libndr-standard0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 4>$  Ap[d}/=„HG;3۞ZRs2Cޑ$ݿv#Ctw"ͨ}lMx338515562acba97438984882cac8f08053d3ef7fe9d9ebb27dc51bb672e9b3d2c37b3f004af22637ab3b8b328de7048614d4c42b [d}/=„F$%F{&'zP X"aھ|q /'{5Hٟ"ݟ5H:""\*@XctJJM`<VKY-่-ܗ" HioXXtJsצYe_7lcbiH,0uf"S?D# !5iML7u}}c! +`,QXzhYyY(Ւ#Y R@jpJ11w< ?gJiŇضvfѵAuf1>p@?d, 8 s ) BSjpx     <DQ(|89d:=T>@FGHIXY\(]0^^bjcdefluvwXx`yhzClibndr-standard04.7.8+git.62.c1052da2b4elp150.3.3.1NDR marshallers for the standard set of DCE/RPC interfacesThis subpackage contains NDR encoders/decoders for the set of standard DCE/RPC interfaces found on Windows and Samba servers.[dbuild841XopenSUSE Leap 15.0openSUSEGPL-3.0+http://bugs.opensuse.orgSystem/Librarieshttps://www.samba.org/linuxx86_641X[d|[de38cd0751de6437519606183eede5e19e6f9465fbf7d7598233fd4f7c3bd6f63libndr-standard.so.0.0.1rootrootrootrootsamba-4.7.8+git.62.c1052da2b4e-lp150.3.3.1.src.rpmlibndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr-standard0(x86-64)@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libndr.so.0()(64bit)libndr.so.0(NDR_0.0.1)(64bit)libndr.so.0(NDR_0.0.5)(64bit)libndr.so.0(NDR_0.0.6)(64bit)libndr.so.0(NDR_0.0.9)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.7.8_GIT.62.C1052DA2B4ELP150.3.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1[6@[5@[ @Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USaT5'@T5'@T3T12T->@T->@T%U@T$T!`T!`T@T@TSS<@SS@S@Sہ@Sہ@Sہ@S@S;@S.S@SSSS@S@SS8@S}SxSg}@ScSZN@SXSO@SM@SM@SG@SG@SG@SG@S:@S:@S5d@S2@S,)S L@SSSS@S@S(S @S S 4@S?S?S?SK@R@Rb@R@RRR@R@RRRRRURURURRR&R@RR=R=RʚRʚRʚRʚRʚRʚRSRR@RjRjRv@RG@RG@RRRRR RiRu@RpRW@RUE@RUE@REs@R:@R6R4OR2@R(r@R%@R!R7R@R@QQQ@QQQQޞ@Qޞ@Qޞ@Qֵ@QQo@QzQQɆ@Q@Q(@Q@Qzl@QdQAQ,Q+R@Q@QQQ@Q@QEQ@Q \Q \PP-P-P9@PPDP[P@PѬ@P @P @PPP}@P+P@PP@PBPBPPP@P@P*P6@Pd@PoPoPoPoP{@Pb@Pb@PWPWPQP,PPP H@P H@PP@OjOjOORORO Ọ@OȮOȮO]@O]@O OE@O!O@OOO@O OoOc+@OaO`@OKp@OB5O>A@O{pw,gr}ent_state; (bso#13293); + winbind should avoid using fstrcpy(domain->dcname,...) on a char *; (bso#13294); + The winbind parent should find the dc of a foreign domain via the primary domain; (bso#13295); + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400); + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP NTLM2 packet check failed due to invalid signature!); (bso#13427); + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424); + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407); + dfree cache returning incorrect data for sub directory mounts; (bso#13446); + Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN; (bso#13369); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + s4:auth_sam: Allow logons with an empty domain name; (bso#13206); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + build: Fix libceph-common detection; (bso#13277); + build: Fix ceph_statx check when configured with libcephfs_dir; (bso#13250); + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async; (bso#13297); + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + smbd can panic if the client-supplied channel sequence number wraps; (bso#13215); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + smbc_opendir should not return EEXIST with invalid login credentials; (bso#13050); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + libsmb: Use smb2 tcon if conn_protocol >= SMB2_02; (bso#13310); + subnet: Avoid a segfault when renaming subnet objects; (bso#13031); + 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:smbd: Do not crash if we fail to init the session table; (bso#13315); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Bump vendor-files - Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);- Add missing package descriptions; (bsc#1093864);- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2.- Rebase File Server Remote VSS Protocol (FSRVP) server against 4.2.0rc1; (fate#313346).- Backport upstream master fixes for samba-regedit; (bnc#896536).- BuildRequire python-xml on SUSE systems only.- BuildRequire python-xml. - Exclude unwanted texpect binary and libhttp, libsamba-cluster-support, libsamba-debug, and libsocket-blocking shared libs. - Add vfs_fruit and vfs_worm man pages and ndr_dcerpc, smb2_lease_struct, tstream_smbXcli_np, idtree, and idtree_random header files. - Remove nmblookup and smbclient4 binary and nmblookup4 man page.- Update to 4.2.0rc1.- Fix small memory-leak in the background print process; (bnc#899558).- Modify samba-regedit so it displays correctly (related to ncurses). Changed code to use menu sub windows, seems to fix problems with display not refreshing; explicitly BuildRequire ncurses-devel; (bnc#896536).- Exclude unwanted libdnsserver_common and libdfs_server_ad shared libs and the man page of the unused findsmb script.- Skip groups that aren't mapped by idmap_ad; (bso#10824); (bnc#897969).- Update to 4.1.12. + s3: winbindd: On new client connect, prune idle or hung connections older than "winbind request timeout". Add new parameter "winbind request timeout". Please see smb.conf man page for details; (bso#3204); (bnc#872912). + Fix smbd crashes when filename contains non-ascii character; (bso#10716). + s4-rpc: dnsserver: Handle updates of tombstoned dnsNode objects; (bso#10749). + passdb: Fix NT_STATUS_NO_SUCH_GROUP; (bso#9570). + s4:setup/dns_update_list: make use of the new substitution variables; (bso#9831). + build: Fix configure to honour '--without-dmapi'; (bso#10369). + provision: Correctly provision the SOA record minimum TTL; (bso#10466). + s3: Enforce a positive allocation_file_size for non-empty files; (bso#10543). + lib: tevent: make TEVENT_SIG_INCREMENT atomic; (bso#10640). + Make "case sensitive = True" option working with "max protocol = SMB2" or higher in large directories; (bso#10650). + Samba 4 consuming a lot of CPU when re-reading printcap info; (bso#10652). + lib: strings: Simplify strcasecmp; (bso#10716). + Allow netr_ServerReqChallenge() and netr_ServerAuthenticate3() on different connections; (bso#10723). + 'net time': Fix usage and core dump; (bso#10728). + sys_poll_intr: Fix timeout arithmetic; (bso#10731). + s3:idmap: Don't log missing range config if range checking not requested; (bso#10737). + Fix flapping VFS gpfs offline bit; (bso#10741). + s4-rpc: dnsserver: Allow . to be specified for @ record; (bso#10742). + s4-rpc: dnsserver: return DNS_RANK_NS_GLUE recors when explicitly asked for; (bso#10751). + samba: Retain case sensitivity of cifs client; (bso#10755). + lib: Remove unused nstrcpy; (bso#10758). + Fix a memory leak in cli_set_mntpoint(); (bso#10759). + docs: Fix typos in smb.conf (inherit acls); (bso#10761). + libcli/security: Add better detection of SECINFO_[UN]PROTECTED_[D|S]ACL in get_sec_info(); (bso#10773). + s3: smbd: POSIX ACLs. Remove incorrect check for SECINFO_PROTECTED_DACL in incoming security_information flags in posix_get_nt_acl_common(); (bso#10773). + Don't discard result of checking grouptype; (bso#10777). + s3:libsmb: Set a max charge for SMB2 connections; (bso#10778). + smbd: Properly initialize mangle_hash; (bso#10782). + dosmode: Fix FSCTL_SET_SPARSE request validation; (bso#10787). + vfs_dirsort: Fix an off-by-one error that can cause uninitialized memory read; (bso#10794).- Wait for network-online.target to prevent caching of pre-network failures; (bnc#889175).- Use domain name if search by domain SID fails to send SIDHistory lookups to correct idmap backend; (bnc#773464).- Prune idle or hung connections older than "winbind request timeout"; (bso#3204); (bnc#872912).- fix FSCTL_SET_SPARSE request validation; (bso#10787); (bnc#893774).- Remove pre-11.2 patch which by default uses the smbpasswd passdb backend.- build: disable mmap on s390 systems; (bso#10765); (bnc#886193); (bnc#882356).- Create the cups smb backend as sym link pointing to smbspool; (bnc#891220).- Fix winbind service parameter usage; (bnc#890005).- lib/param: change the default for "winbind expand groups" to "0"; (bnc#890008).- Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon; CVE-2014-3560; (bnc#889429).- Fix "net time" segfault; (bso#10728); (bnc#889539).- Update to 4.1.10. + net/doc: Make clear that net vampire is for NT4 domains only; (bso#3263). + dbcheck: Add check and test for various invalid userParameters values; (bso#8077). + s4:dsdb/samldb: Don't allow 'userParameters' to be modified over LDAP for now; (bso#8077). + Simple use case results in "no talloc stackframe around, leaking memory" error; (bso#8449). + s4:dsdb/repl_meta_data: Make sure objectGUID can't be deleted; (bso#9763). + dsdb: Always store and return the userParameters as a array of LE 16-bit values; (bso#10130). + s4:repl_meta_data: fix array assignment in replmd_process_linked_attribute(); (bso#10294). + ldb-samba: fix a memory leak in ldif_canonicalise_objectCategory(); (bso#10469). + dbchecker: Verify and fix broken dn values; (bso#10536). + dsdb: Rename private_data to rootdse_private_data in rootdse; (bso#10582). + s3: libsmbclient: Work around bugs in SLES cifsd and Apple smbx SMB1 servers; (bso#10587). + Fix "PANIC: assert failed at ../source3/smbd/open.c(1582): ret"; (bso#10593). + rid_array used before status checked - segmentation fault due to null pointer dereference; (bso#10627). + Samba won't start on a machine configured with only IPv4; (bso#10653). + msg_channel: Fix a 100% CPU loop; (bso#10663). + s3: smbd: Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056). + s3: SMB2: Fix leak of blocking lock records in the database; (bso#10673). + samba-tool: Add --site parameter to provision command; (bso#10674). + smbstatus: Fix an uninitialized variable; (bso#10680). + SMB1 blocking locks can fail notification on unlock, causing client timeout; (bso#10684). + s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap(); (bso#10685). + 'RW2' smbtorture test fails when -N is set to 2 due to the invalid status check in the second client; (bso#10687). + wbcCredentialCache fails if challenge_blob is not first; (bso#10692). + Backport ldb-1.1.17 + changes from master; (bso#10693). + Fix SEGV from improperly formed SUBSTRING/PRESENCE filter; (bso#10693). + ldb: Add a env variable to disable RTLD_DEEPBIND; (bso#10693). + ldb: Do not build libldb-cmdline when using system ldb; (bso#10693). + ldb: Fix 1138330 Dereference null return value, fix CIDs 241329, 240798, 1034791, 1034792 1034910, 1034910); (bso#10693). + ldb: make the successful ldb_transaction_start() message clearer; (bso#10693). + ldb:pyldb: Add some more helper functions for LdbDn; (bso#10693). + ldb: Use of NULL pointer bugfix; (bso#10693). + lib/ldb: Fix compiler warnings; (bso#10693). + pyldb: Decrement ref counters on py_results and quiet warnings; (bso#10693). + s4-openldap: Remove use of talloc_reference in ldb_map_outbound.c; (bso#10693). + dsdb: Return NO_SUCH_OBJECT if a basedn is a deleted object; (bso#10694). + s4:dsdb/extended_dn_in: Don't force DSDB_SEARCH_SHOW_RECYCLED; (bso#10694). + Backport autobuild/selftest fixes from master; (bso#10696). + Backport drs-crackname fixes from master; (bso#10698). + smbd: Avoid double-free in get_print_db_byname; (bso#10699). + Backport access check related fixes from master; (bso#10700). + Backport provision fixes from master; (bso#10703). + s3:smb2_read: let smb2_sendfile_send_data() behave like send_file_readX(); (bso#10706). + s3: Fix missing braces in nfs4_acls.c.- Reduce printer_list.tdb lock contention during printcap update; (bso#10652); (bnc#883870). + Only update the printer share inventory when needed.- Add missing newline to debug message in daemon_ready(); (bnc#865627).- BuildRequire systemd-devel, configure --with-systemd, and modify the service files accordingly on post-12.2 systems; (bso#10517); (bnc#865627).- Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056).- Update to 4.1.9. + Fix nmbd denial of service; CVE-2014-0244; (bnc#880962). + Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler; CVE-2014-3493; (bnc#883758).- BuildRequire krb5-devel, libiniparser-devel, and python-devel in any case.- BuildRequire libxslt and perl-ExtUtils-MakeMaker and BuildIgnore libtevent on CentOS, Fedora, and RHEL systems.- Update to 4.1.8. + dns: Don't reply to replies; CVE-2014-0239; (bso#10609). + Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549). + s3: smb2: Fix 'xcopy /d' with samba shares; (bso#3124). + Extra ':' in msg for Waf Cross Compile Build System with Cross-answers command; (bso#10151). + s3: nmbd: Reset debug settings after reading config file; (bso#10239). + Fix empty body in if-statement in continue_domain_open_lookup; (bso#10348). + script/autobuild: Make use of '--with-perl-{arch,lib}-install-dir'; (bso#10472). + wafsamba: Fix the installation on FreeBSD; (bso#10472). + Use exit_daemon() to communicate status of startup to systemd; (bso#10517). + Fix adding NetApps; (bso#10524). + s3: lib/util: Fix logic inside set_namearray loops; (bso#10544). + s3: lib/util: set_namearray reads across end of namelist; (bso#10544). + idmap_autorid: Fix failure in reverse lookup if ID is from domain range index #0; (bso#10547). + build: Fix ordering problems with lib-provided and internal RPATHs; (bso#10548). + Fix read of deleted memory in reply_writeclose()'; (bso#10554). + lib-util: Rename memdup to smb_memdup and fix all callers; (bso#10556). + Fix lock order violation and file lost; (bso#10564). + dsdb: Do checks for invalid renames in samldb, before repl_meta_data; (bso#10569). + Fix wildcard unlink to fail if we get an error rather than trying to continue; (bso#10577). + byteorder: Do not assume PowerPC is big-endian; (bso#10590). + printing: Fix purge of all print jobs; (bso#10612).- examples/libsmbclient: avoid some compiler warnings; (bso#10624).- Fix printer job purging; (bso#10612); (bnc#879390).- Update samba-pubkey_6568B7EA.asc which will expire 2016-01-17.- Fix byte-order macros on little endian Power8; (bso#10590); (bnc#871701).- Pass through vfs_btrfs snapshot manipulation requests when "btrfs: manipulate snapshots = no" is configured; (bnc#874180).- Clone the base share security descriptor when exposing a snapshot share; (bnc#874656).- Use appropriate HRESULT return codes; (bnc#875046).- Update to 4.1.7. + Make "force user" work as expected; (bso#9878). + Fix build on AIX with IBM XL C/C++ (gettext detection issues); (bso#9911). + Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942). + s3-printing: Fix obvious memory leak in printer_list_get_printer(); (bso#9993). + doc: Add "spoolss: architecture" parameter usage; (bso#10188). + Make 'smbclient' support DFS shares with SMB2/3; (bso#10200). + Make (lib)smbclient work with NetApp; (bso#10230). + SessionLogoff on a signed connection with an outstanding notify request crashes smbd; (bso#10344). + dfs: Always call create_conn_struct with root privileges; (bso#10378). + 'net ads search' on high latency networks can return a partial list with no error indication; (bso#10387). + max xmit > 64kb leads to segmentation fault; (bso#10422). + Fix STATUS_NO_MEMORY response from Query File Posix Lock request; (bso#10431). + Increase max netbios name components; (bso#10439). + smbd_server_connection_terminate("CTDB_SRVID_RELEASE_IP") panics from within ctdbd_migrate() with invalid lock_order; (bso#10444). + Fix 'wbinfo -i' with one-way trust; (bso#10458). + samba4 services not binding on IPv6 addresses causing connection delays; (bso#10464). + s3-vfs: Fix stream_depot vfs module on btrfs; (bso#10467). + Don't respond with NXDOMAIN to records that exist with another type; (bso#10471). + pidl: waf should have an option for the dir to install perl files and do not glob; (bso#10472). + s3-spoolssd: Don't register spoolssd if epmd is not running; (bso#10474). + s3-rpc_server: Fix handling of fragmented rpc requests; (bso#10481). + Initial FSRVP rpcclient requests fail with NT_STATUS_PIPE_NOT_AVAILABLE; (bso#10484). + lsa.idl: Define lsa.ForestTrustCollisionInfo and ForestTrustCollisionRecord as public structs; (bso#10504). + Make 'smbreadline' build with readline 6.3; (bso#10506). + smbd: Correctly add remote users into local groups; (bso#10508). + rpcclient FSRVP request UNCs should include a trailing backslash; (bso#10521). + Cleanup messages.tdb record after unclean smbd shutdown; (bso#10534). + s3:rpc_server: Minor refactoring of process_request_pdu().- Create a new DBus connection for every vfs_snapper request, to ensure correct snapper UID detection; (bnc#866354).- Fix "Invalid read" in method reply_writeclose; (bso#10554); (bnc#873658).- Fix minor compiler warnings in snapshot code-path; (bnc#873177).- Remove references to the obsolete samba-krb-printing package and get_printing_ticket binary.- Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549); (bnc#872396).- User error strings instead of hex codes where possible for FSRVP errors; (bnc#866927).- Fix remote share shadow copy request UNCs; (bso#10521); (bnc#870957).- Add krb5rcache directory to the winbind package; (bnc#870607). - Cleanup and consolidate the sysconfig and systemd service files.- Extend vfs_snapper man page to cover permissions; (bnc#870570).- Fix RPC server handling of fragmented requests; (bso#10481); (bnc#869707).- Default with the cache and lock directory to the same path to have both non-persistent and persistent data at one location; (bnc#846586).- Depend only on %version with all manual Provides and Requires; (bnc#844307).- Update to 4.1.6. + Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224). + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; (bnc#855866).- Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224).- Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665).- samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442; (bnc#855866).- Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484); (bnc#865095).- Propagate snapshot enumeration permissions errors to SMB clients; (bnc#865641).- Properly handle empty 'requires_membership_of' entries in /etc/security/pam_winbind.conf; (bnc#865771).- Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748). - Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561).- Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397).- Use libarchive to provide improved smbclient tarmode functionality; (bso#9667); (bnc#861135).- Depend on %version-%release with all manual Provides and Requires; (bnc#844307).- Update to 4.1.5. + Fix 100% CPU utilization in winbindd when trying to free memory in winbindd_reinit_after_fork; (bso#10358); (bnc#786677). + smbd: Fix memory overwrites; (bso#10415). + s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done(); (bso#2191). + ntlm_auth sometimes returns the wrong username to mod_ntlm_auth_winbind; (bso#10087). + s3: smbpasswd: Fix crashes on invalid input; (bso#10320). + s3: vfs_dirsort module: Allow dirsort to work when multiple simultaneous directories are open; (bso#10406). + Add support for Heimdal's unified krb5 and hdb plugin system, cope with first element in hdb_method having a different name in different heimdal versions and fix INTERNAL ERROR: Signal 11 in the kdc pid; (bso#10418). + vfs_btrfs: Fix incorrect zero length server-side copy request handling; (bso#10424). + s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we can't cope with a symlink when lp_posix_pathnames() is true; (bso#10429). + smbd: Fix an ancient oplock bug; (bso#10436). + Fix crash bug in smb2_notify code; (bso#10442).- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).- Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079). + Improve vfs_snapper documentation.- Fix Winbind 100% CPU utilization caused by domain list corruption; (bso#10358); (bnc#786677).- Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415); (bnc#862370).- Streamline the vendor suffix handling and add support for SLE 12.- Fix zero length server-side copy request handling; (bso#10424); (bnc#862558).- Set the PID directory to /run/samba on post-12.2 systems.- Make use of the tmpfilesdir macro while calling systemd-tmpfiles.- Make winbindd print the interface version when it gets an INTERFACE_VERSION request; (bnc#726937).- Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH definitions; (bnc#860832).- Check for NULL gensec_security in gensec_security_by_auth_type(); (bnc#860809).- Ensure ndr table initialization; (bnc#860648).- Add File Server Remote VSS Protocol (FSRVP) server for SMB share shadow-copies; (fate#313346).- s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662). - shadow_copy2: module "Previous Version" not working in Windows 7; (bso#10259). - s3-passdb: Fix string duplication to pointers; (bso#10367). - vfs/glusterfs: in case atime is not passed, set it to the current atime; (bso#10384)- s3: winbindd: Move calling setup_domain_child() into add_trusted_domain(); (bso#10358); (bnc#786677).- Default sysconfig daemon options to -D; (bso#10388); (bnc#857454).- Add /var/cache/samba to the client file list; (bnc#846586).- Really add the WINBINDDOPTIONS sysconfig variable on install; (bnc#857454).- Correct sysconfig variable names by adding the missing D char; (bnc#857454).- Update to 4.1.4. + Fix segfault in smbd; (bso#10284). + Fix SMB2 server panic when a smb2 brlock times out; (bso#10311).- Call stop_on_removal from preun and restart_on_update and insserv_cleanup from postun on pre-12.3 systems only; (bnc#857454).- BuildRequire gamin-devel instead of unmaintained fam-devel package on post-12.1 systems.- smbd: allow updates on directory write times on open handles; (bso#9870). - lib/util: use proper include for struct stat; (bso#10276). - s3:winbindd fix use of uninitialized variables; (bso#10280). - s3-winbindd: Fix DEBUG statement in winbind_msg_offline(); (bso#10285). - s3-lib: Fix %G substitution for domain users in smbd; (bso#10286). - smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open; (bso#10297). - smb2_server processing overhead; (bso#10298). - ldb: bad if test in ldb_comparison_fold(); (bso#10305). - Fix AIO with SMB2 and locks; (bso#10310). - smbd: Fix a panic when a smb2 brlock times out; (bso#10311). - vfs_glusterfs: Enable per client log file; (bso#10337).- Add /etc/sysconfig/samba to the main and winbind package; (bnc#857454).- Create /var/run/samba with systemd-tmpfiles on post-12.2 systems; (bnc#856759).- Fix broken rc{nmb,smb,winbind} sym links which should point to the service binary on post-12.2 systems; (bnc#856759).- Add Snapper VFS module for snapshot manipulation; (fate#313347). + dbus-1-devel required at build time.- Add File Server Remote VSS Protocol (FSRVP) client for SMB share shadow-copies; (fate#313345).- Do not BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp as they're part of the minimum build environment.- Update to 4.1.3. + DCE-RPC fragment length field is incorrectly checked; CVE-2013-4408; (bnc#844720). + pam_winbind login without require_membership_of restrictions; CVE-2012-6150; (bnc#853347).- Make use of the full gpg pub key file name including the key ID.- Add transparent file compression support; (fate#316266). + Implement FSCTL_GET_COMPRESSION and FSCTL_SET_COMPRESSION handlers. + Add FILE_ATTRIBUTE_COMPRESSED and FILE_NO_COMPRESSION support. + Extend vfs_btrfs VFS module to utilize get/set compression hooks.- Add support for FSCTL_SRV_COPYCHUNK_WRITE; (fate#314770).- Remove bogus libsmbclient0 package description and cleanup the libsmbclient line from baselibs.conf; (bnc#853021).- BuildRequire systemd on post-12.2 systems.- Update to 4.1.2. + s4-dns: dlz_bind9: Create dns-HOSTNAME account disabled; (bso#9091). + dfs_server: Use dsdb_search_one to catch 0 results as well as NO_SUCH_OBJECT errors; (bso#10052). + Missing talloc_free can leak stackframe in error path; (bso#10187). + Fix memset used with constant zero length parameter; (bso#10190). + s4:dsdb/rootdse: report 'dnsHostName' instead of 'dNSHostName'; (bso#10193). + Make offline logon cache updating for cross child domain group membership; (bso#10194). + nsswitch: Fix short writes in winbind_write_sock; (bso#10195). + RW Deny for a specific user is not overriding RW Allow for a group; (bso#10196). + vfs_glusterfs: Fix excessive debug output from vfs_gluster_open(); (bso#10224). + vfs_glusterfs: Implement proper mashalling/unmarshalling of ACLs; (bso#10224). + VFS plugin was sending the actual size of the volume instead of the total number of block units because of which windows was getting the wrong volume capacity; (bso#10224). + libcli/smb: Fix smb2cli_ioctl*() against Windows 2008; (bso#10232). + xattr: Fix listing EAs on *BSD for non-root users; (bso#10247). + Fix the build of vfs_glusterfs; (bso#10253). + s3-winbindd: Fix cache_traverse_validate_fn failure for NDR cache entries; (bso#10264). + util: Remove 32bit macros breaking strict aliasing; (bso#10269).- Let gpg verify execution condition not fail on non SUSE systems.- Add systemd support for post-12.2 systems.- Allow smbcacls to take a '--propagate-inheritance' flag to indicate that the add, delete, modify and set operations now support automatic propagation of inheritable ACE(s); (FATE#316474).- Unconditionally create the CUPS smb backend sym link pointing to smbspool; (bnc#850656).- Update to 4.1.1. + ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101). + Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101).- Update to 4.1.0. + pam_winbindd: Support the KEYRING ccache type; (bso#10132). + Fix PAC parsing failure; (bso#10178).- Unify the defattr lines in the pidl, python, test and test-devel files section by removing the optional directory mode.- Verify source tar ball gpg signature.- Update to 4.1.0rc4. + dsdb: Convert the full string from UTF16 to UTF8, including embedded NULLs; (bso#8077). + python-samba-tool fsmo: Do not give an error on a successful role transfer; (bso#9461). + dbwrap_ctdb: Treat empty records as non-existing; (bso#10008). + Raise the level of a debug when unable to open a printer; (bso#10118). + Add "acl allow execute always" parameter; (bso#10134). + vfs_shadow_copy2: Display previous versions correctly over SMB2; (bso#10137). + smbd: Always clean up share modes after hard crash; (bso#10138). + Valid utf8 filenames cause "invalid conversion error" messages; (bso#10139). + libcli/smb: Use SMB1 MID=0 for the initial Negprot; (bso#10144). + Samba SMB2 client code reads the wrong short name length in a directory listing reply; (bso#10145). + libcli/smb: Only check the SMB2 session setup signature if required and valid; (bso#10146). + Better document potential implications of a globally used "valid users"; (bso#10147). + cli_smb2_get_ea_list_path() failed to close file on exit; (bso#10149). + Not all OEM servers support the ALTNAME info level; (bso#10150). + Regression causes replication failure with Windows 2008R2 and deletes Deleted Objects; (bso#10157). + Netbios related samba process consumes 100% CPU; (bso#10158). + Fix POSIX ACL mapping when setting DENY ACE's from Windows; (bso#10162).- Require libndr-standard-devel due to gen_ndr/lsa.h from libpdb-devel.- Add libdcerpc0, libdcerpc-atsvc0, libdcerpc-binding0, libdcerpc-samr0, libgensec0, libndr0, libndr-krb5pac0, libndr-nbt0, libndr-standard0, libpdb0, libregistry0, libsamba-credentials0, libsamba-hostconfig0, libsamba-policy0, libsamba-util0, libsamdb0, libsmbclient-raw0, libsmbconf0, libsmbldap0, and libtevent-util0 to baselibs.conf.- Add or polish the shared library package summaries and descriptions.- Update to 4.1.0rc3. + Fix working on site with Read Only Domain Controller; (bso#5917). + Add man page for vfs_syncops; (bso#7364). + Add man page for vfs_linux_xfs_sgid; (bso#7490). + When replicating DNS for bind9_dlz we need to create the server-DNS account remotely; (bso#9091). + Winbind unable to retrieve user information from AD; (bso#9615). + winbind_lookup_names() fails because of NT_STATUS_CANT_ACCESS_DOMAIN_INFO; (bso#9899). + Build Samba 4.0.x on AIX with IBM XL C/C++; (bso#9911). + Add SMB2 and SMB3 support for smbclient; (bso#9974). + Add man pages for ntdb tools; (bso#10000). + Add man page for samba-regedit tool; (bso#10001). + ::1 added to nameserver on join; (bso#10030). + Fix memory leak in source3/lib/util.c:1493; (bso#10063). + Fix segmentation fault in 'net ads join'; (bso#10073). + Fix variable list in vfs_crossrename man page; (bso#10076). + s3-winbind: Fix a segfault passing NULL to a fstring argument; (bso#10082). + smbd: Fix async echo handler forking; (bso#10086). + MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba; (bso#10097). + Honour output buffer length set by the client for SMB2 GetInfo requests; (bso#10106). + Fix Winbind crashes on DC with trusted AD domains; (bso#10107). + Handle Dropbox (write-only-directory) case correctly in pathname lookup; (bso#10114). + Masks incorrectly applied to UNIX extension permission changes; (bso#10121).- Implement shared library packaging guidelines. - Correct interpackage dependencies; (bso#10129).- Define the source URL differently in the case of a release candidate.- Update to 4.1.0rc2. + Add vfs_btrfs module. + Add support for server-side copy operations via the SMB2 FSCTL_SRV_COPYCHUNK request. + Fix replication with --domain-crictical-only to fill in backlinks; (bso#9029). + Windows 8 Roaming profiles fail; (bso#9678). + Fix crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + Do not delete an existing valid credential cache (s3-winbind); (bso#9994). + Fix segfault while reading incomplete session info; (bso#10003). + Missing integer wrap protection in EA list reading can cause server to loop with DOS (CVE-2013-4124); (bso#10010). + Fix a 100% loop at shutdown time (smbd); (bso#10013). + Fix/improve debug options; (bso#10015). + Rename regedit to samba-regedit; (bso#10040). + Remove obsolete swat manpage and references; (bso#10041). + Fix crashes in socket_get_local_addr(); (bso#10042). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Remove a redundant inlined substitution of ACLs; (bso#10045). + nsswitch: Add OPT_KRB5CCNAME to avoid an error message; (bso#10048). + dsdb improvements; (bso#10056). + Linux kernel oplock breaks can miss signals; (bso#10064).- BuildRequire pyldb-devel.- Add libnetapi0 and samba-libs to baselibs.conf.- Update to 4.0.9. + Fix crash of Winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + s3-lib: Fix segmentation fault while reading incomplete session info; (bso#10003). + smbd: Fix a 100% loop at shutdown time; (bso#10013). + Windows 8 Roaming profiles fail; (bso#9678). + Add UPN enumeration to passdb internal API; (bso#9779). + smbd: Cleanup disonnected durable handles; (bso#9930). + vfs_streams_xattr: Do not attempt to write empty attribute twice; (bso#9970). + Fix Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + s3-winbind: Do not delete an existing valid credential cache; (bso#9994). + Fix excessive RID allocation; (bso#10014). + Add debugclass for DNS server; (bso#10015). + Fix/improve debug options; (bso#10015). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Linux kernel oplock breaks can miss signals; (bso#10064). + net ads join: Fix segmentation fault in create_local_private_krb5_conf_for_domain; (bso#10073).- Update to 4.0.8. + Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections; CVE-2013-4124; (bnc#829969).- Require krb5 and not the non existing krb5-libs package.- Update to 4.1.0rc1. + Directory database replication (AD DC mode) + Server-Side Copy Support + Btrfs Filesystem Integration- BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp. - BuildRequire libxslt, libxslt1, or libxslt-tools depending on SUSE version. - Require perl-base on SUSE systems only.- Adjust group setting of the test-devel subpackage. - Require perl-base from the pidl subpackage.- Remove libdir/samba/ldb after install if we're building Samba without Active Directory Domain Controller support.- Remove unused ccache switch from the spec file.- BuildRequire docbook-xsl-stylesheets and libxslt-tools to build the man pages and add them to the package again.- Build from the package from the top level directory; (bnc#794744). - BuildRequire pytalloc-devel, python-tdb, and python-tevent. - Also use out of tree builds of talloc, tdb, tevent, and ldb for pre-12.1 SUSE systems.- Remove the empty data dir from the doc package filelist. - Explicitly use samba instead of the name macro to define the docbook dir.- Update to 4.0.7. + Fix a core dump with invalid lock order while opening/editing or copying MS files; (bso#9794). + Fix crash bug from search of mail=; (bso#9967). + s3-rpc_server: Ensure we are root when starting and using gensec; (bso#9465). + Add support for MX queries; (bso#9485). + dns: Delete dnsNode objects when they are empty; (bso#9559). + dns: Support larger queries when asking forwarder; (bso#9632). + s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST; (bso#9805). + Use of wrong RFC2307 primary group field; (bso#9880). + Check for system libtevent; (bso#9881). + is_printer_published GUID retrieval; (bso#9900). + Doc fixes for 4.0; (bso#9906). + Build fixes for 4.0 found during autoconf or debian packaging work; (bso#9907). + build: Add missing new line to replaced python shebang line; (bso#9909). + PIE builds not supported; (bso#9910). + s4:winbind: Don't leak libnet_context into the main event context; (bso#9929). + Fix a bug of drvupgrade of smbcontrol; (bso#9941). + Check for netbios aliases in ad_get_referrals; (bso#9947). + Fix tevent_poll on 32-bit machines (Coverity ID 989236); (bso#9953). + docs: Avoid mentioning a possibly misleading option; (bso#9964). + Fix build with system Heimdal of samba4kgetcred; (bso#9968).- Use SLE as product prefix for SUSE Linux Enterprise, oS for openSUSE, and OBS for any other operating system to define the vendor string while build.- Remove ldapsmb from the main spec file.- Adjust ldapsmb and nmbstatus man page syntax required by a newer pod2man.- Don't bzip2 the main tar ball, use the upstream gziped one instead.- Explicitly BuildRequire cyrus-sasl-devel, libattr-devel, and libopenssl-devel.- Fix libreplace license ambiguity; (bso#8997); (bnc#765270).- Update to 4.0.6. + Fix crash during Win8 sync; (bso#9822). + Fix segfault when loging in with wrong password from w2k8r2; (bso#9834). + Fix the username map optimization; (bso#9139). + Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). + SMB2 server doesn't support recvfile; (bso#9412). + Fix the build of vfs_notify_fam; (bso#9545). + Fix adding case sensitive spn; (bso#9699). + Properly handle oplock breaks in compound requests; (bso#9722). + Properly handle oplock breaks in compound requests; (bso#9722). + Cache name_to_sid/sid_to_name correctly; (bso#9766). + Fix 'net ads join' when called via stdin; (bso#9767). + Fix segfault for "artificial" conn_structs in vfs_fake_perms; (bso#9775). + vfs_dirsort uses non-stackable calls, dirfd(), malloc instead of talloc and doesn't cope with directories being modified whilst reading; (bso#9777). + Fix panic when running 'smbtorture smb.base'; (bso#9782). + Use specified python for runtime installation of Samba; (bso#9785). + Change '--with-dmapi' to 'default=auto' to match the autoconf build; (bso#9803). + wafsamba: Display the default value in help for SAMBA3_ADD_OPTION; (bso#9804). + wbinfo: Fix segfault in wbinfo_pam_logon; (bso#9807). + Package new dbwrap_tool man page; (bso#9809). + Old DOS SMB CTEMP request uses a non-VFS function to access the filesystem; (bso#9811). + Fix 'map untrusted to domain' with NTLMv2; (bso#9817). + SMB signing and the async echo responder don't work together; (bso#9824). + Fix panic in nt_printer_publish_ads; (bso#9830). + talloc use after free in winbind4; (bso#9832). + Function called in unix_convert() path can overwrite errno; (bso#9833). + Fix NULL pointer dereference in Winbind; (bso#9854). + Fix making LIBNDR_PREG_OBJ; (bso#9868).- Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches.- Update to 4.0.5. + Fix large reads/writes from some Linux clients; (bso#9706). + Add 'samba-tool dbcheck --reset-well-known-acls'; (bso#9740). + Can't delegate adding computers to domain; (bso#9267). + Fix GNU ld version detection with old gcc releases; (bso#7825). + Never try to map global SAM name; (bso#9039). + Certain xattrs cause Windows error 0x800700FF; (bso#9130). + Samba returns unexpected error on SMB posix open; (bso#9519). + Fix build on AIX; (bso#9557). + libnss-winbindd does not provide pass struct for groups mapped with ID_TYPE_BOTH and vice versa; (bso#9617). + Reauth-capable client fails to access shares on Windows member; (bso#9625). + PIDL: Fix parsing linemarkers in preprocessor output; (bso#9636). + Rename internal subsystem pdb_ldap to pdb_ldapsam; (bso#9639). + Fix the build of vfs_afsacl; (bso#9642). + Fix the build with --fake-kaserver; (bso#9643). + Fix compile of source3/lib/afs.c; (bso#9644). + Make SMB2_GETINFO multi-volume aware; (bso#9646). + idmap_autorid: Fix freeing of non-talloced memory; (bso#9653). + Work around FreeBSD's getaddrinfo() underscore issue; (bso#9656). + 'make test' hangs; (bso#9663). + Fix correct linking of libreplace with cmdline-credentials; (bso#9664). + Fix filtering of link-local addresses; (bso#9666). + Fix crash in 'net rpc join' against a Samba 3.0.33 PDC; (bso#9669). + Samba denies owner Read Control when there is a DENY entry while W2K08 does not; (bso#9674). + Fix several resource (fd) leaks; (bso#9683). + Fix a memory leak in spoolss rpc server; (bso#9685). + Fix a possible buffer overrun in pdb_smbpasswd; (bso#9686). + Fix several possible null pointer dereferences; (bso#9687). + Make sure that domain joins work correctly when the DC disallows NTLM auth; (bso#9689). + Backport tevent changes to bring library to version 0.9.18; (bso#9695). + Remove incomplete samba_dnsupdate IPv6 link-local address check; (bso#9696). + DsReplicaGetInfo fails due to sendto() EMSGSIZE error on UNIX domain socket; (bso#9697). + Fix vfs_catia and update documentation; (bso#9701); (bnc#824833). + Fix build on solaris8: Do not force a specific perl on pod2man; (bso#9703). + Fix nss_winbind name on FreeBSD; (bso#9704). + s4:winbindd: Do not drop the workgroup name in the getgrnam, getgrent and getgrgid calls; (bso#9711). + Set LD_LIBRARY_PATH in install_with_python.sh; (bso#9717). + s4-idmap: Remove requirement that posixAccount or posixGroup be set for rfc2307; (bso#9718). + Allow forcing an override of an old @MODULES record; (bso#9719). + Do not print the admin password during 'samba-tool classicupgrade'; (bso#9720). + Make samba_upgradedns more robust (do not guess addresses when just changing roles); (bso#9721). + Add a tool to migrate latin1 printing tdbs to registry; (bso#9723). + is_encrypted_packet() function incorrectly used inside server; (bso#9724). + upgradeprovision and 'samba-tool dbcheck' patches for 4.0.NEXT; (bso#9725). + Fix NULL pointer dereference; (bso#9727). + DO NOT install samba_upgradeprovision in 4.0.x; (bso#9728). + Fix 'smbcontrol close-share'; (bso#9733). + Fix Winbind separator in upn to username conversion; (bso#9735). + Change to smbd/dir.c code gives significant performance increases on large directory listings; (bso#9736). + PIDL: Build fixes for hosts without CPP (Solaris 11); (bso#9739). + Make sure that we only propogate the INHERITED flag when we are allowed to; (bso#9747). + Remove unneeded fstat system call from hot read path; (bso#9748). + Don't leak the epm_Map policy handle; (bso#9758). + Fix incorrect parsing of SMB2 command codes; (bso#9760). - Update to 4.0.4. + Remove forced set of 'create mask' to 0777; CVE-2013-1863; (bnc#809624).- Fix periodic printcap cache reloads; (bso#9650); (bnc#807334).- No longer use the cifs- or smbfstab named configuration file on post-12.2 systems; (bnc#804822); (bnc#821889).- Shift the smbfs init script nfs dependency from Required to Should.- Fix SMB1 Session Setup AndX handling with a large krb PAC; (bso#9658); (bnc#802031).- Point LD_LIBRARY_PATH to the just-built libraries while calling testparm to generate the default share snippets on pre-12.2 systems.- Explicitly configure --with-ads.- Fix smbclient recursive mget EPERM handling; (bso#9633); (bnc#786350).- Remove superfluous quotation marks while setting the SAMBA_VERSION_VENDOR_SUFFIX string.- Do not restart the smbfs service on pre-11.3 systems during dhcp lease renewal when the IP address remains the same; (bnc#800782).- Update to 4.0.3. + Fix ACL problem with delegation of privileges and deletion of accounts over LDAP interface; add documentation; (bso##8909). + check_password_quality: Handle non-ASCII characters properly; (bso##9105). + Fix 'smbd' panic triggered by unlink after open; (bso##9571). + smbd: Fix memleak in the async echo handler; (bso##9549). + defer_open is triggered multiple times on the same request; (bso#9196). + Add extra attributes for AD printer publishing; (bso#9378). + FSMO seize of naming role fails: NT_STATUS_IO_TIMEOUT; (bso#9461). + Downgrade v4 printer driver requests to v3; (bso#9474). + samba_upgradeprovision: fix the nTSecurityDescriptor on more containers; (bso#9481). + s3:smb2_negprot: set the 'remote_proto' value; (bso#9499). + waf assumes that pythonX.Y-config is a Python script; (bso#9503). + s4:drsuapi: Make sure we report the meta data from the cycle start; (bso#9508). + wafsamba: Use additional xml catalog file; (bso#9512). + samba_dnsupdate: Set KRB5_CONFIG for nsupdate command; (bso#9517). + conn->share_access appears not be be reset between users; (bso#9518). + Remove superfluous bracket in samba.8.xml; (bso#9528). + Fix typo in vfs_tsmsm.8.xml; (bso#9530). + terminate the irpc_servers_byname() result with server_id_set_disconnected(); (bso#9540). + Make use of posix_openpt; (bso#9541). + Fix build of vfs_commit and plug in async pwrite support; (bso#9544). + Fix aio_suspend detection on FreeBSD; (bso#9546). + Correctly detect O_DIRECT; (bso#9548). + sigprocmask does not work on FreeBSD to stop further signals in a signal handler; (bso#9550). + smb.conf(5): Update list of available protocols; (bso#9552). + s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup; (bso#9555). + Fix compilation of Solaris ACL module; (bso#9564). + Adding additional Samba 4.0 DC to W2k8 srv AD domain (in win200 functional level) produces dbcheck errors; (bso#9565). + Add dbwrap_tool.1 manual page; (bso#9568). + Document the command line options in dbwrap_tool(1); (bso#9568). + ntlm_auth(1): Fix format and make examples visible; (bso#9569). + Fix file corruption during SMB1 read by Mac OSX 10.8.2 clients; (bso#9572). + Fix a possible null pointer dereference in spoolss; (bso#9574). + Duplicate flags defined in the winbindd protocol; (bso#9575). + gensec: Allow login without a PAC by default; (bso#9581). + smbd: disk_free: sys_popen() failed" message logged in /var/log/message many times; (bso#9586). + Archive flag is always set on directories; (bso#9587). + ACLs are not inherited to directories for DFS shares; (bso#9588). + Correct meta data in ldb manpages; (bso#9591). + s3-winbind: Fix the build of idmap_ldap; (bso#9595). + Linked attribute handling should be by GUID; (bso#9596). + Fix timeouts of some IRPC calls; (bso#9598). + Use pid,task_id as cluster_id in process_single just like process_prefork; (bso#9598). + Add 'ldbdump' tool; general code and documentation cleanup; (bso#9609). + dsdb: Make secrets_tdb_sync cope with -H secrets.ldb; (bso#9610).- Update to 4.0.2. + Address SWAT security issues CVE-2013-0213 and CVE-2013-0214 which both don't apply to any SUSE Samba post-3.6.10 as it isn't longer built. + Don't build and package static libraries.- Drop separate build-source-timestamp file as it led to a second, incorrect Source Timestamp line.- Add server-side copy support; (fate#314770). + Implement FSCTL_SRV_COPYCHUNK and FSCTL_SRV_REQUEST_RESUME_KEY handlers. + Add vfs_btrfs VFS module for optimized Btrfs clone-range ioctl usage.- Add filter against shlib-policy-name-error for /lib*/libnss_wins.so.2.- Disable SWAT during configure and don't package it any longer.- Remove dangling references to Heimdal from the spec file.- Remove /lib/samba prefix from the localstatedir configure option.- Update to 4.0.1. + Samba 4.0.0 as an AD DC may provide authenticated users with write access to LDAP directory objects; CVE-2013-0172; (bnc#798364).- Add the missing get_printing_ticket binary path while calling the set_permissions macro; (bnc#783375).- Use the version macro while definition of the branch macro.- Remove references to no longer used devel macros.- Update to 4.0.0. + Honor password complexity settings; (bso#9414). + Install SWAT *.msg files with waf; (bso#9415). + Fix netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES; (bso#9438). + developer-build: Fix panic when acl_xattr fails with access denied; (bso#9456). + Fix "map username script" with "security=ads" and Winbind; (bso#9457). + Install manpages only if we install the target; (bso#9459). + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Users can not be given write permissions any more by default; (bso#9462). + Fix MMC crashes; (bso#9470). + Fix SEGV when using second vfs module; (bso#9471). + Support FIPS mode when building Samba; (bso#9479). + Fix ACL on "cn=partitions,cn=configuration"; (bso#9481).- netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES broken; (bso#9438). - s3:auth: fix create_token_from_sid() to not fail in the winbindd case; (bso#9457). - s4:dsdb/acl_read: return the nTSecurityDescriptor attr if the sd_flags control is given; (bso#9470). - Support FIPS mode when building Samba; (bso#9479). - s4:provision: set the correct nTSecurityDescriptor; (bso#9481).- SEGV when using second vfs module; (bso#9471).- Update to 3.6.10. + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Fix segfault when "default devmode" is disabled; (bso#9433). + Fix segfaults in "log level = 10" on Solaris; (bso#9390).- s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIED; (bso#9456). - Install manpages only if we install the target; (bso#9459). - Users can not be given write permissions any more by default; (bso#9462).- Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094); (bso#9418). - Use work around for 'winbind use default domain' only if it is set; (bso#9367). - Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend; (bso#9374). - large read requests cause server to issue malformed reply; (bso#9422). - s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426). - Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439). - Allow to force DNS updates using net; (bso#9451). - Respond correctly to FILE_STREAM_INFO requests; (bso#9460).- Update to 4.0.0rc6. See WHATSNEW.txt from the samba-doc package.- On uninstall remove winbind from the pam configuration, invalidate the nscd passwd and group cache and only recommend the install of nscd; (bnc#792340).- BuildRequire libnscd-devel once.- Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294). - Add SUSE version depending pkg-config requires macro; (bnc#792294).- Define library names and use it instead of libldb1, libnetapi0, libsmbclient0, libsmbsharemodes0, libtalloc2, libtdb1, libtevent0, and libwbclient0; (bnc#792294). - Provide and obsolete libsmbsharemodes for post-10.3 SUSE systems.- Don't clutter the spec file diff view; (bnc#783384).- Fix fd leak causing 100% CPU in winbind on certain dc connection failures; (bso#9436); (bnc#786677).- Fix spoolss segfault when default devmode is disabled; (bso#9433); (bnc#791183).- Update to 4.0.0rc5. See WHATSNEW.txt from the samba-doc package.- ACL masks incorrectly applied when setting ACLs; (bso#9236). - s3-kerberos: also try with AES keys, when decrypting tickets; (bso#9272). - lib/replace: replace all *printf function if we replace snprintf; (bso#9390). - lib/addns: don't depend on the order in resp->answers[]; (bso#9402).- s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209). - lib/krb5_wrap: request enc_types in the correct order; (bso#9272). - Fix net ads join message for the dns domain; (bso#9326). - docs-xml: fix use of tag; (bso#9345). - s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359). - s3:winbind: Failover if netlogon pipe is not available; (bso#9386).- Execute the run_permissions macro on pre-11.4 systems and else the set_permission one if available.- Ensure adding the winbind group never can fail.- Create ntadmin group only if it doesn't yet exist.- Update to 3.6.9. + When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). + Winbind can't fetch user or group info from AD via LDAP; (bso#9147). + Fix segfault in smbd if user specified ports out for range; (bso#9218).- quota: Don't force the block size to 512; (bso#3272). - Fix poll replacement to become a msleep replacement; (bso#8107). - Fix wrong test == syntax in configure; (bso#8146). - Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344). - Fix builtin forms order to match Windows again; (bso#8632). - Fix RAW printing for normal users; (bso#8769); (bnc#790741). - Initialise ticket to ensure we do not invalid memory; (bso#8788). - Fix 'net rpc share allowedusers' to work with 2008r2; (bso#8966). - Fix crash on null pam change pw response; (bso#9013). - Connection to outbound trusted domain goes offline; (bso#9016). - Increase debug level for info that the db is empty; (bso#9112). - 'smbclient' can't connect to a Windows 7 server using NTLMv2; (bso#9117). - Winbind can't fetch user or group info from AD via LDAP; (bso#9147). - Open printers with the right access mask; (bso#9154). - Fix makerpms.sh on RHEL; (bso#9165). - Remove non-existent option '-Y' from winbindd manpage; (bso#9171). - Add quota support for gfs2; (bso#9172). - Make SMB2 compound request create/delete_on_close/close work as Windows; (bso#9173). - Empty SPNEGO packet can cause smbd to crash; (bso#9174). - pam_winbind: Match more return codes when wbcGetPwnam has failed; (bso#9177). - Fix crash bug in idmap_hash; (bso#9188); (bnc#788159). - SMB2 Create doesn't return correct MAX ACCESS access mask in blob; (bso#9189). - Fix service control for non-internal services; (bso#9192). - Don't take 'state->te' as indication for "was_deferred"; (bso#9196). - Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209). - Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213). - Fix segfault in smbd if user specified ports out for range; (bso#9218). - Signing cannot be disabled for SMB2 by design, so fix the documentation instead; (bso#9222). - Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry; (bso#9231). - When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). - lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259). - Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart; (bso#9268). - Add support for reloading systemd services; (bso#9280).- Warn via the smbd log if AppArmor and "wide links" are in use; (bnc#783719).- Do not write the build date into the header of the default smb.conf as this causses superfluous rebuilds of packages depending on samba; (bnc#781601).- Do not prerequire SuSEconfig.permissions as it's already enough and more generic to depend on the permissions package; (bnc#782293).- Update to 3.6.8. + Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). + Fix Winbind panic if we couldn't find the domain; (bso#9135).- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058). - Fix bad call to memcpy source3/registry/regfio.c; (bso#9065). - "Domain Users" incorrectly added as additional group on domain members; (bso#9066). - Use correct RID for "Domain Guests" primary group; (bso#9067). - Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). - Fix smbclient/tarmode panic when connecting to Windows 2000 clients; (bso#9088). - Fix refreshing of Kerberos tickets in Winbind; (bso#9098). - Fix identification of idle clients in Winbind to avoid crashes and NDR parsing errors; (bso#9104). - Fix compilation with newer MIT Kerberos which hides internal symbols; (bso#9111). - Fix flooding the logs with records we don't find in pcap; (bso#9112). - Initialize the print backend after we setup winreg; (bso#9122). - Fix lprng job tracking errors; (bso#9123). - Fix setting of "inherited" bit on inherited ACE's; (bso#9124). - Fix Winbind panic if we couldn't find the domain; (bso#9135). - Make 'smbclient allinfo' show the snapshot list; (bso#9137). - Fix nfs quota support with Linux nfs4 mounts; (bso#9144). - Valid open requests can cause smbd assert due to incorrect oplock handling on delete requests; (bso#9150).- NMB registration for a duplicate workstation fails with registration refuse; (bso#9085); (bnc#770056).- Remove backup files caused by running configure in examples/VFS.- Update to 3.6.7. + Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). + Fix migrating printers while upgrading from 3.5.x; (bso#9026).- Correct documentation of "case sensitive"; (bso#8552). - Printing fails in function cups_job_submit; (bso#8719). - Fix kernel oplocks when uid(file) != uid(process); (bso#8974). - Send correct responses to NT Transact Secondary when no data and no params for the Trans2 calls are set; (bso#8989). - Fix build without ads support; (bso#8996). - Don't turn negative cache entries into valid idmappings; (bso#9002). - Fix posix acl on gpfs; (bso#9003). - Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022). - Fix migrating printers while upgrading from 3.5.x; (bso#9026). - Fix typo in set_re_uid() call when USE_SETRESUID selected in configure; (bso#9034). - Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040). - Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). - Fix build against CUPS 1.6; (bso#9055). - Fix bugs in SMB2 credit handling code; (bso#9057). - rpcclient: Fix bad call to data_blob_const; (bso#9062).- Create missing doc directories while install. - Remove no longer existing Manifest file from install. - Don't creat a link to non existend html man pages for swat. - Don't call the no longer existing libsmbclient testsuit while build.- Configure with option --mandir instead --with-mandir. - Remove obsoleted --with-rootsbindir, --with-nmbdsocketdir, and - -with-swatdir configure options.- Update to 4.0.0beta4. See WHATSNEW.txt from the samba-doc package.- BuildRequire gcc, make, and patch; (bnc#771516).- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).- Fix shell syntax in dhcpcd hook script; (bnc#769957).- Add missing int declaration to the net kdc lookup patch.- Update to 4.0.0beta2. See WHATSNEW.txt from the samba-doc package.- Update to 3.6.6. + Fix possible memory leaks in the Samba master process; (bso#8970). + Fix uninitialized memory read in talloc_free(); (bnc#764577). + Fix joining of XP Pro workstations to 3.6 DCs; (bso#8373); (bnc#787983).- resolve_ads() code can return zero addresses and miss valid DC IP addresses; (bso#8910). - Can't join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983). - winbind can hang as nbt_getdc() has no timeout; (bso#8953). - Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627) - s3-pid: Catch with pid filename's change when config file is not smb.conf; (bso#8714). - Possible memory leaks in the main Samba process; (bso#8970). - s3: Fix uninitialized memory read in talloc_free(); (bnc#764577). - Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971). - Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988). - Winzip occasionally can not read files out of an open winzip dialog; (bso#8311). - s3-winbindd: call dump_core_setup after command line option has been parsed; (bso#8975). - Directory group write permission bit is set if unix extensions are enabled; (bso#8972). - s3: remove dependency on automake for "make everything"; (bso#8978). - sd_has_inheritable_components segfaults on an SD that se_access_check accepts; (bso#8811). - smbclient's tarmode insists on listing excluded directories; (bso#8922). - Notify code can miss a ChDir; (bso#8998). - s3:smbd: add a fsp_persistent_id() function; (bso#8995).- Call autogen.sh even on post-12.1 SUSE systems.- Don't call autogen.sh on post-12.1 SUSE and post-14 Fedora systems. - Recompile all IDL in any case.- BuildIgnore libtalloc and libtdb to prevent a package conflict on Fedora systems.- Install talloc.pc only on pre-12.2 and non SUSE systems.- BuildRequire libldb-devel, libtalloc-devel, libtdb-devel, and libtevent-devel on post-12.1 systems.- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861). - s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904). - smbd crashes when deleting directory and veto files are enabled; (bso#8837). - winbind_krb5_locator only returns one IP address; (bso#8897). - Wrong assertion/comparison: Compare value not pointer; (bso#8859). - Inconsistent (with manpage) command-line switch for "help" in smbtree; (bso#8831). - Fix incorrect debug statement. - Setting traverse rights fails to enable directory traversal when acl_xattr in use; (bso#8857). - Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877). - s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869). - s3-docs: fixes several typos; (bso#7938). - s3-VFS: Fix building out-of-tree modules; (bso#8822). - s3-docs: Add hint that setting "profile acls = yes" on normal shares can cause trouble; (bso#7930). - s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915). - Avoid null dereference in initialize_password_db(); (bso#8920). - s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend. - s3:registry:reg_api: fix reg_queryvalue to not fail when values are modified while it runs. - s4:torture:rpc:spoolss: also initialize driverName before checking it in test_PrinterData_DsSpooler(). - s3:registry: multiple cleanups, fixes, and optimisations. - s3:auth/server_info: the primary rid should be in the groups rid array; (bso#8798). - s3-printing: Add new printers to registry; (bso#8554); (bso#8612); (bso#8748). - Fix the overwriting of errno before use in a DEBUG statement and use the return value from store_acl_blob_fsp rather than ignoring it; (bso#8945). - s3-auth: Don't lookup the system user in pdb; (bso#8944). - s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952). - Fix typo in pam_winbindd code; (bso#8957). - Fix remove_duplicate_addrs2 previously it could leave zero addresses in the list; (bso#8910). - Slow but responsive DC can lock up winbindd; (bso#8943). - Broken processing of %U with vfs_full_audit when force user is set; (bso#8882).- Disable included build of ldb, talloc, tdb, and tevent on post-12.1 systems. - BuildRequire libldb1-devel, libtalloc2-devel, libtdb1-devel, and libtevent0-devel on post-12.1 systems.- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).- docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845); (bnc#730769). - s3-docs: Prepend '/' to filename argument; (bso#8826).- Update to 3.6.5. - Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576).- Remove all precompiled idl output to ensure any pidl changes take effect; (bnc#757080).- Update to 3.6.4. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "root" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). - Correctly handle DENY ACEs when privileges apply; (bso#8797).- s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). - Allow vfs_aio_pthread to build as a static module; (bso#8723). - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). - s3: segfault in dom_sid_compare(bso#8567). - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). - s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). - Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784).- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454).- Remove obsoleted Authors lines from spec file for post-11.2 systems.- Make ldapsmb build with Fedora 15 and 16; (bso#8783). - BuildRequire libuuid-devel for post-11.0 and other systems. - Define missing python macros for non SUSE systems. - PreReq to fillup_prereq and insserv_prereq only on SUSE systems. - Always use cifstab instead of smbfstab on non SUSE systems.- Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934).- Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854).- s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825).- s3:winbindd fix a return code check; (bso#8406).- s3: Add rmdir operation to streams_depot; (bso#8733).- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738); CVE-2013-0454; (bnc#811975).- s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).- s3:client: ignore SMBecho errors (the server may not support it); (bso#8139).- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is enabled and don't unintentionally use a bogus domain name; (bso#8734).- smbclient fails with posix large reads; (bso#8727).- Use the smbfs init script on versions pre-11.3, or cifs in later versions; (bnc#744614).- s3: Compile IDL files in autogen, some configure tests need this.- Fixes various deadlocks in if-up.d / if-down.d when running under systemd; (bnc#732395).- Update to 3.6.3. + Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724); (bnc#743986).- Use spdx.org compliant license names for all packages.- Update to 3.6.2. + Make Winbind receive user/group information (bug #8371). + Several SMB2 fixes. + Fix a crash bug in the spoolss code. + Add new contributing FAQ announcing acceptance of corporate (C). + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504). + Fix cli_write_and_x() against OS/2 print shares; (bso#5326). + Fix 'smbclient tar' for files greater than 8GB on BE machines; (bso#563); (bnc#726145). + Remove pointless use_memory_krb5_ccache; (bso#7465). + Fix perl path; (bso#8176). + Grant credits in async interim responses (SMB2); (bso#8357). + Make Winbind receive user/group information; (bso#8371). + Fix Windows XP clients crashing smbd process every once in a while; (bso#8384); (bnc#731571). + Make VFS op "streaminfo" stackable; (bso#8419). + Add an allocation pool to idmap_autorid; (bso#8444). + Fix SEGFAULT from net registry export on not zero terminated REG_SZ values; (bso#8528). + Make DSO_EXPORTS_CMD more portable; (bso#8531). + readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). + smbclient posix_open command fails to return correct info on open file; (bso#8542). + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548). + Fix setting the machine account password; (bso#8550). + Make SMB2 handle compound request headers in the same way as Windows; (bso#8560). + Password change settings not fully observed; (bso#8561). + Fix double free error in talloc; (bso#8562). + Fix alignment in the non-extended-security negprot; (bso#8573). + Add systemd service files; (bso#8575). + Add systemd service files; (bso#8575). + smb2_flush: Don't send uninitialized memory; (bso#8579). + Enable inotify if sys or kernel inotify is available; (bso#8580). + Increase a debug level; (bso#8585). + libsmb: Only align unicode pipe_name; (bso#8586). + Fix marshalling of samr_ChangePasswordUser3; (bso#8591). + Don't limit the number of open dptrs for SMB2; (bso#8592). + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). + Make cldap work over IPv6; (bso#8600). + Fix intermittent print job failures caused by character conversion errors; (bso#8606). + Improve configure.in so it can be used outside the Samba source tree; (bso#8607). + Winbind: Don't fail on users without a uid; (bso#8608). + Ensure we correctly calculate reply credits over all returned SMB2 replies; (bso#8614). + Fix migrate printer code; (bso#8618). + Fix crash bug when trying to browse Samba printers; (bso#8623). + libsmb: Don't duplicate Kerberos service tickets; (bso#8628). + POSIX ACE x permission becomes rx following mapping to and from a DACL; (bso#8631). + When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + Fix the vfs_commit module; (bso#8639). + Add an update function for Winbind cache; (bso#8643). + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). + Document the "ignore system acls" option of vfs_acl_xattr and vfs_acl_tdb vfs modules; (bso#8652). + Fix deleting a symlink if the symlink target is outside of the share; (bso#8663). + Fix renaming a symlink if the symlink target is outside of the share; (bso#8664). + Fix NT ACL issue; (bso#8673). + Fix buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). + Fix Winbind segfault if we can't map the last user; (bso#8678). + recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). + Try ctdbd_init_connection() as root; (bso#8684). + Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686). + Fix typo in 'net memberships' usage; (bso#8687). + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket(); (bso#8692). + Make DeletePrinterDriverEx remove printer driver files; (bso#8697) (bnc#740810). + Fix major leak with SMB2 in connections.tdb; (bso#8710).- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).- Use correct license, LGPLv3+ for libwbclient packages.- When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636).- Fix incorrect types in the full_audit VFS module. Add null terminators to audit log enums; (bnc#742885).- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810). - Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).- Buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). - NT ACL issue; (bso#8673). - Deleting a symlink fails if the symlink target is outside of the share; (bso#8663). - connections.tdb - major leak with SMB2; (bso#8710).- Renaming a symlink fails if the symlink target is outside of the share; (bso#8664).- Intermittent print job failures caused by character conversion errors; (bso#8606). - ads_keytab_verify_ticket mixes talloc allocation with malloc free; (bso#8692). - libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). - s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684). - s3-printing: fix migrate printer code; (bso#8618). - Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686).- net memberships usage info was wrong; (bso#8687). - s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628). - Recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). - s3-winbind: Fix segfault if we can't map the last user; (bso#8678). - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). - s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb; (bso#8652). - Winbind can't receive any user/group information; (bso#8371). - s3-winbind: Add an update function for winbind cache; (bso#8643). - s3: Attempt to fix the vfs_commit module. - POSIX ACE x permission becomes rx following mapping to and from a DACL; (#bso#8631). - s3:libsmb: only align unicode pipe_name; (bso#8586). - s3-winbind: Don't fail on users without a uid; (bso#8608). - Crash when trying to browse samba printers; (bso#8623). - talloc: double free error; (bso#8562). - cldap doesn't work over ipv6; (bso#8600). - s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326). - SMB2: not granting credits for all requests in a compound request; (bso#8614). - smb2_flush sends uninitialized memory; (bso#8579). - Password change settings not fully observed; (bso#8561). - s3:smb2_server: grant credits in async interim responses; (bso#8357). - s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592). - samr_ChangePasswordUser3 IDL incorrect; (bso#8591). - idmap_autorid does not have allocation pool; (bso#8444). - Add systemd service files. - s3:libsmb: the workgroup in the non-extended-security negprot is not aligned; (bso#8573). - s3-build: Fix inotify detection; (bso#8580). - SMB2 doesn't handle compound request headers in the same way as Windows; (#bso8560). - Disconnecting clients swamp the logs; (bso#8585). - s3-netlogon: Fix setting the machinge account password; (bso#8550). - winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). - smbclient posix_open command fails to return correct info on open file; (bso#8542). - readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). - s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465). - s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531). - s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated ucs2 string; (bso#8528). - Make VFS op "streaminfo" stackable; (bso#8419).- Fix incorrect perfcount array length calculations; (bnc#739258).- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.- Remove call to suse_update_config macro for post-11.4 systems.- Use samba.org for the ldapsmb source location.- Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile; (bnc #729516).- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572).- Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).- Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).- Fix typo in net ads join output; (bnc#713135).- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).- Update to 3.6.1. + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Several SMB2 fixes. + The VFS ACL modules are no longer experimental but production-ready. + Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465). + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509). + Return error of cli_push when 'put - /some/file' is used; (bso#7551). + Fix usage of cli_errstr(); (bso#7864). + Fix 'widelinks' regression; (bso#8229). + Empty notify servername; (bso#8236). + Add man vfs_aio_fork; (bso#8256). + smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes; (bso#8334). + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338). + While migrating forms, don't fail if the form already exists; (bso#8351). + OS/2 sends an unexpected write&x/read&x chain; (bso#8360). + Fix build of vfs_prealloc on SLES8; (bso#8363). + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364). + Fix the fallback to the deprecated spelling idmap:script; (bso#8368). + Fix vfs_chown_fsp; (bso#8370). + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix smbclient access to NT4 shares; (bso#8385). + Optimize serverid_exists() for Solaris; (bso#8395). + registry/reg_format.c must include includes.h; (bso#8401). + SMB2 server can return requests out-of-order when processing a compound request; (bso#8407). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with SMB2; (bso#8412). + Fix 'getent group' if trusted domains are not reachable; (bso#8420). + Fix infinite loop in ACL module code; (bso#8422). + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428). + Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429). + Fix segfault in iconv.c; (bso#8433). + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442). + Be smarter about setting default permissions when a ACL_USER_OBJ isn't given; (bso#8443). + Check the wct of the incoming SMBnegprot responses; (bso#8452). + Fix smbclient segfaults when dialect option -m is used for legacy dialects; (bso#8453). + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455). + Samba PDC is looking up only primary user group; (bso#8455). + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458). + smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473). + SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474). + Don't call smbd_terminate_connection in smb2_validate_message_id(); (bso#8476). + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476). + Map to guest can return uninitialized blob of data; (bso#8477). + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480). + DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493). + Remove "experimental" label on VFS ACL modules; (bso#8494). + SMB2_OP_CANCEL requests don't have to be signed; (bso#8503). + smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507). + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509). + Disallow "." in can_set_delete_on_close(); (bso#8515). + SMB2 create call returns incorrect file allocation size; (bso#8518). + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520). + Winbind cache timeout expiry test was reversed; (bso#8521).- s3/doc: add man page for aio_fork vfs module.- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).- s3: Samba PDC is looking up only primary user group; (bso#8455).- Add script to create or update an AppArmor sniplet with permissions for all Samba shares; (bnc#688040).- Add "ldapsam:login cache" parameter to allow explicit disabling of the login cache; (bnc#723261).- Retain the smbd startproc return value for correct startup status reporting. unset was incorrectly being called prior to rc_status; (bnc#723724).- Prevent deadlock in systemd triggered by if-down.d handler on shutdown; (bnc#721598).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; changed defaults and documentation (bso8473).- Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client); (bso#8515).- winbindd cache timeout expiry test was reversed; (bso#8521).- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).- s3:smb2_create: fix allocation size return value when opening existing files; (bso#8518).- SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474).- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442).- s3-docs: Fix bug (bso#7908) and typo.- Return error of cli_push when 'put - /some/file' is used; (bso#7551).- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).- smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507).- Default user entry is set to minimal permissions on incoming ACL change with no user specified; (bso#8443).- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft Internet Explorer 9 on Windows 7 to download files; (bso#8458).- DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493).- s3-docs: Fix typos.- s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).- Remove "experimental" label on VFS ACL modules; (bso#8494).- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin; (bso#7465).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473).- s3-netapi: allow to use default krb5 credential cache for libnetapi users.- s3-docs: document -k switch in net manpage.- Map to guest can return uninitialized blob of data; (bso#8477).- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).- Fix 'widelinks' regression intro'd in 3.2; (bso#8229).- Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429).- s3-spoolss: Fix bug forms migration; (bso#8351).- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).- s3: Do not fork the echo handler for smb2; (bso#8334).- s3-spoolss: Fix bug empty notify servername; (bso#8236).- SMB2 server can return requests out-of-order when processing a compound request; (bso#8407).- Remove smb child crash fix. The issue had been fixed upstream differently.- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.- Fix samba duplicates file content on appending. Move posix case semantics out from under the VFS; (bso#6898); (bnc#681208).- Make winbind child reconnect when remote end has closed, fix failing sudo; (bso#7295); (bnc#569721).- Spec file cleanup as suggested by the spec-cleaner tool. + Make all BuildRequires, PreReq, and Provides a separate line. + Use %{buildroot} instead of ${RPM_BUILD_ROOT}. + Use straight commands instead of macros (make, install). + Use -p in post and postun if we only call one command. + Use %{_localstatedir} instead of %{_var} in the filelist. + Remove superfluous AutoReqProv on lines.- Remove %release from all Provides.- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).- Use /var/run for the cifs state file in the init script too; (bnc#710304).- Microsoft Word from Microsoft Office 2007 fails to save as on a share with SMB2; (bso#8412).- Use sys_write and sys_read in fork_domain_child to fix a winbind race leading to 100% CPU usage; (bso#8409).- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).- Fix infinite loop in ACL module code; (bso#8422).- Fix getent group if trusted domains are not reachable; (bso#8420).- smbclient can't access a NT4 share since 3.6.0; (bso#8385).- Optimize serverid_exists() for Solaris; (bso#8395).- talloc: + check block count after references test. + added test suite for talloc_free_children(). + license info erratum in the manpage. + fix typos and better differentiation between versions 1 and 2. + preserve context name on talloc_free_children(). + ensure the sibling linked list remains valid during a free.- vfs_chown_fsp returned in the wrong directory; (bso#8370).- Remove irritating "." targets when recent system libs exist; (bso#8369).- Correctly initialize "idmap config * : script" with NULL; (bso#8368).- Add missing include to suppress compiler warnings; (bso#8365).- Point the chain offset beyond the current request; (bso#8360).- Fix gpfs vfs module build; (bso#8364).- Make vfs_prealloc even build on older systems; (bso#8363).- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).- Add a fallback for missing open&x support in OS/X Lion; (bso#8338).- Update to 3.6.0. + BUG 7462: Make SA_RESETHAND conditional on its existance. + BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined. + BUG 8324: smbclient cannot list directories from a big-endian machine. + BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname. + BUG 8327: Fix the reload of the configuration, also reload activated registry shares. + BUG 8328: Cleanup of idmap_tdb2 code. + BUG 8330: Fix NFSv4 ACL merging logic. + BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id. + BUG 8341: Fix segfault in libsmbclient. + BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file. + BUG 8347: Fix regression for HP-UX, AIX and OSF. + BUG 8357: Make sure we grant credits on async read/write operations. + BUG 8358: Fix a bug in run_poll_events(). + BUG 8362: Fix build issue on old glibc systems.- Remove references to disabled vscan build.- Add missing define, includes, and initialization to get_printing_ticket.- Use /var/run for the cifs state file; (bnc#710304).- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).- Fix reload of the configuration and also reload activated registry shares; (bso#8327).- WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326).- smbclient cannot list directories from a big-endian machine; (bso#8324).- Update to 3.6.0rc3. + BUG 7841: Explicitly pass domain_sid to wbint_LookupRids(). + BUG 7888: Deal with buggy 3.0 based PDCs. + BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb module. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8193: Add new command 'enumerate_recursive'. + BUG 8195: Make rpc client code working against NT4 servers. + BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes" is set. + BUG 8213: Fixes in idmap_autorid. + BUG 8214: Fix smbd crash on printer driver upgrade. + BUG 8215: Fix Winbind unix username lookup. + BUG 8216: Make Winbind returning correct results with 'sids2xids'. + BUG 8217: Do not stat-check the share path in 'net conf addshare'. + BUG 8219: Fix SMB Panic from Windows 7 client. + BUG 8224: Fix the build on FreeBSD. + BUG 8226: Use c99 initializers which are supported by old gcc 2.95 compilers. + BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd. + BUG 8231: Fix crash bug in 'net cache get'. + BUG 8235: Fix smbd crash on startup caused by migrate_printer(). + BUG 8240: Fix Valgrind warnings in winreg/spoolss code. + BUG 8244: Fix copying files larger than 2 GB to a Samba share. + BUG 8247: Fix Coverity ID 2582: FORWARD_NULL. + BUG 8253: Fix Winbind panic if verify_idpool() fails. + BUG 8254: Fix "acl check permissions = no". + BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes. + BUG 8262: Fix build of vfs_commit. + BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl. + BUG 8264: Fix Valgrind bugs in svcctl. + BUG 8276: Close all sockets attached to a subnet in close_subnet(). + BUG 8278: Fix smbd panic when CTDB is unhealthy. + BUG 8281: Fix build of examples/VFS/*. + BUG 8286: Fix smbd crash on premature end of smb2 conn. + BUG 8292: Fix a major architectural flaw in the SMB2 server code. + BUG 8293: Fix log file rotating in SMB2. + BUG 8304: Fix uninitialized variable in error path. + BUG 8305: Fix segfault in nmbd when using 'smbtree ...'.. + BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all locks. + BUG 8310: toupper_ascii() is broken on big-endian systems. + BUG 8314: Fix smbd crash with unknown user. + Mark 'time offset' parameter as deprecated.- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289); (bnc#708503).- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site request forgery; CVE-2011-2522; (bso#8290); (bnc#705241).- Fixed the DFS referral response for msdfs root; (bnc#703655).- Fix CUPS print job IDs; (bso#7288); (bnc#701257).- Make use of the actual library version as part of the package name on post-11.3 systems only.- Fix winbind internal error; (bso#7636); (bnc#659424).- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION; (bnc#705170).- Specify nmbdsocketdir at configure time; (bnc#700953).- Build the tdb, talloc, and tevent libraries ahead of anything else.- Update to 3.6.0rc2. + BUG 6911: Fix Kerberos authentication from Vista to Samba. + BUG 8166: Don't lockout users when offline. + BUG 8200: Add support for multiple writeable ldap idmap domains. + BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer. + BUG 7054: Fix X account flag when "pwdlastset" is "0". + BUG 8144: Fix setting timestamp when touching files with CIFS clients. + BUG 8153: Fix setting up getaddrinfo on IPv6-only machines. + BUG 8156: Fix 'net ads join' using the user's Kerberos ticket. + BUG 8157: Fix parsing a cups printcap file. + BUG 8175: Fix smbd deadlock. + BUG 8189: Support shadow copy display over SMB2. + BUG 8197: Winbind does not properly detect when a DC connection is dead. + BUG 8203: Winbind needs to reset the DC connection if an RPC times out.- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).- Add "winbind max clients" parameter to remove 200-client limit; (bnc#697461).- Disable logon cache for password lockout consistency when running in a cluster; (bnc#694836).- Fix logon of AD users with many group memberships; (bso#6911); (bnc#657026).- Don't lockout users while offline; (bso#8166); (bnc#692607).- Update to 3.6.0rc1. + BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open. + BUG 8112: POSIX extension opens of a directory are denied with EISDIR. + BUG 8132: Fix filling printers location field when using cups. + Remove fstrings from client struct. + BUGFIX when converting from safe_strcpy to strlcpy. + Fix off-by-one calculations with strlcpy. + Ensure we always write the correct incoming mid into the share mode table entries. + Fix the SMB2 oplock showstopper. + Convert user-specified domain to uppercase in libsmb. + Fix Coverity CID #2302: FORWARD_NULL. + Fix cups_pull_comment_location(). + Fix double free of cups request. + Make cups_pull_comment_location() work again. + Fix potential crash bug in display_print_driver3(). + Properly clean up in pthreadpool_init in case of failure. + Make plaintext session setup async. + Reduce fd load in Winbind children. + Avoid a potential 100% CPU loop in Winbind. + Tune broadcast namequeries for unique names. + Properly deal with exited winbind children. + Fix dup_smb2_vec3. + Fix return check in nss_wins.- Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).- Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).- Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).- Package static libraries with 0644 permissions.- Add Requires libtalloc-devel to libldb-devel and libtevent-devel.- Rename libldb0 to libldb1 as 1 is the current major version of the library. - Add libldb1 and libtevent0 to baselibs.conf.- Don't call the suse_update_config macro before building lib ldb and tevent.- Update to 3.6.0pre3. + Listen on IPv6 addresses with IPV6_ONLY; (bso#7383). + Fix wrong output in 'smbget'; (bso#8066). + "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or vfs_acl_tdb module; (bso#8083). + rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null; (bso#8088). + setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099). + Fix the build of 'smbget' on HP NonStop; (bso#8106). + Fix build of tdb2. + Correctly detect and deny symlinks anywhere in a path (not just the last component) if "follow symlinks = no". + Fix timeout in rpc_pipe_open_tcp_port(). + Fix the build of "--with-profiling-data". + Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470, 2471, 2478. + nsswitch: Add 'wbinfo --lookup-sids'. + nsswitch: Add 'wbinfo --sids-to-unix-ids'. + Fix smbd with the async echo responder. + Fix the build of vfs_gpfs.c. + Add a 10-second timeout for the 445 or netbios connection to a DC. + Many pthreadpool fixes. + Fix transaction recovery area for converted tdbs.- Add PreReq permissions to the krb-printing package.- Remove _libdir ldb and tevent from file list. - Explicitly state not to bundle talloc or tdb while ldb and tevent build.- Always use the actual library version as part of the package name. - Exclude shared python modules.- Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).- Update pidl and always compile IDL at build time; (bnc#688810).- Update to 3.6.0pre2. + ID Mapping changes. + Implement SMB2 support. + Add an Endpoint Mapper daemon. + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Quota only shown when logged as root; (bso#7080). + Fix printing from Windows 7; (bso#7567). + Retry DNS updates when connection to one nameserver has failed; (bso#7690). + Unlink may unlink wrong file when hardlinks are involved; (bso#7863). + Fix 'nmbd --port'; (bso#7875). + cmd_spoolss_deletedriver() returned without checking all architectures; (bso#7880). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix cups pcap reload with no printers; (bso#7915). + Fix bug in chain_reply; (bso#7917). + Fix problems with "kernel oplocks" option set to "no"; (bso#7928). + Fall back for utimes calls; (bso#7940). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let winbind try to use samlogon validation level 6; (bso#7945). + Sgid bit lost on folder rename; (bso#7996). + Fix getting username in 'net rap session'; (bso#8009). + Fix inode generation so nautilus can count total dir size correctly; (bso#8010). + Use jenkins hash for str_checksum; (bso#8010). + Add explicit configure option whether or not to enable dmapi support; (bso#8033). + Fix smbclient segfault with Cyrillic netbios names; (bso#8040). + Fix file creation on OS/X; (bso#8042). + Add "--option" to 'testparm'. + Fix crash bug on smbd shutdown when using FOPENDIR(). + Ensure we don't return an incorrect access mask. + Fix bug against the new Mac client. + Fix leak in error path. + Fix error where Windows client spoolss returns WERR_INVALID_DATA. + Fix a segfault in the krb5 locator plugin. + Enable sharesec for registry shares. + Fix memory leak in "security=share" and "force user". + Add "net idmap check", a check and repair tool for the id mapping database. + Add new 'net idmap delete' command. + Fix segfault on missing input file in 'net idmap restore'. + Fix 'net usersidlist' not to skip every other user. + Fix potential crash bug in spoolss_PrinterEnumValues push path. + Internal restructuring. + Don't wipe out all printer drivers when only one should be deleted. + Fix winbindd_dual_pam_auth_samlogon() for NT4 domains. + Fix memory leak in print_cups.c. + Remove duplicate cups response processing code. + Follow force user/group for driver IO. + Initiate pcap reload from parent smbd. + Reload shares after pcap cache fill. + Fix numerous Coverity IDs (2041 and others). + Fix a memory leak in check_sam_security_info3. + Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable. + Make "net sam list [users|workstations]" list only the right things. + Fix a potential memleak in secrets_fetch_trusted_domain_password. + Use the right credentials in check_netlogond_security. + Add support for AF_NETLINK addr notifications. + Fork multiple Winbind children per domain. + Fix a deadlock between smbd and ctdbd. + Add 'wbinfo --dc-info'. + Make "nmbd socket dir" configurable. + Fixed valgrind errors. + Fix a memleak in receive_getdc_response. + Don't grant SEC_STD_DELETE always to the owner of a file. + Fix segfaults on addrchange errors in Winbind. + Allow machine accounts as members in groupdb. + Add IPv6 support for the endpoint mapper. + Free unused memory in the rpc server. + Fix possible segfaults in svcctl server. + Fix possible segfault with client_id in rpc server. + Add a 'svcctl shutdown' function to rpc server. + Fix a resource leak in net_afs. + Fix a resource leak in smbta-util. + Fix possible resource leak in net_usershare. + Fix possible resource leak in 'smbget'. + Fix possible resource leak in 'smbfilter'. + Fix a possible null pointer dereference in smbd. + Ensure we send the direct levelII oplock break to the correct fid. + Fix private libdir and codepages paths. - Add RFC 3454 to the vendor files.- Fix idmap_tdb for big-endian systems such as ppc and s390; (bso#6901); (bnc#675978).- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).- Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.- Don't crash when publishing a single printer; (bnc#643119).- Carry error status in printer list IPC message, do not refresh printers if cups is unavailable; (bso#7994); (bnc#675478).- Define the libwbclient packages ahead of packages with a different version.- Use %_smp_mflags for parallel building.- Update to 3.5.8. + Fix Winbind crash bug when no DC is available; (bso#7730). + Fix finding users on domain members; (bso#7743). + Fix memory leaks in Winbind; (bso#7879). + Fix printing with Windows 7 clients; (bso#7567). + Fix 'testparm' return code when EOF in encountered in param name; (bso#3185). + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Fix "Your Password expires today" message for users of trusted domains; (bso#7066). + Fix maintaining of users' groups via UsrMgr; (bso#7262). + Fix 'net ads dns register' in Windows 2008 R2 domains; (bso#7356). + Raise debug level for "reduce_name: couldn't get realpath" messages; (bso#7409). + Fix updating the time on close in vfs_gpfs; (bso#7498). + Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'; (bso#7594). + Handle Windows 9x adddriver calls without config file; (bso#7641). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix memory leak in the netapi routines; (bso#7665). + Store unmodified copies of security descriptors in acl_xattr and acl_tdb modules; (bso#7716). + Fix incorrect unix mode_t caused by invalid client DOS attributes on create; (bso#7733). + Apply appropriate create masks when creating files with "inherit ACLs" set to true; (bso#7734). + Fix "dfree cache time" parameter; (bso#7744). + Fix a getgrent crash with many groups; (bso#7774). + Fix requesting lookups for BUILTIN sids; (bso#7777). + Fix smbd crash caused by expand_msdfs; (bso#7779). + Fix atime limit; (bso#7785). + vfs_scannedonly: Switch from mtime to ctime which is more reliable; (bso#7789). + Fix copying files from a SMB share using Gnome vfs and SMB signing; (bso#7791). + Make Winbind recover from a signing error; (bso#7800). + ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb; (bso#7812). + Fix "force group" with ntlmssp guest session setup; (bso#7817). + vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835). + Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841). + Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842). + Expand the local SAMs aliases; (bso#7843). + ntlm_auth: Support clients which offer a spnego mechs we don't support; (bso#7855). + Fix 'net ads dns register' in cluster setups; (bso#7871). + Fix 'nmbd --port'; (bso#7875). + Make 'rpcclient deldriver' delete drivers for all architectures; (bso#7880). + Fix flaky Winbind against Windows 2008; (bso#7881). + Fix SMB session setups with Kerberos against some closed source SMB servers; (bso#7883). + Fix stale lock in open_file_fchmod(); (bso#7892). + Fix sporadic Winbind panic in rpc query_user_list; (bso#7894). + Don't set SAMR_FIELD_FULL_NAME if we just want to set the account name; (bso#7896). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix connections from WinCE; (bso#7917). + Fix opening MS Powerpoint files; (bso#7940). + Fix endless loops caused by inotify; (bso#7942). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let Winbind try to use samlogon validation level 6; (bso#7945). + Revalidate the pathname once re-constructed from a root fsp; (bso#7950).- Require a particular library version even if the major version is part of the package name. Using the same major version does not guarantee forward compatibility.- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).- Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Disable separate build of samba-doc for post-11.1 systems.- Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460).- Do not require a particular library version if the major version is part of the package name.- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems.- Abide by print$ share 'force user' & 'force group' settings when handling AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936).- No longer force activation of the cifs service on post-11.3 systems. - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems. - Move the cifs init script nfs dependencies from Required to Should.- Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845).- Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842).- Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936).- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).- Don't tweak with baselibs.conf during %post if not present; (bnc#652620).- Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).- Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux Enterprise 10; (bnc#652620).- vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835).- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620).- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620).- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620).- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620).- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).- Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620).- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).- Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719).- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4.- Add the _build_arch at the end of the vendor version suffix.- Provide and Obsolete samba-gplv3 to replace potentially installed packages.- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4. - Do not package libsmbclient and libsmbsharemodes.- Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578). + Fix "admin users" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541). + Fix 'smbclient -M'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba "write wache wize"; (bso#7715).- Let startproc wait for nmb, smb and winbind pid files getting created on post-11.1 systems; (bnc#520036).- Include the reviewed french translation for pam_winbind; (bnc#499233).- Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755).- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).- Fix baselibs.conf for libtalloc.- Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218).- Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304).- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS.- Complete fix for trusts with Windows 2008R2 DCs.- Fix authentication dialogs when connecting to older systems; (bnc#632055).- Adjust position of conditional ldapsmb %package and %files definition.- Create the /var/run/samba directory on the fly and package it as %ghost.- Fix preexec scripts; (bso#7104); (bnc#632852).- Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient pkgconfig files and BuildRequire pkgconfig; (bnc#632770).- BuildRequire python-devel for post-9.3 systems.- Only create precompiled headers for post-10.2 systems. - Remove mkinitrd scriptlets.- Add vfs_crossrename man page. - Call make basic and remove conditional proto target. - Increase libtevent version to 0.9.9. - Remove wbc_async header from the file list. - Remove remaining cifs-mount pieces from the spec file.- Fix printers not auto loading with registry config; (bso#7280); (bnc#617153).- Update to 3.6.0pre1. + SMB2 support is fully functional despite managing quota using the Microsoft management tools. + Internal Winbind passdb changes to use samr and lsa rpc pipe to get local user and group information. + The spoolss and the old RAP printing code have been completely overhauled and refactored. + The SMB Traffic Analyzer (SMBTA) VFS module got added.- Intilize workgroup of nmblookup as empty string.- Fix net ads join when using parent domain users; (bso#6364); (bnc#630812).- cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246).- Fix "Too many open files" when trying to access large number of files; (bso#6837); (bnc#619787).- Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends "raw" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with "sec=ntlmv2"; (bso#7517).- Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product.- Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935).- Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927).- Update of the SMB Traffic Analyzer v2 VFS module- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697).- Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via 'cupsaddsmb' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on 'net conf import' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via 'net rpc user password' command; (bso#7417). + Fix 'net rpc printer list' command; (bso#7418). + Rename mod_name to module_name; (bso#7421). - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler. - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423). - Winbind not working over IPv6; (bso#7341).- Honor "interfaces" list in net ad dns register; (bnc#606947).- Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049).- Enable the build of the idmap tdb2 module; (bnc#600822).- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.- Add "net conf import" error messages; (bso#7378, bnc#598189).- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).- Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in "waiting for connections" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it's own domain; (bso#7295). + Fix segfault if hide files or veto files has no ".AppleDouble"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix 'net share' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with 'getent group'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix "printer admin" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make 'net conf addshare' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316).- Add SMB Traffic Analyzer v2 VFS module.- Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868).- Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215).- Fix tdb validation for offline auth; (bnc#587014).- Fix "printer admin" functionality; (bso#7255).- An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642.- Ensure to have a valid talloc stackframe; (bso#7251).- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).- Merge missing pam_winbind message translations; (bnc#499233).- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package.- Fix join of Windows 2008 domains; (bnc#567013).- Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683).- Fixed libldb.so link in libldb-devel.- Fix argc handling in net_share, making the command "net share" work again; (bso#7203); (bnc#584253).- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix 'net ads dns' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).- Update to 3.4.6. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first "uid" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for "ldapsam:trusted". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when "ldapsam:trusted = yes". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when "ldapsam:trusted = yes". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.- Update to 3.5.0rc3. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix 'smbget' error status; (bso#7069). + Fix build of 'smbfilter'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new "nmbd bind explicit broadcast" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix some wrong newlines in de translation strings.- Take extra care that a mount point of mount.cifs isn't changed during mount and don't allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).- Don't invalidate cache for uninitialized domains; (bnc#538923).- Signals are processed twice in child; (bnc#538923).- Allow forced pw change even with min pw age; (bnc#561894).- Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).- Fix enumerate domain local groups for primary domain; (bnc#573813).- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).- Build libtevent and libldb and put them into separate subpackages.- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + 'net', 'smbclient' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing "badPasswordCount"; (bso#4347). + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202). + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in "trusted_domains"; (bso#7037). + Complete and improve some German translation of 'net'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with "dos filemode=yes" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments. + BUG 7043: Fix crash bug in "SMBC_parse_path". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.- Free unused memory after a packet got processed; (bso#7020).- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).- Update to 3.5.0rc1. + BUG 6837: Fix "Too many open files" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when "mangling method" is set to "hash". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the 'net' command. + Fix up a share type translation and translate some more strings in 'net'. + Allow to call "pdbedit -N description -u user" without specifiyng "-r". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in 'net ads testjoin'. + Add some German translations for the 'net' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone 'make installdocs'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix "UID range full" error in Winbind (bug #6901). + Fix multiple LDAP servers in "idmap backend" and "idmap alloc backend" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display "none" in 'net rpc trustdom list'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix "Too many open files" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix "map acl inherit = yes". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with "mangling method = hash". + BUG 6967: Fix 'net ads join' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix "mangle method = hash" truncates files with dot "." character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).- Add BuildRequires to fam-devel; (bnc#564260).- Prevent winbind crash; (bso#7014); (bnc#566119).- Fix processing of open modes in POSIX open; (bnc#530683).- Add baselibs.conf as a source.- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: "Too many open files" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on 'net ads join'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing "strict allocate". + Restore "fake directory create times" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate "write cache size" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.- Give the user a chance to change password when password will expire soon; (FATE#302414).- Rename smbfs init script to cifs for post-11.2 systems.- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165). - Simplify the winbind package %pre script and suppress stdout only.- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring. - Remove using_samba from the doc package. - Increase major version of libtalloc to 2.- Fix kerberos refresh chain; (bnc#546162); (bso#6872).- Hardlink duplicate files on post-11.1 systems.- Add BuildArch noarch to samba-doc on post-11.1 systems.- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a "hidden" parameter "share:fake_fscaps". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if "aio write behind" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don't fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.- Let smbclient show special characters properly; (bso#6829); (bnc#544204).- Don't fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).- Allow winbind to ignore certain domains; (bnc#539506).- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix potential denial of service; CVE-2009-2906; (bnc#543115).- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix unresolved home path; CVE-2009-2813; (bnc#539517).- Don't overwrite password in pam_winbind; (bnc#515444).- mods for winbind (when used with squid - ntlm_auth) o winbind adds group 'winbind' o permission 0750,root,winbind LOCKDIR/winbindd_privileged- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified "net join". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix 'smbcontrol smbd ping'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in 'net usershare list'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix 'force user' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix 'force user'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don't require "Modify property" perms to unjoin. + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with 'passdb backend = tdbsam'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the '/' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to 'net'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).- check in .po files for pam_winbind; (bnc#499233); (bso#6602).- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).- Update to 3.0.36. + Fix Winbind crash on 'getent group' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on 'getent group'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it's an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don't install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don't try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build./sbin/ldconfig/sbin/ldconfigbuild84 15333144704.7.8+git.62.c1052da2b4e-lp150.3.3.14.7.8+git.62.c1052da2b4e-lp150.3.3.1libndr-standard.so.0libndr-standard.so.0.0.1/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8543/openSUSE_Leap_15.0_Update/0888bb83d8eeea1972b4b25e13a26782-samba.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=92682e8d6a4baedc706a314aad6313518dea3ae5, strippedPPRR R RRRRRR RR R Rgۏ_Nn/IŮǦutf-866420a70355dfb58c005fa1b4f905bcf54c814e8b3b9a6af566b1b7d7b1cdb4f?7zXZ !t/䴥] cr$x#Z>kf2nv3]SómI$L7``_`IX`{ګ8"ϧﳙSE?:^QEwTb %C8v5~H-Ghv$Eܷ;X)P(?Q2-a&)KS:J;G`q~F2iq!>l{Dww{=\ӊė[ do[97[ vku@ΝDd|tbۅN9G)("K5 &<6?'v[Tl\)܏9D#?eG1/П̖ ܣ1@nY__TD*ҡ"\;38ȾX@}ݧk|0Y 4cb?n2tHzksxlltBP2|Fn->+\ Mb]04-HcDq~/Zbn˙YY"ߞ`=ֲ*b>_%\UЎEよbY4H}4 mWpԍ!k ̴*ק埙]}$Mfў, !nEi ȫl7%T0':bKb6COK Ew7' %q๽:㽶K],0@>c4Өr?w5$;Pڽhj[7e/Ș&9'ު"Z˚f!m:Ct;j?=t D瀷TZuݬ,X8yi!OrZht FطJt7:E )|]tgi|,%0Kh_ٲH +052C6\:Lq'G)UKbԍNr}@*nљvԜD"-I؛v\srt?{I~;-NHhf&#e(_K/O4;2zhѭ$9 -̟ 5en/q0REQ*[(4tQ_څi:a%`\*/sottz5Wk>DsڄmޢZ?BMf@Ɗ#W$+o/2fGEko,F @u=nGzhŒHCp7iC+a8s;ςq7I#EC,R`{;> -tyI:w jg-;!אX" 6"0!R>deG,$~{'3Oz_968꘼J!G@pAכbA7iB.`ںs (aB d!(nIȠ3^u@ѓ}DDhc10Ɛ9$]SsƁ~cB9~'Ɲ$ qBW39AN -'0V(wĽw{2 ^ 9WY.{.6B6+ ^}Wr+ TZo%N!N\e>G|W:觳+j so4RH+X6.|w\S]gulQ]0.1j\`cl݀42k$veW,vX?FRܮ4|@f;BT: 5(-P%GZh+)er4699һ3^G) ]9-o%L^bGDHwx8+#g'1@YxG䴠u-a C0@.O+6#6;d m=61DB5QZ]t ܔ|X]rYqxKẍ́b8?)WU"\µցc&x>lV.anMiEf3gCf^oZ$ cI%]7GX5\ΘU^oVt?E6dz=XASęazDp==lgلiT_<߅( g8h+S7y&-Y|\]t)~ױdp>/~ییh:)"ԯףR^Olt`;(CpV 8M 2jހcEbBU)-OԔ P|AU)/VTÅt(A@tY9;;5[nYHK@ '3Fs p n޵ԇJKG\h:!uA_+_ y֐.[>˱hV3,f{GkeBuNoVBK{_e()i.xukimR:>Qm`"r=yM @<}W&mp˼6?.^Zq.\>`Wz_8=Iii-^.v&p'X5D- ~:aVaBnE1 tŘ_[{Ff/cU[ JF8N9bNgae~&e-8zevX^8mLϾ{Z沢(WtA1@Y^D)Iu\̲7Ypaԕ+ט}{WZ7稪kx]7,ݰQ,پi0[K5qZ+ U+1&цط! bx@iFI瞽9K6=O;>8̚b|),=1}!.4L+/g[mv9(A,uLglh0h z.<>S{xS)}QZ~pn};$V,}ܧq@u@P"ޒ)͋A"E{+1ј7!$OPþ ^ofcmUJ-[řy׫HܮEL~|`Wi3g'#,kErR9 +ݕ^qbzd [͢R筛&!mv^ϬIx!!.G=(LHNoV8-JUm.tޝj\D0vXg1*ɫF/ЯTN v&V[g|*>26Ԙqq(sr{O忭,,BLiX| ^)VwV^%Kl1f/,&WRA-|(!1Z93C]<@Dc]`:: ur F~ !~P+IKTM>Xq%BH2QCvƦ>JIuʡHŸ]|+;*Shj \7<%ݭw=7Env^@/Q;}wa\S{_z k  s1 a&wJÂX(clnyD@1 p 0iPWVa|6z&4TK:j=rx]o hJ`Ml+(r')V &cH\$g*6aoww{`ri~H7nkPsB ㅊj̮qyYyN%=]os)FcY+3׳Rחݖtεc{˞.c*##ac SYp3P[~ÀB&aaɢx7;4:$4NHb5g^Mׁ|>XNKf oG*l_qMq$T mgk-9u@Pie *ke~/2D_)z7]h3Ԣh'bnqMv`UaNE6eP,Ŋ$vɌaelL s"J b^@ øaVN7g>|ɩ$R}fzG`.l/t(7B&Ph/PLDt:xZ$R+]Uۉ@7 إ 3u2> [-CkBLȈDco$.PezZ~imt&S[%l <0^Fb^'̽)1\3uI:20H/Fu*.cZ *!"* "gy MejYV(CӍǙۨ sE̹Z(C@+yvV1dOra8Pzr 5:nGC_I}Rޮ2L.; .-3y8"V9Qk9Q-&qgX?2'@g_m妒 y^,)3[j甆;gRLF=jBlWl Tم`i?-> XsvҰPg_jW/M:_b9][Ppmul@[חZL+ ~sRc0 A'BnkB0AU-o5wb 8SY+&(±>B<  ׷~i ?ieɡ=ZwkGtXG,3T= xWTKW=kJl^%hWOw{0dz7PH{2WeTcK]QΜ+|%7(_]#H,ZȞ2%RzTyu>(OW0aq]pPy}eV]EII{Ub2hpkVq%3%i|%H?xE*/#+>-"*z62WJy/bw\\I 5K+urs(CRs  2B/*ut(\[0M1يKtk;z7\-M&Řg3ZA^pI#Us?׃\&ȟtB! GMEB+ 2AuzmPMm$le[&E jxQxF)!cx%ߺNetcnw Wkb7%2ؘϠ9{Y;<8s$iSq#·^'4OasahQ%6I$mS Pe`ᏞMS*7+?P0Q}%DcCWɐo:{XW芆|tQQƈ- y$xSeUbꓯ))kXy}B̻ VݖI)ϧtj~#.Cc톑y]GiCXfp)c;z"wMb?y~ѓ$l;4/>4ns&}>oV>` ; `vj. fHwUԩ#ήIͳ#j騆 VpTg`fCoTr~Dz/IuR[\-$u%:x"ҴRE.|QʶF0B_x+FJzfQ 4ʮ ~BI0.e4aqc7<ƌ&wQR3'7upA?u1Ussn8\L/"XFdلPwv^Iȃ ;#zMCn?/λ9⢁J9 {<ֲ8^im#I1!3 9zL;S[Ca^KZ XR=5Х<3?FS~ PD5̃+bI*;u'FhCtf QLj!/8Ԓ S<_03|rίDːlf>ڽh-’"d餅?穹ky.$(e:Fa$*k;=%'ѱXdl0)H=Y/T֧ R!ޘ}kt:|8Ҫrg14E^ͤaւV.R{ΨEe*a/˴tjVP~ޫ.4R ȶX+f`$mK]OF~Cw sHW9NUn{87rc@y󏷻G)Gk_ЯgX s"X 0S0PSrOu)svMXF]^qI_j<5 4fDw1'Ϗ0Jֽuq- XXbDuGX̧n_6[zg}Ǚx ţ9-gž^|t 5EpWT()0үm6U{\^ϛ0K(ID'ϒjvOu? 6̃B˂l6uKf `W%Um?ߞ;F%>;$JvHj.1i?֭s%T Ee*yy ŷ3˟MŊv~+qDJqRΙѺZ-ReP#1;b @衘.na)Q0He\TkǍj ~8󴜾ANKy%1-\dϢQLp+[ :h4{x`30FžM @۳6fm7d11JbVrnD7 aL\ypɯN6^QH޽T2ZZ';+s{,顾ad>9{=5ZBR<..#!涊K'pT57WZIEIz2~ћvI` yࢱņYvqjɁAV+ V t4{XPTob ()TϦ9GQH&rk> EK*[cfoyqFu-"r/Ba4͋ZB^6$5O\Ee3V瀨f!#hT;{ݻW0rŽz]GP#D .mۛל(~zs&u#'s'GmYK?E.iDv?A,ͷ.>o!4?/9Md:n")Oh$-6@ N:*ǽQԈY@c=ۮT|y39c?q '"#Y nq>U95ihH=ܥn @=f Cs"Hr&G"8E膯LϢV { vr%dotWSj$+xjջe04_;`*RBn'c|j-<:RNP{TY*֤Lr(_# y1vN3|tLsiOve?V5D+KQ (r+!,:x9tt'6+g$e`oG31GW&GS RǢcc!@רEX݊б$;So\/Xx)/"/On*,ײmE#\wLɦeΰ W3az0qm )fM2,@[彰8Q2_?o\ŀFZڱC{笀L2 VS0"- MOC׾摭WUzi^Knd|zFѵuZ0_8#Om6y3c'M#OJdѢKj*4,0 ׄmW|n0*ˑy&j^+QEʸA+D~%2zq$$&(itE0_P:c/ 7Z 4`C:9,4/L8`uv݇־)?"t@7a u9xjnm:4J:ۑBļ:&^lS}sRϬyelsvqKXXL۩ߤnd($i?jU]rSmh+Plq,NEE4bPz{B`+2jw=l4wBuU ;1xh}~ >:0Ҵ@%s֢^q |Kg*!NJ[_mt{ Lq52OZT(UD` |cɴ251~'*#]k~ZK!q̣r %1 (}4pAKnƈہY!PܚufUpJf"]/NX\ج,]h`yM6!lh9c&WUgJ;Y0i+(P<,20VSpE.VЛ.SnIThaQdku0m I܄do'[t0_ I|BK "g s|ݖLc c2)`<}]wX;z_ܵ*e4MCIsǾ牸umgu6 /!9uXڷkm @Ŵ|MT5Ԟf=b˻\G්F\KDji|:g'̎9$Րt)~Iw"5 ge@W`ClZ]G4Čjj K׳8*g"]0QkxԋoqEĒĄb<1' :W9;;.usb\aŶ*wn2hX>K%[*y[1OtҼ7B8u+45rsE'˫Y!j(&wE{~ h]n.w P'`|)mYmЮ÷|F; Zd1RyeT68Z)5)m#_7]`rI*=ڿ@go;8aOu'=F6C'h܈Lg*8K'^&]u'l,s}1(oNJ(5唦KO˶>9? Sl j{ƴbF =ܧ l&\`$a=+MwBE-V Ky1 dtK/'l1,9Q U%u/asQ>,F>? lr " s28*[{o7JO#T+ OapU\ VPV,R:w2﷜hWDA8[8y9NP,:Q+J=d OdDW{gdk#!Q@r^ZXxj=peljP82nݙX{[W+ɹYqUJoEQ?v |y٭_z2"`$4#J) `l&v'uꉵwbkt+BAW_m+DF t 䧰֦u>!A4P]v\7.rWwƬ`ukȴКl,w%vƇre&HOÒ&,Z2#sBn pǠق6+.WŝCg6ct=" s!ͅR7o .5 +>}w$i"#ƪ ޻8ݔ {lzϾzZ-b0N ~vha!5e+` z^OS=saB4ϤI*ODAL|{p X:s\bvmEJ4=Qg1G6+2C/#f GI+WI:J|)^΁Ԥeg{د}:G7y8j1Ht9KG g)&t|^gBȵBì8ا8>ϭ0[cKd1dž~f*kF319層Nsоb(-Z .D\Ǻ2jb>2n_R vf;S8$Nx`yK[(?CW+M/H r'qpƄ&v͈nl<n؜yМvs ^CF`58b c,"L|7-mX1d-bq1?KeERБl!L'Mp_z;}g?mY_=h_B ī;1KJBգ̈́ptWQ:p{Ħ-cʗ(*972_Ut|.TC:=l;] 5OX ߅'BKC UiNuJk]?vhQzQzrGޘ5aRkV4|/Zs3WKs+iڥެ'IKnBYA|,Qe-'a [}`Ɲ4x|G rs=/}ghyTdxׯ7s=(~DnTIJO"%+%`IlobYݖcLټ"cH KBgP9䊰f^n:)1<$2|h߈ŠTS[m-XWiO-"m;a`4}=]^XV/";ze.p:;jA,~ XIBiJQ Ε"dd3NDaVķ] _d7d}uS^-u?ϸw䄆o=)x5NEPwjRŇ#ʱ[DRuhf)NDb:r{Jk~){` T&7~qQV9:k%}>yv7W?{Ye\T<>BpB*`fFs`_"J@ <( 6JMŮ-sVpmqu=N1o2cTϣ{GR28*&@G-vsA\z _2v8Zf}i?7 :Z?6,B.ikޫs-sу`)@<+т% Gpm"X{rˇE)lӳ/cpk6fJ ]30%;Gx@N8]p[H%|U,; "#bC'pXO\bWUDq!2~_߯yȺȅ^MEZ7+b<'ex$jn w%C;iJ xfU 5.ry5Ȩ3B2u#%g?ST cV ohy܉&I 5Mfs @a67g_9^1{RtF LҪ^bZ֫P5 ΪfiOq:]*Og DiIџ,K-l'6ԗ ~-ձC.Aփ=AdOB&6N\;`5rR;GZEiL&uNOFǹb26h؅SޟI®[rt5\>wTS\ź9 FAyOf03sOL%f]r;tK] n"0Cnrf>a$ANp:͑Gbcb# ߯'go&3,-AS~ZF0+Upe@`"?p'Vэ A;hǂRkJ?%0;ddkӀtq%ƙ(L†|yʊAUwWSK›|Y5cR ^qݯ5h@e⠽ iݮڦ^7>8%NHUvB@3ٚvHU%7|BԿ(xZ(J{*SgROmlDm,a<>IMgѡ fS2ܐ[T-(%/1>bӍ)ƨ} Y˒`/EhdGWɶ'}Y]V׊7gAf'^O ~Oȓ4fG:fVesJ@P[T~ZhE@R)v0oGQ~g0ˆ[ `  AҡrwO޲KM׷sN[sCëf\%*hK+ϱpIf߈ڌ ?)Jϧ&LkgLlĥEtsd!KU1;i.5&@UD@Tc袦x=B9nq,AۻȺ^$E>ƾ3kJ4 J POG>?G+,h7` 4[ "e%2npk6 ZVF|87O;,뷳*ޘU 3fp8$Gt]`2Bh͟+m &+0_O'źpmy8XRmJ(tDJ_Z`D69\~BS{{ !Ņ2yd6nGR1E irz-2d{Z'ua8j @(:Lk{]1nVR)\ 0`受َ=:5BFg%xkP'!C3va7 FN5CqcB̬f49Gv6U;! TH1jg2v)zT+NƦ)̨֟U`c&:on&};@jrkSK+&g1`4x u/2 aVϗ ߊهՇU,~ z&1ze|6 tzmtvD#k8Kj|OVp4*&r%v|xNH!Sk^f8޿ -=; z+汢OU39l"zXLq_ί:>=G+kk깫DoJD#DPeWby[)yKܔW=QX-3%[oanj>!vs>( S3:4t/Qu~a oSMC#'E5[UfG-8z\ F?'vpF~\ ؏=H.%8XV7ڶ ybNocRsNd .JKMlfn駪Nhzd^IB⦯q7 4EMqB ;Vn@7Ol 2N 2@߅HV{r}ud *CQ= _dEïم OR'öVRla(GtCd0L_Ogum(mTow{O Hc}$vePށ .j{󽳍W@c.&4 9E"@qAM2#| 0: De (kPu&s0y\(ΪauY TJ\|ix %ixIN;{yu֑(ga!9}F'CjeRDkO l:19T!4d]ơ"{6n%LϷVq]\o8D2$.x .ZLliRPGH>ʠ?4/*Im4m%,d?Ήr3Tѭ| [w <8EրT 8W!H>c۝12u -U*&T)1`;65-!crOXyL/ڙO({pWpH#w>?+:w);6`#j,2PD f&mPj¡*,z27qmT׼ٱ*5y &?Eɣ$^!ŀK28e# 7Sw(,gޣ5xd'1TAJfp-E,SMIz9|\fAli4մ0A,繛0hA>:h](ALΖoR$Mv zJ/`SYX;W@4P',Eue[kr4C'dRW5R oSyv끉UE$M0Z׈vxRj"+4x;.&2eAD鲳x q^{is~Lgg}PK)ZIrgGM=Ӫ(Cg]HS^-NۼF؆<@.=B$Xw3eU`ڱ`a2r5w;+e %|j^Q#v2X eH_`_pXV-ҙG(]ªD]aj~lik wv?!Bv$I1Vr?2Cg5>#'(|Ws{/66# >~5,"vrrv(50\O&'kfHQ:u5_ z*dBvݛ5{ۑI-FtDL!umy~Yn,vf-yWs>Lx:ʔ ק[VZŅ֙5K QMpv67aKWnjѾ+zt߮BgatCf!\iF듾/P2#;Bv (WzWoEz9ދ/}{ПV|o<^ME ,"ŴI0az:/w\>ŠߊyqnA@us1oi%UQ?а̤+gŸ3 3ĕ?9zɴC;;wo$hpXYӨ.!-@2UB1jO.g# ( vL#_Stޯ*˒>V\ipɏ^CZ[L4 d`.\|_VRFbM#_EOb;& 4'Pfjnλ1 L:_Bd!ZF-&ú dYN>>ဳa6&Y6~OqlL܀JQ,=ݩ>#sG ?@$ơ z} ({.|oQbŔ̈٢WO _NӦ@e0Cub!- sՔyRՁ!.F~7ux鹺%4 ,MC:xBbzy+wβ!HSPX`bEC?]Ң~]lq9e]R˅ϛw6X!6,.x pПiAzd刓%$ދ:(Z傾.;SDs,\čչy9M+akz@HmE9%Wː\$1A DS} ww2A;"sHq_kȖt受חY(Z,BwfǷxɹ]K6+;^3/?7xz t &E\R}݃4V~rƈ媙n>8|%7E[nP+Ypb+ t}I=j\@L)Gk]= YGOM7:Ǐ u=t _ lQq&{w{~x֮5!Zg't^LUv11꺋\-'OA4d_w[z!{-/:鳟ld@7J9kqPWykXWa3{R[j4&Bx Ʃ8l)Ύhݡ=?M1=_v;|sZGU9?ɓ>e6qk ]ߴC¦ܔ^/IMK?H\OdHw%EZ 䶄 >:O !03r;#fu`x%G m%ÉɝŞ4F`6#+~Æob rp f kjdM -j5:aVa>fA:|vx>#{G%bŐJwSH-hz:w$HYo &fPW,Eq2aCZ9F)- Q *PQHeV4 亲D1(Cc"}E?l≬$Ŵ8.A/8=~*Պ.s@I/ kfan2]攵e)F21M\NP!5ݛ B}{."g,w"HFB7(W'*LYJ>O?B]cb!FX8VGj cMJkqLͻ]_8K;J%:?:I%NxTT4^h"g<Ba'>jpx:0`/I>U&8Um"^J1$ͱGR>zT+w=>띖&9n8@X:U[kxT}̘5_(R2>P3*\ge)kGݪA(y-%sG<JDm;tF/ET_Gy-8t 1 #I%;ؒwxܷ$N?#XD)*6. :t_Ti%aaz5մ>֧71Z[7-1V%\ ގRJF)X4!m-ċu5l,23I>r& )b~&NaGl] -[4o%^꽵nP)6sеj=-1^=\?KZ64NFNuh%둅BS(dM*>l~(0.vMi>H()%EBu9l`~q&e1-̱#,*[Q!Qs+Er)EUPS;I\R)[Q{AV?ȯf!}@3e!#zj"F7:vRu)dSbA`6^T 3ʆTT\Ho+K㢀ɥfyIQ; _+!kcgQ؉+#̵~ʫ?tT(">N_3Oԡ(\Fp'X;"Ow2eO{͖wg鐕 Ӻwc^cv|AGx)$oEj~e˜twamЛﻡI|YW$T:r/6*1:aɖ@)`(q=QwKUE0 *342$僡n~EY0eJCֵHR YTWb/Thny r4Es|"4㰣JsᅳmO2qEB8>d<)X7cr| hT{ҤV|i<nPO$)4 gZ56J J.K5ckW%/Yѷ.0e_'B4:Oh953 D7ChvAYXѹ0 s`uS6]TQA] u*fG GANr_H/W/٨DQþh^xH$p[ЊG*t,f˘z sni^W2o0-4+}ž\qI_jSD+]HJC/T wgecUa]T* :A M~(~tu:KM"oy3Mxaeϓ*u F<ٯ&O0d|AgJP\dwnʦ ez TVn*wJ,Tq3 tXJC /ZxHԦ#$ Zt]'6:J:iE{o'%"ʏ$=e(axVxW8B| mreS M/ ~@FlO:1}WۣZWpk(б >iw :g3T!+څMvFJehK< CܘaӼ|aUJ#S2q,ac„]|1 BJ﮴R{59N ̻( UaႪh~"eXԔ`0;/U8UMLL UfX*aG^+j:@%#n+ ȴ[ٵ^FTMҶг"5}o4TuYp%&sgI`"<Je7P*g Xz"--ޖ08zT-C3 {Dq \O˪@4wJν}c  B성H#v9d`gcܬ]jì vv_% >(:u~\Vȥ;^[&>j ѿSoN57#k>'3l@mpga$֑pS*+I, ^"dphaH2KA4e]zpM$zOSv6vY@;',S2<>!n&Ų}z|np 33/B|ǧBZX ىy-/ >#\HVuLgߐX3(VAE7KW{/UX:Y3<>-٬(}̭]*za ]ACMHځ*e%-,u~EoB`$_&9vCtрWE j Ql9&^R^n\~=xCQ5 `ә㉥5}ֽCK*D>)RJ_""փ ic&v gٚ,;_ YE`P[5Gjt|ayJ! _J&xxD:K.H JqCO}MuV>zΑG!)-|!bcs B.ڡu޴uOf$> ׉Dx+A2TaLy Dg S >G&.;ԿL qV}UøO%}>\e p^b,Ω/[nMƧIyq:-tvoM6Z<`s0s3MdSE#yθ,O{s(eb9oUSZ:dW֟y m hV14F@;Zjc 9ukᐔҔeA6IZ_.^=CI'/,o(nO5ǒe4k(\2uO- Z^I%X7'?n3M?NH/$ƓQQ飩8"2zFz)!™0D_J5B ~Fo"˝+|!toHlH{fb{Q+m>yԡWB=B|G0b !u6zU 95C~CXzE@֕ܺ(MnӦRh]qIuֽ%A :L*i3ZRߓh¶k)ևr%ai1~x$l Rkfg7. T%G٭TMJUh,=JV5ºrBAГa _\8M|k&m{o]0:m9(Wt.u bnE %ӫhvtFA/U=nB]>/3jY(?ovYšFI<憞|AnWMkq:7ΊjE7wl+b+Y*کࠠ_wyL*sIRP[jYcHʑŴJ< f} ;ֆq*םqYɦ$2k +'Ê(nJYniI/'_($ /`7܆D6n"ZV+ЦBuuъ:ߗ\GˁY/Ȁuq0EHֺJ1"Jǥ(p}}1}I.*f> SM ZOƥ{s{e3Fԥ@@aKς+0 b!CJp!Zbj[Lb1I ! }h,_eUұ_@P*BI33+u Ok&-ށq92PV% *uw1nPG:= CcZ0޴Mח}lmWUtg O؟d5 jƲ?0^JldD$i 1ƽL,a {FM_ꝊJ'F j0)0d6Lp:wNa`9g'>*ةs!H(3'Sڧ;-!"/LE>FᙸEi$ח[sck'\$*}+.N!5P ?S}M#~9QcBeJK~?9.2_*iȇ FXlUHe,|yoIV2_=5[L$OSXQ BKK[_,i4@j_A3xabO$og$+ Apna)V໗bp-| XD8؛_vMHzGpy@&I*$@%p toX MΌGOε~ K:%RHKH)0[ T.9ѻ`蟚)yNΦ:4 Dq'l$[qu눇óg,-m\:x7 ;Mɧ6kE6hMb^$z3Ya#@}DH1)ku`ބ87uuб`\^pl9$Gh;^u]xrj<>Rx3MW2&"s#:d-I1v1ۣtx.|ϵ'听XLt\,Y`y’ұjg;gM@MjfUYT`9܎peP_e&Ȳ;5屹.D[X5g|q8zq\.7KG@Zd][%*veERv&Hu{b#=Du,`6|+&&Հ:A"+*02"xuvJ:x轂o.+*,Wpl2?ay~u䘟,ɠhRG7yur$csy[Ls-e;1Hh\{HL0B}=BKU*>x_y޿~}]m҄.3qEifz:@"8f]%arvXEX,5*H ){;8|`ƚE/gT}Rh?Lx|Ֆ5n~nHȾ7`4Z-?OrC׶Z}`wxA b3CU6W$;%#U#ᅰ dҟі̦HA64]ZJJt:dGO@ eE't*geA:^˪+.nt X~2v ΘC?q|X*;21 BE9dJ4d^iX}Gd"K \(XGo4L*YWvhyڱx[vAٴ dRp> tL.9.Sd2Ql\dx]<u{t"@mAS Eӹ>U!Ml2\P r 3ޑyQ_mAb6^Xg[ۣ'*?itg(qjKJ=pZ1pLCD,;=Mw mY ~doJ$<}B'J԰C8C'esc5R[5{^B6,\kľ"*V!O! ϘJ g^W!ķ̴ZuK@5CoC,(=C^oJ1=E/@[Eև(ty;r)᳦?J>340^"KRc!DoΨ]I^{~2mˮ vU63Oǩ6.GpU('(Z?'#0~3MjD+:m$5X%b#MB'6_v՗):2wo5d #SC10 1eH߄oF< 2{k^vwl 6@/FY2vsȁҔ2F9OC'Z3'¹Z7okgžv ^K/(ԙy_L˜Fsw2Iw*[) MM_}w$X rp`KdWԯ42aj_Co}QZBBړ\d[r߿`0 @9GMXGvğc,Dh:HqPNYd9xZ.d\XTHpӗ$2L ıVdQ YPHN|/ %{m'3&~xӌxWnUNs V$;\[XKU#:Ek)䋣k4䈺=P[57VVeX0Yѝ{+n$ǝK*t(2{6.[y6D 42G" !|4ԟՁc8dr(.X6j9#)iCs09offJ遽yP@GG c( T1*; B:()N0doݳ <^K_ (>.!Rf+UP$㈎TC&SZ$^^1@7e##b=:;Oa%$N.T>ܮ"ʷK6[{EuA W ڗ;։2gL UC&`C;@#E|J&TYvc YjfmM)My7i Ω1:U%=&D5sa PfbgH<ųCu w0)V*5^qggC@J蔦Q&' &{8Sȹ'ɇ^2A|*؋rb3QL,bu7}{&& 窥qa6yt~]c)=מ%kt|B(Є#lJx*lFoaaU1s 2 SVPS58^D=:RZ6rdn=^UȭLɤںٷzy]H?Wfآ*EGhTb9˶yqwq7[?vTlk-&UȂ,{|ˮpoHloH[.P,992\6D¸dc2nL|ڧ^ 959ڪq#(מԺ70vB#aW! c==∾ຳ[E#G Pm_y^Oǣg`ߥ喙|#n 7vqm*{HwV,cox-ط"{77l%e˅?JLùxc(~\wͦӭYsg"iCB @+j:m!k6ks\Vk0C]s@/r&%f -.jOn%S`o=.V8Ls(jU.$/u]:ۓZhSJmLfdi"!{KgSߕ5UQSM]}grzATlRhA>@kre]Y@bx$fh4XHʫ8Y7w !>9B sT>]cL( i HqrQ?hv=^vV-~zCKv"'j "Ư+.j!Un|G9P,%W]@ ﶵKAjEű}Y8|R8%wۈ')2г-K2z&eao/^V$[/t,ĻU w}K/H>M ƈ"p#zw[9vL;{_Ljk _\ zz,K35"59\c-\]"GUŨp"A .g.UM:zmX$PRUC(gY"{^I{2eB@3I@P}և,pAuoNDʣ'h央T~^ BF)%a$ RBz*2^LgN4Z sm̬!L Y)KӏƾnUL30 AL@ %bP܏Z 1D`g=Aj7~Ԑ%!zp\}%'*7k)΄H_&[x;IpuJtl36ɎUѿZ\߱.JϺv$H34+v( J$I?4\Ld 7*\w`_HqTǘÌ;ͧąf`"CHnicX䑙3 wF@0u9.d{($ҍRWK Q<({%ڑQL'Faoы}kFa?,;H956&>V_9׼ tG{·SH}AnUeuJaΟA$I?:FKp&lgq{lF#;_U&PպT<f )~* _TD'YܺqA= /$t^fߊԍ:Oɩت?3#)M֪l4܋}UTlk=G8Ŗ=" wnRY&8f qbg-_0NIr1.1-bǨ>f*oV'^c MJֵ_k3^ AMGQq'y,K7%Yu^e q(oowM9$ @pA"8s{@ݣz'sZ{Pzz )b '6 \³[ 0I'] 8֘=D4J$C2񻃿>}ܵL}DB[VneCZ%ѴJQCa;$q\}%D=JYͲOY_SܐQ?Sߣԗ#V%F8?UM9(wȔ6RM-Tjn[Poq:ç}S]M#@Y;KȀ m6cC߱c=w}r:^ֶ{:˚I*!`JǕMפfCkr>Bi < (/ JzXu8& ,4_ Oez4U8mwV.ؑ'Xdk];23w|hb1ALS%jN 6VhYE;pذ ]:~9+_w\WC<9_IL *I/Q&V;Vcc24=.0;8q( ^QUaOmLC={~DgT|7WRıel%;,.ړr?$1SR09ҏ}l\d01@V|KfڥSHj`^! zPTYI xN/.j&o@yM\3 F(%Y02h^KڐOZ3 >Hg:$!PXVCӤECNNS +C1qR˭œiN`*.Gn㲬> (-ϐ5S)@\dy]U?Hؒt`@y!3}EEyB8nޢ^ިt,Klg=N!fl)Z5 ԔEU"Y@Ry늵CA뀫Urk/ǎPrx@HkEy;plw}P~;;=YF8 (H~e؅X0`"1~${,7yO4zIvږӝ%Քc6|ep&tl{rIţ-m!oy&l8E74i_e7MV^@53)\bHX0G(&- k+F=~39U"pAɎm + z UL2jcpѐM?.XQzʗ"\5T˅[ BfqVsrFQ/Td|iJ%df"_ij&C;hg^/hkĥl61CPӶ_z~ǷC#w]YH dVKe*"ޓ?:s;VnZVb#m»rBh'plu+\XdKnې ࣭Z6C6{fB#fgymu$7|c*5p.sy2-Sc|?AO-1C7dÅBmGeЈ=>{68 -:NKAˍ<9c g,mBnOR;Y7O܈_JU)A Uf1z(>vk2_%jeTj/ `h|V añEpk.0/&bUn0#1%2x;~''DF&Dt-]IZ-2̳Y\N#s~{hIüL 4›\>cc[P%-54f=3k~G~u7~]W-{!ߍ1 聹*JP.5ͰZ9FdO ;{-x~R*6L$~Nm|J&X}~b̺#Tm5^|dd?ȉЍZ^+}.mhTH*sEuf@ެ)-NBݴr:[h5[KǍoI lk ŕҎ,Zt>N1~oՐ xIp?uajC mLlt_@yXm)uAumaP҉mQ{BCXO?(7?0Ehmʵ+ f9龱l6ϥe8CzPկC4%E HY*a`b 4rLol1=\6KnPX]Ƣ~fYjP`2LhΞeT\5A+سIofy MC)$WR&_5JA*0g;IV:Pצ#CU~Rs3ր(;Y/'FRځ̚;CZJ2y :XnZ Ql喿 ZAvjXi$\ ޡqHg_|8OKʏT FTr5bgKű#EGe`K#,hf|gF.S)zAhB+ae~gn@I %UYX?4_<q3OF4's5I9B) fo=uIEJɖ<҅ hfG%5XYzAd vYi)El"M7]ٮ 6_ys$Km8N>nդ1?ПTXZ1]ʉXc*b#/:ڊ\1'eGowa$."ǫ s'VC"f>i)EC5 vQwpf$H1ǵe>!k2;-JoY.t<əe$\ D5P%`.gk!gzhΆ*h0euA 3Mfr?bcׂHH${0lWXN@{dud'M7xu5ԃ[pu ]o:~M[TNi] -1`e޹Xk72rTiWt%7zMvpE96Q-Cc _c?inˑ/5 `'"aL&~c+nf}^zq&FAImi՟V tE^Ͷ4a6Z\ZFfnn߳.^VIփa] uഅ*(]1&+ejاh$2JIնdi΁2]nN:?*5)O ^hJ{7xSBJJh⻮ 'ΌGD("j#_VHŠdgɘ:9,X3R¼;7o.%2s {}n/OYXYMג4[Zw[5&RplLxW۸+G4J9U,lJp}zPv#Wr0sManLު[V&LacEbG|#Ц4be]sŌ=oaѿ?vFG(.sT4l؂`0+QcDW u B&4:C&ć75G  Ֆ`XTJ,yh4q.yObpf+˶0g'GZTa`DX$Q84]@sfφx%l)m;<,&Tl?#' >D'8XK4pDV"?4TvPdDd܁( W\@YL"8 r&/ЫX* xЏ+ U"ezU FNhÓ%eB}~v([5:0; Qe4*"yxmc\#Zy2i'EiPB{VfήM ,p鬘hO,HA_ kk;o8Ead_XM#6~Ew\auDZmn0Tw36b b\E5 CqMנ-<#[תvRA> r&ɧo^EA^vts;So<[sl_% 0|!]IeOl=Q-eov OsX6",>X-3 ?JBB%/&hYaX g>e#H/#x,xllLmP72*\݆Cos%x87>dc[dTͪ*H{ӽ v*IԈߐ6t ?1]b;O=izXbDWC[S!$Q6rxZuBbcE*خ# Ebzw=!_ฦYI"̈́TqPyY5(w HyYףw59鬊};!ҍ4uHs. 8gEA"Gm-ߋWQ .q%݈Ψ]-UKboS5ZChV Ƀɗe}P}iFN|Q2r#<ֲ26$\f4qGy̢݈g~Juuy%pag8Sڍ"²˴W4΄S=sk #M*6A[ƍavbs"Sfmz2-!tA9g!*h\Cu{n}Ly%s4.I`Dd+̰.TK##= oa$m8h1v>k o6R~Z,C,cTOm#k>R"Zg>ztƼt#u< {_r >[$$Sf*+dpū_H1h#?m[n/&Oqf̦ovuS͹ B Ǖ:Կ)!D^q7c ]clW(6~]KZ#,8"JX;y1uqpI$} 9D@1߹7Ym8Ro.!<c*: {[K۪іS=YR0L&]$.ˠ^yKd 3%6 XPDa0ĮU~ր䷬L@e֖F(Ө[y8hli2M.JIh[Eo(RĔ& 0UK3,*I3kt*hbc5kv%ۚe8X}I0Ts:QӚWǑ_F^"mC<[p `}H0lR&Ḿҁ s`*`Y 5qT; D_ BP2o\M//*q -OOۤ?**b tys;O8+iTF7`6SQpOU1w:ʐ:AV{[VaE#U@Nw M ekCf޷8Z(*b ;N3*?3S5* yGv?Ġ"6S Y!Ř13t;E T'Q p#Zj WKN#x. 97y R(B=&:Ϯ).VӏME([Ǖhr&Q6 쫜m/%?WO}:^H6WpʫOQG1#tFn} ʼn]ئP' G)n'fqlq%[dEJ^Dh(oQKmސ^*O|6IrT3gk&F'M Ins#֒*- q!{&oӠ''B$&s7N~~?VRQ~{2RPt NAAB/< xɅcTs'_2lDqG"xIu)\i9 E9TLTJzʾKQ"8_nt]Tw5yb6H>?}iqԃqR2`*YzhO2߿«};Ru8)%,ҌPժ;|Rs࢙-)[ڱq~nn}z' t&\"k\ʐ񛧙 6guC:}N"arjLm:iLXmbk{A'==+0McAoWudg{Yfl+3 4 ISC<56H~K-?N^WZ2/nk96qk>khޛbG}+v>5lgFMcٍ!t$tݵ s#lvq$~'?oJB^( sGttl.B=T=m )l+9AMHwfcӊA GIV)c {9>]gҾ۽h^H,.o=P.+7Ya ^!de:aؠQCGd|DQUوx^'mf~|G$<}1rWzbaBojVDԥ?l8J0 ̳ec< jtw'zO}O'Lkjok]%)i.#ya+XSo\m bB ? 4`^;eL%t,Y P%nee|j⸪[!4pM2Pmߛ=)Јj2\s/LSad0wlC=%3b^(Z Z\ӄf#POmKpПP&wATiIҏIBjvB<5x>נLF E=+f VYKT0aF֩l M(d'Ӿݬ1n\#ՃWv/I{]!<}'6r! $?miUƲLh98EHEp$UbϥK 9I}a)ֆU*AljNh#e dVl$=uz4XH_׾iOIvLLk&}I]h0+fbAoh.4& "^L]`)D\^Z=YH&=8D:M=C,2isgW&y3SYӂ#PdeN͈=:p? "`_#E|}F;"0EcҶ `뉦:yd{v !s^{w~BSu&>vn՛$oro_Xys;#!mXωN71xiTڶB2(EԌunA?u#,ƃ=!B/tG}JeEROJ=nh,$F[5诙j=--)7xθK߅!%SM\] 5Ŋ,~FFv#:Ufp;k(\C(U/HoO'd!ϯXx)δ`Har ; ٘MO,.2M;nuƺ gk   =N,U|ukJw$Y GĩS_ 0µZ,#ӱjsT1ZJɊ]+ӗ@R22p$5eP K\ȿ_ؙ֖Y??arxĒ%,CI?c) =9lD6?[ i\Z@ӤGǚH,Hy(aqܾ/ ocr6%$2"4h9E_Qu| ;@C0Z')5*gx,1E"#x>J;3H*rOm* ʡh=Ie)Kr2žߍש UYD +1Ī@NLK"]w er۬LG0v*B B+Wnf 7X+I9)XޕͿm8t, ZQ>L"I\%Nկ~#4jԸ\NxO@ouliiuCV[z!~;ĀvLɒ/RR౨ dįv3ɔeM {R(7_L-CGuDe9苭U $7zrے89{4wUD5yg[]eFƥ϶սjsl'@\O siTgۉtܚ//"p,>HIjBDZ*t^r`F10rZ{ֽᦣXjlzð w|LxTtKp x󤊂@7IRr̦V;pw'"ؖ)0!Ɨ)^aw߇-h-NMjp SPtdţ?ǰ8ɷnTuJrk-K[̲1-c%ݥD%K%ǬB!8Ą9<-UHYM!a )@s<"(qXwpoTb`Di9<*0rBq,TFz@4AYhhňv(܊4闦+ Aq+i{ 2JAU7 ͌ܛAz&2Cھ6ɟ7;x|!F6FbYQD7a?yOھ{DAK悧fS JWpfih,dk;j~ U̵fl䛠A5%uU,@C[0P63\J1LSL3pw)鶾r i.zbc'Љ;E=oԈ j!piХt*^F\=aO!"O%c@u:`3m^3ٓw54JZƝ̯M7S@~,Ũ `*AmR"Mxgk;Fե~ae=R><2| PěMX:g%E[ gWLƼN^Yi((y\c;-#Hgj(y.d"ZA]JO @VUk rIKc?>N@-%=uks"gKɅa |Ʈ=S`\<¾ Ch Z.ؐ+IDrL^az”҆\IrȤc@`X8ƀlۙ93?&񬽄;^aڢ?@Yi)cWfX5E8 _Xj|hid?56) pčZܨ`<1ޛ,͘v;ŀa6NG3\t/1s ©Ͻ?߇d?Bg@~T PҠZi7O$k0`ԝ>>{x26C!ǔꘋt!X ѵM\F?nvb>4Rȕ֣o\o;7uc#F}Qs禮#!9ta[bLgP6em`l]yxډ|Rą0Q}I"&KHTŴqL[XGҾ;bR\ܪOΌQq/}ɂt':^8"E b}J@ gC 0םQXi?`$4H1՟}n2W~1,Eqwcn9v1 `?5?BğU2$5" Ľ8NE-SMO!)WF0IP  1}j)v8k5G>^D> `-;QI~%O8rt-AQDtqrV5sD ң`ڔFJez'G)gE"&Ů^yJA- CT" b+MHd|PL)0/JjHk;s㽻֐ăkJ$ n!'szcY :ջD8 ߹է@ʎҋ Z($eJ0LxVU;vHXBQQXiX Hԁ޼ Z *;7/ؼϯv8OR΀5^@QQ* )'+;3#*Thdȟ/Kl;134Q)_X^gldD LJI\l)ސw\)hIAR5"?+ DRܹix\貗$Y&k xLXfHQ{kT:.r84ByxF!s_DԄzY c/fߞ}`4ɝMz6Sd~WIQ!+0N/8@݆yq'BoìQ9|Ah9oYLd$7u67_!y2P^6&[#Z-XGљfӿsk0WF>/ f񢌻\Jcw}1yIe3-S9&JT9mÌ͏y :)q|xL ~d&oٝI&q!Cs^Bgvqx}b8yRR_zT2pX|[=!S@q!l浄p/)(S,DF?lr(iU%qo0 J?g-K_*g,tH/YȞ(t-f xN P /M$a(Q:ŞH a#qTd޻DلFat{Pc}蟮HN00ѱdSq) YO= Ir8[b~Hdl>PW7eb(ͤcn&LE|M["B2Yo:9/l52"iͯ[VL)PH[HAo~BxԆF.=Q^/> Q8î)Td)QK͈ 55 'yЗfI+o =Ɣ0X8j'iYNط ʁgMc߬mWҒ-f)4JSE^ӍHsu@H}e"4;}^n lsg ()_%ŶPK1.[ a>|Dd@eLܰM]^ کrߔvH\8 V~KĨ6'Y]'WH6@D/}H)X$|z4{s}F,SKkP2zF/읇}^p?M0:*'x2ö2!!*h-Z0OY<*07"NqrFL8GƦbztS b,UW 1CZw mPx^d}*nrI l mԄ,s@2ޘ%n0VG^@z:cyM4-6v@aG HD;c.ME 萾ES"0pxo_h|ЉU ThQ#8%qNh~{Gݵd/Ý(K Xʄg֏K _\otRdׄ@L"^[OӲ*\'rr*޸,aVr\ղx(aR` DIse3UFJ,]]+ȿX:,a<cU8{y3<|넒_M=ՁBv d{O5Qm>C7ir>]q&q[/KsgTW8q r(}SGNw%2L"^ImMP7&iuoWDz$,[k'wt0C!M਺-z<*7`h;mxaC"ٯcHqAd:}ve/NӵLʞV[ O d JWE' 4_$ARM]mIpX4p[]3)&~(=ipzbtzv'):0󧓽H#Jl?pw%pt[J!fl>Ƃ爝p.[[=Vǭ\t|;sTy97r־kwg̱[XJ;'br!}633M\Ru@/c51KC|NvMj䲈Nn3K ܩӔt b&A¦bK_\pƪ5Z'>H**JS  T&z̀}{0ʡz<̝ V#dς:^&[>! 3LfK>bM%54h1EZbbɍ4=A  7 =wŤturk|Z)%"ztZ<ϾUE| T,y4MV&k?-ވ0+֚;**ye&uYQxSwSJ}2m(j{[$9'>ͳd~[# X.7y*Vv2a<$%HzI/5$ ́Ԃ" im#Q5xGALX)' ,榖aCw['/@Bl @1EzeGP u1*zKf`հ% R<ݺ߈_ dly lAWNZfuqt諐]kB7Dݥ<3",CSځ݊T=0 >x匓OX+,ᔳitFMA\8_4ϡP9ID!lYRk>ډTe 8#V-8@$T0aO5a%'!bμAh,CwWl}f?Rm|q͍d[DhOH'<7wLþ'eO"Y͟ȉf{ Ea17,6Ygwm:pšr'C Y9*nW}Nbg$UJK Uta^pּ喻TO웥 &BhE )2VF$1MM*UdC^KLqZNrDN(U(`!)%gT6PԲftüODyǦvx ,M~Be790bJw(^_7:̡Yf8 )@Ձ8,!7RWv+zVCI y$F`"-~<.F5r=®7_Y(TFWgMLz_۹B+Kbf%=*HU b޺HM=%y.k?7S DX%%jbnf-/kE@6% %1 9 mjr߇ C,Tُ^TH i8i(at^K}#r>gjPk2D,t)%@O_} :3Ҥ:z.&@&>"mZ }JhMPJjqYmez p]G Az7JxHXiCV8 JTbt8U_kPi([W?3a8-QT=h؃cˏ;2 |npN04p\$ڵibY@veL58=dv#B nWnueD,ٞ*N\*f'l/ S VVE:eWe^_*vxy0\4`@+mL8 ޷1 CeA/pՊ )-&OT X2N5B[p9Xd!ʊ8twjs^$\鳗``Uglnze7qip  d2M`a> ~6󹀦.GC,L׿TnGyzym"=ƞR Sekg6 +yvJ]Oֻx_-=w=C ttuSM 8ϰ^HFE^<8 ,γ Ec#8O'&4i+,[Zg䂴9LtV:M Wꭞ1Gݝ~t6{$LQQJцQYq ~@+_8h\27-Zb$Y BAClկ 9|(j@ Neeʧ˜ X=8I: /5CoTGb=.#Kܭ~dTd]ٛKI9^a@/XjP V ]U*sjX/^msmzL l者史ޛ&ŐE[p mo7'H;gORw}SI;Ɵsp=KtgoPJ&8ՍIo*)J`mp{Y|i>OEB7{bfoCI݁0%@,Dǒ"Z9YFhG6>$'zr]u]0UDRwI,!;v[QbWt#IҰ30j\^ğ虂,s܍DT1NO;%`afu=zJN:Up>aw"Sl3̕ _<аQԭל8kC=׍|/Bv6 \?\;"XCK(K- `v*j:Z]x^S0+ɐ"3R/ՙVrݖb/Kj#L`e }u<"Rx$' xl)bSydc*VrXc<Ͻ}:>.GO7Kc .K̂OweP`ia@=~瞡baqgR(<54`Rx9JZX^+RǛtʖ ?9r JY}І^\fc5>I¦tpʎnOdY6an;hZs&a|SLCqᬉ}KX0 r)8jKWLV:M,A&%pWlRlcE+Ws7Z2S,f#\lsg&x2C 0#@^S_.vTֽʏX=>nF\JS=TDH3yϟ܊ȟϏrR9B dPpĂDk`ߤO4`KӆW9NLez ѺCWL%DpA]=%*?u6mG͈j鄣$K{+bC!rAngJ/g}.8uT(]ֳ*4%n" N(YYA3@^~T}Bq wM-__q) 9+_/;}@dOA:K-Y`έSJ6'7`]!O3cSWg Dr֩!b-^=`ڝEW߄Ȳ<%XA,39ʻFFbG_*8Q%+éJdlX!tg&_$S*Y3Eʀa"8ٲO3EW\4-e +dvIda ׏*5ӳ|3K x|5X4Zf2mN'z+WXZ^ܥR{H2$2Ue?(tNזs~c烡hЬ 145Mg[F]>\AI^N0F.W5}f’I{aؾBGU5î2`A2ę0/'C7>00YRP?D [,2 S\vT\L 4g(ey`$P*I[/ tzR%wQSzcWb4<^YiҌFYRdh&c .'Th]?=Q%M6컆a/}iQ=M9_b (\6üvZD5P<*tK,WS*ϼ]ȺU2LfWgó(klQJ3Pu3֫::"_o|@Z>k3¶YT_m$A&yompby#P{a dwWGG wTѢ؊H㑦MWK,Zhdx\AF,7:WFOy,t ^Fe\~=y|ڸG!ׇ^^¨?&A\^xZQV>C=ULrӉ[QY7߿= _112۴bɹ`H*{dO#س$7\WWb.)T1]TR@O4}`cF:,UA#_Cj;nk aR3LrR'Vå}C+|i{ʥ ,6_ }y[My.CnwSfƅU H;xFA Ɯ` )B dr#H>0'D愰qi IDT-)gܣ_WYۻWģ(/gjdīYzm.pz<%TܕB "m6E1%nҘLJ'oI܌.LZNy8yJE\GtnD cLCjN0|iuUId$<ސp3ڼU ?73"tߪX^#:Xuqj:+T^3I(`t@yF/5w_pC$ ܡ{ږ3;9MgBB'}3:|duX1u)t&,(nTh}0>8ƉNyU%;٣A`쭶"Ѡ/}ۦjY Դ'Q7`}TΡ8X/&-Mzx)^LKu:.7GơPNSu{NjȾ_}vxUH=E'k'$<")VK']R"$t,LB%/r[+t7Ob׀gt }UO)SZּx:̳&Wɭ۾9>0>-뗥_L Mf(R\Qo(kzJjsW,nvl^ZD__a:GTgpUlAd.ndGr<E;*V-|" lE L;o08B֧ 'Ȓ{e4. 6} a8kư[J.W,C䆓:T ALM[ 7kt^瑧O IVyzU0ғ عaaN8$I\Ow]( ,Q:ޞ Yjz+%:ž==_/S(z>fʣ LHpKrNҿymO 1j7NL}e#yqq1</[Ofƽ"i/4F lȅ]4SZ?{mrRPrUqmex-=vaؑD,UN\2r .@`S0U͞aj͠U&"潽~P MCp^/>B@|4i6ˇp.}JpZ6K&坚YwHXG_b%#b6ʝW3߳ *9|7GA #/?Ё(bǼq ;]7r{ܐ>()smE1<pØB;T,.!V+RkI6A1|hLsӚe,tNȘ2Q_O{YmO-T]|1PWn0VddT0HB u[BHW"3OX䳴F%<UK`WC#PcLo?Y~X"42ih>p=M#1zAj+st*d>)% 5Ur[މwdtQW'y>-K+xztt̷$~NN4r1:Q,]UM0iÅ,z U T4aJ:P*[ PM6 %uE0ۄ>h bj"m!/v{&PePJ./f8}~s',R=+s'#[6c#}[ SnEHuKb*[Hi Y9evU+LbӸKwo?%g0Kƅf!IK{͈k>2&/ ]9|:*fa@^ɨ+u.h8t̖7'4Oc4MSy@N=N)sV#/W!{ Y] kX`8״cF sGF3uvRbi]K&](7'Pc%S/|%EvuUSR?߾k,ܸ MWٱAv)rjnvR)W7yEvkj@S7J90HjٝyAw̢CAr!#LIgJ}\*iTDxD7mO!$MijA+bf 8@;ɀjl%?yjF-y&RtI B/K|6QV^V"#EOd TFf9=$"F/{KzK,^&^T >0D^^=7kAc3_YRǠ/vͩǹCEks=b|T a #Bҭ}u80'зio1 8KC搆/^U:d(:a0'?y7T Qρ~b)`KK }4v2H.uI]dv ܉§8@5W̼)2% K[zI7*ХMP<.@c8 aw$9Yk w^2FVERMz.%WgliCtp|=/9T B-ؖ6]wGv^o5 J-РX}X;Nao_MקNg+^{ͩY_2=] )B4M_9|?wUt]_ ʩmWl΁%K.9wNVb9 ͸6ہ2bC|%ʹ&g{lEw'1F1\uP)J ^z k}?v !RoFν~{HWT1w8$5O; l׉K~APHxghX6|&QKC!T">|?+cM鋖hWd8NN5}y,q5B&Ti^k-y;L2AА2,"y bWƷpfWK ?YL:.ⶆϞ?/4y4J9PHA(fѯR\uAՂKfc;8_WzQzu+/]3YCϪ.x7*!BQ_ P,_6^93r;$ KW8kmyfP^Ѱ6a6v>Uӟ́ Σ]))9>")ٳ\U|)5xR#UR %>ަV>j̜ {>aѸ:cNxn -!V3Y)CFRA jץlv;׊aC$EJdaXU?;*yh-JӜ<@ ᾯ|ӻ1Q)` Su8ج4!/iY:$QΕ/xi^WcڼelfF|F 5lswϥ )yK{ HU7)W= iXi7~(Id9ܬ}2e nX@LRD=#g=FN QS ViT n/i숒iajMpKEKK_Pu 1?ƓV2;+y[NYvCl9 &2>>3ܪ\^lɺ'ey|)*jex:Pf/BC0!3|< UťGRƳÇ)aC[ȣ吔\,u=0Za{ !kS%U1aHbjMEԼElP Yڢ "]P+*+9{{|T=5h"~!3*ifY#+o|b/|Wݳc5@xc:_0q) wևWYd ;X;XDakÒHk_WIgFC-tmsg s";Vg$$c!ԁd_^*:[*l[$|H2 ? ɼO=)?C)b:{uxuPѺm 38cR/IOo =h\\弥e>mÖl5BȥcQ4|R(10%Ϛzo5ꄄZ-1 LYVr(1M '&d4[zj:`CX01;񟷒ث|, =^{!ͮ'M?F2]9㞘B j &/{ߋ2u:Oou^?Gc\; Izl_!oˍ^Uz洎.8ͤd"@)PC>xQ^Zl=}gkFf$Jpt޶ rs}:yZnyь՝#0b<Ikf0˵FþVTo BZSʃ3wl<{31ZKtCSu &ެҚ,V rf[rvc9 +UPn|Y(LY%QT\5#*AȘs7@`ߡky\J9U C’zPYE?g=*¡"qz S莍Yp]}_nɽ&M[s zfwf,ˀŒZiiK.El Kb53@hsFwi;/&OjNulK[6~-gn_X_F t} X^i\,|+[`Q-?̐)HiGAz2.LJB;fL Vl2sU ySDx$dxM֘ F',LKDT Ap *ϝihehǦ B0V Mw[Kş]^FS-&{hv^-/7~rI #k; 愆ꈇJqٔg#K`. kdA2KWƄ*%;(CZl4Dz#55J|a2m颈 P/I`쐬R V<-/xӃ.'brI%60W^iZT@mgJ(y6X#3Đ_>9 ^\Q*b3giRX]= Mz%i\Z ndلe`cK:dqDϖ>dnכ,ՏDÖ(|*q*u\Ɨ25}HV3b5 ZNܩi# Ҽ^MRͨxr^?> 9yn+BCY8g .,ϵAϥ۫`*'HDD1$TK߽d3vgJ&\#\"kxмa28Q ش-Y\JUJY̧D)&$ Ny!^7{݈-uUW})' iI% ǰ8fv#C8?)]|HRg Fߕs92:[߾y0052Td$ܢB@Lcȿ[Jq%t4D:fi0KR|A s1` uQ}}蝡I3"5,iX}`?e2q''g(ȏxenjG'b zB\~K1w~+)uIN*,? /0]ʼ<{9`Juwn2Uq6;9-|nJڜFfՊF1@8/jݞ!O=#  ,m65>@L9\!,#yʼnp}pX+0XI/wxRaVfxv eDW<>dFYDr s/wU5h*WG܃&op.>@#aL>/dٵV6#ݔ̸Ƒ 1SS!˻1 ßyS:HԣJ)&-PL/"s 8iz_Q8<; my(`* al06 xR_k@" h J@ꏯ ߏS !O[zi=j㪝5V/˚V 3{sW!T0t0dʾ{{}0ߑq1I 5Pu\Jt24:|Fc.zԄsnp5F.QZĄ`9jë8٥dvRyӳJX&{"9@HӦ 0̟5!^>rcIO0O\ gbxl$\c@m|c'++O^<T@U5p6mS7O~WfA.7.r;|:=Y7>G`W)`̕qCZJ!pMVpQj"ݓAiOԏ+Ap$S cMUXhEj/M8tUozu&tu~Ś_ ڦ2EKbf~f IHnFɉwVt2p.:2jiA;$ W ;Ϳ! gPXiQf u/ .1:x~#7!yJQ\eT܏_Qk2פH֗,Y2z~wrcTLTk%.~Bj푪 @](n TXpܻnYf`?R8t3`$E# dzp}jhtvDi@jM@TwZ~^pVUi FM_qŽɾne/Ľa}4̚IㇲĕsC~"ǘn@Eg2 ?>y\{y;oQm3tW<3JRC)㷼ad遊%+!#;t܋{|wXw-1ŰMl(h;"dřat| p;؉>8SӁcbB(賿.a\Yyp6ܡƈc?3*{.jA`nkcK~.蟝V;5nsMMsuUú[9k (/Jr;)jvgj  }Lx[(:\??jY$yro&uaJAx Dm Ψ'r̰lXZ0k<Ͷ*g5t}S5'#+h-!k?_=tZ B[>!~$aPo xb}>NiB9JYwfd8VG6WNڦ6DE_Ni/f@-@#VzV%%lk |c8ug)&OpRٍsi$p"kDsgڠMp:A/&DNblΣgJiҖYVWq=q]3Mz 7R7cBm&^{ڕv2WSp ]64Y_7&BCI:W=jJMid iT.p}va;ln|v}_h;Y_S;PG3~W>Rk;ł$CO9?1eEBUWl|46rp1cl$Ay x2Gj&iI3UǺaU .܆hi  ״ Jҵ\|pqZnGng"ȭcx"wG,Ps+./~SB՞SW4e2~ĩ=\DgѨ( *BDGXĤz߀U]8Dj͋XU߾BE4YQD, R(IKƹ͘z"XHq`]쬸X{)G:W Gl|P5#@ă%T[iR$J{lJiDc I!"֫xYF;[}\wJfFg׭w \ QsVɝ1]Yr (iIWaw%XIW2W \hd jxdO^0=?X]"ɋ|Vzk44cR ^j`\l 'FI03W"sňGk2 Wij "Ԙ'}/j^&QNN 8HbJ>q}}_Tk%͞},pf֐H(vn{@^-V}>9.ߐ^K}fO ]PY&k#V\Dn;\ZiNΔ_aCTXؐE^eB!</7P}C;O>'(Du3g2X ]I8ckv0z[KI5)hiy#>>4GoܳʄEbRLrsrz2hW=e̗Zۉz3jg=:B"?IrÃ) pѢe}ݟ47C.ʙ;C9\ǚ 4f_$K39$B}R?'Eح M?LYW \f[Ihc?9#UuNz' 薨 mD%S#!fE [/6Nz1{a5^7tbljxxXAq^H_T{}w*Cy_?׹%y9.RG쳭IKNKXG`5YdJ ,_v7I0q~|rT0 Y,0=;7}VJTNzy/QKU6kfn#Vi\o9Z!tc!<,=uI;+{H¸*K.cro[ G48\&h D?V^[jbY*X~doh˕MrL%--O6HtFi ʞ_v}͕lI& nW) PBJ .v\YwuqgUI4U 7֪J3uš%pI &Iܘh^N7W VobUGs6dtt$Ģ5iW^HEmROFGp>rNR\m=͗b-Mj5>wT`%~Tċϐ <֍Ҙɮ7X̖,ډdЄ g;WT0Hdzf=)wN* |MW5͓Ȇ^Oj"M) W~d«v8* ^ރj~*t;Wˬ^q*i8\g/Jg+ |! t5DL A~ ZYk">#o}!"|D%jʎSNٯEL(5<ٴe q|e'Tj1/"o@n/tO k+J#?F)Khn Qu̽U2tF鰶v`Eu('ת6:+X@6΢823' J\."ǃz–{x,J}FQύ[Cw}4xU!,WZ7ޡ0{:yM*UGmDJ'GMOf SI `^fK4)Ǘ-gZҷ*|UT/X3*PRЕ$&\ۢtM0ca\[G8ףw{8 0r=FZG`1#[+?gmVIrl|Tn~Uʐew ^vas<-` +'VV.KQfn%?٠Usz/ n{8mHf2#+ܿJtЩi!*Jeˆ@39ȉ£^6mW cZCO)5Γ@Z1u=`Irvu$anD,V!hwF~IG$TܩEdFuᭃ޽5F4I3,W>-}tlQu8ܼbujQCBg4F :VyC"cV!UmWNQ9@Ql̲]dypF71{]Hg2ZE$J\޿z]N"Wd(7h< pU(9zkrBi 1xNB'hg~ODy%6wasN8tus:) yίew$'~dDOǞ/+dh¸1uևҍTCB8؅>`N l6`r:G'ekQR)~ѝUlj)) ao0?_ͻC#sIS𯓊(`i?ڜ($ VE aFHW~K/cE[(lty=e,>1 fs.x6&ݍGR_tf/顐>PB" oRZ("P<&@ :Ssrw FSPrjS^fnCmxF$>d6@\Xf 0&G %o_@,^s[CѦ\#1J; h%H}'dOszL8Mx!2 K1u6ҥn 6ڈA`%z7{?Od#dHmnHCho ~>\DD',YGC)#t=qXB0,(Mߴ ϰٟ m빏G,)7}4eJ־ᢉn fFKT-3$T5kH3ȳp :-OUM2݈bՈ,X# \"6Rx[}ӾNF2x6n=Mt1Ȅ }3atgx;x,z6Dkz%#eFd&wR#**WuP8%ɅW$IP90,%R 'K’X^ʞ)w)f.`Ut|W ȧb]L@fTMc"?WU@xYe,iW3I`m#dk&{~C6@{v z(}BA=5Z̏,k77EpHyfUDM,JW ,$'9y+)5~ QWfdՑ׾E97d*}?nw)ǓC$ݱŝƞQCFLzy]Pv[X&vm+3ëHTH%Dw˃) iYM[NgCmtĆ:p6#7̾<焺{ϞWfjihh_kB7Hu('OS~AUe/\Hw;O,BkPʚzifvW!yg|;$~-m.43볘L$9mcȐo6¨7LC8 n*)FfHH:x| 7ej!@>3٪s=c?7ocU@֘7C.|6&_] ㇼ|pu;?Сujc2v=ūVS HQr[v&O"` KZXC}PHUh%C|~+މ5 GnWi07T&jכp"&TU6֧:~"v3Kj4hw[M64Qx_ڞz΂0w_*^HM|>֡XPئ f?ՋvQYGbLJ I>;~҆sd)0P :ca sF}l##sp殭$nmP%w fѢ~"TK\4$0<6cͯ/=dc%;)췼,6(Sv-!L1Gf4?B1dJtpjUfM~U ͺ^'kN)0^ҞjWN3$cG4;M쿵k3_rL*VZO!jQ lAoL|25 ar g$g9S {dV\!ʓg=7]D1T*I=6 ~ݨ?6!#7lNyvS\.Λ~z<:Ö%S@{~bw*TF`{wc ʮBKR'L~:8j V6N%|+N Pl&dQGbٚ!2̗T"~:m kJk$O;MBU53%IЬ23X3 c a^2bfX̢͂d8Y.Qǫ {9K|0[ⅅ0ݭ`Cn{g3y燷6u+.]Z*w[V&%gd#|7r`$m[s1g*ϖݠJfqhUOO%V-ٖn…,M@[Id T4 _߹]kaqWɀy+C@kjD2 XS}1JT;§ڕLjAtRyH_wsշRp$KdsY){Ӻz֕Ev((rjuzh9UC4iǹ%>HI 8fQ~iż?FZ\vQ`|قfO: QNUFIٗ)̫xqԮBgv+'.<Sd.~Ț*3yٮ&FVhtqtI.!eW_] 3 {oʼ8'Dł,Xs6Ǝ5۴ P@94`jzHd#?1ٕQ+tEP+L99I$ <'8N(р.LF^@{ݎRH3S2&qލrx 6\zo$u0u-H{jAh3A7jr,iOrg쿧 OY MzipՊ07 DvDCCQ=qVڼhbx:- kæG 5I޾#KO eo ZeÔiKI؄vp{+$w^62E9x݊_~Ȼւ3aPï6Y/ i\$amI:dj.Մ~ }B =G {INw|e쭊*[,vϵ2/W;Ar=B{q 6j|'pX*: /;fm㑧,cۼU0 X(SJsC8E`,#I tg2z$،9s. i.0-jf9c\Y~7D46mIjޣub-3qJT,TAj(EV\0CQA YyA, gُGv#F߹>/[VD5ܴ9Kצhů8ƙL<&dԌ5~/$'xGDBbIP纲(iu(gR\͍'\i!G0P>n^VMFic-HQx^1VS:Dksr/XU+E|vW!1PRgr'ț(`ŽX"k|Y l| s4/ |d~>!Z@v7pHtRDd>l0\%uCy#g&S0eq:x7!CvGM|$3njy|CP&dg2zgGǁeg&"xXcZ K=9I#.͵mSt{~>Ԉ㵬Eme{dJy3cg)UigZYWKPnY@} %y^un ;]pyM&A&7tԏ+⪕x/Cx _S>οiH{z;pGʔf=GF,-}c΅uޚssL6=E%ZȺ] <>?=3H9wcv{POw᤬cGo'L3]TBa'0jhhE d_:PUphܲNgaBc ";$؝ռCG~!IkMʼnڞ+nd3ҳE4i%/,$>d,?/Uޖdp"TZ(b q-~VH_a'vHq`y!6> Y~)_"z8Tl#.=И1^d> m9??.]yB r/R ӹOYLpa}n4~p׮&ep1r{RK”out]xlj~,-G^yD+'GYfh+lNY7KɰE4kwYHS p8a>Qc&\ :LPԾHh0?uM&Rw>z )s;}6?6g)]e5aGt،Tonz6u.6Ezdt%$*(mbeܺ`34rvVx12&F "w2W_Lݏ0XSW5QY-Ch86/Zx5:ġɧeR8{`pUbP57͖Jš_ n~2q\Oޢ/oc`(h+F;9zR>0@?i>ǀ+(1y[F]Cj)gxcEÐЁuD!9Ċ޺Oҫ%%Cl@1on8::MPAbZ*:p_1)55Ԟyu@|Դ>QC>+TK[75›8UKh/F 4*u 5yg.dT'|:nKyME#NKrǍ) "P)G:F^ p[ԊJOMD;1q2o_rg@>47E:NlB^'oYD]I&7y~%*@ $P}Ϛӫd~$\\G~Bl`zjϧr(vbXɷx֓oxvp0Ϙr0Y7A +Yj2l/Q`Eo_ 80#XA 4D=2)>^>2nO"3KNt!>1G75Jhh:AyL'.P_|ɂ%m'H#v!tǑ-xʅta9͈W1j)ΒTti<"r7:KKJu:j\0_B5 6~p̐ jG}Ԁ562)(*;U&JEe65>to+Ol/OAA-5\̼7FjCɞVCwk#P@I<^CxE7-H9mfigCHDƟElSGφ.l,Pf!=$ ۞^!VDO> @iBI3N6JONLmOrd GËOXOceoo%)Ƶ\.S֋˽9vu> jarm,ـlt[PB̳eAW5Ȅ$*RxBj`RK1֖/;E$]@n8Y~)O}^gNƂ`:(YTw i{^u@f8"G-j)f~4cp1rmcXZ#]rA[W}T黳#vɳV1eK+o%nq}>0NUΡ6tq\8*>кc>,/ѵ23vڿlMkUpY駺x9G qV/|!{qbe9 2T_ )#A hjs헝j}ZJ8 R椸h qnB:ÏD``d $_yQnr+:<%ugHФy&s0؁&U+ 㨭.ltjtһg 9J8<.K&acJ+>;dQu'+eA"R'f';^z(7Ak6y!x_@A)ogG*y2jKm  k8ws`3lّpP;tCr$ˉ*,šI7S>_0dëk5G?'R`-fhgr"/15;Fe5?W⭯kUu ݈Wh1ZWb_V3N]♒V VLIf;R2.4!\ddy'j1Hmvz,0C.) D~a U5s嬜;“jȆIZ2HH2U'v%`r?Ž>q:1;)bj2!7tyq(LOt)IB[egT P|:r`CƓtB-PeL@363QTtVp$>m!+ppt_L7jL4'Q\p ϙgGq(6[8?Us}uLLJ53u\KR9`]NO#vѢHM1PD f)d9[&t„7L9D[@]J&ZLs3&Pާ@Pd($Um[؅Uj(aLؘG$?+I{۰Hmfǜ9!im?o|h 2KWdPK/KꥥoP|J :(f&<7kTx/=15*|@}Eyс+ ΐfʌSF?仺#-o!l"g>•bE\a@ ẁS` edYUcAW bEpaLrz CV- lsa(u>qr ߈ϳ7Xlx6LsJ eeջ fek=u|lrLVEdOڄC7yӪE18bN-s.aaþQ`G֚ŰtPTƿ6i/kB:qf6AcVMª hhDU<{5 ?* -l۟)'Wcuyi Q0FNnW~CAB\%f`$[V1.R6]-̑)BzyKwz~PǥeMyI\Ⱛdъa9I4=qCnո34Dm57QTHs9~|Le>S͉qKSRt[Cf_,_\C۠%L#8 O3aVիq.2.u6W~$nc=u5Z2V2py"&ij]NWX<)Ɉ(JC; k,?a1Lw ]~̬r(pL[is\.= @j%T)\P՘N<',ov$z 25 ]i|Yz=33zzJy\68B1O@%$&ܕL s.ˊEOJ8ky qT|)AVL+J䇚ST RPue612R l.-:1ҁBى`?׉Hg"j1k_ i9!z~CR6  L$9$]V"/(mjaA̓H<= N9EANSk;kc5V wX[6̌u|I걱60ܤgjkVdzF-Wž@;T,[%6WWP;cʓZ z,Hj ɺկF5;LCq{O73ᝈL[::Y:جtBlQx 6}d:k_S5&Vb8LwnwϞ&dR:ldj1?`}QGrFA^>沊XҒM-FF*2ݍRY6q S@dO=/Hsm'w M?J캜Ѱ}o =*- ^vθ*I?78E0I˶WlǩR6z$Fh&+F}?#Et@gSi72 >c>lΧ\(yavP" l<f;2^9 }BIUy ˛uCY\M㊪ԢbVlr9g4q"$N ">0kF2y}z)F0ME 萃p  !>kE5%6|fQ9Y^q!s5BW^T@%g˪ )z2?RjJj%Dn| ߐ 46\j>YU J !"x#K13TmJvp-y S94 ;FOx[<|) Ge׮9 E!ps1.ixNF"*$&r(DsC-z~3w;jlN<篯r++S+Ke驀m \ rpsܩ{*)})1 /L ME}L;~FHGL|2em[d& +r*]hF*,Po;#iu9 e6WRh ȳ$ {aBHܚhFO%XΛv..ځK5 jkϗ?R9WBҋ$T,>Pagie6ѧ< Db/Xtë ^L(V +hO*}IeV"SJq U? U*)n1kS4ɷlj%pgE`"fϥQA:iF=t\j\Ϣ=>%UfN_둯{]'O9k91to4((_Kn*qsqf>xCK! i=1Vq$lwUs3 HXYLUT7pDM# :y-)h Lӵq#כ?҄-x:{= &s.(1JE=O}׉M|ke7q]ҝddWW3OM3Tγ o^B"pw^{35UZ_ҶsZz/"(y"6SG9u Wi%lrsdqܖ=⼌DG6ޚl{bA˜nK.ӹ@Ui]"JMB:inɰkM^bixӅ>VRt P,ay. yTDi PՋ~kS@7znWk]GAC9n*Hx΀.Ѳ C jVPnDf$=\h~3^2z[CH4_okoL9D@zLW'E(Xr l>tOmA{󬢒3TbFUCްΖpM<T ´m]w4}"/Q}1 =][n/>eHԛ* ap5emhX܂`Al24}mcֶ03J~ :]rBߤHmBeAm8.F:پSvYqH|3g ீԙr*G]+_ZF#-w _&Pd[)1HrʩŽg^"Y.Seg3Vv@~pd0&h0szPC'Ѥ^6I C[ݴBBDIa"$E=UDRv F>baeG~6*KJG<}|7!z#y_+LW-Px+d9΁6O=lEқ40}@\"YgH @79d;,=9@It *M'܅v.%sB+e`H0 $i$9D6F8 IĭĔ#ip1``o MpHqI6(D~ P8G% o x lRh~g2ݫ{Vl2?})W04t`QGiBP'\GaW.L&IXs] "48) {H|8w 6`bt(c,9R_ AL-( u\:q묇kM8K :T_nK?dXL-C=X>D0<ʉS3L˔b{b˺Ug a%4-u6,X'JQʼn ۑT]DP&4DMժZY.*Q='5$wHae^0A-U `0GT^ѯ|QXƣ]^. ,VkS+k<%MeLƹH_3ڼҊ NzOsd2TSi.]qv!7Xp(eG錞aR3I+*;weȌ+< g?xuMWg)С#." N[`Z[L4I8 b/!Vboua!Y`;@(тrs?΂$io} :Y4i4STfdKBfɀ~Թ21.<%`l63Jf=e"O4qI:s$dJOާ˓Y˅~d/! [H"BddÖ_E H2k }og]@J *V-4Pw#!%KQ)_47L<%֚qޗz?!y\Uco$ÈCxڧ/%lݶhCfh.Λ\Dԇ0c jbW*΃hX!7 ۺ1Q >75 >ЄwO, F" C #U#HZ]ɠ!S(G7CkQ$WJudJrq;9z껐o[)c {ݏqfmuox2br6v }fn(|J}*&D,=G|K9؃~Mzuce!Jzꃶ&aAG=4ca>j}eYF %~`)!FW7<׬"+}Y`B$r%##=N+ŝ2OɯAŨܜ >чbA *}9"n2&W_ޮu= WuWMo??_p-9ahAyqL1+}D3{ɝktV)ch\y-jgQ643y5wV&E- dC{>7dR*B&47^uoarJa׶c@>_kb 0UOIV Ը5OJ [C ^`η(jAA8 D5$4YCڊ zOgozOڕbfquWQ<nC#Йk#Mb.fX<;  wstpZ%USs^/Uau΍yeHiѩW(߀_)_Ɖ-)Jp~>9lm> #mMaԙ!f"Ae_iM텵-=Xp`nŋp:g}{LNCL 85R}u!lxSY7@lҌ1v2$M`tbjNSʽK-Zq:RƘ[% *z "Ev%A"pzTNjz~n^X-}`us >3tJgY5J g svSZ?jWJa~h~*oXPYfwBydQ^G2N_px/) j{'skRIkXJ%-<ɴL!O)S]?Fl \ #Irrr$s4wZrG|͗ӁB5aP=^J^Ko9rK#]fXVLIvEdح۔ȑߑy O!jw0Xcu|e EnsyLtyFwTڪ[W 1?[$u{fkB7Fq6<sV&sRI*Z\WZ*ֿKL:VlL nNj_xB# KG2fhP/2``ء1@P%\W0~Vi~"OPJlFv8O2Xi3:izSH9.Ƹ:CLsFoD-_@ `{4G.B\:CwF3b>Č7rce+u(Nd@b$8@/i^WtxAS&*Ȩ[%˛XC響jN^ {)h@p_x*M$yՂhoev{iFg-=%a$fv^Yy]v UUډFf0lAĪ$ȇڃ( i!s k &!0 ;2xK^ո7Mf5qh :(بkײh!B1iL6vrƉ^9 ]Aw" { Vn·Rj?Oz{;Nl6q3I  gQ{rb;ZW %Ӄjy 3g*JLc!A#OG`8.Ny*-` ƭjd wo uF^&^g!穒Ǣ,jc^yiiOxgʞr+~l(&l:cj'+ #VD K.F+kW'iV%|UG|4:U8yƜup }Ъ[:N`"%Dp>(G\d(u#&[?yFWVt^'C"ڲw>9 hwβP+|aO*WhK4VNzИa#mɘdHT́6L/"Y(eX_oF#cJޅrT^/ 7ml۾d',)NޘBeO也AݐsyIl02IVHA^bu`7y"MWܡꢬqb{?Jͮ+0T 5yMIѤމ_\F&N*zu]<ݤ@:694-tV s^ H>SA".VL1Zee;Y*QMhDa3߶ɧPt*[YGd=v~jg h/NԸ漙UOÓs " fc̦!DV4T)"~>M/EZgC2`u=^賄m2]R@pt O979{Ϥo9E #Jobb4[>.$pחl dy:Qm]1CBU[F&҄ ݋B@(7O-L`YXak$o Lusb8IՃϫ/,;1o/kE!85F˝( .(n._/BB7eծ>q5_PpiZM\j(hVzWV078 %'{ۡ9l#ō&YXE jږMV-#=s@E'A XjpN& ;]0L9bTG?aaT(;\pkp9.qYW'{+HEKh G}, 5#@z"?0˞bYhbp̝S¯i#"ٛ+r ,8N5 Q5ԉ7N辧c 4& ?'P[BB!8#kRA 'kf79$s8,,1lJF<`nWJD;6S֍rD}%hBPWVbEEJ*zn(0;iG 2Fuر2=?,dJ9zh Cr'WET׵< 7h.t// P.OvqgpdkʒumQ{r)ő2th p{͆4o7Vqzd8< [p24Ϙ9s.Kfӧd^dfK騡qWojziڼkPp|MJ4 /ǃ>o4PWjYDòpG)l'VPdd~z:U G`X LkwLJ\ׁ?J%(nFUhr rUE.MC_ sHfꑫG5M s~[9ؙd#?t4$hA|@]5uQ8`[I8S:k.mMO4I{1Emf;lK"EXAME-3@ό7.Nݡ仜Lʣ_`Jȓ)1zt?FwDuVW?z hA^0At5`b63MWވ/ L6nw43W;}0ܛ׳_5J2\80Fz<;vG-|lh6K m4/:\ z(4!\$lae2b=ۋFԿ4:'2:O-nkxRސ%Fd( ؗxB@t2`SܼaOSWi Os}:v:S34S1~ܳ_%YP6M %whm0Qok7sW,8+'}ӈdqAz ?w$OH O{t.[)q`pv8_;2 Vzwx\b[N(~D;og;Cґy>%]U%-au]x w(QUD WQ:3\.[g}*M İo XOt_5 vU_c&G5@y`"4G ň%׷KOL:M$р@>Mv!@Ap|lLs~gsw L_֩^&}@ 񕃛\i^[b"wʽ(K6Q͍/fsB䪣؋) r"Z%ZLpOO pq>P?kXnig3O{x\٘eqU*;s μ> B\>Ec]$^ u껉2l0t}`#8M* йXQuwtJgلEp38JT?u}jy(ut}&{̻_MK5 KxE#GV!{cQ; Z^՚sP:<@izf8tAǑ2幮WskT06Ήte'DFHMj_K'8RjDQY{΢ziPؘMB_m0xձɕU4͈Q`&cO`g,.@wLL9К ż"#CTPW)ވI+ D}GlMZX00u7u#CX]S,f iX٘#[|uo]/F%`Ο&W:A_=Qw픐g`1َ u>ے6r0_;:"=g=jw=.מh{;r#w8wbԑ*TJ!`/zYa3Jbn` - -X1XѭEp\7b *qdti.b+:f]֨9a"@&.yl7mgr`D(zOy:zA%A6(bܑ0z`wyqLsI3zGVnm-YaJ w$VSuKxwDS>),am~@"PJ󓏱910$5(`m4J#LQWۥ.NT ^}mObo^ӫ࿘]gf?2"f㭐Jf>+ڵJҬ5Og˭+Q afVy]BG Uy7,zA$*[YWb> / l2@[} 7-KEO6^]i)kDpH_~U!t Jt+$Y:ZEPkH{8% F=u?r;oA }_ /iJd6No0'gxiJauSwI.]#g +5bI#Ӓ^t<[dV,2~s/M߶ȑat~EO[o\ B>pT{+)?bk]6ϗUJfLɾ>,w}m=qQ>Q&9-5-K<;fG&1[wFʹ!ZAɯр;f+ Dy~@b ΍Qc$־:ֆElNMX+#` Ih^a"WDF/pfDseI2ڨƽN̔J<$O܀qLR81ܒ };q̄?l?5'^-%яKˢJН/)w1+}pUjqOxm1qyeZte!OFN>3 H{Q!L}y/y{FL}=+ލr_fI73/?A2ţ s,éz+1YF&XB$v.JN\ Y'"H.HDN'9lRɘWtd OCjƃi$iP9sܭ}C'C';.: $kbnx {D_Y V3v&0 NʽՠHqv{.u$^ydu YKmLA2f W`?Bv? u)p'j2xRQ^KC}yp6!4^U"Fx`LβrxJA;%2J42/-"@)1ԩYӍ! )e U֒EW1Ԛ߿͞[Oa%wH^?!_*Me#ts:oM eXSδa$3C=_cek3/x yOҩ@Qً(dU ]GFd+* Z֌8Pݓڦ1'95̲Ԁ8zPqEDwhSI,2>b@RSi*8~^SCƮa5 -=ث!=&x{QdAΫtIW=>ҙ<4ĥjao#gEG&(;(gj/99}oqwC1t 8@rn{wft$>=&eeGnGpio(vazV"MG>.vWor,UoK$L_=*d,Ǽ UuxU9ÑDew8ej%mm.T~^b-NJl' ~%A|TzՀch =v X==^-!ovѺS0Jb)|3F_bP?]e-І:F=O /() phU,ɉ+Z/LI(?@^ޢ=@ [l5'iv2&tquݰPղu j;Q9{`-YZsAЬGM(çpdO$t@k+|YH8NffO Wiq0w%yzExypR[ybY>6՜#ko$'ҁ\e;+ʗsE\SYk_MH)V;\d,^MX=w"5}Ua1 6nt`髐^kșfk-8<)9EQݫ9sT.2aoL4􏕌,Ex:&8 pILۼ\}|d2!-=GA暉 Ծ{ KfdQ]>V~J&O}0 `TIçCrN%N LnTW;u0D#kiʖRpG掼xL>?eÂ8{k!H茧)UZQ:#Dz S5r\/M݁,~&,Jfp-4AO~[x<D:g84(T>ATimBE'Ɏ߇$Ioe)ugT^8c]0{['}q K'2j4vlq(={ úNnW&Mz4NVoLao8]}eS:|~VnΫUaTR&=%U$;l,?c&nB)J[hkA>LJ:ؼ)Sê3jɭ>a NAAFm+g2(\w{;B3??g98a+wt*ÛKp+ډAJ5)(;Rq(T>g,零p^jUW&rO/B80̰ b,^,AV@%}ҽW IxbM R/qUQB.{k.N@"\Lo(t Σ2 qk;.0KNY> =0jWkQ"FL"%<m9:!*=h{SDE=R|u9ZW98-J 2][ .+ձTơ49y~v|+g&uj<67 !^.^*yt2^ _veĺJw 0pEGhl8*إzb p'x {۝l}K ۏZ9?SJH&x* ,0Ywx[NHضybt׻u|{7da2\.p 6 ],o S?"35Uׯ͎쟴>wK`4SONdR%+Sk-=_KZH,\%OHd00 YY?po. B@nd fw:K-3 B DF2J k w B&Tl\)?J\b|pC?l  }[x򇄎܉?v gcup4%x]g vMP pD*tehL *5+#8T\kck{Mn**wX'}µG r~qWf;"%4[ug 0P/=u(,FE!=;2߲Ňy&0㛟#ӛ4\ϑfG cǐ& on(_$} 7رrJ Igiɤos?%͖'80WFP4@ɃkT"h6nihCbhE_igsYyIdP+EՕ%H.eօ 1\WgykJ(`'?4(bI?!LM1â(i+MRxvnfIS1e+r u6dMҙkW@f&b`ɲgx3'_M'M\@-0;\Bj0OS(Fz!إKZbVP 8g$<[W^: 0} 6a,IfBQkʆ./yq]zU)KK?o'L+F2fXl 1})۹EjpIPr rz>:yuN (I's ;rv-hj騤{[lU<,=!v]Ǚ7okgjt'}-;-'eVjԷ׈vbX G]I789L?ڝBJ.u̮'Nr!ށvyLEC6G=͓OY}XO_7z$plwPg"Af~n9˶`cs#4:{<͈ ?tKٷK'gv~3fd>uB:uw .yy'gK.lb]7xPJ. Lcq=1@eSǸVFDfhS-YƄ {Kޮ }{v;&2W=a!!K4"CYod`&) HE#[rBp—A 25>g\vj_ZVIܼz &GɧJШ\|@$ı{lu7`s?G[S A'Ǟ >#+}`1!x =FA0 0r1|/xbn^4|3ȄjIg"EDE6[ˠK%\;]RGcD 4]u+"x8YfE˚wצ\3_6jS'X"Wν v  U&3.zq϶ -K[yIҞR_$. Q1YR5OGb+ :v407RxٕB\~U I%Hʸ[o/؃\;@4J,,qw%vh.W ݋yfY$>bVeZ,_5"|USy=pX/ڲnOK|Nbɖ|^bNLeG^>k ʨiFcgY_RyrpS`HEb+KsJvAkpg}g~~n0 qp6ţ`b^:jNՑUTQyhӓ[g)Qeh%v$A殲5s8Pz k[D%J.Seܮ`VkxQD#t{oAmXSI~F)ai5Ah7[S -iUs @`IJsC,7!5X kR,!z=0_ j#T}WY?l@K0~qUje[ƃ mS $P$35If׈zGtoۖ;,n?ٶ x A[Jt6ʛLḛpAyO6;gBCn_? jvƫ5~uh7kd \S|ނ.L`|㮸Ml%$35!!ĥ$G O/5+%̮*p {l_oiZUHA|e&C mV'\v]R lU{ Q- w:]!etNh3$FUxu3-9mftTj\ u^mՀ'U.mA>! ~XqdR0z3y]=|/Yͤ;y83**+.k_ %l\ }G?DRލ0!3C[b)ȤYm>iя &(rX>|+dtR ӋŁM1}R6Q;S$/,7A!M#| i`WvIqHc\DQ~ge%1{p7l7THoN`8ܻKc [6?uE,t(ծSk^o DV% R9){Έ iS^>ޛâ}T^T~NӋS,Z4Y5,v*q!Ӷj*wy *Vg؅U d&mqeG t.{6Ń,E #}9(܎l䅜Iܫ8^PB YC>QX2۱ؔإo>8g^+w63Hgb@+HևFM=N]B URs%E蟊aŇN~750ccX@<c_S6Zj54s·)N/8*~Y(ZߪE[7cl z H;hMjPwYO띈XFxcm fg~xpFgM6Ed%`K;]\%)u-$.czgwOu+F2X &9.Ca+v#JWPm /[rwmE wE6Ca5DA厚>F6(ڋoj{ دi;<5JYB8zY_Apw:@\6=l9 /֠d4yLI;ߡWTfH'g Z]'~hd&?/bd1CI= 鿇5qM$ZsQcXemAX)OZA0@Q<0R)<sȇ)皦$z$9;|{^1H)^Gك_O|݄|_ Tf< ` 3o&]X"j$1g|mog1̼,{+U Rmɜ|Ј*xkfy :B&S } iK45ԠZ!'e3v8 mp6;w#@o˻P 0::0d=Irsjw  [q<'>hPVQawv~;ӈFzMCVĤVx7@u?nF4d[cm˩#yIբ`d3Yf^s.!e&!i~U\ h?}X6ϵz%Jq̓@V1Uf@Vo/H^:G?X'm/Qգ<< Q`F?B:N=6L?Gq9Y$Wd]=D7W־)ȥI~B!;-T) ު@;\g ʤZ2+IX(>%<""J8. 3 bj6_}z'i,w9G; ~Nz$}]6%sՒB8>IauYܧpxKY1t/ Y C1OaC)? :\ig^B[ᡢ>^y}/\ww7 =;QO?4Pd AvyD`ezJ5ҊգtL@y>RC*4I]쉙e-AzXfHXû|uEMWpEKP WŻ(.yG܋h}mB`~bm(UdOi >8ꧯf jؙ$>ܜzVSw,W;y=/bދ[(mH;j{Ua\cqxktOs}0`BVRmZmutj`s:=&s >!,S#o֑#zOwCskYiT tڹF=ř5RjňIqb' K72~}}B$ oǖ0`:e} q"Q]DymBq1?ňK{6>(l}݊"(_Ï QS/ (YhZCa'W sl_"!0"XTuѰp0]6CB|1>'IO9t=`HyQW И8T_Ҁ9?rbu?k^ֺqty\d`]__2X;U6RY%IW8&]#8տ0E"'Z!H5̀ *w0&/`ώ#<79 Sg4<`U>l O*d2S –F(OGm2 B?S4^:Wۨ qX^Yiwr5i yX?Vѿ" (e/cD Yyc[9>NߵՋ=V_LXl1XBωWmtQ{K6 (kM uگ͓̑_yzQQ@!1N ծ(1$#{}[xF^Eӄ73͐9dl\i?WNUUC+;Pxz`~`~Db&d}]LԪVGHzbXt>X%33wwLDbPH<Ju<@hL'9mḍ~ 1pD#Yuά]iс`xPv޿`V Erq1Xpț&6prhwvQfoWy݊\uŲsu|Qп:mp'F `;{׷SZI֞a߭K{놙$HcӶ,u9Vxna lprΥA7`00_=@rr;T(+ D^*1@@R^meHGk.|ÿY QyGRRN5;  E R0{Ow~eIc1蘭`KD)֑"u! ؄WowR #Pэ`)pH)Qd`EENkń/JÛY/-V[0vQc b"]/]yBe~ԧ:= l^=EK˙ңc@h#B7"K!W&oWWSMʢfJNפZIVm* jeCjVz!薹h&JLCBW Bd4?R*m(9z@ 8J$NbV,i@Ti LV l@ J&N,_ݙL5#+ϱ{7G2g<~Ú괤/];/ PT-<.WK.LbmKq F]zyuNlȺ uGOE c_$GgLfڌg2d*1(mYFE~qcO{PE[@jliDIEl]UyOk?27E!,UN88ͻ)uA˘,# yڭ^EbrO-:P}2][?R nsNƿ/z/u:d'F&CXCgnzUKb'JiOQwqoK;>xd%\ZqrRu;;I?\U@R-5O0@+"4i5MAML40 zPAihppy7Pyi%\ĝG)<նSBFCMC#xye e>` J6Rd+>- Z! a&-,E lw4,OvlruK qy5jP(9! OBtNRf{6:U֢ ZK0঎-edŲyH"kdĚzI1/p8Jov_63jxF~PeY^ D06Xc)b#ʒ2ηOJy"%YC@c'>H9^C#I4Fr8E>8 nc. FZ;{,g@F |` n \^#:kfPe8':n'IVӶLnE"]&]fXw"Vƅ2 з?|.e ~ÛuudmRW@ʱCF}V6x4'I;#24Ю_w¶UP^Wt+ dkObHmġ$uz_>5Ǟ]`d`a˚S1\ۥvm[V㾛#qɴt7=AQpa*KQLU|TTɓ堤^y砶=YaN"5$gc- hH̚p=KҨ~oܦzj«{z럟Ӓ v~OrQȫWK+) ٨2'9_y;EL1lHݴf WhPhwQkYfPGyUNC-"J"0@ѡds ضn2{9uӇglOV?Iy3錜h ^rGc\Hal.71]^j1zBl5D3?:~.LjLe'$#Uv.HKF ;t/NaW Nt43zٽ0~`ӬJS>[#d7>AK6yl4 ,na]ܨaϠ'?\Nbo`GDˍI FwBH?9+P5m0R*{,UkhOou|W+l 禸(-]3rWxBډB f42M<^!dЇ|Z54t ӄd*5v.juL9ӶEJZ0hQ[uGN*O}o+mo׊YK=BH wzn| U |'^b@C1]\ rʅڭw kq> ?yOQRś-xB3%m֒Ql6ƥ̬8^jdar1)QU4y6sCUS($דScct>@UrR9R%zGNA=;{u 3~W%D?2QIdx*p\K0!C߁s4!]*:2 a yU#>8P&*K(apGC 9N?=ybʝ02FY^?ZU7&R^|m=L)cshY\~ ź.A}#P03ު%-%E7Id榺eBvadU \$_bNyb y\e$g >7jcC+ol] -nTԋ- FR1;ohst*NbѼWç"ƒo䚒TirK ,ԗ{̍EpVSR;O|%ɛia#)p`4<2xͶbKc'aN Grt}W43X^c.9r^}\ O *@eZKRV:JM7S}zB>[6ltZJv~H^8Y_J_F/ \Ь=sQ,qIWR*n5]o:~yX"[5N!?u"q{`:5yJxYq2jru]قN,CA}:'me̴1L2 8HUguIֹMg .eqS{8=p8]*SL~`Y3a i=g]K"<-F^.+B5<&NO1~RKOtf(}n}܃GUP>֔e=N1$LJE5_tX+ugf!ŋqĐ#b_OpPɀuUgzDeʠcp2Eų΄Tό-ǒL9> i}TgjdZEnxPWgeUK]IY x\EEg_%>P_1D}0庡OyN7J0do Di/gHOڀ /pVI_,yYq3^,aWKOKDk!k;,ԋˠ~yӖB?l@62K:J|r\e6s5&!H['(go;:m6yVu)[9_$4wC}m<=`IHA^NvbѾA2A*!٥muu2 >e!@ ܔmT_&5]7Z٫+khY)Bh/]>Db=BmҩZ7Q2MŞh ,L0گ} wȾCe_>۔DT ῡ ^}{J3XW`s?.mwl(4 62~#fι{Qv:}~w4dgRqPT~5y6w.r8• ; '=T>%0RPy!Jh4W(:AKmW5m`h4t"9r nfgBd_:Z&%Lrl.wO $|us<ȃjR'H-m)ЈQ~nAvZI@HHm-c~bX YZvC߄|7nff3?gbSm]`9|K ԨO)-KM@1 d$/`x2"3)d^AO=֩٬@Wބ3Ņ]dTAUXE Zأ2TX^{<֫YO*N6bT+Q O2wMptR!;UH@%/ko{U"^'/Y1}/_s zߓocD@ZD  EKuGx!&[O|;#:mۨBZ^ ]X2y<'ydώPdA!s>d {kSG dHmqnìk(#pOͶq9[i3tE`Gı D^i@IO܄`{ņTw+4jw.i+65Y +Y™P%ad9h,#ً_-gX}վu%孅B^O` KpڙNi [18Y i(QݝЄyh B%pg+'zUFx $cH|L0e]`d;r)4Qpp:l-'Pc>ǛLi{ y{P`OM/W]T MhVF~qv1h@;tAPLΛ+ *ُ[l%$&v_Uz#lՆU${OUfݍlYí۵0+2C6ݮlwDzPAiZ7'%:CL 3Lqze+,l 0KYeC(wIPO1_?G̊2d?ʋ,_\*žMzͿ CHց(l0P\6LA5 QEJg%{P^46/VlcU9mȀtd?/ϱAOœp^3ǯ^wa;^t|}Ţ| ʵš ,F@peC,&wlf}LpPiaόs9IX?>6-73i2W+J#^mҁ'G^)ӂGȜѳ >'{bPy<@O]>i@V unĠ‰'rJ:"d Y =[i /|&K]6,]0&Yo-<2v kHiXMiW6JA4E[gqdoW,e O|bfPXBe1oʽ~|tB*TKswO7ȡFY'<oUo/*Kc;E[Lgȍ21]B\ ]'y1a`q:۠S0 z缟4x0,ڞ $M/[ j/Iև[w]7J?o\Q0͖$.Tfk Q)t#Gkpp#Q1ofFއk^Vl*x3QХh_黖~s^^O⭹}%cRmvk'dFAk`'SUW侒r`<bysזg4kjw4eZ ~ seKK:7 : #( z7Ũ),4bR(-omRgVwHhY&]?>vpO܅jYGxjZtyw{ J&4FR\ha1׉=`50­S 򑰕bGS@QdXt|?A?:G@ڠ=Q;IZ\هeþtop# *g8zű20iFf-DQ:W9EB)S"p0x@ޏeڄ6WN7|bϯ޿0UNG0֋S؆SBU"n_pT- !AƉJqUۘ)/O@dS?0`VnT$%zyZClLlF£`aPK> \#ʾ921myo7tnOBٸ˗CA/BzC\83&m_>4r"=P.JW ;+lң3 |k;^4F ))p7| v7V! Ѹ`/R"I.:! >շi$CD㥠4X1Κ'Ll>L-w Ab?vSuԗX$9Z]0 ljGF[M|`i5hi{ֿ3 N#CB \!_pؼ\gsG:(hY:y.F"?\Zu+]HR.@$Z w['HKo"+!U"Qԫ!܇cqG(煶CNgh ۄ5ԯH&j:X"᪥I0HV->ߟG!@:0-_zq0dFlF"R V_v;:93|yxR@CN$O7#>]($+Gdd2l#MwS۶)oWыnEHnƮs1oK H?3SORA%2k66),j-o_D|`ܻg5QjwwntP"0ſ6$'zz}:V(Υx Bu3xB*8,Z'@ V džE9/wnp\õ3khJ*p9ǓsW- m$pEz dkL4@_rÏ2$Z&Wjⷞx ؗt0F-/08"$i.=nZ;@.E)V4eoJ*M%O,v߽g0}2,)'UE*/({_գbdٷ24eFf'_B E]<#*3cF@03"D 炫g^,ʣWBxT?5,x׏f%F>k8gBc3g[N|_M_=|z|IAYJ դښPyPknoD LQ+a/%ϦS4ʢ.w)(._\:]chL8m @G%JT~Tv:ETYRɃȹ[H>.a1-4Йt]]a 4be_&:HvziN:`?)ҽ7Sb;އkl8K w'q_J|"|wbD/ >O ;okZUHN%@.ATߖsaUxC\!mϔI1f6k\oBB +ˉuZE0GIck6[y.rC`G K-Nz k}h 8( .p|L5 Q_QxeKtk j6;eN=VwUQf5fϫ or)eW$+gPz4S"aKT"rh2 N7 H—zpiId{$~5#Q ue?>>iFnT] U#(:M\M[{- 6=QžK@bTS^ q'rz3WP+Q0H2<(+j:* ŒaY–k?:leTB8zKH5o9A&CfrQϺ4$soX[0 4 DžĔ@3BK9۬hๅV\CND#qC/b~h|I1GWrktiE~z,[2;MӓQOȇ'J|2L6"ngWzpL"'m[iBձV=yѺTX*Xv[RxɎ\.TKKܼJ)O5]VH"(hX2sZTg] Y6ĜYeSڨB1WO{m:AiHNmgJ5.I>etGK+z +Lٖ/ 8oGqoMUg;F9c0^+*(ݚiW_T&veئMp ~Iʁ .%!W! rkщe[(ؑTmzڃk5(6/(SNtڬRFb 7v_{/k8. ӝ+=0VxHo8>`#%Qs1z~tJ]Kr4F}W#Tsn3LOyk45&O4$VwӵTfETq|UrDuO\T-[0T}-cBgq4F|u–l<쉰 "缬N[ s}5嶍eoߢ¨P˱?=eQ\t0AND)XXI26p UFcObB;e(B=uaJa&Ao|^XR=Uj8;M}W I%_E[ۭ1$7 ;+2sV3 Xm+D%valDF :ۏ-z] f)yޙ /TZ-+  G& CЛ~ϋg̕Oop "!6eke[`{%绡|i)ix:Cgpzx3]%lH8 Pl}AbBFzIx+.FQ6Y2G1]V/ekhO<-rKUߦntc!v\;9jyC p}F'ujZ]^5%Ɖ@n$=WpAl_4#Z<5LvuR.& %}' Xs!/~q& ',,"p/r*,~8]PꕒhcӉ×l{< ƥo ,#e2Fq mOkAuŽXM+cF_>Y1}QTVbаAmT1NFsJj7:|_"7B KJ m3s5Ikv!=yuxnƞj.Pʻ<)w O*:x;ܦJu@=P/%[*b Tz%^SRRTfJ^2%y^9XY RoR^!u}_Fm,ŷ6Wo wM S? 4D[cWsW|a3Y5(g9]`1^ٚljԏ@*?gc|֐0߿uQ]uKD`7Ŵ|)3۷gf;t+ٳ rM C*s8>䎆0&a.n[H?I((U@} "RBeξ9_5y{A|d,=^cOz1v~ :hLhg,6b6*9N>84 Zh.@Ӧ qn0V"cMɰba]`(R.:Oo>B<70/ke¥0’)KMP; ,p8jOTIa,PKdxnI% s.ˍ9#M<')e]F'Y%wi6ƉNƵ0^H)'.񭑝chgL!!sLNl F(--eM3 |vPH>9*m<. 4aV"yif39-U`1*3Vje?^_4Bm5v:NPأ'U(  #]G AZbRFhw>F_0W^rUe2JbYxFe~4!^rw%[%|!' V6ՐPjDwi"F-' )>nuNdJt}߳D Bs6m4UWw#zڝu/^+S}Ž zN9.̶Em6!f]"Hۺ}b]άlEHe _~ټ FŴI UQ2!eVMA`ǣyzr%"(Yi 8θXl?9(2<VW?v:V3WH2V* `*y$q[E9z&Ҍ˲hIkMogws͸2y8 9׷Ce4ck PD czXQ Z?-=_#EU{pÔHwGLш q%{_+!j{گ Zo6b< m( _ ~Fꋒb{|*mboտWni Ѡ(eA[:s2QTPY?A>< H#HL*M񉯔/@g܌,8X.i,18+_c〚k 3i#biuZ"n}S6`OEp(O{dy2gsGXbMN*=Kk;O}R^'LL"++E qܿB~5 su3 ]s+͑ |}nXPBʮȺ9?yWEyd(c) kZz~eM'A7Q$>XۤY״z YeϲtW⭞%8igC~]ULcdE+ AbbzǶ6ӕ+P I3jQr5lo6Hx|727m aUSFHƑ+=fj"l= j(`i }kۿVS90]qYEp_9_\ NlqQu(y;@hsoAXzP{5,_&$1w*fj~ J_OWUUYP;1`/܎|ߐ^m sD[?1i m}{nCH^.︁n_>a2Av BGt x#LZGs&m\]mC-ިωHOeE5^hc.9ґp;V5+AU ?X:&S* x]oXnWW^ׄU^ PF~vEMH߁)vV%ތv}ósHWӰ]țOu"WG)-X%c0BHI9]_ 9a\T8c6rݗ@2P4$d&4 ]MpHϬC2bެQ{ 0EQnsMWf9<I m!Ic68 ) ǻh" Gق+'v}Dy~䲓Sx<МLA.*¯e0էlKYѓSҷ\-^w\&WS,r1]tgSbPLG 'vxiV'>0#g?29? 'h.O ?,N kH!{i짥XmDO"l@.*,P]ԐwE r-^xhGWK|vۍn١ej4[9+'PY n/ؒgR~/6^K@s ,:Vb; BGZPΨM)֥InV0 z:mED "1lݰbjR 's0UVHS4 .0VNӟ#p[Pμ!Lk@}_ :ʮ cݴ 袗9}߉ E/O&ܱ%'@1[5  >ap G)ZMWDmHj$ t"/0.bA l+۷F^L,;1*Dh8?[=Ȟ~ڊk]b4bD\0HYdb|(H Bʙ [LZ$FVt/$fa|c﫺̙0[ajz[t NNY^G1,aנGOPK\Wցiec Jvj 1i+熩rvS]և4zM\|c6!^Ve` }،J &LW9DžRJYWNwI!Sڦ\7[{! m ݒ;:RFT!'vݑ$[ՠOβB.GEoջ(?_8-XZ3З-%OԎB(4͡ko=k A($4ܐ:iTi+jQfbfh] jaujj,/xGL_ChkSmb{_c1gοo&d$ [8> (2(â<o4ݤ/VW4ux=Θkui2C f7W,+v7b؄ToY@}~ C#F=k(`ٞkXc?$IYû"sӈ)`1*C^7 !,Z_ZcL 𱫎?!ֱh,my#oK>lև<#p@5Y5Gc!3ްQ@^~T>q*w)P0xWGA,SĀ _A2 9&A dB/$~$&{CwEC "Go)mS{piڹ"YLV kő Le'X3: y[)B'&uj&e9J Pi^8[|+!K)tЂa]4 g "2 r\3վ O/n Xk%.b'((mAp7Nzoe0Lۖxյi J deld rT@]Iz0:rC|&`@t8 j85.>|?3X41|DžRvmxV5l'(Ǿv0 +rUǨd`nNXe;Pthicžgv zUgOBj8Lߍ(.f r-*[h9]q[)Fj4zs砧 (C2]٫$X( 6P Oĸ߂WcC.[oص6iq%} -ZVՀ"̓tЌdoxg "m\}Af 4ޗ߆cSս c1NSLr_m*Ĵ#'F{Qȫ}̥fq5d²Z#Ď+;ԛ4ȼjr+vRPbnj/ byL Z>ӆٞ˜O U;sA7X$?<IcoDY@+c{fchm;Qa=~k"’OӖeM|Ȇ"2,q U+DѺ (Y@_o /. V%CT H`3FIjS7|b4gu:Ao= qS98^v*I -нX(x!LO8tH~;ÏMQW㭀S[jq ][8C x/;Zi~g8[prĉ7nۯL{#D\BAXsw%9`#TMDdbM ?C$ajJ!'Y+W\ aW|2Dg-D9vP_>M]՞#I~9ƉrG'ҲId0jOodǻƿs82hiR9k\}*l#5@M&2b*^E^" *kd{4`p,ݣvb@8BYuVidL,yxQUEucMs L_b| dGaDS]C*K;5^&Z%f]Nl`GPzCK¹?l6UU¶Y@Kd wLI)U6Pϫqeb?9+MXqt$ę2ƛݏpտ]pwUnZG\)B,I"d} ⌸5x99ZWq$Yzs3KZGHќz+5|ay.jUVat$H&V̴0\hCgΩI¨P$`<x4i ѕj zÃrl21z+T LT6D1PdQnc.R 8j.: $A`A}㞸2A,I#@ 붆!VCߞS8Cy?`(jF '%)>m5E]꓿I 34gQY^uKM'y^`^(ϵJV7)r&"fVV{˦$1?ءZPݐ \Uί%)Ecpg Ctϙ$Cs |[1XYiw_{ EZS`S^qy7twǤpMIXoh6E9YEk&SvMp,wWOW =V#Dzl{z/R^v$DŽ46 /8?dE\4ӏUA H*~n} CӦ E|Ě@ɬF~hޜr8P74إR8]tfe٬Y@(ѝˌݡXy _z O:|-!Yyj=g3?QiN)dnsqʄ/&iDܦIo,O_ =N@C*XI#e o~,B4p.fQCOIܰQ!`:+ֻE6mF30¶k6ϴ`.?46)"zwb*ilֵ0 L„sSXYsRV}U;'-I=f_{@y.CUB ZIΟ BuwD*C,Dl.zTeÕ֊b&*0g}S]`CMj=lX}$d zdS3:UUhYE)1aV,)8]p. ԝ)Juݘyk³rVӞt#q(䘫MX]u.Abdyoݫ9 Q_^3`Aupy|>MggošcъF+P'flh]+T|PG%q tڑWu Bt'grXİV\1dhۅT4 Ur] zrKcM^ ҕٻW;>CIrH'ɼA -@0Ś"c3<.jx^nTnSn6tSp| |+>;2@15c ţ:6fyՃyXs AgJ8gZ:;IRJE,+*޺-?I&{gX1iҿ{)mxegb#1ѵI31j8.DS%`ub]M4/;ǎ >%cB#d*]yEMTLL5B $\(a ٩JkzNXiM,ry)qN:Ⱥ&/qt/tcV?FۻpՏZ3g1/UTE^kL~LH]NzV . JɎB;Wvl;}4hh̖n [tN i)L^ _)cg9QWS'Y e7BJ@ d)9A]|l{Cz^bQUA/ds^0Ħ9@Gxf 5*D> Z*aim}&͒P)t#¯{YЌ Aa1L 9ӣbIZ`{ZC{R]ql^)kStX7mX3"3m'9~:Ar t 辳r?5z`4+H^`.쵓K.pt- 0|vÙebq W3)MhHt{-(,~yST-Rl 2#qEh>xD8C̭!rmٟ VQV6ӽo ˆGM yu&Dȋ(S&K Bt GB, 4;.$s#6o΍C(t}E Q<<IE 6\Tb'%먕}es+؆D&e0Z7{ ϡP;Q!HU3oW?YU,N}i?J_# `ǝLf{9@A$+ bh8S9g|0-uY!^oK6"|c4 H8VY j ~#^L{"ucd3K>uB%L Vbu ʯC'Nrhطa+iAa9?7:2_){NݨA%]CYe'W| >VOJ.6Q q9MQ'.?NK+菫+RfdjM8~zS|3ꃬ[Y,/4u";k6 U#\L\ @ʴhՀ U^emHTy!j!.NDBÓ8x2j0F?m#(d;K>Diu0*'4wg N85TFPwYY8Ě N Rj<+׫ҁ6CK'2#P (3LxL{TӪc ! f&溅+wS/ ޼X ˁ?1b+O`1&+U}_[Ӷ,"^9MESʾ ^`΀A縻v_@b9_k8V0a@-l=V =3 YZc4lE85Vڦ1ݒ`Ĩ̷{w;~#ϱ Q8x*J,&C' cOU,,IVy79zVo~x.lGcZ^ Q8h Iپc9sׁ\"C͡i]qt>\ =,+ fk @@^.8Uiۃ*E;zuEQH8$+0ڥNM)]>,D̗>>~:080M#!p";.v2Ka;Hpy= 7uOHM $ RnW횷ѩu.pgQaSe`ЮJ"zI!iaܴŻ>Pu˙`ꦲz ͽ|Da2X2r3Nǂ/kwsׇ_(0T7%eĚʔh|-<\]M?hـ^jߗ2~h'?Á=3?$t_1ri.8B!vI'"~@yS%B-kѳL b$rf @Gy4Dt <;159~¼6eMk;c> xuڷk_;ZH@wu2ʚx^ߢZ3A{tD5 P$Im&P3Qkqu| iN7z)捜VPVo[XvDG~d; %a*#z{)XؒjF)uFT! rs{>dw̩dG͈{42zf|Pr(m\ n/#Wj. TyТ Jg"t3sw1k=!b8'1Yd(&b<2#=)cr ,ʫX%8;qü윲Уl, ;i7g@Ua@6zʞirD0?^zg}} )ٍAHh6"C'kcMP^uܛ$޼|&ٯQa]z @5(㣯wuN [ta21Kخ6;+[zdҜqrG$U(x\@L`q\MmחgQ4}]\%O_ hdX1 RL2|@goaW" DĜudYn-hfap&`WUD2ثfݲyI\=llr6-lp|jBnLUeJTgNx;d* kr%7gIaĩͬ@S{}PLI0Asehe,"VªHB.d k!%'r nL+H<_%-ZiZ8urgu2 ](L+7ƿ{i8![9ֻuA26Q qXH,+Vi{>qLղ"D0IHB .1Ün 1V}F^r:hD5W: kY EQ=7z21Wvî{Qr 29< z7L-O V0 Ohw$#H^]sq"|8<<;LG&v+tcS96n[k(JXe؞s ͖m *~6YL-&ɥkxPrLv7Yd"\̈1~d7+`EdR oF`EZl&)]1׃T.yZ{ȧ tTۉ$;!ʣqa[㩝HCESxԙP:)Jbcy qVNJ X# VH >~" _ X찏w9 #*7QAdOɽ2ϳrrg,&V\';$-h-2](&qp\}En/A qQchbxr T2(=7yᆮ\8x8%E R5k:ڙS iւ`zzԇM}KR3*RiHCE.h fu}P_pĬ-V\\zUƶձ.A\:|%vpP&>J=KOI̒|r@2=JR*ڽ^u{253x ,ȅEۄVWTIvR#^[ִB~~TMс1#]1 鳲]7n!חys„A7|?w4Jq^h$X ͺ!߃^Ad I/fK? [mkiH9kTeLі[U3tX[\b=D/<6sR{W FAeS(;aHA˓1KOůT-|ųt. s::ыcb!S%]88\hġCa|?0_$ `>Ui:_ڱaݷξ i$JiY *le+m+&ǣ c*/g| z^3Ca墩&~XJ$o▼B˰UkZ{% 伧NDF۳{_E1Jxn6SdyjAc 3Gg}pen*K1}/\z+r 0rDv'n/sZ󎾈)7r}y&|+ D;\DP>$7`tn1hzm3`Ǽe\Gbh&\Zz ڜ~iJW{*}.PNa?騶[Q։%cGjS}T^-뽍Tg5ufٜMAb~]HьFq/#3å\m˷9=xVжg(~^D^|9^|EU5G(IAғHƋǴd (ᕆxCtO՘Dr;DDŽg{ 6{ %݄5Q޺ \RWםƦ_n1oZ3x;;->&Tp|ʧ{!&~[l3213*[7 8}+4~Auq1NWe1ڒA۬ndhpoԍ{๭vä̝$ QV+7tIкZ\2HAهsO^.1|~o4ޠW_O%sUow- MSUrs tc2=b$1 xk>.ђA훫(oE"eZVxEY\'>R|P}d ?zr^J>(% >2bԂ,?jfր( c u>6vheP!o8M7s\T=큦X,zuI#8N(]֎?s|g֊A1+S!aiu)-` Г̒Œ|&ENfNޜ1rscB Ƣ-B%Tح"Jex1 _89kr I7dins Vsk5TG9{:+ U+5vDMBzpHfF~8^ɘTt.5=.s^F֬(1?X^}3!A%5wpЭ%̍S "Z; ﯪ iGq,$vr36#Cms&HԇmdjN̠[PM (Ž\?"ʳJrXӎf8UqM^`V]lEuN_T÷62ayx.[,(gyM5(3GcyjcG"ٍ^ CK2>1bv̈\u!*\SHr?5$%2dMY= bfT<%h (?gĤTS4m:'m}{"{TLt=o^FdSћERYOdT I/I0s+XAOY} KS2/ $6RCK2IcKe3 53x] ٰٯ;p# ըgF<0VChW+R P^=>[̌2]&,cH~lJu1/eu+5aeȗlOZ5O߆=2>`c9x61s|N; 7Z}_ )yd='epWuֻSwXBtR{ò?O xJT8=]Sكi7d B-_~cU5HQu~O27)FXdld0*HZDD,w-A#7VyFbDi+(tDfpK]Z KV"WuҠHQj:o Vr1-E:e/fF9yKڣIWIQ!zYփz)̈vt7j") nA>#ۅm!A$]ʘ9&aZC4V(~9, bxNCI(ns{bn] !?2(Qȝ\sU PLw" Fa ,,0΀F򛶔v nBֵdjk 0*"uX])_ei@MK^ӏha-C3>GC iȧb2TYɠi ȥү{93&ӔQܔGU >GZņ<5y7ҧ( ò_$3-[@mgl0hiÂ_.~:9 M<^Hï[?`)wNPCcY+lX:w3: Y_GZWB6S5Β?bū$,J@#I SuI'_ b!x64l)ӹ7 'g9hߔwI];w(LXRT@n;z^Ĕȋ qJ5-av"< kQa MTa`{uYo}~\KY7lV17b,R5K2M`c$7lG'*@.i` ΣiPQhKTF~QF,*b+P#pJ~@+?Psf6 W,B~t%fP^X˔vLcŨ6DpnɱOv9ۓHIp,QzEvT0h--eoѸ '-5SD7+XXgr/:f4ܷ.0q4Л (EЙ)l ;Hvј< 2B G^|RnK1TjݡӑjҖnH 8n%=-#yׁ$\On8>~:xH2T=K?S;|V o4KѶS.p;ֹ%vgak'L[ک[ OhXK8RBOpuOLgih֨wqLI`%]C{ID/۞Gv.* a#}y%Z. P)J.ݙ3 !8`"33,s>ـH!"S{ Ͷ})3Tl3x7 ͆X4ɢ#cQY'&-W-YF  @,?+?yXͳnOAɰbz7}w^`^dƎK$Q 2\IKLyџ7KĭsVoA3y667+7D@N(vp 7.*F7eH2P./^uz#l"L@n]w #lQa IgōeT䝌}`RO$k}BP`sbkXt fn 92lqV86 u{hq'Pj7}܃8´SxqRMn|d){nI^KVk сB,r-_馡pL2fhPfG-t 5Nɀrΐג #CZ6#SMHnXv׹Ea(ZBo',[Dtim:Jg.초h+M'CXIe#~H `Z/&1亞5fk"0j\q)+;%xwjU/awLbב|QZ~eN#-'ݵ!)l2$Ӣ@Ih >n@CiuN|dXP7 X9mDIO c_V0`mP.$9(#ᥜXS|&~9hB^DnNgIRj-65yFx!}ʟO$ٜ"Qݍn@U&X=FzMIQBZigמhTekB*G4bb#ʠ'zi(#+R@' hEnN($1+^";Ј)sb2~MOZ(q9oF\]\C4TE9n(j&,WG{*>aZ#1Iw[.)яxΨAϏ9ߒI+lQ?4Shij:;8t* ٛ*$4Lcikpg޶.!md's%[Fߔ+FnE2h7w(\_M^fi)Alص ^l~iJ`;=hRqOG0ui?܊aZ~24۠E(AVXu۳S4ba+j-I3L:~牆+D*3Cjo1y{ DhLݾcp']^K1$9; %ػ/L +Rc.?ؓ0qڞͺ{ w3‵3 @wB }顶zE|Eww)o|4? 9mV%GcxͯF}Po--xAk$'K+9N.b'8e?<FS@2icԎ8j7'ch[EDrGO`ufp_Es cDD;{ ?xq4a }Jwq8~)颒pe#k!j1yzPpeyڃ|596jZTe4LVLq=ǙjB%tFm 5$Yd40x+;"e'Z? : {F0X0l4U3_JLc#l?Q/* 9}|3rƶ3n\'`IuЍ=dUFe,S^y9Ζi oR>4~_ت+;MY֜)B8 1"^s5LC?V[ݫ̔_k:[qM'dcn({J,]$ T 87bqHiB k|tJH94bǪ&!FԘ]*$cH\f<)#ǥLڼz t֣%Z>W@K­(}:*<% a= 5Ի֌QhףA=ZPH!: Kٕ=~EqyK-˜I_Ћ\ b'O MYrLk#gBkVU-1ϼI)+s] Wl#=N Z֌F#Հ[XJ^1~ YEF_P/Ro-_$Cm;RCۆ&?ʖ(BF2>dv^RLZ 9{s=H\Kp$_[d8yI:  A/L(Mz8^4yGh]`OֽՓ5rSrDdyK=80QsPr&Kx5rY'e⯴RbmY8C0zD2DnU8C"5w >o?0q70؇j7R|EegouJ\ =f-QQGcNO<߳/č+MtS i/EJ_`2\}͡i4䆱׉5ʋgK {] J֘Dd"Fr"qfR#%{h]JO֦J:μs!?qA;&N a1(a8pAR$~FRãRTtGQ#'= MQc} pa%T2 z}ލȨ%}>%ڂZ. fX-Zۋ cI$ R󥒠24,qoƏxHPk&氜m y#pD=ݣt6$лof+E40DdN:QĜ"ٕ'}Â3x85]{$=UQԺ'DWp1Fe/z[  "TGU/=&(V''Cf!O:ʎ]Mhy8i" nA\4-b87(M'*늏"3QMjZwt#$BI_| _R1>& 5j9zgس);X|{G ?>~.CnGzوr9Z~Cv)H%*#:EZ'\Cw."YABxL0tN,=9 z:̛!V'mW F-Ǩ %ucǥ*diLO5swXz~"> ˼|hYxI7!H~7'@嬢N eϟ[H@Po`kyQ]%ܾTEtBqr0: k"40/5.iC+3dֳ y 6''{Brv9qIeư|8k{pOҘ7$V@wI]qA@s)RF.7tH?|cv2s."W56~K;H۠W4cDWX̽)<ܭq_s"&'ۜUo` =#W! W-˾Dx[!1YtC]S]=C6*:y ǧkb#vNh*f`W4>K )ns8YmnItT쯓O IoC!Xd(a WivaP-փS>"3}k/κW0_uSx{Zk2 ʨ-M-;"7!s@3gRa6k;Cg%~>8 i;jB |B8'tlg}̉ED@N@jK3&XE7Uvn|-5b`X9杴sQ``_l? {"k/ x$3 -3ڱDzmٳebtVG U%Gŋۼ/]&c빪H;A%WM0;Iaoկ d3P0!ٜ4Lo'S[F&ߎn/ Š']ª|[ Cܫ|6Q[_L{M W}N0Lb\LQ-d D3k)T87$舑sCf~z$V8#RC$]_ />,;];gu% OlxB+x?~3ƗNDRrH^@:q.oh}4Ό͔h|NbHj]P͉ $Mٱޜ7R 4|_㪿du*gu^8zG#?(l?ˁc{bd-Mp@?sms9:;-H;FK>/ ؐ͑> A۪8#Mk=tnk{L2cOgkpM^59p/Yb Hk(€7{4o~,@F22ڧBvd G|J+T3ޗI6r!ZNޟMCrgOlzk nb j]N| wK^S!W8key1Yᆗ-Mc\Ո!jC/=PVeCqnx Ab0YFR&^-!sFGm aDmo˞[aT@qKܪ c.mf>(;M;iY4VτȓǛ2b3%5]QorDe~ Πd~mY*Yn3c^ e/yz%t=^fnHk1ZR!ak63ZF̰u+>M<-c40k n^+VAlffkf,X 6jΪgp5lM39⹦3޶9nApT;U˛3mwa=$^}!Qƀ*GlK [[B:!)F.(iuQ8V*$ [RB7;ɶ*P5لHEB}C?wiUnwz-ԛ*آT }AҺeV/r̀8vDFG\|Ղɑ. JzxGAB y8#@x-0LaoԋCj<.tW"zs yU 92BΚѳnsۛщhGŔM]JFExl1?<Ķ VY)X U4GU/xMf,~xWDI8bU z}{LAΤS3aQYX衅6qXj}7Bٿ ᩬ ^g;Uu2h^+{:*Nq,o?O-B'Ҁ=.;3U=+s/!8J?CĜ/H (qxh;ʿw^HljvIbgZ{WyekZZoO5q!ʝ;Ҫe(K]upnn󋡍J1ތ(Pt"l_$ŰwĠK :Y&& qG8qz Wt;׭΍^}KnQgdpzS?#YVܥ'K $'gJueRw (Y{8$M_,~4\! /)C`E56)IyZMT6J|`)|Y`9o}KjBQaLWc/5 2qo[#/c]0.LCJkqɱg?ҡQQoO;'Z],ܟF:N dgP+b$sVݳQ hXt6\ntjUB Y]t'8TѼ; "Db"#2 #ԮJD,>6|)1ͅ.R/YEV|FUR{B-*IOAgر"uҘ6Z+bY9?O[\?aխ)86҇_νDքtkf(<2vTyL\_UkmF$ @R(DN R9).Q̏{Ď (,pmT#i  ~!ON~U^Y2 2)DLqqiL#^cFDS]~d]*$ls135<թ`s;#)hk[9ٿEOpl{,j۲u5\\$@)"47;z'<kIEʭk3aA20枑d} ̭ƹs7JfHC3G#By1fO"Q\[l_ŋT;];{1_TAէ1닳91:3 ak!?PVkI_߽kxX O7jpMbfWw@Opp~햌}#DK@+% >*7ps-\s%L$%S몝Y{)QOAHnu{XNfR>dc*k3B͂5@bc^a3=8Րp';\pKiPU7*  QOUq, ,Wsf3}5Ի*u;%5Siį\A8?e`S3/CkYߠ⩜KXm3L'IC^KPUk8oey\Su 5/r$@NW(ؙJNܶ/ЭM=VlOcdVwÅ!J#/IQ"D)s]}o b;~;Dnwݩ4Ei|bcY CHql}!~*h?P[?5AW2š&6g-{ѩC]8{ \BGRң -IO$0fJ>A@9+6x_uSBiVx}R#±#էrdADJ&"Pݹ\*N|g#{Dݐ =܅!NYNTٲ"^ĭV`2}mq cTⰧ*(6ɉwUB6 99s􀋎@Xx]nI OkHK3b~oϦe-{$>4S6p|B8Pf;x$)ED(M6#Ь&?ǧ ]L zumDNdu=O fK_V2m2]}}ac\+O~a RI*f &J6͒[S9J=h6um_trZUtCJ柴irB}1vj($&MDZW ek注B+Z!n# N9ۭUSR6IN$@r*3b^ %gaZ],Xчm_sѥV VWn7C ^|#M[5Z& |9G&[VhDvX#MĊ[ 3Mw_۴1P'@p1-( =NJdF({>|d)Oyo %Rf^۴r%ډyR"g֠V4U*FYhk^Gh - C7[e%P3BB 4|hrjċ^\\m GY6O4+ We]pkZ`߽:R< Ij}fy"W Th3cHx ,/2 &LW߽nW2[Siek'[/n[8PdC}O~g21'<+w.d= )X ͨ;2N a[R9캬!.L^+PΙeJ7L5glBiQX0}nX`uJ?Lwυ0u\66WkGs#BA-m+\KmDOqw#"Źt_D![yoإx wIk /U8y5@j,>g&,(l{XՁ%"y e,BpH?a ʓبuWa%ρ́bעMv3Ea5K QUEݞ4"1@*YXhFWDrhky[6n&duѵ]+Xc|MֹP.f@; #GdB#PQ5Yɳb^&Ζ@9(NL]&ZZXȝwO_U~KXŗ>] ceu(`@z)r1nYCoMCQ!oN P2gDd-5-nzW r?6{2։^֠491,55O0:>Vb@~Qnf'3eۙAև.gK/Jފva/,v*[ʨϙfFU=OLFd'~e%wX/x4u|`TX* ExШg6bHJ=Z7G:H%Y\4Wv+dږίmw5dUZ(w Mqm"Jv[KDƌ6>Bspה ѪL$b?N *S /hx.\ S;* chGf;r"2۷PQhK`$'JRvnXEt b| gI)k 'r8xjd*1|32RQM-my6Y 4⼇[ؔB ̽d~:=H|{HVF$RV`PI&g vr]).X-h>xtsA,ડ#b>;nq $!y2Ye@*91c,k.v"?Jor1 __{ I(C V{t[8璻Dd7MwҊ}\i!d?2&U9j$n^t0ydI&xnӟGA׌sQf\rPT81s_fƺҼ4* ɽ,vN:&9$RR8d !cKRm/D(I~^`d(Iś}Vca ,DB|maбhlo3B"P/0[/E3j*u2Oaڵ ]lxm YUZ'sWT8"âHUkC4/@Y F3W%nlzdY/')~&DJr|"2N"fL., =],&jvߪž?u0Sd]םC3Q&W`)ӧ}H &f6&C0m/|UQtkq'$ Vxҹ%!_'bL7 ~ee]frޓcЯPkbٚ^ vWԟ`*r 6޾InYotG7.H .I91]RVKS<+ѡ;(mQ9a4N: 8 %7tfguIT.[y?%"IC}&Ȗ1J̗s!j"`hJ閤~!` :KInBK\)dg~{;b㑱o$\,Nz_<0OUr-_ʆ V}҉v[Q;P(tjEᳱkS8)CtXK9fm1J$ ,2ahiCI|&tL`D7%sĽgjAr)}xA}J&$T[\/~\: ߭ YDV RPJq"Cq.?d9yk+AW[e@Jm2<? W_80Yk!ч푣x:as?mmbžFH"ݘ".b\nft]{@F ow("4GgH$a?5O Mo)+*0rɍ:e1sg xZX ^,,xm H'9kt[4skJA%Fq?4bH1Yl雀 U5Zƞq덌o[V.E|p&m諟Q_sI rQbDIM.ǁy$ߨb-EH&:p`$2-oM>4Jg &ގ@XgMW)^⍒HhOX$}0K a0e(+" x_-i _  6 wƯgH#_gƋ5mB }5oK{ܘՇk"ȅJ-]XWكЙl'0I_)7@,y e'*k&VTj-Cw[en祪An_e \KZ}Wg P}VϩvXŲ]j8pWrwHoЦWFw ?8;UdICR+@7Q}g@t7ګPQ<[!}"v;l%AL֍TjI֒(cLtwp4e] {*L27u%&*p/^4wU|vKC &>p}n9&k_eDlcj1Nu~džGԴ$tǚ|k9bFE%Џ^2!W(j YIU!&@㼩97 {hr dwxgA@U{54 +%w?Cx:1b!M!M!WF1ȓ\}lٻ`0jV :zsӝEr&9ݜ_ZmwzސzO@h@{Rߌ>;.́XCK7+™q&@R g2< )đ'lrn7Υ+wd~qmtgvuC2_k[1ܻj)i{^ CV}.}D"n?}f?l4z={RPtI9>>fsX 䡺D'kњDtUJ:άh$DGM$kHbF$ȒUa?8 C |ҷ>)GL.}\#2 l&j=-xUؚ"_ܠFٽ%Ȣl6'%hשV_o/)(wpݼnX񁱜k-)f<0pyN9:AѼQnvL+3qSC'ܪ7E\%2>Q@?Os|feb&@bgPmtyŘoVAיwP!73EIF&0M6Dur% )s+w nTg zpSxDpl2T|#q䏮S=/W/H w䩴(M@q]L81!K)Y/":NJ ` ׎srvS4㝧DOG/pq6FFp(=TU^lwdIwG^ / \iS'9#aq?;8 E[hUP͐0Z.-:gp,cxxY`_ pJ*o\05]OtMrFeU}DXu~ttGdOݗa6>cWO*vY?dRGț !` ݄Xkx7޾L^p ) FM$Ef W\ۺ.xYB爒>[<)y$'W*UV`_Af x yF('DVBl7oV;o< 2=g^s Б+=nBLN=/V$RN34/%fVWb\XLG_ػP>$f8-ɶtg[3Jĭz}ާOΝ$ȃxn ;z5M'$mt([օm8 Yb*q.H̞x&p]b7O@(|sE]C-fsQo F}"F(A^7O'eiJ+w޲荡gb!8ܼj$-$`n_D'ixP@Kഔ[t`#w7#&{c=9:e;j whwKKgE%rFw1pK1Nf<1 /6^u I*r=kIV+Bh)=JaK`z^ޅ)ʔ(j`L ())jBZ7?ȉ䈂i@w4ǫvƢ.tJyHz&o5 rR&Pm5;cnX(4)z@W1a`QXQ6 N6WinL "K)s6/>%WgvP`f X56AY_J8K0RcnpzAP#_hrn4wI:S&UU|{[qImINu1a"^jZ-$Ȁ隌R]a[ +ɑM{/! j"Bδ91f脉fk-5J" &Y-ᰝϥ47c̫l Y$2>8p^\;X% WHBTF=i*=k#+iW|=S2 0:'w\2s`JP@8k+|W9#\x#{.W7EFwsO 5= YH=HE PT] VH@awѐ4_.-c"@Yo\TRlJ {rhۡ0DgPC-B M plt'H#^(נ3iO2EM oyٵJͽo "4g_&!>،=C}~wMXV)}'R GJKlR%*`pAڙ=erh,+&FՒv o9oH jqygvFr} =Ojf'4JmnSߛHPⷀfWf~tч+ aulG{MruWK,2wf^*3dUUKpVIUZBMWaS89K$K&Jcg*͖ێK.7~ٍm`zzo]sԄS]dKR v"8îQ @~@G`Z!blOQpOweһA*/.֝C}%<88Ny~s*@ǵ|6\toVŦE*2˹e N hH!4d6vW!NyBRk7߇y#"Ljv!AB\R2TS\iJ|:$q! |J]|{g쵱_$R*ݣf̀MJ&VNYeF ځ֙RǰQԀRey/`7D|t0VW_G.7CpYk *<]?ua:JB6|zNb2<>u6d|Pzc4BF=dF/R2}o_XP}ϊ5DqWqCQ(.ou.1XKi|'z$$O2nۤC7ݒLcMl</ܞ{orG^Q||.L-i:wpP%ЯDs}@gԑ =OcJ/#//X44)GGA; k˰q7g$9|_;5liG"3eIlmQ2{qo麅S`:rVTK4+?L_WԢs=J4Y"B`Ĉ'%8)U=Ǵ^X"Nɛ$ZX<fIP~:$D631,'Tu8p7ռ?xzޮπ՘M4_Oh unZ s|2lQQ4)"O|n̳_\+֊x5w7{ӭoj˾y{__Ʌiw>U>o:JP5'ZtWO6MW+ B =v}}9Z~4*H9COOlW4e1,A$4e}TRtm: +^|S+&t: 9KF~;Tz0 Ho=D*q8ʪ#tf񠐬*,ٸ6Wii12lǷh?% |d2<︮PA6 {8C8Sg>5Wh 2Z7`W hyzEuǍ]V0}jt{jC~l6,ՎJT>8,\ߍ8s/i ^g__6 Ta̯PH%BǏ[3CύM)BWdx)?oJ`K3`x%7CN hӕjHXF{zʉ׼GbgsnTxSi S^LCylh|\4Y>-BJ W59 84 gkͨK扷 S߷v&XOzdp FwC7 h>Λnwj- L Ҩ5-|8s nUdRNe:׹Z080*/gz%tyQa#ؗ q# I{O/Fx%@7/ZlnDI|`| ٙ+M1 F hFxLC՜?'DwmeSѺ8e6!54gC?C-;u4#G*H MzX^~Qlw 9 )e:ACSh\O0IC#9mZ‡%IUU*@q@|oU&08b;W)k?ظ*&sUF TwW࢏6`4/ r МZ}ŝ쎼b2❀pWVې9^_C&ux((OEy7B Jߒ@ Oi8)X,RmO40ZԲH =`|O@8~1KWUSmmG :A[{<&$1/ӽL}@n v IK& !WZ“^pc#4@DԆzG֫ IRGPwjDtk1k ƳAK>('pM.z:B~[ ɵw!˓KU2K)v">Kn0p$Y(7'>kqgSԊ/.OSs?m<=jdzUϭT~P[!Idmm\b*;tteP|hn([]pUBZ+FޜxI;O㞴 ,қCQmD<bu eq'ÆI iHˢ&=MAjȾpN4r}<3:/d(ǎXegeBTKלBI㺊LLp:q,lJw߆hTE|*.ɫk] AW%htK?Ympkjv "Y9 椟#M-вEyE0@4o_U)ދr:>gh9Ϣ._BXx 91O5 wۃ^ JP]u[e ۙkK}l U6oZz#obMh$"Ҕ~OoR1 b85[Ì+1]3jZTb{ON?(hΛAm5ԀTV*33x~LR"tL>FC|cSC&6PDLq`.7?VM3'18|7|{apNiagn&aO6))0UYBWqZ,9V==W.6kM>qC-֧P@wiHZ<82H׾.r{^N^Fn+Zo؀ݑ R+:70$"a1 q ${añ kab3hSG:Bb n"q6_A#` aR^_ڸAy/No?I mAJFV6zi3osSD8 /y;c0>">Ƙ&@΃?(`t[)Rڞ2=Ŝ k;0= ^$"ҕ$ xu.>]d"8|ei <~ƞn`jژhK{rR|c[خ#I`޸[ }~F~/sL)Hj\'u팎#~0hkx߅4tMoAzJIefP+>`cY=57c5v85#`D|Wд`f׌ V5jk3{V,mJB@;ن@ BBn2y[mo=eVb2 B+q mpq"H]p'l`zs/'rE"L_D-tNx!RׁDѸXKr2IB3Cȴ*J|f~٭fDفA#$ 'M|ޱ)5M Kc|+=3}Dېq\ƚ]hHHDeJ^O tu(E+#P`9n n .|D1 feHRE+m+uMw"Cǒ3n`X bBz/H"86>a'^ j¿X)C^;v&tp  d8 [*tJw <ɜ؜0f9₇U:Wp/ *yŨr5δ?:k*賋=^(ߣ} tʞn"pu;| oZ79g)E o8Uf$ GFSץ`F_E4Z~@,we3)ҫl~ԟI(?Ƽ[rDޕQ SՃAȦMm-/4u/qYd@nԍj5>(Bo<R' ~ak8 U.. "*\Eo.7>鈊"0F-?H(RU$ܙ˓7"Oŋ7d2*ٚʻd;2dža']–=;2P6J_IrBc}r%ꢤ+E 2pַ(˧i`>g:>f@l4.Ù!<mtuFcptr8eZe({mʟ2'%f~VWC'D=  0[yevܛjm \݋i`Dc_ }pUi߈кWPen%>란e[.5H)QJ^ɬǗGR(#xu8yĽLT pjl3-n]@w-rsuV;k0?WM}!4lW]\85]'%[n`Uڟ.qEȆ'u G~f]T&D(*uC8jc#B"5KȁѾ>]L'}˪R@ xXm9!줰--pÑR{>lr=Ӊ׫s[FٹeA2H%MGa91XwM> vnWhwpvF_ُU8Cy.lY>ߥԐY/$Q6mV I(-kĭW)f $[0Tq?%u(2iƩT}=%0O,(:ᓄV5-|hQY̡Gd4 JXDjmLn ۂ+?--|q6B@waZ 4Y9q6*&oUmq*?.^!0]2|'~tݷ̦Z%%̖5;W =Dc>-בV8ژQGr܅oi |Z/LxSwWg`,zDסb^/uAlA y=p"T)( eJ<8ZG#:jMMÑ *_=\{cȕjAxn&0 >=aw^Çp՜U.D]7y@]X 0{ M{CTS'B;-#T $4QU"y=LWs<<>0g2vUނp$fx 3 MSy ePu&!>{Y<p񢄜Wu]Yi=R;)" 0*V B4m~{B_Z/֔ev$H X-boGf8}V5ߩфr]R9Zx@F eۻK'>:)Ĺ㵲cmGD̶%k m˹vfÜ=&txM8.dZ_Cr Q.Baʯ@-jȭ=oyONŗF|ԹӇbY߆Z]mr?SxAʔ䇏#xZ[E=cOR0>Ļfχa/' az}0d]ON[t q1b ̠c?2zw?X&l/`G(ʳ|X\MGa\T1l*wgn?tbRVuJw$_@d"e~[DǤ{CN#ˁ 8>8RQfD ^\ͩ*Upba'rZZv-N%{͔.v{;[v Gq2&r,* ^ U_- *Vcqȷ}_z?T!lEwk_cCYO r48_ة|&C,<N^nߛaN`u%܄JNtwC'<b8CegbUjU#Px|a~U-DN1:INJ'۴FpʻR]k;ED]K+ 4.claiIZr"-1AP8Rt52,#LRKLxwyWUb2@P=ܺȐ*C6rfU\D\2Ƙ3ni[pV`ga.[ rK ~2ioM̶MqKcC\\Nh2?ұJŊ.u0A5К0.$ fg/)AL0)!q6s~%)0| KmP-GEݩa` |mV*&$͚)9|u4JmR(y/y6PO!\dTKGۄ-MuweH$fȜ˙҄yi0|#'TI6ר`uޟ26;1iQS.N4EX*HUQCV\o,1g>fw"\fh=<dF׵a]f*\%P}?2(S%c7<f(D4%ƉH :v`= D5{?%nҶL: ;3YGݎ4re ]LjnBDHvNKs΂{!$h&h˳|` o;5!(BVs"^DB)yh͖UF}][ڼoս/uG2ҥ۷)! PÃ7W%Nz&dͣM }9l,p1hz3fItyU\#!HtsgC^܁adK$n6 D/_}9թ3<ę7qY#pzP}^mubU1wFhegk: _ U"q! !KCmD-*6D{Aa &QshoG\X{HOSȡ y5LCGfYV.@T9{=$Iǃ6xE(cL$ë= M*]|Vq]KVFFme:v}~E11[n߿?n/oN\#ϊ*D*|ô $`aOL{{k 6h^MVp4X*bwX S G=)iě+L6bPf|$vJ–zkW]4-O&ç&w|>IzK˓;iWITm3)@J*ͷQR] Z3 Jʌ鞠2fw)w `!a".˃8%{ebK k (&?rR|^:D<'дZK pmhgN!of=2tA߂q`~‚4+yY70Y%_>;=T"W!5CZkZ[jo"%Q\ky5EEZe/|Pp9"H˶3AJ2o<߷--_:%& Qr$:AMX6Iw1]]V-,2R ߬0Ou*(cڻҊ5e^n K_@le3Q5Ӆ6Id,^;4DhKm O$b̷o ;^9fF7剺8f8?Jjs'oIT\c b|bݽ5<֌vBhʵ~ɉe[[Ô CG 7^a90Gӻ3NthG"ؙg7b.d"ZQd iB-U;YF#Н,;*e eht0f.=LF#1ݽFaGI1+Q^yuǘ+*}dTFx|h(=?#$)&[kUCwTDvERh]$ |W1 ʺ~ŦlYBAQ%$FoX#%~\ ;hs^_M-2+q2s=ΓrhUPЁxI)+H3I^&9풭MKtw") n3vfS פ O@<m,k J}wJ@ 6Z^X8'g<5"9]~m&CF+AȇĔl x3r2l>.C}aEm{d"_\BչV9Fcb>"LSkn/sj)]zJZ/ 22nڿVkء5־y @}*HêTֱnvVʼnoY." t[J$?z!Atg;M3 +I(7k|:lW ~Xb6a`\O rG[ agܢJ3xM=Pp5Mp0&d~5#ӄzq$z^28h1E6\jQ1ya4OFRщe0C[i޽Nq o ,*)"L*\l:{>n8 Jyqۥ~=2$Ergq&)lvm `]Đw Kc܁Qy*Lp|׀DUF-NKA3?}6'\yVV$[n݋aҠ"eO:l1 ň fL^GjlER?UK8G%Njŗ~  ߓR$TID{&5=ؑݕ4! F 2t/Tcq|x:иy9OE<0?qsjv (0X@U컢oznm jXa \<# ˞@GGTI.3#'tQat2y-o4s l++߽ U4~yc T.rcPyjƭle5CLݺ"%+Y֝O89ӄ!3MQO6G$L$; _"'LIȵ' nݧ3x~q?hRæ铳ʹ;qa$tOxbS"C*jbHس0*0ldA ͑/ϭ_˵muo8P2:BvÔis_:V,^ZIAva,2^Pɤ9dV:nI$opkMݏ^qkIlx9A>(|!ȣsєC=;'u8:7-"M[$/*PTQa杷´v.jf%:F7|@}[!QSw@y4ۈvlt`w SÈ!L$ ܈ZF!o7۴a%M#M/-$Sa#@2~w4כ27Z~qOiX hnTnfy{>]$ ֟Aٷ ;,ݦ&>2H D"عo*G=Q*DD'~r>ch8uKe1ٽ_"P WwG!;URW˷DY10WԹ!/!l㬝@CoMA!`Gs.K:쐌WV~Y-L`=|򡋄 {k;ek鋾r7_i+KJBA/{ŤûxFbltl6Y^E`"z<̖O>|q/cH5ij)O:WnZoEeߙ˕k/ EQTxyi5߭@K(?be5 c|Ѣ7פq;C9.5^I m,y!{ELn #ЇYn-+1x!P7}CHi0?G$Ҽ^~+>ZuM[lXZ7/[4HBCC|b@4$jxsI.<NJȧF=MG.dGP=aa#Jc,GIJlfyN0 x[8@mEA<#ul8}^U;cYS9׵ȋMfչ bpR?1ipX7[OPͩ8Ȁv9Q6SQ)`}%m1dI!+6HjS~/8ʹjx;[JC(PVx'Me> T$h|55wms%if5Dh X 1NA@fWgtJY9?B-ӔރTO#w6 5m`#H fЛnN݁0ޝfǧ,d?+ ΢Ҵ0F3m9fӒֽ~mǻ+#r{%=V2'P˦8uSAzgU,jmH,ͱ[K9bW0IiPfzbbgammw7%4 (XG1~k8>%cI&lI` (DWP)8m'&:pN!rvaZ 49q둬wc$!:IIb:W𽉷b.WvmIr L]ό֠KAcA*=(/Vpm DE޸'m]V.Zj57UiVPϞ=̅ 9֭"d#!+WdSHٜ{UqVzYn|xPL9Sw$V/& Ò}q6s8(2֧!:6~ȳxWoL*stk"%Z "{t$ȗ#DCG3HJ O.cKp0lGHU aΟJX>)a9V};*]> "*F3w`7ĺ"ޝbrgJ;e%t?Կ \د#ZPȂ R;Vv7i]op\_w67vqZNdҸ'J=ů>ZX=pJc$׭aʕ`f{AWEт q&U,DG7xPQ9{ ,YR\p$ki!oC*3k.I֛f00T^ģ=I~]]zrY͕jO,Et; +l6}ݮ߯X6;YZ(_ϔs t$ UU\i'3pVϠ]jwk?jhN.gc72p@s@WvP?-Z}-BJHm6tDdQ94&QҾyV "˄vK1m 93Z3AQf؟?sLf{Lή[w<׍cdT3NwB"NrKų9( 3-Yq1U0-e"lzq}43޷vަTVySbEZ=I8#Kƅl@rsB0Y9bm"] ,*/b,w4,/~d}@pȅ$IXZ''CCUsG]YTu8{.ME%y` ?Cn&3=" ."` ʖ]fl7?>ey׌j_%X$t6i5AœX$du5iśS~A Pm r,=Pw' @bDn\xX>},O,唖dQuOi&|tdԹzF9Q6ej6sH/RDJVbF`H]A4kw SL+UjK|"ygSEԅ硊yX+BM2s+왉>vBMrxm޶d00=ꌜ\p'GU-_Ē'!6?ћxQ£ZF7Aia'&HwHb39-3 Aw *͗􆂕2Uqra>CL+5!6fu-Bۆ);= {NdܲZAEޜPK r<=({,1Trkt7hm<m|k<;Am JjK)acCEn}PRI#D^;z0؄8wt; ٳW'JOH /-w@5ӘFzi?>px8DT"*TZ\ϳ!O|8ߥwg{&S\j oabeMo3}0T 1-;}7o,p@^}HDzXdSɬ!aGa@m2`aaý16Oڟl=&S[JA!HwE.R90/_ƉU晏"͍N+ LnA_*ΈD  VЁ Ew |˄RIڡyڔT@YT6-Uv ZwҸp/NIq` Ba3\#vS%nE;u§y:\: .^]S=gMZsXZνoS>r$SZAH%؁?}d)^]Ī>1)\3,;Q9GQB>Q% R=[\n2mp2|tzIQC ^uxd/4BPm/D(f$ 70-۩z<ͥtmp-S2KRz݃ۻ`٫u+Qud!okHaGT!=Dc,T5=N}1Ͻ[E8" Yp˄ i2kKyr"| ن҉S%Vau^z: >86I%o? c!UF}dj<_+CmC &QF6A:Tdu%iwI "̞ UTl:VNJēBPodLStVdy H k?_}L] bؑŋ#4](>ՃsJLW0?Wj~edwfi/BcYSHLx0ë́zgXΓX!b!M ,/8N LXc}ٱ3?#`3B 0Wj? NH` BX ;4F`~-PM&W6ckLY?~= 9~V쵬d~c}!3Mӻ7xE: zu7=b\Ia3&gK6؀?嘕[~tQ>q-(cq"'>hXX~<ؑhru4>$8i:#:@6dBӊVn‚14CRG< !~cc+E8@)IGPߧw03Ӊ GIoW̞T9N|j?э$~] ڻdKE\4j @ĸ$B7tl fË>}y*-G]_Hj} *{l2~gkh @?PZ_/,`1my{(#^qk ~EtӮT9, bVuLz^}Ӭ8!RLHGc$W 'h5 'YHk;BGZq^G0;P!t`q%4/`0~[d  ׀9׫gFT'SoYvvoB Ukb Sr[CS0;.SW#S> (SPiCN\OY ݝfmh u"+-6'~rC 3_eЏ iTߖJ+ ea*i,n*% y/|pz&gb .a8ڬdu;N8w+*>xY*r3Ueo7(^y@vWrJXm{I1OI->"=COrSM^5zSԇ |}iRv(OrYuNHuz$Cl[dgtr%?b|/kQn9l1[Jf}MDyv~_sB_ n.1[a=фҠ m" ַD]ŎB'A,D·o$%.L&Ә⳯PW8/Ǹ"7s4).cN.YDЙ+<]!!xsLHw,PInk~ᰲa24ko"6pabu #!\1$]22bj+zJ~x-3juCM6[e/F~yxr'b1?o̘q 7 t6n/4]ެ|2({k~!#?-.uoVXjج^&5ݐ͙\m(zP vkYMġnOktt ;4dg <| vj[r^ɥw_GKdUy)D 57\n3&aϗ b/O `3?l,,$PTGu{Evtv%2z4:a[5}0q̩ 2O~w8;\ Y,^k0S;[~!̢þErnAY8gBHb¬l7v2tP!Ǒs]_&DhP~ 2DapZ1'c0<:w"H 7F'ܕE\mq`IB(/cU'5Իf;߭rq~;RCt( zN1B7ϐNe:5[q%6DY?Uǡ׼NQ]' {C5 *7b]32z2|W$e y4~X8"n~og-N~3U<4ֆ9 &,__6Wmt'!+'D`'(8ڐy#A fS4f- 0;FKՃ.Ds[| EՏ 輦)SQ4)/QY]腳2AD36C KU'a覩G`l\#E;zwCKx Xp8@WIit!!jz5?~FE xNN*cP Gg&`zk2Љ {\lPv&>ɋdrqXLRĩ%7aiڥ~<By{eqG9m|o|_*8덈֊e4b{Pɩ(_9ҨFQUx)\ը@IXFw{=a"}">' /N(t$x_? _''3hPV D20!tm F]*nZr3g,Q41|Cnd!#PAWQLBzOQ=X? W%dasHkY!S)""U%!;` 8j/HH)d,QɋehuKy7 DsDWm^2g[7\9?Ctw D(aRЩ(iawUfNL0GbLV~R pğ[~0pu yGڰxXX- ?rFIMBƒZU{4'.! *Fa X"dFÀ>l? c'3XguEN42E!9s<3A>O]&U_x=7l>N`W,'pM t9H#mN8(Z=">ik"4z8z$AwU B*F;~ൠ;|,\u<0ru4Vgjt5 \~Q.‘ -95wDty|*-< Uq`Kb'-n!ٯҾY]f=Bug?ů>j!$ d p6˻O~|7yq)½hUe{0$YMlˆ1t-:X<ͭ稖o d5M%ZJVW;)m}hVؗ¯HPE_U bE%>.hg-cos^/lHSV*O5|j٫F{*K[|pV>Hg{xQ]?.})jqK ^83݅܍:tDTbzgÉdn]w2Dn]>eC67 ƹӄ[ Oi*IFԓwruiL?na w3u'5=?^{r_nSy'Z%vؒ/<I_ iđ(kF&Lwڀ&Wuth?(ɰ)MmSuk#n1юs\W &K:M|مE&}a7]Ue#ԴxWle}k$ɟ2i!CUqqY(I Ife=gs=m^6 #^G0DEtI26^ ݜ41xy_+1L+q![ !.7<CPY}q_/~-0꘹(Ưj)@Qďh:v>0;Er/%Jq%p/DžZ~*9"f>D>fvY2,l viGć_Mwv#zPj>ɋgA;KSoKr_z/Mg̩^v[#y٢w_.[{kCZwd"U-zGb( NiYۂ1BU.x&az/IUj4Uɭ-%hA39I%f_i\0GN" @*nSBγ}Zy L7:JAzU8qEru~l1%^Л$ 2mz]m$gߏ?zgbpә .@q @,̫ʚ7c<(6U4S5|B5NmBHӂFm;=﨓=>Y/1[!^gAM<:Enlľ)4n47>t r ZNxZ_|*+9j<Ǿv,QqaiJj 51|_􀲄63c[d+%8֭2'}S]ߝVE7gtUˎ¥כ"Ӓd;+ ^d^.8'4_="JP%!?#I]ΉmHYgd"nՂ~'qE `bgP0f&!hV؁Z"+SiGFXsc>5}˻O30^&%🩻(i cwކTFv=3"wWHC47A{S1^OL-#g)!>hEhՌ#^"ˋ:{f0nD%R j;Ԃk%jvG8LP&GV>@ޗaL0jsSD+|E0t  K=%ve+eHFBUd9\L7P}`_ȌRi@"QG2)9tӘj-thRFB=\n}^}?1,(0`rSbaW:ϨhqGrMǟ_uJ ƧDrrKNT+ZftbZ9S(,@́!xj1vPAq]u?D[ln?y FWq /)Hek@41Cw.ve{&ysnC_3l 3_=*ߥʾtd&\ͤm SoPg1"ڳZ@v5k[΍̼'V%, U*IwEO0o͘~;a"X5j؊ H{s)iol N\|~!4nbs;J!3;lU$;kDuqHSkm.ˤLtk``XTB l{+"d*2 hfSMX16_'m09Rw13ئNjC`#7;#ىzIV3$cv߀œp{Z,6t#;"~+KP66T̺4 ~pЧJCu0+6+I1~PҳNǻ D 4oզqhp W1ӯkC I7y'$@7@lhᅮp"kZ4Pxy6ܖj[hRs_o r9#o tr97J$ewS̐K26-m=)Ul`*Y@<gvr8'e;3*D,|RaN ۵pJQrQϞչ7#:;.pإ ^H>ie={uL).̫%T ugt%A;Dy?LCɱPLM«?*IK99l7LC~`>Iw FqQ,ROt-:߲tK}US=F-S ᭱IyXcfN&>_l4Gpd`׏zNd=} Ba ~] &/Nu_4] _F|,a""gA_G몰?c Ȳ6_;_{4Eir+IR9-( c&5)*$ۢ'dJS xp?WTk\FPWב0{NFG(ŤdwA4?p%_ҡQ'ewɳ.G;U݃ ]|If$bd٪"&'ۑd^'tT[Ua~ѮZvkHxg8]1~FUQE$jT9w*?'3Ra]IjLr&NA7)wF^ ?#J_6}D2w36Ok 4h;.?[]9ߎXZ© 6*S8.a\[ch7ɯ `X fy@g# }[Hk:gV~%Ȉsb9!rXKÙ׀rUUU3P#9jxݯe~Xl-uHU9O~𴪁57O!v_G|k͟d 8oE"Yc4e>ydwFv$*)7HrIOv@AZcifDEsBkϱx4`o~0/)gRpQcuIJ\㾑HhDc*chaMu0!S@_qGEHy% ϏFQ5rhѱz M VEjⷓn\, xE9Nn"(j} h'W¨Łas8BIA1 x1D{^Đ8Zݒd32/OK%7`]K;,d1ȻtP/-k앺hu%8#e˸"e:6f/waLAD?SKސI-:dF4aGZZ>-uMa3P0߲xK:B6[n~`1[):mzC{#@a[>*EnB}/}w ʼ 9SP m9?thkQKP6ȳ\23&U2Jqҵ>nx3,g_Pz/wja˛WuCS2% =H\ gYoCBq\?;b$ax5Tۈ`_  Kѫ ]YoHV-dBpE=:˧[*;~EWnȬ"=#0!͐6`'ŨBe;iQBM&8}LO=\+nF@eEV/im—7w] _E"J䡕$UR]3$?Uyo' gm(Sw8.[~p *ujokL#S"X l6Z3M,C#?SNѰMO09o %T|20kG357#I+cZ$pnKU CtP,_wm`Y76w΃O'HŜ(Eh!i%a).BSS5Qӷe>ᒨ1 4/6N"&ތK<`Anwv+XlZ?JsOzw4Ĉ08rc_ 1&k!Ac&]霂H%$jcP 5M*OhyY=!( U3gzp10uՁmWn0nzfK:{5B2j.@$5;.| =ūy݋[!xPE# &L@gAjgMnZȤ%Yi1iS>bwѳtKmG̷wr/'vbg!ND8K;v#_3(755]e|";@x8"Gσe9sƅb\BύY/2xvGE7ޘP Tū `G*mHSd3'_VTz3'rlNE-qd=D5՝0#'W1N[bjUi=Jg3v@01 W m%Q㲮["`k{p=qOrR @QP6t5<As}@^I6Lp" "BW' ݓH1S) ߓ (t@cda)SYdB7n8BYЌNAܕvDw3AWKrXZ}:sjH1g CwҺXl#DZt#czrBA$&RZOvʶFc *%(Ŷ`ق%ލ( ,v":mvX qiYʏc#/yV=,m%gx9E*/hS *֍4c b8|.;e<3ޑoۼeOJ_켞xmXȎ@ت4@qUVxHS :['DP@0J\6 ^MVk`.t~Cg%ytRӦ fU-h jleEGEٽ6RP8f-,FF>c/YeWս(T9͇7lM5Ԑ0ZGT[|`ACBba2SWo(G&uHy3z,ԋwo*qՆ(3ù44W4;6Y7nã÷g+Cz;W1 7Xq, zrG[>~a `7jrLEzMldtɒ N7 "[ra+̬p=5QE!6?ûђJ  $>*07^"PTXզ@|O:IW ]fnQ }+hﶞ0a#a(d31"أ)f?v} ɗEY،`i-]ѮhB:؇SEkr/fuHW65vq2rE4;GM9gDL2Ф<"džة@9=),,Aԫ`k4O¼NOޛCO)zYg69E^~Hс)*F2ɦs`?$ ]DACs ǩ6>/8~L~X>ӊy3RUp)N?@(A)=Ï`nwn^PΉ|/wy oոu>^ЈKXWDuIԆqZ1"y+9(5R-}ŤXq4?ĽpǙ[lҞf19C8Z'bd?iVB3P1Z@i*|&@ԞԐ/<>'.73n6,MmtH`T6%9e<@uj05jC6S46%뵩1<DA/yANSx6{9O23*`|F%:cV[4IK0´1_رVR¨_1wv󕡹.WWH/"CsW:|vj"]qKir省s W#lc/ JxŬul)xED}ZCwK4w^WհB)IՍs~2R-b)mv)-8ncS[q0 m1w)[=> E##,roG+;p3 ܐ3bRӵKb4̃0qY >@4:K2pP{šs_[4Nic0mў;shnMݾR8ai{G E~'ػd35ՊGUg>y-/˱DW7x5U!zƶm蝽k!9Pfsf`{+D7B7n>0xS^!.?Aß&#ejXr"v2ZېՉEU)~6!3_?:j|[V B.LlYAF+ׁ])*CP&5k]o$v{XJT4qNXT%dR±\b#O'i4TY/T)6SSP:Gv=jU<]DjXOPWa C-p#n#ʢ,JU *V=c^6zNwoln7R)š{+O';a o4όz@d\  6x^OoKFnL,ReK9FiDzp?2$ɘ|#p펁3r 㭤 PDO6: :wFwak G$?f|ia+ e曆PV}7/y{]Dє21Palw!.^t> ,,*p7LLoqG"E zovr>k8G,qEzEz@Eʼn}[ؓ9Ι.HɎ#Q߾ym&LXQL3XHcN,{K <{5zz#8A9ơtT 63:`3 $Òӽi=eзXHہ=ıwRؚp}y)k '=iRt:&ϗonO4k<yyƋ5%0v<=DAt'v_bGO4mMUb2],#@.}Ol4FԖ9>&+'[U2) -u/jjDVO'1;YHck_R1 9xo)"kwd~G!|w鸼Iۋ+EáH!V=z7r _r4 3ߖ Ǣ桛b65$~6F$Բ&~+0=qȹy 6t6)ŒT% *-q Y~*hnwۯ욐^ *4ɴٯz G8EBVsK5mAJYؙKp5K.PnSl^1G}ӗwMs >C7m#i^2X^ hˊ&')ǒ]Ql [ Z{%c"[Ɓ/=T`I^,j($ '$sHZ@{h||9k-]9܊ scU\ _6VCWq˹ᄚCUzx]6yh١$i;`Z?Eς^t4 (0^I΂j/٢"PWt"!⹗Ф63 5fyJ}G zţ>e)(Ajd3 #^y]iVy~i) 5 Mnq;{J#h@0V5i{>* V֐X/4F3 0TsUCfz-Y1 LZU:`L={!~p%Eyj1Kרl6'I*$!xZ"-\b4 P%a) ǜ[#%'^nnj%ϻB>cTufd6OETo-J'ú>vWLjHr٪h,©ǖHm+5U6r?.hb٪؞0YGRV)]l=GB3ǎtg'O *i!CK6)(Q@"¶s~O+ ņ2k (?1ݽu|h4C N FZM'PPSB4DwN:3;.GoQs$~奣mx2v@EC™ZIoK 5X vCã j jywb7 cݰAJvflȯ.LT/J5fUՔk{.ZMo\o:ἋUcX-tz/;|]kj *|OLgT#TXD_R@Ebi3q~Iꈘu H9%(D%dOR8(ӓO?7n$45KC?)3,}@@q\=]1~U8j@2zQX!2=?IXm9gY[bL6G,)ԇ~tm ,Pti|%Y\GTpb֎&]ZB[x=HC0̅g}I:{~jה8WTF]}r XiRVg}ӰW$o۞cgi,$ u3Dls9p4FZ Q*1"9ƭ Xh3aџd-5 !L(>aU{Fv[`EOi&)5nڃW_k$Hرg顢)M};ovoAAe]-U2t̽ 3y7RII4l7i]$@ewJGq-4]`O{m˥4-~()_o7 xV}= n*O~z6BC!: >_kt7*b_WˋO 1 "Gxgxi#ѬY#}8޵U_DH_öENF CiӚu*Xb?>A#mNYZx=,7qV~CDXlL}+;kp9׳\a3]a ,~0A)CjmIR 9vC="兀JS߭_[Y^&0U5%hb^.^*@Mfg#r}uo wn|yƠEmYGQ$);;ClX.j􁩴I#Eѵ"P.FfHW9GIriITPٮ?#[Ƌ3և9(78T?HdЂ˼ZMdp)KĴQdC-F~.el NJ_4gjUHE!ݫ'{+P; k5G{^ \q鐣a.l3 \ͥmeu KӸe0+(.vn<;aklzh|jOCJ+H,9_C5P@6ڑA}b dppX} ^_x<d&}OcuٗCjwUk'BSK: |^ˬ*h.D{]YF/RKgG |"C.QQqF,%<0XKU<3i׵N.df aopz25h3A _kV>8 .z8Ά/%{gH̠{TIW5Ud6ݹ\h(O!2⛔Np0mTB$˻i͜iNX fNGtt+I$2nk PrZ0ǜ.M?(lAZ(и/{&ڥ1JqU4.\"{3J31*bfZHdר*kRj=:$.MAd}ළxDkC3nC/4:elGIl'n j;U>;H`=OZ2Ѝf8g)Za#&[|YfUeYaAO(*rx.:Z̚\i曣gH3hCrj`c8K'G)y*ߖh3W:{ NQ{4RQ,NPY1c;qz M'tEg?eF(r F !b Շ ,L;E/FIН@X;DUcz_胛Uǹ\TŬK*PxAYF]{l>yIj2*" `zgh]Awۥ)H\ɕZBe2k%ˈvPD59 Y\`ty^ۼf8uAЫPxVz8E{pok0[j=gTsHި{4J hDq[PM g6HdQqnelj|wc˷="8q \]瞪GR?d|Eƺd0Ttd x4pƣGUk64/dI$jA DJ_IgK~b"\},J( Kt Ї#fDX Wo^1\r~v+d 'rS$h겑Pν2GaAZa~0wYuFG&,;ggycǦQyϋX@᷇)*`eݦxLiu *#g])fYY:*/~C>bXt\P٧!L!KˤBlHlZ E_aGSwdZ}|4OZpomO5\݊J @!zF'0({;T/^QGnsERS8N4ϛƊVM76\V_?_f|.fB")VDY.Z<3*mFI9n]AKx*6)?ڄTM! '#SlFJ.nj!oQyAzm>-Uކ!osˤTvDcϫuFb}1=$Zw!b5?8Ar".~a5ou8guO±OK P9ĦejThh8Xe (J€w{Y1 ywe[r"4.Wm$<5T(2!PSԗ/Q+®:FB5=t ] 8> ;Mf5[uY8ZK?8T퍙I-Ѫ Q;WN- 1ʴlmԌ#- =)j<'WUt.v}Cۤu/#BSɺI}2LW\cě's0ܢBTdL ڹ ꀐWJp~a%K-V(:(M6M62A1ӃFXg:F. WZM^c^ `=Ţ~CQ2#ovtˠ81SJ(I VX$  zRW ΅WQh/jVOh]䰖YG.x'?XqR4gʱ>F'e`ZviԲMSXS7"iqx oiJ#0GjRu\cA{t*ޗhjobҖ6[4Z,7/lgT}+TV>]UU2U\?6> ef^/2IF0j`SDOp/Xe'u:(m,tLfڟ XF}ݷZ;^?J 2իPP[AR7<~ݤ%ܣ6OH?kusM138bjnD9@0ے#yPl*-c9hڮ*`1E+@G\>'԰TC'< t:ǢŝGVwC J~D1MGlV Q'aW J;J_&5P{S׃QA.!āT4. Th/n&@8::6An%;&/vh,ڒzG c|J2\ӺOE`iO!]w%Ne!u)(;ḩCL6h9GQʥ2(k, E4}歇 ʙC] Rufio|c*^]I3lWEw:Hnrx8+]a/Z~0㎙Q(`w@jõ豅@øLC.wb.[Vնk^aM쿭Dq}y5~ih~!N<JMR1P`¤YɡȜ<(GD{vy)(2kS O3ᑶN5hdrKRh` m%gd^/At`*a&ާb=ŇN  (;W3Ng*>] DɅwtfD"PОΓK$ DX!0q'kX/T(F꠫YZ%>[Ftxl/>!X2ŌIQ0}jAaRS󢐮'M􅘘s8X1 `զ}xnp Ɲ3PjaOf`Vxswrs-1?;,2 M ;DDNNkq+ѩ(9CK}= 8o3$,6sK: /3 {u;LGC5J6f(tq՗SY… ?eDU@#S_%^*;eT+{DT@EHj}7@V8fL?I{[@R Rz4sq=YPM9s(S=W ^18x{~9CU}ϳ<\y9Ly+]`ɂZw-$R(BIVX&)dO7)GGEƁGx d[=,T-w\&Αju铘hH>QA• C=,J&`)Kl1i>bu9ls)a3\IhE^l{dwϜap\~& "V?̀MH,`m;C'wBG"IQ, 5Ls{~p3o)LܥQfjCvQb8Lc6OG܄N. Dlt(% q9Pu]3XRh&ZNMԫWo(C5.~ <=aDMFj%ea*f-֝R`XjgC&/s[W<wpAqP(ԸMᩘG^:Jکf<.&݌3$ Q" m4j! LvΠ搘I>>F0FD҅\u}@reZ{B;HT9+n:#j4jJKmӘ c#͑pi U,Ly*!5+ÈB ;Ą @hTi b6*dܾls hڎi n\;Q!) @ L '/#)俯^0]NڅkXJ48դy3Kq;0.=A^xZ;Rp侊 (!ӈ$6CHSC* NcJ<~,PIkM*&roum TS(K*p>+U5E/x$iF1iIr{Ԃ6$ED{y*~o&`8? m.P,i7@9mdo38ݩAMb&]6WܯFL=p=&m`skIPn@auP1ՠB?jƪEwhřNIyɰŧli0sˍ=RaZŚt\q,nR@`l Cys(hLסi@iybY)P-s?yKCd*p`U;t(4ĠGI1EN]>~ZD}D78F%U -/a3f;;KK|"d%L7S!ۡLsչm"}Y"0#0bزЋ׀ª:6y BJlltZDf`әXɈ`g({Ճ#x/CYLאlS"+&roNj:H0;i=!&N33E_jy.ѽ8EX\HUSY&!f4ikE@JӢ"%`6Chh7-+=,K0W;C FAG]e޹]{l k mW@ބ@:+./'%!\V>M`&a@DVvg:fxw?ra%drѺJ t >/pfU~n#H^F3Z\|qﶕG) S@3861% *Fr3cl4݈#mnGFɦLv!77 n{ۂ p'x'@E I-MpV231M8QRIvVs,̩N<'dEDwu?IE<)~ 4_H rȊ<ö736à z'Yae jV; 0nkEc9rS_FCԁ#1c̫~(Ϝvr/=B:2&<'*+Vtp.Co#bu3޺NY9~ 2):܍uo20S(ȧYu+2cXmo\g3d'?hu0ndu3$rTISŀ2m]oQ IHgT^# K\մ N q6KYe@?hбL يL^ 1Gh$<&֖kZA'&H#\U_8n~΄<@[ 7TXtFn>]J 4&V( 2oeEVtS q= O.G=HlA_GM3R:,SUsp0\VNr:'> + ܭ\E9uD1f{`q85n g^4٤,nB[N/s-IrAC1ߍpAb)Wha@SZ O8&*$7OlGdq⇄ mbNu8J{&$IїhjQy$=P39!(W4 dYv"_Ǡ\Gܘ{)dv8R/d{&}^2wnyivϣ fBM4PKc 0p w1fIТG?KK4=%Y6j&@zmb۲GfA]vF r֮mk,ΆEa={=1$\Ff34:SI=Cɭ*ޯWm.~61bY|}рzq^9}~+ԨM1OB[qPd ZM%{V1gҝvE昊<,9ZXž=oXk16a9{7$ZÑKw&"¸]?>=sq>_`8v4sqȳxR;C Y 4(RЕDvଣPj ZJ1Jd 1V*쪞oRE% /^װG/GOŖƴp75>#]DY9iS0 2&L`D|A3Z* tD_5[lĭ7Q97kʬAӊN\ xzs>hI!GnQ^n?:w1ٿ,QLJZ)*%L&C/g)NG.4P}$X >_o;#L.lRZNU\8@>9YAxMO o(z'P"ԊNkC!@FNPOR$ khq́EH q=Z=bbO9N[+3x'sI00Sl8z+ Xxm͓HS^:32:-l;;?1Y0,t$S}]*ׂ娿r|C ^bʒ*ν.V"KuZ*kD*^'G!pGbU>Gԁ$"2ecQ*%)@ϏɀEY>僝k&Cۦ@"ؠ};x5:#Z(LtVn OO~}ޱ9ٓCUE)}"vfy~+M"pJBlRπ֜\wj݇bڙ^ gy0[ *j@E}k6֟O !NHsK|{? f%/nM  =w #_PS8#Q_gDƵνC}5Z+H=Lpߢ7%F-候vF+6Ncɝ[JzjގwiyY\nG.Ru*)3Q:0qE<5NrrA2pϭNXG\iQiPk'c[/E5F=nc),0Aa.1̄eSbhto1[+ҥ><"RͬpO/ߊ'g0P[ (.-C5"O6wrh(Zb~qfN bY_r#^<l~2d6oV| lp%AQ$HbAnt:Bf c,q؋+=.JF<O3}46JH2ltvdnkuxxAMVd h"AAͦtZ0.Wfi1"[oBsWm TV xx51^}nd@ g6VsY)5%_ٔo(丫yI;6KC*uܰV w%ōr$nl.ҶP^TyccYK""(da3Νc/}1ƌF2.̽YN.fzmVN~O~$qK8!G?rxa_G<8COI0%By!aJƜATU@9\@ztFIVT`iH½k_I?}i'/̉2vt)0Mƻf2){\vb95,ff ችnpٛ&8`Pt]C@`ɫL--՘cR"AϏ^yh!`܅h[wۦ{y58,Y <:\Uk,/qgR}^2N1n~ڼ7~Z+#ݸ8pHFZ 1[i%yl_7-;:Dz8pd0C^l_4!SLwcSW?Յ+]樘;kH(렾~[7 V(PS<#_ 0e:L}a(Y}V.!Epz`j@}aX})6Ӂ Gh.cks± -`/\2B4}enS4o{Ȇ9Y6f|2۾E^XSB_i!(B,*J  S<0K b*uq҃TG7Y"RR/%)8|#<|~:ӫ=o%w"vx?u=#`\P1Ą^3#V-{D5Pw~_ 1s7X}.qt-WB'ȘS&ByCHV @}hbyb}c@ &cwi(޸Fݖʖ -G @EJ%Gy=ۻ-!8:24@oO DÑњvh5hZsv6WsCʂ[3 [յGC`I~b)d c@=0r,~5.q !W*^%Qeӕv`R캫'z$; 1' ʳ%%` K8#b࿐. kTXR[ QWPJ<ΞF7̙ B ƗTm.2 ̪k-LIQ [^e2fe"^˪Guݪ ,68 J|9Jpl?*iݟ06d>0sUGP-Akr察,C,<.GZ( 7,K& Gx:ѼYVƞ"bðI벮pۘ(Pv%!1 U/Ϙ`]PVm莕JZ}*(C!w]̡)̃Տpzj[>8uԈ6`sF#?>{꼂TNY嚂;ӥg2u;ۃ6XzZ7w3Mgr^H@0{7=w~AC;Rfk[H 9 V$xe4!sZ=@?`r!]I{L^vkjL0@\;v >b& #6UGfP(Bim'N(:M:j27+R:j8ŽPKU?LjqeȈ^3ow$2N-؜R$:${,T꺜 mFmǼe޸^>c$-P) vIQk7Ӎ!"5_=]Yʻ[Xp٨,Ʒ_A-洵K[1Q!tՁ7_3xԆ[c榢Aj sd2Ns{|)ؘaVLpa26 $Y?~F,qoܚ77O53uޏ1١DH.AZUV5MY >3_f=.:=ݙ@f30`z.177yYtY( `YmTU[X! *1T3(1eъw.[ 2Klpa:h!36I݄<DÈk` ONayr͔M?mD\$*.j9oS؍&y̏&hobzP߅zf5G#Ah gEVh/0ˎj帪 UĔ.^&ʆ;amy[-}mWFH}d2 ?\vrwU[S%NW0 b<8m<ŝ-n!s\oa$. -!Bxn:#ڛaP~r(k {%UKw0gFs)kSյ?#bOztL;Ju11z?v;V DVX~/-L aJ\X cP Ao%Un@E,+k$;):+Iʣ5DqN+XI '6m=V ʨa;!D1 [hR Oڥ / dWǎEm̒ 0 =4_P[­˵D@ԔF8 4MrΩa &+2D̒S #Da!bEg<Ώ0yE%fi^& >J51w,А })vBU;:V:` 9:U\8!8Aiw)U1 2;>[؏sV!neUeCg<V.R8qYX:vheJ;tuBD|zϼ*EΕ=CCNRFnw mh)siwˢuC_h3]lW]g:)KyDL+W^ף[< OJOW5StxqfBBA79sհG\mL銖R?/7_'HU)V:m9 ̀ŏdpEΕn5G}IY]NC~ YXzTǣ[nB/i0F kk'MN?um"o ve*I8l$,-f?x-rpO)`p1׹ibxQC(fX cq*fU oʬŒ",)eNTL0ȺƗz_kaH\}5dܪVޠAz&iᄚݨ"QAћ&m.0` _'vckd kD>L[k/FrȒ_ \ 8@za ت= f S7>7v+" ?&MgK C+=[WNaӍ ]Bm2gt|VfN**!SOz(9|'\ݝ?&# NoF;n3Z;iV]MA]5App49^Gkw"ƍ e4#5.9?~aY5⾳4ap93bN'Tybi/ Iir fZ wnNhef0ڒt7%㻛π&2Zł5TD/kа ݷ`YqQ+ⅼ<3J.L,!p?UZ#&"8:?elK O6eRb[$/?[H'~Ksd}VlcIڰöpDsTżٽWByp0%@ l;`4ݼ<7| ?{TR>P7ДQIJ.0^FMZw:ܒ9hSVtLiPr|#:Zw|.b],V\cԦK2FNY4 2vw(8L@*yp+Csf }J$BCQJO]L`4EF uemf~>fw(3C0'}U$*{{k8o-\Ȼ3 *$xE~ݿA%X {vT0 jNGb`}}I* Zv*,V+/M`z8HSh<™7~<x,$.#,N?7VKq^NDž=űjnai~S[GQy#ɦ%R={5Dk'p P=܆KEwT0k8eteF.ې\@<[ _d|\fo>W-FBYڧ۫o%;FUqFUX2K˧/qF7sYF )$:С>nol (9|,`oPo \߭04[& Nw1~gRdelbf=y<{=MZ{眻U=SsAiX̟^5Rm]6\;508hgyd`R}COR܏ڨ[`J>J{zl吙 "z`Γ.5n;V#Ö[VRVF%fAJ]Ԓal?f_22?$e-@]3l$w?S[h,X%kaķTWi#NUqwwo`ܳ4☁OGؐc_@ک6@j.oq5tT"u&}p&ߨy\{vs!n/CcJj[m"9"j'(L &N0Ι': A6&JkҪTxkj3.!ʲ}ќ=xVXRCy=J[Ԙoy#g*S"lk@e/gKm|;z2pWąsWy-P.H`AL,ܒ +P%54KYS$=0 AMqF@eZF2(~i2Ө%6E6}ҀH&΋Zz 6Q[ yzFsҤ-7B%K.2̥`A8`Ųd*5w3/ 2;%T=su ?3N'1s~5bb@^~*~JwjS1\/$(h&MA-'*K3"@gR릫s*mC-[\~hO9F=\Ʌy~-z18lPhaට<6Z92wW8G7} ^bjȌ| ~0{Y=rl^ T`'mGAV;dBLږ.Aw  Wf{n]o*F`4EJR?tIRרyЗ,zjPo_b!ڣ=JӦ}ewB}!% sq+ ]xƴH\Aޑ%q IU LofJ5ԭ̬5oYPG>E`?I/cJ?z W<'^q;2J$> a-|LR-ڂҤvtrH4c1@$ l`t6;F!}~'KHYu?T1:` p*)&0ɱJENݎY{[3Zp[\/ԹctM x8MS$"4J`N^NWp[&7xZG}cϊIڏ[Qe,F#}ff-Q 8v4Kְ4Qm3έTpY$:'ln尰' S})0q^XKs$S+7ݝ pm^EFi;y&_r:H311JڎP\>($͟lSRD_,yW)& ],Q/%3[()V D'kD #w7 A#P勌[ CGciѽ(Pr6g^ q&_p Jb6o߼#o"3BO nM؎(9H\Fe{ $ }a I)Affy0'ot9}?OvvQπޕ-w1AĘǏFH2˚{ Kb"ߤV\{zdlޞ@ ]W\.iْc~2 H3-oYSt&^%J%ed4Vpo$z3֎$)WO_/9x U/KтkѰ_e+Ti\m [ FXx7nZ"L!3ZVcGR$Si7J7̋ }m/H 5I7%@?JOS[귘|Yʛ5 ?%/C~cG0=to#0A'Yj$x\y>;X2,]ki/PO<){8uxD}]1kWul ȝKU!? 15$UZWKq<qn s}pM$wI`(S֗A ާH:˨u8G\&dId  5Ȋε&VsMuNK$>Βz,9H].v^=1&H Cjc*kw˱fTO1Ijw2+JRfoi¹9B6ysW3^ĉG'cWeE?Ỵ^rW7A7tۖ&ުpaƂ\~R. D+LjQYumQ x* Q_ /jOVPVv[ȽYxIfKEMH^ /!\~Win}\ys$%ێ"…ڐ4#Ig'.Hⴕ-9|硑Om8!Ag4ƵH1`7`˄<\g!ۅ6ࣵΕ3Exn}L:$Mg- >=CAh@L ̥v`{wYo]h!-$+8D8ïn܍tE֚z*Կ81 :\;sۯham3kwK3et(O `K ))z Un^AB!.#U\jgQr%Ta1c;xWbcg%E]t<2 Q|8Y׺ ȅ||.>;g[i$xۆ+Xבf+A'p d>lz%h5VZBt:+#*syJ&,FO;]pAU ^?Zrw65|ר9"@~2C9SzagzZw)ꮝn$0R3slf"S9OL*p _δt\ÀoKRay^H9% =]nnH'J{t{Ji}~ǣ1v_k:![-*YG r6Mxh: ;'q$} +=#&o gF?F"Y.:+*RT[t*p鈔s gfS'l1M{ϥwKR5K5[`Def?B]⧚@Sz$oH , Qc`m9|Z!=QR$@ Κ Xr&PmRY=1=C6!_iqJ>n. }-B3B@=\MÕ6? A[@AU~tT,bl))& e}^d]=E*L):_ pp74vrsȌB\^)\тJFβFdǺm@SNR brG3<3^ Hor=9-nV''#C 3b'q,cBJ*0B!F1S AN[+R+[3~*R%W\XȆ&z^j?v'926C6,0h*A ̨3-l\^Hl'4IhyWӯI0zċ-(SJ9{lb!ɇ)4/wPmݲu"kpQ].%}ʞGe;hΎ49}e헨ARO{WN&a[Y .?F䃾-EVsf>\6u9Kj3ZIZ20 ʇB'r(Ѿ5#rȞ]6m@AE&;7(I S ͊tsTڱY`C>d; RlE^LT3H'RP51T-IeŬ/ @{~,`9G0$ă<$ֺkd/UF?Qʼnuu=)sHtvw7I"Z=rԆ1Z XfVl8 *ZY<qð4,j 1Js3G|}2ƦlLB W3vQkߚD,V ~RV&V[W~zf\< {w1]i5!gnۚYD_nB|ݘzT ֱhX'/9f"L X1|4[Hg(zm@`PÅ9Qpfh`-7`vcTLAZz{M`ٜ4낳jqTSsBp0oo"L"@dH:%YYHa QNwNČ@3ZYf3`Jvq-<`q̯m+ч Ci0ٺVt꩏m: |JNH=4&;S4W̎i<ߎV[d%"3hO BhXVy΅E%fMw-c~:4ZR1ǽc'T>nSS=8ƚPkF_κg;rꕁޣ,q\i,dfgys,Y8EV&-T|eΉgyM 菂L 7޹3={f%uIRS=:9 G/-> Hy<ܱ\- 9!nL.y UC>#1,;| Zo9jQƲGHKu5 rN'h+*w+% @] 2P&u>#ݤ@53ں!G<4Z$ pض [[W^~q:֭^>! W8M{/F]:,+&[T~.3 ]KH4ޕX1h}3Bg ѫaxcGhd#PMŖ(%@҇4Vլlw's@ *cꍋh"k!≢+Gn^Dy셪* 3l@VUs): YHSbd2Z=|?t?8Ԋ\m]Q/Jte]n`(3K)%d>Kjt9֒Y(L |^c/ f܂QFMeuQ޻ͪF l 9=dІ$r~L{LyL::JWn`alpz&lWP`*Ǫ6}/_t$VKڷ3ob#.L| A&{yv%d\ޕy煡!E~6BpZ STgwe6E1ZM+40 4qlɔޜSk$ϰ MGUGzzZP);QZ#D0A% <2kMsNqo-vCZ/+3[7_awG>ֈ&vOJrRVBCLLs8Г۽Қ X"QhpG'"{06tt|~bg# E#SvV#;_!¾E&: Kfpv EuI19mh\tT¦ތaw2S]t1Pq ~UQF]ɖ3T}T#ESZ`&ZA:*ֱIG툗N!Э?fC.preP{4 6đ㿞<=g5`ګW8E˲#+aw|:qsVcE<ԍ[No7pe(\M$1Qcdߞ ZސtkRNVsl"L/ pNҷX55a ֞?6#TǸ6P/cLA{<)̷J*؛(.u95l M6a]Մ_GgK+rsYhgԉ|8G~X1x >'d§0^?AJcj$'̱Ih8]:^H|..s('w_JdB"kCN=Al/$X(*<~#fh8).] ͳܜ0<_1vfk $%_||@n놟Fi&Qϊ*|0ՄMH10N MhJ gFtzlTg"tEcwlom[ϧcf=˰j}4ͮC^w8|[OZI:ࢊ^vYd̢jP[Kt!pKEtCۢpNmIn|w%K9 z͚~6GRJb  M >J:N$2 QORO&~l㞗4Q _q3w jŗ۹x,Qoz]P(C8i"jNg;I\f*I:\1zk4z6C,JGLN bI&mCc!°=Ӆo·[6"k Jr;MNy; @ڀ"ʶdehȹ]A ^iw}%“Ԏ׊% Lšq;lc忨8wGRY]|f>9-lmE ɅƼGra xPiokZZl|cwV(ʮ{ hp Oq ?Qtux:DiaSc [Hw9u .5$]I5wUsUHX;f\oxVͦ[׉w۬k+qOG/_lB"'f v_,Kz":nv}^]k玅J;T+tA\~.C4`}0(fSS~&I.<6flqo8,WdI]sC%X~fRH^]E;QT0jۺ (`k PlH֢+ :z%t:*q/뙿o<nO[a톛gyq+KyDCzw*j@>ܔg崴V>I5#%:15 V; IΠ#6VIA{%\9dBOlA<(ɗƷfR[Naгj xTwV  >*[[Q4PǾ(>b=r4H,޿u&0HjD"V뮖Vfd-vbCۈKk-j'T˴gnXg8 зf-'2n_pahh{E j.6 i$z#כ[BL-f$ ^ 9Ms> b+hg VK=;TP;T0o>>ۙQ@#΍hgeՈ0`_ S7pTb&0Hde%s:t3ҖH8 ';8;E9 9nFZz5JfdGf0%IZ:'ZqI٩Fq>x\=dV1Mq*fEɜuM^6J+#E4lPrT]{%7C#$0X1RD/=~mx狟t0q!%:A] ѲD[*.e}Zj88ޯV' uUvNVeP)&j.}iRv(!ҕ!8v׹{].6zOcFvZ{OA\+Id# H3OIaFA>2[FBV b9{!u%3!vz!l~zh+yЙE %W5ߨ؎hFy*bPԄ,*|(npOc^Z*R\o/2ga" r}2;;N~C 6缼V4rEʮNlDz(?{dp`7JJs/;JA?E%|ôk/hDIF=IÐo 6=NYt?A)rxR3f-8uȒ Ar6%ƥ!ݔV.:}F槀MyQtvէ/=vt/@+Ύ_Yا#+ Za7{B^!th{Vu$73H\ɆXpG3 Ykk h᧷ՉLp[Npt?|! l KEx .l_>ZW&o*<Eʆf5:|c)7݀kPBouQo?hNP1\bɀ,/ƁΊB\.DrR4*%>*QXN4x/w9ɂg9S̽k5|_gI7g`U%UV\2 AF}+);9 3#zxqA'd&?:g|Ѭݲ-FŒ7wɣV?b5Ѝ/>_Һ-Z-Gv`!d=$[!PB2\-t%ݜȄb.@ ׳^bae]4L} ۰zR!CAI 5/4t,>X:YݑydO ^2?gz H'`0$T~V@Mҳ &@j YQ1^x44Qgf7O:ag"Z ڈ.;J䦵۰G<$FȽ ]NΚ LD2VneJ("sȰN[JgTm<9:L'Hżh X2Gj1XL@ 0ؽG{˗YMᔡVEO֙Ҋy%:'\yDdS4=!8[ hn9C\9 .kW do M:A:A@9G;C luxt'Pkx2dHfQvdY/і^3kMĭ1&5Qؖ5Q6>├H9"{Ff?tNyхs;'y6O'^H.':WQ_LNT.9s4A.}a'%l@]1 E@j$@T6\˭?ĆX7b=|62Ծ8%!?1^V*4|ȎBO}LNk}/3s2jnQq؝Z!{AP%+ȗY8QO!j+YҺ 28: |E5NkяfQi8$cHcNf!vsH⏥sP1u8sZax _/mYq5nO1&ɇ$]}*D$'oNaD(lTMq+sRs8Uy}vZ.?DZzF4Hmdڒ]%}?SzN َ_Jz}N6bDy޺vO :oU*9ϒ%fCQ̃0]'X|jL8pJ* 9lC,N1$ڢG44jn/b6,tyf&WlE'w=H$#1@Ұ7{9?Bj7BO(-2:lAxZ7H"(ZݳE s M@|[#Il}tC-?-B2dJR8վRI`|H <M*,fkhN[b'`í15p}483z @b䤜@gs5m>\U)$~d{9Ly{B IRtsefў"~ξìiM.4Q)bގ_i|IЯD yVg_È/zvn$ \RmSaд= +lob\4kwOI3p&3%(kڬӏ!A^tEd[5O~0vh3gLXmL\ ѡ'BpU< eg OvdSͨВRtCmrexQA5\pK{뮀 ǶmM?úHb|oWVQF?FNԑu6 MwW6hjk84Q ؂6Ї!ђ2{%ˎ 0K&gTXo\͖UId(oA B Ov5\0I"2`UGCI+kyL%KKCP;XO:ՊflZ͍ [5F%!Aa撽@<9sERR2jWHZbV>42ʘ>z]NJzۄ+g}=W a嬩:yf*MiuAzʶ\߅ xi:r`jC 睬}]x7ǾF19n PڟӭAWu>ur?vk"p4 \yL|rjmffn|&+TєU%(yB~KeTXBc="A[֨*rS ~98 t6ՓPf .@ܢ5Vkf;UȽ,[B 6vo9\;'*~J`w /9F"C|, r  _3<Y*#$ݎ=cܽ8}MW}< a"L>a/Ш-,j&Ś9z{|*~$OWhf}J1ፅeD /h w>rIU{YjmT(B U^tg˭k|ӏ`;}aWzZbAs rBy'r84 t wlfM uxIrܾvB\4o9:M[})76leZXD׬[Г!7~U/WGыɦ>h9nKC4)|/[".Ep=FLG e -o1#U*%7ˇJ{94V.!E1)ŋ8IZ2}e*_'WFqD-eN#?Lٔ]_\r'ѐPX2J A1ѳ0?VNK%ԓrM0‹t59i:IdfF 6 mME2e͒-p~q,ZAᮥo꼺7n9 &-n& rD1i̔!I&jxvu|?%BUl CU}-O*y"FNH>fp<"j >hh?+i]5)kSC1{߳AK! pio;r!P EC.P1AN豓`J)fDZ4vH{>ߺ#ɻ:'5MwlȘ0}>̳Hͮ~G0 :yX|4p'.cou^ Pdه]DOeٯHݔ REV9EOdDUՙ"R@X_gLͳ]*.B}L $ @oR}Fs%͐YBB7emvgxp$L O$ %`S4Ӟ2H{oB›z|\a32żۥSޢʑP4$횅&v'>;Չ.lm*"·9HzN-\9ZOhi+ߤ aZBo *T"/ݜLMY7k=дi'@hk;.m1ҩsqOM?25аf/~5X< D@Ov!tʼG 1_T!Q̚w?+L;ґ@3u XkxL*[̼~vyt$>s:sr Hu^ [??"%cmbrXmywMbLB6[@@n񩞚D9S$8 !`̬N VO,"=?^sSz =ue-;+u+A썱l l̛&N?g=WI6ĻVB0`!U,<"RSz[Ts_a@VFTfjiQ}f6&UQ)Ul@.Y͝`'i%[.~UgXՎGH QtG=l͑t|r1m2T\8s~n)nUoC?${A{5S ~*XoDIm [fl}11@O+{ 4-pwrx *˫*ebE W?Pk,-*AKfIRh?n@xiHfueRmRm{̆IA^{~J!# L#iT}6V9#%r?.󼴱6J߷¹<9ԻȕXJL *"-MYb"KF?a*Q@eTn\'??q h ?9Lpm4x(/DŻ*u9FA m! EXZ]+-FD;cs|WCzSn|KAO0T 4fW9Aʻ3 ጶ~0 "|o_f$tqŨ]!KWeH?7Uh,9b%gm("RjW#/~Ψ!48ԩhs=z?<)EA;q8bXNj͒7.;x_J>4vZc?0RJm&Өvx%;{gV V1T<Z1u .SF)|f @:658[Bp]lZB`VK`z!qVnL/ԉerunUsf$ ˤ[ j3fbu'ZRSH5$EtgCO> <%'LUJK⺆?){ X Y8v|}TkO!5/ P$ʏ"3G, 3^8٘L&pp0Hv و |Pw_u) -L jMKPH&ۑs.sif`NR\ i$EMf`]Qe*e2u xlVx_Q,:,yx| >CgZ1m@!YN?#7(&<,eԩζc"M7h+O8yr 4Ӣz̦`øz)*yi4`t]\BXJࠃښؑW' ([?(=x)E7;5h.l )#*-UYsĝ9`K?f0pOu+,BCuY >,%X{,8xZS 9dNjrZs8LAiS}- &iwAl,@&ߝ`Pƌ@3"BC)rOJbdg(+"ɞPYAYdUԉa|$z'Ofо)*åa&GaMpRf|WId/1 \6ƽltQEU9t)< ޓ~My/p\F]i~nvVAy >9M/mo nR@51z=Yt^DGCY`ʼns\ggZ_M5* cGHPb02+b=XTjX $ }bN:dh] MXp5 )8Bx 8"VN昉0sjb5-swV-<8`{'qwq{ [EyDB}bbl<_}后fv3îz iJ4bǵRy7XZȵ*yhP)I)MX Z[4Ήєc?)mUWOwBoސK!\)U~,cͼG{1]O ZJ z!ؤ\ǿ $Ț^EDhh&;`ng]X&eZC8%U׬Ԫ<ֵ^fZ5CQc?gh|Mk89@Kx^HFE.RfےR&9 vyLA{5~d[;mH1G?GxÒI=`gfc?jHhE8 v2 R؀3 ci4'("B+M CxoQŜͫ ǚ @ıI^[Rrn=!*k hp8N:5zAB$iZVc|ϛ8~O'_#v|fjv}y1܄U% QO Q̒*/ H-vW2L\Fngg?rR(w4ZEk {ӟ"j߬T=~ЙϒRєtm]Lb>Dl6T #*Ftbڃds8޹%zkvBJJT:JsX;c#dQ@CqvnGrS5qd.$G]LʉςK#uM(sޘ)C%g;d+507K[. d 9&HLATo>CRL)RtNj*' VT/?:Ppm0>M豈 /zW+H WE+kujm.R8[MkϺL}-AwfA .OƄacX-fZ_]9#^E>)ç&`N*UH?x4 !U+"WVp[Í5MkgK̄1 Y(Ad'Gh_)+~kߟA% DYU8F_):,܌l!IUs6Fn,~Xk,C7,YΤza&uէWmʦ@aZ7&Y{E%lj j8Vz Ԕ"/aGH;Xiϟr`<|5ܭ.COQxU$%_fB@)B*T4J ;kU *E\Gd=AN;uRWoQ;XwoD& CCJxp.'[{Ap4K3pbfbu;'ub6 V n~% Xt\#\Z2L\Anw5rdEWA>' ZMPaÐIv?GjNWḾvJ_ BEBUC|:(e.eҖz\g9-F䏍[Mr&uDR9;v6&_g:Ї£E"η& >  >#VF-4. \ƛ7oTfY?/]oقϪfaAѶ-%.겂Y<3CŇ/s^W0'F)rsT:*(Ӣ>q]T+be_)&_qhSJ. UX sjәMv^N=S4nD_Jw!Ϊ8,|Ʀl 1(D#*@}2 ,9MLx*D\oKP9ElhM" "WaJ)t~LIЅ0k|sx:خj'/N˽Ø@`Һ."fIuYZ+!Hۺ{N*,mɹѕ@\=R.t L9ą]?,CDZ(M=F7Ո4%*>b:wPc VbCzXsrKkoJUMb.LlI[w{R`@`H9p3UG]xM8 X ^3[2mnFGlZL ,rpaDJ;O–wh*v5|%oi>A,G [1S;mQ3J~1ޣKw <= 5 ܂W%AHu7Dshfa~/YImBdΠ ~ȃ';}DW` Je%yޢ+7 b7?m :gywc7b:{xB˘BØy _Hiuvth j.Ȋ;BwWdԞjyבZOևm! %܀.ςG{Ds.+۩= g3EfYu>0ďqj坁NE95߻[E' M2%Xʺc/ 1۱'n=}`ې 'nB'1qA}ŴHiEѩD kQվt8'Yv@ɻƵ=y+Ht/m cGjZ57d8 ¼7<8f1_IH,ٹ qZ^Q2;S{ c2 0!ۏcٍ~`4Ԭ, kzY< qi4j jde/`Iu <ҳF)lG+ҏ61̢ }FPU+ ﻥim6_mư_b T di6;͌v¤zdyyPcET ƨ+0yx֪GW[fGMʬ`G{o4qpa)ѣ<:QWٱ% G@,XQeEU<Ԍg/r?.ӏ a& @Ic~!s6 K0E3oT=rFujڕM{Ze=  )Tv:;fޒ#3@o: 5,օ;Md<(.(ޗl&~'Ur2űwtz]e`OClw~MIJ&H0i+P3N=?ѵ S<֜\(ZD| Q qA/@lܠW0aQX{܉KBfz^YjB)^5z!)=Lth`19ȢR3P[l,R{rbPgL\x72K:qzr9w?x*9v}ԝ]8 I]8mHH3xz[xCAnl&l$/yG*q0].)hIќd`l0NwAn#xqdO5`d %2|r}4K&0cX$4K90>`>C ut`A 1C;\X *(2FL5Gй+O?̩K a)@n:yBWDT_#uF﹗I&q455rb_|9p-CM 4?K PXev "Ź #e*D  GƠ/{Y NC-|M<3~k?:KC~DyFtն;۠U\\Ta&JPИmTcηJ0DktaT3Ȱo"  kffR_!wJ+gx^~Tdp+QOt+DN_4WqhU z%PT#'V9j6&BH{lL7yHL@ҚTîjph6/d?YbR8v 8Ky`yS`[EݼL䍱@vQ|n ,psdAW7.i.j]}.=pRW0:Q>8 )h6 ҔjBf ɚ\ ʦVP& |PGj2$Q}DHԒx^ _$ۭc%gU{+) {xwu $ËN}K$Pj#hMIj2ZnC%i#%¿ዋen =~k YWPEnNM#O46WeAGt7SjJD }QE%WT_:~uׂd wUݡWtUI +e|(~VcL% Tf\ i+lL 𞔲T\ KD F/B:`0WfXɯ$n_^.8Bu+^ <@! L:e} p7ͳ"$'  cʸÚ{cC.&q,922쎄Z:-mg. T)S(gQt^EћYT-)R0"NP4* vW׷\cUc4hk:'`DDSuԊMUp 0ZE\޽&h7yw@bZ:UNHB ]mQ<f :gNp3#B\Hzk4{al-$뢎p.@k7ё% PuB4oZc/+_*5آ}b .#&Y&j(:sd_e2qNZp\СTd/(rzAL-qbFX+1I] 6H 5L&UuEqFqsZ8Gfk>?yE%Æ!fM76AXͥf$ʼjEJ2^73ƨJ%ܔ8`,zMHJPfJo3DhQgoIWBac>7ZXwdz 'oG J3؀6F:cxqBVh4uT\췅z1 d *,4r2ڃ?pSYսCKAxI\P 'GIlJSD !]r1e<{M"ػX'U(kYsPl+`N N) 2`S1 WJ<_5Zm|ąѭir(E !^/UMt8ʖN;?Hv:[ 3O\ yʳHZ͞ʨODǸ`tiޮ8~p3ԺתHAQ #YO܁Xת%-1U>GzBJ.p7j v;ZG8NAF&-_/ү_Ab>ʳ<7"s_+.YHX`:8_!m: wve#e†逰'*F3LHrfEȌ͒m4@u>83f8vFfPdVT7GW?ʝӥz5BZG_jo^[zi#i29b3e2"CU9}_F ôލ98Aٗ4 ũ=dknק# K|V_96x#!HAS&Ve Vu<@- nI^Tl@גPJh|3Cs,bɋ>¬-Z6m* p}_a#D߫,T&nĚ(!`Q2h$ZB$罥(CrʟK0Al601S%m}S{kJYu\QSn"rF1;͕2CKuB0txZ8ת lv?U:a LS2]n_.%T=@U&6Wff&b$M,nKv_:;[  Cm^Cr|USrd#W/?m 1N񇈧7fʴP0@_n F$*"~U&-4[oYjX- ybDQ(v]@[%J @).E G#d偐wjw6mN al Fl H#دZ#؊% 8< fvu.k"Z#͑~J/)zd_ ]<'#u^TA B 6^Q'ӄ" .!ҥNhаu' #=n=K>y=I+f2srw }+,Rx7OZg.CNaX? q R`ӂh°,y2NHmx{8x" E!fڂ^zGx;'$v!Wdc֠gJ+ d(UӢAT;ljl݆N.\cpGzE]|v)pUEZ I5$'R>+`2Rj , iV1YCnM]W/OQkr9#<~:,Ǫ4C)X5ʵa_pV/*}[Y%j~c@<~&i5Nv#_1H)"0KC t৹J9.p0F<z@5݂9u-2U0 %7zjı.pm85Qm:SABZ{C '))", 2! Ey|Gd`T!TM2q~ۏqfq:uq28'ڨT_]&/]!x=>i}mK2"#PT!X)5!V67[]Sf}v!m E4DS\<';c,K0X8vQ891G5 w ^!@Zu9ݟ4c}FH8 R|֞-4i}Y+L#k\gD56_S#7.pX֣&1 }3!{xl9{7('*.:$j:>+ߍF岮e>%qō ̒QYHnz|1iF}>}CU9>~1+/%7fq\e ;r+6)RAt*DDɒŐ)@ޛB>=mG* $?nu^M0"`H9߯')zueZ݃j0xy#7u!c#w ԤUǛFa;2W:\f GL+,jH*c- 粣J<#P#e?&Ϣ |q8@K-35\D͡Okw}kJ泪 훂R+~=,.)]Բcj'W\ ӚA.[]`GEx9" eUn>+/'ֆ{1`f&}?)WiN䕋l10{2D21EZ^\_W&f#EqB_T@ ۉ9rA ibPJEDe; CIр! a?[J4ڑ% idwؙ"r{Rbb `Dc y4sKk|"h7U),t_FæwnƼ.!/俫HsS~ϙUN-cֺ:/(Ƞr{ٖCW.U CL" VjΈ~REC90U^S݊g˟&CRCnjz/&[p]RBg1 Cgɥ`"( -B32G&9ncym텣wPQs}cay Wgii90~B&| C8h \}+qCpK b/8{2ژ C/5(mT$D䀎`+ F9:֪5[=KuۺYbwGSwyW!VlVb՚o>5;1r=i%~LN=-IB2;5})5;.lUxi3 \R@so,u牘 E,އ9! e3”) EѮK.C؛,붥݋ g@q fJ͝#`vl=j_H}.W`ExD4&UĀQF(ybUS5w!fWNf>^(g bY o=\T :O;o-{E.l%6."{,Т.`l`%X|Ttj Mh~ƚޤ~Oz&nT"OuM@/*e #a64 4r)t\@ Gwl*gJ%Jϕ0}4_xՅk_FAuצ_ [;klG5RkFFDe 8Y'zpEa4OҞϹS::+͒WiC q%T5+Zzfk- ӨDÜeRψEK!nQ6+OؖʄOCFͽW;Q< +o 866/ioόXK~HRJh{ֻ K@z[7 0~3kDDnd`IR_;+$~QI{[=N\xyaaTU}n׾x䨳‡@/#.+3~KC `s \`7a XPrZ;#h2{-ii]R"YRJX3 y Jkg NmN^ kG=ݾ?cH;˘ MdI}^K =x"4"d!Y^\?>N[m#l XZD^ 8u0M>++&`cyH(K6JЏ|@M M`ClkpZ|n88N.4~Ozk!L<334a'cVSd(z;"P <|ak6Z;ty !,%)Й}ƞqbEr虣āPjB+zq Ukf[yP (i(R]2b+})h:szik5vS)ձ{|^]x* 8-UR,ӻ=wEmR _ܓ10!gNא Vڍ` 촊,~jUxpno)@je!ųZޛ).^ w"E.'fҏ;bscPJv30]oHGzBfU5g~d6@;L6#se5G;4BI{2[`7tSLQΕ;┲p]bb1NT蕋K0,UѲ:AMOZv-L"}Y;zZL I]bk4)ָP.ΦZ\)ς }{ېD!,Ƞ>+gi}'SOte޳,EFUM6[uD8&[j5tKĈg'oO6xJF!m)/ KE/dhx|>6;cCRDX#~ٔ,|#4|!g?(<ء}>FSKzxX#4J"JtU$ RZ̿*WZnN d,]ot`ʉPE G9F(Ȣ@(BգoRG䜛<E\yȜ2f_8/3cR_po,}X:%AU za __Ȳ*j0 x_D=Sd0nTnAUq1#v[U5@rZl>#'ĺw{Cc-aŘrL,Ѳ$6|z}!!dw0Te`Lδ:R=4BxCuN9?ml%+f񯭙ۛ.cu1W=$L7} _ċ)* gjrf 05?mY :kWn'߉WBlt|!hw˧vHt(5z ;|:E,uWqx8xR ?`,ez|aC snʻ6tsXU^,o$H n[fjYLzѥZ. Fldm~d*(4?4gfitu& 49ۿ-:8!l~&lhܬ{ƴ3-~[πQ#X魲їҙ(>fF[=zȔ{h5;?L`dK]+K+i!i?B^;ސ*)G3 #Vzc|^f_Ƽy}%;]IL~nXINbJ文h"4ڌHOȊk:twd' $ /jcT Ah,,6N;o.l*I3J>nG2?y{\End'7]+Ob< _UmtNh}"ێuTP0 D{ɚFnh+ƛz>]+hIUo8Q Ԛ{4d0=Xc!߷ik}q5yKN7߶FjHe(z;oeʱ> v1~@hsԻg;DWVopⱔ"\#$;iQ|֡t_m?2!1m  Jq8չYh e%09l4"3}ԋORF;RɗIuk0 Dwio.NCYE4@v"E^A/;$vɷ*o"bł'(o\/IcΒtT3(xf ya}6?i,|: TJ5Ɓ X,PuGW:PǍ˔K3S.cì$Hg^2t+F<'h& "Ϊa :têxB9 +ĨZvgok1? aԀwiq95;~sta6<{#ɲL9w*3%4^9EcD(h+.cSic24!1|Ċ%Ʃޜg'q3՚˯Uo*m?)^_dH&<дi7 _Q{ "d„N $֙݊MF:H !4?K<Ȃk\h{==K?TMF]$l2\_ۚ*s+ {`gd 'u42w?MLꭎNJIS9 >JERȍb>;Fp;!^e=8:u [-(y .ڸx+S0Χաs<,)kn ŷg a*noW4_Rl>2`ƴ#Yc"|M&=i!2>8h9Rr1Y%^BMƏoWoRڠ}Nm51^b}̾ H 3 ek4ޅͨF,0B֋/>T&W^+CzZ y>z4MYB@L>JXT|{&Ȥ Џa]\R,CʕUTUWV_-¤8]:4=]ءe6xy\\8I[ Py)f@RNSE'4o.OpYL㷄/)K,TgPi ~N.'VnY |{Wf5Gyض|8:k*#`)V?(%ûWOO%xH\%-W־zt:#룵cc"x8fQ.oHOpd_3Xԏ+Ý B kG=ĔM՛2Ki-kl8ĪܲO ƪVq.Ӽ^&ޮ De *cEN6ͬMBbWy$#]q.,Xyz2Ɍ -PcF[75)7BAlzK&b"{@V)J-_QDNB =FZ:Ƒ̇ʬVH^rf' ҥR#vR:QMS#GBwY=!u{ړb*EUê(nVT#.#?Ҿ(h'gq0,jZ:=-Nr-: G85aE Pqpz=ު/iT >ɱ.䥸<+1m\ˑu>"RvKӨSP}#Aqs}񚄰z|XM'v/};\} \^1w;񚃽?řٚ?7D-y_a=r"b+-Kwفop\Ljz0HxH[p ]@#VҳM*MuĜ jpk5OSIf]R۞ 98'-֎ANn(MYF=H |M쵫XDx sNey sLZ7y`AC2LA:j)E0(na冝%f7:}]p{9oݭ{:v% CP/t,`_Ojm0Wӂ24+ą}QnUqoe<ʮ`AŝmkXH~PzW/2klyM4l%OfUx9M( '|pXj lN~ a:ʦVPff //y- e'LU;i ͒^:o:]G;!B"dj@sįGC;U3a:aHd>0@VUiE[uH9 ]@xeBֆ;;(;I8{j쪩x$isTtknJ//`)q֫e'ŏzAS6 Z>v""u0B#F>i^sԡӪ3pm9*8Vs0[=i4⺧ОSF纗=Z6R=0g>0qD ϝ!NFv/ X'G %nnBxg73c-[۴}o}ρ9؟Uxw×*j \th~c` ;cտ `@XYE3dx. +@ E74{k&yo@Aȃ+k\_M#Pi6>>#KI,$nO6V2QN{+ >y*[dY~g3#'EY ;cf,|`D&m&sV#5/J9k,N"_ nGn QŤ+3ZtپުX-֔77B ?tNﱅ;2$2h~ c`(/5J$ϼˆ :O^:%1n?*"L陌ylMjq] s ,^ISr E n0O"maMQ̨CLx:CU{`dp ~7jAGˇd#rC aNbԛ:{4C{s|FB)83fQȝ`(Ȟo*$Hj0PE=Foz̪Y,Aµ27u}okp &S-sB҃2eK}5wid&ay Er6xʋM'@zf]y@kO ;iMZ5j*|#,;WG8JhʟiɩA䅴^gXjdHBU$ iHe[} pF $7eDDfv|ދ';!CףK?.!ãDe%2`ѯrT۳:k_ҳ]hmz؝ P=a!rGizyZ͉tenoԎhpk-3/P_?#wL)]'<C'p ?':hQ"F;gQ ZDWkW*V/m5[9,;t!u0*ͤشLUjVf5Lpw* rޤzo|Yrn,Ct#JK1m=lJպ<1Lu:Sb5`Ueھ9y- 1"bHQCF㨞[Ű\o؃&bL:;L5Pyք{nh}ORa|I۠h*C 2C[z22de&sG{~KJr?\7nfDMY+Ʊ=LdVo'Gܪq|-,rż3"iᵀ\d.9kFjѤoi7^p#NEG}S8b=0x(ohro*HCqVǨ\ ^WgBn8ֱLa\a/:Px/p;ӖQ]P6|!OUvxsԻJgAlm$!qI}ST*BьоtR)KV7eIKCIJ! [\웱MUGT+ YoVZꦛAX, x_&iGEUؕz  :v=ԾUC$i>7hdiC 㱋vD zdnp]g!>:2NB׾i+\DЗ]^S2ȗl;w@7h뎗˿ )' x:սpx)2nE#yIq̕frhVkBF1x|HlS%D 20r.9aQn &҄\##K iQa}ad[-6:w$.宨Qagg*|'ps 2w;=d GVx:QIDt*:*DcHEFjW1S苌Xg"C5[/oxa[7 8k7M ybw'SR`NqP6>l 8w,fA=~i]'\wD HaUi{ *F&O(_9?`}e!V| ?MϚR_X.ތ&߹3vГR Qy-3!}.YG, zqЉv Yؘey#ad~R |iR+l";6.^zĐ!,:':Aoyt٬MRrcl$GxiA @C m@⤖C!Xrp1{Kxi vXa]hx;b>X2? ;o<Eeqåm]18?J |1$+(& X] }0q'oO0ԱYA|8L [7&çJ'a/:,hDk!z'9"Py#?wAkU rmNZձ6NRZF?cL9IE}68"\ MeU#|~}OUDFkQUԍ aY&WfHo,>mW 5EE6:Œ7уQ- mlP0&{;UPOcf_R"u+sT."pwIA7WS؀J ?7\Icd5fJ3/HN!*"#…3NmeLмާѿB3. #[_3Gޱ?qC<-c2L7N7ʬ\[yĀ1$r3ٓЎ7yJla|Bը' %BUG.X\}(B MtRk5nhHW0#;e; lFK߅ޙyDZCtΙ+YzӋٕ~´ zfj[l&xCLJ]i JdP"(TWyCW$GL1Kg+@#` rÔl=Tb6$pʚK~.8T xbboÕEB1[Y/6Z'_)si}fAkq[8[q d'܏8#m[ 6C检"}txC{Fb̔d82׼DI r=sgz.s< GV/A} -4J svCߨ^=$| W"O SH38V03jضZUtLOΣh=ܪIZR2*z2wɍ7xDanlf9>@^%WdVsGjL|G_ʈ %?!tIW6綎4ԕ"cZFy>)DZfE5O뫌 ,cZ;{tu0!$kY%lhjXwGyI?u܅]#a%x(A W<E{B D;lP,LEb)<ӡ)qn.(FY rѸߜULo@ضs{D1QP&J=4-gXL\d~h7s1"Mu]hL[]lY1ip<`K0$`0Z*%kc_JZ!<٭E۵&^_>^>BpSn:O EC(Vw`Cĥi`IEَ![o:~:L6.B,^uNzrxq?ςV[0ʅ*l' צ<WIYF]⼻t1X.4, M[KlI_T$ԏ]{c >%f,o%m`\V S9sJd]ńڱ3oV%kb%|Ƣ B߷e1,*}e$-=L.rW6Yǹ5?:#/*`>8N[䨃ɐX[蠐<̥^Vs&@3߹\yuۧyusø>2 `!(F;Nev8|~+q<9/8ժ vǻ\s} 1FŘتܬ_9۫(}iWO;A!RKznQj#em!kzIorސ֎q{a+&nUcZ[V>Lea9Xgip"Ha|q VNA`(d;ɅA!DR[D䆌mA؁ț *eZ?.5hf!89yç ߊ{Db*dޢn8-z=S@nWnO/;,YShPV=_?ٕqfr0dY.v\)'BˆP`& x o8H as~v䔙GG'@ C߶ܔ<~dtx'&P&"odgBgǨ>[`1c3~8mBY5G$%35Q &wK{kؔ5<ˊ[e>!лL {rݬ/7Ο*{jӝEvXUԃuie0M?2K9Z]5K>s@`${4WDv3Z\>Q=ٯ@)0=srD@3un׍0=iK!. XL.RLRBqMģ3f_#d&X49mz pJxXZ 䮯#sqȅ6M{ʢSwErs.+ZnM>I5Sr2#yjjXXON'%iF+ϵJ$#ݘ*k u³j)5y R!!3LQ:BK8[Re:樳rLS#Z|){6mǻu/b-<(@(1tH@RC6"@Bk(uq7o fܩsҭ#w97ԲU.+ 2%,ΙUt"pK?r#er? L{l:%DKow .g*UGT'ZUj$ٔG h5F$Gj\|jf=cDjB3]FyZR1Bz1mHz79z6LX*S==; #(PåcҁM;a78OQ,Ue%"Ezۯ+DkVωC j`I ;*Jʮl5.&NUK6O>ChɊTCFtVeԓޠ)O+V槯vR3p=@6C ]Y4Z*0RW=<ÕpxN յgP}lv3a Saɒ_٫=|F;/cɗC+X]5,u\ٲ7zzu7j}^3$ai*y,;alefj߿-4p.sϡ`ycC77t{宍[Xմp+E-z?q1n\ _`Õ.&4wɠa}(9yzriCG=$0j#~~(UC,xa?63yڨZ0PP ?Iw_"5"U3gULr%^%VW+)CW[`4| &y; F-#K؍0V*䗷h,rF=FUj!=T]d:;r8UGֺ>yCة~w\ !BOkr;f|OZ-"3 QY0xh(;#pd/A}^#hML_pjB rET"bnWdk=?@<]b_6fcUμlRfQVGV$ĝ2w5Gۙ}),uLӍ2H)L_/ Pw7""Ș!V?Ψg-PZ jRmLY:^ ĪU ("+9H-l\X3۾};N\f(IAn `ߖ0Hx 'h,37Xm$S֍H/clpL )*hXIϟPoN;׶_]nUvmia6wpeK`%$j2\o 3M5/kS=]xzILPT=Y uOʇ=2z>\Nbe:'C&DLcZPg؆ВAN{A2Oz y" 0?c%à3,5ZU ǪXiUƚQc] 9c wLP­gHׇYX?RMQU&nEI-K'}R/$ Vq"(\DG{lFs@ E$bS?iG.L@V1jKaiլ2MO,$-ڇD9%[oQ<{2leHiyFt0wCuwT\ nLʲ%\-5s,Tf sם@ {f;h)諽+h~_'t5:0sT07;#BP#- 1EL@)7oeYًuk7 b*NLF"n2RruF!v잹=?=m[~XSPO⛴s(~?ut$Lb! qp+`gDِAO''֓޳xr\f♾&?B Z898~1U|]2&.lOygMo ( 򧊲=l2\Mf,K ]_ (l߭nB*Xٽh(\6d/zQN*9m3ß$3]'Whի͕KCZdb?t6JrWJC*)^Qό e^?Pkm*Q_aϖ%lJT" 4-,Z L7~'037ۍ~}ˏXy*U(|yO(Iu3,bo }2ZmX>{ ԋbUx ;GA :.JHdod V?t 5jEuEw3GiF8HAc4ʀdqY1 Eʌ& JQ1߲;eUXDlhS͊]Θ8ޫO[ x_yuı!] `ttҿqg ce ,\;NJedMiNWRW-pu]:N\kI)57gA4ֈ[1| %u v7OpȊh 5o // UQqB_}拏C햲6WXŴ xmJxenzHQw^&Fr_W?go= ѹ}F$Oh鰢. ڈbМkh{9y-kE eZ?P׳ovx!TgG4E,+I?g ̀dGfQv6_[XR2&SO1҅|5RIǫ+Um`H96ji:o="|8,*1/pccjI܇"sGy3 Z+lzADx[;B0 d/;8c``F2=RѽII/w [Ex(~u L1g p,ID9Aq1먏-߸8#Ի+؇|D_hbJ6O[XgB+ s|YR+:z0xHo[T>,`OX%oVʭ Xǿ%3:qњ"i~#/d@pPve3Se3;bzghFiT5s; 4ʊAk4;fK]fPhlBeb1/Bw7pTI+bLI+"Π"ƋSlwƎ!9v{&mBk|./y=6i5v1ell]wkWh.m]<5pOEuu̐`$5DZM2 <9P>ZcJ R@!'p2tduHD%~ij9f[ܼ@kvz'{#.O?J]1mBЃ'Ԥ؍A#|(0Z.%'&<3mm!YV l=ְb&ܠ,w٩%ڙF6szɯL$Nq`-`K+bֱ/M 3C j'Q5\OtLDoW&C˚t?)k%~%̮aFCA^Q 1q?Yy҆rq}vePtrF/GEK$U"#kS3Xբ } cVKCYߛsEZ_9>6]p\_z>jA 3[ma #G=ݏōmi1// g/DKU?V\7A7/*S壥GBO/Xeune/~<ׇVUJ ӽyє>/ 'GP-Ia=$>z{ǑCWeǒB!o:ucմ.ȴ<:(>8 FSf Z4М#- n/IG4%ߡaumS励of[`Cਾ< M-(ǵEr5A(!W\3HIEY~c!00-1\(wkaQ{{y),I3â$}*rthuFzRɶHs]RM#l9 WelBg{x;"/3No9N]W$UZ'JrrPȨBӀXEc؟!X>FW-%ü'Pwmpn6\BTѫ < ־v;qPg"JYTk$b~E>Nz&+A1xnb]9j$K, |O #޽:o򶴴EdPC k>}3]m kbWk4ANO}#Q<ź)Pd'қ@WO_~3!Xנ ȼA//q3y|~3rmfe6Z$_ a<8%ٱ#S]}B/ī#>{ >WjB΄U_5> h,nQ0뇹^C$VCčHk k#s!Wvq*~1J;O:< 9!!AT#=2+VV H%eYr2@h4 Q̺2E}UQ eզ5%r\`毄,_>(==4= 뗤b!5'XwC.gv%#a O9:*[nέsMkXZ;Vl<B3[u.#gKe;{X@jm9 ?}C^#t`яZ.)@NjM'. JbbQ {|4uzsl\=$e{\aGӕsW~ao*1L=Nu7s+!N5[`g4VH9cg3HL~02{c+Ew{!)BpĶbq-QT'y"D*OH[&mo9W%K>J̶pir܀ l2E {4Gbe 9/E7 xBP) HqƊB5u~I@n/|i9>Ī:NPE`}yxRGI/ T% qn-; `qJ vR @q҃o_r}hoG"zKѸfGHty#86zAΜ Gyn+n.|aa #7'7LX`kw8a;*' 4o.u"\)Pgd6.׳@OcHy;3<5|2!wBP`[`Ѭ"bzl7:L\)Ma1R! ׷^,f=u:+m $Rq#{Zh)VCk5/G]m9m^ʙ ҧ>e|vXݖeZ`shI#D09Qz4}AVnpJRIM(=sZ e^RAҎcS܌9Gd&1b k)\>=׶$b->EObQ2q=1 fQ!c`ͻ ; x9vAAUigw )?FIa~/7sfi VTk7:^`޻"s:'HbI@vM 2kh2sǺ4c S7'и_D^Ua-l2WlxA1ɦ4\lQ6 !z L, ~n%\[~R g3)"kY kcnX, 8dXhȢr-R8'syW ,TrmUawga3ƪE:V)AF>& O+{ے5@Ï0`!Sۑ!נ6PկX`g:lђ}eN6h2\@[jzLP`*3O7~7ƨ U*h@|%dg#Vu醙X#--R$aXM./U4bK!y).5j'o\l LMdZ#7_TT? e8R$ĕe,>Xf Ԩf#LϮ Px[AɂYkJiAA :} 6̻.e1vvݬV,s 43c"܎Da<צI8Q`NSH\?."ѥPG<$[;N*h6֧bX,4o-Y\'5>ʹbH8N]vt9 B^^iuDip5vhgd /JVIғNTDsϰ@jD?} di"咟Ep=aY1d-s`;E*4l@ǐ7#)D\ZD|7W bQ&\z2U`cٰt%-[އյg#S=kwQc[p,RWgJ Uƪx FV WQ_T.פ?EGVz> EBD0r˺Ux&Fdd)zJR"8ųd1Jd!R82LR૒i;AEGwqZtXuo[Uh40/WdSըԫm*,X)2+ #\a)Khe*$3 mA"QU 1dY骁4WY|Ѣ *O d!MͨQ8nE S:{˯1 u*u^(-yagRwUSMM s-j$:%Zs&e{̃,sWK4 R[nO9n] 9"2tD޳lN{SwWU'k'}9!tgȍ{ mErAqtY1=O=gtR'+/Ex*71(鷂jе 80i?+Rm2[ef=*,o"ol:(VrP[O{-zzҿAE3j (ll@/Ы#ArAr#!{\R\~y-LĒ͔`)*3 柳MԎ (][`Z?iTxfx&$jo>K*T":ȩEM#TTTgR+-l|P?uľ44fw!ydb VE̢@P!Pf?qz3QQۚ 菳,ĆD\Ѽkl3bԏu]2GLy?7#@U8>omq={ 0;[7Zg4\/_M FrG v혠f[{U| hpw4|wUx\+u1ckd,F- bNS@?<Ӄ ۓ,vSlY X5Ϫ"Fqd v 7z 7*s$IXC+2Hec~ߖ_V O2Ǿk@7D rJ0ScGy#?M(= WDg4(mza_P4RM#KPo(XM3fL(v>txr&s?p> `T8 izfH袳$VxԾjLU%v9RO_k TO8%X }Cs#Y=\`8$H&mޚ>'+6ኡ"YL/H)Mhг-p쫜RYU-@kDuڑØd%0[kG߷ @vd>kZѼLnW@\I4AYAt q8ZzfGw39!n3_`Jwq5$h"/gY?hҞK s/1n' ?.`L}GK7ZaWdgAXT}\!:&1:@8lAOVv#F%\U$Hm:)cw*ͭ0t:DZG@)z* PMdC03^ ]Sw?v7 %Ϲ ~bpXp}.+{{IWGζS_;ש{cCj58 ٕlFwVNxtY Wlbx{ܽN.< 3E&v)?ΞS}ǩ6lGS1I`eP{Tz7LXPC SdbX-(Va%̹@sQtPN2k?KN2UfN%Gm-?\=a2oyUK:vញX\Q#rF{HbnAwk~9e.ŸnLjyC i9?}i~ b@$zo匯*hy^ *q5W0,QPh,X,oi!J؂z*@:@I(!C0 bـnI6",ǬUqJuzvKIK8" f,k ")h:qyOvgry6pxn:;[ }Vy*g\ f IFٲ"[62ҩI2Fx]1Y8k8!]'_w"vWNݸ@1b J& +٨s9mjUt{fy _z$Vċ0l/0\",VwsMpad_ cF νX:>-e<\aƽ]3[>АWD׀9̅s[:FιWK/icj^&#u]ٲ^2\H빪?Ρ๱DSGm{'j_sw8_9]qRWteM,āLƩش:KѻzL]< 'uRJCLQCfpA͸R{;HےeVM0͏[  ۔@iD3YPGyl*z:\LŎ ۣ@QsCDM s=#Hz5֨vOy 7F bɉ1*kN{VWJ𚺜$~N&ŏV ߺnj;  A>x3/0*$Ux%.t9Ɖt3xv\0 ;AZtO (}EUUmֈJa>%%_~_S,F88m8AmFly[R7'D!O/'4 [# ΍&>aB5UlgnyҨJ3Ö&MgLn QHD[?C6# :\cLD VKzL- oIh_4`Qަ=ߦJY&\-Zk-l<{#ŀL!yvׇӭsz8//=ny `V8 -Hry?T` {K=-icsy/K^(͉HrKzɻ13Ҽz8 1X)/Sb/>m2_ Ҫ ] BuzlR-gK#謫L[m[icH@[_D XȏYwPbNX\P"'@2#N^:8^.a5w.|فqZ?ޘIƧW )[)WKQ T}1퓐[e4xGcsIoIH~!FYmef͐I~z6 f#a|Ⓛk7T@AϹҭ>>?(qSvCrabsmJ ڜ*ߜGK ?f< F ^j'~Lnn/Hi%׌*ߤ).v4s f2Ϣ& JT74PLXpeSrC> Lv9ot[pܷ|ޝ-XoU eth,M̘qbB -Z9*;.kS =ԅf?i[Y$N(%/ n٨ZXBS[M>V! ̒ D ׷!Jf{:9^Ї ˫L39-ZI'iOwuq/j+:*d_}UדGI0n R'v%ygU,@'ќ*' 1K Hm6#U߭Cg_,#e[ɛDP[_$BVVR[譣]b0v.fgcl9t W`0 TjzBn$6$,uՀ텭nu-8κ[cWy2+HҪF;YVޣ֯; 'gO ?DĠV 6_uE_doK÷EmX>c"s`qaM [k7E __mnSQAiБW^hbk:a#3rl:=kFgd]ىHE1+ek MmQLVi058h ^;7L\0SG6^tDw(5{3Ѷ{,GzEfsbV0*= ]˴p}.g Oʕ0RúrKё0GZuLF9~*5oDL1>(x`1St~:)ry>Hd(24%RCI~OxS`vZH4uJ }w&.axs @% PLY94ek/C3h1b/y`Rtr@@ʶoҠR*ՋZ}4aSXz5[#{(e2yܺ!7ƀo<< DdC=KS'TKڮc~ l0 &]y"'O5)pfYXwbnع$nLiB5eZ'b#0A.VY'쫾i q]P#7Itn idMշܢM*ZI I\E~4 fKx\=[($cl; /,_{ȕ5}XДTC0#v|喝 IUV r*anK55c80ۺ|RYZV |\Sӯ'&Ów1mحlmPQ6++&?)ڈE*,0#oXZ9KBbsvyDBZ3"ˇ{3?M$f37g_i8;+CO9gno[A8Kꄳqd&:d2a9Fp}W[YkTDl:Yn5G +9s96m{(Ǧr΂V洎aR gpK o0s`,%׿ʂmum&ԊDKx`AS*V|<}3p*117VN|oјPhfA= U!M@gtÍwC&^4&ۂwgeڃ{ /^ZBA Dvd EB hHrE)qCū5 4SWɸc=J q RC/T#Fe&nw0ahLlM {;LĜ/܉cOqrݩb %SE^T6TC $[T؟pyBAF3X@!ߺ 8"ȆuXxtݮ7z'9,# rwn=^HE8 +T+YOgz#fVw`qxx^]$mLj+y n˒-CD& wMb^zbrtQcg޻L0bx|r\gIƄi([% >7"b;p}\RW+[cL48,- -=~>GNy]]0FWE{/-Gl@̭@Bb4Y/f- " ɭz0N&?R,r|#c5:I"P&4z>}s>U:; >{hw5OA\mlngc <ű` CXSg| )TelmkDKolB ]nۂ_ wH{|Jd4aDWc /L+lWV칖L䩿]CUɵOS=M7GXa}c>/P8ϔYSGy~Y3*aM%_ʌL.46BT#!-^7$Il)?10n׭AQi٭ 䛷h:PC;Y X/TS0t<{4 &9ٜB쩊(ӏ_9 ( 07Aa[fo(mXQH[(i>icA%=DGF1+ۄ X5FDE3rŘpT2D mi< uBHop($0G}3p T)s,u9ŕ-`'#+2MZ|W4g煓g"0Ř2̽=K=H[ g˻IAe6l {G\"JɆ p*9 朅@&AM=tfm@MOp@Z&gݾM ;#`s չ]K* K^(fߊkв ΐ\lwنSi$ś /`IzgMxT}ZCq!Nx7 NgI57#|x ]s&Cf&@T:!0uj*f g8%Nɞ+եm2cs[bbE`3ſ3.\ 0_ /S}V4)K$ӶkGy6bkJ(V<*?C'z0+\bw:ҩPuEo0Wu bw6ߒDbm|!j'a5ʼ44=7⶙⎅#H-,6a`3v));ߺAGc)B[J%Ax]LQz`@?ptk"t(hbUVeV-:(jsK?\( /G/*%pcr^:1 Mz\Fz)4{4~ MpJ.|Y6CrxDD11u2KzI#c(Y'mޑ?rWǑ[k}›faKTK(.?~`" 5P]Rn$G2qq V3.NǛ>%ó#%F&[x^YpG^}'ztp"QulbH[YHp@ W,OلڟTLjF~_$ez"AQwW3ma{h GTqu*RMV_6BO!3EƠiMi;tvaRڹ?"fd?<PǚJ1Nk?Ԅ>O5fc򺣜cHJ/6,]p ֽn(;O`]%xR8S#w tw/9 xDF 9=a"#^|1O-te7Ɵ5Lwn 2W!$"|QH zch-  ě.kkIβF^3s1:D̒o7_Bzoa(-j?IT+(hkǥ[5#`ȝ+[_{I-XkNսYgao0q6wXYMLH}i79 ޺XeqDo*0qaab|R#jcN|ވZ_Շ[E .v/ Kl m\vzyä.j"^`qM=-.; 7~l=P)V3`,N1au{94_jh)ҊSRL_i&ܡ #r1R*HxX"`$B2J'"M %6c%]P?޴bD@;QGcrXHRl),ӖZԢXbdSHc& C #P(a6j3V%Q1E b:, ̻wg[f0*X1xYD?C2` Û&ӭEjFb 0ê?Kkqu7AR#Gz:e0dg(XdO"-#z ,&Pxݣ*6)4ƃf]*5b &$ElUQY=[zꛌ$eX#x#~:y-OYicZ'V7e"Tb-vbo )ȼl1CjJ3=f][(FB嫩4b}ff}D~l^rtzj eWdJxڭIqy JBacF󳡿:xfyV*qTz cHs6%l1'G6|Z'`#,&4hph24.[=Cxb@5_/"|>A 2N,Q[Ø_Sګm99!n)O_yi׹W^) AH[[G" +Z^&?+h h_- 0pZR,uvZ\ʆ4YY{'MUB9[a5_rs^AP}sQ!avľSW+CQBVO2%U[vTF1!7,MJUS dzvg>C)Z3_sOX2zڲ=[ ( |@JeFOnM0kfqU"x/n13e#,\fD hT0 VfPBAH,3(ڇa\A@ZPW4|`[EJߒ[ ]qn8fvlG68{2A;Ix6@:NEc'A!u% #/>:,JC 7^ WWӍgwʁLh3jJ]˗Lfa%ઉpթW}铏WZ')h|L"Qw-HCx}N1^뙂#_pw+2!h4q}=Z;(s|): J:װ9jۦmIVR·7Y$Zzp-4^wiWRϖxĕb 6"G"=WŇݲy$JH Ӽ#efb^_^,Bz%w㎥Cр$٣2V#p٧ҶccOA:qXR 3>xBPkXQMUѹ @KH &IU {#Y՜RwD@g>vg3i Uq6:Bȿh¹n},"B @#(Iӣ`\(m].|?6z[.QUlYjZrcݰ *E:K9_KY?fXԔX8z~fN2ְ~1f66%P8$"+牆h;ZϲVZy7Id(k~ULWr2SaŹ ]]gDn:VG% 7` $Λ/Oښ@>gʔտky{MYFF:MW~!EP1 MvLUuN m?LLZ){&f gUƛ\ZȔ`.ٺy^+Zi .F/f'3(΄ǁjPqq&iY֊e=GRMq;-dq3 7]sEe7u;s4@dլc)fk9, GOx=N .eɌ[Ԯ6>+ Ȉ[\sIzfxşC#H!@oG-'YJܠA0 ɥ,^{uS ?t3ZE^9^R~"(+tkG;bjɳ8 Z V!~mx ݍ8MQKj:cA DŽu|k CqwRo` 5ͼ{t߾K!^I6}()躏Q֋fLDST]FU/܅xѣH'!GfH) *ڒtHCDUˡ/XtMd krZ)$au5Z_W/FFDDfJKS!)<=eٿǃ ͇ߕNou'[EM닰D5  mᆙjPV'Mse` U c.rp L/@1}T$Yq@>#ōf/wQzO\F HM>zm3cV/ G\=/h[stp;ϖ1hxŵ % ݞ90QΠ6*7S#i#l cx т[mW5).[>\|1VœRUGk^s\kڝle8\guy#8~e4JOf (w&6,7ǖK2cn9uc'+MD"NFTwCbe?FξR70*-sbQh1nGN5z향^*ZLl)Z8~%ǭ'۴4,qXHCk@ *@ߎʧfB}8<#c6JsΧkǐqH,r6_ "ED']4橯_,`s]=k%sV{8 QG r~"ԹmUp?_i+ Bnb1|qr-8 Xݮ4U\CdAN+5Q:akvo'ؑkdgISO L/gqBf IB|:qZ 6qwZ"pb}J{Qq ΏgKg0#Ųx75js<: d&tIJS=S]uew@Cozh9n-|6plfƗh;MYM@#1W9J =R0eHX jZ'kX~^kWk(ԃd0㼭H+#rtcۡaKwʹȅ RC p9ʮUO' fj/!Fv[6"Hzu*ཌ>R{.myHzĎcPIyR],2?X޿h .+Jv$^ 19a:ʌ![vgȾyֆ~d"O`^5ǯN,h5_-GHw^/іv 3yT`l=͌j쭁~[JZrgלз'c.zè#u;g&g2ڷȢz@0R:-@SUsO)o Qˀf#>M]Z-wl<a\Om>]uKbFvh{`GB]+j͟*4foϽ|#{޽bNj#UP["el}k50u2S wm4|\cvd~77(LV4wKvù.[?zvמW{^lF/a5:?MI, 'x5ܴ%5 F&﯎6@ jJ|icB˽G'BlANgWu3\UWچOL8LypEC6]L1A[V5@Oa9F0+f3$Ċ{ӢK!wkSbO S(gM+$(me{N1;!t_zUƪ)v6@3*3F^JN4٘V ֟Emڻ$MZkDdc Nx(lAjׯ\I(z4C]󔙌 ﹞J-7DZ"#sURQ,VAy]Sjf.[k2,֭:{F߇&YP۔z7A+e J7ҷ[Hkf끠C#&gCx_mGlU[bػfV6+2tKn {&$,VD嚥` kO)P=qʲJ6 V|5UX:'N6Y=WlA!w*7j={tW;aP\pmꤌСr[A#/ Nrz4G;]a&qj\LYhU[6i2|"wMס^Yb]^t1 " .ƒp2@*x#fr5![)Vy‚[Nɴ$3BJQ?ֈ=%|`,_^ޔ}"`w9=;"TŶ" -#چ- ub}in9A ^Q׺?l,xd aH-iq$BUD;jĆ jNů @կܦVq+mJQm>E!ݭ+᠗A:gBWNܡJJ i+aD*S[_r?ZI\,Oa @ه,f=@5$RD-FYQRObhHéa'(`[і]K|aFT>H9faXA4S !rb}y݉`u=L{cIK`/pF¾D&%k٣D)ųoX!y^8,|al`.MY_Jҏ)#Lٚ')ך8*VKU~[|9r_0Nr8tvn"W; fzYfNtfGһn *'F{iڒP k|Z.v~K\I8V. g!'g{[5}'0Ɛ \C7-m]9ՌRv+nRڐ^gD)<^;9O,6 <]JYSwK3C.P GqؗbWVԉ>̽~w84SmzXuâ1~_Mliq?H(Q"7j'1+R-|IxN~8%)Ѡ]ӍI&eXϦGOУN%b7ph~mUE|gZh>pfn{Ӿްɍ(v>}"֕$H7 E?n[7lWҳމd}yS0` wO'YZ T $ow/ % ȏ`aI[h=[/u'ː7%BqwzVԋTd;GwؽW&=;7 ϭjy+.~z'f^}^nDך|o +?wފzgaP8qcONTdt$Ch0/# ֮>4IV<]qB~p&qRM" <6t.%tĭ|+_!1ș;C8Va,&3A>;V_&7j /{K (N^ ģpWNOuGqϲ7KyfZe}!FeHIl7^$IkhcU-;4EX]7@sFK"BNܗ kp|O7^§lVL TfhwyRDfΝNJ(Ou'@&l2pyPPX/^\zAM/F: ISI0߀ǣxL@=XUo`DAi"xϼz5!A7,efϜ?:S l^Mt nP1u~xHi!-gVIEB}/\Q8X *j;yK3 }Әq "DFa~/C;_V%®t@tWV{p/xȲ~LW7l? ra( (L#!;~|_ +}dL02 3A> X^y,9XTKQw7.?L\zrC俆"y:5Dy?Tkg#r/u;{ݪhGvXLf❯hᇲ=9Boahgo25]L++9{ krm;sdɊ@$O"0( s- r{,ݠywuѻOI(Z4 ƒU9mA6St›]]2iq llvx<.L0+ kwBtV2tHdfv-0&@L}\0t>taPx Hp: Re3 s#'_ ڥeaTPnyG Q5s19k (4R m)>P{Y@SĀ ivaY ZOt9nQw\qY_ĺۉ}Qc?9RO.`G2=lnǶ7/oa)%1)OXfPGtY6d"bm3 ޯs>4YF=5["E HLdZd7f`b?s"ؓ?F ܎\ <: ^(仠R e !O,Jbzư|2B`WàXteNfW9 nW?e@ۺZͿ]Fݻg,fN"9bL44+OZ`)y7Q0#>M4b N\MYXsd2V+LmՁJJT"EU̒ UwnK.Q=Y.; UYlp42͘HnR``#ALu:G U%S86QGʸGKފ/ !ᕃ`fl1w"\r*-$ 0~Sd=ޭj@Afng[?a ܎80Q1׀N&G (=dA'2Ȑ.V~J_jK>9i/V)P38ؔ)ǖ'#k׭"T)}߽{]@L%RxȦFM.hF,{c,۰*/9= Or WJ-k&aC Mk |LȿHBPMn<* 6ɦI@j%a rl ұE@Born|.fiR>Ӯ?{kڙn +9wixqX-~@Ɇ#A2 =#a9v[l|?ȐcHL;]ٸ6_[;e32^Xu4Y䅈e²z IH$Ѷ32s`.ݪ:R60YTI$ ƷQ \s.E rRUZgy8˪WQa(EZ#")̉D]˨J4C[r};ka#Ȗ.>Y [z"#ulA\ æB9%r ޝ(*KƎ3mYv_F̧HZ#؇1Xb9xnɋ 2Dګ,Gs n`'3tA0Za>iGK( :@Ә"bju$AǠ4-Xb ҂Iw{W]hn^1~A J-1CChsy2"OE-|kw 0ϐe9_BX^,aY- ϯVD>7P3kpldJ{H3wp,OFGNa^qݭT|Ew01sDH[$}4vRsH F@pkITW 哬`ԉA33x-'#Z&; I/ĺ. s ˆfB3287=VC_ʊE5f vwQɐ6b~ Tup^TvےG)Y|~!%{#C^гhT8j?h q8UҘ{N[e ?^+,K2 3+*!RnM,1=ؼamEf~z꯿*=aX<> ݾT G6o8 54!2Bx318@@I^<Ѓɳ2{\ #FJF6IdC‚WO[,-*=g/1ly//^]6:R-:B=+fb^6֘1ƩrE>QP5JXhf l<#7wr㰛rtM+֎ȈMcqxc=q;^H[j0 !yO:mQa/`&8P]aaPd5ѷY]ݾ*Wp]C95iֹċrd&lcNhjrLOѼv+]3"7l., t=$ǙSM&r`93mzR~U%6UTzIRXt2lV)OgӨ+'齋TRrKvImdudfJHSQS~%_M({6ѣɈHdҟ tV,p'}I)$J>ЌS/ 5dٯ$2E&r;pc'tdʭN(i_F" F)_rB ߥ?\'$Z{ouu[|t˽^U҆uɫNd RRG\=r"VptFbUq gz!Bz@M#\sB,8ܰ@cvR@pl5Y(9ܻAd+ve AƻGjgdWz_DgjD7Ydەhc4~"*UQT:?^L2E\`< doC`N%g5Cmۃ^tY^z *G&"ȜJc=?'mG. ߺ+)?sb7*]r,gGCm䷽G=E^X HQ;BwQ{7mḥgFU'H~W\"I*<3.n=;9ްZs-e+"*2'0wAH(&L A\ӋB۝Tr-oPǝ%?Os18'6/R[8l)^YSkGs+9rx[tpu&qǠ9Ӂ^Y5M$#m^8b 0ߓ&46@R?9CRxaZI-DV$8Y ߁ut4/8_HO`E ;'~(P;g ]`js\bOL*kK9J,wD>])Q!1޶A{۷`a7X5liؑiy{'Y==\F5]F2Vs_[Ƨ);ƤgvgܕaF=CǦ ȁib8+Gks%,ޑEAcb_S#6,ħ`2-`O2#z1aS.oEˣ \fNXa39EyIF{V?_nE܋|ap7kGjA6px:F^^a6k>U_ތI_[;ezxH Ѫ9u)swDJRn4$`<\[@Hf#97~KƋ]T'" t=1MjQ)FV$g|J_Q#1%HeS0&qp y֤Q +x{ܝʞLDOd.P9S`4Pzfa0}0FnJ4p-#\J*^\D 'hce{ >pKD"ȃ,g.qY%#E?mQU}[(3"ǴJ%%U'GRJeٗB!K+6 |$Ķ܏Nj?tpm>qkԀ=%dI]J`S1[b SnҫV70!JuLk/d6aVIA =Y߾tt-vaJµFAtp15][{7kZۥ#/ E"iD8i ^̧jGidsѲp@fr[0xDёRh͉w Eko6;Y!+%In Q[8׺8" Fj2G5h~]>Y\㒤q]d9{m~Fz+zm 8u_ |]!)q~9tHc!K~xyQ=Fm-N<ьؽ>163Cr-Yk/H,l7|x'tEhZ'ִhĨ_}ڼ~+Ve|| ';܅<_B]nmH76<0dX@2v(% QY0q!͈ggW{<93!ȊpY3*bS+"rD'|>]642=c{`vg;T d|sTKXm[ݣ"ٱyHWŀb wH֫pڦJ/ɏ-w g l j]渓~p6.ɹojV!b䜬.2S-YY n`JOy}K"E*ۓ"tr؜R XZj2~n= Y>L`}W+f;bLTlmPaJ.yerr}ϧ< >ñLȚ@w/לa-ZBRHQE'G4M, J~D0.a_vB8/?FaGiw5>D?.l !l "A س¿l`rٶ>%,KڝFJ9a9G@g$4l7fBW^J%K>-:m8-ÄuB8'exDmZ'l ے 1VR% *FњD{8#n>? Q7XB9 !6 ܵV"^ U6$ ;7ޯ)#6FK .܃TD{ UVfLFL 0-N|Fp_ \ڀ#o`lp9 V[}d~/q]e / at\t%Nv@EMA@ IcFH`2% UREN 5xPIw,~{S)p&7j\- CڗZ1;أ?ǖzja2`AΦ_{or S¨ 3o]:"{pǞq?^%7Nw~FkUMz?刊rU:D?>8P;ߐۂ4d)ܺqdÂK u2:cDGщǞGX-! ^g9);SKASV񇻻熩Xmz@C5Uu]V{ESG|2KhƴbOQ`.QN;oK 6jznIݭʥTVm)cK|03H..xߩ)^"$or=(I"&H@(Le5}l'S6V,^^$gL$0H;^}8^W 5/E7.`Ty&yHAm̕ᎤL>t{%ҳwR'>h6K*Ԛ^cݜT8db‿7tܸhkTMi V^bE]ڷIRubڻ<4 ,7KgmT < AxLpfS|+}}d7Wr"? c{~Rl &;5TAt+LPn_XLA5&=$CC`WbG.f2Yv)sk* [#2#ԅzGsFO] h9a,$(j9= [ltO{C;@mS);".B'N)? Q6.cV1\qhj-؋6b)᫵ >>ā7) [Tb,Vh:~)(.40l>B|ܝ,j,a{CGj{SZߩ֚Na?m:%t3JzSt'_ riΣo)I"'BIPv A^O-2=B'MkǴ%bs!p==q#pf\Ukvki涜*k1d:иZDSyӵGYmSLRyAMc u"\xvɯD6\y//(řЄw>\JUf_y+ 5Ik+Q"r`NζQ5k&.=)F@81y4P>ʢY[Ȇ=ID# cb$5 CVVz<Lz{:O"V7IE` nZ.6s-PfY4>2ޖ6[yQ1RQ/na^܎Km1wAѬJuxK}#IY0NG6`a|GK䂎}_,؉N$6/cĊpz'~oŃҍq0{:aOP:  KW=۶Gr4Mw9mQ.|{cervo&+:8h?ʖcPD06*y noy.G^4Ty{)v?&{o6u[GX*B&!%8듚׽Um]Ѯpj3i6d 4Xj"; bE m^8؊гɞGfelxcۧ65${~ U;Zw3}ڀZ짜,l%-S8\@`(̍Uc4`hoMȜf9{kÔlzL1걜\^i BAE!p 4AJj{U_wq(Аud\|Zp-$HLִ:*8T0ZSoY,Th3IϊTxwi$ݔ>2;[7u}>}91Iz'n#@XKYέ͟(_KmRd 8&^pyRBr0>d+Me) \ϳM@;yX~ 7YRHPȦSQ8IOAG%^~Y7Ae˩>O0Pe[sQrġV8< 0 L951#'{PDzl;_X Y7 _`楅%_^?o7 _ꥵz&d%V$ĮL4dHoOmUL$oG)Ts9T,$(xyWS*6WPFj-s{W]"T\R!1c[}^ߠÄ+L`FE,LSt^FKUafQ/}Ԗ|juU\`Je|w!eʉ"gsy.hgmJFD.؏Q Q[ K1r, ǿ%4~/Åk ѐeSc`SNųW(,6eJd&{ =!l[8Qԟ*@+:*ǀiOΚJC՚+}CpT'fFgA5#9(msU:X))rn’Q>lP31̲EEcYA xyRvۍ3`ǯ(L ;TQzN^V E?#c,'9[NOC-W?1v2S0wj=0pJ9UiVUT*힄Ys3쉮M <o5a' .{a>kf*φ $PB62K 5l,ڌn c # 6 M dzf\O.zAn70—q5YZxteOSNQ? JjCIGU+J4ɹE<CD4ۜbCv~r&d]q3 ҩrJ%` +4Cm&4aGi<%w]j(SiJvK*)y2lD-(ykv\@|=,aQ|0 V5@gǂY>Zs'ۢ2eƺUj|g/N]U Xw^ E|:V&#fImRlQA+ud [Wv&yÄp@2bnC6TĥUp%\)ф&/[rm>SB,fl3xtfu.d_µ+/TNKn;Saڏ够tT.0=@/ɒQj /x+K{hzCv‡|ۿtjw β~!nU_&K|;W`v{ p9e f͋\e-2G{\,VuL@]LiC?oҦ\E`ekq~_"*Q!P"W=̉*#p!& UޅN,{.9~ ,Kd܏SvI99C6t% B$cԢ1Ԣ5 >@}HR!vT(}@* sv?/hL[},mW4orfO6e2x)3Zϧk!ܙg 0PLaJ7iҷ@P*8z|T^Y'QFҕɺK;`Bx7= lײ:iTJ~`'UqUUKdXdbx,Lgj|enL˿*aH'VS!cٽE5=N[ҀMňtU 4<6wr+aH-\ {V"͊f?FРРgIdU1d"EA|Uk_I%H}Q*`|QsV9Kbg6<]ߒF*"վaF~|j򛎜P9@Qfםưep+[)W}¯@4Il5@}m,x d]͌>>f!Mqx<#8Mu(Ze7ŒS;d-OzoN޳)$f[ܾ :=Դ, c.c+;D]ОRaCt: bytt!.2^DJ?VWW_CK7=*5Ƚٻ;+_* 4 ӄS~F(ڥխ%0#DZ F;o5)*lkw 0$|,c~N(&wo_ )&>Z"hWLSrL*JFuE6NHS)^_bc>0uNF*^O:3y,pbۀ$&83D>zUګWq7 VOĕ2ޤQAIIʴM|51Y`G0d@"U3Yd̰a$=ϩ4mnF X(17fFƱX7V W{5y%bhɂm]Dm/Dדr|=5[ rcB6'AQu.X`r_1GH_C a~#r~KrBg|K |}ݭ&6oʜdaUñ.^ &?Kc*o/"`2ǡ liv6$/Xjy|֐th JA(2lg"WQJ +겨F0飥# "T8ob//А`.dUȼ/X!HBR^oeð-8^v$dGDe"*5VD%zWŐ$uy뚅eW$-aJc+WΏ2'GLаo+ڎ5L֧5ah&޵f_INCyjֈ8G,ĘD%^}2(8G>EZ ;o/+ W3QYUȊo] w1|r)D&c=6TEE$ė&ԃ^e`b9o@ }$c"4\>wV}~d*D EU)NӾbno}\i, e23V")\Fk 8- jX}6vi5&lŧ"&mvX[b$?蹙:*9`EO0Rj$BdV^?@=9vKNAۇxS66&{oHaNxCR1 |{}\2 ԋ6Rl*0r͠=`98#su) 1]2]Sze)tdK72*p{qnؑ\XKt>>Z 7?Rkg$8WL|/|~3+GX$RB߲'DҒݶk4GzwR[@Ihl6F2eykzUPY*aQkpHҀ;Ky:0{Rh7m}JU9nhY^U9콹ɜٗ wrcyѦ+VœXOuT{'R߬q. E/⟵UP"BAs`0ZÐj0߬+NaO|d JW\B PoaM:*Ŷ3tNUyb$1Tn d)u:p#t sF*=_;) ) Q~Z\ޤ5'a#﨣RJ U\: bu_4-=$k@B̷$v 2EaS'aW?ik.j*#}!%!$IV$Pl)ij?FꕠQКF_)(mLmc 41tB%O\6O[=3P\ ZfWslnSB-(DvtP1_F#hɒVFh:Zڗ_\\#m# z]ީ6]=Ee -3_O>Yn 0b1O)0O6MWN.&f4+LWp\ބǙ(N i<#+yߚ u%ձǂ=Gt>\Yڠ/azw:{ǰ5Yt0aM.Q' BV x3L@fC\E5b~F.#:Aw@|L~'}10?U%Yix;CPKydJ 8⹎,/ '#MBbs$cA )J s+'I͆e墔0;HbSo EɪEIJtzG+#;۳ ]c˫*Rlxk[}Q<2:`Pl@- ]C~CҚӁ;pՉ^`N_ {`wlUVt(~XsSg׻=|MuCW~I(m,ذ[PnI炶)wG/[ J9LL` pgYWdBs W.*{ŏ20s=YvnѯXP "xoԵux.J4LK ne课JAt,tZ$gI9iĦ+ŚaEEᦲ^Cԩxg&t"jf%Ϸ0Z%I#>)L8 KZU{Z`qz/jR*uZ̭%ms|16mgXa(k5őj3dd8i˟ۦ9_u$]ڡd 4/<(HV5:]ވt Q"0U4( 鶰,oVenCuü@Bi]/Bj)\hW,9JeB ۼ'$^.S4b^ Å/cD.d3}&/38ON~!%ggڥ0N,YMvؖpO9HT4^kH=7d] IO.T/%Ηj yVl7}IPq-72Iܕ*Sc5-`U#F}=<;wIdv^kMf+RVm6gP2u߹)Tw -nn'@Y- k%fRO?FXd5!c8J]2/!D\=L׆9\Z^]L\Ԉ`MIX!k˶,K=eS͢]Jrf=#"j@UC7v-=Ka)@-ԑV"ثYLw>R#=M<өLpE.]Ԗc2J6MEZi^k$xu;O%$b3*,TJ^' nZyvG^^5)S([Yt}Ÿ,]> qb>J7 ~ʹ KXQ nCKyQGKv_Z 9NXSN.`(y m}+o l"iϞ8|y6g$^^2l!C[Yz Z)ZnvǛ!mΣs[nu8 Psw2b4Nt:w_g|Im m4+XYowDwAM(SڕYL nDr xIZAxHMvz8+KBH]U8(/p_6›;?-=,=c.-j݂`FQBUɕcI\i7=wEue <)/7pkeWjFL5F8Z]⮓zJ R֥k,o+g\[i x +v2#|qsBCNݠ9&~1~s , pr3y#B}$k{s][mbsQps4gJizޖ0T1$zX,n5." \T-")HsSli"]WD\)ч>w׷3 ~_ ב9R& Ӥ.x~1]tҧG^K˂h[9ݮ~>@%^8zJgxR$,M if"Ė?[ o;t?XjUnŀL@ngLnHMn{Z6cxK{ [3j$Ot%g/[ARKAnu£f&3.s>T fO#d,I4:IB<<,⤬f$㧾3Z}#HLiFWP^9"  +!:] .Ϋ]4W)INJJ<6]< =wod:S*Ss{BV YK&⍢ b2GgJS1e0=T =)=PJzș1fҿœLRZWyDFyLc͡pyZF7z,P#XѶ6¢]'^g1]yDm#TH?Z+5^ Z7in.2/DZ)3Ho`q9Q#=^Vl]tq< @RpL9O&,#eLseetM ^-I^U5~Q˵Q{]1j=E4!AHMsuY|iS(n-p.Ƞb氉aH@dPd6 ps]QWY0+'^ |oK)C&$7hyذ + ?b"ԦyLZw ! PF.MŽ!WjFLzQC̐fj~ݍ) ]s]ؔW!wwjoŅ*XDRzR`F=S5PGbb(;th"0}Aif{4TY uV<$l>(' 1~pqvxi8Ts`՚'U;^ڥgTkC/c_AW*b? 06 l˳ 9%vYgqwW#n@vcpx]ڎ D40ύM-ۺ~!'L ~ /`nA+Er܋M5M$f,~A$ !qJ+ZZ KZ陠oXU\+7d({=53w[X混׿(<UWC4:3P3BP:g- Ez9q6yFKnxu(QWPȖ$nuz?`{=M H1sv<=↞ #qzH E( `13MY G]!%^lt{+CpA8+??GJ?<;C. WG/R"jɯxPT-q66*6:2%IBYKRI,ǡu$-* d U t֚2f`rZ!ld%kE49Jas˕A YvIL˔B&ga+i7>ǃ1ܞSGZ˓:$@'zl4Tra\ϯ||o㋌f b0q%(a0Q,nIW`i==ڍRyAJϱm7/ [Og^ C4$GDC]bb01ڵ>j{`_U)YxYdTYnyÊJc3Wz0?[:] s3$JNp'/tZcwStN5:szL=F@E N]]U;#.WU uD:ô>O"Dlr!E{c5A` aD1L,ͺXZ^ov-jUj9kPjɺ@#rft.] #geiv?Ν89h!э\Bx> U*+[ޜGGBmƑ/D}IX~_{5f4@DԊVL@#(3&q&)U9dLVXTľꈴ3} w YoTEK!g\$RU'b%77dAhPOse%Aq@1?7O=q _U>1a@K;?a8(;*w|`L#8RGs"Zݯ f%K0x- 6,$ZxV\GA4:6 JZiI(c݊%; XͲ;0$ P3ؔqlѬ}ƿL^R 셈qZa/:G;8H+T֩d'[](`κ}3:(WfJ3j/"5)No'N+Hn$OQaOdgQ24^O6q?CU\WǹKM4ZFmidatlF8#tjM籅s3*w)}h!~736/6Y"vÝO49e? Y֔#I6 -u>ǀcոZϣk\Fy6Mj9⯱Nb4e62R.4TEΛni+/;˂y2"WA*кW3eGAGog/ae#tw mi[i0 [!·y{^\7J2>6B8ag4gAgn BAuߪlHmg3"Gp)=ʖդi`P|B{Nuu8$Q֙V@/4_I+،CI3􆻪*> Qh#kYu]ӕxg|@bխ(YD)a\䦸 /.;aCT0s-,#& EDn|Ƀ !ZVS|sK k~gA\‡H>$G ll?B,~̙dG7 A(9n;wy5n+~OO 5jȀ=mIV I4uML|Ln;4G;)z@K O!Lm"ORoY 1YK,HX\pzsWԅ筛ٴĘvy2~7ę:v7++(\Ϸ.tD72Ew{RaAf&v)/&dR4{I> .ftw (mp~ëQ!fC_p16YB_2WB-J,Gzen~,/̀%"*8@ ~0[~aȸ'7R$JBP7uNLւa΋B)p &d)e qn0m!_C"ذ1 tE;ԭݐHxtlget28(Ko+V!0ش)ȇ3-@Lġ-%Лѻ<>_yxql z~N "ҝfOma m㕟`7*t)6FG|!gm'ux>$~a6GSm ÔXɔ4z_-DhAL͎",y~f>6yR@N-/: $ChzR\eL(,DJ4 LkܢQ;izS-A&Җ`+}h&F=kI=NiI[Pn`sW@݉z:>Y>qIZO |`UW+_Wi#>ڎ\-4\wv1 |'3br.\R̉:Kh>.(gP (1D5{!@!8ch'3I%"geٶPAju]hK/: ՌlZэAzrW:M_n# eE:e])sV ~A:~CYR"zu(:lÌE,B:e\\6Ic-#Z0K}^58>dXl [%as/9eD @\} .cUy$G,$tS߷á/2z1ǿ~;YatD M>A%\Ut|f WqL*+\Ls # * U.U(NԢQ#_im֒j :˲ t 鹼8Pm‰*E^;>TY<L[AvKqI׌R /y v"~t"e_bUZ#e?N(W`bҐr!0<&bf:8,l~X/v'oPڝZx-*w<7@E%ܗ3]FB]d'I,& Q׏ j4V^WPnFDt7~ZEέYiT tT ~-a U= Aۑ^ Am#L"ypRF izi֙LI/0Oa@02{#Ljxf:YF9NX@Q^b8҄ĀucJ(#i ۭQF[o'o$cXiz:<İ|]tQRre ZS:{' QN|ўJ7aR_U);s>k˂Yɨ}2Z R3۟N}:j3J_.B0k;~ ]Z02:T:MQ \i M.y?Û0BjQώ4A9GҊLn/`~'t)87:%}2AѼn.@:Lyq$/]]+λ1 Sr6R bè P(a 7ʣ hdTCIF HWK*].k]5}Bğ-ES5P#uv4)_\|-7GҖMkt$2oy0%/I@a6N5UmX6qdR2"YV$DM1:W\Sm}72~8j*:B[6;K ^k/ ZUОQYw[T(0LWm(o'64u "XCFQawDw$*- p&knZ)Qo !,:cDKM[{-0:Xq ލp ga? i_$%g _{;bY?܀)a s숸G"8j ^n>/ŸnFZ]mCdmD ol Ϲ7s崌@ %dЀ$%d⥢u/+? u@[E 8+Eb̓t87d/ZC1ɥڼC nMCQ7f?@ZVp$ C⁩yv9l^L]x#5SH1I8 /"2Nvj}(l%g`+EÎOe0bswf(WbM?q>c [幄/0Q(~,,Z 3$˧8G8oT8Vzյ;|ˈQD}w-x`}>ҏsoiX}WV=gmfQ |:|j)ͺb@b+3]oL~3MpCusJIq6y'4DSR_2<)& L-4`srw'.th/H̎aSyd*tEpIXEZY13:_& mcKi u+_sTNvUMMxHFP%7] X3 yPhHS{1UeJSl5M:I#Kn[7r,b ڪ~/-W7{b!Ri%qr!n~С֋5%cq=d'}btiHeõMt̤g=r{]S"ki#*_=Yݯ al_'O&Dbn^ax2^:{}QMS7TnlG(9xN/Gk61 Ͱ0 HHG.g 7T}A@g&͎ `,Hg"_,-ȝ]o\ pڠ EBuȎde|wpXp hR7']9b T%Oxm6pԟYz~o u;^L,>{-{8c:z5XrmwP1?2AŞaz?8U3v6FQ eҢ#BI2[##k:qo#Cz3MY>qT$LڥZ}H^SMȃ(( C?|CSjb X'UU\ɌwN)C4ʼUP0R:"|_sP| DߊoA[*M߾tzf2t%Z.tg8?d[^ivl:0d횉X }R2y7 ҺWU[d! ݀>GkD~}VমW5O&2Nc}Wf"mt QyD$r{r?D딩Nܡqy][ODan.px9#H"~8nӍ\G. G|́^u1 F2yTZWZxq+ Eo5jr)ɏ2|YaZF;BXc|ff )GJyP@݄rtTf![3/0$HM߁y)LI l ̷'0A%_<Ҹ[1!'D26ո~E{%}>yD_;au 銻 6 ]Y$'zf /CNyV.OOzStAFn,FR lqNQ)dȴ{ʢM^Uؖ)T4NY>Z|v LmԼMyP6S3`zSNj!glN'M#̕J"~\ 3&Qo:HIqH*eM$o]CU3"6 Y4* =1N ny5c=? _\sNɗ(vAAW#V ٍ7_0Snə&RB]=+!!?6NP:88$;ɤn,!U*7[GLD,^YxҌi hb@tt{`kx-jo;L J]kV}!é',[&6={@Kᵣ`U#UkMt#7(!^bccĔi觅'sLs]"D2S7*! U-QZ/ȉ唎!)(!#JkՑ^]Й_y+ 1&.~[j|]tqZ }&ua߰_c73Vꃝmy "Y}pn ?q$?,Y!"uis*/GZZ5*Η<G\Rq.hPcUL1ڰU5y7.gوKO"YDݻJ!tx'U(֡L@lX.ղĭ$VF hIbn-C<%";R[wK1K~}$X3C7)}gf]=Jݰ ) n<* w_ۇ֘5 <5, e7 | Mn|fd::Fy  "΋^ab连\U vbZ'Q]'Gqvl̴ў{د iLX#L|6<81 0zr u` }5@ӽ 0JhЌ |ErD4]_ʶzImnΨVS^3U;!HαM\}ƈb}8`6ZJupѓ6CMq 6<D#1<7M%bk2ޡoگ(LV^&ab[e;/sfꠊgc9F4K\1 ^(Ā甖wpܱBM^!.%ҎC@@rt[m&-g{^z%8(^F31S[闺3RPϳ ņ2}I^r/o|+7N)999-|U0RNY~jVZ_h+[?Di%ƃ$ yUy>hECXNԝ싚sڝՇlmOHab8ԛA ޟ iXe6ب ϼ/#Xg 9(4(Ag>d+rFH;j'M&isL9Y<;#x] / fוa _E˗ίwz jn^.5Z톦M;]+ gCL ? a{ qbgIѹr1A=QZbEdr%Z/S \2T?`D,g[hbi[zPL$J|(?} 94%lDrZSüV3{^~F V)C ޫlu8W~LF{~$"O&>cYk]DBM^ 3L!ZM,xf(_wv}}NYf 2I/[*ihiKj%֞!nM)}U3R"R]O3 1B. Ci7r t7l߬ىCJlUxiZbaZt8nY <6ϵG?>>W'^:b D3*؍Ɔ8GD*21䋹5 IhH WSKpQ_pƣP6byxUFQ>-HI_ r,UHuJ}V7g g/# M~ܿj$YpľeSnDhv@@h)|A5惥Seoh3=jPCG1&jhtOs8#D+r0<: #UXkgRnQ3{ݧ`TQIau)gS =rS΍{'-0 ٟ2r JaoWZA}uIj5 CJH ^s:}W۽_W7&# eIWaAn! A Nj]l|:  ث,hZjcNqU'qߴBwL09bƃ;4$d2Gґ呹5,hռ"sU$7;@%Vt7`9Sakcdfx͚1М p*+ RVAto(Q37aw(T= zs@:c8I䥙b ϔ\3qd!65C5p@rbK)k{0bDwΞ]̘xC-ZK,}ZWH:WV?SXb*# +jFYZ Sm| ;iVݎZ (a(Wvm4IƑbr<{\CF5Re|tpiL<^Q.pXv'틌)54&eX`V/7( {^uCVؾjWb! `Z XC SQU{P1З%E6&Bov!b`i͢G%Q6lg@1N7(Pzi~Ic3T>Zr6{$8X; bТ/<@v=Fz/]p,fC+Df~,g` ZRX? "?NLY0tۑ<Bwt^kL&na~.jaiC+2',ѽ`rn {|XW -XڲΦ:8CV= ]U!"H`w"֥47/I0+TS*অ!vך5[ـi&ЅT{s>_Bq94m@f" X'`DV$v#IZ盂Ms3E +V@r{LM%iab͝ܮk!D럟L ΃Zϭ{ vg`0ьiђsY{lfhO!7uJ۩N XTv![Ș/Ʌ vG'zIn[ۏQ>QIyF8Ϛ;n?:iPaTڌH;XzoG?okp]Բq2)/fL)Dԑw`UL|72Q}r~́[eï(izvg$ց ;1\D^[gT2e-3h 3ttZ3]PRO3ŁD@SXȏ/dy1:i'#ENeF5 v5ף-l;NuX :&)ά{=PB`O@|b׊g& Se6U1wWW38+h„ XVo>m%0L/X|!o/-Yj!5.9߰'K,3CqJmeg>97Ӂmb]w0Nue,QºW+ b13k+ǻm|ON53SBV8#ԜCݫ!s[9r&V!IM8V((t :3 X.^0a?+$* )wN|pI/ˬ|sHGO:"YIZ⡈rPNhEAbIe2e}YW9B넜lb5„t#ѻVX#8k+xd?{yv%vLBQC9fvۊsCUmb1@x;6*f{|mѾD݋&itPOΦY+E Fm49)5d[y &Uqfw~1G"/` s%#l-֎ǛdAKQ4xVkwlhX1s2j>C>DF^ 6Uj=40#Vuhp$$1RxW̒A,Vϴ2f E > t)!7͖w쪦LػDQKǺDo:$Y~.}0D+Ȍ$޶"xxrkp ۴ U&St(&A)pږ*mycX'7Z%kK /sN[G-[SHgd(yx;KH:;%L=.=Q=[ijN rh'pd*Yi nKp)Y{yGF&'9h[0=C gWYzꪑO- ?msO_rЅ>ZfQdMXVDv8++t 5 7; (JpA [11XT] V%ռyv(`Hzql1d7tr|D`d7d :e$|YW/"g6yOX@MrPH whKyB}jdϥCA/K߂(M†(]7]ٗ 3N3wrRI5GƁJlϮ^ NFRg%?ᝄ;+b%6/MT-ŢbMH:[C9"D:DZ;; G̭[|ʖfJUA ̤}OMUSQU/Gq\cS;{!cM.$U==`w,(rRe8|%qxwMSܷC5#Ų H7TW|[J|?!jQU%d*mشRy#)j.##&/놤}z0@uzK* 1>:ma=(7E4,OO^bl+v M}at6JT9Ao.2>i[ȃ $S)S"['@ D7 >E {"Ϟt^>Jl0CPRl(RSfeS ӽ̙a~h|ѹʪf(@s¬uF)҂L5=/k8ZnlU-i H7R'w-]I}OmTwA r䴗 uzΚC,zs^!B!a3e W$PlVm .1O&Ј4uxi>ˆcHh3‰CuTޟ.l;p&[c]kEUNd[@q 5؜=ap'&el&_`ȸfr\r繳h(fp6p=V lSR)ZiAmd'J:^-*LYx"o~?҈vrsn|w% .!diQOx±9]o ?pЁ-/ARjMYW3e>'0E2@?PL"q83o ø:Rf s~tS1?tzp}:v6mń{@"\"5}lV<Y5+k Y{HdkpԭGH~ GWLCtkĊHPxUW'b"PҟZKVp  s0:Nﴂ1wpUr٩q%N! dySDp7vMU6eun[b|שּׂUsiw%1t~5*ޔ%JćWg< gA?b~ɡ,[ \9=pk=f;i '0m ؒ5mƒ$"ve<8X-.=ce uZ9s,؆1i䒙[c';=E0E@2D p)B! >-v#c=3wj:`sץ=jVF9͹ U'6"]+AXCu]V܃mŏ)Qf_|t RLzҲ=t 2AneVSQ>c2!N9ʬa}4\D.mӔgdVjU#嫋&Ū@C֡,VMK_@ ,9 UwO>Wܵw<_~ ,R,Z5g BgM܋hc/=I[L,R@PS@ Z~n 7dNN>^BRzdS%o϶1|,BpAc ;y 5b$B; @G|;o59޳񄩩1F_@1 m΁l_[wWhX_IZR'*fe;`pi8=gc񟟑c+ŕ[|V|th׌W2_](Cڠ+ ɛ->oc3=xǗ>fJbg-c$'G2T7Kr>l J+`ͺY4u;$@O88I"9b Nzʆ$-VĘtnOjMQB^^ޟ}gZbqXplQl.vL?&)3 Q<=up1 wR QuNb,\DZPqؒ+d D :\ۜ`'UdP3S+r 5N|V5DC]8?DrFK\Pe3 @GvDŽ5ә̻G׾hbߝ4Ͼʳ\UΈ/0=V.;txb؄; dyGH1!6NS ;HP?䉳x̆耩%bn,YͣN\:-ݎR:KXlMm5hW.C6x%QMh^z[]&Q^Y:3|2-{mma"g[>:]Iy9pã'dx*Qcd \໊v"[QPMMhE*"VM%hXO=Jq0C,lm)XݶurO)be&v f }שottVkljA:o )=#Խf9W뺯`_Yo\o@_*w@{4_ WTuok/й6&kI,oTH?e>khϢi 美g4О44V2̪ZnKbL(oS i8CWP+pb"fLJ QڔA#`T |TVHJ.&Gj(2]Qu~=BЗ`:[@+b8kJ5o Ї*8q͙v/5|0i+zzP`V&Lc})WЗWM,9y3v]0^[JR;wWk6\M7(B%8=TJ_)in4we+zBbCo/[caߵuƆ! R{q<0WMgo 0l,!f0HdBL {ϧs](Jк(ש@=Q3+~{p?7=)OVc4)xpKK9}376/Y`[Fߢfmo&ل<>᭻_"kpL~Ѽz.Ql7*SGeۃ&)Љ8|C0E0L"Kq6NO$[u.wgVd.4ٞ|>CDO{rt}2F$ jZ)Mb,א߯ t%'ї8RK>ȑ5àEnLMCEͿOQ&$&0O [d*/]3!7%jck:oO9z/0w+Br&[V}6w'by% F8YflmtA:@!JL\W~ LYJ Q`OBuqci/K;.~kAw2O8Eס w@I]jatr"1kJ&s%RĨhscMwro)δnO,06SZCU0˶xE)K?Tr=g 901V{ [.>aFh1 d$/޷,C0 Aj,wH_o%bY>1˾Іqpo} yD< p <3G2Q0Ù.7 /SW@;4%;)d{ϳ_DRkO+h%o/*RW츲2j쨆)\Dr/ם\ ``&4+^7@4?4.()֮%VaϟzW+_ia6m 1P2b;u6~CT)l-$6HFmr_=;ܩ'7':e9YNʎ{gy)Geؙ VytK{WE>}ksHCE VW{n!6c'/9a0Et0 Q Kt]q]\6rjwtڜn_{#wӫKBwcVd7X苲HpyQPhڳ;0N6> L|aDF 8'I(6A7a8e5wICb ^Zbߣ%yxDtEI9ܛ&n*([SwuۜD7(4;ʧQ*ej szFЏQUܕBMfZRJWx>{J:)ϣ\GF$  "jp'^TGaa& ,T>MʊsN,t))՜F]I KNT.HpаCP4Oi&[* cijxcs:G4ELAFo6PFpr3zsYrHf(f)`y)qF% 8M+*=0Ai)wG[=Qe'(ze"{[N[N&9UͶڄ9f3xe߮FP;GIB9P=8wRQž :B]ZN&%5iE۱ir?b:v:^Xֆ4G~<9ҕp]^\/бPf z-Zp`$e2P@'q?W"?Iǿ$!IG+49o}ԞIBI.nk2[r(SQ^2!@@s|Q TN*Ze}$WJ[-.IU8,^1Ib"bFOsc=rl.MFC=j L$ ^Q*e]`UKRԀYOC^i9N^BP#,ZF*"s粖a7j!4K}u5|vETldf?Asu<J BbNZ &К8ĴÃ@6q&og'q1Ͱ8;? HfآRrG~]5,I2j>`v OUx.1l7ۮ^ l(<-R/W&Nn5ȓۈĖdPY]^qqT ^^zم.5T<%>8T1]MΟFoX\s4vEy, 7c$OM!j3"gr$~ϔn!Ϟu#p=( dw>dfq;)}6dGy OZY\o@q\Y5j58dIh!%ywhiQrt0e>zN{B~'i AC&3F(;|q ;iX49)g45=V̈V35u賝)[*i&!o ۻ^bu4P~X~V"*F_g1a1^Կ4创MR?jF dhJ` +[!׬xP;mohq]DŽOGF/d9Ʉ]R ʀ4EMݭƻ&1_+8ogSCXbX2T`ԴÊ3Ϻ$vG1c+[+R%Hrk;஭Q3F;| 8)nDP2澯5]LXF FqLp4PRK!5tGijw{f=Lh H`;ٔ#ּ{ܧ7BaiJBik:4 C˫}CRR @m|ßP8 2Xs"5U\޻xZ2_poqQPBX ՕEZ1u|y/Ȕ8ė(sTKM~ܩ|?V2P!PVVD@4(GQ)pNa ޿7̈́Ps1@  ƪeh{Lɀoc>ASlYjPK;rw.(*d=[VYW9iSu|Ys /"}(uʉwC8+AU'D\B28ej(o_A}_Ya|HBC)0zYr}1(tTcptݜmݎɋCrx1ZG]V1ՙ!5X!7mQr}.4ִd=5$_{;Hr1\#^}ܽ13"@izo+do g2߿yn:3 6AUlg)!?%?lFL÷ ytRW&r"j b5ԒVHXX -{clnl'`=דqGmM0zCG}oU1b 'XxKƏ%~&)[ؕ+M<֤8%;VfƝƭR=KXb"*< b(zlˇ Џ"' k1 YOPgf~<dO!;1jw'ly zx簉ËG85Yv.+hFR!4,0P?ڽ`u 4s|EF}rh5}:xT ͼ ;NMA՘Yv)Z4Hi^vj DSj.>רZWK"s3]7oKM7#c}?_ BZO{ae̟DrL2k*>.A6N$,Bjׯvf`Izjg!;\4ҿ;;pȰD ,R1`&F }.+\4vprg{ L S $vsGy O<.L+nsM&CNmhDs :0~jaѪ>+,(Թ|Zdj#2( [ZT&iF'3E#В^bq$U V(fBDZ8r?9 DYcp}Z:ʉRV2+H=ۛ_=˥q2"/#%kWoB߻GvlY{>a+XA0O 5 5Ǹ^@܉D֣);o^L N9v~e菊(Zf^B4߽j x6@=ug0!ơ`MR*h3)kZΰmN&vohBz~preaI:BgCˑ ,?6"V~KNidey0[et._ak!uo j*?)K8KcSIqwj@תhd'4Mu_V=h\Ǣo&QF]..!क़ j2.GȖQ>o ɲ|ɠVssxLD%raJ2J^S"䣎ɱD-75FYo9hD ^XhnuDdZ05)t"G*@8m󝡛OT&^EY^!\Ҩ`.!Zб"*X%=XQ]LN\rB =+F<5Dg(Xu3$EcԀ]U8A ]Q(ǿ]uTC,nv6wE5& 뛟 *hzδQh`_Jٍ83#2F  ᅳjmʂklτ $ aa_>o=}Bs+ tXZV9f ? Kd0lݼB\#E_}-`RH̓)C3/_ ++xS.dq)YީΥUY, q?-h媢ۄP^K/y,_IMۛrUf@*~eB.ր9A* xGf>M;$-!SC^(xeڨBpU]ﰮ@V#5].M A'w};#u }i'.aauBLٴu݅ ;mddm#wcP[oa`cLK3LbGyF1Tf]].n+{]#r626/OnlYf k'U1JFcNr˘6T6Ӛfxqu+?ǖ[>d5=:b?T̸{:n o'A?^hTa0fhL,̖#aM1P t6G <;<ߍEQMSy+okt曂\2ۨ Ëiw v/AˮFqa! AˊW?^6k'd1SxWC9ݱr];Ld|,=GVp ɝb}koGկĥ۫f2W+E垿 n o/^?.K@ggmv"SS~Dʌu>V$>8k[O3Tl<$ N?Il糕Xɐ5R~^QGkM6z*[g80%:w-U%ʄyw9a!SPij\ЋHA҇M⎥H'^"'9,m8<#St(W+X2C3xXЀ wr+#qY/NjEŒF I $hh2e@sGH_X!Մ`"kI5YL4Z#f|=1CЯd=Ԩ aƠ~GɄJd~&MɚeԝF.AG)Je^ x B;(%PO[<#LE.>N6#j$>kHyS4yf~nwlEAw:[jx0eV\r~j:+bRE ҌO*eeˤ 889˿ ) hlxg0Xߩl˪7鐥[OGf(VwoZo"2SWI{5+{!1P&ҀX'i 77ҶUƄgq\'--1i;@a2eZ hЭ0Êo؅E^ :l ghH{EJQD563V />3OO_uWhoOڎf_>v/g5u] =7,=Z%.swSQFKfk+eJ4p4UW"GԢYb?&#>{ 7`Hx$뉔\}E6\W xG.<8)"k+G6P;r?^kG!DqA?@SL'/rbP\{UU6gzzw:OѯNs'wWY\5R x s%S۹-϶XlNBg*>3I<NnvlHy@x/5YQyJr-l@ՓFi9$eFI[0|:& xwE:5$!ZϬU5ᎎ..Hm}C~DhKQt"J2 qG}U=MW×Q¸A[< rpXgbtv |jA bQ*2~w*tIri+JpKeZyb4J>=0 xVxLa!i.B OIڜȣbEW|3őTm,m:&4D,l N&eȲ(SWT8LN, SIׄ3ևdEB@{Yi/eKkhCZ DŠ:[: C jqP I('b|7p^:wuZ,wߧ}rJ*%׉(\QnjmD1K% AAh'ǯ?Rrx+!}FslglT 1r(,]!;a^_Y}y &/'}1(!uCkk_N:V/vq%(_e>۵#gFX_k iIn}ʈMW.#=d$dΩ9C>qkAF#rM vϙp&DHOp;o?S !Q͙7c+ 9O8f ʖ7CӹbOSd_@&-[eKH{$XRdP^^}v?`x|C8>-٩p]ΫoaGHtª nPj&47d7Wt/|+ACy09G[Es!S8 kvnjz"8 a<әseAɗI`2X i2*Qy{IЗ+.ngd5K*mC2` tpBiuGpT @ 9OI!]KM Q38ʴ/.Xғʳ!lAܪ\r}1$3vLs&A3S6Y~Z3^a.i8$i /m߁ɿZй\(5EIԣcFN#4 ]<"Ņ0|,`UO;K亳6ث/fSA {&:)e ԊCחCd9 ..o ugec^f !{}O5 VJ~exьʝA6tJte!EJW;G*.s6:q>_{XdfgAI.dws3>Vx+ṷɡzk1ZUCGբ oY(١8ҙp2wra2ہvLH&U-M E At `~FN%T*ܵȑݐzb}OC|J:S»B$xw OD?CŬUl.¯69w?rm,Y"Nf;xu*_iPN ڨ'{gn"1an ).JcF-I>F,!•i6vAX9 /,ik1W[Hd%y>NY";t}.ߞ0)a𥵷8[Taf`5"jwxaFN 9P6;ۦ{I_u98^Bs.ȓo^k?RԀhpՁn)eu 0Xku렺kwPrXARoxwaY鎘6t߄z1JRpFr 3UaZv/%ɕ7mYVEa~O ?]0TIQڶ6cO@p s`4e}@!q+_2|qCzt.xUHY'˒TP7#י)+zd]}Rǎp*Bop7%n2Dl`~`;2ˆ3Rf4 7PyS'0]߰2ؼ풱z$oB~¿5+Pn= ,{vX7m I (ѣ~>.Ih' /^H>:_9 YYd搗aC_ճ -•yrvɖHKӷd[áD|=jcx%-X!!}sKn@%e4+PՆ$b1^2qgeE։\1G(D% S"MEc|2<)f@hJQoRC{Bp\ws.p cudUI^/΅h,[H_ H^aX I`yP器,П(au~ЇzŎ <J{ll*J23*O`p!'I/R2k}^A'Zxk^>\DcW߉cL+oÒ*tOI{>k黝I YFjȣ!;g܋0;`n51o78_[ꌫb8H5@s̆yF23M/y$TT>7YDvc*9rOZ~umk$cs:^OY[veD);BLUd4gOtC *"X"&rmOeU|ԋGPKB!rfǂÕտ!L*F{LȴnP [Qd)M0$@+6&EˉM[H0k{Áu#LCԧgN;5Lol~",` ?WimU(id=ySԘ>@P,}{w`1ZENpSZonP+)νk*Fŋ {<  evAwTKC!Pq2;*f_6C"1iP4{ss>_5xuȟb @nOJ>y"j8d K'qQwSr#rBCIy\ͭ2EwA>a4N;҄CAUxgX>xHhjgv]*N.$\.1 H^~me#eQTՅ?b=h& whnO:<; G rfKcrO}PlP/zD~lK1ŧɐ2fDjobP96w-sDb?;C~N@$|Zq/@ Utu]p8N8%L(Ѻ?hsjYVTQPxd V ϧL?c6\7&6>7=)H4^z\b 7% Ik\rMu+\;otT@tO#x`w4ŠxC$:ma6Ńf@ _T㫸9c+K2\ΕmTt4Xt"\].Ld3uP+Bcґ9Q10"il*}=Iq1@ZDx9WE4cA(`0 s ;_M윌_Fؤ,ņ @fTH|AHŦI@xo<׷ $ޭIO9vv㌰6J(R Bb[̵C~q`&g{ΊH{(dzO*\uހ_;2YwE,7EtБ5;"±ꊮ5ڠCm:wߋ8LcڸDĀ|ʸ}Na(pzuBu\-㈥d T_Bϰs/mF 4,FwI/ƈxn]M w]5_n%-&] (] ’ր}+~ plУҖ;S_񬮭dr6 ܆s~vlh  n< 䇢/[j8,7Y&CLMukHץ_X ѡe9Im ޾=-@x湽t?{ oQ{פR*͉#RZM> +[dm_bq'IT;^H֑OZl3ΰZp8>VÏ^tvhH 3wIoSI(RsyHX""zOI9Y䄳4QڸtNYoKo}h7dغV JǍ暻*B@Qce**~"X)! i&x3G `mӌ'WUqaKSRV KÙ0a#79+Ps|1'emoͪjJ@ Xu򳓭J.x9bH,`G atmwa`OCEa!TOU"nz]_ï7p`ٕ|us O*`yef2>!d 5Ln;GN&r%܅rfpv :MC"isۗ́Yj [ KzHa͗~fWoqPZkHUlf`[uLg9"pK*\9k- z8MӲFsbߊ~:27npCv7 :VeխDiᳱ7yW3B$bb@t4|f1e )qC#G6$JOWϭuLvWD<)xǶ=,-=sJLBRHHiNn|? I1C.eiНB߳`Ȗ@x豼X5=KwRhAZhD[OV*+2h$]8fU6[EzK9 Z_U韜01С;fA^îw tc,.5ttqُKjo.ו+NY_5S? e_F*lUM7 0B>=|].χ錰[qo'pg(U3;34 3m*itb+;É~B(spm{ rNj؊4 ch m66knЅr5yU9o?v%Y4c̝L,nb7H>^F:f.%5*;jMk6,iޅ\|\=&LGi#DˎCmi4y%ur dSrM1z+HW&Rx6X5hKz(2ԀZߓǐz;!d ֟›-&i#XNVyB,ۿ+)f#~HhO*H 83M'(~ŀܩ1Zo6`eW`-72N@0DZ,wj \s5;P{~hd]=`=ӱxO/ br#FB;,oRZ]Ai-ϗrc0Q1bN $~#sisX$^{B1t>_e]_SB:6go[{kq %c"/8j)@4,D; 6!7ǷS9"y{#/Ș|!z7vjtEH#lpk%!uP8K_?οPY jc"bN{4Ȯc=t}Ic]2_;c+\x$V͔ yI^ g&qVn-t(PQeX MJ.<<u"'k Ctz"'C{ `s9"2SU>fv( _I7Od#zj\CJLa-cQ '3ݠGs?6d.kq gr!e'|0m>ɱ ee$G(q)ّ}=J\&N9 j\1q6wLF2r00`zRg1Fd+GL ϱ؂U1$G1;U0՚NkmWq49sO0pȖ7lf$Em͹%f2$ǒSN;2͕#<KF'!t몰fu?dZoRpJ^w7Ŭ4sDM*}mdijuԬHZjrE3 Ƞخa) F咓QmQa&w=8xiu4VC]3WD&@+HSdֿI&ςN_ ݌Yȥʼn l=A PIXFj0E2;`cX\=tU>` 3nԍeJ_hنڭlp@"P={WY!}B_VյϲF`j;g؋R17, [=6FZ 16 - iDkez_%2S1pȠ# ,\)QuHMGa L R'móh_VJ{fw~nc[{aNJjA釉 *)ZrmmxDoj#cY`2Ce,UD~lڀx#*핰&[RfwtLKdX%ѷ}3NrJؖ\X j,czԋ_kX Ÿ4dyӯt@L)Hƫ$!cᤠ!jǐ0=.aEa#F ȋ!)$=Y,i?Kt%HS)/au@ۦ>{܅:$ۿ7.+v:-<su~ MW *R +hfKC+K@kiw:GcqZ8KXFo8Y 5vo |jI;mf-^TdPcCz), #qBY1`Ѝ%0VŽB?tqĝ.-dEȿ:c6[Yn1UEA@U;n(ҮjTx\,tg2(׿xB U`1nF+ndZ\O(ߎ_R>Ec67c3UB;$E;g~Η/8XMx, TϿqL3GFI8ȉ[t徠;Io}l^beȹi|h`dDFfd4lZgu FO"ڴ.e0ucn+|x{w5 3rUmN ?օC/}e[WjF;- ПwTl!]?ZrEӽG@:0KLF@b tX/J5_tT|M>#̅$-Q&l[-['hܴ?auRrk\M"t|tvfB'7d̀ZbT*,-^|€3ڧ"Jm2_>F|Œ1jwC[kI|/\ck91 DI=` a)1BF!:I[zQPDB\oN}g? >ZŘ"}٧Q!`b%bS guO}mp mei]{Lv0$;O *V3풎c$/Of kN5ձW 3 Iw(E\ArEDMo\UIF~ļzl$mꎨ&j#nJd=ȒprʘE`nS!Kߏ"jdFSʊB"NFCA-*{uAY81h tTx\>'NltђH4b jxj?JO//p(a? z/ WkϵEPّ_?>9'\zc)~Qxl_4D!-`;z $la]tr F3͌ƳpbSǩ'#dث0UqXdNtffB wǦ+josk2=e&/} _AqךoK~$5i#VPg 00KsӸhiշAgΌų\ L8=P"fFg35vv&%fD:h@~8^]]7 ưPΥb` Zګ"z$ *eKb38֥ցq I;jsænGU B֌-RlטvANJ]k=sSn@=&4nv~hWR(DVe:mx[Vn;4 uww`&;3v%ʓQhAPO{y\Dlo7
mkppw\W 7Un7Î`|o5GK[[{plJ@ 3%dZ942.-艠RE;tIc衆{{<`]#eԸ5I SM]=Y(WrQ{U:$->@pqNBlD8\oJϾ^vbBԿ@jYEɗ|0I pZSj|p歹Ձ '?{zJc!6xYyn ^VmmPGa!_?q"^.fC|̓rjKQeb@&2į{];&VМ H蜠r~cifs ꩧfCSj㩞|;~ߵMÈz1[]9ҋ ^ dvzpֻ( ;"r -A3NuŨ.+æQd>ZUy$nSECZR1)?jYfR{R jiX&tl*\{$bR(~><3j_,zUP7 8CW~&pnS0'}q u7!Z ,hyDi5 WYp "&fI`D݁JgM5VA0Xܶ{y9䖣HkV6 I63z@d(a+Ni 16 p{ZxƐ P N=GQ÷ťa|!JX]@;y6D%971XZ]f=L;gˁPx;cсPO0/o9a+Ȕ5ۻ 5޻C_:8hlBu0Kعy8ZT\}#pf?*{؟. [vJo%wf )i))܇ih3bntR+JE `'手8X:۫XK38T/` KwѾ:Q =$=8QH !݇RA_Р 'Q6pb d~4APz/w8d7$vyPj m`LQ#d3 H/|iwFϹ)H0p ҇[\c9vh5Y*-[f!ЮWU;p"W*/;51g `$pjZQ]2é~`S,i;Px_ Lsu΃%eCHw&qkLqT1d ϙ)oZbٸ66ω/RVayV;[b3PB |@$éK8i opv>CaX#*44 TB!!;WJS3`[Mis8阫bkWaEB:ūnorR1r>^oA>&K 7c|€ 5h1nAtγ]$'v+U:/@Q<ʺC8y44ۋ ]Wz}ḅƟs?m`Vi0]5$?blO!IK]1}:;,ouyF9JZcWl KV6LE' [_gP"Z w33 *!lS[uC"ϐzw0?+;`2?\qx \7m361$Zqf+ ~z1:X+bd!]r*1zUG$gUM m\Y>3 /)뗿 2Ugd[QS4`IpQ)Ã#5}^-<^ѳ|;W_NGRG)(Tߥ/P w`u NԞBx_mޅާY hcq* [EՎTݧn5j27+ jSB+?p%_V3) q x;E iHP&+yhb%EwzꗢC+SJn'ؖ$?f͕v Jcq"oXt3 9P8! ]ikRb*DbY\R ĝc+3ж9VH!7n`?}َ~TAuԾ]/&znen>64. `ζF{ɋr(~i#\?S,$c.+<},Ѓ#IR` K"\M7vr`H@_})`0FݚZ*!{AlwF0ӘjIP%ra)iddHU*|hoAbݿZHTǡ&F;3oI 8~' i^ %H5޿рdyfi:Jju1Wm3\Цs w\kN w^AH'K 瘯,((a"y|p<3m_כZ;qp~f8esq#3唌ab:+"7,}nZx0U ؊vrQEW7r={GS0:Zq4wX%v>ЇbEm˯]+& g#@et:SfzXb7hP8eg9>g"9m4ȤtyQ1h,uu^ `Ѹ>L[.b0Wk[i}iQ&& jOd92^WfbK7h[}`?LКSge4܆&zT䯰ٍn"!dUv(йb.( @<矕ƪpϔ\F,VcTm@0|A(Oq*P0Jkxl]TK4%xXX>l]s8P :n! ;mr$J-)&Uˊ&c)D5d@yOs/T*Pˌ^o9?%h[ݏy_[Mb ~FdP$$zj?ap&:f69nT)]+?oα16<{8`7'.Y۝7‹UĔϫP}‡W׼G9Ȫ寪n[Y5z!d K˭yRvI<:`gi&m=ȽSOk+NU7%۶9JhK%u2,Hz1 9T=z[ >A]S@$軇}(CsGZjُM R~~ vZ[JggWO~hOS/F[g!huMΓX]<5eʦAm%,ˏkb@ xER!{g:/3!gbα2,;`//vؘZ-&_`P:nivUqoCCwWGJqw5jS;)v!ҿDL]o"]P}:K2LMwH37jgKD?Ī5 (DuC 9~.խD>ZA2qc9UR3 w*+ŞkɗI} kt:' 6fܐxJdckZqO?}Hw]s2G]@Ɂ_o7࡛]ԳϴC, _''+[ƛGO,k95ߥw]m<ʌ6cۭbDӹ!xUMu૜z%r @R) .H!B]x8C\v~^[ eKv-.(B'kWOArns?/9Ck[$ى#nR7=gՕm uވ~P&0\{5w qJd~KK;kj16pC9Y[70'`< 2\l_mvvF,g\>`fh~V~;>D\wmY_{C-lm s1Ҹ}L\.>n3a>sЦ7O.xG i` PJG])4Go%P2{6f8j4D,'ĘڍK.3/;pW ;ɞ譆OBLNG)8Uq}M y5/Of:OA(CُZ&z}j2IfZHHA J Z /ȢI8a_Ӫ'/F-tq2c[\bŝuw5Ra u7 mRǧOc~zqp ?à=Á"IRtQ5`4}٥iwѶqNni@G]kþ? 4,=E"pY6\s=uj!3O=]SQx[X|veCh@'269x!1U])ԋ^ &6 Ap(qCH' 1#/]|`ISiz!fI&M&sşHrTL(,̴lAy(oM;qq(pB9 @zXQ]Q0ŭ%s3>ګlSY(T8D4! tل~+MV$CU|s fw)b[>r<•]Gȝʟ`\]r{eDhd'zad*𛪥7R1>ͺyO&r7M']},r9Hu9kdF@|.jY,ќ HGu`!kBmɖ[Cr`nK/!_νA^e|Pn ďE2Auks5z`~#|"fro\|;)+'c I>B^Xe8F/ . ɘ]~VV,| %;ew]sc.*mLX*lj/הAh+Ulye_` w?y"I*8jMm{/Ce:JG"?υOLr~8`rj+w&gjF?ּhR#}1=dy]m`F,bzNPׄeugh:yE|$T1ha昉%s 4d| " &~G!)+\x;H<9 HBM*~0FH0 =9*EB\xS$"هX)wfu%>!ƈ5SKާYxE kKsٕz%W!oiTZLaԣR29i'3RPw. CNz?K4l :lGC׋[ ֆG&UdM#_k P#''VV*qHR| \RnB0 1/3qŇ(˃J$ @KKO~T\Z~D]x[!CcV Q}+ro ZQ$y= Z8>jng ҂-Ր={LnN]S*^(U?4z|sÚ¦`Re5fEX8&xS~BmwY&cQ|-H8鯺ىvkL;;3A]v.@h? bG5\5_ ZV<9v9v <<8l4oOˏBT#>I՚+?4&HEΒQm̆R14]dCB0h|(q4 'T-{!d1h\ˡ7C[x< K3&e).uR!=Η{N߲&V( X ճKX0(=!ɴ⒛xeTAwY2(*`1@)9ɰ;S`$vn/gsIccnS:;4e?Nп}z tG\Nπ&1j|ָ_Kc!;gofO5d+.\'Ɍ >%oOW6 wA3s*{P%5wNx&6ѭPžBjKB=7ҿͺM0c8E)'25; aE8jt;*B|ʰ7 .HRk=grQv&fl;=K(ڈ䭋 IL<>3㑘eam8ŧ RdQL~Pj)\.6sG$,25iYȣyĶWY/!ND.hsxVr;4'+<~{! ٚIC^- oC-^l@xuaXT"{ENAڞы)v{G s38ְ-ķ:^ f\z,' `gq6)]^wI;ybtحJyDxP.r\* w}f:>gwg֘ǫ ,4+][>|1X*SBa.x=Wjj{"QY0 +wKf^>~_7ȹAZw ݊'wP)~^\ rJ\àBe/ @Iqg/S,4UjSrp>B{@CiPUԢѶiC">-h9' -*-ǜj.X0,͜ԛUsd*$@ffHa쵷}k"0@Ic !nvZѺơ"7|14-OlZLK~-f]WzPe+Y3MDnsO&xL%7jW7xF)Er+B?Gm`pa)2yϭne3jg u^ME=9`Fu}DrpBO[PR<`a) JDvs}ʆOx$*ćOޔRIze]0xƖw'Go֤XްYm0-|K hD}ߎf^!v*(9v6y2lIt۶cg7`EO|Br00Cvt%?}OBXF{{+׹|,/86X qhCYSɌۿ5inƫpřcO&SD1Hؿׂ-oR'@` ,&?<-.S5i?\N͗ NLΙ=TA(;n|f,ixR; k`c^5)Ry1wpͷ/WA*Pve8R?fP`7s=ȺVr#)򌺂X;nhk7"٢걦pɜ'NeaY¥3Q !0nΑOYpOOO^S󈹥s6|=DOn/dE-!"EpQv%N,FmfR~a>( TLkA)?ʄIr9)x:PMu,1?+SU{+!壐1_ ,\*ƏfљH $H]V`/ٙE]%eTrgpbgG0iuM.Z*gA'`˹KKPm)aj*|GmH)3Kѱ ࠴X:.`.<\0Nw&95D NrF8sve/ q z8UE`wnQT=DJ{CwpԸ_o513o{O^eA`'Zv`ɞUgWp@n,㾜{} wk)3s29g+IPC![X9\F9T^=%+`:DoyFǓdrOb0"N $-HjM\u,YQgoŬYcsjd@#Љg_qn>g2ZLz@qÐħCLߜĕI"0`ѝ|=}x!;`%u9z\ĊϕvDF #^̐ߠᕘ(Ψ7N5Pr Ͷ|VoC+K`*n}.T)HFFj,< 7!eI* c3h ϵTYI&zQa(SQ{:,Ϸw^!Jzp9[2+c>K},r 3فg6 0!D^,7hN OsUv|F=;t(W:怤 chNvg7Ȳ$k(Y+{|i1j^"JYt}.a~Yjgl!zV#zƑ$qj_ ^ ~тU u AAo˘UMW^ΏF;kioFCu_#\ 䀓Hy~5|˕ZM"݇OW,Gst_U .uKY-7$P74:Moż6;ߔvvO=%m*7{x=v `lȬ!5cv6Mo5S@ g(X(wdU=%],-+x9Tj *VujGKг-$]eq:XGW_92Yh"6*"82[nW"2cp;]A;FQ 3H9]~TV¦_\XXy9Iʭ[A=eQX,-ԮG%6[sFc9rTh%\G~ARޘ$ї ԍGVWES9 EanqDr2d?Drn۸*N--#tK]EX`p#[};|u 3>k$Eɹq6I'85⌚*(-֧N 2SG4:wUK+aЍ*7ZMI=]&e/Ԇ֟gAb o LkV9c%ish1tygTKN4\P@CW{XG 5õܓ/4W<\]+M$g5԰?f𥯼]ꕵ6PJ3ǘ63}ܔ{GJ[ۊ"ݍmaF?xH9'+]6 O4[qmOb5Љ(/w*W.h0^)ji˜`I%c0!țxw}:c!.(3(lUSO# V.7|lǹ miĕ-piay DK?@@7p[S^&5Mz|}Ǩ6C݈; !WEy lڼ?q"sd^ĢW(3+2|e `bE7bR7"gO\J.!;5R)9kc95RqrEe"]$MZ[7)WGH<SBON`0%GdU昈z1+; o; Q:p .C3GTbI xoxxʻ08?ǭLE=M.4fOx挋}Q 9آblWSӤR{3q;+[^+P[/%w8O6oP?_60)S\K=tiͶhb2[~bNSG0\Q( d1Sus*Tl2 q`/vZ4#U8*U4K!lyLUBu0d>mq n\Bt!C%+ =!6U辰WlCq ԲpEs63Ң(3:)_XN3+2h`QWB m!R箝M#8!RTPmU( k!c( 956҃3VAylgU@yM gmhGW13atgRt$hlð; IكNlJ~Oj/?qR&f߫4]N^^%Yd4VEQRPJ7SvM JlyGm{>PmXSf5%[m@` CTKk{ υ\V -;!+iWp?m䰽^n(lah0 Lj=/Q隈KC҅Pn=+eD:wӯQv?`q>ݛ\mփTJMDT:l%8Rp Z~$h˺]! Pc Cqm?&7R2».iƐf_w} xM=tY1$^e36+N|J"+>L1-RSǑ{]TpvHuNjc2%E DT)dS@֞ 3Do5/&v3bDŌ' ժ‘EʴkhTZ*, :|uPR]H|eS 92d{Y/yX^HBW(ƎZ:& &$n_~-Pl7m6Ǽ n9>lKSY)b *Ct#ΥaM@bz˞G*R.̮)o1S!y=wc[P9} =d֝[1(~uun. e'+rű&7}gنp" -BKl+'gc+uV20|{?y@0\9Ϧe}'5̞ʞ7͢ТZ<]7VIȉOFl×+D.9Sa":pi$u5w}q/jGaOknwb!\!IbA,/), 2G*YS3M[9xPNHdKz ED_$mIxy\K3_wY!fPOZ+̞GW ^Z"ǵuw5 b߄ "-õa0)=s0ř]J ޳Y~gr]fm>^*U)ҙ',=^!3e&Pk:4y~3*.<)ЁT auT:wcp4nHT*'d5oo):O4 2̨]沣yU:zxwl O3Ry_kP??~/:[\$Wf4VpIbT9 j!xKk`7QD†&:yIĦIO$!J2con3h}P7yj*[pyQ;tG9D(s Yk]q'߶ىDt*V:^U(/Q1Rh,c@8;\#)}. W&48\@r=aq0/Rr㋢i2,%puAf/W/* Z8;\U[1ًbmp25񺚴tj#fBҡp:pz>̅FޛP1jiKwNmj7(ҫA 翦15 NKЦlKgm`J|#PUw:?ylr"SCU;<2-'^ZGlO=~5]V{4?Y*k0cTy iY#ĠvƲ]z̈gq\H8`"G=\W Cv7(0ro Ėa-O+7gORabȈØN=mMH( =E0h>4F 2X^vZZM(;{IrܾK-k%}9kҫyf3ch ]} LBsYukr&6*dQ _dT%ׂpZh:R2]NCxen FPzGp־5ruۅ E\.8*hGY<ܞ\v&coOb '21, UͶOH:Ue!yd܁i`cTQ7=8y!@-T]}1P5N~@l(J(͉ OzKuiuD4ITrZx 2HKe$I1c~ SOc*2E񂖒@7Ai!yN{ kJ#/[P]A8!2ߪ.yUtpdCN)C*b Yl#f>$c?rNWqFͤ*oL| -:fw];c>n[wOnY'RQ# r튛R, d)v`˅bHpiRI:7'%SH Pzej>'d޾L.zؤX{Dz} ߩ "a`uN q.WP+$"Hx3_[;qw-m:qoX,mSK̈|k3Tҝ_y+p8IBLw֑SHU]Y=?aԍK6 ;|< ~ }k`:修fU>NjAa{L)|K_4D;H850+\ȯ:t ,a|Nk56x8cBZөIg:o8o ,̐5XVа8ZqOq7H,^Dp> Dٍ3r$Ej:Ԣy7`5`2@_v%)Ia=27XGN 鈅gKlJg=sѐ, nIN7˲VUʜ8PGr^Df{N!p'@W@FƠ*HYHd[VȁGA~%D ,d?!=  ;A'Z~BW:+nD\AxgzLQY:* 1Bo(~g9O˗3Hቃ=;i ܾ޸:KiS¢'f (?3 Ub?HXyH^dFPf-ͫe=Dl= d*P WZ}Tzw232ЌG.ͤYUp@Qx{PYu %tkhv!@٪Wּ >B R=a6"*#yO@)j Qɨبmjrؐ|L~3:IJ+s9 \DұI__wJ,V'S 5;j栩pn÷q%쁣z|g[ٲ͗oK vDn$UV*gȅK~FM3_Y\P5@l-?^bzBߜR>ܪ-{E"'r@4tvo8`IUտ^_uy#Ge"`r Lnbq͵aJHTݬԙ9-ڙ$%FPT]%+'<$_tP`[pRC֍_:ë NAe-}m"^iR2 f y)A#i@w *eiލ6kMFJ.nX&E.*$fBSWZ ~~`nY7ψ'|Up5q(C 8^öY`\Mc 9EYKERg1*^+E4pj(/'\]7* gVH0BUK_ISY:N=l'>qқ(-}Yb'ޘsw'}Lw;W8=Uÿ-`洤 ږLGՠPř I6V8`PPXcΘ&hH4.ka/5˶sb"OB{HuӶ5TOGC/cZard3VD:p*`08f&Y[?X FJ5wvEHKNr!8}# ` 2NƀB$lObi[qJNK7hзbT* CH<fwYK0 ov4ؘviki;jk6'.GkMS 7ɴ%Zo@1󚁇v3rF: /]UnENAjMP:Gij[M피2T<81_DӨ TDJNG?`?o~vo)ql\ͽ5]wnLcv}D(~(#cmjxQg=u@I4ˤqYaefG+T `Ї ]Ӎh=CFa~YYaSԡ_wٸekyЯJJ``og/ O;QJ$iшX0~;CQ2-1cE}Œ|q=N >{TlȡyGOZg n;[0>=[n[:QIPU.Ȣ;p!,};){2׿{qÚ()B4H⸴yMv;)|S)Po}aTF7S !dW $Nʤ1zǿ?db4 V\4y{~:~嗍qޕsbwGgqmHSc.b#˔#v}D(dDbri@p|&=Ra 6=m,ѭPcGYӧZ6 qTa/T%̠<鏪Y_ [fyj1q:vSYݘLJ4AъcW_i;Vl4 ľ<%?b{Bqonm>p&1?~)Jf`:%Ckb֟䠐.Pƞ "sEzZoadM*gQ9jѰ1ԧ]*T`pD/q6p۳_OrW2.|wax+lQP¡[k?e<ׄ/in"1#e_!WPsB%_:>qA:?%Plf2>:-RY4郡-lp|BWܠĶcb%<W? i4en7U=Ǻ,Mzf#fJv WP X :IAS+k>[4z Ƨ P0\ [еgE-k] qYmO# ~FhI3tu}{s5IۗPej(Ϸ̀Z~6t!7̟P:4P^K|Gpޜ"_0X)א사_ ݚCR|fRF8Eٗ_B6I ! 34>{yvQ?5 ̴EAa 5Q9)밢kKsbG5f >*MЫO^7W2@% }&K2%h7X?eX\-fp\WðOz- ^4Z7{PQ&JgHٹ$}IG _ oIbX.!+f j+ڈ" 6X%`?`z;lf C>X Ry3~CW@ut)MF*2?~8b#i.u꟨p!%zg_I AN)SiP1DR">꠯6{7*ԌMb=H(6=c ˮTc}JekTEJVTd`2D fs&mTJ^L ll[^BcF$ &5b?,ʮF`ŗf~bbXIWy{f枈ln}@ϟ ?B-&ظtu%lWmDkH~, JuH _,O9q;!W9-ڃ=/FQhi&QW >|ն&*zG_ 4:۽wikEIoIaA#1O#8V!L?϶CwoߐDJv!? d&paդnF߆HOYY=t=`[E_ ͪ+!d'=1ƭlpM@PJ6e5h8@vEiщD8 h(\dxFCOf'"LoLtÇ_N%4A >M4gWƆ:= g.b]:5,I3iT u1jnk#(‚g 2ZS󸜌_UQ?[pBu }#d%aζtZle4_ FFBQ k=|7 =FHR?2wWV e~ɅՉ ")I6K{ 2fzSQ&E"+&ٱŮ>&uKbŴ)^ǻ0?RA<6vdU l#> >^M4̷~S]'/nǹw(>hDkBAĔ˶V&@)I^<ΘEu(Qp|kMDJg˳?p\v6i7Z>V-ڴ?V  5뇙M@Y$)$ wjJK V5-pc0l(jA=6KhiEŔ<5mJ$W&Hx9T3W \6Aic [һsy~vSQÊ 19$tC`qabTfO4SaDye茭aE (ܯU=u&=\9~8x G:Nݖhj4v8Ԫ{I2_lEɉ'fɉɲ:*V̇!󴷼yI1b۽j18!A4Ң=oeŒi:]arv={~z 3 T8mH1qoNEUE);B>Ր"[wv kT=[5ϑ,LsX)rca[IݡWoE ʠـ#(Vh,Yē~k-2/ a$ada鐗xOW@Vp)}"ĺD,F[[# DpLш"ZGܱ6K>5~UTȫ8GWW@)$r88>[}ɱb4q՛ؤq3fb+de 8/8(39jKz$679X?s)HAϞrO5GGhH?P< Ko?"M;&4{>rPCtɛ̲_hbƌhchhPybMyic_UQ]V1夋vTCq%QrN`4}@l&1α'](|Qj+zx!z dB, ]>5eh//eYP~erɟdQOzHJd¢WLd}HBqݶ,EȦ!Wc*#N~ O> $mORx,mڱ8L 81=F6}sg&(͏]KI2Hf #p-$Wmr,+auE+!i\%G%qw ex7mxgbLRRR//_M$m Rb̟tIdcG"#I"KBvJ<9ɭk"GMcUHC"Q =l:T2)$޼9bf&9f5 qHZA gmG$Z.= I#j023=i #pC=j`|0- QT!M"S_?]zr53aзh[۫^y-_@ЩX{״MIEG{y_WnPQXտAvF.CH7VRV$x}ZG4ϰ=.f!ee+]a̍xO[;\a0Oo y6; Wb0hc10)'xP F}[_7^+WmD1:cuRv(r^sN SgF1 BTDmO8 `Im1"gqcv.N+v\W7EltV{߀EuGTOuQip 1{)#SU >;1Ði㣽*:Iʔ^aTUIW'^4ysD}HUeLxQܯnBi}ffeipϡD_ɀ8rMCys,W/=p} g -6i&(OpV-26&QyjJ@/e%ɽjl`0H~9EaoZB ;vnU'E7+u% xՙJI>t{ꇒS-2mY9,SeT0YRE!3W,"&x*L\^xVByZ+"Viw8FޫVxkVH,[p #_ecal RSRs:G!Jz@LjmP}CB 8N2ܠBL兠eS3f`1/…`*1kk%7ٔw L‰8P׸f@hǠTh¥+ 15 TWTz !ζ^nB;w͊t܁}R}9i2e);֔b"-BI;{^KP L ;_ eLl4)xGnΥ.64T %ɔ ΢quPU 4weMtZ\4 G&=؉jUyF{V1_|ڈ,gתS0ۥdoxjQ툫Oؓ QKI9U]i ,yxYnn$b7rov v`#VOFgq}ŮfsTz#%㙎UZqD [uzq鳺?>:] gO$`|.ȸ/BcSP=Xl.H~ #Ơ!~1;m:/JL`}y=)krvOW?{iynբvh굝'?_W4?&tg3e6zP i&h`ɇh%<0@ƍ*,RBzaҖ e1S]}Z\#͗hVuP\zQ~-w+T(Lc,DiGb,I+X&!>߇: UЄV3ÙjP|6l@Y,ЈL94'KY O,xɉ=Tcs;Sqo+:5*JutwAU 26`Q<4%D8PkΌͮEx8Rs;*Ӡ9LkRD;)z~ObP%LhE~wi{NxJ&/dv w ?,0?-;{w+ngʐpS9{.l(P>$"5:r~YxNޠI\1yDRD*rtRdԳ-Ux = SJb)zdJ,TX[ܑ ~1iY aYF,:1BМqek>ˣ*`S(HFKU,`sHg$_XmjwHvE\noFU-OEX?wv1];$] -W.E].#z#={Ҍ i<dž-Riئ?3m}Q@iyZVn+OP nr>')`2 m5pS-\{-Bf}zgЫk+x'ǻpÄj$m.*G똍ޞCFOEN\gNm{_MOkvFVQ{^ Ӷ2E2-kemX:!c V"ю-ԧ0ܷk3珶~! [N笂l_CVX*%װ$ A[aKEG]2.dq=4> R' 5,;& pq_főjr@1W؜ &(F-Rq L6֑ ivZjſ80*9*0*A(ʕSs;{BU##a= @n:#k~ve?nD|آƮ`]d'[L>npeT$*~s&t2e @-ٰ$e$j[F"B5+WJ:F^ٶٻyA[^0"bOdFkܴ|жcGOf:k+O:ʷU!!@&;ĬwɩsKq"#KZMy`Ձ𨛎+gJK g¶h~%7U:|$RT8x~ I/#u(Z-Hq?@nQ>a?u j+`Tܵp,x N ) A_bk>p|X=<"vCЋIjF ҄On;mI*6Qt"?b)@[g]m 哹?wGCzTL]Pۖ'e!v^WJD y~Hʗ2ג#1{#.ZH4jqNlJ6_P r7QQqO(DP7eo'Uh\s&Es5K')LN\e5j5!)2 ܼ6glr˼¼V-sTHf1sR#ӊ>%PN]vd ]!ydMl8X-b~PTñЧ5d֐lIhj$h[;-`%HZ GWػm6^)_hYm/_6B[mWxŁ`;`L d_9 ;clk)QeU )rB ur@A11w #:$#_x. vtt)D5,Pמ4摓tl:gm+6rsFL!XI%n%$zy 9-'f!k3β&fTӘ0O?a@#7J6ߋ8nB}~ 4;^zݫxTz5R'uXͽ9tHf0+%1W==TӸV,_H/Wٞ!eŰ }}\\7{*!E>|L6颫NKzA&IC8[DzVGJ; YTJG9UD+V$﬇nGQßt`F]4}+f[]|?*@F rqi=e$Z;l"ŖqE5=O[JkQu* D38"o N-rVSto0#!%b_rrh*0Bdvi'*ULzwDNHwwSEݽ/!c\짨v˓JӅ1JN SRZOvMO dh \ǁr;[:sbV+V>;;mW^L?kt0ac3[sHA~;/cVi]Pw28P M[P=K;﯑-"$$m:CiuB\46D۲Ph'L}pJ.c6e*Ov k9T*eoBnObOs9 o0/twOE.CxQ3LS&#</<~yٓ=ᰞkL!&P[s1\on #e~=%-nlSzBeNu^Hѭ.:Nwݔ yy,弣yx_Z!(A>Z K:=ƛ=<FM-x)R=Ln|0oied }ܴ Cի/54h'4C|ab[dFt9A7;diإN=5@v&mzM9]+1 uw0 E^gLi1'eqҭ:d.L%$ _F tU,8YHD |H<|m@U g!~1jL":IZzSMPa;rsͲryQ”'@);%{asĉYm K {-+'ܤ;&9Fw LV+8*'<%\Ǯ~guObM:b@Z0k3,=9DhwftXfb2ZCSj%XRt2UEAn6VM.-~iS33Sx\#:3\A.4c]oD] > rDXg@xv>/ͽ:|L16|p}d\;I?hEj=<90t:*ǂ5U-q #Oݺูc<$ Khx{Ь{Z+5|mĄSLzw ʀ `x/^0hn r`)7+c~L:V ; )îm 5:eSdʏS0&gW_uԂ[e/ ǹu;ҭOR? | wQM5ṿDd4txw<M|_YPHE߽UkK;GDF^t=;?<|5XNB+l0K&[L&sySlT-Ml,gS#2!N{BG "։ZeK8.B4ިbe lhUN3R0|.>>Sc@q@*f?qK;QDed2'R!nnk~\E_ϿȜ^kP%-nŕ,M$YULЅ.|B򔀁48 LBD'5 aB懇]z۲H`ze4ިcZ"JETl$J7 ~jlJ:p~o?Z/ݢN|T0a> 3+_]s9K3sy9;,-NɯR5Hܧ Q̰ӳ{i*J5tb r?-8"G.WgFUvM+9[DWfILrIz6" Q!fU Y`8&lLU ~TB(ԓ2I;[[mn(×aL*~uö4`do-?. !lvAO nl SkgzCYdz(%-7ޣ\~EeX8S9Hժ "c3Tgp#4T;^. *9:J >4֭́Mb">oXK̰rQSʦcxtPSȧڀũ Y}!N[~tR}` P"n 8mGAɥ kS: a;5W 蜷%ȏ2r@ ^!rtf>d%01&$XyDž7d?^NF$hGFac3妩.]kF;x ;4w7 ^ Q5p$UM͖z"X6mKYP#IA!qu?Eb+̽2O[\ϰI4/O켻{+qInb(ģ@|B>랓,rhͣ vM5Ѩfdv qTPf$jEk~I 5> &JlO`ه6ps5!,@ƃَ6[pX{!s\t<ԷMf,Zx"_YQ~:nRqx!QAu0?^T $$ ug~L $¯o&vK!u%xy-EjMhaE9=z*,EPfYe_yGd'! {{4g;R ?yFCtF!`E~c^. 9y BWVEQY-AX ^=?M4 10B':S`Lߚd_H-٠O*kq*!^A=yqY@2$^+ݡj= qB4:1?.#5!{ xVyK\kcؔq$C K+JH!Lt @L1Kj\S ˂ ޛc뿨N׾(["OI`6y*T}S.AzݖFsVjYʁG؈甭U7&anQ}Xo!j( b䕱%UT)E8 q[Uead- ;A=pppn̩@ ekcy\_]~JDslxBɔhrW_WA !Tֿ~OeBSuw sPj@gܲkVo՝伷V-,ޑIY$u MֆWI T2+_izetyZ]Ց~3 -ͳ\!vy?o ?åiXw.-e8 '7}UG[~ﴳf!*ŬnTVm4^QEc<2_ʙ90(ôB]0d>$RwI[u9&"a1:FLKSrv*R 4p?xXB5<;*Ph^ E/+$Z<%]rkb'jdRp}7Նcb$vZ]/]+V[3!ua#qmTBvhoRTzzMvYW nv x.1#2 B+J((RϷܰxđ֫jalEMsrR\Q̚\q3 uqQ-X' {׮5.]^DZQ&knxM|`CFD?m0l+׫M3^c;Rc!fELiWdd qOIS7+ΩSU壇}*d) Fݓ6JT4&{~k%d~W?v{5NTߑ|l7!l~.9WdO 2AKܥH|6pgmABO<6vỔ9i;Fr K\[Dף*s6'i m()}V_n2,ܴ5@ 3dV|꺡ȩV mG0Zvh;F>.!gl-aűЧޘ:)[ Ha27wbɭ? lȉOh.~ 9IrO&F+<%ė_NR`~9M oPuF k'ggQ[0M!E 2&=tCi OJ n[RFkkiTmϞ\ppu٠ ;c,SWvr:mȞ/%{Vw;>E? miH1$4n_5iK:e7 x=bD?N@6I9̼wԥEҁIBLSb YiKꣻDmh`?/^m/;*y}.OP/nlmq],P:Pzz-O!v@ب$^V+D'"}{I[N( zK-[נ z"{H+e 4qY,A6^HΌ}%",{šDĂrq`[8I>?$12ARɁIJ;&ڹ(v [+/srߎ;` j v6KxXrN .]EgT-WMb#Tt!&q3b#hX͐֎=學ʵBI1_a3،"R7x0 1☂8 % Z 'gVj Iy6cK)sA55OЬ4䨗#N:u\5bs7K7-nASA2:kH:ekdjO (ͳ6I?D=Ǚi' plfXmS\D؁(E}_Υ(!=7?5O?y'$yjo:y^hNU.bDh\4xbp1&gqS yb6|19gsB^w*9S'1* ZrrƜalxʈuY+ؔ͊͵/4dv욁imɽ9\VaAiдs|Nli/t 􂳳n%X@mnv+5UޒXJyA,>Z&Ϗa'f !>hna %~WsM&nG0u*<vh,+k ZR@Cr{CD2/˪׍(E#ˁ֩,bn認M#SNTqoCxo:fw񺽤ԧ7® Fc>CG rP~_?Nh1oLؿFp?yjq~)ad?8'W."BqN%Ok)4˅g)@[%v..ċGWuc-A'IrAFJ~Ծ|`jAsfD֙LD,dS升.ħf\Poww,ez>qb-mKT!Ee>`<n*rW PL+[ɰ*=:D)5v LV[*SH8#~﮸oTc" hڅvolyq- F?); m&` [I\wak/!`gȳ~vi*)/WcFۻCjU7OķSoIM ^>OT)c17hU+*f+ve%!'g@c5ś(Nlq(N ss13nJsth.4ӉyGB<}RPT?Qۛw֫mmwSNtyxddff5k+胋a!*ISOE߁2˹29zOr"vkW)6d5`3nw',z!<h/L}Yvzg`oI,KR| GQSyv2O:!>Jv{#g& UT?D7( e5VX XA(<}ǐi惾CX1sVE#YD~"`%[_+a!ieE9U&fF#'jF]C9jc L!wZt"QpGZj]. 3} 2JYveƴ*9: NeBט~fh"V =v^o9`YEki$fP [!CpH"zҏ4G?l1Y 5A8Ƚ4 }ś82N]?_ZIOշhã1|}1|H@(Yy`2=krK Q$f#|{PoP9$FQYg \~ =ӋVWD>.K;P`*Åtb *i g_-YhUكDm5:W9Tmstl$fwǼO=NwXsU^,|:Cr7ܔ94a[rgl(&2g\ !-\zlj8@XFgJzs!vqz#ҒljAޟYJ>ÈkFj 0Rg\sUIdo]WF4KU`W`]5TSI_!ƚsk I'LE˒L ÐR?7:]vuӋ 1RRK ~6,+~`ڻlio*R&aRSP4b _e3R%oSw(/$ `2Q(4{ͫ`Pl$2ff@Z \yJ-D=X4dӝYp8S68=|h10&t oB '0uq]X/Wc\H[C(lϕc΃U)Z?1F>p 1/6X{uK531O b\M^sXv; t@F^\M0s 8%*CQ]H;6PfP}8Q:&N+䄖|!Wr) 6C:?l*7\Y%A,`VzD&>$qDۀp3X̟0abUzVqp}-rVD2czZtiiE*^pQhE5A zbI^T`Խ.‘- aGZ),blt;eNqկXY>YE֧짹צiOMxGtju%^SLsT>io{9 cɯ!to`fRjjP~`%]~Sxu̬I\Ȋj:kط*+ɽ ]L} ooy&?>5j]DG^Q=Y7뮿0eQZ]ߪ˜+{NQK q HMu9 ?4ث0ˮ~P FXᇦUfMS=&9Fon|2'>; YD*Su'6WYM+Ȁ`fD<>j 4=\碌tPWl/)UZ" H-N(.hfww "R + l.o{v*uP`!6N_&e)(V?le98WQE΅CF`f,J@J?Q} )8l7loeΠr;¨<#@1wb.R -{ќ<05a7姒潮avKbq_6Q>B0|R(^49V#! JMuM0ܬnba{_8N\췙] Fx*³U ɳ^PZ<0>cSޫ ې+GcO=&.mK~"+ A\aඇ(1;)J̸o3fݛ{aZ``e?{{+H=[{VB/ c-ٮ(Ԥw}. >Si?;|Rz!pN211ZID?"-LЊ;P%CnrM=?t9ѳn~:f XԅSzU|A)b0i EOIP(ߡB'I, lx35e.?N38K7\e^@5w4K<ᕑ)%1;̰,ز_RTZOrPL(vOg)z~{>R]پ^: ʫh-,Ъ:#/ku q;_a•x:p DF_~λp_RQR-;}2NyΐrU}H39`sGi *ކTfB C=$mS/#|$@ [ ]I\ Dr(UM|u[o%bmsuT }Pl;82ی5jXeBI+ !n:v .-#9-|}g?r|pm .n,pp|KQ p`*[#hHhiZEk;@Dᔨ?s)c$ O>TwM <^KcM7ai.QoDrV0[3)0EAs /Ox,3s|1>ܔW m/M"rkh9Bpi̼ZTcAPN O۱`rQ÷<KL&0 s8*P"%3c/շ7~ ,,LG?$b,Uc>mz,صR] r_1r K]'ӸG[i'6Sgaq'pW(:N,]jY>W,s8PF h#vKD$[nDŽt~,7]1[ ~>d̓q L$WS.EbK:ϯARP\-E&BjkNecދ%!dU<#&LWߓ3:lq%+]T"Dd{s.eT x{'m1nk]N5' >̺xև@KO)7'Բn\xeUG 'o `mJZ:òr|.zJ,(=W/{h0u#ULZgr7֐ӢQ ڍcԨw2r ~DGv& .K]l-ӂJ0.a \X1Bt ~QBbӂXhɥcUWöj8kv~ ^5iEQێ܅ 9m[}aL{p3 [佞'~ur&yIGH߽Hkm%ceZj}f#KReG,0 6VL`c)mS^ YhG}ϊeup迂Nbb,E.) +ׂPa̎^aƊ@ eK<X#OƻW Pm-XOŸWngHc ^'hN&,P]2p7r!W:xdy\]vSN]Vb 7YVULI/S GCˁ_[ol4SěweI˲"պާT%[ q`W|zzyIx]b#ς踖MH & 5Wy֠c 7`(pz' ~9B1{gnF)iu/ x0/m `\6~oW \#AdgT!rMWt0rMiuV,ъJt@EYbHcrѵ4_UG [*;gY.|2WBɟa1};Ó^"2tlae}0(P}79W t0C]:C 㧍_xoM"qPׅ96yjt/|/[ X߿AH )p$FCqѵiP5kv|N`FS!ۉM!B=SzZI/2-g5;682#RWQv|*[($BZXl ܧ __hvt=_ɡz dvYjBvϐ?1}[HUJ#%)Ed aaZ?ZH2#0 1i؝b q5bgq}ؔ9%X<d2Dom pY֟G fĝ[rEކVy Iz eVwy]:D"!{U[2nV\.O6" AC @2͟5XZIMk$Pe،o[we*x2fu.@R9h%p;m!}I:7jǗNu[s#)}=g:ߘ DlL3Sͳ,44ws? Y?WC?؃.*4ar0={DZf:d@O;4n\sJe n:d*Ӽ/YԪ?r&^7{6|^9^[[&P"执nwGBcDBȚ7egbdGT A}Bff|!tÉ8q7\ԌصgemGhb<}ow,Z PΑoū->ht.,!,+' C4\m6=EͱkZh׶`kpBfֻXnFp2M̝\;>-!-m, `ͧ}GAj7ըJТuMVǜ"sg0Cci=$>/eoxSQJ#}ﶕ{k+(߯B*̓Y_y1 jwX',=Ƨ6bf \xZ UJɫ3C/m!#2›٧5C[fPݙР;T݂Xڪv4ȘE2IY-B7ж+;*fW&[zBYq¹dBY#6e 뚓̕-B/\ SW`! 2Q'HI 0UK:"w$@fnĐ ozfN)LQϵ, KyN"/$۽1AjhZt$i  B>ZEV[șFO(Z&dƞlW_ ycoߖ YsPr te2:?߾g+E Ma7аQ^Q3]^b_N عLGƒ*25EnlGC)Ub%7eh"#iN~Ut-?0Ou!G8%ep[$1{ @bf6BWb4<[齀"W}!)Mv>b_4(͚jX!*]T U)'Hs |HA^U?S4MY*s|`;ꦕƘ [t[F'23@[#dfI:1/b+hC|<]a Y;i=ֻGN되}wND/9y9]vЈ}A V۔{ * Tϩ{%b$cVq9N^8󷔸jÞ7/IA|tt`$h!SNtLmRy39\P[(A՟E,IpDꆬԟæ6w k<tT{i|B(E*" ̭{0D$PxYt)&_f-LbA!p?CjB63٢ut!diѢSmials3{E#ƃU #. jr/)vzI +#d]?8WxBIqPJ~qMX+ 6uy9HlkAyD-0mO .[ k췍Ø7l+TIvsƜN_ZZY/5[I|˚r2OAY8`#>ոҟ$@3(\K5>d3#ұ(컹5`YZ_!g,{[CGgoRt hߡhOZvW}_;9Uoaj)D8R=X'ߨ/XnP-8IV1u "~Ӷ6I![&e+~ˏK)fc?읊UuqluGo(kR6L[`3FE,hJ@@UӴ$ꅀ`) \$C%=>㓀[cJ6% om%~^7?w R;M8pjEG1dг,WuF\Yn6U2b5LRS_s';p ޠGFܫJASPClzJ@&B4sRhd%N'ax Q}VN˜- ;OPD׺*l-"93}ia^ kj$J {*R<%v$!C{Kk8Z6ٸH"s[ST&L 863ظiE|? K ཽkeJwT;lZ7<0!ɭL:pFlYՅ*.7 UNI4< ]I1LMno@gA5 "J<+oFsr}|^~T1zbȥaPNhͮd(Xu8;=w.$G4Sh#D r%y_<3=kVz'x4vf]=N$~%N !Կh$QAwďʲT4M̀r}-u-ؚl{׋*茔69 %cMa3ZaP|XBiCr|cG$j(7]笖zDy?lS}Ҧo|wVͣjC/G.)4J4Bn(*Rsؿu--K-A$;z}rY5J@d5gN@"bs ;}B xPՅ[_Ӷ̂f,ٸ4 -N*FU:r`dkٓ B.Ms62 B m:URrcwuNj\vk ؂qT^żF6LԾ`B"'3^Ba 쓛*dQ&>G1d6@bm͵xWD\ Pc 2n-pn\J}Yih64xu4YHjQd{% I^Й78;"Eya\w7PRE{_rN.b~.Ůvn*>wy;E8X6OsdU/.+-T.6;.>֋I@hylY h'BK,^ۈWzx~Z6'=ST]x}[qkWez"Hӱ癓zwoY`?&'H]b,x\2m/+ wp3Hb}y+$ړRt)(@ӊoiXq:~vR"ryg`3M)P0mu[Ҵz] ˑ-6E`G% _"0VXuVg kfQqAx+qfq6eM*TzdZCjKl܋pC~?T0+GueJh00/ruz|g e} ) Ӏю`ɊgP~ƺ:9+RY&+.!X/ \A3}.q>z>%m@0WY\ea#̋ZUO8M_,ԺfD壿:gԉf+:y2WgH1"ݷ޴"M2~v~֢=ehRD5G1͟,+Mψ̢\a>b& ޮ *OvsMPF8ܰFcgyz\Og5.trqKV mrh;sq-׭dvo䪈4hJ@l|nP{sZӁ4nJVϴ!z1T+n*?CLQ^d&RU{ F< n72-^N#,ANFB:(LA:ϔ(xiL8Xeŵ^-V>V$`$fhUנ8 NRh.ٶ1[G=7>Z[SޕMdNyfb+8X&|_Baw&lO85-&tiE'?Ai?Pm_)eິD51٥t1a. 9"sOf(ƕ΁:4PX+_JIڨj:jhuORFhu'7ۢ2c,Fe`,ֲd=9z,7E`;mRIY(ۄJ;jfڇ /? #Šދy"jv,z2 *R Ԙ;H)I7=m"7}Ģ $V(Z>)>%qW YR oMYZ:&Vh %H^eHwӥ=I x,,:z1QeWhE֪v6e=,n>MMc`ɲepyXeJdYoE49dp@XuD&9FEc44%C)pXȑ^DW5^ [+PĩdF>q$q8Jhڻ]OD*ze_Rq.ބDa Y~^u0鄒oadA&\ ~99$ui;if0Acz_Nfns} Y2_ 0Z ӧWoG28h9 %_ۥY:k֮hiqF@ѥޠ|8z&(&ZEo:;sDy؁v@u!.<E`u(}OS/Bl  T]~`\GjJx}_? cHUfM]P Qi Ub/}y6e7*Xwxw&j8 NH9)!gn>S&,:WaA;5Uyl^Tэh2"LJtPtI޿JC3Jw `sc-J8 ƤѢ 3+j_yU\ͼXvάxR$ؾ d`@-&IVuߦ)>[ϐ0cYqDl ՘Ndl͞5VZqo9pɩ'xBnU/ߠG Z9"e 4S+f9E=v gw1ؠTT y6v:@hdoA]Y϶Ii 6ѓFEQIgggcnyb\.\ga*SĜWv_(FP襣M49#Tڱkxbڅz{7/IO+혤''C!'P+=*F‘qGXᆬ=|i T6@\)?3ۧ2: C;"R._(M!,gWs}l ~%C,rޏN4#?x[V4#NCXZ4%;j%gЌ~&bJr&2d_ vVҚYĄ{v[pjԬ 40w-%V4›Yɜ]I2 P1hyQ.4}j"pB $/ 2f89PBYDZ˖痙ɢ<>89T|_MP=1 ٕ?o@{*-~a+jUaW-Ԙ {QH2-EWw"[zE~3tXSP;#0;rZIظ=L_ɫ)EYC-!f~A g\(\DࡼVx٘BhIJ4xnWQ^)ޤ$̟ϖwGҘqٞGF1J)O!Y#6> gFlEf,^ȿͼi-Y#ܑȺ :]X?"(LQHy໼3*VFTF3鍀XK~V !BRCM#fKia(] -o"?JҰ?ށ\xTXtlbd>7Q!YPiyYTH(4ZU >O˸SM'c2%ņu X΢] Є>1\뚆-CkG㝎E 4ޒ#)ȊlOS!k9  BߖckQ662I_WfEP,u(pnl@Fb38`]ǹXB%\&oIU?jC>@*͏ߨO(͇ ln`oiGC@lGXrA2:܄|eMu燩w0WCBIͨxMkI+a/攧Dcmk4τ w9LIH1 (ʫ ?L2rTLVF{-Lݠ^ҭFJ*@_>^ &=.}-}e#A\I71~t^߸AL.aOc~^ b%& 1nFkxly(h91C,>|Wln 6-^$GXTP=s}8CUEv30'ⶺ;{(\%`l3QS'+5&S^)[Mˇ8vfE"_إjOX_40֐W%xlx@K~K9f.^[v$WO8!}sN<|ʞ#_ϯHR.κumj#[)jysƳm'f*a͒ws-vB|mo]l2Q@6KypRE Mp7ZU}dɃrb=fG.Ȧ" SуMsYd.ל]C mnrjU&A=ʷ@0ĞP'[σԑ1.||UM|j2W7˯@;bM e_WI63mv֟yv4IW Z;BE+na `qF.)*,!ݟPffeBrecC^) rL_RT(5PU:7?]ʇ4ͷbzda: Mqz*3 :V~2m\v#[p4 -?N7 R˛3'$'Jԝ0U4>“y$>;|H<#0_Vi%ǧo Rҕwj 7lGE&5umk4ˋFN +rHc|%-U9 E$+95.+#i3}"aƾ} wNj98E(uQ݅y)-%%}im5EY%Br4!\<t\+ذTȡ1Կ#y}I۰c-lzL\r_NH8rJ#[naY h7!VذOj|˙kTTE'. ӫEV5c\8}ƒ|& Us$zUQ0łtxA6=}ny]7})ujr=U-m|h+ؽ.HI H`T}bw{I*MT:k Ky=w(PVD`NSYsUKIkn2\檐K\k C?5ՖՖ H y;ze%̆l]Pڨ]}J?d-g )A#,:u2B;FY[v0EA!sjA;NIlMX^r*D+k`*EF?G1a'T 7}ҼGɽ/V `W ; NsGgd/ g N![短ϕO " {#AXH _ ڮRy<& ^n4jd,*+nw ‚W ^x$J {/H􄦭zX;{^ ?ERBYx@C.O+sNۛ&xJ0v)@A*2`>(d8.@#jvOƟSp N_5`bw C;XL%軺x$ܓ﫚T@`ю^"7{[S$˥NILƝ}-CW˜fn&Iy.~56EyEvFCC?l@C D?fj/m2J*:Щ6ʀ<:Ɍ {1o]GLsISG_F4c."\YWtn fX+O T "zy^S:35H,7>.BkJ"Ұ˄dCPM;ZV'-c;}f&aPsL\ޓ+o8$ /#ӕC92lP{lnX$'9 &ق@t$ez%w@2IpP7hBR._'U¡E3hɼ U?#:p{Ge eM_7Ӷ3P8Hʁy{vׯ܆HoM^J(w>l.M<ķA!]6#G}R9qQ)B>۲2~}fvF.r:%ɼ!3iIfO~03QY+ s͕vY}@bcIљQ4qvYk9͚q8s5rzkl:`\A< 2Ϗn4P' '&UH\lhҖa22%YRPfUϯo$S=-jPEoyz 7$ߴsf gFX-qc)ܧpsRml2#,op>bV`-[`˅Z? $֜8ƴ7 !u'W:;!G6r9ʾ7JY.y B߯le2j7)݅@6HZKwosoG)On>sIצY{DmՄ:a_j?/3gZ:wh:ҁM%Ljchorf_u-ONx3M6_^0Ml\>6!Adf9!qwb`R.<ti#n!B\cTA_Q#d58? EnPf%Hw^3S8X7d ѶJKu`B 1_#MG8ۄ1 l ]ՃR%K;2dYכo l;HohƤ_JȕǗ 'J}C8Q& myrOh=w&앵̉sb֍O0ϙf d4d\ ;os1G?@%vu^#^Y HRLu[_#7,aɬDR\`L7¾IXj8͊Rڕ1آS^IQAŴ9Bdu6|hE4:x ]=FZWK NAT9ɯ}T(Ό8 F7;+//}SnjhTiˀÊ,[Tص:CYCNsv>gkq `CbUU{TmGn%٪iOfKRPp~GknN5ASIxjx^eF< K -Jflv$1GyY!ksu8 ;̝#(E1AD8DU& @/ Jѕݽ0IEE9#y'Cakl 5D2cT?KD*!F=-aětuJ0\&k$9>"Z .-4!sC+_{ g±f>'xPAF$cfЖ5m %Ks붧dۆMH1R%Ihֻjc d~pUI/Kبcv\aa&@VZ4a=rI 4r]A6TʲV{:V^.h[LF.Ȇn2*jlFBjϵ$lߎ#G,?bM9!w7CG-O2i&;0K ܳ`p1λ:}0MYr?P};sI@g  _A[ 1vntevp)* .!'6'`Bl>eÄcy 3jg^mPޅo9<$S=ҶTE VhEsՉbX;%\ron^"Y7Xo66Y`\W/o 7߫/8KaMFCp_Uےm|FFyBaC$SMMO_żx3{xO#C%`S0tjŏ/лG-:!GNN"d;tN0Ic#j'}߉4}hB[_N+Ǐд6Mt5 i3%c9AsBg>V04'F-פ (H)͡T6$jd,~{ӭW!T.GW$`ɚ#s&$} MFöFHqImEြ+QU8-E:g $iv}qۜC%L>q>X& @If6uZA[+2tLp+Ay|<6K|SA+۠LE3YOjmp}Թ"KF]*G tx~5K1WYKut QNd-jOyL0 ͖H-EB"uM4aV3?<ǂqǛb8<ԺU1#}M9 ET,֦&:Dv{y -ތ%=4xO"8A7_vܕZq ybjbw;j *#̬:}=+$?9Um N')a !FYɋ&hnA |qR;7*91 \r[˽j8VXbNПk`؄ؽ7j<`oua}//N fhSGUc/ŒNau)M2Ђա y~mr/dUOmJ 5<hNSX1"E*n?#AƐH?̾l4U5^+ uut7'7l\FΚaFTP! `UWoJ:М,WJO 1Q6cVzq WN!yaY2OPib%b3KI,#Pu}wiy  NunwlO?(N\Paq{:AB'$4/ s}! s,LoRq(f?EuYҰB:yCٲ@\=IΆ)IO}K^Hp݌}8lעv _os9bZkvj[ uF7KѦgWN})%ݹJ 4nqp\6tv$[`:쬒"a1~VޜX-=x%،.?l%<B]^jОbx.RM9lj-k#ꓳ`>w-]'Iׇɂ gѭ22o'XDžmG [SLғӘR qQU1rr P= s}m c0eX`:5%|i7`=GBb*b5B,@{ u$^{5#Y²0Ou)X:(L`Y2kbfcq$HxF>u[*SF+7;|X+~[Ά]须^>OszunQJ5U<\l-ү?nN?';C[oS> 2J asW^NώMW^w[E1{<g%v0OO*vW`o}2Wأ sCx5MHmw"u]=[LMa!Ln?-M*q`0YUaCQ.td1*1"ZŦkzUuwW ި: ce8>0T˱uaG y5݃Ś"9z#KXS-SI auG.>n{\-Ғ7,%U8C=Tu |0Oj[o ?)EZ|oDE } -~o5R akE'4UMr0nUuA]L;vp-X9 `b =d!I m-@\ )v K֎{sGl˦ * ?Y2=N ^*]2d)/Wu)ȂLFWĕį}Y`'HN)UAb /u"0ॠco1Ӯ+Ig )(㤖hs|Ue^|=,˕NR&'כP:ɏ\CF!7>[U#NыtH' {&6Isd,Tھ%\=05ݿ8l\kx }:~ڝ巨{l{u+h%V>' c{ND\Q@0޵Dq ʗ߈qz_WLnHANJ',Z6vLy`K&pP 9G:T1b~<{v(Ze$"WD4,2G@TUnRVCY$)-{B%.R-nmAK;ŖXu1.5'TQ<@jU~0h#C3#-4Qx|5Q* %`&18]Js}{jO'6arOu2Z"ډ ~gm9f¯un&d$ /bˠVhØ+!x{Džs"WI93Z(D 7z'+E #ö4h`qP/ >aQ}dAY/l⯣!Zcmej+T4KB-TNh<3o Q@S] Ńpt>BąK@C Z}Y68~.qF{,꾥:-a2bTQT7/%5ϗ>#Y%[fWPt!;i. @iQh{gRV*IyMC-3fa,oR]V ( ^.Ee|vRz;iI};=;*N!AŏPr)aGH4]#](dN)׆VBpb=*>=n1+7T zI yGQ 䭸ȸIv*LWL(?K-XIvxa1Lz:0 (̍Yvm1eީx.%IC#:]`?go.u,J"VP``KYUHvVu&1+OwG9|ԴumXk4~2i9{K7#BDDEX݇ T >5ˢFZ_*w٫*EʞW`?ͫ4)_2~J t2~uI ׌ .m2$ P?_U DZmk:mX0[VmGDѵ~&h [\AʴD &[G~f pn"Jmoo33Za! cyd j9J@u]y3 h/ywhFʋFsz0Ŕ/9Aـ~UNx 2t *<֣%R0ge K%'vx 1 ;CNU)OFqw?h^x}#X}"T8OˎȜW4`%2.3*nUuUGb~.k+ Ly#9R_W;S#,G$ >V:LXҥĞ1N tfm] aE@b4&3',#Ŵ&ʈGPoOa4 z1 G[(׫xׇru)AGh1*  %_L崩6IY  {T K-'GpD!̱soci1-q߅b۽N h"1Lxwn@2{eCW`eA{O+˼o"E ,R=p" $4ѰLo$< BLЧn/ g;vkU؍NvSy96\jG{z"uGv~c-vkx0v^IFaN;_d&O uCW rUd^n[Y-&\Om4zV0dzvё˗$1Vv[bdHA6?Y\?.6z}sUBuk&Y+<4w|h Ҽ]N|;#<WTr&"&HV#8)fSH/ c,W5ć,?_vvVĆ&->, vۇF(r ^*rlۆjzUy3 nX^t\x `q{go|҃oCwR8Ĭ‰_ *BO3 ,6 ?gw̱B N"3;vAJF}Q*wĜZ(B=O|vy{qXpo,a 21A퇥 .6~@*$EDS9݋;:WC%/^'as'h,meD7pjB>;L{ҔR:Mixx>i0=C Y@ 瀊'߿n)(mw`ª Dar~}$\;Ұڂ³@' `Q(+3)ۀB ?eVZ'xmIغI;*:u -<)U~R..KCM12^l (Z1"q N]c+V6ID'RK5IKҁ MWަE%q*[_ЭvF[%o7at⽔rqW^_F2Z(+%1Ζy:)kC{1`]ʀJCsSN)9gEf$n}cͶ8in:]_Im8F,ڍi4VT< >wf9έDcn杯0n$ce9pI@auWLF%N~@؃YB1w#s>^\;c#G|\$[)ʣ$`jҌP_R9Ib*q+F 9QU1G,Ao>i4$ػY=S CjeܹFfd])rrƞq]#}8TKCZDNeX 8NR"h锣(gF|HwTB HyC\떙?4[CP ;•d"T~plm*c6>R:77B.16{;X@{mVt![՟V` .r܋K`^S^f^4QMCx jB(Х_4}|i[˞vvP{xG;Qى].1Npz & MEw}ڍ]r fh4gP0KW#3j#[<JMC1?[ƑP?4Y/R6<{!USy<,">''A{ogXݲ\vH& ;MNXl cHda^v m',uIYQ/\<1 _>^p2\NB}9"eyT^/셴i}J(jO!±{ןc!Ag5X'.C?~Z =&G-mbO>}Q2YݩL|'ǰ^IB~x>Զ+25K\!fCvJ GͻԱY< ֯EY:5`}~v.QC2mbS̪O57CoK4 ѥ!J bdYKb )S |+=53ұ1>IRMHV xRRA!*`ҸFpƼ(;n.JEbguPsdf aI9l^UΦGXYj%b[.I?Z'X(Pیq01JU(mjI~ { R'L ԁzUel5:Xݸ P  )bAS+@"O;$T$i*1#;5 *$1 u㟾Kx3̠9\r)2~/De ;>:IE+ʀvaA>y3 QrC` q52'Vs&T v4@'rWYA{5"HhXɠD.QƅE= ի1RzâfA^Ǝcl_PLdK4oM ::7NUHYЩǠA2E%~9K CA ?OC.!ȖڢR_}g/I9yti«mXe/CB`c]PP$8"QZf,?0+Np_}jd4vq2{.@tAՇg} nΰ}}0wS-5P ?*a#16ހ!.98#C.E=TuƩ|_J%,곸Z&D z? -Pbjڨ$wiD:]C޵yC1'ڊ_GNBb_z k+Szásɬ=A F ϴ|tx+Y~čS:*"w9E 9BOt N2zߑfB55%:T! M^Ş[UopQp]uvI?2#)@@@s*xbAO;>̮v*ÊIw<zy"9SW ˾!Sk: \U7/@@11 b,S#<,T̺ "ׂqP&_.G2MM 2p~nKyR,Yȸ0K6 //jn>M8|9?O\Hzˈڜ&o̟}0Ւ͏2p+ԘkNka6| i!_[7~S=**?m7!A]%x2}SEكhC1}Ra,I"8wGשw MBcbs7|0|L\&Ar@R{ Ġ 2r~R:BJ 4Tb[Ơ[#-\> rjey+zE48YD{d5澄,D-eHYd>CƩ0u[*?wjrn\ D۸{}%O<}\xxsV\z{Z*ʾ+Vn'Р߯$p!kɃE4g&it.7IȪLApCԽsy3뮜(;'jDDe<-N Q8;}3S_p ؞dkP}RGҞ ZUfnP=r Lv-dGON';uaɳ_YWQ7`j*{0 fĂtyaaR!."%EEηr҄q}PއR.}d Spݵ,ƴg`5ʚ3Qff/13A ӽ5AioG3"qɆ֋(*{WFm3 fG^S*~&E3Nd34Cns+i|uzHD/hz\ï9,Ll:h4hƹ{ >F Ayɑm'n)WM1v7i9)\Ӭg*7k-8=ZS{Z ΀+e:pY `AQB8lKtҡ;ަu{5CT n}5PZv ;,~konbdq \!t\{}fITPe `0%hg|FL8&W}F/1h`эn +MRmC#jw ZrMcn_Y O#$[m!WF"ioٌHv״D"Pt}bkx_hL?DX*P6+ 2lM 3 1:}rK( coI"ӧRF1H߳?g.tN6P8ks6X:DC54L^? At (CCk'$E&aXpi?C-"Xs0V%׫G$0Xf{ٔQ٭W!Vy*L@-EM4!MQ9C[)vO$?F"S:_-|3N6WI1~ǔiJv\!wո]8"O1u@F}$(U=lpM̙˞zԾ2EhG2Jаm*r竸#JBE搎i͌'Ua5˷>|)( LYW9SLy)m.DD]b#%o %+n0ykzoSL0Tmc ?{/㳋კQܱ&F$v DG.xV@N82c*1.(?06Fu--$7=VUW#c;rp+1eu["{7Q_I_Nn+nK*˛R JOnOׄvC.-"|hh[V\r)d2TtΦsnNd2_.% WςcS>y JIMhROCʰz^ `i?B2^7y)m ~+Y r, oʻ& u\rc|bF엙 \uAb/ìB|^Y#,y,>p #W4&o2KJM{jȼQIlDg皼w^rw#XXA5OQl;ņ |[Ґ{;UD 1Ȏ? x9؞r 1#Xԇ: nՉU) hA JٞH+1-ȷ<"2`\_g P8Kk6XZbDD$oݷ%}w?xS14hsz @.K~hL&* tS9 815`s3G8dweHaKwv{{0?q}F1bQΟb;q8s!ќRXZ֒|{v؂`r%8:܊ N9{hZ e _֗P2NIa; RJzS51hL/,A-#=7^Н!(T]Ґ>s/ N{ɠ@rc3Jf]^*\p7`udܵo*$ɒ,蔽Ol>򻾇Mpw^b$ ;gTGRMzeݰ93^$tlEsh(ǤvoNll8=\8,@۴ ,GI璓}Q"i(\Mu b0GHfɿq2Ռ5;$7fx&[`P(^@^*(#bFaੱhǓq=2s^s \>,KARx}S[0ߤHY`r g$?Soš㌰DpLw0CcCC]SE*HӒPrdӦgPi2o$iC]jr+>nZIN6)9NAJض7J3S&#Q 6*qi67s\Bb_g "cG{9H^$7mkH9|J&t!Tr%kg{򡟃ƍƺ1Qhm?}ԗ$9ꡕG v{4q/_ oHOU3i`"=o۹VͷrHe9?|IR xGg҇;- v} AT-ʋh\}=aSS6/(gnKjDW.'p!̭n)t6$f/[/Fy%+zIPo0 /(|͘dbͭ_TM IM$qchc#KTLyh^ ۄAWopIIUbgcˣ\rµ],sߨ"WN ; ⷎr.|-jgjͅZգ)?5\ I\qt{lADIQ䮜ttVP&U ;ul)g V@t6Sw9ӬPkaА?<# |rHeS"RD.;YAv{ו fB[x) Ք{!{l.g'ذe7Rp0f+DcTI)3Ι<;\_[c+ QLeAABIIz- /XKf)(ah0-?E⊑(ӂ&tȨ+ĕ_0i?lG!n@=VcQ7z_x%]~ [U+\ .&ss\YY%&Lv2&wK WgUqb].v=IA"Q %},6L`o£%8rN(?_{%W!kMBe7]8/u+6?%)o)*NqV;o!gItG2^%A*]74n  KJSy&A͐ꠝ9[ Ԑ‚LKMn3 =Ki>BdM+ߨa#%%E?KpY8˞]P[Nڧ6)IHѝC?pL@K R}HoRHO_S'Xlز!0IqC?6% ~~+fK %7ӄ$J4hjW\^ishA٤ڪ}՜T ZW6+VWVwjp-'+筵7sRɤbo_?Ńs8zeG8a -i^Pg@%}}f1 7 ZJ / cU&=|Qn̙W!h&.oA]ZLOP%Yvnk-p57fqw0x:y$H]Zzek.k!r.(~MTNG$,U1D X⦅xVe_$e/y W!C,2/~a-t;4}S l4 ,p}mufTDbY9DsSyD($ +x\R2_V=iw 8sb僠=goħy|%hZfo, Ys1o>= b]y3DeW ,9xE-7T4)F嶴h67iqtW.B<@rNocO2'+иP*!0j )v&N g텆!^FEiU7I 9.4+&tֈ !u4E8l:`9 qt(1i{*ghIz)UC]Y7 YƄ/{3ޟiCh ȯNnwgLSDT o %@-Q(cj3O[Cgv"rHVG^ʵi=@u<1yI#vP_aB.;޺=psvh.sA+9z仚x8]Z'uˉVm#U_)8Nh6lglDpc5#to^ `ϳ(Q<\ClNW'WOFHO{\Y) DՈe,;~[2o Q'_I@: \%> װg9.=6g%mBhKPuT$Qip}“3yqv{-M.qm1mRIj03lFiEoyynQٗt?=}(f+ss)܏1ő꜊CLགsҵ1"lɉ(vwB1y j뢒y{zSLS 껟HFfU XzZ߶v܊m=M9:t7c'RwJ(*GtJL=SC\1ĥ.`H/P9>A1xC7"9\(yݞ7Z%".3GJ̉qt%td_#Qvl5I[D:{{98~ CˢYہW^c`ŋ&d;hp$텱A Kµޞt8}eh 0g7~̅ZDŽj $!˷̂}K.YCtN12>K]jԻSSF zY-v}+NJPsfxks[uRM1k{~X7|j9r $5ۭh}duDӞpH9{S\\r{d"BY/8a qݦ_f 3\z+/,lH1$zd78jP>C7f{T#yֆ9G+0/ zNc*)' .o<"); JrAw#Ed Z^lu`qSJCI$b4ڮOA4֊r({-zԛtTbz}A=Z ֤ki-XȕVF"/5h7G !Mk`\d%6W,@Ѣ `/f e>*đOn>ƽumQt>T lU~6\-nUvGn tg*>b"/WtI& H});U-:h?Ea.ͧ ԖBKm"DE5LX ͽȁC^@Xt4KXZySg>#/%.a#ʒIOepa4]4ܺd>k*7a9PAZVC\Co;aICIM %=I1d\\~6\2.&lR% V:*hjRlX(Ŝݔn_kw&VT %2/_4#˃m ˮ׮B97CBrѳwf>>c Yw2 R}~=ShcƏzUi:&/ !ų.$h8=mt_PcAE/sGdDP;qHÐC#{g}(2!%wZ`Tϲj]r ?L,, %j_I62's.yŤV>C'cEf[U<.- Uvvi{Ȕ#ueRG砨 @y[=vl˺I!vv(, Ixp?JE6ײ x`va/,9'xR3\Q ˦L)y(ΗeJ2t\?~}i}?q;4jN{ڗ!mW~RO Y/!n*ay x NR1jCcR+$Oʜ=;]\.K#k0/bnSBDJM ˏw>^N;x!Ae󒫣aQe8{K;(Gלߪg w CMNS/[dm".r9a^{[ppB;J`L=ڕuG@+ֹ˙m$LWτ9f U`~ߜ İҐpįh8qN ._P1ly((d }xe _Ӱnzu/))%̀wt] uaFaXD4DclɎ*j*bunHeKhu!9W6GL b,)g H0Ac鯘YЀ('"҄R[r)X8!_[DOxY d^puYOP9& .Rmec"j)cUZ+v9S YY.CYX.$v;.{QQ򛈠qݬݡ|5 Xe9!8*ũ8 5 q)nMO;᱂E^Eߴkwy&us(dJzGl&ٗ0 TLkH68Z TEP*TA/՗VVU%ͤywGvx7^s,.2`[>* !>nu1V@]=b5j 7&Wպ\KCȥcXpad p`|YI c<2\5iE8b-wOD/f6ZG!rF{nFr4 +e~2%.)V q!Vi<9'1q㠓_"zOONPpwl"#=g=|c 3|0kg ^ud;i\ 8XNLb kD^..$2X jL~lXr}_l@`VpIw~3 j8 'qAi{(l@i.[Q,e;2(.hAsM~a<|one'@U^-<<}fݡ?'I% -M&6m֟{x]yM\T˴vie($V4d:yRpz(F8dUQd,(؄L΢g.ڪz A}%B" ]q>ˎVgB+ ib1fCg,B?GIV\Wzd Iso (Hİx"ؙUhؤԷ!4Zm%In?oaգ$h{32U)kl>6p1sY_BCoōPK?H\ Vpjj[7^?Q*˩T~>;foA:Es~ B 1NWe:z +,JL<>dmS*4{fM^%Dyeb:?=%R8xVlc=\~|aPѪ1%Yx VEh=}s eFBdX5١: BBNPܐNܔ2òkZe6e~DƓ+ãw+穑i ңXL"wfjATxހ"Q;'7+Jr ѹ~SkqjRsmkGcQ~]e69N' iDo$uw&>}!`;uHXb"N^U΀*'ٳ`M f`I΅ I>DrcӓC)%KOt\i%FrJAXUr-<]L:s|Ÿ^Ѥ낤ZlmsE Xܠն(TkD̘fr_Q\u"7'ʶ]#),v|/_huFEn9ղP5ꌀ)@v*xeV>^=I{zW(l"9>P>]Ƴ~~з:{kUHêc$b/BXd ejZ6O p`ҿ.i6~a_xDÁyW/Y-5Èѷ "dw("y1S bz(ZPIӗ`~~'Ȗim Bh< S-D8DAI yJ3u{¤T{c."ݮ ~nQ< Ίt^>U](h:-w#-30?![6# OR k̊Ucwoj]B~(!L2F4j[Iza˫Uzv8R"(W-pMW%uX1qāAq|7r:դ wl;xh$~lJ/gR Fb%7ΨT酽g!0y&_"}9:jy!8&?p\* @h:LoӐ6=7/Y|c ryMiyc4<{?`BPb:̆,3b{> NDիסm|Ucy{xJփ 9K:8 #WU6*B@%^ L;Nϱ=g!!K\u[-%2 ԛ^g0-e^˫p#/`)VK}H ZjM aIRoz=3(ŷ0Y 22fr΃^GF [ Ҋ8NYx~h+Z.8y؟9M8ewX&mXXlx(s<-ƾ˞J`՚ $KϘ[/N񿄿RdSsѣ"nVoW&:5i[=̈́ݬ .jtx1-8Y:[B:BKqyXAqD"Vyۣk6t "p?CWՊ4%8:<K8V/޵_VWGI_Ŭ &ܪJ˭ʌkl]e$#\4 P8FURM-훧¿HeO4cl7mTTfט| ȃSϰ-x90&=SJZFٴ\v"[- ˸[n9z($^kZ%[$?=~]>Bns=, {x+'om!v31cz`|՚L#S헖og+B76bz3~lG`/(;gD Zپu#IT":#v0Ř.}l{va OFtZ5:5 n VKQy6:: C,v>1^VӑzPf5% ܡqO^/ZjI5c<įÍܿ:WAm_ּA/^3̶_`!*]O2C]_R>n"w(@nN?ٶ Cebzy$%P CN:C.X 1y/ەyCCxH5gea_!Ӭo6}r`-ŹlsQ;<_PITw #&u~UahEOI pGpz.QV4^b4RfXoūW-9)Oɭ@OT)T>ev]ߧBWLT&CcuwWπ.ѽ!{ dᰀ_jӭ$ s589#ܰFޫ 53!J9<ůHl)j뗪$O[}Җ#d$2sk'T+rM`lZ9b)EzC8O ĕNp7* .E,UDƲ~FdV[VuR} D[A>Q1?z(>.wd'֤\6x0A0?Sѱ9 XթaD;Y9gyd=͟[=1OTHwqS(^!/ڣmw`Zk+ cEKNd͖&ٙBE^`R~_ޤ:uI#SߘuD kwnVncS lܫ ܷekn䮽o4t[TJGў穖`{Umq*ۦ /tOӂwf1z~ ګ;ؙ=q{;%~B=?9ozӶQzhm#O?d#'.Yptњy_PnPGm4o+"Όo9c'¢̍O*/k#غjs{wfVk̸F^1]mIgBQ̊ @ ^F=N! jbыDQ[3|72 QMCc*5F<;1!'i:ԚI8WCyhRW/FL{+(s/sPH 7f||XMp#WNuP+Cdԟ`(:ޔ(hՐd^r^}CjUn"zPd>e >٢Jh}~KlLi>|y_)KLV9@}tb R?<^?NLO"oPpia #po3jڨ_',vrCP ,3+1f"8)[=umf!BfB@KVZL{Ƈ[/)#J|ZBȴajlhTQ3>Y4[.8ݱXORaRo?Qi3{NB`W@5WSJw̢XT@ 'PMhMh^0ha7kU_5D(AШ% a: Q1HƥHtYb3Lpfa ^1F lYfP=cE6 w jh\p*gn#,d&7IbEhW]ϼ0Ok,U/* *Ԗ0`.tU=~ǛpV4M&=~6.O!\w#rUkZv@!D{;yua?R"Fmؐ.[ |u[Xt!,dB+cM6PNM1{Cbsطg^4UNMx!DrP=Tϴ1N|/aeӐަ {dcHXxw1~5U*ܵ ^^({eրMq6%ZJ'/yCq\t}{߷~*H1 YP6\柪Av" 7X M!#Q NI6+~Q Ý`Ӿo Ȑ3tpgӹuzٜ,Fj<8hl4ZItر0 X eqY2mmɃ>V|xݕv!;H4N= -vI}'RLvK[eQz`ynzRLK]mk2 b ^K7tx'Xo<6͍񳎡RI!z P3PTHZg"fX%`bb>S#OƖY剽#wk]A.T][o#õZ+дBQysa7g0)aӹ'h$ws-Df.g D@W+ܑJNňGECB&~: e&&|>uŷ2}74|$* ζp)s;PeK(<4ǚ`c+ܶڦfCPqԩ_|usxB+";Ȩ;nZX:J{z#Qzp:Cp{a1IV>}v).iᲥb6 -t2wpl_`)U}|N?vӦ-f7-n#r>/g<ӟ9=\uoHXݮk[e9V0,^N2wmCƾZ:imؔr(n\d>y¶xY F3 v\ȈH(u!lnH\kv~tYK;bsV]y/~dmO滾*C@;2"lk+Z&H <j5B%9k#oׁN+ wy,nmC*.tQ:9?瓅n.X3O%_#۔vOJ,86XM ~^Ĩ̠aFm%DUA8X@`zՈ1 zRЫB-Ԕ#~ 䐣By&|;oź(ˆU(v /BvW]FCY; ՜ #8s?C٥Ɗx*WbUoU08JMD4Tz׫f7RTyJuLcD`#۶Ɩ#uyVEOE)5pJ0[t+=vBX @u#AA̡5},:di;Ya.@r|l'uL\T3jf,aZnC9DVzBܸJpnAr)xW Z (Qre߄K`?z1ǗP"hveeQB6H$"صrTQ^A]7a¨)r?eVV<(3k+gŜ,4; NY'П͹fr>G hu|uObQ8jD,7_'.n Q(٭_Tɷ}h*A5o.U[, Q L&MDÐfPjzp=Ի~M7q+B{/q~DŽ\A.?xiu^M#؇B Kg,T^dOՌm@;K#mBE2wT)̪umN{nI*J(n 瑮2xPi֞#4A^)3f ĖH/粰\o vГ͜NK~eHS F#j!?ʦHd Uh{V_yzuc5~9w |!dx&t!D4Sib%~h#˚r{q~tTCٶgJzZ0J\j'[Ÿ1.;h&L'/j@mlԝɂs)F3;|}9hcG p$+ٛj#E. ,;oQk.IҮZ0l2'W^H(򺻬kߴQTqZ`]qH=|ȠBtk[Q~j|,D^\Bm?j ң"ͨ4)$pwD Y$$#:rSdu7C~sԶSZ/K^J:uZܣ+!|0 W6bqKf ́$/T~HeHRvJ?P/#@@e&ZGIN_KW o_ T${q *!!6A 8R q%uFGUE@gP0I$ʂބ̭)=u3+pwHptp{p3:釂$Ej`GJIb4?tVj& ́fM;>jZM &&j4P"0yv}qjP8.SNKyBm2m+g},gݜ#Y1EE< AhUa0Av:g:O3U'q?KY{^^Q{v0D#VrKvO#zdN6Z4+]i!J F +:bZ`E8Y,ꏂtvHt'ɇRiC3~0+k( H<"t~ ߦ7̞X7̱!u ]-hr(m Kr9duH*2t #j - ;؇~5F@\iXdG1Ђ'6ZTZ{8.m@/vfT=U.+Ó8!X0B^E]OzO ]nRdoAc)4g WR9b0Գ^wi *yYp MGr7%1@wfP^ +\%${zqՍ$D9Ҳ+넠|7)] STFN+9=Iwt`;U?̍7e|+s¸*8r5$YVU ?{~ Y/-bZ5-\y C#hU{r騿lLZ|V)%jȟ14^vA62TgETs AR˸x2R^ǤVYs(T h]Aλ G'U?[ ~ALRx;#ORB6(0KA ,LO1Ԝ:7xd>{!e\&0}TODj紷*BhWZ@GiQï@i?^%SPtO'ZJ0t\e/-xm-=n;qPq4֒փ}RvI']eh5pufɀ;}^]辤%Nc-m?F&2ChHG6뻅*Bwt̉>!\Vćt~%]rZO+8]R~F85ph&u:#]gD+@7KsQ$͛%G$X$Zs/[&n eS$?KJDždkwjt{,WV7NG X,=;U^5:oNtNRaA;ݤ fի;5 /R.>]*B4l^ba3Of:/DgE,5  ,G?ȈZwC=PI2A[ml3gǖ|@ru`_Sr'fJ"(M=tIrVN a?TGwA43ݛq;~la"g&u.ŴC1ko% ꈋ313=Iwjl%/\VeI: `9iHxǾ"N`9W0j$t.&Je $6MޅUYK*:Co8O2H!T JԴ;9֩t3-]CW % =/+ųDtTrR[+ӓ-ʙߊ@|":z½h9@>PŁ 8֞\C+<}Cֈ@=jNWr 0v}-O^YҜo DM҆a+b;K^?Ðo?%Ch9rsK-7a,`l¤hKJ+R &eCv< '@6/8uRCi)(SG(i8)UC5DEJ$zH札̈́"^{03aбw_X0+m-P-nKlZqF:J03Uљ9j8PH)o ohE|pmy; /ekKip1k/Gt\sMZDd M$p{exeѢaϸAS=[z.wlhuEEWD?VOZTsS ̼8:[?sɿ}?{K_mN 4~x7m2u%X#fNebqI/fuL)n kOUVfׅV,^d=[lz*&_֙񒫃(_E_ou jkG &!VUcL6r;Ylc]=윊?}J8O($z~7`ɫ؀m@'DrĿdM=T2 \ׄL#&z?5d.Ga;{'kN5,fĮ4!;c7]Э4^USZjg$0T {>8pvH@pSLiuCR8 N1#è$кs-67 \4q,رZf Ԛ`D)ÀIj -ݼܲbV>=M1>_2Tu8]9 T?@D8 7-X\O ]\ո4:q8O91COL fjM_;{]ᾣzLn7Gl,}l{*}kh$iC<J_jɬ3 ^P^B.3#Os zoi?f^gf작sJ\%G3o?N%kNQQYvL<zO)1zÃޗО(ޔdoZ.>@|:(8m3#+j30wS7b>ЏF3t&g%3gߎ%m⭲h K7߆/+QjǛׄC$ y c^u}ד \:<3zO|rV tL.k|6XVw=mBNr6(g`d)˂ *_s=d.:P>̳u Fv|up";G|Y݈<=ٝa\iIK#rGM@̡ ]/|p~h“";(J6mSKL]-6SUy vK^|sx:wŌ{suŖji[<@I3ʷnOu-+W푙H\UǞ,]:: QqDԥ7yAtn[IYa>,cU=,\{ Y|QXPXMPb{9Yd /yvw2S匩UɩV"\Pe6wn,¦=ZV#OLaHJ[ÝԦઇ@~fPDE(&~#Uol5/8|I8,ҝКJ!6;]Z~T7[^EwuS7 !A_Cꥲv.:’,mV$hGrHӑ>-_ĚVM 0} HjbOW\Ti٤k3H]BI @LHUꝾwBCSqpSiߜ|87?>@#=j޳]>7Pf+\*:PnԔJb! /VUZ}5A 1>trzjX;·J=_U*=>qr~cf#Xպ'x3(dI˘Vн1I"\rfhT\Y(#c1Vvr { @jT4"kπiՍ!;{@1>P@C*-;|2b\*=$hd[0 K_JF6=#X[%Ȕ :1no^#9A˔qY0HBPNoɐU9\޺$[ G#]7!(zI;޶-gɁd8͉"4Mo0ڜ!q7BdѪ)H/ $'ڮ"oxGﶈ#W$ikN>G8'OBw|Ǎ4k2vںOw])CItDoߟ87+`||(3]s#ansU3Pí/%4kN6 ,t(9MX &?ai0b!DRie/cwF!W]!r?PW!?$3R̓>GdNtܑRn7uHd SЪ!(9DӘc}e{ $9 z(~4JQJg1i}"Ս[t#椮rÀ? bAO^>ec]o|X1:B 7_id&v7@iGM_+y`M0wK ;?v20 }Oy7z9}վc5 мQLY?xSGzHI4p\Rgw3>43jϪ,.hiҬ& QL~y`5vug4-s%D+O=m6{SvW5+%3ʡ0sֿN`7ۨ$؉X'BI?|S7@ýܜIpf8@ &M[0^yav@Q.åcGPÌc- L"w<ͤ.ccR0[W L%E^*BMӚֻb_n-) |iǍH#A=T&' B9#$+` Q}P/3z++ssX4]tLAw]}PF֎9 hǠ-j8?@@ LA|3`>ywL*XADvs4yϒ3ܥJ%\)ۡxAoySL+ D'-y*.!^AarSbpIq~x㼊sX |.X:3ܼRBw7 H'8E8n,xD"R W%)y^}3Wl."-<ʉM5ҁ @u[UA"빻[38Bh;,$>[Ą/\wixiծu{rcEU~N\0{F7M=vD:&K&ޱH]g XjO,Iv' ?RW!*k FJraAA#l@: \+rY^Hlԝ$$"$[wr7/{_86yj7eyֶ,bmqJ:NC T͞ppPzDptg{%tL>dcMڕ&޳%%hZS4D$s/:@š6OWU|xd+t&YUӪvM[ۺC˜0I©+BnUMn Ꙝ,"#kv=v~ȺE)>VQptyf'q;Yc%``9=S5pY^*A1rے+32rFONDI'b2Kz[Ǥ簖PЃ2A[1gB~_ytsO^kwfS_]]b?U5 l0j:h-p ,V?L3c!bEPY p6Cא$&Esг]kSZ;=” 1 ofGicp&U" $EE6%fNB;{B6[2^& KA~B}fؼyy[`>}{^7w_>_fmSG͖#LeeSjf SK_֚&[{~a),,tjMc mbm8_l–LMz5T,Wiw>mXtE'hٍb!=sY^4ؠĿŻluoy"54 ogRŠrr_&D2ŏ!1MkBy⬖նpW@jIDeBƵ%yb~SюX?S3?u419J+pXmGkY<̎"n' Yݥ)qk"+V/K׀J~@H|e $knj`IƒFwY$H0E"^ӨW; XaaUYxlϽN\l]kxJ[ o :ԟ5,dg.FةW02m0x;桃 pyJguXH_pv~a"Yөᒫ1Dc7cZ̙mzRkmW{j$Qi&5:^ +Q7 ``ﲘO|a*95t:T*؂ B03!L"ґXqΰUBތVL! <,F۰3̇Dd|} UB[6^=|G(I@eΘwb|i;rS u !+lg0g*/+%0r"めU\5YՂ=QntG$ԳDk{qk ogžeK@:>6qSܕW`q$Z_eS!?[5cZhuuv{8Zp-y~k̶8]gCא.Eږe/8nj8*A PE_fk+؉Œ-2 eGwwaK&>d^@($zLgL'R%NFb񗎚˱5ӶSݏg_55l3Go$A[e^|D>-U`Q`XPyΆ%g [NIw2zKYp& ƌ_1^,ݗ,>eםv!EztjBDHPh||aR?fK!*^Qҗ5/C:$ңwk3^ɟj;QVg~k0#zRRT~א*H- 2WZ={:TxÆp((:aϨmCX;O\\Je.R=BGguzgJL\M؊E8p Nwp=]J<(ϼZϘ)낄D@k`$[}^:GnQ] h8ĦBɟ\0& krZMm̠!qBXCF>ٍ):Z܍.^3v7RZ&2`6&.9,D`;\ip5!CUks)". ĥHB- ,Oۥy>25?T[DFv=^=cI W6kaYShX|''w=uu2MU}fM;jKSy[2vtiq-6=barFU'b7bkyg3O/g=+<~whj@@ Y_p7+( qYRUT~ϫ^}p|M $F {;da=Y 5b} ݶdCOPyH=*5.c<{uc`zFԤU}vT9lӤ!E4 n~l>jjX{Z4Qh`+!-(H|z{.B_U޴Yh#c F]edq1,}=*{@iK[I>>"gbeMdjqV Iu3ZЯ-bg:?C)Qߴ ZAZ0H w?ʯ7B~/= jkkυa2֙-S%lѩɢ9*lIj.$0do-UeQ:(X w{h, I]t~,tM|q7+cd @qY53̮,@+mE @ 2 Pz ?t\m+rZXG3W;}ņr~FZ\+ C/FqݹǶyw-lkȓf`3M5hƑsX6lkUo;ա$@wŊA[?dKݴ1.*=~9OUM>x/éE."Ҩȥ\i-&kS#jӈrߡ1]p̻݃jzpPd{DNXN#xVۃN ~If3G7Tٿ#F<=Q d T'?$m(AoO%]}^?[Ͻ)PzV;)x*GHs߾y&l!ZTf0Ozsݨw4~=$C6ȁ</<24@/›T8OG2>GO|oAӬ?Z1)ye.OX³ޑ}$q.ܞw6_ 4v7< hsz"4Y}\"96A[Vӧ_NiDcvQ'"|zY5"&(X5I(u :eЃ?ⵐo!ev\0{^msܹtxHrAÏ$1w e Q}W-ndˏV y9 `Aqh^ONip@1_]H?!G)t+Iʄ-fH%懸,ֻ`u) l2M1 ^NhhL_}cvjOzp))ge>3o[:72tx m,QC[}O2Bׇ 9(R|6YLJZos[gto`IZNtpL+fSN$J% 3:ꖽKr1-ԇMS:7kxS=c ϶zvhJtd-<` %☝| 4;rϾ}~Cj*d'8{cЄ'κ2xL DKbėKGl{\ubCM"}BC&hfا"Q"m+h$CD*57Oth^Z %\[7XVC\?: H6bDk^oiyPg({[up]4M=Jxa_!C6eUj!6 O>pzinBVxF)0gt*.q%ۏo ,v6{)iyC~@iJ0U{B 8L7} frmUE&vNWHSPXI8W}/W #7|`i; tli_%>KWM' *:-WD﹘roZ y1K6dG WM/R}&ik -hÀ|XkƂ KUBagd$G6 r;_5H0 ұo;{l6N h8Gk#$J):Z-O,܆vPF?ʇ!t*ãEE +5y$V ôgmƸć(ϫ+#xc]>gh;ݳ'ke,x#'ux  eRz0U YPB&V mfo,*i9/RVHɘ9~7ԋ9'| s;kW$(s"@MNLsnʾvR<1}A*a/,®1́rGIz-ZmQ|lCO(la/#jf u_vѲc+jJ.x"=޲N"?Zʟ} TY|:glqIG9N;Fq'9ԦhAQq8+ha2޾n׵CA,{n,>l'R&:$9~kY8xC+Ѿ\D>ʾ{=驴bξJt}ܙpA$̆ͲX]j,!rФXp( ٿH XWIS /]FWM:fE|X=a W/yz`<kj,qR"tVHJv qs#wRhrPe>8۲jKynҦammj'o+|enl@:gMS[WS E4wtX O 1a{/f.IPCM:67~%Odd2sYcmI֞^LY@n8cx,ܸc6"@Z#ĝ[hc>OyoE5H|NB!S4%\-UBFRҒмL8:hsxYFX+l7?[fԻ32_ŹGTɭ r2F^~"zJRXھwJ4O>N5?} ƫc24EUzP tWj"B~` 4X7 ee  yp**PdX!jk gr6^Zw]^g3>3?UʴGK*OQ۔hVc+O$̛BlX۪&2:/}V^f. ]U,!1a!j:ykg06i"ͪÎ%Tf 1UJFO %~M#/%X]O3fٍNczS=yKng)06FB|N6e hJvʬwVWቸ:YuZ3ҧ>lQ1!iS,1[:jUѤbPR3Q2iL3],ddukvբqPIupa-? GeAկӤ~pYOeDQv ?j[ RIB?WО}{eYš<#9dB wQIN1Ƞsd(U–#IeP|AR,0fW0i R{ P8f㏭y%eЎ2)m=maŠN /ůx߅J,.ryZȵiQ>ɨvw7j鎵#K]EZT=lq#0qcbc?Z/ N⃢Qc3e}6:ig֣XE?zm_`l;tmV9G@V67p[Uj'gXTtr !^49㟊 *O c^!@s !z"&%+5M DB%j_@YBX9qz;6u 0>%L̈́k(|R1xH(24%',7`t iVLro&"G~4 x0 {~WuP~3\cw8׹h+%MBAmh?q|d,JHxs,>P+8+'VD 絛Q /{~=Еiм5%DmA5AX N_2忭TYXB< k@xOj(6ВO⧼Hdz:vQk8!>nҬکUsF8*㣟L%w)brzː"_=#$h>Ծ+0_{R?k(UǾ\3OTz^#4^qHBvIqmt;w4G!9Mnx)ADla ԨXF(GCfGK"ف tڕfx/"#lYs'tz_Y̺@Ą*?"^WتX|spWdUi`]6>KRmp'm~{)c]ay[7L3EX5 m!XD|SAXQ9۾O$Lg6lZ5Ef*M7V zԟXC>6җ]dcAbe\v[OgCYquz[>CG_K 6$(m#/{/x+'˴)tt7o԰c|^SߚM=HʽMP!aZ]]I4.Q6gvHݸC63RnUaj`fǟ r0뼻:L?dJ+2}g bh6T`ºM0=rq^gTZ{#ܣp~q褙Õ.N7OPe}8_"=ش RDEǺNu{0D:Y8<2'q=wd(`A|߃h$g8~D /bJ5T1INd8'/ 68`!De.a -mn4ۅ;n=>ɤfaԪuǃҟB͵ :%< J$NA jF‘>W4\AZj=vu.b%x`q[u iUYPn 0hM =c%" gt# h/&8pj/ ?%gUK Fo}L}[znK#F/Npm r;|nZ|F>zhVaAYϏ_cޒ4'p3z:n>mA@22MR]  C ;P <$P*6.s aJZ10`&ꌳpN*Q 9(JڍPHGX6pڷg)4##ܲqv O8MθN 8$^GkA׬<'߀Y@yw-5`t:#^~3G[bww}2`?`W;YUb"+&(rfḼ -iiHR^L d]N#zKn,Bn~qxZu)`I+%XMEUm%!"q ~*6K9+6SYau4ަz:eBѻyt%XLeM~_ș"3#gqSEĎZ ԖT|iR9:t1cNԑH/ҐC?D14_c"L),Lr8!4gRkJۇԠcx0?4~NEsO/Wt pk~-wi2B)B&3ȳK,oΑ!uH*+Up9ȉjw[`0T&T&@?S=Su~xo͚}Xsz$ b#̰~?ґ@9,0 7/4ɔhE ,꾪xū1l'#|]nKG3ȴ0 q XŽMRdA"T2/X6 "G|]ߚ/22kmvAlύ4H($K5P_bgeB-|ܮ>FڸNl@ܐV#dK:)KwP{8Ȉn[i|vLSpЏ>E1~;0&k~Jw>2-o+;+Z~x14S GlczW+ Ty#bZ*WPԚZ?0\ԃ@XI) ,}{HyecKFQ\osp(=b}^o}PܴՃ2Msr)oYK5\:\9HT`_s[f^nY'f"i*c {-6)')o?k̂vzG 8`$\foFЙ2oOU%{UҏJki!3O|@C- YґK >jVU(eJRyԽCX y<= 3q!\A(% q S2>wIQPudBt{1Xk,BԖ 8.Ω:~؇@K b/r+Z w5]*.I:M‘J$fQ8r/dףqDkLzUjvc(?d;rՇ˚1}'jC\dֵ͹DZ/ fIs=@"p/7.L+8^:&[^MdpEm-*mpvRh(cي;| af⵮a1bc 2\Q잯kj{4,yv62x 1U4T+9lD{:֕{d )1⟹|i$t ]Bc=AE5L ap uc-n%Hs#c{t袑Ѝ ;WI u`/fE6 "xE˸ڿՒAh8߫4|TmBVoxbqҘ9) } mexV C< nUڸJ{/q ?1rsTN.<?Z"$[Z?fֵn9ܗm* s#<*!Lӻ(GG{qJa%StlsM3n[+mFvVTm7bily Z CzZ3ê9˞i{'٦P 5Qy {*=U(ZO?jbD!zz\޾м.ZnR2m4FY^VgY0vаC|F>;= nr))IFowOcN_)WJ.fE/hq}|0Eh[S={BQ|ķC 32urpht +>SJb^(ml54 ~"ֻ-Fi0=F Z\0 ?Z?b~b^hp sSi gCpٸ@ӗ n*3bWu,Qծ3Bqilצr+WXg/8 EEh綴U0jg~^ Z'NaC "/`OWzo6XGeBlSa0(S6հ~e-}0Fb/5ɟ:[ {~ Olcȝ/-feyOА$#9A4:U[׿SYknw|!K) i`:b%=4S|MHbC"J}`г][_& /Q<7J|nY-K'х:!F6آif;T<G<XQcI-$"{Q\;l쳓xu ߶߃,,dS?JХ $|?܅*^jIgZ\^VBРU+ja mP4 &f7`˞E<^NGkd-E*NK-Wg qfqL5>nY6x>{3zx,xOGlW;LtzbǦr'../o} 0ey@Xo%T+LJb-FbD'oxi`40lqb٬:RR/DSq#`biA:7cN Q|{fO@rե6dq[[lQTg$N4`",~sT1^Ʉ2|}͂4+9=auF@AS_E[]Nhi1m?>^w|XWFW Z0w+3%V3L^]i-c`tsNWS4=(uu*è|O ND3$$JV%飳Y]|tō`"J5x1.=(+`I',Bjb`F"|\;9u$_!P4xdDE A#rVwd`FnW:ȕ=9ezytO!`PŸ/d}\W{Ғ֔z #k|L$鑌X/ Ŕ+#Fq}=}OG&sQSϤ~i͑$O^%&AVuz4 RpA?lR/s||;K?h1Ɉq u T8j&[Ä l؅|i@;ulۑpe5OuJgN ߝxw^x< 9K-4^^!8D›.rk-ɥ5zGĹ_X8 Ů;釖ׄί̇t+`]ȟL0%bu [ԘaɄ`5voC ߍޱ d٫r!M6i##VMKuY t@#k!2?h JI_N3ឰϽkLtZE0pgo`x`{uzL%2>/A4})'R.&~g8%G4zh\m˵!| Lą8pis ƋI ?__مfs]`'֓Mg(OW1 b֐ˢ4~ 8?6#bD\p:* gH2`#?c~Zjх") Z{D!XdpU3y %kRǤ1eB81OΒM:,EvyvBzK UfG?]RL⡇ ٿ8‘^ԍ,D*sؕ8]okRV D{Ki\Myik}֮沲T[!^){!EFSkV,lY+\}"Ȧno+f[pc> zzƓFocΓ,!Y@=t}H>#2)>0\k)SM9UhSɷZ1Rb}W-P9^hJw&鄁CX/L3 !C%~_=N b=8X+@4>-F8%l. .c !6s'7diL$4WyŇ2qB9a~o$\SyϳX!CK-IqU% kk$V*t{[5dJ95YNr3\| Lp=J)g=¯,FysTٲ ȳ#-\@O(,']zf>J4ߪB_bz *PW§R.A.LE*-|&# gsutW;0 g;n{CfEǢjצ}j3R+[ z|m(S-IVHݍE X@5wW^js?IZw`g{JhT'y^9~[󙹳QS3I,9"oJ|G׷:! duЙnMJ xA/U@qՉGU4L\=CN M`Ug*73Z}<)!/ǢF/D.H9vIVl2G:PZoxf*sW3h%_ќ u#'ۻ;$-BB-Z3~܃X' q3 bb?~# M+cXU)Vv7 دܢr)sZ*WN=L.4j0ݮ$Ʉ"8:6+c)Y//"\N?&)s`Օ{bLkn,>\ze ˠuQu+oST/6A]Ϣ~P@ `;7N|$ɃCj0e,᧰%ܳG(=~3682>a2o;L]iB_W*X!ÆBݲ#e&}c ESQnLsZ*9m9f~qoe>2io-WVio!5I8&i'u:)"/ߺ tӅ$H!Bǒoȋ=#}NkuH~X$` MmȸQX8( ݕ8#D[.$cLd HՑ>a3K-`/a_3|)VV%\|T%п4Kڌ+K&hod@y|(†7tD)c;1{R*7\T|hgt!gB |NFW82 vgo(W:>L%sC MI YUY"./tݢ~FvǁsR,5ZZBEI{`*0YGF]Φǜp fK_鹂PV|rS.C%tw6m^ZI SFyQaׯNPCe@!PWEl1wAs{o /(ݾ2ZhFMDݴnv756ܖ07*m ˬc:?K7j=&s((I #Ȕ h_{>OߜI]h:"hV{J¬}b3:X{Ifff@-pʼq+pؚq/#;z ߣFC%s6]v h{ \(Sh*7[} O@u51G|K-%׆ɣ|?J;$ͫGD^7#WJ!q(Ua q,1*= ʗV'cp-n۝xJF֒3αdaRL7Y,<%jwc <23^p9 lhVϏ%A4I!Ĕ>Qr`€N΀6qO4ŭӪ%"L+ɘrQL};~| ̣šJVSqYݮ\BmYWگ f.[S,ĺQ5 C!yˏ\`eR> 5'(u &9'J +2V(0ғT$=R`BTCN&,C[B$0E& ZѺ?Ӳ'f+X?jQAp:Wq^?-$7:qd|hhK @D4VdV G!mI#gϟ2&g5gD0@ z /!\]jo%޳ı{-[N7eR0KS~H$\e/blO١kihM.AL|ĕMĺ~_aK`^hh዇K[pSp'(N B~9@Ă)=R'wTnFv,y6Arkr'm L:tv Htޡ_oHn:jhvZ]Qx\Vam%+%ngwf0f>,p%a򑆉F'E_3>UnTGFο_:5bO%sZ)H.aSꙇsd#-YYJƑZaIyS6(d^8ZH8bH& G\v#}E*%/d涑3A-?}7f2Xu$^ՏPv%!,ݰ<8M(5tν|5SIֳz@Gƅ 9)E0&YFq`?;MT=9x(9f`qT\$v?#A?NZ s⑞דz ecI@𐧎M 7k(}7BAtB:Nj{C,Zh7A v 6iw>H"ESiS0Cy9D#Xe6b.qy>A·C1P9iKYQzgBovVӿIyshoNWL"f>bV4Ls/ ~$dp~| `ME f_ ê)b<G\A^HxJ#q-T}Z~rP Y(%RP}J0YN:NA>Z8uNKL8#1L3Dѱ&BIlA&!=ꪔiӯ3($bq5,Δa#+!Gs@&?K]+XOL a,y8NU{]tpDD Q+{Ab_`ц͋q%m[}Ӄk`Th̫ Zȧ(n`lLVyC2-81p`*=9l֋8 CI?j5awQ7peȽ',^lv} L%8U:fnH7^0aFayT\x]|aQEr-^ BbslϜЁ0O 1R-7LW>D-P6Qz:09{qNr*nMdH AQgS?zOƍbD'U(;PJNcXnQާ"T$Ik!,kgZ'"į~;S<ly[  ԗГB@K7vkr2x."VPPFT/P_IZYmGxf\\ s{a%guƝ\]"Ӿn W7WT*Gx谆ҟ0[s?ƥSRuJ.Ν3_!WK'W/Dd9ԗ=XyAZ:u\>xu\\,P;{A" 0ɮ|qB{/j')Z:,ˑ_ǃA}{N=%5NX^W ?m?s,Nޭғ-;U݈C{Q6;uȻblIHco?ȠqoJtc+Y|جu2&I6_9TT̿iҳ+dG:`SeeWth*rQt 8 bѾϡ,VtzuDG'ևzMFѦCQ^"2$"[U.s:PtsR8RTCqh`JC^}[O*Qvުٷ3 U*;RCsՔcRXڗr gAh_/GwC.=RO7~kmk5Yo W:R }~0zP`a'Q\1Id~O AH>h`o^u3_?n˧)8XarxA5'd U5`MV7,T0=xkdt.P?EQw}|@ZBM)`ˤB]|'28DMVekYD碨餴B9Cs':?KlXN,SZڮemZVSSFKx݉:l$4cVd&TЪXzw7q#:-ir-\iV:BAu$G-i!*PJ_~n,l锻1{]4.EyfL~$}֙d;QgZZ!7xF9 z 10{?~S߱!czV4Ma-ĽFA2nJFxX>\Ҍ(b;|xNe3g88:t}JJ,ZѢVvHQF8qLmU:ƽc|fmIXv.6cqDC\ݞ%h-uX kcN|{EZ2=#…g,yllG-pe٘+w♣doH4I$bWfPi&PFbSݸM+)秘q p s>҆ ړX4Z ;xBhF;K^I,$lOBVt)aT^}?Jy`$ ϫe6GA(*x#]A0Zn,ނ7Atf,RQ:YXȑS}Z@_*V v; zW ٷ$ND74B?p\KvO0/A*]+kpRZG61n  ŵ^)[SDknk|ys:!#8}:;LUwRVeʉTR2^v>a vN :*ȺS~Ʊr=qbQ m&BvX/(L~篠y.vi^hͷZ$0@yr.:zةޟW_tKՔњ,g ws:btIFmkCC}>%4U ӡKs;y\),vLWdΞe/M('GtY$%[N~BS:Ѭڪ)w/la&Z06mGus½#7]BuFN5kh+V{ sTcir)*775q4"w%x~?cqPQ6-YD{w`Q 4i_/~(96|\: D*7BJ / g;kx]L6BHk"c/H:GL>"?*D9Ǚ#X+9,Ll鑺{3숄+Ou&X%pZ^#̵$iJӜA\ 6a eyqҡ.t*EMXSֈ/ղZqw 3m>l/$s2W jp?3|5RNOtځ&{ֳkWʰk& hoH$颮(qK|_7Y1ZT>N[-O>ńCq$|-=3 pgS &[t:e$#9ԕ!ש`}{V"([zm-J)5:\_ob8n4?5/IY+aDճzW+]cF8ɿq̝=-` Eh 7^u)mSXaawW9P'0C lfOIMX:Ǝm*J&qqo;\+dڑ,ݥzo|e"KQ%!nmeY:U?~;ynHo q6IŪc,i8ULƠЖ P#72*(X&w:g;F };rnWvj$d6-3DSo}!aX"B 'ļ a &BÓ \SinHZ3d]#@ϲ/d L :&@;|B]ruV}$o?Qŋ gYC5BÇs= *ŠZFXAp!ݨT/)+>{,6&0$JQ:V <&iܔfɹ_4bQpd 1S=:<5  =ktfܨ'ڳ~_ޚ4XU-ckl͙ [t85d[ 8JƾTbB"-oH]β~.[`#"ĺXp8 4m첻 akWY%:25 O!^ vf# bH4] *W-.*o#r> L{A1AX5ò?`@\uŭb Ew.8y]yl.dж0 j-ȶ)qW汁 XEr|wAg;advo/mn6A!G 'k+a3i*&~Mbg\~bK_SD^vÉC=оAK!*U ^c1n\4B؁5UB 5R}GWryг*}/^`kH+Y/,"64ګ_1b$2kujsQY՚mL"2Y|*8 պ rCq:(7*PEly By1yB]ގ'G w)BhrO436E`.&+w,` /".n=$JsPyPJlǜNQTŠkEU',[H1NP.-"Ȕ~$%#kw쉷aA{P 6W'W|qgJEͰ7Ghgph;Ny ZXƚ; ۣvRM'x̮Wr:e %g`^c9]᥊ )n}CЙE.oy *vqyY"@sǯ#R[,u>8_j5A@I侓19·}q5a_`f.ӑ%JjJ>iw4_\  ^">x _ A8{+`Ψ,oFQ 9u=Js ۃQ/OLdF$ r4*j[$vbm IYLj&t.sNJo =rհ|?#AצǷRմ)`_>&Zp^%oTtI9"*p|^/}s%tq8QI\ Ӂ.wf h^)R,ZW$7O@N6F=jӇXK-q0pbg 6:bC79GѠSA">aSE>"}<(_!uoR 7!y` ݂fl;6+e 5flXwJ1y cw)1;fPc~9׼/; XOhV+\qomh 7 DI/&T{HԾ#P/@Y񈟴e t׃~5ݴz)[E)K.Sfcpϯhͪ]o{NÉجGn׻odBH,aػ@_מ@[*ewyFMIc*5UaaݣtT(4\j_I=߃bdbgA]BsR!$`rD,H dҽA:[< 3CxM?^yEЗ0,d8QZDӖ?07n-ub4ۮOCER_×?_)'-O]\Do1oW_=MAd$qǥۘM[f?gJm3> u\d{6ƶro{\IзHC؟^lpw|;̋d8-t@:s43эC?x][2ϣj3FQ3:#{A4 ޛ{?BY kIF:]|V (>[Jy'%?TF5֛zʆC3nkD>F Ș*vS߀3d< lNU*IZ=tM鄬}6,g$lBwtt$mը'~ߏk=J8;D% ?Qip #Kg&KYr^vh z5B8ymd c`~I)d}LKV\ wa\Rrsޚ72N!LʼTX󈮈j+OGuUf|1޾ wTRe1JpXw1b_nz1EZ8ŸЪ39L q jD [(4i@-3T~w!hF[˯,Y$[6^5q4QMy3@4mm*:fF(5'cŪEgVz8P$:ELV@D}3qd'-utT0jq +cI!Q7YmYUmR!%ᆪ{A"V[|&o(0vTH 1$ӥWz*nH%yH@ "*DlxtaNzst{c!MGzc;RgU'xt"[5-[uz=bCwzjV[Wpf) go쭺σkf5s;v^ o"Rmb&-i]t{Z$ϝ1s wmfei/ &A E0h&L44{'͚ee.6混LNCHG=85 u *&{&M0sEntps6rJ߮[Syt|[|>Jfd0b5п EZ` ]W/j#o܄Wzt$ Z@u !"XJ!}%s@2av+ ;Z ~A9˟ IWdW OE"SFA _X}"B-#8g"ϳ,Ltfa6rQuG˙#zXy̤"<6ʝ &҃OrLإp[HbnWZJ1)H.sjjq¡:?KFvϵ[8 ۦ|Vz-9TFsac(`5(PEэXҪY;=>ܙW?"aM)ċ.N H6NKCw1տ1d,G qt`{ᅫyooAނ4ܹ~k9?s(z"}Qr) 5JܔT`_T,[q=:TA-z-yv%o}"i6ܠɶD:Tv+U ma\|rG W4[FvS'<計@da|Z=?$%: ȎfSP Q (X7Df!!^OVv/u3Ɉ(FtPlCY" y% uvm`Swzi#4d.w&̈́e^=&`g&CLq0= w WǑh1MmG6ddEKzّ 0}jwߡꛟ s'E u =r.*O(E{5S8̌¶tMM.(Qs2A M>&T BFLpIzDnP ;&?yTb^KUַ( n`>Nyh/b?0qH?=_&M ̗&ĺ"& /͈BY!V#i( F, 2w6-wAKңyG>}Qb⊻!6qk&]Z@Gr"K[D6JۤgokI1 KU7py_S*A=Ai|,:DˠjBjy?ȎFgqy 8]'Z`,;&G_.m%Aʈ3&'A?|A 8eoJ:(k7&yJ沌lSmcUUK\ͧZ6#KS༰ނK2Ag\Ɵ/cT@L'A mc'98J[[`GY &Cc%P wrrkر1~qth5Iv \ߖ%$/y_[ 7Fr"EL$|m?!7kSmXL'\CWQ}6E(@}#rRm;|1J5-/(ʶaE- ҭCl+PF8px`Er&nWAkNÏbwڣܫ$1(ɪiAY]?8gO>1m*+=-O*߇BLIgo /V55{X,@xƫgLhښV̆ꆫ(VE"9/vCsPI-UfE\eIkҕ? uUQWe)urf(aYތ I*m4K7s̓XNN" M˻kn,?;֪E 6N3sӌ$$$"96J [YR ;"̴pDY3F>YgqAlҨ3Rp_S:M@9̉z8\Z;qC޺<{"uMn"J v t^XO,ȏK QTE_L600~ @#4,m(51IeyЗA-@B1˜+pew~ոw. [p[^VVdV6#(;'_lJφȢ{P\* d\ٚ*Z#WIfDW]RRkH2p7(Nt;niU:Uw;eO#% f^W3tm_ZqTvz)ߢ Y*0F7|]|x\6F]j2F0UE2*[F9wqqpCvz0uqkZ'|Z&8uHL` PwƘSb('M+6+ t\% r}}v#2tу2% eIkE)sVņMJc#5|tݑ=ޡ6Q|>[G"1&@]0ȅw2Ư2tD#(W%Xn ys=` JH ۺ&h4 O>gRa&qpFF^`{ fX>$߭eÈ:"gfǟҬb Ō&3blݜkR$Ѡ&`0k5  PI DTvkS9liF0`fNϳdl%I4p9$'Px?^{amߦ}A5ZTÀ4Ʈ_&Q%[ -gUY5ޥRl]Tɿ}*RӻY/b$Q2.wl,Hd$:䮰 7wܫ4Dׄ|U.ZbUg'/ 1JS2OƾuigNUCðnvdBKBt[FS=y(IiVohRJ`s72HF.7L_rnR3 vk 3 V`bul ޱ#4`8_FApmΰX@Hݓp$0{B~бύ'~W@"܃Nh~I- g ~84M35:Iøع4ˣ8~] n8Pzpt_O}Pn$vKs;D]LDpIzR?_ɻT UOOd5B _$V:<>^;X^a[{sAoe,’W:f;]fvʘ[Ԁ"͆DPR{$iz1H{Y(;JŔףC9(#(xuV&8Chv:=<Ա[it=е\B᥵WGI1ELw(@*j^yVUXA!7V~]{!?ڒK%=W jPټL`SX3[$6GII=#Bh&bvrns 4X% 6}؄5-Q & uJXYq܎ǖsq1qy!KCa' dBHCrY 3beLjd9Mrw/ei+Fz&.:?"_F..DL[jQTtkr%>H}dpF}X:HMչBW!^(iY gZ%U#AZY05 ʃ{) kLc/#XV׳?T}ay2%]oM={wr5u"V*"19{5m>Q6灹>TvEa|6m<є8l3B/`/2|JoURfFyM] "|]QOͪCm:c f(,2F]+iGL b9P"S1G y5]F4dU'I5 ĐcBB \һ.ڠYDz NwtJf3Ǧ6-25EI37ŝZ.#Fg|4 Z#U %)t05[y$VgP$&e.-E{M҆}:3*[֪NT)&hs@ܝc|٥2RwHf=N'EE# e:u8 T 졈&Dr:\9ID<ې/Uhʨb4C[:`8T{aug.HfQp<[ +:)n\B5|rՎ ʡKmN2 ' ^HviSg%:[<ug78pX ! Ž$Н}ų(3#at2o7*iZ7k5C8S*NYK8nYnΆ-7. x ILt  px? hi4*NhwloU peԡi_ϩ{`?2<e(Pn6Bg['f[AO#W;䅵bBZB2rYA<+J-<#y0 mf١pZx;<=ju5&ԬtҴ-8K$XI) )&q=?W۸9ýĺ}":."Saor<7r{ xpQ| a$mHCUPbəZh =JP5 0b n|{M2=o?ltcO *?\ F& u!\>,G<6qb5v+2N’i*v@뎎N}#`F SkQbQa)`DmIu~yI>!dEq"j.C>lk·?m#&J˜ :8Ǚ\E@)Xg'e;;ܖ@]^ݿEλjS;xL*5}wψJgB>yH*[ڙp`S`5V(pi]-'(uȤ+ DxT6h׃rZFKv0cbU`.]h;IVʁ(]غ1 9O/[urn]{f^=}Ҳ*Ā6#ehW: 46=5 dGD<ԧWM@/X=%4"~pϋO_Q%7Se9|# 쬟Mq*]5:`Ge=|GsԫŅAk{̶֢4z0˕Y#@O89[YF]b&,on2YuHiLRe;y~24Bz Գ0ҍf c Jp *ɠQdit '&1SQ^P룦f+"+a;&*;{cYj^I5H(T H''a'K,\WVX(kU OƟi"`rjZ+$W9HP*gi/m\J$UW#೘wsZ3 F(/Vz,`3:FˋzܔLx6f/^.'6Mt7dw-xxЖU:؞ ˚Ml+-T{MyzOnCSpQAQ4~ܩC|{/U%hha @}>7@V_dfIW-X-hw> j=Ux bA!cӍ/{*\s YA]#3azlAKv'޷ݢ,TV- FSrȒ&eAb!;Ԟ1Z+~KʁC Z!n&ۼRŏ!gXNYjUghb<zSKF޹K^&Eḫ9-L(@6tq!a0C:9 4qCN [BP O1ˤX]SG4rBهH>t>XE"?C W̄fW 2辉 WVl6ÀH@`x w[o}4%#|iHkUҏCYPz)_̨GcB{Sߐ靔`(ŮCع @҂lY}ye In9%<~[V8[lN~}^M #/ZּoLᕬӤT~kI8T"ՋFo!g=V[7/дCxд^0^e5 9߬@b B&l$zItzu{|Q"E^) >LߖO*ZLO8bE@/+?2lye?IMUvpd(Z43:[ z?3;.yU] <9a|5*,YmQHacUAwͺo$W?Θ),C`FYW0= +QU&Xo:d:;^@&Zw4vn;tshPƳNȪѧ\G=Y\ 66g#^ԡ͏FX}EV4"IP/вV`? @N'y)E>g-/["LpxđFNc.% \ 3ݙ5LRu7=O3^1o c҉/ ()F![$WKT2`// ]oF2^ySSw$= G=3zڃ2ݙOʨ˜x/.SuNhKK߹)=vn2d(֗*..BӿJv%Dqy(@DA$狼EZv.\lL?ߚߧRRBJ&!yZ6- T4GGk%ٖ[wXm|}N03S,UyBx&>/9QV[ë_ 8,3Lrq2a}ĹP+&nRpRJ檳O 8Ķyl"[`Ze;AԟUC<2SCp5pV3E(d{о;ژ-Ѫ;'FK  !5N |+gBzR Q9 \gg ^1E Al5EBZhφjmz'1ݓ":+^^ p}Ĺe\X!2x%\\F#V8EC{ DF!&H^x`詙WYt3Uldr'P=ǨS%E7XҊ7}dMuvI2f B݄Q[lڎ?R&sa,b *#^]2+%)>z>E^jA>d ԫ݊ Ø[#H'f/$YTP%}GG)ӤG:=pN%ЛΪVxV>vux(*|q}wIUNc$uq%9ʵ vOKMs'3<=@uOOwhG]xݥUiio+͚OԨoie"~*_>J3j{T S~ j F͹|c/"֧'!Y}[I߆Ժ i-t")w@~`p#(**Z:?a){@15#y@^SQH>K%˻+@i@A( ; };@gT٬}9˵va縨J9XRZ[x-犑.}O3 ¿K_+/AG3!mտLKhsPwE&L_'|I7F>Sl%aFf84eˈ!7t8N,R7rV`zn6Q;FSh^:8} ,$FS6_R^U aiX[B: 0MS}a X}hMZfeD@!3VS^†d6 Ta0<}g!3a?^7x|T15 v/mUj*/ ,D '@L=4iڨ3yGRNJd6[%__R[<9FZ_} fYtDҏư4nXV9:Xϗ0::upWfjzRU"kbc3Calj!.ܾbf{|l*+T 041B\Y, ;svk{lGf='8GJ 1h%6oX<zHbߧnC\(t&ke}hac ԍ$ɐNO@]h_+ۇHT,E5e8 (IMVBVVb#p( oe LQh$xb 5@A3AhMq|Z[&bdD^/Xj=M0H fxjqF' TbA'%j(+et E|ne8$p^!} H0&ԁ,8--}@wuCvћ"t}[S2-nb#}V=njܩ!#7"7M(Vc@SrtWI n ݻ"̔d]2bZ`oxO" uA,;rH;kD]ueO-$~UTb%k%._;I_41?ok$0OT%AͨE'E)hpމ%}Z^dJSoوǫ|c;Tbg\Ib=w-m}z=8ٛic.F_y'+eX Eo7TU"9'IîfŝRYQ.,lrġ=Tǀw)0F*J$V-bر9gM`kPfsd\ݰ9.m5Lv\܄&:Q_O5D7[YS\eNj-X#6+v"O]g/nxsʈpO|WWnJгda;|DR "MC)!`߬bTU]D- +AkN¨f)tjv:q.eW~K_p1ZsUٺIk]Xc(nn}Gk0sL{vmPD!2Kra(7]3yB[nM tK6Fmk}F۔@Ad zp$fSr9>޸aNZ{ۓm.v_&xCOe\CQ45VCKOC!i܂"m<@CXeG&9m.$;W"R@:&U{S?xn4HD%QKT:l@U[F{{M$*Yga~Y\"([pj-P^2Z.n;s~fGAEg'r*Io}. 0/bݫU3_/͗%Ɣ cNkcο-u8)}  >b,iMqxԱٯ-Ns>3`#=Ÿ7{1-o`c^2<9ݣjFAuZDZǓJ]VTjwD͠+IԴ0YSw,5#n|ibYHFNO2.$s _Ry Ǹ,POh4 ׏w?XI:~^P"؇άHk!V$A] h^=byП| Etxajw iDWؔuVdYHl 5xK=PW,-L(EX8kc !23zZ@4!2*\焛(8S7U&xLV'vWFDG:~z?̞u}tj"k,L̑N茧4pi{dQ)2{MF co$?C=y-*90w/|fd6R V2>ygؾ WgB*\䰾R.P}Ya³ 6[,.RQk&DomMB+% el8M)J]gFPm<UHց31ȶ{{IGl0mTT& "KJfK3᢯6rz+bR5#^\kga,upx׵a 48fmGVT5P )u.n̮lspG5Hq/;*z6up&ݪ )QB ZoHVzF]m'deF9Cbo|8O\9T V 8aL[1[hĩN3eoVRjXD n"i\ԡS_1`Kbt jٵ fJ?{Rڷ_,1*aYL8p$E_ ;[ڱv"PQW)O>ώA1DiYi1&^LBՖ/D| H r Շ32~!৊hvLf@63IA3{@g 9z\k@wߺZ0y)}s{%o5.R8p9p`3 c _ ҟqhQ% a!aD )T*_C^VWD؞$|cGd>|16QPK9lJ]ns9gRMH&s}υ 2Ujʂ[tYwt`}iɈN|H{ *j4riWn!@{uiw_)&486a\Fu?+EQ묝eD6Kt}Tz(?]~ K ?$T6Q/j5^1{Apy=\icet-EXP! Cl.Q"e֝VpGw}-O$03w?i򣿑fn=_=G6{aVX!2ǎi4Jj^$RuB`m=P 9?I5<ل mb{d_YRo , 픍D0Ql(5$ #19SL6ó)ʁuҝ#ʸ@y'襮XW6B"3Z⅁*3FG¹2<@Q+.^4xGX%"Ũ2N<^`\ŅSNr˻hdVrdC;6.G)QXkޗSwP\ ɞCǖsfPH0`jMH;p%W?v`#nYo1< +W6 c+M[/ҥQ9J$ֿ0Z^CxMaئv')vm&]Jnr~N4?YnruL븪&.cn6! w9 ptVwZU?^|aDaҡ $k"}X%3n`ҩ^o}*9+7By;.$a?`&_m7^SfM&_ ne*;㑯V[ Bu.(ߋ׎ϧ!B oG)MZePAj6BHwv-rYϨ֠P,"ccܿ ݮg>%#MPh-?Y&$lqEM0zcJR31 bz j>*6\yGz үj%Uu %L|h`֞:q:EJ|d0]ʥ.[`+.Ztx>JmȆlE/(*"PhypI?p^hUXvcc:Ƴ̵ֽ.Tad/HQ%{pF ۟yvɓ+|0H6I8lHcl{!ba;^>2mqd-_nm1) DkPu\Br"h`ӆ8T]oρ /5@puc ?ZA|,bq\mW{ 5ApkztWQSbV, K4RUCیɨL\:ߝFŤuU3 Ws+&FBdB^=&ګ%^ňS٦z3hڇjqhg¥6P_x4~0pyo6,Ur0sRYH=B!;x:_=WJ0vr[_w5Ӯ0x6/UƩLcv_;2vR'e4g$s,\qձv&K!=# w2VUxP#0F~ݸYH ,0lt=Q{Cq$-ִ(OJ2+*PC$lBHs# m.K~8B% -kr_՘a9vd^#Mѯwe'2~7-̈́2mDOޭ:AAL&6>.CUdO1+l[2< Y&x!TuQ9H᱁yuɈ3]ϧaͅ_N~X >e}$oI-Ciʃ9?\DYM\FSG΅!'gq/~)bmaa}6CHyq&PxS*2fWMN ;%ʽnL8fH P7+ MU74-^͚*T-AiY2B"P#Y[c(1tq@]*f2ω<>%bAz>B[u 86":Q#.r]M8K0a~Uu qlJY~2(2`8}={N!މgjQױw8^ce[G-X|9x!1Ic.zhqO:r^l%iM5vkӣfaV-G B^}X$85ky!g'C͔6;UEŰC e V~^ٳ B fcvW?2("APV-76P*Jfn*fج-!bc7YH&v%/@b /#5hW9">H8E5^YK\Xt8 &΋Y))*)WBwH<6# ڦjeep5ҵ,ʓJ6UF4YS|4ckuk[9FD@"妮 #Q^`Q.si63ĩV5;doSEvخ b41jsa :Fje>!B*μ0ey[!y"^.3D͔W஽V>`+*/\G. G~8|@ ozAO+&UDi0жF&ERS ˌNܐ@ 躃?3B<ϥFsUJ[tBHr~ 0;gy o^E @3)>>,S$0^pDG˄֝e4'#AifT| e+EM(KFV7$F0]vMXc0ӑ?c!v 3- Hs})ЍM<W.ØV ]"5eW]>0j2Un~@R<`-ohcr,4;AlS#֭ǒlA`i˒b,(Bq$ԛxehkQ:hVux Jd|OmAP/SK8}`SV?KK"PЯvjatӨ*lt]J`pg ^jZ/bgg S()Oc, da-9q5^,"׆TGWG'fJk1AX|VϜ~q|*vf!#d% 设 1.f'I ʩ_Z:m,S-u9q3*H9/vP%m'Z0у.w 3͎L g>ڡkwheQgQt&ot]K.ȡOVz7fi]clqhL5IyMV[ʜ9g9S$2i}",KORQ@]PJ9FjӲ9¸T 1Uf*-os9nӢ^TBh;UVFe!O`nb:cuc ȄB5n/@wM`eub%!aײDb .);{cy9:50q!||_U91Uy%-C:LL3$<.~!ץf n Q 19LδʲurpZjv{B8L u_W69A a1` &Ϡxc7+/M⑅'#v%:f!S3K0 rNK۔"I'`-āGOż\RFwT+OǮy9é9v?ſF;1Q/s"߾ >Hxx9sEp*Wx U,@G Veh,%IU W:0w0X?(YS$P޵!7?ϞN*7%lю~~VpU~гeEE Qɹ`Cd8֗OUFrmf@l|>1Yd%*i`˶f2@URM5H^e܁TA4гD-$I8n&KIpzqъWRm7ynQ/C0%uUԎl/lzh\i]CCa NzhIELY-B3]zMkأfEeNo[M/" H=W=~ sR^֘QmLjE:#Sjd\K1낖F8}o5٩\Q1oݿ*<:ռhp,X ^;32?Wk*'Ny;TV} _[JWBΛZh/R}@H2z?6:XĶ7 2<,d F8 (āvjk yԱc:&yvL E5b[zt' "nf#5ܩ"&rИ>Xkf,sF-A/r\f"߿ƒlsKؠAFq gZ1;7أ>]8$UH G݉\o2$zaQ XK BV~r RಽI D8Va$c֑r³Ƒ; 4t8r%ewIՑAqVi1KҝMT2OzR(+BU*qGP,[RЖ}PM}zB/R@aESpm\\/SUR$0ű@tGHVFxǾP6 (a/7Q:F8M}Uʺvfתr9 hTЌӾ(a&/#~j3(@篽ʙVH C𔸠̿]b\n4p!.FQNOdOnx4衛( PI4Z|NJ.pc4mYcO"7h5 g_?Eˆ^vPgZ v=oP,VLc]>!#[Ѥ. hM.Hz՞Ԟ|J+zuZ9+qä‚˞Vaip&Hwq3zn{fGo Y8,1N KQc4Tnix X[o^&%NDa2>\Dհ]< W+ N1@o9uΕB?bֱњW&{j)&hh^Y&[іэaꊳ0g#s%ت) ݃ei-:4ϊNx&Ҕ6X@pL :ORWZAZ}I܎fYrXmҳ&9r˲=:\=&yc3]u}B+*t :6"~l8LR({DRZAp ٚ:.﬙xpwӉ4i_C"K*}t}!_H >XrX?^h4,jeу'*OPޖT:FsX]Va.d$Ҥ@^ >K%]P-$@?V1҉7z_1jAƖՉf&Z k4 LRepb/SτCB |XbH=]r=!+Ls8d ZPn6K4dU;ϙsrGYPPj{#Fj΋#|j$ ~p}u`I5APllw$j]yܺg8zpc@&Wa`&@(NˈfY) GLͫ q ZБG6T"8v>FM0X-Mtdkœ)'CqvksjcXȦ{#I0R3^ dGô+·$=N%P˜쟣z |'4N% E-]Z> M|[h|g3.=Z=PT}ݿ5o3A LdJWoXo&w&-J%2=-WΩ3lPB,#u2ߜOMRL-yو{Fw䤿u4W˦Dd黪VX>ܴ" CBָ֘7}y4fЋ,jT|OheT&b %I#dN0\C(vddwc@'sByP} ܁D0rB(8 {,ZSB=Tku\cUNY1hWjjJ^RU~u$|>5|mOV'0[r1 D[U nIKoZ8w'DUm@ZEڅ DR' ~y˄tldqH\s )+/Thb9D-Ƽit.ˊ:߫UgT[ F#eD޷ϐm6߹ŪU0V,o`Ȱ'u3V3+|=8lE);#^j9e=vM{s1y M,-ZYSVr_Nra#PؙY-rN -C-~r 6Af qnw?(pv-j&>25;CzYXI(G*k`|YUlPؘK C!vr=di7oںjVb2T Ksmz1Eȉ?J&P_d](?^6Ch^KnIEc' wy[BQ}x?w-1詥`皌@ @g /X;HDv.ړW+ A3so.2nUF???7<+s-8(c5L+YJEfZM8 g;U*ܣxfBF7ܠMb1H9.9#[S!>0< (i%3?+t۩7g#z,u)r Zo5ӹ|wQ0^VN5qc%6q9b5 DliLtCaPo2HЗY`{ 3okc7bda1wS4hgCTOTV֛y9=1k.@"#ɾ=oVC,W %ۜF *4DzT$OB_?}BdW(zP$Qr1[" )7 a奸dQ8`Jr(rC0=Z3B»d-/ƍZuf$"\|ωFz/ڟ6}Rbo;)1"ZdU? .)0dgy$sgGf4lT >J6.\;/gH͑d1?t60G.LPL4G!l=Rm'&ˎ/ծ'Z'sdE}cӜYY^$? S<徭5CD%z$yf{ ]PC[ݙER#UnHR9򰎿|$}<3$4t%Dkx^gJrdL^E F~W01NAZ1S^2n=grn UE(%Zc|cThu^vNi2qkNŔ>M!'ا|w"X_ƠBk_b$-\⡾0ދwڔ8dI@PJ5|˹2QHwhdHk`Z˳iT ߆CJ3W9.:K6WS Yvy3;Qjb75;菃KaԀ~/ݱAiuҳ[o.v$: ܕڭeq'5NH{Mωgv#,XtƣHn{ҮvT[x >&tzPvU-6;= ~+r:Q({n(^%nJ#U$QDt0^Yӛk h`s%Ur + ߸od֍èLD ~^ Vy^D#VN(@ Fxl6@m6YJ159TvjB8 h Y'PLk̳D z+jw t4ۛaCW ?\;: P<oށ ЬE:H9kMvL "x'dOH/&4Ҥm}J5JˀRo>̾QHDdM"-FL|l @-vҴH(VN%6rD/"?E/RݻȰX+i>&F]uyn^Ex.W/I۲7]*rdC!}]짇ޚz&1+2:'i|f_x y](B9ۣ]U6z¿M?}36F`;Jfv\ t6I,yAc7o9Ei)X#4ǰs5^%oJ%{ !'uߋ#hPYDR֐*Mi.L1B=@iG7,a^~,2n^rR 9fƄ.**ӸtU Ps뿧Wg4ߨ0 RPCn.wVOn#8d/)|%q7DE,q"I^d6:&Ë) vS\2g16w&9Mo+rGd 7ɏ$Ljs¬݁ HDesFXZ1в73)N J xLä; j˼:7՛:hp1IʟS_Lpj.:Z|WɁϤ(+XYl43$ڹ~`*58czFJ"EcyǛ Fv_j`׻k]ˀ+ʑiVí[ C6|8U=piҺ0&4RϦ996,EbZVzȂ2f8$io2b;?T z!҆nG^!:L|"+g,v` ־zWMv&p|ae84hwzY[Kt`F a<89.Aw[BdG&{fD`fv)iS+[x:7.C<3@swfm%1D('DR-1<]2 y1O$;0;{obe "678Z# "κPF?yXӠ%݂b)$m#g%DH䫌pqyLAZϧг<N2 ľSg2ɩF*5=, ܆T*&._Xfs3jVkSs:q2z)^@#6kP?pi0؅8BζoUjоpFNva{G+chIkc'3gnd C^p7l]a!i8~ϏCa&2ts ,>d_HH.&; ))tfy1Uܥ d3P3NZ]1cT8Eļʅ&B--Gr#K8c, n6jg'flJJQʫ nuvl(Jxi{zZ/*Fٗ^E+ f5MZ*4# ځbzQ4lAlQp_jt5)D)9 fZr, +ÑeDa  |axC\MwEqE}=bboژ ١K3zg'Zŗ# J(ZIŸC++T]#=z-|I%h.Qs\-~t!}ĉ7;ڠ2-`ߋgdrHL<5}bKцX^G S\z{QJ^.5nYDp -.6VO *btx!~UC-+_A#86*+ΰ+`\-=jުG<# 4ݷ6T,oSu1% :oidli`bj¨n5Ԑ(7lfCH=صc)qX =@`䥆1ց§TÕي6"dq5i%A)Uhd4 TcmvtdLW+#' }CơZ@^Ifףs%sg9y-$ W A]+կϧ0KCStgalpb?_x덮vi’/ ]Ooľik2.UMT:*Fc4Nk.MR*m8AŴZM+phûW\ʙ)uA20;|Nm4%&9%SZRZ I:2LM迍=1JU9|OhzPvKs74EҰ;P0eLҜlgLpqcYP)n+"gfu ށ,~i|!?A1ƜbVLVa)Yivq}{݁:1 .Kqf4<Z#z7<%A0RЕL`)[msdy 4\ΛU(}FGtkF?5c}|X\K ?Z]ۄYVK[vN|-?ٰ.,>_!kSS1K8!û­XuT E{NݝW) .*kسn DZqc@?*EPo_qRmxۡqy iY? O}&8G`ћѡ75\<I ƄѾ=r1|@wC<}֏5)FCgrtO># mR*U0n'zwEw]Wlf}E,{븕°Yts^\Ł7<KM"klPnʇ)g*;"JWM忖6!D9*d GywL{3 %sbrg^K*(}b  f2|XMDf҅S(QOvqX=ڒdr[R:6J^:Mx c8iYa Gn0tѫweSƇƧ{kWg}_xJ+*> Ĺ)yb9I7Mtn˙0Ҡӕi|qEF ~Ub ]r Cfqç.Mr}*}2Xqd] )z= =!04 3ujآU;Ń(h`$'kZ}XY*? *bXB&cyE_1i9Is[IE)lj~*̯5NwB > #]ÞA&=򦦷BշחSb_s䤩{}nP"Waz:Sgβ$1MSi#eA{:V @^r\Q7|w6|Ε=(UQdˎZǀJghG ) Kcnswt/bտz& ]ΘQ72Go̘g=|XLvnn]&fSZ6n%h~W3UFv; 254ˆ.~VrH^Xo zM!Nҳ 2;h\qp^Gy%=#cb}izJ#woۊԙz)0mM,ؼ.nX _d{_s.%/A\51w*C9ӵu8ZwgXmF9\.w}K|h/B^5Squ;M@;_Ȏ^CQct[[ē>OԽ'*քkbsg܅ѡ4.$:`U)dʥ|Q9F.:2PS2?"e1Ojr܏6JShFeX#Ѵl?c+2ۭY'#?ئ)zo?m[y$% {A1z#9;T)փT )Xd$nf>_B!ލzas_B%Ib[e>m֝ad#/EsbvlEBB#Xi^2&5elY PEkeF͢ bJ$'x$FSn.X?St9q*0{,a}xϔ[ojn[F?Vr< sSAEN:H3UU_ gc]Pȡv|4I#Jճm&^s=`0{v5Wf( IG77;//V'?i'd#) ✸t4&c5&ȅ< JH5[bшMS_A$<3BYs5 נI9^jTބVM?/+pBB>]߭Dw|a)[VEH +E;CvӴ̊tPyyOz!zB6;&}2F8S-TULQc돿}h82\sL'%tS7&Ro3  Sh{Yo0+=.*N'zu鴟uT{JCS;9Uc h*􀮃L6f@KK :;YB%_ZtalJ?|DriB] ʽ#K?MB/_$v=SKTFJ7`ݝFmLF2 f f= 2]GPLw9(]O;?p8( y'9jNћ*6UB.V$XW9-[XBWg\ۃ*\ԋna{Fd_$ݫN! ,pw-BĐ]MOI־' NwDk[\tkjIG!@K,:9^:ůx ĴA6"?9'mH7iK$Gp2iXIK*Cܷ+d:(+]$-/yRʖY Y_o=TJ*C{vFA"xk>ޓ`f@J ,N^^* "}9I{\`Ps:6՝* 7!h存2NSXH7X)O+ PPɻ$:wm[g$W9F73ͽкTN F&#ⲚLX_vh7 +k0F烬36饚+{, kcm/^{^C70[S$41D-F-zHU6D=Ҵ1VRdO Բ͓7Esgq8 /eH5`gzcyyaS[*awh2?Gꓧ`n SãpUJ*>G%T/A6x ?B#5)QrVʿOj)W;B1a*V * ,L\s AdV^;s\#74tQৎ 9e=q݀P{ Ze"߂qeH^q?i$Z۝8X,H_U2/ij\ƲR*>cb t l0+om@Q}Ӭ.j?ԁ^=U*"#WYDa:<-09M&#Vחο[!m`HጀIj;⌺ sHow Un%.gVSQ!`Pw[I@F^sDXx:ٜ Y*L*OHO G7r0$AߡCPWY;c&#nk8,aRxjɰq%Aϡ(O-d4;t=C,c4Hz']5t/^H{Ha;FRPvGH3_0bNnYTxP{s'O% %KR=6}Jnj9D91Ai*;|ai12dnj`gxɆ~e>*V 7ӱΛ5OS}w>5;cXۮMckH}aj=-GDCW]U|/\ʼ8͉$5723y 6⼼,"'?^NA~QBtsXO7pJ gFx m>Ju!0{+F˂^F ؓ(B bIiAyYD覀'-S<);2rcV΢"}R10l^SKEV6g-pj.YC [xPf>'LR,^ȠhE ZٴDQ#cNq;wx-M/ ͦGp0SQkȧ]ǏIf,m"Jh!&.o@v0A.&0N1텉ʨFT>WaxwUu\A6I8hmM`gsi@mdB5etEf*Q7pux-0'-۬ `|>y]DC8zB2 zv?{w Ti;*D "T 6xӋBNe̳H{řwAǃt_9LD^Ic!/LM XwH@,&oFpD0kZi6̾"FGEK0)> bpP߾T;]R$=Rp/%x&xwVI ~3R]§}S/9hXq ɺ5WL\]9# Ʒ_z!u>NgWBwΦD6f.+1͓4?&1Qs5kD/Hl!FUcNJOhјәw)v8GD s_PIhJv!H$c.̣1~ 'wDn ziс@pe@u0Nd7s%Phl&Ti[i8o}e_XBEǮn)4:_̺RtWL'%H#R\h / (ts%8yL;o4N\N@GMcp&-B|(,fl?B:.,t^<M|3ېP,MeΑ]@\r 7EKZ&mb GUxčX/ϩ*9y.GؕaF""fHR$BVIvg(a4g(kehġ,EFExybJMģ&)*T_i9_ЊYOZY"K3N< K{)s.YgLeXP]NJu0$MJN^~Iqޅ0uv( S  ;:fU 7q,s6A6)=z@-t;,Geo9 }{_+,d*gۥYeYWw"MgxǪ "ΑPgP7q7+*`i;%w{e@4DYm+%"ST -oMKm9_.D 4md[X6OtYCߋ~ן %t=G,@oDMQO~:~_1i;eID^h9$ygf7 _R=vt2Ug>~RW t$P"o}*>wEam8K;_ CVvJm])H.O/}2|АfyKgm.bs_RNtor-9Am!̉'u!}ѤzʗM]KfgWcУ#Wlu4PmwMFLCrpc˵!zg>o7V,Z ZGEuJVNPaxT2_ʊ^4 8IDg?< WSarko]Iοsqo[}.'/5y~tl$zCvHU3D@.kUtw'8˰FyWdmOSRkalgk y2.d32~J~̑jr߃J8Ou_LhS+yFF0PU09k#B2}E(br ڴd92:*"+Ѽc"yi`V3QqWװΜ՛a ey61RmƪbX 7/ ^{,b)&ҞUKrXнZƌN HcVRT\f=a*$ުo?WU?Ed V7EXP&]/;̍lõp<% g9~Vk2D)aBGǖCX^p}y\-- N`Nq;ޅl)>!}`w^pԡҡryP)9t SFBCق۹XkQ9# '#/LbGc&Fkʃ:"x"Ud9.Vt Yi.0pZO+B6uw2R<CD}]e MȹbYҍ\0u?=3b3ɺjv)\D a`;0~>x'gHeS}sM;KK9P3o#٬,6٩@ a^{M_7*Ɛ ÓqtድJ~/#?Tq@mwg(!ZȬn]* kTސT&~[x$*~\*Qu`9J`pE[_x@ c$$ksx5lghRal>]9y<->iV1ódSَbyKJW%SDPe9MJO%9>~v6M+,o՝v_F:X#U}GQ׋$F =?ڳ隣ħTn(޵GOȢ Іqm?[MA+2c Ymp+b\4rglH[khRNV:)-["a5)d1$728/{ U%+] z :m N#N;QHR K( ,ƕM"$A,tX۶c2Z@OgVQfݑ ,&`#y&GoA\d {7X%p)`2"^-\{\Tk̍+< ^8n,)ҟJv,jz% ذ^8Nj5a$Uby(\G^Y_g^ɚ!Px*!ܦ9ׯJse+?uH^M~2hi:IEϭ;x/!'opQVa+JWCkI"~N4&|o\Dd3F`A'E&k֫DΫ[kО&;Q#s+w t }&gDutLR!f.ޖ|)tSl{'g j&1Q.M ,9oQWӡ)ٛ "b-TaAF~1>vkzL/rтD?-[Q/)J81_LUT'LaEg'?xW!f5iZE784J Fv [oRu(cʓ)W&yrx7qGaK;䅤}~0GPrIaMq-8D{̈L%l^yg*I!|Vd0~0IE\=HIzfc*X}~~֏c}G6NdM=B#D(6(T&X/#'*}[%8~xS: ]ksP*RCmY Ao<9{@ b(=?mb-#U13żpQvϥj;M# 2k|e|Dta1m}i~MxwΪyGla7kU'.!1Ps6B-4xL\.1]^ky*skVx3AX q7;C1wAL=q  OXGY#Ilb"9Kj$W}Uځݍ]u:YB'(! LAXaֺfJo{\oƄ!0GA9'?۳[:Fx!@.?D\ÏGBI,bxsX31A ~ATڔq]w8 Jax msp|*c#EX^ĎoHD^.D67iwWz:8yWm!yFKg&wݳ{mZ pX>| cņB0@BM)6[vtBһhFE@M%78dTCW35!D©YTrw 'p+{DZ p>6Ct  ߠ^N9{8f=2Q*9CYpUb|G\gĥMCJRۊ.[_Η}glN8N>g.J І2.o\Sq}*("֣QtExmF;>5hrH+.h0g޼w ZFvDi#En[VQUY2q&߬3R gz |0]\%qm@ѷKw?X=`݄ `v$ݢJ}[t+o}sF㺛l& VϑK"CV"hxȺs_e8lq@smAK#ʂ\ O2g 3ִfXm7SY𽟇X- Qnyx&/vřzf5)X 7zE8ZT%ۋP e~nȥ\|x"$Nl^GԸ, $a Syޠ^طdt[tݣ!kcJ'Wko|۝S9 .ɕ e<@;xN،8ӝS2!~FP !AH_*^fL''}#51$r)hw{rpOӆiҕ!'?1sm~Ds_A" {0HDbZơgG2Ʌ0G2;#y2xxb%#AWˊ`W=E-@Wű LJqPDwRc.I=Ϸm-)*99#%&,@͌[-S\XjZH77g#\@.`a5/@LB݋9mcϽY-}?쥾n|oރ"tAQ1{kF1S}D0L.flYPg䭧<vf^f0ODDd$RвGzfR{/S/zx3ǎ"q;'q%/r !)!!OdA-K#z}7)r6J(u>3qjӘ 0Fr9+1,`|zc(^:4=\'XaۃSgʴ/hSk FIħ2gWXxS"[E:=+)fW~*8]'zt$d垗zC1ͲpUEu\AQXwDD5vԲ TKȏj{(1讱X_U761ԢlX&A:D>hTnDhw5[e6У"tI S0Q}hĺsh(ycw~[vXO;`~y">-0~K1rck¿"u dӰG |% '剁W"$=eHRQ%ٴs)6k$hOyc.O\[ ry^{Ppʥ=Yvp6a̕K"$@{ܯIKL'sU$k^21&ȶeiom%`86r})F'T4UaPQ^GQ$-J |Y ?0` )q嶩wj;3i1NG;Mp(v@r:A{Wgd+={g"Ls+ЙL}[ $wKui{`“W]@Qˣl vYuxp+N@*~c 8|L>hִnu[WGI!ќ9~f̻ç5ۑͱmV,jPQ)M9uЫ$x@*G^a-{QK)xyC F ș|K켒Tp292<hε~'=k6 =Q۱)3$[r ޚBOGOb X|Z|j|(?l/# f_1Ϋ e@;7`G!c+K- s E9AmBkG*.29J-ʲX]F9AlRRJ} aB~sL2s U>^9;h ta L8=,gº1*jSoG!Db";vCL2WYI3|g1m}Aø=筟֕rOU m g3#Miq2Tk.ӭ7J/ 1ҪU*X0DZ M H EG`(;sf[=X 檨hBzHPHȻg:G",qQmi:݉PAoeYV __\EH ˞+gy6+`AxqQa {YVJnÖ\z4:]>UsAGMhz8ܤ㉉Vc6bk"D Pf[g#Q ԙOнOochA>LWG`W"խ"A4ʛ^gQ)w`ϰ 75*al+$"PVЖQ0k HWhIΖ"9xv=!k%pm/mM}B'\(\f\檸1nâ1F9hKO=fqnJrѫ r#@ F=15㭓8h_M\[պ|N2Ak.=:o5SWydh>3xCCd޳g»S׭`U':6 caIY_bzͨ֜Х>FaJRnp-ZÃ{':">eK 9N/ehǎ-s@ M%Yl^'8-!{N'luA(K2)h9`mgbZ%Tq]M @kGt)pdEnEL29'Z0_;*tg`9^j-dpM#!Ac^?T010|Cp [hMTȂI?* 0yy$ @ "(<e&CQݛiv$]u[\Jk0bs7 Uψ)xڣ//Yc)hX*/k>zf>GãStL"sd:A:,Xӆu"lc}!n.8D$ aSqw+' ~D=KP=d0HU\uAU O~wvC 4AdۉdSkrUDB9Mav)>;>6A|p<1xy\guXI4k?ތ.W4 ((,^C-]{#:SЌ:NTěSY}WsĶkZqɤQ⏄,vzIGE}mI20GZ=@Ú-P0[6\>_ #\]He{xsvUb}.ek3fSS?1TE{EÇk \󷥛.Ȕ=(Q ,f;9S=MlqxRTm/UTsnFƝmʰЭtXa~/ptm,cP.oS#;O@o 0NETK=Hk6)Xd>V9`G]#$霁?1"BG[2J3(Y-jab)-Ȕ,j ݻI5~7 3_aEvsdcnԆp;@3+̯RrR kB'c (7`a`P'=6aLc%uo gt׹l^h{Ÿ qhVCAIgO.I#~¦8[#v JpUR}*]1I:I:wd|0c[03 Β:P䡷y;mTխ)mqWbJ4Ыx(?,c=g- Rmp$ơl: ,}pհMPDW흠g`LK%J}LK`Ev*4fePаdWD؆4XQvk솺\uPKë7PΜQAb3gu'˝"7#f'gDatF5hP9Q4e"F'6\>%|b~s񙏜hV#H-kԦdNݼ})OXcTz![-9K<g:+`߱U+a8 3qȱ!x D:[ _qݛp>Zpϑ(-u'i)Ҳ,L"~E~/b(4X/}{ 55#9A@1Zy\1 5.5 wT<,p=L|pO+PAGNJe  MQU#bN _~{CdvT*´n=BpYj{Zp E _Zu֘N$#`^,W_ÒG+:dFBiuRigGZeDnCV =|^SoHG8c"O"SV+?RH&-=?&L:u+`4kMxt2?)c%-̣ܰɫ{5dz/.5JicD%lNbϿlQ@Be/WkAl j4a>6l_^fcT(fu)tlAO_W$ ,o1`z3L<= 8q,"P;,OkhCn;(͒`ETƑbE(qPQ8CiIDEiEtv=׏a8\t3kGϸ+h@9E勒*!|+Aּ6Ol%ٵ;q~P[-_~C}ݩ{ĘG1U>B>!XDfQ%an㵌YWܣ!lM}_J!V A%,|{\W:+sԾfMcr6jQ.Vǽ{})H[C~`">iL'ؐMꇨ9k9P>vDSN]ΪM8%T̈́ ث2Ja ͺt't30К\Mjfo*B|sn(J˞2J[UȪglh7w(#N3!cH` 5w㌍%4ϒj3׉ 9H"> Gr)>P+g^ ~-ldBl2TG=yP^>r"Q@\Tp~gHa7a6iM(Z4?]I /UA) F⛗Y%m)'tfB'.D;3xf3/@KX<(4ʀjd!/\v#$XWvFw)Xƍ)6vrm@gue<;yM1)gHPrϊJsj<ŽUHX4֓P|0*84CzQ/Mf'xn3҅ ׋: _Yၺ4ԋ-<\2׎Xiuqei2p1)h3%O=ȇ"h>?Vr4Y1M aR?kKhnISRYG]UV \3EI"C}ZS8X8X+sq pc,Oؽ rM,5q ĞC]}{Q(A|Ὸw]v-`ZزEkɡ>릅Yq[`Z9dG6΂RkHҀeB1wԬWx,H0۸eUEkG=dšޫƩJߟ wcL1: l4Z0FKpEU2hpLyQ-B`:vv~u'//I.h`pf+%Y+I`& hD(,?RĈK+[\LnЌl[då)w1@"_YHs\4T qZ_H54.@Ť|e?~0ǫ;'{l, mL_U ܯmieq%6ϝc10QZ iprV%ڶ"=l()µaOC#0'' !% `@(ci)N{ ozEpxe¡n:ɲҤ6:i8fr98*:Y )*԰aƂh+OS,Dt`GbYEGV+7 )oLt41oyLt֗òm|7HyW_ ;eӻ՗=Q=k=ZE <ҮܥbURyi1R|1A 0em'f;5wr9^̐B_P!#ζR$q>Ivbdھ @K9~E=[],xWƸCZaՍl5C./)"2^V5Q*r>ks>wl+2AƐ,;OlǟѨ= `Ŧo͹ }>.0IE4$eN2((,oP(הgyVa/l!!ׅߪ٪/-S%leh*\lĆFiyDRlT4Bhn_{Z\J$jIrWxr'QzB]Χ${*dB_[k_}"qү_4ƀ˦8$,$Q@H—'daԓұc~x*158 l/.//Vr\ Clg a{EiEvTƿdz Y@R/bgmC@kZ0>+;ucgY:Y2⑑3jpJB,b{ GZn^OuEEG.1d+Cp=+28 2^ȍo?bY=HfkIŜ21lbd,s\EpEh-:JS"h"&G]tW,6rr)ZȘ ik)+'ڐTaNAS0X,z?~>o4W!M:3Y'!7xGPCA>^DK@.ijBhBQ9Ʒ=WwEvwGƴRMP8h.nq9 |J"| Qc-I՜m8.ؗns 9<Ĕu-ʟ8~V9Q 9^R'7PH8jpD.@>Sp͆h)p˫Gq2.hET7~GPiǃ߆eWBXa52R1znv{YWGɊ/a\[H#} U\pJN4r}/*a‡?:_5xSfK1 iǤ?n- GH1}0 Th>t̻QH*Kk^U?4ǐi]0n2 aS XH .BҮ$< 0zvmwW4g]ڶ㘥um;/F^2yNdpEV\:>Y@\\h@ؑ%Eײ2Х5,Wi8s) )A j_/ޜ MT %"g#"BVQC±91S^h?Q-Af"[Yp=4?@@{ǽlaA@,%4]/F: D>C)]ج[ڃ9^#KDL!rG&ū CO(AQE={qӟՂ]k6摘Gpdx)gLaR{wC- -9k/#kOG̕geXy 3H2wң-xyO-hS; 'XMqT+$)5ZRϒbhí_}gwOU7^Cv~?XL86r4=P#Ŷgf֑`'~&.G%!r$GFJl8m ]hqyuK" c)_~Aڶ?@(z>㕚QUK+(#R1%dẍh: >m~z1j(_$HKZJܩ,?!]9b69;QPhķB 4y2zsbq6g,`F;BxgkKԳaOi d]Q0Q 3'TQZ+ M 298h'0T=_8RgLTA;50no$YBo8d.})[B9)n;*by鷬ZAUl9%All|Je>n  {߼|z=[u\GAF1e8褁1i X,UPM|6!nBXd, JMaضÆpb@Wc/+NcMeFVnf;\uΆX/-B3\68XHA sdߠEq.fOvxNev>kL$d+n$0LJ\ o YwHsQA;_9yGS4YhZ6ҁXұ:&?) lj5ٍ3納a=BIuM-`XqYWRjzL#w MwQWdsr\a?؍iX\ruNv.K!;fqRR6nGq򋴲^-L)H}p+Mwv҆,.e%W3U֕P 401쩟w؟]/%  1@ pJP<"vcZϝ1򥘔:GdҐli;oE=ꭦz$V{=Q$1Sɤd7qhu;3`6GxbjhԎݿF&GXM:is48!_ЯW5n\X7⌌޺=4RB∨Cl3T@D_iF%)x B5xkD]2hha2P{وt?9|fE0ѓHlxJ7io%%L ʑ>Eрwc7R"Ux°L^D;$jN)ѽ7ʲ|c#u N`5y wI5\A, P;R 4o4|jr=8eew/%N5^Ҡ7ܑ#* n& ;늰Kͳ{p۸o6dxG. ,=2<.֪.2^oM nطu9 ڣSnz)s"JQ'I$yK~\A1魰oѠnh1ս~ f!U%qsW\i %r_ڨ:yj`L5'aXbbsޕ)|r/G,]µ7C$KynREK|Q w<<&ֽ㶴~ 0Z9Km&;pagOTHP=OS$t+9w[V5XK{[w{=9PaUcZnZzOj#fT3+0>3ɒn9$`VUe,#T.26U$ͪf'ŶgS#C[MNW[wR|!ЯvXGTQ%_hy7Rۦ:u8\=EuͺB,1@'}+L '7q fq̈́/L ~. 7:ocP~QW|)'0HaƄīj5gd${!޴`Hܯ1fAWB?|R7:q\S^SNVϰh8w2̗y"؞u܅ݜ7mrSnLBBhf)#"F$ƈ6-D'=*:"" T'|81Ӫ>m#2yoTn3/ӵe]x>!btN3I)QYr￶faZPiE!VEх^DT~?JJ{-r1_qo@n%Jzs!H ۏ *Ʋ<Ms ߫ο}O^+PB.!i⫵î}!'WImErٰkK d2ΚPɹV2ՋFeتy xy'fq*A!I#h>co9禟;.%s% cQӞŠ6<E/ŊYjEvzh|5 %ɘXzч41'( gNl)9;e}$`懥go;]WA"߲/m:pҋ?* wq(,4 ";ŋKWdGŚ:"Ԧ M A8RǕ ̋^MK};-q) D ;屉| 1m6}IVv:~3|Nx"?JG8嫳m59$+gcT͑ r>0'i*> NIV>?gH-yiid-JTn꿦O}eK]y일a JWL'Kd\Cj#VBKcL ׳NxZƫ™jB~sV̒=wtۅ[1_un tϰY*sCb,>^?ct\q&1F@9sesF&w̔FQz0񾶈;2ϗqyu6* E sD| $ٵANrNW*رw vw-ϟ>TCԳ1* 55^Ip1w0[{ GWKbYFBަڼHA6l)j~k%ƾkAi>*%0V*,˙(UU;Y.ߖo?H D(bЙyxՕ!z<3؂-Y:9aBPtE?u'dX l4;^rx.UYIo4σ w0`_i4Ȼ %O!*R#Mgttҝ\8kkgVխrָxV6Eh^ iRo?ݗ8|_ML%zqqT=ib˹3ʚmU,Ub(9vպjPf2-=BaeeXp;ZHemR/K }IǗAwhPr(  xS?eE*zȟS"x8zY6֒t ˄Y笨7G> z+1ͮks YeNY"5q' >K 3Ur2[gFS69bf7]HudsG(:FzlANLGQY\T# "@LYs- %k&Ԩ_OR 5vB^NVSb/꣝ܜp1]o`2%u B-oԴ"97E/"{ѿwd\FmMsro|1Gs^͒Tx[ԥ^HZ)I>P[nAH_AͳU߷"==O~W[5}ck3#TY7Iv X_65lӹof%EXnYu <ތfO}Xt"~P?+Kcڰ)~H[4XfϞ?Z#f^o(:w @klht3t7t"X,{Fo ~;l|!>ّGk},7wQo~.S]@%@ /Ehk(f=m$ZZOjC Xﻜ]\= aYGQl9u9ݐWPջ5#-X 9Z3yK쒉g%9]?h<.vXӻIbJx[8Xu Nqimč eNHygթJ҂KH'bMjSf1Oݮ*ppֈ1)vr,N5&jO ,IE.NH/ 㐳{Uݢγ$\{Gpr4)AvC:քFϻdbi 9+*,CQ"~9{Nޚy=p[#Xj7qnM ~nZ-gQڱWmM,V=ߘb M>ɛIAs*=WHZk3C  (lnv__#6]ߜ`+D@VJ{O`jxQh#4Dzz20 p+nb8a[z#>j-;-^PBލ6lE-Y r{a[MpS:@W``@^gEi1Q*4va,2K4\NTlF *%uVկX4G1c"u.A,Ȭ\)0Ц-.tS}ޯ@:ZO|D~n^s+79'j{RǨaJ.btrlR5Ի1NG'TģyͰ 5}K)6 };2= P}!|`z=ċtwSv-v\5|J.*@ s1LZg 2]#f2,|ǂɘ?ѐ %y)T @҃пmӸ ry;?޸mZS1 02Uؾt <DvX l[%lxR-pu>*-%K󩒗J `/scUBͦ3Xl352yP!}tn퉂4z }9P h%c'&Qh^gtBƖBZs0YTt"L$pJX%'eVx?lT QWhDt&FK`l <7Dr ;k[ to«@n #'Q&YgX 4[t`Y[]IOe6tYó4wbP!ň8 (mb/ p3Vw'p6-d(^4xE;>qH0*w09 hcx\p)ܳ%XN5&_"K3pVo SdBm<`Љg콥sW[jY`TxyreݚLXdZGה KW0))F*) E5QÇǝ%tV!ЃBݫK._g}3xL;y^H ֝Z? 2)k %Tj&ѪJC- `W,1x 86ڮd3n~,c%xLi5ؼ@+vM&v6tsT|Reh2|7 804]ك>0EMnˣU? mw ϸMi"E؅\9^aY}m _m/4XǞtofd/D -2&Ko6/R0M ;Yo/pKb~l@NF|&O #Q15SdfC b1 <`^ޖ#Ǻ833U9x ;Ѐ?R u"`1@Sf-%dtX>& !^CSӲ} vA>|_*qZkdW6e6jy]PgVljLlH-\Ԟ5`Xez B-Jcf !}ۙR.K풌x\ ]1nף8J<@U -Eٻ"gu\eyҬxD1c\S#z$3^HgkOٻ-B1ۣ`k+I+nJ,ÜS{{p{jiy[6KHл=|E0r>22bjnUlEdsH^@,UǢma&}:D-bT ]zwZ?HY=Aqu8` o[ MDA-5E!}]ahV&aL_'mDyV./eb>7 7&)Sݵ?>__h~A4g/jSߨ0^_v03^Q[x BP8X` d.g'؊Hg!XcdZh&p[5X 8-l,9J'}]HQqhnAg,xn8{Qw̽U.A圴lfߌ%'g@hA[Pz,9ӯQdTR{>8S}Wlf3x4JfWbUƛ#m26PHD|:![+|ӏਫ਼i꼘\ nr5D ob+шP7T.58 |X7Σ ڗ;xƞX$=d 97 '#6}Da7zT=O\ȩ*ze  [AiHO2q S"x&vE7]kjw4V{sb/v1 6[ٗe99fS88_=Հ12<:PX7۳w38I:Ud iR&c&īŝ IKhЄڕ5q/<4~7 LyGu ښXZƗgn Q@ʚurq?l=G,95XIM(zcsgzb BC'U*a)1K? tUGK{^BJBoGzM5)AO?+c0L^Q&ә"pRt^P*0ٛ!A-ݸZ0G_gսRyC\Y%TvQYlk:UϨlKV Wqա#A3i%c4<[Cx+e,lcH-M|U>8<CF=T %7~97yn$%o_2pT ۖǭ\өOߗi;x/ͪyt~1Y߳?͌8 IEwf$I Xt襘hјMW H FLK.HzzY^H/ڧQqel.Fk7 eux c`e4>_#v$pî@jR|@LAIĩfL.nKf$OjT-1W甌E6<3ӢG:pSq?nx<$(V@5?G2T+~H#[ݨaxWUS6F.S6IQͬ0:0%2OHoXA;)5#[kv&5 wcT| [Dlr#5DHJuea~&!cVS]k[c7 [tAZXRp.ZLg/9 x1̼S@p07- @XU~a ffr{׿M1jH4m@4{A19'VՊz/o˩rNU_g2wEܪ"dz͑ ,m,s#OÊ M"5ϊEC?Fo%qRG,8gؐ;qjCZ)Yoc!@H_*©»Eՠ/Uم껖ǹ~m=yv>S#Y+両lu)V@lU0K t=sCp*2Eg?6(Q KcW>QO/Rft@>+,>G\9 ,~`ie?zhgۇdNC|B56ML~-$48"9>b峣NF\W:< Jy.~{r|3`.oqptۄ}ý̈ք(=iݖ7= 0c~oC6MIUmrPPBn3,P|6c2 ! OZ:[:ecg8v-lcB+ CuI'W\7&9;YV_F~JQcoD`4iqѳ lhôW^{jۯw )J,m&$r1C>4H6ss@K\:PGJU  c9%,;r vCOUlov:%ǣ3bNt Yw FF& P`:~*< 1կ.۝-&WjCm@Qi[2MI#v&&]O Dɟoxͦݚ(,9rM).I !'P:G,OD/KXJN6%KiKd|@ñ0xS8s4IWYLj*_/_ˉZȂ ̭N`bv}ev^PDHzBfɥb{]Wɴ͸``dO;I2d̷ M({W''}FG 6Qkm<> R+vi4c#^zXL QHwry,75c!h&kmåz"j6F%oKѮvE[,)%_ 7ݳ^9qx^jTf5|JnqtloGPLr_mΜj| _nN֞cH hW"{"nWm(3a>Vڌ]APBhKl I2ج!4Y~aM1 VT]b+$aM`1wy,-AR'YqU O6;ŵ5Ž'i$o%y1<*|#8Ew" ^Zd? .A0-}s55Gb3$bte{ot4G xɨΰxېgw5M 2('z&eʉlq't`[ !`VxegZ{,X].N>gh'Yz$}[7x]'IgSh tGj D~܃ 7LM qy a+/eXDL {T u GKcޭd]pT[R'Bp%rO.fIs,k kw?bP9DZxZ gdh /$EFGmB4Y2,=qkD\@`񘶸/3hP=d$m{NC~}RZV Cs,霱#!ɟ(nYX66aޙ ށ(jl4L9ŝeTy_61] _DBkҢ#iH+/^1@=z!FЅT{c@(=v*yi< Ea y5cpU|pdžp`"^F$PS7^x_89S+Y:RVgJ^N2 f@'ZLaَZ .,<<(g!Tu3UQaQAP"tbŨ*Yv돚,f+O7m$C#OAUO ˟%#Z{|Ŕxx3KqY;M?\ѽ>#F׻.sE0^|d(u䊎unO7-f{Ƶw}ӋFFuh꼷'̢hM-g5h<ӔYDkM"~/:|[;ީ]^NxБ&1rȿJw@ ;p@Џ /`qߡeW[Ҁ_Zo3~%R$ìlm> 32tm췅D ZHE9't_:VISH1 ' lMn@k9LM=@gd"Vk'k\%@LAyzDb.^R>cIO .2-ޫb4dAcj9q.`ѼWiNgktf%tR̟ѭsȲKcAeїϩ9i*b܁qep\O:]5?qt|) ~S 3=4Z Q64.dyhcUуcDQ󋆔NͤoQѬ VR gd<r#Y,J}wg;,FۄEB x_:2$ :Mt\Dה3C92ˣw8!"eB9i̻G&Հ1͢B0SM9*G~!4NR^#ehz4`[I{;ʊmGA2mWF\Aq0@1 H[('1dTX[:7ZKUKI? ŹF{Y{{B7>†~hl|k?)`'bGdUu731x w?gWh8 cƋ嵊i$gf)9"嶶1Tq]6$qʂ`kⱭaDTuYkWB~aDz??`ywіҹF3^LQ zOw5-6UԼ:;7Q/VVO@F.)|{cлr=3mUfᆞ C09YH1*ݠ{b*{-{'|E\4/^S` Ι7 3[s?^]O1".bfXC0'4o)]b\ #K Mdp7F-kuX0,ɐH[dEZ<[ӗjQX6eA_˶+>-s3;t(#+Y `b8U2TDAm]VuOm<Xle&mME0c 9}ԋԻ6>ʮQ2ps_ߗ@̬G;2yd_?܅0Sh1sMS)OqsSPANB3{|ON<4;u8>@as-x0eroк:YMz$~PCnfGC8n]l t3O\ &\٥#O fRD鯢.~FhpWlf.;p`yn!X"z:I;VM">e"!"D,<îO1jM5uPRu,wR ,nAB3mlX0VV-HJ!C"tS8C5BDG4!~qvJ=Ҷ"E]@N *b * ԣћϝ=rnCJj01aIZp*}b!X 74tMK>(n*YL*3~Udžf ?o+ˏL:{o<6ԬJcDhZETīY:}YLS~[Zjs[C8*ކ,>cP}D.ԾCf]UŏDwq pi>MLJ^+%9KY`"[9u_aX\͑[)5p ?yh-qUMvK(?a[',o/_hacOʲp֛jc_hp::,5P155J\dbVUk2dV2Qyjq1ݹE`rU H] ~:nEQDM]y:-vs55^aRjxL{BYuDT1 ي}3^F]]  _gdBۛ"Ixs֕iJIA:$el]ud\HUo;Twz)}Y C舧RMp~sǐ2SUJR[-g P7K4ָ 6V0]+_-އfY}}܈Dy;j!|yMc>7LSwkvQ)F!rv} c"m0`5'O6@3mH,(^5c|qBɘL h$(ؖ8!GXsطwXTř{O:OḮ`-`|DX^" iBRe6-vJ9}<6yK䒶gIP pfRV$ʄ-,Z47]Ꙁ˷K;;ygp4IwxoH'VΛGS`";YO&YDٯVMSB87frw] @ lthœEUvQTցb`i \acLI`ry,<$!~wZ[iHBd2jӾC8\ٟETTuc~LeV)á.!_ddr8}U`<tXT|,``a02/iLRpwC;|ʷ3'Q+_3T? 2N/K~'ͪ)t6)!œ, }RyOVXԚZ"r <NO=Sθ #\֦v/ZŅu5h][ܯMDziX7d*}.l3lb0|G;j* MR\E|Sy xGV:rNc̃v1GP=Uy{b]/8Vǩ 2g|e @΍ݕ?gc5<&NLk^ZY2"Wx6?]T["Z+"zzƙiP33%qnh@5wK{>"qL >Ľ?Lzt3n\C  /ZPbE&r9 !9 eh­(~H=&ʲUrNF&ɧ<ή$d.]ƼF(092ǼbK0%-.h4)+tqrɎ^nHh4ddE=tmkeDZPc?{؆',&6޲8<-^G~ i#6Ӌqbtšgx%*W9-zQrS[=epݥp5n;*"Yr 8ktaiX8}l(4}VJAW2H&^; xSaDᢒ3x OJoVVz\4iU[,Cc(dowX<#$iwTΙa.;<<ސ&A73r3XiNhbT1.峜/yXB1kvndA{ҍ~kQ (H kk3RoàP,s`7XԘ!-b7?AԠ_+XH_aJ^%SNI؈U~:hz䨢(q =lǤwdh(_j2L7),Odc- KCV_@6)Oule0$e)e Woa*Muo*'@ 4M %P&/\uK6AIfl5GCt4w1U4-]7hDe]2#`t;E=aSozt]"Ieε#O'' O|F>PuN }䋕98I=44M#db4-~-%|GQxyתj_jci3W׶:8UHQ t,]A$a l5 /^Cx #+h;sEZJGSwpf}n2pOB #@/m 6$UcDk]|ՐR=5ʁQn+́i{gB4O,"̍SC) 2'Q_ bsk%Gq8cQ+ys61zLhX귫  "<s'78. P〮Hr zhq1') گ= Xu{vĥ5nDx2 pdͯ%};`xh%lsGmI˄vUŝdx WG B A)oiS7K{Χ ^z@<];Y _\W4T\bZp-S^HLz`9ȑtXAl^&ӅDzKiĕEža9_ Py+;kvӄ){&ἣ47$evփgWr*^R>hߚ =rV "wG傭&q%8|20QG lS_ II4\ȃw)_Dc͸@ɵ7i7>=lmUⅭ2VUIdN FZc6JͨS C^%w4zXwg["Ѻ/|Yb g(o!+ iJYD?'7r`_dR\9{%dad{(vNV~w.3Hj02=ZڰDAZB7T&} Cۏ%&Vs ġ7#-럦x͢v|C[唭o[!6 S^ǯ>-;r^ކ@]P'q&z#Uw[mpU!@wBZ˂f9q.!Q]3G|KP@ a!48( ;}jz^2hV57 ^d(*s_> *h k&ߺ^0ڳrbI΍ȌKR)WQVѿq]ÜPZb1_m'\/Jlwׯ Љ VtNs7e"O@b4c էɷz8ψIq"cKП,0$p^G?oo{,bDCpxڪQ:oW)7x5+E3l+Us(%}q[Ȕ\"+$WwWUR~7,M5Av2mS2PWhW'g$J&k6&0 V|Zg+PMT/JFwN!Wd =)k=Z.EKz&vk)̨Kl?>J{WD]/.hאuxX]$`܂b7liV1g3&j󍯜c+}\qWސ}:f+*J*qGI V ќP֛fW{lM,]S RƐGcv?[݃K pBhN2 {H3TՀ ܀3𥯘)aN#@}mkO/<5 RcLms%X}V)z؞szP0x/IVry>qזRAr/iӳ4kq}g>_dP~.{( XB#9O<6@#(^P De:S]T8`Ц,813Rl=sMr%N乬GeqL:.9 篹Oħ )"R}cxUų甀| 6(Xۻ0sC%u<)iWjm?j62(N~Mz.z:vfQAeDQB2ï]#z޳ROwR7) -8>O}5 1&\YT ܦhmf∩iʌLKx}#?; KK׶ ssTtr2-o!TXcGluN0a 8o{h\c$J6EU+-謽NpAIY4M{>§V&t_nvA{B8w mh"ݎxp` 8ȟy"'!GaJzs  t1S^%-M`|9c oviE i#sjG2WԟE:(}nM:a',b.!1$Y 2b/VF_N;~tda:Kv?٫Τx `-K7:WR`E{[w&U^Q-ɘ!sG+0b{?.P)eEǡ҇&).n? ab߇E|j_oso7V,UhCcJ~k4/\Zy%}TD%#2i?Kw*bGk5RpcUP9W6Q@vWzAyM2L9_W>VXą\aTC=q<#3w(q|%r<"$(qjwVrsT DG1 / RN>pL{خ܅U4{x%N+|Ǧ,?ծe^dcAE)E%p z{W"`3f;ՁίHEwz,Wg{ʬ`0 [ӮֳG>`8Xi ~:#D-_&ptyShR& cUw+ ~*\? ur6?pM(nnzNm-8_4{Mwf!&F~)JޏjUڐ@.[*$_y_jLG8l\$A|lHQ@ z:_77} 8.7t)kAz޳ ±01\f)onׂmq XB9oVAN+ߨT '`FV W 'Ȇ\Gt=V*?!(j0{u~drAî6\mu`2L11 j쿵\7zIH6E.w&0b׿UCeJqft.fÁ_ʪgJy$:eWqX[-BۗX>J;;fP l3fo \hFo<(_r8X"iBt͟s`qwvVƋk*_ڡJc?؞ ]Ļꆾ?VkN/VQZkӮʴۅ9tҦ[btYyV{|%ד5X;IzexB36a>X%nkrtKhbmhJvѷD5Cx˿̄ʌ^E:1o oS&msxB#,T6B̮Ye:~, |1>|;V;e_٘i Nzբb*j]o c#uޠ?잆WM{gehJ Q*KkER1i# ЭYA U 3콀(^Ͻe0 tp]'z6\B|9J_"0<\t3qM*8*PV3vB/gu9V`4[F76A,8p>ǦFWKus[RPrTfCцvQS3g0Gg"q=$?Pw+tDDd ½aTQg }ya34DpVkr/8k<`i1  ,6gdwރ(JVQ(&RPs*,q%K9_><\X(ՅMi|u.p[{:)&F ,TEܤ[N| )wΡՠ7+-ubGI=@}nk*qhwwa79 `2;⚴`C$>vNbY/ҙhVj#ZA:` í-5o6n E00:@+G. D#)!M۱y 'JLF=(<ːlA*NKR$=mc5nc}3pi7%?BeI$&`16x9;h_X Vg`ʄ8:ndF 1?`#@*wÉ0Pv~X!c`}C+u%F.i:/p'n{ ÝK6H[@`KuDL}2w免Jɢvo$pě 'Xܵ}Stuڜk7rvU2[ֿ*~faRG.tQ"VOAfp@RHrg5Wt?Ğ??!HyV]L @J+:S@"~ݡY'?;Y 1;y\JC>bK:,ޏakt+ jzĹUv-߾<7]^N ?8C,2U?B _Msc ָGn{:Ul B` 'Lt$o{q _|a {-#u"pJd ~4S8t-'f|`ZSj@O@jD̏5n7-2X`1](V>N 3Q<Y}|B]S˙Ƈf[["EHWzQ͐+ٔB}'X!U`n1} NcMV9-s8OoD!pVrHN=|'>beHr a߲jj*m?pwkצ"c@DbP!>QWj.MTT\Wr]i7?ԪYV~ h0#xm Be$[B/y 7W}ַxMfK`lQKI&Kєg^&B )<&;p+ u<;+rӼK5 @kfHVRizm5 ՟vy;7c©ߧ\LlKRnDߏ(|r #g%K=lT2|h4tz@66w-mx64≯/0~%W vDp1ܙG9}b iTN1-# g!̔&YOQSDHJ=wuÌ skr% es'ECl,EC/AFPޖϝ2;1' 6uHW1Ǭ n Oc | uJR߻6z<Їe2^k!bg,߁C7i&-hKv1$߾fMIǑ[+de<瘢s\.H,d>W(Q~E3֞ #c@O-P֘U؊6&}[44=75l"з_zG[N+ŶO~XHw-ԌA%p7SZ~ DW̧RqPGxc/<گِO CDZ_?5+r(z. tD:/ކhgofju2y* ڍSeڦZb~%ݰ x$kYWkݥ1RWnr?ig7%xĩm?'xVWq.]c9Ժm #kI.Tmό|.oςD+UXA etVX5wLIRޕGg%سfsx҄Ǝ~Eg䛧2 )yM]`ixdү-eU GѼvP*Rvoh=?gTg y"3jNԈ$F`OڒH2z`:L:\e(D;y+1mf_ia"iKGzN43 '<Ƅi<-y J.LTJ:0̈ #{ٷ* }`W @ !.4rBd|E^u5!0w=$nx3_ߍә ˖|a0:Gu_6)ӌO*O} 2d2g .Uv$[Yyc6u,;4_J=1W2l]eV/Tǻj` ҳa<14P^QH &BX𙲶&&!;1mY,u2cSݫ<R HS3&j̻t0BJrXF$9pS=29 Q6mb6ZZ\Aq;@FM OYkೂڕͺM{mJ騳 b`9B jiRX%+Ixu0ڄSΕ2$Sj.v;H|˕RC_j6x:eŸ9C%~7{`)4\l\,r-Q=^eYn[% v*69Wr%FlAvEBΗЋE#tJBYzU]Dc( p~` :pB<ϓ/AO:B?xE\,\ Ɖ)# >d[͗f/Cn, 7pڤ2ƃm{\aۘF\T#?Ys> 7ΑM;tҧ,M}+ZMcOoGL;,T1\W/YojEӵd,vdܘ7rd1c:ђk8xj9,vV#(B>S颱Vdȕ93?*ż;xVNJk&#2%_œd%:nNPJ(JxRy0?*ayN;Tt}qM:e=pY(d[0FHS㈧4f\Oq w;?ӧ6yi>/H?R hAh;䷮uֱa,=u1.PA~  XvV 䫩EjU}j9߷jh+/F0$tl'.{֐ɻwFAB!tMH $.kkjm.5)_&{okls51?x -evsX92iw#"Z| +:LfP Ed t0p1aXxoϲnAU9ggqڽc5yGB.0SdYUf YSR:TÊ9| xךgv+5uw”+j^>+=%kwkpڵ&G1$T_WFb?byK(Nua=>7$}ārȢ-G{y6y4r%ڞzkǙΛ%R^>L'fv9mIUGQ [F{ov7sj .NЈڰmY@$sy\{0tbU%ʜi7]x]#{o y] ר6dR[FkꝔF*e cPqd/d@*dWxtZ ж?XcATDfNj9{]De^Uf3LX{z9b9SR3}M(}qyrNq[Ċ_2l(dIb@h)/QečInUᑈBHi.]^xY3]dRO#c k os۱w y_s-d˙M㲲Q]K8Kfn_7:vKlpmk**̒GS;_[y}Lm WŨ -"M-H8I<;2<|'Y)JKEk4joz~ru#XPRÜ|k`i>kP.rz{_t_e_~MXkM力?@`3GYGB.}N`FMs)I`5傧[;ZE$[lcl~lBy,_}9:L!l{J[<1yH:SX FKLATvy'v[m_euR}4qP+Rڀ&!bݟPPt 2s=߁]}%ˁ Wq߾U-6?EyQGe4&>sãʕ2ZK-At X,>Af)!9&@ ;4ƽ؝ }  Zك:{QLn'v6ׯ+59\G a("šD _w%x<޽7ꋷ|J^%vy6V@"~Q@/FE=ӗw9COrX<Rb#l2/\[Eq!t  ҺYX^_=\XNRˤe컨npgю!16iW~S/v>k66t_̞KUʦfL'lR Wrޯ5=tw:S8 ?ECT7D^ ' thMHU{n`aKM9 Nn&.k%Ul`?!'2fQԻuQ64ľӄJh|"w@{+PMb92 Op"!U /EvCcG/2`p|C5:7nB'.Õ YzBzTh8_%k:j)0hDڟ]iw;E8a7~Y3`'IB^K4sq* TuRPOX;ux!.N5ʢ ꖖ).qF`zj|DkSW+STY-WsMt3:)U%+;˯| *|պ%d|XAe$D-}?`ztƹeh5K pؽ#0b/:JH=& :/ll@-|]4 .bX- )QdM|dSYF~x#e "8>u+Z_3d/U#}rW#xppxy1Wi lafЛڬ'7ޥ5y$HH-6Y W1YZ_2 ewAl~3mZOkH`~M5|mdPB PV{ P^ݽ=FE u2mJdƀtV;B!_}.]Du0݌sTz#{\s#Ǭ +cuz@04e0 y\„s^rX52Jꧨن[߆1Ҡa0@ ǝs܃ 0|)xg ` PxYx9qmDTV|2]s8'|͔D r^XUƬ6#F~ [ R ߕXW|(a~z U7$%?Uj0C###LzT~6tݗ6@V2[JcP8k0O6DT[% VǼ %ŗ/*N5' SԸ=Xx4$ͰBe^-9|HJȯoU x |d+l>đ0Sw%Vg+>^ 0jN|?C@!+% nkQgScWI=tQѲRU5yXKGťǰap dgw/tbh쨲ȡDXMIfI|2B(q•Dyr28807/(3t<¬tc*DŽ.w-E0! Tyx/uV0x-{)˔A2>oӡz@d4Aq*&T^\+(徠v(_I,Z|H-هB_Cl6wםoZALJ@R3=o$/ZOo0.G@[l\`vc=ޠ!`HhZZPE2^K9`6#-*#Ȁnu䟓ZuJ jmi4$>*_(,h+~-Q1Pq\#XS6g8&H Re<^eOkArzωHWh>,ktCt"6/wHoý?֝.Y=+2-3J,^B bcCc m@2/.l1s(N݀Ja֡cū~=9gW^ΰM 'iŊ wyOM4o 퓘1msIB-`u~M2w6emvFÆ=Ra#t3xFr%MlQ}>W/nM ?zxbs>vJ I/]ϏI/%XCr.bs:> TۼFӁe[v:{ 1v_DAIC{a|OTIZB=K൵r@u%P=k#OcP*Xf[_.^"@fCj&>̄>AD.ʥ ϏWlH1}e5%J3h Ů |qclm2APAv0H(<aAUCf9i3~3^ RfuOa{h<vCUbB^Kf1~h M9_ٍO)\L -gyy@As.5$<5\/6|ޡ2ݐB*g4Ĕ^\98hݖlcx!pv b#Q- U^uؼo K6-gy1~pNɴugsx6ZiQ|]/@-3 _scHj^uI]=@@(9;N/ĥ`Ln 7.i.*-ȱH{bO0BH V;pm =ڙ:2 J}#2~_,8`aKșcW,Yi|Z{G(0(`‚ډ_}yǒ Um2'L;F7*RquR|LCJqN[S }]LƢNԤ9M}fn(1\& <J,5S򔔜]ȟl:%HTu9h ΞK.d_Ά C8.Zbl1u{:*(W.cۓ,؄鵒ݻjpioG_? L\`Q>i^FLӶ8:dԮ&hu@J]+ b½[f8l;tyt[YDx{ggi (H%vძWw$Zg&g촢/b Le%;WXbdY֡ĵ{=f7>##rQ4,¡wa1b[SRtrPAubD׾NcdP)ys*ֳ! 2T3vcJ"\xkfO'`O!)LeH=Ol{owm$DLDOYce%H{"ӦE'Z?L?vIPOk!'r\Z>O;BQ]z 2 t[c#5(@dfi<oob}Je ifŹz-̀Gyس|ioғ%igmٷipjP< ׼rF [l1YFb~ eT?R|ɥu"of|SVٓсjTQi3 j,2 ⍓ދ}A[tiϬw/!}QZAg]U(`.o\O ?<+()&Q齒LA䀫6a$Z}q%WւgywtP~$Ş{DA2i-@tZ/7f&DE)?UˡҗfҬhz(QԈCg$ ~zӨÍaK;k}ׅܓsso'U~}JgJgU h:Bj\Bv$4Zw8qbr0l#trnEm6kb_ɹbG<=l>!UMv(EQaJhi -MBvs R Le2pgֱGMqc?'!; ~ .,]5:`GǰKԼFИ-ߑKScXWq {ohSQ (US}jknˑ83AWt{xX˒P\z+B_CWr2&{EtpNig[G$izE;"$p++c?^K4`wip>9)yypVd!BlpR-u][n%Aε=~aPD%{"teADHԖm qWoj .T S샎 uJf|ٔ7d#7$0o隚ٟ5 Az Wbofs~Z\Ιj-O!Fa~q`"lwy=(i$dY4@;'̉}㘯ʇD6X{ etFédX(*HP?!َxy)]Dxw ;t~BVqڲ>S ~pqL6!"p ^uiJ-]G' AOju7\q7**Δ Zp&TG(@MtzZQʭ_mCVVzH]ݣrn"KHO^Og0a^PR4 D[ 9-%4QT;3`qTϢ5Dݴ-MDȳq tx^^(Qn7t %H0W'AΜ# r(>j6~{bΉOfN]#7HDA`S6#oY/5, F lj{[fWyȥi+*r:3{ɋDKP#q;-? tϮ5ɰADa{e#'k76y3D̼Y%a3V+#Id؂fzi(#ǧA/kH\JXn+i6ɺj}1+Ο멜SuJcծ68 tY$#%5ҏ?~y, A( n -^4+jvn'3#{#ԩH *HeJMn'%؁PY_WjNRjYxFoؑ+7x^'P*h]{*ZBD__;թ@*7 6jXRd axF;jk@tJL7Y=(Ԛ?]WP~LH> oYU<ԏ.ʼn& Dld rS}Zy6[jc  ,2~P?tVIB>3/l40338R}c29#R*ͯUkJn~/=[>wg@_~\O9d4Ee+CU~X+>Z{kٟGF=7YHTI&TzmOi45Y.Uʍ9X] HcSL[p߁4) o3gXcF 6&l饈0,X9BccZ~ӥDH&NԚ}Rpm& .@rڕ+t`3L+( (zLŊPhoDZUVխG !RM/xz#tjS7|1xx t؃aVg9de73W=$v̘r`k1LQ;}t-ny0Υ 5s. n8otL[> ْ1&b.{2F'4 )Yae{\=nGaxhbx,q9鰻!0!XKI`%x0*癎ӹ:cs7]4;lV>s{%'G1 ѹ=yY<@pVr6-;z *A\">&56<3kT 1qD%ooB!^3= DOْsPFQ:}+.@DĐPN-0Ω;!ХN6T#'OjwVX;'{&U9ZM'J 쉾e2RC~gV4]q bcYdpoCEYFJ*دJDBOVNDA1w ck$eJ , Om#l?_qQ%Sz-)>I z^տK`Om,͈nkrc.X' +JL.A-H8>MIR0fkL|찰#I'bpܔbIW˗< DufSG3|dv1n$Uk^~\!{@]-nS8qwd&}[aZP]|/#Dcр@[MV}Η^P~mHXRI4ӕ!"<h;Zt#;Ƀ  a(:mgZ)@uY{Rn 0;#olj_Ǹ-7=> @1}ZZ?#sa!.ɔ u"\ X1޼gg0 e'rיqܔNKZAeFhCF" (+";[" qqӮhc2MϽ_^ UGkAA!\uɣB7[D bNbLZu9>2Eax8;cg&]ac~Miӂ3;/Ӂ6(QxR~?Fd/~P}#8: ;|@VuS7Wv!|q2}qCvևL9:n "{V;$ O "}rȅA 4C<  )r@&uaO}9g&9j{:jE)whG؋W5'8bخԪϪΎ.& az8 I ,s".s^sDKڭ ˑ9ǟk[YJZi Nys4)֕II : ~Zc8 A9ge:N4Đ.sϕ1 MS!Z7$O. 6p2!fvرѥ.G |A jVZBUB\1sn$6[+DhĖ7G7YFR GJOhS;|֘$76( D%SڟĿHpFf9%+xPA$+d'8\I@‰K3P^ y\~lk0%8ԏW,:b$*Ir4tߌ0|&q4p5~"V4zJB J ˒e:sF!Ą?0&#E,O8gvr;S @ kO"bo%D[i¯ӉFPC- *wPC{,PM5@xxGfggZc~LBf1er6F$d P VG$oǕ{xSĠ+YNuL +Ukju4x:UВ& 8Rt )-HF5tOtE6'5)]6'T2,ly0<2[NBܢdCLd^l8=Q[AdA3ڼyyhɕuk5 ֕Yt)Kڧ\Gwn,.#%{r?v^PF26rB;N !6d B`Őas^ZfPS1~ Ǜ5qepU^]FS5!!75a!*n o|V@Rc T Uէ"8f[5mCm)gPj:SdGط!4wSc xg,7/{@'SJt r`eQiwak-.W0Nc.XAf-2p2x5ƥO#}XUڙ]Ѕ5D-HT#ћG6XɄYM@zs趦9Kxn-9of3;<;J$U*sԂ-9 G.E_ dc"T̯Nہyr}]]1>1\@â&fKr e^P|E';r$D)u/__W>LڙLgQ5n nF֐w .!%\QHNj̝?oQiuȈ \ɖ4T @_׾!jڮ&WB+e!Y1|B_3R< SPj͉, `4N M v׋[D[#,d%h_!Ӓ? ]{ag9صĒk˔xl܂vqW 2Xڐ{-efyVa1`b2%:9w @#vSWkcZBOS} jbsJӲV}j 3<%҈mJ4kg \X=Q[ȟ;mZHn{ u; ^pWYo˅ M)Fg~JuRk`#NW!vL7`rN%'Uk6)x(Bٱ][ؼ_AU-fK@\iFf}A63?"LЦG6 'X_Yz1cҎ΢Jt$ :z J`pc hdγ f+7HkCO{тwFm`?c r^Z":y}AEe.n(Ge+WB@ǹJ8/DzA8 XÄMJE% K)TFf7V=,"i.g_&y|{ la͆g^T ZIF*Ia1$1fJVrvp߮ V<{쨈`'n C{V#+9)aqOs|%s![J8`΋Vl{•nQd}'{ AؚEp4kHh.V=݅r5ۄ| ѯ^T(n .N?08\1=F(rbR> HN 2( x ʂj#WB _dy;14C sμL }q@GLԓϾh6#fR&kL{Qf%){%6\`oUoh~% ̸Xqa΃erH*8xԮ))YB]Q`gPrʥzD͐QNq 1ZuS~u@h u`R`)2U&t"ALͫK줶qB*9١7fT22wD~_ [ 9}ZG針bŽ'p[PXʷL@U116r9 2 /eWE,@gGLi>$ Oɫ^wWsw:ܜ$aA2~tAř۬E`7,DGf۾:A,_FGQrÙ˟ټo;Ρ=9y3Q2yE+jНcA};-*b0. н?5=ՙGq@B(^+C2jdUwY$h;%QPrjn櫴T3N$´V3܌ehā$'T@L#;GXsucX2=~:L=["d1}g!ǵyꓬBQ+Qg%H9st_Ei$f4t^n" fЊX h >iOm;:kC32Y," L iI7tjTN0J!eN5Sa3K6 PLPl;)1BB'Tfĉ-@ H1<8_Ql Šv'a|D)v[r œ60'= 3medTvlv\R:`C=&i3 j72',L͂MIM@+??wVΡ0G) 4ơPa*B- v[/Wʗq,G6oi;53!c[D(|̥?% oLwi+r v}AZ/ilH2^R5ly mNȤMN=;䢝U$N'rMWcۿ">n.*'myВМr3^ ̞@ѕ:`WR6*%`ѱkeaA^-ɦbr#د4l?ϗG 䊖)-әPHwnc Yd;SYl0v;<.q2AjʓQ#N 6D`؎N^+Fx2(z^ b/4Q %w[/lASYR[\:.trM^PJ6c93%z}J P_K>C`aK+ȆÁM3/z&I%"PN'm_xkp`f2[FS_y]LQ/A7r>>jsPChp$"}_7CfX!V WMI ڻX ePjiPG"(UU~-Db$jsKSL{Վe RVäB*#Sn5p(Zr!Բg!NJϮ twjMVp4M'A3@6!wn na^twAuG g% JpRބᾊa l5޸PT0 Tcps6w`+#ʽ"MwȔе&l@JCq3pNj+2r5%Wi͌:DbdhbvRcQNd&o$鋡w Kd궡)gtC=zx=dpG,^ASͻHA0*F=! h ;UI6'Abx1 kN\MQɲNŒ \a*QR}Wtf" _Ҫgك@v9nЊXtH~jFhdN뾣[KM `q?H3f;$+:i H(떓bF?Ŷ@9BޯwEl|QjSH `#낸A93i~GC~'n{l k=M;[.;YU I.`d#{$.,$fdUV+0A(^z= Ĝ0%cq29ĕZ 󊡨5cwDD/E7]Ɗ*M5JۭqO"n_4NIgE1w.sYu$=$w7XU5}Ć8TrQ5wK+ⶀp 8_+:8HE0'E !_dƏoY>RaH≆@m`\wUA ~rH-%uiy8fpY{W6cFs_ejŒgz=Q9n @aSB-0y5+bG6ˮTI8Sbt`(D.dC}AaY7>'sw[ްh0Bci妴~@H4Gw; xhney4ULK:؟o&-hH920 ֿe0̐d".Dz Ml`(eC!a5?]XL׬,H'QWPxӞ1 ЎyD"(9+ϡ&xyv Y 1ds&:^b,}5-3v]D5N1x+%O{U?TDڔ5-cP2^L8qb\+-mvޮmv v t>fcf1F'z뫉Ȟ(B 駫xl< >Bs`LbX^ԁO nHUgjǔ\.':-džʙqt \M^, 7 @ hG" P8R0V;s#|:uitFDH{^T5P\6yoQ4Nj8ֻMTgO#kXy]r&VjK<0a*?MT/ϙO0'>7^UB 1ڸ9u)<)ն C{w#= ÓAՕO`7+궊wa=yfog~qd'InhMJ!sr\c}]0,'VEhN$6 ˎD^EJxgc8"ttJXh.ۢZk,=F+.l`H,fKD:yN@sbQ}EUޝSD$nK%MLqfD6oOW2QwBk=e9%z-c)qR>ANM3Gl b l UhG;=M +`:Bk{(~[T3O kJ=XGxГl2-vYVEB{ 5MPŝn*=IP6$n+g4I^ɞѩ3֮wODB^r"idyiɻMΝņ21MM= F ]ɏK3 )j#JDG,SF[\HkG5T %+hV$|6Fܙb,e·ɼ;]2mFgƗ/EabT_t/:L6O[Le,X}/L9V3*F9\^8 a@M]c(` a!Zm ?a:nHKx-Zܽtt2[OԈ'x8՜s$]we)vh/g 36է1H&続:P>JYZ?C/9iCIձh xE4^bvL-V%FCpoyS&n 6 Y`a!-NXhC3-CV[$*dtqDZQ,/4PW-Iz0$CF5 0 |Dˉˢc6* zx =._3T%t]_e*+'DW\s&&#Y/t:%%\|/!;~bdY`;2vh$d[_7)9|_5!p3_Jt]ͱ; ͑|+BҖw+aڔ3ZU{A=!RH'`4&{q/_E2̉C# xc@Qt5.{>l,Pz͟3sJi2y$Ԧ{ &cv_Is6 ٢uǝδt+޸ք|Y⒏7mӭY%GtȋnpL׉"tuْ [߽VW^OT5mR)@o=NMHfuWSX~Rĺaku֩bDyZCFA:JfFUsA+iHRA87_. ei$ٚb*Ve]n,9b͌s<1 E–}uax5Ӣ& e&(}G O~!TvQh+aBWjqU㶕PelNdЙ|w}VjPz4w#0WLbWrcAW|Wܡߎ^aF ƿgrGW鷼 $кoR*W=u/]a gF%xxrh$W~c=@;B-Y|.\ @óL;A_"Ƀ>Q&$3Lz;}L>^,16UzŢ VldS"4͋6Mm x:l{ZŤo 0y˸:>2Q@(cOa);>+>[چ킼madtynye0_M0>'-&ݷ뒭~|.&k}UjXEQ m7" \OXTH+@snzyK{u7Y G:lku5^a̚rV\KkgM}q..3}N6(l:z+: p:[]Gt`XQ\6gK> CjO}j1CBH6ѩRmFi?hMыkn,`{7_ hh 8 ^ Ci,];sqvT9 9~6rl aqfÀ1RYMQ' 9v U:pN;aД׵d H qy5Bv'ňaBaZErzc;2טwdGj@,Ck fzM`,rh}Ա;9ojǽM+bn5kN'wdԗ.:wiu.ug<ڤ,h]~n fGl;4+a;+}_fCLhSl<{b`F̚! 8JɌT{ZNԁ$'J{ y}e >7.„0GVLE4$^1A5F*t7 {_}/lb׫ 0 a< kgYj mɭ~xiQä,lLnfҩ]mfPޘj`(AS4lVŽbY}+J]L=U8[ ~(œq<,{ 󈣁FҮD`HmA}&š!l#-ݥͻ GM@䉮Zy~~̢ØKKK9 ߖfܼmnoI֎Z*"R?ئ^:LK%B!xe^uK ><C+ ϣÜ;BeU3 ˂;oDŲ?Syu At%X N='j8.bK%iG&34E@7)ؤj n!.Do!=wȘrŰQ+zg t#y F4Cm{'všLJ1bBݴؘ6o%_H s2n>|kh{nev-GVWF-eG;.Et2I"q%v㓪BP;61N[_rÛ0LJ*KJGR̼F,πrr|5eF1#8Z]/M#3Iu?B{nc 9aП/wۍcy'nWSB/g ٳڂ\eGוm_ne KJ,6 .@Vɓ|ՐD @%Sd88~ 8׶ USnx%GB1AC@Kz8M:Yq0zp;":ngS7t2{#,8/ΙT͠-0gqϳϨ'2#L:trkqVB~cElBE5"Ruki̻5Lۈѩ6\=Fs ʑ>\NHзw"jc2`G&@YiT C,zFΈAK v/_ B!b  wQEo;(XEIίO u`mSl nbm͠~*8nsJkvG79u ܽ-l@|'wňJE@BUhla|"vOa𰦌˾@+^S9ws&ȧEFqz)aL.E_0l6H(tI0ٕ͝%"|" %qD؀I=od_~O0z!jB bJ~Ʀ0$UEL-%1kR La"<ߤTыC(R=7Es!0,:َņ2gC m םj*gT]kz,]1EIꩇHiUZ"c#~|y^>2#Iqo!ArpҶؓDͲJ]8oO˔}@v.1CFP|/ &/<-.w3LTr%S8ePf([Ҹnsa:6!?gVהߡZĕu;Wg޸u $Gfu1iհ/s l`m_]rE"A`;#u@t9EuWSU+lڳ Q/? Z_'g P67j4aCV(P>>B V8S-ұqV PSiDYRBsehOIXS*O~aXtUOIk;C`I:){Rfo_ uo œ5ÓXˀW9TЕ:4gVmw"QQ^$D ^L]8}JrJh@eeE,gn:H Ōuĺ,S]qwspR |2 x$NK`.p?ɫbsů =P+̑>}Z .-e5,U,yH=y&-q$-,e[PjjYj(IoB&ɩ*\F Lp{du:.x\_~qɵC1CDI+`x@#IG8tewE'Lp*%-׉ i߀;WcR5y4D=ˎe^)4Q5^dDq?[E_m %zMx݋ }\9R ^7k4g %E`=`e-*mC:y3MDh]>6Mi61l(vo>C+pzlY#"ZtĢG= bCăa}ZG_M`jZ`YrI4R x*|zw1G"l߻ZMe l'Y2ܠKph[q{:1USԅiuc4zvk\H؟>jꪺ?oxXLU#ib<$ rUYS>*}v#?9\pUPjV>cO.k:"9ՅX4ɭ T2 Am%{O67zNpi56µl7sEǝnZ0{R<1;lko3k|՟>qccVhNHB3;I1UlQJ8X&:PDO,[S(,lQlǘ_PmOi /S_m)p@al-^ZNp[^yZ=N=9k۽9Kٓ.$óvwU|GL*/tZ-?@׽ҋa{<"ʦ"60 w{g2pG8?&h|,R롙12{iA`J`A뱔y0WzWy^ٓ'[,ϐ-c*RቜZ׳"T3i2sh珷}F/z<Ʃ(N #7&r:nO4HT!4E&^"bA彊0ئ+2Hi'{\FxP5Ԋ)hYo׃A#d+ 6Ǚ^HDPP dKD 3;u%8$ѰCiI)Om=+Qjeq@}gavEX؟A6_F^vt&Cҹq)@&~\D Zm1H>+њ=tB/*eDie:b]NbI͔)2F$) '='5"Hїeezɖ \>7NduςβjTS.KJW`7ب^DzFsK {gH)b%+NNFH:)ŶAX$ @W$TGdҘzS>,|&p}b*TW8><7٣S΃ij,LבXݷBkUpJùyؤvy3_wDPH}&XNдO+XbS/a'11;R$~Kowˢ+YZicλ1T`v1Fz+\ʍvr;'ɋx04NJCml!0,*-O$ I#<`2 &g` $ahSzu5>F]E$ 0` ?;h?MUȿ0c:WxK誱CXŸ;G@LGd"b۩6Oh;\S2? Ӗ20s֖Mz$Q6z\ %KzLNsrnr4|ǰWPGcG〒Fj`|AEx}; W`oLX#dE,M\47&:)%U/@3ʆWVƍH~gkk,>p]VFqm΍.'#OrO(ަYZahXf8)P֎A+|}9}݂9J;X^.i`rڀq3R\Q뤀.lgl1[ $}OOR\dK9?ZdNI qx5! 4M7 ^:(vU̕3G'eK.Y@KklYJ<Cg.!ҖN@V&?G17E<6Գȿ5of`fq_ȇ1Qp.zi E0wv E6vY\׀"=IZV 1UNbnn@o4/%V. з|6!cc6gc^DoD+Q<ʍas&A$ 1{v C{<7K(v1g+2)c: 7{#*)31W0^_vպb}u (?r -CUJ),Eh^zL(0lMNtW|FFr+8|ciHNﲝ 8fN9]x ƒ]/N?'l>*^lSQHNBny?7=xHm.ܞ5< ;!WEx[Jn2 a%>_j%rFhM¢-_tR8!]z$+z{VcǍ\3 |IKk0%#|7MB89A9Ud73k~焠omV/H>Rzcb e'Yv9 l~&B>p>vL)f ¹6ؤR{ƭ?7=_~{2G>u:µPK4l(;GfRBS{dFg.g5:JBUZvln{}*`^91%9Oh_5cHY@!jch(7ynIvM5ߢ]n7ATh[L)£0 lr+s9^Nz$V~aʟsz5dk.Ԝ˕ȷ5UŌXzBn_}AYa/[553DXRʈ\"X4vTr%KQbY }qιk$jq+o! RXC|+^67m9@ G!~H -|m>皊e= e17VίO"mq4wL 1y%H=>jZ(Rwe9 tM@q7 }nס}K1'Z4rri Q/*K$pJI y68.!=΄ _utA" <H-*Xm~#oIT'VK𲽯{ƫR{S&QXi:剅rY׳Cr%9-eΓ!a .;ƒXb%)JXNTL՝7noymIf"%E<$zf'ihfif`9tc6}]KAX<8pT"?mJWgwԧ+Vn"F%gu|ZzG#{_id~m1)Y)[0S`ZúowI_U)wf*RQzPqLs)dž Y҈RNaM%<7h䩊)鵠&w⾴>,Jc{:CgrR eCџ&pCɅ>-.1m+% k&hy>?_}@AhGC65=%3CJ-_[^@VVwOė㑘 Ɲ6Ρb=R|E ON3kf40G6In>BةF{9ᩀvpXЧwjm40Qav]Q-5".?鼃Z;1Y=15$9HJ\9רu?M>w0U<"u+RsƓ>\c?*? 2v&F#K⑙} XN$T$ 6ANF臾ߒ}5%k^'+CZ$IR56UUg,fOod7mC6X{ٌtIU)ot22+ | f Ԡ#rH\ d!9.;+J7&)Cp=~[;ōp;=f 2BOu v)`GuL(%Uo_P#p5`XO=y &VwLJMJjuTcޓŜZ=\ 稅5 AbH B)#\rʙ??ғ H΋ll}*4aۧxuܽ&&ki'Dsa˔?BM0C3}E;IӘfy`]nqDa ֳrE UBrՊRkݗe]ԗb;a6$1->>g?bk3 Fr#Y.|gO:Q)`D%yq PT0*zFvcinw>;9)k i@U%(*{s0݆#Ueav0#SC10"3׮R/_a}׵˗ёrܪRTuQuZ=v}BYO^ `A0t-C8A۞ +8Ϩ!Y71<jU޲=qsAPNTʖ1/*-Dqެ(s| t v>ߧCp-tЩW\Cw "hNvP2# ugroP6YJ_@.X;,\ǀ e"x R[H 4HlrMV64S5m;KLKTۏiJTNsUc1]) HQsG%BlM3m=Jzt\QJߓ hN“h)\1)OcRlɽ2].ȣʭ"54ƕ$/%A_6Ѳzc!0\~lLq}*0/AKP7u6 bz[$.8ִ/*([1WiS5$ڄԪd=bt՘,a)2!UV$b;}vo `){ԡSy,rNY=[nฝL4O]N¯mJ~[GьCzЅ?g jltE}'t;uy=f֫}6Tldܠޫf?i%4?CNl73kV8&9CF[zk=6-08@6[[;u7"P 9 KF2e1&QB9Pb9U@1Or}u2&yGڪ kHkJZ$'à csڏ͚3]=E{y~hC{8Q*fYdǾq.Ih{%UӆS|Ε`3hd:wV(zm{0kҷ:VL˜bR:׏FdfسlT;c0\Z?"5ʿcސ[v#i5!5~V 6!;N碑*dV;[tV2Y%j3K52 5nI:8C,GG@Q)a`џ[BA^;TZ\ uKQiK09 КnX'OMy/%8`+=6:̸a diy w_it~}ufІuF?GzK{ mT?#r')!GxJUSFVyQB!FyD+Dd]jοB:5!2`8B{* 0{:W8 UHx*z&Gٕ}V1'MG7(npյ/RT*Kcb` } s24;+3CJޅ Z?߭qs_&mD8$ 0 #CjVhpٛe`!!"&"4IAItEdH}:ȑgA+'~uE;o`1Pad`Waȇ$d 16 iU^abO6֯!u kM.(Gb"h_(muD5[+C/Yqbiyz 9$$0}V)h ? لڬ6i]dhmA jX e؝[n6EM>\i|Þ^_e4]LBu>1C!Pr"4z^[?o0\͠#_`6)=)AM#NRYgKLL7Θ)D¾Ɲ1Y^"y2[I}qrȦ'Qvx{>sF^,_yՁe5˽p+E8Gwc8Ma?؝Tz${.ݓt97:.ao1pK_b5 ʝi9n&mfR"C8a"ծR_ k|4&cCj,nc RD2W_D6%W7z#DNO&k_5-h_,P-X o+vz>q%1*{!0`,`Wfy̆⧴KPD͓I}F`1܊~IGs~4,͵F23wfń+gGڷ6p8̳7uFF0۴bBb|Ds&(z5i؟0niLvPh F{"?,I8W+M}_@ IXd2HcFK)O3Fc!MF]'ءkΧU(d)@m(>{[>} iLjӥr0+N:Gr\ |j+#™cF“aw2/:WhQ] >P3sxRo~~Y^W$кW$]o,htC3ZZc]O/ D iJ x+sE!K8k+}oYg&-,bȁ!Nہٖ 6X:s> Kg)V` &3r |9Pݟrji1_бsS/ 1E G`3}ἋutdaER8D pBB@Lu1НjbO۽-c6{n $06Qm}VJwɉܲҧۉq}̧7Y"\ԜN\e:Ny]q0O>tkLIy<_%@T ߀B/C RU(RU9ģs7 HD~ La0N-rUX lxEc y6&W[pW]_bշ 9ٴD&Owwr]K=^ p5m5m*rɴuj^Vކ$iȹ%`bPǼ6H6V k`_kɰ4,RrU nyς;$31SkoȠORqۢ8'`L}&Ɩ.x9\o$LB6\8Jc3;?1=ay<` PװfH4<5Xpm#\qDFS'7L׼ECi_Ɨ#{O|sȕƄz3LugO͐:mmӽw_ۮFv[x@ 8Xv%mr?Mu:R$8M1a0ހTMP'i_VH83D}'7nIaY]2EP49İZi`kf3q7M:ido[pdh1 Jq ]_c-3_z|.AuCfLq^0U_u\,']Um"<"C7EssB-#RDb\!Gخo4+^P+L1x '⦁dQ*B07A3S.2D&;c\.Yɠ:Iś .n鳒ɏe+\Wx ~Iyژk6LC\Yթ,Kβ]xK=k Â~X6ܿydc7aAD(cp˦,?(%#U,"uF:AHaM2":ϋ0k&q=I3u=ZGho2%Sf@I3̥Nݩfqj%3dWUl"64;M"r֋\_QH歍6LF{n%fVe<bj!}WAS?X{UP)0ΜpI|(`Yk'm A͍Qtn}@ 12]g4|@ vPVQi|Ǯavie} ޣh L2#dYY{itqy$S"8ut,w)Z\s!dq%eRwp^[\PCx,H'kEQ F(g״L,-%z9tRc@J`QZ\0-A>TCQgK_B^8kf;6jeMЌ# FZ ,I&ؤ(gx hHz7zsk7tfN5bLw#YVQGn:~nk?} Jx( h Œ= ؉3 :ٰ>d4tb}mo,_9(/>kN#n e'%'&Fى,ieUD RxkH}YvGÍ?Zdnj-j +phj5WoQ>#{DGmXѥ붎~(UemK5KvkDܘ!`*I޾]'.W ;O#3F}'P&ϼUOYXbG,UZS4a>Oܺ"f(RWޚi8vH|RƉ%Itk〛^a۲{mbi5ܣZ۫}1~ 5j.5&KZ9$kGy%Ŀ d'9I Zlf;s0ZZ&UpFV; ۸(c?0헭2dz56ssOxdITĔ,RD2mhnܐc-nO1,]Gک37_Sf{*/5IOKd6[˾  9\h\9{bdia'O!5{$zY[Mbt$~eS6W"* Bq:G[*kTE*:v~-Q[ F/4r7HB#͋EXEO u}G37ݠO'qn,Iïgʮ^ڄگ"Jp |*et~֥sKŌGĻnoL kG&W+ӥR.iy% j8屩xoYl(Nn<+!ICo yOjn>y8qbı"[7{s%"Y8`6ZM܈|M@t3NE>&I?8":aNxLئ`545-|EDC j:BÁe^+v}&!(tؽ@UH@şZlX 4roz,=9ZTcy#֚^m5 L>.e犯%V4y ⍛ Ro ;@ 1=Ṫ= RRA Ďj/U{OGe}b8GߠUZ^^u"8㌻!^ C`1lORY$obpfR/~]+um)IA6y9jv]huKM 9 -lC|)rmVllPTUŷ "8soe_;HegW lJ|?9Dy͙(񡮮 t2i}/&>GaYs']M[u?z҉ Ndnu3i"ώ84>,`מ,;jj+T#[&:G|q-vIh2+5S8-RmN2dž -pٷ ̢Jr:,o ]R u2+Cs`{eZ\*)} {BD e+6x@LĖ\תnosf+%7CiGܞ\*ٛȢD>N!n 7@$Vλ@!+BUܗD/餇$5ڡݩGw2`zeJ|_DOq8a3q`S^+3vhʭX@ӎD kng}oȥrGq^#uMV[edJS,4BOƷx#Ɂ_I:CcGB~`k{<^k~IΏ87J8## Xcl5e0OhG|v.+;$t'F U('xC}=qg2qƺ~T)UXy<ĠSP'AT JⳬHuMHy-FBנּ]yjv@_eEᩝ"Ip:͢Y(k*}qoԡ~ʜ# J˂<$[MЌBKZ,z/^Lf֐'27uLk&kgC{,a6*:" 绩ם1BBC kOȔ*AQTœlBmt:bkytο2h¿χ̥G8|22jIWp{^s{eP[_ԭɑW ѩ O :K|4j;"z@H5an^Hc Ïmd{ /u#G!_^sZd^88bap)!.CY߅<ؿlXzri,C۷9:' 6Dsm7@c Ƽ \-nfFԺdfkg 'yhy Ԓ>Dy!pdT$Cڅ\:C45y61__`!Ϳ AR0F#Si󯞤笣ZHMpgϔ m[ve>G"Jt(̟Y^X_G@Bf,Njd(3!C1Kxav Ǜa`Q=6;tzveݚD$?1HZ#"OzlgX݁~dP7>]&DmUњX#{4E[tp t Kx{ Ǭjo_+m !qɖq_8Eg34MƎK(rpA+~J"< zVM䞜G\#No9F?ŨȪb؟!^-2"OѫiohcQ7om?PW3.YFQ%= p H!0M Ϸ_ƠLȞPŵC y?(R'eyhqɝ )eqSe#`.8}1*d޼ڴ FA:v ҥE$L>Tyiz&.Ⱥld靴:iGM]0Ssl"bYԃd1AA 9 Mwq}|5']+p'_ 7 Rd!!q;u hwSS*'3\ x8 G?s1B5Z0B⊼ i3)iq'ce2z'2Hk |J$+]V "NhVȹ6&qH_wA@\7+t0mYЌ:A;g+_h6DY@@qsx wlݣ@=0BE_,rJ3aEO$~!ЌIKos2e KTeBEnZ>!ߠT8W%&飳+2^$yhEVki ~KxIK$XڗO)gn J,hAYwW^ᵩU4RZ;uyyJ3b؎7xw]*>0,ʆ_vow𭙳`v9z6CMyr1.(89>|^IuR(쏱b&KFZ2IfsΚ(VU|N"Ā( im68շM!`R=|?wIo:{+ BXŊ4+FFX®,QO~JLy/ESK!K4S4nL$Gj G4bݳ.}tjjD0?:5NT䕸gx|BkA-;Aec1aS{{QuYܕC'yN\'Hr;:ʦ%k<=&)SxlI K@Z%r|؉1|R"0_yxG 7)Ur\^t3^/N$aQяbq=LD1HFD zճ#J(˄jh !zCa͸D)tqgɅ"F/äk@,Ȣ)l4?n<=X`%`"?g$`t0 o Nʅ=˜+{Q5%_ x_[s#៵HW]b)*MΎtMΠ߭Azn;fAx 2+5v~Djc fn9Sti1ty'aLXCҤpR;FPj}Ȫi;>L/؎G1)_{(1ئ܀*9z9Rxw@elfNâF ZuKqҌTm3}@VlN b,@QOJ*/bϵ Ђ,+5q +Hv)4-hnlz}[:O ?֬;V;/d@daMxS~ی0ru ?)UW ))_s";0@2W(,<ي$Ps"$XFoq=Y$Ҙ+å:7WMA[A.8 5-;9*s)!S`*٨g%J@Fֶm|}CH(auk  $3cM·=u/gt ɲqWD&_NY5*o<[8('ȞsP~ @'RJ,~v8iirIL狖[2,^dj{7Jaln3nmȲI|DU*5)u!_gvYA"*n,o ؀H%_o:fךсZN;7 E˝d>dv=ҦDTѴFOJ)4Yjt'⩢! :ᓵdaΕx/G9aľ|mmPW~w=^Mo`8>]})<%Mhy{2׊ w@ЗAze6Ɲ |tb"~Na}cB[2vOl{WUV152xjoqm(jO>,m6;4f]4[,N0z ?v(DZ1 ?ze#~0v k>  5@H}Euؕ6[Qz̤k^ +wР0:-lT: C_SRB@ w.W9Q@@xvv]OfGkk9 v=afnyaBI**ºBxamҜ"u,k-b[Revܫ!?4|8 m?[5^0CC0{)}ŕg&OgG*PlXǛ&w|؁)YO)L5c=`z&c9 b{,[dzu1>fsn^6(!3G/#DU0P f%O3T֬75X.-0Nw×Ns4Rٕ橦yCJ6l/ s7_\`5W9;Д/fYxgŸIj95AY>ͤ+VB\jIާa;tUaZS0KNvmG+)QftWKJ )gs֙VͪIzk, V}4NR:G,ŹѦ.ïYpo&_<!fW%G|nʔpM$&q'(S=ڕҦ-n>35qpC#V;k,1["5j)1B*w.y^fCsO1j5ByDdD~ʯ T ohLP qpmO X͓͊ '(R!K2A' |!-fHMO/M3+6(* DKʳЫSHnɜ>h聳N.T%w`i6)Hlo&\7CY`z9 xtwڽ KJ_%[3;~N[քQ@p@C*~g" ;& <"xMuy>fw%\b 3Zf*,ɦR.XҤUсj줽CѢOn/(rā}y!$nit3/M$?nl弴" rp6& tM`VD' ɞGf6od l8t]8`/9Aʊmr4*P/|08jeU@^f3j"lgވc_~=7ԄwmU{c3 U&KZݬj_+>ݲR8Q[%EЂHx.d ;M%JUy r򏹡C UJZK$ y2!+$r> ;EXU0[yVȥr"󣭸+%S "ҺIVOb(ߗ'\7'/ 5re_AIX1a yCpb1KVT_ȩ;k TdrI&~ݢcH'n>k è0(:]MR93 ) g]Jϧ Khpӕwмɷ3fw+tSA*$lƼ (%N_"5Iu^2qVCINX Id1Ɣ.R1{1j;&Wė:Rx^䈂M־StSJܙQDV&+>hs];etq؅jb:GK,īe04 (]mQcJ̽|ʈ* j+}XmL"GJc+0~Cm. b/6^ Ԟ3ׯҽL_>ƭ0)y7 s41ܗʨ݄}袖W؞>76G0|RkFc_dl:ۡ_32mucgD,.aAX%Pj`'oÌ8фO?81{&f8oK϶42qt$@{YFTl%7\Q p5{ԏn‰]IǕ[t!W tF(yf^}=+BBV A'`ZQ!{3p{* ^y<^5Zo #PCeHh l E1ya1w~w~3=#4nAVӆ*Ќ).DEX̦4{xdۚ8! Zk@ X `y8:e#\+oA,#QpվO c5U#F*H D0&p8+53gSh׈]w] cǃ$v#41 P[Jg\~CJۀYTccJM3ihlϹ'~.kXn̡WjCҳC4ڛ6!o42] s2/|& sdr|mIΛJ<%.M!;9!>ٿ8Ćr703ْ+R}gsR7`(D!|8/u5)Ee$!ex3&P+ԧ9B8xsJ[wd:zc< ۡyFn%p@PX9&̤IɈ턷YXJfB=4wmfT["!nc/{Pv.лb-b7YF iŠg#+1(etdrp! F2}Y5[E:ej)߰N: uzZNwnp##5Sn[~' EP;sf]X0%ͦw Ф@(lw0 #+ޒlKM;|7C\O!z6='FloK6y1cN=8d!(xDžq-us (i ՙE$5u{ѨQ:AQ0bFL@yke ,>X| ?%!#3$]ӗ 4'v6"BcY2횆3^cٿK-Ha@0_g0muqѵq1z@H. UwRM,I$A@C.@F g\Uc3,a`~oW8 N#䏛|=j`!q&? rrnwg'+C\w}`>lG :񠔝͚|ymA\B7О `ҖA;[fnx'R~PkBclD?wj:sT(j5uDݟWIa N5֙{G}fMv#.hd{hÙ]Ԝ Bm .ud{Nzlxã Лa@k_Lz &EK}%?hz]UibxECj(PCyJe[Hq k *&b#j ]Kk9p"7u1w}Gxv ߗ$͍W +xƛ_-mg;%4S8vC%i@)DF uaFuhA5/y@7'[;hfzD, -c]Hz6BVh*qt _"r٣\uIOVW/ŗx>Noܻޅt`G-].g9&F"Vnx ΃)h1F =t3OfJ]~B%Db!N_`福G,.36 #ϛ}Rϥ@^^M?J/Vp0 F \iDdz9~ؖy['+FErH ZGT\|&?zTxy9mmj o~m)n'OU >8K~p` b2kl~")gx϶tH>g8zX50V*LzSQGA ,H Xy]"%zRz1 HOm+)-gt!5n;z wּv_dȧ,J r )ֈrm8*9Ǔ(72;3H⠹{ˇQ * B> [K8-MR_\jm7`|ALƖkڈ,Aҫd;Gv(|&שa\N_`NܣCY0rf32Y`臼I$ӊ2>p?waH\l7j(>/,Z?s4, -/PyĂ']o.o‹ ; du4Ieˏ*F'Q!VPrE\>$F':<h4i;XR7Ҵ'A9^~ף6Aom n6 |:u^ny;ʬ̀|rn݈n mz$F@pgFja,Қ%K<`)XɩBf&@7'~s # kPj0ݵuQ!AJ%y}iLpJz ]"lO{XBuNR#xdgw?f1 *mC<ņUDҠ^V9V(Bӹ&R2ުZ"'{݃(¥4Ϟ .~5=PUs5kbVN1vh˵>aP6=!_bK*yUK|-N6r?Exa'c>k-lG:ip` N AN|"@&pqSSt(׋}tfe%3ISAk{%SԎA)hKd@z)%Pvǿ6.zZfO]sJMr0\:ґ~GگhS$ɳ4@RZ8zϖȬ䩰Z:k]+L[ȋ63EJVYXۅ4/BjN˿[N+quOUc"?ep]+Ti F֟XAɔ`ڢԷđ c,ͧ))@&C+'iigsSx\*TakJaJq/kV7|2~hFq&vh r-#$N>wY+JYo([%   J"1jqyп2iLW$V-T ~in'dyiV=-!,Pܬ>*/'=vz%tzEg%W$TqK1!I?+<녭 % l/m'7hJYI3 P+K}hN .+FHcɲu1L,^J).1Y "*0Aw;][6/Wp()04ИiR{CU;҇00SCΣAVZ_F 7q[e>kKӹ- ) -a)=ASD̞\pm tN.#Gzg5_{t$v;=I^7,DWkӏ##IZTXF<]2K3<@]6B$~,}|y}d.x KKYI-j+Q@6ax 0,!xzY3y5^1бg+*TUD z7}UgF +\˿~Œ(@Wwp!]7~q-`w&"ǂ $&QC nt P(e5Jnf_58B&X!¤e-3-`[-uf# KDDtmw [SG &0ylہ {/GlC^.s{m*ր3p yV9+t,V^\yi(0k=U|X!*vviq`jCa 6u |NCjW?jJ68W+mMio7G{?NaAV9)hV%@B$SGxvat0KdmT/)qD1ppWPble"q3+E` [0xᵹ+˴Nq)8d "qբQ]V} GȺG,MTe w)8} @nT9I ޺j;L%DSlxG_]+1V:Q(I#F3)i{KH6($f%D<qen%Dʔʹe>ZG|AZ KG_W-̟ȤR&ӛſU%+_Sj;w!kO!KQ%.580f h 9/ե't%aĭ+G=}j>= fS+r}qq 8 i]` " 5dOrXSu<^?]ON S%bxڊ*s%Ep(s@¬2Y~w59#7j)~0n@{i7 }嚅쐳EIidzhgoސZ gc||3~S,PX½JPǷCy\ԙ3ָQ=n RI?#ˋZNRNQԂosFa!г{?SQq_JQ$ Ye7E"|9qZޞSfV!_^5j`u'pXСsإ9~&K`T] )^=n§s0 iK}S%Hdַ M {VjlbP#'uEJq9w0~-uíJ`wr:/'[ %>r[J[÷=)yRQ/fKSgo˴uY3-6 4NfKй"dm[S>?sM3#W8SFǥǤtJ6 _ab C=zYH*+g.x)"}P?Nlw{2em &VH"ۈܒ+GөD@7yu]pki1$jOOCBϻ)jet_iC\^$Ya;H-ƒaj1ͅQ64ݧ՛ 9И4s2dƩٝDq%EnXp.`5Ӊ?yA(S<8BANj[h.r~K8_BM;&as7~Pʁt 䎂 LA3'IWI a`k"w30B,wmO կCOȡ74~"ITle6SsR.xY9ֶI@d/ :a>gZ! l;'5z7`R.1 --Ն"gjcoX:Ee Q5*4=eW4(. (^PhO"cwfy;`.fw]EW˰T<͜j&%H#=˩G\DC/#-e$[0Zejx7PexXUҮfHP7tէrކLc4OEܗhg/?ɧ 8v;&L,nE0]|U )voz+?~<>0}.AL;^6IA+>Tώ4ԦCQ=M+RME@EùQ oWl4?@+f kcC.7Y0Kgk^ ֹI>25܊K\/ ɳ8(KFiEiq:wOEnZNi-[tÚiߑ1 ߤ[j$XQ'-ĩD[^E7'NOq.L.l?Zpr~". 3]T3tcBI,vAPQn0]4 LoBHUD|a"0\(g7ǢLTLJ~k$2ea;/_䍽J3d' 8qbb40~+"~ {vҚw`ǵ!$QMJѐ<[%VZA)-hBRu&7-1^UyHTޣT0iKNq^4W$ ΖW6EWXGVjB1-b L#:" :Hfޟ0WM2i rG},MFLEBG :0|?tɪef|k O-Jr"oB˒HwPu,{jEf Iq6Iz pp7LxCw}]Ԁ d|.q΍z(ؖ |}ݣO fѐ萢!N)0ɴc~{! @OQohT`7(0U )5l.D#Ivn[2ӛ3A(lԹX2-O(ѥ}-j1m!g#•tB{e>? ]HM~=҆=LeUY(` *BF |v? {y`kyAvhmۛ333Cy?2D*#hn}#h@s1SRTa,ԟ_0s]p#faݿ 6c>%vne-7]e _6HS*džvZp`HfEE y}p+ TDɫ.F0ucɎ7DkU7'f7Lڹ,Ei+,D6EBBrCk,˩޿@ zŻ!>ƛ@aT>dg,eF9 +w MN}[iѩNml&|67AthvhR}K"i%>`G2 JwEήOݕIf30.3aB~|e @?##tIK1ĿWmnQ^s?c u-C$ʌ'#2|<"_)LA>$h{n>w[큉fl0=c% QC t랹K @@PϨ{Q.-I`}a\Gopq) +wsв$kAm҇SZV pT:T%P9G0?1Y@'uKG-CWynEsq[AwB=S2;:L:guyIP*+pV~$؆M8!UsnΗ<<^bjኵ} #\-̓$^wEY o![e&< h¬SΚek8~^ΰ9JUjH0$kݰ-ԭcQd İ_Ӷ.i/5JRκӽ/fxLhʆpwX]|]GW*3;S?=-nA"q'sj&h^p_xyxyy̔_>l4w%<5.4US-n92e)cx5[]ZWrE(8%o^L?nԌR y1NY_*ͨ.[ȌK<_xcQvT:iQ_9BXў-s1L* q3Ҙ_( rސ;gsN"X۵ά |e_GmDr5O|k yI nz1ggcӐT~3LJYmuV" +ET]=V, !I9!D4uGKE.t[%㒒|`'eɫ=L%vZx'B)IS>{I`*#A x":+ClxEJ4~nz|q{S@4 ( B VYNńr̟]9,Xr+RQ0yԿțE i),c)tuD]1FCsyh0mFW}Д( @gNܠ1jCaby2':1*RR  {8/=NۚYJ{@FEfҫn^ΟT.e9-%0Eܿ\0-Y^[( j8|kDk(=_#/EǴS$&$Mi| Ędypt%~ZbBʄiJVH!/0櫌up'TeU5=!N=S78jɇ\AT"YnGBJP0ˣyyvLmlŲ[# i&Ǧ#[k&BjU*%\ak1#Md4rԦoaco49^cymeH760"V;t80}$z-bjI{Mяl-W8d 6s{`PJ%g-d:Z~3y&sQc2:&m z OBǁt ]vJfD`@ae4Dr{]Բz{3q.nEt ڷ-,w. #suW0u"9 WvByh{뼻;tfXlŭ ޘv%aՔ9ل͋\geJKH΀Q(*F3qq=hMRÛ1CLUӜ`[U qf#O<<g28#Q-S 5.`u闬g$yY k;Ud.\}o$F?TiqwRb2 oжށ`%nW.|9ϪE6{Y;ir]c)E"qK?J} 8$&*@YtvS7vQ,1KٷQ.t|(^s7I]W쫴a[%`*X*z\}A~y./ÚkurVyjAfٕOO E=|Rj5O=hٝjo_WՑ x=Jut?l⋡B&fS]ܰ+/ _Dלּ`>*A52l *5MR'.Ye!LOvX#G<4 L,Q*y Bw l_Y,\Uu5Fi3%vϖ $–,HKSTMmgi"ng. C3 3| wkfT@rW݊D[[ɋRAůA/5u~9(o' 3Vᩍ&hKdwiޞ&5dt5~\5y]'D ?.J9SwL.=zC3_>mn':YhnXt|ە MBa]축xm/WNh{nWA ' qds=N9%ůt=3L#`Uݽr@ӭZɵY}]d+*:'BCYѾby|z~^ ލm~wZt$eo8ஞUkV-Єѓ.S)_[J„ mDCa2,kz+9梭.fg .)zVP LCqUv?tDz)'8Yw>.9df-qƾpӺD?\P (py6YCagu<~3U:7۽J}$K;۪?Gē' @~pL Qa!%F5^Td^wqK'Y2ЄVs@ ~&3iJAwI'VcnU i $^EFYu}??xB7jX&ܦVIgotɻU&(ڽCėSY†8 $ ~M&Om5_'ߦ߷(G]hQTPִ^BO%[<̉Ҭӹ@"@>m"} gw+Euu?:pK%'L?z{[tTM{i&{rqv1K_kwHL!`qI x-۰%0; hr9U-A 2əکyrvܥi7_6HCכAٶ!i}vԘ #wcroG cw[?'+qW+h8 }eyzIң3ڠQѲn8h̳3@ijU?2+^ BO^9n(`u[| ^D7@P`N_icA u!JYjDEėE*FyqΖVQQ/\x2{0YBܸN;.̯.;g>!.daڭ™@jo;K`/U;\4xh$hT]D 504mp5iG̭5&4|;y-UM ;(rYyK:C\v·mlX5z7'*rwWjPL !$E7.O":qmҍ"Ipꗂn!v6PR>8iLj:b{pU_,|ouRR 9etp_\X x_iJxu`˓S.6w*rϰY*+ckZ# DG3g%ҝ};tA=aHaC |򢢨6OQ2VEycǯȞk70J=BXY9v}W9V<$&~^ؿPG~m_Œ,q^p/5˷rozjB`*k 1>[eOQoebRr s_k 5iz7*~$*g}1nWt{"+uw:Q'Hh@$rc8q(+Br{E⸕g=dNt)2H@; (þοgV*xXY:k;)~SFDQӡzr ݥ_=aЉ>743^܈[;iЄpnZ;Yp/V_,r乧RºK>DOƆ8+eU. gFsU5okBSvfqfdاNXjz™hi2 gS3mu:$χS6tD-Oa?񤑡9a45+߾κ`+GQEwKE3 d6(`=w''_YR q Bta$Xph\zP-Az׽KT1BU=vLfGrPBUD:L8y<| 9.v#H=q1?=d*Eśl_LHM)Ia T ut ~cvb/ sT 7AQq ]K+Q%ufYlZi/iXH 8"P OfX#eh4]c:<˿obDT8eg`UL~>J[WTP@Zn's_)%h$#!_PxhMk2[ĖԣwA P*x*10.QZg.;:U&ˆ/b?j=T)v;Orn}lxc& vtt-N#wFj$D0X;ؑZp?Ws(?_xR{2H%\ ry/&vgw*#wbv+ sZ_a;Jj"(_lIlB$,)¸"bX;KrD4 ;&B0;Y wXN[ I?|?9Y~rol'/A 7p#XB^՛!t@mR6fjJ0G<$A{ev,j/rP iLwA+Tn&ZT@:d6ℕtT,!7v~5cPqCϐ@AU4遦rTΊ3Qhߪa&=vvQY(w[5Ŵi(!-+^$qQ!^\JP>`:3\*MܤQϋ c XFȨ!ٺd _۷c:LctYR)=w9 Y|rIڽaȢ,K0[ܔ^>ν*Ѷ5+83+Eox˕C+=WR|iVY`n1ughX7GBycRf 23-uU/:tDVr֛r#P?(o ha-|0ՖЍW W33b)1O]pN-JHXX;"Yd>aAS+9}j69B1s 8~Ir5f@ Q:~5 bF°9/uhR?P[iO'2y^8IEAIx>|SwsG7N_Qicm8g):۵c/Rp*KњD;Ǐ?p|Vev Y;_0G#<ߠ˿{.+sPQA*Emn[I~ rP0d^?0 CV١tf% :4nȶ%q) ǑGP{7qSvq aUn-N%V "oTl3ÎV\͵@%:7A9Ъ=L}ث}k#;tY'h B#o3L':w.u-Vp2@d6t4#Uƪ&Hgm%7oԬvjDY y0ԭ72`05\x)*4澉%f~ָׂ8JZ "\;Roo,c'M$j,V'Y 1JCz̚>Liz÷W;*Fq!jb1unh&L"+v.ui ځUE;[7Vtj<6>3UhnUSa1 YJ3-U:AN[v,% SYN^Cj߸KZbG;J⍒h>dy͹ّԗe8 !THb?'nBoJWeBϑrCng#ynl\ţG\h35'},?3Vȩm)mfp߉_ݕ%%N9B$F?zf}(#0PR;^@`iSHLʶH!`8@RshбыkDp%/~SъA3]3m%_f@j0V'هr[D3BAMqL:ֈDQ KڨUf,FN7ΰLϥG\QH=(tLL4{"۱80co4Cpos} z?l i{؂/u ~-.T)k" ?0}'Bnl/ʑەm' X9!0^ aE ۘ*_/.='Qx~1vv4 Mܔd&lU؍va㊑b3~.xRHY!վj>$ͳ>u "u_^&Ӆ!9G 8b@fze\;jp5ĿC=9-( |͝$D/A?!!Z3uU [#{y,Y=9K?7-DԱ0kQ<ﱴrf}Р=̏E=H ;~g@@^P+gS4%h4rܞG vI{*;t _HjmNE)7 EEzfKrss1?+jHW^;JyЅǪXJe&eff˾j*YNFA>wpS0"{jM0/[TW^&Eڛ]7V=3n)!A^1tNթrPYzۡ0l3xSRN-L9A/WRx'YXG?1Tur@(/plh(14i]tLN7&"g"3< J%W)VzD6O"a>v'Gc0 ǖe $z!aTYK7zdۧbOhZ)HGѥWYV?+u1p2#=r}iYEȟ xH=2)ñkc^ʼn #ؒ$>xkH,jLpo`:KZgU0b@Er#[ eۈ=<h~_ǸދexkC+LG{e `8-A;VXjI1L^NahT=UZհNa(2ÔYX&'-b.<`fyn\YlGoXnؠ_AYC&4#S_KXs CߩqMi` -)uFF-/=$񑂎ڢWVdXxAPI"ځ88fwE]SJb# |s >οN"}#߶bO..^iᯤܴ=s(zVa-[s){s}_:k8,J/_3 B̒;achE 1 e!h(,~9C[Z^ֵsd73Xfm[8%C(b TԳ(??+z˫vD9مSF"+c/ŕ2:duad޿G/|^ }{]!WSБ1(RU;$Trz?KWRԪzqTWt?<1kT;#ck\PAW\7d{񄑿WA^l '|g+zxEObjBۯ47w%@'):hPaPlZcL}7$KD$nH33~80\v{WJz^>c&TTjba)h_ds]qo=7Vt1a9Vn~C?IcKZAqY~R яV.38O~96'(el溦aOPP萙vˆbR7/MXj1CUA7+|b2ULm4!w==JZbЈ;A8]f>7:p5u,;cK&`<N8i7~Y/ӛ 1{:c#ѥJkE;nBfrAXk&&&ᔥƾh:@_Ժ'Cr|Va<)ćLldEuEzC/.[X։Z^~NY(B6z 2ј#`K|R M 뗖*z^c}T>bUf`70EMjdrs+/.Q M:dAP7Ԏ6, l;.Ӿ\ϼå$ҍ /a9Xt2wHw\H.mF@&΂MldW~+nCbǶBbqvsO8ZA Y:9bY?|v\/^!sC,xwp6k+׭+rܳ?>Kua#ֲȍlX<ΞUyL{b" р, ȷhW*̍(FԊXF͝d)! ƊTp$U9Q\\{)KÏwf132_BSqk9tWE/5e YSMƕP7z,SyU߷bbc䁛6Wo坼{Y&P.N}L#^f#stLǼp|=igQ%dJV)͚Zi)3!Movok&>:azutEͪ JrWa~U 0\I Tk'ɋ٣ZX%s-FiӚ[+2[e-*Ʋ#n? 6` 0f'wSM".Lyv)r$ˎs]co䫽EH6ҪydN"բ"M(/aM|քWY Մ6FgxyuHzǀd˙fX3uiS7q%K".M`dβ+Z v猜HM&%Z!ydџSjb-A7UM5Do/P> eեB0g6", 9n3d7ED CNmlO ~TéLR:="fQ] ЅKnWr <'& bp KjkS,Eo:i7)W=J72k9RQN`r/'smS(dctjW9B#7!,&Fk л@>UfG >7ɰ6թB!MrR zt̩rPK\Xfw+O}²FFb'? j4Ʋok- Bꍲ_G۰&Y9}:Ry@C\7lx\Ҥ Qz, gU\[y'п2=o'<=|Gz,`pbX%V^V;VOKn@ i[tH}~F߭x4N+yΐCHi ;SÕ9h(*1̑SGƦ{s7c<%Naa2?^25g/QUK˜BHD0ʞ u*%g+i A^3W0B{`#4DDyg5L|M>50P+{_Ygr!+GL-gJ0Z[K۶Rm ytt l/yMFE4}ȈNV]uwU׀C!ok˨whM6D5:U߸6R4SdcjCT}Vx|+(026l`6l2c 2ZU݅+؅:0̈́&t~!2PAg> P^LYnEPĘK7AZ1KJO(}8x'ArM΍,rYMK ǀ0f]/{{|((,Ed|n}Ua꿴[:q푦eh &WVB#qc0ObBhlm֫/۟ zoCKi5,#z/?Tx(qۙ'J[22Dªˢ!1;wu@*^kG\9͐A%ϕ֕I@5XUz-;V}FۓRbpdiRkI@'CF(![Z+"g#Dc&u 7C` i"f&͔iZ-F>7Lx=$C j֫ Aq ZLnghFz)XOp$uE䧵)>0=16?{I95ތ,Sw-z=DU9) ݘA;=wЯ8FٛiiRQf$-%XksQq]%xmd? ܺ䱶FTb} ]F;أ8T /0@oPj`j7lګS^v`̫lJ]h5Fߝ(6r#=hxUx9u`J86#ی95{@Q[&XSľFV!z {R(jT[`8"YҔzFJ{) f1=o!3taNY0M8.]C'x ?}/kj0:yZR%sma|(ͪO+4&TdNl)=j[jaOrcD! ׊Ϛf;j70gdj)~yvO :룥5T[尗[SAqݧkTQŻowƲ#&мqÊ(~'W2!K/$yf3RNv5\[#^ WwNoUxAͤÝ~"Ae"uPW+Y }H{'Wᅕv/~!z[\"r4LOK@g3i3 "OiLWW̗ccr~,P2}Y{K/Ђ)ҶHyB/O{L d,I- gƀu=E.M W .<)l@ sO34sM\oA(Ȼϩp" EuKC}7c(`p?-)t{o{'Y="S?ل ||ݙ O[C-O5`K/]|׻p3$2=\EJy_ !DdS>WCpJD4 (9p[ӆ>ۀΐУBz2 Ka YhhE띇0@S?F@waW0sCv`Jt#!o"!})"3T/>Fgk&\ǐSm쾛% g$">/ACzV1YY۬=1a6TєZ*OYzU{Li6UA#~G6*QЙ=k4Z~j|uuyVOM,{AW ]sJRK%4n#N&U &&#"cI9HyO!>ب&%ҡ joAž$DsmeQ0 YLE8ec/=C\UP/J}Xx6QS;1 ꈟ! 7\d{ںeaYjV¡XMN,i؄60~KVupsH8 67!x;x "7" gm7cUj}k-H|0LqdF0.*Vv#_zb4*v8?݌|}< tq~W狤3k|(Ix 0TG'T2cN8;CjWIhڐviFͨVQ_hChj M!Pzvه^4- -XhS>Oh57̡c>m dA#7Rܗe3ȷG5["׷%My%TA(o)#ک gɇFA-oJګʬjaOWAri~?o_YNn!NdrO-ES{gť3Bxq)דūscS)nDA50qC :0-Q8*i ; o]"S7] K5z: tDž:1klw+/*㴝KDŘՉ K%+ ~QA>(ϱ䇎h;RZVmsqeEԦV~A_Ie5@0HTFS53`$nԕ?!C|aA\[3$AĒt:mWI1YJϓ^AEWWWvwU}x&j @xސpy_sHdю屶H>\AqN$-91g"Nmv@&ؘS[H\n*n5\!li*2U"NHA bI;礐}i;S<'%fŎ2[>o%KVE3M~tBb@jWIt@Se( t)0HZb?Tu;hʣA/4jlnUȁr\?&$y .1;}R 8<85)tU͇U(zhMey!IDMh~9=,F1 zb9ckW ­aȯ̎_ (T0u6b"aUu l*^A!75 M !:@>SU :'6֩\ixT 2Q5H=0&=ޔwɷ_ν4q>ϋ烝]}9*f]c"yeUz4Lƨ=Y%i:M4Ƣ+GeسS~8˹;i2l"B2>!E_uԩ$*lVg\mW|_'_w}!nAe1pN^0bS$DlXG-@S^…?6'T,;쮼qw h/lmSKr}㼿~.F/>(0pT%%\XjMכF{9<]$Vm}셯g 'K:jutA_CNbZ\FG{ S</S?B?r*䰦z%]=kۆWp2'9ѪE1I qmզV/ |Q#?䣊p˟cp H<ˡ K:Pr iyg ;!irUxv !Rn$<_&[ovP[?>;,7ZdLh#L69*6oPRWsB3T^R^f|MQ&~)w[ *z[3?H \O$5$ eRa.u*idBHzʈx{\دC_g&rMz F@IN.|ɰu:_!# Ɠ"D'*JbK]̞9Y5\Y oV4;,:~..&;0 ,f%ݣՔ)biKRL(r`Ö /Ժ/Iѕ?Z+iK:w?P :"1(ض]oxg] G^NHˁm* `53iE_ Jȝnn7ۄ6s="ޒ]!ܶD ڋjsu&'MղddKsg-]nf}T"*\zH\耕扆ݢLБsQ.֦9i.Ӛ^ϥkQIE2륤f_^s3v@cdz4ܮ"-5ВmkT0} Hryѯ@/zW3? e+DNnqLL|C5E[(&e1Pk9Px7ó"vXy]K2ܥ[L2|"d1<*^1`!k+-c}pvM Fw |(Q{V"RN Ča8r9_xDDJ7eR`h0IIM nV:Qב8@)|5Xa|SOf!-Gڋ[~sXBUAK٪IF~JWj/uIZTD3t1K$y wH=]MC3,r:ȕ%LrjG:I ⓑ{g&Dq}u?2 y*yn~YI=D79aS1Ӯq{Uyz?u\ՎSk.گ+LГV|rGk񚅏o\7sب1{O'x-Uz^D!2B"P»whGdBNK:s,nx˻OdՌˊ$!.&2(i'/~ o) "2i0?MUk{ WPqe Or]*{5]3;WE@ˁ_ &,-( c& *A*ƴGNJ+16LE VFB- '4a^JORskWn>z!:)MH#Ga#< (mw3;L!",KNy6K [ +L?953r4 %'6SwQIOҮ_;s‚?LseV~VڦUtOijywl;Lm$-ye#Lc+nѹoZoSL/XWKO`ԄЭN^̮uׇ/Nʈ(A,A803 c戮-tY9Jr8k[l>#s?KZ4.*/۵@v=#)ve&||3<2d X]lPLd]ag1B)ڂ߇d, X 1-JeiZg#bu @)u :.ٜxeRao]1_wBÌ+fs NN7'TB1|Zrfc $R.c̀XfًA}UJ=Yw +\x^,ϒHףv<N (|C-ҵ[,ͷఢtg`ynbZ E1 ~s҈ xxuʾk ̮W9#seӝ=t 8gE$-|-weqR2w߲PwTSi\};,hBe.}|a)π#&]^Ս0~]=|I@~1`x`O&iI9bTfzW| _ KڍYtZ |4a`\Sꢦ0@ d+dcI?cic[}E `ۖnKR9<2:^v';TP1 5? EqTVn&EGD_FxU ]T8 (,x267{ DbLȠ^9ZhDvPn.Ǘmt5D,F{'jimҭ6Eq J(hK9ԃѫ _pmvM=JÑEZ8eFG=&#Fryx_vnqCf >-Y\zTfG埂w6r?-@d92 &1{!ht!{.47'PApG1$ShsC_Fl_R4iV_c* Wy! Sը!#>ƽ'VhsBEK1RUO Txixr'f WDcyAD*3&*R_(u!рh0O| \d&VZv/U_RE,D‚F# +ZA҄BGقP!#ۢ?G/j`(\KζI!=&M>O8@03QN~/4qI3 ),AӺ%Z]-hޟ=lg $`F?3 p7m2p3zicMqة%CEp$#0 pufBJr: -PC# \"\2o-PQO<7ӝV2 s C5y\*%ޫ ѽ4\us'ЬoFnupv8X-_)v!j{ez&ι@ԥ'۰gZ瞷T!9cǷɸM,\!`IfޅWwAػ##|<.F3~en?fʗ(#t9ι (d)wKPD|vd鉰3Bn1?#}\'WeYh%9,m¡X 삠bcyD4oir݁CZg[~:J&~>JCtL^gr-:Ar +jnj;T .'ꞗY2LOl9e=ޛRi;؞ %UI=eR&Z=L=Dx'c}F$ {:3(j;gȃ"$Ak+f_JE;J]P+)[f8БL%ئ:#/_6kj;}7Up7"N\>ZAFʬs%3/ ߓFtBͪ;T(̈́ V'YB bbEug: VqH-udu[+\ 3[ߗ,% (bM%Qv4^/g;j|+cIyAµ*砙3zGb2'i|_(iր;jTI"z-luAyvSB|&hf){#A9صn܉JmW%s Dѽ$r²O5'_%@MLj[%.H.z<&aZQ@J_`1:Qz0 bBւ )Sh 蘦<D qVT hlr9{0;bY6= --Qc(+%47a6ZP%g,⏪Kݲzjq3pi[2itlߏ6)vKb(f,1@eSKVMG>.Sf}0]y!A ]Re˖Z Q'A_hnLmUm"S L_R*B՚(>VoJCaVnXfXyT#!ϖ4N4Mr ^kOBVr{e1$7>' ;4Qi:6D!0/R6n@0ݏ8|̆U5*po9E??qGc4QBXk.5}=I\UY3K牄-vb/#^X;q]GȞ""xtvYKekyVC$OQ[f IiPt1]2tn~{$9Ѓ?GRT[=I^1<%DPlE0UEUTz˺QP& ;_JtH,QLX2*aB>0%fmG6aFbߌƐiEįVyrZٳG*e[=$: y߀}_xz-6^Hސ];Iuv⩘qj2cm)'(]v=)Ɖ[ ݞrDTA t2bْ@Ӣ ;<ts,TrK.T@ƙwS)Fr!>I kY) 1Jac-eZߚF'Fm_Vta1#uQ[5N!Z8q xNbo g77$Sk5Ĥ*ǀcP]6YP2֠B:e jU>y:}z: 8-µI}UXغ}[&:;*rA;- 6c3֐8ػZ (WSNB`,7%Y~_)P{ۘzÏ"U7{k5J}Y>~qȰ 4zB^oq8u鱚9[ףZK`tfR{;|qDB!/l;fb ^%; PֹuB-p%A`W2䲓'E%V齗)ݖ^t\>hHqEM{|Иh~5%nZ)lo_*" ȔQ%0gBO3Gk[ޢ!k39~4uelyį,/\7y7K۞P,L}DH)qPK xxIlNNc(A*W: @_1vZ j(nE~7s*hHw:ǐ^j3g~>X<߬w /"#fM lԩQUClfNaYI5Qk%hζ%R= );v PԂwwysĶ6U9t09c,.T^V 495AHd}e CӮ~nzy8SOcǃD:kFmⷋF42j PWwP\\3K$tY,nd@| / =\6EUuNsϐſJ-=MK2Em3~y :FXtgqYkGӏҐK݃u.+wsQ`|Y Ӱ s~{T(QҀ(<^4uS0IM!s׿4BzOۥ;h,W_ ~3zC`S"w3+QiDÔF 7/}[!Ϛh>A}y*n|>yU.n*IEea@&ᲀâ}ϭy"oyu o%o>LHcX|`kx9 ;+A%d+GɽZf>֖~rcHIF 2}\6bMuW0_,<ɝ߱[$>!U%-b&Hw /ܚ*[1 dk!DNgbBHthb}~JJrNG>Czy%泗2C fapp F|9!&6\) ^!s+fӜ`tLO-h$U3?\:RG-ϖ / bX?&t$!҄93^Y{`Jf)3Ͷs:$SUӾܰj *7,8XB{|?%Ռ<kS2$H/}W!>Y\0 |%+`#A7Ə U<%Xi_ qo,ȸ!tbv䉢.m|mq>[N@,C>XJdm*iQ(zU .} K? v(Kfu̇%Fn;%EjV)G}P̸]ܪ 9jJZR EoXi@ݛ6ْ?(JH,M-[A1/"?(z#բKщRܕhdOARfase} l'r)Sld(ţH]{eX֕:g2.i1xSa5 [YP|nmx5KM>A- Jr=OBqbzCyDt&:ymdT>H6N1RXt0n?ie `|5hqL"|;~wq.PcFF5J@t.$ٮɈ\c K4~ȒV-&99W,#dcW!c! U%lm '{tCn!ZD!)ɭ6)IHR;3=z/34zEءu#ȮkvpИ.оq0ԎQRRc~dYsMNDlAЦpm_#jIz>GSJeҕ ?M9ue2 .̰.Ƣ6iJ\c3yyőc֝2lk4}0)FE?I'8m̳2V`Tqι35b-4`,ZZS-'Z  !aȦ夡&aTe̍-Rs8e Rj V ~2ӘYŶWw}B땤}B.A?ern8eﶛ, Eє8Kp`Հ.i?Gkz9!P P%Iͺ8j1q%Eoˏxl@ r$~(B! F^Oɴ@T>'_.`/]*Aщ wN{G4 )Mm: YZ