libsamba-util0-32bit-4.9.5+git.176.375e1f05788-lp151.2.3.1 4>$  Ap]*ȸ/=„=%Б&?og_Z"B DMJ+cV m"s@I SBDW)\[z!IWGŢ16̅$txXr 9Mfys*i(+`;BzƭKѪ>t]I HWŦH!Qm3c}e}뛾ݒOn #(GKĈ{% 1Gg=Q@[]]b>OJ6f6bc9da4031bca26d2b5d301f5ef1913fd7d3fa89ce38028fe9575ea1c2f271c024a52e469de43831faa68e2b1b996472d7bfee]*ȸ/=„\1Hx.) Pwn& CPhAg ӱwG$R)c61^b4%}5sy!NqNN@Eݥuleh~ƶ;xKقr4=:O ϗ8p>\?\d1 = \ .4;LT X \ d  ' ''()809 :A>XGXHXIXXYYY\Y`]Yh^YbYcZZdZeZfZlZu[v[w[x[y[$\D\H\N\Clibsamba-util0-32bit4.9.5+git.176.375e1f05788lp151.2.3.1Samba utility function libraryThis subpackage contains generic data structures and functions used within Samba.]*lamb76openSUSE Leap 15.1openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgSystem/Librarieshttps://www.samba.org/linuxx86_64/sbin/ldconfig]*]*9b10b1587efe8dd7a9e0d9425dd324cc6c6d86e48ef041396efff9bb7bc71413libsamba-util.so.0.0.1rootrootrootrootsamba-4.9.5+git.176.375e1f05788-lp151.2.3.1.src.rpmlibsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamba-util0-32bitlibsamba-util0-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shlibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.8)libgenrand-samba4.solibgenrand-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_I386)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.2)libpthread.so.0(GLIBC_2.3.2)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_I386)librt.so.1librt.so.1(GLIBC_2.2)libsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_I386)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_I386)libsys-rw-samba4.solibsys-rw-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_I386)libsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtevent.so.0libtevent.so.0(TEVENT_0.9.9)libtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_I386)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1]:\ڭ\\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USanpower David Disseldorp David Disseldorp npower David Disseldorp npower David Mulder David Mulder David Disseldorp Samuel Cabrero David Mulder ddiss@suse.comnopower@suse.comJan Engelhardt David Mulder Samuel Cabrero Samuel Cabrero Samuel Cabrero dmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comSamuel Cabrero dmulder@suse.comSamuel Cabrero dmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh4.9.5+git.176.375e1f05788-lp151.2.3.14.9.5+git.176.375e1f05788-lp151.2.3.1libsamba-util.so.0libsamba-util.so.0.0.1/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10611/openSUSE_Leap_15.1_Update/732241d31e5cf48926a783b0b71d3f7a-samba.openSUSE_Leap_15.1_Updatecpioxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ecfcd5b69d4a2019b88811006b5d5dbb34561ce7, stripped$PPRRRR RR"R RRRRRR RRRR RRRRRR R!RR RRRRRRRRutf-89eae6aa475ca58ac57f783b98886edc7dc5f3d6dc82a6b61de2b7cff1aaac3a3? 7zXZ !t/?>] cr$x# `- |N+FmТT(b9ͥ+8Uw2NPBAvnHEAmTU9͋=V6#"jhrl[Ix~S!X:޳)|pq2!hkgW5)y6):b"|7'ؖvCsw. Q5/]6*N罊6a)όZg}2PFX)W 4 (=)eʫ^l{,Iz/.4 ]C:7>SﴃpFAZ2}\8ypiywbyn7~W"8Bs*\ɯ]v-g덃nP]K 6d6.h@+;.35w5tĪt b3*9tL x060BlJ/w|rIGdu~҇SKy{ŕдx:J C-2y* WKxtkf4;oښ#-ZShC6&>p/}⩆吇8 sc P(w0oޟr+eb(:fLw+!u(RпpG:.Qfc[fmqvCb]4w{ ֿJ}&nW^reZsy>pX\\|a#9+f OJ0/]Dzn޵!Ykb2ru-㡚[dvGӺW1E{.@4- n\U@s~-8D~Ƕ -|!E3}nAYbظ'\2ΗRJj7>=pZ ɤSnsȭv^ BľD6WXT*啻 :Es\S]fu¨KQʶ(qQ WV2Kί _ rvJrHv s6rp-tq 7|aҊ0g^pF.X mlAQsvT54tds"ݟbt=PrJzӧ?`3x\ߐ b|Q v`/-s.m77pd{Ofk_E%I\eTq$V^Vƾ4cXD v7Qf bDtkX]e>3RpT`%"LOl/"7Y5f3,Y>hH;`vs&ElVxx?7o~Ă߫Z},0Jv)!KT`8Y鉶L/6M,dIJ1WFfrguŁY'ck|rV$AY93d@*o8l)=k)7M ZNn\8Q^(C=yDc2S5^~xsWgճ`ploUЎ ecJ#148R)8>S!ҿvX\U\v*DzɽRYBiM O]w`*,oK34qHgY-hx?:\mEz5԰){_ Pe!V^QW@)..B;`L_a8|(ԤЄ¿'UAQ0KU͙GMujҼ&BI݌'ټ_fnYhЭ2z#Agɀ]:Ohj8D{VT ~G ᆬF'zڊܼ]mŮMgTH *o?P4U"%cS.x4cy;c 9:\ƛ!zJ]8_ė̤]Ptt7)|G1NkdIw2k"U f?uhIhA8SWXD1A445Tk~5ljR>!IwVģGp7hnƉxܽ>냶'Mc)`#, 4Y.&qۯ 7_txa .i%gHr:.@x5b! q%ʅj'1 bS<Mj(RҎעiԋL i}2OmPNr$ϥo")`dR}Uv,PM) `0\mmT8Ty7[ ㌢+>B/䉟o4Oj&ZN1SJp^ÙA3gsrsן=ӎ_0K,WyvbřI+֥-x츂b@<8ODɗjCY P6beo6% z 2D4aDNj|,N+jY5$KN g{M4ֵ.Xi dn`4SMC $Rp)BgEf %oaBcD;g|~O ʔj*q: @ 9c0''J#ӯ=f+F }o%vj֏ᵝ"\wl3gjd)t0|t񚔼@0V\ևVsp5c'$^iE)X)$=.@etvN4\5y EC{+zD6ӳs4nMߑ$[3b`C" H@^UBR[8k/ǐ鷤ǰϥMK;R(岴0a ,  %!%mΏkj})0_x Sm i@{4 I4jvoNG dZ ) j*=CPY}()0˰{ PQ`;gp :kiQGo ڀhk+>D}iۜfډ*g/Ńe*A(Ur~'ڽ?j6h$~V<=D  L@BM7]-.μ[J#dR#06iֽ3o,aAsImV%q^dgģVU;XWfJyD=}6)StHe7\?hIrBQ;bs%e"Ll󠗄M\|x|eʂfRxZiϚaTHkvGd0ϝT~8l-!a~Q];/҂X^<7͇@9 nNo2CSة %X5o/&@"x#k5wNiȤ\ƔyGeqG(7HćO!y69c)K,26hc5b"hv-Y@nMMQPዃ&ZdӱUW;A(| 1tޥ5e aNnµ=@ S;q^}Hy^/H~r/)%EO8up+`2ؗi2=:bQc'D]/X:µ], ;# t>u=ŸnMHk+D%X:~~8? _(KFQ9Q Dže(4 Ψ`o$Iw~D4Iv%:F}4}-Z\}?ÿIc"l5/'+Y[J=ډ.e+Gf DhcWb{c.3Bw|?\J+>宰4JޢX Dͽ ZMW(gou$2IVARmh >znA5H[PķV )pADP7d4SD=*q"s|g!\݌<1JxHzF{vs@4E1Tͱfy}.lUGaIWp'7:fZz$|Os9pڊK{gt%Eb@Z.yH[)eG:%غ"`W6hU)6[nm.n]л\ª |6[3um`A?(Aߟ&,ӈ zq8Lb!r\X5JaV$?ioxvmORBU3}%ShGh}Cw4#m hGdչ8Tx܃<{OD"~PAHzKǥ};ǑuuV*79.ihWP;k5oD`XuCxTb{1m<:oIϚάBcfѽ̒2W`ު!jѦxSC:6 Bm, $O$8/yrYRO?}6i 'q *0`Xp&>}>dFt\@fcXt [K9?3+\n.dW]k23 +7 S+LsۖeI\6;1=uɛ#_- '%þ#9#^D2]-%-'4^]4FYxsV G5=ENpLÖ\yǩ87&prxp3]QK7iz +/$p_)Nl (ێ|.53̖s0T^3W=ԉs ; v˧WY<'ev|y7h]0x9"n2X_uGrxmw,#QA$/Ӹ=C{p8yGHס<ҕ+<]tfS2stT xɕʞ31u@zER]޳ļ]##~z O-ҮP]Okğ 5äH$a9tLVncI?+ C) #Zy[!hDzYR)+mxn !(ĭa)SێN&f.dWJK-'zt%+C6R%UbMHb0$n.,2Sj݇l -HZ2V@/@,!H;QM1Mmė5711XTը`,EݽwnFŠq?l/^.ଉ$LR^eexjZ(SiDQ6BeL$V#tiZ @Gя1m=S- $of16]Nm#2vzЌM^-ž$`ih[σ՘p1ˀ$蠓k d"0|<5hX63.H}W8:Ӧa#ٵ2vQw` e7 8O-ܾ+<ԀZFs E|q.<Čz=@ÿR"s̘/X!ܘyw2V5FX¡`f2l򎮣#ٌ6T3N"]װ$ʯ^HVP[ K+dΓ@T!.BW52 ;Э +syVMjpc+ <}g!D/;X|\ | Wwx;I/n']]^u2*\u4H:I_?C?`Ep^ 1Ҡ82t<%El;;%{;(;yg$}00;;U'ęV$f˥e¥חu4VbϵjZ? K"[Ü`eECcʅ{ awuvMVZO  XgX?7p4cc)IsdF(eDf՚ybƔFSfve?խh|(G Sa-"~~Ύ@W/D01j LS\+=jJY5n)͡cW"_ǁ!,,4i)~G6[!W(a]6p9@jT6-Rq!`OČϧ9R%BT,T>dMC".Hᵸ 0a{|6qmt?Z7mo.A,l_;]ʱ% VFF9[Q65pyG˜R4'(8CNa 9@ \9H~+)8d9?0UB =5RN!;T8ɢ3ՔKAXb4W۽]Cp_,wI r=fEyؘ=65xɅ&FM" H(m7湂g ]\e2 {9̚=3(Hxni9J E}e6_vv 3P0aofe|;a^14OZa6E[|KLiuc0b uqJ F&brؼ#<}x+qlJٵ2ÁdvLy&|jӕk׿EVnyG[Py"-F(P$CF0 8o. `41Α|L"Q" ۋqXXmBm;ouWb ;cY3.A 1[nL7 %嘽hov)!)RNCT?f}}pX F5FldC59xk 9+]>2,ªC0Uw^*n%F\]pD*BXLu0Ѫè =/3V;Wqx I&N]p\܁[Lru2ilb$1D} 1@Q9' ܶ:l,fG$1A Ν11;"q/vePHyvhf Q7vDҶyT0r Yi=mؼ/!Zqq^Cf=N5 #*e:,ǯ&Y/yBT^"6Dg*'j\no\9X0Y5 ֔as8 5ce.a v3߼$ ~Egj5x6Ǝ׀Y}Pj| g.:PgbC:lcVnh-Nb!T( :WE#-W :qhss!=Og%>Snzo֢;q0KOR?NKNG.#CqL |ƻ(q+L4MB=%wU9Tt EDWAn1Xc-xg@46p|.jD-:+6 gAb(.bjtomȢ֗|8E8s\ 9 !S7T4LwՐCU >5O!jJ {p};kToAN ^T4U5ӻG&^ӌf;Pŀ;kYYy-D)QvxX}#EmhiCʢr1oVhq \F}v5-TnLMQɼ jտx4';rfWW>ՀT3$Rr@Z., m;U\MҜv<\qL[OLm9LD>[)%2o4:ɸkK8;Nťf"A mY CS =ZiO8=SZQbgh؈gTدNf+͔֙K!% Oj~ Wy_)5y0Q  $|uoeeµTi,5yb1 vTEW(Sh;g` <}..^l%q:U4U],µvFH͈Ҽo޸@!K𢺁hT@$Muf ě7LX1pm^3<moOq؋A<^ZH '_`fj絊#9+^Xч9 16Y{o}*Ym lؑ6SMEOG>ӚIn(PeC[]jӉැTLl f<$IvNt ]gSe{n H۶t|5hN[ O K'Q٩Ґ_iy/'|c=*Y$~ y?eBU]뇇D g_;mvj<4=1%JDB,1$aJ`'MR4 H sTEެ6 ƺ'QChMn|mԱu 7 `Ն]K]P"㝕ӼMD󻗽 =ad]bP3FoN%=xVd7,Jy-3o C V .ȷoCGC<?-yXi N9 HtszmƤU88 ٶ8:Ouʹÿ s[5_3 2VťXD\$)X O[:x\,1zGfrΞjG-㿵BFXrMx8|0?$f\Ͱy*^~zzc( r /T$Kk[;WV {{>"qg#>ʋJHuB>5O{d+7٩HBLaEPm4&tc 5Bdu}NRN' j8W 58K㲔畄P5gK"Y{IľnΒ+@qLŸkZhDTۦYENl,?d՘p#O,xZTi^^=5~f*7Zx ;^ռp(pq~9ghڍʔ @)Q,޿Q+Qn|WaH1 %An6j&}mOGXGVFe:QmZ9oI1CexJyOq[z)?2)eW>m mg2%zp'fdKj:뀾ssd^+$LPqB$#2bb!BL!)*vݯ\<E[9Ӷ6*@K|^ : 쥉q(ED#OwvD1Kl1fZ; z\':v2HԆHCgNvvx wqG^mJ!ćeYSеg E3jqlgeu|Ή,FKb4ft%sr^ꑛt+#S@SQ0 YScō^YbE>nѣN8ᛃЛC-iagrh ʙB%ρvMXc淉c{\ly*ދ$q_]WKǩԇ?e/EF Ѽo~w*U\"LҰ0{{,+tA#l,^)Fnέޡ"$F,5*c( (c[+UB!$״M aE؞u'MB!5%w_,:j"*D? &.p@GD̽B@ci*2k_y@CZI@0uDU<u!.KC|ړ3;^|*}f^NWq\ٗ+0kXpU<ƭ-LQDJ6@ߊe }eοQg>WT>/fڇuS=!?S˘/<_e%ɪs*Rn5uDźMqvlTb~wgLn,e ‰d7J%i}.R=1 =J,mŘDt']&w"V?2EdSku i?Vidl=2\*"T1 !p^Uq' ߗ@q*DHb Ŕ ҚjrkMR`&E#}BL<{>rΦ/ nX,/f65DQ작Gy뷉LWaեܰ9{8m+MH(zr; <-aIte0UkERtj_*y¿nC(.܃5Tm_I2f̕Db0ZL GhS#?j<yQ>-RÒؖ ȩ7MWqFN6&V )c|N2pF2E&u-P9hZLn I7.okI'iar/Q2SXXzŶfoľ,@q{;nΖ{`(#$Jk%ۣ<{БEh¥ 9q 5wAnˇz4ys1;hd}L5w!ÜSHN)J f,(^9DʹXP>.cAv4$Vae"\T&|8[mtkes['z|bQ0Kx< p 8MoV)뗲am:?D그K1+k9J+NL&ʙp/\Zd}ƈƫƂVJ.^lil {e?ULॊ4|„TUg1lfZa^U\H\7o6QYnqRCWѠqf>&# ЛH¬HLJϩ` jzZ zzZiG~:<;!<.>JmI/ɿ˽ [q?JlIM knlI#2f~^D= ܞoV9CUt{ێ20yzs c "Λ[,6@lg}5tSs**јlRD2eqJQjy$8 {UgyE+_@}tc,zcX 9Ό|jM3dP@r U*p [9 KYl`0T6Oa1 /3{K̘/ qxvGC e!:MQrCm_5(V8a+MξΙ{9R٥/:Nɿ.%o%F0%o7۹1+XJԱLM1D7akNqPm;qiXKhSb<;0zaJzǹ/e㰌"v.nO`)ly` ߿KhC6MEu?ac%;B}N/eJ}s'& p=r9/~c *d촫* ;ʖO˵*Z%Tͯ{-H:Vn}6jn(7H@TRxqT˚)sj)yӜFaoLLP_s8{:͚T=tl8;{NbxǭH0>~K\xQnT|ZhH^!f~β#ZA9F-$]F%w7*еk>?7~gZr8-NQ䥘 #fQfY0{e3;Qk0{@IEFJ?Du'mi,BNi"欤(OC`p=6{3K7$Z߿jN!y}vğ\v8`gVB=avu*;LTkqJ]cè_+u;®LDf7~IALUfB݁g[CKPWCȞS:~SA+}P u }szS=drU ( J#-0hA8>obGTyN3<\u!(DnP[$W%"k"#I#9ItB: %^b`yl#=3XDh , e03WCDpr}0[=yۏaף^ K_߫4y[ܭ䵡#(D3si1yVHO`+2#y鲛J`ks@:cÉj- qpzzN])7Eྉ|#ozM@j8$1y?Du1uz֡ .#ԩDƆ|fJyFJW)!QuJ~E+R5bg)0u}XM^ɥ &5F?j#h`y+esW"U?<cL|}[[tN[)e*X{=`0ď|E Xe퐮yWx)!m SQzF*#5f&|UY%0N{ځ.:WW.{a}i=6~mHέcW/4 (Ƶ\J,7Mb!{-1pFٟUVQW}Lb嵃Bb'؊lk~L4r!z~^p&uUL* `W(12==6)Dӓlu.FΗ&2zQ)| KP&Ða(|@c PZX87-ӆVёZW货k)"B,R L r[@B*@ ۉaOLo#^[QT:Yl?Rv C֛uތp;ٟ>_0 px@B3ewow+r޿!j+%w6 !PkoN+uaq X(6))[TlmHU3Q!5 i~,CC-AK]5G.46H r &ɚ{hY؃&T1 ^'Iq-ٟ~IwݜF'е@r#dS/2z%sĎ]SbS M*:,9/"cBc0Ś;>dIp6m |@n3nrO-4dYrƤ6"En*^Ӛ>? Yx+/#ZfjD>B#dN 8.X2X_WʋE;AdVW8ktERvJ؊5A{TMR%3&AgDeqj;cW©;[f_~,ݓҳmAG'e.Lc^bCri)~Za~"R6ζ|[iEk*gPHѨ;Hrq3Je | Zgy&@ 6C`]e`:񜹛M3!j[/n)v 6XRMik|ፚHy]3lLOB2MW#ޙoc&{!E%8`gFzƞr^_ԗkV'p)#[3h:%E5=*3_&AIC;n__8zK3h=;dohU-\@Ɗh:*?;>V!F_|7.eᱩ.~@׬ <& Z%%lR:m*nLEFq`0@=H-jg$ M)<д1kp&|kH,t52m)KlPU殖hkZScN&108/z s9RyQUΫ`JO]w9|Ig\U3F(c!k dvҫ($G֞`й.5]wYf37n->HwN0g=M2L_V(w[/ދ- VOmًN6$@CRSl}Rf%NZ~X.eVl×XN;ˮdJz/V J$ʃT3 VłqE= vrq@=Dc-!`pM$%QX;Z`kKnj|s!MgWYAp ODJ ,DZ8` 1C=w%!B;?Ҽ9^fᘝom4[@qrZs4U9J{;t'`~qoESjR?%aLj\`eiC9Kb9b(_d~A wR-kw߾l%:]—4CοkndʢS[rC7 YldOպFo߱0?JC?. %Lgy=aLTϳc,`@7W//ZskDZT?DE)j -Cu R>uSY sУ)~2$Z s+ ?)TNս>sC>9SqZ7RC{'MQ_U_K* n{Tv vxwzekD]#Lc?'&jX[ fvA8Z݉żk'?F(ib>0@)<%Ύ*SRyFhϔ=F>`|]P5Hn6?KFQ́VkjehƁ4]ݸדLۯuIMp1v+?mh֞-ܧ$|x O8Wդ>밾trާy祠m&#uvJWG+('D'-dfC`@k-V`,R;RW)y[TVj)EB+FJ|y*sF:0 V>mIt:('w697AEENKL{d11;MA"ܠrOd+1\P(;ИGHI/(dMr돈j1GD<}׀ g2$^.#xyI!*k|6ep& *EA:yъ5.o_9Hs\/5cFW@JC|h6\%Z'SQ,]#yfKwІL_07B_oXᵃܲ"1-UR1䧀v IlI+r8A;R R=: ,P Y},an֘KZ }{Ԟ)-D_LHNJʸE0QswY8dRg߂m^i VR8yc,ւ}KTr_.Bz~͘JBn.'+aP!n>kⱼ9B%ʦաהΜ'cITUILel}?-I94Jec?+[3x ٟV;u52Z]mdzs!" IyD*wm&=JR`ϲ;"q`1۱čA;7o7BųjzlNMvtqUzh1=H,ADAwC~#A "3:֒DJ$w=0R|BǷ,滇[. p`O#$^Is-: 3L_~-GjPɚW9/XQ:HQ&R {WS->ZD8O%Cp18rLMBO&/3-U Д، 6-?$uj|J"iID U(nMZ-Oʢ tzd-%؋| o,/1\Q]ȵ&ܴ5lU7C *a3A VfSm ?1xbqLtzBs׺I==iO XqGfɖTшg"5$$ܺfD8}' U;/9#/DVݓ+狃^bj߂:BiD [kpidA WM"ăK 5BzV2Pu4M$d, wEQAPz0,$ _oX\ۅ0lڻRNͧ FRng7Բ~ XOZ,I杭*/]5M-=$*ËB jsY1ꖜZuSKJ pZWCT ֩^U3ʊ1ʿI :V л'}k%h̘f>~3/Vd$in4]Bdx|WO5a FBlOݚlMZ(~+uA ̏2/J҆g!DCuR>F*pq*;_\5@B/#C\O !0+و AQ=gN8w#(J7y8xvp|e]xX]9~F ^VL)\`?b}ӅuC2;E {a5CoVZeef˒#sSr-@; 1_f6Kl~Ok o&˝T">MEpTK1w"%DU WE !G ~۴ њ=p#؈t`z 6%YU"Iʄ7VPNm[C r*4Mq>Ĥ6kT0cf_u'yyܳm-g ̨ BB|;gRK y/ElawB@?ކr Q1]s|:6jYuJ@/WթrH)K0 'ˋDPU#?{dZ % 3*s䦦T _iÛ`=Bį]AAckgQHTV gnD xy,j A|O!*ne6 !'OQĝ`ބe^tGN˙$_dCyV[$~>"حG.,دEQ=e!ߡ&OOv$' =" -;O,mLW*w7aE_O9<І-<2b6_x EsꢴPzdINsD|$2w(d *ekprzbL[=N" h XCɸaJkCdpra? D9t,Zc ɐ}a=S)^yҼB娔PRW:YOf&\hc}k+tI,c=Y[&}_%W9wil~4VmA16[SOm+'NKMXHg%/q S&{5`N״aEtJcΧngWp94Ǘ^&CΑ!o(M8CJߋDuԜs]6lmІq }M`i {΋ʴpT^K ͙5+I獃@Wu+Qܮd]rLʦJQ3;PCƅLڦ-lOfK`eC0BC욦a| :?ᜮ^Ku]Kfܸ\hE.A951>VUk Qh[ h=TOppwk8/͋́sqs&Wo>~!VT*мZH7g2ނ!/BX .u$"2+6mա2Wth4<9ne9# w_#^)0;DO6f'_nk}Hf~8(Gi; qe_0y)4cޜݟ?oN̵?h=g ?qL;^t KVe)ɇu aN]'G!IƲZw;tA+ELwpRw3-wE'^E}XL ?@9vA)+ >)O9~|UFa6=ͳm)WeΨ1RjpfDo~lgw!tqďA{*rb:%D@zyص@XWL=93VEH5DpC}1~2w9ey D0.uG6, ZϼE;SBD{d*R=r)mn 4X{J<6#R~q_X]X,L2%S0(FAۋ&Ȳ\7QFϘb¹jy3 <JZw;qʱPX>??H7I)h#F񒿃| gh_厥G 9@x"U yg˽Ģ>\cyGR ?aseN!}f]?:CQș߇QO!rM %ӛt\j9r/I7:^#'Po4lV*h\cy|Kxwo4N ?8vaR K56 |W']7#c fR<eZ* m\ fz! .ʫkZDrg# z$J 4Ky0k3JA,^ć430+UKs ̄T8A>@ d 4]Md W ppt'$A$EԤu *jOcIrN f:)xU`'q);bg̪#!  Orfm} ܏cH'5Qf}tǦ*8&=(SM y^g}{^|c^Qd߯'#IP܂x`0cu9DX$A3C'uc @(?U_k 2p->}~4giP ͘U͘&s+rgtҘ<1#)GESˈkKt!ΨO<6HLTe}-;v% *ۏL󓡳rҚGэ{7@M}UEᐹBЏKpBX` 9L8GEF~A?om㺯6U u7Rr#‘ Cݶg7Tϻv+fN\\;psy ~uv(D:'Н !~ ~h "t\ x$nYo|oHD{.· GGfƁQHŔra?[UyYvIL28Tc&n,Mjjx9# x7F1ߎ6h ԓY]2I(J~(3ecM ܊b[)_=cEv 5JgVzBNzсM]]J 4|`׳lTt+hlи8ocQGF(U;p%p|٭"x(%|!Fk1/4; \W0h)AXÓ ǽD=jĘ쭜G_Ojlߕ=/ذj];)pXt9 cvbu$c(9#=^+^twQn ?N;e6 &qE* p!OVmW9 SFl8+ŝH8h\i!љ蟛?ԢE5K蹬Z1cN(,?>_tOj0qoݣP ?.阿L'ex;RT% 򶬕\xw2\ix'{-%{"deͻp;2)еXfIjՌ"&eL~$~n-ċ[Q$; !;Z{!2kgjnM%H"ʲ^ϫu/#4Ym€3M 5c鼒`VhSs$Z;hr>oXTwbA0@=#/Q7'YIXZ(oYJc3HG}k$=JJrj>-=6Z',;zXJ5FEq鉗F~XͼԏuX :(jrW5Mɇ)' w7ސbC%U2>Q[fE$h#AJm;UD/lxhp7p}Դ~{d2Z.=%84x O1#O?44jR}(dwF{v/9h (]IGk~BmHjCvus6x~Gikk=_f7L>(%:^uOY|^8"ЫPPϟJǼ(`c#{AL44Can5U׵'@Q0.ßAVU,1GshJelFJ Y Q3,AbzP*tBu\G{9V^[P F$;A ![6m!6l'j28ێT 﫵50†S %? V_Ϲ0Ev&sG9HSb:BF5+98 9F|o_d4zy{. QF!V<" Ǩ ]Z葠vTe_qn4c 4ރPGޗnI>V1`FA+FGCp'q,{㊐Xff/>JF\+_ZۮuOtdv, Q^sUuH/ڸ!/%ˠɼ%溨f62Z>vc\Y+-D? KSjԭY6&bNjNDŖj-8KU}a<(X^,KfSI |Zߞ:{nN""F**L<șlf0L6IT1GV}}%2.I.puT9˖dl([@nWfwY AڟUl %!IA&E$L/F[1 ^&:TS!ԁ O<铮MFDϯ#'5 giiji^¾̔"Mq(8i ZA^WS`Լ#yVI3H(8tܰF?È\Mc}JU^+BK$Wkc `ڰL͓viԃqb@g ɤD,<!'GUL.*\f(P"4q)9sFAfSOu[5bU'4- ҖRM38%Ma=Эu4%ȖY/~wtXLսy:_F\9l/\0-Cp5] gst#FPTʶ@q{PR]t7EL?1>^>Z tWso%L<PSg5D-M8`IwcBﻏ-]܏*_;C-븿bl[wE>V[M]"k.hX}34GL䟞u"p9L.ZH<.}>5)Ψ9,?MmHp8|u!Cm!"gdA~X_a e7A܆j>2*a$|7R5=Gx&I>0.~Rk؊Th>t=hɰϵMHĠ J-3z[[8͕NY Psсb:[N))*Sv" /\x g,3+z%1U?S:YbY۩l;Pplsw[RYǓ$3]NѣdfTZ ͺo- ~PYIf6▁D9S Mىħe"1&XYmH;%tȸz;; SSbu[8?ST@]|$k yPG1CH#0&񽚗4-H>2-$^ꏊ #iJmj 4ž Ϧ)LQ$d%ԀnGu9 }6S+eT>29]HiiV 7hɵ c8J.1 <Xsu!3JSwe (_G8%m{@ U LD 9Ŧ+==uěn/nqoYZvwpA۬$>THK0(JU'qȧ޻?}%Im:{!'d$%Y0cGvk^gfmʑYm_48D41<4\'dS϶D1b4X#pAn^k" s_ι$z47R,02LhS}I'u|/w:24:~3_bz ~Aj *YEHK_ 1~^Ntk3]x$M2-Vh7 =si#1'-cKnfR]58$ѴbұOQpw#g#Wb" /٦K4<!yʮ.>u{!b'LHEv%U1{94{_ iQO`8_D=ؠ`֧"d2M[\|(؉V­ ~me} {zڟgVڬ 3B*amy|8f!PP$ Z ]Y۶f),&1~ɉ5Sv-p,O{_3]d2>CY vjcO'qeHՌБJZq(іiAcQAkgNW:,\`䆒` D]nPܭ XO~W+p.h;$Nb(C lkW(_&C#PwCAYS]^P}'"kY`;#2u/(dض)+l}| $K)a E/:\4vJx_ =RZ oТ)pjiQJ_Xˢbi yH0\Ѷ+dA>˳ϮӋ'{P\eQSA$9ꏑFW> o3k\D*Iu Cza pRB/i靣,62Qjz#smZ{w-\I!^> 4p߇}a{--eNy!K(0xF*IJΔ^R$ 53R#5J%^إkXk?w,}ZjVKkP\&+pqRcT;ځ ;a{Brl<HZ+L:JZ2fs6B,K9Q XRc8X_^*`qDFj?vWddz8_/y RDOتe ]`yk_u: xU ZǴv j!0(2dY&(ր(O{f|,9n13Aq_˃Sӱ\Jp+ȸ #d#27b[C;To=]/L\Ɂ^|1$Ȃf m*@^n]heBkI^UN@՛Zz׾Y&t(mqZ']f k&p2Osq m17e,uĻʙUlA$i~+jW:y=K<)MaوjlyfqR JG2]B 6'Ի6fuheISYo~jwc$׆!a9Cʁ`1ꩧ|p_*'SE^XI47k&Qg#¹}hSI[ARs|3 2k{ K'(Lsk(f@Q(. f]Q5 :2I/Tw,V8I}^tcEu=i)y<;>Y(U,5WP=iB9y =ux8\ެov.DP|{@I@שBO'QC^138I!o10q,G@CB^[5ʡ 囅$tµ"pD{sEyt;Pd&rD%;vzzX0(W`/ֺ; I$^ W5+Ϫ@.>+0zq?* Cy0Fk3-1x4meu12 <;z1' _6' ̜uTI ~6#;>8 lQܨzpr{d"P3; G D{l<[xcwV |U8̣+CVuteHX]t6*"=f3^&Q#:b|gُ m/"㊇MOf@⺽Hpl9bٴE2.I }5U"l |=eG/.¼!O^y4tWhz]s8aG:\*PLHb}^L$ǡ┓"mY5}̳InHZc u'ǔ ժ֧$ Qq398xyu1lPG9ͰS"g&. ݧx䑍К7ϑJuRvSںH,Sr@a]B4s_XTew=ZտҵjScHs/Na@͇%QCok`CBGD=v;;cR\E֯͞J:,i+jɃa&|\@E!RKtW-AVjִMdybr;{c/U&q!Au\rc$2)o&fv0D[ 2j{ wbXVIY>0?oADKBbRd kx2~a3|Otogӥ `*W?=,/qZM~ZfOM/B"?jyHWJ)nS^%Zjz{G[]R1_>F-gγݧъ׏Y z$ G!ujZC,.Wr,#YΑ=ieکhRҠhKRȫC$]tHVߺ+SgRFx-^h?<(yenMЉ r8"`pAa_L8=/b6TL@^(%No4H 7t,7 d !/\"`E%}HKj=qH֒,_LL&k,#~i)U8CNTB WGQ!܁mPZWFb,EejTnxa["-w~dI~6P=;+umA)ClϽ=Nu/Դ, zĨ)Y`.vϊ[?a=Bᖳ 4*/s?@_|\fib Ji>~cGifzd\>}Lm:t";[ky+@1 DX商Mhgc ,xRK7_Sxyیt}[g!Ԭ1޳T}|~ƖV%CW%z{v+j\4x/@%41qh4'vQ0`:%A1p>O.ƀk_7 ^Ok'Z3'8_%ez&˫[ELv)lЀ3} 'µmKuy8Qfzk ̞JMՠk\EKgYNyH*̸ЉB$mojf#Az#A 4c=#/*Fe*.>Lg[LS66"ϷJ?6 *`>F9#-y DamI! -Ez3 Kw/q%1qEDi)t*,c' w@lJu6gcl5b5ִN3?Cݽ_ql]SI }:_XC#6MutE ]|@ Ȍs1u<_LnJz'm ,OFbj|̹xg'f N[o ngǘ,[q]Zy,-XH"0 !QQ>|=GBo)!,I̍Dk! Ȯ8wNU Bt)%|6d._ Lu%_<aa@u&'pfL8q9g D.VוFs)&{bV<Jdj1_#DN*N%L5 <{;!*"7 Ȍ hX=aB(YSo pvY>K‡8Bf5c2nvs0 NCNc?iK[v=P8 sΑ˟2Kߝз8xGW,b0Fl[ Ǖĸ\X&wR/@7,/䯡ռ!CUQvb^5a{)پjg×ېheq7Y[ɬk浖H韁qUc^tE9dH5|mw$iyFq\|yfs[Vz>q[řmx"qkʲLj%jbn3H.ڟfVdPqwo(GpTӍ҄55{ZB{d~D æĩ<'J^{(9jlhړp^ٍȇ{mjY/5"{Ӌ}~/ZZcK=uwTLt4C2,Dځ̃5Y8)uuo 溉*^;낔88ȕiD+YV9J*3h ƪsIOy@JKmRc?=*~Gf~ʊY~$ տ+RId|Ҋwʕ˟C~9-ZNHBf6MhBod E?-uWTAA-a{527M<0۶[Je$f?/p6(/(a(7Z0o&&C[v< :\Ac\㬦"wnc!}]J$,e!PY.rZ،H+9?afDCweT>Powge Hq[_oiuqLؙFr")$woʍ̙LXJ*وca/G S+R:2"|qaw$ #/9ZYjQdho@lsJi"cp=)J{?y.5bex+۸MkU˼! [bH49.iҍr Zy%7ʆԇ1e+A4aś:}V-{J-R^dA{gږyjjKkQzD]`yK.Ϻ<z#d[O*4TUd<@icIdc>]30 "E5ޯa]81)P%yϣSbC 0_z`sZK]'l\k"0YkX%jY(/4f&(mm|%idjrUݿbZlԉۿ01&J9b&u4`ZNeO@MŒɖ(vc Ry@5 ^kG5J[C P1{ː%R ?%1)1dWN8!Ki'ὌPHڜ8%4뎽$ (tm^=`"Zً vk,RֹػZld q*5SFGCɺdٔxhv+ HUPPe4؆?2yh%:>ñq2:JAwQwF~kX9W(\EC?ij/F\}~a3 ӳ xQnLF u]"8f&?P?J/v ms:ҖD\`IyEE?(X[d*X˪Fj޵ك)>EVģQ-΃[r(,i'd{y;*BȤp3@gz=Q3eu&{|͍Lpʜ GGԤ'I\ yg2Ͳǩ;,\EƑ{t:| Hܬ#v@饉+` ʾ,[}5. j=O™~{?\ΕlS`HM4m3 5rqx\sg>e-#Ҍ}[6 )ӷ@GeQl&t CAgǟѤ٩dP0bZ<zdc4 o U7Rql9?jB2^TMqe.;,DžڞXx@`ΐ;6E#@2]ؒ&'-*v]ibaӌDpNE)=?%hf,*F̢}}dePFr{_Cxs^}n9iNBy+yb9Tٻɮ ǽwy23l0=s]V0.w,ye;T*>)$$ӾYOSU_& 1Ebxȅ3x&?lB+( m^#y-*=3R迼RnuQ<%ԬKDkY߃&MF'zR3ۯ <8N@l&\E7$J~9jXشS]sN(v8a(o~(s<5XgV`=%G5Z9lVDv 9Qu+/T%cBunO6'tQiHzt~LQ)UR\wV֬}Pp|H7ڼwfRZqܷzkd]6 r܄'Uܤ᥆pާsBB5M/Si])s͑QK􋦆t>:_JFz֧3pz%_Q ]L@+ Rzsť4˺zӀ)(Ka 1n?ǫgut44gs2Nʿ\x1~"N#<4qS|Tqs<.cB&; bDf%Uh趝g-YR/V|jK\ȫ.@ @Q,ұpkX^u_yM[zE;rLg'0Y۬ym`ݯ`Ș8N2` S{W:n ޮ!1$ Iu{WLwu*[ݯ7St&(~ZԴkNMy5 œ F3̅[( shnI^2)un#8HƬs3aAqxӳ#Fnzo?ZmC!?]$> 쿐Z[C)LLehoMIc԰8lΤb3c$\֑~ >̪#A]Wsٶxc3>U^6gAtŐ`>ڄUhch"򩅗uK=EqՎoܤ_?)`˳Wo vG P/ ʿCҳ3pm,CpkT͓trZt##0"K覵cez Q=wwifa+55h(37/`xfr:SJ'>}zWiUVrޕU@0]kτCbHmYV[8 cps(`6Rszft.yp})0Gޙpc)XGCgnpAfv WPy"i ~bOj;Bq_pI% 7NjrNc>A b+]j|#c7ց3qAqլO5.4Swſ#3 4z}[ʣF0wǥoFv&A֞ʋKgϢ=+N-0G&y>h_̓M{cϨ:u$&%䥠ms[alr$y$ XE0/%qd-PK=t`>(u}nc;\sp դXكn-+l^<>h޻*tP:X 'jݝdbb<4ҊZΕi:?x]mQ8J"K#Y)h%`3/ܚ^ 皿t.9,~?"q{tɱ=NP D|gOE@B L֨~R}ɢB~E\H[ݵDe-wN<K Jy¨JM%G?PLlYQhY`֮@9;Nd|ЖG1Ů4@vna1UW𝁪=ɩ'8 )dH:ԏcT݄llES!fb.Xl.v2]ޫgïe]: 9>-I<\>ː~2sSW<,4 x֝x)jD% 8^16W>O uR?Ml=D3zlPT $ . :lhjkCPB¸z)O"zC/FNXiNf2SJF=i @6MLAJa? $cJ&nkJtvh$\GdpKJ’#w EjW_P - gqaaL?d9jޑS!;Q \ke>V(:'i\֔9I^G +址g\мt6QqVr^_)s\.3JY/Kf&XɎg"M47n }ğAy^(۫5`!Cf 쉛D#f['d?=5*aaͥG5 b?!F𛈐 MBJ7('Wy"D|lL{Phpcia8b5bdE޽ˢu[hD4μ}v&dҔ>w'}~h2u=>pȫ[x/+ƷS/yɺyܒk~)x~E,܈ÚX ?Myx<ҧ/rw͗vCb0r{ _bcĞ$s!~#r!1acOւUuLYzY,(_ fčzS(4;8R'RO+ۥ`Өq$\.߬m,!\kVOFO=]M1+^8I/avˁZޏ]- <7ZD\`|z7X/n{ǂK2`ȰP@`};˿:($[}>v ?Im 4A׫M mF%FoV`qu|/ܽl1=0ELL4C.rsZ^ jc7|beL镧La\m*:]yϠl|;w-λD$IE?[O6lg]Y'̈)R59l9Lj-pc餐& MjN;~bmXw;F*&hX}8 | -Ry%"Fz~ۦ(~3J̰}#\%[b^i`b*u`ˉ8V2]ڗscdKh|Uxv8=:ΧX<*oyV+g$JO#eQr.!&lj?_wNTh"TGiͯw݆ ֽ4*eH 6Wxzc˖F:2X]hǟl>n5 tsuq?'0!1ƴ.N 2N<{F FJ}pT"YGiStXfL؁K$!ys"B,TQ6 'iq;`$X |niṞ%+5']†%* @-+ &*eXX_NNLt\ѱ+s vI#e2M!9 J J- *|֌MPYG'y~|Vsi3#}HQ&wo.Y;:g. UP~ycW衣;d ^B[Ǎٓ^891+ Oh9lPQVp_DMf-'oŚ4# mnon[!A= BF.\ os1|#^1w1I*L۾Yޘ[/H516oYsz?'*pקSU!K~6<)-uf:GFQz?kYo=7W:#>+BI'v sRvBz@ӜȍF"r\ ٓw ܧUJ|z9v3JjK{3H܊t쭄3\M`3`2zp P[yX .qDYSY)GnZN{I,A;V!W:#{vUh'3# xt)'v-.X >vU Q"f6ruJ|]ijN$|#-/Y5,xU~&sأ/hQ-yDDZgGxE8VlAY( ݩI0\bRfjFt/ r c{Ծ/aaf=CJSVIj,<`Y^P6?=/ tDroP$H`1_8s!9j2[ΐ_I,dhz6Zw̎@YVu;t RtϑIbbγC+j,0'~tgp<d†hqebS-E$gG[=g/A;ݕ}} ,iT`1@ A4wCu0#۩R EN8!"Gϗq<6@C2rLdok˿I/`qTjeu*QU-`UQ΂bR)$8Tˎ(sM[g&lM|^ Mc9qwQ/ZdmGDl8 |Lh̖30JU ictXwaɘ_ni 6%W=H1uI,|,-`jȗQki۰ksn'vӱjR z|4_!a@H< KoE{&\tcxӌi!^e#pEHb56FϥL'c5Zsˠ*D 2q=N /wb8vW}>m,tt2S mg%=w4 uCz;-ߟB6Mie#;5wgࠓg +tKPYݏnjdT/i_H+jvm\ X{`jZ &D7h(Ҁ_-NjTCpf&͑ /73Lc&Fr-8Y#4b_?G|\1m󣞨^7:lm ? DڨkS7 vg2^~a,]8KQ7414;Tlp${hhM ,)o$YYG" kUX$jlEWH6l DH>1H7"Ӕ[o>n|Qp0!"*ntXstQ '.­M{U>tZ;L^*~,m ya5UPv΋Tud2DuI(hU,du]?`bs 'eTyQe0|/L ^`n4tYel 0]13e?0[VtMPz)_Tl];}١%La1珹ڒAe$kr-vx?U l*O=36'9uԦ={ K ۪5|a;=v-fV0j_,y|H A#9.>־kCN_ud[ƴ¼^ tF 4 25,`gS'ˠf!m/Qq`aն(LL?H(H_7CWoOsjlҍ򍶥Bq6(,)'6n;D7>BHŇNÜ8"䱥$&Mx:g/Mcm.O[k?(lyG܋Ns$Pʃ)p(FN䤼?;f#rے_eylU56oys tR蟰 bBUΡ^?3pjDhLL{'C6rPl"ix+ug!\8m.4 ml DAxy+m@Qu|KLW%QOkнm%j I&dG+y8dҁ_Qi&"=.gxe$Ʒ_‚ l\F$vZN.G AvR5w+j wT3D$F>2ӹhFA3٨M-#u|[0kQNskX[×>{p ѩ|z%M"^QYNå>*mXe?y򓐽32K ~Ħ7@lrZ D oB{X@SjwN2TNłgM Ss _!w^.+ɛ-*+ 7R~hDi2쪢2n*Uiڟmg/3-NuYG(st $>.K$Ϙ" ?[aZ VR!Md,VL>̫!MzUCgdM:2IA?*!z/̙xvHIPkufo| nv'qʈ9'`A':AbAIg1Hsn䂸u-NF3-zuqh >^O-+TT;#Gn#U4Re@cc4nJJev`Jd//ex hբ`^|r<[ @w(+\SD=T=IU >W^غQC2o?skHI(>+4CBok_fX3Ә] m[rD\*[$@]._yK W,~[ǾK&t>nFL?he72ʘHHQ9Z5^DA]ޑ n &*Z7'f*}U8p' YQkoI0U*tmIygl4}ǹ]X1BJ3>nTY ?s?oofi*Կqi*msrf>;7Wq> ^9e o#/ a8pK…ٿ9gD+Ɖsoy=Lc`g֐L){H?ξp#D _OU1-p1ZU7cq~#> /&֭sȏS(RoBƠm9WCR*x@y{Րzl`XFD{T^Ef`#D] ?=.A)`E܌ 8lhG7q\7K)/kq MJRK`Ɍ%Q0/IeozLqtR f%UTIk"D#hwF>y?6S46˲Q4199/Jr=$0\A@?1i җ<s$ qlf*uKF PM)0p]|vK U%rݻn7WiNtO[%8=\&=nEV[;)MUQ.=sTcW)#FH0+H kT"Sl%HUyrK,/ s*;m n⠭4R 6+^WH+l*p:08NKi FNroͯ)bʛֶr 'ڎ8P|Kg4yDkY ^o&"̬4_YS| &0߫N0i(ޚ<ӧrэ*JI'|kj f媢Q=j:B*g)kI+_](͕Q70DqøŅ$E\ ;UmYC_߄)ߧ\ _V+ 0e,.-@( 'i $ғng /GV!|&2 V>,3W\Xm2R_B b[Ƭי-^7ܫڭFTbUژǶК:Z* Y x?_qfOa{݀t/'I.6:Z֏$47iv) e$Dr T') _)Vp*kGȉnN"\:‹K 0FPKE^d☰gNep4L&/=+G+Yk2G[E x22_xn4?$H LOB@Á $\TMqJwV7[I'pvVt9q}g`n/2w+qYɠ@hQ:[lQ6R \Yjt-46D<؅Nkc(*G&kK7/6%'#AJꞫƪ [)0X\0c po C'db@ b‘zfhQ׫++o_@dFĉ\X=bc/"&r,H ^@O!saiDM,ퟹ[M/*;el:ZtZj&uӝګ>:Qp~RKWV8ּC?be5pD̎FgɼIV>Y4R93ڣsQw-7 "u+hʹ ^.g(ǜ!elvGSAeTG+IԜE5< P}]iRB;4NQ-evBsb >IHo]Z_r (abda;FGfػ4ml-N սg&3v~4ʎ_L rOyxˈF/˯$q4,!D.:l<' yRz˙v:e^}R'٦#Sxm_'W6a&$`>8ɓX令©)LێqSV5 TdigWvui(w:•z$ d** q1)*7'҉ 1̄uQ>#Hl YZm[[LyI5v$ݴV+C io0 LnN1ٿHMN)d8 t'gM)c9YXdx$[mwK 琏YS%6v= *d?.P%ˍktڃ]󩈉DwrZI4XHp-'*T@([цm3͔\3Lg$Q+v85nꛌzkYMIW MjO1!en~3YouJ +("OF y^:͛,o hsnA`|M%w$ITYZGo+Hs"m}LJWZ">NNv ]) {DVXcZk:Rl;pxӶwߺn N&dA2fL{u&nOj7肕<ZfoxD'@,&JUKTaOqb㢛A# s͛_^ӣ/ոӟqoe.l ;hhJfIMFYrvI̧ q ~|q[,P ]`3$V\qIz\HPG\S[M|W/YFN8B~#vWپv՜u-h R[DIa6tFMͿi*T'o`Z"[a熆N ?M:L>qKٴ Ӵ/]:@,8ڴaIlq%x◠TXw %Y~aU)҄fg#bY=;D3^`;(nCȞHˇHcE5xifs% KFc8L̻y\K:F/eds x,2iEBe#R~". ,b*g>D|Mc֨CM3!DB_@W7[k?3Wm"ѵ&TGې<`hD~аHi/nkpX#f%; F ܮrh.}l~ Hp.g{(蕱^'SW6:6cAk;lg7R:n KskXoohjh!#{Om`qUn՝Fp]@ʟ~Z^Bժx+v a?34kNFEr[5a1ºDE˥߾ Z T9yK֬NM0uNizI,Zoe-:݁˒+L*dk !ɽmoD0 ~ώ{E\_ BcCEde ղ;)4澁8^ĺtX:-T扯;E!ȣEU=AA& M֝ԛUxvDK?Шc+g݂db: 4:q@rV29x<֐珢b0vO"7nL q3p  c ro(c<%Z3%@zCv&=]`QQ'~osYO.{봏Ό,!k$ń%դ gfUaxՑ{( gpFO!7+@%?}:g0Zf}H_ݨ֗@*/-Р@)zejAJ^rN%jx"z&&N/z&O~d)| }K-YVq.ˁD%/eWi>u ~ITD(_u(BJ]z/X~[IiSݑAaykx]VwTBD6J=7W{iJ8앴X3lZ/0>hÂ': tw4oKR_<˻H}CPt7cdxjr"v[겂rO;=\d>,wt^ry[#9^[ɨK^a pu$jFK ֐\_|Oki7Ͳ*7]"PBA ߒc)\_Q́-LVRaƨoP>M ~.4(]HȆܯ)hzc ޾ <52WH #48tJ$q Z$|;tz>U)'eIz{!XRPTPgĹnT؜?بibyMH̩] Ysĉ0/ʸcsgl<tzɸn@7˦х髬0 ";xoYi>,i0257lUI"^2=Vɻ$"/=W a&vPC%O=tb2ի句 i(X[De kWl.-7,b}_S7rZR'bCwA`ZӢhƶ&j<8qQy>F 9`6~vT;tnoJs[$L DT`kZւ懎 KY n+m7Qz}jI-VEl?v/IG9 hjXq>浤Br]Q4'O֪]'cAj&Ϻ$ZzF6# E7d &o hF'OUxKݐ(hrZɠڼOˠq8{KL-qK!u!f, -S}q#3I0i:1qZ[[?׹,< G`7]^V%S a yOHD1yV=ꓘ^%?3q^ؾ|}]$Љfn3p"#z:!ZSƞ3)c' L@.[e^&zK~H$>)Æp [p\]n'$^-{.HkWIߗz7U|DR)$.mִx׳"M|KMƴy6V:/0QdkOY."q|+¢ vvño'cHTAW-"wPN2IkJqR]<ꗭU^@/.ݽ dzwߛfk~,nM<]`*ޔ۫P 5.*T3mAk-2o݂{59VĥnDr/F tLH*Ŵm3ӭt_y!Ђ.{: \SrkOΪ/@eE}g p1!Yj1i1|(A< ef1)tK&epO&Ő3:>e#)w]B$1yzRuهTfh1 5ݼmtBamo{cT/. #=$Ӂ"s0N.RFx:% fvI\i rE=@ez\T.jM~ ac)4.LlQ/ :c3jvmo҄QȨ$0a8fw->0);36s `XXA-Na<~n#:c1~uDj)rhځ;cxaKh-^{Z3 u S8G:Y{^ KoQ UJw5u +`j ^d'o9~Mugh/p5j o;E։`XoKk:h[pq ݴua4Za//P!xDU^g[T Xm{ b6^2 AcM܈ u ziPStUöTXaȕ͗aanE*0 n=VF|갻 k#2HڰLeȘsC;.>-gL{Wɱp#/`lF c&Az9BD)ld![u-Mn;{HR9gu Ԗrf7(t3v^pfQa:kǘ?3;WDm!SgRυ!kyyُ@-[XW@ic|6@"(gb{Znss#K ݟ^Hґ۬ӡ#6 n"XY/_3-LGftlO0O|sKA;dW|Kbڿ|p۠ws:@0+DjmDcP7Dn=? bߢ@G퇃a_*BX uiu^@{o9zBA"aaPb<3Y.^K=Ԥf]d {`fK[%  Z{k2}*/7Y4Mэ5S (̷f=>I!_R,Ck69p.\-;Â^PIC#oc"BBv9X/IxatB>-jIĿQ?? ;QѸ\ugr?&],O{z")`?uu/i?uXߣÐ4^[Z{c)}O(OCJ#b/?#k[XYeT`k?TXk˳jǽiнk &jOd=FEN>4 )a ƫ=Xs' Y0趠ɠj!mj{C!Xh 44=$;`a <qYC#u*\O57gڅD :(g ]&IP@hH܅I/u,qc9WlJSO/]aY&6|>=ֳrW^^O^zl75ߧU􂬫TC3C];;Tzr"`7ӥ=|*X-9yIiV{{&:"""bB,x.GHry{Fg1d.._)U f1kR5%{&<VA9jF? A7\jNU`'ȹqh|k/2ڿ,Bj1;\ m/Jh⪭;'TQ]P5ots o!3T4֖D#Jszż᧿)pbaߢώn!J wxx7q `7kSC|bT Rgq po~B@JU @ze7P9kX>Xٯ ` |`%VB0& []K,ZZG"X;*ig\hOڭ؉zP/ό [uzYr$.<_4*KJ6V@9=Vi*!(exsu~a# W`|:G{ sRf;3jp wDQY;ŕR~[æ2Yᾆ'A\`؄)Χ8혻>;mWc~f3`; ｮ;K-k_:ɭfnkz@Z;H8!@+ЧQmlS#!EKm.7H_,)^[$5 BFMɹZu7X6ףk$cC|r{j^oNV\\}q(`k\^H)IMS;1&~ GXA- 6ZC;'F46󈈪'laN,>}B옴Ң|&Z($)! 7C4ъ\ lکyorOBNF'PleǫZZg0?bcV.DHuR?UYA8B֋g2K67㮎 vӡMԉi꭫fНwv36 W|TY=]"VLylÿ G[&[x;\ek}t\{"Ĩm+YKy<oow*+C&N==!,FJnyentr [Y? '>1SZyד׬ɼЖYq5^߿ryQNyc0Gw6$@̛}#FX6[^h gh.QoprZ@(vޔ"$ͻj-,Uﭚqq{)7RڴΔś 5wSӻcdQ&Scnyg{jbf&_T?DS4@h^ fB>sn,44^dr! wx$&>hW\6AZc~@"{ !nnԏgGr*U3lNYI).ϦWz:4S[fWq>V0`y1҇yXrE8z(kJ&ݳg9DP2D!R%@c&%ҵ?iue,V&sziQFPŊ*ҫ"': ]l@~TzJ*5@>pu 鱘]ٿryyЉ(չ hPS,m3 nի8HrZ]M` +f2g/Z(i~ &M:i3@$X).r8U\C6.ykڃ", ="(;Sۧ%*pSV h9Un^Qe]Ld54ЄY_Ѱzx}8#|ΐ_'RP\{GL_n~W{#QHٖ>My/~Kokdˁ IZF9cF#~i<ʒS9!H2 S|~oaWʻ~hڎ`%jWs_qrMxř[6ZCuv5djrFTv<- zpe`NwMř(ޣ8!LeRʾ(r'3G#IڠRPƟ W$䱬[ Q˝rḒ+:g^Ǩ?"*n?ڻ Z#v&fu^A[hHgxkEqARS4Vy&>]+1)&Cvy{aё4oN 63IB<2W3$a%(ʹNxޝ(F&@G@4/r8$!#zۜD!qlRzt:ODfBr[5Hp#H`埡J^p] d&dy͞ᏝڝB|9TyuRI6p(50޺w(׃L"w⭹K g_ z&!>Óy~ {$)l!=,Kv??3"")u,N@ｧ}3+O֟ wsX',@loyH\SΤ/"ʣMxjzr:S%<kJ8աNZN%PHe|X5B,rXCi- Q/mJףPU%ɢa 2K,b!G sE -UV;Fw8vn~r=u g>+ypC~{#Ʒޙ$`Tƍ#=Yf+@C Ja^2@XG>vhZ )k?jlbxV- ^&_[fsA-~4 bEK`$xD:F(f̄O Q!9{Yy6~cWx0D`l9ްj6M :z.Cpk ϗ18Vjl5!3VLkb H&tk#$~3\B X$6O1UqPn~V:ZP<`(|QWD(Cx2T)=}jxbM{190xpSv[a@`C3zo o?.'];?FQ}y +fLVz{ŋRǣv@x:م"&D}f9:I*JCeJ.p>G7$'863G!WZ!j'yuF$ dOBbe:$wBqkW^tnXuE2[=?Uw,?!y;XH!DUk=1)p}ڑ W=OT@A'weR8y0>0%%>DEi۬OIhX`HSM7E ݬjdi~i˝vn C?7Kg!Dx!gB:DǝYB\{UiXx\͑WM^8iPD=$ȫ{dԮwbRlj2)#i`ffWd+jtl0.4[X:G6nF𻧠#4[3JUїvV^TYk'bߺ'nZe SN^,+LꑻS!tdA%3c'}8zgiЂF5@o8gYH\B_.@ =K NQ+5֓pj2dng _sճ3Q6ڣoTVh~FS%yi2.2v7/AK*y  nxZR8uWhjb˛s;h)džPZK,]._YV?Us7{s$7J"-al_Ntz?M./1B߸PԺFf 3nY s|mE(-t:w&O7Jg%#v#8t `lc>&])9g%sf;4d0 Y'>nbDsD]R1F 4I#'86)=sЌdiu6ay8J0AFkpqDdF !ZɬY.ˁ_M8 C;Gl$ ;&딈C5QT}PW >AI8 O9,i#4x[ڧʐj,H%eh5Ik7eiEMA l!H֡54B LD÷ˡ>^h}(B]O΀ $ۉ[2b\Ik+,d-gptH"an_ vLv:XMU@^(j;024~Ld 6~m өD:A47~? ̋b`#sGL;b4*qh]3c- ,0]g~t!?~dx~)DY(ۨBu0\. BwuQms4.א9W7͝lӲ$7n|b^rU% gsX O${ oHø3 8ΔȨ+F2p:߁t6T@T,zbRt3_6X &VmF 9ŸGx obEh;#Vñ/}m \Z)Yٌa "öuyɐo1#ȝ`f+K{1!5 ڌyyR#'U{gDᣟpeMGV:LLBёkXJkAТ J7ލ m~2bUר3/q?6C(]0-zGmWIj ke٦I?o) `}D(Y?ܣVMB%cL@_^(!0w<EEvmic"t1z攌=0o1n$6^ 3X&z~mo@ybEy :UvdSb8C|X]h1KCu21E7n".FGEիqLd-bL*%G25fv ˿Dó(~QO]ઌe fFWw7A|*}e"ЧF_M*z y$j\!/68hNLqKJOI~;,/H1ٍȂ}Xz!:7Q頢 1ьWFl?X$7~ᒳv卯3na3 {s(먿^ ~4j~4h.tB}w4E ke{587/r{rP#5ޢ> jKh0{tCQۂSһb[_Cm:y  VIܚuypY۱ aZGgUQM{n"lZ#ٰ9-OVU\f ӎ(&k$3 x=4j=-a~O`I|?-$`3,pHFaw8\xYrf U<[V,*@VKeԇjHhj/JXtTi'f~q{ ] ืn~M\?!i0Q!:g7T]^oj-ȶ]T}Rf1sU ~05te}d8X5߼[@2\=13BΪJ'F6zs|z fC::ˆO^Hg'e3!$xa2t+ږyk£ U qh9vF[ cbt8ν U9x&>dzoTk[R;ZOJNG\y.`nP*ϱ@:v :U3u6QyH{T&auh).{UC$aL1T!k u[aX}IlK&CV¤hJ#Y)IxT/EXIq`}z&0 󥂧hDs~/f3beKɸgo&e ׯ 1y`u:0uG@떊o-퀊c*pmW0=^Ն$r0$'`**oGu7x.WX<nkXK[-2XǑDŁ.Y4yh2aͻ/3o_y*rB]60ܺM|c&UR^',f:6Blgo/oUD7eL : CKMN 0yCrt0F(oOw+[VX* JX+#Ct-pQ"Ś\m [N*=a #bj1ƝȳduYmc ʫ ` ۳Z!7Xu5j 8ޞsjO<$I3pY0^yYS̊]nw'V`fЩa!4Cb@mLއB锔p_ˋx'ۋF䱍JC"^vBRYT3a[5J9P4O[2u`}A^cٯ($8Z%Ό{1U5όKxR/j?.P[h ݗ[Yrxn/zZvNZvW)Y"ݮnmy@mVK N$ ƨ´ϧaxMu`ýZv ڙZjbtKٹ; C'*r3j"~ 6deuWϙC5xEcOُDU?iۼE F1_.S;TQ"`쉀Əc1HkeMFz TF7X)C|p ^Tb4q #36W&ʺY>j%mkq >A(L$'L> ii/jMMgņA Uqm& 1._Pi̻i=+DQ@w)0*ƽ.JUD\bڙA&Ɠv!!JmT" GZ9L_k TV/T2qi Wm9ftBaݪ# #0tDLuwBU)TmפIW87+Ũ3̯- oZpy2{&Ovة 1犓^^ŸY X՟7:z9y 6. t[憲:-!}O7GgCd!Ij{~Rkb2("cS}?ޠLV=oބ"' I(h41"95qtkjr_G~dx ndlǍ'o6x_0aSJ{%S>8x4F!(ҵ,hTS[uR][IMV(n\F6 TdKrWΪ:1]2Ďg5p18ky%Rhͥ%0/L/ ~ԋF'FkkW4@,KlI6/FLhИo!G JJ(ܳt3}*]Qޏ=ᐂݠTyӶF>Kf*ĝW.$S#3'QTa79\dS]~V+vJURۺG_L[=!ƽaxN%.ͻjߺ{ŠSr:iЛ)(GխQ_x!tlQ{̬c6?ɶ;yzMP[.1:^v`K5XQ`xGQXh?y,"-0%v BXkqH]yv?DaziiUavsw*i\n ijsBvkVdtPDӤ + AD]Jy&Q& `+o|V/'/'( n& &%Ѽ Ȁ%Scu^3[5)':6PJEGLYQy,Qz8G3"B fWB]kW`%:wo0B!_~[z 1"x]y3w ؂7%<>e(v9BnЯkT<HKJ=h-M..ю@|/l~s+bYyɫj]4GHc8Ysf5e4BjIB#mXtyLJ KAտ$ulJg=] k0: &qclUu.>3ncHmm1`HC0nxC3WUUohg02`'Z@(޽?3d7IlMPfᚍh a)wiopKdu`Ć 9V_Dal涷$QHpE)n؈#8}1Zl l+Z7#BUQqa^epu[S;QkI5OaWrq<]<\qmҍޣўTI ܒE V~s/ dxM~j\z(^??wz21ﷰMPSL18%gu٬> pU'<>&S_ˡA!hCGb\lYALCѧ*~}QKaAy˛GW aKC*3u-Դ{˙6WǏV˾̲Na}uK4X/>$<^gZ~jL,][c469fy7gˑ2Fw=Pɹj /6-̛Hx0sHڌQG=5UDHBz?${,_oa&BA^2)Qoy;sp.}Ι6Ye#o  s9[tn_/'*^rHDFQb VkYOJ )<5Q5-`&= ~ `0!kߣ]Lgf)7l5(=;b3*D>6@ךsgz"}\Uer~dHxLYtVFφwձ/Yxϸ5 ̅1Ժ$L)vH㻾< HoiBY/X;^@ښ(YQ])Ŷ"e?3+Ÿ `#f4U^8Lʄʱfj]BRJgمɪ׿[O-M ;ÝdCrS [?Fjfpoʌ !dJaAq4/ŸlpQ(."sAz#x{!2Rijy'2`I>s<,ClRfU2&>["V2^sIeS軔#>XoQȅWn ^ _n `q:jFyʬ V'AUC5bb¹n9ZQ[ (kN K -ԣ'za*8!V) q:j!L1ep7^![Fr&[-Nӊɽ _+r</,7jk\[ZK}o>*=W"CE"wnkV0.M0hSPMWXaFjеQ"nY\ZgGp\jL 6]RLm$,nuse96sr7"̡ٟ#GꦂPQ^6z\$HneKɱ] y*y?x3\ϔl*iJ2}r{*hQEXi61;I|w몎VRq?M"|E"bbA60\D\RjT@v-*>!z$[Cǝ3ɳ?8T6lDⳆ <[꓊?&6J` \=vO;U~L pV”_5Q8_);JYGEKd!WNWv"V]4kpx>%g5Ұ]O 5e )TG*Y_*T62WB kqCB7/-GUFs?$p qdWK¥vRM~궔xr6 1Vp9 5)n7ifs\OPGT0gxt -FʘzP.qSu6Pp2t-,Nnj Jf$@~uӋnR(D;܀SxF(Ph F72#l<9VnLmʳjc'k*K˄EuOwQK5Ṋ58~-ύs=eoܦ m%SWC Tݏe1ҼPV$ ^)U(>MB戞օt%$ϪLF6R0#OE:ʂʆ9n'\Fɬ-"78w 4 }B.%)RU2i ! c5uC"3+~qmnNcQfԙalۏ"&$_5Ξ0qK}"~C-9Q+?1b E D=&0ų H5~{$̄-^t鵭;g5\Ѹ3Cq\TyTe5w %x4򖹱 ?NJ[.D7-4u^Y53owX8JkB KJL\h5u2.<^Z䟑vdsViQ6Yǡ=Λ?)(fCSXl謵^7Zm-7vG6Mwjx͎bg=r\&GR8VB%ߖH |VTf~)d@;_|At*Ųj3@Pb5R|u6x}؂i%AJDpurcѫ BniMe|\('dP7'ڧ}b*/id/N%& 8 < 3Igi]c>[\ퟢ-$^2Ǩt0>U 2ތ?Sw` jEQ'']MR u+z\]Hr[!X/jҹA'E2+K0o1dpmfy].a Pg2~CeQ⽪^ 5<U'#KO\2v ̊'HtwF,ʏt'G?RݩWQ$+u@ ?S>`ʰԹ|=3:qӞ`gmc=%.\XF^;ŕ]6!IrUoeL%1%cI?Q}}LfqDi$&.Yr #EYBgЈ\_Oߞ' ZnKh} 9)C#]C44~,U2tn[o?.\`vvLUCW4݃f,s &=K2ʍp 3@ʐH$m\juDDO-#9G.s&}Jh)r\;'2wǐgOMxe: ?!"9uw2'"-@D}V$e<xB7|^88l?C`mjd*SPGV_rWoC2Q?HQbǁT9i*{kZa2Օ*" 6G)•q_Bvi>dU)B\*`3=\\$JuXmZzਆ@?{ [竫ϓ 7.v #t8O -uJ3(H+j""i4sq Gp|'6Qġ "0R'm ԏӄC< mMal(Bfk~./ HjfIp!u5" WW/6 ' O N)VN Q4{bByjm[^ pjmeX>H> ͔)ǐ8j +LHq; Ax_3kx]2 { 7/7jaw=.G{vDwՌǘLQ=& ZS[_5$X˛2,[w@~\W4 zBYϹ{ґfHTHy>Jwҭl Rt]EFy6\Y]oL[?)_M՛E]8s7韷WNѥ\*õ^p<~rzˉAScH\s7,GyiGThGDa۴%lU!X"= 2q^dB܈tNCs?9'm]wex{*9d^mjqbt[+l:{E̗ b3>bnVk@[ub̪~9v+GSȾ =Ob2$$*ɤeKҗ"U)߰*bY6doh+E>͢#5XC U)o2d}QUdcNc36R%Q2 TMߩi_W".`1HW}\XEE^D_?`RqVzr߇d d-K̓* T]lĹ}JcƼ " >Yކu;W/Vx^kH{˝SuW l^b']-.[Ί_JC"?Pir"]&l~ nt@}H uDBs/[jv osx;Ƿ(fpzE|TfV-Fr݂jE d ,fo ׉Ѳ8yǟӷnM+* ,7in"խPq ]<+&G.D5E/a:cA j& |혩vD2CҼ8{7ӞŦE˜= \نFzքkr$ޒ I^bC(3xrk[$EcۊNMVeN3vOfŢ8Qł^jff,;b5ŮF^ ~Bq z-eƴt\ =kxV_[|A!EcdڑN`ېϔ9A|9:My4j/rsFb՘68i(%ݺ+m.lbCo Zr-qA If>k4S@$dmf}FE>gȴdk=RМa4s7pӵ_1%WwM8&oTd6ǭ^:=vqk*} Ru3^a2n@ՙiB6s$ОJ}g:QDi>B,:}Ɂ &&Õ"ϐ% w:/-_<1yi -{~!:Rh Aॊz!>GJփ~#|sTvN sh/zDZM :5ϙ΍/Bt /_G>8n,qk]8^ݪO%LW'nv&UV=?VldCGŎf? ;\qgEpc'%gL=&_)Ӛ3J a.u6M6`IRj~gw6TvIFMCV*{yfpk^ eGE YcnIu̗J6(]j*S#!٘xw0l}^rFu;4zuZs HH5'_d%hRAT=.fx RCV*SX/qb{n?c ;"$?׬HtIʴEPhs+7/|Kjhd1JԔR-p|U0s/ ) 㥄>R(DS9cΎTi8f,\?uG#iU763?l{?sZacpIrtq_SS5+Ŧ]9C럄h&=vG^1,7~ְqK8'P8^dZ/ J69E;7=wJD;ƿI46IJvD>exP6My< f+60ؓrb⚔ط5'{P }g A"u j>n;HHz]L-Q3)p1= ~;նKo·;U56'čN)[-]XU;".KF#3WuǕLx%ȅp|+34%*90Kqmx/@"QE8 !|ۆS A7ggq,F-18,)Άɛ,yݫݶT)ųpD [^w%:ojc:pYSj}vB<bϱK`2a}]jXP>EnN{J3yn~M=BNJ =ڱ< |=i6H=5/;6ŗ|-J-\d!?07|X!;a$x (po]ؙΡdjz.rq0ٹxmG%ЧUN!`sDlćU8ۉGm-ePc:̘ ESYW29h@2~2'gsR~LvxsD !խ\Тkg5ϩېc'_3֪"}kP/쐎Mz ˲@lF#. 8zw6{`AwAٱ).DJbfuΤ܁Mήd >xTNkUK;0@uARݢj> =]s@A3=ys>e'k@j.`Ux P#sʧDD\o^g/jq=*b?VFPBo3lfx<QogVXj :)E/?Q2wNwK;Ap:Iyy^- fdolπhcl=B76@Nm$sڛG])Y#j90mEv m&DK, YBℏv1: %+}'Ym(+䦦P8{iGO&݃Uoߤ޶¯Fagɑ5vk_Y!{QB,oW豸V&TԂ=P80눏Kl[־ܴl|14!ؚUЯⶵj]ߴ1E:jCKN{u@"Uח%GU-]4,]Z(J<"`]W+!ׄr>OK~{/ @ns/`s驄o~v %J=3uG<}'; zkIW^6gouBӜKq~մv IKuIZ r{QG R˜XɄ{q7by,wnK?tM&=`7J\Lw/G^cGNn@q'GGV_x׌ΰorcFQ)nj_n4OXsR7M;VS42NQ-o;!cD@=]  ZV}DNKdsXV/Dĩ+.kGvO^!T%k2R4$m8װY1^괿:In)~Zq~y Tgyq9*JRh>҈:L >~aPGLdhYӿ!\Y#+ħ'4ƺN3Ek{WW <)$9U{3C(+y/ԕo͉uU ؤ>\2;۞oMҐF!WTQSBop}ǑSTFqD"afA&J?qMjl&xׯ:a1LHy%Fe#|lGq?G"YRe/b@$w{[˧.(Xl7i>Fm4_ϾN#tt!E:1;WܱENB]ggˎUbG&ݓ@xf. S'[ң@p}6)6abaw`b'5ד2p/Or YY YW`6mF?0H RaHB!o+p"^|Xϓ@B )^\ױM,ͬrEaVhwoie@rzڈ-b :fAm'H_F_'#'3DH9;,>jVQC3J+FWѭ UB"*0^ݨ^)%K+E{LGb1L{Sn7۽\CSCh\\㕤qvIڷcR $ߒۀ&wsW0͔VPP*g^:`s&{7v|^M *zŤ9o𼧜5)K!T_-'ܥ)=4XFYbrl͝}u)f`a>:V? G! p3(-֙$:] Fk:FHUA4,J _&/MR F}I-V5c ˭T@(pd+HS^FVrQ/EPgBnO˔ycx'Ǩ=NƿHluŶ8|&7_h9u* hHtk%"uY@TiDs//UB?/ W5Jbb I}xjWk)"-> _j8]@/ejZ0l_JsiΩ(90Pf0K+s6<>G)m0uӼ Lnóq 7' QӺU\N4bߊ|S}NJqك]GLu8T+J= !׶פМXC 1|vS1x*#OLjNޭ0B:NZq2}>"5F3y\.@vU]} op 9<#aa0)IkoNbFr€祯+0 qG}ȚN~\6^1\rHq6< /9{ zu+VuY(z/‡2@CY)J<@Dwb&r|`ڌb~Y)ZoQb‡I_6aQO'jq@~tY'UbTr l1 Ue+AC'z}-n`XmLbH2=ӷ x5![vq |8Ӣ;) 2I[!QaXCH L'F*'!ޡ.CȊhEm*=j}:̴n66{nrn\X`[sK'сO}F=ݶhIfFVBpׄ7Dtjz̅kDľCo)ZiqNuB![1)Ȁ`I%ȹ9yF 8sxL̄кaKc~E_U0eJUzNb.Akz\I?_]M7"V̪C7A,ByU M}BOy+ǂ@8- bOz$_pWc"^3UI&JIEQ~+4 zchv-Pce+,(;3jwX m *#P[iKa|0HHl~ l&Pî~IMfuBY}.ҤQΓXYŽ}USv5-{${sMRBzҪɅ=lx&g" ՚߁_ },CEe{ףa^BIѣP x$Ib1T17_E`$ wةfffu7Xd Q:Կdpr6cq1Yf%#q#Uat]FU+6n><ʮt *"V5GXZy=#Q^쓡Py~MS A>&둊- f-:466H\u,[$K ۽^M4(UaB%0GWԊ#JDj‚lROP@WwLq(V=X͂P$c"W srމryi $g,䍀,{3Q"Kbl%LOBm(<#3uTW0 ]l;$+0dMp'ɫF7VIn&;[.44sHA^OL<&pJv̜z=B_$06S5G8'{`i.]rhb1ܕ"H66ÈY"%ި!P%=ox~K[x=0kJo ۦ@dS.=MH1ĔذձRiα —@ H+.0C|!`GZ1C] @sCAvjmvKWf/<|lW;#;%X\90 ^7s˴QWE q; =q`;A8| X@0dx2Jg j LO1 +ڪ»U'b B's xYI]?ps~4JuJw& UݞZBw?fg S]Ų)~O,Ɔ]x=WǤ٢Η0p ~-8&:![บPHiAo}w+;\ʋtO3uм{Gq.hLN}cF˛l:/6~T>801 Wg> Y`|:R =nJB]GbAPJ@SQ]2U tdMguӑ+Blb;s5?}}K걱5s7k6<T.\T@x_#DO䉙kqo6P߁(I'6`kv1 C̘,:FocZB&?R$KUm4X+=ܲm]oN\ή4;J5?ی<^Ȼ=4EaGߒ9 l ] $8e*.xcFE6x}n҇:6mV,d֢=j*.'ǧ IU8Xjbiu.+"볠ׄ]7| p="7H,+_vjk n!ۍ3;Z2z7!aEb|vyT=WFhrabq$$רJ"  S0sjY5=##MB4E[CeH IS.1)^.^#ڌH n+3o")a(֨D6]w<e5M'64zlp,* ec#C_|8, "qk ?@^sELܶޚ-4$w 9+ϨVlN1Kņhy/.w+~,"Eo Usd몲:t3}j]:pᖖ#í1jt1s~^!0hHz1ubJNCseZGXauNHÒMx2`sigM|DF>d0~_Z@NDMX݅]u3uO;\r[yxkf }'IƜ_%"XvwY*[}ɐfr,OxHnai^ ^ܾq9T x ѣ+-* lmog}>V}| ;/BRh”m_n>kY(NUtֲM[#[Kٺk9\ٽ˹*(> 8Rz'Iyg8设I?#[@o{Kx`nk0 x=Ϩw1K&*_r]Y+<%/ytEgph$+29j5+A 抡 )>%KE3X<x"mW 7ڠvj5|L`ӨFD|.xY_ڧ6{Z;rBi;O49ZKy>ؾ#IaM;.)x0"xEN 1hA_!HjgقI*A8Bjk0iZ1\h(vaC *_.̹%#I'tۏ [Fgs3p #lĹV}8y *]qGMI+2eXtR8. o=>n5ɧDdIjӌ_SX l4E)sTZm5?+$"D q%Q@ 46?+څ6>IbeR3ᚧclHtHɸ[MD!| ϩE}!@?PQ++7$TpAHO1e-KVd*.'϶<Zw~~> LPdӕKpcc$cNe3tL)A 7GB|s:1z:Ъ7glrc\}ek}4x4z tҡjҗBxN1 IKT &2H 35+#{J{ i2FN 6e.b>ub-/8i-\lHY'߫bF;[,];S7ChJK@/<1? /vVB!9A:w3udQ*Ue(=9< ?jRɊfS,V3cs&ŽE叁rϧ%Wdwͻ=O((%YTki7ӀbZ)UHѮiK}xthρS7^]8Бo2Y7c%3/dԃtoB:,Q;àx]ipd{B ( )cg܋= = w޽7 k-ZyP[N.Oļ֐VX)UύX'ݗ~DPpPt\&Q\iuu@ ^+WbGS)5fx'wbו|6 Ya̢̘XUjPuhp6JeR!Ewz/܊>sc}wlκm\Pt)v'TZhNp9)buy8ӽC7x(L4ugw?@*x-BRoWQ jWzmeڑi!o1Su H\^mJ 5+;K>qyv\0MWfQӖKZJXĒ2`?@=ݚdaU#iM~vpk*Q`Xwo-g4W.}&($g]CͤvQಲՖ  %ʗVR isu]: XnXT)2jEA,Kބ́ ;]tMTnQOoH=& l2$Q w o (M^~x65x(b֏,:$BUa58&vm \/])Ӫiq=>!!X$%D[0bތ< 0rhP_ qTxrapCjvxg`Yr}Kx3nK52K^5SujS3&`j+V) 1WR"w}_4[H̸y6iG4Q<~PY]{ l^&H=>}iL U·J➠zi_^̥u\~3is_b&m 株 OX>nNz t1G]L&(\BQ0w G[ :g_ x+.5ڂ픈?>R\?{l/ ^W& Xa6Rd`o S6tԁ!V4#Bd%|2Eחhq$%ʜݘW|e\_nsm[HY%,N>':_ S'ŸxhG/|5rwi84f*-Cl+6G67ShO^p'[{y6`9u(D B:R7ȠG6n\4AM+*m$@qm9R}k1ŴԨb~q^F/U ]RMʛA=&8n|:BP/K(B|(% t#wyVM$x |IỏH%ޟhzv@3U?ͥ/)5~0Vzgn\x()P#)nECQ6kG- aaYR~h5wPoj)PrseT$QtFE؆&YѸuL^O<'-CzÐ)៳;}'T ohl)TW(x$??i;ڈ.zvMȇȈ JZ8^4GTNNwm3^Yʕq[¹,a ы*E0?ORWsc.R:4pvEҥ U]1!2if *׀*poh ӠE$zVj'&CSUP<\Op!5Kb6Wba"88X sJT\N=; p8t䗼o-N;؁"Rl:-<+7EVj׉'@ rn] aIq;]\_^rB7?S??'ckZ-曉fC@9z,|US6K=@{BUm ap-`)lh:>j|.g`SMMb۶9B{nA);‚‘ I'd*4s2fcE :D)YRIA,> J(A \@FÊx`X,A;BWH+bs鏞]܋pYRє!WMboj?{LڭEn䢢GIDK'ٯd9i'\wAwD?HGFhYiRENMG Z0pSir6ɕB/wkY)t8M.&ǓjA")7i)Mn@1=<1WdrNr 4x{a,IeeAn (4y=GYӽ@gHd:4 >e6XahV7!yۻ`b6qcvm# ބxh7= K_?fgd*1B$/~fFU!7'xPz: qx?tp従pH˘3>Dvs~1Ư9r[w: Ozw|Wk`6X%Y|j fFA׼zċ1Hi5nP ?vUquLs h_o*l&7[SoE(61V`G_\bYuK_My:= 6/! 4P`"Km8KĺDH^-!ƥIEݛ2)lhA>a SI)2ߺ(OE0 GgT8 ð!q04_hS/&U S)ݑ=R&˜ igݥ<* )YQm۾樳º|+-ebbznqeQXMmZjqGSNV5:35ANE Ơniqv&r6)r:u΀Y\~\w4=⳽"?+YRk ,"#i4,]*QX]&uk&X<Aӷt{dq(#㭩8 Em= qF)E `lI~yDkʄ뉫 6X%_n N A ot^3u(lQ^]cY e^E נ3![=]߽rZ3Ox5`\{,M¶R~_w;3NC]%Cg_gw Z; "x"ͦ)ؑZ^IB~ wz6 @+ 1֩e߱&Eaz'дeV)t8?u PP+ ͹XB1%6r2/9QO$O *[Qa*nf7u1|KZg~01 {tz ~hfxG<(̱a>Nenpa;q(6ђZ4wr _1,W␦nURx->^nreUz' ٺr C+޾QP~ .m./SG!d1k૾K<T֔ {_+[YЀIA`K<: C2E @=Е=30zhcGP4a>2ZҾXfSdxZ ~Lcyl qdQV7+Uiã5?hiVYp 7%wZ({hvo_(AɅY 59OѮ,X3 wrMk)ifDЮᓯS O酐4zu,B:>~Y,Np!ol״xJOuTm$fRmE}9)SniHVӌ7[a$񦮥c8uzuT([I6m  /P}nf$EyQŕ8i nOQEl2*.}!UIbu!e|G0Y!!$G ;ivL6$Dmu=^.c/kl[裤`~½y\8'G/:{bٛ2} A<Lޜ=e%v`׃ wO)An{NZKm uv?KT;˳УoiJ9;<alլ &;iy6.݋Ms=}\|La#FNmhCʬi|]yaSrPARJmu, $SDUr[y<Ҿwm2a(͕O@UQm #{Oy0L6+YNOH97J NŀggD͙(&0 Uf'd?n<@<+kjO,dVAvU+Jo'6NXòZwo('W.]ɅhJ=.=TrPI,&/$)-\.YEaOq[uyclAHl\CwT/,qpN1EҸ<M*N"gyG2\[N3)fTYu%xquț4*֝ 73M%W>djsGHd>&PL߽f a:Ibdzp.p=m-zb@7/#*ug1N1w`ET1Eil]C6??O$Y%nSi~@g[?"&V=uoM gor"_-53l^k5s,F\BJo2X8N< MĉsT)RFpKYI~pYwΗbDHѹy!T( _q\}rKLcvEު[5ك?{%jH H8]Eg9\0/Gn#Xh1R1m8@>oO,' K :g%chBC5؆y|p8(zW4ZRsko4þu1 {fүH,3G .7l"x :P-=~À{j GLj%@brE<2olI2`L WڝWA s)_zzq*Lcf͞0:!8j2l.Bua~[Ӄ-~HS_y٫~j^֋Qe''cUӏFr;{~.P`oh4NRVv C/dCM?fW5WǨRRtޑj&Pl-ڏVw9ls:-Z0CE6*⨰h0QRɯeF[6{ /}L,GOp1bla.Hz $DbQdu,:ΓM")vv: eKc.81wiEX5u"rTxw tw &?3M4ZOqCgF(OTp_,8X~\ Ns (] s0(n&C65\6ڟشs g2x㷰: 5QV$."#*6T Naޡ'stE?^6ή٢(Y- ,lZ{%& zfy+S\Fč83"yQ}݃ ZZM%Oجgm?k ^޲vcY9CVF8QmPKu2 lL+<YӓVo8BO}<7 :9r& rTtB-!*~BO#w Ʌº_aJ78DBg0AB(TŠ|˒`P\Knv/`lR<cUZtGzZ=Q{:iX@Gf&e]ŘړСGfǸ%a:0Gη ܌@nP5gJI zu+?$4!@n'1$bZY>*i{ZΒߤSv9G&_hSן:6߶ubFa֛P@LQ.{.Lc!r-k{Z^0oH[/.K0e z\fT|L$n{y*"GnJBϬo12Gø*+wzdl5,>lȂx#@չ(#*0p?4tv-|XޤeM8W+a*U}̔M7fX;nMuԜ9/)\GiҽR'G\V0edRu3h{jǝh!).}W7;nhGb+:g`eo'6in:yvSefli}_PQ(Dr^DI@,sDVRX$?)^1t6L"1i]%Iq >-JM:uA|22DPϙ8D(ŘB22f QUp>JE^@2Jha9H[$9xw1a=8QZoFf#:N2^7V0*e+X/"\2c-{Xɣ V|x ]ǭFmPE1GP {뿗b~%o*Hffܞ_QSc9Y8h fף I>xebBG]׏ӟ}  )K_AW@VX fnUb87K yј#a4XuJf D^3J$"d_KRv0YJ} GgDw\neXJG1i^- !"p%+#[Qiդ{BxQJH}Z~/V4b)M6 oAq4KQz5+B@!,TJL̸\G%io߁ akUu'9;::?IBͲ6yYm â1ktPuor*xl1>䵣K9c"fG&/V3@b'zek*Bd$3rUs>þPH@;׻(bRMd~nQ O]~~gN:# iͲt-%l^־<)T>ҴNG7"fxdmW-i}Nh12b}Ȧƃ5ln\"`aZ\.BV3\&pIG"?u݈!̵ 4 Bݩp~(QڗR g `O*<䞻N(_sE(d4evJWuG#Ʌ{pn$ʢޏiN دi%8ږbŸշ޶x~G1Aef4HU8FřV"$ *7$߶a+f>[[0EWf.R6wQ[Y^~\tkql`}i|OreOTu#P`1eZxl_Ug2 P[x-2&|Y_91$:y~}Cت r-Fn!jUȔUCD6ȇEzݵKLn0@eg({{0D=,95#|mҌSm\!iIb#}`: LIy峄R8t̞En[(jY<.=Z䍧㬼E3kDsP7a,m!ӧ1P% 6&$_"u::]?p}oc^a 6&@D9*mJno``x[Y8)HV$M{fP;vnQܚHΐɮO0 ?J%b}Q}79_MR `>1 *4\9Hԡz߸MI-L(~=dM TI i C7Ck=%B0R}'$Y'P 4M0:V9C2k( oY F^)%H8rvM3 ;ٲ[ƞ`j 6N3PцT^L(1Y$~V(CRKdi>N8!q99ܭ-g pWCtl9XMz=:mdW7;boazlgƄ~XI$~&)n\F)ubˬUt?QYV45I$ʥEJ'C{.3lЇ0qaf+QAdI^r9哖k?o1]/ q7bωA{a$%WqRJj1 gAzʊdՄ[GwѨg.vH&}{{U(0A%nߨ^0/( Zۃ4#c=6[Osgt:XЙH_% E~7^^&PWڂv>jboTz]Xz>=^O%3Mfwgip%8LGdQ/ '-/1r=s4VCY^2[]c3]hhX碥Vr~#%%[7ZAAuj^CȖANYyT0kV~1^ rOg~?)Z_+kdԽvPP@>#G&or0 ,=vkªn<_c~{|`famf w7r(dɣ'%Α_Nrn#m(5H i(uH$̎֜$rVxrruT~O~5Eَמ|)[Ԯf{wDHK(\H#,L3G &~~rPs1E-2BWa[YL= "-cnWd{]P`//$SqZ*GC%Mfy,ߙ:$)ٮ6/=z 5XyGפoq4fM[蹲wi{Iǔ6K& .&~1TzܞvzӾb7ݟ+riPIP,Usp}#<&~" #L$%ur mW3W،s2ЍfUwȂtU1H:>H/pO@jC} y+zƆiF 4}A4-嗆@ZPVT? U3mT"v u$hn t`WSNdf9`zewV"^M9_PAУElh~7NA IR/ϗ63cZ\EH}+*Hb^M!6I@6x5Ln]TʓZ~SτkKf呯H> %ʿMStgI>VF2]Ijxh e~\ɟ);fw^cLK>\E"wl$PA6b\p+HY}^JZ‰[P^ Q)d{oT2VNɊv#+f q̘&?څtuџDx{r6mu"ŅDnUzV1uIm4jM=|r1#m(Tp3,'^,| x,-%,YJU!a+;ƓI4A%[66@/ mb[ 7=f Hr")r;R9A#\QV`#~g{qt  aAͨ;ljc"px>܃T\nY 2cQDdpۭXݐAܓd$cL-;NZQO̫dD,,_lT0g Td۽1V;VVst s);iqgzkJǭ;lVT̶mbz8V 9dZCz`:i>x(x @c#0b#9׀:@ _R mހ᭡I5OG!b^tx;4-hA ZG{LRn+%Sb LEʣfL)QF BW! <ӵ%GCDL^iU+~4n#`p$ Q"OI2YN`_ר05Η욛}*F_ n;J dɥxV!jIc>))TG29O'!⠻a؋}M}}f3r#tґtYdq6;%NALYkmHtsBqjE]TkkG#G3żt]!M{Ssyh@ѣϚVg2@*XJ]dѤ A;_E5=U C X⭣b|dfGHul",LKyaueɦH"¼?>ausPY m8,t KŰVt9v[fMxFLzfGDI}+wP YScIk+H0{!CJNZofa&*`+vX~JKPDhOhHL LC(w/l߳"I_Uc qD +Ͼ.uKW].{l!f9$􆃓:R8(3EІ9lc[ĩWqI;;RT'̄~vZY2` 1܇gYTXC`Qڹ$WA2ޏ="tԴFQmᰞY\z<&Q!̻B=Z.(6"(V䖡Ȟ- s-< 7/ HsIkJX+ `Sz<5hj cEk߄9Ÿ(PF{KϠwZI=HS HDΚ|8a+绤/qM1:ڞxb(: {Ŝ@?,YK JBw+qA.m\oPjZp4D՜yXU#MoJ ck/? Km%HS~\DFgE}xwI٪۩d0d( ÔwF@~Y#ɱc4I l{4+iHlg=Tm7cw߶bNAe(x1G`p5~/ *4J& K;'eiRWԇ$٠, Z BjWy̞ gj9-yEN(D}{H](r4CHCIVfn`A Z 5#0x#pTU=Lp<4ǔX7?u1Bgw9~vMb(4x'gn vxB=9۠Rl%dx11iw9 Kы\x/;{s}P<ﰥ~FE\Cw#/jU=OղZTS[&; -j>%Y8ㄕ8_Ձ`>3KPq>hbs{{+۪B2NqlxX-8~N w|=/?Hx$0QNxWRXE?!` yc5F-:5P`Y)ꯁ l/aIy Ѧp NBe5fWFQgV2XB2 kȦb3N=}3rK7N6e掦 [`r!XZS:lZo- E%43h]LA T%ׁ~Whz7aUM4_I?&`j@ir`"cMaZRͰjZ4:YR@W/6|bZcܯ+מ;q zB!`_ptvy|%Q~XʓG1tF KDH7{<ʸ-r΅yWem3uŏ_D[W3M^s6{˜8ZX%^puRԗMP{풦*`gJo_EҝH` .9K{>h,YÝTq4#g}1ǦxkH@#y. Μ(oôy[Qkkr!@Wf 󁤘$88#e0ny "rMmLjz97C7λp}im-Дʗ˝v)˲sEF)d]m,Qu2wtH17 7xq3k'yJ :`:W@e\<$uxLͨa2AW ќ*-9,4ɌjCS^m%L7ZJ(e~*8B-Un +4b9KĄ? ZS h@!L#=M@TQ4=@NRsC\9njoZѥj˽%iHW!G'2?{ )xƋa_JN7\3i7D ٍ9E9kF&q[θŎi}&'}8pL$tۅ#KPu\EV8jse ͡mW0'ۣtIj&(.$[EѯCp 9s뮒guЭo8('H*u1pAڟ@0&Sj]deѺYLa5@zLc|IW-UHϔFfh]$sM vsxm7J H- p&[H77$TcBEt63ӳũ<|k0nm]_Ey+}R eh5'65ֻHʂa]Ң$|@?,[|u8ia< `GFxC;[XC{OߞۗAc⫚qf&WMFFb;vTG%d=w"g=eG~#Ex/ӛz"ؚlo EF3Z%fLqݕ##ssaeA*;v0I Ȓ,{"^IhY3qޠ5 A L> ([L7~HoɿYRcV|ܗ`B<8Q3{v D('%Ai*@PȽn/Lb`5" S;y[ ^v3+ec_}F.fw{5R"(I&ΆXdhxD8=-y@ @S"w5Lhɣ|h _]!j949lD&ć͈nTehKX"2-=TRk/9+7%vle La}-EO">/Ő tk#)OR9%D }?9app&?h:H[jxMa xYX"Q,[ Hˆ 7wLCv6w`;8kh0`cZ^S&}o:;ʻ x,ᐉ0mCϼ["lH26ClolWui l_÷&?$SK7풾[@ʆD0)>w>Cj$DNIϽF2ceF1N ]L}Yk SYzt), 7ӛ$^L m/=)\ v#z&c~Jؐ3E \h`5j]beO0$f( 2y1n8`!K@ ڒ ?[( &k ;ec0:?Ɵ N+} i6|(Ek\~þotHNmI' C ؞tr.;正4vdݛ$1rb)Kߑp skAFDTz=u.vkB]9a.Nt `&2(v M˴A0ws.7M0vCKNΫ7:S.m3*'zPXH2M2׉?tu‚S'\g+jm[q;>:wP4?hm%*LeEpR[x2\ңaf J7U]ZP#>qB `xF х\}M~@;4oO{_[ 6u%Af`NN}_Xdfs'Y.=D9%2s۲RDUM+7ER W.,^NΌt#RVQQ#] [ ME.jIO$]lmJTZ 6?(=LfX#m6@%i"<ȟNkK\zl6mDaBFg) bl(+WxWi%Fkvjy8%1Vh&'J ?oLHj zƬ^E _"Pt]R⑎ax5%T5APl3krU\sbV@R6=mQҌ5TSR b=']C@x%ti.?'+1k$OkCvjmݮé~}јTS%( c[+*)vfږ#O{ȠRPɀ0v Y[%U,؟{[fKT T&-V ý5x1%[fXxijA_ڤkYesQؗQjli;]¶ğvb< 1߃şNBCJ)2j?] 7!9~W%UJfۉ웭2޼qzyWY3h0tׅE7 2W5ӂWLvtMuZuL޼.voN$SVDXJ=I3YX}??@_g.i+5z6f<>J&3“̤~>#cz7@?Ml4rqȯQU.td!i!A0e00$e㽱 6z$J[s4*֮0KK2ݰu0(3@0ou.,ȹ̰"N Q*%7v6i3nj T ZgXWۻ|` `sܞYzQbf:.Tsrf2@Ӵhw9|@{vΞt)1q!gR1'(onR-^dAkM̧TU3,[Qu`4`Ϙ0LYСuލ*-޽F>q[?tAƁHwfn5\ 3Yu7oN*@uc/c !i87L$44> wǃ}eӁ-2|f ڹqIxc&C1+)[kp]7f%HqKGmbo"$K3ou7bs)CM:Dh)Ɂ>TA3b{`>e/%Ppi&@V '+[ 9CHTRP z#z)d@W_UؙČ eQݰ7^oҢIׁ4ݤ}+,H.MuIC6CJ~&9W>ܸ- Qn1E q S@Pz: I <fN%6NHNHM/S/ߐz"asČ3Ԟk\x eXa/~_;SdnđŪ+l7>ˌ-WizAeHIo"֓LpqkEG>% d1W'ȧE&MyK kL27f`II5跻FK&+.(L3oz9x6l s5yG*աϰ5c ݔ9eT1ƃyڡ_]/M.J5+4tBSe[p "_WmWXL doЃ4˼8&#AL%*L\!XYD y]oF.h)&Y0L8-S:S6۔d!S$;. y'oIЖp FL.B=[C}$"j׺Dş}a#, rW_OеpL-&SrIRwrGH+l (.bb;Jb2")B.t_/-JI,h2{x Wˌ Z!T"h}[СT*b9h2*.) nءjϤ)eSCS i9u^)tj$K *+k(D7.}̄s~,;+"rj,2)j^K1giumq4a^C%Ftxo93)eݡp*c \9\mE}r7w%Nd.{+Y OKI@*->iŵ/j-dqfxbij==.qF iV<, U3%wmM~3o0!af .wK{n쟲!KR~K+ȭB`n0Hn[ C/|/`\Nj:!S]cğ>B~g8yWYeXLpcuaVy_2Ot5ťrL]$ \Miݪ8h##;ƾG\)RL#1E G;:` ATɛ8 40X܃hFLm~?9[p{v@Qd+ڪ@FKHZ^X<:S=g\DX ^DZ[!NeKՑJLs X?7 N3aS頋w iN9dG!bYOE+/b&=t"6ײgo?Ϡ7ڽޘEc?4]2Y]IfUeUmF":'PO7DWliPa"o WDhXmK)tk8P7X߯/xPRa߰L7'Eq4YTF?Z ?- \D3oT[h *hST[[!n%!' i 1 3} }=XCy Y{q:4dO(& }=l_^"Xpvgw7G4C1AO_VŚ?j9RQѲe/ju4_5~qIq J%rlh# eP%#0V4w=cGQhߞܡ-~&$v _vp Ý" H]t*_'Fr Qh r'W:Q"|^0͞%k@W&7 &y%HarIT<s=r:fC;F@ev5} ; qU{".b"27_ѴsmqD`P&<( 6R~̶ % 9#7aNm* i/L1 V㏊o9҈mSe)逢O8펄WQBhЋ۽c-f~Qs PYM/c4CD]U`>k;oJ‹8 'iދ{n/^Rḻw-eL uypI`j}"FrzNT,s>c]ZTb%B,s+feVd&2aA Gw$-$J{"hУUY  йK*,G$g 6(vsǷtPALpMs,Ug,fBS4۳ٺ{YD:Zcƃl$ d^vTZzzy7=N%Bko&>pL3Y_ u{~Mʜij+xswTl[֐@2ŋrD_ܡ,uozf8L^Gv%3\3/WHce6(i@!t1 l*`z_b,v&zKs ecHRRjyO`h~_"n$+sF5ڂf{ /Qخ~gy4]^lG tAo[yT{CH#y8UQ;tJ1]vֵڄ ?[.#UʝHs!W`ODl%T&,`XD)rй8/a\1V}Hq%ٴ10sLjXu+Re+@̫/KDQ%/^u-G&g.ӎ:H#L#8vtgwB TzMIJ2+:MUj? GaQ6ƄA ;DDC F$,e|Z #-2bvJY]@tFBmw馬-59)Ҍ<>V l[}\}u kK\d#\7g"Bu>ٗ_ xp-W;ۑ)gٗb* 4v.sjځQ~:S1\6mӃU>x{@p=b,t$MuP9٢5iHktIQ1:<p/6ÒM1>jT}?l | g9ٴϱWg菆f(1Ք 5-ldf8Q k~ej)ԡg8-M˩Q.IeH\MV1\U?Y wr1,ן٘`(&rJNxSmec{?^mò 5#?DB_%XMR3XɮE" 'K%3/㍧2ԋF)6L?h}FH<2eߩHc9B `etNinݞd^#GVL3YV/ʵϔ:H5a( >|Ն8i&Ck>^{t #!ip\roL G-rڸ)PHs4ꇖ` Ue}؋ĦpHwVeDd7wG)k` )p밵TS1j/<9UN;tL0.K;=m*WnK `;^KʷXًYV/Po$WƝIXF4Pa?el{xqwbMeK,59n?+>Qp]WK{$:Saj 8ұkFhPi&nMfc2@|ouRZ~=ZaFh#R,Q%O³VV*x '*NRT4۝z99 N :1EZ*zn3QwVۇKrن[&B/"$Fip0Q'mn"Y| i~{,!fK?-LjU\x i7}“ DUlsqJ*iI ¨E"y"2&w{)O56htIpZ|53@x~B@}AyKPV(}߼Dazlˎ&(nBׁI Oڍjj:۽QK]>w 1xДkz-QP;9#wh8-RU+})9s '4m /stve*tZvR*"7@L`5)%U|6y{yx:?(s2! $2ns>| V`j!0 BrFaUz)4+3!ؖ%uF0h<Bח5(~+kL6' ~*\oNoCQމjNL<, PHgDzE:. NV] w?}̈-CK8D￷]7.ǷS!~ Cy ^$(q]q0+wKJ|'[* A7~i:(bb9}`PԤ#i?cAc1=ie;#P1>-Fr(%e0sff{^[yad'/A#_<9` pP4֛NÚ͸LxUua^b³7CTgTY"q X165p3uBÉE+3h&1u<'sdENd7iy5޸0,L|4ED21/cfK'>\DI2^8 i/ *QۛamMa)eljquZm.l-3[,jF{-J?\߱%"AC_iʩ%"}wrI,cgjw4#;؅e&Th3N7-,O6Lٲg8u,"Ÿ(^MԒQ`ӱjDY>|])Z)dE2zuz44'`Ld=H\C߭- l,w>RɉzcE:X E֤;f9q)tu&*E|،䁠:BԃB'瞆5%d5^QmxWWHxAұLt-SzY"&El;_b@?7D=;/p0=^evk@[BPOd>J!3tHn za}!o\(ܧDo8p;az[.URϿWR2\K;QI0W|,;J%w,$^Tкu|$5Jx]oz;T EPfFy^bgwrmZ嬖j~G&ASQ /_;NzB|`jﲨԖStC@4.2X^# aٝOeRO9H] TMNB#* AM=}46IBM1#Vth46fbr?+)T' _lr, 'n nooh-  xP1mXgf$G֏';;q=fSo j;M]Ү: ɦV :ȋ>S\0C]KrcuTƯC ^s@OzߞjnGUv| %7 QR9!.d,l*E \6כb$5~}&e~I"YWDligq+P ?ul; A{{jFj0huHN'[e¶bbhՠ̲PL&v)qPs{Nń 1v'x^,AJEע&<ʐ f0V"G: ɦsp ph2cZeQm*n,MLfc|zsD88=/ kh)ZC -z[Xĺ>q߳ND`h:E=DX_\ئ74fc9wXW/Ug@q]BbvHOܿ®\&|Y7 p3k\\0 7ڋ. mÅyVe89C f)I3)4՗W"AVOO gn(JubG;L&OyKh5b x1l 6z\J#Gf@8 cQ~]{"hZk"l< P&JĨXŬrjcOF2;J8h9!7uRVx`LP91UC =]ulxe QV\|km1yCH,4(GD-~H9)8i FL(/ִ_MӥU&o:}G Pr+I݅*a{%'mPovk֗a>:XiD5콉 1BgM+rDP)CWb#QC’L/JX\8:c [IUJqIz?(fGFTZu>gLg=k>iDfV" >#K9d`S $ k "dg}{&SSCiePLU4F[ Z钲i Lv­Ɛ 97ré?OnGHSXbC^qݑ#pNo?8N" !]nPJE}W'B 5ʼjpxR<1y4AE %ץЖsg3l]d菿E@1 #c2>S,s>1'RPu{H❁I*[_|2(丷2jd6c@W,:f]!ϐ_O7Vd\ǹY̜ uWg+x,o,o, `G@(L}}3J*I틙+zȜ@ 0QE VE#cs#@q+*$͆G1e!>MOh83.)bY'iaiq"mº1>*䉂/ǘ'>kr p^n-m9!H%QE:Mj~Zc9T}\-rT_"ŮG:~_b~p~{hǔ4=At> ౔df0pU0B+^@'m@!Uy8u=%K:rԦ,&FT`г)[#e8s? ,e@d.<6pHN!t4dI6MUt3Q]0A=!008R/Cc):&8˚O|@S7,nwx#`s7̺Iu驊!?Єܝn2Aa,ۯB=MqD, 0W(#]˨G `vq7@ @ P8BW̐)"@w;\HʜAjp2,;YԐx}QVjߔ//ǟ@LF<̷!V_m*Vavԇ]<ؿ^[w\)"ߵ/ÐЏþzS})gNeÆcuIRb ]^Lf+ߋ`|뾂He =)ղWbE^8QjqecA兾c12M@|Zf q|K(nD$ΜqV^:=vt ^#^C(2:$ [t6MoM@~q2fٿG"GQ@Y\Y1zF:+zlbr"#Ѱ4n MBS"3DX>b∧5ҐœZz&1 ͌z)Sd86-K_5O>  | Q07δ֦]7r[O}Eݨ(jkov?ieO[)xŒpBBnR㑆{Sl'{Ӣo|$AR%`fM;e̠XJH%Qj4µ t#CiDH"tvCiTg8NupV\gg wg?m)ϻ'n*V^bV7Ak!_`L\X3L=VX"vcVn7ym}Չsuqbw Xdz ɵxȵa=Ӛ1ChʲϺ1$#*TC!Fi+ dז]!tFYz\)}:_EBE(g:dY?$;t[ >߾౼}d+RN$@H ?' oikG9m}'aQ*$_:&$|ISacq wj֌SO3.S11kR},. Ǥ͈'TdaoꡔJ;~x۴s.`q+. Z}-]vK ,C"s4ߚeK[C)  !-G;G=j^\SFd@Ӣ7u԰]6b#,6WYZY^vڸtxdc$$L bG^uG,n[43h|o $>sy6 žA^Y;dW.mb"NF龧Ko&6bIBxZw[mH/ff2fJxCy'uA\]]V ɥHTaT*RI!B.,ۑ:";~\}aͲ7lYT~VEpj~IsVˆKB>uJU{{o4WV}a4=}v`?ҮWdH,v[ϻxK,к5#&9_:W_s)UywFoO>A0vwi+yܲ蛢;)5ñ͎Ejuɺ |u \=BpN2ۅh~@^(uH9WiJ-sewPm;ιX>A6c6֠Z{G</ag"[Cq n6D_0BvS{+Sc쇩_ iJ ; ԼI@vI7!fc.B4L6Uwhal+lC!AA6~ $^L *0-|"hW4oE`񒢤ۮ9{hڍ ]h 8z饠ko @̓|(覕*ɼL=t7vdl"oZ>{5X{Sr4Ob# EpfPz5Υƺ9/= g=e l$hɬ4MkSuM:cՒyghyA2~'tXIjVƀ^bGVnUyoY*[7O>!XW@UQ7Ef1lhHeFYWi6;y )G#:ʞ=~?"xxЏ.m;{i8`Y=k%ҺgK_3h*!K P2YȁHu4p}jS W\ByMHegҾ}D|`to?!79w]m iVd$x$,yK\ N,1 Jg3eW昢l.#@c$`kQ˵ EbdK"b;lYف'$E|ɁCxe\H"0<&eUUuڒ z"& .bX^Y?hP(,DQ&b5lJ,Rsa6X8RU./!_&럚< \Q,~o@ @M eSFU riUd( ~8b /0R7H3_< }5o3q>5~?H1=*EQN"d4 _0i\A?Z锦8NGY7b„j\۽ꑶ&|:py;:۬ " ;_ձ{meAx*#:PF>0r`.LkJKDImpD}\bn{\Veƽw덿سrAk(ِ+F!%,w3{k_boq%\}YٕRr؅EV40\bԳlN6Wm>'X?`9 ә@<ۜA$n-43 ,)S$ n6NВ4 #k$RIGB "E4P%Mpc1ٌP ("ji&6+_rG&a2e!"wwZntOMrV_ tg]T}Z[FxNB0F8}Ceꔘn1&H/`S/"ve :|FTDv 'QnFУयM`skDeɌFy:|ژHsR&TQCĊ.(W'уh Z2cV&u:?/:ݻ୵Qk5r--:No@Jv?'>髏JZH1ך qP$M1|xtEP!4 `(]dZ+,$r$/{?w^ Ah?3J/"Ls2'$%+!w?~[R]%X#5@Ew?%t=j GZVR3x_Kf@{ M^PrNM}'dOp5<=爳M!}1w\K"- yɕ j~q7M͙Q^fxZ?M|4jw쿥kWdˁbx,8$# +wpݗUp7hwGU>+E2EwxZ4O˟4-ޖ[s{4- @MHCx7(Z sչ<\ґ!CxthVX mwc+2ŴNdccE55Q|+\ s9uTjNE;)~~f41=qX_h<9cșt_XGZm(Xj,֞`8i""ŢGI)c'T;6JueYRuk%\us LlVB' r%X8/џ- ~6`$nS wpT|/p C(<9LܛOrwٮ HjҴKˠAqM ӽ*mKZc&"3X,X|hؾ6[5e{;!gwQ[VDz;6DseVϕJ aLY,PH|Җ4tŻ*2'҈4RD3ڑ+09ˋC=UԄlNѬH ֐Eb+4|KD̜!=hg^1E`uJ84Z:,Z(ǯ[\XsJxܕ^[dA*L_WU.p􂀚ʼn"?|HFlpz{E Kn;ZoyO6K*by9`]fܾ'i!wi|> Ye*1xv>>J`wSҗ+ˆ[ֻKȕ2GX=Kg/ ~mV*Ƭ,iCm,歅طReiq[WeLe4g>kNr) -*ę쭱nfJ׫.MGZ`P$ulӁS}d4R$ 2;D.g)DQF_= EƂ $gxy\.~=e'^lN2F39YMHȩSf*Q aDˊͪ=lJR~ڵ9mM(B*,o0hDח}u)I%/.B|;:QMrα2(ި\]NtH6I` %Is/J#&'qz!n4*%eJd؂n+~.zz 2Qp%'f]EH*L=e # d~wPƗ[8Ib{_n/W%4ogЙŢ' #WdB"JVp5fOqgnp4DۅM5i.3 v5eh•6ٝ-g;$QGE.j#AjdH@S8HHb < ! 9T´ kfۍ@V,{읽U'JT^ +G,E <@'MEB]RIliÂkm~g AN*dP.@z7vUɌx"0]ح0쾳Lq?:k&m@I(6r<5rk| SD:r[2Uh],QjxG~:p~RO/IQ+UJ;=g-DZ+}, #o7bp ;m̾h'r*ʮfCЊk 4g%E]ϪJDEiI)vHɷ~* Ǘ(=r}(#k6 ;;M1J #<^_&Rӭ:V[VV`{9訴EC~*z\ȔY҄@Eܸ5 𖥽܋+xK³ / ?(5pyN'!Rcjo`nS !'Z9um*5&1" ! Wr_]9~ p:Hn~"7-9u>cR~ (PN=XMI_ΐ5>E5k>?we6ؓ>:  ub7gݞ;{ XpN,oUO; O˲6* \5idmoYjյ?nIXBaץ ֵ 8gpyYXs{*s,y.Z'}2UEId=d{3D%֖@ӷBEJ./V4ĻiӰ-E%9l\C7Ȯq At fO#*gdYUo 몼r@QWX~ EtAhvq۪*L ݥmkbȮa"^9‡n2DNJ]3+lOlL)Q9e6^@f,l8fA󁡟 {{`9 g!n*I'3)jۅ~"BRK~]ta˰S7ȴ|1!EUi|k|f`:Ǔ)'Np@4\܏7Z@ȐK Gg$8{93v>"XR$Apr@5  tfH[VaYޮ7+-gǜ0ل-@囡H%!dP;RjaMҲA~mCcC߭V{GvU%j:!$:nagI5Zj"'Cx9!Ko&5u+ _h[g|}yP3E:|~1 ] ,!7,|AZY(R.rr Y'mזHWڑgijGܷ$lيjT߮qm=ݑe@aT MG4~ld ~vj~)o+pWMN|(TsY2݆@g4<@Lx_X 4aF,/™|a y#|U_Ri\}G9T >}2:z;ògL"`U%a$l"E{of'(.sL.D^~&$Ef+C_b«F{څF (q%ԍIIs_M"js`U=Z9>YjXTf)NZw EufvGѿ~ TT<+m;aHjpEC\Ʀ@%5 +OleV$Ic?2x1I_}Kb>oA@Fb aόʝVlbYܦJаl!rи7pXhXXA^G˛R&MbGa#sXh8ih ?71;|#:ѰL{vܜssff{dk)Msħ̣TE@4O=~bE8gjIŃ^O –P\G(ZC"NaB"nea ^yu dhAְa5 Ԑeж0x~VT5V\ F- EwcCc6^!ݍ[h qsf{ȟ!4N?P \5moEL(HOli-UW_هeIG]"ff{v>di"m\%넪rE)O /OIZCo'أeHʺ>O vcX`__v]g-e(ޚiy.l zE]Զ4yBnʐbxn mqDl$wkN Ͻr-Ζ,p3KV^F8'k- A hV r'OH~QA3W!7wz>u (!_'b c1 ϐ?4s<<_'}lϠ ]sSڴp*hx%7URa{uq$ 0BqȰze2v"4ppV5*hG PIsȌcs5ԞkrRCwq_b+L|| v dX0޹u&JX0}Fe.'ή߉EWJGD/JUi3pXa.T{?jWu풤)ޚY"f&Ky#i79ag(ZDh `5B^Da/$):w A`AH^iG, >u~ۦ^rݵm%ˏ/-80ro"hdm$1xb"zpsI3e$u'm6HoRdxs l@qyic]hG瀺B@Cp[v Ґr7jL6W/>4% K?ӣCS8zS'〝$WGn4#ە0#ЉutXlaO&گ5dez$NWB1kAD*v[5Fz8/C7X.JM@1]sR\w+i&#W k)[4K0J֏#0K tTz%Τ;' %O~SP:EDŽ<5A")H}r)T؝/"^2[P>QU&"0~9f/T%kaA,vlT<4p'T3/ |/zYһᙣ'Y_TaH[cuq5DGk"^_YKuj6LizeK=o}-*&IWlx Z/SUyz<WV`z~o0IJT p7\߉@uMj̠B:kC uI {}wiTY'`_Voufnb.9M63X`\ ȏT/q:LAB76NaWBv'UnVr){veVP1pg?}&z?Z|Tt ھD&ӱ=T۫Sm1g7I~ҾFS{#ؑ?wphcb8Vs绥&\gUI.6GDZ|xZkv#)xZV௫&̘|ҷ gUNvI%ii)MD9}UlB1ku4 [oH'4'*iŲ=>'ڥ΀[0l|"*Dr9LD}d3a!Qu6ɞXIWADdz{^ZYvQi!j`TXf Ъ"bXi!FZ?d kZ7W\'A<ăp1?ڠ[*{kڡ1Q[1 QG{ԠK`NKsN[|^]eEzje^'nWMVIdS;M)P>/-ÌUkqm߮VLyq;.ҊI "XчZYo"η$ھ<:7ú~w=Dz V4YHڸ4f] W|cZ Jqra ?sJhKrdýG\ᓔKCи\*gIXE/I[|omZD|N~i1vCP1aSd7lpَY[3HvǐQRX "׶fD-U"y{58 X*zػa5{x ӭ Oc|y7Rޡj _>[{ Fʒ1fhSr?9e:σD<_~7ʹ&Ba=S҅31bH1Du ~Y`HEBԨs. A~ŜJIf'%]H!-$peOsm<~9lfW)J h/G7ZgǭihN1LJ<#E~y&TU~B*JXjůC$> c׫*I#G[ V, E'DWEDu} ,DO K#F Iˠl1w l.htcb=\҇+lۅKNVgXZ' "Uwq`Fc iS2WKDw VF,je3Efw| Cj޼隙ld^:*/g v,$ð/AXB,m ,)f#ؿl< JHc(1aeae{WSӮ${0]rGbWܜiX.SyJMrޭGS ZdJvR**||g+ e 0ϞBnה>F:rZ9Ɲ_b?n40᥁G|&f+ƺzJDLc60һw+,fILL͑@ )‰7/f :,k@$Q/ ^]mmlaCa8|21pd9nDhbtWSV?1>uǭ*FzXp;yjsD"R,CF(/lph Mzt o}M5gv/:Uw~\=& C D(u"?>>-~:u]L,@K"d|Ǿ3=iECUwO3f?ծ%[iZq|f Q^ AZl!b j?lJiȔA3aPWQg쁄\^ OiY$'z׺ g@G&6Q"FS ӜR̈́6}Ίl$QAyb+.+>\mC4zScM #f#3_n~Be.\K& *`ٍIBTִ$KH;BUF"7lDET?w ȁ 2X~Gx(αO #ќ]wF@b#|o 'cˊ ^6{r$L ʡKyO͈6Wߞ"|)甊x~#;yДdOdz0k"gTY{Đq@2<rE7:s/8`xƌ1l'+>OtLL=Ic{Pp='*2݆YE+7M(!6Z3<&|Ғȥ+e>a@ԓɅ =f[. ۣ~YFg7ŸN@:n-H!y8K*%)$H6<"[4}&9N'B<ƻtDaa݈#x؍#V(ۅ$\f&`Is(79W kɞ }v3V: =m:)Ra%=%@J/%EގsY#`OӞWcujh o#Vkh|GO,ԇEg,&0qҹD]i^*eJiPgɊm%k^Mi=R/͖P]jzo[%Z %- bra0cIa@Ҷ*@~p'AwdW|PԦ>I ncxox1 'OpTHn3"I%]jV`DAoeFz!۴0c O5c_?: sf'/6^,0G)D2؀љ&sj"+Jm(=sgxNX y$jM!^#̬.HGrE;(8s پIv֩Ro:J1y[]$J寺 FלAш4<5IA]rqU\p/MPJEh:OQ S($T 怹Uy֯Chړ8OHXJGYHˮ 湯IrTd w $4,0v|IbGVn:(YaŮtner#=;Chg~כFV<Ь=u J Š@5\Usxo-d=Ibp5bBF٭K>w]ri)䥒_|ALO{40jG^psi0@Ce4 ]ӝNz||6PWhXH}>EހLS[:gNKK D-!&̈3".`Mxx>H:WaAŷw i?,hS=;ר}p1`Y'siɉ`&)*z6HW:\RY.λ MtYx=7cnڊSǍ'-ה%Otd`Oԝ\/IJPdfzlWl% T[yzK{t̆ [ 9bRW*¢;>(YLm}Utgm.9| 2p"`Hτj4n,Hj&/i]üf,! Y^?+ 64΂zW* Vj1ȧB9Qq#BͿiDB2BO#sդz#jHݙs S,\Na4DJ8EeSG:czrٝza-i~Od:nPܐ'?!Mo>+V6|Tb&¨d [WFZX$rd`f`'\Чt* AksC%8RH= ]֯m;O۝GwA;l`{aTC7Bp12MUS]x^UcsGZ';K%Ő./U© ?6'M^. 5*,m&.9=b!N/3DY#1rGlwOP7w^NKEJVyf@YwECFmdk1-RM 8ϮzυDy@o!PkiTM& ޽}=.C @6ݗVľ gWvѿ``psv&j}l|B2pʮX.-q$SX+N,$"U!S, 6ulޟɫ $JH*7{D)d鬧Z\{&*fj9bkI*۫;9v6yE5Qל67r(p>[#Mg<-[& !h׍U\!'P@wW6Lno2{T]/25 hz[vDb^%]2wiqlmDqwԱ<&3ʽѦ 'rDd'ͺ,!j.q#a0 #I'n PӄU:Ŷ!!(̍[PoGkM bx+l^]x8>hjd-,qIAiU,y+C<> ONgB DVOqz캘4@6eD#PL>H@h>M(vԙWtEɺܵ/kyc+4М _y% 7ɢ>o3F' %a?@OW4Jbb:GlO=Tweuv <|ٳrTWbR;(I7k_c 5 >倅J -*;?S%;ˤc _w8Vf ͦٓ!LSm!=YC&hHk >DH0}aQC<:\f *|~vPΑ(oxW} f<0Y_ӭl0WC ~\|kW3lfc?Sǫ׈3~%dƎ2[.1cp&St 6֔g]N+.v)CR]dW;Wn= 8\>8S05)RX$Xrh+)l,p6-1?s" (zV2/n$mwNNvg9[:, $ϢۛZNcMG<y|]ԏF˽[0 $];^E I{@c%Ks[G6kisS|d5[+ np Ӆ 8m%Gj9{D,f3SY-->^ MTÒ(hxK22!5`Y,}[uυE;|v-R;q![)@U`6Jrpt-!Tn׹N[rc ثji8`ܘh.ϢYQ< SZ/*)gIhK76WI'=ysI ٞ Vd֠ӢP{3jF'`Qt/BH1B)"Qh^}m#pbeŽ_r<ҭjߙ)u`-r2?NݻFm,1x(4)ǘ[qB7BU~GTA2~͋Msm6ڠN9|B G:( xSz9D%=E/Oc5Iu5G|PܫDzC~t$8w}V%V8O 2WUC >si;}5BϮSQ|GyrTt`QI]Q]/g7f~dXĹ OKٰ'mbR_O:+j;nZBk׳3n1ȳw|bD}nK7rZrY3ZS΢}G+aMs I ]\Ip=((ha'9r%C@-etX[̧1ǩ} n1 }9 $syB\ջ\ 4&O4|eUU7R =7ˀqdp}.l2@$f)v-#:0џAgz@II¶SӰO7'߀Fhz! B*w>i?C_[oOq(ng,]G!Ɖi ^G(dً߬lO[-e{q[&KGϦ76`چ?*X+E,{/Ba/"Yh6u$1O0j2xL.kXvyJɜq|ގκã] #х yWH*?i)H!i$|(V*I7}m|7V[yQV\?ެŌ"D^بѺ. R!!ǷsJY%2,X2 ĿLX >+A&<n??a7\2-slܾbh5ޚ@ՠ5+= SKPV]M*^8Pô6`;=5Gů"ɤ";B-v%RHlJ!xU~=B]W׏1KPɫ=󰩀Q%QR$+mH ^P_0gHe0W[9t+3TG:jS҇z /؈C< J ivsv!k!#Le~*-%棔:ŋU=:K=jPȡ}1 U9Dbг2U-`p91'*/aPb`~ai/g(ȜO|ɛ+yjĢ`bcܛCu9 h"à UkMo1* m^L4OG靟ƧaxU|óh0= Pf9oNG7cDO׋>+Q߶J3 ,RH%ZyK8V@.)hqoW2z[*WySnNj̮&b ˞-Ϩ}8i ڎOt/^o4|rD:"Wl-Ј.o{Fmҹ_n2UUۯ74qJ*m9r7%4_sWGVa@uE;J](쪚fQ$c$jpj~ඹ?Ѽb3i:\$:xKi[K?vf;ۢo%ޙlt Lj]9[G1N/OT vgILݏ!MWw.M|fHlA9' S&A\Z 37PWa[?>ajh&CdwN YHF,Tm`shC`b 䙑t -]= x =X"X0>4w" NQ=<ލ~6W Yj6}%/n?Rt!QBsct/Αɘ6jHR{z&y= M2*} V_E83K(%gF5O-P#frx}ҲaFTiyEYʻ^)wI RIo\I)AP_{s$#N6Lh%0F{%H\-:11lP_72};R _ek엯RI؛ TQ)Ԣ Ҋ*h27=Q:!N֡#: 򼭀=U-}A0ڱn6{{BפbXAy-|83"P'(ߝ g}U_JE|<ΞC˥ҽC*aRI2V9`YPWy"6Hlh0q]\X1bNi.ޙ~v/$ƧI`{U+՝9{jf8&Eo1| .Ss5w7 0{zU_K h#{S Oq4T'?иS[J(-.r+_-3:8BX 0}2q~qъӸ0xt 9Irih+_y3ƚ; t(:#CMg=x!{ {tQbu_j4\~$ 6~ʚX_Oy1ϯ_(5 Zƽ`-rykoȌ+_oUQ1bS *?,m s/*Mtiocҡ)vexҞVg%0B8̡*> # h<aRPʩƼ td'% }nճ4ER ?ύBjܧN8᳈ aJ@;d5v@I\s~ܜ ~cOԥUMt5.cgq"Cw"qH;!e'ET-Js`kDe4rfkzXh;ԗ3~o@Jm(aݘ$P')X!wv%)&q&L`gC9 h Zc*N]BYT-n 0$Ip#vHHkb& :az޽WK{GW`zYM~QO5M3sn{FB| jRa9+Õ&_(ܜDǓOYm9o'C3lftBA Dz.SP+^"MRtt_%m3cU7:H9@ &AN+Sћ64N8QDeg^'CHab|r TN3V(:~cbAg$ĸg]XK 6g,g3vqkQh+e? Hnv]҉jB입`k;)v !k nK>b~-(Q0pF:z7 );h*?63ҭ" YZLO1\7cZ о8}:"fs/sίS?:cm6 G$a! "'f^󓼆 Y!xv wTϼ[!?VJ% j94b '1\ mk#j^'C?IgnͰOeX8*R%LͬWw=4yhJ1{~͟pViWovvk`庁`-sܥܟgޱtnďִV\3J0Cj<@zi,ֿ" M6||9p765P*c/]Ff:5BD<־JadumfXpX'H9IPMĔIBSNΛh]c:ihRK]B1MQAT[Rz<!pw@]seDj7j+I+bq&"˜}&V \:PVG&z0d*[PAS^H]YOs 1n9|U2.w"n:[V;dYBр?2~3 w7YZ2be>L̏Z%ఊ=» (R@%K?ud0w_hCƢ3vnCֱGUl[:ۆ\OZ."[XID!vΖUl2Phk9ӵRk]iCȝkOg: AB/0ML˜U ԙ7w| C|+br};'?XRȀuV`9 k/lTE<}smvL vAn$AS>ͺ mFf|{YGcuhrl0dZkMDG0[f^[lv|8OӸԻ?{?MwX6~$B!i9e|O 2.yټ`#&tr4G}򘲜,RυT΃׺td;:8G͌؀Nj)\Jl)J̲FX&pDZɷ:lYU]_N?į\sAI%M3WD9?ބ~@kMsQY65O뵩겛}غoК6za09$ԧt۬שOf4ۿf?+Z̍o`xcR?Gtڧu"VX8?AHG>W"Iw8/Fг~@_HnZGaRny.  73 c+^X%st2? Bb֒7-%Ѩ]AD~Fr]U X^ގA"M'r9sv2M0fF69=5D8`VT7zEXrwcw6 0yr~D  C ^9V;V䴑O]11d,zo3uwU s#d^v9@_$t˽nӜG܋ fڴ,>jfS,Ж5jū & HdCW!l#w^LSm˜@IG6ʆAvy4o[(NNHd%R%j(mE 2t6"p Nl<|,]XiXg`ri95U֫nx}Qhuf@zb1ݨ' ⌾4|!YNڐpnGϚPf4i;]0 yϗgmzbFwԡ4Le*Aٷ [70|7tI+7X3ixlej:r!zQ*[ISF q0 |w1 lBzB Z.\eN hć*w%U<սw+ r h™C+ "Pâ] 9dTP-4)X4z Ɇtd߫#1.ihs ̦Ci++iBG=_LVbY ۥ7ٕR) YJVشe ىZΦ rh*'9>,eteםI-tF66Mi{?ud<3~aǮ~@<-[.9WNTQY}O5##pg5qMv21&E>R%cnl΂!t a'FԮ9&,.7^i!A#!hxe@^#pˁÆ.QfGoX3 cD1Zft'd9%١OX[6%w*W<t{BlNԻ)fW-@o.[WS,1σnNmp1 (뺆v.c:S~\a1M/ɡiYOFףJ~i ɓhϘ,f9GK?qTg,OKaЋa/G\<՞(!r;2 [U'v NSP\i$|dpM+) 0"Ԩ %EӄM6/Sl \-lsž~Z!]Z} 7Sooxu<Դz84@%\3q0*ZL?[6P/O$aX_x/ri9qt$:@,:ՉL?2y.UV!wލ黴+s;hUuk(u ^}/fŽ;}8[>OZڰ$4FF_evkK9>Msb+@n5ƛM$%vg6B&I<3%HK1dejڍӄP9=M9* h#Wrcw;æ6eqF\|v%8n0u_!5 ۏOl+(~:! 1cU#W<v"ƾ˾b+_nvDI x'*&}}∼N'E'zXq/CiZ@ l߼ t͘B>[uG Q^Z{EsE({SS ~(gT۠E`ryЗJs`{:`'VRNqvG_܏ɸƤm9-oslcbr2f ؛͠(eԺx)'8 ތQZhEex3^?.ڷn u׿!<L|c莚${.-ΨHT4|$$t٠ܼȊmLsRa,νJX{h ȤPp2E+WTDHeH_fho#H4*Y~gV\'2-"OBq3H"ʪ<ԝ+V!755!Ԗـ ϲˇx J4x,֋6j ?";6ؓVW,5AX؜ ~Y8q$XO!'F X[Mk8"l:æsV:1SB L+o͆_~ʤBy[KtBfkˈR>Alȴ =E Fw -p1 93- RkTX:-;_pCB)%E1"3cQ0uAe=D\]6 މ,[`F}?:bM)=Ֆ _g!>Azpsk\,|0Jr%`I#EUD)qyLϙ1T"؈3ttvΠZ-V"C~; )^ R"HY2S*\oqSd)M9btu9@T;b@Aꋛ(4o mc|f$pΛ4)-YܴKQѸӰ[Kt 놄\5_^WS%Hӏac>̫D& RGyO[ Դ|ɔ%s&/u/t`;A7aآ*Jl_P샂kBlch2=_l}(S01֐Tphȹo1 ؝ H{Ml£Ddцlzn}?Nb,췧 &`Bt@\*Gj--ٌ}D@N݀ˑ݄&œ(:1%E8)箖 a]}kRߕZhW-qIH 3g|˩]$ 8lgmٍyCcKn2A֨洅=Rv);/[p='cPNa]36>Zm1*G?w}XzA~8L_Gb!&<Ņ'^;!GG涯UnrH%g+A:ڄu]s{pD >pIDÍ'<<FҐ%Є$ϵJ`"D1<4AO?LYhπ nqR 'nBv{LCj${/s f]3ի؀r`|=;xێQ_%&^iC:G EV):Wi%5KG[PՒ:j];JF3i&ʳe75Glg"Hu ݫL>8Iv ȊO =ev΋*̿)Z6&wǞTJ i6@.-~ٟЖ4lhqdK)"] T` 4G\D`s jԻ<91]R97 >aM03WoG" ut%UO9BIIJ6L(X /Oqaǡk=zFIi>wc$R"Y +Vǀ{cgjH-=oUH7-uyezBKN;ԶE'JoP>N}r;a_t, :"!!~otxZN<㩁,@(}z (W)GɎ$Pp&WNɐm(QveI0!ݹ?L}E=8W政]X ^_CR?o^hF,QEuk7a"m?AރCCU5kTkQXsn~23 /q+]NKKˠByڅ>GV"f6 p0=a cI*5N%s$}&vDdpyB#dT!esKQ `HA7"I@A,yk]|sesPL\. gRgr1 x۫Վawd 9:w*[8zjfOYUh(>X-3(l04 ao<a3,Bx0σD?bG/:|%-58:s+tEfnr uuVWٌV&!5ѩIqsB,mBň WZx4XE_U.eCrI`dHD}mpL۟7^/ 2Iw|$ [cX < {O:y:޳f2cYuiMZаT%×h-o W7%KԀ]v;bf /QmxfM r|'-^y205>PJO<$j%N.ݟ1eD`-& W9wn zZ--ķ2?.xyMg-UxLVՉ@E;Vy,YY4B+- <4_n%]? rky\Ȟ(XY\V7nA$v.IL.M}4`mܥo&2ih4p2{(q*& Aʤ##镼n6V>J}7ӖMB^f}6S+rq{"fpg;:LY&t+c?ÿ޸{>RqU}Q٩)Sx!:l1,CzMY,O$Q>O1d~&ԫA=Q|ĢEk=\U5Q^b g aƖL+?`l?z=Bl p-.]BnV2h &QCYSNb<JP@d}rB Z'&ͩeix Ez*u Img5Uaz`Ufz j8r\`Ʊ&П 2#h>'Nxݴad[76ck[:ɱ/!_5ǭlZ_Uov~ٱJRjG 4 @/֠(S([a*\fZ^EA(iOe@{mJbM.4 C16veN:].S?E!'߹8p~"J#wێu]bF)듓ȥ"h3Was^I҉zUl}z)郤B̑%jdP(s~SbWekZn:QUN&z|/=5+{#F C> 6Z}8!r=Zƺܺ 6omLj[T?)i\b>MV?v)5Mf*rȡ$Oϸ}?>2Iݿ'lZG4rM9ė[e!̯!s5ۜ٬|_t5Mj?ݝlUp7*x欭njx$pH0bgL#"8jZM;_τjr^BԻ3Vmd;~~=wKUj3׭{y-'3}Z!BM2$uyJ4$6/0j6aBD5[u6G bFEgf1S|ďvtYװp5\^l֢k2ʶp}Uc͝LE"V?SO C.yox][B](S@UzQ3&x8,]T:؛[ߟl"ף) XSIZO:e`y@Z#Kl_B6;a(Q1˔un+Hcz?z J>>DfiSBwmfSI`p\y-euz1Zj!֤Th`ڲ'.xcEYO<[,72} ?\8?~"AbRd}X)MFHkT"7BG~w: XvR ̐d2tf1^( :AL9Ͽi#HQ_j9 CA$R)\In-8-e (IG_OxH^7cI<qn./KP9v:ᲃ)rg!Fru3 )Fٻi%ZpO>#ye]9PhxCU'/ń^Z)'͗혍gyّd"K$ ȤGCc?nw'D;Zo=Qku2Pu(<'Zj'`Wv9 [+U. ҐzpUxl<ȤB8uhO~MHv5=ㅏo:ܧI:F]\[\* *ʟpr?DY@Ңa&4EbpB('Eb(e8Tl;sJCB|_XU`,2k=%J+Apt=^/9ā 5gMJeeR XZΌL j`*ۮ/AXEPN 6Ţt\moom:-8o$HUn8\( eEvmSڝ]~ Ŏ%$]coM{Z3)z{ި7-8O*~[xe®oÛhY˼A>_zz'b[;Lx|v3|OvfW\Eʫ}POtlh# }:;<}MsiŪ_؈z|Rd(>4޻wF5 "drԾNSG 9Li)Ut?Ѳ}@[䍾ŭ rQ)jjudKƹ.M\gB6>(_2Buog9p׫?u\01)4Tk4S1G.9\L+qc .Dܛ ]7X68k[iZba@5GS+(鳽*C͟yTڛK >r᲎KL!H-v2yB%I&Cf,[ۮK}\-j NR7bݓO0GUdW8@Xʮ.dἄd@=IQADrW8[<'J3=\ *NH@lHnBAQ=X.9ur 9v1Q&/_կXǔݬ95WR΋wN㚬u Qc: Z,QHYřh7l-eK)[s6c|/4;j^ rŝR#)ﾉ;bY Ku]ݟĤݪRJ#UuPSٔGţv).쾞~iCѷtjД'CnS N[%LD(yϭy5 ̨o qo8CւV패|hE0Obw1`SPNGh?;uU5#e82[`nbS/_*4m h51#Z_LhqKW~#}uv7D ?vw"A96܌(r.W b l )>K]Yq{P6ByPwLtG^M"[7rQ ѹQ [}UXՖ>A3lZP?'*Hpŗ[Ą\a{QkApmøk?yiT~)?mO^tPdZ# XMFPPSW*>bkoIa|VtbۈlD IӂUoh+!V[oWm ہ˖q*Z{6 hJYC60# dEq-=^ C`{)$). ޿Kos-+)kEg^mf:u o kf%ĄDnDjt0T[xykN6¼#},wtd}e6uqrɁGN6S 0 ۺѽ+lx'ǂ%kTYcZK|9y@GfE5n7\[Z#aA؄d:` w%&A(K6rE4 gU w\ZIXEE-4Ux1Lqha0h<"_0oe1YmS\ZZen Euz/[PPՌLEHqʯБǁfS~ 93,IHc9"F$ gCV K}ZܘקA">f 鉉D!dv _AA+mj+U?.e1jFxHl9]|d\INnQ~!IJ6hUT4Kgbo*P~yXwӕ QYӴ8N h(M5\U~ՠ9 )')Dl;rHأ}2`1-JiaETW^1I F:SB+.`oڦe7x^N^孇Y_g Q m [G`9GnJXU`2?j]>w9NrK.(+"%PnG1RmN{QFg칉n8б4D[LM%/X`#=Q^*nb]rm dAbZE.)gq̠TjMrOkF@*LG}d u:MP̓›?3Qy Y&zOuiEژ^j.ClwM_E}5 6 9pԨ U!&ҌL[9+)Yr5{}W0ӠZF]͑Rw)) 6Dϳ_5ĉ@@>5@$=%~3O‹ikM1iNáFwC^܉Rlqs\{sNJܱ>n=yN%~06Bj'Ba`h%Pne<oJxALΖm&ہ˕C!ѰL_Cc2z/V\}֨ZӂF^)u·z &rO4W/8::LlJ.CLj4o*ŏ ZC OYfi-oȬG'S5fms?6'E5hèWxbJݰa"LV`fNF}DZnچL&K U$5-p'Ŀ8{JFF9iE;iI'YV^;q̯Dd 7@ 3/+PrB3%t?F[@3 lT Gu.VlÜ9 YD鎝.E{0@a9[vνH& %)Rmb]ELF榪>{ (#xֿzz<u#W] 1%9#iN(]`u٧xeΞl^6!,/$.*U:泬R#^sY( wW5jhEw!ɰ-xH*Z01hgx5q ]]8Z85? W4aTҘ?L Kc0>aExsgǥ'XQlxHw5rAŸdbg(@-R%ɬ%NTl G(JEUShc5vt8[=`{(Ysa<&N9?=%ܴ`&P%{εMk+o)ğIL/0Y2urH?FKfާTMBMcQfmV*b^% W9^7FHZ]VKDnȨՐShӆ!#B"9/i \oHe]>P?UY"O~'d#7? /a4fX9xv8TQ؋mZU/A@6ΈhLwDBkHx U0t'l1&&0esE0<״L#߱WJ*"E)4Ьg:RMO _dD3_@R=okKpcjs={,|87/i h)-HUF`[ Dlυ8 yr$s2;q291njGV)o\12=f+ROC'\FLX1DUb)/y/Յduza+ 󜟙7Vɿ=`] 64!=PW;%>-:n)5o1g&X2߇vLv"z;ƠV/ScƬ(/2ل|37>/`F>ݚ!o3Jp^ORb{]w .'uk$HHe͂rjCFtyAbLȜQ !͡# U0s*ȃ4! ja֎Av]fj.U/ K%d"{l104{[[qzFRmP߃ ` ~`l =s[Ag_t61an-6P]NX =@.g-sdI I{[.(wUNcJ(Wıҵ zFG8uDA_2GNœ*=b#*axRy1u65XE^\IŀehOZ:K+xm LsmÆK7*L'u8l> !+s[Bh)ִ*{t{ۣZ @CR+t̒Ș_`PzWuYRmam$V$yBn3ȩW/ RȒEiГL /9zi4aL"VQɊyckCc1lɝM%D DKޏbI\cAAyPۈO0g{;Aqqb$#|u(~9r4V|/Z2o-VmU/f& ?ZF*^uJLSʛH4+E~y*,(yF2_jںz8nUU[ *M ǣl;z_orV휏>Ja8}g7a s|0QDH:خR Tn;,V=8DW871k_A1ĽQpJJzl=DяR)0Qc6ǖH/0v^l6#H,j]c%/$*|g(!oC$[PkI=_A5,~;k rz! L/|)a}!J `sL1I2LYjJj{u 750[o8yɉqϥȪ*11QY# 1S~}1uiqTN l8{5@o?:/>7a]O!J{`HEP+[z~Ԁ:=ʼn%#9ⶫ7Pm1au$'%Ф5{} *=/qr͎wڭ͐3jVb[zKGSv [ nL%Jxl4K OI ~b׈Upo~0šVO01PQfVh7 2yӬˍ磶y㋿]̛2}(gٰpZ%Xm3 c<`Md<~0o”1xr 9#qngn‰,qG~S9Mk@ݫC@ Jsagz)ưB$3&~lx$B C^=`+a,PKi}7 \2uF׸Ri=yjDx+8g0G#)0!~".e)-Z,c|]PJ$sb9{e=~F9j׊]Li%_R*y;]ƕ)>$Ke9FNb­a(} ű?A'Pb-=|z@F\ڽv#s&_֌8Go|NWTcw70SaWч:)=ҋM)]{*^&3473tn->&izN2!W.GQxH%E:=@tyC*HBlP*uj7Pf^q<`?KV! `0 s0bDE`W@UHK  `pil7%ԺwRz)ҥ("w?[K'3윶S'"j9O2֏ oqg'(ZÕN a>u;gg2c:sq&;+++YN6HW O``w\6 !]i zVg*y-N:ƧVC)r|^XCCVs#v+Bݸ(Jvi4EWj :y1\@ǖ)TF)IrXawևuotӕ7"lV OH=UJћjnstCCjQ&-ZI:OX[Jש|RIx%u¤߾9}9ow8Jw&HxWG콋U-tT{J s.{%Mga%_*14}ʥ%_3|xun},|.]b[`^32 `<\70&h6|#r#:aWsO^kh"Eq8c>=1uVPSݘJv%NcEp{fG5 FSIjLmgCKCsk7FbE7!vKl uiKUrLc|c^ۤ*bnE«9ed.MrԻ[IVԧ8)]!SxBo xYUёi sہ!?JE1j GxPa2~Hni aȯ̏>5q>-cGKL]=|zr:?5Opw䋾ʞ/QZ!FuʪGiW8oDHruv]݈yA{DTchi'T%Bw9OK~z|3kdLH\]W@h=~ovn{*O__ oGǒzװ"pn>O926uGNwf+Wv'? O)K#Z,'%Ɯ#4 B*;hYo*I-/h-D6 lLO@汇 Ht347~?Ia/aSfD3Cj"o*Z%U{.dE˕Rc]yYwCG&9'WD\GHbD[Ϥ'=0c55uI8(o-3GʹGF5;9a?اBWt)GD5М|-;S`1Uh%Ё93-R|~>+;l ٔ=&dG5iRr; #3SQ-l(cxSg:7lg zJg+k  $'.UcM+F8}>|6ꩤ9B5M ^G1Ec pҵdTgr8EY:J}҇7n/s|h1; LcV5ؿ5*c:ЖOi]Uټe?(vNvةC5Q}^TR(Gˆk?%V#h>(L ͅto-\3wיPסA@OW(qWԓk# Bh4P}Jɩ 7j=ORh+߶1]h nݷeDK'5YCa (xk_:~ۣb &K,q*Z5̴p= Iޓu\Eo^UE?hT`pθ|sލ4SvJYc^1~.׶֜TArvB gÿ8>:FNodNbv:V%?vQ$ͻ-[)~ ϧ A6Eؖk4U!À&ul&lkfޯ+OQ菶d}-kktqUՁ˕I+fVYq3ծŝѪ͐+[|+//A2? 7(t^I6J`ۋU}t ģ~Ȱe.׶+C8W#dWO%Z"'RMT([uwQK3RkPDfʇaccE5,mɈadt6#2p62?;5| Ĝsk;3̮wM!*hX+-z'\Hl~o.@SR̴kuD :~3/B2leE h'YQGat(hU)]pyofYxVYw%k3ss= is'NbafU{uHAeB:4w=LgR ]g6`MiuBTpC4"մgJp>H:ⴇ]IN=hM OLy5*yčٓaʝ#c'FNS&yydm­{7BU}.wEhV8ʹȔdA𴍁e_h&+8Opy.ǜרB+=$ID$:ixË\(>]ݹގ @ꥑÏ RćO|owEΒz%XF^QD.B0 J6Tq Z{S#Y9NOv|^BD[̓5@uD\E1_XM;KRG#+uKՆȸ o!ء<&IےA_iHOw?Rw%J6GR{ wW]`ˑ\n? NQc -'L;¶% ̰_)nPY'1\%`K' x ̀QUk!K-Nqj˪/\ֿuQA-8a AxSAwp,W%wNs5F\V>lG|FlZL6ev~)"EpW:&J%uc֏]&op5}9g(pL_<2OBb5rL5<̡V=acSX;v̧<G&3&Mz_|86=)dV!nlX3E8.v]UZЛ̴9Rf U?9M3_cr=fX2}-m5.n2XE4(j`H ke J([$o;`zvvэJmMIwբz2oڻ e1ۚUpĺ!m6neuOȏN,NX1f_LF.8d"~JtpŏKK_Z柧6NzuzgJë́^E3#/8ʄKwe{ru? u^Z\DE$^.()G;Ud6O֧D榄ykM={&JY2'LyKp451= ߋ%uakˇ6/`!HB0T43Vnژq/FQxG:;[7?rQ-D-Eb8hټ|q8اŏ#ǒ&A@0$}r}A]$yJUH} nYATix 9 d)gVIl2cv@Us'Q* 5G|. l/()iGvƂ 1$CF*, Kq]4g\p¤$$PSlˊB&"٤@y+YfM(;4땤M~d߭_Ĝ ڀ]䷎2ώ2N`817ƖFn1}V`/] #^6 M!3Iʹ sWgX#j/7ô=2)Y(kFMC. ŷ4,hZ^_sfh\4CTUD}s&1.ܕ3pH70RCtZa%sq 7f*Bm_R5v](tÕ,:!G䶩׻"_=aGҤz{S"ٿ &1AcBUW1Ϙ,4R9~\3@~16 l,zYO'-<K;V[u,I3 5+`fIDTB' 6rbҨTdU 7z٪`>Xl7 ZF5oCOMg P _A!*ケ?-L#Ȩ&,v,YNKwPZEQ.}t BI0#_z c}J)Uņ!?%vXN̗9Ƌnc3["/M&?+p5.k9It:[v6'~\3ۇ9#&0cPQKC%[ݙn \ ᒼP-tv&b1 v }uB8V34u4R_rY =uWo|LOfb+keFV#؊*$BEAa`RXʟ\bK sF_?"ira0חb }b)!$}Ů!uv/,DF"s1%ɢicEX.jX47YhWd6)B&tF{xy@.ƭ5Et9K) Nv*nЩou(2ڐ_?{-StZׯ٤PJb dteNm~y2:qrWj@qt'h7E.}sN,Oj역>MRt.xcPZt&/igGv7XyDƓ1ZTaO (.{CGJD*ƾJGQP*,3 G`ѢO%f0w@;86ㇸ:<)fYl_9+ǩ`8$]p3G} zJơl3C[t g@f~{Tj<zQoO?A)N`Y. ۰*w+\!|3sINz%=t`Q9{‚>%MQF6f FYǷs0 ؜5VٚJt'D C ,scq&@{M;-~/ehUnPe$|R |+r|I&P |e7> uڃ#UgC\.8#x?`aX‰zyhwr ʗ`DJdk9RdpZf3 `]i*F&4"z`l`NĦV)ǨXy$,?x]fs' C\z1nEd7}F6: p 9Dàऀp^Yg"G :Yq̊[PC3ḳ{{pRKG}P9ywW& jwlݑG0gkk`/K8pHx" EϖґbE4 v0knQ%+\*\41-' Կ\9j 77K5Rd8)w7la|V(4sǚXbkӺ LRcTF+g{"/_-ݕ] 89{3J#efÑB#LC8X"}qbK뎃 KO YZ