samba-dsdb-modules-4.9.5+git.343.4bc358522a9-lp151.2.27.1 4>$  Ap_ r/=„EJ0U0-&T%턢7[f. o8 Ť55lX$?ѷ4^`]¾s`gX]}UpKj){|9ތbO&繪ӥhK{uL(r%R˲TP{+%nEvH})'/^֪4 ee4bc091b3ad4fb65f0dd10057235a142856a8f00cfdf64d807dd7d0deedbb7a904c1028c086411e7c5f136c392d8574a5cd8830d_ r/=„LWJC;p4Y Nk9IVY2EKdt@(NpLYB/>'@|.;(Id'*s|Qi%Ag̚-[Woė=K"x+$ xOIK$Iwo9sz8G{ŅFw~}Vm'b{FU=vxak5+x/ |}k K^ ẹVa7l!SJUn[$VZd>pA?d/ < N /5:x080 0 0 0 0 0000(((8(9+:;>'@/F>GT0H0I0XY \\0]0^b#cdpeufxlzu0vL0w0xl0y, zP`djCsamba-dsdb-modules4.9.5+git.343.4bc358522a9lp151.2.27.1Samba LDB modulesThis package contains plugins which add Active Directory features to the LDB library._ build71LopenSUSE Leap 15.1openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgProductivity/Networking/Sambahttps://www.samba.org/linuxi586ln -sf /usr/lib/samba/ldb /usr/lib/ldb/samba /sbin/ldconfigUt%hlulull%te|E|UEutEh%p%pIutUp%pupE%l lp%pE5pElUl%lV%p%hEpVPEt%plU|%p%p5x%tEpEh%l_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߱_ ߲_ ߱_ ߲_ ߲_ ߲_ ߲_ ߲_ ߲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-4.9.5+git.343.4bc358522a9-lp151.2.27.1.src.rpmsamba-dsdb-modulessamba-dsdb-modules(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfig/sbin/ldconfiglibMESSAGING-samba4.solibMESSAGING-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libauthkrb5-samba4.solibauthkrb5-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libcli-cldap-samba4.solibcli-cldap-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libcli-ldap-common-samba4.solibcli-ldap-common-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libcli-ldap-samba4.solibcli-ldap-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libcliauth-samba4.solibcliauth-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libcmdline-credentials-samba4.solibcmdline-credentials-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libcom_err.so.2libcommon-auth-samba4.solibcommon-auth-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libcrypt.so.1libcrypt.so.1(GLIBC_2.0)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libdcerpc-binding.so.0libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)libdsdb-module-samba4.solibdsdb-module-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libevents-samba4.solibevents-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libflag-mapping-samba4.solibflag-mapping-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libgenrand-samba4.solibgenrand-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libgensec-samba4.solibgensec-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libgnutls.so.30libgnutls.so.30(GNUTLS_3_4)libgpgme.so.11libgpgme.so.11(GPGME_1.0)libgpgme.so.11(GPGME_1.1)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)libkrb5samba-samba4.solibkrb5samba-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libldb.so.1libldb.so.1(LDB_0.9.10)libldb.so.1(LDB_0.9.12)libldb.so.1(LDB_0.9.15)libldb.so.1(LDB_0.9.16)libldb.so.1(LDB_0.9.18)libldb.so.1(LDB_0.9.19)libldb.so.1(LDB_0.9.22)libldb.so.1(LDB_0.9.23)libldb.so.1(LDB_0.9.24)libldb.so.1(LDB_1.1.0)libldb.so.1(LDB_1.1.2)libldb.so.1(LDB_1.1.30)libldb.so.1(LDB_1.1.6)libldb.so.1(LDB_1.2.0)libldb.so.1(LDB_1.2.2)libldb1libldbsamba-samba4.solibldbsamba-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libndr-samba-samba4.solibndr-samba-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libndr-samba4.solibndr-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libndr.so.0libndr.so.0(NDR_0.0.1)libndr.so.0(NDR_0.0.4)libndr.so.0(NDR_0.0.8)libnetif-samba4.solibnetif-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libpopt.so.0libpopt.so.0(LIBPOPT_0)libpthread.so.0libpthread.so.0(GLIBC_2.0)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libsamba-credentials.so.0libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)libsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1)libsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamdb-common-samba4.solibsamdb-common-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libsamdb.so.0libsamdb.so.0(SAMDB_0.0.1)libsecrets3-samba4.solibsecrets3-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libsmbpasswdparser-samba4.solibsmbpasswdparser-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtdb-wrap-samba4.solibtdb-wrap-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent.so.0libtevent.so.0(TEVENT_0.9.9)libtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.9.5_GIT.343.4BC358522A9LP151.2.27.1_SUSE_OS15.0_I386)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.4.33.0.4-14.6.0-14.0-15.2-14.14.1^^@^^2^1^^t@^s^^Y^.^@]]@]]@]@]@]nU]_@]J@]:\ڭ\\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USaNoel Power Noel Power Samuel Cabrero Samuel Cabrero Noel Power David Mulder Noel Power Samuel Cabrero Samuel Cabrero Samuel Cabrero Noel Power David Disseldorp David Mulder Noel Power Noel Power Noel Power Noel Power Noel Power James McDonough npower npower David Disseldorp David Disseldorp npower David Disseldorp npower David Mulder David Mulder David Disseldorp Samuel Cabrero David Mulder ddiss@suse.comnopower@suse.comJan Engelhardt David Mulder Samuel Cabrero Samuel Cabrero Samuel Cabrero dmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comSamuel Cabrero dmulder@suse.comSamuel Cabrero dmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359).- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159]. - CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). - CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server; (bso#14334); (bsc#1169851).- Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); (bsc#1169473);- Fix CLI tools still printing "Unable to initialize messaging context" messages; (bso#13925); (bsc#1167070). - Do print mkdir failure message on error debug level when initializing messaging; (bso#13823); (bsc#1167070).- Fix domain join when the machine account does not exists; (bso#14007); (bsc#1161389);- Fix pam_winbind with krb5_auth or wbinfo -K for users of trusted domains/forests; (bso#14124); (bsc#1160490);- Prefer principal over DOMAIN/username for NTLM; (bso#13861); (bsc#1143499);- CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). - CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). - CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Print command %J substitution issue; (bso#13745); (bsc#1158551);- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/sbin/ldconfigbuild71 1594744842  !"#$%&'()*+,-./04.9.5+git.343.4bc358522a9-lp151.2.27.14.9.5+git.343.4bc358522a9-lp151.2.27.1acl.soaclread.soanr.soaudit_log.sodescriptor.sodirsync.sodns_notify.sodsdb_notification.soencrypted_secrets.soextended_dn_in.soextended_dn_out.soextended_dn_store.sogroup_audit_log.soildap.soinstancetype.solazy_commit.soldbsamba_extensions.solinked_attributes.solocal_password.sonew_partition.soobjectclass.soobjectclass_attrs.soobjectguid.sooperational.sopartition.sopassword_hash.soranged_results.sorepl_meta_data.soresolve_oids.sorootdse.sosamba3sam.sosamba3sid.sosamba_dsdb.sosamba_secrets.sosamldb.soschema_data.soschema_load.sosecrets_tdb_sync.soshow_deleted.sosimple_dn.sosimple_ldap_map.sosubtree_delete.sosubtree_rename.sotombstone_reanimate.sounique_object_sids.soupdate_keytab.sovlv.sowins_ldb.so/usr/lib/samba/ldb/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:13300/openSUSE_Leap_15.1_Update/4ba70b7f2087b619d773d9a38e8b845b-samba.openSUSE_Leap_15.1_Updatecpioxz5i586-suse-linux  !"#$%&'()*+,-./ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b5f07e4adcbb5ff7d0829b7801aebc89e2f606d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1051fa620c2e740550f2828f8ae9b5e807964131, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=5fb03deb285523f27baf59052c2de9d267694c58, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f4191b90b24aef102be83b8cb99d340e3c780611, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=50dabfecc29fb66dab0bdbb9df3a1f500ce411c6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b4820e552041347c69c3a5e6edf71577493fdb39, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3da8687f6d8ffdeaa2a76a584aad3ef1fff8bb75, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0fcb902b0c7d4f72fec48376e0e7d32007ecd0d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6fca7d586ebea2966103e93176ddf9c8a4a885c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=207ddd0a158b8af13383bc47afcf458709b55b78, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b053b2ebee5eca4abe06625fdcffa7f8689a097d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=09a8c2d7ac62065590f2ea2c52d36bc90c301406, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=43cef8ca9327bc4b89b237de8d64948413e49bf5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=82626beef744ba15c8a34621f0d75d882c4d9a0f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=308ea53a0a9ea60c9bb0c0b51072f6144e778c02, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0dedcaa6cf4542c87adc35f0428b9e5638d5c63a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=5224250cc83e9cf28c0e501ed247a233d60aaf93, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0f3235ff899151005d0e235f6b6b51928909bf8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=021f6a37cfb91ed42208dfdcca16ea6262a99f60, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=eed8b3edacf732465d7eb1637817f56b2870d783, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=33a52d203f6245cb4ceb09c0aaf1ffda87c24bac, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d09562522c1432b76de1459a9d2661addf54571, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=294419645a947d91f54450f0a83ca50ea2bf9013, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d84a4a8afa8b72c4e638184ed7e1d8a48509bf2a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6483043e73fdfbd4feab4b7086a7874e55bfaf9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=64e7f3a06bd2a1d6c79d086d2d67109cb4ed592b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3b252ea0a7ae573c980d0e4baed84fbcb472a3b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a5235b7fbe81b12789bc17538de26a2a3de868d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f319a428dbc61198b078fb9b7ba8720af659cf3f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1431e5fac513f50fd90cebcf5c9dd2aed1561e8f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=44c783babc352e64daa4da3d0635dfc51addce01, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=7744df7cd3fb4b13869a97a5e4bb57784e328c8c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1712f39de78f7f9d63b6f7f44836c98fdcb4ae0b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a336d157e7966dde117d79209a459ab8775031bc, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f559e50f654bb823e99f55603cd504a6d2e5b9d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=731035b46391717e27d6387e91609cdb6d088762, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a18dd07ee31dbe96a2f54a48ba997965b3c99207, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=34dda29fc385b6ca889f642c18a03168529b7daf, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c8538c76917d8c24530c6bce7658d026d47a8f6b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e81003d0674284f784d6b6b8f974d6570c22efe, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c656d8169de390b7ac39e068594093813412259d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=38daf0bb981a8ad7bc02eab200fe189cb225044a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6da9af8e0a65bab993162390bf2c5e38841aee75, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=16e5dd43ff43438fb8df8477fb376468f493bbfd, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e0a587f3efa1f9f31ff5c172bd3c4b49335d6a5f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a2ab21ddbcadfe23fbedca598012384a5136f2b4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=980f28341e021c7a7893a5aa40cb2daed91f23c8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=54814b6e107fbd4bbf750ae57081f558c900c2bd, stripped;Ih #?S_i +cm2D^p~  8 %. #   R`RfRRpRhRNR5R$R RRR R\R3R9R7RHReR#R4R[RgRR_RGRMR2R6RoRRHRbR`RNRfR$RhRpR RR RR\R:R@RAR9R7R#RaReRgR_RGRMR[R6RoRRpRHRfRR RR R7R9ReRGR6RoRRbRR$RfR`RNROR^RdRpR RR RR\RR9R7ReR[R#RcR_R]RaRMRRR6RoRRHRfRNRORhR$RpR RRR R\RbR8R?R9R7R#RMRaReRgRGR[R6RoRRHRJR$RfRpR RR RRNR\RhR@R9R7R#ReRgRIRGRMR[R6RoRRHR`RvR$RLRxR^RRpR RR RR\R9R7R"RKR#RR]R_RGRuR!R[R6RoRwRRfRhR$RpRR RR R9R7R#ReRgR6RoRR$RXRNRJR.RpR RR R RRfR9R7RVRUReRWR#RIRMR6RoR-RR$RhRHRpRR RR RAR>R9R:R7R#RgRGR6RoRRHR$RpR RR RRbRfRhRAR9R7RNReR#RMRgRGRaR6RoRRfRpR$RHRbRR RR R>R9R:R7RhReR#RgRGRaR6RoRRfR`RR$RbRdRpR RR RR\RRhR9R7ReRgR[R#RcR_RaRRR6RoRRxRRVRZR RRfRpR9R7RRURYRReRR6RoRwRRhR$RR RR R9R7R#RgR6RR$RR RR R9R7R#R6RRhRHRTRjR,R`RZRpR;RR8RCR9R7RPRORNR#RIRMRaReRgR]R_RGR[R6RoRRfRpRR RR R7R9RHReRGR6RoRRHRdR&RvRRLRRfRxR^RpR RR RRhRbRNR$R\R`R"R:RBR9R7RKR#RRaReRgR]R_RGRMRuR!R%RRcR[R6RoRwRRpRNRfRbRnR=R7RR RR RmRMRaReR6RoRRpR$RhR`RR RR R7R9R#RgR_R6RoRR$RHRpRZRR RR RfRDR7R9RpSmp)sO#0n&-J%F.AE5`/Y3ؑ ? fIsV &W+39I/:4P9 ;<G7Vư'NS٣IrYp>F)zX4dBKX/=B,`_zS^ъ(xWaٝ|1/mPyj]@zꚗNum5A$}1ty'ާSh s! zƩ6So_%Nن/םzΑn3NsFzY /0c ^ikAبW΋xmU7~t2%_i[>g9M5sp@:;Q$D/z%P3V@jE1@J en@K*xr.o+qxB̘!z0 _-V7'*_f$;rէ/]/S`G !d0T;y3_\9q>/# yO\aEUQĖYUĵl|G(dLq4cG2xCW >R =Bnϩ8$ſF gs?3=A~ZSQ5!D(uП=]_B4itT-$ a^eȡc(&;TOO m"=>;wPU?s^*:N/ дB$V;Ԕc(.{,ldoJ=l\zA׌5*brЂ!ؽq3a,S:Nbj,qgj?ˁGOlhϝB|J MŶdœQ2քPÍ&'0*H&WWR;m$cyf:{ȖJe( e9edkwAcuH\<㵾-向oc0 bWƤ}aѲ@t*CXKa($3m嫍QHqa"`'ӕE8nW`H.n΀]vS&*FID "(F.'t (i c#'@Ч8>ͨIlS1.W߁FԥEQ`,L>U}Pn{'5,RN+1@fOY1RXfNXy%ǭ9~f/n Z[T<;n> }Kfo \6ofA_i@zsl2OE\B%&ڕ!ƦIhK?m;R3JqO/M ٘! ƣ]4Ne6^s=lE -v{uYyeΓWI6o6 \Sk+3ʵF@ -*`ҿU HW8U2?<,P9M׌PٹG׽R'v2BmM8P_wq `){$~M6_ujW {Op ZE(e7:JV7M$EnJ8x3n NO2j+g)uCC,Hai]k<;W暠m' R$c!a'z+ BFP3R uN4[̙{oNjS~6 aE}K7L2!!k>)&cgJ],z۹i$9:6-X؋pk++go1)E׽W9F F+UoF97W'J q|?Q?cдlxB @N޵5+e8#u6}Abxτ{O. W4'Z . XS$KwzӴlX7|4&y<den3-OEdWiij3wJԦDz MWB7UqZ[^p9]"%Լp [yɟCec=zz d4լOx2c@oºW-8 .E2Af"e6HG Y]r) d@D!ZB/y'$Ⱦ]܊ u%ԀӜQ*8Ew WOVcW.ς@`'&ԏATr8c|'"ȋ{Hg^mM٩u7M-Z ifm/c~M 2'w,2eln s5=νgBHc:)QrsDh4CQu)wbϓ RK E>gG_ řeƂ j{z@KH%Oku2?͕P&=JPz5[@#Pԋ,. (̻^qFA6@j|V}pfe'.AlE 0$<չx>EٝQ&{~'rvq\nln…oBy*lV  I`Bў3o_;Nkt`q^>ͻUۖFu=/-/򋞀 yPDK"759fUd"gm wT;Ht#XCX9 Ft"J(].) bXU+] Bw f,SۖC]M\ Pށ"LfIrR|p,:#cQ IJ['zVsgG&{T/Rb`h!BeQ8IKBN|oz2lʍ@m?WT0. 4ӵ7M.wOrsWN#J_u )#+ `¡4p4\{h$sZCb|I*sOdWtwwU!wA!bz"CfdEHVexbVeY,?lɈqcGPU>/TS89tE{wP~C9V ڽ|k=\5;t쒘ZO}WovBc7b=R;m>Rs:x ]%y6kdN?QOJ>2b rEuÕ}H'>"m\Ht#Ja,_ i͓^}2N81z:' ~.$Cg'bd<Aþ8ܕN)_*>C$u؇;a-ݰDZ BQy{)BT؍4fu$MOCo:*nY>sDrJ_uly:X)n[سu@k-őJ'ojKP!|Ķ[&Jj:8wxŗ2!llgw0TGZϻJe"Y@N m)F&g%+ G/[5VۂoFdVhk50oAؙJt=I\b)@˛Ư]-B{jAZ3 6GѰ߈ŌdY'4ѩ'7SWAK@ ~"D(eٵMPYF~d}^FfP!u)n˃r@>!NIzvGFS! ,[>&5>aq9\>d9H%TðeQMKTb`ôic&1B$؈ՐT>@?E?cbhegՆЎ4g@G^ /-#e!g% n:xGۑV {OW&` _‚ lпo~6q󀈕|c]+-]FQݴF12D TQ] H\|hݭ }/Y0鏂\_286j>ts[5j'HS˓˛ yG-_9#k bt@P7 $8$G|W/ ̡Lw;E?IX[bFQY?Z nA'POhX??*:luƠ=&,F*"#eGN)ωzFĒ b/ :N[c`KV "fOݣb5ZP0xrk܍DlbN&Vf:C Q҆y;< Ǿ-t]MbVgzxMu," r.%WQ~Bax}*;w|4UjuAcwV%}ڪfO({hqq  g5(mJཞ~5SC@rR6XGgϭ %mj~lq}hcCK] LXϭS?דy[]4?5ظ{Jz +$a# mODQIcAGeʥˆsK^Q0iNGR|?&¼/-ǰs.r,l#j,TT *_Ҙڿ<ib:{!-\ק* HfktʷtMN*6KiTjQ?kSC*9)AK4>s T- % Ni懪+j:h^< $+plXJ&tz1 lTH?6 @eU0y[ Eet%͟/?^7E]r_Sc.iw1nc0_N<2U+NJ8zv>v%g*At15Rp5p1XL\Ngo}0̤!4 x>jl, [ޠ+'fwc0ɑE}ˬL^7| ݷ3wk U;>mCnMS-XoDYjFZ IR>ql,(6inPӥfFc?N,6KjQyh=ęEBplD|m4rR[ ʬ!r<1r[O m`mR//E(Ppl߁J~#kAv)2-v2T?T:!3{@bfχ+ zH"Ϳ^*@~P5,zt"UNyHk ?|[eb%fvJ;aHMr<^R#Db/z7Uqb{&IH%{t` 4?r'69/f,$"Ġf6ywI醛.uNd;MĶ'op!Ꮻ6|*|i)᷼JbEtGS{~ leAVYtM(ϒ"ľ1qV&P+Fwܕ౬C&S $s$i4Q<_\ݪt~X=ߦ#v?{Bf 0$5z]fK߹J*_qT:Y~pT'Ot"ǖG(( P5 i`a\%a{YM-]ضu܁)ϨnԼ$qտ*$r>"k{ų7# W+ TQ5&'5$ׂ(y4 B6Իxfh&vx50dexD<R˅sEHw``(2bڟ] | [0Q[95^uEt9sO9%2^Ϟӵ36/h!D0~RĨw\7K[E:Aq"ޤ2Tl}$Q(uIpP;2XwQ[-{θaƩ"[h{r``Fa^ˁ@ V-|O _Hdof>)~o\j?ͭ[1leFmcz_vtNB,#͑\b18@!o9^:jzkxd>U'*[2ddT> \j>F6IN cƵh%Tu!~C$/){{ CϖRPe)3lO2R3;:ձъ> ~7{![w`SOe)jUJy?bĹ` \YYSE +6yH5AM #hB {)gfQ{qTkʂռRB9i}䋁-X\=AF َz/qAcG4ZHRk:nSX{yC~@kO "as|LrQx>B Tӏ Qk|[̫Lea xD䜻Ym"nT ɶ],k\UD9xzV(7Ǡ8{j^S{d}F?>unOjڛODxj^$qP-(ME? ڈll0U=8A8FH#Y s3sj 235K G'|TiN `F'oGX]<8 ^]I!e;s4n78hrΦVd,xЙ9U̍T=c|2*9rm';ٴ2:do;Uq&??@$lqXg>z) d(vF26&éF*Lobn#)X/A6,!>_^Ɯ'$cQ4;-j`CoDe%Xټ w rz#I x\WhfzlS( ҕES{Gdj[gE$IWɶbƘ 27cw3#=`Ful{D1Q_Ŧ5gn bmn3Z?XM$}Z:ozy LRwB#&ssHu' 34]&gahXg"UD(֤t[G3cHU*09'9 $,ɖn!bQݑ0yo T0;;r#q|Hw G)Ffݛ ZȀȯ`v4=wN[tGSfA\m}8uQ%P۴/yr.Iu1{ʭjrVzRz0c~᥿eg[ncE*B^sx(>Fdc EK`LYf$kU> 2=ha@I,. @ɞ5^DAaI5WS]!Ͻ!]`פ?|HHJ|7Us8?"%ȭܠG:Iʽ!LdQB5-S\g]^@@.d}tɺC_#J 7j`t?K"KoK>S& ʿ&Od1@ |RέfMd|!8.+8T|hl郿 ;_u4BGOYpt1]ײ=n .ފ\P6ɉ (}7b3¯,2ީvA C1)SIzLzM|.;aEݣפmqq mbĚČ61ﳔDlcBkrI<ۜiژNœ4BtYTMnмسCZkU궕~ ʟ@KUzdF7nױ:l vădКƳ 0MZ [ <}6bS.`SH<:뿠y-ԁ?< PpwJolF;DaW 1yCV ]x850.6iD4hR|O~;>q*&WFi`7Vtqji~ b<П^="eo=.@Uk'AI9MA<'ELďui.涮0[iSWOT8 ide@5x+> ]LRY,]f$:bfaQ=ڏ5@e:fzm D)aʠ}"IKO?iX4pFC'Wbzk z6vauwTzqX?"g_ΓrOW pJqǾUD̥;x+D(f7yv${UQ!rs`NBWdAsўSffUɜ!nC-F"AXNiJ ),*XkIF#QmGD}&`JhÝ!,vw/ඎ@INᕂvJpY.% 5)""&zc` Pºmax|`/[Fab/G_C<¶arJǡo/Z4s.L'_.hg7@Lc~\l@}] |5sh 5;cLT# .Oؒ6r%"1 (ޝ#Ggx3ve?l[2/l:BEj jsgN ]BͲkdoڼ j5dwC-0E$R`_ ]ttQh[*( _nz%M ]y&` Bv}o[_ة'|;~[bPÐ-mOpjކ'65;芁)[ϖK<7Wuڧ0!ST@Y-5XWcVW0 ;ʹ)$L2)m*J$e'CeA"I]˻ՙdžt oZ$ˎgam/"Ė$"Fm*j[Wt?:cgW2P`J)648,tӢ4t?!K RԙA`;[`P{)8_E%!uʝr,ҳk?5]Ur}׃J]6\J=b=Bʡ4&9 dusYɞI%G'mɿTо;ږ#]+.J^ =O%fso7WQ.=:7\w`z„ :L$g<6mIH0=cfwШ&h|֟)V><N {*,~vnfdۄ}]YRԏK> *yݥ ]PV 3;#g3d?_dE.ayy\@F:&Cvu8"]-9ٮ4o{m3/QyAYL!t"ɼvŒoW4JeKL>kh\:9(M/-;7"Y?~˂~h&d252zzkp x:>ɅO5kSz,wP nG$7O2ۅ[l02yB)Cq$IY{ᖂWnt?3IHsxc9L|'|/fVL}cKSW=@uS|8PhoU6Dkb2-|hn0&y4{ "j7K6vMX;¹l2~^Q*f^N-Y5Z|Vksʅف,TFt[56֍ZbũM `o(3N\tyea5ҌLV:t䳋9+01pUzB䆪W+88NVuek+@!LSIC,-I1 >tl|BW=9E mmՋq (eUˬ]*V 2p/],- W2eD]nv3@?/ʼn23|)܀ҵN7f32Q5]v,AܰXP) .4%ma=T_y -wh`ׯ+<(Gؚ_9%-BHUԫHdσKEX^A)B-.+gl)S i֨ڛ'QReÉ%WhL(n:/yԛԹ#nKLEX^,|MCW0Dh8zCxAv?Ѻ!1,?4jbIK],V>/~)iX$&%uq+/z~*Zx+>CERKkzVEܵFhۃSgf-x9{)q@=q\ay][K>9b^NVrQQW O}R λD%?) w"ڑ#TSLDߖ,3$_jmBő'r{Q7ԇm")_"szƈkm}JX# ]1$yEm̃ ׹]ܣ*Jw.A4#n"vYxR66^B+Xt@%ȇ3Ԧ³,Lƥ$5S{kF[T}Ͷ)rPwDt7} -lkLqW "F!}wƾ.@|^'|s )rU1\vudȆ1ޓiAFNdMSͪw35A%ʦԖcӒɐHo3b(H4\l?ׂiDlg&QdJ&m{ʴxNZPq.I'8 x/ vkg]_%w7B?]EMVտ-BL7Z| tAb` > P񵶩CXFV{O4s`z dVX&&lP9SSl/?3iࠅI2e+ADRwTxmΝGRW@Qk-vTqLŹdWW.e,i8e2X5 UhѪ-rw7g,Y~D{M|3O 6yMaR/mE_mw;TNA_|԰&}+~eM=-ͥMO?| {- O#&=>qGh`BkyX6^2`L( [f?^=ӇTEɚ}ۆ,9Ŝrվf]y)YF?΀F0[lE8CxL׋WLe-2#w\՘C:6e.O|}e}jFd~H'J=|*}/s Mx I"&E2V_V ,YB) d8!8lϻ4}d)9cz$ĔFkLTjg }. gebE,c-\otwi8vb'9QQ'|B8=I4sfR7SZ'j`xGl" #ڸUt1ci[ Ǘ &!6c{qqHN-Ѐޣ{ω jYDa `< КeKFS&4ξݾ e_L8飗0!Zd\@y a*'%ڊjM=aG(.yu{^"Rڞ@[w~$)_s$=єΧ𨔯;@R4pWDP96ah? 9(f"vDт5\3(u{vJWa hxc`!"hroY+a`+JIY;mM 9ݥ FϿۺJ+9|Ԗ!O"> *\k5b(˗))ZHwn; a5Vsy6ERӠ:ة#f\2+ ϴ? c[ =W'ѐQ޷5q)݁)G5@$iKzƻl^GJoQb?9S `:(>;Jq]!JҴYa7zq2LsmȀѫ &FWR wa 6+UL-J^3z5_Jg57߿ 'SOd/W,zGD{7+ m8q[pLa>+_rhuK}\ EupJBm~SHv̻ҳ#^ĵBk+,0o;Ef~e%~-5]sCN=֍0Ngϑr,6%: HL'p5,G0e;Odv[ k]oFR=~Uv0$Bhخ'v 6؟ :zE-`wB_C}Y9#z%O޾W:?)9GRk󷅩JYz =j=R݉h3>9lޫ2CO-u><:_h[8?9HyYNǽ[DIef=ej o6EH-%2jXAr=t$Ҿ0O$qчOi`Q^H.P!qQNH(2 !-b#׊>qEbloBݿ$Hcߪv*7mʁTL".Y02@$jl\ǾF=R{ iZOC%|}Q9svfg3uCyTUk䇜~HXN'x7="6 L$$Px@me0'mJ96Ȇ} c<=\Z֘*e&Bߠpظ]U`]xF8c ZK}(Pl,(ZX 8 OBWh)"{Ra7踝вY7x^qa'ZxXǻV99 7T+ڡGD{݉jip( HKX" xed*+rpܲzV<^Xt[\!\sy\.'z r+f~ޟ"sHz\R_]JtDgߟP-qDUD@`a砋50EECq>?"hR(yNM4b[Rh ƋqG>k<y/DqMG }iR~^Mq飍ÖZHHx~.ro7 ˭fQNLMkXៗ̓(bN|lFЄT>xfE?|,c 1hR ll:N.raK~iE~m?\?@)Qc!@`k y=̩:Wװ',hxpsb}%|1xű3soԆlVs԰0Ly!fd\a(;NB)N锒9>OL7N$o<_b@4ꄝB?RQC4<+zRj^Xb&Ұ,d$f\j X z*.|U 8OXNfth?'KQ3*w0v<^qi5Z_Yc+<)$bG|K̀HJGperG0ɳaӸ̱-UMYP v+`Z ށͩ M(EwtpױhdU9vQtb7NKf (nj3+{{~= 5#r/fp+gr%ܜt7Q_R`r 4khÓXOtcXAQXڞ FsF 4ltI%1N÷eL:{!-ۆB,e4cqumiAd0Y$暧NWDJ栊)^ Y3'/Px(a$-&eʔIY@,@EGג8T ]%/$pL%gARQf%s&5O3{nkjW,dTpcaW6&DJ[774Ȱy3eu[zA62GI ZUj %= jqA|S2!p{Wb}7(߁wIZ|s#2Tvfm;}! í_h7hӫh|a8q! 7)Gt{öܑbl}i`4wZ6\SQ e\4x5黅 固)|T= ZE ] 4Z+_[.3,8diSSfV@>Q4ftlIjhFcƥQuUQCɛZxޝ:Y᫚lS\IQ r~&a[=wmt1A3:C)E]Vc8:gpRFNԻZf]v:|?h+U"[_"D+,lx\lGLQ vjzRBV"fѳUC}1ByrI)`tǦl1kS Νw+[n'M4~ G cBh5AE?3itg>Sy}ͮR輞Z/XX쬼"OzGޓωI|Iel Gf3wDȄB4@7HM԰,?4'뫫w/ y{Ϳn?aڙ5w%Ӗ0!K?*-dcoW"]uw o36}3!-|&L*c%gmcup[By.[;~_|J3WoKU;;<0xFq<},G\0HoJ#pM߸ql^"wn97}%Q9Pʂ(l$Euv, x*0;>E.`7_SjTY@3bۉ4എ[(s yƭO(,,ANU+/͉U_OS6Y_HQ$ v$#a~ŹDu.MȰZ-T=+3hת(q!m29gQfϙG<%=;*ztk0kG ~'1k[~nt F9,HGj+ӓUi6i i}7g2{o {JA?YYg?;AKG\T P;0t72ݾ{t_"ZԞHzFL1dy_qjoH%`=LL$MVE~uYuvvh`CgHfh4Սf6BɂM4_MBl@e5ԛP<,1E1_a7:U ױT=P yWK,_XF=ۄ}kr7 |psbEst̹WZDq0*}mܙ4wV]6gS XGB Ƹ̮P;*)$xHQ;VBPL%(h#z@WFo <7uШɌ]5E4Iu}!91 OS`uqnu'@lӱnv|6W9olෛo+N[q@?C`"2rlJ >kaN̍n5$gwN<>flPEdnˠ}dX5 P2G?#kN9lZTgC02X:n42ca ÍGZ|n|EW'cC0A[V8ba2cװ@bz[×X^jov6ޞъî ${sPŵ*j: l}Wi8KI7^|r82$uL Nln|7m. χ+nɘCX? .LJ/5RzO~pj5[ ȮPuVC'=o+K I$۟E]dHA=!JubES0d\;55:υٴ%yWoKɔIzUph &O2M[y2g& H`/3yKd.Kx*(NѴqWˇ/Q%Ҏ $jnҌ`2+Vq掀/Ns#8rm(aY:R4+#eW V%V:^RX %}pul2śŎ85rP ͔`3;t8RB8Œhb;X |mg3i|Ҡi6(+wA(ΐojyeZN%ErB OM? 6`Λ>5DhacKO%[[`0}+w9sxZ06ѣ"/9FN>lc7(t4Kf4t#M\:jHgHM0yi -;}Av6CU֖=&5!fG]B%~,8ކɏWwCv~&[|JH?#_Qa)p`{\ZLvy/pwAĉ9pLcŦ5.DJҸd[]/v*nC]䲻 )e j='Z!T 6dHFז nGHt^AoOQ̝k .@ij"eƄVݨ$ft?21f<:"Ce~wѺdpO5dSHIPu#!=jnߦH Pcʗ-EE428ʚ =|Amy㻎L0!9&B% =hjv#@4GٽtйF|?[c7`?p;X!zW|rڳF+'괷-O#B% n OtN̈\F0o8'r`gZR󑖪1؝^/&:wwkk舤 Tn/~qŤ1SnPtv{LkIf5xƹevwV,U=|3\#Ktم0e<-Px9L1hϛ"%A! / ;&ػRxмݚoM^iC0q'09Qx?LPI;*y]BגZTpK&?#IkE?l»X$ag=ɒ0`xqNE"[ 6H d)"Zm& Ɨ_.W<њiUg W 1z32!\|*kW׹.<{6K_7b^`c(D2f/_viJh!*Fd'N`cy3/NgVVcLUwJLf0ѺQI<54ڹ !|HAXRaf,܌{>D:QYWKTl2'?-6aaܺʆfdΣ qsuq^|P^\W {ƒ݆uϮB O5?Qċ;Z%"Hm+%fRDܞ"Sz&џiZz87 p7G\рQQ*\C;?@i;#;#*H5L'HC`!at Nfm>YbJyYչ<, 5edP0c8yZB]vVI&%7 LVZ{+e7~jبNrUv$.h% ;'>O;mcZBi#-PzS/y;R|󺕹*x↡u.WaJ%ygt½%*guH} h֝/ܫ?EiHLA B-ZS/1!I6PP&N[Lн%$ɖ"%J8"U-|Zpbx[Qp=9l6AFO&eNaP)ɣ1ɫ=hy{!tD[={dNH#PZ{P`㌡r{bh*? QjHR'@߇Z<=e xXp5Cqϩ|b^F1 YgݨjnUW>?@23왬Uz_Ws[yakt(ClfIB-e pxg"܉Q` & }r ;5oн:꽺A5 ֹd)zV*0$Ne%mY(~k(8K<~U )/=!?>IKjN %Fsn=HW: U^!ꄴШ>d+J ٟKQ7Վ ԉA. ]ӄHIx VQ(5nh&Gr4k٪'~kRj8 vKYirckr@AKz6@'/]{ ޿D=,*D:mxߝ/1g[7?X]r۟l44Q/p9Zhxy*Thqr!(Q&"{YmLfBB8(+qm`ѼuX=eg~Q1[V؂` "j!Z];Sf Gd@n*"j^!<= *-0Ëk~Lvuq9*1#ZQg^ *C$[(G_˗/v$­5{˃۴Δ#79pD1_:si` ]INZ ~V9*@B&,z=>ma6%L}(]%|~' Ѣ&>np)RB :9=iAfe}Hȼho lf+eT]S4 ˴ba i UoWU6.v1=W#z?}wsxh7v@Z'!Bʱr8ƒ!zzcM-s"jsd JV! P`7q^)#.וӰk* wuzMgӂN#Ҝ6}8՞y)̑Ip866rTԌ2j,Ǡms"Dhz7VɱH&o2#;%E-a{/bJX e,1vī֚&'[qa=kALhS;$n،w\ z[fWt {*Ų2.=65t#xNR;b/ Ja~+T{G'*]ZNUO0E+ 2# UjL3uPIrdd99Xf;̂o(I =5zg#gܤݭtC/1_UIJ`Y8ސ7-,5ݼU]s#/6Y{u ;iy΂tPLE1+)Ӑɸ7eULuav{խLv~am_t@^n ڀSv7:~{(D!֢w\gRy(f;Xv9%f2*X:Nx(!27! '{'vkO4CnC!IY!%`}wH)պr2_/0) <Z[rgn"dU"VdMSR( a?qQ4bWaC#%+/oE#|6JI@ XmRemk@:{zr]CSU=76 rt`8G@y~p.l4FLE(J $yw{H\7C5bSFNG ;QP8w_pd%zf([cSg(+*cK4!*k߆[m52H`8ovLBU P]4]X?w{&6RM @x V\ؕ suNۋRyLznV$u)hCwKzCwmש3A7c)`!'kTr%ތ(t#? Wle0bs},#N:э`>@s lhb[7]1PM Q~(/ ]8{o)MH:Sa⇾=M#SbX0xʄC#J 2;T[LQXa ƚIe[?t˳G(ѐc9֬tγ1۰xa9B\-P5ܱv5r6h 3"}aJR=/:lm$ޏa/sfb>_ps(`taYLNVYz!pCX_aNNVt"nעIn0%eJ[EC\,i8jW&2$ )ȡ¾|a!Rs,!vnm W`S3זS l 3u*opS)x2Rpk bnH Uwr^UpK_Zdl! O!_@y4&!fC+s"KB%/r]ƧwG-4h+G >2"N[kxg[D[k'3g$NZlr{dr&`NǓ,߻Q RG XكLWF螈 R"tp-{om6kaTͷDC~U?aqb"\G2zRGʨn 5F0*9Oy#ɫ3w-;_EmQW fyῂ[%S%ǠsfikHգK^Z/<51|b΄4n\"F:bI$˞8ő0Za\`ZWYp*/p~t O3]}0)eHJw}řA`pM6m̴:aQD嶻0\6Yx y?m&9yCyE1{ڳ Ȭlnj @4}zo,3ֿfEAzvxF&~Uy]m!_N;K8&@چ5PA;>]\NJa/W?>OJ~=@шH͙v⡋[^A#{XE,\:V@b(oGynAUm?E-tU $IMY^JPIеWszvD+K߇@ +JKEcy7-Ok#4 WM: 69|IܪsxkL|rL&ŕ<(gɮ,^o1}?%ig真^7N6ű7b>Q6nq4_‚)-²HJKi>Qf"Bb]_Z̥J[/@%q1١y"F%DNYB{f*㽲0u`ϯw$d>Wf&#tl4$Yܥxe2C*=lWvX] {@%(o2ČFbVH^!Bz-["{hY\ MMlT"R|ڍ҅|/`pg\%/w_@2ChCo*r Ϛ~lTi֨$NUZ!RFSޅzM1X4#jS^@whXK7b )CDn%iYMPjZ .XRly |V (\GMdęjqnB}'!vTf 1dxC<3~gh+ pyȧEx_DO7 ym5n%eZ9XFy#q]}7Ef7֎TbxZ|'f,5 YA;֛v0WۈHuG$2qf\3k_+_AaJ3{{LsM45upH|AD- IC@2Y>IOoĩ&3HĜ)tَ KI2!8E_X\ GRa{wսٷDNTgOc@g e6QM{ *?3q K#nIfH 5#I,،x5ݎuK>ι4/@S̟uH;FnNI0 [a_@(‹PʚU%>JaD$SrsJPiwPf nrk`!XTFYj=Tep (_:|?K?.-? [+!X'8 `$η7=bvG%yjiac)*̢91ӱZ%WK. NX ]Wnq<2@T㦭obU;!hL 2sgHH'Ҡ:{YBҔc\Rؙ;i15w0t595Lslz"4}v{4w瑟pAspڶKt- aop!K+ǥWHZo+7tR8pi+>87!2=UݓĖV⡠Oodc}w 􍅓)k\uj:[AiofyMc |;8gB;qq)[y)RH%MkA[Y* ؉eCms>LZwU|5Rk0Y&3gF `(\4{ O%N%Z p'=ƾU>~c&,*+6@9 $I+ Ry9Ryhh) viPf0j'QoͰ0SsZf2csǯ0׃Q 7=71{n:6,Kg7}g zt>zٹ98Qk=Ӹ"Ĥ`{i!.Zt Y>byQ ׾d۟=8=GGq#L %/ިMVzjD=FCoF?I,a &n-&7a6Zw61x@j}v2Vru*X33 aiF8NIMkqHRd*HH5ĝh6sʏ]6{ E8,QFM9eS6!.|Ճ;IQ˶"+\U.!*e(CtyL+N@I&o3)Gň:桀yVTS.~Q 9[?Fj^Er'p6h&2I.[l:^5Tl^՗Q}`X(21W'ւBuŲќ۩`z 7?0miLh?x 0jk,>PG{ >t{ |edoth&J%!Q>S:_, s(pUIPq|?PP+`* i 4Q!h7|$>.z Ϣ=-\S2RLK|`26POà]y4I&KFyC0>ɻ@1ߤ pzEdMl)$5%r5d5Ch1`=5 &JO{.ٕʚ0\f{N{ ޛP23A=GQ<`:B<ϹPy^ܯ^T1 Г;P! 㲕43$ x0M'6j{ 6mϐjܓ+zzR~PI1.AD_qaWUS+hGC[n{0ZG֋9"U@-H /6Rr*`ܩ˽8$Y^,VjۭOVD$;Z_WPm)4*{-okʱs2 !M>AzSGQ+ ﲌ W5/еbŗ {Vd%d:SM8jR:t|| A1 dDTK/?tNp.gg{b4'XfwN~$$H\kt ߱xC`*#J )*h[2e VdN<=_,Q`9[1m覯o My>36`Ln2$yRV/ZC;Fw/=[w}UeĭI5Q1"*9^ \>e+پ {~=(њ b "MsΑ'Z2pKPt' 6 6Ohe(NV=,lx"[ Q77mi4a-*/ bnfOKI4°&LqM|ȆYc4[Xlz֊l͋ig xxC;h){P/P'D*-;ly=TSvAà`)bw,[Lг23%{gR@Zgn_p cV!0=7Zi!PbpIw]ڜyS"+{L{w0*0P;j/uDE\7cWs̶Cߏ7:Jřp 8D5᫯-^e]%<0gr'n$p0vy,b]jj ZAZg'լCAy;& /wp7y[XK֮x?751~ '>o~YKzuHS)䩝 `.`QW Z?o^w3Eyd*XƋjI/#Є˹g Agxgq%bc@-dVJλ^֋;kgp,T)iM!.ŵM 5-Y#^軇GXC !/ T\k`x5[5uqŋqV̍ Vױs6>0/$dLXýn{5j%f_xc@F-N(묳G)LCt1i ?BGNUWP{hGPsUq&OT04n\ʍud'-C7uPA7R6c 30jWEG~,9}#HvVro-yY1ӶDU7?m KzOCq+d|`H p ϵ ,\l`,=`}\7;C*'f'q/^.A=J|/S.uM.*+Nt@D ,~vڈ$4p D8&=H~D$=qO6cJtuvx mNDhCV s`c uR*g+xfmʣ%eFL- c-•3ђrhߴqKaӞo 邽ECrouZhW~Vag#)N;Ռ.;쎏 M_G /=? $, /]jcq?R{^, w[xʂd~?5#Kx.gBA}<e.DXA8\a+gMYҏ+Crѽ\%¹Qhq.;RrMg4aAQu&55pdtJVޫ_/(I)3c`f㯜li趯VRΑT|Nռ;jaHwW8 b;[RLʲsaiC%u; pT#)zao$nJ\6T+}ĢsA-m T*hTY>dFx@諭K!-IRvPt4飿nmPrM!v%MoRm0^7ײUZ>ːjvalEn y@̝Ǥ]a3xs 7mB-W2dJ]|a[(}&Eg^x's@E 0~D=z@gx0r)hlޚj-wGC @{<,ݯH)U,ËiZz+PUN˭IQՍ?P`8‰yȣгivYpL5C熫ϓM )VV}5h7 pѭ;$l6N-!hn:fẆ^, 5ܓA?pjв]5,M5V28%G't&߳h>o YL#`[3 tSl~&&;)|ȫiH__h+Z0rʿЩq u"8߿$}{M8xdbR+PENZM}KS7(: Li8'od,itbx`_³*͡xP6$j:U${RG׷ PtdW(M@ =bBV(s{oy޿_յЬ"F7#vW<_ 0ُh,M- Tm-- 1ݧRV3g-iyiȉ[ҞU JLe).IA~285g0MYH0WSc?Cז1yDj$xP㋅h2c8;[;G#0{JF;[;R[Ō!䥡,Lzdb]h,nkp6!XE9="Y^b LUumgJ0:Ctk_dM~ MM,m7.p›7AO V2g ,'ɭC+EuUVt}GmcN'Aup:ٿOhRn $kA")|vfܒ:Jp3l6xw̡ K1ЕNTh(- v_HM(IQ&tC;)X!X+Wt;!& CZG)̱O^v^Ä?na2Y(NUPR/Qܾp5r)VM[N`/@-9"!fd a@fPmE?gۙc 给9_$OEa~y_4u99q`Ci VI X.I V$tKH8OCl)Ɣ"[mO1lzD0D@nuP?;=І|{kpόs"NP!4!#oE?8Ji$-QB_rݯ&2=-:8-@ciKV6D]\(N:#26aT>ئׇ"x9-c/Q,)2zF;zL2u@BwTzv =|pҘ+o/U*}P t1gXl'h: yVXF<{ |zkhH-@dz48] %Ђ`1_sTs?ćZTLDq2k;*5|OXG1՚j*fXkaT(fS(=Yx5,+NM*c>U4ۯw5?yBߚ+i;_cEmXI ҅o®Jp[|^B]MiixNh$J,E*.>nd `A@ 2ë;h%D4A9BqߺgPI{1dΎy nB@ib_pů;\IB*-i4^4ɎC, UHA92ElDe5`P:7n 3\XPLwrk &Z) {\4;L b$Za'WH.~AJm8)L#):NF;-~H>הϽnpg@KӔ!j9e%8R >p9r:\\FcຏM#_"'12'{A7@s;BڐI-lRқ׎ܸ1Aojo$o[)Zdj1k K2\fs[y5FY=EpdyVM[㜟Rk 1,gxEmH3eJ:|%mzt0EThWSyb ;8l+*vHމaWN_*.Vs_k\0#iK牷afOIXr8uo&>[9=֊:T[NT_YeCjQ*:'t:yBRVTJ6=q{Gc8/u2@&x)yo4q`[]ZΔ,} R> vY De|o3ZSt w3]uw#N;?&:^yiH?>9_J LO ^{|;FSGy1`APGh lz$O<bߠ`9Y 2~+ Gry"z/qwbeIBLF\{}AgfpdaAXP!Q뒓D~Hȅ4[a@݋Lk+]PA3{Y|J!][1W;gNrOBAj,ń|foUM4pԸ0A\L|ע!ny{vX}[/$: UFMwqQ1W͛_+I_RW_6adc8 pm>׌.J8^4[=o4HMvq|$cbé=xئat)vovJ8Oʮ=-\M\hf&RX{0W$4M)akcE+ӹ?l׌.R^e_ouEVTkuE>}Sxsւ>0H_F&Tkۿ6ڰo'ER[\ĸsF9OxgWTԖ0O:/k\%&򰳚-̏(pPyVO!$1nYTmX>cQNNnBnOBٞ:QXe iY?dSٻ.<$~TT>KK}^(#Haޮ)&WfԮ\59J"';7ڞr8Z'>P->!keZO/[77u Q2XSU5^,ڒ$Zo_/QTQԦ٥NdGVb"i-kZ Ϊ^1:ops55_\B*ugP~l.:2:Pm Y<աN( t- !1:k~.˂ү73P>U ,hN:6 'ґ3>YP4CFR&2U3 t,jL`% A9ˁcuМiIáj4LOhrfާjo?Hٷ%hYruRMOvSE(6 "83 0qH[.T6Ą9a=}7bv0҄j@ uƁP.x,xc2:m$``zI dE&+켜enkA#_OԞ6E #rqu>+cGJ@ 95nr10&cIڥa (I|Bp{^j R5{du G?( 4s3T6 _YO>@d8w3w&dF_F?FY2&-/p$&zkڡ,N钕f0wX tև"3ܷpDNgr\xjA1="AV̕|YD|߁2:k4, hVo۶X|"TiDkܭX⁆XS濒t+1f'5QD_q._T,vI+Opy'q3g)$f"@z0eʁӚR^i"9K'_P t:.0̠}*J s b5D.K߆-, WviUӻ9b\e6p XAs$*Mlڞx2G^)kWO/W|{'D2ќRmI_pK.n-AL<5DwDr:J 頋1D]wLԧ-SΧޟ3}:45%3C}9p໶N=Zq4w hyԟ0PHC&3=XQzП4stAሰW4wC2ṷged[Xɯmmb;"w2:7+f;Fs[2IwteݵCEtPIZRwg I|mK9y e7V`=Ԝk%4mOF ~FoxVAc!"9nezNYrD= v^ AP烾g- Gr{m@OѰeж-Xªf"m5R4øޣ yz˔ Bz4&GR(aRIn߷#nsw˳;e<_">2*хAF]hʠ@^J>}=ք>ׁ`W(#;q#y/]RY8,aL+nxcܟF}՜bwg|"ühwCЊ!Zv,Ceb~]VD2ˑ`tdFmb~Ȧy2B]lO3 ̲?@Wd-Jhx4pfG&{gHtMG`JinJO[wSnv"4Tc?[7OD$!L ]Ho1iHחLw h. JQ\k eBA/DeJD]^HG!s$i7:Tzj+_B0$/ {DF%֗^]ɿ}t]cJ~߀Ч_60؃1kYK`f<KٲnD<Q xD6ja|m"°>PxVڸdMj-SQmUq; wSCu7W+]XZxICޝyHkpr9!7؊/7:9`+'<[g50}VS_(${a0TpR) 8HxkcfTGy"BXlwb_nx7eg1e9ЏIb5'6nB4N>%ʡw_̃i٢2! VVS!:ES6[9A;nPd,72LB$i9Cf9BĤV>|y cCM,Q}y ڐ{^DW\&({:e%+Gabadn#[$ip3O >u5Pq3elٯboeG:t?e2} ?cPF 51[ (uo?N_oKaFxGP䇉YoW-K%4"yzY"u Ŵ(f|=|iK}v92NqceR›d~9Q, jס ;X-/(1};SH *imzp 5~q'A?WՙԺnV≭ҹco:i-g5,}I{gr޼-JRS%pHE6[2bk -@qx';77_$[,ZS1+w+'׈=*3>z-d2p$B.PN՟fQQCD+;O1vN'+Y^>^˄faOUr|-b-0ޑ#І #L@-b O'mbF l2b.+wF\ = QWU[pHr0Unڱ1xAEP_:ja;Pz#;!'fC(订yxT mHWj5^mmGiG{&BwnGFcsҠ Yh^1Y^, `o5%B )${Q&j2_C k.XLl%eIAE2Md,nLFUpN'^?3Ch{(L㔣nҶZ>F ׮5[q9P@ Ҙ נq6poĕ?p;Dr] R:U1xj?$,]/ ;Q\ aՖ.N ̲Hnj}x2]>`|Ek'y=9;^Va=z%I"bmOD_:C2_tkDAQ5byLNRrۍ؁TbaI( %xw_[;7װ}pIŷx+ew͉avqK'bGCŒu"&bX*}U|7E#{Rf5s-ϻ2#5;P[n'qa%6n'[w8zFX>Ra,si)U Ƶؼd4LG1)/ߖNH;oz-7_8ˆ4 V N5I~j!s趣 /+TQ zDʥ/ˢ8V/-uG<_|/ #E0bĢ-PAT+|;+y ^.sraC\ Aq**!?c)xv(\,@ʏw(F=aQ cÁ䶇] pv H52&X )t#i/deUz -sߪ$\Y"hqK/: hgE# XZ:l [ Xq@n'Qp}!- I4MF2^\377q~Δ("v?M,$z#M~Q]RAίĨgatilzЪ)±]> OSZ] *. `#HԊJ"r0ߚ2v= uvMҟ#wONyD_[/2J c+zXL9k _V|,WkH r9zJ7OtL\˗>}65.ƞ:_sůM@pT=pzA$`ZtKvony:dUE蔺/dLG( nş[$/DwrzJiŀs y…8Z- (n|i%WA ٻ DJߤ{hĆxK*Kc,w h@a'`uZ&@*٥?ć zH\Tcz'읙 q5M*~ǪLRVZp+h"19 a CMɄ=hA"܃NքAlՀ#'7n8D%*)mqO?'UFr)hR\j:CJ"9mk`Wh63b]z4:"c@MS+n ʡWs϶ypMۯyP7o 6cx hD9@z'k/fQkYmR$<ڊ{Ԑpiaa?ǹK&kVɚ7ަUKv]k×7xU}>fpJրYЃenj7y'CJ`7QpgweAeFt7MlUh>;@Z{}~Kx!C!(Yrbȼϒq 5aT!eto JScLú٭~/GۥU'( 05Σ1"G1溟0qCA\ ٽ:omh`setfj\+^g! ŰP]<9D7>Is's 9ѿwjr}%k ZGFmKtӺ8!trF5=X_arW&õ _o9bPI ʂ,sJ~PcehϤ5LP& BRjqgdx&H2d!F7! Ig ֍6VOWn÷JqBu'u{"RW%B^D/eRVU- PU%"gp9[t+A ;&C91F) ii^Dq=s7 ؔƲMpCGĉoscAyOm7PnӉff(ppI<%؉.>?h@|(yPަ^1IEM΋o"C1LBvv‹<f:E΅Q%:{4-6(nF1 >7q#LGSk ZjŁHfx^4@dSPLB9%ɑ}lC7. ԒH? 2< dT] w0CeTE ɢrf/a$ԕYdYK:hē)ɻSy7I &)?|[iJF%flLA|ti}3Oa >D'U/NȜiq1> B|ٖ>6{y.TlDj@ZHU,4䱪^=0o#00:'ˌ},Ι7zSLGn'1?]^9SjŃZClo-x;(kA xn#Y=#'+yZU=]0<6L0`ZЪ]Wnʝz(ظ(\靆9%n8.H)-48.*|& ;x? ǓЩ20=p>mxܲ.~3 Z{]3fy9@E"D; !>Aq)M&鼫Iºz)2=} "Jk@ozYzGd!HZkyqƏ+eW^S5HQMnjx6Vbʲv<]f= #8 Vˑ'R`3%|sehw#;5/2.9E W}qH`Uw|Wucԋ"qdgZL!Nz~^dom0zXVC1W)jŇ#'& I] g'*NqKP ${OC`!שI(whEyqo~VV GK+>ZSh8F4'H#y}tJ ة\&7pxK"mHΓyfNB:޿l+3vMX=NWs(NoڋPj!L?`{&u_XkKԣ!݅qTdGJ%+';uSF{;PjsqX/ ֝x#fύXX '-yQ'Zg⒱S'v2b R&[ ٽo]G7 G1,tpg̾#rq,\A}x7&pdȬkeo<11zs~8NyLfZ1DcY lE)6 &o~Mk~Ns1A)Sj=EJ+`H}TqBC;:Bx iZI-$c(a65{F#JmiG]eVK=M=}'zcuH2:l |`_8p]jz8%SŢ<`v074 M?AUE [nў{0њ1aXpD1`Ol{^yuF!I"27y*.ԈDkCf\_]Z*}8h!(xH| ̃ O1MIKHث_:gc QGQ3 ܿ#_@8-cZ~TۂC*6\Rq-{`N#>Y[W ׁ%06,."x|~k ncobǁ66-&x-,#[E圖q**ȮV .1tDީT[gp0*72tm&iGaUq0-yR<'R9^:d>',\.l*/S gZ)Vo:fw>e鸙g>8i6S?\X6ęG=އs3~O nĪrX:^#}3U7h؀PTǪbaxEbr Fq֟|PgQi1`|t<@a@\+f*"L~+j{y 7/p8]L,cp?u(V4 kˆݫ~Lvf }ϧ6w} (0;s5/d EoD})aA+<݂Jch4i_/XM@Q'#_q? -XϷefkOgvY \|ds~ɣiCvUW@z`x/Pm~thj`gOWu'l;ʻ%ĴuuKS=BI>zl5 ^J XM&)zQ":)q _,֠WSƽb#rX;Ŷ _ň9&ϹZ7kADxu=B JWaX`l~ J>~F~9D"nɴ댜sF:|ŠSvhm%8|1l}2^1e~5D u6zu"nVa^4V%MX(dS,2N˱7lXhMW ΗҨ_7|Bt/`_MQ3HL*6$.<sW-&F&|+ X.g,,ߛ`ZߍM:wjGVu$#Ѯ$ ;@Ҕ}%u7"'[0}C (#tiDu.溜cJq'Q(4_I 0<^a5#4R/޻O{8wE|vKARၜ^~olb LMKVDF Τ%OCl72 r`QlB>.4Et/j_ޜ1v(¬i7l՘P2g:􉒥=_ypT<'u(~^R+0*iŅ"yC}stwKnfyXu=VuHŒ ^1k } _\]$N_Ά|mnKPƠ(ژ:/rMJ @ݼ*$Q󂫭^r_,-;#H'l'V\$? vSBtS빍M|,X 8UєL*>"ɮ?W]Bk/c< P1 nR{pZ5pzĂ܌ {>k"תy#mtj SuI6w#f0oADKގtg}߆2kg,h z[#=S F63Hԩ]UNYmcy.܀UqxA/o>͗iEusԊOLbj&8ЈeL)OnT=\[39'6:#?Y=QCf8? h >H# kp*ӦP;ھ:HTT9lhi==GUJ+g+;*_ɜ"Y9{(~Y{0cPje'( S[Нٷ}oJJҡXaeKzfň#Н~rˮ1,΄QsT/8=鬖O Y׶I6JaStb2 O$jna)v^MY8`okyBqO#ļ2la\F"Mweu)t^6F'9z_측9D\UL$33C39\0^0'"]ڒWEU7|J+=!Š_+z6m&K+2xB)99LAZ" 0 4JHqVQ[hN KKts($p?;;RHUDg42g$"1X-ߟ?[f ha˔W Ȅ*=:ÌQ Y;@-Ym;Z 4t&cyP )Q9V`˞v|as؁ht/uaYu8L7Mi\#E{U:}MM@t F1q9 o%MY.t}_zeg$=x&J.,jsJøi ryG,xrGEۄQ $\y@\9jy L ~S:ͿFxgPU7AՆ~NV {r0p$Iq^o*RÚ&T 7Pd5^M3Rqi "fB5?F[X!4|\hF#$,8$! oYk z+r,&!u +ϔ–X.).p6DO;m ]̈&5IKB^L> C[H7o-HXTIaoF>s]0==(Hd2p]Vɚ\*Ė{ { m<Ү}^`R{v-HP Jjn|rYANS;]7G7~)#=?V+uJhFiPV*aI&W((s7B҇Y~bn[C̬|uGʶّOh: ԹTYEnʲO%qJD~x,, 9\0H<ûK%X̙־hëX :\`:g"F/`V*ñ俰G6yѱ5Mk֭QOc"tn#;'NԇQ22({/l;x ٩7vC$ަ&-YaՆc Oaʹl1aSw3gjK,3!;?>}9ydkW?+9J(\~"ts\a4K垅A}VRGx aދ]I%@V wsӿxFrRcH3~IecSv`NwKh9,p-^CʸKS}`=姪!CN9֦gQ0u`G/%կxn_~CQ~Q`3v,]Ы4>Bd.U@O MR@Vٯ{\o Ǘ^zV; !mNC >*/S~*ؓšUw Q$T^phQ%!Ŵ뭭 ¢ND,o)7ZRVB -B륲Mu7蜏j&ݚ u69(]K8ERvcR\ S'e X[ Ew[dHfY瓧{ގ]|͓nh޴{=pƳQ afr(ZO=Xq_MSY 29 glIl Tɤ4rr"ێsGH*\Cǒ1scƂ‚gr;qS/\޻kKy&o] ur]PeRQ{&5$mp)4oZ0Zg(GŰ_KaLJE8),[KpK Qux2ŮC(<7!G('<4nm%#MXLbaIN~'}tcg;ҋo6bs'*iܟKSVj^7|>7 .!FEukA&z*&oX<56p{q@vM? ]gfr:9 V V|ЯKX_fSL_ELQԼ9~UwR#p=x/ FJ*+d)K1 "YD^2( |.L^G |S\3IP*D/u`KM)"V<%/`>(  b)QGߥ#K.w!d:^ 63C3Q-_صZ=(WJi%[j=;Xk,gm3ƏO(^P$e ~v=f nIfi**1xx.*DO^{;S7۬US"K)cQ&Cfn)Zt]V4\ٲ]0 lhE\@nrt-5E fP@Sؤ* 3w\ҭwϠ.>YpoA+ka=2" JZX>w{ۢa޵iJ+Θ _U,.rD>HP97-3b󥝢v&/3R^{:0!an5<',*v cuO]>??VClI]xOS U71횾ն%G!<2Anΐ-|l7 \tNi@,32C>62toKgW(8ey T\U$q wu,ѻB)xW8zkvpsj}l=Ys26Q0Ҟ7)zI*k={JJȒXEi#DT 3$ίB=SDen܀]d3NFfW{YĂ7VZyյ1ʍW&38Ox!6,r+?rҨA7H")Aɋ$^F[۱z+o*.Z|H=tvTuj #JD8I)~2q[#]Zxn鬏PWQj1w -N+@}5X2Ƃ1ead5FqV<?浗M1h:p7@C DAiKC^oMtu^aDt}xTZ%nI Ip<\U]p;BF)Ɉ>R*L+Adʼ "}{B՚er S_ GOjPn[YlQx~kliM v?%Z8)^:՗uYV$р.jjjaHYAqa Xc\8ZMU8s 0 ΅ ˪ܹH~NKb! ,h#^? }Qykȯ, m} W!a<KM wą Aqw.8gOS&+ɖ:~֣<5S?AKYc%?Mo.9)ZO9W g5F-f:Lg\z`}q,HM2%A\2ݯ%4[[3W l;5K\o-% "lx7Yux+/T8Gek"73svW ~v̭U uaeLj UǍ׭7϶m}heĭ *<9e|n%*WT]J_CHaIo.H+< ^*)N~t Yw[^?ChdCcUo]ZLh.gnlxZ @ 8)6-́Ei5:܈M0>=W '\T3-UH ~gY7V3^֒0ceidcx3A5%̄Ve$6gkq" Ea"%7wEKnws g| 'cY,)O}ֿ/Қ_>l%bCh k),l~i_I 3ڭ#piP٬%H/%~|M">_3 _1_3sY(bׅ;Q96`9-þĮtJ/껖j)ov::}ߓ‰h}p9_ nҲdRvq׉:@fqwToE%unw|f^osX O5^:oC*e=P`ΘԜ*pj] 5O0.u:;A4ieL[M$sH_HEȂ tcWt8v_jqc^1WF[ڋ.WSǕOPR=MKLY@2ʪ̨qR(xwܺ9Bӯ N&g3[@R(RʶXJr" U5O^rC*Lߑ!*n^N>rU!@(+}: ϗkeaUъHNՁ/c\ǵ#Q툐 OAݨ?;P^ \I K]ť]7r&#۶udS' h/=)P8YoEzld};B_^(ld^u}[\^l 9T_ x<6ƯX Ppv1.r@E,[,E*pu @,K3+@s ܅<蘲^#2G=ȇʚ䶍L[3 <+V5[mFv"eM;Xs"8*<8צ\QupVR5jx"19j˅}xyVú6q J6 $rjך (3Ãs5"J~By'S.r#%8`N(u}Ekĭ{xT< elVT_52Q7l:~q*١ | &@Ԏj%bY-ͫa~<C^7Xr%uᚁ5/h'zM5[JA >=9wEj_osyqS>m}F̫fsyB9}n#CL\>*(3e/KCN.bk;*N]nbGjZ( ]lv0=??\4< ]BQd`ZbrAW.zQuK?e~gk'=9E4u)dSaY״ӕh]!(=siO=- !2‹_s2ZJlOŔfc ;G'\`=4O%ʑ}դ*H7 ֫ Ռ+&z}Jfi*2k I9)N<PznYb;\IW(6ף]aN| `?b'1@ɶtB<2xk RQ=K3ȅ[bX-ΡQAɣbep{V<&[zͫW9s<8}~d<0m|ӖXy\Z5*;5K"Y %>sl;z=csQDFRO׈gc&B,Ev0?+wyQ?UW 7: aBݺ'*pH'!V& YvΜ w[֏v"F ht.gk/7p0Qb;B4lȮyp FuU-HQV0LTC"gP^#yGWHȷȫ!h!%`{5/xU[Q?L^UeQ4 y:/'0nc 1*cV iԻ AH2a4Ai!$?34 sȟkDȱZ%H._4+4tre|Z#؆4_} !9y+H鮰-V3m+HP=(Ǐ`{i#/$M:NO.;˸۵*lKf;Tyi̊_|l1$,yU\`FjEqaskO` g~?}@́a$/ӕ7rWPH\_E1\U$)c8!w#O}o6E|3%ySz3n|w{-د/MWh- _E< 2H;SM\>w5[wމU:H/4l0/ì[3E;ѫ^/)V1%k햫ff 1od*>+ ܿ.V?F[r@`;P\őKiRzݛbeP.Л#~{lK $`~%sPF~ w+_w >o1(ؿCvP2yfBZ( BXrt䔙A! X[z,*a0@}6ǚct]la?>BX{A0 c leFCfanɝ ]͞kQ~5H^'/.#uA:?m]ln"OW.͈5< hƓTձ'>25B ny)o @Rܦ)a8GaOS髹C[)<[AWTqKFI2UBbH&__ OD;ʛl-V%Fs(8|0iH`J8jB)[6_yKb>:"IfM$50R0FΎ'T&\'1Owil~fe]D'}Xk Q#LR3hKE{UOxr Lk(ZFCf)2} St Mm~e7[ФhKr\#ŁJkݤXdخ$Oڃ㤟M9"xo.EX9f,e 15),"5awR 0]S|\A}U׵21ЗG+xغɴmt⌬B.i'KHdpd-=XVtp/'+fĘ= \$5&;syci\, >Ŋ}yn^&=E EϪݟ9N237"ʶ*`ۈT@6&3">9[ W{tU~(!n_ Ł~ї~|Ȩ%O]~̊G<,KYpsG"&O]_5e\Ujc dI2!^?,Y)`6voh \u[}W骩; %Rw[L Ȱar*=3;`v- mC13=E蹽θZ/g=|f&hY;:&h!l]LX?`&4uG> وi{L<3Z*@] 'N9d'f)Ⱦ.Q ł$(תȟIKi!Bl{к_vIWNc$J4ML6rY?S[ QEd}zc`PXHc6/ ˋ zSR+IЬIK]qϸR@+fK? `8ܝ %2d~[3goV~QYpT{KvJHZq?X#hDxuDȸ`F䝇0U~cI.>f5~D~>х QIjFMdSq*5:k/Jjsk۳ 0!^i5!)'1Kuqؒ'ko3͗gס?i{"23R$!DQKڕpjyTI]Q(Dծdw{TXKzvۣo-n:x&{?/lX>gZ˷|I/V׌Yb 0 T $!vq_V́0`:LQ&I.`hFAW2ZD+]āM38Pzp^iܶRī,u3*0ߋj&ׂ>JXŏTx\ߟե'9>;WNZz@ŤE@(|y X _4ꞗtPt6b4Dw=>`ܜ()0m.Z$~MÊ(gsP;$DuM*c&>Qꄁ|R9dnwt߬llJ 6݅b8*&U:4D2уxۼS,@&MJ2ȼ5%G *CTKfN*&VZʙ+ugzԴ),>@E~ܪ}޽ƥDX(4S9vRKe: (-n3+/ȹׁ3>#='* ~Wrw j?9c_!<0ԉ7g)f; O|0,E< \XQCŜ#1)?&k4S^lnEWP"B׬ضat4i3'glb(ZKA 77`T(6*%ח cߵGx@Bj9זoWSmtL]Bmxl̆\x8UpBH=9X,9,*S30uPj_ܣvkUHuPx38xP #+MI0\]xz]Wiyı~ZRϠWv{:ڔLԓ Eڪ&ջ%ﺝ Nq݉;CuuYQ?($|? { F;]q:~CsHiéhLJz}L#o.<ڛo@\EIdR%TQ_MbrI3v YVt2(^R0<5v& D}_-`Axz28e[NnZ(DDz (=:I ; 3Q)W H7&J d11{ uPE6'"nS XK.#x[ U|~nŬ;6g}^VhtLTd3KY,4J5c!E>2bEu/pw5<~bR۷ڏ"e뵜ɡ}83-6eؓ/2D-ԭSRYQL;hK wgl7S=HF5ems%ũً<* ?p]#OUK7sH1ta/~ͨYCsn hտnHB3,#/zS-AQia"nĖIn C 9.#iHM6{c/WjHm~hėyĉR>bϷ82hrZL<cT23@qE6V ߃`f[xOSyjL@)Bx؇g}z iNƹ-PDa9΀_ -QI8pJ{OaCM5Xf-4¸ʩʊ7JOܵk^M^` Ba魣5SVA0t]1)e0gYcTwU%}x?DI~ wלVbႄ.qgmcݩ-GZ9,דv䷔?FYLe,)Qʟ׌/Ss\a/0+&hC܊B xdާ'hڷm9G|P My8?s%>cʦ䑊۶gw_g"i¢%Wln6:Fqpǚ ){ƓL \À{y ?/^fk[I9 { /[gg0뺊K0]SEI7Zy6*] 50>17|Al aknr3$9mrtʢjf 1,21fϨ:Ms'vAAFmTb+/x_6@&F}HWCD_$pOU8*6Yh=??JE*jK>xD=6 mdJ4gFø]0@iAA4s{A>Q'ؘS*0}81Aӝ՘ '_ 2H(`cآy0OPD{Y T5 ;/mSҽR j==QINYH? 3e,6lS/GMGZ ZLVbz3چ(e[ 9Q]+HҖȵZIOs̖XH{;h;4ALd2|)&TV`kM7Y {8uoptUq.xB)_n 7_愯),K}?|󯠻&wG0Ǒ(63'EONܞ%]_R2P)U#Rg';4P^Wnk +/&%]jfw9_!ZٰiL`7Nq >Y#@H!BS "2;{gs}~uۓ-n{"\T 8]VYڠUrܞW[/~! Pz $-*_74-MQ^:6V;Z~DŽfWrpe9QIr 9ᢩ~z,-N"EnZ*Qg(eםR"l6A _V| AMTpC"#z08Jwoo})3(09?}^-|c—K%׭;%\JX0 ,zA\kr,(9GBk%oR)( 1ٯuJ mhimғ&5| Sh7<;-Uޢ*[u @"5+h4rvEfMe#Fv$jkq5^9>՚?0gf0!bLu?^'5eEU&`30:'sIfk#"@6Hi/ t~~qK<3 mIM84w|TXmܫFz] <{(ҳqB(z1c~xM3ժ7ZMڼ'#KmtDI~̛^AG<%r葍;o2Ejkc8)Udn bN+e* Rad)cN2g35 o'-NG5`LF҂{vaSUPYIPC_ pfU&$vsYv&li c}8-62쁦\ ^ 3t+f YdZ?wi$= 5;-!"$?ڟ[ x<^M<Ϡu~o8Ks D5za|u@# {p/24,;7F'BP_R_Km]R(VoX ( L8Z8Ul[ WzSqL1+ɉٯ@Pr>()GA NH8 \GBD*w랕P˶5hJ5_73Up6 єN30r&~:5h`VΜÌճp1HSüEq(=@Zmޥy$9HIN9_CPBȬBoDTprmhwgd?6@j> 66]E'v"z'$VASޯSI^ׇϟ%z3zȵ,sXcQߙ3nnoD!x*> }Z`(uЕd)ض6p), j@J6 46*eTYqm߳eTڃ' \_Cʑ!7j$)T}WyPKzs|%^J:oh?,ѱE#.-3'0ޏ&9:4.hpi- e%B.[raf֒ on/εc+{n@ 2{bf~j6)T)ǬVX\f Dyuk(o\91$ )W5.eQ݆)F5gi@$H͗v]7lipqx=.e(T8V6cOoRv^9 )qBkzQY \ͯJQG,4c t~Osƻ1zxGDCM@GZ{q8uZGUN∱ORz5L=^iH ŨʰsZK <<+8矛,)dGmP-)OmIc2;vff5?>?-`wU V{,#5qGgLƗ+TW߿Ǩ.l8N=4 d"9D)yll{;] `~ݲK/?0DMք-, =^3WFlɕ2hr Wfܣq1ƽ~nmD@w8uʅo,c.bA {Tg9upLgBOqIyi'UCFLw4]0OTF_E^l 1Mt6\wӼ;?cƝRC9u5]yT^(zi<6-z|%SIN6m:c*g*O\D Z|s+\6J.CwBPĒ͟mf"+p).D#|P4uO}xSxHru[#kCt3L@CK1QSlIY밨9FWΊmL}p}i=v\UEԧO\O(e7(IL)GD"R~JƱ(C}% ^-N|"c#dUpfe{Oap_dt>Vx } cӎy ^þ7-c ?y*ٻHwc^, |ޡWh&44|\ǡif* Oʂ2i__ 8Mvq^;Q}\ weϚmPaXa8ؚZn:L,kAZ[pl*"%~@qe)>_ (9:8d6$ ,ÄV#-W{S=YڦkF%1ucB i  iQ9z*Q8) д!LF[ۤ_SL*W\+?@;fomݎaVYO"ψ02?wۺ$x &A0hcc*| n(Jz/]˺9 1.+~؍z2P eN "XsgGeCk~zLΜqL5a9u^k T\(pί3WR Y=/WvB;D̉Ѭ/fzMxgSi Q +o;l8zbfBJ#fs"e>?=Dmӧ/עǷ%<,+e)<^" ?n,"iX2D'a-tX/GQx[73u>Hh£% k`DhIIvG@,`ݓ6L)fPݘ?8gVkN21OQ!eCBɑ')II &#2;v,`Pp@NE3sf p(@t[ t^N}+PA}ͅ#$)3 ھb/)>툗Tm^ tuaF'>)H.g[uw8 7RVV7aDO$2ɕ6#NqLj@O1^8h[RU n 9b>7IY*;&S5M"L'L/qNIJfs\ܖЀd;90ßμ?6I"3^e<%S䴪fݞ+"\:bJlC8{j,@֑jFkFU*kK)YVl-6;$T适\B؛blDY(qZ/*=)7a2,TH{ /v{Fb)T-bt&^WghkvΜ/98H EIhܐʌ di4WﳳOF_ƨf!2FKAA x-5(TNo.1(ӡ2F\!OB z`[1NbKd5 7u{ UBY0?hguĠߵvztԾz v9OW˫_2hh2oQ Vc$ΖWS2K(Plۣr|&U/y~b^ܴ F~bL&%i#X)pR,;tg 3I KfjU32䟫MLN\aըrTtCEΠHjyPʣRt񢟂 >p#~8j)kA]i@ ߼ĬBCk%v tX5ZZ!S?qqaG Mȿwɞ2˲qZzx={!]r rVG4@y/ۦQ}}†:DgLǍ hڴD"I;"^G5N7~:nq 4i1|5P_+Dҩd"b{v qvw68w6`zsMV)U2jfJ`i^st0yU RhdɀYq^$1 MtT*<ڷ0m&Jn(cjAgqrqs!3\tUa* MG’-"J)10-6iܢ>;p41`2GӶ` `mfw/ӝf:6W3+h㘶bD9?Ҋڥs5 g\[tqnY㷺QUmp/z&jlZ%4X`IK2_P`ľ-^{vRoS2Ir)(3sHB,0![&""`E21m.u!"ANf>zHvRww/ֳob58ڽ,o(mj\8O%xp ut?튬hN,k4Oxv\xG.D^3o<*[슽5y|3P6RP4M)rD"Pxpy׭B+W\g.tRꛏX4:e>_1ywz>"qoJg68Oʧp's*&Y-:r\$QCL#L M} V~Q٣َa]Ox]oB/Dz/[ڊC}Lld];=M;g%m}D|" m [{ : -d1$d3Ɗ+1+Ά4B h `|SsE&e! o2>/yEٜ:0VymM 44;r]\q`xgPZ/zZ>6s.I/fp3&H݊t0~WD-.ˇ**ش8V^4h.ˬX ǘ*[QdI(> Jr1 =jǛw`YcS=%Q/be>Bd8V`/a]y{=_6O#w[eǏˢi|{>Ou+?=>~M? ᡈ<L 'oUg!IIXT%5+}̾R} \;RFE!=\`$xKh~S}G$v_cb%ЍC_}P< <^zH+͆dWݐ4cV Ȁ8jmsK>B8+;^s2[3WO_ !Gw-t5_T6w1#a" 冲s5ʡ4L4łR>- #g"B=Q-(I= C,\ r޴w$am7Wb][D|~'ROAQ$^-gûE4( MW&#QaOԱ`׬{B %Կ]}6hHsf(ƊrHOHvɀnVk4تئV-Jf& ~@sZMT'G- eїaO-(!bV>Kr0F XVĈGeID/͉oMC&q\쁖<)G[͞Ob>(@n pAO8PQG'vՀM_]AWN>!"D.g.eipLgIp'8`2 {&.o_N[ڎSkPi4e}&q s6sQ<Bl* dwZT%ې w9|h=Éc%Ҝ=txt1U@8ZKNDv]=Q-t@m6Ҳ rx$r$ HOfv'<SX*sœ.m3N 2zlYk;OP\*y^Bk GT5>r$M#:{mS`IڑpkpMZ7@8<QH`CZh0f>ǃ@t 'V筮hމOVv|a !*x_>:Ot0r 1\Շzz1(oAӪ#32@BŰ eC{LYi&)a8b#[9n3-&@ (HGd-)sL(Hc4%bK"Jx6TDHT:Z3/#HbfZSU),;L=lA2 ɶ?T#zn9FnFvF e|[(4tW/eV]=a m4-T&Laʗa1mR߆cmlFԤjrM.o׷dQ_x T6c,MA?x"@˸nLّE]Beia:_4ϞL$rVft`ف l(q̨wZ8Yr HM!b|˜XWeڝGŦ'}c;d9;e ]j[)p^>li@hѾZ0;H39#Ӧ_+}NTʧfPnCYcnUSD =!Z\Ï0DZ1%gɸQrGԚqlךRfk6/;ѐ vF}v j@ы=4t_0u2 47r8x"碃[wnDmү=m']mAʨJ9ژAD*B3'؉HtP56VtA$F^#XU7rSFr'v8x0t`_oۗ.B+7wUq3Fe1r׵u ju^P'5TQmRn\m7&W@ w1bF:nh)AbzF_xmB&0AVˆ`]rm#UOfƅ(&FA՜x_wN{mBl! cF8|' WC݁em a_جQ[:ZABnKiqOh Կ熺4FwƝN,9υac98v.Ö́#ꑛB,ws ",Jr;r (dm0XgI4RB]܌ ۪VwGdmtv:aOcHe|q*Q]t]]y*3agt>22˩ `7%R((GW\R7` :iG [88gnGTX{gm5&Te%)ע|1̬=S)yӢ9rLs&_L1(G&ƀl!{rq!}tVG5)]gqЩظ0.2#4]M_roj;kn*i `UP4Ň17XLb ~<`?Q.]BH TX/16o>9sV1Cc98de'jz)I}dEuu1O**/-#G= G/*uV[vZ js83Q#*I}*jE18fPWk_إF. f7cLHyiC <(bGc>v`FI'7fVpGCX3ΟشE>yitĢLk Wv >lϨ#Og輥%9@$ƾ߇gfu#'w~ǯ*vSNj RDYd$N=}e78܅Q8 s[2{׼0D0s'$)!`u,=c;MuцEF6wM7P=.Wl[ ao J}OHLf2a pV$_,}L/ߤ[Ւ{7G+ =م|,W6>HiKXSjj;TT++\:酊aNm%Rsĸ+sd\̉#W ˸O:Ԡ 4EfJjJZ/YXq?ec(`(g KԀnLv_H,^_c8`2"Vd,xo&Rk2BҥPFu&_Uvn]QfI`NB˟GZհKWǼ zɱܻ ,J)㴲H}רA դ'_:,_0Es9K3ϣ^O[fKG'c-o-쭉,ˋ# r|P#/:(B1i}f eS_8+[(M\5dm7gFUᴨ'xdA2Cucǖg8RsWhB5%^kӷ1J|Rrc.]ݭN]{xb6D:N?KK~*ڙ(w8qcԚcK1 IA֦ՑKn`CJ^ahQ\|`1H9.0Ns"ۋ=GӴQ8341?qiZ(" zT87Uj <%#|5(*t8r ^Vu.Vx/$걿&GV#;qWΌ , Qw oж&ociEVbu֦=)q-8Ez&^`d u58loW.}S!GjAJszNXw2caEĚֳ*Z`sRsqE; 9* $;Jg#i!W_ HkG8 =an5s9MxLUS"?2ـa.q(hzmT"zSxwXWyQ,Aj|U '1捳V1y]pO(~B`n&o Xn?za/ܯ ͓ dRT.ɀbR"kQD0’-VBd>%S@Q j8~Ul&. j=8+E4+We9@{vEo4;H E3LPzj\L OEM5b-V6FÝ^EEG)ւp3Eu8Cy=ևvZ_ɼ°Е]w'_-%>M>jcjDu dw ޗmK۶ dkp$*OHՄil6F% hjӝ;MΞPA䋅Eq "L+Fq4zB4ijVxٙhm k)r$[` Gh+3,Zԓj+!oxKry i-tL{-{g#]G@UgV:Y5yn03"2I̡6c4JHʁk I:CL*_ݫ6q7>( ~Zf8j:Й-oT"ZrK9qېx*`v Ŏ ;Kܣ} R}!oV#X44?x*c рx H&` ׶7A.yr O{S*Z:tf4i_VO޾;q׫еi|6oGsG>ެz! iٶ|$ӽn+ǍKH ЮN{u%n 3C֬5*mhpN3G;%_0T>X/J2zw37O9ŧ4jT>*pɚf(q9"d*p m|K'[hՖKɯV)4I K*q!T<8jںOep&*nba$H_g)gj"zί#e&2[. |GQmcwg !hezzK3;0(<|>w, #:mKA9˪$يrr+#;2bVNo\Cs]Mo bdn\zskA@pGd~UJd§~:469Ӛ%v<^Y&!i<[8BQAs4=UU(́0Ӭ#Wo9K[x0l26Fn؁1fG[–Bs]$yg)nhc/hc O,>N蛜=$`jt_a5d }CwBk}a+hS3oHY]Ƹ _%94n ߠ=~Y]&4@LD xȄ:h,.]"P|kEI!h+oJz<_ut"Th;}_^#nxg*@`Zzex~fI'erQt m5&^metҐ%7pV(ݧ(/,,qn΀Fs 0|(7 CK yc= 8G}/7J؋AS]98|1R'Tc%gFMvUY >-+ 5#v\6EQ""4&2gt`_ٷcޑ͑2枣_N`e!$Ztr7c7=Foav 1? 6a<*T9}w .r um?f"e'.Dx%#r5F^nptmUK' 6U+f킛L83',լk`LRFM <t:]+[ݫisESX rcv=uz ?mY=;ep8eu!UGk33FSbUnh5}J‹4xW҈tu Zo ai#I0(qj򤾳) {fmNG٥9rSIZ~*f!(4)TU;Ʋi!+Q3?2d9+zVBY|9QUr]xTtsggH}Β!B0 ~`_|G#@*ͫ?'uӷmknQHNBUmmvB5|鮛#mFĽݠ,q|3Pn6Oa H kpt{^&47["dB'!*ۣ""6[A1 TqadzH7" C 16(z/]q Tce`͢xvա(cv)ZR`"}i7\]rp}@jQʊ+,IJ~Ɍ+;(^>^>…+bDߣm^Ѹ'+@ߨ2P5*b暆jh &K [Rb<`)'h.Wz(%ݦG,Ֆb>񔷭q k}l]ZRÁ+r0Gj7YfX^ۤB$aJ9Ħ^BSY[-,vh]>t uB+gj QUBVk.SX׎H.ItFASB3!XaXs3_iteB%X` 6zn?e/̑5lq2V}GIf]<zu%HQ8̓W)Tz 0eэoX\\(\u k +hL5 X]O5 DZ0+ә +P@Mu:Tumɶ~&A< 5:d~aWg^]K@/H[Nr7շcGbŽٹet<:žq1 äﱻb185,'l+ًytqOQШɋےM{)ogӼH3)ּcyc0OY^_d$S1]=q 觎u`7"4 l~9 H)BVD6ɘSY d2,'YE\OA~"*d!_?L F Lݦ zQ\qyljeáLd!H!qYvEf;Qx%,MΝ-,1-uݿj:åHrh2PcҜxj̶t&c qW&1* -)&FD~1׬_y)P1 F&QH}ݖ*T"ꯛ[~ͮ#Ao}2ЁOdV^!H*UZkUJ}Ɲ–4L sa:ʖOU.C]&AAWeB\ujh7 "<ۛgT֍!˙Q`Z}F,ӝJaOۢ{Y&Gv0[Kv>D"cɃo߄iN2kF=s֡#Y8oJ W lY`{,/MWj :g*"w 6 $ h!gU'wYe*t&@{|EK}5ڑY/$BGH>Fu!`s\xX"./*HFVQL3)pJB) W8j;f#c `'{ekǎXdIL5>sze);ה" ]R(ɓgyx sE 1tbѝve֧͡_L8'Q tvcQ!T=/fO9|=6~!NX]UpULS#n eΐ\PDo%?UYN8'3E$6ry05ڷ ^DR'c* |?:FŤZUS s&k 1w[|⽴k zW*9C=Ǽ씂>paO l&PS`sJ *S=O ljVy8|y/xgix*e᳷~xl~gl{<~5Bx|ZM=buI'fGBv`mDcЁf@4A/$#:&f<{edH7#8NF$ ƱZiyv#iOu\ F`EhYH1\ y'=,P6 F;ZGQ́ɘiTDvm ё ;ʽAV-w6+_rB`KSʵ5%EJq;&0FcsUVx5x/6Sc0oiixó($Jc%wk2ELpYp h] m~|)P0Aơ9bΏys O-g%Wp (R~LmDVKx ]Rhu]ꅶIYt27h`W9XB d'esO`\~=\< s.sͲQFV/7պ8W>|g-37LU#FԘl ;ap\VߡEc,DO3rSi߸ƚ:YǂWH]$t_I,rJ'; W1h-,! @~JOcԢe~#8v@؆&q#wq⣓7$@8|o`}mrRa-Rl8U (q fVknH0|}Xxh\ S37Bb&=]P%.vH,r%Wa@_npbp%Pkr|soxjIogڏ da.J 6ϛOlp UYڨ̃{OnwIϙ(Yױ'«\w0W"μUrJ2)龡z`Kʏ=\%JY~jQB6-_1POQZLpozϋ< p~8PDNwadS%QܻL.S#>_0IW&ғax@Hṣ%[LC+ PX.`EmWEıO\~8 r,uW :Xp'q;/c)U'#Fs@YU/0i) K@W TRtuu &5Vk7ʄDC (ٵ):Z8£4DŽA|=OϒeV7= >glZPqܡ-'Q'-9"jo""zC g5D갥,Z  Fvowp0HDȘe'=P˿_VT v̫WCH[m[ UZxP\RM o*@,ƶxT狅VBI\[W0#1,4$ukW_s qR;vdDa{Ş.OnH]N3&H恖盳dYlNrD.Nsٯ y~Zv|369N8 9U O+tB)^Q +mt|G@E. :r@4p g}ljCI%N{ /U,f>=Pl`asLP[ @'|}4- dW{LeI塥WNICbTH:;̞6 OS"ڍk#  ڄYss<1d^"|Tg'tD4>Q#os>7PD9 xZbI}浳 (F1te+Ns<`Xe Q @@% `hJt= B9ukT=|oH@f31hy72g[|>$Z8^SvꁠWJ0 y3,}rj8ޱt֘g+=_UzȒ/4;b= kKK+ l#8`p@^U飊کE?yVI gbt3~<%Ir:ݹJ:x,%[ ( /V6= O\_ze3~ E{W5 4= " }:!TǀF-'0&M>_6z;=7?9݂~8;1x ?j(v0o?; sBU"L;M?+D8c#Q!עvg]u7ɷ&sGa5B 9iT%d8p T>jfgIW%b,En jxM*T~Gk7DD Us%EZêZƲ%j ;-`-NKߚ1OiQԟni(](!F:G*M-= s$?&oYʂW_?dnvSEOlC:Pd-Je Fx9RLKr3 f1IC#d&HV@Q"_ek@{.ݣ)[wcmK~]}DԉTk {8ĵjH&޺ /gQ_e^zj8=qY>FzQz|Ww(o=GN9­IlI&Gy%•-p-Qz,2cBC6E9Tʴz&ٜ'l{Ʉd&H4O>BRpaRK&Oz3G\-A#8eJ~ZX[dt \l趘`![8LvpC\ӔVh gEmO"- (G|^>يtpH%7ܚ nq)u9 ?tT[X7>c0AV(CVVFpr /dU-Uq Ӌ ߨߕ&Z<٥ Eɔ[^b'W!{v5m5gq'*aiK61/ֺ;BUּ֯wzd-='뒏t$zxqސh0FdW\Z-d8t,VHJD0/#[u-. u A(0  %/+M;0YjnC^@4^ 7 Fijk#ŬO!yzM+١gM T{oD ?K)lfzk'V\5ӿ0n|Ԍn@G'8mA :PXCݾ3!/@.e@8畄U 'Տ?ZX]EޕL&u֧zuQ,,xbyD>:Zc)m^?U>46!%];ԝժ:C-3Å Ќ;ʲPJJp(spn#]>fʏ(k_o^wgCAM<VM3Νڎ9P+Ρz/ÿ3@bPo7gAM촄YcO#?e,@t^޼DӤ]Ya<BN߄W` Xҷ]Xɲ.WJ}}x^ʗ6e>g7z䷟]ؾ@CO BOWh .|r:WֆqX"RK ˂&\<98Oө:mbϪ9.iZ4( MntI5Xz'bɛG'|_E%IT5IC1z >̂`F[ r% dd,@e'Dc@?Ґxא4IFS|5OYq&0}lAich]Q2tn ?rf%Su_kR+Iَ2Blu 6G̍{܁-nدGc7SJ_Cs c<dYaN 9@.<ޘX (S+NTiͺ@'**<Q- Uʶ͍A S<'`49ϭkƯHHuUBK.8anLΕ>,p]&/jM_!K(&gD !Q$y[b&#zC`g?tE\ KֳƠ6FWFkЏh, oQJE1Cu뎐uî`L+$4F@żY/anv8Z{HoIW;`:QNiٗZ shR#=.du&I:濌3%(we\z]})=~xY`&kb:d=(Xzb|Q-j!CQ !F?A*eNLH;AY)v)RsuE"D0JYɕ#'p 1T (CS~DzK%p~Dbk RվfY2PYt4K*,gX0ݓ :yVY2-ehvޅfQuJnm؅5F=V#O^r%=,/f@j BvFIæL.GӝI)Vs,^JR0G9viiOh<2'`ԞbBhѷBlGO !WK;#<־XҾv"(:ؔY>{"v[MعJ8Fy)ѷyMwr"a:ؿ \f raoT,wȿghnJ9ӭ(=ra擡 LǎwSQ1W- 8U.lXl釙 R3m _ٚ[M{ݧ qu+3G04_f] TEMR7>JqݕC ٳ'vM"/DJ2|!o"Pȗ܅ڋAZ30&$ۅm:;QG`s[ĜȬodAj !(Sv)!80Bv!n+x#UM.T&dM<>G7Oȑ(9EݕdP)!8΀ڇLQweV?T˫>Nz<0gٓ\}Cj:BwmjdzcrYJ#h;'K%O6vO˝XۉE.7s Ɓx7?w^(0jWɩ}JN`"kr2^A!3E{Z)Ԝ|t7Y~Ҩ/zN6r|=k;͝OA;-F,t%jfQ YE=X0Z#  ,5<LPz΂b/:ߦR$]7a8Y=ϛ.-~GZ%ǂlbj2u:l.^ WrQM15^ n')#[_sP -?tw2>k)ou j5#}e+ýfI֯Cܨ9@XFh)|k3ҶU 6HӰ:<4#T_BHزiֶ:!ҚJL19v]\݌9{ОM<)Ue7V7sx^+݇Y⼪WJ^I;V| ֊<~R4zo$D&~k<ܞ̸>N FIIQh`YF2;;VJn'FxcPe]7c7.+92r8E/81VMШ,U"漟O#:/cDV)>߭2"u(X .]DjF܈[rTss|DlgTtܒby8+G-^}Ɔ$ ÇULr݂W?1{b 2C|<{Wϕ{`=2o3%Fkt{@bfyP5D% 1^_)/ EuJ\ӊ-_4}_K @/E|UH b'Uow- w[$w+7{`{ i{7}DPop~m(-#OQf ϝr<+BZXrӜbD,-eOݧˌئt1i|* ́Ux)Ha׼F/$B{_![І/m$G֬G/;MQrc"ZǞ}'9Ǫ_%}^udG7oFNl ̖VM\)) Xj"]k@Pqjs78/#TA,رɬUjpOO.-fE9x|R P%3 6 o_ ;AS޴@4 NVKO}9'(lSQ؞ ze?m.6qPWA#n5KU=VAhhnibtdM7se/CRk@Ieit~tɥӍHSߣDŸMq"YJ*~ƒu( MO@X.?Qae!Ʀo3B'>GI&GD_kfW)&cH$N3^! k*(FYlIy/0-p}p懂`Mt93q`80~+(>-p "Iu"7K ezi.-JCڄt'ck9<!!20[i6}](?P/@AoR7$&(Ku0YuiwǴDp3PߤdeOG|: 1Z{V#֢_{+;UAWl 85"IœL"5E%{sQB76DwWuW,a#gOxI߇ %?AN9>\%6-MUKS[sY/4CӍ"^a6}2ͬTӺEXе1h2U_D[ :Bˏ ۛ,^Os\L0-yk.fKTj!B[[0B1-g%כ 7O}'kcXuZL: @J /C8N{c Y]Q It >_{%ӅIpĴ# Ew!cgУm g 4u-CY/{PX~-6~F ,FLLo ]WoG {`WgT!ms׮p1l'9;`}&r1+Rn`?=$8b+`2v5LC<)fx*IE>%1y0OaٹR"!]CN '̊hؒ<܆y&obęT0~yy; Hty-cn#ZY|XC*;eUj盭9M{iċ#50U*d(<Gy| .ErWk .ӗBΓ8#'Վ ~etLbU'/s$]ݏZIut.K֬)Ppԙ܌ j䳉xtF7J"{`k?naW+6ye6ι]KYÊΡ`3S-l;E/i%o<zQLN&@B}(ͼzPg\EWIz^4ݢ<ʹ(~F2gXD΄0築_C0]=zYD KUw3^-NE>RvtM?qy_T1Z,-K&eV$S^Ez2\;Lj=21 v»0Ֆȧ{w,w mRd x[$t33;ʠJdX \ W1=QĠ6 <)OHU|!-4 n_C0e72Haqmy Tu| e[~V;HX;K1MV(js8xqާ*9,pV:`kZO3q&F "TO95fYzh2,ګNeѡOeK J7&QQG B a*/D8W娨+Ƃɵl(Ƕ\eso߂=|o^ >h"i{sf0_yÈnd/#$f)@u]x,4銚z0a9!$d L3 6MX9@E}c8 ӰwTj,XCI0S} EMC/MpyЁ??clآ,u9$}$wXP?p  wsAx'Qɠ!xBH8q>f+Xu JP,Y!qr_Qʻ'<3H@CoqAQ0 oY U_ pE QCYNQZʉ;ӽKQ~Ub>!uN3Zj.I[4n,FlL b!l2M0P}a/f!{/"ZAJzHUE Ş^ΎTNsGa!~.ʲV[)uYHLts^њCM v^.ӇȦS%8t ij -)!wCT@gigr.#JR_o9l@%6qhd@b@ u;ȶM !Yk8꒳.P4 VGWˀ`@\Aȯl>?2#7x8 7N"g44+8K! zYrg!tA ޵SHo%ݡPzܕWޡPZIZεwҚ˲"&%&7ct]zR=8ꪻB/f1 zxVbŪzklF'\Z׾HKHl~ek42Hۙ߄+6Ȕ8 {fovm̔/}I3Ֆh=+^ejtI1U/9~qکYQm3fTxI_C$,~c0A Y<[qSFmhIE9*Bl{xc]mZș1T=qxИ|]XؓӞ:$",0j}/38u ALV[(>If YvŔإ9)cMFW){UD^:ڐ]5j ?=) ?W^n3[>1ʴ\r#QCղ:MspbVNRer[I+_%ej5A&(۸JNLG %Dy  P۞I[ [4}Ol?L` Ȩs:(R<+89IA"d9PZWq Fg!A4vYlKg2`kiu"e3~q ){i#H]G>9(O #vTXXDOF] C}o^# ܝ%($FHNwYU+$ȞAȼRHtѰfj:ȀnJQ/a()~kH|W=t bK-)3cIe!eP<;XACr!c@`ى|zH/&e]s,kWg^2N ^l~c4WrmmceRX'"E{ʹ)- -GOyKnu׊0`GwCFЗ-ݗ=Bg3/PLm߱[uq7c{p"oYuQVvGOF5c0mxOp%_L'POi REdd[f|FߎQ ^M?nǼ|'v75i>?v8D/VA`bl />¡D0R$ T1V0u%V44i!p痷{~С|T1/e}d-XN/yAW0^rE9Pӗ:J?P~Ýk@ Hp0Ď2=Ijo÷lIJќ ! ٣D? 3#U+m 5L!f by3;Y\l 6Y/Hi}_M"9'4D.ljrWOBYFY;o<LuJ(]ɛ4R;d!,k^(ʡ 9pY:5 I^)'  ac9)*˵8tyO HӇA,n0WKh ܃RR3;;Fx-$%/T?ф?Zabs/!θDeb!k$ >|oaVJ8IǾs P\P . Lp+YS DBY2¶>|GM8) 4x4.NGn B 5=bLyMJ%!:mt<&|}je\uIp44θ3Lu%Ry@۹zp,d-|5BXq;Cx܋!,od#zsgI7\~"f\}7kJuv ? [xDfVaœfȸ,PJi|O6 qA4^UbrѿƇ ?2-[,z4(2gVx>^2ͩW; m BJȫѥ*dKSV'yb N25RN;N.n u9|CsoYC}WG'TP4rOxğj:X9&kxG c՚4I!R-Eh)55rAk{禢؞aMS]*)fdn`qݬOD̓"$~S`%=P. 4WS2BS)4.$t2|==;D}CLQ)TϬŤzr(EH }v:6Rơ< <_cd'g$!NtqdKlGi|6Ps&hsT KlY>3+H}(N !~"ZtǍ(C ^j;*o>{r<'0`DQ"5|fҕ j[T:ײ3+P.zr3utĐj+]5Ȱg1[[ V7x1rggpGSfme:)6*:[<T4pa^r0Ft `JĪ%Qvlbx1 F"DZ$@zwLHLx4 Ǩ9ICj. Y;. adžYq+s,$e7!:#A05Sb 0.S7ƘeÑc`1GUI]΅Xi U>^v cj¸%`/8_#.i'07 4FL|J.0c@J7OG5yC!bYB:tUξ} S٥"w>mM>d?w|#-̪.MqT85-r*$+Uhow"ބF6>u̅;+d|h-0#]6kϡ}X % 2݅)U7jn@|8>:)0JKnn:F ŕR{=%Ą8` "l6߇7۷!Rڇ#Ȳh|T|aL1kd L>`;QiN/7ʊZyT!LH՜/\bLă)."[rosU&6%kRTo5d r\Sɒm;>+oG}Ț _y3_(Л{b̫RV{Ox+ÆZm8u֦j꓉PC zneXoe20tQ,s&n<-:>`29cј`mmQ* @ȉHh;PMqU//^NIVm_h|/FMc:3zxw𶦭׾pJvCN,W0 k`` tL+\btf^@ߞK^Nݧn- FǖZXOND1%)swį9^1mT !!+:coϫ2x CAnAGAWBz=pH$3[SVX;g;ўv6 ,1Z8QZi!hK"gژܩYxÌ-2% EbL9l͛|jPH]zxnmnƽD#W@@ʻP[z9v4b}F R)jY*N7) 5hC$8 R~>%7Ғ3Gt6WSjW#:0=RT)+6oh830OFz7-"Ewy^W?X!ea!Jms'xVH2nŅ-R!f7|G $gKpCFFtꙈ-v>hџ3"XOcv$n\n:E<Nv/5^ 'E4a$qUSuͿ<3_F1Pn`}Gy9j]r]bip]ш!.ăȬ3L`LY i91 [{0K h_VSyLe3ETO&*RLE߃V! O2kJ}: ;"u*0Jq'[_&S<{K qN tb Q{%Fmx3Y!Rsm{iOuT޶u,c1ܩޅ,^$L՝Ai>);/xw{^`}y~w8TJ؂:!I.?Kw1GG44U\pJn^_zpQ5*lCR4>1 uŎ6^3u"FC3])t2|jxQ,ezMv,:uR[oK^ I{dۺ^;t@;,ڋeE`{LXT 2>@X&o0>F`l'D6?z&]6;kɃ}T<5j7w1A8h A|- XZls9 Ț:vdH ,m(iz“ýR#ߑ,&} %cA,`l͡?88x!33oj.{ZH͇],HNK;J./)RMG,gp3Tc|EfbF( ~⥫A>m$xbRAG O;-|u|ʧ&M{#P٣^.K( \ňr'쌌JbU0/W KvCĶ}I2MM OicGeG0;1tÊ&-+9_6[J@% _bʴXBOB[MwyPWa8rD3Q RK(i,F 4AXJ7)6VVzJ!0e u3G礯)cCJ`"^++8(B F9I˂ZON5t1~`?1 vܡZhIt\5BpQ\7߳jc8x'60eձA RV.L!ٷj`~~ -?%ĭ?por H 6syp߷)8%wU'1^8aɬvKjZjEf١ZZߥNX[/E t9=sͪeEKc͑bowGkſ,&=t6`.+no➻E&k@: =`yi+<1e+Ԧr)|a]Bs=[+6P-|$L?#w_؃S9Jx)aZom s gX~$E ^.*"ux2Z0 vpLE~2$aAdg(=3|{v[N*N~^_4o!\Kr_"NOZUe86]v *Zw P_#OnKO%C~r0%r-Qh`;}+T2ώ %McZ)p$D!L2-~zSeߡ٭oݖ"-gEЫ߅.& |vdԑ:ɿk [h73Bv: o@ވS}?H<~[ZWbo[_ L3$ALiknY+@T<2qJYʉ 8,<1 UdaxgfͶʄ-þH=:bD`Ks+D|1e T]5`Ť8+_w#U֧/QIJN5OL_IçFUaU\5Kg~sRW"QO3%  2XE]&o0& Nf<3קȟ"2S=1unyH1m`C5y@qРjurҘjR$6Mx>.k5p:)6Uphh0=ToG+o<Z|7K <YYv/31/~w },- DD: DlԝYA~7]&'. AUE- }}eV՘ &uM_3+{C80oh}!tg@nCQ9LAΠ<3AրW+{a0jH8]- lItzBqXv ܗ47R/ҢvDmC~B>;sPf+xSNj³;E~ri{o>ߟ9VwuG7~n8BBaI=*b#DN +qn<)ﭸ(h6No5z#/Ϛkؤ/](DLE+"4Ow[R>=.{Q١v ~ޕG7栻6B%à&KMQìU6B6J9;cgռvOT\hzx ^ĕl ʼ*4ok@I=Nɑ o^ړm50j _@jM0HQri/ܠ-+V7/#y Bo"u7?@܊2p»7.W+\;ĈV/.o@OֳIh c߬h C>/ 'ud|yzڮ%n͋E>m ڵ$}ܵ&(ȡ8yML+_ O1C ig+tHy>>AޜЌds,3c+ZBC߶lu؆CK$9N:qߋكr֪Lzڙ'j+fw^]7D#otqqO -' \Ek |LIw1v1n'שsb / XA,H:xҎs@XJs&k5({dzd~b+H ޳?<&)ۼsFq6bmv6)}3(RkFkuU&K,>Pf-F%>^5 q%4Qg\tHGڜN O ~grjPDɸs˚ZhD3*+^P~˨Q#]ԣ6 A9塏_,)0vRZ{qE'I葥R+v|l V"v(㐄ll?4s!D #juK#i+1oE!.BP\]lOuPLNL#]?5j|[M .:AFeVO4XεP"V3[aI> 81_ ęSjȋ:G^tK&D*,_ 81^K#t"&1&t Nj74]@U)VXPDq}5t ,Ri#suf[1]eb=yvL$}ܧ%p$r̳Y͟?i a0ޭ`=럸# ˺/nRDII-EVU;VM)UҤn^'>7de"fic?xɭ*yeH#haC8LeyV9ŌR!'ٺJqӱ9vHEt? .-o BǑp]}(⨽;?8ch9ErR`ç2W'ͦtK B* {[_P\9> FS! e]27+ImP+SŷYM R-)8b1~OPS}xc<~0Wm R.4lLh[Gj۽{s׸n]P+MW*xizТ9|Hj< {n2 d&qy j I=|!QYtjuϭ& }}tkm2Br+qe_0$bOpUY{ܨo>GZ'(šR8,H/ii X҄sz4סD.X;u%86"[Kx֓훖*T_Y|9+J>(LTAMxx~"$>['ݺ+ lhe"ZP>*ېăjGȐ|l;R\LGni]XK֪ۡJ9x">H8(? qH~2$.]ҕ*ؼCvb*b\Btזs#i{ZYCj9Iy٣pz4Ip( o>VZWmIf%,$:d',ܝ"62KYXG `0Ͳ/G.lg@W=".ՏD>?<~9خڂf_ѭC£D?%F6E}0]WQSײ$Ү&M`,qY=ўڙ&j.Cω~GR\ zqc}1;݀ 5kx 1t>71oAkg_H Iұ 橀=XAh%?ZGk^Vڵ͵ڧj n/|3 yqQExFϲC_t]%7f%]=r%(( ^_; ;IP2:S8Ykd,bpeIpl+2- _!GLRlwTpֻ؏Jh@gL\]=9o"v01NX G >^Lݰ1-þC`uB@TyP$eQx ?&=HT. &(2Y\=4/Q"EnOAt膼e7c\OzP?^bd+NQJGj:&\9SQKG킣3O6nm/x3\Y'YnҺwL0sF$3p-U9H8xB f䄂'aڿCtOoaj]%\{2!Gw"ZMX.f&:?P$z*a͖xnT}]@BYS͈N@Ush/ X[U+_6`m1C9.:!C'X)0epY֕9C6 ̱m#7ƪWՑե'r.ܴRc7)`"Yrt1fKx?7r[<؊sٜОʆtWgwqe~'œ^I[ +UUwLJa&VjS>Wu8 ;2{?d8OOwόSIܓ4$x㼟xb&(#F'yk|=to !A ۭ*<`j"%LBھTгosK,OҒ̦wݻq؆ߘv `qw %:5II@Yv8 cȮMU }`3tw}`:^a X}/9D똆@-'@!i%*+ I\LB̌a. gԹA $6xiܸⓤ">*"V ]7}r6.^Qv2QDC5hЃmSãNp—Y]fX@-oxсՑ#U90UH9b:|om.FV/{!$H_cWph[ߠO#@F+69'+=y6&%%QJ K08\bOU#󏮂א(W[?q4kwЪsŦ=R}fƟ蚝}S|W!.2cXm Z*zS`KMstWӾÖ[ 9-6 %g\$_2C"Q`dg½] >5)XcPqH67내X k\' Zܼog,X;kJf\ W(kdFI~8( Yx-,@#M=Ap| -թk8-֙$d%`0NA_Zb>財NL}ԏ987ot9S١ޭ#{g2x"ygpp~F8r2iF/a4wR&&v)HV@cY0J$6Z %@KsA ۯS>mjڛ.+/s~ӚIlKWR&~&kNVEaȂ3&P B ַeF<lԴNso]-akEhL\ 1ͽr+ (@ ޸kDUk,f-ܦ:o]֛mYk0+r4;g<2XwkWHT=;%(PMǡ)<,LTAUCi)ÿYE̹_ufRڲ/[>^S]SP+[A}=# b炟F~d9ռQ}1;/{U'?g2^TY99]_d3Ț>m=!6*._{}X,RhX,ZcV*qTɥh._So6%RlE~9Smbgq oC M~U+Uu*/]?9 2n?P++R."Gb8!A=yI3Fʤdb驸-*u!FEJ(ebIUU>oH[/ R5' TfǑ<#ē5ߕ^j L 9($~*gGs7%<˺"q#ZoyQ(1[ s(o4ŃW"ʼn1`ćʶu˅ ۍr# .ի ,1kʺ㒺à&cza ?KqrY mM߸'^_=Eh;akz N[ۑaTu8XfI#KM7eKp 9]‡ĝFX SĠm(*4?܄<|&n;684l8~̹ ;2 ~НW2'զBU)~l6!- MXPxYt\#Ki lz:Ȕ[d`#K[WAgXR-c_ƭmǚoFM|\r~]Ŗ07V5Ī0L4ፋzDr%8B3a.k}¿ِY5cxs{面K*3"^rӋw 3dԗmACX^RrJ,$R Xi<<Ѱ ˏ^{Ѷj7pB10pOtjTk_k9bq^_CUQRrda;Vaɚ.\м@Ml?JШ5ubxu~eK4`sZgIKO)@ df4t>8_l;rBhd$jj-s#hp;^ ?uoƦT[*?p>$Ȓu޶H὇ZxF*(>=mp (R9ąV~j7] ;{q&(ܝS"ɣ wR&YQbU|D-$_}%\Zpm0APqRXpco0 :) > jN݈G|`|ko}HWhc_X }=C-bKicIR 5U2좸|h4vjTK)FE&5Q}!K.#-йoӦQ(A`Lwש[o"l_Ws#ޢcH(?[Ia3n@р%( ? P"^g؜j s Ԯ1Vxkw; {XOonLt43ibv5=^ouLSkz{q7b9i4 .O K(smZv*~ UObneq+gyFnW`L\`➙z(s U  ns~B6zcn3X8ӛ{z> x&Q0>E%Q]2S-}N숔4-]xo`͙x(+Veb8G~4=WWczpPs=' ҙްiuc1")֥:b&P7~[]=::6+)ռ:9 neɕ"%<%ŴmI\ca.ҔfQ:Ra)stiPhlC/dJ!8`|c8 J?(t0䁜MOvZzVWҗ"ob2œ~]1s.:iÕR𼬈^15(Q'CƏW[򻹍D'4 P ::Ugc/ytnO,DamlW @ VcI"k]m:厘#ppm|54]2"H m &I7s^oc? G׶63@{W6xƋ,ˀRwXI.&rVE4MV*l4#~]T!0 j>9PZO4>DJڳ4{;=_.u|&TK$2IWRvBԢlUnPiT݇h4\g#&ҥнft,bש_ZcÚ~rͼ .p<l.ȹ@ p9{6<%)!,8Xhj]cw:v6/ * ͛J*[#@RͶK_kU}6*MvؑyRa<V@nKSf$FV v.6{ Ѓhaz?\DL6`Ƶ_!=|10t:2׻oBk;[C(7_7ēo /1!irsVݔJVIV"TqB yVș R($ŚBZֹ4˩FDnqf@S#XzCa]VA]Ph1V3Sz}'҃E*D&`9-pŎTkkPB(wYD"$8-w +{3_Y^j8ӏ"GPB)iQ!uSJ괵ĚЁXީ47Sejj\jbzhc⿄H; 9;v4,g? ןv'saQJiķ-E++z';PL$߫W"IZ贻.jK8NVŹ%̭R#yLkU40Fz"IzKt+L)#D]R[K2 ㆈ$=6,".4F.:5EN1yjJ`} Yi( ^G]W }ק8y4 mxMD,gk<*mEJ=1)heߐ:(vbW6Ho"H)ddL[&k&SUUU~Ķ(,HD3,AHpCF&?OUDV!h- P;o$c@݌*gDhLE-\t9M14>QtFv(騞ՓKPÁ5Gcq%S6fSSLC*v]U-7?@uYwcxL篁`# NL2 ;'~ԏ{HAv2F3ܑ6l|N5#F\oI a @Ha瞼Udy'0S!^~O=4QoRb9G Up QR4qs (:vb:؊9I#^*9' _^$<%;RV0:J2}`ݪ̜?U&-N086Wצ9_:1yFۯQkG:Ij"pB  ibql`YWBOU%1&8 tGɃAT(|N8CZ8vZզC%Ш Gw,G)[$ ,M 8q{(ZBO{9"&OLrZ>^<8}.i" Sl t"|]vBFLl u;UpSaZ1bv(GB˘IEUFwD)KW Pt iί;{? Mk@_5V"eaw[F c]3ړJ%2m_H}̒Sʳ$u&UhV?XDObXW\Jn`މ' h kO\g/H[t Bh3.^@>Sb<ɸ~'ʖZ/u6[^ʊf'v_g =#r ڙ+ifɀT[K dȽŶ#Ij09.9u@X\7HºZZ 8HTΊ .zhLpd#!m U]_IpJߵ;id^cĽ79 °[Eg#B6';?h̻#`F698/>ԬĐXQ%x_]܆mAöLޟì.1W"bfim`Zũe1-ob&+ǥPxqJ9*v(fT k^*NDKis*0&KCroR`. X:{TcPS"C6#F9[E:S~f 5`$ z.H{B|̨YH.p*$5Pݬˌ1 ywu$$4ܽ7;!@a>0fp&P)S,>H\[d't! >5:ўBAҋ4$_!*e _ƃFegKcT8ZWKGJUdF֓g(#5󃲩eg0Ԫ(4V­=l?䖞8`D?XxRGuU{Kq>MQ6V}Akڧ[gYuWɏ{ݣ}?T"d͑ȢTu7apm*M40sBAgRZa.f&åf;BcK.j 1W-G.$HE]bSFj.OZU4_i_.\Ge)c0H5K޷ZD$jWDxHnS9g92RH/'e.u팪a 8ILi88B_H57בin>ʱ,HZ56CI/"?#33&Ƹ5w{޽x@ֈސ ĺuFJ\>j;L~rOq9!x%T-P Tb0 c\WOQhho>Vݵ&k%s L3I_u %!7mGڗ))A;aJOR4~nB5w\IltUV-nH(hd[ZaVenEcԶzp&[@0 NQz8hƍ#&aCE:d<bPN a?TijdCʜ?4p.;6H߼@y2d߫djbr'~@QUIM-==CJW }%L+0L(磊S_P2[TpF$v3s)Bos}_&o@o μg꺌nR7"%SQ`u@Domp1,y-m;eO=mU4ސI(nPQ݌'R{tWR5: =vmNFdj!9d=rkxIvGÅLW4LJtcApjuC%UῐAbA,÷UҮ`'r! o c$b}r?PLbzʑ^s#Pe>wqZ/u6t@'R.pl\H> ˠat+5/{0~B_:5#= ӫDz98L3!zȁ,ۃ'e)&P Tz&XuԦ]yjd 1+REu%WI(os^SԤ#h6t96q0A7#.j |n绡J'M9]1yp8s0^A ʜ]G<t^+l1KK~tn o5,d? ^|$v3E`!Nג{GΝS;Cq0≃wx+HQK L`P7ea Ucȇ&ued39j N H^W.pM4LHE9 dP)ul`,nV##'\dNtg=4D_jiܜlh|: o(Nz_t7&i K0T ͺuEْ|n'@9<#1K5otSQ>$z%'+ ڞyaHaFIfwk%OK[eѷjlABS$64xz ;K<0sLOΊ/5`+8^6!ޢggLὟy2S(URi^`Ig=Q5KIKZA|T+L;P؁E'Bqb̢JWI ^AMeVWϗ_m 8=p=Iܛ7;jڑkz.Ζ@O([?И* O19!ؠlJ>7ux_H]JY HvsZ/i*TL%XG-oOC˄mT]7G]ύrBB!ҷ L=lLaAl.GB.a7bbBM$|m5sa8 06,)Ǵ&t;`s2ë[f5aПAb˽¯Q:qD> cZ3;G!k4]Y(:9(P#5=D[lcpAI=}+wJ";L+Nw5 +uxS{ 8]y8&v>NxKWr$;'\X 1ʸ'CzFDS}uuB_|7Mֲ_q`m'$ŗ:y֖gz0L_Mř oԦLmh$ K !/tcފѲB=H(RaE~*&J {%9&%[m+ubWOs^|w}N33ſuI%N &✔mXOx\7gh% k'f@̷~50?w-Z&#P$,zdMv,gq4q3^&ںg9P6:3KcHK:}sK !tZi'u4m&HQVPDTHyXǔ -R- ͋"4tٗExq:GMpq+wk%BO/xO*̙vp!e,ĩ wȒmj, \)ݍKzy>_ʲv:'XQ2\cnβDbs4 nqf)L$L ?JaG_ 'l6c>DoI_Kz*(oH@;{nVH9^A^XʓŐ A9"V?JɔbFFF Ic0̅֒m4 bb({WOm{v .=%]ZQUG}/KN(,UTj{˻e˟3=[(+e dFđ?ևsLm x~? A[hѝGs%mAAnmɈJ!BkU Ț|z%:=>cs)B> xeRgGηk?Iks4=5|ISe³noZhMSsj3!cֺc|~H ]NwyH0u< |q8.ZJ*ܑ\pݼ9h==OwW_z\Ԋ3gf֯ /3QrI3Bj1[3-1K^,̊xR|R:mk[d o3]d Z c^y)LDwH/1"y`аݗdqr=`' xos :C*61kXfȰ+(5rȳF衻q(% !nQZ)WmyH1Tɋ)B __K΃=hLxe$t[Zk3lȚ&]q+ml'qt?uAɗ֘*7V,D`NqN_[~Q{24^MUff$˾%vIݘjʄLTAug"CO$ dH 2+BtYq^7I@{h)ЇO} \bhʓ>ğq8F!gLKZ# +ԸiQ"Rͬ|*.Ȓ`B$+p4zrcWc''k7ۓshF嬰A#]` dƠK3<{>BrB Dh[s5!!L?]YGf<)Isݲ9d)N;(:p̈zGKЋS/7ڍnej;CR)ˁ }ڙ -@ gw#q6DaL3]`Tz.$G Ӻ'4HDs+֣-yiM J*=.&q}ܦ;' JU};6HO\e1E?c:m gpOP<-Y7IRBɑ^~&# +;}&Ajg[xDU7'jKpq_0J!_epZ8K ]?͐%mKjq+{ cdZEw鋛 *ՍK.LA9 ~ɗBG$P}Ӧ\lnc ?Y? r?45Faۅ\:7Ro^6{rzXAtHDo#HJﭮ"%{Τgw=[3UcD$f xMUg_ĺ;uA} 1e% Ϟ!˫lo,{`g|`.dyx|.Q!qk6x޶Iu^ad0\T}Nd~ 5׊Bi 3鄿mbإiC"қo %\ƾ< &;`Y1gl6jՉvoE.!Vdܠ}|TUpyx/{ Os1{+g#x#줽(12ެzV ?VV񒗓^`( t2{|Y~t8o}*5Mԟ @i\ {L"0#ʼnL]灿,'04[ _U׀QP2RcSh$SWp7R Y(69U*RNB˚QVzֹqXF,i; YCBw9E *wU&v-ӌ3Ćx{fMߚ<7jBfcN?-l\mY`%VBA,' w]Ks<"bAWT}áv +ѲI-tn,x{tO)]lRp$FrEﺻ *DݣCG {I>Yy[@h5w؈؁QnmW}Xl ުI|ssցFj,Pi35H J+:Ead9&Hx=Rq87ٔU1|n .lAAi8w%'íBu\p-O0x;H .q@P!֥MUr5\R}-Vs)MYlgIp$ccô'u"$ߛ}ixD(B0+?fU=OSL|-*szVGIiLDs6,nb-_ipL/xMğP5?ZxFoB泗͖Hֻa+$=,Pii֝U͓ä?VܫkxzFT%w j %@g7A5P-{O:mI4V1Eы GIVsy$3W;wR%v)wݣ_|Rl* vݍ1rʭqtDO<]o}20DacbLd^f_||C% tYq"Qc8o! ]W0uNH[nVYaEܥ%')/xϫHԱMlħc4bbo._/̤%*??4o9zK {1xn6|35;B^ئZrr,ϻV!ͮ>GP0,>!&lʯdyάN3!3_WVAj@20хF_݉_%,!`rO 1gMNˉrhY%' nML$ǀaN'+EfYp ^ j7hx'x\hףbݒM[c rš B>[fF^\C MF >J]Ly~JC)1Q @q2d >VR-IPk]oWĕ/IU?-5 x$S{^oj]w&lɟ+yZ1:g:J_~[+6U2;)lܙ쇨)„)8M"+C?|'ؿ'Kx{lc5xˊIJS볫ƍ ah|:3^!c"LPN7\$^cX$E)FTΨVM"^$ny1U_ {B̈́VhW%CPV-itUر"-o4~a6J)켌 ;䃪kۓ=D|܋ѻ~ +E{m>F%Q evÃIs1J{/B6[ r'D2P~~7Z>C2]Hu$a)TvO&5;e,+yZ)8_lxj3*<UeY;>`:J#鹘OnL|?&^?X<|; hYFJXcס5eFm@JYuP]` p9x<kB"F;ɈH5[24XNi]Vtu)H?[KjқerNOzv+6t"[2lH}> +W˲GP(apیd%@BpR" T>ˈnBmK7>{XE>-ļs:|JyjDs8-M̖<3RK$n4:m#RCS֥1DSB.vx-KusVM$d͜sN@9yAK炙tZ{ ONNh(͢ЖyBaDf&"rtrHWe;i alq%A\ˁa^}Mued'l{lۄh83M5KѝK0X|_O|ѥb-.843eWC ""ԣJ9Uwg^bNνiטeY8scM{=Ӭ3<;V/VX8/‘B'#bP Y=MXIhH~_u0YSg{K@znBzOD4EX#-Dk~@/ vue07G‚$]vun1>83I9@:QF0ή7U:Dd@rv0qvB䦹L,df:֤X$KF'Xz=jX;A$rg.* T_(?4ծ@Csm˳جMG9 apH+"G5TDnZ#&f!1k"`~rۆFj?!³iCO>#e&QO0Y^d79}OZBow**Ph5<Ⓗ Lޯ{xgh ƹ4IF \Kc6,[eϋMjwC>GbvZVu~.ҿu,]8Eܨ܎:MAк:Ԫm{K^  ';dP U^R@qpWYTA`-/&NQYY [ݧ{j\ A֑349N~tSRD8Gǩ+#:|֖pBD6\ڋ'T8E>nUE65u&Ftwr@ xQ]`'pmAp%lwDbzƙ/`MQ]ZC ~~PdgY5V9ch|bI90wE=Ek#G-@DoOۏ^Sz tO$r&2qВ/{@EAߺuL7y* vw=+!zQwH=@Z7yjN&&a)} + +Rԡߴ;kAθB-:ƂS\OX3l:QdH[B$, ;޾^y`3@'c%$ ((]I!PRTek^1ʈ)c?z.U⼵7 ( MLsn %$ _FC˯n] &fP{"#f#e>1|lc;`[mh! tT|~Yj^!\urKo gSgNd{%?nݓ3q<ӗ*#SG {UӸ"z=Y3.i|$LE{6^:`o\jSzZb܆уI=FprWjK]eP^Ng?IRgH4!݊8ӱy<0# OdqʳCe3F SF͠CBErFyҨW.O5+?叹ۭh(<41:QCW5$;ѫ{Iބv L@]hn'ZY"f|/ޣbH%v1L$υ-M3tlhk<靏~***q $p*+v@km#?M&YkӚ"ji8 J pYV6QXqx#9'?PQr8`5tiS[uLIlX.HP9zCO-8qFi\e( S XaDQn4=B1Y1R]8C}ϧ[j '^?. ~j)Q58bPjؼ_ZeMb1sA9(qTd>F^'f^jZ pLR DNLsD݄Ou5ڲ<I2φ[sU1}׫?&;NKrIѪ{d@@X0>Pե5EEӾ ڄ97#+<>ck£瓼tŴ" $(Bp$sa5aR%_Pä` `ڨ{o3D1{7"-X~XL%QpreK}Ü60@|nq?Ql [-z_ (cԧ6Au@ s`_et!A+n* |$#땡Jyl Q\-v=w2,uHZ2C'0Ǩhq‘'a`R{Cȧ*)5aL8}6VE8 s_7wPS :7RVZ |:jSvsm oƐ-?k_lX, {pocin#X[))jOLGiNj_ 3}Zs |f0\<=RL\6]^&w\/v_wn+J0·)'aF 6:W&1^^+!%H"*^bݻ"7SV`&sh%s%. 1Cd3խE60 猢zۮ3:}-[X$ -ymu"iBh13N٘PϩF?^XEdb/)lyq8?Xa|AWs&PAvM=s)-*}"p+Ӕ~F)o7ޜ Jx~H۴K[熒6vjώۡYf2'FYa."̿V}A /Ji##4)qoZip\X[#I*f&I Ĺ&2y!)䊐_W^rX_4~Z#@ F @qxpAKс%}?_ r>e^y95gMq00/qfĠ=Kfg&veᜉ Ln,Ƹ־N\o/MU&TPf7"9p|Z/a$<$OvM!@!tDw 5PSUV9;友.m^6j|YH[rB>|wh"con[TǛ8)fb'<4(4;$Iu\5w?ðs$IuQVd)&M̫B%7z4J3dbxY"V #f+dGlnF6ScKA]b;uɻb$v(t92@k_gwqFi囯uu-Ab۰T~3_ʄmg p/q7b_1۰7^-9AT#N[+cC i;'A&?zpBMPMݯ 2ޯ+P ~"-ەX. ]y\"MKv|LJδ : pD* /z),wU Lj*)T"-1J1kz([LJC֛F4}:c;Gooʬq:?Nm&Zd; ֜c-ez=jYW4`eo p6(>?! S &zNƽF[দۯyڷ>cV2Q7ll]C lQ#2 KiZWr9R۱)|FF ܇ؕ!e?{{3g΂W_I{SWd.9Z_]$/Jcک$M U w A=FI$Guw,L*bw_4_]E:&͟^s?r^cu6g4!Ұi"JM\JXn-2osҟr 4ڋV:[ƑGH/A+HⷾUa L}qwP_ʯs[P,KLKc]])PENR%rqx2'o6*Ą9EZqa+8U쬤i$jтy#m⦝%Oe `2wGGt>۾bB#{\=ifu,iΠi{̦uM$gڦ1UB*D/ 8XpVGP_ _wgU< 17fQy]7BobZpebw$)mqjtxJGE 3tM7i!i -wſ8}ՆXJb(!Q51+@o!R~8-gDluGz멄.3o J>b# ŃQq8δu"׉$(FXx^}z!L{2 *c>v$ ƒaxC[nM 1>U6֜rbϚ'_Yu& AyFIUPn(툷uҶ? `̒cXz[Hsӂ^-:ppUx1<A]nʹ,NYzw=pnMe4oNQ2W BFR%׍}}gʓKp 9( 45}za#m 0>1$t--Y >K ਖ"~8n)lZ>4azoGYV 74|"yߜP'#i \ ][0Ea)~r3lI[UIln82jfɪFudn:ִ IaLm/ȉ8vp}x[p *g ~1WJ_~FIpBu'e;:H-^}Ո[yZxòGK=Le" |ߧ WU.Ta '64kh] 64"Z,[&CR:8JKr[70kupA IF^ٮ"=eQQ?tJ_oBS{g w] ; 7+g%NfH@ܽ:!\.ӭL>=MKKRg};[%x"[Z%M[9M?Y:JcUa0굝- +e]FK1rh7JZ7XP ?=p8R"bHvXHK,ūdf*_D"YqQPhA|$1j_ݍϽ^%mPfi^#QƚeuL{ n0v[2\L '^!|;BON}Z7^gV^xbC~.$Σgw̞&rX S(7U,fkR9㍐j́^-^vLQ-ɿΠpT$YoGIbgk _XR ͕];;no%13'][p^kB9qƠ;_?sUZϬ@wFsTƚOH/whlyVI?; ln󢾶BlUA͖bW{3lש:TAh/8 ܆l EQ19RpcslzHl>]G  ?aE Vޗڠ> Ts0حK7'\ׯKk,C1ih}u9[{Mh5㼙-4#m2.:22SxszQ9up6Jވ& ez'-Ipѷx><Ȥp y!<*02*)ИpbV+cWmтFCM}-0~I[+4\}@5'{+ޙ-"ܔY!;Avb>fժȜgOӚheL F̔z u|+Z\f*xt%+ٷp[{]9ضIr}^Q̐@ |SB0A;KU~b,cO؊C0*n$F*$0!t]$2_?[oא_j" kIAvOuFnEp9gSV}&`OAoC Q-<_%C0׵N#aK'#MnTH4jVx֘Bwi3|fvOmBo8Vimץo"03n%]h%V^w N@;j;I12 ωHS-jz;=F&ǟ&r/ kRD=)ޢ-&F$W?vJmD v4^?zԔ};TSwi8GMJW _.2<.= ]-)C߃fv(,ZM $cf} `If-d ĉ1+E= CmE1GhȼTgO9"oK{Xvb+vƳMj$Iv&* 'ϊ]]1H^X[F5 C,9Ǒ%.($+MDx{Jz$ݿ M\I\̓>oʒX1&彐y0ǃn0pnqh^mMZ;HԷ7w(8C͌0XQ:y7 U Ð@jh^h2kK&Di{]ز~cw8j;j3pJ?=5U8Oz }E u1Zڠ[9C{ay]R{زYwA < "mMB_3YdK0\FZ=%UV 0 Xz-lnzܢ1bx &;C[D:=F~67!}}1%6%(d(w" j;!YN~4ju{5`Uֳo1+!$2YOn#y. w|OWs"AIxncfp/Su,Muon"@ZMv,;m^}߇K \Hk+ZbEBm`maAg1gtxk%i֎YvZR6Ϟ{X;>j6N ս5ňIΖq:[:MAm3 07._b'&Zњ k7Xj#&`% lOkuUғmv"yI{*ksYۙ^xށXeRqn4R]𸈁|srřM _R,Ql!3_$XQϔUX B7b ~;QoCI2 ߽rt@ZՇ(hSS OEOJ~ prC8'alг ?6z/j X6f?U^; 1B́S~gy̬1-ǥ<"ZSSu5q72! Ե'b0IX%a遀s-'Dž?]G1;>nR;YzDS8D~E80Ak 4{@QGdqo"osH#!ރL+ډGFxp-QDHYF{7s)MIV ?g!2?E5 U;-i5 8Q>ZMLuXYa-Ӂ"u[IB^m'n ĵ 3}WӞE7@(B%Mx Xmȸi2$I}]Kp$C;sưb"N;35jB,fx$D$aʈ>$ɃQ`=?nmCA8w>uUǻBd#^SJ'NpTBZ(B 6y900PڹPk!G1'cIr:В0wVEh^{jY>0PPdvq9 .[Z4h)[33Z~:AN`z+4}jöT3e[/2G}"KjxM'Q f Q׃CG#Cи26S0Axfx>HVga\WiˆJPQčzXv+Wo(b4`#>AL}|JxY''!b-E)n.EOеQ;zq+.{**/_i 8cH3| 7YՌcqOyb0[M $m)& E2;EfpmciLsk%khmHJdŢ)23i!^P\#~ج$+s7`}`TiB~ŭ<aM4FnP,l'%P|^b D4Dnq\v$ShW?I7iLWok2N0Vge~vTp΁'зGv@ ؜Ayl1W Zz?!4⥞oMOdvtR"Ʒsi$=н_{HV%pktP~wӝI=9j}I(b-<աhmK-ۤpà6aQOGN6C(˕wWꗈo2`oRѶr4S2v8 6_9ZԀ+G$oƝ5oa_i+\VmD*UbGtʱBR>S'׀p6P讘M_^+m뷻ns$ |dI`&NmGLY 0()KnTvDvdLmp> ~tx.mM^5MzN>:#k?Ef eM%_HY/,9)Q?MMs5im'Ф40A(niavbVu ZX:u!δkGsxѫmrk 59[E%+1M 96.on" ©s! lx!Yr`}gIafv4>U0}w6q Հ{ i;烑-:Efƹ/EM[P.Eg@Dzԏ څ.q6a[Z~$>א^ϥp*Ae2Vz3 .;z6υ] (.=RRG|0HG0RfH&5BR]վɆ (XZ zESmSMF( !,tG: km+/e/;g5%9 b)9?9}4XɛxF#pd xU<"@V:Yw>Dv9wZ6N^ yg9`{~y\rf;PlncfB:67~ %|kTb2`·h™휴xS_^;1nXOGLDtb}>A]j*e9Y#GW^^< ؚ8q͈h;ku~T5> ibTzCBr,G}R4wDXZ(#غq:ŧWn3߸TaB^2WUg};\5U9{W_c*`z֩䵔֏)0+G$]W,kO{xZN"mB}x=4I}+naU> IfDiq5C)]х&J& 5A\)mЈ⽰;\Rfꂛk:|/4uRX:ܻ0gbytգ=@(i24‘.up;=zM<`N)QZ^ %eS"Fg!04w4(fNLyQyO"ch1Q @.&ޗK9L k76EZjE&s$CYf¥>Z nGwS ]&hy@}gW“rړ Y1>,-Uv/?kEZA9#ܶ FZ6My@dTLPDŃj vO$w{3ODnR /.ҧDEEKidirl)>I0^K$dg,5feK;PݎZRC:y'0nK]=F M&O t'gNLJ#UGY8˺܀Ars⬴mQ*cǾ~H=N<P[(Ӭ6nA RӴMd jQ{qCp^fw2ʯҽ!W_*Tbӆ u+R2r&5mIjRH(E$3]}JN.T?Q( YUw挂ߴFS=/dYCySޝ-0TJ#Ja6 ]߉|$A㲊9 If90JRV!ҙfF0fUH[C ! "OOwK;-(㎕_d3ˠ:ps>bwg⛾}iF|Ίuyt`6BOWZ>$hqh~0 ՟{q$[9ʋr DF@zp*a嗰R3~5x Şɐ*|oXłeg%wD#Yh3NzBϫ7 !; ]+ tU[q}ޫuںSJӛU:v 8bV @5C)[c}ޡ:=L5N-"vվl5flu3dRLb$p'Ҁ] @!a_HwWQ` ]tkAuيvbͶfu( -wQ +T ;6XIvOv4d"j \g@[`)c8?>i)|F|6GVЎN 6 }r/̅p k#TB2(kGؚyضWvlم'B4ƄF_"3U,lp:~k?w/TeU@ m T@ia[t^f(%/摙*/p"6ͮQ/f3"aI-_:PM`: g}ttڸ&m8HGO=֋ q᠟ZzVřL_G}9ū.Jz/F u⎊>QP늖ѝ*{5جؤEpdu:|[MOU fuBTMY)͌=TjLf hwd*N(Ppϰ9[õhВkqR%k?ψ̺*=`Q 1,36&Љw'~'$ސN-Fȱzmi,`4_G%+Q9Ccu9'Ѯy5l#T݁ ٺqB(Ś[KFk:P&i=}a_.4 7BƟ[/&PuC2ݏ6OzXOֈBՊsdt>iv iۢꫣK]z,P28.",sBϛD#yûl*Sm9ޱRش.-3 2U?syWZ^s#b^.+xe_ڜ!8_ e1ʼH¿UUI txd+i@}Yr/"ƪ^ʬM:\hqDXp,rjatZV$OQ,yeBԤ^-ǑzTOC۴O@I5AxxYK<;t0뱯eޒeU=?bÄ1;]K+TYm~x˯]z`PUAӑ7hۍ A#τk֏!k1(@bl~TC )DY:XH(UfISt7PXK@~1$g@z-ERA1hS4 Tf9} AR8-Dd]CEDE-F2y\!"LS[l^MzYIYe .).*ԁ"V"mp6J™ׯ wB|joa&!qQ ڱqvT\E(GH3f3,/x m >8X@"z]=sʬ] 272oS虧\ڑ:X'5AWw:b/vx[ J=-V8hYQ:!3\?QEBK[6t̸ &4+`?<3 &\J X;euQ:Zpԋm@ ,!2z~i*;!8P'`k tzS2Q4rwphH 9P1^&pey$g" 󲼢M2j:{8Abt~|\ 毡R*e5aePUÎb:}oQ1qa 5@ qbz.φ=?, {p}*%$w $/c#0iI؜G)TBSzx*": ^w hlZ`;k!J+DDN@Fr%Q뻝u23_uAaxBfHyQ3<4R^RH8z2F{:r$hR+ꥁ +N- WQUYcpgc-W)8mBjLCGH="պ ⪈?ö/ W֟̄I585=D}mHcP%.`[wo(MaWRJ_(?qcԚeEzƎJ6 PLTMԾ7.4Li"4 ӺiM f6ST}^mc4r|M)PֶFM5@k.6*$'6{e2s JSr£Ʌ:>ydТ]huHei֚Pb,5BfN6'X>:2O Oo3;.w/ ۮlu~mJA _Oy0"K)2 ^Q'* HmkU$h)41ܔA+-^^AR kٛrAvmI1du~2Ȣk )Я~q).n$4(/^/]Bƅ0 oD q | 9#4Țc%Z庲+p&-,.D8CDd.ITFݏQ&AP8EA !׎B &Q,%oh$S]QiMVir`!c{PoYs*~hԞKݶփ+IF/0QM˓[ݲ}|/m]OMqf4kYd~paT]n{g^ D^2o[D-m+C&Q-Z#>Zgrtϣ5x<ժHI&ʹ?iTW[A"za8Z vbEyԑٮK#xT&8/twg z@jI\Ncv;ӢezUހ9]DѰ͸c0gh]dT7[L%JұwkjҪ,bjr8xZ2 4Tvnku tTcBӝ*,<2$2 z$`Jj-~PS=u-b$>;2_2(or \&?a+>!SHE1"zH=#ٮ% M.l)|-Fxr0׀nh_ȅ0 /P#8/\wnv Ce1‹)'l+ if% {^'\YP*ҏȫ+JyKbyNa%Sv(a,o)*o'Fش 8Ұj U `XQp8UVnjg$*Op >Nx J^lEFg SSu?܋Fh%Ֆ <%ٺf5Qgŧ*]flA3( V=t` u=&!F85؜keA^59 |S [RE;hx՚qTZ*^ n"TsѓYѵNv7WҌ^`E|/L:jK^FNCgmEC<[M%~jpMgkWY+չJ5̀IH%Jf_JQoܳ/p04AZI M /8Nܸ&9\OG[4|O yVth kK,jHY`"[qѢl:vLS|D'ZNќ̊zrf+!YQIC2۟z$յٟ%xwdgmQߞ:(rġ<28To!;jb< T<^2d.*4rOˋpYPP~kRMT, +ZjX/M07\z3QN6ur$E_׾h$ݵj+Aw] v&hfgo"r3ڈ {.ܓQd^tAkְ5VrbZ4 EW&Bȫ=9F%3>PKjbZvnZBc]ԮԽ0!!-;6z;U?V[I%iL+-o0a 0xzhSY̹SZZ`+c+kG\cB{n )~Pp2=BHFtJP>wdm~}DbR}AurW~u0sye.*Uv[[ZqF1_ Պ@WP,rr^@QIR<(jLo;mVϻ5: cKZ3Aj1uq7Gw:x-P,E s-Zv=»gU[r2r 93?4CT 焾8]eb`OTu^w,~ -OV) /J&Iq#{wDtycJʙzMg @pV,PTMkz#nl[Fخw`R @uf3GۘΣY zžv A0^ro)}Ľ39&%I3%:oZYMC_:\))#Os' c]Q/|{??j޶ߘTQA?Iv8d~07擀􉀉2 rSkl2vL`L /|M#[\֚P(nq@ys.w27fb ű\--5F&#+鑪{v꯴JAөh$.XW_{}4Xؿ^NPoŒ6>J?SŽ!΂=Jl~_C ;|_>>/o^HB%nqO:_ pp=$%8@ xYC`AWϨ>{/Eߎ(#3L#tA lIP]#!X+wz'h{6` Rlj1?dG’ld_a X%ڧ7&`IYN,qJXu['c'. /KѐpC*K;_(&;y?c~88R0U8!"""gKOxF@/nk?;FeYjƾxX\pK::?4FY9 7ٖ;ĵ hWCm`ѻη'J) e*_ gҭ;k'rIS*Hr•-.CK/zJp}(Id/NT0.eb<0 Q֧wȃ/YjSơt}E.O9ş.59T*Yd'X %Jjr'5:HzvlJx^+9Z5 H1󱁻LMKͭbq">D"oHPt^IԦ/| ٖH M:pM˼uM" }\-S-@>vCgB4hWkt-Yu9>O^vʯ}pON( 3x ô!nh]9.Qшږ6j34;c]e52pzqO{5(v0 Ěz 0jܲ(!GA-W+mmZyyJ |WaKC<\Um79zz]es_ @Cʭ!6ls) hwv#SKfʅ Vf-Zʬ&0m=p!ehc GJks k0F+Re2r 5$gNF93,k3l)J4eӁHn{ ڜ3-:1M?~ Y?? X|Gm۫P+ʿCU7'QOB?^_q?aDEY]YW~-\.( 놕6P̓ ΃o1*ܕ88a&9q"?@ԝ8HeOԈm\ӆbx*Nw#8YEb#ј\ÿvI0} Y`$R[L R6{Y?P'ڏj|U;&T@t|wu!H"AzߗGf``JW@OM3 |6U{8:ZZ^th+/1ύ[ Utx"5~"a+9<'rw{**5@RŬ[.0!>R'65+H ~Kjy%d4X gȩl 4ݩTlmLT0qpjcs_e] ~8%GQ K.s-d.tQN_N )"( sE?I܊i"[~u`?!8'z6<ܷat^9ǂqxJG7iWrx?u߯mPoLk,9jTݰέVwOwB5~Z-OP-n @p Xoa8 tOZROLyI@:Y@= 1Mٱ>$ YkNz/^<_ N8-§3,(N]HN,i$h>K==tnSД|O؍D R~̷ExL<ʰ%=Q# Y~4͇YIIo&6#:"E+k)sL7pb}/*̗[=z >#th5D@S;aEx2֢S(|ɓIC0~Z*@~7<;s:Yyd*csS.aksɰ7A6j<<_c]9af@9ddg9R>:hm@tkЫ8WA[_ߐ4ak4ĸ :P ~:ms㵶ϥC#,q$607Uo8GNGGgj*x჉{~˜]uAaACGN[ |+*Sc8#P[7yC y=KV>τ%2E QsA[+t,ia*ѱ̎ 4W [K#._48J]Ŵ콵0k= WyQg3ôjL̑nBO.ϟ%y{{8U+ZTpFgk-IrQ\2:?tuI왜3ϲqi8)pknڙs&sDP/ze "ϻ |W{ E+NrInBG!Dl|cicG2VjZ9w"쀿P4`#%ܹu=ѱV`zP+>] _w.ZW)t> |8_i) 8Cs|!KAM?|]6`rk2k1UdG&sŌrOX馞qV~~eC1E&M]_6)Y$x2EFds(sT DVʨ糟?RolR\*} #8 '*q.sVZ&xX lD}BKm !3DL n⬨)Y瞂Z>"KxXl 7P"r'N]Xh 3ZuboxûoJ/X^fNJ`Öڪls[p;$`\Ph"ض_':]HZSJ`4gdvDúmƑyӍ\)3h*(oyYrDR`#ti}aHÇ^h/`mI5܌KxYEébj;!;FkLpBkVBB;pe@-bCNǝ^it[Zuˠ? $T2f,xS(YdqLcxzuٴclu;=b ǵ2zP7?{ ucYLv^IຬdTT$Mm@a\n؃vmImglNE!YgUm;j# I9Drus[%L2UX9lo~prx=hgɐ`ςYE,F`[ N(uG^Г*h%(св< ۓqFm`mZJW}Ix F $QFS'i?Iz v;YX&hi=x?;I:&O'G&^G"|ltss OoSǻocezǂ5p]ܾn'C8P*sKx^B[0VD,"Is-2ăEQ`06/~h죃!ZQgY=aRжNQ4>-b|*|3kNԜ;gmm<2wYZqo^va~_W(sc*bW0r7By-R>Ic?xxy'ok8$rH~ޮB&;>'w6'@\fjйhwHԘ5blTQ }aБd˙M4]' P0&t k-1zj75 ) O)Bh@$(?{?W07Yl8.6ل(qƇn8STL5eK O&N(OSU.e: VHz_)zdc- ȿ? &״ =ʔh;1ixe^20PgWs`UHk&M ^֐RfNKWpi{1}hi93NSȶΎ޸ '?i~ܽ&4X3X41pQ,|L+$c1&HLh/fp__|:ΞvQ3P z>KM?&ܦN65TZ 2/R%`㫳,#F!9edaELo76>aV Ĉec®[RO5@^tLeBcTOŠ湝1ߊ*S+l h ,dPPJ8x`̎nzHo4^E!ޭ+)P9ţ(o"< -JN~UeAdJ< QWiaǢyR ɉ-:HQ~w\LyWt; z%hҴ=YIy?1Ac,_'P=GPcpؕ3XUȒƗOdp\\h@S)6@iAqD+j0v0iF?%0괰Z5>lݹ,6鿰ͻ4sʷtB$e 2Ɍ)3|QH{oW khfuË3<0whPl+g:Ek Z#NQchE`ib#̷f YNۛT빁RU-8̰VgV#f&f \uc3_ )s-ǣW?J4`;,П4hL':~Pe(s7~i(aΧ]oh! ly"Us܊ѺfO(0{"-_G\KXE!UOwd`iDMQzM X=1d!J™5|opc;3Я#t/f\ʧ{,L Ո@Hzl~8LC;ԉygT4o(b)EpP(=P$T΢ӗQW.n4ލ604Ar`ҀO|Y=Raw/#Fpfs~.d(S-w/sR~Py$d=KT!h@2ɺ:#)Ȃi/4h6N *T格TX<MKrp"'7i⢋D$jHypA6ش=H)CP@H%nto~gkyP/d l(w)>d^X #s ,TMr0l̖ךSHkrjNU[43D6} 9n?h.#(P2Kz.?O[/pظ e7$nȬF(-dB=گ9_>PohkF8~۞J f{NY,NjK֖^+dOXogA2-#J8 7TZu;>0<9ʸg<$ghj.Y-ͻ_ںŴ8ۈ \@?%%ΰZɶup ̊ɤ1X_iglaus!=gP>ұvz)k.MzR>Lt=D~1,DL1J'"s9=4#;a/ *;/|LfSl\Iit2m^n䤖HnQb@UF˫`nc|*lۓclٖk\(v׶e4szeWA҄7>o"u1o[u׳:w IN3܀8F?r_ڳ#1K~&ٞxP^F9cV37f12:"Ę{X ,2y.?c _W =CK邃sEçG1|R@2PsT[cϵRcdti& iCH 45tˣT&fS~fͺ81x,% hʨ~C}'{X ȓA`fVcVf_ (w.$s8}*;FUGAT R/ꄎI~-I%=m@Q e}V$6* 5&N/(AɏʡN~3Mń3B 6ߺh|/,^n̚KdcPBqN`$^] $/=*$6,3 ]스Nې.>ܱ{g21:rӲɴ/oF{qPjn:!20l}S@UH38ȖzYtC-;Aۧ t|X^Pklt%/>UnVc 1yCn%o=??9L,l:.@|f`aB/%/W&Sn4!MxJP}#~h_ VS~Io7a  D GV&wh}Bg0#F٭yR'z!E'wnS<hWC+zaUv(Yb+5hG+9BNŕC<'0Btc"΍=o]U0//bi1 f,H{?p0d릲vEyS(Ut9^΂b2x'CL6.Q'wp֪bNAY܁u ;m+V|8Ոs}.&^ Hء=}2ӗۍ0 ׍]?E}M;!BeXhrѸTV1!v_й{"LXB "Fa/#$)d[b姌7ԃ\w9+rj.v*Jߟyk[KAMOy(//&ͧ䁵mgpf>?:'vNjrd3ܖ1с]FM 뒁pm"֭sg+R[ĪdҀ}ϩlۘ;="$ g7^zߴT5LZ߉]:'gK-"Dbr28#<9Wy=o)<ߟd+V`d|`7}su܁eP hv4\.ٙIiךacG?0nJ@1"&´)pVQvk(eDq< ~v/5.u1qV XHT gP'P%pD֥ˌ%Pѓ~#ض7>]5MPf|NZʓݯ[N%=0d SHk`o汙XiwZ(ΔLO@@)۟eٰfVꪊ _vDOb0E'^j:Tv==UtSlr~S7N9S@4  Α=m kPyO6m/ 8N#~OPrPR5_s `#qgJb2|(n8qbM*p06P!6P%Nd[&y?+"/EGՖ M=+,Qc"Z>q2 u4&5yPՌȽm__MwJNX(xr`C"))!"XJnԞ[G303'49'`5`6HgD%==(-i(5)RZ-PQ8>Z$],S 8_l"#yj@nf&laC^t=礝>,O#!\`״[vR1>n$+_vyH9{dc/%ᣜa$/W|DFd`d08*9fxB%he3V A춳ԀT/ }rwܸ}d瘊i%Lح@82|;X.bGжUE]=`>eΐ([I\:34哺OKLꇽVUwN_i$E#3! ;io|~pGF$ҚLEH6R5mAR4~lw@әك ^(EWka㋖;T#p81Qsts WN}<=~-%>e(1اeBBYSu{9>W =r$Gp\]nf;jeGpIunL+?2܄u=5? JQZ i:Kݡ%'Ѷk_d -Ow7n7;DZ{j.j,p13(ZZLz6s1@?iwԈH|9Cb H;9 &%# VJNoƹ<*dgX-h^eIx;?ԻZ®$i,2*bVX X^D̖NGW)xϏKMH9lш~LGD|c~Qq'jƩTΕfX5ϚE9 =fLGlY]~AJ~#ayZ˺UfYqEYQ:4` @<8 )Pa)1sNo'vZWL5).t^AFTd m{SŜh$᣸KfhoTxW#i ^L\H1abNstpL3]ހƇO$҄EE=Fw#0o3L8Ϧv!7St`;i!9/Rc_WžS9ґgʟ1n{`[\06|#Q5Z.'mnY!ÖBgO{!zFؿ فFJ@zQ9vlKVgbss #}{7uɌ7iHp{XHd>eq9_V#Le>9Q#s|^bIC9,pjSGd|9z'0 0lG=ԷCQx8sJ _&-1‰M_'0/%Ѵw~hS6+P' QvvrWs9ȅ^pK#H'yQ+5y܅H7je>Z8LX.zMH{} gcߑp=bо, 2IǂT48DZ-}aBU9]a<3U3V4dQ5f˻)V[-/V`}ڟ:h 2bU/?`͌ovZ 'bAZ h{@Prb%<X:sw•ox %&bIL74+O]ծ8 j<~0[b9HFfuH4G*yŁ <ɟ)82Cj ݣNq϶>VJ }5Yq!bAxE24BX佢5K\ڍN"Ϡ1aAPFD*e/mg#;Ǽ2NP|)C9'_/wjxI?,H ?  Dc$@A \mZPݴ7 G8,vfu zӢ򰾄po3!$:ր,j``T"~AN'=M 9a hkE\qFFfJg4JKd(BпsPD1҂cvfP=|*;}XX~cgS$dh­ﰳdZǟ>HgQ:cbͨ-BAV &|E~딤>4IT-TDOZXO\[p#q];|!, Hǿ@oF ֮PM"|ITg^u{MiKs5{u-[tbf࢔V&V8=w=02}8ɌhwU^z}P^kC_e94嚨\G8xɃ@^jt3~Ƶc;O8ã1QC$Vrc:(CnWלñI--%X҇*gʉ^4@cJLL8c,yGAX 'f)KfWF㿔vBs>LtܲflT /(+RUb+` r6Y1[o!E={I+ X/ #g3~nħz&fB;($cJpY :GZs .j0e#Y3KQԖ[X!sẙlNm0w8я{x ~t`t28{vUQ3~ ɻ^%IHlf7ڊ}b<<3 *K!(xf*{C? $:R|[[:ο}]|&_ßA,+]e|Y5 I\U>#7%@.+PtM5zfl'pxmJ)Oe;A97W4xˉp\IuչȖ\ e*7!+\DvMNbїeIm#epm*0ᶶ_@RWGc_4~zNGeon.SʗklŃ tz6[q )=dĬ ALQiQ]OLAd}'LS Hb"S (G(P8 OאrftѼR+!X@/ )zJ5 `TC_q_){b^ cqN-qHTV |3RƢh;LV]N kߪ(Ah?wG)ZgF/Bv*)7 ZNY;e"Ȃ{,X7SZnI]P>qNO)hW%9T4?wEʪuGo,u}_fK FE$O儧{_&JM Qpl:Jb3x{R3PajeJJ2耞^,;׫ϻ,Vb^خpXvj'hW^)wq|mK?P;’+[m<Ϥ$C"\sBT_l"pǓw/]ȏ,6 '<')_:r3ort o3#mc?#h/ImPh\4Yz?&KtܵydK|b.R)d *T& (˭}٭U_{RvS4VpuG$APֺ{Uȉ aȾʸl$ۖk}YpǢ*񇨼#VM>fk{mQ҂ΜGwWyΊѰ@âF?3%4 ˓'<-udU.6bgE7M-cT ,z EE Id&jl%#2z+:S`f73淍+A P҃} 3q3犹 |yU0pM0BB%d:uS'/М`):^\-}~XIktO$v19 $yx=~?0KiIC)qZ 25Kb|pwNdWXEV*!IKw1I_6I> SA̒/RV~Ycfqlԏ-s}Ǣ5zbW[e$yA̚`20"ވY8F/kU8tM?izKf9F2yp*!orz9iR02OQxw}3ECGYwM32gH7q{tPj豷`][:7{m9 d7/ܾ 36`o;/k<$y[J*IT`A%*FYHr.BI(=rvގ,hI=A[pG4s0m0)/8#9 y#ZqyS+_n!19h2&7g{FBX?ah %4.tT&ǺxթxBmAڏ;GƃMiOʘ#m5%#dHޘ>Q]lGBδùg K$PJ".,A]"+ դuQs1Kq_DZYU3SK[u^302IQrZL?T}|>l!sڥ~U F8^& ӵʊ2mkn=Ǘy[{9<1.Gy5 %,u$"u iϝJ4Șa܎#$ T-Cjǂlx8F3YE!M^Bc&4n).S \c}/K&Xagl Zī"-KxS|[?`lOS͠zB0uzAOzIavqƴ$J{!}7[BkR%N]eTLڌJз=V|Q..\@׭M;Wꋢ%2Mf'A`"!BPa(2ŷ[9 hK6i~ʑL<ǐފ!OjYy` 7R)&^UTF/zW{2lrއ\N=8ͯX]~{ĥR!SWҬ!l1-2'n "[7m|{6M$y.`1My`?D7ƅ և@ XQIa\³FABW3Y/t*[`/7&OuSH}OCa<Ӌ SeOf^4]LlmO9|Ȩz~&\L2(H.S{|ɔEM̹P,`8NFm1xG( i-v.ٳ. xʁn#y gG6"!FK3ȳf$AɕH'V߻V-APB^$mZB+˹8L6-$cʆ@qL9.×ǎق/wd ,ف5~1Wİ0!}[Gmq@!owC%EQ󿣁m$/TA2SEG3my~ypl'7~`RBe7r~W YZ4$WK{!R *_?]FfujA#ހEK;L5!t(WA/:$%TKY » u`U yƣ=.Bw6%EK,ڷHVk -Z)&O0|Oe]m{!s&!6anrp̛([l{3N=xy=JCIram_ K(=Ԛ_|pAAt V+X,z-2 [#s²YG)~xC_m-h MD5(}2-c=h_&nzMrTX+\̦^*?#4yp1CKТ8@Uγ'Tj¨-CCy9bL<}UD(VP(d;^ pk|l,e K̯NVmCFAqB׀ [k:FpfycvJO>*s=QпX~ʷ$i Лf;%ns.54*l)B|iHU/e?ɵZ'˗*pS0S  N>qwa:x;:H3qq4wjCtaF`Ar Fф ZN1U,a#)x!nK J'|Ӵpn: )q\zp~_GNe06~|[q') YͿl/K֐b?' 3~ lzfdb`zZ$d\ *J2vЩ)QIOXP\[@>@kse"^]"&e o@BJVIMϕi0SbAd@{L㱋%Emٴ*@?oxLlԔsEfonsS,Wn,qy]Lwi+J22e|-@ x{MIbk_uM"χFBb:$Vrml3>6 (p_66ۙ_Vů&bjr^'[0!6&<)4p N@^M Lt #Q @FtOqquB@:p&6V(P&^ mD2d\=wI#n, ,H! #JnAUz[k4 BÝ= uQ <*CEj߂s<|j)0L+/}_I R"Oe1Mx{Ɩq¡oB:D*y7ˡVE=v,9|FmN73Ho6؜חIb}6su8clbQD"ۣ\Ͳ]~+,'ۦHC!xjp JKONNd4$A]*ErԒPR؉P+,` 5LRc{w3} Gdl\Wm$ lTJw|w#'i7vu"'b=rm$ D7 ;I Mg% ،OWi7f@w^RK ;'k9ItF]ɑODiŷW- {gx79#!LvWMűznWaͫ,?w,A]&ކ-= N7zu i4E![\"|㞳Xs-ܝd4ozq IWOwIQ/;YT.:՝ӁvѫITg*uʤ<>Pϵls|Lbbx?K@/:)F:eR{xS/끫2=P+Em\>69qީ +J7Un3ԱCjPX%S$+mҿODz+ncɌw${YX~"N q?o`,XudgZ%ٛ%cw8R"V;nCf0͞%' *o[dƣzqh* @&S[]|-z_uo)IEuoHt\Jp`@js1^ڳBG8GDuBvx*=Bi2kcR8 G͙hy՗WL-Pu.`Y7R%7EڎT$>ј6ƇM ^tʏlRGM6nިSyRYanϋ,(,|ȶQk@j3Ѡ/~  GZ{4>}F"R9{K5( M#fHOS*zV=`Bth[OXl1{ =BP!<^Zۘ+fD4aRsmݯ6$l E4ƴ6M?Un:'cPGMl;OzʹWo9{L`7;Y&~wԂo?QB1C}gcwQX#IbVλ$MT^{6 >v }d`m _d2jn>.).5)Tdw@3baVdb3#7:[ɨ9FFY8H[yg%`@F3w :gϯ_6NBpHeu23(|$Vhb",>^,UPy#6mtfm?u}7Kۧ j㏇aõQZ‡$Y]H'Mvo8/i|,!JYq8νli:1^ c S{VSiA8mhbbⰱL]I( Q TAǟIVmh9=**=`fU`jzH $_5ojÐm:rΉAӼe;KL@4(Bwsue !'qvX{x@_KNíÝb iR.?0&vsP- ʼC*tMk.uxcj_] 5xbc&9R=GԜtưQLJr)H`Br 6FT柌$Qyu!{Щo=fSƬ4 Q>F@4_=7r咳= LV:Qc%F%MqhKG3:.{ҭ.}'ěޡ!Pg^P[ U$4i)lAHB&IR|305]>Db8P^}A'96Œ1:cѮ (KO5#7{l RL^⁊vEЃ*Fwܶ$(#)Nd'E|w>M <&o2Qs_-]+EkY m5N]m)3@KQpC[nՎ^T.x6=!hd0i$yɚ} Ae&]N #/%eoQ|cԦ'}O-VJ^`'X7~G~Fd|v ?nW4,hс\سYN-ّw?Ѱa y fu>~^R1epFək'5(^3{C䂟i]lI@Z\SN49 7ߺ>jDc>m$*ߚD8p[1 e+|\+mi f:D/َ'T#%W.#?^ɠ6`&D z;MA|&?.8'ѡC!^h+;29I(s(?V[,gJ'g4S;!OSۑl]|V~Qh3WlfM Yl}cf9Cbwih ͂a9A@`/id6j+8z*A:/l_^q]_b9{D>W~&T]qo(H:xz|0`bIShO{"r#$-iko?!G~j4E uoTU$Ax)x^eTvՂvjuMU&j|ǪgϕmSd U 5?^ݞYGN >z]q3wH2;Ρ9ôr"r(쮟#Fc˽cj|7[״Gם,ڇ=k׫/ >aVg=άE׺вU5GQK6X}?m#[)o>lݴYNˏ(IlLʜ4B$ W+l&s*lp>m! ,RXR V;47zvV6x]Gjbjd>(owS""⨳S4'}ڞ݀z,+*,ܪ)w"q[ٱ.Y30 zٺ#zI,PVGf}bJ:b]h u[gvu/:vĥ"`]#FeaHk@7Z+^iA}jlrLr%ބ/m];5fYә0aD=#) w:m8O|(PzR٦hQ?.bA}OepÒ5B{EpmāY SX.ų5i)1&Zddnpڡ8uR [݆!I*ǫj >t''$Pu>$cRJ8h=zQHlȷ}'ݫ]?4kb&ŦD#Z8  |EOhͥ`.U7>hw`/ikF\3JJqYXt>#QB)}pR9EטĐ:TE5JYqNʱ&jHcILL~'FϬ9F[ۣb$16%}٩.<̼?4z#)n RӜTmY048̥xgϪ8S06tyuLߨȯTQ~вx "Uj$lBjFcHUwyAM\{gQf%&=b%\so\SBS/⥿vDGOC0+#ǁB 38O *(}:[,iձP (RUb_e㨖f͑ МB7pjD)BڗvѬK#j@ 0d_:tCHøa/~N܍nW[BߏJT\~J) z 8E'!Kw3r)NӐ!\L²*ŁF1A٘p!j xG.ܚz4BR"U".yb_1kImz7Pyj=nH\|)tlr9MB qJQCG!Who*6 ϵ;͵hVZGjv()aH86XV\Uπ56Yoi`u?l׉6(o]AuvlPLr-V4YX\Hzf>F?Ku3k䎜Y(rH{ɋ[8B#E:FTW PK,3i˲sJQ;c˅v3-v"btLKv.u~XNc/(hv#G5R=̄ )t4ntɾ !ky1vKz(RGΦ=$ˀ*% w"5#1cʗDgI4Shsc++W:, ˕ bZٕp8(Nj:}P7Se|,?+m<&oSmQ?A=l>1J, ])E6uT[B k\CNP7) SC`xiv Üe3;[pU(gP56""4}|]r6;80BKP2mⲺhZ]!;Ե9*k7rZ?ZaKoH3f^ħ)1:,B4:hSǏ胍] Z<]Xz_~uBH@(Fϙn@HK1xG!?]Mޥӳ ՙ0t|H(ךJW)=pѾԟ)_Ռ& 瞹xmXn)K[dFvv(_ JI{]obǠ^~\QyGJ"Gpswl2n~[\v2ZÃIe<7  heN;/a'|m6N5DFULhCpF5/kuJv -& :0wiZHƟv<{cQ|z_D2O|loX7ߡ& 8٣PT,8!vǥo?C@E/'î;`WyAQ$OM|`beHdTv߲~f; ;EgŐԒ9cI>8@a!ь&$^'0('4Ʋ&f.6yFG54><6co=H5r@ W2'Hq41/3f5$vb  Ұ4@@:sS*T~M7]#[Ÿl,vJTq/5K4, o^.i,xd\ctF]d B/BU:4%K *CtZ4e8 o h:S;#6/qSV$-fJvSJCF Іh$#@\(CH(+~—Z] R婐a$(|@ttFV9߉+rR.5+p  ldgFuϕw6k9f*%h/@MQ໵Vpʡ =vt("637>_#I풅aeAIB,w!fޏqM=Ga$RCG_ 7s G%@̇1lC#i`ɵ׫` VeuFd ~=4 XɾUU,nT10S\qR:B-kltn3^W.*  `F+ V$wBv/> )Y a5A T #ߵt4Ǜ(ri +F[۶[sTɞAv~AyE\GmҌ;o|bW̰<һ>0E5 d|`2vi:AQ9ta-U9_3Y)BU,.ҟ{V~qm p*9bN`JR}:TQ5nsiӷ(!ț5=!*Ӷ=E mXDjŠFgo nl+{@ gDҝOi 8(s|x*xWE+p1aS(O*!f?!r0%`Ki j* :: |$y'8 cVY|tc16УA.gBb_/Ɗ+Jľ^b`aA-s? t4E8V0x? r:=swт(f.f r#@̷݌$y]ϩO|IDFjRI&`Iukf6`y#w7`Ґ[5ηvЧ9υ _ږEOqIuvƛxL+-L]M&09එjz`/=mkffƒ@ I3d+7}^ _ԅ:zߪBHHXp*Jqx.PINO7D{rMn,?ؽϲ%ff3x>hJǫ]Yjp 9iFnJ8-77:{2-#Ǒ[35_7wT8%J$tPpOvRPag_ڼE<1 ۋ4=V'M7N' 2nnwkY,SPbA)cw)u6>ã 'ZH˗ i wVeH̅?;v-T=xj3r1h5M&Ds 4rXq1da\V&~]QvDTr;e ڢc\UPwsmVǭDz>>_޴O3!d@ G&f}(s3H $[A#6 I7Ä]+C6+T['d\yk]QT%B{ r$F$w] ]]UB~(OsJKӳy,mQi‚!^S Ҵ3y3{{n#RCrJW~ЅctPO^#8]C^=D`,Np5YP.K Rl1 =n˯I&<\5t\K Guf`JB%&KZi5^%rݻ!]GAv`x$C8vDV8xU. ϫ: 8E=3k7OԦCfWSs&`x%P*7C^[2Bao-IHLcK^=⫟3l J#K^<??n4C R=m|}=Ψ9O)P*%VE^Eֵ9UɺZh}6'W ` )N}VdM͢ ֝7}ƪa!heRVmv&}zcg.+|iɡYyxo)?D߹wW/PԸ7<; -lp6C\6YNʯo7eNCkz޽WFC_s;;oJIdEE rQdro9~EdSHzD>ّ(P%rsfb"+p~qG"cF7,_.5B\C$(>4D @ K-ͮK>zߘVN:<7qa}CmZߕ܀K7K2^*,q"n7%)<Fݞ6k4=Q?n$[O`hPb; h-F3ПPa#탻8sIf6sa |Ƣ;5֏0ߔ6PѧVQH ZUn졼}&f 6 SlSʭI.wFK /ߠr_伐~lV07C ee 6oelm3DY W2F7/Tك >d\at<} | ߨ&s!UU15gy?{䬰C @$._TUlEA۱ЦF~[q^}&.^sc$?5#aK2D,*HCf0UoNhZ.GK C?3*};<%r&[$_f if Q@d`4):Z>0x2PK=~y m7I0-$kAqB&B-sj,huoWS]{݇T! Ĵ6`M)}knda T٠&Np5s{wvj5hCfw$ͫ00rL</ |0| gq>b-pmO^&fY'F}5K':]= L7 e7I6Yƕԉuyx ptʼng_ʍ&KJc0 L"y49>~$nFIf4dhsn$.oݝX V">"lUAF}G,Iz 9\ \'j!a>E(E(|0$rU%-iA//~惫qa#Rtx\~ LgOZEc9nM#f 3cV ȴ]. &[.#<\}@}of](!q ۊm<W=/^/ "|o_ܩu15&`ۑo2jR\ee>$ײY~V#[K` GI9ʅGd(]$d;XX:9 F@1)G$U7mS}O;V9uo\e@"HI㛽A#ɁK=+!\Y`w˻> =|ev]f+tƫcIh{7\̓fS+h]m:`0sF=3I&f?7@u~Y0Hk Rusp&n 5XuEd U^gFfpJz٦wqQ>d"||D (=jvncc.g _JW.z)o/$ 28'MgqYlls^ Bpd XPaVFHEI%&ьGԄ8X5.7nZuҋM0]Vm(Cr "^: `&CmAN 8Lo)bpc[@ AڏRK 1<{Ƞe9v5EIk:͉t^Ӆawq8r)jDo_}4'H]H gR!x Du2%V,U) ɧy$$GI UFWRm-ʮ+ OׄRtODjpȚq%~k/yx$zD>e{;jk"FUcVE\P\u&G>Y"gGfZd_ tZ &׀i^Rܠ!UVxT,~lr$$PG~dYrϧGKQ>:j8-K݇xT0{NE !pFueQBkֻL` zxu3$!{3:Tk7|0`b}-r-5]msbBuO$GY9hkДzkmUf.}#|GVaدPOnm-37y §d+biBj@Cْo7-2h ٓ+.s9ēi6D+C,a)˞|ܛ>! s }⃇*Ό]}GDe+K ͠Ha ENj @.ZweXKfnp+>cMo /p\]'8 e VWn~lxTX)_{Rhs/>򓱐F.̒jE#ײ-a Y,B aމ09x~j^=k .Y(pF2k'4T. b3eƄcÍ& #Xg<}LB - rD1OR?;-g~D1wޱ.l3nyNOV/drX=Vަ#X^F@׾w"?qEϳWM^I(=b72%)~E9)냶b:<+Ctl/X5KGFD~ۛJW0aSpA,NjV7jxUͧk&NKú)h"?ԝX)w]=Thrw/\i4{7\jV(9 ns  M}NJ{@`PO0fϕ)8Ɍiʥ H*ᮟ{Qs 0M) 'n7)|&-mmٽ_~"t N1C k9nX"/-aZjĜz_ko>Q%}qPWw5jRө+-̈́k6'H^jb^E.C6sA`d^}t@a'ƠS<0$xq;H=r(|3ø NP%t$8 ^.盗9 d9דP< uܨsNÁu[&~ wI9dm|x3Q`˰p LGpR]7g-3/ϡ7"+X{Ai;й2Tb(8b(sNzav1#-4-k-˪ÏmoY0}䳒735ǴTi4zUN,`6qaM[d'{If&HDs~FwuZ+)6 _wvÝ8_SAtFz ^i (eq@*˟6dV׾\:hL򣓌nmkR~ 1dv!%S7i#ҀR ]Y,m?U("TL=pݖh06d-΅~0öQ bZK; _Pa>ok6N\Zvkz?W^ًD/~fΝ$ȡZ;-fli3YU"T2D9CfE 5.oU zO ? G79?&rި3$E=Qoo(ae\R4IZ[PG,HG/d¥'z=l"/w:*Y` NjJWä=\k#sQ?UL6:+}Ġ:?qm}#gw}fv\7܇ԃ̈́MO DnVHJI|O+:/6'Xc l X$;یg qOdiͱꦗgpz߄a4YK*0OP⎳8;x<|Gŭpi&$%ѓ7҄\me]jg^§՛,fo4`Σpng%7mAϳK,mfoY0E7t|v.dw+s'e)v||3{?CEpfmHcAjeâOH6[o ~o{j1u{5kU: baP7Qj|\P(?tf0/xI#K|U1OD޷86}io 1~NUJYm7wm:Qt6q̉VxJܐ٥<vS81`50nX<Kz.@<˚ 9ɐe23o^k%C[CiA!8y =%j_NK!;'ݤUH:*n0z@1߯@h @2[4ڞ]8ߛǃO+7嘟H ؜ܙc۽ۤ|Z0Էֱ?UNJ 7% i4TToRb}tY:rˁ9y¦J~$"zF@=ZH.Qη_;M@sh xct(+1eoXsVe)[Vqޗ\R4ߊIYdy:V?x2XэJDf@ZKWr43o{n𹟏]P'#\yˁm2ZZ??FO#.)㧁AJtsȭ1k0ѲaskZ x<ե }-r.ŰE#D 5LFpGB ^?[Crx]=rd8^aq0R^K -I3.ɁlƓ$j:D<Kx"xqʜoGe XZ!W5:;$=A+^H  YsJrmZD8ܦB˧etf "شxZ[m`j=z|GK89(Ǩt$OiZ{凿8'|s{WeA%O0dKt''1qu{;a朗""*j_.*Q7MlNP*56 PKh<(v)Xu1A1ca,%F!V{# 諙-O._ylhu$KKOK&6T3M ;IU^mc@$xy__ _$am"!Ċ@ZRb9i0-]# `"{ ت 1Q>>xa|BCSfGw#Ĥ-/:SOӓ8)[M~2lޯq)doЏ:n=G DVMj>Ctp?5?06VOoІFRV@mhmAmzK嫣(aSҤ:ub ð諴`xap@x!ǐ2m`LN:֥=E {_1[tZ 0B@VWx^ώ'UUA3 ʯ=^9#ь>0Nusqo6 waLcZ>?ߩbxG߫}{Y]ؒv(^Ó.$[r|CWksZ7q5ኾ1_m )/Wh/c'*+Ԡ;j3N8 h ~}n4K}j!1Ư$ Uȭ ()Q w]AѬC DqR/n6HyIqӠ@ҰU𑈩v!OZ~ʬ\˲9DNG(EMdΤ گ8hVV0S\e^Ǽ5XϜ_2.{npm|$[atYC}w񽺒'NkC^Md>CV[Q^+д1P,JOF.{,K1Qk֙EZ}D[v`1d $8D {ᔩ+t7yVκ"D䞶!3ZkLն픚HM ĻI~~Iǹ}B2 [ɒ%G׵tgغZm&`.frԿ.uh")h嵮j)(`jO!HHm"p$ҿ[2MUߌ90t2j *JW54~Tn;8WqH#1V+ƕj_D}6D_b&(T K33kV{oeS'~K8w|kv!/c}`>LB*ȡph ЁSUo3>㤜W3rQqUs;,uuCz;䮤"JqqQ#Og%p yH3c|r컐dD0_@閚mp|Qr2ƕbN1|t_"*Sŧ֡g)=tƌO6\z @1'q3um.ёȈ.mojYaQ4)F=/6@(ud#A$@8=22 VeiRt̵dfq퍒fz[^Ȏ^<K쌈IJ?/Ԝ\%rD2Qihl54e0X ^,#\MBz"("hظ"|؃uVj<5-Rog_{02")!O[ ~|[? QùC (Q ֣ $PoO9b1qwrZee y37 ~1M7d n`gIS\āo:4Hݪ"J V(QT BQbFgwTlr;%"(IoLdd*Wd W#A)q,r\^M%Bu·ՒutoZ)dMk1)JE/ t7k\8lZq~4 ME_]̈́z-IcVn݈Ĵ.H淿e؝Y;l.5`*Ȗw MzZ?k m̛[ت@-:1kݢtE4xiJ5!lmqA=*Jۙۓ n&qrUM3_/awVjU@OvV=(>MKl^S"욓 PD4݄ h7֛z0PQw"%g$K^qg?zH {:X 1tk9СFT /Ggd%^C$t`awe`XyqLԢ2:U)d BtŃ*Hᏽ~0 eZ.ӕkTۂPp+J'j$`QHr{? :kſ;C L-jTj$B5ҐSD[3Zh޴hGFۜCx1g;L~x2e;m[ 1Oֱz&A 5#]mp.x%UWdw{1=]Wy*" gmF* >"A7(ìvcykLP5tiP_vAx>?[lxia~ύ0Ì:sO {Sg%C7kCe9[jě;Tƌ4jz{O)qP0A༔o#iky  ʯlh_JA[E7B< Aɜu/7EvUHM QV4$z^|:_9]<0/~8e`-&/=Rl {Ѱ(Iy RP:+<\&P8'(+m:v"@aPnQn1$bEUؾa2i ^M~Y}ۥ3Zg->W:84}2a2APU }/`sE;i b6tƵO!9nMOjYs UB:i3hM{7YK_3ˊ#gs v+Jy :$âgybE/M `߃qW]B-HE%^-('*2t3h&}1C:4YܘE,Iu;U!R'?d!Č)*Lr #Xj(i zd4$@4 H$!$N;ªV{CedzgG6=<Բ !OջaZYM0n'S6fTRR>d>CMb\!O']y!nInh\YEbxxʽi_nM o{k޾Z`9ۄa Թ [>t5ϝMEcD g0P FbX 5UQԑRV"=KGx|{Au+@vV mY0CvQC!"|h:I6H_`nkJ' c({3MZiƉyϝ)h Y'+!f 9WrhlXfY?OFLeyf* 8k^ߴ<9sNeH(sJKMPa@~XjòmB玥WJ%1vg9{n$<bة1)ItOLLj{~dxA>Y1nrMuMY|x(xYoK{DWϖe^`;*U*%һ؝'!COԟJ`kxx~Qn1v*+NM(Yc,ˌv@Er#j{59ZqY:[1m>1/- .;SnWxm.BB6a7[~kq魔*g,L( uS\Jnq".zWI;m.U&30Gw޽P=Dbk\WTut+y?΢lP;O$x?wju •ˢnk7Ut8Q #E.f +ǀ׃Oc3G4iABfr'GܷL 5pST'S3"y"s5(a>;r:d k-8Z~2oԜA {6('s<%WgS@1w,,1d lVmό؀\ء/1R4oE]5R'Ga&rѴ(a#l[m+mq &D:l j;@ f0.YBOn&(; ;_O1Y5V۝ڷF"_0YDg!Uaׇ#т9ibz6 rcY.5e6)׉[sN{t?*8WFmLDl^pْ>6ӹTL|H'Y>(OM4w4M\Mh$'&'?C|YM?^ms NOǚOxX l!(Udl ` ;:e#HC%.B*+d=bԴp Pjb)С};[NDŇ<(I!^ V;A,' LQߠ %o=ZM Gn\4ܡ~TTtAZ LY|1U~:2eHsgo3̡`gQ5d+C_+"H}~(߆⊅7cVF 0zvFK Ŝ[ dP:;?^sҍR|vܦ yLMSeLNc{u*r(e_K ׬Gm$ePG#LwW?|  -ǡyګ%5}t| RZ"qyElyP?ʨte哈pv\exOrZ,D3B/"/=dV^%J@ ;WJHw{"):&΢?7 ?prR?x#rc?[嶔}6VTcIgmχQ)?KѶDBo ek˰% &la=<]Q:ks=ƔH0qW88\ag#C]zfjzԝS$# )3/ .7sD3,!TRva6Gv]IG$ګ*xo&zz*;5jDn@[6jFOFqvٍ/la6{dpȭ}u!NMª O5wwfgTtnr+odCBW,,ъ!H5\Fҕ#`N?PM{7|Lf?cFbs y8vp4#i $\) k7+*F"=jJs͂r"Wzs(16 )1Σ 3Ө*}͊"s埴D k"Auw bݵTsLQ>dΕﺯt5S] U-@&RA{_dۥHЧms`nk4zo${if@0]h5MO淶DqE~e)[Sx~ ^%ҠYՓ=f>+@D;Z͡aΈ9%FXh`YQl)OoNG% ޳wI iXXcЌb lm<0 F ht[g9§j<;&CdB3|q"E{څ_' >nWnlx\/(;4ҁp[=YN^*MN`cqn[K!RX$ma~HtSty"f'v[-o[bu:"Ӝ8XP(kFגnE6opْ6{LlPRz5Vk[A^,~>d0|0܊C̝2_Lm=̶1/(b`fX d;;SEa&(H A)Hp8}6ۡ1>2Vd3i{Zzz z|#_H8[hxiAVثBsɻoLan\+2>*VP-ǕZ``zYڏFї#efbra5ZF@k05#L=+`ƎTKnE6J$}kH6Gza |~65 FAk_֯.€u^%ogy1wL#)vh%j^CyI PiMֈ0#wE|hbGY|:dﱟo1бmn<գ'qkU)aʕwK! W3{ G~zkzd~l`2j7wz!aVB}Mc83wGL+@=C:ӯ˱̲R8h"D5 SPQl"ds:3g4fJSCPk^Q˷LN,9@ĚcvfGc³v7+ N7㱬#}Sl~5PfܯtfڡyM=`]ֽϵ;K-~i+GDiyt,Ye܃ձ9]gπhOOC涏I1uσ3 N֜zDw,w  hf% HeN*R⣦DSiբz{ns y$˲U^ry =gծ L/ϭCniW(i Mp*iAL{~PH$*֘]ѾTYvİŠKy?3f>|`SfveCS#GteJ~ءX:Th[NB| # ƤZDwV8"u-U߉l_)꒺>Y!Cp ;eɘ[dɲX7k =NJِ/8jF&xknsPIn:]Olt b!\n!mx߄cM{RjBF1ف靶o"~Uj%}525Ie7ܐ qhfH+b<>Q'R_Mu6茘w: o88dJ6n84HAmIu;} {~5IzIa3%C&=4K+dJ~[1[XAݼQ|k%NKVܯ[c@>3լ>d ,Gj!bu o>wqr#M{AJ~: ˙1$k u?OUvy/V8w}iAUNb/FSi'w)߉M ΞrE8м/$ $Ɓi p[EqWLBM{u,hu%0BK/,TMtJl/)mU:kyju>J&2K roj:T8*~c 9VPaiq&*507F!D{=:,zWWC;r=@mK[̌@3U,vr:eXA4#? 9eX9ZXP VqdߙhβA#~ax'bBzcYf2q_ f?^:K,hlliDGLϣO8J姮wfeR\1h“g`BxzNZ]*ry7oYBZ_72eqwr<0A6kSE<(ҟ@kapc?S#N(x·1cD kRQua3=JYȸJ2~"><} R M;G.B)("D/tTўRT|^Pz\ѷ~2mw"Ҁ"*wZzl"T(Yj;U[WbHRkTv\6Fx^6AӰnd^9˩jm} ML{WLö0f2QxKn'A鎯O|itr]BB 6us>u0w+]fh.r}`0 b Ms7xv'&3ڮh Gw{l !B0W+CE +U@Pv*u խ"v% !yo̿@$qT(#*6}<䄟D_[d_-^|dq^ ge!qZFa#^Nt9e 1 4hAiTC D MpK.6"?\YO\TDt٫};Lz+c&X[X4pNӛ%l&kPMO Dq:p%u7CMLUmd5eAG&"ESٌgQ K?bIG2:?OPoa1!m[5I<:PG=ܽtڗ`bg[i |ʱ9#f3` iZ궘MiPq 'K%.4X LYC>0)2.or;c55Gۑ.t}Z8݌+1rSΝ##Y,~B9% $vՂ2wt? Xn#w:\ƭ\gKּb&n7Mv! QɆrPU Ru\c }4:b}!wl\)`Η;hwM /95y!WmsW}&F&H!Jʲ"}1m鱣0&$*>ў(cGD!=RucaHUJķ+pm&" $<l˺|Ī)7D#{ ʃk*HQ/˟DžsvyD} =aF#D'XW >ws͌.+HV+duRlpO\mC^ocdo.NjT2$Ȓv+i H b P[C9 魲8 nw'Dزu3ȿ6'U{˹O9͑+KrJ?QnFli`\Kk\4yE&vmaPLm6x[en'd- vSxrp*ǣn>)%Ƹi滝C7DLjOf b% 1l \d $zP&e<{]ŗO=u/!|o_067gEF­oَds`[x!{~vxp"6-skQkL~L]]ͤ`֦^\}SO|cmE ]Ke/: E)٦F!HGJIK5/aq 9Z|0t PlKmx?oc$`i_!> on K?alhha-ʼ԰Z|zWHkJWh1f%@xDŦ.ɜ|5 G4k%V i% |*3ا(+ՁQvR+-AypJ4pS7t5-2-~-AXb,(])Yo䇉Y  yys[!zLΤmm^CwtrXe6|xuǘL~Aϕu Ӥ.DD{7}6E>U#'bȡj ٚW)i ȉ9F(8$͎M(V>2 zQ,Ƽ%=Xݔ(@ʞ4'jzvWZܯ='74nC('OguD ]LlJzY|3Ex{RL(Q\[&=G?֢Nu4L(:I&ݦDN~ E~&cߡgw U췛R@qfAzGn( %@%Knq $*"HBK Ԥi#Gۻ h)m*ę:vYIi_(Uo;+e`]xp]->k$0 ぀ J3"̪RvcGW"׶/c: j@ÕFf"D?"ZVbN˸_5suq"bElP|K8}*~/͡(+dTB`dz64)fs'dAպ!{/r ]**@R|BtXQ՜WO]`rH cSowЋ : ]sM/*?fVMoxO|r@H]߇@:2Կ hdCC%3 ;+~GIfUCiZ?KN~G .eP`>="x+۱(cӋM> .f#K K,7ZmK!M1{!ٙv}D#m2$AS@$ZgKi(Pqxei3ѵ_XO4"^)=KjeOi/L cQl蘴wsX2osa+7'jC۝Ol~1%$Kѩ$[x:Bi?a5 - ;&7BjڤG(A[u$*?v#`>O].yX,Mӓd`L{tWDgQמAsGvw0{ƨ9'1,ײ;IuM={A`rP[2? m@^*dCVEE;= }BdttfL^AmI^Z ޕ1w3/#.mɥSDiƿnp~Xa_X9[[0Bz.={fXU&ރ/>)a&^=iIҰ|a'dEn 4+*?# ~*,/)N[)Z&T2ɉCl"9V6V8i▋%pW2Tju&H X2Og |fP8-~2TKR&*fKT^TV(bPV:!/I2GvCpT"} 3apXowP9N\u80C=q30bDhV[7G|>Y,ٙ;ǃ+unU`KA&&Ƌ\XPAh#8 dz|!?21ku>sCca2H,N -rqR9\.,a6ЫG$yĈJI ,b>Z63H#.Tq[Q OQ6?m s&-7uћInMPO'j-IGøLIL!׍&́#g/KcϦ<Ň@3]<@^747v5Pѥ'-<4%{G7I_YIJ~KY疊Q+SG9ƟsE8 v_b9=v*rElSp NI\Q7Kk.V;u+j}+_E!J2^A!*Q/ALC{}BZP@F,%"愣`^#ۡ/P@ܜVښ[iLlT^`fOȾnKϙlٟވ-9r*SZ+2@Uċǐ)Qr$-܃̥7_ 5z^Rޚq?T! *[zAWEgP{DA"*e$,?\Bμ5|nY^fN;naX:ڷCj,b1iw.+U?<|$ !+"~{l#z|W©w'[t!\0~UT ݹA,iU*Ә' zI1gMz蒚Nho^,b:A΋).E]q{4mߥH40 F8N=KtNd ha\ v0] h2󝝄r_~OnƤPy)zR N6Y4 D), eM󎚆^}0qP[ZN"q{9ډB=ҍ 4[l s(o,~Ck)'V aM] @{xzi $,ᄊ+2HIH[SnyCRɿ,l ;ofͼcGQ50™;'?1>jvp{LHR#^`OD3ˇI9qYHW2Oaܲg!Ho6/X}[r~.\\s ֑do}'3$̝q>D%nթBU<6[e0.NjR2TD lBfgfEg#1OAf;Q37YK]9y XTu^nbP`PBj܋oWJ;\cj fx\}Au8tHl^YkATJ5cj,&O2g-i) M.}p23nBzܪΔM_h]ܖ!g)g^܊!n,6 ʅ}EwyGϽbQK%Hʡ$ؑb,ǟ^ DMR?K on0^UҌ>73Rr}៯2ZwgQ-u=':1Rۆa^8|e : =kXF1QNeT?o͇ Q:#OOT]f-/ ]+sLŖN|uΨ1E-YV8jƊP-nalc̣k'T;=n S⟋&b.ncqz"d3J/ӽ> b-|,G]8?Od|t,tu|U8HjM΁oX'H: ?`trïSޤPe/V/QtH1B6gJ̫\E;Cຆytt6g*Y'ìSA%ʕ3ct]MFv6mӓJf gw곴N#vdM\C?ex"IkVy>ޝJӻ.b<kZrw" %HG+ gl~Or=Ggvb G4#  ،2U@qJD`QHJ C6a$5#ւVޮ|Jsڤ׵rw!kMMi:jӗwߟiΑVJf1*u$Lfk" *ݛ{N숧xc̡&HL'׸\zA\\ }w1#> T FCdqͻ;C%kMar }|lE -9aW6}fuXWOJN ejyyeЈV"E"^s#8^H:|bd2kP,>!6@}Z>-9 !yUѤnUªf/r[*#?k)IȘ)246M'>t)PNcڰ\F"򊨤7p{ U["uv|A} f-+2-4OV5׍nnapիhJvt TnclY&A;6/);_fmxg ώ+R<:032πRU(7&󞅻5b"ǥk `mZǟPuz!?o}+ 蚤ւ7w<U}Ny[B> yTmRT3 TNϽx\p[ )`kt^Ilc2/t.~T*lSU@i{H*էĜQ[ue{J}eʆ^Lt#ѝ(qSb"|bX/HS6 PNk @ΓK|TQL @@ź7^8O0jtmcUW`^BH9霹GDV: K|U"'wSIr6m_1ȕ~uu2]1aS[j(R8BgvfG<2|~^7 ˋK.ܑl|ewsP!*ՒRu FT3$vU1;ܴv'5 9- Ԛ3Z\rZDžx(mk[rR<+6vtp_+^ -4]aj̄y 6NA͢C: k?t&3f{I@ huRZec#q STmoe7g}ٳM:k#(:e66|}n^tjaoq4Q2 {m ՁVڽhy=_#32ʔQ .l&=!w&~vH˅ oDc!AWvYt1I6&^ݕvvI~|$bjlh|<6b.,f{+r_)>ALCZ{٤B:kyb dAGx-v6ioz hUZu {Q}Dq@C4e ,7eNA)rXfrY %yb!~W)Tt/hM C n(0!;&LvMR\cU]DeO\:0^&3R\T[bpgYV)*A=iw167`Vk=X_zl$T_zQYuZCC>&u@?N%r]cOIʵq\b zw%=5;Enɦ H b4IYǎM mGg|c*0G $Ê!K6ٞƕd*4"m̭P(fTw r-9uKʙۓLb>P {۴clw`}ɋL UBGqbÅ /v+NvzQdt(qܟK)LE 4_纽u+NgQyė֦jGT3&>-wx:]J!*&2C ״jW-g*o)l鏧:V)> ]lrA!A mQ°Ί.SukaVfh&5} 2!rp)|:x6Π =g3BC0Q27chj r, 4NztCwr*{f|bE"GleNUNa&pŌS-xHB~,o j/HVo0DHA/^~1EL_ڭR}o<]M^aa +}dHaTG+:FޒSuY(Ispo fErzS Gѽt5.HjŻ# JG|FbcjnW'aT&Wga%1x L%8h`^G[sIJ Vj5ZAH]JtQ.d0jLi@&b$E?9YP|Q$65$d73pW].3ߏ L0 !Q Qxi[G~hV2T4C%Ap"bYl!-A'AͼXb?FO]㺮Qvq:5Y;2I.¹l 13j;%pyTWcJ,| #A#<p| mc^ZO2l8 ݃LD,4> 9&],7:'IT|8y@b њ҄A3" ><XwV7 VEn솋xy ~k\+luH8J{h ʆG^3OƉ3~D+uzQ, ^AE|m7@@pg2DVF&LhqO`[tWaL_`K|6'DE˴ԀdcRhfyucln"#4{ n#FQkEv +=t@Jju]zZd3k(Ӣ\fp|LPh5?'AKM\K QQØ۸8t KF\Ia7IVg 8$QvqcC cF;t$^Oi NI2zrv H%`l,78e=|4#H!Mܥ9QZI-?FlGrk%c4>}oX@NN}_Wf%`$^ũ.P(qZQ_V8ͩfoxē /5 'V\,y-XHͺDiσ@Q2CR/ژ$P(¶X h &8ur8q#*4aR=lۄ0$O?*To~2m[0MvBaGjѺ~n̿kf+_B01 ;{o+ϭCAu iR dOdT -T^J%ĉDZwIS҄᳏kG6kl2^-ŇYu#_}(66)|ik5gY,sBl򙩦?J'\wkn=O;x ^5. :B+8buSF! w_N[T*PR+R \ x``:dž/iV?LL]湛SOR3qas6hᮑ@VF[ nWkiGfכDv;t'E3Gh& {*qkhhتSP)ŤĎubvMyf(]e% .bIaP*|̳#c#lE[]sO0 D:vuUkqXA3#ݧÀ`s7y2fieOp ,Ȓ^r =}tq`iuLA,]*A혏SFcEoz,0vqAwM/iL-$3;7Z׵Rqڰs]qfS<BsŨ71tC}2{ ^/JL!|hYwC/8"B`Hkf1{*{%aY}dS Z{T;O\1Sz\x FH>"OY:=.ԦBQX+DjUo;z ,VR|ko5/%*Fe^f3ﹲw%,k/Fd'tb趸V "T|B c3'4u!zqE]b &ć+70ɊDR`&vRM`ޝ;ܐSaK w(@s&$NӀLex`93xq ϓO{`AE:A@q[aI@}" {Daf=\M||~-_xLz_ @LR,w",Ҩ=;&žXPp5#QCn cX[ :e9M >6o J: dR)OEM!Q[\W83VGCCo(PS2? w.-"K;UA0&݇g2fU1ڥu?+iXAzH͐GHNfG6[ G]Ke冮2\0g@Zې΅ ߋȭ225o ~h?WԬZuwhmY(Ü^Ln |W-z>%׵4iijfr a#4=}V9y:Lbw3aȃr4'_N+:ူ8B ~ɝ:NP[hu]ՃD,0 nE4][yT*Q#2鲆$k SsGՇ^3ޛ Zr߅jS礊' wncCd(2,XGٌ KOI6qu 5{n@pSP ˰z2 Z-hXy6<5N6Pc{jĉe"r{vlj8l'B. _ IfS՗yC}"G 0I&xpҜy {]bˈPuݍe* HsoSmV V4Ktl;pv-koMB{ʅ4S C# CJ6BSJyDj a^%GF@j'0ݒU11Qxq*eY&<l}rE v!0Em uKo ..(QԞ-jH]'XwT1SxQ,"e{%p|3|&AE&#c&R.9YQ[TLvCǿJږaaxlh䭾w`V w+R9DłТ0Z3?e֟Z0CR_ El :BFH-[.gg9̨ݧIs 9P&,,\Y>×@L![X8E{=8Fd D4[=`eucV\lQ:uo.Yӆڧz5kqV|om;JMZ=R浗q,}uMaC,Q\-9vjq7%ٶFQ끞tJw^Gxd)#dl5<3B@DUCА|Nb!*//A~Z-5 ;ULgqjLJ(=2V`6x;]N]>.(A~%ĚklUS>GN34O4C~VUxG)umx("^+ z>LA# jw=ŞIDZ<===+{!4-hPg48$+†۟A;i%>OfP,kC ֵnJ,ah6ӽ,RO#Z%C3@U:Gnv0 G&SW78D:59ÁRIr-58wf [p /)KI~ƺXGmfd@K&K$X܇3c'Tl|n{]*1pYN)@-{,zM=7GdLz{Tf>9[Fer\jZKˋQM;̰>a`3jv{uݖ?Ad)ex8y21诏S#GseI cIե<\d7ij5f%,Uob@ǀ W֣MMꭋxbvi) 17&b(Y]87GD] a2l$hJP·ѕĔ(ܲZD 9oMzng#f[$u)F~ܻКt)U|/.5yxu=ՈM͍ "}|o9SoV\\F 1s'.5`v 3b9k.|M@Q43lC!F%z:'i}e2]`|M#Cu(RPlHb/ LaӆW T4oNL:P36e;mK)hċ\&&2v.r/٦Lmf,7 @FYW;^<}ijf-Xw<}|민`4> Hꯅ"=Xg'xFJC!)mjrRXO L0I$llm]eKšm- hy|r/e ~-? 9(? z P8j}7K=3?VMKC+Τgpn-sڹ~Mn B-j./0Ndtb Auz}weɁ/Fn,<7R!O'Hs# `pNh`+.|(ͥMKhdNS. ջm)yڤ;NR$,nf/<<̮QD~y{;\hv~TTrF~fv`b:`* P06Y qL{^'t'ox||k?tH$NBzRdOUj1\@bYv͋  )$}IEիkiǕAhlowak3[nm`w:,PZn 6NgXCHK ik¹ngXm MyY!T| <Zt-1D95ذtҗ@Fib0+WׅT]o@Z8if3z.SlQĸXOd?b6FwIS~R.?Z͟ڀG_80=589ig?5lAA(akR문*/M.K3]Vղ r="M }ed}z ۭ{ iHjքL'OΊUW ki "yKjwk셸-+{g9$l^MK/0!6fObcRWt1V|= "dܑ=:x9ɘJn_^Ui(I+H 6We9ƈBՀu-i)=E;>ƙEPgptpms+0_F2į?U>3λ!%Ħ8K*G T7ME92eġ NrݑlgFcz@,##NoԫRlK`k !%dkz ħ4W^Ǭ\k+uxj{M6ܕ+3lDgd/}' qJ.﹕e"F?kbЀ6Uj$ȿȮk Tpj çӬ%#0rq"RUG=pM$%Lz}zgՇM46*s n@Ikfh@{ݫ/<1.$U:N}9VH˔-ߛ:KE*.⭢lPJd(,~֑-ٗ7%VlJ< gdm#3ne,)ߝɕ5s-3u~Uhʑ[0x6؁:Efr“W`=H9V ,̱X{#!9V9,{ؠ"G0.PM_]#H,d@b'ʑ?].nMg.\ [x6nlnyrޑ@0[rlIl6K΃RJdiD9e&ԟ6gwrESQop]GjNM6bKa&&CC[Cj;cjݛh3q8{K4m8{yJ ـM_j2Jvӽ*ފ|4t< g l 7enz΋Ea@lwwfrӎ+ ٗ9ᗳˮ}P1ʾ;p:D:確z{QrL|,kX2q[>{8CYJqf;9Qd`ko F)K{*@|'TO#L^0\~EOhGku(&(x$K#ѦΫE0Rc4 ؋Jyz5`{Zr.M wͰ~.Bn/HjTgA gOĠ>#q(PųXL'*rfۿ9^ń uwu܇XՕ 1D"G1Ge"=w3N0ڶUR g#'l* djv$:V1 5*W D4&lZ{4o+\9H !33]FZZ!2=N1\5=.޸MOܧqҤ*xQbpݽLS?3D}z07n_2V鑲 cԌQ|L̈́\tAB4BеyUT'xN.rQvQV"(imJJ7s\4&=be%dFM#jlF4<~ϹxBE+7Z2}6X@y% r]'J2'U*/~?dgqC E5J:;2 sc͞ёa)եrx7L?Qd#w?I>KR-ʩ H?,TQR;j_݊Okpl%JR"̂l1y]jiyWZK q4Ak9x[m-ʰ=7qŽI$p'!̰cOtûhxoV]"&^IM>cYSHϽd'Bߠ^&ĘG&ŷecc,Z[ Ppr{ŧUĤ?̟#]Zߌ70˱o]%v0oX!*x\g1V( \+|Od'h28!j yLfizgpb-F'y%uF"|Ds҈!Ez@p<+4l3xzqa,Ȩ-]kh#k iڲ;mﵪ{zfG\0 ^X'<1 Z7(dEn^6?*=t\ad ڭ4/H,QN*!/GJZzG4_:0m YIP56Uk:$Nze,*gM92`u@^u16:2 i)  y¥p'l=w@9!cB억5&Nf|g^~}b;./!O-hAE=O4$&PR/2"w /nU7M=1#^4G/*xF2W,6mAhů[7֝vE2O*Ѵ94>hX#_N2RB&/ 5IT]v@klk ڬu,6'*76X0#6SL;SnǨ V xv߂ .w{o",I/L H+;!#Tnm 9É,HHe"cXDֿB!Ilv#Bt4*.IN<ȕWl Bqk ~mU԰Pc-N!G0{q9w\bMǯ}怤׉BB ^>F>eswoh߯t! оO8'ܮjx[W4\Ҥ{[wˍVQƣڕt!&ʹ0rξJPmf a{=j/ql͎BhkjoDd*0 E޿ltr!hv4/t8-m[c^$Lt+ܻ~!4d,=Cޮ@ V~``;+_ʄ% YVC o/k~ƔOi j VukxÅ-EȲKHu/wpJ=ט՚jEU|I|Ǵ̋^V,_v6S/??<x.?jG)g(-z Pb@/ew1jځJa'&WLL>@1 HBV-M_6^z;t*4WScuN(KK̈́!S'.&iH$La4Z]Q>\#>s1e 3_r(] k{FQoMv8>Yj Aybx#fpN"et:oI|!sb,Ro >=fׇwݞ S$bKPb1f]?7=܁K4ĸ;AO"$L=B8_n⧠^M0# Pǎ{C'b` <%85~`VVA#!2:bgm9H2!HbՙeKdeGtz3Yx sÛYS;{j 6d+Zkhmہ׎Qv n)a!6 t'zBb_+"4Uğn lR@zhQs /[zy&`Jg856r3B:KP1慻 x(c`3bAQL+\̶t3=[Nh1 %Żo[䑰9p"v,Sop pe}ufO=3l:,Ȭt*T!c|߻))WD &sFA4/+уH\:"XU)'FZhpV@ L]\sN  WwI+SI%% PuC:#ok{rrWT³+&-u%Oqt芡)(K?dՍ3s._p#2h'R]ӐS5YApyR8sAMig7TdվL(bKˆMФKy] J'?c&X?xuBh/2.ƢֈDfQ}tM4R='hWd{2ɍ^FtjAKNsƹBJP rKFo<䋰= }Y Ŭ|O9b].nMPPqWj,C{arˑ_mхKcWAqL^tmU xl^~ _;~?QY\]3Ds(P*6:G#g,ػ-\\w7k37:.jE1k/$˿2ňF(`*Cr.>VTiJhEfW|*b>= KXL@澙z,*nݺ LPv-I.``؆Xg+ C/U3Dbmc`Xw`()"_ZYL8G=|v;7U`>$|E[Gq0_Eξo0I8/@(ʬwhCN(j^ k.Wj6y` Dɍ&v\*i !0K–CyO^%A+O) >[V/^3߅6b/%Vϐ8_yoi+{"ܯ}[^3';r z)5R( `BxֹHN389 -6`rkY î|}KaXMvpJmߝqp&* vo!>8঻Yj@r҆TMߓ@P:Osg$g0Z2? ~")*,Nb^T86ܠ#-wQ |272jc%fÌށl`I9r+'DACŷ)B}Zb,յ-/0͙%Շ`G?;#q׸<[?e+4NcZS!j ̐J^,yd AG6bΰq<0/N}iȍi)m t ܷmR9J`ړS+jFhDp/y ?I 1ʗ/(sth2i,ׂ@S-g >bb 㐊>sH^RMogO[ 4DU=>0u OÄF%ԖM}^WP{Z06F6fk|BB\Ÿ_B#ҏC֩t `'mfZa,=QBicu>GKlpezu>[ZA!{DDI"k'rD[ۓuա*wpna [,\Qn? =uuZfk ֩&CaYʩ?*#}_*kZq54.8֔규$l_cN̚Dn%}f;Ujfd+osMrۨkd͋V r !Yp!гACwYjl(*x!MMkA=ѻ`7!33 }Ao"QBxtiaA6 Ĺ~W8DX[M~~c+7HfhUn%&,Ӯ>ƨ{W[ WQB GGE=y{Y3} 0DvaBi2%tcQ҂|:mFۭE6ToGtv" Hx*š;_Qdzlt1*H7#ʯ's$s('ňPtڢ5XuoRYRT›V $-$|N ,ؘmHMrZo}{LElLJGŻPDx)[TF,t{88! e5SV(!vcZړw(E(Fcg@59\/y"?9m:=FN3 h蔆E-0b=Jq#u*M rl2po+gk;`dJATcVgHJr) ~ ݿ6b!xSݖdX>#AƨXDn*W*`<ɻI`K5ADK6/80i6q#nZ % Ȇjg< a]0XV]98G8rЈXĐ^G0497᦮]:`g5KX@hهfGɟѩFqrX8 ~\]n8CI$KF7 "fJOV{m!k/A/%o+Wԑ2_Pn)um zL%iwwhv;Ub<ˋͷՙmUU,E ["M~p&_"tjsMM!FngE֚}1G1L5_K{7K(p=VtC4/T5yk[7N8  ApsUh|OD$F9sz>TegKGa KNRXhb8_l/:Jj66IL8ョӴ=iI@f0{ᰩ9 EɩDREծ'&E4zZdbmȓ?R@g|7|^It{k5$XxOu26wzƄ<ȃ-B;<9 MA%+)Jht# OV@N# KJ4bԣG$[FW&ZC4A%6|X`4kԽ9 j.4|ukE2iO/>Q|q@iGDxj!Y !{m9v37$.r_Qo yh=c93/ijT%_j@ ZƜjh, " 5|/ڬ*K0Kob:k{}Z=!44MUΘ_fܝBʌR.؉rVK$X1:M >+yUgGBNx!؍tG@RwU#٦YU\QTTw d;p6~%ύ9 G:J@!\܁D!"uNԄYOsG]C'ãKo򯉹^z@(Bo>aIJN^瓳ۄ6ʾ@K<-"Z3U69C~d™J;mNyŅ nF} F-\P7fo6œ?v¿HVV{]zZr8SRJ:&:1+5JB~9HQ}&{C *ؓ $RޑU?'p*BE: V͎ɧiwD)WSgf7 :q . w7(O̟ؕrhZ8դ\X=E_TR#\ fhPaJRki0cB\v;Gg!թ7 ^ؼl^c.,@aŜ7nFP\e _y'552AQ AVfrڨP2͗ó\"ټu Hou/zjPu"jC]V4 Zl3x͆ (1! 'A2*M읭_*{*80чCu GZYN ΆNƠBIk4IJ4v 8ιs6ؕLX\sZo6Hxbcǟ^kp0"asТ#!^ 8;{U-em[g׼h */9$zd\t8azWJ _ÅP*gotF7 ga7:UueCz-1k N~0W} J,ݙq# x~);loL܀b^)Aa ym,N$2Ƃ9@ h `xYyWagC*u2RJQN!$wΰ}9@derTf?Թ钿uY| ,'>>ن㿱ZnǒɶaAL  ?@:!=V Ԛ_s_)Ŷ4_G5ZʦMZ;l`IgXd:t1t{(r0Q ڧ9zҹ ֧ M b+y{w 7ٺ!}lۧ]EBLXg?M2A]6⥹sD`׉YG/7u;X>BJen= %HkC";ݣo6/寒Tr&\A49FKQlXدn@Wct&+wD%['q+? 1?^8<,ԸJn[Of:ɓzvFXX3lb<NhgڳЅ#ycc [Bq>f̌wiW ,4SCtxvH3(]o8`_b=KHP6ݝ.g4aM%q̾.60[WΥu=\jI)cpFW ()HH.sDո,+M83fMsQo$3t蜃ᷓpj-UY>r傃E>Uh?.xG9z>h(*,bw]#$R5:[R} Gt&A&!Nvz_sm<Ѝ܁.DMgX~#sjSUruW4RZㆦcmAC텸yd'vKF?j8FaĕZ=F`=٫O%ல2+YmٱDQ(HCR !I%6 нPž$3VSadqt!?A|M½6-!Aw"6¢ DEm͞i;|ۚ({XZ m4` ٧<ُGs3[Y4RH563'[cNkZ`/#= s l{r5jIf), QDKkmdsd.G@ᑂH4K;Z/מr{BMP Xb*Id'pXeS"kJSdfmDQ 2^] eWpFrF X~î3,0`v3:j9A:tz`Bw9|%{&3 9w~zn< !+Ț_sm7jXHvͭaw;K$a VU 4]2jԵ_DV:NXT ?+ ti8=_|ad=RQ )fb$9i<(V#$Om.iH;a =TRS0P:Un]͠D#K7GJR0 @>X U)\;I }j3s j&!0 ]3LX5@CNuȝN:1VgHyGn~/{+>&,(*WPp͢\;A: 5Oqw`}8%)My sЄE\qhT]m?_]X5 Jgsؕ/H}4'.RTB'tHtv+ȗAsCk&iGc2=G|#D8>, NGau<ˇ"!w'DF%1zoe zYʰv b -#F5!Ύz0v~53EX$UuM*S9|]&9@[gF N9UWv2Er8$1j {"{*LL?~ܭZ[a#3򇯵~zDYRK6}?bňB;y0SIԢ7lK$/'j=IѤ {zf g0A1gAM+ Ip{7JEgXzKb7,ShL;P+K)-Չg6*:.t|E*b##2tQ bsd[e`NAj,5|~sgV8BFH&ÞkL+I٘MJ0W厘-.bFiU4440>}9 )SDMe"˱bty,! v`v y^o+UA,rnƭ!ݺ%DWECLl5:8*Nkt =Jwԣ)= J](s.ü ^1~DCp|0% H53A ALM rBXg;0A{/Lf0"0fv G]UXC9N -70f;C!k Jܦe8#Sk2+T`9K3E l 8DcJBKUEt9yJIޥ MuǫX:^ihDL~˷mDցޙ"B9`dVF J%ۧIymOxP-cW1m$M3A՚Y7̶Em{`@^jͣ$WV)SQLԁY$yM>t{,+q7+(Kps:ZF^GqĜ dĐvAHHIQo[Ps|3S@ksg:*W?fRECB4%LA {֭7 (X97AJF'3Re&RKK48=CI13#M;3® ;)wHv*)q% mvc )ΈlxSʍͺü e ׶o[[|F8&`1 AFA"Dj7Xs1ZK kF9Ul1&%^XQUtx;m)@ܺgS ߴ$ndAݳ$ȑv[Zp㗄>l64<655?ʑ̏Q†'pMIg0}-$@MjS$Ghw%ߝ9MTqiF:_Ax9Ȼ8baQS(NLo7 ]xh;he)(XQ۩Fxn$It,凟O#1׶ ݂"bЯY>`8Y絮6.<+ Pbqw,>CKk2ֻa/'p$v\˲omfX<^o. AWԪ{?vS?4Գ[3{ %ZN%T&e@f4ŰC. eo7x*0]'urkm4BUUQ@SWq(҃\ Dᄚ_Q(-ArH zIM湷6sO*zж7 ӌ^/ .%M} &,Z__=v h * O/{8ֈ xZk,sVtKo.nu85YL]ُ5GlX~tdeݗGA)# A5+fi1xo.>k:D\#<_\cO_Kctm@Dl(6k BG'a=Xʲ[@3 :XɁ-n"}^Y&E4 MurmeʜPuc@1nVP~r so4y/Xf 8@8o]G4?\qoŞۺ6y nvjSP~WÕj,h!(02ym pY/ CrT7Epm%xؚU#Hr}~}H B*-]iSJdD%nAF`5:؎3y Th?Gf:<0=o kj7>PˊRwnF~F>RQ\މ-ra|](=cvE6 ?q;,}x涑Xc^ؓzSe/d\t6' Vgۘ'c<^"اQ[h J+~NNI9(a헃2g%uyR𰚖׮73RF Ë 0%?b&]H~0pY%+R0 ]8_ML@uU ;5v0[k0@YOF#J19lD 9מOC<1m-N!mljuxYKtHɏUYsWsQ,}5U*2eHJȿT7$'Vg,Q۝ˢKF{sY?C RMvG3}ʣ?&M?v_5 }Z9l/b׽cMIkh5oʹ|,}#zvVLTp&u?>ءG@m$bsڅi+*R Y5&/OISYvE~5MㄑGW.ffw$QF"^/3|;ކ-]*Q76:S"זȵm-wPsxb'H'k؀ٙVp[":-;{8``8=EUУde;=WMSSS9JF>:$ Oh`7un@| w>0WRdzG0m"I:OQԑ~Uu $Hֆ$$po峣`Ƙx:21rUș{o #ΈAjSe˙o71f!X$r>u/kr`7DkDJ-K rܵcOo3(}llo83D$ReA唏w B]Iߖōr28]*fo0~hⰞA!+I9=1ԆAVoLYL8Ob 7v3ґ;֍>`kz+l3}HhJirӓYOWͣY:8”u&}S˵N [=#9;X7b9%V693y/D(liNu7() =j[ ,-;ɫzkZ6-DOJVed܁FgX*Aq_[3LUɧ5vcj ۗit݄zހ{I)>Ş,4dWQ-!3yíd1 S>Xs!ĸт]xr’ AA"e=iM #v:Y^媢މEs 3ܴf7–jӎBVޯ\EByRnP~A5\0LRgp-Z z؜Q[YLe,T25^N ,f̊q% W'=7cs="@BMut|(ҧ (gLte,z lXY@km\Qx2.ꚻ^{2Pd[xsilt$@#`o?3rP q#3TIɠKm+N:]haxZ;JQU<-v5;Os,$ :<34-O`CvoJZ=%ȾWo 滽6=^)q" NkUѰx,G'$X((氒9`:#Ua/U=Byz'IA8p1U>UЯmLȕp _~g!Ǝ3F=y2*."`AKГ,a1)v$a2\66Bo"w\Yf0lP+РH>lH2%Q,AIp[ppv >\-zkoV4a^!ge|FK>oҳqAxoZqALk}_b4>(=0ʊ?O^:}B"q|EfL雏u}X |G/#L[?BMkaj{LqX jmr~#8/;?AYpھ 1Ьe }S泙0< /1@^e#Kj'i-Vxu`y$uir jѨJğK '[ :ɵWAaꠗP@3QF jb]k(LCKbOo=8  D/|'Qτ,kn̲v1JzȆDcl=$QpZKU6g@%?v6@Zj*1H_hyGLFLڗ%x^X;;\=gK;kS`yZ,4mz~7PjErzV ,_2qOw*FNES%2nohji'g]2,_~ n"r mW#WOVAOmˇnW.m9L?p.ǒ4>8?8"qcb창1(6sO- #Ӈ ld{q+1xQh|yYM%'-o%2P#بimA93ofM,aQb꠨u†FF kX፯8QriLݎ{aLA $p 쯕e Ai/_ģ Cwq8q]hi#*i:)*V/ E"_d u*VL^MZ_wf{זBЮ7­~tlSVn {|qox/;UzDfܡpν2q> LڰPȑ߃ WrO#&f}ȥ@{t"Cq 0#2*^1XnjI`? I& kZI,/hC(D4j֍W3'{ TB{\X7[>IƿBk6:: z"zS]h3T`G!WweVnw2M.O˱|#RӺFisJ)}KlZgOCesew{/: LJ_x$ z\O3b[+ ,w;Z$N5_[ 3ˀ4E{]Ήhr@&pR8RbL}wݟ1X,a@1 ]VYbˡyG8`UO3]^ —/GT'=2 wv0aK߼̮VD+Qj?P6?8 5BwzKo3cOm6[)o/)9;L=i.í^28.G|:s*/q@\E’uUv_vOTij r !r\:6I:;+.į" 3&7i;fH}q0s]tQ,FZg^7sFd مNHRkV݆;G_7h5 \w& 箥0  nDܨCU:0N[BZ)FH9S5!`!lwwhcu5s+ pIy"͂+Tz?8%y{i M5Lu |a'jZ24XaN0B\N4jS4r9&μ8@l%;#즙<*`RALݶrJT /Kecdqe@{>^c:7.$ށXz2("yp$'>U׮Maǯ` vl,΁,dM p#-rY]:X a;dIOTMq 3[f[GLRw"L[[&o8_-\)@^Bb']hꞠ1<d#! F'bOyK*NHY8.'55(6nemڹlqm4}Z=WG!A72˕=74?%Ӧ8Y8HeŸ$R6c&i܉yͱ_@x;g*A%YS*QIYXTlRֱ?ڇeO3h.f^V] ĸW t!Lv )0[&f'`(JHvD)^x5B0$$(&oo+`WNuox.jԷѩ"BP] 2 b h}Hf>MN>?Vaԋj?~u^I3׺BM!Nn@<2}=tTy.WRUX)װm(=h-!es ""hot.5p١9FQFt"ywXwdz1bxV$[W62B6_Bt\}y : >Q3 Mu ba0C4p<%{(PTbPpڰXJ%uʙ2f]ȤL6Ms~O !TtɊy NKڹ y&4NQƟ$D$ z0wlEqjMJLeVa#HrAЫ]gXUv3#zNI^a|2.Y 5_ ad<*C:0W vÞj*'@"~AMOenNQ%X,тJφ_!5|rqlŀW,02J?O,(e6PB {`΍TN֕w+w 5%^ t[ڗ)$G2]]e=`8C4jY9 h!s7 W:_ET*vҀ(z"fB̯siS,frq3y?$[m!QO&ɴ`I+#%|W+jRQjLYxc }Q\i]jN 2p*q&ԃmpAe΅ 4? N#̗NِoFz7WU: e5bBM^)>]g="FQWS$7V {Zf#/9nH_&i-EPW-9}5FSz. 34h6ߑ+,Zy*}!D!٧{];R/Da&X}=7QhM+G${wV9K}m'nE.~0ETO/g0pk3;p `Òa -,K럅L4+"$&گEВIfEnd<~m%tCa ^V1a<Tc>]~!5/d"Q%v"sV DI+JQ- ˊ͍xԇb?lQ02^#:N EJbNhѪQ/Zq4[YlvϚޔgF) ̞ؗrJ2G_?z Tɴ6&=]l]E#umO o-# 5]u_U[ʰsV;‰mQ`N_!; PGnn Z鏇zF5KʿT+VeqK6qCiu!#uxUp Nmg;8ryPw rs={Pv)%Vk{"qg/t. 1j5{Fqqɇ`g`̮2e^yx^~Db]@H4r)  4K5^QjRD\k8~af-?QQ.ge!] єHykԊ-<:[.kXӗF8E-h׋iW pZ5.sbpW-՚c`'*]3hϺC𫯰޳12*`.)z0[kCGQ+N < BIȹ1ɹaI:AbX`3) SVsjBdrV-LX~ &Vt wo':ER~*|{sW Qۤ:zqC#vM|ZuW܃CDk+6:m,A̿Iftd):poY[B?ٛqäYFlDC/7U'*eH*+Bv5pqWoe}'VS!seY-Kl .`S!O 3/E0ӱl*Ͻ! 8nf8B$!,+b+wё^uO ƍݞ‚؞~Z^~45~:qmB Қ75̀MMV@PgBO,/]wC?ꁷ[9&lP;-l<:9LV[ ֫E!/I8=EeG6s8peHVml<ðl΄ch}lӗ 2ϯDiBzq{ *Jm[l|eOQOIn}Z8-y;LtQIG:g6p۾P[i=fCjc(Szȩڿ3' Oi02-2Wє&lj s<3XT]:+de[W2=J ؘr&]-;dWH't&ʼn3hgٶ M)tIN^2e_1 !ĄCSaBw{K}10Y4JҥANz:H'T M[yA Jc8pIcp+q$}uĒRJ[>hx k=a9VLXvԨQ2sB܉$~K$ijY&}vAyqYfeitCjVSOϟ1osmDe:aX4t b,5+Z6|aBZsbؾ^Oj=2U.SgT hĺBB`Nj,v|"kb+;n%a~ږ N=waGV iQ$U^^D[1v51J$H012SHۈQI0Yv2v !BJ]^!{3< ba_Z:9Y: .l 6ov`(ʦl!z}Q8:a@u~_ܼMՃtx Bx)׮* 9ҞRo?$ :}!rթ0rZ1Ċ2HUrP;8c8+qZbmBR,Xry{BSz@/UW|\,Ze` aADtDh$ֳ^+圂W⶞T2*e)B5(M_=L,ƢCKhr}pp9"e K8HI)5cU3C"#845g8a~މ$64jt?==h?#=pV|όWq-^~:CG-2 #D>wZ*5ڷ'[Q[Q~AaS[q.(DRF0Ę"A262`y!\/>931gjgԷ-GevGC_EȥO*ȯ deH~h&?OI he-p+?,Vаp. zya(g˛^7diھQ #/sr\ෆ;8K,2F<+f:TgoqUN1 ;i\MYKW}wRoc08K!|hs*OxV3{-Y^W *v)}{O1L"pGH%-p^ ^$vhN]+R0d~%9~S>ۈr6WY"G5;u ֤IK5 0}pM{Ff*A'*!X_.jD!I*KH՞!ipQdBO+pplڦGw?'Oh0Y5sD2o7숐uܾfNpJ-u DkUyL N, ʣOamdB/lNUC=M9bا`(WEAB+@V*u2F*&p5#t(5k&pzD@(71;p3u9ņAGuΤED!6S\&Er/f!88`&qW{P3BS,i{28JWT_2LL=QkICJ=QN^&[# %!$@Zg +VPDcN'Va\\]Qe{-5&J)ϛ3j1T >PXƩIXQ Mb]93hUk/`,zw:\{~vUgCNVaA\ے-bqIvaA#lj/]#EV%PpO!S@TL͑)<|4CB`Dt|A;࡬%v,ʝkBcg5"ʢ2BȀY嶽 E$Gl84Y|G=h >f {ldҘlM}0=W:ׯ4_s5:J!/{Grڑp]?k(t'SK3y62o?[  sWƱ;jMTˁnW U4cBMbnQkM(DUb|֗ ?d$ &˷Bއ̸ d0c̨&^Q\H[oF#m߰!EVdM,1H%JSQ,pvꥒjԯ)*CϟP*J{&? Zg2|/K^?;|SiL nan&5k.&.K 5a +,3"?$e၂@V>52[Y|J^l%#>:q̨[N/91hJpD QZ%[c&0Dh@ #M?6??6 &x9?rE Z r(GPR"ܟg]]b1]Rj/LIs0pkł\iROqv3I)ڕD6Յ2tj:B9'f~AA! I -E8>KxtU@6#Yϒ+-T9l{ͫ[4G{Tn}X eRөE`cF%y;?@&%kDBu}V-LFii{V}?`+d$EҪw;nl>mxgŹ؁Bq:}h̸` ё Mjd9Ĕ~K^_HkS7JfLTXNQw{3!Ax Cx"؜ׯ}[ߩQ,ynd\Iw Y -PWAjT(+7W~rq<g2Cr舼VZ'A01.6~ ҩ!ߨs$wJ<@8;&SӂAvn1G pfC2;߱佑XOah?7PA:eӆECO*M-KG}[.0@0\knĸGÁ \Mr4$1 Dլi=s➃bvx>4VUl.5LlkmV|6m.n) < ۊ(SetLBܽDc|;O}ֆܪgc0x6?oT+!+j҂^0G'0d2qʫ~]>6KI4q9FBc(jqh\SBsqSjsfOaH@bfys;88!PjB6Ѿ Us$//&FphHaq6̅[$w2Zk݁4Ϳ\A ~HMFŴkRIhH˻3m<'n6#V;\raT2o-=dRl޾0N4)(m]) M󃿺iwEotIp.ypu` Ĕdv~_m/o9Z IwT]S9R[CyZhck."O lq]1$7FښxYkݤS9(@tXبL5w6mmÓ-CtE mBBx@LNLo.hSٞ;bRW/lԂٔ%>I=WW|0Ll9n;e`VJ Q_?ik~[>QusT+dT=AV`eZ,:㳼(I~WҞqh<w*㘴8^G' Pm͝22'{5z$F07ZbYv4*'>*o<;Γ6&|NK^#}Jhv+?3c2-rфLGATZbZbu뛬><~0I"8oO)MIa2 Ka4ü}Wx_ N"̨*ygGz2 au.J0 s5CTq7Xb!/Gf\.z4mE,H NC+oKLLN_yQ_\O&\A![W;2hZ;.2!xo1։Xհ{ 7^%z2WnDRVb3RTYݛCJiCv$XuCol Qey_Բ,E<ۨsj6/3C@`>Cޔ'y* mD[Ĭ x+7PV* #xe}XgEUzuTA(mU)N^#~a^@ ͆m787ϮQhjISaIu/G"8w,';jCXt|l.mh3Ww^l\ܦk8I[RypGqרJ ;ֈ@st"?<#ϗtl'j`hỏ0Y?I/FM$3X-сqf, V Z / jHۘS؞Ms@_kCg-Zёn8%#*1uEnWn.wes交ZhJ& [y%gD0-lD d(ֆ̲wWUٿ܇C&OqLl@VH)9_{ASW#b Ψ*缮xQ)H7G7mllKT94*w;boq#Na,I YNA(~[:J۷BWfsPUJVBCCqwf*ROTP?W:m#Iπ-5C2^U(Y|7JgYc>ݼ=lA%Dda}[~ p QcLҐ6p6]:0 g_'nqш's%`3.U8lQr$ZMLsR(̽9q ':l$TzSMJ,XIq؃_xwNϑ-[fSF/jս h1a8Š.q=~9w$BB^PSV6EVba^0ߝ͎qrQwa!]r 9 \`]^!~tj9UذfmDck`Ph+r/DiVQߓZ5QDzy4;>~t 쳂.>'Xst k\}Fclf@@q U_qd8wh'n,ǯ-8ԗc;;Suԑ xO5nKԏ#H(e D0LP9>'$&(Py1Bᗃq [zQf* J5ܑF?wܷTт pbX#D+Y3{y X@;{#p.;Pdv&T0G}d@NŨR4iņuus) de`NvVAee4y|V|]AC =)&Bn8DXEē/J/"CZSY5<9}yܜ[L鴹`miSm<Зg x(25|8`}13X=;ɖ\d'~JG, BzQ"Z V{; fw6gQ|EdEOk~;T'$kɒ r,C;OZ]DB\P^HUIʲc@SũA.{!iFEmk^]\P|D1]NkSu e/HўU$WQA[:["0- -!a qPEF^[Y*Xӻɪ{.\]ܮuR$ Oz/Qd>Ĕ̍5U4]l kh]~JdUr7O r`-^anCz@8ڬ'9u ."(mpwbȎ7Pb7ѯx'%:7-MC@bFƝnlNg ,}wA6IixlnZ)Y uΊLA[Azb-02\5rj`E/> ~$Uej 2:Շe<Ӵ _ wxg-ܓWq;Kh&\G_E+4vS٧"k~18M:B9f{-9y+P؁4a6P㠯J(G绬\ه 9kQo@8nA ߋK(6vJ5KA\pSfQLͺSLVD6^tv 9N;宊tsOzX$aA{-3尺N)/[U"VήO]d06>. \}S=Yȃ)zm61V̷H}Q}1w3i 0WE rXn ЌvVh0ZHwB|u6VRW2uLӱ<mcs7Y?'℣0|vzaFp[=e(ʣ8Dq ٨ҸcxZ4_,NE]^jG2GP .!w☽R4npbu,$.1nXm:W; |NE0/>Fז>?4;$ gJDu*Knf_T|1S?TXgЏjkLW$W'v-@uC<#D{y._.ѝ ?n&︼E!NScoU*%^G˘ztfʗFtǢqF,sCFn՟+RJF< Al@  5Ad$s̳94JL%KOJ@'{o>!K$P{gL3>~qn<Ɖu47ai]oeriKsDVNܥyus%$Zޔ's.83>)ifesD*A4#u $F+BAW2DUM>c:ٲq$Ə115j!syK&s doqŔMEeI1|NO }C ca٥R:a"!Ύ8Y3:˴顺b'rl{ƹf-H$/F"!OS ;>Pఋ+' s z]2Z?fAdhgC((DΩf3+lEC `g6fǝCZ$?(7ⶴ`gz\ݓ{VǞ1% 8<%SRdؠ!0@j0jxͭX$@8g: ?vF}I'e +<0?*Sg ¨ȴi%',wx͋ T|pebP@!mδ0'mUYd֥H ][8ܟ޹$&Aːux&'z~F\em9]%uuݮlDv:pi>1p|fD܇@6.'l,xt!4.%Uv5]WtlυύE!fb4xYXi((Y85M8e%A`mqyRZy.*?##(Ztp|<[8XC=٦$;1]HWa[X wڤLIH1=`4@Ven)*j7ª2PVS0|Ri(88Bl< q6Υ$^֣o.ew0Wܚ-.ә!(a!bl0jNatkH¹*|p@ň~3l*v5J>* `''$a:+(UH{^O@F+a}+"Z)TU+@l0W9 KK|11!*fxKBjzB l<(jzƣHg Lj=oJ+#mJaV6-E,ϑu;rl=4% Hbb;H\Th b%%[_:@/€b nc:%J8CRMV:^kzI{W",1 l*" X2M4HS0cλH2soR/Niy{rH`3pNu6iϋ,☋6 aSNG%wVBr! 07zkC83U^:ݟ?oxwW}IS6Xu;./֨F3se6/&assc=ZZ-S'[g52p[UmV>/bP GwYZD} Oi,Ofm3|\OOe$e/+&[JH~4k{؍[kUYVK R8\(>EP+ L;C e$w/ MilQ#piǺV+au0|h {,icg d|&:`wVWkv4/ 'PI^'fПS cԻ *P(=,lR@u& ^d?C 8_AO ,!ST{5XM܃qR泫CFRE)K6/&I [ wfD6K!/mqq)r.Mnm7>=H[5Y"; b3t(^h0lpdhQ},B'R^ qr _ui7B/rleU8olpOL>O'X Ņ5sz!PHVVs,wF(7LTd:uM3}p)lة0mqQc9=/tN8T}x؞JL\Oov(K>>k3NY%mWXlTZ`jN2UgfqzM0ߵ?xF*p Uwzn5c%Oqo/^gP0%KͿ9Xq|o.V W3a .b>C#PQ&F˼y.Y [(5Pf[R{G\M@?y)1`´Vc5XB>>f,(ͩN0vtiԦVqsw`텸G~f&kLM@|>:Vԕ7 E z9+ۧʋPy3 vIPKk=woW>Ʉ>W\. U'UK]wZV=rT󈺒Yeو>KP>GgDE6I^O$h9/jGiOZÁ ̃TyTy7[.>..MsFX(jy 4V*$1=dɉϳr `x&!kYR|#y K? k.zm\Kqw۪Xoa[{fcND}YHi^w%V-fyQWℚD/IQռU^xGՐ`7JrP;V$~}N`뇖\um٣]PH j(c@$*'8f#;7kkj ]%yM>e@8 auܞXq ,I~GwjPsz{}}tKP<٩u0ZpBE俚a_,EلF8s(,42aЧ`2~t_ O*\bM0Ǚ\^qreȂ M_S<]߻\ *}.o`Wabͅ~q)0.1yMQgقU?HǢŭ~58\j'Er_x OM|,)l{8)j6x@L='rXrE57}tlV=ӓS"2[كmK;cE0rE e(mͩa_Bߌ:zYG㗺#w`;99Px\#ffߋÀh;S Hjy|#Bz!Wdث=kLeUOy^H8x0s3btR[Xyzڃ^Xn]1Ůۧ*C'QީM oL__NtH! p>|%?V$I 2ԯ* uK Pf;3lj?4 V'Ε)|-m4@*ĩApl5g.Y̼Utz/N iݾKcJ AXΤޤ o+?q˗812O :?ƈLkgQ, =V#̠/z}F85Dld(Bb$+_ "u&(k$S'A+wp/Ey$| B} wԸBauVBq^ ,bώ.Mrx ]BTs?b4vh| y^eJ-UNo,Iօ$P4l;Xλ рqQ֯鼡{_JcK9FoIG2d/$$Dv{ ^_T7޹%4k]_,Il .ЮTۍqXߐt##5mVU?p5s25}AVr"ٜ'Y ~[i6`~{瘖^Q}<[WT U>CO_U#urZyAB:cBO~e jMš0wX| GV _4Ư8!R>?P{}sc g0~a#(Vt$m>Ӥ\;֧2at`A_wr$5T1ťRhɨ:ݎs oʘMSG?[CdS؄ܫ—Tvܛ2lDm{C݄3[TH0LrƢ] $DaH JJu%t axC&` 08"Mwl1- o*j(uzxeɈf*K>EB?Kfg1~3(2~tk"aGoCZǥy7$ *2uހpSzΣЦ} r@K)l)Tޚ7bE/ӅKTDִٕI8WKB: ;*׳s[1ׂV#bjĸm ,wx"Ͼ3`D['`EDx.ܲ't ^p<t8@Z(qmDɏ&쐮TA}+iDTS$ƍc(-<|x"ilCԦl:[[)U,,m4_ᗙ,>2,}z?h1y׳>3lRCtPd(3J2r`2zPMcnѽgG܉&)O0  uE7AC)Qgpo֝|F&&4zYX.+7a=^y o;&hZص3)s8м#@4q0fl '}AWlTP~̯osQCx0C$8aA-ǹhvl/U즸`T7rD@A 1D3ǡ*ѯA/xÑ'&G'D/л4;W/zd `u9%Jh3ݷNT1UiO4ݎ(zd6Kgc #:Y6F 3XmU }v{\sS}N<~iυX4ͨw2h!6vTpbA{i|$weޭ<~trgs${zĐʡ,(2]|0ySGz_aM:VV|Ҵo*P,_בNz*XunGl)# ,Y$=| m]ϒ|mڎŽ[ySCǸu^eM\^Gt3_UXaq #G+!+w[r@Bh''ӮF*SfY$Im/'Ve˲ j̩X"dk%ixVtܙfM;T.Lk6leَH:害-PJQ&SZS-scuٜB3i}3?XR`nɉOKנCvR<ѥyĄ@^$|Eo.|ܽf\E5T}s QT=6u@ hՎLe&{ml31'r31[䃓SNhE5}I.9MGJg/=yJA)ax;- )OpyX*nbjk쮓{Y,#N\jn@,/ml YT&+2D?߮ݼ>wA/=G2d4k^[uz]L)]@:Ns$:5NؾQt7ewWtZ`afvxjDѱvĠ8毒FY﷾Rh,X$e+[.> ^.ƺ!rbՍTZ<( -Kt9e@FPGF*%+7c5L@@ݕ3nwį$t؞fez0{d2->" g(_ڨ b6_D/`` B8Bwa5c)-_D쾿-#4trY ȑׅa: ӽ0TC ff1Y'9j>'J|c ba4$SPl8ġƪ;^ދO^CoKvq+r 07T-"u"}4I*^XdCoa.v؊1%pbTIN9f[JԡW TV0<~90J>O t3G0-`+[URH11hU >E*|_v&f`CaqmνOvx)lf/k,y7>ӳ^{t;7`sdtF[ e($zBEυV/Ъt.@Ǜ~`eB7p\2B+$3Ewt#-(8g{Q?YT VJ GRDBZhZ4s]퇳.7MnOmE00d7%8'^֌|͆iHJB 7SBT I_p`uߪ㜳7,1q$=ٜs2:~Lkmo !iԮL^˷r;G{b9_g D C36 >=VIL3F!rIMmjF-¯yUMPw/XޏeDDb"x[+D_21`T+:bBԪ|yNTQ_fVg&kQny8CTXzbF15ӤoCu12:jwwm2&:T6"%m>bR0jA͞Za⡔ԗRY/%yyZ]U<eS[E֮uCL1+mitr?D) S(g7-m?YoMzz3V腁B!._dJ3j^h)*uiӸ*ր B$'v2+7A"RWg:^*L.y.TO+lnNN~.,쉲qxZL~;ao#Z9h2k/bh4l@B& b?@]ވZR#=z5w%dyhDю7t퀮AףT5au jtx,/H ӈ>MQI]hԔ)ɿPeP-.Va|4c|'C8?kYM-!T'FCh;KNARP'CCpճa^D f%4ǤE˨(ֶס(BJ:Q_ /sgDMDc_U4_CߏAD -GR;KoCSMbά6.AhUxH7Ajr/̫oxP%uP1D T>5?k8x8%)= > z8g$̂\Fso$rʟ6AI)X'@ps~d'X|O+9s*!F9dB7rS::"dR;'*g敘uu]IW3H/vh/srem" Hbi@$_e .Lq3Uz:xP՟:ZO-ER')Xn,t D䞅;F>19Wu_J#)gJd=^`bL$8rXV lK9ZIE=;!~<|CD]_e1Hz^@*xox3e2C46dҌDr:Dy>5OYYg||E3H2 _H x9mXR/x.')Yۿ8Xd0؈EJG<f$}xe.J.O-GsEEj{0꫓Tv9\)?S2dRC}9o$d&q v*]]sPWuZ wO9|C8Oڎ8fq^5iztKJ̏SuJaj*@@e!ߪ0VQF$Q!k㰰;:-"Ug7QOjMenu40? *MrFBp6;TO")ujЁ,itc;Rk0zMi7߆Ze[Vt+ J8֙lC@|Bt:%.OylG32cLSMHCitfhT<Nͭ\ͭMva3n>sk1Y or r wτz|ˉ|uP*̬d1g=)/=nXbRI7~r֯uH`~Fp ')yuP(V"oB!F+ܡT\4 ;WkBT)Z:0E&x$Z2XFJ7llfvH_&Uܩuf>nNqz)HosśT%=:#ZY8SYǒJtS [zQpBMd3ݒ[%ac1eex6p%:x"B?gZ\ &YPkLm(@W? 10SGl?-ڞ@ޜt*7"V88bzZAv NKl [;| hِF3RNs4mNj0m"—C6tܕ+ ۅ[=z'kF)+=v4ގ[d@*.: ru8xFL@1x~O#,fk-&s&$GThu.a]s ZC t]rX>g+{%_x:?R(tDKفҘ{;|ht+wmr^~^tn"zJ Sj jPOD a;&,9Rgn#[rF/06ܱ:ʹ+ْV5τ]|UH7~e,FAwd*n18~ >ev('Wb_2;hLB0\slwhbΒ+iNKCL"vDڴ.Ja)mƹS:x}DV%UCkl4f*[@S87İϘ_AeT,ֽjW5.רJT$14}A;D Py VpoPn񩞤؅n2%AKw3K`Ě#:SLHu5nYah<ʉl.ۑ'}3(mASAㅖ tZO.}ԂsՅpʵNlI_|* nLwu!gQ|z<8i169HsOb۾ކ>^E b ͪ딳M"c8_U;zYR91y[m%v*P"pĪH4b]GoβYIѢ~Q&@Nqw[I ;ƐG&?ߥ@SF+GJIN)}DF*!D|qvec^@dڂ%A/}(2f[,e@[\*!O]_υVQ>3ov>SFq~swWEvvb⾃﷑=)P-|y6޳N:XLp)c#q ~#f:^AD+x sEuILAשU?F G1P %|Q>vچ 6~0 z8xA=y.3WgE1`V[XB k=HS.g^7kR }Zo0/4(WuqۥV4dH 'YK*6"ܥp@N=PJ`L5GfNO7J}7o) yJQY9 %-hBk@:F󛜍!w<+Q= eY =DQ8)NMEpS K/?tz7[?cYB1$F2xn dBvBh4Gpl;\{\_9&8<7Pt0>F-Voϡ]9wL|f~_ԏܫ3[1SW{ǐTcͼ[1q'j~5S Vʃ;{6\0O*c0yشMi^C}Ba(;~6-AAeH2RZ,/!UeװyCޞպ%InEf)jU4oD߈6wHp4䤒#㼁8Z4 ӗ~NrDѭ֣ cv3 Mhaf[LK{LcTv"J?^r\JQ=H;O):7J_'LC4ů lUzNf< O|#c,#h/B1--73I A,jA~+tg58@YayԴ8 2 94j 牎vDS4%8 ,L_4 qV`AO$|܏8ѧ$1ٚ,,V>'WH [R.1s ײG1y^XɌfI7ʺ d0TPEChtƭ| S31!xi;|hkoRLL8@XA*-h>f l=pG[W#c.+fapxAhJYBn5BXŜW H9Rmip&sSDك;;uv 6;!H@ 7ɞpoգ2\IeM&&No*-7ez|B)q[kčQ&3e5^bwUHUPGL ỸmDͺDބv q%ksi֚m[%SdibHRqo3܅v׵'pz4tǡ.aHArQ/F9Fw M/Nc *2ÇKsZs:-;g5ҥ\tm۔ .:0Xo6zV춈N߉+vSVa1F(j<1HcP#PBŵN6R oNT0DͶޡDkdVk!Jҷ+1aL0oL*z*EKpJ/ tɹSŁYۀ./jyK@ ($B֮'̄݌d|w1ӬRZ;iEVrb/ԛQ"$%w"b'ؽ? 5|Y󊂺ڿrw;qJG`0[Z6{vgv C@eU|7%H!,"kq)byS>"̺ "Sѫ>}Zz8j6ր^O3+!9s&|hp~}y)|_{&pvb}j\ XD[,tZxGۀ5]E=4c=5߆V;aXnC__3ҟ}k$Pw?pE8w92kK4"RROeC;B}Q>}[ND4Hޏ@ 7~z?+ ŭv>n/BYu1蘾ql=B[4Nפ4As6j&`Ssm#_X$<؇$Om|i_l@hzjqlpbWa(Ub&j2^[Sl҃1*.S&?U 9Tƍf+Ę{n<ʶ 4)YPr/{dxQa<9'O-Ve²DLYR6oB(ą(Vgau;17(BasV B\ iN$啋.PБUK ۤv9DݏmK@,T8"s ͖[APi}_/O4;gBL-BpLc4 o2{36rA P1jȋZULs- VQ-lpdN;1lOM9 J2UR #}Dv%׬'EլlܠV!TmّI6xv9n8朅Zs /z'eDI ;ʯ,ZHjV5֏EE A9^:5V#%@i%he6O 5fPϜ0T+2|[@zT3h*an] lp6tC~Zf(Cqm6cncwA A Zۜuy ͜ eIC~wK`  mU)jsui#R7|K틆b~Nf[\mBLL}u7Q5>ʒ9f diBiϘxԼ9_C,tY(јD#S|L9wsFqc!?0|s UYK79@%GQZdȭ g 2495@7(w:# ȴXO9苦Ӎgf^'smZ@m&ib8z&>( I(fp wߐ|R3Z)[}[kez1lp)v=6P}ѴgwCsSx?@ s`d9Õ3GkJw /_**ûZ[DŽK3NDCƙAD}wQ8Մ"k9BmvGשrodIOM+]Cb,C:֎)2Hg-NN˽+rs@ǫA|WIRχM s(ۙa"8sXxtvEd^!N:Zb؃xG=f釴Mʕp኎x¹F G=-ۆ\04wϻ'yZ;ˋ_a!P^KpP%]?dQsi\%%YM1Fvz \hzgxiȦՀ,&x ۩(+O,exXLyڏDMg4,c_5f!wn`:u o:3/#vߺl;PLx"JʪO 6dgwOsU^q3Uge/%cB*9y뻑/Xvb!]pG=_4 ;>}/j&;DpHl~ACL{*LXΚPb?W5ʃsI RUeS٢|J ;RY:~\5321١/<ϹnFxPTd*ebz&fV[dQ9/\̐xo۲42Qki= r)E)pͯ@R3r @@:"s βecP($ǍpJ.舼:aW#dJuӓ,uph!T֏k!]ƶ8ѸA0BA/K-1>Xﮣ .[ThOWLBS``LIr4 Vm4`=&8xoN^jXإ}jAUSCvH8m)ٓ$R(@ei`NdzHvxWWn<*C8}b4kwd"%慒4q;Ojq1h-Lh%z"պ3Mo\xljCݵ XWK6BEOֵt2j .n BJ}ڟRZ6BgY1& rBV]E1' ԩdVZ,i1YƵ0DN+=@4P!mxi7Mlrm%.ӟeñd1.tum4b> |oCS\[-2<ѷ4GKK;'gz7کEdK 8bR!w(^]cI\ii)DϮ=Tp؏}k P_8 nXVs;/Bɹ`GB|J#l !/b:Z$y))SOr>ydROsE+˂~(@S%%!uL.1ݗtyɖRgUAL\AMk !w vmx* `vr ϯ$~3ǖS]NZx{.gr",zsYSzHigƸuZ/4BMM+9\J&t}qNS62cBR!U,B\ѓ f3x=mV924W۟~cmR٥J}д>o,1/{&j~j{MJwTdHu#wF(-[MrצZWJQ׻f sBgrmSؤ.RJYWwpMDPl cEЌa,A8VFDSDž"qx~C1hoeJsgι|؛؀F$¯Is!}SF*IZִȺ%qӪNr0CsE 5w&IX[b:4?~wowƊ|j&%G-SQNJ+AOK$ܟhWj+cש0c8IVb5s1b>Z*oBk]Rfgt:߭?6љEwM Og1bz Ww] ;N!")^tFk%3tKu'©Mk B"V?k$P~W8VN`Z̨:jgi:"=pWhg6 ';eP|rV噓c,Uaz@`8b,Y3ao)Ư'GG)!0)h)tl rU1hD(#Y62$bL=<{oS"?i.?jd0o--=&;Ӣ!,4FQyᖡRĞlB_p[؈*RPmt-67O- >>gt&_4-Sj`8&P H4`aJk mOڜcH_|װیAr-}9/OQ'Έ~^ kyy mAEupaui.ge-*}9#@w'}޷u&ړIژȎEE;¾b]|AcՌV`P]6+=DHS _rE .E.0I[GS $T|'lBS)OAQ=(ϧ]d7{s-8E"h5󆤓 D6٢#ٔ Xik(XkgrlZ6t>ܰI]Lajd %Aq7TD7Sbi© hCc_{w`Zۦe$I$p)'I,~wWswGRo}B}rE?=[<>)W1K5?X57hʝbuγR|nK\tbsnL}R@,n4M loLh؃E;dCA GP4y*B,Q`q"ns:a-y'-[^ sJ|vտ^ލdws b y`OM, 0{tm eӿXykx%*`5ldWiMB[>r9WGJwzժ&8 jM#ƽѾ2؝`#L+iӲOU[Il!G.iRlPxp{9[湨%?m[!TnE'%'D폞?pٖnCb Ic֗ߕDa9C78wbn)W iQsB`J6ڜ-lXgcť2|E۴bh%4 .àWƶ."GO&xٽ#FH&㨴 CgA.lv# 1J t@*r(mb\*^p'F`lu2^|9b'oDٓ`+j,Tߗ`luXl]LCjd&~̕{lP{H $O?S:M Dz@(F pSno>Ī~*-^euelD}5AS#uߖOt̞mJh"5%z]md6>!ǿu74D%?~HC7[z4}:~GtJ޾ 9,d_BוWaNҐswUӪМ.#(asO%+H*柘lNtPWOE)):y7JatsRHy? <`yćMo|ݣ? ZxWFr%pxX9KWZ+!mZ$F6Y.ۛ9_w=fTRY>NhXnzF6w{bݤ隺,OiS$fŹq" ¼x@,p6`Ҳ[JtՀ &WE;katB@ԥr6z4h4"'ؤ-WWM.(?ahm 5=1F`} t O#^q$]ؒ9Ai2f5Ԕ)|o*uod08‰%he$D`Nˣ u-vr3 VtkE|„LH<"g|sB ]7;f3 $}:FΛwmV[m_ I464c)$dNЇ&)n堳[]ͪm;MB=q<`erfaAgL sݸCzGIQ_OZyE6 wwx?N.|eWCl 4u tƲ;;|32z}X==9]ɀu(ҥ*zMtE^!mP\)L~JȨrHJc:7CypWpo(8zΟTd F s ap`@%V^*WF YKIwuV_ Ubdf|ݾ {Rl. zp s23;XA{U ~ Q_\j;%/:ӋtvJ_p;օJu@WTjs/WaD!B\C1x{7\DW:je {/L+[S߻FuUc_GQҧ"*UwmVA+d0p4 ׄb* Bz('6-[Te=`2cⴋЮCH5zzu|Mo9$I4}TNO[Mض4 Dh~HN;tQ EU{p}a^-zoi}ݾޒ Oam7)'=sH2ڝ'/獙n2>sBYz;.'[Ej$( 8$]r<)?s ҏO#9ͣYY(j*q9$XsUaN7V{pX*!Ц);b,\~m.A#l,Γ@{ 疖f{Yy W`|r\,л;[~TfUU<[|;qz.YnRK\ 3쪛voWԼ2D@^{8iPQU~Zκְn># :eڨϲolt]u?R߷.g[(0OW' O6O&H5Jru".;Vø`8$vDPq{c( vԐ-'],\1 1P(VQ $X2Q6zBXдȀ- )F%vWUŋ+4&OC/(R4* %GnZx(aC%H!䒿zH%6^؈ % ښ&`WPGI4W,GS݌0X퀭++1Qgv+IW~3/3:h'\sE3ﰋVb㊟Ʊ!Fjʇ]`=՝}DD=~+U.qnk]O|