ',!9oH{ SJwkT "b[Vg &fP'W
gaf|zC&GDWMVZ
od\"]?;Wϗ;S?7
%k~ k4<ѢDFqfߊ\~@
?_w迖k* Gwe)nzP?VX1/Ƥ*6 uQwg.Κkw
gZ5GD^W(ĝ>pbbZtewC һSoή? Ke:{*7BkF#OA2,_ɝade\Ka.PQZ-
:Uz="SދG*YT
+r8rh ZjݿShnu!$榘2QR=me@#ۃC_ ol}FVax; C j, sORc[y "pC\ooSO*mi5+bOƂƍt
+FQUSHx
{l _5\`M9 :>[NiX7wy ]
F 7 \/JH;R? =6WmC]JB
cAb'Ɇ rkEd:_0 ̺ QߟpS:l[SC
`ӡ-Zβl qv==UB f& EW(#vWs[ \s&uMh&~>\~sQ|~V'-=K!S7PvKM, @?6_9 a ?ܡml^pnO>sP1 FsܦO!
jQ8v_5zܟ5 5>u%Mc/VI,YOY2@
hlUk>Ӕ*7l !W wrm+@ypYV`zV ҩU4svhK{;+ؤ2 #Inl@0OZFOJP>cq
qqF@P 9t5 y&ZJV3"c1H QUGC
+gռ*[b ի@DW-`Lu"Qgg sdˉFM@P [T-h]$YVǾOfab\\,n/73f3 '`r{ `66\52cuL}]R$3l/6iQ G_hX;G
Y59?~mN| JB- E=pM@%FLee ؊ `t{^m,n|5(;u%|^Ѷ?}n3qAQnsy.|?d8c#1 ,b`]47LzW ?h1ϙ_]NFpx2ńIy M p.ѥP q
fXh 0x*m8~:ƍ=
mHYgS eafr;z\+FLL'Rl0$慰af-;+{ƸkhMΔ!
(!T ox68 V` yTnccZھ5XcQU :!byes)ͳta3hݵbпImЊ$[\Gw. !r 8H(4U!ztF/2x%|?#9)Ŵp^BM4t ,]j?ba iT˽z" :yU$Dy&7q ,lyqwC<0N3W%H S\`L2-W8{է,tȪUHΝ $7o,-b%" ڹ:կ4_"HlbdDE҇ `z?5F7qV#mRۨ? 415x,@_!Qb\Uv}3.%wpúBѽX% ߧi@eAL'P4--|"aa@a^gHZt{dT_Xֵ)Ox 'wL~"`a#{"eV?k.{&)G˭y M}.jgWbAAM@YCYT%e ]N
Jz#OՈ P]M]RFIKOvJT
*t {B`V Xdap(_1!k -
ME>U89#&5O$4k!A#D@̹ $'RW$m^w'H`^7]nw!LE+x3ٮ'x۔o<$n＇My
UEv{!D<9]
{0]Nw A7Vlg.f[){Mx%?/Ŭ=7 v4C*jóT7;pd נ: Frym
oY & 3V~
X@
+j%7~/9$}cO59U@Ev-^_>MeVmݧ˨n
ϊ- A S_LsMZfUY l#TX
&5ejn|*G7j|A4}h
PWWfE+\8o8@r ckFvi,SNAۆlvnM5\S^*=8
L#@bSi%49'*nؑ1wP#Q*(]y+oTA? yL>kpqj
EOuq.VCuMf0]<nvv=r-ލN>- yg=CEڶ&e {*PR]|BvH*URb3[ vXOYɃvì`J f+!U'prLh9 (1z/R$LjBP# -@|։ Wj
Vou6Qg[x
|PBȩ-'Y,:}c &-WR @_+¶Vl7i B|0Uvu'2;R'mV.Kbm] =z$8RվsԊI3{T K
!2F;dΞLj 4ӏL N
UQ!8PiO齗$Zך "3_t!ou,Sd uDĜtn7^SjEDOރ nђTR"~; o tL ޞSvHF|%İ`t)Q LyAryZEﳵN
}R#}4R2%=ֽ6uD0 [~
Q~tFR3i(,X
Ն3 < l@U9 Y9uB-úW<=0w"W[kzL
̀#a?6Kny1w%:8:%
dY
]_)VY)#-btc1 'KHGBtRhtU1wMT:"v{lϿv8B2*WX+CN< &U frFqU9|4*yުȚf( Nj9C*+V1t2Xԅ&}pM/;)|ҩm5/, _ȅ UWFu3h[.Г$>ta ęBJy ,
^7 "fR33T~z=b.- t} _*/elOJ!q!yi}e("|9Ul
.r
E$牚G`*Sf 8{FY :v*UkaR(vЫO
*sѽ</\*aQhB>;6:KvLmaj$j_Z
?ćK,q Ђ l4mA+ ck;K Y0 0
L B@& /Mj&« 77#$qԭ^GzֆcwտǀX|Ҭ`wˇR bOϬػsˆP7Ё'q}Vbe< y"mچV\y1 D Z
7f HEwGqSjQ*UHlGWH{[[ um"ƁHH ٢Q#<,;# &>&{t=i5%GbdSU[V Dˀ?^l{Lo^q&
ET)"dDmC WDo)x9J^(Ͱ-?5+WW Q ϋeyʈJ/A:m% 8*/@(
pnKiD8j^gȭ66EPxhAG1x]4 ^NLȇ-y`غM#D8!Fcj%kC1h6[xs
fBRzpH Ȩ=vn^ϭp+ çRy(_%Z-6f7 M
g3%c%[FNC̠5OŒӃ,,q#gP4zzPl!+BsRp_ǣfQjp
&}W|}+ G i lT8 k3 ?rj 2&+?u
VYZEE0b)rk&Td VyީNP^qiZ:7)"Wk A CzeɣYz/Oi+~1:`7a^h)~қgjrqH0z(]T' 0b`0|]ӏkEXx3R=xPF N N*'\Py1$ƕNxygX V U4
Eߛ 7RgsIy3U_) e)kz9CymPt!LxJmvWI U֗VL_N!Q&WrzZ 7 ={R~* iʏ- B 7_"!A-uÿ_~ =bv#GpY MaIH7$vH³v G&0n O7{$8=b]5+u(a Mzǒg?LɁ* 1aӈV /
T-kN ݾ
I +z!3?1wY;&CɑI lP}S[.5 o@R fKu|YWx%N>
nVOY[,ϞD5M3SU529>Ёڨ1hGb1
3^,ք&3BB6.$rE"^;_LT
_O*\dV!w3&6/7⇏
idzݯ?o:{۠|IOn ? eyϞcڶVi+ua'/r& ~[ !w9m 0}>!J<~0iʬ%`Jvy$X= lJ0 !|DPr+x]rLC *2\!oOt 6n*۵Q" gRL zL?帡XܠB5Fщ,ZgX *7KC)xm9[a굻^;N4ITjVdR~j@sԒpJubJnܵ PA[DqCcӁ0rlkڙy>:Pi7!Ǝ# 9Xod6 2'E9}!n(Ԁ;=wRCOFEB ôvJ %ZWj0!Vgx iSUn6}Pt=F\ CW$5§Τ ߰a17⤖^ܻv655o~9 KV$ofuE{
zUtOl$xm;>g% qc(5W&%%eڦ3 hT
j>iTDRW?2@eRFiK,\ >-
tCcf k Co ]&U.AA7']qȃ.qW5S%2\ ːHKM 7~E)C> X($ ?(Jg$kXR4dtD\c/6Ʋy~Q3)Ez La25_̍tTCBTǡ%WkS@ R5)8ah q::0"!+hi'2Vztv@G "> Z@lt
S/_=]إX,H Q'U`d'35[ݯ.؝L3q#(q_Ziϱ 8T.O0 H`"[c
lbw@_Hq IA- VS :H.m
r^ӆ{^Vgd."XDgͽ9 rm֜'k\ be4ۼi[ͦd|]>f-x 'kAM`8sgmCtjT2
!{s4 }
E÷Pr8bLLjƙlM mE[h6FC]< AF5Ŧ_~خ&
*" 3N9n*E1WSkB dc KuP)j~e~v,x@+ "hOޕG&9%C\dIf,
D_).b{O"\lGbn
&tx𧸛2c>^aǧWdk.:g0Dܢ1/-Ov eؙ S1W}: _.NѮ:>.zPLtO=0"W}SPgmVMsJҰX&x7FN$uiꮽiG\ ~\?U]Ä,ȥ{,z50F,W?vF-}6\t "% \6Gk.^aiy s<|A8_}fT ͥLM0hQ^>r)͔ Ep
ÀX^?nW8z5Q݉ 99W;"
d\kJ'} Obt~Kn>y'oJҦ̾8S!QXwjz-xkv${#e5 8]`;vƈDEP J1&@{//wRXs&r^eYH-FW7~4XakuEn,IKPR -|T]8/uQly
{`Q,\A;E0wעIaeщ >Pk۵
˱juDgY){otr/sҠaOND\1yPS̫(Lkʜ{9RfyOM |J3yR,'
>930CBK.͡
Qy\שLVW|\
}ޤ1%b^@ 1k [I7tLIGqE[$J瞳ĈU `]Ccxk}Ix< <_~4nYkk!BY:ڳ;ncFTg!H[ A=) w/8jK+anώ>Gyhߙ #:Y-w1=JlR~.%R1] ` 2Ͱ< ymE=RHjʕKYOQ ۪;SlkTmx80gwf| _K6m:Ћ6Do^CܨlhPSpw\vIϋ8 D7,k!>6i@ou ⥷,*)9} BԓDL4(sLotNK ٲ]G_ nS8dJr iHScͱ:%.vלv*&|uF]T}$+YXQ<
=vu_w BτRaz@p wg4mâBf_CIC/r5htM zltj<*3
w(3SLEDGg
䐬SPgؐ|NCM Wû/wK
B?֟x⾏ױNa r֍=Kf5@,HnAM>l6 }U= C&wqجǐh N4"SOxMeL$x >_jy-kP ZD ޞ~y$xPI>O_l
s:.9TY(=2y]qH]
*qN,ck,$&!k
j.1)Sn \xh ~ rb0_c8GҔ*h6J5i]!h
ZP t.o!t$= s(ƥ* ńMNO>FRqClz,*}x39KU10dLDvhC
)ڲ@ZP6ʦk"St})B^R>
g[_ZF4*kjZVaHb>b4$( @vy6UIvyA6u~6wu/0\}Iz\U5E(/eeNE2VG#P8)Ho(;
iߍ?>"?OcIuT1 B7D,P} +ibՐ W {l-m@AYZvlD Ai$m$ԤPvJ1YWdL/o`etADl Jt3O gn:"wՈ/&Hz Pkzrfe5Ńfy>Roo@@ѾL E$
src ?*HrQ(b7! ;E"
@fYr4ҌsO^ rPXF%b p+; zs ~8 l,&2߭8#%sud %w ~ N66&nLi FF\('[A]#+$Iple_
-_FXn
A"~ \UIF]Y
8a|}%w~^z> }Fs:ĆL5 H8sFZCܦw B+mإk'ϷƝly]w( y,+ < ())@!.cl K6j Bc>H`Z+v G=`m14S=["f ]۳Kc4 큎\D^h_C"
<8/0$̾}oEzD4HyK,]61H(]m~KGYӦ .Sz
Rbmz6ovÙzڄCb Q
Ģ2qr!{Xl
z;R ?<0oo6& Ǵ lc&Ft=- #?{bD?zA~"g;wtE)Q8 ï/|9E@~( !'b#= h@Y8!S!6uBg?$q㦐bha*<4=s\R \;5?ߩO|OS$\ a y~*~BKŗi tL,T&άi7+ %Vc ɉi
=z 2%n
#,aCrRev LȸoaJt1,بl;
w3
ѳ)l>-z
dX!+0UYm|ܦ HOo
Z7#nY2I;3unB7{?(4 F.nPXyM<Ҭl99V ۘU-WIZ ^8l~]5s% %*ND[O7 H - Ne&m nE⯸[g!*Y_V̈́8 7k>Ս}kF BYXjvjbkZI|kx_c mP&g (au@3r_k P(:(CMx1\PI& A{
AqWeX .rdu ^s4^&"!0^C VPk[C' o.pg&S2%{뢲
',R'=`ө]v(ީ|gYgC$m5 k'IVj?FYɾD K1ߍXyx3} ` ѥ*r1K4BgMn/F?$Yb=1 ՏZ´q%JU֩*7c@tm d"]2cP&q++,Tp_^ݪDjg[ 8*꾐#SuK3
7^hquWx,W! H y \no?nE 뛰H%7zC};KV]N&]?*8QTRS,/|$m *mkif=_T{aw~ iII}P j+\I/ݔ 1C57Vi.~OM<>PgC]J~@+ P{k7u[ CHRJV
g!n> Z 8 dnj
{&7nS>r05a\ 3+*`(fG;+e0Gm4H3X"slԡ!ȅ{Weʝ| 0^uKfY3Ц7bo kC_p4xJrӼU'ݦb_S O*4eV֧r
!CyBS6덡=zԋsK~}V]&~cgMA(Jl!;Y~{&+]S ;ahq@t "6WHW~mfZ;ۙW_Y7SF-MHXYp#:RG+)BF LePL7jl3H!&|=@m;z苋Tt +R_LiޟbyI/G 4 C'|4=^S b iH~q L=S(Ƭ8i7w 2&J{9 ^ݔ㤾Y5N`d( P?}:8f]V(
Wt_}+5' PQ@[-wBŜPb>F (w$N
V^EuWn@K67g/Vqd?!dFLAH2u k{֟FAF=6dZ}+ į~ VmR4N9bdayjE*-teW<p PڔC ?8C&
0)^({BK\ik 0N7DҠЇERTGNFLc_ឩ\;6(o1"&y}y sɾ M{; "DM\S(Y %}r $A$0 P$P+eniTHW5?9V.;w& ?PUT< e8tX fBg}wg䧼}VNyC4ٕ҉ұ+| !R者16N26iD36`0ʘdf2xg8 I@̐+w)vHSoi[A`,)0%A mՄ Rs #?Is =¨`։HmgGWvVs |:uLQՍ'M@Q]O >_
PΤI'#^uY ս
O@ b60rεĖ l)է6j!Peʫ Tw #M R-_H t:fCO'] 4';Cz~kxD3Oj>p ]?乭 ` s+ow%װ 1붓KHg߿ݼ4ġFM6BGUz~Vlb wM%cka#oAG@;=9PYmr W;P Akh# J ~$S_֯9$=ܝq(}}ҩj3y.8aAM%]:X
':iڤ=Mbx|1F//jܱۄ+*;M
`$}: qEZ⟙1kHI1ࣗ >JZ|oaͣdk$u*m]*酬}A+ϧрRsV8VU[Y#}9P$ mR/S Y"e Qϯ-'D{gn
> Z5
]F4FC/ux]>I>edFvT MzOr_A/jx' {2dgz0fǥ ao \@ r۴GQ v'_╹ 9d[Kb{
QkkU(_nQP_"8y4f`N j5'`ђp 1^=
mbȌ+}ZmS
E4x
hMN^CN !W"~H !w+˶CjNn}7j0: dKk`}ǠMlU'⺾1HweFbivEFm,m E[AYaV#ܹ ϘާkXFnn2ASنG.mEy?fJj } $@e#t*0pwSu=V/K%h\SX1HU#
|p3+
0 xU)OCA:Q|o;dF<1CTYsv0
c8v `[}!fF#I ^Ɩ+k 7uY=
J,X̉i'uڎvcVg֡dܧz9r}7ǛC@yv˱38|N^ S0κ:-P$ 0,Fdt7y!ؒHpUq9'QYtHm='@ၿӏ}{ˆQK}ƒˍ:4Hhb!uW͒oVlw ߪP ڵ7Xlix?5|7Mǣ> :f\_+;}(`\PPn2"ysJo%%͢Hڎ$␍ڭ = wuCѹ@ʷVOM?7{245,"ZfJ%{I d-,-?LU~X
&iٿ{we葀bYҞ 3Cp{ng,I ȯދ P V!cs[` 3FryV'g˛SaNlZ#*I Xd2/ΚzʘK֠VCG_m$q% ?E . "
LucEˀ' `AItq77[T)iFˇ9 |/ b#EJ^9j-k{Au'`W|P*(_ [alVؽy&PFS-x&bWxc" þa0V_Sγ+|}Xtj$Yd秣pٲ[ M 24`:F VSѷY^lDzJB . X]"81𡝠p$ 6CIz J=y&"W(D!6+^Μ2J /t6Cl4ьЖշ?91b >m Sݖzqb y?9 4|̸a 23j/Y2 Or, , #Z Lՠ|H~Ʃ*&LɵV44=`of3)Imp"t|.1n1,Ȑ>j kpdYW.2a
Cf}FeS,œt>01$0MO\vFT_95UxjLzN=C's>z)k]NhE
!2e[:Q)!U{-*vq^
q702!)P[l7_ [5XL$g%ݴ8We
r9';Xa pcѵrn&DlZRHD"s˖Alf^ 9 U*Ɓ=thX+CӐ#kq2}eo~鏬RpĻZ2pm|_ΚwLCc?wβWe0 ̑gʨHEXU +'M EIN݁;k Σ p-2sYY\L`с ̈hZ WvN{0B<'pR ?b6NP)8~O
2ųzB{ bfEJy{xn0!*XO^ڕ0A ϡ r#JDPЇraqczz#nN * gQ7QƠ#>˫}9u *X0gam
D_<7 ,Wf
=f9hu&0?zQ3yGdĵL3z.\ؕuW@ {@1l(>X ?HxH\*C_ Rh4-$3?]RgY , &("\Sݩ*p
M$[ kE+/V>$VU`g^`1%yd y
\}IҢG2XeVRF >%;nG畻R.&`9W2
ón!&c 3GMo+IM% KpWFk dU Gxiȃ:l bPw$YYۜ4(9#>Lt v13" RA*'8GXEզ{"v[jæU.p`[k1ȦYvP
~ %kh7gy m$v-q+7=J1T;BңZ{@~Nuy8 1♈&ɔb K œ PGJ'j"8|k0?Q8,C4l`+Lְ#BQD6cpĆ4<N!Ot9V? D S95Ք]k0ɐEX `?3hV
V@SO2_]Y7'\_ű X=potmU to {vܳ5rFʙ $zEf^ە=b6W7 ADG%dz ]zD=
Tca\N5`I&pA3G22Z.@p:qՁYb[L .$ztQ,-Ae
VL'}!6
M%1k'GogT&,YMv0yW /H$秊Lu(P1We'Y;mϰٍ,%e!(NIFxs:یֲY[2f Y`9\4
8N=k _7H! kx j K"0VNe""(µ
Ly"^E81-$:Bt`Ka\C}l.TgӍX|ڼkҗj)A&0TM62;opn%]CXF!}-[#CՋ.i켼GGg0Cli쾄%ܢhpt@F1 r G-&VnKԚ"㮞/t /֔A
ERcFKDH:Giۣ Ū'k"K{ %w^I_YX_b]Q_f噖6OވWÞ7Ǔ~y& E|F@uJ O,RSHT?ه H9U3ls3d0'5'Dp~-ֵAC y[JB$0 ;(cנ[ Kb+HLIjL*))+o@NfWpCH(L(HvMGk6a-oy*ZeH j~ mK杹Z$TjE/{ĻzV'8ͥ3Ng. x& )0 ])±/\I/F_
~6!HTeM{sC8K_KSmniL>kmi0`8J
pz Ą0kv"CTLFpT${ M JCE [Z 33 $a8Mamj~zsOߢni 7Hr݈"M)?ג-3fwQskM> ɩa#SOʋ}^xEnpfEEzM}s?R7+dhk 9ꄏKKG[T4ƔEnxeWj V{f*r+Z9 Otrx.S=
:۷~wyߥm9A&Npj} -A
ChZEj2YX)dz&;ңD0zvu5*+8ɡ+fu]s3͜qnΗquձXA S*U}B|j[SOl` L.8 X$
b3CEp1(!0շiuT4?Nkۂ].]0()"1쌣 Q~#ƅQť3J*ܲ= :Pl $sEf~ޝ[:5ĈNE-/FkzV+1m̰qy9A EE@wXY(yYB7z8gU6xƚâ3uQ¹rPضA] p£KN_@fjoZLĉz-$i+kN!σ|XOMp^[^/doBZ._? ۞u 0WUO5XjԬ/D-g}`MgbCrG[|ǸUＳ J9œ95T1e7H(d2q+"㬓`
Z"Дйn
52k+OUaDj4D*|K )P=6'/~nlǍ5Ҽ [\ S} \Ü0,)ug@f=Hn$ai[ +zO,Z;%0=(5NP`Cۃ*#GTTgd;+-AOؼ~} +w|ٿ\v lb B#tq$Qא(:C-\Ug M A1 R'm3)n<0bXqWLVs+v
W)# Bq9%cʼn;1qVm/t_CrᚮƟ Ûɯ̋-$Oq
6HM%e)57EYѐp X4Fk;v;ժ]ݱ `p8};skVnM$6/tC (Z"ИXQ{h' $s6x^U_F8%0 ! G:q,m"sAζCbUt? j] xX vYXmUY;)e8niEu}jaTWS=i`5I z ΫKjk%]ť4Jt Bx|P% ԫlTpe .gn;Q>9`\pdII{OA;x&_\K2zcQ[Vj֜ؗ[Х!NoBr2#41h{l5l݅ Qy퐩~S+ !
E1#\] n\ko[G+yƿIkuDucYuD4)\?PY
_-E?$>)=sڕQ˺g
Q}Lk"a:GE,meRՉܓ/ysxDT pJ #
L=mI՛&ek@~ ֏Pgڋg, #ʺbP32cFk vzDpn YA\@@v(ԓ,H$PTʶ#N" ĥCcC 1jAvS DdiycG!L"_j
i tc%Jmԣ!4I@»u .*m Vtݰ4G"xCLylv4:]s%BqLOMo
@! -05~j~)r
IZ;0p}nZʉRׅfY1AdN ]Ej#]) jRd; FCiz :H [~OegFyK=\ ;H>SN BU`0뷤Ȣ_Le$Z~ LuX;vἋO"_>&dZaUuR5[S=;;.NkJJ tD&d -fUEma(%fc#nffo&`G7at(ltA.YrGMћ3+ z/%IMȟj&PLP6RyKJ~Ħb-gi\
I=ƾ^,OQ ǜz 7O BlEb݅
J p"?#[BѺ7pU)VpJ$"cr;8);UKaCі-
IkBTR ?:ʜ;_Y|LqqK'`Y7Q MN`bzxԐGxn AT2din%zQk˛tW M4䝃EiՅ4n}u!x>Wo
WOEz(Wd NUU#ho\ݯ"VU~N
P0Y[X*xb8I1%ANJ@CR1e$p@3P%Du#ƈc{x׀-lCtT
Tt/
?58yF$1|Q0;6@8>j GOJPmvV}.l49ͣLw()VEaX9w0{ sl*_>{e;h$9{v:f\YY~_X |HD?:9(
!VDD~x._I@<)5F~1沂* s\R{A\ Y2<)pqvwʋh?:«]G4F닻n$(TzWrȀ
Psp@ 0qF+e7AAI!kmYoAyD _nm'uP} xb?A\n$sH2# TK{&c̝'Mׄ87ySyc 1 AO!ꭃ_6| m 뼳E gpv^ 8 ɽWd )$4Xq_.]
φ<}dT>-1sli /i-dk
xss^ 9^o7_3"kU?`aSnxыc&q IxuQ Ƕ_Po0/ 1 olS:EO
GC X69TgPI-7GZTV< HGP,әv|ԏcU`Yl}Vo8ţP;SY4 ű}#)I/-5 F
Q$iv&*@ Y G!73lu \ $恗/)_Q?ؾqnu(+2zye eP|DAd>}#m.AAz 0fxt G7:*rb
u8K ƯNl6Ea*fT p\*9\p˶YZ4 ydsĖEʣ*@!Nrx M9
c7'I/-'4 m^8 I&P]64 ľ+R BGX6 '"W>HHM |T}h*<{)5kJ8^긚0.Qz μ-jQB.L]`@Nu$IfmQirA7No h#S *1 [z,pyuư,oZ<07ZN,4RςvR`(ܺ|m0 L
e o
:i(#ze\H`K6HM<to ބ"d4d, s$}t~MBy;!~+&c_@iUNY:u8SFuc4Lco!jX|_λi7Ёw=zJ?A%l+!~x&Y4Te{cH 7 e7Yf4(&ip0H}k+HqWHa-VWUz?#Fyb Te[ ?DlQ?9 :n'czxR
- zM H2K5
|5lMi u:3٫ olojJBpm8cv7]&%/s
q7nrg26d)x'LԨ+E{mcEZq.{#Ţ7N0-"a> -.F*TRP$zrs
L~ډ?86O+*.D
A-Vs\ɵ `e3痐Y t~,ioD/z[DB4ʗ\j+"
h3&/:rlSq۪`Uy݄n 059_ :w3h;^S no}8Ρ(ti'2g+!>*>uvl K#D,C#dd:* ֚V~{+_ں:M
ҺfϦTɁTw'wLӍa@RP
;P__F$/ݤUq
@mB aysm8ޯexD}"v
gU[uoq> n^~kjmu2B(vI0A2S oJ` *C9R@w5J瀞1B*݅SbQtxqm˕bIi /MVpxӞ\VQfe"ؿ{%|9WK^idn 9J哧R @=,;vm?
]ceozX[3vb?fx(p]?
*x$/gA
H:C=ڝ, *IyOvWl%/
Vi金Du3b꜌ ^#3k |*&=:-n∯J8)x/)D%*}3ao
36&^k]zpvmhfcbZJ$ycێPݰ^uW:vyI5? |mSlS8/[oi,`j(y6m6?eg8N# ]2'ϙkHo'/KkXM3îPܸ šǮPtpUV\ +rYfKq)Gg% Y
`BSXdG'BmsD3F*8O
07!4I
e b+xd^R XNt@٩$¸ڝy$Gx
nG3/$1$jOȳ3Xx!<*teѣ oaud MHcT',iɞM" BOѸٿ9Yߜʱi
d7MQf回h)& m0~m~ /t! ̀D],xˁc6ǔkYFXD[k[ 2;F"kp'Eu8 " `FJziWQ-×Do%2f 0fEIQQOBg 1f ;l=N֪ǁ܅OGp m rػos1,ⶎɾ!av(t QK5.l<67'[]D &%&ʜ$hPۋzIZ)2ɩ
gMfxvG}'c1z ?3a"C <8̷
Q2E
ǀҳQE>`j~kp57PSt.q/!h+:=dP7Qf&Q?ʢwRo%J\Rfjg++QrBCsb|A.ͦ?án9qyvԁ\ HvZ9=Z_/NzN+g FD0Nkqx`z~ hOVgr pJ9Oy)z1Bgji(j(&,7h
/ϋu`.ey&Fx{9kR ׅɮCˎի};ؤ1e*0wxc8Y7j,Fi{UKM`K5 7.fU; 0(kyUYUEܒqrLN~ % pbj c_O3o-fO4\^J J !H& ij+j(_5WX8&ǧޝF
;dnkEQK`/c*y`r r`rdPͤm!{w p!NSENjBq!-hN :r:8|bCEyb #
4}çWywTmiNYf"&DvU`MXO nztasoصy|oV 0Nu CIU IxύB=L,KEK"D̽3~T[A4j4tĨ(`KvbIR7Eg`,[A]KmAP A?`bЈHEyѽ%垦>̗/EU1XSgg;=E3Qp! ;^Gޅ,L rI\k!w8"J52`v*W^(j dVTEݞ)|ytF e"Li j\SbV
*+Ud~>Jʻ~밀WLw+N] ]&
)4uoa[jQŔ <`^4Kbb:<2o ЁˌgX] *>CciԾ0H(^ y]Vlhת^U&Is)gXυ,|Hx$;#M(p Yy^n .[B~
C 9 1z+qr .zr4]:'T2:t2DMQ ^9eR^OQ#736h Ƞ !ҁf#oPd1 Ӑ%3JLw5 bW~:Cj!0" Dʨט3hԗX>3TpH8SͼQ:q.ŖT _)?~ [ IZa`|]Mېfl.k/@>.\R_m &a :$
Ք' fwW{.Rr2?u;O'Et|YB>LGYw<9Ѵn*\w\<&#)a4De~R55\Z!OpՎyMa:es[T <i%b j_QS8@o\g酔qgY>ZN;&d]HY4 suc8hH * \,yg( y(u`[o5dR۲r9KFem/'>j1D9s|x g@ ?m]^C_ c=u=J1xĢ Ȑa_h-Bɱ:gv7õvvѣ U 7rPC)`UTKSu`*4\m Z=iK
BoѼ1DZZTM߆3A@aoW]^rYL]Aimɖ B "MMjn>4A (1@B;}in-USDdyQ$ v俓!U$%tꏘXNلM EQ7 B`C`yѴ*yyvd l{zN
|G([IЩBhzZPP/5'OլHV#BH&)|B{hw6pځVݭaZ .f e[p(0CNr&PÇV{%g^e1I*VVPoy~g}39Lr`PjnK~h.Ȋi~kNV8:Wp-BneL}d:YOxNI2!ɔ +bl=_7Q k*fɵ3IjE4c4F?E7,~i1j"Is1˒WXk/{ ({ɡ?T˵$6F!.B
is>qP V gz Hګ-P Ӣv3 jT ``r̎`,b ;1JuBWɋb_֡yiPBy.iE cvLf]~o5W(t7 \)ba̠;G0~Xk:Xd7ї'E1Δu?Si:>:ՊƠq*WFjy\(pж?b Q/1x* %z:4'-?Xa֦Cam&[^eYx^ι/֗m+VvLa"3v~CE+ HVUeZ=H .!m+tFyLm:uۤm ߧ zg,?)1m\J 4`&O}V9H n)l4 }QY0Ye -Gگ$l< z5N D uiW3 "N'->aDE@"`#фN^+\c!|.v}]puc$ON ڥ2+/,q ~)zi
;jIn,EJr&dNɣu~̶$gWPx)fIvf $ W#'cp $+$%9ΫvqՍ
r3 [ ̻SK||jWТM g.7K&#/,]*Lbqfyi@_9 Kǫӂ:S,9ƾl\ڽB٪' Z8}ǺD~s1 neL1C8 G*5;Lg?*,Djc l:zVkLaZcuYXS=7>v{6L#uATvHwC M5ӲQ=^,X^f
&mq6-NH̻G%GyMCћ#/Rg0mV 1 1zLt**rGUxi$Wmm x%枯_]]ސ40Wm&L w vȜT [:4V+-H( 㶁;2 S ~Mvq="Mң^9(&H {} A^PsG RD
S7)1ݗ{e_7gk ^oj J9F(=2 38@U:ͤh3Bыx>=ܴ)ޝʾ{
˶ 4];{d몕c`EKƕ ",lJ*4hjsy=ȂOṘB+] x\Zh1)&7rŞ%q3fU~݂ύg e' 1gt۔/]. ?
@3:
nJF9ZEpdYakoyM
I߄]LʽGiy%ʃQM
( AOh$=T^k#$y(֍"&zw'B̊NHtL#,\iz ,ErBUj7(H>Eol<^
! ͎a-[lKvbf+uB/# ѩ2au<
1[PtcϏLߦDPv.ǃY!B4C4 n
1'+|;sֹa*0Zz;:kVKNp>e~n2!p0VS h@?t,|;nLt+|<2k4 U N Etz:h| 7ZAW!#du"TRO>K@+ypd[ϼTGS) ~_
O߷K3/@xa&l0Y{ʘWplX X4T~2}Ԁ<\3-K d(]^KTfؕ1;sŒmУr4Zh+,,&Ix@ȈuM6!6m` 2j.@{
Ai&EFN鷅O$;4礫 "{ ^Y|3\ 7i0@<ޢȧድ@x)T=əQR_7gYQbF!,DaiQ : Xq{9}dU9=ǓF}W1=C+kNr ` u {S1~'wlYWXk'eU2ɠ#@4v(=y4E] gD0G]^eD5 E#S{/Z5}
7'-z1@&cŦ+):hX2IgI ef,;"iSbr5|ݴW 3: AqSszL0n眯PY626
(-a˖?:aÕ5ݢg#chҠ]6y-'Xncp52^S5Cɯ܌yy+jX!xZ1pSP{dJ aI뻥k p'E ($-@l;oy;!osпݿ:g$E 765f&0zz)0kĻ'RLU_"#B1G*v.{f
l,@¸⃩՛VayL6_ |N[gl_0ejc5UR^nC(C`.C]|&xׅP[킭 1i G|8b++'9\b] E6)7$'$4_&+ qUQ+l$O7aƼ+g
O=L׃@))$},
h>nfq}d,Ns YJ*ԏFo βg[YJifA
]
mMQ0Ӣo躃qzyGNy*]Q
Ě|1~/H^`7튔3wdqM/pjV,sc#4۳u, M99ME>rl ȑY g(9m7$l +!6YmklX*%
73wl^@1h$fRO">2FUݬ3<
ØݙЂBS3]kׂO)*UDN5[1lG9- ,ɝF0&0~"B:їɓp`gƪzIT )jvcgKge
ZN*~߀5.삜/⇳nW"NjvuVU&~9a4K^Zƪ|bU#Oj~;=,.Iz86nRQʎ< &shRX5lJa:MV-^1i=Sx/jI-iPlaXYxBhw`jUNM U;Y @/&f~ 1_j?L:W9,] ?ڳMmS$Kf%|2.JC HYކt-1@F5qR,+~r%
|ˌEч&nK
1hˀV匌E xxr [e
~/Of'Cf ZroFzl
DeK DvԿps+tӧP;k7wjc3g LSCkCS&'nJ,Z )e2CQԟE\{bv`Y1%XQa41x7|^U˗SN{%MhA=-#l'l9ڜ8W3-4P*j R>TN "Ixݴ]]03.
\U+aؓ˙KeKSR^nOGTD[C.X,5;4?Y8RkOT+
x)"T$M T@BhOx j(Whֲ6HA7ОލxΞ]/P"
\ %fW(ra$t/7ϦLb5W/QӲwgSzȔUbokX Γ-A1t?{F'dΊQQZW[Jd*&+81;&v)q'%=s#W> fh:fyOH 80v[MhS*4iݤ Iq_Hờ'9X.=!Gx6lO Qt)6U~rDZ%JdvAOoz4 |¨E,DC.B&0zS֎Sd |<:Թx}wڮh ! b)69OrZ! Q;!\<4qvI4n:CA]K1gao9U3?tmZk]u걻; 1Df/` q@"yaA,jU7(1 k6Ḫ4>nXWϱQx%{St~(J& -58/ن/֓
OCZIL6K#7G2m-d}f:L >˯3L;ReO^
-Tf2BzyƝD ;џwjG zp҃67`0 W/$\Q\ӭG(wS>Gǜ]3ߗyV/-9`cJahۙD18ownXR
Z0U6 uE| ;.dq0Kϳ<.{јfWJfyݡ{G"mmF-i-2_7Yk N{{Bw4B^) lpQʮQCй
3ALׄv^qVF:ȹ2
њptH6g7Ӑ]#f#mb
-K<أ [4.،HU)xo$mo[}A`mwI`r|WTj' Qii@h|DtEa UD2kiςZ[3,`D E_gX\d& .b"Ǿ.t ~:gN
&qc-"i<@a@\wei .e
Z}y#7m`?L5U쯷;. I-4ԧC-&JLY@l'ޜק /r黜 K`{G}Hţg
5ؠ>)>X+e-~\êVɏ&Êykz0^>Fi%7i1*-k]_m:IҡG }R%C7ng~^đ-\ II#(9] 5r2͗\ g]yY 9n.gI ohh>R/VS]x0Zn} wq%QLjFR7fi]vk*UŽA<7 Կ;qc ^?PV
3p(1/"UTһ6rݽp!ߘ+_C04^F-h~ Dpti>(>d9bm!8wOz}na
\_ 1^ |pg qwn&sF}m:Cđ3O @" qv@6[Hsf}ի#od|Ͼ=9"%oz O&Y
Z >$fz9oUJ^e,稁X"Y7,̧N%sFa nU{%pҔx^2YGD"O L<5(B+L+[RuuzwS 8LO3MUhHx5vyOAxtkL7 pAiEYc8엍
AŲe [GHCyeqč]3YbsgREZˉ*
$Z H0PVWq=p2bfչ%$v8%
sWͩqp$cD7\PZתvdfg Q4g\ⴞC^*_t$p' o}ND#g jj \ >~#;UPD@k\ \DRn.&f G~1u qʯc+O~f2憥0&H^ZN?W.٢ ŨiEVr-80YܨS`.$^}J@#7L"Ě(^rC/S4 wunaX_*dLs6|u`dUHT +9ETJV-ԏFF'L
P,>ۧ/%,LWUUA6bL@Z4qck|e==hF} ~ձ zBQggDB|,FNrH
!mxL~0j!ۅ6V/5JЇ 1?%Fc$ͭyF35It}k脃y Z YcxD''Ӛba()?RF'
1Xb
XnE Y
odq<Є/Q ԍe$WTR i~9ڰ*(>^9VMimw?wGv#Y2 s l1}뺼 6꼎пy G(b*&:eWPtpl"%z Z3*g~kK:R|zB=Iq`|:O Do/# 5f[d3/2M Ƙb s?nP^$+}_q7J8V6%m=Hc թl (,#sýgz|iP+4à{9ej'J |NW +=zpS!daPi6ҥ
fCNϯ?a5OD0 w.6PSMR> t1F!^`_6ܹƍ ] 㥢#;6[FpJάE&*HP7*沄]XMb )U&'ןT; # IQ "˥lE(F'9( -7"?2g : L&Frt4N\v-KY1ޯv_N@ɻM|`n- 8_=] &O#mQZ MIC%~mr s6Pi«|fTa ϳc tV ɖ?ZZ)v Θ'C'٨e=e @*b)EQ$mRlNxSGZL3&FL eJ%yRPwRRT~
_C
04h{
g>VE܍!mC EY tm3B xlBbuBA= [ګ(mƆ'豻iA&:JGrcC佈1 p;Q+
G}|##HQr+
,6naW*5L+7I_C30]qPa&#\z
J,;Ki/O y<чDm TQ
V}`ٍffݥk| ubahZk$qZ뮀wo)oBbt9hkPTBC@Z/Ge>xМyd 98gҦp%X..t! )2;㣤`t3` &7ܜF2[ᥭ7wa^R`J1ڳ;2C;hI7\du | pPVu-{.?⾓pa33.wZ GCQڢ
f[*Z Vao9l
FǧNw0FP
~er4c%:Mx"(B20豽av ,ȼyH GWyˠD]+f}6]it@oѹ/k_^DC|&y]Ւ )-^˶ + vCne6\Sn9`m70&.2 # wX8?PmWֱzYGՓduhAAm&'~KTAuzߙ6,!uDOku a6'wT5Spʽ3}t Q
i-ߥ`%ݴ^(/&*%CLk̢8y@dl4@˂":lJ8KÈ J%7{33u\ϰo1I6,JE0[
l,$270KsGSᶷ>[gRYFE 5ըʄ lo%С%&䰥bMtVQzF9>PlMDnBGZ&jm}d N/'~)*s[WD勈*iLq
Geb<̽jiQ 9m/Ob P_T:Ssf~g Zi! ըI CX=wewyӉB,Fנwt, -x7d?Hw57kuZ7E߷Df c_d'!@5t\]_Z'\Ih%&81+ :DoQGH0|E (*ĭs휍
0쪧O]l;B
&y0 Щ*oZPnlޟi}{[`&ߕh&ŰOWβjOSʝ_O+w Ih eQJQ o-|RRWQ.
"K X 8[fFi@s6P 8{eS< ^,V^@Qt 딩A,d{zRS0T4L^ih.v1Qp@#I?Nf Cލ\A6{
J6&%θ.v*rflDIÛ ݠ/GF+ h':UƚbGN"B#Ynz 9͒f{ lAKEIu@'k JTM Kc辌N:8t;e~`\'$~$ԉ\(
-(5Z/E: :'9:4{SaD[
38D,C͆K
ķ7j= #$y!,wPi) =7&]>(
,zeVݙ i/k~ތrrb+!H~t tba;`rPc.J*Oۀiapt T
3cj(#M^ߊg
s1[bήPa >RvyvVÃ3]F"B2-qƵN 9 mܰ wsY$t%| T#.T[qTH*0s5֣+$ޥr+t?r]JL#=
(^0t Vj 0d
XfAch,GCk .~8{kJ[ǯgwt ]{Heste:۔.!sph{Dn2h2, T4U*:2 s ,zZ&eB M3ve_a(>5&ScvLIX oq| }:!G\D>a1_Y4mh6I$罹2Հj(7Ek$,(~ۍ7xiTzp.$dT:Łj{14]?7d3v<1W_DM `C`']d K%>,7wũjj{$syQ=H`GשoFQ6RQJRW= G-.EE7ICKz9dY]:Ǔp4| fQ-:UWș'dKC+
!> _g U]m444YuS 6M
]wq^զ[B k^ m6@ 1Ȕ!}3 3J:.+b;K|c4z`U*
. p}fiH < QI?!JR)xiM{y||by xECQ0e?wL˧8k
9*U
`L)wJy&5
:c͖g:? cD+4 &yֈ%F6s7鳔*Z )9?jx^cbJóq "q]>ITVYVA eTo+XH3j~ WJ{j|곇=n (=n?Pqf jk\dS
Vg<ޗ!OA{6;AD.U$MZZ{ 闚ϮU aS̓{Ylm*]̛56yd[ tﵳJ|PwsAnxM" w$"xE{,#
pý]yeE;"qES(4 TƆ, O m ٢M<2ӈ[ʠJ +չe@(+lFXo܆I4| ƘRޣD{:Zm 5ok76ƶЈ k!S>M3K\MB7Жk@bz76Շ(CuG^Wvϸ(Vy@'j*"7,9tN*{ȡlOkĽ+y"*B m08 T
z@SZЭ**s(3">- VFS3 fQ>%kb1{FS'ARQ,c;wfT_o/&/7yP ^,*>>A U7тxuJ{s}b2q}PnfT)L@pw|{岸xOPKG w@tDJ2Unh?C|nMcCSvP4}`fBRżH8ʽ"=h0g EAX7pW7`Jt* SKFM#}1qzL1.E@Q5 2zyQ4_-$,4p\3S:0 t@ٜ<#ꂥ
&6e;3ξ?0ki?VB\$RZ+L,yo_e͠VtEJMȰ9oz|jAܞrA #ۭƁ*ޘ_#@עEC pc"Kg.T.O!n"3 P)?Z"E=E7iZ[WJ:нXԹd5GxPm
CY N?n *dyԨ82[H5*Os D%:Nf5IZso Acf&iUI=W:\ةeP|.*嶍CK5Y7') & {sE Xy, #&3 }Að)W0PCE+HRO@$&T~U bzK'RvzWI*8-.KHMC*M\xh;~F宬fv#4]O%6c@Z* ĵ|Zp?`wG9XA ˼*iKD1_"E,6 {ן1.Ꮙc RP 4ofbCp3Yw?|ٺԾ<heeG89p
Ϋ,#㛨/m(JX$ݮ7HO[$Š41. Fb@10DE§ ÙXaD 'ރQ:@ )0m|uZG6.']-Y^J@ޒ &AfgV+p $N Ch fwv-JLT
qTIIIn&n3`KSY.(އK0w `譜rݙ+2B^E>e-Ced?ÚR>w *Qb ~69SnJlmjB.MW@(ꋤ| b>krC7ى M\cÅh mYUJϞ[?D88±h XTۣXCg)2D0r5+d]FlC:NL{D plCm w@C1
U;a߂G ')-/pj}ᯮҵrH rsӄw+L7T[b/Z-RZZl^_FI IL#$aS2\} iqYԄGw2T*j>;;X g| dS<53ğ T]XdYh뙜8N hj|}ӟQ,ׁ'V|F)Pʀ
it?g~[+6/ .\Uz2꿢akCm ?M| `\s9#%'CFUNmѨ%Fm
$\~dY* 5T?_Ė> Q`-_FR8p,̎a`?IEIee rrC>8 MɝhCPr-: jdltN + רk
Fth-2gp ;us)T= IƬS `j!FUF
,U6("3ZONPdGLoq1ɪlhhH&6f: SzN 8?U"die+XgSԞj,BO#5 (C ލ01h ˽# X z$/iWjW0QmT v$RdTabƛ
pM$d]/:t6Ykr4eomӹ"S6 +kn4`#uv
So>3(:i2k Uڴms(] MITuKAZg75G<䛖cRWr
5V c]$+y3yfƙF0)̰F6` cJ'Ja5C>}v]~? ;n#0͓}ݦTU{V*`|scz܁|#_[]g9X!c>9r\$;oЯ!M *O 7^ycڏ_۟ J')1\ڄh/tٔc>]|.C[3n0 O&0M-kEL{tֱ+wZ.QCQV ,("wLQ/! ctPn+ƭ6^c%~ [ S*0I Y1ƞ&2Ct@i$% 1ύ3 f:oe
'>0L
S iI 6Ϧ
5%nҋ'j&_j}q:E =kK*tÆR gr,ڿKCʬg=ߌ昱y L#RD
?Qǂ5c-G)5x0yg=|o eO p@a;xtF +( !'3#,+gF?/~쪲wU 7HWZĺ5lE:L'?=MdHp Ɉ]{)j=Vp&O>8Y-럮S}
Kw -[OWOe&J ,
ZFX qgiFÏiN֛:I^ @z%n^UVr{[xh~ MGi* IR~c nx9&7<ŷYa5BoЂFe -d㳙nqoz,͆2ɱ,М Av_ZPMYҐX#6#4:&Y Z%+ 묡ӟ -loG v;șK:j] T`zMc - F8O`ElD){B9J5ӑ:nP.wGHb23#/Y)U !1 ӻNE8WTR{*OMX7ܹ)TnqᦀÚ;mRqN³1p i-@WZ+j778l74 v2 gѷKGꝆ7 מR\UhӉ| 5ITIz0ӦvD^Tbq-u(V+@O2$yjKfֽ7z C |JE 2 (NW662;& keh w-$/fK ,; (I58Ա?$69\"v4-c)9 j{ߟ#8{TIdQΓO\%mPfNԟ_aԤ 8ȜVeFD/U: ]qzoJv( $qT(5,䂇Q5abүO}QTv$I g0~E {88T= l kr:So&4R"RQ~/{,| dea- ?5 (v1qj~ [=Ar ~Y}RzβaE/:^4͖v{j 7#;D9xMŇu2)@9U#~Ovw`$FZCx=?=P G `nlaػ>)q1p% $>O0q1/¢OR"k}y6tޔ5~g1ʤz];p ؊j͖s{ z
wmCt2 D3=4` N caFecٿūJ~eI
fk!uj.FEJG!Y[l
ˮ'5z wNVg/ekE t $B
H@>p
o/lJ3dkl] ΅
1}33tä(O w`Р6 d E{HETC2,3ED2:TX撌e*,ЎrлEEAFWWQ]|W[uw#("whuȘ};@a);f4Y1:Xw+fe˘_'jj ؠy ASXeIH}M>C)M <11OS2.208V1hǫ/ҭu/>Rk we ,<r
^%v :y6U7
L WPoaEr
OϤGD _՝;%GM35Ì'1NqX;9lw_$&/ŴM~"
ţrp#Tq݅
6`䤫겔4G) v7H0ݶG'ﱟ̺&I۷_\ \kًtsMصmC:bX?
7ޫgf6Qw`ijw5xDv[f[qr3kgW#\qrEź& }`:z@SuL'p\$/S:|I̓}ƒZ Hq<7oGL M~G!8CyZLM=il-ӽ,x&N o}1Z
3w-BG4dgab?2j{ߪK+rSB@ pF2qQp#z2iU۫D}C疚/q &qVفFqaK =5!kԷ̣ݢw,a /%arI2n'"Xف9NhWl=Ej O+U\f#zy(`1Ggҋ0, ŏkj1E7| +Z-l8XAl\86 2;|A'2X!ZH@c~ t\Q,`i8(@1КctF RhmOaR}x},Y$Uy@U?N0DYP}V2CO.,iDTU/Ͱ6,c;q-'NY}[| U\V\x\ NlG*<ɢ3W]k.@=@
E[ ~&'FXlu[~P-M
唵DrbQ
~b7acJ九pU' vqn8 憏 bLګʀ
iЏTMc%M-Eam
/q2Ϩ%Gl=z/nZ|4a|A!s&%Mj@O*.ƹRpC&`Lޭ8Eʽ1ѻ}ʩR%9ghɼz=ZD!mS =YR5$-r j _ǪYr /n䥀30ouf4l}63T;I 2F]C,Dw43X-,a#n~T6VV ɮp#iHnHOEwrETxQsDXKڰ 4"Z6KXtu@;ypK˭vD4wkgB.5k*O7yYp(vxՑF΄iE2HSr2-yP 939 =Ey~8%!9GU8 x.`.[{"'[}U)?ZdUVwf ]1 $96I/ xī`-=[`3
쵌u,pNa"+տ*^>? ,X] ̴>X8b9qHNdKvRX]k
F&g8*
i աT?)8W`f\Ϲ$VΣ9(
|ktK2~pgv+e zr( p,صaBy@2bEDc }9SSJZD2?>JNYi^`|>!RDPhE-jΔI
2Pz]Lho\+OLbnR
ǶU De\L/zt*˜pi[RtK+ q_8#Ch/n!mwM5uiZ^@ߔª$egh!_R3;`QV9o Ph 3"D ZViW9F%; 9}6y!dM Ǥqj"Db!$ڡ⎸
J3RH1
yN Mt"v&vYOI%3,j>ZUM[6*js% \6Sg' BS WV(>o I4 nmց[eG~KM>8QfJ 3
iu,9e@Jv$biH~yD7 wdC;83izA$w%PKAC@-
c5hQGC7^̰E{ P p1WL(mz !D-zit 8m z(#![PyEug |ŔH ĕs*P|uIn VEW
p2(#s.. ~V-#eZhPuFg~ sl3Vjc%mLJou+8YP~}~cujydo;9N# óWzU7 j
*Y(!d;&Y)jmzl| VP[Ƶǀс ;!'oq7:Ƨ}4C67&x@[Nl[ k۪G@4SY-ƩjnRrT꿇r>TH
mF ֝syB 50ZuMz߳;+AEjI1jHGwJlDZb(X
784=JSY>q W ?u-¿1Ѡ C~̑pST,/TRx-%4<*ߑ {{*ګptLԀ]+&{DAVP씵m֖{ ![v Sg {&*Iˎ YMOʔ#p{/G/?VF^
\b9pK'W>A܋^]5ܵ0Tr4m%G%n`Oby(`{֕: h)1 =YҶSRse|j&_1oPz0R \z =kpZn/UD?3yĜlx~68 gfG{5 ]I( rRKߝwلIaޕ<>[.K6@vUM "UuϬ e 0 t|Sf+)m! "m˭JSݞ,7vȷE. քH~cx7 g&앳K%6WIsWXQP8 D (J ȎŌ aag 5B\0M1_{F/H-˃^-42CRDžxvlr!vtOV(&I҄ 2ClZ Rlxv 0ij8E@d Rӽ50&0SxTYWa,W ?I: =PL[C4 1#Yl|iѵhzh#H܋ԇD:?4M%Z0֊7w+4,uFuCh*=Б{bܛD]X
BS:$[> }b9Hq 5zJHAn+w3Ȝ Ke MşbA" .5
X@mh~xdk2 ;Kͭ]JXF
z_X`Muoɞ74d "eiYk4rgE0j%ԛs,``\; S1Q(TV)W1o +Н\gZKh* ԫ:Mbq\i5;ǀIRi]*'ii! Nb/'kK^
`9;I\k
-mD Nc_ V0r_̿,"JXI?O=w؈Op:ghzΕI 9'TO }?صkj#|H?7K~>Sey6ԴdɎ 0!5%ae?3!m0 Y%' +}+ ۃ: B/QQ AUM jxe!̼yDr{-S|N6Rݥ/ .Kd2U2r X5""?$6"ߣ$uR!OeB5
pR\ʋSYLwЧܮƆy>a܈]0H0c:[nqqǿU U62&H:wl: "dX:LآBOLY?;#toC >Jdb!S =3S_yvc[sՑmjgYL)/h.I/ӇxD씹F^]Wrt7n.Dg 4 i; "MZB.'Z==fqś~fQbV&0X 0_I
Y==79 ˻a2Q"/7{HEALѵ` %z 3ɋ .V:Rq}&|
U.oDĥ58GኡL8+7M d fatq;&va{lM*?)̱H ֮;[0 /W-{$ Rn|&ߔ \ s'C3$C>{A7Y;0}V t8E3w!jW!)\Ez_uad>B_ n@3p
D]9`_ZxFM^@=CXIB 34WIA"Cy]TzW%#.*܁?-'!McEZzO <~QPf2g;JחwC=I)_rNɼdIa-5a^p oQ3
ŵ䂍 ù= )e='ټ&JdQ))Dv3S~ L
刓H*A{ / 2 &N
j9.ȇ)i9cO5>d4SvbMo2/ks([i$FGD>o;OAJ- v}GvT-QmD31WMĂS{@xk\'iW^D>\fVd 7,Fj#8.瓶 _)Y;ݏ;-kDiW*@8
vyYN'>JYjZ¸hAإb_b?\u0|Lq0ЧGݡU Ev8r zͨlx4|+Y-į_X If lz/a?[wyYl0*;P_[Fbݚ 7R &
re֕]-{aX}gC Q?[_ɻjN座` I 'y6$F5ݎDoI! y&
!45˹zUp|\מj@7q([UeVFHS@y=8B?辵:RHF֢gg-Z氓/D\@G\| IM 6܊f{ =Sp VÉ䌨orf>XO xϓ+n55Rk-mt`"̐y:3 gsɻc@V/76- 8
_0|ք盥].G "rBgQ okOLƏ w3\L_R۳,AW [F0:MJ 2I M$-%ƵVTQ9F(+RQ r\|g Eg1;jn]u.':s耂WJ<(nz=0! V9qk,Nj{" !dXGg@FJqt7\ I.p[
RY^r256,(ʆCs X o,FYȐ_xl_G #G6kOP \d)/ŷVf/w`kً)3ըoIOrHRV+~WWkFwһg~fΙڎr(yxGPmi 2_t&fڕj@Ju6dZF
ZYc0e-*l Y
R8Q(_ׇXOS ub :$Hve8%Eqt--V"zܖL;o*{?yb
}v S ǥ魴# C cO /NjRmmGpU #` M[c&wӣht )ˢV F`~1dLU$ F |uz? 9TsH8&p {1 eV/hJ{qY +T spl^ޅ~Ž=4+ 3Z\!: ~+3z%&k\Cxj8>m$^wҵfӃ:d$ 1FE94ԑ!nL*#kZ=,=3rѭ{@7FV+!9e.mBr5Kg4K^ݝTB+~v N<8>'i_F9EJXM KE{orx%BUTc"a>ޝ62\:a3$_B̜VxxCFak1qF)ʠqs$ }
'_
] oG=-W%:& wF02FfEOgC_
LF< B2wˬ#;/@^iR}~ .s*
)1n qʶFx_]YW澛 3BaE߯~
Hƽv 8MgvpK%
F1D:uQ@b 0Zh%Ubz+?DMLVԤױ ɾ ﲅ cmޏ͙ۛPjZi ےOpD79`ZM߭4 uDHMteܿ:wҹ`\++ DPeʰ,`5&s >e!=V{͔w44*u:^Hb712s[&䓕 fcEp]Z 7 ~SowMX^t`rv9 ,m}aXF| aXïz\)X_#NauY`w Ti|q7YaGPt5BIXԋAKPFe,Y D(
3pu^J|W 'gZwq^s1xc}2LҜ|$r J^0 ]cZ;CX٨f] !clؠḾ4fgt& Q _}(D&)~ˤ`އQyM" Y_L_w/ R5#GfTߋhx4 MbF2E^ &_ j o"w~NKO'rsF53)F=7 ]ʣ Q%q`|NΖgws ~Lg4P5_N/ $({ʣ)ɺFcZRտl]Qxma?+qs()WwQ.ϡʆ
*IF*q:>)uDp' j;
%a&ѳ`Dڳ;_DJD A[RN$(c}댄h
$}蝘0)8RdVm서td)~4+C64b
CJ̾/Rw8%4j T^+c QpE u5v*}{ܞr"'Ek OW7;+ҽyh }:-S R(hCVj0Yd!r1 sLO_ma!sHzJ&e> cg|ɯ^913 o&M,.X%;33&!x τ~ T)(4 iط N`b$AĠv8u ="sfoSkpS2=Y{
Qv ~u1 Ȯ$gInHiU%3e60s:5Ckuي1WK Ѻmm4L
D ۑ7ʽxLNEe5o*kɔ^2v)OI,uIvW7&> gę$ ҅b_̗3 V:k](
FwI l p3k뒈kR? =ê
3SA¶*%i;8@ē<AwM~ tA6S:giie8*rP;$@0C @}5k,KRF #3mޖ2]]k誃_$ )1sbUśZ>Ccʹ_
O
DP\k>U!{0 [*0kF2\CFR`!07}£ .OT`>c`YGTlfŻH#=l))GmӈV\)R"zFDҏ$|#4 &2t7jDI |'Rb yuM#`z`"f=ΡZo~@ƔCJy 0!?q*Ju|zaR|N U\Q!9mL)vk#rA}/n ԽJ [-Tlq=v'uȋ[;&fԝN}Wp? f_N/K1<=ϴ.]NPl|"jEviV-*jzW|pσaG;*ϫa+EC^oW9夏9]Lm%^Dc:2,GXIS}F5Z/.h!ԗו5goGmvvsgL!
u5^@#P^4r9vQ$Vh )C rV5xTկUS 0)%q_I.Xc\ fࠁk>VqlUco>:Yb 7Uɧ869to 8jFxL#?7Mt i_ " H(SAQ*̽aQN1$\ !
#(%5#tL|g]ۑ+>xEjoDI/ߺ|XNF+W VG~6rpv+^x{NusAْ˙˼@$o Nl"
9%~Xcϵb3?ɭlN{)FqXwHB"ȥbʄS wj-e'y Q̉Yo4Z~<:SR/i2"F~AW\Aoٞ O3 d+7jy/GKmވRM;_< Inr9]օ:
78 9xg*x^iMT1ENSZ[ ĭ}ojGӔ_$ B>J{MgAMSH혆9Qbr ˡ؊^ѾS2v;5&͏!"R&ǖJ(Q 5*>ATa./Z`Z{y=?[ /2s9
` Q+ҵۊ'av|hQN?_KXh#}
W5E/c9S1Eb`h#[nO+kz)H}Coi廚
p}J #ACZ 9߫b[(?)2*CY)JONؼ4~-wR[75-טYE'P6 0f_ +@Q:=w7D;b( Mgrk{Y n 7] +])e*m#2W*R{,hJ
>Hl.ͩ q55"!!\}{M :JI0NCEL Feo@I UZ$fw;\q Z%gvnF2ƞmƵݕYڅ[: "r[k(^f .
tKIgF[p \a? W!D'HR} >Rls,/aCmQX =ﻔ 7bY w =56-ox9eٯԡQn;эX&vu.pԤhnXUp8n)2tȍw aC}7 p
K!D!ar^3l1٘S.IH` t~ @8f XԻ\:@M:( 2 U-֥S-82n"5vY{E40^ڄ D"bHrj1h)ÝGH~lz p<*0:P7$ Wk/#7UA\yElw7"
փ:ύNc~?ys7:m"VcxHIR
wJYB̉%A̤T 8oJCxb[Հh]3US$H0xa~XK;Z[5Έ /Yc^5e=k(J@טy%>p,~{ `넴SW o{ ԗ$sI_cP+3y>9,StnM)ےr$@;Z6H Ce_O"O[>|fY)]Pyx#5fHtx$*]SR` i P"_ÔߙF<́&I|:'Z Do0rմtԺ^QKq}Iba ;(/1zIĿe Չ^ghZ3%m< &IkCt]hE tZ.ʟQЛK
օަCO"M͔c# fل= t{k @:&@2zz|.{+Ƙð%r/Cn[kۙ՞WuSI%@_+# ) ^6t}F.U_to/(Vܨ8WtP>&,{
<
9;~ f2q#<;? 0aPhh.6T~
lCkodWvԛΟ f? 7JoDp 6!Nā 6 -0WTf:6mA3t {m$.7K53IְT Y-WE 1s
\"hRs\{c_+C'؎Mm!Tw埊} 7m2\]Qlm eUaK$:EN'AY2 1n̰YüeN=^ &|͉ |O
8" k{A&tXoc Y&E њh1#*ݴ*F\B
M:cu2+/߆1{P H;l#O kM}vhLŸX2 \ 6zc|@ %ʖ w.0 ]ⴃX
+ :~&xt+"Qb%r
e9DƋqpj.o[Sre${ӸҖ^bRT?fFz: 4j_ࡓ qnv$ byZ{LV5ptA =+us)(zug)"9{8GO57,R#C5 d jj9ww\ی7YrTch,w22!DB V@9 s3c[ \wk&$:( (G&^'l&ݡQ! E*>7ꔚX W䯉HAu*뵇M.
(q${:,B
NXV- > t` ^%-H!Q3qĆo;lMޏ*ON6;CE)天n #d"W%~CpfڢtH!}3Fuk{!=#9;'˶(gtLd*IedǶ2h Z
2\Io_Ss%}ؘOU6 P]#> }oW x^'uٗ-Fr2H,7h8D
T(U8qnًI%ut5R
rE
8f09 )>+{&t
1fV@ўs2\'@̅VJ b¿ǹ8䜯{t#!w |SVSYql Znm'l9 ti XnE<X@ Q Y.aȔ((:FB>MfY0_}
Zy\~s pHbHKZE DgK tIǭ0vV
A=_Rz>UӤAek%])_ R;}*7b3 zT%$w na VB ٤%~ȇ^p֢9řaV J /0M k
]ZGm\H_*n:SxlU+X /m!ү"ӖѶtMG5ԣ+ 07wSÇ )u5 _T\"; ~Pl{ٯ,YxE t9@^\dƚQ 9Kyb1r*s&z'{j-s^>a)"
;% "e ,V@K0JK䶎]+w*AO5Ҝ=uMu ;b)R;SB-IN tTK{:$!PЍ5nqK]:ܩ%;KG3E@? D:P#Y A9;;qO0eZ}b:7 Y=
H"/e ~Ѹڴ[bK\.GZtʃP{#s`
کU_2Ӡ C3ſvMs`0
a- {JI$$2
| (}*C&Crpg[laA)zz4L
=CzKԧ ?%+ bHUymH
{ )Ɠ$WX7ƽ'n`b#zh7҃5 v>v)&Cd>-Mr]wF}w4K-C0!\nSKX)ޔ7n&]X]9ɘVv5I|`a1D4#<'>2ZmXGK? cdE'
Y"0Ddu2<6!Z ^ !R4:**4_)X$ƞ&#?Doͤu /}Q@*Ϊ2'jxT'k
T-d /E }ڜ5`= XUH bܻlL f*u}9nL$m[hp8?|2WyF\UX ZYGgmǣg_Ts#îB k/Kݍ'g;YPܝz\:(\: 6> I=FfݑڿpkMH7V<1MF-{\nµ !c1 g [' ꌾnTI132vc6*{v*bR٧TA. +!@LJv7=} -|倛R0ٽb?3gN߱3$i{,ğRwmh:NW~9'沱C P w*WexQOB*-4A&\8(TdFAZa␑F:m ^:zlT"yG
Opר-xCVy):{ʃcS2 8lKN"(}R%>VpY~x~얒[<9ic"z81 V n%dwbvX!,)*뵙:((7.כ^%<#x8uDRWa4O+&N/ xmP C5QI[{jyC=i"1Kڬj?<؞i6R\ᛁ t>Qg 1v4[iT! 1;3@bمJ Zg5&t(f%s"=})&#b 94qU~&AIJ S>+*]-0l$BNr.s[`I{0vf\aх7ȏWHl/涖sT MÔ
Qǫ_
K7w&K ȮZM[ o"Or v7cIYNmRe˻lZ Ggd-DON*sp_&'Br 2pLC~'`䏰'ig*@Mɔ\wٟ{5 -xLsJ!.'gB0"[F0tEטg 0&`ED7h߂X9IZS30ӄ&^pO A7χB6lK1.㡣,(#bݒpÌn'Ay.-\jҧ!B*+$@ 2p[z %C B
$7oZ ]6APԍ [zsjYwiM^,cv:9Pb, *.J}Lh
Ą
\h.g9ՉEşСڎ _8 GQmVm'# 5ΈBՖ`mi0i 7=ME-R zƎPO8I?lSmW&h[/YGJ(4_eԎ#jF6Ev 6tI [y܆dCq֓I,!vG
pchRG|H: 4gݎ#So RnvqGșl/12f#&ք҂65 ۙ`* HQBRFWvq/Q VnMlY|YӷVPd)Kkc |mǔwg% b:-`fodFPjq^O[ d! Is3d.VK452TO$"۠9ɃfC)?!m$-u^ .U| #(K\JaVq7&x\/)~ $ llضP$}!ȘuūBπ~ 31F'Ha`Cq7" KɋLd\w/GVD\yVij(Ax">DFxlAf>m_%" 3 lg}Sd #*?wKH+8p}PΑ" 'p:L :ک1-{ ` 3] FU8bv `&!\HG G|ZF@ ^#
W0It U o@Śg+EsֲYOq1 tձ. Q,a`BH* yʎ.C Z ! q
imwଘꊈ7Gx+gw2
W T]
L]FO?q)sSܥ I7ދLaR),H\X&l'`W2A3<۱AJK n->XL+O+ML+zFZ1bYi
2
>./#I0mz{41rj~o8hyf=Df[6i4bBc)ɨ>m)y}渒&go
Rgm1Wk6XͲ!)JGS9pת{6 wxtQ*ra}GcK ` `Htb&i;zʞt +J =4Y/ʉXiK֫O=|6 /lk3ŲX 4/ \Qؐ e 7'>=j{o_wPoi|IÍrG5M Q" FpjcjL\,@5% Ghw`(U =ME,f23pVBi>^/k[sw^6E҅մİ`muǨ;P!AaEB[ 4
EζzUsb
&e?y98 u)Ku$3JX40$]UJNÌ/K$.gA֫%A(8tpJ|sܼ:x<6e{EX!-OqiIFɩ+n nP\1Uze1E UA[^?s ~ʱ @hD
$+-b]Qv[9G ,%5oE`wR΅;)-Pr% Kj* {>h9іA
{132 s'
L^3
M_~=n[9=`־
|Xo
(A%`LEjf#}cZVU\2+Qs|w.,0!ݎfsF
]
NT
3%wc>9h̶oBkVŲR/tbCЮ
0RS`n[@l[N C+,M7[wg)ξIu y ~FZ0cYنiuG1٩܁?r&wL~cG`:|=E}(-o}J2| fkMƎ>̾O1/6|N?52y ;;R V݂a-;P@ig{ߊӟ.ԔE(B*-yskK|l@W@0hK|clJ _f! g^%eH-wN9(XMTHX*q S8-^)Qᣞ^wPQR D>P{vJG; 5?Z+lΟiÙuMQ`h Hm }МPNA'2B(gM^G,fmGE@ TϝHf-Gf}M1*Q-xRai!'7!;)^EΧ$V'o&uh9[GX7m2.\7::Cp"0{@w^Rn; /[8HS
T@9x
b;Xգ= vkWiQ~MQ8Dmkjd5Ts-Nz ʡd:pl`:B#B!dMȺ3ڜ||އʄ$U2wVC - ("+ C#ZZKwLDY
i ܧ96}ox$ ?٭n
'$Ƈ3 l]wPqƺNp C>lavdɝx|Z :.\,H@Xt(c
KR{~ kW,Ƶ^i-nN &]_MQ]nvH-Izdp@ȋIr nfXyurNKMiLaN][[ O+)|Yz wo : Cv",=ye /_Dg9 tѢ+|^Koo7a۔> Zѡ :.79e"2bt~d@i)Fa¬и(4$rulRz2U
!>U
P]9LH ߔ\ ֤f*`!!sgR *SfWUz `8 qVEy% y 5z K4;SVװsJmiP85G ℤIb ߉q1ѧֈf?#PܡsX[ rFL{^" o̡!&XgrH~4M @p9Rش)iOuDE h0o~(5 YT~`ŀq9 z S ݧ[ؠ{v`x+d=)F#Z&ߍں@|
_qF7 & @C wުpGqJ W+0
Xz\0 uP2u>ev+B80iueo 2&cF&fP@n2aN
\Nr,Ӛ2]oNiV`U'6Wfeؔiq\T w =gI+ޫMYbۺ⏺P #oMO{fj&q;͙,]W~Y\5PjM, 3yS%mkƴa{3! 9{ՄIt͠]r+s%F T6XSJTIv1>KCk}fIFo>vB^YoA$"JP#.%rvs9ӷT`ϙ
يkq%ʪrlс|H[XR39K 49R(3Md-3=pJ_
\ut;' F>k"qSD+nICMYaEHPYmEIwg5˅qһ v$Z*2?&tI
O3xu{ S,:A[e 0OSy&w
tzv2lg%:RWd;AT@bTjɸH`1cSLYz)g \*:*S0;di
?t>E
%,k/.tRyݢ0 };m! :Lg}Z 1XɈ &I)T' DwJ
#joC!"Hv ,V!>pW!zYŃ%I>,4Esaˆ#
U)v}8Z%]neq1v
bUtۇe
Tx vӝ P[,Wb"2D.ʳtNeZJy[Hzhpy{s? d UӣK
AY| q<2 r6A cPa ݧ+,UW0t
oowϡ"k,zQ9Bk <|ubƴLo@BzKW
rT/U3ӑG lK̚N+2\(ߤϸjQzQ,jⴄ$dr̓ʅã+(CNF_b #%s;ck\ҍ4'Qi/el
UM=aK7˒;tV9 0 GEj1ԍZ,N6kRlt3ObЧ9>̕6ɤFzW[.3t&)).T ]"=m N\+dVeʃ(] J r $A+AׇμY*sR6Ø#^6-eÌo!RTR"L?oPKF6[6"A+F&U;QU3]/,<ް $hTy^tԬϬ'[4:@V6X5 MrZT/feOy]ʩ 0pCM|}t(+tA@GNy G/:1[Q# J *D1VY*f OE/:!=2z4q)bNmm./ -MUZ gf1x
TgzHך{Za`K)8e ML~.q7zcv{^S 9P% 50^ N K+v&f"ԏ9&q&K`[$Q lV)1| =h>0I蛞o'zU&>۸m"AӔb'eM;+A^-ld[`XBs0>sLU0%- tR4!u NhkȝIOz25W-?cIr @ƥDI2uYdndfl$p: yg(װ (֪+ W|
?fYߩ% Cb {p GO]茶s2@jGsӻ\ nOTNEZt7C[@)9cy.;8@/ Y6͏>CИ X">`g_ zUh9I+~ta,KJ#RS@
[iaY\þ":Kpl<9mwUavf0
LAc" 'u}k:- cG~{IaړeBlqyjϷa\ 75W
g2+4+ ɮք
B]lO\`YZEppf|נ%$Ȱ[ YS.)qohyo'FWB?tm/) WU|B9jRbrqduO/(ͺ/҈.3֥\ !$1n a< ~P8$n )ENi\('AbFny3w̃xec{:I(.o6&H
N
0*8ρ PT]TG86ڦuߦӯJCex
\k2/3NaBϗl'#$qUEji^do/#Owj9Y ^oh)="Rkt+pyM1<1*ق&ڗU"bؚ|&'e`4S ͍ė ᣧ$+n
8a \9PGX*@6N ;8u {!][M :
c= LG+ F8-2\bp2_|be2EP bs; 8PN|k ^Oѓ'h쥜uvoQ5R/ k_~o8B/nH1;Ty_j" σ/y0a(<9Âפ5! w@qk郧zEI|:>*vy':9[յ^12I엯\ٴC0:uۂ]23Qj2~1go@8AI! x DÖ5*$I<}ؕ
u= -KKpP
O2hJ
p +HbS_sg&6aQ&dQqPFn]̮~qkl3VD})78㍬+. Π
9qq۟glc)}tB@, nC),
GSH9qt
)tk P' ݷt!Zb| 9'^mz&ӌXN'4c $oE5JqI9 t\z`ATTM|7Vd aW^c7Ck7_b4ĸfLs
s"A ϗV4@frXax3 舤doɫ+ Z-/
(B6;ɭfMo&. Bsh> FUv[.Jr6(Fв{ UAX+6eW
߂Fg7k7lMAau_0^TA4 %V] Y0=w]2
gEHJ#o,%ί1'H[n%~ ;HzXزQk'CvF0 4R&P
}EP 1>X :X@ /ņrVy@J?GKeBb8J^
w`Z+,-%C'*
*WHs\turDАͺh^` l d/jzGO K2*.IDAq3F:P
l&+@a p
lR" APHH^<؋NϘo-@O;UlA( /lu,4?d7Kn$ 6-y=٨ gyvR]7 ycQ&؈TUwaе⠥2\]ÇHI>'߅etI 5oJaDL4Iu8u) !#%Or@by,њdtW[m=gEĂQq7set;AȬ5fu{%i.!~Gd7s?vp}_CFWd\5:ড়}K#ovڽlX]_-y$v#TifA0*ա/{ zg/[i/1 e8@puv^سkePqq3t Wu"']LQC=ՙ;owW7GfDvUN$AneōtcLGCp݅-e
0i_-t:mMF-` qK12a~?hq_ҡ>CEl JXW!:?}/%;PՅWPky;~+rep$ k |^uqPx]ޑMD #] R+xy'#O j\ ~] ?"*W69!㑭ziQ wkoy$yyv
$B7qx] !ze]Z|?OQS.ELuz eDA0Nm۰A~f._5w > ~ m#(t&t7 U AMk}<:B̈YKiwĈ|S H?pto^N5o~R_ Nwʧ3KQ- ^f@*TT>(J+iakR -Zu
+ $-\#|RK\b-6@@ ېcsj uש/4z&a!
4jMMKTX#<EuIb3) ӂZ.R6.Xa;G0,TDj ]cAPފ1# Rz~ќopɪtao $9=
dn5
1t*I#\ı G SDj^$~Hh>XM|>2([ QN91
I#qҲBPWNV8$~S7͗cPZl2 !S:i)]9
%ђʗ >[ޚ+pߣO >m~UK `0T1-Ρ|q+1GYvyq#} }ݚKW]wctJ =N!lO.O c 잔
RDQ 5+Å3 rb
ή a Qc`Ye Lir eeM g7< 0Ȟ4X$Vl@vWXՀyMb=F ClNV6RlI mM>9)7C\P9D Ľ,=dY(apuC# 0:lP2eBr?сNzlG s'SLy(e]ĂwʳZU|o'jm7⸩w:Xf]VKm6RRdmdre_#3Æ(Z L;?7 T8%@`3b#/rBY$KpڂYH '#
,Lʕ%nDv**aR&
c^zRŕx#bKeFgu
'wpofe KjVmRM$ Ä2ԚQo@AQw>\/ e 6H)ck Z 6^{W%nspO=y6#J 94T+AjaS{s_L&Gy[XFB* CMA>.lñ\J z#5.u$p
67 WPi^Y,8]G m4]!:|$ Zt.ωfFͿt^ y5=@WOai %bJsH K˘k >sknD9f Z[g XQ*o nA=9~Ҩ"QMFb&iwL{3t9VF~_ wUI$剃
^ \>Me"i$;UV7HH$q9FΡ\͡-$'Z=P/1H 'g \i3Э,1Q
NҾ-izvJG" LݺOh]Ľ?') e
(Yd 1f
WE{+Kfnn7%2т[|ѫ/.(trGw #L#.҉s wIgG>
u&B/"k t,|[C߃.e ӷv- [|[""O>eSZ>g*W3R]4\*u A7,1 Kbg}5e他I kgr1XDŶλg6F9bz}*K_@U=՝[th&iױ} _;C$jşW͌.*"l"6-P MF?
*oծܴgq!t|k+I
-sr^_^ ZVSʘ`mZoaBq؛mLyPfqAo%偫 NR3,>Z |03 <:٫,Q*mx:XRύ\ )`KYPXĪLwoFK_l)&h '99: