libsmbconf0-32bit-4.7.11+git.186.d75219614c3-lp150.3.18.2 4>$  Ap]鸋/=„\JG0r7.L*Pӕqtd_sVEI*T{i.~yz!Ub5MRnQ>r,a7נAT{bOaC}*,nQȁO^NvpYGd9)vVU%qyj36k= ripq̤o$bloxҳ9/ ?ZgTʒFGKNÃV2O(_g#EQu{aGIc7c0fe9149861d6bf8be96d210aaa3f33f619767493d635ec2980fb6f3bee62f439ae4f93910fc9989565a01e9583b773a10f4caMĉ]鸋/=„>)z:m)N+GOOIp#R#o7w{ؑ& )AY*P",tU,"Nvq{Ծ+.$x"g+o)XTوK$;z=ԾXBDA4@7ۺp%^,רQ]zMˋV '(komjxGM ~ g#2'p&+lK^q[D[5Q ?cx6C" Vr*o3-2c6QʢjhPMTc##-Fe y>p>A?Ad/ < Y .4;LP R T X  <hhh(V8`9:"">=#G=,H=0I=4X=8Y=H\=]=^=b=c>xd?e? f?l?u?$v?(w?x?y?eAXA\AbAClibsmbconf0-32bit4.7.11+git.186.d75219614c3lp150.3.18.2Samba3 configuration librarylibsmbconf is a library to read or, based on the backend, modify the Samba configuration.]cloud133 xopenSUSE Leap 15.0openSUSEGPL-3.0+http://bugs.opensuse.orgSystem/Librarieshttps://www.samba.org/linuxx86_64/sbin/ldconfig x]19617c9dd64c1b1a44871707d7763227084db096f1228e5d5b37c7ba34d7b850rootrootsamba-4.7.11+git.186.d75219614c3-lp150.3.18.2.src.rpmlibsmbconf.so.0libsmbconf.so.0(SMBCONF_0)libsmbconf0-32bitlibsmbconf0-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shlibCHARSET3-samba4.solibCHARSET3-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.2.4)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.5)libc.so.6(GLIBC_2.8)libcli-smb-common-samba4.solibcli-smb-common-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libinterfaces-samba4.solibinterfaces-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libiov-buf-samba4.solibiov-buf-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)liblber-2.4.so.2libldap_r-2.4.so.2libmessages-dgm-samba4.solibmessages-dgm-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libmessages-util-samba4.solibmessages-util-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libndr-standard.so.0libndr-standard.so.0(NDR_STANDARD_0.0.1)libndr.so.0libndr.so.0(NDR_0.0.1)libndr.so.0(NDR_0.0.4)libnsl.so.2libnsl.so.2(LIBNSL_1.0)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.2)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libsamba-cluster-support-samba4.solibsamba-cluster-support-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1)libsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamba3-util-samba4.solibsamba3-util-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libserver-id-db-samba4.solibserver-id-db-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libserver-role-samba4.solibserver-role-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libsmb-transport-samba4.solibsmb-transport-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libsmbd-shim-samba4.solibsmbd-shim-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libsys-rw-samba4.solibsys-rw-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libtalloc-report-samba4.solibtalloc-report-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtalloc.so.2(TALLOC_2.1.0)libtdb-wrap-samba4.solibtdb-wrap-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtdb.so.1(TDB_1.2.2)libtdb.so.1(TDB_1.2.5)libtdb.so.1(TDB_1.3.0)libtdb.so.1(TDB_1.3.11)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent.so.0libtevent.so.0(TEVENT_0.9.12)libtevent.so.0(TEVENT_0.9.13)libtevent.so.0(TEVENT_0.9.16)libtevent.so.0(TEVENT_0.9.21)libtevent.so.0(TEVENT_0.9.9)libtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libutil-reg-samba4.solibutil-reg-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libutil-setid-samba4.solibutil-setid-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)libutil-tdb-samba4.solibutil-tdb-samba4.so(SAMBA_4.7.11_GIT.186.D75219614C3LP150.3.18.2_SUSE_OS15.0_I386)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1]@]@\\@\ \C@\N\}@\o@\\[[[;@[z@[i[6@[5@[ @Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USaNoel Power Noel Power David Disseldorp npower David Disseldorp npower npower David Disseldorp Samuel Cabrero ddiss@suse.comSamuel Cabrero Samuel Cabrero aaptel@suse.comddiss@suse.comaaptel@suse.comscabrero@suse.depalcantara@suse.comscabrero@suse.dedavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- Ensure we build against correct version of ldb; (bsc#1131686); (bsc#1125410).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- CVE-2018-14629: dns: CNAME loop prevention using counter; (bso#13600); (bsc#1116319); - CVE-2018-16841: heimdal: Fix segfault on PKINIT with mis-matching principal; (bso#13628); (bsc#1116320); - CVE-2018-16851: ldap_server: Check ret before manipulating blob; (bso#13674); (bsc#1116322); - CVE-2018-16853: build: The Samba AD DC, when build with MIT Kerberos is experimental; (bso#13678); (bsc#1116324);- Update to 4.7.11; + s3: util: Do not take over stderr when there is no log file; (bso#13578); (bsc#1101499); + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + s3: smbd: Prevent valgrind errors in smbtorture3 POSIX test; (bso#13633); + Durable Reconnect fails because cookie.allow_reconnect is not set redundant for SMB2; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + Fix possible memory leak in the Samba process; (bso#13362); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add virtualKerberosSalt attribute to 'user getpassword/syncpasswords'; (bso#13539); + smb2_server: Set req->do_encryption = true earlier; (bso#13624); + s3:winbind: Fix regression: winbind normalize names doesn't work for users; (bso#12851);- Update to 4.7.10; (bsc#1111528); + support the new v4 Performance Co-Pilot API; (bsc#1111374) + quotas don't work with SMB2; (bso#13553); + Build failure when quota support not detected; (bso#13563); + vfs_fruit can leave lock records when testing for netatalk share mode locks - causing panic; (bso#13584); + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests; (bso#13568); + g_lock conflict detection broken when processing stale entries; (bso#13195); + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540); + NTLM authentications using default domain/workgroup stopped working; (bso#13126); (bsc#1068059); + vfs_ceph lies about flock support; (bso#13506); + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537); + Durable Handle reconnect fails in smbd_smb2_create_durable_lease_check(); (bso#13535); + cli_splice() fallback code reads wrong amount on termination case; (bso#13527); + LDB 1.4.0 breaks Samba < 4.9; (bso#13519); + samba-tool trust: support discovery via netr_GetDcName; (bso#13538); + samba-tool domain trust: fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + conn->vuid is invalid after a SMB session reauth; (bso#13351); + Durable Handles reconnect fails in a cluster when the cluster fs uses different device ids; (bso#13318); + cli_splice() doesn't correctly return written bytes as it's uninitialized in libsmbclient code; (bso#13511); + Threading support in talloc_tos() crashes when enabled; (bso#13505); + Incorrect talloc_stackframe handling in python ACL test code (make_simple_acl); (bso#13474); + Fail renaming file if that file has open streams; (bso#13451); + vfs_fruit: delete 0 byte size streams if AAPL is enabled; (bso#13441); + Creating missing remote databases during recovery can fail; (bso#13500); + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499); + Fix building Samba with gcc 8.1; (bso#13437); + Uncaught exception at ldb_modules/password_hash.c:2241 during new domain provision; (bso#11573); + "net ads keytab add nfs" writes only one enctype with older kerberos libraries; (bso#13478); + VFS modules that implement pread/pwrite must also implement pread_send/pwrite_send; (bso#13425); + vfs_ceph is missing async fsync implementations; (bso#13412); + net ads keytab list fails with (smb_krb5_kt_open failed (Key table name malformed); (bso#13166); + s390 and s390 needs to run with 'use mmap = no' by default; (bso#10765);- Fix ctdb_mutex_ceph_rados_helper deadlock; (bso#13540); (bsc#1102230); - Fix vfs_ceph flock stub; (bso#13506); - Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); bsc#(1068059); - Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048); (bso#13360); (CVE-2018-1139); - ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140); - Confidential attribute disclosure via substring search; (bsc#1095057); (bso#13434); (CVE-2018-10919); - smbc_urlencode helper function is a subject to buffer overflow; (bsc#1103411); (bso#13453); (CVE-2018-10858); - Fix NULL ptr dereference in DsCrackNames on a user without a SPN; (bsc#1103414); (bso#13552); (CVE-2018-10918);- Update to 4.7.8; (bsc#1099702); + s3: smbd: Generic fix for incorrect reporting of stream dos attributes on a directory; (bso#13380); + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous call; (bso#13412); + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457); + python: Fix talloc frame use in make_simple_acl(); (bso#13474); + winbindd on the AD DC is slow for passdb queries; (bso#13430); + No Backtrace given by Samba's AD DC by default; (bso#13454); + winbindd doesn't recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Fix interaction between chown and SD flags; (bso#13432); + s4-heimdal: Fix the format-truncation errors; (bso#13437); + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425); + printing: Return the same error code as Windows does on upload failures; (bso#13395); + winbind: Improve child selection; (bso#13290); + winbind: Maintain a binding handle per domain and always go via wb_domain_request_send(); (bso#13292); + winbindd doesn't recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN; (bso#13369); + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair; (bso#13370); + smbclient: Fix broken notify; (bso#13382); + libads: Fix the build --without-ads; (bso#13273); + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids; (bso#13279); + winbindd: initialize type = SID_NAME_UNKNOWN in wb_lookupsids_single_done(); (bso#13280); + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call(); (bso#13289); + A disconnecting winbind client can cause a problem in the winbind parent child communication; (bso#13290); + winbind: Use one queue for all domain children; (bso#13292); + Minimize the lifetime of winbindd_cli_state->{pw,gr}ent_state; (bso#13293); + winbind should avoid using fstrcpy(domain->dcname,...) on a char *; (bso#13294); (bsc#1087303); + The winbind parent should find the dc of a foreign domain via the primary domain; (bso#13295); + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400); + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP NTLM2 packet check failed due to invalid signature!); (bso#13427); + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424); + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407); + dfree cache returning incorrect data for sub directory mounts; (bso#13446); + Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN; (bso#13369); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + s4:auth_sam: Allow logons with an empty domain name; (bso#13206); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + build: Fix libceph-common detection; (bso#13277); + build: Fix ceph_statx check when configured with libcephfs_dir; (bso#13250); + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async; (bso#13297); + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + smbd can panic if the client-supplied channel sequence number wraps; (bso#13215); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + smbc_opendir should not return EEXIST with invalid login credentials; (bso#13050); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + libsmb: Use smb2 tcon if conn_protocol >= SMB2_02; (bso#13310); + subnet: Avoid a segfault when renaming subnet objects; (bso#13031); + 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:smbd: Do not crash if we fail to init the session table; (bso#13315); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Bump vendor-files - Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);- Add missing package descriptions; (bsc#1093864);- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available. - s3: winbind: Fix 'winbind normalize names' in wb_getpwsid(); (bso#12851);- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh4.7.11+git.186.d75219614c3-lp150.3.18.24.7.11+git.186.d75219614c3-lp150.3.18.2libsmbconf.so.0/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:11379/openSUSE_Leap_15.0_Update/be996b7f12a3d56812e012720e2d8123-samba.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c4f62810e1b633f6779469fac4a28dac1f9beea, strippedePPRRMRBRR]RRaRRDR>R%RR0RHRURFRR R*R*X"*.{,CC6aB?UFFlIsMB !X8lXpR 6"qfJ#=s.- ;B6%qY JiTA`1׍ tqcH0I΋s)A^c!X.I᳿m#$'1^L9x+/5_ W:8ZX!q0G+G~d <ᆌZ\$r |zBOHr67#Oinb giX5X.D9 \Ĵ޹B+${3 ۅy`dM6޺mX99v[ %Uϐ)%J~й6] [c +r=H%Ar~רq%՞ª_ՆG? ߪOmj2:hHGt3x]+;@5&Yk`` psFR7 u鳃0$7U{%ZfdSaz?=]n@r5hq5ο߈b攦 {;۩*jB>{Lkb&})sV[Gx) MGeWGlMg"ap0 =ق]1Cb;7!|yJOA-kP \ C V[᦯rR^\ZSAqѰOl!E^n@/Y8cAҫpA]K'Ŧ`tZ$*9, X0)5r@x9 !)̙޵rkƱ7Y p.,i##6-خ afNRU.4ΔXgʎzoSEzW@KNZh{2qp+D5`dXš'$VT|jp{n y*z#q5K.QN04C0!Q:౬ǮЧ?3p"penk`GҭLE"Ӣ!lд 8 ^GM;u%C(rr(bY|l`΁~/bmQx'stsJʠ#ds<]ڣ*x6tM(\3cm3"/%h#-lVżfpE9 #Ig#enTPݤleyz!y,;R4GW$FK,o/핋RSn TVVP1 x>Ү5/MC~"$cR 6 2mdB Ex%GF[#T{y!)jl#p ~/)J>LwmH0Kq{ǻHnDo<;ƻ-wT/@?bQ h+=#\Js^mG/]S@)a D>HæFAHG6:D b{˨_9&Ξ&Q=䵧V*ojO|צŻ"v mj,HMNPW΁Ά0Ѕc4yt=LcUV 5`dn/JD Z~[^ƽ(3Fb[{ͨ5g(Ie`ZzD͞FB+T>\Htӱ8?RO>`|kD-]8RktKN&&yV?nS1Ϧ_`[CeJ = k y9@({{s0+c8ھYF9^_KZ'=rEKP-s /-f/ i?i7& yW G{T0쏜-;ȑObw?.ߺb{42Z9y4cAh/xb__N5V(㚁Il̖XoeF%G]>~aiqZb# ׬z{$,_(XzL>r+EHSk_V4GeC˒0I8hEB vP}>zqShe $NP7`ʯܬ1ϒ$^b)ҌѴ!?>}S:`ݽڰr&dT"a: 2cJĦ&N;wCEn®<8Y@`G n8㎲HJK6jޡV;4k$S샦Z̄͡iɏY]쨣4N$Xң-Ac<e@d|ZW <1&ٹxYE+u.#O~8CGcb?3ӂిB]϶e_ &W wR n5E Dt["p_0hړay(tPBTq`k~<zSCCFs1ISٔkq b/[ F` K*а؅Q5hVt6댩xdLS_:D&: pz&rj}3W彣X-Q' vNhxȾѥoe.#IZ)@TD&./2@x aI|KN@ 7*p[qƵ'Yq(b*i & MMl0+ HteƟ"s<}i d|k^Zf!p\[7-(//oo[6>hGVM7tև5ԌdӶlKGEQ(CF QSxUZhS 6 .9Y'|]1gl}`C޳c!R:/oZmr4$351C{*k ' C-\ ͢C*)EV䱙cG=Ǵ_zZ`IJ^Jµ[A=_QrY&P([m9"pc΁)r".?\͜Zx,.hdc)f 'v>g^JRA 1(l9A?DhoCU1/9/)nbعziEǢ(_\04'ejצ߆bAx9UEymUJhX7dx[jډjr۪bl1dI_MY `e/I ؅D Xe(:9f&˙)ߖ0MCAu#+Oėmhh!7ǥjO F̶rna*eW N q5|cB?[b 09䇭8O$vYϓ-H br+zu5j恎-KsGyr;r`{\C㷉P=Cqr=T?|e(0c΄֧w((ö' 22\X[ HM*U=m2y+D`u:l*/cAH_ ns8!?I-tN]`571Ga ܣݗB@bl8m6Hfߟ=k;D ‘+#^%G0G,n%U'2LBz(1$Ab.`:`4S^cq>q<}j+ qTX AjU0 MzN]B14r:jb~O!Fx| Rd]eYfY%|9N<#>GRzbP'uS@ˤ*km?ͶoM;\pÑ |@A Gh At?v+$Um;$yK?hAu@]~XŽlz%wKJ.8-n霞svv.AG}ݹ'qɋ[\T˱gwN `'Kn9ھJOG#e i"x]MVsuGyccjsJ]zms/[l:Tg'.nm5TC$;ddRS6ZY&ϘrgY>MtJ^'Pye_q}뫀y0=%ΨN6/qi~/]Ky6^uw5?{ CT+DQ<9ʬLf~ ~cXq*BmVLxP7W<ñ:!dE=G)/sh?h]|E펈H}ʅ%-v燍=\e"vXw%iu};Xt>ύLxǗZ;]U폳O  w>x{$O?0d6`8?saS+ Gn +搌X QGw`SAK@fpQw\ QG܈q6 ۘf-('ݺR`]}*f]7zQ9,dXE׍Z:R@@ԻIAGcGx>LC&?QЕB08ykj1%zDpwU+J\3EЖbeF5;5z*HFPmQZLUg< eX}AnIkÚ.l90{ -%8+E ,g蚮QN}۲$6h6 M<W:xL_@MP'$/1vlbMC$,8nwY;8&Eg,KU~  /3P$W{,Wre;ℤƭUfҺr1M;VԘ,Ib:S^ae1DµYjF~9Wj. ‰!ʦ7]oo; bpDJ"&crqz!P_ONe_mIiUI Fr,jp=cR{IqRɡG%'P&jKw%o FxOxԇ7?#2{;F׃B27 ,՗v,TiD~nnYaa֏%*v[FJ,YNgO#v~y2Jcoq`ܥEah[g<[_*HFڰ; (0"&d :Pm눩h,pwƻyJYѸq|}g*[ Y&m0s}=.<LtJ,W3EqG{Go%3 tƔ6~$вDPZ"(L μf G,i@fPٌzerlR=o.v$u33ni!gxju{@FKl6C,DU᤾:W 鰁 -O T2 qCJ|&8~.1ɇg9VۈЂ+-k\F:ePz ;57Uo 4/Gwȁ9ˑEj=)a-d"$ UUwdf mKu,%q9"w;'6 pŻZHi@ra1벬uVj*v Y\:\?؉Dkoex4i^w?^0W:rgYsֻ)ٗ['oLw@n߶9sS!$) 3(`2]{}>B:$KXF"GxF #=o,-&d+019PŻ$T8&P)s`1̊cK>zNEohOegT[%/Q< 6玥ʺ2n4 bÐL!MU뤁tf3]eAh0n).7^jh@UN0K2!# xAՇ)TsZA/Q*JG&vvav{ՒcV1gnhÙ83VVk~ o.xC&bWlQXY>$C}܋ xT/?*z5NpTBcEGW@'=02òDb3|]uI YDU5|Y--v+ew.X&Ϙԥ+qSۯٰkAl1z i\ $?{\MZOqJnL^4@2ˬ5o޸ۮd"2t`l]bMFX/sh&bЎ15XJ[6FGK.F W>$944* dTj؟%& ׈k'M 30Ŕ!,Ep&7M"-4In~lN 4K Z i]"& V\=u3+- m 4kC/ڿv4 yĵBLf.S?ƠGyTyR3h P?Q>0Ǧww @&1r2 ݚjL?FܚmJ~8NۦtڌPb^ՀCZ9[y?duRB /glr?S _'xj)@<]r_XTFf&xZ&I,ޠ Cn!MԠ#h' 4@/PrE tV_ۻRM:4۞wu4Xz4̤xR Q`I롦?[TfZnWD`164hay7YOQEbKUh؍j3Us'SK8ZoYP[ Ww>S/UW lPtm/ؚ,MbVU(@C2rm7j)_6X>7y +I*_JA{2R-yͿZhRG9xDLW>clq7 V rEme,qT{YT?Nr*0E+^ Kc!tBG?8UB, -hp};#B֌ o2ץ]_.\d0|i8}ksG1v"4R tȳGa,j_ϡ9[׮CFN5yj9B6coGEPBY12SPD~աmqQzM OpsD×@\YX&J0[+ЇĀIsQMөKۛZUpm AQ .;sä́V=BR pѱST wWn*h Cu/]A072uXBC{/a9~9f&F2e%wHlB<7Уd$EUǬݞ5Xގ[L0@#yzO=g[#j[#.tiFPye Lɡ?su#gP"vYF=1 Jirl}a\v.CjA> "vW7W$Zˍj'Jc=d{*Tbe=0Ag@Hmaĺ-dV":_,).}<Ѱ D7ŵ?s̐ N&h9#a*b0/*Fӆå (lT0 &?~k9d/Rݯ{?tOA!Abf~5LK4G+JޑK+PSc&Goʙ^`xD;{4*&SCFxԣdJ<[vw+-DXy iݰz si ddݕ/SG쩆^F~(NPMg5A(nc:G 8q'?< ^2_@^Ziī= ^&,,};_7 @)P?#su|XԭDJdnmR\΢U УpƹPQaO\XTA= YIv#NR5oC7?dbk3bND}a{JQcqF .PCTe:~S&jЧ~%*aTJ$B<B";BCTE_ iXۋ Ob,cѐ⛬jh F=aUB Rb< ھ S4čk2QL1:Iq3*:.l鏷wGPY8QhW-MjJ~}Xd]} 13F SR  /m,so땱X(Z;ſf.vu5 ~1w=p pfBm*l}̔ᣁͭCedSԚn7!9:=p]2O4 Tɭ6IsYT*տ9+N|ٮIJU3$P++b1;)& mJs38&Iq3MԵt`{A@_G}3s&AKlH:1dH,ҢQ[SzY@@S3oe ,/*8vPK\v\>"jOWxV})s(ÅN]|l'b6μei6+:ESi@mhcO_JOJ7h=e%3$ _fbQ^ Z}Ֆ&%V\?`,0᧬~UFR ƥJUêy,GzÉJY3u{u`e u nJ_7Ұ+[tBǫQ8#MF60*q\ }׳Pvd;bqu~h3.lqąJϼT6(gty{"Uǻ3ombW5 X8c~9kSRŝ9rtN RT ;7/mAL}!,N?KγB~v$B5\LFEéx6)2jPiXu;>fš២v-AA+a?f0,pЈ7yebn*׶;w( $6RIBx)c-# -R@ }?Xm@g᳍dZ&X<'vĆuI "| pg}#'(uz:IDYU;m:E 52S͐1υ+}_gЇ#m]v#~c// v-9O m;c\WB8Hu9v5GGl]aS`s<&]ȓ%OTY~3͘ {dCq3|FTUH*/0u MN.f?R,=DA7BwqMaXЌy㻑WW5%A:G# 12F96 =xhvw OLCt1x32@d7RoOOsµ' NIEf9[(cu[w2YtFDqtd: gҶ%|[GQbǵ@ǽ[-T7CxV˥IY ,쀉QK.p3RLg߳X++FWwJpGXͨE*;=[[>w57T 4:Lvӏa-wS$N KD 4)|$e0{煝,HmPc)TJN`+bԹx3ڗԍ5D+\`&#hV9U=<$Ahz񵳉]-&a3#/i~^?=WJ\gEF4p*IRgdzM . TDYN_]p ~K#$j֠9zH&+.XtO% p1WU^%1 E@^6t!֝@ 4fNw.Ҡ(rۙȼ;HS@ ESfHUU]KQ};{fLp:!]LxPR &Lc3-[5uBk k 8 :=pz~*UEMiI(B$v)(b0@O^|4%(RuD5HE=)5.w`Z  Ny5gk> pA\R?T/̑'OMAGwAr~ޠ etq ], 9kSi1Fԁ@Rfz_q, _OFoA4njF&IՑTIt>SkI-Yng U TLw9*[gO~('cӉn^ɧ?5@+$b7VژBw.ܲɳBHn&޵=-T7tԗ-d $PgFpRN">t#s`|ؔ`,ioVDۻ<$[& RӍ5mpN?* qQ0m)0|{ xdlKXѐ2ZP "I9b&qtЅD }" 2UPf9-| O} >cg:@M}*z;vY>hkؤ{'7mXo"y: +]0 /3>Jt>it\B ue59k;*k9>jWF4@LozHf2e),l]M!-T36G/=Pn2)&]7Tjr=AWIqvBF}ktd)ZJ"/yF cA-ڗĞћdA3= t3x4%ǬKޯB8]"ONU3{ %xVp=B4V.3Pv/}VuHo|xJ9MmLPxޝmL0n1*ܰE>ʠ)m|zc1f -aPŌ}KnߘFCh]ː\ ?&x48Nb 9s,v5iw뾂)^\ Iʗ4vK.c;3[U(텝]Emz'4ln59E0=="gf6aG8ķ>CS" }F1QB\wN'%XCZsk6z^$pt3h>er^ ':G>:{k-ȥ1FB NswB^ekX-H~4oUg2،347~lN qhBXdPN-^NA9"%# }K.RE5*rqspG&ny2eWFx'S۹)ݿhZCNgk(8>i)@a`xD@n7D#XNh4*NT/͙"R@!K7YR: >f-1˶-Cd8@Nu-[ Rw!Z">Xn$v|wl='9ezIfȅ 5~/O}R؄m4 Q ĵf@鬌U5PJ; ?4$x>5E"rJF^h@&Tٲ@Fc>zIP4F/ZL kU٭A8搬ijŁk M?݊(̋XYR[ =n.ԱAHa87R3@HpH3h‰t5GOq1̑"-cj}J:!7suk~9xM0ErI>j8H;I[$7tQee5ωHGr,! q<Ff1:@v\hS'57BiM<3mFԛV8E2f}'$t5H9$ u^:YvFԺms\W y:3li6 qX qZFm#; /S]Ս JSc\[)҃_)m&L3OS3]siM 6˛ ` š``Z66jF/aMcq߽gg GJsn({(e:"|º!Ҭ.GSrafK8E&.#=",`ZgN ՇYic@ HZ<'Hyjx/L6ϓ:m)/yMfpnQ 9OJ2~ٻCP)IW-z"F6]yTeppK$+2GJ*_bb}Oz~Ψx}ZmYxރ ~]Ἆj7/qjl4KiU0dX;\_ ꓂ "dw@A B}TwCYnfs·)܍ 6AS8eL4ɍ%lb.q3cX f/Ld̫+ǃB %Tv~V۰o$n ȁk6m}GoeǻV8i%5<-' M]+0kQYd&N^Ԕf .qx9Zb:1)_ՙ )'$%!F7]gMq񲫧7<'xDmaA俅4Sj+F^LTM͒@FvGQ;+l>.RN=vRQ$.3T1J#wv1*XMʳ!b-l֬2a|2|gTjg#y=_Tgn_z311?.~Pq'@,Wk;ք&(p|u mDiѺd #qK@1Ξ{x7"?qcȮjgԪ> K-N|[V'NtT%0"x f0 EH鱆HV+ړ̤bwA[V 7JO6sLoX}V|Fzi-ϰX"z4p')(c;h $T#IFx*AWv~"Fp&cqvu 䎼 &/DR|_#U/0Ҝ1i=N_ep4GHwXnjPlpp5g7\T*U܎ZkyJp^Kbh+t~kaIVB6Dv4F>ƀ8|l+)V} e6acTj36_,unᕬ0 ۗHyebGs$6p)eg8YWism^@-1d tfXL !*6į=d0]@=[5{\D;56L Y TzG)&;Ky4ߵcp0VfLWcH.r9T}NSzJ'\I{BtD*{?[#IvU* ̮>_~I;V7W1&?xw DG&ZgFQZd aͦ'tR[?ҙmߪg!#=&lа $Vq8an`,.!:(cՊԛHG۶(5·>tɲu2ŀ|uwʢ!o,0o̢THh}|d~;IGIDH>y+ .IY,s7&~6hB:vK[X롿PK&uOϽpDtN Bp(1wMgJb`V`~V m#׭ um+Cs!Sc3%@0~g`Ci7܍Gۃ4vq??IxT#3h$oOYEUIKVv $֕A^#)'i(|?ߤ%9t)JfUXqi"[xCu=U(p E:-VKS1wKO#6GXwʝJf94SŘE 9֯v|M;`9D$87L7N+n[(Cn\k cŀcrޝݐLޔ698Ǒ'ƭw>32qmɉR[ 7u8 =#<=Lռ;&yKX.aنqjOsø- n#ΓpdHPfŦN ('pt7BD߹L)G0ymJNn%.4tuf \[Nv&H!5]7·QX!wDq츓-_k#?{[vO@533*VE Y4[qd_n(]H6}d"0[[#b.'όR6zŃq;ta,³ o8AGYDt%t&/R!|!yKb,D~aa] 9&~Yzs*uIv!knX0f P||ǽ{뒕}9[$ri$Ml jSſq-=/'vvJ|~\ir5sU8N$OPDắ+})ޙBB˟/ԿD\t7PU_Ǒ7-ا,Z^!pU/9I/L|JfpQMC, gJLqDYW,oۍESQϦ &`_z8R OG~<4j>z3pxmu)s!-[yC&U ֎"gH+;x# IV#,ьcfS7v헉mۓ~gk"5!gr6;xA=ZS޶PYТ*_"ڀ9ʘDnܢeg4nrZs$-,y:l[*SE0.N\e{=<>*zɒ>R[!¡򷾁 !%~0p5,);v;[0˺8G D4ſ%^IXrHC9< ɕ䍧HԀM)(gQ@@-LWNQl >[#Ly]m@`)G>ߨ`?97qU $@LCCkm;݅:+0S>?En  Rkw넜WMd9hhNz) mi}WٓC'*HGSUh{k8)qELMRؚX)"qexRviISBpgS12‚'~n_D>LY@_l#({t,wzb44k k_*o~׎i)/|Ù.^!+?BbA IQuƇBAna(Fڸe$J-8 -ߝ4΢NtN0XBQ22$AӞyb"*4 Er@#_W ~8;281uRcvy`^pGU~%T_ EeCcylnWjXThe=d<;`sFwظFAL! '$4Jb \ 2uhYN_bǫ'LX@$ c6Dr)p;(ǓZ5^N`R*sK;7f@5%E.HF8*sI1"ByCАS%o޴L9VG3!#)OR|~h S,֍6'&a+BMWZ{֋j807ɒ YWp>"9Sd`)qlOodx۬<*3@s)f.WZ ų)fNڷ jf]mIݤJswt%萞xΪO |?D `B3C_WY9;3N{ fL ')g7cI"k1=R8S]brp7Y ]=ٛy~Unmڹc;j󴩫}iGI/:d~Dǚ KlL٥j:yWji")H8∮5L^V/3qHg6q]a.ˊ"E2i sQLV7H0L#ȣ::^+B?}<|BYPZ2(;뫧&-Yux;> QMo^FГA*;R"p;uWLw5Foeg#^\TRɞ3$F,S0,zh89)AQclXd|2'.fꆜ'Gݒu@p1͖''=ԸbvO@zF>4KA~*I'&ZFtV0*9D*jPJeDw:ePr,zi,\`CTzfڝՌ,R+Dž;,}ΔeBIT_KxW)U6^;>xR^u28hʇlS qH.C9JIPKN{n2AR'S2u #h hY뮒 x4'B]:mP$~*3`b$۸c!p\]d;RsReyKc'؃_~2 0T2#9D#_Pm4aW$o%>Q~Q) {/-W^'?aCgyO+uVeW2&1QDcЮu d?Sqȣ sHf'_S2[AǑOXNn˱JQiޤʀl SWC!{HO!|eYqTc+䠓Nd /FPM2HjGiRI2Rgk SP?Au@F88+k1r<@MYũ~魡  4k;t*[PpčF%B$V:.DGo $\( }p |ya[XJv. -(eW .KIH^I &vsyXt!k|#safKRPF6̭ח6ˤ;Jfsئ~BEX&IaN9|xh%+O=-e"^OkOb(#; ( SѠr r8n= ~'RAysUbƇ$DP$;# 3 qO^IY QmAũӶ/AX:!Eg5S$EGqVW3BKk|,ŋLwD-;{t74 `6VQ 8%k[:A濩#Ūe zp ~Iih|.ir ]Y|&Ax_],.sy=dGm_s^ J}X;ݜcsDΜ\V{ <sT`=J7 DFI8xgM= 2ʢK{6`mbK :KXj=1KqBFvS#ԸOUQ|Z +)S53̾P3-C.ɽD({l t[D^4VҘ0|GPնTu2(:Sx ˗mpѩ?ߟާ('lYYGg{uަ֥N+ G`hQo̺tbfcPח(UΔ_I-:~<~mm%D^E*`ά;~Cb/M9h[ =??t|sjm8IϷ(+JоlA+c^O+ZK=r<7=?`f R)ݵ?Jfi;\-gVD\kvF$O ,UGOF1 ʎr@ W?Ex|jsjA<=Q/N@)Fid(z@Ȭ}XuNX*StYc㈏keg*%MץN 2'2ĚP_Ut 澘uz9hg5*3)t xJp*OY N]K?5C2yOcS ۏ7IɌXf<׸QNO`UBEržCL컝E |1q(ng?u̱xc2:)]CH/gڴ L~s1kl1q-ETy[3P., Alabc0P_NB+/  a"6 nX{{fݜmʠF6P!>qK#w=1͟ C5= C&cO}p˾% ={/\(l;LPȆ0O]٧bK&0Ge7' 9qZ=5h@2ƍłٛ?_%|D+e$ǔ `qUxhy5eU^yד96XȮ~zJ{% S?<.aHƸ(y/Lo6=o1އtt؎-uW@f `V8۾:~?Ex$բ=P:B_|%Jh.TdP6yhNDz^*V)P _![ؚԌa7ve8o&eoG,ѦhQgQ)oN`ݕFq:.o\IFrMNV0/ i)vq@ Q˻nz,ܬ1/TY-;f'\e T[X~Q Sq A|~|EJs)Ѡ >3O\H‡&H51Qȏ~*@ Nuf?6U å5_e {G{ܞ~ )aA|Ͻؼr@LJ3?Sw'e[ҹІq; 6߷bjq<G#.:>nBr* j16MA гHiܓWOêK(q -8*zisPޮ,\)"l,MeW$?fg26)B'qP={׃=Y {*ҎO.mUNm-#j`ڎWvI}R«,ҧVol`E8Q. &2=Ȭ!͑3=?;%,NZsۤ BEg;< {ю12? pMnVr~]ٖN:Buo5`dG;^.Y/3[ډ-)njܢ61}uUgsyq_71< ؑt֡@rro?Oo@S# e}/*پQz am_ FYbN,6]Ee-a喿"U]p38^'7O5*^ b7*iJܤ5w~C$\;Oq~ކSمCFmrH%A^|eup֍#R#)w7z0YsP -!=B۵ ryXGd5ӗ4 _\d w>s'e`烁)Ux>2)ÁB d #̖蔃f=PD2k ԏHE2tG^< Y[;q\i3Hei Xd7dgY#C_&Tl&l%jIāW6hoQҘN])v{A:蠛o;K?a"gz_k($y܄(p&]=] Tv^[ f1qͼ4^ty2{Ax[IH »;n6d;XM*&X;$^I^vJ8*>p *J_oHyң65hiشTq5T({D_M"(>kB!u؆Зǫx=z_G= .GIvt 1aNyvsb>'EĻKD`z6Qg?!VzrqRkmvπ6?2r"n LkR@E@8d(k!Ä7WCӿ1)V,֞V68<&RSc,#x|clr:t:5wb"C d ,rդt][ʘ{hv>;b$qt9BɃ gN;MZ m74ѩnw.]'O-p0UuN.w!/jj{Ax#p<YD>.DK9)'t+r"Ux.!"Shzr%riPAp@P(PL}}93ϖZ9-["_X+'3Vw3 qh`qWo3eKEL~ -8wؓoԵbgD8ULK3ɘmPOY:./5n CSnyCzHF Rr,KHU z[3;Z:Az@K!Rɲ_MfȟxGSͯ{`utV.׵2D"{pp Z*> %c;T#辦ŝ%y.1a$ݾ[txB9q+6u %п#J1t;,;2̽8FM0Y{*9њ DB ?c-pLL"rsL?.f@2ĉ:ЪL=ae[Bϳ{&:IaM+;VnY \Nw>&ނԑY|Ŀk/rٙf7ϟSGm2UP%_Iɧ>.!cmg] 9LtGT*Tt!hS)sE0D\*tObkoR@ѲIBf1pd#>ﺟ« SJwY8†a`hĠ G翪[$ī:ye%@@ۿp&i.q*gA_lsq7jM"7+^^yLUJo׀<f! Lr%ћ1YOh 2 `|rv G5,y-N2&;Q8KSgmcÿSFѯ,%*aU%8Pa{a$včXum}dطEi"U|fwE,~%k瀧G3f:s-D(5 Oi ϰ;~kT¹WZ-'p P"Ҏ7O9rȟU٭sJdTiz̤{ TWo3ɐ(hfd0zy3g6;}6}@{p Bfa3F1d, $Y d:|4tjHlaߡC}"Ru] 6a>z"vPAJR(f qb퀊.I^oˈpHhF)8M0(ۂf?#RE+'4ɏQ&nC}?"cd#saL~=Php6"WCbHWe(׵<'WT bj(4zGk g`ۀڿ[=u`?ʪJ4֏\S Q ',ڲeױI 3~b *p\v[/)++} V _ G-9R԰38Am߁.{\0VQ ?6rz8(%Xɝ 7A,. m&j١'[pvR>,n;%xGF:UT7N/C?a":" t@]Z$bTvndqQody[gMus9p(.dEH`zWed*5D 62R M~lB678SkaC+b^Jd eK \ " *OLa: #2gF7|nJK>lQ1V<X!~ED ?1܍ň7TMOVM?F`4F|{^;ea.Yu1R|f p׷nwcVccZ.Iqm'v*̧lr B ,kXz÷#RiQ0oT;6Ó! tYLy ENjOm;&ms8 \V`_^1.&ۅS _ѲT &IO[ u.d,^"3pf9cL%94JZxQyw?1>{ؔ:K$NMp 2CkA/Uou-ne:*?;!Hs|[ GC%mkz\-FUÞRpgڈ '|pͽ]ڌUN@ڽuÊQ6t]Ջ:?RPpj22`Q>,m?CԖ#.3Pu3@_e ȆGmL(Fʆ^1)Ke71@*(kθ2h'dVh5Y)^XBA`>sIPV[?"/!ӆ&?^Wo]SuǺRlw|_!^I> Qܮm)bށؓ=rmm~Eɥ8ia{ŠfzGWQ K< "@۫sa_$цE`7c`^([mZ`q@93KT^͒P%I lqVlMTe#!Ea3z03(vЍ3:$@8@H@GVچ 撤,uDyAђ%sRG ^:} z~1q"Ă C^~8!l.KIAz (3k,$ JXWJ%1S|s@G,X妚b Č}j\?B^"A+Z#Ⱦ r"xD|#KBrQg7WAo=A)sϽмjMEV)Q]8TlA%Z$ueQ'MtMߥK#.#86ak}Χ7^wiv'._˼# 1\iJG o$:]T~#_4 dt.QXr=z;po\pRP ^($xT 3dT="hCqQtU)d˸S@{,&87C e&ofl"~f N2^\L)5qt*R' hBVa!yc kܠ_eVg;e$Jf,(S28?.qe~~u,:j$^dsau UJ2Fq_Oi6Ǩ2;'l#"~=>U-4\mRףCjei?kN# [#BKŜ!謄0L|y9vj8GDGI )u|siaFmbڀFV{UkUt u aFUSְRˤ(b}O73Ǐks&Oi(|aZo::j$@h oI-Joؕ`Eq!3\3eCuJ;曃e{rjHDo6Ar2 ;ĊD(# mi-53좊AO =\)6쭮pD)8jCӃ&2+ﰙ5k,66(h>F2@gE -uy u4TZϻJ${X1ra]AE' A)Ŝ9 ^O[&6R '}Ry@{prS'C#.J 3?}xUL2Mu$*$\%nH3pYR.h- (M#Pw=]Oɯuc"~),En;kbji#s[q u LB]ljynSt8]MYXNQo?$q[HKœ$Vo>a|gە^'@ K-fmk?"l9t)Z:~Hl~[I2Wn S^>qO$twўǍBϩ\PenQ;y*5ɰ6FJ|YFqjnO@&1 ơ9-{`8q=ڌ[eNa/ OLG'΃ye[7ᰅjW7nUԙGvoզWb1ﬥ 9VmcmZ{a!^xcGP[[1,kCh;\#{N}.ꉹ aq]CH:$E4]נlJ1NɶoOHk,13|*BhY5+iHnFO~$~]Ҕ Œ`SerΪm_\9!5_B!v^K7kEb?Lعa2gv:;0tgҤ;4"@ޛgQIԧSJ[0H.eofw bVAVY 9%i*:` `)li,猑C5F1bf6xD.&j f?yU4C 바ؘi)Tv۹}ﭾy*+d`G:lx`81F$O: J1Z#G̹]i+,mpfrJ+[q`I ++9ι5A2\8R.ԯxxo/Y:(qH@Tp*h%xn' 8[O ]:>2=%  SDFtp c? ?klMG>k?iy,WK(!0x2ߛ0+)Q+i'%f f[ܒZ%ob$ݻ2-N[]xŅ6qߖRJT*Un*n=. JOG8|juSN F3.8-%iZ&^(xEBi",{8]d,܎A^[Z.*df'CdZX iM"~qδ\4BHAJendՁp(f ޱPMV`A'zب0= Ѐox㸲ω}{Cva)h%rvH=q)# (13D?(Fy+O7/<`;ˢ05Bc/c,',ҹz;;>rR{e!}XJ'p6D)B qhEy2Fd-/fV UU?&?ZaiAh? 5Ʀ u͵l\@5`EpfYHP+ VG/Beӳ= OO«⟾a|gͺ_?7+R*MQ_b^{DIoL7!3 B aYx>1!,`6/Do+X-"cżr(Hף)0-<"OSk惊p㮢_U)؈ FEc1ZCLr.6Yk_|mCH Aj]4k ~c;FAQa5|%skY <ߒ es_ꭉC*T9AGt\hׁ\' 1na2!B;\ 2lܤOjU1ʆ0] DQŠ56 _USe+0ڍn+LflyHʦUDe@䜼\ Y A}{!pGBn@zH=)84q,%_Օ.Za'!GܾSۤdҁ &aG]dEag_ӭ`8'GH[}S>#GcgSY%+$uyL󔧙`an'15e|[KŦTWQWOYByYn $LY8SzFE>{`}crR K~eBM7A63$:=uAofy.B]aK_?~\#EqߙMHaɒ\cM"KaF07 0#_3v$1/p$OZ *H RQvy #֔V9vHwƋ h*;՝AR*'uFΤ.^~ςQ )UҴ[ԝ9CJn~VhN+7$֟wj5 G.6X0/l:H.M1@/K͋3 R%هYM^'m 7]WmS#{{Q2X; x'#9_cc#?ʊ%Nt!ܨӏK5Mͳ2e_<ʧf^R&SnKy0o<. z/&3hQGWg%sK1!(K;3dLͺ,Նf\KKDkfA| ?;"za@)@k`-LB5v;&нYuٴIy޵Lh4V݇l/q4# 9l^L~M}4C.yGC7ugCcW'U泒:sb,޼f4G.{f`a9BzT+a}u'C1nc~y$,%IAjc/P }dZ{bEN)VCN'1`QeAda!TL~޿N`-  3m'A۷Wvp`26GHO_A캂8Z: xXBUiYǖĠ+h"S!Pk3uXh0|U!G7)ETa!(;F!bMB!ՓO{a˾o/ 5@^aV{~r77 QJv/Ffn64fFqROM\4D?eճJ+cf4BZJܭʜӭ̰OsLhj(Z[G"ɒ' *O8el^bA9[^pj?yzBHoHA&6|ep4f0kR_{c$ÑȲ7_p>K`pҪL]w;v0;da O>^^a_mu}L(Fbm-LJ4r">t Eq7iLNxzO|5J~(em{d+'nՕl6qPq:JBAt9Qq<$\yRmI<( ߎYvM>j3e磱/0Sr!dTy"xsf4%}qj^uYbK4o:M Mŗ#rZśpjcuJ (lśvt1/FdwCScC@b6M|bLgyLhj9nnc=Yg 0~T,2{l W8 BD3]vj~ZKiD*6lXR sa~+I. a}q D7*ʭC(˃f1˚M{ѻ͎̎:'5Vbтf([HBjg+vS ;?|>ӓLrlK@8sE\?p\fR3rci1i*.7wĢU#()Su1ޮSУ4-WBrlg 'GB}@{{;&z/l@έz HPІT6)p0^I8 m7KF%D1]N\ܫ:7+R;hҾhƳ$>6 ЃT+ڢKYyZ(%߻C|Cg"AR1em$(&A܏m^M%RPB"P9sL&"NK{D}|wx/g?qW˓ƋU<sŬX}Tʋ}}Ľ8#ͽ;ӘyvI7fD޲ZWdgB!~pIS\ODI#|x&+ {XX0pE1Нؚ'/~èFL[R7޶ v|ȍ.6VJ@+` H8Tm@;*1C`绾tĸ-w-.[~%YјS(k5Zy1Zh<7 J[m"BLYPA"FXVb1Y#+]i6~*Pe鑫)F0՟SPeCU*C#~σLҜ%2H}#JZ[KsK;G P<*=eh{=À<kEm`E[BAZZ8).@E%|t]/j8/Yv9~ WJ>dG5r_h6q: ?&:ШؽJ ?p $WnD|UOOkL#YX(&tefJB(o alfjSt+PYNz /:IƯӱ4լbF/Vќ6Us/W0: O03"NjA{OoV}Yw3?bT!TI|vMQʖDmqoਭQEvFyqԉWM7OȆJ7>r׬)޿kj Y#Vf.y!r\ljqj{|!:(!6H|n·P$6$z[ EIYLEyuXjyҲReUhG0*9X23`̺u<>6{oMh?G'M *Qm-o-y7ԂEQYґOi `r]Zr880*<44;Ao W,t2d)}wbNaH:1xq>qSajڬpb/pF-- Fy;F~~q=okz:y 0V^q.Ll/LVXu,bt&7H+19y`@tƉ?]}(pHnmz2ONX<\Kᤌ_^(VS]hKWhd݂8 t*(f7rYt0u 2mA@f#$AHԒNtrAIbHQ1wΌe T!.c]2mC--|@La{(Zix$LR{ao*'=z*Dx^™" xNR!I*-usS߲{kclC8?Zd-6\YU *+fk 0]U<;K% }I/*#ƈ4sT eWIU+ ]m03!qE-_ <<{iݸ.|'Ij XEaU]"j9X|YTUO˃Ւbүi9ABAUS4('*<Fz i7UʣqfyF(G"+^LnQд[m}= zwމ KsIrnj`tU7H.839WZ<!U{ ҲȍH{&,?rĨ'`Gq; H)|{,˄Tr޾/q&du2ڇOh#jƑU^sU\ڤ1ŀ{qL_HJmw?{k',\YnrhFq0'5U4u`:> 3r55sKldÃ&=b!fzY9jaT TΗ>00Xh.v7asjrhA*:iK ︡7^&J=A6bBT+Z,_X]U#PM_do a'0˦Kс%+m|b5UrejmkM2 s"3^> zfLL+K.w{qlߞ.@ ^dtCFK4iv(y)\ĎvUGWTEGM/> o ǰ>fSqC9xݨΨq˚H@1%0­; TR䔔sJvv aE.UoK@\~J =蟅 ]7,6-Ĉk0%x @ebՂxԃj6_o-@iD5%y$T͈7^T5ou fǭ]'REmIH]b ~Z}<^'NeB%a%H4ˏݣBb6ϐrp{{C5b_aG'gkD` X@*8gޡx(Dnv u[W5 z/xͺZCvy[nb8&+-CêS><"%{I&N tfSv8.AzϥoHV4UbH$n$!qxJ*-`gy߇h~{iL :Ef j3 Q" %[: 虴4Ҳt܊melpqUQo^A~[|ZQ a5iM Ѹ^S~'<|\_~!;AKLDRX݆j mrGӭ̑+?Lvaz 3<k_fΙ'4oP,+795AO%ܳ;헢w|E ,$^elT=d5EGWRw˜}Po0O̥ahguHqzKSn݌`a²$+}uwJJʠF\` Րv07G٪xD>3An`S_,5@HGڝlc5.i ={GdKINm@b̩́q/'D妅`AUo%Mdeg%wߏ2CfmZJ|sB$vG?NύL$W KԞI{a&,ɫ2\_YN@SHymp [h쎉@ D.,׭@!LbKa C5:,e$.D\>lLOH5F`N~D0F;cп VMA2?e,.rP q[AHM+Sv-+ǚ O01UԘ:dL0v02ѬK[ Q|!UQmbĜ;Mj OprW,KVD\w@7ͱ1 1@"=bzY+7GC3_1wN3G])4;@_V|!dQ?&վ.*ҙk_x%:0#@/)As͔tAӒ |L8 >_OwY,HFk˲40T`~. NS)J#_mFy$‰g^|[vS0|I{ e37.I;ՊWB2aw}Qbp{QȜcDA I0Y3G3쪣{Y)5T4*$u>">n,D{(yz-5C[gh; w[Xt/8bg+Dk NY|_(5bGyp-%yaz%dZt5l'cbiN6(1 qbFIe@oWf̈"O~|wøv4?To\3ݞ1> n{ʫAG1PcuwSq3'5FC'&E;*WL15ToU̶imq: 2܁mϲvN[R +sffqXt{&O= s #J;U@Tg)]ALרIbh Bfj=tlue=,/SezLN;v֤ dkd~^$bDh>2#,;}RYhTHv? i+jE2%2SzAeO.YMkdARԡa.‘ACibe DI6n3{tmc+9xd77jk+9>aH,p6j޸CU8˺z1Wڥx4{;^2aJePWs ox2 |!dUVM=A. as4\" Kpؙ@Q9b33yad)kB k6ۚB5f$ԳUI& ?켓,/f@ IWg_ ) Y@ؔ9&\n}U"n7~ dn!Etqhy_CL˪of $DumB{H]M =# n,J;623 +="|]6 {&{}0J1D4gh)q%S|cVQ:c8}!&}3?LEo"Syc-}I芆6 !eJ)uMcrPMKA=,d;d`YC\GN# b.x>\D 4@%\4qb%ǟỪn!%ҳ"[#>m—3S11饖O TcQ꙳' ثcV %:,ӈ%R&!)m^{n^L*]9;@3 NP{ w^\μvaCR~ kKqiI‚S'(߅vg` ǂnålA,V뼩a h\M=ֶŠr5?J[N'r+(JS9#]4J_/ߑGCآ`NV"bLza,WNJd)[0;62G\H?)j~r4]s0gEIkjXW`mp}uQHFBx_7?Z08fBJ:P"|-_F[U=wܚ~0迅V<_lZ!k,$a=._֥D?#:e{ab1'4m+V]^Ȑ]-C,iZKI$L9.Vz3oQڿ?ё gb( PT=F;\;wY:zڡ hoB 'A`D4ې&52KQDŽ6xNE ΌE@U"P|uzQ:pT[+]>:q^O&iTxlS;[(};m Q!'P38 > Րۘ8%;YcsJhx@3=/pm,Z4]p-X|lx@Ȝy9L|P/>cHBS#p1?2 `SN' ,1B.)/58,Um[Ej7XlBY a4Sݭ&WbskcwyYq8[˔-J@ؽ`7?9[^:HP% AXjl)dz aѭ=GŖKRcS*rFF3/EUܢl mpb+MFm]zWwX:#-s N#>5kYN bC۶`OiYC W3u ѻJGQO O(R98h*6r6L"#k|v] FyN2 4 *݊5: =ˢ5eǰ>(TG5_wHli36ifd9/wU]}s0)H?H zGp#]ٮ'{@du,3ta a"`' Mլ-gV">뀗5|\D@xKq]$alnl ;I(_U2 }sť[s+t#֕:-,<[yB5*yBZNREWw} rl%֞{T/@\Tf'Suzy (aܸA-2o00RɨT~yFk,z`5<1) z{n~7s"GُDfQ%Yqqzinc݋=~nq!-ic @.I 13X/eeQc bJ>MZlG0:0}KSZpnn4OE#9xse t/˛o)DN,9g{?dez}iSB>G5C= a@Q mD5? ,s.zX|ǭXhu2L$:_T8bXPYqO4,5MJ8+̀sQ pISΖ/PC(Ф~7V9)sɍՁM788ՍG}¡V3|Ts8,aofBQa3{V@.VCiu Le!^ytDնlo!RT\oMTH!;c~W<;f8:/)+޿;A%Jؾ:x굡Y<ۢr;$R{ cSrL mÚm"FZr'bmI9O~Z7H|qC 6ErOƏds,kxL0xڟR%cH` %$P9e~H{5) xY iR׺`8jŠYxgLh._Ρ'!L.݄r;Gos2QȤG,<Pmռs ~h&뷹55Ұ1 ۉD*s)~9|N#`- OD"a8iķZXK`{F2wkha˥*IqwhEqOXw*[pSLQ=u#U[k(Efρ#Qۭf$Kco=x JlQ?du]3gR ~,a6<+72k9Xw*o((J95e/@in~t+hp $^ۦ[5f,@jW#-#jaQuN@iiG°62q!KhOAo:좤Yh-p-v^H E18djxܰf^Cz34˙C.ë!%M\7vdA72R}H4d2IP6sm~;y6Lc`JFq9!.e 0'ݽǼ9XYf!w3<#؀d\C]A LXKh8 ! ~zsI}=;Am2j8Vf o4 7|'b̮]ZTeJ 5``]U{E}\`\ *.*`>w vE ^U`̾,mH0`5 Ǚ-5[;AWI `t|f1œybͷJ8RT?Kjg <,#x=БF:|;0yr !S{H'* !qo99Y q- $&i0 .M. S1rq?Յ3Ќ=x) K :c(Y \KԐEit*kƒi's_hj mds2 Ԋ@۲ф BsoAZ6*B !VޱpO?@X>HqX=A's2|W1)5wdI:=II_Y_Zֳg^Ԕ*QLs6$-٠K? F{~}JݝSuv㊁:%HM Bl@]Ma~+ Jn*'q%GV(ڐ/U3u3=G) j?]H[B"ÌY&󽦿^\& *XZny+;DxLBlY`]h &`LnQ[::NtTݴӣA9ԢN6Ho^b /+$6^_/i6֌s2>]( %.B:|xpk,z0rYHz1t F>T5f(v~q&[<0w_OSx9c4ɍŤEQxM5$gAZm\v:~yf#0{8nӥa!]Árv2Dj-5?F$lìz!~[`b)c[rxT$Ew<zZE0\ߐ$K`q4(;$k<^ [-=r"p͹ϳ+ NrjwhŁT&P H[1NCQ'pM#.I uQŦ~5Eo֩{ߩqliM=säQSj e[,<=&<։ 1HN oy3JȜ⑭ߍ*~b' l2U JpUXy] %6vZ1PR++@Y$ъxieJD>e^WՉdMH޴DuYk*Mi9Had;=eu@`S~"g}-gΚ&(n;DOޥF]vr4!+|UA!ru)" o9[%c9Kg3J kxs yqF/.:?\4 Fӷ~AH*{[>c7;b+;|\ Fb6&GSn7,VI0*\_l\I+.K~L B~bt< ?H_yZg +4,Bw(@;.1AAoFCpP5Խ]uWN_>~crX:U'*Ƨ^m&b1GzOG+ gxD/kXЦь I2)IJջ8)eKE*aӏ'NO @q%p͸Sh+r*iRp x":B']:\XUy8~ C /U%t.R%f+oZ|P<ҝ0wcckB uX~z$)ISR];谅Af2u9KΈ8e'> Җk lPPȓ0h{ MeTZXk[ !!ٓ"j%}}-I[< fP#)*"\3Q2p.Dl%Lpd BPjFt8rjgL%M83XF t1Ii~iA:MῙbNjӘ)ǁQQzK֝"hb>!gUa利wa?P.كu a#بضOLW& l|ELt9pgl(cƋ)hU3J\N{y60 gfhO!DIӻ#a_p/3>A|{78]yѻ䰧PkoS4Jebǹt%\02)+M39kPdlr&{Zlzk(};4S)Mf-' H^]!ef "2a}?>$z+ C|_뉅C-ӨH&1zXmM0L4~uep.'#dֿdA0-߸jgK~6'jJjAe7+lz+F) 4;¢B\G4%L:KG@m܃lm94{$mѵ:*+OQ5$ 9MM};z'aU=fp6ovz'qXaKTV^ 6q 1.WQ5AX_| N:2 V A[''Xb1.QΓ`h@|E!9gbNҥ=A5A ؒH= Ό<\b4⧂J8(O0{G2 ^+7`&bS Wd5vNMC '}qeTk{N'j|`T8=q'8V4j[ްx6ڥKRHLq1պdY{:(26ضg@% gUјQPtÌG*K࢟'K3 dbb@8Y\Bb#Q:>Y(^g틛z.Յo1e9`Dž!z(z k7]\xo&rlvsfcj5cf{+/6$[V1N_* -ilw@JA8PC\ q[P;+Nh{L7֒o:sx#ם=/b\z-0#Pxm/meZ-ۧl$f32yf\wBF̮;}_tؼlDWI=-݃p48Χy܏iB?b!͢ HS@vUA5`XɜT;: Mtjn^-Uk =:*Q.ڜkt _jQ4RP;QxtYW}Ap;=(WUۀ+8Țav'%[\59}0&mk)A,3d.OR7u9vy}$d[2*i$lu2TRXTj_o/RHE!f֐&g69mF2ͣmNid|8~xT_jXB 0bwMM?ӅD虳Hi mRFRw_(X1Ѕz++qCGB̥`I+(P*{!. +m%R% ?}mr{ +>9V)ZcI@t%eM^@O"ZE8P4aLh (Ţ\~/LUhp+ ʡJOu.&ulXWk4#d;-6MM^:lȑ/Joت~̺?JlPiǣ?*F)pfLA1Q-ƂVV@~gxCSfkI /MYnk9'f[(]=̿ #V2đ׋L=+ӅG4}(oUA [M|o8C x`ZmUMd5`ttc1ȬwG4Of>¨&l8xQ--RI毥 vM&S_6Yapu~eRƺ؛j|-#tqRE<.tP<㩂/@;Yֺ \{Q"gofS}=w`9v#g3X$-uNu0!>. W҅Fr/r5eȾMS=av7nekݰͨbff {\:.VZi!ÈR&{-hC!#1!OP%Zh8nD$x?ˬLaYeu&- 44.±nhT;>i 4T7zu ^i 2э k3ADc&ȟ9)tweDSJJ:ፉ*;Mlஈ:'xVI.I(ly{:*e7m4yT-ex5ELeq(\'- Q8>Bb˿gsv^sFP^"ވGY^ Y-9$6(k\6)5g^'yqjEr%]UCRM}nCM2DYH'}vO]y4#8f7綛ɇCOV @VY_Ǥ(V.)KqE]9@@G#Ƚc' \bu"j<}rvD\/1^ 瑃X&/.!X/ܗ'^Bbj^.f\F8:(wEW 6A /'7~c e;?MW* &ۿn>7Il"o?Xǂ_>|ŧ3f6b[ov,$cVJN#_ E:= S-^H5 R.yn Ҹ6k 'a/bouxEEL],6u?2V[Z>!AI[KVe'Yb+j 曆 `M1 ٥|0ofgMrЊ g'1I8Jvnϝ߁ZȘrDG,YVnrpAeG}~f[x1ZT>mo|kЃq+@!w9׳,)5Ԁ# VPC>oNtaƒtc]dȣtIGFk߰nͿfgD qе`-"i?[-:q@KC.db?3SS*B$fOcu{qZe5Ĉb++DИٳ]_%UjvpQ˛xHOsN/}[b*^Ud-\!G{(/]M_bg~5*COh**ЯϫvRN"e*[ B R!sSWo'p>06#VtWcƩz!R|hً=Y\*j?n2!]UIUy Y~7s$sqվ޲rC;HwL>Z-Jk2q?t㉸I >.q 3)?өqRV3Ϣ3Udg~I*YHg1g즃T:ŞEZي!ƶžgBHn$[]>U9l~DBAξ1J+Db]u82שnRX( o*͔P^,C;Bh)C@ag5A<ۇ_8h2&rYE<&<"PRAf>Aj?0^~QmodoP󇮬>m*O7 MKR1fMd84M d?d&gKr&"É/|j =cA}|zIuPvOK#]dht!Z*+|,E^ fnxsRzAn,*cV-<4maVe.2/4e/5ٯw7|-S .q5C"DVfNi|q^ s؁^ l31 ϵkT43\ 9[gB `Ե:[!12i6 Nj{*<soJuտ4*Ew2N[,A]PFtz kM! 2'+ֲ"BQkn+v0&ihP_kp֗ΗNiXR{Yi}FPFpk$?qW7n9axms٫~1CAέ_ R|Ip*I5ob9hI;}cyZ;}7hw)C` tzڑ!"1y$lUԹPfK^`\ٿ7R]e΀2lΆ0DzsәgLpAA! YF iبӛl9q&7xc`V׽GjY Ləw.j׶].$iNʘq]݂Dk!yQ$3;{x3 Fêe &aoΥ苳 Z<Z )U*T6K@ kbN8 qbqtK@;a*,'z6~w<!] o!noYB (cf̀Bi]V@?uf;͍3W e3M-34)@I\Kz<7g RnK%?r_6*nH)ؠ'u7v;?˱xP`A40@h.@h7- 3`V!* mZt,{0}=HN6;+t '>t_EȹvRjd{or<wh-3'~%XM'SKN5~Es\8}udR•Uѡ'nƓ@|9)47[$0 BQb1>GD͜X]<@Ul8>@5 Mv &L;EMmLv9ꛀƷ朽)_kTf a8x [:Xå: 8P:CQ6& _xƸ"7ދ=RSTtTauPr-Q"fY~epM,x]a (0TK}b@r 7UEmwLTHbߏS{[=Rϻn7MD"4%&'!FEWHF, .d$woR"KBz x&\je28Z,f? &Kpk$Q@DgMG:˘ekńEm˥j ـQyy 71mG3cdUFԺҭGAc^1xr,ާs/a ,1^wd |{ )+ zpm lrЮkUb!eQ![* U)7y2a4\w+‟!g|\FBt7TBtj~QyLg[d}P:+iSDNk;c$U]/diuغ9$3'Ye >@T<2m^#K!ˤu훸7j^̀9p *#R[(s D Q Vx:QE8z?KƢpo)n8tii;p0 4 υqICAj/WN,AmB͔ v˾881%岮-(?^5@t+yCHLIפ|đ/oSv똽}'$jT#4A(H"shB=fHd@^K`؎x'[}]D$O5ZJ؛l4)U4tMc$:,z{fx&3h k]9͙ [Prg^}o"숻.т!hZ^׻%<_|ėPɋFxsb^(S˩<|J]84/8Եsհf/\ڡ-n%Io!]\OoW-'H[QPAGrƬH+M6 e:g¨BsV$} +$1I' V -}bgxoQP@NM-UG@,R0`H[MtmTp>}8{pKmҗ8Yw*[7޳N8OTVj*2+2hx}In-@s6 ?Ih<*9ڔJ!n| *p0P4kOj?i̤.Z]CӮQ!Sq2W 3&u8:z +RSpwBj}c.q@,Α:=䐼YϘE9B._+^D`GH.au|38@GYsVU6qMJ [2.gj_̣lE1KPi3*c/B}5` :۷ ?Xg7j^aҕWhQ:zAH݈\şQ,bqJmQ嫕 bO<3Zpk:R]s\eV:5OIϓn,aϻҴ%X/5D5b:TX#8fgOBNxCEoj!HZrEc!ß_IV}';Bэ !$k>kN[دݟH(S0m3_ 滋"dW~SCQxω`L" ~0m0:VS>]=SIIޞ3y\; O9wBA0:ΰYEDT-kuAu0dStR}۴~OJLƵ 4)%j%>9j"RQ&DũJAo#&֤ tg&%x٘z/vTNUiWPzw)gqqK'Bk_3{á3 ۵&2k;V~0\%Z:kz0dZ^TTDm_skI赂1 z!Y\ľ6-P>\sSk ły<͈8P:re) bBEPFV:11m$ $ _LgA+a)]nz PϣeM8?Pr/HHONT$zD CS-6;l_ggԄ5d9Azw8^ 21 qxrue'].<3Dܢc?'+Z}:JmR,ҏ*2LMP]ûH|$p?;*ָ%ʕ*[~E{+f4@`Hu֤qaPsDR)=Mg01@Amo ɳr?BD])Xl9ЏVE4[,>9 u>'҇fI/e㮰afV=$ؼuJFTY}kW#n}߇DCDQjٟ`U?|@oކف0؅=ľ0zĕhJX9ѵ|IY%pG2W 55IBWqTMkn ]%{-qxLE-gsF E#C 8[ yFH*S~箑dT5$rvxgc5r,b0Vi罸Tp6~=(){H`X#ipH ǗPK ~nL0(O3/CXV??LZ˿d'(`Df2GidP,G4tW+ ^طQ?r9![4NgMx&~xerp],`~˥xi#rT fׂσC:A1*[f y'낭sP,f І5C.PE)u/`Qajz{*BzhƲi t1.ҋf/\FDyh)%?NLXcH1^-^9̘Sl$Ӳӡk^%~^Cvn4H ޚE" }?:؁r3DFujl= B#P!ߏx)7q1Uf_J1[&3GK j[Mcgʯ2IC-Õ. ""*UY+(pN%x\J \=EcR;yT3*Gػ}f) i nD'pScÆyvͬw}~o$S,2׾ ]F6e:Dlb;&9M^䆚G~ Moqwo cG~Gj1`el0Hg#iD*$һxϐ310~ gl‚,KjYˬ1ʶ+W\M%H0FITizMLVS$tȏ u2U7{ؘ3fs ƥ}gjB^KvGYw!g7?Ǝhl)\6:\?PU㞓@ZAarmW]r$7TIo$kGBQ~h25$A`V”(A A NbC-K!cyf"f4D#l&B U*fKM:gɥ[iXV,Q~zI%d|Wp,ɪquT{I ƭl>7_VK9F`bYG‰rH xBpLDYTA6x8!Seoeh>Z,Z0qp7yGW)ۙ'%uZj yPHQ1Xͧ>k舂ǬIv}I-ڔxLX'U9Śi#o'.!X_?B;i@4lɫt|7'4*@o@2V VxNwY#[WG4tbcxϥX ]|@{ Ug \`{Xd\.3Z[_`ʓ58+(̢Y$Q0zS FMWx @q(CYl{pcpD;^","W;`U`B|;Bh'wC^]b;x}k?|Y+ծ4rsoF\SO~;zM+iIFqX3Svџt=$~ ҽVTzk-~{1ɞlj{; $, 3l_ysuDE_R}P9^; Hb ~LLC $XGϽ9ˉC1Z?;qӇ5 ze|TUMV\eх vJJdpUWʂ_)3:Eg`W!wpkqZm)kUK(9u( \)-Xn{ u3Ǒb\D `|cgŐXye,naG8;:Q%9Kq4qĚИW\]c;Y#0WOԴ |!q(*,#j,"zp9}a ty ksؕZ5ُ(DwA kg=MQ]%>@.*>%{nOI%39׼Ԙѵ=#[Xo%m~= E]VyB[v˟y=EGl'DR{fjvz¡+3]B?l62n rfM_xi=. a$ xL¾.lSʻu _5YU1|0CmQPtaR"Eks1uH8~Ox47tPݷL! P _ N%3'9)Å y@=86$s@ SGGg';䯴u<1Ǟ 1b'N{}yZ+gȉF 6AӤxv LΆn]>CDBG8l# >ԫƗ뢘 ;//h ##+@eQkI4ӈF:oQk}xh5waJݨuF@nL;L;0I^9S(IWKg&pڜYQzǙӗ{@{;@RYcXk_m,z'ڔ;x9\nn8W+(ApQϡSW-C Պ]DA϶ӯO?u^@[1PCo(jID{:ʼn&^ld/ _|gR0ý6]WQ Y֏jI$3dcɁbL Oy,%ƫgߚ@s'%$gZA=<37D>@^v WAM{gRW[Ќ̠ZvVn)3u٪3VSPp2wfT~2(j"" orH/͏XOLvF z5u6BOǍ KĂ yc11Gw^TYe 279%'s ٝO ZQxB"fm_f#/-5"48NlΓ?\fM/c!{US+f1t݁֋:.GB$Ȧ9b UW> ^7SvI`Nb\U'.0m0ɮ?KB ;5 à`8o6j riL\9<^ F.\ +r8fEaL Fd -%N ʌt8Ełj65Q*-bH Z+PnQPmX\UY `+BIY'3J D Sam$#AsOK`T/¾"]#׳*;9@bNq[{)">ҠbAu>tu,o551BKI1[uO0,/[Y;#NH2G+W%lC]}Sg|Gjƍ*"x` %ܼw>=\2RMqH!j=@ ,&o `EGtЊp\HiUj( 幙`ŖDF@>+Cؚ؀?mqXSUho`H-^ULU֭{s6%([CD{N]CMuQHn;&FIHdGcϟ ߾ȎIi;3B5gweqjz9X&UH%ҧr ,aeZ>N-syj/^PIOҡP~M&gIf߸U$Sд`|b kG|CWcWK=uՕ OFՏ;J!bSpb}=ZgsHAnL]P0tӞ VH9wy- ^Am%= d| tZɳj]pO{qzV]/*<Ɇ}WuгfqloZN]F*LoMS@f}# C7*&PL.ۡqoyKMul/%LKnjqM'4 nQNw_nz0`l<;IyUe9$z~0F 1u֢pbi+aHb͒]]NE^dV]c"QE-?SG$٤?r RV^~ $ .f 27C*eǘR͎s (uN-Hgc'(ViQXWլLnpXwUZI)$me  FgS;s`OR,7HS8FOdYsIM][\\aXl.}}Q/zЗIr!*Ҩ NPjBAXDZ9 _e%5tXxMW CE;bh[E?LH J ^rl|^Q{/+Y7l}|esMBN }5@6`-9I{sf'-*8Ol㡎.t!=)SpT-UvRId#.5ˠ8miEZ~wL<$'-E󳱚[4ws8j,pr 5'-uai~oCZ6P}! QU, XNpX׾~dZH Fw,Uzcpuuqa ~F@)e*O0W+gfމv<~%cQO~.m:<0z>> ݉O^aw~.XU_T۬uAt4R ]d-~Dd7QJKwvǓ8KYan2lq^f:MK?n+LwO )k,7=հ=moV*&9%Ŗ}_z"D#5۰1pCg=ëVJpR_>!٠VdKTZBΎD5S`'qj;cu?Kۛn:܁ {٨ )M$[ M?aa*K`Smw S=Q_Ct[QQ{M[zߣ̪Ｙ&Ts:, BbY y; z>X9?^?=Eނ4hUU[pyfKb3xf!L]ͥyMJ pp/ %P+\mvI].@5ecX<3wdtTێ{svz. ~`hxۡ^^\E,v w #F\-9 Υˢn,0|5F` وP—RLWߞӒ--Aklv7E`&~*l+B :;Qw*0}}T<njaFaz5$Gl'qb)Dƴ9}^47혡&-qDՓ>0d#=;X$zvIߢ-Pn(/φjcNHerj$-/Rd#jPʠ!*vs&pb،~Cߩj~)ͦd;B6ֶ?(,_AcuGMeKdmη04L֯d0C)HrNIWptARݾ9`6i%?j{:F7r Kd28n28yЫiV='Ox ج-M rAfjnK;r4=9B>ʢy<;9=$( _4Y*Wݘǀ kѣ󑎲"R*[P#SЂ7`YrE}hi~u Vk][w9`x߇y K.7<;#*SCdz;lluE+TzpLZLS[@9 9| {)Hb?;Bk^3~J8Kk>zS2)k©J `6ۜE5}Sw6d:&"IP L=&\ϯk%Mchi(H^FFGW=zӖr!sd5p[S]adDٿv531z[.c88D+hnIXRJײ.9enہ`$"*ӕ%_W)Gd?sYUط4Uw!"}WS}bO aO{i<P-Ӝdm~KyķЬ:q^r1AF2{QI$\s|w!>iD!r̍.ѡG2gτEj˜dg՛S͈B)7zvWֳMejDƺd%NO!79U/#OaFm/uouK$hIMfUw7wMuu|3M Bqsz2H+Ê l`K`R/>]_ L9o78/ +ipT.D =>'Փ(3ooLZ|ſ2%͹iLK_'k"<ΣuH.fH =tm-ҟtb2EDks/ # Ϟ4f"m)`%Hْ߹E,TۺRs4&CW`;o52cDJui&RT濳A!gko&~TB(E~# ^]*M'u7ОO]ׂtȣ<1֏NX^2k!(DqE3CeJoPs˲0Fq,)d2boN [jݑ|OaU֮YuҒ²UeV1y^0gtNM6C}7o K@eiqO'SΏ>ޣ=c8 5U 6r[5ӹN3jdx_.!zin!ʖjFmHwc:@y.C){[w@xP; :mc aF MxJ _Pm(Kq=+zс]O (@0")yES-{Y%4uA攂[ÐghÂ%CYB=braG=iLeJKK>]$5{mSA@3ך19KʔYPAK=\,a--[1]:c;U WZJ'vz?:,q2k ν_R9f}Ыe)fյNKr%섣Iiͻ^z2ZKDF&Htek4zl~B>5YlĮ'" 襯éRۿ:M[30[dGm>dW`ՙ_=ڣr_BdZ"ixǁCl21>iPE&:psE/ Dpfȿ֌mPxNpJsOC:(yI7SP @*D@XJ|89409f? /ÖL)(2i;jsZNF yCH)8]cF5sǒDiDC_jp+:vl 4`תab1>}ڹ оahy ?. _o~, oѹCz BQL`1h~־bBX 醆-ގٔ3W_]qq}%kAW`w˕n@']ni/ggm.6?s).Ncg5ޟ B+NA,K깊}~s*[o}QE/@Q:Ƒ"[L $]h:)%qA-Fa]ep v5IM&*~qsm|*{(E~B+>X.VuA`Ʈt\5:Y*EL0.s賰vb tEgNy Sڂd"k+c!F&O TܿdnN342uuMmPV/0Yٯ>xHj|@fޤo‚˔MBQ Tʭ֑S6[] \7(p3uٌ\V7o=-F;s"KX0.jaNw[ BS4 ߺ"XQZu+D wW%(bq4[~yUTF#}yiA[. .tk\NrXM5缕y8O,|a%B~!5wgSde?A և΍9}g"\MpV쬫w>æ <r߅pw%#\ti Y9k5ItEhH&>>XORH^g2,`+K>B5^,c[רiqB\5Al TšT×%=K@˝uf^ * 1b`C7+>{8P2vwtaQtZJ>7zX$e؁aywe^cg ϫ,Hbӓ2dq| <;u5AbPhαAuʩ5-Mha3i-V)J#)Vx!f>s|TXX✜X_= /뿏Ąk&PCR%[}B@䝭3TW "oFV6 .TiGbB۴D>썱rXա>NOUA(4\]/4=Rʼn`>* 9*Q|@G3L i"&*|6_ $W%+,q<ǧsDO pZ|[x8H/&.S՘&CUZ9A?ir09ЄzU !9ò|ZEYC:enS@Spm/0,@/>(N<%':5𝳔xd&g]Uy=Q@=\y =~)Y јY~zIQk%% Io\dN! aiղyIl!rݏ ]w%:#y?-(i 7鏇~b SMR/98ݔH3NԎ," ̝݁MYU<8szp>[h8a\38wLͱ2Pg347hIH&eAj$(:bp? 76̶'.kN1j=}gPHz 1C/5͌K,$yl소4}Y+:/ɈAHjKǀZySBdЮp!s_ڇ&1Ӫre<|PSbkT,cEɭ!-5#X-W[ 07mz S+C$41âs#"{kǯ mW 3n}M p ?,DG"?HytA=Ph*{0M;kYYm9w_i <>pWEv=>kd*tLO ̴G77ԋvuJ U4_%1 f 7N,U1YڸKm+ՊN@& ʮ2Yi4II5j&9❊ogЭܡYN돡 7|zf&>e}<@'ϖL!]@T\( q$NyK)7T%0fs5DݺpWO!{b><Կ=(J.Y`&` K+mm4:|<߬lc(XKib b8R&}H^%,Dx>s4_CVGBzO(]ExaxR:>k(Nq\ T&Bc*ͫ2eW("#{1y0L|8s}}6̂6#4b}{&CV*`)nf78qĚO |12<^Pj 3fWUSe5][ez151}9} l XY*[w; `uuJx}U Py'Vg( 1=*@*7t{!ScX7'oq[M6F(d+pA |J}tjQ.f(,kOTmt\NDT`VIktU'Bs޹7T\Y\ H@]u #-ߕD1+]\3ڵnnDȄv&+$ |ƪ;/[(+‰熝Iǁ0#}!,T ?lfBP(4;KGm?(WDsqI"϶ |@-ZەN\aE$PjZW4+Jiu<x@\S3|^fjdn!&/q#K(|[Zֈ%%,f :o O@@~_E1ߒcR_NݒٱF|mI-܏|[Er+`ɓP0^"eݦK1n?;C^I`|tl＠W'ilxl1ݍ I*(Fs1awL@J5>\3LLmyԕNH7S9DPZZ hΌ-?] %lnEY zq)Ħ4/սRMAE3ycX.#A ᘙ%#րGH2yV̓9ƼUMUOt&19? /'<:XD0EQ{ϗt:h0[/6ek"&AGU,NULvd[1a^LG_PZ019!U#Kܷ0; DP\ 80w ?y& W ÛQqM!ٞ|oҰ 6Np:9F+ȺOՑ eqeuzvR m. k<:8`n vv>岳aō2qoY7_)l@d%I>."穣˜l]s>]@*hWrBZ ͸ `>"Y$c8Z ՠpNycFkU|=$>- 8:IG A'yS5̥ D~J|Tzu-P֔ղ?7 @z֠CU E̿Bҋ|1D˟]X }'k+SK1-Q9+dW9<)9 y{f [)7K̐gVR.}=q׸-f|ˊd74iUNu&@}$x 9z\}Z9Z$)]$],B.YcI$cdFTA}jE!zV׬*/`$u 47 w'?^ݢ<*yثN50m=_L7&5i![Vt@8!ʺzNtaV"Jߔ26a҂!hVfm&6x%T{YЈ *gOdE׹#ou\Bʨ("iGH%gղ2~Il3mATpe浦S6t;.~)bb-3Ġd =(L]Q. HptyDpi ,v‚b~.&srmĢʅ-:- t_)P8;"U L>.,{ Qy5PeZCg}y@%?wƔϜk[>:;diZ)7h/”aXn[wtdH8wIJB"A-7Δ%~|,}Z=UcGLnAemwo2&K@^ó!*|TgZ l/l2{gII΁7x(Bj_-c.y #u0Ň 6}PYd8MVj `SK&PtG9Ec{>dCUGz*< IF;vF Jcd-6m9bۛH"]} 74a 䋍$N'vO*j5xvW2/A3?q.tڨ2 or6eʄSGwJYu;xZ6) y Di:ȏkCL*ŝ^PXeJEI^⑁Ut)6@LСy&8FMH쨏}k1\R> $w;yi, ,gvfKp0ԆWR1rU}>VW(T@^ADVOn "V餴X%¼0K pr%3:_7;Hq2_\MsQ G*AOO# X?0nՎ"ic_(l0NM[ &=k^UQu27$l'{4]5RwlfpLPRfM*;( =5kÍ;Q9k!ttTVh &ԉ>Cp#5jgĴSӯÃe1^ryf} 짦^R^2[pK%B^IB6h,=񴺐&2,"Ihu'[M*BoVϑJ2$cJ.j)$'Xk,`ƚDi,Ot6u\$P.E YÊaao`}xs@>Y5H2Bڒ B'V꽾wGpayo~ɀ_ז-! Ut:gV2W:M՛4~}9VUkHH^]ʖIh.|`= L( u.ƛ9L)$I }yQ(_B??LaD7N hܛ,Ԕp|#ɮT 0 9%XT=q m&R'Ŕd xHe>Hsqj$$6 adj|Q 7dN#ڽ1ߤ/v׭Iq}U/oT-EyAnm|O{[W Z6|"Gd ;ꜳn{$trԫ@|;;a")YITf׏U9h9Iҋ R+Ed*Afи|QWH2yu+oSN IFj0@eǤe3kBFyIȸzt`֘(~=0[Kng8;Xj% zk rՋr2+䮎7S@I8okMW|TؒӺvAc~9fr ^GkA;ׇ8#@riRĭ#%Px Rq[/M' Y[Lv@ϮtT{:qѩt\Z˦!sp.~धٽt "Apڥ($l.7bmn,J.N)KJ-~ɂse\\};+eLWݺ~ Tal y"JmNj'墭f+$U:җ:GxH`1)\xZ% iYzEIVL{?WY9l5lywS| K~ը13;$Ķ;qZ|XD (XK(B&q_0{)^^SeӄuXwr3&6}Xӵ@FӠF?P8l@=ZÓ!B%*hȕfٸeVVtPjփ Oc h kI{S+nMäYu Td!x!MiߥGΆ#3 [z@.f9=r#vKouԈzG5s.gc2xB)ADuB@-4iRb 7W"(PEo&ZcLIa>g&E&oncV+F^Z(LDƛI v4) 1l`*:S߰Hjˌ)Www^n9GE էՔhT)O"0,Y}h#lTk<4Ej'2 ':A6qj0Tz;XP߽"hWĜhO,$Ʊ!FEvD)2"ErPy}- h-mSZz;^^o^!M f~E~baʨ!c _Iq*Pxv~hή~B4sJ6;u솖x"O/~Jy0wr戂fQ9@hFF 1hލT`c}?yۃq9yNO[yM C{ㅟ^8>5|׾u]'^j=T[y ރTe/40 N{w!d0@R{xAr &ZTvtD8Sz)h;oxqn՗Lz4 #8To3d/S4袶F%& 2&gϣĔP0RnK|kXXՖja=L1j!h3$Ù-,NW0U`r+IxY^h'j a3e)|ޏ9ÖB Te;t0tF"ޠXZJ]ԦJa!r$ 2~gRjXa[w8#G/?I~z59,v½q~[+g{WNˀ "pݹ?\Kz70$ - LΎ`zSdFT6Gy4G$,,͝en9ļݠ:_^]+v^&s.&`TGAP,,/%tԫT*D3B>Gw\CTсV^R#q(yAa ?scR/%˙o{I\W;EmFb0{iC)jk2С7we*Tt20<m=8*81^$ul\ϝl FoՑ2 \{*m$n}E,ۓshZ}P6Dm2@Ɂ47-l^3'"ڦ-wsz;"-`gc5<etͣ^$f`;{=om 3V+ rjS3~1/:F'_;S7vzc?MZ>ׂ wW0O۸ aw!UÇv'kBpk`<ԔZT"G )^RJHKkTRD L] { {4T4Y􌌲y[j %>7B}i"%u7)7!7rJ;ڶ4oRia~2_LXyɒ.>q "Í-A$Qa(|<K) F+%z0r1rˢ_cSْ;Z=ڕ6vZj8(NTCd<w8ع=.n*]*&,Wލ|_6zrM-܀|JT;SUH&.hO0A -y~ lI@@wШYpi^ )Z@f|MMsp) 'i:^pFz(.,,i~#!΢?ڗE5)~ 6Ȑ^Zi].\cN|}τWlǓsҚ`dt1׏CcNQ6ni@E!t,=~*O oyBqGՔ~S)-x3kɄA4 k%|+U`dWAbP|o7_X_[ TsҎq{wP40fE ^ L&J'2%>VjMg* PS6Nc#GO0+9a>\qNx,g Z䠰Qh _. ߰ c[g3Qpjge%v{ *P[ʩSNxf.IˊvZӅyғ+JaqVKkݎBEus` ܍)<"=|׈&^g.j8Y"vRXMy1DD2к Jū+ƽ1BGy0S:tNۛmV'|Dh榃6OG7_+l%w2 jCfܭt^C'kYoʃ++;L%Y"48; NXg@esmfjM3}=gJ eHeܚ` ~0s z9Sfy\@ ֗&Y!vq#X  a>q9^ *C|ϸ)Lbz3q-v`O\I 9 S2?ij66tR 0֤ =b;Y Gzﯚ9eG{ ' Ծ&eer3:[*1 Gk(e~Ym|=Z!IЏջ<Qa_J̀4uyCm#kyC}ÂR\.^珩,1(wPH }h^ӥF&\;An :lחA^,xX iSIf H6pH=GwďژPz&luRWRFȂ'iu۴$,ۢm7Du ^ֶTAH\&5paؒr$ZTiL+^5ɤk>2r(hN j -f;8?/<=3N;䑪:=hT7b V3zz TA`m$!#; ECp2S<=d|}.іBN)e^xۿT2۹u@;O<[vwڨ(wc݈ѱU5 p8W-D}P7_HP:X9)tRL\;hPLuA/Gi-.Oc>_R]Ijn~ol!!(ZESfWL|($V$"+0]XA;i{HA KvM*qDCV'ta䟎%>>NaC+S2˵ FCG{q9bV85)K 'yOA<)g;z>b4P_\Fw(C@.ZNC[G }"=3r>=I:Mh'ޡ']iJգR}={W@|^64F+DоB['Z} c\b1>gЇbWK3qݜz<| /Taqz8e! vh{Y< }9˜O=ܡ;MuGoSiD9E<ƔI*2C8=5 +FBTx#̰ "俤I^As8ڭw|N2K},_f%FɬJ\YuFHR)QP)TШ?@f|C ']6 $2^ |XsRhbA)uls3 N'=H g/%x nDHWX,x3u7 #Z(n0Z6q2:6J(;JKeXV>vjdӾL؋:-#cRS WsV98;tdwĄIDƒee6xtDVhgavZc +8;)+O9~v2Tq®g4L J$@·!^)y20 8΍ڻA^K綮zt䤋w>YA8Wtmx=}w=2[flT>-g|Iҩ?b3VjhoB+ma{h-f*Ʒ3$[A=4V7*SEQA#@1fGyX c^$%V(qW;140S;dOT҄ĩO]s~ΨjA'jM% <2L&O4L' !T9B4\ô-k}t9DL8;%ߣg $>l3Q4Zpp4T#b ̯Q$ZPIrS%c Y̎P1I(:~>瘐RRXuWuDDdi'BGm_7F~v/|!N8(}pAAP*x5nbBPF|ke~P$U&&˯|<$].qXCQ+2p⨵0 ݧ VFx)AOLíuQSv}'b eԀ+ij42BJGZ`)OQ|6St]JhGqk #aĻzQ2O 岫A 0)I/V>:Ѭ?egp[Y~ynCĪerSg8Ȁ sx>A\~3ye4t,БE}5e;-{Û)}SׄUe0mL }Je JwmW-lxڠ2#QW:K;K򾷫J,hdh el┄r/EϿ`|37X)=!06x1Hj*+I1'ѧ =_>KMHG倥 r\3Ǜ%()29Hnin:{ $o[e,O|MrcKK`O0\Fh1fw?y> $M8Bek~>FkMaEzvÉ 9s<6!4:m+X;KgLk7$Ӑjծ|yNiBWZc\L͎JbUm`"+# d/ 0\r*;\٣Sa۾PM,4|OCmŢ2AD9"j\+lU23Dpqel зkWdJ]m]9)~PR`k}ԑsgUYeS hQI+6pP'ٛSv$@a,O#gz =!B3uz=Xǀ?/ebl^MfjVYPsxlH4m?Ke3 S ,k~>ӥ `ߝ%_3s4q^dNM.-n>N ~* L-4ap1NȊU=|LU|6(Rva8,"? ׮שJGT< ]1_"݊z 9ݘelYv C _W2͙jqD87Ø[ \^Zjd0VwuONJJ׫8]b"ʉ@O2z]qҬz@GlD"DN̲7޽bZ3&^6 Mג Be2dCcQ6閔ygKxukUgj:WU)4qiEDiaFt|DG*;\ J,4*y ).IϗNlU6FFA j75vL4cǥ]KS207'{z$NR:ta ,9¯93giwh_sk l}AZ"!wC0n7tzSCWp)^k4 X?>u1230vMRͨ{ECܚ1M3EEj Rڶb4g 7t9Duy5O#WSkLihl?2ZN'55&r6KZA7O0't[y*p^^9R`Iy`VFT%bibb bݳ0)亥+`S(PG* Kq21}!jµ`ſ$=rRqӳ "ɼnbqי XQVKg}"%u?]x??ÞHNBԄAjQ9/6TD:DŊVsh\ K4zU t1:I">)&6ͯz{y|~qE=23v)<ՅEJy"_>%T&~`qB[сT)xwuH.)s}B8 o'8൳ ?ȣmZ1jG箅:DSm"-4ǃ!REe쁬`Ijf~1Rv8:2sB>3:X(1 @L*^/1Z:(BglIRf&JOV~??'+H1XD.u^"8ͼc^:i 论N1ebND) a6NyUkB y=FbMwF7 e{ճԘ|ga1=$`{:m r2Lgfu]:1rCڦ2)ɰRbqcB92T7Pc ֬\]H2cfKȷ^82HAx`na'S@HSЬx|]kMy.klkU!VmӰۢb6]%e U9Z0q\]8>itne&j g+6xꜺ dT 5!*褄=_+ffƚkB+Xb0U<]*{K(4${3 zgډ]+UwMA=rK* $UNc1UhH.J+}jJy6LPC70m:2pȢ86$J3m7 UۻfP%W)o*0 KB;i}? & $UF)0vsW=v LkY6,$!HF1U&/ aP]G_oVtheLVm2;ye6y!')`蘵6{paK4 &D03t߹zғ,s^? "-éb_M&8IəeE靷]r*Iv`e;6H(:s/;?%6u ʢmScn Q>cBBӅG2d0۶SAub]x4^6u&C@8trJYl"Ed jEkcVΤ ; 'lw#z#kmEmvDz8u:,S,5wC {?Ұ\8mop?ijA!B ޯ 05,kWrjp(^w<2K; .x~54z . q.5 բ-)6ߦK]qâ;/9o xGx4YUH~ѹ 6m͘ n@fgAS{.M->LBmaH d4t[2jnȞSCB86őe. 6`aO7w&|uʶ8` 0/9g|8pOQ2Q?plp@Lt-iٌ*VMtVpc7`/ az2e ϑ%%aXQ>q06}/?@T b^x3|ᝀ}`nxټi9>AA13*]Q/$w8R/K2!5;y=O=K5=tx97ދHR l/7<˘9A g)DF?Ľ"ܭ{WOZxۍЀ.*`<'Xŀ?6ԤyQu~xop' za^{@&\Z8 CM-͢HŶGCVϭ<{ ʗXP=[g(~qZB1:e;e'?l%~=<űO_Jx$FqZs.n͈xah1Pb|bDEXDi1cUWdsŇ]SQHM*Ӊ]:5 DFYK@X8JFVJKG Dsbj^i(Oٝ?L?k+eVB bs'!1x$O~b\cSV~UrvGh,q;OKݰ zxYs9X2,uכm;3 k?hBjYP/T8~/>lrpodN|] ,PSg3b+C>8oʼ.8)K7d75K'# źXⴁ"R j°NuC) <іߙT< 8@i̚ϓbUGYBp'+' cEZqT/GlӶo ׀iU!y7tq)O`=C@+KmW#Nc-:éblbi)<9_]18Dj>7}`d-34 L Ehv'יqV\:X[ufDw4^{_d2M\K$=}cLޗWMhU=9+ Z`Rvfi81vJ7?~fl~X,HVE#FW_Vj0:Kjբ5kouo# 02Ң|c{'SQ=cpt0/%fR'4S nI^8|\!HX^z-K3޳ Kc@Pƒ] |poڴ;]+4xI2݇nGu%MN5q+(EwT6d[`Y{.Z/gU}[w'L;> {DYuI9\!i@/`v[LJ`Q>^|ZFN ={8[q|]*,<"4:QQ$LatmT B<!An vL+ rkw!-O1cecPlb8N^]ЖP8I /_O=nnFoʅ٭ џN&ܗ!Y#m㮡*a N%{h&(Ʉ*#m<4Rg  d1qZb\@2ʸGMZ%AL!N!NR-*9~I?H%[L6!JCwюp``֘Vp\ +#o+-a:RpT<T(?#BB(2V}\ RJagFߜ ~5v4M3{v_ wGpbɓx~#G逘ƯTl[_N%ߺ@WBjJ2e!]Ie)843E#(t)n.~%cQmxK.gR 1B2~ͷ祉{C<DB9N>W0#7"ѽ,~71j- y˙Y6IM_ݑlX=8F[6!$;>mb>zjv .%[ٔbUE8pe]3TxHDZiRbRq3JHO0RX1D F2xRbvS(@@Cs.=@Hc.̈́sۉ5])#]ӂ8auYv HBnSDTJ-$z9ћk zZ~o}C?Eӫk#0drbTngw\XJ`^Z*Z56 S(]$}@=ncXe֖j݋joӼ0QJ1ў;w, XOX 't(UЕVMA|{Sǘa<$c![8c鷠+[ō0?Jp~"뫝jS^@.UUmqFfc[yI4jRax3s#U"QN;3+9kw)#~Rn `{u{ ޒ}(gpևk> +ΔY *%;Gm#;Y0Qb|Ѕ 79"cSEW(`d@w="5:ӘJ~D$TCm ӟ-lF M7-ڡƿh0#\q"!_k\UmnF;_X'˼X΋'!x6+ +nf V)I$I&IA\[WF;48R 8.}s $p&䒧I;h~B7} U]lMPwh~V?+*Sį.y qw~!CIeH;߭;( c_AF[`_t[`RD]vTKrqTEkАW ّX%? /X^;Ѳ2Џ= ы,qj6g$>}PVK$d*<|יITWR{01 ʛ΂8Eʀ|LF(]u$c,K2e%M HGۉ*.SY'}8ԼbةbBe'Q8uq[ has:ꛞA _^DFI5NJ ثBf@k}?61x̞H_@+Ĥ _{ 4N+̿HV(F=!d!|BՄ)A\`Gɾt<bm$J$ _d9^YIH˹hUR`S!5,o” BnbTlWVg`Cp,Zf̣ɔOsr;'jN=ʮ ^J0 JQWFuixDB DV?$_ ͫ.%+hyGRNQ7k8VW߻ 98` } h\%ʓ-L}HbjAR1 )Gېտp2MXyE;z2d%FQy!Yh70HD#{h2Czp9]ݽET17i?=YQ q՗HDkfil$bu!;{6(tMh+,՘*iIkSS-~uw;Д! bPC(KlMo:) d2]?I[H*0qZ_<ÅeSI$=b2UNGb}1+T#.yUA. &E 4<c[ ־3_."' Be 1Wұcfc54_rp( BmGgnIP hEFZI8VOҷzi6q ˡG(xPƝh,>y46E\#}vrFDQnB j7]5PetT4Df$EIcllv'Ljs4RD~bVYV"NecRJED{ kڱѮXczJ}I!7f@ DZ[: )Μr]/z^sEr o8T K `O]'UBo3:F *5Y4=2-Y#=GW Bfѝa:nquyL2=vHzG1S#Vɯ*kXxxfFu!$92ץ9 @.Å0o3q(l~1t KN &lb)K&V䄝凉$fhR›c$@i F/ k>=xtLP Ŕ(9/h5Qϸ]*݆lB_NWRm{#/0tsHK6dR'ؠ7cHm,,__q|!\*Tewi8߁r'.O ~Ye?KP̐owg {Q >ϥ4%ưdi}N,H-uG0b.d_>hkXvCs@!hn !'oIfd&_& elkW)5<?_ÌԖ W u)9oCv# erڶͤ>U}S79Kb>AT}+J|ksTxޔam̒Z;_]qN" RSKB9 r%K0W"?ȁWۋ.!.>k攖5 /+ R +5(IhqR9bM钧jL6rxHrej r8P.Pϔ~"ΓӀJ_IfsڞX–G,x#}(\=S-"KX~*(]d[3+;\Y0vCgi溈k$L)9%KuUx Wm廯DyI^q +Ol H3$REsoesWƷoD'>4/Ku4+Q֬a6e8N~|LY6Oa tO'ghu+$wHd/ 8 ] KA$>EHܠ6ʕjoڬa4S6p'>fa:61Wswㅹ\$Uifls>" oyc5eTgTD/ukjAǁ5B]5aBߔ;D8^3k P7NK̓W!ARBW|5j]BQ}~3fR8HyS qtYO+qXmr@F.d? ̫Xu7_ qɭQ%sN A@zyLJV:CY7hcO3Q!d~Hj|:gg;^ix ^˥ð֘a<4e}胻QD.xI 98x}O irKѳB8~ΏsU)䡠PmZ^لM)kZzE{sF\ȶZcY O?*nM:hpfqu\YQ3QTWw# Z/p){OTΡfbُ«.M C8FbQҾJ:)a" PF S'st;cr_ "BϤmS\ kjp?\{PYO}z"9ua9^iHw?,ubuX; .(pHȃ/ LşH@%U[ybv.-bT#{iehjmNH-L0M}HZ{Z$`WB6F$"P4gʽ*۴'#;L 5ggm!XT o[KpVriϷ.>Zˢ,\_qp%qԝ6ݖ ' 4P12% B0D|iKܱ DTI`x۬E0_enʞcza<5K@ ǮlNI>72ރib*Gen^AmFqH?"OTY̭BGkQ'{UEI 5wൖ2A&ƩH U`ZjZ?sŝQNKbקGTc_j8pe; Li{X'-!B[ vpyhv&>Lj9wgcԿ!l{={_%OFf{LT@$6$f̎l b$ = (ICSpD<.bRx!5RS"{Wy۽i(Q]cL7ɐU.ky/A'=U:"44 Y8/}X%*e#]-hn\ )V| Zs6Tء{ɕ0v@/ 2ǟоQHf{e )AMӻeWv z4U|h!U*.CiŊUD]U}Lpyى`΋Ezt!]vnOyVaG/Yb?gS@)Rc@疩:5NMW_6i`kEo=7 +KaR. !] &n}A!{M7,eFX<|;Ww)vĐj$h& 5tx8%vM*iASVp!YA_TȽYlLe.IO3X%}UZ`_-*X[vI[1kie[%F,3|36;rt$>qgL<pIrKL}FJPVw(DXT̀OjtB~9RF!0}+B3"vc/;!U6F\/s܉U.dr_:2Q-he)hw&DH "2DZ~Y=~+w/`Z^ӴfVu۽2?4&xΩ:*LrJ.U5Y֊Ar0LҝmQ46.AUi!CXYRΝ!C /փx)aneLPrnQR]0K1RIcir(n}wpXG*e 1gr3],JruF#2䈌|i q-;J=܇^GE&AYzVx| m+1Qk468tз;!Ц|&ǡ%٠vtup%hTuU=,;9~wPh3ONB¼sR2<~BA;ѝ^=ossʬrzYwfF0%Ie. GQRʒXj^.ͪh PxFf+~1KhI_llT8Z*kQc!QonQH*B og X/d_ 䐈 E7 H !P|}m48$ iӲS,:7 OOh]ppA¡|= *)GH?E8gOIڊiQ!+dxMuUx/ByH \IHG=6ULS#]?bpZ1@kܶi>>(D^ёPmc׹ѓ+[D<,q# $3/%oP) Lc;Ic!`Ț4q79؟ 9{iLmÔk⛉z2no{ZQ~Ȝ#]$Sl`|ح@r6 n0$T Ep;7B\H~[_')aR-"^]>W!lqCv'^[ wdp~>'De8ȉgS\Q)C[QNN$3~n3XR14zWN,L4@_cܔ9QG,o.[*`q{xGfh)WF7jZDzhu?]S۽c[1&U%6@*te¢B3TW . d&`<(@&C]W9ceۂ1B+ PN o\+o)BfhƆ;[~wdl7k:&&\r8srIS(\ V+CG ;j8$fz@*E6b a5GGyJ]|( EKȷk0Or1?La cq9ǿxsLƥZtk_S[I!6/ܑ) ⸃,z2L3Ig0v> 1.`ö+YEORz8~ {߳FEvIER_J2<잖 3̶U8?w Uʒz_ FuGzIAi> poI5u>[t;$d-XeOBVU9DKrJ^|M0H6Kr%M<nyfcsMpK4J hRM[dJRkCL9aBn(JL5Sw̉xA+ cٿJ^Ueb'Tv(YLJXg;^glY#va1pv#ELX@6+;46lW'|@zbQ_LoxJ5 1BxW֞A@\v?1)0rEr@ ')3a3W@TQN{QįE!.QSFeHCq~}12J;lF$-isJvQM@>}Fa"L_-.y*3+n$}|5@Kq᝛&5kpvخhA0Vm}] HDhGOrk@^Alv~9"I\̈121;Kػm d^,iTz^Y o3̬Y.@p$bT 0]],tkoThMJ $SU1Ɠ_VE^V!0mZ% _aLhBH&9U*2O[LU~<1! גֿF޼״Q "\d::԰VhH{gfDSlj= ;&9 _tI {Sj'+ՎRG](b!1R}s]tc)fuZ#2g]jsB5`4+Ɉtbk+:xމ{c[9SdnЏ⃜)]S=5MAJ[r=.Z a@X4QK(<_5HBl x)Y*׉J¨o) T|p{1Μj(* 嚻 Myr+N"[Ȫ z0$a”JNLRw*(zލc. =S * d?dq]9E=Bf2Oڞq#YC&g 9͋WN M/wxK{5$@=F-&YIa]7=՗D(l;S.jW[-5N#)QJI."SI3]邔F{f0ܦJeh6 ^- =ˀ|[ >*z4/wPʫ<{ &t+-s@c7hE-E aEA3Rc¢N[4YyVfs 3sF蝱#aBـ@xc1:T1/g>]XK(*Xr~!h+il^ݯ5KU/Ƅ'y ޤ2wxLkO\bn'j)͎&Qnf û<5%{LCu,$8Qrza%ȁHKĄ|#Vl;f ӓr*so}ch"q @,eZ7&d~Zct|ʟl /'sPc$K/};;kQ R3i]*@ږ%)@[ܙkRK!GZ=oCM*L]!FZۑO"l  ;\N}U6]{nv烢~96~H`k0;bd c;UQ6*uaR =)J=dn }].&Fs߮ t7߫KŴSyQ괽 =g:"t-n3wIuTQ߮8?/hђP$eƟ.8O4)sj?kڸ6du%xXSICN}wCaĵ'뽱=KsnsԠ){9^.yw2SF&>j`H! 沅\D. 11mĊG~'p+yEp~moѣ 5rbn{& W?wk*wLyP=ʼkhi>wRr)+YOa1 (nA؀q| ~…(]V8Rא~o{ D #dT9b٪NCq;a'9> 2Թ'.HV>~ۣaIRR@Ή!(| [؜=٦Pko6RMF}!(9)r)E'y$Zl4k53F;_s(n1VKŁ8c=(VhyK­u"%͵ ճr"s$g&9)HuW5v:p4棤T";K0'('T=b1-~eC[!@Ϯ6b8NBv᳛)ᩐVb~=F+&J " ߠm aq;Dsǐ}(N#4^0FdPѭ5`5wȷHnJ83A74}jYaHb{^e ӿ@ctw00c>O WsEw߫=Tɡi39+B6@Zscg4,)T6V܍(j Ms%mIfiRnPc`pI5f Ⱥb1vk!7_ԨlƯcW4gqz@(c8 bڗO#@ JapW1Q~}X/i WCa?2吢.橩B!~#˻x%]m8> d239tL`+&ᗌ.~.̭ڈNzm,uu/l=wIM3BeW ewlyZx맔3w\o"HA)aO67vH= HNy!/vB9|(Hc>i t@~ھ*%:^aRth֧Y6X}:3 j5L)a]cͬi&oi5DW$!n- MnH% && vc~Зq1#z+l(ǿkIB9EWU w'qy1{De 1$6lnKc{,c} F;mϙT_\{P8@]~}\~:P$;M ~t7uLS ǗQ^,h:rs؀}o8hv[ؿ gإX 2}'ފ] )8rz E<_,#ԻJ.cLzqE !NvAܐ$p |2vৼf^W'](g-u]o![PjMh;jf~wŘ74HrOzd* <$"7J:i:\F^O}K?p7J4g0fأ9u}_Æ;D^_1wؒw}XsP.%O $H8p?_s!T[آK}bR)ᶧM;I_DIGJ2UfT}ʵn9!joZ Ah]C0\̀ x]eɖ"ɿ(f"keZ)K#T"g0f _d!ѕ]Ftg28D W7{c %$ ./6p9BBkG"E.Ke|\[5!n_|$' T,T6*W/:B?9߫, yʹ  JD"a<myʛoN\wϘQ XǸt|c͹m:$&CԹ?Yz2Ei zu@סG!fx$`L2_ڷڪCiwAB&8s3>~aK[vaiAF鄥Vd(%N(ؼ;:~ĽsQ1$QʿSqh:41Ld,TKrq ꘠M "_hT}1=4 pG4.[x Fmz2*ޏ /R`2>M-|5Jx i1u=Oq:8-gou:Zs]րuP woCF#RʻLkD Յ( qw҃LAҢkTPXX\:S$(5S{=H+ 3rzy^˨<I}GUdULX-VYgx󌒰$kdQ[3ؿ(5_%*!yb蜯-{W %<`*!Q+?E` u<۟dO޿sJk 4ܡKݢ"?) !VL钨nn~Ae&)vΏGQS]"@jE*-]O^C}hk'TrmIL5mɝ*+=wVs돯R(X|*:r2u#SFYSk}x_|^6b!@8ޢمd0VCd<E4slbr}Jxށzy̴sP78GVyZ:( %;k;\5E֦X!\ Y8_P[@}tZduo,.kir AcI.Ct߂ R9S "ؘ[37v|&WS\x`wq> ^;;f#_dUhv!Mlt=!+6Yf;u+B?8j'L?^ )yP<"tܻU}ZK%gF{hZ Q]nyd>HpedVcHi| -܀ƪiޡ4KGZBp－gY M!"kD0$X]5Cbb\P(#/ u{Y29Uz5,!J@+7V!Kߖ *}UQ+;)]V'-* +jVJ')O?!^r$~..D޴0JYm@tGv{=Hf[NMo_Vq-qx`ăTKE^j ,LܝpM}؟Ҽ⽮=̰ 8ހwzbEI/2HfyAY[$ye@[WIC^\d5a5 ;4Kf 3 0j^7Eu@2/j[@e\MH3)i|o#5Ñ2!~Þ\CQ(QdE|u$$G2}l2+d6K!>wge;ıC*2%q1X|2[.H!3|WB k(#Sw[ 2j|P4mn^"b{e} b^5.Oqf%!63i8:sۏ#""[vAnjH=m d0m$3jUŒ&aX;uVm5ѝ ʄ6_uiMbS)ŏeuTm}dMIKN-Pu.nrDž%ORYݡ>֮7"5W/8[X< &N9n|]@" &Kg~ $?m]4&bWE(ۆ iQ*@hAi^k즘5Th &ؿ(<;hnN{g Oh $F4'!gx}qD0}|(Z&dEc/ͤfVCu_Z6o")Ǭ]N-W\vl*9靀 '{Q+ |\DxvNnSu۾dyWrѐ?LyIO@c$덃MߥTo~k2! "~EC-a&|l4X]iȞi]m@DƎH^?KV>uiO +$i$1DF3 i9s|mI偕4fIpH{S] si}8ʼn/O3Ր659wh ?QI뿞̪ GכV#)[*[ HxlB9 sSъ耖me-u[\OsGbu0XRUΠ$ } -kd8p!aJ8y/73sޢI˗<'u(Q[Tz"wF>7}'l=4^mݻb~{x`ue~f`_9lcuX4%i11d"Q1lo_D/uQhI*y툯~aA51bRc\Z=69MR$$XdHM>Լ5pamB&H ,̵us]b3-:Ut> f35/??aY v!jMOY̒kn_{MRe.= )x3tGs˂HKh8r `wU' >&!PnrFߨcqꆆ3+,7)wNe/g ,'oCd)V_6N<*1c =vL 4Nn@K+zsD! w|BIwԇئ$_j} TzGnmT5>V,ڢ Jߍ49Ț~p\ÇGT<ֹ5ZZj ʛ׬ p}1Ap  UPogqk݃CHFɚ $ƫAl]CTvo1:*0kjl҈>SRo؛ 1 ޟ.?ia2mkYLHn ݓ:'?Q3՜oyW:9i$ AtJ~5)hE"ľ4PYԐӦy _&^[tjT~➛触2Ӑ2S-ckFHfߒ^&f+mOA3enڄӵ0"OUv.qg @x䶃T@z*&v`u ֛qȎjp+'̧9ވ-:f)0 !:@߅i> ;md?+ 1!'N&b;N㏃r\껧nyl&:0~NZ[38ΝZ[{}۲!:` .LD/T-mdBͥP2 [ʊ63Buǁ}s"1yHxA $ц1 JJF+"+B3I1!J2@w)IK_"RH 2gAI-%eiV@QWf*7>v)&3Vi(9._]7K ӻS1R1[CzQ4Z|+&w$4$`I}$O"p2)+Q U=_3/ȰM9h5~ͦPR $0P \=o}oٜqWuGO)?k*3B@g0>)5MNh鹱27OB8 : _կ!3# dL%>|(L|ъiz^dZԵ:DjorOǂ2BxOy&Ơ*[9 SHuq{G2Q|>~n˄?TŊ5rULT2<.w̝Oג+kTd*meԂ\{a셑q#{ rF&.c2eR=U?ƨ<~N6ߡ(=t%q{6DO`9"vx_*hu/˓1i ]]xmb-4pFP1GK꧘e:2")yz=ޗ*"'.Y|P5A~"dMTcvLRxPG&L r !Sgns&o&1>P3Q_ nDfZxy įq1퇉A[Y}r3J`u4FȟO;jzm{4 !4U1U͠JJ֛ʔp6{A_3s۬e'^XŜ`'~zo~s '{پME@jsrDI<W!\;D<3l m\QO>]O`E:G/0bMw6g4<(t^b.^r pZMZT'm*=;-}A =~<{3=q_A/^ mVv h:j3vCmVxk򚝗FCRjUresVvj6 =$ۗZ|6%(w`Joc>#z (+vTe擦A:Lj>OV4\*^\wj1 V3Y}cMONH0"&6dL( 1maф{;?]IҁVX𚎍_2A.< "g5$Ƭ>^4R6aA}3l|!WJb)q/)Ρ`+q26lوl|rkn:MtZRX .}=.X0z'o-HNw&`{xkgvnif YgS6nu5&+ &{qk4OP?Zzovi"'n _8>25dZl?!+h2EKyViB]{NXRɔA7^@5 `.X4GϩXRM*ՇHY6#}{}k!o`ֆI14N۩Zb'yLubceņ@JQ33T(̉e ťYoDbFkh"]Eg% K]39:zʿu?),ohIr|AÅqz:ݪU./\2nɆvlKzÖ>$z NY ]+G^KhWbJ1%27LJвt+x>(`#bn@8~oJo!X?oie,0) MDny7>up~8rSp3>F&K!]5vWEtشv狒a\?t.Ѹv˜13mȿ鿇0f3Ul "/;@hTgaF MB,/v02m̹T%\ZQDyƅu⻺ИL }n5(?PVȠGe|(VowMu {;AlAǦ&Pm4K/ 6BVx"+[Wquj9kK(ڣI1r7ƃ*)fώ#Z&A)'t\|$}h%[ v\]&R0KbY، =pkp &m{Τ!ǞeoǘиKxuuS{95%>_RvHԋpw\f)qMq:y_ )TE XI<Ϋض2΁ R]<0:Vg wG2EO Z.W Ye`W2'ѝ/tzkD71Jr!s_k~E;ݗCeI\pAi|n?6%4' w=:+#&{d}rI8@5e`!?.G :[ #D>O%~x2L}>xmk\f fmA<,,jfeʱ`bCv~Vm?Z!2qhY@)~3/;5E!Ե>b?ky֧id۾82"Vܵǃ+|_'[쏵Qu.*^?0s$hAufBxz{L3~gd0[긴0mǑ=Q2 \C]ZfPu_^rdCCds&G6}6qV{B:jU]3(36ʖ_` лtG>eWdҸuN^Ī /J j/Xnf=vh'2{W"6җE4al0tll}pgtl6"ܽvG6ey1'oKeW &C/9lbjFF1zbŽ-EvuIr0fwq' G.+zcq &ju%RcDTal> Hr/#f 9M ~85XEmRww\~U } ^R&L{ ۃDhH)܌ndPEjywdêsV{dk.LPR0>8̈*]_H+[ pf0In46lTw2v[clЧE&$%ΈD$N$ǠFt#g %8!wc: 5%Tv[A0f蘯1{&F͠ԞFy[yll~Yim.)4;J Lܪ:IA?wS {øro97-ڂG7]yN0u68kdnT⚹&wTU[ʻ0RC,+l\ۘPt^CmF |~f}1n3b@@"r,_vR7 9K8븳!6,vi1F&oj4y] q?g9n- ١e6*ɶOLyj̈́y{*IZ;9 % 4Tdq|+%u2UQ,D'Lj3f|^tgl5 eͧՒ a*T ލyK^.ْh(%.΅{%Ch (J@`Q+/⸓U ѻnJxYSLXQ!w(usPSiF,7pQ+L1C5~C&*DK%_Q55u4Ɩ#4r9inXL HP?$6BQVIܵ=AB~蜤E嚳įWm%_xXͪu´ή <:aSӴH?ۉo>VTf똊?^ÑxH lj\|pK?;(d_{N>, vgc!I16)NSgo|L,-՚rC5c@jĜnK "<ɠ`'ҸQj5͝aUR1C`8%W .[LvV6$z0Ʃ[1#V$ۅиv{ǔحH*FLٰ'֠W[ 1oF'[MF3m|OzZ$=[ <$ &Y?z!,v$fz5}1SFѦuHRom;$84#ph7JE} I{wm7.˄ "qDƤADAM V@Nk qF9v`,wd' m8+`Nw F_B ]ÏAFᜩi}ޫ G}tŮϋCJ zEklhN0ec\a:BB,HN_!=U#ټ$oej#%>[*ls2s%t$ E/C?[Ԧkڃ2 Z6lsRŸu8-.X }d&}3l9<}Fv!n\ 7bƨu(f(YᘪUr* XuT[.tEs[dFa=M)/hj} {C 'SEy%$#`Xי=*m`Sʐ&: ׎ {d+DO.ZLʺ( LyHY'˞1sc3Eمw sle|7هgtuW=B) Vr@{P}$+!fhLc 6w`$ZU 90YKSC^srzt_8<։|꬐chh[?zD_GȊUhD/};zWP%!Q(UtǖS) ىe_g>0 [C Gl|L7Qe"Z!Z6!.!j!7hm9ݾu"Oj׼wDrkVRH7Fr!Ғ* ~,":&"d%cy50 )Bډ($Eж+8-f@]BW$ +qd+K$Gh*_ǿP\8rabf_HFxe)mb<}젙mA"t\b9q<'>bҐ~V!?!S!W-+%wȵmRMɵ_f V l^JA]iGXUqxDxMB t s,~7Ieg$gΙ2LxŜ_(rhZmm-?Tن8h5 |m "ط`6qn^U^`En4sb9'żk̢I|ܜ=b;vKL Wm<È$S@loᕣ]q[KB@ġ5r,r(yHiz{*nYnD3mY$ sq|k$yOffe|yTqEA>XmFkPV0z? ( + Fpٮڡ(!TG(AӸ0A4;w4UHV\m.MEEY2H/LHe"s8mQ=/l} 9q|&0;eaWYUWJ }9WEM1;}d7ڼL= x^a04$Hsݙ8Y 70645eTmU)OGFT@TlDQ~di Y2inLݤzJz|ߟ1#i9Ld,&xƃ+Y ^6gU=RSQ VfDT:-m]-owWkP]ƐV`{'DU}~뭜;r#K>3)tG~ Kˍ#Վ#6dcJvJA Kf%&R k`c\Q\"!pOnCL-Mⲓ=8 cP)FҠ@Xw|$ mMmqDW,R=Zt=ێNRWR~)N(ynwHd`C]5iiUq}$ZDӖҕQrr]]QZ氂0wPڷZAzC.7ݮU7msK,'EC5B? (].Xi:wqN#Hy:ac3Dk=fvQrjNx椺'[GY)F;{!N7iO~dvd9v)bΝp0d{n*L+c`h08;֟`σM0'*g'sAmWm[yN2CщYflڠ:-#Re4' ?4$_eu%(UZS3q`S䲆ELRYePkts,NU-ƾC Ά7;'C 0>}&Rin2}ɜ{%7Qm,mْ^u(XwlMOG'fq)TH哂L@2y24jx2iDI1$;+kܬT:EW2?UY@Ee jHX7y ~-oߘ镳5~Xn#m(p͠{lNݧֵyRC¼ 5d.734U^p Ƈh;% ^Lҳ探NH?I)Ttч+d5@S7" /p^"ha0L;akJT{-r^ j+\$F Ԓ<0f "?nwX.łcMxgW.w3g aUIXp+ M{ =#IBP !@ 3&LC׏LU_„2OV&0m+ێ`!PܯRh"D8>1rn@FstR|!*W :u}4kpϘrdt ̜S-i]iX)v ?l@ @0QrT  |1G)N]kŭ@ǡ?0AD'xEVFg%c]WbC2)Hax|o`c.=%%bN V)a!sN˶x&"c^6lǷ.B ZGoh.ijUqx@?V}#PMTrKhPi~? '25?ag!M@.n^% KwyvxN)!h/ FMe<@I@9N,k (2im},ow"|*ˠޣaDǧ$0^ =|?ۚO>G^4V _|,@F<'OP|U%k!{6Ce nU36)W/lW(rwQ ?>Xv1ȝ*'ģ(M [skD̃*_: O{tŤшeYwJx)4t7̸};xnjT?i\6TlEwgj 7aGk^&1-X֋sM>}L*[\D ͥ< `UWci&7TWܤ-1+T1SeSaX _yneo;/(ه>Zr5bxWJ|;;w?eѱLFbxQiM6;6o&j(&0䆲iد1 ]Fx%<(q)+@\"1m7$8K_$j'>a[edk#]ad*_pX[732MHSo`)>VH~] o*،3NpA]>*96 M#jPyox_^ƒ$iLVRh#V|r|t 8m&/7[[c|Yd62>q;-HJ{ir#e{mqC.`S@&[\*O>m-^[W@'`B= CIQ"@wg-؇)`p/\?8_^ZOe1~z&4Cڕ?GoUT˩>?@?h" 4"5 FLO9V=H6k3]oW_]@#-R €zOʔm-G 0ӈlHpM5+BzW G<,0M}axeM V"V@` ]GWpzx`nlg{+7EDŝƹo|`6?o)95E 8C#Ag0 Wy^QB<;&]11W(Gj.-_,z 2Bױe kګy;;rmKHU27 0(73%n./}A")~i[9M9_&j^{L߂oml>d^ť+1+yn=w#(>=m8;fm9M]4n+uyH~eIm3yH{䴪ݭ| F]͑c,VP˽vk5V^R(}2+Sَjj8wU/$M(z!Lȡ/1"F6o2*Mև,Ȟ~!6S0}=%Ǟ0Ç9L'ax:4ʾ<3;۳7*[2pjvBG*F6;>q<|u;$w}}nHw<6rzT 3|+@. ѹs!ؘD%/|jj',>K;Fm]$:5qt+ᅡ Rrq&AՔ e)lA'B$Z4)}n.^҂wҷhͩ&3%z59#fk^m wˍ8dOIMtN–vD6tv,yGu.eTԝ&$f3gRd* l7/_RH`8/3酑y!ˬs^_e@ڞR54yH,hF ȼ2-h\73D Tӱ&Yoy"Sm;'1 ҕm L֢kCRd뿆v J04vP 0Ui&gž$`>gj S㓑otNYr$4ZX{#uui^XS ۚI`UErFKH{EVt;ȓzQ?,~'|)+1 %*FL/"6$0N+ۛ+t6=2WpR7y~y@(O7dܖ]p\"s+ۨA\RͅO.Kr(8%f;bb, }h!-H{<4@2JR!Э0TꄏG+ }`X: qޘk+dH6>g;/cʂѿ ߺFVB#T#z^"'eqp0ݖk=Cp 4F@7 sm) RD5tm"(ĮO0PEX/pZRn .O&`!ɷ^_wʐӱKM-d";S1(n.^ϏePDT]o0^{~UAǠLVo56!`g1n#[W|Pf"#+tQ*ޖqWS(okz2SP/ T[>-Gَɭڂ&%VFkZ`G&EgvQ#!q&td+5ԨG\#:o8k+ZF!"&w`8hil2fpwx#oyM"r?^Γ9S}nƱ}1@0RWu8iE"Ma19{oguY.Rֵj[ENÇnNJ{m^o vp'A5^ƺ>TF&=)OGVyy+Wl2ynf:IbAKi~QW8RENv9k(?2G<@,XMR臝PR(q)-Do,49V5Vť&ga/F=S=@n`ͷ*ݥ,XO j "qpRM8oR9WC\MXxP\YljjńaMOί!\7ŵTSWӮ^CX7`植$7аl'AEq$y4=Qz\n1.-a#93 Ə$+ZNme}tCu5_@e΋sf!h5n r("iɳzPЭ$?KGF1Ď%Gv Hn X0O=ļm >,hzV1,9<jq ~yXn6v!4@Cs]2z)Da s Χk?$նhfNA(rx@׉|4޿ΪObДy{)Gh \LEE<ʲ< U_S> 8L2 ;"IAu dzfWN׈F4KmJSו`98^;9w29oݾkXڐu9Y(7,Yt],GbFw;]_Ph!3<_FUq y ^B64vP݈IoC@TRZ|&89cRg9n6(5;A}4zoY4BO.71'=r}mFx e*RW'}x2_A34S}E ]\^U¬ܬ'{aD0g|vB,#Yo䀏|9 #b}L^H >^"L''⺤!Isըi|8Eo?7E/IQk  Wn(巵coట6 x\]3Ǧӛ,aˌ1qڵs^ M4I"ȚNuk_c-,`({4+-bÅTᒷ ]{<ϕEJhQ0u<.:Uə20 2ю7A}H'9pJ HG_x'hug}mӘc~]PaS $>WPp;Yc! 10^eC|`R&6~^f硭=w=-RtęD ʯj UyecI*#}A;pM lwhOwSiKLtaLvG9h=r:Kn9r ]gB# ~Nau.)J }[[ر= .wonz,):;Z*^ G}>:ѳ"o2mEPG[TfRkF|х [[+=搆KJBvw  :mjN~Ձ`RE"zĕO:M/d|UQ<*NGI`h oE<̿1 l4faaP$OEqǁ0@fX/X$8 ?3#A 3R y4ouA͌Շ]uT">%kgZuW ]):"6GPܽ7[3:Offq8y_tܤ4Ly}]="D;yޟy([ -x`t:òDwB}ېh$N*yTH-(_=դeCY1N>1HSxSao|.}B Z0dz۟D3@͌syD݋w0or㻚q $@`V#,bqƭGv;|R[kM LY@s'nh|p;s5e<[STJzeea1c$j+sLso9 ˭AVL{V aetV>=i~q&a/*|U@\}:M՘OqzV|t,܋ \nBbwߥ۽G?݃ca%]+ viFԱNt~\rX AgW?8(3Vx+;W]+.kbY͟VR§lߒ73mx`$n|t`*K$K= E`.nx ߋX,?B='@ f )wT OrLOܒ0D]~'o)72]%#3efj&<.vSR7@"H20O#]Y6ȣ-YLrvo>kҨN*&/8MΨy܉]"F2yFjJ%tޡb$/"*Z&"pClnMQx-2Ztd'"y.8̧E;_ пx ̊ŵ= 7!-JKѥ|'FmomCN [xKY#'ͻ1cEWYˠcVT=(8O M- &l$WJ7 ㍋WY5cԨ! Ӯ#vïFwbI%=tLtv*v~?;P5i=>R\ . dk~+@Zf@]^DWf$O4þ~sh85|єXއY=~ZZ(Bx &16t:v,Q ;Y2_Y~"t #uko&Gy#g@~ÄzE[;sȢVIO`"ubǙπ~&lV6:N־7f49Tuto|A^WlFޢ}K;HD[\?0c `fxp SX1P\F/Qhh!:+zLϮO8 S\5֤jKG^fRų c( (2_i:}u81C5u@"`\GهiOrXO_ȁ@vk"~ofc N?:t _k" 7ZuSA Sp!rHYT֊ !ф AlG Ħ"S}Z%F=TwqYUݔAG;'6[`K@i!̦sClAa'eT?fĞ8+-cgGq9&Տ71'x,k7w숸 {hX9Mnrp )!+Yߣ1z@5u+P&kｔϺ RLRYFꟊa|D_:CGڅjYS.S 9t0= #k-d+vz_1Te#dEqٱ()pS55ן zZa[O񷦩 {%.u7SBLڠ3HҺSZJplYyˮ Fc_TK0Gߓ/^K@| (pׁy8-2l3%l5!zE!E#U%UGr6pK䀸ߝjreBܙ|XvgxڭQ. sCQs@G3Wp,@wg+De^hwՋ¦EUحl4c'bv~ g-:.˩QHWQgtV2 5,4rF#ρHT  ;+P{qRp.L-,?!s\CsRbܽɭi YʒhPo6j5Lp4}\6^Ynø'6'rLnd>[5J/g]Z0 ͠~\.Ayu_īPpgmØFk0ԛɵחǠƲ꾫% Ta=+E%am߬7oB 9:,pFh%*AfcW2Aw 緩 o)梖JIddRΜ7* 6oɡ[c`WL!an&E[*'BO׼4[#qd iZ=')\ q!{ÒE9)o2|6]l9aPXx0PXu4vkE d@YCLBN|2[\u">{t*3L;c$GgƆEߍ+( E.*c" K6e-XsOb: ,9#ԨL֡|pόzq^IMv F)8ַEh9t~xt(J=O4[ XvMhM(7N!{7WÚ+PT|[6@tpXfATRu)+O>TJ~$W2ouffh@S+ *<S٘ 2AyeP}?+}F.G~/&R<1vG4ʒm^ƉhUo_QsFȡ2 ؒ)?\`-*f#^F_T@Eԡ - =\ V-\B9d@yݱeBl IyJ:Nܔ祈N!,0#P 梯,8r, d&6UIG 0$def81=_4:*QhكCLIo4$\6&2(a1.wȑ?r t{ J5# ұX/!q^3D)n!~h)+%]$գVg%s=X KkΜD4阀~tPwY^_AhK]8AV/~3T<  "E~CdX UREag\#\{}u"}nkZ$Xغt q_!7lGL-l7s0clgyJ=mOS:|[aVGbd6.ЏIT<2wހ00vY[ ҷdwJZN!4:ɾ*3Bf$ 7Vp2*#6efȴ P|~jq&F|tCbG '3$F‘ CFW:s8# щsd Ww)hpb}2bY< ԙhjRX?RH E 5eZN*ۗm{dx18Sѵ,E^wn7$$ѷ.7)_ H|Q1bNtZNd rК hhCbfad6ٸ#lCWPb"goKY{ؓ];Rj'ӊGRT5e:vӄ]M.=Ħh,g~R+4+'!<6'$R1*xԀ&cO\H)[p‡pYc"fz3P`"lMp9!͕Eu@,`SG}N|Ydz1AuzupoOlt{*\TԚa&V"hTc\?[Yy{M ,]78l-LG}&= \^v됿D -"Ϳtͣ#iccXB Z Ω#U$ȳؖڟ4ݑX Y!x^,P/>J&7z]ۈ'l'3q?CInU >,9v0` AJVB"RT9o$\8YվrMPjIQ{_fO74Α5,17㕴h|. 4w BS=5,ny%}HDZCNۥ"%(_ =Q4| 1=G \f!h;z lLvD%TgShO !E los B,'p܂sFm5zfBiR '^l|XУgE4[0 mkR(/!yRfN'm#E瘛œ$f: %߽kf ԻܥP"[v$1i~))@&]KplhۼJbvދAS/4A&FaUF_y= ۥ' ׾`lXS[&`Qm3'E?پm;~ʑF$;G[SR۟5f#uphlkfT yQu;Gːw6iãg]REq ܂<6@>yĴDf$d(̴} % C%k1!MkRj4.ShNttvހ7ýՒj,~;-"n*hAO"ږ%dU&Tp rAYkW}!1dٳ;V] |B?)i7zuStV3O Ϩ6ڹH3 ՊJcˮXWoևE[P -e%D|d/aU$SJ?.NG?Z/C)X3Aͨ?ZL͏Lxa;L/ǺJ~G!mM紇t+nr?:*+]!{3XAcW: 7&5qvINraˮnζwjr?K*_mԵju^m_*ޞ(3H=@7pJ ]IcXDے Q&Nḳke.ݐWT})1 i~ٮl4:J[>.<ڣ_1!PVfͲ^A cFQC0n=-U_I. o,]F_PRŖS0UXFу|OSPAKj2!;LT}lG''D"sIٱsٰNsɭJqo"r7RM8h޶ۡy?\ _L.)@3(7 y^di9]U=,fu}0ktn'5,2>2&ٹj{O7KoMV}owʔ,/ڷ%}_ĠߙIߺM'LzThKY2ET(@kI8Fb8\C蓶pG%*Mvv7ɿ<<0Z"Cםj,`AH!d |7Pnnt}þp}]tGW[b0ExZ~%HDžߪ?B(&uWy7,JMLWu]\$>܃N ]wͯUO UyMq[-/5-^se!F :q,]v.">Y*dHGdA&DQvj3ZގWk΅"ƺtO\މdM|X} x-ənG;ʲJsn?!=é9kQ[!@F9!g((&`@P۫)=ǝh$3E)Rŏ)?Gy6R5wT1uQSQdi56~ݜZWUG/' yUVc4h+vFL3)xiH]$h̵ YV; sM;LRʫ֔(Nti { _  \^Qi BLyO %B$5H67.ոFh ,;8A@M6Oz e lLqVwq?y[DG(L{a$0ߵ܍|#7n}̀ʗ{V*uϣ UY*ɢsFp8L+of?F9a7H1+gZAf]5, Am[Ң|ٿ8c+oUN0T!^2ƻ[ۢ]Z{8pmX\48<,I h]Sc;{ňD-.? Gҷ!4T{ `d .$nUL!mnpP8RI']ߘ@q9Hxcn%9P8-6iZCLƲsGAd 4R&#yyQHOƟ;0] c΋|? d eSL§?kUxHh9Dt,YJ)6sY _ hl_ {E*z澗=U#iZsڻѰ:4$kc wO >Wј^Kl` I+F=5FۊER٭ '8d:[!QFƏzV(ZC1)>B&(J&ALDOAe;ƃ6C;|lwz-?f[9R87殸z|{t׵KKgǍ|DnaQ{2`O'򏺎^'1..9o>STݫ̖bHn3'?X4a eb*Fk{V\CpZ>KǺژ"#'Y_$7m~DPsaDo5jS4Nl_`"tOEHRWdE˭1|t9ӛR~oCgu ՖG_]mOn=h2Y7As`[Տ(SMaaw#,lƯj!;cj@"m+wR,0E4~a=s d[Y-ulFmm1x$M+<tL1=XK# PUvIayz,C{ a2mb~( {O]8+ֿsLMt<(}/0kz֪fTmD YW9ę&Z|G*X-I,{ MFIW/ks۟| Kuήy*r2]pzaЋ{5Wvi?G@9R+BlIe⒓r E j 4>fov(f÷Pm}M{ ]ga67ݕ@,[ $u iG ^O׏XӴcZi úŸΡUŃqHاC7v41~Rɞ1 U )`;F9UQP+ŏ_}tp}0oԈ5,ƜAM/)rX^fo6$"90^p .R:$>)nQ2.׃hx39×?i9Ŋp3R^8 鶽fv0- 7na/vqܢy/(Hmc+ ECtxit) ¬ITIc)N5N㛑2*z|4hqs7 E#"{ "ht./ʾDj#ZlPfr?W5^$ !3!*¡'ǐ8[gdۥ%^s7h *.˿f (:jU=H5U m"miZa`UC;3 c?;[r#Nh)bFč<Rohz _fz}5}'Hj;1~X$pmMβ U2U̻WS*xfY㢇z:lv~2]1P;d8t2i;QCmՔTi(a9bAZ$ǵuĔ_`]r h_IJ .# ~fpK~ֆ%hng*@cc{ B6GE-v%<*?Ǘ֢,GyN@cX(B)Ҵr!SPhYĄp_8 Z.CY|F*it ˡml:W6 /dٹv7&ށ -.k#f_C@Qãe1%`IK _ҿh~?l?Vq͵)% ƣI44w%!f!͍,pz,U z=WP7ꈯ@|։ %7٨{{}e \7Ȏ|(qoLW­PoH7'UP( ãRVgB'H%%%ͯhA+:` %+P /}xQӹ";-OhY9Z|TԪ%z 6>/S2( cz6&O(=[g1=0T=VZ-VAsNNt|wg1ɵn\-歒dPXŀzS ݅7 vo4imP}͔f9H+|uvVy:\&9qﻬtfQZC j @n棯'X5"Fn0v)enhpb(2&Q>t~Ju^̢AZ?|jpn:U5aQ2{SMi@Ko &eşaeLeDlıwZ|xH%DG/n@I=>G9U"-AV%6='12%2ނ?fW|5GCw6 }vȐ'[< . 7۠F{F &$:ӌes 5=NI之{ypzE PQ۬ʡwЋ(7khvL !"%D̔wwpG4+U)&:EA}PòeZ=98(=x`ԷπZoSn4-=@6(ЕLnYRr53AO=?w_u⯶L G`, \`ڳ2ze$6K{Aׇ[E}RVh҃Ğ+7g0-쪮, Cat{iQs9,R s[TNSq$*B$O؎UL;4 fJlvFbCkB>c,nDVN6ΟiR:=$h r"xM4"0hj˅B,wOR>B\ZgOpnz(d@$or EdrYf E\ПV{Q2NV!/ Q P?2V3A(b /"J/~?Ī{5Yw]宓E^ l8 JVB5IĶ֒] FiNׄSE}'5;_AYh;Qu#`#p&7,y:ɘYeh>Hv F9e:s6{ pjR./)gq-fv*ɍ(1v4UvL_imz*d^Qmn-pN硩XN<&=E4o;l95]xrQ^ߕxyIVX(;Zfkf5ߦt}2E84ąy]JK7CzIQ`ƷK3eGYs9Ĵ^JWV3*^+: BhbMG΁MQ=7Glcv(ҪDMh9o2VS?'[\u6'+D JK$^X)£jXY9fK0zuh 8[֢1"P"O%fPVq&pUfR*sw}H[jUȺ"9\ WS4pi &A uF<\\"m!-P[xV2,K jŽRAQ\ki";m)\.FFbjUomp54Q$z%:S!ǶY& O][&%?PSN^x;gsj jj5V[ ٴ]׹~g4CUIyPSA 6t*HQ Ճ Opgd>Z$ h$Ԓͯ MwnxxS-Y'P\ϔ5 ̉&(gW IʂQN<[k=n3f#71GW/ EU@B wVzRxVMZSKTr>j=oы荳CW~ n'td1NO;k⥖ſ0KÆO7ڶn.u:Enײbɩv+Ks 2`2,'| &-J*N3F~\oImI^&JKEՀnփ+A3jQ@JZ<$%?z㟝n`ۼ|Ez;r)cd1ziR4K̑S XCihnNA*F.aS2z_>#0*ii^5pK q4#)Nuy=Va[z4|=,MdC M}7c(̄@%ؚ^1U3E)w|XKC_ l-e*2|R(@P˹7g~=ةrm;N*o(.s*«R(H6 Ӊ2. |eOf|jB@{kP'rɠqtX@m<:WGJ+듍S-c9wm_zup}<hG|>u㽗I=Et9oozDJW9|E٪4@C0iqYψYP^O3/9笩tvұW|pSDI0VrTꞇc[vS:?1 FD-ίzWR2#.#vAgo}Ҍƴod#~taszzR>NxEZ 9C n3t/<_\;9Ix"fMS1RGZ OL4y}?߂<|]cӦl(h Os#0tCnjl}ق3 (̂X-NU1D&ĪU83S7zhI4WB/FFCCo-<,O&8N8W$y<`0G3&DfON:6QvɔҺ*Uv=F2N*T%Yx0M}ɍ|n ٽ)}Enn]5s& E}oNڜ8R6_:i0Lv;nVfvZLGJɩBP H% CP[Hn$+|,>0yF*T@ar ݚc^)\uOVsuK£Xg&snk-ӕoΨW8>g\P0sD_ME9sF dbj2Z/rT2G !:G$q+ Ub {9;T{u`skibDJ(]J(70+wV;BW@ILj r4;j{]NH.4q.UK-fنD9)ҌSjXy'|:vsY"*3=h5[*hxn/{m}@h+UOh#'$JO&8+W}<љԽ BaY{,Y?cu3n NZjpwko0:GPWc{7F+~*Ss^Ic+ͻoYM`q DZ"wt\ [o9]{A3f{:9-4k'_ ϨyH|y6 -;M|S2;Ϭzac 6}T}'Г l<\NfxQu^anㆆsbppVWQv8c6`~fcyl}9%׎ׁ໺v68j.hG4SC^eC)`fdwU*4ο2a(UϽvgsT:{a4B Q+a:@ݰ巌݈o.ǡ.AB*)}oP`2 6;RR56[O|?t3!\O q "l<`,RKv}qwaP*\ؚ}(m0T1YW 37*W'(] '8]jua 9[;nL##C Р0y {ŻS 7y z!vQzP[yn桞m?3ޒdH>P0Ws'^@w-LnE/׌5aWQf\TW#)֚TEC+_Gc+&;gNtKF:5*M.9޽Y<-쩡t o0ݴlUV(ٱ+5BQ(P#x &m0^{'YIQ[8J@‡4`8=X[1]-# x+eɅO#" JndCF6G,<كLc(i!s6 u9j@7zD6Uɍ0)fPHl*h7 իUhN*+Dkhw{^\J*"_KxO;8ER8yL-B,[aa?$chN+WކU) -2փ#(W1ZK~͈pYo3ִi^͑ՠ;Ÿ.:㐛&xi[Z'%CѢv3wqc J|&],+eHK\}U ;AO4X- B<$$+ hO-j]<_1! 8%0DP [E{9-efCkM|~7ST<YDK Ȧݳ j<]O8 ԃ'o|2Ђ̰ڜV$dj%w_5#_bx K<fiHtʦv"<͖7b etENol2 \ƖON&l]3&f#-bjǐ=*iYR9"2MI}!/&Aηqhb#hyʌhJ/67RAHѫЉ/؎@e{$FaIv CDA@i$;LOKPiᖢjY'oğF6w؊ #~g~pbIʉ>#˼KE HEOzVY;+!pLT ;d"7Ƶ.MRz#1먩mW5rI&4諝pK̡u*`q#M\6!3-6Ɇ1ef'3dX˷cH`%;Χu7-Kwn$h!3zL]!=[+־YUitA0Jgǁ`2r@kNvOl;]2^^d4`jc)}T&B+TWdsH߽GVPPVjZY“l%z&4*4IJo $cNF?c_ŦxrBQlߚNۺbj]B.a& _d=+j}3t 2}6X_J$^cVnۋow B$G.2⫪ӴꔧVEx +tM` غTj &;>++:/}I?-K%3 d*'r >&W"A,{#,iǚ8OjQ? Zc>I ;5 zdVqV\g D23ꃵz0Q7 %}@0HC 50"z_O?yqJ:F/vhqh8uK8-焵-cКW vL@![)_R\wz%zưgbB^%Al(QCnD#h |{Wt7W%3n:<ǟe)(8xpG/I3Ȑ -<2>M'eÄb# bӱ{jf6xμ e}lņ3W*r hDXsa6|:hpL$@iI MލMg{HN?Nh$IAwnS\80J%aO)%ڍN5 c !~@`^ąX`6q|I d[ll2N֘?Xq V>̟(i#y>|^QJrZ@QFiGJ0+]!5}iS-tmI4Ou# VܮrԤC88L%!ݼs1:>×QRU`10ΒE!Wdy11HyQf ;YْH!^4]igja ̹:"x' Wǰ$u}qg$eo2.r[i^ڌ*.v4 C<۩oqLACH0Aͺ;abky BH4OMHRHޣ~V| \/a*<ԫV*iF>AA&5B; p9BIC(\ĪشXDɞ)n)--4crۺ\Ӯ_?u.OE%_Ї䰍ݲƏCY^5{>]wF f) Y1 WOF$㙛kE)(sȻ۬NR3E7h 0c:$cBFEUj n,˰m13H"!x PƢ> p<sb<aoI; ~wȝp:Za5t, Y3;94 c CqK\ZjJCwij/.([%l @h+ʖDTI^k73-^ 8NUB`Lg=%{{+MYcSOo}616z?HܦQDl4Prb䢳=  A287EFX]|Cs0>{ܙ;3I ^O ,ؘF1suZ,uX ۵+g[laTϘO!\.4 2`AJJTOlo#v~vR[ܞ g}Ďe^0bs0wC#/^ f[qSkec'SLMſoWQǾ~=|I <,K`ʯ{ţѻccCwn:h%.z1%Qs  OY\*kk675B`R jӚ_藤6K ԟ=30& f'!B%{uPeA=ucbS+*tK;t~Y*VŊ͎ * 7}؈筘v{kZ6_߇udOfcA9 `k^›VI?:X —L6 V ѰD۾ n*H9 =6%5ˊQa1Mқ do(W>]nH>3#/r)pAyJM1Vm ni7d_Ph=Ç=/`v])dwRŠH+bצA%g lq>8$oP̗\7wy.ƣp{&?aKU6# %QsUۣE+d}ݟf,bQz`Ig5ܒE`rwt6b]ޫotM g~vM *=}+;@(O9=liOoLC_~6CC]#hi@6<\x%gۖ ]K#ak{^$$̵4dRlA XescmX_P æz#JqB[Y]뿢-S |hy` zs ;CMUmܗ%& e yQXOJN!4MҊQ'-sqX LccdI1˸xظMʪC)$VԞsrTɑ s޾_sI;:s SYԙ"񭈵K)m^)n\}upH*J$MطS]IiF=NEO?\rIa 9* Y%( {`;$%rL9RΚR +.dfN_-NSsp FUH>c[׀k3o*j^T=V> HF8* ț~@@rCwvp/EcD@Fzos-G͚rT]fH'.Nٱ6zm,#[l2\ʙUVhzfJ$w dh@Q}MV|N raZSE$giKn>iƠIl?꺾Τtc }5CS_e=\C" '-/1QCO6">ݡ"CBov~֗Bw9tlʌR$*}էdf1>94ܠ5u((%& i/yyQ4lņ=PGMuYӭjJA*s Ev*ۃbu|>"jv_HX gshwT N6 LAbq?q4"f5*(>i CϘ-7K"l|k07 E8VxpBr|! Q' !am| DOMLblѲ$ʮMۊ*&ʭ͒ȳ ^\UiN{z>&]ثiGw>v7pnede)#9w@V÷~LG8A*dl*>F>] }O2Ǧ uXyx=b)hq.nJ%h _*7 eg-au6_&L!{G;c{suEamG(q呤ҟ#Z(a, _٦rbƄ0\&H}=$dd(du#"0ۄxQoK:t< cPktIr4 G*AXcU9sEBnBs{e y4p\=Zmtu7 z7_tΤ/yMQ/ot^65Zq .#r3qexU;& s Z0W)2.Ȯq (4m7geU7ұFjU,e5/:Lgv m!|~DTXd(jpozˠVԻsyʠ֭pj1Vڟ7|]tR2I?E e]%WϦOj(f]N_Q`mKoX P-\nE3{Bi^Q?PBݶMKZi/c L G63MXg.)O+n=0{5)ʂ-Vh7Hg8 xmΗ9x4g3_-uKVƲ`TvXO7XeJudfK +}+w_pnB zyB?pgY_cYfC 7E prG_ L+zu%Dx=J HFCzVY * Navz|&f5r#῟hZ?K`4@i 1hc'0ĉn1wgk*G x&ˢ5OHB0|i]:tɡá|Qkb94\84',dH~ZǼX"riovpJEx;gS _@NZ*}Tu&-Sn|~x5FsME +bv[n% #i:=&Q<یReXmyJzKU\׌A)T=˵rM-WXPY@Pҋ-œ+)2l)Gǔ8;6rORiMnwTYP&JzUMDeO:EuyB*89ז(~)'7P`^W 9wsl |*mFd+EZ_ww-@ AT[0ٶh3rhS#{t8G[{`MUkG*IH>i#iEJaBCsڝv'k %K<D@aZo567#b u-Cx&mG6*6ka77ܧLS9/ 'cb}ʠڣ;ԻCvajrbn;bDvMd2Hn%dH-2`lՇ>?G=,R#7ٿ)- kI aڟX,#U*~߅'ĎrZ: Ea^"vz YjCj#.blf !菌{c̋9o2)Kx%i>ԸiR(׍m,"HLO~Ѓg( ~|P7[e"qc~b.ЦQX`9!QfP+9,-a4.>ESYպ'؎7FK Q#9 Z90抛͉n1KTx؋FxMPwkc_n'S"L:`|.ITh;-9NbbmԊt,D|Z$O*KYY@i0$Wswki2ha0 ^\I4vX2wpWC2HYư'z~Wo#R+gg+z#!j tMPSY?`g_Tҍ(inA9phRƗv 9A`cpN`PFP)xM}az#'nj~{0Fio2IC\W0=?L670;Vdc:kj'$,C\ 5bVcB Ѫ!DվM{eDkB7|ٺ1wn?1Ph!f,t l"uH"1'7PQseҼ`o!=|e^h,`j(\ :l'-<98=)l^a0;ngQÞ |>Y$,D~Ujr (l}-036?z|YX4f%R:ؠ@I%9y,Ȱ9U=]_0tubVQ8#VNFng37@^W0K]V " 'mwJތrX7x2kEiQM};tfHH$|BX?:ԄI߬n FIi wDιAM 9^mպ^j!NNҜ? TLm /c?Fx=u#U%i!O[[%xnpÑ g~_Hzz.$_,f`Gkrx5)eJ+mRh*' ٬&IM`IbϒU z rv(vs3RךϵmvmOf3C\J>>j7DS;2%휌C]6m\27+:$Ň`_})/LIz ]RQrNe.Bytg^E5\q"K ģFu/ `\3$ή`S % -ex0MPߵ0Cy,C^y?2b9hlEkY;D,ݳߑ  7K#&4HB̾3h,bP9֔?ᚷG:Hva+B]4O~ԥ DYVMWAWeRYG(7Oq RԺBF y.*^d&`֏am%@w @KCSld WvWgFpUg?'WLG ɍ]@'rPxz" 0֚`vKJҘ+ZrTG=ORyeax~9^=JNBSekD3'y2HB@CXhjgD3`Yk©|hiDӓLEa\#*4[>a2cp7LQvM)>sN9,M+aFeWaPءmp0-OxP8׍@ *p(wE#URcl&+dM)vE+]|ɨQ2^3wmR|pa+D}n.<)NORnYau(åxz)t0P-V)7C Еl$C O:sȟp~_6Zә$֛H6I㛺aHV†6ñؒfGFmBf4gǣ4:O*`^Nw=J^ aDIUBԎƴ/A>ԃ_5]Z.07a4^@HbLD˽XX~Cf$ 23 ,]u /A: 6 :$m?9K"[meL^R_u`úp1zXk~ѵ|qcMm"VHzccj`kh]d}ul.ToҎf"u'V=o9k^*F q8H{VG5]''F%L L(‹X%޶1g#_$N=G*%?wHc?-;nuad/;h!}L+1v/z8 '*ePN$*եlX"JX!e%)SbX,1&pHDDu2ِlh멬Un ~TT~7KbFJ.~ <ɝH^G-|=* I!lE`B^ڱ!*9,[?GI].{-B=E %,{ڿQB5yz22zT/Hrn釣n#x=6+LܗXH3ȧc͵|ӲY`ໂA9I,[? @n_pㄖ`mЄXk Vib=?!2>:R?u!)md}C?(lC &^ 9oxq^teDƌu X=Yr W,w6N*R0 %V靲X]ԥG `+! ]ျDeoAbg4;*S䶬oT-^ｘq`;Lcy*K K|yDXq025ObDA f ΍#ԅNŧ%3@ / 3L.EirSsub?a}huQs6tG'e^_E Zy n=GڑgVJƙT` .Q~<1b&͕SǯOa]sizEY@Gcg 9h+O)O }l৭YA$u؅ kf M"^5I^d$3+B3o=pv7$.pDҳr4>ǛMktT7eLD 1O7ҮA;Ahdg`7AѷC^c[^}_=/WJID#|/P篥hƟaw5St9_KX=N?׷ t|F'N @LѴ׎F\곆dj2,]b5A[=$bSFq[fmG B+3bp8/tNy-5ۍFy7<5sLM un_dm4|tW]gJ]Tvs܋M>%4f/ w}(;=2 DhO+kJlƟY˦%!BYT04bY3g"~$&8>?5>c&F:%:/Gk.>N  CNSO:s\Jb&P/ JQ;u94 q`IZOE>nkh"C {_A}7H*.l2eVƳeע1OSlqFցv\?w}8ۅ;fDs˓8v!Qw_D*UhbbEdžE;Ck}@-=4 rU/[t|`R( Q %/H+@k[DO0H(XX"d +YRQXޯz"!@Gh `.i2$7dRu9@QXyކsͿUlJ֘xڗ9bm )sdT96R{/-rrHiй9O_JO3@.6jD6cҦ!vorhc_gQlPnW-[.s?!X<b>͎L)r #lQHL/:V!PtF-:P猪u#uwKT/e 奃px0!5 0- N.2`NU畤!ÿ}iK,8z%%Jߙe}?_Y|v,[NV`S^ٰ }&fxsE¸бh\;@>ƃCTbR4 ȴܸG:J9ds6t_z4ep])ۭ$[Ⳣ Df .Q\SRS3a857J49kr50u!OCDj}EˈCNe8@:H`b_}/=^dMѽ[$+CCMA:T)'tiu.n 2V6[%l4V+Ǚt]O'4m׌FRv %3PB){w +]#wsx8K@;`ɇx{U( (Y=f861XSGefǡ+WfW<ɘ~=pϼPv:R%`T OCo睅,%_YMU2vӒCE"J?Ř~LZ5>% #%ރ9Zkotiq;>EM=vvIcEt^^t:[ru3 tv7sF!ABPS4O >Hb}W 䲙­0 kIKHiP%Xދ8%wP-(_k. 5ϢM} ;X(ܽ&Z^@y_xT0JjX֋3Z:De詾[ klxMUqhLx!iO]T\QSueNҰ;/~XcjCJ5ʑdb&?{ged u/WUWE*iI2JYw[GlRǞ ]_߿ IK+4++k0`[*Pb;!lºGg?^|GJ9kwF "0 A^tF/ؤ1ς|t+t^1j`qbSQi@kw~]}_ͫ$)üc}G@P$-%A22NN5=ҥVZsqGYr,y^TgОQtnzS=@'4F CX g"E2{5RZߩ:K&NV D9 ]3˫ÕM*LF=ZXT1PCV0Wc=N$0r+͆#!xzlQ6Dd vv De~f$ _7Nl[ ۄ81SW܍* vu/A P6BwWMV~s@V \'$KV'uƷ]e\ nL:9HF+#k,++VfV&w0X{k:{- DDtytzf\w4W XoKK0Zt P]q*E9M]ᲞQW8l9w+U@}=ydJρ]!Fij6ִE'餳zQ1?Ni/a{tY-w6IKP n,fWB@J"J]ntv w1/C`NR&;b, K\ ̯u'Y\&0/1u+W0?Xsg  #!9obb5T) u׺ 3/Xhw=抖ɣ0&]i:nV,DŽ(bHk,)ΞN\483lG‘[-[« 1 1[u4{WٴM{mYRx~9 YAڻ?%edg̳P[,ݨX;rBOYDukc:qb# ZF BNײ=0uQv5ڊI>IrbW N4}(eqnQ8Yz91gZ1IMNd#"=sFn|$8=}MGob(o=իc{*rU}ç#~-(>!l+ kKFl09a*ȣ=o8Q IJWSmE Q94(OmLk_07I{z`=u/#WpO *$D es|a(f.6kbO9?˞nEr'qŽ&H$Y=/r&X9 W+JR[ïL?3uJ[2ٝwdqY)6 :[}XYP#F4% k]ao'vgsYWYd\1vi!]*Gu؉UJ##`T3t>܏BIC+#R(UAEDYIćal\U[v%r, 6*. e<+9 KmK7m~!NaER}ՃG]q-/r7lAL bҳQ-aUSy {PG0sUq_~ELbh>HT Ӱ}BV]tI=7ˈ7R/^帓e#V~ >d!3FUXʗKvٖSlNhB3l̾ɋm`0#~L|ꪍ)sx@V"n4C}fmnl)v-O@%%:}{;)'HQ -+̐Ϧ}>M?G^N֋|~x2pEtgѩuaB]<0<;&wH]WxЧ#%/saRБv G^WHzj`f$ʃF `zHL&Yyc^ݹvRCz'3氵 ~c KXQw۔tx w`k]Wla hm=)Tdp,\=])^6/ tojB=t!s ]w6U[u$۸ bp|$(CkFVN느G?򄱩FMRPwCqp`kQ6M6F)(#hr r05Q]J8[C4 忓NCeYoꭊfkHS n<TK_q{6dlg*- y%?;"G1x; 5؜{^JXCJw#<@(hC/Y ,-?p1?])_;*bS;[!LY_4p]z]%IXFѿFY)l C>&cP9NEcL>ppw!^2?35,z/%ƻ4ssvZ4}1{l%5k3?gE-})D~X4xXZOAs~T?綟8,`‹t5LޓȮ$-EeWtNGv xg4쳇fS)e;"V8Lct Tmwh gд$νxI# ůɆ4AJa1$FM6W++SC:E?!ksěK(g|t}&%IC-)BN` ?'Tyb䎾 R6JZKLUG "t$z˲3GS~5ͧcpn4/DA*bE͚TQXl ^zJ^]j?$ioOrV$ kIk5LI,u"l<#9q_e\ |FIoh: q]|2?n[!fFں _ kȶœo$L.PЅԫV񪀬qmů]n#)39ˢ0#InV\@b6R"MoTğϯsF7!ԉ߆a kyw_Ns /9bMHI. dZ]veS@єճwZj`Lh"QkyQ` q{б%\#-VGXTH&Gi]34)sF ZZwu8!@Yt?~[:~f =DܰƒM(}R 9TfumU2_P(0"8g*18W* l Fxn^&l;rE֫ǂ; *~d+.rbR$h p{Hoȑ <?q /%֝?nk4F|H*%PG᯼c-`dI+Y ee|`SJRik\x ߴuU/v}fWڧm:yq0(wT{j wSo-Lm"~_]X!vnt+:Û)$B7`Z0"6}[=G}.( 8Ry1^G;PAt oٞOxr虇+L7֊D-vL.d}`Wx.}1|%j fO%AWr0O!]b~׷ [VgnqC"c>r1;9ZHXDqՉ '#^dviIi!D1`+P6[a6zPy9Y.G +gpdmHqGd~}'M {^bNVJ5$ y SF5e4foNq OMWVW*8{ nQRͲd[GP·q@oY4#Di΋8L$ꌳ1P7:n?Ãu43 19;Yࡔ}{EF*Ep wL @|f;RV #9^ګ=lHK6C6=Ez O5zjd[DWXl|kM \/[ o{y2m4q;GXt!*泲vL@7ٶך\(O߬] 0.0xB 3b@H?/\n*R!uEyܿ^SqM\3Zì\\޿oL^'Kx1ɿ ǔ;JW;Hs. 9,!J,Jdìjd~THYQ}T*Mi<27bq"ˉ'yjHD]kӭkww GWẈ%+jOXg|rռ6KG𵒎XsNj#P%}vRBv[Mŕfn \3^2^$kO>48.^rd/+\q^]<+[4!8¨jMQCʥds`!*ata9 2I{Yt3Ufas6MBt N)Ɂ5Uxü]' rkMP3:7viˠf,r0qVܲݿ1zV(<&JcM5D[jl ۣuzw*y%4[fn+*R v|MY6YшigA`=[H?wFTQ ޜ=ϮB*N1m&b!n}\{/PөԚp {1O]j szsN/)@>#1kRzCԎtOrm2M n8:g/eq*t#?u@w_Df!@vP0~d_jQ_O*l=RvejގA+ e^-3Y[[ϼx)1 #Y+'Pnhèn謦!ɣj(Ȥۡ~w& ]˳;jo 7ܘ~jjb\_+1 dhGGÉZQcJKm<3 4l&1RƢQF%vu fN,{hKvC!*ҴˑmQ"Fܚz]q9dx豦/%tn?[bJ{bn=e S^^=!_,Ґ=%eQuj[lnP&qFN+ mR%Ui,ATNa) *pը{ d̯9s, Sg[j}䉑׬ٚ ~h2`*obo 2,b竜 h7&#̵rvn}`cuWy4tI;'LG@乸{8 O9U_ ҁbĬQ/[uV>P2s "p.׽5quW|׼yPYLCM}8R-S0@deI-oiEO݌gV D5tC%QiVY-QBxGy^C}69/~:ݸϾ FFEcgogK`*7HF^?YsB`$4~^J$jZT,ԁ#Գkb49[?ܑ{2D?S*F\ "3P#P@ti;dÜ2~8?T5n0  d5:rd{:@}MUtnBa cbgNE\E.LnLTl*?$ܮN.[dR՗mXc("8N;Q[f yj_W_$@x8sMxǗw5"lϕ<#nAOwW۠sכ Bnf@M^I;U!  = ƶcƿ7 %~ބvV?wq r4EדL]yk D"ZXbC;%)0zFJvmև};H?Xoo ]YH]\I ]ʜ\~{ڌjx*jx錑 :o<0PvwSx貁0;V ٓEhqg􂛿 {C)wp4Y@sM x4 ⤍^#}˖ktXZ;SZs'vs9KtY!PPtzMݝJ]E N({S+鞏`Rc֋tVM?PRyWEejX^2ɑ#_K6];Jp:kr}>2jzV[C0ؘ%wvgv֬b?ݕP{Ob7仉I'BD "Ӻ5w/ U|5<fҡhoLf Ne% a L~!~"csLe+; hL߾\jv jt¥/:k~ęd" sSy@ ,4^hVM Ӛ\# ϟC}2FO(<k3`B.ފq# gmbWSuCnyabrď~jldt\,Y˭Qɂ[>ZP{09UG- $C G80!b%@]= J\4áP8Q+p[RwB2cbb3` C*^Ċqy]C -/#d"`7$ISEUX85s* WU4!{ggzNXg4GZ[PW/gp8NTOP9 ] ƈ;-8d˽<1Ζ S1|_qB= :VNo$~`*P1./oP" -ȕ]V:i6bBJKe>| 3CX5"q64qқV,+t2;}: BC JCd{/*X;h:N܄2gr#==[]|!9((þ@}׶%2fǰy/s#d X )473!g k 4̭\o^]!bf&RI*F}JG!n)hc+\ex8~Sg!T`$ 辶Vk'a{v £ 3TlɝM2(㦽դx;Dyҭ^eQYJSJ<' &CzxnYx(g[fU`S1[G}_4n{.CjEg"| . A$5uifk ߚ[e* `aѲI[jy]Iy-bsN;HVףY6FY.EnC rhXH5.8 - 5Dj!&~d#o{t윘*׈}&Vod P)ʢ@z]@TOfvPtƏEkװv<y|էG ^&-v- 'Maޚ4S^䦓̜R!hv[<ŀ6oDBvcIcIף<YP )-ڨ65}0K-}dn E\\L9<ֶ膲ab>eWQ`,0I0ۉا,>By[9j2v<>ra܀oٍEgєw ,u6x;@#rUWų٫laLj8.Ԡtw<tJMu^Hυ C~`TӃR! ">}[ke_R3&M8û}ǀdx'>FjgCrKӹjb` hAQF# %aۤAChfݶnjvf *ɇN0 [b?U\LIUL;ΣsNcxY @_>#|qVgrTp::&,4Ylb}L0(uo QMCR\7HsU)9E}fr[4G(_e@~%_aȆh*fXp4_-3= *y`{pSv<36ьjc|t #5O9ݼE}bŢh 2LqOKv}%``%L$4IG8vs!8Y@Pmw=a܊wN\es4^<>ASVo6Րˌ%t>FBOB󵞐^diMT,딆 vg݂TGG\qA̷qRfGGxf@T)AXjҕ/RyUb-|a1Qr`ĥl  }z)6%"VDWR>(I\uKcmՉ"[$Ci9ؙ|PDf4Wh;R !iۓF6yd-[!BJԉ2h,.S $b"rgܙ0kszek\C23W. C(|%U1G4rwz0c2U@p),t,G{!Zxgwkt2;#0ܮn]L6XU*Pi@Lvw+$q0{id'm D.f &rl(sUd[gh.'V7dl{dJf_%0nq?3rFua:lij5JEuUBg]c)*Zߖ|r7ß}w-u$qdF ʹ6) J1\v5Y}VƂG#,ƕUx8tQ;_=T*F/_I4'p+NyTNWE-|Ӽ OB,]$mkvqe(f3Y4(C1sVڏ tmSɣ]a|d" /ZGb]g:d\*[<(&'sfI8f @ oԽXe6Vl,%puZ #E9j|xJ促 P)1g>#{2cX4%&‚oy8)C.s!*4xWx.s7-"u`a\&*/FP%-3vA\č/%G>o/ϫ eP3.4yh>R+|_%9? M6k 81\ DjfnOV?fX͸ H6Y wqZS,Z Tpv"SMDldGxDHPR C?d Km|xiJCjnHF4(ƋF\JL3|Aѫ>~i2%e&} Bx&$G!7HW)Nn-#ԵÁZ[}]F.FH#7=ޑؿs V\Σ