libsamba-errors0-4.9.5+git.187.71edee57d5a-lp151.2.6.1 4>$  Ap]xO/=„3a2=HCFҧ=F 蓽*o5vs1x+wD.0 ͱgXjG}k7WMD' =SOcԶjQ˝2Q?R7 anuSTf7qdeIۺxUHOlB_\E?7⪧$J|xƭNːQT3ڢ?f 9/9\|y*T; ?BYa25caa65e064a68da9fc2dd423cc24894c74c3d407d0fe78e19990ccec6029d734b4314e6fa3afd2d2b9d1af6c5d0e704aa60400]xO/=„ l(0w$I*J t_`0Z]o_˦S`I]JUGzzOxZhY)t+-U.#X= rɷ4z(Ok,?˧yy#_ܢ7ޥ(:nrg %ɒa42j>u+wWZAڎiBP X _ ހcdN^r /w,fOI &*4m=Ƭ G"{\>p@X?Xd- 9 W &,48 : < @  @ l x (89:>Un@U}FUGUHUIUXUYU\V ]V^V%bV1cVdWieWnfWqlWsuWvWwXxX yX$zX@XPXTXZXClibsamba-errors04.9.5+git.187.71edee57d5alp151.2.6.1Samba errors handling libraryThis subpackage contains libraries to handle and translate NT error codes.]xcloud122PopenSUSE Leap 15.1openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgSystem/Librarieshttps://www.samba.org/linuxx86_64P]xb6e2a0069c4e4e3f3421d800ecfe291c69893e76dbd1c1f8848b4aceb3569241rootrootsamba-4.9.5+git.187.71edee57d5a-lp151.2.6.1.src.rpmlibsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-errors0libsamba-errors0(x86-64)@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1]_@]J@]:\ڭ\\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USaJames McDonough npower npower David Disseldorp David Disseldorp npower David Disseldorp npower David Mulder David Mulder David Disseldorp Samuel Cabrero David Mulder ddiss@suse.comnopower@suse.comJan Engelhardt David Mulder Samuel Cabrero Samuel Cabrero Samuel Cabrero dmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comSamuel Cabrero dmulder@suse.comSamuel Cabrero dmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfigcloud122 15682073114.9.5+git.187.71edee57d5a-lp151.2.6.14.9.5+git.187.71edee57d5a-lp151.2.6.1libsamba-errors.so.1/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:11057/openSUSE_Leap_15.1_Update/7d5b3605a519e39b7d410acabc99983c-samba.openSUSE_Leap_15.1_Updatecpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=421f3a1e6c2b9f20a2f588e2868743f68de98b25, strippedPPRRRRRtMe#6(@XX["utf-8d430f82fd0d4777eafa1234f21911f4d6ddc49ecf1f0d5518904809bc523f883?7zXZ !t/!] crv9u+Ĕ4pĄ6%}UM奪Y"C؅rQL Xn$NKy2m,4۶2*2GsB3vy6rӹŏ"xZvGQl8T~Υ.Ud"r4* j0\;^}wՃHsl;i*5c%Th)y(k( wtpƎN)hI^qwK``#+wmOi`| 1 jvXO03)'םiO ^΀ :(DxVX$%Zv㙯,d ww`#`MZҡo=+F ܽT$E]ժ6i MiG^|-螫<}LyHM c/˥ ҥ@ZLZd6`3A(9eNy" / ž~k*wK (g?R+;Axn0 3ASDr Gt䌃RaV&_eNvy|CoD5t0n8hG:Zcˡf3"M o/ 0F˦Gsc? ov'(vQ[>mہM=9QҞL8՚lpJ(C,z-鏚!h0ڡwAu/{-2 t:CJ*+O%e;&|ϋu΅[vGQo5Sa"؂hZ񗧻*H@zEFOS9͝i 0T9D5/ęp\'d u9cHm$NN>񮹔?v lkXxRZOf%H5-MGbH5|Us\n\HYmW|~/F-$mK έ*O˃I̍|Jh,=%J&\AZcuSyаGmBQۧdkqL{><ǝ7CUY'pV:[2땲E83i2DT]TJ#tD ʝd}O&\&8|KcR4_??An% \WnQU ,HzL_qgNoٝT \uֵ(zQG!PLX㚴۪5ߒ>d54AiTC [xz ) ?/97m?[ \1C([ NQ= :&['Y$ސ|IjS}$ړQ8$D6L-H!Ԑ|şu(7hZMhvAttsHݔjG9Oݳ wd驼ic]!2R%b7t|ӿ Kwk2߰XȻQف"Lks~P)>ENxubDלۃO҅tPT@XLxFez;XܽlibNM;3H/mq^{g|ꈀ>- ^J<#Uw PTFxmaNNE,A\/uzwkPPEW*ii)Z[ʆHt dʑ/M'mnwvIp}}g$@q)pryXtQGkg֞B;"C|}FUYN~e5B"g)u,ܭRdw$槧̵#uhv5w4e~?h xW'^M/J: ʰ-2j~10}HC]Ш%}plx6OԬfK#Zlq췺-3D|za.e\.g18 {6jKg7hlp~M62Ji41ps=|RӞAb_Jykasi$)#FYD.7fj{W59 +, foe \1IgC(_H$p|w1Rm`.MU?kraqdd,|zꚔyLL1EHv&Ea= `£Cm\Q^%OSCe.@Q7nЦ㖡~.uҏM4d _E JV^ 8Qp{ Y5Rld'vebwģaAhlyR^Z1V1 l(߃j [w#y_wJNxB3QNS^Мao8ͥ{k AaikJ&gs(z2Ckӻ)nb"tO~nQ62DLG,|#pMrg/_$ QU$NyGRB$M}!$$/%]}xv 񯀗إՃ :cSn_' M+,k3(PsXS8fSt42Te< EǔjAډS`l'pv缟Wyߖ>&5rMh~^=xxSaA_i?N͟h|1Abb9pm8ʟI>sR": m]uRR&-m#b3XJ2lXۢs)aEZT=Rd_lUZr ?J80)-_ ye:R˩Y*`#OXkԒ.`w;k%=Ʒ=m)qpn N73gwӢu=Y׏{?RS6V"8p8•]DI-ӛ Җ9Nh#TJ&}ZF=j&[a; _N7A[R׋yy~̈́WW (ؐ@40ڲ$x|zzs}Ԑ dl]EY8bѥj~& Vj5ܰ%GR.A]Ξ!% Fi zڅla nZw㾎!;@3IՉ}>XR?8 L0;|Q<~CODEʫb:د6TT]J>GSUqb,Hp6> ;Z-=]lO1ʰ2}J a1֐wV.9>wwҌI u7c{|:U2ja&"l1N S܉ 1-hP 4m L Y _Y7W1.p3#Ыc')4lm"~D=pI -mgIS$ ). l"n1gRlYMy]6Ww|~ZBL&"$g$egPkR@pxa\`cСʲ=WÇI-ESڹw*c847b-?/_ۓ(bD$>W^m l`B}2^ <Υ&^o+5Ǚv X ˾9m:p{̶-\D Wy5p_*+ a΅9uأ+#uJ22&dG^RZ\Y5Ţ:S"pkxic_2oTyK: HwXf\: Ys fwOcT2©1>?W^n}F^#mR%,(1+mDe)qfpȡ+`qb$SM-o8y`` ,u^z׶G5G& {EΥyOLxs_U ftTk~;cRQ4X5Ykvx| WK&7&Anh/C#ZM &Fe KtߌNҸ*9s&獢q+k:-n<8YٍM e5bZK3酅#6Ss憜ɍIH#蜽Gzwy&Cbjd~\-s9XvKw_f^"3I FV>K^e> иz#U0 arĵ,FGs%ȋ[ΐĬ~bFnFc`;*fPU/x@PX }{h'|B8ЋS?kfGv8~TUQgf9b/KjԝdB̫AEb~**2şaI_Wzn#ӵj8/:㓄ĪAOqcty`f U/si1awǣoپj06Kjo kXZTq5؍v}Q g;V+ dVM(2܊ [5 4̯AΣ9Fm>3PY!LZIqFJcw2W &qZIi#9J|ISX0|QHeZ=9,Өu)WD7j~e#K4b~3F# e\^|ĘLl)e00eʮS&/eSu$C̐?^SbPS\s'>ڵ:d%c }irB8, =qz_mPLg\|2~F&utVO/#8KN}$}Up[w|tHB:++` c `Bw^Kvҥ (*e/4aIaadޣkuJa 1}woE $v$({z O GUu'=:dD>RKqFpht4- Fyo}r w{U J ICSZ)8Җf$Tbad@v6PY%6GuKd3ME:h 1o C 5觃Qxp&}4o"г%d5䦅6\;3a.+JlU{†9lRKVFߑJ*~_U{²yxJB ٳt L0-C7:B>? lyD:QMcB'XM/eҦ.g>5\#jm琻>]N Ut7%Fu*n /1t ;(/+!Ug ,#3wӈ@Cd|9ᠰ!xlǀjkGQ &I?E'\j`mRr)<CIoq-:i"]Gb*flF*M)0_^߽yr $Lkvd >é&n I/ZvG-+haM@x{Zi(6+dl^ye$d񞀫.Kc4&3`X6_ xEfpֳ,w7c/H P; 70aNQR9Iѧy ^>QʞW^7 .)f{ í5n̟ׯhǮpj5 HHw6r_>+q׹djv// <$IJpSE[>`]0jϵRbJ€(z|ʕZmƉ7բ%-DNp8kz}[z=@9|hQ@D2@3urA$^f:bPϮ,k1[kg^76O䴽'rx oW&QNWIڎΫ?qv'U fLj?AR޳zH:ŀ d,)2 [+N1<:J1;#:hCڎR-v+IM0`;:c8.QZVD3) ͑*yEMzt{I TG6-qejdsL!=`Xn2 wpfyBpNBm&ɥd,A=9gBV3o26ІtM1Rc!}4/V$)E,82;Tp=@l!cskАF΀1YX;|v 9XWKW7_+y֙t,Gʙ siɼ8J%ɡ4&xs*:cD7tHKA70*;6KL {ͿZoMPh[L`t`\7fE]QN9r㙹=۝%<(fº?J/P9EpM0i)LhB\1e?02"8`v/hH1u!u$+v`( &d9ws4ǧ=y6_|u%\]tTbQ*b!4$elL$ n*(/ȟ@ػSN (%gԎHIUFv<97f= i*@]-75Z/!R3P5l[?/Ck{!XcF]w!-9ܢ_ȩI֊ΞDGɩXҹ봥\Nh3+yjI'(EZ ܸC=kl**Wƥ*p,=IvM^Z5':_⺻?VPVP#ɿ.a潃;-7ҭ:iI% iJ]GT)ce <%o&1FR 9nn~@Ew2|8}Ƣ0 ,S$R}w,6).E:z'|!oAjD` 8Uo}A`.EPǏ#*/ޜ]-8` &ޕro|-MbtlCYB(ҕs?Ѯ|`G8ITN#ot&zέG{Zʦh&JLbl!t&rp'pr8JlcS@x~[u 4G'~qV(- 4tk Xy[['(9[_ޗEXL€#/[4QV'%>P*% 4 oYϬ15rDwG5ȆBǓSH*cqO3덢]dTCFo*;BArz?5+4Oj3 1p`Id~\"v,zc@uƊNS|0ٟ,라-qBA[R?=},-e,h4LZ3O͊km{} 锔 _mWė J!ʤ1}~,V 5Eˡ3 w{UC z!j$n8"V֫:VDY"X~&ҫ8핟]`*>zmcJ`?uJAP*pp 2+3a㨬|4-έȆaz,{N|ͩ.yYU4$5;,łՐTXN,3c!rx<\MU5rB)*3I9[G,(]=qh>[^͐^{2?h>} gNg0$TOo")ⰎT <)VK[πOhY|$hPM<.xwE ՔM%"t4e'f0% "Y E2e*h!&!7;ƗruB0аODx]>OuiI>_y<N!|: aTB5/N'in}60>,^;.SFȨ;?4 5)vA(?FBGhTO)nSf5#4~o0KF2՟_7QIQ=b"fbےICf#AK/K0Do#x2<Kv͛QkBbwux!s^tJPxu5* $1$IL@tvKCwO˕SY=!;*rl2b$%Kԩ~ dk 2DzpͳJ:{Җ=9{S19-k2f+_,(Q4~iʛFub 7'~೩&nEo>cbm<֑T:bK?6x`b--@Mϒ4Tuy>}7 9< 6h,8$V]VHL{%4$P "xfsb(_Bj1K:v7YI'3,Z{7W;-;8逨m k;+}H,+O$HHiDR>$amYF,p 3tKokGf(UkXaząb!'=.n&"h !PO@#!e ?ʘ[P@!뚺oF#G>{&Bcq@eM1@"(qȀxAGVI po뾒,$dde8K?V|p2l=z^~jSԚs8  .-{sjIra~wTi!M(mQC&aWs␿I$Ն甅E4/@S/_H(ldZ;@W_,[*ݾ 4Bj"+Y]$S>}SySa'2jԮWE{XU f9>2/Yvš$Tny|KTRb gĖo:"5ƵxVe&x=)$#+x#aT2A=%R" XLXp6WDk}9Yڽ\IJ}ў7إroj .VDsً􆱧pBD9I8 fo /NSdPZ&&iWY/L+*.=С}C߁ A}vo!iFqKM>A^"~вUfE*7s,ܣQP&ގm@QZt>6"0ɕz@DZ280 Ŋ'! 0a -tXQzS^h~k|i}-?c"Ϗ"j*?S1,?.\RvomY5η#* ߗ* tZULT2|9O\A AٙBV28T órV2=5s?rx88?gcT 3r{: Ƨ İl;΅.[Ma>N-~b<3l0cBXLQhD#N}Oөа0|(U0_dqf (0z ݟor2S^%9:-!Qç >*$ "[Ƽr3 R03$T5EںMeA$;c=yAD6`ѱz$npderFM&buYNSZ_)F{2V^|/mxU7A! 1Հ`3U{嬪 N!=(W Pn IE _*hnBY:"&9[)rij|Y^^B;.ۛ̕E"ҭWgGۡPY"nN@"ê| `y*X:[;1)8Y0Dn3wW{jYNؗ %Ihh nlC@v_Z r3=P(R jג'vDw{eKS!gEQ0#6pid8@ӈhtuxU: c^ͫI/ !O^6kEGGZ;7d V o.G5'+-h#\ĽqEa+UЙu? []ٴ-Z8{=8$]uǜHM|'4E"=3ӁXi!Rk٘fz也5&!q3i&;̦{8B%՞p*q *Q(b70~ui=9G%Թ*ʐ}4%UDqK|`؊{XOz36/̇#fS<=r[V~uejЏ d֢N8`Tއ(f{7=(>(BAF ,?1@^?Uc+-p}XW,8o)w/7bGl S&d @}b~c3.ΎV =MՕW/`\yw+7AJ­ﾍ`grF<0,r<УgWLJ%l> |$RiQ:/eϰMx Zx1 O#'1uDmK._$. 6,R*>NYӹQ,bߘa1UE0'c\v(eF b;}xm@PKa#5 RKb*탪8d[?p:H.Oju{CY0Ay*ߜ 9BcqI(>@I_ϲ+y=f9 gf[~^Tw{Nn0\:δavxFd h:F#^c;6:=AA`]3{-8RyċVP꼗_/Ćřa9  _8lD2bmF&@1]u #ړ*/DZ$NL'l]b-#\yDVO"w BQ>]Dm+ϾZC6+~HO (x-+x:'C:~@} Ƃ~QqÃKzNKGFc$*v-E *Ę@uOTLSQGZT穯)jsiz5/t`r(J~4z4 'I];HaǾ$ ޢOMP?gn =e{S\*…">RtFݚx*Zxv}FV4(BqWˆFR>\cvbø]DcT4dHq F% ~M5zVO38F1?aد N=/DJ-OHYcnZ/-K5Ѽ o+=kDK`#]qlU>謃Ko M\&Uֈ 4y9-^J'E'7-Bao&Dމ`*q:HPmY*3&mYz&rBbL`\CE..7]Q%el4 ;" {;B F hķ1>x f*T=!– u, FFi>Ts̀@tQѨLnlvD)`Hnv@O~2"vŋ:jJww_҃}I= <^ۋhw J_ت~:K@jp$(HKfeF{+럠Ε!Ϙ|Pd|`8bЇ#^@ر.dXQ:y5!]ЬZ]KD}{V7ѻ[S#a]buh#p(7aJv DHJ &H߷%s!ˇ#YGJZ0k<jJc'7=%ϼSP}\4@v6 tfK}ʷ7z\+\Rso c+09ɭ`r9 h2 ڲ9ZGs%]mao]qrxk%/$] rFC[J ?D|'A$,sϓE;J"Fߕ~'dE":Fٲ.n>D3b&<{؍㳆~'x߀2t,:KP)@wڤg~I=xQ }PP=9^e-}a )i[:- 2Us!=Hy.{rU@sѱ\)SL{}_>lCla03:n3V/t-\ I#ޥQn[p^l5aIq >E֖J1 jOnZS!t|$uZg_%vi8%/M \#R 'N h0s@J +1Kw:mFgV*f"?T\kw[ECn+xz*ȴ!wV}b"CT^J(nUvZ.sT;~B6ѯd(-D|`.G aXo#$@ť]|Xm%afp$O`Zǎ >CΆ#24UytoX³a'fd|v=;zT Dɶͺ_ -XCxa+g)42r _ xh(!u_5yaz;57hP9X{ST`i Z`?FMY~c}=\E*PM''K~eR$S%-+𗖤՜xH"ץ!vڎ3@^{c:0+Z~gLIY;ƒ\1\pPN*7."F(+Fi#QHL6pxLCS8v.CT5DZ=s:+"^#)M]tf.j<]e<8EVdDtr3sx:[ܑ7ЏiPg _p}]\" ;y;¼ri~~8۱ dQ׷%UĒ~oW5\frbO wF,0^x,$ijje)/}'a0e?j·pi ;:Ch'Uʲ|N'ښhF5圎n M}_#2! z:cīܽ tֱIYS ʾE-֮;Ic,uM6Hx$r.V |d5-^y6N Z= {`ꈏKa &w+J٬~]¼w$\3vWk^߼!w1{cEAc6]\RBUGvv2`ȈF((Z1q Alq;W~y\Hp泛]pꐽsE`v, ɼ)-(xE yiw XŜH4vtxr4tƌs[s5vg/ 1R{lԮiSz/&#DPū.<=T74oGN\Ehz6xFP $d0ܓ@1ӻvdkN6[Gmdd !RV;=iE e{٪pqʪ_&T$ȆRt=F*lhl.I1M\kt21Z6 'np I5+эnH&ʖ{"(H32Ueh?[D=TG\6ӀuW7VD9)au]g9"'2S3C"ch:Zb"rQ2 Y=]|߱~\*Z-qbFgAJ+dRxYM=g n`peY5оYFF/t#{$ioo4kTXrAfre.B̗". D_vW}8) ءޮ#oUrlmNڭ\Q;͔CQ̀@nj8Mm=SzJved7װhhA*" $! XHM4S"ȅ-p;m  cLH՚xS,$Y5J~`T+7M^'>.'4"oegl>sC$+&z4An)KBߜ6xxKJɊ[KQsȄ-Tɑx5 i ҂YF3//>|: ui ꠌP[bjgu!2J7>qUN(D0Ji-KWR S8uL(ch X[yи ֌vaz"g)'ЙkV`QBRҿ~Eh^dq#@3lWk]cާ_ XFMN;/n]`ª[/mR,aŘVg6*qRxi5&b3SE<;FnO W7FbvWۂߓ19fCE"jS[RKH>&3t˛~K$ʔ _.wNP'/4lqS$P/QK\s!:?{fPؓ{Q4YֱeNd־D֤豧ϝgS27Tn*CH*zP)AD& UZ{Ch#&DTƼ܇08kеvbdLP\'Ċ\5 JL/钓3wTc^HgX 3Y[ `zdt;Yz"NC(T:A%O/+ {pBhc.ʛcP]I SnϬq10YmÃ5*JfBbv$oE)s_ӻ~Q6|Uccv^ hBU箝ACv/øcn PU^O͔IkyzιY5iFH)LR[:ucl0bV_P:r?,sE`yVa_ 44U=X~Vo'>WK@ι/*2au@e<ςbVmj@^SCjpLhM7)CV}g U#vrI *;y\ +]P;Z)vV#^-TD ﶙi˟gD|gسYD*ם_HNj C:WMdQ7!j ~5b}3ú 8ݨ<7Q;F2} ԥS S?zJӶ]COˡ[ ir?)YIU;!;Ly|o͌^~{il:3l,Z"e'_5v=>t ֭\ܶ;yzQ ׀`"QT$gÉ]J x#J6"*lIdc~\-/I;ɧ) A6'5 O1;_T HY{L)ܮufsભ&fkd>ZpRb#k̃žha~&#䏢K}ļI髑 # ;b}$9GA ݣ k QO3Z[?"0Ӟfyb/L&JQ4TW|%an?c@P.‰Baиy:D1|JFɔٟ _>nBx,`lq9[&}q>3Pv -TN7n&,9KҢO曄 #tߨ.q,ftn~@u\k笅B-AJnzs/AcDD rxߥ*aT')okʥܤf/F3 ԆgyWiho*C0{o1 w'S'ZFCنGpjw6@٭1Lv LigHKV8T*NPt?0δ*| '&@-X>>Q0FP,W3)>]tq6*zF̓[~S{/qLvQmDe~y7-U#fJ GߐY>c'cmѣo=fa3 ־E(ZW}"^?ԧZl' L,id^rဴѿTH>+&^>}w7yFy$fK`5ȧ\A."8+ 0tHK૳;X[j86{ 1\W߂U]1 =eRɰ쵄=l,?WNVršj:oqbՃxfGm)}$UT7k6\_r7BTZ' YNJ A@V bQ^&@s{M HZATĐ|ݡF' p0V-u/3y\c Nt?4N 7>{ɵa\ԣA7ؼQru:AX ,3r $r]fߌml/w$e^N»X*y>F֪ %"B]6^hI: |З[Oz)6C`.nLC~cNа(p4R|!a34QrS{C_lFz%jbG|SU~<~m5r36g$D6:GQ(]ыv`} cḡ iPJW 둜ԄX@Rrj^q/7GlsigH]˾>jZHyרM>,m !WX?LsXҡ+<YsW=T:djnE?7& Wz5 C:ä׌w }1VW'F _6ǜ576-103scO$E>#gZHOX~KOj]9} JTCt'^"LS(<$f˥6Zb1M/d4*`Ě(-~(QJKU60PBָ }1O1Np+@ݥj#$>99=ܟoC`l_V|//؍_~8h?W/O\Jc"P*fyUl0Y)w,c'E`‡KM9|q=HUVQ$g2.%8=0Z(jjԷo5]9qްCLN=hnY _ LE'25]dfVμЍ;Ȟ 1Loxz8 b{U~V6FZeUK<s2ABnM3Un#eN' b<\&@F.##ЛN+jO2[i?ѡ0 wЖ^yqZkQ ?(caF+ }<Q`hvM} ޭyRs:dD 0˩t"Ϡ 0 Uc<Ϧ{$⍱ 9kg?F\baCo˥zŸg>5#Gx_?M{aU2,@W]W{FIRIXmWnAAh1UG_h\6)[,.Ͻg]FϲRH:97`G`[nUfժv{KF}A\pKقlL\Sk g?:mlۺh@t_Q␇qW =~n4+%xQ|꼄0m7S`m85 E((> bYL[w fqL47q dݒl_ ʉlыj2 6^v|Ց cTRSa r_q聃ڴWtQdm; q/i7e¡ 5 7 YZwӤ 2kF5N,\-@Q>ɜQHPfPY^Py͛ÏE9't>bo[]c6?xbvEdN84{thmXTj6/<>j;7>òuze1$ұ0; B׉kɛZ . 3SWE&pNBu.$_ѹQ3up/ֵm{qU^nm|7]}*iҼ% df}8Ď <Ɵc.](jekOJ"OS= >H~n<{v?&Pxݽr\/m847g 5XR!u p_HE[rB->-K}UT BA|6u/A˘7ʿuyD>'%4 h/(ILضW5Br ע/gӄ!+bJVp*Bیh. h $eMZe-W2d^%KP.+G_9VVjr@pG1rx8P_ /]6JwPްti: 5w@T/xlx"9mYhZx y B>՛)fz=v0tJi"WL6Kvj-|ּdl̶Y^SgrPLQ4urg%r)(خ0W$pUXzU q mżVDnz3 |ip oX* zS:r` r')k\YüZu`0 [H]K/u9p;q7\K916.m}R DE!XIuVIo&3n@sd>hGyg⊏!eK$~T DøE/gPm)i6Ff'JYUk}LsBi3Y`Iޠؾzys\BbSpuB%nN?4ڽ@+4lC%¾*;҄͝v)9~Έ?DYx,gVDeEڛ~,M:KJk4K;DkMsbC[LӢΩ2S +Nxs :@/T=R ^* |||r m]_'p?>m;]Tv܇ˆ4xZjnUGFAsђ˸ ^'Jn;I90U-r"'T@?p_S~vݜl3x0&}LSЈyvnX BrCrT|2): ''|ir&2Az-Y~EI850f}$j㮓G=]LF^]U- } T4i C]xN|fϗ~w=6)"82F \K$WBfֽl !,2P?wo*2އ.)Y=_2UY+.72m(cvp .@R} D@vx5 v*&d._W4w^VL axu.)a,8';u r%a pk:ȉ,~4蒀2uƩNҹhgO).Q{Z=Hkfn6?"N\OWG"=`.;|\ce?{{~{gPз>6E萟Fۻ>\NbFH-OD]oFAH|]ݠzquS)L)no@& tv{LbE@ψϟړtϱ/VOwU#tKa-lwlc*B$}I?:צX].3~<&DEQ6k4^ge=(z^?gHLoka~OA/.)bĭC LX%WWqǣKbX1I #fs R0mdO93Zt0*Ր&In bc. 8ÃڕH8)`FnvWY؛|nQêou3d_%|,FKIE R7[k:!VdǞqߪ\ܿx>F=]2 =dMf{f HC:}Ƀ~b[_&g]E/SHf؆9W"خ͠#-zy!!3߳ V:Dg#z|#_5ϩ$"ـ4t\=eI}ғ UXDT{EVRS.rvM =O%%Y9fcw;|N6W &jf|KaôcreӛAHO٘2%T\ ,Q;>VG%_[(;xO'˜T.uI{]TЧԞէ[8SN f='VP_w&E图PD  tc$'c+z&)E 4@Y/˦mN.[KS\ǛmCG0 m#40CRWn]xFk3hؾH\>c7tXyE%^ *?i'u0aı'v̋ T32&UdȚV:Okozg7pRy  +OÍzΉDeojהټ+N< X)=VhP=#kwU(1^ s_`O y *h^˘5t͵;w8n::jz\"1G̮|E藙NQi DEzw#YBjb"IJ(U=V!|EXuUJi NUķ!s%n- J `G ăF\ߟU,@\} k&Pf:YzKތõ@kW%o~HB';PІE+m^YRW0^ch W#^ke3dVUhG{_CFOTو6G`r1ols#ڏWn*<-rv>R&26(h}ȱ$]s5˗\τybu@-2jܩqgwζCljԉ:\~9]h֗}]\v$#b-̔ϟlK96q)!n3GWY/]sуxcD̢\aKV8vP_!OfeJpX&X4hG5Mc1EǓ_!QNm*+ʭ"Qic|Q'WlKH7ڱ{_UADxk͋3lƚ !QK649bm$3/O8 3I U~J*؋{]{^(>q#4=C> @Җ^]1 3[ [^kq1|2uwv3_U ]OumK̢s634YǺAk_a/40i.~a:d;zNt՟:qrJٲ`'!f,y`+7lj$7YhEe34k)]T@G8x z 9BʌV.^br28u}{6r¾Ha' }H~_ZT^X9}itiJ̹%0B`Zc DlvY߸h~e8殮Κ/}$H.ez3|vjL LE %˼Ι'\T 8#yk jLw,"F,z.c_,51~5!|shL]B1}0@7 ;k~8ԥW: /櫷z1'RR3 Dۋ=ADQasoP{QvZ5 sKc8 [z: 鈉esJ+2{#Yӧ*xބYbF9R]Y8鮑cGQ[?H{Kp8x'ػpKеol5Ggl$ "40D)e艄7dڏH=W\#K/I Hs2j[BkU^A$ęGF[Ƚg 7ecóAIDn%,h?0lD?$Fҏ^{=_cGr~Eg.Wz`53\>H9m |>5\"%&?REcΩz;Eu_V+܍\W KZc;".(gfŗrHJqN|OQCiG}+I`N`z!TBut+PbXXѨS,rF=pBC{&E"h[0+AS XJJk;&^B՟ &"Ԥ.? -iJ mLr$tҒ32YKV$OYόfe.U)ƴ %Β3XC)͚8Jg 놠ū)y2 P3bloGJT6t'v+܍@cWB]Q˛S:yd~tQ^)L$`!}۽W2 ^]>݄*>ccw&=4%iw:| ODڼfFrGuS [粘@IJVߝmG, n%S}ƘB{Zꎩ_sO\n~~"΋XIY>l*ׯ8!%*TuI^;l׮vـul9aosEjV@`!!F\ `{;K>5RJ' ܀a Y|j)#1ceDYM*󅄱lka>m'ӏƉř_ h([fE`}jT8#Bc9:#UlV̘_ jP:U?n2/UnFT69'庾#гW4+"Çzlщ`~ ^\fdTkkfQÀ#<W e,|\`{qE]t('WuLYMBuQ SU3te_x,;$N qB,%R -|Ju;ӿת!ݰ3cH r/WXueFku \,JǾŹR'ϙ}ig,J Zs ]z0:dF͉n-Ah˶e9t1jBB7`U*&y|$g3='9B{"Nlsb8l+z  H]_Bݭ_fk־z+ y^n|i\)pU姑6_ 1BM pd kN ]Z~޶@)X(ȋY܏{1fp քf;P/y5J)Mjc$T4RNJ؎ :> ޭy?KPhXRSxjKHj R&HWNH&/ދw64_**ii@jJZWlP9:f.Lo@:w4zZ_c; }h<{F?)smM'l*^ =]W.b5(J^"fBzĶsգ/>tlw rNGK$χ~ѐӕҡ\ْfV܎1.5f%pf&EТF& Eݟj iJ[nS^ T#g#Y`e(pk:8~J홁 Q; yU>\R׉v!yt r /9cSD]QEa5Pؖey_-Π:3ĭa@`_YDƩ=< 7Jy@MZֆБӾ~\:SS$:Ay֋/ɱ]x7if^-JSF_R偯9Y,ɐxɾV3%W0&];-?w"cʠ|?-wkq)r슀> 1x08PU[*hz2qB"SrǕ B-ՆfCGŽU_*Z[oϭ9ӅUmo7.u9a2|.ٝr X}J7+ ?O8P1%2 ?.bE΁ *~֔ԕ>+᲏²ne)*(E.q`l2& .T C>Y?_k^o`ԙ#u#uQ)D]l;9AhqG:7Htpy<ؒ* I 1, EQSYl bMPDߟ3%I`ڇ'з!2WNLy+]i1B6o/x"Rtӣ7]t,Hz~Yq^>,K9uJ%"q$5H4>kmy(1};ZKuᦧ!\6m;l#+Tm j'2-~ Q\v|blpp?ax!=o՛ɀ%l y3Vv,5p(!(128)3=1uSZ $!tcTPfd_O0u^Ӹ4Rz'4OΡr^PcR,E蜦MEe3N 3Z X58E !~L>![{$+P<{mf:=Lt1&ȿ+PդL :KDݨ*n\ՌT*k<QhP N4X?%WHA\\be¢#\X r^>7l kXm)\NaC}ҭrjnk+yp7`T5*XY X.!) ͯ`);T QP-"")8D!-2$!ěխQ xoFi+~JTS+;贗8MQpRʆ2`c8\U?I {F,b줴3ݟe[RUpoֈԋXVBFK 'd/A$U ϸg"֙ȐDz!!IMJjg3 xLqAt~}gcVs|s19'](oXA'Xv]f:UMNTOqK ~WȸϽ*{Kq|iq4)\~i/0e@{ኣAz*rQJ_\hqVy2Ѿi3b!p-weZ23Zl4hA*>r98O ~liِ]~& )~cdCo&Gy5 @".⹌y1J)ܦC?=Q(ުьE¨XG,S%d))M+?#{ªbPiC&?2a\8a?ycGd(mr4U&̌r HSg ?7$3 *䄑LvB܅%B$wVlq'6KB̻azфg*Ek"'iT{^M # #չvױI0~,+HAձJ8gZAPK@cbݤlt\pͿqYDи_9"qB9){5K9.łp>zqd}g{DAˇU:N0+XXs)xu QX&E&ҀAIh{Zm ߯ sϵꐅ)uf{j0azr"hv}M'|?hHm!HMMr  w]'$'6ev Hwے64obq`wu)*k+c %owg1pqÍ2ˁ!PSb~&yclUNXѥzmάK9ƕ.KiaP&Uܒu¦"j/d+2ΆYuDW2b+9h^%[ܔ}5pOTl 5˕ b.0̪>(S*B-~$}ە\ZHX M0Hq,ڳdj%]w$tH*.˷|(@j[EaUd Ulx)A[}hj1Hcb|F6̢n$0Y7f0^U;sӠFqddžA'Q"PB]a,6$yϷ_FQC55 xK򜒭'6;ŐXDR_pܹRzWGB<~ aڥURxQ؅7Efx2+T3d'GR ЃA::;ΣuB$f-|1+|Ź@ky[-ow #`@Y :ĽJ@!uZRtq𢡊!}r&oQ*ƒZGPWfxTɻ%͏c[9&]K:wcN>S I:LP(:x  oOcpL;)Le\ TTx =C5>c w8bOyAB``__EYZJ0M"4ea{T9{`)_@N!DnALoJ }G7/+{yF$;6 GQf&C/T92w0C@곇, UlQ C0ڲH70RV= u=X°b Q "s!hhqDt%Ww줫Njb7DM5(@Yr}FRԃК9g 3p]8Q xSRzɖIEGe._ 0[pBaF}1 ^%I,ǿLwq|㤅@cfxn3\FZwVSbvP*63j#$}4hk);ǓĬ(ѮQQz0_o!0mm(lq}beFr| 񗉹^}>(,=Q<ܛE1ltQl[Fyll0l;;6-E0T'!8QAl)s qRu .vg:)XAlF.{J 46){?kIG f3v]6ܔ ?&p>=n&9V14hgXn'Cuw٪Q;#cw;+I]Z幤cz!\x|h  dAW֍č!PkW\ZPIr?/ٷfI.:e-o5>Ĉ iu۟sg^e}(3"? xD,&9Xl0ppS謥yb`y('A4S%x!I ~/;Lob!I?jvT2¤܉Sk&Bvea͛`Np|zჂ99N`7${o &bzxR6`@[>nbPAHƪzshP{^_viMyș&_4^x-!/Č t/E*(UUVKճEZm=[ 9m( •Jn3E+uxZCE9\M߮flSE-5)ܭUbVJT fy?l@A=C /*B#MGfUCװ$C@rۖ7Iֹ.0L5r V ,kbdT/ \-n've h=N$bvjnwpҔL'w7k> ߃סmZN ̱ ҴP[`ɐ&}7uJeuY |b"o"0T{넞 6h,!NkLWI^SqZ*|H89ԁ=vuҗf<#/`U;tao8&MtJM'@;cϮ^?sNqމO^HJKznbz S4ŖzhΣ:Sa}s;"_MQ*9*=tA2Cr  gl*$[O"b㴗2 Fmy8‚< ZEu,.FjV8Ze#ﱟ&0Æ&Ga䡁fWF<}zz>UeX2"pљopTnưrMb*#Bݸ][AVԺ<($ m/hJ0o^ʹ}QjݾNq]pص7 ʏKbۍ1x906ǁ{҃4b@ɾyYa~Ϯ. -}%~nrcS6t' # G0Gq@T2ve;p_ֵ3% [- ۔&+fgtHQn% ߽X-ɏ=gǨֿoW;g)?6e4mnj-!{G4`R /w() d?JͶ,AW6t yDp_9xh+8MZ،'}_<*'>cۉ&]fڄ `1Hڔw% ~2j1 IJ ?~*(1]ZcCܠ8XV+?@ҭ^i; "U g#m[C};EEr=5`ܐd!p!#m#FH[5(1S A7F|RL,0w g[`ь`먫:m>X<0UaTMԙ.*u^/,ǁuŠxj6b_L}:3" ?rj0̆%:_4 xM H.; )0<ٓ}u{3Y0H~!`8Lt1:҇/)b3i_2U}$78|K* LjBC!E-(q^ܨKj='iHF_y!aB "MQ'Ye.笱7: 1&=h@mPm &R)ugX[w0C#keqp[nV`n`\i!(GicЖ; V\soA96 > ][[DynD MNzr묻rf!@],ݤ@|XvcG>aߩF{ P8]0*O 5zfbbqQ࣐1q+2 fav?%eP*U͡Q?Gc CAFP;B_uu2G*\AZhuM " LߚZRPʓ]KR"间4XH/^ [Ҡ&.;Kn ޅ )l#ֹ'fCަIfgGRxos5 psH'=PȟS{%uN{|<֔ w:upP.xh┰мi_/"8=HX>Uvnᛊ7KqRVDڈ\qMv,q&W)De Y*L*/Y9|Je? bٵ&m8PHw%Ÿ +i 9J]JUar|F1N٣-V"g8aɷ.a ƽW~ ֟ѵ XkOW㡹qYyd'- țXv01=ړFf{o-# xӎBA9nN;o^].H=\%ʓ稥v;WB+NãWg $n0ƌT[>Q[=`m&9Oe.@UTO#JD`D"FJ)o{XWBRx_l!Y5^DYX(>|a֞fvF_㒗[ӸX}Xsp fc5J/ Tbj%hgfv[云,zY-19/Aeٖ瘩}YҖJ3F=^P (z]`yJ[]E0ZL.8nHK8/SJc%%6(?)\ԘN.d K[1sB[G󽠦vkhDz\/e WWɕQUpX2ѶGIG`>ZHnFSx&[vpW!Ǝ8w41ܷ>;q-NQUP+ DFL'5d(*4dGwᕪj.i %s)W nBгE]LS/;xiTsBq褆w`e~#,^qN3~0}u|HzP2mC ֟/RdJqjc+!٢%^'*5wbj>uX‚yG,>M*V#MOX$+EUV0pԄlJrG|61[!P@YdE,EB8юUޱugq)"!YT'r#5o nTk׺Y4Qhs|I^$M )q ϐ"1)hڙ>-v"&= aR%,Ii˳\x'VL0$ i.fjybݴ[&3K޵ S {J ^`0 2Ϻ&D[q)ŒC/|Zĝ}m {__9M.9Pے!t׫"WnVO͛|, p 2\\ sѳ(ֆar W@}w\!1\CBuh Wu%b1`}#Fc36;շ2SD^uo&]ڪ'$gtM(!L͸ΝJۙ}zD OmC(iĿ<tyKaa\ m -Z|Uk^>PWM?G ]6Q̗N^3N\T>GTdL2uݴ:}@s=醠8uynjR%onXLv+pkP}\[)ZGǻb'VMoh 9Wu#QDQhVވmx B4Qӵ C>׳ l1-1T95E)qA^*A>% i$ZD+kq!=vfz1~X9nCK#ܬλ8C4x2BA"#=P%YHT+gDH.̘,,pӼV@>XgY#kgнvT3*qSC Of ]e?0|rxYUobAFdx2FnSv\c@Ptfh=Өm.A2#҈?f~q>gk0`t`%-{j+KEhԔzZՁ2Zx 6]qӐ%dQZUKcsɻBi͕<36/j]PδK:3лulomY[vn&baxM!vn6ɨүDR"5wXU6S\oԙ*R.ѺɄW>we5N K:`LKlsOzѽםEsx."1|sP]7U0w"\"̒ay~W;b5zX5bO2^;=c̭~0@S@c1{ mx#S]ynwIK & 4q•8N  ^n3cVvhmlBʿ=7X31T-䋋QX+>-5ڟI2Fډh@f_^q}J'U} ؒȼ#ҳI[[$һHFBxoUJQ74L J\%Of/߲G֧B~c3g&tX~*X͆E0ڤާUZis/C2*(?[).Ry#ngehl򸪼mu߃!8۹w 4qaHzؒžcjN@pw]s5SVRGHkz]Pѽ{2瑹ATq;w0g MUyL+cajxU!9.J\ٵ|X{]%?~0hRCp K*sC8wnnЛ~dz8z䑗,"(nC=J%bfTʹx1kƪct&#=i 28}H:Ue]!t]vhV&UJ92# G\v+5)NSnUJe$%p T:K Q8V>b,:znU6t'5$Eҳ%7e0*tI[_plCX j?|R2[/jt)RВ;/a[ύrHTDM'oֈ\Yǚ`,e#j8 h+Ц-ڣjLD>Zs+haL/qeۢhZ!}^.>SVb%5ޡ&TÛm~B~F(Ľ9uMqVvB{QG3Xy]u6T42@" k J'U4T6W]p$,LHHxٞUW\VB &*=XPz<ۤ]F;P\ZvnlqVV߻8`$=)^@jQ" ;>7v8t#y; o`($Hd>zl!6>)\6 .=֚!lky.\taz )ǿ+1ssbeI-cRՂqn0ϓ s ,'ӞwJRˋւ4akRL x.3E+F.^lBJWaz*f= G/0?;ǜeBzL(-?#AX~J#- U מ>76voyeȄA2"2cϏ6?̘*I |N[@@jSiD>.=t>ZDOӰ[iaSH0GZQ>z"oIMiPyRRՉ>=VA7 B^JhAG;ZeSy#8Iߟ΢kx E&Atm1eIO@ː 4"f}`_@5D8_v.k'݋d} &8Fcj`;=Qs}҄d9N FvF&s;Ӊ-tv+-1~vn7Œ{ߗ^2_IX?u.+&6%t{Cj ,.6Z"x4:kMb5S\פrZ+f0ס$`O>,Y\K`vhE-Z'#Q*~ D-T M9L `\ᒥc;ǎkDP6͘`We>ykܞr{nZ' IxPjdvɅfyJ ʽFP9 [xCe$i"v=\V7TH-ȅz-)D,Z ljaMCQ]4xx;!.j8"O]gi~ݭ+]oNٷL{gvcW^ dS.ǥKPF4614"m .lVf‹'E+ X7`46M<,}J+wy:M"Û3k~*)ݷ@ɔ8AuS\N}ub! 4EUjo3 21phCpMj[squY&m2Gjԡ; G(T㳪ɑnovfcrWF/J4.r nEk&ayeʰD!6zJfp5~b5~L[=FŠt4w%}-Qd̞c SKuԛa lD| &/R  ehDwG[6awX_u1QS0 ]5M،}bhpER^3tmULjּMEpcЙtkpw N?{v4GK4aU0{QՀw!jr~=p|Wr"ne9@h}cz޶Hp'±T/(A4X6Y qm:GC. PtwY톼S?*_HիCdlWVK-eBlDDy$ 9݋$+,"\iǿk|:8 )@MQn!cހu@DttȚf]%JN(4* hz+FroW~X= m:d ([5 (}h8n׍s钠 pT +A7Unb䢖$InՏ.sT0EMKME-lk.C1CYL]P2PUR`Uyd|gLyU_Uj oJȣy+7OL[+~ }1Mݱo0jDj;K C1Qg [:KZU 4OdAP J +jJ-.hcR @h.'%S77+a_M)þgrY@Kా_#T -`0^]#ՄZH{H[E\BLh>OD쮢0u\z'?JC:]h)xQY H!WU^Ak_8qN3 h @vDꥃ eMv|%:?i||#9ۅyتB~LVS[ϧ|`|B7+d=F9LG{ƹ:] .胜z4EG)H^fH U}qUIS+Z=,`/q#NY1uF8fi!Zj5t|2 fBe+rPz`D,& צ|Nh\g1)wfL8Y9} "))\,.kup}U\W@KyX)[$qE&,5 ܎|%uUF?D;3vH Nci5%o#էU]oS&dOWˎy9m}wWNz 9v2`\n Jѝ7~Y:(D b˥c''۱V.\ Qz jΫ+9@. xPPS a'&A4`i%i\_]qw(IJٯ.j3nO<d(#$8 }eIG;)2]bʖ$Q|ÃtrNmwœ)ew~Z(&F֭EUI*5eU-ErJ7`SmNY DQޖ8s#k/G 9 [\tx )<ijF܄;աa􄮤O:p7#r zô/ت)%}wrש/jTE2''S*GǸOQBXl)Oq%oODbƞP\+8|hVF(z"ׂ9z`w|COT53#^Rtw9a|Qˣx%-cIƿMO!Rn4E٬deƮmptRZ]څKUDrY$,^V+Q~Io FZJXW,ZM-1oa l$ʜ]<,z"Xͨxg4묺e ,uT)03 K!2˨s kBɸ2J_Omҡa?%=gich8vY"hYL`g n] s%Mdg9xeF ^a 3|bN b6 Nąia #Ŀ]^`_`s3Bdsƞ5C㾊 ;htAԟx0џV8x /ׄ։D[Vv d3(@1ܱNm Py.'ڜ"C s jP%V(g케ft9U];T 7u)ew1/Ng;اL wRZ+YQ{9 d'!&)9vҼ?^X05ߴ?T{r.ݗ1U Sg0WBL1AgH?95L"鬄j!q}E.ʔb/ 2phͷ.^$IJr[~P9Oʃ}Q:&'-IKjeIu&F6*ь˯4'9ıGs:F5ב@~2iɷw?GͿWδ9bx'Hʑ^,e1sCM6}"اw$E#KnBKC)͆Add.%s|'Nw>NZ 4ۼl"V e S/Gȯvm*1e:s=PbEy%8W 6z[ghQހ;IGA*zۄSz AeĢO/;")Gs /lJg.qfE 9IMoʏj Q{&N{vY+1U$-E~f=?td4R\ {'mtrW/g=M?ʡ| sl]ZI'uiHD'\eٙ#g^VobQx:>+oŲ Fq$ m{_- $ PplU!YXe3_w#NnN;]c4/g6w;~O[Wl5\Up%BMK:~5Ԭ5W_bѼB:޼<܊S0|xuDC @3O#di}&4 ࡺwYI/=MԶVH+' 9cӈ$ 7n#6]^axW\!Xɛh\RGzo̓ahtR5>0xd=uWC5{(l# V{wT}暗zq ):U{&Oy!D*3*pK`/o\Cμ*9G!zI[pfx ' >Q/!PY׉lc(~ijdlX6jH=Bfhήr.Z:'YASl3?k7t_۾t:;1@L^kc<"V #<`q|Sd llg+s%ۣ9/0ajU- GT gxv%Ц9Iy.3ŠZDn+ +&]C/j}:FPDZ%zŚ[2Yon˻R#dhp%"UȖp~ 9{5'>LU_Z?'=72*xw&l=vXAf4b/⏙JbcjAzUdC~Э }um T/1pkr+-w|OFBZ}]ۋ9ۢ~"!5#n!f8u\ƧՂmvl|&\moH;:o 9Sfw4x:d2e"|d"43{ *OJPYlCsLim8S NX._}-?pGWXV>'sc Ѷ%`btwsR:Y@Ob`T?=%m~0po-B%oWk1w@cIBo =+P,){']8({^D;R֪1N]dz5 g%^y`Qi1XFW_◽f|aMO]6k؃F`chy2C d/[MףvQ:׮ g/ﰜz7&o~@\2ۓ@#QYͧ u޸͜dR[#2~PZNR [{EF5K(aIj|3p?TF+()>.&r+`"%5_XI~}KlEiUγknbaේ[l%[yobV"Yx&7Uyܬ"⦞7?{ !~UJ;7{WYlT2.V4eMxN*~ô("|0Y1\hfKn:3PTh?BP9_p>bٮt$a8-d㨫*8k dd״69lױ%Ab kkӴ;*kg;S#W#e-UB^tl XgGJkK 4*~G[u'1jU&R;ޚ^7D?dzqqrcFF vt[ @aE-V.]hCYG~B]!jyx3sjmNN>_g0Ϡ0hSl[f#av0ܾlQ܃]u}5YLb7y6d~g?q|; B^Q}"l7ڮZ2aX?T xt1kǟgsl-$&\,i:QMz?}{n=9W辇參vi]ʥFo(0Cs+Q)$TxZWBBJ3f2~k# J^Ӻ;Xǘw!ePJ;kM34nxQ7ǏܳwzN;DزB+s+L c-.t?l#4{҅Jk ˀIa@pSkp]\|zk9} fn4%Ty2fT{RA $f-h{&_u6K! 0Xv.w'cqb^^1Ü/H$Y CELߺqP$-䵆- XnbJŒPQNȀvjeàRL^컹u_~ 븸x0C#0}7l(й&'x`~n|)gb, *,\ tW~MpB6Մگ$  W)_(t鵷;^4 5 ,c⮛/  %7ldv͉Ij"z{L>$ aǾp\ѡ-=MȚScoR s?Q5/,^.LrJjttSeRMwG& cNRc'OsQ 7ٛ>'= |)*F^43y%VSFL F|s$K0ݶC[eWFy͍Xl|Cr]ɊF^h`r~[.cR]Dg wOx ~s.AYHӷCjOp<믻8gaY_ӛ?8[6}J"½?7 ҆4;o6s '$ {Х^MZ#% =-LXvbN+^ 6El䥺\2l&fVs{T"?5Io!@P@{]EE>N&͕U%'ŠX5~g P]dy>?<<pCӶ#l k[gߧ)**uY:P(Ƒ,AE?l.˫c0XȦ|U{'wT\eU#j"5fSM7PvwoX+׊ ,\xT;UH (fy&M,J`L=nH4K]tѴ8Dv,uΚ crI[FU`"֋PGvg,z$Qde'ig6 xccg ύh 5Qnn#-#m챲ǭ4wN;]kQ\5iע~I!yoP|=m.2;ya =/GR/xDJdTB16k5܌mx5Wl;!akAuQv/u;̔_ rM(] <6R]5{Dʷ"$[G~]0{E5+YԞ ;3,ɔ-)oqصxM-Ml20%QQ!ˆ;?:W('EȳJ+NI `H/f6[ ׵.f .k5ؾZ2&@ =;X,:7H#~˚LeC+orϬD>ib&a]P*&®.W#nŚlJfioB"VʧҜ;hgwq ;(ޅWG7,÷VnUw>HY$ZP"=.c+)-QB| oW Evo{jL`[dܳ"ɲEo Цմ3[w(}>Weo;+[5~P{7*A@fP"H鏬s _!IRmB Kqup8#='.,fc)LQ_=^9w\wʜ}[?/'{bP+}Lf(FWv( xl15ïn47a2%BS> #wx$sdn5h88qjNۤBQl~rvv ηK1k.<^2 m)0fȟ~骤vBD .kn=鶲PnfFzٛ??zh$P͇٬-'P]p8SNPDǨ g.CN/J:fBWezE+uѱ?P\{)g/te>oh%ZF ,ócF/4-tY jőT jsu㷫Fe0nv-8Xaw*0 4LhuWku(D"u!ju{cT~|S=x_q5.v%? HTe;0yyykLtn&zTX(h7]|Bt BJ6\u xKtA"gǘ8Xkϓ/(:e 6T:6=k_0vԳgceאl6"omX1B0I xcI^64`#_Hmmȳa;Ҷd ϊ v"5,Dm1^;V&XĪu z0gI\u{Sq7-%@xWJ-ׂȰF[(Bd^vؒŦDj$QfnCav;Nh1wu:ULC?lrjQNYν/W[K.Ld ՚uqhqm. W>wz7VP/aJxA31%ׇ͝MG[G6}a#Jx! o{p6w/(ӓpAT,P[%_L3x?7TРgkV_>czHЬ?OZQ:‡Pv#Hە 50b @/M&|Zt~3Zp`37N>`yX}.۠Q(E3vHåڇstrXUތG/ٚaְBo(!y _6+S.A{VOC_h,UQܻLx%6vhё-U }DO[oYhfN}V)m=d9!{8ƭxVXViK1 d,5N]y[BS %sxӏ-/,P̜Lj~z|Y箈G<~?2Y|hA~M/ME탶\anQt3h*J< ؤ@,Ftʼng:/eꭟ4`M- ̇IS\-~IƇj92%vKYvzαՏ(1yz-:hғN ɳ6[ZL :dS|NDZW{#ܶfŋ}@/JO=px v:ܼ'tl޲ǽmQ)Ƹ@#cUॿy2M-݃Mt1%Cyjj9M?oZ^Ѓ5;/yMZV?GZ N0{ S ('{g2ZcK7Yˑ[Xj%u hX$7/$  N@ޠ?RmEXd*]|`C%* uqQb"G c-'ā淺EoHטPUj9u:n`TH.a4o%Sg8Ay\oq`뺍f|/ e99Y23-`flm!/[u*=/ftdP eqFjeռ, g(#-N֡hTW#.]GC2p-T X@cryF&պ;P{.:ɾԐ ʄ_B{6؈|3j[-AK^4d (cIUoc1Mw+ѭKtmuB[k X$?mv0oIF PjrKԋ.(ʌWW,ǞS+>;6IɐXjO#nG`שGe_܉ a_B5&‘' ֱGYGwSCFb.bכԯ=@abVNWy[B|ʞWH{ok&ޡs-xr+pIN_Hyd c$;N/?P"sX;nDQuw_\ aaUh,)[uR?Pr4] Pmgn-qHWi;1T*@3tFtfE/ojO 2mbU/v xÍ,y463\vɚ^(FVOdQU+5F-jarˏ.}ʷHhۤ5iF8Sf:u7..7*Ÿه\'Uaޝ񱑖ABGPZP̜'7et od4*sɼѽF]3g4yjOg MnF ]us1K+yߟ(J쨬?f=vɊ\1}+hk;JNxB4F ""|YQߣ1;{D`JcGz@qw4Ȝݺg6 XK1G&xβĦJT_QPCvq]sZjD[M%œ.!g#&yM:&1:klä0A\R\\`2 ^pV܃cC3M^*j"/)yQeuL쨃|Kt"((5Gq!EQ*lD=p?@%=o$9R*p԰tʢmb}BX͋LZM3'LRN.k!0v*{Ó'-$nE #}&IhKعg` ٢%mQq2WX'j KFad xQ#)LJZ^ܢ[ tJ#9k'QL=oA5(n\AŅxj!F)8e*5$I)̴8u!չܜjc{}ጾ5QTs-kPJz2 PD?RNAA4RG !A$P~4`eIfOy+R[lFO0~d?3b\+z;@zr gDEpGyK19KKpƟ 8kab,+9g300o8̓ъ{r pF.%^a_}oP^YZC!E'>Ԧ="VV6Rð\vJBVx X9C.c<<|(e/3N[r73ok"1 ..eEJD|Ptꁙ,w zM!D.gΫg)I];?6}O.G+:8;1@GDboJEYNߤQ'?tL[&l <.j-2v4N(]{ qA_@+lT"(%βSLjzO0 op?}leaAu"6 | I1"$Z9l~-L0߂,4o~ bB#;B3"hU93rO#&WXJ`0@O7\v#<ws$Qa_b{*+@fo WA?0p?.:\w=kfn܇\S ?,pc`Xx/YϰDG/+h;51iFs}Á)?6}ڨ8i M7T~w)_0Wd1,ORˤr"(gςVimqm)xUa%ڊ4lϽX~xh=isj\cqacd t |҆+ N/84a26Ȅ­Csԏ>m$F>Pi4!RUN%RˮHٮ Ϗq[*=!ؚ]*5C/nUֹ X'3@yɹM Zxdk~۷y!<7T ^kmmhS PL>Ltk谶&_OT.-\ >˲PNLF9|pi y~, HĔfa>>Ħ%]'Uh3]kl20. yj4Iw5FAet;fP0i@]{925Pqw B^]N^?]Va6~r!敳H~JHL=mZ܄ 7 ^G-?,Ƴ+m;9&vt{<*FK3C<@/}\k9>uE?z2z7R 1@XR DgsNeHe0._c۸|906|>& E !W= yrbW@T#F791ax#5j#U,0x2 NԌ^x}5!:jDd<Lمy5(q|J?E{3b\GK$FEtoIU|}]]q=.7BRYV:^ǝ,F`ǖj@WGg(?, _.,MnoqoY8BkzG(-Ty- ^j{{Ŷ2'm X7"1¦$#Mv%dWwY?6jzO@W[ 细-@u] (EAClYepASi*cv<|"U7Mr2Ł؀քV?# Rf9]z% =j?р汢8΁tm* VvoGb)3]!ds ߬Dk='V t<&_pA!{wux  pwJ\h._1=2a;cUOG;}RQKoMv8d2Ef翤X"}ց 4/36Nj5p 9P7F3Xy˿x׾sx;8=\ޟE屪!;p&=&.6J :7gr<$i5L)#]hT}g`ҿ.﻾$f3Icm̞nS:"ɴoFGҶ ]|ԡA?U<\N=&p'c\DnK M1bɑ (ɕWV JNmtԠ(ahj>>ϳ['kEFhN`h]jDB{/94Mvα:~3$]igR`=<EV iOct/~ʜ/{&~|YWM25N ׆ $Zr.Z`*+tnY?ݝ*;Dk ֔·&lbуV^J]M xԥT uaw;Bx;^>6*+ᚻG2]1RHq7@ .:*#NTЏL-&k8yw0;=sjm{Ֆl^P'{OH!9ѭh+{]q. wQУcxr16ˡ[ C >G#,gIzjk?Ƽ"@HߒoDۗ IU]Q ׽ewn',㱦S87ϛ1kp|xz+˸#e؎羇3z?:Ie3ҾVU:Qx}{v(%Wx; 9s&xQycXm'2Q\)hqC<{ăpq7?yW _NqNЁI*<psD!}|`c4Rrݨڄ_a?28E& l<|%39$nNC2򝡝#ȈBh\i]2;imjxQpH~y~.U$כa}/:/BnoK\ ho6B/ HѯX2^KnZ xۛ?&ʆ- QK2fB0Eu Yrakx4,}JZ @윸5l4p}+YTqx Y)֛wX([yiu SjFРv'O Dt>"P+?.Mj\IE++: mt02K2^Au*7=2v4oT&{cnSxRE #=lA#-}Gzt`gaLϘHLL- ΙdjeyP\6[p8(qpGXFg3#iK] ݏ;gg 7(4(V&f1'jb_`Fihp-VGBw԰YGw:kfbqJ#k8ojjAA ⡗mp_-O$L,2%};L];bPftnd#qwy6לp鋙ж\_t<7bSuv9qI Ľ8_"6Z^ J^!@Zi׷? i!`/U!Y.`C=*Ҕ{(k |K^KYQ &8H~vƢLѽei1HA {xv5Y1gٙQW13Y..KZJΗ\=]ŐDv$%RLDe1lx}\{9= bZLN5؟扚53 tL:1,֯[~NtmH &_%t2wc Q0@Y;.%ٝE^N[ATC1|#SY@r$Hu/毃}n]uPP;\)+N*t;"h=C0)ìޗ A8k)&+[ohXO/3v{YEojmr0KMWU}}͕kb#)>~.@Y$I&<4ݡT{\'wpLMf iíB%iL-_E94{O::?Z&Ȩo4$dY!m@fc TQ4{⏔Nj90Wp0S׼2P[ud_q"/dmR^H[Jt**;2>]h:&Әrye!^h!+Uqޖ K}>t<MErҕiwmCaOCf]~P|;$_:I!kaW5_<73JA!з|w4!1 vsch }Mu V%KV3k2/w[]Ĕo M:!wFTp0.QTȃcvcŀ5vM$_4C!Tĝ׫RMsΨLd"׮H{aL:%I4omBMXwkI8Uu}Le.`0AZs78!¶8WW=PV*itv 91Gf#&ۘK|I ᖶ["<-Cmz*-?&uK]4m;9 8)ۡ =aþ}0IzXʸᳫJb\?6k6 'y#yO)̂V91jQY—EOmb]0?#O!Յ>]o[(/ӮYsݵ.-,C$tay -f(짖8} C(肉%[f֥zY#YO@d`]ykϟ`7:`Oםx%4a6m,#;RUY.k) EC?2D3! T[ǟ)z\/2{Apekx-k24mZW ͩ^>{dI* oivZ2_`#(sT% ) _YWRZ[WͭkWMTB% BlYU VC:*WzhMEB6nC-9k[lf.Ɯq8R~u)NT;v-O6ꏅxL0w3O$ǹQLi";z׻ T%Xw Ϭ1~3Nx$͛7%u,ؾhƟ0v7užQ+cͣbUM_6k۪4ȓT8Kt44/{vL&>X⥰@V'@!ݽVF>}QAlfrtRZE(LG\^ip"#m97۩p甕<>W_]RXBvD̖++[{ξ>zg8ȍ&C6M-V\ 㘈 5]ZЍΣGٟ[́z_k\#OA Tզ0ԕ5ON8"M͊26bwÖJ+$"YGpDbJa-O-z0*X7ȱ(6]s"Dv Ō&"B*g5v072 7[1k9" Y Qy`yi ΃ 9maFV~G0}(M:-5{M~'HhTas4LuSOǘ`o 3.`#x,9nL5D=Zr"liN)ݗ|\Sz)Y~<LK͹T켸ѣO)gf%SoBQ_ U9x/uD:Nyr@d Ϲ/! k(c$Y'GWߴw->JюyY-Ow]@vv|Qur'fľ';0*LSq G@%"t-u2]|yAs:;+=.WB%VA V@85FC_@m9!/"AR'ИuM.]H}Y&ʄuZQa2;!zP#pvD +PX)xQ4Ҥ+p(Y@߈-ѥnM. Hp=VG(ӝ8ڳvww}u?;3Fו{&} of C\r \ 7q&LaɂaXpBUx}ϰ=ലh%\,%? _yi#GeQ]>!*O?u4}~~Peb_? ((0r 9LM~&<}2Ÿ,,BDĆuKrt W6N8XT 4r97gߏn;<۠h>[-Sַ3'TXA3.i^M كCLӁgYTG&`-ENYO# *|bʞXnE +FoIA^] q2W\s~ؿ3K"w֎5IFNs/ sqY3588˚1T|` S7<8-ˁ{{&t[ %e&_> 2vp²ݎ(˃2TdIlCGқfP,D@T>]}Xx3<}{Udd Km.¦<؏X2(1[Mn|ezoɮ+x|lUdIkS7wsC'+Ftr-.ktEDx?'to&Ha%ʒWi.ή-W`i+bB5%U]6ЩwJ~Bb(;0u僑)J3EF7{` LZH5^E?>5,2*Ś{~'U`!7 IOQXP;B?U X+f!~y6W ^N{Hۜ;-ONM=0t{leږ LFR6I%|rfTmЗ@gꎲV]w1:QX@֮`O=CV^EW6;۠w.mMg.m0Y{l--Y-!p,܁X͜k`nhzzb*J@—V#^uGvެ2I~JZ sYw^2PC #M_qʓtA~"ȑeWdg3kϰ~&*߸ KD}9[穳bJȞL *PPVvd?]mǫu|xEy)T'D͍KuڍvEXsgO/NɃFF̂j߈?])[~*Ԩçľ |*Vyjyqe/hR&/RZROڮ ,gx&"ug pP:]ywXFcsPN E(ʮ_p;.tF4$J! PQ"g>=1Jpr&~)bRQ;,jc帘9b) 7Ь:G1Ŕ:S & e8a#4QF+|{jKRSDX|c\\=Fxdwe.%"Czp@f-6}rR-0.xOWc?EE™.O#H|T-CliT^0aF7r 3kqޖAc͂ޚ" qڻW90A6o>::NoҌ5zwg 8}_ SMfR G7''e6 C1OVbd]6܏i["eRď:ffkSµavpR$V fpY\t.Оi2.ɬ ޽ʈf`'?q!;c} a`/y?[g!qJ*=N̽_`gR DDndĞS¿8SAbmfVٔ&5=*l[RH F'9&E%:YwDU8s@Ѻ{xށurUBs]cxd?kve2?ŸVH cJk=TƎ۰+C: C{gKnN £9b+e.J#EM doC8K3&#qkƽZ^ix0"L!8a$\W1ߐ{'BEIvJN?3@jLv*˚J`C 0yHh?;l4 fE"]y_ 8|LQ"2 '>āv7R;?-f=Vk(s*l#:3?Ƽ0 -.Wmg kAc%LqО4Cv1>`I_&j%e2&H΍̞'gcEO8s1A:=]?фbhqUbu.b'oA""tKAҬhEȕI k6nё$F@Ds$n.`$O)ƕbϘէpvf]AouhvW Sb;4 ČkO@F'?FZ~{='x]xCR@7$~5vEHp7X 8g, kYm>Jap. U+T+#")xqS5Y%ΧɳΥGpy;csSlvt0S"[80FUU=<^EɛMG'@>n9堖'$ڬ~@6{?PȜԮB)aND$&fuy @3Qy/l!\itT.AgL+UsKoܼj_p^T! ]Qndzzg_H:P@CWk)5c!o1jS#q[YCL+T*b~$r=و,\[X!&Q71[IF+ޝ~w{B:1rY)%h:4nWGa '?Bݾ)5LB ` qE)3}B]u! #f15ƥ3ǯ `Yц6(vmcX$FI2?> }3TOn!`Z e<dF!{@F& 6c:@!cq XskWy+aHbޜzO{a_ZdC zK>3D*\vKlL0(kPg>C&qX+bF=̾0Gskl!? ,4 :s{GCMً,wDڣo>mz"ll*6NzW>PiYEϡ^Z@314{ Zj8-VȔKZ?&?` _ ,A<[_zSއdk7Q3R"ULx -DtlU@p^Țq +b""W>yɓ>p4WsGT@F§W'~P78RT$C渭Cڱ,_ ;n]mKs&ݖH'LYv@j2)zJ@*\>7"!x}7|=^CH+3തSsu`'{y}]pL]?Y̨6Fok?^6mݰrbJ{ubaB!]n^kgu?Ʌ 迏aUr o~}Cwm]zͧW$}L\Mx:w6lv("0kFuXIrم@M[cf/&Ybb/Ӽz˽kYoHBJgzHvc/OMf. ?S%\#؊jP^-J1`u3xmrX& (+_9}3?!^1pӘ%(,ZYM%-} 9 ^+B@U=كU5HA`SB=Y6peW+ OR0G(U$KgzQ=G{^IC4hKl4< |8_]O~Ͽ'5HDK nYۖJի&+! c=> C[ 1Qs̀wD||ߦu""KϨM<1C0SŻAdy*~5Kѻ.prB{ %+QWE8dr"!;T&ި,0-4b?`lfĸ]Ewy[TG~*Z6D`W7Dة!kkr0%$ƃqFdL"|ԛCa+|k=:{F+oĖ'V& v:'AؾlU{2'8a+[;U ^ݵތ -`j93A5)یnrBI&#-Ktz<8uRWubA͸W@!Ӣ  {51KPUo <Vkd}:TR\0)q`Dy$*SK6vHwH+2uH#qzpR}W+/ X6'0H •d٤zhP Pq/vE]B4vinvLkdMe8eziG :ֱ = .{ʰ\5"4Umk(O (( TJiLufdJ>5r$SJj62鿴բ;qSZ&l{ ;6+c]n{3ɥ.[4W#:̹4NCR|ьgQVт {¤Cf,w`)4&9{-v;ζӨF/ʮ4goܻ̥xJ}o|vjZGG6~ û]t* Pp34u@Z743O0~r>a_f0t`SP;$TPM:)q! GEYzOPʼnԆyh7E;Wl&/ ^o[62AnN{zjљțIy-]IUԠfDiK٠b# ׹1FD'w 5/\Y-RrI:M>ڽ2Ly@pA;CzMw^8Ϥ:txy`8 ƍPcIs OlW%5ݟ-^=;2"Vo;e2@ GDp s?wb褫'mCEt!mA(Itr.9xbI;tPkZxsIY-GW+ 1?BeΡsce+Ym >zHǕ#"Kl3gn]t"D~$*1UjlڌJRCID3DE'ܒ&~ܿ_mD~ Q5fO2P1@h^@jd7k{ȓف%,0*=OSm$z;xOyS]<]vW/ TC֘&+vPK`6/%>@BV1 W1g)(t8S ꏞL}4gnEϢw1+¾ơt0Ɯ7^r-):)k`(6 !c&]AQ|Zt70t9'4d䯧Ͷx[@2\Cooj27jo"ca]gs+"|?Dڷa3pyq :e|!\d ě[|@2 z){s1+at#=`'?ZꧣKN,Mv1˂WTmmr /6fgvX<>k#zt:2d}Hȉn'1 ƕ vbЦ0h3*ڲf+q>q?%kzZˈZpu?Bm"rNQmy>pg8!yCKEDw])t #uED'PJ_9Lt&c\!-־RWYXaCˆkқH4rrJ~3>-aRhj>G 3AEX!s5]vB0_/y4Iȸu`ܪN5'7*PpR)J7בIm#7JY3Wý3#h1?J7+ NEma[8k$RUn0A1^uJIHP&?ɷ>R)@ ȋM(I;YD;ήm(9cUhEd2t&^s"@V2D.C#Oe[w ~| Ɯ6q=@`jDzcHѫk{\w[?ٙkjJ\FGY|ؕB1v*zܺTɕ/rJ^Ei?\sO'R`(薻Lt/×Ƥ@}wU} LgWꟃ/M{zcosfP><2 pq21̮7$6vjSs"FLq_1h;'¼v0F{_o+d%JvY̜;[|,h5q'LFwI]%|=us ε8/q<8+']ԑ {MpKk4.|BMemLi&FiY L u6rfz0?u'D GI OH 4RKV&ICZ}6l'AbLQZ6/>^ic>Y <4O Ab8)졓|ޱQ.ݽ)JYC] [FNBˌדiGGy 0ZWj:ǸTA[ygO!æow"jzYdJ15#f*{U=ޜxZPtݸ^ 2L" IGc=΅bBqF*!=٭jbo3 ܎0 (6<ע|' }bPj΃[OR xWB^Q'G+1O<ˮRh2h8j `B*xo XpG@ue({ki-V"A<׀@)gPF޽uprLODe(;BYŊ3yT}VV(гl,-hߌ"󁼜\E#֙ 3yk 5elf? pӅLo)d_Wxd Oh.JC4ڿ2zaH?aJ /{1NWux1M̮Ej}nGDKUluthKDl=;%m%aok/)_K u6J?:uv*S$.}o͙cƸv+L- +$wM+< _XLr1=IDI#p/ĺzG<~A8h&2f|KpoQdgXXSMm|ۯDn ̡ٟxeAM"e@h6tr5E7/C3sEBdwaR㯢&s W:@ P#\fym/mEq2^m"eʙNE YKp-zq8čK%" yX̥p\uH%+Kr>]0 ukO)0@6|@z$'|-WTP'ylu;R&.`ޝ:%k ޼;}ie?g@ؿț*oޝ=/u5TME{)`{h#-ED® VɥAw b mXyQz$7(aMuV6xtV.j7 M>C,G?};z`AǺG8Țca.l;6O&j;K}$z^u03Οb"Vj0NLFb3Kǔd0MUc;j Cgi\^PY:+տu=3@xu w8&z&;4F=hgan/xt(ⶏ}%Q[N;'wznEn- \l!a;Qo msMI &JGBtJ>m3?mEJHg*jV˷%YVd"rkW.U:kzu}/)'YBte4SrZ۰8V4#h?!}abdt7F'kGRF(9w5Z4Mr _lOt}gAg-T8SDO}'{97 rGƣh`Sk}ZZ95㵴'Daz)}r-T6!šj6,LwQz^wRW=⍫PndArBR1u2fǛs=Y1Nc:q]<:+V f`m*y(J= R2U*0xyc᫄e1椺핿ץw[^B1^|[h"@R8u@5%AZ%H<ڠ&4ЛPC.޴xxSǃ@o)_ t˱t!=pޞp I5i9y^ RɃhԐ86"ѡ˯>.gc[T)4ޅǖ/߃sH^biQc,/H:N3ӇüB(rn8O ֕kcVM y?ɧzV2@hˌBL S-O^!wqk܆4"qE/}r6ъtjEv6loi88G/yĭq‹wR&sX:1HЍy("ΣcU @/8smy/Y?Bk4|_یa@ } 8pPcɬO|R쌛lUZP:y(A("A(u4rT`c.~`{SXlAICa|2a_"Ls+ Ρ'Aw4 qaJx.۠6~>+ӴM' D[v3U+ÖJ (#dE$z 1R2e)!8wo%X&oX/1J<~(29ɲ,͢ ?d:: IW!+8(6/3?  2iT%z AaR]5m5pGBY-sp<+2;xK}>s VT%],aa]^}<0NUG<7J1 3$b܆(3Q@aq:`$d2 ACe;`4K@0,5 ރBR zF"0cA:9~)^({EEG#BxYek@3=s /$|̒P GnGSėʰ dm}NoWm*㳋>Z7,`ETA[Tjc//gER;6KGnĞ1sꏌاrz,^LCN^@:GT/Dm~q.'QfzIz_X"`(Hh /NYz9Q@/R_ 2 |rR5QdиzE n_8XN:TCaF`$0Wk*+[gt ҥV@#A#r+bc~JS ɜ&ߦ1]| OۃRW,u0~JtBxKR\1fկ~X&7~2&K+XNE-#5Q,A?dH]swPi$ӏ-.Eƈ5 GF$7k=[Dpg^48ŌLM5Yg$ij#dem_.0_@HH >)/vLl)H Z&WX XG8upv4Ef]j!f0T#dU[N)jEr_•z5OX7 X.J)?ͅe*RZ+J%Ӣn=׃5Ȉg=JKhֶCvq?!I`0hby Y9Xfk`W r0`MfsBbS߲]{9gºCRErw.VxCw}w/\%w*"Y ;g.D-CVШSقL']=Z.B ++Xʁ߿6xu5*bP\XPS#YI`6AxKe]&d/cЮ!r"ӟR? 'H6܈׽Ѐ y.eH$>OsZ(m,/2P2N%i*w/k:EwrA*|!Q_;lZxH$~u[V$D< D kX{ZA6:֌EVs qG Fdյ38;a n>KտB؇_ϸ0J6ڰ6B XXkayiDMlIi'{ G4] ^_*d7)K <7a :ݷ9 7UnE *;qyfv4 3,*UKqz:1R7l5O%e3n\SRDw{ԸJ6Ԥ_(v(QQeEY8}E 8t^RONtХH2y4&r_[~1;pcqLMD!/NQ %~5*һ"rb2eLґ&GkBqbYp4ZQ/aw`RavOI?Z3of>4b$,m# NNtAS2QQIIk<ܥmkjǺ> ], ,0ˉu @}TjzZ4;j ײG,)-AeIGyܸBNUgX-$JDRp֌r1-G۶/~Ө\"e\Aƒ([MҀ~:_Sn~7%PlhztS,y AUza1[ADk:0R_seiofO`K#rk%u]q7@-IA3$#= nbn /Ǟ*XKmT ~W}&kLYEc@bl]345W([Gm )U#8ܲ/s |o!~I#4_ pu?M2kPuDw yJ!lls =W"˴޵S7d8h4NH.Lָ?[T悳}`xk4걡mFsh42_YK/QP[nƲ!Hb:ag :O Bߚ"b0 _+H?YN,j1tBŃk;rdlQG\B[E4&9Z){cV`aBM.m02]U~{&,GNg* o %ഏ]T$̇LpSʴYd ]wr9`օpfC'mٟql{Z`0n]١Eɺi)il*8@_6Bj(#uFr16[N^'Jn ޴_ǣU,},d/.an!N71ҫrx c8Iꝗa 6ԫL,yE& 'ҥ W-l][,!aSvnHKq?.$Eչs[ܼ:Q:>|XHEm#e㒹LѦwiZV`X6m{Ae-)ѫGUuA,C+zh4xg9L\-/8E }2W>x,|`N$@ d'ش"ɬ?NjhFwsޯ.l#Ϣ Ob+Bȁ[iG#q6>3U0ԟA3pA4ޝKdmmB|TAQzᷖa }7FŜ.9\>,q2} ~r׻ZD aCIӒOL 6)`AA!*51\hEѪomg6O>A]Am9vS$hz 4mꅫQ-:BįNQU+E=悟>e4QZc9|myI)j)P_#5kEEB'h 'Ax1hKfv%3#?*!]Po/?idpFSW;,́???7UZԢèM>Fe/7ɂw5d)<&uBR HCu_, #l` //dd!p5YuY2B'uNwY> skJvj[w Y]dX[օ[+UM,Qe1rV۸%o["/o]81>5^AQ˞~hx32JWNӌRN`@o@)q(z4-8FyI=oAQfR5*Y'Lz+ؼmH"ʫ2g;Mprd xQG?_F<'s c7` k-{[F\ XiGBEwxd'ñz]?::ɻPN5cq0;Fw؋BgQ%IJ7|5gK 0LB% J{9wQ׹чOA)uu>DuoKpdc)&zGF~* CDi6C<㖟cH M^}@ c+P ؙXF;j_ -pP!+ hy7pV(4s*L7y՝߶%_YS,Dvݳ֙p˿q)?A RVLϪ_߆uevTS[D lYr](Rjnq*;"왒Nb<8ҘFH% xet%+v(L++jv#Պ.dm/6c( )H.^Dܠ ʓ.i lSU$wl:C9#YQw\!\Mjɀ?6ڬ9$bűmIfUT:Bfq}XbX|Oo1.F] v@{SwoÛgQm! B'ǐ\0O$77Zdzˉ:sLg i18y%qA6 )H =OY+Pܬx}#lV#1Q.H}ɣ M[Ș%t9{_an.. Ǽ">,z4`YvNgTًI(#sWI@LPgdq_%wgijG3l Ѩڀ,2_&z&?yg10ؗzZAu/uGVBM>SRBE5f}] -gzl~Ũ;]in_y>]?D#ax?OG$VX%\~`A̒n7`Y"zKNk!&uL'.aeز vTU+Wa 򧢸O^o+bW22%+/TD'0VS5(a>/SG Va.+3}5j0L rWmRBMd i/@ Ȣ$g R:u:6Tf4莑b=_ ckJUQ#iJrgpw)ŧ2I9wLJH^rbiuZsGa yRdh#cto< dSu2?% |x_:1g&#y;M FhO|=؂L9'"OP#n((aڃP7󨽣J9S .YJd^l9EoMrSՖ#D3n\3Rō8rF?Ir|sΩ1. ֜@r +RO ;%h?Kc3?_f߹QPBF~9- =D-(BP'dۆgθJ?#F޶IY8qtd*D֠* Tw5`QC{AI;GΝژŎ1щvD8FHGj7諬WRm[35%nn~6(-ŻeQ! 6)+4-V 176a13 XpӃS~]·MfKqEvI=e?YOU֢tކ5'>¦[Po|pl "zeT / r4iʙVW2?p< 8$_jDri,xPҝӘ=68~^3 cLP,nܓCږrt[.(Xu956$>*@R{ L RBJG\y3vV7}&E`o^*H84>'>*~շ֣B ]!R\T-mܭYh8xY]!KG+sYMPhڃ-2T*M3iI{k?Jint\hv4P.* 8]M1!w| IhW4'YP h\o_u(~M lbne !T#H|T3VAŀJ]ېIڟӏt΃}f?/ ͍F>\{dHu0?XPUqչ,^E  <e%З8u=)aSZI6||S)Иb3aneY6 q:mR-ɋ1} \Fm6`񵃞+ʟ.:0ޖ0Y뚊V׫қ)ZUǬRTP$}0Ʊ41/Wÿ>c5.#1ZV[$ BVB |$)sh\faW9Md@Cbzx&^fkɱ0TV=s{+pPɌBN-v`%:D7Ja!PTiw#Umѣ8aEZ$f>lv⛾}ٹ)n^oa3&9Ki(͕BJCO[Cs?=*#֘)OZ¾ U6b7DFdFm uYaŻpMv|ʾI`PCs( A+X…*c! ^/t/riH L`26?-FlRw7EG)5z1ڮJAW*KMPUGzn!f3^0h5'P EGh?[:ˁwRCЈB}ta+ͪKJVRB!4^(D*m| ;u;$TٿjO*$U0 'MK8wavgXoORr^dfdp6[ύMn۔waߟ4MN۽_x4R h6#Xb@,VLqfw4z.4FgY<$mhxeE׼KFRg"* wFVު]ТeP|=#Xf1d >%9n_GU:-[0Dyxjc2(yhPvSzO4eֽ'{A1ܳ )94b~E$u*2.ƈ=uo/kWBBywꬥL'Ԟ(vE3x pۤd! *|R ۡl2^d3?M*'&t=,] Ws; R7RHVGq" D )!k\_" uk JڊZ|6s18ƵB#^Rk6 :Z__{8o)|Np*zmw] |)4>E.SdBy(˾٢#E7gW"b2Z!ϛbPՈF.%SD/}"%=BnILu<1|hU}(]{U&[.^:5l?ZGma|M\)Ja+g0&h3_潨)֟@/" <`B_vgXb1]Ju,x>qԝ0%׾^Țxf0撬.u1Q}Vt8Xr );8!3 f0T<Ě8Re\JOfձ bbmU̇9蒩Aˈr*#_ڼ\-qi6t-{gh:Nz;sh-v"='SHF As> ðm<k+/ Qy,6 C*fHpsO'.)@R"(97**FL;NËT=0ؼ?J 5_JA%HحGbU-fas##pnX3Ը_A~x|G,KMŐT؅Z!}Ip(ǞHR|?74qeGչ܄C)ciҏp2G*jCѬѕ cG kJW/*Xw  Сy%NhѪ|L!,X WdDlv*4Xg  3F{̒8"?,3BʭPbaX,1;zh㰘YsZA_~="_}kt=rβW{ D잾T(_`>W8T*i[.#t}8k30jX9fWNK{(WYh>A3. =vv&[֖rN:\;ȋyvd#r%ԗ{i#O@| R%z$/)G9 |U'-eYCEV 1/Tk& Hg~"д?2#kɊ3~EujdCù̝] Sn(d/9 #|d!tb8 h 䡋1M]&)(pUK2Csn h|0o/O:pD:XV>I-Sn0!f>[24w'דan})48y[jҼ8$c8mQ*qzb:}*-IlL H 3 _QE<7}Q W5ڳ*~Hk>X; b8p8(-? %WQgy9GLYJj'꽝&tz<].i<vVTLy-lNu*P2\݉RV)rFgWCA操}C!R媄V Ќ0 aR$9lD ݒX 9,ŋL[f5傦N+<7<$+Ae9lދy(ߗnV8u meAR(@Ncp`Lw?caFuVY6-ΥSh/kF#hq͵"qb/%oS@}_ֻ| *oL,,x~+D23JB0GÀgƧu؉/.(Ӗvۡl+-mg:Ā[; %3=| B7Yhxda]0smycy~\y5$ꕯDDTͥg>,t B{H5{[ܸ5=|gʯYdҔ{EiGVKI89b .ݫ8q#V˘_Bz31ᤎifU䷆cx)50]2S*QA : 5) V퇜$_5kGJpCVC(~DA;\,}^YJ}±*F`q}\cRT1)z Zlojv͌[wG~e\W E) +7vY%X6+;*>f IѥR]-Z Hr(V7 T2-Sy%}Ah:>4]!҆$|#^ k"p1p\KPQȓ;"5@>O K8<}-WhLgcMlِWvܟ$F NJ?aHE_ndW1`w넱O ñNtMHA9b>56b3o V܃]=`I~2>kN2nm'Ʌ87%2IjytEag }3nշ>f! e#E$w؎#"Ibц(`C$ZNU1 $>$ހM~WꢲY[;1sru8(׈l&!ֻ10YޞMX62qnhИ~[_3+NGtw&C~z) R~[2*DՄ7Ymwпi\KuY7g 1^f@\c۰:֨ ,Xx;V(:C N+/-z.oz/Ұmf%2&"=ܳ4b"s!d:ںP1%ehphЪ]"'O]42 Wfjui84߅ϧ ]DLQ[S- 3F~Kn%u[yHz%Ds0]FR˞M_ ڊL6,fڦ0 g%௬_,<~ lӣMq}I+Ez1%>c=Sؖx,~EZC33(.f3W)ïmh^(^?X0j,Ü*}!"&՘7%7$T 0d6{r|t֮blNw,CeY_k Ɗc %se;Q\b'F $7y_m;T(yBQ8XlLyֻ)#0kT5-\QsMȬL <#f?( ƪDu0drW n,i6i})H(&Doyv_2Y8qJZґMV/aj1Vej2 t`_Gݳ]pPR<ِ@SܒRsa3bU;;Kf1[a\`ʇղv#K S$?IoZ2yN+LJ,#PnmT tb8Qޥmy_y 2V$'ohp4 f|QA"Fx5~&צJoP/n< k (*ʼ ? U#1Fm&et(K8S'V!iI96X Dq!CO$uo5:O0S ߿R_(3'J5!+TgPVEu2B53 =e06l靀,\a% `\G/Ge?Y&Iķ1ݜR%#1#L!PvD&=z!:$Z!J@n' f\5oVI^ߙoO鱿SY*7fz# qGPfBۙ)kʶVt1ϛ"^9SŚ39n9aqC̙ǬhupHHgX8[fC=ic?KY5W3R##NeCpo-~6 [uDDۦ|٘GwCbۢJS@ÙvE^0+ z|=Jh[,vԎnz|/pΥ^d0W(]ۯJ,Zx}T2BC Ӯ6hUplYmWW~އe*a#x2{^Fٮc9ʃ̳ϘG%q%ah3p|]o>\Xt>btMT G/Sk8rdXb%F9.5ʖ5;کѨuS5ŧ}ħ0-~7G34{D`@hvLTN !_ƨ]^ sx$buq{6[Z@hugC<{uwZkbQFMcsoru6X Ml*G~(g%FNTnfI\dFh2g,qͬua]+7a]rB<:AOyH`>e2-Kli1@m x1b39Egh(o7DTwaU4`zCDvӻ.*gs49?5ƪuB"Qplg@+1kV^f 8k?QncrTpQR'H}?  U·E a3>ngNs%Y;+OHB[ b%!%%r1*'Cj9 5 -f"h+Ak vQ$ӵAL 2x%$1l3fVkwH<F,%B,i u DԲry=[Qx.g NV7V ݦ^[Vr3a2ƼQES[)<̣xzrn(*z`pO `;ߗ9J_Ȅk:Ǽ{ uծ`4r: -[K d//{/bvnNmA˷ie6&F hB> t(?L{×tTfpl`xaElmuq(Q3 -LITQYՏOūͥ,e~+ԎWR2ib{OVa,Ԧʹp zJJɟfW~WB%xwцՕ ̱TI{ћ,"iy@JD nUY,xbYyn!^\cm5xc&$?8`Un!B;A|{"t/g4߀}CjBB,=Ĭd/K֖$0fgäS a€Ki>9`pAϸ JQCHOƨn=}0~f?8c?(LIcx=yRvAl&GQhT3Ջ;~W{ >\pgkA .FOW9ɉה2mM{Z$JO}cI0mDX#[Lh:-9'Wc\ PT,8TIe8 Rh]z roz؀H4V!d2E`2tr8ⅵS@_kC@(LsvWs9 s! [N$U2lZ0o;5ХjR]31-2@˥u4N{kށ-uw5Qq'({4wjF@WBNDIgU?:.5P>pV.b~* ~ڭa#䲴c3$'|'GJR e7hK}hɥ2q b##u0q=눐{& F\H^͜hZ O_>Z9=򻋈]Y?s}Nޏ2:k%:mcd_8KK&$ХGP)5s aj' {OʙDgFLџ2l(@0~CYۉfMɊt(Xm gʚ\xG~V"\o.aC@ve `n0# /W+7`dNkRH=%6OWV<_*Jri=LCBG;^ RXt$x; *REt2bZw̫+jx>뚃Dg0TGnHﱊ;S6+}cr/TfFfRó;h)j 5#W'R tjFK TW{[qy@"*<3/on4]:U@V qG>[f^Wcʩ{nB1W&,"pTf5oS@SWw4Xo`r|yԮ>ZS`k6=-gV, &xaVw +@zjTaRr+ЌĔa˽5p}p֮ V7"43fʍ/͒5"lci̓xʊcX R%"BsIݕQRwn}گڧi::9y{u ϴ s-2{aTp{|f :i;9K^Z@ᑲ?lUCtw~^1C@h   gܥNF8"ܾLR3"А \TM,C [!¡pRQ aTvAdz1Vhcؘ֌& TC"]:|AUEq5sxr= 7 L/0P6 ՚uYS/tS NҽX$'8i=JėIb›w >c6x{suZ˜ݗ\+Whs| % j+ʮx^H H{( [s# O-.x\9;"F1kwdKaį\?uf33/SP i=gj `#8£TU {U{y̔*4O;UG$ o]>9c+⮯!fVli m3-F (یP,*D hxqNx<۾vFqbv[;#\>lN2~=ٯiTOS6$=s9(? --~ү6BH=̡zŎ8%jvFހ93P'b~fPIh_#77GO2Ȍ9 9qDDP NR^jc4 ,w>}@v{ ӌ-?Rk/'}~ AQo~dF3>V9z܌smgKVyS6\Y_drL$ hn6+dw"z]Pps5 eZa!*D@خ{|qۮϳ҂7"A1beiIȮE,?kE25SOD#Vx]̆O_5F`41pZpFS#Ry‰xqȪDX.LOf`/WzKȦ;Ǧyzpthɫ|^u'§6n3 Kb' _0[ )nŔ؅;tܛW5N_@qL5㑋qVl"{܄0 {n!)ro}1"#)ׇicw~jmκ h5^ A!"HMk^>vŴҷ7j9~Xq4mv,.IH+̟/U;_ "BK+"b'8ӗM[+b0;L/$if,ث)vC:oێ{5v1_9 A/ ]Z8wtG@4//N:mGui mxXfb2-a5o;mWZah$> MQXaA^\.#, Mt Cs0I Ñ &uk(HޙZ6*}k&*;w(.SB5칱nڅG:oXfQ& ޡ(1J+/Lp~ } Կ)$VQh#7XO!ݜmY!!{eӉ.|aұo\2W:^1ꕕjf$5Bj|ݾEruZfY1ah `rc`/(X 3]P>2e1iGЫՀп;+qst]ÂV'kx)Yk!\솉u@Ne!I?RNsZ p&3Nb$HNr:,$r@̌u'*Ӹj,9~ 4 WGHX.izլjy "HmJQC. |evrXNVK!y{5enmhJb_y20w@r  ~67U `Ic@!Vrm&u4eR"<ss RH^Z;T~pU8vYYeMGuWq_;Zwx圬Rdpy\(s\!TiVD aO6GfNJB?K1 4֎/sDIS (]V7{2W)t5js22J lĢh /=pȧ)_)W%?پ+i[R9D 5redY_%g+^r!L)Q[<1KLw<[Xq>*Be Ӈ^1(+)ej eܵ?%=v#cf= [G)׈:);]X"!\wr$s&p`NtmE)ވ] &!B#>G $۝ey{eo:͎63r]c65[ <ؕc]0WJk ;;Eu_ NBL ZIu,S3BD\riw*OВs(wڻsﵰ k~`c!C RCz-Gzpc[eѵzY2\!7A.ʄ~"ȮV\|smg'%e gD-ʸ~G^TT[^y'#r=z]fn]gh ',NB?mSʼn(Gԃ,"%:2NIԱˮqjIt%HC%c}f~q2ڎtj8+fWiuG= M b%E7Wz%KTV4L }t157xLol)ҬṌv4́wt:-aRbѧg{U.y?C|,ktRA⧋_$`$D[K2Jx]@{ܦr &F8Q]֬۝ѡj \_D^4*g?DoʠIo~iH;QeAmR8{qQm桎rH9![̵Z% Ndpg!#(AG ?~-Yu[y,-2lcⅉ~"kJ4JgoQF ؑ:#ӻ 0.6'֠<vRʠ/=|CˊfA6BTS;n , U+rr&dd2i̢]FVb K]Z,|\zh//c"U,!3eROWӳy 1%Mcc>d8 sC@Bʚ5Ud緎Zyv >7SgjdJ[O3$l`VP͒`˨f2 -J_/?(KOCPzPRjwxM 5"Daѻ_JčO\Y"q@0H&z @Rm521e{qߖB8WDUgf_?/N[cvp[&wvHj,?k~|?ĺR8 :,o~ߙklO鑓?}O Om,"Ӽ=~ qEVbA%Ni5 VQBEJVp|-.HPFpZ4pmLɜaϕ YIALj*>v* O|U`aq?Vr<;kpJO:1CDQ[1@8o I2A+{e9$958$  e,޸- MC ө34zxtt&,Z{eV,t@S 4vJQ{c!@g60u[9\U>Qt̏qHWAJdcPiS эi~qE=#`5\IbnDFW6'"UUsƗ? JZU]iUݴ?1=*#XqGX^{2/;Q?=#]?)~em8r6A,}Sc{5nwxq&[Q׃(+a?m3(1l?h$9"KQ /4P $EA\jʹ 6a}7D*[W}R2 l1K&yّx̄APnݖ ŞMN'S:Rp }14rw;aXe>Su@'xg>ܐ`E89Y)ർؼƮi!_pYV|B zrGMT73!5GȆ9*u!HYEPޛ]Eҕ7nUQXJWN~DrK)oZ5=gݳ9c^u 0QXma"a{]Ia,]?8J -2G dY<{(ⵥ8r/߳EU'42W:S`$5K͎jm>6@Q5v9r'1a ݥ}zLNTcBޢ.u&l :~irqY^5rwA*rI9xL-}M7u uþ\17;"c5R<9yb _Ҽ&A ˡS2.i6Y)ԷSIlB"j5©IՆZ JP98Mm^F7m, ]bIɱZ*- =gƭzv61-G VN)q ivx|m,TOL;\4;赽hl̅8DK r+G{h6# Ti14UUb5çgĻ!I>."@ܬv b|4Ϻ~+ZO!=x{)SZcktf3͂Ŵ~þ801߻M6`BjR֓x< e4ޭE4B'@+M[Vw45+ZfKXKpEi~^d?# WvEtFzĆ愯+IEױNUyd|9D4Qh1qE:71gܶƳ6x)D0Ǖ .b/0R'ʀu!Uno$xyS犨<,S }je?((QuJ^_0ӑ|^ $ z< 47P ']aa9OV @ChX[ y׈QmhvIgg9fkHV*$ީz~vxL|.pdչ6u/} aPv:b`hNoeWGUם4aQz%4d*:roITOjTG~3λ$q'0Qm@ȚӚ )P;h}YΠU8A/h\$ZArJAЦ|D/tqJ[=4U^ڪCe~%/(W\gW'm3[xJ^M,GD%}N7/mMcz 2Ifn G  AXsC.E8I }u(!|1^}eb~h]tHeU3)6F=Tx1@xehRLRQA_kIɷ=yLOwQu|Kkt?±_. 3D=+3eXz]J'lh!`M3-q&>jGk^}!+I؍[ xgwԮ3(S'ȁ Q֟s8.{oO[Nwu77ފi)F[MVCK?#=Uڝo*0oåB<+S~;W JhOO9=HNy?CTtsKhteI ;' Q++@'K%:dR$ovqC 9SAdYB'UZj_\YmE۵{i&PnFt斍4}񧎳g胃@~pSǛ:Fc^k`+E^aACeCT9x?&nl款YV+fw}iyEP8ѺA:*JxԢO0/ZɴEHx*ou0i*pmŸ|pmbV(ػħfYTzXjSC컾0n$ $1k|SFy~ϛC߅Q6=+nbg1v,38l1rU rxjhR:0iZdy4Nj!Yfĺ%"0z YtA`YI㻇9P=ɡ.T\c3g̰UhvS3.`we(?{&դ[Xcܕ_:RvMtCs^90x2&޻WO 0i0j4=I'X㩥-"uaǬ db.H]1_GVN^j>/͖;2x >iAFcx`M$j_bJp9Oh!%̨*prk6 aȳMFZKR{+Xσso@;XgzbeQ^j?:6guXH93*'A } g:wA}yҔ1zWE_jZ5?WۋntLO_'@ymd/%gB+f2 Bz1ln/54%6_(nHEH|[Eߩ휅KM7-m N+NXd"ls$)/XҜ.tPhuG]_{\|ӔZ Zm)m,W02Z%b:#1,DL_?袾n1жa]& WAF}iI9Uc~Ө[Ms`Q.c<鰷чI N:wpB\95{U妳Mp3sGLoҝ]@B:,R8knᴱo"ӄsn蚣RRY\*V`XbskzB Q.f-6F@+3)e-RJ%*j `8!Ct&T *7ȰOFzϦX6'Bu면e_T@dkQ0kGN9ec$\i, I۵cTZ:#7+|~8M+T, 7Lຶ÷+e_@JM.ܐgl BWtvfc!*oPDЁTzCT4=gUM<!Ͱ ?Az&gBf/gڙ7t=;۔ŏ(,C<%*l'."G|qDi%RL2eFfV̔끮X%~@ܕ9e| qB}L7nwPTږ,O?AʤxlxmpFǷ y-G 4*^4Uޖ}eEVQ6̷5@ǎ卶h8@NSTlDu<$?:[t6 DR;f8q63k84ynfᷖ94gA1u CZ6>o02\ūoKLC <,袟r5Ww@ {Dr髣ы?It.[/2Mul+o)yY%p%KгA1s+6g q8@;vNNat ".?xjdxX*?jyjaCE!<0g@եRRsV`mݡ 3-{OUDqƖ2ҼFuEP]J{5S2vxՓPQ41"mg7ɌшP]m}ZhTr&vY3)?&rvU2ebߖ>'Qyh;̵|4lt4ĠD/;"jBwFS(l( $ذu'}Tlcv0wƙw='0KVD@B?yγWd"Wۋzͩ7O| mlr=4ng>$흘Uɲ\Z|&͡l4LkMvB}1q)%M~(t x&SpIi>X?Yeqx)dׅYeFӐWfMPߓ&ngxcv'4> +P,.uFppF Z@Y>B>piZFYd<-wv.- xUn?o+v1@;/_voru3z'rx %K)Hb&|`%ıS4.S]а}ץic`@_VR3A[#')6C`O=EnE1AN)%.ǚ5-0oeu2R&!FW?j\E$6Αp\1"}l8k,9x2dK90 f-0S-'ۤ F!jC~!g;F&#p*̹-7Y㱨~9vVM[ok\2 *;ͻ<~aE~&Ɯ$H%u1}C[z3A )2c~$=VN~"І.j:&6f}<4 ~׻X1//AwK@s~'旸Lx<G󣡄P 4ޞmvdK ?".~BE}FFb'74TϦxԐ] {0 ۴(^*6a<+)) mNqžNaFV=9[wR"r@X?ϖ~~rtV Uk+O<[ !RZON93tN1?9ejtFY~`+BЫoܵ hu[F!o?2If[H+ƲVY \XHG5Vlo&1e= †Fb?3wyS KRn5ĉqW'y)ml~`v};*XZ(ߧxS@/̴`BmRC)@^PFcA4lûlyAKRХwH +g/{i`tn(m Èx#ǫVKX;嫂;5gZ `EB%qeGwȆdJ2 R" KZM: jTA:: tjI;U[|̋iFTdzP돥D_oCq}zJ{Ósa+6E5fv]9l 135!Y Ρn>;3PDVHj7ly&k:CZh  im.@П>(T@B1,z1Xc@9l# 7NP֬5o*22k-~7HҕϏ#c)i4dn4L.SYrA4o{]zu2"qITx >1Lgg3D-Kr{gQȉbޑƭҘ0ƥSZ +@'~$XK\if(teW9s2np~|dg~DNiXu .4 51'T/tUs~eMƒ9 kP͋4x;}I SKb$+9>2o|:J ŕUC=~+fJY4S6>c!2]9F][P7ڗdl(rT5Sb}2B|q컅Aĸ$fO9Cʆiet2i0t#RsmyK7RQnkXQj}$i[}uv4,}ևiy5EDkKТ<1QKϵXohUtTyH`ݹ5gR < E6@>ћEe" {8dp']Ì,i }78.O8yt*P5TLqEr? c$/e„álN!bJ%:#Ò%DmnSfAkעmMQT;G`լjx᳈U_QeTBvחXij2[(^e+7Amʌi[@ۓ7J~Z֏@8;a 2 #tm;=}1C?Ğ*kbX5#(B >!4&Oϻܞ/ TřgrQG̲4{4ht9w}1avKqz*OQaZEϏ.Ğ' 7óMV[.R*짊1^H%1a(E grFkHDB\ݏ+nǔ[JZmVʃy,H֨.#4%Oշ }8gWPB*5㞝ҿ0{.B"ōK=\6fR?BЬOOG> ʏrT/!78 !V6AD6 G✔9i\:)Y pA^To:L@#jqi] N 讔5Mwx?T@'kcL b?^p1LnR?wUwvgӡ'\½ߧ|o)ʯg [qmZ{8o;"nK=_WB)y4i&6 be"= EjBf*lg$n%mJ\]_)HFQEܭYSyx];8@SVM>0a6i6Pe "jc5M OѴJ "ؚcԩqR G'CД NV/f3T.[Q"%l:fO~le|zSW6ſ8I2i'^އ+fUpYeڟ~h1) ubZc Ǟ6^12KS~BPxNF@t?E(չ/b)QqÓp"\Uz(@͏JRSXz$~ {eEJ# >lI!͇^FL3}oTb64 V++fHvÒ{VJw?ؿhIm)&:q5/ipL)ؾ=Rk̕n3?'YK)s'p/BC< >wH4Gq%nX Ƹ+7= 0Qlp2{&9 ]|FVVۑ~q ]H'S<<^9Gp/s h-$=B{E 1)q@/O#Ni?]"" Daw[E@AeZ}pJ鉎6l#ӒQf#Mw [.yQMe%v\[V;ܓܾWjl Mxؾ0;+lYpE5I,kGF05lEhYmaѶ/p߄ףlb~ 'KPoK@ -Md|kմ8(ٹ0brU 2X f/9wi?lj0e0|^ t(\Y=5bJܚ]aehT'acrɇg cRt*޴2k^c1\l /nΉV;4"&u3$ ldp cpkQ1`tEF{ DtA25f Q\jJ^=38 O9g#a=jAo+(NR %s `R9㑼y1RMF&^̪UQeB| ߟ 1a,o(6kC~[w!Z?;ނmAFllF/&v#f*EhNOm)(wAuj"!YߝRmۨ&6 8:&jKg2vMF򏾭}ZZ?C8Xxm<oLzxLT~oAxx z#{uʖ PжJ=w9ns!,fRM2rl}v8G219h+1͊0{H_]Q5 m-})w(9Z9.&ŲdV&y#yV(n[) b$[&F@cYcy`bw՟k%  #WY2{F(ޅgf%1 JEF_!ZTĐq c@jOU wěSlm y8u\Ɏ2V{аw|dwLu(rmjf%⋴t9's0{ FWry7+gBm j:gch?Vyep[w@ xM1l;t! [6 ̔f4"!%CyS 1D*%ˇodqin9]aU/Į~ M Ek3R SE`@"yW'B8AnD\kکN6/DQژ"08/m)s8y"LoN5(yѿ\}/eGCZQfD%ʖ 8owt5sNt"Lq 0.)LѣruG "+* VpAz߫ĩhb3 ,uX<]Q_}6$;PPڋ8f=(V~nۄkx‚c D1Q[mr.bQTﹸ;϶ [9KzV*˰[bu:̪_MJ3u) ʯ"±Ў.ٰ[Sl)F@QL]wV>3IH:1pŌ,d2{joVy!UPTaGk.i^@p~\J'u>F_F9H%2?s/bOs1{1P ",h>+l r>@,),F2XE<e?ܬ6jV-;m*gqߘ B.#r{ l:/qmDEϿi oIҖOlb KH" [ZC> \JV4;#- 18*'9d9+3o,]Y/p.50o R/꛹T+9C{ hP Pln.¢oБZ?-@4 E8L'zɈ3IˢoTs<*;3WZrkzK±*Z{d&)b7ۏpNi~_Ĝt uLJ[zU-9c$#b7MViߠva(]BdZm f[ޔ`ck'䳟$RKX$j?4H":d{ѡ{[_IɐD /A`U:r=}xPH^- ^|Iw˥eGPf|Pg Z:GTWGhYzuy&Or(7uRžRu3*..9~߽܅!΂)Z^7E7B?*/)P0evtM^m-3@R"|62@XgDd}E=k(8lE3lݞ+/?o  irޛey}*@] `iO XIfޒFYh~L{]c %[(ڶ$F+ryj!QiMn#TI]6I-Qz&{t:k%TR~U VWKmS:B}QH; W(w5wm r}Cae_Gt"Z8)<6}'eݧ8%œ?ȸ-Iyȸ.·⩻H𕚌\/4V FoB.v5M@T*wquksIE}d,*(yς⧶mS?xrx܌}Wqy)ǹ$ܘ#w6#`!.v ;#赖 \gu@p|.I G8NQ bLhO]P=~rhU).SPf .ϭ19tZvNlFIa~PhhؓۡCQ饄ǚ!5+C;GWV?(wԵ5gw9\!)r-m`w.]>Fw66rfA9,wѵ< i"Y^d!iױP "&c|ô]6jҶcqh$q&].( KBtD=\E *\ -FDSְ+B`2Q&+33#*Х"8`^vKjv1OK;X\8'wBbKh048G_w/!?q:U]r L[Wkmf!`1=㳔W3|yee\b|.ykZU \,SS;=^!|hPHV&F"lN<;E$'jP< e/֟Vb1/ɍ|Yit:iљ&vLw/3󣴯/։!^!^ݥNEvm^bq,^K,K!-K("Ǜ |81)$VqCaX>cb1>ݱ)``945Db΂-VQJB05NN}&KX`4!Y#BEuqg[+,M Ka I?[,{AcqS32{=@dz;T[C_gv$x)ժfڌ3GKju4O p~&-h{R^Pyl<7[fdDt"rM _"7n&Qʿb(PYy#oBK_ fYp**039Q$#rP٫NI1Fa5 -u㑊7^9m:ec +Hr޺'E6+XPK`eI9cxzb;줒$WFz+m]Kӭt᡾0 bB>w7+0m>Ц`P5Dygdf ;D1X_肖«YSWΗEf—`3dsY-3!&$:6"8^6u^<=?}#f%Z G1&WRCoTz_#k`\DIxy3êdªikn^uG;RԘ3\tt} ъ=,TAZZa1ݹi\ktboe'fnG+6LO#)Ӱt(:~(} `l9܏sSNKLbɦ6}My:&/ZYJe:0$/4fʂg=]}/{XgǪ^g=yuv7 3&[2a4 ؟z qJ&v]]=a`)qŢSlKaW3͘[>MNE FHL/nh` 5I_;M}Gdxv{TR[i`v,%pnTf(Eprw1t*q¥Hh0/SPt޴-`}섏.`y`nhO)VL,[sB:VhLVS|e}gW\Y6м8Iq[hLB\_0 Ӫy9gd/0Zr?t5 3[do w7P PNAGR1uxrj'訳6 mvckQ(ytZ-Ys^@B4tyhHHI '#<_&?w߅;gi}2S;cpךnαf΍cTDUmcT\;ʏ iȞv]s\GWr]Ҏ[seZ\5ġA3 |P;^Ҝpk=Ō§4Ϝ^1>,n`L#cYaI;$b{dEskX9硱<,b`,KBѡåՌPE٨HLC/m2Aa$YŇD\**%)?bo~AW.vH.@:A*VVzLb^dbdZM,I>7&f]cziy^GRA`O\:X TrErcb&]$ DD=k(wY\C]'  xY~Ӫ,Qf!>{/BXԽ ~݈zbY:1le2%(WέC3S,7}]8> `$d dž_{XC]Qw_b[Ս^q6v FgL:z!L7&d<m,6N͗DM]̳A硬Ķ$t:*'Mgj=L)Nv ޷"hP=WoZ6>h*B!,kW%eT,؉._7dv' j^8S o-RpqwMڦA9쏼A{&R+ZYҌKZ>*XTHAuX H(]#-1oزNځGLZ/:!15 DڟV2; Oal˥XiH{NVaz E>]>p>}U,@ʵQ6-~j\fؗzKF _W(Nhhkc)p5]y%Aʕ.ĒZ@C:=rvdXrgUMFl@H[P3`I\,{SŖXHTG:/ 8}]$s3Iy2P4{,$:TUh #lTIT~s͸#1IY۹-LBd-)ܕ<9Z/WYA#dQ1n ]s8 }&Y!kKerEK 3G1q'8(TbP^$G50FmdX v[>#w̪t;c_82(0y3r) / 4PU^]'o|(Bi*xqQ 5T,x ;5#7/zGܸ8P1eΚ l1ڠPebb"[,ѓ f ]h˓x.; dS>{c*3Z!Hɍu$z_T%"J>ܓ/){pb&bF ZZQnT56uB vnʺ=)HGGΕuv7bQ\~WtI`!dӂFEe_ÜvfN4!5Tq}^8^ZdX|h!L4f%hjcO-pXAsyLZؼ1B#+")ܒJZX] "xGSR`X͸W̞kp jveH)y1 T@EOiܷ`m_JEg<9L[_*.`rP|)6+:qQiA | &GPt؇Դf;d+=7OfTkolkdJM7HY },,%G%ε}%M=#fz,EWx`63)SMYikYP#-ErEwt8;7^fft4%!ֳW ~y;,mxMb0.r/v@rNJnr|?XBu)zOLz<0eib*|5^ Bۺsr61kܨ+*`@&uZY>_z˵eiĚ% o=7 H@C|E&1,ˀ㗳\CgOtJD溯ay y/Lo %B]g݋pul D"i`?ܬv_c3)/R(I)@z!&/*yX*{q(wZ[F0:Cv֋*"r9 R+ ]-w˔ ]{@@OÇ|Z[kXmxS*S7)jG\f&ӫꂎ&L[)eDAZ2WZ2`p]Tu1uPxd'abE 6VNQ9ƜPӖv,M%8t+QǸ+|9-D&I`vӺ4~r[֜Zt^xL ]5=fOb!>0T~DѫU# 2zqOL_|Sx1qJ-#+,#Vgu: QZ#dp f^gF]=|l8;^v`~#`9, \G89QIhnab`Τ1伅SpN?YN%i݃ŒEGͨsw5Aeޱ\GsTI& _dApm6Q}crg|k/粮f̢krz,/ $yya#8' YN?jsTH J4[_w@U8a@E,+BQT ơ=|"G5x`JͿ\ uwŨ+ nʗߎ ZX(m ߠfŢ+%%srTVROj\c|iĉV$%=0of{APq#2u6-fC䐴-pUA*ͱz~Ex_?)QcU.ay!Φ/ΈQ0b)SJ`aM =EN /2y;#xR ud Y Kx)/_B4  <ڷ3:xMw3J#0~bnd/uQ7f}.5)Y__##74eJl,)=`g4A}dcsp:v >3GAig%q˧vmJʜ)@O5YyJP8~֩LklWOXBwڔvbѓf /XH-AomM5DagRdc Ă5_Wk‡^9Vp4gɴ=ULY0nnPEK7)ծ?0ԇ3Kkz$raޡ23 `xmKyHs?{t( װ x>[>]?]Ɠ7݁,㴚J$ &HT.Q(*n}T\Dlp]yҵ :<#q4(nGSO͡KXoϫ䴐yXd 9Z'iRЅ^NٸY!8 tO&V}t74!b^"-/l`5MOw܇bإvo! /V `$^eeު:/`")Cԕ[꿋x?{VBaűk,=SN,Pbq+ ?9I1?Ze#H5A9 }eNov/>S} ~ զ5痑9qk[099i ESb-o=p7h}χop qolٗ SC\R\~!/y[}.B]r*<&[O&W{M ={v!$/[&oJ!-~hD4 )쵆  f3N,#U.`CTH\K,0WThe_9`8q9! ??=|ZvL"ǜITѸV;.%5\qF,LJ{ .*)칾u6c%7\}x].^iH:QcLXӄ ڗiỖWŖ(;e>? b٩pߡa%mSf.l#-2\ sK߈~/xzuI á%ҷ3h39[.+F>_g(t@2KF䚟C1}4r3@M8`zxd3*W [N0 Ý@JGLYf(0}$/Ysi;,.ȸ n6X8a)wﶘ܅+PґHU3JőN$y=!@cˢ~՟+9o*4謡Vϩc! CV-{Dl,G֣H3$Xum ukŔ e;-FzVU Uk*søg .u$vtL@[ՙ}1!= I*jjk#&zO'XRٺf>ka(yF }x !t~ܕEFC4#=[ivb![?[Ȅ(Y8Ʋ"Dn?S8}. hp08g6_?<4buCT h }pi+ڡڭ5& *AC"^T~s toFEþ Rѽ)8`ݮ8.*$_@up"nI |ACݛ5ufoהֺKf+Ӽ.0cZH)c2;ɌvH5<("=S4 1dDu֬,FsQI@DB,Pb% ]mAmuݡ3~OjlUlF*4^ɘdVs,*]!p.0+tQnuUs< Kͽ# 4!糶g*mg\3 ȝ{(Ԧ8e<8ļCg/;b$zrnŊŠ'NcmqlP3ȓ._x U#=܋!&BZjò[ZQz[^v _gP/I[Rjgmؠ\VS9ki]w1;d>u;,Plt)ki85Aο [ߣ.:?z;k|('E}#&vВ!G) ^FhIp8+̄ ()3>$Qa-I+/b.֒Mi%rD#DA+;8}? r͢qs?B)d@>؉C.={?Wު &qeT5~N<\#ԏcɎ,xT7+1 ?W*J(/c4 ?&bDW`H|)p{7rI~,n;/8[ vI]rOC,톹?!W'Y.z,"4?! &gP|!9*U)VCj$7Т3p`e.֮FÝtϫwz{ Y+e |&D LwSX+Aq. yOuѬk~&jRئi'rӵIƲ&e_~5yP̒7d 3P94lC*3X ҵl a:a\>*=MD 1^nۀpD*1c"1|F/~^?O=XFo2KaX^ JN$L;8hG>H#ZѠӉ@ @48SX)qz9Tܿ,s~ r֤Vo{wW^ ,9DwA F%T&4mc;o@0қ_ :pq wsxaBiTir,ʚ:&Uu~0:paKBJ}w*(.en &PP\/?J0d .O\Ysd~̃2 Kl> Z`B”{iST6j~޵݋mr3I1 IdD_Aƹ Gr5 $^QnYf=1TypA$YTh.Z""lmy+\>/}us.+eKJg6f 0m"wݙyfԁR=gL>9 *σVB^MO#wȧ;HEÔqjzL D9F B̥%PtA{0jˣ)\Fy@4 JY^g%+TRU[FBCLi ApQiyF ꋤ!pwA"b;5^P>B*S|L (er}W鮝_v@P̂ [!ZS7W$Sʼnٜ:~/sS#җSs?ەDߦ粹@e9^spÏBny~ oN Bʩř#;bV7HCT3M4~I٨|7͙G?=#/=KAQX_@'/ ,94zdRR$2sT#S1@5g#lN9#G1MP ^ 0?Hk8Ɲq ڜ~&N,"7✢o=JʈSb6'OB.a8s3NZ-(1s@,a$%]Ƙ8H1PW߼ 6 ,lBk9̊ oxgY `۵ҨaD1Ƞawv(G^z2Z"w bt׈ˊ8s1yPYgs/.Mf/J{Q|^@ÔYu\j88$AJkl6)2^\w(-Ї3wb-zϞ>v bĦuJ Scg7J{,Brf]B#KG($Y:=LOt3'DCF/:w3W`ա?-Iwʁ2zJ KJfU8iްdZTgKhAj/!pSU7?xUJF;WwxeATK3,kfg2olYε27GQם1mB|?5[qu@`G wiEKkT>,Sfjz' 컍y=&Z$w ;/pMi*:&yHls; %(kKw_I^}/]湹1IL(a zwǚ%=ѻZ@kb͟3GS%-=.Ũ͙F"6BtEaX}&3ي ?rrZ Lh  )q a%FkqM/I XNy=c/pa1x4أ9m>}8a!;?AhR.ְ)07><ӱ2ڻC_"V(}sm{$.mE@m $AneF)st#7Gb oҝFSCrv.#kSI !*`~+_SG|%]]GH%Sz>J\j+YѬZL7KB2Y- pŭpa<[MOSdYg L68w4HG3,-bOUTh]Ig8 |.4 oB!\I9QC!00:Cа~TpPSY5.@3FA*:(~%hܫAv\\gt`FMFOhGʥ|JL6mOu9gPFױ)Ao#g-( JPvބ`>e5oc=1i?>2_M;< :bn7ȁ(W:7x sU؅!W2 0-kGy/ؿQ]\uV ʉΌ+/w@|gIzW>=lhP;AƮ{f MX,JP {QqG3F1e(M\CT. = uu*a@_Et i \SrXzueyDI}]Miyd,0Jt?_f>.U]O AE92et1 GEW_za3쿴Ɣlydf+^s8h_v ;i]z7Vj[lfY[M9z/I mJrdCy$7epͥWj54u:xnLi- ypo3GYWZDMILPuo0K_tP?WQS}aٮ5آA)LŅ/N(*Ę%f)*j<3I+nOM/=,"1AJQ{K&k - CwΝ T!(o4iE#;Et \]WMs1xNMMS}[%qhqآ XƼo套ȁp_f]һ@)8|Qh4̦0&ϒ* !liA iN)3ATPQQT>-6?jyIIl#n;{|Gq/YsfFI)'H3":5K_:ՇY$J[$}N3<1,;YWϘ=;6o8He R<%ƈ۰-`7%3 x]fǓ@-w1qx9Fc-|+v+V?g_ i% `ux^u#`'b $ˁb2R7<*LгjU[A$o`@-¯(@7yF3BgTL-–8tݜrbfwlPgo;o3{.-[DIx|^OA}6O{5Ijw뜛kҢ͂v!~Gmy3`cG`W4ycay gWkvF۽.Oqmʙ5XpII3t)PnG ~ ~[8`5ϔ{8-JjJ-ۥF+s "iaČfAm3~VW-&& B"7;w)X=kvfg^ UyŜ߄t :fQJYꄡ6M::#a~T\hLl^+#hh-,4Ʉ]sތr~)B}7CI2<-oAoPO lO(2r3r'%Ѥxӻ؛ɢ ˹$jpW),3N{_B3?[s EmCB%ۢWDWna0$͔s%)Ty>hVv ,tѲ1a %+plj/IYhIMY Zlzdz䀪(dS'=~-؎ޝ <ՠ2s`LC+Y֕Όn;P:3/䐟FcZXF ]+xL FC]zئLa\.] 8S[L#eߋ'p|$\fܷG)-kR 0(BXx0ԃxz3J8|XCL Q`Q>$CeNJwu_4,/;KhpiJ3:_i¤aɃ{1t*$!CZe+ƣJtڕP^y%ͅegb)ucx4\A OJEc| 堈9`)yK JorKN%k~ !kPHGGeÒl4YײƛcxrvxeZ1Q2 ?cU%$G#D!m!YN$1`\HN -O(D3DO7۬V%Z@GG*Zs?pFxxA"g7SFȪ{61Fn#49ij1:gje4VnR-.bf Q8}]hab7ѽQQIp#\'SOSo#!ogl <7p{zz?ӿ *C23bHg3po"3| SNlӰP\xSÉ!m5KSR Y,ŗXU}c%1>u"/޾?ωxް{!x > \#]NMGx,=gDTpS-5T4vq.BO )=sjGǝ ^W2t6Spu ns n{a\^Eflڦ]'C4$ѵTH9 1ɚqǫ ME^vP ",)dse8I #79P?|rjI_9pX#Y]՜;z۶(*we~C=Na?#g\u %ՔkY؍ᒋKan%$ l*ώM{OnNuezS1{D>qܼ/q4GmH,g'\t lpA86Ȣp#ܽEN^6і,d+ߺklTiK}Kk\pwJ].kYxy ;@,$C=1O_eiTߋrq zUB"x|g<ƿPZ[ ~@욢x棖:*#E<,jmg sζ^_TFKr4LoU[~:"O%cQ{aUGNY\d`ve 8\fc~׫ ӀfS“jcg18` `⢸\"<bʆ#s@yuB+8P}ƈ mb2>S!e3Yº℆} gZa&!lrJ053iH^ ,F N &"ޡSX%bΉp7 QbIrTlU\8X,tL:ٲ a6A!P|m*"i]7lc&iQm_i>+մ27p}/Sh q_mMm4j"~DQ:w?&U>ѪÜFa6c7YGw&=$E8]ck xYoxMMJh1m,6N/SJk=n@")<` v y[m$~#>7LMhER|+$Rc:PԋF A6EHz4PcԔV1bd}mל-ŧ[9>%':}&׿ICݽaYbkqcd١I&@zs%^ E-OtV JPizEVGZz-/?[,X+#Mٍ[%aߣZ0r7_".,]č~~J_7 >m}Ȫn›ZI61`A ,Qn[-(AD`q77m(LpR^4^opxf ۛTwhkn~=O Z y2H3| QX_[$XW0*"Ww2 oUxauߡ%x [mX8DvrE̊"_@hj7-g8orz;M]Q;OqVB:1v `T?xW[= vp]J6o2+j1{U5կ-(^HiI9 }lnP}~Nޘmn9 ɭ b&u@m{#*^sJнG܄)xj щW8E]b;#fb>w=E qqV0US\^tk/R@$'U36w3xd+i6 41D0 os6\:ly^0%TA fcqIX̑#m-fax IÁ̷^ Qc1*>;pj%1n>K'#OdêOJE_mI0~=L7qz덿,I4K L l/61uk,f#}V|( 2ژ|"SOz:P;97d'k ^׳<T8f4 ^ Zئ[*zZ)B$=4ʸVo=to+mT@fT-㐖j3t^K㜓xt꒺A ;q׊>NzϚx k.CSҋBϗd{.ptj[%\ȺgȾ͹}b͆Nj|6nCosw8,=fl7k<.Ibszy;|oj }t$0PTSUR䐗w8P>$(bE8yn  Gpቚq,8K흦G /dB'u?vf67UE`xk) P,8s?CP#;225v>梶ay D6,# -R>I^a.`d]''^r tAk!aE.h`OϽX g% ciPu+5 +K` VB|ۂ*gC>#1=Ljpe^`wjsƨ zގU1=sx`ݰR/q8_=gO{! ^Kذo98 ImiF- ECJ*Fi%Ȕ!J W cI ړUrƿ0gf,wbtY V٨pa>hѫ[0R%?$Cd>^MTWs"f=-t„L˙+/X\fUKE5<ʬ'w޽,^@X;*0kTwZ.3b#fK(wq݈ !yӌ%HU7A'Yx]:vƃȉ}/7ik bM%Yڄd_leZMuRTf~dKOϞnGZlENK{ch+ sJ_8鼰+=Mh GYh5 *#g+omX %$f4GRǿ SncNmcN`uƜIp2Vr9gR?;1겝Ļ*:5)ĬIW#CMQjJfB b$Dj{HwTGH2rˉ`۶[au}QބwF]>#xv(mO p`w j3XL9~_xCpPr{,KBp;rTw(XzE&!m%+'bzdA#^8OQ+çEɝuSTNiu$XcsvBj 󣇆ʐ#ރ<`i ϗbĝC?&Ֆ _\cgmȬ}{OLRyKQe6r!0X/wfd cꢿ'9\dkKiUBoگs0N5 Т]H̀kfZy,K` ~A/=G}suケi흢9XhJ$8fuw&}alR[pt$&&'hƵg 0kUG 4jR๋x 6ˁbϵ֋צgnCLɌR5=au]-W׆)]|>PL!pat!dHC݁XE}"ML-qPvo@g .)Y uT9#$0ys'tl#\p[9ĸ%xR{ J@75ih. >*!ƺ,5\>3%h,DF/{߿H K) KFqI5c&S̵yqz,4iD$sㆯ5o h [ȇYwovZaWV*2cT&VUn%{ԸÑgA20묡"*1^=F=1(tXHqYw7GTep6*D 2@I%.2yN\%iBi ѳۃq_b?ō@ s ryS2;t' ;x3(+yyK)q {){/9E{l3V`C0f:=SO2<*h ߂ٜko_&Hpq6 nDxILІ2_CHWB>W/վqsӎK \x Fu> `=?>VimqgLa H'ӼT>g3TeϿ?rl\]4^iXju{'Y_Ԗ*dI뭵UUW$kRb y],"!KXb/,|=*c3rX/ _]r* lRB2 aZJul\Yw4~Bz:)NQb=@_fI|D .Ľct!E;c\Ӻ{O'cӽq(ѭDc(Kcwi-K/7?‹e`I g0+;Wi2y+(L_) of43EA 4<ۦ,=:]-7?t.h?͒U2$g!6Al(#cu/8 4渓q^l]x:fV;&d'(sLICȲJqiKD%6|Hj~x{L:,=.$?.z!AU"+gl]Ir |: +?6Fօ6IKjg -㉁ |b'jrqϗYaՃX\B%+ǛLJ"tcs_ LA"6U?couiL,8kls^z}B:c0 ״P NFiWR 4i!qB*l ?D9I TMlBu%/1Xg!]0#T d~;bs1}"h̵2VS#[)gEO߸l wf &9)ڄ"kFƑB2?9II{# #˰:g,߿@ +xWu9S;͊X@`e٪f(ԗ G_d尚pߚ:j'H0NJxd3sP!QKNlӟOji(?̒֘ʉ$&iЇOU$%z0`Ni /W]Gе5wڰ!c+)uvLca_] fxrڸzr )-mS_Cfcڞ^@-?B7KJ;spS2X6c؏3zM[5wS|C?pw~tڸDk(C?+Xs̱&:ff9+:+j?jtx5Tj.9(:BI%PtC邢't'tѡ숴y@!B] 戴ZX5%Z_<:ſFPzHd4zӑZbD$T-C$&˙pu JExN;4qV$2SO>)o?dNCBg7ĝʲj Eܹ %&1ZTEosT yk-^ǰjŘ%,FVf/JkyZh<ĩ5ӵ+m}k0ZHĝ3w83·rws#IR߸@p*-AZ$-JT:lt#y rGĘZFzJvIѽKl5xiΈHOQ[M-C4(Qji9SBOD  I)߸-Bd9i~T^G d_>[~Jnf|i itRh 'Er( ay.J80:Z45O{w-f$Vzq2֖5˗n{%:֦ml@NX}#,gBcFa-{3-gک gN~0X,ӍȺ9Ptz))S7-lB!M(ϴv*CW'J17kD@i~~̲Wj2EZt]BY4p}U;bV+GU -XqJj'w])h~j #L qkUFMә஗?q<ۮ+%|Y`s=[?f^WAt_I3 We~,W/=)Յº楬`31ޚ%'g ,q?(}wD0zm#^r՘Η2Q8)hOʎ/-ZNyó,pՠXfNI] ,zO,Щ4=x'q4>Vy)I"% *:gvuJs@|Fj;g@{*{Ap> *}ՎIs& *.2z37 fyܛaH=\XKN QBkL[!5v|}Ϧt D hߌ('ˆ0"UCYZl<66c $M2 ve41t$7q@ˑiHSscx |+tuu4w-$Dw'rIz^ q:i/5n'>M#GR0}m\mt q~IVpGz5ˌRm \E,Zg͈?4QT} p0C: z9!*~@EF hEKЉU^wJ_L[υPȺt3!!C2*9A75uLe  FsrQ]ٖw]j_B`L|Ԇ*]KWHCt[lCnj!-i/p It3/4zi @ ([6VK'p0>l'NBͰEv/)wEqhy֫ 䈔-Ei<7A*¹VMP  Jزsv͜tf5P2ABLǒgxx;)R9{CVt V#2g{Jxv\8 "4Zi%;Hd#,s:P$3{a@] Dl3PqkT%Sej69l2U ѯV/DWzx{+ߺ(*OtV? N ؁(5flZ2Kv1nǎǚOshOJS[y=E-^P쏨fOI鲾 Οm:x@X9z82fTmzs|h+s2" h!-3nC7 {LBXMfc$+Dk)co'YyK u^tE&6"̏F-a6k X. lv|y@"v&>E"]˪Y6g.RYI}rpR*KȠYx3dTB-}XLҩ7֫ݰ(ȋ /S=`p Nz(_R<0!v`qTéb.ci2/KCIo8 Q,eGTTw1NOZ8R PlgP(^o+gDhB!SvZš# 蔠mXX]\'L"vXC"=A+R3>.z;n ktʶ0 v=e7C"Ϯ~82Aѵ*"/oE#STnSو$CK~GAl?R8d_26 PJʰi9tʨ{RR H3J B}M$t,Y~m1Կx\fh̟ni/syx qu7eh`,`h ,6[KﰊK|v}l˱f\if&AWqGCC%Y RpH&F |C)fv")ٕ z" \Ց|{5;RWVJ(8X#,cǯ :& lIٰ2 C._P@O8Ld8 }.\QƾD֩Sы14멡+jEzs)O6&}(EdS~9C`M/͐p6>^Y*Reͼ,n^m_8wէ!hvG(EDtDc}<$@ *!!fwm 7SoݦD[#%=PŶɍ9Eej,E:覦HdsT_e`$J:njwY?*H'XbV %}莤•B"_ʬC'xBxy4"yCN.Vjzݍ6Q hGdM:= {b֥Xi#pPb5~|4md[ N.J}ͧY wx  h+-c)SǪ57TGO5)Pa**Rg-_jj}k-1@-PL &0>Sy*pnMx3,C(*~? wg$@d!D :aS yN<mfg$9JyҸ3b<.2veVjߴXtJ/*UP[m{Z1<2<.I/ଭFoʩ|s;  %ZMPw&B MdCIOk,,;?ЂM7q9kuЃݜl*5x($VXkʭ/ ~Dkk{2y)qMsf)Bҙqi~J0&weA(L\L\UR vԛǷUi 0}R Γ,Ën 0h l<(4]a:TƐB"kiWf^},Bͯ|8vD &°=<=c=˂-y`LJlրDu@ U*e2clĚꝑ,Z)){GNF#Xڏ if]PvhVPkޞ}$(d?28qN7ksk`z r5(,ӳz*<"19Z]3re c!jMP [<Np/PwPu! [IZ̢?`3e ?2gmzvz-9<ƅ9$sm2Utni>]y&ef{M]F94I:#ސDTƗU.nkm9] ;n9["Am4B7fyQ4=m"iL- ^c _Y'A\81>*Jnc.JԎ}_rO ל@L>'M"5!@0xjFՀaHèMTh홚 uQm{!x&@M>,m/s;fj:ղA#8njLv* LІuSs媒ER0ՏK1;Ԡ-b\*Ti&> _ lrبXo#D^kqoP0g#;g{h=ߴ-˕4H:K$uo~tfӧxhb|›t#ALLb7 ]Gtu "LjPwzuW﷔%dE6n7C!"tΦd.2q }sR61&&ָφ:`zi硰EtWxiZ?)I*{m1TUG>K Z%P- N|}a'>`%M;Z |I9 #b`1A4HS-uCȣMK$GV)t"kKsGHKdJ{v҂̩_3V%\*Um%Q=GĶ3.FL-W *PiگoQz yħ RTgהe}?!qLg  & '8m#oSMt?,; RFJ mLUu{SIـX"snT)RMNџ 4c@5ӄ0юl(yXBv/XˬHn4 bK2E"5ao`g0ڼɲZʁfkܹ0Cft~koE]*`L_7j hfypb[w` uKYMՄqkҍ]vbta>.ےDJa#B{?\?"RbN}s5gU,D~6M zxysi?ngtqJ Nz7bQPu`4+*io*$M.פˈuGm[CWXHA$ɠw@7$EYCs(fdrzz( b*?$'4wdCnl*+@ӂ"Gr,Ǫ 2V;?wrZ7)juTD r%mxTTDA1 K5'¥+şQQtFvÂ>4'Y2XX,q~ aX?*siB0fū(Xl&!e ƋyԪP]O"=ZA4cӥU6y'&/d|Sgl0 .]Ś N]PZpex,킯-GߔUh솢>BZVH=gػGĠG l0f'ssY1n&Ӻ[Wr% #w'o\ j'D 꾄{'BQɅX'תq2QPAʟ N]I>qT(7-֖Hs` i&B:ZR3>9pp:Z^M%#) KOwY Ñ3BO}\ SY/_[͝uZ/*IYM <~x! [7`&GP@FJ$ oV?L"x]Zbly % wV Zq`CN9e D'vDlѷp?Ũ*z οg1 dF~Qp^W;buZoX.*z +OOXea.Ku'+"a2!OwB,3&cs9& IÐ>uِ :l!S?d~R2&@T]_FS# n6ھM*Վx?Fq厽z1bE\=RrO3t+vIez׃m?wiRr'2 &L85J&;¡Q7ImC tL[G*g9}ma"-k1K2_jϤyWν;N|m.) &i++o tB]MY~ƒ_ .13ojC mYBot_|Nt bud?L4j*spmU ,٥/ba%UtCUY辽VR)"ɳ0N"G"* nZ+,ܓٔPDMX8MiN&@X*fl/yKݲZba 猚6pyQisϢ;ᏜfBc_]?=DV!Hfxsj˜o hVެmXMip^h}5‎Gy4oeq=y\N]^t!"hEVOv=vXR``u8irLZz*,|i $}[ s簱8~o|7 me-4 # @FVI .Fgwte wpLڧ _cw_6̅nvB(NsfFKs\ݖ م Ⱦ"U{w@y%ՠ<V&{|ۻ673Nƴ W3V%3E%Mz>%D (lxCQc* JpU +g3H}Xm!e `+Vx}zd\Vo\RaT[^o~޿kozUȢg5 %Z^Kg,LlH[- [ߋZk/&FB`!- U 4N)wċюV<&A~~鷉ˢs>}h=ٴ_gven@R&s&4@^^r&Y Bހ6;]3i ,B;W 2Q8lȈFt|` :ƪLG+! ̨}9i+M?gxk# EE;elx#n"^ pb B+9]6mN\UABGO3)xQu֚b,DwuXl^DG؋`֘6 C1d]oQA(뜆#ۊҎM!$gt-s(3s0{,֗T+ٱ'Ӝ'$cAK'஫Jى|(;*IU?ڕɁ1ևI pƓ5;n$|\Wo$c,yb][#`a6חf8eg*d]2Yz[VBArLNItw#Bǯ/|ilxB^S-GEf<{F|35. di0gl_p|BIgc05&i6jhB03d}ͮOڮEbFe)zro>Ҩ<5 _PC,#ۀ){;A݅d>ˉsvrY* :ǻ_ӹ  eOu}< h5{[qW mWȗE=:KmɄi(i#U~*ǸʃhnKWLyq+S$m+PԨQzѶ5B}?P&m8>0hbOZr"nYcQ f&^|'AzФ0AΕ"PS𷯏g+BWP6bEO(L_lfCXHi1YT@5F 0h ?z~b3Y&M]㴵ŕZ1 m#8i" qCS9{X*HkvGߨA. r&uЎ q#9I v{z?DwJ p*N?lIc*7BX$ +d_ze&@7I$hO aé`Cr9%wT@DPUg\ Y߬˓2*6 @ZC;"%ME73=6ĆQ[*: Ȫu#dAr~ݭ$م TlP!6Ǯ 8p, 8AH!^gqML@<0yX%W9*Ǯ_k"{1#rb wcvHŐH`U~1#^-N2 ?# b_AGR:lC?8SVt( epv51'mǤ 0?øM/?E> ?Aۣj 'j1Z9kt.FNBnevx0hwWf"#.wrOߢͯ]"sH똭'QäJUO.HgJbiў(&åO:v<| qR0@,]2"5) O; w L^]JdK*nx^121\SbR~Q04 .0rZ7)m,TUجDio+,GCzWucDeS(SnG/(\iҽJ[!F@0bBC^t"I{y AHAx7VO8r-~y@~V; Z0LX9ꉠJSA =6<{@Dq;M+ .idS-v5AC@\h[>m#lx 5~{Ң 7h>TMZe*3r>!P'*y‰A۲HAiSq;)  mDy~)A4%e̶r 2 Nrl ]"'ʗqf<&hL19ah j/QӄF!E>2@Kޯ(Q^]@Y*0#H^jvpeQ<&c*ar1d"AFr lt02H}40PKI|Y~pMpYymxK6dEH~,!2!aZ+zrle.p"71Gzr󀐩f"Nj䒧~;wl 3PҚ4v8X'  XQ&b?s>-em9  IU1=Utt&2w٣+O#94<\fȺ!\ Z[<8ܛT@f1'鞙tP;#M.W/,EsZA>Bj?i3~PW]34~ \r0d-v9 -D}%uc `A#OXO2)׭:4>vƾ+dV1\mҶ9~VXGAX ܪMN?z$Momܫ;i/ҞY~\?ߖ(9nL9V%X:sr#`Q>$8MBj*3X ~otّPhw/{DD ~"#W3ĕT%:(92ZUWAཉ[z#W+6Ȏ*YWRjLa־Z-=]1])!Sa$iewc_='c){rM:jj)fGza)eХa wc``G`ah_8N׮&ήt׻9"[>kM^Rګ}}Rt5WL) JN? ]$bc "PU[t~-Us}C^ᐔ͸}8XC0h,GMDsO>n%|1\+qoH0A-ѝ7{!_SI6[8!0!%xVonI"sօ">k:35.߭66i(f`Z֌Y;.^<Щ`O|ԏ{qC"ܖU#u |}o6ˬ|.O^bWqΛwr>9~@"EܵQ}iV{h'*"_.-ڊcʴ_r) ت9 2Nde/w܈ o"=x.Vy@\_m`r93b,rp]^iUC n(3Ud#TTd5JD)f1 G8w#_s f'QX|u@bN鼒ҎFߚ}}'E3Ċ (T`Ӎ8b _j v.vAE+N~ Q{6! >&VjG8?sι6\&VHE|\o^ÕNJ0aYuZ𸔩*F$a\I7H]Jk/J)j@C hRsa "g t^|֟ԃ'+E/pq+Ϯ`\;'8ވc{g=+JnzNt:#; Ly>I.ᡂYt- ZfԻRj8$`mEjߚ6!]}͟[ QyT"~ש\80MNe 'copNC4Pۂ[YS#oF%K04 hxF[fIJV;w igϬ%W8ڃy|F94;Zə@'jaT/(,ݤIŚ0T4$2L_XZMDZyAfG S@\͠4 yDa0~m:n:N 8 _Lw &cTn,LݪQW H{Hj ">ǥ]*b+FǏpİ\ɡ@=lzFxݺfC*iSj5^FL^bQ  +>YþQ Ւl(Ƀ\~kag>HmjKqfSh Yᥫ(\m=(l!w:ƟOqm%ݽ84u2BHbk }H"$Ad6,イc[̏!T>gIwxпcR$4nʜǺIVz<4TfD Nk^Xf⢰R/Z?30o'U;XThks!>aI-D'+I!=_ S//[;OVNcgC耸Q@Vh*^TØo9e=ysHˑiz!{8WEYz*w3oV_w+4qD!6dNHطBh3R*Ne^Vr#ҴòfRj6c7KtGfާ'/ {9͢V-VjWǟ9aoYߏV)&cn/&d('(G'/MsGn`/Eѽ@땕#Zz2)}]kFzzdA쓁콯g3yu p M~ Vێ%YPnK$J @l5+zlS ӋAAEal oonQ Hw/ekvRڗYf,\- Pf RPIo ^ c'xM;θٕ71Kn}aHwWN0vLxd s,*'!eN˱Z0!&|\4$))G>n 697x`ʞ0V61ħ稤| Ff-e Qt?-72M_ѱR,~ B eʥ^]Wa)rH9WU[Lڂ-ׄe[S6@l1QL4Gr#iEӒKbuJV1]AՋo^Yatq< *F/R9M PtP&zCazˌ׻:/fY,,EJc uas~Ahͣl7Gacom3{SuDLݯi* ~u\VO0ai MJ~ 0Ww ^Rk\ěnu[M\/IQ iA(@ 'XX,v IM.Vrf} fODS q\D.ƚD*;ղռR $Z[=IB6\jn=%awT*W gֈ#!,R*OJj's1M]̓S4ܔH󥩿#}#-0Av"YMXr)mSE*_8n#UQe F:0|*PdfY)ZT`$ZDuD;)u}FpK;J@ ƨ[F)><9{YK,s _I) b/ci=!eWz%|+e\^eh(/,h3m_^Pe\Xio{.6LX ^/ Vk?A󔺯ZǵJy;1u0#5DMiu.ǓqIEd Ji0qe)?.`dda2^adXS~KRJ:7v~'>Ż,|cдBTp Zeޏ!)$F2@=;W魌 h}A9'gy9j*8N3ֱ"iiD,ma}n6"i~޸O(믭ue)Re`ZǺaK,c" brӣ\U6= K: .pTNv*ːh\& d{H;_b+XG{EEXDm u%ƒ~? `<><4J[( "J+A;1$n3ek^OyC"h0J&6 oXSf԰'Бt@/ hݮQ"5\`3M͖YŠB1 ebD'Iϻ,Tt|YPh4\i0c(@zEH < - gU.GhlVjU7]dU}ۍJ%(dnkhcD,x de?үH윯'xiu,4ru^Y-ERȂ?=zc@ =3|@`a7P12qO%XzCveo{DHv8~BV)E??6oSKɞ(Tgd#wctrET'{j&#rFCT cڬ/}rmH9iK2?xvœ2l"~Pۥy4Rkf)?k}Mnl`\lZT&VuKb^]كlO:Wfγ.} lHb}GgE%LJ a+.Z8q LTknt4oY;?ɵWS@HcQH| Η'1[A-]w42Z[rZ,}pr.ĵmeO)b(蠩%`eK MpQ1f0uodmppr7䬢1ҠN@󹕘4w]uVp$mEuE (~rSy,UM,WЏ ) OPmS bA-JSdkGcP-P1  / tW,ҞЉ䝼ȕ.ZBЃUAr"ng.Ҡ_NKh D]hZweX$Y؛{6|d2G>GHC2_2qפ?STf '[{f8JFNw޷YmL*Gup&. *=\:UH6\d.x#ֿ=NyB`q{ByFb?UZU3-&O< ǐEbzDͬG#g P(v񏣲qwXhuHpXݦA7iHTQ LZ+ʔe .$9tN n^8 aQf*AD2a/}B=XcmcOzRXTUo1! Z Ŭ;5|8dj٭$`&I+'M<2HP+5*62#K8+m+;5+~4'X>3;}gP <ǥ1vVtBGl).9sdªqscLi,Ʈa18ɴ'yXNԪ T'2A 9ݨ3Kf;;V:c3ը%Oiسh}ctMlD NsC_m(EJt,h+>c{c~2Nq5LF9C"@١t2*t`yZ:0m'y$9a qBפO2\{VRHE9cݪ>k#]ҡ2z)>LpLш͜!)h_b:b2BkaNfoU;].jR /Uښ93 燡5u2G(|p\&阚)_[Zַ^;&i:K LzK9u/s̳w= 3C5U8ȼX{H0{E2؝ 0qyva#o303˩ qtX$YHbyʉ 媸w69&wS<~RVhD/dyN#UХA~=DJhSL5O"#ehb>. mi =a |c%ta 2,ydOm1gļҚŽMm9oݮMl-qmI1n!(pÎB2y'|""BZ =#2 KqjRCu|Ur#`b{-Vc~GY)وy3 [lJQW/*33Y7T6Ȱ7%H`Ƃ Fe/mvW鎟q%LT)qTq .a,Nܗ Я02;Ï|gDYpP[]%pJA0qf;Fom@񧚍SLy=#90[O+{gمr3`G[Nvn7E+'4۠a?aX7⮗?gS 2{V;̽歏Zfl 1YX[kUӗn/Ј*[[D =Y^nqyb9vzy1E1Sf?ΝMl=̬,yϒR/?ffT[N\Fw}e8I]G-;CjNKk5|Y>4-2` A hY!431H["%$zVaFP~=6q?5"W"Wd}>G}OKz.tiq-~H \n5#\]b#t!Rgx-#iVg2{Bc:HXtQ?3Y@> usIF l8Ja-|م]nU0vz]q&ɵQ!Lh֞=h"F&G؆&Pe+IOM?ǗW:`j*EȻ@MN--x/" F~fI5!eOT̰!*^ā5̼jF7k/!u9#Ec4Hq7xo&/Em@,/ fvn\cU$#bb78pg\7BH5$ƸNN6a2,IT?Ng-,:GnY\LF{g7EQ9}u|YHQ(02U+A-M^)* {W 5?]\Asqq%k@{>+PCEe=:PSUJkU_"\6 j0sR+R6G1 3?Ƅ[c#P"]2`|ƪS)* 5:14"B8: v@50vs?70fB%>]C۝f@'V1u!P#WhiPƛ}COKkp.}5/Zû 9m`ZSc=Q팢f|WN =u$U"_*tꢊTh ȖŠ? !{0 wWH@زF'ݖn}E)] h.05yWl6Vz⭫-8Ucjػ[#pKl|\h&fR~j%7ZSN5l]pU$V 'u1C&7nLuY;h77єtf (bEK8lPlJ>G$ßǩb5gvAg6"t ="AN/GHۣԎ*ghHlUS{ʜ]5z#A 9&W*4IO=Zٰ% X';:0vM(FknWx}xǛތc;i$^3C"L?xG*/ζ4VzM= &,(qjţ}nnwQO|(SJB#Wɦqw>ZC 3R4$%SV!dy#zCsefiʵQn>+VyCЖK0]mĐ⺛uG 4Q3x?cI&'W j7iLe,;ܿr7,/MOҮ~Wc,ru`dN RQEbp7x^c\if`VX`sWMswl :s^D;o6{ aZ. 3jC؍5ybcd]m)Ls {($ڡ8vgfk~SZx|J4WΣW?7Gk?V:j$4Ymspq(j EW9Ԧ^fbw~ G_@G 5KMpĐQ g,YVK\6^C\jNa%v/͹&[܋YVS]=:jbY'* ;9q Iާ+3״t<d}K Y_&! V0n A)JsA(h]CO%4d6/:Y'R:yZ >@Q," 9vv4=39xg5\*iRCu*D\B`(#Rp`grMv "ˎ=e1N*YoFǿxT#}Մ O 2֎ LedrU0 Q}UċZi";ͼn 7A/J!RdZQqLh#V.a-2RP;WȽռb{m*YLv#.%F'wQi {Wz CS;emD,eґ1*Ek0*2y]g' IމvM/:Ð>åq˼a-WO ߄vҿqK~c!L*QDc\i~˜68v(vJ}W( pfE:(pO3Qt@I ̻y6&0ab{r,Oh+vnY(UY'0gKc9e/\,i1T5Y{%e!~EZLFtS3 OpNRT\q!Ų_+e,$.H#0\^/֫_o7Ys6cp$KL Z$aRku:=pZT$&:30TB&}M>b/ @^O)`YceCHۢT,+-cqi+n tœD<ԞW0>'8MaQةFjaR%Nk|)ݴ@nBıX4XT TXfc+[24Kr.(XY',AS喭'B[Q^YUCOU9idL&0&V) iN=96Ybd1U,kDt{w+5CO'}V aɹεӯ\p/ >iS9ʐ0(i>v. JR>9EVCk+ڊVmzrgo!FOߣ0pI`jn+LҰXAKfldSxD.DY6 sv92[1`?UM(ژG@j% Tٙߠ}k8SyWr jsepij (Ԡ毲 !u"mip}1in h!QJoV:A ))Uc07{`Ji21FLJo?0)2Ӵw=% .+ռ <#>y!lrw^oh6 }(YC?[dٟ9 CbZ%$EVVؼ'*F^57w8 ~ 9T9bdJ nEC^]ѯI1riqC3 yߖ鏇')"8[̈́KRB^ 5qo/" ɪ?nlϐdW ~ͺ)^STX1։EOFFDގfg 2MSsz9&%unNp2͒awksYl범k y[{Zn,w QP8.ZM癊+~Q(:23[i`ܓ^сd;(5w_zϩezC=s~Ȯs&l 0Fְ̖`A !u, 6RwxsXQ.S@z;aCT\[ԣA+`E?"{YD1ӎ OdZ4r3׮ds\Y"U=CՇt7RAvB``F6ˀm q0|0ҝSw*,r^'5͑y lD\?')5rGRp>1Vp5@ij/#g)(zP1 J`F3T.^| \=)*e9 3B") l ;M1L(.Ǟ[ @IM$~%`~rtjZѿsGdSM x$jhfI"{C]iiHն#wG"\3`8P\% _uG[,7A;Sw C%tLZ ¨<J̜980:MHMZ\ (&ba-ʕ8F])"B*c1H^VV.ݒg[]ęy*ݛ7MK6Š뀫չO$%sd䋎;-c K2=&`rW}ӹC^ˏOv_Ʊ)һXsSf郬i_Kמ9gV0N~,9鐺 A;s݋1Jr TЦnvE$&ʂxwA(c?Tp hain|@M)6Mb;UoYT'(/[&Ob|Ȅ8Tb9O]ވϢը?,jx3II|m̺w"3Fu۾vrWT!]!ê;pz--5YaL^3bONmѹõSU:5z*} 4Y6/m;up ǂ><v i`[nU|5eKH۷Ee ҟF>VLVn2=oʤi#tWL>(wx_,va;/EMi`#d.{b!bvO4fjD+~晁ƝP.dhgL('AMd P_^ux}`dmU*}hǩ34rļ ;[ȡk: R d!$LB0}<|X'JǥRa}v)'UP6ݿ滄35+B"Iï[l 7姵#떼˱-E葉㜇֗8TChmu-ť8Q,][j>^AbL5D *ƺyi8w]6] d!2 %)G<}=A)$=kYZ~%@?r ! Ǟ +Z[w YfUiH..TzF\(r"@ 4 yRґ 5g^N {+/Yp~rt`Еw ɀQ(xp̓3DT 1ON YFPY AkЄ!cW#D{_P|#Xv,B?VR^<3G'-fJ L*X*Nx0a 涣wvN -^dOs޷N+~꾼#)|x]ظÏdjl9.hwŤ^CkTU 歂X={7j#C ȌHi6j>˕ / {OSh0gȪmB1\Lg@ YѦ+ 0ÚY%Y0=hը.$?Ov;O}vdFd}{D!kX|xs}''Lّ2锲O7l_֟F0c'tH| BBܪu~9G' х3YiAYb3ݜĦDgiWRh"Yz륌7'4XϩtIX,>Y3774#zZk+OC*KKDlسq_,uԍZTOl q“ڨKL5uXuyIsFPtm62gg_~4S?+VĤAGsrwO_h\Ms!íoz귉zCAh3Y~_E]U=qj*9LGjoAe4iZIUtfe+9f❭{tr T%;/~C HME3Vbsx( *qPϖTvR.)}?&j"5tVhwc8u0R (+dTHƗjds滱e&9b <{×VbBC~z}ņ]9rX!P)5/^\8uG p/m,LCv0xG@jiR4{ѣ%K;Z=lܶl`isxL\V'p$W!TYe gؗj9`o݁Gj!ui_㸔܉Ι]\/ZS-E~ ;qCz-lZ (J!n44LۭAfaaJ2Yį/_uu!xlgNLLQ+\f{лbZ裏hdžRZٌe?7֎yЪZulJ8 gs"y8xU|/d^,:,闶6v< u ՠ)ƪ&&ӤN zr #KÆR.Guh'W lk_~(˜rLt|s1l" Eqv1k;jOX0_.7s3G;uk_l=? \n@YFjB}̝0YP˪xOZ3u2_'~c,uz3kgkʖ6ڎƓC3Xx\8/ MKHK9}>]nˑ= ftj-¯a$.&-ֶ8g!6h*t4NE}KI6T=I`%=UmJ.ƅ2a#5ו>lrƟ P/J7M!R\.Vc5f}BSVzˤ'GwuIG?=Eioj}[3-a4FRGt] =n8&~B6^Mdч4?cNXl6*x%ƪ}zqÐ2g[jdZ^A!7?t^,G}nթcr'|P¥ܽG\=pKTRWϸ7Eq[d$}7ܯ)\BЂLr Ysc67W Q}s׺aW jCէOYGyV'#}_ciT כlGqe;a-&8K@TCړRS(.L(ɼ,3X%mE8"RwwiwWt9vjܥH?_ȧX˷HV2]B2gAlc%)ܵ_px‘bcx9r|9JK2(n3#TsD*9 S#ZA bT[WDózî&IqV(߀ކ[XeP΋%Zy.8P7I&X+6WqUY Jn|L7(7`۱eWtK,v{'a!ҡm1w[zM̖mc!,OR;[Oͣڒ:z ɦlqC+A{ 䫘:~jN!ԜQ=9~}/dHκ⾜Y OyZZǍjڮk>rXQ"ǾMyh>: Zl)o D?@zru%j0<q$wNXůa1&~6fGFYp.'(2@ߞ0<9Q=P0P˷(c2SD V!Q ݿFGѿ .,Hǀ[cֿcHM^֑W '6n!Df3`2I$9 <×TO=<=OWzB ﴾/I? ȏ^ӧUؓ/n6)4E!IOs; = $B>O|~}j%%L po^=4dŭ"I}/ͩ6 KOUzJC+oi/b $c^ ã()w1\j"^C)9ٍ+PyHd`?+2Ӥ/(soM!~g"@L?,KEM@3+L'%0mlYa=14Z#8Sei3J!"ñ.Q !s0Ȏck[RzL;3"?H3Iqie!Ilٹeo"tiT;hw$wGcM_OY 8`1 xXH\Y21b")j0zd)iZ A&V&C {d9X7`4gMႷyܧ˕Ht({0Bw*<—E 0\/%i1b_ 6qx}m*êVIY0G_Aff Sʯ}BTtM3mÿ:ӌa\K^R(S}e\"fy| #fYm$l DEa7iv9wMTފp07hy7NR戋0,Y/ڢY,B#㸠])N=b x^kBTvd q9X &M"@@+J= 7 X75D#K7\_-6ólGI{k`!g^_Ff|f~&0]I)`ՏYEQ岮n+½ Xj'y)WwhǦ?&/anOE'_w15RɅZ_XLV[qO%#OsI6S]we_4j2;LCa?U;[ `KbU>ē ^ B.Tg-F40UYlƝ[? >ʄjnH 10 =OBxvSH Md8Y-GU׉⊦THGZO,񞗫0If+jg(4^2Aa.sƗm^LI i!e0;W ۠0>Sq:ʥSajjeTƥ]g/ O$605f78Uہ{u835)vIqտa<ER>}.׶=OVJ)|f-U ZWek>p\'9}nAˢce^F CPb c7iPKg4SbA7كQNa -$qI/߯C}8a?QG'>Rp͇ieRIG]kffC)(RhkAkP>,Z[bZ(#VSyic@_ԭ AU8U|osliPLJ; 4a%DV(epB |thب=1Lp]QayEOn } 2] B>b\nK{r NcH+3)tfha ĚR%?]!M!+e_pa۱]/5h&+%[ ?`o7QcR/5d2wȪzuR)b|`<=^_H>\cHS"&Qhȥ!+}WJ;pchKI ٱ7$\71YpʩW/DvȢJEzk˫Vo$Pe Fϡַ3vjAysdJ.aDR}6N2yp*?t>dzdNUX8~S:6# L4'9O.q7rSaAˮ3/PVx S Ga˸Ui .rn$8ṭIɢIY),({GYJ J~b"H U9}En2P9W&R]zxuTГ6 ,B 9b.z[m7Pm~lu;4ǰcrvZRG"(ׄfd>$%s&}~JC4/iLqqyt| !Wcm3/W8U=4M$vKyYq{r ˗D0t(T.a5- `1}ܐ-hEH`FS㯝Fuaꕬng {m.$rϪ" pžFԿRUDXLlVѥ"[ >.RJav),E5zhg&M.{([dĎf,v(?.v$pU!]y8u Z6ɡǴ$l@o=ɱ9&C/G>goKrȠ C*ѓp*ex` 5jCWU|ϒˆ;"wv"L⡲ G‘CZK@ź|X~*\Mi=K MleyVrKF6eS/hjF D+ &V|z$1,o^'kE<&؞`bx0H.tFW0̪߷kY::fc6&?N~ZJh@AQ3*E^.BmfE^\**nS#-iS)ABi_9k/IFKS_*e;l73)lL'M[:Gҵ9Rwj̖sEg!EHklDAڝ6=d{0{zqa>9 2#d$_MK1lDY*e©]*/ F)n]xǶԉE_m2R/ʁ yk%"ߑU7B3p^OJ[q0s`Q0y}֥!5{s̀!b6ڲ4 H3,|~hdcz3h4֒߭7[⽑מ=Q(gFusYJD\[,#q|nۊPbG-G1\c2&+H,U$%EWm`q=htp.-oc+?V{EeA0bn5@_)ޣ0Qj7ךw5{J?r%㶍eqOΧEJx߷!?l쿉10)Hp6? ^J^ؑj6wJ" + G864f5x)FS`F4}/g.ncEa84V +wLTa:[D%@Z&8ȭ}`I!3f*9Ɲs£1k @4ZW n L،5Xdcp71plca/$<%h7-GW97Q$닜ϮC* mH ~JO L!D3 "ؖmowQ`Nr\p9*}B! +jz,3')~v@d{QoPXwX9}۫2;v?XI:9S0 'ϔ"̲Ո'(H˂|ga. fCt,ؚP*??S[= enOFϺXR?$e&>K'jݠ\j3t@?B=YJN r:)0nL}a~z6NR0=)Ȧh2sunj l@v]̽3޷K8Ksr/Jycdƭd q󜟊&IPt#'hN= Bê*KyCKݪ\U|>b-#aZWtpb( ~YHSC37 6I?Ё!:GM;0QV>hP}!@cHIzr9TbFdF9`~o)"<Y#MhR iOwXduʸW%r%X&לp <ev i:nұCَ!o-.G8=x_;es!9)R ,ѕu'6,ܸV+v9ΪWNr[EKUw2b;@J 7m'=6^kN}CfZG#[CD9ɘ7ī:-? Xi:.vCpkFV{)EŽЕ,rp8;G`ϬjK ,V<$A{y@ Yg,ƂvFov3{ͯ-<C~C:NlDoqʬg2H8x:%0܏@,BV뿂o:eFe7ŲG]l#_Z~.\2lv%vT/Mhȏ- gHݗrP2kL|dU6+X"UШ77,y'tu9Pmkr8W–&vqaq/ K~-^JBh%!|*2 eВsL("N["AwS Nױ/6 SG*0oθFiˤFsM&]%KJoeV@; lK y~DVS^?lBLC!9 'lWBMxUc~n>Vk  dI'ۯ<KWKxSn}u!,>mÚd"-G7h"u39/4JR,b,gdI$>@5((.vng*M_ޙ(^t2XT3TfXJo*R;jf ,= X(I4L+ޡ%=^~'66-[cz)%~ȹkЊ !o ̠? <~ !ʹ·96x84SWK v16j"Z<@R˅ReK]|䠚W,,{pfE!}E4QtݣQ&m锟2x:$%JZHsbS Yg! ر vX{̍KIv ~dgC[^S  aC/>]0N,}U.OPCHVEZѣ't\Iё֣m#Uj!Ŭ^M@՚ [/ndmXyMb>oyгj,f3]ΜPc!=׽C&OgN7R ;}b؞`-=- 5ZK#a> ȊDC",7^bJ|ߎ %os 0RMu@O]٦3WI >Ĥ }x\ .gX_r:cI%)\kuu]rF{s4mtpX f- 5U|5jq8$G'Ho7gWK;|w \x!V|w0 U5mD^ևVBd\G4@5rژ MZx&Ü{ GMK{=h\%otv7mc&%2&JeOŢ't.?s9wnq3d"KycKC~g( c,X)7-_ BuXv[gQ&1:$*1j͘)G_I&Ŵ|ڙŴ(lz F)OxƛPUP?G|6$ (IY{߁7sř퐊MV5e4QrYcF9%' zUH,u]a\,PH 9 N'55[+ FQ Ăꇞ>Tz9_kUϲ /i@LG{=2 \'bOV.B˝6}xAbo,Ѧ;Jf< /@Yl ;dwh!C@U.L,oj`$ z&k#U5b4Tv K̎j?ӭ)ꍷMeIqXCp C3KuAKg } rCIh+H#e&+kX~EdKy D0Td›o-1jS ^2w>]3 GfB@gp9s2z^XJ+7.̔GUH S1F8s;~2\3+ :䭂e.%+%WVl1֠TC"̀ܩ[?qԴn>rIJS00./Š LBb>ʕeV˕*I? b?-ӛ[`֧2{̎f.;@#9I/b%g]~0>M|C]A+#|uVŒ0kFOL3. 0l9[h5ɕHmL{_VdLaaA9N "Wg/pl[JMaGK6;chX?~'0t5n\ݼz!@)mPW;6og͙>~RU ޔ$QYgIUlq \Lѯ"Q3_[ KtGX ~IR)Έ#F}yIT0 )8gP_#E{;Ay UC%7 ~ bAsMHct">{2}lo)4\`n!'; Iaր݆R1vayfGiTqn(۩ց&Q8F`f @4FpQsuNw 5ٛ1H^/^7 8%A* %`>~=S~hl\ܿ+MC5H}1'/ #kYg>ir1An=o|țZb H.>߱ݎL1n[\ȩ'Z%@FQ>vSҺzo`}󒸉c,ͨ0%V#}#rO(m4TBYVW^54CQQTWѸ N |Y7~;;D{dgj%?Oo0P#5 HzK:ո'3Pخ~5/-6WyFL}ǺvTxb0s`Hžʒl_#?hYv>3LtDzf*C1/*߼v?pO1~.:n.蕪e{\(%|[x./=Vd~ivOrCƱVUWݻ醸OlDG+vfP˫QFҾ CP$0CÜk$`\ϚQ,ɞ*~ p_>rD凐4蛔!>eY:CAZ;3$xMd Gۧ#De7+aua:zIݭ$:x7ْ6ђFcC0R,gfDy{EႽ978@,x!-q8q?^Y{&0ZM$[;EI>czODDPlT;iIq뺁s^,x?rQ"}V ݹ[BLdZq"zjҗ<S<2\CIYKm2$\ŊNW/z 9AҰ`!>,) e 7\CW#p/w~ ?k;? L_ɺʤ,酎Lvۀ=Q.;4zCfx[D- x#33]"v3ѻz lМ )N\F>1 3+ am\1Yތђv>Qաa~?CI4'<A a;Z`I!9(RoL`O 6'+PQDڡЂӺ0.UQB^n"i9 /--s$<ǜv^gӯhh{M pԪTíp)\ {Oj.39!=0AAXǨZ'D70&'a 0؇h(UsK2Ji?b`on(n(YrPx=+d_ au9>P$bc#;C':f|/,@:W}62TS7l-15"[yyOmXov CG.[3#(1GYaJٝKzRʓn]V]d?m(\e, PEPţ s'c_<{`3Hݬ[l/>Ġ]c1G }mro*P.qˆDI+{kBUi<Œp,CLPi>ؓ2O&=˫ ^IA67.۱$"@VD`N CtgOִk"p5O{S\@H ?,3Jjb4;rrߧɁ_oAh~~)ǹ\'%# Io[˨ -Hx8fb`~Y@xoA T@5껠dp`>u;wyy8@E͕ tMQ'thp; sΟ<(-S߷/u$_A޴P[~nN"=1d 4\]L{wZԡ+46 EԶUOTHx]~lmY5&17gܬOL&8Z$q:8-qAUv6hs@G$I;ֺ^S4ck3Gak?>BȊZQ J U{LԿcTjB 90BO < -?]^&UسCdLQ`'$q3z]!X)Brui:b}%n (noHhZRMz?6p3rtp#x}/ #58^fx'`CkZ_uY$p0,)ߔJVS)P@_mK7dظ^1$ xBNH]GH#dﱫV^iRCG7'w_DvH?ApskGk5,9ȩ9ލIE_kJZ>A(", >w@n2mDڸE@&;G^Q W Z,el*od~oeڮuF)39ӶcIݾAs@[~OøU3un/<||:ۭ*S0vA4zUD|%%eINS?PM]>`ok9+hR}4[y Xj%㳏<\AoqPڑݣ`aVQ Ƣ'.q;6o1IcjQI;3ԤHJMŗzO3 uJ1WSC}!U.뜩(<>Xq%9Y38-ݿN߱>ѥѫ$Nddzzeov/Uء81EImI(X`5!֐P\`ssq|Qɴg@"rTkJ,L]*IlAO0BBFa㮁TC/3ޯ>@><6rSGj aS: TdP9Ӹdȴb,[vao$5nL KYH :XAP>@U*FCNh{S=P7߰Y`.1g}z3S!}?q3g,jL:Z2M^z^T)3Yl:d. kdm m,Cs'8[UEpEE"l>r9_]85^͉_"`ga, E+j;uAAoϦE\OnIkLq[OOƑH2"%qّ&Y3 ͈wQTyECXb,Q&zϵ,+1d!Mk5+^[x(zyU㼰&;rX:Jj4lT %(&ڊvHٶۦNi( V|L*𸖑8 5KosJ+X"=3|XN> T֍9z|6̓1qm5I~.2y4_ $/mXЃZǗ@$gs`AI U ͸zwA2r|@}¾/x󅚃ɟ8;s$r(}$검hT)e|A?X ]P9ŀ@Y3ڳ Ң&OIk *9R ~m<o3Ԗ]w|~flv&%QFeQjoEgKnX$n4vfӭT[Ё+>mc0OjrQt]M+8-ډ<4Z'B̖ƔvtџzS| |fgD$|9kǹpgqFU3o=_܆yYJU,V Dp nVogEUs]34+o_#O c=򣽯o'2o  fϫ(C#_ jbؗb;i몏مM4d] R5=yFշZOI]D';l. #/IdrςqfSNxd6*a:o*}w N|3j.x7^ B(N<}ݫ 23z2qYi"qĕpw}I83)T+׫VW5I)<;08\tŃex'OE!PCn2I1HlDhobi.SOLKjycxW†Y 7p7B1X48 w!FrEY}}KTYM"{y䭍S-=*=bn@yJaOCEyn$c(; b".F|: o&b1G-`Q^$7gfujI5C3ĺ̨ǔ-pE YÓ*!_VV\kpQה=GKj7:۳_Cb1ۮ=3ffU9Q>dz$EDZȍ!IxhN:&&FC\5?kQqו 3mKP$6?gIqJeE W 3?JI&Նæ0jR(;8S;3f+b@m EoDc9h~c2K*ujC VmZS@hNJLCnU^uGr U%tMV?a6oj4"ֱBJmC[`}{ĈppEOj7PBy'At Ϯv (,M?==R)n +1tyaM,5HW?L3}=E}2i+d)|RP\ڝf hQXJkTP>o3õDu]V:*,!ށLUӾqA1z5԰(Sd7 .s8(=iAtFмCH\JBVL5\sԛZO]>EBzAtAK3}¦Hꩪ6=v0QX>CͫIltJ!}p ".L)!y+;A[ғC֐L!g+zʗ.jvzQe{Z,V}p+2~ rOL@N"pxE󔽮 'h~ȭ$K$?P]9T\Wuo`]fCϲ-X:!,oXXطJ!<1X!C1J4hOcSؙ֗*>[hʜB*l9rĤ!TGw '+~MCfm34p9\(|Z SdvߓX[i&ϔ_G1 s} IUH-ҰbPP4o% ,[KMx'HPǻ8pF2qe,X$1iG GnoHF+.;,Zn%@NW8 둯rnՠ(R'6(*?\sy tZ\=H/v*l_aQfi)Ufnp?;6gkzkƬqHQl ;hϷ4^"O(h3W*j:#UHئD,' wkP4,&7xZaL)ܑʸ8,r8]E7Р}#SäIl(b!aЗ\/^x`:C}x^̱_Bح0=i $C4ib☯[OGդ3j혇><8(L?f[^9PZ&G;H->xнyv2m'e7 v;a߷Zci; g.Z pWׂ=9r+3k]ch&sq-S"i̗}nFQCf7nʻ̻΍{L~tK%;Y:5WbA2JYn9[1zGl|p%HS|wʉPrzJ3V}J 9/Y6a=f4qXo33n]yl:h5r;Dy:@ / /gETBȤ3I@(:A+mY_qEu $MujUlXDQci@jAo\M#H5&Z(bSZU꽊GSniJl,}'U(ӿy4 ,6rJn>0,-oJȲ];o0:+ )foDf^Mə/L#< K﮺DT5=rFة5SmHfe}Ov{6.o4]egd adMۣ(*a~uQIAu Bri.@?N>SoǶPp@ Kyk}]H˩^7M,jSyqc ߨEB⋀nV>cmoʎ;#'ra NĬrQ]`ءⰮ/cݭ&;;2🩋60CɜEx_-}Cta!$Zib(\=~@myJݽz勵G&a g^I?>qH+Iy&Gc(#xvd2ݭّWLn87kw[pG꫐*g|.\e w~,=ٝSa6GdØQZ3ȑc7N|==oGQvCuPAn\2{i~ LeV8!M BGAĹX֔e_9j2rIO]1 :ġ ? K2SaD׷1,&H^`I 䳡L=\Dk+̞-ȞTXE"i[}#JbzqߦOGu!݄ &twϦ O53!\ VP靾%mDtv $,BfBԅZ)bI@d];s?" 牴r=gG+Vk161Mۢ*>KDH_b4FO\/O5صzƹ_ {! 1<~0P>J"U{gAϨ5+Gc.+"քyj{ǯ2DGx. c KZ`uNAi&aSw"~0oqKv+4Fu6@Y;X"\x JAnj (¾Mthu&)lTcMJQFit-\Kxޖ>Z+۔ms櫞=3T>fUXC`Ʀn}WM3|)#[=w%%q]r?NW)ͦ#rw8=碈Dq1F_^{^ޑ4%եJVvW?mT ym HjRƥQ ȸkqԽ:WBB; k{q6-XR .4to7.,wB^8>{W9)d(j; * qzovXd"Ev Z{]^~4Ӳ~ӫaU'Hk?~wq2!2ySp_j9i4BFxy_4/EwDYPR(eE?Jy#A\[2Oۅ}ۗ +5+uV4&Wy.tDOH+$4ʴ ڊ x3a7Bl0De[U ܲRX YZ