samba-doc-4.19.5+git.342.57620c4f7e-150600.1.30 >  A fIFO ?K%^<קS{ NWNdj`ouݡطAĚu}{r6PpFUP!P,n`Gs,|W~/ $>P5TĹq^I=IpK R1ڄ1%|HbE  '9D8IA]p*(21xG*o@bd#QwЩhzmnvcVbJq /w̶78%ԞMܪ[߄E Eܼ <=x/BAh(& I;mRw}$t SY/h`(s j9)\cW\%K|ujHR+lVAraVhad̨9"\5I*Q;bw_\!єOg",vEfnrb+` ѣ4 gB=31a989646d1feccb841f36d7e0a1bf84d085ff51d22886cbaddc7a40e150a46e6208a9b641bde35975586731fb6bdf92771d2982 lfIFO ?U>]XQ'JpE=i0벷?xtYUof^-LedIמyD n${tJ谺GHX@|faz?3Deㄳ?sg"X[S%bݛ.}5Wp/lY$~巙RV[~DPXd~/ESLè#ճL|S6Vb?ے'ӡm򢯾Ayfɍ`gϞ,0$^q҂),5;Zp$xij? %F\%Z`\la%^W>ͳ2-u8e.hevrj7c8֏½}ڐ\Qߨ~rT wr 9W }ۗu2~ ]6K \~6}_IjyMp/v&BG4]c ) ʠ$4A>JJ@d)6WpxfMsg +9>p>A?Ad & 2 F %<BL8,8 8  8 8 S8 U8Y8`8f,f`8k@kLkhk(l!8l(9p:BF>GT8H48I8XLYPZx[\8]8^0n/b9fc:d:fe:kf:nl:pu:8v?dzAAAAACsamba-doc4.19.5+git.342.57620c4f7e150600.1.30Samba DocumentationThis package contains all the Samba documentation as it is not part of the man pages.fIEh04-ch1d*eSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Documentation/Otherhttps://www.samba.org/linuxnoarchKo :HM*B} J:,Z+ x; $gZ7>z u  t O Ib < ?HT|P 1w1z- Wh<Kf t t Yh ]( mN  O Kr0)  $YpVGY Ma2 $0& ~8 M`3 N<1=>)"cK, wBp,1U1 ' y7JMK ?3!,$ [  N  @ a~ /AI(@G$0 A9  9 ) f$ B &A  t) z $"*HN<c X-HO3A큤AA큤큤A큤A큤큤AA큤A큤A큤A큤A큤AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤AAA큤A큤A큤A큤A큤A큤AAAAAA큤A큤A큤A큤A큤AAAA큤fIEeeefIEfIEeeeeeeeefIEeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeefIEfIEfIEeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeefIEfIEeeeeeeeeeeefIEeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeefIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIEfIE8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903e226ec789c741c51066c0c37606b044cd7f358332a8adeaf606f21646dc71407221fdc103b0553a4570aba0ad5a2ac89b025f8260e2722373dbaa262e160af316a22733e4f1c0222cfbc784ecb1b202a91304c0191acfc63d9ab1ac81872a4c396d57d090a95d39bfcb647a82d2d2d98c6600be13de3e2e8cade2c0f5466da61c3e757e9ead162e9525ab5d274b7b3862d064ead6fdaa8435385a63042fd01452dd654d4dd118ced484250d78ce9236a8b08207f84aec0a7f8205dc9efd9414fa4eec8fce06526ac74740cdbe9aa8ef414866e5fe75bf3bede7f3e2653e333f8e44ad69cbd9e6525941b8fe15c9c6bd33449b6be35924eed472827386ccb5e10b99a78b9042ba634275365f72ca362fbaeb32e80f0fd445088a99483fae5df0acb10bfbd6e204dbc56bf3dc698b344ff45dce187347ee5ff0e939c8ae8d2f40fb9081b7234762c3fc02861fbb88ed8b52a523dced38e15051dc980f0b34b23dd82e2fada295b6163a2b285d4c43dda33fdb6a22e54eb45bcda587d33e369b3f97652362ff7ebb5eb8230853a73dac028bde16e6f2e236a5978d4a338b3a85cfb947d9690fca09b37c39e5d7ddd222d252f9bba24515d45f58a3d2fa275ef3a36914bd94b47130d28347ad1b2c5d9a122fc06641d9bb82cafac897dbfa43964eaf6c1e7d671571acaed8941b4899ceb22e0037d172a76bb6ce94fe74b403ce8b861adbbf6a157cc0b4af8951fb7e35ef132e0686ac22e89df3d9198da93968ea6f76cf2b4a1abc6b29287d2e132ad5fed092751d3fd1d0bfad4a4a42855c2752e043baa513ccdebfc9998f1b2680a1649cbd438526d20faadc5337dc3e9516cf30f2f92f03eaab515e224f509b1e0362df11233ea473fc0d34f916b8556ddcc600f027eb4151ce1160c4cba4aa22e23c33922bf4fcc978c45ad64f2de9ee673365d63cda883cf3341bda81553d59437235c7f5ba7a5f10bb123f7d87ce906f5da6f5d3280eae3fa4fd984be377b04de5a32216767a7a49de069394e63cd5a95d77eace52faa5cda06afea7da3c018d5fcef6c127ee3caeb81aa8247dbc4dab3420b5fdf8f583ebef62399bec02f917766248ae26728c230326d5a4694fb84f39803671cea37730ff5fc88360acd84b1f7691949577a441fb00100660ff5068cb07138cc35fe3919bf2cabde7fa90d899cb236ef34cb4c15dfd3a21c2e0c65332e734c58db3b1b14e2ccbaf1e0dc129abe0ccb98859538b2bd0513b61d66963df2cf7b6036b0f1ad02fc6158d6530a6951826a4eb9aa7ea9bb7c9e2374b648ddb7c2ad1ea45aaaab870b3c9db661d7145c322a4d720d49fbfb06d95d9fc3488da149700740b453c9319e5dad07ba6859c6e1082a15fe9c731a5f53073de344309808c10ac0604bb75c8c35d6bee662834c74516d7764dfaffc4fe28db9a37b17ac51bf717837893b3618b705dfbc92f8bc6454399df60c9082c564a8b695f27569a2b7e471f57a1097e5956fba3e5f2338336047b3c9fb8ac727bd3a0b59957dc259ef7d44d84c9416b2bc66958798c2c932aacb61e33eb1aa7f66ebe8daf858b16235c7ea10cc284e95a21d539e5456adf6eecf173fa5926a8ad097da886300afcc98987f2f1372e75d503530e11aaeec2dbbedc581de4badf0d588f27d2133cecef7b46f97e04f3cb433f84e67baa345412ca3e04fc31de675a0903016532cc758beb6dfdc8f1634523de79a784bded27e145ab9876cb6f98d3a3d30af0176ec80b0976ef8eac3a30146ec34315669094a6c0a775e71b4177601c98e0e10b805246107bce6d168f9a4ba4cc51906e53bc8ae0ccb7dde7f6857f8896f9aeade279d7caad9c2e09fdd13039a7bf10d47e0e1c703d02e048ea88235407587bc58a617437dfeb1e6693e7ada166913d59e78b68b37b73f07ecc375ae613a0fe9793429c5989463f0cb60dcb76f94599ddac96a5dabf396c4c11c327dcff1338885d8306da35f4df36beeaf30f58983e7fecbbfecaa47ae4fee5d4f4f116cdfae99156cc6191a4245870495121fd5f44215cd1bbb705b570eca5cb55c635172ab109e4dcd227d156e9b8d2dd23d195c3d943ce1c5d0afa7613b3720dcaa8724b86c3310d627a06dbc8e68643d5af27eb8e0c5022095b6d88ed46f12545f6e7aff6b8d266a8dde12190a5ebff201a9a55926297a45e6457bc22e85518ac95c517096e6363fe51c646cdafdd6880aa5957fb3831d77ce718cbac5d53a2ec4f0f3a4700db280d796ac3897dd52d6d901043d9d349106739051847feff3833f8084635aa61cbf0c86341803c77905c4388d02938637a38393852e754b2566deac0170921516e7957856b1c2cdf3374f610f3bad924de1f67024c54fc9825709088fe8c74adf05d4aa93fec936748d9e6c132ef9799d937cff7eedc62c823c2c744595978dfc248ccb934a3f238987ea6c3a33900d072702ab2935cabb7dde5778fb2bbc4c9525ceca286b9ae0fe3d299317fb00d01a465c5c799aa5b213f2ad3ddf0a217dd3a376c7140c24066d595fd77b04cb9a612726de7cb28c8931d1a1b38093247f6065fe76a2356bd9220fc2bd9cf5de096f29dadd66a734ff92f22d5241d184da407f68d0f6dee46942df149f319743807066d960b09dc2f7672d9baac661c6cf14a6ea5c694ea4d32ab802b3ad558b54b14ae8f4cf898772e91dd19cd40114d3d6b47da827827063dfe7e64d2a115a786cb23f116bc7c9ae24e6b0a1e4d8b2ce246b5791e9480006287bd9159145f70a3a8193551cd5a6f8ae50d864a6abf4684f945ab9a153c455fb52623b3a5c1f9349c1971d3dfda49feabbaa7b6a6712f1c2b285d3943fd14ab56f86a772c0a398237ca2e75badae42768609e257f22fa761291e6803a89bd4810ff64aeea3b3e8925326140a51238734cd347135303d6f099bda3feda662274393b757556ad32d75c936aff1a086467509ce769e1d64f3ade8aafd26aa466691edc07325e3508a553e1d471eafcc01588ffa6ba34a8493355743518ee4c67c2a88c1d0ee4605f9932b1b938fc34e731b840aff2f8975d3e6bb225d3e286a2d4b6f4fd9ebc57507e89f36e25c3dcccd83b96828502bd33c5548635dff1cde627045470949dfff1d303cfa46655f6c7441f1d36dec7fa1df2564954a8b5bcba1e9b0c902245b11840d29a2034eee9b56d529ccf60adf11f60a141000ef8ddaf1a5763b927ce6f559e1927948630c362fedc4a4026bf23130e89c6855999189c831851ab7321993dec4717192a347fa64b55c9a06b201ed2f9dbd24968315cf71ee75aec977f990c345a2bb3142602d556280bee2f1c20979ab78ff3d99de9762360878f72c3c5cb36e4b642ecbe0e4b6db13426c509b4788c2c698fba79175228bcce00abfc1a0e046e98d0ed1d9d8f9d122e21cecc17a978661e6d0a2026ea8aaee9060a2e75e76d0c22f9e016a371a24954c0be9b6005c3251826ee97faeabb6ab38b48824a3c7d7b51c3799bdd5e8daa4b070e8b5418bf109d6076dd4bb04de73c5a3ec727d43f40d6d5858d57aeb05a6c2376085d8928ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903ea7f44ea2952c6a815c5dba46a8e8db36c2f02eee01c4f587c4ac41b001f244fdb49ad9b6ea9a1a8cf37ac336b47124590dde4107fde196d5139b0b4592d05e557700ffc91cb4318bd4e72d9b32da4a11829da1a22687e375e9e156d21048d824aaf809a062b6b2a1d31efd70891541e39dcd126f29303d6e65875821c32cca7c21bb19248b83f9c14eb785bccfd72a3a9b45840f99521a1bea303c6542e262b583833ba9d81e823deb0ddedcf3cfe212a0e4b623c2b648ab5b1fcf8681061226258ce06dc6e92ba2613e2b2269bb68894a0c3c63e5a4df521080d616600ab2cccb354a189759a0c09dae0680fc3d9534a45235afe7c82421a2166bd7d0697f292d9019633b30ad195176e48a101e34b832699685fed44962b42589953f3ae5deee84d46180e61b9dcac48e5e6a9387bbe467b0f0b800af05dac822298584cb4e593f9107081a356cb1a2af9debc0368fca97b1d9848f5e058e196b47d9775dacb057518346bbf86a74744ace8c3c53e3cd0d43e334396f0868ede6d59fc082aa8c4aeccae1ef6f68a13972869f82e1753a1af292355338890cd83321c466ebb7cbb8890f4710f58de804b0a2706cf54b70707b288b04cd3ce815c5546d3e3d380f54421e881b11bd949432f558256f78cc70b49cdb6829888c4d1020c360c9c0f4abf25e584215a685c2b21fab87e0ca8bc5ca55f027d93623a499abebe3b110525d62fbd71c6ca2cdf100e71b250dcaeb976ff743aa90d1ff8ee1e70f032e6f739bb4148d534b97ea76d2a7e18553419874f9471176a62ea63ed205d3dcbb39c212db13728152f0a7d80a0f5bdd1a2df4eb87fe655fab1bd89c053e5232018c71c303dc08641482de2faa08ad585c4f6cde116898dded5018016b2d54f342fa6da17f5b87839921c8a6de53b15e91ebdbaf9652a2e97ef41f3d0670efb015cc8cd94ae5a4a51e8e2291aaac708c96f07b898314a948a184444dffd84a2e268a4568abddaa1fac5c75ba4caf420f2804b1fceb8ba8820c902f5bd76a0e11f3602154d1b032256ee8438d3102b737ba8b8234a2ae0c997e0632498021ee2744beac615a1b116b7ec44015b496af1f18ddae46164d93e8fafa09bec18adf039f39c808765e1e204c24fded5b2f8c7da65adf47e7f1e1f6dffab5dd7450b5811fc80971591e3bdc783c1be185f29a02b26d1d5761dbd7ee688abe65aced353a658ba4b555e4d3075c585359332823c728a47b62c696f6a301b119dc94638b37f2261ddc8a9b5850a2949ad5cacd78e2ca7f642aeb520ef761d4d35a634c452d129aea5f50a82ff06e2e86d4f343529e0869b6f4578cf6c95ede3380a3fdb821b0434720f75f2bc7636b68ae630db28c31e8f0864014a14742ee9b6aee36b15e6a06d6b171a55522a400b70193f2e1e55637f8fa73808d3b1bc5b1abe21c0617517e18e75bf0afcedfe5e8c4d9e5ca2a7c934e4da2593019ef5c2b74ace6b0daf9cfbc695462adb4550126009a09281556c0768069f8f1914e8af4d7434aa540c132756f0a40c57c58e80a670d407db42a09ce0ff5dde33d6266a055ce33a328eb4fbcb8ad0b5003004205c209b5219e05f88d3c293ac0089634c3522b5b3de8a613b5acf650f3023e0bc222ae3277a74ebc8cd7494d6169313dbe25ab3a1185d881f1492f22ba5e644f3eb6e37400c522e03602847616ad1e52be40a566e4a4eece58bec1ca924345d298896fd23af993ca7d373aa0c389cc07fa56d6f579a836ae371537dec8c5c8c6514de5eda70b4007e085f7d4078c0fee079214e8083815826096f9cb93edc39cc9ca66a8b4cc998b0956dc7b11b8359e1a46bb710fb7204c10b25fcd84474603fd8a484c1e32f87371b39d557919a95cbe6c220fbb51c0a12a968dae04280e864840349db03e2d9f7bb354d144a0c3154790b449f64c5baccc28b26522c2fcfce848eefc31f82b86157c2964ed2030936ce00279150c885d59dd1bf7361da3b9bb32d1032e552b1b6b872c344ac63ee81fcb2dcef2befd864ab396885f941990d8b98e26a8d7b60cce8cfe43de63e99170dd59b91a7afe4d6ad2c92c4f973e9ca80938521b9817da7945bf0e03b13c4df92dbd36d2cff36c32d43c90ea9bb1d24ef715979b7b502ef775bbcc7913c0d3ef9a400e7966c0fa7c7fe906667c71203be3c6c4783c8dcf41dd9652dd017820a9f52abeed1b7540abd12caac1a63b75c23bea3cbeb80e008ffd1c84656d40a753dee5a8fb45f89fdbc778743feb62c0e9124527cb8fb66ffb7f806bbb2e18562e8875ebe818cdb60923b921b343d4ec54f3d2a26b5b72c283fe9b9fc0a1d68ad5540ab498e89ceebe0b6ed0bae9ec4252bd1660f53820782a5f76a5e6495fa3767da4c82009040865c7e4002897e0234a7a26fcdfafc230d2e91e6086a828141964bd54d8616a22e29b2a54feb6d8d378263029f669472dc6a9620fcaa85304e0eedd02bf1f5b52101d214a5f1062477ba3207d8431bf51c3120fc9a85a414929d688b1e084276a9d3ad658678203cfdd1ada233296a6f4bcf0d20d2fc4c6a0fa8a782339673a8b04c726fc11edcf7e819fbd7c29f6740aa27542e78105c6dc89211de243500d5c70998ea54d8991ccdc643a5c9d4632bdf49dadb89484da3418f344b3898e80e5e21cb2d1eb4c6af31f3c21056ad57e0e87707322b0040911ea2c807bffb6532c097ba4a83ec0facb6ba2a6bc1562a43feca363c63a48ec08ce888073c2d0d9ba7aa6d6fedb7c60b1670f588888fe29d65e153fc628173c98b16934fe7515d1c7aa8edc323a8f923afde3641da4a1ba7532bd23591d9d16b3f699aae43797070ce4f20aa52db0bb8e4e326ca5638b5cc770f1808cc91ad9f0f945e4a86f6b8bdb960cac328f11aeb0c233b44a6825171429dbbb745d932024f4928d5ec14aca2146ef1bc14de8100f7d4be606f11b67a191278309f47f5ddf92da350f4d448b36ab4fd692dc2d24b7a38ee0faeb25dae3027f4750a871ad82fb6fbc8c518cbae2b6f5db36de7fff0aa71989e0cf20b7612cdd356cb97a6051f08fd4c471198cc4c5b34a63565a7d9693d7b5ceafe2ba82dc5d133654afce98e6babf294316b7d5adebbab5e3753a60398a0c67ea6d59eb2a4fa5749a8c524458490a57f7789d57120b1a9ae8fe83664f1ad56197091161c982e5f2ccc3a9d7d8455ffc22e31ce233dfdb4acaa7f7a636e10a3fa7f56f824ecf3c633dfcc95c618e7cc3c47360069c14fd682d5136a3d92cf41097238b2bdbed4d545ef212a9934bf86db49536465d8dc0af23bad436bcdefb4e8e87919c39d1aa71558f60066c39d526c7be1ecebf0d0fc091024e65dd296f08b302318db851beb49bf9545a25917a7982f187d7bf0c63b4e6451d099c006320d2c478f7c614ab64d2050aa4e852bb9e67020712f12107b9ddbf2d0eb40918511f3033a5840a06c5480f5e545640b96815ab7e401ee3ffde05ed5697e694d6cc7d3bcc73f216940a58a63d57df174c424b0364f36df73c4dab7260db8a7a3f16000741d17ae015be77b1eedff6d7bedfb015a7684632d38fab99661faec7fd8245a366f1a3bfd44f7dc7aa01657155ef74a419376ed32b21bede583fdfb16d1bc5f72535e42763296cf1dbc901f02971ee30696354a61e7e905211c9c283a178e2833bba1f417050635d459c3be3cc2372ec08de2eb30eb4937f7f51a29e27c3e9072c24534aaeb381361f0df3c5ebe7ed543eaeefd2f1c395ed0536cbda6da0d3592611e1015425e20213b3cd1af5ff869e3f4780732d07824e0ddc48f12a7d7b23da00344edbdbd56c81ca4dfc44f638b13a8ac298a98fc4546a7d281733f62f49bd97e2b5e710f211f0a79092f977f2a2851152d68deb2531b8998fc7013d1c85fa313a4c595aa9cd7ef9aa1edba76bfe5d51970d0b6b69c40410cbd15723174cadf9647140543b7f20746199a27e6781195231e7745dd4b0f84dc4b4b4df4d1562fa9d757bad74ef77792440c4aae643f87ba6c75e86d85c364132030ac54c1dd93b75b587e3fd29a878bebaf03383e94c92d903e6ef5a3e45cd2e68e9425ab71d3c48af1ca4416ac8e8f77b42308bb246a646bc614f045ad94d2995cd0fe453a61903ef1fe921e0b1836316624c606085915135914bc082b60c3cbe286a3286c172718b91158b2bb076f7515caac46d98b28a8d32f5302b7ec21f2aeb83e5247aff9613e85811bdabceb37ab4c38ee2a9fb9eb1795f2910a0625828845e265155db662abca7b362c225242ed943ff60fecf9a55defe3f2e3c0d435e0c800ee27493eac246477b3885463a3bb296a267b73348d17bc9e37f94eb2da6da5ab7f798778696a5b26f1d6d9ba2117d4ab1e6e178ec7021d9cf3bbbc5a3316db1f1e91d6b86a8c7f5c08a5c0d79659dae6507827246049c7001332de59ce5f438cedd3276c5865205b49d81199ef0328dfebfa92cdb3db09d25e0e9ef5f70d90be2f7d935d06e1aea7fce28e1eb1d06271b8c04bbf59cac4cdea31bb9635be1264d219b2d5f662465dc5ee8b0e0e804673e316ab5cc131810386ba199c75f073f5507f3094a071695a935c008dfa96d3e04cee7afcb72c2389819eebe5ed22e71c3b8c67431bc89506af7152c7f6b88e3addc7224c194764fbeec84020983142330584e88c7ab30e158ba2ba23c515a779eea7b7e36448cb73691cc0eed16cdb94c8d2f91955e652322200b24281a72fb5f276ec8866797c609a24325611bfce91dd7c81ebef67ce2cdb738306cc73db4229dce831dfa829280ced57456e954caf9eb11499436b0640abc4aeb60ada9181ff6edeec1e8694209075c6a1bde785e8154df8999b54d595ac9053bb1fc933f9fb5962e5e1a0bd7440eb7b6a44d3198244301e64abbae25e3ee4f059f4969901fcf453a8536d62b321759067a11c683a06487e9a0bca208624cf32b03e09cc61d0e347d36a671c262e6b5752ae48a0e331f4d454f8f53730f25d13de1940e78d53097c37a7276b79cc3dc0f3765c203dcc68cb3bed41cab1f02a0ba350c5cc1d16adeacc874b197ff87936a887fab55181cdbd0c415ef9bc9bb2d6842a0db26dcc2109e6ae9ec0f2eb240134bc1dba1966d595172378b1454f8d0302226e5a8ce67c3511a62a1daa01b0f40706fe940daf89969d0b1035ca9ef9b1242974d7440241db1111afda896d7568554cb5ab29e38d47c20bd3c36d8730ce1776d65bc04a5a767103d72e7bae93ce71667d735c76da1561693b343e55885734a894282f18c76672f13e21a36d9eb1c23e6e6fc4063b214431da303fd2445d6bfbe6f3c9a048a97a0d5c0b006302a3eb45489075d61c00c5447b9ad77bca3e86ffd72cf0c27028f7215843da690245b3850cb2eb0ccd02d47660ff683f2773f3d734ea69bd3923fb744dfb360b817c2999dfab94e553a1ff49c70fa279b45005ee01d63ec4e58427f7a529c61f01dedeeaeeacc69ac5b654c41a410d9a3802490937136246a75aeb87e3c7b5bfae53c4b6fac9144327e04c3518a7f9050cfe6723d1da71b563b898e5a20fe35abe116ea7496b66733a328c6a2fff82f47bcdb9ccf69caea587a8272f3d71b3931ece586b15cb3e18f7b72d4d2c2de77568b225826aa1931361defb9e92ffd78f28fcb4d1bd4804eeeabf02500f733bb097a454de01fe21e00b5d84ada732b78106da647eec9b1cf51fbde365befb158d57e5f38c51977290ff4a7796193b8b43bf95ba635b62c882284a058dcf6e4e164fdc3e0b6049b35a531349f4f8e5b1c0d107a8e77992638a2e2793ecc053794b24c00e13a1ec66de2e64666ae8b4969d00cd80d800ef796f9ddb43706b922d4ae7e5be3b0ca6860a5611d5ddac3acd49a8ab5b4a6dcd967cb04e330605fb42825918b6c8fc23d0b0f4485135edec2cb001957d90ef97e7bee61bcba02def404501b8b3634d503843fb2551e967c0b4e3804ff172d02a02b778d78ed2e317f8c7a5bc3742e54a27d14aaa18b1efe4cc2f027c1057bc531c2adbcd0058127996e6db779642e1c35d8e48ba3848cf5c61b03a6f03abdefdb06ece917470c6cf3ecf6a33240a6fe97ee274ca40d0e80feb43bdc3740648b3a93c3efd9062ca6e9338f6223090fb4fac2bbb577b86e50ac5c8f365b1422f9cdafd0801f13fb9772de8aa27ef042dacc0d4bc1f4355ed59569296393a153c468a7b1349eda9d6467d1faf3f38333a28f4054b0d730fe545a0a1a0e8c4aff58c61e8d6c655fed6b5e6dc23a0e62504574a7a15c5894c5eda026ba46ad42bd8a5e8da992beb391ac76db98007bfbb4db83e177f02366ef71c1922040d5efe8c91bbd6cba250cc3e9d0db9ebcc345b4b39b5a40b334895a87f0fe42b2623aa02f19a2b1138699d3b508e5b0e20a45dc24252a3871bca480a01a2b117285cc5e833df8bdd9c90e50d0c6e8a6c9200748f9ed56aa64cf63351665bd62c49857b7d49a391d0e6873117002c7399228e9dedd9b6b066e58e14b14cf92c9c374c82fea3466e4083b47afba4dc8641e6c08fcd440723e8e5ad62e768518d4f14e5a1f6cba788582eed19d459c2da6bbde022147d06fb1a77fdbb38dec2327a63cfc49e785abe06d1dc5a71ddc4eb7b806c48febcc46b890a5a0193bce01167b84b24459a462da7965e35ddc896cb221e942d327d66a139af15fda63593d6338259753896bd2de65fca12ac497d698149336a85c80c8a9d6663e0ef19e634e97b9c48e8b2666a3d58ffbdecf5efc5af7b493601ac14c695c39bd807542c6b526270ae5fb0ea55f3abb3b80596377c5cada491b8336ba62ad73cdede189389f71ff26f8fb28789a095985ab5491c21f1e0f3bfebc4e4aaa5aa5a4522df6af49e64413dbb4430c56d95a2e7353f577659972c36d03106fe49d753db6d1a87019fa9418652580040511101c5f367d961dc8497e9320cb6656fab4bb776f08236b05c05481f3b68ce93fb5b6f24491807a7c333335eae3ba572d50b42cc277f14c17c8d808a07cd0c2454ea65ce5a53217597184fa8cd10045bf58920a33b7186768fa7f63363c1b264f9e91cb62f2adb922475183d9979392c58140ded2b7f211426e846962c032dfa35e8b22ae1a9b30a189f3c4ae571f7b7658c056ce344e6d31e4219da91dfaf45849e4bc8dfa6b776c7512b6fff3c7551eceed4aee15f58d4e52b8f550d2f4a0b0c3fd471877d793bb669aac62dad33ea60ef7c1e723c23a6d47e4bbb466f8d41af28cb2121a2311fc5e24124cfab64a800208a61f33f2eaa07eb49e6f9b77f1180ef09e6819b59fb281b6880412f05c9916b76394f93918ebfe3e8383aabf5db815555398dfbcdd0f911f2b2a4963e61d309fd2a8a9857870cda44da952d21dae32a49f063dc8d657bc38ee98561be99625ed6827e22d0dcb6575d404293c6cd600fca78e31337c0601a0cf164f2e957d38aaea4e8ae6b7ae7e57237ba613b6200a3e373d7a11031ba55db963009a2b2ddc748b8f6065f0ba65100656fc23a246d32a03d7f96184b015b909dc66925f2b582ad8147f8aed05ecca1c6d47170aa9a2e5b39ed68c971f9e6612cc3e328ca05e4e515360359ec87d56a2d2b68a7b665da3bb58997332742b3a151585d13c32d5c5c1b60f4a01be632384a7004faf9dad7c934434a0c0d972564869d0366b585d41bde1215f2a869e39dff51b2c272191f47546deab1f28b555f59816dce85646352fad7fe7dd901a6e3b6af074e678b0e76ad66cf916ad5f8064cd20ebd2a3432e5e8ac44b9d664abe18108bf3097f85446d3745fb63107f64b95889833710409a709116514461d14c33d068026119a42ba4a6b0d0334d86e87c749fe5a42574cec7d1f3bbaa29850f2e79805a0c85a931560c8656c2150133a4a23a5cc92c7af0fe48d874fdb867296fc77086611027e9d6050303ef6306f381078ef8cdc1ed8aa04aaacb09b2a97dfba517a093d84638d08ff375c4dc02eabab31379ae870582577a36affc15c4050d95be491b8a8325e240dff419b58160b0b8fa5eb9fc4ed0cab1997f09cd7a103997ffdc066f60419bf2289276184f59ebae561b266f36af8e20beab7553c1e7ba1a5d69bface73eb29365d20449ebe660e9c6168be6b2b48c5af233f416e4f63afa6831e49444326fdd93adebf29044c7b30dfc1ba3b358e4231ffc722a8b70c8bd6d9771cbbd045da9eee221649bd0a19da5b8a083f6e5bb06fcc3f0813e32bc3d9e29acac75352f8b26524ab94133fd23ae26f47bec46892b0347eca9d6a44c80d50d056f0507ac743d184eb851b76cff39644efb0a7b9fb808ea70e924310d55930498a0e3985d2d104f85f22805f430f4af66fc3e33d4905cb936c6de210b9817363707be1ecc7ca706dc8f3ced80240f7504c5drootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.5+git.342.57620c4f7e-150600.1.30.src.rpmsamba-doc     coreutilsfindutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PartialHardlinkSets)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0.4-14.0-15.2-14.14.3eԔ@ee5@ede6`@e-%e'e%anopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2.samba-doc-gplv2samba-gplv3-doch04-ch1d 1716078054  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456784.19.5+git.342.57620c4f7e-150600.1.304.19.5+git.342.57620c4f7e4.19.5+git.342.57620c4f7e      !!""#$#%&&'''(((((())))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))*+,-.sambaCOPYINGREADME.mdWHATSNEW.txtexamplesLDAPREADMEget_next_oidol-schema-migrate.plsamba-nds.schemasamba-schema-FDS.ldifsamba-schema-netscapeds5.x.READMEsamba-schema.IBMSecureWaysamba.ldifsamba.schemasamba.schema.at.IBM-DSsamba.schema.oc.IBM-DSREADMEVFSREADMEshadow_copy_test.cskel_opaque.cskel_transparent.cwscript_buildad-benchREADMEad-bench.shsettings.shtest_utils.shtime_group.shtime_join.shtime_kinit.shtime_ldap.shtime_user.shutils.shauthcrackcheckMakefilecrackcheck.cautofsauto.smbdce-dfsREADMEsmb.conffuseREADMEclifuse.cclifuse.hsmb2mount.cwscriptwscript_buildlibsmbclientMakefileMakefile.internal.inREADMEget_auth_data_fn.htestacl.ctestacl2.ctestacl3.ctestbrowse.ctestbrowse2.ctestchmod.ctestctx.ctestfstatvfs.ctestnotify.ctestread.ctestsmbc.cteststat.cteststat2.cteststat3.cteststatvfs.ctesttruncate.ctestutime.ctestwrite.ctree.cwscript_buildlogongenlogongenlogon.plmklogonmklogon.confmklogon.plntlogonREADMEntlogon.confntlogon.pymiscadssearch.plcheck_multiple_LDAP_entries.plcldap.plextra_smbstatuswall.perlnssnss_winbind.cnss_winbind.hwbtest.cpam_winbindpam_winbind.confpcap2nbenchCOPYINGMakefileREADMEcloserequest.cppcloserequest.hppethernet.cppethernet.hppip.cppip.hppmain.cppntcreateandxrequest.cppntcreateandxrequest.hppntcreateandxresponse.cppntcreateandxresponse.hppreadandxrequest.cppreadandxrequest.hppreadandxresponse.hppsmb.cppsmb.hpptcp.cpptcp.hppwriteandxrequest.cppwriteandxrequest.hpppdbMakefileREADMEtest.cwscript_buildperfcounterMakefileperf.hperf_writer.cperf_writer_cpu.cperf_writer_disk.cperf_writer_mem.cperf_writer_process.cperf_writer_util.cperfcountd.initprinter-accountingREADMEacct-allacct-sumhp5-redirlp-acctprintcapprintingVampireDriversFunctionsprtpub.creadme.prtpubsmbprint.sysvscriptscreategroupdebugginglinuxbacktracesolarisREADMEsolaris-oops.sheventlogparselog.plidmapREADMEidmap_nis.shmksmbpasswd.shmountmount.smbfsnmbfindsmbfindsmb.1.xmlprintingcupssmbaddprinter.plsmbdelprinter.plusers_and_groupsadduserstogroups.plcreatedomobj.plvfsmedia_harmonytrigger_avid_update.pyvirusfiltervirusfilter-notify.kshwins_hookREADMEdns_updatesmb.conf.SUSEsmb.conf.defaultsystemtapgencache.stpgenerate-winbindd.stp.shwinbindd.stpwinexeREADMEwinexe.cwinexesvc.cwinexesvc.hwscriptwscript_buildhtmldocscifsdd.8.htmldbwrap_tool.1.htmleventlogadm.8.htmlidmap_ad.8.htmlidmap_autorid.8.htmlidmap_hash.8.htmlidmap_ldap.8.htmlidmap_nss.8.htmlidmap_rfc2307.8.htmlidmap_rid.8.htmlidmap_script.8.htmlidmap_tdb.8.htmlidmap_tdb2.8.htmlindex.htmllibsmbclient.7.htmllmhosts.5.htmllog2pcap.1.htmlmanpages.htmlmdsearch.1.htmlmvxattr.1.htmlnet.8.htmlnmbd.8.htmlnmblookup.1.htmlntlm_auth.1.htmlpam_winbind.8.htmlpam_winbind.conf.5.htmlpdbedit.8.htmlprofiles.1.htmlrpcclient.1.htmlsamba-bgqd.8.htmlsamba-dcerpcd.8.htmlsamba-log-parser.1.htmlsamba-regedit.8.htmlsamba-tool.8.htmlsamba.7.htmlsamba.8.htmlsamba_downgrade_db.8.htmlsharesec.1.htmlsmb.conf.5.htmlsmbcacls.1.htmlsmbclient.1.htmlsmbcontrol.1.htmlsmbcquotas.1.htmlsmbd.8.htmlsmbget.1.htmlsmbpasswd.5.htmlsmbpasswd.8.htmlsmbspool.8.htmlsmbspool_krb5_wrapper.8.htmlsmbstatus.1.htmlsmbtar.1.htmlsmbtree.1.htmltestparm.1.htmltraffic_learner.7.htmltraffic_replay.7.htmlvfs_acl_tdb.8.htmlvfs_acl_xattr.8.htmlvfs_aio_fork.8.htmlvfs_aio_pthread.8.htmlvfs_audit.8.htmlvfs_btrfs.8.htmlvfs_cacheprime.8.htmlvfs_cap.8.htmlvfs_catia.8.htmlvfs_ceph.8.htmlvfs_ceph_snapshots.8.htmlvfs_commit.8.htmlvfs_crossrename.8.htmlvfs_default_quota.8.htmlvfs_dirsort.8.htmlvfs_expand_msdfs.8.htmlvfs_extd_audit.8.htmlvfs_fake_perms.8.htmlvfs_fileid.8.htmlvfs_fruit.8.htmlvfs_full_audit.8.htmlvfs_glusterfs.8.htmlvfs_glusterfs_fuse.8.htmlvfs_gpfs.8.htmlvfs_io_uring.8.htmlvfs_linux_xfs_sgid.8.htmlvfs_media_harmony.8.htmlvfs_nfs4acl_xattr.8.htmlvfs_offline.8.htmlvfs_prealloc.8.htmlvfs_preopen.8.htmlvfs_readahead.8.htmlvfs_readonly.8.htmlvfs_recycle.8.htmlvfs_shadow_copy.8.htmlvfs_shadow_copy2.8.htmlvfs_shell_snap.8.htmlvfs_snapper.8.htmlvfs_streams_depot.8.htmlvfs_streams_xattr.8.htmlvfs_syncops.8.htmlvfs_time_audit.8.htmlvfs_tsmsm.8.htmlvfs_unityed_media.8.htmlvfs_virusfilter.8.htmlvfs_widelinks.8.htmlvfs_worm.8.htmlvfs_xattr_tdb.8.htmlvfs_zfsacl.8.htmlvfstest.1.htmlwbinfo.1.htmlwinbind_krb5_localauth.8.htmlwinbind_krb5_locator.8.htmlwinbindd.8.htmlwinexe.1.htmlsusehelpmetaAdministrationSystemSamba.desktop/usr/share/doc/packages//usr/share/doc/packages/samba//usr/share/doc/packages/samba/examples//usr/share/doc/packages/samba/examples/LDAP//usr/share/doc/packages/samba/examples/VFS//usr/share/doc/packages/samba/examples/ad-bench//usr/share/doc/packages/samba/examples/auth//usr/share/doc/packages/samba/examples/auth/crackcheck//usr/share/doc/packages/samba/examples/autofs//usr/share/doc/packages/samba/examples/dce-dfs//usr/share/doc/packages/samba/examples/fuse//usr/share/doc/packages/samba/examples/libsmbclient//usr/share/doc/packages/samba/examples/logon//usr/share/doc/packages/samba/examples/logon/genlogon//usr/share/doc/packages/samba/examples/logon/mklogon//usr/share/doc/packages/samba/examples/logon/ntlogon//usr/share/doc/packages/samba/examples/misc//usr/share/doc/packages/samba/examples/nss//usr/share/doc/packages/samba/examples/pam_winbind//usr/share/doc/packages/samba/examples/pcap2nbench//usr/share/doc/packages/samba/examples/pdb//usr/share/doc/packages/samba/examples/perfcounter//usr/share/doc/packages/samba/examples/printer-accounting//usr/share/doc/packages/samba/examples/printing//usr/share/doc/packages/samba/examples/scripts//usr/share/doc/packages/samba/examples/scripts/debugging//usr/share/doc/packages/samba/examples/scripts/debugging/linux//usr/share/doc/packages/samba/examples/scripts/debugging/solaris//usr/share/doc/packages/samba/examples/scripts/eventlog//usr/share/doc/packages/samba/examples/scripts/idmap//usr/share/doc/packages/samba/examples/scripts/mount//usr/share/doc/packages/samba/examples/scripts/nmb//usr/share/doc/packages/samba/examples/scripts/printing//usr/share/doc/packages/samba/examples/scripts/printing/cups//usr/share/doc/packages/samba/examples/scripts/users_and_groups//usr/share/doc/packages/samba/examples/scripts/vfs//usr/share/doc/packages/samba/examples/scripts/vfs/media_harmony//usr/share/doc/packages/samba/examples/scripts/vfs/virusfilter//usr/share/doc/packages/samba/examples/scripts/wins_hook//usr/share/doc/packages/samba/examples/systemtap//usr/share/doc/packages/samba/examples/winexe//usr/share/doc/packages/samba/htmldocs//usr/share//usr/share/susehelp//usr/share/susehelp/meta//usr/share/susehelp/meta/Administration//usr/share/susehelp/meta/Administration/System/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP6:GA/standard/bed7e2135e93467038ea4ace5d3c0f2d-sambacpioxz5x86_64-suse-linux          directoryASCII textUTF-8 Unicode textBourne-Again shell script, ASCII text executablePerl script text executableASCII text, with very long linesC source, ASCII textPython script, ASCII text executablemakefile script, ASCII textC++ source, ASCII textPOSIX shell script, ASCII text executableXML 1.0 document, ASCII textKorn shell script, ASCII text executablea /usr/bin/stap script, ASCII text executableHTML document, ASCII text, with very long linesHTML document, ASCII textHTML document, ISO-8859 text, with very long lines`lS>dCutf-8e70c7200d7c7abc192edbc8da81f7dea6f9d0b82521b43fb6682b1b6b438bb55? 7zXZ !t/] crt:bLLfB-Yޏ§pBR`5TAʼqAb?s;NAS5wwK?Gq$E Ŧ"7,oŒolTu&Y 1,~S3ktJ-rATG]<a[lULJiF sELe1we mGszMѵ2I5gV /B4^Y$؊ |De(d[o*YLj6Axiy`9yاonޯNa&:u -^!,ːބ'\a5coZmCKܚB3p%y܁++.U@vxgߓ#_Ymmii.d&OX{K\Wwc VG0fWQV#0偑g%|lHԽnMq, D,p,1,x(rAz. "sϴ~-[Q>2F}oRc/Ǽh]+pZ̅_ǘsSE]~uh{ʘ}Dʒ8Ƅh3(lVhrA.=?ۤ<%(=U%"pܣTRX%C2{$uΖU t/m :dÈ6c} Zm5wƾ2D!&57G]m^>rg) Gn%z?H~RH v"[6boen;qOFΰ ]u> pֿbIBexO>m L|4{-5I)u3,kxOH22yjKm5ۂv<&)g5[@8_"FJ ҅@9C"h($3>K@YBX$ؕ|q,AQ!ӬhMa"hM mF@OwR.$ƂdWĦA,G.WFecΆ,z7aX *]ɍ4v发L!@Km}lU(@{h+Ȕ}~0\1:4oY5@ꞔ4h}&>=[WC>t- d{~y>y0?@w6[s@]D՝nqֈYF҂ljzdgռSuKpf/Hқ)*RT&0;d!*8)vJ )&GRF:eYGC?oJf5e7:Rp+43ڰ|tDŽcSwPń8g)( 'cKiC`Xr9 +K#x yҎ~N쏽- Ӊ<>OWxZ Tgƚ>#Tuؘ~^szs/ y> cQ[;Iq \]cdG<"7@g'TynӺp^8^-;4m/a[,pS?2kߣHy(6!B4D}+.gC7hue5CD!ntCDg/3e= t@Ie(nĹlSf$O$Ŏݾ` s *Oh*RmWcȌP(NRi>& fؙ3sSK5h\h%>fx}[u{\.o083F Komz]MC(tP2A{W%chGbUY7>lC_D#|#P?*E>araGh>UcLJ hsfW quvs=ǿE;l2ގ/I}s+P24A-s8/*!gg}sKiV,&olNEcb5kvm- { Iq^ߟ\pPo 7k]  jLJ ;VpEL~-{_ƍP݆ϑt|l&FK9`X*5kw1OxǦFQq<) y<.fqh1@ڑTDVu ϓ 3 8ńhEt6+kŕ6K~5A 'W760cBPdd!?oB#凅b$ّ{ )# >xeTSI2uMwFBXtwuDr/uW.V~!)kWpGzp$ReJt`-<EO/TRj/; VugN8IQ_D7ymh](iO&k0B#b^Aku 31CG,`8b.~SgHGPJ],YXNr[6T#(Wut H蛞:aU9yǾS2 KT9H:U<#ӧbejar}.J$39\δ!O!Yj{ Bd{9w߰gfԅ.c{Oy'a5[1s5d =fr/uq2m ⁓>`>~r+ӆ QpWMitE&Vt N`N?s9zQ`h 7q\c 3L$ u;X2Ka㺘?:vg$QFMxEyXpK[0sHKy*'2FRL7w6^E?co[X #:^0>f[ Y |C8%xpᙩ5$Q훐2qoIȝf,*Mg09,>$;vTCKbn[uV&45cfb$c(%kBk=5c u]WiP. Ȁw oeRL Jaէ&tzgϝPci):%4Xy{XgUa%,+/7ݟR 1ʬBUcF?2*PDT)24@mdŠEG5& )h Y]ѐ/%zO2ݺg<  ?KBKN( ؈5xm8C5dU>UsW}pOZE'2  CJeS6N$VڂmTp֋+c}a4p;k|d55 9M2~Bkmd\׌kYVW&7<@bmB6e{A1w8D3&;P{f7% ;ЖC>]ZlLVy犋'$`kMa/)$Q>P!2?yh9^ra' NNXX OccQbûM˺!2_:p)6 S_GKoAWDфY_/|]V/9$QG}=%ޤ>ݞE.R51ǽJ'_W"a/-ٴ@ "K*JW Iu>xuFoI Lm(wCxqȠؽ7 ~a\̃/cgyKbP;DҨFE'XH7kػp$֢12+ܭ9AS{ x\G#(`Ӷ/ZyL^ y\\]?;ƥ8 |f:juhY\.=i!4e9ϊܶ#A[]ctmohH!Oo)?e֩|ʢKYv'GH[,$ }rsd'WϷAӿ&n âeR~&|!Hz >oJh&B5QX EAEͭnzd@myHM]Gú#i] f k^6Ӣy(+tRX)-8"}y"o-Hg }I.SӱsH[V $qev]OUfnKt6rcBf$rGG$__~lmF# eVl r'!ԣ˲fuZT"wgj._:s&ʼn: W=!첋(} A>7G4ZgxlQCJ>Y0C5#7}r+(HDBpAvɤ;C" I >0Q5I6G5kА6Qa7\snR~7NH!8|ƌ "dV6JF)m< sC-# 㹱KM|U\ kBVx"i쩜jIS+veəXI_`M TTf3 r< TgZD8]3> \`AL"p n#6("`_<"ZFгlGv';0)JXC=IfR/>a :rDkluCSwyz%oi|=͘ Mmϥ~<醘x6`}ȿƤrwŦb*u.!Lb׿Ы3E/)0 l-T3!lhj ՚_0: ƖAk7quRnIzj˒\@:3@8,򣋙p)iҸPX¾[l F̤df)h`6s /kNkλ@#t'h_5so٤S_B}& +oТtYTZO r `@FD=eB s諷+$N٦9*;6lHfv$fH9F#Cr1GDEP%qA%h2dtq.n }-f2b3V5VUu\$h-XwsFb*wɥ }i⤓Q2z zQ)A#DRnbZ`}(PzUm"oޥ)js$ֶs_Ӈ dT0W^Op ƵB(o yv^*´;?ZjBzvP1DN@x$_#WD܏n9A#1_:GES32k|B%VogApT3vSpqT?{fާ/ZR$a/JAqBb;{U{C(oJe/s#O *o[h[߮L&Ff:g`Lݓ<';]Ioэ(@w9s0 P ^ Q3活}|W+%͟מJ?1is]ƷɄ|\AeHR@,h!ȵ4 qqJ d(wAe'/vʀuA-9jw)7ͮ&{˽Ѵ QeI8Ef*CUeOLP:D[y$Kk"򚏸t+zEsl%X7`[ߍ?f촳zֺlW! f{@`|VXYq(;wP2҂LAO( irb)[u4>AF/6w |<3}8󗣝ꈵ/'&KCf ~jU{ 4.fY%5 뤑]귝g< =bcڜ;whX驨"RdN|K)'a32+`"ڥjc7۰*&W"JQ 5&e' +M,vObb.Į‰duBw*!Vz\ѩC@u5a43(k,Țr Aĉwyطc;݁u#GRRHhRZe8pI+<\ 9' @h?M&=cqfdz<,Xw>ñkz)mN!wpk~JJurƩ5(a#]!/Dada"<'fȺQή@IMUk/:HP:֫:>}W;Q R$1kZV%0MPS}ȥ$_68"_GŘ};2SpJ)&scHʶAMGm(05CdYY)3M3l/9{tg< 6+&%w 𒥱ߍ+ytkr<R}O[ͦQD:@Pg]ﱛ ,s4뭛k)p[-4N\L>>\YL.pzdE8)Td}ta"4Uk_eK4eByEj1c'ʥF>H-sȥUv3~Irw‡kF16BO$FqwBu|ǫW%H( gT& X5} E/|zw  xoE: YFt|" Ûh`M]=() Z`ʅ]w3"2=r.auL%S8ӎHBaÁTg>K1i2b;bG2үڝMqm1ahqf-eV0p69]^,Er_ ehPF8}2bgIHϴ(No>_J6-J <-*}4$BbPIo}/VΕpB!,eB tYa]%:⣥EvJ*/$d9Lp$uk ?/in|CѲmzu;h2Jg2Hdt3vD#X×bd1[Wx9ƔXX[&pؤ~8ItIn^n9+%4DN(/PRWm :Q?>`萎s1+(sM,%y2LIxĹb(SV2*){cyҮR+^aϨ;ᦞ-=[~vpj~H&UqfnR{M;;R$6u\Nw7DYyպҊjm'@+~Tl>Z$/&r  yEFKL& 5oMMШ"ڬ 5U{  h!k`MI4 nȧZ<'|~pRYqۻ5up%LRxeuViZKI'goX܍.GrJP(}(SJ҉ ~=x 8})vO^?XxNAS;1H &׷p62}]ԁ{.xuW1l}V?|/D,ot1 PG;;P]]TbnCVH`G ~>+ȾYd oۣU৸!D`Hs7͓iljFd:·GԂAoc3ز5Q hΙXv0qˉͺtp [ۋm:`sg1mO'rO6Tv[ٛcH_oR`L?PHz!ބ̺*Єs{3N)̞M}s>5!X5;ߠIL· c/;ͩAY"cƗaK1MdŇSӌzJ81n3GO)\}xovשQގNz kfy)1bH)dJXF&룍>'_%9q;ZTvMiPxgw:QUq8ÖTP!o~ew&Zq8 gJq _#׆-~;q!" ]`R7{i?T0L Rutqxfp~ ^bՑC>' (* "VH \DE=,kyb8N>)ho,gHeL͠zmH^7v;<7BDh0@$z`QuйKm@DXN㸺yIPsYLK /H$Ai1zз9D5C*A2H `Tдy䢒 /Dk߃j<ǀS Or"ʛ/̞nhBb Hܣ!ϐ:*g0 18FDΊBo. kZ*Y]y(//Z(,s hw+r?] Hj ד<\K|Gw : ŦģMU7sA`!3Wo--`zbcPJm9yI7s91˭)6LRpBYQŘn9l4u`"`p SCySpdO, vbX3_ub!?@Zz MFskhY;3g׎W- @i珨j[Tdhlm+57Ke(;j7ׂ~ƶsAZkE@By)bDM 4\jHT E]dj&d [PY}+BˆcK֜mng uڹmf`sQEUu;j6k?fP^\Q:Le |`(Og8)u[q~?)+ܠvƂ h|tBo"E .l03ТC<譅vD(Re`]Ԇ~T?;(- f)8ɬ,7K 0U5/6}#e4 -17xO@]Yom+)N1%hq{kP'O +<=4 Dŝ.Â)͉\ëӶٿ*['upݖu6\[RdnS 7LI%^)Li<4etr>eL# J2MVsAmѠXP{2O2EgE$q{86' ,rMc⍆ j./wl"4.{^(1b"B"Jc/۳Oe5h'8. 0FƬVμRgo,l3-ysgȪ};ls5ղ={aVd|'PoO0vOIrA1!( J- 5_R9 1ڸ. 9c"W+z/dDgF20ܦ[C xb%/}pXu̕&±c:9/Xt2!\h@);e*Ӂ42kBz{ 92eڡ@H4,Ws;><5yy5)^(ѧAJZ8R蟁0(({)n D=~/m ]KHn ]9U[L˫B@CF%!\ WLm;CBqIf̗2Bm]^ ÍaJu=ڷ=d ?նgFLrg9dd1;(Yp jս{@[Uʼ:BI%0oaPzyVwu]Wzݎ2eSN#>=nɪq^8 +;jܾ$!"|9=t 2^q<$fP#HYB(1h]'`UFpld^&)n*n3>9; ͘RrV1;R8n D$;(C ; Ok&tMV2m6b*;*pQ E~sЙN 6: Z}vid_ +Tk#r9(hԦ=3W <2a%*h{-gtxV!;Z~:J0,:§ m4mOC0:~@+!. ObAagw~ WxUGWfl7)I@q D~SPԲߨ3/sW&4 P.t3:?p k6&'/qujW8_/_׾R=%0CR.&\;nBu-2潲^_ϳz͓| Uܳ7r&M~AdaZ?D+ܔ8y&~$<Yr~L_BJnPWS(S.~8ŽOb5jnA ^"үd͖h@w{De_#1rPz{23}xyZ]V \9qr?QHR#H)OW]ш""*%/XйN/`Y:vNv: %ϝކFm,gPfnP#Q@_4 2fEUSw!y) P !"FPXl6CrZhQKx9!a%e0?jaKIhna:O6rS>qmHمyNݱ@PԦ9H8?掲{E*($h  2sGJ0R͞UeZ#@Ь(<}:`YG oL%C8 hB"ق|ɾ |zOE^nxwr zS/n(DILz< JV3wo1xƴ#@(W4G`[NZͻ,{24hFm}嚕/QB@HܜTa8U3dIn@p=T7RIyYش5ātz+ oNw=^V{8Wu>ѭˣ&M|LotRzЩ_ F\-%!r19"IMgHzlxnWdQzGJ~8`sSN>P^*[")s1;3kkJ;ca @n |$d{v7K敖A/F,&Kȗcfr*uꩵW:U?kO]49wp܎AB\+Rf ~Tlf|gOqq~W>>| ?݋9dm|raDSP4Z+ ċ롩2Pށe5Z!T T̿؜zȊ>ǐM1;ŮNXb6þ¹rv Jm y|a=ɞ;KƦo]mC(%+RFl)*az xݼql^{?ŲoxaMazg$F m銴d L}w~!2^1?# >:ocMvH|nSu||?}fN ~ (Nʴn0gRpt z!d~ӛv@ޛRV'? $=?o9ws/7EfJޖ@@u'`gPl~URKjѝ;,&j8jjK ?S; O#Q^U֯wy(0n{k?$` GV`EUZj|$fv}AJR2&gs7:]unf}^&Hi<H;x>"ȅa6sdĩ3ޢPCtjuv}Jv<,[zXb 'wLs3mp9RiK,=5ImlLi.ckt`Q͓`Ҙqg/gZ+L4FE1^*GJ_+s11.d{?FdK!/?;^Ul.ֽ 1 QQ{n!{ȅva=;@maZkFuk=d#+954DUcW0csUӮ8sE، h y҇'kfK6EqrB(0ɯqB_PF9{ګ?_o:OCħg0=%??8(+sl 6`7 SʣB)rұZA(-bRMگ< է&3HA~ǓaiAqj>kzse #uFcNUA|l'SVN(Q j*F]iA`A|bZ( dK`fW&;*;FOIZd_o7ȌAyd~FH uБS1QW#5LLk fevcՑ^Kdlؾ9l9DY:VD!Q8?biw敟ԦL|]V".xbٳkN|wҒ; _o$ |JN8^=Ic]%cu~|*uxb˒6Ab45'`n̝"EpeBb,I^ Tęf Waj5Έ5獵Vg3 'uZ;Jݮ_IBK=1V⍧B?Y{P|OhnPqIgfDY4Ð]f?<|}d$h)foGc˖J{/5q't|jpxLA. S#< Keb\S3,ǂ$=`F= InqTW+#[Ҹ=ڍ:7fҠ Qo?=[r^ "ɇ<os^kE IpMQ@)>4Ab,rx:zϭLجMAVC{$:5؆I;Tއ-Aw3r@5QNtJV.Y  geB$9J^AN0#(~d@2Wq@E< bELĜv| 7nRtd6xغk’Pcz"ZmYʆ:%$bAV<_37l%LθNa2rϛʳσHg̥Sea$q=3G[UT 8JJŧuYΘocVJRh`|+\wXs ,x⇚kJ  pZwz|<͔ 4,_|XE!mܝa~!MQx2痒~nC\2W+-<~䉏|@kT?T;N6a[m p6^ʙϝ* _o!4>KV{GQEzuP>#S4Eޗ(~~: X[Q/'2G6ztxH  agG@6,0</n(SaCAv wV_D8ǚ,Ov:ut%5Ȃ!_r0qQƘhZvVc2 ȈNj0Mj~. BO[S>;u=:h@j~jF7΋ _mKM5E>l}P tWHmLtfk; B&\LhvcI:ٴ21"WFrb1x ߛ܈s-e]' 0bAX9C7NrG{ -'qF-2SC= .x1XһU뚚PabCR {Rj:fkص`PpF(UGW }HuKHY|-ʥ"dRNyƔyC4:hYn))d\֊ޠ޺cy | +<ɄD<]7xevJ~Jp ~1[B2SXHL#=%ngݷv$XT]:)&Aơ]PN'=~%.f6u,h`SZYeC~eHȳMkO [zrldDAR7Ͻ!!Ryﳗ[&5afiCI`Ϭ9UZ4HfkM:4ln($|Өk} uw^Ij`bO-xBI&;^uԳO!\A(&!i#1R?CA~bK># ps,Ē.vM:ao`F'y,iq DG7`~PbHn"`B{-F x.n;ct#-%:Dފ4(t8/Ad\B]s*|AOʵK`$)8b@)`dB@$~ I1=WY Ub M}6IV9׏(Bܜ/:#XHu$p&1@0ʪEǯ6|m@ȏwƎ;7y逮p@{ΰrb1¢p$ *I SA(ª8CuJZR+bl9US>: ! ˌƕRb5n񨯏cKK(gw=WQAlQ)QV7̱Yy4dxo`jRQ5nFQhB-tY--N*њullfsC0f]z:Rqv1LlJ\}eƗ L~'Cqq(ّ|C:CS>q*OFFl@aT\>yĨ|* @ \69 + J(14 HQk6 a↪*"u9i}#-aSp` -axYA@5ԪYʭm%wڵ!nS{b%ȳxsRC\0R ~񱃼~̎ ԑ1|95x!h>(/5Kx6*B}B)KGk%ױrS Dt[ϻ8UuJO Fkڛ:f9I$oo^jF"Ќ8gúHgO_ 4:{(ZE\FW#҉!F@mMxӉܱk$ V6Hښ*+UPHrBa{LEYТKu'gۛ/jIBGN̢'4b㞨qD+ WrlFG Taem:99Yo`IzjJ(N]Э DeyS|`xճyNwԉs9g[62cJdl)+ ,hU&9Nw1B@j-5n`KCjbeW˝)&}f0dG+IuM@L҆{MnM<29wR@FXz 4yTUh4_У+ʈLyY(֗ٳ⑬H"My|"}bhը5T\Paq iF]xT´xG%|9MZ7FM;XL9 ZJaK+h E߽qغ^498 jMf_F,DhE#HÑk'-tG"/"DVm gD/qR5|ysBT~K)vlnBt5o=#~+^DsءJi0;߿|w#ZMA[Ǹ"%jo^˂,/ aW/)r.>ȡ*J$Hj^4"q&. f$eD7 !p+9ŮgOZæt+ ]1aD =;Ue~?dԗhլ0 :% 5 @XR-& 4jFqQ?B) sOnGeg"J٪.O28 cZ=CU;36M&^6F+`%BRБLF7_`" k;tFt"J'o lź6گL.2ďч.dp4\ [? mS aiG2cIxޥ0XiQ[(HAuu6غ(R(}]lsv9}ל_J3_yQ&~aA>6~mnN%+FζphJ )6%43VI.&{" /ceh8>MetY/9$.=%:owXT I [}F_W?do(Fa* c?f@~nd}[B!3+[,j{a=Ca4-Xtlm׹,s A׺r5 ԼTAdֶI9jqe0X iptSJ,f^vVY/v;n}[&PI B:.v@Ԇl {̸W#NQ$Z_{(qDhAW+A3܀#ja^f{Fwk2ђWpXH)[CFM^0Y ٚ&dT?IQ”)@euFcsOAp:w\h[Rd"' "ò/~u ~lBkHU Kf$,!F*bkdv/"ӣݓpn:x&9F^}eO-pp֧2ҨMhSt$}ͣ}~cYnᱢYv}zPE;-QXLWDkU]U^=>WWnZzϥJoI*9) -MѴ='V"Nuey [o%}}64(B,Ooo}Y=Ɠc N3 2I6TOf9[컅)Bw0pЗCvWV2?wc汲bXF+_;H_do+ZC+ޏ}sw{qDbioE{o~܍*iI;'s2uj3(Ѐn(N Rɬ vN$gG`!с ,_eRА-ogD"uӀ96=zEJrD[ֹ'P2=h;_`G5&Gya۫#P@Q`!%FjbmMYrKU=/F7g r ;;{m߃ۘ?f 皨V); M؎H"?9tpxbca:/a +Ċp=d_rFX`*$kX~/eP8mã"y".3>F=^B{$ߒ/NQʸfWiع\;5&_{J/_m{^z]Ӯ5Ù+Y~C ǂG FKu+7X}>>P5?M$Im_sèOO}Jiwm*̯iK~acZ$0lF UkpR"#嬒/DH4w&Fn0Yf[! 0t@=w"/*,߯N! 1-Z"9ˁ~jJNxmwm4Ou~Hs&zϋ,ꕆF:O=߯У2xOK.-kVKb喽eh>%}F$zتa:\tx^9&!+ `_`xw)>I9(Wi`# \6*.thfa#s qF0Yi| 2Xw/VJ'ЋPqJ]rFyX}Ȁ :Xd͂ ]Ta%nLPl w?$nlɐ,g/V>p>9 [('o)?A}CؽsH2û1b[*!]@ҿײ ׷t4]jJAVW6COa$!M}g3*Iu|oI4(Df &_B_,\vE/E;SéGlcM-~/ Iی5!i E87`CmYj%J-']xD[?bJp8zyliw`n}*\P#fJ9%`XZ6!wa:P:\cY]`U8!;gYf"(o 0G>hgIcL waa[[-HJ$£aR`Rтbث"! Ham s-^z㞙q@Ea%(Gj[inmך|,+tղm _lXw8,GAUuRB|SKB{ɺ ޜ )ʲbO=x1CE L -ob:6ĄRʢĦLr'@㘟pB(E|ݚHGt"M9]G}>uֶ!1m'Y`̿ph)Ed^74UYL6pumcS2;/\eGHJjS'!=Ki8 t30o{PNPI};Hkޞ;lA2[HJKॴ/'ɿ`2˹+ᖘ23,fFR **gMm:w:[JZmϘH(\M#䲘:k.FuW'Me8-9{"r䕻p0#Is0YU~̈FCaZ_os"uT)&hI;Ґf 2_ejir;2AKN[%`d-kѦ1\2 h _?' % e$g"X{nu۔Ѣ,\&֚q8*gPPaN"gRxmrdӊ䢥_bf5MC,||$ㄽ-K5~r*kI.H6n|3}utϹpy,TfFe]=<7ntϥ# O"Řvswxl;9pC3:"k_dߍ }Sh9^Cv9jn&kb/LAE7!|U$ #I _DM[o&,S9:Ȩ <赶nۭN蠜 #ܺk=ի 87ODyge]uK1 ܚ38*ǤnO)xy[ef_ כaV G5 S6" QϏjYS#9j0AȠt"0% ^-j! MZx0{$r_(\ {ݢ\+-Z/]Mp< RMǷqv3IOh(xH1sJ-I>W:#H*S,wT,mN|JG{"% vj\C|^)99!,(2|1BDBP߻ m7%"W`Yh|'"0=(?NAϼ%*rV[qB(xI8Ȑx!T`R=|wwĮm]hBŃhyxC'q7ҋ>A'C>>%DvsE3yQ<:dc6xV /.Ct1atk8Ɉ.d/V~om5pSl/TG .{)^OcSD[k%чt Gu}L8G^ úkǗmݡ; =cVF_v)=,x4[QY{ WB,ߚv)]#Zn0@゘=t'I!v )/Atg.M'#z$8<Eqem/ :%,zsJܳ0i|3>OKAE0٩ޕ44AoRW[96J=^ i[m]JNP7ؗ,\;ʆ2:_K,ߓvM%rkܹl$⡗ؠymNb2x$//^;qzӯ&:t}u<3Դ%4Obwv%Ke}wk1{ȿ \ `PJ+].D1rqR J}X{(d#U.E v*c&z*#DQY?؀ _o?/x@K@i(-+\S>4xhCYуݙSpRJq]bLo 8fR9c@kÊ!l,-ƥq$r F& oVq}Pg}muhDM[pX=FB kw>Hι:\0` ] F@I29ԫ-N\ʠQyn$AV"#STW)L'4AqxtY\n-5t?Ks Ќǝ*ߐǻ8N79%OIL] F^% s B!5ds0vpD/؍_][TԪ\9$/^O~:Xf3 7Cnx" cFbvV>e2-l鋇:^ ﱲZ.M 7WБ6ipѩ_J=md Pљ}ڟtLTVH:('N+ <-UJ 40B 6T)dM)^luꗩvY,l~_$aI7T.o tD+c_6Tbe#ƾۉ_BfT*)uG3+@Sǫm rV>ÃNk=ǁ%X+YbvqURQ@}d,| s8iOβ`PLɂVZ8m`}Gl4HrĽ{1b\[" <ڶK`ztm``y[XY vE"Aejb0v>^7bw.@jf-2Ʒ3X7@.%b3(7L߂@gx"Gbp:BbRǘ9,>֪zk)k}KNa*[1_nQb7^:]7ɱ"MKS&lsM ׄyڬ@Wg\yM?@k.Rg@ߜo݀' ´2v|-v>AQ>8.Ce |e%tZ:mk  Jv-ќ@exdM mWV[ cm#Q"-oi;&R8}aJ3+ kRwu3Ete| l9IeŰ+[pwj< 5[8ꦓWVIpRm{`Ⓤ.hhJag]rbz Ic& 3UC郥>^]逩VN.7iMҢ?EJ)Ԋ*8Tsw%4[8"6V`n HYvB>}b^]mt <4ITx_y9ǹBFRQ!Kfy9md]CCP7 ks4BP\!?y%+צ,3_, %\J{p ]>*u=e[1+$ VP!"?qʘ9nL﷿eȐ-B)"7N+(KƒAS6Q)7 GE[Mp&NG@QF2Lt 3V@{i `}_AMdD&@Z]KН~v7?4vO0$ƆΕ0;ww!Pqle}w0+zm?e-y6_*8( ^SU)NrjW!Q\ kV[ %?cFd3Mn/gĦ6Lf8}TZ)~pxN |#B{|02ְ4vU/)vs5ZWwfFaTSY>q0`kyg,xJd9{PRb:׆%CL~;n|7ӜQ38Hl#I%\P];I z!XT t뫑(۪0n&fn '7YF)äl+>eｰDZ T8kHLFv]9ƎaFZ (5~l ;h8FVen W32cB2ݝeXڋXL`+3,P"a qn0>yiƋ]uBg-ò\=4=)5]"l g%g-'H"pܭjXtk LŒ[tye^zh~eETve%/0c( չLw {[Զ\$@gŴS9 )#TӳιH5XTg ,A~(8MiLTjaqwI,l}Zgr_Jp1L 1+a@`ő! ۀtۅi߃Ʌ dC{}J~/ʥ? w5 bJ58C*[u1߁{-;mW9\e®kAlA2ٿc٬ODlYA#4kM=Wa(}@HYD:'k,JC?ӥ({!a>J}puv)|^~a/>'.?Eą̈'\Iޓ$ y9i1X M̖GD.dr+1Lt/g:mYyV l ^1QJKLY8.N/1:|d,ef]m%2Bv#GˆA%JYŊ8dp %% VI%c"G\oJSV,Q[bB q{h\jY5'Rx'?4/anL ɜV(1F$@ӋmCTBSq$[Pky\@S:{=6[ju(~S5mR{*G3&$-Ϫ݉Ok. O n=JXLsS(,[8T[m ,15ok˪(5is6A:qJآwaNr\Bu6K>m S06B/qUAcGvj JudєՖv;cÞ匲  @mp~ tNB55"bg]z?.wmmug{',9þ@tq`܌t[~m`|k-F/ji;T >;"T?0rkAT@(C 7=ޣ9%@sfޠOpH1"}6^)ޅQEvOoC-1yBKYW IVf_[oD٭r+fvo#K8b!t7+Ñ܂"ʪn"(5." Ԃj$lX{cg QVF)CUVY on `1s*8z 59Qx%z{ -7`&]ۀEw$7+dJ%qzwJw+L_wJ43'SKذm벱†d|WuFy/2ho#Wwez뢤E4FVٙS*M݀(|,Y?iڃV)7 ]G&{(|_;oD,N @q膐[ pqz . 1C5IpGײȎGwPeeob = BPqMBU>_m[)wםJ.fwtp-ݟFT~kT}B #/zu}^A}^jj|ӕj !+z9MM3gx Rxq_8a,r,2ۡdlm_)/4,p<|P~jC͢OR̉NWJ#otR{̖x(*&]o 4ު; lO$|D+394OMAhғcHWͫàDmWyLe'Ynt4o >;؎pE囗Ë#Sk;ߵhE&a}008ٕ&beSN`[cflSvW@tZ0XJ2GUժID1T<K ; D}>kw'qоgX &`heȟl2-->,z5L@gV|4lwl⤸,. dݢe96BDBI=bϖtƈ@n/pp"ld-HDKcm\( l/ShnĽRE_c|T8j$k+,_W^ 4˯OW١V3_XRL'B=hLa+N(S?ڀV4aWYh|Z$zM&nң0ɂ^=I!"a,/^ȾvFNxj}1HЩafuM\hQD#- 24HLgjU"Tāꭑ|n zuH X$HSndh4i; h#>-ay@@uŔ:::ExP$h׸ZOm9ߖfzݔOfFѷh̤"ISuﹱe[QTOF&Q:EGC7Q~ԈqctKm;dG#yEKi.;P-ehn18q1hT#S7)18M2xҵٻ4?+%LT6{lpC:SW.ExbbECܣ0Ry4ԟIRsulJ@Ye͔`UG 0reh1Թz&l rʁHKj;2`՘嗅%@&I{H /$k;KĒ R-䶟cd[H*;b-$mdOve y]dU Ӷٛơ{i!X5kHq[V41ۺߦ1OimЩlǥ@Kb1i e¡e*pE:!E=:ƛ#tǡʨI`04#+<]HZ̮@(kKf|Q1Ӏ9 QEtJfUrlN8 >/M`JDGPsi4% xNqh.PƒŮ8V6Tmja**4ڣC]Ml_3&UI C H-ln${eku\`<=^|h#A<< q!Ok)xFJ9t_MD tٚGF 9no 7Ln4W!OE=`($J2H9tȫ(iPc Ԝe S5T -{.cqgGU?NYQu,|G`LOq`*|޾-Z\u$!#ALH<02]ߐ3s&h :Q}<2c~Ey6;vwSZU2E U}1E7ߨCndE:cb0}->ScAVs3 Ų(ɦ֍_31#Q, +S'цԋ#c7kke7E &/)YCbe+_& 베L Y ӊB^ !A6-FE6N8GiTv&˩5LRYD/_;1$iUbwILTgTJe"IO<~6ƖN(% 3FAbnw?KE*52J :4ӥq ԸRy_Cj#KFp!}xoۇmY|\$ W 6-kRI^j&$Gm\&2&z pk- >ɿ䖭-\]k#i=Bi @qfu3+gTj})y0 VJfVrrC^ubzK*j]vxǢ)`\| Ša 74w )o}Ф<~M jd H2/Fܮ(aI`]<$"NJ W$RfrᵇS;^7Mycv0. _⑊1t?b@YDB޶[Rp;kv"(D~Mk]8%G6瓊~xŪs!QG. r+ ,l7Crl $TGnO-4s+n #55[\do/`(udKWc`dҫBwFmm!3\h ?'u*ZP&1|L V֮=020=L]5N̖# Ђ~XJ`mW~L_[?5ݪbYwiզ)'XTnC䌭ԧ]+f|xD/Xy""^_y'\ƹ{ 9@FƅxQE8RB7rWrc鴪~%9R+ީƭne5f5-7B|yZ몣,DaXT( dR0gcuɣ"H&Ih1| |SeE52ΜPx"QX mûЄX3}IH~2{W/qt: GɊ̈J"% mfI* *tӍD δHdU]ۤtFUf!u_ V)"9os?i:Au o2UײU@nu:*})ȴ#ay־Dh}|_qw U;k`lv)h (&&c&“S\Tl$[VȎ3o] ~i: ڢן$u`քsptt/>? /*@(ʝUgn4=;A}"E\dW92Cu%M;d"ڝY:rcj4eȘ?&n{/VC7G{ÌƝ+ f% .ػ DVY|0Rwwj [4S?ơ%5IeAўWeUm0R4BaYjT3^فd[%䟈X`}o zAKboѮ>RRdk+8g)z4ϳOE+ ’V!,y Y5򉶯iu4 L0A q2:Q~mPMO-ѥUӢt}KKio ;lJM7GHc0cPr^J 1Q;:1mz?g 5ݶj(K~neaǃE}Pb|LEmǥGK"%·!3-lVP7GƄ`eYX$W<iKh6M\!s 5w8;n]4CxR3o)KҧPh1OcN+{ eX B49VWisQ>E .}^I( !+yS@w"ex}&;hE7T_~nvvCb)&]Cu|%{ݡT"TZN빺f u&߸N*lԪf rqOc@2竆 Tw C}DYYdbSZ[9.BR%#ԙV&P3oy+C Y@j|aOOo \|#C3R++D8k%e;8aȀn dz4!F$2 ~[QTA@hF@(|"ˌt`VT H&nV[F{ {$ݵ 판 1o,Eb b;)',-i* }Iq5<5ȰǞo\=;&MU~6I @ ]u;,(#l8LpȲ9Gq1~ ݙ6:4]FYH,x7yծdoL}ZTK;wrOh3O<[Y!?"Hyh*A#2XFIc uHö?/DUk`džH;АWaŝUh綡mzD:sld;j;zV!̣,iX(yf|}1%/2m$:DLfBJ)t6uI>1?U 6s<=/x})QGqZ_(-ў&kPlR p>ܥ <=z4 9m0\ 2a s#%]7-'m B5V7B|8;!j9IQS0p3&mgT;z>vb^Ņx\ʡ_\Wu@}w?x8qlU< q,G?~jϙKkR2a,sF41j c1>ߦv_f;YLc'@=׋f_r&Ʊ#L&sO򘧟\6! ȊUwCxW 60YأXloݛ7~oOE.{d=5dX-H'.\-U~m㾑gK Ea#yg,h8>ri7@k8kK U'V@+O㡯CkhLH;MC8O㏶~ L/J&R<o`؃}no(bHDR>U;&\X]fWb/tN*Dag#DŽGyȑ#%*>*C(L$}b.wFUX&B{g?z4xH9챦^(Y_(DUX>& ^Fܻgh [g|tV^ĖA~xJ/8>?k`i LYt)\ fPp.p\+,=,xLeΈ/eSe3O% ^^- 5 }Ś%U$ʙIU,OMFKX2;웥Eޱ\4{I75qtD] TȼGiċ"[Yq/7 9A׸(3L cDyx'@RP837Qc`J^7R Igݣ;9zP"l<$WNteӖ<7?R&b3$7>g: r%mSL_k/{2TB |hd`(mk<K㴦Ϗ7)Mn>1?vrS 3 T4xfz >/DkR(sY84C975[7] ^E9n+#<겢;!=+>5kվ%Ŏi|ΫQ Be7tѠwPߨ*l5V I7XM9Mm5`tOMBuK > ^EFUM_!tWjcr| |ѓ?=7/NHAȷqY@HI 'wo>-#bxm+[Wwk|˱k%4uݫSc 'ˮH`ܸY ik@ΏE-o}SiԜtlҧ'*] L795Jq[ڊ֧ ͭWHML0m^ Y/ +YPJS|T!@ʰ$X *YH{3kdqqSN3>ҦYP@j8*ΈV96mm8-]MZjcDQ6)a WY2)R6CKqJà@R^|85i֤xxEāhh Ȩ<4 _ÌUc +]t4[m*]YAϻt0;x࿧ƌ'ӧˎ]kL}DRz ?-HѦ-MZ{>>Kj4=!"8-MZD3XoiE[#&N8(cKg [ x M~X zJQk/R3]O&WlnrdwS`e)2G*SL:졬Z1u7:~P}++\bl8Xmb/! ,}ppʖו[ >w{`zǺ,Gq]Ǻ.x[/Mrӕ} YV @њK@ ]+- D`Ty;u>#L CԾDW~pAkR06 k>)Oe3^sa%d!J,yȄ_YHn,n=[iJf k+m}Њwus#)'JzAV]1k/ */iP&85n{<^!uK^gOL r)um=Zu8PBog 8Ux _mQ`Q=Q1wjߐ. 9|l꒶G&ڻ"@hN5>y {bek7e]dӈI8F7-b8T/n#(OORe>KNKkYIa5qX3,Ƒ%tӟmb^?dz>61LDV {OqU_BԲcFdC&s16 ? Z DOCsD+u@z oztʈ0O-%3c~wn =_-G&3ܨsjZX؅cgJT#+‚Խ $aFpc W!KEцyYϺ{CAR߄ Fdtc o.E\j.Ynp) ?>Xl1wT=m~b?ܢw,t]>j̷: q)՞{./ZV,:tqkqEj]yԒ+Y@R:q9'4|nqz}hjϳ% gd.8ܰgU; Ԑq;Q 2ƮBI.pT^$ZTWN{(f?_m025_-G"9F =bVs}P|_ {{8s((9 u'EWdy_>~K]SFc>P,R߶cM ^^;vF켥-fG-w%?uY2tq?OmGfa9Q!IeG_}ȺkHPD{/}TIoi<\UQ=P1U}RGO%~GpֶÀ T~^]eެS ԌUŢG !Ҟ>puE$! c^+ &@(EZ4C>F뭂^]=Δz]I0Aњ~pu< Nis0#T, .IMT' ^."yJQ/*(aZy e .`"$~(Kx̙8nlv-q 6*࠵J0i>gj#KdaaPEV; ^٥tn  Vs`xf2*y;`p%_I.2lA'0GlS1qIBZqUÏKkzfY@EUWyꯇ-$岱U ]q%Q4,A#%i1ՎjI:>|ԧMnmE|{ )nY]#o"hd uzև^/#l2spXm(cX<]BWBر,}Zk:a/2nb;}BE6@ݧAF;/?PCAjQ{ʗ6XϠntm]\'ɪ:Isg$p3r=+G-olSOEf@`vn{cԧ׼jLx9zY'$B""uleS`c4=Ͼtz 7 F,mB$=e9zBZqĔ#m^R6 HЍO&ڒM1.,;Uzk'{%4J^_t5fᑳlEd;g~Uz8Loh΅޽yCIۏQԤ dʶXPzõQt w!gf*k3cFBbirH۝4VsB|U]&]m8в~~&Y^-[ܐm'L$ߪR(sx57ȏȇAT1hRMXԺFBNOEMs!bcEs-pz`FD|'~k֒Ly7'F!#C^QөplQo'+P\J )jt &-`:[ i?xj>j7v0 :\ߋNˇ w E[&r}tisJRY>i! h$yz (($-/&u9wd2q|_]oG}VKIxsd5Fe;qn/ s^g? ̻, uo\EZo60QU|`IڀK缏F9oSJMثph>뉲_)8BU pCBOUH7jdzs%g+v(;'"Sj`/xwոlT^@0ҍz4jm'K2# 9,J0?%d^.3:' 5j'*]ydZm|.6XƸG2I)z~9HhL-N0rh19YgH?}oN𡺈;Jjx5_&N׹UDJuDڲOE飌هHhr̦P# +$XT68yl@|Q*!;;K> 1.ٔjC7~=uA5blO u:?o Ǚc^#A۩RmQSSTAи4 `[̩v<!&yo0-TnE"VO`eߑ>畠ԺyDWr[a^( Nr!Y ,WJy7 p<@5[6 \/h+o}i)zQƆ_XVkWZr,ol֮c?*> Z (̹qGn?V` I(4'VΏeRf!º>[|d(@ #J@k==] &?sTjh!ش_]̔^f̌ƇIs #oe⍍ T0$:ʈ6%AgᔙF} cyRXI5*O&SZ fDP^?#IIX|b Cy7f_)i2sRؖyV9?@:U;awX5!OAcsY%[Q8(9Cӣ=3,/YMr0$><tQN6]~](K&58WoB!ɻ) yۧ^u1(UD_9Y!)+QoNZ푷3d,.*r2̸ .Gf7=(lextYff+`9sS8kyXO!|GF<X NOO{ zqDdَRI?Sh`sњz, NZeQ\ZF={wװ?"jj*럣4B>vz ᷅F!҈]tPI} 0ye.W,BJ⠚l%gzG<8x '( ?6)p١KWX$d(LP'cݑ/<:ǒE#dƑgb"T.ưt晚~n@ᗟ-@?vgLym{b#V֫Robq>vgVtA%o 7htXZapGBz.BcPv")YLe\Lڞ 4#ǝ4B /Kl6t[{Y-*-|t=y^sQRh 9]>h1RUQ]/6v%U73o;7P/muzfImc"JC 9 & ݕ`%?f薫lXHND9V#wu ;\'l;b]f?N?߾ hII3;ݿ*8J' %!`Wo81HA="˫vj6_%~ZZL=IlT@imI[rM[sDi-@KX|ENϻR{ SɭJO?Qkq[! {[HnXz$tRU) [FWYTXSm+sxBgƬBF>:c80Qa#ФۦCNZT]Mޖ|8K@!_Q7tIZyQckf"}˙0^Kz9^)[1H]`W!/.h5>t Ux}ʰtppq?]9ˋ73̏L"Y!L1 |QkFߕ8K8\W/o֡=Mydv<Ҭ1N\ڬ}ǐBRAs)♃';u.<[]G5 fMLqݟ00T\B/EQ T2l*wy# B!bM48aS;YGkv%чZ+gU8|[om"jdW*p99l7bص'?x-ƘCqo WogVR,yEV}bGo?L"r'TqG촎F$v71U9n=ݦ2MXjoȊ6@°}^:/ƥoWDY?T+ B#A%*6W^FOb36.7A.MM GS\>6I6;2uL)TC,Bo~U,X{PYQZSjLQ)7/A;ȭ{yE7uV;(s N ڴͨ'5h3d4L5AU`kE,!G(eŸ$Q٬`egJ"?Vsmo¸ ˨SY1loÿ%w2fZc;U|M?,px}(2h/{fBbpO/ <ֶUYف0s`*tjr) U`6<1K|'Z.5H,'@O(#Fu҆DqR`elbF Jg Nh+!}\ʯQXDU%޼КQ<̢/R2c٭Tz`mchW<׽Ϊ }_>ߍ%A(i`Fh^w]Utӫ"T5>w3Ɯ4ݓ!\g\P"VNW6*ě\fIa^?0TOt׈! [JpeKwmk! +,Hzŀz$pK9]:2GVAG&quɠΟ߇S`*57*9`pZ{g"١5 iLhAG:} j=\->RfҖu6 C߅k0E;1>y@}+b Ur Ҽ4k 4ޕFT#aX+3YծCvw{ps1&rH.iLt;*YQ\ kFxU;l=lK]ow^yP_"T0#ŒH i+ -gǴil8i4A(i (r 1IRQ{w?KFGoH.زl::ӌyՁkͅRj>GprPN78r7t>޺sV&g<܈> -YkB a9$X1J-}m<[%}Gr̼hp ,'/kL0w] hwzΧ <l}` T eO0@ Z5,0UهJ3p@Nnkh-h>^zms9rsj<LŌiَA & 䉡f kߐ>_Qe!CJ9}~,}P>;H贇DmpoO;.lLW;Xw9$C*Y=`Wr]8@,Bɲa#x$r+Dr;sj4KD&^Ga5U mtєK3&E:R 1l~ZUW8\:ہ}9Щ`\cP ѬcC ս2R^/B*6S"MF=H*ɱ8qf*5}qFZXpf; 5s3F]`ʱHX~L f= VdK9R2pgK %wߏ0T džo+k{Yqˋ@+k!4πs+7x# :<Ѐ"wz9n297L'8Q (>XHRө1`T)Gt`'B˵3ˍtL>ɤlz9?rcV*cWSi E5o‖ʵ:"{vRn@HK1V-TKmU-Ӥ$w}Bh!Uw 9WwF W.HŋwOL8l;ȕFma4T W>A#Y1?5eL݈+l<ʰ#n,ǂԜX/"PVS zՐuhc= lB7k}0V NT9`j.#gh͞ʤ4E~^sR8G-MWVLtNM%f6Cisw?9 )`0^k'C-ɗDj? FFٚE_1Sw}Qj8+Ө`qQ!- .BOݾ)\'|:9yu.bݏ< XD^c(>H q?zʧ6wa2,LŔN8l= LdĞJB7 %d:ι+jD-rY8i wB%'\40z >VI͑ۡ×GT-רUq=Sj"1dR K*6߄iAOF?*%l;ä76E/7p*5$`G dӾT]#:׳D]JT, 1!ᣑ/v76:*u<~H=lBD_a9=GWrFgmHXjEE-78^^iɔ '&n[[Bblg Xr"ؗ89$mz0nFbN=Ue'՛ wiɸJ |\}F=ܵȞ^b pćTUpHúYL\vȍK_*e2ÆIvʏOzPr ~-1Yo+[B*3]vÌa\mP-X&uZ?<ȫӘ]Of:1 Wh(1^ v믔3&" {d%Z6e4%$#b) FuHPir]0fF?~sF*P:xJSzҺqZ؎5ΨFiZV5,bo 5%5"g ż&R}lj3 /u#2Dvc0z䅂ݎv3e;!Ts#l׻21)Me7f}J o}XʵAi[zc4Je8v Qҝ8@vWRte:SAyKĤA?P%vr_<5dB^8 5SߐmH+dLr=Y4ס.C8'G2J4}J K]ϣg ;%1q>7MM a)兢p]2apof~%P9q~)^|Ąγ T>Պ$q<]oթ`\ϡJnj.TDӕqxnW0_-F[HL3 -&z&$|D$/O}Ÿڵ*H@AZiST7s/ U,Z54Zw~_^`'1;hyi!-,:wYjRHوOHD~hj3gY dkF:i"LACB 9Լ>ٶJ ֮  M5M/b#VT~Xa{chSndg br.rthsn2 $F6~gk;S[ʜiS!(ߖs78ȶb6+㣚TZi`pY/9JYkAll#f6>;vҠuC2W֯8UY^!s94>Κ~GyJ%H&@ӽ뛎_ wA qÿ  `dӳV4p4w4c^a%aVٰVX*XZ"cLqAr;`jX@M(mÙS+E\e fm=Y*F;39P[CSjGw@?39/*7i5*L?CWE[2Rہڰ([fl1qzS-upZ(W6QY^B vHN&%s FdВ9ϙvU^@|a?kmE߲'-tfEX@ll؟W%o᥅>2zĜxT)orӴ aP(%K*BG|@Xc𛆏F^}E)[S[LP;D~a*i`ij]ҫ:ԩCcy3={"Bm_pM2\s1"6 X@N\H'>T[bX_613g3H`R_oF4I;ahh-rB/jAvh5>-ѯ 9),pՇpX>H~ ppNh}/F1& @82%}-x6Z><@4\4ЖaĔQ ۴ DF&VXKY-7Ot_ kN`@( %rXj!z 7iQIW8ڝTzNGnHI'O]bT 1=MhyDNoE̙ƅߟy2插M OE,Qut¿@ (\3Uɖ .= eYY7~?5o02y-$K}\zsv+CP'YLv۸2'?t)%$yF[DxJtsZejJ\px!Bs_5v؞O7+vs4S312ɣ8k:S@:uf O:+VN_U٧%6yx fsL1]@E2F<*%L*`y֘D|OWr<&! |({BYLkDU3 &T/`wY! l Mw'^-\1W[MB\R Yz0XY FQ~+.*md+PI a42T5'TWT('FI[l,w8W,MxOgAV8SX#dl`eovV}lu72jcj3jWfz~!|?LX쨳(D#~afscoŽWZ uYK@ N,v!VC8y}#wbwKɳ}:}Њq",m\s[ $'"7LKs剸T/>o#l8PnpFӇ|WDS맦}4. V2133|RZ]<)ĈbIkdm37A<)8S^8Z\D<+od([Kqe)O1/ mݥ!līK$WJlnJJv0%XdTұ#pkDNJKEi*}꛽(n:"*%5Us0R569ʒTKN#lIK;͆ԆxXݱMјqj`]Z`/oz։AO@]&.i;B k$}Ӽ2.y!_&aFZ~L ;CxRSJ[+YE*&-_: *{<$Aye*wwDmp uye+T 1|8WB4R1`§CAZGK+1h/S !f!8S<(-'Aѩc(b@SٖrUK\u5.cS4,=*ϝu)u7?{;KjsSWkCl3HZup2NQ}-DT2|a~DJjmx"RN}Iu C~1n갈-?ΙY}V];al3D[3:g|ihѸcjpvtỞ6eU&,\hF*\btn#-h9lG' Nv:2AIT1k@Z*Гe=޵\ڴy1ǃT˔BZ% ^`D\3y\N*GaHZĤEH5 0Ow0]Bf t+br%!%7qtM+JTK{Q=uA&Md$eCX"M.>3͆l'Qaꬃʐ^EjA A%Pp=:t?j~$7Rա"GԞ?h2@\>S|dr?f(^e z&%s[/J֞Ӛ?mW>feҢW˿R&{q,E_kGY ՑsY/ նKXgmL=%.w~~dHr8tչ|cutc@{j|{4(6]@r"d#6:  K G Qٮi­ړWD-"xIf+ :K2.I~& F*6ׄnӕ9x=kf˄&A̞ .8Vioz,I(yl9_—IalӖ#%ȆѠ:?௥2eT{DpZ#c4!.OVTwVG& ~Z[P|b4ߕޠ=2ި82thfzlԻS: 6r~bTAayxd'\u㉻vi{ћuVë %$ bZ*jVhH`:ozQ\0ni3_X)]|&33Xr'>Yaa))"\74]= hUMgUY0\(#W2[Zl)kK:Dn `36WY%CW{ISUJl fE y=Z)p{-T5 NafhЫcPRSsAKL6du^@(C"s;y^Vp-$>bҷь44D 9s YWbXl|q^AKE8.O;.jۯoP 8謏YrnAn+2o"0F@PSg'K7n}NHy*a:0:ڬvnjn8E)0뉨rdH%;GazD:/֧q;#FsV aʼn`@oc49}h81{&5xƏZkC-H'NYhSΗ}őH;<~m-c${n)t_ʌ0FW/?rWryN Cۑq27d5 JQ3u2T_"S!x*u6 JȐJݳ%/drD0Ui3ӢѠlYȾ+*i0bՎ+\a#' c.eЬ' j6ewMvMe|]Te Р'5 hu!V$RКd .}5Uƒʏ))QrrUw!vRoE k7uHҗ9nGMLۛ4d{O!ȦUaW;SG K܏9ʑԎ j{v`e j%)xڼu+Ogq$jd-8dks:ELmꋂkҊ22(8k+n[W8\,ԀC+ l0Y瓳x vz%]E#08?/ARE[r^WΧy$Hmt@ %>Qs-aνّ\ՁyvDe|}4}UGU @nO̵ WTus*̕Ch[Z-R}EIJ{N X%CnWғܕ.RGʄA!ԚpVH66YˬeK@hPƔ,M]NlJ.cʬocz =kszb``tlvN8y X@fM[* aճ+Ui0m'G&E#[19Gc_adFcBIвVc{mr:Scb80`RGߗ7l墼n{Yˎs,PعZ lǒ%yRA:UYЅ?>Qp`3L-B;WEԐ`X0@x\#Т=&GQijnq]ViJ= za6̟emkQhctrXgȼ4C;9.;y'|Uz?Y5LmQ@_D`o{kLSŗLZh!ʥ.i="_ҏTq*R٪e\ȵNJcbe?~{_ {/dPOrwi7!j[ 'Km36-Pc'6 ~pfoD a9PG ][I"p?9A_GFk iZ*m.f^5quvR ;w9|{:3b uXW8B;'[fja'! ˆlK `($ {!@xfa#!B>HRn^ׯg.J#IGp[x{yiD\.IY=F)[U:k$!ִFUvT#He+׆ \vL]I^ũh|n! #GĜ+6T2ԖW?dxYYGZ='-dHuq:Nxc(V'O|24њH h}V<sV;IY')鎲u涠lzގi颍X7;*,>%ҮOyTR$eb_un }/D*wUe'L6ivYG~\~$-h5߲ No溬b"vCqƭ.d~ݒŰ=n㑬P)&0n˲..VzJe@)H*SY"DT/Z#ޛՎ9t>NCR,>ʗF<7t&gu"RKq;ߒ3QOfeқj0~yDo>3@mtG:9IZL|9\S=.[e<w4VO=[/er.V eJ[ۭ39O.Z0p1Cm$:4s5gw6gѨy#j(]6^BtxOӵ9CI~Ow&uNlc !_#n7@gTFdASD Ioy9.ˡ-`Ƹ/bm&#ﱤWL=]i P4lXSpȇ9>h>ajV L{Z 'N:TYFкz]3ML҈ѲeϘq##j O|Sb|2mEt.7y%h[*TIb?RLOⵒ[:<ݟ) _sRFģߐJ݁ZӪ;]u3`-َ jqXB(Ye> 7}orr^iFU$ ;%YL/j/M3 Oc'Gl2~CUݎ54ǀ&)OjVvĿ6#Lݣ ƿaKż9!9z)>)K;4v!,M_Hau|^Jw /9 5ku:Ը.ԿjsjvIZuG ["嵯}Qae=ve!cW^g$1wa_W~!p VՂLSQ|w# )=SͣQ^sm@ :."AW~ W9苪+3UЫ\.`Խ4L0` ,KG4V}=TQQ~45˝RGTIKԦTwb# (?ZZd^kX?7|QQ: eD}eNj'黜V %k3ʾ'ը6V-?%I$eR5>?~hd0QP3Bx6j@&8$ö%B`]{rtA"-%p&gNHFtCKI6v]ef-k;]V)E[߅Qi duL"Ss2)Hgy}sU,t47*(YHvp7Н\dɤ؝:2N1WRnnL.Q5CNRDD' qaIT9MI{a.f=I̴p%'}ʆ3-w.@[;F* nN >Bc),]%4w~n韍 ]t(lN˻N/",*֟*,Kq"PiwS=-hp9̃^J&hwaw8gP)l7'8|dP4 C\-H# oJ|7`Y#5FOa3>N_5܍ʤ_oX~;RԤFn"e櫝C1$>{z& KC$$ϯQ('ս5>9 <#3:YY1_WXP%U1c]d0Oj"Uxi`d{fD?-XWIYadS<8Ůxfd3r><=ql*Ysz :XG"ںgT\YٸHw=獮\|dيqp 燂|خ۵MLZȍi3!a-/YCF?shKVbtg&C_:uz;[MՁtvvye$wzhd%oJ֓kR-FI(mP1&;D ѴKQ!N9łPJSZgHi\<{F/{,iX,$4KZpYA"3#Xt8<*^5L`ɿr`q@f:;q36U!CBxY4;E7q 9H7p~;l=%!@&GFFpMet4 iAO;:hiŴ3~Sb;Q2ve{wguOh~9S-^Q= DNu / 6מsV7Ds&WUeʆ v8yJ(^Uw@|)ّf6CZF^[ʾ0ݠU@,:@BxF!9/ȧ|7D ;TNS@dugi9ZS 0 ݓlTg }B+YژocIU}@Saܕ{ 4?c; J=qϵªF"Wz?)rE9R5GiڠL7-qnfjwU6YӖSQ4w++F E6 h/g!i{G.= EwZśy({QCpi1?$*Ք#1$Α^HZN}6DŽȃ|6#!W޴I^q bXahN;yqC`i|=*˧2RPҖ뺄|rOL7Lcwś &]쿾bj6߭A͛|. GJ7 `!iזzL0r*Yߤa\nW4ԟT} GN?OiN0$bY#(\`㌊bay-z]/`Y\F}Sr~ fνcrHnԳFt/е4Kpy{c4æ/[׭AG4 ljEy q #û!c?,8%UM~Ɉ.IS&p7g*Ǘs:FgJ6:.K*󵇂}@"+"CZ[f ~tSdCb*ߕ%Yl s|n"((CUƵ'CD !70';vHxv5lM4OVAI9g6ITP*z9†v {* .oQ٩*2X$jR?H`ҫQm!hq2e>B"R'P`h5q h?=*n1d?w_MeQdף C4W@ bo(XmXJ-Cᑄ ڊ@J3( z$Ed'Kzg%79yĠы>Wh])\wq)I ?3i$!CM`]ʩ[\ꣻ"OV^kLD 5 Vm^g9Yc)>K}އ\(3Ƈn?qGN!J<@Է_^.P5мLTE] ,/vBWԌ;C^| VD$/|є\Ur>yqЙebO;ɋM)W1ao+G:]t̄*{G2orl_砢NDׄɍ/@VSdFNx5Hۈ(&dʐ4T ZZiXۿDfVgqIm*Lr=ƉG@! K Ͱ1Gq4҆^> 1` EǚOC6y$y G,)$Vh&'G)d{Vu7T-{uhoeBɶ`7!l -Ӎ6]Ӹ(y4˰|$!vho`b_鉨KY}]\>I{$qC6ԞgL c }z&B/ a11ŧFv (AX=mPR~PKtO)nN]9M-RWOp\qKΪtSج wOv'D{E[}0OulӨܽ*pY,퉁FXYFwlV`NK{[[)B!]!`l0Qx_,DwT`t3mC-(qԶ,~xcj( %eڶ۷w[-T Vѝh~x֕N_Ӗ}ly_9Dz߼PAyS:E]lg;`,ۿU|x9W٬KV:<.)iMIUB8.fܾ* *Z)1 Q5Zsx_ x%jZT_z<<uy@[>6c aQU1l)]Yk#> _$PD_O_vMp+&܉!oK@\lg߅jp|$XT*Eud]EPW`'pLa*Lo'֑i~t~DNW"n-Tf8(e;%ԓy_Ĝr M_4w>"jی3$^ITjWRe>؀+rmݕ6&*ZoSz:Rvq.ewu"H]žjT؃sn@2Z$^#X۝@ O{gr_/@8j@Zh%cCt띐+P;ЄaǞ?ZPZsv P,tLvc-2 ɚ?a芔r){BϽJA[t]fN26ڦ/`SK6ILց,ndJo5"mRoxRlB*xLwmjM%; /TX+cV% 5vIfIgҚF X8\3F=H=2[#DXK%Q _nb*0| UŹrӇed6Ԋc8KTڷ٭%/v t{'5B~@ {'lQ? 9_ sxP9f"9 Pުð[;w?L8ckUe_N{ $zsoki K[v) [6㠊,2) >:قN4|``j^Zj / Ѫ}2]8\Ǿ]c~0-D|$n2&!-;#B|"ު"JykƬ◳\a袄L{k~嚗t/ ܵ O᳜7(W*`\5H ݟRHiTa P+Yucʪѽ)(I[10V(.W*>2ͮ M# ׉uDs sg7@^DGkO@7z3viZGwQFjQ$(!  )ֱB%ͱ2NZJK5~C=&y Yفu(mw>j[% 3,nH)\ޑxk+ ]!c(ȱҍgm Qhٜ˲Qg(l8nb`e{#TJ;>~yB' _τdU^`u.g]xǻW=fdnVk(|֓b2II(l)Y-%juzڀͭ ,>125('1&I>/C`#7\1G_e9ҞyE瑢ZqA@T*Vj"Ns$WqfPpqL3!MAt_[xIKf r3` CۘS8p2m{#ք,%+KfʇԘ 6 :1̛bQ\ TK-Jjk5*$a)s 9cunF)3LwmSJF Nf&Kͪ#ݶ w/i csYb@lGG:2ہ٣$=ZXf=g5odu()[ 4B1W#k.YWE"4 # 6:Fx *&anjt(eg?Vn] }k8Wͼyzm5J_1lYo X84iAmWNX⥨bAG5!~o]ߘ0~w)C}1 ĀgF[ݭST, "ޤ}`~fũldg@Jbq}l;>V8źf|3fO5Yp_ 梴5a֧sfc]m_lm!pح4(!䈮$&! ]]n}tQl_):1.>S^f4T&yS܅M5h ,e;MRmv`n0;6HL?N~wP~A_vn-[[u>9r>ALFr0ͯ[P a=;sH W3 cW^G˲XfuI@*dz'a iv˭BaϰӥV)I Z~D1E!YoQqiTY\p|.=*lû%rQuEvU#fzq St55$3jA8X(/FiE9=د@;vBt7:0t˫\A_缊~'YHLDbUa0S&k91G,I֬ӻ.>I, yz-y)zx=+|'kkWE<2Ռ^G WI[1AVFnTE!TO.٪,C޹Wƹ~1k\eh.ju\rZД N>ii|E醬hpHQr/fP $[Z=CMδ~)twe}~ȰhG@Aw8b/-//K1 I@-SO"J+j̭=;UѽJDlZ.քۨI&6G<Ǟ!( յ@YMmmFW&G~BtZ&DCȣg1Rzbo݂5fn/?=[h@\kt(lCC.PBO;I|Ll7k'5E&ͮ|eI}/tpf]@$V؄I%NwA|hL0Pd0}Ǐ_ |sA8Oԙ8Y?6 pa?i2>el YT_T%af7bN]"未S op$,mj}F.AAvIx9()ju8W0Q+7%CeC[~;:{z.9E!*K @ Kq4X%[FO(K@SIv ux y=kXS07h-뇟-:9m ÷]2=~Q%ocağ'PsIbX'ov~]nNS4c4"gxdc_ JhhfPw=Ŗ7]WqX/9KgNH_puیiQKvgf+nb$55HƻȈs>K"B y[WFi9zC$"@j%p'%EtO8Z]7@uKʷ hJ&3'wmXb 0m:5<| H.2gcjgpMhB a&`l()F GbI%*P+#LG ϭJg7I^ћȰ6Qkb:O8LݿC6HA%Z)P]!3X@T[dLl 4+׳En]hFܰYu?⾣r`N,1&S"TYtU~~C"1'p ޱI>UbNo{?sr [9oρ@# [I+h`"9)7aN *=5e^Qe_a~S~˽(q]6ҵ-W,`<o!OzQ80;]]SջFDFU0Ӭv)nKO4DAbWJLM_1rKPVZ5n4$Z$L7/NVbMtW^ȝb("R:u577sq>7{nfѩpyC&lv"qȰ*-Gg5iU^FGCxT!4x@=YP\޲ЍqCݥPwN)g}QU@F"\d` W0 fs=!mn}@!p.vsI;8%XÇjإZxjYQ>.{&{}S_ D};eUp)Jx!d ydz;|g;Rʘ;H$>Zʇ{N ǡa^Cs9Q@SMϸO2vRv3(Jc{O"Ͳ+hD,?\Ղe/RE[dK{Jip~ 3Q1>|Fvg{%d!0"3CRm)E. zN@s7|h [ӷ:9ĺ]b/s'[^ѷ45\Lbt|< irrܗ6:崙^*bYD$aet7R&"jq]CQz@ &KCF/º5Č ߏeܾA̞s]6˫mrvp0Ғk]CLʷ䊊LF`4@KZS[Hcd|c1KGdq蠒nYu4݇S~%8#PсedIB8KmGu y-Ih?`_ӛɎrƿr ^YwIM?%+)e-Iڐ%OΖviY\Vm35뾅 %.MvxRxvͰ(/CD-8`S7WVlj ܳj[v\ t,;aG/x&iX*B-LhTKo]70P +oD1,Ճ̙!v4j {i663[ѮWU@cB4AԴ ~Es9lf\NmMܔQ@ QA]Ёt s6'$Lh翝b"(!TLE3Y>awGy]P:zdn-5qaz)aB7BzJ{EpC)^,wQ@P5bM: q$zehO*Wۮw[wxN`=6So}2̡(?גy \'s7`CmBRYO2|S$,eP!pN:@X:ZgYP犸p4*k>Ƣ@Z~xǭҨsyV!];0)#9bl,6F%@@HoF_PE;NCu,jܬ})!T*4WfZ&#aW%_ 2Iݥ72?Lkko. ,z\2,= "ȻUAeǠpN M#39ĻF!a>(k׏E^#ɤ*ڎG-u5.`0F4kX-/ue-23竰R\\=(=9^D$RuEXgPV]ELXB*1ITu!,}e5vb+{!͈)Iά\?aii#A`n*1Mžؕ5p7Pr8ITMW'h}K|.w%;j1D2M>V Uhַ|bɀdPCX%INC *xtT(ȸ[ g vb43|rCB&ulD#JC),_qޢܯr{ӿd1:9:| =UEď`@`T/5S8E(uP$.8D5{l ןUrmt,ß^.&0@Ym;ؽ(1_JHa^szBeHٌ1jtIƫ_gߒ-Jg4f~bEqZ_`VH'<ЁL-sfhp9 |ؖD|n.P#1R^wG5oc!B6Z4~RIfX7緈 JA֘bA⫞ -4amFxzj.&hβ:,Mw!0RRLj&_IMIᢷ٫2x-:djnD:tEGU6YQ0wz;aI.h߲P=H |;>Y[?BBTҖo!!*RE+#rj2L7uZjdAnUg"dZe>N@c> D@7Wp_ŏ"9aQl`2ʥ2B{BHMV*e2,@dOWYMD||UUgI^gcL氄4 |\SJ""5ɂ񪴋g d2( l'K? vàW{cl []lYw fJQ}#$=RqWu_#s=f/<3ݯ:a;p1{ص"qoԑZgLINxufMfƲM3sꩮI~\|V[Ta NϞ|3;Gn*q6N{h.'>g[U ?V&쐙$:Xp-233Z$",N1ݶ A`0 >_S\+jIΛHkTv#kh>+\VCqng3lZH (E!w=aX@6\3VfRB gbSbJAzt|߁zЬ]LHBiJωհ ݢzWjmխMٲ*w6ԜPt;$@h %ATf^yL\6G2O5 > z-吚d#3vYuZWM9Ư_ WETpD0}}A j7Xʈ["ǮAraqFկ ftE5 rêJ0DLhlh6]DtJ:RP$`H7tuy316hࣆKj_5NY&ZMJ9Y4TO nN(ɉЁ!O!B`6Ȏvە.B?%)zZXbȬŎ;[bYx3 "pdžJTϬ7nW%I\\@w_,uгx椺HF>$$wqC5m':w):A.]NĻhLs8AO?mFp/g fBSjx*߸ T39Q˔N|zȣSK$;; oZi :s?:=?7%~vX[gtܗH-->ko [vgr$կGs1rv Ӑ/Z]9Lz7fyi(ehøW |*-Ј ө NcQgJ\/ۯGIψ3BcAzz.R~cBF}KPHw V*HY/>;}u9B?.vsS4*S' 9S8VhQNeMSl|!$&k&OtUA*C#|2W00c@X&3l;fUJ˸!@S8+%v.nxdƂnuc%'eu׭5n";nvc)AZѪŌ:m$l̒>3ؓM Vj*۸Օħrw98'Hq̼ F\&'/:˃A8-2 do}.A"mӨ7pwm .)i @{FlW@b,F'vZwAM w^Ib{9r/ڌWo ބw!: 2(_ޠ9$yҘE}(%1@\Tnk5.*w.d׍&U[ or Zf~TmWE5Ժ(C:5Q_H/,&%j;LTS *nV8"0+sB|=S1DN õVKig4lKh #oWDi C-ͩMޟ/sf[T}v&3F~dWһM ~؛e/\kO@b5RH~PMϟh.A1oZbSly80{!1邙2!]eF)x)bhřxt`;h+_s"'BLP96PDAkae%m9W;9c͹9F^4^虀LyQ֝:כ,V$GfmneF|bkݏ-x(";]8Os+Fs,FqN>s`=uA?"(OpqتTN)%Î,SSySO™Sdn1/s3?tO^cF$"yc"*iѓF[-$ھ¹MEYǪ9Ż5% y{09#ڿ? ?eW{-O1qHQ ǹY^1338RP ϋ=~M-^EU*"#jP*C.v4!D"Z0,bLݪke#moȐ,E ev|^,c꫞:!XTuۨsGCkݜ.3Sg+_~~4Rq!&,OJ ׼HnHnSLJs{Nai2+f&úPot| xZjH ]gZL@;@b:҇o!#:e|ҵ^W+"%E67~* ){.,2Q[[Qg]dLoEv4-a@D;*ͬ&~h Id Ks.G=9oncd`!ա!7l6]j*}VL:]d 9L;znmWSTB1g g]0[j$c#K2;&\%^Ǻo(b(CDQg\lx2'S%Qd;/زBWQ czqWACzYȦwnQdojr1bcE^]W64h<>C41JNZY9NgXrsoڀqf6*#k9Ul Ֆjɯ%"H{zN(KGkXBfk NG /0pt;(>>A+pџ/KB/jQa6+qq:iT}u[V'hS kgt, ܈&W1n_U.ja9B=v!H8,bCX]:G2)xl?:6xS~asgꧭ)1A7G8|UsJ׸ڹUQrGag0nƾTUk|bJW@hF:<܁nu8jeA2aYK.t+g=j+F_HQ7ɐsq"M8ӊ Pɻ3CCZqbՐil#4V% 6AP+ޙ[wa[PE݉uCiľƮqV,dI1G=\7NBZWr|s۸2]*yԖp9AN*/E܍FPt!6 K٠<|P&B\RUN fi^BFL iZq@P'Uv*GK[% zKU|ЙGߵp:<\.ƩP&¿`ϏAH Wz'xr $ Հ.1Qo$+P5?J~ .ee*$ƦSpLBэ{j7u" ŨΎš 6wRH?NXUj 4k757ƹ*>3,;ӝ?Y}0,uͤhYB祣vM׳XHy:.\dR}vpf%M81M!T}QgMP'i&[!%F#CKI29HgEK=T @_"+=~40n>D$<FC_sXDAYE'(^}.>QzȰ$v=ԡБ}V]a8с*dHX[:tv@`&rw=;|!t: vT=Q]tXUS\#RFs1DaW~,prlAJ_ JaYPi|k2g{jbir4Q`v7f=n(p,WJ9Ex#o>P f@u Є ]~cr(^]]dVnCgB?fjtX/j7#o?g3P'/'8VϹssq((Vk5PK_f4\Q Gr{5􄢁,a~21e̖LI!l3`-wwvQs&K]PWH6pJ+(OOzJ\ DC1sU z| +<=ĻlF ÅOT)3ol&]X/uKV_N /"T>kn32uDh:tH¬Q-~p@nC1[p^P'VKN׊azr"HY=Rf3ot?D2]]\PVB8OX֡s-S{e3dBrA|W!qVCLv(%utw:Q[,F6#FʺdBcu޸.QDLNl7O"(3ݾna,S봧~KxbG2 J>K׺i=y'裏1K$I?TXJ4&0(CH LH3H=&?^ !LIK{."ϰ"l L lFqYG(dQ^oxAqpR*@*":ZF_+ B9$$ mdBt B6j+M8ߎI <ЕAW*ˢS >ǁU~۴QѠ}N㋚ELs kb 3sYwR 9ĺaW)MܸU%~|( w榅<8G[ +y5WZ²4Sb6J_^\Vj_ƓT2m#ڌ,4^289Rȳ#my\@u"6qT =vA6x~m/#؊пA :F<.gEc1fDzߋLniIKiF!_+§h֤q0PD 5>k q/&dj4[К3e;,٦rE>wv\Dd0[O|VQZߗ!J$$D4DYsXMӢA :#Zc fgп%^_UkD/ 0/<+/K(.˪B`-6 ŧ"~պ9mey8y+(eAmPrʩ4i>K+)-پ| Y6DjhCLD:g=D:]mTiM@`=r-LLkKכPvt3I;r*0y=![+Y7&``׻tv_qB! $^b$呃P .Ԁo5?Q)Ngq6͉*9IE]y=ɺD?%kL#T[_6G&<%ٟD!di9ak6̥ >3#b"]?;dݑ~mn0r S$U"oRBjyLw9I:EL-"˿6}M޵+Hag_r-oN#sćTc'.bbXo.Om6qO{yGO:)u೑xx^s)f t^4ds 0êbz܉a%,]jk (-\tv%UnWg贝NSM}k $9#{bm='LrqT7eWOkP_ڤ ^W+xr93ʭ=~U Ƃkvs2ۦG!U{3{?m2dž[.YňWDEDEo4lu70/196޶<8ap궤"M#yD NLZe_[ umS6'_W#n>Y9Imƶ㇣3j!B,kIx2DT- P [gSfG2?׺^뇂R=b2SgϩQMɇy&\M_$V^aK#f$:vDmV*Yo?U)9a&<5Q_uh.mrMۄ0 Q9J,'qr00pGՠ[F\_ke~E|lׄDpvurIg;KV୩a?tUkXE~ێq/cOTudDKCH&KQl6Q}Y޿ϐy+q{㈒T>Р; 6  8fZ\=s:v cn݀?;71Mo_M߉p@ҥ턡nW:f]SNS=MKd6.l9전7mǹ%S6c)B值.LdV"zW[hU0a` Mq )fֱ5%!<;x2)%Pm{yT*o1_aL^A,gTsEP]~BĜp^G66Numo`?NQJo\O<ͳO9)̤$m]ߝ<'"9"{V![/ 30]ХJ:*0BMɎ],s Cij=^D0Gm)*p.p_!=oP ܌;1ꥰ>(_@grۘۯxD p}1ؔϦ.zeB@9"AJn[U]QKUr`Nog"ڌ`ԞO#ʞržˋ4A*vk(@ ZAS)%A^Pp%LLX|#޿)&_[ d%<""}2'eV$k߼OSgPx,ڲ(@a M9齳ﾴS슪 %"sCF~Z0Z ɹ]' HDQ`X^< Xzr/32M p2`2urtoj&GS~ΎKhіZbsX8 MH'>dY3ZkBj_+K?IpnPNTYLYjK za۰sܠ!C]V6¦M Vo7?*AIe1a(Zm+&c, ݴ e;Nq[K~d%;b8GlNp'~{ta j psV4 J=u"Z{@;c}ՖRrĬkpπӔAmV LfhZ KFn:WݻRJk8]OZ~'0Bw$Q/|>`g=Eg5pX%Ѿ0 *dK; /MwICn[6{{тw1#]XTHʸ2*DbS\ IjT ~ěp_T9||X/NX3CRrH<U`\=z!븟N7TΦ?J:3BXC)% bo9255.SVgxjbMm]#fi?'.R _uR<նxtytZ(t*CoD}tT9"ÿ^mcUїp3;KcnL C})5~n`+*ɕZڙ_uWzF_867Dv9>uwIͱEЂ{ TRf%-9FՍfuќpXtes=Ӱ =P烽r"f=\Tm,t٭("h- CcUlɵp1 GbRCNJyR*C•ox]kmRռMeLz y#DXcq7羍*}z`<`07ƜyolTN㾂&u {}/sN3m0IJYs%S?X aAS$=:~A8jv[gr19me㑲s[7)"x Q@(7YHdo+oYNZ0e()o׍͏Q& pWܼMJ "?OJAvt`G ;sL\ q %콪ޖ@ḦQ뙅\{LlA؈:hoo),o+"[ƩGFwzҮ4 unٵ*R?0[|36X}R/7w ah0@(恌Z;\bPnC6ߩgt5-sT*U4U"½AScp?n=Pb }QHVů/Az0}呎$u1/^gStqpĮ1O^ʋpQ~lD=\XFE9 yY֗o*krqM:ȈVk3 DXrij= VcӸRMX>+6[&șQrӏJFtHu۱o't7N603,>w@6kD,_}}8(8B[YP͇v&4#w1jpŗgo鍫`V白h1OO}= DLQ bLLMXiսKQu˕m!DEM)뜕aĜ$ pJ{+F|ثu#}UM;B&ڤhjNH.Hf_ #F1n|uN@l2IRY՝VTajYw۩dT jz|̷nU |%UU}}>P47[{옯{rޔw;gۘwiseϒ_1|w5 MMR"к;r (A,I+BI1B:kAt|,BgR{O,д#>")'n8P՝u3ONp*%VDlunmh?6wfSGXY<|Ύ+W"jin2wYJ!YsqXV3=4ހma]8%OM/4,TRˏ4sΕ_N:ݪ{;[bifcMx7y(][¬jwZ?t-m2x¿6jBhq95r}u(}`5p! w;zſlbf'bĖ_ *gWC.}djmiS2Rfr}M=ty ߶V& >J킼R4WC\I+") *ɾa$1^%D!&&S1z[j #cygrOmJ*;8dn_9j*oO$CѮؗY(JV8._Yţ&>;Fq.%.#< ?|"_}M-[݆6gCs{)r3U 2]]?OT!l),W:@CwbU޶jc6ZJ2e$K[HϋAc 0nnzumOf t Sؚm@jȵ1CF$Z s[NZGyy;/_][h;L4>#B%H@:P[  Kn,CZ {@S1]VUmM :lr'2TJޱxbw[z cIrd"'¡f/b: uDsjD$wBH1<`aZU ?GFfytNk,j(l"}H@ `$*}" гOv~zlk'f|c i uj誹wa%X8kq)ߤ7Q%%NlEw2ktadb8avZx,!~92s70\n~WH8UJTE:ӫvpnmhɕf ﳗL! XqxTS3xޒÍ4 H]fꅘ1OFm0ꩅ{)ʲ/z"U/=lpV1V^:+FҔƮzkPW^8#R#D~2 w-yLb|Jͮl6/ )9o'F=&\viV'Ff{9z.)Vx_`O'+g0 z>DrTwwY7$3枮5_}'N`O{i9ҤT FY-wD:Bdɷ_ibAxB9r#:`!zBNˀ7rC59/2?i 'o$"YC$T/s mX I= =;6DON I,*,FZn\v4ȁJF}v7{LMHn^SϬ6ξ{.X33Άh)De - O)ƾ} ZnB#j$U4f[ Ӝ&nwzD8 ǥCub&<(+(e/ph#z.96"*)]dgX&MzA8ۑCs=:tYc('){'f?b|N=y6/ ‰+&OYd潟v+qJLH5VyкG41A9S>uӷdNQ Z~LmY$c%X{мsogLۑfEK,S,,4{v?Gܒ Ә꬇^s}ŽĎQ.$sQ\nط+pdnFޙ#-3 \.ƊYgA4Fw~ r\~c˪U+k7R )J:Duc6Ѳ&ek$0\~h@{onaBE;Lp7BYbw@"Z+*%JgY{{WFTAveQ 7bjcIEZm:]@27upz<=i/w| #l(D( ~) Ly!t\ |cf5_ R ^ZՋ$0ƀԂ]WC-74N+/, T{-.a/&>%*:{h :)'9HFE[}+k} K8 N")įKE `+e-Mn9T)xqJŒ_j., \~!d'MP dC^0h-#Yl=8iySk0^G3AҮ.֑f\Oj:.݈Ԭ-EH`}Jב|q߭LMG`m\XDq\O_lu7xJFs=1D'S=ף'|ڂF~:0.+GS尪mY @J աj=%N-i)>K).2{V3H'Wt{0zM;(OWMYyq3򷧞 -ъ/?ah g^K[:¿S>:}SIYU#lIzK.Xg}:6C:0$8ٷ+:|x C5?\i^Pif$J"R'D n`/eHH$;>@vfoKN&u\WHݢ0dN+dN>RT T )}8i n5I4. =)MTUHw)Hir5]+ߐlƅFD}Lᚧs|Y<+#_bNA9cG$1)T醹6;TQ|Z[YwpHGaȚ8iOP~4#!mD9[ +7Vyſ \:iݕEkuy8ryUDz\Ns(Q*:{m.ӅB#f"oD&^Nɦz+YYt(`F@jl~^jhV/Ú'hq(݇{9EKu  lo}"Ыz 'ȌAx*$c9G !e@?42s'l뻢_?~ZH_k$lmE.c-#:x8f2^"hE9J- W7cZKo M(SWi|Zrgb86\ŸA78][>BJsJ,liYwZ1o|,nK0-U1~=99`XJ=1qzGzOu&,7'6hDѲ=Qгr A8#?)/sUnVqeHb1gI.!XRэ_I*_Bl{ o֐|#.g!E}2Iiuhm B}8\ ⸕|/!}; ocr(̹[8lRVouWK;(U:yn"xBuvܸ׫| `Agp &9vrC>1.V޺y{쵅KAj갋R A@AIXV> Rss}0t`LE.fQ!YJn;2m~ns$nWƗMBr0Tf V04dmڮJy ؿN Wqqs HJ6M֍HNcrԮZRb<pGWV נ;y8|S]C;6,ႉ`kI58J.ipO;'ՆjL鄣$>9q34K*8Ǵ8cn65Jg!e&Ԭ*+)٩Que)}{-n!b[sǢ+r+Ö]-"PTڇ*ͣY<:"1ן~?Ig b36Q.ȴBv9[%!>~=GsA#!~@f~5 ^uAچUj)P&ߞch|~p=3 e]3ӷ\}n;^Nsce4ʰC@*9)6lxoQwɍEN9<$vcZPՅᔤiqLhH% SG mr js]"63!xp:^MND,ܒ*(K ;sw~1*MFsnad|T ܒ҆Ea)XmGYeʽxz+-IJJڦJOYC`^|k4` &0AF[zu9$Lj{Ɣ;*<ZKQH6Cj-(7j96\|w1AؠzMGnB 4Oimbrg9q ˜[z@bj+y%3/1 ]$:C>k:R7VE{O]\+ ',s4uM em%% /)mZ5!X :t൹dGrE`Rn!Q{=f5=JʭVaw5)ZONɼz\u*to QBqeKĥ/|/M!R66QjV\ dEȟ@VSw]*ޥEq:SӛnB|$0-&hy';H@BUoNVBt*lr9hH0]:e*/~iі#$X8 },fUp@Yb@UXW *%H$#Qnw}5=ϣwY `v8D֬t.Ys{`+ڣM`G 5,[ɋr9"wc-s/f"WtI'iwJ󎰑 @%z!Ot0Q9Ӷ_FhؓM?)GqMϏS[z=AK[mCKڬVSc P9*+e5BG$}% tQ+?Xpw"ʖXJvm'k>8QEǁ[9\\Kl{mjV풞y_j|b˛ >y:m;Ia+Vy7ȩQa %5oe{a3sn92i8kg҃TDW2Z7]F2OotfYZ`LT6BM-|.dQd?dJTfUtKKGs4 kdUF۲)  _ypSe5KqPs:x0o vG;GL_jל)m4Enli+ {#KsUP-e'Ѭ<+W/8"N #bv\X%x1߲"p zu"bA@7GS" P8Q6XIQx R6<>.Xr3H$[ItLhAGp.b-? Ng+>e~v*,5[}>n &d4|_ =\ֵb;"ƌ;nh/Lh&'p KmUYxu|hVwkoFYa7}gCSN"3s}͗\mg*Ԕi{{/_14ڣ~*Ҷ3Wپ~b6-$[槔Y\l~4l be/=Эd>R2oH~L)Ruh'a>+S -Y A6f}Jk^\j3{A5 DK+-7)y~HGt<GਢP@ֈMwѯ@r'ckvA۟I}g P uufV./6miooΊ&hEnSUS]F@ZM_P͆o%|(J"˒:9Q өkZĨN2hv*v̬ܒŸzm1n`E2G&Xg/X ^']<JrAn$,$Tk2vf`%8'*QPlA}5%x?fW`z@NB\,^D7tWۛA~Wo^Uh bn݀fJ%& ieSC#.,]lzH+/0,iyslߢCGՐ@V*Y?F4w5((#4+ppa S* 6 6Irb#d!Uf1F>-w\ܚ$+˞7 ۻІ遛BLO\y V/r iAʤU(]$ƨW^3_"Jxx;3YfZ0Ib#ˏ"PJ}=a PN8sxr=U~2Ym )XKrPH6PI'sr/ހSIN֎< "$ט.U2 ů2! hL2Tg_np $dع?7/(i E;96CK^S𨭠Ci,X^d% dl۞&2N!*>6*bc{!N!4VBe5"G= } NVMe)WI&7ҲH8Ro/GНF[=ױ ր=CFT(/pHX3P*{84Ni"m9f ]kҕlG0ի1b ֜sۃOlt* 3#Pӄ۴hX8OG!'}d۾ F7S 4!q8 MO@˯ݟ<#R/z˖lN,qDϣ0li sOƲo8E;Sl'{,3A=dLN4}7XƖfJ >. /A?an^JmpsBp$eM,J)zDcN mדboKo_?錦͍'sZYfj7I }[y <"=|,u RR)dj#fԠɂ3[@qr; b(QQȬe9zLp7RG} u eX 1S ]־l_fFc .5ZI{Eq]۩!VcF" 5qblwZ6|Wc:_; iQֽ"C !wlS?&[g&[x$(*|26YkDJ va/K l#he}“nIJzC`AyǠOpz}%xBp9 h]Y@.: fF<+fܓ)ɷtR"nO()voVB11k#Ќ'.S mѥ3TӣPK_8Ѡ<ߪ\s9TխPGf``5>Ɛ=`L&C0"B >*;{4 팞cl)yW9]p,A!Zbc[CKGqpں8p(":h[{>D!G 1KrQe, V:nR4Fn@ |s͈J)RezbO3ߚNF s[z.B,~BH4O&8PII0SoޑmlfDxOq&+DqZ-jXk(|evXO HtH:6٧5<و.0eՒHKˏzw!Yc~b@OR*aξƻ~WR[Vn4Ug4= LAeLClqIC_M L#V󛪎r3ǀPwO,nj??СhzaBlc-e!.>ae8yGU&&IbL9Q%IMѤ]cj2lhsz " ]v_& vq51"=?i. Ira]Ĺܵv3 dE, < &I(&ssw0?{ϑ=AZ_Ur$&({x(_?K.AFLX':&Z:E+9 LZעo#q(AbA``J䆯4^5o ۡvSI$>'"M%YR v2ע_mmoOXHdt]E}N'ѻV7s[7c*Is ƿ3lw`4DZcxgC7)?kXauho,;J|99jۊnJ9 k?;TYPWW e~Wߑ%cúQ벸f.:_UY=F^ѝy?KSg[X/Ejz|Ԏͥ`=y`;Ӱ֋#bj쌩wh#(U%'{{NkA0ZU,*cúc{] :/ XljۯW`pNƲGČ敇h9*NHity*:L޾\!M0稐Vz$%דgbaRcF7cg2u= ZSNtK(j{N\@LXˉ!ԅ@r#@bY7a}~AR X9N%-d}Ke١Zx髴1(eA^=@/8k. SoUޤcqP!1Ui \ba$ssaxQ7iD\aGb6.#x[滦\(*H\d:cm5t%k5-o,^i%<m39ܔKzrpqu gw] JOxu{Jpvy)ޢElỠiqJrmhgjT1uuD%:qUz"#!~^N_~ GK)qmV6+u@T1~νZ2iԏ b>irNPU &7]A);RFyR~kMo+ )\i؅QMCCǜt7@p7Chi-ED8ocU容R٠8呖(_,u 9^LD4s˷[i}5'o_G|uEN/ J*ޭR=G- . _ hD>2ڛ(DAR(j%08x{MF gTjHs2>H{(ӫ[,yW1$-Q b_Wt>V})p'XvB!~2Vz ըWj$cկ^ߴЧKkKF/,:\=qLFiEØМ@έ#1#/[} 'Gɲy4R5e4;FcL@`gO_,!o4[vJ;@{} =s`uI?A'[~BMwLC TdIWW2;GL\=P{Ф}J7 [py%kէDţ&`kz5ԼU+>/oXVn2Z'NrG9ҧӪ #Z) 9|uEϯ(MzЛ<'2 xMrӜImg;TO пw;"0·HJ%\V4LBM'NwQcB,p\9>Ȋ:{mA&yɧNsڿsĴ[MQwaZfѵ)@ȸQmP\ jo5"'ݳnN﬐@C5(- a`7%k+뤞?myNNlqr+o/(9cJ4{esܺLTX cBls ]ڬ 3)3M^/Ƽ\-Q ]Df՝Ji,)4Z; ң|H=D}< 3IUh/Ě/@:uoʊE+B s7׿Yg FBIԓjQ/~kx}oz񵮆B1G!T6޳}GvB/OV ~vߡZ dx]o"A-e$NI#E) 0zJЧ);Б7"l>X"8~ms@lB%Nz0x.%\#̀t\,Mho#פlF\ڽ=Sm] v̌*IRb"aŀpX 7,CV DWNH΍ X}蘠.;!en$FÅˑ`IRZGf4bE İJzUȋeۻn <Iqm]iӵRJc,f"q8B_V/g_߳@ժbS)4 U`bl*74 ̼F()Sp>Mn"4j`:*qP͈v WQ7%>%Jqie@V WVLo"BӥPBzk{9 DA=x^^\g.nZ@\Ei:0)? Ymoq|+e-\zIed!H:%D&w\}'y6ӸQ?>հ!]Mzk%ewCݍڥɿܨ <1&7O˔Vi1Q"+>}˧Fy>ݽ!Cju6qb]quX9[]ʯ%jªO6jQ0|;[mUh3FcL`Ů MNTrj$d 8mCw\;0AB3V1$jc 's.ή#T<+{WG}#?*['JR%O2]񿰵b1֞旟钔ySѦ~=C/p͚h:E!K9ummnSK ~mkpmmÚw٢oiK=|yx+jqp?`i?yqgH SG"=V yQ7 J^pZcCķ",{(6CF&\WyAľ .6Sk ƒ؀cMYRLhiM~(WS=]?ݎz(V<ܜiMDʐ8ߩ}(<_BQnlŊ3-TԲfoI(u5^uYɤYDй޶(Q0tj9M""(rp{;P !7@5O.j|9j h5pWZedڎf;󼃔GV^ m+Ԕ>0%Syt0_<}-d_=sa(8\?'F}p0=.>M)QWjU;D!M}$`4;eKKWj V@z8[U=D琄;?["x4\< A SJ3h7&ʞ5^dIq`W-cQ3ƾѝϮXÞ7-eP'I:a: 9 ْIќIeX]Lҏ8g&_=vղhVcJ *vQ_kgd.xEb+<9L@ ܥkg,ѦšhgJx\>$v[]8-]}h!Qn[9h[Qys,,wdQ\iAES=]fа0kyM;M@c;&x4T3QR0ջku{oX7`suQ ?Q!4&qE+eZY (U5}YXC4mF`+vG7bԇS0^R>rV1Vm>@ZnnH"B9mjLLƓd^L s (Ą KфhoPǛE<;\riSzmiQ8CU2U i$iITCy~/lHuulM+hh)DO.i奝sLNO5&)1seE X9WhYq4]:=Y[CJ _41" }3+dfk!;! +X+\N ru)6iҁ<2E DVi%~/ ">Z698(FB#yPMEc etxݎ3pS#6xyi)@qwuGNQ-iτ7/*!! X)ֽOdtP<\T2[/U8i (4A[p1&^@qZc6g͑r/:uy|h\!VX^EGEJ/қU3 UTPWO 37k'6,߸x =ѓGqTA 9}nC:7Q =aSj涶 1pHhzxyXQc5Qօw α&r[Ъ{ V/'Z=x5gz1'f'v/&l9RhHP=PyY9`f&1~CP܅aVћ,!K|D-]FV!t:bP^C|a#LFG{ٟ= ԙyW}]($jưh>!=[{3mRCVv> d 1 ˻=VN#FM"AՁz@iWl O{-%'6~F9~3& 8˺)mDcCߠ9b佾Fc6, -y]'R |:u@at{}jek<$/9Nz W\0FFl_f X3)m1彤j=nVjUuo]OpYV&mCU},D'k _e.Pa{>4:iA&/HqqY"Y/M2%sy&0TFǬxYUly8P@4EJ,MG/c6VT<0LX Ж]s1aSQlKpV,J"1!i%-@cF1|CV6 <)掔pfB*[c[< cla܃ȼ 3#44 R.<>l7LĞ`_` K s& ӄٻ+ $ђ35uWoY kғЁ@AV ~1뽷vqYed:-j, C!M rC[C&7)ݝ?~O(yI UZMcn3*ptXUw:$! )ٻW(O& ⤙tjԙ!@{-Gf؜1#db}끭Npv]b?P> u q3 S^a ,űa: L~ϽD|V_fiZ13 xi!1>IoЇqxv3BVבurpn+, gHqAT06yπSN iBQ ֚.x,*#kBX! )"2-9fSd\0Ne/hC 펶iuȳʙD=nPZU) z.GI1\op17 7v #NN(⃳ݸy6 ofFnD0\f&rIKIQ*PBqdh5F 51=/_6XHCRdW Pu N'L[oye%-Z=O$tw &{b%)yK vU$,BօV{51?TϷZ Oh Y1޾0]Ti6 49v^̎zwB 4āUt*Dkr:{颶z>fJ֮1q88pʵc-bMZhus-mNg]x@?Q8UoH#rj`ي`][kl=7)MM5)kO ''p =sؠ,GaبLmB3p3ұQ&,B,mM'c[𖛅xUdL;-^yAVeoH`ZH4нÍ,j{%s6DlU6z]]CRZ;7 B14~(UԦV-T{EX- ل& ڈX2,uiP ?G8\[jr%bGjXj_MncGg0KkcMՁ;Ffs S -(g#ռN4W )LfD5 z{#s!y唚pv8]2mR`8rF8m}vp Ēw(icB/gRupǷĒLdٺbBOm=N';43|9LDg^(ȢYBʼpaL}_T{܃#C>l0'M_Q;{c;l)1,edT(vӊFjëkֿ(OwKY4F0V}" K)+yEVPMElQ]e%Iqxu׀ڏ SJjE԰m,:+6P~w.Avda -u0BN~#2S(;Şxf:& >dv1xڑ(Q&`,SHOszTY4/SX'L9٬!ׂՖ?ЩcЀ(/菷<O].Mi6F\kV}Kixc[- >UN.HiMx`I;=!9aki's37{#b;bΨ0t"KDc?Ѝ,ګ V7m66>9>*;i~%=@.S5L(mֱz~Nk)C׋ ; @Z%oIBW{4j,9yX+ 5Qs7p) "뾭טT)1F nDU<~1;#z!7~k&_6cy7B41lҦwm ؞Tݿ1(6-xsKwMWN [;.ޱH ʆvĴ,g3oCԄdr[JrRΦûd>yh|Nj K{%2\fQ">\t-]{[Nspr*TH#wgWϚ6h:AOPYUW׹裇@L[ vF&Җ@q-ڏ`cA ^'cVg.7$7 y#MC֨ٹ/&A.bafZ9L(\G[uz56@S܋#Q}3X+y,A;ֳsF` ۚ1gE} \Q C%HtXdONٯ8VOITM?ELp6ڠOy=pw/5Px|Tc#kԜƐƜt’Ob<+9ڈ?m8m憋 w:Ri^ÅCZaR5JkM *ϲ卢z }MVaA |V uS >@ve!5V.MTu&7&^i(Q?`w |+3G2s@NE30ây`rD*՜l`BYҟGCBk60*  D6sV$ʛc_ Qģ>! =5_EWMGo "K-ni;G^X NE_=fr uѨ^C45*oY-mEמy6+O׬ ײC DǼK@nYx Lls"IPC?IIn~ɚJ_12F!`qYe,ȇ@#5R<1U]MniU+,iURMWIincY,;9UX P~_Lt$Ef$̀Ma-FƕӴK۔QʩV 6LMMXr?M fih/89$Th\W42}هݢp9uT;ria'^ /|MNj 81ruN|׬wa2Ls>:oNpT#P]ב_z??=\)$m8Gl܇Z+ջ]/ 2٭';jhv= pmS[F6pL%>@3ƱpIԄ=GW  Ƀe4Һ&wH!|5wS>\gr$jr;ij[11)Y2µʘ=bK"*;,0lM̤'c+хV*|KQSF|:(?2+.p,5d/+,Iut ,rnHΩ<-#)UOӼ:/D OqE"oΰpXq,I\}~:T7] l3-1J>iI('*j{#<}n5[H)魍q3ss̥Az} T4^YR^ H2(6s~d\B50mxݿ}AB&'{7TD#FEX/$.fd.<BcVJh]nц#fՁ;G1 `q{uSF`o!m^ByԶ@xn c?sت7n/;p5N,>ÐtH#H㹈s<=r_Q1Ȳm e_R,Lf4i"Ī?̓aNO(^HOE={:It'.yvZ{+xD^ޚ@6tȠ͵CxTPʱߠI+<6yEd@ jpynLc9_7-`LdaqxWFСLHI.#=%ʠ1IrO0ڒ7l@ةhT ŸPcIXl$P[ 0.aRQ$BBc ;{Y`[#W]ýR Ͽ"TxwLWTgxx@:Ɠ*?t@"u2^Q#䭈pHT1zD8]_#(P/6uUD*zqSiԹeqIc{m+%Z2yާnp>IFȘmX<_>m;Uf ;Hآ䕦ե/.Kjdg~Ie6JU# ڸ!TIp{Re&$Q'I KjYK\sFPGԉNYD p?}&!_S&H:FP OLMibxTvzX;+Xj <~87ZuNTi6X -ۊ+Oέˠ9;Tz\gm]W&< ^Jz˾V|ɉJ8V!܀BOƺ4% p8]![YuF-{zvv>Oh^9S,t;ATH")lfT&vWbݑ"<ҧ!,QU[r&U';pWa|{I|,L-.@asP<"ݎ\D*%A*n8<4awa[)3&o`P~Є&Yۈ_j^ 1'đÚW]TԌC+S#NGM]4Q``-YBc$9|cEEڌ _}\ V܊[V8 12|Ny:WT-O,nk* O:2b(7ˉɥ7BI ۊwG{0$AOq.Țmpں^cA,1\T~V@gZI%^2x`3rA{Kp;57LҀ'Tj&qDO;ABg7#;yVOnPZF LK;2qS:ە̔Z;qOa"5Wa@Mʜ/ؽYW}k],8:5lQrjQΑq/4`Úzwt+Ή!f1])t:9ہNVXI8rZW/EM2{ĩM~iU /Q@ePDC:2 su DkBb[r,*be&YpFX! MF:ԙ{ IG!|+>$סGx ¬ F%jA~z+m+⦮\+eO_(ݲu`C`VƤBjҜ)Aørjs6xQ;QHKa 0N5 < %ZUڲI8ԈݴYufmv3@'18n6&=12ĊJL9 x3Z.UwܻnMJGK3%4%Bd3m12$Q:c $o 1o\*ldmf}|o^?XB)}( &VAn|QrwB{K.GF& OP+tvZђ2WmX ?7}gh7Un'^=ϊW߉SfSM'W`!,eZ"{;^U`])*Nw3n _:-6J20[rTz7l!^ XgV"!~d>aR)?ˁw@qXV PXӫ(1$sa:]9U0d- ϡJ`mޑ\aĀzHa*hp 0 ? %"P%sz|]ɋrmk01.9v܂S\ȍ#u=`W(p'P9v!3i>.'wt/}Yv\qDįѫ? U4P =/՟!/+L9zEv,{ܚ@\+[k[JI"i>oOtORw; ܃nZrXo$YC}btW[T9LP^vVtfYQRh>Aʖك,:SD:q~RXX:CLӤ9:yL~]Fbp{EM.=VÃjhP$5"LZr|2ÕB?*(b;QwމovII]&[K0eȲ5>jFX٢,c3;w[]tWEOA=K58Dz?;WkT`%;VF>F|\ l#NjR\}2|ԡ6w{$k$+-1ں}QFWŒuԡFPӽw,TX9Dz0#{0Ub odq~ Zqv=[iQ aů`=1wP3[K[;ohΕ'^ۏKU5e39H9EWL- ,SH$-<󐊁n E9S 4DK1~&/Av'{'`,y5{"f>N;h'oZNm׵nz9o=4&I8pY`5 ,Tdkʊ*}*)m+^MfFTRW`PJ-ЌxsWo+f12Xn?* ;(e˘!I\"c_J&(—]u?ʿH|Bp2 OZ]PSҳFC~JZφ/N?[c(dD׹g .r!61|BOuLNe/g!1^;\S&CU֚]k1ͮ$PD\Bfϐou湹:|U9_fgEDm$ ufhHS'`dމGz>Ê}<*+AI{)|>;kwJîWAMD7Yk6_Ϳ/h3B޽%(}frHK-H& yTCݺU9XsPKbR7_^ό5O`NNF=\&)<\i5pC?`m%ibʤ8eǀ%'S .=~b{Qȯ o=Q#łK8lzjXK W&AHvzq(+D@2@^c'H;wQPE8aN=E:# \ \]MKVEm_C.Isa : ZnZ`441UZ >q_jc-Kh瞭Op)U4Z{8xh1{j&׀zڹu3rͨhF&/ 9&ϕzcI~swe\S+{ǵǂۺ\;onLiJ=&$Nm|tJUKjdd:nڏ׋/A}̀݀`赥$*kV5J}%Mc&5GP \e" 0>b9_x>t ܌^ޫ /1$A+IArB(s5e]IWU )ԘfS3RG4;zڊ@n`OBhq¯[:bjwR8; KB,f~n՗.t.e+1Sݐ1k{u;_ 7¯\_d K/r Fq,_Cr6/$oߥrqV |A%nw/E5a7 sDe izFhmٌ=d4k,n~m`(yl+_ozA/٦ `qޱvZ -FT@dHRqZH!4刉./KZ!}Ǚ)\q@֐=]j25/y oɭ2Mg5o\^JpghQJv-n9=l*U 6cr8jQJ5y $?{z%Μ,egա ^e0kDQkvz*'% E??qc0&+I'- ˗-'w:$ψ7K?^i*QL(kr/[*vm ;x*R?Ler- ݟɘd*\+''/4>?y٘ߺ%rsvr=CgwI%[F\DgSܳr?S4̿v}q[r]=[ipOzӯpP+UBv,WW3}cD }_Ҍr4$Vu(x2esH{nBeM#&זC26 gdUApΞ;iL.K5/ ԛ[:%! َ/m~3]cN,.()硘rAe :W\-z)$|;v: nsOT:0H"Yס2vk?fF"L*d`GzU; ƳH[7 6ņg`@5 QX m;vs XN- Q'bәpP#X5d+aN|[gvql0}k3_;}w8_ۿƦF1Ik_3:UP RB12;zH=0ۯ2@T&G$}h% Չy,Qz(y #J_7V,~~Q@ד5jP{qMBOת1N֫7[*t59ޝ[2udrޒ5Zؗ"6? /r HRp=Gg\۳(8\o>H@YnEsM˦PJc'.̝0Dq)[r_Z?=.]GQIZFJm9OY gw[zr;4YkxxIx?L7r@VgGDiC -iJ5x.VNOp\;Je J %ש=n p7gU M9=\ڹ;Φ'I& Zj*צ1tC:! ՠYD}!hr}䅴wSݖF~)< s,OIB8jᣓ29ǚ^[J\P߷%0:78P}S]<:⼪*ؙ-wr?M[?Ue$aVN+5'P Γn^ +]35/v(h`I!*Tk?5I7gMrjVyߕ7^xI_`d9 ذ 4̥5Ɍ-Po%3f$`ML>OV23[MIdؙ*0h! #Ő5 VI%VB-X_ci!HkS Eh' Zޑp'|=_blPq)-0椘LKNJA"YPSsz}I ô0ifQaTT8ҐSmg]%&#| YF+-w^lyBHIL:O4^fwV<&ڸ'j C*S`bbI@5Z>ZߓauǗE_(ԁlIye=N|i;(虐UN]~)6LxC9>[ZLu<慄ъz 1|\*iCxi l0ǎ\juO>\X!m(@`FX3nER;)ֶKk*[zLD(Rm ?_]*ǁiʈ\o'g-yb1԰'`4RA8DA$LAzq'xR}t4ݞ']װ4x2E1% ;#<^qd+:DFrliϗ# `A'kZcn7Iʳt$ %.cCX}[6Q;~=@Prs͇!] W3]h yyip'M5Ku[5X'Fc~q dRK򐃃Fk3?ʔQy, 7d~{-UB2!}*ןBׯЋK 2e*-ҊWRh5M"(ᤘN{UY:}3J"P  M>ynw/+KO-!.MP> 2Cq@q'<n w7gYNQK ;۶K4o?K\ uiI,/Gsg idCuȰsw;tzwqRl>Vςn6?P=n DdׇzjU Vxw {D̲yy'p=qŒLde/Cv}p5N6E`,[?10Jdc C",G $aJli/Ktƈ1:Gi%jQথ~F판)h@p MQ;wD^#lYSLrHqꭈzx'x5֘g?hh EN=H%b޶on4\;:M9|qCDU~ҕ<Wf[ڍXdOW_1)*p\C1_\uwa' ,eG 618-JxUSaj^_+C0 ɯ{߇pIm_ { '8΂TJ?y?":ZW8/b FzCUx@qG5w5?InDaUCG5JZ~ J.C @ȸ8A&Y"&n3|eYӑ v &\^QA'q_Vkל}ԧd $JxDBW.^PBfFDQրp7wºzh6GQ1|_%.Y^Wmfϳ~Oi c3 GKbL4=gzIΦ어6cΝ:vVoWSTVk]s) DԆ[bλNEGUoRxw#+;1&`ouaW=(^ qT5h^u̸"QA]:1pTG^{mm7,r,?h wf/ #lm)]9JF/'!@zJu߿5!FAi;Xm ?zĈp ĥx<m%S9.=Q2jsAAE6J}hQ4d?:s>q#x-9Tz87x+^1R#1D c\c5UC|vB/E`I?q+a*@BF0X6"KxEލ}Nլ(O ˸׬~$U|꫻$9C#9As'ޠHCF~/Eb!q#_dTX4ov0.1}XW8?Sj2p?sZOSHTUW,Qru{)r`kJuy'Z`Es0K]xKFB7EZi,(c'26X=<ص6Cp^+qL[qCyaR5v5 h@DF`!bJ"'la/bdn6w2?i:#"\Tjaz tMqo=‘QLѫ^s.^~XCKv*e bw!50+&y77{ǚS;l&9e. 9(m^Q%<&.*:1Z2ߩD9 1Lh-l!:2nbPKg Hruq@y+)EU%B'}5CO52TiL?]8>vP(w5^#c궉›ouy|Zs!ĔF 1 \~>uKkʁa誰Ih Duiԓ!ߟR0fΝVY0 'Bryhp_%1}͂ͪ1 ߛg2ʻkzBB12O8fD<¯ V*M8bzrSjMpbSd>{04G1O&ie'm6rFf~_׌<IrXy5X7Ef"d-6n|zXN6 PȬpܡ@'#+##ҦPޥj?iM-- 'X5_Y6e_7T(=0'v19G2an~N"~ w0"ϼq_9 i9ǎ=$%mQzlvEbyHixKk160֮5jfnx_p}ЙMBn)W+p9sY>RSwSɝF:UORM#фRaXc!vv@ҔJvG_٬x؝P7Q+ޏDxg!XVB N'oG~cG4J$W4!3騆?BN<}< ڮ!R 0 xS>!4dq^*ZAvmYZ6ߥfJSS;- [Q p7> 쒂l'qeף6[Cy< Uؒ!;?:e&J[&!$9^1xuo(rBmY.@O{0̋月+xZa]u2mw@ F m߷@:,JxL[M귻~6O/9hb`9@꓄'.1G'b(|+nXbЏ @Gɶ95vzDNj`]. 1]>$k ̙.F?_@9ϖ@A@ T, =N ,dKq>H`3R-pXS"嚝yqϘfz ,kPjDps*b.dӿɠn]JL BBD+r5ʼ^*e~ܶ'o kB,]؞}JUȔk%s(%R1$R`8.[t~"(;VAcEh0s^O rgh?P j@`T]ѕ䢼:āEx{4Io|gys%Sƞ~JDza@ Tael kEO~9NEEXOV#I%@n2ڨ:O0C;uOY7@NV9byjq„Tޞ&D|cVٓqK#AcͦT@5q=JֆT[:CSjNm)>d1UҬnv7o͟4 vi9g#U3KkՇ #y41n'ԋ;w |~G&QQy1ViY7g,x,!ggfUqAZl4hPv@Xuwza(D`f\Yݣ&@PHcO/FWwY:&[s34#5So%i ! ;+_yW̏ߊ182()Z.h{Cܼ^w%m/\r!S<}d]&rVetd24>䟯Y.zsne>Uءh3Y{ͺ6 9`f'}ܲ0Z(dž2 \Am2BkL@vi pl-MmF+_PCZ$>Ky|mbg9Ȕu4LLoܴp2k*Psl~[R[ZT&S7#a 'Eo M<}0VIt7N)PuR bwEGSTlfm݁fUL;! kP7 f|ap}tˑFFϵSJ>$fDZ|`>NXm-9hL9U3enh'xWVfku1=[D7Br!vUxj~:OC螏 2:H.YBSM:Ot>'e:+0V2ݶ_/.gdMV(Yb6 "0쏢Mj~=bV98R`ϣz%Se2ĭk}ˆOk\ƒyO͌Z*C ȁxT,-qA=˳kJ'cݠ4 u]bl'`dT'WS GQÙ89bT\KU DQhum/V|E}`_Jnf(]t`$uرZA8oLog}cL᪹Ht#E/3>twQ:KjI3|/&`3b _E#ZczMUK?Y")oPOBEB(0Ba @@E>%! $P.9! ˫XtZy弐 #_'Ϻ\G_H1P,nh0krڰ'0?-XX<2v\}Mz૯p<*+GEQa`B:|"L[IZ36pzȅ-02i)B7s#'A% Qa{qT(ia4@E:Qe_38=x B]zβ˄TA<kWuTW $v2YS(X=`q~hD K30iNV$ mU)cIN|ɺY2+3V uTPA<%Pg&b슶 B& sZ]`Lхd!لEXgWziC& )tY/f;™+ʍ~A}*O*0vz*ic}1Z_~^;nx,58JW=kU#vwז$b>)=uٜ0q>ύ SZ0&H/1 _NoG@lhfFtxIG(ߙ)]Ф~6OS%je Mnb 6.Pa` ܺI1Һ1qOlYͭki q)QPĿ\G4 ݲ0{ d'`&+2b~^J4>PC* 8RI q G u}kM,UA$񦰫`[͟򃳄$;{L>o`{mBHQPHl/ vt0-qY7+pQʇF \DmL]$v:Ih^K3Z^Ӌ X< 6Q-|QF>~C*ʜz{{Ƿw~[ɫX|Nj!rnHf!F٢A> (+!MSa/Br)vG a֤0U&f]528ߎO4C(Q1PX8-t ) Jk8Õד !]J4*$Vŏg ,i1>W%>4m6#k;PjaHaLSW13Ӝ}NP!7x$% 屌:o߳LUX:y*kpw ζDI'WDW[ǭԠvɼ'FI/Ċw3;9TO!fÔ2!>XdMYu8xx18?nuAr3ʪJe=M¢365d%u}8_ۚ8HHMe^o;(Ak`,DmHkIel@֏_uЬLNVLͥaȖVB6"0IS|Twq%ys:IA'-9Uͱ li4e?ë9M, w0Ԙ1W_|ADc !$ h'U59ġ'2 rR>sCYL+ԓoxH2d\iՊ~, T8`Z-A֧LHbK@{}QYr@'R<==AE^xx7;F8 - T$ jLOYo!:C XM;I/h*/2ظF  b?}l`1(#e^ƫP~I4jbiG.Ių&[Q+k%s6SBϜ&0@O5ON'$Uoi(Kx0WxRqmjCR Pu2`ksnR l`Wzo~l 8XY )g- A.½keNԥ78fy}UTN[OȂB%9uQs<{aXM bY.‡WsŽ.'ZThgm[.p0,wp7%Ax.iR9@̛p@^staVթZbyz-ujGj]i5&єzXYW#HY~z5$C l~Y>V) (#OD'ĵ8D#YTVb]RܳWiQFjqgDߌWm b)" KFƜ i 7̲Po]VÚvXDd ZO$%ޝwZSvC&%f~MQ J_B[[;WfR9<+_^r`C|CBXϛ^A,FʽO7(,UbuQ%5Z 7`'J"ױ[5ٺ~УjzS֏ ]X< ȝBzzJFiVbq% |:ܱ78N]w`SdxH٭Zd-Oq wXq$"[~(Sqвi%mFT)-q.4o$4iĊA3Q*G 7bS& WWW%KKml}օ$bV tVW]5]蘭t2h9tB4Q9P!unD[y Y&axmpk egIWB:sDVgp)aW[΂C&Ĥ$=̉s6~\,+ AhR6-`W C磤Iܹ2c\}i nF6;ctt#s޹yp}M̪ќCs,eTJh<2j^b,ܨR$YQ1EEsVn'gY<|.5T VR0b79$=*XHĨUP W/^-AA\:f%V[dYn?i[PR+U $ʀ%;PQٌ9D|U[ 1̟54O*Œq½i}ץ~K#mhtj;p/ՔPFP`9ԫ#˛Idi;.DW<}e,d7tJryPf: -i-hd.ޘw=]2-Yj7@ [w׳;t5N>\koEeX0>fɖْwW} EK#omN$$K5dGnu`xM'Ȍy<տzSiG痏f ִ&x9U04y0lNui4)<®?Bի,Kj:v$2MƮ`wo"#_ $*cP0 VUB ƶCmr2Va7Zzeq(m_J4O@Y' Y4XZq+n'Y6 цE8*- p#Ӈq%|߃ӧ<m`oygPQ ]F0f?8 {6#;!S8hNq>Rr%ÉnHK<@C*\lӨ`٩,'kUv:0\Tv E/=ofgT}^ħ@y"!|tLR:7|^ߜ7X 8p҉w3$rt%Xbmج:<`UWAkr kXC .J&}mMPۮ'QACbt6AqbwB }(S@c nge&&./_1S&wwf^ߌČ1D׸.CHH,X$wRȨtC,0)"cj/_4߾s@wG/J*Pi(iVV'k^8ǰaKc<$[6l^HO7ꤒ_*B*BI~@Q1@) HguVVs=Lwq-0H뉮ʭg!p-6zR~V)_ԋL,bG ^N/8 ۋ`+vg#q[.͋ 5X.MQK C ծ[S "> 2m\#~q`ڪme ⮑֕+I!u,P"_ÔVˁ:?:j\ 䑐3}*"$0*kU؀k]77 y3+d&S2ܒ0<lO^(c \GQ#.p2"D lE\)7bBo%-lrJD%yn"i.u€MPb 3M *bɎ?a C6"RvԺq34Uc'jrrfY6cThdysvmhd12u<%9KU IT*6r;e=L_1&$"S&!,@*|Y*)(:]ԚiOjYurEOYYJCJHXTL bG8.P;Ic$ӉMiXiY>Lp3ӹeRh5!CAN-Ţ%AexRo>8tHryNDZKD:XmEmp"]%.2-)?jCaH2":[^j^}nP4.YJ}g]_.}li,h \~ks/Ȏ.`UO \Zk^[7mry.IZ2<[hэ"Ї~_3V񶰞ܰX!Mޟ) J>๯ssfoNb5¹C<-4Q#3ў_^ 1~5Nev`eVxۿT|&iò=aipO{"DPcZ#x+(qdOAmVN^**@ڄSjl92dQgLFȵf?'+bGU!ϤmӴZf^J<&Njٓ۹x&-dy6hɒpwkVukdQJ$3QBga^f?qONXLɰgTa6^m0'sB)Ne1*٪+Ư;]HORk̭s,Hk?IJazX2hi|jܸpUcZu:pGEY;8!cwӶdԏ._l1!f-VfjKuE  /oE߼뼡weR;30\G1KUkLڴ^, 2#9.:<4H'8WXz"$(2*F4L!}E J9*̃5i0SDZtN}og6(/ӷ N ({?bx8o5a6~ϾFO,].˷'C ĸ?lFC<謄xOQTkV@`3}  L<~S=v4F4!iQMC\d4M4Oz@X8~4\C\:" מl=ͦo JL$(*`CUmx"7-Ҷ6GtRh ,8(#C8 $HofR%@4>oqC+86)Sd&v|߳ *R#wQl(`-YL%D2Xqr4n Q˅>`i<1Ȝ[S &A`\lo/srLq.xF|pL6e^(&W'_dqF@z,YۣM6~]Ӻ!\餉3:[]>P j݈_j^ )X|>7S\m*\| ŎY ]9z[3E1K;O FrWG*f h}?#><&N{k=/aPc*?*<='5kв('0tmV!7,C}|pO:{vT9ڛ{}uaώQYH&ƚ`MMS${iFU>ޛ?"86Rj\Bqo|tq Y#Y2REjIkS&MU#x4ys<ģ){7߸e\P@ ;`zP`LxB$:rQ=+]']@QK}=2\mHC^\1Pʟt 0TvV>N 蹷2@dB3R|(T{G6~_db ᐄvԈWŠc]􈸗iT?ʅԒYBt(9Wp=HI1e`Us(9^qE 0sZ"Ŭn'UP1jd$Dtٹ)UFԕDx ^>M7|.Dd( 1JCͧɅW+BzY]q^Jo?Hohd(3` D HP/&qj>>GsRWYNh^Npg6|}X.po]輻`+}*Qp3&Qܤb[s٬oAJnZ-Xw)UXӮRUgO dvo[C,YxHuh:OyOٟB_QO]rXm/]|VCUɹFֹNá 0…. ''$ =F绬UBJ8&}thR8nҸf?}6q6)_ۋ;o>!m?R{k$l.aG ͣor0ϞKpĞH*e2`bG߹g@8ֹxG Ot;P*է_}9 鹱=`Kj]e1KG 2H#qr3slo R&'2=ώk-M .]ik#p8\I  lx6_7v u,yN{Dv (8޺PQ$F=U#*`vGKʔ0Ƥ,po(CA4ԡ 5[ {@dE [vvjWu 8}ډf>kxx9Wpxޫ8wIaՠU/>kc gZd4'.=mUU2cJ/~0±bLv @9sgkVG3 $ 5h=Άp2kul\(s@~gxn͙]~Rǭ 6jY{!zi3puDȶMSoPЃFMy p&6.j7U޵C6 @ nX b3s Ҭ)hC`k1`f XyY6}=OUO,IJ30nOP }W|:wƿ+7gん;p_ ^+K乪 #EQ#ź"@]*d9U=je, ] 8k^Rؓt \C7v½3[13is@gޜqqyN:s]J:]^k-hU_fAxBGp^ ##- 5PN* z2q&oAԏ?0)Rab{z[ *T<6`hWƟF0?EF;Kޙ]%Eo. VՄՖ,xxAm\8}4M#xğWHD_wS';EDQӥ/a\3%aU[A~4Yz|%4F| /C~5rH[xl\ µM,GQ3z2Tϊe;esW-ؼ],a"55'&I Mؗ>o5@W>Ll"|\s=mtPX7Hu;tAN7xJ;bK'.qA[v9흃 _.LC3GՔٜpmܫ1\+!5QeQ]EX_#U12UBvㆡoww2o7wMtGZe"덡t~uN[_EsNgRuxj\oqUXB2\n.dġv|>Z >\AUp0M A^1Ŋlc2  4GsfܧZVVn{lCBYU^XLr|(:ZQWOMÂchOq81"ε Dо vIru!s|xbE;Y RINEP*ӐdN^2BW*@ .Xmݒk䩂oqJsSiv\NiMy92I4 T|mp8k<-, c.sc1._wKz1]F9sXuo1,= Γ3I05%r> ;qjnNh7:ܳjA?dt.t!Yeow;Q欦? BwscUa & /Rt['+OMP/+;Ϝ&(PL:is.饷a.;|ْtV=O 5q>EG'E 4iBƓbIw "dj@{1[fйF ^eAi%PnS\!3bH.!]#(#Z2^Ll ZEԨ皨 ❁#jtLc%ryDPJn Zjs_E'%\bh|oq ӉwkAU[$]L-/^71{4>$0d\"%vvT$κbDDSB8v1`qNǵx.j$2HrW}jy()<F׆D]z57Aw!V;0/3ElDk^i#^X݊1_z 8z0=:zz#m9Aw~W`l'`}l b2`Wɋ! _V$fLv\͎&pYn#$C'+Q]ل;d{lh |Y4PH5b8 rcQ&**!K P9`@Wdo˦C}Fo/h4G$=(WF置Gx\H sD( ̛40@!-$ы0zd{ZMV{@lĔ U>_x'˒BEç#ba0I2@AT\Nv4kdP hKIL랚T/A }J t5mka34Cy5t=W%w};̇ng T1m#ܼ;K:%gj|CYؗG-|gy|0{/-.o8iM^(D #XPy"CFj XF>ɱrլ5l<Qto7IE2_"E. ඟdKGx] v2 7JiLrxXJM R;(5HUux{NJ%]6YЍh7֢^DYRʉOlJM b^Jݐ{;% (+EE76q-K{ KfҜ,|LDyDE25a#~) xݕSbeekg ؓJ%KvV^r8Qn5*S*1{G )HYcK$$ ת 뚃B|X{id{>p3\2w< 5QΒr:7iAn /7ڵIpİќ/z % =dyl; :1VXq.zqfXStT@;kY▯Fnk$DgkY1];"vZ?aC xIγ6\)7F\ۚ(lIA'k92^B~X 2bR CyloD=*GJH_tڃSEL_>?!p?k=!Yɬ3L2'D0(fH+6L:f=ܮ@yJ1>sn&\` _`Gr#|A|KqūW"K&};5!CKbs͞09&bȆap ]F2ڄ,:޵tʟs|RqG!(F\~5*26@Ta"=:Mtܑ؋t мmMO9\p׭L"%Š,щ!"s>q Ē'!3 Șsm]a[┽L!r7vN?5]Y7I&/hL -z.G,J`uZC ~&ΒI<;*tӳ+W!K^hr|qL[1yvk|X[grZ[DH7ua0hDn릣hǏ?+f^q_P LppGfq~D}3҃zx SͷuRN?V'4"<a TG7`Bk 3co0\;)UշDVY PZϞ`_ VEWv$D!ME-NvӘ?+)LNN.nvA0 fGEt >+04>7vDFX.T7Ⴥ֑xo:YqAt-A*]LӹWd ȸ\9keX3Nn;̈lp *9mZ\)Y6}oMaoY/=ϳo!:>,@YƼ/PS%rQ*/-h~:@&l:E!UkWۿhBD+QP4SH074M;O+lcBGd1 ؎D'!)-OL{Zl\ދr4DOh'?HcSy=z($,"Ka_e8G )BvG#'Y`T鎑/d/ȃb:1zvϠU+z`r]R&q,k"įjhqnu:IЗ1պ>qV@iY e艚M&рZʆ0YZ=~ b5G)_ ӽ- $#f"38[ǂm~T#mӳq8$^{ [@R : $m*FXpڌD꜉4v`Vhzes=-ri;*ضh8:@[Jjg aOۖH G{OD؏C3Qlw6Ymc@;*VpK=vBJc 7& 5Z:~<͛xtUEʵ$Y-sIԁCiwd^`·޻?OC1wvɅJ( ʵ:6֎uHb#4Wovysk߫c}m \Ƴ؝VAU=v,=tDڷHquKf(9ד#~4Fin\?Ɛ*g4"U$.^TEҐO<ϽMrĤ pPa#;IHnj4dI Lo;ɷ 1g4*je]y8Z!b^'!g](Hi9oXqiY9Y$iԕ[{ WM!r;Q+ʙ]$}2-vLc6q3YY؊nW %h3v6kވ'zu<۾1 ϸ ؼ~[C7BN~112 SA%uZzg3Hh< k(p_׿ύWM 3L|R='-ìȔڊwkptVH-eMUF)%UH1 [PMgF29XI,kVqOCϓ#ƛqŴN |G|gG fE"?Ki $b-=zfVdv`wRKQ& }DÂ,~(2>H3>#BLwA.F3!%d| өF\uwIjc /9[Нw>@[$ɵXq7Y2;5֚2mK@BUa5mQu4y[g/t d{MPנː}yx Hvݣ?Fd/&Kg }o͔"P><%t8 m),3.aAKsSJ+/Ӟ+QkL&lS94kZ0ae`G 3 }bZ &=zz z"DbZl^|RQ! "Rj?@o%وD߇4iFw[ygfM/< }fb &{5e_m\虑 %!(o{ xV* >Γ9 M(!@cWaTY~-d(N*~L=eE~1Z ݷkgg^0?,M(~y`̔JgvU"42~0OGPv/qL5jܬ)_/s''oi[ n;-N>M'T{|JcFvWN.&@Fs-ZgH\_>IsGsLd{01[Oب*bO;=B_¬#ƸE T|3ȞEJ!Ozu?Lp650Wt@FVcQ{fD+ rUż`4ɧ̧tsnTEr'8٬qna>_57湒#%eur<yۋf1j놨b32Q[yofK5U\KJ+U0eB3bˉEbqI"MRbŵ#WRP@i=0KztSw0vğ81n,beHgG$i';\4|IhY27n&DݰBfЇ+>Fi:ÁdH?\3KRBbbDSTBemvĺS8ɢ"Q88G֊*m 7fYnGŬOVbgCy&2RePN%+}`zq o@ʀ  D}%vuXTF8br*;T ڜil!qCgsG/Q&ayBm‰{wR!(<\H)wX:c @~6rPsr$Q02QqMvm+JuF' 춽W[Dx*"+A㦳 H+'~{F;Xc]@DHg0aV{wY3;VrWtGMso%x3Qi>]4dWm޼Tt36rMR ~ʃ.}ΕV!M ;%r (DVa+ 9GqQε&<. L5> Tf}V VA-kLEcIDh^w3T)e0|PV*xچ;Fy duN8pnQ UI{xL EtiuƦCS*vGڎ$؎&^;lLBΞ}ġgzDbQDš6"@nǻl%Lĉ\Q0Āv6g[|eTӤM3}B\H?EMR\o8osKDž;/`C<W1rg͝0t;Iꚰi^Պ:FM0Lyh MBD(–H:0տIQZnf5kqli]K<s(dMAKEpY1qfP:a"ZPu"d27)\ L= F"HV?R2Ө`킴[펝 BOw4]}an5Oe7-D?Abr=Z;N|>Ep(9~LYm=>R.D9*tL4r`9 y.~38xsW@g)#AJc`; x1/TݚR8k)(n4n6̼%$ޘؒ!Hgk bG" 1zEځx 泮1PcGWOĂqZA)QRb[@vh@YfwMnO۸R"ڴomYf" :e4D$_,#ydo;;aswhIeݢ x+?F`/ι?Hqwl8vYTT;|-5ݡZPQV0% vA fyO6rT[S -6ƟczNCgTndkx1 \t@WQڃW#!g2נqaLhlM2aBe:(=HrY<+r,e;od-8/e9J?f֪ eShȮCзl+Hx.sXP??T*k*jI$'_Bйnc9& ]iF@rP΀ s[C%L(!\AvIOOua80QG~4F@s,bA"d kLW@07%=.Im!͉zTyü|@CC b$k4(HG]7F`P)QACqV-_wsL<{v,G ;+#::͓\wdy>w`uB-}y(rVOq._޴{Qs*:gbx2rqAcFA`F![7A_h=g~tIbl6)t2Ok/#+"^mOe r :hO"S طmrIT7)yFؓ!IvEVOi%q+LJgbL>q.6-|L;R}_FM%97,ZAI G[Q9k˔jeoYQ-C[!x1W$%݅\BCT@ax0 FOJƴzzV![.͚@H/-{] ABXʝK/CtmWXd?-{^*譼4sWB>ŵrMiyeKzV,XLQko+$cBR8qK!uoC9@beeJƻ&.v3}76DAg&/Q˫ȠUv;>8mqhmząk#7R7LF|lՄs]* X{m2"#-t4uJAyx$w5v/y1Ά'MJɲ+|NW[WQ5pfAof@hxڲaa~ --hlLqjѻ\{Zj^&? @$i5vxҬ:6߄ 6JZ 0ly7vT%_Sesp>kjegbosO= %> .s#;ۙ;BuLx|5vacacuts /̤F5Xs|ĘDlkr1~^@Gfꥼ ɖ㑖U>/._!1!SbYVBJJk7sx2Q}hzP.|H63Rŋimb{O|Y9CW"p# |YػgG)j&|m-?&e,`(Ti<)9OFm?Q-N[/g/=hkb%|~o6$h~D{/|{TН 'l!QIM|%"Ӳw^Շ"ϮbeEv/re'Hd:o~2V^/Vw|GL}HAQg 6ӶSS> AsF_EBEqHIVw.S 7z(92D*yՐny{)a?^C^**#&(ˉPۍmmRf$҄PČiJRWqݝ+3"=a[IƠߎ)wu9u>)n,sa׿U 6۟R_M-|L6~4J PDUCi]ǯ(ΩM^|)`eo4I]ɬҗ#fhOe)5 =N̬% {W۸%Xg4[<ֶZL!=G,uV,cm.6I@K (h{UVRc3fDE2 Ni wu㛿+a!:-;FL'RUMS /6lcfWWzhB#F, ؓ_j՛#,Oܿچro xy s"S4ތ?aT:DR-g gra$|:hI& |w>yr6:v"rFk(|OHEKpߩʜO|M!<,f3) !:pv|Tl}֍z< *Fa4Rhv5*t^?_C~r^8'r'պu2G! ORBŶ2a7uـ|sG{ג'$AXN.MOдoMLiO D[4;mp\ MN=LK̔"-4#?a|b,g ܲТPw^3tE Ow; ?H86 8'pm̫FXK+1 F B[ȫ,Ge\%^A{]u2O 6k<-·#LX~AT*=n]Ă{QCdsH◡hՏ*'^4ˢi gU܎80=w6L'hqiIWM.8AD,ށ2*U,Ac{P>F{nxgU(m{~:[%F^W/| k{7p &=30"ݜ$gJ:\S "؝by "("U:O_=:#0|`RdSRprDMdJe@/%#֝Gb,DAKFG.\[!mJ.DѪr$Z \9RKZK.gW}I>P3} 52 .K,ᶹM ` 4v<+|帬h n`C+(EȂJ̥ay@U39trF>|UE3yQ)S{﹛>Bg}Zq1lM>iwPeV@nI~Z%tsVr.*_9~] F'&Ii!~U F#FK+xG#gѺN}d(yà Z nČ[x'dgßL1VjfTz93U H9qm ]tt*/uטȎf/ՎX/j$vTlj;D5yL6EVc =me~q|V4ОN_`҄mO}O:ܓdx53zEFs+d[$$ҹdAj,WAhNI$֣g(mDPsOڐV?f'AxR7nYm̿ g cw/{EeyjZz5I<Q%;Ұf2l$i}z4%> yaG8oƼ9O&1QüS O%K&w+Ex6)SIƬ"M:HሡW#Å3T+P=r5^%QfEah!޿%?"8&Ui=8btaNfM9o^xB 8'2\wx}( A`s% cSt$9C62sq(R: B(pn>~c3-hn|]^* 2&`b$|SK_el.Pwv7~xͫy2ubqQA$+"YF*7{$)ωyZNIoTS5I(C&X*Z: c>'C';↙r]OUu&/Fo^?U  F֑i&6av9s!/Ҏa^wl]abʈ~q,Fhv#:XE\gD//^j Q$;x`z]+]WTt*vyC JDÛ}m my1b3)p7Xeí<3˷^y u 5^?Qs-yT{ F'3mC[n (~q>L9Lu+QU4!,SO&Ŷ(Doy1.^j ibk Y| sٶh)8u5~Q0T7+16hTliYHT#vR{6#Og2.g'(eȆi _ ]ᥘH.uG]_z9Qra;4PIBmC])Ր D&V4i AQ]C?Ix B0# !V?@ D# 0 "&|HN4Ih >p*տ)3Lt*γqf$f kl&OӒLXH2S}$ aÄ?%3uɀYA /`oS0 xi|H gͥ6$*D qqWjEQ`$,G&B ^7ߗ ЉGF|Tr]=@ɔ#⨧.zGƢ̑r:1իUD$9n:5Gnd9'XxwNU&ፒfhEtb-rp4hw&]tvHw ?w|7PzݧDt.I_NBqRQm&:1o$co(1F.hW>T fjŰ yK/N*܏[OuZp:M]Anc <؉"#Z7*=mdcMRQnoH;obvR [.o' EvKQu2UߵDYSw0AkP}\fˬ݆eHOv{q:5D zOMs}Єin xp?4f$m-D, XmZv̓og ~yĬ6Nu)KRѰB̺V|!OkV48yv̤kl?)[o\"NcnG逸.Nú2DјV d> : *uQekSϷܯo\6|TNWۏ{|dbI"t?gcʂ(Hm;]D=45<5)3Vvg.$Lq(eʚU&qbWF2CA|1J*]PINVCt,(HKZt:c )VnEgXL.Y à`mOw#D rK(i\Xaޤ"܄uZqE>frx["_R#SDy`ۗ@s槯wo.1]7T"gI# C׾MP9<Ò/wD,wz=Ԭ3ovODϔ J=QĶx7/-Nϫ'ȇApZe m-TTq: $2q{=gfׂKDLa:}? !S.4Zd !'|P:/ʿ&KGIe17v8ܿgg$yTN\4{q}тú58NZvF™^aVb sy9Ko!FaK"( yЄI'0ZP pRƫ D %bK< f E<]*Lr&Y rY!N5G.Xjyq^^Ϊ u)PuJ$q(Uǻ 'L`Ӵ^` η6>gNx-) 5ba~p!_ۖSޯ/]}_{LM3q! VjE΃F/r>vo`Ku%;mޛ&=ܢf$8NZxLd^YFZ`n-b3̷OdKoF"$DNv֫Zve;:&ꌟ:Eb#Ȑ3x`1pmApO(uhO)%î.AV㷸y/3ÄMn 7͇2.2@Z~(WmU(|Kծ!MnJ5T,"=l(>WtQ;Payb0[;}EPΞ_^ )5CA#zXmj ê^k7G}u'JaINm@ige#w/GEKn؞gPjͧzr<;(\]yn5˚-u w(UUw;.4كd.?}f;o_$@ɗ.x丩ڕ:UM2&4f[d@qAH-Hny8Ӛa2Jܜ ,ޯJS4ح36{2, ⺁䏴"цZz:[܏>q槇\ SҷF;c^5q* UanbEۮ?Í{JX7ޜ;a(:ͰչxD5('m#ȯlpkФ_ӵPqpSMPq4_KㄬP%f.:F"gm@L$,)[J܋& q5f?EIZq1w^FX;!9V o4<<HZO| <F]&8Qrd&0jN<,֚YeuyEҧd( Rf*ƖB\tmD"N<#cr2Nkm.;?Z0Zog=Ru*qIM) !wfD: BշE$-N+@lv;9Al0 KK\T xlzQ7S#ɬTq)(qMc =a͒-_GqvYH.aE]@'ۑڋqf|]!?j)厷.EZXkmPl\:ie c'#-vjv!"rxܳUWmC+ t/R!dN69#f*b&XyI.nV3l  MVK_GzH(ʅ:V VΟFGZ']x랴 `Рjm'Ϗp$1<͝=3ּb5aWjWQF'e^]hŽE&bM~Nh*òr$b.PtzU ,# "L_: 0,ZRq|Ry.7BBO'6sM%m?uoHL_7yK6Và {Ej/^ǢF-c#&Dco0Dž]S9@XW);Vަtz^Ab3"v!b\J%I{Y)m;qE F~jP<i: c ͡%T" ޭT"p(RDnج,-ϓ=soK W!#Om+=+-Sruu)ǑHM8‹ogS'#Uaߧ2/GiٰwY߻2'}Au$<͖f40LD3U_cXaWBkpAfP00CT /Zܣ^Wz,N[ĖԻ3vDȴfA%%95bLRFs'KeɌJbn:Yi:%Yfj|; nZ}[F՛Waeb~2`k}b`ɺ[ Rn`XUm.F`U f+iAI)\A52GŎU GD 'yN%l]Bd6 %9{ )kfS04(aZt*wm_ |^D*M}lA#a-c׭i܍/jgd[@&ĉ}p7.A" i+1p6 ;x 2K>wzo{_񥹞s Ew߱ gsFS' p)' Rm= }GٽY\:-D{/QpqP[e  6< RI@WGHסѼ]цu#fR"mV-Xט֧ C 0c8,ݛއ@wߟoӔq%:Gȸ77n̓:иtZuaJ?n U)l)j܂WrΉ3Uʞ7 U>1b:ܾn M z<4Ǒ~9OL`l@PkVyY}(A ic&.,qaqKH_w$rLxj/{Ce'qviH޹B$ZaNaT,fpT$hC vK{Pg,eք>8)DȊW!̒l[T/uЦl|&]Ak$ ͬyyinejUi J[N{e⿬Bvx@`S [ FϷ.3Q /i\{f u9zS|>/ ӓQwJO^sQ6`>YI4xGE8^vIVO6PQ ! 1?Á Hd&119w7wDO9:4%@>ճ5Lf|;( Q*!wڎf/Ƕ j0YᲣ:Ї=.?s‘%p?T\W @YU^"0p/ G-L!<%*RI)KU FfQ8>+[53ojB+匊tf zLfR*6F xBZWLcO|48uZ ǀ4o)pn7 jyBԈ艎2>݆ C)~iW8_/]Q5';*RRmb2gլ:c1Y(N5JZy`1 d_Lo 飾uEt n}F"UnS8\}C-E1S?rO¹:bsm7 i&3Zǯմ@ؼ|&;f۝lMLZ{fv&c)zC9C: S|3H(;Q=h? Ne'Fx ZQDY)6#@;㷞LwBpzUSHP3]hFgto| Q:bx@D.Dj[^ Q@x_kdT;}8ORm'o"v'p-OE^gJAX6nAԅ*?~8ueoˎk1)3+*-'Iʒ]P rtY1b'M)'‚@Hpl,e_{oաb$$' :Ua%*̸EFRxRҊRP>GQdCEOz}&yvӺ<7–dTWe$Zc鉇P (fJoV_!#2XrXA< æ D/ؘ]B5X](ozc,|ǧ2̜V|s>A,ajif%.1b!=(X7gRR~#VFW-N`sB2]{Ȑu1Hw%ɝs" j);DF>$~lo_C'q,,cL0M=K4I#BŗiP\j%y Q T{ڨ_$IۤeN%JwS]]S+ltq"]'eF^[ Pv,VĒ*ΏU,ܡ0e.LLX Dxp>< _"5$G!,ՍBؕfOٱC`ID?3YHn~F\mPOfpoύ2v&G9ȅ1hS.} ѥ^iFE (0 #*9?@VNB0*$FNQ;;z< ,`wz/U%R 6yZe;*NW{u_~].\]ѰAn,wby]_)JFԴF>hb{~J6G \:ƵBUGAM-Nb(jcCFF|cC!G47wz-`9& *rWāPa{;*rw}^DۈmHGk[V/*_ 13{0[tUf&IZrȣ;:Qi^DJ[6_ ˉP3tV[G+dkutAO:ٚop+꧅ՎLjY#MN~oäW]SSxS/$ݺ,-)鲍xXb`/N֑$g/EO8eD.Uj; [ھ?ke*c]WӔF#)GKޕ4sc5rH5y%1 | FiY1P*9x3g@<,JRQ؎ MVKz<{R> =hICCoބb>J7s[AGRS\ ǃk.Q*< .cV Mra hʋj;%x֡:{},9~*-K] <?"3#\-,^RzXB(;HKXQw $OHHG ?^;ҧ@# Zɡtqu> /;q\ =%Cl#uQǮo_ PֻϿ~S7c/@xI r0p/T""cIt Swf.њ]"{Al90qBGG$S|>d}vqygObgmKƕ 5H@#mAi{ǞWIm9e\!~Vs5`p/Ҩŧb~vBG@Ћa 2;ZF9azF}MYuK˷E\5[~T-ǯ,>XQEG^7 ޤFl?o\vy0~HnlE)ؐϠ"h{+HR!aՏyiiyƒK܁mwg OtPwM(XQH:nDɵnJ 5j[P$sO&-r vvlZ;]@wKNum1,5F#uص,!K vz>+RRU7UߡA_oBi-$9)SxN9# 8SA HŤUaE|pĹ&x}O YJaA^F}JEGY @.}·*zX4@:Al6L b ]|jUzNuXbY|&qMz΄d񭘔hП@Vǃuoڴ(܎F >Ĩ;ؖy1iTd~s2 S-"0?._qKI["l2IR}eTB15t|b5*\j9;:t(-=DI@iJo!#L%|"_|(7w7|,[B3hrg׈)0p͍h =u"C~2.C~|'rIofϊ&Su!8=]Xkƫ8V(;PTPPU gjJ,+s-:b/$QrΘ]vֲF Xvn%іV* {;!tbKY r*'oz^ ;l /R(ن:u)3Pa? WBeItf@m͚Wi;M:`Tn X0"7ufbruNYn_{ҍ"9ŦSdve\ ?0xZn#`Js4Z+6eG(=/ӔnEm ЏkE?yT #Qx 2?& /jBFġ+| [H &?Bu+64M[,P 1~E (Τ_YCf0vy[tbHv ycY3vJqqjڨɊ7U StY39\F?Sb^7?1`]s#99YyMxfăJҽ++N=zWƟ6ɜ~ZR14dQit%gfajf ,K*c*ӄ:2 I<}wpo:xY 8>u㥗?X&zH? \SFT6 [tf"b,2s0hZ_lx=}!G#b&/'< ;נO$PLChڔMBϚ khlx{H -+B%o{(9cb9UYY/@g>gtrmAfP='F?u/;/umorl9_C {x,_8ėd6q bƖ^]е1R"։&c ?= ly zV~MAUbvP vokN%p~^rTԃ/5)\ „-g}71~(B0p>n*6 {Fơg݌|F}. |6U~RQ%uC0ӶKVSS֜a!2$Ā~0^3ғ.wztVs9/r>|/MF%OEoqyklϻWD~^%&`h}M0=\Q^? (ymcDϺqڳRv$=U` B?u"ؿm)bS*W"fh#O2O.3M>9:F{{$-@,@o.>雱>]in=gv4!2ɴFP&4oKX~YǂNDq]CZBx۞vg+I`z me'iZ,gd$m~o\@f%r1u]%7`u^Ͼ,e痾v55TŊ*4؝.3nK o }d_絷Nh'ZP p/]쌥 JYZ*ZAZu*}=ۖԁT1j+U(Vhin$SG͌.C0P*=556i"չяb Zm&V1DvT6Գ$ql@7.Ԃ1[V<@9i<I"jӏ:b"bʀfr9e:ņ䲧BBgk Ț [.X|ª,l=p ś]Zvu tt'0i:_Ȗ)u|s(Mը XjxMo[,% BɯfOۡ0HZsErw/T685N -j ;2o۰slM'*4NE H=V] SpN@`'zH<=4>|'@C6N`13@jaDmVUl/.Of)ѐȕ{ΦLK8E` $[+Ij+[oa35 z@֖x4D9 $ KEL3`u./Wy,_NOZ%uQ#8N.1}@&픔b8b}:k^lmvﮝ83#z7sG0:9|2g,'~-);|@* O16q0=#9+}ViKQ7>}!'\:3+>r hW!V>kA WE°"bb$L1CBF{\L i(3b3=s(Gx@LR0-8 .t'{ꊔ̮謉Ϯ]`e%aE}2L6x@<_G'g∠c &+4U̠׀[88;^pr7"i<KK  +w"!LА)[1\pۘ(֟^pEI,*b ,]?WМ[ o3a!_LEMSqȐ8LGD4B|33.cOb;{N\#-UC+81]H_Y609ҍOu"Tb+etWN2񽟶gBeHP@qv`3AAn#T,x[ah9iwY/K5;aԌv hzE[v*"UUc8걜,fπeyg&بvThg ]͔oCz Džb,|fr,K\7BbTzLJMٱ g?N] g_G@(+Խ7: h;G?kuBz6">kF{IlK'm jZXCK4t=E AfVz-)uoՃsnjb 7gF2!~Az ytbpY;.*Ia^ZH$Oڛi$@J9vDmPG˺ـ)* ӌgTz inzW6=^B ;..Z ZL&}qطŜA9tI-PMN ۵Hgmi?P6onOȸ>jvqFtpڳiPC6qg^Bw0zdr7%hn:y\pD`Ɯ7]P`X͸h2\X܊Tv85igb(ۻћݥRLgԖ;7pkBMyBMN%eHya/pcu}vA շME@0r%0EdWKDFKum^jA7 zeMq !Z`]8k?36{`mO4Jg=u΍tfǏ%i*"u)ϡ۪ mq}}D)ѣZG;֚uG>f`C%*_C~ݲZwbX/f^f`N ڷ&'q b \ngo#wDhNG_Xn0 \`XGp%a Սp%nNVEi|iqncXk #LlN&4Жď~ 8e1RoX(dCd]"F]tK0YdZ4$}-lb{d'nT@[e"u;%&,h[$l?5Ky\|0 ж/C{h) ?)- 4=8%/衘|**lh͓D{qk^Xc[ fY?br9=ۖ@xMI/TĜ JwZ8Wd#|Ob5&Ta?OIjqPHF_8]zy7Ae݉d p 8OKd)xB(XvQ^HkKE6}T%.G8n _uӜ].TPy -uXPtn*zZ?"̶`Z\rDg.B) Gn~EXX-`y 7*]r B _qPoa0(I4HD5 I7C "|/I_6rI7x b=[#<<9 "@.75Hh-&뒂NffN`q.KBYtȌ_.EJGwL ބWBx6YPmYUq+mߦEa;w8,貝蜑=xZ}4u5!yUhhLY -EK*G18XQ=}y `BぃSP¸R@99BP69u؝a?l[6L[/ӷ1QO9ݳz>|$tȆPǕXē{km4ɳDjA=90Uٰ ?eo䉒cV fgU!6?QLT.91wޭTӧ?ʙ 3|QUUJy'\ yx03/@`\bzMViOpgjoʔ<2A?4\^=BA ?fHV%kXn.9+ȗ=Cpz3ZoKs:!\ĜeP) l.8'QӻWQ#J̦x8eHf!D~Jn/⇞(M>;:JX@k{үNyy7DFt~K/VDU{v`K 13 Y>`@sUa4EkiIPJz !1kDGj&MD>~niB6R1(l}i}us= C|[ %H1C ']!HoTRЪWA}[(uUWmJo W߻P6xD*q js(Sف~b=7pIZkPC.®= qe]u(hJ>azp%`̱O(mʳҲ&iP XQM-FhH`'i097EgBS':Yd( A0g>8 ̅aL=?9{5"pdP[1~ SQpf]@'/!)nW`y{xU! 7L͊c3?|>i-`~RzfڲSŖ>ivbq@/4K34!܀KV]F.5#>dfqh,…h׃ Ps[* :n}hRRn* 0Dd|N0W!,8ɽv[BO;'bn ڨIɻi^@Ѽ{nU?KMc?o~f~,]yHB&L%{lC]f'U@0]z&]&:[ro=+=؄jK/ %F:LձOKYwzivsB $/ 118 deRBPkĊw/;"7_7Lj=֖-ՠbg2(ݒ;u ΌMz$NO(h_'ʵTHWƮ%+"䭏a̞])6Eg#bsK'*x$ p7͏?d h&Hu]عPPAu^c2D? ƷGHqbZWZQ:cyz,]2QR(N5 O'b(D_m0>D&#CVlw@z#$ ^)˰Ͱ5*[_ct,pKJROE/(Jil7I^".ŧAM~Ɋqdմ*atEBo DqV$nܞS{odvJ6hMhc,N::6; ڬRtWBj{ hF qZ~M.u چh"/r ue\o?@ē)Мz̻KnS} !8E !R" MߋdjљjݘpL}"G,)5%' 2A?qm-/ޗޕJHYh*h^idu|֗i,鯈8ZTEZ@D8wK7QaT4qc`h:@Ɇ4aYZ=01No41e腰TFXqUНpm )pڀWz̯ee g Xl *}`^!c Tb( . E6,;d^RJCr#GF|I02h>j{Ysѿ~(9Gbs1\HȈqnWTK2dA/G]q4q\){MϑS?A&qu_S pSNZcZь6]t1G,5VLg8V[M_{?=KQLq^Ak"1x_},JܩO>mV:icT>R tR,$ֲkaz /HVorf4Oſ Sr^ ցz`Ykzd⭘!@#84qsZ S0& '^%K#f#.ow? =6B:M2=#@,FT"Ŷ6jN>GU2Vax¾;^ݺnׯ6bt4RS ?XqIB,d䚒ƙ^B`fs N] R_uxOc чZ:ܟA`n~An:(Z=]H;&%q4'R۔;(g<1TmםnQՓ8Q !>hyP)H s2 IvdJ?ΨG?l)9rZR:rv:mu޶O}@D-򃞅Ѱ#[*_V*N77  *͖!*NFwW2Mz|t"x74!@Z IY@^_yo+4ou9c{G&])0AYo.jyMp[/o*};w?G.|QO^9\yQιbv@82HبB!e)i|>y4Y7; ~Z\Zwb,[O@mu_[/txf5o|USbfa7f+\>YLda{U$*KfZ ^ wikږN'_L (Ѕ;ꎯOϞu-A= t -9>0bep%/iqU7k#5v76VJ6w Pk1q!0/C-ܘO0Ёyy8(?@[u9?}{kpf*e^ElC=1s:}\?)F꒿:x.AE IԳ]/T$%!#%? ٘OcU "ҔQVhv -D̘a-)CΜJ&{/xfx[(jdv*Ԑ+#si *1pA^dY??!|dڵ^J#jt>يz"CڊF}mN]y=)p@ )h6@ 843]6 j !"Bcj_й? q_O/52I"z(me)O.+]fUr]DHQϭd[Ke52^wgQA?Sz`ø\p1[BUFΑ-0ЀH՚ ۬n 7=Ro [ یtxX3 8@/$T/XxZƼZbjQCMX*WN-~6$n!xAܧ!͎g)|A1,Rc~&|g}i>svE58HN"Sf䈈8oHf3EQkÖsĦQr?y[ ,$sq܌s-.ɍ ZaQ ` 78315yY3͟ mqfZ'BÖVܓWPꯑ>VQTJ ^3&ФWzEU4N9˹O5$` Q@ШUk"Ο 6Fx@G_-Z&RۓRT$dVQ ҥzT 7P\dAas89@"[Vg5c^ၙ+lޱW?v3ǷJst~/֟^nܞϥj.0F+a +SdJ;\20𩣝PEj]auBN7!xcV?\^`±Vɔ5FY9N1$d1"nn +"ŕ5uy6?4JOU;Y Ñ%oB[|GD)x}P8HB ]]8ɃC*\0,A0̩ j[UGl _"fg 8kX  uEF fQ)H4IYڀrO1/&$ "ő>pIȤ-j&L˳% ww׬Rmf[sV#X'jIjmt `YG1YwaYbS Jss_ 3~M%4[Yjv~|d9U<;=_ B eҁa*>jU#`\ah2 -o3]B 0`ñOp%/{ox? t.$^/ DSE#gjimf!35fϊ6ٴPF BJK>5;ꅫDHo32\֙=\y/0P}cMԖDt޽ʸ̱d[`bgJ+;B, i`ywsHFkc1 )>قiAFlqHT%`z}bZOŲ&ZH|myQ W|2W .R2 uZ,;\_Dz?9ǴYۼhZH|ũK,@7~v m"o r$*2,/gn;86o ڦZ>6!u6 !@\ C=2fQN?K޽:xJa.${aCGC7s3Yk#oWbsrYDIǗ5x 8Dؽ&n9h 9nWt83g]Mg㈣u! ೾5.VVDi b;7ch0Isds.|{qx.EyNZ񏺋h,6;3G!EDl!0&k 9'C#MjK  AB;!zIA>8R=H\P˼:M Hu~>ᨎиxЖ^G_Oy1dG-qH#-e0áBB +X$Z3b/w$ģsed'4[qcSZ\Ʌb4 qϏ ! ˈR9ܴ{hCԐ>I8\.7nSU-Jk(>ްJ1vݰiazp:tנ[,ӌT @w*LL9P'hbA#[UrĔȳyS_I_\%ݬlk_ڗG7R E77}5y-JK9s!2ݝ6|{}#(4?]? QVu^O.cmdV)Nvv#9kh x ,5TjG8}`Q^ڒa@0r-"ld%{!nTHlkDaH_aJ2}T., rRk !rEjQԋyrl4l3kcs~ǩyl5F>"n%fWjI@ b# hO[jP-|R$Y}˯k}5{ 2c7\./HYJ;H$Q/Yeaqq?:D}GXnse}"%vҗ`^8;o$ 9|8]( -<\RqE1P~9`&o<֠@ Z3Ѫ,9R 0 G90}ƔWsCZ^<0Q7֎0U>V&z;-E^3g. z`jU$뎒mM|2KH#iy"Z* &}#>BeY2̤T? )Bhѻ +[lvv82'`Z%0q&+h GaD +%! "%%nqQzr\X@V ZLnAI65=mJdzҵ~Y~%=_/"Y>s3>яjdQ8t4Er]{zѤG&Q]e:~q]0[Q^;2K+Ԗ -acB0@-aggN\DVjH m^FbYy2o,f#TзdMi|;ɿrNT!ڦۥ{FG=v$wY!1xpH=T+4I t(*!w7 юJL83;-W,7l_',Sz2OJ*@&eaQM9wQ9ZRP@/;wx@:@PCkV$* iFlf:=!|c2/`}o)1/\lcQA u$?7v•!sQt!jEoQѸt__e61E%Xxm ,ƜVeC 杧ce2e LuĥzD9YX/(`Ee#zJ#,3x.p]d -04 ĝ8i;mI 3]gEsc#Dr-;(\*4 =%>b ~*6 jU" Kfu*m7) jNc: >)rʉl>@?u#W_4nD]K 9 xI+»aOoz\ޡޢ d30@J0SFC2qn)T8D᝹h6'32gT%K9ZӺdIq<"Mr`Hb*Mr9sfuB 9<[U͝+6/ǿdSJ8kaV* NM#(VփE \re_@HQ\ekpL h}2|VPh7KJ'ӗN%t+BaGJ'2s* uK<`aDb Ţ8.їm2oWqýŘ ~*B3^C7TacTf+-DuQ`_u̬\E4S2!rcZq*&mBqXW4pu1Y##8R莑@}Y-;wR/g#..佂BR?&g1dI5ۄǘn1M\AUjdnHckD`;M8%Y*(SwDĹ#@RmיT6ZA\XАMc/6X&Ǚ>0#Y0dJd &|O u4!PEn%ڀ Y BP ^@-!Ru!%<}h>л⌴r[ . x"G?FH97\4ˡC nP~__0 ˍuې43{}1ϱ>Y.v|vN:.S;f7vU AH| qպ@|*MܕQ.FqC(M8oNZei㩌g2$jʔa4F,x| =_Ҫ#:^MZ K4$5BGn v瞀O}SO8Ҙd9+EKq쭣0 썣'@dg1{u` M<ԭֶ;}O24#JφM?g@c`LJbR7EFTOXV?Bpj옴VRZKm,>.yNyPmhW1d&67eƃqQT>u.”)k.~l@Œ gR%6$D. .'FI||v'@D\]HSsȫsؕIB:џ7BNQ2ZLϴ(YƳwk8pкX Iҿylx&8<6o rVITB^9n`!lg=k=;8tJ6&C5.?:3̧E}.%ǷQ(c}^Ƀz+ED/ 1|fY'ߑT?/l8~ I rH XtrQM0pʣ}j/ZrnjY*.0ӆ2טas~ (, cjf|D' H_uBW0*'RNk/(+Dcă֨QЊQfĠ Do*`=W[mJDDd?+prj;;M{ϯGFl -QSd=X%2쳴RZMg#>*?CC'S횑ol0Ս+y\h\V`TS$k]z.mOv0&+IE@K7p")n{v?,Ox22+VJk&'OșzEi&t)i!:d$$Dr}*c\)31{yac1s䨴c~q zB pFe@,uT?*ϱ26g@ xpPLw$stnM1Zӭ 4K/)ܒ5 HB{3WP"#?<`QcaDic1>6T?y)Lot ΟaNؐRV9tLkB|ǯLag`=qk ~'®W=]8 |\ЊtU`e.<`#[jߖ/JޡY]pevR L`d:Ay_{JDep0bWӔ YֈZə_ 'YLS/ǨsAtFNi + bn~3b^Si| 1b fd*EN+[1)Lg[5ǗYmNKҦ6C& K897N;wQ: AٽR i{K ;BZC眾zl[?6{CQ$^%VKaG] C/TV/gb>^4iOfxR@ѓ' 0\M+彫㝹)-TCq5aoUqІ1PE${.#ۧb`e͛~^pV b&Z@MQNY4ʉ8CP T̈́2Z`nβ5?'Nlޮble6Ӽ~vTjhYnmIQ^C4<'ߩhl_W:)?.; ڷcFC]4MNONH/Ռ!K 0Yl0c>]j TIA&b [{R2Ѿ塡_wU ZSFkD~t~nhuf 96jE0Upo?OEjhMt*;ò6דЦۈ2Qbq;HB|400=G.O:SZsN 㧍XR\FaQ{DyEI]#۩leLN:8O~ˤ hU4Y$+]/J]&5 <ҭKPJU| 3"kd ,AN}4U:AyzF%;4eHi{~3]A7h+Kölk%5[ ~Ķ*_V{ /8'Rm0_s>)&"fsgo}zfUԣA4Cs̖~ܽS+4n ix- fM2\f ~ 0Q]W$$WIu2| oYf+; jHԇrO`Z`75 _ſ^H?ֳOHgv`1OLX$DcHx Nf!AM@ ϻUc>j쓝ƍ'*1 4h̬0e9Q_ԱNmh6Dq~v$#f"Ii+sF/F}xOkܤU4cs@b')uޢa=]71,i ka>ٿWcn=PHkIGΘF"tކ*U+eΧ5'M2-Inr楶@OlT9ZZg nwbДP}q򔇪B$lɵO_+CX<ʱ.#MwY&9bF]6ȭd+ 㓭8lFI]yp.0?5 . MgTgyᖷ9RB64 Zo*"Vw^DeP fÈfbe]^6'YZ$h,=& Qu>h+/btjüOWs62SY X%Q IFKoxF38|AS]t`5f>|?)5dj-!^AaW$R75 8?$갻F4HPeH.l0xQ0 웇Vs'v~bV N6Szj(-]c^Avf}X?+3uw?DMV9d}݀ГGLߗ‹ vH0=xU&ISV*oi@%(nuwf<[~ygO,v1 mk^dK.ipd bNd@*C4Wi=lp-?Gf70$}šWJӨ+0^EٌRmKڹ(?8aݵl)n>jِǜYa0d0h6tuX"$_`+@GlHfKYʗ*5% 6P:^rA!Bd+ni2FuKXDZ[v;t ^HRgM~=L9^o?D#1S%0f+"9fV*:Xax/Лi?DFǾs}v͎Â]l6=S ,U\O/:(.; VT+<,dG<|vG2 h\ʆY +KZ?-ZӘ_2=˧R[\W*-Ezqla^ek_m]RIqDXaS.C0'F? Ӿnz)&G$pW~vT\71+ͨM{n ,a=!\* >l*d#t:gĵ\ +N*0=sB_ iGy8U+zr]c"9a)v(1!هhw@RC>X¦j I\8"̙WvX훚`/öTf9snK՛K Ƿz.$)[6ՉT)2x+B{7;+Xs! P )%mz$.rgb:<dDL؀'ϸW,UYji5)l%!0CA ȯ^D㱬e-m[>p{ 䢢 T&`˜s<ԢnbԮ.y=<+t+ AJvXXH@װO ro%@-&_i&A^LdV+9S%,hJۨcl,GnT7lf876 MjyM^ I0NwJ2;c~/Nxa9GC/E"6.|{SOԏ.ueei;c'@;q^Er k6dV?7ըZv{aƼ#Rhd?<;'o@ϋUKWʁ>®T'xzAy]B(MHZ3^s\.:m6r橦Fw)2f0SeE#WثK2Q:ɖ/q68%?=dNY*&K\@S7`Wqu&jnI\ ,VJ{b.+ !|w1$Y{ǡ-h]W( }69 }-or4#V=[P5 *uO\h 篤rd%ʚt5|dKpاyd2v嚉Ou^ժT ihg$]&$U^țau> 68Eo13* F, Hd08?a87Wlnva}C\{0 BO q_o?AGֲ5&"`պȉoⴋkmq+ꨨ`6,!V$!h T⛍ X\{0|F<W2O7p޷lr֛tq`{X$3;Kj}LGrg j7SVI^Whהl5ߣH'333YЏv+)z2 ; 7Ob}%*# .-#d/2Z.r4Uu ,/D/0wTᠢ6_{t#׶۔r#^2ߵo]aW|Ķ6Ed5BGJ!JgC(^",(^TJ( |Ŷ W}~VKHDSr2/Y3:6s4dz?OcK]Ok"lf~.v ~~Sud.m[zJɈr̓>j|)+jĊ>LdU051v Ү 0,: t&R;#r#J SLqF{cw,ymF -6skr1rb-`ʑS 4R3@LJU0P܆n[D+~S}ygQƕYYsSM3^>⧢軌&Gy,w>/lZJ+ 5`B*7:~JACN0|bg%%K**z(Υm X!*ɧC Oݎ̬%7:g| kG|PUn=Gx{Pjh9p5ɨTsNinsgl-?5XD59 x$) iGlz]{c5ϠgRžDYaa}I&u f.=A՞*BN{kU^01׉RRyՖEܒbpcsO@(#~ D .>*elν4. dj*%MExc(x7kuW^!J]?:h+`:A3Y"BJVGrlm.TTle֠N56~h#aJN}[eK>޺ŗ#|Rfx'qd0/,^;w;Se*[rjSȶZMRtbE+L9U{V$:  heAg~=L xY5pB' 'Q!/6zToӀ$Q Ak9u>B5 tG$VV#\+XwVYawZ\Kc34;TH %bV6S;Fx2(!N3FSX,'D=>-y9()` a‡ *hhxj'Kk:[ Y 'иܤc{ ֊\uٶӄteF˼ 4^^Y-"܅oh5ΛD}e.)Ř6λP+CFr}C>3BB)S';H:)(T׋p]h>w|X.S*+zR-AEβp%B]âf܂0Oh*/#_Wj(V#q]o6C0F(򔌳™B:&]<IV\S܍k>6˦R,[us$A<p$ @%RV>LtWW?B1,_><šx ,:T vsO-֔YHEjKN^e i7P$ &ŷJt|,#߸4>np#׺)=m`Yת6T~>3LY7:-|;XQ2ecw2,<"y#ˬ%z)&um2V!⠕lSf2npS$u< B zß`gIGiO Q'_8`T1ɔzkzWy͋NJ@Ӆ6*A)w@ٻϨ_n;zG =6>Gw$SMpC&HqKy4@p6`ߚ}2(jD|#fn)~bRfOe ybQx~^U|Ox.Љ~87?w9gL=۹W Z#tʕ ~毕7njH+霮=UCHuƭJZ7OIxdn^>36\sGP\K(ʩR 1=LE, x^DRt@ Q8Օpd,9r,gO4=tGSo>.T8˜O{\a:׬s+T~=I  >C%'r1 / m@JvQ'̩CH- lH\a yƴ lBYd;Bx6պC`[bt88(A/HsM a#Μ=-xZ!J/}~Z\\?m.A'8$Grs .ɋE?_z:0 ;U; AkD Tya C:sg/6*_WIu#aw=ZW+qKbR:Z-juDpLoS}|h"8O@Hmz^HjXtcHd$R>Wɠ_]jWJ!Oˀl Rӧ9  k׿X*S?+H;nVJƸ^iaojGZ B5hJE,H 'qp`, ñR,ApW#$fMA! (׮őb\p4^οm 19f6]ɚq& #UDjfކT8H`ĩ+M2=t_*:8#! +NS[TYΈEh|$B4e^&wc0',"TR3@8Jhh$JMR1%o> aʘv$.N%T;&c<@Q\މ ]_RŻV%J;_ hh1>EN<~5~(M39gkc%G&qy!QNRlf<ΘTacPJbHDlc { !؅cY"IMՊ1bpv@?hTT~l*풃:kդ'`S}$dgD]IkkAy8u,KN]?B\:vڰB_$"Zeb1g}$Ȫ|B ՎDl郉YJFw8׋?\ˢu-ơ2vo9O 1;ex`R>@S~}:Hݧ|G vr1&jNC^RQ坚AM.B~)%U1',L"f ENwjz!?t&̲nSyܯ5f6j#cCMjabiPd/ q-*CP OTї8d q:-( tS+nLYg%@?}od* JOwe2F'=ei l*JkWX0oZ7Z.PLͨ!]/^mbqk3 hx 6dy蠿9#!Nt^Xd`ZPp8:4pzR޸4u =_:1zlXLcP1)A o<$${/̫γm^6s ^*Tc]6^h,7˳K`Q\aO[jڶ8}(lFe Y0sѰtɝ1 5B+cpaAik6B%T}ǧ)I 7zdIKfT='L1}Muq6mo(@Pџ1IIrD\-JgAg Y, SGj+`W7qSkЦ-jǑwVp2G8]ldQmxc\BxM(aUiH*FѭQOMt|J 6燱U!֢^' T{Ρ؍DzDOܓU,ױ/*Cr k'f06]9MbAg"/C9f'AhKE;^gzFP!f%IaMzFM4!"C% iR &O>y%]Ώ'”&ЫAKC;_DZB'Q4˂?滂 @s,/& R2t&cLl2WgDHJ[3/%Kia:i釰 ~rJzV ;W5Nɵ y¼L/Yj|z6Zdm>IT# lג:'SF8K#έb-\rN`*1$kܾ@A.h׹]E+"__7{ ӄP  JeoghVӲ9!\:@D&u`ixA J3VcA㟽Ÿg'[Q,OU+AU!\f=:ߓ0Z"@E|>':HQ?5{{LsSw#; CT>V\:WÂH`a6|j u[#ֶ?.> K{s@ܓŸ-G SE@;e"C%IV=E>͆K."Qrjn=R d1?@iqO;Y y_o1: k+ $>myϒ@@Iّ/ݺhfP!Dt_q ߍf;B4=SRe[*@$3֚H!0C'ʽap\ +'vC 6r*je"R!lgtQktˊsՈU!tv=|kM1K5@J5A ,x yCVgp8BV'!P=,8BƠ{E7!& +:V .gfWgQVЖrd鶗UA6E#h2i!#lGY>G7<ϣ(#GNF mNc̭`@Ubkl//njD 2aq48#dyBWH{PoW&bt$FFވHī$"V?o$Q\-v"2 @ۥ  .eTw:kE:PtAa1SڮEdM>oy; $ل؊fHG+IzӘHDd=ޔ[=⇹tQ4 |ySpgTŋ(VPlv>ԸN@tLq}=F}R~UHT8df` ijBָ#uq\X?$evT6d NȞY6"T]8Ȧ-y^\G![ٵh>\Rk°8Xm5W"J_ |%;nDQzZ8iP'E9~ ޣCҒc3w}~ut%Hns[KH(txtUKt)ten?}6Rb`\tk \ڤ_t8?"‘72=2?> %nl5' v}uћO V+ #ɵcŢE+hmpSpw(>_!LVePJ"2}q[]R3\4[40dExb͡QFozzU%|.)+I.UDdmrl yoꯒڪAb<W%`d>&g}yPLٗdڍ>V|E2>1M'΄ <&gB@Z { SM^' 95qMOCTI_$ ]g]/,ϪͯT&ϼ;ϵAK;HZ,nU/C^Q.@p0(A38d3h~KAHO߂`c=3ԘDtO&/6$,G# L-nhYXwewO:.ᐃ+2<?krSQ dAmiK@U'l dj[@d٫L5z*j_:Ez>H]=*пmf F{2iD QjG|ޱ/*2y.~{;߭^`ؗu>vJ쳵J$9qh=Tp޼wK})ޟGNSky牣Sf`qCpSv" cG `J0fT6ƾjXYdl5P&i ЊYHԖ8 {ΞT94)+XLly%ijq"ZBptd,}lu ?zc&4O-TzI PhmSLnNFU;dUoupeCbZD@c\}X7Kk: lVlķ@DRTOBjBz{Ju52r+*$K{y'5iwψbm8' 61ﴤͦvpi|| :|':"e'/ sE4dwEKdYƃ(5K 0d@;#5Q;NĴ2K];bZ~KCMi%m U+lhoc դ(jlXR_)X,;_FFzRn1A>JhésE{CV_YPAS%W6 ŒlGJ{4b_6\$2G3;r_HynF)?CPK8 T^e. ^_og½0o\Q|C'`UߜI}jkul27i9Z pf#&2穩Cy2@0|M!'JfCutiF~ [Yϲ#װ«iETS~ЋG^+^u[5ɞ,I6 EF%Nte;9q[o?|-[rȂ2\A+w0?4ijES,j)eq'lm| e/Vb'7}RK0;mX$p+F隩v >{cpX#W`k=Eʄ_IAXE8Tf%7Zg#rk$v*'>E`jh7 i),m~@ @ݑ!$N5Emu`..\_6k7Ԅ8jB8pؘ'3yi*£h:2}H$S!~%dܷqssU}ZXglj~Rl!5;BdYL t\"9OaH* a#[ErŠw4*5s7v2fySp(B9XEFEIQvg s*[x MKNmS%GRw:7l&g8?* Fb|&ڼq1 thwԁKv*K `0@bRUrJJ/e|zJ_3:j?+4 ] & ,ڤE:UFтyQ[`̛PIX|)R+d|͹pӌx.5'-z9]yI $s ԥ 3E2`9<" '*ҏu1qo0aJ-?`L?4;4irϡ q$1+LZyB Qmv뭶^;{&??\L!wWu>qU>ȓ$:.)#%Y]s߆Q*`@~| WlcPF T㭣{ ITD'wB1k}bvC\׿ۼ MW 5'{+ؔp:LB@ӹ\cMC71Ǚo(l7^T{㌨G%p%l}شBՠ=2gV,Tۙ'nj[.$JŸC&+^tۙ=G&C{jW,6e l;^x,WrT:.$Rp(KW(q(-/}"({啭 S~zbIgb  _mr5 S~mJ~#U4] P~^}^@̆MC6/mc$R&wi;jK\n+Z[j;8Qx˩'5?z DT4ClOKanjBs͚VzӜ%4Z!B2NqZfi Rsl߂GX:f [ξ~VH vKJv}Tk{n`G%$)4ld0[4 Ej^-Gag]` [ ?4m{ mF5H#ex-V5*eչo,"!>.RACN ͙C Y?-ݦRNݧ>/WwnL3,n PD"7ө;зs1:fN%2-H c$Q;/Xn@)@huy*Iơl`?iNC.i iG&`ST-&s-^L`Wi9+_w{ 3/'vƾI- Rܧ_r82RL;h% cdr2 "4Ӓu4m_YQ(Fۦ:׫Jn҉okenN2X% 7ګ+;ȂT,= Ւҝu0~Qa4J:9,<|aBFu>l8z8V68ElTH!eI\o=o$wqJF  Bק7n(7' #Hx $F Ԋ%L @X WKEڀ\|Ms)P9ʛrOy0WjSF&o HѐfBs:@;lǍ[G 0v<taux(Ro ۪-s\W|})fz.iUň1j~ȣp֚Wic7Ʃ16?5@ذ`}Ag%'ooq/L+ӵ]ÊLV:VsLLCd$ ;VA_mu`@H]ƨ<л#S0`<~Q 3I#82uuoa6DrRJqs?*[GYJ8 εUK>EO;.&$q!>h"̒b!CY"Ky9?X~CJr ߼ PV#mm`qG}rkiJQMGJE&VB/|jWo9Lt eLS%3/^u¾VDبZU/KN#"za `ye 튋 '^ "p`VEv5c)p&NV}g˅x`hRIȃ<]F@DS8͘܄G{N_(;#n,ELÌKM9|s9`85ysH]Rs!O :MJ[TX%(SY^<5wۖgY/p9>kB0nTAAS1n4Dvvdz6sV-xàcۏ eOyuRE/p] Z'Zx %˘X]:#>L)pw8V]k0ؘ)O3tgq1Rk?$4hbV TKnLsoobɮ[-1P~Φƴ*.j Y_dF: xY eW[n6şEs6zQ<7:pS< V72oz!?P%>V)yuaq$Q|8ʖ@G 'zdLk2pNnw͹lgt6UI`:aC{Bt:XKR++D<&ϐmˀMgUAZju?D?^i{0=kBn&6YZ}zウGD|lAʜJ1U)=\PyF_"@?P{0ΠoɌOTW.e5U+!57a^aN I%z՘aZ45T@aZ(|N3rbV/{Ss2;say,+P30I,#&~bdb֝)@{D:$x86dfVM_``@#It׹-J+gjx$YGzR{Q 'ߋ&A_.R>)Pp+PV+ B\J(l AqtfIwC1n "n}vߎJд?Ӹ; s"RU{{bfH4h[>/]O Pt 3Ƌ }y{J]ݲ.C*ũ̓$-ٛOL @Нe,ʛ7_-Qвw|RN~!r")<"(C"jJ!`1>.L7< 0?P6y, PX^eɛD)-e_ ,}{RM^AW L)>?GQ!U(ݝ Bݯ u\u=agA=3H+G}_0ٵv[Vڕw%]K,D]zu_~]Ԧ*K$#BW'`Y~|2'qܔwtJ@h 4Q!rvBװv[8~_̓T탫Cxd[l+.E>N%8!'){ja<{)p6dn TܹP^ƵI (3ڛws?̤yFa=E<֠ 39FL +7SX[Mc/ y=Us苻3ڪXEXEFwF i40 j&L K٦yЖg{ o*׼iU+.! roO*ӏQfr0#Љ⮷0: eoaXO2B_BVrKv?5jO]AT:+گK @g W}l7:&N( eDu´[8RuNJ[:dE;vxƝ}6d 8U]^/~ gshw.իP}; py/a'ՄX@[PA4¢fj].;u+w(T&,R4ERzfFSn^A_,vWA$"~q)]5J٦ViIՂyG>6| 9=j?X@LIq-IUTLOġ3 p!Ug,f/0 7uv*Nps 6d؅^wXwê}6s'/S89zKz ,v%4h4JG6I}h{I,X lx&p㚾ܭgYcVQqQ.W^y(BuXf] %Q_}#rYsN&qtrmM*ӫN ŮM{j}wf"bm@3ԸIAWiZ@v | `3.^LXFc_1׻e#0wE~M6NRۏ 4[~q4~BȎ&* RSFl, 㳭G\rݍs1'x T%BDDzmZBmmPQR E`Zbߖ/G!/%TMK2#54Os0;\h5,E0ʲOMwoM,;?O5dUoaV70Ns\4uc4ouv;GaOYB)6wdz$(Y۪$[J?c q?`6]WA|hحqGŬ!`\#9`j4Edc)HXb'M3Ha/6 h@ vwK&fϗ2̸Sc@ѹ#'a/%*=u*^"Q'$(mBV+z•n L+t}v4HP2<}tP԰6A&^|:UQbB:<éw>F+ xV1/=k%/i=(?dil2E:y>|Tf\Fg3^S7=GE"{vֆP*eQ8&]f[ 49|@kO$QCj#Ȱ[_"LAT7EJm~?$|t&5B"D1'+4dGyVY9s^2}cm- k^{ >gG >RX؟07Fh-'f؊vpni W9z/jq6݁;Rr1Ki[زp ֩4bEpBv:[?*ήR䇥~&J:޸W'V >ZyLUmo,<8H +r6Fi1ٲw5rk %pͨPoOC~Y5>wpm>+WbOL)5BK!}dY2J!o]zOo{m8sAd-p<s*nB| YbÆL"o ]!Ú*7TīNji#|'K?.".XU[yCBW7=fGG2ਐ^kU#ɽGw;\UЙp~19rv %o2gVA Y*B'^ksBC1?mS lPޅUe> E].7֓MFPWJ)Q9VkWO]YNUtWigQ6?OÐ&6ݷd]X5%!V-YM3q~ӡV#nnlN(Kg`D6p ^W^RxFwoj~D*ۂ7{@ecelNA_!#vqu?+619O1L8yffp8% l@7!iNii\bz@U"$H-aC5'T_ʽ4)< vn:'@n߰H^ПۡXJg. +L|?jsnS-sN'.4o:m}&},vkQbGiĐfmI4%Dp;ްSm{4 m੎Z5T eaAh&o[ 쁸)dxMK$sy;dMgeIW!-19v N(#wk!H): =!<2Mx~QMmi62!͢bF’͇l;/F]YW5@^7e.p2=UǒmBZCv'R3W|]~Og lEԫmIVGS4#1\걎a! wmn(TbϓB@N]uKX\^%= o9gyp cY>i\o(0=~0(WƊO]}i_, xMajۦJI8A.= eIHO̤i64ov[~RA\6zN_wn9/6+*?p-0Nr]@8q ` p (޳OjZJVZ"K SW Q<0h1Ng\HxY2\zhYd @ +nF.$ 뢨LKٜL@Č܀rD]ZO yGMNp]*$CGS/O ˛Dr eEkNgo4>{V K<7 ޕC'¹r@SL7c=Ke(cb!WmhpEˑyϴzVpk?g5hVp#nM0GxT?K"Hr&K)Е'w`OA#\(PI1DN@;2YkN;oWw50(gIlk_6`t|h@*J" (pD 4:g[:wHbdsɾr 0/Z7Qq3GFs.zs#=.ًrT>'6<.OIM<#"Ro&1Gb>b/c6(!.# EB=R>V *>QB|sa3[hIwiU`p~, D8xSdqm\H,%ا{6#*`Mm\@ك#Ӵ 2IsJb*}}nAS"ʽ ?<&Pba>HȦHn2&0z¸Цhv|r'j|ڥsg.p'd su۫,u3jw&ǁF1T4Ĉ*/KH:9 K0_v>ʗ~3Fbہ^ Y2'3 6tlnvQ+:\7AŨ p-5_ah49}R^,={.&Vbd!tGnM_vddC27ITpoL"') G_Eo" Z2 bTqbr"hgy@ 9{O:$ڮiSyc\fw G?k[6l GnC4Nt@RıJGT[Gx[aM/N@!ueu_Bƨ+V̂4{Wk˷& Ǧ" z@ro2 |͂5ynm)`XR[`7Ĥ"궻df'}bmxuGpr1}`Apv i>Y߲|g |2A5Mw᠞B0ކU/j8PNJX5ㆻ؊F_' :1oskeGV $ N"110(j-LJxHWD<~SøCr{$݀gZWTWLI~B2^ X3)T澧Mx-n,8||ljgyJ+{+*ug \sW;\ތuz4qu"lsJ(&r4̶!^ A{pxYM<9采D5 ȀDwb>Om>w}F?w5v3zwcu-U(G%EsV?&ZK9ޠ{E#:i .\ax܃3ŷp:O$;W쩟)PU0uoVnT<$Ybzow;'_\]m JoL3Z&Y v˰ZW#/Ȕ̼yQ+HnT@ce~LpI+Ta҂vCryxJX-e`ƕs[o3B}3q,n͟/ pmp0dc TU<#OS Q4fp_|Q,+(7HPO3jo! Lc+ k%F.LSO7Wmދ`}4cP2(2I\:C**ersYQ\,J30+M.~66ٻy $: C9LX$?:}y`7LƟV#3 4,r29~7 EFhT>aq,s%L+6_i)H޳a_Z(ZS\pm#a~ki4(p<CoF9ߩlo&.Jڄ-9zVHGg?W7 aUPȖyJ}1 Ԫs=zSvIwb En}`tɶtCD}) bXpevPs~p'8$6tqNu*&EjݚF}_HpWgBv5f'[`@.[nN>{N }j\NJ?|̺"h g _ϸ0-.O~>(>Sbg7 )uwvnŻQoZ,jN4G+[IЕAG% xpn}Az{DN1;$Gnb2yeTn%m&i9|T yiM;@rG!sm0~4KLŨ6a05Kߴ% 1" iJ݊ ee^&MYoL%ꂑ?oki*1K\xoJaLou_%gMF"quKodڢ!+ 珻"H2K g[S#KH4F:g|x]# fܟ'ksm(ŗ1jaukscE'T O91,ko+xuլ' @rG.5$("aA(8e=te&2g[Ƞ$gQ}:CXY,~-4+vK0H3~+g]YVɜ1x\E<(=,uĿ6#I},Aclu,vвS֝Fjhl' D:}Y,DBz9̊|Fl~o,D .=Ilh*KX}k$)7*D">\&ae;h/ijxN3Iվ>)KqI2W؁u{YbTl-g͡zYmuڂvݺqED-fz T˻)CK"x4-'jXDrіapf!LEv`O| wi,#93пxbV!xxgxnMl\Ь%NoדvPW`Y;i,^ĂQ}ĊFү[,˞ g>+n $#5 `5h莭Iͽa[@o8k.E8q\6S"r(JtT$g4(fB9nX'i=g};fmԛʕmx=Pv`|![W}CuE*i6fυr8'pͺLOoEm;֭x dyp08cr]F4|i.C_{{2ג] ~u-A"C=gۗ}3U! KwxXfEK>=~QPYuu s&s0;Y3Vd(k#􎄑>O[hz{~WkX{yhenWCn `hbcp1q@ctNș浥`ānŐOTv}C jsKx .",yҔ [H9a^w,='sye4[gGq!3KyT Ӵc6Njڛ3: 0^$YIPqG]Ww$dNʂ[e(S,$FN{1a [H &w$_,:>W5 Q]dP^+vcydokgA1l 2oAlg3ႋKN oⱙSv4j* /~$oi(&Fq@" e瑥V)8,-]&sY'zcBչ,((.Y#.7(yz=;CC3>Q!]|!ɋP@erӈogz%m|@^0C)߰N :G AauRCy-#QpeR)6ED5"U &h{E\2Z?(pM AJfqEQniMf!Ź4cN<%#(O%0aa^pp˞=њ?0{U`Avh$&siQ6O…ַ1X(=y3pv\*~ БP G1-Sa|Oyvi_cTס#Jq:=-aM^\n zPlqM$Y,|#g>?cA0䭡0{-6"phCZ@bymbF64qZG/3.ءp"+mJq'L9 꿒6U)Gy $΅a]w>|ukq^cixO#C"p7Cn`LvLorhL8H脻}|OBvQ(mCׇFҿŸWS07*^Ge?4*}5kG~1*¼m,N(]զ∪n r(b'qJ'nm *5~(",Al zn7d⟂lfU@ǪNp"QV`Mbo695Z*k^3t滈ڕ4$h!%N>cزÚ)g{º%P#yEey2DCP5ܴc\pp> \\l2BAa>H}t2]ן]rkh/g.iVܵyfE(ǘ.Ge|dΦnoM l vX ̯e@lP')H@R5pjT1WʤX5µL@/<@|x ()syX4OP65$SP6QTGϐg_L*QjlUѬGAޡ/d =+-<}UE0M:_NGbe_؊an piaxnVW!#tP,/ ^6ZbYm2;՚3ދ{V?|};=P91$vl՛պnEN !ʳD۸5KhrT^/y&3bY Xm}kLذ&bq+}r`; f yP@}*_{R܁/^u0yEȭ,3R'v.I~?La#y0+X~ $kH7<@X"[M~< @ rY I/}zXbOR-j}+2Ň8<Fs 87G2.^w5c=h@; 0@5NWa}|S9|_Q~d*q '}r)hdɇh6G sTzCcC$Ë~AQf``pڂR?▮6e yA 8RoٕȏAz@#BNʧߣ%4at'פXQENFD-ܐ!ˆEқk0fmeE'Nƃ؅~*/w*CƮ_.<Y8DV%o?ĿE=0p%,ݝ]jkyMR#J)dMƸ[%,co oM&p׷qCab/RpO AJWhFM5ةCjp(g\"ʝRw|7'Qz;p<w"M@yނR6n ai/<ʁIY&ӷ;@\%粍ӏ aG5n M6tatZA,`?߂?T9PΟb2&nHPxv9S'C/ `OͶ!)JO0Vr=eNB_k2u=Gu;c.| wnjH +k*9NgFM ŕ:b -tP4-KjWfYT ԪI#F{gT(RP+@C2v)Ӆ,+\SWKyjk9o9 eK&1Y%qJ0fL*]QU0MS԰k_#O/Խy 4ԭ\&Ma/Uċ#I;w q0;2+oO7}Pm*ZխH"XچBGS֯lg-}gEᢁ{JZkTo@ "KP_P\^?1VŎlk_h܉S_n>t&,:\/gHMJd,ZKB$k{/oci>a׏ҩQ.lWY gmTյRHJ! fXR3DPs,k,?7r9"90rg+1͗p]0./:a/QPTƋDIlit8ZZkVp'z."QB/fAHb}hڵX^X"[x2K2dsSr`l J#1:7>eV6K%cȴ B^½ܢO}-`BZC〘_𡓙7<=0ZAq LeN o`+ rj!r,F[A՝N.M1yL6H椙Sm55$;8 V" ]v5UE9:&`kF>ӗǢ딑Pu2/d_oOr߀ Ro{a ߠN3g?waDq4(w k{H\TKM%cSuaHo,eec:<\(G/xpdtߗcC4*?D((pkRct^գPmb!K, 1Ƞ.hl <<QKke55џ8 i1e˓@Q"&w<,X!5;- f}p22C"` .K62^WE5@@x>fCߕ& {g%BN0jƞZ4d9^S| ܨx9BVbk&'js&nVtb1͘O|M"TW֥t?:Iպ[wvpf-Fxs{٢_1INBq =[:a`izڌ}w߁/0?DjQ=~}+I7uI}3ATSJ0I'%w" Oqvk-1Kp r}b'REJjvC̺1 P6,4NLK { Fz˖AEF{":#;eeM9ܛg6WQ# 2k/c J&8ǔ@kFJf*?Ϡ@xgr ~fgs}4ZuI= WtZgzNƯ,gQRs.PԚc%˘{IejU$xK`ٗylhg ȗ=i s#C۵7=9~Q7[V38vդH\ko3o#tDdx0"4׿MPh\J b\sXOwn]u' 4sO W=>x(^r /Bsxp)b/p`>=ß$c61bC5Źl&1U"S%̕ A\@%e9 }"EX_+BTgO:YsN< ?_7fG:|;0K= $R3BSTq"8n\>ߧn6ܮGd>ɻ^kXT&mnޗAyYHz٪u$LݡJo)ofY2j&02]˪ *.UKzsT0&O3>[lw.k?=?XaS8iOy=YVxT3h#)PػW]`MB(˹Ug|M(PW$O>}4"=Fa5h{VКSDsڿԸΐ*5OI'g1hDgȁDKJ^=N{3s&<(3% qsMVȽr f88MMtDx#cQgV1Aj{^ ezBp6l 1eGjUB^2TTq6~0$N]bϼ o{}ˤQZCW&Ln QiyXX=| o^5vzK'It1wn^b>_,5A߮8svk:*!N(IcZ D|@I }_U20U~&%^)IW`vY?aesIhM0%V},>.kGZVO*^G mI)rwx 7\ǾmP袕>i.Qq +)u8J {ƗlbuhgM%]uūٚojAK'Oshǯ Jބ´N2"LFEBN[zo +f1>qHހBEDNЖޝq )Ϸb}C:FG\x!|j2Xoyy,f4L2x73k]o5׌y';ӖOaRDUt^#Y^eO8o'G'M.lqH i$vo/K"!H^95Jg&ithbqnA|Fe*8 v-ZiA^"|/:p20^8ꅮķZ'l.-1 )]ۘG#ᤃ)ҾFKl7sTSnNz\$4[}-w:7#ߵ:Gg1$}M|YUC  ϚjDh0YL@lj&C"n- =$D;@P~`b׼AG%Y&/]gdyKu}c/!XZ#_0PV{@A5xr+W;*Wn^7?TF-8|s %+zނ:`O!XnSoPxK=bQe0v5ߖ{OLRTr{gu4\<0s?s^ !jk&"+P ʐY.(똨ACIJ[h+2#48ѫr$ܞI #\azTB Gn&DT~D}Pz 1ALaT+|XyQA)ĀF[*)ϧ=ѵԵs!du:-Nr-u;%u*kkY?̇oA!vkp_k9$ѱufM+`k2f?9]}Β&|fjT3򶣧WWCjg"EBU;M_۳n~vֳ.B>ic.~ fk/3]Ids AJAV}\"uNR+4wKM0$m e",d$VwΎk%IU0PA 7`1$ZDRX}|:Qqʌg荫 ؅5.QR<,xUA^ŅKsaHC#8Èh\8LV# HD+N。}"كrp!=𓟲Ny3RDjD!cػXi2<Pjz{ETw t#B0'1p4vDud>nSڂ'*~>:Ћݏ+c;!~^_/5.eR0BB6%PQfhx~HV :tsU6/L&9)Y޵=F7}1ů>j faGlߪy"Ih+)qi98KԚł]˟ʮy+?kS'UAo eƱ ɳ/M~j^wp }*v2޸m---Ftn];-ƻmPS6J'U&Kѯܴ1$}\>ŕVAfp_**Qf8Ao͈8xɁY nJ}λ5$ًc'I%5 4zk{7^bU\Q!&DlSx]s|{٥B m%P"V]~deak2eG@s_z(q1 Gܪ,=DUu-[AN{)fjVCnvLiSsq2H{Nggq Y0jS:'o} Ag[R/^ƃe:Z6g;Br۴5}zfW4^ r%)^۸ CԣӜe6 o}9A)N(uk.SpIֻnQ4YojJMh C7ǭ=K&o: y'8 oي?nRZ&P|d?jw7sQUWuC t)Hq2wG)65Tp 4qo 11pB0C+BB?yфU3vit -eW`i$2_| "dk>n9y8o!8ana捾㮾 dX(,OVX& z$!ϐgZt{4#W|WdrmR;}<,]LXD8J_HWX4O@!D_eǢwY÷ɒ|rx:ml]3n}]yp:n,r D632su*Yzs|;+hG|;Eil $"^z$)R2b#ת遈jѳ5EV`Ab X>Zxz~8)RoEDXEM \m{$h6ѐG!n]BvEo|+hiO`,mqWg b$f!Ѥ,Fk^y0U־ᚉD<86SX3Muiɟ:1sVI97=N@ 6*wbucnY@Xܦ}U~0:@TQEɮF@oRj`]]F _4*~Ȩ䯗)J˥GZ}UnT1݀pӮE '80fT:T\٬s?@s~2V~e=nf,tʡnl:| w珜=aQ;ɦy4Ū8&rJm'RPީ*كSvYqN 3 ¤ ?A,XE+mR5OZkؤִ8E_\Aq'(i5I:b`>Fxζ+k;<:tGo[ĩہ弦*&TZA= =ޏ :[\`GyCvWv)ƃ^ ^!~y\'A 3ɕJrcpX q{eڙжUdJKmFHO^ʴZn2^mϖJ:1[IݷԶ5s#-t+Vs3Q,/*B*;GW(y^P[@|ְ2$l% _yJr^C9JZk{fske1ZS-?}x#!FOg l]q0RQǴ}ia(-j5tmPכ}JD좸0B9&:mIwrvDE5ݼf~ZeFPdVьfxi%J!vg;ʿ}lIǥ"aM!eᛮ$EZ˕MDP!A'vQ34Rg Pvۇ2~T!/陿6asgzp6EGjj;.\/6ېw)h`+M5 _w{{ojw ĥDˁwbly"%g/}EZ>;]g\V3jؼ%/;W%Xr֋be椉*UmSѝqZ ࣮Qu5J?iԮCatjt!a^zS(3 g˂?ˆby|1ɿrOvrMY< B.8pt JJxL,+Pp~Yu˜IL^oYj??G]CiecB4u )n,e;Λ:5tڵ3N%)joyK@)9J ha5R \kЈcrb@TLbm'A<3;]\y4E_]vlٝ/ҹ }BxKr@8$ fV o d)f:FW+f_zOnzH aT!8mbv G}|8MT`6)}Gm3]: iFʺ3ӡD$و,@׀w( 5M9TgS}U:W>NvYJgLYT GG8v%. F՘ RZIg} m,zpmW&2&I?w|g˔H[L W,3O2مeV۟p$/v6"C84-zW7 /PVwyV]Yo vvhIy%ꎿB xXyL*I g84Li-({*wou=U1{A;zyzNWHmNB\uh+^;'V].{:>ѳˆ1 7,GZH޼x9c.\@!<؃@?]yKDFE4z(<48 ,#: >$K{RA?mzL ȀY\zIٲhݔ ky&{Άω/#b #:\MRtwp⋋goKL^glz~:APpCj]n4=A" gzo a f?^19Tj@h=GćL\Xg2+pas XgQY؎ۤCA8Jl0O1D]t1olU/=YEkT8Y3ՀT: nSȈQcWލ+eM@CSӱv-:%|lжO0Db(R8x&g&; 䩘֒+4}Wd LO~qbfs?&LS&nC)G!FuM*;J?iߨh99S&60Bv`.<.fӁeC͟pF8}ȹXSi]KwHM%/^o!y5f##'E7MTne4u~/M!eB?(PZ/>.-< ׯV5IV8ٿc Ze荞Ωw2'A o뭭cJˏ[ƼOx[XM)>F"%N ܴqY_hoMOf7Ua AJDBٝRjYVB2J~+_@w:Ф 1"H깦 XEQ$}IP!{65ް,{,b Ggl)07^w ,:x7YY=Hqhg]I_-[u*d,"AnLc|c Q:>e(1a( AӬd% ӄ534k!g~8kX:0Կh]ks7PaGޤv=˭l7AnAEUvB&J(ZY#:S8^<덹v>$v 1P&@N̳zrR:It8j!x.Q||MFow$1$ Ϲ Ea(BQse{FΪLhQ^uu~ʳAfX)Ia>__uٍz@%I *I̶ާRwԍuu:j27 \x("7]}% Ñ[ `)wЗ 8g*7XC$Wju˵ǀ'evȊs؂=ïqSϠy|}ےװ):[5H17Sj٫J.|-{"ܭ-$@ /v_mXbG&^LF~< [X-z? kt)17ăoX ^fqXE'Fim_^Ï^VΣF<(k2+7E.$z\&>}p7MWT8@enE5y 8KfSKJfoPj:&#rA [/t"[V)p:BUЯcn 2\#)r|tQbQ, D8kSXc34irXw[gE+:jYc+ys[(C~3 C:viYgXclz3o3Ku&ah>àCWrgڀbƅv_ yꉥT\Uh +leiOp:FYc2x%-f//φ׀4ЙL~h8+53|`=,HfUnfDiX<S`će OIA=%`34q[ 3>)4,H(,s>`Kq$6HƆ " cK%vxf' }ϲ+BF/U~\$zRзߪ]]x?t6e>3@ww]gD8 :3 8"/=&#RRQMS  $aմYE-c~)y;tej=YZ'Ǔ UW1si!&x wՃ]$JMfZgA$;LɲV=;bkYV0.!]ׇQ'^9Ö44I2)ߎ'~seK]z%_Ll+lu / |aXeQQR60/QFN@U`t:N$`{5 "]<hi9>2jnvl.3O@@X6!a઻]GBR$0"ytUֈQ.dc(S<;֏#okK ?K,⢆0tw^B >f6IVԤ_R;2 d\ Xw>!j[uM6ĺPE$υ!+F@E{\0p1ILY8\jfٟi_'QߵmAGtpkFN<+ZAwGMW@nAFE⁌?ZpN 3pk2s3UIt!82dq\hpcV8R"vJuKlwwlQm1`=?k84IY&A`l57YI&aSb۷*Yp@, [b+X]OIF4&Mu(lYeHguXMMkUs7O=馡cYZV,ג;.x-[rQyIÄXxGTxmʺ3Je֡U͛)~{wP]96xBB ZtS_rb8 ǩH\7.,c>Wg-Pg}q*[/p&WK B@!ЅL4\" JDFy٥XJ/{7l\A@& W$ 6_:XG%y vXL, a@zN~l&TXᄸBnGruO J H ̆A㾋y&Ƞk7G[c2KQ5}~DzZ]m 5<vN 괈&*>sܞhcyg#K%>%s㨂(u]1TCН;*tj=}j>f0ؼ֦ }֤)` Thki85*KOD'.G=cIt+$N.3{'XqA):Tȇ:d1YTT2,5e30=pc5\PXRwҪj<>R}6=rUŎьG.>cK}[℆ew_݉T\j318RYJ#bzha\<.pK bV &[%\gbE5f!G˱0[ݛ *wh4f'S 2+<('}~ʡ*8\ʷ<"6b񌋫6L FIJ/ySZmL . ;׬ IqFDI_ֻr{շ.&09^J7fW*koZE~ % 1 ^lt@-˓ q{V qÆ^jШtFgBne0Nd1Nw2",X],gOӢSR7^ m^rTJƋ KjJ3+˒dH=;q76/nS݇Dq@׹``!5ʏH:o3@ɷ#b[I^cTq̬ 娵gC@0yx6 vB M(lxE1؅ 4ԨRL]ZɮZ&=#1$FȎ b%zCVⷣSl$:k.46/q"k~N՜mc ^ꂡ"l{YB8.73U ܘtJ01z{"r*AhTT8h |﹮gt%VFLUq2$Ƀ+M5g3ՠBO_~:;~XaFu33[w2U |$CMI0pP,.ǗT-9jJD6l/i?, q J6:W̧?̕ڐԺoʩeVWlc[_)i8EיS&&٩hʂV2ș%ׅ-c (24QŷQM?ٮ}EW) 9\һ èsE8t0mTi4RP8\_DSu)L_lYeȊAMcEwl/_kÏL!0o_g@F9q.`4kvYᘮ3Em8QP|L?j"Ý)YN*lR"hs(;;Wf"Ev_s@Na Qs(uAH3ب 7Jm=ʺf'n8zu+TeuĠiң#>4S0{6h7"n[Qui^X޵ώBOf_㬛I<gQQF[ߪcS2^Na -D]G9ĭ|tCo3fo|U0 PQW45}~J(+T ҍ-0vN#rkh8`oT0qq}d`(gB3U牯B+.5x>ā  ,Ej[Y|$NpdPۿެ-O'Im(uHs]fzfBFvD4keՊBμ!g$Ck)TBfNnĮZx=`QN0'fԂ= IŜ+Fi&w5-w9@wC$qS8VρNOe|d>| I9KD@Vus%\δ6l U!9A.Ӗ=y[AtJ?^u[i'dF:ŀ/o"WCA'=0A/jʼB!fD tSOl( A ,7qj;PY\XmQ73[Տ6O h=VӴK`Rb\!»^Y|u._@gou**+Тʰ6苗fF-US dX>^;ټWa|Yr.RC lF\FٺMQfۓ3 >C$f"DM t%̀j6u6LXp mN&`{-n/1%>p$9κR$hEMeb]Gá_vn>w'VHDo,u],{ی84]c;5;vœr)6b13}ㄍ'i'| Pݛr,ߌ-vW8AiI/[)If̧֙s ^x% ;RT0ҳ.1m1;~Qr{2ԧxnh@w༎lZ`N/BQ(UGct&l1ѱn%F8Z ꆶhU;.Zdw`v d\ TX C'f8pg n!׃H'N֑4Z]uv_S^x0 Hׂz16LCO/߰ѠX"rz*#5x 簎޶zv-ҿV补(\qg!-EY lͩ?޵ lF՟]FkQ}&\~pWгyoX"{FyD;z8?C ,7Cݴo1KtC>7)*ǁo!\1'lۛ-v2yoخїRj"aˌQ8ŗ~쮒Ty ͸ Fw 32VMVuaσGagri: M%B1"$'ۓQv)_XqkXeu JTh6gB|B<Oh|-I L'>~*L2GBɷ Y*졞>kdl xL >zL̡-w#L/ֶI揅 ¸^)T] Wr bbBC%-k>= g^v.P#_`ʶjK^^;`Y4M^[hnDut;HpN [Dҵn]2fpglOIʌ~`۟ҡҜv=+ p YG\ua!dZ:u)+ !o/}LaNwj|1UKձ]KnHThnbfw(cS%ǂaϮRnH8.RYB:3eܠ;~aW農7eFLsBiAhRS.c/G`066ωn 8-.UJmisw!tc lʫw\Xw€-n q􄷜EҊ] V8t|;:kL:&z"Bh>8^Y+V z#1Z``z.ӜJ>~4R/$A^vxz2CZl)A[bQT.ɹf T.H՚zC[\J ߣb 6j9ׂD$f8qܤ+>.B-ޮ oz[Wׄ#k>~u |&;;A jk-J5jYgwʠ&X`QxHX!)%ഥMgBQE#؂]Ǎ2ϐ~&)h(#,a&Í<ˮb7g<ŗOF[>f*5ۍlZt4 QFaW_"!d7xYšjZ.zǣ#ζקHj .;!c3SvYq浕blq4/.>k7sCs?s[ )KNm k,j8K33\#|9W h*pJ_9\:Kra/NAl^QM'#p3E\`%7a40(#\wfCAR4d[Xar밥J8χl |9Qk[>W̺tz+_Neh^.eDTyPxd 2Er3HJh?!0t˰%gr.dgf"zxKpL_nagm'5XvnL=v,ƩUZq`2^MC=[:3F#B(zaT,ƒJM7^=PrљIxPGwkK·X%O ?(pg~y_(HBV:-kS6.vn7@r x06zg6ʣRՋsk>^9'. p?ւߒ$Bo3 njU -guloC_`!16G2oAW0`eNǻJ1yD /0MI$뉠"i>?'[tLDDI:ZBGRߣzU3Hl f 2jqeQAШsyI1wv5C<;Ui߯GF,mEqq[:vp@h؇NC.i̕Zy`M}y\aȻ4+*̐9e0}]dl/4^ط(˗~P2vđIrz)$ >)'GO^)%\u}C[DnTцrBQc)IYU 9aU%Ϫ3zQ7-!9,XGޛY0C6yյ]b%l$)06J#SQQ͵Z]t}.k*Mr; Fsぷ, oSO /PXgSbkѭ%RMP@ᨚ-"Gh% +XE @M]8ӣkP ņqFIZoNd|kL@ =db{GL0{Hn)^e\ % igf,m nY[(F$.JM%v.Oc&-`W\CP.φ=Db"hEχn2'njjm"!VgY/Jfl|xy;-dI -\F0A"v*g V8rF=7E&wi'%Fth9t[{wN\Som$;]_lN_ڼJJ"JZ~8eyo+'B˗w*/λp)N_q{fs;H&(yriNJ)5\5| 6w<c|e!O).w rR~!Ll/6.OT'Bo elTe/0f|.Bv-Lbi_mEyX4A7fF f yZ*ł 3$Z4TH;keH1eWZqjr^ur%'jepQڋkZK6~nųf4XT_D\J!4,CZ N, )aZ{2=dso#,PZ~AFqtqĤ&{i4Yak_]c֌ȕGT.OzwJGb$UC/Zd ab@p%Q_~mAy(߰UB!BF>QvĀbae{/5Xq#wR3w6k\t1!Hx&.ڇ6)rdMrƗvd1U/ *0‚"\乞D L2'{ Y!]/=)N^2l8Gig8lv+FBw- چh) f D Tжtm*ٶ&b]NOQKCI=n3`[ IZgk,5s݀ǎ ʉQ޾m0Cra0Y|mbHOɺAnrI2}phʭ #cgP(P啙tVciL,`P6Zoj:vԢ>K!Aڎ$'(p*[͑!Z Q^(7L6̨z=e,aBђs1s|+hcJ|oup$~_z rH!gL5`|k"¨ e{ޮhLS65p|VYW W*}lbج?W% Q1/I.MȳZд_lEOb7^V^q(dCg:xy3k$'GRB|e1%RK3p*ҷ!fC)t:VHW>9J9;į(Rr(v'l'tk? bdE&Hf=݃gAViB Sƪ #OsNUj93.R+ڱ*F;yL_?v?ҼzjlE3<(}+%IPgS~5&()/-ƿ;fY@.>2;)nn1%0I?M G&fr 0>\o"-H]!>NvL^UU>]11I$vqD4~ C7A.tS*rc>k7@p8×GBXJJ9`2lݴ籶Vr d$xgUݳK:QL.#!? O;SeQ 2N6j#pHʹ ˩]#SPHӌtba'A[jk ֟* azR#C@zU63ZM;Y;z^;ôrʌz. | zBG]Et`]M\t ,v}wk}_"E]1;9{Gl:mpTٸՓV{|ye'UuZ5)`NPVmg&`> EVK=MTq|ZJ7W#XeC!@Ii;Y޾md5Qڊ!!" B_GdKI o  CcV~2?^핹g $\NhSߙ]YO bP0B1U44TŒnv%F]V4e||lY.z0nMn]CL4'䫲Ц;;3Nيy!W4LCW"H2.c=,O{G_I]!6&D"(2!|:./Ħ694{ JߠAAU \R%&Љ&nE,8g2MBXOyn 嬴ft j@u $kKr;Wi5j6~;y|P{aث< l@h4 Eh.ɸ޾Cp Q#_1:in_?Xla)'=] wZmK2Tbs%ȵC*sX%L6q40wmbgIK<Ε{MY ڵ+[ Ѯ!a'(nwRUGVGO[S'A*?"ףnk5=0i , 8n$LA\y"3LaB8nґqYsY;VG_ K@2 EΎ"*R^Ja4*NyHrcJ8edA]# 4ՑdWZϡ1 T!Qܹiw}\'-[r+|#B0r} (O;tO86/w 6DR *0 FS?5:5FM%`Aҋ07/a"h>O 'I/<ۺܸ^\: ՟?A z78\oBW*55BG@Ѻ%1RMyl3Y-@_elй\UR I|:8'"J6GhNG_V͞}7R"SasO8Qp 23<%S:^&Z TIq85ӀmE۹4 f*~+yL8V~/n6mHhJ%jz IڏG"q7j3K|OoK=->MI Ur >$HIl'qQ://1;oדTQa, |Y@:v[NRqI #2RIBTjA#4)+SROZ,S0@45 /\rTJ[+f =V\{M$QҬ:>$"OkXDeķc;˳SfQD!4cQzi`oxŲ4ҁs}Rgkc&o+M(ئk4жL2a<6^ӘQ4lk`DAhSb8ϡ^G#Z K!K'>}鯍)zP)ȣQ?izZ-(95;x*K=8QQ;ԸA09W=sنaC'­qO&0j2?QoN|u2kݤUC["#(pR0 4J#$ ^9a,Yxqupfccv.rmW U}t10exEW{g.זOyN;QARc:ҡk0)}B 8N6-WStX%T㕶6վc7KJnת݊kҾ?7EE[ao/c /mlBR@kG(sh.DdEH̵ ş0a_rІ~(q^ߋR~ 3;HXՉtQ`٦Yv(uD^ޝ0vw;G׳t-*Lj/2K- Ai?BOFD hQ?p!굴b4g0C7kLVHk&*٠q$Y!Gg94mZK`bR, m''{7UUK~ONk/{F8r: zFdzgo7yatX?y[}2MWu¤C.D2U:&3VnW6suK̎CL/RP ^J+s/`,ey8>'" qDwr5&aPPMDVӧ~mJ34hvJi'atQ4(Uoʏj cwoAS/55'?d>1zeF ֏z3ϢYҡeMX&jOz< " b%J5bjt6t߶{+O )2G\?i7EcRMJc1T- 9RlKs^S&dRDPLo9'bKgQfϱoq!]'QT 9eS<;ɺ l6Fg^{aS@@>4iH]xIʷ AG%yC[.z=>ۻhV;kP88 LA7?*rg//5|*(&?+nYn2 k`ˡk|IJ [KKWt%(^nmIgnl Ĥd pU25XtNsHp# - 4R-E0U ^c*:e)讓kz"(T;±]<[ñ-&Yȣŝ(+ g-x|s\.Ց i'u<~Iw]-q&³Ħ}-7LPLE9.g[!:C`"ZsKp+x)x (6sۦ _fWP@@ۜ?գ8VJ:kY`ִUzJ]?Lvƿ*9ũB>+>݌x//j4BwhL=! Mtvz} !'@ =K'4Q._cϒzfV'řQl`T6#nFD)\_ ܅= Z5e8淥ɯ-Cuz{$U=Uт?JDw+&w=Jn-s2nZ&7–qx*!kF"Gk/d~,?Yel^*.pR}f0jfŇ,gZ C7L>_KsOfx. Axxe+ё{g#\[pNl<VX.hW8ðT.x-&HF+Y>`zS#L WwRPLy0[:(RzZB T*u{w+ҠS3@7hCjǝȜDeN^N`? 4W fÑ/!|#ئK:\{} TH1"٦2r/!$"9K" x%LEߘfBg~qZT z(8,x?й HJ܁} ?|G}^/]F^+2?]l EFFĨ>zJͱ銈bYF1-&3 y(T X.XS^m%Pa=*&wh+˘62mҽC9w H 吩L7tSf%|U %VN I%s}Ym.͖u([8; ϼiSRf /tVkrdzoAT:lΆ?E{%G8;ѮakEs6*r[1Ȱ\ۼqj% lpl;̌ UǤe3-0-G!v:j0*_][ 7ԅu,Wqה+cg0Us*۬^Ym9:޿cpqH[._eaXN\ ?rt浬Χ|P3tLwӖs\"ޱ\o(\>=TN@wg\MWҒy M%ȳ(EeIKƀ(qD'^E; vE2Ahm$ 8!EVĭm:zP]y衲U6cƧR*3!s:"G65}Z@;$*cw{װpsȫB-2k4"Dx{6i4ߘH)R~TOG?*."|ƞO8y,ˊQ}ďwDG/u͸YAWol46h6Jآ" d4Os(ˍ΁z&ko]qi]/N'e /*/wA zw|5/GgoqEic_v~._ 2K mTx,HK^Af\No"ِ_j c/$*ψNni4VmES)_Y {`Q RBDF-^G4AGQʕH I)eކgp[MDԋsZ|T+TC У$ } YE܁5>kB k=h;nT';{e#̪5via ^(f3{k=y#BGQ2L^:C+S.2Bdv2 Zs5ޣЃUu^6.kiQ^4"'qjd_zhЮ`t冦Y@08(A˜{eϙ_l ,rZ4L灀bi"檇l6;5k25gicٚ^ gU0k9Na,\5}Ӡج_ƪ$dh9Cm( 1N<q=LMwTGў^?MItM'״8̀J'J#! ~l}Jqֶ!֏G ùTm'dCNǕ?eS4<Wǖ\w7g𫚓MxЁ"[.#55@O"X#9b!9I $nGSȺ^ 3Xi8ĕ.n"㘵We4W?c#fG֖G+X =!he Ϲԓx+0C'KU˟QѨ,%J8K蛪S1Zc HHh|^%򴺗'˩J{1X𒥈FeXm]y]^+^I]P3rVjf{۵p, ڕ2zj6&q2, Hé($lx[`nc7e[׋6qDD`3gmjt>2]v?b*(w+R8PD)PqG}:s.4C0 Y"9q<]czJ*f5/6X3o^fa;]kVFZoQj?>Ν4d_ Ty%XґFRG2YŊk"[BcLD H`~V6؜#葤hv9w'x"B Ʒ1feO іU :m ;Tl?-_ W6@g;7FhjLN-ꜜq!0N;SJ0E3O̕R\X|SY nN&<:nwX5Z)wwTmcЕ&Rn8j(!цo$h66Uck NdaBo# !&Ja]Xllڶ79"N`V "oH*>8z<-EZN$AS+ϖZn4&+e$OԔGW~Yo#GF_cmWOC٭ ZZ(x)K5g?Cڥobb,BY<( ^cȵ ՠdQx F[u;Mh˴b_ʐhQ{oq IJ0&}T& VZt!'"Py?05Qy ٿߤ142j *U1)}jj7:V>vвs$m`GWc1_ztp|2[ͱi)P5V.nAl $A.*3lIb"C'ϑl9si!d՟,E!aq8Hjl W4яєj+|dΜHeE2y9z@ D0@ʯ\A\0}.ڽ`Hea`bB9TIߕ3ab݄vaw >[Nl:,591prQ$۹[vE}^uD\氍Q:mzo{8 0+ ]d* ZhzZ8^jd {~]|Q&h'f`㥥̩<>pC0ȅi5M~bĎʼnF)N6p,NZYqHSJѱN`K)XUM"\3^UޯκRB&t܂i/U38l|}?bA8_7([!dICh#Ư 9!"+~Zn[KEZ!/6DerOGЕ9*Hٲ/"``MDo;),[eɎEd @^1愐Vz87ex4Y^Dڸ+/b 4Ya8T)> "AbI uٛ Ǻtz)u7`bX%hB Q:3QѿDNm INa*iAs0cOT~/j!&=}O2ioL3&7.R@NzMFCXCHKATW.__imVmw҉>ATc{ƀY.V%BRP,(QM>tg:|-Z2Č{-R1 ,+圫%O4 :;be{KvvBrl2=U?$v #'~=zr  F,ˀCT18w=/+Ow2kf6 ]?_ʱmIJZ lv_Z<Ԅy͹3c`{5ceǧ*Een_ah];z x/++θA3KK0v/2$nwBX7g< LR~t? 4-2:چ~ӊ $%8 +o}bqHߢ}tK`Ն=UG*t_]P7|»AB PR_> 2=| 5'Mzc_G~lh#_[D$1s"jN X1zޘqՐ<{u( )@c|FugA :v*#}pmxWB ن:r*osF1d{s .O8fgi*ň)vw6swSt(uwk74Z5+&ƿz{9pb *79\4~Qj`XْK50#]#9l0>ɹ&iGŢ<=D\"p2%d)]JRjb; l({ rM mF 25H BWFDiKmM}Bf1a8K1.~I΁Ψ*_$ A^Òlć-&CVY'I}l@K 9UTuKiЍq||&7Z8J4NPL8HLCob4$d⨜bW9U?[M/(}hfiS?Uc!: '֢+q-L]MU"`bGNC炅mEF!W!Y[LRy duJkuQ)/dFh;ePy.? }]LK#g@rSQ %궬vy{u:Fq-dF 6(YʻaKQn(-qp5O=?X*cڄyX9H#,QW A% Uxݣ|ؕ=RN0~w )H)RGc-2B =G@Ud8)/cN_J}L?Omh@ zDyPD:aL^t64|*. 1l+6,Fd]*lNY5~8E>é/h]s{? %e"F qrȬ51/uZڏW-V7\黑Ca!96 Q\*σ~DZ'.y~Qyw<;f+!?sY+4{a9JD#.͹:4O^ˆ>s&)EN9Ǵo[TH 1؈QXYS @YT͛j~%ͮMPw,aˠI KSLSF.is{( Cra `*C%1x NJАU 4r|.#cU,]GBq9ϡ*)+7Wtfljٹ`^qn"e凁.^v[bvbc0oMj0 ӍylD)X4F}s䃟UbF}-w:؆AzWG{Fΰ=ɋj5շ%X(m܏c2}q3=rRp%}p?Avlu?ޕ-HV_- f`EXj3\f ɜ؄@,w[vd9ZM18lj18~H,F2Dk'=ܿZ,9 !PeʭWE˾lLHf>H<~M{#:WAyǾIRm̀2zؾ~m]LsQsr^ޠesQ |u7*4pozߠ㺚px BrS!&lu B |͞m9DA@q)hI"Ÿj%ny.慛QƍƘ`-ӗZis5dpC*RAX;DT=K4 9Z)хn4 8w~c@;`6B]UCû4(iCe[~q_7oR.pQܮ!#&L46{[oWQJwmxE\H, :UoY/Vn@!S.ĄDE^OBQ%#UXX+hM0C?pkF,+m]-lJ AU5/+(N>~ #1JA{Y8oN^̗}Ds!Z鵽X*$$OdL [y3}ni`[dó?۱<_C$ҫk[o=b 2ku3llMz::@o!?cW߰bπ1!q> ;%*͡-lx+q`b"/eDoqYj]?컷ND`O2Pi:jrN>*DzɄÕv67<`E(i,]rBR0:v\a[&eݞ,k?Əxv`ALubSzlx2Ɗ2]k:J.Psb4{!Ljj4sOJ^D}]7Rëib"`Dϸ5l S~_Kp;:i[_@u<ˤ y^I'm7z.[|Ѱ&l/?XV-oИ{m-VǴhg:ɤ&"#ocN2'On̻!e*Iq$Tp4Sa5\ɮAf=j`/ZeY*a8c w$AKlԤt8yFŁ*V9\znK2툧<$ʩ_| Ec>4P|Վϑ^/9`/ gŠ2.k%{.n+9+#? T%ٹ9f)fx\,TSBLJ`yQ̆*BQCj]WN=1Jz |<ܨ6*dZkw.{/egFG¨7RL6l"{‹^$a%?+wwD*gә35)&Bj;x^=T.\<_(!Fx] \5pƯ]CoO/`s.sw&̤pQrJP3FO9l)" {zf a-gXs7%g{w/|{(y \]c "2sg^-7 j z7{~7([mNwi-PHr;9 I[CN-8vIU0Sy$ d:5c Z1fvdK7pV7ΞbG>0舲551௜QVRO4B$厰m\ ]G}QuI+z5c- !UL/d\ǟ-=2$Oe1J|l'dX׻Zcτ>z`MgXVR9ù 2ݼowM8 KX9zt"aPw Ⱥ ,fy/OK JKFuw7ꕓ٠kcCM>+BuH<8ݳIlnJ^6 5:Tb3v[Yۓr2L\2b\!+XIfiXXl_i{bDU HHrdt~/Uam\sӜ>3Q$sxn'F-g(!ȹn8tZ!kY㲃-hÏSf Oû~yd~k6>BqM͠|s`Sl}ud@] m=Jd^к mȠ ϩG+g0} @]Dz?)H"$+cbGeu&N.HVga-<+[&8e2끁S:1IܫrRTTiop ɋŜBbyMlFK:F_^ t'Bc5,mE8V}~FQ 6L&kqЏH *H^p3OhJgBV?ثŞ}OV2vKIb$eU߷3_fWل-Ϋ8qhFgR=u_Y-y8~ ŧ?3ve6eZxsG-/*'[v BduN;I-0'tz+"4XÐD#!N$h(% \?uv} s#'y=y Ƅ{a_QiC㬹OPʚu>8\YF%gQ\7 Hj)w/o6tstc̵/K6.LxBފ3f25A 'G ܙPvlϱWffR9}nin$<`]旄8r$%kpGA+8/zQ?s4Fg6YOf=3Ҧ2\s܊@yLzq؉"$֥$4q{XrĘڠCH]]T p;B6ؠu Ëap)FW@QX\:!L&bKK yUr{a;^i7d) ?YbŊE%K}qK]~`Ț^OA&n#'ś'_dZ6"nx^?☟º8}ۣ,bϰK0_uE-奋 G|m`n놧V߭^hr)E4s0;JЏ8$uiL->}<9bׯš(:\F1K3" l.Yׯ K0fu0)X-cQҨ[,ua/@.zq>v[u+4 U]Q}!Tkؘ] >}I|oI'0ʄ%1fنl1:{h)fN 2SGٶ\}dGS@&ܶ'mW  ׻_8?ʆQv Bע 0AvnwnFƲ~Jd8$>yVĽ_Pb?*gH| h.DVgoo 3,bagff'Qtu3v8KO-5Lo\r5N: 6SgC.,m\gKV@-̒cJKk;LĝÑғ_/('6eDt97>HŒjMJm B|jkmAbi!\Xd9Im+f(wꄈ,9JLb=>].*C;wج mAr se=:L^>}x _y=I3,b1Xoj%d.ܼ緩4,*[:'-Z1xb I?mTr]J*a*-,P )B@Qx!:m֛Us>BΨTHF :c"1tpm(v-ס[Db~5σ~o5AqDb|ou-K[ {lYN1ԭK[G(: RB 0lWJr ok;3oKUoBsC2x"3 IHCU }FP~Η_dV:6ҭ)zg&h-qUhIt972ǷA`B5_$Q!LA5lLY 2mJRky݂NrGF Myu|N_6טYi`*GRc=ÎGAp\g՛pID)*ͶzW[=Jαx:ZMvjX(нۏؽ.0EJ ,}D r j:w GǤ4#؉Q!+mH@@b̉e.~1L`DUfo̬*Z4VqM)?'ު#`B;hV2VNb{I8"q ^2DZ$Z}y[0n9@ W"9&T*3EH }h&I#44r/X 8,c+Ϻ}PA)G= 4Dp٩~ֹ,6Bh1k`̭=))`NԹ6_dvjJ(8%Q cKvW׳$XNm$ù^V oѷn`'GQR₮o`dt* 17X*J:օt}z-cW37&1*TPdCU&}{ʗqŏol;ݝha0*Um5%T>BNJr^=R4rXzA=C2K?4o(a&P pz/y-0uCY)8m Lh^ޱģvj7|X׊s eRgHĈ5?j'aAvzw^bzSݴH 7n_i2)T2;c&'/Kai&ETO#u DS)OBHt< : F)TkrCѩ2؎$47)!aMtB$)GC[FcƔt%!^9.piv _ 3QVa1Ww.%/*eD:Ӡ7Mr۰~)@ti4Ğu7 r[ T:2ViżVNnaNw7|fMlud , Cũb xEAx|Wʥl cL+jŅBZﭷDD_GyNBpx?c *=VmkpI/w beUfwϷ'ko^ cvASwvpDž`S;?X^I&YL`(aERˍ_m qd50c)ݵ'I.y7䦧v=mNO3'fz)ЈP?m>9|7 C=&.dYtpRa·2p&bʗ3=S)]!3P4z~͸!He$UB%qb ZY!4Xm!'9jBj:'zF@As-G/Aуӄȋ(ÓXLPEłp#,g䦁\z=^F97 !!RW74Fr@Vvp1pT{ tgJܭΗ* Ѩq+X;w໿srO$ȳU u`P *jѽ-6H=ޱTH4eQ}Uc|I-N8&:=72>sk z0db$]~MLXQ_ jJ'ig!#!ڹa-΀%R2zqU+JrqT>6qJP%YI{#;t~Rx}6a+W5ݣ?$-LC_ޯk0r?ԾɃx FgV(wr[@k4wVU0C>!a|g)uό<N<5τEaYaɲgӭGkN^Q~q-9zn$zTnR\-y93qtقds}7 F(S o~&iG/5DG[-S-TFxM,=pì%:qitD Gt-SŔ^,24m Sx;6di_`7CB}-|STN) 6Օf<>Nr"b[~>Ld=fx [8>b:IyMG*}vTA#y>>SI1!\e]Ei%l QX 1'Z[;^lG1~v›K@ -CFo~H<Ӟ[h--OUtsJDh!/9eo(VhOdttG?zDZnBMU@;gÒզs*dRp[c(B4ng6!pNYKomJ_Aձ\ۧfS3$7^ȝ&(@|d0UMiboQ|p8Fbs!#FK1:[L$'\O4,D}~V%6b3q)ҬDTZszN4SqZ'X9OVi4p3h>,4vVS6dwrQC(ΧݕI˸ <)Gmd4B%6.?t [ØBeۤ! 2V9/9!tv5CV0hz?.`Eu iz݉s(w _JUjXl k+唤uu-F׸E=J5`ۘ^H.+Y +^,=5X,4oeeA9G?vO2-g2%jSdn?ja'!f>[w["rݖ۝-r5ֿQuGB5'N' ,.38%K=!mOzDJrvsDRphoD5#P@֒G~֑瞩sP`KFM:T<0(IA_:iab*7~1T̃s≹!rՐ¨T0IEZfb01fj->?XqTd`w *(Ѵ:%vn"y@:eURsC׼\"kd @đbg O" PA^Ҫ&'MxTU!|=]Dñ )U[C~1=K*M{>W,F`#@nF` 8 ̈..wOe?`[ؖa1#R?){ۘv`9÷j'ul~nf,9ZjKbz-!&#I(ӎMoɗQĚŢ:M|#._a#DUT?,"X1eY^OȇK_@/D1BkmC < " kSeAߩD3 E~p^ufbs]5S=W V$CD0ֻ`{#QSG.~zwy!x;%W.=v˥GW]$K (/z8o9v3 VچV988˄ UP"M/¼ Eɠp^~r7f e9qFDbzGɀlG&7 3 B&šzk^rɷi&OJQoe* 4WUnZ$ K96ߣ_TEʙ\‘W(ŧ39p M1"¯!DǨJANj)[ %$MI9G/R.8; ঈ?DE2H Ί})R){ňIHE< tJgux-Q5Bn3qX8Xk}q'mtb|-Ȝܚeq{i_j %M kEe!͜؇o'94kv'`j8; h1P`G?WG`zhq'M& s/m"J#yi|SI:=_g;&!7aI ۨxH2d )˓9P7RxյӲr 0U}R.Ŗպ0g_liUM4C92TśnCK*$zU=˥<`taHQƌ%yg)=d #EzSuTEGY %HR|1W3A hDs+yCOֿׄ6&lPXRV #wI'mޫ\n,2"B?JMl8*LokH"مQ툤V  ַd?dfyq}q=vn8:$;4[5ɂ)@ @I8XDqjk!{{=jfCC~,ߡhb.N<ܺz{.y ̗>};Is+Ow$ 尔@yo(SF{[Iϝqﳪ8cˋ qk"LL5%ZdWBFI([v$tLPbtaV{n28hTϳL'  wM vQq~Ð|b ;Fdw  }Ir;TBGQdY  _tM) "^pq;Twu᧱HvgѾ{h,_}mi8@׏hі3U ~ h OQM*kbYW|uJ,a,G@&Uybkg7*:a6yਹD%dItI0/mg֝},bZ? }'(Io,wyY?sWɑ ϓh$>%f"P~?{G[l Lc` #l*.{LOM~HȦC5kJ܌̆{}ZbFߍ;m%5IdlGGbsއ0Tը4/<{PiOw|f)^Ū tOæ s$8>8prܧ$j'8g  O]~=mwJ(1#'6b|au )}&n/z>.Szzѭ iz=~$=ve1]MaP%C sn\6,hC0r`j:~?uҠ،>JU^Zg-qn~@"VXa-JUWA0Xݴ#}2jq1lK0s!D۹F[I6ޑN`ϔLm45][91p .jO:2-򃅶ngI?\X+tZ{As-2i~ h1^GeHZ: 9N2UX'IƂd&Ts8#mz~zIW&P8>V/%Dt (K(ۏ<<@y.GȕPxQ31[J&Ao00(æ]R, ,$ۊja\XZW[˧`{8SNB ]S Wk繄_'l.U{UAgڎ@ؓ,~AS~"aBoG;Z#j{@Cbֆt>2?o|ͧG ^7)_- 8A p7w{dkY l_pp[<\zj6m(uɶOOxߠ@ Pn2eQ} EƢ5 55=ܝ6(B `/(F&Q"_4= ar|1-k)˝e7_i4},%JN=sΉ}DU}>꒚8:{0vό1w?ϫwߣN-XO(z ;f?Hh_"^::?8`2?VXFP[Fh$ 4nYyլ7\LXa'! lXQ{S]ˮ*W aȴrv\drG<ܮrl3 Ol¥Kn%!"_ĖƙK`[˘& ۿqb(+†:yU{ .)6p( 2l`Suf;Do@U;NIX\o`&$\zqF`(͟ǒ>&.G$60;櫓:Ǔn N"'`O~Qoym!'k)W|n뵟C ЮJJ!?~~ M`)I 箝pvT?8w"%2m"AUKMmŇG/ ` ɫ4]~hU;Th 播$85k-Nf 9vI@'͝U2 wj-eii_ս-"SǰS+=.g}"bbgKqCTc\՟ 6+Gb`o~g.`ҁ ԑSߍm%9*tŅУ F6UMzN/u#U1IȒe^LZ:*7\j0i'@ȩ"PO2>Lf] ;}8 !z׮r!^#8P5zÏ LSIDg]88 > y.-i;<_. b[VیEe^_:^HD8&cZ i~c ^Knpq]岳M#9EFA[8J6펞Al13<bpdE|M(i|,Ω83`jqgEsTi=RqH<Œc<' MJ>A's;9$GWi.tk,9'\^"y&~"b]Yv@%Q Y{U\dZwtc.vx֞tx IҼIܜ9pu>Go6o5ʴ*F@r @y]- ٷ8G]E.>]-hAai t("]w="jq(0(::71WwOx^YL2r!:F\sN<#G?*ČZ8}Dd\!횯\":҈K<wzŀg%@~z}\쎫!GbK%g$n:) AiRyNf,I,-d(_2XohdyFʠ=x;$]'e6l@zt^K,NBg=وX3,(C{$"g_Xx8Ev*N3?*fN:;`< uCڂ"$זZAp r%S'^?rk/ޚ06ȓP!=#:RhDb#/}(0Ub7,Afnӵ# 39w>}ۼJCZGG2ԙۧD>җk^\uj* ś;:p}\*wܠ2R~&&Fkե]~ 613Oryx=GKlHI-NυrѺD P̯lg ǜκ]57";؝CtYY̟" %:`UւMp.aI)omaޓ~ο`Lyn B,kz.r` vu3 GQ ]$lJ;z!Y:_nL@Wlgl:Iy mJ&|V.2>cL4b! o'Hi",-㆚l>NϿئXǰFZ1py܂?IMX̯I7c-Hɢ"Xm4[rDŽ*Q3nvHn=8KǡiRs)dAOSNCBS'w ֒wHdRrzdXX5ۻK}.SAʞe{6^pϗcx^޾Z(@6~D\&5h gWzﹾ.NH!h4Q ׀*(h`5@2@-^ϗU6_3 MHBML|"笴ɳw|{_?t>L,GqYysyGC JX3lЉTT[ ˳bj&N?} VWg&SNĿ ay*B} d~\~Bńp!οHoÚ[rsk|G0΂ @@AbqL?ZW&(ThDś?J/w>^Rf+(>TV,}¤NC֭L,D^`8@] /5[߹.8QGρ, `6$MNaH,|`ѨC qqQ˼495dpV! (LrخrĿ !>ͨeQΌ Hc(HS:끴>UIz,艄/iJОLy3^'%Đ٤BHj6a| ~A 7Lam$|#J!B V7s||Zt7RҵMe 8ɗR/HʗYSDGG urbQZW4[= 6FQ%ʎOMl r}&c0K11 i5 51G–V2m %"+C뿐U&6jL*@RsJ{L,%% ,gl'}Mn m#pњX`XQM8]/W2R5«[ ]%ݫP{bn̛Ң>:*_&+>fqbS Yb2+ }8޺A9+,DER?rkp nLl]AٖZzLä\r%G/qk06JXB;i<ųhCN roC{rZEL0BB0OZbk I2f֎:9ʪ^&L@-%+)KvvH"/:7Ľ;=h!QOgX, 1d3'O;-GNe9!)P*oڻ+"Й["WڭX%t}]-DZֈjz#bh) r&1[Lj8ԇCEL:>/;詚# |d*ֻ-IIIPU99bOPӛc Ao2(Xی\X'+Ȑa1dfIw$ȟb&e`|6Ƚ.{##(MPлzP̂DGւ۸qi{dUiV7\ $c^=*!}v+ǰL }Q5Z{5*sн 0h$fkC8 T$+cv4~BI5L=ΐu\?ܯCK{zCKEo`Fr<DɒC ] ]$P+>0-/GqouP7Ÿ<_Z:YLZLTRhM|ma Ȥ a(aƱN*)rÖ#(Zdlh_uN)s&?Fq ղUلgzZ?X+ԝ9/4 :?I9.9ΗeT}[[*L0!kG7TE I;?h?qbl !U@UnXN5zrMfxoh{:΍ͭןf$&DרRK3ڏz.3M2Qޓ R>[ Rgx+cdG0jEFDVK X q|Fs}+>Gu_;M"|rWSVDTnmg{gN4"dٟy5B8B^Q_ LC^@afh(ߕ|PU 5sдfT%hQE=Fzmw1t6/dQ,,;<ΨCKU×B})K푾h<4N=E=PXSJ|1yH+^=+=OoKT1PDݼcnۿpp'UWqv2 ~\ $Yi>x*0B:Xiu`3yh?l:Ne`Sg! 2r$VT%MHT z=bujɉm8ԍ@ɅHA@ IF Okr%TC 9(rƟ*~mێ{,acm {'77F޷"\,C\A,hb9ף/v'W$X1[]3n}(:Dxseu\w"v = Y~a~׮IٸYّ+<"+rCmT+n,+XP-U\HKrSUh!MZY_>JJ\w!Ɯ5+y() 4fi"z:p!뺞sUk?H3~QddfOW1QD/^N3 :NUwbzur6X>?Vv,kvs"V#c2bFȰjZv#xfD4%1Əf "p4,`](whĹxR JfIj'$u uWTv=?=h2nCANHz{gE^!Q7nDε E֛%8hU lGy&OQn] 4񟻐rpf_xAm!TaNjOrcF@ M_!a`ڥBz- n'@ܟgv2ij 38.K۫8xbK i0VkErY y-f9& k4B> }c" /awSO,J?ťa>9MjOec*."V0.M[P!*s Q[0_1cnAUm~ֱ`Irֽ^*1Xz>tF_yg̯iT*ڸqaЎDbߍ {fުJv<"IڹBD7%4?:}u v:Q4y%] @E bHT Z:T[|\CidwczhiS%Dhng/C 9IpſREW%,[Plwdl=wqGҤbMg4N#s8p畹Ru*ϔei M}T 6@^L]+D VZRvIn-2hzNM[FBVQ1bزrxwBi?dzш :  sM$ Z* >d%3rǕŢICm g5tPjIO7:{.:/cv^ (EDacTMCWwoGWDya^~)>jav%c08Ŝ;vIuĬ[8lC.{8׵g pg;.^|5ԟ4)A.i0[8}[~%X Oj7B օn'y2$F+ arj{HSlcۇdOR g]}W&4yBF 9C* i^2*4h: ];aF1z`WjvwnNWDL3FRƕ(M4rE;cgBlTyG5}f=ϡY"/wB|H)l\║1 V6:7$bNj{\Sc;+ K7u/¹?'/> l ;!*A a8P89hj?{]eJ<c(\Fd):FɌiv`8ޚBN8j=RߌGJx-ЎX]==RuKwp E2 l}S0Vkrqz)1G{7Aפ,LTV wrOޕ8sูvR0LуY8IE ^5M|:z[3+590 7Uh߽s .'!'^r薬>-{aGDFue09Fy$L  G M$yYw#xZ)? HN&Hiq=pXU}W:+ĮJ+(%U[eﾱa(\RuFz @vrx@p g=4`^X]O8=0@o)tSB  :w"(V]7~K ^\ًuIEE5D#" #w,?Y#`;iV^2>皤JZLELdB8;%9/e(}[8 O@rűLAYYLcc\~]sMdLmQ(@S7XQjUBkUMALXnyOޞ:?۵ikW :IcaX)?8!+aƜQp}>XxHuwDlPA`/*g4h .2<6 S]]In^4&GG;b%~ D. L68grC{[;1 ;r#p˅Q藂4@,KL~ξuyכI M-@B?3iR@sf({DB[IijD}0~oRYޖ"R7XĺP ;I,bl+z |<ߢhS쩜6Yv˳ud2bT@pJJ̉ulɬ+w^7'ӰXXe?W?a=UmxIFY"ttxdE..j:)uHÎ 3tL/un`f+(bZk C[zLObPk_WU` Kzߍv/_\(ӢN:pN+ƹQeS͟!_4Gg`zA.یҖ VxS}?254[Lߡ[6gNcE,+趶  5 ݝх5Q@W(t86H@~3>OTS14th2b̪wy d$λ@緦]3?C`~[2F}[F4`,<,cp촣WZ1U튇1PkR}BӜ&qKH3};PfpV&nݨЖԉж둞Pm__f9kxvJw9mxhN%]v=T8{f?C p)PuTq;0U lLi, |ڀ)_䖸ɦȂï}hqZڤ:yt8dq%z#aDO'v^`M_\0(&(ycjb,'KNr<ϙ^Ff "y8,ޠ\Gfp~u=5EF 6z+#Kj@$]B  <s > b| Rćc>Q ^^~S d$J ]$E5pBt7ReڢX ˊLk2Eӭl29pim^!K8~MEfu>n)V9]89M bֵBzoZD +գwlH7p ޓtM,>Eps?Ețu8%k D2HؤdO;: }pVnT7?IVCF>yiKXbȗ.C?ת?]K0b_I]bcvSܒSJBm?bdן7(A[ klΦK?q ]{ ybtW6xn ?Ae1e,@DK%dm-:.]͂7y$%ZG0&1Ff,q.MMv+:gB/=T! Jr6oOh1N+Շ1*8M4Q4t^n Tg6;ߔF$HQgG+ZBؘa@@e%65vľ s9NiKLO>-%ۣ+?O?:+j/¶WvMJt127|¸3CI509˒28Q<tgM꾫eο_l'[&ݣ A>㍡81KrAЦ:17PQ>7A>B,Gṥ(Ъkg> m_iD]=!'?͓,p;}l}U ]ж60i]tZ,Czqȏuٱγ;[G*y|;P}zD07%Wƹ;VNmoivx|VhcZwS=M.uY2D}zr̈\_hjy $GKp|p3ԚQnz|mи(o}Sʳ噉oA"i{ee!B*N1E| )_n uX>ouۛ8YH'E^.vCG786%]p$H(7(VOaVׄ+7,a2RT>ؒw#l37Ćn&pDH_p ;GMKDz1GYt.=W%Ѵ:aCg6nUvbhS?f~2D;IYK&q_n9-T ,X!pvkx}U6@/xZK5 ? "I=1Ue^݊m:z H\"7oL ,%4IwQiokSos~c?IX9g+qn;G3Z$&sFkYSzuQO-D?c~ٝLYe69' -}2@ȅ =.H#\CskS.xP)jJ9nٿ=c1d9|:kS79㜅 EUwn,AWOH`a7wTMaP9&-8qA-be(&BI=# yF"ЯK-jbpdHB &6eM! #ʾ65^cEg2 Jvk.8J9ͱtk썷Jw3̍Ɩ_5iRp 45334!+$e0 4q)F`@6{Yag|w<̴abM -}M&QofU0g}"EbgM#u 0ga4uQ:_oPl>O&Jv8%5^B=5^Y @^HקXr]ڃ|iZ',pbY(!eVak 6)$ody;G6ǢVR#,1m6]N%-rObXvg2uT|/"tui jy7/sENAV [z]}N[q 󙚶Iv,}Mm)IFX&n*!wIV `#"H? PƷ窊ؓ $&2py"j I)j0n{9x0!=^au@NV+^ {;'ƮɥzG=`w,2ko kXqnKGf/{TL ?X|#Zxڱ{O=P e\nV80Q0K4:b_r  l񃴭9ܿoe:!xR,zSx(7&G5_3ǽI5 7? ̴!/BOXa+oP j0cQQ0On+h @1hkV$\ (VHup Qd(:sc˪hы%2GM T׍+p5mw$a0,DJWO-*5@~&yje8Pܒ#uZJ=YMD c0:} uĕϳ&WҼ Y#쐧!!ɁZgPV,?Lzsau$7?@/Bf+zKC$5w-P؊Cy( ,3bE('6LR5rdQڨ+#gfD2k!2ahN hp`W r$]ʢXp2b& {(nO2 JeXDWYvaRi^! ]Fa+VT\tJe3UswI"v~b84 DZ5z **[-bRmu>Q秹S5R[`XԜP3d:]T]#UcX&EӆULS'aR\2F6:ҙF{bwJMo%d7$ 2B=38~iɮ"nOD?У;Yai!["\npԖ{nx|ETQ*8dH_:&TnC ZY}16#c6sPWo[UCniF;WbNvWdɍt{@Y#{\G/r-KHSw{:ؚ;hHJ)鍁7wQ @EDyچpXj>-tk,}.…=J6[6 bS(3oy`r֜[pE ̏œk .:raOpHUOk/Z3>*/jHnڅ|P"T`b_&^E:? 'Wvcwߤd5"Oz W',xǸ`KƐX6YPR]lG$ւ;t'&? O_yNZcyQEr$\^Z/_XTrS ψB>[<Br]=?-Y74+f%i¤0gL6/.P@Dᥳq~3V9U%V ŰQVۑyL(j4sĬɗ3I!okLaZzѨW|K{vQFQSHi VЄ*% >ٴSOf\قhq-(*bQ'|gRK;zʰpy1uFQfnЂްyL(-x[NI"|VABBTGGsڠ!`Pv:hAFqp+ 3{dz!$}Q2yJ6zd 6oeF 2tÂzvZˊtW$YA/\|IK'̜_I _6Ty!_P wZwb tm8vc Uc!/wQ? |9L^_Z T ϸwbN%L}@*γLc~9|q>~҈ĂVG Q6f{ʌW(';&s N Ԑ'=v؅)l9Zc?㿍e[988Ŗ(܎1 kVO9+97Admpp{Y(m&Go>ʳѵf4؏Kue3v1j1:-(kj' xmD*׵~QhL}a4C92?= Sյ`A-Cazp C]f J9S[>!FskWc2]3@V?oJus *Zdݹ:%6/*}3?=P~)b9Y:e -؍4=/}U\@c`f@\)LC#]"HPYxk1m2_o0-[TgHn^&)A3z%cz([{cުě>vc|DSGI";<tx8ڒ'b.C׬,*% HbK9%!Ń;@8M^I* Cv#eaζcD߲; M2^0 S;1/j"PlB 5SqMa )  ]͋G1?Q,~x ;`Qmv WKx|t5i%/y4+toI_,ɺN=+ mSᎁd$k9kVHP1fI];ӢCCtМmhKߗx)('oC=5_nwtd D(H-I7qO&29 zJ"r!!+PԪ'x0sv ƝȘh]|?%gP>fդsjƏ[MjPZTANܿx 2p |Oғ@=z: CLN5:Roi̕~ϪnbRT\eڕ̼jG{ߚCCeQ&m98W#Cב_6\g"jDc;!z' ϥF豕HX`Bmsy+ (#rY1d *=Q/TsO-E|2Ϧņ6&qnFH7cG[)ι3yL*N@ a\J .٣֝iR@D4& ]%szL+)rI-G]g`oIƟYj!9Jl[bTn[3j ;EO]mJN,ۺJwdM&a70JMFH9W%Ip%tHoɴ"-(T˼ =ȳ&@j6୸IY|` u^k8,@^nZnO0wjUdx! xwO;rLŋU-"8PWDs'&]j#wp{. ?iu|‚kc@3:Mty)=:$t3+2(KH_ a]oҗżwp6Ml`ټ,@3 %]mh'Z2S/wΪc!=xhajP8(mx\ KHg/eዎLxJeH}9X_('{w[?u{h: p/_f]l\)F?C+Y3_}i@9>!z?<7cR}P>m9vp6KaPN,j7̊)iS3h ll4c%D>AW-Kh,We{+ Epg slY(W5K/wi bRCpBL,ޥ#9( -L$ 9v /EGUqccu#R]#vs|qM>7\ڋp.ԘX`qu:$ kg .6͓ ,p[Oq1MP}/kxYA3Kgf;H0:C.+H a5FZv}Ғ/HvϷJ廿DmyHټOqxۈ8NX?ŷ7| U,- X0" ƷvlϭwTǿr^D *4}2@ព {{3M|']`JbaIF֣dwQA0X9y66-8R]~M>n7f7-mN_g'}/@~.7œ5nO=e/˫qhSr-]Yʒ41@KA?8e<9|@=C(?46fB9I5QChps4qof!zC1I +7AC~}.Q3'ynv>m{-sslƁ#z-'={}MgVwYat*H<8])>K)oOc|3`uI'ʧF‚Eꥳ3M>7)ph]KsSVz.+X4[ },i33g܆輭 L&˧v`y`q8K :iF7 F"$k[Zm|4w7'+eVK+oL{-$+W qEq5"eƯ&&*nLyp-pP$@w*#jy _StA$dKczBy;] 0/d I&\qS{.ĭ91 jjƻY ))P/ l,z3R%919Z)r|uGZ0t囑H  >< WE>sBYev-Zc/(P0 ʕ>8w84Iuh5eQY^9 8M? Tp/rL̈́>׶XF1khbR930NRM,Ub9.ſsaȧjTy]WbK{ZSV7V;ԓnCL.+ -:#Ggi1AĜsZCA\=ܧ%8J6A^ "c]>I`8s !?^ZȀGQ]&FALdԛaqP@LHVn%sbiU'JZ))>+PȐS@!>\z5P,# nV`f:o,^@H'b +YzsšU*f]܀%;估c%۬}UC*|[ah|#T#ysC8UN{򫫂%;Fs-nn~`Ӽ/UbzCz0.|U!3`!g )\H=a\Ҕ~:CSGw )tz*ȤK]'`$ [-~:*Kզ7zY <$)hx#e`rg]gvKN$E%N>η N&|PYD+ CVֵ^ 5oRDMJh aPzmةnsɵm ?3!mKqJsm6 ֢-vuvpgLEݦz2U[P$YC/>?Kz߉}trY 9@}ul[m6{Oh秙 4Ŷ$vt[6l9ymCyvDxMB~gw#ahh7{DPZ"cvւ Zްwx&5q q"u{fk70wy`Y4e$rl8Z&P];3߈f+l rx?[\w FR\{oP+)JQgn'l􇷣jQ:B1jI3^@f2Q&yna.t]ckC#CN";i}<7.[܁GJ09G|^@`f~^uJ*#/-yl`u;Ps0]UyHثmVu#T_gT|:?|r4M/2C<@{T#x/8IO5\ps|xC"ټ%7 iw Ř/Kb٫9fZdz4>sq,KaW1%QV߾y|s "\oʶ||PVaq5ziA K3v|gA*mzL;^{y\ Ze쑫3۶+D< Ʃō Mu}`OԮcwW[??7p5lC.>;1+2eU*B&xn!`ߘWS(4άEgdyP8ySy_/hI9l$7DMH%ΨuJg'T҇4Ξvl5Zڅ=p5G v@վ:|B-;x:<X cJ-bɊЭhl,Nx&T=G dQ|C%.QY949_3n&݃%BcشR(\JB5 ĽBCH3꯮N?ZmXN+}71U1.|P0ޕJ5R\,ӷK@ ߼?MF( ["N7Уg&mP&Ai/n:'fu9IXPLI\ ٷPn'NC>ˉsKDhH l3m`\^ ,-vBgjv1m"Q p%PK< ]f:= ,OZ{M4@ߝO OB=Kn*}$'d/:hQ0Cp%?e[ $wA7$֓ vX;~jt br͟_W,\PzqlV`'ؼc灼FDAV:MhJ2)jhW^yȰ~B2[|^e T=,~ ܹ$ yXQ.(Ŗy0x! M w;+Yivj X۽͋oZD/b JB)I܎$;q#"`j@j>`| lmXX11[-iU%jO~9P34#5E2"3g<WrvdžASf`Hܒڼqxgȷ)F3Vi'qNi+DN/Ђuj;i z+GaP<^|!jPV {Pa# Y!nOON%al[VU^wV>ug@d7BN(He2s?hAp%yU|Q@-x". T XV a' @4F}Fp)S+P&_}7X}SJV0H(բQXKʅ52tt-#_z@MUݞ`嫻 >Mje+s*uNY<-MK)[!yV(bLqKI>i)!F3j'ӱ=/oySnj`*l<uX:\^;0 3H9N G:]ouW}2@ܢjq(Do"%YIcK:J9FȚu50Wub779#*fƒqӇHSJ{.?#;2?b$!_}c_ӎvRIUbc΃Y6u]S29\TOlj+ZZ RfKsMZ/3l/zE! -U95O@LM>c1Z kxL'D㙉 m[:yM a+PphjWSނ[fLh {s.*9lRe @3$V6GӇ֬fB-Ox#8Q <#rqSAgM `/`Dĕv к* m-v5?=:r- 7NWN#P Vy(9XإbzF·x UDRae(ddZ@reKI;hh4Q ]B9 ]i՟"Њp0uR<^ z=FRPMޟ#08@!&7 =J֧h:Q V0a {!2v^rolK8õ]ux==xE!K'߱Sf[3ݷ9-"1nnZˆ!ZϗF]BՓzzh{9TAv.qA~XR1 cG_R ^>!ֈk٫,-ŕE|@Z&(SU@3g;1BHhO+'DY. ә"nt/ rF m# *a~4}K;},3_n:iT<ߢh@ oFoPDb1u3ic (vF.h bI^vKNl% ivXz 6_g@%:z!2[9_&ic. =vwbkW/I&˝e+q22ⷱX_S[x(xl7`%o%]!sJ nk_dZC9Q6Z }jaR딱JY q:Y0$kjz PynaƵ͉҄Ny#)o$[<0lTPX+ Ӣ->|I"#!2]&y-Mk1>~r د`ߘݯ pzЗVƔ jHشqύvԴ_Uy_yo]{w҇(~)h5T,CRg[-,*-`iP\kWQ XQ0nR*m[E<^yο'y =3EȬTI<^s0]ϻ]eJ]ɇ 1IK<&WYgDm= 7[VN7sO8[߂p/Ϲj/od:Md {z< RX%0dž7Ew7bOZOo]S3Jݡ~L8Mt f]bV|'?A8ivS@YG!36SQY9CzQ\J"Bio2$F% %Du SLg3 qj}gOIl&r;-FΐD tqDn#D{Ю:؁3 ହKţz7 D˹)?s Α| ӊo*7V59LI|yY+V`7npz a}~+Qjz)fk`yV,R4R9*!Hv `sSH51^yg@Ā&t0LS;۰_1t(C- #15&U)5zr1 q\dHON]ZQFR3X(0.5n EqEwNHGn$alMJwWuXC"5D[rwp[=T0ײyo =N>4:Lp5 av%*`{Jln~H%*dt^F)av0wgL<)A D;:VbeV4g#TBɠ<˞j&Ȃ5.Gƒj"X;dMÂ{Vv*8xn / j@#˭& T͑ u鈷EV+ZnA7wݚDX,gxPaR>0*$0Me"zeѫvy7wHce[k߂^ LBH{BG)P;%2Od;?; @#R6>ٛi(РCOnzd'X78oD`}$I;sAK> "lH*;s؊jQ&eX]Vkźp(߳ZP`7Y9I(ʯVJ(y{q}/շq'7}w倷e_ң1BE2B5t#v >Yy&˪W.(>G ѣۜ|c0=DZN2ڼ*ů|'d=6MQ |cHoꞥ+// NI}L? kiWV0b_ICsk5lftS;N_o I* 0{ZG^d{dS.C"L9$}]WRQ *I߼lTl(qm.>[u K0]D90g%05mUL[H%"iA>K{-.^q, 9]d;@1 'D颳;Nd~àjY§԰g85*vmR)A]NK{NS*o#@zP2[aab",X|]T:+}|=*6bEZC Fͺ sb1yIx;1tUzs}{G4~-C 9_ټN]-tvpD4.jŐ4{Q猦JFR1W1BmM3MrϘ0.E!.%XؙTUy_.fNܺW9'(FGi(ſPv2/% f j~0 a=Jif!CԎs`%=CO09ry'f" {fO6)v0YNWiOQrNC? 𝡆Rwށ]0|tzGrsu!.hZ²z1_c}|y$c%{s79a G!~yCj |'sU;-=DDUL;e[s;9\$8LM@ۏ:f2ܚ=Yѿ:3q?|O{kcLͱhR19XEy,A2-[R;8u>M)cs$(i!`iELpj)> ]@Laٺ%3щH9UƇF 8I崕J8]'`rm;Lh x:Yyyu|kcΌ| r(/l/ s7#suj8Cwk9tL opInA\aa!U6E;p/i&6{e b C':-".ߵŧf ̘!4~w˂vdK-IӢ0+sIk QE"aѿBaJ5Vٟgzn]xCn{<m_;n?[i;NKu1RE\nGOfT%֌9*aI>-E\m^./p c.QJ(_V_Bcxn>'dƗƸ{\ڣ "&BY rV+T**CY]${(Y򏲓뺦#=wS .+}2n :6eDBV@v'ij181_nUj[T*8~ïEKAQ)N]1{:#ɱXZKUKavV!pzGwrQ)Mpy0676nPѬ9^S|qb{"6w@,t(KK ފB9@އp7Խ "aJgti"#)zҢ|!}VRM“ʧyMdo3 O:i*2j"lgX.:@HIn\ fAzfRl7-8A n"AĨ͒  xjOw<-s(঄z P )W|G eOSfZ3OIϱfJ BM˝ `38ISN+Hhag?i`I:` HP6Aғ!Ѝ'fW{Z;`rg`0B;d*-AzM!ѰfxbIn76b鸃cfbᬉWbWݲ ̧pBr|{0dR94OvDbU]Be!x0ICx|.kk rxU)X]C̐Yϕ@7kLK+l>;b|O ř0IgBr$4#e'kӱWR•pCU -TH -d(HY}8*J/A!ߋ%s&yjd(7;,ěy(g9Z4K3&/q"+LDta ,uHۺ!EH0mFYӮF%?LejրE)%ߗ|C`$64SmڛA!* MAc4PpO4R71#6"QAg~S,梺Y<:N;S-B?y̯:9܈wu-aFïhMuL|$a$4YՁ*%m|bo9#O@IlBJK+hřu@(d" ܐc֠-XEn(  ʒm$]ClrOHԘ) +yN{ cw ÇJÊ^_SkU͠9p\C Kҝ$v]Lt,*vHG&Mx<!*ޭq5"E~aҍnG7cm=>w0Ft.rUrpuY@WpX#l/@4s5$twXxBBqEǛۄٴgXpX#^'E -(w2w7bLV V|" fSFcdj M˦El:^wӃ  s,K:c > .?&Vn3se{jU !4RenhyT;˦sW5xì2!`-4?ɥo*0q@IQ9gCpb AG$Ƙ+|WMly-#Ysr188!-78LK d0"}:kaO82.xNβI,KdϞ4.4b-jf%əOTJP$eŝ|qۨu_8+b~8M h,,3kd9)M.K96-8>Ňk۩+#=a[ + Q9Z$cF nܬh1Φ+3@=hZ~k55vaz$=7rmo+qf3!&KrJW ]Sr]qU` aA8"U X4.S~ƋN[Iˌ!0=VǕên9꣟ǵk*xiQdv^?q.X63`Gᱛ]OEi'<03NPϱ'>N+XŬL bǎgB+:{72vwld#:}` NTnaJAFN)w iEUƍ=oyEzV=%]P_a6G5+R0m : 3!}̍w.@ȜƾKxà}aәb˦`Jx2ݘp pD~&3;".ݼ`b2nU-( 3ѰgN7|&!.jL ޖʈ޳qCs"(,w-bMqŕ?_nGKАKA"rx@ؔ'O&xp@_ 7QJUjXHC^"C9N-ݞϭ=x$EJաܿDj]e^ rKuZCslԯ nb H z-6ϓZ1q" \` ;I.9} 1vXhn8>lzd},OrG0CR"aH߀;}p+p}OGHM#LYg jhvHV9$fuA6? ?zxuz:rʋ}$t?Ŝ)bvJ:rc=ɱ`6hLu Q:3&_ tntJ T‚Ć ()'̦á %3!䍈< ]Yt&^\SK 9.'ŮMnG5Qp;B%HEC>o}",!4M_n SK0lc%Bt)S 0 k*ju`|^=d(An5o[,d+Ěy?A=)H;2OFap=d?1HCVw%ha$^sPc>_-5蠶 , ƾMnlQC44Y-0mpj1P H{Yq nv*O^_J·G3^ZBr`޲cz!:r s NW,Hإ[J°vXoV˗h]h(xF⫞ŝfWܓo!5)oJ bںOֹU)k]N9p0613<|y0 ckʰ0?\*LkW:d 1s  E2RB b\DI DNfh4ؐn -kd^n=IbHuH^%s ƞ&y!BvuK< V _"tw kQg{fڕ"؍.[ R1!wن_D ~ĤQn/1Semh@UCoSp_CTVf*3P] $PF5W0~7"ǻϳ;|eР1=/ )< JV2hDR* nn)0N>`S$,FmR xBaw ze&Y j5 Ŧd; LA<[˞E*ܨj9+Kށ.4<|GQXRlv) BXek@/ʤgo>ITEiL[5_wͮe$vd߾m]>Nf XM}tBq&6oRk6㸹ZF-V{.Ȱ !#{R5??S9ZihoqC"Յ.srzĐ\Qa"&'H#̡ HSrźV |z7J }VH=V'&[3#I\l~1u$թ/ȝnm W<޺?%EW. mze+N-t$wbo9^זQBZI`yYi[[f'7+/~j sM2\fި+ӛjnZbu R FAu5Q\Z("S1E3MN~пBo_zתJL D>umZ#K}% Y)/~Y2Jkgy=)Ϡ[kpޘvUH:nƂdGbSiUW\ MJp4oDhK`鐴SqS:b9OJ4;"UGkTLT%m1xayR^W&6<-V,wt*y(!*u[TP'r+)/.DߓƐ5Zka` {,|J9#M[1wY*aD|@.U 6F]zlЌmCޟmAHbCew΀smm.`g|:ͪjRlE5|xMžњXūЋrv+J`ENqEjEw;L 8*P ]( tx9`*SL P[$sG1u]Ux[fPM7X_ՌvkD >˫ǫ&+ WCLl%@k] A*-9PѮ%Oч{[ƟgiCa}$dk_ܧY5!KR,XR'áK|#"嵴>Cɛ L9&Q91;' m^ dDZg"ee40Rl^Z`U>Y"Ճ᠜-%54}-ޏyݘ5!U~W򦝐H=,s:/w#^ θ^ޏi`Ҕ{鬌,WyYdz |^F3p#ZZv2ᔃ HCDLo iz|Y*mdgn—y$e?1s.0ȔM9+eJwG*?LZGwM\IuR2K aEYqlXzc ,a1:B:5E\2KtP;ٝt1\tu\:r3EQvz qzuINQo ;-:zNH `#[ Է>aR@ tOR ϫ aƾR&!^`Q<$jݵ/L\Tsqi'݇Q(pc>d<^ L( -hWU 2_WI X%~N4Qbw^> p5QG9lR7gѣ[i K?%8K\Km~ z$ZYeg(I.n`^ ޹%pjXbGW~-XAgs;+1UFa~,T[WǢH[O|+iM+5IBmc KYMa *m8xz z9pdbΑ1-̢N р[aR*R;r5q c %2^è/<YnsOzԚ4Y LxLe5EIfOj%7(4Vٞk> v5`u컛tMyI=S9䶙B/Ew_#7V&zJN 3pVUb1.fE 8~ljK/B~yP3-4t侦EWy@ ;a@ y1BvY1y{e[Ush+}`j&MlENq7l s2cFD$O1hBi7W:|!eJ# .J6u)`vF˽(50fq#yP\BTpɾ˿D&$ }h|'Q-',޳aA1*tiLXa w<|sKI~ӽE-R2 Tä桼Hɮ{!LEʼщh{:߸w6gЙ<0i}5g @mxq9[QScLe omQDPrQ"q!>!=U[gb% 8 1+BM,n+dp[OHEBܿj-۪Mo7Jqݿ4.=XYogW{SK'ӷvY(xV:=ܴzIKJ/#0ZxE>Ep;a {5huST=Rr=BUH (P q[~I*WdeѼY'<9+]I!z%'!MJZo"fCϐ"2.udϞ*J:7%dvBcL%>r Dq' D"ݗocvh&B*VH w[}6$9b<!).itYi;vE 6G&6 兀8'@ HBݒi|+ Scsbp>4iՉq2Geh6YWb]vB')P6BI ! {Sν l-Nx]}?ko]EJ/AH#bIgcAwU(kSF(~n)I79J?0QoVRN92e-;=ETg_wA+ ")an@el&CXl-,< Yu}OJwW~ӆeg<8~7BȩgDgN Va9eGޱJ$%H-qf L R94ɽT)I\sIOߐ/@p={ޟ2,mT&QO~@+{›ޣ}$_]jS+Wr:T.cn_rǮAdt&-F=0Ɵ^vh>Vov}DK;0Z?:Cee%Ѥr rk+cC=y?LH @PK?-L8#(4v;-}" +E=Z[X;]w$5@ǵq^GzS\W 0F~5(a@p/da3`#8 d=}Kp9^)fw`l'ֲqs/V \,J03pXj 풜V2-Q (lJu!@z(jr1k/K_lKAd`,cTL͘m9hB ? o;L+u(L e&ɐXTɂbQ;O9ՎIÅoltK4vrIuw-6+ hd\.Y9 }nw2bhH=WS7MG˘?0Io>B2$:T&Hq"$NxiŽQ9BY7NJhzF56fBﻫ"\sBJ^+TR,&TtZb9%Z(\P?؆ebdY Rf| I=T1 ! tR`գX 5a9l,%U8@o+67[Do> zVB棞#\B-}N[ .r_&F#l25$bwmupfC֓iGo(JXw 2'vF>SN{]ǽ@,5({LJᡟ'zZ=O6o_arWֵ3u衰 xLoms#[rmu~eh+Se!lB 襨Z@gf"8]s|XW0 =$ҙ[$߀WW2b!}üoI=cupY N786Ŝw ߊP:&g^?VADTn^\om%+Y04X|Vǟɱ'}!?Z9Lk _R+:n|⇤ڻ΋Ic~&vHIv(9PfSVNCtK-caTrȏzV.3?j*nɒwH萭g:pՆr-6P3{`2QBFw)Fgɍܞ,#8r_[w/Hǥ0c,Ixa>9眏libU~XH0X8b3W=धP\ZQ e3^)xn.FQ.iD( j;jԤS񽊓ɣefl{oHG Nqۉ ]HӤYq`1#{ɂ5rI6i\Nƒ,:N΂FS It\IY?fhS.! iK{)ݛT [u4 xOzBusmvOOMzQhSB]3lIm'4Պjʐyآ(>]uoIDt˒TР`T OV+0zo|o_>!ea2IIeqY_Uh3˫͇D@~}C<AMj\gn?X: PP5SnXdBXj _6©wiV;߲\_,uKe\leO?B?G_Ɩm ~tR۵ J@KwpA}aD ۗE"]'W uekպ B{ھ!kђĔi9¼+ gN܇XN%1?`1(ᵺ·uphŮ3?|:~t@c^*1.%+%V͇Jw0 $ARd "oxxVa=ϼv2+<863ꨰtMz:]$ BH/[ӿP1 ?Ay;N7Vf$/Te촞L~2brjH[peb>hɆM*qUlz/ Ʃ٬D5K9Hf[=Wx^/0Gb1]\|19y"-F 0-c3 Wri,CHOQ2Oq6> _aF.3Kjο4nZ"^g5"ZM,G'`HTMbOYl }@QcJ+ܜgNy}BЪ@7*>ZIL﹥ Uq4]x<*` i(Rj<\at=)(.:_M.r8*r:GYŅp0lL$5M?9Z%IߕY4Yfrj55f 5 `{>Mv`6je y{Xo](^CDC1re`-WTrT/F)L,}Iξ<}/{'|=*C*TO}ܶ qX)ĔWjO1{Y&< z|W]9 њЇyyq5 /" Ѿ2DSɒ<{7 }=&`Q_;^OY:h,Sd]Ғвb+^Im/ (wI4W89&,?ȳmw-M99K#'$7W-aU*oXnLۋr[x:sAPQSh,FkąKH9pkW!TEے$A"uBZ4zfAvqE:Z{ `6tKSlv`д.+Hvy C3YUڠ>Ih?N% TZ j7bCv+nC 8HTށ7dS"'ю٭܊)^&kxkvb  B+Fo1R3Q eUW-KS5Eت[¼ \l%Ł;3: @mVu̫+iќ< SKhOn龘zs@"Q9Y t-? bM CZ8M" `61VWM3_d; Y4Th e ,5(=9LjkǖBCZ&VXHovS?nZKD4vzHhX(ho΂I[뗖_.gIq9W$OTwM5`/JYWR oK~ uw B52UzdFsio0L(~OvY9 UMA%~{acgS?_ k$º7k8LJC/Z⚄FMAX4f0J*X&t@siQ}5^jk%ېWmI̖n`BoVs MI74R{kG?@ѹ} m+ *?ή$=ơ9B{i.<:Y-׃_Ut^tb^z~u/d7QL ' HtM}V58ZDCy% |wxJr/Xf _;0|L& /fz])i!8brߥP s,f( M|a a|د|SQIѕ-FG.\N#U"DžHX$Xld cf 4wb1/Mw/ ҁ\eN%\X@i+PoE^MfϤMxcwNz NCƥS=xEpGZ#: kYೲRg?1C/\X>" TA?zȄ*YK*U0MxFHb5kF8k`Jn~ܩ|--.M5bF>Vi@kBONRAHM]y6qNdBNx#`ZOթ[!|i>؉@ p* R,sbC|r"Ήߚ'W d١ T|eiU»yVvZ^%H񌿪իFH^!–YBy ] 8Ui*K򺓪AyP*mW)=ɕ2pp5bk^n]D*YY dGXrl9?ˏFgUhJ?LC&Sk?s +q*5j{):? &182u)sՙ;ɿ!8bJ(>EECG84b!vb/]' {`晴]hD >O6m7 =-5-,s29 "(rq74%7A씁6 Nh~ZOWʃqئH,Y;ߕOdF9/x"4e#shvGs#0E~j߆ 2TiGk +u7L6;9@Khx[kaH?Hκ4.Kbgo} }Wker!ky)ˍUl7ufFܬ P_pR*5IMz':ܖU_&=SG~bg٥>I0 m!KE6 )մ0Jm s⒚2oS%npNV=+d>/.&ZX;[V!_WKQ%h&g+ ]?/H3DMO;KE[m%'ܡx'C]H(ԏʨ=W=!c ?aȬыIwS\PTZk7*!,=WqĄOq=$hЭUG"צ:6e%ЩPרxˈOn23tcdmhk^mS XKQM\oo+m5[d97N|Q<hhKa _Y[X}\1[odbr ߊ Z89Pw-" hҐ9DC,&Ln^[6I\_gvVhc;)C4#:bB(DgR[T?iaRCMȘ؅.Fqc~Dېuar2&R;oY3B e@G75O3gI𛶐 4 V]w``u0(-XLkn(K5ţ<[>sid; UU`ry`ETFޜf N;4H+@Lj_l#opm6?T^.֯ ]aܕcP&,QMJy6ؖ U8: YAj ӏEuŤҙm;E{[S.^*J$U;2(@WZB ] [Ŕ `Gh^ի="a{{/+flJ U\T S T/ҍIlBJ r^ѓ&;4 0O]( nu`q^> 9(XWkQbSi,!n:ߧh]R$x7#ݛB+[6D`cy^11gQXWn:8v%XD0*0pS 8]_)F V!cK 5TYʛD_P^٬EmlY䌬a` Jwjj,Ŭ򱗪y8b]3zcP4;¹}BoZJ:Gᴾevʝ*94K&"l7PQQ=:>,|ʮ] Q.Wd1^,LQ+FfE_3>6rInQ;mKZFV oO3j:ѱ#k[j2eGDϖ\y,Wi>̌pq!ޚ):Nh}\7JfxNf}؆vLN &#oU2)ߎ(zvVXC 9* _HU-L6h㖗!LY%[:( [*;2Zԣ>L\&LcP`Qx$V_P0KV(ww/cv f QyIa%KbKSzASwnñ߇Ji' ֜Tl7`ﶲSZ"*v%'6clŊ/ƪ9Wh8)2ZoN'd -XceJ.!W0ì@=* ZZ׋)Ԫ4>L\g)}ס !LAe4" ]B׏Wtvgu)ZYlOVuB]S+qڝ ͗ ;Vr䬲+뒘T']@[eZV'qkL"rYd_j, MW68êfVGm 6:KH3N]DI mmSW,RWE (a|u.%Vd1&8XD"L /E@sb-nhGٔ(Y7+r_ExCc;v} 7 &D56: rJiӨF\ y jo|7]nº~R?&ft퇝kzeÉZM(֜U"-<18;b_-3`ھM|I}A}ѳ SSJYa [[SKf@pׂWfse"Jz+Rr ?m]?^"g/:*-V^ wzGc RC#eRvHU ,x[㑕LÁ1de邃|vib<( ы8h 壂;qpԐ#3[@GT rwNaZPBԃiJ|6XVpPY]$hrs0k4<: ܘ\d.Yt2OazZ[juvifuP(JءA1_bl$X1/ rzb-%srEp@oJ=k!AcSt#.º~joHӏp @fZ^wqEG<΍NR 0҉_bZw #~0U'Åϟ 1QJ}fV?FM x:v )Df9*Vj&, zQ\蚙.z}BzVr~xPef(ut3-Q hnM'; "gޘ7Fd@lu5Lfֽ)FyX?!Ϻդ ,m~}:PtGi%V}Ua, '. X^B2J]~U&n?bDVF YI>1 J>mz̬svN*"Td Ř{-ηq5 "<iO^c'Ҩ(%5 C?Ķ7}& D,=2u기kJ_13~9y7mi1;ILj}JNLɞ[0Uj/wR\?SC"4$KGJ.]P -`(TCy%2w=ku Oʅ ݿ%W.OiS+0Cֲx*E1Q([*,NdՐq;` #_5zdBd⦅iS뎦uzn$֢쎨\  Zete{Ϣ/ O\FY4>dHK<'.ӯi`>;H9*!|{Bb\7Ad.d(@s޽YL@( MH1@P0[94N4aɂkE("Fq?*֎xl=F~P^_?orK![dR~Fr4cD#T6e =TS!'P=lK}1A])C ߴmײ=nMy;Kt rEwuor'L9PςAC/]a XΈm/"+3 F: \)+ )@^OXw;Q@?OCA'Å{9Ѯ }j_Zj iG@C?̊Ff!xCq}D7GŒgxPYfkgM_]͑V|}QO?QZO[ϒe(lI.ßKWځrM|g6)Ftr.13uM_*My 4ó !:ͨg=o/=oG8 +hMHV'|"0~pʓMPуp}gOAWM!+H|;X#"THchD%P$N[-A`UiQB!4=FTnDA"k}blra~f&Ă12x0"'^q nQsöWӥs92|׬6N#K]"xg(ayWZ1GĒm؟42i éFn:9g7 UbC$^t7式%HP=v:ݍIqrw"dc1@S WànGdsxrXӼ;<%η}8N$]E70kwQ17j.\SfΜs <$X{3F# ur.1M6K&~p4g+fo"7{i n3Q-DxD0s>&\4pϻ|LJANl[-SwAWd a~9gaiO@8I\Ȥ>u"e5\OZs]tpU$ִĔ6s:Vdhc+H0!Hfg/ bSJ"гcf"H4t%]5aǰ3Rn]V#(k4\NE=¿UI"i KiX[|zUVpPgge !}(pC2Dm#~*̓ѩiJD9FR~^Cvs(@gk譨fbvvwfBx}GIu,$,Ixd]6G&6\-/[l<{h(- ) ώE*9pJV!T9@q_+1!HG' [zovtfKg$0Rz8|YAAZs&E:k~kz~oIUp@#;7r blR_|ӏ+KƭJʸ8ھfnt htjJol9~FXg\U(X GH[.?BqiޒLT:2xd6;&_w׃Þϸ+B/Ѝ(Z2dT|:c੭|u Y Y/(m=^B_'^DZK;C+ [T,Ӳ \@T kY೔q7ٸC-$uT(dU(Oo1~;+W)1*T,G%ĜRj\ 3u|,%QNa_u2V5?3)+ bUד͒-Vf$ށ,Յ;nZUٛ*< h\,K%Q]nx=.?wK@ Qk5׹]b($bOn. @YFnh@c'U&R Ϥa 6X7X}:.Hey_4`F3=pZK:[_uZq@ %:$֙mc仁O[^U71/tNkC7ݒ͋^roӇY Q׆ D4,P6 i[qw;zM[6|LI`mJ=oIk< Xl߶t|YFVI3bLDU yg_Xj oLo0'jMe%]!-_SvC5F},lDs\=aC|Ly9s'[ػEv4,6ZZ9HBޢ3A8UaR j*gce hhDz|ߡU~PawL$؉"L~nI*Ĵ?Yboc\.svj8}4̈́ZeߥH-@u}ʬp J!ym׊;兗; -bB"K}69G“n@'s%p2ڼ:uD_^w&J&zL/Kȿi!yC83vm 7͋<~ '5{ mbŞIΚi4 ?慦>X1zyrpi210V( lxz}N XG0۳[=7Bn¡eKZH-vkҲ\$I χm[:?3SI\}7+_O kvNt\jJxrUm(*Igl|(YV&" !aHh+8l21#fE05zfݤh o]afyvG->~-)ZxC-$\.ſ .4 Q+6gXocC: OINPr!КQ}mM_rА6S,OcoZ:m khL~\7_vc1CM^FRBTrP_ Xf.b&6)(c@9meH|] `{HfkK1zM&6')S_` Z1k,Q.S_FFqBuP6DɈ[ L3҃ah%}!ZKBY uYUֆi79حÕHTzɍ!!P ,K,7B>h'w%Rk3* L tdS3C#\h Mع5=Q*Yq`9۞AV_{͡i'J0)j؈zC.y+EMFOPKmܵ<dAqk*"GhCa.}\#x _Xe_Q $r )/";:{_D#2hNM!EF1 s0Gyڗ`6E55SӟpA'> '&eeh 50"LwZ"4.46)DVŸB\A J1iW ,u|j 7Yd[hb SjpGW˪7O12Yf;!Vs=+uN?/*{4^%س%!\.2JNWZĂPg8KLK  X~Z݇MМ1*᧊xr3ΘMM+qb,҈>XNiSkhl[Bn:8[<0カ&_14n?>j .̜9u^y-VtS{ M*VQ|w}J^`U U徆L1+He 92H|Xxm k V] M8py0t,=Gy"nHBZ\HTb#31CniƊ^(p%R1afh)##} 9`+Y!-nόW,N-4`U'0 eg^RH n$(c;1k^%2@Sθ nyң{=|whWbЭ3pe1g󒐈)OBYndtUC/n"-_,rkVvj"qPQ 6Ntb H`]J4~H*˂&L^МjZ/ LC(RcJUOgfþh')|L ֊ECd]8i'0KǛ" 6ײ2Pu l;8',Uhln1WčPl'U;eAfuM̧$Y25u΅u|0]-Pp#!dTG9Զr\ xK? d;N\ +c|+<^3˚03V1=3lNbCPI( QZs}d 5Bys$D+g~ bf9yaqe]>NyUA\|7Nۘ)L;cg }:PV# 'E^lCF0cEo@b<,crC g7,[=s&aLW<%dƵlj{dh b\ y%^|Gb)j,0N7cĖyK4U sIT(xnլQ1%=6s6e "^2H&ӵH+c=&` fܨ;}-~4=9WqC]:q msW^(&Ʉ&=yc62n}.]'L{#fg5FVm,Gb s ;-kFxh6rQJ5YL]7Wm31QIu-ZWޮ6B0}pq2={: .J[b @f4b3,ݱ 6m:rnKݪOmw1hZ n_Au6jw"!{sR>Cwtx =3@jVH۽YqzOJGI ð!#Oj@ q#-*9o?Z(t l:jjq=-6Ct cb=iLI|C*ك(K\yﵸ#YxtN ۵b>|4;d7=T *c'JeE -fnrkQ؁+ jTE| o Ic%:݊>_&ByOp ?9ݽV`^KzPTv1.m p]`rV^uO tעn[jOP6o0[\efM/q nf~>vkP18Lb*&,G~&:1c촁Og z𼄶L{I;$R-H6h)' t4NJ`*@ՎZB;O*ȴ)˶D:vw }1Л9ur}b;\sI7+-2!WUOjZf6q,d)kt0JxArEE=͊9[lX`y`YoB*HܳH`󳯭ΈfDith{gόHc#11g4` j79 a0oA-^nYb.j8IE)a?EijZlyʻے0qEi/-ΧIhȓz|uS˄)郻vXo$Jތk|JbdQ>,$j *9K6*ݓ|˚E^ulΠ-?4iJK˦L7okތ[$!+h8'-Y)8v̶K![%uhG }ץp?TQmyl u2q]e+W~{C7!R W/ôΝbUʆyHY?({xpX@;&Q  1)#D?&VT9l:8[˞\X{Qˮw9 a0"?>ْ==iEץ\sMs鹁-lۦ[x05㧒; ;8bc*6Dןf͇0$"WhNlܔz!Ŏ__-V8-y/̾%ZLEowWǂ؀mW0YD$~Ts*[ p4#6U0N6Ep$L_w)d'~/ $^IYcQ2Z[.Ou+Hn;Шɽ}ğx~ɾ^?,;D:#ERG.{o?QzCf8l*զ M?5nMxBӑ߃MKpIVF.5f*'"fSxehm XFU\ N 2xƦx#Q⫷M@[VH5cvtCr =|T XU<{0}M1crTS7X~?V6g7*VmJ2&8{AыOzbX)Ύ~af7$wui$o9LL\<,P7ޭ0K.%P*"ss.y4;֞۵gp<xgVÿB¶Cg ±u uPҽdwborD5b#AZpy2  ]E>yx Ca YyQ*ۏ=]ׄ9/ȩF:#e.n.\XGLzzq?{3=Ĭrv0YaOKb" Z8JBe"pYnyQSKWҴtףZN&X-z : (txZzC2(QR)9I##Hnl, O~nfzs*On:;]=rSI^A@-!Z/i 1\>KDԢοV\h ٪0>ep$pghHl~MN45^(Tw' *Z^Vvj7p: tdUb'%zX9Nn B C[+}~NYWWP^n,bף$@04qB4J{+fuln{?/vE xo-$b0#0wrܦ=B#@P !;B-o%2y[ k4$u(%;} sT Pa$Pz 2[9C-Rb>3{~xdD0g.n(tk6@Pc1Pi8Q8W@ cϼU$X>7rczzSGGv@\}si'W\7gBygKEqmT_B[7Ҷڹ6MEF̙ѽPyη^>zV2wR+*.`v`2WRXckDa1CbC j=9tKSeo j牒YQ{+uqŸQېJed%i+YiEH}B@E]<RHP4iOӠ8b/}4@:>%jwt^ԫ I)pD5+ّLinrl뷶'jˋDܜ\S]m$BPKIpo2)_HV7d]@(͚ 墇$h~_ZQ\u1[` ֢OU+%gk) l2,+1 p}o5"$rO%F}_jxi0W@iN5࢕m ׼uu 6{å_RUqBo{z⏝emYgkb}qb= <֒u +nBZ:DE&(Tד *-MK0.oyo4H+&&)) fmtrI^yY[!u>z11|?|O ^ oݚMhlzjۨUv>)\,ԩ<@nJZ!nh(_z4"M6e誉֟+[JU+-،sWqyYMǃm-ʬ+p4׆}>5NlD^<I6z'V`>mKcJ@!h*8(ڊqvËv"u$K5GY݊2(G 9;{U]`Ό(jfT9xm}AI9IB @DΪzhPP B>5U@@៺Z1"17Zԑo i9j $ix_XcG|oU͙jrڪI/k9mv2qvBźvq[#O((@v I4oO4sd<\,om͉vhE>]|+q_q,Oxcӂ1}=)Q%Vs}j.RAj\roS-h[ڐ @趪FbI~#`z{=Q؝{;4md(L2 wE1Ozԁ1t女˽1 `5el*D# t.9XypdEQD~<~M7O`>S6j-%g" ᱍ׺YLl1fzl V*l)cJc&x+1ad˛"}qVtMGr~3x9Fh_2-S;e(7|)t蔡}d„Mގe%Pc:Dg3U+ۈ.p_ ˧P.X!EO368Yţ3Ekا3[oz?ʴ-jmb㴷 6w{"+X HZ{cWds'A7-΅4kѠmdn``Uhͭw &]oRZxIvKn/o8[1F>(Q ?TlxEfh1BQmϜ_8#dP@cҶzw=J< xv67%$d+Zi95I IihXjD:m~ғJl{ 9ɻ-./_'v$ղ;s|e_C{ &=&v; rRLU>ZI8j<6Mf{v5UGr\wAk#Bo+(\koɀW*/c 5'=]rj&\䇫 D #O 'FA_w'?Kq>|:#q@,c);ML'Es-EƧQiCX[RWoL2az@ 6s荃P/1*ZɓBA Sjeb$3,wkP[d'eУ) 5 gf`F死挟(˱._ڪl_ඎspS' 陃JY)Ujs5HYcj7(Jbdn¯tgiBQ(D ' *Ijp2!RYS۳ަhwHs?,~6T-Z}: ?ĘɓBX֑H~@]a5 Y^E - R}Ӆ ZϿJ{\{εqa (tzm U?5}T ?3itFkJU]*׎!p1]8CfƸ -ngjfLCzEЗr,o&i/%{ZoL%AŮyo?Ek~䰗ulmRź4y@KAv}UtgTOd9 ;8.~?КFĄyB:hԽ=s@kFZӛÞɴjpWHO?zU`2v N2u-7*ؼ'%phh)@[!$xPaPV$H #A4\x*sS;>?E@tsO[;XffPWx&qƱ0"DT_6mq 1_jk5AFC\Js !2)UHqLf]) Sq69ɼLǦ^";$حY ;9:Ԅڄ =Χũh`-DQ3 ټ>h'li!.m$5&DIѲ5knUVqt݇ۓ$-_܂MBmFt΢@k; )jA[Cy&0]w{ ϦE}~ zū$֭&룻+ImUɜQ߁SkY_h*WA'+8؀f3hV534/mw`~NjGݪ4YbFG[|9'Dڌ#֊qŎ-/!i/vwl%0WxbkmLuU'c3S_zbT]i/d}aU!K2󤤰4ުg4]M5#*R:'p7LIpek@H~#]i@IDM):\.}+MdHIB.4VvBˢlK}ZA/+ dST(K sz* C2p։nup1Q|q(ŋEKFǀ0 H}Q( Fgѓ Ka\a$tpglP=@t_DlWO/|(VܹD#TeTۡ U: 9qWrWD1X~Ϯ\~¸t}l,"<DžauFع<݊[N2'Cifi 4,s%ӆ\nrIUM>vQMz5"7Z-p|5tKlAnHD0&δE(l3T96Ƃh7Äb<Εt}:b56o6F_x!_F}> q|^'v#eЁ'W-k_5܅4 Eg'~e Abq6L9ѷhxRеJ Eɨ)-.h] ƨI/Y~DFI"$ʹ`1{}K K +N-zPgZA8Ob L)abxI):iۺO7F8N1庻1&3/9M{XZUsGݯX۲3#*uN!< ~c{:F);\iߍVY`EPtYMk67aDKfxRHi‰?jy_|s& '1sdCv.i x?# $6:*rO!&xDV0>pT{_R5xKüKDa>cGExc=LIan(m9T]r(WTHϞ(wreUt\kȬXXW"$(a{!tղ]Kkғv)5ٖ(2k6<\h!hA[j# Y (&Pz%YK>cƠN6cP9>1,ӈb)3)/`T|Oߍ ga@ሉ8?.EV}ZLi='LL ;e]1T唌tҦUCܩsg%Ԝ? BABҁMt$<>XFwFy++$ܜ;Zه6j@|'׎ ㏣M̍3G)h>,G?xH&v0E x#9xUD9L[H?kfe dG`1X*N?Hۅ{„pZ"-\LjDi~3eK 吢RKknX+ևt\*Vf@gtTj9ݧB٠돆Z/gc`T4F:K"t̘&Y]_OqFyFܮr-W"& Iri~=eQL2]gru V?sвgDນa zf]^ 4ud"7N_γ85] Z=Ei0VBYk.)(y`U >7_+ɺeI.2vfzb G AbҾwǭ%E5z/S֭b`ӉkOqhP 'aDp[忦o/1;dVNF)}i9D.S(ml#Ogs Vkװl(YUoS2&/S0nn]Ϥ/{'dC0mx߶0/:ݱr)rAWY%:td= ASc"R65օu&+ +~]'[LH-ХC-ʘSpYޮ)l\~}&?b;p!a馬M>BĎZoz.!Y&v;Ѯ+@|n?[MA$;ȇMߑ{cWx#oSP 4a{ w{H:LYi VBJ,_a;>@޸WSa¹^5 dwЙ]d5 q Equ9Aɥu?~nָd,6Y+0QP ;q]eTf+}":y zܫW5N 78GY O'dJ}&CM8fBـ dsEв)fN:QsVWw w w2Э=70Ȏ6Y'KDw"aƊ!oiĺS%)r(!kcrex:'e'l)EFQje5v0yYlL}PKU 雖ZJ#@<3w9QZzc'z|H:b"cR D\Ej$^Aī)@Lbll_K:iF](sn,5m>$k@[S%Y/aNj ;ᾅG2{NQGNoq4Ŭd3\Ty8Kχ*2GK;dE'饳:7+ᐽJ6L7G[vrTjnۤ9XqokvSR%_Y?!'nIAlOpk9Q_X5 :9󞒇 $a/ =yW{" LI 9Q1 H(10tp>d)e[u:;͚A/{!o}Y~n\.R߮.GxD\Q|W!s  .s-SVy@l #I/T"&LXiSރ<ȂH߱湌\bNթ$?Бn*Ttk{7X}ҹA9G/d|m:@[' !pw*V~2 (GخG;z](}>473 n4BGw/%kuI`ydϡ4Go|{ 2⹤9;pw?mJuy+}w< ;@nw^ 1 9t?P{2- s^-#@!^u{:X`A|8o|(eR7b!u.G,O+UYд!ީ ΩCPu=d8. "$˙o֠Tj%߯ldw| l1^c_k1W˹NS U]2d@vE  Y2p*W- E`>OW2H4som@i6I?T?)PNb1u<>ٛ v'To1Vz A_6KėE5>Oy1S 1Ry Uc5!lng@ $@l{,p<^ykUi䜆,بACSA) 3a,R@GX692C׾K,Z9cɠ!.#6,{# 2o, l;7ȭ d5v'KVCLv5ycJ?4RdҼ~Zx#d@ة>zLO\-Eg ]mfT/Y+]^/O;M9>w'yy7^fVݜYƳuJkQ>qiFE> ^ZB muTb^kuKw?1d_HRU H|S Af^]? Ce$Ҹ}7G ,BI/~B_W hi2ov RS"8G bkw`c?7m9^Vw[F#KʄV3B|UOUQgTQ˗sv./PZkt!ͽ?;~H0nzdуh#$`1WX~j9U"89@2̜W pv'd1ǥ1'w* }BBףoM0E"14/(7>gZW ?"xΜi+0y˺}Oj%fa+DgH?AՒp/1 *7"$]_=$xߒc8gr MMwJaND _bdלTs9ǫ1 W_XjѤ8=Ϙ'1/;X:! 3ld-y@j1ãv0qiAy?ۍki nl86Aґ~@xXX&)Gz+Q5tMڰ a5[TMNKK72?֑ meT5 JWK5_tS bwIG:MAMac.ǼƬOӳoۙs+mc~\[6 TCmbM=LҸk̊*DnO0ʾScB>Ө|Y^0ޖi` 6U¶^2qEI6Gų?dqP;LmOŏu 6ϰN.=Y[UoZY!9Ѯ Ο4w-ƽ|o1kA=C&ԸFsD`N4s{ (>:kO ;I[dwاdbfbe-.•Qud2! =Ryπm#SY wOCʇF zzaqrI_t_y}RW8Sa+Aj%dw!p\YBV[Fҟ3X ;ʧeWFM^o$QxWOG eTǚsmΤ! FE{D-GAs&/ukURA;/l>4Dz 0KKfG1 cgP@vg1C(QEFFYMY,BkFM{_o :*^eCR;{g߂8CY"^3H֑Y;ʹ@&Pj𽚙LW\WOx͞Lv!^RqFu6U!&jߞ.˜lDb%+Fpԣ\\u*E~ *g0ϥD' fq%\rLV%/=Ra'SM#h;TJ 4I\k8ٔň}1X^>ջŚhK'@=t$FN[j[PX%ug hfj68m޹ILr7͇ͽ^kaf Iݗ4*UVvy}J^E !8$;UMzWoxĉ{C:nv| G`a??:wV2kIofqNNXb-%l+IB{# UPh/ȩBS ">ԾeQhԣ+"Bô.F}!yi# p23Xf+%,b`_#$2QNQ󔔛jku@o'!i/߿FHTnz"|Z&<;?D3N8?a531!xhUdxƨKױYH{vO7vBY3PSmN7W'dɢ"ʝ_>z/FN'″*؇Od.t&%P uZc ^S /oTO90WrTLa5E[A+Y2jE#x Wcs> &&UcM|Ug35̇)A.k+<'.)(4;v <j ' y:™7jxC]l5%$@TY @E/ FVc\piR瀪CH]e OgIZͫsWaU8 CksE ޱZ5ħEv2%_0roYY>m,6kLüq]nԈ)p A_ʲnPw%zYQWߣoMj ͻ$mF? e ϧ qٌDZSe/S8,UBqb:00e` 1ɐdDY>ؔusG J6D.nOTdGkMن6o#yY8Eg(2 B'NcpCЫ7q,&SOI?Aw/-5V0'J b2B[?`@T=Wx;7Ws&C/7ɓS1뛄s4uxU6)nJ1ptK#OGum|k+5oh8j(Ӫ82Es8{iDVs!%Ju-,CF7m3*04k[ҶoV$|}n/ JaqÚЫWXq各|U;-8| xwc3m?f^@qʣ\-A?j=I)hsj;B,&-?_'Xs2u'{mwUϼN3u S8s PN'tFgCSGszG05T-۟- L-jUrQU\6`<3]*}L,ȗ{Ezzl$8Lho94gۈ}#% 5v4n<[iG߳ԅiT|x6i&&.IzC:H)(|5]@nJ|_g]ut|ѺMƕ1cW^-ɝjY^!wg7*WQlPng/aLϻ<yz$hepk*4duP}>8FG%DQc$ԫս})6w0. j>c3n2 B(e`قwI z.Y uY#Ziܢ4a:Mni`!:7鰌 /'b&Ocf!f`&xAΚ#>SЍΖ*~Ċx=}Y"f!)g3jUpUKމ-[9XoPu)$|?U"Zq)qO-E!51|m5uf:OL~J}r iN(0_s6/&fQOW<3꘯ /L|IaC=\)zȭ"Uij _y*3Zf q`qPpWGo̝Q:baϺX'W2WMņ9Wϱi>#.jW<=ŏfV ?y%!|-H?)L"wgT]1r/?9NYDʔ):2xl4pRNђAA7],4#eH |e>~0 J2X1[ ٹ {[#!nZrdP>䜜x3dちn?smȜKZ peVUYc w_2*܀?6:wڃ@ eh&+.>\ Mq-v~ir|7Oc+C$a"Qe8uO|1Z@m?!X`{I|>;^ h۫L? BedW˟Y]:ex69dqlgU M 0$#;]t8nqpaI<1.N;\H/BVDLx Ba $US ZQ!C=UGL+z{%ċTY轗k~U uB KAex!r!P:eDcU\|X}Eݎ/'PN<}҉a*JOKZ*H 鍊ȗA2 C*DpSR [!#w"f ֓ _kPm5Gsqh$^/'X=TN p! E[;6(N*e F=ųuͼc-)+zqf+}DWGUxxa\PpFe 9,$ ,5Ƅa !g>WIx}O{IT'V8tޣgɏddiB`Ę\,Z/}_ktYIem $S+[BIٝ iq[ڴ{3j){d,ҳ3V\1Ҥb&:-yT `~̿N3ILx1!qاs8@)啸yeAԤ22#o<ΌSm-O͉Ъ ,EA>WF D3D9LTWW)\jGfЉkcX|.AvɭR[C@GB3N_t|iC$HlpA#|q?N|+c0YuX-KWbN0 _rjZQ!-#&>3{W*o)H2sl\HBrl mcՆAh}`S|=.ڹ['O`yr)0 TBӮ*,H)Z$ܡ&[E)qK{w5 fb7ORu1OpC@I` ԯKunƼkYqLD͑´-LeJplSTXgAhfHg }kgRQpHyT 961u//5CAМz܏$73B@ ҂YmKg /5- "@^_(84o<N3%hH_goPFl)1?Xrꨒlbm~XUTnQh;^;.ٚZݽ;Zh)%Lgra겢yo{t\4V Lp]J8/_m QW5NՃ򅚦V_K b#Ŏh'V0Yi]vX7U \#' +ËqMVʪfk_)u?Ͳؙ#bU'ݠ@?;\9]>=@JɃ M`Gtu^$D +D4 'EO4;qŬ 'FX96&[[׋ٔCzbmZ|uW F4E߂=]A&ZK{^fd *$Ny{ X+L3)uU)V~N[gpncU1ȴRu$)2gogn1ЙG5  |^(|_[8ܰ'}*h-mn˵ou+*i+K/L"h d<꼀~߷Z.2̓׿6p#;|r%$xG wz"WPzg7[J*԰037Z;t~BZVS^@J7Ag8&C$}!~X)(ב kC^䯲FcWJY7y)]JýV*@A ]|lDUԝJ5JY)͚BN/ղ.XT${T#ٳ&O|t@gy t!,.5]}1V˧k)JЌbm*?k .uEQ*RL .&DOu0Yv0,CK4;T5.@y.#cNU%S(g͙cHåq)6A%ԍ TQRh`lt+q?ݱo'q"{:* U\̘$^BuX.t Vԑ=?ҜzzA["=}. \4 |FFMo1o3r[OL$Q'fYUA4*js%VJ>r:X~ d68|.LدƦ4C2B}8z+CgcyCC蓺c&&A8/|Fw0[ q3uAP2j|񑜡- oVPY 8ൎUqqWoۮehu//XUFb{?Njb\qFq[}b"$÷E!}+.ؖ%O4p E 95ڔwX })9$u-/_.R&Ω#$kIU`X%mQ( 3qWs~eM{3kSq\L;pH L.-BP+ >=&r:i*RS!>?Z,i)IVa&l C#C|d#5)@b/=DfBI:a+moD0ۧ!B:q1ea"2Y~wK_ND"iċ|+ EK>k/ɀ^.$7QmUUlI֥[ #o^p d*b7d P8;_jg vk_U˪*A,;$JE4XΦEJs+ ~' ɰ1@4"]_]ⅅt &܌Ɇ5kݥ9:t_J9YDLܮ:G{a+<Ӷ`Ea# G/0A`4Nu-KiEJnW>7$vd[a%w0M-[2$Y%?][eatdN5$W%Huy+^lEܺb vw8G3 r+/iԁW:y3XO &vRH x*KD6pWV&5RA;OgVLL,XY,^מ?kJnBFx%&iH}Y aȜ#bP[W-DE.-(٤Ԯ2yS 8 h<[ΥdRJ%Q xaݿ`ϵ n.kK ͊hVq hNC/zQַ 2-]0x{QJH"-@'!@y%|%ub-OdH\MrX/%;Ium5~3T+!D BXp*'$: Ȕxo%'Q$r eY.g Wejv+S1 ;*FdYpru~t7/??lXiC}>w*S0lJCǞ|v Z;OHF*0ݬgQ27>h(CJNei c}<fvBx_boLQs1T~ebYWk0Hcuj=vͽy퇞(oZ{;/Kz5K7ӝ'+]Z05" >v sc-/Gyxk|&cB^Hkn lI PBmy6(^ $=2:Cے?+ Y1F$T3My>8fyh,0.:NJ`t7YՆ;ؓ֟SF(uX4!%6W _zyԉ I~ ƮU )X"1ƹ2?\{ʾ_b6҉{"xdu'/!F޷::d'DW=>MWƐŅѕV\R*So)!弮 YAc?"F:J=(͜s;.Omv:WAp{ZOd(# .&؜8_Ք2~>rM >@⢿BMf"zs8yRUMl!e.}[ J}m$Ϭ*ǧ/ F&IlQ]q#ytzpBu-OO\ݱBeBYvE2 7CB/҈9c1–$fbu42v )uѮ8C'D˵T˦J@ޣQg#Ao/Q"#g -ߵIVMNuRA@OIQjE:o{A`uHs%H}"4!ɋvLX;H&V/J̆F/o-lcO؃1YJQN:1 72 <͋ -1 X}I u+S am}dqP׀*7hwZCHr|Сh4cίFu ƍNTQ-QVb6g kEϒ}U8L1xo,%orA H}ћ~sd UP䴯k=R9?P"O},#ʚ#MbPx4m+'FU-Cdެ0%uƁ3<!;c$CyܫA(sL"m0 ԅqK̴ABv/? kO'9{i^c0J4ﻋ,9Q񷾇&樂k޶KNJ)ܚhAEζK$Q+2u)%aM 1ʃko趷AE-bn/{ڕ:#Vk7L=nWW-NSHQ.;jSmn  7+AJSO#bėk =3"dRDppǘ] `"@IĀagyq {9rf~bcZGgPeAkn4;3SMXMw:RUn@+̡DD r˟*A`z#Хn=ɜ9v_0Pc&Jq/[RjX&t/CHg4U%-Jl{Ky>pżWYF@`z26S[r(+oQ LsK$f6H [p=Bٳ ww%AVg: C5nsx(~wAV+sy2ocDb6@=\tpz./%?Z^`tO5gyY]\ $Ly⟊P|h׍)u3Ps}'i ,vq (lRTQ\OQǴ.4+ |Nb%*SuH8ϭE؎] %!wfV-0:ϔR8&FbVFζQ~C8X_N/)EGA(>7EӝqϨ+8Ww:@'?~]Z(Acf7?[(JȐRO4D!v{(AӃ)s*7k1GA>[@02Q_](=B~>a q Fi"אwPIqB=8DًqGg3e>\c)Uv" ax$3V+# m~ 6{5" )]\8pfGڎɫOKϵ&yKVW/6_K>,&Xw3,fgƇ)mvq@P-۾dkm-M W)P).JHX-E!n?dk0/~')ϞbmهvlZi7|gʶO OaI2IrDh;a- W9al߷ YMϘ15d]^R"@B?T:⯁zA-D9kR+wK("M8Xpyy2Q^JO($/bXՈ֦l5IMy±QZ(o6WN9}cb%rG 2;0݊C6_KMٍ䢦mxew筟8\ޒ*ߍBɈ__"\>@`ɤ][Y8Ū[J1d.E!GB SdS(N!,t Ԛ#~.ϙ9M[>ҬŠ9"~DB=8ÝK)O FR$}ʆ,.^g1-z;V [@'z(.j"L+=vutYg`P*MnhOeؑ當NG!{3P;5;cVg_:m+\j (2DAu-vC<""zpo`s9xNmGa<,:L6B"W҄Dy`?2z$(fmȾ[$=RIlp X^bbVٱHcD@F#o@8Yx/AZy ]ssiP*>68+vdCO;Ǧ͕Ig%jұT<M2r<(nϫ+ghӒk%`K/- xā[P `tJ Clt2 /LeI l66q-{ dC]#V >/..'%[cz:@B(N0=ӥ2sq6RW\ĖuՆjɰ!lVd'J֜ 1Q]WLF'`_uh'cU&_8~=2!fM5.ʞ-nKvbbx(ÜRsA]'v`s,@N }~u 8@ua2 373 fX`HNRҬ AGM F1))C`\",-O5֖z"D u㔮L@RG~{]3HR'' 2&&+c@#+O;`:ʝ7a!e^2j C5sӦl~p|!_(]''!)=u:RGڨd6v#YЁfLlLHZ8߮gfמּS#@;tnPqTov/k PI6pNb JyWh4g: ')wfM:a D\[9o5M9O?F;h };otzqeDl[lthjYU04OW:rTsb^z𲥶2G:vErd4g0[}ED5|FW'5J YzjLRHZm6+>,qd]Umcz g߰i4:/E%qߓ!xE[ ~5W7oJpa"K=Ϳor/+nsK|Jh2Qe 7, ~YM$YHaVg ,aWk0y{.(W5㻧451AK61̦*TOv$7,;| )kEBP7<1zb@'ww dx˛IfHYGr]?ASS2/ۗ.nf/u6'G`/Á Il A#ȽE&dC|;Eʓ';F{e[p!,L"ӟ*pLں8Nz:I| DUf9~=JZ*M{ GL\Eb&Tsӓe8Q9D!|,UڃU.w 5; ό_ѢM:NdE`r9}m,@(V' J;J]p^:OkPۛTz>p 7<-S|֊j"1Zz;Xڗ:I"A9՘G ~e94S|dcdYۼug}dGmBoWWɢn%N~^Fc=ĘH0쬽َ!YUHj ၊Ҁſ+Y H,=~b%?=! NHЉa瑔cyiv1яat "Hyoηt\[KOmGd:Ӻ PkZ:/nUH#ūDM{K5&"2Sa,2;$"$ww>XA$¯P<"p"Jו2rZ|xSӊ 23P(MiKd;4AMA19Y'ħ  ;2|Di{886LbTG­{ZХ]ېbsA {.Ia(>nPBHgF;0C5x5[Ƃ(qXK!Ƙ% TL۰&O蛍8$`n;xH Y-hc5L+ yIuaw//spekݠ5~{a5im] ʻ+o!)D,d~zn(ˤLğ9Ua7q7 }z+Gxj=VּHJ(<Ԃ M8 9`m{FO?Y=Ybs\ڗJ;֢/|J oЖ_\1Gp7{RL!$V0r Srz)rmx25kbB9mIzӲt˛p=*\jG0[_ )zU2[>HD3Kcߑv Mc8~ ㉽3:.BZxԱzi^cEl ;z*0-i.^S7N._R'l=Q3$;m@ޢ23J%LQD #Ti$ճP .CiiT(t( ^=lCg[&Iհ$C`7#l=mu|Fҝӣʡgf5t(^w[S`;hsж_ni0m"< ~~` NC#̾c(Ζ)so{ w s}\W'>ݮNQ&gh:j0?:8s7m3fUjE[D:#KxX@%Z7OܮbquT!44˪Rq73Jvn <7(p d1ɟm$^色]bĬ3n~sB `gmۛ]fmC JId=X1(\P[l&Dzov6\2QFݓ?}_WcĀ>f:]\B\U &(F{R/O >5/v@åhoؐ~߄mUY[ uڴdIa%}Cp-?NkIPG[ ݑZVjLO[ R( vbu Q('dh+ mRkXYH 5҉[+iܷ'ʪ@Z&9۱h[scV[|M{ ÔɺOReM*$bR+^i}(-<.U*݇T0x;ӎ)V_^_C-\J&v_oz#u8@fTTs61aDF:@mj4ܔߥֺ\ڈ=R[uv+.LWǒy ŧ?v,M#6BIW0Xƺ?6|aT|mPTjD[/yZE7 S' %!5փI0D"5퍟4 *) yHA 7Tt[ZYvI9v<ۨ, CJ#k6Xg>Y5RjS_bDa4.RvWom=)ZZ6x8"%ARsnNܲ N޿,,0Ӻ#뽧uu jQ8V52,6T[b:**>i6SG/Y#g?KMܥ+fghڣh" ,d~qJO12EL;:{F\T(''VOf@CF!zD7*QG% І:%Ad LtPa sǓN cӊNL}j].9~`Ea#ԲJ3m@ 3X[VÂA 6&A~k}˹~tV/hmnGw4B2Rl+Ti#Jrx<d$yݜ 73r⸠E? R6ݶaֈ]V 'b?>Ϣ7*hơ,",i{CrFx^& '@zvrKՋmPYO2:1"'_׆I"3+tIWNچב Ir9Mh5M3"V3TL\(3 3w^/[ Jˇn_۳;ϻ!%WaY͵R[k7ehNOalhFKod)6o.F):{i@J_}5É⒜KK(K|TA^{x8ۢmWРS )71joRJaH%]?vcpSţRx [-ADHn+ZT֙:#ݳmv5BVZ:~4 vAΪ z>}% .@?m^d*7`=+FWzZU yl˰{K(ܥבS@!pL>Z, }wJ.+Ws̝X0%x DB3s_,F +牤xL6kLlIzOC-~ !c̴A OsklPa'X'9 wۗJzl:I‚= Tb$^SÒjNv5m~r/97вpbO=uj suQd'N60AJz8 D34tSx} AiV[LTXVk`hc3-~q62r872n_SU&H]0Hw@]+u.E#/A1jy &|P!(tg|15?3sxݠ_;墽%1 ΛznA6.N͙ޓ깆75Ejq(Uzȡk&L-ùj>髕s oB'(aSp:w^S΋eKMN=LgҀQZJƀ_hXPF[CC#ڳX`N@ Zp`[1|}T( /nMO'0`1У*-~{঩:4\廇y]th"]? *}Q8bc- UrC8KZIWnDW+?W' ~6k`?D^^G? ]舋RB[PC0!(r g! Mv2CQ7Q^tvH~rNM*h0 [i %߰[,npO-_"'fՂFۈVd47B-dyTW%2 uZRifw9AOd`)0$IBsO`F!*Ǵ91ڬ\ 6>~|j59"%^ʶgo A6*_l}E'nuL{>"=zΠA˔-޿A= z[X($tidp n9=%P4`}xxTZljeHݏbfjeX/iXH/. 5\>xt+i gh$1:X"+.WjFH1*" ' r:D0/5mک‘bh`Au͍UU+8=A P]:4l$ecNG_K<"rd*7XXI\}ヵl8("s>xidHks^>a,?fA\ V[2˰)M1p: @/C{'/BE=b,}*۷R Hbw1f{0rMTAX%䁃Jii5(,jP=dB/ %Nsd|~Smot{\P#R]qM#Z55)A8 \,RrL  0r U8$ CFzrReHd H#X,jeaX|Zh-&P\ h ClK@J''ʗZd~6.@JD6X8)!{_9/%LNAP˿^k-M{7xP*He6T.sP/P"!f$>4 nj-'68| d3y\Gբv-w\էRa]_!'2дpO|[15F0x(8{Wӷc$-5WFyi\I8w6a]SH#7ߌԵNhZj'`u Cn;G]E@4) jU\o߰sxH&ZlN^ 2FTԏU*42eY6[tk(3H`0\,}9Dg<}y89xTTܙ]  .`'%ycRLNRIݣ)-zttUд{?e_їG3ƒT)8ք/"^R/R-GAUĚ;q&$ۍ!5Kl`;YꞞrK* ;7՚NTxۥ ra'+^=}L_< =28%og!R$4+ Z! |mRT,j03IZt ۺ;z-҅CYS+$8q"1FvL-znDkGcqz{ 8FME])SA~\hpV9YV߄]k7EV(V|>Ri*s<,^RaVbwıCJntYYW]촼#,?P񄾼3>t Tf|O&Q3bz"Z8rv,Kupw~,cqVPU 1|Ǖ 򮩧 N*.V=ȥaÃT6f%]XXQ hL2J&ok ui^вqj joTGahBã NiTWޝoChm!8nJ|=;=N*(#mxI)zYwbT,݇jGxo!IHB4oNZ>y*&iI .D§8"@>tkPZǼV ܟc%BzȇCVb![/4%oh .hYˈgrN$!BƽEtLHKƲ3opmHDm-gl*8BN:iAxb{BJݏ4ϝ괅;5sQj_ýl˼i費tݸk&kd -kҘ bƟ\ Rfd@B:&*ƚb$gDE^ c\^tT7&ND- ݂J4τ=s> xvy;ű˻rǼ,8Pd *4>i4t~z2{+Aa_x}]읡ʷnATUvRU 1Y'L∨߉{4֢C.L[Pن4ϓ_yf1r#(OuNTU0aCkLajoN4Y= v:#&H 5aT!\b{Ws)}Չe4W?,P y?f8yr݅`Li(5$Z,WͬX;YFq7( ѕqjD3i`?==iVcy.ǜf U1Pd6rrQ^{w`ܗĩ} )&IJqs.kHB.wm3=K{h9ezW?"]%?A!SVJ|^ k.pkh Df~e` fȔ@_7Z[υ[{8/I_Wg|dܩݭa9gΌ\ *0oP'j>S;e<FBi? sHɰ+ ɨ×7L܏ ue/ffĔݼ. ʻaT`jv詨\G8_䅵Gp.f;#h9gx]`'aT 5U}!wY3:CkBj&K4T}Ѧiy>@fǫK\Y'< t-4zoSa2go&؟sDa.]zziQstIfp˗8Y{[᫦KLפ!8Kliij 5Wg+-ŅT Ӵ9h{$6aJ~8?rn2W"'ٔYAV7!G 7OŏMh>߽ /fkߙ0VrbER)pcQ?wZ{u{Rh*P46EȷwdG0bS it~6Zh 0]xFgPu^pX9:c? ASLmWo!̓(d?SQ9> a͞)|:B u!~BuWadY*ѿc$D0sw<.)'㆗ kK 4mH6\p(30&  opy2Fi[JRAifL>PBcs?=S{EU=]oԫy9ZD>SrRAbѠ嵻 (3ezq <ZȔFm\\Y<RX72cK괮9dYyw%n Pb_f+"{2A 02̭@u&MK uI"pѮR*A|܍e5uث h7s !;Wh@jhhޟ+i;HЎty_kȈYd|Xj#ɝ- ^Uōw1%b3`\ ci5mt<3+ ^^Y/L)/F5\OXYnGL8z$+0gjv:ެ*^z: C](o!hj~RΩLPKŇ:8w}О DUoe:s UcqКtnwQwȹD j$6^-B _N1YV?p6V)D!©ܸї؏A}~o@ժG^5 F6;ZyvHb9aZ(/&`w-jGσC3o-;Qn T@3t*U(xH͒v4ߠ#ѳ`u>ٖٹ ZHr`N wwHg 4wC.'eoW- {97`9 Ed>zPPݸ+-=طo1/#Tdd6j_1BLҝU_ s}tczq_Ҧ1n޵/DbCzs"}6i$2Z_pd$ҫL X_mZS:LP.=7^j6wa;<%7X\,W',ۦd)ig il[gTٛCB\\*9f(*n8؅ p5qCUF)5.߰<ٱ1 qiN%[}{fv oi)^jm)|%9E>'9JoFʞ-;\f^D>}QӝW#;³d wυ;#t 籭Z~>R]")K3`vנKhцF?;6oR_SZؑl'f(0{YqH'73.ȹ'$i>8#ch\b…cl{LGQOEgeҗ;^LZS&;]/s*:.I}oh=":١&I൦Sԣn%,@{?Ry<IoJ4Ԋ (U߅[vA&(&xowAPsٹ]82 r xW9P-'px?뇏)qqan˨?ezd'pQ삌كJKW8dIPi]ՆHf K4>3%ϗ*͝˄imK}b"xԇ m2R/ H 6^>|,S W\nw&88C8JoVfh4BRfO /h)zjjbmְB597M4#ˡ47hA"/EZ ,v-Hk .gkzvR3"T.9q",Rh38k62[=3Vg)TCJh28Ty5S&,teyj7\窾/ rUvtcI-/;"2ĩ?CSg)YpO k:á4oS&ctiX.Vݸ놈za?[{'[R&!oe\厇StYzWm ݲԢ1 wڝ^`m s.O)5iY' .C h)R{ђɮnn ifn@ьŮζ(B| z]b`=CJ 1Aud0 <:&-/mWcvleGIN|N!l< 6Q)Lbdg,+=C Ӯ J'Q?7V4ō>u:22Ff ֊(mbDΟhy8QW;ه?[S)Jld%)9ܺSxE+y&DLj%.2"CA4fVܘ,7J?4;.Ϗb<}65OK_- /7BIsŽnBQP{vBߢ*FDž<-ƈH6f*Rl W nl9|{$SKvuܹSHn&*o׺J:J/@Z(7\Qm^~ )Ê!^4OtX!t@/!O f8Mp|=n$m/)~d'`zT2-TnYY@<MۗVpOM0ƈ'EĒ6:H/.:Z!Fx#7>) xf۠rwLj̾>SCb4, 0 +W<Q:p0a%A=`B-0FiĀ)֥ÞTne`dzŷW͊-XMmd51_Ugת ?=lLha@Kj9<+hE!|l=>bASʇxVd<^R [)Zӱ:[/>t)M).e$) 4&Z;<,S9x` #4a v6+^bwh 3,LY4qT ۘd Ɵٰ!TߨNֈ>+RI^*)=SxrS|4+)| Raa8&?>GKiHoh_9DBA)=]O{.mЋfD*3"I(ގk9#.}xm 8TcAh1_tɜX 愿̣7vˍa YfO QX"킜1T\{_Gk$l녠Pr?VfOBd{e[ں|6I8)E¼&;:??ΫݎP?u,ܨA9Bi5p`p~'k7u6~hç߻4B2>ӟN٭3 }oh .`&D8G?R X  EbuFFW;)]k& ki 5cF;:AΔ=@dpG҅Lk0Bٓh Ml-k+Rg *s" N@ov*Bo$iny#!ݷ'+nQgzm>īvHW2ԫf[ S'<ಛ`0QB7/P~I{m\<>W%*dΆ#*mf7,BOj>L87f3؍VW\"ʥ$uL9Q>_ OMUHm>5n]n!26h8.`1Z f%2I, q膋r}NdF|}~{Fl뱏n=V+gRp,$w2t*/dD±hl%']GGT̕e$:+;eaq?(ܫ îDŽqˣyecƜa.Ԡ+R^Yr vXТIpq(z#^%ʫP@OF{ݒ$D(1Nxm@)=3/Wj_ZՂ57~db_Kߡ.H`B'䗫g+xK 9u@NgS)aYabٳcc0 k£xr{7lyԏg/2lhuWB ʋˉDjMPa[#m_uk]w_ZNUO߀u/~80i'{[DF(nE/p6G * '<#_cp_ALc9@]=kWKnɍ,&Q1/q{?};8~o ۻM~Tؤ M3e&LgܵQc]駌 9o&etd9 $mWm>' _8H26TyUX ξ,ϩ / ʘ/~oEy.] S2'XWi7?a9wO< Nb6:՗#=xx֕EJ*W,Dkz.zVWpڇn 3d ML`%DFno&B+TYϴ]KU(}>Y6ʳNп6:b; fCLID ^^Ǘƀ|q! |SH.,p|n8Tox:2]BAܵfWF3'$"}mH? G2?}+G`]^(\@guY^ǧ2 nd<uxe,ȵSQ _&sg30p; ʾ4ńcY>+vx]u̹dZCYPmNV@|wK2iz@)_ mQKUޟ097"pRwɐS`qH+ rrR.ܠ"p.ϔ(g"iY )AS5̘T*B+SHgAIWSO{ah vE!LC,HL4W4DdLpos2KZXP@0 YVNP)4j fJ@@5nGA^C\?AQZHS^R>1=ˮzhZ܊}u#퓾:s整4״̌򫇭R^nMNxWT蘿@^ N\GbhXH9لfeLE -{iS8P9T7r߭## { OJxdf٧4);9"I_pS^D7H%z:EM|G7WPWePxK {r?&" / p=K;$'\4TX1}xfɋfPrJpURyIL#vɉ*w]ZAPtdecO43~91yz< M#4AŞ[EaGUBQT7=f%>Q@<ڵN鸔)dqνQRƘ:?ƒ@ṿH٢`5R^& us3twiu\K֒-2Ds<V=B3}v՗/e.k1s? <#j-aβ-44<3cLIO/X s,~{t=zs=CbNšʇDAe#uH:Ł3x:F}j/9_I*mԮ;aqH0X,!/OKgUB!:]y^,?Zo(' U-ʩCPWŔh c\??zdL@/"mUJ:VqLoI&CF—rH瑚k s"^uD*ovcmp v:f9uLCG>ʄ:|?T{7O EY%1u<3;rݎhDe"to Vb5Qqno}z4<.u= NO/ 9GށJwPi3ǭ)lC>R#^Ay#zy<[& U{Iu9Ǎz>Ǔ`uYXXd6{ΚD8/|ZcQ((q|M-HtcI'vҫ@R.\y~7C1'~x,@jgf>j~Ԓ:[A)oVad"PǛH Hd؆̿d!aap _ +UG^22 1χ%υY_Fx ȥ@D8IПm:18-mGgggovkny @[_D!D'Bi8d붲t#WxG+[; @%Zw'x]4f.{Tĸ-[وlj@|ݸqX[o"GΤfWBӶ9tnڞx<ĭ˷f`a6ޯ:Y, 3>νJ?mucs($ V DF .9KLk,iܯ?4֥ I-W1[4-$ VcQ؈[-zcEKŴ^#\/~774L )AK[RqE0*%cx{WEqf '#PH0_wѩCzԨ(unվyr WEAS+#kDZ]vp9^pMy%oN;$y}M1&,ی+rZ}  PWs|Q 9-}W =2 kɶ弁/a.hH&Ϙ'7m&;p <-|wX́&).YkaṼh">҇i"R%hp6"SB0>N^PZjxaoKH1!b&K`o)~qQKfJ5Z rKrLQZ[ꃷ$ԅEQぜ1$ز b,'? ̉h_"cm-Rl|Tb!o4)2YD0'Q 3I"zwFuBikȎ`ջT^h7OUVk&07kڊygayE!_* 4vJ; [NQwEx/Tx8> D0ҍ '+uzv{AA(eFڴݡ'(Jnc%Lq(*ݾf/ V8S+C.b5>;"=r]斣z"s=p1 ?>ZIVZ3aM*x.f90@ecyut w~*T?G,IL! Lyϙ :P9`sà!hi0VcQ=X= ێᩖ-^pV uqõc N A|DXkUj "/'7QSV,(`ogaU%~21j4]x i.Yyץ:7Q _4 ٤hiWWH/@h=AMwtL0 ؚs)n(;s"thAD7nmAh~=s #p(ؙq44NkXWeS2H}¸f<߶߁E\be$Tt!u (jz臍j!>=Нl\RCe / FhbCO%R).{PE'+ /菔u6QW#k%>ɔ8"xtngq DwSrew~5#@aBkTs^)|6+ ̰4徿\4q*S؊N,Y V琜M^b4Q)O%)zmԌ9z}Wy%"_tK+%=u-1UYx /RCƒI[#? HQS+z.*Y3vXSR }ZE07#)deVFnO `Mnܲ+JjHeM^;عmh/Hm6[aPU O{;N#wQ79aT^lc39yxlݗX 0c̔Zk&)YN; d_]>rs-`_UL9g\M2{"0׮ E fQ/0̈P$!1$pD56%gUzAaXh0Q8%sy4twcP V-sO[R~mHyf10Y$QJ|m~Yc\ CR { @޴`k"(HЫI }Y"H[ Bڮ/uۃCW $9 +q)k5*-t0߲MwYwr[a>+F$PӋl6j TCt^Xh+VO#Dq7fdF0*̂7;>{a {~dC(cǛW#v2lv C3vSV@648o;+5 +'"yth"&"#џLT7?hUكDiζ6' jZ-.H;hmQtL)S7f^B=OoV6i/r(%Da9y15({&ܴ>SnKhqxY]e`X?# y zZ!BairT8x{w}ȱD5QZmKUѴtqM!*1)wjI4]rϿ%qXmWbSk6C*z23ġZ=CAqgݑK`+Ӡ4nI>uBg"$#T Xt598wN,®NBOt+*ߖ3n`>g`u^%m nԅbi%Ȼ֭q#탲lE3M з+ԀԞt+ b?)cTu 8I&(A?RU&&I+a?k ZBX(sDemF ;wƴ٢?!=<۞S2aΖ&;i/W#yy;?\+-oMߘ]-HGKOz)л{Lj})6(Ҥ ,vy`FHHk,c(E:6 E*뇀"UXϪqңɬrdP DD^a0B% 1t(lo _'dv偨0ò)z=C5u^B5c)1!vݯ!9b0E!ycè? e٪];,#WOytل@V\<=Ӊo_Q2C7Ey\ 铝:]z<o#`X˜zYkrMш 'I25l%#؃??k9U\ae PF*Z6dXGU6/.QMBU- %<{BtthqBḫq@zm8H_URp aGq^ dz}831 T <̘zftBew3ig,QYMAA2}&| Cc]F-;C8)GY-bmJ#jR3Z%_ˑsےnէaA]h>Nl$ąSbB5Ee/Q_]C=cSCF<װ#N4]G:e-kxk&$Y@XemHV=\?Ƣh&e308"(]%BDĊ >)H\w~/Fa.˂H2m14Gw'ij@sטߪ|R Nƶ}ݩ yxu[<- v\SO;>5n'W{ o@13 c"?cV'@?N%A~ҳ{;ڙ! R5Ce\}ƸS2)CT;(b?Ϥt4'].ـ݈A- sR@Az$:l08:JuGV?x䔘r94Q} lE,+ _Lp,ߋV+eiU5~:)b`AxI lmbŰ\cT&>b܃ZEUo$R $@Bs5 JY_"T,돺*lw|/TpWej>VMz(@[rStyY) FB/ }WO6@a MFaS?t(mrlѶ~͸}|hKnc{/fDr̞uߗu`&C~ʌ ~z{JVlcteTAހfc?{hK7K)A&-̔BDmRwKj u+կR2n8npIa쉾b.=yCE,!&OvxCBFMg¯z yX$}%<>"̺j9D-~\wcGVED²zJ^Ef_V 02]Ahi%h6jFNoc6Qm(y( ըj㫺Ƅ˩E% PX|C_ۼcwj ֍62CK4Oo%D |x݉}"3ZAEm\[yFmձkK3礻p~,$#zt~&!N`4wryB C~XN^{mZ.qM21عpxNPmfͰ~Ҥ"l }ݍԴjRhV~}F*RjKN%vzy$k1WEMm#(>g{ |ͺɭ˟=:%"$II!;q-;uԑ|`ѐA4b^c}5Gӄ4>E|y`U!B糛z?QTeJ;3s& ͫvhhV|ף0=עNm[5$CNI,/c/?}zR XmFy+jFY|Pz됗ep+^2|ɏM YLJ(B*9aB 5z3ƄhAZlӰ̒G=iw3~iꡖfۗiF4 AJbf^-(Ҍ򫅧!_w2mE3m`ŊY{$y{0aKp,c`>8u{)+ZN,`~L\eIٛіZf.'u4J:,HN|"M'A5>c6lmeGWԱ.d FR=5t7}~@^ x>S6jGvsV( p @[vhvQR$|`W ~;N%Mlw;:'ѢzA['V+(%盝&*p}Ԕc583nR]VH8eJSkUpr9|i 2 >#䐲8IxJby1sN 8]pK:v3گ7H:ekQ e䲺] _ZT-ڋN_EJص]ߥ|D]c|8;ÜŨe6E5Fx>0 *=+]ϖ18mx)4S\52{S Y* , Z1ծtb (L:G_W}EZϑXZꢾ;ppkJ,Z7N\ \7͋2231<{Veu:rQiVOW4>{G.e0EG!CL:Wc%2=rJN;;V $nLB3S&%YF:-52v &us1y@H^BT턜t|P@"`"eFqPġʗWg'͛@bR:M J=6S$/!Qczy߉[ aEth:\(0~-dqG6)F=V[E\I9[Jj>t_Nog27#![*LWb8 ac1q?vj=U;ϋBCFCJqƴP1anG.x7?W[9ǩNCYZUNZfD͢i{c׭=L4I縍Ǐk tn;c&]^>b$6j)Di8q@sSSPly ?8^ <)7;+r(wAwI(Yv p,:٠ *dAGbM!{\8FDHh<;h}bP;6z@ƙv)d|uc{P> -It򮢖P蚿ot;6:+wKqXjZ_2KE>)}yÏB3<@Ms_v|lM@i3iiHسdEmؼ\^F]s;zcwnWC3hTo}O=: ,$Q١<č&}f Tp@VPMFYbvkmQN? O]R*|Q/)QzU8lO}⑚bhN3?Il>(N@DDdO`3MU`KD0')n Qb݆B3檡*Rj燦ƽ-@(}ssv8*(v0;9 FALfVph6g7u:&1b6>%)'IBzQVjqrGӞg'Ogì+L2dKWMV 9"E^ҟ8]X_dS+ri#g"w&B+?iM=ho+E=a֙j]kjn[]UCCǟĬZӎ6\ G3:M+O,X[.1 LkR#O+(T&˵Rc|u]'GPiO5b `Ug]ܾ'kFA))Js݀<S}({ޘf= V m97"V E.?q ^ݺlR8mSd}ܴ@3HoBؕVpJXYIo | i9+,?qх[LNxC&@^u #s)D2l9?8 ;Ůz}JϬ ]xz\AK?&7e'wR;T*Ԭ9['sJZXfZµd5dVjc?P? gO XNπ/; nOOy=:O) x?cT)s@1HS1)qFnY,)pdKUk.w^` EЈŃG~ ?Qa@[o"a/m}qMEu(8FJ:xZxKME7նWHPZ`9ᨆ-e %g*x@ A 72V"j , wMQD>|ӺUm{&m y MfPCQz:8="FR5UEԨ+K.> FiD%hr?>Zٗ tG8Wnf2z7d amnWV}.-(,jp·<>7 fi {>I%ukiKn%dS{}i$=yS?{9Hs1@RfMW'2]>2yODg8Bj.iTFgtN,ӿs.Ą nByѱYrw1ԥpd_Nڱx>LM0E~u13mwnGYur]Q0SlBR x+V*vرs^fr"vQϯ[;ҳJgQwɪk5HԸ`BIΥ|,0P eJ5(fPSCP4S8_mrRD*ۤ̑. h|9>(_{aLgU)WUSXۏ\,9"r|2njGrNp|)+3I3r9< )W#]~Bb8l=R/Ra_^"餆 M!1H8*j@%K!X~̗oJ;7~ q?9C=6s}mo*_#B "9.֡cN9LIZs: N1> `@+C(PI) wI;Qx~l G,hbG[V\|#BQYIF q. -Pvap(d,2H5۵v ]vEsZ0'kAy6K==[oUfE1=N9hvI0]h? ]bW"PƘ<^NlW иAnNm0f-6I3I0fZ80qI3|ăy1FLT /:ouhOn] _K؎R`<>oa:{Lvr{RKwa z' pfQ*އ(ȧB +&6r wdnB.y$ٷ`xV*:U3jpMlxb^>z%{[H{`opz 9I|>`򭤁\91e4H b @ְl{olA -^khdt_oUBD)xC{LM .0Jx3V1[¸2y\+z9P xfA94:IE*B귬 ]NP{{04 ]腄{cMcBpKpS[ fIg\i2Un3(ByeU3т^Mȴ?n"d#qAQ>h潧` ƫVqŘ$aZ^a3Qߐ녂%ȺZjOelނW(]8AQ/?GJohxF&]zA;[~>uKK|XAW9--z{7TlG4,p"Pi$i)Et5ږq3Zv TzOS6 *2Arx彞< p~ 貋Ns FixթzvC&~;6uTiT3dg΄k9oI?Jʶ<2#.b n <-l?rB-[eGHn ?ۮj>O E|Vl&2 Q1!Bbc7enJ辿:'}|K" ¸G=>w}fdd\MbRQ><"+֫fo|J.7Gn4B+iY^&pq~c6D[!ɐ;8MKba:+3@K&<:4xܐ{X qD[&arI N0nNG=e ,wYOunDG(k2P#/1!g^ՠ>Dl(W_(j?|zAA"2ʆ}$]q8fJ%hrT2u7HӑKS_T JHu 4곑SrG:x l4uڣ!P˨E "d*KaaNimgp$~xXaG?bSt<-}$l(#%RjJ3Jڵ08>x-j]dny?<63SpJso*&@dR17E&붆#U:ɩc(f)@{4$oD!ED2jRL[u TYS%$us𡏱XN^2F`yׁXX͈PN/@u\6<' |ؔ@ \%{j dV!j9jcjFߥ=6TdRligTcql"W] 0<:EK7xtv28cYSGĒ=7n{+tqG{AHK&$eo%^gl]?_ʚȞ0d{ m˕1%SGB D򔏞Dҷ7 E;ՀO4ŴgW5 bwҤRIFM+'qp(87aN~UםS{ U>e7PZmt'l4 }L_E< ,}+pI97z j8>¤Ky9ABIN͛ĉ{tlyMTf3Ŭ 3+IJ^ZP<$^%b\ψ';Q!6,#OSQ^ryk #+JAǏ#˾D#e-5{ھ2z4; G8oݲ+l=}E I suZOUYq..ghˈslNkz 1p4_oIʥ Z3Fo"i@@/T(0Mg1}ix7_MrͰ^xfS8;qn#jUB)p-'b ވzܞok!ZXȌKãFv ڋp0u߬`%i>A43OqvC? O: sp PIjflf$.8Bwj꽯r{Oigg,izвYq$rQ!/g,v Q.Ͻ.$pȓwUf Ɖf~apAn^$?:Z- dL]/**h;D㠨UP -Oy41$kK*> HNy2dU;[GlW(cN4E^v;ftXPOwT70cЗ&&"HzfU3]d<#vl,yA#p gaⷼH@qcFxc'ɭfd8F*NqRkZ"QVzJf\x8*j`;[nS8v)b,^E.4 _5M:$˿_E5Y`,m㾑H >}e'Ia`2 TdffL$a'26Gq1aӶ.S_.57lvH,Ǩ ~SU N@z%{".qt4D]ђ%Hog8Ć?a7nI j#ah\I7&:I,UKx_(ZekٱGcpޝY/ɰeVL o!ct;'A_h?tC)- ~|n0$-!:O| GJB*];zD*2&>ǃ[ ]g ya|˘<*Y?TlE*'T u/ʪ$ʳǕ„ %$:b]vdMJ֓vǐ׍؄gAT;+zzqp'-V|l2ӧ;R$XK1&WN2y T"IhAt$*< v ɍN./5 #bBl{_*XBc1 ʺ. VxY6& ׌V +YIyKw7'!E?dh0i ڈ~jN.:#>C ;cuPWkս#:P*m)pk5a"b_:)"\O nl'hxGB&WaL<ڎ/g5w%C#7F{QkFnZ]nb~7pkxe<4UL/YwYf`pz ra{Q~Y!_QF8k,%]UE$oJm7hawI p~/pq\k(re $u)37TiK#B濕r`R'/sdqp.0N}ťE!(L_vwM}ڷzMܸ0]Zp`RtGӔA`V$e^J0ӌ[ŽvZH:mD/Uæ0"}̱k081K%O@GFm;aU5\4YƑ?}UGT-`.! Pipѧ'y:SXj8 Vi5 {t_#ZX|ٌ\57v^q.%k4( q5Jli@Jzf(w-&fŭ1jrnuM=(|K|+4 !d(mǴKh?1ti@>q=6&7739kԂGN"şJk ,'LE[}rWfafeb&oS7>Ҍ\e͞ҵTϝ }+jYz60dW{}(3Jwl!;=g}6D1٭U;@bBgdtg K2Z2Z %!wƄyLgs˼CXV23@ZA6Gb}NnAIG6' 0F6iV{^S[س?\(ښd/3cJDm>'u~=$%=v55#) }˃'ϱpMsAdN .b {ɱc䕊ׂ!a[12 S$z!T$oN~Yp9PE`B92B#֘ff0ZB v@Dپe!hX>.E t79{>95ͫS"+{P%)`ɧ.Z-V.Kpn؞J{_cQ-q|<3q?#nA ١F5kScb* y)ɱV3ݰO5?=P@|vxܲgp$u: YZ