ctdb-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 4>$  Ap\/=„esnK-[-'o3Q>j5ٻoI6E[2qg}9bt¼ ܷzr!|AIV%v:Ү& /tɵ.`u.xq K*zBv$k {,'hgjߧ<6I;3eLI0JpBqVAjxNFH3?n BMUaj/7OHdQ'HzrƲ(WȨX[ z1>pF(?(d" / =lpx| !1l8l l l l 0l 0l28l4Tl6p6l8X8xB9BB(B(B8B9M:{|=o>w?@FGlHTlIlXpY|\l] l^+bcrdefl ulvwlx!Hly"Jz( (0(4(:(|Cctdb4.7.11+git.153.b36ceaf2235lp150.3.14.1Clustered TDBctdb is the clustered database used by Samba\slamb071]openSUSE Leap 15.0openSUSEGPL-3.0+http://bugs.opensuse.orgSystem/Daemonshttps://www.samba.org/linuxx86_64 test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in ctdb.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in ctdb.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-samba-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-samba-update-$service-new-in-upgrade" fi done for service in ctdb.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi if [ -e /etc/sysconfig/ctdb ] ; then grep CTDB_LOGGING /etc/sysconfig/ctdb >/dev/null 2>&1 || sed -i s/CTDB_LOGFILE=/CTDB_LOGGING=file:/g /etc/sysconfig/ctdb fi PNAME=ctdb SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset ctdb.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in ctdb.service ; do if [ ! -e "/run/rpm-samba-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-samba-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in ctdb.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/ctdb.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable ctdb.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop ctdb.service ) || : fi exit 0 test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart ctdb.service ) || : fi else # package uninstall for service in ctdb.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi exit 0- KJmt0^O ~ ?BblMSId(!ug8H"(HJ"4X$xX2) S( |Kt ?3[J<6 Z w ;T.3C a$.#AA큤큤A큤큤A큤@@큤A큤AA큤A큤큤AAA\\.\.\.\\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\a\.\\.\.\.\.\.\.\.\.\\\.\.\.\Z\Z\$\a\\a\$\a\$\\\\$\$\$\$\$\a\$\a\$\$\$\&\a\\\.\.\\\\\\\\\\\.\.\.\.\.\.\.\.\\\\.\.\\\\\\\\\\\\\\\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_run_testsservice@@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.7.11+git.153.b36ceaf2235-lp150.3.14.1.src.rpmconfig(ctdb)ctdbctdb(x86-64)@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/mktemp/bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/killallconfig(ctdb)coreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.7.11_GIT.153.B36CEAF2235LP150.3.14.1_SUSE_OS15.0_X86_64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.7.11_GIT.153.B36CEAF2235LP150.3.14.1_SUSE_OS15.0_X86_64)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.7.11_GIT.153.B36CEAF2235LP150.3.14.1_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.7.11_GIT.153.B36CEAF2235LP150.3.14.1_SUSE_OS15.0_X86_64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.7.11_GIT.153.B36CEAF2235LP150.3.14.1_SUSE_OS15.0_X86_64)(64bit)libtalloc-report-samba4.so()(64bit)libtalloc-report-samba4.so(SAMBA_4.7.11_GIT.153.B36CEAF2235LP150.3.14.1_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.7.11_GIT.153.B36CEAF2235LP150.3.14.1_SUSE_OS15.0_X86_64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.10)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.7.11_GIT.153.B36CEAF2235LP150.3.14.1_SUSE_OS15.0_X86_64)(64bit)libtirpc.so.3()(64bit)libtirpc.so.3(TIRPC_0.3.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedtdb-tools4.7.11+git.153.b36ceaf2235-lp150.3.14.13.0.4-14.6.0-14.0-15.2-14.14.1\C@\N\o@\\[[[;@[z@[i[6@[5@[ @Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USaT5'@T5'@T3T12T->@T->@T%U@T$T!`T!`T@T@TSS<@SS@S@Sہ@Sہ@Sہ@S@S;@S.S@SSSS@S@SS8@S}SxSg}@ScSZN@SXSO@SM@SM@SG@SG@SG@SG@S:@S:@S5d@S2@S,)S L@SSSS@S@S(S @S S 4@S?S?S?SK@R@Rb@R@RRR@R@RRRRRURURURRR&R@RR=R=RʚRʚRʚRʚRʚRʚRSRR@RjRjRv@RG@RG@RRRRR RiRu@RpRW@RUE@RUE@REs@R:@R6R4OR2@R(r@R%@R!R7R@R@QQQ@QQQQޞ@Qޞ@Qޞ@Qֵ@QQo@QzQQɆ@Q@Q(@Q@Qzl@QdQAQ,Q+R@Q@QQQ@Q@QEQ@Q \Q \PP-P-P9@PPDP[P@PѬ@P @P @PPP}@P+P@PP@PBPBPPP@P@P*P6@Pd@PoPoPoPoP{@Pb@Pb@PWPWPQP,PPP H@P H@PP@OjOjOORORO Ọ@OȮOȮO]@O]@O OE@O!O@OOO@O OoOc+@OaO`@OKp@OB5O>A@Onpower Samuel Cabrero ddiss@suse.comSamuel Cabrero Samuel Cabrero aaptel@suse.comddiss@suse.comaaptel@suse.comscabrero@suse.depalcantara@suse.comscabrero@suse.dedavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comnopower@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comnopower@suse.delmuelle@suse.comddiss@suse.comlmuelle@suse.comjmcdonough@suse.comjmcdonough@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comddiss@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comadrian@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comjengelh@inai.delmuelle@suse.comjengelh@inai.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comjengelh@inai.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comsjayaraman@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comshargagan@novell.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.delmuelle@suse.comlmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.defcrozat@suse.comlmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.decoolo@suse.comcoolo@suse.comlmuelle@suse.deshargagan@novell.comddiss@suse.delmuelle@suse.deddiss@suse.deddiss@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dehhetter@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deshargagan@novell.comddiss@suse.delmuelle@suse.dejmcdonough@suse.deddiss@suse.deddiss@suse.delmuelle@suse.dejmcdonough@suse.demrsb@novell.comlpechacek@suse.czjmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.deshargagan@novell.comddiss@suse.delmuelle@suse.deshargagan@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.dejmcdonough@suse.deddiss@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.dejengelh@medozas.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.deddiss@suse.dero@suse.delmuelle@suse.delmuelle@suse.delars@samba.orglmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.dehhetter@suse.deddiss@suse.dejmcdonough@suse.decoolo@novell.comlmuelle@suse.dejmcdonough@suse.degber@opensuse.orgjmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.desjayaraman@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dehhetter@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delars@samba.orglars@samba.orgjmcdonough@suse.dejsmeix@suse.delmuelle@suse.dehhetter@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.derhafer@novell.comhhetter@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.deboyang@suse.dejmcdonough@suse.delmuelle@suse.deboyang@suse.deboyang@suse.delmuelle@suse.derhafer@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delars@samba.orgjmcdonough@suse.desjayaraman@suse.dejengelh@medozas.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.deboyang@suse.dechris@computersalat.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.deboyang@suse.deboyang@suse.dehhetter@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.desbrabec@suse.czlmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.deboyang@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.desjayaraman@suse.desjayaraman@suse.desjayaraman@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dero@suse.de- Ensure we build against correct version of ldb; (bsc#1131686); (bsc#1125410).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- CVE-2018-14629: dns: CNAME loop prevention using counter; (bso#13600); (bsc#1116319); - CVE-2018-16841: heimdal: Fix segfault on PKINIT with mis-matching principal; (bso#13628); (bsc#1116320); - CVE-2018-16851: ldap_server: Check ret before manipulating blob; (bso#13674); (bsc#1116322); - CVE-2018-16853: build: The Samba AD DC, when build with MIT Kerberos is experimental; (bso#13678); (bsc#1116324);- Update to 4.7.11; + s3: util: Do not take over stderr when there is no log file; (bso#13578); (bsc#1101499); + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + s3: smbd: Prevent valgrind errors in smbtorture3 POSIX test; (bso#13633); + Durable Reconnect fails because cookie.allow_reconnect is not set redundant for SMB2; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + Fix possible memory leak in the Samba process; (bso#13362); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add virtualKerberosSalt attribute to 'user getpassword/syncpasswords'; (bso#13539); + smb2_server: Set req->do_encryption = true earlier; (bso#13624); + s3:winbind: Fix regression: winbind normalize names doesn't work for users; (bso#12851);- Update to 4.7.10; (bsc#1111528); + support the new v4 Performance Co-Pilot API; (bsc#1111374) + quotas don't work with SMB2; (bso#13553); + Build failure when quota support not detected; (bso#13563); + vfs_fruit can leave lock records when testing for netatalk share mode locks - causing panic; (bso#13584); + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests; (bso#13568); + g_lock conflict detection broken when processing stale entries; (bso#13195); + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540); + NTLM authentications using default domain/workgroup stopped working; (bso#13126); (bsc#1068059); + vfs_ceph lies about flock support; (bso#13506); + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537); + Durable Handle reconnect fails in smbd_smb2_create_durable_lease_check(); (bso#13535); + cli_splice() fallback code reads wrong amount on termination case; (bso#13527); + LDB 1.4.0 breaks Samba < 4.9; (bso#13519); + samba-tool trust: support discovery via netr_GetDcName; (bso#13538); + samba-tool domain trust: fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + conn->vuid is invalid after a SMB session reauth; (bso#13351); + Durable Handles reconnect fails in a cluster when the cluster fs uses different device ids; (bso#13318); + cli_splice() doesn't correctly return written bytes as it's uninitialized in libsmbclient code; (bso#13511); + Threading support in talloc_tos() crashes when enabled; (bso#13505); + Incorrect talloc_stackframe handling in python ACL test code (make_simple_acl); (bso#13474); + Fail renaming file if that file has open streams; (bso#13451); + vfs_fruit: delete 0 byte size streams if AAPL is enabled; (bso#13441); + Creating missing remote databases during recovery can fail; (bso#13500); + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499); + Fix building Samba with gcc 8.1; (bso#13437); + Uncaught exception at ldb_modules/password_hash.c:2241 during new domain provision; (bso#11573); + "net ads keytab add nfs" writes only one enctype with older kerberos libraries; (bso#13478); + VFS modules that implement pread/pwrite must also implement pread_send/pwrite_send; (bso#13425); + vfs_ceph is missing async fsync implementations; (bso#13412); + net ads keytab list fails with (smb_krb5_kt_open failed (Key table name malformed); (bso#13166); + s390 and s390 needs to run with 'use mmap = no' by default; (bso#10765);- Fix ctdb_mutex_ceph_rados_helper deadlock; (bso#13540); (bsc#1102230); - Fix vfs_ceph flock stub; (bso#13506); - Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); bsc#(1068059); - Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048); (bso#13360); (CVE-2018-1139); - ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140); - Confidential attribute disclosure via substring search; (bsc#1095057); (bso#13434); (CVE-2018-10919); - smbc_urlencode helper function is a subject to buffer overflow; (bsc#1103411); (bso#13453); (CVE-2018-10858); - Fix NULL ptr dereference in DsCrackNames on a user without a SPN; (bsc#1103414); (bso#13552); (CVE-2018-10918);- Update to 4.7.8; (bsc#1099702); + s3: smbd: Generic fix for incorrect reporting of stream dos attributes on a directory; (bso#13380); + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous call; (bso#13412); + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457); + python: Fix talloc frame use in make_simple_acl(); (bso#13474); + winbindd on the AD DC is slow for passdb queries; (bso#13430); + No Backtrace given by Samba's AD DC by default; (bso#13454); + winbindd doesn't recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Fix interaction between chown and SD flags; (bso#13432); + s4-heimdal: Fix the format-truncation errors; (bso#13437); + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425); + printing: Return the same error code as Windows does on upload failures; (bso#13395); + winbind: Improve child selection; (bso#13290); + winbind: Maintain a binding handle per domain and always go via wb_domain_request_send(); (bso#13292); + winbindd doesn't recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN; (bso#13369); + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair; (bso#13370); + smbclient: Fix broken notify; (bso#13382); + libads: Fix the build --without-ads; (bso#13273); + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids; (bso#13279); + winbindd: initialize type = SID_NAME_UNKNOWN in wb_lookupsids_single_done(); (bso#13280); + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call(); (bso#13289); + A disconnecting winbind client can cause a problem in the winbind parent child communication; (bso#13290); + winbind: Use one queue for all domain children; (bso#13292); + Minimize the lifetime of winbindd_cli_state->{pw,gr}ent_state; (bso#13293); + winbind should avoid using fstrcpy(domain->dcname,...) on a char *; (bso#13294); (bsc#1087303); + The winbind parent should find the dc of a foreign domain via the primary domain; (bso#13295); + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400); + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP NTLM2 packet check failed due to invalid signature!); (bso#13427); + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424); + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407); + dfree cache returning incorrect data for sub directory mounts; (bso#13446); + Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN; (bso#13369); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + s4:auth_sam: Allow logons with an empty domain name; (bso#13206); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + build: Fix libceph-common detection; (bso#13277); + build: Fix ceph_statx check when configured with libcephfs_dir; (bso#13250); + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async; (bso#13297); + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + smbd can panic if the client-supplied channel sequence number wraps; (bso#13215); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + smbc_opendir should not return EEXIST with invalid login credentials; (bso#13050); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + libsmb: Use smb2 tcon if conn_protocol >= SMB2_02; (bso#13310); + subnet: Avoid a segfault when renaming subnet objects; (bso#13031); + 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:smbd: Do not crash if we fail to init the session table; (bso#13315); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Bump vendor-files - Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);- Add missing package descriptions; (bsc#1093864);- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available. - s3: winbind: Fix 'winbind normalize names' in wb_getpwsid(); (bso#12851);- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2.- Rebase File Server Remote VSS Protocol (FSRVP) server against 4.2.0rc1; (fate#313346).- Backport upstream master fixes for samba-regedit; (bnc#896536).- BuildRequire python-xml on SUSE systems only.- BuildRequire python-xml. - Exclude unwanted texpect binary and libhttp, libsamba-cluster-support, libsamba-debug, and libsocket-blocking shared libs. - Add vfs_fruit and vfs_worm man pages and ndr_dcerpc, smb2_lease_struct, tstream_smbXcli_np, idtree, and idtree_random header files. - Remove nmblookup and smbclient4 binary and nmblookup4 man page.- Update to 4.2.0rc1.- Fix small memory-leak in the background print process; (bnc#899558).- Modify samba-regedit so it displays correctly (related to ncurses). Changed code to use menu sub windows, seems to fix problems with display not refreshing; explicitly BuildRequire ncurses-devel; (bnc#896536).- Exclude unwanted libdnsserver_common and libdfs_server_ad shared libs and the man page of the unused findsmb script.- Skip groups that aren't mapped by idmap_ad; (bso#10824); (bnc#897969).- Update to 4.1.12. + s3: winbindd: On new client connect, prune idle or hung connections older than "winbind request timeout". Add new parameter "winbind request timeout". Please see smb.conf man page for details; (bso#3204); (bnc#872912). + Fix smbd crashes when filename contains non-ascii character; (bso#10716). + s4-rpc: dnsserver: Handle updates of tombstoned dnsNode objects; (bso#10749). + passdb: Fix NT_STATUS_NO_SUCH_GROUP; (bso#9570). + s4:setup/dns_update_list: make use of the new substitution variables; (bso#9831). + build: Fix configure to honour '--without-dmapi'; (bso#10369). + provision: Correctly provision the SOA record minimum TTL; (bso#10466). + s3: Enforce a positive allocation_file_size for non-empty files; (bso#10543). + lib: tevent: make TEVENT_SIG_INCREMENT atomic; (bso#10640). + Make "case sensitive = True" option working with "max protocol = SMB2" or higher in large directories; (bso#10650). + Samba 4 consuming a lot of CPU when re-reading printcap info; (bso#10652). + lib: strings: Simplify strcasecmp; (bso#10716). + Allow netr_ServerReqChallenge() and netr_ServerAuthenticate3() on different connections; (bso#10723). + 'net time': Fix usage and core dump; (bso#10728). + sys_poll_intr: Fix timeout arithmetic; (bso#10731). + s3:idmap: Don't log missing range config if range checking not requested; (bso#10737). + Fix flapping VFS gpfs offline bit; (bso#10741). + s4-rpc: dnsserver: Allow . to be specified for @ record; (bso#10742). + s4-rpc: dnsserver: return DNS_RANK_NS_GLUE recors when explicitly asked for; (bso#10751). + samba: Retain case sensitivity of cifs client; (bso#10755). + lib: Remove unused nstrcpy; (bso#10758). + Fix a memory leak in cli_set_mntpoint(); (bso#10759). + docs: Fix typos in smb.conf (inherit acls); (bso#10761). + libcli/security: Add better detection of SECINFO_[UN]PROTECTED_[D|S]ACL in get_sec_info(); (bso#10773). + s3: smbd: POSIX ACLs. Remove incorrect check for SECINFO_PROTECTED_DACL in incoming security_information flags in posix_get_nt_acl_common(); (bso#10773). + Don't discard result of checking grouptype; (bso#10777). + s3:libsmb: Set a max charge for SMB2 connections; (bso#10778). + smbd: Properly initialize mangle_hash; (bso#10782). + dosmode: Fix FSCTL_SET_SPARSE request validation; (bso#10787). + vfs_dirsort: Fix an off-by-one error that can cause uninitialized memory read; (bso#10794).- Wait for network-online.target to prevent caching of pre-network failures; (bnc#889175).- Use domain name if search by domain SID fails to send SIDHistory lookups to correct idmap backend; (bnc#773464).- Prune idle or hung connections older than "winbind request timeout"; (bso#3204); (bnc#872912).- fix FSCTL_SET_SPARSE request validation; (bso#10787); (bnc#893774).- Remove pre-11.2 patch which by default uses the smbpasswd passdb backend.- build: disable mmap on s390 systems; (bso#10765); (bnc#886193); (bnc#882356).- Create the cups smb backend as sym link pointing to smbspool; (bnc#891220).- Fix winbind service parameter usage; (bnc#890005).- lib/param: change the default for "winbind expand groups" to "0"; (bnc#890008).- Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon; CVE-2014-3560; (bnc#889429).- Fix "net time" segfault; (bso#10728); (bnc#889539).- Update to 4.1.10. + net/doc: Make clear that net vampire is for NT4 domains only; (bso#3263). + dbcheck: Add check and test for various invalid userParameters values; (bso#8077). + s4:dsdb/samldb: Don't allow 'userParameters' to be modified over LDAP for now; (bso#8077). + Simple use case results in "no talloc stackframe around, leaking memory" error; (bso#8449). + s4:dsdb/repl_meta_data: Make sure objectGUID can't be deleted; (bso#9763). + dsdb: Always store and return the userParameters as a array of LE 16-bit values; (bso#10130). + s4:repl_meta_data: fix array assignment in replmd_process_linked_attribute(); (bso#10294). + ldb-samba: fix a memory leak in ldif_canonicalise_objectCategory(); (bso#10469). + dbchecker: Verify and fix broken dn values; (bso#10536). + dsdb: Rename private_data to rootdse_private_data in rootdse; (bso#10582). + s3: libsmbclient: Work around bugs in SLES cifsd and Apple smbx SMB1 servers; (bso#10587). + Fix "PANIC: assert failed at ../source3/smbd/open.c(1582): ret"; (bso#10593). + rid_array used before status checked - segmentation fault due to null pointer dereference; (bso#10627). + Samba won't start on a machine configured with only IPv4; (bso#10653). + msg_channel: Fix a 100% CPU loop; (bso#10663). + s3: smbd: Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056). + s3: SMB2: Fix leak of blocking lock records in the database; (bso#10673). + samba-tool: Add --site parameter to provision command; (bso#10674). + smbstatus: Fix an uninitialized variable; (bso#10680). + SMB1 blocking locks can fail notification on unlock, causing client timeout; (bso#10684). + s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap(); (bso#10685). + 'RW2' smbtorture test fails when -N is set to 2 due to the invalid status check in the second client; (bso#10687). + wbcCredentialCache fails if challenge_blob is not first; (bso#10692). + Backport ldb-1.1.17 + changes from master; (bso#10693). + Fix SEGV from improperly formed SUBSTRING/PRESENCE filter; (bso#10693). + ldb: Add a env variable to disable RTLD_DEEPBIND; (bso#10693). + ldb: Do not build libldb-cmdline when using system ldb; (bso#10693). + ldb: Fix 1138330 Dereference null return value, fix CIDs 241329, 240798, 1034791, 1034792 1034910, 1034910); (bso#10693). + ldb: make the successful ldb_transaction_start() message clearer; (bso#10693). + ldb:pyldb: Add some more helper functions for LdbDn; (bso#10693). + ldb: Use of NULL pointer bugfix; (bso#10693). + lib/ldb: Fix compiler warnings; (bso#10693). + pyldb: Decrement ref counters on py_results and quiet warnings; (bso#10693). + s4-openldap: Remove use of talloc_reference in ldb_map_outbound.c; (bso#10693). + dsdb: Return NO_SUCH_OBJECT if a basedn is a deleted object; (bso#10694). + s4:dsdb/extended_dn_in: Don't force DSDB_SEARCH_SHOW_RECYCLED; (bso#10694). + Backport autobuild/selftest fixes from master; (bso#10696). + Backport drs-crackname fixes from master; (bso#10698). + smbd: Avoid double-free in get_print_db_byname; (bso#10699). + Backport access check related fixes from master; (bso#10700). + Backport provision fixes from master; (bso#10703). + s3:smb2_read: let smb2_sendfile_send_data() behave like send_file_readX(); (bso#10706). + s3: Fix missing braces in nfs4_acls.c.- Reduce printer_list.tdb lock contention during printcap update; (bso#10652); (bnc#883870). + Only update the printer share inventory when needed.- Add missing newline to debug message in daemon_ready(); (bnc#865627).- BuildRequire systemd-devel, configure --with-systemd, and modify the service files accordingly on post-12.2 systems; (bso#10517); (bnc#865627).- Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056).- Update to 4.1.9. + Fix nmbd denial of service; CVE-2014-0244; (bnc#880962). + Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler; CVE-2014-3493; (bnc#883758).- BuildRequire krb5-devel, libiniparser-devel, and python-devel in any case.- BuildRequire libxslt and perl-ExtUtils-MakeMaker and BuildIgnore libtevent on CentOS, Fedora, and RHEL systems.- Update to 4.1.8. + dns: Don't reply to replies; CVE-2014-0239; (bso#10609). + Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549). + s3: smb2: Fix 'xcopy /d' with samba shares; (bso#3124). + Extra ':' in msg for Waf Cross Compile Build System with Cross-answers command; (bso#10151). + s3: nmbd: Reset debug settings after reading config file; (bso#10239). + Fix empty body in if-statement in continue_domain_open_lookup; (bso#10348). + script/autobuild: Make use of '--with-perl-{arch,lib}-install-dir'; (bso#10472). + wafsamba: Fix the installation on FreeBSD; (bso#10472). + Use exit_daemon() to communicate status of startup to systemd; (bso#10517). + Fix adding NetApps; (bso#10524). + s3: lib/util: Fix logic inside set_namearray loops; (bso#10544). + s3: lib/util: set_namearray reads across end of namelist; (bso#10544). + idmap_autorid: Fix failure in reverse lookup if ID is from domain range index #0; (bso#10547). + build: Fix ordering problems with lib-provided and internal RPATHs; (bso#10548). + Fix read of deleted memory in reply_writeclose()'; (bso#10554). + lib-util: Rename memdup to smb_memdup and fix all callers; (bso#10556). + Fix lock order violation and file lost; (bso#10564). + dsdb: Do checks for invalid renames in samldb, before repl_meta_data; (bso#10569). + Fix wildcard unlink to fail if we get an error rather than trying to continue; (bso#10577). + byteorder: Do not assume PowerPC is big-endian; (bso#10590). + printing: Fix purge of all print jobs; (bso#10612).- examples/libsmbclient: avoid some compiler warnings; (bso#10624).- Fix printer job purging; (bso#10612); (bnc#879390).- Update samba-pubkey_6568B7EA.asc which will expire 2016-01-17.- Fix byte-order macros on little endian Power8; (bso#10590); (bnc#871701).- Pass through vfs_btrfs snapshot manipulation requests when "btrfs: manipulate snapshots = no" is configured; (bnc#874180).- Clone the base share security descriptor when exposing a snapshot share; (bnc#874656).- Use appropriate HRESULT return codes; (bnc#875046).- Update to 4.1.7. + Make "force user" work as expected; (bso#9878). + Fix build on AIX with IBM XL C/C++ (gettext detection issues); (bso#9911). + Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942). + s3-printing: Fix obvious memory leak in printer_list_get_printer(); (bso#9993). + doc: Add "spoolss: architecture" parameter usage; (bso#10188). + Make 'smbclient' support DFS shares with SMB2/3; (bso#10200). + Make (lib)smbclient work with NetApp; (bso#10230). + SessionLogoff on a signed connection with an outstanding notify request crashes smbd; (bso#10344). + dfs: Always call create_conn_struct with root privileges; (bso#10378). + 'net ads search' on high latency networks can return a partial list with no error indication; (bso#10387). + max xmit > 64kb leads to segmentation fault; (bso#10422). + Fix STATUS_NO_MEMORY response from Query File Posix Lock request; (bso#10431). + Increase max netbios name components; (bso#10439). + smbd_server_connection_terminate("CTDB_SRVID_RELEASE_IP") panics from within ctdbd_migrate() with invalid lock_order; (bso#10444). + Fix 'wbinfo -i' with one-way trust; (bso#10458). + samba4 services not binding on IPv6 addresses causing connection delays; (bso#10464). + s3-vfs: Fix stream_depot vfs module on btrfs; (bso#10467). + Don't respond with NXDOMAIN to records that exist with another type; (bso#10471). + pidl: waf should have an option for the dir to install perl files and do not glob; (bso#10472). + s3-spoolssd: Don't register spoolssd if epmd is not running; (bso#10474). + s3-rpc_server: Fix handling of fragmented rpc requests; (bso#10481). + Initial FSRVP rpcclient requests fail with NT_STATUS_PIPE_NOT_AVAILABLE; (bso#10484). + lsa.idl: Define lsa.ForestTrustCollisionInfo and ForestTrustCollisionRecord as public structs; (bso#10504). + Make 'smbreadline' build with readline 6.3; (bso#10506). + smbd: Correctly add remote users into local groups; (bso#10508). + rpcclient FSRVP request UNCs should include a trailing backslash; (bso#10521). + Cleanup messages.tdb record after unclean smbd shutdown; (bso#10534). + s3:rpc_server: Minor refactoring of process_request_pdu().- Create a new DBus connection for every vfs_snapper request, to ensure correct snapper UID detection; (bnc#866354).- Fix "Invalid read" in method reply_writeclose; (bso#10554); (bnc#873658).- Fix minor compiler warnings in snapshot code-path; (bnc#873177).- Remove references to the obsolete samba-krb-printing package and get_printing_ticket binary.- Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549); (bnc#872396).- User error strings instead of hex codes where possible for FSRVP errors; (bnc#866927).- Fix remote share shadow copy request UNCs; (bso#10521); (bnc#870957).- Add krb5rcache directory to the winbind package; (bnc#870607). - Cleanup and consolidate the sysconfig and systemd service files.- Extend vfs_snapper man page to cover permissions; (bnc#870570).- Fix RPC server handling of fragmented requests; (bso#10481); (bnc#869707).- Default with the cache and lock directory to the same path to have both non-persistent and persistent data at one location; (bnc#846586).- Depend only on %version with all manual Provides and Requires; (bnc#844307).- Update to 4.1.6. + Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224). + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; (bnc#855866).- Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224).- Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665).- samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442; (bnc#855866).- Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484); (bnc#865095).- Propagate snapshot enumeration permissions errors to SMB clients; (bnc#865641).- Properly handle empty 'requires_membership_of' entries in /etc/security/pam_winbind.conf; (bnc#865771).- Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748). - Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561).- Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397).- Use libarchive to provide improved smbclient tarmode functionality; (bso#9667); (bnc#861135).- Depend on %version-%release with all manual Provides and Requires; (bnc#844307).- Update to 4.1.5. + Fix 100% CPU utilization in winbindd when trying to free memory in winbindd_reinit_after_fork; (bso#10358); (bnc#786677). + smbd: Fix memory overwrites; (bso#10415). + s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done(); (bso#2191). + ntlm_auth sometimes returns the wrong username to mod_ntlm_auth_winbind; (bso#10087). + s3: smbpasswd: Fix crashes on invalid input; (bso#10320). + s3: vfs_dirsort module: Allow dirsort to work when multiple simultaneous directories are open; (bso#10406). + Add support for Heimdal's unified krb5 and hdb plugin system, cope with first element in hdb_method having a different name in different heimdal versions and fix INTERNAL ERROR: Signal 11 in the kdc pid; (bso#10418). + vfs_btrfs: Fix incorrect zero length server-side copy request handling; (bso#10424). + s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we can't cope with a symlink when lp_posix_pathnames() is true; (bso#10429). + smbd: Fix an ancient oplock bug; (bso#10436). + Fix crash bug in smb2_notify code; (bso#10442).- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).- Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079). + Improve vfs_snapper documentation.- Fix Winbind 100% CPU utilization caused by domain list corruption; (bso#10358); (bnc#786677).- Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415); (bnc#862370).- Streamline the vendor suffix handling and add support for SLE 12.- Fix zero length server-side copy request handling; (bso#10424); (bnc#862558).- Set the PID directory to /run/samba on post-12.2 systems.- Make use of the tmpfilesdir macro while calling systemd-tmpfiles.- Make winbindd print the interface version when it gets an INTERFACE_VERSION request; (bnc#726937).- Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH definitions; (bnc#860832).- Check for NULL gensec_security in gensec_security_by_auth_type(); (bnc#860809).- Ensure ndr table initialization; (bnc#860648).- Add File Server Remote VSS Protocol (FSRVP) server for SMB share shadow-copies; (fate#313346).- s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662). - shadow_copy2: module "Previous Version" not working in Windows 7; (bso#10259). - s3-passdb: Fix string duplication to pointers; (bso#10367). - vfs/glusterfs: in case atime is not passed, set it to the current atime; (bso#10384)- s3: winbindd: Move calling setup_domain_child() into add_trusted_domain(); (bso#10358); (bnc#786677).- Default sysconfig daemon options to -D; (bso#10388); (bnc#857454).- Add /var/cache/samba to the client file list; (bnc#846586).- Really add the WINBINDDOPTIONS sysconfig variable on install; (bnc#857454).- Correct sysconfig variable names by adding the missing D char; (bnc#857454).- Update to 4.1.4. + Fix segfault in smbd; (bso#10284). + Fix SMB2 server panic when a smb2 brlock times out; (bso#10311).- Call stop_on_removal from preun and restart_on_update and insserv_cleanup from postun on pre-12.3 systems only; (bnc#857454).- BuildRequire gamin-devel instead of unmaintained fam-devel package on post-12.1 systems.- smbd: allow updates on directory write times on open handles; (bso#9870). - lib/util: use proper include for struct stat; (bso#10276). - s3:winbindd fix use of uninitialized variables; (bso#10280). - s3-winbindd: Fix DEBUG statement in winbind_msg_offline(); (bso#10285). - s3-lib: Fix %G substitution for domain users in smbd; (bso#10286). - smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open; (bso#10297). - smb2_server processing overhead; (bso#10298). - ldb: bad if test in ldb_comparison_fold(); (bso#10305). - Fix AIO with SMB2 and locks; (bso#10310). - smbd: Fix a panic when a smb2 brlock times out; (bso#10311). - vfs_glusterfs: Enable per client log file; (bso#10337).- Add /etc/sysconfig/samba to the main and winbind package; (bnc#857454).- Create /var/run/samba with systemd-tmpfiles on post-12.2 systems; (bnc#856759).- Fix broken rc{nmb,smb,winbind} sym links which should point to the service binary on post-12.2 systems; (bnc#856759).- Add Snapper VFS module for snapshot manipulation; (fate#313347). + dbus-1-devel required at build time.- Add File Server Remote VSS Protocol (FSRVP) client for SMB share shadow-copies; (fate#313345).- Do not BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp as they're part of the minimum build environment.- Update to 4.1.3. + DCE-RPC fragment length field is incorrectly checked; CVE-2013-4408; (bnc#844720). + pam_winbind login without require_membership_of restrictions; CVE-2012-6150; (bnc#853347).- Make use of the full gpg pub key file name including the key ID.- Add transparent file compression support; (fate#316266). + Implement FSCTL_GET_COMPRESSION and FSCTL_SET_COMPRESSION handlers. + Add FILE_ATTRIBUTE_COMPRESSED and FILE_NO_COMPRESSION support. + Extend vfs_btrfs VFS module to utilize get/set compression hooks.- Add support for FSCTL_SRV_COPYCHUNK_WRITE; (fate#314770).- Remove bogus libsmbclient0 package description and cleanup the libsmbclient line from baselibs.conf; (bnc#853021).- BuildRequire systemd on post-12.2 systems.- Update to 4.1.2. + s4-dns: dlz_bind9: Create dns-HOSTNAME account disabled; (bso#9091). + dfs_server: Use dsdb_search_one to catch 0 results as well as NO_SUCH_OBJECT errors; (bso#10052). + Missing talloc_free can leak stackframe in error path; (bso#10187). + Fix memset used with constant zero length parameter; (bso#10190). + s4:dsdb/rootdse: report 'dnsHostName' instead of 'dNSHostName'; (bso#10193). + Make offline logon cache updating for cross child domain group membership; (bso#10194). + nsswitch: Fix short writes in winbind_write_sock; (bso#10195). + RW Deny for a specific user is not overriding RW Allow for a group; (bso#10196). + vfs_glusterfs: Fix excessive debug output from vfs_gluster_open(); (bso#10224). + vfs_glusterfs: Implement proper mashalling/unmarshalling of ACLs; (bso#10224). + VFS plugin was sending the actual size of the volume instead of the total number of block units because of which windows was getting the wrong volume capacity; (bso#10224). + libcli/smb: Fix smb2cli_ioctl*() against Windows 2008; (bso#10232). + xattr: Fix listing EAs on *BSD for non-root users; (bso#10247). + Fix the build of vfs_glusterfs; (bso#10253). + s3-winbindd: Fix cache_traverse_validate_fn failure for NDR cache entries; (bso#10264). + util: Remove 32bit macros breaking strict aliasing; (bso#10269).- Let gpg verify execution condition not fail on non SUSE systems.- Add systemd support for post-12.2 systems.- Allow smbcacls to take a '--propagate-inheritance' flag to indicate that the add, delete, modify and set operations now support automatic propagation of inheritable ACE(s); (FATE#316474).- Unconditionally create the CUPS smb backend sym link pointing to smbspool; (bnc#850656).- Update to 4.1.1. + ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101). + Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101).- Update to 4.1.0. + pam_winbindd: Support the KEYRING ccache type; (bso#10132). + Fix PAC parsing failure; (bso#10178).- Unify the defattr lines in the pidl, python, test and test-devel files section by removing the optional directory mode.- Verify source tar ball gpg signature.- Update to 4.1.0rc4. + dsdb: Convert the full string from UTF16 to UTF8, including embedded NULLs; (bso#8077). + python-samba-tool fsmo: Do not give an error on a successful role transfer; (bso#9461). + dbwrap_ctdb: Treat empty records as non-existing; (bso#10008). + Raise the level of a debug when unable to open a printer; (bso#10118). + Add "acl allow execute always" parameter; (bso#10134). + vfs_shadow_copy2: Display previous versions correctly over SMB2; (bso#10137). + smbd: Always clean up share modes after hard crash; (bso#10138). + Valid utf8 filenames cause "invalid conversion error" messages; (bso#10139). + libcli/smb: Use SMB1 MID=0 for the initial Negprot; (bso#10144). + Samba SMB2 client code reads the wrong short name length in a directory listing reply; (bso#10145). + libcli/smb: Only check the SMB2 session setup signature if required and valid; (bso#10146). + Better document potential implications of a globally used "valid users"; (bso#10147). + cli_smb2_get_ea_list_path() failed to close file on exit; (bso#10149). + Not all OEM servers support the ALTNAME info level; (bso#10150). + Regression causes replication failure with Windows 2008R2 and deletes Deleted Objects; (bso#10157). + Netbios related samba process consumes 100% CPU; (bso#10158). + Fix POSIX ACL mapping when setting DENY ACE's from Windows; (bso#10162).- Require libndr-standard-devel due to gen_ndr/lsa.h from libpdb-devel.- Add libdcerpc0, libdcerpc-atsvc0, libdcerpc-binding0, libdcerpc-samr0, libgensec0, libndr0, libndr-krb5pac0, libndr-nbt0, libndr-standard0, libpdb0, libregistry0, libsamba-credentials0, libsamba-hostconfig0, libsamba-policy0, libsamba-util0, libsamdb0, libsmbclient-raw0, libsmbconf0, libsmbldap0, and libtevent-util0 to baselibs.conf.- Add or polish the shared library package summaries and descriptions.- Update to 4.1.0rc3. + Fix working on site with Read Only Domain Controller; (bso#5917). + Add man page for vfs_syncops; (bso#7364). + Add man page for vfs_linux_xfs_sgid; (bso#7490). + When replicating DNS for bind9_dlz we need to create the server-DNS account remotely; (bso#9091). + Winbind unable to retrieve user information from AD; (bso#9615). + winbind_lookup_names() fails because of NT_STATUS_CANT_ACCESS_DOMAIN_INFO; (bso#9899). + Build Samba 4.0.x on AIX with IBM XL C/C++; (bso#9911). + Add SMB2 and SMB3 support for smbclient; (bso#9974). + Add man pages for ntdb tools; (bso#10000). + Add man page for samba-regedit tool; (bso#10001). + ::1 added to nameserver on join; (bso#10030). + Fix memory leak in source3/lib/util.c:1493; (bso#10063). + Fix segmentation fault in 'net ads join'; (bso#10073). + Fix variable list in vfs_crossrename man page; (bso#10076). + s3-winbind: Fix a segfault passing NULL to a fstring argument; (bso#10082). + smbd: Fix async echo handler forking; (bso#10086). + MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba; (bso#10097). + Honour output buffer length set by the client for SMB2 GetInfo requests; (bso#10106). + Fix Winbind crashes on DC with trusted AD domains; (bso#10107). + Handle Dropbox (write-only-directory) case correctly in pathname lookup; (bso#10114). + Masks incorrectly applied to UNIX extension permission changes; (bso#10121).- Implement shared library packaging guidelines. - Correct interpackage dependencies; (bso#10129).- Define the source URL differently in the case of a release candidate.- Update to 4.1.0rc2. + Add vfs_btrfs module. + Add support for server-side copy operations via the SMB2 FSCTL_SRV_COPYCHUNK request. + Fix replication with --domain-crictical-only to fill in backlinks; (bso#9029). + Windows 8 Roaming profiles fail; (bso#9678). + Fix crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + Do not delete an existing valid credential cache (s3-winbind); (bso#9994). + Fix segfault while reading incomplete session info; (bso#10003). + Missing integer wrap protection in EA list reading can cause server to loop with DOS (CVE-2013-4124); (bso#10010). + Fix a 100% loop at shutdown time (smbd); (bso#10013). + Fix/improve debug options; (bso#10015). + Rename regedit to samba-regedit; (bso#10040). + Remove obsolete swat manpage and references; (bso#10041). + Fix crashes in socket_get_local_addr(); (bso#10042). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Remove a redundant inlined substitution of ACLs; (bso#10045). + nsswitch: Add OPT_KRB5CCNAME to avoid an error message; (bso#10048). + dsdb improvements; (bso#10056). + Linux kernel oplock breaks can miss signals; (bso#10064).- BuildRequire pyldb-devel.- Add libnetapi0 and samba-libs to baselibs.conf.- Update to 4.0.9. + Fix crash of Winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + s3-lib: Fix segmentation fault while reading incomplete session info; (bso#10003). + smbd: Fix a 100% loop at shutdown time; (bso#10013). + Windows 8 Roaming profiles fail; (bso#9678). + Add UPN enumeration to passdb internal API; (bso#9779). + smbd: Cleanup disonnected durable handles; (bso#9930). + vfs_streams_xattr: Do not attempt to write empty attribute twice; (bso#9970). + Fix Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + s3-winbind: Do not delete an existing valid credential cache; (bso#9994). + Fix excessive RID allocation; (bso#10014). + Add debugclass for DNS server; (bso#10015). + Fix/improve debug options; (bso#10015). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Linux kernel oplock breaks can miss signals; (bso#10064). + net ads join: Fix segmentation fault in create_local_private_krb5_conf_for_domain; (bso#10073).- Update to 4.0.8. + Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections; CVE-2013-4124; (bnc#829969).- Require krb5 and not the non existing krb5-libs package.- Update to 4.1.0rc1. + Directory database replication (AD DC mode) + Server-Side Copy Support + Btrfs Filesystem Integration- BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp. - BuildRequire libxslt, libxslt1, or libxslt-tools depending on SUSE version. - Require perl-base on SUSE systems only.- Adjust group setting of the test-devel subpackage. - Require perl-base from the pidl subpackage.- Remove libdir/samba/ldb after install if we're building Samba without Active Directory Domain Controller support.- Remove unused ccache switch from the spec file.- BuildRequire docbook-xsl-stylesheets and libxslt-tools to build the man pages and add them to the package again.- Build from the package from the top level directory; (bnc#794744). - BuildRequire pytalloc-devel, python-tdb, and python-tevent. - Also use out of tree builds of talloc, tdb, tevent, and ldb for pre-12.1 SUSE systems.- Remove the empty data dir from the doc package filelist. - Explicitly use samba instead of the name macro to define the docbook dir.- Update to 4.0.7. + Fix a core dump with invalid lock order while opening/editing or copying MS files; (bso#9794). + Fix crash bug from search of mail=; (bso#9967). + s3-rpc_server: Ensure we are root when starting and using gensec; (bso#9465). + Add support for MX queries; (bso#9485). + dns: Delete dnsNode objects when they are empty; (bso#9559). + dns: Support larger queries when asking forwarder; (bso#9632). + s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST; (bso#9805). + Use of wrong RFC2307 primary group field; (bso#9880). + Check for system libtevent; (bso#9881). + is_printer_published GUID retrieval; (bso#9900). + Doc fixes for 4.0; (bso#9906). + Build fixes for 4.0 found during autoconf or debian packaging work; (bso#9907). + build: Add missing new line to replaced python shebang line; (bso#9909). + PIE builds not supported; (bso#9910). + s4:winbind: Don't leak libnet_context into the main event context; (bso#9929). + Fix a bug of drvupgrade of smbcontrol; (bso#9941). + Check for netbios aliases in ad_get_referrals; (bso#9947). + Fix tevent_poll on 32-bit machines (Coverity ID 989236); (bso#9953). + docs: Avoid mentioning a possibly misleading option; (bso#9964). + Fix build with system Heimdal of samba4kgetcred; (bso#9968).- Use SLE as product prefix for SUSE Linux Enterprise, oS for openSUSE, and OBS for any other operating system to define the vendor string while build.- Remove ldapsmb from the main spec file.- Adjust ldapsmb and nmbstatus man page syntax required by a newer pod2man.- Don't bzip2 the main tar ball, use the upstream gziped one instead.- Explicitly BuildRequire cyrus-sasl-devel, libattr-devel, and libopenssl-devel.- Fix libreplace license ambiguity; (bso#8997); (bnc#765270).- Update to 4.0.6. + Fix crash during Win8 sync; (bso#9822). + Fix segfault when loging in with wrong password from w2k8r2; (bso#9834). + Fix the username map optimization; (bso#9139). + Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). + SMB2 server doesn't support recvfile; (bso#9412). + Fix the build of vfs_notify_fam; (bso#9545). + Fix adding case sensitive spn; (bso#9699). + Properly handle oplock breaks in compound requests; (bso#9722). + Properly handle oplock breaks in compound requests; (bso#9722). + Cache name_to_sid/sid_to_name correctly; (bso#9766). + Fix 'net ads join' when called via stdin; (bso#9767). + Fix segfault for "artificial" conn_structs in vfs_fake_perms; (bso#9775). + vfs_dirsort uses non-stackable calls, dirfd(), malloc instead of talloc and doesn't cope with directories being modified whilst reading; (bso#9777). + Fix panic when running 'smbtorture smb.base'; (bso#9782). + Use specified python for runtime installation of Samba; (bso#9785). + Change '--with-dmapi' to 'default=auto' to match the autoconf build; (bso#9803). + wafsamba: Display the default value in help for SAMBA3_ADD_OPTION; (bso#9804). + wbinfo: Fix segfault in wbinfo_pam_logon; (bso#9807). + Package new dbwrap_tool man page; (bso#9809). + Old DOS SMB CTEMP request uses a non-VFS function to access the filesystem; (bso#9811). + Fix 'map untrusted to domain' with NTLMv2; (bso#9817). + SMB signing and the async echo responder don't work together; (bso#9824). + Fix panic in nt_printer_publish_ads; (bso#9830). + talloc use after free in winbind4; (bso#9832). + Function called in unix_convert() path can overwrite errno; (bso#9833). + Fix NULL pointer dereference in Winbind; (bso#9854). + Fix making LIBNDR_PREG_OBJ; (bso#9868).- Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches.- Update to 4.0.5. + Fix large reads/writes from some Linux clients; (bso#9706). + Add 'samba-tool dbcheck --reset-well-known-acls'; (bso#9740). + Can't delegate adding computers to domain; (bso#9267). + Fix GNU ld version detection with old gcc releases; (bso#7825). + Never try to map global SAM name; (bso#9039). + Certain xattrs cause Windows error 0x800700FF; (bso#9130). + Samba returns unexpected error on SMB posix open; (bso#9519). + Fix build on AIX; (bso#9557). + libnss-winbindd does not provide pass struct for groups mapped with ID_TYPE_BOTH and vice versa; (bso#9617). + Reauth-capable client fails to access shares on Windows member; (bso#9625). + PIDL: Fix parsing linemarkers in preprocessor output; (bso#9636). + Rename internal subsystem pdb_ldap to pdb_ldapsam; (bso#9639). + Fix the build of vfs_afsacl; (bso#9642). + Fix the build with --fake-kaserver; (bso#9643). + Fix compile of source3/lib/afs.c; (bso#9644). + Make SMB2_GETINFO multi-volume aware; (bso#9646). + idmap_autorid: Fix freeing of non-talloced memory; (bso#9653). + Work around FreeBSD's getaddrinfo() underscore issue; (bso#9656). + 'make test' hangs; (bso#9663). + Fix correct linking of libreplace with cmdline-credentials; (bso#9664). + Fix filtering of link-local addresses; (bso#9666). + Fix crash in 'net rpc join' against a Samba 3.0.33 PDC; (bso#9669). + Samba denies owner Read Control when there is a DENY entry while W2K08 does not; (bso#9674). + Fix several resource (fd) leaks; (bso#9683). + Fix a memory leak in spoolss rpc server; (bso#9685). + Fix a possible buffer overrun in pdb_smbpasswd; (bso#9686). + Fix several possible null pointer dereferences; (bso#9687). + Make sure that domain joins work correctly when the DC disallows NTLM auth; (bso#9689). + Backport tevent changes to bring library to version 0.9.18; (bso#9695). + Remove incomplete samba_dnsupdate IPv6 link-local address check; (bso#9696). + DsReplicaGetInfo fails due to sendto() EMSGSIZE error on UNIX domain socket; (bso#9697). + Fix vfs_catia and update documentation; (bso#9701); (bnc#824833). + Fix build on solaris8: Do not force a specific perl on pod2man; (bso#9703). + Fix nss_winbind name on FreeBSD; (bso#9704). + s4:winbindd: Do not drop the workgroup name in the getgrnam, getgrent and getgrgid calls; (bso#9711). + Set LD_LIBRARY_PATH in install_with_python.sh; (bso#9717). + s4-idmap: Remove requirement that posixAccount or posixGroup be set for rfc2307; (bso#9718). + Allow forcing an override of an old @MODULES record; (bso#9719). + Do not print the admin password during 'samba-tool classicupgrade'; (bso#9720). + Make samba_upgradedns more robust (do not guess addresses when just changing roles); (bso#9721). + Add a tool to migrate latin1 printing tdbs to registry; (bso#9723). + is_encrypted_packet() function incorrectly used inside server; (bso#9724). + upgradeprovision and 'samba-tool dbcheck' patches for 4.0.NEXT; (bso#9725). + Fix NULL pointer dereference; (bso#9727). + DO NOT install samba_upgradeprovision in 4.0.x; (bso#9728). + Fix 'smbcontrol close-share'; (bso#9733). + Fix Winbind separator in upn to username conversion; (bso#9735). + Change to smbd/dir.c code gives significant performance increases on large directory listings; (bso#9736). + PIDL: Build fixes for hosts without CPP (Solaris 11); (bso#9739). + Make sure that we only propogate the INHERITED flag when we are allowed to; (bso#9747). + Remove unneeded fstat system call from hot read path; (bso#9748). + Don't leak the epm_Map policy handle; (bso#9758). + Fix incorrect parsing of SMB2 command codes; (bso#9760). - Update to 4.0.4. + Remove forced set of 'create mask' to 0777; CVE-2013-1863; (bnc#809624).- Fix periodic printcap cache reloads; (bso#9650); (bnc#807334).- No longer use the cifs- or smbfstab named configuration file on post-12.2 systems; (bnc#804822); (bnc#821889).- Shift the smbfs init script nfs dependency from Required to Should.- Fix SMB1 Session Setup AndX handling with a large krb PAC; (bso#9658); (bnc#802031).- Point LD_LIBRARY_PATH to the just-built libraries while calling testparm to generate the default share snippets on pre-12.2 systems.- Explicitly configure --with-ads.- Fix smbclient recursive mget EPERM handling; (bso#9633); (bnc#786350).- Remove superfluous quotation marks while setting the SAMBA_VERSION_VENDOR_SUFFIX string.- Do not restart the smbfs service on pre-11.3 systems during dhcp lease renewal when the IP address remains the same; (bnc#800782).- Update to 4.0.3. + Fix ACL problem with delegation of privileges and deletion of accounts over LDAP interface; add documentation; (bso##8909). + check_password_quality: Handle non-ASCII characters properly; (bso##9105). + Fix 'smbd' panic triggered by unlink after open; (bso##9571). + smbd: Fix memleak in the async echo handler; (bso##9549). + defer_open is triggered multiple times on the same request; (bso#9196). + Add extra attributes for AD printer publishing; (bso#9378). + FSMO seize of naming role fails: NT_STATUS_IO_TIMEOUT; (bso#9461). + Downgrade v4 printer driver requests to v3; (bso#9474). + samba_upgradeprovision: fix the nTSecurityDescriptor on more containers; (bso#9481). + s3:smb2_negprot: set the 'remote_proto' value; (bso#9499). + waf assumes that pythonX.Y-config is a Python script; (bso#9503). + s4:drsuapi: Make sure we report the meta data from the cycle start; (bso#9508). + wafsamba: Use additional xml catalog file; (bso#9512). + samba_dnsupdate: Set KRB5_CONFIG for nsupdate command; (bso#9517). + conn->share_access appears not be be reset between users; (bso#9518). + Remove superfluous bracket in samba.8.xml; (bso#9528). + Fix typo in vfs_tsmsm.8.xml; (bso#9530). + terminate the irpc_servers_byname() result with server_id_set_disconnected(); (bso#9540). + Make use of posix_openpt; (bso#9541). + Fix build of vfs_commit and plug in async pwrite support; (bso#9544). + Fix aio_suspend detection on FreeBSD; (bso#9546). + Correctly detect O_DIRECT; (bso#9548). + sigprocmask does not work on FreeBSD to stop further signals in a signal handler; (bso#9550). + smb.conf(5): Update list of available protocols; (bso#9552). + s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup; (bso#9555). + Fix compilation of Solaris ACL module; (bso#9564). + Adding additional Samba 4.0 DC to W2k8 srv AD domain (in win200 functional level) produces dbcheck errors; (bso#9565). + Add dbwrap_tool.1 manual page; (bso#9568). + Document the command line options in dbwrap_tool(1); (bso#9568). + ntlm_auth(1): Fix format and make examples visible; (bso#9569). + Fix file corruption during SMB1 read by Mac OSX 10.8.2 clients; (bso#9572). + Fix a possible null pointer dereference in spoolss; (bso#9574). + Duplicate flags defined in the winbindd protocol; (bso#9575). + gensec: Allow login without a PAC by default; (bso#9581). + smbd: disk_free: sys_popen() failed" message logged in /var/log/message many times; (bso#9586). + Archive flag is always set on directories; (bso#9587). + ACLs are not inherited to directories for DFS shares; (bso#9588). + Correct meta data in ldb manpages; (bso#9591). + s3-winbind: Fix the build of idmap_ldap; (bso#9595). + Linked attribute handling should be by GUID; (bso#9596). + Fix timeouts of some IRPC calls; (bso#9598). + Use pid,task_id as cluster_id in process_single just like process_prefork; (bso#9598). + Add 'ldbdump' tool; general code and documentation cleanup; (bso#9609). + dsdb: Make secrets_tdb_sync cope with -H secrets.ldb; (bso#9610).- Update to 4.0.2. + Address SWAT security issues CVE-2013-0213 and CVE-2013-0214 which both don't apply to any SUSE Samba post-3.6.10 as it isn't longer built. + Don't build and package static libraries.- Drop separate build-source-timestamp file as it led to a second, incorrect Source Timestamp line.- Add server-side copy support; (fate#314770). + Implement FSCTL_SRV_COPYCHUNK and FSCTL_SRV_REQUEST_RESUME_KEY handlers. + Add vfs_btrfs VFS module for optimized Btrfs clone-range ioctl usage.- Add filter against shlib-policy-name-error for /lib*/libnss_wins.so.2.- Disable SWAT during configure and don't package it any longer.- Remove dangling references to Heimdal from the spec file.- Remove /lib/samba prefix from the localstatedir configure option.- Update to 4.0.1. + Samba 4.0.0 as an AD DC may provide authenticated users with write access to LDAP directory objects; CVE-2013-0172; (bnc#798364).- Add the missing get_printing_ticket binary path while calling the set_permissions macro; (bnc#783375).- Use the version macro while definition of the branch macro.- Remove references to no longer used devel macros.- Update to 4.0.0. + Honor password complexity settings; (bso#9414). + Install SWAT *.msg files with waf; (bso#9415). + Fix netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES; (bso#9438). + developer-build: Fix panic when acl_xattr fails with access denied; (bso#9456). + Fix "map username script" with "security=ads" and Winbind; (bso#9457). + Install manpages only if we install the target; (bso#9459). + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Users can not be given write permissions any more by default; (bso#9462). + Fix MMC crashes; (bso#9470). + Fix SEGV when using second vfs module; (bso#9471). + Support FIPS mode when building Samba; (bso#9479). + Fix ACL on "cn=partitions,cn=configuration"; (bso#9481).- netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES broken; (bso#9438). - s3:auth: fix create_token_from_sid() to not fail in the winbindd case; (bso#9457). - s4:dsdb/acl_read: return the nTSecurityDescriptor attr if the sd_flags control is given; (bso#9470). - Support FIPS mode when building Samba; (bso#9479). - s4:provision: set the correct nTSecurityDescriptor; (bso#9481).- SEGV when using second vfs module; (bso#9471).- Update to 3.6.10. + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Fix segfault when "default devmode" is disabled; (bso#9433). + Fix segfaults in "log level = 10" on Solaris; (bso#9390).- s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIED; (bso#9456). - Install manpages only if we install the target; (bso#9459). - Users can not be given write permissions any more by default; (bso#9462).- Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094); (bso#9418). - Use work around for 'winbind use default domain' only if it is set; (bso#9367). - Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend; (bso#9374). - large read requests cause server to issue malformed reply; (bso#9422). - s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426). - Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439). - Allow to force DNS updates using net; (bso#9451). - Respond correctly to FILE_STREAM_INFO requests; (bso#9460).- Update to 4.0.0rc6. See WHATSNEW.txt from the samba-doc package.- On uninstall remove winbind from the pam configuration, invalidate the nscd passwd and group cache and only recommend the install of nscd; (bnc#792340).- BuildRequire libnscd-devel once.- Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294). - Add SUSE version depending pkg-config requires macro; (bnc#792294).- Define library names and use it instead of libldb1, libnetapi0, libsmbclient0, libsmbsharemodes0, libtalloc2, libtdb1, libtevent0, and libwbclient0; (bnc#792294). - Provide and obsolete libsmbsharemodes for post-10.3 SUSE systems.- Don't clutter the spec file diff view; (bnc#783384).- Fix fd leak causing 100% CPU in winbind on certain dc connection failures; (bso#9436); (bnc#786677).- Fix spoolss segfault when default devmode is disabled; (bso#9433); (bnc#791183).- Update to 4.0.0rc5. See WHATSNEW.txt from the samba-doc package.- ACL masks incorrectly applied when setting ACLs; (bso#9236). - s3-kerberos: also try with AES keys, when decrypting tickets; (bso#9272). - lib/replace: replace all *printf function if we replace snprintf; (bso#9390). - lib/addns: don't depend on the order in resp->answers[]; (bso#9402).- s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209). - lib/krb5_wrap: request enc_types in the correct order; (bso#9272). - Fix net ads join message for the dns domain; (bso#9326). - docs-xml: fix use of tag; (bso#9345). - s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359). - s3:winbind: Failover if netlogon pipe is not available; (bso#9386).- Execute the run_permissions macro on pre-11.4 systems and else the set_permission one if available.- Ensure adding the winbind group never can fail.- Create ntadmin group only if it doesn't yet exist.- Update to 3.6.9. + When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). + Winbind can't fetch user or group info from AD via LDAP; (bso#9147). + Fix segfault in smbd if user specified ports out for range; (bso#9218).- quota: Don't force the block size to 512; (bso#3272). - Fix poll replacement to become a msleep replacement; (bso#8107). - Fix wrong test == syntax in configure; (bso#8146). - Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344). - Fix builtin forms order to match Windows again; (bso#8632). - Fix RAW printing for normal users; (bso#8769); (bnc#790741). - Initialise ticket to ensure we do not invalid memory; (bso#8788). - Fix 'net rpc share allowedusers' to work with 2008r2; (bso#8966). - Fix crash on null pam change pw response; (bso#9013). - Connection to outbound trusted domain goes offline; (bso#9016). - Increase debug level for info that the db is empty; (bso#9112). - 'smbclient' can't connect to a Windows 7 server using NTLMv2; (bso#9117). - Winbind can't fetch user or group info from AD via LDAP; (bso#9147). - Open printers with the right access mask; (bso#9154). - Fix makerpms.sh on RHEL; (bso#9165). - Remove non-existent option '-Y' from winbindd manpage; (bso#9171). - Add quota support for gfs2; (bso#9172). - Make SMB2 compound request create/delete_on_close/close work as Windows; (bso#9173). - Empty SPNEGO packet can cause smbd to crash; (bso#9174). - pam_winbind: Match more return codes when wbcGetPwnam has failed; (bso#9177). - Fix crash bug in idmap_hash; (bso#9188); (bnc#788159). - SMB2 Create doesn't return correct MAX ACCESS access mask in blob; (bso#9189). - Fix service control for non-internal services; (bso#9192). - Don't take 'state->te' as indication for "was_deferred"; (bso#9196). - Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209). - Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213). - Fix segfault in smbd if user specified ports out for range; (bso#9218). - Signing cannot be disabled for SMB2 by design, so fix the documentation instead; (bso#9222). - Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry; (bso#9231). - When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). - lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259). - Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart; (bso#9268). - Add support for reloading systemd services; (bso#9280).- Warn via the smbd log if AppArmor and "wide links" are in use; (bnc#783719).- Do not write the build date into the header of the default smb.conf as this causses superfluous rebuilds of packages depending on samba; (bnc#781601).- Do not prerequire SuSEconfig.permissions as it's already enough and more generic to depend on the permissions package; (bnc#782293).- Update to 3.6.8. + Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). + Fix Winbind panic if we couldn't find the domain; (bso#9135).- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058). - Fix bad call to memcpy source3/registry/regfio.c; (bso#9065). - "Domain Users" incorrectly added as additional group on domain members; (bso#9066). - Use correct RID for "Domain Guests" primary group; (bso#9067). - Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). - Fix smbclient/tarmode panic when connecting to Windows 2000 clients; (bso#9088). - Fix refreshing of Kerberos tickets in Winbind; (bso#9098). - Fix identification of idle clients in Winbind to avoid crashes and NDR parsing errors; (bso#9104). - Fix compilation with newer MIT Kerberos which hides internal symbols; (bso#9111). - Fix flooding the logs with records we don't find in pcap; (bso#9112). - Initialize the print backend after we setup winreg; (bso#9122). - Fix lprng job tracking errors; (bso#9123). - Fix setting of "inherited" bit on inherited ACE's; (bso#9124). - Fix Winbind panic if we couldn't find the domain; (bso#9135). - Make 'smbclient allinfo' show the snapshot list; (bso#9137). - Fix nfs quota support with Linux nfs4 mounts; (bso#9144). - Valid open requests can cause smbd assert due to incorrect oplock handling on delete requests; (bso#9150).- NMB registration for a duplicate workstation fails with registration refuse; (bso#9085); (bnc#770056).- Remove backup files caused by running configure in examples/VFS.- Update to 3.6.7. + Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). + Fix migrating printers while upgrading from 3.5.x; (bso#9026).- Correct documentation of "case sensitive"; (bso#8552). - Printing fails in function cups_job_submit; (bso#8719). - Fix kernel oplocks when uid(file) != uid(process); (bso#8974). - Send correct responses to NT Transact Secondary when no data and no params for the Trans2 calls are set; (bso#8989). - Fix build without ads support; (bso#8996). - Don't turn negative cache entries into valid idmappings; (bso#9002). - Fix posix acl on gpfs; (bso#9003). - Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022). - Fix migrating printers while upgrading from 3.5.x; (bso#9026). - Fix typo in set_re_uid() call when USE_SETRESUID selected in configure; (bso#9034). - Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040). - Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). - Fix build against CUPS 1.6; (bso#9055). - Fix bugs in SMB2 credit handling code; (bso#9057). - rpcclient: Fix bad call to data_blob_const; (bso#9062).- Create missing doc directories while install. - Remove no longer existing Manifest file from install. - Don't creat a link to non existend html man pages for swat. - Don't call the no longer existing libsmbclient testsuit while build.- Configure with option --mandir instead --with-mandir. - Remove obsoleted --with-rootsbindir, --with-nmbdsocketdir, and - -with-swatdir configure options.- Update to 4.0.0beta4. See WHATSNEW.txt from the samba-doc package.- BuildRequire gcc, make, and patch; (bnc#771516).- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).- Fix shell syntax in dhcpcd hook script; (bnc#769957).- Add missing int declaration to the net kdc lookup patch.- Update to 4.0.0beta2. See WHATSNEW.txt from the samba-doc package.- Update to 3.6.6. + Fix possible memory leaks in the Samba master process; (bso#8970). + Fix uninitialized memory read in talloc_free(); (bnc#764577). + Fix joining of XP Pro workstations to 3.6 DCs; (bso#8373); (bnc#787983).- resolve_ads() code can return zero addresses and miss valid DC IP addresses; (bso#8910). - Can't join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983). - winbind can hang as nbt_getdc() has no timeout; (bso#8953). - Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627) - s3-pid: Catch with pid filename's change when config file is not smb.conf; (bso#8714). - Possible memory leaks in the main Samba process; (bso#8970). - s3: Fix uninitialized memory read in talloc_free(); (bnc#764577). - Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971). - Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988). - Winzip occasionally can not read files out of an open winzip dialog; (bso#8311). - s3-winbindd: call dump_core_setup after command line option has been parsed; (bso#8975). - Directory group write permission bit is set if unix extensions are enabled; (bso#8972). - s3: remove dependency on automake for "make everything"; (bso#8978). - sd_has_inheritable_components segfaults on an SD that se_access_check accepts; (bso#8811). - smbclient's tarmode insists on listing excluded directories; (bso#8922). - Notify code can miss a ChDir; (bso#8998). - s3:smbd: add a fsp_persistent_id() function; (bso#8995).- Call autogen.sh even on post-12.1 SUSE systems.- Don't call autogen.sh on post-12.1 SUSE and post-14 Fedora systems. - Recompile all IDL in any case.- BuildIgnore libtalloc and libtdb to prevent a package conflict on Fedora systems.- Install talloc.pc only on pre-12.2 and non SUSE systems.- BuildRequire libldb-devel, libtalloc-devel, libtdb-devel, and libtevent-devel on post-12.1 systems.- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861). - s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904). - smbd crashes when deleting directory and veto files are enabled; (bso#8837). - winbind_krb5_locator only returns one IP address; (bso#8897). - Wrong assertion/comparison: Compare value not pointer; (bso#8859). - Inconsistent (with manpage) command-line switch for "help" in smbtree; (bso#8831). - Fix incorrect debug statement. - Setting traverse rights fails to enable directory traversal when acl_xattr in use; (bso#8857). - Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877). - s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869). - s3-docs: fixes several typos; (bso#7938). - s3-VFS: Fix building out-of-tree modules; (bso#8822). - s3-docs: Add hint that setting "profile acls = yes" on normal shares can cause trouble; (bso#7930). - s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915). - Avoid null dereference in initialize_password_db(); (bso#8920). - s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend. - s3:registry:reg_api: fix reg_queryvalue to not fail when values are modified while it runs. - s4:torture:rpc:spoolss: also initialize driverName before checking it in test_PrinterData_DsSpooler(). - s3:registry: multiple cleanups, fixes, and optimisations. - s3:auth/server_info: the primary rid should be in the groups rid array; (bso#8798). - s3-printing: Add new printers to registry; (bso#8554); (bso#8612); (bso#8748). - Fix the overwriting of errno before use in a DEBUG statement and use the return value from store_acl_blob_fsp rather than ignoring it; (bso#8945). - s3-auth: Don't lookup the system user in pdb; (bso#8944). - s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952). - Fix typo in pam_winbindd code; (bso#8957). - Fix remove_duplicate_addrs2 previously it could leave zero addresses in the list; (bso#8910). - Slow but responsive DC can lock up winbindd; (bso#8943). - Broken processing of %U with vfs_full_audit when force user is set; (bso#8882).- Disable included build of ldb, talloc, tdb, and tevent on post-12.1 systems. - BuildRequire libldb1-devel, libtalloc2-devel, libtdb1-devel, and libtevent0-devel on post-12.1 systems.- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).- docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845); (bnc#730769). - s3-docs: Prepend '/' to filename argument; (bso#8826).- Update to 3.6.5. - Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576).- Remove all precompiled idl output to ensure any pidl changes take effect; (bnc#757080).- Update to 3.6.4. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "root" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). - Correctly handle DENY ACEs when privileges apply; (bso#8797).- s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). - Allow vfs_aio_pthread to build as a static module; (bso#8723). - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). - s3: segfault in dom_sid_compare(bso#8567). - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). - s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). - Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784).- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454).- Remove obsoleted Authors lines from spec file for post-11.2 systems.- Make ldapsmb build with Fedora 15 and 16; (bso#8783). - BuildRequire libuuid-devel for post-11.0 and other systems. - Define missing python macros for non SUSE systems. - PreReq to fillup_prereq and insserv_prereq only on SUSE systems. - Always use cifstab instead of smbfstab on non SUSE systems.- Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934).- Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854).- s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825).- s3:winbindd fix a return code check; (bso#8406).- s3: Add rmdir operation to streams_depot; (bso#8733).- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738); CVE-2013-0454; (bnc#811975).- s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).- s3:client: ignore SMBecho errors (the server may not support it); (bso#8139).- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is enabled and don't unintentionally use a bogus domain name; (bso#8734).- smbclient fails with posix large reads; (bso#8727).- Use the smbfs init script on versions pre-11.3, or cifs in later versions; (bnc#744614).- s3: Compile IDL files in autogen, some configure tests need this.- Fixes various deadlocks in if-up.d / if-down.d when running under systemd; (bnc#732395).- Update to 3.6.3. + Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724); (bnc#743986).- Use spdx.org compliant license names for all packages.- Update to 3.6.2. + Make Winbind receive user/group information (bug #8371). + Several SMB2 fixes. + Fix a crash bug in the spoolss code. + Add new contributing FAQ announcing acceptance of corporate (C). + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504). + Fix cli_write_and_x() against OS/2 print shares; (bso#5326). + Fix 'smbclient tar' for files greater than 8GB on BE machines; (bso#563); (bnc#726145). + Remove pointless use_memory_krb5_ccache; (bso#7465). + Fix perl path; (bso#8176). + Grant credits in async interim responses (SMB2); (bso#8357). + Make Winbind receive user/group information; (bso#8371). + Fix Windows XP clients crashing smbd process every once in a while; (bso#8384); (bnc#731571). + Make VFS op "streaminfo" stackable; (bso#8419). + Add an allocation pool to idmap_autorid; (bso#8444). + Fix SEGFAULT from net registry export on not zero terminated REG_SZ values; (bso#8528). + Make DSO_EXPORTS_CMD more portable; (bso#8531). + readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). + smbclient posix_open command fails to return correct info on open file; (bso#8542). + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548). + Fix setting the machine account password; (bso#8550). + Make SMB2 handle compound request headers in the same way as Windows; (bso#8560). + Password change settings not fully observed; (bso#8561). + Fix double free error in talloc; (bso#8562). + Fix alignment in the non-extended-security negprot; (bso#8573). + Add systemd service files; (bso#8575). + Add systemd service files; (bso#8575). + smb2_flush: Don't send uninitialized memory; (bso#8579). + Enable inotify if sys or kernel inotify is available; (bso#8580). + Increase a debug level; (bso#8585). + libsmb: Only align unicode pipe_name; (bso#8586). + Fix marshalling of samr_ChangePasswordUser3; (bso#8591). + Don't limit the number of open dptrs for SMB2; (bso#8592). + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). + Make cldap work over IPv6; (bso#8600). + Fix intermittent print job failures caused by character conversion errors; (bso#8606). + Improve configure.in so it can be used outside the Samba source tree; (bso#8607). + Winbind: Don't fail on users without a uid; (bso#8608). + Ensure we correctly calculate reply credits over all returned SMB2 replies; (bso#8614). + Fix migrate printer code; (bso#8618). + Fix crash bug when trying to browse Samba printers; (bso#8623). + libsmb: Don't duplicate Kerberos service tickets; (bso#8628). + POSIX ACE x permission becomes rx following mapping to and from a DACL; (bso#8631). + When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + Fix the vfs_commit module; (bso#8639). + Add an update function for Winbind cache; (bso#8643). + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). + Document the "ignore system acls" option of vfs_acl_xattr and vfs_acl_tdb vfs modules; (bso#8652). + Fix deleting a symlink if the symlink target is outside of the share; (bso#8663). + Fix renaming a symlink if the symlink target is outside of the share; (bso#8664). + Fix NT ACL issue; (bso#8673). + Fix buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). + Fix Winbind segfault if we can't map the last user; (bso#8678). + recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). + Try ctdbd_init_connection() as root; (bso#8684). + Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686). + Fix typo in 'net memberships' usage; (bso#8687). + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket(); (bso#8692). + Make DeletePrinterDriverEx remove printer driver files; (bso#8697) (bnc#740810). + Fix major leak with SMB2 in connections.tdb; (bso#8710).- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).- Use correct license, LGPLv3+ for libwbclient packages.- When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636).- Fix incorrect types in the full_audit VFS module. Add null terminators to audit log enums; (bnc#742885).- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810). - Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).- Buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). - NT ACL issue; (bso#8673). - Deleting a symlink fails if the symlink target is outside of the share; (bso#8663). - connections.tdb - major leak with SMB2; (bso#8710).- Renaming a symlink fails if the symlink target is outside of the share; (bso#8664).- Intermittent print job failures caused by character conversion errors; (bso#8606). - ads_keytab_verify_ticket mixes talloc allocation with malloc free; (bso#8692). - libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). - s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684). - s3-printing: fix migrate printer code; (bso#8618). - Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686).- net memberships usage info was wrong; (bso#8687). - s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628). - Recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). - s3-winbind: Fix segfault if we can't map the last user; (bso#8678). - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). - s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb; (bso#8652). - Winbind can't receive any user/group information; (bso#8371). - s3-winbind: Add an update function for winbind cache; (bso#8643). - s3: Attempt to fix the vfs_commit module. - POSIX ACE x permission becomes rx following mapping to and from a DACL; (#bso#8631). - s3:libsmb: only align unicode pipe_name; (bso#8586). - s3-winbind: Don't fail on users without a uid; (bso#8608). - Crash when trying to browse samba printers; (bso#8623). - talloc: double free error; (bso#8562). - cldap doesn't work over ipv6; (bso#8600). - s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326). - SMB2: not granting credits for all requests in a compound request; (bso#8614). - smb2_flush sends uninitialized memory; (bso#8579). - Password change settings not fully observed; (bso#8561). - s3:smb2_server: grant credits in async interim responses; (bso#8357). - s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592). - samr_ChangePasswordUser3 IDL incorrect; (bso#8591). - idmap_autorid does not have allocation pool; (bso#8444). - Add systemd service files. - s3:libsmb: the workgroup in the non-extended-security negprot is not aligned; (bso#8573). - s3-build: Fix inotify detection; (bso#8580). - SMB2 doesn't handle compound request headers in the same way as Windows; (#bso8560). - Disconnecting clients swamp the logs; (bso#8585). - s3-netlogon: Fix setting the machinge account password; (bso#8550). - winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). - smbclient posix_open command fails to return correct info on open file; (bso#8542). - readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). - s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465). - s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531). - s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated ucs2 string; (bso#8528). - Make VFS op "streaminfo" stackable; (bso#8419).- Fix incorrect perfcount array length calculations; (bnc#739258).- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.- Remove call to suse_update_config macro for post-11.4 systems.- Use samba.org for the ldapsmb source location.- Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile; (bnc #729516).- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572).- Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).- Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).- Fix typo in net ads join output; (bnc#713135).- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).- Update to 3.6.1. + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Several SMB2 fixes. + The VFS ACL modules are no longer experimental but production-ready. + Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465). + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509). + Return error of cli_push when 'put - /some/file' is used; (bso#7551). + Fix usage of cli_errstr(); (bso#7864). + Fix 'widelinks' regression; (bso#8229). + Empty notify servername; (bso#8236). + Add man vfs_aio_fork; (bso#8256). + smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes; (bso#8334). + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338). + While migrating forms, don't fail if the form already exists; (bso#8351). + OS/2 sends an unexpected write&x/read&x chain; (bso#8360). + Fix build of vfs_prealloc on SLES8; (bso#8363). + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364). + Fix the fallback to the deprecated spelling idmap:script; (bso#8368). + Fix vfs_chown_fsp; (bso#8370). + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix smbclient access to NT4 shares; (bso#8385). + Optimize serverid_exists() for Solaris; (bso#8395). + registry/reg_format.c must include includes.h; (bso#8401). + SMB2 server can return requests out-of-order when processing a compound request; (bso#8407). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with SMB2; (bso#8412). + Fix 'getent group' if trusted domains are not reachable; (bso#8420). + Fix infinite loop in ACL module code; (bso#8422). + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428). + Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429). + Fix segfault in iconv.c; (bso#8433). + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442). + Be smarter about setting default permissions when a ACL_USER_OBJ isn't given; (bso#8443). + Check the wct of the incoming SMBnegprot responses; (bso#8452). + Fix smbclient segfaults when dialect option -m is used for legacy dialects; (bso#8453). + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455). + Samba PDC is looking up only primary user group; (bso#8455). + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458). + smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473). + SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474). + Don't call smbd_terminate_connection in smb2_validate_message_id(); (bso#8476). + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476). + Map to guest can return uninitialized blob of data; (bso#8477). + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480). + DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493). + Remove "experimental" label on VFS ACL modules; (bso#8494). + SMB2_OP_CANCEL requests don't have to be signed; (bso#8503). + smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507). + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509). + Disallow "." in can_set_delete_on_close(); (bso#8515). + SMB2 create call returns incorrect file allocation size; (bso#8518). + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520). + Winbind cache timeout expiry test was reversed; (bso#8521).- s3/doc: add man page for aio_fork vfs module.- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).- s3: Samba PDC is looking up only primary user group; (bso#8455).- Add script to create or update an AppArmor sniplet with permissions for all Samba shares; (bnc#688040).- Add "ldapsam:login cache" parameter to allow explicit disabling of the login cache; (bnc#723261).- Retain the smbd startproc return value for correct startup status reporting. unset was incorrectly being called prior to rc_status; (bnc#723724).- Prevent deadlock in systemd triggered by if-down.d handler on shutdown; (bnc#721598).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; changed defaults and documentation (bso8473).- Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client); (bso#8515).- winbindd cache timeout expiry test was reversed; (bso#8521).- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).- s3:smb2_create: fix allocation size return value when opening existing files; (bso#8518).- SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474).- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442).- s3-docs: Fix bug (bso#7908) and typo.- Return error of cli_push when 'put - /some/file' is used; (bso#7551).- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).- smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507).- Default user entry is set to minimal permissions on incoming ACL change with no user specified; (bso#8443).- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft Internet Explorer 9 on Windows 7 to download files; (bso#8458).- DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493).- s3-docs: Fix typos.- s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).- Remove "experimental" label on VFS ACL modules; (bso#8494).- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin; (bso#7465).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473).- s3-netapi: allow to use default krb5 credential cache for libnetapi users.- s3-docs: document -k switch in net manpage.- Map to guest can return uninitialized blob of data; (bso#8477).- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).- Fix 'widelinks' regression intro'd in 3.2; (bso#8229).- Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429).- s3-spoolss: Fix bug forms migration; (bso#8351).- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).- s3: Do not fork the echo handler for smb2; (bso#8334).- s3-spoolss: Fix bug empty notify servername; (bso#8236).- SMB2 server can return requests out-of-order when processing a compound request; (bso#8407).- Remove smb child crash fix. The issue had been fixed upstream differently.- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.- Fix samba duplicates file content on appending. Move posix case semantics out from under the VFS; (bso#6898); (bnc#681208).- Make winbind child reconnect when remote end has closed, fix failing sudo; (bso#7295); (bnc#569721).- Spec file cleanup as suggested by the spec-cleaner tool. + Make all BuildRequires, PreReq, and Provides a separate line. + Use %{buildroot} instead of ${RPM_BUILD_ROOT}. + Use straight commands instead of macros (make, install). + Use -p in post and postun if we only call one command. + Use %{_localstatedir} instead of %{_var} in the filelist. + Remove superfluous AutoReqProv on lines.- Remove %release from all Provides.- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).- Use /var/run for the cifs state file in the init script too; (bnc#710304).- Microsoft Word from Microsoft Office 2007 fails to save as on a share with SMB2; (bso#8412).- Use sys_write and sys_read in fork_domain_child to fix a winbind race leading to 100% CPU usage; (bso#8409).- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).- Fix infinite loop in ACL module code; (bso#8422).- Fix getent group if trusted domains are not reachable; (bso#8420).- smbclient can't access a NT4 share since 3.6.0; (bso#8385).- Optimize serverid_exists() for Solaris; (bso#8395).- talloc: + check block count after references test. + added test suite for talloc_free_children(). + license info erratum in the manpage. + fix typos and better differentiation between versions 1 and 2. + preserve context name on talloc_free_children(). + ensure the sibling linked list remains valid during a free.- vfs_chown_fsp returned in the wrong directory; (bso#8370).- Remove irritating "." targets when recent system libs exist; (bso#8369).- Correctly initialize "idmap config * : script" with NULL; (bso#8368).- Add missing include to suppress compiler warnings; (bso#8365).- Point the chain offset beyond the current request; (bso#8360).- Fix gpfs vfs module build; (bso#8364).- Make vfs_prealloc even build on older systems; (bso#8363).- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).- Add a fallback for missing open&x support in OS/X Lion; (bso#8338).- Update to 3.6.0. + BUG 7462: Make SA_RESETHAND conditional on its existance. + BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined. + BUG 8324: smbclient cannot list directories from a big-endian machine. + BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname. + BUG 8327: Fix the reload of the configuration, also reload activated registry shares. + BUG 8328: Cleanup of idmap_tdb2 code. + BUG 8330: Fix NFSv4 ACL merging logic. + BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id. + BUG 8341: Fix segfault in libsmbclient. + BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file. + BUG 8347: Fix regression for HP-UX, AIX and OSF. + BUG 8357: Make sure we grant credits on async read/write operations. + BUG 8358: Fix a bug in run_poll_events(). + BUG 8362: Fix build issue on old glibc systems.- Remove references to disabled vscan build.- Add missing define, includes, and initialization to get_printing_ticket.- Use /var/run for the cifs state file; (bnc#710304).- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).- Fix reload of the configuration and also reload activated registry shares; (bso#8327).- WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326).- smbclient cannot list directories from a big-endian machine; (bso#8324).- Update to 3.6.0rc3. + BUG 7841: Explicitly pass domain_sid to wbint_LookupRids(). + BUG 7888: Deal with buggy 3.0 based PDCs. + BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb module. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8193: Add new command 'enumerate_recursive'. + BUG 8195: Make rpc client code working against NT4 servers. + BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes" is set. + BUG 8213: Fixes in idmap_autorid. + BUG 8214: Fix smbd crash on printer driver upgrade. + BUG 8215: Fix Winbind unix username lookup. + BUG 8216: Make Winbind returning correct results with 'sids2xids'. + BUG 8217: Do not stat-check the share path in 'net conf addshare'. + BUG 8219: Fix SMB Panic from Windows 7 client. + BUG 8224: Fix the build on FreeBSD. + BUG 8226: Use c99 initializers which are supported by old gcc 2.95 compilers. + BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd. + BUG 8231: Fix crash bug in 'net cache get'. + BUG 8235: Fix smbd crash on startup caused by migrate_printer(). + BUG 8240: Fix Valgrind warnings in winreg/spoolss code. + BUG 8244: Fix copying files larger than 2 GB to a Samba share. + BUG 8247: Fix Coverity ID 2582: FORWARD_NULL. + BUG 8253: Fix Winbind panic if verify_idpool() fails. + BUG 8254: Fix "acl check permissions = no". + BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes. + BUG 8262: Fix build of vfs_commit. + BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl. + BUG 8264: Fix Valgrind bugs in svcctl. + BUG 8276: Close all sockets attached to a subnet in close_subnet(). + BUG 8278: Fix smbd panic when CTDB is unhealthy. + BUG 8281: Fix build of examples/VFS/*. + BUG 8286: Fix smbd crash on premature end of smb2 conn. + BUG 8292: Fix a major architectural flaw in the SMB2 server code. + BUG 8293: Fix log file rotating in SMB2. + BUG 8304: Fix uninitialized variable in error path. + BUG 8305: Fix segfault in nmbd when using 'smbtree ...'.. + BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all locks. + BUG 8310: toupper_ascii() is broken on big-endian systems. + BUG 8314: Fix smbd crash with unknown user. + Mark 'time offset' parameter as deprecated.- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289); (bnc#708503).- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site request forgery; CVE-2011-2522; (bso#8290); (bnc#705241).- Fixed the DFS referral response for msdfs root; (bnc#703655).- Fix CUPS print job IDs; (bso#7288); (bnc#701257).- Make use of the actual library version as part of the package name on post-11.3 systems only.- Fix winbind internal error; (bso#7636); (bnc#659424).- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION; (bnc#705170).- Specify nmbdsocketdir at configure time; (bnc#700953).- Build the tdb, talloc, and tevent libraries ahead of anything else.- Update to 3.6.0rc2. + BUG 6911: Fix Kerberos authentication from Vista to Samba. + BUG 8166: Don't lockout users when offline. + BUG 8200: Add support for multiple writeable ldap idmap domains. + BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer. + BUG 7054: Fix X account flag when "pwdlastset" is "0". + BUG 8144: Fix setting timestamp when touching files with CIFS clients. + BUG 8153: Fix setting up getaddrinfo on IPv6-only machines. + BUG 8156: Fix 'net ads join' using the user's Kerberos ticket. + BUG 8157: Fix parsing a cups printcap file. + BUG 8175: Fix smbd deadlock. + BUG 8189: Support shadow copy display over SMB2. + BUG 8197: Winbind does not properly detect when a DC connection is dead. + BUG 8203: Winbind needs to reset the DC connection if an RPC times out.- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).- Add "winbind max clients" parameter to remove 200-client limit; (bnc#697461).- Disable logon cache for password lockout consistency when running in a cluster; (bnc#694836).- Fix logon of AD users with many group memberships; (bso#6911); (bnc#657026).- Don't lockout users while offline; (bso#8166); (bnc#692607).- Update to 3.6.0rc1. + BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open. + BUG 8112: POSIX extension opens of a directory are denied with EISDIR. + BUG 8132: Fix filling printers location field when using cups. + Remove fstrings from client struct. + BUGFIX when converting from safe_strcpy to strlcpy. + Fix off-by-one calculations with strlcpy. + Ensure we always write the correct incoming mid into the share mode table entries. + Fix the SMB2 oplock showstopper. + Convert user-specified domain to uppercase in libsmb. + Fix Coverity CID #2302: FORWARD_NULL. + Fix cups_pull_comment_location(). + Fix double free of cups request. + Make cups_pull_comment_location() work again. + Fix potential crash bug in display_print_driver3(). + Properly clean up in pthreadpool_init in case of failure. + Make plaintext session setup async. + Reduce fd load in Winbind children. + Avoid a potential 100% CPU loop in Winbind. + Tune broadcast namequeries for unique names. + Properly deal with exited winbind children. + Fix dup_smb2_vec3. + Fix return check in nss_wins.- Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).- Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).- Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).- Package static libraries with 0644 permissions.- Add Requires libtalloc-devel to libldb-devel and libtevent-devel.- Rename libldb0 to libldb1 as 1 is the current major version of the library. - Add libldb1 and libtevent0 to baselibs.conf.- Don't call the suse_update_config macro before building lib ldb and tevent.- Update to 3.6.0pre3. + Listen on IPv6 addresses with IPV6_ONLY; (bso#7383). + Fix wrong output in 'smbget'; (bso#8066). + "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or vfs_acl_tdb module; (bso#8083). + rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null; (bso#8088). + setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099). + Fix the build of 'smbget' on HP NonStop; (bso#8106). + Fix build of tdb2. + Correctly detect and deny symlinks anywhere in a path (not just the last component) if "follow symlinks = no". + Fix timeout in rpc_pipe_open_tcp_port(). + Fix the build of "--with-profiling-data". + Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470, 2471, 2478. + nsswitch: Add 'wbinfo --lookup-sids'. + nsswitch: Add 'wbinfo --sids-to-unix-ids'. + Fix smbd with the async echo responder. + Fix the build of vfs_gpfs.c. + Add a 10-second timeout for the 445 or netbios connection to a DC. + Many pthreadpool fixes. + Fix transaction recovery area for converted tdbs.- Add PreReq permissions to the krb-printing package.- Remove _libdir ldb and tevent from file list. - Explicitly state not to bundle talloc or tdb while ldb and tevent build.- Always use the actual library version as part of the package name. - Exclude shared python modules.- Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).- Update pidl and always compile IDL at build time; (bnc#688810).- Update to 3.6.0pre2. + ID Mapping changes. + Implement SMB2 support. + Add an Endpoint Mapper daemon. + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Quota only shown when logged as root; (bso#7080). + Fix printing from Windows 7; (bso#7567). + Retry DNS updates when connection to one nameserver has failed; (bso#7690). + Unlink may unlink wrong file when hardlinks are involved; (bso#7863). + Fix 'nmbd --port'; (bso#7875). + cmd_spoolss_deletedriver() returned without checking all architectures; (bso#7880). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix cups pcap reload with no printers; (bso#7915). + Fix bug in chain_reply; (bso#7917). + Fix problems with "kernel oplocks" option set to "no"; (bso#7928). + Fall back for utimes calls; (bso#7940). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let winbind try to use samlogon validation level 6; (bso#7945). + Sgid bit lost on folder rename; (bso#7996). + Fix getting username in 'net rap session'; (bso#8009). + Fix inode generation so nautilus can count total dir size correctly; (bso#8010). + Use jenkins hash for str_checksum; (bso#8010). + Add explicit configure option whether or not to enable dmapi support; (bso#8033). + Fix smbclient segfault with Cyrillic netbios names; (bso#8040). + Fix file creation on OS/X; (bso#8042). + Add "--option" to 'testparm'. + Fix crash bug on smbd shutdown when using FOPENDIR(). + Ensure we don't return an incorrect access mask. + Fix bug against the new Mac client. + Fix leak in error path. + Fix error where Windows client spoolss returns WERR_INVALID_DATA. + Fix a segfault in the krb5 locator plugin. + Enable sharesec for registry shares. + Fix memory leak in "security=share" and "force user". + Add "net idmap check", a check and repair tool for the id mapping database. + Add new 'net idmap delete' command. + Fix segfault on missing input file in 'net idmap restore'. + Fix 'net usersidlist' not to skip every other user. + Fix potential crash bug in spoolss_PrinterEnumValues push path. + Internal restructuring. + Don't wipe out all printer drivers when only one should be deleted. + Fix winbindd_dual_pam_auth_samlogon() for NT4 domains. + Fix memory leak in print_cups.c. + Remove duplicate cups response processing code. + Follow force user/group for driver IO. + Initiate pcap reload from parent smbd. + Reload shares after pcap cache fill. + Fix numerous Coverity IDs (2041 and others). + Fix a memory leak in check_sam_security_info3. + Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable. + Make "net sam list [users|workstations]" list only the right things. + Fix a potential memleak in secrets_fetch_trusted_domain_password. + Use the right credentials in check_netlogond_security. + Add support for AF_NETLINK addr notifications. + Fork multiple Winbind children per domain. + Fix a deadlock between smbd and ctdbd. + Add 'wbinfo --dc-info'. + Make "nmbd socket dir" configurable. + Fixed valgrind errors. + Fix a memleak in receive_getdc_response. + Don't grant SEC_STD_DELETE always to the owner of a file. + Fix segfaults on addrchange errors in Winbind. + Allow machine accounts as members in groupdb. + Add IPv6 support for the endpoint mapper. + Free unused memory in the rpc server. + Fix possible segfaults in svcctl server. + Fix possible segfault with client_id in rpc server. + Add a 'svcctl shutdown' function to rpc server. + Fix a resource leak in net_afs. + Fix a resource leak in smbta-util. + Fix possible resource leak in net_usershare. + Fix possible resource leak in 'smbget'. + Fix possible resource leak in 'smbfilter'. + Fix a possible null pointer dereference in smbd. + Ensure we send the direct levelII oplock break to the correct fid. + Fix private libdir and codepages paths. - Add RFC 3454 to the vendor files.- Fix idmap_tdb for big-endian systems such as ppc and s390; (bso#6901); (bnc#675978).- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).- Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.- Don't crash when publishing a single printer; (bnc#643119).- Carry error status in printer list IPC message, do not refresh printers if cups is unavailable; (bso#7994); (bnc#675478).- Define the libwbclient packages ahead of packages with a different version.- Use %_smp_mflags for parallel building.- Update to 3.5.8. + Fix Winbind crash bug when no DC is available; (bso#7730). + Fix finding users on domain members; (bso#7743). + Fix memory leaks in Winbind; (bso#7879). + Fix printing with Windows 7 clients; (bso#7567). + Fix 'testparm' return code when EOF in encountered in param name; (bso#3185). + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Fix "Your Password expires today" message for users of trusted domains; (bso#7066). + Fix maintaining of users' groups via UsrMgr; (bso#7262). + Fix 'net ads dns register' in Windows 2008 R2 domains; (bso#7356). + Raise debug level for "reduce_name: couldn't get realpath" messages; (bso#7409). + Fix updating the time on close in vfs_gpfs; (bso#7498). + Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'; (bso#7594). + Handle Windows 9x adddriver calls without config file; (bso#7641). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix memory leak in the netapi routines; (bso#7665). + Store unmodified copies of security descriptors in acl_xattr and acl_tdb modules; (bso#7716). + Fix incorrect unix mode_t caused by invalid client DOS attributes on create; (bso#7733). + Apply appropriate create masks when creating files with "inherit ACLs" set to true; (bso#7734). + Fix "dfree cache time" parameter; (bso#7744). + Fix a getgrent crash with many groups; (bso#7774). + Fix requesting lookups for BUILTIN sids; (bso#7777). + Fix smbd crash caused by expand_msdfs; (bso#7779). + Fix atime limit; (bso#7785). + vfs_scannedonly: Switch from mtime to ctime which is more reliable; (bso#7789). + Fix copying files from a SMB share using Gnome vfs and SMB signing; (bso#7791). + Make Winbind recover from a signing error; (bso#7800). + ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb; (bso#7812). + Fix "force group" with ntlmssp guest session setup; (bso#7817). + vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835). + Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841). + Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842). + Expand the local SAMs aliases; (bso#7843). + ntlm_auth: Support clients which offer a spnego mechs we don't support; (bso#7855). + Fix 'net ads dns register' in cluster setups; (bso#7871). + Fix 'nmbd --port'; (bso#7875). + Make 'rpcclient deldriver' delete drivers for all architectures; (bso#7880). + Fix flaky Winbind against Windows 2008; (bso#7881). + Fix SMB session setups with Kerberos against some closed source SMB servers; (bso#7883). + Fix stale lock in open_file_fchmod(); (bso#7892). + Fix sporadic Winbind panic in rpc query_user_list; (bso#7894). + Don't set SAMR_FIELD_FULL_NAME if we just want to set the account name; (bso#7896). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix connections from WinCE; (bso#7917). + Fix opening MS Powerpoint files; (bso#7940). + Fix endless loops caused by inotify; (bso#7942). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let Winbind try to use samlogon validation level 6; (bso#7945). + Revalidate the pathname once re-constructed from a root fsp; (bso#7950).- Require a particular library version even if the major version is part of the package name. Using the same major version does not guarantee forward compatibility.- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).- Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Disable separate build of samba-doc for post-11.1 systems.- Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460).- Do not require a particular library version if the major version is part of the package name.- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems.- Abide by print$ share 'force user' & 'force group' settings when handling AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936).- No longer force activation of the cifs service on post-11.3 systems. - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems. - Move the cifs init script nfs dependencies from Required to Should.- Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845).- Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842).- Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936).- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).- Don't tweak with baselibs.conf during %post if not present; (bnc#652620).- Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).- Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux Enterprise 10; (bnc#652620).- vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835).- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620).- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620).- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620).- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620).- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).- Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620).- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).- Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719).- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4.- Add the _build_arch at the end of the vendor version suffix.- Provide and Obsolete samba-gplv3 to replace potentially installed packages.- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4. - Do not package libsmbclient and libsmbsharemodes.- Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578). + Fix "admin users" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541). + Fix 'smbclient -M'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba "write wache wize"; (bso#7715).- Let startproc wait for nmb, smb and winbind pid files getting created on post-11.1 systems; (bnc#520036).- Include the reviewed french translation for pam_winbind; (bnc#499233).- Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755).- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).- Fix baselibs.conf for libtalloc.- Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218).- Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304).- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS.- Complete fix for trusts with Windows 2008R2 DCs.- Fix authentication dialogs when connecting to older systems; (bnc#632055).- Adjust position of conditional ldapsmb %package and %files definition.- Create the /var/run/samba directory on the fly and package it as %ghost.- Fix preexec scripts; (bso#7104); (bnc#632852).- Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient pkgconfig files and BuildRequire pkgconfig; (bnc#632770).- BuildRequire python-devel for post-9.3 systems.- Only create precompiled headers for post-10.2 systems. - Remove mkinitrd scriptlets.- Add vfs_crossrename man page. - Call make basic and remove conditional proto target. - Increase libtevent version to 0.9.9. - Remove wbc_async header from the file list. - Remove remaining cifs-mount pieces from the spec file.- Fix printers not auto loading with registry config; (bso#7280); (bnc#617153).- Update to 3.6.0pre1. + SMB2 support is fully functional despite managing quota using the Microsoft management tools. + Internal Winbind passdb changes to use samr and lsa rpc pipe to get local user and group information. + The spoolss and the old RAP printing code have been completely overhauled and refactored. + The SMB Traffic Analyzer (SMBTA) VFS module got added.- Intilize workgroup of nmblookup as empty string.- Fix net ads join when using parent domain users; (bso#6364); (bnc#630812).- cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246).- Fix "Too many open files" when trying to access large number of files; (bso#6837); (bnc#619787).- Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends "raw" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with "sec=ntlmv2"; (bso#7517).- Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product.- Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935).- Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927).- Update of the SMB Traffic Analyzer v2 VFS module- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697).- Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via 'cupsaddsmb' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on 'net conf import' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via 'net rpc user password' command; (bso#7417). + Fix 'net rpc printer list' command; (bso#7418). + Rename mod_name to module_name; (bso#7421). - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler. - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423). - Winbind not working over IPv6; (bso#7341).- Honor "interfaces" list in net ad dns register; (bnc#606947).- Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049).- Enable the build of the idmap tdb2 module; (bnc#600822).- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.- Add "net conf import" error messages; (bso#7378, bnc#598189).- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).- Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in "waiting for connections" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it's own domain; (bso#7295). + Fix segfault if hide files or veto files has no ".AppleDouble"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix 'net share' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with 'getent group'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix "printer admin" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make 'net conf addshare' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316).- Add SMB Traffic Analyzer v2 VFS module.- Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868).- Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215).- Fix tdb validation for offline auth; (bnc#587014).- Fix "printer admin" functionality; (bso#7255).- An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642.- Ensure to have a valid talloc stackframe; (bso#7251).- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).- Merge missing pam_winbind message translations; (bnc#499233).- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package.- Fix join of Windows 2008 domains; (bnc#567013).- Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683).- Fixed libldb.so link in libldb-devel.- Fix argc handling in net_share, making the command "net share" work again; (bso#7203); (bnc#584253).- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix 'net ads dns' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).- Update to 3.4.6. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first "uid" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for "ldapsam:trusted". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when "ldapsam:trusted = yes". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when "ldapsam:trusted = yes". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.- Update to 3.5.0rc3. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix 'smbget' error status; (bso#7069). + Fix build of 'smbfilter'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new "nmbd bind explicit broadcast" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix some wrong newlines in de translation strings.- Take extra care that a mount point of mount.cifs isn't changed during mount and don't allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).- Don't invalidate cache for uninitialized domains; (bnc#538923).- Signals are processed twice in child; (bnc#538923).- Allow forced pw change even with min pw age; (bnc#561894).- Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).- Fix enumerate domain local groups for primary domain; (bnc#573813).- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).- Build libtevent and libldb and put them into separate subpackages.- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + 'net', 'smbclient' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing "badPasswordCount"; (bso#4347). + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202). + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in "trusted_domains"; (bso#7037). + Complete and improve some German translation of 'net'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with "dos filemode=yes" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments. + BUG 7043: Fix crash bug in "SMBC_parse_path". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.- Free unused memory after a packet got processed; (bso#7020).- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).- Update to 3.5.0rc1. + BUG 6837: Fix "Too many open files" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when "mangling method" is set to "hash". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the 'net' command. + Fix up a share type translation and translate some more strings in 'net'. + Allow to call "pdbedit -N description -u user" without specifiyng "-r". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in 'net ads testjoin'. + Add some German translations for the 'net' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone 'make installdocs'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix "UID range full" error in Winbind (bug #6901). + Fix multiple LDAP servers in "idmap backend" and "idmap alloc backend" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display "none" in 'net rpc trustdom list'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix "Too many open files" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix "map acl inherit = yes". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with "mangling method = hash". + BUG 6967: Fix 'net ads join' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix "mangle method = hash" truncates files with dot "." character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).- Add BuildRequires to fam-devel; (bnc#564260).- Prevent winbind crash; (bso#7014); (bnc#566119).- Fix processing of open modes in POSIX open; (bnc#530683).- Add baselibs.conf as a source.- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: "Too many open files" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on 'net ads join'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing "strict allocate". + Restore "fake directory create times" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate "write cache size" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.- Give the user a chance to change password when password will expire soon; (FATE#302414).- Rename smbfs init script to cifs for post-11.2 systems.- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165). - Simplify the winbind package %pre script and suppress stdout only.- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring. - Remove using_samba from the doc package. - Increase major version of libtalloc to 2.- Fix kerberos refresh chain; (bnc#546162); (bso#6872).- Hardlink duplicate files on post-11.1 systems.- Add BuildArch noarch to samba-doc on post-11.1 systems.- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a "hidden" parameter "share:fake_fscaps". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if "aio write behind" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don't fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.- Let smbclient show special characters properly; (bso#6829); (bnc#544204).- Don't fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).- Allow winbind to ignore certain domains; (bnc#539506).- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix potential denial of service; CVE-2009-2906; (bnc#543115).- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix unresolved home path; CVE-2009-2813; (bnc#539517).- Don't overwrite password in pam_winbind; (bnc#515444).- mods for winbind (when used with squid - ntlm_auth) o winbind adds group 'winbind' o permission 0750,root,winbind LOCKDIR/winbindd_privileged- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified "net join". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix 'smbcontrol smbd ping'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in 'net usershare list'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix 'force user' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix 'force user'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don't require "Modify property" perms to unjoin. + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with 'passdb backend = tdbsam'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the '/' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to 'net'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).- check in .po files for pam_winbind; (bnc#499233); (bso#6602).- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).- Update to 3.0.36. + Fix Winbind crash on 'getent group' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on 'getent group'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it's an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don't install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don't try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build./bin/sh/bin/sh/bin/sh/bin/shlamb07 1554748019  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijkl4.7.11+git.153.b36ceaf2235-lp150.3.14.14.7.11+git.153.b36ceaf2235-lp150.3.14.14.7.11+git.153.b36ceaf2235-lp150.3.14.1 ctdbctdb-crash-cleanup.shdebug-hung-script.shdebug_locks.shevents.d00.ctdb01.reclock05.system06.nfs10.external10.interface11.natgw11.routing13.per_ip_routing20.multipathd31.clamd40.vsftpd41.httpd49.winbind50.samba60.nfs70.iscsi91.lvs99.timeoutREADMEfunctionsgcore_trace.shnfs-checks.d00.portmapper.check10.status.check20.nfs.check30.nlockmgr.check40.mountd.check50.rquotad.checkREADMEnfs-linux-kernel-calloutnodesnotify.dREADMEnotify.shstatd-calloutctdbctdbdctdbctdb_diagnosticsctdb_run_cluster_testsctdb_run_testsltdbtoolonnodeping_pongctdb.servicetmpfiles.dctdb.confctdbctdb_eventctdb_eventdctdb_killtcpctdb_lock_helperctdb_lvsctdb_mutex_fcntl_helperctdb_natgwctdb_recovery_helperctdb_takeover_helpersmnotifyctdbdctdbd_wrapperrcctdbctdbCOPYINGREADMEctdb-etcd.7.htmlctdb-statistics.7.htmlctdb-tunables.7.htmlctdb.1.htmlctdb.7.htmlctdb_diagnostics.1.htmlctdb_mutex_ceph_rados_helper.7.htmlctdbd.1.htmlctdbd.conf.5.htmlctdbd_wrapper.1.htmlexamples20.nfs_ganesha.checkREADMEcluster.confexternal.conflvs.confnatgw.confnfs-ganesha-calloutltdbtool.1.htmlonnode.1.htmlping_pong.1.htmlreadonlyrecords.txtrecovery-process.txtsysconfig.ctdbctdb.1.gzctdb_diagnostics.1.gzctdbd.1.gzctdbd_wrapper.1.gzltdbtool.1.gzonnode.1.gzping_pong.1.gzctdbd.conf.5.gzctdb-statistics.7.gzctdb-tunables.7.gzctdb.7.gzctdbpersistentctdb/etc//etc/ctdb//etc/ctdb/events.d//etc/ctdb/nfs-checks.d//etc/ctdb/notify.d//run//usr/bin//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/ctdb//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/ctdb//usr/share/doc/packages/ctdb/examples//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man5//usr/share/man/man7//var/lib//var/lib/ctdb//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:9994/openSUSE_Leap_15.0_Update/73796684b3df98adc72811b48d8b92e9-samba.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linux  directoryPOSIX shell script, ASCII text executableASCII textemptyELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=f8214ebe0f08d8806681e330cd71972ab0335476, strippedBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=c6a7c6e50fff064aff03252ebbcb4173eff028ee, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=4169503105cf5e427a25ddfbea84fe9910f0d238, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=52f5b0b46acd8f7056c9630fd2f23bd69940505f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=f0f1d8576adc629e712917eb3f4db40ce7c60030, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=bff6d010003b975d576f6626101e8877260909f1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=20e92a46bb77f450d5281b1f581a43c567596af4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=3871496bf3697130bca034282b3595193a984a36, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=bacb42b9ae67e221e404a67bbc95fe078fcf6650, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=a4a65021831fc3da914b1d83082b5d470b60fc6c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=834f12a4a2c87831836ad10daf93036251021480, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=b627a9bbdf354e3ff8b0a76b0043672232f938ad, strippedHTML document, ASCII text, with very long linesHTML document, ISO-8859 text, with very long linesASCII text, with very long linestroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix) <=>GHMn I# !#!!)RRRRRRRRRRRRRRRRRRRRRRRRRR(R R1R9RR"R4R7RRR&RR/R,R*RRRRRRRRR'R!R0RR8RRR)RR%R2R RRR/R*RRRRRR)R RRRRRR R(R R1R9RR"R4R7RRR&RR/R,R*RRRRRRRR'R!R0RR8RRR)R%R2R RR R1R9RRR"R6R3R4R7RRRR*R&RRRRRRRRR0RR!RR8RR)RR%R2R R R1R9RR"R4R7RRR&RR*RRRRRRRR!R0RR8RRR)R%R2R R"RR1R&RR R7R*RRRRRR0RR!RRR)R%R2R RR"RR&RR RRRRRR!RRRR%R RR(R R1R9RR"R4R7RRR&RR/R,R*RRRRRRRR'R0RR!R8RRR)R%R2R R(R R1R9RR"R4R7RRRR/R,R*R&RRRRRRRR'R0RR!R8RRR)R%R2R R;RRRRR:RR R(R$R R1R9RR"RRRR&R5R4R7RR.R+R/R-R,R*RRRRRRRR'R#R0RR!R8RRR)R%RR2R RͲl%}Xutf-823b14b8e9dae2c1351b0722e99f37c3b8561fd098b20c3e665331b69418230e0?7zXZ !t/qL] crt:bLL :MÇxST-f8T^T!`]úJǂ{Fd:vQƖ{ĺ`N\#ѱdnbS`|A1q3tSf釢Q"hŘ͏*TN n( DE=̃- Íw@I0+3Wv {[#Ntſ.ښV+.scBb;3e*jaşao~RqBaHTA݀IŪVj\/Bɖ Y+K+UǏ"~h3/wpeszVt}rٸ=m}Ѝ:n/*];=2K?<f-dӀ4X[0t)FRyY(Mb V)P*<(rԾir~%>!<%ܙ'2ZSA= [qz.[t V2;p?=~ƺ"7k>y @R23e $'R1!%Q2>&K n(ʓW$  1bǀ3ا~%NjQ7[ rlr%O|TbF,Mw+Go7&ove^,֑]'CvC~(,FBoR3N)j]Zr޻$ ƙ&agnQlS,gUyόEV?ݗc$.Sjp4q`RL{j-Q-ҰWi+DKE)3da$H/Ξ VXzpT[y 8pE&( v##Go.,d& W:o$XuVLMUJئ&V%U6Sr^& w \j ^xkf;Ar?)!#T/  򦧂 ,lDR96UOSǐƼGQz?H+fԈdž?yl;+vlc=2MqCW[oI'\S |€ˠ~C7{HXfpl+ݳ "g^:ylcQo興927)v9@P.0ki>?"xS\c"m3kw)s6P8!<v lfoʶ+G`h7~d :UXlu*xgySĝS"ak|";OneX׫'M}QG}} @bW)!1T5utNl].۫9SFF#w9d 8XJ [D?["B.ljxN: lusNR>i:&t!1S%D< ycEaZAIm{w]!{܉Ä,GmӰݢ5K'/gއdlP>4:=C Ie]5omNQρ@ ƥ&ʙGq@x#Bb<77sf qٓ 8FN; nE x͂Yf ;LQ:yθXl$&H{qKTWrSU+$)2 SsSo'@z؀8kg~ތ@|깒iEȊ:TK˓%Z!2nф4ZWF 8݆с!Gӗ / 3v0}Zٲ`OIB{cQU5tKp9.n^g7!䟔s[i@.{|泥5sn3w5W1!0m'g*ߊdw.ۣ~_N]:K%Gu^eZ/%PE`g) ݫI HW] }aQ';  ^S߼BG[J7|zR)zS ,;9:Rs?O#\~np`ۧqRA2}YβG67Doސ%\FVhcN}`"_2j93|h 䌁i[vğf^nD ٱ"^""O[A(V>7RGSCwIGU{u (;K ub[C36|"idqAu[ $l\viDp{N f9\o=!9Acm|]eݪE2\V y,S= sw~%/6BvQ[<  Rt=3͛D2!NB7Gi𖪜ތy}]t 7[51"Y`UQz&ic}M,÷Y01ʢQw܏zfAA҅<*ilkC86qeMVwòT]52`;!gZ@/FKrcLLl'R x=S{MX6s:tVPԗAڍUI ՓboT~c^(ipk/v(;n T > u.6TbrgL:&^W֙\,o46nՓ Cv,<%I~-xv0ޠѷy!g x܆f  WЧR&vʦJ?[zgǍt4?uF&#eAt.q2WV ROn]]H\ШɌ##'0mԜ+udc!⿷۪|% 9K _:Rz@ ȧз$bD"uS D KW4G%}k3s3|*O ICKHċHp>U>}7=&$ }wemBd`3 P?.TzFyR#|&f٢_.u$9"q԰/c8Y:S GEp9O"^3 ߉4Md gy}.7Vқk=(5D_-+"wDy8\R)@}JgF:U`yM}(Χl"ߍc{4sʻK9TBt2r6%dp>B\L+I.m{\q A:}(V w,;Y* F)Aܛ`Gr gu[f@wblڏjY'ê&'^s;BC|wuSu57^îmd׿d= kኁuJbrw7Ʃ 8 7XF _w!o嵌UdZ2 )/ Vd2*O|T/s^bGʓ4%@my0@GMx(Og&qNX eD(ȟjzᘔ-"nh"}~սDq8+I21.EM:gpB4wvj9{xT|r~8J] T2 f"D޴#q4#$^=sC[XT)W_ YE{<]z:v&慙a⌖o/X) M#> 9~πR@Exג/?8Bc ֔h#30%\N)}%g܄RբүtƙPO椅;$ZJ -BzBK9n4dBZ>QYoؔ)z39B\{?}w{^iRoVa̎.xʣ#tݬx6`j(zI8))]*tيd27 V|)R޳6hٍ2HuD..o{VZ:g(NX;%{,qfŒmHN/l&AJϟR8PH=vz%A!K=<=dQtif s]K"aKҧ0w:tKMYd0- AIFF,Bu?]#/p5W1fh>]\I;N0=+9bPH)$S; 9hIm)wM8kY>z2 )Db-(HT.qlL?;g8 Ao9IF*bV䠕TX2NyūĀ{ogn[LfUspԠVl7o|aS(8d /Bǟ O6IV3C! b^}``v 60s o4cqO]W)قk0Mz~>paϽAtKƞ370Z!R]Ap<-#x(xQv״`}63}&2q>;P<=dx؃S ]{mOiwY3O쎘$ $Be ޤZHat jcl' s5 D!XVN ('Q߃ XaPpuH8>Llj{2t _.^oOEy`E]4*?W:b$<A{\gSrn#[cD٢9'O>1,ޥDU&S;)Z3J̯Ybsh|1_I$6ጚVڑG-A 5N/ϔiw16;A `lԡK[B]6*$ 2]fHޔyE$sZD9R31@z{"KEfq٩P$'cFtU@L"6Kߡ=ojtߠDYnH]0o,"q/ы)f1_a5-q*מg )wMf+ l8F$6axsck J;ncssÅkߣAR53h;6xY1CzR$ ۚ/|3rSb>x!fY%@*WdlpԷʷ0j@eUUٹ5Oz6!iV^Pv=Tu"9{eQC::vvoUታeb@B@ 7%f Z̴yha8TxPZs'J((W#YĹ S/wj%R{8Ӆ26,c๧a6g m~1nS:pHkTg(Wc;)J\Ųkԗ6_gX`k2,\l% Ʀ* FuT佤x&2Vj(3)6-ҦW_2bYl9tko)<zuvj Sę[-o%h9E6`]_OGBI"@y阓OLCge@;=f06R_K m|OZQ!/׽3ȢC-MKT "IźyvcN*Bf¾0HأZ5@ZvuSGUF7;A W\`Ϧ`om Ȓmg@$cuyR$.ӣtDw tm,ƮØHJ[Fy'g$IpNd[PVӋl12tk݄**^LJ4̓;c)&+yȓ!;Y<כikS8'dRtJ: z%[KJ2p8L353{eZܬ{ЫWKL*d "[! +㨐VCޙԙTg nh=  xIgKk䊱VʉqcGX;wab|)ZRO˛8-l玘Ϟ)ʸ܋i,+;޼6(d-o2EO9P`Umu'ƔOjɥp"VeY =dN:՚: 6Z>2i",mV9Ӥm_ ZpGQ&.V]D\t2eSl$@`[S7N)̹O@~䏟UAw%r*n sث$'mc"زd | <2 i4tuW2v z?zbl}EkW,}a>' n+JJEGjjF:VNgyFl͑ `<_6k6̣>48.Kpp=#cbX ի{QS-F)Xvݻ8hE\1[~#_ȳp'dc .@Tsm@v?%|i]e`iI³"TaƧ]yR;f0Q-; –U$\k ?*/攥O\Y+J ͺAߐw_6[v,ܲz;c]T?C.ـd|}_x-l}DA=hpv%M0ua> [s~A yDNؼjiJ盔n[MSfN;$Xv0=|Gj ww/l"A2x l<V4Xst{u(GM,`XGRә+{`GG4ZAC i z]殮6oۗ^u7ϑ^RQ/*(lJ?"&E!hɥ٥,z[/#͕M.o)ZG+SJop: ?뚘J8&r5F~d|;g\BF坏 L݌е-> ^t ~\KvxX7Ǵp=!nGX ͬ:NVl~"T]VQHe+Ds^hf}n[ X;PDy-ҭ#!ui.`N9҃%{ `?pj208Ų3*s_љo FQeqn8)"`[@Wl':&MG_A, !O޲KL#mTm}cʲDL'9 ls~_dRy9R1t Ψ[uD7T~ݴD\p끤i.\aS#85R1ӊ#:Ex9:ہ?{$F+dD\ۺq}Ĥl6\S&f~&ܷLg4ɀCKGY6i\Bʘk*I)*R#Ӷ{ V  V>nTj  V؆#Wef+Arif%FuP~ֱN Im&{A݂Aco-wQꝳ4J180F>XpFq$k#8"r1HGjy,@(tRo @bAHU+6"&bIEIIy6psb+Tm"?c~C>,K"||`mOm٤,^yܹcYliHN8Đѩ5IFea49%p2-_Uc7,??-=1ۃju=?笮)Q6?>t8A(tIJ>Rz8tpf<̍ rJT4D/pH8pNG7 srVAXf8A< B&Y*FLeM8艽?PrqvܲbΏr{)ږ>L٬>iS>64;h>t A/&(/ΏNWϙչy{-iRY-)8wPwH _*I=&<<j"ΉEpL:wVFOpO^u;Y ҍ!W#6TaSB_`quX/#OR)cpRh/]:GZFWC 1U ~(VrtQqoC;vߺ6we8-"wLQH4d9JJ%UvE[|֮hi}![_8H-'B ]AoK[H_u}n/MBui4 u %$7e(ChV,=!!]"S9ԁ)Xxr}9{Оwp,&'"ͯdO?>쵼59Nұ@!P4=w dAHc+*`){(Lr] t#ϭTH5M9/#DX}6UaoSӾ$iɶHnOmzr1" V?zoTf 7Ne9GϤiOWHcX1k9: h!7׮0 /HRMSY Ήa!2m$1v fSsg5 x}!$F47i&dHH'ԹVp+`n~/at#P%:2UƠJꯆ{b:njɂH&mnOW  KUq`2v tx|3y ū$H_s 揥1@$Lhn2 PN #Vxe0DYv>Uc]ȃudFX#L ʾwf/>Zx"3*p"948JF*Befp&b&#a8ysg :<nQ7m罺Ph 6^aTId˃vY nXe ?[o.PϺ[4l}Kt)dszqkEҋ()65 y6 M^ ]23dJ9t*>b]O47l'=G)w>;,Yz\I ""u5~ICzѡ>t!BB (Yks[{yGYL[ EJ }sgDtU|iYovDE0zMA_J6ٵ|ѫ~w0߳{%X@?Xj7[ KZĺ|!s_'r uwPg-"AwTifZ;8)PShg={R݄pQj~F \mK,vA`P&ET?.F({ʇ1Jzp w*/܄ʄ`M9Ah f,dhnnH32C"F\R\/NQ Gax"\^񡝻lw--VOk7IV`(18axlgEq>/5X֍D['M25flw;p NIǵ%ɀ Elw6/h#=Z{iB;z0Df(tp:XA^/!2Duw1Iwz.$7v[BHÂ(".jRlm"zlnGA1FxBrbjQ?Fy1C!p5}_ï.t^dU_J*nX~+cZEԡ ' @5-u%&[Z1̫mwO#tN$ޙuS@ +4=ucjzD! ;$=G?5"̕#^䭅d;46!؊ DinԦL]!0[E5"_֏c47/ [/L%lЁA}PHVאIJQվybw*ΕAܷ]@aP@-K0ru[ӵ'yzYZ՚k1w77J& ܒ81MW;R3JvwnA p^ ?[Fr<1H4t=KiLqA"z=iG&tТEoy`)|}?t'"H=KkMҮ8tkoM^"p g'5̲N fyw43lɨg ђ=xIo%:Q QȾװKѶs4\͹bzm$-jԟ]Tk ,ӓ]W2@<(n.2,Pð2 q }Ag1!\wx+G̡~)J9H00eL` KmMRF7:7[Jhҫ=I#Xb%{J~5ΠQ/2jib"InIW=wӭoF߇`r7,'dKUFY)Jytor l=L 2|Rʲ[ 1Ix\$:}=PC ZK=O趴Εp cJ"$Yh!ȁIG3J~ ,M1j)mⳎ]_4" 8^* Bqޥ9S1/Gq!tNIcۛ%< U6Nx#ɥjv_ U}H*6߹Kt;k'?2(7@pղ82d,5"f"Ky{j%g Vr~YMp`gd y%ăac48?ne 7{|:=GNI|uUH2z;D MA{_3H\O>1ɢ>p9mv}M)-ó&qv"O?Eh-[oZ:|S2Ƹf]ld;>mn#Jr}A\9s1D#sIA8hUDHXm څFuIӏ_a(~î-5dr}坣 eXH^2aEҮqP Th'z9pG ms@E hB$1{gR{;%!P~ lB3g~źL_,=-EL0D-+sG}\uQ8ihlwVY ā[m}bOT c y;h 1Sk<+[zEj(^uW)&Znwz Pŭ # hC ?5`FM_3Ui[XuҘGQz3uۨTGnٗv6" l+>MY׻p&Rz^/OHuy+ [ם! {B/IH'aí<]z""t &iҧT*_;n}9{4UPD8ym[rAE р}'$&,g=D:DlLjL;d1CG*^SC9mp}_]{7pe?b6scNeiյ0)>.d-}|"-iJD3xteC"2;,o֚nc'P0 UعX=OT2aN,,Z<ڛr`JuSLHQh.Ѝqzi"s Pifq g B\)_}y ﳃXC*P_"&B[K ND(OW 9OnɃy ȼ-%*jƉL| Ւ[u=#&O |Qc"*TfeNߟC#6PcNdւ>>}߉sطs\FkJ2L@nr\3{pJ藼ڃ=K0Yr83ҍoss1_t$gWW+',z?.\vp?!1"',H)~"Ja9zj~.;'85wjy|Vn4ґz}1Yϖ}EONny]J@)+py@dGځd2+LիC^<ƒka؛[6X|wjz lT5y(pM.j4H}rYB6'h'z;v@ d-by!-aw5 e"ʷ{-gJ킳:x[lYg}]xqh +$-I8[17bmCfDz3uUEb MM{̊Fϣ:VGMT^8BºLĦ\0{v1Ԉ~-R 0~(?^ģX`5hPqL>2[2Q=K-~Mְ6E ʏ1(2z57U> K,&>C;ݕDPd',@ØQ ~gɛg9GpHor.S)?Uy/S2 t猯Y/QNǠlHZ^Ѱ;?v0&+W쇔9k~֝fގ7$R)4ETPdr`}ROcb5\@QOTpk:ڤs+A/D#~x4-Ly2Ԥ\1+k>ZL1fbO7ָ'#bj/qh̰PC=fvTq|R{a5kcG v37O0cdX,{5lѵ 0XG?܁r҂pv4!9( Xߌ尪B?HxhXTG۔zd6EF^#đ  2mٸl%kȡv.PlC$tG%R6NR]ôNV!q o|$攒ׅVʓ:m>CjU]hu^s n最fAJw~&$ O3 j=WY yu * 0O;Asl`*l'|(H eVnhp0Z,6(9yܭqWUJ2P/#T1͈YQ={)klJ&TU2P/HDܿ1>P*3TQf<uAfE1Vh:TX|Q.UYE@N} 7ţ(^P&Zk dž[fĒ}NS;.lJsH~u$UYǃNJtO.}4q3mG;t,pq!+$kڇFa%FMcw֑g*@ 4А7MyH(fe  W;%N:zl)1+8P:0e;LW~'NaD_ nlsFKîXEz_|f#?!b}7?|M;0Q$rANy,KDBw[9hZZ /JH(]t1Ҵz1yL9y־Oz/2!+j9k&t;/4v=1Lj>on"(GcOEZ%)O.\h,ˬ?9ef f]gIb}BRs#{{W"(vP܊TO:^|{?Q)T]M Q[YO\!t /9fεV'aBygXoM6LHxSs'NaUkϤeodU7zmon׊Vl͉Ց~ߪߡpX2΄ ?ErBϐZ,:ߐ#k#ihS/]>䥍y*sDEUGT>lc[9 M:j Z: zM |%ySB7>F<+i]y@جDmjZ6ԪRaȌ)Q%(%r>b.5xmҚ\xE9W;]6U]tNK:cN!|f ̑ bƑͮ@LJo +҇*ˉqşPd5p숫0(v g0gԣc7xWG/$hvvE>&$Hjc|+y1#v*k u%!)FAnaoC;:cβlXb-/t>!ґ֑ d߉hॷƅp]XM;jWyå qxPEj#7*Xy&6cB{$5B ~&,o~{4?)Ee1s6;v2XJJDžIWqȁ&(=fꔌ@'s.q~bԩE4J&Dt̓;_1j@A&3f CEK@8ظOM@ l#iB3Od8'0V§ G*D)?7,We6TMI} ٍrv`Xh2]؋H/V9@3…nL6cykT-ݵ}uE]q\oGD'm>2f1G/;dHl)ܹ~]g(i0& O[Kxzf>IQ@z6F 8I  V]Hl,=q{kv .QȲfɑM>muksoBZ P?XzQfCD} .9ɹBNԄ/ۉ"4¸6GIj5$YۤHv!q|^ц̩baj7 R]Ehar}IX6)PH&j{hQ%p&g7*ezޔ8q&(pX #8VHv~2[n{Dڐmeڶ7kpi~ /.nza":\5US}S'l?C9&,K4ǿW  X#Pې+M(E-x$'2%!Xe_ԺO C_};-p?Ԁi<7d&h],7bNETZ+psďg8$?Lks<4.a;^; B:`cq W(.gVu+G%jPC36lf8  Rwf1eFьsJ{7p2 a2n*Bw%L6/=k#&W^BoL}yI V~xcu>ygmTOpR6׸>ohX* C2i?fywy.i+Y̑ DFZ9WeɯȞs 8{ݻeh%J9ruoGR)劼"=MOnel;`u?xOpY:_JuxxAg230ߙ*|~%=!U|9XW[3-rquJ;eBi[&j,jJI)QRQQUj:Hץވh$O50AM|qƕCDEOC*++x,BmC/P! (#͗gs ?/ 5`78[ OVd@/ ڃ9eEh H:L=;[͙֡Ð/n5G6w:"A]&;*,@peT=6q`*_Y{s_F60_4 X_? 5Pf.b|Ms!Mʡz~yu D 8kʦ =-֥ F Pdwc^.3:]nиm ?0B}a(xI:#=XRs(՟A򯕟F/凪Xr~o'PfU10_9J !^ .=CT2-lB}F? >#鵅I(0m)4Qp 9xũCy[W3QqՀ@=BTi`0+@`+ 5;T< Q"03>eJ8(ܧc;bp'\S(#餌CQ>THT3{flI r2 # a;^bσKYcobD \xsfAtﻯ>,C&u Idr .@d#V#y=S]^RZ3y19d;['ת07b9`)֠Sdԟ'm#֫KoM'dXϪ?ۻ G+koT1xON:R3cg;rP]\_SRN}P(Hƀi0MC[ܯnG1B,Pnh)WRpĆQ<\c Hi:Iilh ]Ŧ%lY)^ytN_ri✫Ydy4 =hF|]PTWE:9G'7|~t$Ŕ-=HF=-?NC3W5Fʪ*cvr !e@!jtR-vv1LX-홆M̻W_N`ur|I =[Z}uS@n0.ڭ+v\𬖤Ol yO4 =tNٰNMh7YZJd+ Z\q) Hئܷ)R'-m B:v -H#0:w<~rʙ{r$pr,Nuܧ]}9u1^ߩ̚mƉL4#:NndKŇ&BB7X:C|aΧ/5qƘ1DsmU+mþt0Ϣ͊C}~%l_'X dvsdZJ>]9ozqi|.;H=W5'b4$}hdq:_}W>^e >g)?~09mcPA[ptEyVhFpY۬94[4IE/=MԤcs$ڽC߁.JW!sH2 /W^G폁XY?&l)Qyf9R;q n:Ҥ8 _PU R>` gJy5I|B\UK pہ\`_ дy$~tp/:ɊdPvezܩ^ڻyfjZpo'*N2|DR2:TkPUz[[Fhw8N Xؐ5mYd>\B`JYXl`B_yj:7/y1_r3pڴs{tҕ7Ǻp^d9E?PK9d[KJ'܀zQdOT'k]2&`>#¤br}iVfŽ$cC,}5*-G /7Ƨ+6a7!'Upt=iI,s~@%@%#FI?\Bf(MDw`CuSv(e,M%V}KYXWR}ocϗRwymEz&{ /I 5L)]3P#BL`MfH5 bh-J3ܭ;3Ěncﭒ.'H:6cz%˥sغfg@uۀ̊ ŀѳ mg6P8 ZAVw쎻 H5葯h2N&ex≩r`ۀ_(lߦkٞr%w/W+jy%VœTI,&T(p%ͩek-׏㑷9.Jtb1ˤdת' }U9]?_]`ä=JDftE15:^sOPJ=5 Sݞumy*]2# NޠϫɠeT2T@B99zԁ,`x.>y knCwع7CϴvŶw& V!.H/+ , S7}>πddH I'!2ssAEo3@éb8 Ŗ!Q]F%W^a;,qzy"ڪ@ED6&/EJ5.B"%髏Z&x7 l|;fxpEpl^2C ߭O3s/HTQ[60}ƶΥ| ٖ~>c~t|ח%I gpV8:x Ko`8{sR0Ӡa_: TV۠9_C'R*]#Pb{[`+X>(./TCm<}V ПxQ7m+#g ShZ : 6 c>`DL&Jq׃۾)ϖ %$5}O,hm 1/$LYVEz6d$XGUF 5^{Mct7~aHZTQ)m=ڇvw K3DWz&I)ɜ=`Yk[6$ @}Q4O&.zT3> h> <\%P f9jm-ʯ-j:x^fc#?q3`(bCk}#yaOaͰH7Ye`I2!PSr%@~}y [,)^4/0NL#4L2w"J { vPљ~O{@gyq8fC?OVܣ@ieQ0zKhĝRcrhEb b~82P|Ơ?^U)ڛa)4#ՋN ^[i,Kcu03+w Qmj>3~rlՀy شHj 3_\i5u[(Jm@@?{ G?tET'Eua@@?R'xG&'SatkK9AX.:wC3GH_~YY;=.5Ydž%Bf+ӼǍ adg~\`.ȝ1^noM{p3ritP$_yd,Pmw:'ޟĩg xJc.qC ,!.B.U.8-S%Wܪz \r!ŊKL.NCߝMQS B@Qֈl#+k8EH??uG~&뎵Ćد(sq"­-``_{_d#[w7ho+⽋|ܡ!HGJ"n\./I4{C^WZj͌]׊/Nʮ6QӉY?#:~Zɒś]]d9VLPh7_Ӕę.,_?IK/{ݒ=Y V}J vw%~\ -2"Ԇ8Oe'OmQScI` V68g1J>@{Pк80"Iڢ+):oRLz|>ڠ!+`_s&grzf5YAZBIZs#Թ;7(~&?"]eFRT:*JZqJK:a0Q4KW9~6f xRC[q;yI -#5sVYpiVv(5<%@?~\mۙⳉb٣XfW }u CBVVDdb\~ $eX?̴kD t k 9 EV7@Xn2qֳxgsЏlӐ&åso">9l3C@3f^Wl"P)c8 ~!dUuAi ]ɟ)QU>}A6 b"Ib (eщ sXQrމT>,RU5[,@3b+ ݊WK"kta-A5ٟQ†oc?[ uFR|Ŕ}V_5t/vO^) ?#7zSk=}Lfhwr|7j "}f4wO0VˇEkD#vv uW˟>@&Sc(s!ٟ#e( #?sTE)eWP.濫U!6qyG R:iqBtR:Z-x)1:;@p+ANB>/y$r/?;L!EfBsΆ N~29gqurMYjsb4.>UFw뇹gF %@$] ߺSєEx$Eom(!#O5؜WdS'CƱ! FP,`ߍ Dﯓ poPBn޼)WVB!ĦM;BCYv=_?JeߤqZeH9ڢ x,Y[UsV+)?!vlсi=o(Uf / _J,-ɛ+u @a:Xh^n_Օ{sɯ2@9_2N8V;*$k#:YB)*Mros *vixN QھKOk_hc>kYǮ:=c,_ی#j+<]a_<کY'ObVΏ [&4FH U?jT?C6*nIAH=_܁6ph!ٵWw5f,x/}Qwydrڑ>R)!ogF|KMH۹D6F6۞|E'"YU2| }r^dAR߿P OrO9$N꥙F>J,ް-e&-ԧé6a9wi^~C6! [G|u8-P,?md[>ebƼV%qu&5(NeXTMD)V\p1^?wQRQwW sx޻{2wa<37Oc23 fnIJL$,veBL#!x.,b/8dYVv]'&;˵iBS|-YvrxH\ү$`]}An1 2\`ZT= ܽq9hT(cp~R[9kn8յeKsaD(Hvpۤ1y웧̆G-۾e̮٥k3 EOJ8z1&Ǿ9%`Zu_gl\+:"P7Hz$g]7:" Lrng\IjXO̜ ~"# -+ Tv_gsA"vu\ `PL|~e{ixr18f3v?Etً94m-/?!zT6~, ;4UwFxi'?š@30?3bI÷޿M|E~a)hUPK&s Ťr|_aeTjSή(.Z z!zGWny${k6Q)]mMOGdٱ<ܷ)?41os K8)b[DNէg?T_4GP=+:3pn" Jfgф ldVV0釶?N1Nk.j2h!8QNPC/^oN̞UsN6- v)R mcuf1Ϧ(B{t±w6qu,F.086%lJ3B76VWg/Ez4nH&6n²xD R&wvഠ*Ƃe'0t7$ dfFP7E'Nu#h<@OuǦh셝-E%\sSpcR(y"iap6]Zy3[<v,st#6 &f?Q>܂WVKl!8Yexsuz)nt  :'\d/eԖkBnѫ:@_r bcßOגJ_<gČÇv; nLGH%|"5>nI &(ZmK)Kx+4,lg bO,BY?lOҊ!,̣CiWodφ'73ywgڔ#'Kk;~ 5XZUâ䈢NYrT;cR ߥF mlQ䟯C(SBԈX=hfhܞgJ.pcQϛeLxTNvHes[e>V.E3ƱE`@y'U `+em "9,u5Kd;\քGXJ8TZ@s|?&r=JsgD$?s;m/R5dSd{Z%;EAPT)!1c5I^li^tpOJt&qfqT]QoC1f Kފ,+!Z罻PdSX|Ǡ9d?KpI,R>9uf 7Xv9elJQu/Cb_gF]+$9q^]:ݤ-bFeʜ¹ȵNVs;񂢗9q7Y!}_uށ9'Шvrf믯Ȕ${T% I>M}35CR?ȫ,qAk0PKϔ1ڰL3$G !r|m OMiC R0W{h^t8e*%&:ofv*Ȕw7a _5~}N V sv*8/=bF uOJ lp|otVN:ҸaTRI08Sa,QlrT}&' 0{9V6[y!UqQh7zj\KPtx3sqǪ[;˦z Ί߰3XR %TY\AoyyXsa\a! 3ZNoʢ֝ |C EDUrlA zZިU4ǬGtCjs49nE^s \tUHu8Xp%h ^L=t(D!Y_?RpUFyĹ}@rSs??[6-Џ3B'ᤛ&Kφ)Zs> mG/ Ybuzםߞ?b$ԶgXW~RjoRAԊRs?YJ>fTo8LMשqG!&k%ŮD$1ȯsJФ2Fxҵfec,ADsVVwOQ3IEEukmL+i|(9mI1x'GVvIfq A0R|3AP?O|,F1w.@g &dNJi#hx/sC[rA]O&gx [iDlEBC2}2`ִRc1[Zۖ/A\cd>ӝk(HU7"L; 5~ 1\ pT72 E>gYd Kr?_>kia 5D駹WE32.ݎ$ Lkdd* ^@eP'hO76"(16^Єdš`MH{RQ0"MޮWb+ Z= U:Wc /9s*qgg WS (zU$1]_#qorGk<}jEk[״ӈ+X6yx@Swϓ+LwZP{5MD[FuZ^LAhy *k^k31WZ|}^j)gӚb e凵nNY@(6<\b<- U+s՚siwIFe#%t7eԿԟoL ߨܝ!{uAMaGZ'i ň$>{aw:%PɌ Ǫs 74\ B21es;x!֔_{66 nm&B&9l 7fC֎O(ׁRP[{'k?agɃb:Z-Q{3^I#E ȅu r}f$E+F56"sՁgǿt9 s"/.[ Z 4>:>=PHc, Th*T[3D~zSӤ-]|Α\}7SbG,IA n8SVӠ:yCѴøjkk%2~ Wl0pnlO6ϐ/Z{6-(|7V"`]r-F=TsL LQOoNxby~l!ް2}j⽪- guvV?orkt1opϠ۰Y%Qn ϰ)1>-_EV u GjU觾eo{vw9^\oG$U la/ Q$iRGC*u p 2qQY>?Pq=JLB41w]ofT>k4j}m`kwlNQ ,JH!Bo>hCYm\4Z9 xj25[!i%71L3mt[RyxbCrQ\zu"@ H7T8tR#%OޫxڹmO~2OƕV^ԮDM3ɦ򈯠6xivr%}?`^I)2mOПmJ|בZI% or* Њ~w}֡+$ +Iibϛ )_iZ%40^oKHJEܾ+|T s.xWr:K&Y=㷍=53cGX«:jڵ_9lzV\dahVhor/aķO%DGSm;{FV 9=yډN&ioO7] @A:2 ТenNT w16&^^65td;QOH F e|jr39-"1|4't={E(/1NٷGg0%7`o!~4'eނLZlM49V|9-#I)ql9{&e%&wJҤ7ՙ3iv]E`;0"ׂҐY9uBy(ߪy-vk[i#1CRsz0ji ,-"V7N2E4(ke?Ձlqp*̳6O(췁J`h I0x%:zc,OUluex#%DSnt#Je2,u|֐ ΧJ%E!+['΀s4d%J7MM'E9%,Zw1ޢ\(hh?!+i [ЊlyrяFZز1EC264=*궤lWi7qZ@ROL>WOJ,O;OFEЩ+bRHSLjGN=)}@)ZB9*Y$~.X` p+  ^׆qھbO1cIw_WOq> D_/7GԬl`?[^wRJ7$XmǺa`saKʜ%I j'\I{,"ӎ{GEbձMIE=UgZeأLx7寽2@ў$A7W0d(+'Dk[xuB>Eh8LwW^ 6ct5{D4kWKڣws,&HuVXT_zD4Y10M bubng7sfj*@OlsE͊;rv;s_N{l9I!t*1ԻF&YA/A-O丏_Ql!n 'Gu`XF&2JKK}Q6>ű+Bsil) O'd܃ , +[iW1d\LI`Dm,Ea6 ż+%dCu(!,_M\$h ;r8O*r($V W3QшDyNb/qևbr!@~*fEI#jw4=tĄj|5be{+֕x.aݴJESR0o¿Q {Ŝ1`*McZ~!hQ(IAܠ3їB$mI&eǿ]OQ'Nj;6_  HסhYdnJ X(akv6nW,sGTc08xsG24GRg*e4u|fx ew)4/0:aX=>в "ж *(Lu@aep&&vb;/|'r Y1 =sw"AGcA_koini}4OH}ף vI2z_K+/^N)ENJv 4| f#`x^ilAwl5YKMWik5#x)fFeM$υ\*Ggi$\c$e 9~=29{ Lob>4uGiNCdpʙBڞ-u}MEp?rp!QМO9Y[aCN*hmn| s iDRFvYlgs*C܊3UXuOsq0sX̓QfI*nq#g/]o?1T:)&?F 9C{chnm4^?ɢ鼃 IvV|M/Qr օYkCG$_pֱRQ}JK CFj"3ȵ[]'ZY"y*ʚ-*$CXݳw7ZPThP,ndZF\,] ޠ1$,5Kfr۷i+#2DsstmX°+dձ;8hωE6mK),U9ͱ⺘ZW/UL0#o*ԯ[9`V?I!dv-˿tv@낔N"g$ϝbDړmH, ?vq+c,@Q7?w )~8V;Q #0OR#ȓ`Ta2E~Iiˢ:!_C^FC1K_/XֽؓF[c G8H d5t4{>MZJ*d)E?!GYĢw-(:o#l]yWtlkn>gApbulg蛳= %Ps:.^OXB6pz8Z=Yp ,bѿ0釣\=qׇ`;4dcg8-Æ8{Ku]vLG,8!M=pDV1̢rީ YcU HϼC(gїF[;^˴q/ȇ5jЦ+wY9K-`Rob_nŵlX =1EێO ~ hy YNV5аMpfΚūZNJkVy|@WQ ? ⻱XIk\q {y9B~W+_"+&utO0gL"6E$I{-V̒1-i P+#Kq)GNZ MMZ1+04X:!=/sn\`_ ,_SMus^/b_VỵDz K|Cc)6T+ \ E Z9g-pd-¢]s6)9olvC`48ptrB8H8!X^UW2D5p4b+*9fWiN[7V?]CD]c +QqԧƼarɤuHx\0΅c:8IU,^04F_聢Tsn{Ä 31͵m6V2"+ܱBTsH9-7Y #7{("8/ έ ]B%:Q\QT8>91d*-\^v/t )*&g@HIJģ@CN/aK%-œ~N:Ǣ2j" ?%}OI]`$hP ]] YMbWkĞ4kyKMq." īP$h*L %\ͭ+ߔ3P|FX3ol|d: ÀۂI%|BBEE s-Brc<ȺʖO>wg/RV/iVsI؝'oVI3=>Bտ'm .TBrAuo¿K3 3z 9uuU0p_ V\#希5 5>GA^)nuW+3_3Q>Oaڠ:%fQz+0ik")>^% ~S_#ioIXAn}U@<4Haߚܭ  3QF=7w!q޳7V/ 6v F}矬_ '6P5@Uߔfe"ZKQeݭn%|7w$z1.f;s_X?2U#Y=̧fGp2n9/8~5 |- %r]HFFY띣 ңmTOP`+F;2+; ?/mF cIgQ'C49licCGşd_nbyVłK]r* CiN\^o_| ]G*l2ހOBU۷$.t7*SԯMyM51-i8s 2d:ME@Qrt܆"،/:ExSWyB脥Lf&搂=Dm^k0O[cYV'k-Hm3 r1W﵌ɿu=mLlQT:|!{qUAbhr#gr't*/,aFS"%mgfr5t&ޮɿe7QR.s,B!!R龛_ -0a4lZθ㣗 [cHym_%r8g:L8CrSf kw ÿg~*9di%/lc#ZKJ(B?}CJra=Zx? vHw2镟d׸1 +)@ݔ/3=}K~#s'K* ۱1wݲ+}9{%EPtd5Ċ^dN_K{ZT$dU<6qDVɆ]uէ w&-0K[p3RI))tX10.{ׅ&d"YXж {45/SW]Lot]IrGus3=lc$jw [袇500)zH BU]LcF#{mY4nոS5X9`5F@( {+ MD`)rS7# y `XcG- s riI^"ӊu fRD߽E v\JW[0E~UȊJ8~P]4[ 3nLI Xlrnȗ*)Zk$h̜A;29i#y 1m+qT būZdlsHƬt4dpYZ+f.]XqzYpaH Zg5k[m{JذkP|<'oHT~ᡥz*0$+Nc=hڶqNҰ4=GS"T^f2GDW^JJU_Xzr%[%b 'hoz'Ox*-n.{EIZ~~Jo=hˊ~ @e$:6aqJ3A=C!jT[NeI(["z68}lk0U״[/ErgV.]I1<Y$l!gR?٨pD2. 8pSq?vc1zOlQ0V/O~Wv4*ް:HLsYHT =L_6N; 9El/"p{[<)"c}V~* 8 YXjR=6sxIȔޖ:T 5P=V Yl ySVAf j^mTaJfc K6l㎠=Q\ޞ+eɦB_EL{O,Et- !-,ٴ4w{yQ `\R+㏓!Q1J0 :{_ݖp dXmoXSZ>vIKXh`֒}2|ChgW})K~./~n <+qE;:2ErND&Mٿ|$l?0V mqܐut&2DF2*)2s?)ܱ|jՓJ{%u.EEOoUW:ܼT0cAWNUytfz;xa-r`iPJz X4'o[&Q^^EJPy7*Q, בoT`ul~2S26NˌʥNvT0}xGwH]+T;5Ɔ'*8J+H.3iSR(֫޶g;-o6yM>| bPsVFh>Y٘6Bwi-iM%z4lJmj$aTwքyv= 6ΰJ!~[ hhgry#P1+`ОtD٭yl_ %p jCT gI_mr]tʬԾ9dz#v<Ɗ7 lJÓ J"J׭ݵTIPn6zNWa6r_ ?v j1EN%iguZԱ%)*MӰuU6T̈́:_Nk=J5th(9JOD<)b|#RKĽXU9TڏiV,`"yTcf~c=>iӤΏƇ~\"8Y7F'x xz^MTLM @>Dm($ͱEehєL3ƕzwS4|4MK61WTG48Gt)Kd. Y$j;6kڌi&q#O抉`0#&%DUVL귕Uy=ww' )'&zx2)aʱ!QU^{?w bI,ɱ0Y [i6^IJ\}^Q\0 = uCz9L \!~O @ei ȏbmvEwVK/1H/2Jtž/~<qX?G'UĮԑf"pjRjfW9*Yӯ.$ʹhJ Ņ!x3՟&Uz4ՉS +6%h>-=xeQom>Ñb*OvH>r= $_ <(~߬l(7E.!v͊2XGTȰT3R;Mm&QV( AmDNqҨV/)]t^^[L ӗ1}A߶THW 79%f܁z%%J02mt6b6!JE';7i R K޾`x3+65"5+;1͍lXfX eqI LjXkN<=C\>CUЮR p&W&e$V~%VdɌ6! ZR/' ;<S̝LMmѮҒ)6ڷ}s`Ʈ g萁Uv nzjʬZ>ǵ LJNPt !s?%+**pā("+$z#zH5 ^@ yhUY~b(Xhm"GzZ].`4b0;Z:8+CUi`^P 3㙭`)Zt3!6Q.Ocp]?.QgJ #FዻE_ K2uìT.RPF|49jn;TMI<WyAu7]a#jts#4M{ip"q:k/! H,-D'{=R3 e`3=(osg헰+]c~U&e*w?f/ϛ[^mWf K%Gk8c-[&݁ʧR>cUrCܙZ{z-]N双x{D()803j/\WhryE( ?LwQRʰFG >gz uةHtk):4Ci/wd̙jJ06^ X-ƨ/g A.i5"жţ@U6 Bx~w[.9GDϽ=B^r 'c4Ц5>GՔ[\8 () Ͻ "ٟ,bPWg3&%7RiFl\۳PuVEׄ!?fr:_y%4Izw\ؕ]?>Vw$ꍵ_z͢;J |>lv^K2udUl}~P*gʶ.(mvh-?uBQ:__5'IQiÇ7~ #>Gj kL7XJ;sxi"\0E50ywl{©&s҅G\`VKN;Z'1Ju߼yAB<91&Ӏnn9ho_@ܶoúOXKqQ90S߃!3z&fO>&(IpfN&n$w-̐$ҳ+k80Yxybkj:("!-{̕Q݈y;=u`U}I v\5oW0՝:c1nқKqF2; #Yˢ$BK?->aU2V QYH(K=zF\[ !$ =zci"؁^#q5bMBck@LٷTv"{..Ͱu\]J/ _;f+Y̤|I:=dcde1|!swh,ը@JgK*>ě$,['o_vp*u(%]j\C+sz]cܺ۸[Nƌ|}O#c8@t%HcP/ 2%|2+71o$eB 7J&ZNJkœ@TfSj7gcx0.8.6T ))ׯ-I03xvAcWlW%Gb(!i9Ԓ<8fBi`/\lõd&W dEЮzNR>r,`[ 5ѠJsnCqUqqUx#WOt!o7{ĸ@I[Y02^;g<_isioӝΜfm|:]pƤU<XљW&$_ RNyCvɜvֵY[W?2)d f >J '䕊w96Yu7>JGXMT#دNl^VzJ## ޡ iobiN)˚χ 1Q 3ߋ2zJPB Ý{>-Po%r2|>OdӢ]%ur\{xzQ)C`- #Q*\ mmj?/y^ȱ`|l>%LR]p'j B6eEgG Ptqrm;) A s熳CT3woڝEH97Lyxt 9|rE;=^T0~#v0[uYlqZg$.גw|4x-sYh;HVFȷN2!X26Tcɠ7{q>#B!..6r)\~4OHj0`<j֧Au @74a$>~Qԁ֩F&FnMbgpCt| M*?@{yg! x)&>&˂pb"TqB7u1ݫkle=[vnhc:7NW `!`w ,eִ&~r7e3iͲ+/p6+28hMR)\sXgZLhȰ%]C2ă<{lk.Hl5eiB'S"3׎~(v)W'=M*Z1}%E1}V0{avTsiaڄoCa<Ò[䜹(*BKaCUG[q$ỷb#<@5O4և^/=DL q,#ЌL[Њ]M]H_ i*Fy9iMޢ1wRq3f; u%vJS8R;X!:N92b\xVa8rx$cX"? \QVض AjV"/~Hor0ӣ*^0zD"IJ%:k[Α>ZYU8 ; R|{d >qT*-"d. M fFQ`"W3?խ3_+pV[F3OX;Ox:*Gy* ƛa[&he3Mڧm*^d3߮L;>}$@"\kq*)T݉w\TIdTYi#xB|aZG)ppe[l Tp,YKҚ(ʅ7@3#ھzJ/Kwfƻ` 7LR'1: +ٮmk6LN %gPiï_v f'[y6 _ﾣz![K^W|t P^e\Tkb]H(NxT#׾Y>tp Šo P/mi[i j <ᙕt5G,9HknvB' Iͱkr:RmG M4PČpiiy1sM1k*v6?5uoegdH Y$p]GL!v$ y}OENG~VL)`{yR OE0%xqۋI!%B;hpŰhxh&g 1q\EbH@XlPM!H %:tp ђ#|-Z?o+W2 K2U5&NH XUԸۣ]ѹjVͺ`pOVU0ɓY&Q$w),L5i0,73V#NW w=<|u0f"sHQi) L[;!MZkΪ̏Q!("{ K2 )΢)}:b_ ) ێ'/h.=dԩҶZlNZ^Ly]b—{kq-̀dR/ٕ+m?9W |J0ђGLTWJy.ܲ+']NuG8#Y"T0(sl!Mc+G+ ȷ` `a ;@ihr&єiijWafzWX vHŤ- :;8Ifhb8t06nXla; @- < R@r~b(܁0a*lj975 oi(Kh!ܻP9`CcHwDrK5(,48']g&QˈRjtt %t.Rm!hP փ&βvA1SY rRZ5^ AxyЧr- R6P*htϺgXILy/)-1P fLҜalf)YԼ-PBg9'JduY' Y <\K! ]z䘄X(m{^ Jou{xwR7E& B.=7A'aNRQ6.>`WtzmD7 j[vٴ-]637}]9 ,3&od`^F RڗX)A2:1Pa̙'`ᮆ1)J[ |.lfuV$Paa.Q!qvJnSLuֲKZwI`VH"w+D-n&)4 m 8XV+)0~҄(N&P;>fw5;*O8p lt /viHB?%_Rv䟵1\'ÊR6-d$0tPԋl&2Pyp*W "7P(*M䐵:-³yZIܥ>Of)>^!>|Fٖ:a/Z:<& =KP=aGh.yҒםr]G|IOj YSƍR񙞺 ^BwXnCbSnt~oa#efsWc7UteAzG6E<>/2N:d2wo>#;򌃖0y>f텂]ʬM35W*bC.>ގ D)UzWJp3ECčYU۝()2 ΒsoomwYPLN-flYU +9RodHFAnjƜg=$ flw:RL0%LA! CʲA-I%:߁zS &V^mV6J&\I<am-$#ږ2`jd@dt=4|zFpT{Db@@MD?*r@Wg§j!c>=w Usq:y8M7XE%!7ZqNp/lCwV7i͆FN mAL{dJ}aj1hdD8L3Xu/e1; ~b*d6F`@S0D֨K6 Z݌mMiE_ A݃tB;|C}XϬ`|{N>G=j2cG nrh>q1Xs>~77a fPJԷʶo2(o쮝@ +ZhO(5^{iYqAx[h܋ʆ`Ms1?U'_( %LjY=v w+Rw.lM#3^v}%Pnɕ LnopR%I(JtGq >q@%d w'`a%{Z+|}qm[#CpӤKХf"PZD WfS8gs[z)F|ZI?;l$w =%H\dJ7DdBEdp.lA/5bsd.geɧ*:(txu%n'cmLC*3G䷟ R1"ejA'<{Fdc,>`۰) {y6TQjaP[t U&cl2'snT}`d4qDK azzW˳b؀Bֺ!d>-Ѳv2^f+iGPpx;VV"BzꝆy?g&>W0HVy 0ҰxeԾ, H!3kV-װ]>WCn(91Ը 2hKk>xZ]ZXR2-ݞƸŘF#x}Y{nGA:2pq[wsz5Q\nR4ĬN⢀z* Qyw~\c))KэhN)y=c%ƧnJDG(Ez~Ä'!M᳤/Toa.ueqɜ\]|<ˋ3,'@M<ǢY%MZ4cGGTZ4kɟP%K[̱*JkrW8LԶ-)xI7=E4Xi,+~Ќl=r8MH쐁1=̿J2CE@17?,'E%dAs=jRCPM\fQd|d]?Yv_]WaVTEޮۭV [sZzqpT✹)x S*oṙ65}5U>9~;z[#kN`bȔiV3~?}o-u:qpәׇ{ڮ? Z, ^Ǧв4 RI+64~-3 #I!6=?4o0dI ݛ i ^YIdA5WK9\fNfZ\0TVԶ(8Xr_(rYu~wB,Wӈ]k|ҘҊeEwe//澎s,mg4[zjK\+N1AR{ C0 FbgчpH]ƎKvIc@a[٣,mAiPcUH!(bqx&ɴVhb0E%،x~C]>&J4zk)dSN*ݶhrfawь0gpژ*1_G_0vCjq-~dJ%[kZ®m~bz00< JȢd Gh*MbU}*m[!(hBX \Æ\~<.j4IQjZ I >Vi}d,l̀]|5#yJmدM.ƚ+Y)~⇛Md>TDGɜVUTZ /o1 ^]U[ِ/b_1hj<9kv8 j4MC瞇tgM }J5F@qȩx g#?ƺMyXyxrhv.m)bWm_PZ^- ܔy|Z_Hr ޯ/C Z?uk'%eGhht 5A>)b} C{u#%? *Dڨ0(W!X p]nUf~Aל*j 0 rɿ`RQp!x"u +]gOֵ tdl`DUq"!ל .Rb[Y$ s#VqXzLPo7bd:BAz_|K<,OeMM6a96ׄrwD ΟH\82>ПNp6d0]ey߬JeҥpeB`o8t2.LKv$Z"E$ᵱl3:3 ׼qwY&+y9+R(!w:kޜv+Qgc?-wGU k Y boxTtsռ( ~pՄZ\Fv9_PZmc* FP;dS9P(K}ٹI/(q`E %=dGvJȞpgXy.lцH7A}X#vuRMYbL CH@Qzį̃ '8LsVLgDa9}:M1CP\oOOLk)@صP/t5>kx:&q/۠5G aiEYK Wn__I 'rgn8"e>lsͽ-z,ݲO I0g{NF<=L~PNg]wȝM%PSZGlwz 54aT2ees_m6u-Ho;^Ubb\&m",mj<)OVZD׌#ړmT42y2[69̊MpF{I/#8v,𣏕z؜H?R1䝳̝OI@uQ_xXrouڂkᄅ]_ZcK|%,A>Oiߐ & Id\P 7, J-Xq~hpzO!4_[P}pXåm\BڨFZ᰽ǸVChX&"щҵ9*|vKCAh,TYOڅ)O1&PeI{@%l%=Ha,S'}03> }}Y~f~t(F|ٳgp붝}uqNk0 ̽G6l[wV#DE!x}PlO+F6u-H#D#JS\@@!fzT5ؗtYWؙ:x`  )\Vg|" p>$ چqDEN&uܴ0W:)=jl7ay8:@Pft-!\$~>_eS9~AUW :ͦK;4$F7 e#۪RG%?E"LT23-32Tr0}zx6g@Iq:qy!/ 1l lm=(-~hy ;=˽ P'jP~ Bu8ی)O⺳ƧJ K>s$(LL]3>^[PQXZI f XRE' kO"Lh\@6Ԏ:y0:wԏ՜D~7&B3 w@D"5_&wA\d񝘗]A%Z;X^-,Q=y%7>n/Cf XѰY;{䰲A~.~,j"S?m 9lϜZ*)\mȇ*іt5f]~uvg`a*qt%7Ie XmZ^cO]rrqXαrնA,@Yf d~iM2U&y+H ]QSV.`^I = IB!s0j7  " ɠ#ŧh,%3Bk՟.+)o\Ʋ #8%ij.Fv{yxY[crC- |?7soᢒ =: )i<1=NO ⠖DK&'"\E6 2={[PqEpTM5f= $@=O7Q'}3 Sy7&zLщ9^P瓧8:B"tseB, HVt(g`Լ&ܺ$Dk <_3M"6o 1sxǐYvPɞ;LUj?i'.@i%γ0ZQX>ѯJ辕DU28Q"/?AhR|n5_YB&y¡պ/3䬘c$ykT ɾ,^/a;HH'CqXPԀL {rD,]sζ* &v)94G=`Dov44Dه#pa(HA,8[n_$OK x'휚(LJh^qw߂ r7]8'Љ[aߞ3+f nrOЮt9A#x+\>c T } |tReySn|v԰ Y5} ĺ6 yX_EJ1Z*D;xǺ8dCýo{uW"83|)òJ])C$<M<{ĊUv`LE.40|N@Sqwz<*fXSvҤgCR oRm3B)dyd$2V`L[}%'&ek2_ HZ:^n"짻EJ0H;C0IT55)J ˙CڱP /g2'; .S I?`ќ QLCNzy~dw˯{i zc/|uAҬ8wAaSxI(xsi ;m{c9||tɨn]Ll W%dhYaB_^m{13əӶ&*6W*yY:c $=V 1ȯ# f#ZhͺUKeBȬ3-[+H/uFI~mq bx{u¯ZEj̶u;e[ύl)(O@LjjaZ4 Lb,1-Pv4zq{ibLyx?VȨb =U/dnSֶRδaPNU_%8^LOf-IE094Ⱥ죀3#Z4UJ2ɍ33vKCEBH7iQZ>+ $ ]por->BN=Кz@ (/~MGkm1҂lKI򑽵uUp|_Cuj$>R tӯr K$t^$/>2+ܿRJEoޯ(Q&>n[ 6> 4MrFm_Pa;9`ɦ(8 ӲέIkY}o*{fҗ(J!'v:ۃǏ9 c8&>m@P_TtE&%7 ݙn*P&6`,led$mMRSL^p;GU{qDiKD5P?;}e] lVo{Sc'\t5IA)gܾgϝ `xڏL2SYxn^~L -ՙ(]Gݽ JSyI [b1^SgvU U3XE!eAh `\4{~vm(NND(-F e q3u<]03T{utpv9*P4^6y<HM׺C@AJN*y7<3M孂U&EJ> 焚ѩh0rYF>91V!;븷q܇k~U;!7k/K.(t-R:, iS3p.F.]戲/lᯓ>c֭i\Ej[z,PmZ2/{z\]_n9OvT+E;*]GTQ{킚'FN눂 4|]/aδ!b-P ePB«=7(5,II9N$ouV[,s_/ea* ޥUe#&Ѫ`}P7Ljit0 Vw ]P1m ω/*(ܳ;MWy= -?l2dv`FQF聦nP5,(_#'3QDЍL71!$a먨7FvA(A'w Y1iT͜k >"~q}-G09fCN=Y$fr@]LWvx/q\ z' pEPN[& g a<<z+ic jC  8> lqfۄAy ݸmE 6 n.&jOG^֑份s7r?v17 s=Ѫp#9}&"pO2fk1ػț5jAM8d,"U&_jkFըLjZ@;MIZ ʕ-&CNXEߎq?ʗ}QQ`;LDP9iFv"Q'_MI 9Kbtf-([YMvp< NSIW"BC ͋]ؘD, [)C ܀0%2PAgǠY+y :Rz&L-R0e b "_Qw#Y'0u=Rguh<[/Le5$pz/zw|S(kM$1G91VFf [&:EECK+EQ(Mi!k6*/D^} ==[{]d6\l\A4OWf0nKZDY8MRdxƧhxdgwX.Zn@7([MAt8m窶WFd H+mkr8' f#`JetvrT^C1O9_a;-j`D nQꢝ0[gN)/Sd$B^>mC tZnQO ^Zm,l)2!D4ny_\ᨫKM|֙6eC651sȩGcc:%wsl}A3do{crySyxl=՛ O7| XI ±wS ՗E >: V(2 gɏZ^CyL[FO i6K7=()J[4`1V NG >'ǽ8./RU0vmRD9N;Lʚ{U]}D(%@*# nַa8&[njWEɣ #їySK^&AXfB㐏H(U[g)_C/:+H*gR,= ք[}|>N6V"));e2{j}H}m}yoTx|h_W@S\X\G^,| }9_̑B* Í)Fir÷!/<;OK!XCX wwu_?`=zfc4YX5t.YPUeV`09Â-X`X}J4(Ѫxو4oQN2<:G7CSMl{G\o(]⌥BvsN`~%KT Ke|XV#Q `j<;qijc >͒ʷJB,{Y|HV/_ eFZvWa]*1V+ G ~UOr~5~y3n@aיT|'P5%^WjFju5I;u( \j0`D|v򔷧)ѝg3GL{ O_FҬ)GгJW;i;= 7GYabN2&q!O[p;дZ0 A#E?^"'w ɶD 4SE \Ưļ/|2ޠ )Ծl"mK t̘@9%cO{ν?F (jg(4ߜ^ewb$fEË\ 6UɌ_z7"iQ$˭Migf5 w[ZD5Q[сѝNJB6!چVq'9 d7.VC༚['M~wzycSz>?d{ߴϲ_L:?IgA`}dp;p .@{ CE6 @+XLw=*adFOM a,46{5M7xͧuX9@TCW~_i]EeovRedDq:xZAO2d(^@^-4MCi-@y=K ݈O,:67:Y#R;E0mK5/Rxқ6r}1K}Wh!O I10ptBGHֻfS90aJv?\068qp@ Fϛ=Bpg!~WF'^ό Mh9(~T)=kuDJC"jQDEIq_U1)DsKϑ-6%n9JY*J2hV9ia_sCk7#CSon3Ih'`a>Tb8w< q%,|b f5bj߂Q{QTy(w#3VPw3*.8FZk%?OI$Asoxױ*hJJ0?I9GODM>dI`甩&]oMa?E&{o9Jq!v*Q91~ekaLg޺΢c Er&J&t2LY%dB vML+Fj$ʘRQP}&G]p,tI+~Tѡ9 x:n4RBjv[hy}Af=fC"BΧ(O 1Z*`/G'mؑvb [3It$C0f[GrA2GY4X4Yh=Y:՝l[a*u̹#L% D/Y#Yvq| lt̾ZZ  {$e^9L.kN[ymcK-5T]HȚ s6{ba 䊫@hY5[4LJ (iň"RdnOR?o.:3QghJ 8|^RHΕhT7U[Wgt礁~':3¢/_R`&p9F7dL&U5aܣar:]\(+RdFeUhjB9IZ&"McB5Z]]/+Mh>= ǔ{0[i1*{ג-O]HjHn(h.yZ0wzx^R9{} a5$1 G3D{?nF~ѽ2ISP~c"f.X=/+xI؆GgoB erx-5SfG +m,j܄E4?PC1/?ӿmARpvBt4pk*\| ^LR 5:F fu3YC|D=t îgLi=Kh)l^4),"w Um;wD g|;ˌ]{CMK NxC>2|7^f5ⷝl Ñ/ ?"|15sPh}%.LVrw$Y~S}@md4{m3}!=b8,; l(>gRzB밤aCwE/EeVk_˄Q}C%QJNS_Ue @FͿJr-EfF ̰!YH ūcTqI`A ̥LE:|ʗFčE^ b .s t$`n%[Pz3[Tn0~B=MAɃSNvytt<ƴɺm!^,ղFuoWҬZ Az0XIWKi-$ h.^ :%A4 _n'|n(dojmDsm^|׽B^[x8\AuTc|[ȷ}Xzv^C Ҕxfi d(ڈG|HÄ\d +KT}6ZbsF-9 ߴE_Ď&M6^XbEs?z܏¤P/J·T㙛)`­*o v Ԉ}-s};~Gv+!XF1 k}{#bHQ}ȧ|&#ֿ#MޘZv/p9L3RՂ;򿔕q/ʋ,uyXw@:ڑ ]ԬM" >OۨY_@=MN2ݡb*ȸ2:u1 \s[ Cxrtp#MyڕLs(ԍE29G8&v4Rn,C.ؠF.= _d5تx8Otu8@pE_$0y~~Ϸo1BλOE}Dv_|#J.ϜE0XBA~锚qⵡAF.黣t xE&%$|M4"ݏ>Wc+}Rۓm')7[cwC> }~x͆hzUD:]cqY"B)y&&e51Cy=_ "=sZ4L|ؑsl2=OubnYE0)5 תj㴬;&)]U!0$+8x9rC>:8r7(|`ZLp 5GjYw&q?31 P sj_Ž#,d,Y\M'[gWl?)$B-p!An8 x?T%y:<_\]Z d@N_ϼ!c߫=0|ۊY6b@5XUR!WUŭh]/РPVx'߮ \$)Pc%}DdN;_-FFޛfjkl$Y|)EX?նo{W@w\N V&d1KӜ3[`7/M?uQB 樳G.Wzڿe~uN] { ߣvsRǵzf@n!~VFBwkT3xIyuTby&cͶQDs3{L[ ĭ[X ֱ M>!SFRCasMHh!SvuE\='rwN%sA"|ᑜ6ZꍁܪxlyH~7=UkZ6]AF"K%nೡ-V7Dz'+B#Nd] M#] ST4S,Ct\G$}?ٽ{:K 8Y:!)d)BʐBt%}yXd_wq 4 H2O(-j-Q!"[3g],nQlA`|eUä;D0S3@suz,m&8|" !^iO / El:Gޕ6Џ]̊-j;3K :whXKyÅS4SZR6.W5uq#?/Pgttpu ۂuQ-c~<*>ibyLCϲu2 (&5l[:B+W%[X?:kE{mRwGUcjwD2#zB% gvؠa^u @.ЇٴXKǪ5bZy$ W8^|M=JEgJ[ GP,͛\b\(EwI3A[V_m(#,+ zG3kymso7Wz7Q%I[O& (j!+9LX8'li-z@8ڗBx=.2 -\PlX˼zIY2-B1jh|Duy>~-*72)1DH ?wءTyKqqAF&JK+pަ]"ʄD-p*EC_E@c^ ͮډSE),</exNa=,I__eQhMY+JORLڠp!CeDz*?-7d J2 <·1ȗMC;& qWNotP2$ ٸ92tkK;D޴/PN;̮nrkAZco0|bt$tQ rNW@'Yz@g*ƨ6[ GלúWc RD 9\lu.6ROZ90y$kH @xƊD;\5$$+~I (F@b8 $CB qԹ}綗T jP3 1>zA?q=㏅BϑpðƘ*3r9R9pY\Ok=l Sz!nrU/ ʾ=݃ܬg#fH=7ޓXת' ][}9UzG]tԞtSU DJ®R檛ҧVZfodSGe 0P6@AckxQ'= D*/7csՃ_@đH. D `P?{e(IFx-0=c 8Z@@&lʔ8I'WA`MV ,]4x\Zꛑ;51rPHKЇ`YVS!B5;"LVϘw#FM`6Jǻ^8c4ε~9sh0iTf(0΁ `ʀ2ވSK~)b3RM!R5>2F)IB:EΏD>'B$J@Din@p̌U*R.T:5Y—`}ӈY+ni?=G#Xюc 4uAd ! թ<0u=b_`VYR Y) #Y6pz!6 ~X$N5wlx N{+xiBA[<6 x7>ԘFLCb+Ӄs5dk 81+ Xf>=TzlYìe7>s{—L!T%<,s}M@W?p؈mB253v{Qɢft|TCƬYzk\P!>~U&,3;|E$'yZ3)OYPS,y`Eȼ-|zoLv:?[ ;Ws#ԢP}6lҹ IoyLnKƷ"Y<'yCe5 zwpKBRz1aBC/|0emj=Ho?/SΝF QD_d{-ՕG.XٖšǨZ?mYX|gA륙RMҝRK'+\+l &XBRzpƾ\c j2n@"v, Ga$xx *Qw1BJ4lDF"=9iuܰ mGJ@4-@?K^bkB2H[riߝ|z:w>oOz%|]2jCP]67-)-Fp2^'S%,3B`&)vB:<ɮN HF\Z8z-y.<9Lzz,*ÈHn@W3|7 }£7f./dKbĤˑAF9 M6 񨁻Ź@ ˃v)~tCd":#6wTBtoD_YYouݞihԛ/[%/_`Re:,[Zu+;AjFk⩩8xuü<\ xo?VѳlD)c0C-]lH-1'3eh.#67TưӳM&JQ޳9vt߅$Vl6olC&^rh< E &cKNf)fQR'J꠱~5SR UzPQ#G;|nbj.dU[׬Vj xoJU1 G1D@X&lQf.U<")*r Sa tX(+ijz傣xlXZ3mm/ZLF(dΓ5(PƘV>{ ryQY̰]ܿ^ .{=حUӢ 7`'yR'zh% Yđ8iٖ.o4&pe苴[ÜuDiX4wUDVk0.iVTn3Aq啫N_Ϩ}E-n澡w;Ha@Csĵ_Yҁ̚/^56pR4j#Oy@geΉAK\"{ՏN)/4|:2'5Oz2*MNsLu*\LsӈsoR ;#zǝY+`>=tS>srn@3a먡L_}I8_ igXe%#3&*J 7qٻVR_wt$ZZ_EYM'Q=aduYpDQ<#A=- t~q0: 6ֹm®s. mZ7a6YMM]<^F#7,kmkπd/BF2~ I!4Um>wlU!ͺvXT{ XBFHٵx08.W Io/VusJugdl-MZiNSs{))3v%E#Gn4"Ԛ1r5@S.fl`2odK,XL<|4a5pl`=|SZG3iq!S\7EH{mE|߷sD{SIL*$GΧD9~IZb)U6COHS I@>bxbм !Fqrbl-i,8Dj uGU(f~ wƮDnk$Z77OriG4";8BIL9l4G)m*;.ʌ P_"n4ҒF\*H[wfchF6,WR1 򡶣aVnߌ ClhڸCed:2"a'u*^DӘɍ\98o`ހ2`\SG ,~Si=ȱ/#5 9׊m>i9`rr8>&GX\בQ CM"Bp.A&h ǩv~‘L$yp)I,ob\n )l !Zati@#]1&/Y֡JQQhJ^( &'Sr8S%G(/cj5??%Mٻi"\c\F8XBV\ IhwЏuM=.idt5a2.%"$,aAz־16K/E{ OuF9x*7CpqaUp^R*mKCyҗw ~$&-j5:-} mgŗ%&Y'\!p[n)|wD!xS̮U ,;g5;sJT66xgiu݇\W-9O>` f hBq왟35'Q=\t6eB5vW; ٸN? ːGxŴ{<*Sv͐vr6jaV GKAGE1@JlwZmE)?I!BUsk'b?!Ng᪾+eGQzѯ 3mD:6鳸AZ[P+.S{bO%;4?y KW?/}|vrmhrAxmC /O1W| Aު/H_\㥍hC!(i)FܽcntVٯ_t8151m,L~2\Ca= : &Eb6Ȕ齉nUg(jwU3Į-m&dG37 @tq AU/I@ T0^=y\p$RF헒\P#oL-4 Lm*@r(oS%,l`Λl}lڇ:Ƌle]%[/OO; mVH|H `],}S!K8*oR llEl{b?4 ݂VoaϞQy _aZ7l#Yz][)_}8ǰP4 e>?IZi`Fger:E\0 'r"[b&ov#^os?@t49!u+;d$Evw.q׏ڂ067]רaQ b ~ܑ~sb$f j0; ~TakcQH1plYL]-B`T@܆Yogб~ƭi*ٜFZQ_oZĤd9+},cKY.]IX[?Cu,< z NQxG[eqdJA 2YGbt7ˁg+WzhSEҨ I]H,TMzOeēH =;H]$gAd1B;6'uJ-k/R,ʆ:OkVݫrQ!GnB۰dQA yZ,U Ȅ;,ύyVɔ"% .>A"=Xr=WjDh7n/Yb(n6~֠t4 *# NEm2A,PAeFD\"+BB#eqwe$~CA%<(⻄^p3,Ob0A| _m#YC6W6Y?ӴP zb7oz D#82G3Y&G1TD| r)N4ԯx_띋I-Wϴ@5;YM5qICu+X!~;>IŅChF%N)[8d鏽ߡsF Yr ÃEԖ[-; 8^P$qԭ8gxi_S:+"!{.FE%v.Fr }?Q[ٙjʾs&pȹ/dPyZ$8HSD2'(Mz83O;yM 0kͷhx&s㿠W&0{MҵA$W EQrJ )-z߂ Rm%F{Z&*/!k;y+,8;:NYLQЋ""_z89o ?VS i4؉AQDRal 9Gہ@j wyF` PT-_-jA<& ֙/kH;xO@$d@1y*"+NA PcR@O^ }?n3-"PS't?4TXgWob7޴}r"h0zG9ki:%Mo#>G$@r쥂yXB NO/Ե(LS"'j +% :fƁ!gm,SV4{KxXgbXxߗ1E.o򰹭S T#d$E>6ǢSү~!jmٌn$tF Z⃡|g\4w<!?1'> NfY Ӧ;`sJ5q˧5>ݫoȵv=^ŰÑ6^ }mT85o3T))t/['Ep"Wf2VU%'Fs^CI/PXvbnϬ3x(〸OI2CK+Uid˻p :C? 'ZUǡzݕab<WBT,ٗZ}"៏8yySԭ~}2GeI᠈HPeG9,`TI\<#ay~7KJRx01*\$ztr+ܯjĴ~ep/3>F'i (.쑽Zc!(K@yu%P1-vƣz-uC6{!YdN^B s\&g}KIÂal$Ikf1{p CL%ojPY@L E"A7ֻHs3n]:iC5»s{"* x/9"Os0@[xײF\Dc#)'ܬh:*Wt$O H^|@J1BR"˷)0_g>( fk'Rs0lSA$+s^ 86a=3 ;6dr$[T9 @2V}6@,EYu*]&mWD)"KklFōSBٜ(٢@S 4S3w݁o`=qc}9$iy[1> >h}Qĩu̕t۰AojqA}۫,*cx\vոD3.LR:Y-S R;Y7m 3No!]CPDLj+t yl/4Ô.g]&2=?_eDUe[̣H _25YѰ7OQ٧E VQfb;?T&THZ 7vvחl1JrF:!3takv"pi"15 1ዴCr"lXKWw^gN soaDNf:\wG.R.U96@jͧQxN3lDL $}f%>IE4rwi%GkMjqX /WXJ(OM``c)p{*;cU's3T\Icp伴pNJd>q_2Ȋ\$BNitJdAXKq=+&cZy( п/$oeL?I´oEרt72 7hV |U^3L&) ƅQG3;ejq@H+ ']?P.{?hYH~XvHx)iօ27 J,\iސu;/3{sУP"^;cL-y;h/8)\'=p&4-x6ٗ^+ `K}/z\@_/x\[j])S1K]4yQC%:ynb-g`sRtΧCҶԨlVd!Uq 1N8*|fT ;H3_.!um98УŮuT8_RHkGYш; x?\Q}K32}XJc].e 2afjN@=wS=rb'& 6~:-ʋDav={[$IsVY$Œۺ}'IJmj_P6m9_XtQ+a\^A Cn_Oz[߬#Uhdx/2 Fifs:h̯dI*Myk/ޱPw68g/Iذ4mdRO=X@4{`;jM,kj#b5u:E8ۢR& /}/0L7:X/x>Gr#2Y:Z$ypW9덂>%39-SFFV-(o8i.cfI&Ԏ޴F(aG֦՗C ZZI+>>(87Q;Ɉ986ߦ7R![;Lre)׈w QO` N>4]˒Lvlץ#kkb佐4t4ƕ0!{U4hB[J(&G~LߛkIؑQn N'0UvS9DnOq%ܵn)#eڑAKg]^?9%r_5 -Cm=BշĮgHF!H`9 >td>荴괴E?xE*o3 ˙G):<OM)p60/lBv--~}AR7vΉR_@}KR|,9-,Bq-3m_ ʚ0!eUkb}? q~#3.FW( rUjj >]Q}go© ǤGl f6cE͍S>;{$OHՓIθK ܆Tҽs1oǤt1鞘νwXv䡍=:s3.!Wm,4Cj'tsB2 qGi+KuIQ< 9,TRQ}-֔jZ= }&FrKMlɰU1(hI$fK܋(& wW:9Kzm8rp?AptiGX-9$q Y<fXr5&K_zVi~8}&Uţh&(m}TWy.d&~`4=Bմ:>e^s ⽼8| )QA1y M$gO; i:ՔVؚBG)'6z.߄ڻʝX+D#۠ވQ‚{*RZ$z plMU$ê@?Ƹ4U>`旓FCIZ98GX^e߅ :\ HB"G@1+äX\ibS3/%_ʏN\R.x RM*i~XK 2#ZF\}ϜH'SA w[kh"gAa絾Ԗd:p 酮yca-K$|[Lnc$oNEևV!NDE DTh x]="7q(?]cXd=>pVrĩ\#4x8f.N~iRU@pbIs MOE!{4L|zQK"n¬rS I} F2Mi:e-sU>by5 ڎ%@z޸"aIcn*JqDobvM5Δ'uwuB U/AYf7 >\K F/^R$Wv#)v')P`(f^zJcIf=w`mH 3ZUB9ՆY(jvu+3IAf|˖ 8Gvr\ʓlԷm5*FQ#F/ J1'*ms8z/9>@)!⤮~'~ S׃pS.1%<0xC +=C/Ǒ# b=@:oӬx%6Uq+P>-P}AZԨ_ٙЋtk=)0 H}ĮqUG.&X0-4p簯;@\Hz>;a'&"e_UH)XdzdZ2ςrD()QHw1[E=`R>70ДJ 4g;ZЎcK@N^ #QhC+/`'d_i9ꌚxA셐c1M&ߥ#Vw-8f]ӎ T+6O-%bw!D_lqw!,KV3޽}}(>*Jc^kRG,?#-I4:v0ϝs. 3=CH*IOzpGc"otso}@*:]LJm3RgEXbG { !g @}ʓsLy]%k k%~f'7"{L{s~}ߧQoa6J. $7ܠBRfGg . WҟdҌ_[=ԅSeM*h8Zڌ,Vs6]gJSh-U mJ&fg.Xk9 F8|&X+dF4/U/rW]10Eܖ}AM,BNx0&P5 Uv{띻%+k>wzюB/1Ļ\u~  /)9N /a"OlKǭףBJ*O}]kʯsV񗷲ެ?n% wi]%_bCG>0Ϸ?Hϴr}k<J"@^^;|ci5Z.]aZ] JD6׊Ex&/h28V10:р&~cZlߺipHbZ`-͈l{BAy't [ l)H”E{rB%>M\{nt0rFBNLv/v'}k+ˤϴڨF};^ۥ6@C-g6\ńGyJN٣(]T +3 xCQ~,|Hzx*ω*B^S'ԵyH{̽IWt͆1WQh #Q8iѤ?hnI?*OzKOvJy$@z N W7"aDZ3xE`&hʜb ^v hQ?~Rrdu㷴]7FWi*QySzeɇ7B%ZNLM"Nk}Uup] &潩Y}([wWӬX8Ccs*\ouB:7$'Ж^g\$$Nh\{sŀe:&qKv'w0D^&\g,d+(ܬ6z+¨kHl)$LN$D*/N@2 8VVʪl}nD(ޡ'cB# |"vqNx`Ӿ߀9u ZZm"1x&Ǒ50u#YXWb im ̹xRi2;Oh '(~Ȁ&V]UH`B^@ ~~Қw8ZO}=3^tyIɰx@On &Ti;M@\+.+OWA'* . da #} ',EY NPoVVknYfCGz< }Y7(Ǽ+NoIA ݢPtĂ!QZ+S$Lm;,^q_gS^汕&xG*(cʅA)^{9p=t<Mcj*%y٣8+KVW:N'W]jMt TH׽od#Œ&.%z]RLԈFU´cmQ|Mi>(`6Wbu˺Q3\$_xO?7p҄<Jiy upv-#gקM>E7 WU-žqA-v^2la8?RyXw hr&WW H)dmWr.cȃ:(ĝ4Dp8)Q"D4T~'6t~ƍp;]S2ugf1EdDrU0E+8͢$DY!Cσ xV1 3SQV|~&T޲*jZ9 ^}kAuġ9u.#W16fVO\x]ҹQe +F2g24l;XwQ+?Pi  5KwIvɋ秲4 Yvw0L\W%Hu6i<.;}.,PQIo#]ɫ us2 {I:b/dCFڙTftX/7ԦISMhR頝;VMGu9wџ&h }zoew3dtGf&r z!M$yv|J? Ѕ@>7TQM?(A$RFFluB{Gp'V{8 zȄdA!(3 )m J1`!cOt,=]KkAJώ&zmr]R""$R5Is0a5;`xuM br!OؕrxnEF׾kS䗧pCpkI: 3+vS75h4Ν]u8J S?a֐@GT86DovexMV0\dH]΃d^[ŘI?|ezd_wiL)m&qkٟ8e xtേeW1RD=&5ۧMp&Ze{yb0:lX@=Ժ&1k桟^lpoGM#PRA ym$gx!Uns"E~Vb2)KOz1;- ּ@#$VTy;QVIEkeK'3*PL&~X=W,S$gMǔID>$2}P)G_rp&q+&+M@ qH V1/QM};z!*Zud~s]g>kFrf-1pןʥA]vp!+wSfi Kɩ4UՍz3@܅ѿȆ:#af+,A$ZGI8vw#`nZ;Qxűz5. `9FNþlA=AHNv?lNИEdC͏+ +e1O@jw)cJ0US> uovX1cHiNߦ!rSΜء6OmP2x%/9`K e"ncpUE?9~bh%vKtzP>~GYa5wSuW62w"¡X?`S8ͷ#iA<_U{ lt(T fh_[kiv["~ʵnыAZodhfXOMin2tiRۤzggEw8K&KUbFm,Qo־)GzAMώxEn.l[Һ, ̥Zjjw?."Q8 ̽ &=T]Ʊmj %=(|/"=u&Α7?'MO>2s@El&MEN OHg2p9;V_\.@MR5P/m~&Ozp3ά Ⱥ6J/iȏ[aBhQ6'F>2 SdܖJ؃^(eUWb `5.%.k-GQeDk[zYh1fZoyL ;Y/ڱ &oH0](;'ֵ&HPʠxy | |𸓖pƧM?5\txD>.+?:\)xE 0rzl!EB9U;=p*`a՚pcYbZ8}1o`q'Hha|;ukbL˒-\CE2^WeθBLcC(w>ֆj^ `,'yTX1&uutXøwiDx Jt2j"ch5"XO r 2`~Z2E zm}}wV^S6C_!@ޝ{YyO7S]ҎӀ+FZ{=:j+cvh[+SH8Q0 _)WR9ѪV?v`ZoB(5O5m7Y9i:ӏI-JDi9*nD)ң!}]@EyUj6 O_h!^Z s8;ܒؒu >M՟߇ W)S@w_cIX`7xS 6`%mP"*R`NO8KYe)nYv|d_ez~ $lCh%!h7O'f{_6PC<׺?UZ;!IC8%YT]1魹<NU\'٧C%:߽a8msCڨ )DBp%@3B}ȇNWFubGwcf-B޿NʪTE+d GqQ2s3[v*9ծ6󽵢6f' =Set*Ci/$:ؒSwjE38)BT^{Z*7l!p^Q`i 1f*eX#>ߝ8K6*8_m^3HC/Tǡv&qо=f[>F`DjtWW/HYxx^) Է]p9u6cSCN  , VdNB/I&c<əpL[9d{*+h8uVOK/!2.ThʼY I@g [̋;edATm。PZY` f*kxǯxxGyL(uQ{P[u|+mm WϲTL@)>Zd-?v^ b%=ݡl| Cvt 0nxځL;x/.ɕǷ#U)˕G% BLJ&TG/Π^N=#0"*Ŷ55{_&W>D&cU (,ن 4K$SRJ#ӆW^ w}IDž7oDjبrRUA*twiP SrBXƳ;ˏ󣓷7BZ1hcF?F 2ki[Ģ}~t{0$\s^xR:\3:|g%I2PU8&|>)4W #o͹?2꺁y>}g'aIpk)80Q,9[zuLJ4z7#y UF.;?rRb|E2~_ I7]oW#5BPM ئ雦Cܤ ȄCy(>˩q/-%Nhe# de~^{)׳VhJcM5iXkRN~}"E5ܩBPQ/͊xl- BY0ռ[!/kPQiVw6둱ܐa_LCPl;zmX} ;c >](cS~D'P0ska>xh6@y܏ ЂܻnE/bNޭ+K8Fu#*-ɞ2tПNρaOϐs*t)hl~EpωS}k;iyirBck#5 CgpKe3RJq5UyuSV\m}Hm.{³tEKY-ZǼ1hvMGbY>f /c3Ti׃{[ ӿyCI6)sŵԛcPrPgvY;7| /|hoԪtΌ`\d/iݺ׌*>{]c\PeՁNlۍoz6Lݒ^܅H`[ais]"ԩ*iF/^\L)uD 6:7a}w3$ѥnvc߾uUhyѝycw$פ ŕBRm!c=() [D e C Ќ~\tJ^rTZ p,#+[}*]"!./IUb]U SI %|=/WQPj<K+lDBH)s`7_sCK 7 .:IK7S%K(nMD[`cq>`{4SU7d5zrfTI߿hI{!d'ғ02T"yBE`PYt#툲{..b]OkF,@j): J7?܇%,7 ;όAkZL˺V;Q%yN턔Q]2~ȳ}r!8Ox4vq&h#f|%eqo3Rse!eA,H\&֊A?N5~CF fQj;[ Sqj<cvCX(Pk*O ޠnͫQhrbt)CNR kƚ&Ƅ) ՒnTcc^ anMRIf({Q0TwdhIϲzlpUl\d})݂ v+lXyC~oQ} 3,̔i{}/Hͳ=UsyIz퀣ds) ?YMOnhK:'b4m1E=vYAa61fL al62)6Sl"8rX3LQY)sz} ~پQnbxޘ4Q'yký ?*L֪ϏՠHժiWjaokbGKy|&e)`鹨',i Jl:_ cR71Rt%&<+ciZ{CGey~Lr_`#!Z[ Vkf݈Ԝ͘] K61/U"- ,ǻA0F"ŐumHpQLڰzӿj(]ǚDZ7gkMN Gb /!& ۍrEEx~ɚY r=R65$&|ZT52] ڨnj7]\u}}}GTqDЂ8RŸ)S,0hܣ2եfq2=Հy%{(][ƕHSD`jL\ ;z^Qu:d*.LMu qaFzy!ww(\hv˖TGfu8BrxOkyj˚.ۉnMgml4'8- (YfeJ8gNxUeM1W)@F€Ľ ( i6bʇ|ܧn;j 2LZܟZz!2ٮ{?G"3Lm,=QnQ1tȮ_qWEÜA%fZMf[&s6&[E޵D/ijwLI J0'4L/naCADI 2MC]6}PfUVTMb.z`364ݑ@0"-}%c 0 =㢎fTT78F_,3L?5Nc ﴙ(9\}eYH/m*9MSJK7qܚE-G]%W|X@T kުe @^imyYO*!M+2}cZ/8lgk;M7f|Dw*?շS'5tjGqLk 4*eebǪ\_ |3ߎ\=;mZumSqR|cL.)lKj7|FB8:Ts<{Fz8K頿W9uIfA\j4Ӌ˭ gmwKL`fgKhV~6c!R-Wy"q>#PQwC@IHT xסRPu"@_#*O5rbqwU6 2Y!V]u4 PwB*>~ MS^8U,Z-pn06(];y*bj~e,G`hkE@昂Z"PT͠vx:iv*Dv6h Q>Y%*S/,$S'K׶uEO݃VD0 Q Z&x!|bXxoz)Nj+~ 4Nc Lj|!EqNLΐ~_53ȫS&hnOџEiғtKE>0\H&Vp$jAd%s`c;캘΢ N2[4*4$fSe[\N$Z^4=l,jYhspO/Жw'Do>Z0NPjco7%Kp) GC:dvsJY2Mk(ytdRԻ_j$o |F`Vz..=تYLd,fDGiH_t [b2- dlwgC&-̫GgT;-Q雜 676~ˠ&7\-|GnxQ|;W0i!y%."arW[,\[5z2MY)(H_!id9qO@ݸDf%2p7R8lLS% 5|@U9!Ys=M ]x T 7_ EE}ځP D5T =t^n K'V ёyĊݯd"pBd7,t39-5tK&9)wPıߖe@GuPQmII_VaMj2(?qh.$́5s{ WfSYԛƥJrRnZBPA %;Gʢ h .RWepx&Y5:e`}2PZ!njdOAFE 淏gܟURM2ɻ 4њ%&)!O5al+45f}sd{Qo)5BwSMw?-@TOڻ@]C6%2!w/%0RKlXpAqi#z)7NIZLmT]}]pƢI}KPCE[Xq|Y_*ncC@A]P{!"A<䪐R1bbWlU<P)xK=*p&v!t~\ Wqqդ"騃swKW.u/ 'gK&IBL>򉁇! )BPK.m2s~oQI[JmAKO{ '(g|'~fȜ6,"<#*IzWx0TTt%bz_`?É])#•i2s=FОƯK/w$8M7Vvn|*2PFDDjq 5$o S6 tj2/{5Sn ^H2ޢ%{Dnd..3 jb[)t`5Ewbz5p+NW\ytRޘ].27_c! W$ 1bx 1sR<|\&lD$xh| ֿb'k̘m,'..*5Kg{uf4{8EΡ*K2(7W9g2FtKbPsr*Bp{# I\Y  }KF5ko%K54vԤE,d~Rmh\2?WtRz-,jN+ETy6Ѵ ҟ$gQ=<˚lda(^掴 ,p䗅6 Qe7If'?iO7%0*OJ\UkE6۰ދ2җ(KZ8I$[x)MF?ψ'۾-x\ͅӜ&5=mT逮 ضNE~,t2Ch7ۚWB|֎ :C=$Ԓ\Yx~,@|iT] DV$՝fm`;! 6.<<\nGS>X0_*ʤRϞ-PT Ije5qg1K#+mC`=/O-ț~_\=y8r4o^tT| )4V +8z㾧ryPDuV"$Q$c^{nPwd7w{0o{vЈ{+Ot)>o{4(/\hһXj]I )-1$uvk!2z lN.g>~$eKz)|^.U-Hq&lD7\P/!EbZJ)E?({έIolU{"(ۜ:Q"ꓶ(>R*[ߏz^$i-Z'݃ !\`PXG4YtxGs_NP}eR'̍h./Փ,h}*ݐZ>gѸ3|BA_["H$YBGd誎xqn0QV2wCh6&atxŖlJlS'+= ќG't/ѧ!]ýR?\"=qx{}IN62j7'00;E,l9,-6xE}w (bD Rs2)!:/+D''o1p8#D؆t'D$="lH[ѻk"|U%(H^@Gd>`ާtZ$:l@13"w3.n5PHX26u'tFgH6kQPSiqIh[!1 S!x@w6^; tz$MR$f6Vey<㤆b.C g"6u R@L+ O2IVӷcDϨdrÈ=TaCK双"[D3Jz2Rg9 @x"!==?Ћ5@ߡURڰnѡ|nH n'e^sȠj(mQ VnI ZeɶhsZҹFt]kLbcQBϘ7gSl(FF[s5Uc"ONa`eOlB{dCK`޹L|^H^Tu̡Ĩ^Pe?I*"?sSN%>ywT-t}"#MbG6 clYEz-`hT AN`0xW+H0tw[5cyWq.< \#Gf8sDz ~=i`qQő 8bJ|@ʁDB!R:Մzux՞z%"&8O^ni,,Z9z@5bl6#n vsڥ2\fc~LzWd*zefQr`6qSKNWMI##H4l03OEA%_星Zc_J$h_vQJX?"^*̑Wؙ$~M;Aݸ7&Odo>1n0Jl 1[f=z.z=Q)hۛ:&y'o yQnSaNwy1Ĭ=uZ0i*YxUKFE} V#L;'EH;ZH+ņnC!+-{1ӢK}ö }JIthjApqi #咕DRWo1oRbfZwp8^O̎9$8cC:+?G#Z+cU}~TL. ){wһq[ +12M7g 6LD#·7Sa1/;c6LP(2ך,/CwpD+Pvn2txL9d1#ze Vt+vD(#t:Bh^;i,Kp!tRYp;Ă#ă|p.5tIѮ(AopmYz< nL=U!1|#՜އ'!=N0Sg&Ɓ=71$6OYS;Ɖ.W{`IN 3u^,5jTN52ioFl4$,C> /'3t#*N2kU g,0x.hh,bWd|0@A\e" fShlU=z/36\Ʉ{^߮k C笞[kmA5GZB|\pڿj ooc#4D Ž ( 2KH\KLJ9M-g\* vꔞ,J_){Hɶ^_=\gz&ݭԨ@#ᚭs_F֋+N!(%'y!fVF%5p0#a`JRKsanOh0  u'epgY }Y jּY",M#hὩ7.4P3W:'i!hqvL7DRLU3~톲ߍI +׫x=cU,佥)AjvE;Drf"HU4IW^Lײ|樰dwӇeͻ bX{LΥ9hو'%כvoFjQ5{fH]ߟ]'"V!zۑ +^ҹkKҸHO\j 5/=5Mq$]rφfj@R1^LByK oy0̯adhviU] R NXyhE?dP!?iwDtM<%W[7\'<)+yG/hiA6GtE`/cHl?D ݂>JWIH)fK2pQ\t׽WV@ T݌DDd`.l  BA$ί[`ŝa4%CQ9|QE<%d6M \z1 LK?[BD ZPvdW/92dsjv..TX0i6>`Dβ3mdz|XzLOKXh"q{nIi6J cF:} OؽP-fqW!66HcŗV=t \R$1䯁kEE Zb2gAY'%hT̗Ɓeo[Kfv`88;Wuv9C ^IuBkT*p\=a0f ! r=bsJM }eA$E'0N^ G )F'lnW-y… P^ g*\)vNN HJN}[5ՆlGĢgʻ0pO? 4|\ir/.1 *i+C|`?3 C3 >qC֨nX+GѱPtڃ,Lv3JT[~/\̿hh9q}#Q(dz%E(D3 P>RoH, NcPIYo! URlXx[mjnVpjcZ˚[SK f`a*Yh!C>;UDDz?z:#iWn_tO *ێOc`~vF]/C2LY9YӄGG84..3?NIrf:e.7$/[1`M0s\ 6_P]PHE\lAD2Zkk8d>=IW|laE#o jPהD]VR]:/z2FY!dOUP8WЪ壓\4 ҼKD&(sv`~CpP;n,DɁTSQ`D|BO>y>yF5Vr#48Y@֞po4#1crds#VW.:GziX{x,* ^Q^ eF\eswtNx:A}aEJ:E`@DȟD{؝BE>,P|f# ,!nڭ%L;v"I) 3%+,,js]ɔנJySS4(j_e k4Pe#-K5Qc8<'<fϱ;-כܜڻDeXS5ޛq>v&gm҆>jyt51.jH@(ws? !zo3P':qD XBN&gP3(ؓN w>s^ruL" 5'|e(lx'n(glEyB(*? %NHOwՕxbp XڇlelcfI^xC޿u[ӷpRʛ~ɤO6ԟ9I;m]'-G=#3 +&Jãhn]6HdVV[ѿ?I5% QDNyޯMgmmyߌsDv,hAdڠ2_] H`0i.Hq=ǔ fq.lbg}(F!zc+׻״P55l &ehf2- ҵ T>+aP3$ض t;o;Xtvoy |6%򖾦T!,k.]-Q7HA@`xhrPUW'/]FIԤ JOATV@(h/D4#X žYVhLs>,q0%ٵ ,ߌ} p_,vU CA"XYnuX`S.|z%.ʺbeIl߀&!# ͺiHUQ /?h@t C1 :d]QldRv" [-S*T|7pIWcLEVYE|W8NR') Py?'y)*9}6u'sK# +B2z:^vzH {k;c&dτBEXode,Uzu F-Rqq?*_LF H1B=L9= 1oG:tswwQ(c6JгX̑dub_ ?P#׀UذF{=Yb(zb)0q_KV~KPkq۹0`̈ 89b<{=k$1EkL6?XTZ"ruI%%290;c?zݏ# ͏!Dl<s0(j\(7l1%O O>,5ԁ2I ua%RH\-Px$ iJJwDD]cyqn#|kc]XU7XkG6گՁABZUf vRt)@KR5(:' T_FC5\82u_V?4ӦxCZtY3w% e 3߆Le{0Zn%¦,MjiCJ1^y_5ψ?W3Hm[Djrcz68C퓌Ð^F i jq7X7HwuvWZL]އy?wˁV dQ@W2O"`ʫsjA!؛oNR0Wj#Nv}kt-֣REmG˲o1Kn87~Vb{akAZhf ~+yOi<%0=#cdm=z&!׼謄)<Ŵv$ ~;m_i}h_I ];B$uO z^lԥM|r|IBA] oh%[P -ty+hdEl,̀j*P {˱eMb|u'Q4>6y{͉pF֯|*F]6ߘɅ[ug{zn/֬56%=Yv#"Sihh왭DZ g ?  aޘc7j$ q\$8^jIEXN)9]KIH;=}qM^&bT!%2̌Igd;9n !uK#O6.PƱH4imG#{gȬ@-jfx] YBoyѧ {dhƯP9fy_ 0 3/>GwYNNpNd?ZPkx]Ԑ -,/" l.xE~mK|WldFx \nfe gF#Cy *x~d]CRuZ,iEsuhZg槀aɦ\Ll%i&A`l/Ēg !W:%RVz+( s|&o HWrySK `e^HEX(!_/: (C'QEpr;WĎ)?6Vjٮdu륅a;vg2127Cj=mՅ n\r0 4 hyw Ē'RdynlԙY7(%MMb&#ϊӍ_̨F]VY:)YWmn[W܏s4^SOP@wZR3epeo6YФ$^XILhyIe^vdp#K`SiJ&mҢ"@U g]xs"^rx/$0)`+P̊HYiZ)v@-SPp[#yِVP)b]hQ T lqي󢾛ge"umF D &H~E5Ǭ)|\ >O-ˏyUēk¾~_PVriw ]+f6~otm' ~ C9,^@r:"mp>"wޠ„bT2Ku#7uڈ܆I ߳LP.al28'0w=YSDO;UZ-, I\$Y8̬p b}W茫Uw$UL3њ 9̇QO]`G4$s(=2k7)dIvDv!׮Q\tKa—*_=oPI oƓn eL7/94DP4W7VńfdQAa1IcӈB(.ܝ^JWd~{YYYI̔Bх"їzé oӌȷWXImTžXI}@ŞB\y^!9ubU9;Ӣi{&orrAZT`fBJ9Jiw0"_E+Vjw~+̻m,bEc'Id4! 7G蠿  ƪFy\% B3]A-<ՙyNgqhS_;vPBu1c?nA F'ѐ>Zj'SI?RS9rQuJzEN朮&E89\jl]|h1}vU)pCS^9r)JG]Z0(bݷ/ȴm>f>q>w\?!x_F48J(.GkԥPA]L1&ݱZs%b2|#>ۂH !Um2' vf `!rUF:/ v\@.`w}<=N Se ع"5lt k@P/7$!͇r_c^w.3DZ8@Lk‰*݌Lc/aB6Ey(Isf4 @:0MШyp0)4S(t.BY}y%{RYmI+QQ6pRQQP|Mzө?6af>WeHaOI`!s1rHQZ<\'%fأw"Jգ6N{4J-)LHHLI1荮N7uf_S7r6,# Q9LmAWu47ёlxjhɬ:ɪ~;yjͦ7oH B-ݍ)Hn=h)<צ!2jQ=c]M ͛x/:H_!$ &]`q5Do~m+a֯01-OH@`AMQph8Sj|2e?hZI@CT VW`0ʅsoFJYqFQr`_=𨸊U=7.!,9X$RgbD9_Reet9 ^RaJa>Qα lR"7I>1;YgOgC]+eSGӟr5WkH*?5r<}k1Ɉ*Ipˈ=] J CXyRfS-H|zΑ;{MMaY<hv!}BDۿǜ C4FZ C#ǠPjf[v=qoˊ:js@n&@ـ\ < Wv  ңLO?WV4>(ד r)j, m0泖Wz\3#,Q|6PVV>k <݉ti>/{z) _q+>οr6kStҧ6_!bܰCFG`XRr<&jH&ڨ\&)U!ݧJsq2✳[V<ZX"y0zMZs@C"AuYYtj)>SW͌겖yҀʺH΁S} ӗJ/933*V2oݳ, SoBX<:pds] }"Q#&&ǥC{ffث{[{NLk; SܾjWNH]cq&wpG*sCW-")Ǿ01\^*1n8:?cm a`@PO-R9!sqL=M}fo:#@ѽ\~btHϰj` woT׭^|$@ -"~72YGLx^ $oy0<.Sw'ˣSGf`*{" oPN .|lH?v|γ' = b_v@)>H|z38wcLɞF54j呃zy@U :UwV@eSB]m wKGCEkfb}ڛ!U=O(_9ndj_Iw=:^ݔB?±h#OS # (\\~Z\D^k,cORf3zjLFO,+Eָ+JRvvs KiJ2\DSJ_MU} = 2M{Ejox Qe+u/YBt-ʨļR aA^t4.&-qrד/gqf - WCJk\[KȢ<(`vɎX4V%RyԅawwM\$;3m6388͡RIZKB-rvғG\ %g41pqDv?ؗy!%J*q5*얥MX6r\돰MF_2@2X#)LL`^S3=t lWf}01'.bo+.j|a`Ut*x[_-]h% (sn ~oHKbdTUt \ci:ӎ!ά:GG6P̞qrGq1CSDD(г͞2_ 4{DiMp[x=a>HJQ4Z̸乳wH+S`&UnÊzo|,^Qr_2'YKVOǂdvKABk >t̹s~`wIdѸinЪ#xm0ه`3x =<]*r}b؜ Y ac'B72E~2W\Zb煜saDQ*-]a~ ̉A~ՐMeǓKd LwƏFT\\*'_3޾lvd]ygngu9`5ZI()Kmsʿ nb43eLJ/08=.zo~ˠT*x̷kvL~`g^˶ޜbTy`g%Q9f{{W껒MBB9?k`lǣP,}jaF ׷Z: 9*1Jp*o/? Ww2"<%M:P%wDb T63TMI.%14SɮC5v]hXcvںQClT.GC魈:oLp:g$@xCPc̓SGOL[:"h*=9N39{J:KdWgBXA^ (OP͉~Y]öᨄaޢ1N\+dYB )Go˚bUQO-X-T|al lY`}˸G!'?=Jh"YvL&,C)he7 l(+̈́O`fRq}4xW4JIlJnGMZ JwߥEW[2}Tr_S``;'@H5 O^zjB JJYD8"6dI1 gxSخc"s"Y.aq߯`H;~F\!=[ucu1dWdO.l=~5Z3,m)A*rT}.;Ϩ I P Owte8e. xiJA7}̟="<% ?*.;qC`R6ڱ|Q1rl s6{75K:xU"[tM [9R"l X0ȥl<䵭^$Px)N$nap&ɸ߰L$C\<>Qol#m)9 }/{(8~ϓg/iy:ѹ2H'"]-tQkQ)~! 3Xbc9PtPԶ!ےm+'LmH9}26qֲ+R[1XW"51h~oͥ@eL"fKmT?`[ bgT,VA;QE" 8/i1oݙhr]/ yHz/e[ĸ<]ۋ'!snF1v2@jw[ &*[ZV=͟:V3쁄SdEކ,jأ҇xA+6 ibs1dOR B>%εǪPih?)ȉo"E+5՞0o-Zz|x}9N&r4z44R%^IF,+"K. b9`ۚ(9 LNp_nII+n: 8x(lѼ6ؕ%|]E~ς Sñ9mr! &G{2T>z3-=g X2b\N,1.z[1DN)fY2rwX`/d)QdR, -Gl3׻UXrQE`nD}܋݈U¶ՙB}@,av`[iiLaBCq{5] 4]"Fw_@ ce_ӆzU.8QقIoGm<1WV}Jb!ع^S˓&vFXu<8iU?H 4yvy)lȠ`hNaGQ&< zur@>\;`oJ%`3$1Uυoj\A]k@=n^{Abx/UNĝTJ%_Q+βLR G&S~`%iprjS٤]k 7~hSßqٟ)4(A*[rkDmژ"4`$]Se}$He~%?0rI8w``Ctn&&'B YVxSϥaL|a..+@_ߗoJَ>U^~{ϴ1$ǟv1[$Y/=z^g^x~~pxק$Xldt逧O\;8:+"1_N ߃ޅabvoU9X]8m@ic-bMkp DG+ȉ)tX0:f^SIb}!O<u‘u]2+]O/ȟElq&)ZR dxCy7" _s"}M.2P-V|)Obﺄ'S*)l`@ U[iJ>s[wT( QAwm503B2ei#%⑓DL7ASb($JU \:apπ~UrK&CPmߪZ~3KGx oMYN7VS>;$l?A]3PRBbϫ]bS<~q 6Ԝg ç:q5fyaW22$vRW-ǣ;RbguPDJN3R 4)ZUFcAāGPDXyGB<m۰>m}JL gvLG_+ns 2r %P8Q4QeX$>'b`ӀwR{7}q>ݞvۿagg3jZ.u<$4@z|yp"+Ir] -SGpx.D_77b \6]D7 Tr=~=U/nn7sɗc-Ub⋣z(MW/q鲣ڐ{XWk?x]w "̺RXd@]o=J+Mل"cH r|c&Ko95QԄՔ/i9SnWsz,6WLἢrymoHmm6C//BK~F7mIv~"wjEVݝ]letb{k40yss JieќJC^*,.iG^|T]a/# ֋_ބdulb Ĵ,&HU: )>/=ܧȣ+ugR2w%'HڂLV_Dx:0|7L,&$ m[CvĤ$3I۔3+]c]'࡝aA6H(BEںpaz!v\)P=fDw/blDEHs&S겳BL?{ʁv-~@凬FuL%W~h)Kfy71oT,e1leFlne8+!+K`kOi6Uu>nZi@wHyS$bZ~ +[BۺuYp4h؎4݆Y 1O9Qq&T=~ TnEYa$~ AWC2M=z䯑6e!+V:6[7:IjD cvũPKh.+P$1s]I6޲uJQ[Xd$ӿo3ŋ RWݍ7ﷀ}=yaZ<$w+}JXoB7oHEB PRxWA B~<ѝ_)[">1ǿ4CYƏ>:z{5ztR-ӕ:s[Gȭ RG|ĹzZԶ2R:7̙k;i3[,Z7ً_ 0 Cw,4X78?{Eҡh\L[F$aIhۥJ _]Shb-jW}|$\Р֚}?a?&A0ب̮T?3#*a2jK0/fp&і2-abN7Aqa1s\i*,*Nϯh E:ՏĤAɖLZ6''}î@ɿU!|FSS"KY0h)'/Bf z63/ZlcdwGLgK tUu# a_m[>-q? /b>ܞ{G ux(Pr,tuo1PSM[l4s2R> k }s3MJJb:aoATsXjŠѻP*=$呪KL](<K0!{_9dX3:zf7CCY%#x&OV;,B` O1Kd*?;+H}?;F3:>X:ƈoxa9Rzi6(7cٓ9۴:;0a2ja 5jۜ$ jbQPz*ӡT4Y/qW֛; $?CK #]/4GTTbfBmH5o)A/3$NjUFW?[19k*'$2%iu'&&5q*~ (vGǡWj<llgcWW߽MIJ,t>>"n]G1A'͛%ɘaKU+n?xcKӠeTx}zagCM`#.9, L ,CCq ἣ~Q;7#\P\C9,xGC}Xf |߶;Qh\@ y}*)⋖_IBVޠKKQ=04LS?;[WD|b ]Y>'.߇׃K6K:DVtk1tI=w) !TGDFN{[Ag:S"D>#c/ נ9>M_Cգ/qMC {ف@Qi=~_r*Y( 5)OkthK $Eh{Gr lYim5Ce*-o(LԔ96T, qS1K3J2i3ܾs>SHf LN ?'o"-`?HBYdkJjfԿ0&wBH\ay¹՜#-CBŧA[k;Ep˴T+n)+J\O½wm|b_&, t,9fqNX|u ^zUy ob7G(ī7X' Rr:*2RАJEzosgvC"똀.]s4LdL7ȼW jyN{ (~yEEF@>#FaM};b~;YuLB#Ւ #((JDA 4+ ͚.=l'yR 77UL9%ˈ$L3q]€KCgBk\E;vaK=7? DJ,)U8aΎa /1 L k0M# j?~  :5,>-*ā*2?h.]n뼮Yx}li68?' P@N%6}\\75A M}Rt0}C!a_v7TnlG J/R#iՍI%uB6πQ:=ਦ ouM2Жm#3k齑fӾqN)3O_7?J ՗0|u0?99+Ow2~y|c+N6 ׻^]8njW_h4[.}_I90,{|mOwwt"ǕD\:⫧-HwB޹xdeBRq( %BWqxlڻ7Ynj?f جejaF!T]!6gת ZӲ=Q,c}/-t1hK:^HZݎIZa$˘;L0*O~?Z82>#ZEGǬ댶;Q(rC炴 x qy~7XDN NATf%ÿ^q&>&6 T_sգ= 2aKhu%,ٞ~si[/sjLC͛yfBhi7&ISY85F^qSs{'VkQemz# zkGmy-SM4%'C6n#1/iR2H 5'ga,8!('5&8cڵSh\򷘶=K< eM]'9A 5I$4+oBJ+[ՃTjʟm?.>~0g2c-?#Ag6䶄4!NArlko$- +!#<ǜ:%\'W<4e$ 4Iu:WD@Ӥxc;g}O㈄2kI$'MXkpgLS$i'3ʱPZ-/yyR`xw+Y FkZz\‡ >I}ވ|eu"jqvW^ѝL,:E4Me%ZUIQ7%CI@֛D#*'T:Y3Z;|;skp!!nnվ0Vi1puC Hgpc)!`?ތyrjsgݒ>&K?12boD,D\$1&]uRH;8$VuƲC8m3 p8i D6l-;5@lDg?5,V{4SU.JԷEuHqz^Qɫ6S+ :OаKt};81٘y?By^)Y%Nu&B',2D x,;,@A4-"V.v)jI * b|`M ǹlq/Bq'A9BX+?! JYVCpґ_8@\L \"yI75,G `tUs"n i&*뽆qmeyuuEbQu) )lm0xnQ`n?b;4|MO=}cfY\䨁&mߣCStAe4\ѼapM!ZݹxFKM:WC1V \d rF&5?zwXe+]ᤲoW2 ;c,Up6hls-)|M)9o.qNdڠ*/ڎcTv \K7!>Gרmy8\uKڝr}"bLwG~il=ɒEb.xcV&S`owJS_H_Ȩ?+J.ry_+x5G̿LEr"؇7  #GY{1?X` Klgj Ԍ Y&E_͌wq,>j |qnS@X!0G$a;Ai=Dk§-TRB"wS  DBS0? )Covs;IE7 mw#K-D*{Qk*fbtr,8ޱwQ4Ye!^Q[rXxm;}8܂'~|҉Q7륱`"g)'X\4[h'a̍s~鯝gr(˯m,,edO;Kܹ7vfBbE,, iS绁`,MR2 \9{:@Fߗ46>k=G^α_V5;V)T ?DT":~f!7a S;rs~1Ҏ{ٺ5ABiq/v0B!(?C$@mW˿06n=cmnVs':ynQ.Hy14P#∘l!nY[ R3 O8ߺrDx~>&xY˦rdaOVe[Zpz(N#lCmgk2IŤ^a^Q՘Ihة8 LM#!KTĄF`-*z5 sG:/cܴD8K8+Gܑ [aQ=ZrCq9xopsqV 7PBiU *ʶoaz$!Mp$ɲP"dGz o`6W*Kש>5 [m:L]xT\!>ֈBi͝ vi "$PvΜ GP`\R84IܫP*+V]aSeu6\R:tF-̀8ׂw ;Pp\n1Ѻp88QpEAFtt?%oNC} 1cZ\ংQmU7?i{4wSub  FD@j=ٝ(Nc ]5<>{Dy ileXe*X.gɤS@".Vqߤ;S->I> p*ۗ&B} m "j6]ɽ*>jdgBc^<X'7;}`(AuJĜ;ȶƓ)3 _8;]mr ᖂ"0E{[mfMV9 e3N b}שQ 1zL1PX=R?#94!wc*z{bgM^:zYk{;)$q4,)H.5fKF=L"yIϵ~1BؑfD:CfUGjf*א35ه0K4?x7-ċ1#nƅ%{v%,a UGRņAw:`@Xs;B? 7Sx8tgFfšjgӣUSD@ ry懼%g_.ݑY^K}  W̋_v ÷; bOsT?fϘrɊ:VrġM|^"O@fhШ1+ ".XQNį@)tSoՊl95s64H<:Ŵ&|pvS5A C(|<Ǻ64e4K[ɬ9.Lp r+?˗j Dy>{s3iO 7 4OZT.<$F8ۮ䇋&/~:yGHpI׈CGHgybuA놢ڲ)S, 5^)f`q8e:S_vYk UExjܚE3Ae(5c#NwNExNU9~0M(*YI挏ɭ8))G [SMM* 5'Ag1qog`,|!)n% ـ" !5/[[7DYg6C"`#H&1u}M9dЅ[Rb&?#]jHu*(n)z(%.=U%A\qoz$M'T b%%0o3/GasNTX[Ecw\y /hv(Fٵ'ԭt}ίR M,)7J|s&љ!>\}򿑖۵З={{KLQ7)9 ~LwNZӻ,]/2IoX#_]oRq,iח\L5JY&岳r2=ߊPJh~#d^w(mVxWtM}Q_y+xc;lo[3rVS#7+&Q'xT\j=XȍƎܹ\ZvNǤ:{ԂvQsB b?ʑX6r#*@9#z[23$ Yܗv+0n+TdBg:=B!ԁVqu(7!{D2a_QT+" ?H 9̼uM/!Fָ n\m}뢉LmFy_ eKv+X΄94:828>;ק"y+V&}Mq ^c̙ZU߮%p2@Lh$TRn 9dBpyS SaD".ªjφ;MCWscq~a3l> ~g uK㕪9A:DP' NO8CP(E BiO&u]#,7~@y '#lظ;$QMv_]Bf^6UsH3^(,FA2,Vo L\ wZҞu2o#^hG|$<~ tT hQͨxdpv3@>/' IT*qOÁWa3r~MPw5FY*7:R'qn78MPZbiP|L: ״/S:j5VΡh-5)BuX7cE`p6xPaO㬭~ɐE%ewlw_/]A TJz14uPPQT&6ő]eBjaV(Faaԭ&u^Sɩӂw P/׏;yNzu4( Yw)ȘXHq$A+vE,X"Y%{58MϜj~A?WAfTExY-vbi{ߐw-ߘhhkx#N@?31kt$x14Tȱfn=2-5ȘQa>e7딂N N4[s Xˋp٦vs?PQiMao\a"Ռ ,EKluWKDmqI0W#+zVr6i`exC +5&v&mJvnڽ6 Up5FբW٧Mj)W]"qr췍TZ *THw.Q.jeZ9Qf9,9$]m:fE.6< ӎwm>?K"K">`.q@Nw>|!! cm=~\ə `NLv*ȁXGfoq/~2War$Ea}/Q2r+> ׾6흔jYGZR0x㥜jVTsƼM>+@SLd!p PADsBˌȘJtK\FHH鬐iGGRC⻵y=oO:1am1Ycf7MZ|p_%.zBm}w훟Ayt-%;"R!W=)~āY  u혪g:LGxʥc}~jy6O+DQ?ߛۤF;O&EHZG-Ȟ"=/kx>`h>l8+G yW ]f  {Ϡq7k,oɱdF}Ep0],u^rBp*>@>YxWwg[: _\` ٸ1L^ Ȑ&8&he O{&Co`sXC⚖]1Kn\}<1뽢O{55s!ax5kjJ(݆pN笒YSFnblkщq łO+uJϱ=4DDԖoal`+W-W;}vW1w\c'9L5x!QjXF.BMjAץQj:;b+;Y0dRHqB|&c; ~p!A7L'Q{dAɟ/>Agw!&fjh2pIAz$`2=9F4-P]<|K[{q)L-|OS~&ΒwW՟ Tb~LQW|Vu*H*\Roh5._[uiIEH-"ѐF~c`#b#V0v[?.e$LV]'# 5_lB_5/ =L]ĉJP5~DOcchF=2x'A*1T@:?[pՓ]e[}'ezb׹oz$$Ҋv~.5/ЌlK Qxq`۷x|(00{*#>icM|E(p,/2o᠚Vv\Xexs@ yFe4v\%lM1ODm}f) jޘ(cXq  $.k]sƒK ?H@iu.3CΗb&_ZxήORS\vdۜ*\&Y!AG | ZI3?ԍm_^ k&os<7"jL8'VN`dM7 YBEkn@mUsǤj.d As x!R(۞{檜h*H>V=qvbGfȎegv f K(!"e@P{q&)׮~r(u⠌\,LF)S(ճSgْ" N8,M?~!5AIɱrqV]L+ ?eu.O|_cX'iكI9J?)-5MIw Qј W$1`}⫗o{~|.Q?^<_Ņ9(4ѢTW0b;.^:c1u_䆼o]$|~lr){)rE7eQӏr9iW-d zإ[iYYn AIϺYQXSYza%`0L{-<ةK%qLf eHi^XI T oH '=s ;}m fydBd@ eȹ#uCP.?ˇ hqI}Vep X&ᨖ$K!HcHpZnk=1<[!7]MkyƧCO)Y3~6X %QRK<*O\iH$iLUz_|ka#`)bf ܙYc=IbI )T. $?伷nӣ~p9o:4э+ O-dU2ӪQo*E тALq,M ^ꐭ_I8e ATɰXE<5q)=mL'9":%& kA'<1!K.CGlG5i4ݯܞ(~[3uH !\3h3rz6l~?,YFʯ6W M-֝(&|buBt>uaϕs}7F>2(lUrTq8pԐ7zP #n"!v(,G>K~,CcI- @BfM'2SN |$=[T yo+9P t2z2#U',uErj(sl[ NW<"$f݈?9%Cuk4F_ɼ< @}Wfy%vzUH_+|tepda*rF߁ j>2fn|N%lP}>Ҹ1,ޯ*|MpU|k|PSOOi.`j_'[.|z.B[BDL60=L%dMZ3]A>J$QY Mhд?p4v~Q-﮶4/X 30Gt3'\ nlݮX*;WȎA= !U&}l'ҴLSN?T2R$@+a9A #s`&W(c4Axɪp<#iP['p~08讁-w" zw kz>^C{C<6@$EyW'^'2) B  o"$b`YՙRVTbU:'f'QO=nvizÜAfO}Dޮye@.$k>.*U lX7F#2G dƟܺh5#vtR"'}F4MmxHۘU|z}%+=:Qѽ9| K~;/Ħ/aOiqvYPΧx|".fwu IOF~Os \֣![WpR 9ti{Udek`\-ڣ.^{gQDZ?q۵lsM'*gC#3c2l=",.)bl>z]V:8鰾<$8sD᠌`l$ V"|6 A̯I u#LA MF^)b!%ҧz*|)+Q0J3 qN,M.FLbZ9#YuOgݛyߍ@\w\ASDhK,铔!ӂc(yDIJ2pE`ARIf,"JKMvCqYuν&* C3͢_d=3ri_ilBQdyipIxudZs#7jagIKL 2Y[SwR;(;kd?Dqç,HHılY,y*?wGȞ4ʘ?-?8r mq)Fj_Lz1zda{Hj~*J!E7{,  prŤ] E}Qa0z qJdƪanLin\5YWQ`Պ:H8m!E6b"Q@Ekr kVPZeS? %+ݟ#.˖Szr m n2\E V'7)('nMZKϔ/7HU&+Sg%sK} >{Zk*KLOΙ6}1*zYɎT݉P%[DŽL&uBBʕKZm)W#c$"sϤ˭GxђS sYd.3-ZqI-I'9*wzR~1k; ,O9 h?EQi];?ﾥ pL5u3A3^V;7޶[՞4M-9:킎H<(d^Lny5V>߅ Zf0hWYNu ';k5_,KB\2}; !Grq9فŰOfJZRԺ^qewx } @R#nr$,[dm 1\%nTVY7o5(pdV]^ilqHne Bq^D>X$OGĪi*OD ,tS FI 8ᗌX _VIҔmr+K2T͖`g,2ܳ&3d~PE&AU&&)|j4X8qJ3D|𦢰K~U"ja^N ^gǧo qy9_Se f^CE0*:ou JZ~l9NآEZ4z &s(IsD] W*a},Q bfz!| 8ܱ?lg^V>/ޙRpA.依HN3gPi|2IuAFsm녗a= Orm'ɣ Ϩ(j{5U-忾$KF،<"@@8_;#3})i~ rgOf Tkjgw)UeuϹ!r^&|.F|nKtD\dʏ٠Mƀ \ YL3ٶ9PS$E0:qGT,m'"Vq8Gc*KefI&ҵ9O,eWc^#U,{aBz%NrZDlIgs Dk;d2alë򔴠 ƨpIptƬɖ .l~7Q6%Ҥ~gQƤU#XD Ol9@iNIH,-j&l$WukcSG e>dUzM|9cvw@W1Hx{T$,zԼ`RG h^V-j V/ 78< f7I]jeIԱLߞuhyh y0 Yg9>J,rM毂b O.3wls!=|* pp_V5/A{|OC|k?*8U.HkO {nmlVuaW'=)2Οfi[Y@ܻn”h`;ǚ ,"~@aFСQl8#ۧvҦ\MQ4v"0݅_@] ]S'}rA*)2u v$&U0XG)qBSŧБUo0ŀ^=DmjX_B/~O%IX=ǺN;8;ࢆ&V"dxU5hͻv@2֑Π4tw!ɶR*hQ;Ї))V4_O X/ ^\i#QFGsO,aK!NwG@kN|3Pu|`j5%eJ"K Z1.& :ܨ o173:\{4< <߿?/F>3\[Pm_ɓ:hi״9L¨KI=*]2 a9ىnP#;xFP_EТN)~P?Wd f8xB`q6c`#t#my7Jׁ!oZV|[m$%q NֳOik`$HhEL@FSEܿ{LIFR)kܢ؄ua9'[- !$Um:.>Ra8XJbZG.V^X~jktlqvQƇ`~7$GA׸!ظǒmT-?Ѻ~u)$OUB(׬{ (^t~%`e3UkjU{3ǹ')"~?LO%)[QOq3mPȷm{yKu-ck)7czn/"]=x})Lّ$F,vڱї~76Ù4z]KuӮWVq8HOUo5x|סm`TKl2sCcŸ=cBˣ/+tuꮎ`Be 10"KRCjU2_n/:i@{ry]V=&[O3o"&>$;b$2 0}\T !n+Х*{'W[MF*#D<ܣ+pO,{;NCZ!d ?ۏEa3jMX9%yxͯ:;r_v)>eȵfo÷&r̦ &zT 0cuvr`&pTеѯg]jp:EQSi*0o ܉voQ_\]Rވ%HUG/5׾R7cEug][֢[do!8S2(q P O&RX^>@.,OVQ@kUrW%Gߎ0y•kY{q5ȟmhH0'M6LŢH{ F~v#{:SդG[?^Dv#i~_PBL+]7CJ̌,p"Z(7;ksNkJlHF'ȅ%yoW1}9:(p9Ճ"FKHTA. ,1 VGgbή|u7)eygW /4 P;<@m,Ď#O&Q`]eO2l9B7ǛpC/#vOnN.6zqD,M&'2Ae)X&n_L͌l&[^y@&AB\-ߙoF}PݩsN!/3qsx ]Muae)#ws6`$TK &̭~ԏk6,?h2=/LQ$_«uO.w)~1y]w_A󷜮ʠ{hh+CRY;7#QG/9s\~9 O*_]Ǘ*Qy\C 7rTtvߕ+Eyˎ}NW 2됏{y B;[e=V%D)8s/y:۟ɰ˿zTjNV2q<ꛌoJɑyTTg$-[ I W}#&RۍQZѹkTp57ɀ&oykԔ2CC\<5 5,__ʓSbֆYa>uz 붢Pa NQ.&N{;zUaE\Z9plŖ3mXUw<) d/?jX1 }U`<ֽr1>y0X]5Ǐ1C<*X{SXS\j/;ZEAٜLmf KP6z>d Eg$%1 qS?~wcQo3.-I\#ОZnP4iǎ]>/d `$$U˪Cu:}mnpod'O̒BL4:6,?ч!XIsUc˩1NPL*6xG;)F!p+33D> Ր\b['c0^T%r-;x?}]Vk%;DX]sp넌Bw5] hezAlCFM ,x;koڍV q ̹'p)dɲ2-ad)QL|J"d,O̰ d;{3<ԗ\bXK?gg֛wAQ<mA 3d7IPj.ax~5"$#,qo4AN4ď̔}sKl2k4M*bm:vh,JOxM b_w'j8 L?wo\ #PBu3Q́`甈Bl,˯r_}YvAb%'h yoXY][80=i9_= Gl`6hn 5EE&'qwF=P$C̢\O-ZV0Urx! ^!-٤]oOHXbZYzb?+Gcx/"S{yn}ж_ 5%"`v60_<_V('!r^lYÉ85b Cki wL`abzEXCFx~!]3% HĘd` 2K> -L}wPMz~WߣsDm$ⰨNߎ%L/+@2LBx`s]7L(ie9u[sQklkںox4%^G#- .z* Ƽ$0pdqk2]|֖lxJno 6 &;"t39XjE6]D/R+m dR ͏9!<Z}KZ2+ ZƆHM''UQ%'{Uv ^,4Gwk6U)ŰV2ZVN^;~rV g=Dv h+fO}*\MtLf$a{l|&&g7 Hi(;#VT${?F}5?\(-]P03"fkIEC\C(6Z9ƌ Ǚ+o5Ⱥ.^^åa'tP@-Cv[#4T ZB(嶻X/LZO5gRX=b.JPa4@[vh%fwH@t¾8&1ȋ"*O#KɆ6!)Dx;JoxgǶE" :{407Nj?Us\?okщH`Oz>['QҺ*>avRd;RX\\]Υ>GW 1<>}@*fI'bnX~Y8+c4}z€Bm(/e>NRi4]]c{abj+UdK-V_YAn?0 KklP|xe̖A4j"B_"P:Ph"lhIda M.x_h&.ܦّ0PոV;m'}oZ?# MYڎT]\;YL/QÍG771CdiUf5N0%*5C/<%Z'F՘lo->;i0Q@,fl4Qv@*2K˽8ib 1(̖y9ioCk7[`%N.pRV,}Q@xA&[%;@aHWEI?*4.ДjUYut c2[u!J~he[ o.!"|i,<_P$!TgVoД`JM(UbvDHF~7CfMMeMW}Lu=q;S"C3[ֈ/ϽY^>a 6vמcErĄY'޺)9KX^/_x[S~'Gxu|fF]8rW׹{kg`?ɳN_=Q$,Q qۿ#2Kڸ:Xd3 v؂4$N[_opR &8M} *~` gsXV9ac;fb,AF}dt9bk"X=p>b,O}@4 77 f>fʊʳH\G/Jm %Gx,PPcu#W?~ۣ](˱qᜪi:Հ(*mRIӺ~2t?ͬ7 ^951ZTe'KٞF1Ԏ_(0fہrdtJnO.| ]Pl\qPPS%h_6ze!D>BI,VVe]*kw /5 Fp=cO^(88 ! ÈV!X7oK`JoG7 6H_I Jpҳ(:S&x!6ԓᓓcUqx`x =H0plnf'QaL܇P BdSJ_ҬzcT?${oE_4q,Ԕ<'myb=ʺa!DҘ2!.٢ "8?,Eپ#mGG(JV4!wm.62ٛ|4K & kb WԶ5PFϝGW6~ECen;E-U@#Yes=Af*%dnfxxB즔 8K?p?,gquTqկ`owdM`, 85^~᱒D =hWW,%d-d0Djädzc7W Qo^~.eG#. / \ޢwŭr wCYAOQd \q|wI%.K3O4pɦ6[2֨cw?;WC>E1|#/;W(ISYiĬ݈tSͪ{l*tk';9=u ݇!(| >؈%jdxg`0;Џq;>J͒Nwxɬn|Eo9!և}1~"zy,晌\2 ›6Ӡr x\q;7SIݱڮ@T=3rR٢8{{':G7PᴔpU+*M{ M ЙEdq:r\~Skˡ~#I)j?HzOn#Vu[HBt\q⛣{=CIh9*jkAaplz闅,/~l)|GDYʭW #_͸Ovmuc7?_C6dUdπW~U:G4Wdy:AUg+,4P(0>%/2 STu_>]wA* {FRz?, r0WEM(HN /T, FQn֐] P@)3r٦ao9*ce bPۡ h%8wI`v%ˣh3&mv%Ӏ՗ȓū8Lx~֧r$\PTCsSԦeHdm0'&u鎲}Y&G55ǒL;ҏ~hc-/PG1x*RcZѪcfMYu*oSF" :u?f#%q,ҠD`=OM}H(#W`Y@_9K+Sq3Xg~gdjS cn+mI8M0u^Q-&upj/A| !bŠD0$nȫ ~Z742f0Xuw)C~դ 0g9< (dIi_ofER[qw*2nr>%#rD:^mA>.VkY84C(cfy++U}}ٔP}n`N>1X:,1x˶ߴƏ ĢQ\+c7Ρ:ݔkO=~Qt $ۨ0 'r Ӧ-,ȋXsX7Ǝ%y/{?7ȹRD.Y'-8<"<׸L`p+5ӵfr lstEd[%,Ek.L{/^/ANm>jW"oYtXWn&VbK7ə9฾K) Lb\oybQ|) ePfJ/$?ݥY{ZK97vSDv&mh)^N88[.<0&WY2o icg23!tuv6KLCFάГ_ϧ_ZWa%E,v+}a1nRL&$dݫ|tN5n"!\"3Ä*(8pa5c@;vYmTpRQ}v%DYwMAR;qNm(NA\<"WTMZbxe5s]ݑkک^?Z4K'1ҖI=.pk([ hͅRDCy:o$kz}jRkܠ@2v׮HԿ뒪gwHvS(R;jK]Cҷ VOkݐq0.,&y;Q8G;&tφ[r,ޔmTq8ZfS"ɁZWG.(E<^H50< ߎIƷukUh\a]a> aUM>hLPZ>^;>ydjSY{u\9ay' Pe("K0[39f̦Vo1M.2Gc#Xp8x 52.Yzj%= EN]qG3A9[hJIJdmy # Uހ ql0/drrK M\ r ,o*>`v91B~$q"9EXwE"YFj օ.w',3˹d8AXES ,KMJg*b>lWo45~eS8Tg0 ZR0F< ѱ:@u0f#o;Ze!ۋ56l>{b†ŽKڽ$S&<K-R[qY+.}8-1 ,V k`xE[ԾDi2&/"oS pq*E6)&o?iAE"reFJ0DF.(!wl.'{a" eǍ+m_Gn*zqgSN!*blRD櫪 ~<~+EeYGi\m%ֽ}`oJ\WR樜DP4zLQYyˮ\0(aED]ʄ;W r-Hf5l2f?z`t›+0Qr5`2y~3̓e'$e Kivץ:u>_1gJz\heL;SɏuBv|LI^}YWA~b>O!tY}‡w!Q#P{1fWѢCcߔ X+ҡ"r݂>,%f^qU>͸7o,T51 X0&nͧGۧBW VU3tzs,~Oy\ ְ ܬoy,`.;@1gIJm\cC?dGL{7|ER=}Vdq ?Df2o,Rjd+3J=yJȎ.`,aFH̓cl#l5EK`#:zIj̬|lљPM*(R z*cI1ojQ Ex^=2(m<;z'֌Bߧχ.eẹ4O^hr[ӟg"S }݊9 [qXƉʢ&ǽ-f.: q$|:6v4MϞbaO@G! e,!R}omY6-͵h5#yZd,@}|M ah<4 Y]B+_Du2'߿O^y)ׁLηCmǦ-+6Ԗ yF (CCMdԫ9!曖@5P\Ώ}D$$Ou>Zl5a=^ LUupamNz8c ܿO}B!KD֑I%1G 1N3 [^dLo: >C 2h̓vc1@Csu1{jK.޻l#cNS\/r ]Y` ԗGx2ZR8Jq-aCR(L<.0 K*h8`u&FhhTߞT$e-ѳM/ TT3{[k6 M U&癛WW|GHxxŃkH{Jzmhf¼lFt^ ١p-2 .p6J{W {ц JMc/.ϷG\Z2vrt1 5>7:k]+q8%9"f 4Mf-q͡VuL8jr4`)B,BJߞɝyQ&!];E9KT[MKl/&#m\BT\1U!ܝ9-Q= O0% nw.8axM>,6ܚ\ja\PۯT M1 ENY*?quLU~|ud*878]}r<4d1^{n:D ;rԕyC#B6_Q.@Lɤr's t$0Yaɀ4gcmrX[ڴ/4ju3]?~Qg]]8 7B2\߷tg 8AYVY7"d b&@y3.N^VҰj hy$\ /8gmվMQ 6lP̽]:Lz>ʱ|SWR@5^[njܪ.Z1 *Z@x/зh0bQ8pN֛Uۡ5-{(>p||=Cf;!gn%eݩ =~gfF"}X-I. 4'Qݻ&Tp~#ȝ-8B 2α [+GhҞݲWG/<0鎋'yGGrplr !QABpuwo57EC d_ bklszYN: Ocx0lG6BwGC Tf'NWem!aG$ɓڏJYNapl|kS`mP-KH㙱DFcۥm0Ua,f\A>?~t#`L斞v4Uyo6~!ЩHx55Cn2=eg^D 04fI4 ~0hFE›3|k /ւl)] n螡bA07K~(%qMb퐟MXa4cgSU=.3A4ǚ%0 ~Z8IȨVC+KX,/;gcEBko734~i oHp' Chӵ'6UBHo70Y6i)Oe{&Dgqee] D{6I`L،^ h+ۊK$hɭijR>T*_mhB(I"q؟aZte`+kҗqZ/W=![XGQPqOQ-%` (Di%e˨)_ Hkn.Hn`'Dㅌ;2e^ʀRF%4]wC>pjr]%}6x@qڪR~z0fSVŮ_O24ܽDO4Mlx+!իqxw 6q h/G1RߑniS%?}oAӆ5ho e\NcX)m1%Ł|aH[aMpj„5?B8M5L/ >BP8 a}=}H ePJ.ȃ*/H_ c:o@~O>^:&QUi a`A# <>a00tzA,5o\lmi?1~0 [wO5E3trm xBйpPݹ3CQ`^)*0-"'^~ZbƝ1D*;ضDRLt$m/ʈS];ˮfxwUoͮ=fuCxLLK3 $S^Xy:nE"**4:L[ȳSw tV #IȈe=ɴxSQ];/!;}2UQ}iofq,$/#+u c2-&b'd6o1 T]Dv;zAkusf]:مt˅G oTcS5J][Ug<MU 5HDW#wIS%o|hڈkg"f L[۵,]Qa !4[1 VST&gVMc"HUK Q\+gvi)~$0GF)09w~,9/}{&hLC̓AS$;`~"tĀVEYCܵ@_\SN t?K#UU|KwD4q N0l0Lo;l8'^7<ٴK@ߍ!)e E,7 r = =R@EGra90ypCmKvD<r/!mWk05qŚa5< gB&<+p[ M%YTrDGS]$qhP2*0U-ݙigt_"Mz&ecqKN&k#8OqMW?Fw<*]8',~LTӠ ^3(a¯S LgdWb?Pú)ݰKi2?0##SH#^=ԉm}"#$kFV[LPbUe 5l)&#(q)+o)_tm3fgq*ZȨIYً¼&~/j!5r^'JYl(J9/B`Nyp?S~EY90Ү.AoqAKQ ⲻJjx|%WH,lҐ0#lj$E  b8^^qNXkSC[A#@ c.AlѪjbr{GT|gRotZ) qoP2R/T{cF> EЎy6 `JϘ7A(M)c^m~ Sw_/F' ʬJ6$uj i@,s ~@i[eF'4k׻h!]S%BdvMd6|u!3~{,E@1YR=묳^좥Yʁ#+Qoc!8Ձn;6֘}.^- dx+;*a! ϛ*f!,B$?^O;RWgBD)ьHWpKoz{Pi1@]8l3eT.VJPy젢Y燾ks*B3Eb_zA:{7=1Ii-a еV'=o$sS?HsHy0_AL{^c4'(D>LirQ ×Bb-_gY\QW\)TiC;V"C ^ǬE}*w"lR ,F:V)ԩA/tŒXA哊GXlF X] Dh:jՕ-/J΍OF銶"GG믮!W h>3w ScC-&B :q/<ƭ 38ڡ.J63s¤ތ#AK|ؤEOj2?p0^3K5EO-T8}]u{܈ݨs =L_**#VPXn4؃*7GDiRaO6Zh_ +|2~|-1OBI(th2;ۆ@ EoUxXA?&[.a15tqj@ˮc 8GVC _Mj׬b6"_5mPIaEHhYK?Hگ3/nE#2g10LT56qޥoOs:lw(u~'$~QZ6hP2z394uwUF:40^=+R>|Р4Uk4A%H +%p5E~;˚z@޿f鍠pja}@/FL(Si qQ<:4(=eb =&rf9J(ARf  ]jJ&Db^|r˄KE=s=qҾYʃ%ʼn?h(3],kUqd%g/E%^LІ>V1sQ%9(2GUCĭ梅/{N$%e1\[5+_*{Ĭ+lvnkeGdF]XxtifsήԺHtga250IyZ \RPRl>$NyI`%wC٤,TF]䟋ek圍3# )LmVHEZBct,,3;b CMЗ@dDvÎ >fa{eJ~e)wkN9nsǧfx@(g? #_5 !JL'sk L7RK_{u=^/2?3vL'́%Fn'އDx M:jdZ;`':{Suy:iAl2ʴāْe~=/*2l$ ?rj5< 0܈ʬ'v ЮcH/Yyz1à4T. mbely(brl|/t/l|Y6n~6 ̍uKP°qĿ6Bbnԭ7lC8,+Lԧ]b`TDKk -Tf BDnrR}'tT1td,ns;͏[/~3HjֿM3%`="6JG^_:%&՛ u,vC|n_9:8 yߴtUgl*RJ:rGb1Ҋo]2r@ ϛ;&!Y<5vdg28`l$œ$M+}p%CZOY ) !,4@D74x]w3/Bd䒑9e:7#ihHj=C'yӟPkaY J{"a>NX 1|ZevJlFs?'z[nlt7SK%{sx+i*4H +ReH'UucU 9*KbA&~jvkElӦx[yXJ WPݏ?c2iV9+;S*En2ao8)y!LC(&_DWݪ7$b[*#mщ3ED u4WbF6z\8Q-zvlԤtQ^N3fpyW'ITwf~һNWSi}+jYXڧ3XϣUaW,05}ְwe.W@~I[_GTt ln7 VB1zviBS8YA:O@: :@&19ɖ&/#l+Ѡ=AeD]@xJ%Ntlyyy>6xǣ>r+ C|7B ?̺شv=,Ql.<|\^.8 補&ރ2ڗMʗjri=zu^t' ɪQeZO΋DT^0/N(H;$/Q(GF̕se|ů,Kƕ f&.Й%b@U'ɧ]aN[AH;OudvkQc5[54CCħ5\tAAQF{6Ot(k|4 r1ֈkWѲL['yW(#$vhݓT fjdBIB];y3Bb+ricn{bټmq 7Us%e/<4PUd7K1af ˓<ؠp*S ({=y=ȴ^# In{#ZWh{.Pa ES#(䓀ÖpTĻL ʅA&F3ȕRԣ^k99czE) /W@v8(DEF53zJj]ld>y[RJ#)lЌ.[7rDTA$U]&c0h~'yo1vePR݈~E; 9rOocqjlRLJSYMͅ+1{rԗO5z:_a䱚g3X$GTh.]@kg;CV&4cs.XJ:̮oǪ&oYaI :WL^I*oDy'1&RoQMSV-38h|k7)o/6"/)>Aa@ާ=>݈!(^j˓.lymsn,:BDer }u{oc?*.!r@_)"!Sq/I=U >e W;TECVCk( zLw;z qB{i>ҏy]B$5 ks} }L%:bWśnH.bwacS|h< 6sP]8YbZ;߼dK?|WypYOB=B&IAzl#073%h &GKq/5Q=W)$1Tj֊!4z7b^Tˢw7iȻDq۵ZB[kQd}MCRԾ~Ð0pJ+av;* nX$[b@l^ݹ,ᕚ"h? NԃdaCDX6aӴlJnem%Qi'kMF"MI#+&Jߞ*ӠKΞQ*+:1'\|2Ѩ;3Cݨ ܝZU#n#Zj!LȲ8&4m1#|NA,uaHxbŃX1ާ^U Bc3_j#./I-S P`Lz4clTɽSJ jNk]VF;f,2 !"̶I?쏏^ٺgWBTrzZ wԬkb(sdszˏkҒ<}Qd/|.vAJg?[.6KZM9SI&nF me%җKQ9l1iշш׍Ǒcp;&cYBI:b*[3 Tԩ)K{(< K3`(sC\F6h?{F =q8Rxucgx) 7ƪGe(t[ +V&T5AB(Ʊ.d$l3q/cE 3 2R4z;ELY%rWpi4]tWW}ς<^DFS~@aOjN(mF/ɍqA=4 5=u |9!*bvEآ5#xȖfrRc-.gjZ}08K6BĞ#}(6maL:_"B"1?_{9>-4 wT3Rm4e &m˒,hIr-EPmt[GrEW)Pi|^h `b.pO|Ҿw ϚNcW^0.PnL°oF匧۸r jmJ9c22ޣkg. x@'fn9Eչ4)ҺwXkkC@5|" <m)!hq^_L2[h]E%ݝ{`<'s1%\ [.KI.?%6A WBw/m G06) z|29J<k_jQKJ:|zN- sXݺm qdT|cm uo@D!jPj9lOUxR@S ٩J>.lKɦ>z^0tVпvx!ba,zW0q$MD"邏$/WM/Aq |H _>2A\.3_?Uu͒e:s7$OyUQfY'Q9*&eK[}*XXQ>&8Y^K*oxHǕ4K q 9p~HyaQuR;:9IтoxFjx Wn#<%.b{0ѧ8m66a50'˽nôV>[ _藅J3ȼغL[WuδW/_ew5lW\f,T)1%֫YtVKr2S@mމ+R_5HB` -˅Oo IӼiܝ+->'ě}o vE2FD5i)nGƋ# ڬɮ.!6IʆXS#xD-$Y=Ic$@ N<1uY; S!#\ΫYo?{y)S2mfy"o2<ⴸV?\saGH_{$FK#6 R$fP[MڞoD$< _⣲[aEFK۳ӎQ]ڭ}}2^=g#* ٶ:+.n2e 88f;*r]Gp˫uެrU`jlGއVTk%< mgјc$~7 . YA'JM͜)Ej=$:JBG5_z:Aː(nϕ=oQZt:l.Sll KЈ~%I?-:U1Q}mV{f ~/g]TVfTU߳_UGϭ#<{B^(9!"=}bGIӕL3. gf #o8.@ʅh)Qb%..s h᪷U{%am݌ ›S`P 6ΈubS_2J/]@o' ǡ$e$[)*$m>Id)^."6'ԠP'#$~}EZNt$c(Rta!7j″b,PjF+*TK74rgx m˝0 ;o84>mg@\[!v=)G |" =43}8]ڰLr42WMTZ1N6ںuGV~0p|g1/;k;˗(mS@-:O}ՕJXc󋾓k`&$א2%YbZ}pQWP/#igy({F'!knRՒ-X1{Rf Cla-$N {0T3џ}c;4jr!إSf'Չcښxvq3t`\:883pKQ jX4n>zVtB7FP*f r!7K~ ʠbs(;SoְP=ہd@2R??Z&GqJLyCOgD}[2gi*`BԤ7rr'ZIGt/}<]%6@LshAJ@ukZZAo'ή(icN;!,>@a%M lVO F&WUƂ0-KXYEZd)SEҵdMKl{9E8Cit<)&[`HVhsqE7W? woJ;RC }.F[xr *D%p!,xc~8j>t*(<_@y^]ctrhӁע36>(-|p!i ؑzW@I' .gȁL`Zqd<=),Q;-t@aL[T˝@0p3sJ=[dſwSh -HDaMhhꀰnT 8#xIS׍YkFQ QrV1@O.M@혮*,vnӋ3f6EpɺpkO$m|:PpX"~軃5k9s .L;?R{d"dS pWkjrP.UGɸV'ŚKת|S/&֞fKX}2cuceڱ\\'B3/fN|K_(3SOֆ Ʃ -3pHpWC]7gn ]$H5Bl !-?z) cha|a22pSG;lŬ vtm*g,Z3mj$d3}DLSe(|mdҳӺG<#D<zYoVhc܏EF}8gqߔqA$uN".iEȾC+KnM4}οamAtig>P/?~I>%hvOށ 04YPi` ^BoQVlR [laG*eu /~jK> &mmvYuac]`ϯܵ~,)[z+n4"U tqBτXU@&-;:sKgŐfQsSmt5p$RUUDƹ$]ļfzn茷:J;Kvt<u< l;2NRA7'TP2Jo: }ێİܻޓgW?!: _Pɒ_Wgo3>7OB?Jli/u u8OK(Ȭ@rsV}dx鍊gXPE r[BI? .t8o&1ə#Au`>7x@==&jCzJS3ݧ'_4/'ːf/0 smXX)xOݑY2bvA _drUHtV@_WuaNi%';WlTJ(BaUK9#vv#]wV^et 4)J7Cv0Uɻ%.S%Hr}!쾜!-VGE=_uN9sOj kFՏOt4c*q9t"׈$]::/,:w_ojA)h ;`-V ~mMNvє4i{SE=F?)"Dʁ^AU]FS.35.3 8W%zOs#ĚLirS %GWw'Q)\؅Kv+-|̲!0vbR3KO_'°9@I)sC>է 6g>"6(\<:y4®uCQq4# =k[nfOR?h#I = e#meΚor|'?Gɪd<|6O5PU*^抲Km!Ꙇ j 7j-ojy[2e4?TBIm͐Td\?i/쮈3ſhl#%Zٟ}CHP;"@uO F枝:]zpH7Uw<Xoou$؊y*,![p6u!| "g Wy$0A ܸ̻ːZV;*}(!3SHKnBi0qz2B-Ǩ0˄BcL[!~Zc-A) npr3P@hm@2b:hl}Bbzdi'wX 1P-s)P`>.Ϙ,G.}$ o.t[ASXqۄm3#1q@>@'7!(r̦R="wQ"O1c&u^ʟiAY\l n3"cWoO (QFjS)^|Q}>&FS*|GhEh:Q8|k-L/J_ >qa<±ݹK?3+5҄Q}dT$|A~1Fu]"cVLّ*>C"?am7lTdj=N?*$ؼhB8)@ai_G;,X?/f.#ƟS]S`X1q04%+k>50'{7D.8 ^0i Nh &RգSѿU3v5_,&H|,r \Bp]T_xbe%N)LN 2ùTgA[\$ͥ;!uՙE\i-J_Iޱ_V)#Zk^z+YTi ^^*7BvLbl d!v䡎#pPu$ sJY/ wffǕ#1uTB9"l/.fAWGu+BnQmDȈ4*}VaJ5Wa|niЊܱ[}P'i] s0f UKV;{oݾ&Ko~|p%0XxXj59%rz; И\ͳӱf"w(O8'`REH h[`LW5] :w#Ocwn yYrq::ț9\ 5Q[Q,F."[5JLn{ZC4 pb,z͚.7ehQ ) hgbhe6}%1/rGC2ST "9 Z%p:"@ iwI` xx S&3aEgA KHE9.AMzo?FڑR/ /ɋ$iQDX@t$w qAOXTr AX]X>ރa:e5DB҈ZC,N_VzVa=>DEKjWL ?axl7u?j$@D,ssSgd./>k=D9=Rb []9Jcdzijtض[^3Yҋ8*ƧpA̽.歚FDQ2gԚFԍ1W^eK .eb-oJh`[|B=kΏ7 0 c̠bQk`٬n־CvM,p$ggT3$ DokqUqa2AnVګ<85ƢIًډ0]H׃Dewd /}`h.l~kop2iDtm }7szfq6tӕ<@u8)8?gb}$^3ݡynOt^tY{Ea}$EjlrM-'أ짋v3Eo41 aqU'~3lOPF-fΟ" $I>s'|7q^XvT9vK[?{"qYFp!J35ˤ}ƒBXS=ǦHorfٖ-MbW͌ÃYH {GΙ.=>G]`[adZnzM`8gQihCx޺vr;zxb9wVt=K?kU]ݔ&pY7 55!Wڕы"Np 9ĭmQ~V(}2h'xUv˴9E=do{@.[S T4A /drFXE~ɲmy }{JI.!rNH 鷀뼕mvҝBkl4 yL2cF[jsT C#|{&3ڱg4,}^@K ]TS1vCGyWH_m/)t׼AԀTpfO8ǃVT͙-~7eƗP CBЂaB`@L\Ep .=Uꁇ\Q\N}L) uGxm^p} >B4rGdaݓ;TUbԿwSInY:H2:AUEN*`~r`M yL7FQ_Ӣy7j,V.xkZʛ 0 ՙkFytIZ=Ӯ[DK_ ڢ>fނXt6Ɩ} X&cƴs =\׉0ES:꘲[CGKh tN __WzA^PC= Xa5c(=[{n+:v ,Ja46vՋU@< snB'\NI׼!N$=r!BU?u=vDlS`ji 0|p&W6<|ZĞɮ~ZȂI02շ}UB̩$ADE|-drճ* 4%Yк7^k[EZ,q3C<&%E~ H'ěxvY$3BK5 .7hl!ܘ/Vgl؈hK; k%S ΂yg;X>U$Oâ\%mh)yS3͆jQ!6웉$r8ͣGYB;]V((?s "in}JbUzdGz;tSled:"ڑStfȘc̷iړǘ  ; j]AkV+A)#@8nS$6$~;]蝺tşOry# fI%^GeP}&,3D㒩ڱ}ӡl1< !KKXE$+ǧ ug҇X~^wfUfzLTpwaxD59׋GxʪIn˦?lAŽ{'B)p@:hSPr![ŕsN|U?s[d۬6UtpXEq,Ě/K3KZmL+HUlռj\Q+W+T9s=i:9oY0N fc#DkDKS!gvtnf2DTM|=}nVL۰]y`\P͡PZ/)B b'&5⒗Qmf K([x{EukE~0Iw$:͵θ1?wNsJl$^yeK^*Zȃ uljzB=]?7~F>?O_6\rE-w;sF#}:̈~RʥxNBd_w%0hsٶfi`72_UEy濋SAjeRonj=sg  hn5VYvJw!C¡,퐄dHQOyVY5kXT ;n >n{%S Z?F%>v4v&~8h~HllD'7zp(0#$r- ] j@.p(íDaleX-=t$bXYv ]تC&84-&gI^C[bh1Fd4ǜIۜ4ϟ̆u|1J6GET9*uD +N]YQ߮zm`ds(@H xTts&l0F`8^zN0$O: aɖ#,cDtfpׂIӏf )C 95\Af*F 5uܜ Ɔ^^ͤ5 5\{5hi5xDi$=i:\TĦP92Nizۉ=Y*wh(<9#!fcGCǜZ5V 7h}l}]a?5RE(t+ F̮R4awY7c  W[{yOi&c-<Ɔ H]aAk|5ŇL#5ʾd'omӬ[SB ٜ=TkMJxP 1 $ʫݹ E3,8J_ebW!u?VKg& Uc^s[`P'Iuozs)iY,"չ;08W}NsNh |-Vd_$|ηt+u?WߛIħS [\L$CABؕzmJf@J;BN'{T*lܼWjH+u% 㨔+YI n^LYL֦ƤtwD?G #>}q#|~cQ V_jnűjBD=QL`hv;ԡ̔9, Gq6\#(=Wyíd)qQw:. J/X 6w/I=WZX%3=dF횮O$|bM}B>F^Jl'I$v~'я<|r!wu|$Ŕ7k#[x#u9|#.##ty'uJO PNd $Kr5fhP҈Z2:1At-TطvtWA-v~9T%>7;C"ad޽z=S_pP}M) CO"yqiSB*w0PD$⒏f%zLEo(zG N{7xYy:3q[zajyIży+T z1DIQ"c-yqQ yL}rW*SUPr)g}6m]m#MCmT\0:ϫ]\A"0 S+{^\/G@baOز0?RxU0 Lve%y1>IS)9^^ՙyIoBbyW+6KO]v*/_-׆>TX9 g7 7tl({v"%bVPTw#GGcf?.5ilVNMzKCSE-sP!B۰e$B8t۾F(vL-|L NRXx71_2Ԯ"ĴYRk͍nw)hH Bbf[#z}(3;iQQ&*pRA3-?Z`X3~6*g@th=D˚jR}w7S~S=_>3نVbH'ߞFqeu-,-Vc<82xF81s#./WTMkmkyn~g>d#M*%%'}IZQ0(eσAb5@(5(oéo-~%~AǴ`<yH vLWJ/6QU_/[ PHÆf>F+cMQ""LrhCGX+Grfv9րJ|`V۫蝕$fGՖW )ȜD8 ; 7&N=E,U+K0{oqtyjBpDiڀ?b.іDh8*-^<4b01T=UtͧXNa)oԉ9Xr`/ l;JO-Ҫs1uT¡5h(Y;$q2ߗ> ni|I+6^d][i6´m+4T*?-YũibL fg}wH㮈uc{-SY#X*K HdC¿-ɰZ) y~.=Eʲ@L8st)+QA%o]?S0eh]VHHiz \F˝bB.w+gi ,mQ迸ofG(< NMk1z[-`5,39)kͽ^d>f+A x|=Y;X(܁wG_R-S'tMo?ז'_ 4FaB\!všwZ fIoF ɲ v#W ,!+EҧGcv=5ŝ2c^#Rq0z -Qc|օ '|(6|4IX Q1˹I)[8),%&4'j \1i++6 kJ\Na,Û4uuP pwpGW; S'h $mq:n` y$^o͕ _7sY~$CD/x+^7q*e`u1AlEh]VX2v.ԁbE9[XuiWZaui|yE[㎶_ɣh#i/jҘ! tk;%QM廧 P<<;h|,jЄל6}ڿbug87>Yuxay`j^t׋;Hn D)rHAPU qac<E87x0b5]UawαH>lk0#?,~luz C𙈼` M>u8[v}a iD[Ȧk3pOڜp-g sįg5Teb\!5FY*`0-0} NOR860Nh8Z1y/N<`lC0,ڥO}|.AX$=f޻(wBt탲*j¸hEF].ӌg^]_kGWf\,<KyLӪWCʍqS q1\(5"4<&oԋ3v`TP |W f|,|Aښ `|A2 ƣ?7)>#j>Ed(Ol oOv'!fpG3vaPjl Cg/Gxo*yZQe >yЏ}1vx~muz,*)R_#Cԥ.wb@Ar09yEgA i.8m`[hk[P``f\lWZO%-GsimoGNb GoKi))ZZdTmO&VjGR^dӜiE*{>1琾E76D~c}:PI3 P~f[`}>@F,YvW(.kMO!ԓ2ڌC]"[e=./pz:*!xɲ~XɚލBFNƌ9U\)CuNn ,F| c,jn#r1#j:Au*<4J{O-tQaCp̑F?37u);-nA< A '|D0T8T6Ci9m!]aI !Մ>xJ#C"A<0V ՏG1u!ig=D>Nk"SZkO[Cc0ӵy9&#g-^.j]U-ŢL <;-K_&>ğo)31-ˋrڕj0u[,:`t *a] j\wEppZ!E o+Va@g&u$ q_5?bGEW\yo6/@ P:ݹd5N3Љmʽ:XͰ8{2GOS9GDJR <_סvA"䘮rsWE2NFME 74%]m_Ci^vr:q𸮯_E#};+abn5+&0m2A ߙܱ/ ͟n[z.'Qc̺S@y=ogQf *pE-@ *c @/m mW⃝8p'Y0,u+}GEod<_zK'v߁;(=ͤ#y:V3P7ġq_6*AxuM<κ9J+ٽLQ3\'xݩS(5UG ݨ(-f~ sL7yfsꝱ.6㝩& 2cTQoJ 7EYLíӻEQ\~-We<"اg1MexzE;_wPDQ]h 3U 6W:4+O`?[h#u_zayTJ ai!p.#JqG.Vy\Qvnqr|L۰hqF{=(H,Z+1R R Q|8sAa"uO:\ҹ4{BR?ӭH;QiGǀ8> e=91$Y 4e閭>(GxH$V7GB[MM g9{{k$@9V.:~d0f#jTKdx2͚y E%q 853}? LޓJzhQ`%,gdN:7Ecuʛ+R`} H$}"50侐R1TA7}U,>B7cPq0"FM%dSQFk%쇓ޘ}5v؃[fm9kMVaf׋l@Ⱦ&FZr-StgẼ)m5%/qcU!]tF2Rz<?:ҘydQ\ n!\kq.stalLww.MM8!`w bhAy#3;`t_A?&H܌+Ju0>6%ݏM6> ^޽D`4y>w)qET(ܚ @ԯhaմjIJ?F,t\mXExv+ SN"IT} yϙDnٴš'\w>T}0)P¿.4j @ [A {W7XpT2`9fuyX$uR#.,Bzgd  Ő ;, _`B5^KS#?W@!gug̈ېI؊"t3+_bN; #}lI+iH }״&վA{ƪSA^xt|W6WtoT(ql#=z?ΪZbfZgQa&YEjz DR`Ȗ&i9n7UT"xVb()2cFY(^L̰$/l7{E6P-4TgẼtm'&ɇ88[j7|OAgiQißY0_s?d/3wuKe$]_ {uNØϐÇ4/Ѩ׏w];]QhP")aR*7r؅ kA@3o4Z2~aQͯAS+Ox-MI n7`S\ F:=vD r\vΕ^I6kf+Eb_!a8ĮaKܬ0j[UHJDgװ9{'1),aU-NZ瞿v-RU6⼀6wixOs6QwTHE(ci8 #B'Qx&/ך)Q~}x}(WUX"p6|4!$b+RǪF6ٍnaD=N.÷Sp<øPغW,?&cǟA_ףZ5l'@3IW|f "{ |X9V vI'ʎrV"nvE Eo\ÜbbTvm tv}wWesޯ)1# M:nW/ yj"@*K\@)-I:"B8PB hTv(@ Z^ᑼWC] (YT㜒 baxhCXL2% 7stGeK8ŀbDЩRd`h 4<($z"6 (B[1B{_ [buWsÏbM>Pp ꀇJw/coyRR:<~q9}a=Ǣ3_zB J昀%ԃY:,5b:1&EVVmկ¥5NK[2Gw(Y:$G" XAد(\kZxG쐜$P7*f;.@mtEzŪ\ J1J'af_Z4GJPM Inw3TظI @"]Nf/[T_LUs htX5=)B3K2%wd`qn}xw~Im)g;!alRu\:ԇGsInѣ ٢]i%F}N*G+ـQh5 )&tPlPvB ȃ<^qLQor19ΩaS? wO,m3ŵp` ƥsW$KXP/T]'84>eKA{xTR7%7ҠU-xcwP+XP_rZgHQ;a3=u/{s׊6i5"`F;7T^EKyecl[?0yK,qe,FwA&ܸ`]_OML aNy;'p?Ϧʅ6h^ ~ţ{)XLFC\%џ0h 谙 ~zGhONb2 =\x=G%;؊ c:+=j^6m=K4%Bp;@U1aJڱ@ABR Va\-e!* g|^/:__z !?8\uWϪr\F>&"û ~Ȣb]umcHKkB~Qˉ7(uxo;ZRuef8`vL*˽KEh4?3o'Y'?oE0&srnf3ˆֱ}W3נn@A9~E%J"y= ү'B˦{jY@/p&4x F螱R(f"Ś(mwuX] C](B :6UD4ު!! 囲bU#>6  W=}j*^"~HqRb.ee[ 욺& $#L@Xߞw?!Eچ&<wzrC@(HK-1PB ^P ;/#20AUo8zƔ}^u!y79 1դ)Ce¾0/}ߖ̩ԒjWf*|nԂ,F ?_P3jc>24&!Aƭ ܟ@)T%YlKqXF%HR^OhM 9ԡ|/PTӐvcE=.iKj4a'PB; pD; XPVi-5TXxye^/N×n4&Ȯ,!n0'ՀP;"$2\)}H̔©giEAs I QU\#ٗ-@|Aup jNĩ٧3=# h0@Ryl/ۖLh;l\7m$^|[K)5֋r&JwyX (eG˺oR>|Z1juJ"x.36_z!'z(54HG,?@6刦bްL:ͯ _rd nP*t=FsR®-l^z!AʥV:k(wʋk*X5 0@e'c2pQ!@|q 1bSOރ/3"8*KODZ9(E!vNx_/,I_[wޒ6V*s Y;lwZgJ`͑]^kN2X1%)4φ,xg(jƿڹJH^bd|Ws%aYI}D["O}}cnZdrBCQ*teH?@An~'ɰf0>IXMVS{91QKA'G(xcw! XNBW%#% #Km kxs_.̾ Nbk\9;)_0 GKMTs>{M)Z~ZwԶHVb EAYލB>/F&`}\ursMjĥVfz4T1z[?B/}8Ӛ<2Vnh)AP;9'-Znk")>xU];7'=Ϯޤ)UǯbM2(Z! z@dx>XD4+WJ"Ttxc4 o]tE 8LJͻ=ϲZu6BT#hFͻx$U]0ԾROkDf#:IG]3qcɹ~qS}4E8| TjgYi`y0NѤ$\;S"tPп%=eta~

#| %D&8"?.Mx iCեa?m:xdUaa5Ju0oyx%:crp2Բ>.CVDs쬐(>9lwyEV]hw/L}Hv4܂MjX,R~cA")YG,ae##MANzr+t$KYT2fL8 ]Tj֋q{Lbg.fyWy保쁜_l>nDQ mb 3\Aj[Gb&al{pSvKC!.~'$~Pv>3_0!~ R_YyJZzXMwz>0) L0&6kRԮ =QuA`M$!.JwZ #(E19ʁn49eo +Gъk }('scm}߶%G&'l^aN acBZ((4as}'l!ނfTIڃŧEp&Xғ3 /%$~p fϐz4*;rp1Anarv`Ƒ^6X"Sw}!6Ic!-`Xp }Fq_,=Ia|V?[tQ`‚&93ӨH7Bw"%p<`ߝBz$dYJw/ry!;eϊajnr#g9ڈ?G f2dGȴf8`>E Yj`MOmXce.SA؄1D(ڢxB TL:z!f y9TfrI5rDT=DYSL|fSi'%qł+9!Ssr1˹<ȘN_.ҢX$YcF4Fꅲ=| 15|eJ#*rũdŞLsP(X#l 1H3~ "*oCjhGzRuk K`7MK>昊}&ѣ&6uR/@5ڠ .fw\^Y!bӽ?@Yu"<:x3Tb*.h#ei& Gx{Xp  F.R)W@s.k5FY.6ʉoSmGw9 {Gٚo3B@G;`g+l^I˦`϶^ՙM=iQ;(VeѯBҦɎ ^t0OU؊7l5mN}İ!)9k4m>k7X;$pZ9(Gӝ/ 9ƫq~?nIs#4f73|źOH2]8Q<UfٷxF*(] I$d3!P",#;%&m,.x`i0h$X8cK>tEV6gd^ nx8oNΓl!Y1(D3Y@/<>g n]h3kZu<з?O] (6iv[[] t8mE{1hV눽ŨGǕymTTe 0q|~ggHMsm2Sh!lgD# !9ӣd q6IH)@\ h@;wk:1%K{S<\׈]*/y/x.N _5<*' ڤEF$De?+g"mQy7~aŞ V}3bҔ05J@ڹ 'aòXuǾ?h3ps(gh,bC TxTkIcWYS9Dk噩NX1jd)bW{gV m橕#|zYf~.IgO-́-nL&uz:įe:'_pzgM$Ԓ6R~U:x3;?5|WAԇ,`Y-FB5uyHBƩ|E_gru-DHJF|-)ȐzP,o?ɍȘj*|fOMc0BI/B[xKjԵXU9l:^@;n!g̀rl"8҃=)T*(+L+Yye=%Fu'ŤX+r cҫ $,TYp2 Ҁ#c}yrNP6NSTn wMaFVl4sGnrCIaK.SG+2ST^FrF0OfßMUB( -p1Qh7{AtXa4Q_P>X.֠K2xHsy0a@,* yapZx&|YzAL!+層"VY(g؈:gE4)&u,Pmwz? ~V]6x8Qq8ϡgQK0r ]HI?%UYQT2°N3 h~(ݸ1r 44B*~u9ٟHTZY]g6B TФm1WVn>8{.]P5&+,UJdtG8>D7?`Wܜp%90wfW( x]ڻ%^Y?sZ`~M1xc Hn2>FgOr.$,@r jJ&"cRTUlZy WyIb3^ڞvd3רqEppofuZV PP]uS tPd>'J6& k@l~CQUZޖʲ*=rk:=!/-oR&jō Kݓ8kS5 5M [sc| *̚k k8+w4!fUCj&_Z)jܧ' F#I1#ֹ}ψ%50J]3 D9#`Fu][!BиDu~x,}TpֱUG5hUiҥ=١BDzGrdI&{|ӄ+م46'P͊8Y\KQJEy@eJ :Y2?@MQ &T`eۤXTۿX䭨F]-c CӁe:k˂@ G2i.p6a[ $ ) ohW35U&qk|kc;x,h.2rDGRAM~T=aM`}b]PߖsJUnF8~‹32U]rogcc9zqHtj]mYSЮO\i3N>(e$PLkQz 'gQf1qi )i6#s]Oas r|J¨$Z9^H?%()=9]Y+~鋥DNg[ڶfmBJ? Y0Uҍ/(JB-)4-8ѝy;9X(+iP*iy$vdI#^ke@<`H" Gy0<ȹRj'm|3_%VTӣխAB^UHW&^5;`FihhN<[lK W(pGfCAG(FC\NIXOu5n'1mX.J*R$du#@)gg1v]EC,z;۝I$8f{AgP5@mu$0]vMF(!i Ojz͌#?v|j ਖJ\2JlED]U}Cr'loe|Dcm]2#i /ӄJ2<]}ߠ,_"˶;ҫ>?|P׋,m|[{ю&z̽' Ս8+;WʦTYbdKj7CFV u $a Ek,za-db++U~qw3PMPg+c?wlCkB 4hkgDR1k_.HLqALl|} +D 壿Eɷ6%g;M2-Gj y`XCgtɋ2nX VUNWj^ʄl2A!2)*WtCУ-v"\5*#Dz*^9"$h$M1M-t”# g*:OSH?l+GX e:O4̍Z+ 9F64rK氛jJaQ Z#ZMwYk0UOa. 84r| ΋{H҂4>D(d>6> .Ms"a/h<#ɟh*e~q; ( +\{cwPw\hP@:]g{5wlp3s0ՏuJ.xu 蔙y4&,!j/̝B>^LUFas[|uHDa{x23bX\Z*"L.n v IzU!f.YY#:[/T`;AkqG(:D77S-ȮX۞+~r)1cJuJFeVVZgeAGp^.*k^W268TӥrVnkNf}i۸٢>E)(B!L^SI@ IyK-9][5?zPO:ttL0xCK3 ֌J8T:qn~G(NI#,to^gA_)6IX1SKDKh{$t-2O_4 +[eBilH7h@yGXusuCE3,θXpUoD;n 6y)O&;HCew+4"#y^,£8"LOj DX%jփƯskKg9L!1F!(Iu3 ~Yo~Q:ahR+x+ ?j9ۧc`5?Ţ#ءtٸP SC !mImkmtښ,bӘF36~6KJ^q9?:COuS,!B&9| ]kkIZ\;t$SIJC3N+U #*g{_&<~OYp {ɔwa`mt🩯̪Sgjoj#UHMtC)tp=u# %SN.ˏ08=e|+ۋOJY&+NUD3 sG@˖M?~wYވ C27tc?MuDKil\N"˳th~q·]f"yI_|[dXO9\d1^5]:T!ɉԃI F$9ܩqq|Q1x k=y eLmEaOrO.%>h_VK#z[{v )}| u/TCP|I V'ub II =EB:.d^ w58`/"Bp $z=7XwR\wRS)@CS/ea[yRj8 _K4_k_Cf~u*[;/t"PÈn4R:1+2'וLd~s5b.vٔ"yM)OU[IA\OkDcxiJ0sUhF*PR~vi556;=i}m:CX2W崵eSv'1F^y2i/em/uNPlxU9:B3OF.o#J,ev7+Ni#N+q)FC [΋Q6Z)8Iݯ|h,wN -y$)7'2÷Uzpa0ȰߛtS ^}xRkki |nZ=Jf={ q7N\2m@ 7F@.-L2swogYƕGfٴT.baO]I9ANH ;?]e{WXî25I\рx B(IaH*!UP:8.CWVo]aЮq%I3nkhܐ @ܞ ǑU C"*)AUAfXƱqGP΍MAР3 ?LJymαթ`ehcaJBSȡY7~3^6XBW~KթT=P%&ID:W?L49-d-0ڻ2qڃG v SN [3m$aLI >5[ bUq9}INF8yْxF?=hF٣O5eBY{&6?X$*5? HR0OcE'4I;o(b@#S°֠P+jjQY܌by,4 "\YŚ(#~_> sKv3XœDLyx)kD M#r*%yf X`vc|˿Zc/@"TL/:<#*;ӌ|QU-@QPSM;7X/3M&@q$yAP{#VkjY'}d3oH<It[[Ψ3?_+¢5xF{j[H NwFN(* G8w-1S\ 8$n `BOmtM2#>/,r2)fRʽh}rxG H N"3\qͫv^h jQ]z,!s H3gHmkAC󰈁QYUϾ>[K7{yو`CIݓ97tTk_=CJَ6]5ћ'JT *J.ASxõȁkhXqv3Q.Kʚ\un3m!Q뺵鋴>vȦƗM?A[B\O"sPe$Z/}JK ߯.OHX21R<2دKld{x ϟ~ OoU\# ev Tdp*ȟs`00¥[Rt8:75CSTHa *b䏖l_];nmjL^GչD G ; b,L,@SE]EV8ym˝C2/@ uc=&iSDqDJZ E\7#H, /6fp!pNxQָ/+HM^ҵgyv5t}#L*nM,假jn0F8q/;YTO{]H83|j̑h2_gY T{p*=˰-G 6now\ϔ s-M/ Uqyi/DjSVM/T9". Ps ;aTv%t-I; ,c6@d/ ׭]ȥF: ld| A|;G6"{FI/RpiAYh[eD6'0Nv2OP"|P#;5 VfΥb]fcѬ"w[A5)䨘@` Zob15-=?=:5W>!-1\sDo~TZvLN6oN`2|SIfNy JǩV,> "ο OeJ@_{+ 3'17%6JC۔E|)=fM&J)z7xs® }DX<)vl(-=p)<}*cՂBg"C1K@zZA½ NXU@vEVs23X+S-jW6ߩ ݇-@^`LerX2w94%,IuٹD{b̒sou{s*@=ܗ.iS;b0!XYk2bmm |DH9uݺШ7*&MJ:ZJ=}^;B9ayj|E ~41ӗEm&"cJ"1~ϐyEM&,#Hpתg٭~:^c~T*. QOn9u qh(;Dtc Z-tnW uBFÚl{](zQf[S! _g'ˆ1wCv0~e41Z0h$YdYCihPޔ^KS\~6bߺ@}گ z 9.Tkx }C* mhz"-^Wc0)dleDQņAfjPXǷ] WHۉ4 2@;֊*u3]{w(YZ_?k&_ITH~)s!@TD0cVՎsYxubIC='$OP1B#k:89~.PTjV/^ލ87}SkGMCH}PLAա=USɸ@o>yjd ɭ/CUdEi^:@*+;HC` X)B]0َ\+^Sl=n̓%-S?O"  ^V0_1yn|E\Cb㰿 {{@>G5rK--g#*E+Jb,/-yf27a VK_ATVB.D%K {K0qↁȻ|ƕ^:RV;ÍIX1gЖSI{W!{'2OaO.\UQ?L$.k-'w.n mVvæZF,Ohmy6`:3R+9˔~ɒ$y-j'3~N:3D%y؍{ԃF"!kg-4xKY--Dh^W6FaNQ6 Q?jSrۤ /7 u^ sKBF:`6=];chj} $wgW2XKX@O* @X[-Jt=ٴK{g_]-gB2  R%n٘Dxoi!Y%o?g}:b.~]Wƿt*CtaѨkzdX[f+Jnw{L6ZޔI֐`43߫v옪HCvoQe=T{~ &8j>P;ɵH(AQN._aO&|{d~GjEtqٗ@}ec\0QeQUj6hw/8AWf2V =DVZ<,p]1`LЁj|tEn3 S+nEZ*@iڳChٰ@mlQb7[pT36W`pS vZ2s4?PDWC~(M]Wj%Pd^:ݬE".'bPW#uw-MHV @@M;mWߊ _<Ƒѡ(c}r*}T'yX;M^T;$g F$mWJ=yދRI?+w pX 7ϴw﷠9tS)/BXJ ܦ5G62Ϸ*HhAA+ |X$?AG+卤w Bh9}tH~vF@Y;CFhyjM,rZhO-/By9[Ԏ)ûZ ŏ|ݱtB7ʏHG?p,I<~ Wpϙs ZZD [0n7 }J¥$|$wV{L'"LCUbs(fX*T4@!(/]t)޷+\76!CIΘ_IԓH&Nj5;܍OHg#db39M%D9fIZZ%Ia @:?G*R"(\۽QU&sꕞ݋w&ej1Or~11zƴKݩp|tvJ Q ;ߎmOɕ\EР񿞄u nf!@)1`h@繓J~[z{x7ΠtM[4%2U\q5);hXOx`hўٟpfcz:sՕF@3 ʇ:-5jN;Hgr;³OH\5$`,5DC=xs|zbX߷ƢSCm[ EjF:hMO"W&7k6E,hZn/_QDN{wHܙtdyQ/Q-ڱ>AYi퍑SY s zd r1!rlPjżD?_?"AlnwEQa+bo.0`v|-dG]XtU>tٵ(jef㌪k(Őy.36${vD.K*xQ~q 3VB7#M ŠQۭy3 < R,?Ƚ8%>/WN/:#{#FMǹ?e)ef!sF?tirI,HY 6ZM-aCF+"l9oQi\W@W~NtL}/2{MX"uuy?rQteӋG&k#aC!ΘPf [fB-ciԃZda!mo9 ~݉+;%AZ./J^`y)8 .X 1jB/}N=#ZW^ JR97Gs]Oi3v ௿]rx5$ J,֏f DͪHCԚ6wj'\5"` +^ SY}򄤠捩6HFVOjQVr@ ʼRJ cp ި/āińBK{F@C*Hr m;6p4~`C(!pAH)tm3^/|_lFgin01 NȬ,S_V#J\Qz>#jX`_Rfհ<*" :3A*v S;HrP!Yzy_1zkEfD]&̷XH[j,k <3$.XLÙbGS[O'-8H` 0(haNR\=ݟC#ܝm^pW?_pWf.)u|&*ފ8'摷HOP"YrV*JuvOAP1={cD1J\Q H`]Cr8nnJO`hsӛO}hmJ(yٺ N+4Lx(wPѡj*#gyzFF:*뒧- dO:wΊMz&qbWG3B޵!Ϡ՘VY-oR, IHy"p&Y,#LPAjd kDL_2NiecID"#Ƭl䗧!zצf=GSbBZ3 A ##Xpp,&yd,@>b A]my@w$u˦bxxIT]3 ҷ1k @¯":G Y8m'OUP55GS̗v]v X)WHV09$w1T"sKǩ,I7.&y! D}zNH j>(7Vi.kfqӎaxbfkچn sR͠Qyp:w;G !z9tUxAɮļhIkIuf5OVMw\ z# QqrL'\; \2UZAVBZ58ApԹR H9b2rFW'L560)j [_yP۶b<)^ET'yzyUK$K*ft5ʻ5PL$M42gC]MDF1T ݥ 0ǪM'p/:g""źţ>hwV1'PʙsL5ҨbAji9DI,ZhU9Dsmd P^XTĤ NpXv @s] a~,_k3oBtup{[n-@wcT@_-HVo,a)fi mLcXLӀ'0Ys <ɮj(s{zුM:DXٖ4mvd/ $`G4G$ҩmibS̈YΙ¹pnM(QIO(-yᕻŇĩGzL8XG!+EQ"3eq5ehqo!\qC\z u3ЧN-9:T7TBÖ&/+7PQ 56b?&WZ23dr;\򘑉oW[Вdyt$pBjX?A~8_!W*x0|>\+gqE+ITz*kzN $"k.u#:#,x%':0^K˜N׃'}1zm$w[vn 4}9ţkJt:{ˌC8?Gw.l6Ao˅+LCbF6O7ѝ}ȝv l5:^( &iυ)r+t֖`WLP&djޛ"Xa sXwa,Z)Ed6}-*R6bejFu`K#s-I(9bls l!؍DcSrʧT , fioJ[!ޘ!{Bxol1N%Hҟ+d~&|Hhm sѮLJM(e^I;ԼRL4iK/WfFolm K-k'I5ʞNǸ=5b"P6Dœc6%"Çل5!P9kubi xm˨j,,y!𪒾S$VKJ.*i.UWGF7T>J̃̈ \Oy 1X0ڑ1,rh$i.<_I hr۳f;TI|@ C^R;տa1_M4ã>o9F n%žO>Җc+wR-Y#@ϯ,@NLD۞UW6vSOJ+JĬʭ1"l kr/lO>DOvaKVCyI;1EcWzyil#ɧ*r鮙1dP]k {5)1+Ag`n;8{aՈ3uKQΞeҙۃ?_F,4㳴Z0=eE=B+7ut8#HbqD҃0[.]sYJdZ#SDeIR"ѵ ѡ*Xݕ<:,Am%J'?gSZPd_/ s$H03ZǬk}AdbLQq*y";;ps5a`9uh( ?{\z!&9bs kvTu%Ye0 +,@%UrUæ%:6pU_6avhѯfz>f}VWpQEϖEew%~lyM/a"R-5hOIьuPhڮZR+WE{"\Ne'.oΖưr]icݫae<& `-ʬW@s"c1w\ϓX8ϊ4<_ rpL}ashi_=} cq.,rF!۞D Ԅ-QӤe׵ H3w}@ S:|4-:g>amHPMJ-Z6BY)~t5r^^)MG鄞?FT0V/R>tzRv rox)?MYex~k +Oy&̹cwNGy 6$"ہ+Ghދ/(%E6NӲšdm }a٢%{~lX尣4w+UtΡFie2P3ӲE5~藦8u3wQ_"`KZڋ%V߄q{OBm8Cy.ԷVZΣ5$6  -Dnr;D=="F%t8RI/#`!CfkN}2v?!@qqW["+/1mKh"x RmJ8.g!xd:0۬sWWŻd3ľ~ȟk`&ոC$EPwZƠ]>NIiKhFG ܶ\En)_Dwfo;hQ=džƑأM%+WLt6ӮCi7u&J0*Fё;ܤ.ێ6h i6;I蝜C{EpԘzJysT~Vx5$ZU^0MˡQb% X+nΘ{޼@C"U+O-XFe>U;dCMYfQ??pˤS1-5l-ȀZpmҘJ %pVC uFey7i __pO y!*D{ ' QnJQZ TT;^W}tanվųDJj\].̇WrD׻kWy35MB '"Dp\4= (iTSyjKS/)Uș]}2`6kJ Yh_E CowBcf`S^4>p! oEh[Yu>p*蠀~1k< 'P>g|slL4n 6\(o"7!MG} MMj"t:0 Q߮mWTu9.^2W7O2#OuIŒ<@"#8;|--Ԗ7^TȜ;G NJ w&gG?TsхIZ<^7N̋.Knq-$x}\<~}!^p)p٠#lS}"2zj}=>4`Z1YUI#aI'\#AoN3\>v>!>b!ȹ.gG4ʝ:{%I0,Y;JTeɳ(DMbIX|Ɵgp 6jZ@%Wp31nRoN%Nu3f//1EdHEN~E2W )U @rDŭh[P^z+ɀtAP^-Z)f7 '0>^3!5q#WTR6G/Q{$S)L1Wi}udгBޅc^u+0o+)t:d{KNhK\qHVPu̚S;0 N־b1ί3%*ڞmGZ@VaԡG(z l6Ƅ"Bci1~4rO?[*doia)1HT<_v؋,#r@hēA !շ2޴g_syk1ͽ/ p* s]\sMC5trWUu{NYt)ӧ5Űgnw:$\OTPhtMdT=sYԠE]TZ5K;ʕJ ZD sKM3V nT]UThIXMR|@7y`y368lljH> A!ϝD;#F@M>1V76jAO36):'WpݠAZ4%7`>d@]W4bܐ#geNl E '!2'=6nt0nX9XH[\kX5,VN >Gdy/̏X}q?'j*Z-H]cTnE8??p4爫abPG+o@̐",xqdQo}iמK)1J7LW#v(p\ X`ȭ1XPIVb NOYH;(ql%0>ķ^Ե13{:I_?N1kis K5&WI$tP[8 6l=FlRR'4 -H/Z 8}'|25,@{Sޠh5f'rѪ4>\HJ- |Y!G^|jW Cn+ڈNU_#]E QocO9zloW7e ?z U ]a&nüyvL~S246:A㋈ YX$]A*?h>xQ/HqtS)_$3'^]~ԋL3~BaqL xj 6%=޼tJ?˟0f{&B&(W[hfޡ$3ŽYخ-FZںY3S;\TN'Kof7cn0o{ɞ4%.EQ_*bOpz4`\Yc}3IUOIC [<1yjƓ5WwvW%zMdBr^c{$WoaIXÖס<=Fᅕ$vΛLC( MZbbdzD!Bo5OoJ2x-+Σݍ<VLoMY5ԇpLW᳽gFl[&$e3޳>0=;b2%Y`:\Nm&ZpՑ@ً}ulι.);$_C'5pKrRzѷJE,,#IJE3 {da8"ÿ"pzQk$҂ cX #Wg#h B;هCr)kVy]e)z`yh'#)/e'$U1b46~hxfTÁ{JL+ʎ?M`W@Sc P1\y@ g-=J^hgmqIJ3ܑNB?@czY'Z;*h,40]鏮w&]ҩ ҷss狽q,6F(yQ=9yH <1w3VYٺye9ޜѡTuUn(m~ Gog9r_[4W(7:*/qOU;,عās9ZZm Z9e7p2/gTSWH71<Ϊ2s{?k)FN*<&Hcv9ݧ802*a:VOOtv:HJ;,ф!FN`yfÿM5K@O*CB%=SCCJk\3ücBSTuK‚#@/_ݰ4L-]#RMNJuYb7@9},wTBj[N{pwC&{)8|do7GЫw8ZJVe`{+}~=uF*Q ı?'nl3VGW A}pql6i2`?ƾHVsi~ZKcR"툴dD\({K:1  p3WނbOzTvk@y&q#(ݷg|Cݫ5.֭ua雡`HvD]+<}2aWI=/ i݆qy C ayO -B ԽwVs*:Bۏ˅Sg_9)޹< Bf6TA&~2[Sv͝~jބ{1^/K2+űGq%rd97!;gW1!T߁%2Վ'),AD Nt͟Y!FUf6N7SuC"%V*4k$em+g"Wd4SQFM\Rɒ{ch_a<{ a =wҫ]Cl+$Q*Z_-+Piߡ#4X +8u<}eڃ"xc0Lwkar*ynF/l;AĔ,wvfRU&s0˯O X`rWO[^9y@ɍӮ= /VP3 vRI0vNL1ł]#,#K#ͮu1U1cU}i4E ?gLتGouL?N``ACh89}d6J#RA]!=Jκ_i@D0lԤ4ړ'LEL+XYMY;*GWh_[ڊlsQ:>#ϲ= !}~piqBCShzjj֐:Q_䥩Sjck 1SV%8d6P mȞjpѤeE2qJ\Z4?A@SQs8/mo,P8r ؂5U-Ň1(6 + d94cgy^E^@%+?v''ŁTڳqV8x+a?nQ1*D5Gm toNQ8!M#xcԂM~_]6X)Ns &4^k3-vu ěm2mʶfN݅ tjF *pR,8/H[+*[ :t@)v':WbDz+IH0NE Nz ƨq5b£uP7mHjԀ+i> k <,'".1 s~DקS8uP "!X_!x=ylDT \#DE~G>(8tMkCڵ.@AG/]]&:Z6 MuMKd5cl3|*h{^#-:5|l>/ϊONb1\~#`8؜MΝ.|?P`%B+r_ﭷnP\mjhki~/"6o5/]Q7TÏ.خ4-o& &GdR.n0PqTM1;i\s.2кM! eMPOíI숬.γbmg !d/;hPdחGG'e@L]qb-ݹj4bDg@2W*%-r9|L=eb6fQ@"p8V$zGbQZskxYoD2^`C z)6R'qJ_Ւ )}VZjq;RRB(IZjy48zQjbF5Xl+dU`6,S_by\,_|Pk8>+gI65@ch]?"}΅qZ7hTʪFP[?u}Jp ߱J2%K|&1fY&VVKtFnpŅ8<,Ʀ =lOL9k8[QO'OBm(&6/Z.7r2 u>Ѧ~EP+~'ܓBT*՝0A;·Ӝ;tca⧾<XWg&\A8}F]4DT͋)cgWm>1YB:-5؆@ܦr'Fw#DE]ZNF쾺rR}IMrgr8 6$x%{vgkJ JVn ',=.,^_q(0 rˡyTɂB49fIXFXY }L(ӶZ&[GKpZb: R |!.LTԩ*UB,8!yN`q婌1sx>nd%'\@)h1́{yP*M+ Կ@uH/YT4텠(LRKnDgr1T8"UN+a~5>v'X 2v c@y =Sj'e[ar9JgC~=KWGFth"]U Qh"_j"HJi?v)Mˣ a4Y+t!c֨#܍`h^?Oկ<@d57]WۙG'90u9*^I)KK2)7N\7& =|S$wM$7:wZE+">Fogpؠ W1iѼDsԏ{='ͯk*V{Θft UJsl&Jx"6N::20>&TπjBdo opf^ 25FR9ko)_mxձ޸~ W]VXd%8e S?l+hO#vX B|OΗd)VnVo+Lַ_P*F+U1spר2~u'ݎk]mf~1' 4&bkA b r_>JyvyevFU3N}o 8t ޼cנYZ'6&)$I@O/J6d~_%%[(cIhݚUGPlaQ]hV䷞Ƴ:!➗``}C}kփ]y.y:psM36NAtY8(Ii'tf78(cu(2j \H_},rHA#XwV^|e<} rO5 ${KCҢUQUwX\(f,z% :MvbcF`ܟyV/ Ho5g35dzRכ$pV`aC`Sd E`mMĹ-! h/C:v" 5Y)b>BKRuU# h9:Ne򙴕I)F{b΄ \x,X5lsGѥlWIvp&<} 9 vʆtD`) [5? 6 gMç_uDphDPD~FgnuogQDT#R2. A\)I3W};#+QAMOtfflznYL6 +~.Q/%͋чfRCLFpI|F4q&I a~f 0\&QS}7U7U.A`B ΗsK%WP5d /so6`KFY'`ҰekkQ6#[T XD:i: B 2{z/oB^A+WJcǕzq³ U}_#&q|oǖ %\B^4GH:UsV&so)DCtCӆ*4ײ`k#1{D@#_(·2pȲ#{7|v›M #~ω'~Dm+MH{㷦B?zL:Pc)IX:}Ld*{m(B ;8{c%2mf081 X #H_Yb^ z֪1̆bW揕QށUe,[P>QfCq]OCڐ +7tiDk,g} ?)j@g댋>>ciE+[ HEz3`%bj L Yb37+ga":Α%mX(07Nm_GOu3E-Lv01K%+h3G3+:Rvٗ|oW7&ZP㘰yv@&; K![nx&їgig+ f4o(B2ID"ʕ?BBDt(/߅d+, u_c+1!j]UF\*nc6$ٞ*ϑ,:H<3"|-Qju/`ŞG@ӎiz$0:DOҘn/\N geh/9ӗ^V; Yq}ø=E2=A!>[)M?LS0̏{sy^; ^LUQ !2[~ih]4ˠQv D,V7= [M{'ĩׂ0;w}O?![^[rNsQH(|~଑: >j6O}9(8gVs Q`K@LWװ s 7L¨:׹݉Š̡RxUDDhUk)>8hM|1[T9yᣃ2+U𺤡_Aǻ/~M$CSF7HϨWzml:D<+x%;IzPų'xk&.W֏q%C`(̌}ĸ9aZ,\D*6.bH$tzDt4{ylj>|†D@q>-PɐA DǏ$H`zH \F|]q ToUD}zMrvb?Q\VgO%)6FZ$B!(Zfv-q;^܆ߌ'&κ{#:.#/Yii'N^%@I4aW-hd*>fH5:t#D@0jړ!BiVPuf_ɋJskF5cg|}imS y:ʐ͂/U!| Q|4+= %$zݭ=lM AwVFu\aa*) ?VsZG\иC7[y[PͿp0[xjlZ?訮4{Jx^ωfnX3>F76('3Ƴ0Z%Fk(Ra Ӂ˶RfE{-QC$\qM ڠhׄ&)KBD#8mH$492YF{@dYj;9tdx.mLwϫ܆WPt@ e36P@! x![8b"IXяdT u-"{ e a#7m?|"*U@aU$QPzcO\T.b@QPn|΍tu4nFXˏlBȔ-nii{Q%XbCnYFk_n tp4-1Ud)bZ׋t'1dRO =p71Ԁ(06%I 2JMJVie;0Z:N疑D6h;i 62H0aqgh](6J*b'Y=Ndpќ%Y!Џ52N(Efi6%=yc`j˩~“LbNm(R io]aHZ KCm7(*\DT;H7ۚ~ꗚB7LGR7֙uY)%PX/e̶y0r1wjAi+~ :k39jWcFIW87[,Gn̐AR t6w\;hޤWKWduC-){Ɖo ܁*Zu DA5Q3pƝs ,CbH FRw/dV\|3z$<[ )M3`s4bo޴=2yzyˍ](!CW})y2qUl%sᕍVcdSb-*R+@sotQyÉ{U 69DJnF[ YYFpê8<(N|wWO:@l?Qm}uO6\T:+ 6:3ī(BB}n4P ]טvq $.d|5a>!Pn6^͋ftUY(-6U)KIxN_:*6xg%FrBat=SW30{(~`G; u,3D MK_} {b5njy0Ġp[X 9_Y*XU~R^6 ?H<=& `ehA{6)Gme:"0diAٚ@>3p0Ay4"\CKi΢ƍ8;,"Cšq^4ޕ5]?h8zXQ>Fg gb2]sRe.]dRv§)7<>gug}:-sC 늷{owI :MJ1P82xxf,V6KkS,ў41/j]׺_^TT/DWx <dGi)G#dC-oop5eͭ9Oc W*:@4u雌8;',hrVkf%(G&R}x_I]z|:YIZa$Z5*âpXS 0ޠ=$DZ:vDy1 =kQ<i [c- Ѱ:kr$Vh-GXf֕7 ܴm#8E#حO݄VgAaP^DDE[ MH2F<\ ^wQ;!jns2!u!$v q7m.+JW=r!p^H׷XJPˀ*Smq~LBqql`rK;U$hD=Z9ľRYg u;cD>1')Gʯ}EJCr>i2Rd^V=,)YR3Q0^; نA f=LQ1m``3uWo!{8u m:XN?k:@L:&Ò9[đ}I8tը/)ZkY9Pqd*~QI͌hESރ _~x7' tLWgoF1IAzK7)0-QG w7XS.)>:vBt8 ҁL+yk9GQkc9S78DL-_ PX&oyy8̡ٺab"x)J@I}ۓu^*l aFօi+iz*w * 5$<֊f2 9.RB 3 pZ(+x /g*[%NSX].۸ypݓpeX:qR9[+7ƻǀrr\Dű SU?"^|Jߝ*rˉKJ}Ml:Q >Lv,';mSn|4MEMvV4 bwS󕎌?AzS,3.[.m-o}6~/wE? [̐1~vEY2JOo .VqK TuaF&PDB =wUcʦ:ޗ{e_+!ڐo2r~7bEFr zzP^3d~"Z!I޴ja)G_=.—Ż nG6ޜIQםV6VvLD/ ^*clփvG^a@( EWNlaOD92=d8,奐L'Hix $p 4q+ ئ +5~z[fx(3u 2D*7EM)=O>mZmڭ2g7H=5+)hAo: =}ƾ';nkf4 Ɔ(L%G>DvyE es^Ѡ2MIh"Ra>K)ue|񷘌m\UI6kNu~ ~Ln򣬦dH  _N^ۗ PaJ'y,j\ "Vk&[>&bB"CODOzB늆s_kG߶{'RdPel#"g?zL7g/k#39H֫ r|FLm^'^ڿXSnTg8P+{k[B7 ,\+w2ڸ1F=|+_+5!{ /2NkHz=,iJEo_[8٭dS%Q{ejn G{tE/ |UZ U/D98zu5p,f S{ޡ \Xc+s,8heYvv}geNEHLu@8흙-DA!vT?:1jםv#X81 O{}p^fn" )GlB`j"e ]R hF:6RQɍ%r(OEOuc9q`Sw<1An N)xcw ж#`^"2ZxC *K}WFDpSox-[ DDI'G(Q&8.[AXg&?7AE?,b~gIQy/OV|ꗄ^:=^`7*ڦ.7IJ_X$3 =nvo]=\A|MyՊz//nJ2w:SBIޮܭY,S%ⴥ4\ŁaAm-|fmU|jDMXத_OQp(h?PwZ9l" Bh{:;W@u f6w]DڏiY7O߷w9f`\0܋vor|2 H ~&vCm0@Q6!Z+ }rQ3Q̲(CS![$X'ТB@䔆BчANڭlm4}7;~YZTz;,u;o%JCB፳>jj'\)zvm;ٱ !Řn>wyBt﯅xNm^un e`fcrSVjZ90rjOh 3: N+CXoe ]Av4o:ۿ^kKz0.M&lҸ*Qk;"w2c7H~I0IK?Hw9hLЊNgO%?ޭkqaw暦_-Y"ڧnSXʘ\L)2,ja"ᣝm14_}M=ixjMS{ϳ0 @ϰ=\ia$x 5gTa<9¼@ESRujvj1n\oU2jV\v4l$&܅ۣe>U>i~zy + `Tz 9)hƿע[N~3XzL)eMǣKmc+IGY2 {F $ދ T1) ꛓ(;gr7cR>&w^N[nm/ QN2ELvʼn-Č_e,A况D2}C'`(6g&Ά'ށ"eg/H@Ae~`u wǓFl?,"C28nMh֨-* U3\V۸(Qy҉엌lْpNٍ`dimfIv=m촄܆뢤ΞImAa(kȔ}F,FkS‹:esoTr(-tB+"@xTtJh>L$nʓ_24x+{p9U;:H.>P:5kb]3gfe.w9XXOBg}ӖtoX=X,!gIwoQ)[ =ng ?ÜCޝpLڴ?"&ȏǧpn8 B^f|OgԳV7T0tpNF2fFC 31{N NȄsADa9 ,fgV o.%^[\g5Ս.JHBSHXQC\,^5z6:rq*Ǚ_׌~\\-Ҵ޾69l`qEɛ"c_3WZQƸ&ȝT04>&<-M~%ys|,rvx? ܤcrZm>|ݑ + <,b]9@dF61?h _#5MO\Aş#P<' ދ#ZQE~?Vb}SZ5Ґp]QD g{>;9wwxNH #9Qs#n{"W❹h)7wV92w'MFאͨ$òvڅ*(}ȕ3Պ'qZ&/ŎyNhpJo@2)da!s%j Τ'o6ky9ފgfkKi ҫW>ͷWojo|#m}bXw^[cn_?m(bYVYޏRV4( <@%he/*<ԫ"X~F\mŗ}XqQ/@ͅYLRUϏ"ϫ6o+ߊs8o`-^C"J#wL0= b}_x{YPL$o3&/qг(Bf}A]~NAidrȴޟH퍘'W++;o0H i;!8/!V.\ˍ@(A=&Xx''ޥni@m h,R93jD|q>#wy> zmf,q:{6uڮH zc;gu5ԶH(ǀUqNTAtje> Qg%n^<QPڐh# 3I>Aj52{ŘW,wcXQ.aMSdKS1[ݍcd1%&\kŋ{19ҷBil._3Wbq9J/'ONx_ Aa:v5|c:BE&:MwR}%e{I9ѥ_zM 7.ocL9HGMoBHT5Gz -Hѝ\&h:q 7%v0Dm4p:b'n˙ :}Ev|ܾ/]?zyo‚~ll[1>Thak~0䥓Dڇ z;(ab_j45}w_Rpf!b1𢥓DgjwA&0O2BeX< *ۏ'*"EXIPAn6/$G9x |Dz-~4r#-a8C?P.ޛ$Q#Hc#0!c! X;;ϩmtQ% Fj 0cA:kVV8:. 7όGij<2>V!nΛ<=DROmz_H~rj8];aA4w; CčKGo}IEB(]2ֵI iYqժ| X>{2z9MWk'lxDNc}3s ~7u3'#1c. !i)&X"}UiƉE@~  vw}@(eI"fBS&bSdsa$Px#sXeDžܚPzRKֵATqɫ_ٜH3t@fTǨ4D}yZh$~/_Їl1wahg7CM(=b$g|W\B(4辙 2{ H{~eU!pFr pQN€K86^Ӭ^{)J8(ԼEOw[R 39xL[2ؚPh1ްK;n17ϧx!}5M'%?@g# qLP)h۟^{"qsכ:n@5YB냂'4Ho p״hܘ[(y 5y4Dcɸ>ԩ#'AZ\(Z9/w9<4F,ԵT(aL7<: Xӯ% =? raO'C|= l7 >bZ鮟9Κ]2nm'XuzcUM3Z_ ٲcۑX~:c ۴g@j%(A;e\d\U 0gtÊtIGh>4Qm׮NW#F #lYc-tۗ67]d,Aҙ#5{e"wNo߻Hwrĵ떊EؙQQ=c"&QBH :f3u%$OoWnF=&;(L;e v4mFS.:H=e=#\Ze.âuNܼ)$EZ 3P~QO*S!O$eXq`>.UOkd8#(aYVbBv]=wu[vo)XCcXsz@to^G,bqPoª5 i.%߮8=T&d2xQVؚG#bjOI@Dˆ" 2FNw U/щ<ZFģΘ6*S|e0&FOjrTH~rX}) {G|rKӲ ?EU$4?Hd")*$ymoQu;~-B3=$MBQ2KBϸ!)7q3ʃd?<{/_j$ٰ8e CEdV]ȟQAq$ol{RA~CU7kOt>۩@WQ4ECP;'顲Y,A%oSeOPpC1©idT`>>&y:zˋ`̤f;Œٿj;~s8JgW .u;_ɏr 4G&fOb5ثm|Ø*j GAG4pfQХŜ)R8.gPUibr*&Y@,XK 7xW(i١O;$K-BG/9omϗY+%h/; =Ún6 YӰљ5>N:XaJPc_VIsВ(vmtFE! C*eXcvL3L(Qt8>JػڹBJZyM_p".QBa=btO汮w= chp,P9Xsc\'U̮rK}v&S\G{ʑC1FePý:\*_腁"-bv9K D0YtWHԅf +5hxv:mGvR*&!"=XtWďiJ:>~&QShܾe#D$ ޶F8ʀ-wrdt`i}oV=\-%ՋW5Ofi\r;*fHQMꚔh|#ԿgF Z. IΒpEk(~I݄bfU ";s:CG2m*\w}P8>gh=wvIƬz[9ac9Z#CL<|Vc?HR/ֽjԢ fq\1׺p@J8 "߇ Hd% D0qݟM:%5Q 42<H>E=S8u|%Plsf> ΄(yMbZr5=fQY^#fb*q8Q? T bqA9A^X)O 4BD4 h|MSiAMRL|jj{&yHe?dy/eF0B,@1%j7sw,ے.p3ZlIFI~{,LN ;/l] ')e@tй#Crs?/nnѶc  6vTmk$b0mQlvn${eXX>: 6+076G>F9F20+N'&3#ǂ肹1Aª qFU ({/v3/8 ;fP o 1Y}s=zlxKϺ-Rɩ%7]ڡIGtĈ3 ~;BWmW҇f[n%wEZ: h0kNgvSDY 5NJSvΥSS W&RF ]fBF'>.n(eJ3a.TdFv{ G0 Wic:ic}guhjexW wĂϻI@vF*nV`Jb jS~uau(X#ǞKzH{g<;&ٵA4A9{W@~p &Y،mخC E7(S0k[۔ݽCN,u2(GȐU.VL-f10,w&5dIc;U N3qp@qǮpkQnT,*~]L> R>zߡ@ 0yN-'(`qA}^r>G/Lm-X6_A%$ϑ{2]QivHsPl ~hNo82Sc_fYi&Nzxt!W?Y X?'s>9[$N80W Q$j,n (дH!: V(t?iRk|bLkF1}pfoamJ7j5y~g} q 1ԁ_+lr}g$J v RʟfI`5gSn %Z oBuC}-,bL1L9kB*i5<ɫՔLj%kQZ#LteY~i|[&05NQ}Rec/l`$Q{(pa "N"H`>S7xdGp%]~\po`)yP=H\$"!GX7%р05okUKjz 'EWh}\T K2$) .|]ƶ!>[k)7KQS߿5E$ cN Kg426C'㰈b821U#ULaUr,K'y`Z}oO+n/lO_7Ɠ|{zߑu#L::R1tƎkQZ+VmjS~ڮ{ X˒;A-yoe;v̈́;DWd`3|ORxud?bȅr6^r"]]*+8EU_c1&BԴmԀ2mJe<5,ŊwߐԳCqu :D >9ȯ6mVZ¡; v_ˍ|7fG;o۾c~y(&ZUARP#_rEXR{g _#p{cWld1X@pGR4bJ曣" _ZRyXk-1,Mw-VE`]i.S Hq )\%jCV<-vPo8ku.{(L36$,d.YMޔ$H6h-a\kHT2W5ii\--$VCUvzyWSb%zѳ,@&;E_t:$nUUle,}W%:+V>cװ,'"Boj!ہy`٫[}1Q(C#d$%36X)iKaHLAs 6MrpTISPhm HՐ-+DnG3c9k&w8jfWWm3^L pL1$p{lJBdPş$.Fƫ5?^_?䉧 To7ѭRHzY^6U yF(OB8iu xW -:ݥO? $oX;Б;>i VSw[L@du <\m(yܱ&ϼ3He?6  72 %];c'ɱbWNzd>rwkϟ# M2!.lG8 57h5WFֱc !kz+:CB 'NluJه}^x۽VY'P/D VZtRж!AUD~\6UAv A*"ҁ}N+klqDd1'v@ަ6r>7@Tv'o `Z΄!숶%\ ׀t[judz`d&c(_5Wۇ7 ݗX"XI(Txaݥyv>[]j^{CQ ^?`5\QoQT?dݔXWFg~ybv3wY(q4M[9fշNdfQQ$>C!X MXyV+x~l*IkOѩL/n Nx/f }O02oGG9+6 RQɚ)`rvB.ٗLZM ,8-#q%H;@e⒋$ʈ`$Wj!dɳEMu Ve<-e1F̭搵ֱ̀]ӏx: (MUGZZ\(iʋOKmulHcZWVj.Tl]{(awX8K"@Kc#mq]ERN5u#sG0W HU[Tq߈0/\9; i;hޝ0$Nf"Mj* 涆/Y_O&֐`󿦶`m x=g{Yw{ftZ5\twYKt7cǎזl31uޱ}6=GYGW 509 x8YSH52oW?utz0S$X4,0ƨl$2Eҫ':K; b AU,!aky:p$ qJ?;Q@z`cߙP37qǏ'>AVΆ"n'8:STv@&4@_椤_YzxRt38ĸϖ䵏}{W`훬Qd/I̐Č=\볦g[J;‚KPeIFŽRa22"6HSeS- _k;CaʼniQp0"nj>(ՙ"W ~dTo'[!{} &Y-Ƙw sZ}BgKeee@4>QΙ5y ܣ] .36> .?U ˣ{ ,Y7 y._4RD;ͧ[Y`hy@X6όy>Q^wTp-:w6t7+IQwͮIPs#ǃ{9Vu0{K- mU~RUlfck5hKs"ucՇn%fH)6R=RDT8mbS pwu%pΚO npCQ1br.H~;V޼^<7m PBYʤ7b̦9")._+4dŽo ZulKU\O>+u8}؛{OP.wc(2s t\!u `:_Plg(.tq1h/t/=~lqV2v?LNfRQ_`L8}Sm$/X.tYr G!Cw|OP9x&)@]mНBɟNRׇ~OV@]:obkm=xbrw[g  GڳbIq.aR{#!Yᶌ}S"նo/愘݉dsbܽjPivmGnA?bF]F?ECKۜgUu9WC%/1DقoY/MBudžbAt;'z+Uc*/#O}u>J29=4t^Fe3=T }l@6;z:TKtJH/_FYtddN ?$![E ^({Zq-2h3U]XI fvR6c'AB>ix;}0@rF=AK8>βA5Oiр-ݯ85׼j+r_MLnYc֌jw~ S4"t+@&]ŦSv%͍.st>Wz=Jߓ_#7#ӐMuׂ(e1!ٹ!Oj]$ 3'*>&>, "]*@~T cϋiP=sxMtU2'+G\ԑGfv.>:5f[o͎T_<v{3ĭVn 4{ dq5@=D8'g6.z^pSѤr};V*4`̪# [b >~-#c-/3 ZҌrlҾ󫾡Cc58ƫcRf5Ȟn*WR4&%dC1@ NG3+: /6kw:nW2"0I.D)gGkF5>"JXʆ+7Ƶ{={AhHC70B@o9|Ug"r2%дssCiwtg G t:dQ*5˱9S#ȕVhYt {U,*ue 5: 4qOkX^(*P>ܑp=1'y .;׽Į GF*d4wIɀOg&#Hs4NA 1Pu&`]8cxE>*ƑBx#0x 7]f(bq$X#84ˇIcuqTWb̛+?UU$ڈ@$2ܘ&7P=oB mH%.N0 eS2~ i5to.=|OTT"wh=7T?̬LKIQTʙ>cV BeFC + j,|1.G R M$ᮃOׁ5DdՠtՕ7?@L&[Sp6ѳBѦgjJp}i'M"?\fß:Zw;x":0a0˓AaɷW!"iQW1 Q *UtaZrq ]fy@ٝޚ9ܦK)vp\Kpw/hjI \'ZSn&B XxOS*=aٯ@ " % MՌ0}yD&ҭZJ O-1y].dEePμXIq0+F%m3U4SaYԮf"&wy G Wy=FAJ9 \ mרmlRM`є )#LvI)  AS[_e:`,2{}Nv{aCIYC;!<S1axpKfKѩ 9Sv%V:e4p) ;݇wHIO̿EZKiB1Uc8Cȓ4&.PaTI6ílW n4m,>v;sS8Fe<㩍oCW0kORh$7>BgHAQ_fkk`>NI]J$wjpYM菗<߶*ޠ7{'>s($u]d놾ս%K\ZJM<$y|%41DQs&r=t;=79qO>r3ja, PIUlnW= &Xs Ǩò;) |{y@gKɒT;^e=itA9]m)KӦdخ55sJ)j1b$ 5Le{Ro}ckf$4Z2c@(6 : k3[U)J\+ԺIoѰ꿴CMD[kluLd ą%);f/oM{[JCRQw~~%of-4HV}TwzgLi=h胷C\/l,њ$7uˣ?{0"^wLTZ'zPHa)EAV Q0H y,{ %<F*K.\'"|\]ג>PXsCtPpI9QxL\b;HetyY3V={,uBqNئ(ȲEԓ|8ŝƞ64]:[KdGHT szW AEKHeaU^zT+:s:qDL3p;[#r11wETtH#Z ;s~/I1HɘT*(5P)iE 28N(lR 3rE2Ѽ wu;BS1/d_7clv"%V=dW[O54|=1v1 |O#gq>&*r+-52N+s_a+O6IeoH2X`?c\A L #@o>+R:k i4[g-R{h"& } ex![]|^T,d\j"hpK" `xMg%kH|S4#!Ю[(9z:RNJ!wgO0\!>„J8l'ށ,ڝ;OCWLC {5p5l.4G ]M3ZǺAq@aͭԭo^NU2hj9%gBBn/lp>?ї4z挶,jX#LgB!u"].`"|JÙMp( Q}8q+L&wU[{pF:nU7"QH-\R~L2FFl DȰĸxF t9|mCv2dױ ]$׿MkSo=N=3WZ^$_~Kblٲ ;{?.-Yh0^ؒLnr e*ݖU-Mi"XU2VԘI81;D,Y#|{9** c)yV 5N{ǂq;暠Bit1 iOݏupN0c]0n좓BZJGV|ثg=ݼ=;5i4rE@@U!^(QD\KWj/x,J!.7ʥn;p[.,c'ǀQ(.4 Ac[8ǻ=T"$_{hڰeoҼ25 Z z3RDGRԳn&Y)W<"^.l$D@4爙'(|!SI`M]uh&͜4,kRH1~e(c:l=YZ3-|ݟ0̒ǰ~ҴaėxѓGhTnaqow!4ʶ #A͓#.,8Ec8s|'Aڲ:5'uI*]R,amp+2|W*Ynj(EYe6 =?&cՄN8c?؞=\&:Q <`Z/SQb< ˳G.Tk)Fb>z23>I(Rz ]LoWdyƚүDB?W_oHk:*7璘H"ZqՉ #yg[G EZ m9NAi5o,ҹG1ԗްv;nJJTե磂 tA %.7D`t)'N#0/ueqc,N;ɱްu8wI`1 it_ XNMH,mTleCǖ" hlaWYV/OHmHX--ӉMR/oۓ(DjQy|>|=?\C foiXX*GP!^JMё͌&EjGIڵ-Oo /~aaammԭ2Eͣ:@R.ķJSp`yx19h] ŒP̧Զ BዙޙdzOnQ寚 ;#MY 1)LH,33&u\^Ln1&E@8nUhāv}?nnf)E5a" oA3צX#rC9.gbJ2p_+aSU:܀jJ%w!{F`~^[R :2/BL?^[Ol#ʈx3y27=Rܰ'Vȴ=i4 ܵ"}} dKU2i5#*g 7w\B2Zi> p: \k[;#yšu^vx!w'E0e(r}AƐX>@cP*&#4D*qG^9ӆ ^f=g^LMM*b^qJ+B 4{I9e3r!%%[3ea"R []w2 RoHMa4/WY:);{ֈTLDZJW="@0C Ӊؚg;=sO;6dثmJ)@be4Ǻnp4=j$l,| xʘ,p:'.bxw#Z爽9% d XA;}٨3ܔC(vz\[ *kZy+dc%ePL/G5]$Eذέlw]*_'n,lut~Nfgyj޺M**bp=WcUr/P SI9Ix?zMD"k&ctH] ҥbr< u-gP$Rqat E~zBxu͌gRH[B_3VF>׾Ru3aR({`bѓqmm*~?+aL鉋63@p_B*k9?0ez GFg߃|, w3Dz~mY 7_נ?^ˆ=;u~Tט~9%|7Z@!,敧Ѫi4uB!OF|2}FfE0I|=缶[Vp CSbDՂ0称Z}cNL2jȞif/s' @"T|L Z@NF.:c^--Զ5;Of95G͕9oT8` o_CQEgSW ! ^6mmT{&$ *[唏v>p4D]g̃lVF4MBj&iYW4t(Km0UiaCy;Zĉ@r!ZĖ3O@V|5:Ud~_byaf?8P6O{MJ>V0?~3IJOnT ccrK%ln_8ⓡY5 R_{CЅ8> /M0,WlI}H&&l܊0[ rl¼G wjO T+%Xhy'ߙ yu 24 33Wb0ٓs`aC Y]:چ%@9۬Ш"%0 k>ޚtП[مr1X4`mH|ۯ p&wje뷋n3E]AJCf$z  VTLK!We4۔fY[5dvYy=Ii\z-/6@Ђr٭Ϥޱ|?x[f,/aσ$&l+|:[ܦ ԒRԒRZem]cuR<]M= UckXo.rBSҞ|4:;i準aANC.?#n,$m_8kϥf"]cl؏d4?\q!?_7iF8o$O$G̎:oQ%J慺QL`4`!ڭ+ ^33ia;2`9P>&G"!#Y,'@{j$=]5cpvZVS &1rDin~etm c 6XGIӁC?u0Dul@CӸZ\8&^vĴ«Kl-;|o3@$gkp,֫֘Dq3v5Iܸ,R ַ#\?͈,O 8hi .R^ ⋇9=0LDm/NJn=׳~I5[?x a#x;P=1Wb07 dsbDww!.^aCo/ҁsPywσ?@4M$5Lq6B?ޓw)~? JH#ٛYvHtWa쎒M;n)EAh:EZ\MЄ,M?@}) 1di۝kj\`zB?4#b˄uNmO;t6R4XnS,:Ot"}_ ?X2-U 9&l#$2qhFvKwjU?hDΧ Sr/mx'_LiU0Z/~ ƅGFo:ˋ߸huq@kd,i\G; u#eE:0z|#F:SBWj;PJ<#[z'e^u Lo.*=h5=f:}Bӿ|Sͷ/_O3.O $38RyZ1@rc5o}s:"C2Kc^Esp W\ZIu+ϯll8k1DOxc=7禊 ZB;̝ zQR DkXi%@?w)+}M+/9W]'^JkWy3BnRUMkk}(ϺD?$iz¹.i:ˋ h?J{w|nk6k9 & vYh,E&^424x](ٰ@>rGG6w\Ob,Ud*2]aǢ޻9;+R%ts4?ըPhK}tRr%N}|U6">^ K@"}Om!~\آ"![=jP9 4,֕вjߡOX):x(u\7q5 YzlS)Y@Db\ Ax)Yt’ӌ0"Uv%wCDQ`@gmfb%{B$9z n-H` 0%{G_.5;{lJAcocwȭ,ʚ||(0Ԋ!=\T5]߇@|? ~oy=6ݝ Tz\a Ai{2h(bGˠٮ:?/>3lT(d(** GiH́gtgA-;=k̆#Y/ʠq/B1R݊=ON8q-aaq7rO@-nd B7Wa0K<]s&5:]7c%RyO 4.7HV[㿴SsAɂ1J<.YR6n#'娺rVP.`Fm7Ly{Nv=:}eRҏ@]XR,y+eDƸl`Q4CH8ʲ ͯؕ*~;A VxW 31ĮF+EțzLkӌfخmH}|x4!IT@+E ƥw.KM qNEZ n R ; mj$u+^>v4COeŸG˒n簢F Px@tju=J{ 4hD,+AaBƠj!rJ)7Q*!И۾!/ dsjy9XEuvHn{NΈ%ֶ|;ivǑ'(؆K8~]}*t"D ^ȀiW9mGpWq1V-f`?CiqyøHwr9YXb)5󎻂abRdGR8=. 53kj n _'EUgwdDKDbJfYH9"* )Ig?: w1b)xc \Z $J>~lk"(vJ/&E/[pG2y4 x)l~9F:Xwumte6e(A`ϾQ}.hXKpT"&ټm^;o]lT_;Y W¿S ۠h)OsB"Ja3V~ǸaHWNJ['KX73 V5a[/0N? ;?>.rHl\`x`cHzUB@Mb^{pZOسrZ(cx15ȗ9`D@ ٙO4 GAA'rTښȔx72NW@bv7WF˂bnJ JkZ`-`5AhvY'l.*a2أ#euF~b gX3dk'-'[a8vc,: >v!8H[cw\͔ik6xe /["(.RUJ.D+´PFʤsT!{cѻ@/=([4̡1Z3Y0 \P ^ߙRSOAr$QY |?2e? lL#ȀeKwLel7Ӌ4uA|u̺ ?zԚo,z3\7+}xU]t\ O`.Kd&ZpԜq3o"|L',P!y5E`c^qRQ >zSA jY[%ҧ{ O;CArj;q-RI -4L{84;{BzMary!L Җq]nqjY\_Mn]B%;l3fF,}(@UgsAE/hd  (&8""qna0,+\.<; bqh%q_|T 09`!g2l͟^G09GiYko8D``-zuy C$E_@;ʁȰYlqPX({d*Nc)Q'  m|x1'$ ,D'DWQ).}^aҩ.IjG;\:Pg7~$x`pGH9w,gl7=d-z-ofo&7M_]]#Rdp@!:7œD@ЈtI֒듿4:lvCCAWEˆˆ3(;ۂ"Sa m_`|뾹/5TA}07iU&l ji.h,{h ȎqⷓCPzYEeLsw[0i-y샹2&F'1=-vm61~<,iG!.0Q(\.Ñw /1w"_@C֕J]x!UC4ј4S!ljv2}H~N\(D~U3\/zh<>vԛ)<$h7F-"Y-J/so:v|$P~&ֹf"3cd*HH0 $WبQruu<|2S:-Xɳ A )5K"ne9.e+)HZ I`^T7 I). wߋO4g?mp`'_<`J ie̴~|K1gAКwgB$ -mh@ U΂A~uׂjsʄIoaݠU;e{G1ye#GIQܲcODU'XtQ_ʔL/\glڍRG֧@ FhyKԮ4-Y 塕oF@R.ȊuY˦H4Y8?_LT :JAM.~tMZ+G+=ɔOɁyo?*?>Pm.P|G9rՆꪸ8[/}%I-(д&MB2 -ժ=.Bfj7Y.;hT[gޮЛb`U[ u1X7mQ\ mN$!E3 0Aɣ.~@uM34 m;sWIM.~T@4A14GREV47H&XL `ET1b͸zlPJ~ }Sq/4bl=dJaWEMz^oq _%1f4բk~y2򾃢+eYw5MY#R{0 _j9%v%gDɼ5w.s%h}EPGUb1!#ҕedSw*tje3'9*bP\(yŭo\g:&1|(, atz˄6ʒ[Im!,2w="+J_K++}hy5 5 zZl|Qio^i(vH4oҼOWH3 i/{ gNv񧒙x$6Xg0Zi\KuƓZlCN̠U09>X9%psŜWbkH nNO3A41s],rG YӜ G{F-cv yC\}A{UG8tH9dFS?け)އ 3b3VcPR ̲]GbAR&Ɨp#NfI( үbap'9_l!ǤL}j3l-mz,iCLV@A>ߥv-Q?Ñh@yF$W &3I[[&ǿKjCeBDԛ 1GuSgIDqnb[Jf>"IqJ@l$/@]7kڑ+FnqȠ uJ@M">)t"`"}S|E! `bG .Q4䓈 HK l|x;[kY*| mly=5,(rA27<۲h~e]ː"&kT!1bw MF&絏>!<,Q\+1Jik|$8Z 9UWotz"V`tqj&/YBQpn O]OUg\pA^WιX9wyOy&ՆB~ɑI#SI6F])zj)\ sy o&ЃP^?hN[za}@ ̋֬(T{5VjWXXos@zbS#+e2ia`I)m‱# <&A!k* }6P)ښ8RZ{E.GppP,!<)t }֢d~Sfl Յ\ Tx%tc+47^NGյ!=RSޫAKKCE" &Lt~3eyߙJ(4mjo8zUox4?p,b)JJ^+ +)/?0~,Zd'zu(H5񵼞n4Е֫p÷DXpt }.F}q\I7>°aA`%d!AՇ2U.b`i #^c._׎厌nsL mB\+c-a3-I/Jm$"h,}KʻJp'H#}|}&4/ihoͻ/u tU_ʦ~xS(T@/)MwGE `gE74YRgra )zSj#Zp bl_Cȇu{ȶoW>&,᧢sezۡ{{?HǺ1]0ៀh5Ь,@ I{i4. med꩚.:QQy~k~7= ]?ۊ\0^'OL)պ:f_E:\^~!B z,/;;C 4¤\o|\ͺ9BB?.d? X3ÌMb|9$(7 %VX ! & GEV(r;VS#X6FVDŽ`܂[8sTimr 4hc]kyȔίS1Muׄ9}` gh]9'n-kW `1UB `uiwװ%MGLϣYJM:~d\#"DYHx r>`ǤW^ҭ<d_h}e}@^r-D9jړmeb/`^7^O/h+cbQN -!+qhN2&bA:%蘿h~FG31j~l$(/TwcmHgMnj;Wv|Q;R~1u_~&^;q|)\hI"Ů=O?x9Ne %N|m+i2{99Z% !-]Mwϗit/rQճL .p}S=4E0Q8D `w} 4dL *aߚIr@fz1Qpy4 P>G=|'sP&H?8۽֤i LLM,+kz<%{)J%~XY;[@GJ4Tdڱ/ #.JԲ<v=`457GԀ}:Y8$8M!iF^Uc 9NIY7&'y/Cm|6);Zݒ:z;0BNP1 KW fT$=uO_I69[rѮMFƸ:{jw 2ڷ \\ ۥm#גgLq؄t!Ro ٲq!ou:PM i"cS M  O0 w|N'lj|.83NFtnQ̤!f}tAΑ5LP͑U̯fwb99y u|jp4T>ش+{fM Z"-[~rhNgGJm?C%b y1jl>rCWmbͪ<ʯ=Ծ=7H7/  >'IObפr/ +1L̋g~Lm߽U+PNb;@1|q]A A+ z+QA?3!"(h0ZՊ A#^4G:]xiܥ* ]%fJlAI[P-CGzorCW@s̾Wzea;xgoP{}" 3%ESoUwL̔nh۶˄FM>,`=,~9k(31q󨌚7UBn+%i-Wm;Z QX5^)µ5O[4w]Բ+fy~ztTw a D`¬U&ϺK/}Gi?8e ۠g8Χ4:o&ieD+!H}x06gk'_-F3T֥3!3-nw4 mDHc3B'MW<&Yj9]7~9vN-Ÿѻs*$,wkߒuyd Ep4*d>x'|8"ۏ ͘eiP?0e֔CіH )@Go1R rg5zĀu1V.a v{ ߓS;<vW&`+c`i ̚KjL'}>Rq>I C|hIٔr̎dNwS- b jE$ml⋥K[!8PȻИM.z UStrhjݻ u@/FTN<݄/BAS͓8/^t% B,zSN _ړ|P۹θ`pܤ7Uףm&#ia߂Q4\4 9E, 6U/vII]2D/UwdAERr=L;AQ N{؋fZc^+`?* ic*[δ%7 a -H#.?0=Y{ӶH4V?[B/>;7FDo3]vi &Q93GĻAb+-GŐ㿁7D5eM ^sS'g26)9sվB]a;R=͔hIt7MrM&l_S120WΫ^߳}*tTro a% RPb-&&<yLaD_M;| Bt)Iq1)G(M3iZ~} nY{֠;"IG:&Ğ G  C̝Tw (r;/f^譫lU;[-S.oq{u(6aQDXondoB@(TH#G/*)&I~bqIeQ㖭5m!ΑvNdB3(Ix եuNCk~|0: 6_%[RƤ \l$LBqIwI4;k\kv f, 6E/d6 k߄ڞm@g~NR{3Gɪ\s;5(I  !pzuyOíP\'5,3T9~e{qТYMcVDފ}do,4ױAVk׀Jmy?p|#q+`uBxK tŕ٬F$ӎxV8-.stKX.x~00—+E9kL ?fRDr6Q `ᄙz͉jB<{i{g }%qH=}IJ.TBH92َ>и~0Kqyu9o a4MhHZ\s5u? Rܾ f8tnbց<?Y_כ9|isP긭^c0!!ѰSwshYPnV&~ +mln9Quud`O[gdˣ~[$.zP(f% U ^l;ݮ rC|O?=CPjk f4 k9ڟDhWbm@Z2WJSK׾ >m>Z< E-Դv9ҪG&BiRKỳOy16j jX'} )3fOweg{ת'\ᅇ)|;K=69:g|Zw}'̵ R<5DIZ  aͭzbݕg%L!1trL/S[QrⶔJg5?gMFv"cZg ;vQol!8B: uӮF"ygVn71@@Q3*e- }2"35mMGFbi :*4Z @^g"y| Q.\K9PaQmjcfuē(ocIissmpnԽlDbKhW[O2.=rӄ[hOuT W#BH \ *4]#l㿄]klNx. ̮կa[4#>^amԪCJC9E$z$3lFNV$un'N$eYkm!rQ(88RDjZ>HX );}a5[Qx]z23AgJ@yI;8`zkI%yRw:SMoKހ?s뮩w_^PIb`?@DpAR(] m7K|4,'8]+.OaY<v/IMLJؗvEČߓeӝOT:/&vgzÍ-!:xh~MIUwbPބl<>p垧5j z,55jmM|WKy{g GGX?I#p#Xy9]m We_ݰ;Gc~`F({[gaE[6-{s/My"PSG|x@сE!9S9 '\.9gm5g8\W. PͶ' ՉxE=9 -8L̰h&r>W^w87avL}(.o"}k'ș%R"}L 3A0 r3l\c)՞,BYGgy GR8RJЈI,goY21Ԥspq] ||@X9Jcn|W2X f꼴z{b3=iw.퇽3ڛ?.#h$>S$^a2b$;>;"b~猘{>`^V4{_cd _ukB\տ}$콰 Tpw}pwwۚu`QT T\15׸Qhtw_4DM J֗LLIWhyLU ވ~ʾqq|#oMDGVIѭ Lpi'A~Ue9 f^1׬ǥ⦨qަ gKVH\2*5n8cJGOqD"ە) ?ՠbq+X-ΖZ?軌<0s,`".{E-I#:~wg63^ h`yDf#K >?ijX[|ʯJq@(HY{iSb!7kbխ\;a|"p x l)nHFM\tgr4lJ5y&Ke-`x>[]1s JO}~:.A@z0+fBDQ;2-6`'J"8 ]4@nkw#b;f}e' iʬTȁq!QD ˷ml&Z7 !=ҍ(-UioSM))#nDJ {G&;Tܾ.B4,m~S[|z6ko5%2tgD>Әr eKaW4{ZHNc,r~^Ne8fs, `ZJU46kX%5}+V׃HfĞ&a RP> BJ4Qa;ڟ8l}C찉~|sZUeaxŁ?ӬQL {~0pMoPKX%DipWR?Xs|fgJCtb^ގߤᝏc\-m-+iޝhgw1qxV/;JmzYvߊ_RHtdW +d2"9>ud14 /]Ĵ${n }N%"59cB})URu5(!`ց}o'B /ChG#@ E3t2 R%:,|csv pv$1_ *AԂx󡌡qACdu݌,}OZKnzrbત?7L QwxRü3Z0-P-6 oSgZkT^;@i:1Ji7\I'<=cוFّ[lO#y w V/ŋ cUb^Oy|efظ$Ѥ.au2[ul[4$j4XVe8|8F9s޴:.l ,1vGyA-9V!Xޞ(\4|RXxuĚdžblGIR)SΨ@2xy@Rb[uԯ^qw|l p70v_h05OyD:t8V9N'im"UUX{X@((Af??m_~C!tD%X<}aLS@ twOY<#l/lovdմ/ZI`j!u;#xDS"CK*xuS A˥SnP"4:/MCŨVDҹb! x5j@'Grkx^g:uKe5/yO@}g]fቺf\QWfW XjU [ʶ] HC)NK\^q8/>KW/8~TOWeڑqy0n*.PB~go)]6.0M0pqu^,+H~3}WX%G~IDtzkܛ,=y\ЋԆ@U]8cM8Z \`ۛM2gCr=ERYigO:$iv5jytCmBGkioHI$X)ξFC\嗞zXD_tD/EHXbP: fuS Qobtz}k( FZva63KJ+A7MIer1GZPj-fhg0e2vs 7t܅p D/$Hi dsL1t2c +:h3>LFUAulp'XJ'TPI 9 ؑ$t]53KR 11} A+T&Pf .KS*#$gy gg>OUvYz}>7 }V"Վ tOt,{|fܫ@,q)31`T( cFXx8rnCH?paIbiW)-IG9wJcҸx9lXcLnhGM6hߝsͽ $RtIv Ua^]ؕ7ާ+)5ypYs*8z+専* Ax9#!Ml %H:NH.${3?hO)[Lv;Y~0'nK}N:Fw93ɗOW>;7"Ka{3P|N`!b/;]Bd39JZ/82VȞs]byCϪ;?U4UAVHM>$K\ Mz~1 |c6Q 0]8ݭ<@Ɛڶc^l;5޻ ȔDJ8|W8B,{ulijr@:)Vٕ._gT΢Xz^U+?KS@|b+a'w>OIV-RyEd$P!ׂ5v7Sb=.Hh>c#x3;/zv-y^ϑ(^ U /!K>|~$ JE;<'ٮ"~s4v;& N4hEU$'zl! S=pӅҙUFZ:`rod\F԰J+J YZ-HS^S-pEV)?7Unꎁ}GeAy:(yDOsi4 #gr'[W'' sen3ћ= ~k7Vc3[h(-\.IgwF E&E( s2cAa3E51&P%}Z8+^Hux8yL/̲ tf0Y9Z?|{qm0+LXdq ,=u*VŸk(cX'hOt^>6=&gP] i{bEc!Li駂ka3e[O?SiJ{àԤYxTE B80 v4!j OG:d˄9+x2"/j?/]0_u6$?cP\/>pcRZZ0x53h1&f Rb\VqV^`qq9s3BB4yC#{j潛@V`Κ"0VWKN/tk(- $I΄,Y+`HIm BA˹7_)&C&QIrכzr#` "ZՆv͟k<-}BMM\cp5bʹ|6- oJpd)`3G\eB_DnQXJ)2Ig'3a:8鱎N7L`{OJU)` xl>~vTk/b "Q ahUtK AɰN6Ju.OuLR@ͮ: p*f?D@ӱajT"xY;<9?P 291ehJ0O+VYc2Oub}LGSXte~k{Z}\F3R; ќ==˸Lԝӕb6cm.\y1Q@]fXBQr]jsEjHhGꕩu 5&";,'*xrNX+BpfgDUJt L}v7҃q_a| /Y%+h`#-,/O什ζp#JY],ŀEJ\N̞Iss?N[4%n&s9 t/8 ;d&=\(-\-pW*k[ ~w0nW ڢR[p`6p,I$@k~KgSϧh+F=n[C2st =gAJc+A o7$39L2"bV)dmW0F_pjX:0,aOï?f,* hYgryI^!5WҠAע)5b=m_ ^AkIaO#gwwM!@BZ|YKgBk+l3FOdclДl^F Xiy5qEY=T߾$A !nw95>Y zu/9֛_6D q3ThEp,uerKc_a;CmƯ]H0Vԕkq퀣[flT뺡UEsŃ?>;2d {:<#bx{/ڱӭ4_ܗ5Šn\t?zA4uc(كbΖaId pC*}_'qt{yÞ ]4hy֮&rj8ߑN kbSH*<= %shHQЌR5W&50}`Pc;Aw'MECuVOX70p̕*ݠ EZnet3\ DPɼ<#(g iσ<\-v4:na]Y߇580党D-y \sqRC( Ga\zW#fkp`< YMt7fșdێEg;Dʍn2jkIv7Hz0vG:J yJm]Z?ks ԄWWq1%u}Ws.$m.DM+[ϕImfgP;r+*k|UΚgy͈˒6!q ^q<@倒٤g̀_ c(TSqŖ"Ⱦy`krӧ̝(p~T5kJDʧ ]ᡇrU&mu14W|[ ysřD"Hjxd"r%QftڦΒpM@g(ٞڼZEgdxqk eb>?C&. .7A1B8J${iޑMv~=8;dp|~ݨs'3#.X'%)dF̑Iz6QZp:ʻ(fw~*kCGb;?OM,SלB\OS'_%JY8Kmd^Ѩdۧ諢teJah3v\JX\z~aT͊`>Xh:O7)Κ)pƊhEѻ;ֽJEcf>f@3K0G[!f1mn\bCI7fa&q ? ttU04![?z~qp8o.QK+((, x>2T2nJGY}`!8K|^1i_,6v2\2+{AI`Ά!OfϚɰAHms`򥝬@DjxsPdդ7 q$V]T[%zN*Lv+7il -Ӿ(sDhK ˳0" 1eH`XqAg6n$Pap %#>tATeAa]|k7r2hk9Yr1<1fLt@ü֗v̇ٞ I mNcuQu wY4:|i@CtlB-2v{Uwoi7cȘI/ BPqƺ`.UqWF&Ԥzf 2|3,(2xU}}RdGQk2,EEM%ic5f}R=?/,z/i܍lËH|2R6hK^V[A}nZd [1Kfl_*HSgA ^gg>7,:>e oM9lm6|T&%'`4f3eVnVLOOm-ADGY.@ !Tgs>Cx ӲEO!\=WǷ*&_8C 4j[,b&t9RPjطc=arRɀ%@[k?Q&WmI\zx&`,[8{IsLɹ2[SbSP賯%'Gdžwy򽊞G8 i ~•S#>Kg%BVmI' ̆ :2 R%nZFRte+_tO7`$M`=LuH')a{ T4u$o9F֡,ތ1W(&fRX+d>H>s`ΦA+9 !34 -7k:]H\Up߮dXO,FxVy լScUAm*,L_#k$xaJ8E6 >8HfTDTjyeUmiqA3mac%J?O=ZϺb9_ڛs46rei8}9XזUs~XW91[C\5-ygF G nAOz.fW=a_fmD6~MQߧ)O?fiyBK+Nqfsi٥r9ilW>w%`P@hW㢜FC dnb=|^bs A/gI;=#Ub 抮808;q3>Umy-GiB'4V$ri 4˄#2B} n"@3=3 Ϸ4f-33 mA-ch ,bׯSFd~ 7 3`r]>KڎGQ& ʼn_%mrz%\n/tN0بcȟ>h^vuS> zTdvD@i6vS.X a?>Q4|v l7?,LouVcd7~Fi}%Qx'li[\zij$nLA!tQxkxDLdEuqUGbe':\OPٔnlvG{+ VIbꈷM nQ0(`sW7AI}R]> MUw)Y{K FT2} Qo0TťɿD~9?\ 4;hrcO+~#7+b#Ԉd,{wfpyO [{݈ 5*;5^Ɇ;DƸW;M] a:HT9qq)H!J #at:۔(#)n\d#Do}b%a];_ #. ,k1*F2̥+qQT@% zՄ[#T*T[NodĽP_' cJNZcRBQy `xL7680_rupWEb#}_?]*BMf?݉p@ *c"wѺҬBH>e6_vqėC<J|#B$VT".4OrQB}Q]N\#WBp& r]t>Ó`YN8a-! IM"(D )I|ivp`:VhԉP?`,סmM>,PuM^-0~ ,BМW 4K8Wbf_Ԅ:Km Z/|blg@xR<](螤 Ev?N\ik:Qbn+ {%h.M|FYBdHono9aa3 w/W)VH=.ZvѤDO)jlZ` Ƣ gf% Z"U7:9UtF&[bl?LE$DhDmUĪ Tc _,Wf@mv 3`s5Zp(yдIrw?SK\kΠQehŃ͟7Z?+S 1-7PRJ CŸϼ =Gރڈe$ ̶DJʫgS*Kĸ:/h 'b :%%N+^i~c+~]Vgյ[oȖ_#XPQє`0nS~ "&b|{ӑ#!! 8dw69=f\A_~ZQ8 vYX,Rjw{q[3GǏ.j3^,|/3Al(zy6\=(d\;D2'O,h|W/h.vPY$ev98A{9O|HE5Jq5o S5>ONCFeԬ8S~"twocemWp3b^ S;_-lz76`|]zF9xŻ^~힦\U e5(s1i<)C!?ZǶ[)s=;k/K6!?kJaNYiH4~ xP_(-0Lxskބ5J6qwTw t C㖫ɷ]e) rBLZтU^z g`òd22<,eL}Qfi5}!6V!#rIڎܧ^ـ{ĕjKw`|n7j'q~lX?<\sF<'=HU.ҳƧׄ(1o9]' ?Q.g$nAHjuCT y%ZRm?E*]Q{h4,fnYl8oS;RN<}=KQܞ,a9 z۝n!uBuXUCJ'U_]i"52͒Ĺ"ls* Uđd=H:#2M˸wC}ԳE י!<F;F0 ~%?F| 3IEx %‚X;d4=p@# u,e o{"$.)|\CATb3dgŽ!p4ql!f򫁂p=B%VZz6B}@=_ȫ*MK"mS:S_⏲.פpw ]CL2۽q^Mnrv_5+;:fAC/Sw9wnc9ʖjםy]/4gBh#3ɡuAuPAbƄG2JXa`~˖4(]j\bO#玽BmÞ^,%溧~VJfyޅwN,vO%}AWBfN)pEQ~kZZN@fY2q3NQ%=B\Jɡg rF6K-¡TCLgm5 أ#g% ni'guMOb!z5n%k1V&;6A_K5< ]Ӽ;uJ r%:P*tIfZclf|*(]-akG{Y{'hgߴ-vCL*V~ʒ"> wj=j˄口՛ ٤ ~ǒu.ƃ*xhFaX5(,.G?^1MV YG֒SR}~Q6Pc#A#=A}C4;dW^ +L6>gcɁ>8{ɐ#U; q<;O5s?7nD{}z!畓覭[Pr >>٢ɠ \;Aku_{ &0@ZE]}UΔ'`/ςl8$%F3P0ǫ3@| q#) "en 9EHw.wls`D ǤF]eG׬ .rݍ5r`ԙu^79($Rg n0E[zmf irR}I`he`Ht>=zK^M&(]% =M2ʈl$g*'X!կ`;MlT ;ES(.J㮎W" BOZ|T0ȀYR_݇n;Z>Ke6:q%N^6ͯN1,Udlh3Y[_K_DqG pꬿ`6vQE\|nwei~u@JQLRqT!^O4(&E)5[vl)PSɖ'8L+fD^ncچdMúDf ƒB",oyF#o8KKl]k FҷHuDߞ:ǃITe:ﭓF 7iGc_ax44Ik;8.SB$@ ue>eqKsȉ3PI%Ҷ$#HH=%6ߦ2? h^$1Jp<=`Uw^fO\J0a@wKeAѲZq/^w4$KVժTk>Xx8] >Pb}&ߴ*™ǩe))tx'ضrϰ"$ lσQzd!Џ$`2CB!Cd8cXȎe(M49$Zg2jn8}wA"24ɈN8QjYx:\K9DžykUhg`;>Qo)0"~JlP  nxz_ }DNT;''0e%Ty UcnrqwT&O:K5Q yqUo]o̷filCcC;72 CPG-`ư fBnSsI(0anق=EAueD8S+ >7@ѹ.ÁaXn3Kt rDu7\i(Dl#(+rLi*H  Xy.j}ULmrԥ_wk9 ܴ"8^甿56vARMKJ@D.+ I77 Mu -øFGvWd%cbFB7|x> À9MWEׇz6nIzeziڨw$!bqRYh!bptw@? =QOr>^ka:t0RUiKBO]MsͻAX- <j-gZ섢_I(|[پf9tRBaq=<ǘd eçy_MdZC_+&EmwT1 I8M-j X}:͇"ND'_\fl`Q(:lC1T5CaA'Ƹ~ƶB` ƥ6 [ZM -v,/V>dhп~&fEr~Ucu[\ gfY;Q"yryN9n6&H: y,:V;6;:bNO7YE.jA`)d)k {Dh`d=? ٧d&y|W\՜eiwF uR@IfTtاSԸtq*LE0;۟ѴYx:8eU8;'l%X՛HJSLKau@Vr\W;ْunά̷z/8SZtǠ ? lyε7`1F'P 5>-ITa?w@.`8'U[fW [I8R͝tY R4N:Wev%[e3q4EDlM::]K~d)QRy&^o= 3'bӷlkk9{ !ҕ L.h~މ1oX7Q랋.eB!;~UU鿮Uc+f@-Ǐ2?7ڎ]DR%~/ѯ-\#C*W힤uDv7-Q^@! Zq4uoSK1|R@Wm$F]RVp:ёnڊ8PYR>J3)`rB0d I_lUN/'|&v{׳h,LwO xwEzyI?Єc:N?ows$6'sϺ0)0 ڻ#FswR(t"\< ԑiW+9@;F?jD<ɗڀ\?Ϧ7 ~75 4T&|aјtt 0ocvp [b NILxs!] [0ѡF轞 Tr*9x8H3/Ħyh)NuS0*SDp_ʗ|k~`~iv7QXP ilmeY7KTL?[|]CW޵?u2}O+dxY"Y1heҀ1P#DH!ݳ@`~,g C@/E'] `^S;z&Ii[ ~y=i}1yg(l]DBu] r2S{gV2X$f-\,i;Mf2\uu%}{U?EgPos0;){-Ts8Boދ`,W-Cl}oFɴ-;>4K% G~T5z.cϗ;@۹bNE4 9թ'mc Qy9hGt]?t#zMZ`*Q*sPW#7brKy}Y Pr0b/ UűeBj⩨u̦dWaC:]<Lv\A >S-D3>.rR>x EH(Bվu5*ߞ/ԴLI@m?z@/.a\5{itU9̾Ip.Sk$thRVm&ke nIN[:LY3cwy&iL;ZGKe8]h4:%K0l,$ <#(li^~_c%ݕ'(#b;bɄxP{==Ň)mlLF h3 9!*dKwzKv#|=s7 ՞rʼB58~*۟49U-l&=<-λ9Op%-_*@IH*O?ݱaKw+F_Ҕ.vUm~wy`1 {X~Ks*̲?Vڇ;o| ZAF%SM_q.a<&.4V50ZLΐJR =KA)Ηq4Tf'̒~[G4pVSG|m^wzFŨE?lT:dq;&DMF w\SF&t%BYoD|-!j"rガ)5sdqq4klZ@vD˽QSgoiה4tt]}6̷̊ M RacL4^]̧$F`K$+<\BQm VF`ʯ`H@3-1>&—q$߉N]1!$QڋD{\v !ÜT Wȿv1u:V\bkSys(+wSH!#)?NYB~(1ۯO < M[:nMivRG Gil66" ,խˍ)s6Yd!EXE`Wૠyp7ڢ%5c`FoooZkLFUu=nKhf 3|eHv \ERrw .J{60>öcQac"5iVs4dS;5CN9=G$@"řk lIOIN(+>ŀ4K)NenMS>6}bs|NŽ,rPe)90B]IG<6Pi=2c$l@a~_z_o+o 00%qyS`H@Ǡ\HEuQGcR ҃YG!y UPNw (qP\ F"smW1Isv tҾ]aQU{+m Ԓ>#+cf8[}rܠ\Kh'k+PA '(WO:K]1esrz<f:wd\|+ƬuZA\{9b(H ;fIk-[Bڍ@BU58'^'0~L1ʛj,tH-<6Xr 5Rbي䋇xܶqKӢ1MݴĎv5_mVɠ>C:73X2Ԙ{$˒"cgZL07qd#(cViXИ:&(2!Di5AO6BB32g3ۦƑQM(pĖu# iD&stO2!J7a\*Vl= =c_ fe5]n˰2ad8R%k.~ }wمr*!MpgvQx^ :f츮 $Κ MM K qe_Fk:N#]7j>ب{1r)Otu7YgP&J2O!#[B{_$SV@b "eiscG,ޫVQTq=(И"iE|"l6mN1zYyԡXㅴqą[Jq( j>7\AkoO=jF\7 h-6{jl9l_&:Ϻy/VN>[%Gp.̭~Wjb^%\ŀ"kv;0#AQJB1:{8>SUΜx.@?LK< Կ/QAI0|&5/RFEH*Uqȕm}%4x|MDzchq~3_zyAub /q})w 2 W[M 'M+m+w^pJ$MT(t1G" z(ب:qC:L?Qs#@b84G #c9%g-AeT€]Yʹt miq@jn1*dK_eR fU7*tԋ`oNKSYVCȘoFdb 1_8G̰$#CԷ)>爱)"=t.@'I'൧4x.bg@ۚ9.d=^=u@uz$$\K{{s!Xb-5=/`kUio#fesoq:RP21Zq+EoR<%3c5!T}U0K֟;JnC+v^}-4A#{ &dC^~:(64u_l>䚐mYMh Dw 'wGon)%jEB1/gq$ݩ($~o~\f)zӒhx_וE~#Z}$#)0*F(,Czm!eֿgt&y~ 3;$JR'cᶆRSMvǓ>|Sꍭ\ʣvzeMMHX~ !uBip`0 _-y16*ێ<Vn}fC+hjq=XyyriXH֯jExI^aɲzIǨ 8ujsu{8Ol`c-AaH AiXDXUȜZ}eHh Vz_A<W.?ۿi}[=.Q'hUFMh O]*>uH3&o2[!GxHTW:*Mv,ZS]K;bz/pwg;KC9¥H=ۅP aA3o:@2_ڗru & B;HݣlŽDCY2l O R9a>vӺoC>>yi^qU`YeeM\o|Rw*x U1Ci(,-uqm1vĄG%ڕ`QO4JD WŒkn{[-ɯ2߼MO4ҝ&|o~rM.iQDoi}+_nw{ۻ~|,{*"fG<@MN?MAf7bڲe?]VyCw(W]hy?Re\XDGk- | ͆2Br$׆fA<(2 kb=ӉwҎ~UOђW36k֡L{ fpU7 #g&P'6w&ULڛɖyPqԏuZ&Bd:jXYƛHDAg.^< yV DNzҗ$ϸwZUTB&iؾP3XPqZFaZge՚@P4Q}Cv\cq[uQ?AW}%Z,Nb}c~̀9ٴA-MGUhğaܾ2MjhU| ìތɏL1' \&zcuv1ynI%5 y4OTvu_Xw}@Ƿؒ^ 4);CAcK:ꉟJ\mЖHd#/WDW֋l-dbg!G|àg/QC.jհ!O $f DuuM7]Rhn V06@r51_[{^"TO |?5sumRtP*h= `ߒ * i6tm O퉓9[#l}itSS2b?bFo-xs- ~ VJw2}}h0g@F-T|. ͢D~f&Tq$ǽx6Z.f"R"/4CcCNۈ#p${-XU>˯ lYY{ }d {{XMHؾt' b:6J*5S$00É"Q}NAޞ3?oRҨWv]1;1#XmC`;!3^:D%Ϫ9g yzgJpc"\ـ! FJ]v4.dnryj%w3U"7ӃSv:N!t>CI5ݎG~Vk4ŷisnv23''͸3`!Z)ּ z`CsVm4eJU;W4Pxl75}rfQ_mwe鏣  |"KrG&I (H|yôɠ; K->C)0p1Iӷ Rfd4?\ P^;N*Y/aq:yߚ3x6[9'k}+bMb u6/ L&+$1uܻ)n=7ьwEJj+]{Зj uНuJ:9rnoiYQ?B j~6JYykL@U`& Q[ln3}g fO'T# tNp!k:1-T5LsPKȕ'pdKhS>՟D7nZmr ,2c{: kWsPPw_v7 zF[RX0`[GٙF2K)9 &%|dКv#wFټsM}P([{ rt:\g++QLH ܯA |=7Aջجg0*JH\@duWIMefQmŗ?a:BL/N[<%Fk/QЦ^B.) Y.p6QHϧ3Zb&bWQ~*VBIP @,Xrۘv)κqYU9zG'$h5:8HTQ9 ӀE@t4XDڄ52#8GƖޯ##XQŶ6-4tDaCkkښR)`kJ龡svѦFHaTҌ.oG}$>fbS3W5:v[[>hSmo5Y_m4/}]08'{f(]J56Ɖ4r[pߟf%2OWm։uj}&=BgS s8FGh'ޢlT?w|0cړU$v[Ǽ 02$ۯtNuvƷ( 1ֽh&CS)Z-.@@ rNux_HϮ~Ēs^%Ʃp\  Covo$eUy#bx.iZ;4[1H)N4=k+d;s= <m ;w8ıNs8ڵ_ w~dTN"qwKO{֧Y<];M@v~JZ/a]A]яf*P1ܸ+i_judOy;@g;¿Ս:Z0kX@)ga[HS瓅B%XQ YES눩$1bvu76tVpedf;ԧ}41Ee%5KRl2=!Fq9qDEp>-;f Nva+2b{/ hU-ZAPG2!EcO G4MaEfN =|vоתPVe,e'YySp7O#P<@PҖ+7+]OXwOXj$5qWjWdYcv>#|t6+!Eҹؤ_>ҽ 'ռ : fL,1'"6p # ګM9uɲ8 % S'{v@saï宱Ftc[LN{~c8c+<"Qȁb$+,.g(Gde(TY=ezEje62]U;6<~`(>j@}ż"!N~/zn /f믚szPwRqjXa˷Ƚ,[K,)|k!R8jvjx:.V挚EvnF) ls>b,ǘǡ zz>Sf"ijny 98á2|f ^<Ć{` ĘĚ4@CY}iӰ$lދ~4kBγq8{:+R}.M-O%>~s#&6QbWrB͛AC1Ҍ)֡C`;86D]iu!ʌ6;9mhR$wڞZ~k%041i&@ݿB3 |7j,ei UJ}4sF 668g=.*]YO v&%bKܬ"{tQY.$K۹\oT[lQuZUJ9nD"m)›It {ϯNL6 k%%4%U=|0#߮mBKI Mނ&-@ݟ[̙/W^`/eּvwVI&Guu,+isog/9X󜽫Ŀq,=K(RL|bvg كmi%:Sއ`RRu{!vmw iU!LqH:Wj]Ol(X|b(P 4,mwYDSW[S+arc0ӈxzuh:DQ"̺[YR6-NdO>nsqǥU&.;miuq(X}u h5/ u/t0h$귏cz[ѫVN1r GTX}5\B`DDūOdtyɅ2I>>QpsŤ8hf}:+`|hz[CŸM-t)E7`QH"#Pv(ެ5}${r~•.xm13H]onm,p4~* z78ԇ*GX@r 27\.N6Q9#50II{x4D;h&e?G/E?!W û ӣ.uV0[Ͻemx߫-W RuB?8nzmyI(qBfA; &{-~"GmUs'nIu@՛pd+ U"'p/_#W {åL/IHhWQ4v4%5u{q-չ1\R#NYk.FCؗs 6g|`¬i_PrjoV@u&5 :]5|j!K> 1VItz j@28Is =@XʏyzqȅjT賞 'e:VE%.T'SM̜\>G_w-gL=DbO뫍{.UReU=2X$ H)9eQ T4@lH1,-bngC\TpZÝ.EN6Rg Da& _h <&,ok)*<?@x#3قπ7չI6y;¼8D[|Z,kF;wOd }]CdЮ_[,Oz7,N&|J$?,*ItcT"!!͹=![S5\`iMߦf"#ȠQm ĸ1Z,Z7[/%y|S-5L w35Y 0oC- S_w}zKyXw5 ЬdLE9.(@_B:drYd)v_'\׶ ^q@3<{ :R` Vf\=ybUO3i|ʥM9+f~86dE|X)Kur|h-^Zn+XeTv5=KcJt;ycTaEɐH>pކјRyى)-,bf &/߽hܰDeᐦy9gǐHvCm%|xI4w.7OX[@%+w^ec(1#֗ÓaMI&_&*[NWaa9Y#]$$r.~]8@HNmW^UOde_n̲ޗY΁ c3UFc]lFEeMLAx)JuP r@xs ?H\$/BX%<-Rs)rq- =5zQ7\`o:O"a 9 jfK=p̲ݺR9^B|OENTG+WX'ĶɅXK[^l|9*#{t"޶xXpu-'iҘh)tM{Z$/Zr$37Ac{ώk;7.}thQ(--%j*-vH[K &WaL5,jq e\J.;=]%;;ο-m Hg|R?$2D;AD&/j%KG.zl㯮>B2MwUSjJRNHEK[ܟӐ{ {#'Q6 DgMs.H<&'IE *x\}q27*;g[ڱ 6ٕw`bF'νTH3ۺ6wـMȮU\ rNy#7еF ]TEO~0__enK~3ɵEJz#QKbjLF Q7"Y9^Hx0[k]%30KMZ7؇5֛ FQ7lC'WD m|$2N:wszz WHytn,>[;IYUd A~5_WW|Z*~֊+GH &!z\)5u:]9g4RhEPd1pVEXY _cY? ~T\z0b⼞L7+6H]:`h&E{v=v+P^i^XM^5ڙlgKBbDd 7ovh  (t G"~/x:UD:%I#Or%6%|$#]8ۅ8FDU"2wC$卟ZmF#N\*6*[Y5M,oֲUeaQ*eiz C01{uy/A\>VCT;bd YZ|,q|C'3lt%X 7!I̼YdsYՐ!( @;oK9S*8grc-Ǻ5& 䚣Ug&}&'>l<.BKDN tёJR&h΋/%^%NZzY<`w%zf~!*]2Xx5?Ɇ^!_@:oD4@ګ}B/R@(gV;Bt(0 .jY𚋗e7x X$|2}9'TMz3[O\M_QQA\3eM2j'P#dr(_VqejlnKտkb1*1);Os473B4yu߻>oh}%i[ iwΘat tFE:a*b94mU/ ~b GK3,r{ m8Bc1,SYAVLx# VE#.ѳQ,+Hː6"9olZ 3bX%UӚh!H F7i爎17K*!hA҆Z2]NwOfׁɡ:,Te;L>&3WIJ_5ucZ@$pC~C_lZ-?_ԗ͜Ex.a49B= Q" 4 鷧#r [,*D^?y*D\+fsX ) }0/Z&P&0Bҽ0)h{J^:1{XﮮNVK;P)-8=^)W5cL"prLLW7D'd8|CT.V{zO"5@Pz8u玁6 :q&RXWGVqV &XZ%5 ]x&3r FvK "2T6s$æi T|*Lx{2|!p4u?gv^DuU#8 2,YmOV[V![FBJh-T9&$ Y-陂*f3\":.2/7w:^ A];odT.MDUf^J+ۗ Mb!q={ \`λN£- (\=QY P5`~W BzN|)=o8Fu \WJ=Ze)U =0*݇vnwAP:ERjY$:L_՛SiWmtl9%M *OxsHeHWIQtg%k0!dvwVd4ԪSq;5(VISlvi ,||5~N™cT멓kT ii~44NEeYS.-'2({ΕO;IR#v\q}Kѽ\7ʪ =wYto%zuUqwQ1V'L%ۏ#"N+E'(nzg= +!CWZ*pAgJo kf#:UWK> e?qýגlg_qPtýy{^c8-:rKHMwE<845frL%hA%JEǥP8ɌɻWihFzZO)@I"H'K,VaG*:Qs8ƸsbIBaANiWpJ~,Gy90/(sK,ù3A_Œo!dBX[+, kٿf&jT[3Ekʄ;qx)1wãV Uk~0PP]v9@v #e@ nz'4)z_A^4NfHḶ8y~?]2h"'UhaLå\ŶA^y&9{5`Áf'`'69Lm]#tbSj0uin$,GnU-9Uwçy$ R}#X]ǷZs!F9SH%_ڏ 5MQ%?ɀIRO;Nδp5"pZy|輤_6'~cUx=Fۭf8%Ԏ1:ԢŧwҔ$_ocdY*/:m*;.l0.%N)dGV7Ѝvy3`TKM>Bz"ĠaHC#Yt=|p ؉8,-h up@'/DiC{g(F:p}n$v,G(tR638 |DL|JsR7%~"bzmgO;a8- ܈/G_3 @1/@ }b=F̿9ч*Uvb&H xu#[ Ȩ EIQ77}tI]%Am֜넡x-,v{Z`TNi͂ɈIOZIp> Z>\/y rj'=XG+/-qAlb=N4}U"Y,cFه @gXw}W /Jz)%@J/I,,4ujIhT%~OVܝT ۠ۛuqdCx_g9$tz:z4"+h=I!5JơۿzQ(܎̨'p>U"L?]B!zKvH|dA?|\ ûw|]Qnc ƆZO%Ntޛjpk?&ap`ƺ8A HKUX7 :qVR倗q"y{y-Q/'=`xaFk#z,V;KkηP̊xuD2k1vU9@@ɮJ*pG :!B;^YՕݎnhq0Xt_#b $%;^셢(Uylv'yIY '2Z8d2wwp;-}-(ܒOZoxgmY)@U@\S.xt{Pï#j,Vґ5FW;\{7yRez_(ΧK@mV_>GWE[1 I,ᆠ sK.(MJ";θsiʯv_on0RɰWC'r$-TCцF<5[Ve 2`1lZ\u&c8OC)H<ܢA( O[$OT& 1A@!^L'mi/C;!"xJ|/+gգ'u%#K/QjYzdZɤu1)SO}58qʝ[UT<p :">Zva zQ1(U1ji"Rrydջd89l*|)d -Zmibg.D~t Kő2J*Z7̱2Zn:l30n ~iŦ *G2+㱇8~6Ŗh<􇏷wAK}k?Mbz !O;ߗ=."CQZZ'k<_9?*c W۫c Xz`{#./4TEerp.W} F@RD@acHLD#o2[uhґ萙wǗlK=QTc>JhBfH%Mړ[|ڰY+&hrMY/Gb"Dݹ$$xEu+xp8P;NqI n{XKỷ.[FPiQ)%g=P䋼y ^^aYxnxca~0|epcv'u)C; V#;@Io9(Aƚ}m]lNNǴAu {Ln/) 8 w91JN,P<ؔXcerJ'ݣXeFiԻE=qJB Q5\[SiސX=K<d+[@cf C_R&2 Tv'wݻ$cťUNԨzےPL*'c+ʺ.r[1|TuW둋C?^m%[WO/:48R|ego+;, ,@=c&@b+ lT-"`?߰B4y˯֙0K)B\p @>pFρd!G +/j)CX1c-ܷ B~(1f dut VßAҌ3?yNJ,^~5k261Oy9M'еUXEfQbZ#64EflSzm!렁e9bw:y`O KL sqU9>#|$Pqn:ү''KG7kt]`l_)2=P}U)*Vv"@ 34V'j= 4y#<TA&f潲C4@+m'ANtq2T88o ?1Cك,/I bߚ2֝,;~V0w8?Rir[O$X⍺οtT"3ߠA#F 3#Ws}ڪkPQT9E>^j; #1B^\h松K[P1ႇ tS0|R7ՆFP]Zk~E;!Fhw[@|-P{%TDUCxZNjx^uNܺ ? +^$ҽ-ЃdRWXQڭt<[E䨽"ew^L"=̚SO#rl{d*<ƠG0di"Jf6:Sw//ܷ{3PNcMQ,@a;É%K739[YX<>fs#,|TXʐ qJ+(v FɘOTR=*4KV0/ֻGK$@U]16L>̧sVfUBKTT @HpͭNԃwk[ @n9)5Rko%!%lؔRsbbƢ?0߸k.7cHQ;.+/BF }#Ht^5gl2Q4`)"sr  `nu%.*' Y{/_9fNAN4`)Lmu ֊[Gڴ.‚1Aa6ҭR`4~CplgooU4AU25n™6 -7;LeuE1z=ݶN<6UWrrQ:>2,+v3"agg6횅-Įd7ɩ@>UXDU')PiŢp#hֽyVJ}t_&o(0as 啂Ԑ|4J2 ytZdnI+mkWn:>J?I(7ZF/XJY|.;O[0оi.OGR4[h *ό"Uw /L!.L9W:=ő-]$QwvbsS6ZB+~(˜WU*C53JQ:!<#/ ܂kdx~D|x|rr9 z}-5 < 4yMVLh;s΁-UL.&Y JT!w?:^LȢ 1LJDCO׾pcD2h/PZiaZO[7Ϟ(GIfb) @8~՗12H>%z7 #X#B?b5d2D#H)MF\J< + }iY~=J.85eBfGB*3A䊷K?`.mڼzda)Ŋ$ U 5Ac'K7'pY]Dg%lk8boчuw; K3^ϫI /9LTg+bLWU8O+hCjiS>OZa%)(|,|QSZ 't^3x"}=l VGXd/rZtI`.jr٥ǐR@ k,-:l8mm_ۑ>2_XZ.]Ѧy;܌l'3_mXm\(*=|IN9)lA F.w_ f,(xJ/\g>mNq0m%U rB0 aP5G>eVvbɧŜO4y)r?%ɸ <3 ߎBSd]Ug<406Iid|8hoVK$ ;/,n;+ '7MIjEhDNvJ'KNp 66QY._Y*R씴IGȜPb9W сٲy'4}7kh)Mb5 L80҇dKIQ޵iOA#^MM)qS*9&[Xβ]gG #Hä *UJt6Rzʑ&D ܢ 0VPx oXv8\2QsiP_[6YwQdς a1a犸9d \dƽ٤^:pM:y>N јd-d)6&IlDr2Б4"y-rUS\dB-sX+ X:ZDU mƐm/K_G‚^Z PlxA67MK2u[qBQZ;LR"}6X^s: u urf!ʆՃQZ0+ně)#!Я)B5X߇X#/TLըOdue1" $KM wa^ d͉bn"bxF̏9t$|st6C#_͸^u~Ž,#Ѻw1ٱd_HeO3f`=pBX{'ŢNвEu{}fvGҰG5H)6reV,*q3xnݶWX3 !\ܤͽ%/{/j}"*DeiX k3:4<L\匿J6u;݅8Ảs[ vɛ3AzK(a>@ {גƏ γڦz!MHpv؎1l}I=2 L~)3nզi^R={*ep $/"xFI hX";@`DFi`~lzL 젆Kc*2Ӝܢn>N v/8}`9ſ(w01] U>&kN@uӿe'F/{<(" Pޔ/왷Yq)/|z6A<›d[yOWC,l< W $rzDQ׽IkC:Dgye`M!ί 0Q&HZV)@8 :j ]]N 컄o LauP%oHoiJ:-ʙRa,{,ԇ%ikE2( oE2+HsH Rq1'<(2>RA>cஔlO1gwJ(+c9Cvڻ. a#"%p$حImL-zޜi Nfî‹DL2z*HJ)d++ 8 ݞF4!iN$P9 a#H*/H5Ek5)(;TMSp]@,}9z|Q"l-Д`""W9GB+d=R/ ;92% V3ʾOU󉟝 %fqq@Z|vx5ni];1Tʳs%jگ=P CI)qj|Jӗsok℀K*p>ƼXf``^E)˭?|7u, /ĥu$swD`xi$ycqm8U$NDN_ gԢ~H\ti/#iS+IzyUc UO}\dZq)Zbm iim߳J0|U`Tfu] SJa.>EiƩG XVS\72޹M=`*E 5lSrU:9k3c^8*Ԑw%Ѥe73Fǩ DL6^*$?Vubaif{WAZ>0.DnOXуiKۡ'lC~G(UWפZXq7i^[SE?~bւ{c=7|V L?I{ܐuw%cAvveoLc`P +Ap@o1CGfbd)nSq*kll7Z!>Kvu4erP+;9HigaΉ߾UtiKe5xe{}{نz"uv5(DCH3N9)6SXe'R1}>2Ku*C,^ j#zgPKՌjw8N<]9PJ FY<'+#](_f_P;[dOtЊ6a@"m/tCODbۺ~Y6TQ3+#P\gI%ӡ'vNWX8oAw|͈tH{ s]+-+50/_xHtwK&,Yd_S=JG|Uك4b&}G|M{o<ޭkr- 2ÜsS$x C˦oO_XwJ@07mVE ]9nĬd`8:Q"oӝK۾h%G$hwqlyܼET/TL-oE跌KV $E PHp^Qn"ݘ"NckQ2*Lx_úÜ@$rz) Dc+teSsr yI.V%e1 kM3}7 ؎mvڇF\{.?#@U9m|8=Io9)K"4 >^.*CX0$.ot5ĢBp|-񾿓Grx aI3(r?6ytz#~Z VM γCJ88Y쒳9d_<*$FCNhc-J_As7L DY~։B6}pv L+˿QAJݡ2Aj)Dm'o o֤0Y 9 Jω嵧[{ f8ō9d8sn3C9"MSST*FRn L3_1>4N=Nߌ\ ۱4mRL7kPoZ($ŪrA9Wfo𔝾ohJfHYU]JB@r=,LcBcI,_B}Sw>j#⋖k';$_"jop!@&0bf~l׆v}9((V[_a0K-;jՐAsdbT֡@! mzS tJm=#vS]G>{6\I|,#euf!:6#PuHd B^j-%I#/rB:CusKPZh ', Ѝ{׈Dnޟ%/fLM}81u$w1mɤ44զUheA8&#Au 8:{, +$(5q}s~U5N "]8{fd`ȥt+VZOm"kM{48Ҥ ǛF 9MpH5 &@EAx7B!tGĥbvMӦ%$w^,-Jy^ڻU."͸%=%GoKNb@ۃ`ߑ7{'T[$0Yw?*C_tLIHNQKVc&6DQNE(%vm8͑-]tX{(f-V/3`+IZ2E &$awehYkhk;E[T)cArCtmR=kN,d]sL 2=EOhѬg-Ps<ԚtmTl&]w<$yK?8%*Fq@z9hjr};U=4TYKa 4(OV4|HddZ9R.8`owڌ] c]՚y’ü(CY ^o`A0@ c۷:Iyr7Z DjjnQנpG'MW _K0m%bN_=oSd!ѝZI!k3c.'pUƱԽ|~}leZU@h δ?!0/aTDP3) "od(*Pyӗ04H9Oۋ"W҂ᤩGW\R eNbVc<'8m(wϛ8 شֈ . x__X^r}Wǔ6 n+2liw'TdYЂ}9tj e"0%|'?lzPM;W>3k ;6tC&0NlR sY(3eaI@ ! N5juCnY9y1Oͤ>& [<) % kfKQCWlQ`I*ڳg1Yq:T)zUsJc0YLA@}uzriv[FӱO쩳Ơ<$uu0KNVWNJe>Um.SF89V(i '8ld~u,NڌFF}q1kf$-,XA+];ZuPIۅnA -o ~%dJUCt "@18ۦffLwyC2TmcnN*R<b'|\>ZPOHQmֳXnT)j*i+GⅿN^{N*eay # DE[5ۀ[[*[%\#HΘ߮D+לa]%`h#wv]Vu)2o["ݷz6{dA[iJt ؇~iY#SB'nS:&q[Z*xl6չ-WJ ˟+M]h`DzrqQ<##NdȲ_IAZLi! Ż> tңGU' ж>.N|JHS\}]-R'Q!,~rQW[-0KW\JF! J.#][ueu׍b5[x}:a7HeYYv6g:&=߶*:O٤!=/A{KncxG[\p_fwODPߋmav1i˙`\TNr%aO .]iT-cLH-ƸEշ{Ʊ<ܟZͿS4<]yWWSRIb#)рyyq첖{cʸ;V\:F!w{E'V5OIOvFf(!b!5h@6"B~Y$<>||k66HbUK6/c;wE _d~ ˌ/o>.X(}ijKFAafS%'* 4[v'A|Ԟ+'JX03 Vg%=Q" v׻o@?\iCnim=T eƻ/$yW-.I1Ï䚓M&o5VkЬ+1FΞ|x;t -MBi9Of5Q_0H@u'Z$#!>(I#')7;{kCi`Hn9ffy,Z͑q~e*~ѹhTd@8{Uq+6\r4 *na9U{]d]B;TA!Zp$[L(I"@/ۢyhhZZSƈmQA>eV'?L}7ugb#&Z]V Z#F>@ˣ<> }#e2a2j>ƊyB0J(5YKg̔*~4AlХ \H<豅X; S!ܑZr=.|R+/ɠ`ﮀT;)ao c[?7 5A/)gEnXhSuI/]Ɉ!$mɄnޗd;粒T~azYpɧ9(^ayZþTSmMz'c/e#L*n7Bϙ>Bv׋-+W} lhj4ݟ (7IX.5ܧ\}jB27THJAd6hs .V+EdAO3Gav pٍ.),ߵK+1)Bt(-ٌҀ1(#BZHGRSE6ճ~úxPY` %VRtJ5 z U"jz>V _ _IZ¶)#sޛ#<$dF pj=)rac)dt5*Ə(%8byu0CXPWs:gGRJ dT[+`^ߖ'Dz/99!6`kotcjژk!@5A51A^>!~[ ~fV϶.&:10?-75I׷!c$1nJg 1[RCjyIr_ n6̕GD*8uS߂0sy  MM{ afOTve02gGL,P[Q>Ma8]pnPPTU)R+q\?:" H|bBwT_xsf(>tOޝsSp2q+$` ~SwxpM̶*Ik:O=z\,XvmXV)oO补/>Y;e`-N"A ?hy"zn#hc?H * "L}-2RZX45qsayJ!!w2KD93N81[‚㰌KՌfBW_0#]6A$Z$~ 1;Le^]J{LP]SӭPz蘶[(1ydSI1n/"j0#O,-$gѱwB8Ɏ:)oo&_{ɥN1Cb!Ji":I[!3x8 ,|#wS&o -J8#Z DjH@%%r`h&;W mcCRBBv?t1 KA\P++I'Yf٩b-Y^xMN4hqւ-೥xc)3 ISk%z/ydIY^aZzi5aj=y>>`$״ ](x?Gp2 8+*:1wH|M{uE7fx-sw9\ikxCFOs=Ӷ:cD4O_87c"͆ґMX-A NϲdA'md HfFK{Gc΋wgvǟZJNM%-3Q-y%P zBA/$ϫyőh*G?70IN-5Hٖu!l^V!;\*dDTqR>QC[]%&es&*]r\0Yҡf> { aBpkT%FZ[&"쥚S;'0 XHFzebel/ͫ!ܧNw1-q!RR`+-\zQ0>ؼ,. pM@T'~O^p{Td0kfgu9<2(!TB)?hMit󰰟/B3}ˏLxJADeNvWN]35 Uo24j5RˬشWqEP_D5A,ǟI|0p?*ޏ[J^ohs( Aff?E _5Pdf6qup7ZRBL|=yr *F(Ɖ WX$ OTug_B8 F`y#XS^mp,UҎ U| DR*qZǂ7GZ[36lYDQ'xլ sNwM#*AC.}fl+[aea_ӷYU<*;m1P5^1#Q͖+d$ㅕc„&:\~]_;>aqZyי"&rM!CZT1])kq饉SSv8"V eBq3ٶ(8JA["koh yirZ)<>ߙC0X c: lAhEI~D<5x8`XVc~v'vďA@UxI;\u)02(A `r^п Ê>چʞƏz/pvo=tvr{mŁ'Hcی9B=&ԁ%i'ʑ!XH85Wg>9Cds n{n{K nBkРlA;D/={eXV 1+&J L\޻Lϖrr?*N%T| yA$CF ,'x3^=2׻:g7`R禥qpO tΰ$d x/{ 2OWݔxTkyPgk .b^IfqY-D~pX H)1A~B99Xݏ$9A_dUwJI)xpbׯ8 JuZ)ڰAbk&-׿( aa$ahkqF-=a{iD.3dc,)c"痬<*|EM+18cT_ 3(S)i\fՏS2mmYɹMrxMfegAR264j?qBn( `EC.)Q냿 sucy& %ѥZoxC/f淛W0ot$׸i<%ʚ39쉯̾t90j2yU'wꢔ=xCH;*)k(|%ٞcN"8I(HT '̞R/ _Ec~C\ BEDz>z(ݴMXB ,wB>7Pqp1XxpY哰 PeY*S0ح恪ykKȞl QHXUV^6g>=Z]F'bXuk?xKK1ߣQd`#C ~{UᩔpQwS Ddfo BFC6ku`[a%*lgny< MlI xϗO_qAlE%Ew&isBU`^oiy|ؾ7Yh>.Rb Xd쵙lm=Tdci+Z ZBn"EhLJ ȑZʹMF荔G:WTK}k&ff@Cx4%K/TIǼDFFQ,p9Q]k\ܡ[ !d%J. IT&}f>YUݴy;D&K+ФkQnz f NƱ8ZjXo_ñF 4ŪZS|y}, U*{ќRSAcc!u=f1[$B@o)oEٜ%ք[[k{»CTXT6dDOc5_w) iݙ>y 9IJ#pjqxpeFed:tuW8(ӞZB:8p2E<1Yš+Cu%?{ i5\y(a(c]HH~O.)t~/e]DQ+'𞃣 iA;if4?ST3d@/B>Oe1c?ŸjK߃O}B⋿48ع8-VHMe>-mZ7Vn˩pwbx3MUDms-3"h?6n}>Qb!~D6Y}JPw͇*n}iuBz ?T@`!/Qۗ5%GOˈnj [h<WJT'IXk܊݅#]b7ѥ'`Ld/%?TS|'[Oig !ОђwȻ>b[I^wE)r@aB1˻6E_'XDs5Bex-H,)ӿM=) w_ 8BkWmx=%u|w|4co,^=R\ku?G7~d=@wZKoU.Es1Gת[ֲ{-ilaNQW-):jNΕ>a|A=ڏw6ñ*N7c1-nevdet2c&Ɠ+F)hPk[# iީ|v =@ZKݻkJpi~AvcN%:vJRz] o= -TQ`d\M3kG!ȔhG׉$- qbW+J8oKA=>"y9D%Gp˞wHief+Ny=Cn-0zLAIW>TOs6@z19b/ȂS]aqC{Mn=i7x|Ĺ hJzbnYk`ǻTT.a^xv^t G]Ja,0NWn2U!ybp;qʣ]MMNxdaf\]cE0f}SBI*/#:6^{?3 -5~)1KECbz݁_1$!)?terV^GnF+mHLr8uѪk!=h" C!V6y#21?VdR2˸fZq%"H?U͘s팤vYϽ%V5' ]4o*vE׊E u/lK iÖ~\K󩘚Bi8 Ѕū{ŠKGoeޕyDtCEe+ gN8+w;dQ< J)(D^}NxB &u4ih{Y ՑPݠ\i4ͽtCAcw7'g4Z$MsSM$>I|bq}S&-ߔ˫ p%m "H3464]{>'x\A#金nI; 1n)D1[F#R_Ѭe$[ Þxam2B[žɐqlbRSrfn2{O}/Y c840eM3)Tk"l>~hSB͐Ot*W*PX| 3[䗡c]gUk:2Yl_(TAJ[F@b9m"DBvR'm&Ԥ3v&2)D&t߶N *s~ O~Χ4`("GLɓN .Jڤiu(dx:@b,Cnll!\hY SOٴe e(jm)5H(ȿ'Z-NB6 f|@5>h`9;1R?'ȘU,F>d{g>xy)z4:4oLH:OZ>_N&;ٹ`8xA >m#,6oXfxZYw7f]Au5HUusk6mc O_X5A%ӏd1&L8`ϬCQl0/O#PS&a^8sV! Ʋ{ry)ct_Z:Ffb;f!q,f]Wm͚D|CYi|Qʵxkd=H琢!|{P0H:iS!Z PGϋ_G1?DغFUt-NlzsK*HogC~o7kD)cKcڅ͗6zeщ"y18L˿h 9鞛XMA8bw^Nl?2:i(CG ށlfkg6 g6ozӢ "^6IJl-Zn4>I@-b968E;?˲BTCwXA, bnW64"/?61@N"'ڻ4%J@HU}A\`DϴW fQ)W==q6W}rކ.ʙkmSAMY|1_/ B[ g ܭKL#B޽UI Z=Iݩ;dn_#jy_dRJ6{yt9iltSQkzMT,4zC%uV*AxTK&*z1><Eġޥ_Gقzl4nGUu~0CRᗉsp)_p &_!+o1l2s%YFڀ ?="s%Ok"Ǟ g r?th/4,1L9Mvc*$Iӹe-܋$F#Omm% =Xbj0-yT MɩRƤi1H݌ h{. 0/GMt]zF{JN;.Oy8qK(}{mhE.C!-UL"T)}eP h@(2qV,!oJj"O%*V_2y*(bd;r iJM3飼AhG2_l~\Ȫ L.ʱiM0Y'2mВ\:G/܉f1JV?n.z+/z{lm!@0ɘC8L (IW |cs,YOEiA( .ThRh|G~kx}& LYeF<+o/4:b_x1rϫs#H]7ąMb&UQ ,Ht|V.oQt!n8kJ ZԂX%&^~ &{BR!|FA+<~Ms^`̌WбV0H!ń<F2Vd~S]72D;/m*?)~[Zg&Xx}:/"'ڧog-;V[#o 4|[cx!$C#Ɓ5^syVM 4WН [ QJ'-dbWiVFv6i~:ek"RՐ Sr}GSCt )Wt ƇbdgmvƳ3ذ`7ukCV3 YjhL-_N0,+"[|sk R RDڋ /qrԋ;eOe4Nم VK =& !Tܦ JS^:"HQ`.ZU2Pg]+d/7kN19eNS70sazC!Gt*KI0nl䬎 J Rw~=(iEjkۗyO4T+^A< |`R=TowsGYi|=4R}ͽ=˕VS٬;/TQկrb}fb78~u&N^r}̽ ;6ߞu[e\u*n#s<z+–0YQ k#Zt^:U=B`@g.*[Tɣ=\GDmT2aY:|Pwj##8\,pKs>`笨'a/M ϙDKgIL>ѬpRI#wf̠ĺzrh=DBzOܳw3 H+:[E 6hNW9\<_Z 4B\+^o 49}. ?1OW8'`?:*CM3 hɃM7=ֻT,NdqOh$/V;Q36?HXDs*-I9O,Y&1%z-(WQKdl 3D'2Uֿ1 5s 3%5nO| ^rO=GfDm!:hp>p,6{p3CĤFY hUś-7 `ߒZquV4zL{^{tGWGݾb&xڡs8$BjdNgꈥTW4ɶۦZ) N^KD&Y{kf=P&4m>f{޻]S時+_S qv˷}Bټ|ڌUVC` pg\ao9rea]}%*kЫ`nѧfh}pNxd+ȇg)&ɥ >umy8' Kq`.=R(tˠߛ͙)Y$"`ҌHiN>;O½}[` 2s}<=Sw!~ծ ay+hP;6}vv_|=[v!' &,|U9|ŷk> Ĩj,*ώhv4K%Aɳ#2]7ag+N-k}(۱X;MuD ,c'>YKFVw vG9 {(*.)fΐj꺿iZS PUC':YN5(f7aUD=(m;sVׅM#JI/tG/0͉0.6C#媍 ד_ G/~BG`@pu'}v^PF^1.caz(g=73 bob x3:B[p,AT:ltו{{_F_D6"GsӳYj(aZޖevf| i 5U-}y EKN:㞔GF pGb}+|oWЇne $/ki>J(kT  <^Rz3#uUYUTN."2AйoNS3g]ʦl5Z*ԮMtY̼_ܰ?f|IAz衯m:0qDʖPK0L }eDёÒ^6Q69gŞ2,ۧONqTMҗ?;IɽR}\Q6炘2S @&89>+Qc.ui! .^+?})8Shf=x8|9mЛ@Z9iI x['$5i[t!E ى,}!*a q,qGQWΆGZHvCiM,![Q[G{x#h`RD:؟R ͺH92i碇ޮ1I>Uu0'ppjAwpT@&ͩw'LJ UP99"0=x_פ(|9'aB>7egKA#&%wE9nl44)ŲsU*6I<pϬϚ7mTlnE+Uߧ3*Cns̱%Iy0$ez1^a^S\H^ dKPȈ"GY಼~9@bK¸Ii >a)Č0}evU0[;)xDRdg>p :| &X٫@؋l/?cc1h n_ Frdb?NՒ ;i,`XWwgj+E>t˾'0MIӱ{L~1$քH^RFMN5i2K]:CF꼀 k?1Fޣb͘O BhsʺqS:RCp˟6{]d' ƨt25/2&E8; (v)(u(u''sn\lťd ؊ 8Jٛl<;1> S m؛%)bf>Ad_viXkx&vj+rJ:]g0-<:m2iavu}=Lh`%nNO\`ggN֋J,Rw (6rN/"va#HD#ź_vm٢z%_] 9:ʘ@6_6!58ȴnƟy,v!& 93MŬ>)_Yy, ~ `XM~TIn-y@,މpQҝFh[G"yxg}ZHN^姜+ ٩%O+|H5"*&O1ރedp`3aIeF<0-G96tZAZC9xԍ,e3R ˏ?C4mY#*#yudtp?ߔǒZƛVFcQa35?-Ia$$4 (m]ziD9G?6tycNy޶kf<83խ qs>L؇y8B:/uvr+'&)\ݱ,bl)>DT5狼T|GX>sG,}9!OOZ<ݫNAQ|-ҁuK@s8D&׃2R"ա5wq GqKqNrR2ҥ`O A:( f/Xt Ft(rئoR7^oR!|N>A)#3Q3;ŏt3:"ue} K_v ZZo'Aݯa ^b:4X&%,'IbK\;4%*j㠪Siݦ;9$FSγ Gr$v Ԛҽ%.C;굃&DC$P/YQ&XfVr>[alơV'SMz,M.e#g4 p E6z*ՆGt7 Z;$57[Pr@hq"0.IWՖd|`ŬOܫAX b@!S#m/䭴X٬c& a$WwӟX7 O%N,R HNBw/`4[$+'Ip8^*n7\Q_f]QquU)XI'4B;>GQDS@$0poy$Gxۑgb~Wv0zQ R=PߑI }<5KĎg4w.\F8.a/G~Y>-d Mc¢@#ګOlx~Aca놉%-".!j>tzEv鿼c3;%>c/+b:@ozM (tE CY͹ANƐ { sޝl#+/. d`J wu);/C}j`~5QZUh3&F|ZnV6쵂&\T> 6fw+3;K5cntSv).:jj]:D>QkɂY,vƄ4CٽK5i=0'+Zr+0&bd|;RXQx5F@-ȮDA9kQ58B="LU`4~r5*2@oh>듫mD)Tغ+oYCh"?i!]%f,K*YTzfS9&~׫ }^\36Bf(9]UD%6F=EX"#XxT*E`23=Ҽ=9nNDtʇD}r:ǚ^(O!Dm \JBRi}!WD cЯmY蓩g}0g*fdҏ*[B>̃6ޯQrF3֣< Vu $'ՉoU`2hg,Տ( =}_12ͭ~X0DAydln0P^;52bbW' _Q[,k}2OaHV2pUQy8|Y6 IX<:\Y*5  oKy#YoY+6}!ɭP5!M-~n$Î([M*F_i#1ry-T d:QF4-e-&[4fq"A>Am@>Ϸlt}󵮄jicpbL,GR+Ad(6dwa;tkw]0i"tmq Ipjlt'mN@A iJdO%tWt#]! ꨣ=pY"Ǧ&8!"e}hL ww^\w!&Jc\7B~~E ӵ#Z1k-.EL?nWygvt:^u M'0)M& 7 n]A4[iI&fW79>!u ]HZ^#;In4` a鸽6e2Lt bʭ.K&cg&#e|I@ۖ}Ig[Թ;-/1>g7ܗH≙sY젚t VJ0z }ɗ5cnJrlokoXofItK埶璨 K|+Sp#mHBҬh/Wxtngp5۪2*릁Ft)e}$*00UE޼/=ᚧ癬}[-gvY6KA%[ HZx0.bh5iD֙]:4`f/eȓu l̸]=߾$:/i&ܯx[gDWD<ۢ"@a'!g iv-3>hWˬhۏ}[((B%cJDw[a<: $7(И'H"Zl%Wp:m>{y--R:t+yprWʘF:Y,97859yr0Iʹ"g7&M`+݋W黦rT;4ts kn#cV֦`!َyc*S e@E.ioU}JA+Zq;jhrl/tK@c od~\A>!߰Øu+c1p*Dq# "Xϱ]YOB?+bgP*X/ - `J(l~As4􅘇 sEv"S̙ČfDmސ] ^1%B^IĎTbb3}F}RQk h}sic"!ɔہs"|4%@+R>:x%2\k*͠>ɳӇ5G&Gkpز/./ sh<&`%9E Q.$@ج$J{M',&I >uIwzx0 QдI äTCi)ZoR_H,zHpO xh7\\QzNژǛc1D{&;2ϫg04EڸA(螕9T- 6ÆU:5}3s)tV|˨9_ Y_5>!=S1SA_y(/W}n[VyDDŽbUq^~ a "2f,56 y/j1{A=|)?@ĘʄPR$]4DS닺/nxd2F=2ú*B &"[1qr7hf?dv7S$X;/xvDC~b,xlj7ȣn2lػĝ>\N1CN?meXWWs r,7BL'(@*hŦ>_鱀W EdU uבC9dsz2cWR:qߨaxf =&fj(;`#^Y5DZE6)be4}snLL礥{] >l{"2W?5y;]}-8*t~IQ^M ^e<ʄ9jomwLL)HD<&" W* , ]:q^0QXkxRCABw+kmpK,+j؛t },S"K_}c#ncN+Є^"aؾw2?Ul5)nЄ2P_~~eL2@-7d`+ }E :Ccյ\e*dWAt~MS՝bV$E_Fq35Q.[WtqÐE}PM N\]C?ϯℜxT٦Xnej{O ='+z/3Db.)-Ewc'YڿTd*,Nr dFGfWߤ0+YNjbVf+ԫ[kdp4KH¨{nTYGer`lkiMR]Zv@Ͻ͠wIfZcÏU7 'uLe#%\6 `pLDD ^->P'Ս;>w^;^5%°b0\e h~L zF&]zzP?E| Q b_fH[I\c|0l)e0\eXe\e>wʄOߧg۵[Uu&->_%F$m|¸OQ*ˋ/IRhusv`td2yh8fvtCDêпWP-Y3=1ǭoľLIi7D=_@g8*,{$H5!C榿=!lRϻ/ǀbhR"N@Vt)a[; OSOyvƼBe.KG`Gp/ߢ7Jͪ|f-ۺ֏+2[r2c !O'S#E҉gUVЂLkBM'7_~DПjK!>{b2}L^<Ez0Xw7%'/u͆ cDI^@Uܜ|IwEfNL氷nޖQ g.a\^O"0gÂ1N.4Y Eҿ I ?WJҖr ovmG`1Mq|l)(*ۯ% }=ohi*=8)V-1!3ywI%W] ]YN{ `_^GѪ t8zKX ̡~Xy-M? 髜|$Gr|~0i"bd׼BpN Z8@'o@mz+z(ەR^"MF~BNt o.u5C|NV?4 J[&HFn 8Tud%A^Z'=?fR I1^3k.s0'q^_7&Kg3z5~`%OC6f8+2Bh3-|_7Cע{iv.~EH9e' i2ғ2b\_# ƍ]* 7ZŹʽ[Rx[e [^~6⾅b׮:/u4pr.eSi-=d_-ē )DOGP=! 9>Q]UJvO<YdL_(]iE`KPpQCpʬ:^jyYF_7A<|=v6h94%4L!+U:O>_JH(sx"R{Np+y֧@XQIU8)b ܍nIV3d|b@3q%kbDvy^hq VP*f$]--vл;;ZRke Uqp$o|<^ʹ3ea,LEc,~@UTʌy:%m뱳Zz +H$g薤ULȹgiʶ?2k0WmEFdZ h_,ֿ&v(Qq@[H^Gq)u~4+ld[ge05Od?CuU8 M0'u|ƝKϒfH)1$[=p*Ν{཯&1(7T6{ae"_+#I7&? B@uu H.{g3Y': ;:R9mE{q%Ђ߉04wlNir@_Nfs,КEl wW{,ד/7NP;v:D)CYPB?ZMbDn:Gbz)R80T0fnh 0K4 LIKBHn(Dp !]w;70EI 骳jw}B-*O}Ou}F[-[cóv{uqx->.Ӻ~bw"$XR:zm0hvK6;C3}R2V.ЕXR 3y^Χyל>q>Ӈ/ V-Ұm_Z9[ Ax0N fĻ^ ]0tG׭`.!hLYV= 3uAx)[2LPnoX)kf>lqo??e@$xQqܔ]̒I.6fJr(}&IH;O>\ϏXhŊ AL%%Y(V^Y" gqP-{`cE0o}hṰyI|Sw0φ hXiMݎhmdwVU"N@ӘA->_@fJSU^]֤e?),Û ,nPL9⺄O|턌 4_ ԧs#>a% cʗ*Ƶ9wT_ }̢ J6J\0Q/C N O]T/G[Ґ=3CaȃT܎|c̏`oR /P sv:ʃTC yjZNۆʻ8; KӚ[m5s%<3YxɗD]~ɢ6qju|anXX EB鄸m+9Qn`A$Z [{SGv9YL¤Q(|󔯹4M)wOIOUFŨ`ݑ9yT~Aĝ#{2NPN @\ o0O2rp|{9:!¬ ; vP=sA1V(\OQI($ Órگ9a XdhH༴Ob1Sd"4zYҠ$wEz pa`_i.pA-Գm;Bpi;$>)g0/NL]nd v>Tj//;UQ  4e^I.8idq|`XFXJ]+_SVKPp$=4 )Y2hy3b cF w Xõ螔ެ;D5s7n>B=!|qzNB0Mt{!-.q2:^ :parHqۑ)n& Hh,ʬGڵsW&E/" *.ogv)Jv?Ptc" :ί@KqvYX !eu6IE G|:8bY|FJ'XjT;,,(IܒE]4:wVdZqtL~FSh-0Ab f+1+mBH?}|8/#C] #J'%)ǥni1]Me>3Fe'=PW }C҈<ߔ= bɢ 24#jws*)hLX9佥/l(: <^ixB&֎BGpfhSiu)D*nUpR Xm) w"b|U4w)̫r )&^aD4qw&#N򄖹ص{4|U4@W9zNare9QǢ{tBFP>WXJhTV֡q g!%AjpP307p"Ge.GCPy( "S!t.T?)1N4C&ިj1aO;Zɨ%[A< =SxO~03}/AQ|1`5ϑ&* ,\c_`iZz{Y ?V5둓\68Ѡ|I .3<$:Z(Kw-)J燂9`W{OV::ZjKHy\Qbˡ)D6[G60\6NWJˌ d<^=*MU,P#)C_±׸JFWܞ켐 @ IXc~aYw~WXUvZ>Z2NIΜ ÕPQ["9w5``Ykގ&|Gu*Y5,|4-øWn1UIZk)nS7c쳘c*uqSJ5M+24!?=_Hޟ-@1P((;Y~pٔV%LdɃLlpQsB9ǕM4 RzW-'q9Ě̤#\\%x|rl3ubƤ*s#*> n"%1LxR`^-qʗ@tH.mK&lbq$x4w}hz|TMpd| 8֏MM} lT(y0"9EMm KM+w VP*)5!0/ G< \ ``#gך=ն7k-U=\)f a.\\WpINS>oÄ >~o t+k y0=^@PUtKѕg){^Mn k뱥VgI՗,xB "5bX߇>0D6 #aI e`p6 D?dUHҤL˥h\.d t4m:tz'j t L\9E%>/w3r˙w2K{^ )Uv .j[0< 8R5 " `PiW+2ߌe?p_7s=:3}c5/ >1`;qZ QR%5gw5R[LV5(kr)\ 'l)#F͎ xTp(X9NG $+$Y^F`Z%GbA:ϟd #4NOLj[Fc47@qfSrxM{54$Ĵzlۂ0Bbޓ2+ԍ+mW0\eLbC:-^:V"--Mc 0rlvq~ Ǻyp?)Qf05J?&Ķ?2Q\^ci<,9!GA Ī{% p&%˾9*}VV݋0ZNd͇|JJqki#P@䳄D|}RXVrV:L][%OtL5JsW`3}#ЦFg 3vkKX9!5*/#<^fq w6P1U鹁IR).oRU7ϳ3Y L Pqa>)@I;tn jCa{#;^UD!6 z3P,zMc;Q́Vxa+ѫJܤ*[ވ'zfD#1;bx|Ob_gIG8Gh7p0wǯO YS:ڜHVGCtroG,Z+2je k/]tpP[/W/56֪ꧣ1x_lN;A 6|J^sVﶈëy nJO>*'ܷT`XJߧR{+q]gY:+dЖKFztS cU˫[d8ׅ`wցOghT*ﰚy[#z!/u|[^zrq8^. ZIcm)Ne}k>7tCyֵipEhaHH~}hUh]|av9n,8 XH/;i: 0-rڣ Na1kúb3 ;RЖN-]p IAnaSkg >2U_,LX,\ o] Y@dEjy'9 Љs>1*큉Ch'FOvPĮcWntUm!JCjMsFA/)Әl[3:C!Bb5iNxض7nEG~=‚QNCE+uKѾa6 w׀';mZtIby3Cd'[Y N%mZ|[ գn)B-&!A`];eXrXcXwU͹\ThR:3~hYFoδ6D;m'V`:"ftO=())?p:'@%T\/^&"')2y}́*‰7.j(wcl}, SV}&`GJB?: D)XgyOa-.MrO;̅J9k'35jffDZ#(![ $O촮E$jZgK o]\{`EPVYޒ),?/ɭs}9LBkVȸ?n}fHP{L^IK_3uH }m*+Tjk!d %8z,e4 6_yB\m@fxΆ졏Xq d.^Uү,´|یC@zfϯe%?>-,I81:]I!B@4LQ_Ա<H*djR >dKc[B -y-j>œQF  @nH aq "e×s f2k1q@a3htV 6Lf~p |XUyj Ig]v= !0s|N(n2웽hF *8p{-j*# mXH?yo)Rl|"^LoH3Uv\9 Z1hǂQV~B@`~RY׀nOskԒ̄ +Z.え[`~ Kj96RgA0/rCK[(yOiaY!@P~?2}uF%2 :Uĩ#Ex/ BSҝwYfFMpj9,μoŭ1xW{K|>Зl~C˱0f({uͭ,HH4.NC=zmH(L9Ε[L ̌q:'M2X642><sʹP Kmo65y(y/'{}%X z1@$,ޖSb3~cʶ'R-ЊK :|79+OaٗΆ>`j7tBa:ُ^eGJrr.!+}DbdJIB=9^Uς 7#+r&"0(rdîf\P>y ܮ4.#MiH:t:^`V93=Tmj:N^&,(nO6ҥ*PUD+TPdw܎S5&PE#Hﭹ ^-ȱA+ctjg~V&y|&c&Xb??gl+ \|Z7iLﶙmf6ciWI}^˅R#s5?Dg?O2 _QA'fvzsL_p.yЮɚM>fܒXB. ~#GcAg²ėrF:^$K)tem ua:|xUV ;9&| BK1r`qm S}!eš:oí2ƺ㣌@LJ*s0݋gZf_O\%.9RA6]/܋3Z>^:H/Bb7[y0ZHbE`6o~,g3Zj̦]SEO-T:א*-!T1Nќ_s(ʝr0|Y"A}: h`he՞ړmx3Sg  fs~jѰTԑ xtr o2Kٵ5lzZLnۗ3]p2pVHޞB=61YYGZDN"";~K,QZ ['x%/u$JXe]PEwY@~R!R+`dFd 5㎳Z+#Vz7wq:dGPT,͍G: l5,HX[^w*i$'zb̪J`MrĴy^݄ڏEuF`kM8w~W;]u2Dq*?שr=_%xXq3FªDb]i,c'4n]a_ K ry`cCC٢ffռj~S |l5]b 8O8E>n g˦JÙm7x@ .@[hvD#Dҡ߮3jpG!COkbPh8ka̩ 7OFkan]@7Si&HF(WվANSG٪s)q3ZYCE Veݾv㞕-776|PB1F -aױQ<ަg՘.$uݟ&w>+^maqّ[TM]p x&Ud%Mw-N[t?ӈ^mdت8G*Ҥݱo~9@@w^^̮:5n2 1aQqX\{u,vϻ#v&tZSboΎ|o|MnymmJց6",rgQ2{nJ殌b;uD9 m%_ݍDLv?s)Ha%ޛ<:ǠqEb2B)GQ9*5A@XdC>ZJTI-l kcv)ug(yESa% ?ebk `'ļ,lknY5ʇh3o\w}=&$sx`DyR-W9JOOwq}h%E娥eR#כ{{C_xXU@Sy+wŢȫŇ)Q|S#$"N ?6Pi㹗,@%iܯo?ZqDBJc(Hzy0&/36!u] \رI/-ݶ D9/S! CѠYBH2,í1p2,h~/'\:gSsJ`@MG=8 Fջb|AؙjQʡCA@\kwb[mMHvT(expk`9 ڄ/88;MtDPv~0Q!f# Ր 3Mj>)8YZ#3G;ܫLF XK$:4N3HU΍AO`ҿ? L=ʵ#¢ۥߩ<'22ϰMC_ȂX['B"DSSL Rc`F0-g~½ [UR} t 3߿ n NP[vg08zPLk<28Ǽk%`DQ% Вd[aHڔh5L/^G埵N ҢVH?%p~p_`!3'!N2v.ՙMv6缯$Hn40E{V׍JcfƓ{ aI304PUUjsn4@x0voC (:P SPIzi>~ +k h AE]gy&9E3/_X7/C`Ŋá1-g=ÑHC&` ?p$g@E#R#5 =k!RrAS?LZMƊ˖PQ:/qVR \@+չA ?[ t+ƒz.@L}qʌR'Gt(цZ0Q,L4JMiY"C@a F_sܘxeQxB;${[&z_|0Ճ N I]" Aյ5>(YsU)[=U)rɘ,c;.$ŹhʎRBfK՜X1 <Pc;=e6ҟow1e7h}}EzM;dX. SGaEKeAQpi0텔Am R[L-W)m׹hH/sW} h,:jTL_9 r sש=#/Hjל*q*? W4pPSeuuX}huHIƈ$Όzx-kp")|.%>Ķqͨsϡ^T7Y.{̰E&tm^G5@fi58Gp.IμtʦTN +"q6l뒶H3MZl1#c;XHiXʭ~H' * Jz,M>{߬,cֵ  k߯Ⱦc6Moug<e9JY:v(qw!85F!x߱]L?=u.*7 8gyJ~sH&OW TܱY*Z{M=$(a1'*vNXs0te[d}f{oc54.Jr(.>[RD~YN*ȿi Z*UD33GIRxB+:ֈ (DGPiQgBJ|IUn׹/nB61c4OxKzkT xc3+GDNNI{dY-ȔL0["M(>5DtMmޟF܋"2/4+!┬A0p_7Gz8 |}+gw.;0K__LG8Y pY{Ň4!p2UrF*?-=0M5 rFf n_'ˬ0~PI&ZS|6goaCaqծ%K pҼwjxl9+,O_EkUuP.V$D1K'q*:Iq?SchzLK8\𿽰a%5ڶdAa:[CMe0ع{ie_&o0 LUlixRjSIre{6N v9Cat'=ͳVuUdPl4 əmby-'wnUT9`h`0upDil>RG,l޸ zR)g45dVF~We9"Qi1Jt}%3PCFM{رε>ܰ*z^Q=eE]%,u Y@m{mƠ NVi5ZLoL'.]\ZH0^Q}e(زO hG9Q5=a!_ȩf'[QnU4 /њ-plGq;f`~+#Bl䉅#,n\I2h#óyZ.6#~F_)@Mu@Ƌ6gL Ғ~1lJ=kTڤx\>JabfD'fn;YUe5^G}ϏǛ f'j_k .pHÝbYJO',v)4]x+ey\*kHg"( u>箆Q StEYt>^X$[/3 B .8D)I\OTn0Ҫ1i7y.\Ht*(#{C"I9Ob8\FI;-':Tr}pUW/R^t|C nH|@r+Ip qY1zNz:3;[0nrf0i!SWa!B?\|d/4md(SѱzT V[Ea3M>dixLeprCuN;3*?{O@!PshtΟ,}Q)C?9_ޕa"5^Ntq47rݑY'R[S nyE%5ӵ纉 A";GCx/0Ȗ->\, vw,씦hw+ ^:Noq׸]Hϙ\{ UD&n={o%;{D]fXD@`uĮ|t48Y<w*矅 vJf1uPlB 5BmQ?A|>fbE(ICb񰎀X4&){OG@ر*L0K=$O (V_q6dsa:fC_2gm2]R4F؆}~F s AA}zh=JҤ?q#p`]-Q{>xϖ3@wt<ḫ--aoۡ %ܶϱO3Zzɏ&.9A0a3PN$HpQ57NA?1آGYeIP~W_PKh$.AO1c_v.;N4[QD?/qe޸$&K 0I_`#Ӛlr4z4̪~bSUߧ"O.1&>FHV G$΂D q\)F`lt~vD,q%r6"u̝~3 3P2F45-O}Um:œ5wAm)ucϦ%3?Pv~L6n?$K e}WNjvT ˍфWDa254?<nuۮM/n Nz{CĶci'qkѷʼn iZ q?GXkG,&]p8.Cn`FN*5lܤ?!5, <c_QӏiPd2,Y=KmT(Kb{L&par75R]T簘{Ǣ;2Ϛ@1;B*5G,?E]N#B!Cс[dְ*SJsfΐ'37H@$(Ϣ؅FI^'Q챡ޫ5,44#A k,G~j:{_7/j bG]Ք3M0}MpgI7ʩbhLJ9}:des۔\+Rμ(XKJ(I -k58^ ^4 .[\ N"]Յ_y#0mw=۴PDjs Q gL?JP9'(ˁ^hUՔ6Bh-c`ك wϩL㣔/}Y:M^UcE~&_5ϠL evJAyP-*j`T?Lm6*F0SAZyur-%XONS1>Z>o+7 bWc\-N'4%,>hD >v"&Lv_o G&4~ ֵhm7 4 ,/K P}]Vݹc x`h’a0*m_g>i.8_ ;ù%%MD6sDǙ ^T=}9$vWJgW jh{7 Ƞ֡m]{*:<*?b*,?0{}Ω2KA($]7PXq;ڕQ7)21见]9`8 iӷ[T ]ZR)lL f%=,՝G8RU]p)c"]m; 7퇔gXݬ(0R`qua4b].Oy;dJZ[,bZ4+|vʃ}q-g'ffU~iON MET+E?ƬQ c/<|c+M[h*dՌبpT./.[lF幞5EXn"/gi&둵SGWRwQ.bV3 s]k>#yW4#)(/ zuc^^I`U6wں?D/&GDtnl0 ?TLC3ULðfvWz \H KmA@}vkJkR9?F ob]ѣ m~̿x?=+HpBr;ǘ_3#1Qpk3r!('XBd`* c Mԋ\r5w9Q'IVǜxEM/)jЩAd0T_U-?]Z+?ńRBOM ׸ԑ[(N-~Jo 0k{ R 1Z:H]1Ӑo\_sʸw `YmŦ,vޞ'HoJ 8 q'd 3u QA;{ ^#?N%*a^L`$Gr&e]h9oy|zljՌl}9e++URXHlnco⯱wao>Fo.àGbqiG.8#~MSaȖ&5ɍSvBW.&Ư ±Y2{--gpP>u=d&Ȋ<(QM0&^ۻ} DJ 0ԚE?B VHlR}iҳnqͽ5*>c0AAoe9;܅MDjB MXG$ 0X[z@AݱwN9Hia\Y"[d\ =\NRyeW$5h^Xdl]w4qR`YO]Y2Uȳ/9]wY>'0py!ܞX;"XlH<Ү\JE1[fH~V՟F-^|n0\KB[Zኁ[a4&U|Jx?aZAV{BaFHŸԽ~\aoZzwJ8:Sxwh{젂zLeT#Zw5G,oXo!pK:S#q5EVox,7:vI4bm\9D1N|&R\2C)f٪#2kb6pA;n!$۬I^񯡷 Ʃ`&'.a`9o.ֱ Pn4Hctl3* c/no`e&i( -ȪMHΑ ʴ{-AeWΓ~9tSm+8@ag9rGm_!1qBcv@,ز>F_nT263ffYF>K6rm6s<[Z#& 4h1Y(1V} WZՌ: ^]&r_@^uP#!RN:s1vEUL_;FNsj띚V[A:tYuvg-0ҭ u=šwi$ stMTrOH0 tc7i7L7v3vo'[4$`w1dž3Š}=OD1MBnrxO(D3\Tɮhδ!ϟUgR90cOD`hjGͣ!JMWwlYÒ[I2VP$̂@ "fThlO.SG;#_4&%"]v2/ PY^~s*gtCHLeL3+(M6GA}Hfų}`) h͒*,_my1u P_^yAJ?NAdEHd#QJtk\j$TZo*F$6/χ8M%,Y%g0{NiDͥ}T IZ.T$ Vh#~?^|a[U/gl>#&Tu"OEݦ( XyE Ak}1 qAGߏV;P?*'o:^Mc:w{Ԧ\x<)~\1;ao/T /KJ?#ҺHt*Lη q&gCqsFjA06 3ڧS yJf \vz,ưRf<=M.z45J3zbт 8n5%/osU GOg@Klz*^S7"%%(ʒI s.] 8XF>B4P[f(G2'i:3Y6sg8=I:>adU^0 ?Y7M>_r6HiW^)}z8JH.PVDX WeR?1][w 9=Y>^rypO ad346bM-E>;:Ѝ2Pit6Ԕю2 ̰g|M-u2 x >zaK;H)Ҏl wRR,wMa.AAQrTHnZQt9>S%Н[[G9Pﰪ!X/ fO7ktI1V?(_ZC+֌B2hvZ69f:~In}rn幜+!zT;/]r]"ćs2٘zReJ+j}>WLS_oahZPZ$o8T_瘦5Z.Elo*K;w#~jz YhT Q T[MD߈x>a>d[l$ǂh|C)"yqSs*O'j"P`yCenBghm\ޭySe93Τxw\x"k}w;vwtUiZlDYt4#A RzV`q;Y h!6U=؏T=|K7׮wwW ԫwXڜK넟kT(x6oHJECٻ=>6>6D)?fuMt(j4 ^tj쬼MK <-%t3pz3͂dw*0\Uѝs U$PoK1#t"ZϷW2`ܔ* PJwM}.Dvo ]k`UB,_HQO KysEؔxpIVҕI=jwܛ`)SdӒ۔;YW8UeC Y"7c/37* dԃ؋H<%>\D*Dk0E\v5Xl ͠j˜];E]ďR"M>Ҫv9w6~WWJ)ee_gV}BxiR˜2*A_n-(/R WGƉ z5M4ӷ#xV@hZ%{: Ho naƦ<1CS2꿧c3X+=B 3x+*QFk;x\eODyNXT!hOr'*{0OL\ܚ^,sQl\AITnY 6tL:TATY>x|r<[ ,4%)8&Ao~B%r'AsIޣt@Fh}3d?n7VUpp[σ8U,Ymgl-.~Sr844a&B M.x9jHc3F4nB܁EoIs(8ц;'}2S3]B<)،^Jc{dėOt<u]Zȡ/Z~PTqI_@N߳^,Gr'bN[ &&rDYh3[ZGUH?\{=OSĸN`/5И.3Sl +.Ȭ@3}ṊSWw6VZDZ5/:knB胡sǠ(CujkΑ[9wg-nk5Le5deET_9dz0YWz]٨DK9^<\7q@۝x ҼH+L : )vҚ @PK@a(\1K9u߲q7ʟpw 8|}pޞrȳ\R.gHn\}Ѷ5i*K/k&/O 8}t;Z=R5'Á MRPg 45ͤPmׯ-jl!0* PE~(?y7V7q|Quq;qodlqkׯ3:|i R^lu8i{ C"W/I\]腍͢RILz45ۅgᔉEZ#WC1znqbo Jv|EPWpQd㓂ԏzxNĹw$f~\~c'FoyHC 3U'W7m|5N밶"#~ڮǰRaVbbz<(ç'D1ks"(:V|a(:6 @,ҤDmKVdO^u'y۠=,qBGV)e)4G[<܌ ֲC+^o@B;Y!xj,wՐdY̹Pm$g_бjWشWh.I1Z_A yo'H'; 9ɂq@cU׾ Kd<`73}Bh~jXT}oR`S8ִJhcQؗo05N'G1~.r T/n]sFNE$f/* {ǟR.+m?HB/Қ 'l7X/1]c^i2sAMG@ѥZY0xv KTD{r8 geu"s@ťQ=JH#QI25MT&F~`Sx@[>nyнxwOL>E9PC# G3[a!w ͳU_&{# 7a˽'/\XW=YB[?~D`S#qz,@ZWugot{T1?ae^H`93A5*?fj-8{xS!n|ǖлyiʑF?thTqa7tgs|m%uM`ЄiIxs`^5}eZn>AjNm\]JFGѫшA9muیPF)N'wT4PL?*Te¯V׵Lh8ϲNܛ_3aR#8VGIv+Exρ#Z`ih9nj/R3`s:A:HcތKIӘo4 UPc]0 m3/f*s>BYW}A=|sSG8Z##Qczq^OzE;+ξ*+7T9t<[*D6no(gխFK5<:wq;5֖xuC90w݇`| %o e7Wk3)1oKHBql(xi9ZEC>*V$/&;~ ZBhkf~V:t,gF@հNNqy&w g ~E\p?V>dסΊpQ]*Ctܚ}Qo@$ Ǥ1OQ(9_[)yyD`\fE_1moelѷbCHv\VSlҼk!ʁY)̮LNEy_'ȕ*&iR^39ژ<=ܹr ,wx4>J+d\cH͇*j?0Wo`)iGbI4-)tûR3 wvGLLߢ>&R%8#o?l 7a8$ l;ђEEo{H%z$ t@f ]Pohk\On>6r/r_ ю$(;8b=S\K̿qϖydQk_>CEstLNhE`ГU]gs!%uCDjeU Y v Ҙ'̅\9%vR e4Xͱ1Fa@-}jP)).p(% Տkҵ3 6|M\ޡS1%5x7odid2"N sQ!Q d,BhX9n+-OnO$v> +15FIXıTZ* F#}͡L_0 |K"VA|*ap l)b 1`ɆBgKO IJo=1wX( ʛ|ٞD=dl|'\Qx u^s)C}%~U#p{n㶃rW܇y7#]vd|-<%^c~~+v{aYk{)͙&aڎd?TҪ09;7OlZ]FN#h[6ݴq'2TzF5CGدsP m@ S' Z/ ($Ġ-' Rw׮G2i,mKՅQY-hNƃox'+3FsovU%AkiLO,5_x/&O99/-] Le1D$gkaܨ|vRw#!wM ,r| t}-dA5Lmz#' ]uo ^ִ˹yNQ~Dj%ypZ T^kZ4J1A,E(N$@Î E,iϱzHrV:&6߻GuF%jyۯ܃_6EK ~et ec8D[ ,i TDcGR XQllI/zCXIt-SWQKδCt8sm,Ź\"峾u[oA ӈmrP ]jV.a-ܺMJx27-a{|.H{NJn:P⫍W;gPEzIHm+d{sv85L>}jft@+x"SQYo!d!C'Y+je΅YОMኌU'2p r7 &hLq!J9B\YkEI߮o6&" w #(|mW%ͥʱ#6CB7UM%4x9{iRwZ-u3M$1@^A[Dk7fEIDtxrn^&J$k(]Xxg3C}e$0jyZL_F-.|q%{1/=Xgz1pbӧ^Mĩප']L4Z1G;'e$Qkw")\Fl”9* N1 7."f 0[&ۄ4)_ 1¦:ۡ> ZO1B觥ô"2qv^]CALz;ڙNvRٷ.QK.F{q$C  ifRr$FYq^bSje;# l+x\j<UwL<0эs؅?.}|pU'6v_ 3㷃ۭjk7SM5!cN'B}O5"gXhE%`s_v*b&qgG5%D چ&Aמ-&>^g/|BLcgх2 q)?c-r̪5̴v;BW%mTBV҄by "Xh2~ͣN;WAYʺcuB:^ eO"3 K`X#~ѨhVbL:O47ab%RP %+*Q&m8`wVD=A]^ LB5RH޸ 1t J$@<.;2Y8=/涼WbF҅\y?46mcQH\-SV$f&hua<@=/3 Z{zd:!%х ' ʣɯ3TZ~CL:#*Dϋ*-;t o|K.Pڽ8=גNmo@j2Zu09NM3yRÁ!b3gv:QI/x>h"C]ky& ik\$#T cn5AoX5E[W:Yh6 a#Ä3Wh eKlXVKqg2놙a Ց"v-Ύy% D72 lssTb|x'|VA{E nMcv :u˱p)#Ui7ӵ8Gϑ WH{yhr;H[.vEr=}o7$|kH==_!yT wO1sN jV~(75U.*U8Uˏ7A $(5KtvzjeR,]A* o&iH5NMˌ^Ip9d-ܙѷ$R^e.T4 uTf+~Fgε}"¤\,Cl܄܂VE bnWVSCqBaFlC-X 0F7OecvIm-n)"FxF,pJ pdߖ 2*ߨAMM_h rA7zA!rg,k PA "?]e_*"dld5r js>]4> rG[`|;=zB\'D>]RQ:WP2O;s(f5%w b>#(iXopO`G`;.3pD\敀Ū9ϻ=W`)(Ѣo]=8I MxU Bx.&ذrL'd9o!.ٽ T4@1kx ҸK7 J^K.(p;aMY ,NLJFG0KϮ3A 6 rLLЧلt;ŷ*D+@G Š^uQ}gRM*WN.[GDUڞ-c20IP_^*E8x"G !G4./ NM{0yj3@" +FoHX8:Kv`BF.#waT[9 ,ĭb郋CܝY(RpB˝ }N%>/IT#^E9v2,}E=D)|:Nùo)ص ee.՝IC%j#K[%5MuOѡȩroտ M3,t~}PJBYd4NntTy劶cɆd`#K¯F_^P̿qY{;a*(ruL;\@&VwEy#C_9g%yy23F {%-^P\O2>-wO@*p-\ᤆL/g@׍li9xN"FDX=&HB=EHXg_ /]OۙcLٓ}Qw?ɓp\b6=໫d3kgڼݨ"밻L>! i ^J,܋R*NsQvs@s(MF1F+h_3ov%<жa0N|yb@0&`tR0ϒ%`ĦUjTajӄ#e>p@h5atYCY8= zqwj! /+f<~U'ۏن?ωO0p8&B#qቲ kÚ24?EPAWn\V;p:ڳx9.lxŲR ^&A[z\8XXI|A[t{B#2}x \K0`?q? Ui|SJV~5Kt|XDYFE;ie<4v:y)y-.1n&\Y`n2>-qE2eW4<` :W%}_9sq0%u3"rdS@94 ixgU+_2^.Hb@z}ôVDu.'TEbv| VDxVHikZC2xon# 7E+9~s+MZ/ Z_m;k Mƥᢖ*u܆N>%6ߴy숸da:0:dL`FܿI$n _বW3Q.,x{7"/.N -ZdŘ(rkW'H1OR\eT1“_xk9 ]o-' 0˲ /zv*Eeeƛ.'13wg/aUU8Y \Y*Ugq-Jlo ̙q)kgl0gY۟ۼ1])Ӭm]*樥Fک#部hŢ:ƳWASu3cwIsa)u jGkwRP&.(o.br[w[Q&.h)JX*tU, O[W5h"jd=PK["r^AzS~w"s` "4=HC ^ҖprI]X9_+˚@C,UO)tc?u+Zbs+k+8u0_2Q I96~,$wʕm!\oee[zLjN`\\f}K;'6_Ah:.-IN/d _smE뻜-EL]wD|$^&؍@RZ> B;u+`(8]Bcprdpf'cl&12d!,Auf8z@R L`6ά".-p; 2-MBGO@]nDCh$j䂙Rʿ0*u$jQb1phD]߰u$;[GH$d$/R@yc_dO"c: $ID@>3Y$eL6hKhL Ե{uhP`\g0g¢Gs:kO$3ޯ:B8ke /7^fu[*^M }婹x4|G\IZ摎2GEg4D>fans &(l!3HbCIu1gWR! Q |3=ϗ[g^Q.w=zLp"u'WP/ɇ<#hǑeeCđhV4#JKKźkU̪'HmNpјҶ0Km`ýEe|3*MH%;_3qqb,{lO|^j' N{ a`Eq$ϗB$#IWy@m32R>0@铁0 .cVmLo3э(w7wXڹY IR[Fb :2Jj*u?Ϻ\%@r:"XZ'{ynPj}Ŝ7Juy̨cʱ0hHϡQ9(G\RG]sdBBQ-sd^C{yhٮԓMٴzPJcmnUHf p-8gz%lhva-iq i8jm8C5 3mH+ŮU1ul5ٛ'~ly~ѰIc |&Hj)UH螒:~-2'<޿v`<2gn.3b*~4ة͟ȡkQ;SDv2g o$&\ʱ?J|EU|ШNGQy`Bb[rI]3cEZ/F>1%qSrQ232Za]S- %lm`}KǻKBCbnqmKʧ@tCꏨ8y4 FV}_ )6zXSYx3D"C[Ap­ܧJ}*;e4'z룘@t׃G(ƥ;\TTqm'u.}|.:6Н< eY7C<,.}I?ke QxK$(Ƽ4,Nwt[ W 4؁/;@R3AJn\aCSyZy3gS`Bzi,+ȑZLUlv#RM Ov'~D^x'8F+؎ع6\kT6 5{b|8|ǚRC]{P3KY=y%&T/fݠ*%H*Ed^jIݮΞM/fa1lKG'3u|yiTX (SQ67>UcVǶ0Cvn:)w6[G&b#̜9h;pࣛ\-Nn;h BxP.y2 +W^JL%0IK/:2,S2 KǙ3Ϭwe]Ekd}9(v`yӓ%-8Ji˹{gK2Dˇ fBu]F:#߸\p;=5憹rxԨWKN瀺3ߵ76'Ǟ'.\eKG-, >ͻy pq43CV5`lڴ_,GK1,K"azG}ˈXʧBrqgS 3`y!ugv9dZ:rܲFR6yHTt&yU7J::JZ3{"UkΥ!$eV첍JǼ:d~@Q 9BHMkÕP\[ktpEɸ8'@kGu/nINTo`K|Nh&w9 zahY`tSzͅjSkՄ9nL<71=Ҭ*``A3w3t^M><ȼ/on%Fcu8SK4$D e8څX'ݹkv 9h6Q_pxiU-(S!xb5Hei%AfƦ.C[0=u 4|R֍YkNTX &-O9+={Vb̐uTB (#7m>aKa6Kv7MEbN\Ulމ2 vJyP"~*`-) zs1lUwT~_vW5*9 ڰL||R%Nߜ.]}v1V ao` qVbad3LvrnW@aq>XTJ7f㝴RJwNu!5fgkѲ!\ 0Xh$,dd2ۊt+JH& ? _Qq91<4ls_nGDDbv^5uO(DEck{duk֬m/D#2~Z&hp/Q屌ԏtʰ]sa44Nm7Zl#ڽz'+5%KȤ^4) InYu<0L"NW aX`pc^'Dt1t,;,"1o/\@o-YN9A>h P$ hxNGm7Ic8+Y,G0wW0dؤ o`h#mN:w0gbg9o f&4Bz߈+h KsQ"սyk͉M}V)ӧth5ע C0W޷:2iG/~ŧ<.t%w9Dkm!X~8b$7v`H/ LkU'+4O8Ios0ި^ 6x)og'+P'pXI!c'1ECMt:h2՟,UH5ҥ_ح-=#GSUÛEVpqCbSIm!ğe$&uoZ󢂴G1'7XNB:9xgdŗ#x>rƭN7'N x ^qnaSVEͳC:Ն@ jl#0mW^zc(GvIXWw,n@Bfa?<H<v 7U=h:A hِ1Tc6;YU%3ȋN[TJq]?!OpV#m3h}zxYT+m;൷LhsOR~^.p/+vy",*cR*-YoA]\>׋0֭~2`kmpj,^Ӵ}o.p+|iTZ3~^n2PWeMڣOy_4$ }i!V,%ŧPb_6&CljB GÏQ?V픹ܩT~{⇋*5Z)Ut+*.Fq!7}o; IEr.Vifzjvn^o{*zt6|LWf"P(8RTY $cui/y>@PbY?̺ ).Q"Vmz7: B1חv$k0`@WF5k.%ii(s$MQ8pH,mme"h"ei]r,;-ULs-Îds*xztLd~`gȾ?0q^޸:H8#p'nmvP5.#.-c_XoNwR)w; P>=?:F/FmܦKAȋ9_zP&Q'dN\@)䗈A0e zswM#6Ȩl*r#hs=ϷTTjQ鑩%dL͇@ءH蓸 š;q3Rg{) 0Sq"sF՞[eH:¹PϨҲvm:ԫȢ;/625~VxЖD~H?@4URѣ^&&+ 5M_,t̺.(o=25X)d{qq- "" e!-\Q;X4!onY6 AWTXzUfhZJY\\^GyU9+ +tq6?+ KL)RK#9_=u] +щO| 풶mߌ x]qU/%ZkHjF"׀}X"P;k۱/\~wp%"T PELIRfǮbj{)LԒtѣ@P|=[?/>?{"tTr5 CVd-TeicG8 )K>{-+k`(F+4EG@FHRDH{1vPg.mT#03"tuKᇔ@cm͏@|؍zAK*¥ <Z55S,+<,6^|H3P40L…8N0S6gŕV#Rh8SGI{Od@R1O3XtCQЖ14(zT^EUOi)[ʑ2ڙ}]l|>R.Xѳ䟘Dҟ˙4M̻RyߏvԂHe3iUѷ*19;B.@0f],93 dF'g:vӒGץaV)'ySy0%i6*Vg+(lD2SDɘ\àBm0G@">SW`XcQr'Tdk0'vĮR,+B%ZK9{7O<=q)˰JvXArNT_BINroVLLY$KH!!c[3̰ѲOob,s׷`tLɌU>s 5' \TxC PH4w&E;a:< xkTI+dhvaYg(Ue&\|i_ef.F|ė*;bRPԬnP;0l/>\rCvc;:t{ykQ_TH:I i?>dyXbv ("=3^dDI" -yrMBZb'!wM-Bgʐ1K #oGy}b>U`T/;_Jq:x,zYEk&ۈ@We4؊6+kۛ^IНJ&'CSȭ{O~~&94vLpc[wmA'h͇3\9FlfS_\ {szRkN&lg  3U@5mҮ ~s-7!@$bMbԗFjFW䤨o&h] \IhkZL& 5I(gOij[Fd0!\,`(4ꉾ.f?5ı㘫Bnn往;Vi;[D~/n1[ LFmECpýP[#F&,N i`MVT>)bJ2|6sD40߉ߜ Tl9߆&X7OzTQd|4ȳ yYLew~8{pS u]nH|8gaDgO!nP A'#iIҩf`M-=eY:Խ5ƭ?rq+F;q4<ƭv'MfFT %,re=j>+/uf}7St'_Kl=ٹѽ[De'bۊ=d{൲k~SYt9<_3)Y,-9 Hޏ4_Ɂh1(*x+%xUE14X'&$X܃zbTt54qo@JDS vxF>鷼<-єl'c/Wҋ_1s:6pnN_.9|r.˂@?NM?"^;b Gʎepeۚiz~*Л!!7,vTK%­xa1?o|?F+3w8udƯw#k3ҶY1Ge %gBot<ֆ⏦}NkT;-Sv XK Mt{2V7ghr+NL'/pFƙVS`E鈣T~(0Z_.^jJ֟ & t/u|zcu$&2}cAᣀcsm:W+sn И{ctY_,RBrFYG CJF'3Q۾=x=0oQM9x*]Zp2zM&C`:Aewf̹ԣZk@EA=9̰3b-0VMItŨ)~ $sv| Dfޭ׬~ >eE %x4U ?: cuٰJWeeXdғV<$OnCx!crOqN &ƪIH{1Lk4npSQv53Ii{ZYd }PҪ5="lYΊ^G(o@Ai|~dEٗ@tVmUHϲK! k6[㌶aB冿C#:ɋ"O *|8OW'5?ys]pݕ<qOg+ [W#M-#5<1qi|K ,}/yfXiHs$@z$2qU58N3]1Vj+ڱ:;Fjwx %Dvre{)?k4^;[1؇;C5 Wc>Xk[SRt|yVO}vJeQډOFz];sFjoqL|+>Th뵘Vssa8$pP@0a/v܍|(b b{jB}7:tVa 3|aX:xCe,m |ٌYPXB+Ή(ٚB39,ZDT fHN0svKc+p5έl.M# ĉ4P0 ٿa)e c.mfbd7q}K|8Wlu%5f`Yt$IJ3fm7{5BiBϿa VU2@P |kųS跋L Fm5K[l\(9LWO0TUx}@|^T%RgZAQvcC=BS2{_mG.:!B_h%*{ܿ?HD۰BCE45$/ FKH#[h_aWyY@RUDርsu34{ b- "%uWFƜP6DĮ'Te>*ͫŴFYR.n˷VCh~uxQ=dr֠ @cX7e\@{>~M0Ū KfFxT`;T!iWOAG߮ۥ`6mؽɡ.(]ۅe*4ǥO'6A/}]0W }5l- J>ۉ9SC}P`M`4$Zx8;_,+ ?p8DC?@P`7 &܍2h v[fp+5zRRKdu jtcpB@lS,Ht+?a82y'8ŇZa*iU[dP 4@ 0*/Ԍ u'l m_%VКK³z(W~ xjҹ-=MtP͐rw)yXn _9zf1 ]PC0O>ZY#Ο~Ym l!5-XT2sN( xǸ/DL@ S0: _YC Qz%;CmtJ$+sɩh}G^yV - %Q(ƪm \ #\b(XyN=NH kwM=~dA,a"tCq?ۼW$P]ĠBc'&G~QAN'Qk+\&p)l s' j1xNvD* =1/L>VH+U;.JNrae%?(  3C_yeL,FKpۨY`xY"bmय,X;U%缨GJ 56 ^ΰ5a|3ٕP= ~)?L& fAI7></GsXtg\ IZ@5YQcb^[Ȁ!VqbTAo/ΕR Jl,2qq%ʹ8+5s,Xjϸ%/bpGee46_qQF Ո _v,=޸w@_eStGz nPhf %0I:f4x \<Df= =IN'b/$I{LNC@u˭Nx,B/S˧QÕh\vqHДϊJLqWtG@=2ǠGx~k^*p2R喡8Xwp΃$(Q|8kd9큩.<᥆%M1 %\ 07 bm\ 0Ҙg)9Wj =õ)yDjwb-J|fެ#ZٯI@ ռu(_^E-Tgw_}~aa-=Wtru%}`3l8$x: ƛ7`¾vCO ]Wbv˼ߣv ʦoF8\ȯUOuz-9/D:؛[ՏOmO A-.TWxU0FfbirǐKZp!Cxڕh(l~6L<̴r8ziæX3oVN@6A@P.&x H##EH^p^HZQFX&ې}o0i"n_CtOR2[$K:~e\9OeKzQ_?W8\-ADPzGi2+[ #H]X-aQ[7@ %s溎\NX̳LJa (?Ly\]d=5B%=F{~* \?z~n-s'E=9 -:;-Wvh/;QxXt\uZCng7K)A/+fpPp0&"eZO 2LȤ3R=*|l.nl$g Ihp|! I4q? 86UYDu; HAH/!zٴ`00fcJtߩǙ| \G:זAsWN:Ľ7ˁaw݌A1L 8_:D^Z"\TRS.J7}Ogjamנ8`Idף6E.Fc4J&KXV-fwB(Co~-NlX8Vsۻ ]j>(]YZ,F ٶbwB?'6Ia񼑍iIhg85_}YIh9k2U!KxN֯n#)0AЁJj#AXJU41&B {1ٌPؒT^FhpoE\AѰ0_&&e9!X e@W*HLj:>&>{5.]Jap3I~$o(td>&x!'M"N| 7U[A᣷. . 7_nhUh""OXyupJ.cشnq2|sˋsİxJG :B3*|{h( Ddfi9]y M+\lc8MtE2U){x()SS܆.R `g,HmةɍFVsdQP6|v@؜pIU 0ѳ*/NPDL gNMtSnyUoM_jl Ew%nHŦc.@`1^.PeV:˧4ӎٞR0 ci@Ŀ9_ͺ.>La<;bЩ#=mBpfsDzNy)K.ĎH1,Hu+/׼CSh"U\DEXϾYh/j܀)0{Lm.|iC/j?RCWfHc/;[$:7rRk Tpv=c_3:70?IYE@^þYo~8\@ZR𖶦m9rFpn'j#*B`v7BQU']h24 I.&1V98]5-XvF)00şuxJvZӗ0>~>8l_٨24m.1^6hAzvŋ*hL )m\Fi>bEN9ީI u't z6 k#q2VxZBV,O] __G5G%!Qe3E& VLp:%bԩ$ܱ 6f1ii$"PIF'pȻdfFƞpuqYz%t TotXť-2r+#ykۮJ e·͊CWYG@h*7-^w{ Zznn[vzb(5mdn2 *g"|?sm< 6s-G &v s}&fR`/qonXS\*(cӦZw]7 ųxߝX{!_sC*afSaҊ_TEufǠX * 0de !4 5i yiH(ͭ~G-M>q@ ;<ޙD_7$vc+z^GCd@,FD4ǣB姧cySy%z1Obp%qPڧ,?ݡVœKlMK9n Q's!gX{dxPjZVs̕ap.QJ:qer^zj*0_@,zap'x 7! е*7H`>gfQ~>2pe 1Y`UKɥݹ|ÄAٷ(l.,lJH& _><H̰#o c $Wo7=xW0!2g'dh e(8bwG7r=o6/vl !eEn;kz/e(׽@ dmusPCV1xGM>}i3pgV3_-ڼW/&*oWhlG޵r>`g7xHAHB|9 P/W<Rް +WuLƥyd7 &LMrKͭiVRk▿ >hcjvԤdU$H-Ob<_{I (PymlX6{1< T}uC -^b^zSⴟc1ЃX/AþBlXO&<Nf녰]φ=l>&J/.8".7ZH/57ir {MټYKҰցt SEkA[7>'/D -~\\55g{n ]2GDΝאG9vX{CZe=q2PNlea;N*يE񚝌|B55_e"21kZw'H;kB{k0#2sHsmJ>߸Ų6^ &-&YHjTqLfsvZ@ïF6ii~$8*&x򬱔4;ůJt>״9ZAdE'P=Dn<4F8CK+uGcg^Kmn9<~OzrL/PM XMœezgӉ\Z9q~qӷ&l ԔOh݀ɡB=m7{ʣĥOz"WDjI>PbWbB$h3 `Gg7.PDhRm!3#G@`OM"Hs]eJYJ@cφՄPkdlfjщrEzlCQ*Ȗ K##UĆȚbNB+ '&G"<5Luڠvگʼ_W_rh~^L[?P\kjW|DD=j"F&HnbmHx9$;o{Q/y%aP1P*/F-{X[ =*[x5%v 0@< mJvC!>^cs.;'+{!-=: v+atV"b(::;YnA;H'`a54xܽ~\-ќMJ&wbogvFl׺0\3@fAQ|>ME]0(֟ʆQj>h{cAp su6:9{[& `Z)v7Ϲneu9?0Y//׏ۧt529GNBgD )OpXbX;O|s`@X]h?}Bp_Qa>( b(%^_w_;{3A:K~ękdNSI,GY&Cp*y3z86[{ 0 /M !7=gj:˔v1UhWw޵0\5]l$)p[6`uJϸXZK[|x:Irq"Q,H5%Fxt`)yoWk(Ā'4 pp.H<+^rp=Ժ KA)(kv (^napGD7mbA%F{a9ut$A\tǐM#BLh>}hRfNX`)vNm;ufJƅ7 |YK"3@G7=1P]mN6sJ;u'1 $fF}Ͻ)#B"5)>Zߨ"1sĨ(U7f9!#?Ne74Q ɪ_B1qJ3#&}ڽ8[3~}jrf%SeݟT-IQ'4'Sz9'?R=,URPG,[{Jtf>+K•rJ#~b'e y8_-_{=#fۆNP!8Ii!P$n+쇱+NSX)KL";ĻݱD:Z_V?n\='PGwʜ`Nh&IMs<과MA-Fʩ!sV-Ȥ!S)"(mS4*͖G.ť'?%p"F|]+6qg[M,Pzȵr\h%eBpW`BPϞ:\퐑Vm:?6>5OIfx6<95(PN3Ui:  AUV |bFwU׳|r]jX* xBѪXׁ^%Aݙߚ-=tǮE ]$.TYj- hp7/."|.RkKucڔURAk'(^WTo=2*2d[ͭr'(C$'|2O4W٢h"IF9peE')GK< Y~WG9zy\:O-+١KQ_}h͏SV9?9ͯKs{Z-*@mAGGE"<4iKp1#*{( ^*uVE\#T&3V!kl* 3o%݁ ֍ΘpX} ZႍNX*t1L }N L+ 6_D~j^3Q,"_Kbj؀W7;ϼ>_g֓R` $),즮./,}#VH 1@W6NA,>a*9#w]x_]5-6k|H]uL:W,S"5ನ'N|{"tȨmQ{i㸹eL>[ r; 靛+Vc/.^ڟHlRҍJ) d@9Žd9%S{oFRu\;UVl3[iwa/7S;PE^Z72谷C22~__F\NˎL#p6#f]P[؞RZZ,3ֿvڦ3 :t3{30+Z1U$'CH׹Rm^lDT(Ox495!,1K{ͬ94 )(!_{J(.e=?hz-kh.x c=[OGb#d % 2e&Ƣ>d]m?7"pY$+>eϯ\3HIb c^j[4luK*vR~򔈧%n@ O )VX{iT*u']ww1+GHɠDnHnc6+⡌H))7RoT>Gm;KaO hJvL~'vu>W7}p ,6&.DjF5Dp*lY~Vկ+ PXn]n)Xn%.'3Eiop vObsX2-̪/mx m"ܟi-ez#s[JۚJ_w[`4򞕀Z Jq5zOm*t+z n`QqA<9/XʏT ULbk\ =,@@ -%6}1)2(έe-{!\زq~374 .޻njޒIB ^%Ԙ3nsvRПB }*C|#(K`ŋ+)eؘw0mL^HIX7l ^IR=7l8sot{}Mf)n:KP4]:,ih,Z]Kghȉc)!PAV0Oh"0P<=AHvLZ})kvm}m!t%jpc%as`$ 糇'ɔ憯k4yR .YLG w*4l{!GPbirg(teTHu)gm~*qm­O6+0/oK ,sF\:tTO_Fb.xe~{ZfA{"=[z\$x\r3jh28L1ȊEkaуS7~\^wb?pl4!m)`P?ǫ]iAh }ULitSgg䭑~46鄞btVp߄Ň/BfAL,u-(U5C$*}"H'ax>RA|[9]tжܝ`+? *sY3j,j^wۥ#qM@ĶzԻr= 1<($afg:Mӂ PIC% wPry1jllmSۋ4 _ݤLrR8= ~ȭ޺Z#Z{u,+/ Łwy 8+ٴwX Fi 80{LWȩX[3D; }Shkpiz]lyr_z:f}s: X>{d`l0(4>pόck-x 䰚U {KW4+-FPѶޯT6_NaPI`ݯJ$&ʄ6 H|i@>רjl"ZJuXY<~J5c&տ$=Q( $Sc\ilQA7&,yM*rvQP1JLպkpm -Av*QYsNIeqLKW'wry9 u$g5u Fk'HK=V]D$oY+| 6\J*Yt4E̠ \n4"R 1\zG }$MPOh #jVj]c{U2$3i9{Jz6U*}63gJώ<@ֹt/UO/0Tk;lH"SsIٜq+w(MF*= g1>#!Лsx,:g3m*+VEJ(}SU> EHGI`ic9CS ~Ib' G)їϤ^&b#6;;6Bf-h6M[!:=CTw#s-䦬ħ8r$~=z*Ns2B=x K>zU$u_U!׮OOS"JYAJ$bN75)MɪU| 64 n7^7nn=rlH<ӧuda9M -_Mm0#1а]s&DDX(돖K<5Y4p`-!EPOO%!Ͽd(Y}EL^75_!^03yIhf;~sy48]5sA"-FhOhJ1|gi0CBLɡ> q*9,<4*\k+t|=,|b#?~‰{O4 bn3B^>Ը+1H/RD]oȅCc _A;nf00t&2{Iek,㭙kdY./c[wevw6>(s7fX6frSU5WXT>IJ)ZR}(Ag}h,p-FrۘDg !MsJAZU|M`^=#zITf @"pC@Z1~u=^Pnɰ=/ްd1*/ޅ] tM #ѡa &g(b &WT8Qz{]~pjO)e ="~Nl.-7H&.'G Vh#m%EJD8f` ?IsDS&-K{?UO{>ygUaB j?ۨ]-abfQ#PO1JL_dw,mcUMNE`6\~S-2c+uωSgBǵ|Z 1OMKA 1vQSԼ0QԛzbOm."}wJ-Snd}c}R QHU.EUk'^|eX"O9IT37쳈N[d(͠¯8 j8ׂt*6 =~_oqٮ$I":I;x~F[J-֒& phĤG^R 㱉gP ZSY#M{%?>0oyC`w91k{BL&$gӞ3ٟ7Kiѽm)~HuG pZJmN-e'In@={ -F[11NGx3g9<](N+74?)ef#e}P99WNѼn[x@+X1)=9ŵkICzCO -R}  8TjWUvOIH Fq'A }ʿE)D!8,+@Z=Pr5G ?]PV 8y ; *_ mogZHɱPz }Wꐕ湥ȭiLu[7Qfd3NoOtiߘ~wPhL MmqOANhfC69"qaSUǕJKz&#g=rƕ@tQGqA7 @>|3=O&%k =ә/ !?,9F۾2C@O(@=z@ŽDPMWΣC,s'5b).%T'~*PޏG!}νv,]5bb弊DpW;(ǎNAz}I+PQl.wJ3,Y䝗 1l_ެf1ύpLӡ9(oA ǯhaR%31p68zK&ɿӄv5OZrT!ð/#8"' /OlŖŎGa/6grsk"V}SMK8%27Q,e3Ͷ]JTߧȉwOcewpQ&&CzQ|$" Tdຣ^x[A aaGuo!; 'aPX{q89k*3Ey}I,O_Pm,n`~wp{඄!sh,+t'Tcډ XMpJеnb01*B,xM4d[C9~YgǞ;[F0Ζ';zoǹ"TTRO˄:X<É*YKf/h1_rzTY6J[Ye 'rA;E8_x3o6E]UkK:>:2 <I?RHu1UK /F\Ī S,bYvvĮM3~ԝѣ|g N0P%ۤ"-8)T2egHU'tL@$a0oƬ羱`@y"! u8L?v7ֳZuOn'޽9mw=3ڱ2 [eN+!+]],BY@G\KV7ckQm9b0=FiOM`7ˀF\g "|u?'T]ԦSD{bj5M2J@o,='9HHj"s/.Rװɛ?[Q0yFRIiİcQ9Fi:<8R(LHIYNP GE+}9! :#T_A uHG ;[*4PmP0WJM:V&iS VpKSG6(Nͪ}b3c㞻+Bl=Sm^} D6iuDl)_-#ds؄XPswTHH*`b?㉌1FRLUreB k+ns?qO;w][V Lܓ pZ`1ÜJz\r%[gFZbMvHS% `*O_ɣvJ!ӏp3ɲ HL!Ή{ȧ* =D`Cg ttA LlsglE≸@} o8LFvey_%Rq2僽 dvb291bi$yrz8[IJWx)paCtD5D7P5¥Px{JbQ.Hn7E܄WYf(Ojz$e}N$F>u'jO]ǫ߇Yeoz s#'Lv >EQtq5!Z#1QĕZlc2bI.C2k8F<`/t|k/?er"03dB$߰合xkqcu"3۵lR(DVkK7d֨[=-Q->N1=7tȗgU`j_a3k4%C3NdJ.6kz֊Vn$k̇#9 _l5N3<`ʢb-uچB%)gJY:\ޭx:DJj>BF} 3 ?IR} }Eh\xi/)/M %T](ƾ A'DG̳IgG#iǫLeSre?rZ+ Ady%U=bG+Ǯ,aabT72[:AIƣ ͊/2Bۀ;63{I\Ģ"Uǒ}\ Cxۼmg&CAW|> :@199 QMLCMI !`_nD%MWOv 8i ">ɯ~ YyAvN)\-^i5.A|'J+1ֶ[3q'-ƆvxhN_?Lb8J{`b%?` M{oCelZ-Z_CnvGt="KõQ*ܯ}湮5Daqg֑צM>^\I8saѕY/Q|0gR!udĸ$OL2 4 o puFX(֫04qJ7aq(nP &^R;8o;3cJi}KI܂5<%u=阞V5' o~~Pim!!遝gSr!!T[ ƉM\.Q;N 8t ֎쩯T 7U֋#.׽\y)PvWj̚n.dJIYEusP208X~.J{x'4/mccN05"&~k'zME-P LqRϭ_Nwkˌ?sWe -ɉ2ۗpwyjVt/nP9 VI5]yԓxUmՏSM*ak|j3,lcCI^Jȟ$ς3/HM(79Q^+dFj J@b@<~eӘev8?Hx_! pM2޹>m:Xz,w&t|UU+c?0 I3)|#>? hGխq٬/ <&6 8.Sp3|7mO!ԘUƵTɯqjvu{B;c2NZt!9'ov9gMI+8ѯORN4$ Y56=ͽ(O ۆ~_D;d!L孻&/BE#:BK8jpaEkGѲQ[(gDBϕ1"}PSՕ*iwSTcJb]Fnw&^ @w{rr$[ PNt_/_Q۷e)tN?MP+rHk}HǬ 4s/C,T7yo -c&/AX9ƦM ||Y{j\fOZ(0S@7]=ґԟP}6D|Cn|bnȃ[K:=rۚ,oQ='1 vn:sw*Ԏ9FN\TFb.gS'<5Ba_ߓ5Zd?-C~c֑ŸL6Gxmk ;uU@_m<[8 C)YT+hD|WǰEyd'S%sH^ڃr ɨ;kLwH]:6bI:'P;3jsosHp@h7a̳vV"*& InԡprXt;\'Í%V,nyf,v񩸾$j3 U>^@0G?wj:+`NDb jR= E>ú^ ` UV\?9fvq؉ropķ┶׫H qsƯE] 6Ʈ9']("Gkgq*DIBIK]@WPx89wt1+-LGi?VbK7x$j$rRL|A鍣vU?vw\ <.b/t쳐͸b}Zx2j6 ݔ'۫+ĝg~G͑f0 ;,IQU to?Ljw))LG;J6^mm].NG4ի j@A0.KӰzt_$VrCNA)u~Rgy}jKZ¹-ÖCFACeէU!iEs~%:4~ù:ж4Ϧ$9{ٮSx(PVHp">Alg'T`4Cv^4|;\$7DQs $0KyIAl*㩩ᦔFL@OolJyL/GzX {"y꠫r4` (p 2N)[Rbsxefvv/N(7& f3plԅaM$CLiǓs9Lb|PP[TByDW7Ž* mk j}QaCAtsSgdk|y߫cqF/Ua,']iHXL|TZb mV$yQ]UZQnOoD !8}QW  M1E<5;0SaW<>V*ΉFёs1 }{;{ҢST4&Sev J=݆ףWSTess:?gK,yDoJz'Ay[Ѓ|i23thp# '03 Nzh%VM> 3[RpS"(!紅okT'qC~@Zk#5bاge8ǡ8WMJF54/PlG4e; F'@)v''GNyRTDG`qi86QEkW7xXvs.J-/v@[VY^ؤS  %Fs:u[$?EԴ6p8<"ȀW!M:%0X^B'r? 1X$6Kޔ.DS"@?3AAE:Bͭ2/Ĕb:2~c \ rx/jc_J ۏ? El|82ml#r4Z]ϡ@ފ|fBǴ#cݕKLt^`s0/Ot2f1YWxt^V`;~DK]eO'K?sAh4CbKklP+n{G<Clti,2F(*dj:c;;c» bN2,, [`A:;K#p.cY'. WyLg)gp!)n'cHx i6]{"`aJ#lEk5h=J3İ7,^4?[y6Vu N{FvKFUtkB}:+JJ7VgpZTn)9sW€R~ , L Eemg=U𔚴o^:s\RӦb_s\'f.'VدIx%%I}Dp/*aNЕdIS{"+g-Ђǻ< ēwT-pcLiqa.U7RʂҩU`fg[ڠeJ)$%Ҹu J%)v9+ ,A zJń]5cJ-=&7KȠGbi5(Ӯ.c\[ LY750b>?nRfg] gH;{-cTbF8F|gWk$wl 9 :U@Όw߇q$Oo8t~]0P@*81CS_zH .\ XNy3"0T~1Ҽi e? mdv0NFe}b!`J!)1k@g*2nz`YI–LI##8 ~lJ҆N&N*zwM 71AԜ,gA'lo%#ܤIk ?y/@&r[##3$QBSI"Թ;~6pSA鞀ӗҚxh5_wp'/Zn?n;j:ZGAhA Ђ%Ll]6ĥG(?W/zUoU7jjgB_UωWg E^1TPM\NIJoCmi^I![uO{r z҆@[ݾ-2㍎5pcmE{^W}ʜܳkӚ @ (1?= 9qmb{C)y\0/4P)vyW%aBSCǟ֬ALswS>P}d,Ex yyZzWvv]| G`iwUUvW3/6;$qgTG%A7)9N?]MTD>lKzhs׽="^\OJO'!_>P}בS' W]v1G`㾞)=Qb)ظ$)L]wމ/P  vk2l;b4Z.@q[7 a҅ ŜvΤWxKPx6}Ycq7@:+esCf>sET'{ c1-d,iV@Id)?Z8@I^C>ђᜢu_dW~?~Ouئg{nC^!F~^PTqX?[t3RB9 &ࢁn=',EW $S1ʰ/]5]'$I{4Q@JubfqVa9 2΀ײK \2WmvhVchbMHMG':Ϳ0uÇvD^1i>[CՃhR}bkt h\V՚JX`>]EH[G/s?Σg{Nj9^M[*PҵPQLsu_zEJDܕ /d9IZYJ"k!mzR`>ش, 2Қb|+ݏ;arм@"TyY<]ʑVt20[8MfAEE&ݤmle 4W^4Fz*$u|g{C6~};k>up Z(\e\%=z}5S/;Vq&8rH>}hsnc!$*^Tx-Xͷ%d~F]eEskJ]DvUMf %xWd ε)-J,wςqpu"C^>(v{nǪ1 ZS0ǵ.L-8wwlz~n$ISVw_wAN\آؚ5#H 4ިa)Mt2t)ݬʜʮE)<(_[ ^^1L2OweVㅠQ 1gp#DC(OEHj ,2>zKK݋#Hv, `$*Q2n I@q6Qo3#Rf(8ZjOUSbkr8p3aw) fo:W<8kTUR?x*%nD0d1i0R'R#%Q>Xe Yd؀U VH t_a;` ެ&sӡ{п 6\"M l;(ҸפatQޏtH*Ǻ蘮]so-V ,OU_;Z\*"PmYUy:5ʐtf\<13#%ᢗ8PV%zJfsrao\I8U|}mGGǝZ&h`1.@k/q-a9mؔ_}l[W3#yCt.vRR]#ORsg4\B&_8[=E䷝)Jq-t *wd}۝J1Ҋ[R= oɅ{+o,̤Xh+fag!oQŘ"{'CicTEzE@Kz5l/<d1 z_Π:ndM,x*ݚFYbBFĝ4'JC]]AuVr^pt.s7qw3:)Zx;u(Fu'i9,*GPlb Ȁ+`+*s}:"g.F}0i,-saG5l]M!@_B C#,modڰArOa8kXݶcAm<"gX(gJ nΗVgk6*iL^yrWWGAw8/wy*S^,l̵_R-"u(38)Pa>x(UgX.o}u7)&Дr}-o#)<=2ˌ2.L/UWDvv:ZHP5IYq:ǥO=oϗ@6>fğ,_м0c".Z vvuFĖ lL4Fi~D9a/MX$)RVk=WXl=a)4ڏ ^!9NQ`r)GS;؝8Vvצ".V8@J2"OJH P#&u~c_F>ЏB>tuX(!~$ݟ@򔛈q2Z#$ыj쏛936yӕV K JV9-=V_)jtZ{l-N|cA4t0nZ|~M'Cuji j~H3j骴(a| b+^|B96Wj^}dA4==:blf4F)Kz'aA?P@*Ŗ*Ā uK7R(@rs-q?)a^mJ'ʌw dQ3dB΍(IղRP=@v]+uޞhʢ$ҕrL!=MP# SjؚY/JQ`ŏ61ӐMLil꫺߲u/9X-ZA3+MW+gte'QccqOY1}c!3Zf e@NiY?釅"SfBT1M2ItZ_I (ʤLb΢Dd?7\szMWŜR5;gB`8l##"׌mڠF;El{qo$p3"x/C;\)#n{tkeKE Iw5Kst!g=y}\T!$%NT` U">XÂGY;msv 7 tRPYnJ2:r#&bzYG,l'D_~LP5 ĝ`R!^G{ܘR\~:?=8=Unw-|SmB2숸#0 ;"a鋀M3ҴSjspK2 PNO՚\*k"Szw*]7MYaa#S]>3[5Q`FV}ƞ6Jb HnG<aBڃM0$|ݡZ)]h ]ОP) waPe3,D^vg1~ۃ![VbԍqxvMQԺ}eqؓ~PI]]CN`Ni;^W !gع%n&r@"xjw6S{L}(̵$e{ `5 +Ӯ4߽8Ąٔ:XW7ǟbvKC=qZhn( VNj3iI k u~5ZVr!?g4Ɗ8~恧tÍGi.ƞ 8l̛CM$i ۞oƞ,i 抩2~~)z׹K=SR)nᨮ_q((tF8؅4k[#K`UHÏHV[j`B'pO3_e1 ;'m4]TKY^MAur>]Еo`ݢr,7ra ]Ny[QwNnګw Rx@ +0գ9H8)A2n!S*Doɗ` ^\4hvh$!C2{0 5H~W@~iIiN8sfu6h1y)F\w5Z%XWĈEUzjS䒄!}}K#dsR=6C3ǡ(Zo`QI)_E,F bSmRư8W3B؜xk+K>\^o'^ b#LldmQEֽ0TlqÅ _Efя E育KDO`9Wq2 Ќ㎂*`4zmgOXߴ]5.݈8:`5X&B(cA.:"T<:~*r~ ¦ߔT,E7߳B4D{|-]5C%U{![(M -@Ēb -5$3(팶O _*Q1l3T OĂCVQrGԱWꐣ`iiskd ˏR܅;PS\sAomNe50Xoi F12g;ۚtR}ZX.c'j'"~M:g_V8:0':cM:CV)0"\_%x@XqB}9Ot+:˅*?>,{҇x\Yx;y͝^2?Eǧ FtC_%JXLUk:tø(^zξާtd* /\>+Ou`jx,7ZFx]+=?0*Ab]91Mfyxe"Z&3S·`q2{1;z,]OZBlctśK~.Sn,ٺ{t|6uY'5[O r:A$ei ߑ7k.n( gl_&INd;22s6߂S$C6u#$ NFO֞Wx6ؗԊ$KU^]ˏNQnH?סuL)_v Āh-jK/Zy3. ~c<=l5hVnhq򧿎CCBd̴7< od锷%̟:W]bѠ`5= _(7}TVz\ e9\x>.?S͆l?K+uiPCFoqSJ/9Ҡʔ9ĶfqodJ㳣5~ 2ɋrahkG 硆ML!` 杤qeqvF/֣s E8gq)@9JɿL''PAց%Cm+jx4T;tձ~ `cD85vRRr #袬n;]HӉuj]ߗzB*1w.ğ.OD%&C/KA*umqGN$ E u(Co+I-?$Aod/`gfJZWkI_8g/RzJ\ui<pQT`Z 94q~ *!`W./eP]YQtAO,onay뎻\!AsixlfvcnmN6r}N82?.T({+cs{>y1SןBfIb ާM(*([  /Q83ʀWtv Udu?|AW6C7L2ƚ듞0,V̦1!dSxlLc!:Ꮼ|3b2x^S"Ned_\v1 \J񭲕0ޯA8ۯmzDh!f->$/G]^b@!ǞV?MH-ȵSo̼mFVPd154RPBmVv?__Aߩ~0u-RH级h~kw `~VZŋUٵezX_ʔ<ٳ 80Lj%a=vL,<V)gKy)c%{iHNHҹ3[IGu"oqm<I.?2 s2d&( bű,$5%DN …1f- Tx|W]]@'zL;R_$Hwd&Uk'+v m-'{]\5BPACV(*"Gػٌ1;ط3B #8#MxYF"&fmcy7{ת5"RrەR$^ 1OEO<~UR""\(l,c̚AVِ?.T\NLvzt^76Y&jNefK֕o$'|t-'Z^17 ǝEؿ8!4 |Gt|'\ġ)u} yMBe(=暦oQ+2r͘旡Ys (+Lx#q,X5!+gElH+wm(La+{}BL"蹾%@S1*I!a+:+?R8/ tW~~5>%odD 9'=v(uzOPHeEG⸱D=GJxfinR#|_˻+Ak!|5tۓ)s5e_ olL͸TέTI.ct#r+y܄Hmxh^~J^9uR _|rBNMç"Qq|m.!_=/ewg6d]]tIRU٤t2HzXjMo<0_R'!SZ*C%rqfy9 fIug32>1LHTܳ/וoH2F?`EVTx(1\ #ūbB]TjzS QSCx gwFsܒ34JVq $JOq\(ҷc|lGFϑGVe./-Z'㉳Ma~ m(~qdxG:X12{n<+ l>Vc\`ьp7 WHbIxd]E5@|2@{ΐwJ0$T_(Ŕ5*5 0DY3ˌ nR`_YPӞA* lQ6I+ L7]Ň~(RvFx=Z%O[oա2 K_ -m]sQE539_+P&ed>%jzMTކZ=}#h>J̭ɮ8#ݏgE"g7#!IRIXJi NEv1I~Z 縻Ccj I9_>iV (;bڀE^٪tfS0V6ָm-.Vz1fm9C=?j#}'QĽ޸Ȋo CC\vu>7Jh@بΖ T>YUhjF/ ~'J؛a@ɪc:hOIFs Er~9[wGYt9Уy[\}]P6籛SmUO"e7zl| ଑6菖s\:vWVD=ד3 )_o !.RcJUA-WM4Ÿ"Z{y.^x4DŽd_ ڏ.~1Fy\6@M D%62x}/Q8>߭}Hź ǹcM%ݴ-KJa9aӆ<i9q* 瀜JWepKBW neJ"r|τet9Tt}BԈX;&*lPM8R,⩝c>K}े!)~lSsh f:eE;&/z@,rx3#<?`fD(KۅG#~FUƩ DžHc6q.mԟM1 Fj#[#jP]6'YHc|qm"?W gN^ 3Kp3zױ- ҹ3`R )E&Toͨ\Cw6du'`p8X\ftTl)$Rix=Ke!WJ"D˵u^_J!Oo^n2ṱ[ɌJa K dz`R؞\f頜X)jpˤD( ,}̏1ljdU= `y ZPRi0dHAM׿-T| :>캩:*V&kc!XK"H*U2OKW񷤍k86tZ`}`@tt~UȴJgY03W,/z4?5f#18$%h];&kYGƈiC.΍e# #uk2JJ!+>i:! 5FT93^g6J 3 $[ @gz#e E)~S r]e^#:C[4S!x&}T z-1~;%"e(ڦ:z bv,aND\n}(`ȆAQpk03Ň;aWA쨆ōcai%[n[&7fn`9~ GB>+yry]_p-Lo=tryB= ,t&'_oUql@uJ7s/y}`(rXgMnMɎH; T^c!|;{KšT}oE'r1 h2c6i+ЁZG (ܜyo65j/NFp0~BG!נOkDs'1յ͗K7$MZatWx"G`=nŒC4' Vkesm7џo_Α6jЙW/FG/5ukjfu"zԘ"ݸt5M(7Aج{qхlT?Y}x;C-摰91vt{>Vy^K8A*D]xس"Ai/Riߗ UFXRB>4(1﷋k`U'X)lM?읃Έ&;2h iDVHb6lnABpd!zKz_xT>EKc2p*aݫ҄[#p9swݜ_r;CM > k'8+PY'{||Xeˑc~z1 qckT|kr-t2M7ʇzn&8f<0MK;H_])S47}PLô~?W~a#wm>Rʐ ;-EnXIKHpUfv,K/y DdY)ϩ@rhoW@1c_ fc::qMt bU<<oa[xquå"뢊b5Z fI = | ׍XSDE??*5I1hMgi@*8be*yS.MO\.xoz[%T3HS~Y+(m_!H ѕ})=-)Eِ¿h,$)DpdhX{i-#cO6=5]~xs6³cް^6;VclxفFgxSί)Rmg6ğke;Tln<%Lkscʗ֐ng2}p?B 'AIJ5R0/;b6ȤE1g"ŏwl\Z̒PMWG.$\DlnzyN,Cˎ`~1bf @?w=Xyu~ZhuBA5R^ʆ]H-=8_Lrͱzicǂ26&++dY2?B<`%}1yNź1]1;pPtw.K%x/W'<V࡭qPmNyRM=k4g+^;;ńeAL KèC;TɎ{U(sV-y̔>M}9[B1t\<58mݥԓL@H=z=M19K?kۜ fތ/BqL1s%l$1#iRc!ӡH6LYˉ^:gT~_Т0k߼7F|rW~;<0c~[_]4޷4,&H zd&?pe7>V@Kɵ{&ϵ!+cM0Rp-qvEߦ[lLe4;wnB^C`x8Kͦc& bP5fFRTRrAc_XAmڊZƀ҃ 5r;c #<_(@F wqluRF^$Pkrl]MV f-+C8N_3 ZKpI2V~`2d89`,D\tBYR %Ud8C5N)&HdO%[cq%xGw&(ٵp&_4'.!Sω)-̋(v{[kfE%VpUl7tuj[l8a4s5#= MȟA09[wG4s36 kH4=|"Hm,-l!F;EswvxUDk{:U-T,  89R}x%0-0 GFIQGmޕa;7KB0'1D= ~eu+7ߡ)-GQdi}'$Gɬ$+$X*D ;vzTbJJI-M"JJy!4Dw;X&{xT (? Wz*L1sd{ʥʾ~]{ =qߌ"AP>1~-s^Gnbor$ج, P:uԆb|1Yk}OVA <H2eJHWD#f K@N#:H)S"o?%JJu}D$@M!sDʳ::_#,g}P?1~u09 Ը{[ :9 V{'ސE=Qtic.R " 5";x<6*xAE2]Ļt^_qGȷi"QW|Yf=W@J5"/=\(z2G{uU3R0/:3Ts(ϐbj S~pΔHQ1/ف@.pqj3*o`}æ8|iBREto#^X㌫bTy3'I-LdJ8$odIMBY[ }rr.K`eXƱHɺe37% m&  yKhP X[Wz&|9}\M;A?$N]?NYLج?(".JHUe@9ZݏƳs|]Zfz¸kHAϪ&ϛ {'%uI:_~u2Þۿf-QXQ_[y^"!"t1Л1eo<ba8^ 4A3ڕ,z6&/[RlY8Fj=T_•:{?7'[ ӽ7m 5ƽ1#U'?{νr_)-?ULT?Wy gIJ΁u6[!s@u莲qAgn&yILDN(vZ Cp`~;?\Ld2}кEGԥjfYvSHg_/^\ ^}4=V7x@|t/:0^r;fRFلRV܄ͨ)+hC9:|sNf!】?pOj\BHt_&U >6A=}#3yu&ƅe`萙_Y3rߦq`wlcFfD5%A1 ,ƧI 6YtR0 孵8(vFq=@CUB'oj%^ӄ`(LSÚ.{V σ?W0bY!8<֖$fѥ"Iuy!:qհeK;} "Yھ,dRZ﯋ =Cs*/-cdD'%m.nZb瑷&e\ԣy?vOJ4cF]DG`FMᣵQHWu*O~苿h….+_'#k&qS_,%/u O)y.ܠPqQkO~L671 !|ݧ䣿6Xv=_$-f3au?,364LA>E]+]C<5ݓz$8WyPpkY{ I0/ZѦ̚?T< ^ +koײ1 S_!k𪒸"8bf=7F/_/7uSy| s]-oP?!i!ZT=>E <%HgL2.g,1"Xn|J@@E MV:a^k"p#D &dfqrPu._NpfQi>%e0$oq_9L#p]29z[n Dnq! 'BHu1^-Za5"֢K I>UdFrxfV}++5Mh]O%cl=H†M/YKt% @@ؾ.u; > 4Ukby,L~0R.q4y!ZS}>$O *Mo C,L?_aU]XS>^+?5B?nd^oA gij!5-J"$3!dt: ̥MdMG"_a`3^xPQ0a.ƫ# 7Z{%2fo#i(KÖ܅zv) \q!BSg|v=Awwc:]Co{Yb>[gIVgqPv-!νGM:Մ GB'̢"WYT2/2Z6MqYrc "ӆMliH{wguGu+Z t{)XTۍ,&}i:[uksX!gr~(W|}ߥZI ;;V=U9\o+u\Bܧ Z.oo:?R"Fv;upqȾ~5w<1rrGbϫ6~@գ7QcVvsRGyzS)+\$eeEFJ*tOB ֡f uYzE۷/ _\*fqEDV:#<Ο\ ^(0ZMt(mgCPh>}Z6Ç#oDf|i(31>ew2IΚ@Vz+:NḆgٝ9x.!1&%%0W#PUG&NRz.?fWVVAmLmoh"EИ!ɩ~<#-8olD CfK g8 FhTLુ9ۉkzIJIrQ&pf!Y\1dae%yP+uߋ.Nzb^ÕޗO4bʛ3ňoru H@YioYL/_suciD]k+m'IƤ5$|&WW;m4\9it U3Wg_1T+qG u2 CXNB%q9 N6 [?yjz]\"苿z1tL15|* Ͳ)tGde[c vzd 5n/N 'Yu%DnOGش[E3п]zY#{Pm*E'6Kn8R*7C~i 9Jt7'ѬNc7Z{#6#VX Jaw"W:ݑe6B=Mɹ ! ߣT<o@Ad.~BW붍vLvz6x׏&{EF6OvB_SJfS'g` lF@p}:ၗrɜ]0&26z$J0vz 45*|Xb|A]S J3'ԏ0bY2<.)3ق'/b+|>ƀ"54 MQ45S[#(4(TW_n73(As[fR!;O5}t[[~'d'lXpױ,/G{-35uӻ@|igieC.AغAj%ODs90tJ ^6kx7!ɜ4; Z.(&Ln ?kzg5 a{ ƳzUDξSݧ+zWpc4 Qn+oԤ2H%+pD19 wP~.| Dd/xpV-,@smHs88Ƒ89n?n[XxդvUDccg"uyz$Fwu`) \ 5y5~\w C1ZQ u)bҸe35U[JAޜok]XLM0)E [G8 9A2sފ!WT/Gouk^Ѡ ̃}󡇓/o^X!]v,3?Slq*y ](qR].#dʲጊi 1c}ހPH%Gez$mr+<>U~a,hoa8V6j܄yc{PZ< AwCTX|.^VPzwS 9$n}$wI1lxZeIF%6\VZ4ۦk*C1rW ln`lFp.g̎% kٝӔn~swiKD.\ Ng΁)]ͻvZ:85؃'D7 D^—.oh1rͯͺ#o~۴9.1U]Q$F$56ud7"äTNmdU{} 8пhX G񩅀TJt×Hq~ aTʭSvϐ* ,A9y3J]Ʋ ltK?Ӆw2lM3P@u iJN__THXMaX ]GDuPPUfU5lT[\r3:x WTHxYi/d"8Ć8EJs8n@; pL?H(ae~u/.-  T&3u%}&H  n\%b0Q~R\R`i!b]_ʒ=6_T ޱ0*tኲy\+Wn۸^n pǢpAlX2b` Exnw5Ne)so.ZuCq\~=hZbύɥ{cs;b1n Q9w5Ѩ 'X-F+_6nP!ذ0aΫxn Y B'Pc8~$`zR(8~~Iz*^BsC"J{5bytfsU0(8t~Tl[MGPwX~B1 "V Wև\/F2PLK9B1 'iŤ52KN (]R .0t\Ϻ` YPkt%5S&wّ0NjSGda>YT >`}ƑOɜvD lqEd#5ςJf'quV0Ö|NXlu5/sr,R#5ީlg/xg_H1~e.I0i1S/'@dKQQ rp~5 Ԝ;>&`)RIZep;}\'}[ qLJXȤ &oolw4cޑn(Oy+Ҿ] $MTw 0+ʺd:4Հ0{nj=C<t_(yNM%F3X)>Evմ awhQ QIK(]gk0OQPA[ĺ6hDs_hK Hgݷ[5p+:K{%]Gٚ #VZ Kf B徤g膩| 'Q9k#>=}CS6_vAKpivSes/! TNʕ_~%V0*J4a h)WZ;n*E~Fv[N9ƣ,d> .$ rm|ɭMšy!`y\Dvn,yA\ 3$䶥tg.[O0h9•%m^ ׌@o ˜ӊ_v}6iubIޜ\0)j!pE-) r ?ry߳C7|f.>GwZh+R?pӓ I OTeU[viXm /o9š.lͳ;=xqE%)vpoKg7} CP^(ٓOEV%$Ob+4{ ﳺMI^DVfH,+C#m3t匚B!όR:2BrTh~j01!XjPT"v qԆB&L\x#E&zdDV9 EfkZ-G"pL֝щ,O \tK7f*pð@^!8s;@wxXj6'w mmI jxcTG̢#';k^Hag{}lZ[LsbłoK`*o`ifrc`\(\hs6j3wA!7:>Ƨ|l݂h]+Q u]P <Vvu99sL[~6Yߩg#~nb:Krt-ВF{I\ =&b AL(⍌{@=3'4UwJaw70›>Ft"GʯK( ;[iݑE $lތ<(ὁD,Fԩ[K߫wxf?\G0O5q^a+t?\*]@Znu봌eGFU$~zSg8-腏eN rqah`p_Ҩxm w`vz ]oH{6|Z-}MFܩ^%FbL " Ob~O&յ+//ۿ& PJqU#v=W@8%C?WTNO 肍\yqVS"c' 6Fa?w4x{CKhh#{_<lvQ"դT6]VUK5/AX wz]،vHi]߳Pu6 xIUQs{r2]=!̦ ^s,4@}T¤5`j%zt" w&h8RA $>EήA3oѡV`QrZ$4C "ax1} 4 o].@Ϫ}YS*M Bվ<t@[')M`Ai3]?EZNPOٷo?AMZ,2n偎&Z( CH2Ƅo\ Nh#Kn 4k4Аtn_a~h ݎ[DyrA~vڣ4:];B9=ZQLt(k|lv@p‡z#Y٤cjfrY$`iP&Ŀ1bLuͼG9E"t뻕u:Qub^+$()$-q8ĒdR) =-'sA"L^S:p wu!"D #'ZI*#ϹVyoe3=Qݬ޹ȊL9mIhIi-]_Ŝt 騊` *t:«ǔϲ%C:}u R)c! 0d_w~<%Olkr"'^LXƟKE#'r k*ν\])iUq$o)sB$ 7* b5zȎd(/kCnm>v_;5KRT M<w~+:þb?A|XJK^O<2&CSGt ZsԮPijqkh^bfl$H$bVPE9xX J[+[eUʀAγJ[-uEUaJLoTG-]AQ"nȌu(-Là=U{w]k٦^ջbϵc˵3Hj'tD+ [ǭΫ9)k;lUPR>7Գmp!/Qg@AEPB84;42N2]џ#P;gݬV.ljGiS/ Kq'XSmSL5;zOKrҠT; 1sԳ^HWCgov@6m;,ۘIJt*f7{Vn.2JgG\%D\@rU?ӭGh {3k JOciho e]Um/?>v`}c4InjpA8s<(9Wr)\n-v]X ݄1mk$6n*sD|[wٗ( )tFi!q;3UHnBGbr'bBJTi{htykedtnG}I2M,Ex(A5F6T~bC|Bx]ŵdW},#G:UCg0S?Ekii/ܧU hLS$B-iy v&=t.$v2訁%++W5GN;V_d W c#V>^c& ϰ4᪐nOe}0w9 —ᘵ`$Tx?4/8Ng뺻}l^6; <\j~JƧ8f-GU4@WYVi㟟Y)<0`ynJ8ܾUNJ0%}cfS۟[O@H Pe!|HS+D=Y;L6g6ebT[A5~F~ $2Y ahJ@/($:UnB& qq8',&]qe/p {_܁Mv8IV*da$M/^UpuL^ۅbZ=ަCL3x'yD::>4S ?-b~ ؒ겳bW t,Qn4}\ITrE=N}s $֌j:.'V} X3Y1tszX]FN\y(\QLSٛ3 iXכnZp#k0V4;`<v(FU8M[u)5I (sПBT7k'g9k\UcӚog*(%A'Х䬐/BIs{8 ÅQX]n0BxUٽOYd&* f5D<-)TD޵ ex'嵭ǪYO@>=iѠQ{o@ `D1c* ޓK;r חz(x>eMftN{5Ld/$PKF%oq]F x gO|%p`f'7[o(HA@!E{sZ(ݹ%eJ>/g:sɩ @Ci}`z$EȢUpqg>V~KF 81mR\PPؒoπ11~c2>u<9 ULЧ+խ}SI}5xv!P".igfXVCVLf(;"M/Ξ])4.4\R=Î |lT*ɷŋjZs7O!05@o1(FkZE-ݰ%֪DJ'>KA)Af]<(C6{A!4mlJjpUrQ3Co?՛U NвJ rNg8#(fUr!icf],1ӣ3}]g3cH[.ߍ#2"idnڱn # 9Γ˾m, Ah#?C"3NB0 UNFKyYޣ \ij׺"oFd/ji[7kKR\RFМ7<[SwBLvdZVWOzŦj3[%x7"~wMV )T棇J~/mnwXdSqN됔s=\Yuʌ* LQ)8@5JxUYH#_i"4#IK <{cU|?96#v i֘@4S֦m~wyrphYݠʺ}"^iFex-t/Fɳv~Nܙ26ɹ4PyԚ6qQR2*kCL2niWW]?-ກ'hBdԱ-=L07Ɖ`& T@N5GrKJfHŎ';r ߪ#`s]՗iZ<ܮ1jk̸ʌ5-+RdC%D2u޸lЛ@~")j;ׄӋBýEAl뵈>J١"d{dVJ4=ڌIW(gZBXu3vS >aBΡo̼^=4b, =!}Y j|"W-\ eG/RMPmg^imeף_W w:tx `82qSklQtOO0+]iSB*"9 S {QNOKgB7LuDm$QI rE&=nwz;{]|%=OOkD2c<|Wb;'K ϸVmZ##S`G _I93s'tfrG_zU29 \JP5 LvK2 ĥg?VHs]z_7'(XTP0.tc`z4[yqrCeθ?R|Crt|XfGz'h fc3]^Cмh v,ܾ}ɢ)0%zLE Ti"a2𿵳 -\2)<ZBR8m8!2z/ n~ܡtMDB:_7+(wSZu,RlC*r!6%1p1dq:&) F5/ 05z_h@v[rԯSh7[{^Y4#lO'쒲?MeEvVky?&UI5JxnuPT>h?)ZvçSC&TKxKwJrKVz{J?<9DUqzN<ޅ&\4qzjJ@9UI W`1[?еdvHI6- wQK :^>H c:N7K244Z dT& pOsJߜ;ȅ|O?TjsN|-RlXT9{UC!,jw d_g| v4qTW1+3X? Z}}V<>(5{V*d頨kсX09I[BN"am,Z>H!yZyOI#[r$Q a-rJ!g2`q2OR>uJP5楩" pѫq6⿝1sI+V~d7_h`[P,ǥBL%)%͸']Z;tb炕bL>c4UT (" {>;dh\`,z_0w֬:[qG_zוL/'?7Bc Ցo=)lNg.C> zG U83GV^1D"q ztD_ @V52h[Z/A尭dqNUm1ybSy@f|[VX-Hm9U1c\;ŧtHZ,s~vmR*aS"l}Hm 2+OOJJ &SLKyjR\S8,N?8lWjW'l.U$u8m!Hp [)VG䲼>-|͞< (Ua쉨p5:蹂tȤDKϨOQc:7z KםQɊvپ-Pos_'B\;h(0A Tf/<,Hn`1H+y,_ @GѿU]HR7S NpnJ?̯Z7oVZa^ :X EfqKbjD KY- 5peji`'e\ g*:X:tWF6x*aPM'}FF/q\d aDcW إ03e|//au/R^ &hus*{0;M69d/z;9ϩF+m]-qfF> Y 83sovsV{+UV回ӣҜM ] 5Aw {$"Eqу^VYѱ5TmRm3޶q ?]l/T g}t'ޭ6N;t@T)٪G*^ t'F{r v'Zx  }{ǩPjyG`8ז'.b,## PzHb¨zFŤ"lQ-O7VEܔY(yA{kpV/FyJb#X^-~Sg]%bdCƃɼ |o>0s@%?,ˎcu`†6SjgX$4lFRn((Ճ@ 44>)\$VEQFg%h2-Ut+%z8/&8{E԰HxmNVrLN?!0\}^jKW=˪"Sk[zKV=8LQUbJ'++,-\mZ!?)Dgw@tY$A#vy>c[bi{|s[a w6^tXt%g*&!~Zin2,O ֎;>>7]r@_ J.g!lROӹj \; Dr[Ԃ|cl%uxܘ,"܊vY-f .P#,lsyA[2\Rf,‹#ܸiǻR1{,~bU%CZ] _# N*-׾M7^J߮\S&(G]0{O7',oM b@~;+N aXu1HZtCj^iF-կi50i358FG*| RBvzjIF5Ft5p.M:"Vd *me_ә=_uP[2'2^WhJ<S/8  sI7>%ivdqB{pd4.w+t?VObnSKU}3)(:KIoulH%-~QAL>PA?HX֫Aq1fUXmjrn#b% S0΁A/9秽XQ{gE~Pa0[f@#(_2(8{b2IE>Ʈ| _Jq1ΈQG]vjS0Mt( Dc}׻N[A-wǬT"W$*zҞ% SWu֞db|_$H`'Qػjd[E3,k-ax;n-o'Z c)ۃ7&Gu&D0]n~nӨ>skRl/j횞CM8N+N<آnԚo6q: $X-c5~̣)Aifn IJQ&wa7d᪚aR8$1h_שiozBopx8j UqFyTbm~폻fUH{VVHNJcD9b Iġ; ߁dr aMh rXJu" g O I@_z܇%ih(bV:G}<Ǧ(ccz;Pocc#4yNcD-NT5!Z`>9% _6q+7>FDhm@RczRdFSt-Tba^7;U'ݰCJ5N?3 %`>p9.tѝNrY`zf~cS,`<M]u8n?CiƁZٳDH/v@ 9m G*ieI::*m56|T*i(#2;_L_n-!\ H2 qi'0s?SXMo>GJu@n.?7KV\>Z^'!4@׻`i$vw ۗB4{="NZ௤+>2 >mȥ-<$'y-Aji YdQEcK!2 8=5E& g-q]3Kɨ63,ڦ7Qߌ7s9*L%kav{ɹoU\8+T9dDw}8Sƍ5.5%#|n~IFAg*hLy9aW32 3eq^ỌRFׅk3:,@)JJ'h] YUͫrv-X \FR}ctĠJGO;.ܷ4(fbQOd! Vy9!m⢿mEէSȹ)|"ں&_9x0#nK9V֫|3֗"RopX73P?vt5/gVxXs/fOY)orX?/ӛjє˦Yg|g7:fm V:籅_g0G[_#6rWbյEjЇZ-yGnWL4,<ڟeX=DɡLjxTa fa? x@^0K+JÜuއDMߚ1F2qY)i4A^\Ե].]"\| :Yίl:`<ڥb4QpH}%-qeߛ9%<>0H r`nzյl(@MR5XmAfH>%zi<7npm͂edvB>czt=3~(ƞsXe3߸ S*2skcqzLv&"'6zrJR0]irb?'1\s-*`xGjF+!:8,Wد)ܤ`]Ag ѡar4hN(t?W@@l_8$T}s#KxUjVٟU⢴-׆}fHGJDP#tVvv=[ma0_1wJw8Cz|\u_ МFAcېP \D>ЍEw,=ŪPJ);M6[aLvQ}ʉZgGk#}ǚi<GIMY9&.HgC3@) 4'L!٘1p [֓jadIMKva&pg/I\"O++z\^pX$ܘUw('^ fU> O`xe+H=E Q357 Cemvg<5 xg=J2G%Vrq+/Up}L>J9j.Ctyh>#boo4Q ʆca1?'4{wEYnztTw-g)zQK-WTeJhR7ja+D\7+G #, %ҭEϴt3yTxT8`Tb!1@;a[B]c: *3JZnOl~~` %v fo(-yښYE)gl˛Wue5ΓTChj#a|кQr@ E҆v &^|j%'=Bj$oFq|; (3֨SIO#`a/@ %efEOvS K>*UCMbkЕYhF#[ \oGFp%Y}Փ?qs`-17jIrak dRsG+z@'J|0ZEnh)#KaX>G,/:!5&ܳI?D@QA }j1e{gj e.1P{)N3}AE ٻ2!({!iTk;}EvcI&J2+`lRVr"ő1uّ$񃪂S Cc6~` }.xz Ṙ}{ynW{d=K]`b,)P~c/{PUOk!0]UԗMs808#\mdf<4(YT)82AHsr=3YrIYh^ 7v4_CE)antd:D;Jg-^laܺ 8DZ(&<n;h.!GnzGdKLb=0jUrRUͮB#jC[]P/ɋX+EV8rDZ HՍo炎%C7Rv$5W8{;䯦0V[!IwJJ.%0X8LcdWK/{~`uxvINšZ ΒK &I0}la(aw :6S끒ȃ~ GI lWMJ)W=ҨCOFg.!r[vbZ?[Ӕzbzq*EUӊdg?/ AR^I4EXQmd{޴w: dkw;sPc6~>Z;|"՝S]{S+Rx`i>S@b|𑽱ilV >ҁit9IX5Qu=Ƣd:16<ˊi"Q|relvŗ8gqA1;,˖dH=|UEa˸az2Űh_8p`}QҌdcI(40)#Q$Ql->asuuؔtC1bXMVo$^CPLyzrZU;ö]6 G:YavkY[5ퟖk\fLLE-ON4ѮUsmduI?T TkYE=̢.uUVW#!J$_)ꨩ+`~5]`:T9-:V2DSQ7#>.a9j(̼ʄWo¼mkou;Be) f8:2xN&*x@)TX J]H–XwyƓu,C49? go5a`C1?ΎWK#8‡Y6 S?IڌŏN]|jf3#1P7UyM8 'B?ΚZ dZpٞh0LBNpuM>lۜ#޼ha~N5 vev @6 3I?hqrFI7r7Œn*NJ%I Ay9p䖦׊m#'1WsTߛev Ŀ$D񰝓[{ ̨qQ\. G`)Z>{ob`~[Ńpj̈́=@pR ;&7{ܬ̟fk 凞R:F& 9TpighJWO6&KhۈeH$F xg`_ *pVtJ٢8#mwA[YQGžUn{ע ӂ%7tn9UI#%3|}n91?$NGnE驆c| 4H6uhES7Yʘw&ܶj9Cz&7,k7 US(t3٫E f-s=. |h5> XNZuQRrW3- ]>)5oVRlaVR\ݮs) { ՞[gWV\qzCN~l D}fLc|MQh\2k?6JNBF .JZXx('KbƔs8^$pPs ||kT .Իmz:-P arnI1bE/nTVrxGi<5 ^1*h/qWDyv>}bNd-u&/TS-z2$X=;i `ּ\40 g>[DPkRi5Μ]|Ypm^OɘY/-C8ɗb\8qUJp:$3og\s@WdReTW55a6dQZT+Y簼 IG YU*Amty,o{DZ EӑJ‘v O#ϟ_G _ )`I֐CijI)`. C5qG[eGPHpx˘UZ.aJ;VO#(Nk* p>mҐʍA4.Q#jk:-TwU~]W I@j7~CnM7˓=O[|?.${'$[d:K;@9qƸ^S>U:ll˪}%sI.t,E\1C<.CB i9eݻ!X]psD+XN2kA_fN$V?}(L&u?p˨&zDרTň :.pK&#"+^x\Ō^\Ylpa6kMz63d~_f?Ks$$y^ 1s ހeSUk7.D/fhv3Đn8)^L܉Pb]JOn〾 (-9>)sY%fFP$˘;/fd{7WM)J&ʘܕЂg`$kX4x9TZ72} /[K%N\EE|$@Iծ@mbje-=6`Q PJS0t?(Y on-Ї3V1%LW4~3Sה^IXЅg?E96kTvaң$/cr_? ]'ߥ_(V1mLo&Frz],1 w%$8S#wu:8NLzN}NKE@ai^S@:|)GCM@fNk8t[|հӭ 8;L(i1|.,~8TD$v,Cy})}5 <$F]Ni$~t7yr:IeVplEf . - KU*_%0JE⤗fHǿTFʔ$а@(*?M*8o%Jrل8;)~l&i<61 92k@~đN\Jk?AfK65c>}},FJtrGsv~#nc3Gxyd\[UƷ~Fglw ֐|"\qΪDĂto]CrWoA_MO=@ia_.Z8&;3ʃ *ba3tqHWR&DXZB098sg>|mcJۥ$֭//ugyBkᤏy ?:"n'B}%ihXj4tjQ۫Sumd̟}Rۀ"-D,<)Z(ՏV mya1VW]#-Q|C^iǕv"XH`A<-[$h"trx5ʮ&R5LlǩaI{ݺhh9/*i0ԀǼrDŭB9;I$AݝnSDp^7|JiZI/d85Hi&7s^Be9*m66%,N{=?"J8U.n-vNU]}36ws!p׸rۧ8}S.4C,",Μjӡ5ѫ=ICppCfdA''1=SLP?9L<WC >%tKd|m潜 \lě{Xb`;6q[Ą8V.?k5'eݧ<\B<ޓ*[Eɗ% R+Vyb=ԇq9ufD5ԁyuA\\ƿH] 2jbAQ% O+|pۻ$\'J԰b fp6wy?)Og:$ei~(d~Wy5Z0 ۗ[ƥbTUiFA; J`FOEY{k%C!9 ܿ𤧧p@Pߍ6S zj UjQ$ABzvU;5Qt*k+M>&*`!<~YNts\f=L.ڷ3A.˥pM ж|#tPӣ $|ŵ.JY'ajUyqrg)CTLE7DM.G9W(Z<wy{8Ru-CɪAOj2fwG\,x#D_-(B_cTVTWIDcḘ[$,lˀaY {AWˀj"iJ)13úg)p#څrnLf$ \J*X#q%rɬyjGr+6Ood#$g/z;T#LDjA"?Lͭ5T]XF5ۢ8 suE%RhGq"M[EaM9%N8[53[w/[M ʕC;?섘7.iFkCvTS npX yMXǃ$f'a],A9C~lܑFn$J%WUf`TW1N Ɉ@92sRyg8HE>~ f-&9F't YF0QYEO8 q ,F 7FpP%wj[L$lT7fz.b|G+T۩4[~M_'0qk"{sQ{h~ sʚ1[`#lK=EɞAXjKxߡJI#\~$ޝƻ`xt)`Bz@H)xOPK1H_Ӎ;wyf! 0&$'i-PAOW1Q"#_E@%IDU̘JBYCH@W0EBq_jO:5 .R"Ƃ8{Mptq jC P`^ы ~ߔhIJji/bj}܍m63ŲtK=Y;6glP+Vl'{_jJ~iq>+z F:NJ!H> LiN5\ɏT |[V\0xrd9MW)IweŌ jgV-s/ ^0@IVc Wi@ǓO % IIW2X^5MCo_9yRl 1w@"`7  kot_VTgRRe=\CZrbu3|FanL17į._6T*~_rҜ2^+1FFJR=uC<{-I*U6 Xdc0j%Urb+1U?_FWSs!g;ZcP;bێR`upOD|W0b;8A%C+9Rz]~N̅ ܇}dica0$?'()t'47܈z?zPv_ƪ)JgِKygDSFI@P`?-Nv-Ʒㄈd6k祋"r[Tlӧsvҏv2_] wWn,݈P}zJ0<\"^sG1tnj| v8΋-I rԓ7𩪒[bs L%1 .8<.|I#q,^O笠pcibڷ+}9޾XR$֟zDnlIDy щʌX-A , y,gf' `::Z_`]/Q/&܇_%4"t7C"XbtaO5,'ƛ6e'g^Sęs9 O +ZQZX WAږHHKw۽N6kT N .(S49嗹:Fb>jښ~xw[[#Ƨq-}gB8Y~*>~ϮoXі_ap6DͩJ#/SF lng}$'i,~U~Ny|s_Pr(@Gb"Zڨp\zRksS*N8q\Ʌ5qjHe5<$0;ts |KzY*p0+(`-o60OmUÆ7zkWe9A!6pLGZ.r[fA(=Y 7Uy0ǽ]r/Ý͘+]px u#dOqT; |q`Y\JKx v?؟^8{7XwTe iIٓikkNpE{?8vrx灢˗&z#0= LA%]>xI]?=͠![0^͖f52H g8#KPl8?f[5UK(+-aKڰ,[#͊aS 2 IDnɠlЀ]Ȑ&xѨN$Oݧu'堏ޭd3l5BK5u׵ ÔpW-w@kA{Rׅ@U=GbE 1U:|L)2I Λ:V.m6{ƫ!w!Z-VEJ3e*›Y|0%>rHBn欯@nhoI]Ug>+R 7fg))ze^.Ӧ@P/ȨЬ;*m1ȈFq!r_Y:9 _tk|"Zev{rESO)R`c@D p4>pҧ44r OB|)tZGl5S^|"E<H5#6~OS:W?R?d Y\/ȣ(y,$r=}OmLM=Firl82&|[ Gmv:a[Svj, 'jJ/,c"2/ {D?7TX_{7tmE)va;' ,%;nIL-1?5"@= `wOA^eNH%1dӃB[>uVrH.yDHMR "LN, *+:~5hHyMqQ/<ڦnܯy3aDžl8Y>Ŗp7YCһm[C=́#W7]! ] 9yQah{8(h^} yޚ'\jVů^ם~Ս-|S:DBmA=]RZWiB-9Ur)Q$wΫGt`3?29A4\>2%SR׃9+H+T}t{[&GQfn/g9DBMh):ܗ|3oȤNʶ2=6Ȳe0GO*[(Ӱdg@/@ %Ml7 b}^65 Fdk`զx:!-=~w0qM2p6e8×KiO:A;VFX؊-^Oz\_o'$TCa( 9zTMs闎gUKTFFg8Y9{ L<rPc~οr9كAzsW>-T~S?tduݐe]Qcs 5#P$=1dC:F"vFWLS5<Kko USdOqE2ce=~ԨK*CVLZV?M!!G2)\ZH):uXsSJ剃2pt|S #D=tΆ۲q!%}\*}!6zK[GCtl7  o6SdRXB 7DkQG&`F Zkf<ﯞ2^,wZU]>&R%i>!#Ń3|O.yN\<`+{jToLrn"Ąɭ  HǾ; ڌ ^pd1ߤkʗ%_^fcꩠ|ߠC sjMJ+য়F[~6 Y|iCNQ72 :E^nD"aЀ6w bgAw2?dBT 0>:j=&#cÍ>^0ҍJ/ŞJ>~{j@woZ jߣ9|{H4_t1-m &d[1]S/+dNm$Q 8^f+D'KeAbj0( kGO@C#g Q~LM~)p֍':!/T 3$@rB`sb,1>͸xu(df8UJiAq{?hda8M˟v4ĆlIB'Rb'A"R񴜗]U "~LOPP(v]|B؁o(_ d2X9aCPʪoUg,$#d.VGuK_poG$ا4-HfYT䄣Ds}L+TCc;чCM/`ȍ7f `l ݜw%2,-\ӞK4YTOJ n cH&&YZV=d l,:ɎlNESM)0; 0%ҭ豐}ZPPMA?ZJ+g8i]oS24u+wcqcFKvΆw-iCࢮ(~28ppi %zf^Np'>\1nv߮I8]Of=q5V2|9O `QE>f yVkzf|L ǚDwi z5=ҖGzkXHG`mCP!n6l-= X5`T;lu<>Z}1ΰ)>nbuIɟԃxF~r žao*55',zTNAVT/v R6=txQ&+6t+T5vrv1%5jqZ*m=๕VBQƛ rRؾ``H@٠Qj (z0zǿGUf#IPY.%tU1O3=)5L#lCAK4拦pc3}AҊ uEeFp |~a2a(b m{b+$f^5,~t?{ʭ*&+0*ynS\R4MJ3[}3%`D-sOO]c G^L?*tZV60> ?4y-Fe听.favIznb-.,;阌0dv[z]әНĖ\3vr(Gy*T[QY-YM.r*~`uwU?yW"5g;(Fx:|}} ;lٱDfhr!e˟:f44~5`K$'6: '`&aq1<=u*p9@mS4VkӪd3H[l@cPCRjbX|Q1Ȳ.C?^JG$ -%~YL*փ,aCŭg: %QVV0̬v ܡt}G')Ӽby.E8؁ItSߐAJ[?7Q^?W#{8E?#nu V[CUv73RtK |x<<⪄EQ=*yx6Nˊ&XG?bbθ7bM+ !*y֦gkbJ+~ `[zi9A5r'F'p=FhC0fOCTN<(oeflܖ- YY Ԕ}9YF9 L5#p%ڀ!NβnXv; /e1-[ٴhh\M݊ŽqG: kJ+-[mCNN`Wۯ-4X5a\>Վyq/ GO3t %4`&&oX{GmEҹq/3t h Phan (?b}?OK?I2+d$M&n.%? iDwqi: s[Frf3U sEy?BS&Qx;G1N@PV!!qXa@+C>,?]<ӶF52@0G, F`$$`ձHu9ç$K4 -bpb@!l7UB-(H!9G~)[\;'{?$ZXP8rUwIV\5Ņm7l%,^w\rcyѕH;l(Gة ˺w_(,>:<3!YdN*U}"![dA0齏YAxT®I,a.V56h8XLnϨd6MN BB?㨞_ג5 Q2U+xͲ739`|XyYlOt|F4ZRy1hY[{ɿu{Ķ382'vh|\i3`M$#$MhRHǖ߻/pںNMOP]{%xtjsJ2 <"]/rd@Jڕqy8SSRjHV9'$1*uo.LAqвdѭEj&oYAvu^ԞPg'c8WU [ zM b+ph)WM>Dnڕ7 B2ָT FݕQ݇'E-|KM^#;dȵC { s}_Rsè#Q_aȫnT]`Gx/73A$[ vJ/wzOV+dpVhKB.4$8N9@|[!әCH" \CؼLiE\W!"ei@k[r1րkU5rѢ:_x%i;~+kUPgPih#0KM\sّ!3W@̪]TG/xs._vRyycD<>\Az&GA"q|z2vX\Wf\K~JP ?!;~2;h 4igG*Qg{Hr!^\&qɼ7UDi9\m_/΂\+Rp3ic.1Zִk .d*x>eVD ]&e&\z෗%(s,lHtQ 9OOGGe5eԃc5,ZV~ދΗ(Z5sfl0Kr&!Im1]O~ EX[EՉ4!44TY7;Í89Cuh2&Y1JˑXICV_neW8S$~ֳA&n*ީMݾ {'v jd"3(cjX~tXCy槀˂ "W#rasyFs?MJ}tkSU3mI}r]|YWM+Ͼrqܦs+TqPŅH\dwM**.}ԀfZׄנQ@HiB͈?YȎ^gMUHI8R(_F3 w[y7P7Рm#5;N7Zzͭ@'E}"A@N/ גan/ӥX#zMxM@2;E& t'W&[1E>DFVYŒW*2uG঎]%?[r ͅMJRBo{7Z萡SJSخ;kT`FLY+2*WwX5V%E9B}6\WbE≥}ߣ ħ@ E[ 54:ta§z &Jxؕ#YE$t/() &G-+LuƓ0OjP 0ζ sZq>*MA4}DmN5.o2uxRך *mۖwtYVv8;(#5bLa0Y^ \@8XH(0 (Y/-١{TycTiNf JOșH>k:>ʯ> LFspY'r$hyӒy<[-X4x1wk]$ŬY"5۹)U'Rë~@cOM+#QgH푐Z3Y0@Zu }PDNe !xc %)MY-l}?_nPh%8~6?ܺiIm3cp);?lX T*1d+2&&Az'Z9IȀ͋fB\;jB"Q&f5cuM27/P~jVo/aH\}8?2 wN{5פhfGPA(ȎM%^ct r$[j^_^P?; ?\`gڝWxB (,CٽS>-׽ 4'?]&֙-\?o ݕZw]wF/GLj0=/߇r5OZؠ>R/>(ކv4y_`f,QQq 9V,}!)mp@{}aj/)[yq[6;ִ5y uMZ!uOkŽ*t#P;$hx4CbRӫ|F:#-ߴUWiһȩ"T?$÷kE `|qM**Ze=٭mfNјxNhN| ZE%E[K曼E)8'加k"js\},;{_x6[$\Dѡe%{ڮc)KV7 >[RG]_dPlAW\[hJ/' ˤ[3Jڷ].Lߚ,x'+_4;Y?8)|{ b-?YvɘN|yc O,73_CXԺ#Lܛ`2>۳ka. e<@BH2]]d*}h!^;$ƉfIRvfW_!wbexJM\"hIqL0 EVth>f4n}'Nt8'.TWPJH |t-5qk'ny- QM(rT`wxG@>eB'`1eXl:vVլ*G/AHZ} yP҉ **Bj0b >q&_?W$nQhЩI4dPhpJD<;[1PƸ~ܰY5eg9 ?`zQE. sn֊.g 8IQJD>NJz5԰EȬ*m7,_U|_@?PuOel\>c?ASu"7e/qa NQ \Dr YR VƚZ6ʲFͶm' _cXdX  ]cYy-1yU+#<[Ǯ{7dkY2CqccU^x1 Rאay͡ k%۩]z9vU0z6+{f=􅯰sYw,fz#M~!/=h\^Lr 'c.j[6?,U8AUO};)!beGj'_feK7?!S=hUq%jX(6 J#ĩX՗]v*ZPp!> =:Tyƽ7b$ "KG*D?g(V}pvuC cŖ2My!s2sEH -AӪC^#?1 k"П$tl~w@ZH Vr'1%)0 4([׀4iQ?ۉiM:NO@z&ŽJDݴ5TFWs}“MC)NkÝ$&IJ^]MJXnPs2^t๱rjRb`M8m)W-lgX.mBI7~ra;f u\"/AMB,IQ t߻zJp„*)R/?\XߚB?CntIzz#/l?r &VދP8G(6}< sDYDk`)_n=ͩmsmL H#蚢'Hg7ǝ?Y\f*'E#MC;4̀*tmgXp7w~0L$6׎K#$).]%Z~Ü;@sY48U4biV( tC((Ҝ(EUڴW iLtg8UZu\o5Oc!8;w ,/a(Y=CMC6Gk$SV\jBlH+j%@hovV&]g?wp-O K-{,)we3ȞzYx;vN't=}9OgIE@BQsn2-]HONR1P4wUA᫥r]LFf&T($]HAyn/=vtx40P jk*h#%SA .Kn~f-.)6hLjغ]vpr#k.5.;OߔLjv@'Pi8:@FO2zSJ]F@1IR~_1iNPeinw$jb+}BxZ]h)kFqKb16 C2a_B uA Z[tHt K zO휷(j> +X#kY|W¶F1BU3S"_j d-5mr8U9}1<\WRwxQϦaM.<BO&*GkMt*Q]) lrPj[`]ٌIV)KK+q$ ֒ZɶN옎\q8RVcR6AiG2 >r )̏uV%(`z!D2ݮy Þ׀頹@]:8c|2G?ij~츦Hѹy8^}Z@`@ɽ ae4 )4_y!C,tp,=sQc>xE,%,;M\Y Znl$c9-?iLp7~ymp D7 Ӛ! 85SB. M=YްBB|VH!OZ&@6cd$Z=rLln-c;k8'g|^ _@R}flF^ guH.ZOɑ)F„ *-γ:dND)lY g8'@S{1@Sv^# LQsnŁdt'"OS8~Uå0s(@QZ:~u/LA4'YgZy:x L:A W̆}DR|Ulb pgo^۪kdx6 Ɔ[7֖:ѧN= P\VJM"1JV4.͟;#| 'ٗARՅ=\b_K p2jn6B~Q*n]y `;Uzzjcd%5+펹m$2  U*wଯQS{oE)Hږ3da;tdwFEMh"n9׸flTE-Wvs*G|Ұ4MƦ؀tڻ^G&'_w5mmUTء3@|^+zRN1]]J v, H,_S LELfOLːW=\z&npǞz,jJoipT #fTUW3v'Aa' >I#3 m}F|:*i0%·L Ge$nV4˨^DwyנćVǀ[U+Dࢻxpj~iMǰ/"Hi FHAM$n˞p6ɈtQz4_fRbcW곢: ܚ?jwDHmZn 䂎Rd:O7%!B5IISYm6TVk Zd";Jx|x鲷[#G6[z%z.Ҋ i2`)׌N>rxZKZ{~|k аqi|Ƕ|q6duCUrr %@W`҇n݌+BhDvFޅaL]NY#٪iN2oi`< *!hb%M꺰"oN{62tMiZ/S;Fkp*'r\4>lH{MdcjvlCjoa ##OP=󤤇}!۬D1lHjcSMoRy$%{l$CT&kF{!׬[(|5CG>罥o]vor"7Kui2GOf-FqqdJEvh\O @5OҬzi_k(%N_ uJ6kbbVrL|XQ#.0m[5lO!wFkQHs+3-֠B}!Æ+wβAM Ǹ2װգC鄜%e 9oI"uqc.y=Vv?3m"CVw6hp[ ^yP5p.o؜JP oU-{*H›Q>_|И;rvHvS-DF׿@WH:ji\P &/"a^د`uKVϹhV@+[pUh*BnWQO,;!`eL͵Bj8p^nbE $pЈLL8^SGyw;tQfv+ pG%gݯtr: ZJpxJۗys։wE kᆜ1UkbfvSGΘI`~Nj}X7y&#_չ ~T"0HQ٧I<\IB9刞li$%ED1&tvvq˟4 \]AC8ُ+:L|-~#q;\?DP.dZI?m0";oeז YP!jx k±aH@@H8zI3W `z#&`W٫|s@.Tעt=\1</Ӕƶ>cQ\X$a/NiX6R4/>%4RG'_N]*מ1a }Yxm25//(3 "\NBm7myG=wLLa&? ΃(!(M9߼`q ^7+R@eYGѵ i9kc4˗M{W :?-2glu8괌y uj)Oɰ6ZZ&)s!OVqQFYß$7j7PCd,$4UmȗAU#&)YjhX?e v[ UgQ+'8?v@:zhlv5/t =B|zh' LXBhiݼD%n?_Ԙ+61'PVSl)2}/.f&4!@:2u#XBF|s0bZq}KIIԢ۶k7R8Yn<=iEz!ʃHؘ.~Wo|ɯX1*@h nCQ`;b̜ucʄvk]e>TY&dcݴs X>րyOH+JJphs뜲'xLoPF%^Ͻ~^ 3_"ܺ,@^SRf;2b-kb19uXMZpzG2O|.-OVڮW'sƑ9SXV}Sˑ Sl̡eP{M7*PR6ŽZu2# mvYǣ0  룞g394%K$ b8 :.O9&w!Ȼ'{:ç`FhNqikOX.z鄪2 jkur!㬬,օM`S Uje&Oq axC{%?NZˏ85P3ϙ Gb#颼S ,`W&Qmf9IdoU)(CȤGVT4ƭV]IVLjfˈ+X RE`b;mQ3M&z`#*aPƇYx~T "~4:z֋Y4śgmӥJ 3Qy%kȀŲ41hi_&^g]󹨆7G{zּ Y>k"5e)Ҧ=!IV6at3vHԃto0>Bl#5g ц(sAH&{M:`a;wX!< W3NDhlz$L*Ml(0q2p[Ye:SVt$BUt/w&FߩG5("pǷڱ^IP\#S%@y{%G6U[&>ɏZB0׶=} d74jMcB;i1Yl"0d'71igQ8@a&;("$JO$˥j y]8+/֯yW)ܧ;/ fBCsk*S6Gj_yҡp ^wl& )YQ8j}ȅ8B#v?+^*A$8=8wVWSvst_G;c7xi x tcJ2|:f` R`.h#5.tn&?\>1„.agpĂ)% F68]a%{k~& y1"NFya79?>LIvyP&&P݂5Ŋ/E[)μEy˲" ѡ 1sZãQ #G#22TmYRfQ= X-"RټL;bA 5,9CnS-6˻;i6+D 5ʨ#e!} eJQݍ){픆&4O](2n7imm+xb0y겝ʬà79d" ٓ"F10y Q.L{504󟆙6̄nͅ!aNqj@N/V 듗g"3~q[ #\XZ࿵"giK@͘Z/z;34:fSij*~6Z+xx#8O6}D@v7ELsxq$ EaƸS =NWMjPɕȪ&+(]V<9H.q?:IJFds7Ўf0w&Ҫ/a|/iF8!@ k3)S(&_>!'&]=|o)Tܜ=KŵP_jZhVLe7 ʣ~9ߚ/G,h 8}$vny (,@I1?zhcŕ݅Asa*ilo^* PaQ5T;tGیG4@nuvu}#*;GJ;:́Tw,(FFQ1`ag?qvha0*3 :Ѕ>RI |1`U7E+YsSۈq$LjM(9_j&T"5pݽ2CVuPG s!ySbLHA.a~s/iPq3W'8Y+bueStֆh.d6-xP1}V K1r79GJhA5qCr OGe;ږ''e Ȯ":+Z`fP`f/BB4{2$~>dQfPKI 霕z) |жﵓ^lO&4^6@ܔnꭟeGy|$闻{OyJ=iTB|N=n6(V:|]!>@w~ 2F7~87KFs@e m\+DJChܡgHvǥwȘh,pܭJqR.c q"Ϸ3Ҁ# q-`L1:EAv l9UMoM3'崫 p jfBϩas{5mB*gm"ؠh[kxkcQ so8fQyM}CN kWܡYdtL .yWy r&-A&Nk7ef+VZ.̊}D0Op>B5nLԼQ$$#(!ٽcc{J3h[l,Lg#,jlg!9Lc6Klm鷞^ ڼ"+ f6:M_|)溛kqcZsՆMۗ')lXɶKO+]-'[H!dR2*IPZ*iYXc0-#y7՟S^^{*BO}*ϴRvzh w9>ɑφ)<{uM 7h۔^K 4 o GK9͸V S:xĹli"*ɯ&;|"* 8ƛQ@,r ʴ~Oo.?^rAthf;d擘16:9v9B(%iG`vW g!z.??'X{Cp111dce1pZ$qΖAQ/R/A lud4J{yZJUBhW4_=Mۑ-u{tjo rL^tV8G .7\ŢM8n@|-kݹ,mE<줈p0b`òD}T'nZ!xh(= 6›_RI*vBڱ)VHjF,qw_( H#{_>ִ::xrJM :=? 7ɒ0C!xi8> Z^Ƹ[/Й/v 3r7YlXJ?PhV@*^Ѡ6k(G^7jq C{##M%DFHedzw4Tf;t$h:T}hl(s]&.qK8ezȐG[Ys2e-#jXe (VvD+0T*O9Y\ 5RvXBԗ>^h /0dfFMI3Əu>㚟4o^X6\ V NcWUc NV})Uo]NŋOE7K kjPrPs1 N:#Dҥn5$ʯ#E깲 얓AR .&^WܑpZ0:l[֭1 r>fF6QVTű3蜯n%M{^?;:.jŸG̻\nQJEeӫƧ!=@&x\(Klh,~h (iőEt=n1pD-3ʪ^Cv FI2埘m_ސ ^\ 6 qՔ ԼAGUāWs4(zg;#scI.Tjj0Op+92bsMGG6w_xk-j5~24hXMDT9z#._P2mJJ}$Z*$?;uU~Q>Cj B#ݬ2͜wtfv2Ƈ4Il-İn쎏8LfϚR 7"A BxYXsF-11 R~jaۈh$pwT[X|QAWUsfr <<en6hw-Uwn6R:cٿbZyj&:D˽ڹuo<†61-;f۵u`~WL5В .o Y+zTH֕uza/ HN>A;wK`7yV}4@Ĺ_YjR?_ZW5hAhm~Z5joX6QNƈu"@0 |ܠzqXx0sDRS--sJ{ #e6q$;xjx/3 {7ŭۮDnf~p\uf3~kW2|d%rcepl nyT8]w8S `#@&ZG<$]uA*OQ+b߷ϲn4U&˝T]ׅpG$vQ7EVǕRF,yOpd9v%gj1O?j6]4IT2(cEVh5(m54XÍnO|`|#`IQk:%ZskpRB%8d8O=Z0i%"Nxٕ|ߑ x5SOyg G ҿ%F`爥1.:S2<вbp̬z(cO:+usL ,OU852`|'OXҘi&Ho& ϸI?Ŝ,}nbɂBV.u>GXWE🚷G7M!.#>X/SVw˵89pNB )C7SDGTxAGA!u!- PRGVL!%}̘2cyc]8l ʠ3u,Gx%Y0ɵہ#[bb& ]$`|- 54)khȊcI X;؅5!C_T߀k aN GX)X|7gDGO/<I80G{ZU]c|9G'l/20+.N)Q3pYoIZx)ї]SU\+o]&5# K5w4W?7 2D{& j̀^]dzS?z}qP'BT_gu"2Ep^F(+_j#H{^ ]35\HWK2GxN,=Z,W#rZrβ܇J&Q^$φU[fJ, -˓hd{ߒ 3vo h k!p^ܶ/o9LpyYxH|ǺsFm4Y.l oY7ߴt{!g̲Iv02WxgC hJ7/  oEPd#oYK_XG? qGT["yO4ݫضh]A{9#:od n$Qa&BǤM(7 8hEScxϐ2xgJWV5ȫ:T(|:ft*>pQCBb}m]F\n^>dm."YԪ2,!T4@UGvţfװZ Asڴj牞iy,b.*7/ V-qƦiQ:ro2Pnvw)_GHs^^97qkydixB9tʀW4>͘]a[tiydߌaA p䂡.#: fwGh1‡%ŶuDVϧk4[m@.{w%LrTI 2\_oG t ӹkPؽ$@6OO$ڋކ5[3kIflC7*N*u~ac"/&%]5;4G&exEǬ($ 9ܺW˶ _ߵ9N>\n0_)/ݨ[Ů><؟?.d^:&[I;(@}Ei;Db~)X6FsUWeh|デ]lʤՀ Y=\ |5I,PJoe_<GM o@~Ts6fz &gJL2]S"JmL5hJDz"sK,k92w1*q(م3\M1`ճŢ&ֻEID. \I`˄ַ pȈaO6yϩ:&ٖ#KTlc/Cm{&F,r%,t팇 s2M쒒q\H~ ,K5TH!3jtO4xſ&}2 bIeTiV)2-ft|O$Nw?ogcO+c.D.Կ @w׍>Atev:uFk#:qQ JE8)GutA|je{Z̠ <9+|HkMaBC>Zb,-䜉A z(v.yeoCxCwEw5"%7>+K&FTvgdZYҗnx:CA\IlD ld7Up/Y;$(@@*^Ry" MF4D!;Q?on)=#;%LPTN^wQoxYnIЦTG! 2* `]Eʻ/,BOF|X4%Gmr0>d׳j1%s - Qݢqdg oc_k{R-[0 t\`PJ`>KlU:̜ &Dwj8 >}aOkȨF 4?j=/M.)M~_^yU6&xVy&I0.1 =sO hF!ZDO6q%[uxqP}FE,l5' N}p/޺U\Ta0ۦ}-riGK?}?T~/CUw)[8Hi2`VVғ]"#aV獨FѨ'<{(&Y8^!YYB2H]XA,!o{,A*O9T|ާ)M߳oz6f)-t^"v[ 2[B$B6ڷ-̥߃$G^gVx=Q Cy@v-Sΰ,i/Qm1]sUBli+0];Noh']/߻Du=!uX-F.ߣ@> 7˚m,vCu$p@"#yi2d޹ilgw; U^7VPjc, %fhD`69$F=G`>I*NsTy HM1 5A̾~«Α=YWJ$}=ιV Y4W(3}Q}rDۨU B?ac#b+>krp4"/!>ꎭf乞Nd߷*y=wnBⰜ϶ MN+./msbTvڂe&6#Il`֍o(|P@$A9.k s^()?&eyqiICäH' xuu;/ Q؂P1&E4p>:P^,V67f=0zHA#AC|u#<#n:֗i9P« 7[iiLN [y4@(bᷫPWZҿ14Xr`2eIQjLL$EŌxU/_ ^,ڳ#r4yO~v8<+Mj5>KBB *1r4(d5{%\Y}.&.sxck &!d,`@B;2sy7@ѡ߶:f̀pB|[q9Riq10 oUӯ}!:UӖLQsT< ?8j5߁eI1u$Ԋ5i©'>zw]fe @Mg0eޘBakfSC$ AVvӃ:`ܱ3/C]'P*:-M+h'*VӅr/qr3P#%[ڜє!~s;CO=&\dfy$c߄xny:IY5+~t/j ضjɒ&H0= * $꫅|uA`SqPFZh 86؀f %49q_Z~'C1)p໽u6HOf[eEX&<{: 8ꝌB;NC* fƨQcFDuG?DY, Bk36Ů,h&=*C+z>2_6q XNBxBxƲ0w=Qkح%Kc ŕ&ddEͽHHihq wp 0 R*/yj !=̕x*ϲa0eR(< @M^XO.^^^}6(8ېa-,21|l՘irr"ٯo?~`r慶]U jx=HJ mC;ݴؙ99#DvwJu]%yfZ(u~ǵ@!8,҂iG̬HEN>/, ޤDVp"r8FȢs<3ӷ{ZukƉ%CŜ*/vja{Y[zC-$:o 0+E3|%Szz$<1Rfu.Tyc]Ns#h1Ā(n(a6n\\洛+0h>fRlOLz*EP(E; `,82tl"+Dsy̤)GM. cF@r>o I)8ja ^pZqLYw}C:cCP| |^#OqBTxr|c9"3S7CwtwCIԒ1Ryo*kCE#MQ{`X9Ti!Po*i7{ K*k@(fȌ?28I/Q!b)~ʔ JkzאCឳsx^=9蜽^$Sp<خmF8F'Fz[(k9Wyy #W4֯AS Z3A!l)>G>*(Jn7⡷2Y+WA,,=xgӰ i'qYg//eAT݀[cwM1<o#۞8+QvLRYSC@wRɺ\TLLW OExr1xvP 6RD+Nd0zѼ$dsVajsNNP ?-%fit'Qm+(үk`m5Y&*| ڹ?&LNSX,ڹE+B͘^6$dG+1o >hY)>c3/IV`twzDP+D/7d6#y졟fGOR18t%eбJrԚ,m^1#qC1Qk14K l&,(ݼ01]dN|(p[ n^ow}ųV>T^BoPSٵtEuoE`EPu+$yZrMsnO7F_^[t0R8{5l Yۢ/[|!] ̜Zap'@"^LO7Vs7GATo&007s!9w!Ea  լV˅ٚ CZ,ut"L^`'hr5[U|`.fM6fXx)U+@Y-q٦ן܄@&N xP;9Qv}hIn;t-€]eFخ)GOj08`·79kEf1<Ƹϼ7VD6B/9]_.$٩,0;ܾ. TNq/sPQE@ \Q̢e }~T4`ޓ,hH[M5ĮZjHWOŅ'Vf➡Kc1@Oimuh(l A104vCsEF)Ho& ~M)0+bO>I 1 )ECda W(AmbXM6/\>yʢr'I.ؼq9x|mzHNqc-wf9лu$_A=.EJk9Oi>]`Bp TtNsg=<>Zp@ގ}; k!$>p-6C 7{yl,7[{nK?[Q/ɒyqLJD默^GikR?y;:Bʷz؈vx 츯 H3>S"4<\1vp>_Ҟ3t50ɠZttEMY W{QrYgNebbb $sbYlc(˦܊u(7cjk[r^ ulz!ܔ4bw6Bԃ p~!V[U/jӳ=ċf+]S;wBgC+xfK2N"xJ+ vTʂi Tv7 \+j+"y[*>$l`9vJ`a='|Mu FS/CmD*Ym2,!&}W}HtLv޳nv a8|i؅myͫZ OlkB aǥ5(S5Qƅ|bY+ 711XZN d7s)S1jK]xuY7J8|ΑFna`48{í<Υ -"v.2RI +7č=Xi&_ػea+ #hl *P5* N7+11:`0rUf6_$g98lpo> }WU!Ljf9ۉ;Ӣ x297ЙgK hD322Zqw_fIڲⳀN׽˹LY43I"FY|I(z=FX~@wr!| ([nnoi(YBKpx7cau>K7@{n30pe}"73:=hwP:B(eWFUW4^dq/O$U9̊Ĕ9DG_ ,dVP̟!>FC-@%i3= PdJ?a5WY.sŋa=g}rQ`eqߴ3}!\r`0 jK1]X.U|QNo."X`.! b ?JJАy{3#dkyS=ݒeX3ޫ/CxE4`Mµ#: >[ފ<Aj3(㳿|2ʞF]FB;+9x|Xy`Zg[_>v=L,( Df8?[ ` E<˻В / _?# -Dm֑u!THuݽgN5Qɩo"@6/L?I:` F&vg Wc|ǟ3.x~Bw^/ip HSQַ=OuWqlqP$VxtRY, E @Vyca;I}{M#]wuR0x&@҈#tIt#[lj].zviNH(W Ii ;ۏHz7~]9FMOaַ8c,3|!+R-q@P-IO7Qdn2KBR/ZlaaܽzGR6i%YUQEr?41r#,U4g .E/H hkG~'Y 9QGY&Y!Sw -4kY#!z~e[ 9Yd"d#\yJVLcnӞds1ʅ`Iŝ k=v K2 xPT~P8MHURţkR?kݴ2@n>&y*s}.!)jNµ]Ø@ 2ns⚡&/,nVD4jy8f-˹TY;y7?ShUb@hrNU(:^?"tXhzV ?WZ"I*5nLS:Fu$U3]~y9§(͂!)Zfh.}q$Ce\eI~4{LHSdmEǥl_\ zR\:0|67xU9 m^ɖ  65#gUUz%B̐ݨƊ9WÖ>*?ācK2V\֟5BW$K,ˆ>>uOLÛ5q]I#SM׍%4aPxtf&(iGpJTVvY"[%"OcO RT6c^:zw'zh5@2ߡ|ṵ=(nzӽ36&G"{Ƃ;1ᥫ}V;!"6&7HbEq3LYF]JlP2`o4oFY!AI?S!h:ת+A|ISWOA4ؚ@/H pxOȜ_0ȷ##l )|x}P"GWt\|~2蛔yauշ9]5q_{gH'qAnu A4d cw?|JH3>/&R6yWsBV⥑e1$a,?u;k.?BݩNzS?[v#ӷs0 m; ڮH8CkJM:8>gٴN˿i'r=%)hrP|u`@jѽ[>/&Qx(vUֹ1lTwS+vԢTHIu"&9o6 Pn3F{#.KV*9}Z[π(܀dumjWG%VoW&ƹ:,)ndu}W:)Ž*X1}'Flt{R ^hВ,byxzuDdmmIq(_OW$ vKQϝ﹎#S~s2J(}zLʎ\x1m,4$mnb‹Ԛ.9(P^I!Csc<ڇ`PQGm:xßv$*0FW/C踷;7Q{⍲>9N5Ğ# "7t2PZPGT*Ɲ^9WĔא|}}5*J b K_x"\Y|xu_YPridW2lh5}1a%Vbً^ưlN})IKs1gس'w'zS S ?]<)$`ĝD)Ylnz;3I2^ );/;,< y^u"TjƷgHA <$ EZQR֍*̲jd&ψԆVj\mטdH1;BTÄ5b1t Z/_'~ޔdÞִP ǯ%-6<;_TCFMqmD` P֖W>dv/1p "3ʷ-zj^gluĚ*gbhJ_cQI϶#Dɫ^$[UWb7c;8_7ZV}{?6P_HC;ewס b2D/vOT8Ms@ ɟЯ(HK r&+ghA n.⷏P;6\Ex9g鮢؅tW7lvQZUq\L7Bz˚::|"-]BtY-8zgEBw]L5m(Z?{Wheꯑ]l*Y{ # nwnx?BW"pvcF6C t_|𣔷hcrF%KP֒W!OdyDJ/n = e#-("<A!wKƸOyT y{ie^S8Z~!ј.)VIKlGhl-[714}]#Jbt2*!pB oɭZs[h筷 =~.`7c;6k [zHȺ (/v^y!ϛCW<a # sm\N<+ĢlYaJ%Oy=*PSiHeN-[2_t]>ܱЂxgc)k{/LSe7"|T%j]5&qn {-Ϡn"k3dT@gMɋhjA-}|XCh.gP/GUQĶ]D2iD@ǚ;rѷ rO΄6Iәt9|`v1_> MirՇ Ga w>]Y%@o"Cܑf0)}&eFگ8ʘ|102@i}2;8#xg \[$|[vVp ՀdlO)$,V^ $-ѼC\_>5LTxC!y5{1S^B:SV=z\K!L" bv͌fC.mV.,\7}FymV]Vla0L:dߞZ7^HglHYYKQnGtD B(p`imCu1[|pa}BGÞr htteְ iQ3txAUZg!Rjw55f̷[uNJ0cI ]XIXLJ۴H[v7.E].Y H3 [AWmuId<=~j6[&irΙxڹ$:v 5g0{<*^9o"H`ys^qW/xJB:[">-mb;A/oiH3NWX84 oگova7Nfju) f1d 7eOr%]~ ,/5 s)(y1*1RJVJ' ]: %jB`q35gO³%vVXɇ"t ;g{L'~sk]=a1N ugy%#OJuGDU 7 F;,bFxKf"QNeib=g/W֥mR V-{{`0>ߍ1CN2h94gutqʁǬ >nTt(F!,fc9$m;z|ңvcpR1߂L,?"<++3w޾"YhyuLBlWߴC߃V%b(T*6͗$Κ+Aun$ś|!IOu3O-HR~J+/wi$U^g70٘Tt9z}N!$sz0v c#p+d& AU[S~M&P, pC{pi( eqmuI;6h?>6 J1ԡa-7)a1ҹTNS|T+ sx` KĮY*CF`Ik,RmTsd"ߩSɀM3_nbDPUdul-$=c&%:;W\2 *%=#S&Ds^=zU=h'腞HEX| c $Sm \aH%5aW>m{ Q=GŢgE^5ɇ܎q k͗4mJb\^s&i }ԁiL FwAz4YEskgJ\I9_['uR?fdMgzG[􎨒)"o[h1oˌt&jv0@܉413@rwˠ/A0fWԮA&%Ww [ɠ<-VG0:ɾua/ Z('*1 B)RNOlzj kxv]n&u;:Rr:n,b˖ $QIӡo@;0#ڇgc_~ \"dRBگpeݝ[$KP͟}y0a#f78,']fYH0 BRțe0gש6) Z۩K|AḬBGq=LNm\JbuS^}1{>9Ec1<3>w5;W2yb5;Nn\ueMUGN@'8e7 T5@*cY ̒-`vm߾ t"~$4I7g%&jɫ4fzJW[`ur_#K%KV=5;5\op"lR'Oz ,(M`L85)rӥ3i6s?FXT)2ի\]^f5N3e($hhoњy2mWJ5fCoCȶ/]"l^nhokan_r#= dSֻsƤ58I-]f게sGwZLK1o|EPӰ)-uW o'n!R#2}irΖKű'p Ɉ`d$Sr hYڀ߯hk6fi~SB#j85>X>X@n趏^[26kۓB#4OqUYPpڵ_ >2r5-֙AꥵO d5͆9&ڶ2Mn5[T4Qyx%N@@ѳ7JmvBltU8@Nv_`uس9yt,ǚOZ"4RMY<+(3N&A͋va[UdUO`KM7} hνYj*Py`$j=i+U;I0Xt.,' ]:]y 4g1Г!Iy/1rxƒEW9`:;m8懲AGadTV.s[~¹-[d]=+a !4xb8>yV4˜1{!-"ǢP'I:B|~EQ諸kXi":X: BUKP#{@j6D6)p,GP%a,3oLz^xV= Z-X/n:bNA)g*#cf',b'S 5cg_yLu (%\/[L&fEQbxul PΚzEFڈ̓ğY\>H߼c_/TL=-cs,KqM;?y(;I.  fNLzքkdu %] EP~rYH&F)*f=T{Qw.EHi%Kj/˕3Q&dg1kfg-l.[McXwc˔'#zסrTWDq0oKʰ7l3 G@|,4f3LSIMKM* tpG6;f\YuXGVH W(j<@h`HxM-Îz6R m.gHĴϦO3mOFf,<[Wq5`K!>SGow(Rº :P\Gaq*Sz:?"%1?ybsJH#:<_rmK 8>8Nq[^X5eEsBAQrE bx4F &ZÑ$yCxZ#bĹd!j  UCqhED#Zdz#I2A ^k:#qäZ';Ū9DZNBX6YHDM[ヲ4C` 7zRӾ}S"IK1Mo__;r1}]1-hjࡿĞcSfb֕;B ChHI% ="`Val!*L(gi4OLxzD's!)ɼ^ '8\b6 Odz0>WU-㏤9(EQ'"ARfx`~Q.934`1,cƅj,L*sQplQ8 O$d'XR tf=W_m-Le>$ՂGޑ)~ܞu5 z::S6e+sj)&Vmtr[-a%;y QkU[1 r8֨76j4Oy~= Ǎ]D>ܗz5i!!mPH!0ĥ?ܐTa;2 Һ xq]:[I&?vnVk#LútAqӁ f3K!' d8O燪UukW`Uz/ `f fJ bCg7hc{%}p$o`Ax_!:49,V5toJZX\''!S)[|v.4-Vxa(ELIqCO0<Ӹ}>]@ë4"={,UZy'W0SC:N/ؠXp2A3 KFOM5(r^CmN̵ʯD򄰅2qk4a ܶ׆N7*dƨT9Ʉ `}Z螅]BUDh,\,>ϥͪO]!YICܙ1CM NK`:2835 l &HV*9K*CAq}&POYO0xIydFH)kwcCq\ Xup<4J!)ۃOL`-NV9(?7{++ 5gwS迈_@5pl43N[c}ͼ\j y~P,^^ő'2 A%u Z ׯa(| WŘ$O*]x?ldfZ[\pAc?Z)Iτmە:`-Qb K=@j wg.3L9Dz.`; ]E{Ly3^l"8l*B5ҧ0x/N >Q˒,o*-vXu}n@^?ZG2S~,a!jV -J!x &蜣-$ '*s vwV8١VRua$GP!#A̲l>dcgl$ oQBU40OHHj2x.+Ð=.Hb< ,՛"пHV<[wꡊ;"{x"ʓʒ#pr#|1P*|PN+%"kr O~wi2aam*G܈KJws#̘tVsTKi o4C~j(Le&qtu}>|] !QGWrr_RGoTEC%}l@qlg8m!Mw%[/O]ǚ>cȉ2F^jxiav п3ó8fRQnY`^"o&uǹiR=iZ1HxۗP9 F46R>lqʘRFZǚ Gt2)HɳQvfC2_v"_@%K'٢x=-)QMA8;Qyxܽiuz?b%F:ݡ^h%"Z?I/dPbt-{2sC8r~)EX8m:䐕C}k8ٱHլkHʢ~FuCny,G]"cBRy12@z3: *Y~vءB!F}B.15[j6`]X"Jޭ(dCJC\&=dͳ8 jx&)}e&]i"SI͌T]Yܙ0~2n<)4L{MEEV؊&n7|I;л Oډ'HDъڥLFCGߚP֨́GPbo/8"*Wm,M&YPCTDvjVȢ'\<6NB8 t(j Hem:'j!d%YJdߵGR~Fi̿,@2ML*J` ?pēQQIQlrC+<)YZzŸX ` Zh܏M~PM)Jd5%4ay]kY=V4=y9y+`9Lkd+$7_Fem2T3wxfKa.s=% 9]/S1b=Ʋ$~"`&Ww繮Xu160W#ֽi8UKay0͊paUV x6holzidHL񓮁k"f *xh<'&n#i#22ޗ, ֘aLc-~Drk 3 Ǹ*}Rd?:J(j= d'V=sr坹Ib"c8H ,WFx۝l|lEHQܾ:To0a7:|,/6|"~YF2z8 6){5gj=ʿ\ T?v崸qnˊ-{p 5u.6X-,d_9s^zKSظMtspWz&#k@)ߥ Pw`3ZhO/$X;̗Y2y?G'}#pʚ"5Ӡf7} 쇦%zMZ( (Wm4Hf5]\X0n 6kR#6VNW$k k7<1GLQV]ke"'XU#ZnAc ~~{b nh"ʼn52DsmN6H ZlJv9 j3nh;#4ai+yp7c-`ZԤ)ls)r 0}i5~s*aW_a=9g>MB&S[˄YQlz5ْYńFV뺰m0E8!$<>%HH]1.POTY;S~un"0XV`S؂sd sh)4OӌWS;4vEf toHyO;.(.YJqr& im{c(i%<"8%2RiٶR(s@7=Ko62$GV45EE( i!q=;ky }J Nfaӆ[.i+z]xZCa9lXEZ>@( &^@/h 1J=,s:ϱn[PO3}n] [ˉM;.O|Ǫ8W,[?Eß`p߇pe2gm>RLDp6Ae>35zQ%E[N?*j[Dyl[9f >D$ 'ۂ+zu qZ BE gbH&X/ S&),0؃S # 34D&ld<.4=ivG\/PCVYufϭ ̋6뒖au#"pi"*nAzt#R5tZtki~UM&,A[S +u$S"9z$냊 @ŪY+u#2&4zyb6Y܊].{[4qgDDw=JGslp"n.S j;r=g7Ƕjo$Cb_{-Jp!q `XvoC dvs+Q7`"IK1o -rt;NGFu_<'ؕukLB7g-1Yэ7SͿR HL^@uF/Қ̳p&yp|E:%+k'1'F`gjMUJ^$p=jf4n]q. k"0a9,&-oV&NM?=jH/=U4YVTB5s_HZ͗5ߙ;Gp/L}-=8TD>`t6ޝ{hg?|穛_ gbC7@yul{?`$Ug||x]L\`Ԑ7 6\n a['D9…GLk{AG8RNi|G%O>+Fb~eLw"nغLjdT*d[9;=?.GQze1E%{X*\ i4>STD4S.l '4 cK`YG?Ow2 0dH$H]i(d2%I3_6yvj sƄ8YG]̨I >T%`Os.#m$@n :4/ rrsF5@hIk8h ؛z|4--R*R{hx62Ms?oCs~*w`L# qO\$8O^l?Sr|1[k}~5W/ZuԮ+j:IƹZ!Eӊ˹Ɂ4*Y+Fh.k,Q#_$Ґgd./&'h9n3GrW/+$ .R+ n:4gIJ zbH|.^U˖vb5CW*d/z?g.•_Q*R5 E'3{a~1o7ILEa pbֵ.7^A)_qe Bŝ*nZD6Kre0Pٔ;qS&B]wRyuW\q?!g#< BE:CީHtP꽐9BP#pٻuK423S0eϒ@6 &ؿ6Nfn[/êX NXJ@"ªN8:H;A4OpMqn@C!ȣ4b)Le$o:n0sr0dr~e.pҷT6@J=W' `M; 7U<letdO0 b 5=󱼯|[ V95对1''Bq3}G48zG |~GXs/~9GSe̺, MFlneR|Yv)&!R2e݊sT'_ŌVE#ƩRD *+ "B|]v^趑iq0bAx4^-;Od!eyyy!xWR۾5KkvK |t2B xSYePe[uw.Z_xO.;lbYUQ[jKV\C"~mU/Ѥ @I#Ql9 )7ۆh6Sy%⟆vhPu`ľofe|bruw=m @v _2 :Hi;4pLۣSpRH tG#>HB мo֨̀i]Is>Lг>%K=O1 PAƈkJl+r}XP0̣թAtB:[u-}(7{oƣ=dSgu2> 4QkR`j3`w+9thE`"l.sjsZ"j$m1cq8$?(D P|m#"Kn&uDWS0ct[\-0I2*ʔאGvU8@J-o+^[xTxsIh>Mwݓ\A4LS|jޢ;rU?&tlcpXU'$iB PDҔ`{)9 z,VTkQ1EY ɛՆFk 7" 9$DM }tN^ڋD,cgO" MRTO5V-[*c.=>'䕬.D9כ$|3>Ή(zgX~ WF$W-=*S/Ѷ@Oڼ?.x):M)Uu`K5hX i.d1@檜T1zUi\c5#h2u|l箽#ҝGNOcQ8|2}C;}A4Xr#c)ӯ} ^XO)q[5)9c[h$:=){^9inS/CmM6}r8Q$볱yHW ͦ?''~S?oLj`,l`|޳뀔91y!J0\˟v7{qF'Z SDqX(=p M'SѦRkVC\2kִJ5iJ| Y?;N㡼wd S?0uAKA7 ҥ&L%V giMOW;ЊF+*Onl5UMPf{,Oln<@RV%@\+WI'MHGyqu'ke;G]8۾=VD`c&EmzRvY ԯ7"ɿ' 0Gt>u6^r/sʿy0lC*ageY"RDگB;zlޠ;٪oa)-,g&NrfDUmz^=uJZ&eS)c/f̼}M9VUt贒yfKmo4dPh+-qk'u'e7"|:zޚШ~ы=D↷C#)CۢA+9|l\qH[5,[uJ@"3f1ޯit1p闟<7֤ UdMjC ˱MoSٿ13s|lsBҘfVV1'#I/is kSZe}+ς^{nm2KlltnWA[?@XD`4LX?L!R`x@@Gx8"i~? GIv_xhJ ?dZ;Amk=Y$|`۱ 1AɿvJIstn&c6 fᲖUWHm?0qZgPXᵵFx(tRpKgĆ M.Ԗс6#Kk*TB@8kDeH;,mW9JcFHeKJ"#mH\xz1= iW jCj'5E76C .Fg^ubd%RGc`uy&O8[=74z]f W z-9q~A5z%z?bnSy0 ~䟧N h/b"#eL#?~& \8M24M[U e?e g2 G^>,`ҡMu*ޔBx SQ?~҃"U2(T+Q7{7<Ugd<+]0zZ+XV "/)9tǀ 4GA *bY;lsq0*>_i̡L5}"z6מ݄I$*pHw1'%"B_QAR9SG~$F1@ILtQ̢8+2dMx Q;eqT_W]e.|>%!`*tW֏n?Q'asqq53 P1cT]K#_vEE[͢ZIO8k\ɦ: < *m>Xm +){\Q8 y+=08JMa>*\pU'&7MNȲP3RtDgDr_ z3 K4zP8ZDNt'SQHHE[8SGVY49zi21?umECa0Ie I0Ӹ3|`(x _W􄸮IF̎9nNsԊ'~~z[stE AaUIϒuVun/a+v!r< lQU.CNl4}xbV$T LMTs[2L)ʐlp=دUYٜ({lx_.zkn1Bez4j)$gbQ?k5Ly6X4EȀ9'jj|-*EEmPXQJM$y6Z1ۜr(ZH?1˿Z bO`}vu]=axM]ՕOlKMƯ;D4Q; azy89qÊ(cԎ.Ͽ+1_|Pxpn(#m W <r}4>̉B50h`=u˲u*sCosL% 3gSMpw;6O-ᣊxq@f SՒj˵[ڕFîS Y7+љL״IDI3z)〧"p{ ~xI.a-$@p7ogCneP|{xx}t'p)g跶Kt{nj ;"Md/yٜF })x Dm4J۽7'A8v=% 1aXr{oo'bhqO{Bа|S?%Fc7E'ր2Vr `fV̼&gO45`{c淃.J\ÄY⭶}8iL׬9U-d9>?n>T,2r0Ko`C etn$MЋMm+MUqN‘cs37 c!h5Gp˱b ѹ N1%>'hO+wZbG$FV ֨BI?0A 1ΡA( „*A2mwcGp'61֒ePn蠊)'Pm•oJ!菎khW[,;;nwHb]_m0g&M4vG`Q0@R2tgQٗ0&g"2(N0vG 3 tuu$v-Mߤ]cYAMh3aNAj0\]*IJI܏+]$Ǣ"˼ J`x $pcI 367 DwC^0V4EP ^ W`,ʼn~lanJ?uš:ݱQ8uaj,\RBʧ?ڛ“u`{e}3}Z)T=p":шAASvI}n,i ͽ7{挅mj련Z(5*DײM:zt[q"6>)FHM)D e!SY:BB]uPhhK[0ͩ=1<"Ip@e[m{^uz xbB97?vIPm){JM*/?1n7<,W+HOl:nRl(zU.N^kEAN,b9vN礊_IjNo3@W> -Ѯ*-.$[ؽ}LC~#+!\lԲ qh^w0"G=wK& -*--;JW(QDIã9| =AaG>TO5VrڐMk4 "*ZQ ! 㞍!7!AmH+NCpbH Rj8D@$kP@.K]]~BL 0ORyzvԺQHU*$> ?̐`8C)1.Qd,h_x ն:a=vas:0c^;BdS`{1@A;jݺz7;zKAJ3{I`i[zj0&B\0T=qe] q@6Zcӷ*BH1ڭ J 6YeQDKW Ё@mD'VLcB>$wr!8/o}Jт.{hrA?j n9UGXuRQF)-Ђ͂FmQWr/kuI7V*HX/d! .ܭ bc:ͫa|$W[OF]l^a?L[曁["M'o(=H%av3{ P鿑߃1J$F:WvBFFod P*|;a $?7-ߕ+*MD$r FR>+ <F1)3ͨV7jǿjr^+kxh$< JCX6;6 KTj7OԜb9oM Kxt"負IY 8D /80L I§"R+? %bZ̕sk a1k0bM'PƝZFaV_(o7"Q1 TSgIDx;*K_p-rX`/,KJnb= Ϻ;EU`72 Û μGicB>^h9ݘ걼;EpEw>!h\勆dۂ#$L3q8vmZfy]#]N6yG"k6ef"G9!L|47G+v_pHl,/pH+LxPDGHSO,Ǭ3Su 5\kY͑a?^+WguEU\J?Qq-pW#<ۢ>jKdôLEԌV,p2otjP8gִ{ 8&79E8|zqX( +\%sa]v!] Mؠv!XjψXV̡ |"mFX(_ŻqxSi薔=V.h;n˨s. Apb-uϮ'ڂ|Ü *CXTOgדʒW g$WUu*&G0b02G7*T-x1X17J́%c- "7ea{j ZZw mqYptf,a_h#6- xny]$p Sx٩:Nf v"Bf=Ffi 1YTҲhk@Bm= 9!ڷQX< a>$'۔iFU|%u0IULȐLMB`(t@6n_0'7{m:r辰HMҗn+wЩ(l{MZOKb/ϛ0! oO#jw!·B̌rغ|T2Av05c4* _I_ZbĵA~2.DPW!#[1% N5  YZ8¢|3 Y3Kpn 5BZ~H&\0>6獀^Sd@~SS*| a֐Q-&ও8^cFeJ饣K'E ji~ܤڃ7wɩ"!CD gzh 8_t1򣵰Kh|G&֬qa;nk~j4s@󩷠0&{0h@U,Q˅o!w(3iHԉYO5IY77cxHTc%XyTAŞЃo"+"\4a9v)6-qHyXz{H!6Xl~1 ( o w |H]3zG_ XF`O{yQW`J;q6SBYt;P§7.q%KBgغqA|w˴tX(a=oM LsŭWaV"Ag f@3!j"8ͨn tqXU$YqB&Xйm<;EќC]#Ad aW^ME/><6: y[BA^j|3)(ɞx5 KkE"q1-c,#1l BmU|//??a]˃O\::16UA}6;*Pq!:[r?U|>Q9}F$*}\_1&փPIZk;B 4[>0#!fz1pR$|G?>6UҞ̱jCZyukIzB͵l| x ̫l7`YH.15WPѻ[d{?-C,v壦VI)˷i C*TMOaG^65=/[KqtCBCVHPE]kHL5 G\NGDo[JϨ0>/l# ̀Ïm~Cqچ׹Ό&B3Ӭ;v ͘ꡘe-d4Xb:3=P$y#/Ŏ a/1W#Dp|-J})%;C̏`$"f*l/B@׳yiN ܉ ZXL:;'Rrʳer.T>9LJM>PˠpMgIM 8@y8o]~X^U2w"g'L[G (f".CJ%W}XϳC:,G䄁(^?e6y ݌h5 5(U3f1L=m`k4RO޲[E'/gLyu&Vb,[B9(1e'6a jk;"Cvit`ݦG(gN_2P5Uߍ#q\ xCe{>)}]Q]iRϣטWq\==&%7 =nP',mfLkDbr f{ xnb΃ m֞Zm:kMwhE3Aؚ- J- ʋzWnDNyG1T@wx)Kz-k^F @D^ 0!r7-`mIm\ IN(pĈAcFt&HĎlLR[#6)_l`}n4IrR|#R(:u{ҹIlLُSꋏ$p.B1#O.*=oz3TBPWMnM)0WhRnsh\Cz!Ƹ:zT`T^~-?QЗ 6\vJ >@u}3~^u)ΖTv |L!J]$_Ep7 1MX}8IiP y1F| GZɕ?ie(HqA/e^~g;ڠ3wrVC0κH}gZz/dh:`YV`2Mr/a2vCڠ0 %najwCzC")򁗺|f%sG|i2Ғ0b/Pػʻ`A Qj$1NH&37U醛ceL' ;:wh1Q;TJV>U!XS2[)X!>_%ӟ ?0$cBک%MYePXFeG+Q\t=H\_ 8AMhce~ @ԺZT$Z K#~$4lۡhҴ[oPQVLYdmr;C! HdO;vŜx\;c :e9hFVqsB(k %enMfy+-ZwM1sLBY ˢXX9'E2p+<+҈FBm}H%; ƴʘ +5{QFw &#%VT({3<]i4+~,<h!դ08a^։_=r#8\X8MΖS̚%Ff`\5vH!dخFnt +LB 1kNR&z`O>n[rsP" <tdw6k+?:ʞd|$Q E+ݟe\֯o[l$AI7pfٗ{~ HxglC gѱkRC pTץmb,)?I5Z}Ur6ڋXa z]~O]إ0܍e*b!Ct@cR1{֙ONc w7cǣ"囏gm\Ѕ9FWm|Z+2/Bwo0"c'p@x[k)9`U/"~b3PnO4[mꝮbCmbJ㨋2,3거2䇬%&%d*x@! "YEY]O+l#Z(L[E#Sh[b"GY5(3.tVAC6 \Uc(7rT;NbrmK~VgZ[_3w-zH%60vRSkWc+'PQmp [drV|djc 3wy3D~T%9k~4 'S3yS}!Q1E^jE37޻=B94 keq|fFYn<ڶ Ct[R3^%vIgx+,lZٗГޡ0R=`|׾OEp"cYkK1#}"ѫ>ڔ(gSCwy^- v>sXPL(u#wa :n<]~KhD9Wn>KA= og28baVb0kF9d#ABnF[xv#jJaF?Tr6YnSL]+3n rM'aρ0.ũX1C4i)cM"J 0۲R{Enh|V~m}!,PJIi8]bpѦ} Y4q@H-8ȴ,ϒ7 rK0ПϮ0&?["}mz3^.sOR`ƪd,k/ Bz; h]tb:#>aD4OdJʺ?LA2/'ci<J~U*%iuH4ۨFfbs𯟘G)D3͵!{iXKռ֐!x_V<=㨾xC^"FjC7HB: xA:Irf+&w ,`siHixx alʵ~jqRպ)ƿT!NR_A@[I m-+v r f*gJ&XƹMOp|WoT%yy8xaa\i4l[ 96Jf+i `0'#ǵО9䞘X Zpf)｣q'1</7nUn>BNxf_>2ž: *$ =rD݈qhE>beSy=5QJY4pͯe]wv_\\KVj*eZt"ߊ9줷O6jKuN st^лgqY^<\]% @]h J[a)Q۟;8=gt͑A<v{ C˱CUJ6  :mv'sl +)0v@~dӻx8+hDŶEifzWBMs5K?>r~ 3%#w ToR0BWZ,R?(g b_J d.vh}g- #$Yoivw~\" :CGSrf 4wGڭlHlDLH X+XSRr9>es [ h;ZDڴ.p{P%kTe2U*1ga_x|S!{7kp&e #[漀.s3!>gth^k1wQ}Q1 cNVY EQQ_noՄc[B~`_I\Zc, BZ7E_b`PB{"<=tt. /=D1uS)^nN?ֻ82{6a{gE1լsի| >i{߁{K{?I猎i: }Nm/_ToKś&u\&Liԅ%:!QEqva#ϑ>س詮U#V,E Q ȫf'nCB4- yF5v3 S[W|[)~;BXBE/Ȓ[u'$~q3h(ts6MW\!V2E@,;.?"F':ĩf(ԣ dS8G>]FDwֶM,xPW`#/2a ;Yuۛ,q0uaDT9d,R:[{3< uZ8?4ыVН>$OS!FT4{J&9L.rh5Te9e XZi ؔy3b4Fg-ө' ;4 桖 v"p7/Z.?[?8q$,u=s*6lp-Mo de_B2HOQd3"~[>U.ˀD]e #OC7`9E ɝZ;ԕG+/-- *QmY[q|ֵnеV6e;8sݒZn 4bܗuXAh1?4cb(^Tn‘{ѵO5եT`BODz0ҿƅ?`lx.Ҡ^! wy~swGQ;MY< A>ln2gRrAzSr/xrKXkw%17%8[M_RflmlW|חiܼkPTdHm™ɟlUrS/7*=]>?;n/] yKKϯZ:||Y?ȴfLpGJpJ9 3+x@MRMzFd>g5=N}lZF~qqe.::)|lb3V|“oKqƛu*dˣ'~e ԰!rpbUt "'ߤ82OmN(KLw,zf:pgʰNn"0vaU2t&.[FG`>,R%L6.dJ/%I>G|>pUXR]е_ڟjyf=X]s*.:CLXd.%[#ѝ(G.Q5+σE;}D3m?>N 3.H~F_+.R_K.S0u,~ˣlyBNV>w F s&?ڿSk%"S̆FZ{YFj{Jɯٙ d>Q-Ɩ>\v,OZ ؽ_o8REuY<2oVbr{2 Drn21 30$BLkay KiM@/({@]8ݽpO-I\r`v+&M 73M܄w2ˢha/pThs4& [+ -u5 [YvnZܲK咗$|7:|gi 3w cڍ6Aς.i7tE@₍h{.ޛⶎ-lQ"Ll.5ԕiʀ {N*„Gqxk&3k]e&=UDP"7mruR)-A9ӓb& rƜb"H'{|WY s}wt7JA[FV^.[MK3H0Gdx'"-y涍mkޡ7 T_wM b"]΀-?gTEJ޴Ӎ~Yۙ'e]<>$Ct9F݁If GΌ2@> Z~ȫB-8oy3.}O()o~_J'ן8؉&k[b[u5J]Je :CjK]=x ~wn -7e{@n%VNP&܉)XrP,@G9^Kj0L̀ Ō̉E (3vVl{"rw#`Z]cC.ag'GH3Ê+(8Js5 g[(ݍ%`sM/&!JP':[q7pReǦr.AE?u1a!ge>jbc)OexOʥYxҿEw!ݾ,c'Km(UUX?lDq,NK eQ_WIR}X6"d! Ԕ$`%!& (  !$YHcGG$T‡{rz'1Dk_CЗ$zbsL9;!#ЎW(iZEEQ7vn=":3(#_>ԏj&&8eGa;Ac#G<eC]V:֘Q \*/Z#hJ~ɟE\1jik8|T0!ͯ%K`깸J)6mvb6Zs VDK HՠUļt&h =Q.1yyY8͋Xu7"ܭ%"і+똏Aut 78F) '_ۢ =[ֶph0i%]%7g fDMvqQ腞q,@R @t[d5/iAKLj4$> K5[lr ok66,$ xPH!@?}A^~/ : \ri )vLfbojl">;b6 OQ7ۀ_} # ó3Uq֡.Q~cv(;o9Y0 GB(؊`6^׿PdO]F zպ+@l3,Ahw&ǜ):"z9քgm7y5'S곚}8ȱS]! !K*uO# \9 /~ȺFNv;IGWkX' =W>=>kΓZ@!-K}wCDb[(L7t 1;Nns  ņ rW\Ox+%FCgXfs8xSv2Bw"/4y՜wZU9 GC[ sG$'*0Q{'D"Ŕ8x'i[+D[Hi ?-O&# ^fwucAHt-FɴҠqrf+$hJuNl)-(Qڿ~̴ۍD*E d.R.'X@d<;ɗqzj)cԠ[(ͨ f'o*p;J@!.lXrZ۞=~D 2 ўE.!ޙtƠhb rs=Q@Bu.!4mXm:.+˘%`JzJ Bi U'`]>&)x{/>ad6=ʖe@jp8T㨙] ȂαArDŽ,~f'|l/K\7x~e;|pZ¦RgCJܕ=ovؽ6 tN^'^8]z71y]_u_19 O]cQ̾X9:9QP49;7ȜI{/%{^X#]c[b$a*m'_J}.n)d8Ljl@+1;VT-vQ~@\ჵn]_S"EA "\<3Xi5 Mqk'?ꖤ8NǠA++_YL :-Nl^&pW\\6ƿcGGMo\ٵ;5>=}2o`oP Ќkgey!.Zc:-=Ab{ ߡМ*Zݧbc> U{vxr`FOG>eIBW#kpi*! pߕϸu$.8Mbrxbm+-Z .e.+x o T7: \_ D?Fl}0tUFՊW9+7ީ2J@-b%ӋƯATcp5m?s͏@#n]{s?yh#)B2 2!4KH!JZru#&k9=QqjUXn[T\ʟIV{{neB?9zNv֕ԧcoOT`2P`n8*G8-[ ~>xj҅jGie`LE;=<$rm(&Y b$5Qh: jB:K DDKRi#~.NTB{ GdbUsdHaBN;A`5y|w轤ʮ5.rhn Ļ8_%KT59_pҗWVN]]7sn?߄f P? jgijpppeYZԁ2ب:3ފ#^8x?!΅q<`L!Sf$ &V$f[+Ƒiɷ${-eRx_Bn}[Bk)K ~@eqU@{!5^ n~؅xp)#JY+& J PCvOKRd. 4e8ML-S[ru弪IʝEkX'xpw ,xC[+xaEcpQOr&il`NVF1ʕ8,^޹_K ئ'iu#H9$;- r',Ae5OU04I%݅s%L .fFQ\ 4Mm@ܷ&t3%̡Ϫ§w'Jvvs6PhH@֐xNl`N)Bs4z0(.[w'ƛޭ/)@KPaV2UM0KTCV8KuיؙV0@ȟ4(p4n$icd®!}U <)7O&,G뾚 L DG΍-'O,Vbl2.)PNY40Q3ӰEc'^*~Cp?)VߖQ#$:\Rm CKB} ٕ 5d-Uu9(ġ3/!Gl.Ntm3o`lͼ}QX'%.@ cRZ;obqU5%~ӎZ@ `1"*3;EN$|\E9qquM^5Ɉ+Oݰ {JjI *;-[셐3oS % ,6cP`4r X1,>G \ξ^.[/ #8 `2׶̌O:GT=\ov#Ugn*eϧ cػ}44+M褭24MC\xTmpV;É{vE4 }t pd")VS m6ý~=9ҖlHɵ/YP K4XK>қĜI`4y?g˂0y#,׈@H-4qxq(ij ͜#*wo~|`aNOsUMVLm3N4cs0 I T&(RzX3!>jw,igcB@9ڇ#Uћct0d~ qh[/a w4&  +HY6buT{k hcM{D3)%ɛ q{[~LѨئI ZWlcj}NmM#c' [-(E;?-|A{wR1U ~GJ"*i*,N%u+Ŀ+V Cq>YJ"( /!jb6,>OqߺGzvKn+SZ]Z2ʿ+K|1&6P KŅ2B]mDws?1FoEgw6/Ah2L9d$yHk0jyUu4 鏀^#oʌ"q@l=7EXQXql0 <;1@@wX6Z~Q~uDi*b"sݹ 34z00ZS ;ɶc&ARؠYN7}t熯iq3;oXwD\0s\A|ٟG|]fBOdԬ^[Aj S}­şC9_**H;1"ʥ ]G >­JcY QC~XE| ׸db*Jt2_G(S@zKz8 _HJay!<ٺJXTWXZ(|)6 %%?дX&;Z7dD|/Y Q)m`BzB>idW M5-s[低Ct MvJ-}<ط8zFXަ:Nj  o1 sTaRi ǜ]yٔ PV>Ld`5Cg`XYH AKy"E6}֑ BA'rd:$M\>RG9'}L{,I\F=|uqDkmګŻU*2OG -!B-AnKfTڴOHEϨo~#)| ?awj\ŗ I6y͸edpŐG)ΠDMz@FX1-Gk%&q7l[[(yH0dAK2uo\=,>]!,瓕OJZ )3#H=K x1+76bL`HQs/0|hQ6SE}xWIN|_^UU| vea@A0'\b)Bf6p09+)yBDՈTh)0!oCu#>󔃗YE1B2}s"-4;-M`92{)/_哈.#хܰ]V?/(7NpO=v;y!U\kEo&?9tFҔm5=.`!=HRCK8ap^pKʝ!%] qp{M:0'wj'MZ(fQB[bjD\:+`]ocby(̓8YK،#zK{ejQVKl7:H4NRM$;}I|J`cZ"!;.} 2 \-Gny<vՒcz}}zK0#O]_&`}waY gM };FL:NFqk+nZhA-D`0'`ʽM }8m;[(Jo)b3l% w_!/0Ki,VN&v aLYݕc4۹ $'@L$bFfi>#5l `Y6шEZfww[e@&m,VM_7\iqpp=ۅlq`\/\Xϑr=q6:"s1uL^iPk. ґBІ9.=1D&zȌa&C`Ew4)_2|/$j"Njˑq4C娱cQeP(/ȕP̞6B%/L*cإU)\yv8jyd_Rܒũ\ˊ\&[yl9(ޔCP(B $l?چ f*G6g%PvX6!͵X~q-[_ei&^%횤W |$nn" V%HfT[铔[\_o7H{yV! b\~x)o<|cTZn0RQ |@gSdBŽZ2c |"[4GTW~* /!\aY 5\%1 l"HsLi+/Foպ::lڞ>k"[4V S[4%T@{KMGԦHFyu?Df黸%Ƚz =qz!!rH?a}Vnr`XrMz28L+] nvވڽ'v#2cxS 1%g|JjX0Eg-XUxA.V`׼S۾㿱rjjw )$B "6!'p^`b3;Lgv&ơku@b>+z>Q$-^L!@9#*}, 0=+ kķ%1m¤xA!:,r7X544zl L/vNv1jd'ܰo%T1Ŕ;W)m擕jfpxJJ;[ot (lC%v-*<@JW͗x}x`2h9m"UQ=V>4NN%J951!M Z\o[TP'yeÌ*WuN+VT".1*""!R vo@TvOsC`q=~0T_%{LPbeW`/ A@𺼙ZSjb}H)&H5儳Μ]X6/+nƀ(|S BB;dCv K-U'`-UM~0B91$%!.V9 ,q s݇\ svin@EᎢ>urO`AmICQCEi'WZuI?=ӘM6a I*2D&gՏ}~>ۿ_dZOk W+:vQ4l'ZbPGUIwځQ;:UwxmU{ަm0FM׼Y&)2ȺhZԓ/t[i,Y7Trd>HIP'>y8p㠢޳nOCɂdiD˃N"ҁy;$ Mw!+kB[DN\?Y71H/S׎@Yԍ0oU,qU8t&C:]ckgpu2Pw Lz4[{x3&4dͩR[?hצ˯\x>_\sLC맛c' 034:}b1Nc0ܟbnpFļRyҤ-hq ϶&^L3+ _' PRXB'w6 CsDBTdg DihDWzG._|դ삯:]]~hQ0DLgU*<5VpgMb_PWn1ܹ^]5/ZehSgq )z{ͼh0sfĔBr) v #Y}@RB(K1k"8@t*+/g&|_ZX(ʃW>@X)lw;1Z,hRRN%n"LސY)HCSGsH~e!G]/FulS?EW΍rtz<P b`5Dŗh.tOїY=O!kj$[iY?:?*"_ 5TnGfsu&S ΍I )%u7k8 1@)@ẻyKH##K( $Zt1:\Lj~ M)R:ٖYzkcxm$}Zy?#pCk3JU\Uّo@xt>dߧ>w/2ͫ"-SGa#o>،P-dFEPߔh-23qo\7ڙCبNO:ދ)+HIuhΊ23dצwL^{kPK^ace )Xm9?(~SP qɔ]"jĜJaӷILi>}>Ǘ\ W+h j&j>K-/#|qh;6 w1TʙOɫ rFJt LZ؎][sV;@&&؀@~dǀ$,5֛]* qkDxu ?mK/#jVA_^Sx<&8JCQ&A(ב} $`Cw,Be]S=q.UBė3#U:HTc)_ChWT_.2bۘ{᫛e<0dޏ 4>n+VMAjwX3+*31$;Nןp9DEtI{ӿhC8Qt\$N*R0J x(30fk/I}kb sC fD+sgΆ 1xq$B&] g}|EqS <L9c1hO|l.WS-㰕S&NZ }<)P]nCQU`E-Ǥc ?N6607e;8_,:v$Wڕm*.n]yMĖ!_V9v@<݅*r.*ՠI(=ѳX>?6}ѵX|FAYҌ;]Oap)fP OY)D$`1߃ C w !k,CpPLhd(;= XDr0?Ofz`XJ`c~ ~CcS 3RvaTvN'lY򚐩CԒ>Y8T!ˏ:xe =7H1#/~H;>&[|:z4.7z$ObgN9zw /_ϪfW%ʰܒMHOĉ'G?,>RP!Piq<2Srd5fzZzJQF_T]s P^ d Ox Hd4&z[ H &={}BzӬz=;,!=+&'Mc SsPL4XVBwl;&ϼ9O= z2YM(>ѥp/TߗȱU@4=zfUi8Us:g q;B?D Q+֞5TC~_3"9-߱$ ӖqY|JȈd = 9hJ}X` XuD7l嫊3YZm#_)?[`/lj%iEH37*g٨6ۆʈ0o=s#V3>c~m 9k8!^FLfݪ$vK3V'\u;eGRNKI͋щ8PjLw͘NBGg49ĭlU;)u{ p Y$ȣz, Y 9r/g"l]*.|[YRi|`PF2U} I/Adr£O²]~z:ۿ$MAHGHM}F:2h+0`%榵AƤ[ ۸ 'L-P8 "7uvyLDz{\N(;%WC/ @iۭ|y a:kZTOW SK9g^1p#4Mj&qZέH5-dJXvzU9H sX[b`뵻{46|ߚ|djxB~fYJbXu!ׂQU:*5s]_7[ڞIflz(چydk=DQeZFɌ_jLQ 'YtLxR:싀p/DO%@vםӎ\,r}l|[$X̓~-++ǣ5Uyq@Җrp HadJ>-GQ*48K v0GHL[vp_ŝTqivXQ.Fw#2A5RnmGYaM2@?w_J|k$5 'hH\;"Brx Ң1a,Rh*;~ ~ z8>&MT):ug7 @8krIYnDKٕ6'*<)q2DO`h3Q+* dŢ}t^Ar/n$=ǴRB̽LŬTܵ8aM@K`&:OYsg{JkzRD|W> w? ,cUm!VwY7P>IU`ST.7޻;!N4r*5P$^һ^WRFߓl}1ScѶGin N՟%M9WX9JR:]B>S[m=֝]| Kf V{ݯQ/يUJ!tMkvQ^:Ea͎}lƺ5L:ѓ$$î%wCQcƁ?dDSMj;`~$~TI xO,Ovv4~sܵb!RՏZ-< ߰i1N|^|kVXwgs6 %yso/]e[`J6cn}<V3 7%xq6*4\: L`Z7>l?!Kԕ_̱AmE*tpkt0x^4JR5.ڃCdXf7ȣ8$ @Թ HÖrQԍ5XoN>d)_'jэ 7=($K鷜R|C~,o]xa"^!ׄ=t'6I"ÔU5Eobv/DQ \AψpfX|3hOedžb ;ؙ~|m4[8UWZp5\+Z:JWGKA2pQ8F9rx;uNwQgK 780t*W}@M!Y~ Bh1jτr9c"ǎ^fT0,Na^a ,!]cX~STɢA9jaO651lh`iD_SKl^<;N>z}  OW͙cS^X0xH4ЅQݱ6[AD(!τ}35h1ui6xE:܆-u#y¢ƞZgnu Hm QFr݇%R=hF%23NxYyfR>b;ﮰeҬPqn5\+(~_csNex- b\Qr~glV=W!:3Ѭ&hz+-"J:= `N]8d0-91F c$<}\T6-GM޴$1r헽ųJ:ǎ$(0D0?hK*Sq^1u3NUT"z-;.1vT%w_ڊlnu D8O:aG!IA2F)* IWv0R/ڞDs_υ\,WRG]GwmpϕT1QwVwAIRSq+)lƜ;]J{YeM\ X̸Z\ ys&zq|}u' /4RstXEXloMi(Q۾?+㐸m!+^p%/<ڏR$$MB˯/莌Ubwݎv a#WȅyuEۤv1*N\tu,2YĐC ?k# mæp/ӊAl&QJTH$ܩرuUıYNwgyKk3d F^Q*MH*٦ ) (6Ų2֠&+m!ؚ+<ɷI*GAn4^KЮ$љzsy\d/V_p~}3 T{F^(<}:5WxWOA×Nzj7ƦߨmlMf7frZ!K^EK7&/+) lo둈ěZ=o \U^p0 78\oz^O"7eSؼ Yo#> #G$9ċ@:OY*cSl IlqN :$k36֡~XZÉF3i>@pI.rGq!%YcEO18uߖ!݊+6`ɱOLӚ f'/ȍtJ`.(4(($4;ocN1KBoVJ>ɝ:"\/-lQU (Qv*0ϤS ^;DG['167E mtM߇x'6r[V!"A#u57q_:"ʛ>)[p9Lh6TĒ>+x`dT`e@N43 zf= :|*]Pj1 ?GDt<(QЀ)YUH>L|-nhU,\`OK:|L~X~z. [` _`4c߮=Ķ3Q_mSk@L’9yi{3*F+ cf)bSE!iJ9ȶ L;1̘ .ā@暹.~0gm67X?'7V ˬ֎1f\&.n]pbU2uCѺ`7 A]ie?+q̗e!),,sk Dfr?&4Шi@XWH/@]ĩDhb0DbCz.ⳏ+VzĨ"dTC_ LسGH(r&W!:<:"Vp%sގ:utC/gC2JH+#Z8lmlYL'@;ܺZ/;{Aa1hl.*J?tpL2و%J4 }/xh> n&hUMW@ôQi"ԫy,v 6,%y݉6+n Æ3^$ZпuW5 tKꏹU]^N.]BSAP)'124> ڤY.d 54D(2:K=5ԟ2&lc*oˣAᯇ#E*,yéN[ƿ(qMOY༰Q,/^Lz/PIܨb|,BP6C1eeVPJңv5[mXq0k\4CO!EoGV~a@7C7%i ?DPetFdӟC7wҪwxDЕ=yV YoyYԊ2:(gLi:py2##uCQ&& A[qqbdmUL5㞎?Zިp˖3VfT4U|Y{g߳fX Jҁ-yk8&ͬRAg b]AT'd@,t1 yc$آ;T}2&BPf(>&W-T @jfMQ #.nl)-)J-aiLv,mFOkcF-R [e (y$oIi^/?Fr>vݹ 8.ce($>ԣ讨6^gF@.Дңlۯ`5w;pZneB~zgdg?;SuoHL\TC/\!/8>1|+=WlBK}bozyv_k#kI1G=ʺJgD-m`3)o1R^uug(ycDaƽ8N}i|$8W% EW\ԍP&F>ut]/w.!HAzEA( e櫡[t;W8O붉Տ,<0d/lmYk\}tS:V8DxpFʰ!zt6y;Ek&D9w:.xLI{r#VPk,?,3 7 ?X+|ȱ +4ppK&7ϷQ^_NU'm? /gߤdZ%D!J->{0`uIY0ze"cj,{]Š}gBd F hSuD'gxVCNyߜT,Oo ãVUesF"QKq`.GrCHz\Ƚ;9i7oBz~T[bWDww%@\U+7JGu_ړ`~zE6% X]Dk_PA-fbBS7k2w%Czs 3&HlytWXǹ6tM^AqĢuBeci%[F}>DŽ# ~i*e Q $sW쐬&m4=(/T>m 8$=~ͽάQtA%n0l 9^YuxJo?מ+yH(k;"*mDBb ++\;0agx..xevdˑU>;>%ܻ;ƼwےKct?BKQ?+IH)R$`g$ YU+,b=b\lQ X7"*J}._K4>yeuvlև{{+ g^%xGht$nzl}&Rao3aZG/saN)9* A6`G~V/ұr܏ ;K_(ʺNRnCjiB]יT=ܮhmf~A!W>ъ}MƕiDu ^@A;pEUY{Bi[6zj;\lzE iHZNIYtWF,@: /aΩT #o6r#|v];3_!Qy\Py;b˥e4:uUt_oSBVL3l'B*G˨ِn%[DfA2I0>tZVCف轑&#{X?Qs%y7?Z@v 6zt;L\Dsݺ98m?J|F}ĽIkR-.֦@UخJ{^A2w{(zaƩe\RoUoBz7=s (L3H0s$~ST~xΧqL<"ȶիΩ;y )֜Ec3Qo;:?4+?t_8ৄѻ/j$jdZ4j/PXfe-&Z,Ey/)K(^=3l'PZIqAgaL! ZCh5\Mcm\N{4V$%Z59O/P%#J9LryIЀCvYC1$l7Yi}P$We/PlE<6lye.5Hhq.UQGR{K}(hV~FZZj SDzɎ@ٲ&j16 rm"J?!y&"vӦp{-q>LEFQi)9Җ4NԵrΰ$,L 6p~zE&{A7k])dx_#'0FDJcYb&* IMB'SCt o ceB;~o3YЦ)Ƅ.a1% = /ٌ (j-&v2I㰝sS ```f[ xf1JQ3'Wuq|2j+3#qIf3.;svF=M +6jdwZЛBOƯy1# :&׵|[?"Dp%!K^˥nvme+ad뗠 =L 0GRɈՎ]"(pXYHk2ٗwN[]}x7lwg2E0S G%<榓 w>؟R = mCOSA #~Ct ԋ+.tEUއX"ɜ IՕ8w쟃*@@ j凵ҿӽ#1y!{'Gʷȿ^F3bzkn.>%YŽ喧FzAy!"8Ss_tqͲPvØr] ?xZpVI= 8!}8w meQtVA~_DHͷJ!#]8MnĢWUHhqTÛ׈bywarHfSMʻK9>90^L>(ݼ,jKzQ}j]*ɇ [jef/ߣx4k8˪VRfTGgD2/h?~o) gX[~ep\ c@ ߨ|Z|oԉ=2$> nt7 ,2=/G+5e]^'L@A 2\O拄&m]l I՝H:3SGc1S7 Upl%qIE9'a|@bǺ򤮸C"}RvWv@~Ԭ{+ŶOWE̘Ӥ ر}uo"I%st2EY ӷGuD!eAo1^6±'}k(V'T朮aŁ۩fyODĶ^C d)h9zR5s_69ʬ{λ 5QȭtQ;X&J|_ߤ/ӣ>B2D3g@ E| ->ojAw(fļǡrz|8h0~.z")skaO;CL9q݉Q@nYS\hAT;MW\(/+C>!O]2s[wNk1Ձ ,5FBk0 ? 6w}}OS)Ey q[R58MOSydqnwoVz"т&,zCUb~Y0 2敦+7\>gf1w6S_,D,m?+?K]ІAez:N+b< avKgӑ i纕 myҒ Jm6tѕ.gDaQB̘jaHDt?2@NAx t{ or`ElS(rVn2eb<ؓ(̥g3vfg*wIc뫁&7R_u<5LlD<R}AzS%on0uy \_?1[)IT¤d.1vBgKæ䦇t:1+(w|piFퟌq7+ܩEթǕg<1$Ie*f@Ĺۙ-/DD!Dyo F$ G-#(AH!ʙ^(nIi&{ۋRG7ˤIYbrgG?1@qE "xM2^C r J@cO>:;aՓW_ͩq ~s,J:BD~ݴN낱4͏^y'ΉI4LuIV bhMI_iñP arb{u|g/wS~"o-o%‹甬~(=K>on_f[GyfhOH?7|e{q).4.~sq Bed]lR^8͈~z1˓҃^Xtbց#Y$2_w!}{n#AF%%7ёx2X;չb(!ԗ\0 [B7Y2 <5.t~*? fk2+`F`ą=m9յbj)Ie9m_X6\*{RX0n:ujO_cp1ȕR-^ӳfNel0WTlcpwiWE L nΉs`\jmLL{j9OjYz Ȁ_]Hy[_=z}&XǥܟF'-cw9sZhYWrZٌ݉| !=+?+ѷQ4޲n>j= $2ZU  I8AB"a'9V a|?30HT]+WU/ fC$sl8Qt.g>0Ƹd:XBh5-E"]vI,L'Bh|*08B fϕ]@)oBa,dBXC(.yT> 6@ѭ;` dԚn$]o#YgPtw0iտ -pW e%A:Z hE=X95C&ئD'NCDLģVWTNzZ#`a͖eF RH)|UF.2Tp=8m^c˃IpGa&bOZvp y,`G?90S2\a93pФH*m\δr+bҾo9O*?^z:~.jq\HtUyR4B;Ƚ_;wd@(w?ӄz1߮E-~yĽ>: "el^B:$aPR7ZS4;IYk,*VЀ+1+;KWPAa 'xAL꯫QzNNnM%śDz*C:3Xxh@ zMD%ЂZ"\"UHDŽ`_,UzeV!K-1oW[Ư !1=4̴z L 4'ǿ'G5Coɞ{}vBKs$Ѳ@.ۉK58GJ(JwlE{89ڻ4Iǭ8GZ&&vHr\ s[jknKT511Epw&^.lRv\ *RY ꏜ!%U v\W bq|,n1i&H gO\>p$* ǐ3[j Frl+>q{Ȝ҈WX9 wl =5!x VJh">w_ÍBP'Yl*,PE4 +PזZj`refwvNmU7w.UaP !]4 Sa"cPծ"T.7СI 8e9/ Jq5U/ Ei\Ҩ?=ּ߽߳Xu7 6p4BxzRTnta!%I1|G43W> 7Ѵb³VVrDж(G!L̰J:c }R\_qTP7ՇmSʠ#Ufc4NQx 7Ա^>sTs$zE.>}(_~gSņ }=ٛEmQ$/ Cc W䲗gzhNpSLE>߭)}4lnBY"'weTB9k kg\}GgZMJ\z]b,:I >{Nf U[d[Nj%aCoRSƴ9,ySbb򋓹Vr:qP@rNsȳN214o{*U3samyA(!)Hwcf.3T!7/Yk"T8#"„ u&B6$uRcчb^YK.A0 Iz4[;'9x.|k8KC?!y# [p;"7ŷXe,]vѴ'7(ɬvghz_w]؟wugEՏ[W٫L|F`{E_e=ۍ[%#hdyC\PXJ}ɑPBZ N\[fKƂz|ILW:k]Q[䠃{ƪ@,}в犫`aj T[a; e 5CqʰNbl߂&3e֎ÿKքyc;ZhddzX tmN2r!'rsiJ  N!^zNRѱ}s:ŢިriLI{%LRpA걂 -㽠;+v c'ksrli´>q ꯠS0jŠib28J-گy+w`'+oC3'6x>&'_/вВ|f]a Y5l;V,Wt5  Tqg5B}W#"V 9!)YQ&Vs#ve֯2ny,SȧhsS.b}Lj,4v < G(@v2,__d¯J_蚭o7O ;@M OJZzExv3lwdOZ_B kA-{|%{(MѨZ_3\3ѫ qywVTcKK׈}}FbELc8 g/˼qd3#73 ~JP;5$~2Ѭi~oK?⌴.[Ӷ-Wg7QCu/IoإSwOT5#FNvTeBoI4ޓƱFQs^U t^R)w de߷a!L?atKZ<гoxrM=%y6<跅KOH`.2 9$'&~/YQqfC0L_Κ6.'xmaP^@SJZ."I].a>8hPȫpWmFcn,62n'1Cԍ`f vkD߲JӬ\`lNx4p Vmא :cH 1e$:ţ\4 ԛJ$mI넴иƹvs8\} Y(ki 9!:}"nɻIހBvr);CJNV3R:wN v2vAe`:jqヨOz}KW,t$QP丛j&8DE\D ʫIx+#JmZp5`v"M BmkU̗RNUHrAޖv t/Ui ȓwfmso^(WnY)-vKa yVb9~zR.&|WBtQٞϨg6zDw>*9d聀?v 6 .y[=S"(TPpL4"齼ySQV4 f$Y KVϴzi@(B:ښB, qUإ1~Ap)g~v/G̲3BGAUbاu.C2Ԛp7ԭbYFB#tqYcvAMx1 T|-ol{O7bowO#-fuarp6G0" )U@²JLaԝ MJ򘭣'4VV ݱ\h͍ |~^'ܬ de' ^LYU #|_T U{P$62Y7w rEKrJ&SbD=Bu 6@肧jIiAF٧ȑ j0o2Ͳ^Dz-xS-,<ǡ!jĒjϛUtdYH%ÎV3ȗ c9Bl) %Y4]82d]f,QgΐkQߢa2s!1"'9]ԼI elJ#Iv.0h8wgDMN4sGD bOV#LsR!rI,hȚsSmIuV<WVb! (O7 i,gm];fk 'NR zMXtvzoBU:5{N^5 rl h  =gJYI SoʾxU_{C@$#>O2O!G48k91 ~w%9zRJڨ̨Tv d41n8rD]K{ -U&hZYϐkrFýL^4f-iSYv/>TC@ƎqLpdPRupw\^u?zP`8⃿]2Gx=8nltY9]i^1ÐW 2Y*RDZU' 6-I](Tl2HSVUE@4]4%zR[91읦3}뒁TبAj9@ ۋ&4'L_#$`{ ;%%^q)] p2|sCaT.Isr)R'̦yeˠvG#۝{ yCPXk1 g@X_(-Lۨi!j%Mqm={+ X K&%! @ATu+R=$M\ rxkF2\ XG1}HJU}^ a0p9S2jڽ|{Y3P0XIّjAEq?A:qFv+9戋nvs<;XOncjI[IVMY0Z#O揚qo G0oA[#A)vSL4)LYӗgb3@ Iul] 4ic{5#N80M{ ג>tu ͖'?eЁQb~_TCG7gwQ<lI=>Pc?bP '"MߦUqH;҅ =U%^., `Ǟ-,r,! d#gL>#X3F_Bz y浶 ȦƶAz#vYs cOq̃cW9ѕ{7]6`F/qJO-qjj=Xvf6 H#Dk4'_"ckW@^79HX•-α|/r(5DoS{ja:knܰpCc0ߌx$N~t ]EYGVde09T'bzg;(WFw! ۦ8ؙwsܬ7p r@@p|ߠ4h~D**sH@N>V-Uߵp G |h-ʄ6-#)_Б8 w^ {0n0IqCNZgo:pt|Vnjxo ^~, 9Z1ѹ#!R2a zoC1f>["4a{Y>^]<|rD]H5&vb\Eu\B7K)<݌NըS&d%z뗦:rCOdhM4:"j wiECS`%I2ٶ uC+URfL0g5+n$F gw1vu]?8@~cVci쪒EK(n}–-H9SO{f4 Sì < lbxcּ#ZӌWڊHj#`ihjt( "5,6qF۲pg[C5*& EXT$}ÚAhy=5GzVGӜN)rjZ#=u,|b3$z+)|zf^Ŧb0ZDlPɼz#*M3X|$P -EÑ`@ !Iu0Ú#dZFh1 niqyLb {$yJ>l$yhK2.䝦;P"_qvg-f\s !ZPZ6И1o}nX s' ?y"֏;wL}d,--l֯!c|Ę9g6Mb>8~qM$=)-!_{N$PbhU^0ùK'Հ<&MNCG_ [HWWXcp{F-tdm^P޵菌0_0_t+6Bh]L=JwVNQ/:oh<5|f?bB0UcQcʧUG^.CQѨ>(۷넢Ahr/Q-@($g\l!5}"r[P-3'ə7IEx'-;IN 6x@$%_QH V4z4Ea2i38D1jcD W=_@s!egeQLե &>QNx213t?+jt;,.H=SbznȌZ&z< ]첍Z%W4y%یxa4-^.|o4|a{=cw)U;hSnXG_OSo'iҥ޺>[a[u6tV.f4&X '%6-Y8)ach# M܍ u J]lBO7V*VG35 [^.0cCTcӬ>З=SrW,ErcoC Xʶ f{sJ`ր㿨:t0D=r]\ަL56ۼݎ,=p E|Gt_fGE-@^W`g8ǽM-ü!bnX|wtN䒂n RCXj@~w1iK B-V5qRWWÞ$2"+s$Ҹ5I ݙ{aq W Q"u8!Ut[@F4O9CufQj3j\rNMqԔF)fM {J" QH3ٻCe0m }vδkj05|n+=% ۪j~z^$iyٽXM>0:ڂZH5)rbw;}w{-џҼ`;Yއ)6UL3;>5(T~lh)&h.2XM) z PXV1tV%(E >A%́8e^cNG. e\nIhBGnw-9ô,|oFCDr.sT@!%6 Jw2L)^DvuHbeC bi!եYxc!C2J0] URʋz9ҞI=*^a<a+')$a?Kό\& ?Fa[^\Nd~v?I#<ŝim^D ϥ{ʟWm.#W HrNOĄrA8At+h~*PY:ŏ}3Ƙ5u?|%W3so/Ek4'!0mvAz~DM^UWZ*9p>+N碬qQc@+Jz oT:-_D+)UZ4]IB\ W"֗8B-B?6zqK Q8oܺktH-p]ꉤh^u͛g(e)2>aRdR:5"UDWkֱt`Eb!~͐ˑfj>EyPbl* |;%U<x[iPW9 U$w`uz{A+,ZWTf.K"xinS3y+WK:zV#\tӜ.(ّM6ݍ%"+rP(vChA7͹~4ÒȨŸU+Ûmk$zN.0NR6sQ$] $Hj4tQ݇! P8.TN,"L/S=j(&}Ğ79]cN,8,uyU U3۰uPͱq]n)2+WT5 om,Tָ$ƪK`@Tf*S y: 瘛~X:vřיpX/PhIW h BߋuCHR{jHG&K-G{:sSS>S~ I^F6n}}3-iurn&8GfˮHCr46jמ$]jG=h"x_cs$ 8,hZ Y;o0M S\^~uQ(38!1(}"-?y)l 1ܨrfJ al`GQC/|ܽ@4 pWgo2ox_Ϙ 8Ř#GnɪcJ5'XJvL4+0/xs=yѦL^28L̅EJ߲wz"Z,7k1T`$\ڿB;a9ݢs εl"N2,RTS(&L5'ɤ:WeHGM O#/?p!CE 9|$M \THS %|'YAO$%)}W #:]뿍4 h-)S|rz5eHYMjWjz`dTzpGM:͵ [%cP6ynGzt#!\jED 2EJ!Sw7/G3M lև6v}2o "t~ ?{t ̽ P$YVTKLfA)ki!2OƅdPTN`A; @zmwyX8#ol (Q5plYى@a]ܘ1cIdӡ˔*lfPmplC֛ `*0 hj\t~qT,&,֔'_b}9LfpfzğԎb$2ەs|}}ȧy;f(ܯS}ۿ. mN4.""#\J$ qD~x~fmj)9R@:؀ ޕ9͹c8K{&z͐ pb_SKR\4[\FK{K x@h;4aeA'L5 1&: zSCİiy qhRH kTaVk,:݌!@ z I LiuZ"%\M+9P&F2[yF驯wQPv"Iu EcXݗ O7 -j?R-0A޴M=KDyRO%6g%}UGǺ $}'бv':R v໙0|^h퉴 c r%?JqҐrG]23ѓ%|8T@~(-&h i7̓lmVckb#D(|>Ej?PL~Y=<ݦ9X\~+?;gߠ*Pje %Az@sEݏ< "9XaѠh{ TQuZ?cȱkhJ$%NVw&Q^_!ezOP."ŬA0)«>f?T` עL<.{V_t x] $cui0-^ rįУ^Cp~ֱa{ֹg, @h L-޿t!/2\UcAӕwcw@kUO8N̐C$NϠ#>C/aLK8 8>;}.Qd G_򒫨 ѢZIйm\.,J.8"^\| |JC6Dh[cm8]mI?8qŒA+M@t=~͉ƁѯKB0AQs_UǠ*834p 7  כVS^Ʌp9Nܲp()ySz\]qK AN@$)#(հ&bDr&JcƘv*]`ˏO?|+p)sYd4"&,Ji0҅I5L7HӃgΧ4\pi`s|R2/qְ4E}&=J8D\zXi\ub;8R;Oڒ2hcΑw ~וt$^$gD8O*opX0!.חRvVb#+H^|Pm0KS[nd+RCNPS>VgtDCtRa^RHDUOY~A4H}̮)zލ v+R,~2ڋޞVXkMr.a [~$$Џݗ#R#\jWa&Eۮn}c1TT!OenS%afGqZ^%MUOp\<`R=_&AZh͵oZ *Ayv>(VQ7Q3MU3? 'r"ZT77ZUH]|^r+O-6?)ksR}@gŴi`'{MxPZEbAoC5<]`lRm9N8AY24Y 7Xj%ŧ܉wS~='pԖ_nj“a2˚xcmi!: WfPt>=m|)fJ3/Ik#"`p])[q lVܚ9AݤO-nb!շP#bΕF [8%kBW!A.Oifdz-po1nF%wx},Z>7M6P5m:y)}e]ie,zGlvDTjiHgOKlZg"d@{ 8kzo-R>n%ɺNyT]\j-\v!,^} TBq(Lc1C%ï NӰjDO]#5f>P&jwAm ,jlKWFqr^I&*uV<-\6wBXMNK 1]#l(]L1a; r IWP iDl)QHoD#U7<eѭL)L3睵e/5L@|;*[qD9Mw ;( xb3|pʯXnלԅZ?ݹb1)i\}WaFDs';W_Es\wq"yv򼱹R2)ǂO3CRG)\\#z `]G?&P ZķvXiׯʴ>=vp!/2Y~G2OeJ;\Ϯ:_/?覼"eZwmAа _z(8L\Figw/]^ s|s)j/:AΣOz+@wz `am6&0%O,Is< 1Q+:g IQߦSQ, "B{V[ OI.1Zu5{+}*(7&mkG֤ D)֤-ǟ&BunUӣRwxUej JL q>K4Dy*KM.(>~ jq}UĦI- :qXd&;V-U@"o5o?T"8:@mҪ` PtYX3+Pܸ DH9*jļA% GV~i->,Wr=n4EN…Ь7Dwlbػ )>sNʷ*u8߈60g#C #A Ie9?r[b :_vi0WW2<-b2YL?@o## qPb@NR&Ia!K$rL52r,k ۏ?r':_OVCtyԆ|563.BF&XHhksh)N&QsUe?{GmlgOEC>NlfP+0P}:B,Q`?^e51v{m04S7\@V OM4v-Gau edlK$2Mk#M)}{^$|¼@}@ goch(ښyI1%[nAfiء2];0f*-$c`N)-jqg_yn ѺE)gZ0aۍo8äxQ_i1x"uwc^7vs <:lWlBtP;7ْPj\R∃ȴՋrQsO^F$5?U)9 dROMU*Mal( 9܌Bi '-!NͻC#zGՂ7qn-I## ]'EL!e %{>MVX(.1!!{񨥰ЪoId3.l'JYo ]W^ . `ދ^Ai4G/6Aj &܁V--dwFhPΘ_X&m;<`^~Q% r_a#[0{ճ~BUwr ]5_#:c|bnxPH8Z?NwAi+7ヂ.-h" Zi?Ikn2](>c L:1-P_m4Xr paqP)0 cD>?ˮwZJ(i\pa>&s ?S*0N 2(ya+>':Mw.gBY\;ϳ ˭eHt',4ug|У؁r {8c>-K5@wX?uT$1c1#8]\ )ji$3P*xtVlG%֢jH#r˞hvc;.- %H*8Նyϼ% c#7#h; HxٱRXXrX@bJq,H^"m}j0%EY`]qCN9%lu(\`)735GThZڐnEFԈ֑cKs WA՚I-:Y9 3mZJKFXz2^RQs/=s7D-ٜ@9ia7W'g!fbπ3:QpƘ&>ScDFG4 SI$<8šp$/D-Km+ӽ B%DZ+tmUKY_s˨( (fPP@|#f /=e~_DҜQY@.Z [ƒhP*"[$|gg,{4q)|lS-QВEDX>a2^"&&z-kP lqH4XWZ7fCbNQHnxX^! v&;iK 5,mtt;Or2M}[4EGb(CADFዼ)Zy§;]~H5_@3vYV; acDRzք)]1CE:Zå6kpݵx+\HIErhhWo_`v:x "z(>9hs{@Xqy P]!HKHf<^qYo8}%jr'u?D Y6n똂\3m0ZaGWͨ.95O7P vCD7Vϓ> |o$b;U_eDI 6,+{?Z- TPjeؙZc w8p #uTh]*KcnKv,&iLHn;$x[6wSWL}!d8726M/젾qwixˡ\Xf,:h^o]lUFD3kNUDߋ_}Z.mtK깗w7n̯WА 9RZ_bML `z8r7tO"7mvjt $ZXf|]c,} wR>o5+;*B$ƈ?9d^=56yV֌9-cK ZS(o &^lIrS][.4atAo g_^x yQ!P4)*d4p|W(h`6kmmC< w~|*a/;'{! hy=>+%{_ \j)ĶÀ)-1Jpbb' ߅G8Nm9eaP!6ӎxZEDwRb+@Wr<e߿]XWeW`zt@-}nLTͭC,Ҋuy p Bd|~ slvb&suer8\1:` N}2~߶[kygNB'7Kj#l stRa֏qc&7"J,]l=w쮨cC?lhI!h8s83qVƖ{4N~uBkfx0B$S68̊܇bԺ?z=НP BBAf"-tN;J[,|9InoCeŦp\lKl_|Bn]B:sç"*7_ϯ3jOИAoOMKz4v2]eWZ̚lIa Y;[lI=t'otn:*TwbM3ƴT& czP PM%5pa){+̗%cU6x*ArXʟ'pmkέ8I3D%\v,e]0M`?v@ކ3:f(Ռ"^;oOLQJa OaS1yHhc#(#lFknʯJc+m- p?€*0H3dc@W c5 #*nǫH0}g/%bpЀzɎTpHEݰbaRmmByjVh7,&Ӡ0XR F?{s!ً~Y;CP'=w~<_Z!ݾNs2- v9S:8~BK{S2i%IAȬEݚ BǝTD& a6.^q뀛h9?x g+lmnA 0=ş$Q^"qcdQ?|sȵ$v;߬c3R hK9XV-ɿZ.X|@ Jz+$Ums8Wg~N3}$ YGd]I"Tk oBa'Vכ[TqRaAЃ!;Etkg1CDC&d5~c h}f 7Em#M>>n1db"B58Su?SNל{?&1WB- t"͇#9+ Jn/nIFԊӵ2H+ZʐIP2=9>T~J~kwnо%Z\} z0'М/=''eA?N\Ďzns5?727\X0bS@5?T9gfPKL Xj ߥWVJ)}3dֲZ}׋!"IF ƾϖHS^ijVlʗ) +}{ BObp$wJ9 W9$NmgtrlEU\&o2wKRH|M:{j}*0b]KF^COR'>=j_N[<9ُ Yx#r̷BAӀtoE. ^f99m@` stG'G -^TvFnOC@7Yәn;+~3| i֡UHy)-%?,f]kc $K*IȆ6{;y"noe4 \Lng\/ʵy.( {Epԙ=gӳO,zFO_*FNCЁg^%pvO1#QZ 1c_ Uoa, Za WuXKTLVXY̨bG#P4%s zP]{Ǥ8%h&yfr}lOgʉay= r^'<Ĵ-z_E>6W|dwy]Ť泀V&IVNu?g0w8pKu=v#kcLt``-Eh礵M HB?:0yks-Bw_1w^!'kԂlDB\0v P2.5baz:3ii.|*SEbQR ׸~-*54)ɔ&:`f& @BrdC'SS!|ᖌRljQ<1ɣw\+o~V@bR|uTP u41TŮmwjJ|1Tri9b̎fM0tw<߉kSR=qVU8s$z/ԟnmC&BT8[~ce.#kBr7\ǸiK@-h.D\åfa9nkT}$=FY5I!Y,87g]@VQhЮ ?ʾKY%rlgØ*IA^@ ޸ͭxrgכTDBp}$T?S!|Ё\]Z?a;lqMΈR 5Ǵ0)RI  +Fi1Z0?S^)W[Eȿ<*y,EZ~Syqji&~5IY]'ٞ96ϙq;| 'ZGl Dj7^DIq9$CA;eݱ66= _CE^Næ#V#e &AIodK1MԱK#w4n߉׵3>q@hDz[|W}eZdDT Sd~/I H1!_WB!Y\oRϜl``ЩȝPN/%!u·TLkˇ$zۄΫw(0dB37y?(ۆ/#=T]t.Sb0U7Pr0QniS5'6b/VI߾lYa4u J>MU'gMj7."׏}BF(HI>_jO8\"𹣆%W_圮| jɳrƝi~-HG`IZ:(R`Ub XD(D['F՟A?M\Br&)wOVQl=5Rl.eO<<VjC}Nl˷`jëo8QHgk1y-5yeM}Q1;?b[싒E *sLbq)|]Ua2@qBzߑ~0Ue=2`[;:ұǮ>Gt&8mF}n\C]~\_;kI~C\q s;|ѻʋqd_m]bF"UK%XZ%]* dbB]/0s̗S@ ߲M7׎k/^)=WL!% G,r6?Lҧ) xes]?ad)SshxH5]_[8)Ա!n 1HФKd=\y(Wocn9鍸q,"T~k*)䮢w#\B9ښD‰Hgƌ ] YCE`l!REv0iQ>v]+;W!(Q.ٲ@׀FXH^hX5CCz^Q]oй9ʔ\WR~αFYbn#}/_Ao=Hn'Tf$6KqmG8ꇚBC 9CbJ}\Vd P}N90N &cSTF84i@2sr^z5P;Nd`NX0c 'tb ?"[%OjLqbe$NP ~xOkeKELMEoDt:$='L_v`]ݜ(ٯ {vVZU|=k3H><أ$qh}BAF">҇C԰4JEg d*)īhD~ʈ ^Mezhk6!-CEl5͌ ɴ1dPT wHcbԛSeh;-x*8S؈Jҍ04G~ɷd&|6k58i:* yss;wԎxXI"NaXeK]>xwt[JM tA-E TfKJQ8䬾ϓ~U$*Sl7()&ZRnQnr}Mf&Zt3 T6K(D 9{cK/9ܕ'nLy°ҎF]`XС&1 }#-!oc31bpƂ[WM$c}Q /Y+;:`Kz}6+ʝmjzm3JJ [KUjˤ@/8tDZc>lwg`7iT?\x9TNYɲ83DEh銘4j\SZ6 &(UW zL)S>{@6*9l9OkUV뛩 /n^včE7Yc>C Zk;xz/aUHd j԰\.СLO ct&1?f884Ӭ#4YVcיdQ Dz@uzihʽ }]9)vK@!JndU30| yE- d'B,R54~婖1k*~Yβ cqQX7 ([YFR\S&t]ʼntXt(iz<]/PQʁ MGkYm-u>{0wdN! ӥAC]o6wYAq JǺ,&h8ߩ*T:v]%)-wO\2"sqH9֌>=BܴM/?̞'ơWU ggrQqLh9LQʎpxR@E"fa%M$G-H(L75#X ".eZ| )O|c_\ d^jt Ĭ֫7OC:/qM{2dذYIFn8Q2"1_&MPZ۹A Y8aJT8IHC)OxnZ`I4фPI< zVᠵ'yEnct4;:4Vw Pf l\5'>÷_mY}i! /ŽaZ8?hgF-;^d7?a(դ)er$ݩ |7U\Z}_UiAL-߸ʧlb睶YŀL`ݸfW{k HIRW|J;):RS>b-=kӞ/3U:@/ȋ;{_#:$QVD4xƫXjEFSv4,\LoY .yT?~FLCFlLj9CKvRK'Ӱ/jΏog?|egEgWQLyq8vId"&94RD9fhq<2sZ#R&iT#5 :vؓcm ŘK6w ~{kߚ2o3>=u_RuT_dbH fj/OL`ĺhOER"s˛ :zq Ri$܌ qS8VzXC+pG<Fq(ʊ׀8@h4ezG@xEPߟSYmK0 _Zcu E}TCƃs*g'sm35zC 2 Ā8)ܿBz:ZG.s´XfXRQn9\k*~r"`s@N o9‹B!n&Kf1l8y;qZ#ro6T5|>^eԎ"vj'ndHqԨRH>Vj [<|I'f/ާ06`ʔdMq}\#YKXgh[rz Nt0m6Dۦpqʗ ʸC0?ڗ_m\ăGq_і!rR y&J'oR{.`cGљDώȬJT#ˆ5P9o%JLM7 <[>^=6/ ZL^4ߡNF94̎䠪=t̽~vc @skq(G(ƿAtWtYB':Eߺl5au v Ysy&E؜y#&nGn)X/S>5v8s(X}2x,a)@( N8 " #9S@TXH&|P j2~D<mgA0&g&y2y/Xpt\$Zn3.mXh<-bd2?-ȸjpV>)o%&{3ZHM>"ha*U5π!SqdL"_?%4C&Y:]rj :-8W۽i}Zhm4Vkqi5NE=VzQ9^?I#4@w u!C䕯K[L2M4,v 㚪ay#8fsR0ER8*7r?aBONNhC>BurB˩S./YG1S "Cg  @<=h7OLe:ǣZL1Cȭ^e9G@e9w98kbxuA-(S=GS$_;S~PC$nK:9tV@{}!)o1/YON7#]p9]LǨz1PG5u[ *?PIVςH51z]b"BXڲBxI3Կ7h<:GEChIv~>}h/nxwTؚ h~$<2ZA2o}2g<73"xѶY_Pɨv*wißzfe.~2,$r,Owp++Nu,.эA`^M:*20^._ OmHp-r;Hv2@殦 /#`X)g]"%5":h$IE9ʣ ` 7p#t U\/K]-tǁ];x,^I-QYט<\DQˀkmFI `d9MԆI_w1o6ܠn!`&kLb OB>Eb2L6MzS?l(ZhWǧ~3d)D΁\M0 ;fdHC?2 D%y$=+0C$~ _brMBUnXln ]Te;X9f)\~| 0Q'ʸ(i<ϬU&c?3糳mfVۑ #{a+IͶsߖeXjjq~$zDϥ#G)nR1ÞSm]}&!ǹ_b[]H@hͽ M[ڎERkc؍AǺƙyuC\WdfG?飼:%)QZ >@[H0)Cjȯ%)}Wg~;3.[RhdZ5d?πVBSO~n.( ml`b'-@A0Ɍ9v_g4`M&[> 7@+0njEwsRJ |CB̢bs#~{8T1#6)̳WA32hx eWKa{%=Xf;Na)(H#~R.&* ߚ R7r)1gm飋~~&|`G 1oFaD1"/%ZM}!ݪ>:(`Wͣ|iSFvƭ˗-I<=q`ُ;83Tf%"6i%4ze1EPZrx1+p0*[tςjf {XίatmKTҞ[\,SżF鎑` YYOdp:h*'aF{- +1Ww'8êvV/J[ ʚZTR#햙ӥ$;TO&h8)mSգwm8(⤂"oHEo&,0BB)ށ8иi4jpܸ܇^!.ue2˘0,AL}nܻ V6/^g(1W77e`,sqesqQܙ/G/:IUq|E}@Sx\ hMl.J.ww4*V&LRNz^*t_ma:1vHӷR K=!I!R=7՛IKYCh[fyj26E={ўPyEVAzo %Z-(63_´9}b)!D3y6ȮT1cSf&[rM{h .&!Y ",,eqz@)ү;_7x 8[j?_-AנA-)}=e2v@Y M@YD]ykAq4cF4 LJL'tݨ+PjOS^O@.7bs*L .}G'l8"fbEčQHˇxt"2-m @U!7KY\={.w:1 +@LjIfAa9.w_yFy֬hCbQ͌^nN1l xC+珱TB0a/)mK55O$%1*XLV>7&𒪈n $. E?c4>CuVƴ~W(# "Y<؇Ȏĸgp=L-˱zIhX[M䘾58U722VKт$d=A(nv> %I'[ጯQB ( S4*넴l `c2FY缦u4+FSH$CIbu8IV;,ڶTYE\aIrr(_Rp0{,T-׎NdwLԿ!Jm@F+gU/lc@;Ԧ0* L(5].E))8*H+,=f`(T41Ъ}de^tȊ5"E4ӚMAAkHxXz2T"D&lr/L$J݋5 wqsf?ZzdfzwX) c|,MSz sn),.؇TvH ~:IYM!5*>aL!r ,o >LpQ`{Ybd撎V7kH& nm6'Dfz*{>Nvb2Qܧ> xbT|mH_ TI6$p|>r"9"ɮk!Ж|edE+8"Ch=߉32;E\՗ J99r25T*m|= &I!,q$8$ gtI-xSa<hE[2+u6IjGcTL1X7/"@A&b\4?U~C>cș ZG(͛t翣 nʀ5~RI[\^U0OmzYlzAz \M}i\TYjl3VuAczc3ԇX! ("OY!<̤?fkAtŝҀkߒP`|-2N+dj$@aUvq4,B{'#sn>Jvu3f܎ RX5.x2ی;2@(뼹gsbZ-rvkHbx pw }t8 _ڤbtSOBXCXzi5m:^\r^5p}_RUF}b)BOZ1p3?\r`9 ~~b8[mY\a:3)t+Q,+K7J~DCh0~yq(- R V.Si4~p(u&N 1Ј 21gES)mqLwWݣy;˙̿{W@cNUc&Q/V* "Duu R_9:^9>dikIF }AQ}q?C<#da5(k!A @ɧ)W|9-aǏt5U^VOK̭rAl:MS){p)]tNYAKH=fc;~7w{Y+aXA㋘_}+=:rX=:} L"|O}0qĘ7@Ax6YpdlE'4>j=lGk;EXjuܠ^5E,:^ۦ'|nTaȎ]lraB(Z臂&ĺOT 1jtSi;:g`GC)&SB^m_u5O+y4Fj\%֏47S|׫Y{2e%U3}1pMWJ@#5^,f8%꧑U]Ħ~Klō\w7GK<}aǩ@$}%VAaW~{dm񪹯6ǻC/TڭՅФkcp'N!r>va