samba-dsdb-modules-4.13.4+git.187.5ad4708741a-1.34 >  A `1p9|$_rcK .t-eCqK%/ ( FnŜ>Y)T܅'XP˄2񗏍\I_ͧ2!OM4 OqBSNP !0TS1b*h% CؑyЎ]w8YwK#K^J}ϜQh\GqFSr }vڈXkW~|D!v}rGk]@2@2΅P6MEjֲ#!Z˓Z5deeff91764ab79c3df14c0675ac0f6584c355d9437ef5fb170b437bd7fb6e3a976b85e22f608665c4f849c7ba47b1ebe22ddcd4q`1p9|E wr`-{{hT|BA0;l3бc+C>< )&k6̸ahK^"vufez_Ȉ9oanyYr?])87sƃpxa{%4Z?!>@%B+(>#?O@R;[ZJ3 f|)&`Hh9(ʯ( 0Me[AwA] 8xKXӖAO zI~>pA)d?)Td0 5 G /FLS/P/ /  / / / ///z/d+(+8+9/@:>>@FG/H/I@/XpYx\/]t/^Ubkcdkepfsluu/vD/w(/x/yz())))PCsamba-dsdb-modules4.13.4+git.187.5ad4708741a1.34Samba LDB modulesThis package contains plugins which add Active Directory features to the LDB library.`(sheep69SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxx86_64ln -sf /usr/lib64/samba/ldb /usr/lib64/ldb/samba /sbin/ldconfigX7Gww(hHGX wG''_H'wH8' G77'7I'GYH'''8(GG'```````````````````````````````````````````````aa2555960dee742808bfce7f95c28a59f7408a7843b46807b3c80a5f28912ab5382017ae2baa0bb057d6324560f948477dd682b539585230b01c1252823811ea05e433b698e7f232353964f09dd3eb0f404c09f8391bbf6d0eaaca40a32065d52947e6cdd687e0c46b761755df369667018cd84e5421d5fb4f93d277a3864098578edef93598d78d5c06f11807d95efb9a18517ceec37e4c9eb750f3f8ac6b6c48a4ec7c80bdc5a2e45375e71ab2316815ee470b9413bc772a863376dae1a6ec71c1168e150493e075748cb84529dda05464b580c46d6d816e47217aa72bf0ee7e1ed44747bc01bfc18837b3e49db9059ec07e3efa49f3c5a71aac9916f5f157af001a54734b692f6c682a0bc189a9edd12412659f3016258bcceb5e3712f050e4a2479fdec97243c62881f2868a3c77bd08947dc0124b7a46fe847a50faf976289772d803d018aba8e02be1f9b505b6b9fbffc514ecf2a358d48f082df1da818371bd8c67e5365acaf109c49b2ec2da9d3075984acf8d2de92278483733c002df32c5426775c43310d89fcb630219ed527d62600b8fe34a2e4f74694d52f93dbac9a0ecc2dae159b3840dfb3433c1c0ab11fd721de745f2da9e7cc6495062085a502761236e53fd4fdf1a65d7aafee9a0f4d2c5502aab32da0474e7f5c93eff910766713ffb7600bffbcafd54719f414f749c8b01cdedd67a5fc09512ca0351446ecb9650b5681ee89998c6fd26425fc23d86ebd973d34ebc8aa12c38aebacb7fa72d50723cace956dcc0c05c6be4abbd2464dd6b61bb99ec5219d6d68ffcd87284c579829b47bff50c398136cb6e6c23467931167229960be9395145e2e6fe9b4a343e6a124cce5717195efae25b415fd0e4dcb0693138df21baab32a4128a6e87b9be1be8c191b67d2e4665b912e78c7935e93acf02632160a42703c69985dae753f87a1f17bca631430cbe41e1171f4cdabd175fe062b58a94aaff69e7c916b5eea0b9572b7c4b86872de2ad3c20856e5b239aa369105ae1a0d84b8d5910bc2a192343df775ecc8e72daa1720a31c324d7ced033bbbb7b18c48f2b984a01b12092923f5f45db1a6149690c6976cd6110f79c823a562849fba70ed5054d8f196c4cd4fd5bef0abeaf4f3963e0a31218d57e4ffda1b29ef4e003902405e95f538e3b7326396a8215dd90ce9fa91832bc76f1e6ac2b255e8e7890192dcfb0dfe5ba457701937af993745edd581786b62609dd1329efa7f28311b0a765767272aec4e3a8658ef28f951e01bf6a2a1edd89ec00da44ce4133700130c16ad2c83ddec11574d16a55f690cb1a09d9953e5e7858aaf517eff7a254d3268167debf2e99b6cb003fc2aad51f4050ffb6551fd3e17426c0f6b5a21bfa6d5ff221ea89baaccd8a5eab27aa6c9ff5b3b9a76a24c0f78af7e88b23f4bd63a832476595049457b9525def10c2eaddab6d16e8c31b7a5df03df6b1a4ec346531d027923de40705b8ae127572c47b6e682760d8906d736428d3903adcfed33c212f5fb786cd966cbc71a18dc40090457d3a9f0a8af5d4b1286736ea99b0ff41cc506729b260401eeb21a2ab6cbd912dd246ffa320405f50ae89e7fb9e8b0a40005c8ece5138c18e48d0e48a7457c44d5917fbc8c84dc803d3e087abf8df025114f3c00ea25c7e44425095168a91238b57e81fec66fa3b509bf442baf90f21e2b7a0c3de1b5ce08a9d98f1bde5bd1201ecd8b533435453214b80b3e230772da9419c78bb9deb406ce7976c345abee21c37f17b9db4a2b81be62b1272cef4c38046967d7020c60d59863d71059b8d4cca9bb708330089adc23550aaea00d4adeca7e978094f3664dc2958840c1dd77471dcac65359cb866bab00719c3975ac90452295a8356e4fbd790cc3e7ebea5f1c46ccdbab7af8ab15cb3230cded1d5133ac0a4a32a3e59c850d2e5c8ce13f9681b1396dfbbb72d4953e7b51f18a22d24fa095f8f34572b5bfd694522d2658a3ca1703787679b25950700f7e141feedf5d7488ef565305b174b2126249d6210b1146e673ce8661228cbd18db29514c4bd1eab0437dc833ed90e7354fcae52bed4856846ead908057429bbf5c41f4dfd42a8b04b7a65621bc4rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.13.4+git.187.5ad4708741a-1.34.src.rpmsamba-dsdb-modulessamba-dsdb-modules(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfig/sbin/ldconfiglibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libcmdline-credentials-samba4.so()(64bit)libcmdline-credentials-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgpgme.so.11()(64bit)libgpgme.so.11(GPGME_1.0)(64bit)libgpgme.so.11(GPGME_1.1)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.12)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.18)(64bit)libldb.so.2(LDB_0.9.19)(64bit)libldb.so.2(LDB_0.9.22)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_0.9.24)(64bit)libldb.so.2(LDB_1.1.0)(64bit)libldb.so.2(LDB_1.1.2)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.1.6)(64bit)libldb.so.2(LDB_1.2.0)(64bit)libldb.so.2(LDB_1.2.2)(64bit)libldb.so.2(LDB_2.0.5)(64bit)libldb2libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.4)(64bit)libndr.so.1(NDR_0.0.8)(64bit)libndr.so.1(NDR_0.2.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.3.14)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.13.4_GIT.187.5AD4708741A1.34_SUSE_OS15.0_X86_64)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.1.43.0.4-14.6.0-14.0-15.2-14.14.1`@___i_@_|\@_{ _l@_i@_d@__ @^@^^2^2^^1^^Y^J@^2@^&^&]]]])]@]@]]@]nU]nU]i]e@]_@]J@]B@] #]:\ڭ\\@\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USascabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/sbin/ldconfigsheep69 1620310312  !"#$%&'()*+,-./4.13.4+git.187.5ad4708741a-1.344.13.4+git.187.5ad4708741a-1.34acl.soaclread.soanr.soaudit_log.socount_attrs.sodescriptor.sodirsync.sodns_notify.sodsdb_notification.soencrypted_secrets.soextended_dn_in.soextended_dn_out.soextended_dn_store.sogroup_audit_log.soildap.soinstancetype.solazy_commit.soldbsamba_extensions.solinked_attributes.sonew_partition.soobjectclass.soobjectclass_attrs.soobjectguid.sooperational.sopaged_results.sopartition.sopassword_hash.soranged_results.sorepl_meta_data.soresolve_oids.sorootdse.sosamba3sam.sosamba3sid.sosamba_dsdb.sosamba_secrets.sosamldb.soschema_data.soschema_load.sosecrets_tdb_sync.soshow_deleted.sosubtree_delete.sosubtree_rename.sotombstone_reanimate.sounique_object_sids.soupdate_keytab.sovlv.sowins_ldb.so/usr/lib64/samba/ldb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/b5c3032238a4e7a6b51699004483c0c4-sambacpioxz5x86_64-suse-linux  !"#$%&'()*+,-.ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5712ebab8a2f95b0b690f8ca42a46b6c00c5d4c8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb23d72a32933171baecbdc768e40edf75345203, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=486456606894d67d8375d2d9b780514f1fd14259, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=af90ec1f4f69b43e3a5debe598d30237217838e3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ddacf5898753d0b8f8451786283e04a0c6dbeb7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d971efdce2f8b0b07383a02379363cbb6c0a3393, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f896f3da3f05e3a04e54702010a6fb4a193ef07, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=108c3568aca786a8afe2366fc73d5c85b6c8d693, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8538727efb47dc49df337a4887500e2190141965, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ca01a57ebe6cb545e326b99cb31c489cd877063, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a0cbbf00ba8cfd58f44180661e552756f4402a30, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=842e3808ffa694f3940b70d206a1cfaddb9d0a35, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d381c158edadd9de94cefa62c39ed2574160cf14, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e207e98127298be81963208be9b548a6b590d65b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad46c3e79f8530cf6a3af3df4930d7e86ab58638, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=84ae017b38d6a210400fa6261f16ea38be136694, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fe276499e93afd29ff1c850a2640870a135964ae, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d92c38addf450d534c91a33bddd61e3192d6dfd4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cd00e7c30f5c349fffc334cb29b232e3a3baec70, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bf6ebc245d93203de85c7c3c7620cb15ccb8b5e8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8ea1077849473ad27a166efb179ea4d0d04e8a19, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9ae4abf7243138f60739c6148e1f7942934135da, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f9145d4949f1c5d278aa955509aeb89df20a9cd3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e9b047d6c0f56fac7b7d9dda0181b7c6a71edb0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b8f666a57b219948365aeece05cfeacc25966952, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=102ef92fed1dd8adec6a2aca24562aedc9437e12, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1a04a6bc6ce8aa16a19c83b3e08a115a52cc4c79, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=891fcff737cac529c811ddf8d7783c718b5dd3bb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=02157002604d0aa17afb1c43ab827c58d90cf837, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee95203ee988ce764277ba0b4dbdf074ae93891f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=16efefd9146983f8bb71b115ce08694484ba9ca9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b7b8f359a8aada6ec577e69a10927e05b14f38e8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=83104d23ad034524e07152e5ff29755dc06fe563, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f6e42342140e1723e45129f28cd8dade09a5732, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=77b896ffcc35b5e3a9bd791a52e33c1c5acf0e93, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4bf865a887476c5b842f42167a4ef51f044d45c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=198077e10e3a47fa1f67d85132092a1ec3844ea8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=45276673c823d2902c3b044611c2e01422444b88, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a0d8b1b4be99f235c72b0abf20beedfab5142258, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=df1da698fdbc980dbd35b4d724c768401dc54dc5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6b5879f708be036251988ce801ab9f84108a2b69, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3740dd8f3b8d30ea1e54b7c35c6648a1309fdbe6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fe0e7747d916eb65245a50297e1591dd5173ee74, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=936559624bb9a0b6a0f77531fed94b014a6fddc7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4e6c8e678c1e8e1345b4c1df3a9056724037cbe, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1fea4a292185decf2f8dbe287729eebae080445a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=68c7bb7cd4d077f1ca616eeb697093522b7c3273, stripped9Fdu'BVaj&^i(9Qboz    8 & . "  RR4RaRgR]RHRqR R R RiRNR2R#R8R6R"RfR3RMRhR\RRGR`R1RpR5RRNRaRgR]RHRqR R R RiRcR#R9R?R@R8R6R"RbRMRhRGR`RfR\RpR5RRqRHRgR6R8R R R RfRGRpR5RReRgRaRNROR]R_R#RRqR R R RRcR8R6R"RdR\RfRMRbRR^R`RRpR5RRsRaR]RqRuR8R6R R R R`R\RrRtRpR5RRgRHR]RqRORNR R R RiR7R>R8R6RcR#RMR"RbRfRhRGR\RpR5RRJR]RgRqR R R RiRNR#RHR?R8R6R"RMRhRGRIRfR\RpR5RRaRQRxR]RzR_RHRRqR R R R#RLR8R6R!R"RRKRMR RwR`R^RGR\RyRpR5RRiRgR#RqR R R R8R6R"RhRfRpR5RRWRNRYRJR-RqR R R R#RgR8R6R"RfRXRMRIRVRpR5R,RRiR#R R R RHRqR@R=R8R9R6R"RhRGRpR5RRgRNRqRHR#R R R RiR@R8R6RMR"RfRhRGRpR5RRgRqR#RcR R R RHR=R8R9R6RiR"RfRbRhRGRpR5RReRgRaR]RcRRqR R R RiR#RR8R6R"RdR\RhRfRbRR`RRpR5RRzRR[R R RgRqRR8R6RWRRZRRfRVRyRpR5RR#RiR R R R8R6R"RhR5RR#R R R R8R6R"R5RRURkRR]RaRHR[RqR:R;R8R6R R R R R+RiRgRGRZRhRfRR*R`R\RjRpRTR5RRgRNR]RqRHR R R RDRC(9&> pS(@ +z踬F0g'2͝E:Wo[򃳇@O6_=_DUSiwwe J7fҹ.}V^C'3'?8Rl%vp^Bp^Fܖ/w `.oNl {,zWp= v$QO2P`/rw1 5㴥WMS1}sVk 2 @%\Ckd+TQs .TV#) l8*cE'47{^3nu:k ƇobZSmN!R䍬e}ۘpKbq lyHf[]hsx=H0Xn,QJ5>ml;ꪇ 0R~7 9d גPh6@!nYݬSH7=aQ'_S UwʁJݾ|MJi̇ra[yDzَ {Xĵk (!rU~_*w-Wg@yN &%:ޢax\U-ϖ/zez Uf{Tf?I-!p;:Ƈaf+QrzozǶ&Ia^E+~8b\+̜6Vժ{4p_x^nm.e'2KԅXUljݶnD3kz'aN;N1z~Blo=錾]4vFrne(%闆H=Xno^iH(Bndwt)"W,,KTטKW$oࠛ*XGHSx->CL ײ\-.3yg$^oV#(U`Ԭwͪ2HBl}'O"a: [4p幓p}{ޅ'{g;S*3vn!CX2HZ)sIG':]nV%e [T]\'`6.;-d>AO~#"mCaɣ{s7K]SMMy6͑`6cs/[~FH/w`B$OrEhn.Rnjn:B98a}]M6T'Uu%?qE TѓNjg@ x?hEs$9d#%0RWէ"1%6`rM짓;v-v'k’0Yq%Zo14eq~qTzZ JgI)QPo s*T-yT5Zi"cu's[`n׵V['icܢ)I.VeV6-<$|/^ ,S"=?}(*( zGKYIuF r3zj{߂VaWȱej4ivn3r:+:\nD=/Lx 7nPjKK9 3RM>bmrJᶙoՔǴՍ75-f>rgلkKcsM]ۓ Ô:]7&@mg9dO(uf_vvC0)ᷣlʣ*3.pY%eY8YsB<)eV548| 1`t4x=kޝVxNg -Drωgԅav% p!%,0f _m9؎ɠ%4Eq+%GÚZEAɕYoێ4Ü 5m[.l,|U){ÓhHzV#tz ˎ4Z]iђQo-Ί5G]rbSwf%sM 7%&+,7p~a\<DD#Jϒ7Fi*ϭ o \$|lMYd#?.qNh&\#~+*X5S AӼ46}]_4=KPoG-7^a|9& 50MMl~wb z P_+x)D[CRЌSr"_"iTGQTxC *@HQgcP6NR7.C]XLY 8|oX#u`a1=D]Zfr!?vIߑ`ȼ p|g|3N˟> 3u=S4+X6NX!y&3*&xx˼ s%ȫ9UiA (Aŏ&@t=~WpY c"MmV囓 ۗRn uq x}d5li0§1=ijI.D~T!xםf[-3N -HswNȃ%]ZsY<["C ٻK}PwĿ.q[b%>\ObAsx}P Hl CCo;,*퓻+uO[oE=b¤b|Ȍ){N_N*Πgy VXPeSYVyɪT?s)<dUqڕ 1ƭ7&^Y` ވ"%,t]DD]Zt{PG6{WV}{Kw\IKRWrHm~hPPgY&!ƥaGr\?q֥?+ѻnGAVCY&G Qڡŕ"TYq %x1X_.^Tl JaV>4 AGAy[ =ոmV 2ϒB<~GUE&K󱉈u[Nr gowE(f'ŕճ$_Tdl7.ٮ"#dYξ:< J01ytt$էZݨAOU?"|FF s'ѱ i(0GݾoBTt9ތzlP8Z a]r9ޡvn&>/`AݜrTVrjC H -m0%R*p޴Kb#n5Mhޤ[&'~`y}<%&w-&-?D7*ICpR욾kt}ӿBb`)# $<],XDt}-s PY;3tQHDlrA0H-_+ u-Ϛ!an*ǟdpgDyD_N#ڵﻵ2p&g3qH#,,o#ȢR7,DQ{D <ΥzFSq|GaD)xNI*GQ?큹T4ʁҟxCXLZhLؖi AZUGƫƉ{>`eY00#+NT!B 8?"tQ@5 t3{ k;2ZF(@NUҬ^%EAif5+*C';&`4d{ t=ymG`j' @4ImDPZeAϡqE٘^ =W9syIk!VcD r"c +s2R0?c)NU7|xC5j1d{L:" .BxԕLa'ru2=Q8TX{ŀvb]Af<4Gsi`'COD4n{/y QIj%yJ+yzHPm.,HnM;̗^|T!ڰ8q^'1FrTClW*Vћ?_=?S!9{_B=EZMm[xu:ҫЇHCXQ!R|9@@9s@<]hp';*"H˒{o(D#h%V+l,RLctC8 *qq4@5{oK)JَESSo=MR]v]!1c $+^7Tzl\N1F z{wEWLjAVp0v]qjU9f۫2êӋFf8[S)KRtB6ҚѩfN2 YRb$6UݴitiqlǑxLv[yn ?mk%)3c%"Ugz BµfA$ A@zBC ԉ!j!]Y ,0AoTZ]Gmһjq1=7. KↇzV_Ac2͛GXP)o{ 90rZ īY%_LW] $ ߾&h#W8v/v[KbB'5?7sR3sCަ靮7)i±tO"0?~BJL>9AӦpK_6𴢣ȹzpptW+uo<?k¿gp} Z4mZb{+jmXIw ]!7ˠ+O% ({kr!m #Hw6Fb.Pe` ggkSBb/q2[0`̹}nN0ےz J(`ԋc; m{+ZM/ 2{]"@Mu=ԉlA^PLH=@rlۗ_ax!~9>K|l{_7q-Fi uw3̎{|`ABKӯ\#5C.`|"We 5Q~70@36*y~^J$ gc(Yhsn'\KQO({'ͨ"vx죜&+ l}B|x.NP_71n!=;{SfYa4)VC'MqD S5ENNW!t (#iEiUI1.PgyT, <3;f"ElpE\!Z$t g1 LtiQ[;ZZD`Z>\3̵:$6`"mЯv,\A(˾ԱtY0v%FRTY-kTem֝*]L_aL+p(m~ 1~NgK[vLq ]NClk㸮'"/ad?=1%S  Z3VƮN!̦Xy68~Q)F"Ϥ=~'mt﵃𐄠i[|7 îJ` ɐ-L1* zhr5'g؃7UC{9 "w&UQ(5q9:_ 2=s"ux?4.s$o)VֆK)j̥2"Z8#_ Te4ԲՓ53 ul⫏1vĶVdm"ơh#xv_²=Ro {%zԻ6,_FL>QO~'uKOhdXb-]"N)FuWhU|_̈R pnkc!* ]Cdpnvfm|#˙ZV;B9zv=abT9'G@1?bh7]xN #C(]oKĔ~gJ(R }ehQ@ IM.\+fڅr= evb/_ 1<y%IJ+\[;#w-kC v $-Ԃt?;J"`,t@O C {1hJQQ˜Â:DrُS hZF?Of9bq|8녅H{P#u'ȊӤ u/; Gx/ f <ζ¸}KDxV 2wRaxFl@Td\˘ImȬЭ|H4mU4hz+ ن!xN!B;M be.!?ͰwM^~M~dE2֟GJljsI-1qGt,/ vX3i-ra gOgȵ |Xw9osl59]kχD,%^:i:"'< gpW))_҉Rh%Q5،"Eb->©Lk ƿ넷7nno?xd 9[KD^ e$/4wb*qᣅSܸg\&j?thT@!ÐǩE""hH4S塅jq(㖕tzҔuYEV`Vx'[<`ip.Mp@<_)^rXQC美j13:SVuS{p_pӻ쏮2)Z ]3a ߀MUFtb4OF<])VqLJ u2;0%qՔ Ou0.x a2.1Q`+v.onۣ=im(Z1Q2(]*YsmEF-Sx6IM8n{)cHHvڸk7 87^jcZ<}GBzU> )#+$u+$'^\S jЈ9us"iH$ XQ5Mb!v2`} 6 _Kgyׇwsw5O1Oykd=㿼TΌ0 DɥYhJc!"^ ߎZa.}yaV"e)!<˚TLMZ@9Z_EFm1@dX+?"tDFkq'Ѱq9+wvF\6. c?Ѕ$w"Y)2XVyify<~%\ >(D1EFbԀ1/*%\9ͻ~øChNi*Ehu~U#\o˙iBdEeeogyS|4q # ȺA߶su@ Hv/a&o_j5 T 3J uq?,skRSvEgK 0 *wo8g@]np[=-:* F gx-;p.F#^ I")H޼sjOvC\A M?Řus}v'y#id|rnnA :oN 5'rAޒHϳȤ/6'\mDCMQT~jHP&ϦI6ї!{fHֽ(օo`LQQ/Rl G5A*>kM&3}MYh(iFTV#Dz ~&Cg-F㆖g - ^F AKeq&:bR2y5MF^G0F6bX2⛷ޫ}td+QSSaRS(g G`eq~͛Hܒ7?BmN7!4;FS[0J`vLy3Np6s F@[!Dhôo*$j0JK'^ Zŭ?W?+Po_[PG[-F{A9.z`hpXbB,ZYr 9LHgg~'J4AB. ־kťi_Pڱ.'vG0[G #(/sz7r ؈ ]B}q=奩LW?−åS<z`01:((pTn>u?klRhjtF1Go!iI1'/{]*|X;ͷqhKёH,FXs*<9`>\ ܏1tgH 3%ī LV`x2}^Ve2bQVRuddʈyAl^$ͿmVHDKo 5OF+mj)QJճ'衙6ɆuEhCY\rlDI2k4aͽɒϮ#oyh٬mnVZu<cŔA=z`7??؋bz4M!tP6(kr Y0" )qҗ:&~ UscꁨۄuT_>v d蟓[:\ X'^!Yo{-iB|!. YWuqï $oLtwB'en-G‡Plp:$ n}<2uYUZl #跏qLz1#je,@,R/aRn~A"M h&F>WTȋ雮 J!WG'Bɴ÷aay_hfVS%iQ t =["2 t~TIl؛ebi0cD$c%TmJ[m$AOOrEG +zb4l`)rۘu%^>BQ5ԼͫCf&#"WC]e.%?mLBN+¯fFMk SSGBnQ漎1P M>-*I@@0=]sSԤ?جnXF5:|ïK >6Aso\NߥݔBBǖD?GI7Oк釦Wcۑ$u`,-v)* bGkapLJ۳B%4h 8N,{*lwONp0,n7 dIEe(coZ:}ThGha g|꭮B 9+7*#TRഐ֨`{2ްdb2KL[Q̈ x=6~#f'ce7Үpn|0 ?f-xj[ݥ@*aX5Tj~$a6lفJMB_~'إ"!CHZ ϡ8ny4Ն-pΒW:ƓSC g={c:Bs`$^+*BJ*4$ Z9gQ?78DuOwE"YXaS2ٷug_zoA%@(=Dt2WU5WSX>fWA[e#W]nWzF`x\UW֝tJl2d;>V2_'~iMV7QJx>@б-by`-_,W'N?L`ziEzD.[kٽ]f@\T;?2Rp44!Rƅ뼦~b-)1xLQ8np'_RnA5 I(#RV%O~:ٝ}i4J $ëj:xtg[2z4RQOU1f"RSr1y\)@vl5b2dl#DaW䊎VSxdU3Cdn~WyN.$EBJD5hzn^0AF/HO&6Js9Ÿ>TbF-{~hp9ƴN.~܎zCqOS6|s#N RIޕ*=BbԽyZS@<.M$ɸ%Dw#TgLIǺWTF,CAvYw7t[~썪Dc6J8o7'`AG]Q8 $7Y8kj‰@ޔ˲Va^R ~3?)6: 0nuBUei#}Y9g( G- 0Cr>jr0Ы+;+1j&;v#~g\KwU%"_}Ǐf-]UX@6, u43LP(X4 ЛnX[C8Q>3b՟+0shoY6ᮉ  q%+: SBO73VE !`Vy,.,-̃h{ah=m(F/RuX3R^gT,;3mOOڀd%E45߹ dXK g1-/c[OKHg#"1R(K[\ɚE^Oh+KByE1 E5.3c4w l ^JE4=#g rD["LVφAmFw~.n&łs%n̟GL:`++u!]^ŊD4(,lS\E"L.7/-zqC w%aw>{cwMo_sok~#`(f#2u@g&H˴%Ov~_S?ō=*\OgJ{h 08u lI Pf"HY$tCNq vwmQF$y_SAYE8hȑۿAFO~ZzTgmK֊ y\gy4}JbQ9 "0WyI Ff0FHU#D#vbY hƃYG@>Ųq_/&LH즈¯1wRT ]4 y1 ޟ09 cO'(H&8{:eZ]w!| * z#xxcH]>Gx?8RQ썶Xpzzzt9!@thz&||A,u^(SRJgF{\%(&Ʊ>7羦 H9R<澮ю7i䗳x8٩4ڠG̼<`L$6PT n.68Vo$Oɬ;p* wºWQvhE2zFW>,5d]/*Kj'+TAuMBIxgjs:Cz/ Ǹ"t!WN~aF'3YղX &Hvbc/4~S!ofjgAw?YQI)r|jwGȸ5waccsT)1I](m5o|וIQAcs(Qvф&H)`/SGPXj#Ĕ{FABn2c@Ӗ 6 f`FbXDX+:LFǗreo{2YSrAOWns^ RKG|gGsybBWQPЅ.? o]\uϢ{X$a4,bPq/lN"AOz$:@RYٞ4O!"aj#2)%b+y7&z!Cۗbot!*n.!#I=%=F#ՆwxEFV+?zҫmxS:?5;Bڞv\KA3Џ-Y%c(hۦG\,Jc.5.͖!83Kzmnk/$tlkfh4fekjntX1(4>*=8d؞Faf`&TRQK]M(~ިlwJ WFyińQMywƉ= @֒rbg:+]hC1#8n ~\X"ƘaX?:V9(k(x/2',EeW$eARBގM3LV%Z` JR)$ kN2XFFe{Trt[ȝ]L -"FtէNcM:@Y;'v XxF}Gv㱫`$5&p1-i$Px D Y7.1sa-1C u°υ괛P<͹g|2j,XNF꡹^w}ȏovR5u}w(ͪKPZVQk3 "=˻׭$Q'/hT R>kюH44\V8*Ja/by]}%0<|Yh^4JOdӇOSY'F"ʸ,ځ%wʻći^dߤGw_fq 2wtis+SrQ\=4l#]q9Ku'܈.eۆBsIsI@JY}ㆋoWcZœ]""ɥyaa**;w`Ǭ ^@zx{ܛigOIc ~dS!@H^t,(@Q^SJM"}khұWZ,r d6M`݄#~۶ ~vuX0_[PhNѼ n#%E,aԪZR1$, ܒ!lbZ $_/zt1C ~ShO͐չ\4\ 6*&;^}h ;TFHR8հ<)ΩE? 5JQyE*k-RZu;Nؓ}WOt1I@)[u'.KΩܐ PͮԂըDJ/O1ә5nυo _&6F6WAz!CL?RSnx˚(jFH.r <*zr9j~lBYW+Tu8r{qΟӗ,fvtd3{w!%/*ޭ\ H}eoJ1[X_9Av\ d Q-rTTʯv,U;ډC'j$]\^ܲ*:YUA?kaAuBz'rZ߂}`x"eW0ryݦT``b) ;`7kn[И,rX`?:g}EUQI 0A.;CdxM@gbMRJ1]z+ŰEr ;j0ѩ&cij\p xq/Hʗn켁T~Zf]5@Sz%IBn_dWe7>ASDNY`q(T\ǀ \2w- 9hCA`.um r$a#|o{2F08ΩL?5mvZNL;.`&pl.o0(w-t(5j(/od퍒l\sb9~LcfC?> 4=K7S*x" o`P1:9[mw uS"MXӊ,o='B-SC>_J\-gVmQ'EU8YpW> m1 %ej-؏MhUW_Mŋ  i6tf0!sb0_]9<٪m :|rD?LZ5k|>搽 `(Cb(rqFoe;֌ptCteYPWgȍu9ALbėRâB(OMR'oT٩xzP zo8][Sa.TiBI&/UcR ik>k5t*-If8l,.lo)ۺ! * .ɗ=H_sok̦jÇӐ )YbDY"<d4(3wX$n,B~k= X'> ?rD\in&MJw2#MFZ#IlpE a'"?OlC9>ƉxPƕFIkf^m[R+@qȌ}@=FD]5 aQu򠘭2 2u]5n\PSTR 4N8#9*̀=Xw;ewIdƮs~چPŰi_V?}0| YGH쌣P X&( 0eq!FcǍ`D2ΠI 'bt:D%75EhQM#2iw^n]EIn.Ո_]NOngu瀨ZkG TŜ&A+;f<V|ĥ22i1Ju{T3`ibsN,0-~,rQ͊S*PKC'C#7C? +f:C3Mę!eҧ;'/xH]8 eGar<D<9Ǝc!^Q|@gE}X ҼXFg .uq=XZӜ>frW&L_2qAoɟfpDQIsDOM5vOBj[ vVX P1W1fy n1ܳ:TyDJ߼J_u$ؘX޸SlI()1/vlT~Q+i(D7-6cUh6-fwCCԡr؅m(-1G+%W=)0{$c 7j>K6zt+oE0DixaF?cZPukCQ߷jKie%t=ew=H d_oR_)iWOQ$lc^BLX"LkAd;mE%1L`ZGkTG.wʰ \np?{:.+-F8 BU.uX u9XaaO$_붙0ӅEt˖Kyzo/Q8mPh{rm -[IsU,$(6u;X僡vkX7guEH$榼;Vw=u324KEҗ䖝Y}?ܨ ;D%|!u.G_1lD|^]Ik"Z<-lDr[F^^ya N^PWgT±IM>̭fV YGN9r-DY+We/]!R`q+ 0@i%)SU{<6Sxu}Uv.:o- <ßx B!2hf´@bam?{$ǀb$տNHڃHN A,9*%WӤݵ%FNFb/jh\z;Syp|nE\igR]m!wu3;.bD Up$ 枸sx?/-z! ^kH14)?}G H<'p6p[b~S5-zQ(#d 嫨H)%*(u<^w^ -P8[FYw@rs*1|yd $NrDm77n  % ۲QT r\w}ui,/0"Oj&M!{c:e0R@AtU]^Qz%dzZ~ڐ{P[Lń.wL( T P0B ~Kos'=!r/4f2.W4 Ժ7*wZiT7)%KMT,.ܚEB?,2-]&ETҀo< `4$XjJ@ b~i)p85-MfqAC@OwVW񓓰z20ڻ bۦ$[x#32bYuMA{tCC"; z00{OvRw$|@Pîʖ]*lC|. B]kbJʀkNe?1D&͟f]`uЉdO=*}tR೜c~ @ LdnCeؙ# %tR`&5joVص0"`ZCtn{.ySP`AN xd짏> rT)R2m`P4JN/n׃KF`Kt.hM%epww, hæUl oˉ;wn@f$R$ |ᲰZB2nq͟)P0 %)߂k.d|yMO[}ה\ !/%48-հ[ ʝBo>uW4߀1zFnV& O#(0 iZCa#Ԣ6ңw ~sN..'Ztj0ӫ'KuVàskO5,?iD*ڒ}jg5%5Qq ffU0-0^#0O[G.T XRhͥ~[܈-Jt*~ ~b.8Qr!q,_Q~e牦/*m(X*c~_4K2>=)9S5}cEJz]ˋi[ҠUQa, ) [ Ħ$&?a c^j'ȹk6f>A^!u`=\ΐT31_(}ѡZ 4|_{BN9GEc_cS#ޤ7LA1xVxp-?wf;FLE v XDY;3ǒV-Yl$V }"f+NVS.G'eHEx.\Jhw\t ZKn(ЖV]Go: jT[7EVئ#|Zbe༭qFR- [-!]{L-X;r@xĕʸ h,TB5_ׇ9_F>WU9d-݆Q~БV u@wL57pX'~]LݯnUE /`-#n-@d_B*̨0-@و,2H =V9闬E@tCz9{8u׃{C'%2'PdYRL^'i?Gvep󦹫rmHpkij 2bFa4R[ i%}hi7hwn SIڕoebX]#Xldm}nP'ܐDc;_輯LSF7sw,-0UXf}$CH?R/ '2`3U, xDwߐїᓍIOp!WuAU$Bhny˰tŐWqɉ槦< )/sIqo"JUx0;H "PtS]XiG1{.qp#&x\yf ꊱsJMt}:rF XN>~*mib u~|L4Y5Av>7hA*GzO7aak$}BswVt 3O䔥y {G9\ߘc/$/lJנ ,{`ӓՁX`T ԃW'_2+}q%J,*={ \5tȔ:;\تOɖ塚O{7di5a7HHûʱݭQЧ奍բ/X>"l[m>^ `Qs <iM 3JԵpihI5Ьj9>l+uwV kuz&am3p'݌kSdC[YPy tQ$(L},fE;|[t[CrTO'R! hZK#|dڱ 0o#@r!4I÷c*7}LA^U0l/%2 '@`cf~efG/@EMfdFZLR|ptC_d083af<> ފxg)"KUZ*)'w k} O׵Q^3#R)^g0S:7l(5esˮ9@Ua6\d"NGdJ)$mB(MV[,5k%8Sn@y_1 ?ØDUeEjpZΑtZk`HJ~B#o+')@ZK1Gj|υ j`oqWGFMI,-X2ȃGCTV99%c^>*s>H!^9 z] gz4>.29bH`w3J̞->D76<ŌP=pS:uI9@"Ȳg9 :;u!u{7;]x5'rۑh(֡7FKXʯ\='pLdcޡc.1[@:a'+#3SwM]#Kh>K= NoGn]2.jW\L^iY .`zVx3,i|;>so?z2]C/m{, $< :GѬStcg0'_ۓ%0)Xs1ʓFPG`pC=;Rs0+r׻pפ<'UUs\<>*ꕊg1b!7VP0T>"L=ù(q0@6!@d4O4 2|K /*Jge%CKdpi<9KOF5F"'_"w[Ձƥ&/A]K|DI0{+;2+oPyeLk^@k_zjuH<^\ 񥻏ܟmTAܣ yL '^Z#r0'QXz|O#7ҭ%fɫJ7Dl:"xĎ$c'^|FGZƊ~X&P eCH1z?ܹx6;LY$g-D7Pi왋ȃ"7T[B+ԫ*T@@&&>5s1^k^}>,$63\A~,U"oqв‚ HBr7XÐ,9hS?UsmPFCjS=<+Lj5|2'F<~6)_Wԋ(8| b=yeBDh~0M >3 צAVw&ʹCw$7,NJɼ[ ^4!9|t wr:\Yؤ3Aϧp]2KvatbeY/-`\ w0b#)=H .ҫ do7bטwS#&*YO&\ynH T(ʻc}y=Ǎp^_҉ݼ 5smYobʄEX3ye.]T6ZM2biW&ƍeԹW= ̰į&Wwaj2u &5Gű,̧NGe-,=vOcCY?KlWPM8͵\ZÎRwOoht.©=0# #y:8d@n$ZN0carf3\2GkGE4#sHWy㄁3ӧ:G& Y&UlU#y$oEPM: F/{j;.G &XFQ=;̄N?{"~dpN7Y3RK/YwP[1? mf|dmp.jY.u21`ں+ ܙM}v XBeaWj՟.%?VmT8O!Ѹ 2OI~ V}cΌ7N*x~<×P,4me/tI"򈗾2xme6:ԝ-+ke \&7G3 Hj6{qEG'A&s:/yZq@l4v uV#پ7s'_-bc+>X%n3G$]ͦikMVh`2y 9Fn/D-B߬jkf!77o5{9'opJ(+;nnRtn>x1!l/Cr ;AW-xwc]s66UXE 3ſ_QʠӧԪ؄F12^ƚ4$ dbrU=$"/ MxAc*=^{<܅C7~12~M:͈rz( N{,ݽ, lZfzUt_Ă(]Z'u~΃߶m&f650O_]e7 FYAbAQRt#8u_#BMB/ߠPh.soq?`r39 ,̤rR^x\W\3YSj, @fEZL7F`L 9U.9߽QUUOv-hl&>+.j줆LR  !'G\8?R'{m?L(N[9L0.%g|6LLM녹k .WXkvjzTN FE=2R~́xV4H;jAFf)֑6ۭՋwNZl}--s]^DŽԥvNiSCm̙Ê5W6 fwVc0=* rOp)sbǚa(FInōcLǧzIZ&.%Z+|b2ؠ06 pjNmzcCK?7$K82vFu=zr`"H@kҿN:y†~lgM {Dq ^5֭c WgU*--b: #S0$AQ}DPas&t4A)T-*pՙ Y };_2#e2M"U5\WXo8-9U9XWS܏;Zj3ĚnL"*v~?睷Eߋ9?#\d״>α 1K9EܿnVl^6Z-! 5ȿ[Nlu,`jhie{ ͍9q #GV.L0{ ]3^a{w%W:v BeNghL?#heph;n<g H~d #;x v7΁s{P|!FĽIX%۲$b% ,C+J,Z(i9~k^T-'JCmʟj9zl?'S Is1(fjwxOvYc9ZXxQF3zUSQHL9?Ѳz1z3‡ͨ(LyLoK9-UB2v!-fPS˯fz WC2Xa4=(|:6qlaԴ9C!7e ;Hn8SNVM*eӡ%-)5v]zqS"1:c71 GQ{f0];@Ãklm?5d/j'p. LsgyB0l$RR:ll v=/v_Hf/{^CƾԬid@;'.83wpʟr6lnSd4@Arh$aQ<0섊 3HRܲ`x++..&Og *?LY+e B'}RS||wj<4*}cky@%H`)9o!lC,CCN,dƺ"5Y&1u$!/ k Jɔ}@U MF^Yc'Z?ΠLE)i%j"A23*sh*nzIA21oU|MSq:!QP(n覐 4GRpTؐ rkALELVe~ dwKYdHXԲT<ȆI/նe0χ=̬8$5: ~ռ(+C䢩8C3+3B` Pi}BUqӺ+؅T1laӁ %Kq$ c -;gG"/N.ц1/>92lҥY~^ee1ADeXU#6bgytq'TU(jJ]2.3⬕ &qt=L.ps\02G_-hȵ^[ k՘[ wj$dqL蜬 D*> ׸q2XѸU[]^TRRa\Dh_m$ixMWd G2>uE2h.-1vREݏDz|zRUޗHeoT$lq6=3|dkSG^I (Z2gd3|JRğ_C\g&Z zg~QqK D2,TpVс<.4vn.EI>Zq}e!ARDD~_K`Ɠxg|BLg!jAn{@mn *|;(pa.B?ߏ+Fdݱxl?T>PzPйx5#GK&w^{CiR"$K[aXĈ[ObꟳENU8 (xn:PqUur6'}"4LfgŒ0*5t^毚C4Ȥ>dy+E}^o3O݆Y 7ֳ\/f#}?lk /$KS:պ^ߙW>#>Gb Jlq:RM><=6XAnG eMAmVq I'%5 4؜;u ;#.~&K~gCد~%G!%3Y@@Iv?srqJC[dC?ԻV(q0HN/tD b<y%t1l2c5U~O%$ hҀaۯ-L2l,!ٺ;i$QGcaDdۿ)]ElBe:5ξX>XNzA%X PyǾ!vY(0\s$r> `gh}\OG‘I"BMQ`ÏTQj%T2lye隴tBP wX]cD/YWG]p4Dqy~[GH,/ᷥ_}nJ$糖R Ͽ7e^)c+֝qlUf$!p{V]vi<" I2?n VH£Cm@y0`!bʰfmI*;!5_ iLe#)"XEGlb`dlgs̐4X]}YqZɣ%pPng[iMx.aT}FmұtL?Y1D5뙾*Th䱸$j{KLzZ+9}g&ċƂ&)bu|H8}WnG>ORAqqp|O |3HN`VyU9^g/V&W-f@ۋi=)}9[!|+{`&wp줎D]j2c2> OiՆۖQ(qS쾦{w'.RmԿQ_)OD ›Ebv}շV?|%V^ Gr¡3FyR7ozVR}Jgɀ ZYPb˜)5&m|dㇾ-;F6 ΂W3TzJ"gRy[SdQN5̒akpE >o݇Hm ?"E1f3<]ƲeP!G!V~S{QziPcXK=VS*ѐ Qmܣ-d'a9@}LS ?9{/$W0m9uwxYߓ ]UhីnOQktB]sh)8K{U|MV 8~} cu4M} E k[/}9Dc ZQ#i6Pv u` T#o! =jwRgS*Z~)}wVJސx@Z>׆ӟ9]CU3"gΚSO8_"Wg_ Ȯ:ӅE"v7ċדkg1:M 9W~Vy7.Nm>/D\62&""\8ks_f/ mM݉oQoBٕ~9VF/fDh!8D[#FdUT7Xo~m6P~U8ь1\*E7E*K/W#E$H^(_ǻK_ʕ!VTx_ðXl+!!ow\+kvODi,RW)p U$:ܦ>oReSBYRCY##75C:<"JL7%·UDpڻ[逭'3Kˉ l9ia ?t|u@ &M<~;?tl XNPа/H)Mϔ A?-Ve78a$OfVnwlNy蕸3k>Pަs=%' 7wj+Z̀D;0~9_~8B}iONpѲ Qa0u E kQa'y7gm!"@hg@c26 ~GJcw5n`Ύ^H@h!`x@ 3Ʌ~>!&' @Ho 33»&[Bբ 8SA2)TD[$HjEY&l4TҝuP>/i@qQ),r*,/@t][鹁>;KS_Soe16L84gBc-\ X}-2*+BXы-q3;1CY97M M6;UnwZS'uz%\͵*.Hr<\pI;J*z&$re~4^{_Q%LP{M+>19gɇ 졯џK6=Q0k v'^2oN3 f#p?+-ح*g8uħ6+%Y5/vAj IUu9TSY~%dKf6ѐee! CUЮq7Gu kS7<`'_R`LQݛx[ϒ9:x0~ƵeǪݠtf$Nl|^f]xcӈ{]dzdtKX Z*{@chUدs&y<wc)f{JS9 j JU6ULz,Ax3<dipaȯi u_*E0jVlc-()ٶ43J&O,؃^jtj?>%l;F^qܖ|>H9)Cp7 0ò=!/ !*_a.:8͢(D"A]|$ۮ+*G'8)GV~+mJ>)YIyf7!1tXbBYiGu*1dBӉk2]DJ~)#(e}ŒQ%fdS_'&M s58ɲM xA rj onYܦ+Ց%M,Yb<6}yT֐GлRM4 Ke+nUc8jYGf u+U @&vP`@IGЂT@%yf,#jr#SM?\$_Te+ UͮD/xN@}Le._DׁG0֣Lp۷]1m_fOUt?a] %RZ؞K|7YtQ΃yBI`#O#mZi#!י^)øݾP!XZ*ޡi95 zCkfDĎ=;"1#&>޿Vټ-a{YuG ޒw Lc{(f3\6T:!~hDФ@պ%]+շ,\vz- i&gZ衏w;L#ud]:ojar<cXn͞fί4A5.I@d2}*= pм%s"D~m"5Hl[xLwkV1R)AZUi⬚uʁ}@7uO ђ 6S525(CRbcK+obE_n,M^Q=$9r{ ×{Nj_DZ[9m*%:?]oWР3,%kE^䰪DPE2Bc!]Nmz{EqdD]i?ZJA@F鿦)δʮ%cu|?I4f8"^L'em'eJA6NsopoPb.7(c{#4]O+nҨ Yc%ωqaMm0G 42,GsY+vMeyr- 5tJS#_*>#hnHl0bm L@TR?ĩṤwqM)\WO!îD֋#ȆN/x5SmThJ"\eݵ{:7d|u0s9e{C5. DuܦK4 hL o)kWJЮUe7/XE%}#u.;.F4ʛjWV'xdDZtr&T^@ ;ċ4{MjPXmS=I/|7͆!MdЉQ WNy,X^M:k6d926%wk2vO昽KmGA]Y=Ň,À2⎸wJl_) c/ ݬ! '֎QAHjWlc|m~oiT=9(M*]zBj휴=-.Cx{$("W\ZhZH@\fdX:p UWsq!"!Lˀ}z,m-6je. \t3Jq%|$5Q0 8]t7;ح9.Mbry(n*5"=܀=N,H,rՋ AZY(o/SGcâ=xu%ATI*3A+9TJ<7Q.ߦ*[0䏹E+M+еNBmQVx%$;OA`PշC^~\~=9c:>(f?g;r[90-'%@<-8UŝhE]\ie$="=aْ~]6.ா b.o0آA3-&:`Xr`邅|j{LeJG*JlѨ#@z"LᆄU SCsϥgkRk^$Y_v3܅XV˩d 5rp4F1h|kT&l}Y cd|iť߸oGν'2c"X{z":IQ V#q,.hpT[0=_a/(EY[.2ui1\E T.ёļB~Г[jЭ yt btq@!l}j4=c,o 1zȱ\=\YK>,)}D 'xvv2PҋMZh?Y޸ފ(0@[O`-ͶaHrTS/@ AH.Nk|M]sjg,KdVhգG%cZ$Ӯun)( ʰT9%{) 9,v۞1r*=fd5}fwΓFoC+-KRx(**DX:\3f?5ÇeZ6eBRN\Nk|NMcP#]ehP $~Z,x>[ E,v&Ɂ qT0ϙ]eGI;ix SZ IU:'Jcd+Nҕ5E~s2m/1.R ?4I %DlXe*?n1e3Qj$s7}ϩ횛e>ƜR>޳zr\&HV * h`ӓK\\ei ӗ%ML~׌,-O[?LJ͸l,r3- κo$6i% F@7m8!XSFL8OOqvhw8kD0dL<ޠ̡,-{L&8"/i1! ]Zr ak]f"M`³$M@EsDPY3C{tl/Fdқ:x8 ^'ėuKVAtXX,)y!p#91H.Ĉa7BXeҴF!Ҝ˔䌼Y81w={k'`']c̰h̻z<%4d| f 5 Hh&SsXwp Bv0][H'+`KXD*g 5VYl /5p E v*D㊣S/1̏mB6 žJcylb#Z HL gODR*;=Irs)U.HqzhUup|\mH:mE6h|̖,r8,g3J 2XN e:+L,T쪾NTTRU&ңso,3fH/vQ7,=kW' Ë N`{VT\Na^1]G[[C^t Ϳ:LLtW&xXm'l_U5ٚ ‚65;=>58J^O@aXY1 0 V f>FWa:͠}xߤoϱ]+x}S$\/ѤZfͫ=Jiܘ$ywf;r{aV`xT\-,.#=:ȖTE}T=M`v;tK,+c½ @g$?[ ~X ݞX.]XQ"֦9઎IDYb^(ZHudWRg3a0 ?1 ?NzY|G^aL:(aIĊadau1"]\\|HoK'|xX>?/?L&ɮkox(k"aVNyZv"J{KI=7m'Uq\e<>GS𨕒WՂb ?0t`L| l]=I )&PV6yw/I zLmQ˼X/~ H**{'#J`)XimU]~&S3dDv %pNKƃ Ā { # _jtxO?(:ELi0]!ēT"2$C1pb К|[YZ?fL/1ajDx$ K{) Σ8$x|Y-ϻ-g_]]{<\9f2ߌn0tZhJrgLpc~, }i]I+ Dj^eu@koBVrl\ HU|1V=><2QlA#}h$"@T> tLf[I`~%I;_O`nY.g\4[lqzrӄnP-:(6؋-D!7b\xr>N[c@>crYEb ;XGx.A ˙tP}I#'lMIIJO>Nu8sXV8mJo\^.ȹj.1f Tcib|1U'5 s|X|rP X)ߡE:z#Ҫq-0&hw^AݐAVAN\n(Yo} A-#{s OU[l.~j=#&)Ր{tc++) ζ\R gf%76\s%z&Q #%8rP~?Ӑh hilC/Eʿ˻ީ߉LBm+y- YUBŐֆdLS.8-͊<|ضEd[hN| 3iX5*i6?*-+#ƣpYruCY#ksϠke-<mP#K>Dlmو#n#Tvק؄<! ?+EaN!C?~ 4b:ˬQB)W#SuB:5%àofen(0"C#9 4%O*K/8!8rEeDǦat ”zuEYab#snh7 XwNU1常CzH.eABu&*_db^K u.T 'g*IUH!/s6mg}], W=eUkšzڻW412Oe49gm!mDZpd@Ф"DrulP5 =V7Bڥ!z{x2@>8#I\9xzx S'"uwS7eoA@}0TڥKȠ\8T qf!!&*q^׳k 2̯ƕmRG$,@i{MU*Sޭ|~45>Ҏ>~X+7x ώsr4vt GI sE>ZYLĭvޥ ! -xy" RYR,ٜ[q*#@v7 '~;: ]m D(_mױא>)6[r#u3oi3C'dT&!`^v4;WW@R!zaM<& xx"N⬝&h@@zj"ѷ}W*ϔQ^8iy64}W)(Q,2cCzV;A'^4ȌaN-1^̏.-|ZeMtتMg3c|wK=*Xx,\p%&gщi ߰U < \EW,/&_b˚PޮG Ȩ_Es\ic'q <3ޙ56ҍ =i+-&F:0ئB-}{\XXtN9MM֬e+#nտE`v M/*x>fwig^. E]>ÛKێQF|&0 Wi1qXsΝ@X@Li!]<7_7и++H~!c1 >qyPKsK4uga_rH@ՉZV3U+0idJ̾}Rryc52 XR1q}2A2 MࡾE%P'Wmӗԏ QCԠ_Ի V aunt$>"Û#&?DlN>rݺfa 6yӌ$ ֠y;P8q2j^Bh|_iI͗ԉb+z'".^eXJW]Xrt_5"W^OOkh[ ے)oMjJr;^,8MXAӺ|f{/rۍ} S?h(֥UɊ Rcn{ iY6T,AyËCFo*Fxge.~=pGV'-+0^4C(LmƘ)[rĤj0ʏ<9v ,Tuo)Vʌfiyf$5!!up(`r"&6CXU&A6i$Mޘ1:~t<ք 1wck\z5~ ݖ?vU'3͂Rs&|${kZ|;_Ӌiy#dSV~f+iW) Q=O`:%UJn2)П~\~]|ZMS34Ū f3ڥ/YOm>Nsչ3;(J}G̋hgoyT-{RmY/ٯ82z ې[E1%?i)Cac 9eJϣMvdBy N9L iSna!}~يp=#cD|s)Ri >`]S5F(xwb_Ul }=G{vQY@m`}ִݞ=xl*ͧxֺXEUà%&OO.[^x7úcK5- upF8Ȱw,¯^H|>ӕc7_55dm FR>LeX;.sJ\J%,-Y7("#@mb)=?QAH-N[؁'HQqBXvHJߑ~ue}a^u4?8#k|ڤB{8RҹYzO&4n-qv'jޥP9p7ffh~%/H7>Sj=$cMc=N=ZJ<%ʁ46}a:xD~"KXV4'<4g'[NlD:gHptڲz&/yَf?DP?]E:2ܕMQ}Ied9q?@D)R w.RHpBqoBmVr(Y&P5mB#G~'uU1λ󩊠X&~{B 1Gj ݳRTA۩<'o ~2$2T\Rt}>Y`|Ѕ٠UBO"XqDrӎF~.dLErFܻƒCJ9()Y6]$ BPR* RwS\Ϛ ab%?F7s7F.*g~ka;qV-~ēAAL| \%2j;MJP4GxK.&7X+Wܤ_1-c1s{qwJ)fx o̤iΊ''`wޑNC$F"jԳh{C.lHL.ẘ8<RB\?͟nNsmX–m|!z5&sbfpE>h 9o־l.H[h {L@h¦7Kטl@l|xݖ[Bu*$T!]hiu^ }D-AK7K&h-(QeEY8 QA մ4%cohǨ&nTneaVO`Sfx:1ߵ"C&'*yJs )#d U hX 9#'A!I=>lw5q]y <)}#YTU+O ܁6iUsW W׆y{*OwBӽ]rм7CIP ?w#w9z \x-r#4O/dfc (Z2Δ)  <ʠRFQ7+(є!\rbu!FaOQ0Ӳ [M|{fcZZ 3لxY?-cW5Cuێ`Y?l2#WJt)~!>GH6j'!c^ay! ϱa*oߥY1R)B3+oLs6,BY J/pU&E81hӵsoee|L2ȍD$ ^IP'8~6(f{NNaeA]95֛QAJ]ϹڲC_iH{4Aׅu7$Lw\}1w30ؽi@c &$yH{grC15~ױ,Os寠}Zs(2Uv\\cJ{ufc42#:8 ۶QWtq 8f BtL$CQgrOp F֠`tGK}HhE8o3R=D7fjDͰCTP5w|eW:kC9hN\k-aG99yXZycne)uF=^ J0BPԒP&r@Wl˄ܿq:.#8e)_ }^tOh"m? g[|nI`@۫zz2iLL}#| w҆6:\N.&8rm=SStnzªg$ OW0^+,f+aVY M]g8qH^>N9oΡ1Ϭ@4?Lj-N5>Qo}OEekLPb)*Wq;+S+}0m:ohB$[4%$}LEqRwsUXrPTi ݤԟY|Fc>y,7J,aQ&_e>m$<}&F,;(HD~ã,vQY\*Pv|sbhAS(yv8e{JUK'yʝKiԯ"^*ἂEWPL;tM,c1{F?~g?ƶ9tBA@$ r@\U, 벍/k\F'~BgKhJx@%~VWźz<_Nh#&C{`mËK+V7}驃/C tɆ*i6V0qQoHZE46}MÝvx| OO# y1^^Z+3/lOʙ:2=ZW5},:9eJ紣7Ϥ 3 }ʫY[1^89؅SvM,hyy z  ߂xG.^0c-& ~ X">TK# c0b6!;K(- ܫf\8,P '5tU kFEh ~ߊr䲊 pt{S.~[LZ$u ^ӻsgnZW|"&.'/D8+W?OC )Qb|fd5.uZ8J$kGXF?@7SЇrxdr\-NY͡G z17eԼn탊<!E aN,1c}80sg؏Cun" Jψ-PEL2- xᎩb?(FcPQT){jnD"(dZ=-6ԇ ,i@eIv2y?)RFxxdsҵ$WX]<~Qi}M̚Cl>D& j׫hO(fSWԉbmHq<+ ] 71hur O! W+uہ# COIMʗ͉__ze`6~,0tkDdЭʭݱQ_k ieIb~ArNؾW KP㏃T Ic6zUisȲl/uB&Qy~h繡_06Pm\CoJ1(үpxs{ '!g&^DZZ3 wgݍD?'1l]PIm 2=3'=)ED! (E&IS VS-vu+#H'EzeGGDpܯ0^ nJ96^*^&(mzBM8P[L@*:7]jŤnf6c L[b+36âべl0d¯ |%T]۔6BFd'T'Q bF5,Q7_3=1@r 2T2W8(Chbusg.\d΁\-Ro=˒k h7yɜ@.MT]hRhhj0>.ʟw1 p,g{v~"ɉ`ᖴ 2֪=pT΅htl:"H"cg hDOg)[\h\֥#ZrQ8S8rfIӯ(HR2@e]ѓMgp !V;_[kZB(>HB~g8Nq*GmDkU%3۲*Δ#Fwugbp濫pPRhd_x_="bR?m3罹Hŋ(vUz^rfWTVC?ta-c򏃰° >FdLbG n'SLmbGԑ9NnEP"N~| ȫچ##ހpϲcb!k8xmțu'Z+[w[#ZQ1J;V\FoOy6d'-=X<ͩۖ er-}GRfQxcwE|l2Ԯ59G}*=P^#qRe2&=:Y6KtQv=gP&L2g-(΂D^p FVRnO/-5=:'ƁPA7\"bt#<1.əe)]G-(e VXS*Pى_#Yq69aZCi*2^jpE0-5L !dHI{GizVU?T9+4 wOQR=AgN =dlγqdHG;#p:VKMf\K<Ψ І,(8YsbPqf7[[-6 g%IfݴRC.P"): 6JJ5^ h#鬠^qXxԭ . npR(3RNX@)$+x5;=p䈩TFr-.m;dC6˂F7l $.#+I'Q|CŴeFʿ'=l5R~N@pgծ;d+sܘ/muŖ+x)w'VMe˗BQ Z?4k@%ض9z7(TTp$7 V +/R~*)ILo]2 $]F͉ h-&q&ATEvt&0hR:Vx)D?Gn~.W&cBTݽnذ6a.e9b?vI3XömwDqCpDh|4 ( 눨JLP U.|FFJIzQnv,> L隍(/hCqs&vߙwee0F (R@zxFԞZݾJsU`ܫ }˜+uM]6긖+C[K/"d J%cH fl2=PNghKϲSG=b|LoKTNx VdU|2tE P];׀ܺ8F~Mx/Q^sP)au{d1v5Aj#gG!GWgV,Wa A>&Z>"FAp"%Q+'szVasLY"7Aq}fH˜ް zaB'\UV(X u%vbfc$-!L;n`_FeWd#I_J"61n2Pڧ#ˍQбtȸ)roݽX|fuOڕ /.*s%k*Ps[Sx hp ajӪ'J{ z9 q8"GwP0u7eA='iZx\|\ ! q,, BUW`_VՐ‹٩z='!`[>Qb dHip-S~}lip wZarS]Ip6֋:?얃Ɖew YZp!$ICZa!)[EIgZr>8u`+sԫ]V,+DneoUzaZ eVuO~t<&l5ԝ;ot0TkIA  4:3bp|fɮw"DKd]U<DG^!n-#9c=aGXMykU{R؋~B`DjV -Mb1hh3K /8kpg패٘kϭ1 yw?CipL<Rب"3;2+fΔS~hɂYP%dǫ<.>3ەk7< +8Sm! L=h0XXm(|#v]&B읔z6'R|Sy@'nV '{ouM\kw !QˢOS,lMf {Buf~^vzql\B=#^/-]c5K*X^u6?4\ThHs$Uf}9&|^O@ Ԩ'1Mt+;C"1pDGG wh}q3%ybl ZDj+`8B$z-Dz[ONC XUJ u~4[Ԋe@Ի L9v}\[ @Ԁ}7wO O-7'6LYng"8eG:J,N3YR uW>79^M%>Qj Jg~S\&3~/]|U?!Mj%/CjG3]!"qoZ᣶ ܟ00ꓻd0_eMy#~ett9\}L#D,艧z8H9^vAF+F՞ܛi[!I%)V3|ԶuSnѼ62R S%5ӌy'X^_Ln,w߅hZeFBkLwӸ,sd(A:0AI}QVFbWf6nM#4\v=M\̜WO8səil ALT^;kdW WEAH>I#亗էF_f~zbc? "U&;tDZ)C.[&;3MnGJ+ll=7_"-.FXjBI bhyV))6z|mtgЋ ,=v!ɏv7,xA+Ss2.$ ,%6;msz"jr]DbfR}ZKPZtqFnJ/<~Fc^mN(f,o?5_캛d>B"$h5_x]. d))#>{zo32"ѱ1C2o#zn}F =|OU֏'ror/ ~^!t1 2% $`KzP\؆#A'owM&LfvP(/@H>lU 8_$9l5 HXmV"ڱtTIaSU\KWE[@xg`Vtn5Q[Z̓NU7-]4wIr8yqjC*~8/lv wY>dd=͎ܔu#bD!K)k{oS-KF6M{¸>?A S8E|O\V)сUU}dDiEW#8GȮ?B9 ϝR~wYFvjNkžP#c۪Ӈ&t+h 2J!I׉/3k!4:hzQR%@y[a+}1P$ĒFXK x2B̑h(Î2ckRn>Q ʫE#l{ܱ\Q4Ĉ?~~2 HOh@@oy|,\W5ׄ93_ FYz8#vFTA0/xR{u.PAw? B'[V~2\PJ[/ =]-]5x|sI.Aj,l;ɉ=+<8M6C]bFɓɋ3>-ː=-^ A>wBΪ$!H&\e,f=ׇ`ޞ x#kb94I=U.3LRO3X-`̻Fܽ1}q3@wG96x2f+ f8{m`'PպY-Đr R>_g&סkN,&jP(ZWᑆhҼTQe;sror6V/$qUbhdʹON ']`;)h%wIv_L\u$7˴謔45L!~\S-:oDx: `la {kwMt2F \!~hXLС:iN>EFb\ʹJ G;YE@6?&(Q̮8-,+vZ@}xsp T*^%=`#!ky"J<2Ն*{EjwJ">B`O+e4~.RONbp^2ByUxuE؍0zviOoK)sb`{0i 3Ȑ2*33 P޺`G+y2tB:;@=$۶.CMSGhoTU_U:fګڴlŴq`CاAڙxĥR-auIgml6{"01` d[a.iҭWCb61x妋5⣱ďSmWCX3C#Qo{ kMOGC;G&MղIF)5 f-4J66#[OH'~pi3mJ0~/G?5H+Br2`'̳1Ts4AQ@ȫ ֤|ٶ925 ݛP%jm)JK~o=}9e.Ғ$bI0_v4Rݹ~G|EnM>ʂ4p\顾 w\TvlIN(6hS»N2v^ }SrIF 1 %0Wxw<򢽵Z.4ZRtOzsHsY4 !;X^d׌el1<Ֆ_ I,8nv7Гz [`*=O"V, ~\9ך%l)VvnVۥǐ˵ۛgWm'2@IqSӃP!"|dAsUZB% d`{a?6U.~e'ɶ[Y;!|9}ԓ#K"=#>{&p) ROLR!2PfID ܚI[xSL7 pr 'nFyy;JYX, m #;ʌ:xC_58* v>'֑2HPrX ]^0RV¥-Mdf̦{5`""dܵ[%HPu(oj)QaҐIϧ;D)U"J[zz'"8zN,"(]/TjKb 0| J䖯7G?sV9G⍨dE9y&wC2By4 z^v2DUTj.wK@(2XB[~/L– ':H1™A%Uݢ y1Wuf^8Ϫ"xih%JUqt#m 1XIJ)*ǟtS:qյ)wGmjKNv!瓷)I#tA `.V\Njoz`4QwQ Fngf',P4b3WAzT-X+ZMHb*A|E|#w'UfP;*2i1.CKM6NY^2ʿNt'n Yͧ?9e3K$[9d}QMt<楴`|"qXQtX)WMt p謄INJNzh5SkMA}Sڛ ͺ@ޑpc#dNH]0Vw8+X&ǐ(a-zr}܆CEٔݒ5q54eT6z1aE_ABZ*"Gt7'(TxZy&K%szMJh*] lAf4LC~ݠT7#n9o]{ @)~!R~;  :IXd'Ǡ<)_RgMAd5;A$O0KT)h=5n,0Gw4EcW.Ɯ5u H F$7vDdMPǻA:9\9nC/U9Amdؽo3ӱDDl:6j$\V;΋* i^wfih xLLk-K\J]IہnVbAR5*?$O詆w-x<Y6}yepSq@ ʩEw vGR +^Ҫ{Z/M H1ˢ0 +yk~P#5;kYg'w8[/azX`ҍTxEIjRCh8:pp ʊiP[I@8*;iGWy m JNqVܯzھۡ]L0=ZpHhX׸tYARmqpIE0"Rˎz_I,eNBu㑨wa;e4ֆ*鈮)U*Lptz> 3q|mL"_2gR- G8oB,z4tE9ė^V[Wz:`fݼ3"DmO6?#?o<|Pru<-q@0.~tŏ}в) fKyZs^-bY},`SѮZJldvbrD`\Fm/^2q&頪QO_ǀ̈́`$lzY XHYjOv k~J 0S@{ 6JknjG=.7k.7Vݑ@֧q8qR7V]/9ѥAGif @U>v]ZҕPABǞ7IO[VZ f"u(FR,,~ϤVCh5||H["V>7lkM>R/Z_ZvjxĈ:rl:mEU3V릟*[K&!i >ΦJ.&ޣ4 ,i9fn홨<6Z?wFc&X|!qD;S3)rxM Ard j0Œ߰slѻ7rnUazCpQj WO)'KSYPf*Av," jOdcCwEnWoȴVj\І 5-vfv;Y3 S &Eoa&@Ď7)rU媊ֵ鵆&_&L|iMl/- +:O\eߜfa&SK\oV;O PVnYhHvlqSmC\|@_5g*g OX3MPIjzvY&;u0apLƙs[^1h$xFInƓE3[z9+#pshSB(.kyUaD0 ;RBX`wɩ̈&BC豓%xƌAJPmOkP&0H|ܧ)y#PثHBfEP*{a2= 2̾c֘s϶νبL`k g/{J_ 2.'q+Uk3s:hxsqT]4Ͻ-%+˴Rw?K,FBvǽC'@ ?ܜj O j1יTY])%L-x<7%f[jG[Qv[9Uw|`\}T>A~ɜƻ]eE0<Xȋ5:$XI[FR`nF&3c[40ȯښ럃~W]5\ MB*nte[/#ਫJۈ} ˉpJM(ǣﰬ ťp_ JRr?CmzTi+MN΂m)A.E&$@K ۋsc"O)gK/`-<= õ|HymB=}rx67P\Z)[hDC>jP[LԡuaNbaƫ+y#;M ݓi+MSIXUcfF$p$tj0b w"|2wSTU9a. ~|zzVO^i]-;TuJ7]pưVP?ޒ +) s4q-%;n2@c=Fuْ&j0L,4*gk2z^ZKi/̶.o[/3|>@H 1`6C?mE??%=9. LC kTBXxyd U"-= 6ф 'L5P s>Vro@:9g.CIfUU!$9'șKLub.ܐbBG_:'''9FyU1.gJ,.K(FUjϠ! Me>}%ɉt87r?a̬`0:>Nvnvt_Sڏ}-vˉ r{Mϛ9Y +(4˹wuf> IUGצl O扚i+y}`VlC5!~Jy=!EX\,: N$IB2FjNߜ2l-F󂸒@d/'=7a |qeU= (4!(rz?c3nZ t̕i½ ݐ0[<Zo)؉T`-y Z7Ѱ˔Y=:/MTa"W[-yec~qG]"qJm<ky-'71& +:E0 [Nko ms|mj$>s,\876-f1X@ <p$⢓wI?֥3fb(#`69k!T I< ϛXEN4kvDvXfaSRcɞ빅 Hf&xZE9:}x#eW^<ȒQ"FQG])IYHΟT#R +C[atܡ"yB|NpbT$0vIŒ`V:XflލՇ{6h74ru,d3` dO]hܒVxjWqxKv%i\C-׍gVB("x[ qB [5bGY/6j) _ME^FټD` OGl}"󄷿)EPd7y~?B~#QzPn1lgc$%ߕ/RrR^E*P+n3l<8Q gc7κ}@F H\{9nƥ V\9@hanAM\?ey9w [Kã: !8O(c1Q=0\ L A [U6o bQUѦ}W^꩐ $B i%[7ȎUc}fzrlil~;~n^6M F(c59_vBg*!%\哚{/^I,dN?劦KPAw]p~bs)y OXa%N&8e_%cC |;jk_n?2YHjP>^ɚ0_]?es+W5Z*Xl %9=^A2%B$ V2HͿ6qeSPS厩DmE~G~Gִ7-iX[j{ <J2J zUJ~DkJXS%"G&o9sNY9:{..˷:6x:s4Q ʁ$Q׎wNB?ۏ2#;}<`|r̮b2rZzjNM Ix-*.vqk 4 KCMƈ1}U zY;{j0YWg%A zq-x([@šRR<*AT*FO M4EA7mCjss$@ؘ-X,F=ܠA!Ffg͟<߂Riˬ4v;JA֍Fhʼnq524*>5:^B*,>(rU',.en^WWCkۉ ϥ f{`eRVg0$5m>a=]'^;ǠPX ^Xy3%Oɭ$?K`\>GD f<޳!ڣ(=)L}U拢=2ďrK8>c8JD0c-Fqzm/̑O fI!j=[g}O*e_B(E`oEzVM]4sÓq]@1+s }' $Aod<_Wt@0a~tddݹ " bynHh@{3@w2O)&fz4`i~$[\/,_^Sqia"a[|/-( *jN-&p}+1}[jxa @EWiw]J~H̠k&yb;Pp:ѓԚZY8 ̏lop\ׁ>!!6  uE)?ƭ@kq#0yݑSG)ݭ6 ![ Y/AZe!^KjuBj Yh=0w]8T\ Zwp-/*Mf^&6q kIq,yT#}eϑ6H[=`ۄ1$qϞ HڜnlE}ڮd,]`(zoHfD o$[#A~P*|}V IBBB!В3_shTQɭ2KQfCԺvEBA={E ,TRU(ghy"h>;kت2ICBZ6ֽ ɯөxm3,v:%ȓ|A Efs04Ʉj`` ^~3.5Ms;Ǐ\ne4ٷZZnFJ4puV˞-jw">k?Ž.-R>Q/2Nf[Eۧvpֆ*?x2˾".+ל"JW:ڟ$=r`4h Bݬ̕bI@{wSRP5x8G(بG\R)Zk^GQj(~˝$3׋M{5t&\.Ls; Ȯ`蓲7^/c'&ZTR iC̶BOYX{VK¥}B뾤ݕi@3r}WZhCA }I_eM0s:3p0*\4d?'%k1>PncM-Iiյʄt s:!- (]flx,n4;ف0IpUT1z5SP"%?P([ÏDa/d\(,FAiX$ŠZN p*j{Pƾ}ӷkЊXJk6ҹH-u- nR:+ǭ0\X]eB{}3dkL5#qxW\<3@(>y$f2q$-z5A[9FdhkpO>6ZF 'vp-j]"`20G@rUJHCp+Ӡco,_x-ϊMx~bfo:-+&3˻ӻ䝅0__ A$fPz eZ4%5%YNdR=S^-Ҁ%}*M*H9< I OR&~4 AH m uPېK?=*rm7cn4N wzS={G괠[]LTuY1GT8|\nvÛjhh-R\a^|}ʪc<+p蕶骾Äs7P݇ܔ,=U7ˈCAčމp<j0gWF=H}"npaB& [ø bijAd$ilXBN˲-Qqyvh8ʟs10MFeHQzW|ѩIme 5yqNrvcx4GgaI|SZ1%}Z~ 8(˜8jm5p-lǃBSPt{?<&&6Iʛ2l h .yH""@ҷRn_PPR<.6f ty  TiM%O|SU*faBÀ]QKR\t-#䶞sUwx툵#?:tOF[2~gRoW|#'f}:&8;΄ 0Dָ2l|(sG_D_vb.OO Yz;Ġ3dG9`|b<_E %%lۺ2 ?9\hkH3h^H*" /܂?909$|9+մ9 : rRe+hC[F:6!09(-sb ֊4`Mqjk胗5ܜg`-Y_Y1[SdR[,gM@#߀"% nG!EX&Q(boJ¹^H<`#5BuK}^YBNa pk9rw+g)u?]jdf%'8M4bz{AN_&B.FYuxJOOST[G6K cTڪI~`y_inp *zzc_8Фɠ)'}`Om¬R?k ΋N[Fъͮ-!byxG:,: JrxThuFFU`۠7#UWnPֶzLYiEpmפyvBc)_QCx)~lmK[kpgKnۮ8H}u 1vqyE;D,NkG7yϻ$yG {dorl5 uNO2\ŷ %}kߧ~&*//`_ᣭhFr-g 6 1075ݟt*rK|ͻ+4W }ɘO؇i"r|!=sIp2cѵ^4A _ {Cn" wbE&FAp&gS:dw77Xi'ۗXNnMaksP䭼Y:~p'U_N&ڤ6D8ьPbt4e͈!dg汼WZTjŹ}xDֿ'R?Ct - g\/GݗJ]Vq+ DPa'|2*z/ޗV*J '͗ Ci鱁JLpr*.W*$#m"ZCPQ Ţs ]Uĩ[nTQ~M8S@ߟǏW4̒[QϪ7{&5h7$kJ86MJ֪=~+P aluO "oiW3U xˆov \{c0>b*ip lhKfؐ5z+>}"FxRquN83d'Gs/0yֻlqb~.$t *D\o$wv[r wG2w11]߶0KMpq4/;\[xS+bTA?ԛ.a $ (<:= +9 21}EvW:ȭ|VX :a2ڷD!i_4\h n@Arw3}uRr%߆C) S(0]==iٹ})~H>SU מJqf|킲:Dơ`Y9ȓOp!B#j XiA%E1ʈpǡ?6;fS} _QFeJ"ipTjC.~fIJM%6|5Rb8XRoU4Sh6 ҟsUx[qrT7mC}t 603cBV?+k|JK1ۿ%xOF}㹦T:72e$YꢣTo4Жc:ؼ9ژafsoSI̠&<)eb&۳Zs)ٌ]U4Io(>PyN 2+D0bk;`Fگo๜#>NJ: KCtfL X{[MFf4BYgFҏFXg T!%~=?H91!RA͏-ĺBc}+s%ƳH}ryBe׹F :%b7to Va9j:2@M٦v J4!5gq7 a;(?pQ#\EලDZ4Lu58j}DdRX1*1MSE2msqB|dQ8ܢ`Efqgg0(gM3}#=EnKSU3SzKNW y*l_yӽDP¤#R{!V `\dPOuz6ͫ7i^إdsH-cī"b zVB=m{!r1eTNEl␀I4l`Y|PLhR@Zs@JjLDmbt|Rք 0olZ\U!y#CP\|k" s*dW.hRO(܍6mɹCjX:_Xq<)85%֋@UẙE&Eq hjVj7R :]ЬFu#u^=n!X6 gv%\=vGc!?FqLf"uWzϫf@RA`|SM1_w\炙sW4~MiEPv;w)z6-FaFw%Z|אpֿxep6VH. SeL,K!Hu{ rQ4 gV0Dqc;A3Rz0AMI)q)gSE6d`@(pp濣8@uF[Lw,vz˜u`ϓf$%g]59;G۶(2R~%apFDL+r` (2L5)-~f37eS|-j؝ Gj;;:s6`l+ͦa(v7]anԾ"qOc4IHL`=N o![wDhKUNly,z۠*@6~M|x!ƈ敢1m,uFb+w ^ >;S_>x%*:Jl2 /K"ݿi DUьS%]9GQ$-tiғߦ|R@kŏ U!QA[nWRzL%Pخ]NӁ]״bQRArTcM'fHA-\M =IptL ճ!~5,P+u$\5$/?^bfKrT4?E?5U[%g0h?Xhl?0xWUt<D${35(D'SW@D0t|nDϻB5e]ף֗?vcK N0rPS"qF17Bm' ᨫyDmRIgAR%@zv^>] и ʸ"R 9GMAnxXUeCʤg-cfߴu]-W0ϼWm[TK}He`I;q7ZBRrTJl.w;8 EV+/ۉA7xJ A\<^]8=+jݻ*ãDtpUXQmB ;r ˢJB@Ch ύ(ŠsUe &51\HV0򥀉B^/ ֡y؈Ttb ]."DHQ^ WYBPd]^1&$p<7M@̲Ir 7p n`ZqlFi@>LaM7'iH51W\"1iRYOt@;)dW$B;tW X?&=<s/ϛ(cqCgT(2`O;X/W4kMk9.-Fe/譧%TefBmRε"VV}B n{'(zgœRWQ@Rxfu϶\ -99ֿ)U5}R [O2$pT:U:,@( [:v4omAk9_Ce`*!!5$!ϒs(, `hqR3bJ{3wy|iy]>ם?1kvA3CAtzzi^X$e#AA*9ٶàₘ+7_02|Na5"iI-4-x%y?_B mOa)h5yЭb#>! uӸ2mJ}GH念v(H&c@U)3OBʼ/ )k*  X's1g1"a": |y:LYkM^pU$L݉9Z^́Nb0ot8sduͧ3tv2ǁ#ԀLT, 8y({=*mM2ChJ*$H`x(lQe#v&g&M7z! w9XM iogy6rqU{D) ZY]/[5ER+jcJqKFiJ^.<܉GMBXKBa0E#1%rj~P9Y(8N6XI-뚱Aa),;R{SߏK*'L ;+sDže78ݬ"d"Ƴ}M1ՒB۟BOqr|Bs֏$.wjp˛NXÚl,fD-Y^OI)xtޡSF417%3Xu'GGُB_3gQbSZWA->u]d411>'kJm|+Lu`s3 X*QQ:= O'Iujcm23.JDI=ltADoٟߧ " JJ en \jYf۫ag"V?3bE"3& *^ճ!iB4=<))3>3M8}Bɳy'_;M'Ws]F Rr=o0QknR$޾([߽ėr88|jPwչmRѦGƑH݂yJpwƨƔqM ڵ]ttNg`)V/N;dёI|oJ~IՈI\h]zCpͱ"k1 \TEiLɊcC\*>LK E3t -c13l#Ho2U~܍&wyDIp/ju]%BF hu Q |QD]74l=^ϰJ*$[__#S•h"_U/ސ{-;*<iLd)Bv 1hۇ].*(Z>c9 "Q]RV*L.0NHI5aL¤͚ oЉ0X<<k$..W{̉ c8y-×-wٍoKg"#L`&3m@3շ9Rxm=!TZ&D)[l@ :SӱαȎk@1KÐdzwdWuwTR<0í@t!ؼUac:0.U Qu@'SOuܬ##}r(gVTXxQ΄ƿBhFkw0':aAFhi'\z7nu}SVeYoWTX8n"C $7qM[Ħg]d &0뚗عU n%屯ρxJyg81wFD\LS|9sa;=LVINQ!C^uf̘yKgN~bC9~o-Vgl֋I3̜|tڴGm`elZ_.G[s76ŧ4$<**u˼Y.N]7wkl cte /E_$7*WsJ%^(o}B&Th?j7^rKo":k a&g%HM aNϰ?(ژkosu`$Qs!o Mmx"ѹ> ήoYK񱌡-CA9VuN=[*CrfS Ax3l]!q| k?^LEL]40a`ڳ3ZC@r |[>%K~}yΡd@?_e#Y1ØJGa8cbN''(4 Bcџ _Xy|xyOi ĕR1fK?[L%GH1`YVFƨI򄲎[^A`gx|*灀ѳnhQ7D Cx&j5^=díufd V_P 95Dl%g*{uL-kBbcZQ-*k=$c=S `CbqMz0~6'q$vo^H/kfh?t <]HutPkK T @Lw%#W0nU5paޕ 0e?Ifk_}\o%hhJi'acaۤ6G7M٬݆^/(ňtS<[,~8FuPz bqzH ƅ)wr|N9qсHS65r+]C{f ÃZf-i3ڠ \/?bY|{C.y_~ٍo,%;&{~w^EK C`a9~#79BST l8檻щ"HA> ai+C\6J! uȂ^c:̦tj.|YkCc5lffX81˨֘vId8nw:͓|ʋ0 z vq9W(`DC}-rOH:R?q|]_e8F5[<=w㶞"-s{eFy͚2Z3WBβuB. */9c8ʃ>sD#Ul}dJ Se19n]*OYrE ø Lj:&w,kěGc?{=&)DdTuX%k8̡.<`ql/yWV"kn0qxn=#,քRDQqǩ&q0:3|AO L hbt"TwHƅHIc( |\xC'V6<2stkyQäUB>QI^(,,ÄQ!V3)9B&?/WwmrіK6ri/>ZUrm+>OJzR+qPɜ L2`W!BgNU]\6(V an}sR:6O1H3 8]sc!xCLϥrﳛV[9_lw'8~ ^7>mTޝ2ژu; cBHkGq/,;Mn!A_G6Į!C1LҸm<ϿT|yoPS|}bPv?pCo 1k^i`Ym qRimu3֖͐ |QM]W(Qs 7FnZ"&3s['?mR!ܼ,Lt'iҔj h ACn|1!Qa:E桌>IsLW͉^972VXH6\g@T 炮KIQz03qtI*b,0pG#7׿2<@ᜊ&\QYv|lYz)a(:`\hB&T:N̈o(?Z;@RqrF24_=23tl_Cjf٭U>qŸQYξfy`}?&f pB853I.HD !MGVqK+ȝ)6,kch *fرMY=*xE#opdW/'G:hTu~O&c]Q=Z * 8FLbgB< M@;MU/ܤ2W2qCσdԢ0|YOA׍54箌.a3JgpъΎAװk9VcRVIr8/υxX+wLtq=~}mi8$KO=֥OQרlmh(E#꩷oVnl2ۿ#MtQ.rrr7BI~FdzϤՄl spsMRlh,v~D2~x Bb 3z3ub*T"qiG14p(Җ|[>dkKq?$"?-L  o0ŲYlY M{]##?U;S,0I)Ww?!kh1utoiϽF,u7Ϩ"ya8*#3$} ץ{\\F'4ڟrدO,h#=OtbBb>RE3ʸ  t[g\@Y)ҿ~!^&aMh OqZxt0\׹&[›XVCH⾗k'Ve>Lw yA{e^ ;9 ӡκfZ`+(~GA~^[⥹#')im@3̢>V?7 6@rU;3^F#?Hk~o5ޙ}N}I."Zwe ^y4YH'mx 1z( pɘ.j*_!5BA*̦FU%YwЛI[J! d-koӦGau$*p^<nU gLuTh2@}5PN3orriur=fG2-.'ܖNQ'cɯ:U >"o/V{\,GD_39x6@2ܔ H-J^'(wXL6fiY-ZK{yFs~R̈́cیl )ӱ1V|%kR7Tܐ#QKqoyl+Hpbk%ǹҾ_~M8p o|ϗ-0 +T꼷KWJ?njib t I:pӷATڞr0,bΔNll͊=b+N "%ZС^]f: @"m hah3 (ReQiOb#b}|DJjHSl𯐺ȥYk`88[l' z_UvͳX \!1k۪BL -잀8Q4*[q P~^Ǽȱ6~U3Wy{T ;ӕ#^g 2ٿƪϱWW= p_4(: ƘJ0vY 2w"Ve\o .KOz_(zD!SDAtX^ T KuK!}0ZؒJ#ݚE4:/x$$ՄfrKg[РQғK9zr~};=?(rgmԴݼ:r":'ΈWR\GCMe&~1cG[9)E> ,%j*){NWλ mæ!/Uրp_^ J*6鈽C+-PxJ@܃$0wRh,剒%Ң=ODfݠZjÐ<*o=>dX{m" iK.hhbfD'c',ŭ\P֓n?5 diC/W[`)yÂ#V*&{&n6PBg<+)RJՙJ/Xsč%@ S5 2suh7 @ t, T+p\iC(mFu{?(Y!@=8S(<DDs2c5]%DpFM_:U,?iϺiKeF5ٴτHl9Cb 랊})ϡDmQ\C]? Byض{ 5h@I,}Km,Ae{"Rc EmlCD\+Db _č;k`p-=\&>3Ykõ[!wsW8EE8Nzs<7nIEhq? }ۀb|eSDQ|=~{+ Ӧ=SjbTKiAοY #UW1G&ިP-LyB\wO/b.^L"Lj^K Uy;J7i:0f;ǘ~h 4d*J?> :kbz6g4wMLM`oGyJ dk{k Zh\bqO(x:zzygIӄU|_4zIJ=g4J΅2_(qSf6J: j-Zj\\&HW&m`TO֗*M/xR:ę9/cڋ/|~T 7 >h1:)BS򳗇YSԤxU1h,l>enl1YΧ2(䧏diO\[jLOV##B:1KfT+p橵i3ֻƋ>zfut|_-duXI J0 *A䮅j;OVK~6W,6IRǠ!hy$aX߃؀bB 2,.Ll8Z;K1oï!r+z/_вxm([D ~e sAKG%{ҭx_@ /|Bl6qZdxbId4(`[ҜZı pkj#~LcFFll*&~;)35bHa{9>îF>F'1ϔ4uطgQTD mOK7&-7n+7ȝ"P{wTMCLuT{<8~duM)ZMRT@#pYAD(>YjD^*lo+Nx?9C3m0Ճ-V]̝#I`. MzP puA;&0ߔ/[ŰB /QH̜ތ:Ȫy Ti;c03$m6c]2*fMա5&,8g;"ֆ'R{Fo<u[BJfHQHI5 @ZVh/7ZƶqhwEIZO)u Zx}eW&H۶yp,T7tLq̤`- 5 s|,5O2k}j"7Ͱi:5#OzRPK0ʕ2N_-iƘ ,QR"2XGvmGw>ͽ t{)(pUoiܠJ`΂nC 3U5)R @asZք̇@9|ʾoi( lNڅ RE;?O*"5tt[z5_~wCh|Ikr2Wݮh̓.W+E⚃ݕ^9{HoI7hQ9g#cn"x:϶F˥oώn=^=5Bdl]׉/g#Q:UF`h!zٻ; <fM7&v]VNΝ`9(u u ɉIx a;FSaN0U3ػuURQ3)'?cdzaᘚs)_Um<_(hPaQ;[gI·X-vȣ.6 tsȩM1P&ڵW`g߀x'*~A\N%3#\<`#u3$,_o( $TWBI/Fig`~=1ѿzθN&P,_}ڣjć2IoIV.^J?#S UD21D@4]&qynZoo_b/#ЭHلx3XTJ7y~'#Oo:u! ':%Uکt}DmY3^h,qֿJjaaPBoG%fK0 ʺh m8<΅zfv+L&yA V&x sXR%YCg[w}kVÛ j}u13h?6?'! 72UM(bYAk@_Jzƛ*J;_?O ae`տ _[UmϿňeo)Fr1Fg fm@j%֜]43UHWxmvg3Ânj7e%d}슢 I يoǶ!+ з7h6_3Z \lmsUsX+" ʩiY唓\4tA_-w$g1oCpRvѮjwlciYZݸSs,#r{M)1GEsw!ﺀ{2(~PKiFcG`^2AnH7\)ܗti:Y$vpNщK1۶hkYVTEU6' &Kk՞ W稳a ;Ny3![P孆Z$5DB=åtg/ZجFB $&jؗgBE\oR{ךۢo)ha}mj.@iqׂOuڨ{u]?xi `Њ`6.VN >kl(W!Y,RmIyv/ \dLOoO91wIB|dB EI-,sn&U>չ2Ts;hdK]U"/ I. Aڿn d#^ 4[ %%&ƒOdܥ2;C1Nlec+:F|ٿ>T%Q~Nt{Ĕ{D_9 7 sÅLi{c#RXzYW#+"`ݏ*=l1z,[fbM"I ǵܑ70mu V5:(~:3$Ȇ)+qtzFg"dž栍$`*N̔C][g#VI/C\ Nw?d'rV6/}8¯ho"jvMFt6' ai"#gt 30v:U G;-OTIq7z{0$6i,V2_){0N@ :+ucjGSE iOpyumGR>JQ %h GnbRߑ b *ߗO3CN"i؋8׊c㱹_Ft p|1h4L8ȟ;xjr&_@Y+IWԶ~<3|K&Dxs&N#0OFlXjYzv$|}ǯSD~]mĉfQ"K9Uwi35)~JoB_=Zq*U EMO1Yyb 덴 \Z=g}qz;o-wQl$~V Ek1Ox&uAxuiEgxGq&rS) R"97@pSXbXVi9ACHnZv3W)YQokos#"~HBރe3],^pM#Dxi5IOt])6JAzaSWt%_9fyU''x /q΋đy]@U~?Qoy3@RQ"3s*O+gw T>Tl9j5ɲ"/mIϮb wZc^KF'ٮ]r)T#zQ܏rEDj+kDT/^'7wpΚoD¹Ax+-cz]_O rѲ{Y y_; cֽ(N{K0P C`_uŴV; >[EKIV>|Gl`fU˕c>ga6'Wr'c:TЙ#ɖUL^G=wP_B,Lb8$0{C0Gx1bag\UBNgRQXTG/ҥX2ƳN]+{}=CV*m3$Rg N֯%:(h;X@#[tZMs.b*7Z2Mj.8biTYuL%C=LhЧA"5C 1E6)ҙ!^LPy7:bև~`<}ےze6|?Y4V YP+OR!],#zBcI ͮÜ~&|Fu2DmIlBh+< &;Un; n,5s߆ZE^ vFƌå;ߟfbb[ԤeYH"2"#9/L؃zٔC}>as^ C^GZnU:bZީWlI^uU DgazA9ЗL(XzdKv%B%6 "W\ oZ֥ElšgwܭMa>OüÖ7BrDhtDR(= ԔB^I}#mqcwk h; uV@ AHϹF -jHh哴sΠH<;`e2yG•:†9h9dO:ҎW[3V>TY?}Ve  ,,`~[fWUe8GwGLa3`] Yhܼ}np}0Q4$R! &gRۺ^yZeTӳ|Xôwn4;2}+e[7E)[ uE3;YR Su |slU~*1܋-W{ N8e7F[Iu?G b[sրF${Kf@w%+='k1Q%pUw}JAȰE-g] n2G֓ 0IFF4mBB} OReEb0EWXh,:E`Iu D2˒L6:c C })5t&~>(<ٶ/%^R1@* 8Ԯ/<)36'&$OC0,c4ˌ饁Se8}.^݃,՟DcV@h5xVyPW.!_\ t[`y2*nե!~>ʩ}wxgBBG{ٕLχ&g%LDV7CS!8H_Yb%βujH@DUYB%wn-_Xpe$Lg9:D|+Oi{ EY@ud > d1W<(I I[PhOW=wƐ 9 5 ?ns|e v眨dUT ᛴ@v7 #J9=Ҟ8xj7j뫻sw%y+*`N ްv  #~ݙ EoW^лmn_Ym]%"*2ĩ\^Xi@76jLMSNczf{3yLhEf6sn 3$/XlZ-*0p[).htJBNCRrB_OkڥDE)a02"3jЫu؀ƕlO2#,j%ͥGcMI? >nllQe+v :dl(,%z9MUdf~j8 -5w3V 59,L[p('aPy;sy?ySZ!8eǚОaJ<kT2m2emMfmջkNNpqOGqK~/%?70*=~'D.IG&CCОQ>_  4YOiWLG9E/n{GN7v:4ԮHrnwZH:IF y"4TTwؙޤǚQsx>8R5B{ +]V{GWHpL*V붓a/ՈڰC'0'tax&C#Pf~a|lkwXmeֺPP4D峟rʏw자#^\"^q*P2f ksI)J+rt%1=yw?":MgP81A6uo ti d3ݵ RVQ|ɷxsYQ0#"T 7bH(y|8 -,vSJsnoT,R,vZ9=O@}DSG#f}џ6fK-$/UkQkyCfںV hP(C~!kNH2l][^2?{O?ψ )s&컘ʕ[D%_;T_~(݆E cSO/4GE=;D}O*m~S?P߹'tl1z+հzv?ֶfE5ћA uձam(4%߶5<ՓZiGqz=ɋz"\A?9<"Hq7H[Gw6ʘ~_s PT(Gʵ/j܂$Y=@zӜ*.HƵRZ~WV!m2v]dQCmO|wV/ 쒼㾷ޞl˂W0-\AykZ~@n\8>ԜyaIW͸er#TxZ #RAk^44fUk4ޞlYnsܱ.r gdr~f>0p YQ\$--g5F]2y>I7.Lp/hxO7z^f3'^(A{.7P6ZfCR bu^2$#uZDJqUXhegڝJM :I7ؘ{irf AeÒlVpbRBB;Ē2KR{i2݊OYq78Ff5Sf╏ iJ_nu}u/Xx\F+rsޔ:r>d:I-uEK9tvw ~c>{{ǜ :γ4ƓDIlRZºTB6a#oyw K8k1[Mb -OB~|OU9/>H-AݼaS^iv4FpqH\:UBfw`iߔpŮh.9}GB/ @oH|i H]YVWM#i}s"5hf r"z|%}=J7U68.soeK&…"no|,nɁB5ZO{>њ1 gs똞 ۶-K^hX'PbTNb`~㶍ֆHxMT\RÅ%LqoAeү]o7pfdȫ_[2Ǫw-u MzX,◾*c .Bq?v&JAYцq]TFv:)E1@I-Aһ7i#ٕLImnb>2fJ[D;SEIی#<+1xߚkL=>^IݻAq6GP<(iq2P8Xsv]80Q' OB{qSхDy9MZyw^>%?9םo6r(BTX;mؠx}l@u°xQ pSמ ȗ,z$T͙:È\0:n !ňBA&-qQ[K*T^@jhseMlssvZyF&ީm*MfԌ e]qDQZk㧘=FXQ)@r[suM>Cv2*dݼq0_VS`660հdՒKPͥgFa}'&.^%57BtUΗjމ%r$|q"z,[^ҭʭ={Dooms@wK`,7T%eC“ %;7'@3L&s/eH / x`O=2A 4<4id:4@\RȷwNOZ|[)dG ql+uò]#J \.ܴDÊR0P~_59۾ Sw|Zv8mlc [L'6T/<'~Vޭ:20wfࢅ6_bTGW`:-E7+c_R͔T"*L!їH;Rs'VSQ q6tZ#1} N _Vk$mi#}ŌwK66M~]Vh,\{߯RkՃJFlȿ1MgIBS{lCerY©ȭOFinQ;EP8bj+ȚC1=dM5ВU'F61+^T!uԱRryB;\pSC@ PvwיF Jld Vx`>k88g7+s`M20iX?& S;ڜSNgsyلFfZi5>ߕ H"Qgqߟ"yޅuH|n_QIuLbz- __"23 ƽQHCm|Yb02?>Fn :>Z\ʎ Np*-3ݯF,S.={Kv]:У\>MQ!͑λ][nCE-ٸWˈ*gJaiF{?9I8u+_~~Ke^21VzkPoatQ3us}ʾ59lVÈ%iF #1<;mmVX#:~BP;Ě,p,/U0 r=?!vXއi#!SHYƝT]4Ny ds;_VpX&!O1, ^A۱u|WkĄ`6ưC;ʔ^ 4-.8g[d'P]) NHk0-"B#sjS{" GOeTP`BxHH P^?Z`nL{XcKE*@rfc(M|LMb* cQO(zR(+ii60py~, HsX^qf6ZabӑNZ)xJWqjD8r^ QNVRB;R[K'S unrnsBT}]iʉMmL}S̫@^v)?]i{gňɩLשT+'fX↚numc5p)%f^?=w:^3%eyW=V37k34|T ܊:y6CAM{jxM)ybE-WEgìI|Aۑ&mJ*J=éZ|)v<}򨿊ǘU-_a}/E讈+g^ Bb[,9/`@;&" D3zUKˤ{3sO-'eD,EKFLí`fS M$T7/ |e]kֆvߢٝm,HKݘE.Yq?ZHi:$m.I3f ms3<fyKEGK7tOVӂ8 *XS Aݧ( f ՑePIUU;Hy6I)?7 `zh%vƄ*BIJB0e7G^<|]."+_kvsJWjƞ;@w憳mh@((;uSpٌ&aG m9Vbj,֭:A%Np[኎ ƶ yb`fu>Sm F_d+@D>hKDq/ 4"-;i$HSNב|lF!!#enJ7k,i ;^ 7Ji(a^v=H0'?t DwP5QT'<=ks5/ϿE~yCQ9F_woXG`hi3 !B㔒Ub͂FI*x315κ:e}va^'uh{NUs7("a_݊k.tr9, l'YY͑R.<;KH;*; t1bd^B[2U.W$%UY%|LtDШ (z MVJP+RRbRS9invᡑqq&k@hhG"O 1漤AO.p}aC"kwDϥ\Wز+34]GgaZb' 3lW35ZxC8s GwAî@z[Gl(7޸S2W;ur+}39qNH5&>mx0&cTyʠX7鲝_Ȱmjܜ(yVX!aoP..2~Gry@R8V˙O~U+E0K1wX˄nc $y9iO iT[f P];Qԃ;ek2Q%(ElHF*/$ e.g\Mh\/i$9%l8 шչ7#Tji@0ti$LeCޠ,(yL!{棊 <~p*P2~+`4 쓏^G8X D?Kvcრ fôr `TfU%|(k?N*3gSfrV~zelT.}{ߋYJ,lo[lRZpn+! %aLB `D EE'&*qLSgdDTJ|B체H)`(:oJ\m,侁"v֏Hm;-J nEEخ@ 3+$1EI 1$:lJ):cF_xWiCDKUK8V|Q:%XPiW>+7jI)ZEdu6"~\0$MhBY|NhZF'/ġ!"Ȯv>p~Ca2+2P|:Wċѝ} V R zZ+Z6iDnGCC&Ĥ.b "^:҇H؄:31zȚ;`?otF"H[Ji0*K2&)nͲ]gHtd̬+1>if{Wɚ]<U:&Uenj5tJ9śٙpsTJ|OVpeqyZћCqʌv]!}LS)VF InGR'>K5ʝ wK oՄJ1m)#a3EHl dgw4jN;|PJRhѣ[΄3\O )hΪ|?3]4XzX/F kE)AYAo aPbmL &'dD[FIΡ Nv2&?_>x 双}8La﹄el=䆳,T D:ʙFDCd)z!˪MnrY\dт2Ne?W ooP5=(>IS@JWNyE.i|iJBNda`R-[tKӅPkSǵ $/^Ci :$tHr hդLe*{&aOQ;;eTq?8 ta|1i & ,r dxBljJ\(~v8tw-@N&rͼQ}Np(3}m(,GQӠ SJT)//JLGjQ(OBcj ;21"B%>=o6lY;\?/}˖@Av'Ui@-)ꨇ\NwA1σgQjlr!>NR9M^d!WlP]c҅ZM K=D a3BD0QH GJygD=i`8ngM+#NYp*eǞ1[vmI"t+_KLӉE@‰o$>gpr D<͹"UmD՛Gq٭ D݊":e"?$i)Ntd[4Utu0&ӥ8aA߶})g XE[[jT;zRsq[JsOCc#(ij3}Z`:~/1gIPy : *7BLl){/{/ZT~#a`˂дozSqY&k1@RNtm6\cmea|A75|/Qt[4lh ywʗaeG^`yk%Hdߚ?4kȐ+P΅Aw;_ay.iL Di:8d+`yQXb(@}ȓLW3~?=-Vr cUJӎ4Io l㌈$~ rTTRH-bW Z{~:w{Ği%J=2)U d/忳oj_ت(w{YpȌԺc}9g{YP !i)s{=?@EXrm,Ju?bH&67;lfGr򕖑Biτjro;3V W[ƍpދ}Un)dY3u C۶k]'] <VN6ze@^N ~G"m0ʋR8e;T|niQh0W TY =vHң.n]oZGe\3R7ȡmцĚ}BR^Ay1-3^B?A([pm<_%Ö_{-ĉm4j &㞒iAň;0dM9;Ε;Z -;ݹA_m_B^ zLg0lA tfIc+lxdY,?:ޥ=_|hwHScǀ̜eQhY$@3rJk^/m.aմ4fK c!8*"bK$kgTxlŴؘ]'' 2]?W#kX2ǟRFQxGf&[pu*am:01~8qa# +c`P3>ҹ# D ro@-`b9 6F4z2WcV X_"tK(byd\~GpE6jl=+p=c 5Y6'NE9cDHR07w~V;Y~_̘ۻFam=n?g$|3*XQWyͿ,E[br%'7]`wm'9yF=Oǎ\ń-tXI JTh2D%x~N $ Bg~ 7mp?.iJ $UfƗOXJ1rz? SٲpOwޔit7igZm8J={_ڲ|U"tuo۲0ڧ8S3zBoq5.nwqnL~$:J1Ky3J٫B%piƦ]gO^$HQ"/h(ST. +0_sDxGB?~QvVoOwʮUyc!4F1&9G<Bx[U(r+_~Q[W^U:ō(pU\' e0NW]hɬQ v̢* 3f:S;'ix- gIn 9W97=%eT#H 5(oh|H9\M֕Ol. ˭ />/TS><'JN?6w|Jqyt, BPN=vk&+'S~Ũݥ";r9\cvrNSO8 S0&x=%h ]&)o.# I5e˽cW|U>:uT^Ҝ^e Jˋmhm ;7'[,uSL>yą/+S;L&F=ZFXJ|<4ZZ@XϿyUM*HݞzAy|_XDHռW=8N)X^urɾL\mBH`D,ZOm1#V6~n_v  2 ADL!肟.ʂ%;Kna"VzVЉWV٘-V0Фd?ܜ>ahc7x~).<$ bYl^h.@mK}PN7m>hX.ΦKTBSa1J}aRIàU5έ;LSz)S-1pwp46 .v;jv *m{`ĒgsLI >&inyZ{aF涩ZgV]a+^܆i}OYGflDe`&AF8X^ƤF߳7!fȞVN6۳2Y%|U|I}Lsru(;>;${xNǹ"Ok `ɬa\ZtwHI+*C,[(9AIG,bndt9_nl (Ejr9w֛@vDF->1DV2g=0Ld5''YhA`Uٞm%F%w[>!oJn?J(N1վRqk`ʭTaEQҁ>}x.{!^kO]#H7Y "/vhacP8Vgν;MBt'ϳO祧1f|ֽ\_{;qA/A{Hڷ] /`>DX R|p/k]Tl0~(Nuh6J(k욁e")2 9wۧX9f۳d:(brͷ4$}JrY}jycwʤdO+U/t t0*̝8k%e:E[@Ԝ΃,CT}{Fps!5f9"gL j ׭VzJm[O ]_7+" |Jv-+oʱwIrQc. Ž,=I)Ť\Mil@GG^[pfR񩼌(ݖL:ҒcFTcЦUbuWTP6Oni㵤$< @"S r*(X9 ̍M@_ԑ#5 VצhM\ Mv0궣 V8@vcye)j8bL0xX_b䌭3LqA;96NydF=Y ϷmEԥvXEeЉ.Rg$m)ɐk pΣc"=;`oיVfȋ *隠qv$JM.I>aCPB!MaGq D\˜FdO'h2Yf@S-[~ fscobuj,3@߆@Dl=svˬJrT# 2 ##'|f8]^ޓ TvH㰪ls mÅxW11mԸ ӍozWhn$qo f jGXmW: vGl4)$_g kR8%me:+R7'}ȵW6 &㵯? \_x3&PxPb.L#D]X^&̾}1 ٦h*?&uf:Tn'!$[H!t$Utz?Q^g^O!IBjEּjmFk=gcgJ&fc72;e:# hjX~UAsNe-Jq?pXbB6h׵cs)bg L1 7q#OS}u_bDc+ }Ib6qWq,xtQ G/ $3GUJJ"嵟*~p,T i)%tS+r9_(#I(e?-I,YY<3K_..̸q aǚM#vZo弙"/_MteLn /Ns@NJ$+BV"P;exHdEX%mPWHyf߈)Fmy_„>KղyTZF/8IXo/1niԈ1EҐH0XR_2ȑY(=V̺yN譒e<'3/l:ڡPRONfdhY^<weQ97KxLQMCciRDŽJBKr!MVs,|=Pn*~/ܼq$=V]BjSip*9.oCo%DA|'lz.~آL.M.0Bh]ֹ?W4#@ݛioԁ p0*vCu7:A7+z) 3",zt6{ YTϏaE ąMs7+sMl7C'y +T~S,E*fD2}9MH"?xw X+x sq@.(4-2qᱚ@w`?"P-~}'-V]].-#0 gV3P8Z3Y LrtNƊt:zi\!_*_򮣯~aŧt<$3@RYmWrhN୵φ̰B7Zpzۮ w @"!W?3BKNry?@Y937s.U:C\2lDX~kд6cqZ]&wa1V#$&)L*X aV/XoQk2wwo.[e3M)W%"ih9(q}A˘žs(p_a(,W'lPT=WD-q6 x;g.㗖 O_@ Q OkXA5̨_JWJ-mj=^i89O~aA Edzh>OZ|2\QEquox_6 I7*q#*4*M#OϬ8 xzV^0OTXt̟Ѐ/ĄDf|.DBC%:DrX_(|L~Ww; n)!LHz V\.rBc>+|xKro 5 CŴU̺l%eVpi37Y j ~y?11:pNaAN|89>W[¹Wv W~b_c oj"0{/w$h~FFd4疲:D3d;^YM7ۄ])6 [jes -n*8:`s~IJW툾-ZD%2^_$hQw{Ou*ap`!윅JY6cu\ѝdMҴ-Z67E ; F z1k*SVQmhTH:`J pA]:c7$=.GL -4;³K !?FFWFzm>i,u{~S&\5y#Bxw{S=U:_ʂ6G()w^J5iP #yӒ1_Q1H N)7'Z;PPgoG+]+kkpZkO k۩c+dUa|#`nN~NZ &u &5YV掖 M l<Vo9J-U[tݔGCr'^9\l} &!Q 1f8Δ6GE[)!e5]S'ǘVYjdci}Q l:_S;&pɾ~NUsKڱCH%lD! tL^N35~s W"}Ȱ`W)6˩u ς06ɵc/~v2 - *1t3A>: Kе\^oJ>*v>$Ug6Bx1'-Uh_i0 @1ݞNp]T+t;vʹh E`$+Z`9Gߚ ƒ'_[ dze95cMY:8b ۺK ؿG{C~J?ɿ&dV[㿀wJPۄt:'uotW|de_!6Cʽr8ˉ@;$uO@… }:o-yC};u)ޤ`W0(.moϭJÎTT6>l Q&vT~_I$${%(rBvg=v$8>gz av>hYn З,].ǕusvC !#Xa'6^XFQP#~лݑkkOPIm" X GdD62Hxb } ^W+g/aW SAf=%!z@2lC۲hZ-9[E0vaXy/9.^@dVx6z 8GLljZd+L!pE8as9˞XwZÕW 4%X'ipp9!/O&u96<]<3Bm(o] "]Ѥʀns0Hl`8iy_' }ho(~B%t(ʯ]d}!x&vsoUYQ)ssC;]Bpq,S{zƊqlc PcȌWk c"GIJL3D % ,{i tW\f*9Y}?}Q{u'C@`˩*\=/Ff65" M^3`A"_hh˟~uw^B0/? jUzNo8ɡ 3k5z&Yԫ+`3 prُtPE+Ŷƶ2z r,]0c&zf%Yi0qB=^8ko}9\ CxS mtߐ"# zl'-8dW\3]]aκH&"Wm5-F7i ;RUz6*p |ܤ ~-ў@#+9qѐrIRQ/JtojRTAb-fs/ C <&E>x1%%ْ1^jaxQm2HPXD&zN|n#+P6egw BVŀiC*]@CI8{l:Q[IyV+7\0ÿ,ϠJ45Q*@CF>*;# #s0o=Gྊ/}JЕwۨZx"]f 5 ]{#Eu+Ugb!6S1Ȑq8/{fH(yvF:֚GaRaEmّ5It M\ЩSlǢ#'#&e!t&뵸ʎOh5j[4gLAL@ F]GI,čK<'?: ׆H%!^󊧼zI6𺌝Q' 㝖'f|,}XjPEghrIa 0 vϙi &3c&zE1OVTq[Iqkun4x+kA{~5z`jɋV.gKfvPWHshnQo0#DD^+XdF0:1ɺm?XJ-F=vˣF`mȡDɰf a><(T n,.r9d[ 98jnok-M+d5!,SA'CHVtv_GX TtƢFAp,zȫ"@Wn4WvD DhKoᮩ{69{=ug4&Ͳ5u^&"o;yjO)s_^˜Irzgֲ3p~(TJW1BGm*82 tvIh [쟹Y3Թ[(I|g5N"NbV4̤OYpnߕ+<ւ23ZU]R4n ob.+cV :LUHDn!4)1L7^:kX_^,񨷬i cRҨmZkYGfIt>Ue(6e_k:.hأz!LT3C3|=DӔj̋\mY1թ݀O=",pQM`-$gņW`@VGfp GW7>CD>rAVl$$$ dwBahRMשK 6\x܅]<|H%v*\# 8,9"D:07m,J'1-vWv"4X{HNBv Q յ9{r=gs3Gd!}epCZLvCozm D |_#ȵd ٷ'$VU ]lAs|vd*hʋ&j دԜ+\]?yyV6fJ>ƂU^˯!d=.,Fh60D'cN,!&)@.)Y _"Hk{fyXZX,)j4V׶J!шwWt–c7v<*TUgd:fb6BqŨDkaģξDs23O2Dn~u*DKYFIJ\,^ΟCS4Z XQgSgTzm4I2cӡƒ+z"Q-1ǕC;=EMJr8fP*2ޛHr^{bQ;-;Nt.aIO!=x]ka%.wӷl|_So#ykۡHI%6Gt9Os]EHPI2R^5]C/3M47 uzP]\OSE&c8r M$y#D\>pu:=+ F!KnqX4CL1Fhyo&n"Ud}fv+(eX$@ׅP:'`OP[a {l *~f|x$[%`$fG):"ꓬ^#VZ76=F%Y42=&Vx1ez!d.%P edRs )s*nQG\\`\/)JR3K 8WE\~pGqdOƻl()8ӗ;΢10Rk'OwOBHAv=@X(R"L ȂbXHFSÒ!3&m_(_AۛX@wI1(yFyb39Iģy9ӲiTCt~,HqN, 伪k.{ ,PcPDtM|/Mn5U4"_D $.X`PGVc"T8em&X)S@HR+L s;>h;xInknwЌdu{IHv#П'>-'jDzX?):,(d ]g\49."N VA+>N!\j7_('ByꉂmK8rP\GT2kΫMbOX=PFyg)Vz!~4f @p*6̨]뺐 N3AE4t|(Y M d&!iz W>d±']v5d(*g*&q :ʢY g:+7Av536(WQhQJQ,]i.zMڜBj̝$[D:Nx0aP_PmjPx5aE)80DN),R!>-L,4&<ȻQ$?>~68Nqynu,8aCR=_όhPg"VZ/ d]*ض#ko?]tAjͦ8ܙ"x/2tJδ"1FǑ_Gk;xdR򡢲cOb}~%5fuej|Qi]lIN;^VF3;Y!ιgqWiEkZ4VO流HlS^j"Xԯbb_\g{!BΛ|s8XR,R'gNS^yM*)FHIc蟙1Ľ}TԁJuLVRs`{z\{"ԣ&0u [Ap\`,E(m,|ZjOպ2YgQFncXsCIVv*2˓}Wd`=J jlQ}}J 1 )nE}bQO2F26zjG%FB-i r [=F&Gg}3Q# HIUc+F@3/lthIflD8C9"HTVrLHWJ#R ӤLHrF<d |-vwJS d Rv85,nǒb{3ʋX@1ޫ{|J' (y/)ݩi MFj\ @~gN +ׂ#zn*m\Rңh]-Xumrٌr3ƄC{/M;Ay`K6BQM7?# oRiA40-˒\N$b_qT&EZk*(}F7>HLBiP;?%lLx?֓:\?l;ڼ`ˍkXt( .ʧW03Đ~T F,8i`\}@Kg$B^JYSM6W0@/1jA", dڙx~aGJ[H(+-\E@D-Hv&F󗎉ʘy$@w1Yy M3˙$lɀcsM0kNP4&f\ QbRMh=ta8Win@/|@X$iBC%-t-/&fպ O? K<|Ə+VH[®nUj(9ykz4xo Ն@ +%bx \WMlL!([h,vv;|ΚlfF^ ,=6W=<#no-OBNՋ6`G^B1uS/B-Ag?;:MeEFl4S"3OHj6g;=^p7:૞&[C#?+F3 L{ uD_6S%&(DI5`;q݃ uw}ʾX ʄA& Y>Ãj>tw\֕8C<>^> TMMZ&o\(&UړBMG3x2\@y,>~/C? }t^#AZ^<)jF6"zMXw Q7x./x+Lf/H{ˣ1$ -{~wt/8g ed#X 4H},'ǐP^BB c}oNP];qGpь}H+ #DjS"aa#/gȧG܏' zNXE|ly D[2$ 0]zN#;j0 EuQ6I!5/K S6#ءHAML³Fbц2xW K -]Kf>` W KIIvJnDLh\>{"OOJ$]+_ {BA h>kniB?Gϊ%zmb?*-/2N.GLQ5D_t{Hqaڱk:Toul%r`+Z2MƖה Z`lnK{C.沙'Ez[ׯRNͬMBzwQ/8m@;"%Fzxw |%* $9\!0lI^zb޷rg(V0\-L{ jL[2ΑUz;1R֓NIcn,֟%"A^Ax,T(9Ԧ.kʫ瘜>f'~S1r1‚9b.ʷޝ[XJ 0-8|ـ_MjY5Lmڻ?䮔)x!ѬM+e)iޢ7w3hKzdjjg66@Jj|ѯB8C}V`W]Kq4ރqu $O972A0"k}H9ō_qXi/`oP7<?&F A rUd]ISy~K/Rekc~1$ŷFB0^YŜ7wމCeܾAB`/ l=դ 0 Fs-nĕBqBBvlqV%x:;&M:={I&EMBDS!x"xdh: qbcKd]@н`39@Dֈ<Ʈgʮ, ӛwsLzB\OŎ V] FqM3~srWlQg3%!NWi믑gCS+KH#os&C> 7Naۀb:p dqnRjNq06Dm} ʃ-ڱO3_#6فAn 3U(w䱂2q+aEG8i\=xLQA+h%Ȅh8A@ʠ1HR7;jDW_l]DQ%q)X\Y%9:Eɛ<&FBML/#%a# vLޒ'x"5-c+tAo^fAcw7 k [*|Z` V,t ci a99!ϔWGTy謟 izP@G vzV6O`|=UJ6|l.1{]oj 3<3rJ! N'8r#8bp=gva2\}:cqF;#m髛FBӔ!6<UV 6FN J7xic5W1,wPuq6njۢ9\^IXFkVc P_PP3т3uIUC"P #F*>.aޣGЗ|;W{,L $9Zw<+HP1ؠAr?]7rPVi .}۳*C0K+(5pOA`lݼH rcLФ͎Z~\(Q=Sg~E7i<`\ׅ(;|#N#dG,;QdGRq8y8fB'_&- W'srTq8UÅc>Uo"R;6݈+7I4_u('*-.|̦|+1brw(b|RmxUdS/x8lRW"wT_a30t2a6Q#`q;D(-LuH{_o&]^ +º΀5"nѸJR$M;cPzG#0Y*|2s8G. uQ'4D*,'ypچt#Zh /s.wYu_ K,(ZYQOz8mLJâjoDй 9n9.(g5th?ԌH;Ty0'kҢPk:[l` E߻t!^ݜF( v٨ W-]$&R߻GF=-hS`$y.q(]M$xfK8d] nzBLpcw$LJ֠pѨv|OF;T&mGrk󉁫XN x\hYԾl֮qA%! G^%0J"/ PsBQ响ta4k&2״z FK:Y"cHqu%C^x[|@7OdƾENLlpյz}qB,Ix$O}>Eq;{I$Hp[7^eUck/hLVf@1p iH:7=iѳ՟Sz7QC^!׆lzO?zxGGD6m8dʈIt &x:HmK I|H>hzwxD_~uٳM6de)%3$.*1!An4+=RVqTfk>2~,#ػ;\-T0pT1֩(D9W`CԪ (oh̬h6Jb' _;?8鹜e LwC p 9 Oe/eQ/ HptːFy Oc⎔:V%!̟"4 T/!,pG >;g GN o\BټF1)̨+V>ATCVGY**:_hMj%bh@dgL{~# gLܱMvZMSu΁^.)3F7@Рc3 ^!5(dk['hޑ+⇛h񘨣r\Eaq60I+vAAly#t}_I+DҒ^Xet FjN@B bUo*O%vL |vk8^ak}<9+ݨ{vQaGVҮ a0aO[ Uç`K\ɷl߄38C0S OIW(mQͼI_N^eϻ2i;AAa6?,mxaN@ ڥ;LA䆇t:ϏKhnQmJ\: {s:%Fq tIʧu8 pѶ_ܥɉB謋xN1Ry_1V\@8s4d! FfQúփ j*k` 8$¬ZK Mh+7h8r<0Ӽ|)l*&̄GT9)D+( nPI_NTR\&n VjdY z/0Xո\ɚ )3ye^͌ y̑aGfh Rp0MqhK}[V 3Cz' cIc-һWEnj,suۆ\L{z +r^vCK'jꙓHp̢`!:EgJB߲2,}MY|p5NV(y21+-"DUx#>сCt0ЊixU5HQa+hBHB+] L~~-ak;C`Q1\b"ܧ;!Qÿf"Cb8^t9_+ѧU^[0P7X[k Q7׳LM_H^ch%ښ"ckq~m~ʝ.לb=~L;πuem5]utw6芲q,xϰs>Kwn$TE*lKF&Ic)kyu&tOk[p*4u's^lb1'h#!qJxsvRnkmgf ڋ _a/Zx[ӒT[WɱF£.2;DF&UlH)?iRHJ3-z!5>ӖsXc=lku""*xhJ})o6˓\KOlzRc?26mXwp쵶`˿ 'Ơ,܎~vPMOt໱  Fi*zhCQ&cu~uQGbGvfbWPE^fr ;I% IēZ-{oѐB %hgMI~ʬS6)4z?Hf=E$.&.5_5 n*b"A gLWZ\ׂN8jbwX?Q!sh=hZG?H*K!r-էH9yŘsĢl( /wusgʀ=b(/ژCǩYPv4E(^]IsXO/]ܹxM4;pSw_AP޳% C]鐦f(K JNG3eDM& //#V2-q%iiv)M⳾_3s Ɨ4.uf rd}A[iy q{ 2s?kn(Q(El0ɏ,"K dp˩"vzX W# A y/DW2|-@]5̕2Ґ57 yTEff> CVEA*ިo)g寓i=ʝ}n:iS@d#H L$d%/^iʜ׊eYGD˂\fl؆S%bQvp>29|YXV3rjAwָz #HŽX' 2x%;ne V+/L鈡)0 RlfR73ݚ+9Ě\j+$G`l^0GɣZ#f G6exu"hādB`ObKU*^!ȹCb0FJ{ˍ:zdOԌf.qghnwϧye[3Zh|;c-]8v HrlfmrFnrԩVOIapIEEvov.`{)}wܑ<µO1 doz!ͭs>}ݐ Yɮ"< /5$u%iAObtWGEKD݋2r٫t%5ow}@–=iu]^YCy4*V}Ze@6To`:.0}W+Ʈ—tqf5JQ{A. H1"/q&doFvG!E$C5PQWX,7o(?sԓW^x 7-p_:Nw-BFQw>LثzW*/9xaus˷\w.`d;kDPg9RCK$H. SjsM)ZW@SIBǓǪc֯X;غf=R0`X܎G-Z]R|CS@wXæz=nD\.ETWo':ܱI)>%EAӧŬݺRN;1ssr>1|pxMy* Zxf![DЯ7¥تlڴ v{(UTY|Gx/0>M+Q\';<`[4P*$in6ub(H^8JD˓:C I\ YD%3vӨb 4G0xA3yDߓw 4G}0y|4@({Hu6y slԍ@m셙Yן@9ߺ 4A 4rxUy%Lp袺vYn*;l@A@F(os@{0Ds)5]K -vM$2RIJAo=^LUsVz('8+U'i353q4SdX@.cG4,9Kz \,Dlk>,<ܪP YIk)ۅ:6{SWw#@`σTl!&L \D *`QieE,Q.$qG*r g[*qq~9Qyj^2G6(HiPn=stoac?Gh_n&gi$VԁFOP}NDz%e gK8TW !_`yg8 U Sf貏 1[ !ĿC y" ?)\ $;Ӌ6YT3_tW";:Р؅%eΡϡٓPU4tptèݼ:qs\C_RnuiEHlnPu8#I%ͷiNL7/VDnVmٛ-a4q̹|))xpf>D\ 5d֙0ҟ8 W4:>OxYZ%s.OLr?~PnUVj$;z<@wZN /.F%.1qDi3u1TZ(c5>ז:1R]XqNϒʌiNTD 16/0(}E{?g@z>-nFʒ^aNFqqWKYE fVԥt1S܉&=SpTLf4{')K=dlaSpd31TĭC*^u\K2S"*(ddZV01Diq3Rf`/dgW[a-n34@O]Ԥ̽\5[\yȳ>}^{o,ڸZmh jy~R Wbjazx5e*-"q))b) <ݞZݣyӸߣX+!R0W y[tCL>ۈ]JsI[0Hr3oW`~MyӀER]5+{ uVф_74h k&;Tԭп/7{zW]PsczPGfl"UNDv9 mDbWȇidJާG9boÕ+ ^oޯ 2+] Oodg 9= uMp Y|2ټ@K4ܟjQKݚ^ҸG:hZIőS!ðjƶݲ+T/P}kM&}£R*TkLbb-Yʍk_î>iqpxN-=Ј@zm:L:ҝHn]yE"pKp1dBC߳kIBa 5(=z9bTdG6{OIaUT]mHMӶ~lX/0oŴpAGtH"i3.2HD5jM93Ues!Lm9&9`HJzw T6!n-Yn`'/_KM:&7 (`m_CR_Ka ^(7ت;q!T&p"G\{zw}cx:~&%"]zoBr y낝L6C 'qb ?{ȳNXzn RUt"hUA|Z)֔9IQX9ߞsor…|"ĒF_9?HH&uhz5"$1v@`h<{/H^1ލԃQSn*>L6-=2 ,e|rUettZС!I1^u9 Q/U4l~s ɫ:qb2rjx/2Ұp$(^3,Tn{N]{~Fm 9@+hEΝᩢګZ:rhOFӞ~ZlA |ro:ThCP&B@X8$GApԬ[aL^]?-B-5OY{hR1U% O-6aDyQR oo*'P0P|xޓsʺO}Rkj1DZOD/ޑQ4u&q0a4ذȕJBf/ZuS\%rHI5D; |'LxDm/"˚>+C F~),䱮3*b΅m FdDL9gUY渱;.H>Q'sD[nG+aƭH%NCjkJENS^u^L"KO$ĩǁ'%`NO@`&΄>OfOL*8 ҍilх{5|/"(PkdBjEng̯}k/X7I40BVk_3B+⋩1k '㩌VU+ #dЍ=7)#+<;c׊2Ί֕Mc./VK ~:R(-FTLI|hig~Tݧڧb{Rٴ0?")صMm$#%kŶ[gp,$1|eXF7ו0gWj.0J23B t.OENNuzJ&IrZD*إd$gi`'*"9.egskۇR{:&&6mw1۸:G 27*K[ugРR{{E#c$k, V9ԭ+uԌ'zeѺod+J0x?EpőLqgbSl<%;@D(k x_+X}hZ9HkO &VFT o hnT&F~v}XbQ`1z+ ^.1V H9 O0I#ٞCyNPKvH/qk:(ogsj=dzy 0 w̄*TLwMPGf2>"xi ʜ6m-ΙW.~0g{h`iِy׶I$,ChDBH_` `1"PW(A{yr`dpmH)g~C'cD1Y>C"AWQ@EGOQ赴 󾅶h'땱PطmxB K}[u"haF~}dc?ᔻE@PMOFcҞ X|NjGaY_yv hs+Dߧa쫁8Vζ!d#h".?*J\8{ ƑV1y$t_y {4Cb!TZ_FJ6>caw|DGl,#0Tn9sKQy;gxT?cX0vb {)j"4]L fJ^4jaQ$BaXgʻntƬ Ff T7!yyT9)?+uFY)4|hDk|.F NkRײjPK8 7F˔4.5IeKpz0S*g.)$ߋJkyf4v>@k>۴0鯓 Ӵە <["]qo .V *4yHoΩ=8u&xۋQDv>=5\rf&>aYsYI/tn[nG8q sň޹4>gz]Φ82sc]Wul (D# 3Ϩ9Q@;VOkH5@8ᣃ\L;2\3Shu\&gIUUh:r: T4\8vu';WP\Ҟ MM-(lkNU dqFj<}Xr)0-BPa$qNQ){{qM2k&+7 n aV2uqyO.*…=}&Dm;}wODMOM_#/~A3OJn9NTtym+j]lrhaaGLZ[ yBDQeB0;l&mY5Kͷ Go+)N< K6'kA˶N .dPvgü_b ՁHƓ9ANZzaVPToj$9XAmbN534kgK :i!V2ǔ2_}i "xr $ϓ7 MOta2{u ]Uq.sȊ#"9])]h\+U*EHq7HI8醉J5Seu=s^Ip; .7EHU/믺Ԧ|Ңo~ȳQ{ SЖQB,B 1 Kdg0(A5Q{\=ۃR3%E;7U)88N/0K19\oM:mqefzpJp&lG' ZO$+k-~zvs[DŽ(gg`QˠW(oAm^l,֬ٓx\;a`=VRJ8ًtbr6p 9BR Ugmf&|G=UdNB^vDw=O0@@-{ ȎX|'K$fEHgR.i!jjϫmѬ|e>{WՍ O&<~}41zfiYFA?QulJGrN M/qLpY.;JQ/^c9(͕KFKvvV~`̈́<8]#Ut% f;6H$-zApP36pR~Uqah[}!׭n4lWtkXeԞhW[T9O)Hj"X ~x _rvPI[^*;'S'= rV,VKBFŰ 9u ! vrة*4fw8ŠK<ˊ[On630u%itehY5/cnB1+I[cDN}$9B8iIvL'dqzb$SYrZ1hDAo>\Z8 Smܢ(s4F@) GR2(sv.E%+3)L ܟ[,pS^/?nhS!U01Lwl} 4yNXPj][-ߵ0"[UVrfVLV`+y<:) HVq+œSXaUsZ਴T-i#yA\uЬY@N8}h) 6C)9]ٮC6{{"CDC ifΌV88ʇz9P낡ʏi!41Qg;)tB3i2k\5\ϛiwk0r8AgqEcnUIT}T)Aف%޺X"bI'r^Ҙ[nMgװw[f09Afk\Ge*<@b qq&DRW87}H]wwD( 3:L J;8ŒKlch_ڏTۏx vy좟٥W3)偨x ;k5}]-Όǩ̛#KG῾hwIhj=aT ;ԬqV|DX^: ]J9 C|3Ά;0>Dw&^xU!:n:YB!ݟ ]π([.?#W[4#׍F_eR]S{1{kR_9Tnq!ZLgX9e\aD(y+P떱Uu.xpiDrgG8v eش78T-)yWGɆ kOMe;QWKD̠K!Ld/LXf}L-hSӤ4L Mq!h5!ho2)}wgCD}\ /(/ҀO4 FAq%6{~TP@ubql"j탲wl@`}7krugT `=V0sn`N~weE~[S&;ݳêA =u{n]Q߰qePb|\p/}eZ"QmCz7(z#AxLg-D!\5-U%3mt'F'&x0d}}]vIzPq&G"eT,cv @{{= wi{_(9*C \H@A;Ba-ԙGZL)峚,zXh2q VC[+Dq &W}SATnŶ_\ׇ׎ʟp&3k{vQ(Gv^6zTPjp[m Pj}&Iubd~cy/`j}(tk[hFm T;JlImAbSaBoHdőy&Q+:/w 1)t[N@j `âAJ& ds_=m^ +r5z(jcktkWFX߅|̑ @K{&.UFrgYs2&}#sx%&XnrD `dM ^I54-@j;A+1")Bnu%EenazoÝd^y ٬[5*~BԶfLg+p#gqHv~Y2޻?K2Q1v+N6%Up`36 W?3S3s,c\IEK4v;>G'-z:@INΊ}720/Vj$PJ,ޤ?:=CuZYkt'摬SAe$߽ '+ CtT7N2xN=x =P,;[ NraFl ~3w$kX9՞X}% €^y2GYgO߽0t 0OTZA-R )nN5Û9[ū,!qހ!|52D \Y=r|8G–/=%a(\-RQ1֍镌 . ͊=˜Pc1ækSƷoب-I !Cv,$M VZKه2JIs׾/q-TS_Vʛ.OJal%signjPϻgNa,t(SEy ,,'^dk07o$CB;BP;m(ɏ9ʍ}oDE'Ag۵Ij6H}ʜkh;4FϏYC&f鳪GVm\\`֖ɱ)ܸKY|8ױ;qIAO&V`4cuxl'^H֓:мdCV2mB~$q6 VT m Bgv5 )g͋>okXS-h{A.Dm{HXILDfvl%}}I y]ųC^OKwd}S_b}Mn$oIyhlɱ=t!rf?WHm(!m9 L=MhJ2NvsBasxcpB)ӄ$ύHzDsJLu|fMv.IN‚y7/ENac78prckXNC:koFSƾն^Tcb7X xM")L><(ĂqmTVސ Ou`!V\qÛw1! +/9"?frznh,{`zW3^D7ɐH%|d-֯ ;薓zPXFAjFZ'Ab=˿{6XY^o,CC9 ס}VfD܉y X?UVU/ֱ`PH}wtyڡQL"hfz,P{Ⱦ8n9ΰ^ DcʍQX|PHs?Ngj181pT(W[!Bb/mJk*e%B4܍8_(ѪV0&Xr5Bwp@E? NUYɡ;"RBHge?̹8vqe, s#Ν9p̶Qqd+=3U=FYOOEhnjFQyRfwV(Ͼao>rvQl_U#wJTcXRshzy'ʼnv)bx5r-<)JL&z `Phרbm7;iq4(:m P7hE]7Ӧ[kp_z jYq0oI/.>hbvfjG'8vFtJ̕!.-ys)dwz j^mQp"\I"SCȰrTG Kr#8~CJ# M)۾h qqBubRM6<33oF{ay M| ^"Zb,_XoBF EJ A0d'grQش674I1F9:Mްp猨 ~MՓѤ-4 ]kA j[eևJ겘h 7)_=RQq~1WPU銠ДKACq֮{Tm::-ޟWCj4]]'6 S.DyOCqo'u_'qsLXq^xYW3b±?1:p9UԈ; _kڞ\;TF,z˂>x܇A$Ӭ>{) Oޫ6R̜+&.Wc _Kt޹TZsn0/݊ՂS`F g:N[%ͤEHiQ# (paec5..zp?0&ይK ɼC .-#W}/.E÷ˎc]o@5*%+yM>U!,de7 DpN*P&28ʔMbAUV3ộ6  Jw{axj62J}5]M̠#hb>ZGÜz'ǪUSsc_!x]v"6ynuC[W )LN|؆<&$y'  p|%1_ٺWFO8^,KI­k%df=3nu6B6[B1,>a=:BAY[D}PЬ_#iUM#4/CY_[|IeznLݮ$0^T)"r/~2w}-a? 5Ƈ=sWgUq"EW&UoӔ85X̷;ɑʟJ.ࣅٮBYfqRzDPp hFQ5!r,㑥zv4.c|xT<-#8UrPKq/EX9#Gi;e f ]t U|>Lu~B`hzMcvJ1JҦ#RWt6i:U|nλpkkjB MTM,s6k/;R C!m4o<Ϲ8 )^ӹ4b8XŎs7JN  >`۷Af7Gx=d i?2Av1}& RLʶI'Ka]2JJ߭cҖ@ZB7dӉɉcOFt冢Y2ZOo0o%ZTwo<,Z.o2UE埏"A%ޝ7Y IĊ]j$Fv~dc w2d\)[NF^JYuz(bbi_{U9O=!I TÀE6Nc} h9KG bU8W9`MabfϚϠy= hr BL`bQyaԡ*|ܸ - 1tJU8hwRS 3J {qX E$|-/ ĬA>E cA[_Q4^!ml:NMZt#oB?P?2w#Bw2 HNI%<,茙CB&_vbMuT7kKՉœ\N}\nSڡr1vSTW;0EsQwF?ٿh]ނ#[]-.&5%ʉ"{TWO])LGϺU't Tl7gW^HF/H"scS̚70z":w4Aт+_a(ʱQx \_6OQ[n4jvKr,%X7J hNB☥O]W8Jـi7%9J;xhX 3M 3GXoE^ yQ2\=2dEf1=)RN*J*Hՙ[@MYAʈD9ݔ0%ƏB:?¶$|t>G5B%.#dW v5"!haXk-)&!%mof0$/q3! 5YMa"9Tji @ĵۏr@>q~5I5d{38r=ǟq7V x}_u=K9Gm[$Ůn"[Mxhr8¤2S'ꅝVozh+>$L-_ η&Yf73o Oq"nplT]):ltw&@Kعּ3ebnfC?9?\\fI*ne?dPBD SpxH`}O*'(^IeH pe5r%BwػycK&cE8:ai\@b}{Rq+v잺NR5e&aO:.2yдU)&;93_`m=< 8#CadrŬY8ێgWitZwwD 95}%J0! WDL%&kLX#T@zv\ۜ[ł kK 2t)MoCB!F;gU=ŕߒ<HtY8eH`Ff]=tÑy?ݜuY~+.mt^)ߍ\$`#~"hZafyhCrAȅ"&YPm'h_o[b#9F列X%g3 $x爀,AFUԜ@Od`'堁9}1eU"o$BaH{)GP.wdi296}2XuD"9QEu[x۬= q۬PDlKB;|&8[+BêiFgiX- ؜] 1ɳ |Y.r(+װ%9\=%[Gszgnlѳ)QV~`7>ۆyݸBwȳ"$k1.YATu2%v Ǩs41;rR,k,B`c\8b0Y \Z4rυ  G,=?ȇĜ)sD0?@TgM jm6t +`mbFzm]i)?{_t[tEK^sX6 ٴ`E3K' Rd2wB}t4*RP@ȑ~ɰb3'1/\&L".R04.*M+cCM>Um{QAJb0.p(I\ѐ978d0 ̢V$>ݲ ¼lEq Ѻk 5r7q *xao\ɵNM~ʫe:H\ 3w$D[zpr(&WaxGۏbV"8e 8>­ dHbҦ9=D^J2&~څ;&Us{}!G4+Gw1"Hn ~MUǚ-{M̒wRNP H@W6m28b'X X5AqXҶ#Ccrij UԲhOtޟ ?2/曙/4YAo]q=`[4/;RѶvBA;vKTTIաcSY<+bAvE->`]z~ȢhRFOVos&& Ӳx0 w*YWLcc%Փ-t>U@1vh`Td頶g;{`՜"좂!86!d{ Tލ,tm9vإS\ 0<9)E6S觥uQ[2IlrH}o1NW!-؀c48`$66viMkFTVf;q?F):@5wPhMP?E{j&-$p`er@oG(T_;a1]0Ķ`;"tə.g3+_%X fxBϤV +(fɔu-wKj[:] jݾ"Z%G1spy,'EQ*8쥝<m+e,Y|؃ȽƜC,N#xtƖ䮦W24K'lG9^_DžK p8yeC6Y}㨶4u|\3þ7TVlB"pcۣgG'6~0/Ԁ R?f+?zY5YBN۸!-uA+/Z vsC\ hR'h=dwVn?fáf⻌=8\a( kCn3OHݢ@n\6'i1<Jl!ZYX*s4RĎa1j ~mU1QhH[H-=/t?`_wOm˾e)>lv\TC_Skzx,_Ɉ̯ QeҌh(/> 4TDH8 eL@MY!_#Rn:oLQS;Iq]vԸ-A6:IY)Z xct?F=faCVe6F95ޜ3/{5QZ5/U Zw7*ZZnzFB7S*(lw168ja4śOƺzA;j1n~ɒu f*5oQ 3!2Ue`>SȤie՝s\3z%Ԡ;oa#¢s?bLI_4_q]u0TGZgdT T8JQX wy>~Kiʧnɔ(=@^I.*͉0PÛ؂׻"qkvUQ*X_D%7Gه'`"WO`?Q8}fg8G>`6lXf2)X5鹄ɉ8n+^+Zɫ[Z<)dj >ߚ*z$ݷDPԇ@vSyz.Q7o? AעGOxfɢ] B}\# x:dH< T;g\Wv\#c(Q,ӅfL٧O&% rH( ihWc_7d!Z w9W$>T`dH(4ڲ})(X%e&՛vN4ɪŖ'ZRNջU4H%:s9yp@7honaJv`|tb9XCGf|A@7\y@"\3%m@NLUdq68ƛگKi+GVl2k¤Jc\*v; *eв\C^0*4@#"1 }i5{U{ *ʯMbƟI7H ̥Ҏ11& ~1DA!:WHoM=Yv"Zo{%#6F53~MڰO6؆G_n(*K+;K&y~ # .MEcهb(F7L"FB:Id̹7ˣn'>Şaipmvv0RF?MMIkhMs;ͩUv]$ N4%7;v"rNf(`TQF.&"je$aa\#ȑ)9?!_Pm }>YZTcMdG MU~M=$pEA+uik;mI ,?a"}K@q@h-3fN|ken1ր7F%B&IN|ϵQ|(ЯHX*ӗ #=f@gBieƐ׫{/1%ʨ͡8@wyqP)ν*^ɆXmi֪SZi b 6(~Ѝ<@FnGgWƐ<Gߥ dFfqB*mcrȠ&My~Er?E Be04)SM"ȟK$[a@͐5v^731voHY>ODTIfd왡`w8~Uc<#%vHn,OƂ@̓` G躮PL >7Z2^F2*ebat9gS"-I@H%\-q=K"7^Ozc)oHU VXD=W~ٚ(ժ $_%hDGzx&Γcq᝖6Cˑ.rC܏HѱrAHܨ59Œdq3C7艠dەQ_qB^ qC #7}.%#B6V\ }GLASwUEUOě>**D֛B$:T|nPQOXJK6"xJ jNNjmQlw4I|u/iY} :R$ǒwY}-1u@wzaԨ+ۦx|U4:dCFy>K 5G,!;.gB%n#f{CCΒifyᒋv枠3GGjt>V҆ 9qPtM߁-qaj Ed7JŶ\Wb@9o*"Ї6@:,XEéFqGg;H\~ m䬟ʊ927WԚ\IK#ʒRr"M)'*]pV$! u8o})LSmn\\t%P.Y>$/ðVG2ƵKx}tVMTՖ?(<06(A dıC]dOp[໊p;.X {< 6 ͷED; p8f$q1z!KSXTo65w&+0ւ{/~^=K"!=h޶.b|zÙںL!Jl:};`ЪU:)SvxJXjFrcRr)ȧe* thX~G/|h)[qyU8d︇zVYX'EpcX{5a18pOlwVJNk<5 T,:_t {x#a‚L4*-UN8gzvSO*8㔝(Rc]ԩh&\䄅fnv2UwP2;}:)d`[n) 6 R=&{p^\U<{ꡱ K(wqLc{R>S2ZRّ-x$ &gQdcHH~f)t<Cen4YpEk c1{^X?0a23ݎ֣|v@ƚW/oY{u'DU]HrT]/\!&*,DR44¾jɂ(th`藉\铯g o[gZˆ+.bSqMf0BbȔ5 vlf:K;#|K'|yXO񹓱H1vW"rm G%ȖaT}[4O)6$ < ql$fV?=GPAUo%f\6rvZR-G +OѬl7+);9t2KQg'OZ/)ͬ=#LSH>]N>}xURنZ4U?|',?#)vh![\B,QTJvM@Q#r!mk%uɦH?F"ä\ Ky ?l Z|hAݬ+0"Kg3"޸#pڈ$۫qtY˩z†-M gG?EȰhdβh)w9QGt 70~nخ fZ?ΎX~ i wyͼ+'Xt܋|~@_}n>]oiBmr/o_UCUj<7A l|>@nU}_*Az.xW~cڍrEvOT]Of*q-+Hj0=@\^oαYbk ܖM&ƛka"5fO=IE&U_*&\ۈ!O$s\b.5mռ8ilUcߛ4 = \˰%^K1pw3b-_c<-/(Lπ4{=sB,r*SɕO$m5^~8+RƵaP߅86-֎4SZ;Y1-Uw .dYtTfP<0 TR7|(c[1X/S&[ HA WmThz MZ*09 _dJ;n{;$|Ii!Qx~~ v$V*Nae7a(ӧj" &ZOil9l@R`ch~L}(U!;*աHM*Lź1 _c&638;9?o6#Mף=Z1U|ovVV+xOLY69Yeq8;ɐP=)dYj% ?BN?$ {(ب9G >hl5{^8k8(Aj釬oY:_qUUsB>>J:q*]/l<)(5V_V+tf`2lM !Q|d=RdҐE2AWjöe[Ubb=Qqv*Z' -19Z1== 0T bd i4Oj(Mi: RgKJEs";6D}/[N{JO@,1@ 5~ҫù:C8h UvGIFCm~Q/ ҩ mA?z( œ.'0H8LFVv,>)>݇ @Q?qE+x*K Asy=5vW@6)_}L)딛AcïQ(T[Z>o$Nf6=evU0 Cқ!lgիbPJP7ƻ5{m>9?cf̅2&h@UK>ۥUUʼnLS ՗?xRggq@'vha"DEu -Lbz7 .X#B@}H * <~ClAh0tfkt|lwwӎXR_jE n  0`cx.נ*k`z%),| lKPJ_ D~kqW/hhw-q5-% =V,ŬZIЛ.]qL"SO ߆@/vڈ GD%-+r/rS 9DfҒb{%W{ֳxMR'*wF_Q^9ϥ7:WI<ϭ2MhɗmdQ/W[|&nbKVS ;ZrbFNBEƣk ,?wM/ٕ{ ey27QUc9\@X;+<< [`Xs#1]!f*g![u'&pUZyZjb~nI?xaXZ\=f׿惌X:~\3琭s k{#2A xZbk kQ%B35N{z1]bu7G95^PN X`os\kxX]/S Pб~&~}^q n)vu9o;!5ח+:-6N i))#A 15 jk_ 8#_7ˡA}Jbw2)^+M؍;֊D,ev} .n|60KwlK}1oNeP)U$Ԇƣ#dApc2aS=-6Cd6FåLbQm]0no <{0J7Or#bJϓL8Mק.cqv;pv>\-|7xM'LK7TE`t*"zyp:Lr}-%}ro?V0=m@I6y9t P19Q#Wb(E\#6i vJY!@p%`aS jaV( {uzrf%:ܩ%?-^<-cJڟPPۇѦsMϱsl?]uYb&l-axחM8pyk:yK0TΣ\}ۻMAa=F 8E >wb61Fd3="Wg*o MBdX7-Vn%XqʘMlTlLrgSA95YVBe\+:7͂;GjS' Vqdd*8bR2L`%*nKx?`꯽zI"m ֳ,8}د3~1!͙r'on_!k.F]M__m*na9!^2$704fP7*Y1x^JviM`Ow2 MX*tB;Ldd>sx_^YBQJasTh. ZF7jB NIaY^L: 96X78''1nNJrGz-"\AMQE8\僤D 7drygQ{ [đ炏l\ʮsi%Ӑ=-n1GrKyp~*̈́H6f/o35hZ(M &ӕS`VE{۩:c= *δSMU][)HfFo'jtOS!ROkݷ\Fա I~;#)F( F4FE!NauB/:lgѼ.^ٴeUv~eIzKd)ެց93WulOŊ"#mVcsj?n5댅ix6 `2Vl"g3[P ܹb1U(snT \UCqD sMt f+hOdЅKҁ W|,UCvkS l3.[אc*+a\k";ge>LpIMY&xUھbT/G4T JeZӭ鈲 ה&qd -t}m+3O4 }.;jDϾ )2>[MWפ^A@o>8Wp4y$Cp.`Sg!BQ }uH*5# slG'OmeNb؎wG%_ N;v4{F>)JlgEc_61QD ;_ZVH+ģU3LGu*2 Eea)]߼M \]wALA5{n\Oaa$(_YbMt@T/BiHKp+YHd)xT1j<|_S@T i^hIw>ڤ9$|1aiDihiVU5xFUɒm,p< f C~HPѮVE߻kQT__bz-IC#Y}rH})KHu>pqPz~q¿w2+boeݽ:2iH,{c5KI Xt5 (EYSmeRYJ?0OȶY[m,s ^$&>nVY8phqQ.hXx& y^ .{xZ\ i>I<Y[Wwf3#Shi.f&aӚ:2+[uN>$rBCݲRD# #+!.N\dm*4#r5VjKơ'O^! O^ڇ)hij:T %tu=[ ri !D a>3fQzP{Px@(=[3;1Ԗ6*$;Ck?q #` ;:rus!&lkhuX!֎0Rޙ]kUUEY"}gST^$H[Yt7.t@q2|@CkN*NYJd+YMLPޑ/+!adSPJ7o!#i) MGu ' ܆ߠ3iDB °pA*qrVYeyZuy Y!ṟv<aѮdKnD <'t}%Sta;D]tc*A@g:ƟH]UշkGܞLMi̙HOlV { OV*qw0̯, qJjN7 VV$+si+Es>`*Ĭ0mlv?obDA Ft!Ў &>F~=Uӎ_v_/NZQKf-~y v,X9]~(Nbzq?m%U~LT|T TFXɧUD7!La Exu7۫{z&4>כ't/?{ teD?E^RzaFm\1PZΖ+H+LXj` ޡ`L0+/9m /9J Hk& `&l,F]{`YM$P^wa865ʻ 8HADP>Q7KS +sDa ^ Ut㏞V/!VRRjႧɶփ\"q~N,}h@C{XjFb%- ۃbSN&J'=X\= FG֮* d ՙT e"R= "{}^ {m<^4껼:K m9EZ"vĮ\ (Ѳ&لfMBڼ<ZB'p^ δgߣ^rVёnȄK2 &L&L®=onjRE!,Zw"aT])V,_#|lBef[z0yb([Kg"N1pR zk|Z&ad.xQ1$E?T6D >a)r1'y=5@ґS[^l V0}%DF)SZm N*'X3Ce~1ժF~1gkʗqe7Eܵ?.ۋ0]A^<-$ҐVɶ%y@L"w=&Sp_ PJ{s=mܖ,(~"Tյqb |U&-<9"AP"RxC6%!:x¢x0}= /C)lW#݄~ׇHcz)"VN7 r5da%S|+Si}u()ũ/W̰UA@q bxCc3Y~q&w[#ٵ\i#Kf\ܶhz5KKa ҀW|c|;?(6I quq8Z=XE-˼Y_{#I#sX8-s|F~dଢ଼8WzԳSƫ:Zs߹8Id8/}aw=U=6Z"rf@Jhr uFV1nx>g.4C</ a)y 5/t?@+4|/+B I CKk  c;dC$;ҫ#9\de8:V"M<|5KEx$ G!9'-PRl$>م]ĺ-)cr\VK:v9|-X6Y߭π Zs3QJysRwpwؤj`2 MWӫ܎zZY Jbr7 :7h(l rim( Y؊5kx@A*V^K6c'y MpC9G?: 5̍\ 7 5!lOK0!1u*E\0if1_J !݈at+\l+=w0%}Aժ*ێmq%Bm1SL*z&qa, -S_.I2ҖR)/Z x&s[厲՘|I$$CՑ#k[$"4S)ꚬbR"r>_},R.o7Q)hWȀ7kՓXɧ[2K/0!]UeON2,GK4Ikz=uh>_?hy |Fc+cލa!z2``W,ӻ^ (:VK{DBM}>zmӈpPyl WIa'Dgwk4>|nTIe]mRM[8c כiGc>9 #˫jrN;hV'#lWό9qeNc͈x[xSC;]bmGn! j܏u~8Fg4&Uɞ*=ϳeV,C{r3 nV1Hڸ!IUjB-Se^MדS߲F5}]cq>o#TpW.>![Ф! _E'0l2gp-OBu4tr}-޴5&o LNs4)0A^|NV=HLy{ _k:հ7aWH=:/ҩ( . kUŹ Q-P΄DT_&% 3ۘk OZtI:WB8E҃Wj"dHً`JȐZ+bT'a/5/dk:TO#?U@̌8W}z"\zK6L.{LEe^}B8Mw=py¸XIwbnj~L_.U`~R/˳sqWU7аl' <⇒ey7W00<*mXl[,BZx`aoM/Lz䀪 {ƒAb{€Y];}K@Vb&HQ/a9J TKR+(QOƥfgS@%f.XGIP4"$0S+$Txlxؠ4ohOݪ3 r|ϝD ef+/ng WO8!B{m&A]&syE'q* xUE} {j8jL?b'_/æͦʔ8źnY.zTZ8غdڬ|[0}3Fsp>)RXK΋Q&L@ub5oϘF@yv[ yo}> k]x#LJL&1R FH!` `fAk{DZ=y~8 *tvyHp?5jفCޘ~ɞW&΂]3t@b6P٣EK6y#k3tvjkqǃs#t/j aJ Ȋň.եճ@ٶ!1GPQ]ۢ234[y幵uJ/ӊ%}?b\m>uE"7ı8xNaؓ͟Biul0,aŃZn0tXU\.oB۷vv暸j CK0x,ɻx2\dۓ+֙oiE]fY4CX=Kh?/.S|cswxC@$B^!;CéŔ|f@gKQ yM j} }9lV+]L>bB%0: ¡s(gnъg-PJG5gMnwlT R{a #octvK RP"M?Bm5dno]MM7˂Q;?8y;~\I'{$n O 560g:`YZJ|C-H 댸q̅pB OQh1 349a*ѳ{CO "X6"K[4Zw"iiT+[8[lﰇ݀Pw} F9KpL6V ֘%uϦ.u('Hҧ0Z9ԁ>>EtVP,``BgB/7FߞSHk\d[پf$| "䯁c%Ռ#_1wi)@ y6t틔،0сZ5 Kս󅌲_U5"SX2xRV̊*G8 WZͦ%@[Lf/kp.u n!r9:ס{tm(r__&y(l*ktN9q=C(0[t v[sVŎ#%cxs@gvfwu#95<ļ7\ ^xztVJ䒳/)ׯZX3 ehpoJ"RA޶ QPPf!?%Q`D-<7<ċgY5x xT_m71vߌ'T_4"?Sn"L=u}kHcGz"?, ̤`pܮH[ ݞSbu;#OE?mܼTDשZF(X~Q)g:pwHǍwz.B+ϲ+:X 2B#^@T16ط a| [w2:T#3GprX8cXEay6+a@U炁Jj_!U!VuG+Ues!a,Tj}`sON(y3@(A:8ꔹ!S}1fפds"@5)i'B2kxVOYOoؾJ<;wv1q"ڠN|襂3,#kqi!-ʞ;w|픮n̎A?@K C1|?6x4eK>kthzp V&O>Smƫ]y]?i$ce:V֨'ݏc-&A/*`/&{i$3;=ds~l,GjBL(`cW}?}ec*PrNPHfXD;5e%cpMC6Zf7yC8h+OKLA=:ALu =iћZF:1bc@z"P}2M:w'a'bheЄpcoK.#90XT.9h6B *Oy.ZKK{uNT/ xpg6 @V R tHV$UwK/J#{5jX8K,"E狑c3hhݔ~4#yA4Ō-ml:s<8⏷ ?F@я]-7E} ^ )\SY&&@?w% 2 `( PZ-$p-Δy0ZXGD1ϴI*aT,C_ fF`ͳ*t!reA\ޒ,?:U/];Rqvy!o.Y3kC-/ټ3'dF[S> T /A~4E 枬y cwP:n9ao&'zD }p_v̱;<[^|(5*/voޭU_toLm8>2PpMJ0oo\E#9x-1!^9Rnhܨ'\ҕ|ߩ ODaؿ%VlGﶞ~9weڑ%*{ ىο1H4 ~=Vъf'RCaU:2}0tܕЩ2@Sܷ[5xf@poy8j0_ е- ixGFdIpʶZSet2 yބ&#G%|> B=ʯ%͸/y #eq涭.%.9յXI)t;Y׫vq*g.?pLy#(qSEdDYŷ>Fџ&}Xkg:"z\.N¿mN$)g?̳,:~!)82>\ʀāVC:X#l܊WVK-rf.a__[J7|@VŻDgU„ːk-am: ,$p!~@Y)jtӉ<\4Xg`5?$2㉑BCCa8vO k0@OP3 Y|VB+U&u|}ǐT&V ` G(XHPR\ 1+]w t(hP~=0?zDIL_DٓIfK%xIla&9-OA:Xu^e{|2Jh1Ufd:^k)枔 }~׮OX^i8R3&p=tN3P MbLƐqoVwb,sy !5Mq14xYp#j#{e`EϘ#d/KЏjBTܞ_5Yi쁷ixywxE!sTT?4ɺ*SpF"Je@tf1G{҈ˠd_09v,?z~DjuEɊ/l (kr_Ϊ=!(l-p z/m#ոEDڂIeU .̧ODDpsw}rj v*z2oD:C@Wf 5iyXhNoȊ8|!fq6wC0ڮkagZ6PI^`N0E \wmwz. c&` "(]4QnՊͼ3d=eڣ$s\1,57\U676ppH_q2Ȇ[0K &IrU =NQF,w3e_A\+mv V(6Ad78dOT6Bxz%ʸM'hvQp,n;*T+Ûezc($S^u/DC;Msj2$ Ø:cMW7HJG E kپ۴3Qg߁|I$3 *:E +D>_'xWPiE7>eb&sۋ%UxtK6Pב`.T+RDzb%[Ra6o`cLܽeQLmlHȀN&܄$'u]~-b^n6w ;M>"K\گb͜HqP7̉gmл`h+"ci?7.!By2~yh ߰u yI̙(|d22C }JR $-(&[ ? .n|V'b؊ycYtB}xA.L9.bUc/)vɩJӼ>wlJa1>r{zTDlE/cSB P_b3l޻5)8oJsk1AH,΢*"j/NtW)tނn7k X>٤0bxXfގ;jg/nVtc+e@+>GbY\<$~M{]Uq|GpHІa޴e?>o,硲D;(s'ڍJڨMx2ݿ%~m*kuLM݊8i])lhگZjĝ,a䚾w樂l&8s>v톔l0 EW< 2a$QZ?)Panr~+&}9'cT#I G;˭T 11SDY\jg]Ė@*R>\8% E!. s^vi5/oTQ =)-9Xig;xwP$cw/u uqzP؁֔Bqdk{ZO^v>}@tNeOo[ L\ DVx3Zy aZ@ZlgrTA<5viRmhڹμ:b%,"#{͓WyhZCb Ra^og={򮚋M5|\N5DEv=0x ,8-름ߌ?fV x7-³N;2eѠGkeL]U^yX&hlSj{.8(4t:#nu0= /UV\RZ1ڡu)q lXr42[2Qq|Ar`/K.W}9 Tɪp4 X;݌ߖCļ )^lrlǏBoe/e?:k] (&ߵN#H Ʃ`'CMC7/ʰ,&E UiʀxalG߂/ӐwB0^_=omn۱(EkC-# AH(Jmx^ g-A:DcYηS+G)I'TA'ddJY C[+֗:l|{zɜB^Jp@IGx [AkA1wh~`Fì5ޱBQnӷ!g+F8ƶ 5,= Yԧm㐫XX觅o^r1' g?,LEYh+'BzIH9" z2)ܼz W99$ӆzB8E 3%w~RS_ӿ]2{"}G!gqheޅ$%"Meyyh^BkMr82 dx< b&AWEqdOKVSyxtRdoTRW r8ӥD}ff@hЮ͛S~0)0ܧ2 [`#K{zQؕZ#!T]m0 Mu<'еն~%t C|yM6tn gQaU%5FW= 0 X'3Q%C NE'q["-5c}so7_6i~M 1VBDŽF)EF9YFb ߪl]]UO-cƷk&l˸ R_)7e\sd ~#BpO~jf(>N@ c6PV9E*xys[.=Pg1#.j_WqDZhپҴݳ:\;<JPter~r2n}{=O,7ɁY7j-]@lA/=9vFܖk38LtSЦl یAVOy<%S}w0qły3B01jR5'u\ga歹r5g%߯S`;Xbk񧨒>nB-}ēxei!^8ø'K!Ǽs8~ehH4W389le,s %Z*5Ҋ`[z'0q\% ;~$ʆZ(eNj`t[Tnf2啨2q)Zϧg׌yȍ5xi~CG&C%PfIߩ}04`h}X׹bI(8zUQ~Y݌&A 1#&p+zG;"QVa^˳H9 ePObA՟T[9$iuL#W͠rx$uXTg %gh/ـ{^oFuO ?~ždiCc 䯑xupap>|Zw"T*X6k}܋MXi8]x8Zy_Hҡ ,tSat ʣvlc[){s>Q #?ݻflf| mC2沕) eY"m :LLڡ!Gs}ix-,R'u~M Ԏ#;ٽQے3sM DN0Ժv/p٫f %kqU WbE<44E[^,aINWDjgjucx7H&1Xmm*D1%(yLg9%h>eOg@aڀ24 X ɛM`M%_bŮ3z?36/`'5~ Bvć2X[dV3kM6;o-ՀNɧQTRA 58#O|}3.*pHx@d4+2Q%XhJlfvu׼ӫFYR%%|3}6IkZz%w9J8)sf@+$o)2g2ǣnb_LOnZ?~;8 P85hF>WS ?Bܽ_M||Hv{6#Q(Xur{Z'>دҽca=Zo6U tRJ ߼??B9`ӘYff(aFa`9#/şʖ1{$`eJnz$=/p)| ~.jۉGlSk4\]oL&Bb/p=x{-=PfEmM2?48TQdJ PZ#5!!WFƸbJj,34?˞ "FEci}PB+!gM*" jOY9\yBY˹F #jqzex.5QE w۪R+f8D1 X~y%WH|{^.f u8nu?V/9|7пVJ˩"n9 K$Uڈ8(kUƀNa Ε n!t_-3k Z&25A_]+Nv-^v)S١SO©S{H.~H2μuJf"{^ 5٥[%@NBװ_HEM;9| t[NP@Ӡn~!bn#7hW~Ļ#Y$= H:񦁇ͱ~2qf/c[ki1 MX@lNFoϓx/@2׋1/Evӟ>㦘U5w- kc) {MeFQs@x[ݨ!GCͩ0FT{.ɇ[@TQVp<HCiNS^hC9I %+ژ5L ˹X{:RX3ŮB{kR*8gJr>0yxc`Q,e7b[uçcXO^.nʬhUKH=6.歪y/w39kd?pč>q%L%u}z?!^Ԭ3lpb5fVV/𬠣jE3jy HL{e̒ ϱS` ?<H$콀[<Ə|;^Ҵ3c[JFvV8YFb(C#ǛUG(fqIlu[hYt= ˏ5] 1L5B EE7Œ5 bQC ukַ,&(L񭥌9=on*J";5%֬Z_ŅcÄ.p2&wdn7U̿H}wFrn%~kJ-+!t].Py/sLH+h5m-@FWn4 ]g T;ξnW+UZW=CܶTABVc&Zx{0\%(>Nm.K =ds: ]׀I$תT Mx\2n2]ME&*WtITd7.h[2W>L9|ރKeIa9 WjNMcr?>yYj =Ows~&n+Jz[#f{41~ j /J]vtG#:)puʅ@Y!Ž`nwR)4[]g4I\w常>ࣀ֤?!9;?,D5%DZ|隹t̉DE׹Pq( `l ϹS?hb1!-xKw㮨 b~^E|L 'V"/al1 Tyu Ii QB \]\+.cbsz=|Xr08j@vxȢm@*Z[@'&KIĿ!V˪bl<p/YU,MGNd5!ibf4Ecdڐ8wOgn`4M/H )R%'b K \[M~c3S7VnJZa-ap҇eII,+9"ڤ;S>SRwiD_>ep`^>bF"\FGB8M"Hf0'TWc(#SɆ_y4rPnȕ] &;E~?~]KKT/oW几?E9<2JQ'vZJ E4,}eHtKGT06E |~j %Y';hs&Qe f;;!)= O+H*an5i$ZvN D`,( &GPn#`C1܃oĚ1犢͈ B4P |Xn}U[5˯ڛ,:9}RmRSEk{t^ĞYli7^ HQ<>a+75oB 7h pU6=8n[u\KR₋fqj!ك#&"ۣi(>Nq9Ӷ(os9 D=Ndj U)]3JGlmx3uF{WoH f;`Pa8<$U -M`dN}N$yes 4}fqe._(59;hFڞF[ayɼ] m7DKlp Yd*;>kV`0: ۴Sz/GE5gbJvXq #vFFm%._Y()2ٝ IMqj'߆qג3$q`o ,^Ul!$^+5`wMW_/I7|̏h_)1KلgŻhDhڱ9>,:-,3 ~X06w$cRo!d{&.j?9AH*`DU* k@`qňf +bg_v՗,7-MI*\k$~f䖐lp2fs+֊.vX4% c8>"O"͌2Ѷ&U&N{X@֛LJWɶt*8.N9gu-y865ocHk8. 'Q:6jTuwvmHG8K#^ɇ=¯bi[wWc04cI%ulή[Xf=$;"}g ̳lΨx f2[\xE\B9A^7ohOwϕ)sVڲ ?kec^K|hqBkPٓPgT)-lc&}-bm^w!ʮ.^XkX.^%0B7rX7hh7ceM V'7)B1y y %#\r<]Cg#R=u:I_L&CwaƟ5vR_#\kv fA9Q#@j <+RVw;Sʩb&Vˊ~EJhR{JSgU=ze8aVbf1˥.s>6/es.Jg2ƌ!. ٜzwğQFuWKk:j\=|` da ;Imo 8_6-׬mwEmΠbQ`Ph2E$Xq:QXIX_Q᫽]C3LZvX0Ռ=Xm. kAhY{KƳNe4CYr ܛ*]Pxi6V3{lϊ!0tM-m}#l%/h"Bd ev:U -wkY P)PIz#rCb]—DuwC 7~;`Nm]r(PO/Փ(~?[ؖPWOrSkFs*tx=6>I{%Ws/'!n%^wx]Soεݸ,#dclB뮞Cj':h=8W9f %GUO]7Ǟ_3_VC:PX䚥ogůu5C vwPLEe LOH@!p#qI^B8 4 (.֡Z7gq外emXsNF^ֳ=O:'drNhx3 |H۠Vdߦu+59-%;nM<5S"#36}{b<;rL<'P y!M~)V`Ib` 1aK&,ۭRql^W{ۅ *Z(hBH$-4\t (B-F@nHVûi>zb,ueOƔLHc[6avM'IU* 7;f6s>8G\B7fuT!F[kb2gLJ0 DVQ O2x;?+:W_N'd⣵snWt^÷.$Y(3-© *=_?*?d "8HZhȕ$*cg!7&-ubdO8lxgP%L 'jl.g.vLI~nsQm!A#NNXX:{F"_Bԏeinix9u]{\QW!񺶻"w!-?HbjƥAfuY2{@硍Gy*9P:}@)we}#/Ԁ!C:(OjհϥGS,h4$M8[Mw(7vk%nց;?EjOXzƫ8w6ď`0@*9…n{ S,Mi1x>>_5v}ߵߵ*:;U='wW=9#PW(0sD`csdyRlu Fb-H Nc7 c+I_kp6_TwGԬjFX7516 6À!{LRR߅7>RJר, AK=[7/9dABPܝq@54Tq-Akϑ܆y#ػ~MO8?5ZPl8Úu)@yoݝޛ8\LG,dcK$p>T-",UλTr>*2| /(|T~~'"n~Yd=;J;K?aJ֭\N' ("ս,(<3(/NLdbOǜcfC#;f~04[tmi^2ew*,ca9$=ZIe|.Ŀ%X|_˵ +gsWhob$I)-F@ UW]c28`<_b0ngaظS7ש"cjRź9<ݤR,m ZZ K.+iSQU [&vTxϐO.,5eڕ* Ào7!ؓ͟E+Q赡]8E,HTw>ms~y~fbJNQ&:, ):Ž>JƜqV@TQǀ,y.qNz0\MmyvqkEA&JxI1ѻ썓|<"(q_EEUrbzv) & Y)|:Hĩ@jK6q:e[?R$;p=a4Ip;h-6$u2o q ]F&}T8qo 9@C{T f@ϫ$/iK, 'M/< }pSnn8<gix{(CyYdE q_"ngnܩֺ'5Sx tP ?oUD~ޤCEP0 g0`mq6SKg0_&R~p/ _K%Ɏ4ɺBЂHmxm ,M-;t} \H5SaK=}J|z{]'@`cu<-ID{,uȔrGqTmFE]YDՙsX9aeDA}<zI ȑ(O90%<;b8֛:MS2&1\ng?ckEcPZrj'΀&hYGtu푴`7͐$"XьKfTZ=,e™ݙtU^bhb4'\p#s,g<),q]tu ")N`/w}+ S\[Q$Xڀݷ虢_p<'˃Z64]T WGV!17tmJSJaAt>pÜ{g3~ZWn8PKP]d**9a[]_f~yON L0ylMB7[M)3ʒ;ĝ#PlwwkO kPj%brTW WmO~x.<"P3o6݉ <:y/lG[;D !1K!_ (o4цHӰ! {4ݖ?۬Zhf.kL1Nυѩ[f'Ks~NO$0:tU"c:rع?VԚl5O 񘢤þf6qNr V1xt{.rU.ޓN ` N;I'<(7Ip^^A9`5T 9 丆i/s)~ *g$+`VeaI_}LQOXE7}Lb3BI-̲w3xauln_v tsyVXK6l&Z?^EΟ_T≽51`e 㒋XQ':uh$1P vz\\<fݥLXeX$)u)㋦E- Ţu1ڐf\!K\+" 4W v,fw-!U\ jV8 aΞȂq]4ym;[n&R>H7@*Yq4\)t,7R-Ղ'mS-P;D*hZ#^0݊+ui"OUʥ+ e%W;b@φ?$АSK$걞AmJMrZN' BVre<-ZMb 5c%8RK}ᅫMb2+ D˜S5o~6O*ea=E=" :^{3a0S%F ]>HtSDe +N"" )2NKB6 !OK"D_gsfCxJ:W.7nwZ_K̷ǻKr%CuGTeD ҇jw]2veBsO`|zZX#PmEW}R4uh5^|!smeQX$-kǥ @42h +bI K`ob^%F |FkmWSfwnV:Ar1*NljK. Nzw*&m_y%57zjstߘ^9Ԩ%Ƈ xhM LZpAt,ƹoRұ=djꢈcq VZ#Qk<|߹+ŧM~*:b9}0@8Y1 gܭ]4Y.qB:BYtHWH-^ϵLHpV ^%[DI&W#վCWʨtֳa_ SoTCjAGȩ}(߶CUB4(5ELW jd:*{U~'b燹HLVLo,A|鸙sd҆e7Eͮ >""JbHpDlv f.`zm%d)hk 0g OraXdil{9eɃFKg}1JGihqg2 nML#@k)GԕG)Ђ zWny#h1ulL3<*!ѭ*cy k ?4ӫнuThMDO5pe3p׍7)D 7O0F((YwRF8VpL3(̗,֣fҰ3!7 FrmޯU 3p$2OA,6pdYQ=P4)Έ x@0tR28nO G5LP;/~Uڬ蔂)t;Wy5!g놂JPa2Gx%ұoj!LZ\hlVٽ5brd \ЂWG{JKgwE<*s  2Օ.w6~M (.XÒf$bծK'۱a3\u1S걦(lM^ۍoj%f _$A.ƜjDFG/D- wk??G@Djh rj־HseC6t^K_N LԪE0X.w SiG!yVP]v/(?Gqnr`p P&x.+C\9#t9X#DdX7I$/!nSfمWX.OTKtX:;a$Lf)An<d5@&č?ifi/2#Eren˭qF6ŽUfiz[pt&_dc#-JG.&+`? 3R=Xl'J4wTNS-d A6w7"ca!*98Q"`~C(7:)tJ(fi}k bˏm7U:.n[jUSprnVlnJ 9a~[y^'7TE,O/|Tw6MS\a$ZV+kyp'TCaeQxgG3&Ru*fݴ";0.ⴴ?Fc~0:~4ߎB W9k׿$iWq~(!* eȞvv%3oa. eMΓ!RE ԠevH{n74þre 8[%CLz$3p!E#};8L 5.c4}"Yk z?'y@@4E+o ˄N)VE[qh8Ħ ϞRtaӸ* m =WSii%ib$q4y5e.tWSdC0$s\^Wnpwbullw+jO%픗Kiܫމz Kg] :dPin+gA ѥ@ۏg-,߃CT( Qi<"ϼ0X>%[6_&r5F LAXq6m -o9.8O YAJ)@KιIF3CFINj.D'VUXܳ_)KRK6ȴOm6\ۛKR{W'eQ.w)_I|!Ut y *+Gm{yb:vI<9{o,֔*> |SS]ZȱZ~ rC.{gq+xZ,.:$0KTؐwV] :G%˝KE~I[tWMWoF3Q7*Cx/.$66,.e]h0sL-Y#rnhبN{&!<-R/*hgsm1D5$+E1ؠ1 [q9ˉ :.0|)0ю+V zK|t`yk_Tt޹K2T0%]d<-x%7E idv|aqh1 Z7ĞPJ3njf]8D(c*]y!"[.fǍECV&.'bV^C(Ci Y( oagP`!i:«VSAJ0#D踷d` __X;$`|N_v/He0kސ "eIbeX\R8֩` ,i2V!z2XE}FM6,ԥ~B]M73lT$!z^fӷCqz #GY_sgi[`۾bk=٫n =?^TE1NںDp$fDu_p`/tׄ(Be;2=4x >p\<51.O"odbjpEg&$A7~)9ٵK?,@VL;BJ6dh}+W3+ =_-ub 7bQ u*)^7++]3H|=+o!;>"A;?K`kZMŕ.XyT^<51И0ь@A:7A={(&RviH`OQwz悲2鱝%=wVdx6@ikφͅ:DObsxmOf+Gdp$ﭓhCv2" -mP[Q)X𭮨2&d9imTsXRRnh={kQ*T ;&3qh%}k'f?s Sp=pD}4 "Y!K#;;[WgS*-2%Z/p=J.(o*A]I['+@ܑNiC{ -I. 4mCTDƀ1Ue`B&.d$}7(}N3ɂ_ꨛ&sN:?#M r|h(SK]H_UWIkeòtjᱮtl{5D14UGyR#ml[v,HW QhL5u$^F|;{nb̽p6f0Fʦ!Iu;}lSio)4žn`7moepJ)_OWFxzOsL@HDb"w+Q"Դ#x]x)IxJSKp](# NBVdjQ%GW sqO1 ,=E <[w+N^? 4±[&Z,9N\e0VkC1ɱ)_0GKKs 5֧oi-ě:Ϸ#1vзҬT,_9KY'tu49zkwNw~:QE;~+7*w{-4K I2P^ @PW#ն7"zZQG^Q}Rd"-Șꌹ X[01TA8ՅݭcuWc@E}RMJQ [#)_N0bתoń/.,C;#6=qɳ@Fێp'?ߪheI&*z lOsQ=S.o&k~pw8GISӈ>Rq $4>?J&n v{pf `&: eN!.bC'rw=uoI=0'-dR-5ZL%e3(0 jO^^z?-b%r3(5Ad25 I#5pPXLMwp)/|$t GʎԱhD1I_ޢ!Vff&"˴-0N6])O@P2L1 X3inV)I߈0GiG [w"׌gJ2t(1`ONGF5Hf7ڏtɫTLCDS8^@pxsƱY&nGi~/ʡ[V> j'k+xWτ)ׁeS-8ߐF#lm4!Sr'c紀|ڡ2BVml/(ӻ;xtb Q7v{,./q T,T=:u$Ri,.ߢMg%'l<CU="`SÍ ̹\o;._o)MƲ* 1T\?Gqab,;bAa*泗-0w㈨{񁳒jub^ Ѫ?3pLG Vu!_TzƈWI`<52vJ d{sHD.d*߶i^ii9`a ~⨉50F!Ygiu"!I*Sg]2EoIgµi<#ՎDXh'˼qc@>S W1o@ DB^ ;Ztө:S7Xp+`'0")u2C:ec<Ż6? 1+/#Oj`tR)aiWɺA$9WmXHYQ(Z=thDbn{x6rMEXx$XuCesـ'7cBtnZ̽=VhY|"B/;9tkIYU oܠY*PRD%C~1:^LYҘ7¬'EMB{R̿E{ã[ 4l?5a@dvQJ- y7{lV(קLxe b* e5*M/>G5n츟+b2\WdKJ!;xPeԂB(E_ڃ`7!)jHwE(y &31h _0HizSS@ V6ZNcUd~8W8e/SXv;]j,F.Ȅ 41Bׇ#Py#sgLPݻB#7F{IuCcyǛmBc Y՘ޏza&5͑ Mk5(P>KsݍTjxT[Hi0ekX+1!u};Jx$]N}iYW$n6Yы%"|Z A?R .&AHgCL@Tc*<^a5RuXp<~D܌ r aȤə:_ve΀ vZ;/h.Oƞ4rVP GoEc6b4ŦN>0*^bԷzpz>HR6h5|dg HpP:A 8Vm%YqK䦉=\+= W|Ga#J @)aq6~N$- bKE+Ǫ0L 뫩Moߍ}'o52-twe}VR?G\F(4*65cL&۟Vcq^49ߥg%`kߌx=bĹ]_Cśb\g1RF.{ *W>@*K93 <1|\ "0)=4_[||;H+hf1ot5cv_4l>%ŁD>:=%dM7ӱiyO@+Lo߶n)} w[wb 5s% Ǫ,d O8}"pg{$?-Ļb^NYfGDu}B(h$?fM,ϓ(󒦖8VӒKm> ǡ){Ѧ2W51#+#1γ[#pĞMIG|-pvUVk/eKV?jOՎ[.ӐmOUo>bj͓ ̠*>~3#]wz'yar OpQsF[$.~>b?$`12"z,;<8w nQ&9M9tV&p$E_1^%HKVon[!/%o.<WW6BɿdETdR GGaM8tfJXZiSaxʩ ]=l)y[YCõv؍-*1_24URg[y _L9=nkŠ#Fδb?'}7sy:éX 4E"FPy򥕫µ̨? fKPn`^R˟m_(gмVLtL%L]hFiC2? Im56w0b>TXaN  <%w.|I)wJ jH&Ʈ D8v `(k $%{G ++|#(خZs29%o~Wel;&pCH}O-yWdf'do ][cȌ;uAvOGQ@".P", NfX)yـZYEoj͂>4˥~hE.5ꀬ9m˨ggMB t0<G޴R*b@KP,ÃS<@͠ԼoLBp_"tu{ĵQPMҒ&V-r+jBC ' OV:DDN[Tf0ջw@mVo`Mgeyҫ2ҡu޷+;Hw3Xql#mZ >6'鼮VN_&eYaN:fpjA"_$0Tdo#>&zA~5ޏO7/RY EX1۟L<(E^?%HIz]{rc1:nse8 {98&O2ulC-rĎPEKTzIΟA0C 1ch!kGCDcnu jz aFlJ~R֜`AhWK\jcᝇDeFU"bncg1?vA`rm Y /r6y7yvRPfVPwTNe# '#nъF@fc!:QJU +kh2RG脡v鎊'qi.xʏ"f?oڼFO+>-< L&X OtE֕X7i04 @ BD.1bFZ)bH`vE(c,d^Ix2D%hLbrAxk sb~}6]_o&ŁAFwE/ۦ5,tqxfs1QwFu ԙtJ;f$RY="z4 558d,bD ]1ؘaFAŬ+;t>@P${;,ia(3,~V\mqpB2q 79 сgZIpoWC_NT4+E.5HΙS ˇrÂƚiFdpί0:0@/[ S> &\p흈 2{__"|䎄jVK(HO}AK0bTm 0`H;>pQRBnJU)z,J±@՛Sv#cxC(&/>N3zE*DK0q笶cYÁXm5]5S"M)R(D)Syu^A@$e^T94G:ԝ1w$&ՁXFDzHΒ۱Vߕqϛ:Nw  }$ӖV5A{έ>fP罎>6(^(BZQl'=.JEsm'YHɉ?G/h4a̹fB~2,9$R({[tkE FC r&fAW"['Z9'&]qUeV8I=ٹƐY|Hb{:ؤQ IsDyHǑȩX25x+#u,)=&$E&V e&V;@l9&~m,LZΤ lkILSJ zй˻@q[ޟr<^r)΋  xEҘЪz whL a*yltMuMso[?~{m@dCJ\Dϗ쎂Sm]BNbM`1 5#c?IșvCB^`IlƿfSq(".S %= j{r#:<fW[dz2? Gk ϋ^=uRWW ,|frO۴h ^I&7kMA,V=r5'޶i"W R&X(c ԏ/#oǼ} O!w෯ -^V[Ѣ4YbC)QŵN(7 <`F\AFw,tJ d~ٿ w{ ((G 蒈sR۶rE.R?)[-BߨXsR=(}+.AvjJ@ȹEt9*!Rrx~ԯ!\xZҽ^E4wtUYb $.s2bA~1*ٳSt|} ݏ \ #Է8F>9fjMIAye|kVMGSY9(KIGu-ͯkYїo_ؾD+>3{% Hhj*d1uy} :RF Q# t׻ح4r0 ACvI3] CF -sAV7׆٣+U4{^i+sˀ*"tf'3tvJYja8Ti%~kF=K44lU< U_O꣟&Re3m(mG+ĵZl`Uۨ(0b'P~SZU!c{e)O$O !UX0Ib6eB"apf!4g EnG9kk訖IC}k-a{8t%ASM9i$?Z*" cjnbVN_/8Z ׷J^?2Cnn|]ġUlިBT7ˋz'xtB/Nk1vsPRdpx0]ꅾT~d-0TA'r KcX͕5̛ib ~$ *)w'թѣe߈-՜v˻(]/9obvQd`e֤7qP[+"oS?|Ja?Ix'X s~ٰJ\˔}jTaHiӹسNڵ# [0H:D;Ym9io #Uo"Q f63|]ZȤ{O[%c,RSGrpt/@~=Yܯ<]`iu)MkA%<DbU|. :&*ڸFWs F͕}V5a)B,b#DҌ{k{`[/64n"ֿ^ z mUռ,ьU,TVF>O/A/R;䭙-GXwS4C!D"eh[Ѫ o)I^M+؊_p.mH =SF݈\u!yE姜d1X[YMr{=jlsgB@MO [Q^g0!^w"bTꂳ={hy'f5iw?JZi~MI,{۱>6oHJA} cUsl5f V;;TmtD꣧L­8 o*'uݓ, MW8|G& Y4z')}}E hU^ױy_ڊܶ3ze45Ztm O60,:l\[A(4% Ҧ#Ƙc3P+`p#vj]'wuxyrepXL-~ b;fYi2s4>슀t1Wl$%[^aVuwX^$\d*Hty_^K=w(6ޜibT̯d exf\ BߘgǮaV~ێj!''*~l*Oc㠉~ +_ޚnXnr&5琵GI嚺v9NOHwHU,߃)(L;lH~ 4t ]oCxj+j woQ`]sd0&32u)smhCSJrBf~QΨ2ը=G%y0}ѣ9*?;{g5e|TQc" q'q>Gn886(Jj`Bkny?beB w S^o4P<*B -ňGv߭t,rpx`%{y7[5iK@8vafPl'jnpFr^eգ&_K_M};q'o:F/%[֨:$:*hrz:- 8U4|b0bf4zhܖtk}cJgIXN&] {㧪;/ lnj V~܌yT0̀4}ldXO `bQ^sfZ,,!P0k|Py%~ȯ O(dY3IZI_&-/V(aK V_Gc $訕BۃjƒHg /t(R?Lu-rS}E<lBĄC`z_x.śSS: F(=<#q[;__k;uo8([BD·bݽTn-0EqP>EDžˬp4zا&:SWNT2A*XܮTқ͏N{+1D x#%..kZ وbc˚#]J|D2Jd 7p ;[mn04u*U+9l>a0lPB`0\nJdL|\v]J Eǂ;tG !AWnxMrAn n:'t< n# } {fn8?[|,dꈫX JzZL]?^Cjߊ) I]iJJ ٤C-(އZ駡^E 풳gkQgBe7'jRïhE 5Sj6=h<-z+cݒn s9 8̘fw4l? 7٢[-WzFWS|wj"{= <CxY/^"R0r+vL? QW}[.uW:6c ͯ_UMx ~S^чM:Dw^'[$Npfٟ8T1C9N | wk)<خ ?B Oh٠?58\W=Pa<m5;04ג'gQzY@ݨS@=x@ Q{qeMt*.ۨxY-qBidR?l8r^EugӼݳ''h4 l䉹B[F'P/neQi纉:Rsh,Oe8 lPW| c⦦( WJi/. ]!ؘ} ;˝] 98|5S/qz G+/?/"J괣v}O[w1 bqor .9oIZ97wQj|-bj6ЦG],,g~lF8'`аk<" sC傤āDsJ"|'UX|]U^ŌGdO"c]; 1n}Z ;>[~qw;#>U,E٬aS*zv|jH7UP®-GB?UUI 0䱥`RaAƆ4ꦽOh+iL"#e ¡,!<,jƴHbC3)V7dv=J ߐO֡TE|F5լPFj1A*<$ {5# 1 1=(cn"_NH +T ~55]^B\)`u{ee4]/?WAY+B>lBS8(H~0Xf-CV3 8'AP+IJ'U=# h:MSsWkhB|Wf ,,jQ3 5巨9V}!Xx9;`MSOS;݆@ I1mIb&nO/aJݡFJM:vÂZbz] d$a*4yv9Uޒ&&la6oJ':w=Y/@.Ң9zBeo~?z^:4Q۩ ~VB?bdHB#MZT$cIztl 2XVҌ9X'޲K<)֞"M8p5ib N\ӱ׎#QA꜠ҹi7=%-no`6=-E9֓؋|pJV$"TKo`#''痶?Ly秩֝bd55FND qP>GEG'[ 9/VӖ_B(TpF>l^Cvu~+T6| r&X]+o4+~\['QŪ@ Ec>gF< ;eq ,Ƀ`Yf7 ,7q( 1-UG42E8 Eu6X,wQT4l[ϪO./쿂/2y`nvO{S E`KL.kĔQi Ƣ)Zh${c>>ת>ml(H X/ePtj"wuk.Clpd+'ץ_c[Qlq5,:yyxB`p9zcZWq)Qa !Ԁ fW:LVNԍK.z#rL+%%nJWtUƲӫ Pn-C#RQ=2]+aXc_FZAK"gk:0^g_0_k g9f@m8,Mz#vam?.iDrHx zi ]Ή@gr%5p<( Ж C!R#DS}VB fUcDv!nay-Erb>|qǂR]ѭv u~"hƱ6c".& *!InBQ/ |OڰƿdWցUU(͕JXElbo#? aJ*Av(leCE:dc"qt~j< +w *,xP$&:eU!\"Kri`8FQ4i´̙,Hc[`p"+<`T 6;O`B%uj*dVd1=RFy;ToFD%0GP(`~9v!q|rڪ툾r.6'(>B!oKcI $'F/h_Ld3:W`xdr(#sELN2`2񄑔 wm~ydYrm7{0F+)a ]`uѫ_q-Ȯ]}+DAAwn1Vy8 SM|?f۹…o*Yζ|38o.HşWbk^@: ΒZ:[SV"Gs^݊z!kn8fc*!T' <:݈6Y-Sf8z`f f :1sJb*;K @vF(#ʌ@ T(G;:^=+L`Pe5d{]sZ@뉡Gb*_8>{ maRKDgF'UտxP%?~'2<Yq#?lYYGaQh]{[T*E"NkHK'Ed JSGWWgAhv7!S(I81;5vzC3 aoݒrdʶ>ꖒWjrP t%xc _ONzY{l6HwUtpڏN ulw*]7?!%Vzaiܞq}fW9}OZXdQODe8?y$*CAÑ/0n? SeАA J_h8ٸq9wZ8 U|k*iIюǰzoK'4GbXb8\OZZM76ء:jN v3Q>+T޷-nR<{näp@/تjGYR7\ L]S,l!il_O8B !8xFFoR!IՓP.Qr,{AGE>XJ<)zvM̸ JKg$Tڙs'ڐ3ݣi?xd<0X Q1OFk siKSo)΀Q&5`U-r1Ӳ[J|یh|,2 T-bDeUoC#_{ΤnIDMWBxWۆAa1DTFjAhlV̠7=D!Z̴j p_ :D i =MaW6Rܘ=pz2^rWcD kb~&%GL6I}0|aNQ\ٮZ8NqĻ*)ፕirlF!!D}^Ti*GC7v)(a_fW ,Pi+}I*n^s(WC%Srv{?.Hq%uq?/˗ȇ@k3^bqsxˎ371S[Vh\$wGNޤ+DžY/p/zu*{|=`Q|l Yn $PuF!.^0h4ŒEɤ{+kG&9Qk{2.41k99WGؗtN\K}WS C,v~+e :#ոS7sfM@.ק6pEUp?; @dYMkN'"\u :eD,Y+B(G۲r̷m?0?]ï܏txM9z 'Z(c$? %66orgi~ɬ(v.5`wm-B7 W<v!`k)eӷ6sGyXAvoH6E,8S{;jO ]: "χcXNIYglt 5L^X|(lh|3:Ut˴f,Rs[pUҚkNN_PȮX)#S9e (3"LKڞ! hLk.ha$bE@GGf۷~GWiN!0+ P{[sܯؐ<Fj"*euaQL*-5|hNxn`r'4 3ڙ0[%fu6ua5fI4tIꏭ*Wx4-'1LVpQZGrEe)cp; fJ>r\x7nl\΍fK8(dZҀz04vuMPy+QՁuHjb}ҾO$A<-%08n.3$y!>#`NyBU {≃9d n5V\A=K2"-N1+3&y10ЀGNwfB;Ж-M+L4&rplR(8|nuԦ"wA߭1Seڨt=z* CdLli8`+hr 9$쥊AoR`>1TqRGcܡߘV^܃Z̽Ntg^p|\QsCVI++ր:PL/JA?MxvG^)^LiK8کj\w#a0 3 3V%k'=&?~R KWIr_NfP GI]'P=9{T4t7EDbt`a Nߗg2 $$뎡{gD XƟZȭbU`6h#ilq"crai~*"+ݟKD&\X*՞"ezh)4D3)+*#ɢT0MxD"ɰ!Ǡg1vQrW]ư! ՗B>8;F0oܿގ?s7w"Қ 8>}Lm+ɾzdI6l4^ vJmTo f ,D(-)e}cshtA'aeČ7UDp?qɍ^f(Lf+??>8옲Ne2C{ѡ$й[kl\v#(b.5y9GvgxDYd^3Ӕ^D%|SMF5k_JQ^*;GTr3ƃyi=4 ??|pc[| CևpYml%8yx}M䨞G1:LJ9tXYg弆 *bmPr̟Y" ;b aZbTE&2:s֡KK~ޯ!yfT.ϖ;$;71%"IGwiYюuM -;v徥E`1q~ $<R/GLoS3`F; p9(׀_H;,Xup88Y 49;/# 66{Ǯ Cy'YWJ□pTV?u}/F8J3e4l$4fZ3+ҫ.P&:Bw뎾eSTM }"uR lJP"mU b.(DSZQhp XeɠzvuL{;/Tӵ'6#8<&K܌ :$Fq̼x 9Hؽ:$ޙ )XbiY(4\ YD] hD6|gq ( !U'bH)RСr-fv{5N踀N3A4 橞g0Y&3 (,յ%3nosg2O G<`E:$EYW%?+,k 빁ͣ57s62,PApʆg*~D!O$<XA[vrQߓ m$E.r@ qEs9uZoF%f}c:ӍBaDY-P9Kbxrfε;jc]7_Ƚ&oygtpl vhg_T 1sPb  lIhbA1#Z+ aahm%t%gvzڙ"ŞIO=-*‚Zfodc)ўz̀DIfC.~2v@buqqY9;GŲmqdH?RTYBgU!5y~XvQʏ1Ckj98!}VB"")WOOʪofߵ:\K҈v&r] !jNwYI#HWS y] VeK2p ͹yi+@U媹0jd3!,V.r{uLd pkE󹆘%a=$~I(<-u"K#w›(ZzK~ϭ_ϽϞʖalxi)N4:BU2I=Zo:S|tsL)C:&ZLu^z7[5s9RݻL'bfP2\BJ$Iusyt4@Dm#Ӎc 66d b)$`HW [wX{< LKX!h~mM6^s8D u["2*@upưY5#FX&O7loɸ,(o)TX" w;V3jﶒ)u,wolQ=D>0D Y ;l,/} &{z>f"j,N%,33@6$g eL=T5;.H٢=¯ +1i+nu]0EyDj-g\9jcTE{֖6<}Yͅa* Y 8x.|HS`6|n:;B 鷅su?,gv+6P֒;"ki0?|WfhlQ#lLB>#zg'#  =~1eo2=lHȕoѝzWؕĺWKHy✨!FZ tFԠvdMhپk]^fZ2PUP)^fqq[I:=x+sQ&;ŵf[鼹?L^-8EK/گ `,a^)MrVa+^D  ZW=^$:jpḀ{h=۰DPLu.QݐV^ j2`;&ʓ%iBoT8|[DVn `As~J2KLJ}P>q6}Ľ7q(^=I+cgD L= RҘ!tV6:qk;.wy1x1CAeEpx,2jBlWq*՚@U計qtQ["uZů?{ u3N$T0|٫v͕=_0)oַ5py0?k=Z$;} T^cnsAHW`t k7F5&|A˛(wE8Gf9ۆ S\{8`n&sް^]{@+4rY`g2dfe_Cϫ ev> l4%g.ٿDVYvy>DRjg-0[lSToh<,bUwyRg+3WRP1#4Z2 sݕ}ȞY\FQm daj1U1X5 UH`27%_|Xm'IOS[ gêҙoaFmV.s;׾^"0Z~Y'F$紒U=lGuQ[:e8$ G :بx({ Sk6>E=|vHQ X"먳hǟ}) Ev߻ڤuAOf(JU % 8֍Y  ?b  hvfeg;lu[0 /4O/FcLWop.Ca1w1 l`tW MOXkj(kV"،b̝rIb_%ۧ4* (\tLQq2U}2)4MNz ?!-ub+^M6Pp2ۈ9{Cs\IJ$Vtu8fn`_`yIh$a^y ]Ӽ-{"Ԙz |Cu&ROfA3+&ɆL|iYF7wryy V@+c:h>Jh'|g)QB()W!wP! d Jmk|a%ek?MMUV:VsE 3=[\8eV| PKc@ eFv^z60P早!kyT6îj{'6((};ÛAmu|h<5o#2ffZ[]W885LIdA3#f(O1ȂY$5vSݯ/J#SZ%S/ yA|^ʹ5qտA~}2 *UTHN*|HaCm/*`C\"36%e+Hzmcet0bM>S*CΆKYILV9aJ/Tn^sT_oAlMˊ©v2U_Gs 1FfCJNۖ6Ng:.Ʉ@ hLڌ OU说q S !Lz[%A^c%s._uaڀw~k &)m pQUZ9k Y3:^"L d¿(Mƅ7R5j%;^$:u A &pbe7KBEW,)eͯ믣+]vlw(,|$Xh;?3NR@Ay\%}ݹbZ cOJ.0Ԭ'm)1LWiGAOp@CȪnhP(4!,}A)jIްdn8 7G7 Fۺmn_+ӮsLlb aF$]Ih q'v1Hjο6n Y5zQ6]/#}S7HCF烼q<YLgS&-u{"L]p]Dr }R"SS~IIkK5Nu3gG}'Iݝ$3bbdF%u=J7G߰dD޳9b/^EESRn)t8:2)i ;/ -5K‹SmEYǩ-{1';I61M~6%u".Ǟri'~`tE55(3˖Ѡgӱ'5L"1D墼@tvszɝ0lKtw=&w_f'Er]%wD̞va|^2?! 曡CORKqUK QyeYY|E%P(k6x<@]ˈYrJ5C1'oǝ[^]B9J {]gZuADEb:KM`#W "b܍TBG[B2raêvg2RHPW:5ϥP,xH5W bIɚ'Yr~ØzϿ/kaۊڮh)y _r{v~=f|lmȚU칹azAgL֙h xS5C*SKj/{ ur*O=>w*~ht PGĽІB%  ,\d $!A[Q5Ar.Э[ =M9IF7j`ȋg VV-}76l^x^d(d) NQ 9K&:>v%՝"2:gKY^(itP䖧U\+EۆR,O2~ͽ&e|)@~t]c[6xYGVlG"1u>Q(|P]CDVvڒF~|L sX>Sa:kfN|ŘSRuNsx[$a=]!aWjqboDy+%MYb9Bh08N?MkKTh|#Nc(z/k1sB%/=m ځ}_AS i3ōPu%iu [1@Whn >eDcaHٗ>iqPݏ.9 U(x8NJc@y!ٍCIfQAшuk0- i~'swXOC-])Z`܏3-D'bbkfݷϛn݀ޅpg4TaZt R8 3>cRv1j)N'h8t X~b 28 %H U^}" lkX*ϯ#nQ:?ߞϤ#.iegA|fI+A).36=_LoLЊB)c)KMkyS+ܕƬ vѿrUSJgbc7/1c|!Q- k4((%ib>HƨTy5ª*EVg]c:N|a6) 6s0=I1GDB. /ٮʸx3/$˘sv--bkOnO"wny">č6w9|St{(Pt zH*?Jdk7MA)^C$1^73Δgxwe1-Xќ@cAP J;AE1t5ʤXo09w{gk0:$sj\Y1YpV*@4%c`)QѲ!ܔ#8?)Ez>ZE58; |P><쀛B%B`-ToO'98ﰠJQ;ُ<ԁRjP^D7/GI(Iɕ?T~⍈kй<< 1AgUV,+̮jda+tV@/-wШPC4yfh)'vjƋ;edHRc)10,Q7/8#p4-ڳ! ^ӪT..hyُN璪'VE^[\\lO숤OޑBttiWP+J^<: '/cӄQVRV 1j4>Q)TJ(അ=W^DW^3iF#&Z ĒwNQ0>T6oU ,dMe@X04 3+MB59 ~":3 z6owNɫrh{$9&W #kK ;B(!{i[X|?!o!e3kv $7lS^p(kb \"3u|rjG4kzY `]{>K&ǑjNY{ Scy8G> a c$Pn7D|fYm}PfbSn-:J٭%RS:LEȁ31vCP< 9 !ZS)?Au{^q a%A{/^]k\֗A>whЊ:T\uJRs 9wrcWҚnZj X~-}JVk [aev֔)kt1򥗍-<7&J9 Næcyd}qS24 LPSZ%TN!Vu>{~&CwD֎2kz8x\^ Z׊1yYI AxwrQTF{wQ}&r-ƙS}mK.xq}!Kى-T1G66vܻ([[0z"0ҚBA$qFa dݿ/0,}A?;(|WZiW!f=+̒2sIf}TR0F@\LS2dt)]m#+Gd-W0cYgBDvf4`ST7z\q2+IMC3H[}0 *\Na,">vv =b]$!ߣχ`GkwȒ[(5pjksX&*)1= F̥ѫVKgVLpy5n摨 2A3AO"ϐdu.NQs 8\}i ݶkكϯ\w 1^K ~GnfTLPӢO>-D]5A$}X'zx0zXnD!(ÊG(3#'QpL| ZaV÷vYT<IJA:Z.>~lR!ނ@ 0{d6-頏he)YZE,ä=_vWag)uS{oqd<;"pO6̛CFElQ fq!1E1Zx՘ >`*;~^jd+˻w`4s6DZ ԘeK^H8\XKlEiԳ9 l)L0lˑdfgҙO7UF6cpknU霵c7F۱f7҆pÅ/5Gp &צ08|%3찿C0@D;'c o:wHReoFe ]kb 8Jq<&a -oߑ4堈*iI;vƼ6y栌.cQ[)t#mA;8IiRGfcqW9HR?sc+ @j),֝ߧ哀{$1˪G*F"QI#@Q|MR9 c]eres]BN{j1oa*z?6NVlL[rPXq qo ZBj+KU ƣ )#t Mqk+d}_^sz>{=6++ [%;w;39H7rll>{OY3AfWEiguXHB]\$?F@* +}h,y|UEDA܀ï΃66nGwr2#<4 )gYO}r~g]iJh/Z^n: |\~B@ٛ+_\^27e]-qVxYs\ŝ6!K^2r/E2濼TNw:@|#I)q;8@CX5+rz߆.ܵL;^b& ЀR>;KYe!j@@7cMal+=7[43ctHC/t w\)D`tzIfM@4P 4 +[ 1،PQc9͌4Px6L #B SfLb\" @Ëjyv'U> {V{G;PHІV$@ڟRWVw'/Q8HiزΓwsId'V%Gr؋yM Kt;cfEʕBi+*^l.<ۻʔ"Wb(ieWHw}h'X 9(v ъc''ngnG8l]18˒tg!qjEեͽ6 ytBF/iϰE>*cV6t{ge$pV-ey@PVS|oPwO_}To w^`.8Ou{g儦 vg-EH7Ć`|~6<\j'YVI}WiP74ܪ}'T7,Vr%1}&,'RyB,\qU{oʍ3Аgo{Ep]qe\Wy/'< 4RtymUWE1RɭHnNcn9# qlsJհ,rpHۣ]#d/=ޭ"slL} ]>0WqNW5#ec=ou?N{d v @w!pL9y'x l=M21rB۬ъ61 xU d77mNA ~栩c[ҴZΘm{uF1h_Mli^lm4E "k7q;ǥ jL^ֵD{Šq>hhb)3ȬݝmGp[f]q' =68ZB2_]z۸',vF:4#'~v坾+jJX/h5}ƜZ_ί;ӳ(.E@l4%2PX02㊟J*We[똥A0!if*G^u0~i18=p]qp-3/Y}@~b?)lyn>4@ʏbLefN%2ބ M6مA.:bOF(4$;3 GzT_1e+=*QqSg,w&Č ??t |TCтl(2l~3v# p֡ ڛ]faJ 0eTEܫL1 dxLw!\s)=f%A7@-z>?ڞua*.7`(wƘB!(ȫ}n樲ׂ>m;GwNq (v0S`찚ݒxe]] KԺ @zGK'Q؛OmY9k\3U,IR崟][~D3-gD".9m܎ T ./[V+/ިRi*%b271IzIV3HJ&1.)iw7|颡syj.^Z-)W2O%5 ۿ.qu+UZ>٪ .^=b/JWsPXfO9= Xsw#{6B R9w ,CԒ[{ ^-޵<:*~e(Z"|3-2SmD&P trMhtA#0ƪ .y?(MZyDf<|ЛW8`t0ue1Dَh.$8,K0Q\6)M }KC^`>l͘eҊ#P63D0ϫ5&GBaCNuRV]M'ih4ڠ}/m!ջ(yS :ܥYk%8`') zۦ)j\L3=  3V҉=,hܠ3L>+ yL"HoՋю\ѮꤏlH9Ģl8UmyEN)܉|- @,R !Dr x/cB^[ر ~iKjzZHՏ 5ŝ0 ;T̨ۮ w -߿nk}P6`5ȓz)gbFx&l8ӰsGZ?{(̻ N[ـFZ q-.VAPk4^qKc2%P8Qs7Whِ_P0o /Y6{@8m((7E9 Yu)](w D?(c\+b z@rSqRr@9dLҗ+&af*_~Ѥѕ7ĜAՖx+ q @= V4viR$}/Pc<u-TcY[Ň;p0yzY\c~y Fܦ*XDC?PU!¸7'M;nVssaףyT`E 6A n&X74c&rXDy3ݺ17-YTYA wХ59Y|4B511opțفtS&~4\_ĝ(W|k&ވی?:H*߶' .sϞDեpVn)-%}i-t.݁p@,2IaU X-J(C }=2w DZ0ˣ% 헇0+%礁DK J<]?/sF}A&3&ZhaiKNYB/uEG& uo(09ۙj"ty䝄ە+`KO!G{82OĴK~ x]wC(y2Hm0m HxzC{yM+Nx9Z`K _Ǒ7/"{). X/.@!_ZmbJ:PH:VUږNw[…2GM_AŧBL>vz #oU(dZ௚FU-hs|t7?+}0->^! ^cE!1z3RBAOD#tK:5nΦbXgUh.$@魴]#_Y}Fk i"NqLTpacMr_w$wN&,U8$$9:QΉrB˃Od@L}K8 {@˛Umd'!!q2-CtOp+FVPK*7"kp+a@b NIɾ6w`%eIݣ7PfpF)z,Cߓ@|<ȿׄ_ҢUڞ X6wR`&:E?4*n00ł}MsށJ¡K97 }?أcl=2~߮H98xHmL1G{!wӁkMꠣlW7 7ZiJ’}\*$r6q c M6Gʙ!ᛆԋ=2]d({Ux\8Tȕ(,:hZ^I]h MseY#Z>M:(si^Kde5VVK.)|ƫ=kQ[P{fRq虇_>* tGz"JÖUv#oaGDc%~bHFA$(ܺUd. X!@,@<n<1?{-S7 $݋(WB%$P_tFXҡci3=à}ZNb)!8>]j)-dj)y0+j(W`  c3e#ƠZǝ5f8j\ZbhqDNH~"e2yabZcٗd󥂧zg]ɍiΡ?7Du.6SIG^OfKOZHRXu-lZ2/_8_2. f2=\R2r`w0?G츷ހὨؽugr"[sמ=-FtsXZg;9n?{}l6_~(L5Y53ĭDHz%ߣKhcg8 T"(nՊ*U{Iu;$T2D.A K 6KF#)ekخ{?b9&;\ >yl#.5Ld@tI&m7ff}$:*{Hbةn!}=W2ICJ\u8cdڲ?lvUQ C~-hQO}ՉO_47Ku`M4n8I {=t;'i>BIϸ6kPEP6%Y@,yM[U?t'C;ӈ-heɇXeR\^8f`5`Ԟاjb{6ɨh$D9&x 4C|P;!)TuMm}+yФHr:9Ne5 B ?s#ٞYMo9 ]&LNc(JZ 򩦓!,NTLcH{o&VҮL-0 bH%bbzA;wbz-Vή{9/|]s6-:5`vv͗$H8_}k}F8' EPfHjjG?lkD@1fP蚃ܲ&[Jkh݀A74Mgg22a{m(iEETĬi~#MX8lY9.Rt9ƍY2h X?7NHC׍_w;ǏqԍZf~=!I_,e6'YTxR0 s9@@%iX(T%UM/nVS>]jk ekszKL6mz{aa•p:K:@ wܪD^ONOyШ?IN㘕LRwȐ㫍^(/"xOw7QS@L]͖eȃ]JCAI "xtX3깸G?B6tܕn!Y$9,wZ^uÛ,y; T \\K?MWx'|BJ: kNŶ45CBOw_Vn +>7`F8=w5u5m6:vB5Jr5¦?ta D_JK@K#b=nF؝MtY %PMNMYN -0yB̰]Kug"/Д5V)7)hN˗Тz6泰ql` jR;jG{p۰';Fik y 'AnO1L)'+x 79=8zuY"T݌Sܐ/֌u-e""{s\v`d6gՃ=}/HW$c^l'ZYsCVMU']Fi¨҈]`[{{@xAyr}@LVA'Cr,@6>@LPPp>ۣʒXCHR-n C ~EHT7P8:#jODlǙ_Y eN@ʅS t2OgS7/$;0v15v IϚĎbTٴ8Eu.fŝy+~<}\a??^%/tQo,ofGժ}=;Ҟ|L0 lAtbȚIf"~g2%nZ@d& 6š-dt bq.'}&#~(:qWWXmJ<Y UXىHS.* ]bɦBkڠqKNgoOiݴ7?-)Ed궞Ї Zտj''Yldzg/f2v!A D(P.Jv[B8bF09aLJa&jE EJF5ONHO &qLB=%Ϟ1IO۟)>(h{=C Vxb`cYz;]Qn r<++dAM]mڝ0k/<#lNm- $=:] 5o($k? _)CD|č08܈j0{`,yaxcgPQ˚_9mkMpG-]ͯ]{q>_ad~?>m}:Poj&F/{O@Q2BN3#1r%kM|;'C_X>+i?nWi3ڇC?9fܠp?|7ZԨP},pͭw:XFO_Rl߱Š'*޵Qp6;re1]m$S390<]HM.CH( wK,%†Yki!\:V<+`,Q`Ko Pi+w7* pI92, Dӆ.r"` զ3jFIYh2 0+gi. Keͱz t m.W֩EoSW[6\7q%ӤLJQכC< ùk/7ʡ=?t=b P J!]KH ko9|whV6^PO;0ݷ:p̕@bA9X⁛LQV[+ZtaຓRܜnm4{gdQkĜw_[2oЕ߱oR؉0/?|qLgQQ,jNp&w79}Qs"4(P9ܙ(;OߨX%+$6A,߮*eQ6וΌ5vyti1QBlм:T)͎>DY12Y YPo%g/$n/Gxvc!s5 2\6q!IRYN;O&30r?0|op;>tY>j׾;r뵼?%7VMjcy51rr5nZʯuZ@EPXtEαb6NDErI?MNQv3`+W+Wɤn5F$ n=&ɨ.{F_sa"zmjy=wh&fUC ^aE ή` ́6;Szd;5X"5 8̃]l\Db]^骧ۂqĩ z"-zC~;*@pہ$>B3u٪:?LvHrp :KG\u.rka -x>!ܧ50J$|]bM'8u=lVz5m=甬NA7$ v>/]bP=wJ^L<\hpt4cZkLd-ڈ}(y*:Q ")9Z/" L4JI H  <}üdž{[+Gu9ƣNOѭJZ3f̜-4 c'ǔFPړ(W ஖fdHmm1F}Du5 `,%a*GO[prj}nڜl3 )u<.v`qՠVγ{'#? l?}?~AFD.|'4S⼟?i& O>l#?1SᏘWϧF$ l$g'i5}'@[e Åk: bC,{bߘ?rHM7$q2hyN{+@Se,Aɍ~hA2K;%:Bwϖ MpƈM N+Vmgkl %X9ˮ@s]Q!2XPOd<&dqR+BҢeg's,# sL 9WȓMg.xh{QX[vm$ϲ} JMK.6gdGzYlw@]T%?CH!R wo@>=': 0WM;M~pX2XJLЀE>3vG#Ty:S[A]֔ M{a4-s 1?685ߎwX!S-$! Z2T,A'mŊ>-1G.#EK8<vXmQʄV SUJd B e&vSK.`Y@۹x F_?fXqvesPCj QG}wͭRJW*X{p8Yrkw|QY> akiQnu2XY¢s\r9Ub) W-Nqgu&)3UJX_a&o3KMkKrX9xwuvyKw%N}ZqX AXmI6a+`Y aR:& m N!=g ƜhDѡ3p[v4إ?FgSz/$sZ89IͩFJ$(ʸLJTL88cԫ4uAt_sg?*Kk,ӛ c![iY딵g=w$fZpQ$D!IztGlrD%_ U~ CnN;')#d% V^t(X*"Mp2_ژ v4f"+,)ڋD8 m*""M~x8bh?G|+#k|dQ}61scamg1Nj_t̏.QA)Yk\>)@mRwqdto8}a p6'n0zxOf wV`-}Nj|^RxN!bN}tL…5L `hmӢ%z̡SYP,nJ n1 329MѺ8X.ңNݡw H[ MIm`+MtaPHaȼ?Ց׆mG &\ Ye N]Yyq {1\ٶ˰Ku-LR`r؃gLEZ Ֆ*AٸP਻{ӥjH{ ?OC(Xn3}ee.53ޏ>ky`u{*A_nnB>K$umUa[,x1rIG,I]wjxCx-/4A+wE+ƐCh]Q8k]GPD:18an"@a_+еmS D Bo$hQڷkUQm),1e/Ù؁)>p]3;Yv!>u,a%vG1ӭV0PC%k?|-`~g^T,2@ ViUȮCYV*hOWeR x( _`^w#7%ݪ,j9.Ux32 匪9,'Cyli0M:ȅwT%]=&!* w//ܝDyu.㛞E\&rv03[7U=xKo֓mM-(>f4*_ck2;u-(X5}n]TFmI}S99NUz[6}9 Luz*O=1pB "\mY[(QD'@.[pcfb~0LJԭ 7b溃o/yѨTNӓ oܝ%׸%[ Z=x@ AU[ 3|{Ln T>Na/(ҳ(&A3[͡}A֟]wtoL볩C(n91c84alyF˘*@+_^6P*&9Ә x;4}6p/CS+6AB*>y /Xq` 1{ഘ߰&58qP W?I{ #l WNCْVu),_}' (|p}Y&.vr7JWv_]>߉%AǏlw {sKGiǫBZ0~ 1enjmW@nYXI3~i00Qi΃>n`\R,ahm6Xю*RK8VqàrS4<:!\`&X) CLv}2ʼn.`ӝ֮eiLs")}oYue+.] 5Y 'bK)S::.dyn,c!KL4Mg ?@Dm jM Vrm-m4ƑDq%kƁȢc.ۯQ`ߡ6ޏi~tτZA۪,\EM&8#=۟׻3Ml9 "G'tv\i-dJ3voqdʊg'a ׉ aܔix0$ .| $QCҳPqRԥzu܍ՁA|#| jRG}iK]FI'kn7. #hsuo#MkIl.pR[0!Uf'^E$F Ys9ppKzFCnh./5=%V v# 07 @35_㎜t!^KYۉ~-hgj%UB)pmn<g8y>EZ~w鴶w v7N3ф) ʮj&4]Gx|W $"xcsT+Ch^l9Yw]q{EPR"!+o宽52}o|)֣ͭ9,ێ}AmX<5:l}\rN.y86DvQff{n=, YW(6DSmրG3Ye8`_z&>Bhpӡ{'Ք)~k@O5"d 2镀 EpGS%+#EtÚƷ q|f1VF<vWJy1NSqkgfh}QJ|b{w_H1JT~*u8a_ ysbڗi>s0с2@YS-=qWΕ#`A>)wNlC5(g_`!-UD.ˇ$IrʔWD5]1;ư;6"2)ޝ".Oq!Lu_)v]zl*kȸm4zJ4 oAޫ߹e%s9Vk~$4|v l{{ȶy|Y+L7WpT-e]G-P/!R{5tl Z>$T+5ϤL5"PրO>/ySwM].*lj}k.8."4(BdڭgNnŊNF˞DD,E)\yܱʐ5dK*4!}H/uNjEьm'0掺b֢Ɂ=eY0ʾõv[@mn%HBzF @m5׃4ҶrY]9H;+!HK%{(65࠲PX=2V-$sYli6Ve=uVޔS=TQ1тJ }[y9-y~_7_ouetD#rzukga舭ӖJd̃"pR ֤xN:Bqi\TMAV1=" ֣X%8qO%M+ΌH^)k&⹥,s(opr |MRt*j߉y_}v;X<@ jPCs/{o۞ "s|z/խ !ܿl7[xڲN`S]? v>u/ܤ$iTҴ6A['fx꬯z?qy &頏chE^)kV?3BQ@*R]nBcH &^Mx0Uf5ru!3S\GwJuC^/lZ7g9j7#}]a;L`6nu/LFgOSGih\+ X)۴bxǨb]N+,hh-ÁuJ[GJ}񚀓,b*qp'e̓~ J ͶI7ϴj[X3'-awYM֬ҹE3Ն`\H @)ѱe0&3c s+FfOlV>d҅D\5bR/؀Me.^lJ?@{XC|e[Yy֤DnC7[0aCZ ^i:fo[Kr粚DYVщYlG߿ J/8;T%E\M2?C@A%f^S8$Yի ,d5 ΂p@˗鈮clkQCշp|3hm~<1TL_* G"&Y۵Ԧ?h<^2dImtU ~;]똾'@]]+Z,o]( Zkr4_Xq9*4 -35BF j9A!/*B?Aʰ 8Q?hE-"DՐ}gF^(٨~7|1? N8W6^QcZn(ge|:F2d;Z*g;py݋7 f?;7\ )6/L .(ť#.2 'vMaynV@)FE;a^ZԦ8JlǼ~قC!tOJߨZr˞b:^w,{Ue*L+9giz 2 qNF CRdM>lg@WEGu¹R>#C#d%V7nOG$GJjs=#b? ;z!"#I1Az{q/Z>uۋru [I/UQ$񿦱O>Y 5>!ZpmL4;4(Nge 陊,OQp28+qFg1R1ŵJ8l7Y>IROX%;0T}ڬ9]}7rL.7yeQc -+"yb-zWhi̔& ɿ.Lgݨ6?/1Kuܛ$&5(#IHL-nا>wjyr }aN8;[[|!u1j1u"Yj..%LMAwȞG{Ŧn#fl.Ģw{3HpKPyt)[Fvn()_</a62pnvNJX{Z7[%0$ hˆvF?FEO\<+)ͪw e$u)x QT%{{t>~ir{K[{h°ﰁNjAd85bqPXΝBQ*#v&_mĘ:n^re2ڝ1)&ܴyXOE Ihzh}aDkh`Kr]k(>( Y}"?vSwWu/@{N/cgs&*>~քY>47}r Zw~%0ls#olѕ^<쟘-QBD0"mҢE>ݿts+Q#dU^b[#]g2tU{.ID} 2fK~τSM5td-2g$frh(,y,_-><@6˺T$Rղt?L|!BbRssC~md8sNW3UQ% .z^7dDZm.&O'تcg2] D9P:gK6 8C| SȻI \P +k@6yHjx^[@\އӳZp+Pn!sd/ $0=hُQ)q1.\>@VaN TFxiіv6OfLP B /)zi1 ?^#dyz\B\h?Ik&g /~ŚoRhe5'9]`1l<&Q~1b;rNTc}˄-5B0=R+ҡP@@g%vblw!^zR&W1 xntrDD! /|/6z#kK1L{䣧ϤJ<4$QjpnZbjٱoA I0Uu3͈N%%t:aR]x#{u 50nu4dԏ O#cۑFb]^kٙ[=7gIS`!Аf8Q!0$Cn{53=Z( w ҂Ǡu=f-ȎV( 2Mܘ8;q:kXYǓӓDbΖNH}vۨuLQM $X/cSzmXbA.||^ڈ0W#[%2=ICQ.J ;hl oUI8pGfetAAS@j/ Kc\.$31]œ9K56#pʆ:왑_4<(h"Lwmȃ( ˊFZ]6؇lb/ޝ|1oan#`^uƟɳF_ dg(DpG 9tt?P'W֒CiFp5'gύ/U*,,e4w=PCcl٧{Ncڋkltg,XptD5퓚ECjy7_`jFrO!ʸ^ґyEFa)HZ v;L}'tI?erq\6P@ܴ.=k SK \#, 9LU߮%yUQ!xulXnxuFùsжN|hZiͰBr /^/a7^E< I #+~>->+Qm,Zŧ,1_" wdƢ/UEw)3)B1rNBghEyp̗oqq3elh7| 6kS{%,$_]$+ix\rAo no 2PВ+Ihn%N?9a|&;+os¹ R~'y{|st79Yᕾ1%/=+&+TyP\5E +܋`UF> Znt3M;2J-mƩviߕvzH)x.d<@*~_U.R;`u\Y:A)QPͅ%YW$ o=pqЩi!G8]`SJxOS0?w< MWv( 7y:m;V冫ҤLVe7)1M9>Ys1<H_EhN9 aL؋OStTv4'{i)) 73X,T8Ƙ ))3YHd>ӮIr)Vg6 D &ԗkQXc LB#[d@BD % ;~4o}wy:JNmMU|!)pWJC`YjbZnuUs2R曃V يH#$vaJ#sTȉ w`[Hc~r?<&G U>o=e݆Sͻ7^CV̶Q`A_Z>E`.vt[(R8RuVG9EzCHx4 פA,>|QZfQ<"IYG r i7A=Yȟ{aoM4L{C 9qf;(:"{>OTL1~PY \rŪkr"( n6UȚW٥`BkHiFLjh]Х8IDpgҺk.CdFldԦ8lld聡9'rz@b(G2Dգs2QfN>OyS͍BQށH#*aTN?+I ³-0PA 1P.ᦾYdp"5Mb`/ &ZS1=QuX UAC~{ư'< ]Jj&G k{((H%#nc [a?Pf8q$D+򟛽Ib,QKUyl1&%X8u56p8Z ۮ{.S(Kz#A]]pXUc0|k&nbcg㟛̍y(ʰd'JR)byoW'!G/(N`?O|^;*Sx- @d 6!V>'qTڽ>0uh Ks֨ egx%g-GȻѤ_ǬWTUˊiq 3FwQRHܴ 단g.q VC iGHܯހݪR6w 6 *.˘+?3nXObq +:F"[kOUD=,DU2H_LNZDrNE0ˏϱe_Xe:U5ozP%ƣZw|s?ZY wW7^p/ұz"hߏ[+z)x9*V  T}cWoOxYk{]ա…$))䏼P5SU<06d'yXk#SX^Ϲ[U(U"N3z0sDC]R-8`1PsD`ꮰ&V`9wr}(Z CiY|{qCLYɗp\P_XaK|7NSw>3 |?<)M ̛zLN쮉jADWg ¾67~\qz%%7jyL)uar$E 3B[$E0"T3M8F4ok}~qpQ)o7r;^j'^mѹ5Te5A4/W@lNKT4feG]F?![Cn&F`>tbF(4cڇd8O~MUCoIǧUcx;8rµmk|iSG2I皹Z0&c"כAx!F&/>{ޱ[^\'hJq_K46gڙK3wp1Y:X~-R-Y{k.AkdRB%#B1+*yʁ}z9r@MJxP1Ivd>*8LJ:EVrnv)ʻcdH1V_HApWܭh^!6o_FYH:j H P_WAhҡkP5t(Mtߜ#I>{5{=jZ6hϟ27TP®g7Fgae2M6F wo>"eK)M{^%!Gxlj(})~e0pl]7x ylI=y&C>IlGAcL߶#΅;>_'/^L5 KF쫆̯g^.V+?u\VF:J!Zw=ޖ[g{1l߱.nyQ#SVGʀbk1? rЀI075 L4⦟&Dݶx,U Hrٝ; p |AC.fUbyUs0no0-g1(@3oRo#:FˍV~ ;%, F2ncdHJV5Y5 84|~=>cMlV}1ƫBz{a>UtÉEJ<<&r>ƾ)z9yDނr{X,\Eq/^IM 83MptE[.5X^GӽP9$H̹u1f`|=Abf~;7\gKpS|TM[Y4g=AĞ#!WTG<_plH_Mto66FI#ᕩ|uWVڏx1R8kEFH4A~H@hA{ <4k&QM8U9 ȵUwB:b &UӉcQ(t N~vITELȗzV']^kyErU G.ed- "S)z@᠄*9L(0d5T}ɤo82"'쥖|(̝Z:EK[&p 7@@Nt*|{D2jRM`X31^t-KA2 SİF@= UL|1)dU)`/CaPhuQ5(J jCɏ`Y~78[b:"le~-NFdV#m[55N m[vKmf[+Z8ӟnиi|1E=sb}!Y}0ܷhqW vkT(њ2H4})pS;0 --c?r?V6`{x(s &(gLB҂.ޖ۔^Pd.CA۝< <}rJ Lo! :Pw²XC)9{)aI @.BKl/X XzYH+A̕I2<)vqu7 oDB:sB#(NenP7h}0vky-6UL9$_/bÍ.w25>kL|%$N]uAGNkls\{@}k* U24ݘoggcvl@={OShL?xzgH;5=%H>1A UJui6џZxmf|hfS2%(KkQ}-YnAOܪg'7ŷP%,B4.+2Rm);A/\֗>Uv啰}u߬M|]/*<ݚDKrH]^+8qž)fIo#WBVcJuuW8b mc;Y aLħ 7:vWe ﮫ d|N$ ~$SSb7xZ*nxs4פ=sPxGT#Uo+оt:7HΑս2_㶡z|{:_L8=/gPӓhIoՍ0:*{ $exIܪ pl㫞Wx=c2_U=m|l nёj4&F~Off(JϠ%LIъN;8],RrC<’r'CIϾcu7R Gj4\cNd*;6ZgL!MScwSy iŢela`/%H.h vOS٦)rDaܿ|%mlXI\4=-2q̇-̆H {\ؑLUǩz bwK "<eUH mGѠ 7NDtN*a`2b+yD9cJ(8 vDIG@'qNЪ4w`:ȼ۲rxE75Y=[DkPZ`lpIJ`X1w ~dC|o-]䑔>=oMPe6:? 7=òLlv}x c,Ĺb*@B `s_e*; ]2oLlّ˜qbvO;&s_WnY/ nAԘ';kͣn-XXxw|hu挄{9ZF8'#UX.}41.CZ;z\]7fDxqJ}i~ 6x#N4`_ $+b=>cM)˪9xBơ mj1AIߐN%V`#\1|6޸N_mdu]w_2ZW|b4>XX mRe'#O} kJwڿt7_tGo7\S4dPͺ % 0gyk74ڿV{tlX+0w)ю;̧ҍa,Nq8:mr `  ^zTAǤuGD/%wGB%P} N]Icg`\앳Ky,ޤ(h1i,a;M`9a'}FG'RS&cwl?ӜN`lGh5hw|BH3We8BB{,\7cFoR^\& >q~ǟ+Jw؆ni#^Tohl]"LEx(jL?ܛ7q|Ϻ Ќpͧy^V)gTʚyr@U;bAYt kz4&el2n-`H%h0giH#)ªzmc׾y;:AP)ݣxί^`8 uJ3!5W$<[J6Ǻ|| sDnp굲+}zW) `? q5/u4Ly{cD÷@Wo!*wT-yFaݺ @JP\㴨bLme(Y/>o @z/>4 1ӀEC,L0rGϻS>o%PDa#7Ҁt0՝."|x/um KAIg-wt{g漫?r>o+,uI}Oߞ}.Z\rz&X(Ԉ)rhV& >dʍJ#w=N# !y 2Qzi&l?c[ bO`{ueb#$.wLw۷x'L;54<҈,oV|WO^Xz1jBU^hnBEk<-o=yW&=5|eN/(Tg: x:%50my*q^\[<{^ΐn:>eWD̟ ENS^ݫ,o7FŻAK)ycCA$B]Wɫ7-! KX J€)$r: %[{c*Y\ bR@J 6ۮ>+/i@d?zC0sEY8zPÌguN"cQ RS9_2ޅj6 )<&_*=qzD)طdSPQ5`jo=7ȡwcH"!B#oFwwY';SYUU JE  8=é/p/PJ?hvۤW;J˨仰9Zcf6(+/CÖNf*- `5WYW#khZ!=rS|Ibnb 6 `^RE#` n,&}ME\H%)xna̝U/rPg;n p& _}Tsm>f욥d:B}au럜贮(߉&E7s;o SA\g[iPM_F~\\&Ab C8 5F%j`)NM|oV{cj( ?`1x҄)Mg9U}A/#&6ažWn %C]&%[N|mԈ7"aDme½Pnoy2jtdNpRYp2_!p9Z7Wv,XX@AfLIi_$_%5Q諛|ɉ2/1ʅA#jbgA(VFq Mlt$:{u8qq:7f\#γ89B/Iڗ\hl K\AA{iVՔm+{Mdz'$60yZzG BX,.8'~l^GӖn4!hBրxO>A[j C~25]+Z1 YƏ ~iV(iL/ݘ#2$3TcĚȾv5ʤBk[6 E<_)ܩu@K~{I]5xfƴA2z5B#륏Tc{J%F}lZo%!?RO{&RٳdUGش'F8xf\})W'vO«M)j tM7|DGL [ St($lxoڹ=*_^|/n <-g\JFCC!A {FBɟR63'CtäFcގ8Enit;gñqeq NUQl]RC b[!Cݼ!tVR=\ ߋ7`dqdM,^Lt;0G*rl 3,14x@%wONuɻ)Ov,D>IEra }#;t*T{&˓zv8r' ~i$^̗Oa)$Ɇ]/9GwzgYjQWSC/Ba+dt-xhh{*C]x[N,-w) Q*y^qQb{FGc2ÄXUDjUg &D,! \&k%Xo\RpNZ ' &nݑqN,V_oyaE0#޲ҘT*WL>u4fW 9DQOS)Ys-v+IbQ^~wڭ X z#/J$;5.1PJ~Bͯ7+_5Ƶ]9x**(u%pɔ:rdbZ}A_ r] ]ݡpo 2&Pe1Ov2޿cXGA#ЊetQ&%QT$ӯɽ5{#B&8!4fc}1,s@Ɵӆ̵ uT/ܤ!z5C71+1̳$+waeW{s9/p+8+p|-llL3,ZGpt#7>ӐRq.͒\ۨ=-ivpc$Id;+Rx/g&*md:ԺX:B}elpB:nAZ1ae"NJYZ!ԅ4[ N!+VgWb1 /`+>9Y?a@;smGWOxŢ/CH0tG%TTJ ٚaccqǧ8IF"bGNg*FIܜhF?N0AP*GU7:LkL=c2Y} 2*=f+L>?oѾm!+J sQS6YlQd$Q965&6"bJNvMy{ StByh]|2cC>k &slp{(QL2'T.\lbAȿ @:@;"8*б8 QKM\naX Q>ie/F^MFa#NKcJ6v2(wcgyiz>޳<2Ԋa;d*+@O5Mv%Z$ŋ}!;Ei\1s~MnHWvn|,>[}Qē`_$eM$s6ϊ" NX CXO@*ڳA?!J!hrT_=9VQ{gvM~Xx1Tm3diX=yҕshW_rc +wb$/ZK o|xwt\/c $oN4nQ>0 Y>v;lJF7ٸI®JʤZ; %8*s'sfCglKyH}u؂mUeI VIZhHd7H#)C[> YyPa/7û, hh`s쒴ƿn0!2:=H#^4@)q^EJsDĠ d'}̈́݋ơ`iS5TGrU9B[Au<:s=qvJ-_=<}6Bo \pcϡ5OQ\бmPɕ^QXցHlȯÜIPb QG =~y|Jի9Iee5X.ZfMO-h*pےK[.֏V3UpV ]5qAX: p]/ o&5Ueaݘ!19E\J(/֛"'7_&,g}g!?k~Źj蔢[+YRž"bDF?&ro?Q[/&S_O91da$)C&*t>ToRB.!c9Zi '1ʏ)_a,o/9 i>?q_xxzXO~U`3|hg?Q)g) _?u [t#tza;v$Jj+ y̑gVR޼yW/m)č-XOdl/58PvyF.᝟p')v >lBt}|KQvb/5tdPgKMB@ JH,NV| kd, B>7ؿEz6 EB>o-EyZGϬ难1`,THVʡM2ZNkb[%*h D)N: msR t#gCTŠ;'տ$Qe/BI{~_|2VzyJS~j7ُdGq6+ju9XPJ?VI8䢮 L n*ln~=665FR)NB!c}!XR9=pHIO59./P)pֳO&}TR{R.R6h*P@ʨ>5wKB kHxk6weޏ_(_8cr]pҿߝzn?ӫ<$xgM0I'0Zž=~QiQa q=oGl ߩ:ĐKfGv~Ȕ6'W(qO63:iM_LܜA/7s(R_i,!_US1L|W⪯KrhLdJTd](@]QɊ9Q B>=:fp?twTĿC9#4@cZ_Hd&-1ld 6KNُᣜo;E'k{DO^cd#r?MMuþS(!6dIkKMX4Cl;V@ϡTSw;?_-7.q)nL&CWJW)IƞXՕBoSR^ 3dD]l@ )Hh6`@mA,tNwdMܯN_{|q~B-ޭ[+QL8nf˔z;ӹ"qk9_cMvJ-/rc*{ؑqˣ0<xtvioUquT872dC7?ҳ#v՚  [[ՠ@5w4Iq96eҋ1D*U)Q `f4Nd?Jǀm7<4=}Y@B,Tl =FUhKm@`:Zq#W/g/R=Ooe eP$i[ɪ!k|?CL Y%*uIPHW|kPr(xR8S};(31psNZcsmhd &C x@W+T#3P?ȟ6w{X~{>F# -tfRvG)#OyTE u.{3 *EpB?V{,p>H+m`X?던MF6"Au]IN}?,Lj+$sĽQ8ݩ 9qڹ<ϘlJm.wZ.~U 1##mUgigym OlCbG;B%vܣ|b"OMx>>2$@GI L|Y?&vKkXFUj!N&By0 ^6O(T-ɖak4 ߻7c-wnV֢m~_JKk#rJ=Dyz,\}Spx̷~']zjhhggm5KWLG$$DN"쪥\rD(zL"D^|KsSfVFN/Y]<4>}1!)JUg?H]n#r>tь|˼Q^oA~.*#$z BQm?n}TsUo6X9B$G,]#o-,ž-zthʒ )@f>>*}s zp)8z~Aܛůeۖ w½1̏kS2 j¥>Gy{S6~H,_#hζ78T_sЖ &N a.?uyƔiBf@+kqбϱFxv!CE`2gP51ZUn"ӟأu4EHH8VA0ȄͬݭZee|#Yʒ. 2+#7ԆhD0;JUԑ-.O xIrL;$ z?p]^ Mprb6I6]M#x~"@d *)wݤwgNpUvǶE[p&#b/I2=kZ$\/AK ;*m.MPG[@ $Na Prc^}z"u#8rqD% +%RrFY`X#Yh=4~1@H; EdPuv_JF7蕽$gw>Lݛ:ъtG%r#3_1&^nn +B xOr6jAnP|' S=/ziNT;ǝ(׫<83_/eT`H*1j7 8blΘWm{4zΑjtn h8 9M*ypӱ)wMԾ}֝]Əi5̡@7Saxq*PV)uBm IxGN6w&rlVBt@:N/o⧩~k[oI̻ĐX 6> g7TK-EGzE@NgB\ "Q<}q3htͯh^iH/ #ΙB٢Ǒυ)n/`{A3HIJr;Cs@