libndr-standard0-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1 4>$  Ap[r׸/=„D2xY|g 0}Y'K× 9/sjYo?NFXL|vChӏG6 |+Zy^z0,q*w!ݿ"t1,vFvYX8Xdbn 52nosuKdH+ oE,ѣ#Dz:2&T~ V =_@ s[0t56KERƐf >lLzxS 2`f2b4a4c01d24324f34027037f15ceb3b4e8bee7a72f756eba53b5208110610cb2a778ed359b67e47bc3985268fbccf0ee94d8653 p[r׸/=„%v\ظk, L2#Eny'.. JlBu>} 蠌iⰇ쾙1!W7{b;GzguLu=Ug]AȬvF&U"|h@?;gDh95Dw^h<~g۰R<ʝ>m}~*aץ3;pnN#WOBȤ. S'@LKP>oڳCl7"/p@T?Dd, 8 s ) BSjpx     <DQ(|89h:=h>@FGHIX Y\h]p^bcSdefluvwxyz@Clibndr-standard04.7.8+git.86.94b6d10f7ddlp150.3.6.1NDR marshallers for the standard set of DCE/RPC interfacesThis subpackage contains NDR encoders/decoders for the set of standard DCE/RPC interfaces found on Windows and Samba servers.[rlamb221XopenSUSE Leap 15.0openSUSEGPL-3.0+http://bugs.opensuse.orgSystem/Librarieshttps://www.samba.org/linuxx86_641X[rR[rb6523b18f9c495486ed4e6effb0069b0155e84e25aa680f3c0015a950309cea01libndr-standard.so.0.0.1rootrootrootrootsamba-4.7.8+git.86.94b6d10f7dd-lp150.3.6.1.src.rpmlibndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr-standard0(x86-64)@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libndr.so.0()(64bit)libndr.so.0(NDR_0.0.1)(64bit)libndr.so.0(NDR_0.0.5)(64bit)libndr.so.0(NDR_0.0.6)(64bit)libndr.so.0(NDR_0.0.9)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.7.8_GIT.86.94B6D10F7DDLP150.3.6.1_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1[i[6@[5@[ @Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USaT5'@T5'@T3T12T->@T->@T%U@T$T!`T!`T@T@TSS<@SS@S@Sہ@Sہ@Sہ@S@S;@S.S@SSSS@S@SS8@S}SxSg}@ScSZN@SXSO@SM@SM@SG@SG@SG@SG@S:@S:@S5d@S2@S,)S L@SSSS@S@S(S @S S 4@S?S?S?SK@R@Rb@R@RRR@R@RRRRRURURURRR&R@RR=R=RʚRʚRʚRʚRʚRʚRSRR@RjRjRv@RG@RG@RRRRR RiRu@RpRW@RUE@RUE@REs@R:@R6R4OR2@R(r@R%@R!R7R@R@QQQ@QQQQޞ@Qޞ@Qޞ@Qֵ@QQo@QzQQɆ@Q@Q(@Q@Qzl@QdQAQ,Q+R@Q@QQQ@Q@QEQ@Q \Q \PP-P-P9@PPDP[P@PѬ@P @P @PPP}@P+P@PP@PBPBPPP@P@P*P6@Pd@PoPoPoPoP{@Pb@Pb@PWPWPQP,PPP H@P H@PP@OjOjOORORO Ọ@OȮOȮO]@O]@O OE@O!O@OOO@O OoOc+@OaO`@OKp@OB5O>A@O{pw,gr}ent_state; (bso#13293); + winbind should avoid using fstrcpy(domain->dcname,...) on a char *; (bso#13294); + The winbind parent should find the dc of a foreign domain via the primary domain; (bso#13295); + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400); + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP NTLM2 packet check failed due to invalid signature!); (bso#13427); + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424); + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407); + dfree cache returning incorrect data for sub directory mounts; (bso#13446); + Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN; (bso#13369); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + s4:auth_sam: Allow logons with an empty domain name; (bso#13206); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + build: Fix libceph-common detection; (bso#13277); + build: Fix ceph_statx check when configured with libcephfs_dir; (bso#13250); + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async; (bso#13297); + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + smbd can panic if the client-supplied channel sequence number wraps; (bso#13215); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + smbc_opendir should not return EEXIST with invalid login credentials; (bso#13050); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + libsmb: Use smb2 tcon if conn_protocol >= SMB2_02; (bso#13310); + subnet: Avoid a segfault when renaming subnet objects; (bso#13031); + 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:smbd: Do not crash if we fail to init the session table; (bso#13315); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Bump vendor-files - Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);- Add missing package descriptions; (bsc#1093864);- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2.- Rebase File Server Remote VSS Protocol (FSRVP) server against 4.2.0rc1; (fate#313346).- Backport upstream master fixes for samba-regedit; (bnc#896536).- BuildRequire python-xml on SUSE systems only.- BuildRequire python-xml. - Exclude unwanted texpect binary and libhttp, libsamba-cluster-support, libsamba-debug, and libsocket-blocking shared libs. - Add vfs_fruit and vfs_worm man pages and ndr_dcerpc, smb2_lease_struct, tstream_smbXcli_np, idtree, and idtree_random header files. - Remove nmblookup and smbclient4 binary and nmblookup4 man page.- Update to 4.2.0rc1.- Fix small memory-leak in the background print process; (bnc#899558).- Modify samba-regedit so it displays correctly (related to ncurses). Changed code to use menu sub windows, seems to fix problems with display not refreshing; explicitly BuildRequire ncurses-devel; (bnc#896536).- Exclude unwanted libdnsserver_common and libdfs_server_ad shared libs and the man page of the unused findsmb script.- Skip groups that aren't mapped by idmap_ad; (bso#10824); (bnc#897969).- Update to 4.1.12. + s3: winbindd: On new client connect, prune idle or hung connections older than "winbind request timeout". Add new parameter "winbind request timeout". Please see smb.conf man page for details; (bso#3204); (bnc#872912). + Fix smbd crashes when filename contains non-ascii character; (bso#10716). + s4-rpc: dnsserver: Handle updates of tombstoned dnsNode objects; (bso#10749). + passdb: Fix NT_STATUS_NO_SUCH_GROUP; (bso#9570). + s4:setup/dns_update_list: make use of the new substitution variables; (bso#9831). + build: Fix configure to honour '--without-dmapi'; (bso#10369). + provision: Correctly provision the SOA record minimum TTL; (bso#10466). + s3: Enforce a positive allocation_file_size for non-empty files; (bso#10543). + lib: tevent: make TEVENT_SIG_INCREMENT atomic; (bso#10640). + Make "case sensitive = True" option working with "max protocol = SMB2" or higher in large directories; (bso#10650). + Samba 4 consuming a lot of CPU when re-reading printcap info; (bso#10652). + lib: strings: Simplify strcasecmp; (bso#10716). + Allow netr_ServerReqChallenge() and netr_ServerAuthenticate3() on different connections; (bso#10723). + 'net time': Fix usage and core dump; (bso#10728). + sys_poll_intr: Fix timeout arithmetic; (bso#10731). + s3:idmap: Don't log missing range config if range checking not requested; (bso#10737). + Fix flapping VFS gpfs offline bit; (bso#10741). + s4-rpc: dnsserver: Allow . to be specified for @ record; (bso#10742). + s4-rpc: dnsserver: return DNS_RANK_NS_GLUE recors when explicitly asked for; (bso#10751). + samba: Retain case sensitivity of cifs client; (bso#10755). + lib: Remove unused nstrcpy; (bso#10758). + Fix a memory leak in cli_set_mntpoint(); (bso#10759). + docs: Fix typos in smb.conf (inherit acls); (bso#10761). + libcli/security: Add better detection of SECINFO_[UN]PROTECTED_[D|S]ACL in get_sec_info(); (bso#10773). + s3: smbd: POSIX ACLs. Remove incorrect check for SECINFO_PROTECTED_DACL in incoming security_information flags in posix_get_nt_acl_common(); (bso#10773). + Don't discard result of checking grouptype; (bso#10777). + s3:libsmb: Set a max charge for SMB2 connections; (bso#10778). + smbd: Properly initialize mangle_hash; (bso#10782). + dosmode: Fix FSCTL_SET_SPARSE request validation; (bso#10787). + vfs_dirsort: Fix an off-by-one error that can cause uninitialized memory read; (bso#10794).- Wait for network-online.target to prevent caching of pre-network failures; (bnc#889175).- Use domain name if search by domain SID fails to send SIDHistory lookups to correct idmap backend; (bnc#773464).- Prune idle or hung connections older than "winbind request timeout"; (bso#3204); (bnc#872912).- fix FSCTL_SET_SPARSE request validation; (bso#10787); (bnc#893774).- Remove pre-11.2 patch which by default uses the smbpasswd passdb backend.- build: disable mmap on s390 systems; (bso#10765); (bnc#886193); (bnc#882356).- Create the cups smb backend as sym link pointing to smbspool; (bnc#891220).- Fix winbind service parameter usage; (bnc#890005).- lib/param: change the default for "winbind expand groups" to "0"; (bnc#890008).- Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon; CVE-2014-3560; (bnc#889429).- Fix "net time" segfault; (bso#10728); (bnc#889539).- Update to 4.1.10. + net/doc: Make clear that net vampire is for NT4 domains only; (bso#3263). + dbcheck: Add check and test for various invalid userParameters values; (bso#8077). + s4:dsdb/samldb: Don't allow 'userParameters' to be modified over LDAP for now; (bso#8077). + Simple use case results in "no talloc stackframe around, leaking memory" error; (bso#8449). + s4:dsdb/repl_meta_data: Make sure objectGUID can't be deleted; (bso#9763). + dsdb: Always store and return the userParameters as a array of LE 16-bit values; (bso#10130). + s4:repl_meta_data: fix array assignment in replmd_process_linked_attribute(); (bso#10294). + ldb-samba: fix a memory leak in ldif_canonicalise_objectCategory(); (bso#10469). + dbchecker: Verify and fix broken dn values; (bso#10536). + dsdb: Rename private_data to rootdse_private_data in rootdse; (bso#10582). + s3: libsmbclient: Work around bugs in SLES cifsd and Apple smbx SMB1 servers; (bso#10587). + Fix "PANIC: assert failed at ../source3/smbd/open.c(1582): ret"; (bso#10593). + rid_array used before status checked - segmentation fault due to null pointer dereference; (bso#10627). + Samba won't start on a machine configured with only IPv4; (bso#10653). + msg_channel: Fix a 100% CPU loop; (bso#10663). + s3: smbd: Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056). + s3: SMB2: Fix leak of blocking lock records in the database; (bso#10673). + samba-tool: Add --site parameter to provision command; (bso#10674). + smbstatus: Fix an uninitialized variable; (bso#10680). + SMB1 blocking locks can fail notification on unlock, causing client timeout; (bso#10684). + s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap(); (bso#10685). + 'RW2' smbtorture test fails when -N is set to 2 due to the invalid status check in the second client; (bso#10687). + wbcCredentialCache fails if challenge_blob is not first; (bso#10692). + Backport ldb-1.1.17 + changes from master; (bso#10693). + Fix SEGV from improperly formed SUBSTRING/PRESENCE filter; (bso#10693). + ldb: Add a env variable to disable RTLD_DEEPBIND; (bso#10693). + ldb: Do not build libldb-cmdline when using system ldb; (bso#10693). + ldb: Fix 1138330 Dereference null return value, fix CIDs 241329, 240798, 1034791, 1034792 1034910, 1034910); (bso#10693). + ldb: make the successful ldb_transaction_start() message clearer; (bso#10693). + ldb:pyldb: Add some more helper functions for LdbDn; (bso#10693). + ldb: Use of NULL pointer bugfix; (bso#10693). + lib/ldb: Fix compiler warnings; (bso#10693). + pyldb: Decrement ref counters on py_results and quiet warnings; (bso#10693). + s4-openldap: Remove use of talloc_reference in ldb_map_outbound.c; (bso#10693). + dsdb: Return NO_SUCH_OBJECT if a basedn is a deleted object; (bso#10694). + s4:dsdb/extended_dn_in: Don't force DSDB_SEARCH_SHOW_RECYCLED; (bso#10694). + Backport autobuild/selftest fixes from master; (bso#10696). + Backport drs-crackname fixes from master; (bso#10698). + smbd: Avoid double-free in get_print_db_byname; (bso#10699). + Backport access check related fixes from master; (bso#10700). + Backport provision fixes from master; (bso#10703). + s3:smb2_read: let smb2_sendfile_send_data() behave like send_file_readX(); (bso#10706). + s3: Fix missing braces in nfs4_acls.c.- Reduce printer_list.tdb lock contention during printcap update; (bso#10652); (bnc#883870). + Only update the printer share inventory when needed.- Add missing newline to debug message in daemon_ready(); (bnc#865627).- BuildRequire systemd-devel, configure --with-systemd, and modify the service files accordingly on post-12.2 systems; (bso#10517); (bnc#865627).- Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056).- Update to 4.1.9. + Fix nmbd denial of service; CVE-2014-0244; (bnc#880962). + Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler; CVE-2014-3493; (bnc#883758).- BuildRequire krb5-devel, libiniparser-devel, and python-devel in any case.- BuildRequire libxslt and perl-ExtUtils-MakeMaker and BuildIgnore libtevent on CentOS, Fedora, and RHEL systems.- Update to 4.1.8. + dns: Don't reply to replies; CVE-2014-0239; (bso#10609). + Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549). + s3: smb2: Fix 'xcopy /d' with samba shares; (bso#3124). + Extra ':' in msg for Waf Cross Compile Build System with Cross-answers command; (bso#10151). + s3: nmbd: Reset debug settings after reading config file; (bso#10239). + Fix empty body in if-statement in continue_domain_open_lookup; (bso#10348). + script/autobuild: Make use of '--with-perl-{arch,lib}-install-dir'; (bso#10472). + wafsamba: Fix the installation on FreeBSD; (bso#10472). + Use exit_daemon() to communicate status of startup to systemd; (bso#10517). + Fix adding NetApps; (bso#10524). + s3: lib/util: Fix logic inside set_namearray loops; (bso#10544). + s3: lib/util: set_namearray reads across end of namelist; (bso#10544). + idmap_autorid: Fix failure in reverse lookup if ID is from domain range index #0; (bso#10547). + build: Fix ordering problems with lib-provided and internal RPATHs; (bso#10548). + Fix read of deleted memory in reply_writeclose()'; (bso#10554). + lib-util: Rename memdup to smb_memdup and fix all callers; (bso#10556). + Fix lock order violation and file lost; (bso#10564). + dsdb: Do checks for invalid renames in samldb, before repl_meta_data; (bso#10569). + Fix wildcard unlink to fail if we get an error rather than trying to continue; (bso#10577). + byteorder: Do not assume PowerPC is big-endian; (bso#10590). + printing: Fix purge of all print jobs; (bso#10612).- examples/libsmbclient: avoid some compiler warnings; (bso#10624).- Fix printer job purging; (bso#10612); (bnc#879390).- Update samba-pubkey_6568B7EA.asc which will expire 2016-01-17.- Fix byte-order macros on little endian Power8; (bso#10590); (bnc#871701).- Pass through vfs_btrfs snapshot manipulation requests when "btrfs: manipulate snapshots = no" is configured; (bnc#874180).- Clone the base share security descriptor when exposing a snapshot share; (bnc#874656).- Use appropriate HRESULT return codes; (bnc#875046).- Update to 4.1.7. + Make "force user" work as expected; (bso#9878). + Fix build on AIX with IBM XL C/C++ (gettext detection issues); (bso#9911). + Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942). + s3-printing: Fix obvious memory leak in printer_list_get_printer(); (bso#9993). + doc: Add "spoolss: architecture" parameter usage; (bso#10188). + Make 'smbclient' support DFS shares with SMB2/3; (bso#10200). + Make (lib)smbclient work with NetApp; (bso#10230). + SessionLogoff on a signed connection with an outstanding notify request crashes smbd; (bso#10344). + dfs: Always call create_conn_struct with root privileges; (bso#10378). + 'net ads search' on high latency networks can return a partial list with no error indication; (bso#10387). + max xmit > 64kb leads to segmentation fault; (bso#10422). + Fix STATUS_NO_MEMORY response from Query File Posix Lock request; (bso#10431). + Increase max netbios name components; (bso#10439). + smbd_server_connection_terminate("CTDB_SRVID_RELEASE_IP") panics from within ctdbd_migrate() with invalid lock_order; (bso#10444). + Fix 'wbinfo -i' with one-way trust; (bso#10458). + samba4 services not binding on IPv6 addresses causing connection delays; (bso#10464). + s3-vfs: Fix stream_depot vfs module on btrfs; (bso#10467). + Don't respond with NXDOMAIN to records that exist with another type; (bso#10471). + pidl: waf should have an option for the dir to install perl files and do not glob; (bso#10472). + s3-spoolssd: Don't register spoolssd if epmd is not running; (bso#10474). + s3-rpc_server: Fix handling of fragmented rpc requests; (bso#10481). + Initial FSRVP rpcclient requests fail with NT_STATUS_PIPE_NOT_AVAILABLE; (bso#10484). + lsa.idl: Define lsa.ForestTrustCollisionInfo and ForestTrustCollisionRecord as public structs; (bso#10504). + Make 'smbreadline' build with readline 6.3; (bso#10506). + smbd: Correctly add remote users into local groups; (bso#10508). + rpcclient FSRVP request UNCs should include a trailing backslash; (bso#10521). + Cleanup messages.tdb record after unclean smbd shutdown; (bso#10534). + s3:rpc_server: Minor refactoring of process_request_pdu().- Create a new DBus connection for every vfs_snapper request, to ensure correct snapper UID detection; (bnc#866354).- Fix "Invalid read" in method reply_writeclose; (bso#10554); (bnc#873658).- Fix minor compiler warnings in snapshot code-path; (bnc#873177).- Remove references to the obsolete samba-krb-printing package and get_printing_ticket binary.- Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549); (bnc#872396).- User error strings instead of hex codes where possible for FSRVP errors; (bnc#866927).- Fix remote share shadow copy request UNCs; (bso#10521); (bnc#870957).- Add krb5rcache directory to the winbind package; (bnc#870607). - Cleanup and consolidate the sysconfig and systemd service files.- Extend vfs_snapper man page to cover permissions; (bnc#870570).- Fix RPC server handling of fragmented requests; (bso#10481); (bnc#869707).- Default with the cache and lock directory to the same path to have both non-persistent and persistent data at one location; (bnc#846586).- Depend only on %version with all manual Provides and Requires; (bnc#844307).- Update to 4.1.6. + Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224). + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; (bnc#855866).- Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224).- Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665).- samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442; (bnc#855866).- Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484); (bnc#865095).- Propagate snapshot enumeration permissions errors to SMB clients; (bnc#865641).- Properly handle empty 'requires_membership_of' entries in /etc/security/pam_winbind.conf; (bnc#865771).- Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748). - Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561).- Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397).- Use libarchive to provide improved smbclient tarmode functionality; (bso#9667); (bnc#861135).- Depend on %version-%release with all manual Provides and Requires; (bnc#844307).- Update to 4.1.5. + Fix 100% CPU utilization in winbindd when trying to free memory in winbindd_reinit_after_fork; (bso#10358); (bnc#786677). + smbd: Fix memory overwrites; (bso#10415). + s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done(); (bso#2191). + ntlm_auth sometimes returns the wrong username to mod_ntlm_auth_winbind; (bso#10087). + s3: smbpasswd: Fix crashes on invalid input; (bso#10320). + s3: vfs_dirsort module: Allow dirsort to work when multiple simultaneous directories are open; (bso#10406). + Add support for Heimdal's unified krb5 and hdb plugin system, cope with first element in hdb_method having a different name in different heimdal versions and fix INTERNAL ERROR: Signal 11 in the kdc pid; (bso#10418). + vfs_btrfs: Fix incorrect zero length server-side copy request handling; (bso#10424). + s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we can't cope with a symlink when lp_posix_pathnames() is true; (bso#10429). + smbd: Fix an ancient oplock bug; (bso#10436). + Fix crash bug in smb2_notify code; (bso#10442).- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).- Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079). + Improve vfs_snapper documentation.- Fix Winbind 100% CPU utilization caused by domain list corruption; (bso#10358); (bnc#786677).- Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415); (bnc#862370).- Streamline the vendor suffix handling and add support for SLE 12.- Fix zero length server-side copy request handling; (bso#10424); (bnc#862558).- Set the PID directory to /run/samba on post-12.2 systems.- Make use of the tmpfilesdir macro while calling systemd-tmpfiles.- Make winbindd print the interface version when it gets an INTERFACE_VERSION request; (bnc#726937).- Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH definitions; (bnc#860832).- Check for NULL gensec_security in gensec_security_by_auth_type(); (bnc#860809).- Ensure ndr table initialization; (bnc#860648).- Add File Server Remote VSS Protocol (FSRVP) server for SMB share shadow-copies; (fate#313346).- s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662). - shadow_copy2: module "Previous Version" not working in Windows 7; (bso#10259). - s3-passdb: Fix string duplication to pointers; (bso#10367). - vfs/glusterfs: in case atime is not passed, set it to the current atime; (bso#10384)- s3: winbindd: Move calling setup_domain_child() into add_trusted_domain(); (bso#10358); (bnc#786677).- Default sysconfig daemon options to -D; (bso#10388); (bnc#857454).- Add /var/cache/samba to the client file list; (bnc#846586).- Really add the WINBINDDOPTIONS sysconfig variable on install; (bnc#857454).- Correct sysconfig variable names by adding the missing D char; (bnc#857454).- Update to 4.1.4. + Fix segfault in smbd; (bso#10284). + Fix SMB2 server panic when a smb2 brlock times out; (bso#10311).- Call stop_on_removal from preun and restart_on_update and insserv_cleanup from postun on pre-12.3 systems only; (bnc#857454).- BuildRequire gamin-devel instead of unmaintained fam-devel package on post-12.1 systems.- smbd: allow updates on directory write times on open handles; (bso#9870). - lib/util: use proper include for struct stat; (bso#10276). - s3:winbindd fix use of uninitialized variables; (bso#10280). - s3-winbindd: Fix DEBUG statement in winbind_msg_offline(); (bso#10285). - s3-lib: Fix %G substitution for domain users in smbd; (bso#10286). - smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open; (bso#10297). - smb2_server processing overhead; (bso#10298). - ldb: bad if test in ldb_comparison_fold(); (bso#10305). - Fix AIO with SMB2 and locks; (bso#10310). - smbd: Fix a panic when a smb2 brlock times out; (bso#10311). - vfs_glusterfs: Enable per client log file; (bso#10337).- Add /etc/sysconfig/samba to the main and winbind package; (bnc#857454).- Create /var/run/samba with systemd-tmpfiles on post-12.2 systems; (bnc#856759).- Fix broken rc{nmb,smb,winbind} sym links which should point to the service binary on post-12.2 systems; (bnc#856759).- Add Snapper VFS module for snapshot manipulation; (fate#313347). + dbus-1-devel required at build time.- Add File Server Remote VSS Protocol (FSRVP) client for SMB share shadow-copies; (fate#313345).- Do not BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp as they're part of the minimum build environment.- Update to 4.1.3. + DCE-RPC fragment length field is incorrectly checked; CVE-2013-4408; (bnc#844720). + pam_winbind login without require_membership_of restrictions; CVE-2012-6150; (bnc#853347).- Make use of the full gpg pub key file name including the key ID.- Add transparent file compression support; (fate#316266). + Implement FSCTL_GET_COMPRESSION and FSCTL_SET_COMPRESSION handlers. + Add FILE_ATTRIBUTE_COMPRESSED and FILE_NO_COMPRESSION support. + Extend vfs_btrfs VFS module to utilize get/set compression hooks.- Add support for FSCTL_SRV_COPYCHUNK_WRITE; (fate#314770).- Remove bogus libsmbclient0 package description and cleanup the libsmbclient line from baselibs.conf; (bnc#853021).- BuildRequire systemd on post-12.2 systems.- Update to 4.1.2. + s4-dns: dlz_bind9: Create dns-HOSTNAME account disabled; (bso#9091). + dfs_server: Use dsdb_search_one to catch 0 results as well as NO_SUCH_OBJECT errors; (bso#10052). + Missing talloc_free can leak stackframe in error path; (bso#10187). + Fix memset used with constant zero length parameter; (bso#10190). + s4:dsdb/rootdse: report 'dnsHostName' instead of 'dNSHostName'; (bso#10193). + Make offline logon cache updating for cross child domain group membership; (bso#10194). + nsswitch: Fix short writes in winbind_write_sock; (bso#10195). + RW Deny for a specific user is not overriding RW Allow for a group; (bso#10196). + vfs_glusterfs: Fix excessive debug output from vfs_gluster_open(); (bso#10224). + vfs_glusterfs: Implement proper mashalling/unmarshalling of ACLs; (bso#10224). + VFS plugin was sending the actual size of the volume instead of the total number of block units because of which windows was getting the wrong volume capacity; (bso#10224). + libcli/smb: Fix smb2cli_ioctl*() against Windows 2008; (bso#10232). + xattr: Fix listing EAs on *BSD for non-root users; (bso#10247). + Fix the build of vfs_glusterfs; (bso#10253). + s3-winbindd: Fix cache_traverse_validate_fn failure for NDR cache entries; (bso#10264). + util: Remove 32bit macros breaking strict aliasing; (bso#10269).- Let gpg verify execution condition not fail on non SUSE systems.- Add systemd support for post-12.2 systems.- Allow smbcacls to take a '--propagate-inheritance' flag to indicate that the add, delete, modify and set operations now support automatic propagation of inheritable ACE(s); (FATE#316474).- Unconditionally create the CUPS smb backend sym link pointing to smbspool; (bnc#850656).- Update to 4.1.1. + ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101). + Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101).- Update to 4.1.0. + pam_winbindd: Support the KEYRING ccache type; (bso#10132). + Fix PAC parsing failure; (bso#10178).- Unify the defattr lines in the pidl, python, test and test-devel files section by removing the optional directory mode.- Verify source tar ball gpg signature.- Update to 4.1.0rc4. + dsdb: Convert the full string from UTF16 to UTF8, including embedded NULLs; (bso#8077). + python-samba-tool fsmo: Do not give an error on a successful role transfer; (bso#9461). + dbwrap_ctdb: Treat empty records as non-existing; (bso#10008). + Raise the level of a debug when unable to open a printer; (bso#10118). + Add "acl allow execute always" parameter; (bso#10134). + vfs_shadow_copy2: Display previous versions correctly over SMB2; (bso#10137). + smbd: Always clean up share modes after hard crash; (bso#10138). + Valid utf8 filenames cause "invalid conversion error" messages; (bso#10139). + libcli/smb: Use SMB1 MID=0 for the initial Negprot; (bso#10144). + Samba SMB2 client code reads the wrong short name length in a directory listing reply; (bso#10145). + libcli/smb: Only check the SMB2 session setup signature if required and valid; (bso#10146). + Better document potential implications of a globally used "valid users"; (bso#10147). + cli_smb2_get_ea_list_path() failed to close file on exit; (bso#10149). + Not all OEM servers support the ALTNAME info level; (bso#10150). + Regression causes replication failure with Windows 2008R2 and deletes Deleted Objects; (bso#10157). + Netbios related samba process consumes 100% CPU; (bso#10158). + Fix POSIX ACL mapping when setting DENY ACE's from Windows; (bso#10162).- Require libndr-standard-devel due to gen_ndr/lsa.h from libpdb-devel.- Add libdcerpc0, libdcerpc-atsvc0, libdcerpc-binding0, libdcerpc-samr0, libgensec0, libndr0, libndr-krb5pac0, libndr-nbt0, libndr-standard0, libpdb0, libregistry0, libsamba-credentials0, libsamba-hostconfig0, libsamba-policy0, libsamba-util0, libsamdb0, libsmbclient-raw0, libsmbconf0, libsmbldap0, and libtevent-util0 to baselibs.conf.- Add or polish the shared library package summaries and descriptions.- Update to 4.1.0rc3. + Fix working on site with Read Only Domain Controller; (bso#5917). + Add man page for vfs_syncops; (bso#7364). + Add man page for vfs_linux_xfs_sgid; (bso#7490). + When replicating DNS for bind9_dlz we need to create the server-DNS account remotely; (bso#9091). + Winbind unable to retrieve user information from AD; (bso#9615). + winbind_lookup_names() fails because of NT_STATUS_CANT_ACCESS_DOMAIN_INFO; (bso#9899). + Build Samba 4.0.x on AIX with IBM XL C/C++; (bso#9911). + Add SMB2 and SMB3 support for smbclient; (bso#9974). + Add man pages for ntdb tools; (bso#10000). + Add man page for samba-regedit tool; (bso#10001). + ::1 added to nameserver on join; (bso#10030). + Fix memory leak in source3/lib/util.c:1493; (bso#10063). + Fix segmentation fault in 'net ads join'; (bso#10073). + Fix variable list in vfs_crossrename man page; (bso#10076). + s3-winbind: Fix a segfault passing NULL to a fstring argument; (bso#10082). + smbd: Fix async echo handler forking; (bso#10086). + MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba; (bso#10097). + Honour output buffer length set by the client for SMB2 GetInfo requests; (bso#10106). + Fix Winbind crashes on DC with trusted AD domains; (bso#10107). + Handle Dropbox (write-only-directory) case correctly in pathname lookup; (bso#10114). + Masks incorrectly applied to UNIX extension permission changes; (bso#10121).- Implement shared library packaging guidelines. - Correct interpackage dependencies; (bso#10129).- Define the source URL differently in the case of a release candidate.- Update to 4.1.0rc2. + Add vfs_btrfs module. + Add support for server-side copy operations via the SMB2 FSCTL_SRV_COPYCHUNK request. + Fix replication with --domain-crictical-only to fill in backlinks; (bso#9029). + Windows 8 Roaming profiles fail; (bso#9678). + Fix crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + Do not delete an existing valid credential cache (s3-winbind); (bso#9994). + Fix segfault while reading incomplete session info; (bso#10003). + Missing integer wrap protection in EA list reading can cause server to loop with DOS (CVE-2013-4124); (bso#10010). + Fix a 100% loop at shutdown time (smbd); (bso#10013). + Fix/improve debug options; (bso#10015). + Rename regedit to samba-regedit; (bso#10040). + Remove obsolete swat manpage and references; (bso#10041). + Fix crashes in socket_get_local_addr(); (bso#10042). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Remove a redundant inlined substitution of ACLs; (bso#10045). + nsswitch: Add OPT_KRB5CCNAME to avoid an error message; (bso#10048). + dsdb improvements; (bso#10056). + Linux kernel oplock breaks can miss signals; (bso#10064).- BuildRequire pyldb-devel.- Add libnetapi0 and samba-libs to baselibs.conf.- Update to 4.0.9. + Fix crash of Winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + s3-lib: Fix segmentation fault while reading incomplete session info; (bso#10003). + smbd: Fix a 100% loop at shutdown time; (bso#10013). + Windows 8 Roaming profiles fail; (bso#9678). + Add UPN enumeration to passdb internal API; (bso#9779). + smbd: Cleanup disonnected durable handles; (bso#9930). + vfs_streams_xattr: Do not attempt to write empty attribute twice; (bso#9970). + Fix Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + s3-winbind: Do not delete an existing valid credential cache; (bso#9994). + Fix excessive RID allocation; (bso#10014). + Add debugclass for DNS server; (bso#10015). + Fix/improve debug options; (bso#10015). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Linux kernel oplock breaks can miss signals; (bso#10064). + net ads join: Fix segmentation fault in create_local_private_krb5_conf_for_domain; (bso#10073).- Update to 4.0.8. + Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections; CVE-2013-4124; (bnc#829969).- Require krb5 and not the non existing krb5-libs package.- Update to 4.1.0rc1. + Directory database replication (AD DC mode) + Server-Side Copy Support + Btrfs Filesystem Integration- BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp. - BuildRequire libxslt, libxslt1, or libxslt-tools depending on SUSE version. - Require perl-base on SUSE systems only.- Adjust group setting of the test-devel subpackage. - Require perl-base from the pidl subpackage.- Remove libdir/samba/ldb after install if we're building Samba without Active Directory Domain Controller support.- Remove unused ccache switch from the spec file.- BuildRequire docbook-xsl-stylesheets and libxslt-tools to build the man pages and add them to the package again.- Build from the package from the top level directory; (bnc#794744). - BuildRequire pytalloc-devel, python-tdb, and python-tevent. - Also use out of tree builds of talloc, tdb, tevent, and ldb for pre-12.1 SUSE systems.- Remove the empty data dir from the doc package filelist. - Explicitly use samba instead of the name macro to define the docbook dir.- Update to 4.0.7. + Fix a core dump with invalid lock order while opening/editing or copying MS files; (bso#9794). + Fix crash bug from search of mail=; (bso#9967). + s3-rpc_server: Ensure we are root when starting and using gensec; (bso#9465). + Add support for MX queries; (bso#9485). + dns: Delete dnsNode objects when they are empty; (bso#9559). + dns: Support larger queries when asking forwarder; (bso#9632). + s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST; (bso#9805). + Use of wrong RFC2307 primary group field; (bso#9880). + Check for system libtevent; (bso#9881). + is_printer_published GUID retrieval; (bso#9900). + Doc fixes for 4.0; (bso#9906). + Build fixes for 4.0 found during autoconf or debian packaging work; (bso#9907). + build: Add missing new line to replaced python shebang line; (bso#9909). + PIE builds not supported; (bso#9910). + s4:winbind: Don't leak libnet_context into the main event context; (bso#9929). + Fix a bug of drvupgrade of smbcontrol; (bso#9941). + Check for netbios aliases in ad_get_referrals; (bso#9947). + Fix tevent_poll on 32-bit machines (Coverity ID 989236); (bso#9953). + docs: Avoid mentioning a possibly misleading option; (bso#9964). + Fix build with system Heimdal of samba4kgetcred; (bso#9968).- Use SLE as product prefix for SUSE Linux Enterprise, oS for openSUSE, and OBS for any other operating system to define the vendor string while build.- Remove ldapsmb from the main spec file.- Adjust ldapsmb and nmbstatus man page syntax required by a newer pod2man.- Don't bzip2 the main tar ball, use the upstream gziped one instead.- Explicitly BuildRequire cyrus-sasl-devel, libattr-devel, and libopenssl-devel.- Fix libreplace license ambiguity; (bso#8997); (bnc#765270).- Update to 4.0.6. + Fix crash during Win8 sync; (bso#9822). + Fix segfault when loging in with wrong password from w2k8r2; (bso#9834). + Fix the username map optimization; (bso#9139). + Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). + SMB2 server doesn't support recvfile; (bso#9412). + Fix the build of vfs_notify_fam; (bso#9545). + Fix adding case sensitive spn; (bso#9699). + Properly handle oplock breaks in compound requests; (bso#9722). + Properly handle oplock breaks in compound requests; (bso#9722). + Cache name_to_sid/sid_to_name correctly; (bso#9766). + Fix 'net ads join' when called via stdin; (bso#9767). + Fix segfault for "artificial" conn_structs in vfs_fake_perms; (bso#9775). + vfs_dirsort uses non-stackable calls, dirfd(), malloc instead of talloc and doesn't cope with directories being modified whilst reading; (bso#9777). + Fix panic when running 'smbtorture smb.base'; (bso#9782). + Use specified python for runtime installation of Samba; (bso#9785). + Change '--with-dmapi' to 'default=auto' to match the autoconf build; (bso#9803). + wafsamba: Display the default value in help for SAMBA3_ADD_OPTION; (bso#9804). + wbinfo: Fix segfault in wbinfo_pam_logon; (bso#9807). + Package new dbwrap_tool man page; (bso#9809). + Old DOS SMB CTEMP request uses a non-VFS function to access the filesystem; (bso#9811). + Fix 'map untrusted to domain' with NTLMv2; (bso#9817). + SMB signing and the async echo responder don't work together; (bso#9824). + Fix panic in nt_printer_publish_ads; (bso#9830). + talloc use after free in winbind4; (bso#9832). + Function called in unix_convert() path can overwrite errno; (bso#9833). + Fix NULL pointer dereference in Winbind; (bso#9854). + Fix making LIBNDR_PREG_OBJ; (bso#9868).- Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches.- Update to 4.0.5. + Fix large reads/writes from some Linux clients; (bso#9706). + Add 'samba-tool dbcheck --reset-well-known-acls'; (bso#9740). + Can't delegate adding computers to domain; (bso#9267). + Fix GNU ld version detection with old gcc releases; (bso#7825). + Never try to map global SAM name; (bso#9039). + Certain xattrs cause Windows error 0x800700FF; (bso#9130). + Samba returns unexpected error on SMB posix open; (bso#9519). + Fix build on AIX; (bso#9557). + libnss-winbindd does not provide pass struct for groups mapped with ID_TYPE_BOTH and vice versa; (bso#9617). + Reauth-capable client fails to access shares on Windows member; (bso#9625). + PIDL: Fix parsing linemarkers in preprocessor output; (bso#9636). + Rename internal subsystem pdb_ldap to pdb_ldapsam; (bso#9639). + Fix the build of vfs_afsacl; (bso#9642). + Fix the build with --fake-kaserver; (bso#9643). + Fix compile of source3/lib/afs.c; (bso#9644). + Make SMB2_GETINFO multi-volume aware; (bso#9646). + idmap_autorid: Fix freeing of non-talloced memory; (bso#9653). + Work around FreeBSD's getaddrinfo() underscore issue; (bso#9656). + 'make test' hangs; (bso#9663). + Fix correct linking of libreplace with cmdline-credentials; (bso#9664). + Fix filtering of link-local addresses; (bso#9666). + Fix crash in 'net rpc join' against a Samba 3.0.33 PDC; (bso#9669). + Samba denies owner Read Control when there is a DENY entry while W2K08 does not; (bso#9674). + Fix several resource (fd) leaks; (bso#9683). + Fix a memory leak in spoolss rpc server; (bso#9685). + Fix a possible buffer overrun in pdb_smbpasswd; (bso#9686). + Fix several possible null pointer dereferences; (bso#9687). + Make sure that domain joins work correctly when the DC disallows NTLM auth; (bso#9689). + Backport tevent changes to bring library to version 0.9.18; (bso#9695). + Remove incomplete samba_dnsupdate IPv6 link-local address check; (bso#9696). + DsReplicaGetInfo fails due to sendto() EMSGSIZE error on UNIX domain socket; (bso#9697). + Fix vfs_catia and update documentation; (bso#9701); (bnc#824833). + Fix build on solaris8: Do not force a specific perl on pod2man; (bso#9703). + Fix nss_winbind name on FreeBSD; (bso#9704). + s4:winbindd: Do not drop the workgroup name in the getgrnam, getgrent and getgrgid calls; (bso#9711). + Set LD_LIBRARY_PATH in install_with_python.sh; (bso#9717). + s4-idmap: Remove requirement that posixAccount or posixGroup be set for rfc2307; (bso#9718). + Allow forcing an override of an old @MODULES record; (bso#9719). + Do not print the admin password during 'samba-tool classicupgrade'; (bso#9720). + Make samba_upgradedns more robust (do not guess addresses when just changing roles); (bso#9721). + Add a tool to migrate latin1 printing tdbs to registry; (bso#9723). + is_encrypted_packet() function incorrectly used inside server; (bso#9724). + upgradeprovision and 'samba-tool dbcheck' patches for 4.0.NEXT; (bso#9725). + Fix NULL pointer dereference; (bso#9727). + DO NOT install samba_upgradeprovision in 4.0.x; (bso#9728). + Fix 'smbcontrol close-share'; (bso#9733). + Fix Winbind separator in upn to username conversion; (bso#9735). + Change to smbd/dir.c code gives significant performance increases on large directory listings; (bso#9736). + PIDL: Build fixes for hosts without CPP (Solaris 11); (bso#9739). + Make sure that we only propogate the INHERITED flag when we are allowed to; (bso#9747). + Remove unneeded fstat system call from hot read path; (bso#9748). + Don't leak the epm_Map policy handle; (bso#9758). + Fix incorrect parsing of SMB2 command codes; (bso#9760). - Update to 4.0.4. + Remove forced set of 'create mask' to 0777; CVE-2013-1863; (bnc#809624).- Fix periodic printcap cache reloads; (bso#9650); (bnc#807334).- No longer use the cifs- or smbfstab named configuration file on post-12.2 systems; (bnc#804822); (bnc#821889).- Shift the smbfs init script nfs dependency from Required to Should.- Fix SMB1 Session Setup AndX handling with a large krb PAC; (bso#9658); (bnc#802031).- Point LD_LIBRARY_PATH to the just-built libraries while calling testparm to generate the default share snippets on pre-12.2 systems.- Explicitly configure --with-ads.- Fix smbclient recursive mget EPERM handling; (bso#9633); (bnc#786350).- Remove superfluous quotation marks while setting the SAMBA_VERSION_VENDOR_SUFFIX string.- Do not restart the smbfs service on pre-11.3 systems during dhcp lease renewal when the IP address remains the same; (bnc#800782).- Update to 4.0.3. + Fix ACL problem with delegation of privileges and deletion of accounts over LDAP interface; add documentation; (bso##8909). + check_password_quality: Handle non-ASCII characters properly; (bso##9105). + Fix 'smbd' panic triggered by unlink after open; (bso##9571). + smbd: Fix memleak in the async echo handler; (bso##9549). + defer_open is triggered multiple times on the same request; (bso#9196). + Add extra attributes for AD printer publishing; (bso#9378). + FSMO seize of naming role fails: NT_STATUS_IO_TIMEOUT; (bso#9461). + Downgrade v4 printer driver requests to v3; (bso#9474). + samba_upgradeprovision: fix the nTSecurityDescriptor on more containers; (bso#9481). + s3:smb2_negprot: set the 'remote_proto' value; (bso#9499). + waf assumes that pythonX.Y-config is a Python script; (bso#9503). + s4:drsuapi: Make sure we report the meta data from the cycle start; (bso#9508). + wafsamba: Use additional xml catalog file; (bso#9512). + samba_dnsupdate: Set KRB5_CONFIG for nsupdate command; (bso#9517). + conn->share_access appears not be be reset between users; (bso#9518). + Remove superfluous bracket in samba.8.xml; (bso#9528). + Fix typo in vfs_tsmsm.8.xml; (bso#9530). + terminate the irpc_servers_byname() result with server_id_set_disconnected(); (bso#9540). + Make use of posix_openpt; (bso#9541). + Fix build of vfs_commit and plug in async pwrite support; (bso#9544). + Fix aio_suspend detection on FreeBSD; (bso#9546). + Correctly detect O_DIRECT; (bso#9548). + sigprocmask does not work on FreeBSD to stop further signals in a signal handler; (bso#9550). + smb.conf(5): Update list of available protocols; (bso#9552). + s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup; (bso#9555). + Fix compilation of Solaris ACL module; (bso#9564). + Adding additional Samba 4.0 DC to W2k8 srv AD domain (in win200 functional level) produces dbcheck errors; (bso#9565). + Add dbwrap_tool.1 manual page; (bso#9568). + Document the command line options in dbwrap_tool(1); (bso#9568). + ntlm_auth(1): Fix format and make examples visible; (bso#9569). + Fix file corruption during SMB1 read by Mac OSX 10.8.2 clients; (bso#9572). + Fix a possible null pointer dereference in spoolss; (bso#9574). + Duplicate flags defined in the winbindd protocol; (bso#9575). + gensec: Allow login without a PAC by default; (bso#9581). + smbd: disk_free: sys_popen() failed" message logged in /var/log/message many times; (bso#9586). + Archive flag is always set on directories; (bso#9587). + ACLs are not inherited to directories for DFS shares; (bso#9588). + Correct meta data in ldb manpages; (bso#9591). + s3-winbind: Fix the build of idmap_ldap; (bso#9595). + Linked attribute handling should be by GUID; (bso#9596). + Fix timeouts of some IRPC calls; (bso#9598). + Use pid,task_id as cluster_id in process_single just like process_prefork; (bso#9598). + Add 'ldbdump' tool; general code and documentation cleanup; (bso#9609). + dsdb: Make secrets_tdb_sync cope with -H secrets.ldb; (bso#9610).- Update to 4.0.2. + Address SWAT security issues CVE-2013-0213 and CVE-2013-0214 which both don't apply to any SUSE Samba post-3.6.10 as it isn't longer built. + Don't build and package static libraries.- Drop separate build-source-timestamp file as it led to a second, incorrect Source Timestamp line.- Add server-side copy support; (fate#314770). + Implement FSCTL_SRV_COPYCHUNK and FSCTL_SRV_REQUEST_RESUME_KEY handlers. + Add vfs_btrfs VFS module for optimized Btrfs clone-range ioctl usage.- Add filter against shlib-policy-name-error for /lib*/libnss_wins.so.2.- Disable SWAT during configure and don't package it any longer.- Remove dangling references to Heimdal from the spec file.- Remove /lib/samba prefix from the localstatedir configure option.- Update to 4.0.1. + Samba 4.0.0 as an AD DC may provide authenticated users with write access to LDAP directory objects; CVE-2013-0172; (bnc#798364).- Add the missing get_printing_ticket binary path while calling the set_permissions macro; (bnc#783375).- Use the version macro while definition of the branch macro.- Remove references to no longer used devel macros.- Update to 4.0.0. + Honor password complexity settings; (bso#9414). + Install SWAT *.msg files with waf; (bso#9415). + Fix netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES; (bso#9438). + developer-build: Fix panic when acl_xattr fails with access denied; (bso#9456). + Fix "map username script" with "security=ads" and Winbind; (bso#9457). + Install manpages only if we install the target; (bso#9459). + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Users can not be given write permissions any more by default; (bso#9462). + Fix MMC crashes; (bso#9470). + Fix SEGV when using second vfs module; (bso#9471). + Support FIPS mode when building Samba; (bso#9479). + Fix ACL on "cn=partitions,cn=configuration"; (bso#9481).- netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES broken; (bso#9438). - s3:auth: fix create_token_from_sid() to not fail in the winbindd case; (bso#9457). - s4:dsdb/acl_read: return the nTSecurityDescriptor attr if the sd_flags control is given; (bso#9470). - Support FIPS mode when building Samba; (bso#9479). - s4:provision: set the correct nTSecurityDescriptor; (bso#9481).- SEGV when using second vfs module; (bso#9471).- Update to 3.6.10. + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Fix segfault when "default devmode" is disabled; (bso#9433). + Fix segfaults in "log level = 10" on Solaris; (bso#9390).- s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIED; (bso#9456). - Install manpages only if we install the target; (bso#9459). - Users can not be given write permissions any more by default; (bso#9462).- Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094); (bso#9418). - Use work around for 'winbind use default domain' only if it is set; (bso#9367). - Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend; (bso#9374). - large read requests cause server to issue malformed reply; (bso#9422). - s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426). - Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439). - Allow to force DNS updates using net; (bso#9451). - Respond correctly to FILE_STREAM_INFO requests; (bso#9460).- Update to 4.0.0rc6. See WHATSNEW.txt from the samba-doc package.- On uninstall remove winbind from the pam configuration, invalidate the nscd passwd and group cache and only recommend the install of nscd; (bnc#792340).- BuildRequire libnscd-devel once.- Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294). - Add SUSE version depending pkg-config requires macro; (bnc#792294).- Define library names and use it instead of libldb1, libnetapi0, libsmbclient0, libsmbsharemodes0, libtalloc2, libtdb1, libtevent0, and libwbclient0; (bnc#792294). - Provide and obsolete libsmbsharemodes for post-10.3 SUSE systems.- Don't clutter the spec file diff view; (bnc#783384).- Fix fd leak causing 100% CPU in winbind on certain dc connection failures; (bso#9436); (bnc#786677).- Fix spoolss segfault when default devmode is disabled; (bso#9433); (bnc#791183).- Update to 4.0.0rc5. See WHATSNEW.txt from the samba-doc package.- ACL masks incorrectly applied when setting ACLs; (bso#9236). - s3-kerberos: also try with AES keys, when decrypting tickets; (bso#9272). - lib/replace: replace all *printf function if we replace snprintf; (bso#9390). - lib/addns: don't depend on the order in resp->answers[]; (bso#9402).- s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209). - lib/krb5_wrap: request enc_types in the correct order; (bso#9272). - Fix net ads join message for the dns domain; (bso#9326). - docs-xml: fix use of tag; (bso#9345). - s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359). - s3:winbind: Failover if netlogon pipe is not available; (bso#9386).- Execute the run_permissions macro on pre-11.4 systems and else the set_permission one if available.- Ensure adding the winbind group never can fail.- Create ntadmin group only if it doesn't yet exist.- Update to 3.6.9. + When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). + Winbind can't fetch user or group info from AD via LDAP; (bso#9147). + Fix segfault in smbd if user specified ports out for range; (bso#9218).- quota: Don't force the block size to 512; (bso#3272). - Fix poll replacement to become a msleep replacement; (bso#8107). - Fix wrong test == syntax in configure; (bso#8146). - Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344). - Fix builtin forms order to match Windows again; (bso#8632). - Fix RAW printing for normal users; (bso#8769); (bnc#790741). - Initialise ticket to ensure we do not invalid memory; (bso#8788). - Fix 'net rpc share allowedusers' to work with 2008r2; (bso#8966). - Fix crash on null pam change pw response; (bso#9013). - Connection to outbound trusted domain goes offline; (bso#9016). - Increase debug level for info that the db is empty; (bso#9112). - 'smbclient' can't connect to a Windows 7 server using NTLMv2; (bso#9117). - Winbind can't fetch user or group info from AD via LDAP; (bso#9147). - Open printers with the right access mask; (bso#9154). - Fix makerpms.sh on RHEL; (bso#9165). - Remove non-existent option '-Y' from winbindd manpage; (bso#9171). - Add quota support for gfs2; (bso#9172). - Make SMB2 compound request create/delete_on_close/close work as Windows; (bso#9173). - Empty SPNEGO packet can cause smbd to crash; (bso#9174). - pam_winbind: Match more return codes when wbcGetPwnam has failed; (bso#9177). - Fix crash bug in idmap_hash; (bso#9188); (bnc#788159). - SMB2 Create doesn't return correct MAX ACCESS access mask in blob; (bso#9189). - Fix service control for non-internal services; (bso#9192). - Don't take 'state->te' as indication for "was_deferred"; (bso#9196). - Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209). - Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213). - Fix segfault in smbd if user specified ports out for range; (bso#9218). - Signing cannot be disabled for SMB2 by design, so fix the documentation instead; (bso#9222). - Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry; (bso#9231). - When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). - lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259). - Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart; (bso#9268). - Add support for reloading systemd services; (bso#9280).- Warn via the smbd log if AppArmor and "wide links" are in use; (bnc#783719).- Do not write the build date into the header of the default smb.conf as this causses superfluous rebuilds of packages depending on samba; (bnc#781601).- Do not prerequire SuSEconfig.permissions as it's already enough and more generic to depend on the permissions package; (bnc#782293).- Update to 3.6.8. + Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). + Fix Winbind panic if we couldn't find the domain; (bso#9135).- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058). - Fix bad call to memcpy source3/registry/regfio.c; (bso#9065). - "Domain Users" incorrectly added as additional group on domain members; (bso#9066). - Use correct RID for "Domain Guests" primary group; (bso#9067). - Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). - Fix smbclient/tarmode panic when connecting to Windows 2000 clients; (bso#9088). - Fix refreshing of Kerberos tickets in Winbind; (bso#9098). - Fix identification of idle clients in Winbind to avoid crashes and NDR parsing errors; (bso#9104). - Fix compilation with newer MIT Kerberos which hides internal symbols; (bso#9111). - Fix flooding the logs with records we don't find in pcap; (bso#9112). - Initialize the print backend after we setup winreg; (bso#9122). - Fix lprng job tracking errors; (bso#9123). - Fix setting of "inherited" bit on inherited ACE's; (bso#9124). - Fix Winbind panic if we couldn't find the domain; (bso#9135). - Make 'smbclient allinfo' show the snapshot list; (bso#9137). - Fix nfs quota support with Linux nfs4 mounts; (bso#9144). - Valid open requests can cause smbd assert due to incorrect oplock handling on delete requests; (bso#9150).- NMB registration for a duplicate workstation fails with registration refuse; (bso#9085); (bnc#770056).- Remove backup files caused by running configure in examples/VFS.- Update to 3.6.7. + Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). + Fix migrating printers while upgrading from 3.5.x; (bso#9026).- Correct documentation of "case sensitive"; (bso#8552). - Printing fails in function cups_job_submit; (bso#8719). - Fix kernel oplocks when uid(file) != uid(process); (bso#8974). - Send correct responses to NT Transact Secondary when no data and no params for the Trans2 calls are set; (bso#8989). - Fix build without ads support; (bso#8996). - Don't turn negative cache entries into valid idmappings; (bso#9002). - Fix posix acl on gpfs; (bso#9003). - Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022). - Fix migrating printers while upgrading from 3.5.x; (bso#9026). - Fix typo in set_re_uid() call when USE_SETRESUID selected in configure; (bso#9034). - Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040). - Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). - Fix build against CUPS 1.6; (bso#9055). - Fix bugs in SMB2 credit handling code; (bso#9057). - rpcclient: Fix bad call to data_blob_const; (bso#9062).- Create missing doc directories while install. - Remove no longer existing Manifest file from install. - Don't creat a link to non existend html man pages for swat. - Don't call the no longer existing libsmbclient testsuit while build.- Configure with option --mandir instead --with-mandir. - Remove obsoleted --with-rootsbindir, --with-nmbdsocketdir, and - -with-swatdir configure options.- Update to 4.0.0beta4. See WHATSNEW.txt from the samba-doc package.- BuildRequire gcc, make, and patch; (bnc#771516).- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).- Fix shell syntax in dhcpcd hook script; (bnc#769957).- Add missing int declaration to the net kdc lookup patch.- Update to 4.0.0beta2. See WHATSNEW.txt from the samba-doc package.- Update to 3.6.6. + Fix possible memory leaks in the Samba master process; (bso#8970). + Fix uninitialized memory read in talloc_free(); (bnc#764577). + Fix joining of XP Pro workstations to 3.6 DCs; (bso#8373); (bnc#787983).- resolve_ads() code can return zero addresses and miss valid DC IP addresses; (bso#8910). - Can't join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983). - winbind can hang as nbt_getdc() has no timeout; (bso#8953). - Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627) - s3-pid: Catch with pid filename's change when config file is not smb.conf; (bso#8714). - Possible memory leaks in the main Samba process; (bso#8970). - s3: Fix uninitialized memory read in talloc_free(); (bnc#764577). - Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971). - Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988). - Winzip occasionally can not read files out of an open winzip dialog; (bso#8311). - s3-winbindd: call dump_core_setup after command line option has been parsed; (bso#8975). - Directory group write permission bit is set if unix extensions are enabled; (bso#8972). - s3: remove dependency on automake for "make everything"; (bso#8978). - sd_has_inheritable_components segfaults on an SD that se_access_check accepts; (bso#8811). - smbclient's tarmode insists on listing excluded directories; (bso#8922). - Notify code can miss a ChDir; (bso#8998). - s3:smbd: add a fsp_persistent_id() function; (bso#8995).- Call autogen.sh even on post-12.1 SUSE systems.- Don't call autogen.sh on post-12.1 SUSE and post-14 Fedora systems. - Recompile all IDL in any case.- BuildIgnore libtalloc and libtdb to prevent a package conflict on Fedora systems.- Install talloc.pc only on pre-12.2 and non SUSE systems.- BuildRequire libldb-devel, libtalloc-devel, libtdb-devel, and libtevent-devel on post-12.1 systems.- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861). - s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904). - smbd crashes when deleting directory and veto files are enabled; (bso#8837). - winbind_krb5_locator only returns one IP address; (bso#8897). - Wrong assertion/comparison: Compare value not pointer; (bso#8859). - Inconsistent (with manpage) command-line switch for "help" in smbtree; (bso#8831). - Fix incorrect debug statement. - Setting traverse rights fails to enable directory traversal when acl_xattr in use; (bso#8857). - Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877). - s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869). - s3-docs: fixes several typos; (bso#7938). - s3-VFS: Fix building out-of-tree modules; (bso#8822). - s3-docs: Add hint that setting "profile acls = yes" on normal shares can cause trouble; (bso#7930). - s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915). - Avoid null dereference in initialize_password_db(); (bso#8920). - s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend. - s3:registry:reg_api: fix reg_queryvalue to not fail when values are modified while it runs. - s4:torture:rpc:spoolss: also initialize driverName before checking it in test_PrinterData_DsSpooler(). - s3:registry: multiple cleanups, fixes, and optimisations. - s3:auth/server_info: the primary rid should be in the groups rid array; (bso#8798). - s3-printing: Add new printers to registry; (bso#8554); (bso#8612); (bso#8748). - Fix the overwriting of errno before use in a DEBUG statement and use the return value from store_acl_blob_fsp rather than ignoring it; (bso#8945). - s3-auth: Don't lookup the system user in pdb; (bso#8944). - s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952). - Fix typo in pam_winbindd code; (bso#8957). - Fix remove_duplicate_addrs2 previously it could leave zero addresses in the list; (bso#8910). - Slow but responsive DC can lock up winbindd; (bso#8943). - Broken processing of %U with vfs_full_audit when force user is set; (bso#8882).- Disable included build of ldb, talloc, tdb, and tevent on post-12.1 systems. - BuildRequire libldb1-devel, libtalloc2-devel, libtdb1-devel, and libtevent0-devel on post-12.1 systems.- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).- docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845); (bnc#730769). - s3-docs: Prepend '/' to filename argument; (bso#8826).- Update to 3.6.5. - Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576).- Remove all precompiled idl output to ensure any pidl changes take effect; (bnc#757080).- Update to 3.6.4. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "root" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). - Correctly handle DENY ACEs when privileges apply; (bso#8797).- s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). - Allow vfs_aio_pthread to build as a static module; (bso#8723). - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). - s3: segfault in dom_sid_compare(bso#8567). - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). - s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). - Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784).- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454).- Remove obsoleted Authors lines from spec file for post-11.2 systems.- Make ldapsmb build with Fedora 15 and 16; (bso#8783). - BuildRequire libuuid-devel for post-11.0 and other systems. - Define missing python macros for non SUSE systems. - PreReq to fillup_prereq and insserv_prereq only on SUSE systems. - Always use cifstab instead of smbfstab on non SUSE systems.- Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934).- Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854).- s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825).- s3:winbindd fix a return code check; (bso#8406).- s3: Add rmdir operation to streams_depot; (bso#8733).- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738); CVE-2013-0454; (bnc#811975).- s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).- s3:client: ignore SMBecho errors (the server may not support it); (bso#8139).- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is enabled and don't unintentionally use a bogus domain name; (bso#8734).- smbclient fails with posix large reads; (bso#8727).- Use the smbfs init script on versions pre-11.3, or cifs in later versions; (bnc#744614).- s3: Compile IDL files in autogen, some configure tests need this.- Fixes various deadlocks in if-up.d / if-down.d when running under systemd; (bnc#732395).- Update to 3.6.3. + Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724); (bnc#743986).- Use spdx.org compliant license names for all packages.- Update to 3.6.2. + Make Winbind receive user/group information (bug #8371). + Several SMB2 fixes. + Fix a crash bug in the spoolss code. + Add new contributing FAQ announcing acceptance of corporate (C). + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504). + Fix cli_write_and_x() against OS/2 print shares; (bso#5326). + Fix 'smbclient tar' for files greater than 8GB on BE machines; (bso#563); (bnc#726145). + Remove pointless use_memory_krb5_ccache; (bso#7465). + Fix perl path; (bso#8176). + Grant credits in async interim responses (SMB2); (bso#8357). + Make Winbind receive user/group information; (bso#8371). + Fix Windows XP clients crashing smbd process every once in a while; (bso#8384); (bnc#731571). + Make VFS op "streaminfo" stackable; (bso#8419). + Add an allocation pool to idmap_autorid; (bso#8444). + Fix SEGFAULT from net registry export on not zero terminated REG_SZ values; (bso#8528). + Make DSO_EXPORTS_CMD more portable; (bso#8531). + readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). + smbclient posix_open command fails to return correct info on open file; (bso#8542). + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548). + Fix setting the machine account password; (bso#8550). + Make SMB2 handle compound request headers in the same way as Windows; (bso#8560). + Password change settings not fully observed; (bso#8561). + Fix double free error in talloc; (bso#8562). + Fix alignment in the non-extended-security negprot; (bso#8573). + Add systemd service files; (bso#8575). + Add systemd service files; (bso#8575). + smb2_flush: Don't send uninitialized memory; (bso#8579). + Enable inotify if sys or kernel inotify is available; (bso#8580). + Increase a debug level; (bso#8585). + libsmb: Only align unicode pipe_name; (bso#8586). + Fix marshalling of samr_ChangePasswordUser3; (bso#8591). + Don't limit the number of open dptrs for SMB2; (bso#8592). + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). + Make cldap work over IPv6; (bso#8600). + Fix intermittent print job failures caused by character conversion errors; (bso#8606). + Improve configure.in so it can be used outside the Samba source tree; (bso#8607). + Winbind: Don't fail on users without a uid; (bso#8608). + Ensure we correctly calculate reply credits over all returned SMB2 replies; (bso#8614). + Fix migrate printer code; (bso#8618). + Fix crash bug when trying to browse Samba printers; (bso#8623). + libsmb: Don't duplicate Kerberos service tickets; (bso#8628). + POSIX ACE x permission becomes rx following mapping to and from a DACL; (bso#8631). + When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + Fix the vfs_commit module; (bso#8639). + Add an update function for Winbind cache; (bso#8643). + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). + Document the "ignore system acls" option of vfs_acl_xattr and vfs_acl_tdb vfs modules; (bso#8652). + Fix deleting a symlink if the symlink target is outside of the share; (bso#8663). + Fix renaming a symlink if the symlink target is outside of the share; (bso#8664). + Fix NT ACL issue; (bso#8673). + Fix buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). + Fix Winbind segfault if we can't map the last user; (bso#8678). + recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). + Try ctdbd_init_connection() as root; (bso#8684). + Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686). + Fix typo in 'net memberships' usage; (bso#8687). + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket(); (bso#8692). + Make DeletePrinterDriverEx remove printer driver files; (bso#8697) (bnc#740810). + Fix major leak with SMB2 in connections.tdb; (bso#8710).- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).- Use correct license, LGPLv3+ for libwbclient packages.- When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636).- Fix incorrect types in the full_audit VFS module. Add null terminators to audit log enums; (bnc#742885).- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810). - Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).- Buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). - NT ACL issue; (bso#8673). - Deleting a symlink fails if the symlink target is outside of the share; (bso#8663). - connections.tdb - major leak with SMB2; (bso#8710).- Renaming a symlink fails if the symlink target is outside of the share; (bso#8664).- Intermittent print job failures caused by character conversion errors; (bso#8606). - ads_keytab_verify_ticket mixes talloc allocation with malloc free; (bso#8692). - libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). - s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684). - s3-printing: fix migrate printer code; (bso#8618). - Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686).- net memberships usage info was wrong; (bso#8687). - s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628). - Recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). - s3-winbind: Fix segfault if we can't map the last user; (bso#8678). - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). - s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb; (bso#8652). - Winbind can't receive any user/group information; (bso#8371). - s3-winbind: Add an update function for winbind cache; (bso#8643). - s3: Attempt to fix the vfs_commit module. - POSIX ACE x permission becomes rx following mapping to and from a DACL; (#bso#8631). - s3:libsmb: only align unicode pipe_name; (bso#8586). - s3-winbind: Don't fail on users without a uid; (bso#8608). - Crash when trying to browse samba printers; (bso#8623). - talloc: double free error; (bso#8562). - cldap doesn't work over ipv6; (bso#8600). - s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326). - SMB2: not granting credits for all requests in a compound request; (bso#8614). - smb2_flush sends uninitialized memory; (bso#8579). - Password change settings not fully observed; (bso#8561). - s3:smb2_server: grant credits in async interim responses; (bso#8357). - s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592). - samr_ChangePasswordUser3 IDL incorrect; (bso#8591). - idmap_autorid does not have allocation pool; (bso#8444). - Add systemd service files. - s3:libsmb: the workgroup in the non-extended-security negprot is not aligned; (bso#8573). - s3-build: Fix inotify detection; (bso#8580). - SMB2 doesn't handle compound request headers in the same way as Windows; (#bso8560). - Disconnecting clients swamp the logs; (bso#8585). - s3-netlogon: Fix setting the machinge account password; (bso#8550). - winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). - smbclient posix_open command fails to return correct info on open file; (bso#8542). - readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). - s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465). - s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531). - s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated ucs2 string; (bso#8528). - Make VFS op "streaminfo" stackable; (bso#8419).- Fix incorrect perfcount array length calculations; (bnc#739258).- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.- Remove call to suse_update_config macro for post-11.4 systems.- Use samba.org for the ldapsmb source location.- Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile; (bnc #729516).- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572).- Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).- Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).- Fix typo in net ads join output; (bnc#713135).- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).- Update to 3.6.1. + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Several SMB2 fixes. + The VFS ACL modules are no longer experimental but production-ready. + Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465). + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509). + Return error of cli_push when 'put - /some/file' is used; (bso#7551). + Fix usage of cli_errstr(); (bso#7864). + Fix 'widelinks' regression; (bso#8229). + Empty notify servername; (bso#8236). + Add man vfs_aio_fork; (bso#8256). + smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes; (bso#8334). + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338). + While migrating forms, don't fail if the form already exists; (bso#8351). + OS/2 sends an unexpected write&x/read&x chain; (bso#8360). + Fix build of vfs_prealloc on SLES8; (bso#8363). + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364). + Fix the fallback to the deprecated spelling idmap:script; (bso#8368). + Fix vfs_chown_fsp; (bso#8370). + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix smbclient access to NT4 shares; (bso#8385). + Optimize serverid_exists() for Solaris; (bso#8395). + registry/reg_format.c must include includes.h; (bso#8401). + SMB2 server can return requests out-of-order when processing a compound request; (bso#8407). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with SMB2; (bso#8412). + Fix 'getent group' if trusted domains are not reachable; (bso#8420). + Fix infinite loop in ACL module code; (bso#8422). + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428). + Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429). + Fix segfault in iconv.c; (bso#8433). + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442). + Be smarter about setting default permissions when a ACL_USER_OBJ isn't given; (bso#8443). + Check the wct of the incoming SMBnegprot responses; (bso#8452). + Fix smbclient segfaults when dialect option -m is used for legacy dialects; (bso#8453). + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455). + Samba PDC is looking up only primary user group; (bso#8455). + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458). + smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473). + SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474). + Don't call smbd_terminate_connection in smb2_validate_message_id(); (bso#8476). + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476). + Map to guest can return uninitialized blob of data; (bso#8477). + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480). + DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493). + Remove "experimental" label on VFS ACL modules; (bso#8494). + SMB2_OP_CANCEL requests don't have to be signed; (bso#8503). + smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507). + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509). + Disallow "." in can_set_delete_on_close(); (bso#8515). + SMB2 create call returns incorrect file allocation size; (bso#8518). + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520). + Winbind cache timeout expiry test was reversed; (bso#8521).- s3/doc: add man page for aio_fork vfs module.- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).- s3: Samba PDC is looking up only primary user group; (bso#8455).- Add script to create or update an AppArmor sniplet with permissions for all Samba shares; (bnc#688040).- Add "ldapsam:login cache" parameter to allow explicit disabling of the login cache; (bnc#723261).- Retain the smbd startproc return value for correct startup status reporting. unset was incorrectly being called prior to rc_status; (bnc#723724).- Prevent deadlock in systemd triggered by if-down.d handler on shutdown; (bnc#721598).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; changed defaults and documentation (bso8473).- Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client); (bso#8515).- winbindd cache timeout expiry test was reversed; (bso#8521).- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).- s3:smb2_create: fix allocation size return value when opening existing files; (bso#8518).- SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474).- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442).- s3-docs: Fix bug (bso#7908) and typo.- Return error of cli_push when 'put - /some/file' is used; (bso#7551).- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).- smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507).- Default user entry is set to minimal permissions on incoming ACL change with no user specified; (bso#8443).- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft Internet Explorer 9 on Windows 7 to download files; (bso#8458).- DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493).- s3-docs: Fix typos.- s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).- Remove "experimental" label on VFS ACL modules; (bso#8494).- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin; (bso#7465).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473).- s3-netapi: allow to use default krb5 credential cache for libnetapi users.- s3-docs: document -k switch in net manpage.- Map to guest can return uninitialized blob of data; (bso#8477).- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).- Fix 'widelinks' regression intro'd in 3.2; (bso#8229).- Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429).- s3-spoolss: Fix bug forms migration; (bso#8351).- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).- s3: Do not fork the echo handler for smb2; (bso#8334).- s3-spoolss: Fix bug empty notify servername; (bso#8236).- SMB2 server can return requests out-of-order when processing a compound request; (bso#8407).- Remove smb child crash fix. The issue had been fixed upstream differently.- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.- Fix samba duplicates file content on appending. Move posix case semantics out from under the VFS; (bso#6898); (bnc#681208).- Make winbind child reconnect when remote end has closed, fix failing sudo; (bso#7295); (bnc#569721).- Spec file cleanup as suggested by the spec-cleaner tool. + Make all BuildRequires, PreReq, and Provides a separate line. + Use %{buildroot} instead of ${RPM_BUILD_ROOT}. + Use straight commands instead of macros (make, install). + Use -p in post and postun if we only call one command. + Use %{_localstatedir} instead of %{_var} in the filelist. + Remove superfluous AutoReqProv on lines.- Remove %release from all Provides.- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).- Use /var/run for the cifs state file in the init script too; (bnc#710304).- Microsoft Word from Microsoft Office 2007 fails to save as on a share with SMB2; (bso#8412).- Use sys_write and sys_read in fork_domain_child to fix a winbind race leading to 100% CPU usage; (bso#8409).- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).- Fix infinite loop in ACL module code; (bso#8422).- Fix getent group if trusted domains are not reachable; (bso#8420).- smbclient can't access a NT4 share since 3.6.0; (bso#8385).- Optimize serverid_exists() for Solaris; (bso#8395).- talloc: + check block count after references test. + added test suite for talloc_free_children(). + license info erratum in the manpage. + fix typos and better differentiation between versions 1 and 2. + preserve context name on talloc_free_children(). + ensure the sibling linked list remains valid during a free.- vfs_chown_fsp returned in the wrong directory; (bso#8370).- Remove irritating "." targets when recent system libs exist; (bso#8369).- Correctly initialize "idmap config * : script" with NULL; (bso#8368).- Add missing include to suppress compiler warnings; (bso#8365).- Point the chain offset beyond the current request; (bso#8360).- Fix gpfs vfs module build; (bso#8364).- Make vfs_prealloc even build on older systems; (bso#8363).- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).- Add a fallback for missing open&x support in OS/X Lion; (bso#8338).- Update to 3.6.0. + BUG 7462: Make SA_RESETHAND conditional on its existance. + BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined. + BUG 8324: smbclient cannot list directories from a big-endian machine. + BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname. + BUG 8327: Fix the reload of the configuration, also reload activated registry shares. + BUG 8328: Cleanup of idmap_tdb2 code. + BUG 8330: Fix NFSv4 ACL merging logic. + BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id. + BUG 8341: Fix segfault in libsmbclient. + BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file. + BUG 8347: Fix regression for HP-UX, AIX and OSF. + BUG 8357: Make sure we grant credits on async read/write operations. + BUG 8358: Fix a bug in run_poll_events(). + BUG 8362: Fix build issue on old glibc systems.- Remove references to disabled vscan build.- Add missing define, includes, and initialization to get_printing_ticket.- Use /var/run for the cifs state file; (bnc#710304).- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).- Fix reload of the configuration and also reload activated registry shares; (bso#8327).- WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326).- smbclient cannot list directories from a big-endian machine; (bso#8324).- Update to 3.6.0rc3. + BUG 7841: Explicitly pass domain_sid to wbint_LookupRids(). + BUG 7888: Deal with buggy 3.0 based PDCs. + BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb module. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8193: Add new command 'enumerate_recursive'. + BUG 8195: Make rpc client code working against NT4 servers. + BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes" is set. + BUG 8213: Fixes in idmap_autorid. + BUG 8214: Fix smbd crash on printer driver upgrade. + BUG 8215: Fix Winbind unix username lookup. + BUG 8216: Make Winbind returning correct results with 'sids2xids'. + BUG 8217: Do not stat-check the share path in 'net conf addshare'. + BUG 8219: Fix SMB Panic from Windows 7 client. + BUG 8224: Fix the build on FreeBSD. + BUG 8226: Use c99 initializers which are supported by old gcc 2.95 compilers. + BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd. + BUG 8231: Fix crash bug in 'net cache get'. + BUG 8235: Fix smbd crash on startup caused by migrate_printer(). + BUG 8240: Fix Valgrind warnings in winreg/spoolss code. + BUG 8244: Fix copying files larger than 2 GB to a Samba share. + BUG 8247: Fix Coverity ID 2582: FORWARD_NULL. + BUG 8253: Fix Winbind panic if verify_idpool() fails. + BUG 8254: Fix "acl check permissions = no". + BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes. + BUG 8262: Fix build of vfs_commit. + BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl. + BUG 8264: Fix Valgrind bugs in svcctl. + BUG 8276: Close all sockets attached to a subnet in close_subnet(). + BUG 8278: Fix smbd panic when CTDB is unhealthy. + BUG 8281: Fix build of examples/VFS/*. + BUG 8286: Fix smbd crash on premature end of smb2 conn. + BUG 8292: Fix a major architectural flaw in the SMB2 server code. + BUG 8293: Fix log file rotating in SMB2. + BUG 8304: Fix uninitialized variable in error path. + BUG 8305: Fix segfault in nmbd when using 'smbtree ...'.. + BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all locks. + BUG 8310: toupper_ascii() is broken on big-endian systems. + BUG 8314: Fix smbd crash with unknown user. + Mark 'time offset' parameter as deprecated.- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289); (bnc#708503).- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site request forgery; CVE-2011-2522; (bso#8290); (bnc#705241).- Fixed the DFS referral response for msdfs root; (bnc#703655).- Fix CUPS print job IDs; (bso#7288); (bnc#701257).- Make use of the actual library version as part of the package name on post-11.3 systems only.- Fix winbind internal error; (bso#7636); (bnc#659424).- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION; (bnc#705170).- Specify nmbdsocketdir at configure time; (bnc#700953).- Build the tdb, talloc, and tevent libraries ahead of anything else.- Update to 3.6.0rc2. + BUG 6911: Fix Kerberos authentication from Vista to Samba. + BUG 8166: Don't lockout users when offline. + BUG 8200: Add support for multiple writeable ldap idmap domains. + BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer. + BUG 7054: Fix X account flag when "pwdlastset" is "0". + BUG 8144: Fix setting timestamp when touching files with CIFS clients. + BUG 8153: Fix setting up getaddrinfo on IPv6-only machines. + BUG 8156: Fix 'net ads join' using the user's Kerberos ticket. + BUG 8157: Fix parsing a cups printcap file. + BUG 8175: Fix smbd deadlock. + BUG 8189: Support shadow copy display over SMB2. + BUG 8197: Winbind does not properly detect when a DC connection is dead. + BUG 8203: Winbind needs to reset the DC connection if an RPC times out.- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).- Add "winbind max clients" parameter to remove 200-client limit; (bnc#697461).- Disable logon cache for password lockout consistency when running in a cluster; (bnc#694836).- Fix logon of AD users with many group memberships; (bso#6911); (bnc#657026).- Don't lockout users while offline; (bso#8166); (bnc#692607).- Update to 3.6.0rc1. + BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open. + BUG 8112: POSIX extension opens of a directory are denied with EISDIR. + BUG 8132: Fix filling printers location field when using cups. + Remove fstrings from client struct. + BUGFIX when converting from safe_strcpy to strlcpy. + Fix off-by-one calculations with strlcpy. + Ensure we always write the correct incoming mid into the share mode table entries. + Fix the SMB2 oplock showstopper. + Convert user-specified domain to uppercase in libsmb. + Fix Coverity CID #2302: FORWARD_NULL. + Fix cups_pull_comment_location(). + Fix double free of cups request. + Make cups_pull_comment_location() work again. + Fix potential crash bug in display_print_driver3(). + Properly clean up in pthreadpool_init in case of failure. + Make plaintext session setup async. + Reduce fd load in Winbind children. + Avoid a potential 100% CPU loop in Winbind. + Tune broadcast namequeries for unique names. + Properly deal with exited winbind children. + Fix dup_smb2_vec3. + Fix return check in nss_wins.- Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).- Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).- Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).- Package static libraries with 0644 permissions.- Add Requires libtalloc-devel to libldb-devel and libtevent-devel.- Rename libldb0 to libldb1 as 1 is the current major version of the library. - Add libldb1 and libtevent0 to baselibs.conf.- Don't call the suse_update_config macro before building lib ldb and tevent.- Update to 3.6.0pre3. + Listen on IPv6 addresses with IPV6_ONLY; (bso#7383). + Fix wrong output in 'smbget'; (bso#8066). + "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or vfs_acl_tdb module; (bso#8083). + rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null; (bso#8088). + setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099). + Fix the build of 'smbget' on HP NonStop; (bso#8106). + Fix build of tdb2. + Correctly detect and deny symlinks anywhere in a path (not just the last component) if "follow symlinks = no". + Fix timeout in rpc_pipe_open_tcp_port(). + Fix the build of "--with-profiling-data". + Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470, 2471, 2478. + nsswitch: Add 'wbinfo --lookup-sids'. + nsswitch: Add 'wbinfo --sids-to-unix-ids'. + Fix smbd with the async echo responder. + Fix the build of vfs_gpfs.c. + Add a 10-second timeout for the 445 or netbios connection to a DC. + Many pthreadpool fixes. + Fix transaction recovery area for converted tdbs.- Add PreReq permissions to the krb-printing package.- Remove _libdir ldb and tevent from file list. - Explicitly state not to bundle talloc or tdb while ldb and tevent build.- Always use the actual library version as part of the package name. - Exclude shared python modules.- Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).- Update pidl and always compile IDL at build time; (bnc#688810).- Update to 3.6.0pre2. + ID Mapping changes. + Implement SMB2 support. + Add an Endpoint Mapper daemon. + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Quota only shown when logged as root; (bso#7080). + Fix printing from Windows 7; (bso#7567). + Retry DNS updates when connection to one nameserver has failed; (bso#7690). + Unlink may unlink wrong file when hardlinks are involved; (bso#7863). + Fix 'nmbd --port'; (bso#7875). + cmd_spoolss_deletedriver() returned without checking all architectures; (bso#7880). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix cups pcap reload with no printers; (bso#7915). + Fix bug in chain_reply; (bso#7917). + Fix problems with "kernel oplocks" option set to "no"; (bso#7928). + Fall back for utimes calls; (bso#7940). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let winbind try to use samlogon validation level 6; (bso#7945). + Sgid bit lost on folder rename; (bso#7996). + Fix getting username in 'net rap session'; (bso#8009). + Fix inode generation so nautilus can count total dir size correctly; (bso#8010). + Use jenkins hash for str_checksum; (bso#8010). + Add explicit configure option whether or not to enable dmapi support; (bso#8033). + Fix smbclient segfault with Cyrillic netbios names; (bso#8040). + Fix file creation on OS/X; (bso#8042). + Add "--option" to 'testparm'. + Fix crash bug on smbd shutdown when using FOPENDIR(). + Ensure we don't return an incorrect access mask. + Fix bug against the new Mac client. + Fix leak in error path. + Fix error where Windows client spoolss returns WERR_INVALID_DATA. + Fix a segfault in the krb5 locator plugin. + Enable sharesec for registry shares. + Fix memory leak in "security=share" and "force user". + Add "net idmap check", a check and repair tool for the id mapping database. + Add new 'net idmap delete' command. + Fix segfault on missing input file in 'net idmap restore'. + Fix 'net usersidlist' not to skip every other user. + Fix potential crash bug in spoolss_PrinterEnumValues push path. + Internal restructuring. + Don't wipe out all printer drivers when only one should be deleted. + Fix winbindd_dual_pam_auth_samlogon() for NT4 domains. + Fix memory leak in print_cups.c. + Remove duplicate cups response processing code. + Follow force user/group for driver IO. + Initiate pcap reload from parent smbd. + Reload shares after pcap cache fill. + Fix numerous Coverity IDs (2041 and others). + Fix a memory leak in check_sam_security_info3. + Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable. + Make "net sam list [users|workstations]" list only the right things. + Fix a potential memleak in secrets_fetch_trusted_domain_password. + Use the right credentials in check_netlogond_security. + Add support for AF_NETLINK addr notifications. + Fork multiple Winbind children per domain. + Fix a deadlock between smbd and ctdbd. + Add 'wbinfo --dc-info'. + Make "nmbd socket dir" configurable. + Fixed valgrind errors. + Fix a memleak in receive_getdc_response. + Don't grant SEC_STD_DELETE always to the owner of a file. + Fix segfaults on addrchange errors in Winbind. + Allow machine accounts as members in groupdb. + Add IPv6 support for the endpoint mapper. + Free unused memory in the rpc server. + Fix possible segfaults in svcctl server. + Fix possible segfault with client_id in rpc server. + Add a 'svcctl shutdown' function to rpc server. + Fix a resource leak in net_afs. + Fix a resource leak in smbta-util. + Fix possible resource leak in net_usershare. + Fix possible resource leak in 'smbget'. + Fix possible resource leak in 'smbfilter'. + Fix a possible null pointer dereference in smbd. + Ensure we send the direct levelII oplock break to the correct fid. + Fix private libdir and codepages paths. - Add RFC 3454 to the vendor files.- Fix idmap_tdb for big-endian systems such as ppc and s390; (bso#6901); (bnc#675978).- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).- Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.- Don't crash when publishing a single printer; (bnc#643119).- Carry error status in printer list IPC message, do not refresh printers if cups is unavailable; (bso#7994); (bnc#675478).- Define the libwbclient packages ahead of packages with a different version.- Use %_smp_mflags for parallel building.- Update to 3.5.8. + Fix Winbind crash bug when no DC is available; (bso#7730). + Fix finding users on domain members; (bso#7743). + Fix memory leaks in Winbind; (bso#7879). + Fix printing with Windows 7 clients; (bso#7567). + Fix 'testparm' return code when EOF in encountered in param name; (bso#3185). + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Fix "Your Password expires today" message for users of trusted domains; (bso#7066). + Fix maintaining of users' groups via UsrMgr; (bso#7262). + Fix 'net ads dns register' in Windows 2008 R2 domains; (bso#7356). + Raise debug level for "reduce_name: couldn't get realpath" messages; (bso#7409). + Fix updating the time on close in vfs_gpfs; (bso#7498). + Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'; (bso#7594). + Handle Windows 9x adddriver calls without config file; (bso#7641). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix memory leak in the netapi routines; (bso#7665). + Store unmodified copies of security descriptors in acl_xattr and acl_tdb modules; (bso#7716). + Fix incorrect unix mode_t caused by invalid client DOS attributes on create; (bso#7733). + Apply appropriate create masks when creating files with "inherit ACLs" set to true; (bso#7734). + Fix "dfree cache time" parameter; (bso#7744). + Fix a getgrent crash with many groups; (bso#7774). + Fix requesting lookups for BUILTIN sids; (bso#7777). + Fix smbd crash caused by expand_msdfs; (bso#7779). + Fix atime limit; (bso#7785). + vfs_scannedonly: Switch from mtime to ctime which is more reliable; (bso#7789). + Fix copying files from a SMB share using Gnome vfs and SMB signing; (bso#7791). + Make Winbind recover from a signing error; (bso#7800). + ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb; (bso#7812). + Fix "force group" with ntlmssp guest session setup; (bso#7817). + vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835). + Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841). + Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842). + Expand the local SAMs aliases; (bso#7843). + ntlm_auth: Support clients which offer a spnego mechs we don't support; (bso#7855). + Fix 'net ads dns register' in cluster setups; (bso#7871). + Fix 'nmbd --port'; (bso#7875). + Make 'rpcclient deldriver' delete drivers for all architectures; (bso#7880). + Fix flaky Winbind against Windows 2008; (bso#7881). + Fix SMB session setups with Kerberos against some closed source SMB servers; (bso#7883). + Fix stale lock in open_file_fchmod(); (bso#7892). + Fix sporadic Winbind panic in rpc query_user_list; (bso#7894). + Don't set SAMR_FIELD_FULL_NAME if we just want to set the account name; (bso#7896). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix connections from WinCE; (bso#7917). + Fix opening MS Powerpoint files; (bso#7940). + Fix endless loops caused by inotify; (bso#7942). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let Winbind try to use samlogon validation level 6; (bso#7945). + Revalidate the pathname once re-constructed from a root fsp; (bso#7950).- Require a particular library version even if the major version is part of the package name. Using the same major version does not guarantee forward compatibility.- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).- Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Disable separate build of samba-doc for post-11.1 systems.- Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460).- Do not require a particular library version if the major version is part of the package name.- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems.- Abide by print$ share 'force user' & 'force group' settings when handling AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936).- No longer force activation of the cifs service on post-11.3 systems. - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems. - Move the cifs init script nfs dependencies from Required to Should.- Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845).- Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842).- Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936).- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).- Don't tweak with baselibs.conf during %post if not present; (bnc#652620).- Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).- Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux Enterprise 10; (bnc#652620).- vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835).- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620).- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620).- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620).- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620).- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).- Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620).- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).- Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719).- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4.- Add the _build_arch at the end of the vendor version suffix.- Provide and Obsolete samba-gplv3 to replace potentially installed packages.- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4. - Do not package libsmbclient and libsmbsharemodes.- Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578). + Fix "admin users" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541). + Fix 'smbclient -M'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba "write wache wize"; (bso#7715).- Let startproc wait for nmb, smb and winbind pid files getting created on post-11.1 systems; (bnc#520036).- Include the reviewed french translation for pam_winbind; (bnc#499233).- Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755).- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).- Fix baselibs.conf for libtalloc.- Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218).- Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304).- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS.- Complete fix for trusts with Windows 2008R2 DCs.- Fix authentication dialogs when connecting to older systems; (bnc#632055).- Adjust position of conditional ldapsmb %package and %files definition.- Create the /var/run/samba directory on the fly and package it as %ghost.- Fix preexec scripts; (bso#7104); (bnc#632852).- Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient pkgconfig files and BuildRequire pkgconfig; (bnc#632770).- BuildRequire python-devel for post-9.3 systems.- Only create precompiled headers for post-10.2 systems. - Remove mkinitrd scriptlets.- Add vfs_crossrename man page. - Call make basic and remove conditional proto target. - Increase libtevent version to 0.9.9. - Remove wbc_async header from the file list. - Remove remaining cifs-mount pieces from the spec file.- Fix printers not auto loading with registry config; (bso#7280); (bnc#617153).- Update to 3.6.0pre1. + SMB2 support is fully functional despite managing quota using the Microsoft management tools. + Internal Winbind passdb changes to use samr and lsa rpc pipe to get local user and group information. + The spoolss and the old RAP printing code have been completely overhauled and refactored. + The SMB Traffic Analyzer (SMBTA) VFS module got added.- Intilize workgroup of nmblookup as empty string.- Fix net ads join when using parent domain users; (bso#6364); (bnc#630812).- cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246).- Fix "Too many open files" when trying to access large number of files; (bso#6837); (bnc#619787).- Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends "raw" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with "sec=ntlmv2"; (bso#7517).- Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product.- Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935).- Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927).- Update of the SMB Traffic Analyzer v2 VFS module- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697).- Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via 'cupsaddsmb' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on 'net conf import' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via 'net rpc user password' command; (bso#7417). + Fix 'net rpc printer list' command; (bso#7418). + Rename mod_name to module_name; (bso#7421). - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler. - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423). - Winbind not working over IPv6; (bso#7341).- Honor "interfaces" list in net ad dns register; (bnc#606947).- Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049).- Enable the build of the idmap tdb2 module; (bnc#600822).- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.- Add "net conf import" error messages; (bso#7378, bnc#598189).- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).- Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in "waiting for connections" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it's own domain; (bso#7295). + Fix segfault if hide files or veto files has no ".AppleDouble"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix 'net share' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with 'getent group'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix "printer admin" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make 'net conf addshare' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316).- Add SMB Traffic Analyzer v2 VFS module.- Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868).- Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215).- Fix tdb validation for offline auth; (bnc#587014).- Fix "printer admin" functionality; (bso#7255).- An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642.- Ensure to have a valid talloc stackframe; (bso#7251).- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).- Merge missing pam_winbind message translations; (bnc#499233).- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package.- Fix join of Windows 2008 domains; (bnc#567013).- Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683).- Fixed libldb.so link in libldb-devel.- Fix argc handling in net_share, making the command "net share" work again; (bso#7203); (bnc#584253).- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix 'net ads dns' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).- Update to 3.4.6. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first "uid" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for "ldapsam:trusted". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when "ldapsam:trusted = yes". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when "ldapsam:trusted = yes". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.- Update to 3.5.0rc3. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix 'smbget' error status; (bso#7069). + Fix build of 'smbfilter'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new "nmbd bind explicit broadcast" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix some wrong newlines in de translation strings.- Take extra care that a mount point of mount.cifs isn't changed during mount and don't allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).- Don't invalidate cache for uninitialized domains; (bnc#538923).- Signals are processed twice in child; (bnc#538923).- Allow forced pw change even with min pw age; (bnc#561894).- Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).- Fix enumerate domain local groups for primary domain; (bnc#573813).- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).- Build libtevent and libldb and put them into separate subpackages.- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + 'net', 'smbclient' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing "badPasswordCount"; (bso#4347). + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202). + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in "trusted_domains"; (bso#7037). + Complete and improve some German translation of 'net'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with "dos filemode=yes" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments. + BUG 7043: Fix crash bug in "SMBC_parse_path". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.- Free unused memory after a packet got processed; (bso#7020).- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).- Update to 3.5.0rc1. + BUG 6837: Fix "Too many open files" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when "mangling method" is set to "hash". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the 'net' command. + Fix up a share type translation and translate some more strings in 'net'. + Allow to call "pdbedit -N description -u user" without specifiyng "-r". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in 'net ads testjoin'. + Add some German translations for the 'net' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone 'make installdocs'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix "UID range full" error in Winbind (bug #6901). + Fix multiple LDAP servers in "idmap backend" and "idmap alloc backend" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display "none" in 'net rpc trustdom list'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix "Too many open files" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix "map acl inherit = yes". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with "mangling method = hash". + BUG 6967: Fix 'net ads join' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix "mangle method = hash" truncates files with dot "." character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).- Add BuildRequires to fam-devel; (bnc#564260).- Prevent winbind crash; (bso#7014); (bnc#566119).- Fix processing of open modes in POSIX open; (bnc#530683).- Add baselibs.conf as a source.- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: "Too many open files" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on 'net ads join'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing "strict allocate". + Restore "fake directory create times" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate "write cache size" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.- Give the user a chance to change password when password will expire soon; (FATE#302414).- Rename smbfs init script to cifs for post-11.2 systems.- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165). - Simplify the winbind package %pre script and suppress stdout only.- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring. - Remove using_samba from the doc package. - Increase major version of libtalloc to 2.- Fix kerberos refresh chain; (bnc#546162); (bso#6872).- Hardlink duplicate files on post-11.1 systems.- Add BuildArch noarch to samba-doc on post-11.1 systems.- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a "hidden" parameter "share:fake_fscaps". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if "aio write behind" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don't fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.- Let smbclient show special characters properly; (bso#6829); (bnc#544204).- Don't fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).- Allow winbind to ignore certain domains; (bnc#539506).- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix potential denial of service; CVE-2009-2906; (bnc#543115).- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix unresolved home path; CVE-2009-2813; (bnc#539517).- Don't overwrite password in pam_winbind; (bnc#515444).- mods for winbind (when used with squid - ntlm_auth) o winbind adds group 'winbind' o permission 0750,root,winbind LOCKDIR/winbindd_privileged- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified "net join". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix 'smbcontrol smbd ping'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in 'net usershare list'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix 'force user' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix 'force user'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don't require "Modify property" perms to unjoin. + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with 'passdb backend = tdbsam'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the '/' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to 'net'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).- check in .po files for pam_winbind; (bnc#499233); (bso#6602).- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).- Update to 3.0.36. + Fix Winbind crash on 'getent group' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on 'getent group'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it's an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don't install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don't try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build./sbin/ldconfig/sbin/ldconfiglamb22 15342435004.7.8+git.86.94b6d10f7dd-lp150.3.6.14.7.8+git.86.94b6d10f7dd-lp150.3.6.1libndr-standard.so.0libndr-standard.so.0.0.1/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8592/openSUSE_Leap_15.0_Update/c839827f48bbe3a7565d6158083b5a4b-samba.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b600785373ec67fa343b5cad3f953e27a8544f4e, strippedPPRR R RRRRRR RR R R{l͸kvEautf-8e7062f41fa2ff0185d3f1df5ef19c2ad652bf77e83acf17ef069e2a50e164a3d?7zXZ !t/B] cr$x#9f9d MucФ6/*&} >J^3R{lL#~h`h XS1K׻ VdNb׊}`( /aDfОT[y'ja?(ͫCξrij\fmq42>w|龵81,4$]1~Џ%M:&YfE[Aqzo %+#lݗfΠ+m@ IQ(t5wgxc:w{֫lRSy5s,Q4|C5oO*[yq9=2"w }dۻۊEXL~F6+ ݺQV+@m+5YSKx5#I ŤYˠr:&t < a9Ty5iL "sSHE@g4栴jL5 pzs$޾jmIE*͉!!g;O9.-'`mQDžp`+,5Wf"z`D~e^Z΁P L|/O;9JAw}E>%2Bn꦳QiG6O[T)"J{鬜S_\)}RgOG֪ ʮ7KGmpwb#[,hlMR3b'$l w`5aRnAf/R'3.7񀷚ETOIA3 `3Oh'sÄu {쥩5ggb 0"]V5fu6Ȭ7afI-~r5";mpۡxʴC;k2U5l G]jυ.OQ[IEbŸ­ %SJ+Hknd%׽Kg=Z2A4]ptt}GuqްEL |A55f5+%{O=)> _00?'?ETߢs1yTl?yDqV(=!M] npr@\&h9S蘥%dyCgYRn.QVLm1J.7fwLvCH/Tm%Jg| !iG.ZRNqyHp_:Ӿ$8 TD&|M乼h" sV$RN*<\fwUAamՎT["+xpjBKY_υv K|ZkS z2iS*h*! ( `:x딅͂عE4e@D?2 i &}oJz7jNX#cOCea^1fSFQr].vb$= (=5L078giV N'GF|-e)ZRk=(a/邹T wg@[|b,t)VH`@Ci&fۯ<|Zf5ʨ̧q_"0 Yh: 8x b'}q .ǰ`Uw pECT-7W2(<Ƣߠ"E-O;v󗥽gkrZcd} GK )K@ ±Gi[gVZHT]ʺeNIn7奔Ȣ)%-挔dXՉk{s؊XTLkk-G;;Hü<"a ת GD4K6uL ׽x/OZ7v3T^bxT/bY Tz4(fyΟ^7Yzًb^䟗 |{'кODc봐tԌBnot'0$rGOgt;7@Kn-;<3IB:_w >v/[3kc%ngZx]cClqWEZud4&Tƞ\!Y&)d" ͕KMVЫY M3+|;k꾆m+S&ٔTefRV0,jGqF5SFTks YAQ!up6)xaPStM_gagp zO˫im>!~i8kc_ V3jSz h?{2it_V!+t[fQdNpEt/;3놡+LU TcKCVAy301GC6@'^O@ .ۃIaUZ.1J~i2$5j3+4܌ )'ӣ =fӎYm*`u4LS` 5/o/n"K6992sQ<8`d7ƴoMLŞ5 4 @dѠk']84j)H-WGˍ II*W iz=MnFLERl=l0LMڡf9J^dh BWMױȉtL yp$UOhg H&8,L_1à3-ckt9֜0H< 0H0D7̠'xMđK!mY5z}*3Ol430v@<ߪjMQ9dv32ɀW~I׾&~{ClC^(!UKk:n4^w}bu pc%e!l1 Hv4wp^&'QyRfP9cjEQ+.5RZގqډ~Ty;JLгeDY¯eG.DP.Yh jKBkOx[W#|]vY. *]/#ۍ %=C.V3|Į_֯Ji "P|o(??OqAϻ!b7x' PaX*L]nwd]*Ьԅ Vf<)N9:3 6^s! S?M0ڼU݈]?:+u"pN8+^΍ l'|Q9p\җP)bxcuL0cp{%]Hke %"S}>sn3`jbkX=u2Cgo?,,,Hs0o.KT㿲ot`;jDT9\DPUMLYJc@Qsqd̩ZHÜhvh++aoLll4A&\qM$H8J`h6jsD^褫=[p M~glO*T/uBZuyMva7n T;udC. w`K2B|c# |"uХv%}>l)U{k972se%eAP&)&Tg$2PA!M K(c ٮȤznIYƍٽf<=:[30F|δI,UXk >;Z.@k0vVsUTxJlIf͠9{Kpg#yCСuw!>QwS,( ô"tUp|FV:J $u 7 k5| PQ@\*MVaNRp'y<_W˒ɱd ESpnbd/{ԵF:.X@N2|U޲5)G4{{[v$zh@(T^o?h32{"礣+a羁*a9Ě7U3@7ApR웲fֽr=ku+l)Bֵt*16Ml. 1^u!9YNEַa~Qkyg*4.Xt̶J#LY?ᕧN bwg9ū2J73\ܝuDc$1D:#~o=~/=9B|91@[єPZP@W{ n7BR_x(LZW襚iJx+cacqmt)-dQX2 @q2fUb [B+ã?.:@'d芫yY.zxOj2V9WZs:Z}khYm: ʐƨctJ0?jMzv>rx/.ͬ,)Zh{f{9UQ`buB\;iָ\+L/;ΨUQ'H?,q7.;GEZLCOEC[2z౲ju!o;>xK{熈 ra|:pC5 rh)UCL!:~Go̅$5szHf=[x<4 &r5#0HcB;5=d"-}dqkf~5G6ٳX "懮LXM2{1g/zATij6Wȁ_!{ ^ =d|m̢B rvAT)]C{?E*"??HhN+&m4НVg_O(0|0?VcsPHF(x=敽dy\"-@hXRDpZ{os5dîgr>ba*9}6#Z7#*PԻ^~.ef+p0>kPtSבy=@_-eVn.[] x"e˫6)EzNW旸0bt.wMZlf,ڱCbN|7"$Mr;Q@ҴIfğIő'cٛ>'KΡA>^ q]nýag\1-1V%J B\xB0tD,zTh3oӉҎNq/Y^~a I MbUXCc[B, }%Uƨ>p+@_+>9(6Un ]9;unpf%_uSY(SiXk] J&$s󙉼r ]Uw]*./6iøѣ/09 E|rݵ@D^6&}l(bS@ϤOR̮wd !B3[nhK+ ҽޝ +EnZF*tQp[Z[Y=x*iH@?c:~bBX68;ΦjdVtDNnPX>DsY5s}fq'dq0,&h*%s_t<?{z -Y\ 8Im*K4 Gn+m|-c˕UOv7id։J4gzʮQd[OSZS|N9IҌeMp1y:6dm%A`!(F#\Dlҝqgz!Vͮ]p5:I=9]RGr<;"ǁOчqJ"CKff>xYv0+_b b P})[d_UU-戮 ՠ-[XhA2pu2@+ ,tp372T~9x:&b8ٵ]QDyeNRjwoNja}}UR`}e3V׳d>ÌJ8$\ 9wʝOǠ!;O#|_I3vH6rI 鱙iiD^yגjU83J5/ 蹍]ʊ+ *4wZrDk䫼 %C!VfMJqXc|Z,NysS3īkf;~>@opihM x2S+1}l`K$cڻq% x@~(|(Eʓn9•W*D+N;}NSu`Tz1K˶09I#dq%,|.=omd.^AbPX ~lz=F4ͽfz2[ޓV);'RX8 !?} 7Gv )@ ^FRߦOPi]kqagAg6CNSoia8jdHeI? nظDA,U+uX>9R I8.}">:vpN%i}G!+OQ=C[ -Z}}*\pAŰrG됑/mw e&Ιp(\Ȳ8hqfI$5\_%n5F8M//!2c7D b~'*5Ф:\ejaM?8gG0? .ӰD $3]ov?_y҂k l/Vᒏ xp!ޣV?zxPзBJ2\NrdN۴zM fߧ|]Xܺ2/d!k2.I>, d˺&@D'EeHZf"H&uxrG; F~cW4bhS({&ߒ@\ݘoxVθ&g7~ry?0 :yw/>M?4_&Tqx8'vctN` ՚ٺEkK!Z`E_51>wv(-MUk8]UhYl_Ye ڃ>=:L.+&]Q0 vSFExCz$"mG0- Ks :͂تLkqu}Q?yQm]ڧ5iEEѧ(s*7_SF"dOg[<=h{^ ZT&v7^ }_33M@ේMjpw=d#^12¿eЅ]C)np bf5*UNŬU:&:o65 CYW]-QH)h<1 mtF5u{Ï["N k!l~qVBRzC& KMyTH誕 5aNm{cXqlMm$3ߵ9#W8Rw3lvL+}nD2BxS'F쇴 7s媯rG'ʁ . j;ODQPOןyކRKj땨Ey=(EEB EgqFg{ÓY {NS#@Ѳ{o.VG=ud _0Ɯny e6QPyK }Aai3eEJιvs93>N).9ĩPOŐㅍ==0` / mӶ(lP{} w[ u(G9-\:VɶHI{~&CЕȯUf D!Z,co++uɀ(I}-\yUq}XO%U|*I)rzo&}߫a~xM(07/vڠh&}@j;x[{Gk.l/9 ;ue\ ˧jjnūqQ=O13bƖBqK4`}' y sUE^pV[ؒ2~^aVma;x>JmN* Jӛ|Ըggu8߀?HejHNt{lC ߍk(_, A9]X2vk;~^N;c6띤H٧p\~lOS1^ d@ǎ`Wa,S{v)dDA1gSmRPm~ߍ| ?|}]T@HL`ov.8qҋ|F, E "Gu`&jxG{pc2yLGx2w[ZaybvsF뢥pنx`ebEh(wO_*D1-C s(,{P/IM~ЀcIOQ^)tG?<]ywyFnr魄*eKMQcqaǝkC }Ԅ k8z6%~H)Q`.Z6a5oUhRjׇ*nZG #xEF"UI#w`At` m<a}U€0(#zUA0(l8Kt0{& *=k:spYrn*mC\3Zʦs$kXZJ>E-ɇhymWj҉5DF ԇ֟VT~T&s?YQ4Jcj J{P Dn@~B&ϿY!:B]O]h**|q5>pHq׵Սp.]JV Z l F̗A}=ĵw?o]F p%2SJEQ.LMRYVڌg7TAMMqb]u>qHGw}]jҝ$]QlV ̱69am5y&sOˤ^U+{O,WN}:9-7MS,M;wK(CFPXK=.*Op6qȮөc $FjY| 7 Ci1A;ٶ9(=s>#lu7F qK`-êiBVeP&G(ɺPt2${٘ʮtam`FLdU!rZf&23>Y+j.~{saO3D8%s9}}x"!j-A >Փyo5M SB.YJU_1J6֔8E*>}* D%݌PX`| u7rhEltL. o*Izt6Bbeٍw[ wby6BAErQ 1v=}w(wP%ǒr (iY6&b(/gD-Q7 fSkR6=4Lh3n:o ?)}6 ;]׬W>~0GJnTJ$ޥaܢ|PX8{^ s!fo&%)a\ |]CN$ ž m%\=Iib4xWJdG],{m@$G\>+s:?$>M5}˃#NeC0z_o_^t08,fwe.ĖL霎^^ݼ:JF ${M4$sp>4/P$=:_ZkAI~%)wLl\>B0!% \Kx WY\Lǽ`WD`TVbo?uw(TNm0.]z@?ꔋMsTw<Y[=_M!~ZuCҦ/pʆ>ňTw.>)(pKV. D81raH a ux뵅7¯QOVۡ֊720JϽbA*3L9W,σaɩMv_۬eO~~`D(Q>tL>p/B0Do̗ C_! glR״M,ўd[@ٲ ϺYK!E6|XtoD0)9H]. X%+,t0r㟞2e,Y6_2xYBp{RR=wjxG~LSn9xǘiOantH.NWJ]A=ׯD\HU~Qüq>-4D͗!O_DP\c:魥.y<]9Dz5rN}tiyOd7۰w!Yt(%HC_竸]/j>f: tEx̵VΤkcLA@<5N;Y.~m<=TW,~zVx߾w<*~g-e-8tk7&rN x-W:}>Ia/N):l*ɤBwep8,դ 2,M2d4c< [{@Aư^ ;Lo!1$/`YϘ n%"HEI4Ӹ k Zδ/#g: ee _n?]Ɉsrb](&όqb)3'c`34[OхX!Q@ ^A!F gňn=;e@-oWM@#T,(~ti k@s˝uw4:äXX2mCvQyq}l:T`ãg}/ u! m*՛n]"!,9?av!d;qo̜#W5ۗ | ԢR(;wdgG:$,$ -ߔܱ!YQǷSg 6FFQ%Iygk\_nQs9۔Ηj{1.ؽ,#}plPɪS`]GU|0,?9 {>I kЄEJ<. *U^QggI(]8|hOKzLw: gbt[ y̯ E;־[{C|F{m@wz!ڃZR&9qv/]e1#tzy1>2*cN </.t4FJ-ڒ}\Du};{60%z~ϬXo5wU4x}qkP 9< h1?9I^"&&HN怽O,j+RyҺሕp%Wzzd4\-]=sH=L(RDOgЯÉPm&XO&m^qI5]L7uH*-8n։@ȖὟ`SBM(F':k}ď_GtC҂*oo#>$jpc90/|D=̤@C 4~S9v4MKH,$4V|p|j}LY@EJ~&tdgivXT@GI]] ?+:Lܞ^s|b a[g=(n9\u6oԪt^,[j ˂e\% $'.)pFpo7$6Icnl2m#1j>Qlu3d{Y[:?N /ZBgű@ \H}s)cyw*PDۤjv>;eb)mz|Z#]CNt N >@ߎ˝G<.ж%bEe5"|!d:z' D=Z[z!!|- ӨjpB $^H W F2  c%h`):5k,󅟆}S8,'E4ɓ; ܕ6YQ{y}aiG2 ia.y-Lrh$jI;b۰s:'BO~lɩtHl?"{0zvvp J΍fqAupPb B# &p=? ETV:o]sYYUʂXtB`[@Xplq-G +=DW'ƑSP?]hJnל^e՚_ڥ干EnK U;D%KDUL8s v!p?Ԕ߹VK&t@Q'] . wҌVWǦ%Эʯ@͆?Uv a0GBf΀\jWVAZY2o >("_nw35vlt&5 a(ޡa2;3F1$*1y˜C̮8n@t eSD&N}im2jw`PyWdxT"B={kZj3Dz.:fn( ױ b_sB9Ωn14ej_wEQM'ԓ\[Gck}*gkkVmkKCd>t]rZSy3{ Y[D4e?l辙)bҦώxYT Nނ~D.cu!.UpLzg#k۱JE@{]$Ihzjo%ؓJKRrwCj~u}.o:FkI`q4YXXx V;xSұHmݻDM(P/ٸR#٭$wz=g[e2gt2䛷 o󋅢~#,Lk_h*|q R,>FG9 Ȇn0>o9ܷ2婓t&ͯ! Ι 8Dy ͯs'&<㌌ :oڻթռ);f̨gGB%<#]9]?Xe21d+i()&fpCPME!3s[WwIwL( ?l ̭J qJ|pS7e˚M}m +ν ! R8E;*lΟ|Am:<332Jx⺉m`P?I3 1|nh$Aj2^|JxGʲtLd;C7A=ENgeZGmU%]G|I Bd8f*|ZuÞ܋gˠ")خA[w  { HGL=n_{_P`Eo| ]ko%澿/c S/FI*g]^zy{٨mMC  VըT3!]o LK&xH8ʶQӹ3A: h/ٱm:6x,hͪZֶl:5Ţ&W4_<6u΄]7P4sh%A6fmZNvs_tjj~$:?} S K#m /#msS3ZequXw߷f2.sS?}_Ngh2>{?*`oxC#!}H>c_)!yt]=[8eV59䲾֞, .HOQ-G!+;S2__`d<̬+Щ\w 3$^!ٝz,hy<@ܻ-mhaآtUj3`dseYIpHwrmp:S{4y@*⚧{;3'k42TjŞSBkNN"DǬ0؞z^pl6$/A,.:gS#˓[ͦە4%:6f1,ۼ 8kQs6*Gc*q!]0LJ M/wJi9 i4~!QRW68tLg'fR꥕d`# 3Xf_v'V0v-]: [pToC.)\PP\KAV`X0wez RYԋ ;]wDsW2ŻI jI \EDL-Q'G$AOͦgÄl08I;i?̫ggNhf* 2-9P"u/lMLwb>Ym{S|孙s ) NO嬘#.pymM{d,tAZ+}) OXN(k\w-TLB9)),Jc+5o !1ﾓN 'e(aɔۮa~ ̏krʇIiv8؎l zJ$j08)dL YAPp.f&j$Ʉ )!t 08 njORNɪM,6nk.PNܪiDb NjvR a*ښ:M/:E q^Ԥ V *[ ŤvI-3< M79R>ЂM~(zL\t^wT?z>nH^ߦ|NːD>tɾ46|5@w @iC_ d pRVXе (u F/Tn­g^/1%lX]%SxTuY_&cɇ7ds'3g9֎sݓGGY "mhjGbU$rM&hMᛐRtғDRuN*ڗk;w" :;٣ 2rzA*g?{6 uS?Øژokw]h.JWq[LQv5b(=f%7Md\Aeޡo1yvX&(ڣ̾C^<+4A+yܞm/vf2Fw1;J{]@'uqj}fes6kYyq$4plc8#V=G)q)z(\8|T-1и÷ ZrH_C1+AgBO*ڨEuYsk'p+(C{C),*ͭscW_WΒ*g%C]y&~RI]no RoXKϞeU7'S2vl}i%C$._0c='GsGsș)/EKEVUmemdz[Zsq3H5oCP1\!~huJ -q ﵇{\CC Q? *vn!W濜cǀLX‚AԡG"(滥DfzF *&߿P"Q')F5KPۄYG]>)'D14|!/2V a0hF^ ќ U6bU<O9trq]B0yRj76_,JA0@҆( t<j%וDDQ@,NAF}~q0,^XZ[Am$D5nPZ ba'[Ax'@(!"xYC0f WsQA(ǹk6ą}7tشyzQ[\î+x, MÛ}.c){+X]V\?܋y|7vLϬ.~8 +a-[%>U`ȇmL)@N7/fׄ{Z"KڳcW4hhQw[\/@Տ.BbH9Ӻd1`OG3=eJ90{dfRzpzmk0cCtBAz{j]1g`bK=P+{ 9ޟ\ZG83I‡c􍖫g+אQPW\gw7bj  a*yـH0e_uup44&bj|Qn˼qB^g^ dhm'# pNaU'lic:eL N $*'[{βI.S)w ndR&hZ ԡ]3qslLS#0jwՂ 8Ml=Ns_ skf=T ĪEd1\`:)j]F sP>GȵB^ V*f:4c_>#=I':\yV9Dެ^) >p)V> VR `ɢa䂱02r"2>JIEi`MeY}P<ĆOoeg-.5C9+I7vn7jp7?Sul/ ^ا/@9:AJuܺ/! DbيP"R`}$!SX8 eyi6)[?ʓmawU a֬|XZ{)0ڍsblȉ;!.:cP]}^+Ed8n)`b|p7\㥊;8r8Z{j+ӿWFb[SeS&% þ^vI_tcQL#^[oP¼r#.2EVRO*sgtR@ß( H^k=q&VkkF7-#m>">fbS 1rˆ8moEE2u8Cr؎^rP$ dɺ 30( c*_)Mxy*z'5f'T״ȔH`@Ǽy'1 /LTU>QQC6Y$*r_'8y!]>&,ɩ6Ɯz5ؿ3 tML"ϐra &1.blއB"N%7v?z LBx|qmZuтH0MɆM`ҖpՊURw"(C鿺LY!lcߏ^bR33-m ltZ#IlZLס` ={j x7t1īɠ_RӨ %{S{C5vBl K0F:;[ppH9a!bPfisԚI\Ѹ<\d.5k R9P7R?Gm`h.-0eY#ybgH$x/](]7znNZ l&b'"'SG;NJckw`v)qQ(hRbj,-3OqҨ} ̋ %"9Wo/4oa7~ڸk3 A~:ݶ$ ;L}FTqѯ 5fBa1l_tnMz8Yz FXD"^ge|Zm_G'7wW6`c~iLVȓK%DWK]ɡ:K#ZWR'GU:w Jd20?  ɐ Y'\ %儊[?Nu#^nGL_dk+@|w2O<+ycY6#ݛ mu3(>@ DP6iq#+[O)+ 4.N<9(VMȩ33dn7xJYvN(Vߟ^ItjR%[H(#t=O*%;S+:lm.d39aנV6W[T a} m1MURp) Qy1 *ST$RUЍ5ۭ8=/I/u~{jw aYPy\| Aﾒ_"(33ǰ So<4 鐼$-ˆ\#k@Dc9ilڋ5Zoإ7\N "9 r5(H|o0ՎaӮ\LRZrf9{Vش>^J2AA pBc<|yp$e lյq{0G82DȔUp}3!TVǮ V:DK9iNi@'00 .N8=5G|j,3k̀EVϢGE=m%ִ9j!UL?"}Ɍ6exCz:ˊ6&r-߾x8[CRf&h&K.uz"d\t4abD\ 3e"K33?)1t. p Mk6]9:$ЕRbɬjYX!ʦ^5e瞇?](zRTJ%w?z.OXS=^khYc/QX#9R-WC鷿ow}[͕&w-MeW׵gCh֤C%G=dR 2"ho=)CjACi%p}Cу:8#Bf!eQJ;VS\F;QFN ߗYMǚr?"/oKa,$6 w-Tcf aiQт%ao|m{3Ɍ(3K_~U+Iv' ._%@,dc?!vm/ u#F6x2`1ѥ"06B'w3JT0]q鸞@:i$ @Sx}ɨJL5zB6Z`A}9/em6"ws /)fSZ7"p @ҩtu0jv l1z@H o?6i֝PCgɭ7ֶՋȭs KoW_wzjwi@|D$QAAx3] *gFs(x{LX1_I2?}{I9tr)lYsZ) ?[azF3m5::l3W(+9=`q;b ] 95uV&?^+,[Dy߼}H`\ܓ!,k\p>.Eɫb/N+@wl'|X@3~нX_[dBӶx# a4a&͎>,6 m;`ߢ̢~b)",ȧ':>6ШBҿPghXr忞\e%9џS3nZ͠oNR7֎[AEĒK.H1=3,$ ii>Za"+Xl%<80 v9JtdlGt> r976!RdmN G<U}OS8S?zA.}Y-mɩ%+)pY w`Y 2D= h 8ͬ8nX&BnQ]=)]K:1YTD©t(6@NFt: F|eb eLb"raFh0leT+( كy[ ސqlx|Za[NWȔF_ZDY_D$MXsxiY%,맸 ]soR8:!SiކOk"C$L3hv@`lr!oٚt:}/|_qй‘-;24\%}B]䣕_9Y$Pi0OSN ;}m*6w-^KmS#0r!%DJ'2cD(M.>1XpVy$NUnom?Pa߿{hQyb}TdR[r:@i!ɟ*J&J\6M%`XOOin<Ig9~qoCJQopcjOx׉ ծHu;}x Đ@;Kq2@h"!ZY.IvXPIC!'µOqMyXZqR.ff a? $]o_˲!&?[X<_b6ŭ`'8MaN#k{rBYfl H3'ʬ@yt+0 ?cj(G(@1{[X&(3Zw?Վ$x6‚SSn톈!ɺ 폕eNjλ8SbHŢYD%~Gj#Kwxvm,qvmA ـm kkp,q `^xbf^ 1 EU`kH-Q y%I@^i:jk[n7[UV_nM:4: oq9ضvρ |K#+Ə`3RuBޅF5iܼ5ttp̥g%/@k+j'-ֶ@>!Bd 5t ngMZ)sxOUͼKSL  z*9Sj\R݁q\Qvb~k**/\t{+~ӷUw^F&ItZmXTվߢIߝkBfU>co,~6Y-L,(3HEXIKZih0|CRP^pW]'2;" ZG;6|6g uS3TDosí9|J{>_:6FߐGIKXDqH@#X|n }$]3'!{90H$0]|b̃7=kTm؈'ƣ;Ep tz,9~孲lEs~yh#3~1G?ށK`8DkϝM5 u@xeN]3p'lHuR|YrnؓsnJ0Чz}0 R4f s`P~٩ hj~MĊut'Vl'`y4][J WIMcT 3ptn,2uSK{`d8p8+׃ šZrkqM1CmzU1NS:Ec;edT%UfyJ.P ww͵_odr[FY,Go_hc EA6pe. }Xw(SDzwEdk73DnOTKG{uŸJڀ1ԲIKx~e'v[t8ڕC*|=-,smD-Ӟ?4.Y ލ- $DyqQ:v``G"HNL5XVfa)҄3<;/u z1ib$1I2ZSL/^e_Wb8ZZ1D8r_+ABV3S\,ks=~vBQ?vV4G^ANO4(W];C6~P '3eӕ S5%Q 􋻄zi1&|J9%6T$ϐET5aaԏ{A"-̨+K:$&9&O|a_zpI9VFN^ SԱQyv`b^h1Y :"CdX8^0_ тЗ~ hd~݁WdX `\M[|Fgdm`ЊƮdp l%V*ǣU}^g 4 rFı|*7^hfK=jx I~p>|flxjO14 &%` Zn_z5*vlUw8NW~`woiy 8ę 50U9Q3`FgkXoyBXH#Njӯ>BeX,=x2a/LDUA/6l im݋m%l&C!:q .a2X*:͟n|>ҺnDԛ>A5,<уWywOK8[g.#vEx6y,ڲ؃ y8ij}r>jqʡ`A Y-|KA8$4U!>O6^O~V+Spa~l^LXfŌs:ᲃ#+PQ6y$kuE'*:kE5"If"{gyˢC+p4 )3g !!KPvkgL|ؒ_Z%mLR({Q?D>ޓxW ,ҺIeq+VX(Bvvg'g.dy2>%,k *zAJOx/}hG]$^˱V[&/!W#mY[!#HT-0GmH4V$V#b*6:ףfZ `LezT* tdf}9ֺry rm˷8䴖]:mUG0$U^ *CƍsE}48dIUxu=r+L{{I=Ӳ4j(tK@wS }Ң텆}θ8J٠|C|kO a\y#4T8zܹ1ۏVZP!-Uz.G RZzR6 U@.[j*}J()2iK} YA0^+c05I-Tao:V)$e&F_ A"u2_]xH}!Qe(oE41]o3܌l6HC;xD )M! $Zt^ܐh7LFϥxxӎvommE.*KeJ@ibn@s_xpU26'X^[@)Ԛ7"S$-ԅͅ6vTR,wڿ!3{rk tZ_urb]ϝb;0WϧԼe# \Yy j ݤuɔE?9ۦ4b'ڔ?PYCZ֎6!I jƤ1\kLh 6f-4鵢鞿e(Dɴ@ o8TݿݓިU&HU&Ilٵs[ÓuxU\K2K.Z:%l"H:>DREUPKJe#vkq"8TahuEBaM{]5zؼר;п }Q  ʹAg$Q ,{YMպrȴ_sȎUWs 7;xO`xD|j#Wl  D4NW # vOp9|RuRXa g?lr*& c X'p)`*HG lx$!ȯmy^/_?JJ!8M&sB>29!U/k`\e++v@ Oe:-}p= `VO 4vigqna!zH'|a|TX\X6unj5r6DE"xx]Gk4O%=Td^ qoƘ=0xc>l0@/a{iE؜^,FXw#հ!&KP\?Y)zmƺ`.©"O̝ckGű;\(V0{tzIgf(.֒t2񛵠b/J+JOxzuà4k aswqp䍺8 VϠ)0/֜k'Ŗc/. s6\ ) ]gx>&6FJmuk1(_:З)kٱ\/z7en3H~`Abjd~9~-Kf1W%b,\٤!ToAb+KjD*lhFn&Bjx7C}A)- ڬٸd^Gzqߵ_o͸\/P; f6)[]>APP +nv .8[[C/}(=5@fl2À:0=/1h:tDJH2ZʶlXz10&{,6@n9Au-糰b g ^u1@ ]CcNYʸ6"ݰ<'>wg}}#5U!9Z9(fOX*cgD#؀M  gsD,g5bAo731D4  vهLTIJV S.?-?+c @W~H,Mɥ q\)eP3@f4LA_D+qDG3F0$\iuEђb=lc'۱3Fv^vxبWxm0=b'ؗZui `<88Th8t&pÊ璗u{Xm>>V6I&l gK/ &a#][s&0B,nE: >wvKwMX;jHBֽ:q'8Y\̅vOfN^r x*z9AfWJ:V6a!%krlQs:~|18+(ju5=)üwn7,ﺪB$q\ XU" 7O~$/Rg(Ÿ5:U'S}b`,GDRPKf'(û@1̈ct;Q 3~3jZ3BC/Hh' j RCUPQb|1pw%L7Yؚ`yfҳtz_2N0^x;CFOqx_hE=P/ް! 皤TE F!咤%+Y!̹b]RV;nQA;6[5'Ӭo3ضOB_ QzBi`[%1|AkOX̱_M`]95gUcM) O{tm*ώ{k,PWH!\ֹt)\Ԡ$enjǴüdDrS{;uE,ݧݛ.XUyJPJ_wଢl]CuGڹcZ>ʿx7ve804@$kp0ִVT{<#jgg *fhrHwPq uʴFN,$2YJO4-Ql$Qyfx5翶v˚2j~WmSG?mV27g ߔT]p<JмB`m8ǝ"!ϹߩnJ>lrngVl|.sIb -iuʓm/%![YPEްv'Ia'[*!WzG K\gT_hN2Y闠ouOnUG/&D'pTaLeg~xH祻 QO&7%!Əyf},IYY~ee*8ht}?5*K $wtN>39D7DБsG\A˴KW%u]̳x=<>W:ГW#{\/,XjMyoX^VI'pNC0¿րZ錺HRD;! dz\DTSE;Q:j?.yĉg.Q.BQ֖iy@/9@8zZ/kf]#?"d;av vSG y\(6NG n9i`8 O*9bakz9gfC*(F_~4M =^ ocH#eC52&Pg 3iT9hcK1<0ԠKl {ЁLzB7pqVѱc^)!Rv⢲`8KIgBJ#M<>W@v+nՆ Diҩ2g̽vM,缳qiYr%;))A\ GSUi-Y*d؉TP$`F%*?c9wLc=9m/nޱ%(>#,_QG޷D\W. W~Ӄ4D-e8*%p1~pҶ$Y-2C6ݑLJ<H3FĚ8# F-3E}g|lԡD.^Ofauy`br\.Q-}B:3)$rI Yqxm&Q M5;oWYX4aæ w޻־ "D{V!h$:4cK5J^U$,?YFqvĕ͡DeVP`ykK}) ]*f{ս4_C0ި02eY8tk`Ȝ[5[awtu!3fF3LG*6C.6uVԐHgJ%JԢrZN+ P,q;IN{%-?+X ;OublwHrl">&uo2n>)D/o`Gܱ5,e"3N{[lzh}`INpbX  OŢk%l6C{@NF诟 ;kՖC0O0yi1jiXZ.di̿rBG a*ϜslO|"H0ATVwUjܞF_]/Ue(Ss^SAAC !i "՚U͞/C5wؖ.8\/}bϝX,an9J1 t4n+EDxz]?ws2F0Y!n7I&{\+JJ2ّUzg .-4sruvIPVd{ qEޱx\Xt~BXu ~xe]j_NX߰q}QНoe;,lCy~-apU-sgM;x?WV[=$պ̵O5?f]rw8E݂G:Ru|( p6KfO,>=bS5rf7g RXo`f?',L\ոCɀr8 `jvW;K?im3߫kW #2j޻~#i02nw@uDh0Mk‹nGYɡJLvZ%[ Z )i1' 4+su4H_aȫB*GWrxClɝZUT݄[.Xi[f´O&H9Ro@WBn3 [و} alH|WR%?9+Z\[V$`W6׃pIajzel22s[ތ"eO=Kġ.7Pws*-\G7sC%kYgiII*Gu'<|SvCʤnI}PtV:É?K=6e7VrkºzI[\J:y 4PgC^>C˩I.-g(U> x(s$V4ݷں)[:{Cyu깼yggd1qE ?LJ];{e& -&euoq9tyk_m!S8%j&lan1!lzHi"mtHC gǯH?j TZWli\Y9:=gcۊ@lrpḯGB9"3cXgPX=o3e!v&V1a'ݳd-pD*WVR^#=}e&w|d^ݮ@B^v6t%L"$|'TYrsrD@c 6="i|HAsGYD)o)[BE,V<d/fYĭ$u v+YPh8oiVkv*:po6gq@^C P`ua~`hA6,]l+>Q{}Wcԭ|6 O=6 w=]^%8_O_; wWg*vO@1J0ZnȔoNiܯcIߢHKyD{p`_Yk~˗^v4X^0 0Xܧ|n2E0}zlcf# GqFmg}v r+w5UFGWLV 8tăG K㦼Mg^/gKJ-d32>@;k j9P]qF8Li xXi (Jt$ 3?uuGbcDWs]9ƍS1(Isit,I;8 ./< _{lRd~oxm=In~в't+Dj~%h mDb0P@ҷ$?HO&זuWq"|;)LNl\5 1z;p.W[d<qp0N3ŋ eշO u*BxO;[[͏q۾AS?H$t:ڢ*ǒ! O3&dܓz~*5^!1}xgKP7wx)OPΔyITE!Zj1pw>̜D)/*Qw7zϠhi\=RkB: YhRI~rp/f7]@#9e%VSWhI+_o~m% N).VN*ӻ{]q;tG~щyH,ld[ƞ ;dݜn:6yLeOdhÙEg2އ:ucFqDK`|0hcQ&ȢY <)EYt)wn *q! Q/$'>Ahx0O5 )l&ϔes^ a)kVb"FUR:X_2ny_nbQS>DQU Lieq&ϴ*{pnEi~Ͽe4t St.`~RlY;'XvGA{*$UW2% Ԋc5CP0 9QnL(\4T92n>=1xW/漗vM X`OcC1kSD1L p o-K0٢9S>A]Òm YnT w #4uè_Rog+AE}-qp>B)0~@fi>> pfp`m5\|R'phEN踈nu/t=Ί@k:W_1Glu_`}UIᅛL8g'op{ZZb}{+!}U𲶑j*<}^EܝPb +򲙅I&#ZxP.!c[\֢oPzŝd;>ѣaI< u1tgȏe:W#u@$x+u^Dn0#?9t6% ߔ dЅ拕1|Y1^`kX+fVhh؎; >а io:iB 옢]3D"%ÌhGnʕt2C1etX9n(a5yAʹaƳa8[őhŠSkE4wf% ~/QRdo9?)znFBTr, fOpq'ǀ)C.Cx^+6) 轾mdXim4m*uEݱ7 8@{H$k.-|bҩjcSK'^ptx1/mǴsh`(ZUf~LM,-Lj:1BHR{@sڂh3-yV- Q<5(pfLkC aw3 afS='l* T|&ЕA4}A/ gA3'{l>S # 2 h:2Zw}@>3vVa?͆-zRz#ZT5 37:JtJ F[^Wn&.zߵ2DU/\c r] SFs(u&#^2n0`&>ǥw)owk<ڞB=tڋ(Q0ҬqӸ '3ߜEz 7W{i#*QNo.L ,S+ [؝g4i-d!>Wɩ(?.+VS"a@\e0|H!I& fr޷fͲKSB끃jH EmPK]bx|SyLuϚYT1vZ@ ۉQٴ_0sZ-H, ;R'vK߷:_zrot XwE^d^)Q g# ʎԿY"„Qec{kتP P_gܻO)=NvێJ L~/ D2&h7ms5߻i\+w@?7ׅE6-۬V5 ʜOA{hcM+-5Up-Ҭ'YdRyLD+8ubl" "` a̤֩Ie5GJ?~CRZ.32^rng" , 2jZ-?NfJ2u:8LPƘ]n}8cJ*?FjfTPٜ MP(:L.68l70/5Y"_0/1"SqWt Ry~l;SHiL8 o7~g`rÔq²VQl 3b(Gĝ;9nWZe9z [9,٦6ѨAxK+DCM 3)11gw5T]Y/pݰRaUscX<ʎ##xP3 b#p"X_Lq8|fv+J>&ыWSI kwV3~[ ّ8"e;6ńC8w!Rg(2UV˽O1<(ZaUBڻ>Fٌz(5;AP y-1 BE O`}բs/٭757MN( U}p}StK :aD> ]ȠM*;ڠ;D\3ȧ[*27{!~Ɔ7{~;8fV0e\7Rt!;89-ց *KK O! A7o\T?lwT7y^ZDnݶ~S."{UG<(8<7Q䨅TExNeC8Re*۝ojr !ljcۦlpyz0l^&t\ZoA}0:xƹ٧N@jYFzjKDcw#\y2`0skZH5W_PUH?t~q&\{71[MK<{ErگSgQTS>acKl Y/~d1%M]Kk[cEĆ6E*EY8r[]AVBu7Q&&e ϼL[) QPbff*H6z "Zj*HUb15|A<ɋYUx'':i43GgNM{ZrѺzd̟ 7yyANgusE//ޙLuUD(O8 vm`t]ׯgu+fh>ǫU! ~F `ɁH ̝@e ]Q |,V EIJ8g#X5/R`UҟPJH$% ila 4IdT=L15E-ssQA@KړqQ$:르HWm)4+#3=M%D~a5J%*?&lesf! Y0 - )P _w.՜('$Aw B c )Y& 7Z:)],R>r9=!ѱ33ͯ(Ce3Fq:$m{4},%96~ROj韢^;/Y[ۤuwUPrD@"+@0F|kP> v0ܫ l{|!>uLq{U'*M'%ǾEk0^G{E RBUf㇅sR&!|$j7?W_YS&D`2YИZ(/IG(!yG.e3kQ~C kg { pirپk41bpd΢ k;x65278< 1- ' \/ŕRԈ~O[$,n9舱1LM*0y̓["/jvPWrf^'|/q(ċw<ޞ׻/hR -n}V!F{WO pDBUNr SqxnǗtUʁވul@D۽ I=i۹ww{VGq_x7TrB, ©xc$;U}~c~lYRx#0 u2u#=S1ވ 5Q6NGowA V,9}]ܘ64A.<&6Ҷqydvp1k!FwVͶ0:٩`*Ʋ9w] ɔ]U5|Ba $&*Ağ'rVl ..< +/҃~Ԛ›/ZFxRǽQ#Dg cVwh5K\s{;Ρ uo0*nTe"] qkC)9)".s;APh4)X>Z ӊ_ zjܔUrXU~$IW^=[r#lCÑ*+T2cU+bh{zg#N}UޮRN;mJKnz}W@|K+DKQUq@V$ ꜐ D&i|DC6+D6kIuAߵwZMpP!sϴG 4y4# +B)98|_Ili[#riLZxo!|?7rEX{-}5bXƅ [4$ήak.IA\_'Wyq)N}EtKHEmj&ZKr(SO)8*/MƦl²3uz&z#̔ǭq*=矐Hk!6Ȧ"ZC"?S̫ܢ]!Q =(֏?kceϳ@{2zD&Pb1I/s'mRCG-C >z[mDuTMʤШ8_;nQ yyN`rou* <Cpێ4v'⒂ߨ5uqs*/1<#v ^ki3G"(vCnqqC91yXv &ƷcV4K׆KGvx%:@F"RU':ϫmd^$"Ha!ᅂcl*JDP?k Bw/*Կ|N[#54pž,?7zKXnK̩wkwqcMtx'$Չ- GlEr#=&$7퍛#ÝjYJ8W pG?~MC,儤} vg ^<͝?N**}~ Y. 6APJ&*_s3a_q\(3\Km>j!l>DMse)2%SX@0mo^Y{_7Z+4#%[S=2F;8 aL<b] G$A/uM`>oP ll?(J֟;١h~ җx)sNۯ@)HrS~+ 87m/*VXj8nޟ>/LRSy%C{1j{tbkob 7]ߣw}[rcDMH"Ұp(6vϾtulga)xM5Ҳ FlcHF:mt3Ykcљ\9vrkfTj\!4S.&*'6ãY*`'CJrj͂J|,^N͞AV4C[m,CL@w R׈.45(gI_2J} d$YΙa/) }0*8=1IThqT>E'F64.pFОQBε-*> _Çj :#phumޡJ1cvX(l(`FpSϹ4-̲\w(hB$ :B>pݙ4FY(K\ RR$odCQ`Vo |޾F"XǷᏝr,婧 ucM)JtRvѺm2wkRvGmѳ#R0n.oX d6 &l'O &4Ek]/Š#HgT?' }DE+ r7\ RPZt5BJﲦ?t~P(eƸ(/DthcQG|~/a ^W+S;*`Gfks3fχ/k%HEt&/P*?M9'atA,%&Y=_a]SdZd@!<]Sv麸Q>*JKlL39/>P1U `r m<ڵOL:S| ,?`7אz~\5ObݡQk26Z0`%DWb۩S(VǨ|ڱ1fxJ=1K7X]mI \ *AtD3=S<.|;b~ֱWÔND\Ug;PY;w$Z-c0SGyꩶI+Cvh1=)N7;`+Į&*]2d/JdddjϾNTt<5vFM0stkDǣiL406%t]~J!;8SF5}Yɱjpr+@K6zcq0w|?ݤr^ 6 L|c^5,$pU6MHsunGђJ0λ!lXљyQh/}`^+A֫1@Sƛ37qeI(XJfy0^.lH\Za=vtEtuPD1g0(_3_o*G=2R"޲h߶G5KB~dZjƷo3w]kԼ:a$z2AU &p_-Yot9Y:cAhG~K sf/y\"Z+V 66&Q*lacR#ޭ>]a>w)ݤ x*NY;Rai9$ Ml:K2ɢ ;++Kze6i\*s/w#`?>&ɨ㊻ d4.\1~U٫MqTZ A[] ٨"{Gyj<";_A.t?]n׭1 ܂)b2C¡[N[JUNA4qej^-eC)'f}{$v cdC7'ǫItf4g? g|)nkPVn(&O11 fXE*H AOVʋ&;~p!FT_¶/7* keAycTJZvlP셦uhttGa8U̱@ufQ$M9_D̔r{4B˪78ye eix?*ځ^_| _ l}a LodHo*e69@y欭=^ȐiC[,9 )W(wڤIit l)9yOڡZ?vn=g$/Ite=r,Z3< .f/(Kݶ7Y\wGf͂ӈ*PEoYSɕ^(9ᜏ0-5V%%ysw #/ocU$eK\īTM Tv-6nȴb :ϩp $Z4YO3;>)J!'QwJL&f*x|-AmEu#+~ZK jPCApr -+0 *[^8#fF 9Ngb!6

B}/{r)`AU Zs1 O\Xp,d8[abC3ӫ,RG:C(3]W $%|k_M~T3zl4P~-9­GHhg>YɠR243/ 'Γ\yth28LIV-(N+ }G;K4s }T:! DUӓw&>B%#|D;# jSb6[BAƆנZ a\55)O4>M9m FYfh_nD: P!cxipQv(Wu⟏1[3;/8K:L$i[/f9`S^{;W7O14.{ t8U|0c+_&^XsN?ǖǎ4!op6"_-U8,AOAYuW4?}=)&+T(N~`kR|Qje8ێ($/PvʇLToNL*eG1.FS [#S(0TfFl:Їkb-/-9_b+:)vC]Qu!doJwͮ'W0RiټXҙ%; K ^>ͺljqQz-8WB@[qe ~!spev[1d-C8" i<1zOe-83S&Ђ[_09>RU,y%V&9CKݻsdx*z ;SNlE29l:w]%g>ДaL %'ܸ @& mb,PRWl Wa.)>)wⴗ8P* ж4-;~'FBǔi R tgMVHt;xs B kq)?"u=\tƈhpEШkףş $r5xzܞpajn f:*$='yr6u81x9q4o^ <eXAoz!Ns#ղ1~ -TGojps1T5nRC63S75 N8ڒ&Bq9z fZԂ";IOz/H~b,R`<9C3oQLF(b;A 1<] K6ؗ~_ju+Aau6_ݻ=̪ʪew[rU2kDu>g7~)8Wŭm2e*P|Ji /Ddх-/ _ 1qĽA(QaThQ%{sEx_G H~v.iB40!FqslEMWKt6OɖA_F/F:8'>HLbshlee3(]6I͜!Kz F)baș[<"^Oq N2! 8%+WmXlK/E~1VBn ٽjD;P-~л+NĬŏZmxfc"-x=;e ^:&8g)dT,1e NHx^4 '#2Mg''A򣗞;U?Gn2m# Mqs!ek:u;9<8Wmgp:L<~=4Dh\AW%F .I@ רB0/#*?*ЖV;ܷc(~Ep=C1at8&wyw.-x@l 7Ĥ|ՇT-ybw#7:([;`>&k[["ցĎ'Dzj'~3jÀ=<0 E2 }*vW] ݔjJ a SstSPPCH pvXdVC0C,ka~͂g>R5r#6}~V\{BÙ ?;DqX;1u1'kUclU6w_;}i:}Qy1K6$y $TcX3;X5P ADxz$0Lj-{X:+a6KE#M|ąs),#['шx' nтϟS"im5 s";XD‘H5cs=dbƼ@S/ Y_p+:9Q@տ\~0Y Vp^]4<*E6W#D>YoSq&Tq`)l.CޚcpD'3qP;>$eAu~+Q~@*pqz 2d G0l.V܎k=nҌ#= o R$po 9rN2߉Xl4?.|ә I+Pe YJRK)^;+' 0r:hINDd,!YaHM-MR>{_6jaB5y$[cEPsk>ykϔU#N`BL"}5|!M/Fqw5A.1CAk'S-sm>W,j툷pM\KXOC-i1(,-{s`C"_Nxp|`2S& a;/diQ47*1X̨M"sUԥXcDīL? ^2~[D$b-O={+tĚ"9m}XM~3NĂuW(gޅ *ѕ;g4nwcF,z <AL[k4L(0:&9~ 3{VѬr=^7T$b;tHa~U9^1WX 뇣@Hφ }Ht- Hb[QaG5;o` w c2~7KV:\n %vT:U~+J`п%@5hJ=ElfJ5F8ZJc16VJ5 E2y][=fH]fӞ2@+$Λ6g%nmu [VqVx`Nm[.V-1VڛhXHW 3$d]x^k睰!tgωAc~3d9J#q+9QĠ,fN ddfF/ma{\EdhHNq6qTuY)}LXpQqz;3lS ISQahhqmi(:kByZa5adı<4&1ؘj Q+Xvb!2^ުch|>k8H%;W7reK|kn8ot2νv$t-e_ $h%tY5s'%7NǁcF&`KY1+T呴l|eu^'p0=FQH x+&~ 3]mЏLNk>o~dtݩ!97=b"޻Nj` &)LDS/Q L^t秒Axhj$1)L䶈i8iG Sdݝ(9S7P5pV`Tkm5=["3-ϘB)Gh"p2uĽncJO O2i 7IXQQӢ[2`';ݿd!P*{X=rMeK+':s) ٭LX` ܁;_UE邭gˇԢ{R~yu%ߙ N##WIfTdJ:] y%tͦ%ysNˁfqE8h|"IK0EHN|T"., eX℣ek!z'ʈ ^VP喍NϹ]q#*w*="725#xl@ {[c96l.+r%5ACb|1%sҊdg2? >lykX\NR no* 7׹8a$Uܽo0R9jzi_,y=\ҁ[c)7@|/Ӿm_C$`ʿi&z%ݪ;gRቷ$xm&F,vOoJX³8֔$Ղ y*D5APPW1:nf[[|wF_|NfP] t ̜/; |w8R2y߻Njy^ ,ē)C982e2F럛 ?D,~Z[b/ڻyܮTLօd?{7=膇@GFm6g4aN1hN7Jv~ВYml4n4,n3h}WE-MBtq%Ӗ>lbYzѨja`׳(Eѻ7v3|͵;Èq֮',/: _d\":) ,@t',Нl]v6Ta 5%5*N?aPo˸w[xˁaL%pw=uISABRy!ىe))YC~]FKY@NvF IgA.bH'v_d-w+vjvJ8GD<Z 96Ǜ妩`^['cr'rXE \b|h…TPM:w}cQ(6]EzC8I)2 } ÖRiu.=ŀDwvq$lePz>_p?B9z/N~qyzi#ՑE?`o[L!vvB lo*3#8 o7$w1eo=в)&걡u׾?Wr) 7չc3$7C/iS(NPTAGVW0/#%}Ctu6 xޚ|kL1ZefP7S}ԉvV}4Nv]ƴdӫcfsąF Q)"ؓ[T>3!;i:_Q5< A)? HMP8 |ʀ͉`zpx~1/a˚J5O^A+De88qVSyov5x(1 J,ҦivPۮbuP[V_= xzT%gy6)T5,W~oc1[?:Po dNV~cRlj4,%:5i71M92WOqK{SIC#e1 06c 1J`VD!s$1B̿k^Y 3im͏&%) w;3x24.&]ð9G6ߞ yd'p6 s> QA Q{r.gVxm.yˎ9 -})x-10pN2ڧԎ(Z٘W 9*=1$>$ڄcLhc-j fio_?mDk]伖WL&h lY-y_LWM EL} M=,/ :9g{69ull c_RY; ZrR*GʼϹ0V RT{a*4x]:?נGm|"HJo|h3|OH=Dlg1w,^wC N>}I?"fng^oFEtbhKB3?cdW X֏NL$_҆KNYo pD>q4MOmRv'CNPQS1q 9FKx8w 7s䶕и ӵVPGduUG䄠?𐥝:7FCm]z̿םYN^ěꜛ.05Ջ2y1{C;gM(%~j~#sj~@e&0?&(b/-lmZ' eo=czSڷ wC@e9[+PB:0 8 m-wP̚#EBZ5uTq*|J&pI8[Ĺ&Cڌ\CemOb_){, g\H9:‡#(ʪR4)dtv,RV#h?ߗ .rQ.6-HuÞ7I q**tpdGT0՚u"K;FoA@ug.u\CX_(dh2E0oXu,8&#'.6O|c]4 m<908Rh9U8Cw!|7^ZjPwl}ϙ(5X *K"2XkX|xwZ.XMJپOsH0qW,4d~=3;j?,14;!'@o4($?Obäz?o'Q $ &LRbmdh\CP/1,zq 8eLR`1a,N唎z-R"cϗؼW1MꏑjBqCP4*NVsN4(G WTX%dF,jP}Iyډ(NU-H9m+5тAȂn ̐ RX߱r"xoO *'S|ZsuU##a&!Nk uZUbx됛C9hY5o^\re[ʤe_ ,TrV$Њ(d6n~4NjA?`toGO&A4VOJG.ћs[%`o*>Wyr8CM=x\aHv? &F T>Wd!R^2}-ۖA#"@lUb5a%e21|]nڞRӆM9(n/h |1U1(>DQz_[ ʼvx||LaIJ. ;hՕ2l4`xqC:'2SۧiZ܋@&Ǫ<4jiKcӀƨ'z=6E|;vk— ?:/UHi^q{>1ኢ;kl以`xz% rn3[؃L)$U{*D,=H?[g ݲHijMsʮms*hw) J-(pHy/¨$I.c%\Nx>K0PmOte ?P&(?$=BEcmWٯphi(*ғzGy^ ?_lbu/;?m`+ G qvUC{Ty\E!MMout|q҂FH܌be.K^K/Dvж͵g|Q.wz8 Kcy^td6JR)aGoo?7x)>OI-)E|6VLfZu| ɒ`|ߨ8>rnƋu-B\:6kee6uҿ=v>-rOJяύ_?x0F+zX:N74\]EhUӟED&L#NVr6H1 Ӝ&=L)fcLكys}< 6QV@__'~/7v:0zfvX *a<3Q7'jMX"T$-pbJ70!N c*z;e`~i@B&/ud?{ !AU~iTrpIϫ,|/,< m@+h7 rg(3` mw *}=g)Am DZښarM@o-!h8QdoME"'uZ8,b{/ 7Z+s*e4pRKAn:esأ5FF)2&q{ tq #!继T2W(xr6 A!پ̎3#ٰ{)G`F:gZ5X􍯲ֶ$MByi:鮯[ ~SocљKχ>xYmJSwDBBFzG~Jaӈ89L"OOl0J_[3^ߢ=٧rԮ=j~4~CJ'[1r$g-PDgG2tRЍc& /޾j`9#^\^D*(.d֣ 7,P $Ml *QU4QWz=ߒeL6z,;vC"AGZ&}߾@Ve op BÏJjZcD'~։2z}c48w|:z6q,5UVd)JA?75=0 nXBE+;VZcATtDjJ`omU.Et-"{RspfIG%k(v/S1=9Hkd>}0)8=`*0yGï-ĒLKc#O. 3UyM!аz!:?D$UάB^g_*NFIZ")' uCet8?tIz<:&ׯG& uT}xM¾C.5q*r$j-.OjJ[R֮zQ+r}H 4<reIMy@uqRlSCi~YH(IgyMkY[x#xǑ-x`V0Ɖ镞 >1ڝ+&Y̍3RPys_gr;ZBbj ŔR2;r#5V+H(Vs.l";|Y|N]+բEP{?hc@6lhG>HinĚ"` CL+r}*w`S *ڝM{<rL.F |Sa0(JPृ 0۲}|Jz?ww)'Ont#}>Ø淰uh뼌@A c,$kaJqG:N*x!6w)iL) (Zҏvk',ծn42*k紫c? |Q ylx8IdIU~/9Ubg\COOi@-x08Y$nHSuPh74]{Ñ :}pZW$ՈJiFJ=QLGkmfl`9zV ޼:NrzOeCqM]'ZNWW(WB~:vo(SPM~kOҪjHJ`iA4J_ʿF0K I ˥(| I ƕ"רZH>ӔkmyWYk;l*̚&e1"!5JW֤xk]}@A^XE-N©|ſe72;OfrGż16+49OP>.AnZyFvD4nzV* )&21g,šu0j_y4U!R;~"(kwE>#ȏf pE6ANȅURHdRIK 'i:/v4]oO,jHve.\Ư4N JM]~fB9ąQ}Zr DI[ v#E4ҙ*,!$Jh,DĶ74ZБ_Gwn⽝qydDc5mԕ h{&tA]#U}~qBsR\[&\&QaݝZYEOfFk L&> rydGJɪ.P@)D à.v3YD[fwQ^_$_QN-7"I߾-j%Q8p(UW|Im3th+19E5 pTғۙUQ-4 eM4jz"m` GYLyqf >~mhDGы9H܏p6}f" )ڷv^a @Pg@C:잌,>!Q?3*lwM!t>$ S" }kҚϣ]3j9 \f_7jg ?$h*Lol(4D[uhfO*?½aV1=㹏/p&n~_g[ <&L*ji ϊNJ0#%p쾶17 ~]%ēUu,ɫ.XogeacKq f_:^o/G,VPp&hK$e]" PDv$F ,92# R*&X^;# %gR[u.hOMrya<# Sr ֵAtD`Hأrz'xrK+^0~y' ^Y񛭏ZBJТ{E/DE+`GR<&"a^UһL'<[Ӣ+׌8 9gZ1T˺^U#&N} Ή=~' pգ{qKXa&i$84<%1/cQ"#*6#R )?ª~7x LN( 4G(VgvN$ u@&5H9p(d.曘,OD%bST83|\ _Gh=A$)&8btAWYN>f^฾D\p(bFyP}cS[ڗnVF)'<[j|aH|GǵF l)HafPnGk2JL9 f^GnƐ%(9E3m\#󬳗H2] %Vys2wYc~}D҇1ܨRuD"ͨaCW[;. q=uPKAk_Q;o':-rel7ץdwvYTwk4J;L#h1+؋eY&P& }"$rs5jKc$(#[?2jz>R@+J k2IjT g5Gc!`Z\ 1嶶Cr~f9mk| bC67Af`D{df5|dvxҍ#`ąU?9:k|r-tASOa1 dj#հRaBQAN-%/XOJ,dXD?dV%9b  sN1DTG5zmre)P\{V)K =WwLZ "Zx4 -aeQ.O1E$o 5ȚK7k:9LL 掫!Enף:տ;Wc_&p*NEHNgenqa*TKogxy:V>Y.bg< 5fy$-j(۰yV,692\hh8~&0SKViW$3CSt+4s*;+"395عF[<ƊS 誇(=CN_HTr =j09vUa In3]/4<Ƒ&7.[cCfX6:q<"ȇu)B(1><ݘ" 5$~F?J :2od~:ڑApa3<7-21aRe󯸲p?#t]8 IYaOVNoc C hMGa:eZ?> S>h4cE%OVjUslřlSgJ'tF3 {ho`ep!&BQnM!xFaC~0Nu"#48iW']4ǯO/ۦ0^a6Iػ쯗̤m~y9L,KLƠަXv̒x4fq ͌[HB}ܔyx軙yw#-iOvXD(@Q)mCNngq Ql+z M{lX<`w%EtX lo+NOճ dE~]mCq岰!#'$nG+ N1+kuC;|CK[LVf9nd5xQMFE*s'z-hGhH{L&>o_Y1H4E{G/wkg޻6Q>r]Y gr\&oU8ϘDQd@CXKfp yojUX',ol+[U"ZP7X=`YNQpɛZMT3p2}c TzsdJMkBY}Q2Q0eo l,Uzr }xyl釛Zc_F 倳H|f2&2\O*y K?2'K=om)VE76C%/V&,B1&qvW~ IN9tYӆm^ +E? %LKA}39 y猊hz6+6{_2&o`Y)=OJ=$OXp1x^3Q^ISI3fFٿrr;^UFi]??$+6/̠MH{=wJe+A1(%iQ琬t9,Ntge^ ,ZXO{Ⱪ?E0Z$7;UJrSn';,Yd`]D ܈pH#/t$Qjքw2pG 7uޟuEB}<Pz}/\[3[*D˞4j >5Z)B߻7iXP+-E'4z30w4Cgb 튉| EuۂH){DYG.[2x7/[_N! Qu`腮_"{{>D~}&Ez 0u]ѣou.ic6Xd6 ]8#; e3wT->+U@iĵo%` c/lʫ=.."M Xdu\RD q,{̟%+$8(t]=@L u(Ǜȱ0A&DTA82vL7AV-+謥¡0O* U-U362#QN U~n:ylG]Zfu6 lFp shճ~qx!@Xaa0Bgl)g)f)*E:}{Y2?5!z4SrBm\Y$\)`'1CأmdfYQ3 ν-UPuϧwЁ̑q0[e!PR.B2v)ɀ6H4ms ~4] 2*H;Ps~&-@VL@(1ZQjl߱ 2nFy6MU{8q -D؈%I/!cS(UUi&/S?{ݒN&;FNϯ#t~9:,p~6*rcu|cݍx+'vȾ:GTeî ,P]\6o^ۦP<R fbR I\zQ~EMٚ?ct1#mJ=m'X@NRV_ZA@u?0ghW!/BR1W:Dʂ' |{luw+?u+9GfAM!L'-*;-8B,5 (JZq.!|/k _Nb)*[M5vɏnuL׏ 8ReQ7ъOo?U!5yIV,Svg2?n9 651g2 HE;z,~TT ;k?5wrF:4 RMX`GxuRh'GUIO΄PQw깹E}z d*l6Yq'BfsCn(GdrzJ#?iC9ɬSpg6x@Kus84O b}Z8$U=D_xwQJ߄ .:nBz>n$:̵L*,2{V25ڬc ߕϋ!՗fyvtA0n9_v?Ow2`8E%+TP*2e52eZVȘ!}Zǝ!w9h~d!mX7#1; J$e淡 h n&Ύ:<>RPO:Z?ipr̘qE 6w*=d* GaG}Ass5tZΊL!㴇ma:K=#Un9wZ% `=D 8|ɺ: rͩe% #N uRhĶx9 Y]Mvu/-A@CO<TLfm07#}E>صL)hkձ}5-D*ۆz󆧢5]Κz"K9,h Q? ]-GDj}idv\,4!t2n ^/tNH;TL$m5&(z,|諄P.p֞Ǿfq"į N갆lt{Lڵܔ*/`JPh[a!I5=^MRP ;E%&Yfhg*I h_ʺ εos}_VoIo c;J0j鐛h0=Tyi h[ksq=׬hI(] .Ng@kr ;ß\͆zl#LcDo&ַkU3258VQ](i1ڭ~^#x ?^~l6WJp;wT7 ↆR"q\}#q<ky h&4.hXk׾ /2|GsnM$UI\__`=I# |_Nb` ] %u[/NJ|8 kMõJ3٧N IL#wh_IE wFsZ/'x]Ӈ7{0"jmR]I)CSj?‹rZ˩*4ީIgA#e"r, uRr^{mmZy|LǞGq`'\8XՉJ0+ B^ |K^dnp]ߵis;iw}${0K.g~V ["~Vcs<32sxHh}?h J!+W3fmBV]c>+WSEO}~!&vf- ;<2]I4>/4DV vr0{ h*p¾.J-U28~/_be"4ͦaǔ?~Q_O.n̷bq,EXdf|ZF6O|3@G5Z5Gz_+ %3X j|E S(CuѽI0$tZ1BV-N9¼\w=lU1DlE_lZi֨T|qa<@W]'VUya &b{e(CdX6.Gl]PKP'Zah^&%|']b3^aS܏+XHqwE =dNn*m0!Qk;̾*5G{7ƣ-9r`&!zݰ͑YY޻89+v1prAiGLg$ˑ|2thV[$%Uo"絚RdLg+w+Zq.9+HNu]` {+gH2kkϙU~0[>0D29X?[ϼ'ı] *6#m‚bJAXg[ih5{5갂n$z_3#A/ƀG)>ܔ'_B$.#{qga=4D3ώFDUMug^_$ʨO)5_܍ n`NnŦ6_DX]8Gr %jn̤ ns*љt 0[ HP4A'6d“Ϩ mV0KNiUJlNL B n'>#t-8J|U@F..";ZڇwMm ]=g[\i~[zȗ% qRC=aN eܛK#y;`SSn}$ߊm1HXE&=KUpju/P']ub >xzBI 5d4yjϮWh+8~B?;1EH@pym9P%:zظL=sdVq3n!PkE{ |GA9r(Qn3 |.~6j$18|C^[>j4M`sMHs_0%hj>*aPvVɄ!dDB8a j^]|`%չoYÈ\eh3T: i!'N @Cci@PXQ ¿/bBiKIlgj:#XV#KGr[8?kC&B.٬X?hz )`ΔV+n}ˡƓ#>tJ(J}\Q^QH%g"x+#o<|dń1 t_ Eƪz XIl9XWB˕/&4%7ot:|Ef]oH na܋L;ԹJm\*zNqnG}`dek r*Zq?^fKRQ: AW ;O<žmv n̴@6YߐCARs _MW9s,C#R[׫@!-IƜIlVg[}: `'A@Le^Wg$p uc6CQ_dZJ>.D@R)vlk`! =s\d18[þ1`ΫG`AEjG]Gc~M*}’~%*8{ FC_d*]7XgO%nQ!7b5.xP?])4Smuc~RAC]x" _TYz>#li#AFbh6C3{i@:^4l} ouO+dq%’eKVE᠅OnoXOWC7J, KigWNi/3D-wTN >N5> ˛خY&6*pdz9m 1<[Ks؎V&f_l$/kz(;0M5>߅oEe~e'ֈ,W쓠[iXcC0 Ǖ>!ǣ [r*V ):Hq1nr .\6)Ձsh\GpAiL~MZkP F$K."3ݾc5@Tu uؿZ1sS:1lhf-4srC?uP L׻Lg^uSeF˝oЩbCbW0g][Aև8?q^f_-'Hu J dHJlշbn~'% X35*;֢-̀\],^딮+5\_uhCr&@Z}r鉴$&H8R9SdaڲRgbtΐ&H*>#xe VA u__,LT llb4%tV~_fQ[ܵl`/ϫϰdvoWUG^{~ZE@{fIF/UYK\@UዠI7ڤȪ%caKdy\bɵISRSp/gR#5?1@$804 _գ8Xy󤪝=!Ch=I׭ k.^pG2yV\ eFw dČd)V[-+mG9v|q }X ^1 B2Ό8A˝kig[EouY0 @Hh99!4}o$:5+魓Q1SW䀛uEN zڇ=Z(x, a0܉Qb8WF'3fUiTBԖ5l{| =%ʋY e751dPnͱr%U,턷lc[RE2bo#`iYdZ0r}Rc! fY`\0SbyL'R Z p$)t7?\lGeץw6$ NР'YCW+1+` !h? ΙqY9t&}+Oقm =NY;ARuڄq2ճ@:ȶli(3koQ[:ZINlG}k}HA|[ 7V q1d4Iu1#uc#  ~TgzK9QQ?Ύ`>?P{t-Sb^; =f6HPC7 :Un RE]`^o2RE @wZk V j$a]w i@l]}b0lT 9kPƟ RǭnX3.ut?~^m+=%gaŅW1O|9lO.-$q_5(#]9kq͘τq[_ւ ‚w;(RKj O=T[0*X:N&L&×B][^!"B-Us̺ꌊH~G;q`68c-@@Vί N%nĶ 8/P[: sL;2eqf93Ej 55t1*yox\^%-N˅I#k}]1 qǜisIC y _is`:Wb*ٵISdƉ3e =*ѽvӓ?&}~[$/uv^RC<މe5ˮICT3|fo sdXxޔ%`gRwv>ۛ8;&b֩n(齐[~?@ >,,ahq5궐UJʡ6_>~6+ KԈIPpW RB6*;ކS*M08`ݼs.nRÕE7)Dk#,ZߨΛLȽ-Z?m˸^YK#0Ϗ> 4hYq"&1w2OPР+<"C)G:^k iE: Sb"c/Вĩ$~ntqO*E*_Cw d]\vhC}s<kT^lM+[T>cͺum"[RZHCG91f'G׋˓y͵3n9_4!b6 ȧjHqC*PJ'(S~Xcn eXjRl¥.E2WN2;%v@"GZ~gPu-r9@v.]uSdtu"SjV9c[{mTCU|Š܁Ŧdؤ\@m#Ӫ2t"gܡG5(8Ga+K/  hg1ɪ]CϺ lF8M`Зna||o&er:_*ħlbtRyql@bgk.k i6'f>W{M^2Vk0twq[[c Li A>x;%'x h"P.[DI^  s{ï#"uCM,Igyx7d?px`x@ŷR+̪Brӈ.@BQpIp ~TYb8|$%$g=7#=![bG{a['E7w0*3 )aق1pvJj m' ~B}4s >}+NklB0 Y :L͞2, 2qz7+Zw)®*.fљmi!wɩPڵHÚ *&ThM@b}Nm[V1dHٷw/U||QPXLd {U_h_5*$:CY8mdAVIC:0հJ+zS[̩< Zf~v!>{f}BI4 _(Ir'ݠ_? ,CGROu Cky'Fr+D:lϫ^D趷Ɩg9ρ',=пr`X&XK t&S;J6PVx2(9`` U褔rCV)iYw4Le ?\3gIGrքXgZϥGقhQϘ8;9@-/ ؐL&\ v=Մ8))) dJg %ԩ\:K\B#/&uQѭt 5\wjE;w>6V/vn-MM)#DUDe+I|,223{X9)ER9ڕF ^ ;~AҞ鶴DLlcBӊߊzt$wusc&-"=F}:u+:=]fռ:Yq̣L(,R WDVR.0JxF'>Xq1ZdW0isLTV%@DUSn1;Si /e=x#+ tCOR0Oߵ( %#󛲹#X2YṢ|HcJUΑz?xYW)?uNeTϺM'$\e C F$R$WE!AW„8!>NJ/GՐZ5zZ,J^!Y.gcc3ji{tgߓE 7  fXEix|k+ifrd9;j0&mqVA)Ci@;smaԀ`}oǐ Q)Apz vV >sGa8UmrI;l&ҼfVcp/F K*9Y~}nֻC-my:UTYg.㴑ex tH8KO46VdGۻ#[w;sobXt)9sBC'RAT^1zo>NϨrX .]'ѻ+hG}FsV5<ޥqPUUP<0b˕0Oh'|}!j{s_ >!A}S%ȍ6z" a\縸s175J}#0ŗOBzEUPsu F&@x1$=a&M^_3=} /BDU_49}Y;Z.*3I\PV*z٣?~r{~NSAJd &_t:v ;w.+ Pp=PdwG ski:>6^Nhb!$.(\\7(c=F幟s#vJprN *6\_LBK 6q9Z</'}uuUz?{܅Po?S -e<j5!ܣG`WFW ؜s Iea9.U# Rڞ~G)!&۠[$J,`s0̮2,ay9CRviî&u+diX*׺2بjT%ϣX@.V?"Ȏc{S.Ab^d?9boZq b:P%RF|C }4(%VOr2Ĝ4H+a'n ਠZj,D+0Ta!0.R49¨-ADp|gN6;惐`~aŗ?GXTp|ǥnuNI Ϫ"crXQ܊tGԋpw -ldo&Oi\' DY2JE>k@ݐ !AQើ'K2{Ԓonxj<^c#J,d3]sq]y@RϠey"ScPi61҈n~zV:R3דּU=A̻M= Zjay wj=q 9NԵ65R_G*AE@E/*&<&oё[ɊƤ53=1vD$uRvcPC68"&9lI#Dy4,ja7+iETM O. d|(RZ?T&"cݬNbM%J~HuVzPNtcEG6w9{mV $j&֗]ֲ¾WS9J"J[C0y. r,"ήmlRl?I^H8Vm(nursMG'5Zzހx6JWZ @XkDVΫ5LDj]^[w ؓt!٤(c*\f5[<>wVX9MՒg >ޛMœԟa!I_BBKp&?*=vl#]lqqpړb3v@4କ*&1W~_ʋ)]GkgC3؜t) i! {hBN&( fwO"Q/SMFgYu-X}8 2>kP(_ 4ὣ@O6ͦ2 9' ݤ&զ}T>xQ ,mC[RQ! p0 V6>l],mH=%')_c# ;'!ln9zlP# UIB8e˶-Ŝ?E M/oUv֍֌,6-ȴ@'KFImG,BWhM685ĩʐIӗ` Ai@1,oSoYH*jk PôpLpoBe#4Ed_ܟa {Ao;C`EA$)bvȾI*qBN9LT:2; ikθoLbxJnbzj+oJC$drGp:{N@FyP藞#a1@yD' ITӵ6<@x8vVTw:7(QK!"mB +tSNf*s3oe=(ϑkWVފIlEC>_anVp{Yحy7}RK͈)\ rUY"Ϝ*[=h' Mʌs}d\а)VS,H"K~I| lL֕X^!t5)͔~68)jixШ&UX<@XѰt'713<aLsDgge]ņeNnNwsM g]\:@~8x|]llR9:-<<w?op0@Ce'E4/3%XJZg~hϨK[ >v;T 0H͛ui5lױY Gk*բ0y\;D@|umc[~^mtj+$2pZ|N x(_ D,cuĀ#UMFBU8.y,qN^$I2nd~vfZcMR_, +Kf E00jW>-B쇂m^!3C+u2j?YEvƫR.S\͜Z2$jݓvGjoF|P#S͗Ux6k%qҧ*)p@ r$$6[;*N?;.M;~e6WM!G{K/1](mz;Mk%;֪,z^fezǖ~HS63o1e:<{""#H6E^b\zآt%|51z>]=ٴH!D_8K'gۘV2xԆ8'0/l3 a5Ӈ4,lAmmp :p;׆pHmeXdEU*$(yW’nɣ#G+^;$[ sEݣZY q{(/j$R6ZvO9$D= ]ZYsf?3g-ɠWH؆!#oQ*  l;6HRݙ,_•_z55g.qM_&^pCOʛAWa[/z]DiU`(%K!Ly)e o[URG _zFƿ `DI "XYAdѲ $.,ppdN\ ix\'Y`FznHb63V5Xq RꢭS#,;9]77D79xIwbeZ^I(̉Btvہ5 SIg<]r@$0ƿyg65MG W-)f%Mgw!Q o0mxlYǨ-9ķn{2f?r6"8F]:w^;u@S2[Aa0d zg!/ Oͨj&𐸥 |$0wGqv&tv[7jjaNP/C  u0>ws9Z ͛l>H Yfd3$lsfG0nWE!!f[;Lf`m5wb+aCLzy>,uIG56D[ G%yih NܶWMSm׷W_v.aeXzW좎7ojiecBUv Wqkv_tZcd/4-}I/g!& &ռp6HԃlKe%%/toi1Ke[?\d#Vх2:t߹(Sᯫ{t1 xc_?f;ܿ|y#pmf:+"dKG85JZ\Oܚˌoa-8۾/jL)y<ۭDfPBx0(M&:d`j-s˅`fiME$;ԭ`“DB`8/lqZ4pA/*zj^ɔE_p7}찈=³JДE?@B(R +jCq9pFJH,v ,L *fr韵H쀐3!L*UDM3봗2Ac1#"/^&s"y,@|xi JaQEk݅ _6IKUEY. r˱ Nc:3:9 '\"s7P!Q!M-Y72)@RD jmy^DI|:2Bo0"ǹ{*A\g+N}$u?:ڞ@'I; Tk^[ qe&_"TiRg|L9d!.p5%mƟ%̀e pPqH72oOJfNͯa#h8RI34uZh?g.HT*#d[Y=>2tjObx7`1aWzLH3 >'SRs'ծh́G]-~ʖ[!#M.ϛKl vxjg*={\jgl̯̓0Fe9ȋԲ\_~̬]}wՄ::Ԉe@CSoP&V uj rU# CE< `6)!wR4uQsI˳ے[ϵwUɑra#R-ZLv l^Ի%}1at$ hY#=?_şm豩BSn O?@kC1JzVYylY?*.Zݤ^e+6;rUeR1b])~Bcv[ zu9FG}zN3D$מJn ir՘`0q/lRuUү,ܼgqƻmqJʾP)-oNXִYf3k`P$I͊ yQ=/ AC,kY[&Ҥν^# f%q(AyRʘmT%;YJ?`#î ]eŗރ`Gqz8qYl%n :aR\T<$J'ƒ[x9VY=FvY pɮ#:;\X= 3/i]y81–}ygPm[^D7FsD!,nC)Z}@%kĠstIФ{o .<Lቓ+D!ax@ccsA7@av\xܭ񿉏yR.]}ГA' n7/ :,2=ZB!M:[{OJ#TӠM{Nb:&l(] *eu<9U=8vvW<7}]@ /!,+R;ej bC8SIu _EC({v Uy)B&(#\+h*@IW([VCy-THnBx+yUR=V 鍀67!pyR3`-).yzoW鰲d!ү&{׽'ܫYn$+PpKETQdר)˱(R  CΚB)!lF7 \vC z؈GY>26W@>H !Hѓ^ X>^\X؛I`Wx_ͷ:$dgya4)[.H~DY'l?mYI"fH,[q8mkĭju}7nKob^#ITT %|̐+1߸CO2nE(ϐV Nn?ibaP=OхG5HgcX?ġ@8e}W ;!e$T}AfioQ-7C}텱/&C1@CR Zz~;0vnH[1~Qx)@f~ӉIӞk&eJ*Ciq(m/~ߎe$ 3:'W . &d{d@lC{SptRcͧڹW?P ?GK:@6 m1#U2oq!ʼX{=9!}O7g0{tCv|pk){w]UZ3c4+ΌZɢ $~Kc7ۣM4 3jm(:ǚ?[% N3.^ܟQH 3E߸jo%e}e?@b_IZ}H= u\kԗ=4n^10êHv@=_5GO)Oh4%}/VDk5尡8'O)(ϠWXץߙ;Ө([Kw`h!KBq "O0%f>J|4/EZʖ_&yMuf!iD;٦p04sSpȷznr<(.-vMb_+~^Gv 2SI)sCX!<طf)_maQ, [Gsqi)*m3c$hAРF*t!b?F>۫& ;ҹ$8.z(65t}psB'9M&DI Tp{XRξ7M^,%ߐ\[ .9Oeҽ^BʽzLՖm v|!uCF7{"n!A $PKL;VłʵVRQA݈S?ٶaĀ\N[dFpX8KgbmQ# NFG3aRJ ZPyf9ݦ"C13S kWH7+ zE8*Xp,ON Y{ߤtO+Ac݀!i~ ӾPmGkqV;ɈKjNlD9M0AU;lFG4Z+w<&c_=倌ݎ77-Mb=3J W:u/R\;dƍ:^ePF8Bڶ̓Sz^-eLc(yFW %X^PlvÑKR)zv=0̿j:IW`9ys3=\8;zkg.oc/_hّy-l7x+uxNg] !?qA%5gUt AY!1 g7!nےvoIޗXMΤdȶLuuv?ΝXmzGCVq$z.kqrS4lg'݈rWp'VkSW)HYGX5J;=fـld% es̐$6L[jbU8x*y-xĞvHMzݘQ'vec|wLּT .{EЁT۲9v9aY1?}4'1s$Uuji)/5ǹQزyL4EMiӻkjQÔvc._'ē.A{5{4%z&(z1e ĹPL;aw'qb]+w`H2|Z*}sm`[?FULmVH&OʕMW4p/e72c NZѻ mbzۯ2%YiXQx,ևT#~?$@jhbn8:l!Ə^~DGyDf iG91|EAFRþԹEglWh q0>mc0p'%jf5Z(ЗFlCK:,-*ED|*e!]YwQAzU)6LCc=!p[>t:2baw ܵH QR=ӱp6 A=&ȩ<2o$\Aa=HO&Ԟ81XdGJ1oJ}4Ozrf}%Zc/Ei1@/V{>At45kMw-}P3uS"So;"wGKZ:> rt LAȤI;D"{;M&]Ԧ x3f Rtǡl)|&qioY,Sk@ 2s@ xuҀiKO}[$9Xc|('uXCӜ+g7B-m)ō+po3+%bCaӜ$v*jN)!ߪe0Oٕ:% 46URW Me'Heaq.214Q WಈF!oY(ےsgpy5Xow>ڏ4.sM$%=.3(SgμQ}y?&np"S 3<iè=.> X| _$\4;j>w4jv1weϴ%$rwKTNggea%8ӽmk5!+3+| Sg"c}ԓX\++>-t*9Dd.ۥ`Ii?5=Az8cx6?Q c#͊X_aF5 >nISOvG0i.8c`?4bpij>{n#gϚ&AXsڑq4^^)1ުfLVkp%Ko[fqe횡]CpJu/]z^ ,V3DnncOܧ-8>$Tn˿gY9؈37JDTN. 8Xs?պuo,zY1dPŎe;FAoz"nEwh0=gB*2F՜& 8VnyȡFF3ȅ_r(*f+ybSSwp M&u R> W^g 02dKz$ʐszYN4 -7p&*Skȇ &y'&U#G 9yw ;2]Z]ASKA3ЍΥdaPtU.S"FcG}ȐLE#EekyTo\JR,P' ۾|iTṕKESiƈ\7aPf 84z2?VUP]먕x\% f顣8au>5+JB4.kCGD$-N/a,08u,FdO >[z[ 0β!nSdb3] Urr;{Q)B/+SO.ýESs*[KHyNY3Cb/+A}5݋=uu~dbis4gcq&]<\ctK[B9(Q;($"\6 mHޣjܥ]l)-4Y$lơ}Sh^*.ǯ1K9];F7&ZH1>]/,*/ee&} ֞ܲBx iS<rrAdޕ) 2qs4AIPIU_貞]<.KI|L #ـDr kZRh W }Φ0`*z|fLSpgY_Zfgp<ޯe7Ð h\9 PPnnP;o*^dfQ9l٧'C p3KB/P򗋼BPe'}?K^ ~y:2'cML2=aF'~K@-^\7ܔrnFY/ `lF7oI =EN81:fU~12S QwY*RO{b?jiUhE&$lA:xɹq{/|}<^ܩH*cw9^OکTÉ[ `4}r5RM`_YϜS"LX6ospӌ債YQiZxo;,V2d:ܠ[y8Km/ ai ǁw[we4Pk,q, fSɃuĒL3A۽xs;-y\@Nϒt@,%R~x8`Do؀g᷀H&1rhW'u\fEb;&mb+va%v΀|}Ec[qI@_A6;#_1WϷvg~7y_YRYڵS֤L-Z$8[[K|B!l3ԓpv钷2=,WY-s4B^w@ge B 3-??jHTP r; +VDY!$ZH!neqaˬ[s&SPZY&8xfj{5*ږIbhRb'7CtRjĵ9y*ǗSI&HK([SM%g .EOJ0FT+ȱ,lC >Yѥg C2ZT ,]oF>K1BE ^pSc@bEK/^.fz pn1$Bs)ON܀;ڃ-T8xE lx^סf0D[b%u8NP5p#t8gw,w8bqKJz#l$;&h­(JF{k[֚g7R+~Sz#_mx\gO;j|;1Zn4"|:,}"ԙa+evm(-*|&;ڳI dx1{H/*W@GH%^o.2Ą ܜ 0w&zX5%E0?/fg'}80RP|Xy/A0I6ר?Fu.i)  /ش-7"ޓpն,]%@+%R-$kt`hp%œ8 䂓YQ_$]%q1Io<Â]GѾĄ<$րp[ #juy\pEJTT9C%%uOg7oo1jcYd oGF`RkaFg3׀|I_3ڶoۇX9?R&;Q ̀FraCcb+e.xЖzVR uVkᠻ8J:s2cۉDd0nu;'#XZ5'x=3DyX`}wDVҎz%"tV%>l1{ CjF~&}]׶F?"gT|pvff,sHJuҽmC;Ɏ6 &XrK>[D\e/T|Oo9փ }(=p'l|` H8!A+ѹCF>|81[z"~0]I=&؇DC:QoVu|Ez rt!NԛvM^ jDV7J|6C?6skp^q]o"Iܡ"9/1JR[n'Fu-¾әu7R^@ȩ[G( \^m" z"Bp KO[ld|'Q0HxYz[ԍOuhQLcrIy ~<!^nwmb$ b3,ە|RV'QdUb%Ct??myt9]K0Ӧ(qp\85PZL5&`;= ?$c=?yL\p6 8l,fm:"GOxoM\)Ab+XL (ҵǏIQ0!k@)f!rV^_:Wlw|h31ulQN 6Ax 4!Ѕ;bo ]$jYuX㑉xՉs$\ڝHA646r2h %bD'67Vl#2[E/I9kٺGf@9-r\IUjEp_L@fŖ9 2kyzv( U. v5 ˉ*5$![֩*VT9*q2 2> _ 5Xӊqs1G Q ?︵*@&hmʎf1Ҁ]ez|\4BUX= 3zG/S6nUPӡaŬzs0pִ03/"O& ۾^)Wp|T4!&['ܴp Sacܝcj!-A ̈́%?N&̒ G67.8"Gv\  ?Ŀ*8K$3 (wE㿙yJxڢ}7p9%prҵ͒iT{R_tm{Ο) , 0!ph'+[+tn,`S :F1o۾Hmk3`N׮gJVb+cE><'ݕTj l`kJJ'#Et=s1|p9+wf}׹obMd2UF'*UaS֎=H_AH5q_Wgp%9&3h"=Z=4B(u"җ]U!{4IOSLU[Au$߿̸*( *DbV ck&`#%BT;2ZB«xGP9YV{ۓ,Gp1n !6FŻR:s"s4ЄtqS BrI X߰D[$/J(*Qﱞyre# z|r֣&yt34͏8&F鳋A6 ppZOhqA:Ylݱ[Mxfd6M p~Џ'-^G;r|9C^+F #22="HXI۷Ѯb&ʂ~B[X('rp3"0"b'`?H=En9cKߒAW1K_8|jL.J}?z̚W! f7#%zpTYW nscobS}2M~%: {ILQ_Chi&;XS>ʡ{1fgJ27gz|V Zn sew'o`5Umw%UV`ǩn4(Ǿ^,u?ޙB4I ;y7\?AޯGp7k|8g굃f&2S']& XVCK|t\ <֋RT5[{2柫(؏ԵB˟ Ϲ< :i&O11∱6v^_]AڄM.棋kIӋ x*|!v'O:饭!SGh0*tS~~lWbV,Glu^ҷ8˸0jg:<zG^8$f~'#}vD W=On+N\E]BҭXAo ص_:,,my Uk[;1K7427ef2_*qxLlܞbCkl؂^5_Y# j֙?5ï&m[mjvϱpDBuX0Pյ3`TR4,9YMa gq= Bbv,$ 2_Cwۀ-fHL5FG@p[FL6Ι[ V;C- LTܨ3ԦfM|9"3^Aׁ`kpWE#!=Blz7 ,t!+5(R!I>Ql3^*tIy{.lD JqDO D ,{ITyƧ%SIFY#;VZ1o:Ӿ5!c`;d!aRgYQ0Y]aAD]_ku9V|hRSj6z1A5(`l=>׎LE"v)W(dvud/RpPw D$lqqmM` 1vm@Y D}xUs [ 6`E6%Azj|7/-o L?"V))&c>u6҉0NᚴMch1Ӕжtg|nЄ`iA5md 80pPAF' `i2J+in=Gv»Do ^ȗS.4^vZRPT5: 0u ]w7ˤ'8}82U&";QMA>B*i QH18sUXmE-ΧHauzQɳdUԓ& !Q6\LCw9ڽ:69T;#VNd Vr uګQ~aE1s3e =ǐ䖪,lXqӐ.xze;㸨Q΋W_6U6J7iȼ:px69u$S%T%Hp̻xܸm&0^ԞKa}D5\,6t$0#bϢ (W} zlb]Y׿j |MYEaE 0MDy `)N~jj,>I PU^bkXb/E'_Ow7wx03A ϣ腜_<b[!ĵCbܡqE޳Lbgd 绂cfNP'wCǾ3o#uCS( Z ŧ>$i6Uv^ܑÎ9jo~ zI-P .J"N]3JRsxf`b(P@u(gPn0d_KrNFٕ=r R74hd{Tӕ)H0P@K\ePu {,-WKJX|]6i7oa^Phc(c9їj6s*É"<_=K(wO7 YuJn C3 g VWHJGLksyG ׫ߟ 1*'[;z^p+D,cEgIGvof0vsjؒeYok7 <2'#B51`䈵hJ.J8jnVSc0EG@$csdu(K1E-exR I!+^C5x"X⑍YTBq!lQ hWN_+v:Ѐ*&7-QWf%ꏡ_ȭF ʊّOh^}Dcr T hbB ?Lds6 /|vJL^9vͯBMWs"u'̥tGTZ[s[ ]VW&1ŹqƇ T5gEݑ$f:y4e-Ľ u\h a Sy짿g!WɤOLV@;<+tue@0QB~* m<G0ZfQMaS7;mJz-X'RFY\+0m;3ʸ܁ׂ͝M$>Hloժ^d $(Lvau3=K[|ǿp}rN. d I1W!k;A40[,;@-fRqy;ݾ᫛5Yl?"/38E.z2gkaԓTY6lt{}N_ S.xf;p@p;oJ?Cڐ[^2(oV5i׍{AF棦,,Z=B-_x.dDSКF9GǾco $َbYf>}ڱ"~I_DȽkKx޹>p;VcsjCߟCKXׁ\1hl~뱔I4z]Sܹ`}brqG'$ \ G -Fr?a MomE4fEu>.NeGnd2}LշEP`шe>B>O ۹YMː߁+o vc 1b34?`ᣢvZ75x@CXCLjQ^಩u W`m I #|eVl.y8\*!/>r)\^ 7K^/ގ5bXXBtj#cQt4W|^2"e SRsY p;.iw{Is0o,dGE`0E ,l*ɼ{ (fGTA,6z9pk\eOFG *:9*](m qM3|"1 ,2u Ljk؍boS)\!W9">``tb<%҄`r.p]tW5銟 mx%PJ0D=C\c E}Lv!Jh T+)Zh"qQݸTWfI#)E:Z ;(k^"V O\.QXZ+'tH!mzwS>pnc䀘xz 72,kWXؙi*/p9SIn=-z#<2"4 "^,5t>' &JItS.rux$uϮiٹiwT_ L l?xn@a;UMܗ{)Q0uL_&|\FDN6NӤoJ8SH`./;72+R\~a֨ujÎYJ~Q挶 3R\T-Ѣ3ZMO!ȯZVAPT8 : |2x#Kq,*IRbq_@ߤ !T.N̋&A @JI3ʘĻ#֣%Q9 ,:(uX%cUTtU1%yH!0oMj6J;%r#=~.T$;JOΧk;:n^djB;W$)']0+̷N MԻ_ϷGRU_yI&۽nC"Isͅ?|0<*@ 5]18) a.`E.2^GVKr խ;& ʀDƤߣ%_.P(tdBUw*[ nA"^e,8H*W?x$N[v.X]4 fB4~Qt(,I}$/nao!r&"Kȝ1 +QM qJ&z~4D@ [lizG{{`\ⷫK=] e/YՠZ,!F,Dž3(Zow ̳}NDE&2|7qOGLjp;JmmMxmx`e$H@i.bVpwp'Z[2e]0=T2Y&waZBG(N5[ǷRt5!u3aPk0Zb<p@GI$Z]߱"[NH.y V5@fq {wR]+u$wm껏TOJ'gJTP¸;J"0Խ˂ç8brRFk_#Px;d8kI^τl+%TE7 Fr€$ I'7+cSYl:X`LF(aQZ`.D%ijV'׵&[D]f1dLվ=P+\['x٨uU' )hXp)l6 KڑO5l  %+p%M_+Bh"~Woj&M=௮9q%!|ÉnÛ]Q3v w=m4ۂ9svNi])Yk3(` Eac|A_Rc f_+gh Dr73搚Zp.ȓͽQ)=YlUƛі؎t8Pŷ{I Y9> Ǡ*p vYU蝏w[~2{‡'hcH k8|h"vN [rZ0j )!θ'jޞfҽ < zLIY[nQLmDfp歊t%,w6V/DE˦2Sewx]Z8h2E'~ki`+L ]|G:}AQߪ 6 x CD֚0SqAIql<&UpNnyt,3*jqB>lV'853,޷J7TEs9tl|KYa2;46p9Z/A^F7N˯tk_$x",BTYR9mom9 E;VgPTkϮyqxaPU)ԔFqpӹ8;٠Hx7[v4Vq)H?ÇQg#J~.w 0l= ~SÆYELcU`/U$dJ/LնYIۚvOG¹*ui͛ cwrCPo7=w}5׸Kle X!)\͘aW&r cj ^e\0ZUq"M㷠h=H4L$yr\ў{} 7'!Tr{aq8Y3]};Q@k>& r3Ur7~7w}XUwW5u/z #[¾zƼ g+3+r `ˀmHm0T>JK?9༧&$EluԾVyv( A5|}4ߌ3h:'@'3M1|r`p%BO%~,?Wp ,f <i-mɳD? X4uÑ3deb}(1E1vs=Zk"ߛU~QA(q^2ɡA9vrY@u_3.zCVbPVGPҫ'Sc^` `Z_抡de@jfm}) 2-h5Œs*0Ջf0:hk|mM:)*_wGL =a8Ydi6iGi#xriQL 8 2RG,8~k/gZW%(>MK-wX胺'ǎ?kse!gcy^ҞhƢa粷c `'Z6E|t~ب%yg6$)h}])[tKDr0LxR b קLsJY+m] )g  VUHbd8a Li`BgQARF@\RSՕDRkT{hfxQhFQ"OMC6~ nmyS ˗cT<ޫ6!PCu6A>IQT.."FA_˻V_ }A%w2puzi?s,4@J W+G~nƁ!;Ր-ޛCs;u~S 5hQLb?=pqs'tm4qYT[vq(1R@ P{|^ hh/aЦ7q{`SoDoOTNKIܽftu y(v]2gsyr:W6DZ3(l *R U^wFjf hL# ǝn6[&Ѡ7ڤ4{Ҩea c@0}ceou$c*bĩ T牡`pTD,|q Nap(Mt/JMΓI3mwZ4f/yDy=j^);SOk͏jH"_|j^߼)$/:#(L=Ѝ"Celĺ3A5\t-5ٚkڃiʈwXgbVp/a2h /\ ܇ar`ۺbzh^5P,Ns q)w`%q:WcK+vu$u.ǀ{]dVNˍ 4>w59  JC"ǁ}s^ δГ3durI7'{g5NA@_K^'] Ealc"x8c l,QpGtn3kx(at).2g] 26u]&T |8WǀPr$tAK `KI >lW;=x$ߢΉ>_TNHM>OKW$l$~G;-8r̮g lVW ,7Ey_Ep m^b)n-]t/ˏ_uD?>JGN@H}k4K]{(0&?TݯDQ7YH:r[+h]B3O=52vYn.d3S8 %! vb IIl@H@wW f/ԦVgP[|t J:';ݷ'鋑@no]7 wJTO 8B&o8 +i-mFSr+FSnI>U!52yz\m?JtC$fƷ M8ᦗݪАb7dutb#sr0oJ1c?UЖ;eXC,ʗI!h3 ?|4PN݌BdD.}`hE1,WT>bf^IlcEV*ԨB'IK:thаiqU}<~ [m7ϟ"۴޺j=- IV[@d܄IAL>Gx6#ٞ) #~ULV T;R!-'+>2o-< 'pB!vHeQ:Ґ֑#}<&)r;PS\-eKae1l!]~H*].%6Qǐ" IT$$ΞhwP\Mhm^_@r43ldԝ`]|:a +f.L 6L"t#=> CdzLZuait~~9=?%bDTZT G Ei7+).(iWl/-X(E(3ו5eHާf8KUvK.Ei.]W7na?5IrWW@C`IDQ6t?<'cIrNiWTEs#[lvҀ0? q){Ek L“}9Re8!MwNwҀ`2GPMZ& Wi(Gc9k}jw9 W-KX3]NknT FZxF+6I b!]K`6VhFGdg{A1b'۾BL*N?ق֬~7Hװ`,ޛ&iX,6} B-T0@}BR8?C0T%wbj}lMu g mre T~I{O~g_>Ønu\ IgЍj VHB3QP 5S "&UY &`;J#b6X/TI@<ӮӇPE2Tᛡ+(TTa47Ji5FeAR ~I$90{+uQc`!+ǣm0]k&[ZW§_3e&=rL,՟Ě%ⴑvz\ΥEk}R]-0C_wzTEXw`3|Q'ȥ~e.5D5'ʴV\1="X|ҷ+ PgDkm hsqL ok)jG bWJ!U7o!(3ذ]j=]SZ|rĆ0Y'^̎J"'a=[ TОHb\k:-iȭ[MƢ B}3'_)Jxq$淋#+m!=BLi,q:Ds +EnHmM41 9_`*˯6IAd+'Xd2QjG +Վ/;s4KoܐQT[pYgtKfZF~kM9C/Y>~,'gF]j@gtHO+QgGԼE~\$45=cğu=}NƆIZ4֬,4Ts fmf4F!ft|FG~hzǐ3:@pwsLz8h黡ߕ: b_CfC]'cP7p#P ); P^IG3:J;%Iy!S'`]^,dHc06igk šS-%,G6 ׁ#IƙN"! QOE4!UuLZV,'(XBXW@*hA;Hr٭(.ۖV+}6H׍Q]C"Oa^/9,:PYNn4)z"}10|Qd>|B*d1(讜(@B1zmjJ}+ V'_}gnкM_\LkEO ]6} 13o!TQt1 C'.:Y[cB3 e&!ci{4gr "Z^r]ZwP?% Q>JY-SZzQb,}WNI8wnLrJ0o!1K(Qd k mއM|~ >ʠR;޳)7G 6 \a+e[7obk)ƚu۶͘|#^C,C6{zTaC\HS-~At.7_>xG "\wZ Ϭݽܞ4A-VARi &dP-ƈI ov9Hk'簹1`bbC\psy-](jb)eQЋ-tm] SSqW'-HS^H-[ (#)i:8"9 4=nU|J=nT"@NTI_9v>|5e=5c:1|e-p-;귚TvF0A@1-J_Q]!=+^ϞFDs"d F˶nMF2y: f{ִejJTpnIA*©+cDƍNٻ#a(rLݩ)쨑^'_uUST,-Ba3 \=M[q[BCV7YY48&={"8zϘXɆN]ٯ,vD73, sq';cgō0<[9j JV<u A"%5T[ Bp25xAO>(͔Fxa`ÂM<xGA:a2n^ *U||_rrzu^&+_Q䵫JUz }T᣹nV[+]w;`Ti6OeDuF rQV' ۂ.VڟKd [_JG_`>K)~[<ٵY?Bɹs&ȿS]!6=F!FΞdOe(Sh3m- Vf{|XIlW55ݪMyɼ JYt u/S8U.weJ+߽첩$I]p*S9(T +#*LW:fO;_xz8L1DW\=l޲3UTE]ʲ8p,UO:rОQZoǪFV Fi`V+J.QI\s_?Ъ}u'1;QeNf.]ry`AG!aא;Z/a ;1d `.GOiTψ!R) 7aGa XT$Xpy"!FMt./D.: [:,<q7%$= n¼,[rk-G3* /2L Ro|۫7w3 Ռ ))1hyH p0}B2-D} YSR%. x{ƭ#6Ļrx '6 d ;"614|h\sw3~nVcBjN'2˺,B gWtr^+ҙJ ̘zli%Z'zk9noHp*n``wQ.E^m9d|E69i؅IW$Zb];=5"7S_0i E:X/Ob&w iHEƩ./K.*%{}.L Ur.v-FtY qx]h'7+¢2yZ@6ˤp 9ei&#qH1Q?Ow~7's~2"l>lN@͙7iNc.Ja?+̒ 6vC1Ԫ 큵XwNM~ ϠQoYfeiOՌ)$EaGD Iz|6S% VP}g3+Q7N.# ."e+*=az"r)Y PA:eGl!V0؀.Ԃ1e Fn3# e0S:Utt ;Mi+bTInXP; 0ebچiqAuO9! 1֓8xE?UFx+Ýf [$nl1Gxzc%W^!2ti; MrX,&xߑh꠶Җ`ʉ$@=crM',RVvp5fGnҧ{'#}Յ'9)aĽ\@d ~;Uk_t/Xȹ^nKHm{QW:C ̀~N4ǗP丸Ur[=Ru|Y0~"](sȝ,lvڌ4NQVgW5(e) v\)ZW8\6EgHgVx'EqgcӔц0f^ӍE+&,m޻x)>+`WߋԖ&#@-9+E8)Mg 9c?qL#gViegGw ]^]9[ &YNrͿei<Dl:Ztxv¬&mAc GsP+~Q;IR2ITgMޤPIerdV1*3|Un9!6)()#0:XCW_ iJs1:`'@d1Z% ߅ݡcT Vujsr&Y(-mFNCb7+~=LEndqgP?9*S^JH% qxc3P4!\n\?zժV##%]UrL9xaɵVa{%22sPV<]aiQb`u~/1, s[#ͬW[ɲ=g[0i> "M%_.=XJ({lt rU=K gD ;s Cclv=,bߩՖ2MfR.=1 E|^]=6'[n׬<w@Rm>?{'[0"xQ$Jkx. jPVg-*]M^NcϑhhgLgZSPF_tɳ3BOp%4֩P U[C]]2ymǥpZM1!i^PHVXڥ縓$A&tӱ ~$Ex,HrAjmQQ-ٽaA- EHi2?8Ѻd<`U|ʃ=%+Mxں*,w`{>pjvU%a?txIY#,yQQ.s~wO.3 mCPWT$r`LWXJ,mLbRsz]5]%ֈ@,yf^RFVW%$:Z:>\hbKI(%ZׅW ^3WʴIV̤aWZJݖ[ϋ4YXiAKDEh^{Q6eEߗp$c.Za c6Heyɶi‘;_V@SqX0ɾjcɎ&Gz;eÔyOP:V */#< dYBeIkǰvF1 9U%Camx Ga;&(}`ܐKSsŕ#Q P[q2ҖAiݝ&Gzr㬊(y]{?-Ak-a^zk>|/wE";`z(s[ړ5'=B*Yi[vnDJօ7sYh2xgйmrKрqQS˴5cfVf$~4f/zvC31J]1nLu~X8W#m˨ ɿpȚnP$ ̌#6?sw@uԘpU6|Z%m B x *ޯsR_r/ >Xg&Z=teWQtv^¼^(sNib`퇹;EGC+W[46 =lx̯d1"$)W8V~1ILw 7K5`+2S,.(+tF:J^ZɡI||#Z UB/d%b ߉&k|uqښܤ#*d2QL5| ; fB'\#ܕ֞0٬KW3R)n?RLɌ7=#7ԘphО|}`T8Z#a]sӐR9XKEtqv4jʄӝH.z7 5l1eL*ב!wbV|*Ԧ'G~a9l}AbbSگ%b_JSg>_L':O,:4,S~4.3f-3njbeM|QGduSn4n$[T:fr8'L|՟YvP8.FYPQYbB ?&N­IW+`I֍HIC{b`7Ҽ&Ob_L=c]; ?#栗78 zqm [3r<nE0JB?y0XKSXukqAkZ6Ip-0t+z*bonҞ\!xa$_FNb4OxŇq 2=yWPFLQa{0u?c _-laSsI( E Dd 0 PItאP\_$5e5`*m_B!eUel>,$n(gBPKe(^DH#㠧p44vV5xqH ph7(Jع#v4=(dGdL Ňn͢;g-K]^0T%\ hDa0։OR,Ov2C_h$[)2~bZK 9lXlI SBLC找C _Ry;̫N~¥Fw$tCBB^hV Ad$ ۭ_%?4'Wujh~:`Yjx\!r`{GI55!j{}SԢ2?Q3ГOAE($ʉSjn8@s%zmn,ɾq):TQ""X*%HQ8>n,wkx 5od}qsaCu*u:qpɏKi vNhk(:2GdӭopU/]!Ɖ@Eg\:=}cmeQh ^v_z@QгZʁnc'_EIJ_L!uf>3[d G(҇>] Ⱦ̧+L|a<|m+kP-uCmt֏`!D'7&?:*# q{{r9ZuYS3v/ػNGQv>oQh_g+Gbvˮi:p0?%ۣ07#_z`uD/x =ڴ2"9Es%FVhg=yˎf\G 1MjTK^%y `ڢ&EƷkc!rV/O^bL:ZV~7#G  i'+Y4zI "ɸ0 ~\2H.lWFanǽEZů2w r˄Q %,l% Us W*0C cuj ۊP~x Y278k2[eG#&@v%Dn=5urd,FW/C`TU/;$v gJSmkX ,֏LEVʰ*AW9;Ͽ=ծjm>/HqA-r .Wu|IVP2(ER#OTPbLy%*wϖ@l[ē4w'@XS} N9 G?QH[*PY@Î*d3ȐJ> qYǭ~_t@s؃@M/&y]khHqyU,r?+!WA_p1HNzAX77zR @`ΑA _K wm2Ywd)ɕs} J\$A 5L ZWlP频d)y`{Q-ΔCv@^UyV+d~_[EvRB yp~!AS-fT>b%+9X% 6sQL,-۵Bs }Ve=ClbH㈸jҁ t*}u*>ݺ9o'yd74Dr /xҮh6`(*6+pR B""|"̟ O,lÒ(2Ot\j˻ߡ'@++q W˲):C+o' rx &JV>1WGWIC1Oa.=)BQlD;KcM-EߐEj Vӈ"t]@2wZx<|uvQA5J6gz|h7}}_xۋݝ|$SY-NbVJw_413ӀZ ] X,\ipQJ: ~16%SmK)EK4&CQy`=$;P7&?GpmX2(wH7n\w /<zkqb /RTaԇA*S1I`J51 .Zw ȱ-jڐ9#:HP% Z%7!2! j(Hbۣ%#BuPY_hH!'T Բ=0HVr#]RJrz7ꖻqbB+U;@Oh0_hYpjW.$9o/~"k 1;pܭgĤ,ţ@C3Vndwí%i ɽ_T0O$]VRFL$1:t~%sfl-a 5S-W[E'ǻBʪNpNNIgˆ)+tdr>KHcǷ7(4i屴%vAY*5,3SuR/K\}672Nf`0պcJNeEL}T`=iZ"َt 0$K_#cVAnƼ9c[|Ӛ0 ORw]39 wmCK+YlN8)Ut-ML/1biܣ|=6l:,x [٥!L.lG Uxo{nHP5g"dNSyȾU)S)U[2LsvkҴIa:jJ ''v #(yʖ|KLVOy{lU"&NYbB#0lgZpX49 S;MDԴ_%4;]x Eޗ*ܴfYzybK=)@z>@Kji G"!.lX*=+ˍ/cdSkvp~ff~i79)W-WDVV <ųzvN J2ݵْhHk `E"X6vZ16μҷNZmO,7gdO< [@١jqabŶPdnwKYw..e:]eu̫>^(65aJ<8RDVw'A>ɴyYHb7e5Ư?9ͦKv y7aj$J@|TׁNNgFGNf*'{L>}`zJ!׼/kzT-옶P/7ukY&V-jN_r h≒,O>_ڀ_phښ`ɚ$"DkS!"9d45m 2T5DLl}w qȠ8PNIk*&䷲^*Vd#$'qEܢ"PK% },[5vfD!kYzhBW^'G7sJ<Qf?ֻ#ߧ_"q"9 J'VԳvs `w=p](6^*C\ݤw9|Ig6b^ߎ:<|'6Dw{/ E/wnwkq#_d3vя* f=Jvo/bʶG:+$d* >{_[`s!cUŌ!&weoUrry UL-mgcV]{nJ+LCk}A]nNk+"{ch侻hۧ;cƤ.Z\$p]O|P_`Tk%>ɤۏPq2Zb//S,wtbSY}.C.Lq1+YF羽U~` :V-TmOqT8j + TNmiay08dߖ #}0ٿj;#7)Z`atImrYsD5`qMcUf۱gtTArC$TO۵}uQ%3Hqΰ N+:/#3&2lmTD8O::{Z3Dho0[u$4Qr=׬"l;b|ʊv6 x)p^˹Og`> \hB4sZZ fJ>KP#6!UWjXK$S$k.lHnY;'P^)!Z&c|Mù\< {1 }[]*]uPO ofc?;ӈN_0Ĕ,J1:k7L ?YL"'uDSkeѴs,%;]Eqٔ1iￅ4[MaKW IEIE#6P8z;WQ1l)Ȓ,uvia¸$'K0PȒA T൱l%b"±p)/5,Udef7W8?%>nt =oD0KU%.ISg`~$ B sm>Ve8 @AQj`UgsQڏC8{+(O9g=Y4w|6%feއebyeʔ P-a~0+]4qVHy31֬;7g.z麇PKx/w,:)S 1f)}c~T7sOپ#%2!{vpjF|:D#33dtb)t-Ȁ5NLKT?ym[#jwKդ\ʽ.!ѽI]%vSU*֤ƫ*VeE7ޟua0ot?x 8̪)9A0X8-o`td7>i% ЇQdPF ׭@fsu9I-8;Mw@-ŭ)ꜱ uN?ŀ7Z|2[2-bXmۼ_s.5+BIvpHq&Sq*=<4$B[i$oE]z.$e=F1e-/΃-rCl.?')+>ji\+|X E,}D{Ny~L 4wTصaՠ똖t4TUy=5=z45Ű"_fr,x*kUZ MvSobG\Ю,f iZw2NɣQ#o } z|: 5ytxjZo-X[YZ+Vڰ9aWhKY/,n}.CRe,ir'r܂ kh} ]uNFJ(Yn81R۽c/"hU!Όr'8%*[X&iVj{#{,X'CoSS_T<;`ӈ+T1G|"?ٺ|ۅzxԀ0/fsRt ăH yq6MNG߆N]&Dr#U;AX҅@ ^j|toN"F)dMϰ5~spí%_1JO.&u#YH7jNΧ}*_\{>Ñ/(fs!w#gVYU 4CUؔfk׷pc}bB2++uOh0{`P_!:K /+ MO;yCcbܒYiWJ^Z9ḬSCiX׏awNspY]|ѺF'aGDաEɪRw:jBrGrS-IIZM}>:LJQ\t7h/sE_+<@*:Ϯ3_ZZk J RhY;W^"^]RBz-[hV^tMl;>8¦I|0rJP'iR$ M{>VpgJ~i4 4mMi{Psi/>m=;C6-҇n(8J_֧Z2^">EAdajJR1!oaN(c>/ 2n*zo 0S DoOWk/ey -[R-M&ȚAqST`,ewȏbrH%S9a(;!ajOڌ@=#cQmE=k \  -ןJ6 >.iJ\x hc=oՅN"Xwgj zW1J NcٶbxhoTapm,Qw Wc ݺcZ 0P[[V.f̸U_ze'v1xNzUmRma) ?f9S |2(v&/+{tIp&LyR/hJNYr=^Q{Y"xcE㺣2il@c{?Ro'{zvx0晆&-'K#J'}%UZ#ZX m= 0KSt |ǕhW.wyxn䭲sxrY9/}-2yx'BLoU}iO?&lw,xL w#lcP|%pcR]d3POJ蔓0u ^h_ٺi;WAO<1$iAZE7"fBRp(2jjnZ_(>iU>eBJGw 2a#MJIM&5QbU")JZJ7ϓb0ᛙN,$i;=-VPF,ğǽ6P(SRHOgcv DmiJsݷ\M/nLD-&Ca*EvOnj6O0аD[q$ }m m-ˌݩn xkgC;+l׉o~m~NI'-(>6#}ֈbRs "8Iy};Y}|x9ifTJZflegؖȝIXn\nॵ3/P`qepSұ3_s^ES;9 J Y؇Z 0?a`@;GF_bPe,+;F\8V @,i&Z[>}W5!SEF_(:hY;'ǥZ.} - -h45&I _1TAML0%B|=֨Dβf7?= pd^QVGI btU4;*caמ]1j$?>:k:BM%-9^oA2)-!wZ -7x\!ߺ?]#帲NY"k{0޼|0U!Nlk8D c:惷O$So5K`O@U NDX2 %"{cѺ^M_}zz?vC\p/&)W g3֠Ga45Li48La@d:^@qW [q%2NNtO9([{f?'aMųt.4zduC"/cjrEu@qF_!M*S[}7}.TSFa(myZdȜ*"dk LhTz_rSVB=r-8h%24|UBiARvsd#Sd CiܫLt #ׇOOuQ/v/VȘ k C@M)RBQ=HMyi{/|<*m@cn[ۘvj%F WJL!N|wP|nzukTd 6N%hj/WA窾ƉVy"0o?GJ2ARR`gowQ om3h,n(skuⷿ;*Nf i':;jPM {{8tn3tedo+`M@8E ahz3r)!86?[y4t cZx5;\]VRXӴW̲{%;#(A6wq ZZk( c?RLJRaykXNrVڜ/W<0܃ϣJË)f"$VW;O8}~eW \,Gqzd8OwlGV53 _ǣtW)^mc-cjƍx"9R(ݾ&ln2E 9z-dK=G!:ͭL9L7|z9rBQr?7'⧓xT}7ܧ;ZTa07rCMA('I&ꀍ ax5Ұ"kV#&? 3Wݪw iرv/5PȮi!Ӫܰ6%h)n+ x6[jm}|hn ޕ^()sc3Ofsj> A̵% q=7C~0KwQJCsOv;B15!r>ԶeI3L_QL1E J~F+=s~=h(>,5m1T-#W /& M[*^+c% dJ4!nЩ}O,tLzY*uApXEjݰI&.[,gsVbL&Cݔ/]\}\#03]U`NHl>@Os2IG\liw5qh4jI%0S7G<~*T?S~WJB!GGOh؃q\%^`8eq{3ZH~hq^E)[[uLʔ4SQ-q6%e TJg붩t&)g\IN6w(2 q2_/G=w n€ =5_Ez׃ɋgΜ蠸qˍ)gWɷ]p: ?nnۡX=]ʁĐsVY\ݟ=q<.pK廉Eݬhp*t2Iޣ,m8@ M{kbF(1 ׾A(&>.BD߆`״ >Hx-C_soekDPFQuRNn3)_kvCq.tM`%.$ƃgy/h-݇Ƀ\]_i mhbĠ3{(D]$ՈP_ F _Zwg+u' đ)N7ѪUb¥( rxe؇d1U>3#4,].|vT` fi>Up7ZCqgCH=IO +˵0Vˮ= 6Mi!;`6>ЊH Rp D5@¼џT@>BAdO'jBСGp ӥ Z[ߋnM*I??mLrr Iv0)!͋veUhUT\F[KU|YI7YOEvf _%ův`Av qP<XgD1ꈡ0b5IJ y@H&X{Dҋ+#гY"IT G& 13Lh?M*:|H/,0e۹;[RyW2*߬P|@D-fMIyոKm- @FӖ?3ǟ5笔zR9cV}[;bSc:m#yj)KMx.du~d5;g: ]\ZQ-rDm8ۛ^ϵɁKWmlK7oI6H((iL lI7'H^z!5 xS{iSx|z_!m8N;䳰E^<MhÖZ{mCQx?(,dzSE7C:5sbAV<=gaRy]h0 W`t$TKۤirn+7|R/C@9C?1g|= %GS4$Fl+iWo c5 CLӒcb 48`3# 'M۝J!oΉ+O{2e>|z֍* \?Lzk'gk X28vd=P[IK\OҮ㤵iو$IV㕷(WzpK-}w"*R:3̷8ҙ n˘ڥN?!4Ch"2BɪC3vy.|oԿSe@kz,W,zsxqԢ)) #tj@z hհd%5<8G>D1,OdMyoRdLC!q][N4{wێL`jd` y&'i#E R:tO۪9 .p{gd„\Y FBV"(=baj2$(c;@6c5H _2OH"(4(bK\N 朁vqIK~o;j[P@g'P/ 7ȹj3 A~n`ޑO{~Ƭeۓ2"n%f3^).9&i2͆3QlŃ"# 6% 0uCL3$TeOtmCЯHg㇓* Q Nbo^LB/;lłMGE nDo a>?&B Nس|E˔3~>hbe孑УR"4h8T܅l3w)%nBPlFU(~nB: W9yj(axXx5yWVD%a5Ƙ2Lt), =33w#sS :Y-X_SgBylCOf6_ a ń#K2WW_MdJ'{u N3G9d,&W|͍9C>YѴ{Hc|KBŖ,KZ!:Dż& !|N6UnKo宁Tۼ%^eDy.gZ {ߗ554^==塋k?3kry #K2c-"q[reUNoZHRXh9F64o~Wo3N;f -%-UJs\zj[_i߄3F$Wldsa]Jv!m/aG-7X*=]p$pb*V(H RTە}΂VYJ,wx;:Q LKYDyԊҘ-GdڻMw ˷$dPyI&἖B2,mS;dWV 'yÀj^v`q$CcPk+h}^]#~ }ۭg# 'a*v4g+$a=LW知< kŜ?㫖ʠ7هyZ28dDp&S)|gkxew(!}]zUl(0U j7G-Y{x1?)6]{g|p_tL8 Tɜ#RL,/}o@6Ŋ7v_+( 18J1"/ttNd-wV=^glG1L%(G66z%R} n*52%aQܱ46OBlkxcJQ,OM,Ʌ3Ӊ"MQ[]%ԩaY@_Dr)&ʡ5NAco*Ep2Ѡ* @#P01 ԠйWGUOd3f\@2stb itʞfbCOdkY{{tɉY+O Cc"ՈC^GcF9 $yY8*C5 Ocd{͢gi5j>^ܗ# ͵4@dW-+) 4Ow7>BČ`0`uXHSt<^ͮcj%n٨4R|Ub ܨ؀ 8*UkTM rafhϊ)f4hޮGC! pϺ[z!'!n3B|ݞrw_@Kt,WaXǭE DP+U"B>+18ΓTSvP2#"fB.*s/?.G[D2/Y$'La;#|}SQF)x!Kj&Qn6*p1Zʧܸ֔=Ҙ/RҀ?rgiBc^yWJl)C(Zm9:@E4ͭm9y%K Ñ[b,+Kߧ\FU"G3XVPe\֌Xp <PLJ=EOً3mǂ 7dLq=ߟB$DLT9!-ݕtݻ1MR}]vapDpO(ɃwR;+ӛFl]jl2X5h#+I{9:j!m{@8.*|^a avG穅H%Te1&(e 4+X[$ iWwWVg-pF1 8^D8Hr>IȰ0wwv(3JC<{: Ï~r04sOxA9ulm\˱62-@2@5LȠ= ^yhɷ'ECԝKxMfp+̼JP&f*Q(nLKol܂~ fv4+\3Ri,fM?4isC{Y>8JwJu[w>4C6Yc` :@u_F> BQ%HJw:^I\MTUyٴ^WA'dz.. O>M~ZOB!U/Mt(|O!v\iSmD8$5pJ741 kk{:do $k~&q]_u`YÊs b豆eS1+_y)WOpdmH2b5-pdA*a5Kd; #ns_-XQ E@Pml"C)TEID`Kl<ҽ o4q{T2Dd)B ^xƾmK[jNB5Ɯn6-fTVKNej/G5PqbãE*)&"c$2!1Z*xz pȟ4t$7 K0UTP9%쒰XwPmb8f>rf$ܪ|.Xe7  cH ѐ?/O~q:6`WA)j q]mզ ɿң)B4x=ZP9y.yoMv>-OZ`|dt=_z_iêޝ/Z5hgc4{r~[; 5k^Om < I)J)%:qFBtI$RiGd-CGbgTƳj0dA ohB3=o/ee:O;cOhAZmY` $_pQT^4 V]]rhst Zm1l^5 ;تnB 87L;H7ne@w<5^m3<%~/ldN"Tl)ǎ(_) 8ws<yOŃsSWфU~s}&ԛ1bW(z Q2ԅ-ٖ['[@#<`"RB\qّSO.xsS]fE>4p&VnU2m\x*Ew?q'M5T'5ad CvՆL3ޒ.Cf t}afϘW ªr&V `7GߗHұ\>>=mXD֫nPUq"у?!;8M醧iӴȁ%ܱVyه4ׁkm%uM5 )+ [kۛԠOnջe/w9yΗt|@M_; GW|H(@@ ]wf{*/"H_6.~TU:ڴ=kqK ^]Rmΰd Z׼h!sXO-֎ze㎴VnN5| nžC!N0״jxݰl +3tANLX0Ze)Ķ#A/ yW~D6Z0P$K,H/;$IdJD\e-tXcx! +)g.|:#7us1( l%v\ƶXA֤THH];†Y̔xpMk=HQ쳦9r| >ܠԨ]$`O* ϪBޫ^ٝMRK -ytyٟmH`Fb]Љ_DvdmGc$8<8HTkd4-&jՅ@4^/݃c SXGUM92{%P\{QJ0Df'6Q#_]H^7@ :'i::nX{$??pv&| JOAG9xРy$n|IǥVBk~=E翍][196pYE?iC֜@;Fp#D+K"YM;' θ|*ͤMz+BW=aLnz%,qF y}Ha.xLGDYI6/aod&q@q(u3Y_y|[꿂^?{<6.>t_//xcHEW/6.|7dϫ72* <-%f`?36+Դ!I +Vp(i,X~h^ 7w`?ɝJo4{?gC$^Ho71?ԩ惛D{~crb2?q?Q;#g af9ܩQTã9HF}Ȃh7R8L<tc]e i7Gl_畘 M]exժ{/f% n"5jl@@y#`] {ɣ be3`Pn =_H5ЪO4CvvȐ+@,9;"uS32Q:4CIDOig!" )X4홳3.]M,p'^œ =sχywF0!uǒwS,h,`EmU[Yv:+)+Ѫڏ(Mx $=yp{Ngo wb N-9(tQ ȕ7gFeS:P* QYJl~%@D6ھ!@EPI'){kk뻫>ZGwepjuAjUS9M(L܅W˹Q[ *$fL}ͩpAckx@vXlѐƨ !WB$wmeJk4tyAO=OO#߉I}!jwJμ4op~e(*Mq:n堩@:PHQ% ʱLߋ i'Z7&pzǥGW? %)uTq,f3+3dT 7_*WA0Џ|<xSf^3Qt\2HĬmrZW~^"9#^`BQ AsOGtY6F0-cdՒ6З shZ=A/hB%RϺ'S( x^> agw;9 %JG dr0!„9Ө ^:aŎY1 q{:e3=y;&" )ZW~ Zhz}!UGXB9s7+ V8Ѭu3U"aqif/:G`8q1Q #r?E4)s7>!q0s ?r[:<α+GR[܆]>*·%н]9Զ!ڐlO%7-3 ũkrSL@6=vl*#jg.[2<ό5w}dU}4Pb? M!{ FF\`d(pp/ hm>I7 &L{F/Ѹ ovjGh9-Qɐ̦>yO՘5.[(SnO pMwI蟈\sZ3_ VC5p)ٯ}U*LƉث;f bɹf2a/ ~e ƈ^|'amEwWډӉIr*?;,ߊ!4kMKnΜKտ`*-ڵ `eR ;㓙_?AlJajZNTf |U.ZE"L"$ ]hSKLJd1vm*ޟYt _(':JX=frd['I>!8Z* Q܈  XR"|v=)J+&2z]xqFZPGn7`;AE/<]Э:Sŕݵ4%zWFe> O N펣يm`:G#_gw`hIp< ]]AR-Q$!uAoÖb}jp>hTor/P{VuAI`uauAN Otýs0a=c]bbؓIP !\K#Q)7'rl 9EVK_Y!rog?Ӝt}).ew'E!qW *7}n>5{SkxZLCX%;# VɉZ0d.fR-K,dU}fNp a*P}e*7CМzH4-ہ@.TYТ]Ч5"4'OeiAhQɅjLJAa@!dq|wslap>fۦSł_tbA][8DA@@ǰT/vx:x!I8CZ{1|9D6f-C| ҳ=8{VFPVGe(0!N3Vwn't6p 1{h5 '9݋?%dZTt5nXEHDw_qPTvb`NվWRM"?Y"_=$amePII@r\rH{EV#(BzKt\}ZV^R!9?=:z5T`f CwdÚٷѡP!~'Cz֟-q%է(Է93uvܦ> kLRͧ+0vRy+ Y|XZKi:hl.K H#W_ ؿfl8`hUv/kjg[7WMkzռYm4tcQ?@}V,N5}ssKݙSz >o}[Z~Q^2ɑHz nʣc 8\F}'L2Bi)oL NK LFCԆ~ ǒS.k]\OzÞSƸ e-(_sg#E!htkYXWO3l޸Z$*OA-]&+'R7XVܶ Asl\r٪GH)9_U~-bhh,:mqtP29ϻ_nBwKZ~ހ ɣ>Y!~"BYO01D%b6 &PzR= PS^˥QԨsvŧmp ;9JKhX \:H/*{Tg| G3nu,7F}pфRX(x05E1C_ݜXYAF=j @F '#\:6Fdž[%r{cKe\W+seim5jBGwk'DEz=R :u *B- m;==ӎmP"u _i`lZKKD_̹eg EMd%TuAyhV-`j(seX(D0T\/ j9Ÿޙo3%xYbozwCXWJ27 B,s%cqd':2T-$Dži7=D%3w Ww&ENФUn4\~+ѥ=-{xkS'ŝy*kS,ydm?Zꜥ7:Lp)jH8+ 3~!RрDs(vJwr_x?!t.@b[2[6j pS|X2,]Y)&{sJb[@4 H=};bno{YkO`IY9gL.h>r; l{1.L7d[K)){ȸj@)eD\'1>E<3#̿K ,DNn&t+zGmuvX~_;QPeЯXGRo! ҕk:4eR^,pT-:ZĜRnѸ6{yU>_ qq1Fꪬg$&=% >/{ˆBt11׬ /lnHš L{lURRYh41?؄t@xLmh!۹ x>ȈmsQl*<;\a(Ά#N!4%)z\o8H֝p(v J8jꔇ1EMQaɁ4h /~3/w?7Nie"{)86{m ׅb3Y#5Sc ه3ϼj!YhBߋҋ/?+0}{P $bx%l':%vB:},*d3u>x`.* R=Pgjn7s`J*_VD ||Z+B~s|mkLnGx1uS]Γo(FE!H٩!bOi>\̑|(aB*(fM~)L,uD֨ ׇ9irCEoD^E-G ~'*I{xثVF}IYa7.ˠLѮ wA2]'+xg}(ɸKUα&FdNۇN e`"BxS>Ҕ_@)jwΘͿDfP84!9~71̉XK>f#yds/ "Ai+5.wMuy:;3Ŀ`1txfZ!{Z Niou3 ;aԄ >Jvt>F,[/b'E ,lO^ npE=Xà*QBy5(|^1= |^Ea; Ki|э9xtI6̓xZ^)]y( By;Hr;Ffd{umf}% OU:N13gh y22Z=Fyv1҈~t[`bHB(d,ɘj;RΌ1'NuvE/~ T@@Fku50Bd=Bz.5R}{% ^ILW/zU, 5FboG6u2WgpKIw"TTܻ~u`Vii[#,PұʍG't@=b=A:ӝceM&D5GͿk,؆3J:/lAٮYtꦷ R!XqX^@^|='m&\"& /ixҧ? TAuVc1mp?5{j$Jӱj\S,1N Rڐpm'q_#xAQ}2呀: ~\Ψf!!r\oHqqX)6n%:74dQ+d:!:.B&xfM6 K01AMoLhXd4IHľ `"'ܐAbˏ#|9B tJwt[.DD J{HCHP x&:{hkV%xutO G9_ktg!?o_Hf"v7}?+հk ^K$C&ƁSiRWW-`Zq'JuWoIw(-,2 1AX]6dvrPxKe}zD1UJ"FP>ܭļ3уԮ$ʏ~CIAsg>忂U pp6dj D:XDc0wؔRrCm ؠL_ʇᤏ6dm96_a8d S'Q{tGN<&yGӼ.7ĬDU87x{:@L SĶK7/vn|>i^<ᏠRu*K nXgS!(qZarwgNxޅg6?ݯ"'+1=,ϥwe%:/ٟ+1"t;6].I 0e7lٴ;cw엂 Zq{ |Mg%;@r4#˜ [@mh>? "Ga̜2t%qv2tJ:|g(`';B:4lZq#9G%op,򼹇wĶ{xж79pCS^]Ptih줖%@!W!F )RҪ'T@Dἂ`S-bgDݪO,)R//N j| W32qbk_|ʊ_OfTC2-Ec#=u's! X8c޳ViD$fmZ>k5jn [ +mMl5nZy=ǿF\>Cͷѓcy`)gڅunOi(T1ۯ7@Dp Un8ohsbxOZl@:Yn+̈́Wn6р`N۷ytS򻞌e]̢E ,V~J_ hR;<|."M/Whc]q-EmϜXԯ?EIsMEmx͗rSМ myk̐#+2f%/ P\7t\J$)oJnyaw'ɤ^DS!-SN?jPB8%C%^ _nTrTMK2~q h'^z&+P̝ʮ.'X rH @u9̷ O:fDY⮉A7 Ga ̮G{jc@hb9Я>%>yi(wV h3Hg:sq;gCũd[r"M8x/!#Uz3OzɺT"q Z8!zRAdVSlC2`Ц0f=RˀPAx&sQBN)Kv:zp,֦44锾O> z&vV- !ھ @OEln .a#\ubl%Gm R7 `TM1e)nӈs~ThNXēD03axlh8%NE7<(ke9nH^bJ=oMj3FtUHr0 X`I@XCO3MK/؆:.U#0Ϳҋ[@4ё5 .N w"bIg\n\X*,y u.{w$/ˠȦ ,*Bξ@XtxWUVM4إC>*`BJܲ3 ) \GϏb.n S>N6ghR!a>}D `Y-@nSkA5vj V N:!j(FJ٧xG 'd;gh*e6]XmMCVzOƷ0^wdp7 Qw7w\LHAP`is@Hߔ/ Q-,-Xt8lf.0W_jPtj;xGN)tiYo*GVAˣ-Hܥɻޟ(&Ƙ;O7z|4>:y͠  Ky!J];Wrb/O᠝QѺnZQccS0oKt& ! pcXݯ&JdKMp%._ l`2ΖNM0 WvI_{[1YT+v5 <Њ_˧*UAm $sqVt8~%aǐ1}YhO#@ rCQxs TE!*ZqCђҹFszuYkDXʮ/teO3֜31ddh~кg 7 ^iX\I` B[xUh 5aBPdBE}~ff2R/Gۇ㚜cx'rK(uǟq)9#B~73NL n4VF݌ig!1F]ळPR9*Z@ō|* b1SAKd~gJŜOjKN'ӢN>MBqgvX ;P;[7AϭggoǩBD)߿<%&7!FF.L|fuS/,=VP`׾+CKM{gF$|9{_OFrFk% 7!Z>F .sl2:)AZP䕳4X|LD C9\#< oPש8Sf8?̬ӕNPUi,@8uvºO:DrꟵrǤ~/M@.;}ǁo~J;=T`r>aFd2ieIƙx=8^DiaV?Vf5Ttq=ɮ[>mNy}<P?l6չLbinx<SYLUy͚m q[|ԅ'D߳Uk prA>jRVyzLOY~׋yl;kj\]gIԵ1 u1k2xtmEC,4 }.(' 8Ÿ7țɸW:=h &nC!Od`i|tQ(YGB!2UzسV[th-i('i?=غ&|>Ij|G%1K߿ g'it=wn`z؍Sz|D3hLQjJeR48U*wlȾ"Z˰H O y0)ONJPiI[8&8/iʫV@yI:")i=\ܟQd6 2.5r:\  zi3J:ʂ|`ࢃ_+Oky7LT#N {M#.>f p)ќ7gg EFǽs B[__>2XODҵ0q=bL76Duj7 f酒@$%^0RNYU5] 2_m5سB6^\ar*׿n)%ɕB6"EaOA֌W`oX i%U⪒?&O'}MR1<-1D0Sd'NşM(X\*CLďsdžgȐ?LwKڋܞ\ʒtqU^ȹ`ף _qIWQ<4z5eY DZETZ#%7Ǡ jg$_ S2"i_L}Lnvr"ѰRq(*._~DI-]$tUY  z#U-7KUXCY:1> *Mf[ԌxGX5]fU¡~ Q@u.(0 ~ޮ]xze4\g%H4F(ќ#`Bt{EմRM794RAInf>UIu+ͼ[V2lO^`َ:/OD璏\ݚWZUx9-E[30㿃95a++fr$8 C c,zdlhY۝I+5M273%RF  3Tj_"H,vU{<{1Q^*}A+2+=U8X,pӲC(^~ޅ: Vpu3$Vc7ri-h T2:+xă|>|,UCl/RCl"O7&>FbC/\6ө<5ۦ.[!jksHU;56A{lG0 F{\+ bdNſvޚMa _N;dnO5MYy}, xRxtvc7Xl7!ùew6t%of62)JC7>0==;Wkw!Ub';4%P_ ?3c"sB{ *ru4ٰd,O^#-wQ/0wV=u uAGȊaFIzeE~A%AٱSnS @8;6}| EA:sp.HQދ(RKҤJ$AGXC%TjT9!9AG2r:H$v@1XCJpb=}09`J%gUJ @vewAXA\i_OUq2fGA[=c~:^$cGj 5Ӄ Ճ8?}ijdw\:挳LS T&?*{{m)qXjeWFG>83-Z=z6_Y"=1EdoGgXT髫*(dzg$?X _kS3Z [-*d#P6 ,J%x_F,.*ƈ&D++NT죞 xIT1!'f kk%1k:n `Hۺ` -|53 + ;Dey( 7ֳ`m׽ETĬ 8YpV:yǩ#~ ئnKEݴ+OW6bϚKEOdQ M58|lV\'O_5#:]߃ʅ]ԃ?Ejۺ ŻV ⟧ƤFB8ږ" ӪGt48p29p[d6@vQ<]`秓l1.+ Dg~3#C3cIc_f)%!򌁸.`1Ԟ5S!d$fDev] P.܋6O/$򮹂J[5I]S'+3*rn#lo[J)E4qFv=حZḰ %MgWE̙žbT{r3j*b9eS-s֪LIct#qX)2,5Dȫe I8D!oq,'?|6s͂nᒔI@^3q0`'gaD ýh8,Ϲf//hsf.NBm.SUu/F:ikOaCNı { H3+|MscA5#!a_ס O+vз aսZUi4FoAİvwc¿,w!b "83~}~C-p . m[ϺuC# ^fqL78#f8Hwh[/kRXA*ከ_{ݓرX 23YX۽m]6l&W'BDA}2 Y lu΁?Eg.ϊ~w_Z!ub>jDU6b6`ܶ/< J)qaf!(G $ f:gHBD^[ 5ýe$aL IO S(8<sdTDW4p ]?,@kdLl[-ZA跎$)r @K[^` ]1Lky;uSҷ#f4@ъudm펈@]R㰟 9rM]^UXPYni!B*ªd޵Hēݷ6 X(T֗9HCnTq=inaUt+d6ԣJd-z]WKAw%1?t7=K\\fc+#*%DCG)6б_͔ct~{oRtK)g?k (ڇ I ˮaJOGURMalٌlre k#ԱtMQF{b(Rf2Ds^7 ceEG$:REOU#-y*GX\034]=ă#ad  OM%0ʖ89clW#b*3`{/|F D&x] ^bR+7-K]Ȓ})U;[ZZ/a]{`AW?HqyDTS#E ^t+b7VU)4kZ {I˜ K'R0DY_ScҶ$12Ӝ{>˒~`.8n2]8UPC^q_vӜu%ksM:M@-"~Ŧjʉ|R,7f; H:1Xȟja:?-= :cgr^B>]'hs` y9Ln6T ؄~W=7E勓҆ڀ3勘  b?=fJN,*/z 0ɻɌ:^$@:o0lT:h4+q]տ1b"_Ϯ;ua𰨘z(8"rѽINaj> 13vԪ䰚3X!ly|bS_ h;y* =Y@0˟ߢ_ 4]kr(mt ]A-ĉ]C5,j9 5־9`1sym4z"$nM93s檾5rC. -/8_${RyXl+p|]H0M7ƭaZ#2ϱ@x%Ȇs<Ƈ9.N!AOxJd ~njCSgDִ^X=66FB]X$ȼ?Z5qӻBZ< =Z cd5}"Qm^RЕ"Ad{rv8# ^zȗrAS؇ ' n3??}bM?]g54 (?5dzSrfC>e-Ne_};D;ējv^ٝOt97>ng7;F ?묾G^XhzM*.o)H}puh k8Ȉ}`2j>L?",^%y+$SW;MƴooPX(J tҀO EVq/D-޾V0ߵ%5_>a]q2kU\mI1-/v狖5=kSK '&N|qA5eY'I*^ ^$=†:^ߟ^r9!Ls `5* uWvR7A-L.a== vt(nQVif9nMWY/B[ͱ$4k8d0}L0HfH6t12=CGoY*+M.ڠeQxN6QL9=y^%jVgBw"/ 3RZhsyKG`hOi;lRub QJ mP_ƎF5]\|M+2h&;ecy:K)\}Gkr$*XkLB3S=֐`L !Rf$Z"uZ{q= ٛ d1up݆4jm!O"覜\|ȟVwkI$kwx&lk /O»>&\g@EX2o% (Vg0>S`n 2'aJ>v;KBLt}q mV͍4&\&WyW^k0M\sxEdom\'wtrkUɲP\W |ZDޠJ 2t5\D~dz#mr<$'1# ,1h0-QZkIy@y_&`}@@ MƻLN\"ubUu(4 U Vf13^f!ъG~ |O4Zb= ?"Sa/K/w=LΤ|񧦱!9_ y:o# SFQ@^aξ߀tE]P8Xս |-o.Q/R$±J<u0}֢0zVѪbsIpּSMPDQbO֡/3 mqVK=?,z89>8d0p(M SZY˒]qwDD U`uW]S\W{`mӣ8Vun3Wy -]2t55O~#YY͢ܣ5Ouoؙ; 9z0,h:0pr[}ԗ WD8QHgi$}yϯ@@T'"n;s{C ]տ]ϖM3_B$Fw!`Ik3r B$Ύ㤪>)۞һ>Ni it[8ϗs*c5j,0iukd'4f'\O[be$4ܝ!a&+,v+Ǣ`"A k*G(7AL*_8Qx<.E Db*f;ѾŖ6{pJ^>U V2Jѫy}?8~>i17hgno܎5#s=ST%~+.ps:hVx~xO{15Aa ]Bi'ר:^_g4Lx!DB&4WYA*WPsPqå߬ϰӕmn S-ye/)b]C(;L#Y ?ZYbtT6Щֈ2.,,RG%br3l3˙G|O)d|أǦ0:4Ďr[,}(){Q|i-8b!g C?1Z 'l&WLXV,,6"jysL|Z>АGJrY7bsz #j]w}nzF" 8!];')u9uW-Xmw&XI`D Hk$έcIC~Cf8USH y!7NT, BА!!aYbV?^@8Bx^raV'aas6{*dfhcitNB/>Te7e8 MUtG g5vGF_4a۳eQuVG>nqN~#&;̃e] 1r1 :\?Nv?<w#W^6>Pj}Jk+UJj/[nq=e،~Hb[(s,X9!NV<^+V; L$q%2F(DUjQ̙nuLBQſlرyC ~6lS.d!4rzuW{yxGrJ]=3KWRk`ƍifK!E+af BA$hA2^QrXZnlTn}I'<`6Y#<Ն"哂N'Lӹq7,sܰst9\[͚uύ@`.ʋv凛8ۨK%/&U:H7{jJѱl߼7&U֫mIipEa$1}ۑK?ROyŖ\(R]k~Nsb糱n:&aqh^+$ D1pxUpq@0xQU.9-AN Lm'v 8 K\z!a^m;^` lv^/NbfMq1Hk]vrӍ5Q,1vAn^" b(0SxU#bs 7EH%ωtCVwӆCһevtQ5D8%#b%#G$p̿| A@wc7S$1ezy[t֕h Cԅ+qy_7!^ 8E sۇLp9ܨNl1,HUfU1nfhMe bp7*L6Woy%¦'X@}$ eW~@iS'f6F^ FwƠ|*1yv}̖*w$ɀ3.ۍ?>@-jFk^irac9QUvʅl*u~o}r.d=(3),"!|IA]uDvg179K *@kxOFQ u9Ybѕ37ItXx\AܾU\%#G UA[nP85> ^ * G֞s!Ƈᛨz+|6P!zKq>J"C;= 9R'F ò {DAIe]x&A'a0p0?*UMӊ>O6q5)}HQ*x,sgt1Hxt}^MՓ4 ia#&C/93WMf k$ߙHdт $vr1I'ExeTQ)!ہXH&e#dz`.39!KCK[2h ᜛uw3.3i|Q(EҾ^>Pg.١V1*07 y2x?/B<҅\}w*1dpl4 i|JW~ܨe'0{qË^C-h:FQ +svu6 ~Zo'"Y~| 2+Oo*e-X?3h}zeH/7Bͻ !oAG^ĩ:M-|ʬ 8`!XLL_ 9E^:rg]!;-B;ċ[T3d|gHfD_"kDdcӶJ 4(NIkǍ'-QC-#GVC-S][h򕒸K2]!NE$}3Ac<|bsp$+6Y`@XrY-#^نVG_ k+ ;=>l +FAݐ.dv]MB5 B\W 81.:OtTU\vž6.ўyj u/ܣZ)!=A⚳ۆU9 h3mR2YTg߷N]K@OhZw ,'Q33;2;_1W)>EkC/6'M6^{ȤʰKrxI7RksD)0E|WdpĚD+( u}h/cK!&taa -G d;˾Ǖ~6rp,I$rF:x+ ]\w;'Ko$R[C %Ă"yBDpc8=6wQ3TA\2QvCC顤RjlgY۔/;ud:Ե=[7C@jBZF?@5o*-/oBp%.o_]_"dI%߼ l~ 8 [D:-JLg󧱋1$TO OU2 (c+LcM[CJuHkS+^ Vc<.FW>na \O)b/OYG`4 =ja)ޅ2ZP=/$>_IZxJ7d1Zt^]I3ub`Izha3.NZnVz`>۫+)1Nʈ|]rW+-Hp2[5â-ٺ,YSk(uiMxgLǨ݅N_%'.Wߨ[3ᠨv oٶ)SYĻ63}֌>)c*?9(TR")V-L09(|.R)7֦@m'/pì0~H[,1]֧ʁ9LA1uMan]zտ횧 QgWn!S$B,䘎ņA✒MiPVrѠ4 N(41۹³Lݨ"D $+NBh5AEp$Vo)o,Ԉܓrw=|颩eAv'!ɣm U{q඗\5 Ȁ_^xvJF2k2tםܬ!{=Hrr;  uF4̓_xv1Q9[*7[ՏwPfOgI9NC] =bg_03J6 yp# )"FN[9C=W)mmu3*rߪ ,10#|',%ʾY/xR"Ҿ+o;2*tUlI5|v'($?S5b3o}s EY幯?jl9Y-ILf9軒zU٥:th_?Zs^d'b_ڄB0y Q>ONB~]Ah` gdX ={HVƽul1_m䴻 =X )a^d fڹ[a3%l!j9AQ/vcm2]!@ܽꦎJ ZZ><0JD/C+(^[8ַd̠皹Q?;Y?ĔjϮ.l]:#F=qZudEl[ee&.]RYQM%Q;r{ÎػWL ݦݕwf#<2 &CGC Da优.8e_u1e &ϲe;.}.RXybK>}='S Sox EګOvk*$c+g {YgМQO!tC=̀{ -M ޴!W^pO <_3?{_#ҝE5Ep KLLΠ4ה!~`g|ӟ֭l MکAÚ$}k/Kv}{`jdtGQeUW CXΊ8GB152'T_XuN@vښlw[j.]?t`Ģ AKÁg 16NO%k=V]f~џ7b'ǃIeL@[5[rjT2ych68aw %%f(MwZATBrR3@-_;$2rqa(6)GgvuεF ,ĭCRM8/$Tg$ ɹ]?m:8~:X=:}m0_'8-{!G@p=LumF)m; k7z~:3-dI3zAVDfw%g1W Vx]FSx ËQ=©rʺb@iOmCɩڅ ~Ĝޣ =xɚ{1!ڟFPZ` `fcY;ݒZg}TΏHKG}`hskΈ:əG_qZl5,9gB7B.t7w"<. %V#p} y:Ԫj>:d X*GxTxmuW M`;}08ᣉĭQfNȂM򰜕~wwKb0^5I`k-\'ð Ypɱru/0G/`Z]@ c.c$DRxXz((pYF&,#lȇbGgd\*e&!űBpQ=]=Vߡd.dTv{ٛ{6 OPSKwpywNJWwJIʌlodh9HU};Xw1>hГq+$asJ<;qq#r;Fu qm=p^VX#(ݨۓL2MW&x A"\&v'OuNB?ddX']Bs3Q5L-L' N92QRZx4o΁p!w^H&Y~wEJmtӾHߍlYsfYLT5g-b;߃jQyKv[f =&vWf1A1O4BG&)W3o’:d;0QəTܨT$Tsyk"OI t?ձ( IMt};)dq Ոlxw?[rU#lm:pen(>@Y9еl:7wQ0QEb(CLgpyˁ;&:%M]`~hYPN{b1gEl/h.* A%BCwWy(>vb޷OMSMP:}uXIw*t"@{ o"5aW#=6bayZ$rI Q"D݁6"ٕ=vC<'Q.W$X_$OGRN21+ѱCϴ$oƟ}lψU 5tM%~,w(.*:e+P\=eщC}1ohL3 o.?[ǓUK_:6@^s.Xpip9zA{G|FCW=^τ+! +‡$OX8rLOѷ"@TI@!:b@EZ,Lr]$?su46`52aL ryK&4Ȇ;gHhufq]imA$ +`"}!FB3dsk&@BeLb+pF{2mMQS͊f춺Qޅ\XȴhO* Q ZY >rͭ\~)g~Q;0?惃qpZŃjM A24Vwe$Q^dǥ0fj!4O؅.%E.aE4:rs9hTv_q}B\Gs^e`-bRΨݸY0dW_DpVCE/D2)/Rx~C$ƥ6P 6 e);)k *bO#|r_݈2GIAg;,Il16A[P*߅<:r@5(ƃʅToS5`λrOh,D<Ĵ;֙HcF' Db,jL$k` ;7'J7m+&8hJo""\΄@Ɨ໣f™59K6)sym"fВ%d~j`8/B[%_ &"4D/,9F.Eװ_x^T⺝XΑGw[&ZtI) "Kkr26m,<\uG!l(~?da`Chfh2fSc,KF["oa?{%q,#>l+J ZQ>Rq4lZ-D~!a6f;P)N@)JS{Z8ED,Į$x뺚U|=!E}a$w}i^UV%;V64~K&KT -YB푱 0i]n.Õ!|.,:Lu>KS[LIɜnm OӄG mb>ֈC9Zԅ#u/X7$i ka?:D|?y~ Z[ z >\J;`M]>5pTVTd# ڏLQ&]M2ƹX&gp@8=R]_q:H-ݧhq#m=DCd XU{??`^N1ZS':_xӝc-aZ=7>[Ѓ?0/t:bJ';*!U! B݄0GO"Iu)+jsX7iULma"nP C*ļޯ,yE0 F:2_|H$jfs)i0yj m]zJoHӻUj(':I:%TWWcZ69z~hiɝ;is vI T})FE܅0' f/wT۸183tJ5@qbaάߝw,CF8hH42J-W"T+"L'$7]x]{UnTl/a,Cda7^OBGo\]oa[ 彮 B.06K!*ג&g-d">2q>3ݼԔV ͐@N h?e-jpGOW:~8PW{㑋R2E>FpjvQWq ם3Q[]9÷6wӧ`nXF oNSMm Lh-ʘCY@]]683}(a0tap 6kbEv:]E5e3ڤM*_ȗx/J3;-@* XUWIM7ֱDBCa)5бHݻvtѝr!%$^epRYQZt'cvdUTAjR~~VB:xjl1˦@Q7{hَ\yםy͟y&°0-u:dq 'mjbws&q[|j$9ej=` JyV2nыw kcՓ)P]jy஫\d㡽(.q,εz"1VBcJߟDC~+"8$@m?`U& z _䭘 (5{2ڏ)6"qRDW=1Dnr#}Ί Iّsqqm;F[E R=ak wUO`Y:e-9 W\EPy:3W:ΫqǏtR-b*CsK:hIսgx}hkWh'Cr9ajΘ6q!V_s"pݞYȑ?O:ˊLe*8S=J- 4(Mh%xzyAWAGAH웊9ZA`: 5^3HR>fJWAwr.v򽅎D9>a ^!_#:xW4+uyJK>\wnl+\¹j0e4طk݁A8' z-L(:|^6Ke܆&K"v͓5qWwZ\# a4 FHy:O-.p]tN*;^]Aa m8,gNw;2;+lBTE)/Y^J, @es8-U]4'UÒ9/jP U`2_Š)in `_C8_Y8k3TgH"=:USZn"@JiOE;-`%vu h왽W׺B$/ zwэJUNf:4*i@va@p8X c(x3#\)g1uxtِ*9!v2k>S0QƾҲ;CE]ޟv|6;]7"r Y}6s(54͐4 TJL-LL뵓t -X9G@M{8TRO?Vف㳳3%ʥ{QuAP€؅1_Ϡ 扭>D9gRp& r*w6I]cf-g(G=(1zض)y{V9rKoKNӔK<̂&WʍS&OC|<1w oj! k[)۸U'Q( H*CG&(cc8q|da2&٥\gvh zMg]_>Ard,q q2|`U?*sHz1 eqn }>TAYeWt(ռEi~ϧw)7óՁ;R]|c7Ȥ&a)Z(Oy=7p6&%;M}:N'/377H@} ޷^ TvZz BhO|F4rYq|L0Zn팳a#SFY'~)*sƴVIeK.@B X76V0ޙHWsV+ؚQ u oNG!P@\/Mrm1WVΘ\9_&I쭸X4~k5'v׎CDE#Gʡ:agvR* BP.ro6AAK Y|eWmR֬KB >*Qmd=.Pl2!?Gж~z?KW;ccNxpc!0D’8۔&,0EBgPa_i@ Iw ֐YDR=PR `Xa!-s#ܷW{$IuG(CHT{"=pooR)Vh>Q|)=M]XyԶ]#ɏeVԺtJ: x:T,e[QGǃB <(P:$74sP']_*#X~# KdxJCug}erglk*x!Z!BVjD=?hR('h 6r̦i2:ꝗ_kbԆ~U#懠s[P״LF'9~L3 MYwAlY!G=;f z@FJG hbakW9B L(ViѾY[4`Jձl=4LxCB4=s uD sw| K cكygλ ,S \ldu*`zVa2Y.!Z~-OQGQ%4\@[c?"DkԹuž3gQ}J@qb+i6jOfI1]3Q7m !X;\(MTО{M(;GUֱF"uS!ڛ5\ؽes tCT'a/Wt,h2:ʒw_3|Gr6iPwc_7mLDZS.k2w Z@ 66ܤ-C3.dz:) `WhQTlmXaRH 2ۚDߟĹ0B͏V`&o#~~ fp[QHTxODFt"楅{<2D{LLrs1S}x d[툃AlLhuͱsQh'PT?0_e><)&7ڇ47uEqnZR"q)~u&[sݮ\̹\vYEi"TmvqDg$f㋿^=qX"mufJJK9"lV;&Cd%L>Q?y;,{Z%;J-aNR_ȕl,]xl&zPupTmMn(V(;}/[o|6w1nFC}^I'KpB01L #;3M%@X(!PG+_i-S+ Aaq69,6-8%Y9br =#}݆5[syԄPr,o^ƅ.e1þl vAufmӐb!;PBUfmX\V{`O(gPMg8+\j^S3PK$dey/hħ͌jY,}WjXj1 juB}cBW].I9X|qcq~ƺ+JzyF$0sXYVRexTU,4 $F?+.fV\{yUŇQcb 1+ڝ.>ѶR`Y3Qm*"Ij VQT|v 1dQ,,C_lyl6ZS:D#Ieߢ)3_f#2@S %p&({hK;ؘ'ܔhW \sjmrxyK~Ƿ=vBd-A(/U NLE~4bK!P$? l /5[܎-,QTCc.kr"#:dEk%6 +q؋y{c6Fl}{G^=4nA~V_lsbnUC8G?4l5ds2D7|.&/ kHƎkF,Axpi }).,3pF^\6|~Q⦷ ,ܒ@8L ݂~-<(魼=oO/v:ho%:V&K;$oaTJKjҦXCzFE/)%eƩz/f IzO:8^8L]·) (;:ʌ*(ZnbM:B|j$@D r_2^m$xZޞth:% O.2W,]>NTYגs# V)}QJ.DH(hSt7i} 荜 Wc۽@RE1*Tp ٴ3o'%tAՉj-@uRb, [xR{xQN gOK˵CSRb 5M 7S%B( U y˼V;l">qS T51Ka=G01_[cwrW4Jьt}Daah~˟H1BQl,|c&GZ"abqw~+JOt^&o$_,w\,Rډwm _cQzGR.ֳ 9C(5_ӛ(1KcohE@< -Zj=7=1Xx*\z̍6+zHk+W"tj`/b~nu;ke+u5gD0,_ H%nC\͸.~%/:&t[!V}r^BWciHv8r;JjpN*l]aJ9$z\I?'q>,9c5V)L-/<Ų6و}PH)p4JϤ8ja'-l!N?kgly\yc%3Z<]b?=Y2%9KC脑G;E*dmPRU`GV+Ƅtaq80{E{koXяbFN/MZMe0d~p)G6M5=5`GA p-l3C5.Ė<"sgtU<8Ą5#C5 ,Ci{I&FxGZTLg.3nAD?a_jqؚô)]U?^ 2Vje VHKE ##2R]v,I7 )#>#18'zb(]23n0:bm)9T EbH 8[^ؿ5.`qTyq? iTbg-ކғl8V8yY Rrj* Z nBY,/'Tu3 ZhZ(͚w2F>N{-΂bδ lq EҁMU\]E2@X֠JciWCF {`.oGԭ`Sgvee͏ŪGHնt!j D6nj'Uo 3mY_;b _dყ @k'~ qYTL }Xb Kbi|7_.j?eU|]vS?MW\II͞TEsϐmP&kNuo b# 8O&]R>>j*5-sQ\ZQu? ]Yɩi&VPv$Wl3ozav0nL5G83.O}yy6={J7S|w[`ȬZbyL삓lDjV,:8Z7 "I':e( 9=Gvb Cf'ao 3bs&1 Yqfy/ÇzQ-[O:0-yxY bYOX \is ުsx){?}ClU\f:@4m1 L9cwN{;/6|keYj_菐1Za%"iɇ|F]Սd"ӞrvVBj_C+%[uoR©SWGb%V^p8H3 堂_hB{9 t-qT<+%@92 7[xf[ٻZUm<՚?Ryr`c^ w6LF蹞M\13`\`}Fz3 Z{drRVIM@+NVC}*(Xi-Sޓw#(0/V@1T+$nրԾP,HGۓZ=8J*|f9W㜦gR8'pNG-u4G2LF4n+h[?}5oGQc^ЀS`,53F3ǸT`%]xUVRG#F;%11A>?'bvɁDݔD^!Fz!!y|հWjgXY:a9@OlH\N+3+Ѫ*$poEq~<0wA,2sY2? jY%wDWݸ2ĸt3^|_6u:GDzk5^iwjR.j^Rź[Y"i]|RP}@mSDw5B&܊3kvʷSc'(mtmXʁOyuꯀO H$OJd8bAJ +v8v7$Ʈ8E '{l_KU |}g,6RIdLۥ[`ZPlf?}ܝ@9Ef,rza<] Үbg +i0l$ h,مyOCM<ȑY!x!-oSfQ? TʇkKlN8ʇҽ7$%a1 w2<}n"bk^>pwv[s߇mZ8!`zP&Q,b%lV6ΉI{EMv)wB-'bѡ)u6'r HUjws ^ruœhO0mcb47"rS,GgǛJy}^v_sIY ( ਛ >0;xKi܏tcǞx؆dgaU^ FqUIY(۶R e6y73hȬz+XE<}*aY5XC0bBzbGm*ݳw!O j^9:vD6;qR07~d~{rѯXNfl.FC1aR Jvf/:Vѡ;!ΰNsGF9owC}yf\C{ljnvu𒺽_3jlB%siilW [ O93yq ! 8__И UJaL2Љ9`'F|sTafbńYQЎf {|1%GszD`XUUu־t<&࡛Wow`9奅* I|so;v+^qkkᯜlaZvH{2 _2X5f;{vd$^ZEi!GFeW&&Q5a8!@F*ˈ}jg,عSm}J\XW]ezM3vs*fz΃qԓ(RG,SNI3pA^e;B$f"5hYe4wxB0rc\bKc;O g|Vэ(W(#?OBcv4ތ6l80xdj0F xRh3 wȱF۠ MU$GM Y5^lU% 1Sj JadDX=`1IIZKbްsHϩCϷs2@F¬ȓi@3 P,tX̅N[޺)"h% b3M\Pu= GG"&|-700Mvt0_.$΄vRA+3w*sw~Җ/@8fAz)(2AњY XOai?<Ve:gfQ&WdT}M߻!g{^,`e6*?=R.dJh{*$bvL B6d Pl{IU Oܐ`9|Gxkm[xܙB6><>>G:8M(psS2DVPu.6{Z+<;dUb;bq}5ǃmK mP,c`"0XlCРj{d$[EdC6(g$yd7N,vS-C?-GO}sh*=x_P,ՉB4ꡄ\6_u=zH9SR\Ch9ho`yl}4PhΥ7>t>.Ar }^ȝt1q,TˍVpǪ: i\fenX簽{GC|`Q ~|ZLv@$Kw{C~` }P@sT:*@ܙhț bu2MۋeڢvyȂgi* W\ Jq#KR& ]8X#@wTO!d 49neێ2=L@*Y:K y]jJzm]M|OUvޡM)L7xC,@qڠ "Lzb] I.iE`#>*k#^7 0WQR( Mz|5SU??x(g,ky+=0 =kds_0H.w~V8|4)LMƤU^// FN{Ă$* wD.#_v?{#\gޡfLIE3 JӾ0Ox2uL;|G#pg9;+xO?.e8'J{WH91s m兯 |\ՂdjPFN4[} B1r͗%1C]R-MКN\ЩH!B OkjE !1s1YO9+q` )kzErFA`01<1`xo`Rlqe ~}j/_27!QIk%iWA3NP +_m@YTԎ'<\)"u٦ 0>D<,~2ݹg3Gg2t m]>L4x|re.`Y}к$F UP!ȧ_Iu<ׯ %kǨDS$_y _e !ODf̎oD j3vRw5&v*r},{vimN4(!}'*x'|>U^oOW4m~F{B1 ߫,g: cAaUv [,`0^F %Q8迓A괛Tr}N(/AuǎS$} aZ_ )AZ[]ZDFM\Oe?}q=K k,#~`?/[JadJLF;ZHby$L1 n;Sę԰`EuR NdXq~ ~X35f65䷽FT͡Kpx\:s2jcw.e«)殴^Ƞh.SV=9_^m4m&yLy)p h(kјL R_#-,&?j%ԓk5ߤsd~JZ=s澀]#L<]Μ4岭TJg;fNl(%n-S%,iTY vNFuocc.7\锄GГn$"q5vԀUY)j6&BKz 3ѿ&T+=@ BFx=ͬ63cl"5ߗ8օl䨿`\OH|${7$# iz| ]NK vUk` Ӱ+'ol#v+HNE[.mg_?=һj$x87=^F9w; V gΆ@YgndA.z%F$1sO epfO~}<ʹS W~%kj N.W8%© źX&5>McOSI VzxK@뽿 <1,S@ʮ9KaM[ҩ+] ݢRȦ/˪C]#aZ\̎Y'p3>taExn';oO*3Z {Nk9AqsAf_ߨ? $5@= o=[]#g1!}BАYgKCaoe4hJ %Gɱ[~Gc@Z(#!bx?A5^(-)׮FR\:5 )[{z^7^.n &c ϡGu*T%^@=r:qVy6*6| e| d2GFq (9ux%[֮^ yaDD*:'4gbSq:#5>ҦL&_</×cG:D[#qr[vdf MzI(ͤsHk@194m*WQ3,Orh^#y9OVbfU;zh|.2|f!sZ6r23 } na)f#A,׼Ą6{\Z%ѿW?-V;m&Vw"RSNjNݢx^$<ґ⠯6,E  9|+ 8ո$=#3h Ն-fCZ_hʟ.#흧M̪/UW59f9;Fe6W܏} X݆R/3. GPO/idE0eJj9*{v! gR=_ܕvQHda{MmNCJ%T?ImdΑ ͚DZ-ߠIjToضlMYmqӫۥ,7Jx(zv~eQRU,s$N#Z [Xma`9`p ѸS=5aļ%>e3ha8ÿuHiS H%130dxZ8)hx>CMSs-Ҧ/`W?p͙2:'nTR##J0mZ)7;XF#Et$'51wHݔ?NMK(7KZUP!١ +c'%p^d֫\7v:]4qlAi5 ~iI5 9TΝf]RAkiCfl&X]x'?DGߟeb#w•̑hR.g.X4%xrO06ȫ;خЁK(HϚƦ󠿈`pEwqG Te3o=U Z*q "Ms`vؿдI,)0#Ԑ~s@%?;1a}kXib%9PX oH/Ih}?q?#v(Glaz+Kg碠Fmĺ-cxs{.ڑxKeJjѮǷ15s? HD1(ʠ Z8 SP[l4p پYWTM0FHצƘWCЗ:~}|F3 @=FXOw} #L~G#߇MsnNLpӨ6ZXĂC<ù_\d.^֊hl!/\I 4*6TȜ6#ֳ$-8Kށ<"V+< 4,5J7jPNAqnwu8][2 gfT]D12aa~{@ _ BusYv"WUWo.Ӱ%m<rfz7;;4߮GWkbsrICZSKV5 3%\z0Yv[m,yeQa;g ;!p{bBIf0:?ৄ0I.kSyW875ԯC9̈7O^AJ!  c oZ+󻪥o޴AT@_ד5'ԸZZWV9&w!f]s:5Tϝ0ndw6.a,V8+VgqG4BLܹԠ^5ӎM%a+L![Lo;x>2߅9M(auNdY|3Ӿ(ZJW\a',ym|֓/$" e^`_ biZ3Bs}g.IZlj-( zW4E{=e#DkWXu .ZL~@P[VB.4? )p'w[TfbjtUX #1yկ!*J-*D߰3&A^njH/ lSo~[3>{/dFлG(*KɞƑ.CkZ:嵈"^ !,iIW*+0_C _w%MNvEpռF_ӷԔSH;3^qk乄ipE.%OA9@ά/ċUnl# S\T=17a1ZsNIP y5XXƫ۩M=d2b]ʄh?eiOGI9 XtH31Q~{w _Ygs l=JVhi} ǾV4Xi{Uzä+ +ZIx,kNJ_;}j2NA{2-Jt! HbFێ?s4/& o="% PzpNzj^Fa=vPn(L-z7uqvOoͰ8ٙ$ۮIm:Lbi4?4HD e/~)wŀyv@9W[pn󝃬$u^xpE! H9Ѫ_('v{vQ <݆SLUkTdegz4͞v粿WBwqmVHlf(py΂3 2 IǪNKz7Pd|0;gX_%j#0C` &X%F`7ݡ`PƂMX(WOQ'(An7j;!*)%&gz) >LDKD[d%zW5"v~qd.b/614*!1itAo4 M 8!_d|[igJ|&䨚͵Z59e-9֦>?hQiW+6ZxHϐ$Rpw枥Բ Ꞥ~ECD%#,zzpMCѼiCl3F 3R7ӮE2Ӗ+'dV˚Lg +* dswm) HJ|BԴT:+) t0|}̊n㓓9 q_:UW#9}KDyk#&0A>;'?1<"xc tҲ -VƁOf bA`apVW3̚5- g^A&pnMI 90T#j'?ڮ߽gi_$wb@5D34^;` :XY%2.'e?Ðqt:1Pg#xӇ3Ϲ g6ptCA+; Il|qfW^^d@sldَ}ԺP5aL6e[**A'cJr =x#bLmȑqKe9 tnʛ2ZT\ o`1? Vn粃dtm.."݌H ^l֨/{v+*מ a$)jlEذ v ֒EE#BAgjNJG<}_7\)rȈ_z*eCNUr!P(o^fPo,T\-ۨڕLOt%dOUh]F'pD 5fB#Gl2쳂~hi箬c˩^k jϤdL^ [hzdK]kRD "_{ +9mE;$<&0mG̚뺎 Vc!fN(;Lt+ /Ad( J际 j^QU isY9@Y:0NJy25Vf3l)ZDӤD[Mtd1oJ_9x?eFLGؤ{HVy&Vi [y GJ\ySglYeLGh@6W<_Y7DFP_9ifV|=\9^lR_ rKv jބQ7ÿؠ0"*J˱|zf?jP܀ j?QLƏodC_N(5L c@!JxDIvr羼`Iϣ;tRORI%0ǚ!ukWj*[wjo1V=1_+]QD%lXV2n)01hԩVcQ55+fH~ UO8ѨwǤ`AzTfLˀ2?2_uz<4[W(Xｑ J\]:VL{_"?Αi9Y 6݂0H[BͩAFƋI;\`<uFHD K-}q˄$B$;*c DSWR~D;H@ŲSĸOCw=uyūRB'pf"nO*S]=9;eVͿwW ZR}\/`RxrdPR L(#oS&3IN#Md9HXs% \3wZq~#?k`[`jL4$ɧ;z*6-n$eùK6؎K~'`\m̕(>7Q82~?[ScRfhu5$)廂7wSeFF(ՐhK}0a$Y9K-.k&,69LJM?[y.$g:4s1*$yx%-/{dC/1Խ?i.bi${BggOTX}\ tl$/W90mX{4y4E o\n].N)E*p( 9J9[_\3ey!d؍Jx``h)8amhRiHϥ,ŕ Uoޚı,hGBKϸm5m+*?CSs`!s-ÆŔ:j=xkU`nC4zM*FR*iO a,ĴIޭ2:AjEo m5T2h@˸'!}cv8ӮX֬ AD9lR̘D?)#Ư*Wwb4y,Js7 ؇ZN]Z훢V5@w9t00 4-$Ia>wJ\е`S]Vq~y}7l_s-bV2ߝ>AV1 ӮsF Ibյw٬wg&K)BcZ}"Y^dPj)@>SYXQXs;,<+4ot+0-KQЀqsi׀=eŴF|r\`vXBd"-5_y\ߐԄ$2a] @K {VSVr!u!aq-֝>_u#EZaB]Ư4 Z6V>fŁ oe5.免s- A/uᩋ;eL1Q8– Uo _vOk0%szusXjrlV6ybV,oWom]-,coJBdJReb'H4qQ( TVU9Js}vK<͉:v>|mJ Ft>Wt`Ɠ?#e!E6O?w@78X~NMK >Ubw.:S,\9zL^t!d r٦l\_ؠw`;{LeR.1cPB'2wJ`kE1k/8 pQ裈aP>ú}њU^52]ؑ-/z[]8~ӱ8c`^lswu0ր/eYslI-qT d5.dk:iS',KF0륺*X^R Oe<|O<+Kqf-SzS,OI~Y65aG hm$D4>mVq?& ϑiRعºȩSj@Dk歌V/fΞpGTyX_:8r  fiiCP ŲHZVbudq|OK9.3ޡcoXG}?1O{{l)BscFj&%j/ܭu\H"~2c "Wa@ʯt(%4Iǫɧhm%R` GNp׬ĕ:6fImưn^zyR?w[˥NxFNc%GcC^e?~E.nO~& V)렻 =ި^Hf)Ev9 'd-i~sESk!F#=z^ EVE(b?/9h!?"ˍqli]w8 L;y<4t8kPG?WQX ݠQW{q/1{4~ms`hff4lpaeL ^'ޠ`(4ː->xg$O $sf}BĦb$ɻB1=_*4Dc(?v&e9=(ޑEzCȕՠ=ʒhNs%EȒ;$Ņ~:&G[q&KALN=# į0 Xb+Á^dnjrBn %\taI6$G1"N$ ?RK"a=>Q*ۊRf@ }GS{b{ܱiBPtVH8:vԡƍ qNjP {(M&JBW nyRsʀ / AC1(Fx&'vPרy3 4Ex pVՅUJ>ȍ/[EpΎPTXb US: {)UM eP5k?AQ83xkիӥh+L{FD{MCUG:}qʹ?v>/+LSh1Uo)J>O)pB"".YHAyA1wմ}ctۈ}[Y-bdN&,w?pOYNu/ZYա f7 .ž06$vza7"/Ukk rS %56+qz[T@n$`'@S"5 ,KywPBIw+&YBkc:(W6YQ}+g \_ӽ󧍕2QܱEVWB sŸds)3 "ڐ_N>YNO%a4Kl0VK_OSD잙^  Pu);@x\>ѳbiZhQpmvX=!?z4?~ f%WB笻QVnۧ6kC*$4{)|6{\8;6P+t[qeV2'ͦf{<atˈJGpv7E3܋-a@{_}(Un 2h0օ{КN~Q7uy5R!ϊ]C!ovjaac7g= ~P'H둊-k^l6'ud :/#i4SR2r&/G:߈c_Lǝ[HS?#Dwqqw1f]ƞF91=J¨?^8]Bzfb}SBԈbiܘviw.Wz#Tvq:WPd̋hLܐ*\ =dt%ȈjKWrXתȝ4sLf88F(\Dr( }wt(zj/KtѠ)MS/a4R1gCi*+P[EkO\K %[^ѺTg_ϓ7@κ))#O=kPEOv=Z`FŮc)bqNU)pD?d[@6rŒ)}lU ذ7 a~*rc/ 0CSǍQC#ʃ#Ѱ> ݩq8b| $*I6m=@_G=:?l{`@Jƺ5fXpDyJzOaXDS4=*[ r١mL(kTIm9x8ԈplI$qjaxu?j\l[2IQ:4k_2kF`O+z4%\xyͮ+}ɦqP+GufѵOtA!@v S`N&(ph { oVB o>}mλsbwv[{ur[0VY=+ym}IWrhf t6Djp$A!|7%svciݎP^ Zۅ$rX<-1/ĩ` JԵ]##҃T_1dc_ J^7d iZ ȉp:ŕ]?`^}ՕBWZ !+T_F4;O,2 7 ; L%c\nO[Fd޺mq~$3b,*#C ^Gޤ?n1tyP)!D/AuPa;XӬި$c-2_-9FU>3]E~[-95~D%jTX_k$ɫ3M]O3~A3{k.z @`;\zn~0gœ ;jg/sd>l0`A&60z73>~uSΓr_Ҙ=mF?U$ղ}eT/Ȕm74fg6 yA01f \&$G*Dʤ?I) [+\߭~:uȧY.xaӲOٌ8ܰCr͘Р;S"VsB|. C2ށ[!qtZxLo_LU\>KsCE7وf `uF@sYiD|h=A,ğ.5͚pm +EB"/~4Gzo[^NA wD&)ˡw㢽c+-X=f{}V.. 枂"\ڶn>RT צh!'~cTYMK\ w*x%MP$-[Ds;ygT^; i|rK9OZp@p~Xk.BnMϖ.(W.{>9D=c@@xeS |O*Fg ;xjCmuĵ˱^Fƫ`Q@n.x!z[_Rx_s XN4nE.氱@my:3]ҥ[Gc!,]Q$,%R8G*$pZK)N(nꪥkMpL įEN +- ї9tELX7Z {`՛πida;ki/nA2<]&YKX@֘D|15R ܾZ@Msfk]e`~Os*UhǒKY *sp!H"yJ5?Of6r=ZBz:̐/'З Ah@M‰;l ƾomqA$teH4B~ ߢnpA>u*'tk -Fjϓ Ga5{M^qC.D Pa/v% Y :mˀ/:H I%NQDܚFN ^QP KSqB;GLBw eWƱ& k73T}(amesyC Mei4Nqry]wAD7l`UZq(_+*mN@d! !7-`?r&!/0c86/б&씪.OJ>]T{T;>tUyPoy ֵ'i~,뿷 zh%̺Q't?(E$sg+Yyۙr]h41ָ_RhⶅMVa*V N #yvj[(l5YY2FHrSNUR8wyYA(>rQOi%oA׭_h· :zi՛ ?ύ(/Fe TrK8 N GOzD?іsF {B/ J''am.'ȽB#6%8j9@3_-\wEC[G4a^n=w2z+; KlK&{t6Rhܭ7C<„XXutoYx`[hm7ru |PV6̈!bY%͓a斏B߲ }Upؼg63g|G3)WqPit1Fd17рcG~jo+Eb$[S#BGOZTΞb'iadYs'eώG"7K5Ⱦ~ }eϣ1c6j' %>x5!qFNW]xȆOGYK0U($3wia1~}~>QM(<UosňLIH|N' Aյ psg75<2C#+ Dմ2e RǕzmOb e:3N}Dh("Aa3I -z ׁ {:}`0g= ) 0"^sUU$ 3H_@jYk΅Q˂a,yZ93iވ@f+V/yN9H}G$\Pt٭I2IڙC՛GB+^]_hgp͏V$pas\uSneƵ44FXNS FID}]+ +!~(c(1~9B⺖&͍kl$_JpA%x)}Y66Yo?HՍq-b[Is"Vy'?\(qp$yW=(QV3Zv*QQ]bx;)cq3mW"kh+bM2ע3~="ȿEˌخ"syg>ۼeA[#hXz-^Uulק kied2R;_;Vظ%f;K8NrXSY[a_˖ٵʠn0.'x`xV1ɽs4U8XL]"!) K?Pr>t s5^. #Mxma)g ޖkg燂3$p\mU`A/R&@MCX{߮xS՚S l Қ&bE ]E73)zn/ht2C Y3"^=7|9}9- op:D^xOYp򖯖bsx~ݘc6I2HD+ H<%߽)nDͯ$:4jT`m@+<,x9>oSN)*HQ]YR)5n.cKfVB}SEH5zwl$B3Tg:l@O R5M0e"f\LvwdI ub4;k;Ł<~Zmo6n8Ӧo\,|[U3~du޹18ٳ\pLO'WĔڪ͑7Di/ҭ]NC-6D“2.OVf_YR3JPG`?>3}rhnIƯX_aym< txKWGЉjn^~LD&1"|z %XTMmu5Hׂk>d(2Q 4C5gX1IC)54톬F/ ?U!;RDP /md<'[!G4"Ny|;#㵷4$ow,(ZtVAmDӣYP1C=JOb&{Ƿ|W bK~nEZ(Wy ̺sXXH*K E} 澍Vx+#~:h\:φǞvbx?:H5[ձ=q.jΔ@Pz6%U珡љ+'%#qBD&rgȘLk__9,q=%\LAffV2cI+%n|"9958B'}]VGFT:h Xv 4-6IJqYw.{3v靫lj{ة XNŝ_Zb02b|д9C4iPᩪ o&l:ЈU`m]KW"y]$f4*3B*yxݺoy fߪ`;O r`NV%\ |'YR#"#mq+^Q1d^uOZ{sykVUŶ~ 3C<FMŷ >w 淂ZGR&U8ilқ?jiVb,=>HCYqT39½NJh,ղLl;n9|PC]d;uYr< Dg-HtCH处[_0d w$9^gL= {v 9Jq<[ݎ[R3L-O{fY:zy^F|P 7l\/j}uIh|m{fNo(|VRtߖy}3>2sM^ھUG>C"v}4}`?xʮPS3׫&qXD*JT8u4 (uT 5h=9OQ2QJYGܦ9}v) 2`0<݊/z ޟuRf#]8בּg 2h5DwW~63&er-Jg~+5D 7MR8L\\p=yU?B>1|Y;}Q],S6eLi˯[m~ĊˢC3vU>J Skpop9P9OrVQ_w㌱ZiTzڭU5*?#}|}_r5Sk!4f [?+_g1ze p'U`~2C^9\Ŋh#OΈsC@8m+HSPYqLCn3tg?K֗HG +[S-Bxщ§ pc=~#eZ2IPglyRMCulW Ǥ G 9F~-v_<<] zNV2@huWvz)1cn\Ţ i,2 {f}!L6+VLvN4%{Y5O(C̜~>O>NGO0 }K2S@q?Et Ki}6ty$7b:H:v?c\(ZnW'㱐`Ep.<ϜJhC_;04QJވ2/Iq户`F>4`dmI;$noFnv ,~`5SWF"5ٌ95"ľNB;8W.goh0Ax%eaX d_ܫn餟iS0''n(&ӑAs 8)UٛOcba'WO]ʵ+'/Y#"/zJ,3RPEJ})nMXZYy1PF".W040K>!ҍg7TXqAu22dxHwkG500lt!SZz}<?mE\p:,ADkfG_:q5#49^W}M?Hټb ]5)h~/C;$+D%_ %^1^Lk$g1rB20ooQ*V[~\ݣ@r⾫:E@.ƁC¥ՠuȤ[&&F jc2x&€ZP7ĢB #+.0֚kd㆝w_K.eJ9b~^ק[I[guHR8x+f3OjYgi^$&0[#;%͊6l3Xrsp}E ؊Y, 1Xz҂K>i!]O/y`&!`Gn*E>Pba3c~OӚf! 0j+RpVUEύsV0%sox:=.Ż"h?៞@7?Isj|oT &<``z"BIo?Ľ:#O/`3ƈS=Nq ?)T\6аEF|YrqZ0e\X 'w8Sݍ+PgzySn8)[ib")R sA$U 01`I4"{!utQ*_1I ?Ohil.eprrhuŭpAWP~cH~-9%3ݎu8!,82d'FW:c8νX29B#~J]QdV 1<Œ2@2;ry4)|KC0/,⃳T 1PQ𼚺z{|Xd|{9FWbXae\D{63gEj{`8+^(iZ!-Q& E_gqOq@%p'|ؠK#𣾋m(^6\;oli-lNQHRzcsrYQ1Ltqr䙡j)yCk蓔B\AOg-#Efl}# dgqp @_-ѭL]UCnaȑ˄AF~T>η\=t tU)r3[ůGARbUuDbQ8]S{-]ACC/n09r݇}r0ح nh,K%._˩F v _v{@ŗU{'K(#4RFFZIpF!L[4RWg1K-26,?lxOԫBu4k#A,G[ 6z$|!-;牉+{{iֲăo#5 /][bʥk!5Ǵ3lUyGnip{u"Hņ=Ý͍w1p7hp Jiq7ࡂ㠬|7ʭ$ mSa('EB<@Ζz5A'_^ϳf4h̘Jղ{cx&TcXfikb|j֖ɴ薆&w) i58- t_|kJFM,O3.~pCnO5'S~ɷqNNK27ɒF \V1䜋_7P6XEۃ;zrJ~^g>V2 ;B= qݥ\z2Alu=$̽AIyX2/C(qAŷۉެМPA#1:]o7s0q,eFfkBaG Jc;AAf3Y<0֥Q K_ RV- }5C}ӢGm󋓌:zC-ۤ?"OHWSV=<\u5 0 r5woP91H};"0:!Vrф3zvlSI&DmRvǍ"61x&Q57Hr~@+TNϭl؟x8Q\ 7Mhg4Jb@U!2]r GDa"{ s9D| ̣ը(R kp Q\C2 S5UPgԒō;Ka} ,G'tk]f#2, 1&|<;[vxl4.j\|3z;G4Y-?!KA[V?6#K &(fhI=z@mY0U+AA*GROG-8U_ 5vdHg7HiĚDUV Y%Dfy?WĆ xd45$43^vTm_Ȝb3b끮{dj2+aQ@qe+/@'XzUCfiEf KVImcUSMu?oKG8>Uh=Zgm;Bd7JWqSn,>Lg_)_f$(U=Ո;%RkW2'`.HdZv +n4kK~u䣗" ̎= C}=%1zx,\UnU$~~{n}s<4ph>M~1 $ڱH|5/>B_S^~9QAei:"'khd2`|m '}TT '@^zI H7tcre^ȟEK\GϨI7'"2$/'UVA'GXɄ8XyD戜(X qi0f>rƪY$bxp7;J `|EkW /MT^I|j3\=TVB8{\0kf]%kJMޘ\.Փi=Hws+Wm@ x>U=IwfbL1e?*Xzz0~7aj:gFO*Y+'6qn cz=uՌ6S:,a f5[֨9z*IXYU6+#rzs )dNYK*F"+4r9qÒ iS[jF%;d ~beÓo/.)ɉ}N#34 5򲐫JOgcpVC;?Kd}Gp.Ⱥ?aҥ-Rw!*H]'WPj(L$܊^dV«z܁Q7Bql3 Rt 쟢s~43M%0eIu%}hGṞV\طf\w XV$-@ .HgWjcV.$ fߏ 'u/ -^7bJOq2 \8ɐ i]- 36aK؏͑@3z[ ȘDx!pM >8+9ZDIT|\]e, Dl K S3}Ka?GAQ od2b /Wf6x8>@gmAԿV-G'ah U:uʉʭ6:fNX#gewɺ-%MM,z WEw]f=ěiͨ2\ ܟly{rO^HҿT"2; 知,e}e!ؔ`ɠJCVhq-+9')fh!rayס4 {$Dz;󲢿fη^0%bVWY:}u&?, p82<o!=dVo  >V3-"Vx=O v3E65. s#5=yh>=@tofэjO#(wLSIY,rU7M[6N7OʱwnF_$MY7FRΑ:'hGH4 5d: MoIƞ1oaVoINa ȪuSn ÚOi556z`mhg'5Lz[o$JHՠI@ͿMP1[˚o4!!LJuYJMdҚLWFL$G288i܊$O'd'fy BʢBdmE@*ىr+7p?Ѵz7dh]"x/:lFfW%M%pC=P4 QlDP֠n- z`K=X7D?{(Gț/%'EA7|ǃmrޅِD9S:RrZ.H R o3{1~D?#pmn7ވ+L^O|AϗM$eMS \QzvaΚ ;"/)')y>O5$1U9uuķۄ k7 yb4P~]\l-nYoǹ!copv:5oq'h;.ACh FMG{w_y#/9~]z$&J̀\u 5=^w"%8exR Q! p䇭aQDCt!2!0߁6cbpޗ(΃I)4H? <y)VtcmKx uf>+{ߗL-=ocK|u60{/o.F1M}*b-w(!u!;(j%bJs/_!s\F)orWOgaarIsyb'Fr5`2fW@۝R epAf%π3p0S,|+,~PD[Du %5[f R//Qdzؔ~~]Ÿzy}J~.#3M L 9=:ʑ f:/|&m%NJXa]7W>f)$p1Q2u8뮵0wrb Q)_={syψUP!S"++N颛iv \[|ug#}Vg.BlomouV+8 :ͯl0觶:phLDЛ3YoNԙS퓠2^}H2T˻j?x']<~s9Uhz KrJfe$<~՚LE mQ;EzOlhFӞh;UsX@]]fGVs87Pw H[%>A qG*`7}!5{p5 0K{sN_Q9pwy֦2.yew%c??_^b |$tB#k[yf ̣`%0SL( 2sɚ4qْxt=2'`9-WAGD7})zE0`HxR{s? 0SޜL {R1ppn9އ'Dz-1ǫA"L%lG L 2!&yxĄҌ3^CBf٣~+ׄ88i8ٹ1XmNUsNq`b_ŇESdRXhvX߯$ՠMM$v#<;|qf +:F;S1~!}F妶޴@b:#Fu{]l<Vѯ g_]s'Aύ30"Nйcx:FE{^ei" jMc ?2L/:p37Sp=Cq:Eqs*2F`_T?;-J \M SQ\J"9Z&Tע霩9/%؊_j8#:G_g W#8Ã_HoŮl- ,&oq}2ꌏ껋[J_V@@ǬStݱCB`8Ѷ+\Q"ORt7z p!i 7Kz^0UL>RD S({LdhsOj׶ {l kGZt$HqI/fWH1,!"f-N?p):4`cHNM"(ah`+*HHg)|a:!yX! b޼ԨW>4G|T2\x)hVoI -̣Y$ vjh^X)(}U55;5aJF(#&L! 뺼0r{ AYTFl`<4Ï^HXO>#¢wgY<2< p}\L2)AR̝͕f4MM?Y%~<=ymmkĩYwM1/eOlڔՠf3\D!=MKGBWQT9W㲦~ұ %=i3"iEְicx;p>r=)5Hep1~6 -PY`l`w;ٜ[>k;ԁ#p|$Ά Oϖ&ZP5؎=iD>,z#)洵)׋eZ3ʧnLFދi,$mUlJ 珲M SL%PP)4uYdOg PWP-w&b Xv40sI\a &P&OYXyW8W 5 _hBT# w?1ɠh֫7TY˜H`YNvM<`{n 1zk,=Y0f$'9[<6qf"UKx9P}\&9Y|mb PXv%l}t"K-ȟϒnš l*ARy˨Mrt:(Zլ94))D8I9[\1ov ӰdEq ;cf!F5LUZthCV[+5HU`+r@-e_^X@2u;,5!zʩn zA2ǹg&8ׅxEB|Px%uÿ'/a\2i+~j17@9a8s`jP #VEo-L R\BSW 5Cm>*P|x <9yZŵYLXeq]}s? HAd(?۽2d7+Q`k1 pZksJ bym3/Y9S:zw7Pq#V)e39+*f/;&Rׇ,n #/-uTn9qAYDRfaᄇkKD1aT8 D}B**t[xVв 8F&)&alRGtQKO{2\ˀco0۟nДPJwl!*x#Dk5zVC܍C*[}غ[ո9K .`6eE_c|Lnz ^$_vYO귪`p`5eU*Zt~󸡜`Gp|NjY`A50:R-=>NSY?4p!G:;;$.߬{0' 4pDʊJmRƯ#D&tB9,-&<y]g6G;^(xQs-K\}_svfRK~M`O爁َ֭>ۀ:E }df-!G6@\hޗ=#V{|T r!h+Qˁi?T+l<̜iۂfFٚKn^+''s5Sٿ*4 gaB>-RP XV\cyl(N>C>IqHԩL.cm/{7)F-KEbaWcdgԘX\IT<$W-sաM]XD&A޼EΔr[@:i?&Q`!z71LA%YWAb8ȮU$/91*1qSR oGw{ !,bA\ bWѱ.NT ׳:ay#L0!R)sT@ oJe^,@ \o?ky# rFeT*.#1\O mb65U-TjJ7!> g"I~gљLfD*$ U0?Bb+ vO?kt>_8Nk< !/Hk̩BkjEwC>vQNe'ÞmPɶ@ s< Y$RE0Ya$oAیB9 ֦EԃtePa u`C9Ej!S;ƼE3:Dϊ΋[HhU[Wp9d &{d}AQ5`)mhzz=RbCgh@y@L48"| Lop uq@G$6 dc Te^Ix: AV )n݌y1ЎSi;6=MR*9|C|9q A< $4`S`T(`C~ƈ1.0yrGduzoLoUAq΀A ʬRg& Fgg/\Ƽ! @;qImƀ{Y-bZ)&^ˁV/R{ 0敽Wf=pۡ 葞qswcC> %O/jJ4N|qN0E+GKjrMbL3{];LZ#t\[BwX CfMy_Nl±C n[d5DXpK* X;&|}}C+P>l>KrGe]``yiO:A'i~A`_pzp%,/eǦ'hAK6uX8u;k\bKIL1hߺZe TplČM9G< ]C5VvѮ1 NX Җ$)@~X`P:h \`*0`yX:-֓|X՜q6T7 gԚkc12|']4Wc"+BA"0|Kzl1%9Lj-f,;ΔM`EIZs< >C^F22=5H,܂$UHTi][ߒa:з-Wx!$F߃8p{ 2aTcưܭ@.ik{k+x ;2Yr9@O*rjIs梡%q4߰ Wasc њ͐y 6a-߬&<(F4'SS':~e󫍆Q(Ԏoa3OEygy?xi]r~2Mw,>d=iw/ Js)\:s?Vsow@*WK֘(BWR}a|bO5$v ۽sD7vfUt!g+2΅kڋsܼԦE/D2}o|acK O4qxYOqzÈ%:inL |md2qi{7a9CZ ۞_lLq3y|+)Gc,"=!L( > veq qJD08 CGU*y9E5&i=o"h_'W7< ٜu9GNU;w"k3_p[VCM8tV:' 5BȐӗԔHݠ.Owӵs/P 2 )1iʊKQUL< {G$ZIm8A4 d0R\ץcTh4<ʻzE#R B/|\\F毜3I>b=fgUC@x$CiR*< gw*"&n\HAL^5Oq^BfE)6v˽lE1$,і|AN?da]GLQLM854F}FO.5[Yl]aTCҌse㲷-ހg&>8Q!l=/jms;v383=(4:9 @}T9O~l PWb15e'rBJ pTua_`KŘ;"Cj.7UB&=B ksR@]U@R}krC>Bag>#B}2)Qb)L]jy3(=P}F#>qE- kjOG׽2`$\5%TS^ժy+Pb-<pE#'ëd"|S[/j:zxHG`L7XЉe2TZP)s1ڵWvLFRY;%4YZ]ϨrJw h0Xi.̷~| (z/E/0w`\oUk-Y74s-E@m|i6Vu1}Sǹ\ TO8>PVHT8`(`Q[Rq^k+i23Ŝ " /oQjc~9lgm_L ?[>.J.G q4aA0OUO@`Ѱ dJ9VeHH#Έ%(hCtS%hE;f؝qo8:IoKxWWluB1"hF%$^2 Rw dfE/3{UtaN@f KTz~\*v8B6)LYG -"eUD7j].HyÔ$0GhsHꫭ܂Pz{tJ/23B~5.fh,jTwv*,ob|@Jr%T?W5_fxgJέeqF)dI bgظ/&WT9T QiH>+Wl}?4`-hQUI -jdYtvP'`k B#O`b'r61x\3eEz<ѱvq? )1OjQ8/甐Z*ף86H9^`jGm7ɮ5f\Ev&ő2y"JW~94OYKG5}D4Ǟ >/ C?NTN!_HhlLma mW>v9_օ;pC/He=yi+_>DJCx:GFoc<`mJgl"PaMضC$@Fj)9.sA#,`Q sa!׃iė/mɮFɤ7#^0bZ׺MaEh=j{CX/mWpU cal}aJNIJK{$@\8(61Ά.2 tZvSъw߉m.'$}7V̳t͇,dFY'b9…-^ٮtC9ѿڪw7Qw@lX*CXOŌ P1B ew٥UOf9yt 2Ş i ئJ3bz~QtljD L3K.a|sM˪ASّZcv𾆱 NiGsRw$16θMŠ@1TKʻ>Ow#n5$R3R~&6'F6$Qn;#:h"o$bkICUk20c `,·g{`KT*@DC v6Te&{FrI#ZRH>k3铓!m6%`\vVSf䛹f$P׌O$1$6P'Mj%I7i8D kIFYnv D]C Z5v 㰮=`8G-=L-q[8cV~VLOۊ"fppW:H/9>@Z;º0 Zu+˱j("]Kiyf7]cUhdty],: mA=L?L}Iq>KvD]PU= K 䚏%bjy! nPrqݠU:=Uf`5|R|e2Dc(}z-B(S^Rm`6Ȁtj (U 3R.Xh] E(VwM;|`hrW"7ȩ,"^&B?t==q@ A p?{('lC$B3D2CU8Q`ߋެIM_zpra>81&Jk:$fev.o{{2'nIAa $|e9(:&CbK3ŔHfz@x P1\w|x!lزHSqLp[v9pK>]+2 3B 9gyLmkA'䓐7T`][v( 0D#{]W"C[Z1jX IUD )p-}!k.‘Nr (JR23e\b,s?UO-.Ƀp>ztxdB?n!wt`*V?W`B\jO>mBs@q7EվNk)͟«r]L ܜ>t>SIy6ĴcQ :\Rl_լ9 Qd] <MdlG̐:n:2Sj\ 9<`<06&qZ\*xcH}P xaSN^% aoBSw\vZ20Z#x̛f<%%qpKRbGjG 렳S%ZōG9W)%oܸaiӽF;Af~]-:bZ늿kh̐uxDȾ~rT{vhyQm[2o\dNX U_xNŖӣB2„-Wr_x?5ݩX+GRAP3 6{,Ծ pg(TG T{[;+jȵܕz  )p$C)܄{GmC ߍx ϕA:j~N½^Oxz͜q*'VE6QWuocSQ?+c?lY 5 C DQ~tIEh ]Z`;FhX=#AɲvpkrαO=g6%=&Ȫ${!/X z}&4^x8+G=~UOeS*zB9C>]7OTBrrھLPSd^Hf,Kȷ8  X^gR^q)_B PIO|7H_nOb˝6M!a̅8,Xu,NPT}/CW^-%bwR#q"wmN]ʫ!r6_P!]rw<_ yc"m'4QeϸA>rAw"0ӡ8`;fOMmZ34>KS{k,E( nӖ_&mKL/&·6U?P &KE_CȋbV7g*]Gb.~"tV"ݺ/'Zbj;^Ϸԛu~߭_-diJȃ^,Aݐvw2lᇽ?%K?-G8?:NxBΡ/2Ď *.q丂UI^Zkw43E:9mgN;D+?d5l)Pt( \[:$|U%oYv(wF k|1 +ͱ&$dTQk<طkQƯu_ \؀YIWX5rv+?W*oac&Wr-Xo [l/'!-Iؽ'5䏷ok;oNN4$&YM̕ ǙukC?+!|ݴo6M %hދ,@`9A?LF)ц+s. S/Ik)mtqxTOmKp]n1ޔ׎kt5\Zv1PS ׇ(Îwh5MJa(䢵B:;Np6OTZ˃h^UD*kCQT[wVA?&~f(fW{I2ޘ_Y5[!ORKyC~,BQtKH]`e}9z5.h2JPii <,>7)6͕uϊ=BO< :nSZ2@FJ.bes_z1Bi4X!0l 6lC;dZj ddBco*<K6q bj/aHՒ8`^>tx[R]Yda8PI'@TӨyie_I 5(_˜LȚIR#6.:P?pPY5Q jzI˛*Xq,4ƨ p6[sF/\,A[1jF]:aS/ FK@CZu|gfO$1+M]:ϟA,7jB8AQsrŨ֤[ IGpfy1=1M.d:wzJlb`+TiHȃ'%*tu]8GCct\;vk"6ts T`C z\}L]% nu{mi^UЃB>23=>iu^7ȢQ{tUgnѲȑj5? 1\@+ʳyťa,ږ{NzCÂfEn˜Xd4 :|܃ W.3)Ƭ:q n|R, ֭P帣 j.j-f{$|{o(D_Pc+L2^d.=(N_@K5YJo*'3J/\H?>1zva0YDzQ5!4AF˝ʯajt%Tid5>1 QO}eTU18u KAdh4w*vЍJC`+b4N0TIs:ؗ. R |00a,xJؤҞMu r~Qx~aU,Q319&&&( y֍ d7d`/4,5F@3+D3и+y]㶲Q1Rȝ|$5x p mG`]盜59/AVfN6\Y͠b(#bvCZ8AlCW[}`)w`.>Lw y)-%/mV@Omt= c8 7LxR%xynV$_究Y݃pogudFd1+Wt+o0?aR8[3Pk>m8vaƗUW\3Ʀe,^J$yI4û"xΙpvz7 ׀: dg&'X$PO%/jknٮb-GQ; q"89MHEJ{$k:%IXYdM vP+g`)<n\TmAϻ(i8/IKQ"HT' J D:ﻶ\)Ev;NkO;YߒޙY"DQQFF[>VAzF"@)D^5_)cCD&JKnp#+|w1R+԰ؤ*< L Cw$ :Ƈb ]1/{ȶF zX&i j,sa28qwb~b%Az-u7:\؟m'S1 %l)Ġ d2mMn30 G "uGE'2iBhOW~ aVuWk@؏pi.+zv@`:5 8t%>xW*yނ'4)ǘf ;)큯%qmU{4a:7SG}St}1!)F /ל\3EGQ܉Pmm^,)%O%Z*I9\RgNhLYBmD`ĉY Q4 [8 </7 R3baZ-νb*l^ϯt \k[X>r<@8[>#k NA(51c,jz使1T1lE$d=X"{W~"zpGq {蒋,DC񥖬yO~(O1mh\7T7Z2_IFQzҪZ;w* Jʭ++wx2i1 ؎ l8\L˧wNJŀ%8V(rV|aO. f%@*o.$1vpW^?!L\ypR*L\#Yq3CMa7?ks%"@֚q=sp$cO7qȰ"vXOf[úެaW$cV콸;6Bol0-MgVUO0n+)`f>lb3p;CBKAh\1YLSۮ'L1i73"FQicܗu*iiQsP@I#H,~g$Ct: y=c͙@Vb1[-m.s% A,eX(51CX?M܇ZL!cC;wnN j7Hړ1CraKzGI1s54-*=qކ)l2^W?hޞTD"OjqɁۃz=omw5t; e=py'#s>J׶B^%Y3|QOSb_A;yEE4t~9¸K!+̏rzoM5\lS3 t^1XVH0j l'9>S//jU?poQ$`@@YrTѐKDNl _KFdj2xM roȴǷFq~oTBB < dJ'ba^>0)m(AYӎ^U#]{Car;Dn~~%tUZZLdz_mB W_zBeyu!džNG`q' {RXs?ׯvnW}9jM9HgxIowhb:gRp{'&: ׊~l!z-•z%G#"H%5eQwTwY`Վ! #O[CǛ 1?):)r}5\X~]:AlB#w Sx!Y %F5&=hIrP ' ).U wHVW ]ti㛥o +806 _ *`zU94* azL\ڸ%lOqAlg<vcc0)$F `AAA5] S.R)u}j9cu&Bmk$"MЕX1E@v[}2E*\T>@Ƙ0z1]ɃԂ/2C͉f7_Ȇk3ҿD-ȓ\(%V<R6O*;F7ElO8d0 # AkIvT:{'si&>$' UTlxs97"*% =9>IC]IAޣ/x8w&6uFA+=hzַt :KP62i2mm1? N8F3@,Äx:WMlXcJR NK]М@dEJךnɑ`̤z#$E23eSIoΪ%}C$q5FECBSE{B9B䮔SзX Ȧ$EU<ψHֽiELu&HH5y>Ƒ9Y`R-('-Û3)CΩ#5UHu@\_]21?5>n:O;D=@KNL _1']Ի͏WJqU^0-m9V ꒥G61J$*gM~H)Hjځ|+F ?(. +LޔQ\w!e漭B>RilJ׳Eȶ%&QMbVLsٲ )̻rn>%A_[CR'2|dwV &'NS>c|ckb-8̱9wk`2ZVۜ$?| _fBR]~5^7zgiBDw2rFBIs;t4臎"GMZkPt)}30ǎu3(X -EVrxep}-5zW?zL#j(]ת27BC?KĊ+lVlrcUJ9'&7Ow FِcbPuJ JmÔ=L䎥07+wU;k΀0MdeM kGb6?XnfJqO]ZHs[|m@95Y~0W9%j:ɼښX]cڤcNPH_p{<.f>p9Ç"qCMZ1{pg kxA" uWZo.LCDW$:4w(k,{xxRkE$_P 4/c_H,IOTyA؊0>dNddx F*cpغ!L.]j}" O2hX[8d#f \1GtC%ìGinWD''NxD:lW hb3̳P8)3l?dƂ[Uqmhrpe\WJ܃<>ϑr[ φlH,K ueS(78 FMw nX=<=E"PsAΐ + c@(U$xl cCgHћ#z.فscxy HK/,i=;惤f`I>]qw*׉j^]ցNmEhO@fSIYAJ;+,fy NȃmW1̪ype;qӤ! x=BJu!:i'!Ғ tC_}TܢsN&SS^n!?G֪i@;3DχNy{2ӇL7Y]=oUU> sXWKuvib_@1BM~ Ăyu`K^R"g>Z:lMjӒocTve)KA>w˞1pESfk4QpCƱg"ER}5t՜+Y.Kv$&}3 q9>L>$\gy7.l e1EU;Ѣ6LqWehۆzoy*D8VH[3D~\'okK@$eS;uMT )/ e-s]4+Kk`j9A124덺BJT9c3HPcG/ #M8^(!V`&" >y{>҈v%uprVÕ3@Bz[>N[ZU ;JAؕSd)[wJ{<{z'EIbpF24Nc$뀛c\b_ekAО p0tsؒRt\rZ>hݏX"7\aTJq,R/~D$f]q\7S&lB#Ҁ}uOOr n3V$==| 7gyc[:ѱ!L Ii f>~S -_*F?#NZ2CFS~BOoP {j?mEHF]J˟fDwI{ѝ6`dVvUǨϽ8LŮ CҔIdD$a鳀?scR3Rɑq dg]x>:sUziUȦxATL*o[Ua˼ z* RLHr8vS Ŧ~v?36^2qU3b[)'A#.򝗺' &^86{QQԤK;g]n-//@FѮ2|Î;,_!823_|э`fF |,޿Sy|!O35&ϸiGr n\Bڄ#FWE"! W6[*"&U[ r+w R9}kڗ](`F ǿB [20Ҵ?Ք|hC>dXS g+UrOe ;n{`˒|9r,5G[,hİOY|1z1# ؕhaհ#iyf,D(?jϚcx8w5ȜUp1sXG㞴%}Eţ-]![4 O*n :>~̈́92}qi^~Rٿ}ypxg4-u)2vycB$]RX3:Df|2uR0>QG| \E^ĸ$-1_ds&EжA6ھlbC\ î k:u G9žwrmK+Zf$l6- 07̌x|֟_5\Y z~?ZQ&} m*Q Vҟn 6ER!)v:xdkP0_\tOpH|tGSr1΀'@8_IOm[l>P'y[Dp RggtFCYʘٶ$ߓ3^1#C`fUmN-~SG`k"~A}B\@3@I>!XrX&˲^dXe"wq\MoUέgRaHN,䴮pǰ`y +LH4|_g~R>+BtS;Å &ۓxPd샧`FjE~\$VZC8 T;[>@)R+ˁcR/Ě9Iи& |1]\"'Z^:F: wi0;in!'(nX]/A´*D*D:^Q^34#)%K#Wn z[ۑV+ˌ &!O9EJ OOd8a'w+p>d!57_8]mY!5g H]NA3ѡؿׄ >4 Fe&t՜;'@k,/%icgURc5ANFG(+?̖f;R5s/?s B0.)U N{3~ ya7o)bZHF3C^@8g`N%-kWCoFgYJ_W5*bL3+?$tGܔSjlHv2$*S4{ӧK#m*›cē#1i?Zp’t Qv?H x ~%bX[~q'")UUѳ#)s-99.h፽pt'fÞpJzV]8P6XV{0 Eo:#~ŭ Q~W]3ѫY+r1Ä̙l;g’E E׀Pr^e\z?})Z+'“h* cχ>y]IbmVfPƎ!ߜ?;âLxȺ; "M];{zn,`&K)c(Ph)!pdG&\+\eҸ[oUV:TQ7KBCuxNx7}.Gͤ)[^WxQ\$k16rKɞaA4PhUmeʵҍ9=]?sʁ=zRX|Pz4!Y+tܚb@j/#* )xJ jyCt^—t x3Z :y$]P/("'&M|$(ɧUV%,|&_. du {{[ Nj!^_FޖAc +Gy st3_``ߣIHW=}b'Ĉ泙|֦UktE o߻DFZ 7*|^Lb-VwzpbD,_a&+ '-#H<8putemL3? ɕ[FO5SeX m7}w"^Ekv]zKJ-fV^Hqٷ!15BhM)$X 裭"\C d$Ox -3)[fMȭ;BJWD>H1#m%7.6?A1њnXCֲOo(c"8hS4"<#Wi`gEܧ$\zxfSZ㚟372n2!sw{*"M {ٌ,4JT6WFKg K#["YяK0D7h ,NxxhF1Q /z!U5}wcלm$' ߬{1Cj͍`g kunjqoX0eMQ`<3@YE+သt̵ 6vJHweꂕgKMJQlg=8L]eVKxnd2nͯZk,C'L퓶4^V+(pZ$~|AzNqaϽn8L`֡}C,bųmw\a#DI./7@~L}-]z}\N BoyEzQ!G]s,:vRgeYr&޶SCv8h` YO*}7#a ӳΝ%cCn3<=-߭Pna'Z3g^MJHۥE![~l|޹C_85b?!B RrrÄE gcI}I@?QcdҼ3P3SuOr # ;B?mh'T(BeO[3Fz-/<lBQΌu)c( ŹK!ZN(ZN#GPù?K*%\Ւ2_s5>S,_߫Qa|jOXmwwvN (Bǵ/ 0 %J9 r5au.H FENz L-=W0Γ(-"=pDhη|E\/:A Ft Vaaύ6z$ONx}*58vq25|bW[56 G92n<)F}cz+bWm[jbH}'5`ӰP5|d;:wX}Eā1 (uLwuJB͢M,*ʒe7A"mOX0e[2_Cde}8 '.-Bǵ֘UYc1G+?ۃu82-;H..wLM :VWn*s$.wp%-*)&wDP!X(^X\]6Pq޾̸)"F~fLV-/ZbfcFzP"|+9L =; k@7}}/G:tyi hSs|GتR_64cѠ:tM6kJ2y=aɝ;F Ȏx[%%4In;nU@]IkrXy+SQ$^`k=LͦDXd W=쿠(k,mCu@0T"OCkn_Bc#g{4|q(sQhJkA\*7B4ĄD#Aiy Լ9lk҇[ΩCˆ3UH /0^[NLIdùiTH;a:$j,qr}-qI|;T>mA\ _pp |~ZK`o{<evl wmZ@q8 'Lb޽K@_-Pٵ:zq߸nus3R ?r@6Yi4Ō`ߴhWe[=M¯yѳ Q\FKN ͪvk`|~4L@{ m^j;5nPƪ!ѓDU)I1oYf6|F]psBǕڑ=ѵ^Yݟ (f(0J.Kf)˺ⶹDWMgߡ`YtOÚD `H;g"e6f13I>5o4MG8j/gT\Rl ~2Rn@1"&IN~k $AЦM _J }S;lQJ}_`< }" W4zM(F?RnZ絛5]A2vJAٷ4\H̐1<*9`px %Vaj]OS_9V# PWiHq.1/W'. .Ԅ6p*-Mm6xupԘD#P*WG|lxjzĖ es&S ZC2\]=>Xg9'bY+j,lz!_L~&j¦Cra˝@}Gzn`9$ޛw}zPlķ>VFHG $< sDH_kǼ|AR/XTv"+!LvNtIƔrKƤwAvR6VK.AlBkAUjag1V ?PnZ*hαG*Ril}*Ź_ ьxƽ(KA)p(mde$é-d$Cr$e `=2N* ].;T*@! U/[W Ulq[ރH!8mgE&V)LN $~3Eu==?uKkd`[h&v@@>PFƄfR?Xga$m\fxlpb(&Cs}Վ^ l [C {tYpV#8B#x|sbeRdWpϭ*rzɱ;~? 0thD\7v},d Z0&'ASmKT.m0."XΟ#CRKvٮ8/>,)ӏ{{|,T #8 M.ɻ?*~H`)x-ik+[|R=p% S)*D8vNPTDi4 BOQGIfp䐄=!35vi.9XNpj#)ub~22{H%A7ӆ髴rcf<: ?oz18>G7d)]_yz~dIhn 6LSt U2e4+]U/A$/-? &i:A"ΐRFkudZ- T%!<+B&KejAxRm]´43G`TZm LEzZ'^ݤL\w ^OU:;Džf!ÛxE-K9S3<T_uTaDPʘ(t;F@&7]/@wJSVUH8؍=sddzQD؍"/\je#1{X~ZyqB}1khx(ԩm !R, c.!6ڹS)%ІQXnB&@؂]\¢Xrז :7_1[z2|WU+xܞM9L\F %ek#0&Z\{s<+XZ!W҃pOH[PF^V֥d\[Lre[-!NA4 ;Y{Yr '?>w۶Beq'a!vKQs(Xn(VsV&Zy{^-v!%ޔ*1Ht|x6h(4zNCQ V卯W#̯M 1ILYqQ =2rS X3Ɛ꜋LZ視^r.f \19xS%z+ߨ&FcF#8@1w=E[gVJiS싒pX A-W>oNOdCܸe8es%1-+Y<xc%z5WkʻiH@@s,M؆V9Y7—~fnJ uSFJ!j< U_-J}S6dGê!$} ) C8&7| }bAdxܝ[(Z\ʰ br*CuуX:7ʆe%c$7K3\h_7ߏ!}ǁ@$=>wb;sA\gqt~$rb "Y8 )NCUSB% Vf|/ }B"} N-bRMQOsg<ܐtĝV;pb~@zu n3P93Rj}slj{? ݠ;h[|EV~ 6`A_]I<5sxk-ٍa#SShVim_KEpnΗLٲIIG}UQs@dvwu4#.~PiFφ|ZI>ȭMB6.Dy`S~IS[M}.kf;,s)-H[. hOBpфRQb0T `t!"Bzmkjq$])Exě(S); )Vx9{>[MՐ _LX>HӼjKl4ƸKSlKH [*ڃ{r>bHga>AU83gne~\%Zj+\3.5Nx>Gy,G?wnBq܍pdϳu=7~X;X Y7;y 2HFːWN'?; ͐I|랱₹62ĀuT2xj 1(M]@Ng^-v1cw ( =kM %Pybr-ؚnMh)F|%@a~2O!bZUڎr  -@cfJOeFIфY.7ńͫ!nKy^'ή=XmW/r*=^6qOc &[x6\`6j wxJdgRPl qxEML8qU_o7! 95;,Wasl\XԦ:L>%)LJcb6/|v!kú;OŞnM AʢooWh'BxG!ӫn\ 9BʿVh n3CJv-C'V_O4K,\L=jC( &y5HԾV xa^ɦ>{3:r<3qM5cwTӯt-d4H%rX"(zH?$ǗQNaFPv=Ӌ'_Ȧf2&ґo)*/ߞX%dr e-j `J),sKa$N!XR/(f}x=$7r/K; ;z %ٸAs~YXsEc!#cM"fkњ%Dž|4tdJnGΙYc4 ͦoSlwC(XMi;5Պ!woNJc5)F (v~R `|Tfm5xqj>&j`U W`3;( :z Qd/u2[;H)kW,U4Z-͛TƐjƯEO@nD<9P#*\HEꇑZ 5Ѕ٨+}O#c>KXɱ ,Ö́w  W*l=`Q)~ȵmNbRN1Z ~IzuFRQby<3( .$ջzЛQCZN\ ڴrVVoF;ɖ]~Tc;'TۓE9'khl$ 1KBWsl2SWUC%a /1ǔAsD,(IuUZò+x_r 3 N rH3 ٜI{_7#(-4BX!a3]^2)DVVT"mslb =rrg1\O?^7pVY:Vh ղڟpy.)ޠB&Z(My/52V;Qu ^©n^!\v,PxcqwAm!I) ?1:@mpMBZ|U?cId*{Qp?[[Jv^Nd=Kn x;I}>W¸䷬꤮ \2:ܥ+eQGpKBLcwո;nKGGI`KOpeF|{Wuet_̖:?_ m μGtVpm?1< qY1`ǽ߂)3ӎ-}<8}l._GTI552/BWm_gXC*lfSuS7YBZ a?˜xbwiF7#̂cqo#rgX6 ew)_7h3b"ٺ,n/q-|Aͮ01?o *#CY5U-8T0q}x! z@ \LcM>W4i&OL=Ev2] ^4RZ}B'y[¨$S;m )/‹[.͜UA:co:q 0@nm})vf܀e$LZJkJ8t.ut2?#/[QVƺdB Ot `^ J$Tj-<#i+"A=NPx^zY,shy`"IkpV B. @9,dÛ8yfP-k[ w# S`rx -!Rɾ]L/݉R*!"KDGx: qI/7.`ۻwQ`~ջ,*6B?=B4*Ѵ,dƳ;Z5b/gET,}!9 F٫SՅe[><~qE/M L(zO)-)!leAsKmlfS=P)9IAVڶz%U7dߝ`$y-vgpY4+Zyc;,T'#%Ob> J?Yju&Í/`+B~sx ՆUȟqMł`P|9|a2" mLY+s\ϙdDko}נ*YxCDWIt6m޵?JIХ=ͤFE->$·5mZ!TUqo$MuE b0c=] *w/+v%5וmWv*tOC<$v"R|[¦k2qj%s<_i͵f0FT,Es~H3 r ;E`B +I;!B̷Su?Mb2sp2]4@! `{ cZ;st9en|Nރ 7iu=u0f+[{&ш:);5[zLBzU@ ^ɹFwt~7z+/5I5ծNéjrc0|0K$j~ZX)TI y:,:[Tavn=aaiƍ]s+XBbSĉ54/ 7c"!&ѧ(o10̬́'!#?W\r~=H99=qAiG];L^Ó*0@X:*O {*Ʀ`(^ZJ.*.?ah捾nqk}NGl * p9e}H\3 Ufhʎ|\?6 @3FpKMn,'0 1ު9T1.Q>ߔ0XfMXn5ƍJ3ӆ'hm@#ݧ&"SvaIՃ*u@4gI[UͶcC~ S$- &DZ*D}j]ߍl`]udnG[r%9~ k" zq%rFf^%nji'هFL媻W+A`z1,ަŜWMĚwIEoʬMRˋ%PIU 3Kι㘅dlײ%%|:3"'\-Ee=U)I13*I/+jv1 M XIB k atSEi2 #vzE_j% (OBlJXW7ˀ L d?)SE$JgXtZ_:](љ=%ۀ>̆$[~;3ZmsSA~7`햂qEM)pj/]&A8+_!5@%.0]~K_C2HMX|`(d*ӈd z9j fRwC\ޒ h1qsfG,O(YU-ҝyPkXXsEţ%.$vպG^f*9iQ4MvڽoM% gGD=B!ḓǤeϡ^O m#i5w!}OFLz=_[>}=Ōyl0XldW qm=yf,kJm*C`kUɃ**.iK 9N&[t?~( ϵ k&KPUzf ^ 'I! "xJ26ԦD߲{.45-=f7;~^|1&zAĘap| KGnҁv*W dȖ >'G'b̰3:vkW*:5% #=U_X(mk+3ۥka!5Q_~AcM"{UgfT9QR/_Ȝl۸7@_  ?e>L`U{DhUr,4+qB~dž-N'ͯz(.̇IdUa6\Bv)%sĄ(u%_IǀrE(Mzϓߩ(5znw0`_Ni =0.b$;N1ese?TpSb-?r7R97|rW}մBm8@׍o1ec~_A)r,Fq: p%~XepMvV!Yvk|qu;zB07i L ShFg9!N%յWբ0Ba-~a DJQA z sŃvW@D.{@>49:BZwވ8vƎh6 /7OGpz(; g΄K*r_?{߮8RSq$#[Ls׹7#q`xVK<ٵV`=C\g ^-¦-uQM:*Eu<Z5{mtr43TMs!O룞fA4nt~NpM, 6~n&h)xl#,ΨW`Tx $!s)(1|Qժ*nrB 㒖Lp1S A{*8oD/L }׃{xm)62ͫs̪p5jxٕ5!Fr627vrwUC̎SXouVgpQz\knʘkPbb5&/`Wӡ5zQR5*:&(Tе]-C4Z;:2hV[ߍZ>-j?7x.# OW!ma?ҧ},q1H >څ0a{2I% rƲi JV;xn5A!E *U86s!}p#ć)Qr&J_NH:ݥfJ?Y_?Jr PxY Y|8'zaUA”5f"ˌ/tVn0_c;xB' LufMnz@[J¢&a|YH`A 4>HC_2iOFJ$J4[V.;߁yf %WkT=FC@Xٕ?Z^˧y8K#ɎV^GRmgNEàrqB"a:@ylԍ |'ފw[rdD2S8%Ftb2,*"7Y^>R6~{a#Pœsdp~IxjTjrrC)CUnokF Lng&ЦcMjHt42,00Ho)Η%Yv=#tr;$/jH;QN<_HDb:IR`ߜ#?ࡰ8!G9FY @&z`Acۃ9zsme zÒ*_ LO%ʖ ⬃s[czxCGV!Ƨ%n b9]&@e+Y <6g&KGRZ"}bcdeݾ\o6CL?|ka$T~kf#6ܑR3g/=eŽ$.{96@S2oMӄg>/W}"/nOC"wc씙z %Gdcw*_,jdni@9!eZ4 T֮ /ս/щnyaJ"J@Q\&RN >ck'|بwL齩7]W`V@\r( aP/H1oVӇ~eB[w>"~,{ S 쌓`  k}esMXAr3]N7ռGq6s%\uɹE#lROsiݼݪ=ڧXw&3?vc!%W'{\e9Tvb2'BQ)&~~^qCCp 3._VOۣRPՁ G{3ɖΨ밢&LGKz6dlIEA:)Cy#4a2I4'U1Dq`yԺciЇ%noz T|D(u;(+][7mŌ .#*yag׮ð25[׉q.t\V5;77hL8YPśpw0@+V㹱6~]en*] 㲁z+Q~ MhHz/a1ld5A_Qm H~8nt4~J]SBz'1p 忥ĥ[%bS[.a5 iLGFr48*~~@o-!0gK퓇P; -$E^XcF ~N f֜N}e"*#ο^}vR)iÄ-Uum (y 1<{?Sa;>w0otfцRh.$*ɶ*+‚h9ꕲtN[N!~R9p dFWNWA,C kT?Бꍷ v?CULbx#3=hAP k\ÍÕdNAYc-]>zvl0㥷4ryOKhqe0nՁYޫQghM?EʰB$ZDV^:$ 8,O24ul~(Ny+NyNp瘏 aݿΨO]n<*O!;c6;F<.r]3}\@R&\%[y 9kaxp0T7{(fW$&ZU QE'=8$hDueu;Nx^g$2v#23mt1A27|DQT * 7P*k)OBl1n{A"<zǙ9sj\M 6CnL,'ķ gu Nì\%"P- U@ʎP839tn-s 3 Tmdg I#"A̕Ci[ >O͎VGPמ~* 'ZPfeS!QeDNY7;7\Ks#J!_2nOM\;z\W c8`t=Q~ нI,(RCXBv wUdΏn]E4 Ësy 'oC{d9OTW+kxY͞Tk /':qN!.@DՑVUp;*e!hJt2sM'3dxq]YN3p{G`T|`g(Dҽ"u3h"R&f2v[(YJ V\ʘ/w\2[KCE@(J|t3OvkL NYzPy"?|8{15:NcBŜ 7GPʲ:/u(Ȥ5KŔjf"Cd~܂ f bg=G֗s>=9`nڥ kIq,&8VN=-)ir~kKiMFҪONF9 <6wޓ{NAIHdY rnȟ<՚QIg 4 - X3/p`[&dkeҜ] ݯ-|Ӑ۵OeQPtUYOEZ @.F~uP:'O'N&Q5b`F,`=;ݸXXʎh4&[ݡXf%z?G],{^lP%GGPT 9̂h+6-v>:Pa X[Iܠ+ti3kLٯi4%QDg:8Z`ܤb2b:R1zq:^N$<;I@By|u2SbY­Y2ձZ61؁K4}ySgIʡUd!E)?gpE |$ 0K60}plڛ Aͮ:C4#@nx2MSip(1LM±gm ipv79OjdO쀸TD f"ytm#H9v%7ݷxD {7_buW]2Y\t$qFYo я-&pF<-f!cr.,аf')G$m 1-؉15y?rκ``*} b'خ<\y2e%!F/ 2ICbcu"+Úk<~1w [uʖVקr#@=n7*p5wYQW fvQy_AĹcs?KUߙsl6k6c0&֞_rhVK,o#_1A3y_z4 .wD%8BRO׫ hCRT{ښmQAH=Ïb `R\`@,+bݱ ~p/hRv BnCb-+s] ht-"9U"85K`rP6y-Ө&^cOvOR5tU=Erk8lQރ(%=|&=8x.DPFûwq_t_:LL!i<4AH/c]#;CȚm3ܰ_`B[D|A/A0~1WIrbfǞ;ϭ@N/#8 jTN=;̢:aAŰi`he;cn$fY VW. SaאX[!yx Ȳe+ABc!p@9ov{hp:kH*HzX|ݠO1Y7 -^wrsUr StjFh!ÃØ}qLSHIѻ~J%̅vϳi VeH5Admˆ/=Ts]7D,S$lcAQ̎hI%з)b{vZL-hdmJDg/z# 0p~Wa\Uou\2 &^.ݶΖ5? ',)x7LTыxk  :#_'e#*Kُz=hF #-JO>XruTjb'5Sq9S8\N2Ǻ yMCTCY,?x{%rod8L;m,A5n~WSR 5[I Ö{"eNNs[}&`CT,]2Cj1['-;UD5=oJ<𵯀'mA[8d]聽P!08IJ2 5 ź_ M@H7B)3|a]je) i|\AN dܳC R(w^ioJP.H:כ2'DS2T}K 4=a=a:u.FNE`rtj>)MQM̥8_t2R=>O [*Dm<o` #KǍD$_|ȧ{X p=8U{mcg¯WZͅ;0󳵫7XgS8d_ζ-?03(FV?P:Gz.t$5Y>.Xҙ(3nQ.ӝϦ[>jj2{YjbL$b#_n[jwf=,9\Z8t3 ^ia&[d#݄ |1rSm$RaЧ EVz\8:vP.? KN{S<"EO_vmFMyg'fԖ䃲!,S4vXtbq-863G%>װ tq.I-S g5c3$ I,ýfzJYWegB?ƟJߌt.X+vٕ bU]޵bthքe{u׫mZWjߗsAPP|-z-y/&Y8_UJS/u%.Vă>n]Aj萻p:Ty~~w'>h]fWlhp!5σ vWZmx<`FLu? ف~YMnPǍ.< EHnu0ry.~) 8} Qg3\[RCP) Lkv P˱P~H-E֛ғJzrn:'g"qd˒:UIY p6eDW' 3NNʅM:xWju@%6v.&PC{+.ߑ'j?i۔*zo C} ㅜ;—h'.ЂK48(k9tƛoTql~p _e7?@80_U5ЋR؝:zIWDέ4TbtSiM* _w}u!8} Z-:yxї1rJl"n-`J()+"}`sĆ:/Fa v'v cs)HERǪ-?zN"Yz9 9J:v"u, #BQb6nJ*>wԓR2{t60X9Gv ?wq^a99! c>rDݥt_R\-=F,U#{eU?,b/RG7wz#kW={B :#7Ҫ[q]ddw 963L .;N4l'q>!jrh'([-%^ѐ [: vd kxaBs!9bh}Nj[ ΥXc p{gmv_v}ڷƉ2΄-8 TF aN3n/2 )ԕ$؟t`RAXBP_3|ݽ>JAu_.9nnplH=ҟQkiy!qS3>_6}Fq!€5i%v JvR ]Xz+X6m#*3X &S`oM86 Mh\ GK4ۺ[͉uvnP$d%NǼVт n⴬ .gZmIG(nI.I׬\!q憶WN䌱K>?i˂o/Z0Q֥M,0\;Vcl]‡h{7qZaB(œzK)}zm$%.+U;q˰QVhҙry'VVp~.xLfba9НgOXY%%A*AQT ަ㦔F? 2h󧿰5.StCh^z%a^9ԲIO7&YeC>.{6arA# _Ɩ^_|vC/yW01b *`|r]XXY|XW~1S2&Ng'גK ǥM hY43 ;ejfg{ci"wCd0gd}GmSx00NP{@@hN0ɰ? w~y,f&K[Зu6Ӓ©p9Riҿzg^3f5`ypyj(ige _fO aRE=M|nj|0qii;2y ںŭPW*9>Q'{WŚ:Cf/[_!sZ6}eY]@^V[at,`=Y>\xiki\H4eg#DVJy@쿶+(_0NMKjgc20G4 8PQK@Ͱ䥞/'t9طo)N)4kxQ=ŘoO&3c md7"ώUF\O\#RO$R{ijC~lwWIy9 QSz@wYRWw\ڨU(y,'Q+(,rgT}a<hU`sqz!SRN  9LC} J\p_6-DoÜj$P=|#T4*ӪT%yt>KF!'{N 9Dn}]E^>uږ HmA\2B_&4]/U8tLKys]P1`^oJ_' ?~ o9"Ԧw:jY[]7S4vpOQ-m E|'.99mjIhO/XI'팤I<D׫`?Ѱpkj峺vnOseˉāѨXg3Yj*{E/4@wߡ%si%{ا~IRjUWBěHƗTQ7GO0q>ʹ*g;szv5 2Ҫj}Bnw=?|:9[a'ZP̉g]3R.QD(g6zuA%a5#x5P4b0ZR~ʻUp=MDb-9Z7?@"g.Nb҃2}'+]EK<0>@&2s9'|mlF W#XiQ"(m,Q]$SždzBwjœ+Ci4die>zƅgL@Ns9b'zDTEC*-ViF/4o͊v58?&+St=oԶ @bf ]Kj bGBfҿ{I5 r G/XvcE;Zql&%`ۙ(}l\OحNӋJmRqyTr*]m5T7)Ӧ՘ݬ%ݠ ƪ7tQj|u<~>xTzczo\nc=h #5ZȔЭo !{"@dD+94ٺ(^|Hy]3߬:YRrvD)8dw ~$0^Z-8N 0 $C*cZ a>ҁL:_z*iD䚺&u1P"ni?H xhOx_7>o}(͟#91)e#"y9aقCFHleRA 1ù2N&IkVһlp`O+k3~?KgٶS^k }mQYN(8YX^׶F+2?:F]GD^k8&>f4a) U7\48-@hX KvEL`'"~:'{^rݰPgJ:ÿzJTjTjFwK@qXCe%Kx^JVL,x3r0{wX6Y-g} t.wyǤߟk-n=nr7eSPe֫?MqD\Rr>Cn=mn‰jHDUXLyI@U?ϢA<ߨ[pJS\3Nz#9H$8b`Fc-1pU5¬6u\9='HyXQJ^:sj'OL,/k,;BϺ jXOFh7V/ۛN?H\So'ܝ,bL6Kb2C~MaT5aP V.~^K훽 \`ۅbk>'*LNy%/PGRpI%M="NC]X!% N|WEq% { ob=q?UjrXGTH =(N߳ej/.cTGE;TmޟlP.I&!XK^eq0o+*C%HxyGv_WBq<=E[ԉbE}ŷʙ`_Xb5z(1L`U~{b8v<dF61謧O\û̍.,.}1a4$(~߆Mq xmؠk"dc8Mn&nk fbp-ʝErIg1=re#Pr16 h'2,.NIljn(٬ X.IIj.jCw |9ZaJR(͝}NTCc2oonYƽ'/⬍qSY#Y_JWm1,ORA{X;݀_Tlȸ`eϥgO"|Od=/lU@V0dk-K^!qdqN6 +EJOݘ~iCP'U*|xf^ *+o>P[֩F^j揗VuANѫlU l@`VK2xCR*?@:AM |ʄg&7XXEa =6 y<$N\m 釟du58LE~v!":-ƿW$MY\e.?ܫ(cW)P6GR# $&K@y_e~])od:6*x4n/񱽾yP+*Q1٥:̹wpY?ATJhdž SҴ9KW-kf[˘nBjӱHD+Z z|Vq$Vo%Ue[(z ےjC'\i`.˛X,| Yy*RPA! 5)Q-Rއmz_=9R/wpG,u2!&Y Pg 9>W+] 4g!yX:d5C0= fGs NWAWwԏtp>"8 @U_<{ At-m & JR04qw7+^qWm<>u6S p]tԕg]zUfT xrP.΄,_ee0myUes0ˏ='HJYsA:lWԇH~ugNȯ=]}a4DD\ ߟQ ȡOJs D0`Ji _*sk tWwM?YPpA7G;Vul= r2-6^~/4^XqԥY Ǽ39\yR"Frh*Vr_cmi$}J 7}g&P,PaHc}P3ԅ3!I- iNj*ٹhO!~,p+ ǪWr|e+~( "Trҡ A#ƛ=ùpox3Nh Â3BP)+ ? L+G}hi8>uT7p3^c=” "MTrRRc.{ 7aB._f(y"gyiO uVq$ե޺mpA[|X v]:YLȠ´Lrǒ#ܧ7&:C<|fu~G{m2in]zu4չj3~_*R S##z5^4;T݆= ɸ T1QYMB$G_%.EUWfX ABZF7L+]`fA2pR0Q11%᝟ZJ#)ТB6~gyvz/hbiR*lzʶ(P/q}캔kB[qt~ ]@+iKUvCm/,yʧ\m "@%0˥"w *CB/tiiOv|A/<2P|SgHPݩ'tr,S Jԧ_D 2#/촻M𢽋")f{PH7VMӚ xTp]Вa0`MTƟu?U,|~>ˆYꛫqmW-ǝ3VngO#0Yl GB I6fAS'rf3)@Xj\h:CA?t< $]qMj5s:{cRYK6Q ص'.TbeR;{mHݱ~r!vtkm-N8lNmo,\ۂ7KMJ趓ang \+@f$*]ue:9SM7>+8|g]SE N&m!1zjߌ}ǰ[KOIE/ɿ^`f;H:4F5%mz5(Yc nI0שgUm![e΂4?ODo?+J@f[Iwު]bi* /&>Ak#{"F#];>[D= O"?M]/Cx%^piD1l 6](w܊Y ~a '[>M̔6.!!qK{6Xڒv[xC.'tHE* Xљ/]X4{8|f`ТQg5@kr/ D/g'3[ȪgƊt7\OhWon f.ݡN~&Z_y맞%*dpn^/O'3D4!e Q sGHyocVyp޻GBuIouk#e Z  &݁$IPS@dd1vH\|;hlz'cgM54 Nbw1ꁹ )zfvKY朥7~Lr'10"loɺ))~Ѐ5*:eLrrr : ?q H m'={&s ]Vt[q}k1S=sx'u|\)Ԣ؎jgZ3I8g }龟tfgWш&?WU 7cVqF]** kl+5QoRD|*1@ 8YHX]-FUgH3vc̎2r6Wj_&jWǸsM!Zc;>zSLm5 k;HrVMګZWmʻ(H$)YVL錁JqB21Mn7P/<MHA? lO6xGE{H]ǁY w6OhPV/^>44ul%/aA@efDz"KPf˜oAr 5[JobS l'Ne򋨰Ԙ6 fVL$pq.KB&!Ug+8VWIiOsd׻R &]I>jL[vd7Gۮ5 ;;#"JAݜGˍ{Uj 7fL]dŤ^ Y^:i|vڼ"ȋgT@=1Q-&peY<1ż+}X lC[H(,ˁVS 2`)yLa0;dەɦPQ-JO p|V7sd hW`158{y0y7åJjTzrWHR*\$SGoUB 3®d~eD,LgZoDIYrD5N>i/#u7mfTw"alr$tt=S0  9qVޛxUJhM͘EQnU?ĈEmށu&ZBj|u֜|xCG-^-YS N8@@)weUK]3s˹d~xkR1b.,bpYZfipzJ7qz645/ƸRiM5MGZ6K62)AoݗAէjjJzЕAZy2s_ؗM5dF[K!j pE3<_Z`IʘȮV6P;um8gnrJABQwMEZd}-vl+;rgR%mTˉ+^}0pWjPWeyQu @EӃ='#@P@ ADpW2p#KmLz*n pBaծ|tHī O:ږ9 !I0>9PF%Hezu ᐅR)[X?8ڥH"yUZH08<+ZBQZ74>b@kQ'?)Φ3HhT3Ԧ?XLh!7,C/ fg[+fx8SM~?BW Z(=l@N8pA; Vm_Dվڧyϗm_diUzx'mN-U Y]G?T3y , & 81.Zj:Ÿ2-=tm, V;z2Flñ / [2,Z[*MK;fax?EʧBclWj% >(b*XMyZ1Nd= ˙VU ^fJMO38h t5IhN+u9mc$ qc;sPWx5$Ʋ_7m22$IH i=Qtq$:)l"Ch YCypaP-ϓXbX᥉m B^)PUܓ)t0!7IT6RGE(AO3SS*yW^l:l^Fx`k.cȰ_! "[H>Z\kBz!#@]׈-iR] pxL .L#aj#:ɔ{O9BӚ63}m88d;5J;> Ud;#4>$`Ijr@ƤBX7-t,b\3>ƍ)^R7Jnś{} .;cLS Yl9/q/ЦdTZV. N/\uoE086hp!J] TD~Qg4 TUb=x /IbPLRũra^&ː%h륡R+|\]e]AOE-$a|t K۾w?w*rp&PG}Lcl/þiC%> c`deE{,JV3[,g>O` {stn&}-F.a-L'6^hͣx*L^ʽ(t vՐ{kf7GԊe}GAF#ɈU ^ LKJ^LCZ&<ׅB`q.JNɾpEsX~&!˾Q@N ntybɱ{~ob:i"+HBsx_7̼M>]P`n媢Jʄ˜UN @j\EpU6kPeF1{i~ NFb}kQ*DAH7DgAGbSZRKB` xZRQxHlKqcM*,;B?gq8v3jLjne?xAjdnwь[F|cS0B |8/ NvrY=?t/gQQ&>P^6-~?=AMP=K B#JGry:"1jQBm<]'NJ/ZMTYݎ4?E DXZcO%jJ׆ɉ(B o%'Q76 +^Kk`أqh9gNY (V^WHYS1X$wa=e֨/FDćZ.8FU?|vzYYp[G}pѻ)Q"փ^Wâ)T>f2UNa-}zhM< Ң`Ԡuqwn*W#y{5`u1q&pc QTkKʘ2>6\ĻM63k}wcvWkk$#(à< D"B廧c#|i .לuMjSom3Uū╮0DII:2sn*Y>V|װy6n SylbH.&UBOlEv?੧dI5o#қ*aMQa^Bp7L Y.&A<]/k2ż&9'90_==sc^U<48b} =W 3Yg8.$ւқ3@Iy5v~}5|h~^S廲Zޣ k@/Sŵ7#4#4VU;ԹK>DxJYh_R+YooN8M -Mk8:tPFݣ 8On]y޼ˍ2jv-,nz^ܴ$@~t/xJmw LւèIT,|N0:0)sf8,4n.dsNrMM(1 05lMrs?_-EԶOŘt_zc9<٫(9{o,"A8&!-"Xv!vdFxY`vWJJHBxw#2ubRR\ou[lu`AO L6׸|}4>iK >&4yƾ#S*e8\Lrv([gPWltnYhŒdi7opy_/4|A= tjEX"OdR|AK!Oy8[\\_1Uv`  >6eʈ4vu'fQ)(!GE/6pY\aؼS-+|uzD8VOpX]ռ-~l3<)=L6=)=[A R5W x5"׌<(wxC'X2Q2 S0:.E!/iGhŜ%8p4qƎScXH\Ӽl }mY_Ey]c>A9/5cRUgJdRFi_/f ])Ļv{P S%J;dlDHl%qͻ+Clt* u,m9@*O6˰ϜH^(޳lGAN<>eeTk3*BcmF^vQ%D#ݦkN pQa ~^cDR<Z3A+z`T_I__s9bTC^#afҌ=)) 6\{L[EBf”5x)!vh~|u6o"W8ZcF( 4PC{@O3/<;Mzuj:ˊϟ({ulxӂDHzGҐY@q:{ SQƻaئůe{A*&sU,Z٥wvsu8sUae옺:l`i`/ ΋)ug 21:p<5+PgΪ+kb ͂͟c fјRhי@?(7 6L3Z9! j2U$e2 $⥺hʒj[b پ6ľ2#Ǻh`q%c9߾\`@ ǽBqA0HƊ_7.=Vl'GWCC1ӵCK+^y.Ht! /z%SkjhCq,t>tKz= kR}`d_GQ45S9!UfŜ2MȢ5rpO,oZ=r{[Nv'nKvpX#WBIy xjh*XgNnz]C׼3'؊s}SiDd$E(Kɛmkvo,vA"?0ڐ,p8ghgɃ,I{~ uK%0W}I }SqqvD>'`$>;zf,JEkyR,~z6Wli?vf(ꌏOfXPGScD|ȓД$uʹPBs!l"Iie!&ckvdȁf?%VTUZ3ga6`ʈn- X#:3f E}ž}dG[iݏSQ&ּɝ#Pr"NCokc."zO?4Ihе6ְ)NSカ86 ."K6V)Z@$VqDmeİK]5)s<:)QyWI_Ӹ8n˦iK7 $(͒<ڙV cRMZqбUj5_ۚ*{|79ʕJ W6vgULm65Чp V=*3«TNzS!n (G2 FϾ! 1DT% &n56sD(-Cm8=ܐ(AxjA@6R| {3љ^ѭ2|ܣjsN%6GKs=}m+}@y>Rc񦶗`E`( M]nK(4y$YKP5ȷԱ67ҫ!\G%Զ0̷ײqkZ2. ztwCTekKOxc="jAq="8PԼQ?0; bN/.^e~Sלɼwbz>IQV?.,׌=`QRZp8]1K尲? _Svu!~5);9Qh:/U(b\i>Le ̿y_d-4 ́Y9zj4 IVXyݻOK%\I*n.#;F̚b~Zَ{.K"yT8xTfp R $ ;&96'}_N?xe߄ "N q>Zٓ]e q:+nA4.9TA1) C+mtmЌsj(?v/U <4:E\]*\[KJ/®HvȧqYcL븛lWҞ,8VxRQ;br' |KG*]Sc4)  ~P8v"q9b{R ٌ.ª>}5.!ޗW^62t* iL0ij}IXx=r*O>D;ͯ=}[$2o*@Uld7Ҙ@ִ̏{׵"a ",q塡D<|JtmQ`pEox|~EhjY5`=OZ&&?ޥ8S{ݮ$ }<Ҥ/VQr%XvpLzZGz;'Kb1>\mnd+Y16r7WCz"u>2d |F#Lde1n+a+Fo *h/L0FТx!)2jA6|_W)lVû%b&~~U_ZH\vNyA7ok+ކzCy '&6w` WU8fE-*6|až n p9ѷ=Z+[z`QVSpVkRyc{ .JxFRbZ<y9q=rM wnN}K+ytYgB`b ɋG:I{Q'a#]_T p\t%;dct3ۤ&ߎV=괇D*UN`b G=1hBY]?d:"RÖ8tYyc\umnFa  ?+_ ZB~K(5}y#*mѬ6vGS cIB/0kipsPl kAГZCM-vܔuEݪu Pe@7f+l3Y]_G zyhgzaJG (oX5/j^`?BLkϏ6rr^9]FMd;t51[JC-™4=BW[z :ϖ-n{wMgOW&͗7v@Bщ [a;Iucp9^a`H} _y {{YB$ Jj{n+&tN=rVO8 |< f|VuY9ߤ]P _[L?< fX`8cW~@9Y΂E ntM.$z9ջHQ \0JJ=$w xr}Bܯ'rqJw",*;b,4H+tMr"!mK LP =]][?&Aө 9$CŊd#TyL=W矆bÍU}UQG!CX lShQ[>lt3_7Qjik\!,w-FHo&&PTx-tF( 1t<WBT; ҃oDDcYA4S,B3c[cn/W$4Cv}ƼjV|.Cp DBWwC[X[fKwmk*TdЯ<]hqq9a:~  -Ev@խQ'0_)dIFI6 ev9 ;jIF'kFaln1GCw!ztfC) 7]qr[`{[h`x5L"PVuQ搴k M :`jVʗuĘN=*gv_v"iPpeGv* Lt[M7Rwʠşp b/+z!3&*fV!~}Q;۟.rYw.(9Xj/k!Oh>f? LI'॔3CcM~J.أ4]JXT`Z'I.E_c}$HtL-e7{{.lply`_?.=MI|zc=Fջz!G`Vy'DLiGB3z#,f:ܮ PK|o:Fc49/; =NgUxsg3 {}ssr:^UgL pQb2Ѡ@uDe * ew.PJAneA-ݨ CY::si֏Ks+oqּmeظ{%jRV͡xٙ'[qyˢ>\;|3s <C!TIkxʧV\iē }/E+ )d|v:2DЫpbho]E%wP~sM3d3 68YM'x1._A y-d>NoAZBת݂jˈ5/4p6>CW!_Fo+\}|V26p(^:k2$NI#/pl %㯲,--ls٧b6}V蘙X=;BI,.qah ֮ EloU`Ԑ^mI'VSDnG' 0#&*ɫ7(;9)C&Y=eY!+^"*/<_(7G#  "w5tm/[W ?-;AYGߖͅ5ݓY{D3 67V8w_VЁͷv84]e|ʚғ!pl։NHA`u,s#IҏPrszdy7p+5?zz }"HZϱSyvi\cAiKyߣ])/WɕGSad8{#+wM\f$iB v=go@pi{bCNh %*Q%{dI/%mE8x7 _A. !w0Zs\dMj uXf=1[\hS4-.c9y}LVKIFs3\[Kffh#QlF6yA#RóWe⇅ j|Q Iu-v/8 ȏ1:Zc,KLPWхrȜh3>48)(>Rj"l=Hy水Flc<^QI/>UOಘY>W8/+2S1o::mt\VV(nFIs T Ú>aLł61 .uL|{|>s )8茻2i!o;Ux2zYY)![Q}e~WkH܌wEE}ti!_& OGa3C +cdf{>9%#z AfS|1sn.@Ќ}& _l;A2@Iq.Ml^l{XM._h؅Y,SDIT%wT\0.v[>LS~. wQ#'(^_O(R9>HbH*@&ѴфQ%IXKciCy!ekXk;'C-E|FN Aꍌ#FL'CXuج/=UzQ];͑d^}ͯެz@i˺j!_S&?QH.LJqes6jj-B@=x)l *Gjx'QmS= YT'rn3M=}|NP}3USX(HMˢ_2x32Y`*Lt_ >HSfupɓ9e,Btwvl[=߭utnƖm;^钳馤0LdqLZrD^A~]H|>x> 6 42 giw$I4)xs~nL:AsT=pm ; ĐysqJ|a3QǝҰJ:!O#Sk[x-6@Q`\% & ŭO\<ϼ%cf3ќɾU})ǹ"?NWo 0 'CyPyByoݽdufs{};stTBx ̅NҊ/Fdnt6ۗ0,P7)BlխP``> 7)z9kP]xf/e&ACM+wuoO.J#薋Y%ɮ7wgI&K-ifߏ&6yy;fHvfXU-ALaa+-{h /Qd{r"HMHv:g2A2У+ŏ4p)k84ELjHni0_\|r8ACiHT]~fp>MԢ.KXQ%g6>i tc$ )%5'ƸMzuhˢcbAH]azcsWqD1pޟC׽J1 x=bs"y&%T¨Ƀl`So$*JIs4fa '&Aacg\9Eڲ%o*r5\q{p2lAA¦b߉&ZwP7o<ҥPtmF%6\]-]ξc! 㻴>Hekۛlw`n 9 h InsנF:l~}QS%Pe~WhPE?YKHo yVdlֱW i5CL@pL뎺B;Q jz-JF8=2RnØEi[ Xzbtk[~5=8" }ɣv1;N^q"~Da&) '&Nb :MɱR/KRO(tpwfУDe=#Y8H%.e-@uX,>ҠD"ܾ4ZMǕ!xGd뫪i3(ZWy]ąbA,v߷ ١CDggXjyYvs[ߖ}N6 eE8b4n f>Ey ӝ=29>V ^ >+q3$'B1\59Gs\ͬx~Y:z#׺~~lad&عII|[1B{ܰjB~E ^/x up,o賊 (LxLNR uOM?Z߬s&`L; a(THf@ޭ$zA O{"aO025yԠ}I`17ӵ]-U0y['WUD=rEmJi76功O:ttvI~D%8i;Z* ;0(hi$An}-2=d.ZRFcל}kȠ$L(͘8duB*^ <@ o߯  R/.밑pS|ަ\+B )S%ݘ#.[mxĭDN 1i*]*X/Mݧa5)vZ@Șy ? M] `*,gD)51*.ŋ꨺xP 7eikS S)ypÔ(uCSP Ѡ[X,CmHBdYw@Vy@2 ZKfpruߠ6My+? 󝛗/s Y"o6 :jm׆? -ՂÊ+_xmNaũџu E?B<$MQ3z#l{W|+V1[ޭJWdWB%dW(?"YCJz/LZ̫6Z(ົ ]i'>3MߝY:q~^4iz3Vq029d10''@5"p+M 1i?nCe7ϬW:" OP 8*d(zcS,/s{y{A adp;kZkZ\z> d {h_O@hJgRel$Vv妚;UBCiJu*{0ikU3/YZf+\b@2AB0ں1,hzEW5PM[lXrh}X_!&5ߍҺi:,?|)$1҅{VXF`50B&KUQ4d+$ͼ A'c Gl(Duڕ#`  рBb:EB1kY ]3+_RO'vjsXE"#lFڠI_ɳDRrcKOzƝʞ(`"I2TP0sJ+# `8ԋòb :Q њ .<@exwx&euT[z]ڜufAӏf£7 O}[H-*?*>m\q\AWgz%I& 03o~qkCxD|™#&9|Y!=Nb*դTw$ٟ v~O0T!w҉ #YY8Ah;KYC>=ZE _vϕMdl(.(`HKɅnj`FSkCZɩ7 73F2WVy7*3>Щ`UO0$9) .r|HB2>TN/\N2}Pd@@2T?gi<0.#T#&$"-qwL2g]}`o"K lKVa9+l`7-女#QΥ 9i1^(ۄB`RItqݣSJ ~·P 5}sߙD^?0Ts_qa6 qSvB 3y$`m0v~{/wklJ4 yh(1Zb&p !Deh6{FUн[r'(Z"X|"6vM9Rb|ʟCsݬ>Ge'n+AM1\=9 ZzC.3afB mQ{6W`7|@@*W~NQT*L$8̃IT|AoE.zGˊÝ^DAk2VlE%d=>RZ/*+$[RA!DX[Δrur@8" c,< M%8z|x+XBbP 1H yWl7Q?ef+ r#dd\>U͌p,YD{ g>௪,.a);o}갏{D$'kjb5m߳B_s$LQT`K`D˦)VAg_|+tA_K|_c~G9: %먡4QEfsc(ɈY.˰Ngɝ,x=!shkG^K=Kع}X@<*? [д#{ol*=ȷKaHQs)qLޗל28eyNS;D\ )`u 츜/ C`z:mPI9l{UՅ(I xxhչ\2bGas?&rx8-̦f /F#ގ\6mFD;yOpYkE'@d8$ BzCu+0vգI2E o-FPBw)ez]d'==VӤP_j=\DǫG~JiϜ;0La1Ueo!=/2=ԻρЂd53F@1x @-qMuuu>=v,Ai~v}ml/w~Sp%c6Xyҳz9ЎR,TkzyG &9;4QxO :?=t75vz/ $XaQ ֙VgmD8Κ,+mUwaL;XV)-C/'ۮLGOH9 J.ii@7'"ayt1E"G=Sle 2Ao_z@Ƣp;Md _$[Gq^FL>+H?8X| RB *'|z=Tn=ˆ6ƙskaoX9'ҍ6kM~&B0Eߠ$TliG⇋}+uo g*|/2 y+ cF҄#Z wqGQ^[_f3xj=owǹ\R(^j! !w`D H3.ӿ֩s;y<xB{O0Odl |!0~>=\|hg7@{AF]śBS {n\j@>ӓ@C%ywÐ0-P_.rGU,'һr% {?5!檩kO#swtocšhؼ'rSV@mvz[@I/wOzw - 2#̽˘} eVe^pĕ7OmR1b-)<&%,*=XV%Aq׌0<@l(i  3=(}Eqa}hԜTf9ibi8%.U_FZ7{Wsf چ,EkDS(l.) %,&AZ\izk9\ a-Te;^]ܧfyS]Vҭd.O7ܻn}eGCciLH+Zg9brJh,JDHl5o2Sj*ZRFx0TӇpᵆD@qy+~E$3fPD6ѓGLqY VwGݠ>"X5g ѭ^G6ĂMV+?s%(Jn, f<$!d8ܞf\a<[;Fb"5Iy9PuCIN2%N .T6!w a`~bE"vBv\#1)Tsu]f5@0gҏ7D.>.:78xge'-:UI:(fԓhv9{ W,Mn /{=vLPg=/bIw##=hg>jfKBUs @"N8B.7D,jݼ S4VQx{^iop5,K w5?[(8v//voL0bzUhJ)-yN;Mj[}Y<؇bz ݮ8|lrAU%0 ? Gt:fYpxCQD5 MX۔ٮ o~݀ke k w-*~W 0D.쁤` ,B"VwŸ9٧4JG{M1Ҍ.?s3 S,DbU\sF~H2Ps9\!001.o3u_X@<Qwmv$_LǽDGkp| MFve4)H>Ě0ѓi/l3zhYsVJ*Hא/00Z$_ )`)3|{aǕⰩEJvlhp?XXW_;JO[9BA}_*/LZ xD[\ ^wJg\a^K?$-cX ȄAJa^&F,긗:TR+L; oe8ͩd^Xn5tE@\!IZ]qB|4N}"r'ARV~;!K]%|Wyy I#M>wřsZ%#lA0*6(pvu?ֵMwv4쐓INCXI W9x,A\wU>:7+G:jХT4u7rIC[`k&B+ ݀E,Sll }I8BÔ˒Oo(edȞ LZ5өù ٮǰN::){;æn31D/L>m_NBY1ʰ1=( Й27V " >i9RJX GK-Mωr(?Kb;y7y ${j[Q3^$Nx&$装k02RyLu;)4m5itC>EYod:ԩ>o-AF&2\.J-ȀLh`Djb~b>NW{KguD }{soC^8  |>Lthtjk43}Ni-TZ,$oSKkJ@7TF!vubh5ǥuWĶm윝(Pݣзn8an;P Bn9ُǶ=bvz2~Rk quC؛gGeKґWE'X!Ԥ~x ^&ke +Ǡ$SQB|<9H;]S%dbXWʡ4u.X f@⦇zki>nυMHo#cK\(xc2D0 emd'sQdd gsuxs+{0G0bD2{wdq?C?n+jiyќ!5T4x IV[X֘"XbCPaXyqq8,O!ho܎C h$XPAPxSaR;yF yU@$og'pڍax:W" ~H.{\/O1BŻF,G}HڀOrNϴ;H\:_$y^*F{jAra'[ ՛g[/NnKǖ!U%]0W*82b?MŔґHOOl&_Wܨ26`"B[b҄A6j'VI޸/ F14WUwtW ʻ̻֨]v 6]+jn>܉vۉr7LhL8ׄ|)FǛ@& lo3 $\MdwJB5*a¥QĹb0߰{iesFw}~a$+s+]AJdʯtܑj^rYm4=|Ix0%d~`֌cY۴Q(~C䣃5iYM mO(X!pBVo ;>DSllQ<&VJ"i% 麚3n^OV*Vy871Ku>}:8Bz| ^`A#y>̇X_Hع,5)FGA}t9Lq|۱ E&q9tTC 7$PJK,_J),rՉsj=*b+S'],&!{Z`n82nFqV Xv"f6Z93 _so??#c"^VOh;j(X֞-AP ,Zo_HQ[=H+QB1i]zgs5x>8glo{rwX]I$R,Hnχ|ЈEF69.Ç~فi1F x#]y!?9^ nb/_{пŨ\!ޑS"N(=j+ ~WK. F#pʠʔ靫b>ޫc |҃16=;4D2^jIaKߵaN'uW[U}H)9KlQ3SX' Eb(a+sJ aGYyQ!+.z8>;ֆP@vSN +o´ x4Bx6~GC?;5h .+AyTvz9A .Ɋ'0;[ R8)jM @LMoUSmz.. ku$$Xl B5;> uj/KN@4`;f 6A/dB@O36)R"A_"kSц/sӳ7QPd|DG/u8>IJ7T}Sr-R* B,^,?2"{nPM=kb0/mɦwPf€"-lS{Z!ɋ%ԧ$<_nl%ˈoz,`c* vэɚ{y$dm.ALpD9'm݇2[޲е!N&d*[nK[PP}{s0bD}v*V~0FF1wz߈w>xKWX&^;e*n2Xn X$Gq`;<@i[+'5QyuCngzE!Vb=?ӳRKpь'BYφ]6 |ixa3H0߹(1;O!3kŽ(4,FзTBD3͈a> kK(<«^iw㴧*Dp;| [~l*3ր<>,RA> ;5f{dX}ap]#f6 R1" 37zןMYU׼J41tgϴ>zuQ_/cW> #dmBDv}6b}A2 -ZAgb}dz[ l۫ZJT3bDzqL褳`Zn.]as@LT-6:&}TGݖWTe9<˔jFJֱ1=2gl bVmXxߨ} FCsŌ׊ Itޜ';+/eᾷ:өLfGbɱ: p枌B[2_ bᐾ>2z6 T&6 @-bb "K:b S֧IKg]`lhF.؞\_>ӻ&ߚ6 OjO,qP[y/}~f'D܀s/|[e6a&Y\ 3šӃ#^>~Y??͸;-8TƘ`dd'^fH^5e;SP|?B@pmܿ8,OI.PF5 mXnaZU k\uuO?ЁQ(P?@JL5 ^uu(zjD?#L[g SU T87L݀Fq+ P|Fin)!#8jru}]u/+b;4LQ׵K_WUaSoGd] ,sR钦%>@Ko}qpZq*ms!-^c]Lt'6"0~?;]QJ6ބtW%jL>` ;!в4T)oTЮVdR8 gwC9ˋJs>"+&UAiQsu$zMdxni !m}Ui:w`mS!glv"h*gdS-b(ђ7?l¿2=vE.(y=(f0È.曏BѮIY"=¼iR!\5> F$ӴiKX٣K }2CvqکaպT0%GS~1^c 4 h~WDo}.E?CW~95d, RI_2z.PJgo'Akʇ]2'v_ GzD*adהˌ>3@"1!qpB {ժ)W6lpRou}?0vUڝ|BV|,Kx"D1n^-Tۉz;y'5.XfqP>@U:lrrG LO#z'8/ǁ18^XL ȿ3CHQůxM?EI,/77O#TjbgY֛&L3['jOg 9MŔY,/R@0c&6@Q\F\n37'XDe$3!w8ih\WODԸ E~Z b(:*<6øi}wsa|ey1M35ݮ/0%Ǣ,JxbH `G'5kKX؏/D6a /{,"ɝY8%V$6=Y<"TqXe mDt-MkngZ ڵJDy([Cuմ@?_ɚ3>x:6|M h Rhxb+RzSJ?ev0["A(R䋙 lH_ kך'8üګo=?Ԉf/-ޏ?_gL~`SҊw;/~0n@ŧHm| ^cDJk:Gу7co.MՃD(v HQS4}˼rA"@XBӠD0(Y?A^BV0X=z-)9tR$T<^۶#N۱5Rey!)q]y(PÚ \L3g&5l-h|8% Sї`>')Ի(RFjPbQ 1`8 w]ROS/Uy=c0c, x+zXjICvOF]@XN&X~ c +rz|j8"8m;]A_|s*{ (xl21hsc6&puv6̘R^fW8F\L4ZǨu諊*S O Ӯ^xⲲCwlJxE }vv mAiFf&pLh:}<SzN aD&"εE3h %o+5(9]ʘJ1(6J aUbE5T>.۞9(X~QOޘV|yie_> H4M&^Xrr;LX\:Œn_Mbcւ֜N©l4RHt38|NTJ(`H~[@0@X,o r\܊Op I \+ʽeUq҉+`HzRLE۴[6¹42hV܏\ϯNGe \Hx jN~)=EL'ʏ؛1«C+2pD$kq'Ԇ?a]փ /$;VM7plwp" Uk~s͚ 1p˞ ,ZSα]TINKYb/ΣSQe*6>/A;k(a XLMuÐk%6iG%=պXqA +117ÇBƙaBls7Cp*e Vʂ c8lMbI -sKwcz %CAMw#ALnlHyef`vuſ _2Hqꥏu~;񭆍Ӱ) J5&PC\Bd)BI//X vF{kعK)c8bݛ{C~Z 4J@bk}%~ѶpYK(i'{_e'4D, aib8&d juNv?tk87+Cst8ST`嬍d$z{FlBx2?qowE'Ȭm,ᇽύ[* P'+/|Sa A:epn^ɍ}Vx{ ߮# #mm :Fo?[ \|;t(Ӥ+@̋lNSŌ+$rNǏ֕2b5]d&~LDZ3K_S4ot|w9K%o7Gl:6ҩeM2$Ie=!\U AD!mVC Cf]_@ h{VJ4c Wlv.kIEHL1 K$/}Pix;gs%>5 jZNUh0u-1+\c\H/n 6*"nQ"Ǔ%dK;rXg=K zenLB{T}+ #0U^+َ9@'"= Z==gO=tR#(C?̠',[gN"'sb;e'7&.̋uo$ =!ED_l*uwWVF5- ĕ՞܁a<+bl"H?rk`(>7Lhz^0H p\'W{|+j񚤓H jgVp}Ae2cXn3Ŕ>2}u-=!}d~ l 7,,,!}ư% vGr#03K'*8SuvZADW?ʬU)&yw7R{bѓؾ9ۥi1O0ntL}WvB1cQ":m(Ddgd+pjIf6엃sF^ 2lhry}twv$󡚴!wJր $)S/V7Foo,ޔ|;=|mp(,{2SY{Jr8sJB ,+;[` 2*s 2Au7KS [e 62l"JsK-ɒʋrrԼh[ǥ5|#B[a_xpBR׎hCy!#1Apdc"(:5ר~BROࣲ.}$+u`%zܠoJbY~ =v!e}wW8>q_Hf~pr^}v|7+YH7 |HVB0D~Dv[;mcU7ѼP";irVOG(uxk5@Յu U-O+9f"SQKAr91 E"*3 |Ⱦ)# N& V`B$8|L}ՙH!1j k?Xwf2:ݧֲd F3;z"`(1%>]/' ;ihF8]g*$_Cx?vEMй?z-4Ջ75%p%Q>.b5Z fB )6S΂dyOȔ+ d,TGF5OPr1;++5zDiiQ+HQjzL۝G0k6|5?!$ij)Ck~t$IQVƴ$Ш᥄`c>H=YU"r_[~Ї$T `HAlR$p/2v2GAKpi80ەV{O <]!:S7pĩg $IJB ~{2\WcJ3[HU6TJHF7:h)'-%)cgmio6q Y0 =frӸOڅru֔Uv5`^}`xur+8?F植=-CYd8#B]ƈA+ʼnOXK9߀ zlaߨZf򗁿9J gȉpN5cȜT aQ'B *[' ӿ(;Hː8Jr551K%bob7^m0$Q7B,&HFoSr$G$ddtQeK^:,Cv.=\|wv$P5@!I܄JѴgn 2$D U^\I@U,$s\躤IIoE[CZ_e.AoZn=g;N H8#/T}!QN G}溙ʼn|eq C+p=>]+Y+M:8fo60oR%A/].VV,>QAB3Ga $GT xؤA ^do9K%Y:#2_L>kPHq k '`ӆXSfYq r3J- 3!*V^Q"Dⱀ8ZmhS'z}{s_ɷiͮg{]" U:BNj-i^=5Yl=B[5/ "te(yNJ89C hnUobfJQJic4u{rllds!8~{nntx 2d!4ێEAZ%ǩq|$FRD^RTiV dr+6'.*';  W磦~&O2pHwEA{?5?1xY9YAE;in4eo:ڛ轫':rOZW^hʾ/MHem2n L@ 5f#/ ѡ)Y& \ F)jIsٽ権 =Jp|&ь Û΄-+Xm6Qdsf=l !c(`fB g2[ϝO|3~,~ݮȕY>rFRw'm z#R̰K;_u8^Wt8\$#xjE i+BcTolͻ>sFD̤\`a-ެ&~LigNs%y7f(Ѐ&'D>Y,f;Letz1"]˚kh'ebFrzL؎I湇~ wG9 BG2MJ|*ЏsɁB8Q1$>ٳYѫ>E&g 0rURa"SjnY/"c%U\ISv+ɴH^ˍdҋ?JLJ/Ɯ{iX|8K1ޓWg6L%b\h66؁GBjmQLJ$gYQ,;_k(9Bzmh۱nc1E?D`6߳ q)Hߕ܌<{@ i^ɰ1VpHl4#kVEWʷiDaʁE`-r;"6X+AAܵƥ貲Sg'Wu * ~Ӎ=XeVnS61bM>5!VahH[??T ioڙx`ɐ|g L|hd͡I ܵ.$Mc2~=wYyC2 Ӥ &p#v!p@e'nEJ?9\@HbG!9%*`8fΤݐuaL >8q$vӝvnT\PH<ݣݥ6ɈA:; z PftZjjd<.O!VA@"Va0Eڧ"{ 9@iWS9 _dE+,_ .D'%)(9mx\y.6apȽ@S#GJ<^ |O` ýfTpQ gB!'"5==ibҁ[.Go }T؞dYypeSF VE6_D0]35SͨEN+"vΔZ֫1S^Ĝ|j ,]a$:q"o[`qZϽx7l\TS0VM0ބQiָ~DR9hN=%4C#]Z/ +*O& 2A>_5ODq1;dSȎ.hｩ;{ ,id;`[:&N\;`ھGHNS*IM5[9f Jo t~xH0ZoXa'Kŭ*8Vܙ='\% j#cBwnΚC4pDEVk$(Rɸш@=kI6|f.Lw~xMp%5L8Ϸ 95u`Ӳ7&-Qb#7)4m66(S$vՓ_ph3Tm-NB䋧r8TR2&fPJqbe= +k9Аu7s%iݰ\ t C, hTV kFo9q]vX<|.Djn8δe<>HTz4?h J /4qd?ʅJ΂6}#`mZX}2z]HR!| y|R%o?\.PlN'o1q#7aQ* /ZBlJF =^l(yr'h$˥w&+7&VRC4udo]̅<W <^W.k"ͨts֟<Ns.!D4fLBl&85z"sm+gEb`-@/1p:<}q=,e%wf`Ŝ  iy4_ RZ5zʫX䨲EQV;@{|),}t@z>tgݜ;Sm"hl.=dˆ`#h^U XB(z^?rV&UEQ+Չ@֪wG ۚ)6Wj.Z7/{T'^ j^< [g_ Q:G)ݑ,֐:L<VZgե9Mb4[&U}LI!/ T . LE&{U=1Ax7*ƣZLq[-vcL ;r0.rw-adk!gI}'N ̤je?U/.$yz,( 9FP*?lv iFdi9RTSdGB"\ӳl! ;59]7TcɝQn`?̟%1cI >DZX)߮$yIޒKQlFey3| {kQw E%!1j )8!|L5'vWV6#3ݦ&V<@{>t Zkr#?<$P4*83؁ f,,3 ;0i'Q+GKlw!C n?m6CP5qv(r90FN&azφI}؅YɊ\!3M$]sSy`uoVUIuTZWVk6CUWa^c;N6<&+PTn+=q XM)\DZ7lݢjxK&ʦ0Vh :!ačJ4J»?G K ,)E)PYF7YURUÔ4:b: o%iR.j_mˇ -4t:vCx~ Z?#N~'K g3*js̨^eaP0{`11!E/ Lȇ@N:!x;.T^p#0(jC=VA%nOu18klH{KsM^W$uZA?;|_)cVr1> >1}lLWŤN|GFb\@- t}} gt@jWq4OsJkqly4?w Vz^Lu>Zg=@G'߸ii?ڠ 4!PMdSˌvsGeoFَFDe ,6)`r~yae+^- WqЅ?KY%B%אOLGeȑLq#|$״LX_J!(o}wXer* P+gvЅ7/єݡc_[woږGE)+}ש@ p{gtg*Ȝ֬Jn}PKT*rXi/=`4/;Gt;O i $ 4?]b .Z<5xvaM[l|ʙ[7?Y-+Q'C3Q?Y[ 䯚ȃs?GSʱS6V}f\1̝._VQ6QL3sAeO!4dkȏ YѢt[ڒ~91_vADNH(g};\h#|m몟U bzR?>BoE_vih`,@><rsb/NQ4}ARQ }wV.e³ iPJux "D<krKS W.v&8bXu9dBXz*VDGN>`_. 7wX(nC)5i]ul`@^׿P9-Iy]\2D)d* d 0㭍;4,؏a C cPbRcBa py0(ճwf#U7jO<VHLk&W`'rs+-Wh'>*uˢ3 iFG8D) %lÈq5Gӣ?_ạAK]">0MF r.ቸ`L^3y?ۖD^%YD,XA9gvQ>#$mȼ'4U:MRRẄ́=q-@_vXub@G-]؊IBMcoHfdY3aƇ[Jw_ +¼y^h>Kv6lmcTS+7L}Qrw &I 4TjQkbE!K<2ta"WSLwyas7jdg:ÉQ]v  Ѹ3@cV3.?̉U AF"Vװ{ 087 ;Ďhj!hyPK@tҬx$p(Q /kDf5NZrj yє O3^^W J/2坸н;$5X*iKVY@|͕=>& Q^5#?A3~FbsvYcweĠ"@*/vf-ެ*g F#i:nRAONmBo鋎R֓;2NeeM IZg^1W_L[윥>u9n X]Rnn[2Qd/u]k`d< ֟9t4-e|y:)-3Bowqp(JFOCDxe/|o)-߯ [.mjc&Q;V&o'#+' `Ͳmt'Jݒhr/ܜf9ږe.o$a./de} q8fM?|I}"pKo>,EC>8!O YHnε2X8V\tn.B+O$L& XIH9]6#?>`x|8eh6QɗhQpݬ@ozn# w)bbyFQ3טK,nr*Zu(HőQ ; Dg iy|HqFZ/NPTVVSYZ ֎7@k+Ժq  &_߄r'T>> &".8ɤ܇oMʄOHR9n/ڱ&tY[2ueJIQL޲Z:>Tj€`ޗ atP&L lL4VNQ=wQv*uZzv[ٛ$\Mgܴ#ؘŲjDxqo$=$/6R~EDY`)t:O={i(جF펟RBO?L H\bd hV73/Ժ'@W.:2[ yk&\O0j\D4@'qޓαJoD`q0IMU݋I *ms9pyʐgvL@U t?r:2g0O96 fܷp cZno#]F~ v j2]!bq hI$-2}af2YSǓnx؜YM68=%$H-Y1>Z+p18LFRR2e X4f.& L/Ifom`\%tOp޵n& qZ.nV{?jzw)*;g8qf,a.ڋ[**sAyB0T80V_ ͐_@sOX 2 E8eE<+c$TE\_p?4\I@{I$5ΘsKq-ar8N[Q`?}6*β\yy8O+wN4$#7hG ?"WpjPɸAj ^=H8jX)a YWPbB-%Tn̅C&^{1]^Z0? +t@ ILM)~u<0(t+J07Dhq[ؠJ{JS`R걺* ]/i5ǴI;,Jj7(wv?irv̆6txu!a炜F>,(8ڃ|z2Mv8[n70Z MA@ôS1AYK{#agӄ'  '?{>dh=Eo{ wD)tK[/vu=zT칓"2bRD[2Iuy0f vw<{a&}w~^_Szi7 ZȈ$ =+> In\\ѸXa"~%붔j/0[Jioe^)ʄ@B*>^\jWM*'@܂&b2C˟8ONwRNEpߐcc S2R35}$F@c3?v* x+5U. ᣆ.MYV7-Wys/4GlTahm>:9P>X۪s80}vkwdܣXtz9 ڒޔXOL`gMۀj}A_j{IJ`̈THY.n=jubj>_f@xCtp L'E!d5u.~=Pj|S+"gn%٧kw΋Xɖ˛l<ڝo2?轆CfߔGȑϬK?8eyLlg̕R8IMRiKQg'qP rJW;5wzk-'9;kI(ٽi ! :&IɇjkSsuз=g5+\"M\_H=:RsUQ;<5xYZq֖_ -Q>QEFuѶ,oQN93ϑ_ HaO& JQ 7wMo.]7!K00!JF붖rjXEnv#;\( nqj<|FvњuJ*ᖡ/Y'ֹۨ~ N+lF%|1 -nG8,Q:s'XM 㐸1 ǔĔqF6EY|C`M++:zU=ԫUr #aIsHW9_;3#&#\AQ @ ,a\-3tG.uRjHʊDܢIBoZm__@C[y&Xmhsi!LY[St?x(6խ*!7ua ˣ MVw 5_ES1Bݞc<[KGުV\?(>.N HL*͋i/,$7TXZ撴]uV/?uW@Zl5` TZW7RiiF5E2*%u"p}#k!F]jR}]5-s#Hub2Ӄ'+P >E=EeYOؓ gMdN UxKxc[Vl™g;Vql/'bDVYg p*0^zhE8d* n0 ǒ͛ e(L`aJ$,K3Kvk+QK+Ɨ=?ʸ^ }b;l' ,;t2یGq-g4&/at-&)A/UV".x7Meگט7fj3yڶUkx*Y ?m2h=.T۶UWG@g{٥r1(cu p+lа~.AY\pV\}Wza/ih3uD7VJ v/K mh[t2 y=!OL” OPŌ(>xIujO6׳[Xg%V-V<ͻ3yw>X k>Bq gbOg(iysN+5f\5=Uo74b9O-6-u _ cgc98 `7!˱ҚmW&{jԱ8.]Ƣ}l5vPo Mذ"4j^/Oc9Zj]x0xZ,]ɚLJE"/^;eb!q+uGC)x:~kCo$ZxFU#[! eL >Vi%洊k01?^IЄ iTtۂ'j s*d0s!W-#܄e:A .е76rV~~4bm\~~f+0]C sPBצ"E*[[pz:}$BNbX$p6'[tQ" : )8fs(`^H5@7JtJeJŦG/w;(hZ[ynGZoCucϩ磌>:&YnS.82hT|j;bb?9QS sL? eg-I;FuE&z$FQ>4[!#g΢]-OEwe_iV٭_f8Z6L0oc摃ة**3z?91e#q0XV^!D$ńLNM/oFAthwXcN)A:p Mh7hzsE" ) zٹuȫBS% )EP%W[ iT(|}B wmVZF%&{#ެѣy?رBOŷ?A+ݒn<hZP5E9TW[RG8-IUJ, @rsw2o OzX6rp=(&9>yl%D UjOprcq{S!="R;AWL{nӳ~=ūy1x4,0xYZO^`電V,)A_DkN_|woHwܘv9Uп-M2BqR[l""8 @,ZaPGPr<7qםpe]MyB+9e0Ic~g$c~΃BJܐV |3o]0G$zo| dJU  SK1VQ9T1yw ˙[!3̖KZ "QCwyU+gD>N4 `Q ??be] Z/jW S^$q!1YgWðsq+Vw d }PTB-=)=50g:aDoqWOD ˷HԶ orOEMJ|-6 w3)Φ[L1܈ܒ;מk=?e1{zryg'J\p}Jl3CF}Ě^ᦶõ}j+[x#jCFZ\oi eN`"xX/V=X36#¸ L퟾;;j6 WZ)X~:^ PUpm+7/ȀXlup88R$qlD9=Ԫ&'y ;y7P'\wam;Ba4Qprn{jgU8`}`ٵs4 XIb;+~IvZ m>}Dq91)Kc0bzaV4`x:]_pBl0A<>% nne82a҇3ybQ nL/MOҳVũE۸=35Žs|_b-A<>Yg/a#^B2p8k(d A^bc^.%hsI}f3TT6h9n\Q E 5rU[2etٟx-R 5*FXn\.n,3+CjM,Q3S;=.T /Zt;|lė4@iڸ& l(8ym j y>ͦ`T7MhzѬX`@S1e_;€8Li*)9!!\/W pex{DE$ Wи ?% # Sz86pɺ_NP7o3Ơf?(lwXeǓN$,ģiƝn7q6+\fZw|z2ȘL%Ż7S1CqK z` ^OxO~ (:Z:T_Ot])(,NO&@J;McqUp),`&VUNN_9'oMݘ)Ԛpc~٥zO&U(}ǂV+Ni]ï8.5"# +XPkKyGRW "xb3,chL&O-o3)lJl:^'=3 Ë1gۼv05IpPfԝnnUZ܏n !럲$r) "gZTOc5 }Rfک0pW% \2Guk$d !GەgE@ 7<Ox}Xo2;`ưy}jG=&wHrf6H5U3Vz9Vhk&ҙ~2gUϛwQ?:.JW<+[&cLpĆG'h\q( ^{!ū=nn&rC71_I֚:rJ*֒UyޫyYk=C\&Bhob[߄f@GlY݉2;@imn4n >_o7$ M#q]V*k󔟤>ewWpƞ- au@. VpTE~02JPz$$~GnԷ4M%0s[*r?q/J]pp#2v(@XG9,I0G";ڥ jt#`p HļQFMM'o|9v¸K涄7e&M1ypB4 QkSQtW-e"A7T%zot+{PMbYM[i {"[uENBn_ZAԗ1hfrRm |P8޼ c_^aB4"yFW_I\ |PI|4KZzw?=P5uغ{zD7-m)cMM z*y0jhe enoG&ڼ2(T7qcWiP~aPn(q%prJҝ{UUL*pGOQ.  M@]Ɏ-~^:ԕYPuYY65N̽Z|$/W0"1c.;PWc LAIq(L3,/D̈́#c:y̳(UC ȉW~VHkLQT2 V.qmh6^#>x`Qg9P8w ="%od8\֧.F69kFF!W5(v JUJ>>-/6U[0眨G'W.]r;iG.n|=Rۙ?C%P<23&\gj_alڗv]>ÿ ;cgiEh-Gj&^rOၹޚOS"0Q"F.r o7ͭ֐`50wWAi8'HFMĠZ4û];S5dOA|v5 NК?P yKA“S  02Yǟ!bG§5[@)3)ƾ6QO_Ln4u<`j%vBx07?n;;RN\&~i=DEC2Rh$6n!fh1$@/ʥck?dl_t4bUml*Tdo]l;pggHaI ̽Z0֪3b 0^$'% 8[ݐi#TލO/Ղ@[܃:Um9@9-OF3Z[sP!Bbr1 d=POkwii@?U)@m_&7x@L~i)Д39ưR  NW-)P{x3{ﰂb,,aǞ|!5n};&,1݈z`AI Waf邻_-U+I`DF=] BQ;8f c'vQa j+d'N*'v.Y#"[?-U}t] uMjYkn#=LY=SÊR2w=HSQU~f='ņ}-*Wa<4poPsXޮ_8/FqsۓaQZO*@3*ŀ +Qm~2[GL-80oqhdi50CR6p?s㿳8x16he~ \|XTO'oNXXPV!|dZMzїҵ8޶1&Ti]+ҫ{XKR4Z*F".n/ly|bɿ*~Q`'}i@Yq2;dsw& fZ =p{*C|5df|Gf-[*ݎ_ʽćT@p"Pq1?}X?]֛ "|e|= 9unJSBud&]/ʩu??` Ya.QJlb3~.Qt#)菠9jn2Xq Ø|^_:A*j0H S;ze>}}.>}V:0S^;gPv򰀂&e`@S~yBN~Ώ}uK{ϮTiN.PT&?e&tCOp.jIuH" (-j@Ge3dq;M{)=ImNW=ԔfG@ċeM3oؚ2_s3{7rPE*ޞĒ%x~o`>K+["8+/,:%#M[_b|r٪ !++h۽$#{ћ'NWnltz=AԦOSHь(=?kȲ္l3î.nچ>.E+v#z XL(lY"hdt ژzcT;gYrӍg2G)œ LtWLe;l&q2bgoNF f$.ǁ{3O,E+ٵ o|pk ARCbkj(@m0ma=2G8x=)7?Bd: EOUAMR?H|dj㸷Vg01.잵J草 8i5 ō螳 .Q *%؆s[>v.GJ}b6w 3QǤܩ<q^9Chäi@ w i,WHF򪬹_ *de22U؜Vg5?,{f},ݧkȝ..,w-X#:(;~<2q<)Te`ZaJI'J:Lj<\7ڙJ+A}Y*zv F53H4+nL@6F`fIwAw>D'hTol躷ӳM3 AD!y~(X k\ue>%>'!;`2QEޝѿţ{< SZ~St׋)/5J+2iYhv}GS9{4@&|ځ>n8Dۯ[K\p 4؍{eȞ񶍎IR (B jґI)o~@Ymr Lt9ent'EBEml<>S o|ӪHv Y!V`; /r+M·­o:}:Дeip` (>eKhn޲옽|9;d-2ޢuݞ:T︤0d${LuӋPghWBh ֣-b(0dgo}d=Cñ2~[TcpxmUbdP.7ˠ a4 Nom7o~A!t4uH?f|f5\$;s'C $ʮF!ܜؠB  Im}ҨgN/$" )ή/bnV}6yqֿiD8 jmki(#!4 R3W6F[8*<Om0U_&TTXP hӈ(g# rS*򶱻s D'P\Jj#=IM*"3ӸO='m> S^<Y>GW9E DNV6<|U̠YU+>C@;dIB^x|4Iɧ~hVHS&_K)u[kҨaffJYҠRaoIC*QBL$>uXK,V᳉.֒}w $RIew0-C*1X/_(TTj=KZtŴZ4_rTf5E> YMAfcBHEj#(O+MSlRgF*zSPˁ }BQk!u]ǩtqs57ok:_oc£l}1VK٠ѴXA.XsA% ?PGA=?vy\77RP6f.RpcgHb%>wR_;A~g7aI4:8VrI S<4{¹.>8u] UA ׿(l/S4H<~%J&.:CX1;Zm?{cbvg[fAF-21Ƈ3O{_L/ob>f'`ߛS%M*FHTڻWYк ^}J"&ocǂ}J&5DrAWc^s_8*)ϧ#( 4?we2X$1oˏMZ=ME.]RycɴžάbBL=m>H9l6< 5=]hEK]Nu 7}}hNnx/VЦD^|XjbS"x1?gS9~_}CQ;<1).b1(pֹׯrEAN8 p-ιetRYN{fQ\ 'ds{A yw ?8yUc]",w Ʊon mȦ]Q! UxIr$G0%::}%t]ΔuVx}\&JR _Z&nK~~97bhot*zm@/_LQHQvp }W6Q{v 7'@/иdqO@mW󇟒<z-0 xݟĄM0:C- MQ/7EI0ucȝ*>*ڡUYqR&[yۈ#<4ozRC f <獅EV>p'|ԸkE7eQ#+U_h@S]f؂A[)񅢓eY:MRQ]|~Т>sC?8Sje*2K(%/->@Uj;.k$7i U9FoQI!"&^zm|iKῑhČ<=4go>\5#d#)\~D8oyˑxWy_ W1c@Nw ͬ܍v%LE"hhܓǪ _rf~ 83;C0G@ ]ym7 w> 8mcđt.#I3|IXR@6:b342}d'@qsU/⚇7t{q~6.у!Tp܎X߅> &7)| Qt٥\*Sʩ +ψb8s"Ҵ^>3ȫՈ<C,p"3M3f ,)c:~$%um -'%SUϪW?]5W!aUr"PH;8/W:ʰpcG) 8ΉH6N L3sb 5x`a4"PP5e-TN YlDZ;N.r>~hk#ZѡK9 DI-$ƪ‡kH$o#G)?;/^bwx[p\+'Xg@,ܑI4N"gWx]m''$U9 &<`zyK^iWVҁb -JCڐBgUaE3d)s[$li²0l![Nu{u@\ ㎢]ȊHv3b#.[ ,Ap|{{BZW=(w{YI5MŰ"=A]*zHS0R0Lv OjqeM3.j*2>$gy}%·ᾚ$|G<L c땐 ^[2~eJû)H zA#+Y׿%`4k\ \v[*<!Ir^4RvH_]Hݿ'AIM(tB=5JlPVJ4Gf2חCm"ZdAcS rkaC ] OD>4$_̱EaW-B%,6p>[Az?:۶#7G\^J7[yb1NjyݳX.xwL?-$l8"Nzԋ5ѬЩ;Dg2t۹‚Q(Q5z%Zh8"މZ'/ǥMGgh;UGЬb|ˊ!3)9 W<9w4a4Cg'"w ͪ-RJVPi^.'sϞ#TO)46:uL H|:ҡ,NħSu a9 C!/+H7/mcLIB[3l폔p49˗ ROq5{bP{R{Q=Vem(ڹR\$L # FrD!֦%+ʟ7ۢb)FY|@GWQ&ke#01m>D́QQ {wr# #7O|м3(IaRvkp=ȸ8M)ڮ@]exv!vohvz_Tir9~"-&㯉ꁊǘ80,Li#gOY T>a4r:| f*SF*f.덵 AS'Y`iYu,GD(q^#!;hp(r[hQ3,(%' ~Dsr|ϧhclr|-oO({#WF/[$~V,#Zdf"z0Y73q )"=ۯ,ZI}L㧺Oq84ji[ wV1?iPՆωkz],2t"rNbh~B׿9u1vL\p _A6r0w!BB"*iL١Rs CvCڋfpm}69Y=:l+%'U*ܿs.;tX)c3v}l+꒍ fR dv(Pq%}&#{4 PY[__XK)89#nd 4w^!L?{yHfVFs.?5ɭėb=[00JHw1$iYBfqkZ+R>fRp̑ڲY2U@Rn?Bxph"}I3OF+Y}^[qYdLT%ˀibv XkiMH"dE,3b#|lU]- E:ğވHIN% LzA¡!A?:;lhiF2wGdrl5/2b^ -1+%ODP \ǐ |ɕgg`A+7r65wkI*=jF S`B6,; %N:P Y03g4 ~YN+1ͤ |QLf[(Zq_@!*ڒOe,x>ԃN08(sߓ: fi-c9wzW{ ;xTSFW%`TYuYInK*yq|&d;6m"wT X05.7oe jŚk&|.L>6Glo)Kɦ1w{V)w;9D}it2=ޫ1 ]fXu"~"BF.v]`7CZz߃LLmMc*H蒯'&5e[, _\VE`IaҫS}˅fJlm~/th @R}C?7ˑ}H1ܯ/9ΎFasg?k1"8KULmXetiTK&M.e!=`'; `#o52+ݫv["5Kj|a"V"KMg}e_@ }(KOM(n/:6,qCAf/ ٯRK#fb~+ K\*(Dz CI[FnU?w}ھo诏L qjA֫saClwgwh1;{z)xOA2sy7UV2KzU IJ9kdZ(RuI8Cu͑wzjc^/e=a6t!X65VhRk^Οqląz-I|lG.pW&eZo8xڏ3ǟ2kpF+DcCXF. Zަ2K2(\+(ۧZĊv)g {O5t]T)>Kez_=_|ELRX<}pkj2 m/:%aL&N(!-HаrB/[YqV4"ё[edy=%wUIdF6ƺH0zP3hʢG2fNXHO+  Pn6d2Pi{&( Ja0}J@:o&C pch鳺eee3ځjwjB㴈SI0T'U<{[ s&]%@^-;uAp7OM>"_O\S\8U% I v1є#q2FK^t $lЖ<~q [AeFq{zSBĪo @R#y2Чb~֮q{ B #^ ̜J=V-Vjq]^wyY8/ccHYD@d=qF NBL#mKoS4i8`-%0D9Eֶ*;eFd0Ay` KPt܌%QLWm|s:|ٶʓp}JaYYIƁJ8#N\-; JHu /|#*2aEmPkA[,RßF}utC.~BCXo.Dߖ8JD>.h{QXc$ɍ/|m ?ݮ%ĞP[~5+-{lk }d՟$2k=E@~ i*Ҥ-q&nFWl\+0kP+}fˤ]>{S4yǛgǔDi@ܑ-F͢ӿ'5~b/U0 pĩbf7KapbKq}X!:6'V6׬GS@Ż?v|C`ag@H@fYZ§(Lô%RD $c0kD"b8$6 =і 7u<$f(_;:=b'M\)t>Qq8l{+ђ"KldR+?o3u^@Aȟ` "4Xr?OWZMHa덹5!J>Z? p? Q%M…C-B7eF,ֳ 6)]j%iG:G[Ȝ3'gu⚤ezY? ۹Ne f͇Mbr-]qM0T/TxO(q& T%jwyH+3 rV: '&U"WԀLvaSkfګr<*Nδ "zWH[_&*,aGlQr5EeyS=`1;':+Ɋo-c{ďbn Mc />N/6<| Ԓw8.sC-W #`bUWٮU}~~@5)*qD<=6`sɵpT S.TZE˟:c3IT8qI]i_ O֛qvT~6!*o-N@{+"s>Lda᜵C.'h%Bj\ ˫TupaL `@2s7>L _$ȽILfr[ 7$zm˼  `3~7 nfܪ./uRH 3A4`I[rm oslde޻P|̝^ 速) jaYRܞ-wVZ5j0~XVU~]f=+f8~i?|z(\) Y w/ƀO ?w)9< b2,?90 )dДDh2+C[ :giݿ@m&ǔ'B{yL.jѤs k'Î8qڄ%;)Iɛ=.,wZ>h$ LƫG(O5;A!RZ3yz&Z4HFl0b Wj"d̫sO'm7tS>fԣU/p)ӆH"me8S3ev4ŕwbQsZD '29/9Ss+}SS+`%irL+$YMk{::*j\=lsl9SM~{ kiRNm8^ cYDN4˫ni=^ʓ_e05YB*a4ୄp[`I,UѻA}p(P7Y`; v*cd֞3DXLnLUJ# `Z~7qz@+m3a alP,e?]Tv'[ 82SP"/ȦM^vfWGØʤ:M∦~X KqS\VH>-٪J- d0ԟTIt[ZƗs^eVQt 3|-+mA*kM"" D%R\[.0-eJM(BT VA~LwPл6/q!VJ#voTm" 9<0.*dݷ5䡌\ _K}i$ *c͌*ISfotU(Üï /U!yk#]<*;N'#4M3u,)fslLr]@[GXr*) =z  g@>Hv<Ž0\G?:}eaD?$E `2`Grk;O3aڄ8^:^4B(IeJF9g s͵Wd+;E EcCWVB°غ7ĢM߂KL"c $c!7pb}yeީ?0{ W_?:a{zZ V[ݰg pey+ a. 7zdܰ.Q_6B^О/< һGMaoE pFl75OO@.#:8Z֭xJ $?O P X8\+ ]c!fJPuGUƭ0opr1dg:"^JH9n!jV(\戶/l- ~TS]Ai;۸PzhyQ2ѵ?|%̊`){R|qqo'í9Q\x'(fЮ^}ԑ\iSKP9ޚf$eg6ݭR/x aEꌎRXnWsK|!]Ę|ɣ 9%9YN5 R 񼮪)13Es8U`5%VJ`,"ъDE qC.@ɜPkUJd 0u5fC68=`A~Rɓ&<DSժt|4J!zܥKL:?1gZ`,>/0˞Q&2RoOu筆aE{79 9ԘDW{F 1b8Er^jMzp)k$#<}v\޾k"T؆7IP8Xy?>!"F82Ðo*g+BŊv;CpJ3`$BN"q09*[:phC!<3gh~+P"hXBQ[Kµ:[I|)ly`߁WGoԐx9 zvVҊy/O^7>&+YyV*EP7IR?X]1wj2 4.Qorϫ ~tV|aL;h؇XB8ĵ!q'O6xJ9g<Z."2GTI 1H ]oX4 ؗ ڥKG A:A($ygĤWp֛,PW0P;ݪT78fW^TҲߚ!хi{Q|:??Em$h Q#8r5]{nZ1L[{pDe![I%@h:!rVU?SL04΁̟b࿧Y.:g`X¤S3퓻t:SnU8ʫ!ܞo}HEfH6?_`yj,ҹFG}l~?4@G)Eǒ_S2!*/1P X[ Cqt7FaLo*4+i5VYzm_l{ h7Vh3|}Q]8)4%x6Vf,ȣ'K] RB<3 QMyRmՔĢ[e]*6*RN"(Fp:Z7u)|c-5Gڙxxew ;wl1?I\9c3Q+6ES6{S_C`U ~"͛~C1K3=nB؂hACB͹]=! "1+ fP["S=렞'14d iTc -o$GxIODتJ"#&@a6pvK gޅWfcJ/]w`h}pcpLUPsO]qfi]G<̥DBl2! 7&l'lhȬf=oA  RГh\@. SbC ̯W_d;8+ݳa5*uSijZ=^yȠf-+:XşƦ翁'''DNq95gWG/SBf^ܶm4B z`4fKPK:70~Gl"-o<~]YlK=L:2{k؀+%4U*M2mo#T&7u<l1 Lx@4$U*q0Ġ'2"1Kd:,_u":; ژgʉ^s_AH c'lᶢeDRZnXAr*kdةWAHlb{3hL֦reT VKh!_0xlmoԌ[ShHyu, no[o~µc1bgZ@uʲڦ* y=F'6)⸵S %&.?Aͽ|uahМZIa1:{0nhc?̵Md잋/& !3=b0NH:Que+mD4ZʂyT%j\l9!+3sI\ j: %yYh8hW ygT@%69&((A!읏(##ϋi\ 3RUf"p0b8De>&xvc;]ΟLMGH^[DLc?FQAr9ᖃ] 8QX b|aN󒭱.Yi{y~nӢ,gMŃwߺ0Ԡa (Oۛ)pY|Kxh2=RׯZ$ "b=%5Y_b M>C\E2y pNq7A&<ߡ 1I:VƟG̑fHRr""0F.x==3Gw5PզU7ߨd˕,S?B|&F J׊a2YZW8'ƀtp0)B0T t+ɺ*0}tj u>-MB`'Δ;$my'=N"F}ХTocnDpyiG͋14=p Zྣ+ єR"rpS7͖Ͷ]yjD/yԘQ;2dF oc&s!n; tN䁚 P稺=\ʲf7K7>0ڛOWtUѹh6aG̴O`mֿygc^ ::۹]fӕ !P)V4 .M$Nk˺VѨ)"u"P'5TzI`\$җ81_Op iDzL Bn0#>f/t@ fvCwi)i<:{U&rkhFGE3}޹nU>X4q`-L.Yɪkr25_R]`V 6m\(”;XsbV :2%4mN5ŕk_Ob<󝚴26Zx"<׻ݸN"7ӮLS,D[]k/]9dQ{D*| nYVC"Ȳ;Y#iðb!x(x:<}O`rxYN,Ag;OJsp]?8ץDF~^]jrSoN 1"l":nrܞ+b؜-fV,=lczUe;/ВmKD/=k &`4TJa7Lf vHٻ1HaGO.fŖ<wnaeKMgPAD|kǂn(cY٭'_d'5@[EJW߸,tSTÊސo,ZlcW]39uv1gZ%\z rY2(-5P^ޯN0 lX O;D{ P"q]!W//^FW]_4hCTf, I"ZC3u/6yd?h[S.7፼Ih'G>P_5-=~Wg(]%B!hyA ǝd{rI \8/b3Fr a<g=lT*'tnWiD֥}4*B ~K.i. sZxZ[W%G}O]Λ]>-Yoviz"[=?cjg2I"&+{%3@N9@薳VT>(g`Da0n5ڂ"ɴ>B&CiL{ >C9uR׏(|/qE+Q:%PiyA@V!pG?! s\u0@E0XTjh`]Yw7hQԚk2S#tE :O_+(bUu/UnGܰyUKx(c[zBR"x3wmFE1 ~D <̡h%F%'ڝxdFBt!`eXZxLH_ǎ 2]ދ$lzb@EEB+W9j:Noӏd̒ф\q]6qsD} FWc#]+xSÒ} %h dj?Dg;Yt$qhW1L,CF v[L)j)}0O#m㢝v4 o1fi@õIw)PgZF|l1ۙP\b/f%|#fFǞvIB|66CuU%RI|>!'1DF,؍+c֍I'/c֯O.ō$ګړݔZ+V |$#\v )gw[{b  ' Q gI]sZUgG{ܰ) .N5ᔙIMA\%Z%ЭdD%&T_Y#f=e8{ȿ1XEϺ;d?ݛ3w]~$@;v[ >Q1+qzSVSstEnT"a%⺆jY_Ns(:\K-%ԐCf7?!ZUA&ȍdYZ}y[]'ُ4S9 ܀3ʐhm wS bpc-T,?ՕTHݧo"3T|^@Sd*+c %uvQTWpu)q5noK={R{1h|+u!rmx' SoF$`vw3 3,1oj] N`Z@Vo-ҀPRɾ58gٽeH䮊Y2c[+ íҫMyQ#K Brf J0$uc2 aF8Ｌq Ք`%>lnQj[Kg#5A76`,7_u+[dl$wp8e>":8pyTUx8U cfKF`\!60o>-:ج$e;azOZ 㛫G+ط+{63U;Ds{Kw FDt"NZHb_O6 I {r|VZ\rڲLa>,\ x1$VҠ&_Lm梜C`EF. r; |(`$o(`! =׏n灯 k)/T0.\i:S|jCWJ4ݗM5V7تݤEG YCv08dp- a| Ou澬T>6p[YoPc#T\;{mI-t 4(P⿖Aӧ#I/Өk@8ua+5hnYF Yev]cb΃淰X|6^=ۃqdhؚ'ˮf%SyC`Dʷ>u/*! 'Mn. =R/Hi*Wa(iA5!5p*r X5jqJ;)2;@Q^N nMW~8@@aKTJ|T`e?.91yqBAI9T/ ]"|H tNmɜqdnєgJ{;}ǫ[0sᗣz7!Øv Op7_yv|\\#܌^\BqXQ(F DX5i%Wɹ<N 8P2jsRPpuvq&r94M% 䄉>!ILr*t[XK[~hB(ĭ !u%h n6!Ѭ&(wl@$T/ZLq.#$u2#5giB X=P|*_{qA!k'BP"`l*ݝV}b Ul7isa5,@iUi2fdވ5۝xB ҇X ? C. h% w[t&\ +D- t/koŻ/j@6g>^yCTxzM1IdtT őЯW& cxme-mٖiJ$WA<kU[dp; GGIPm~%j,C@]U6gs,Y G#gjqa5~$vZ.>@w!bILZ'1:bepK1C<.fU.%~G$&庳/@\K$utQ~5JDU8TU{ hW aˎ$?1:uzdV'r9RV|ws}$Ԏ SE4q )9wh>vLpL4,RG.StJuRӍxbҟQ)Xf祦tDEo6P=iC$v F~{uIty53$V\#=?f{Au4 c":N^)m/%l󣁚4o|V(I!AcOBL.W)TBYU1!Jǜ|:d/ Yl[*rW3x MsfFX]ٚWbn^XE?6JzKs0yh r2""x;kzh;"DoE)A nF$elQ;4CǿVS|1B<'?&c %Lp~B:+ r}zc.Kw8 h Sk~$s#4n*"5l?hGx~³= 4sx 72XO}B#]3€Y~b`Qq+^LLlBwV:7bHIPZ}/C/Cp'j?g1MCfe {H{7]G| 0ɕ2GݬLYsZS,#FoĠ_5L2"҄B9[h $by ,~)N>9tѴ h)+7]Z *ʝ~"@!ѬjoΕxzr< ̾77/nm$JJ#ߔIwu&2ԅxafCgV8cAA!e/N)6;Q;Jq˦h㶳W"6wwo7=PZ0ާ~2RM0vX2W7XX*THv<⚌݇22{n6AʒfZ"0ԾNǤIXQz< \s(SQ!^¶N{Рјfݝ'X/(U);W[Fʪ*iv+n%_[vAGv9'``8~tW">)~ "GjgJǤ=bw5FD*G JjJ,a xpЉXU.sj Cgou8q@; g;UNޣfMޭK_!vkLZ^W=_p2*.܍OZ\$RPg\]Tzx$!MNȜ#\Ir @`3Ne+~0AD {߉x *( 4SeKq:NqB#yn(]"*lxlmP觱1>dx\Ё=(য়--RO*4G1سoY,)izTo~2}1XŞdh^OV7鹽h;Ħ!5Zd14q& Esk4lUǨX<ßKXs:۔=0cV,^~cpw?؄s1] Tt3<|~OL3 ̃nwK>۞<ԣ*xk!O)8'=oquW\+*A95daqz|f| g@sL_6u UFi[X㳐-W;(7N+T010?)Ϣ@I,dCz*Ӷkmrd㣡su\U9ptk|NC") W4Ѳ?ecP!HhKt gjƴf hŅ0 N7ٓ$H)ЏGam3H\3JR2LKTni'YUD }PTiR"hջp0@'8W(. `1 L!Go .`IHS}MQZF<3 ڇbY^^~|C`_NBJ%FFˌ'ݘ7~OvۏINt {E֟uz̑s{9Sb *rj:Zclr=ڻ$!:YKVTc^}l7\5\:+|ݺ[P0s/aYfNeʆ]:Hp}+~\;fO7kOkF0tjCł L"Ab\ ctf5{l|i -(Tq K&~TNS3Dؤ2NV0_]>c{JĒFv愜k% ۪HeJ&bqo:( Q{* T"ipA9oԀZ(د9 b|&R/N1ڰ̖*RA8aPzBcSl:Z#G6C=о{v#ZDZ8!)Uwu&^vhJ\0SZbn$NEQu R>$C3aoa0{IA/l#;{I J0UZ'(k2٣OLWQNS?D?q-9M]C,8h䒽qBa9gzKBOk^&oڛ*gE=-6R7q_p@x[uWbDL&/ݞ=<nLX)P4aE~k Qb1eͶ&@1;,%Z N'f˟}pȳQ>RkJtH0j`J_rw$63k0h d_zEIpl̘sz^X@t:v/|2.JjȜ!T௲&P?xC+GŌ[Қ>[f*ct>s|t0Y :'"Mеxa;w*23QN sJ^T~C k/rzyF4?&[ff{HNK|o%߂ƈ83nYX]F~->9DZ;EZm 9h=rt&ƃw_,eN~W lVӚabS2"S( Cr&LnD~e<;P`@I00? :3Iո`^0u}Pb=4B7Xh/N$uT $]߅rxD ~<B@Cq.tR&a#5g;Z<+fv+Ѱs N1vחuB0|0qPa)E+ff_G̨W7ǀEkҏ]_pƚmFPE)c L ąJt{t7hI7^Gyaqj-?D^9\}n[<2ω|0B* pI(i(J5S,plyT2d`[Bz Aoj"rqb%Pl q|y*$iE\4'ΑA#,TZUV;#re.JeikḬ눖;[[`!l0ﭤwsxwL17܎XGb1qt%tKAHdn jzH#DTG$pUDGv%v O;qwe|KZEHi0;$P]_ 4:B=| .;Ԭnxm  Kdi%[K%LaYZK+BX0S氦`HI$'~K}*s4WK=d7qJ'Mѵ! ʼ3BK7JZiy]-FGdFǫV6mcJ6/%4@$4tR$"ȗEc)KmBi/ɳ;QJRCdLFlhh, 9ZJ",1HEi:ٱҷplV.1?҂iwC5jK댷[0 WhOWf|ˋe&`ۛ$<A.x)wcu3m/j1/jʰ[Ҫ74gL /(æ5]+޳39"M|Q$6:|) bjJg۲i|!K.dr(tPØr42_32+-L5]N4eDAK[6߰{ 9KV(8@_eZ\X$wͿ;*爍0ߘ8|:7ֽIHX⩦[ӒPM,-.w`"Ӱ,Pe̯F A' B:j"m&`F~.\|/]E%j aN8}Yq{ۛK3Y[O ,LNz{wVzT 10 #n9lĄ ga HwJ-6Xp?7@Y3=}OAGeݭΜҁ~T;,ju6sv+?m?齾9*_Gtsm s48TœoVR#S3ԶI~`eǻhIh1;IiaGLG 6zzk_bI;{%].Ñmp.o\02~ g&8Xgi\Zr*M.ۈ'6SE by#a}5ʡvaM$Jڏ;3>b{QYr"c9qB3i8rY~8_HU`lksWSTU a0^)c煥Pz]Z+xOv[z废k!-3.1EJk ˧H[i![.@Q< CUh[uIqEqa4|v2\$RjMְ/=ؕwxqsSK9u4BPO g! W(q>$HSyhq}]Eb[EU$bVmU=H_2_zqr+·*$U'G46򶺱Ŏ1@Ɂ V O4 Viezrqj%WHǯjE/okp z1eKWxsyBm@8+% 4. ʙbA1S]$_NK&`޿ȒAH#x_oEA=} Ϗ=M7jK0۽j܈nH$ZͭW*CGcTj:ejxqFzjp-{v JDN^E Ζnȅ̫æ<,rV.qWl5`z"JFs~(EiJ05}rCGWY֪R&Z M0=jNihwi"] P;@tޕL8p3?TN:{#ijm>`l4P8 8]]Iɔ}AOaa C?*ب n4bă6Ҹh[ I9,[PF:@α.T#S=7Ih'[y$qtEK持}}bO'qI*.RW6-jD ok@lx ;#ك5/3GXlu U>*vE'zJtW3/DVee+>uF, N< K6LrվySlRSs0MQđQ轣=~$)=}7e|`æi{#m62-R\r VL ău)PoCr/о 5g /w53i p(Tu![ZT $KoWDQT'nkQr6W,NPd{%ꅪܾ U|ENr'.{O_?0#㪹5&FL8Z' Uy;Y”_Q'_O;9d+[VAp(_܋H}rocc G`Sz(Uw5͢.[ !l;zUg]&9up*U RvL'/{=ir'SX_+0Jz ^IG'%ފRT*Q8kF%˯P4Cs;"Ǔ$A7"˛i4Ei|;Ct9 0 6 :iAɇzG(DW3+#\.X' > \6+ { 47# C 8/D^,PSf">n21H [:aʍFRWY?fȐ],mkACIo[ Rlwga_m]: -`3{V-YC$oyx|:qw¢3Erd*qI[s99癯";st>Hn4o kv$I7yzx|S `JpH̥˻rʱ׹O/7.ecFc*`B}6Yg+grb,B-KٖZOc ";ơGyV]5W+Vo Ռ_Kk#{f6Tw*鶩' %j6uV޶P#AnDzXeh.zC3l:QV z ^\~-WɒKIK'^GGͶ X \j`zF/ )x4:!`MSA05Ϲ$xîXtk I2?uʷ dCc1:v%y0GJozB> yy?C"p-I"Qz_9< ۞aYp?'^Hf7'f6k !@TBI2 fNDzUuяQB$슯U,l6!63. ,E'p`>]qwC)cA6+^WLIԕȲsh|#>O 4/@ٱYڰ9*rpi膸X+Us{Lc YZ=-d[ybMJ JTޞ#J\#R1B;[.׭v+|F{3h(m>0OLƓobș\C'w.n} c>ns-X&k &>ceG9vƘu}"5vAHdTeKvYeI=W\{p-x @-Y()`;E ADn׮$sh# Lvk&=M']P%7'S9ߑfF=j`;Nɫp]$ΪJ&]G;[u&Y-o T%Y3bkjp3Mc6[yףY{+'tn 1m5P"uC2B`zVMr3dLZދj[֩D1+J*# ?$04zoZX ʬEl{oIN9IlzK5->dXJHg{&iM}MngP~ńC./fr'qYϳBTHN HY%EŴK>#*Mt@b"Ls >_] OV8ٳ fN)k.Tr=hZ4 p!uZh_tPֱ^:A&XujI>J(y A2;x*؟Usp.4+^1P] T/S"dѶXw_H]A Fs8<ex#U&WkdɎsgT>K{-pP~0ɗYԤDzM`܀_rm1bXg vH%= p=U8pK*jw婪)_˹.37FKfC:렙BLG2A:r  W܆DIn:"X2z7XxڟiIՔNTǬ-ZE"s/,K`p(2|BkULbj^8{˴O[&b*!$HG ;5@uB>"X.9pPl:<^IT⢦~bT8AX\⬘W#a@$*FfYWR kI"! $o#&7›\[a&Xd5{.3=rs3}{D  $:GbG* bl=L=YGr;yU)mo409-o8}҇=z9-qA rXRV`~%O2_6by74_䤣r=Pk85mPKݾ:yJUU>]^"W윱ʑ|/pr5x#/TA-{=ԈZ3j;,]ro^`ꗙGmAiGd; //@O V-"=N;Qt}:g%v&E_yğ۶i[+GҍrY }g|UG$7fbpgFJPf%!s=EE`%3:hd`( 1k'I GcE3h v$0gMdW\L>󙥪}d8l09ֲaHz'(3j-KZ—L*%֦GDŽٙ'Èr@ۭ|~K ^yg}9۟1tw|0ͧG؃O|?R4HcQM;%~A{ ÖCKO͟Ҏ-A?ρ_? ߠ{ ƋpR?F1FBUf?APEߎAGLnQB8vTLzl5xS(潉"JM ;t[FԜf4@l4EΕ;] w&GcWKn_F@ 1!:J /:J<\PBrkgCHjZ9_cB|ZxI,p$&-|Y [s{I&w11CUj؁?ʬw_r$G`&v]" &~+;3B<Ȯ> ^^+8YUʗ?}Œ ؖ:U֗=_̅.-߿r8/F_V:\kuh0"V O@>cYaΟo+~Jk9Hg {~GWy?4-j-^t5^zE:gsL|2-^B0t|3E=atЪ"]$]d\9s,m;|J2s:<;c+6;N֑(CL3'O׋9jvј_qM.9#c6xv&M+e&+rl'J,AjƍT ߱z-@M- g6̶}87@0)=U3Y#yhƎ9nmb# P*t(HQ |u!vY;MG_Ɣ 0YZO]v6`03OKw쭏זHX9  3;4e-+;T~N= =rsgtjNjzsGgAS(^eq"6;jxjbp#,uqI jqzܠU,nB7*cTJ,-3 Y@0wx^mI뮡2܁ dd"s9d #3NAdf(ϱysųRu >> 7au? dHTX+vj)Prkʖ7h0_)EDPS`q^P8uRr8M+XRG(+>7u#2/{ w1]oL %iϻr}o:M!לϚ%EV1uGKZևtp"P-HC)?b K2חxPꜳdDuc+*1 .qv b'|i'YxqpnO;gs];Ut7fuWS)vt۱xk,;yTo Y%v"S3,BX?nPd;$h: ۙ=MGyr<+Q"ͺ[٪IH`t w;܅!񜍥@_>|&2;#-b~HP0CƼ5OGr8TgJ{@ A$e%V;^Cu(YPQqƓL YM#0m@S+3[R/y3eb#h@5E:id 'K~)Wp\: !7,m1I> owkAL4vp3V$Sd բ3`1<ɽ|:8N*J֝8@Ez';L+&xVV8H|iǒW۪8jIsR&m^Hlv@zkda>Χ_֫Iy: Z?^QYzR~"q.^jYOq}1s}hvplz`H'g! !B R\qC?YY Y 0szh%>}b0"ZM R`%S]T(^\)]"Z2A@?u"r]:O6U49`8`9Ii$46J[̨930-dA8,ݯᢖ4a H4x f -3 G =}OZ,[6xlW83? AO̝x%i$%%<oK $oJ¡ 6xWH_T׋.}@}WpCh)3#z#mԄpbHdVM_R vMXݩ_B̀\rT<+d!]hW+DȀTP_3D6+ܠfGÆj2ζh>'4&B9iWED3XЯ/UaD-6JD*&RJ\7et@&{ٞ}t1[K #c,&dϳnqz逅fu_S(WHr[܈?5Ţ0 Dqv֎c 5tE4G yl۟VP֨܊7ɂ2&^1*e%Yl̷Ci DA*W}vi~%+Ǟ%q4X5rt " -{$ᾣة3׺vb3˸bZ=Zأ;XrJ##jҺF.G Tr32a!/kڸMKMw RGqPiOP.~` n\]B+D0l9q sR~KΪRHW+ 3Cs;&p-ZY GmѨ{Dj~~VՒM<[=1#|$Z!@Zn&q@䦏摻G'$y} |*Me,2sI@+ePl,H@vxz`\\h fɡ!jO9w(iOzƭvҔ|PzD8a8z`l<P˶eA{PPuO46+]=|E#ŝTV?nNReWs5CAU0Xp' mvNYC޶DP/ *ieaa!8Ҥ?wU4wQ &vr %s?+*9۸} $xB% K4Uknot4$;Y]w4ٯb2Ǜv[F \PU<6аO[R&Y &̯3A@~mRT. 8L ^~Ez'|xCM,(ɸ`} =ޙ y0C,a<P"UDA;W;=\^,I#seK̑-9go.Ov4a@?ՖxO,<#Yae6 a17Y>juS+9GykkĶs7&6.=|‡&݉Zp+=;uIhl y}w1*pܞҙ}ᔣTSt97m8ebqp^R:ǧ\*7g\"Av} zL^ w!N(>"ӝpcz>,We膗JU2RY# DWWw&<-~)^:JTGwY-BXkvMp^"N| ( V#O",а1Yy"EgHvl2qB#+jfsH$J7r \? L_SCh۶Μ4Ӧ떇4`iB~[t`Jb,t C +ESWسOݏԼ` ]л ճzOK7 /֋G*2W`,UzŏY'(h;3r;2=SgA )^[!BL44m0})僤 J'V R93CEmp78QRKnl&pchwҎ[Vwp1H~+ORdZ )-e"~榴G,bC4(' 2NbP'HFX;B$K%nؽ0 dǂn @sb0/Hcz5b>$-t|98>f"ְ.V*CqEiRGKʄk";L仕~x8\fjqˠULצt)ڭ&y7ґ g-IjM9J0Tsg,ZRF |ޥ[۾C"R\6ތ Q;xN;tsf3kt%o@>^ T9-S3Yj&N($dO+*,N?xFG3p65۸x+\?>C~z]-,*$&+L61.iŊ/ԔBoW -zJ~̦~@`lW[t≘.Fmѵ@|5'k(ܴZ{&qMhcЧqI :߾"[ J-װr5: hmV~}i ||G:J:c)*UXa>Iѧ LX[:VW݄`r͗qؤ{({>rϵjK#E eBuOE񤸏2ȿO9:*Kׄ kz@M!t?-,@8uC$ow"Xi>:;>-hP9 X&HǬ=zReA-x4C`w?ޡpDw!cLd9- usLpqΔ+jbH*7=ϝ+H{B߇h_88t6$x)9Jcod&$.\~Gk*Wskx=7b[ W"l z!>D;%MaMs"\ ~*SFxĉ!nþZ';i|; [KkgیM5E悞sY]x041OySO *Χ{.w:%cWl_AT:5;;Yn)y1:# ^l!̮zbH~ma ZآoE>wu~|bRmK .ک+kw،i ]&@0ö4$WN*eCL5.FHX2ZxYStSDnN{[zق8ʵEp6bԎ>npqF3]cգXޫÁ5Ph)6?σd$&9Q4wVȕvL/~܏ɶ7wcn,FZ&yLj2c?RzOxf8rI6qtb7[̛E3wV{T!͘j.Jz_Յ]#>R&#R;ͷ[\:6jhzɈc=ǎY>}H2x82btCՓ\t uɕ(!IE UE~K-vy ؜TIfӈ-i%2 * fPﰈ 0oLg3i'KڷѶ1j-l6Amz((ͩ+9XX,%6O J1Yߡڞ$ (=53W|DǪi|t-)eX7D[9cOz62lK X:.Ec6JQ}/>`^₹3គE.3L',;z`LV8(:7K\vh ^\5  晦vR#2_i"fi~zG\ [#CԎ mQO\3/#$N|D  X'ݨ&ޟӽ/ݯׇl6N Lˏ 61tUm.@#۵(+ֳ 1c.H\F;E[jg"%+1p18NGS[j䚙e7qr!@ͽi; qD3Ϯ7pV\J63r{o }*, FލXLV=?yء+1^)̋2_#> $GLwepO`3`LYmC'/DV6@q^ )lM8s6\>nȢ8GyFbȂ\tS?a[/Q/ gB5z=l\aGc#ICdcO_cp6%ѱ -$grmfz^@S>Cd&u A$\K]HGB9 †F06f[в& gl^:ƥIh`X4O)(dش6CGg㌧^ih"U^t'X[T2 6@<]=/l}`f\6Wo6x=( LY\$mG 4满Zt[{Foy}j8Obh;$1^ ?[J,NK=>GӈnI<`LQ| wnPk6`P-ܶcmSvLjn*)†=trf* B1?nӝ{LXۂW,'T+ki?[g]43`:IsbLCIăkN^pWCyUb a)DpGO4\%ғ&1[yAMeCd0B$?Qw>Qډ|l6CUf^HSQO pn^?kR;%V s&W=.tg1gR ^ Őޣ}r<|)Y'rn]:5X28d@ :qh~g)n0\[*Lb񈮨*D23H7D^'➌(85&K*P~_>YJAǕj$0&x*WZ\3]W›j=a>XO0~qS3S,z e#b"9 mJ=y_7?@!r|g>df`'ُHc'?[9SS&(tJ6 :~WeJi_W~\ǖ:Np r.,Ne # t=aRG,qU+YAh r{F4#)ƿ1w_'Jс{%'>_W1'vd`WYZ˪3gЈse%<~ʞUZ#StRg%)Phf'6/vk;,Eƈ1φ 'oX+dDe!_`f*oțŖQٿ1wcb-ubSEL(r2!ԭd!Ze`Jtw=Pcν+O]&L3w.mqPr| ڑ.5: Q-%G &vUүkŘf}=\DLrKBh/vFB=pҼx2kV ` !)(@e)r ޼tT9dV?dڙ\tV9F~sШ/Fo;>7ۮ_ci `A\yZ:htГ1XBič!A_/1]3Yºwb&LV9zSC(8&z#4|`Pd*FrbGiE:a)SFO()>:hK+9ӏY*xrD;MK>ۇKYrumT9=s);)$1Dbw_ ir'5ױ#텗U^{h.#xAVkĢН߂mcj iry~HS}k)^ԩ*":+!)XHHuy ;`iCy]IN"("N:}^dlmNѹ }9)~ u.WiSdk:+}UEbY9_YwZ Q S{ jK! ^˫VG'H٦uJfʹ:%b/e?]Vg´7z'p8O@{I9`zol=>ZVǔׇKHN@m╸IS~ >UcGgӬ+~W̾e}[VJ59ފ.OOwN0.'n@Q( `V3 F1λZu)˜er?\VG nLp*M whwEeP_9CG>kH st)yqdѿq4Qծ4gpz6-\yuj&g'q/V^4qwBP2㒊s5zƐ3oD Þ(7fV(Eb-YUz@yo@-.{DϾ!bZh||he|T:vy>SsH=U#i:+'ѢneC+0-,a/1% gvُ';n2UZ˭Q iM^ s/^L| 3uH8A 3fDL! } t&&uj9׵\?K]#˼w%Cmأ"*]t``5(lp%V6nMx.r>$?a3m%]-y 9 I-!ޖY{9 (%YJ舢{#q>E 8Ih߄*;PĉK=rFҌ&E98c<2m?yEVNԇ~~c& I:!V*sz mNb,Fg}ZP/I\ s4S-R\t{5vP;16VSD׿Y1h`ܭj .No^ixe1/!VWtƳMk}*O U9O8䲩ЌX FM7Ff8ڻf3[3,NZViɺ99 :?^t;؏Nˍh p+ lmoٸt3C).3:,tcaB*o2ZT߭/^: +/!m}U&!Gh@ lųs d9F˫;dl`( b3+I%2}C'-Tvٲ,v,+hES6.iQȻH >u`yWLc,rTRjw]ߑ0*-pzO>loj*F49QdS|^;Ysq"`7YE(bDeD#-1 㗥G6f☋'_F{x_~sA#z]Qieif%ZKPN@7,6I *N4멘~y=:[#;lV݉I :\ҊC9?Z$ g5+:Uj淢JmSKD7k1,7ב)>f(pn4+ixm`ZȦ>.!UVȅ_e[D$OGN1\dOڡى6anfdF!uC(ur**L%oǂcLDqoTɦ*Xy%gixu@`+#20{|^;dxtzD=KtJ/m\>ΔV}ѥ=#FV \C(vY: JK*b[O $l0q>Πcdڰf8KwLf#w/IlqoɌB`P#;)0eoӪF#ƌQ0im]ڙR3t[qA^gA]|&&f]3FI?z)eM\afr$ǧxbsL[N{@id*%_2NDgnɧY%1 g]ڼߪN[g4Ӎ16[ܹ̖>+SoT9;m0I} |pž ``;,OSzݚWMFZC f?61[}gKhǔO8QDGUJ i1O.VПڿ%%u^9}P*. %) "\vh}):BPcpT3F-X$}ut3AFfVɹjO<a*alV^(V"(E 9_8]b"K<\pTyw7pJX)b*a!ݳX3sI1B MZ>>qljiʊ"k6;  ubgʶ%( ݉w(V\>1hx$G  ʦ$o/Һ) z'kNB`ARh~_ԈbT<PP J2,2Zq+[`^,lsg66êIidPjXwu:''Ok6i^jKm :3 qiTpm ~#'\ lzۿʌ X.I3-T7A]7deu'X ~MԠV*te/]>e?hcv@(DuPY.^Bǹ0ާj+\=ĵ^@ߠSKj~S6[at-;3y74$@G5k FDJ%Bm q׉PAk=eqK> +WI}lrSg |R=p7¥& rbKѯm$YVy.> arGc˩5C7\d5?~`O. Bl-Fp-#"6e8dq1%4t4 !h6 vڈgKTdr=F#[EI-Rr!V,|r"TY^J}դ۩ f&K<$uh5*7[Z͘/(n)ؓO-U" `7ڂ爹?]]/l&׶ WaP.K>uݻ_r*Ƥ榫[:7$;hQ)eD"J$V,KMIk͍iD@Ր9JvG6CH{D`_l@WP+HC*N.>̌֬Rc5<j_8F"q7-lp!e|4 ;Xl}TnӏF8o%&ls eEɞUt"}ԄTkd!A#*ڬL;~H z2Fxb^CSt{=I-/|50ZJ?^6M;CrX%g/}I%8ױ(J? ewMEmyUծprҵ'72: ">+4 6<_:)pSLP4~^1N-kf_M3;p&dzX0kBV<㭖l7 Ʀ$H U4o}wif$)KINEqhlY#e^_.N8&PIaa JiIsPj/$z)VmЄj2nҕeZxnXlB˜ `2V*;`n͡ta5х]EyDrӨpK a<5`[׽<]G4wb4<(P#Oᆾ.=#NjX$1ԮIK$|6 /6_5sPbeŧ˂בz {gcb`w6s=5;ЉZo$ʦ]`Tf@S]ɽW2K#gpzH^ϮM0FYOh Y~ }xo75MѱKz sdS%U@v -Y'[!slThÎ-1 0‰'lL< &BH6c{|_oO]цK:Haxa׋OK д.`Qy ˽ocl=isNRCt# svrq718gvLE KeÂ1?e-AZdhMX)[U@ޔ/e9&N@@_%ȱZxOTjmb[8K E(b+m*:oN-թvf7^gzdK.?ww&dP[YBױP<MBpԸùyU0LopdE!0lsN.SjOK,Դ^Pw=dSk$Wہ73|!M!ZVID. R7}dtƸɊch%zvgf?:pm?Pje'6@m?h1|UN*/2hLsMZPF5ȑ¢{)޿LJˠ<1IY'Yc̔}au'\ a MoTX_C-1y8f`S bsi5t2]ߙuZza`}*A5! Vf)#l,,S7uUiK~b}Zsx1mB(Cnh;@G|W؇vجuc'#[,%AnžMZ'R,)\U>Y^|/ F72'xpsZ~f!o[b\c\j-u=^CܹEIf < hےK6Vo1̙@Y x-?W<ʚ5S#!ݳZ&:/鄚faBP#aߎu8]=iz?INE[zPѦBŀ݋Ǒ?S@3LK*mp_@ \~!0""|/XV*A7G|̧!j$21ۇNy_'f78߯/'H)*&Ȱ!†jyt CwXAOA('z_)?XQgZׄ48swe#55D=͉CQ~6a` w_`q;GTm.wz?(`rtp!둝I rM]5#rjTr\1R$ d]Ƿ(!GAaKmJRe ]Tگu$٧8 Z8Ԟ% Rf: oU q2vQ5wLBX -AGjW' xTcոxT ؃\ΩH*&?k?-Rj֢+ 2pȶHŰmEL *=o. ǷC RTw8(L dܔHs,2'k1$fx+t{w)1~QPgPM6*M6zq,cw4n(x̎nEA(N U!K#{'LfItsօ+J0[3eO.%YI{-Eh$`K^h vUI&sh $-OYSj* 3{`YR>V 1ULS`@%S }F82'=- YW-[4}{Tzw)|)}ܫ[VEwJOd/$(_lt[5([% 3B?n8wV8`Ng% 6 .A c/ߖuL')-L'laĞjҬ3=DT?EnSvfyL"ӟB2!# XYTу`fV8%hf%i'mX?^ 0'rj3̝RI[SKyc0_-1 xWb](gG#e$ў?|LTyr=%S/qqZQUKv FLU=E|elwŽ*}{I4ş;:_=3L1oTq'XNzft:q(Z:\w= Ncc:Ⱥ!NS0udʗyZm5QL>V:$(ޭ*S'Z -' "6( ',nN_/i9[QfBq.rNx MO7"Q 'jƥzP'0[o3Ψ4?qUC7ֈ[Qo#@H<8eefp|YayW^oړ%buhL&)E:Z^;_Tr􃴐%~ѝ.7)[:l?/l%p`8a;eF'.DC,F:ڴHg4ɒw(Gmn;Ef92F.wxx:GMyҌrtZ0"sK[e`[L(=ofFЗ+BDv=ЍwF(.L! {pĤVlR=|fi}OrW?_;JOb'?]ͣIjii(clwzWwݓg\!pRd@g#B)9-x+r|ъ L&Hij֯mzZ BSY.Al¬V[G&%X,3ӖȑkMd3̑(ѨyqaBnR36ʵ=5'eI̧fX#P\c@]&yڋJ"\y*e3;$㏢X0D"s1AA2} 05_t|,MXقG3e0RZ (ẏc a\dfۿ'[;S[aץiZuBFR1,m$ B E;ɼ`VQv*,RywT3iשVpy!`j!ҥ]'n 1?]$<p;6ug Q7:^]5kFϳ3\Ӵz j,ћ2|#7yL-kvzR\n^.LEI5}f$ )(a"V4hI"{PrUU1/.r}&$v"鳾+*<\A)a./>l-Pš*ZڷHHuJN5X|"/&h{P2V߶g+94(|dpB7x* ju«rCpэx'd%(Υh;{5^o84$ٌ [ J~ C*X {DaWJt HKPV#7V-[es{t@8?sLSZ7 씓gk˜Bd/En6ŚnmX%OoTo_7oz$b SȆejj:&R#YH*MAZ4n3mp#n{(5;s ߥ]YT`kPVASQ^QW_LxY|FSm\2 X7cӘ s=0@`V!mϰ[ry/yCB;Dvvjh@Dwv=)G5T^?m.S-6fy< Rq!n !8rg䈊H5LiO0wih}3 3H3h@;|*RD=oUHIwS\yHok"2G+99aG_aTM6&69@4 E("ͼ lрxϦ=kA_\ ~dP$ny9g w)6.;֦"h7k2}pҞ`=)CeLϲ 5LKЖ~:ɨcH3#De pn6AvXw׷(Oϙsk(+r&V,@c#Ϫvto\t t07 8 gi"}vJNk!|L-2aсVG!׊3#PH_1r *3J_ PceFޭ){`q<~ǜ7@&ˑ,5$wU{bQ^KJ6X őT^,ߋ(ϐY}j1wb꿺4P-H$ûmz /̦+YܻU@B,,\fu*s qf-4+D|$\? kkp>O5i,wlU:?tyPޠ}߄V 78Y&Kp5F Ϲ_{$dꁥ)E1qҀܦ@yP@RfK6n[;N(f-GL.ʯWtV V`J D,΍tI&{'M%Q2/r3ܪ֊KDf ]CN63OMZImR/'XlQCO&B5tJF?DUF3ݞr3VRɝiV{#XejP#;R~@o}k8ضaؖ=8Hc5/>p%Aj1ҶW,?F_pc_B`%M~ta>1TcXOjrz-gEMr-*s26ZD}kW:sxk,Ձ H} Us‹I,'v`}(wGRȞj$5ȩy臊jy2\EBڗ'z:(9gK# zik=StȈvSUcr^1 hV WCS >^B&%UD Y+˯"@N!D8[ ? =p;&;"MQxԞʒBV73Fo PO26 -D!D@t_j e4fH7]CҪ|!ߠ{kZk 纏=u( V χ~㊨ ȝC.5~OxDL(_Vgo\ۼ*xlڲ'? }] —!?3YQ0T+[msr@L%k"S yKbݕDGB5p>%5C`mT G˽ƽH:Ñ5÷L* TQ)ʎ!Lu.ayƢFJ,ׇ#^=<)CW/11L+E}34ZTOvdR3K/E,`ǐkmHBu&O%OP-2~^,4.X C8mo`x1r>ٔ7:9%}w.iWb [ ;Nbzf Q'%We#*Re;Mf;:,*‚2ZИ°kB|ֵDuᰬ S*t) \4i#/&T;+Hk\'34W'"K˓ȹ@;zYbtCSu<"jKSDE>2K5W̩1C}3E_, ]ޏ^bkt^zPt9?(9~I;ϲ(Ü+#(}<\nc2t\LoV0Y7q/, D[jW3jU2N`Y3 A3}td_i<]GXI f$RiCQ|? EĔKXe̥!LDfI%9͎k-Q=@)ɬ2ϺxQ^hq4Ex UMU\Ԡì h\c L a 'j pZрԛu83ٰ: Ѱkj 5>84FtAeUYʴ&|_9&/%Im*[>MAg8ȅ)C4 gLzR Kbtj K"ZӴg{m~r mq?S(gcAs^nj3DՖ =|=W#"'#Q4a5{g,eB,uK]:`X&Cw<̽$ҍ}<3jO..揞eG-<1?Uڙ^# =["6)_>!j8=Go6}ެ@V~g1Wԏ 1}Q3 Cް* ;oM_Ъ!C+^旟$5#,BF v> xZŞ:`u"_x3CVhև}fWa=|m$:Gus )=՞}4{Z2xb-m5_C N,uD*j["H$H^Qx)OWD&Pfjm\0si f0c!YE{?oSV3 1@4xD0Q{;ǣ=^nk7{-rMϿgv 1*9-3lY/$|۩ttJn!oUc[gԙM>#Kueg!4;?hA 2'f4d@@dBظd0? 7S bl[ q\ ysPԵ F8lSQl"- މd/52~Du1 f??m.!Zǧɐ,z ИH]q׊3S~e̴40bLl rk M2(ᰨ\qxk.Ks1ؕ<1/fM~ӟu.yi[ꙩ90G mt+7I tmQ<+xVvl0=zpTAe{?k.[iu76UO,MfᶴcMF<\PKR@̺=_LlHfHFpÁx'Oh4/H£%f+@b[) ˓xC^y3 Xgf6!&,c{MGtOc&fBSҼ96@K\qndU, 2e, !$2+8XVKu\^(S}piQ 5X6\^}ɞ/0ܲh@NƼ*--wz}֠Ua[kNFO z÷ ư];Sr <]@ 2ҚB&/hm--$'B $ћ3,SV'bj0,е-m[:jEsuKΊLri>4^Sٱ=Zbϐk:d Vny>\5'!+èCԾ_^ C+d<?&8_>>Ȯ"n^tZ4V^Zl1JK"4CY%]`S[8/=-&IhoL1^uxJB#) Cuʻv"o`+I5 63Av57pw3v>w0\,y{e2f6/~L %fX*wAH'cHP?"{/=|Qz[$¿f*5<9gH M  zXԘ 2Y^ P9veȰ#rccGt@VJX_ɗoc n7jX~ut~b3Ul/4KWܻƈW_bDfc WA޳Q f[LI☲ܳBVbfynr58uDAJ7Pw? `#=dfi_W,O]jFM kh8M7<^M ZUvWHFX@(x)VZd""Zkz7uc^5tB4|U-hh(x:{2`anMhegu ҍN%KTg)fIt=H8k`\MgP?Qwl׾ W2) Լc6B4xQ VFR1^jP.49xFF1:J\~4NP 5%SCAjv|iƒ2CM@[M R"]qʧS^VF70NF']h˚Zt^آ#l#nރ=`SL1.A3}(2r=q1hԲ?j~q'#{pCa`YVaTh#Sh)Ao8Xs% I XqԾ,<ԝؕj0IpwW~idRDxިu:GUm/SPyV™ǿ&,&SQȝG$2t1U`)Vp lE:(s#W@ ǰrEziPhW \[iy%/O4Z2[rsfwTw6)nK1XвP1'w1Z]+fIEN9F'|8 E\ɮjr8Ťb.?H үi^a^VmZq-p꾌1osCDڒEH^?) 'MY=vZWOJK2u#&# ##:Aqtdwf>mf^`8Gezq 5C(#<_:2'**g8q@咃s\&ȏWėcnOjn(zUy0\<33fZ{uc(mL PS&NVAC Ձ(ޟI pr:Kf̶|jrnǜv[0vZ2)˨e}@hqb9f9uZB!cIKSm('8;o՛g2SN%_*#8%#3ltT6x&Z5VjE_QJ>ƖRf- Y*/Sw\Pdzݼq #'; бܫ^ _J# HTa{\z!sX8i *9 GnN8y;A"S̝:xՈIb$=#" >|d{}+QF8(K" Nj KAСU:ҏ &FGrR!X.g}i~pJH)^srd0>X-B|.-9M{[xKb^5sY+a:+v{N;Ι k3C#tjTd#$rا=~73S$#Ȩ4ʣ WtYO$(rEn>-ޞB f{@< Ivvi}@dwI]THEM+}1<0#EZ#cBb|E5$5zEjă7bNRZo`Ԫrh^7 X*Y,HR9 /UK!Mvj8w {F!Y[8ԲUy]\py@{e,ǁq> U?흈GSWD,2B{ ~€۵Lm?8gάMOCe`Cm#e:}k絈MYb6 ~J`/|i<]ELV܌~$-\6Jo,+|5SH+m}qXi $Hcl9h.0͆?̶ y%"ǐ c#BGPvBg]cAE 4qЊAm?wbAit៴rSH>)g6P9Ej,(X4{Wi۴-DrsQ\E6\z%9ߔȄ%nF8#ԿeRёIx3r&6-_'wBy#c$2lj5#Ь^צئŔ7 cH!&=r>|WuuW7 5\ދ t+1gOө 7,p`:~Qq[D{4j6.۳ktbkI'1Skdmwoc}k](,VVeʝh~Evpؕxjx27^[y^k(m0Xa:U>f>e}p%GyCFٜO(a)C ]\ 24YA\k#hf])5i}y)Ș-FbLIa2 \|U\-Ӓ͍\hW Hǧ &5cʓ:q ̡'ěz)bҮӳ\I(5۽-QΤ; ,zgf~GL?dIעÌZ,9nD>vZ3]- Sq3pi&2syh3׎hmcѓjʖQ26ufƃ[IuPBtHf OWVw$FX nL7qhng.uH h>Ex]q7B*wmv(&oizAM46sX6[զ׫]1t~F8 eY(_3o8#{=Yy$ NFt(:8i ~iX6$9d:go13PзĵtכLK3- x pG-3'=!F8\Otu9T0|$D% 0@ ur?tkS.WjXϐ%=2|,}!oјiϞ"b1+UU^ Pmt5rdR7|溵S<nK*|%~~Tҝ=!t^U,)>aYS`#fY5ȕߘyz":j &8 ڗ/d=C24ߏYuEeP':.!1I%`.>] |/m N CVj2%>uoX ~O}5Ib9Xvˎ aqnAɫ%}F 'Bшh\ ^ݬ?Gi'`rw6^Uڸ5K>&t%k5~>ɞ;XߪQ>P!rs&ƪ66c(BOTmϾdESM@_KO6nEy_uL,gU\{׬jKJ-v{Uӕd*Q)JّBYNXR֔U"/ IvpO5ۙ?dWT9T:{i,'A _nJ`u j%hy6z͎\):݃^6f_M (:.9,,W{e fMqEf>|]dQ#IG% :9iApiD|p@)GDׇ*+K=oo'[ ,fa> = u?ڇAO,J 7c ϦfئI,6n)i$ϛ: r@_.7}0a!r&0θ{|@ vEKmR.ky^c!O)klzs1CMIaArQ[.eT+C,v8|8Ybu8A"*FNq:r3L]֫e tmn$.&MV'-8WqMV&j{ߛZ@a4 2bAt*"A( ,t|k!M᧌ Ť~F>EC~f[qF=[d[Sbc:Py8{WQ}s ]Hո;DW<]?Czy7~gmyW[B<>$ ]O&&2A~zs5[jBęDɰP9BĪ0ҫ)Δi˘/&@qҸulf1#sd|[g !:JJWϺ&x}"rlMecz8{cȸR_1E@QuH7w=@ N'G0߾0HRɺ'rwwlIحTiNj˲xP3SUNf΅v-5"r|4qƭgm˙T9PʙWd#hGfzɜ<->F> }%\QM.''OKt_z?d1 xd>R+ۙ'㏦ -oW W$g/Xc^e~ ɍ*rpa>J9*ںK#zL^Ol7?HXrqESG$l?UWgr|J0H=aIXa\\pHi4z @]|#T3^Fd m2LN\w̑s ,s{`C 1(gFVK.َjԸ4 "Sa!"A0UY l>=/Ό*PN}x0>-gHf@*Ʉݒ]սsq6KO3F5OYo&nskM: lWxpt c!(v|/CgbT56)kH|h42 ! .Csevq71؇ h̄XE׮-7pQ1}cݢRLg]33߳>?!Vهkae]YDOұ? b$SۼSAlp_a^3|=>v^Ĩ`Ah]opHq{nnBMAU6jF`a / @چb^7ؚXB'溸 S6@HE`K-.VVVY\D\ !sKam},8jyX%4"^ T$)Hq.hp^Kho!!e Dy{'a=UnPQ)u"KY[ h=ޥ8!ojzGcւYkʋ5 ՐB4edw^C;6X`I7@DC(V[R`kTUFh%P?Pn='-#d54"g8štbh.A|SFrx(܋HC];[`%5z^^+YbA1Έ</! .=j}R9{\\ҵ|z撜Lo;^]0{boLm Ԉvy;%0:-, 󖩱Q2_/g<Ӱec$rPawXQ0G3|χ=к X"e>o@Bl0"fE1Y\+sPFn%/6, kIϽN"I֬3@|θ0 A+QQh2}Xª7یS=M*ag  qQsg)Mvcq5f.܅kXDT4]L<Pܩ9 q(g TU_EuNV)A P Y3tn:}PI/3ra؛PN5Ͳ`=|Gm:w WXo6mۦ*2!4_ƽ8_21!^ހ CVYxrŠq̑9B)Vw` ?lU=9ŷNi>i/W=dC)ӳ2R.휱*J*qNQ+|a[ZZD\T]mEؚ'4_[֕|yFf%,"P8WD)(,Pl^V4QAI~fF;&SL*{aD",5svѬ{]!soQXã]191;GeRv Iboeb"'|N¿)p]Feue oЂ[Mw0 BeZ vҖq^Rm(0j=}b]NR}fT@PT0y3FGu^-zYBO1m qWjZaHu+{\^i2nSMHjNb(2C>V9s X#aY(U2362nQbh\NL\o36 #x\fc5.e>6 fT'A\n75SI7qƞrHQ+g,`qd{P{B"5 I`?@_kkbJ|+!sFyDgZd$)d |K{'Fbcs !VDWb< r@A }Fgj^>;V 8PVgxCD妄Ԕ5}}D/ESgdߚ3B=zdҨٗiN#\)ke^~c1#Cͧ3MYN,f&!GIm9]Xs4Lt= ,3f]а4,@J8TmK 6ofјARc*] _Z@^ - 9=P2M1":\~OH';wHn'.uM:>mVznϧK%װ̵bN4͵O՘ʥ k{p_}9D(|jyQ3Iw@) u] |JZV6Ʊ!7fQjdu-&zĶ1w0h O95I>KkZBUj&_:9A:6|} G^6b-b|nI^Ub2^FN$Xwٶ .\ YEZOݝC]$lOi2msddTl?/!-)dWxF*}UdlOAݛ2ǪEBf_#2Ke [X/'i`%$Z&F#"yuV)"nY|:24T#aRT5M # bUD!g*3FjQ.dXhG3mE1᪇/o޻N^Fn->}q\V‘[DιO'M=q';8VERP߉u=w3Fi)ĹrM\7J0m"nE%,Qpo S]V_?&"3(Ϟ$/GɟT8:Ïԑ,Ⱥ{b£O*ÙŽAٰeXq2>}H9Z@{y淸Z2V[(depL{SlWtL}\fFa.SX3Y찍I*hh PႸL9B3+UB_s׵6s{ "꾝΍` hV6ўe|ŔԹ@> c =7哻KzfF\U Ga+v70Hxe7rDޣɓ˞~BVC?K'J)u~w2m^KEྮ9O+˝N_)71GtƧA (\}# ۉ`Fyf:L~ο٨=T-SBFFɁ Ǥ}xtfMY:9[Sgm<)?xBQӝ͜U!ƓDۿ`﹎Gnt~Vt?PpG[K!?/uv) 0'z~ Jì~CNԃFtƣIi)Kg}/@U,~۝"Qm9 ~5؆CעAhk\'ᕦBbi&jZ: ƹ1]j ݊ҡ*V-2D)%ew a#xZIOq -|̀X.CA0rf[_t`C]ۏ%xM--pl(3|jIWNt3n_z|VÏ[7I&z[JGj~h"Y-u_ZI㮤SE,%9 '17Td3k#+}ejJF$ݽYN<+5]jV x3XGLW~ZHd9dϺ)}Gi?Hײv}.#xA] ?LIB2rbڬ!x, Mx 34EـV1{+ͯOShU% |@"SZf,8/HS o|pvߝoJ!m=U!gycx#^$,/1;„lZtW9nѩvUyRF g^ϜUp`[iO]m9}IcRԥ7~|lظDyECp5nr6YpSsWlj3t !GDY-1,k7oFWX4$'RwP"q'D+0E(Ķ:kq|//Zr~}4iJR1ډg1ʈ[z^EtmXga;Ռ|Q|wQT?#vR<;ɣ}/e]O̓1]5D]`ąwGq{Zt6/cӶ<#8~|xM6Ƌ N{$Zvo\e!SoV@7R' &PĽ'@F۴M17' Ff(\Uv6B(p'i_={@iVfّX%qKd2_xuZ׫lPތT9XCDs5hra6$|Pl'4h>Ƈ2=%w&qZ̆ѐ1Ca(ur}}G*+I*;!> ϻ-cPYoyhN;u^ǝ66@)>'H ^0qEw٘*}O0wnGoPBhjQ=&%m a%c,\D_>ׂZEpZ#=vu\˒kг{d߯[ Px١3PҘ:FuFCA&ba kCaj`N2|YQGپVuT/mo ̩ hKqV%9e|"- +,6zSF";޿  d;7 y/>-ڔoj@b:x6glCU$ c=-Ye7py m)YՆv0>(Sp">S4dEDC?C, u B)fYZt5@DD"5HUd%78Qpը7,Y]T _*̭@Ab6j"r D/Ğ-d< jmj :_kӽ坋 v<g~e6tbAkml- fAQQu=Lh+!.A~#$BVUs\YG_Z`R8$[80tArDMYM剂w<(p-$"vl$j,Է!8xH,1z 39#Lc2 }zu?*mePt|F:$h8K4df`J'Xh iM-Q|`(c3vf_#4τosF>|AsBhdF oY W&#2ַc^/ Wp'D$DhUs~u44ly3ez:\:EN;Ic2Q"_d=2/:ڸaRjOe ߙl=;C; ہ f"QbWԣӕyVo 4NXԚz=o] Zv'{mLS/IMlxv*Y[MUZWY>DlIR8Ɛ-uh92Z;ʗc,%*&r'#Byh!R3U["Rx/snXø~jiS=mAeI1U{,'^0{_A&CY#i\} j^^t.3tQy܅zy?aT, ^M?~PS&dUXH(TRbDI~>)WSm+袝lEE~ǟ.ba`SֽY7FYnr:隮xam+?1.n$*eۮz&1&QߴI&ZC$ݨ+CfjbI<|QD7ȶ?w*ldvrP]Au@f8wLOYH*\z@mˡǬ?͘\{Gk-hq\T].7{>BaHZ'!ŵ_S0S aܼ ȦS6en;* J0 bm{p݈{ :m G] ]:P7{_yss?/J$Qv$YygX(W~Y/89gvG]uo=˘ se^U)?k Y~,6X׉f9)J8=aooרI f~XO#[W AWЉ׹(&P H:*G%rq+_.+a~* NW"EeL\猺@r5 1ͰVw26#(U^a71!-$0aïZܔ&+OQXٓҷY9O1ElE(Rm C^-6,:XRsR:(b lBUq/@m]nj-%#t{)nU=3΋FYh425Z1K=5"`w&D,"]tRqqVƶŪYaf)uapToe;3i,a趵bvC;j1I\U00Ђ³Ԙf^a~u>N`03nj@j9Gȴ*d@# |jiUTw][UQDFJ2AQɇx]]~jDo_/HI2`Ոtx`/omJ7m4qVEJ_kJA"p_7!()Bűзattj%48)W}wVBVO nu+aA ZpcCBǪ ZQQDH7+"XALzb`ry^Ő t爛l#]餷bv-Lo*}4A-widۿUJ5قI35T!wוoØ'ݣn74;(vFYC-.d 9#pP0_c*ӵƗX(IT O`meOpcuuT<t9b" +_\IR(":炕\pd9AT~x:Bk, Z{{.^v [s+]P8:Т*#zBcc߬rC SoT,uЁ͎Bz1BF }YۀRIc̈_sC60Ga}ݺSpMo$"G Fa-}"1ؐ͋^#g& qRÛr4w ]LzY^_^G0{DB:ds+$<%+Ǿ#H0F1ݗ#s骒Z~W>W= /NU!ZOO*eܨ3` iǪHuP0e'FԁDtDKW3ø?}EYu>S`꘰*>b>ؕt-.NH2hhe;no{bD ʩ'ձ' tc_Ӑq9:ưٱߦV[ ٻf`OSI#4,M4UA J-ZURS6Z H} q<7[d'ĘRwmHr* A^Tst0;~GQ&ǖ2#Pr!2TF<ذ1}3d<$@? v1rsY0rS5'ZvR3/}y#e29OҀWpk SCO%D,ӑP+8S"Mˎ{:Opßp@$pSit% 堐 "ʭvgc slWQ%r=7eY&4?Xg/iOq;lUxyETs( )^T7a^3BJ)}2)1WI) %JCrT&ɫݑ [!gEsoZ d d8j7qE(4ӡuPrew\s}9|(9}wfh1QM-#37hv*eVzUמq=]$! oI~P'fO\l0H&AG*.3|mܾR>s2$|4~o4dUw:<'_6]ykwV!힇)7KªÀ3 ~I|暔3{GwN*?.pl̳AK /aQ, ?~֌,3M{.'M_o_G!I.eE u, gZ,-@ 쎫 8u&UeU|[~tCE{nDu>7+䷷fv2MDu F+uOZޤy]E!2h0]l :K-Pz!^+G$3-x:KZn+'&zJIs]o8uet6qV18D(}[h50&W,37IxՉ6- 8*"_і\, 9ؖ6RR/6P̟5Lߛ5F`؋IX I?eݨ⫃{Ϗ,ɝ $XϸQ,56xTU;#)]v RlY)}:7(c4DYR{(WS㨱EЗ"G % 8Ӵʞ%d IŚ,eO45qt~~ۜ7`=o]E}5ß2KS/O薱MpP? f*pQ82i. v`+ܮenӋ)wվןM@R2m@#On Ghm&qU.@<{S<@&Tupf6SӇ<žHpa lx{ ʒ!ۀUV+m"<-&m,A v=R1^ QF۹B6g_!:Wg*ެ.EHUA% eYfE P= T$Xz q URC=,B eT) A9I]!`$' : U4xJ[ D1+K:)~1S m Ɵ,7!.cLt -Gg_2[- j4/g;k4CKif;5 qF$gz3w36! # :6M^-hT*CAmÌMe\*L2ex| -IBt3aLa?PCUJɿ˰8,8kP_YTH!;~($ XǷ!M g%s(]^k,}x$Fae-qeBЪy\~Ɉ1oU@ {_̐Aݤz߹CJi瞚َ6qe6[#\R/OnD__ b-)ޥ {A{8RsޡNNVZ#W&Y{܊䚙<@ Nhqʐ{Jb]Alմ9w}exh5 JZ=iȔ,0WCl۬ d>3-9ס%Eaa R@8O2":a!Y.Ͷ2_Q{=G:oh@K (` e #-؄rFR|yrё1˹=4KߎGهxsId+K|a/B w2|=[1C  ߐr3M{l]Fc)R@qv(&x,SJՊN#N[SxP}Բ)OR+L[qR&N.Gʛ6vĆf|Ns .& X .OCkBէz 6Ê)XJ|Г{Զhk D,yu\/sf#zviJOA\D|GaLݢx>@H\֨=6, : W#$B@QB6&)m/ER5Z\.`&OQ|DiW/rsEծ OlFi"6>ph'JȕKEC x YXV:PN${å 8AZ6Nu#c`Kk(RFRaSԦ4: Ht3)L0 )0Uulun ;%';~$nOB\y"zFRuݝpg0\^5.oʱgn;JePq:2")p}`_aT=;DCȲПNߗQ)CIa#a,kٖ]&ہ2] 7 XeU,%2HIcO :v EӍ$HQ ,E,MńD_в ?f7l+幨S |WEn};֢;˘|Tȣ cOn"2j$=dBM6pup'*jDZ$SKp0W">Q26 #9A,Q {ZI' D<2iwq *T>8*{?hV}xo<%cn3 mDPgUpBY_u mm0c/Rwٝ}wţ;A>-(XK?!;./Mٍ~NJObMF gV<^ѕse1 i_Xee7s]O}t mt:({!ߵ2!z)zO1Z:_X1FK#;WHg7 {-..=.8F^{XgbT4$P?_y(|/W /gH?Lf\(;sI~..ӮMZ߿aE~sDcP1aճCЗ V;(qNt#nH5o&y6 E_^S2_Cf4X7v&I`89e0xa~,k/$X93:@fORRc%[dE#|LNpr;^/U1:;X!~F :XujF`>es:8 )r]7(ηF5I P@: ~x}7s>V^IvdǪ?X:~Szmƌ'[q/0fޟEd"諝L}Ι`TulȇAQh-09w݈ PC RNrpDSoAVLuB'Ȓ VfHCƺ(_VHš8\Pf 6FϦ('{.)@NȐe:Xw,[ L7L G'$OqWOl'P+iqE0UgMthUu!8|fDْ\A׭Dop4]~ZârWkuhF璌dRrɍZkxLn#" S;hIPqWxK{^l?y۱4Oz6l z[Co3+ETg|~, eFo|NXoz6f.Bhݻz?䲓6@3/Q fEY⍴76́W7s^_2?Zؙ#pObyc.`>L˄#7:;Rb*f@648btwmz͠YQqggX7F郜!fc꓃#:+%AsbW6EN>g|^S^h'4pufW, dBM0sBUe?zsJ&ԶTqE(~Y9٪~pz YѮVkwNSu:A+Bk[ z1d0V]t U@c]8fS b+o:&YPF#gX]4s00gT8w,UpQ G';]#r4 rK Rw jMX  l/`8rn[!9uUUx7o۽;-i 4B?D؂"_=+[!VI:= J 3Zi9s\ rXph1{~l`k﷪l!fs1VFHK# ֞b޵~S@; |P":|U$+kOv*Z5~'@DtS]( 7 ^axFwVVݴC/=G Ygy5/2Чhp_nSws"fc!gƶz^)M2Bf5E4(ayJ|2=`0 RI ;՝ClQ/NZG(( WQ4"J #D,,߻h9$?svw.&Rk], `{2ܖ8~ݱ1/2nUUws@xR`՗d퍍%՘= J"f۠M T6z5}m]sDUe) w1aQ3sA;ߒlW|!4)A&ڐCS 54nGI3n7&# m>0˝ H-XbXbù~vT_ |אgvO1ƽLǝD9:\v0*WF!*]CLVF %q^r hYԆHڤԾ~I&x "ƫ7‰+W*12DtiwΞ]t]ݽInDtM4->xReDk.vT@'OSj*'! -`u 臨`Ne lK69oajXh 0:;TbifiᎯi)`)n")ޓtg}| Q>%Ei;R(>k YmL*Isv$9gF;]bO6a$EHuX$&\*DB®-Hn!&(S!y Db`AqY>h徶Ra.6|ydc!RפCXLn gf MGՑatFY(xל%?W?뢻`$G̿~~瑗G%nyS×Љ ƅ$q X*r/pSPZȜ3%.>2U>r% Zhٓc)Ga`;r':|^y0Do\u)Iءt)(ZԘzO7S/Cv$?AQn/b; HXt"z D~FEay/=9So/&_+]<#_?+c쫽IYV&)kj>p6::*m64}h:Vl8je>Ǔ^%eX;ޜۂDŽH q/{PL@{vT)Ob&t>8>Nq2EdN~Nk,"B ,Q1  =eVI#ڤ{W"y;&-=Np!)8,RS$c^v2w"6:9уtadϥO0[?DvQ_w˓CNhY _lOi*V&sW1lU=Iː ]H6CֹrՂ/uEn1fiV|G@ght }NK}ԩ"Q WXZ[mvٴEj2GJh9v9BF6:ˤ+1OxTIRG*=뭧r$h4Op7'NGYB7 Bzj umt;AVx/06 hfH`2?]U W ]!8FxIJG!Al[;M":JPa".zl SBܹ1a+ %T  9HKm9z9) piZr}_S:800i>|C@ӊ0Mg: $>!F `D&@B^ʊ1]5~^'LX7qc]stG[*)ܼnoMs7G06i|~Q؄z*T?XIZb[ VgsopR –vP*H._( !Γebz;v՟$?4]6əD}>IZ]ۍajɂV{>fPփ>#_=F-Nmw_.y"eKk) #`roURKB%+, /FC. 3Քng@CQ])U|1_Yl׊lm_ee)i0~'čyd8| gѓ fg:|Gx)H K[1<);8+e2}=NԺ`kj{ѽBԣo*2β+C=KYbȜjDbF}Q ӛrU(ƌ.T/]H̜ŬVp n-9TZP0b0e?\]El8"48}˵4< 铥:\b[^i<O`~kVq<}8[K)Sko]"ajA ki+ܮ; NqWipOcJk [խ/8?.xJy+Xg]m7D 5Nq+ӜOOx=΄:Eme\A{ǂe3,[`uC DTcXa~0\+v"B6b8><40;\pyHLR8 X#KŁWݥcѲl?\ى&s1T ^KM  |fHפFj2x<0_6+N<>d9X1WaQȵ؜ G XžigP2*S]0C>Xg\ KG1Q- GeӈB9T?МB 3$kV|14 #N+)A7DzF>|ha1]-m?QŌȭ92mqV?{XQ z䢾DPɓ=*34U-S WeBX+i=|phs@75@v³)$>`q>^> #hۖ"?}LaS͚SUnڄ XG.-la,/=9SbNAD:8w)YEjw2l" %VxwQq!aI>w&!qGT#C3k7cP 9&q֛/ =?J.fꮠ8π_CLE"'Su+ s"ܼ"70P?(>nG7!# sڬS@^03V$bREIYA<%͑K".UCz!w>4$xH#SaI_s$}ݱYT{9b0bfܖDn?iYd"O2*%vwsmB׸rQG҆7)mױ2bWcjDO1+\^И neA~%+E2(sC./9FZӅQp'KԳO ,9u%\|rS4ZII4 X?ɦL C?ҭ',DI!P~lkmj2u9B^҇ k!@6(l䮕j =j]vTz5IW/Ŷ(ħ-l18GZƿJD˸8@ЩTo9vғ8iC,xU[ O>b͊q;̩ly>r[5-&s\$<{uJ+|s9P 27W<,sIu XKf]wi5\L8aʾ!Xm3/tWgb5 xʪ((x=ߡJ q޾d hdPeh'UDž NZ´oê^< :]ڨsƖQe2>9k%Mix8O7>vjĥJU-]!_}k> xz9یQ=-eԕώ :8U gDԵ3L,Zc׃D!5'&|HȲg(Kf8]{KfrAZbK͟j%Q#SUk\aǪgC*3Z=[:H-/bW$uWC5yVV~3~֛$,xh99#!n8D$LՀ!+PQ 0^?sC.xՂ0_E&H"#7{tr7t_OBѴ#cIİz]7od8I}3v͂PL(s5=12X@"/3Ap 0$%D5!0>ީ晪k{1K?Ԫ! qTPXM鐽3m;$K | /?87 l73oUt;6r3hn{ :6qjrFꎩ?%6~曠 n= jV#a#}0[ވ%S݉꾸~KGUWgqB۰h42g,'|ՐÅ[YAͭ޻ϖEAglf~c(,?uW{fͧ(0z` Nxqk%@&xwvP=&$z8̐BK&#*CٰǢ&>Ʀ%yI,݁ {Dž B5C?m"PG>.GP)s`=tۜsXih~GͭS(w`] @lSgCi5t)*#XkCi\w͸^j]S I'砓/-OcL#X9%cvhYM@'fhY!| oO d^ǒO֛-4=?f ^izŢ8[9!psγk#QQ_fI=(l%@af0o.>ۂs.$ZHdݤs (j ٽ]Z[ēqDbrtiM/y}3j,j0#-A ki>j&BΑ@tɻhqN39AiWB?Թ~FI58GShD R ].rfI63ҩ;SZKB r=$!Ҋ<F=궕BrONb`"m4tBMD]J$cցDLl Miz"橂f<ԐY~ PXRuސ4Cmrդ0؏֝}/p 7OTn7JoiA&?QPnM"'iV,VNե p2n!\ `F%Kp BLT2%J',ʶlI{l=yV՚=B,4CЙ1iɺl K rI96Gl5l;-8"s]X.#|8WNKcsOϒTe Dm4{N$hCcUT/wy8\{gG?c+@׻^gc:VX"Ӭz9vp%9rRSd : &WbOٮvJE4lISǛy~ Pf -8s]i ?DFXݲ=g})[ U-\nDN!a2UW 84:3Tgpt z-.R(=2)Y%ܽkѼLkLbnɆP4XY[F{dRTNl_U3g5YjzЬMɜA8m3T]enِ56O-ۇcO7snjY ah黼P3 t?uNX)曬}ʛOϏ9 9u Zt]quej(zwZ':z :(mӱ! ΢B&o~K:կRBt:Gzw"66CrIT gA2Hg^}fbs#(1͵^`) U_3$U(6h=j p2CV)6-:e4F+4s5jUG;rQ8Tzsփ}L?.dfpn^G^|DY+jܸJo"#sV+?r#3l3wl`};nܤl| Y<J}\EzUunKYqz 3 }g6'Ew]oBl  ԬAl{h4_Pm?P}}9nlX&Ϣ=9_q4RB2Pyk#qyX zMh PO4'2m!= } :B8笞ѵv\ ˟wiue@OwRI\Ri}[nei/jH+D-h|c2913 C WryתK: ,wh_}ؾe` ,=$\;$%T7=@_sjHD!"6fXg7@r|~Q8j5rRhfzGӆ(N::0UꁺV9F~Z 4$-v`ӗ,XYhU MQ e3][+h¯A:A<"\yô4m\e ȆrNȾaam/|V .%KiƬ\EB_zEv+7|>UF Gm8xʯ+kZkY}I*2>! kWC.H M~@`pR s9]1v0}w-Ud2KYY,k 8t zqqp͛=KgϾj>I\ڤ-<8"g^!Տ=A;f(+&vhx#YMVɧŁ l.Mcs6wh]ŭ31-F͠b*%'fK@?.{lO.|D85\t;ޝrUGƔ=JSmW;mb|$©}}ͬ+gUvQqǁ؛N'@n( D w{pCl~., fJcŋmL)d+6#GJ&ŵm^u bt 7^(`zO' L4'Q[T*bA-fmYeV*mV+&J:sQ6{_U9s2ܷנ5r3V\(I\Fov잸Pǘ *U\a`JP!3g.;SezR|B${̑\} q3˭8濓.*ݸP?%DKS2nt(!MJTD`0]mڇt;R |t'o+ nbi(oP_ϤACѬzdM06V nFɛ|B\4/^hU~}@zAԋ,ӆgz xI?B?) `8t F3FVxʝc$D ħH @vls>? ܨCwxsb sqXEŰ9]VƀϴiZz=:\C|y^w?U4{[az[&gCj=s﹝㰀cS;q iOih赣B \uO̸.w cgRA=e ߘ+Bjs1c̓AsJ\Z0b /' t٭U1" Bxͣ^ImBQ/6}2a4%HΉt;[dT_N+wlQ:%HZVD[N@H;^l{ O ?m ilkUNF$'8-cc oQ< #fBuVϹ{U@-k"{jk&k}ZT̽ V#ֳv#ɨ4nѝen v@mYOn";kԛ<5Rnb)w-+2S?sC~vTJt" !}9DSvRSsAd43 @[3uXZDm 6hNtC}`q@3̏_tmٞ u )Y\ h³|}~5t5O!& n:-{f8}I@6TN`4!#$jS|A:eOx%_ AQ]aI)4} ,Ցvj Pd99~_y6̀! œ/`G v#>+b(n;/I8<o)uȷuvAH=&x` SR3\t H}g('4CXM>  UiK}]#z Z}Qg-$ rҏnb{oW̓ϞZ3Iu?&SFFI_2?w*3r 9w@Aۄ* Qӓ+P.k~z,{+xC1_F& NAgPܹK*.p`?gf={C"3- :Q/Dlړ QS'-.! /9ZӺ}i*m]=|A{h`!X.P0hd#6R8;Oi3_+#+ E*!ԭ3q1th:4yaDvࠬN\&M@|ZU^* QMKx_zq> 0e>%r>?~l܅m:{8AqhA~#g>AbKa1],ŝ~re=#X*yt7 b'6\,N0 dBv${r/vlc4öM M8imzW 'CK=Wr iLV\_ʁF䁽y]u`udl>|^(ކNW6%2XvG:$Y:~2|jH[ԁ?UPsNSDxϙ;ڬ A?l@I".HGQعSv_clf {V)0UҰ'YSYz$&o5RH_&ˆ>"yÐ Ns!㣇f2Ewl@ura`)?;goPlhg}'"Twߪʻh#8\w^ͽlOCڬmZZrZL 4ӌ쓺o.gcz_标[,D,;u>`QqXu+#) hCSSHj#Q( -C/BhƯ R/fqMNi@{]q_ϠZ\růfb?ձ1h//5LՐ*x)vǂg%2Ī,!1&/v-?|4 <ц3yJu]wsٗF>tɲYZDh%Xo1ЏG 2>CޓnYtUN2BQreάYKT>k1^v*_`E-`Of̻ƪޕSLkp +\Ct[=f"<|/9/N\u܈/M,rtrlCw"X$ۺ[TT~N'mt$lѱ鏤m.s"~>rOW͇@3ě˜1?5SboXD#%Hڇiv>Tcy?8M)Ž˷l7[95V<0z5gt?vyy>K!8j?SzY@އ)zWѦ>~ZK|2H -2r b ֩ dV,qȔ\{@;RgwU1 9wljD?3"{t2,,lӻ,>t7 nc[+ [lp533S'^VMgfa24o GfEZS$ >ߩ%L{'>_vaʨyU~[?#n_qO`CXߓN}t+5t[:blFC8HZ% 7%i`f c-d;4S5 ;Qw,R3$ݏ)Yu/猏|{`IU?$:x^cς%J6V6׷lrZ Yypo$SeC-e]1$*ǨpZy>UU#U<յ5WT$')/24 \T%EAEMjנ%,"Jg6z5tu |J8"I3+#OZr^Z r z$Z}ANnGΤO ӇElGR3Gŏږ 7(@Jb4i,Mr䛢JGY&SXq|$HDZkvr{ashLǞSx U} &1yW^k{HW1~p=$ @#Ue0(+M:]V!v3$ Cx 5l)V4+}[To !lID0u(VO{>loOG8RM][OqvdЄtvQqzRCdͪ2)'0THW^ǽ0{>bRhQx_DZ5R՛jS0ј{0WroH~AS+l~=jEKMٛ.BcmcmVLC-2CsF5Fpƻ<(!ƞ::!urCv$G?ow?"S.l#F(nn C 屶p8I[尬NnN}D}F O?:_QEp\YL= LﲿB3Rshhfq +daփd=\ "߱rե*3FkMq} txXf4ҏ N#;Ϋ;:9{R*z6i3!:Нj-W}?01+P;_{Ǵ79޽0 n%j+09+rT0Xrbfjόc>in; nn'ߑ?N{,x- /2ۆ*7 %5%F-fv<$ѹ4M K]AϢ*"T/=XϽy _D_R: ˄.1+\ߧMJ5": nkL 4_e'a$"w'VH'a@8=+Q2Cl"ѭI\cyfsGsNjl 8Y`&)٧Ө_^b3 1vDJhVw)C ~J83hǃ#ukCA#.)²3namB_8k(0"yf~VtRA"ys;(5iM%Ry)G)unQ*j%4byR`5 ̞O\42EB?QHwq6`B >@Dm.U Eʭİ57 lPLN$):վ VE:hIv^2AiZHO7Bhэދ p,_Ԗahip- |RbW| S}y'NXmnY+t9Du&̨ΩSwCĮ楡F 6w[k2scDMVFs{7}{Q/;N#X1*-,spf\=#_pȳV$tp*>3/5ӼRHA~R gϣH@"c5*f&/q`01㶝$D4޾!ܕ4&އ*W88=¯.3~zBmvR k־2,ey[?ι\؀qtR0; L^[w%`L52 #&"7&s PGdh/5s iK1 Dx4fl4'l|gPO_F 9~ETV 8;34# zKd}zt.HJ+rml+l7\P+6̷eGmA3?ױ>+`4ӱie~CZ8BrpfLK<.tYS53쫶jxΞ,݊;R#?2jX9 fzdrMjӼ-m= ]žO3v 5B|cu~ i_Ӌ#y|&>^&8l)à x qO~]ԄpqyPf!N;inR\?e ᢄZ)+G?ieU{ 7ɄC9sw|4킀m)ZAhgРy \^dM \PԋVF2KmsCAѥ,2@1yAl:]-Ed t mMӎ6L>72!؞F?s<0)`9zg$W]C^m dN^=J\*ql$xԸpҌ$f:}V6pяj"TwPePTNCd;g] eH;Q(fXsT$KTWŭ%-kgg,*PLOf bWGɢDw'ܗCl1IP̓9A$(3kK&tW$rΚh3 -[W桴9Rh2.}iTF0(Ng`9Oά搻J-,unހՀXm N&JdM|MJx'H)o HcShȶxǏTE(T|)g2@jg͑V avYIM,_6" ˤ]GSA)Z{?HI@3 -ob$frd{R41ti: PB{PGè y ?a뾡%,[:x$N1'J&h #3"s*Di p\0z"WԈ,7Kmqt]ROzD ES;_I}xLecCqV{ԩzPKRϢ6fy?YQG3}RyZCtƏBx Fgb :+m*9q'fJ B]N7xhIYYG[z,bh4c DLUS0C l0,^?̦3׹KLc B w[1Zc5DKZ] g[Y`> ,N;!jL֬WJjuL `(%TBbHrOX1r nϩ' Zd^eGȁr;ܸ HwEbc%@G.VI 9{lPֽVO4_k_lp F>Cx޿1GykR"Ă|,Qm쬄ZE:V6kd`@V!4gAÂviڍH 1 \Mo3)dK!uUU +\Scw"4~9p^|ܕ(3I1X*h GH9O,*;BϋiQ'lVvX |c~>;>𜮁d`t䖊ךFtX@—QԬ@-R7ۻA1ېԇ쳊 /">h(v{K쳺+DuZؿB%J:iA+f(]9^䐝($‘KJF+sa"XXv^x]iT( a7$ L-!A *$š( !3|! fMr"Q״B!\oaIWr743L.^z1T'tE,! Z( ~pkT:.GB hrj<=wtj1x2mA[~I1(ß5U{pYX_oʉ<6֯b *e1\3Um@bBR1dAQ@^3UQe "tWƙo|/S\%]@]LWWF,#=/޼JMB ,F}fIV }'eiLo_klyF8%zt\\i kv\ZǸ#8kS9YJO~Z휖ӆDozʁD*T*|4%k9- I#JM_1(qog˪MzRK6tY㞂؞PTMʊV[̐=2έXiRy.p<*<MY, jlNcW!Φ& +mE.\jBi6S/q1':9/('2S}o˨b8S-&6e@j,H bb^8%CwRߵr[19`@;1ѼJ+0UKfT:"o&އrșvLH? 1C J5Y*3kS tk'*%Yc%e`ji ֚ޏ3q4CND0n\g@2/i1p5\<ٻ-@┐qz6 V3ЁZ)Fk5,`K&S 6G8UpDē}7i(q!esFhni7Kq0U>TeWO |7D{#F]9C^pR1F"툠ՏNsF*V'(XUݒULQ7FI'=I }Du(:SrPytwH1g̙!,$RG =FP vA8{b,z`$9WjS_sϹ*ja]q"3%==ъSS{Rx+ ]VCzhC7`נ@,fl=P+Uě(vz_Y-FfnHM)t~qad\Zf;^9\- -/W}?ׂXp R\<&lnAGCc^v.X~+{FlIs¬D˴Z&IJ\H(>JY}\^/+b@m XNw0i㰟t|`OYjqJX F!D*Yzq[R7Pz6m6⋼=n[Oop%)!q)(W6$zü )Av?'5e!+).2DsniMKG8w˓+_jR>RN]Z87.tsҶTN` _GkzYf<%MCY8R](\jثV3ˁ@hf͊Ʊ!I 79a+A?p5.܍vP0찣jB#B`!d7v 쒱#9<]A~; VS[9;A5>Q/M6A#V7@y)ԓR#h#|guh{ ҨN9f,7pU_q_֦eDV<.oώ&M7s\bBM7Ӏ&Nޥ#ZH׮$@3E;EY޹1餻WLOS(?UT%yVtԋN!A%C\CO+G"lcw|9rMR;D lD^Хo=7Opq_9;is"F aSHevfr͉5{v'i!m@N4XÜǯsmdı@[,v1 W02 d,ALv,ejcyh`㱙A6G A ≃_"# d́(|.M8g0 ҟ"Z|f5vFuNAY4?5sb~`_BUF#_ CZ%GۄE|7|䥂9T `6z>`b2xm0I}Իbr?vs0DP@V/yag٧LUMۙ#rpK{{oq_ᛓw .U"a+3TS5vԇ_4K ,3d .ᖒRIwEa6㣋2 $xru$`Y% =" [|tk\ {ua(g nTAP JYs_v=V*;X\I0hs'#ˡe)՞wPNmBJP > I#\J}S:!K[kRžQg1_*,ikk޻&4 E9a+vkS pbERͣo+TKE@ 3s#;[ ۾QI@6sR $RAߜ==Dyb.CN8V@PnN?TUpO"Oå&jkK,d ^2r'yGKzo yS/ЯA/(#z1ݼٙ2b#-A$I8O*G2 q0M_GA{@`U4(6+9ZђŜ} u@/ݽ:jGɢ#t#f+6{+6Mz |c ᑳ!i3@в"si?&ذ540Sy8Zaϛ<|DU:qogT9Ɵ\ ImzY $-.$=r?0ͻ3\в_)-ֹmE^\mi̵';z6"obpMw[Ƭ13GY~&!TOVZa>TG5.@K_jc42W񔀞^֏} =ϔ~qAi: q~v$LltZ1/ Pq:B-}ؿpL 7RZN0!4'/6 U=F>b:i+"DoHpo]z1c4W yxjfrZgLS! Cr}hha3DShC<\͈FaD*Qd GSW ϨWބ_h_5>诸ZYRuM jZB2پ9y7jMZJ!&iH3 }>!dd.BיB1=0j[F&&O]95y KvcwC cr>`1U[Ue]҂ ~ =HqGRpRPqQ\R78ȣ8Я*GL!ә'bJ"팏Djm ĿQ%cvJ_@$yO YP.'0/l&+wO1P-%EFG$I) f%鳘Ru:kJ(Ƅydrk.or#S@"ъ.C8NcP jct)m0p' Ub'0^J$WR:qiP7wMׂ22^wh6OR񙚕io!m;q8R);6@e4|WIJВ6gX_F *` \W6Op܈_dKOUo*½4c CR'3؀Y,2 KcY!#J2P[aL9QuIr J.lKciyK:kdbT޶e[gZds%Q+_f[ûl9 ]rfpz8rk|ީ-xQ@ CnYT$`r]b*U%蚬21!k{X+~%x A 7'v_o' qO| 3pN%>m1'{}3{Ӽn'4u9!қ?`t xhF@Qv%o~ _dz< ܳ6wٜ>S`+qu?X6M;3?8%! lF50-owZ+!@jmB02idFLi ŭXPҼ!W_7x/lv`&'%HƷt LT9I{% :XLd+ަ\VEnzŘg[Xk@ :%#fdou[-8Y|EL(Cj::̅&vTµ"j7!p;ٳ%u#s#PV"b}pي;P. O*_(f\{K1ЄN 8MCyNy$U0zVU/+f NNx~*Qm[NfAtid>ܲMS )o;r1?lQPHXm,JHꡌ,4bxp?%'bWaԐk"k&!g96Ў&WP#(~ѯ Y'JJ<>POu԰q"j?D>d@hbNx`̬/auu) d[,sw#F1:LV+F]"G3ӅL7 &@Ў ½f}eA::#S泴tS٣$on`"\ժ9Q2gB1ԡSG HKõ2ɢId!M _=Шj-I. m|'ۀKtQqh,!isq21ĉ!7.5{1f6(8fjt])"KL{YKzھd=Fʂ(CAi\O ŕl'L=Rj|$YK C'̏Gd\SLL8z;A9cufR=JGm|@@YA!0Gi@ʒCf:㨱ߢ*t,1 ?V ; &X3*|pyf, k a^bhԑT =$ ;h-\9~^ m_}IaDSwk'*uF*\ 7RvmӛF.27U<%HS@5I ,c]TOg2@ ZT 曵 o#]sKL X#n riLHO8˰k"y⿛a:LE)i$֏)";Sen]V;AZ OUt-%aPLb$"K1*Ux22t!Ɖ-T,%f:qttbyʚ|`{1@@JS>&0V(0ꐬ yf@(.'D"AY%g$,9Y/čFEi-}H2@z7{h<{k`+sнx$/XIcZȺ0j;ehw7З(cR?ѝDFr. $+:b_W`r~iP@CC잺4KU#?uISNrlʜ d+R ˩6=ʛ2ދT; Y(&1`1cU2T4"1;} /5XdQAPm֢8E/ D9rƉrf=hnr~gjzcR@wM%$PL1l8L5y0~V_*NGLbv8:G:1^Ϟ@:ejU͐un_^bI.^"Փ0*=4"gz;vߣIׯA°{rJ'7Ņ!4jTE+JsWmoe)9"[73ԉ+EyY' Mp0f&qse-M7[IhMMADd 9O "S2+p?D8vWc1xSG85(ڱcM8bI7o|:2UMp0vISPȣ?hKibFzSlaz' =KeʤòhOht?X!&1a1>7HOW 7'| ǁ]+ئ">P"}i;.om=+ծᮧ#Vfl,==~sVeqZ:m֝=H|Cc RSY>]_Ffxi{‰NO,(WQw>E5!Xu"eY.z$]hͻ-2a3۽6gs Tr$⯝jȨjX0F]lm5x3ݰгڡF=#):r$1J,1-T,a~;(|ܢd]BGC`± yl3c?>!z9!ȢE+} (#aσ;&}RqRjixd )LYc`ݮ:#qiG &!]O+yl,$&XKF 1.ZĜo>2ֳRNDN]&v /.{XcSHNRvUXp3m( r_!eP*F4jpúmR FQf,:Djr$ f0u~)K9@S}K]ָ!S3ݖE4~FL tmo[ᇡNtzQlvzusD!?[pkW֏><GHOv1.ifZ:l~ܭi^AIӈ~eÖ#Ke\O{ȘXZA<:"}J>:V}P (Ȩp*nU6:Zw `^JM-iP@ 04zڒBn#?O+5gx~4ӻcjb.O0 nUk:$)9lũD*j##+5bzc~ u!>zWeҌC7k!9֋VlV8k,~ɾyʸ5i vxm ]ϗ1_H# Zzㅻ3|B>uGER6;p{a:3Pd%hDY'-nVDlDdWk-{us^@$$Z.RQT~F8Aݶ~s湶\kNQG%pQ|h7._4+Hӈ{oLCt.=Eu6a†n^ωfyr\h$U⬆0Xi,„4XY^Rffo^m$jMkӚk+|C^R07 ]j5^|bmam[Lx*"!7*0K2d4.FܽdӚMzgU6q﻾}cY:s`V<,+A-%\jo+M? "a(RsK.x nl(rvf_'@~O ]a nHpN(rUc3MJ;GoTY1 ~oOvѹ\Wu{y(cgDX _䕼䑃L+ȩު~R#SqB=Cu1,J^$T~kO?\T/gpe./3\Ѹ ,SVM}9XVOc#PEbiL[-jY!1'VEZMA8@Q\NBN穄/? Om+ w|u"oB;b?z\-j/[J,lN2#7/gIvr^T=dh 0#kս8)~Q0mxsB\dD˓]R>v(hޫʞk‚PSKs-E &A ==wWpֈwl?VC/])*B_»^,-46ꉳHJx2I '!Lص.$G\ǓM-3n^2$MNqJT0:6~CwF_j2L!+M"2G )ڎ*1È#YKK0}v5 %T/=?a$LD`aҠ&})'Gk;m%ב, v:j?ΧlBFT*ShЦ4ؼg`z2*@^%, Eg4901Im\ՐT[Q%2=N9ihoDR!u LBWsKq] MȅtA!]@ӯ yfQ"O,(=uhCpǮMDOOrfܟϠcIv RHA q1|&XbsʮHϠbN yZ%8q6-~pr;\Y3qpe`}Ԍ,\cy^Tߟvh/~c /{D#j?O~!?KyoW ymTXtȊ] ^HT>}6kg=:O1:^GOyhբ3޷V9;fnd[ؑjS!hҚ1 b:}m8!9\l,"iA+ζ90w.,A6ʤ{-־4ˢLIdU#1~?i6.'WQOMY%(fY e@U "ا)p(c<ŏlD;Y@[d6~眎_KFg[8+`l%dXʀi}ٴ"ZookA7"]vrd9ڷ->d>?{?lLkN"s)N׀ 2ZTN$|[e N,lQ*ٵB}VGN>d_h>c$F.)Hrk)l'9\4+u)#o١89^*tKgո~۸/,mkP,&MNf2U&K3'#xT1 /OŦI$nW"Mҧȓ/7FM%s0E]PQ;eC/4>\80,0Fwļ,@S.݉R&cvdteGE~|CkN0^Zp`ƕw^|6H -͹ߙ>%{{SṦ|Ox62,x mNo))ál8)'qK8ys | {k[TV SM_XÙ YԸ"E "{}W%o̥̕(ujM_`A{s2/?d7|6‰ ~-z~bL&qXE1(-^y]K<s</s:8:\ 2A BtD7ȼf n gq>s.IlnEH鰣ӌLU=V4ꈂ]í?gsoϷ9d叜kI{5-g9|A n^G_: b+DaX=Bi۽bX WTQ2qϠ²ݮ9QWt8 ]W#=Mw5d .ŃH_cma{-xwmЍs)yg 豚%q;Xu&AmJɍ~ܭǁPcW#UXJSrtJ} ضh5 'P=YLs_ HɟM4:Oԙlݿ",o}ϵHaʜ>+c9\u~{\8mZqql&Ȇп,qb&d[Y5'yAen-&ĉ|8&; JV#7 sߓDNM۠7T:Z31YKH1=_o=S!ڴťqdTz`7Z!?uZn}iJ J2Y2vS^¡/@ӎ$ %Dweڠ'Eie{a f_Ro,FkKB ?8v@ wA@ee<AE$2)Q6wfc!= ^Mc tDCEভ[pzd!z 8*Պx '79K))2!d~RleWg헞uK J!L_KVC7O)w0N,.:{S/_V%:G!<G^/M%o}gzI[S,~J#'H\+/ӠL1mMOUWʰHՇ<Є|o|h&D/&j,9{[cu 5 k:7 e 2_ 3D=QTʍ5bf~O(V(#:|BkƦCb;RG)Fd" wu>gG\R}H>,Xfn ȣz(3F[?܉sas-/*d>U,ȨY+?2HU],±`^ n%4,νrp ̯fl%`t2ߓtӹKL̺0,o ee ym3~, .?j4I9\sld2cz^ FX 4}Djˎ@b; Sa?QLj[Y7Bd5 ?ɡӾVEeO^?R"mDz.[VX'JKTHӾ29EKdԧJ(ky!$yu <*ˆ=CZz/g wX|πLj 4ep%]\FO#0dAz4;92LȅȬ S]ÆVS!`;E:3=AoaXhOI>n s-lg?ͻ^_#qZ}+:K!mk=nHڹlhb#Qr4;[/Hg_)+d=-Ӄ5XOcݩy R˼W}!5EM;r}/[Q^yl$'vr&d^V=0RG@[7;pKA:4VиW3A0$3P9˅Q0QNVnZ|>v 0-q D]h8%5TS1԰Jq#b':̔Oj[ iΒ Ҷ B[[@;BhƬk'^ŴWR`H$L'srwxCk,.&^,!>W~u-0n ‡4+Ǘ3N3 6-ht#o|F"(T9gNT z=tZzY{L;8{6oBRmSb)N5?PG¸FM yo"gL+jmԀ5lo Aݢ0EL(SVLAB:AP,pR<.!>&[۽'Ǩno)فL$\hԱUP;„(G*E6aW42M)|,Vr!}X)x)|* zMu@Ȇs`W:ݚZƟ0#x}vDZB`:%\.IF>;|H;)b/pQF<@oIN^\ 8/^ '%|FȌd}|J_Y9Q^'IU4Qrt6l̶)QY/?3]Ku!U7M0(qxƚ]B ߼P]BkS[4*itvwa~TNڈwnd9ПupF,&SޏS3B\%BmK /*<X6A!%|[ TLNPu5vx[X鐑D9|,i rb |9ݱΜ+!bh.gRe=ZO<ҝќ R'wM5ukaI[_yہP\-ttTV_=*JqMJj%Ƃ%9hʦRJr$9)©+J"]hI1E*FnZ`΢6T# Df)S}җP!vj_?yEa1|h8MUd &6gBdp'BEٕ7ɭ'zevF&=ytwK90:S^=@$Ѻ.[_iujGl%ɦ[sP3@r nI%Sw~YDMB7{ 8gO_E¬bd`Q*NDl"u[t_4MKdYBǣĘ&x)C8M6m%M^J-[t3#i"(u~Y8$2<dH9ݰrٝG k-8`$'l)gJ(f)6~0)V2ܰ<჋ύ:=]9%i&"Z`KmǙ@uj!X41 ~xlYP4XSY`:`-Ȑ>N{[wͶ)ȡ5[òY^]G;ءi7ިCF̀fPhQN&g^~E|ܛ?.@G?;9{#V~ڧ_z(3 oώ=i@uX,) [u; ~)/MxBz0=Z4 *1ƫgd=0jn?uTbU Ϙ=Z9Ֆ=䜡~c#|Ӻ榉\*)]ДŘ.~(V9iYw]-)Gv|l g TO'B9ٟ~,Qu.s]IZZG4b\m4I||U:rqBg"^RܐR&;&0 t(^+vЊV=.gquEIPʅ2q3Yqz_UG$(:(Qn˨6vOSR1~QO'=slYZ*ٚ\Cz:bMI!P]S¢@H džLY|*ݙKW[`G(hIvLu<.}z|HK.MfTSHG3眈 ZMv?%7!6_+ʠ\2k='w 8kKҿEoyt8a$T6R)Z5]+.yx(/o W-C1F8ٚde@/LR 9\)gNc"r' , $6u.]j Po[Ogks%hVL{ `xpcϬeåEOAwm\z#'$S!)ҿCNɧJyx!\ZQB ͇Pih'Dɕ(-:,] `nSطHFL5-X0T!ra0\J>JUA~iw*'\$vNpJ42mGx Ӹ#*ez.T3&Bfe4 EW9undxPXU ;z:2za.yHy(g/iLG^ChjN&)a׮?\Ka2ߥ6y q$N蝺9?pv;XgdWwKKEG?Y=.m"7@S5U c{*Nxmx3m1p}]uQzH/ݮ^#%332)J8A|(;mn~Mib>:V["q_<,Ŧ" щ7pDK 1qG|mq`Oz!5EاoPHcYӎJ8b0C>ϳ:-\7ʆ({۴0y)_Y(7̤ȋʷϐ,P̊}[2则]B m1l]Yl)еҖ)jmo#Z tB֚$m,_r&N d,QSs1Hǒ"]΅{z4y%[s{(mIiTn\h,'>WQ%r̸194}EG>bk?4##+9\؈z,g0D *,EK8s.J5 4; ۱WA50ȏF w^-:cekgď3U'(jL&*ey%bD{w[=tr$fҭi,=1&Km\ď) wbdP',Mn+GM'A7TmM:mti O[O₨v`I&aTCnSrJى,,2dHC~T=`x YSo3#`'l, [OD 7jLUYo|noR-2E,LA+m\Fյ*gѺzфDQX("w+Z8E9 w`$VaO?u |#z4C#8P| $ѕ%ۼÃ4lCS$G2D>#p,G;}CQd:%i&SѼQj<]~<;BS7OhFe@9p cJpmKBΞc=/El_2%J rп+Hd Lvx tTI=G} kg4Z0Cbk:&\~"F QuVY)I]^b"E }>j&_Y1HqqZD^QOMbs1{4hnUP/a+2% ڤ͢:u/zg~G56ڧIkzo6{$-\S^GctqdZ^׺SLh-an bܜ.fEɡ'2m{|oP~Y`q7Aty^.!J˷ɇפQς;?1@,rWI23>k, L pH}H~IIQCྊc 8 PzrXQ&rME)l]BSJcFK .sO:LOnJPB.}fFA5=Qt52Aꗣ# 5/cXsO@Fo`73MAe2cm1gf*#jmAr:L1Hot`h $S~iLpNZpz\kVdj5\5>7$`V>XJgAM(-Vqr2@-P] &)X_DcHjNFd:=xvxketb- i$iIq?9u2@pg|8B+nڼ5XҙZL-?_HUC=4Q]}6ƹ59 ;."N8S}rNJ=UfO8H':tՐpS,[K,kKͼ${:am8p.l7ؖ]@ZX*mEŜwtZs7w1f:ZI % jwɧ3Zۈ@].!&Jnd4S &( 7' [px)@Msf\ b߷B uK6fIm˱yՅV!:hC#ĵW {b&tٵD(3Y< 9"LڰrTNxnes46l-7_ /HFQN˅^ݺ@Qf!rhG^)pz4ɡҼdY3d1BVV7s#* X1 lآ:hj HYV^:x U@%sGu`nL,x CYNp /,LR"KHm& 84.êi@3?rWC:`X++_Pb3Ǵv>XR3 ?G{sSB#&ݏOS,^BvOD..PrgU$i{a+h94CU)A|o﵇Ak0ͦEjvr":v{hʢ\ʨ{jvFަ 67`":؟ ɶ)ą[.$Lq dqAB7!1IYL#%:3kއuqt=VƲ)¼![GL& sX#RxIV*ycRd([T'9[&G>^rZ!?xůFg-MZ.J]…4UԸN4'cTbˋ&r!7s=%υc{gxs1j;PYs3ef9]'⃬k#3 *浦j ˓a8sgU/V0DNGtc6U8|e5-Np/c,=:0 /*#\$<*]13eR'P\aqR$ E+RqvjEd 'P4zK(m1" &J=N2~mV%l_l3F)tUHTN8xu0f5hWPh:"ǽx.瀐įҮ($ ۛshz;9w:YcvaB:q"Я qa&rE[;έP:1p4sFrJ?:Qa ͟"y|Zʡ7?Cx' Q\Ow}U(R`0fWȅy ޗ'8=gd*6c lغSi@m:IokPk^R[&ϸ)t&ҡ].clv㰜l '=\)\0"A *B#~$R2#'h Al_jp[byB"gҁ'E0o )/MhJ|ZzoTNBd&gWC YS^ŮyhbyӣS͏%"}):m/|q#y+9.ʥx.''HbO|!V>{e~0,@TH zxV c!"'VlKdTpׅdqEn=-&,dvsHo=!=׆`hBov- \c6Y6N6@ eџ (XaB7qr\؅KT>c>~Ҟ'g@B`=%E2H5ji3H- uxl*j{UW=7]}Yn#cjrC@$25Ӕ~1xqI}2;3PFm!F ]5d@+(YD4W9ԉ_/TEM*ICrl#^14&L!eiar^z("4ܔ6ڕٶރząc'58GRsꃨua|rR2 (s@Sl.r*lu&'Q.^ª%yQr̴Q2E n%odL=P+-V{H*& P0Cmmrql.a1D~֛g[ c`HHqOfь؅J/ͲEtB "1O/*Q?ܰuC" ?Њ3n| +;:}<(,IsLjHm[};EjV#ڨF Гt İ/>f!+egE(vMw MѾo$SyyBTq;j7ӯǯ :tAVs7tHmp`$iVkNs};[g {OwBYo`^ ?9 մE8Fw s 5Ȍ嘸AjfbTY:p/3m\ 2G(L1X J}|18qn6~Y[9{z Dmna/F6ELvWG3[QYk(q c$/|J_w#dMRrA;R / C=i8PmZ<Է, d49҉ ^΂%վn te|3CZjӆґ7kA7zX A_߾D+ŪnSu. jFgl;5![5ZDK8DC#Y)aZFx}}IL@\DwJXX8N { ~ST1e@6`߈0yu)Fe1_͔$jQ0nrGХ,0~VY_f0&`79ĭ$(&T^ JMоri ջ(z~Cl1ɷFBc^dzѝ HwȚ:^CKBbݍlw1J!PxQM4Ϟ2SLcmN[${_tB#P +`y4C*[D>q$F??(2!~LҒlhY~Wǹfssg֥ax a%#^h̎/͖+IQ[6P1|HB+m5'C& Sf%o߰/~^H{唺}p'9<:aF}P{$*Bِܻ!y}0<;(` J߼`3OŮ+SjZrW(v=kG ݇aן1{P($QՀ_]F{\}>З&#VdgPcSBw`(@`N6^ǿ49P҅u[# 1HAS4.' ?Yb7ɈK : hʪSy{~: `vNs;CQ =Cȯ qʚ8iTVy{nh Fk|ST+&Lׁ&@&n NuzB1~lQn7>w#=5՘O1׫z=Za]u`jzx׉6_$L"3KսFc$`&bQpGsAK' KFd4BkN *UWUpCQ,1ͽ}bܰ(cBnjGș'Mԁ5_Dec)~>ks_z펟e tAT9Cj]I !̓@\Zۉ`\ݖ1Ҿu0ϲAJ|62$>h#TT_I%Aq%FEl?ʸ);FanP3C l^z"H>5Gp61=P sdv!Eۙ""$ _ ueZ1>]E TL *V2\уS.'EU < "v'J !ا6_5OJ|΃jRi5/-p* KNGm:PkX+I<8O\:䦩'R Y2$T1Nmni&cI_)\3slGbwQ7mV :~R>))5k ȱřGUܛ^z-bӸ3<=XMggiǧNˇi4u I #R4TmT:{|D@MGb6DME U0u#a~3}w(yL@}z Q4yeaM܈IH\7GHi# p:p|8sB/n̎Ž&0unQC?f^-(kFr581SP55ge Nyo#,۞V[1j/`z4#q^HD p\B"Gǔެ#<k(/4րhK1ϒtnu(x8 pZ8"@+)mQҠ/U7?ԥHiM y_ .SC-K\Cs#XwØʕ=1@{ K#Hy*6X. +1&XJ#”˶W.uGT 9AG%%B JGEh[D`;WЯb'6 Oy?)}W3d`?PULwXT!rIl%SЉ{zطZw "h ѷ+uȗLSw'RWGE Xam] c ځ8>H PgTELmqb98cn}gxwa2ʧw'E,c99Yź40?ywz:p#ؕޗtݰC !>uMŎ%M`o1O- <΋yCF4#e.#΅MACa_sݦI' ӂb~mu? 8Dq\0#4X>Pt~0.AA>U(,N!#Ċc=Xj[rw:9&YӱQcewJr)%QE,(+Y7=ªLH‹stA.&t).1\I!g$,f3ǧtf54 G>|{u7!x _M[(GUӳ7uxst$[a fxZW)Kr^qfݼ'@ `a\}TWe^?;*fE xx7Gz-*5 1U"'2Lf8pnAҳBP*P> [﯍Z@8ݒ,YLE;;iJDr%[đbᐷ 5 tv~oͧ Yָ܊$@V=-88F`|͡ A bE> _$|#bCq6- =ve^Q\ݹ󂼘sbgK59:H`C E2m!7f9g o-HG~m0NL:HmXy8Ln# ZԂ$KN C>R:XO6ö 7"ؙܟcV ~/_?͚̜ ~w-j.#):e)<;15iui_ 0'OSWe'`|f{ &[r+ꚴ}5GbqeV 3H=4*G)? H7)v z+'LȝZ{5?e,s\ due$\n.Iu&п'iyG^̧h2MU~]X . /eaD;I2x>#U  .U Oι7W`Ϛ`fafFQR9[.:{^Wv;s>X>|w8>+g@q0FMe]L20<A.qs6#Nj[$q=}•(Px9޽"VIW@W6.ZM !l+aZ/@E:<[fo9+-f J6<H'a`nIC9y\J}? kw^ AspaAuV|;:|ó UuM4"Oޯ,1܈UߋM ٩ .+@V!»i[6BJ8X~c #vKv z$Z癹q={ گ.OϏIMmy:xqd%.bӒ%_"ݸ)zh ";x @&SqAL<#l7Re H{W`)43k+sOl)26d8zrl`a*u9)q쫊PfS h5ӓ#l+ *El}%Ē7&:ǍMqX'v _O3`GqOO4GfC|7X1Ea켍xz½M\mxz+eL\LXԽ˴\APd u $#E!(^ktx~B+ +[@Fè];A Pt;0;WY y>U Q!~&nݿ(.mYT$lµ4zէ@?˕e̶`p<5{1g!XXQp%P9Чu46 L\qsQȿڨH*ȿ=܎mW]Uh;+}^4"lJ:R~tN.>|UUMǫ1ԑvfkBU{+%MߘJ%$꾘[G 1l5RS.ja篐>ouj㞟Q  ) ~ә<,Y3ӂg/9ɂWޮ Bl״pXs@@ VU @_sڭwy?C.2-v͛ц=ŋ܅{҄LZU]oKzw~RÜDa_nLu ЂX#%k+ mX4IW\ynZֻ%گU9ǺrW\o/lU"w&"$BE fJ f{zl+D";┋zRkt]-$aooxQ̇ M=jח4Ζ]KNB6r8W |BK% j ^,xS,[NS}^ֺ4't}`JF-2?%ݿ !TZQɂ]D;?X2:aO-ʟֹϸpJJ,Vj`Cގ/ b'v,{q4/T&~)W P~<qf.!=W]s}:>/4EL.gؖqH>б|/"SH23X1-< kĹ;2W0O#+f WJ(L@\儞W* T=IfئEgtw<~c8e.4 i4 &?b[M@`:UOJN xڃdvJW<в/(#fqHGWAod.KJ2Ti= zL(|t]Ȯy0K3}rMoS#,Vf< B̀s֎Ąn~=^(AFZf" jI b ^`25p:o2NgEF.8@#>Q˲FTh؛)@Fdcۀ_Aڍ> /XbGvCY&'YJZF2t?ƁI R 2FJSVl&ʓ ̦M*ŕ ێ*-DƗ|tyM#ֱ$ęs$iaiFų:K&'PoJ ~.{+x&/۴јly^<򺵙TMN,eva~h~ v;TwbopXC#6q9|rھ(9%ɆXXe#9¸Q,HEJDK<ޒyR>I^BԂ4T@|A6:x& "g%ٿ|Jj+'WHjw+ zR?J|Bx3{'h ӂhLWTykuB;s߀cg,Oa~j۳k\X(i2slpkQN,_i`xkzk{-<)t7hAA.`4J-&Lfl^(W^@eZv~$ a0ḙ-Q0bnsu쾁JoDlHgUd%;^PIn$vluixdO9MMȾF6}il`'F:V${zWnb~oJO {^pCnm啳o果-8{0*a }U6LH3E'{9qBnq4FcMIЮumaơoy&:[LͮgkLahpWDƝbxԱcdI46CIiżܮ ޔYLx&J f1]iu-̐LA-n8d<#Ӯu㊧74Oo}sY2xU!ZQŵSm3ro`Μ%RKsk6vC\bw+0 X4E,TXdfG Sqh`5VhC ̔KTQR9ژ3 6apmBl ]'9 Z~ mbͥ+xAX$qkq>a^G%GUS)%8)R0d"JK)PZOx]'5J"Qp6$L-W;ԟ{&PIƨlk&ȸl!`(L xOmW x) S;c!2iM'K_;)>gT6XO1mzBF9w^Z'Βt L 4A*JE czT{}=U.\moYABOyMXp,`5FfK3xQz%x83_׃Ȓ-Q @˭V/ߙƩ]^3jj(%k8LMW8vTA,MӺQsV%k@vO\}1j ?Ө2?T=f=;( 4OtP:Ero;z>8 !lAorźs`1Ř;)9RJSw7>Y-Qd5T P6eT\gIl;WQנ9$!4P\s2pW＝W T+XxDBryg!X Pad6EHbvi!-RKAM[@:^2ݢzV ݴ`ג)p~x!TI-ܾZ>ֺ)7I[ԫCn>!P)pEdE6 (HXK-?'+iV-e\}2M!8!tЍ`~M̖kc# wMAʶvhb`Agn#SbXMʾ>uAH̵I)ajrI jEps0W*e )"dwJUܓ=/GD?'KhPlv6+f9!Tgs\قn dQS0خZ5l2;b,z6ỳGmX @m8!̣TazX5o~DXF { S*j7(y$Gj˺qgm싏KvML ).g9 <:bqdL<9"yFׅ+ 4< 4Z! UBg ;c=TDaŚ}gn&EfO8WZC$SBOa:~ }MrȨw.|?Y5'BgDo\Xf {A0%<>0JCoޔ`΍ IENA 3 3"bp]_~҆_ 'uH֘<*bMPa^_@#&ʧv0I aEaG.sR߬@9*sI[|:1.|ɄIaU``ryq3$BM+gf^fKa<5>cؕo_+?QxL\"VxLU-P=%0(<,/! yJl-zTy#8Y  S2ųmF۶E5tGWT߃8(,GvtSj}`H6ͽ"BYIkj5;ǩ| ;J L/XZSLoKauEwzMxJgp,RCwA5/2vGS<3KZH<1_5| 9ϽH^bU$dW#{KI^w;.cEy W=5MV`Fx m{4U@ g,ˬ22 tU*GS=c+ n^t ](d“_"=կjI-=33 ,4xJ:.nTp j#o/c"kMM#֋zV8~?2͒Ц&n'qRHh;p {^Z*(5%"gH4KM ֙:ڕI03hśi/RCH,*4],dwi']vJfJ׻u_-Z5vf6a[&A!V5puۥFT^ j\ӵTzq< "#5+.mp|u8~hr l)> QJ9 'әZLb ;-|6GYưx1bOQnUKw&j)xJc1ﰍ&;T}$tx_^O}s2|ސ0bz^; 7a8_(5a&Z&fSHCC o== 6%*Z[%Q !t'3g i"@9YS4,AAf/6;'ݐjA(r a 7^/Y4zYf3kKCRAd!5\d:Ҵa9؆fn +ڨ*F>@jHHUH }Ջ^ ⳰ϋ{9u#L@-70PLw'(无y#T8 !}n#zCEONgԅ4 |C\>|TnQ<],~&r4:k\IA=ibMA/ӎ6)0;?-+ߏT`#Bbe֟ځ@߶6.4 pPLlV>H&,k+Ң}v8E+}?f3ϼ)iAmJ8|Q\\kE17k:vwhKFWTbFD2SAi쓮 hN$ɰpbغӄ/IܿR/@d3OqDJ#;[te+`Q'|L2NAdCR._-o㏝^Pmc ]0fUM1I>ti9v4ʍQR}~1U׼jh;VboytEz+f!]^+<^fV+䚥>d)Q&LF墢zJ{0zW;`k73*N'!J>-H'rM4(I`x\[E CH 5).7$Zww!>l^+`~x[$}nnͫĘHүp9{KV1vñQW0SV,`E?w4 ;CUL0=^*_[bG xM| gP*_:]`CfR-clBi-h7jDϏH+;)Q#j|j\ߒ],H1i01pW||"*kNy[+s0W`cS1 ,%_( U`&`eAOz&8iFādWNziFͫ(kb|5t"6vD r2,x0{kBDZqGq(f53)CwƝ7|QS Z42熵otQ5E)}3xvr1g ^aU:6ŞY;*N1˸' )!lye7sWfxkP\am)mފ&6Bj}_o43W&eWH%m` Lb#9:ݛ?F=r^*_gąSˆ)> ꮍzM+GJN%ѢBC@pOgi֡YBcCibTXYXuۂVM2րI=K{:XÃ/`! Z>dt%7DޜS_}]rQ!ql5ZiQ-qkc7d$,%}K4_i'!?|4ut$و(k8Y sAnV_LB,yO4 `U0ṳ~&"b xE+hپg$<6ZM`t'RXdPu; heT.Y }ܾ߸-! Z:ɞ :Ó3B삞.\z>"|CԔ/1n7#܃WDs3zdy7Y`MI0BvG1\cT3XʁMͺ65MiR°Ѯ7Z^6>M8B)#"hΩP̻wbV*Z4}D^ȈU}*#a֩^a|H@=O*5 sꊋVK鉌]j̃s(x]]'Yӹff#`K.z\'&ɂpzTt\w7x"D+{j#kmNL/Bٜn5V}gAt#/{ n聾vlXhPC}Ɩ5jG~SU?V5i"Zk asY9{9@<1,!&*#>II 8!-voƲVw\$@(5{a2_<A|0qҠ>uߔ3揑.⓬aDu559JT23 Ux@W_]rAk5< B{xDNNk"dǑoDK(ͧ=\-K5 -f h|d92؝<*O^2ؕ/6K}*x$1n(J xX8>uj<*5 1hY ]h6P$ _q \5mN I+-UddZ@-(k-[\r>qvNX&\8d$.׆%R0/4b$HPfvFo^TAʿ-۪+J3 1!b +ں~kY"?Gђ҆=ͧټ yRKT6&/"5 gS%vڗ et/$EW *ET>`S!"ԕ}is&%T.>O6M?4C$e4L":ǹr4e|DBub0rc8嘇cPe">X5OFncan>QˬP׿?۳ԑ٦:v4PBH`|=\7@ Rtb}@WNcAƆnRQ0O.} S}p,+1oMlĹQD=ϒAuURTzjX!T ,9S|Ęb"ndەnF~٢迤OGK 8xw, _,ߙｍt Rsj/*>p[19XS""$՗cd" MlG%p3ggpw AkYȩaB3L%[r#gSrD:c_fMALsjX }ߨ78,_2萉~F@Ȩ:Mdٌ{cKy n>R([U3, )k A|m.ccmM2]kF$yOSe¥1b?W=U9lqM[˟N؎/niz7}ܻ([.'@l%LB7ĉwtt)7Y\v~1#b$>汪j;eWW܆s;y<6l_-' 4sXx+{ŏ8+/(AAń2w2¡.kZ]*8F~aXhn[902+I<| Of}Hox1ٞzgwr{N8DvWCIiP Hk}n>M}4z R{> CILx{^o-N<|L(S۷YSh=nHvkDTlN"ۄdPBkNh__viVqⳈ1K_@L oj!gB>m"@Vcl.qOO< xZn;9 ZP;(> u|f.Wmt1h|)kģxQ(mϨeu*3m_|)/906_0 1Ua@AB:ň"5|M1)_`&SL_x&]vV7`E{;j(^n{8B} P9ՖmX?J`*Q} Iw"2*}Pq%?ġH^*7s2%³Kڐʜl<گUl^W e zbkSw-kş/ $eÖLfG"'>BohŒR c%p:ݕ1sf=( !MȇP?TE64^:ǃ4иПVDra6=%\b4"x搬`xzUE(\ʇv!b,EnJEMDdnDHw3A1):!;.'xҭ<% y,yN£FH`bƞˬӞ -FzaĜi㰫 m 1OB7@I=9ێD.!ynqc h:2v gs?;-GԲbH`Kn`WMW!RBl_4c Y!&=%?ڐHE@,%zH4M֎]QJk}WY)Pj NOϵbtM&|@#Oe*:5DC&BʬjQ͙F-t\4,KIHErM~/1$ctQ~MZHH= у^K-+ɐi'`I;ܑZ MVŊE7cjSbk@$%&`~z_A(sd`HJU1%#)ZnW8)TX T_QOH[+Wh$ !; [I 6Na A7`VLex%]Z&m<⸉42$3LbXo -Sb&@f?8.j? /te.ZI3LhhHZa*P=@oaIhfrUAM@8Anr 'nlb=dl7T E(>Wo+_-" Q{eۣNiB7Ea5?pn܂ǧ&(ҍ_ v֯1?+G$v!'a^zC{DAg 1Vs_Ri{/_@ݱ 3&~hpRPm# t|c(j ,S$kTHÎNm#2 {(#JK ^ҪGr݆ZM}t1ŲCG):BM(L,]+rE[ܑѣfdQ$1 q~4d(0~%U&!3D?kt=_gRB2Vo3o<V>.SO6q|1EÆƚ|v7xTFJczXuⶀ,!:a[ȿ7*;` i%5~gYoJrS;Yo;Etr,`8ٸT<_PY<+m*4x VFY\8 %!^%u@]v\ s 2TE0wNk=}'q%aW#*.8NQ:>!I,調56z[cut1E=}IQ$O/4 ^]=GM )VݑJٴ.yɿ neq])o .k? [}S$O{nY Fj*0k :T+R}}sOYkFx&ٿiVs=k(Ğ0bљ`/JkŃT:wsPhUqfFa$v>nQ4_b z7D+Kޯ",lkaiCfYn'p4:~dgyr̔𾦉$KiA,؀ 3}1/3u{"(] d=6Zo# "E#0K /UD4Wzk?'O")IJa/\nau:R*0NÚ:GZ8㓞{+ 0n~~Q]^e>P`?VHDq9R㡔:}XpD/<؜NR baPp B/`[QWc<bv% h+'G >e0WjרV`ˆ  O$9䨼eVe.6اE!T`e,P3-*Qw3G}{qqK M7:TS`wNL < BZ 2K4~zCz PٳʳLD/(Uxkt>dj^)Sɝ{4nEѷyN `֮%7\V7>:nn['2x }0E2փHO\M@Y4lVv F^"LpqX*-@osq ٶ%jSϦ̇qTW_Zb]Q^6c0. ƙXjIoʧ@Y%$N Eꄽ9&pT'tY;LCcꤟKm ^1.W&ZмQ'F2ޜP|/d?XiWaKZ2_-uHc:%t:*`ln#_* ^lnz,\^DŽnOz+]{dMH$/yt;aR s{GGh~j:E=UKrqNs>s<A22V hH6gT &3cS{m5>!Nr%4'wVҥǃx3?&f~pM\PqW]0q;\^*k@X| ѴOXmEFB5LGjª [vtqn۹rۂ% }8S8f0}y~h>!(O\,rS1pBVl=Jb\sF-qu:L^C uGGu=adGTj+;{w?ogiB i>)Tcr î<eM'OȉqrW=zzO!CJl(\ι,n}xBS7pcq:9Ა]ʤgER9L UńEh#E Ւ&x\)2 /7Q'W='A31VF V4ְ %- LiHa 0닊Ӊ 3zy  Ԫ\뎿=DR^/2v%'I_\\]Yc7i|@D0ɿ[-k[^;gZ>N08`d,@{zK*Pdt>s{$l}~D*`=CNS٢\7SzY.&&-&Q 6c<݃r5F)faWV} }c3dE5ەڸF*&èY9&$Y@|KZ ?YtIMW>v}˗+Qx MOqFCI#tM8p@P۳H_\h|ӵ(ڡ8 ـでgPT֨uGk%w,zZ4=fh4efBz.h&-mU{) m|\sr-jxQ7VȔ .{͗\ڸ@k`:4NP;Ԩbe:(aH2 H{t P*j'>hĪ! m {k!n&a$ ˈn"Dd@ ߠAPE}C zGr/0Ye< 0!׬絧#w.xREli~Rl[1+QdOErשğ:%9A(?DaU_wW^"P~3㾮M=~H諘Q>꼄_@jQأ g 1{ylv jf0y\\ַsT xN S#;ƍ6q ^u5E5`C}M8[+/NΉ63Hg3[P6F_AE|FX8Q/. KRnLkz #P0`h1"U ,\&m*C=؇GZzqvllEh{캆YA:J"0vp-nhȩGI#{p p 6s͗rͦJ49[ /m'50U7}žv]ObD8dAd1mZMKO܅x5EqjnKNL,A +cJ/I:Uogl}WH=6KS}'-Gvwp)d=~S"I {+N`-}h<ӕ>>aWFt N\Y\t0|#xףV>"2]h=s?dƍk_~*B:\S]t Mꦥ#d7!ֈķTS10U]:YjQž)np>;[{֦_)׳(/ #`QxNS&0€s;UmǖlBPQoM8&y -Y#veDN+o*n._rDK  WCڒ0p]}B"hfu)G,|ޚY%|ɶ  Jfo|t12T:)p,CғVZ7^*DyZ*Q_9z6k)|z%ソ^,Nym1ЧyY)Ѐ(•A4_!B~=027S1"8e)|m(uT | U!vU;T8-g): kv,c`w$AQX@M= Fྣ2q!vRP+)R: ÌA-IU&iPwr$%dm3?+J|_-W&}Cv|ހ^t)|&,dmI1&m!ҩϑbq7"P*-I嚄J0sQ6ni|XvD AڇhjC3-}NL&"U\xΚi=`<${iD:XKlnu@{.wꦬTn%`a2@a_mf<Ѓj Hmy2VB|}rpӡlu}8FB4Z$~9lǨ;IX?^)D%ODO215OMi(2=Mj]$ wU"ܼ+*-*.1ɣaqT"zYlM<@c10N S 64l'zˁ4@J'}񧇏1K4 {[@)f9*rCMV*C4|Mդ^]ӭNx%Rj`Cdž WzdI'{0O-R~x趡` O'A@2} ƒMvK*xJӳ"l;;HF xȤdE&~r6 C&$zzCs/?䀜!YlOgELDo>"sR+/AOHW^ $i^4ݽ]Dy꾷a\FS"OmvoHÛYB;^D;חS{<)niC7A>HDقt53hv(5ͬF 2Nj|2e(?B|yծ)?BN4KRJigԞFf#\T*& ]+ϊ߶uS ۧ{->ĤiãKQS'ŵhqge^`QTOT9 V'u`'󴺝sF~[CBЯ 8 [WCzv7[ =[ vtN}J:]EM%?:@)j9G?[ ,]V\yпd}SƑ-֋[(&wDOb {a.YU!@~bXɡĄ2lE74*FI7pgBpY틝~ҍY?Ph-#pCc;cR|6.y߇*[mN:ImeMВchR=/s w[ѵ0Am y)q8.|nd2HlD ,SH5< }M cOAv!ZRׯXaHqm YzA2ܲزEK\97{퐋eo*B$IctOx?G,)zF4K]36j40;`5gDfX{=CN[Xn|F(si鿦57lPV`&H9GЊ[2-"ڍ#H |{&ۣm3ߨtKc( =: $VǞF,r'oW.Y]ΏCv.ҕ[]_L7ϻ-8_ >nl4;R{L ܫGKuI*RͺS# tU=n8,\.иkȟ3o6@ZZw#jNx k衐af PJ^(aʩI4}ʜHn #WX8QI,M^V-Z9AY>;jVq!˓6,S4njkT1w8ư$ Yu3OyKzNꃘٻ( WKďQGtyjQgi;8 `\el ~^p!qRaT΋nZ ^Ecޥ[/)?߼m_U/RbyJ\8\:~a`y(ԭΝpq&>',C2[qɗj2ӆ=$& Můf91n{dMY |'Mbu xG̓>3Z-uwrώ|Ndnu io9/Y^<ȱ!ۮ*M\ECF(NE =-|`n2~ZD̹<t V 8!oedWT{0=՞e^mO!_9\kb^_:2dnELuf#8qZ pglp57CX3u벼H6]2Ѵ.S1Ƙe5wa#[( {'ؔ>JשBRvYr;}VcSjQڣ:g75Q07]Ek dey4 Zuc1."2 [,Οi~9,p`ļH1hD'Ь)E7S޾~ԝ'kuE@ܺT4ea-سR|Ct(A+![ is*aiDqWkSQMTT7Kag%lquOaLіа'Ŷ E&lT5Gv惷͖xdSVGX>FA- ^NIG#pmv 1>;B!]&^>Qn'@u3#O u|IHeӂ<kxZo斉$gqLQ y ̩Dwo8cF<_ d(ku pK`[ J%K^XaҫAGMɬJ[JdRgxGXL @BѠ, 1w#S;G^-XIZ@dFwa7`bO$U&l˞/![$ƖvW"A*T!rd͛ZnH !}7TJ$@v=pDy yrm5AZ9(WHS}BN42 iyf-iZ<9" ㉴vGC4E;R#HΜTdt*\ʆ(wcGzX{=@A]VNԌsU֛jM(Ը%MI6%PW7[؜ѥ\; /o 0R7.$a ,za@`^QD}.fS'#)ߤAl,0!<9pcN-q&']lz24ò߫$̺܅v_Q̞6mPҢǣA*̸imUGMPa!&s2?= P"KelTf+ĝ {aIyyAONC{m 5artsȬ5p]B2Q<{O+= 9{Hܝ6֣iwK]G b%,^5-=ͻYeHi 2Ӄ򳑓Ri뙽d>(@?wrෛpS^'eY@jsx%(t@,I' Ļr9c1nU Ǔ}Ga Řrl2*]%݁%jh~_&` zUQ/n@X\`|{ 57TUeic%OԲMvHNch,"ӝ뢽 Ng>ҡ~<Y::Z2'gRsAa>o|z[CtanQӎ:R ]ZHص3%(ݭJKܷ&B |QhY,7&]T4V¥:aJ-YR{ȎBD S/U(%9lظJ^j#b)uNp Ҩ\. Y~̇]A`*!s4z}|ł CpHiHRT$~K"? 4Dkٞ(2  -(#ho>g~eq Mtm DH]r\14 RQ;=ZBq1~w"~ՈlGS^oW3s8d@L*e]Ĺ" rȴ~100ߣ;.͗a$nO;":3F q]v> Ѐˏ{5cSFeeQ3B^ X٠3dt5e5Gȁˮ7 bt<8 S5Miq佫A=SE8dY'HKA,g\pQo_F;D N hL$–s "ė,2籕;_xjx%gV@h1zx¸dNѕo8X~Wc`O ER,=DgVcQhv8ySX{!nzazգŎ8n 1ÿsZ 'vpZ"r+[T퓆qDt %@(s{ŒIpkŏ\MZY_&ORk3 QEB c_t{5|m9TʑJAݍ@UrJ#!4Bu+u)HYer1Y+m?4=|,cn_1pXU$ێWX mxBc0 z#ĜygjU%0ҁ yq\²e6>OZbD.9ǿ!E@d7.Z+[ԩ},` g=8Z|($zrn 6 +)02!9@ \ .ݕ2tf Wϵt]6=&@ŕCu=p/vB'1z՗Vy:meq߶/˪BkݵӮ:| mW A)W1A$ |YޕHE5Iy^:CH҇0n0gDG [J9"jD w{ :_J-㷰2G A4xk3wqN/9ҨgKb<=lƍ˅tt(cB{jN56IpȤZpW̆T0o*~Tp,\ ,jOh$qsK' D6Qj`'LE/h*]."4%Y!0ip7np"|-LdB9½[g/փA$L41 qoST_ ?`0extM*@ET Tiu?kY_F7g1"_9'+7 *L#P+K: X|p E6EP@̠bK蹫=y%j'LU]ء}0;H] NuUaU+!yLF2!4Jcľ9-y:b0o\@!c+բQBg}c[ V R3z o!3Hy*c;_F)|Of7k:v9::HK]tv|ֲfS^s2 +]Z߾b%to-yP(sO&8( GrfXU ݚŊ窦l"<N.92#Zz?k b5] p!S;mc!6#Hm=*iomF;Wʏ]vi ` Fut0+?eIЅl@7q06y/ɗm=O>:J4g!O\bwYpվ"~t<ɃP fy} $V@ (Ki]r?c G-m.x#0Ǧx w7ﲀ'a>5Qޔiz6ϲ0UJ/c3pgNJ$DRh|ZG Hhљoj"k)D c7y\XBgQ 8_`0%k0o@[OE&R {S_jz6Wtw|Óo\H DՂUڻve^d-O:G-B'{GdX:ek,tǭ4fؤHbͱC'* 8f=Ѩ_$"Y髌H-.:Wֵ~ Xprw;_ƨ:m_ rA}3#50QiE7@iPs'r5lqa҈!$ޚ&|y28M^W i.~?'!?!~|9vJű-<f:+qE9 SCjgfd8{e/4V*{Q,n,J.X=1wtL4%R(/^1c=uϰ$n}b~ a_b-1m-FwpzTcL/Rd&̤%GdFV5ϴ0Qݼq/6L$R,+[_0t\0nv}Ȃś1ShcH@qr2cG# p}U06[%qR/|RHG@ƽ \(YG]dD LyNw4rq.g$ x!JqN0rk]cs #pEׇ @;_XvFȻ>& hKHoqJтv3ӔvD¨:; 4`xPNOb/g{b33y'WQFBX'Eu sGUd\o Q2&-ao i 4^R:`G$}+٧G6>:GMQd@~ vnq6ďσ,J4Ȝ04>W;(?gǠCp-[W{la`P_x&e= ^!_ΐV \D@$wqFHN"T(P4c:E]S:?Ai/J JטKO5<.P`0α5-J*”WbD~[^Y!"f欦~<^߭oiΟD_aNvhZNMV{w uzhvQ|Yj:A.Z_ʛ6G&'E}Vt}w`%m)@&ܜnժ#f/$ BdDǂ8)>$К8+4+$AOC'"W˽7YVǟo| pڅBo2~j.r`eq1B+5M^f]b!U<VMk U\LjmhڤeW7#ۨz͐QbʾwyFޥ3'3-j- ?YSeO}`>uM^L;N{$e͟u](8}#1KW[9;ܦf*Fc3VlXi\ЂKۏ |fy[G-_+dvX&҅ ЊCGVb wu CDd Y1T < cU&FB@'/eD sɶR8wf)d?Bfr!F9mR ك:R ;5Io0Mzu̐\VۋT 0 V*?h:M8!Z}tzd-zDt@e! jjsx\grz[! t=BØqGP8fӧq;bq'G?&MۻtiD1zwgqobX_ +OIQ*(3{߿>ah$ȓDwH\UI\ɃI$jbsC`fY+y(4xE/Q |iMYDիnٍ±mrK#B\݆)_WiKV"p ުLLe@Rm_iWċwy?q[-VTsgMKX+~E$>QK0|0ie&1tiK)E( h|nn3Ӳ؆Gq =rvX6=QmERտ{9 Oʾ[K "Ʉ1ĀC8G#!ՋcZhwYN`~ju򊮮 'GiU'ns!W }z z}?t|ͻlNj7sq ^\Ч ׅH7"̂uibal#Քg`LN}kʱ`zMWQ{ߊw~ pr,`ÝpK;+tcr&XI;+ژ9aȠ\͗^aDyPS_ZUBLHwI:/U S? ^{Tl#, F-ǖdj?z&f;bAn+YMXD.k2 !n'zf&0kWcy÷‰F} e J^FwGSS130׃#a3ʁAkfmj:n%lYUl [Djpc7?4X23m:PVaMү$!wx˒wAH vW"< k9(]/CV0Ӷ!K(dV=MI97r]4]MH$ٛEL_B_&;'ʩu3(1].K>poΕ>:W[%)FIQxf%`WP]⍂v8ܴfl)N"'kv'xOX=3@˱E6æT=^C{z䘂y2;0d1]Yq'Y GbtDf[mﴱRZV'rq<5qGhaqJ}q"cX!Mv?_r&k& \V&wp7GSdQ }Mq\XۂN9&-{у eV_,ו%MP}(M2E8/YAz~to>/08t@I+E]I'7#]cTtk)@*҈`j)\q@Z( Z8;"MH@$3c˿dE/Zs4|"&$՘\49;T`e{d\,MVNqZc`~zQ%j.RVB#6k*w;:Ǔm 1;ܢGGt}EAhQp\7[m!rHHw¤߷IR,oz+:l躽@zmt4YӞ؂;cw"x3w/Q:UAl^Cd +SQp^ݡՌ*JYnbLB&d3sDuڂ!#֧NjxE~4(M ޲S%r.2ooUDYcZhV]Qr{^,ai7Su%v{5nq}hP;|HMgb㘬Q/=((_$ :q/F= x  98tv˃x j( =YES haO*%an;#t& saT"45J H֬>fP6^7Muҳk,Dmsb fH3'RϐN Y CS|í8t^}MJM[AJC|ufg ȴ6 nZf*g[l>7D/R=#,%,[:O(@{]rU:& 1_#}"LH3wiG1<)_0G|eVSwjVV%-$&mۮt6yCng ^-'eiٳA:@$xLloѦOOwٻx{3D1etB Ŕ F@'(6 X~Zzy Dl^Y3p1]?&akBD5ȭZz2tph\&9CkO+XGҸsPw[F/%ibKQiKHJ!o)_ u93FIa}25%ڡu]or^o< Vgp&8 +-PpUq} #:Sw|L^['f {)NRcb^^=J^ƀ;aj m=ӅE(9ZsL^|0NmFeU2y3hxYzNZ[Q8F3,U  P - $|@|d!?_8o8aV"{hϜ'٫ fO' ^4'è9xz)ϻbO Sne rj nEo(!Zm"FɕmMھy ɕɅ2Z8^\Ull%e^a~Xry2*m1u5K @yx-!m^4\t/|xOt?2vY8G^\ԫ_s'AS!"Y+dNn@SIQ8{\.S% jQP Ep&L&$xJb5I@v%}S;xtlƻ~fTU&O}<Rً.$\[p"=vq hm2f4̪Bɯs=4F)*3嬍w 9Hx.2k_Z%jLzHl>/(>4?mjE\-#m=-)jDpM0Ba8ҕ@FXv.pnE?II}K-#@mZo.n(EcFӓd|,g.P˧O%I(\UanWlbd%QyNj M U5ArdZ5i)VqMPYs)5ɨsk[=#)Hf۰+H RnRF/^.t:"G8ea,?.(ۭ::?ld4΋Әl+ȁvo<~9e3H_[ktap7 {RAȞCOvhΎ=bz[ԍoSVp-)P[o*Y1x JYG=(t0N9<*2"56Art\xe究EGgY<ԏɉYsXCAo[ D>#/A8MNX2buCaȿ,0 -} o!}|O1ay;>Det- vmIe/Dy@Ce{CuE2~R䚖W 0W_{PƑ8"ZuQ\-M60g5\'b=Gno{i[!?H#D^nd&#6e*'U|pIp@%# ӻA*+F=t"b~ȧmD>7"[x8$߱)dery\A^g"㱗6׷;H]H,?مۉYS Qkg* vgN_K17c&:I0q)jʹohմ%FvN[9s$.`ZA9m[lA啶*gggM}|UH_ ,J=xƁGA#n ;7Q]o%y)^Ӂ%xZH kxiv1FKX~I=qOUZhlzS@1j8DV##lN4 Iz&ӼbI~(i/^ϱSm|tE){nCZ까v!$%@}K3rY:S|6eFҁ[QDHOj*"|j]PXS zvB"Ů2Hl]}DXVA b w?΅l#?!XV6-!Zn1R.wB3wt(gSǎ!L2f3AÅt>ލ86xaXAA~7\= P:eavu6d+x\8vmKx;2L*1$I}ܾ& 7lP" ,p%^{V'fD iqaz]iio, KmzR"ҙQ$dB8IyInY0ge`x⢄(Cm,|"~5ڼ.I(diܷB<1JaS19c\O/΄8 S6z.l:3Q+q Ί_B%wso_sԶW{2-ܣz/_3q2҂k5 ( IGNl|a\;Ĺ8m5$(9 ?+y7)} q3GںbSThr^cZκOwjɝGb)%'9C̳ܨqNrҤ('$a"a|7Ъc4`+F,FͽḨ6pobs~M8]||'d^TA:n0=-DOݓ&u:BùaŃfyJEn:ZWm daJuk`,~殉0{{AǠVb+uҮTakf-U:4\L+P= ï! NMp|Gł*F*7ap'T BHŒXX)|@5{}R|i^vK/ 'KVJV0.s}NЖU^6:5CV%0 m-Bׂa=N~Aդv G#6Y=Q8kUl{ܒl4]pyoVx9h!WMmUxƘ0mk*E٫~ڐN6ؙ Ɏv2sC;{{eɰd1\'S1-A1 ?Z XK1D9ݴ]OJFVA;k~ ikA漒Y%ui3ߨ WMcjҶ kqe}'@e'FaV{9RajCK?RDnKʄA`jx8cbB]PچAG+HhR@b,-bQsd09|nPQ\[[s<y~u?µbg}.qcoԇp ,\tJwJi co4xvH:\ 6//UMS1L>.+N\g"nI~lEM話\s{sNt'ck&s_R PCo84{GiJRÖ Km'J@s4'QB {r' |HFg CMlVpdzqa?(Un %bÕ$P)=F\:>GjH^CMc&i_:GӑJKy|Smd >`[D™0Zf;N|Fxt엌bV;1sGq&y a  Q|/:Հr^ۃdq5A'VH[v+?Db-W0A~xjR7(AƁsb"#("[N $?V6.d 4]L>R~B %Xfe:k^ \ћc$XEqG*WN45x֭;ek>UFfG~I}a;1v_&T Ghfl=˿bNGZew9r,btEQXuBƼY vz&m2%YUJ5 Ӳ^ĨfûtqzJtmI|Sò=}UE9] =@ yƥ5QZY.>7% P$H#[b+I_M )|%?_{f@ᦖ=Y׈s*5?+5q5.n?ݤt>cr"V0+aB0gB; uW?sN6VuN׷\4iy6 9H$ΪZ7\zѻb"vJ\ۖBJTt3$8c&RM{o۶WUJD? 'zhBJfꙮ?7':|v"lcX'd_٘mi$97UXˉES%E/ՁU :UE$wBi:0槄g07b^gݐ_!|O%oD,`艠G֚/zmC[ p@ɓZOҟ9?͘K dn,#XpCCڄ3u:?wSMxNncg3%Dc x,4!&S:̢/Yл)-h3M3DMW(Zs@Wb'2ɧ>sk-" _vQU\nAX>P\KAV]b z,_Y;+2@BQ/x$EsļU)#D3_YS. *9B"㰠cŽQF ?3֤ˎg݋?w4}z[ij *"/n,qg3+ ޜ6NQ]jȇxC/l8AJ$_|`OBnc1^A]μks? 5m(%: &{P}`M-W'U54K^M;} .4Y kD!uR]?gz~#kV'hJ>UjSD#fJ*1CL>x6 ^B5K7$-&&`-nwy \ 5n b~gY!gଽ~E"sJS2ʞ ]SdQ)dLibn_5a{~ P|G SvL8mjl">"Aɔ/$/ BK.#u]/K0YuE1)Βm!%Un=tE\:|LkkY@1o0)%]B$/^B¯Eٻvmئ ߇=A1R#() VŶxĩ_ҦI9/rע"4sUlfmlU]xDn,ly]X_jjhh$o+lxbOλxiMcoC3ێvZ^ȇ k!}qL% LCdSW@czB8x:]F1߽S~$_p6(!ߺfs,bCuߵxUoa޷H͐wPỵ cجLK@%%+rHy#96@n_H_%oF#;o/Eɿ&D˥?ړiY 뾕8O@a?28ޝO*XOl B^:AV)efQЫuH2;QUƓz4w,VWLWQ ۆ_g}AWKafx h]A{Zp*bN?wIʾwW༗Vso/gYZd[;e7ͷ°OhhaqOjV1!1CUNy"ȹ;5B;i̚ ^\s~1O_#a4lxj*:yV9S4kAxf=[&UK/xLlx6 bsdN; 2LC> {ѺOc4c}4.s3w^֒HKs=c\Z=6_Ӝ7#&XS{WY[UgnlwzDJ%I%q-\.j'tZʒ$/L,xXX^Ξh9nv5Б8[)vkծc$s}=|5Sw\WY}I|)֓W_gPM v Pƛ% }k_|m)>m80W1CTLj^6Ce%wC+e}$N__ Q%170pkEVشN*J[ L*3(Q6GĺELo >9|r^d=rxKcd UMS96RBw놡+s)X\ 7(bXPu`ԓTxLw5gFFə.Bq՘Q$DZrLN4i8衮DL -lU#)_κe`S9̓n7_KN^)y̒ؑ5 UmZ'JjG]5h"r/e4VۙU_,K9&~&YAyW p`ɏdι?$(K>[  \"$ȑ_Vfz:&g$TO ZP:(ũ6#/w"1^`׽};*mI>ivqzC72 0:Z4Á}̝HovUlabh,7EXM=%zTE?*f7C  UQ;VH.=y[ uEW׊lXOޛks놛j6P ٞpV ksƜl~8x.Q|k8[(T?@.bV~kCg=dsn`fq4t>L[0Z4Š"9??-QhYA=niqg=:ʿu4g33*ڄGGJ]9&Є)șk̆ ч֜1!+߂ GUC1N#4Ƀ:Xa$ :&+>*h߯"q3As3e4gWj«E j|C|ɺRupet)!frpB1kG#G>7o)cO0|J'dM~S^_"ͳs;N]q_ًF2&gk][\Zo*BX7hM .5H\gHor7+7QZzdаZıLE՗T]v7T UТ}po(;bޔ0b{e!5W3zYVCEBrLess]^`s MZ,WQ>Ua=u}ޏMbQwӹoېޔY6!勺@K>Jt0hO!pu=M2ɎaJ`7ZbI;]BQ4¬3s<{S] cʳy5//I%]"I8o+!w1o)͸)Jj6ܴ+`pBWbЖÂewס9ƵBJ^ӕ$ѹ1d#nW.`Œ0՞F[t_=4&kRFs\ܒ38{$L̆(zivI731;Z00抜(JeRA;AV K?J#P@~G "ʇCj Q{}w@65u]2%p?sW Ďo v wE=ŕ`tގ_w0(ˠc 썐VN]2mŵvK:'<N<9WȴB[GNb_>$}.6mH@u7̫RYbW$|oyp* 0FEP,H< Ie!`xExw=?;?2@Dw&Uzg{IiaGS뇔K݋Q?*t!*2HjȚ2Gt ZB&#ULf!fDJ'YJe:sFB<! g7=2KH‘\| tk^;Rw^N-EGeA9AӘo.JkDX!~# D,jJ4K["1RYy`q?JTA=`,YeV^*df g8IXNuw2Nc[+\5d̚hbb|f#:z C a>bw:A{I-' MC6۫yPT'ϑEu1GK?Vt!6obQڸGQpZƦ -Q(~l%93OD-cDzM![yNu:xRXֵFP1ml=mjA(13IʲmSX B"88v1t>OA]Gkϸ."7zt˰ z@.hMRCCÎj9.qP &'4r_YYGv_P$cܑXݒYZ/|0z8cZc5pZt¸Aa\I+AEo)Cpx&%t. d*svRq EߛɅp-$=3iSIE 38FaBb{ا T^ݳvI"v6]lYAf$7=+Տul5w?1:h$I62}|./\m7y5v)-'D#*Al̪wu BgqŪ(Nt@nsqN:Kx &/o5s J*_#خp kdrrT5aīa `H$GDV`O`Dʳ}~PK=aVlGY"H Hq4NQi4mč_`^)[i -;f̥kN ѻ>kX7֋O:֠u2 #٧Ic; (R 5\\eݿU{#ݾ'py"٧c޼kh!y TF Mkl.^A+>pX-q)rw.:h5{Dw %\BBvlR&:#A+فhUQԂYьSI{W_h\qE>GM4d} IduYF G>VPSaHV闔p=?ID"ߧxs fkNsUBzbV.rO12@fuЫ-F軵D.>d`!"GvCQ\4QuV x]JHLСNSB!ͶI|JXk0qd|%Lw5wcuf:"٨0JhL@tokEQZ_Ń;pU{ȿ(i+ c.hPə1 4eFW-B bљ^Y3H]Zų5۠m VħipNj7;KUMwoՏ VE-{^ԣ|A'4ّ&1),Ulzmn쵺#2"'&d--2Ho&r?q,ћkaA=̳ ;Ah +UzM q\r>IBHṴ!ޯj=8F'slWRL<(Q:&c7_S | 2?j> TCLZgJy) Vtϥ#;F>VnыN5C%j0,}ɺ I0ߵg֡յN ձwJVٟ#[ ga4kѶʊxF6j&;`ˋC]>=_lT BZnM;?R*\J ni'ppO+z07<[c]Q Ss/vȮLKtyd yOF[j#bybݼLϳF)r}\L6wc@CY~ [&yؐ*YI{F]ͰaOSxH-I3otĦ ^k45`tW?W4滑~tk_ci&_xIWN{&ōnc+(_`D\ n-'Y#ȻL<f zTm ?LGKf9\- 'K{o?+Ev+Kێgd],Ϙ NXz\3֮)fDA\|>e[Hc',8; ) N i\޶hȋC`2؊"t󧩁Q$LD' ꉍY]s}Gh΄{вd%VD–gJEC]"GBzF)~Fg0X-t[Hz Q&ܒNdcS+$v|#v~o0JvK;H.7=Iס娆B՛t^T%=C_jFoNW`H#F'UcK4BJ [F.ձEad"6U@8g.' Łz9*/i Ŏs8gڏ@KOߤ56fA h3+==)<}n@v}_t4\< R}Wa4D1dO}΅S,U_X0faWw!FlԦ(y$5<zlY(Oc`>hLi1әR]ݤ\6ICUɚ#x\ǎono>:fEp8Vz-㧥uZHhoe?;zVy. =lM.LL=Y&[?jؘ෧&2maXy+seytc'8K$o1Ɍp_2xsa2| :iޕhf^>cq`t 4?WDYnȈ~UǍ^, .bVN\xr3xg|.ɲ޴`8 Z+?191UH v`a}W݈De^:egTC~z? 붐] "=O=7K ҆qOtjCC8XgJ.ٟ?)?`JQy1P.0هDmUCu-?8[p  $s)(mMUhEbo@~!*H81/䵁|[[MOd ZH *a`Gf$*q͐v9=nnF;jxvHt8x7"*nT䌕:H%8 Gʓv Z`*&EHLkr](+ tGkMH֯b2:v/{3-D1KnU\ۚ@dԋM? -AͧZ{R^`~rO~(#^6_1Q/6kop[TK'5s[ .d;^3 =bBMwPün NJEv1AXNnVC_t٦O9LxfN Cx5;Cî2GτjuQYo#PMx>|4GPz{lx(~ S8-Q:;<`.%P2͔_J>ezf]o͡iQ6cvhRzx6NLp2AeLɲRKB6g1$ɾRQR0姕fOK'_36Yos)rFA`DR''|AVw ;ĝWvH#1HwZ%s G9Ÿ@Qey+ =Foa`߂_uڱ<#(ToI:\TUmV,zI)Zz =6F#07'O4_dC9Qw޵lj ^X޵Lo/gP߉Uy u*~̉1IA`Gk +r\gܷł<6.kTnh|zgIkI:r N5Or$ee$A*؀aUc j}5 fO JlD9wz:@nK3,75=XJO53≞> 7F3s 6EPY[ Gb~VaF7ԑNF"tZ822#T 0&iy _Opx֦h:g ZŬ^0|>>Ez Hh2IEkpe͇(8͂`y ,AfE4##L 2O'o1s_2.2`cC2i\L/mυ37?M-_d-DhLy7;μ3*O9 aupܓ6>"Ljy/# cW5ٚܙ N+)†Sws0jn. OQ겦 4LpD$WL(_$tHqHdغ,ȍ F,z;/Es lu\Q@AXq:owtv ުj*^Lcpo;3¨R9"O϶ĥjrI#mq~K~?;۰!o>Ȋ 4 ԢWp$ ,"I J'QMZadV ʹ8Biz#,TFQ,ؘ]4_,PSz@6иY-lHot'@F@6AlcN_3"yy?ݞ8;Kdľz =1#W.73:S#9|R%ضDI4vr/']q%UUe4r$3 ;Rq)1<@z|-qWܚ-d\E3퐈&8JPB)~wMS_y`c~֡75}'ٓ:d-ܨkg &UĹ%c._`=ql @S}Xɀ\h[~$ J 7|3:!b04i8I BOzfavȎhnG=g!DU4[.oI>X^{=?[âӴТKÑ0_-v@9 @:\iSLiBjǙJpvj 0H`t7 eU -Ne6L؅$ 2W&_0? H;f UdմY03n¿~xH =[dXh%m KQ\kGQJ<ܦsM>qz|:@ZLy)yh.7#ZaHSɊO#,qִ.OYLoULu)r"#9Q++M/@7-ɘK.QOe6ɒ' k"9e787 !}ViZ`> EcBZ(`c|}ĭ7%WqQ "5loٻzLpn=O"hi}R^-Ir,Rvx-85$ 9[vpU0@.d/2MÕz$%Y CАk3ՙ+ie3؛tJs=a+6[rwE=tSl7v#ﺑbb +7 @鷷#BDRJsv,x%ULm1.uYQ!(UCAJrV :\r,Uj~wcwL4K)fi-u΄QU&l^\|j~G8bN5j:~:ĺFy/;d֤==`}\q '& F0u _>Xm[s[pyRgYg*"l49/vѩ2tpf&tݼNWʈJDÝc$"$NjH()?hQvF̽DD>|kTu幟QH^@Uqu?9N?1}vߩO9}d4oqp8"qڣyKlPO #xq'ףvR<} TWE A½ڲ$j\bEѿra0A^'RmA{~zg1hۓxk۬Bx]X}rd9gb?ONN8wh X߆lMtpq!Ib;'ůGJVب4+TMѓ{˖*<t$o.%s\tq$9ނ/[+ACq$QH ]xc#ȔTGMe8)M&u>V,䦶.^)yJtXiB[չ $-69敏hKTG ;(ݤ7Q81dQ6vv+2]q43Ù5!oew7vS.{lԉ]0RD jDIO&2l _qmep]Z4#ے[cz,LeyjjK:*?p&/_Lu0ڲ;`}jW5#q&ENzNDbI sp7g nMFbfλV 9b5Cͤ^KD(&xy@NTc,gk$`Ii:Q5\eɷ20 KFF׸؟i!op1^B3jۻhhTq>[ WRfػ|N c5dcH`T_#ChڻEPpP-hυ(Jt$\:#:\A2ޡsI7 s|#-챇<QKB%0˟Bo l+] Ⱦ8uٖX8S^0huKvzW\A%O/"dHЃw?^uXGWesvvQrG̭~傺sa:-NgnY:I_mou䝹-Vw轿e[lI!^֋UW =: 4o:1 D*#7!A|܁r}5j7m%*3=s۫,CG9v_pE'Oim)d6YE˱֛ĊTQ^e!?>.&e@4mSMᠦ-#R c %[! 0fmc8$y>l]%K<Mxb:N}PwTJ(ŠtFC7n6Q)E{-lPx TohmSq@ZY~j&곲5~5w19R3rұe9.'` .f>g,E\a4!$:|+>ۘ (G\%$rKKhŮ-}7;E#r}^ /9QXY1pmR'ylB^ LJ)Z3zD23iC /dQnT~7$؝N~NXT`MVY Y2Ԕ= H[82=KqvKWQOsĜ i!pCflmf"ˎ}n]iVY7*>6e/52(brbqb30]ЦJTOƼƏb}֧rW* ]5K[g/<8_G8E t693fymdzT b Z mwBEoA:v _|X"2uAK ʺ zHq=)7!!|Ąaz__&h 1alx=~5A}5rFE:2gIgRKv}\ }NpV>k׷gy]ۤY~I0͵?k;ۂ&D`CgӃ-%X$ic#D r5zJnsc.w0~5w1YL"!F3tpd>T@2KPi)+'JB퀦|3{碞EKi`ʢTLF= J݇g]FZܚR=5A|o">~8-:z\z<uOk^W z4A\~$T&> ~^=\WgCI ~#+E'?STG+~W44Л)s1!+*!Ga[뒡Vmq]m-W9G ȚR7{eX)To{6d]<"W/n} a-6DO Ŀ7pkufSɳ#Kj ̡+nsڻ<7 \O!WwHZ?y}T $<*g/vd%ջګ'G*U 2;4@( 7 ^U҄XI!ςjH##w}T|m :`;qk'+bBb ӨRp{mB?ۜ$μ0Zho ]"nfc/MNG1#F*P{5xswkvL=y(B-T6c ESk6|XFHdMd ,J G Gc|XSәAjDSYebgڿ0?uku[Z&Ǟbgt.cxc?n˚ j /$JLK2BNmiҙ_. (~nt:hz٩P#5ssgtiyfX,6liRhĠ%=acqb5{P5'XVN,$apֶ \' EE@GITʞQzMG!E`38Y*)EG\xӜ0qnY1=x-?0bzNߔl\s:=U3KͪU2^&\sc.6h`s@~ۼ:0RAn-Z][yo{'|+g.}` BMmhq|8#$.}3Q vM͡ΰ1Uyb\,>Q1qI~ [C{QxAdC A.(H z Ja("O/j>^FhF~ *~S[+°iϰg,7 35~e-uqeCP)"q ʣ$|>ߔ׍d8a%^w<5WQXkpP=#`7GGߊ݈ztMu"DjAfN~(i7f{$ UF"Ak@O$rL h54e.tkJ? d&۳ADЎWת@oƲ&3]G}`uRc4H[pw`5 C ?W[pXر[}L2;ǷO"o@K9z$=Vb%z,WыQ9Nd`\҅SMl00kw5.˪au&3ek!" )=D [iU  =‰_hH}N_ѹ! <H}c* SPIװ+r5ap%"š`[oq@QӐK\|;E!KR%fU}M&Ze:ӽ,1`ڐws˜ (VŲJs\5Apm-++䬚c4g]) 'ɝW +mFk߶%I2juM.T =M~]Q9+sF9 . DRѤ(!PrN:N]Vn{^0082@-dio8?W״]ZdgXXr\ҋ2@:9Gi5;mq or,f* ^S\)j%xc9nG'^; <xCb5WS2Ȕ`7 mg/:%J,|aIVszyȖkIV~w%|"k9 dUn<$44~IvsIՇh::fJޢƝ<,}ӕ@fz2IR*ouVͅ: V_>*?í+v|(%A5)jpnG֚V}@&~`9̫F-Њ=K\5&$Y=5>>~jS~ ;M/c*4/I1側˳n94O/6N*m*j*Xe"/G`YZ]PT2|;7$0O,A|חGEChQ~䕳5Wf!IsSkZ7>i/8@*PvKG'j^J:aG}|ByaͰԜJ*oʈR/>kڌu}&{H ^Z.D7\h}\.¡˫ײhLVC,̕`\6g IH>`y4JcExMQtx_Řhcr!|@ w$9`3>w>h.K&'8 |~-3k< }P׻ò.U 1޺/(1Ϩ7Nk4Sw몫0F;IO&& i^[3u}ixi:E׽?۬M Zs,@!ȭK*X5uDёQ6 LsTlj{rK}ͮN+H B68.uܖ8t hSZDc >7fhSVe\5|9 n)\sgdjO5%d}dQuONDmd= :k\\R&[R &h?qyLj8cz1_IH|Ɔ.*-\{fG"1~5V3KnXc*3r]H%hESz^{Nl~a\h]{NrRrYc9xK j+ he) n>EZ|u`IDAzlpl`hZ|iy>!b󩚪+gR&m1u~}~LE ξBЯ6QrD[Zb}8Y;w[pu~,7&[GLwPYAZkps_׭=:׊whiUZ}5޸ ܞ~YF)˵i2!a,OPLP*kx¿Rb7`q,NNxNruyYHfswrBrzh(V2ZĤmc@L|&jwܞ;[g3S-'eA0,%֌A$\8@ܩÝ~I%$>K5ExFp>a2xʳXUC:o=[`}-HnbQ tN41:Z[e7jJpPڤSǁp'J{c!{F%|-yydcr` dϳ\BZiGOstz<޻vmWU` c([@x:8L;LNFvts4Qq~Fp_6rY(D,`?/  +qP@\!=]^_ -6~\Z:}C?#ArU]{ZA~j%L2a@i(Xbq˰גjySK0Ss{_R &eS=rXz(JB uvzsu(JuhGYfJ=ka{QZw@͖l!mZvl-& h:caï60ɴ+ާs,yB#0-5:S[asV n"?=~Euɝ/Icn񚈁K’Lt#)|S,BY@ѼMqKu7v$0yO*9v9C5.v-A {|Cj1dϘ^ K{,ݚX5䜜=7IJh=Lm³ l}ӕ yWaO8 &%O_ɷ׉/>ډT܏B"uw֮82odVwԍj?$p/wwqI$7-휘д~Cκ< Z<$AuTSw`X{MfO1m@jD 7 忞mZ`, W%6}ܩ͐en`FBYAŠETV<\MG?̇:";P8#0i g<1Bŀ+6hj#@j u}Mgv3OIޭʃ{+#J3~'\|n=, ۜ:abs՚ȀkAEQ |"9aXf~lč&h jOkE-G{vlG`vW_Pq3yrC"XvYҫ$u8.(_YӡoKDuH1P9"Օ-rԧUUQUm9o䍐tr[8$?d,#O"57,,<)cѭ2i7px=ƣ?GoJۅFc?MᒄՔ%9tR&1H"FM}|wqٔ4 bxj-IJ}*_'tQEw;>1_qb^zNTiJI8ԏE4e!!t#[])tgہ"6L3G"o4-k1(dT"Wf8F6.uoE;mERӿ,XXhވPf`e{k<iL>ǻ fF`ɣrڈ̗DTtq'~6jHX οk˒OJ7΂g2 Hޮxsl8}2xKTLwq^) 56.({ P ,l?$.t0heT;#Wn.؉9wQȻJNOQ|tJ%Һǿ87: |`Sx2СeKDr??`+NfVp~9B 7_9OpI)w1 ltA\mPcn$d_ I&N)1s(Ц:›]tp֨%Tt:n 2bfEZg]{a~;&a II (11RqtcT@S"5'@Wi0:Y0KJQ"/|+`( JS{lLQ(pm{ ̯ ^>oo=y0Ĥ 9lu~)(e:Dw*Rsw簅!zZ`@wbjLW!A<Zoz\:տ8ɲGBUb\BEs B ܋'Am*DԍۮadgT38c2aSs]:~>H_"׊ IN ÖT;T\rѾamDRO]<,jSwT.%{5z@3RUui#`f>Z1d[A-~GLGi͊Ľ`2V,7փqxUnaB@ ^Ssgh_)} ģC܏"_lW3&Y$?2Au##E绛l9ܸEftyN$š;̓۽Fe6*4Wr=ZʁrGx8Zu7bD0?X2(X[x-zo -δ_6ㆺ2I11[e#CL*IzTw ɖw4+sl"XHfe,>RS?tjqcO$C_7D'S&Z5ZeسEZ{gs&&keA|[St2^V*Q>z*EM`)9pjTYh1Q=W&Lr}Uu%P~ݳ,ԦںC٨PQ<8|x]+w?TM͠"s4}t?hm G HMӢgyNN XXMhe}~D 9y<@%-' ]miႯUb*"7%{غG28 [W |@;ОEȝhpX ʘ\G%n ޒ)˙B YAšE#k'(w×juf _F\V#z8JbWM .vy̶P5^wP@kM!(*Fڐhro.f']sQ,5~F_8~s>dS{pjt 0u,W6̶I4Ϭ0Ba^hψE sFzhڰ&AAѼÄXub՗&SI Kb}OkסlG<Y ;h*J Ӡ[kƅFQdh"b0IzP] Hx |:cKt$ڃkLX)^e%oZ Ռ; Q0AxJJёLhy}K>ݎ$Bu+\häjg&6$dz¤]YDI Ws5Gbn6[yoOF1x᳁8R@bB5uP6ErSO&0;[ZTٻ N|2χ[6٧:ymnj{W~0F,:r%74DCXWg+Jw>TNGƲ+xW=F?7jޣoZ f2d+2{l'G zJbl`s$qO?`VNo|eO=0hg\`(86޶`MN }(sCOa@Rw@̖F \!6`ׂ3GV?W÷cql8S-P q4lViT8Ah&;cTɸ `IeD!(0q'ya`Cgye$tk}0vźgj8f%z+noǗ(K`2.QIt:9Vhs*DcN-{,NP>{NAI-u(p 6Ju3N1ܜun* of+"P.!U^xK)|z/;24~b#ۻT uWgt9˩bچ{H &jD\aԾja97t.1 >8;DnC_p~?DcTz]Z#0[>ɰmE $rfvvLfO 8Cr9=An3zK^Yͳvo":ѻu ΜdفbNmp{` Y@MzQZEk(D[C7ٰ=O<NmTgo.תi ɞ J.*C"jw6Xs'oʛԒrja7N(C<BIDn wڒ/c5#"ڏO'AᩳQ50PC(نѥ1:*y\:Y.R Mu6FveT&Cv;6mLv(_5tFWV1:B+:={#fq44S]x ťDRh0`Ճf۠7K]B5Ւ.Wěd@j-T%lTx3b\HsP9;5]E*֤wԂ=a}wofkjBTj8+Xr Yֳ M%a"kD?oճxأ فxAM1~xst` m^?MyRg`x b(+fn~N|7%]~Ce_~okms{Ϋ.B5!v'Wp6RrGHbLfY?$ܺb)BĮ;(;4؂H,;I Օ){m;CՑdRė0<< M 0U㰦QF=04WU"֑{yQhdZZG~'9r q>h+P'd gCv k fța.{NۢM:{hx Qʁ;G-\}-"e&Uhn'ڌٕ@=UC<4]vk]!A)>3䭒gPTci+ lU@^o^"0C;/制5|&sL" *wIB%u_:Ox%\%IVձ:Ty .Ii?R42UZkShxPډntI0 ebMt%![Vd1SMαxɫn8Y)*:V=b  cnuo 7e rw9+Cǰ,c3x$rc-KЇ@5-?`֤{q6M"cu~'omvids3؏ߏ ~vX]䕑Y 1*%HBy&b &TBuGGn1ue+c C,W ̇1{QPh&,"LN(;f}ufd%*LNLrʕ}}0{m28TTtcª XZA;fw#>rW2!Prƴ}kk%"ޗ`ϬZ,&&gau%ܳ/H|A˿KB_ wJG:oZO^Ġ]Q6& ?L4[{"cd30{Q:=]zF3/':&J䩝.ԤOf& nYɛ45q'!pYr'T&YZ8)ňMyq۲om#_vBE8%ƪMpՕI!Ԁ0)IddoLn+dc<[ fJYغ%΂89Q·&Z#Bs~pa+b ލ :~=}ahwKX5-"N@4q<4>Nuu\Јs\eܝ2yB97sw)ތJR9.p P)Į`0}T,p,=Rϐ;;*$saJ{/ qN Rϳ9 v:jjTh{8A BXgCβ?9lN }MHE,td$`뷴mtKx`Q!c4`Ԍ{- й'|.~J8F((b&;{p`kmi{pXzk&~&hۮz[6zAN'@Ivq{Їp(k ׏s^.g-|u4QNVoY(nIԝy%8"2?SI2*g9"|[Wli] G=2WwH)5/FD9onz^gu>^C. Č%N)n$EmA󏐏:*qlWvE鲮:~wbN20w$rLIN@;ėFS!r Rv'`)x["\zMĥdZdᰵa?[eQXq/&wBB~̈́'<KPn=k8/ۺT$R˖_[rB{2BGGOY͕`(`r[uIOrGyfbRUgm`GIHM >t9X՛e(d>C1{@irjU J Mb~PC@ۊ{V{VJȥKiAR@[p`UMz2u3Ѿ+0Y?4Z=cE&r{䮋e10s j5֨=qv'`9?YFO#g:*l2CYZҢhղdGR4oڽ7`u=2V%BġH뫊tw N9((Q]1jwůMg,tszA3!X"]1)}Zhc*էP'SY}Ξ"`_kpBDl %+[` 䈢 i@rY0Kif&r;\6o{Ӷ{Z*R\Sx5Ÿn;^oD7_ brn2o}̾"8jLvs뇶0%sRei{F6[te8P޴se vyvrLM=)M} y~:<&]5*̷5w=8L-G$ [ d^w=!Eջ8M݊DhH [J*!oYP V㕞$m{Oj+L-TФ3\%ݴm=q Mކ]vH3*æ (QJ'  IMAbhXEGF|5OS"ۚZanabqp +ǽaJ*0ױg#zؘxS~G~1%52y5MIٴ0oWXF6Ʉ?ݨ{NƱ{أE3T(RB w9LPX}Cֶ >%F9~θDR^D9LەgSUÃx8:aUSFۂ^.x~o i/fMH>m_ (}1p;(%ҏ&Q9cV=5}OvM1,6E^}Aj̲^Sڎ<|c0˯8 u/|`Rϙ )EМt&LbX,^ 3"(7mEۙ Yo&AEo͎ի(/];N?ry1pmr$ pgZQ8eEf0"i$Euz* }_5!Xj.&j0Gn"B>ğQ3;>zQ]Q{A3$wـQ%BĶ`%kbEO+0Uض$5 c|"]jl@ n=ϻbfb ^EZ<˒ Ȟ4 $5Gm&kApbN^5F,[|Bs{w+& =Y*cڜT،"{Z7ws8ᅜkkUe݀%z@ȡ0Β}G<";"F%kj Ȼ;[< ہtŧk~!KW~0Wz_ؘ6̐hQ9$%Gg}^8yPRzdZ "i1U%Fǒ) 1hQO1 cM}ٔ7|u=}zYNe~o%'on{tִz1s3 @s3V`(L?S&SGO|h#5dzLbҎ(o_(t9L]FcFe+kфf_ErwbG9"GEfMқ!#ԒC.J]7IY ]4OB4,EOTta6X%aL蠇~o_j韥"IpGSaerߛ>{Gw[iIQD!`HɨfCZ2Θi\ZT`"Bf\oO?9|*lvj%?oG5XaiAJ֮++Hο8]/]f/!*wMh|lq{ Zjٱq:Q. [e8 ÄT!tR&Z o$4,: Qy^r0JL]_dOrPI ]bĶ>.f9QxvF[ǴCnڡTOy1%,d\VQڜsB:CHmgpy+)B^ObLEaje1m]: 9I(a .L4+}c⥺uI+U0{ӻ|{ti0"pN KV(VYq[mol@ m UMdw*]d,* !8baTf1;罅84$5Njн %ju\coV%.j&XgIa$| O#%w1faC6QjX![=I;GoBv|d4ay )MS _)u׉jwT , .%˃ eTyKΔu`gd9TqǸ c2 }fˮ頮gzbU밸(OD2޴a(`4Wz^gEf)!e˖ʗ~NIh>&p^2fdJ\4 (?+VdhvHih? ~%Nq ]L㇢MGu[E}r=~&L Y{"qd=ļQErQeJu^kK(P\Ν4^S7`*A%{-[rI1FHHG ah7וko#qk 63e'.ـTgrSB\=kK,I~D|>̮zѠuodwէ~%(g{\ &U9sGZnpvgײM~-?twriT^2ܮXTg(}9cK7cZ:<=͆J[vSݦŶp8&Yм74t&Py#J0B]N߄o^) \"N:Bs-T&g&MNe i/v81UC`Q<]f%kyV g6^Syakx#q>o:eE&Њ]^\9lsW,RFԇ^H u(.KOE,w eXF>Kf{ i(aF?O?n4(c/[.'+_) j/0n?;h eO sВk_F|-KhfD@If+<'ú/5%QLC~*(L(Zuj 5zZN]$6JN#<Xk#lq._^8)ɺZq:Ԅl!Z!vtS^?S|q{v;|^Nr[ JXL{wˁ[q;Y@g8b ǔgv|7|=2i4R5G3>Թn'DΔEd\: C;?NL!"0B`Nj_ i@[?,q{7w($q`)Q0 ͣ`7U60T%$2) M}Q{-1nCWbEg~+D:(^ߒt$MM,Ͻ$N6ݵ i>?P

H)JTk^^M߽|968 6@4WVsDqFׯgD֝?@! ya u%#yrUׁ^r%q(oFJ"Lڷ[7%11dX Sx~ s#kI++P 1.\xHFQYWjT'?qc܄k]T;ohbcؓy#megjtXDr{}KOHnF\$tבsh _+eC*!k PNbDN~tx^oA&4'iOov`ʭ"*ۆR,ehO lSu-sD L)]TCޜ]x "ɖ%gyiW0>B: /b㹬$B+_'R ,@Kޡ| )U"7k.[T|$js)tu='dOw@."vә' ~c("T;I,0ƃ1(zT /?gXaBga g_}f֋k!g?He{m .r4;M"QS sig:v=j_}s'cj1юxWۤB2В>Z֚~egU?yRyp#=Zָr{1R$qQubG4A9l9]ӌ܇)8$typx1F'듖.>wDIr,LUv[WR|*Fi]:^M}}BNs[V-> Ovgp$=e[D`XՕ_H9+1e笢;CGr`A-KM奢w:xʔG9mͯWM(Nj9<υ 0Át1JVVP:qX,qGYokIv #^ܹv%3H, =q[ {LHҜqG}^4Ϣ:%GYB.mqtM3hWjqa=\t+vP_W-2)iE\)R@ඍPvGΓ[%[I$:=+ Ғ:=;E)f`tPϬ峺IY E Zߙ2֠ yތch0 KQHm4bUIںjfOR_T Mg{+tj=0qfs"7\ N";~"P M6LoPrTՉ²`CEHH>3cXyẊ3.*A}9n5 t6~Hn VL=ұx2,%]JRJ޲LM_Mr'4:#2o  ^-ոP:t`E/6)\O94Sp9OZ*}=B(3Rm^/ufJ@slgrhhH f_Kme8.RF&&\_PfV@0xxk |O/^ tA͟:◝b*h;{1aՔZD²z50fG9\uW`52BHDfQPV C\M}DtܪLu\kriAX$m$.'-v7_hF qu6d21ï;N[4O$2p3=|bXxYaP֋{]Bq V%r\ օt\XvSnTbInd]*9㳹Kx%|Rq^igPxMEV\?; ,GʡA[(cR ƒuIFB F"X6zs  be}H6k ,,ߌ/ȰAaFJ9 st3i"Sة&(]ـ FT}Ҫ}Ֆ j /ȇqZBQ }LHW'acgep8]0Jv喯"Rӗ>8؉Of2 ^1myق+CU:~N@^褱9ZCd)eeSL6Hj@r/`rC6xW|F=,IjO9MsGςPXzTxK~esMI3Fԏ TBmrpoK՝ӧ=0-1A?%p'}i kxN-b#r^kDX]!@%j(tߝ)"grK&c|/(wf.?o9䥶֡Ȁ'1V)bƐ(eHZ6Xu*/]fAxfk5AMYWۍKm`zVe z}]&ɓʟB}M܁:6`躳=[AwAs69ْ+ɝadG}g-#KSjEc߽&Wcؔ/`B6۝W K/ۚUn. =dzF*S+>LEGp.hdrb8dS/v[%a(ba|EY:Z%(|oۜ\`0>nGPQ=; VP̍n־GsEbL\VB[4HJ:u`zDYwœ'ۅiDz7(Gyui VT3l_U EJho'-MB3e5EJT((Ae@TeFHQ(%Bc2u?Efqu#Lq~Z5c3mW3Im~|x,$d Q䱊JiFw2j% v񆺢` ؙxwtcZJ=W ܨܑW؁.NNW/i-(fBfT%RiFfit?oòcHC NEkNЛdh6m䴺yӻ75`W mymøz~vigڤ#,WWI$iqa >5/9;oWysGFX 2K,oN,aY`W!H'E5€'lU-{{1;9?3 _ʎ˱ j71{\]MO` W=]jsC}ݚ>T8Uv'p"njb%TհJڹkDstW=\>4[H+ɆFUHXآSiBA;j(O㿑hAUΏ`a2c 5}1S,hoҍ%|a,b4lL[-GsقB]gRʈJ?[8` g7-"iѵvpPVX0Pܔ-TjYˮ̵ws O񥹐3x Z'q̕9.akOw=kaBf#kPVтvL) @d~-(Mxk+qkLy!b*qr3ad;Zϯv|O[s*c G8r;ä [bzc,+1^/kwVAo_]^b%MDGbb}$ x%P`qW2%ȳI,y{-02{@!i[^_ EBR?Lt+BoُE`<ݻ=tyOT# JπZ>pզ8rRKi+]|ۢ)r`"d DF(wX~XJsW0FU- FlԷró9@&3^d&+Wtb|k:JQܗyUy3+p V$w?nh0exm'y,Vcѵa@*ξPcnFJ?h[dO8"Kzj$V3 6⃖:rKykhk?ٔ+ `|V@& cMzI$=]ނo8Ҋ+fs yi6|YbTo0XH+(ҁş۴)r,fJhfp{u Gw0+Cw#4mRS|jwтqa:sg.ػOá7z5[>;<`"&gTv?4V.tu''th'* 4kvCuEf`S -ˇ慇(UN$^cDzOI}5peO z `^ngsiEtN~ߝSvLBk?;zI+L, %/q9SXz!%Z#4 7!#6 ԉ 1dL wT'VZ[z\fhk!W 8Z4RʩmVr6xd]@^l.ϒQ3{R}nv'%+[.dO>X;c4`<$yvԲGq|j}E[䰊]C ,IJ'@PFXY hYCyуƼR.>lm Uj۔"4b{jIs"C l}[՚J՞C@Әu.<*"| 6,X5b`.[?z0a1zuИW@#71,k|MnϿ)NCoZ2@&H.-^.xV.3`Q农9)Z$9uEU% |aW+;' s/'iș:?/_Xqm/laD$:4g]H2 >U*í9:b2`^%4b4n(2FJTĩCOM"ac% >8e]{EwJamC:ǣm48zi߶%tn8X<5U8?bFGNWͷ=K&?q~TD}3d 7rBq%2,W٭'s:P/JhXustiJͦG3n EN)MİX*ه4Pǁnjht.sl8pɯzu8.}#0Lʕ|3 JhNl,0$e ӌ+4RV)wP._Fx j'gY,2n$m ^.$V%8Eh.q^[cc{F`)f!xl\Wq&¾% YpXl/Js.ɧCaPo#;ߒCJQ={W<[*:1p:M a…6蒓JY8[LOv ?(z0%t@Lb.#fRҔHӹ+/jȏ87?ZYwa# 6z.,ɓdt9ľLsq;`P2;&%X,zxfAqkron#7ǩ@#t}0JT̆ӑdj{* FG6^v6aPa1MhRDž'5Eb4:7l1[}_)1*$/ci~txL4~w+O'34n^lƴ۩ áyK3]#1۔ڊʿ,؇̪g"F{عϴۭ^l'Wd]`(g\F$/@J.t~-BɌJLO\|A.Cj G; eIm\v[蹁DM՝d:v>YoXa:+GL M0npeph%7P'IIVCڂT@Xxf8|QX s'q1!sB~2D3ZU)3+2Qsq#0&C,ՙƦL5Timjm"2ΉXRR7w[Ny|$-oa\Кrܐ9orMQ3TBX6E~YGv6=6࠶b2wM֋iȬkvdgg^~u‹!a\sLS"n qN@*slá3 OߨJ~]y&á%s3I/*sphNęRh5w m;[osc6 J`TG]81/ ?u#{KFrr=,z}{^I\IGD6( Woee]j̨x_\A~iEH{t`?~>BS@>ӽdvʰ4ATVXROI Jr@<>h)<0WLՆe r0K&T5&̺a)Y cNHkU*_\ 6& LΝ?BM~5wSMra> ٓN Rdc6.7E'cjgéD7jX :F r0&&t-&6?Ѿ d7.`JgjTED0zOnN[xp j13{O"' t͸;|whqf^#yL"{~NzHF0oc]^9(*nX9 ƻYu<ˆ{w@_kdVERz_ d2pW(vIe2HڷzCg#˯uIAH]66Ui<4`W|kB(ı!Á}ҭCM$l?^wS )H5.V!ym^`; $V+rzoD!|, V[_[Y7VZ KpHo=М]!>)ݭh$8BP0aJ97PF<8%F˽ޫ(v{e) .&å?e$";rA%cD M,hAW2HMJp)E6~0/+4lJ KLèmRKlNw>KqAw.Jy&%M# '+1e[k6gR4UWq}skTE6oA꿄{51K)؅d\xⓀ"\U@?07I?uJӸ>6? |:i/Wؼ`5m^L6t!Q6V{=1{厧S`Z[n̡YR ]]*T!t |\ڧkբ K0ݪw:/<tFz44Ko]`=–I9T8E + sM_a]>-4pޫ aDeK(:LdjkJ> zRi ,NĭknKBdza %SLQ`?Q!@1syS@~i]UxW%Y,}n+F_f`.ʘ+_v^4,._?-M%oxǩe]&Q25lmŇ VJ/TN g܃tXf} .`yX\E: "}n\`3\2_'H%^e_|p,HS~ (<ă=ϔw| `un:\9,h!2"AW*6 q"F&0 WюnSp1Õ~QVo/ 5aaΔ6l&pW.İ.)+O_`o_Ւõ,%>悂1\)R d-?EW~~|m 0`7'+9r~.Glh7MYm9`OF{։^XFdNoi`n|%;JwmOߏ(ōӛ/@6GJݩK smY ]3VCv2&mҳf%."\ud;lR#1ޑ JW C2li=8Q^ʟ3=.Z2XH, ɣ"L7+CdMA&-9qBjL+҂vp_5+OLRG ?)Z 'sgaN~V ;~W-7\~%KڣLz_!Ǹ}19h\ ΨL=f5WBX%3.LρA *۝ix8Zlx C =a )WY=yfy6> QUk ~,4aAM: ~ޖ@p!З"̪_am (17qmS{'iA j+ЭC)epҮE(g0^RX&*!xK=kr[Q9+y!̫-z&vG6{{oUь`B/n*nJ8`/޷ o*h!Uշw-3y,| ü< ADdm])3#]6WL$Ÿqݥ@_>p,N wOF.d2eI/}TjzP ￰Ee] EDÔT"cna7E邽/&2䟷ќ U&3[8_1ӒL46.tjdL0jdV(x5껓}G~kfrMvaB3_XIq0Y˚ neZgNC^FʊQ/-"# c}lr6Py^oqTSWz4U9X o ҝx '-ZKSoR fN^FWp}kRp[4ZBnܒa$J+]0l?LyϟYKKSzxqV֟ϵ _GhCREL%:(?XE(Cogc]ģm>Vr.YHLWΨ{<`~~kvd/4"S~"N. 8ɶ%zM)x49*ns!0 _X,Ix|ek***VIu75g@e_}_lw|1!-#} YQ췇-!n89dxG#8Zs'z$Xd@MO%.R@5ӌìe)%qI(x8 $b6KM]qFD_?(} aUUqIh$xdONղ<%)\ګ ;\׵[6:Nuw7Фch{\Ka<[|ު29CEC$_;N!1"~_tL dm4隸6쎉;d*CNT p޿.6d}>hS+b5B3A|(xhƕCsydSZM$QzbD{.ºbHeyM֋upCU[P=s +=,v|6*Ƣbqcp7p=fyPjzrJw &ޱelo۪ʸ{UشێQb5ё5w1=~5NepۛJ _Hׅ&hEkNK)|_hWlQ Ǚ̟PPH6~$v3hp)fRP'ʈ×br0y˳#uDCDz#d"a@&(†`#>r IMZhsYw^9K* b!aP% m{y&EDfT|C ʹxʟ6-lxŵLURe|"h Tmr;+`<4/{9ƭﶂ8d% ԯ͢R ,-X#k'c5]ƇgE$Z;WfĆ(Հb+MB%2񥍎3o4:i=<  g#fn$Nhnpm~Z"zDwQ3#cdKamA`YgyUdv5-S_싉.yevxk|F] O]B]ǬV#' ) ֏ DњY3;^ p Dq3mhdKRWokk>/cfL~Ç5=\:L4%n-̄}}Jz0MT djI^+R@fByZt JusOm"u  t:@y1_`R~W$fuVb\φB$cFB34N)&Uܡ39̢ w,1D@ /Nl/~>[x;S@w|TkOUԽVBj)1@OJY늣#MfV^.Lf4oM`/eXKnigH ׶EƇKtč.=FH (p:m š׉!u'%Lg^:' hGJ^Yutdtmf ʯqtI,X4"j tq?R`e H/q&|Y/*Pfٶij[hzcE3woe>kgN6Q/9*s*@.2t/Cnm&3W=+qRP ha5xAS 3&},Ar +' #G +jF}Th>[|g;ȝtZ~i9 8y W uڀf5$ pcv}8r w"5z. NeNLcf g*b U߱mG+j J@.[u: hjhjzS`}VF{"H*{Ȟh&MsGhs 灦nLBP $F<@!WS MfDߣUeH+F&LFMd<H&)Ҥ0' 3LZ~{Iw;Oi?!إƭYDBeDZ>_% Rq%F'# Kjlﻻƪ=2mER,t) ]E)byh氩BQrg?X}A xҳJ\]Fn_OfjT}q3l[6أHKؤ}bZA4xGl$)`[t"ˎ^LpJt/b5+xld`PYapJv*Gg2M 7(b-H1LWwW9Pw҂ EYvNpy>'66Q]/ A=$~e?| Vxuw:C:Hv1JG|+a^)nbP+x{59g8kb4+[6ܙDf6^LY]VԝV"2:%:EաtTyĽ;c$Pbյ;3yĬm0qZb3McS~דg g'0Ұ}TH}tGZ1|tEL8C2{<t/I{nH CvfGnJDã{7 lppe0<̚}:8uᕚ-Wê +`nS; s#­F§ul%`M$[.ѹI4͸`I,iETNk~01 @'~v:CO15nbYnFXK\phŻ4,ACnjH{gv@" ‘>q$Ԩ);*$" /TFXÂSڮcek~#a:_9Uյ"c3w%t( ꯫'b&wo"A.kb"b=' M^o Z R90Ȭd`NlKi}f)3Ѭç*5<4&T9:4匙[n 9)V{JfB9 ʥILx>(Cw(XuA$0+jOpMcHfZdE&ъM%UTp>_{gJ$e}^M;"iG"Ե1w5Hrg ?d 0AlKX?k$}9J&`h噔!ːE:SAEݕz)zF@nJ&hn@ E63"ĊxAkb'g!ܢ4Ҳ F|YtVLꣷ&;A>i"1Զj `6 k}rcaK~jg8qI+LA,ǥPY҉u[x;!WrZd]Ozk^4u:rK/և7sr?H5Q<3轑䧵.[W)W4Hذ M.aap#W} }9!zl/~1b $vG̓QZOw @i6$K *:۴ɈJ++*E2j#g4h5`1ka{ 9q q{ybE i]})-= πwr a25 &dm,rʨ., u-Є535 m}DN @# Lqtӕ?M}CvRf1bR$_lu#.qVu4.ΉgU 3{vrDqj_&W6 VMm@ ڮmEɋ<'VCF\.b,χs1nLz4K-2˙ T.F)&&quj-{& sQ_;Hz؎5l[ksC 1Gp[7>FGĊnoqJ6vޙI$6~Wdq=cu6,wo&R=dnƯ#B,lD+F%Xq'r}5Bxh&Ŕn"1$nEdUW$qhimoʪj= _$Z/q^ Io34N[^pvRȵBǑhDm@? '+7 r%r^}4Ք7wXoZSh#ƛNgOv6Tn Bggam<\Zfp;k8]/-ȒV6ڟhk bk\ &,}0I/8 Cu|ksnĜ gފKYXyހThcPr]o Ek&ozO' .,2kYlL/ոO "Bk}a-|*~?Tȟ|5LvѼN^Vl=aVxfe3zBk 9B~rъ{Mi7wC!*+f 1iGˀ@S߄Dy[=e &T?pW<=b= V" eE獓)͸&nA{1pCЈƧ Q\̍M{C5E^48Y=7_~v `d*]}Ǿ Q{$?Τ-G⪠w!H%<K,$|ylsXb2,#ɰ$w˦X HE̎Yp$ЍޓF Y2H`ug;Hzxp1mVYrl8kW, ao Q ް`d裙7GZ`} o \hL|_Gb}>`{]m%,=Jh@3$kX#q4ȄdW0HGH35ov+zu%-a''qͤQɤJHRV:%Yŷj'*mo7R)ؑ@df> w_ ulPuXVly*teYH,hj/(yYlvK1!h}]:oρPfrO!ƩqlN +Č2E9⍬[=K?7et~{hM걐>W#`XLp},WTsjolбx^ioLN1q%U$f٥$1K*Iv0DǛ$ߌT v}U[e,+-V7L ;?U>’L_OSyЕqGFnpZjg< 8v3b'rX K!pngHT@6CF^@U :s`Cv皅>1Q6i±l !wZ tBЊ$Pa;5'"&㽻#zrWꗯt4.4^LK^P6s/Ԇ!Cʑd^)HyvYL!hÔb(ůNy|Szp%3b-ȄINpuyOf |6M'{S*?׆j)(d@[Gd.gdFsio;ثݯbަt}o>%s˟Ȫ9~s+:j&nǕ2vIRPo3{gLQ*޻HG)\x %'4> 071Ի&)pakBzum!Oc4=j S&׽{jj62 -ՔNv-ɛQ1~c}Vh{꥗`쏘Kk~Nd"@7El忩ko1W3LLJA2|d憽n E(eztDbu7Ԝ9xh( vw?Pj苗́@7w-ArRa ԉ[\n3֌8_NcL,u\BҡQ=1JKxU2ҚiE*Ջ@@@+at/x@.tzU;t,I0 E/{E׶zpr@N8H:ͦ˸IYEdrOήTs, z$QK̹T~ӏS/B>j[Av͢-4$e7 t`ġpG7a4r( f-1<ƕ$B=/88FT]D]HͶcD<#0{y@UXZ:amikUQRa;+Ϳ %,GRݸ#Ut0u:X~K2^:oC8wܒ#eYX W(>?w3)a7v4-=DX Bb3fMwb;ဏX>Ԗ,j" vw;Uz!dѫCv2}Ly\fϓ{uuR禃Ptזf"5`έ1 l{;GO$T1XM:HD7It(p\ik߹Y6~*R<Efܛfr/5JŐ=(#US/GeȢ#[Yr}ţd(bs6dd,=] p0 fJ9ZuW ٴ :shgm-4DCLVzt%eEMҴ"7 e<*f"u9o( v`L#-Q\'̰QF.1lׄ6G!oe Їw, ~ Ovgw -o?Bvt"y1ijnS $/PFgؾ ]3)6/xVs/pyR*]},Ϡ3{uв  [8V \Bks %Ig9採F:n<AADbZ&ɞD DbXkwNʒGYjz|锎Z [G˯{ C)%a[T:5ӪTosDy?BZCy!o+__&0Rn Zz5ĭ^N6})vYg}ScZre* ~6dxH Fʥ95WfR8_~AFd:@LH6*gў4דS|&X4fvD/y[6RרCTEPG'f˧:|ElكaC7oc2aESs@' Q(=uuśxFA{ Ѣ-"3(#[9lo~Fb"ek sMj]LmbRU23Jsɓܩ&_$ -z DʠLX&>YǀDw{1[! )]HB}" Q!^WAƋ6Izw)3M|vI1Xgб{o{+hƽE7jj#fcn෵VK$S6_ŬE=b!J[cX>'Z$x-##v0k()yAw%uB٥ܼ K )tP֐y lPT4`5DzoD@38h4$e#`Ts{!Å>ԤwM,hnid}, dnOŔǟG(888B ƍ)~0m&*[ڱב?чLlx2@5VedmhaCBpUjҸX£(tBU%.WR 9wlܼi)\bCZcijFXM+46E~W: >2`ij@}CY> YS3-X-4ֻZ]ފ%zqEwрvyGʈC7܃z `$%fN4\QA痲ƐnNuDϒ6x87~\Y;Q2yh)Ɯ@~D)vA :a ! c*t3(7 v7X,Qi7(|EzA JJ=N;#Ve? 0],Di$? &h|ETS%ݻNVi}iwGYGQ~쿮=|^*\#H[R/Sj#X+w.IJ!‡Mr׀ m VN GoՋ:P 8Z\R9 _? _$뉕!`(jFƨ8 W]eӾTmk8\o|[ͱB_Kt Y}E;aQKgE0!h8c۲ؘ v6w5 $QKI>'6D4>3ęș8%e;F3[_pC =t1 zF~~mU.+du=0e`dGz7UKt#]l;YV]odZQ.W4Y!/78| Po mNHߌW$jqR -NjFn 0;6@V Mc5+Jg2q' }7k]f#Έ+KgQў!$jg4oNྂqC[bsXf w:t5Ke9y3αa4\A*;ź5fhpDfzBt4āuH $<l4BEWWhz*ԅ]w5"TaMd ?l<0 #owP4U;?\ެ+,s<5ۅl6g'gjokWߪdKP 7mN!l̹gVXnp"naJAEgU\R-H'j'I -Z\BqcDquxx;)GB 3&O"rJe/Lb媊&=%L`C~[ 4 bj(6;FFFw&EzSy@ Xiv-}V1NcIJ~a ̲ңIܟަ;ˈQ3#m+\wG=O~B)skBaGU>_13?GDKj'#.Mʼnl3ԅv/e.ͷT2c!y ]v_m՗=*Q?bՅl4%J Vq& L63OxPe$N  =]1]{f=Vjw{![,SNmkBcćtYsza!㭸W,A*6r3'oQFNF.`03J"Ը-U+zcpB'ؑ?;u'dҬixqo8~6ըϗ_N}&;poRLJ[RlU:uu g*. 2!sǵIuw":B4\5g; iْF?״iF5ߩ4s$K1+dw1wY^R+ ۤ! K;ZA|-`?`JBm)$$^'RwmAG} IyfQyAVSV*beBb.wpƘAȟΐQ8Qwi,ƩW{q;T賘htb6`}iRlqC 3MR `A8rDVQi|nSyTrHc6ZwbRm łB>7Z!0߼ @KdEi7 cVV Wjo~}vBIz{X̮Ax FӔrZ6\tq sB$'$G^V|U ѭǖjЁ4Ѿ&79 {?;Zp 8d.뀔tϛ3p-w19OՕcՕiD?@e"m8[ɂXpNJ dQoRT^ZǰfF4cľ^LAX WW4 oy߅ ):@okM͕|~},ihr0U߅nF2$dҩMU%c<6y sF=3ƨ7`D)~LqbG̡T2Fc]ګT- q3j*<{Hs<&HdZ"}~!5rvߦ'aEh"|Pƽ[Zv qSTų} 8cRK:4 [W;/.bT=vyF-fOq$/Aj#Àk1 O 6}#YWhUؽS-y{"AA>Pிm3C7-gЗHlCS# !o ;a@],#dV-M isKto^]_58CB"C9pb脂0d/ءI',) )mgr<.Vwϯ_[)7t#I 9qLibވc2>\DAfz'NC}mB,?̲ղu6~2}]i6k_d{(ĠDgvm w&ss&mTߓ6>urc&V=COO_3G}ۗIJx?;9s\xQe1^#ݩjϚoZ`',1O7֖ [ bxL,E]vgg*y4"\φ_NOyA5+R]k'.[_9Qoi{94zm)fX _EI(GJg9*DWu"efer۰CT R},~cx!e bTv6E\M&f E+3@ D^XCy[#)6'N,}KH—հdC[` zZ%[슊]oXx1g[DHB޶IO ҍI¼fs!;AZXnqUp"S͛,${@i66&83rHj_(w P ?1C3mLBѩfX|sd̗%"(.Cm] >rNEts~9 3E+vanVG2KeMn՝-.0W罪 ٷű !Nը 9j7+Y9& q^2* Eo$ɡ/xjM.abтR˪c ?ޛP'lni)HQ&b!ux3={, Y[oCz3c|P-(D;}L8~:܏oTZ _ŦB P@K㤠w"t:$/o;IwevRL!NOYc"E{R݉5O2 Bqpb{]j]ZUՏ^$DM#ȉOTSX4R=;3Z Yp(&ޤǎWD}}%(£ k^Evzhq֎lXw8۩XI/2_Μ.͎My#rt<%jY|FWB* ѱ|>%)oF?.m4}SKX_ST0;hڊ^K-fyJܮm˼wcOYpF~U蓘K+Oib6\?$$SoQǴ ?n):htoXZUϖAsJjI%Y>D%+'pj.XRrT77҃M[]q%˨EuL/CW;ܫ$TIfZBzjFLBڎY\֌~k0>-š tQӨewEl7p@3 UiV0%,=ܜnc٤Av)aǰI"Z~$xZ=_@cZX;J;F쏠G<u7/e\ XOrh+IŷSьԩ߲- L4(0C"ni{kobq.}q1Axg`9qFb=f~GuPY<>:{@vgV`PY. 1,E˩"906ɐB?B: ;e\ZE%hj!o%vs^  YY<9?239Ah$aDY1i\GFGPv{+ٙ2XLzkMkw!>2UQlt+鋾O(ѴHЬ:NMU]Mmׯpκ-L jsRLnM+̩StmG!BIZ\X?Z!gmvD8PrFP$Օ)i՞ml*VnW&N{;4>̮ʻ|{hJ|70?U.L=XOxn J*.`Wz(-V< `&|ȇ1SaL\$BeJ=Kz):&@gdc,' YGC"&(ĒR6gCKwe(c/ lc|}T6S[by*r>N:Ή,\dw#B6wT3;%CDE m:jZ,=jef2uX[/gB89.9&O+1F4V,"8X}nRuBҸZ#Z|VZb 8b&l,;׫Z,88y>7C $DžyCk勢fiM|İrgx5ST9[m yP]i[Zwgx+¡B/˺ν00*O.\Ū_\З3m+0H/Lq(ΝM?UYG VBS7J`$/x"˷(? uO&H l?3R+K}'LPvd>n*gW @DXh2YqĶ <ZF.3~BfАdn^xޙ':_R W_Ay|}UUmG+tIK8ɣ SmiEu_OaOl}?7v א+4H*{şZ㿂u亀a6$R(5Nщ-b-:hRk8oɳiᴸ'Z`-6,2z}sEAKP"G9pV[ c"E+ ]1*,\*ω}_2<5}CԡZH|6VIܮ͔S,<6$P LBJ*JoDN XO=Xj/_S sQpٷ]1غk@ܥҢJm~b5e -}K9,#e\#i4G6IH]y'A6ЫF*i2c7t%#nX!}I"_'{ġDq{kC~şbMOD `sY#q_0mִv^!rWyz\x֔whOХm)'// w&~%ߢ ˅cu< 9Y@d]T2d-/H@66e*{߂K-%:ޠ3QqseUs0]tQt3` RYP++6EI}fw)tNe?pJ~>[L4|`L` Zp)rV+0_&싏Q@`@hJ9J։ c9tbY]0Mwr_))y0$Q+:ޓӄ_-X)3df]EWnf D) A|=w yKU{矢K9i'H[i[cqzcȵ+mHoul +%3`M>; ( 6;E+NuO 2>qdJ8RX4Qrƞu>tZIhIvEy!!(_|+^U!z;IJ;\*]]]_"͞~0$`st<#O 0^$jHulf.=$\J +=)]'%h9*&84^M>+${Y5z'wU@:?r0~ksNgU3v#bRΎjrBuʾ"FKvDl_c!=`[B<ׯlRh.~‰? mK^E._Htz#d:d#뚕gѬMTY3D%mK!PE^?ؒǻ<")6̨gL<|ҰbJ]UŸlJ2ޟHlP^0XRՖ*A<'Y?w HSϰtzzִT5B ׃@Eyyϧ2.RǙ,Z ٟRk@<"U56w(@|%$B N 43 lv,M(囡ScBԔtWF ԱWw açֳ2Vp%T?C3ζ'OʔXqBA[窏5hca`acB WQA璹zȷMwd*Xŏ"&H!I/PlqB>, +4|*^'(`οLq!)ݰ 鷶\O~8U CݵGJB0H 5+\)RR Ϧbkk,a1$) |P_Ǚ k1M8dV1{l*m^x9k~m;6da'q)&3QO@-W(xŵa1[,}I>&q`I=Gް`4DZk7 X FC #^s9|imK i<-!0Ɣ> 38pr,VR%S@SZԁuGzY*ܭ !yv-g tH;Xs=4YmVE Of΀MC-WCI+>T0#žۣL!2X=MSg:,4} >ZYfWՓ%M۳gh' >̳{#̓fϜWF(%\r2Q‚PSB&fMKGUfhj;n~|y\sd{%Z'"W JZGj.ï5CBq!عoi؄]%ݔ?{} (8g5``t`5kŽGܛ&uWYwܷ -#"cfl 418RgTh"};L-Eꕸ>[/Ca&͝сa\4ihtAi3)eIF%P> [:+f|.W!heA8h̬yn7Kq*y+֊uLI!] d;CӶ O^xokuzieVEA4ͱu*a)!%8~8 L9N#!١E=tԓ%$E"@&BT/ C3j}(Yՙr='˄ lO޻Mzh駜y]prNы;.Ƀ\^F~JXiXNP>#JB9:3[Q 2Љ~)wL u sܴ?^2.<9w%\BLJZF#2sO*5aCajԘڙ5DtABoI'_X`WƄf noЫ('Qf EP{$$!l99e+˧Q+wk)S/="QS:=f~(rg`ݧ}N"V+)I]уo7z̞bu0"17P&61a౔IBcf_u haij-Y/;Qa #Ć=}=P$8Fɏޜ!"l;5L&yL\?]ަmn_/=l =TZ=8[17.[sڶl bs\lŖF*&PFÂRCbw4, Y];Ԩ`Gn[^d0E4G@m<OE\|wߐ}t1O?@Oo&=Šd넚E)G*gyEJAC %hCrg87#t0!/=/iOb6I\E$d{׆tirˤg"H%ȬE.ԟQ-2b,.=`9;M#ʆ\#r/_u2ܜhYxNH ]ql In3.˻HCVV^CRe.#bAK!HjB]ȉm) \YMm*flh&H\|[ѵS) }wy1F. ׏2{Pz6;o J`E9B};L-_4A{@1++}Lk`ڳ0UKX#@Lӿ1@ oh%|ZE/@C[dRsR  F,XK6ubGIxXByO4F,9|y KF㡾S$$iPD .~~%;憣;f $Dowr$=񙡑8H%p?y\2O!-Oe*}=6OZ%gE_]6[g:|%#t>3dbE_>eYV@O"0fq\ΜD96Һ$rdJUf*#u9 x?8xĪi .46읪1IHemZ P!zk)d 1`~mxA%4GBýxFX [ʐ;@ 'ɍ{|{sҺϴBfoYZ >lPLdWr=Ys16-r0eb0rrU%8{=PpqtE=t;7{6%d1p3.J#@ v,6wЎfŀhQFڽ#,,20載G Y;х|992ا62I`&I VW,25⦅AeiD BKt{Br`>hN@a=o>~(ђ[8xx\ #6fJk=ܒqn |S Y YWT+g5lx[#=>>o]n۾[İXlZ-c¾(Y # WCEi_9 6Na]&hjYSQ[  Nzݏ n eg+:>ǓQޝ.E:`2xG9 h BWwv͔vY[<0^41_䮣 =.CB]SB]phAM$Ns%r8]"(7{}x5}w6S5$NhzQIn ќTO]dc%&ܷAa5Dwb/L°5fj 5^]ZGjj k)k}eVUmB^9gs$%&֛1 RX؏vh=~q9LӞr>iZl D f^>2I e'  Uۜb Ӫw sit-p٬)tVb }X?Pd)6>Pdnu$58)<#,.ݤzD:Na*>_8;Ki#$z=f#5jӕ}@g^XwoR` ݋BoNKi8_lϨ\(Ac8%3= kkO!E 3ģ* Ӷ/B08ˀ[0힋fֺAM<7 %iVsecny^8 &NNMzE[/M@m<:Uʂ58 ف)ydK%'`:>~l˷.*5pb]Ñxa<EhEאy)gm .3e\G-sE1Qmfb}COQw@p5(1p1a䇊 j~ͽ}şr@^YC-[R  6&QpaC f!|3Ƀz_]? U+wj:>paPn$SDFQDYݶx& $e-ڹn즽)=H`W 6N6Jv毧EEӬI d m,,=,bN1sJ{ѼRO pRR:R.aH79b 3zEŷ1MQ Ҩa Lc50aʢj q'|J'@%lev΂LF{IV\_' 7woje+gàu.#w'm}c(pӡvv(TVqe:Wg_N"Z>?4t(bc>{TiY޵yyz}[!V3 @&+%rqBSP@؅|R1^oo+BjY‹1,8%1,s#iJjRm$ՔY䵂-'qz4uKpL )K/bNEiix#6>kwpޚD'CsT&4jr3i0oVvμX%88#6M_}e hy[lwjqs463.O$j 06uYU#,%q;i[.\'@wa׉ޙ4(֥?\+dzoU˻n䧀0%͎t4ڄG _˘iN 6|>h.\fÇMg%.`N倢ĘP> h\nu0ArPdWF%ᯗ+;V9NB1chIa 9pᥨ=lDVi$Ucdڼk;WUzhi3쪄N2ye9/'Eȭi fQ @s&yl,W`' ݼp0d*f2yl*z{k G L½ؿ˲\-)K D<XDƐ1܊$>ܨKgԢp0̈УH5F (@5BpE(Ĵq6Wb!1i!iZ xff$)u hl8F^daru,cKݎ[R@yJ"jkOd4DIԶ!@Qѷo= ЕN60 p.Jt& N+'%eъxgq+cP|*2~d.FAe&(G5 >9j mnx}*M&>ֳ!m T?N )V`]Mh>q [@F"kdg{TGJli5lz:?$G moǾrH^]ӊ8/io`#Řl7OlT Ж+(T,+Dr:Xk=a=#jq"m4QFPr.SHcHeMjJ{9^Ӻev2Љ0:j-$nr_zdpbI%8*c$ٓ:.^|U9JA.Ѳd{]Q6c/'MS2+QC% }z 7K^y/ZVb9{0uV^UHw}TL^T? ۣ*R.lM*KL[.D^p*ʞ}<Ҍ?wQY0ŨbR SXb&Y9(Y# >>pK"'[cܗG17.ؼ-CP$:1ecB$凾cD݋T=mcl#׾ n$M(FmDnTq@6o0+)1 U1儺}gɭ|KM{L };R&aؽ6eAkjOube1مD̓eC~MB)+ovF)b]YSvWy}ױ Dgb,2Xu@ e+ZW;]/q5 [IcBLln 6U=aNh*ZYB j@(/NYCf+aCˌ׍ż'&Mg4 t '}O1K50)˟~k,_`.ŕ.j@={~Bh\Il{Y+ch0j5fP7}gu?<Jl20{~%.vȘ=] wS ƒ|h(~}dmͮ#<==J>YӘ1zEL_4vjұyxDwgD163lEG|hU߻ZJ'gm$ӷDcS8J!5ؤ[ y<pKY|p.Z.r)e6xhO%.PYk+׍yW л//@ [$[TA5WTb2W8sTN?guQO5{`\ J?^7j]H9CkRr\XRI9 1QŮF ?y᝟N+1v! #~O!vyӁ&G%:V2B9#ݗk/Yaz<ƀ+S$U1Ro|M؏۸a֘4s xDVeMk<[ f#~آ_V6+=<<=Ĭ17JJz [7Ce^}EaR_~WCL!WCiD'}1:JFHe,e@ !4rXeOp @-3zZW\ r, W+wvt~-E,k `ˑʫSvhD,a4㋝۬s;u.?ӆ- k$' AI*%wk]D+|37~mTo2-(¬*¹P-yz+ȶay) I;~U\h0E$TG qZ"vfk $CH])D5<'}2tumolh(L2J[ZTkMH1ќl^j&~;-jS}ŜVh$׎}슈˥4@. cFM.lUߜKP$f?G?oZc'Ⱥ'dMvrU `)QMDڧz{])yzqucPtk.8yܳ(-dohR t C봨ixRbK^]jS_8X @/l$5WjGh"̣zxĒϯN5Eߕc!20v7.) l$E7Td f D88nj/x00r=b$,5RıdW#Ԟ݇Bt|P,X1q8BO O:f"nO _ 0pG2*=]_?XM ű32%L"$'`pqG aLNˌ-6?n-`ܛ2.w[P-MRRl0O9Bnཀྵ9 R>ʴ/ [Ll3:Xzy-<*?طgS+0Ǔ0o8Tt[R}vzjSta/ ;&8  Ŝs/Q՝ l7Dm҉8Hqf RY#[{Ia "",^ƟmTHD 7K ^e f cSiflxs JVk^µIm?n'50p `S .)ڨ󠢣VTOηi݅؅!䥬 9E8䯟*K;ZBI;ؿGKamSQ*cO lhƪ-YRwrlYXt&Y]B|2sң0ۥސ\hA@S$fM/ۥ~2qJ͖(k1Ѵ=t}@-Gt%T+k'v+GI{>sS!/i_i=́>\]ױ~ko_"$1 ffޛr$%9T_]؆\#{5rY 超,8" >UDH1z2J p)W gwH#Ax\+y\m?I{]siѦȦ-o"mo*:8HJ Z4QvKC̸VdD%+0#2]R"ߋvjtrx8' vREDۣ| RρѶI8k:tErwaT٬ Ck'r%l$z%䯵Η29Ϡ0O.^@OOSECnkS|Y{0r9:J6L5.;ϔ@B.Wf0vC.=H$IхWޕ baOUNh7qIMbY~4ꀥ[oJ:&}@'.=7N=q7E ,഼~eԝf1l~WdJ@ m<5oٹHռϯn jM+1rٓ.&1maa=PexkH'0dvM7Uc/Suh,!N{,,.]2ld[ ˈx#{UZHzc1>PrV2@,ZL %aZ߱5j5'WDE}AL)6MgN}7JґFe!vPqn]ʳFey$U1QsT3SK֫gC S^dPi-Ř%!@'ֻ[!~̭;IM2L"WC@+x yI\"ij&1¯72S(v1UN0KEΫ@J(jʞYݘ^(ܸBF8-Do.h^ݜD@k[A4I: U܍Fr IY26 ޅz1\^HuM+9 uYt~pT:we=ዯ6a"7=[%l1p'7j=_eH!e#P+zra˫@F YcS[um-l0~<6޿MX?7tba( NS X%be>.gnߍmX]o(&S4Fڛ4joOsyS<ԛ>Z|^BV./2H Z 2F.qƅz8oFۅ@Pڊ}nAf!_R⁩+*g>;A'zk7h(gLCߌB tQc E~\>J py/S+(),v%0gn}uOiKZdLbt{ֺG i=w@w`6-":E b,@sNX2QW{v5}Yb3ߡPI1`'O&ciB*Fmҡ/yZnW> )hLQ:3=a4g[L5old0 ОSO2皲~{ol?_Aфݮ(--mΤ*[k@қ7(Cܦf b51Rz5/I  H<0{$_7p5dA Ĥ BVҩQ 7 `dA\Sg:#b"?;lx6 MCIT)7# Ոr/ fM'Apmz8CblCl 2cV5ns[ji:$Vq@Z^}?n$6skv^pmqy)r9 ˆpVS{b,`h 6bA^=EBy枸H%͊Q9M wKyƥА7||2=VU ϻǷ'L%c̑~8͵W!#lïhe[i R+58D?mX{oNMϗ&f  ڑ[G; SϼSBNNkt\O" @z䀚'mƀ(tbV1.t:Ç؜^AAqKֳ"r}iU\g, 669IBvW)I7OM  EH7IYm"̀jt|(ХbDB1Bϓ&6T=GX=$Υ[DV34x]3w5p`*Ȝ 6̽Wa G.jUմ|cOc:\X 'xi⚥b+xq0kngy'Vo&%Z? HoQz"tJQ^#JjH딎jB>: F{2g"Xkg /u}fRb=b.+i/OlOa-:<ڣ^ ml~8P}DۀӁlsU`ի7n lY#^|#HHlVn$d}$ko[ǔ2/䜋!Ϣ@!H[g2f8Xuu]O5w fϑBB+ݹ/S(`쯠~7?O '(ts%y3y˧{̠{QĉRHr?r]`,5/m"cS1*8>L7hf#nZKî86N vo[ȽLcR^ו1שHM̓>i6 i x6FxH|ѱ'j9oASR 5|sH[f՜/goο!jr&w2*#pڰ/݊+&s3"'͈`ۂ i27'mZ̞jlQ̕! seT 5Uv6%Cd>&,'ؽX:]QOaFיPJ$Nq݊Tͩ嶂HfN# ԃCvbgL/e r0t8vZi6"w-;"MsH_6n"7T1A'1I1j؊$ҴE= ` k,:T %ʦv6QB86xi:T; ^:[F?*_(KFi]- =G""T'NX*{^bƶp .d)mn 4^Mpۦ W:i`<8iƘ-h3`׏qVNkV6J)]$t*)N7!8z ipfF~=ɯy0IYsR2 S]t bW 'H;@7N-'ýW^̒wrHY ϭvJuxs\^ Au*z)1/˨)"6L9vJ"D`fxi:DTvD@HY,L_3&0rr*.uylRiuJe|C/YƉ\ANżZt$n ,ԃ$?i w,-ypUٸ8~"̌ Ej`hХ8Gĭ̾]mޭc=Zxy+Qwfͯ3"YfЌM9Ș%Ҧ/(]@_<| RZ>9Pa&$3fwnAq+|T!.kF~vYL@2hQ}yP;Ѫ -Uw4j{[$Pgy# yׄ SH1 J^`5XmMz Bl}' h:Ν,@H11)pS֊lF 4IOmAb7cOڡ}"L p~Σf8u9A #>~>͹ r 'B/@q w }j) LAfɣELՙeKYWb:-jH ]'S=|ǧl60#v]n Yˠ_}Z]k9O' f%Ж($Y`FV !ԜÊc+P;6B[z {O⍨3 h /K%9eez/?O((6*$V0:T?7Lokxm(㏅AIVT.w|:%A'hLckyH=:HZn#Y͎{nxd;GUOۚ}M!P^GTYV},yY5m)|b Ç6%BgaZޮǖ2'CG fV7ٕ̌A,!8XjS #a[S`lgo[IZZKf䄭% #&tФX&\-ץѨ) _ך/[R Kpb[D_ )x܍%XO& ,Z;rя& ֛8=i/^a4Hճ*GƅM*Xy?DZcH9-ssm%igl*]Wq+EӫN1q9UE^QJ=0q)hՀg+K4EП>_-[$hC._˳wcM]'?6rt0XnO𾤕??B LmRb,K<zrD#6JV!@Ys'|څT, z0L#|ߝ4bzҴQ'y! դ<)?VsղN.xn)Pun-K=m: 6%T]cgK^ ͬA/=cN*[~Fsy>:8yCCXyHϑ>$qu_JD+0c:'/f4X㮏bŌ0(pme2xsDORnJjNi8Ζ5]NG=ᖭ_q TCfNWgv>/cA@5ase^>;ޔ3^$tDMe`kUe)gЋպKBio g7E~33d=y]|4ɴ Hyڅ7fXLyfni g9V_HHQxQQgw6pS%"sZA/#Yt祁vKZhI) jJxێ6DZe(>vn &w?! iAT4#k$ȩv]\Uu쨓?2Ϸ.N+ZP"ArB3>Y|BrLBOTj_{=I@{!,7e?HL1-~{jh}P?KdtxCn]<~GX`Dn썖LARWNISJۑbu*ʶ+krtC)GC*XU7I'}Op4RvG&TGGo9#\8m ^H| .Xg*fX{ ڼd":=rv߿W=6ӈ9Mr;ÂIL 'ook7SYH(T?ᖍ;wSo[臁Ӊdѻ"*¤`YX67Pم'Mt_Wf,DBʊ83:wŘdOJoK| FfOu>#\K)Wim- MXA*3j W\Bn"Zk[!2%:ZoNDi(6XC}m?>BE{u_A^UQUbBõ4n>:VM $Fqx޸2Kc1BNFSg-+j4)>5{R6q 03 Kz-OWdKPiEsucS\L{Z%Zkyra#qZѳe1҆D#h܅V*m.řn8)#䞨iS.H~` 87)Js—: ֕ vR:tbn}إS\Xځ%n[? %vk\ǬjpHndىle,Ad- jHL8j$uuta /F a `VLY8r} Ӧ.˚uA)۽79R΄sL󊺨 0>ܡRzYw9u7J$.!'ҿe]&nMؑ0sp,EDs%K%*A]io>aK*:0R-7}OaHwM|+˥ bXg Y7o f4t#jy/F||/\=@rܙ&(u5R7y2zqjI>=EuebdM[?VJ'1#QyB[ِ  ga<>SEˁNJ"tj,:$?tlw@]T90o@#N)`FWfhqޡ@] M:SR?F80nӲf;qrF!i)]+ۂ'i LO:IkrT 啟ȣ6լ9Qt2֘-T ;#0I5Qq'?⯌񬯠w y_$@UhijH ]*8}o&C[^-s @W;LfI?00qHqj$|%[HgMEuH2͝Y<.Z*"8eۘJ'w/T?!$Hc?w5jˢUJ%kI< [S B ?z^#+T1U}(EDtXPiq yۆ^٭i1{6Rs?vtBWηNҤ's?w{AЈТ\>}X.Er3^!S[EX vz ;jO+7vXY!mVgeA~ƸHՒjpȣf0)ծ KB'f }e,=kEUޥkȆt|}q)!<Ɣ@s|_$|¡,]9/hۯ<4Q C',@욦5#>MA?ٹK >0`F . HO *T{/{yL&m'BUϧF׈p seR݅Rm׎(iPSAbz-zQ0g@Y4ir v6XCܾmSyWy?'T%TqӶIv:V|ycs88fRU0BZixťgfՔG%qRmԳ]!hZhvu S{Fnޚ_M')_EkڐOy˪I@x;__ömLEatxa=zo,e.S }E.'k ՜;qt+,8Bj1pClf%8In<9AMjq d-kaTOޤ(%&] (J<ۑ!x"W3Ai<}\ 8ȃYcKk N O&y&// S$73&(al{tׇ4*n壾TBhAwqTGD5\TM") ІOيdԫ%* 6@C>Y%^a@#d^VT!ٳOh Nqv̮(}-₇Vū LlX4dC5x`#EU:0kvї3GV(ET#1&D=??q)h||R2SBsfc/7ߠK2V]:;i=2=V._㪹\E>H*`%ynn0)TgJɸm~h$6Ҥ&Ϩ}%mwqd oLI n=Dd "9'^;PN7_Ry :Y 5 0 L 2+X>m8. ,^Ҁ' #ʕ`;׎leqnǝex(>A[se>KqB{lhnگ=P:{l}z (+/lC%nxXU?x0'w>H'z.;H:260<-Jˈ>ڊ2alw 5tEr쇝#~=pr؆vBcCy>BWgZ B40qxP ȇ2oԉ cr05кTZQc.qN26./3ƻprKxΗA͹nS1p M'/]|0X<?k'<8$ bl`O]fGQkfB:9B1jĴ?TU.jyܐn,9\ѨOGP@"w 1&UY~qBkE<СD\9M:7@/ flgt#IZUo5^g ıx1jEwh* \&ehc4O-IJ9e:a_W8% ojv5DIkPviz%( \ǶM KEtY:(ަ}C|{ @ Iu>DR|4-YZ;iR׮7Q\Ct>3e!sK~kIA&*:[= b/rM@ua > 49GRMUfA\gK.8S ?Z6"x/.u77Ƈ58b8>:Wߙ3-c/DEv@f }dK$,~NxⵎZ} hH4FQwMqCZm).H)x""4+ʕZt"&7 d򮣜 ѹm0Bפzჾ`2'A]B`iڗ@>Kʥ1":5g{2ݨC 0r%Ӯ{; #ܰjBCE[-xW$&Gh]!N+B(؊$=;[VwdoXljX-4\JKudկQ<*w'yaҧN, ߿-GyXX9|_9RnA;#Ĵ@]⏕&f`0mN SnjV 'zbQ~e'޽`jRݼ\ѹ3Iogq),K"HPޟg\w,"PwXɿS$ Y}Ү(#X8i;=9̉h 46y@rv@Vx\J͇g)ISKM8~ĉ At:ߑIs̝54;-5NƳz@j%Q;-uQhKWDJWZIz^mvG o! Mu>Accnd清~{;> ,"}oƎ|G݋-wb3G5Ct y^i⭰oL=َQbL4lM~#kuđ0?KcdV.Pa.I;fNyU|Ҹb,rޥn0VUr35R'=,ԒRT¤{zjnxW)V:+CQQ:[QWsbZ-PuR%.&&h {2 ?L}G4F*xݠ 5x3j,e\: `4uWi4)R uFYX2TlTUIyϙhf}qd||VsBt؅&wMc[e@|9͕T$j$BvB8c|,vRUo?q O^oӫYQCA4x/5ЪD3dTN1k37O>АwR˯o 2-}ğ7__-įhaDUu< #Z8fg'YrPP't\BEa2Pދ"&׌QXkY{:ChC1yW[!tٹ r&@tKZ|/":i_M!o6y"B[Mn%pl,q.q 5j4;ߏ|향-a_ytQS|Yx%cRNgNLc*~0/ԕ,Mt~I͂bjd,$A><|; Y+r3P_^ gr { ay ;ْXUwPN$*3az^I0vjʉ;nj6VZcjVסn:N֑CCHy^Rj8p94sϕ接~†!w7A=k$Ԕ4ALl =:4LsoA**aT+2dķ-,Q;lY[ MU+5QAA:WZU =Uֈ'`cegDݞ,2o;E+C/hPg J-%|-㑎FM*H` F׽1ucβLCDšuS/Rf^=:/J O5ųJ)f-K{QjÎ.~=b͛a7FBw /u(9 me4Фdڟ\1~LPx8xʵx@_0`^ݕCO|wEWv[_u_=d³.&T|(uC uH8 r-DMʽ^Es5"9_R=5y kƔ6l&5է& eX e8#V[bu$K22#veQl|N|鞁T=##>&0ۈ@jU;[Ie0o뀇,)0oS ʤфCх(R"~+fQM`.HV>Z~C/BO4e1-HfQ 0!,W#"2bR]oN>yPJ "GʼnQ1[6r21d^V6o#Č+[n#u\8 kśL#_ :EkP?;-4PKkQLAko>`&1 .<!r` ڂbRS2!%S俢l߆ a*Ih SŐdN[%e j|_tҕVHX. .9]4')ӂI잼woPXyJGy&^@嫘 :}ia쁼&v"a&+Lpj"7mP>U1JMP)"i먶H 2Dr1%. XkEP5yn"NxD6wX7'0ÿYbƳ'1c"0)"`An۵`PEWΫO?1&ϐ뉾l&TUz !7t ${0Rm,JnrfJvl6G絆D'C<2 'iI?[p=V@T&6 Jn2*"Ry18q0,H.>x)FK=+IPŷO^ k-~z-~[נ1O?8ņ&PwR\Qυ #%^<'~"!|u !FlgXL𳪅Z!=g 8:!fy&:։"8$\?M4SrNJ' p:SXނOG } Y{{t4\m26'i[j+٫u3HLv6O?! yi46a-p[:k`Tha(x|ૃ!jH/:ù}61.trb^^vmy7FKVxzGiЛO }`j\(îqL?&|`>+lP@B`S;),+HJ%x2zDVer@dZW.A޴~  E Ne%"T_^]Ȉu̓)vm[쑡^Q`ATz2%aDzR PQG=S\4r^h{E%6Q,:RF I欔 X`-<99inn{BGw`0a,` 7RGDZc{N !b?%Ufb |WS #aD9+g9iUEf֍?FU&I{ ^)^;6ahE ~T*˚n"AȘʨb7-F )td_J~D)WyAK8 et(Gp#)E7B._EO{6M*+ˎq{/kAշLΆ%vcLMVT s?9JNAIp w{џ Wmԧ$|1;]bnWx=:aImf%I\fh7”'e%&H+%1;q!B՞2n/Þ 2 "HG\} _GRF>瞬o) (u2pZο-Jz;邇X $$YhR Tx7A,tj|)esZۜ(`sMJQ]p }Qil42UlAFH7^OgTI(\Q1Sܰ4-}!O چaٿ7mF t@SbPd>l AƊ(]j*P٘oڦogq0K$>6z`IJ%ǧK^]N$2ɛZ,wQÓ. h0񊦆\ Oq w◴s MBbDVj  Z^ا$b#HKVlB I]*I'4Zu1?*6qx;0Eѱ(P ?;O7T{)6^<]eP_.߫̆N@2tپøT;7}Šq!Z]IzRXRUAe¦IϦ(CH2 7y ]j?%GriSDwD VA_P)X-&Ѣ<4bkE6RT9Ms卺NT}EE$q9ul&f *b}g2FB} L7ܳc}0Cqx Ԋ$F{F`b.MosXP.!U#79Y*^4~0CBJh\bl;SӸlnVmW­ʿBlXɚ" NZnfPAko2 JuGL09>ф7IÁQ;B;:A~U(t)gBh ]kSA'wr-Fn: k?~Bf'|(i~ Iy8gTCDQ{!X&Ǔ- SE}¯{R:Ro(Enk9b l\=.R${Zk;ru wd'˧F0^>F}O2жCʈLR` 0oa@k9o"il㖒G y z7eF8+אq9CY^܏H4&U$-'#KNm/nRmc;ԺaĿtf;h+ sT`2T]kY0˨Ujpne ]k<tYFG}ypJJHIVxNn|<*~EaNuaZk-TMY?ս~Xd;ҡO􏖲G\9qA7,mb0zoXtE-Qn>ط珉sAsFn {,C]B٢~BxTPPG:w Ю]ُw G/q*o6~z EH66`;9RIPK)B'Q;x1t_^@Lys!Yci]05$f QP52`w)%dl}M<hx.%TU ;:li89z^1g=0/zk{޶U8$xQe:Os>o~[{WbͅIŻ!ކvF䶗eG~y5%=FΌr n]ГHܨ[ᣘaBǝѨLoޞr] _S'L^=baw8>wx'qPob} uǎa7y; Pٌ^#N,RZϮ'‹?ùQj(ho9os-y|xSLya i\/(!-#ذ$.t3ViÄL9}ȭYsD-i| 9/NY`ٗ'Y"I<ќ;ajz_ =`s1eј?.J 0Ns"&I5r̬yQz?s;toGM#H"*-gPyh^az9e[p2\bgx1< Aƾ0)"<ɴ'qU؈giP5*6S jFA+v)/,=C/okOZU6= ӅEV ٙIjtܹY =?T 7L-WZ}qELEAT&k3>u@eCg4j~[ V57Y;9fI3 =S'NW9˹A83`hjM= ӟY[Ql?+dx[C 6UCn+ -vbcpVr:=.kcG1-R{V$,#Г)ޙG\´6LCFzZ휗p_]⥘ _̈10GgxFoѫs"Dzqb~L.ɤ ]"P)1> PF}Av1z1`S oc:X+Swn%p겹#3B byfe)4{I8d5n9h L߈e|7Nw6y$\S{u[A綐:Ҕخ$i%j$cLKa>V 4cڬ]oQyo.?W q * 1>$iX DW~{.C^pz*^3'_<^X e]Jn&T*, X$Z'&9Lo?P."%R8 K RqGw_Cu9=o  Zj æ恇Xr?K'JTFƢArwD=.%0#Qì#kep(ή\,."g OpSu!0T ٪Fe

IN\S*.=,0#74Sh3,,y.>5*}MyDMb6O&=9l ZzVW/s\㒊9\%S{7z{{NT4{&CerYLB@NsX1ڰIbay%~t'?_y3C[K#gOJ}qWt7Х;PL5͖K$S{}rECWmo-ӳ4#;Pцldf`Ѩdz) JTݳ!2Vj K*bq<(fH#43S^A˕lZuo4 Zˢ%}#qH \ |mK۹o#&<fG{s$1VL ϔ0faK 2~ ?لb;I! "QW;>yOqY=Ai"^Y^ g3= Wr4 6xr'CBYy{h^Sڵ>z26=`oyWdNgYΒܻaوG4~v^t; } b\0 cA3$Hl)Ιvl%58yG3gT\uFg0U*{(<1篭ל[@~7)(<$pl"q7&FF.z?uϾ0*bN~a= 'M'=hbX{Efb='gvC@q $ׄS@UWNt`3*_k y:C?_CW=ԓɋ40\:piQ }#`պ>/RĢFV%6mڧ g`%ʝ Ő}UR/یi]Ӏ`UKQEn*/8W%Vm%)=Y.&$UPPm)>X0;pM[SB?w+_sĩA=vSyLԃrBU,Xx={ tm1"`j4Ix?k9|Ýn6E_Ŝi5XQ)r5p4^ H7 G-l ]ш# i.t/l{M~w84bgוX{w3!`!O~]!1DrJD@bLa&<9s<J.^NI"%vLah68]oNvۃ_O簗B9fDb%L/蠒IJFp[-7GOCAN^%oQ!z\;IɺֿE"AA$lwU}122aKS`OkbuZv.n[Ԅ.v -GڔXUT~,jAuOKN`n/qGiEXX +^ ʃtF|iL={n5zd 5MUrRJqܔ;&Ô& POA p=œ]16 6n=N Ժw:wM~nvlfAZ'tΒ}b.t0ICXQj_p;BMۂq("X+ѭfs%\m+24KHPb5|9bC* .uLC]]ǎ% =W VC Rգ"$Jۏ P@Δb"eXٽFЛ T~4jϑe ]ɕ0aP xǘXM@%YcWN)'joT\A=&?]=6%s<8)r S/%Qr\g[U_V.p&7XuǙl)#ԫgRM:"eOd+c;f|TCfck Lf@ HsJ~ǒӾKEj ɧIhĨX g.rEBD@(I=#JR?Z9*#9C,Uq̏2+x%%r'Zù^a á) }=5b+x:.Ul^b$Ln^&+ y(=Ape|;Ɣ94܎ق ,IJ{_FN;d[P( 0pV;ayΜ/FvӾ2 )wm_l }!l_>Mʘ7v}ED;-Z:N VS? p`u $r.q+[[ϯh;b?'W&M.}6ɻIqCD.,9`љgs.Dsvt zۦo" ɻφ2*@{0̓e͂OspļfLbT␁_2z\/R0=ȅPJVYg0sW=S(@sd߳@::ƸHzX8Lʍ:0yb7gGuwv(@[l\~]LTjCT 4ɿ݈"ݯ."aŌD&*  J6 >byҟw W:,Ux^M0ԅEe-[Ӊ[+u̵ T")g|QKdO@-R?72hP^Αx&ZX¬:)yP:&AFD ៉:‷e^N晇7Wr:nҕ8lbRu7`㇢QhrN, ^2op ǚ~2FEkf!)B?Al42Cّv>YW6N!'\73@|yޟ o(Ә1[HR/RoRzdVL)n?d\i}+ <}ݪ=$xS2?Ӄ)Y!d㱕Ot y|T KH H gsvdA2*L;iI%|}a [I%uW~xJt;KQ\J\Xz|/8B{纐}pV$cVY̢Mĉy GRɌ8- 5,=Ͻ==~ev?I襦uH] vv!zsT=qP,=&+D/|&B NZxFf. Òer4CAa҃>B^z-"ʐ2:r@@TA*59Ԑi,P_}50lH^_)0]XF|7Hki1]2{Y)Snzf?Xc s3TQzRDXTL%2)P"2r>WX;L7h'_dC:nq L^ .UܜiKv~&+TN#ZKakh<}(.}=Lə\L@ TvVKbNc (lC[_5ϳ^pOnㄦ+qKHxR\$PN~x+f0[o3D(iiBI_/&&R/{ ՊA7aCd $B'h oGMF SRNˈog >8 ,w}UKXAb03*F q=K 0)zywNB@a) OvCs<†Y7bDClI;=g qXQDNK3t ^!j Q&?mZiAJ?~9+Q)E!b/&9M//h{"ഖ BF2?oI;2* za${,F8u*v|&oJ{FN5ڱd/B͍ȼ/6P$!N>Hy !xb|EDpM5;Ԉ~ RnVLѼostÜVpEK֐[֞@}&>1~SB)t3!P^W<*l6KS+tKc91. 8(!f׎vMuVevA=*ZAV}mɠ+y]~25J .>0 >Rzp}ã1;x 1T5H Bfgբ / z6* F3@(ASEn0dv81\/W*AX"!)I2)W,gŒYT-= ʒCB5< rjf *aP@, $,!}sC"'8T.@|/mPqxóYG7R֏Y|0(̰cc$!_4' xx-$[ r+: V6Cwur?Ыy bG\9N"iNsVm݅;-&KW{K) j¶QbC:]Mˀ3kp<)u}uO_^wmz3[n l#~Ҕ$݀gB쉤zrJ=QSP(瞣B 4:%IFf^Ae[ څ=U?"5ӖV>B4F%XJDE|yW\\FN󷪋+F鎍:`4X <0l+Urݯܟ;"FY;u"w8(. gJre#'5e 3QQh<k[Yp>N~\% - A1Cȹ+ǀ[ c#KMy;f.Cwi!I#)S&׳My}0{ٷ]h:g.Ue1754*n0 %ŝ :ڣ5*(tF#GzNWa:L"TG)HL焱Pi&A)pd+ lXuG\[j0K_7~]6 LiޱوÐkmV7 jA~sXNT:Mz]Q 1W",feGLEצ@5M)Wd>m Bm]Ɖ`*HKKoDS]gi%%kbT}{,!?wi ~)[0JB_;EFR49ieKa 0*dGdGmÆ戞 Ij Dv[v08&{)*hA^BHиE֜pJujKB |uMj0PP&d~Z po)*u 8ݫ7~Z9(Rygx',S_j1^o gMQ/O-|4łHhQtV! 9k7#6M6EXOMz/#㭛aaczs(?Z~UٽF`n+2`#> TF0K!홝BQ@y5(~ҡ1(p9CqQgT,gY.gdEßoχk3G,`zҞ !X%-Ǭv nv:9ЉXIx6 ;ETjFbi0a5^6(dO|1JP4s+}({魜p$ s4W e{FFApmrd=klV]ZvSm`^pVIZzb?Dm{y~،G㇦h`C iſ4Kghl{Kī -@1^].rm[EIf(SSk4wbK a"_QP4sD[&#;VS"N/R|b] u=+9=hJ 4`JieV#ZV?#;5'[Ulph*2lE@ s)Sca[\=M/V447S7`zv_i ݢ- Fu5c(_-nLo(j{ ,)y2b4BkyüiR+27ms4eA(lzXGp*W˼4hJL8eeJCv*/J_wП|{"2/o=|Ȣr;@AP|!F@s <]dt(wcMָv`wK:ZP8-Ӧ v-AfKQN6|9D+!L SoD2$qjN1u*Vn`c٭}Wt ȼ`(9WrI{f BuhXLZw-٫=f*ʤZx|a1U:Bah<-UfV\ dI'Av ȭ?,<1Qf<+bH]:˧km!, )q2fl\+`'Hv Kt®&]XqiRŢgFYWwoD_'#$ăZFҼuJpB߻Z ՎIal`}R!4 )2ӵ0O'wWl4ZX ŔNɊ> ٮs:gptRod~ /ƛR3={#/:=4J;jThsZd?wWG 2ƅ}xr[XYv5cE<+&0NdXpEh{uWzSݍ+c$K{{|b}r8 ^D "+meV(t ePG e"NT#`s{X|Yё!ݓ-_e^ݝ Ͷ ngm7{#t-5 ]# ESF8n%4Utr ꜒եٚXat;,KBz'>l]fj y~8$SƫլץqkRQi oV)^ЈJoY -ן"C^CQ!2<1ДӬd7R^mO*Q7$֨D2)G^4)myqq2b{Z k<ΡQҪ;+J.{/41$-m{v<4CRڻmfIEw]d886`ޤkx^eS$38)E^ GN6(T$sĽA!6#Ad`W0{aY>?|u8amlW*8y8nGVq1%fk 5U? QLQb/W&Z7џ}6o"󄰗]9~~AbuPwQb®D+ˊ͑R_#Ib3*QÆ,hSEpR$A(6mCnI}92BHدp%1^UXU;<5[6)n9;@jm P,Ժ+h$nz&-Ew26W+ 5ܶ!B sFt9&eQ+'ӬZ9ѪJӑ jh aL(޽ gLC0^QE9s$Кڵ];AԏmӤ]6g b"r,tG[ ׽~{I.RNsfWt+6ͨ#>e?UR11~v#F FBG5Y؆ʬ6XAHw=X'3q tz/l iy0߇~B{bfU: 4fCn܄З"}cӫcIҋĺ G')焫 xЉZvXop0Fڟ,?Jlw{" mR۹U 21S6%4+\Cm*rNü5Ts*vw<%!m#?[Y$rѳ֞t\ɉ(;q]qv`ܫn+ig6kT+D I Da3^2͞ (TK`FeoNKꬎt/Ot#&>y*- هMO(, t2u+S:^1_4!)N.4|XpF}2uqՆE<7SLS\]fӦ[Մg]]Pj'8 cC B9[6αAn Ҿl5o!vG'g/\܀S҅c ױJۓF=('VYq8`> X;_@"21%*bQWT'4`fe%KC-i&U2Ղ,%iNsNHfG_D5kQlH; DE7@갍1U aEr$.~ɰ HzD11G6Yp9 dr1rhz(7 jeFYĊd=k6sVB~TE|YrBn{Ms;DaFO0~_Fmvu1Nr4jm.B2e<@6DSyH_"qSz>ɂ̤LSQT;`is8/f&8̹o>Q't!sKlQމa~>ޠ-ehgÃa^@_[ʇ@\S_7TihJIS=]~/RxG*`]u#|XEu2aݱICrz?#i"v Dw7'+LP dFICƴ˶MU YY @S3v&w,#]` em%S-]ex: p3ߗ|B^vd\ ID mc*ԛPUSwn-Q`F)MpX=!HQ(k|gLۇڷCIsV- mi^D- Je~A`|'kaOLL qxKT1,NS', #VAgƗfaVI`5Bq_-'Ўa ߫ɉ\)]@$C,-26Uo%]jUȏs)&u3-j!ߣA [e0gY%X}?m vDdžr\_L[h ρ }8^6?&iC*5J qSe1n/}D N S-]ɐ{IwIG@jǍ^,6^p;ݳtAl !5w ~ŋb7bma \I;M⇔io:/)b>IdwSral ȭ¿25Mb+VN[`@.:2ٟC3Aרrx\Z5S<,r@_: r+"fMIg6V86R3"v{ޏ#do}'V1XW6Z2t狷){Y*Ņ/B'771BSPXr飝ʾ1zYǔڥx6ȇk

,*!J} w,M ҉MA DnX†tTV^+o|8G(Mg=I)K'¤#&WkMmԃ<%/0([BM5%e7.Qs?mmA+ȇ.&PnL,UPv0Z z%xʊU0㹰0)se}s3t}c Ǥ|LHKsݤ~DZ{@٠:2PXPGVR FjP9;u({'J:Y40 w@Yn[#h=/q$u;}>u4M"i0 OM g5}zAdv1qLK>*dc/[?*1ٌ/ppRX\ jxn,h8Y,O^a{>,t9\U'BFd\gS('렣2m Q7BJYesv&i,]Bf3xE(<[Zɲ,y7RE"j;ZM ́6ű5ҙis-TP ~x3}&GGtضG ܰðç$ Nu7wZhުS+4iVo,8M!w[l6жo%َH_Sho.)̗V D dm}k1?v Mȁ? :Ck)ľvI"<~DZES6皳x^|w!s]\pK5W :JFB~~m iM0U+r[W@2qi8V5ZeϧT8q\#[ax׷P7RzGz@D|4~G.!״-~#)Mϯ즛;g+}vDJDiΤ_mG֌\+IEįO5}^y po -U柆H O3Z}(yN;ʬͮ;ߴ0/Em Iy{GvXr!X=U+(.@iKwtNfEcjr]MX XuϹYK& 5rs5$cd) tg}hͦ{hȑ0*EAAOg/ݦa#b -$ Xqto ƣAV2 ӴFJd/7~~*ۖKQx V蘴F@Xzu( , tdskZfzx}MKqu\,NHl^Nk4N5HNoOlweٿ(~j" "b~ H!UJte4[U.pif1I1#,$$l#hȇEqo([*= p{Oo]nbnkߪjfքFSoBU _|Ƞ bK;>+*NJD?NrWB2xT؏tvb`wvnQ Nx(R^_EBꧬ'\]^KA- Vrnt[Ma)F3㬾hj˔ [R٣Wɲjq{l땈)4@۰/}5J–4$'Pł8S?\bR̓ڔC:YAr; z{n -5O[9Q᪪uPE$w,po 0>oZFHqUM#UDؙh9d;;v2F@VRl(U,-2B.a ,X{Gǡ&|0O,t#SuMz|vJ|m.3&e2ղ(]d}Mn6@|.y/6dH\~ZRk#; F/L>2L>Dv;| 鄫T%N[sKGa3'++F9/}Dԧ@éiS Rf_p# 'HI=aNbYb_4d?x26A'6&o8Jͯsگs8j7C|HgG0-=t*9FH{^7W9c'yOU ұߛ1v=m_ ݦr XОX_3ܺŐ(C5 vOI3;0?N[L`*iU*jtls0? ?|/W0PH7Tǀݏ=Fp' 2;Clx"å6([gݜ-j%<m([ J^q+ƛ7Qƭ˫'csm&1;hW+g|}$$NR0*LhυoG N92T^XL}b&XcEOXQ\U)`"Yށ7a׬Nr+A0Q]<0դJ隥p㏜I 3x92ovS8i6p\4w|oMh6L(laٷlM<"KJӛs:l(6mzeFng2i| ݯÆI3D(E8$$6kqg؎PkShObWK34\'M*uY{c֋1eӣDE3u[q[~,B6 $ZЫ[ J_/+&l<@El@ASqݨv&JIڵqXmZI%,exhb!Χ{cX^9\J3:8񏬂ü]W<*G9;p0J͏13)<^_-+.l)$7%<ܘméuL8mPndsYʅJ^>bAlbLߛܰ,c lGCK83" QxE;N H_l%>o1H}ݩsyPm[U~y=}z9h&8?h\;E"Ԡs1(|mS+t~Dz#pKMF=W8Roi-(&i@dB%fqQmE'kA {tLÍpyWws@ P\i`aoׄ+b U_ơ9@E:so_v|d<_.GKˍs~|bPvk/.<^y0OxaTQ7Dz'z5F0>t08/|\5?:okk=sF#모씐xsҎ :yALN$z8bl@ÓT2qcLq-|(iWIN }[)YLڛ5 W$KĊͧmd7 "r(2מ OkLpƞ,'bŻ!ndBlъtT9ut,fO&T1!Y":2Eo(77ea [i7yfHYY&@(UnJ N}Ao^{K]Tۈ@~_(CG\HQ|=ZY OD\CX&Ĕx&_yPGktg>:j25?ضaZ~TXCTh ϯOPLgbi޸0÷ʂ-`{^is`UPe+ Rh+n?fpL_C5Գ֫d:QlSFÄD#4Yv<&ir2[\H)U?goTSCIQ2<;v≣m4gWE#d_eES/ǬVh])}!I'L1_9ebFjWǷ -ϋD܅3"T< IvӰN# @d/ YZuMJ:iX~6-C2un/.E@/Tdt{ 'A:XLD\N"g  ;،M̐κ\4I ](asJChoXnEs9z#1T`(gH%uwM(<[b9fûW8-,3t|~2N}(;z )O*80L#+tݚDa|Q >[yK |Vg 2C-m7p[X9y9Z.`drF4Pɗ:N^;F8ژو>6Ɇ'I1'"W"'HinQY6SG\?!Ps:Ll~I4ӘQA;|:B f|vq {j+-xA$1KTyܹ9&S\nٳ}&ѼvV g"VG(NօuKrQixF*B;9YZ1]xotV^Y-6Mϝaʫky?ok ě;7 aiC_7Q\H5Uq6YygƁ!̽LḟzDI>d%3{`M,n!P/Ib;4߭!$&s[g3#Y" ̔6Sǰא-@W?T !٨شO[[)+^eIN8n-!nTVgSҸa>'Z^j9vTq<󇃯Dcoh, 䔩8Szi[LYBVZCΓ-bsNb_ Bn/iE(nΝCWcIICJ4E $9tsM ?sA`sOu^F-׿t4`ƨF\ѣryL*5MАOJhOqמPt6쑷~eğٔ.I;)#h)@$X7щE>23阼7<7,cpB!x^F4dOԭ.B|=nHyr-z@66'sN AQcDP{w`h2d&w~RIvf̿Τ#IBqNSfBrvYTB !2Qfl|\d p\T xWp|wWO:F`p:k37"|ʏC(r)_v:: YZ