libsmbconf0-4.9.5+git.176.375e1f05788-lp151.2.3.1 4>$  Ap]*/=„r4G$$B8.heߖe.SƷ$qq9U zYs25O?#I 4ak~V)*WgKEܺcrw$qn1l.rk[c/}]}D4(ɟT T li3nsѺjӞ!F+NUlloxjt2l[6I:o,u´n9,@s[f384aa32b3af85de8e44b6e23010968b0dfecc54fc841c9409a8cf9230d9685c2085476175c28a3e63866d29cf5a84ad631889ca(ԉ]*/=„~hI4? t%XMEr1x?B ~ӣ[5nx1'Ee;ˆ>5]r r(+ 4t§;q$r =zc&psoWZc..9 o [.W kE(]]gL#TjSIpy]l|Rȗoib!ŲCeV\qfȉ("ݻ q|܍:!/Yk3 b\%nRkZ@>p@l?l d( 4 Q *08< > @ D  ,ddCd(89:&>g|@gFgGgHgIgXgYg\h]h ^h0bh<chditeiyfi|li~uiviwj$xj(yj,`zkkkklClibsmbconf04.9.5+git.176.375e1f05788lp151.2.3.1Samba3 configuration librarylibsmbconf is a library to read or, based on the backend, modify the Samba configuration.]*build828openSUSE Leap 15.1openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgSystem/Librarieshttps://www.samba.org/linuxx86_648]*9cfd2c4403f8d8acfe436856cd9cba271d47f8d7f04224674a449e76ea645e7brootrootsamba-4.9.5+git.176.375e1f05788-lp151.2.3.1.src.rpmlibsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0)(64bit)libsmbconf0libsmbconf0(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.0()(64bit)libndr.so.0(NDR_0.0.1)(64bit)libndr.so.0(NDR_0.0.4)(64bit)libnsl.so.2()(64bit)libnsl.so.2(LIBNSL_1.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libtalloc-report-samba4.so()(64bit)libtalloc-report-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1]:\ڭ\\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USanpower David Disseldorp David Disseldorp npower David Disseldorp npower David Mulder David Mulder David Disseldorp Samuel Cabrero David Mulder ddiss@suse.comnopower@suse.comJan Engelhardt David Mulder Samuel Cabrero Samuel Cabrero Samuel Cabrero dmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comSamuel Cabrero dmulder@suse.comSamuel Cabrero dmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfigbuild82 15630354004.9.5+git.176.375e1f05788-lp151.2.3.14.9.5+git.176.375e1f05788-lp151.2.3.1libsmbconf.so.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10611/openSUSE_Leap_15.1_Update/732241d31e5cf48926a783b0b71d3f7a-samba.openSUSE_Leap_15.1_Updatecpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6e041f55e73b0e64bb9dbce3ac9cc79bd27b73ab, stripped`PPR9RRHR=R?RRCR%RRYR!R]R7R+R1RR[RRPR5RR;R#RRMRNRLRKRJRFRERURSRTRRRVRWR)RAR/R'R3R_RRR R RR R RR-RRRR"R2RRBROR$RRR0R.RRXR\R(RGR:R,RR8RDR RRIRRQRNܷyM"Qmutf-8c4729bb4985bc7b440ae336d80cc417891e7f66f08e9f690cd31f0301f2bf3c1?7zXZ !t/<] crv9u5lؼ-za S+5-~;R[m/)=x>ŧ0 . hwtANmqTU7j2Y kiI1bf aƶ' yߩ#OHTM+#5vIB hn*2V6=ICb'$am҈eg>`AF Y?TH qR2 u7!7=J HtU'aU%rZ0/l^BFl9ZVkxcf rFqOLx65M5GlE&OU]/)@C~nFd<T?+r a[/\P\}\0؇ޢ!Ӆ/ KѓPoHPM/?m GFQe.(M =@}l, Hns̈5ҡv I^XM;,plr>~v)EsƷ@IXl|8ٯf?D 7* ]}i$z8 ?jKꜯr3b9F b+X\*T1 8ըxQ䪞k HRCTu}~NdIݷϺ0+milbhGY+@[Q8N; zqƟw# s +e[PLj]:gThn̂sM19[߭;/IQE#y{Vܐcqh@ %rZj.KR*kaǯ7=YN bLDQabUfGzzkY L˳VmuflȼUTF%"2@/~Zc0Wc( pE%#;'p Sw1v@,6O+`B .F`Mǜ~Zp;Gok/^Wz~nfIRH,2߫i.uc:VIR߽*#:Vk!8zԡE+G xa*>>E-J˦ց,xMjhyjƵ*;gi@Ȁട<&$J6(n'Ln?>Ѝ{*u$3ycX~ślgnF(dycFvMިC85{ &MQ_Ã>mYgd*tb:FLw B)x?D+0ܿr"ulF+ou@EEqBJں_r |H\lV۷%𳜎v/L| @wxGn5.V,wc 3SOYy#_R'Q%-vO=1q„ru뙍ɤMLu4E׿w2GLw+%KZr4iF|PH>ܣq( JJn~~LDقwlܮYkBoJd䘽`!ؗ]\:O'?S,YK}mVCa}Vzt&8.Wb\ p^'{On 9)M7W䂩?yOǮZoy ;,A>ROA|;؅Q1Yva`GB U٥ӛro_u8i pd=!\Fd4\ˍKUt+T %Ag=X7oxLQlݿd+bs=t9K9Q, 3R[Jɞr_Ff2>o\s$(Iz1 #֒ dYjxH H^L0.B[HO@.ȂI%vT~" eÇƴ`\Ch%?ﱵlf~:vյ߻to*#0 |v2 RK胬ෞp]x'D`3͐0Z[xC 3TYHhex,Zp]SD@;/l oJs(QC. h"iX b${w]PyvRrohkƳ4H<¹Gx+VtJ.􌮼NY73x6ʱ<-d}[in|9>YVћ՛&0Gg>|եQ@DQ؉Z5wxsfJKhc/~QTccM#]zփǃKSwt)SK=pD;&C WXºVt&ؐqΒm-.M ʠ@ݡq֤٢g嚭EHAE>DoC6:x:IV ]br Vm0_'ώh a@h+F9ZJ'j柠*j 1Ԓ'`4X[P IܨZVfɨU֫5d*fG,^xC樍ٷjCL`5xRy+8C (ck[ýEv ]$_!0d@9mb:& : }%}ѯ=/Q&T ;g OR[ s-7fnU#Tg1g6㓄M} /cB,(E=rA7 yӏOZIFSq * kn}3= TM hSgu4WT']e쑛wᴱ2ˬ+cgSY7@󬻥F&}:s"YS4>mH}}ەL=& NUޠ q ²5[yeZt >LH_ZM`LK5B"4QmPlnn$p=Eϻ@6hc=Dw墈daZFHשȼ l2dr 񅻓aMad? ec;e7˖f?FV#g6ʶx4V~4!ʮ;!RU]A>nl; QQ~GyC 5)N}ﯳW *_ৣx: h jyGHŁ[p1I 9US':z7~HL8U{\+t#s4[&0nu&#7jBY{XQH&IJ {$Lnᥚy6f4[lJ:tOsؙ4N5@SV PI}w0!~0Ţ H;=gzUVj& > qUįXuf]֣ߎ 14t|;#2\8~-+Pq)kwxN' 18g:RZU/5lkQ2f]8Z_o{* IYD#ʓ xحI[YJ[R,|E2!t2V^{N۪Cn PMs0cVleh$S  @rXP@5.v^2\7Da5ɱGʐU.0 ٘+]SVM7a7L)Je "d`:%ub"l40+7OsXVY4AjQbMa(/0@ PE尵!;Vs#Eq,+L` OwkBXQZ(ys$d@W,U=NOd E5э6B1a^@'N&L_'CT5Ho [| ֢4h =I^wM>uB#|r. OU{Oi3r5^w齋7|/C"0\I9JxU 5`{#vmkac)i4oFiM.+ܰFoeuw£VA>x !ut1ńzĜVhx5Y;ѷ{eWbU^=Eց{YBI~ʇִwFgrk#z8/}~u@@SY=ӭaEZ$ OaYdm;3K ajSx,^G׶6kS u*ݏ ixJҡ3\ݔԬJ%),{Zz S컹̒*aS1ҩNm텕vSH6g%l%p(N8z Djf}4.Q>3u-Ph chV&دe' 7z  8~FbKD/d+"}]^qP-JdiU0,i[/nhQTWQn<|ʶ$V6ZMTs鲽~XJ0 K͠SA!p󈿐T0Mz`YPSD w > )\o4JAp@\RPP`_YKB>K@,e{/Wz) ʈ>w,QmV>KVr|8I}\p njZrɗm$<kS7rɴc)'/U-  p~:MB,99žPi2 dzs+/8f}D=ɪ@=*ڷu;<]0ϱ.t8lbMĎsrɩ埔5rݠ+0XkodLvB&Oh s$kOR;[MeCHr!cv=?I̓A {@Q1@Ja_C !`h2c %Ck%gkb~w1+xgkBx.؈jo]7H.Ju!hJRvN Z\/+Ә)ߺpy}*{uN{HEφ<":mV'y!7`s$T"1F J)~T2Ibȫrc7;΀-?GlJ\GCo}gXa吔zϊ9fM,QFC&;2ݵL%];Na[=c~.C7tї* ౷'9ݭvAW'HCk͵Spe|^>i_X_}XӝFp4k(Bz]Kۃ';*P}.ju(Y9Y6=29XL8u0iqpelO9@;OPY{Io!9ib!,jY|܀ ! Db]T' n{=T-jXh%3QV'~mgK!Azm%T -. J~68ҏi|[ 6Fb@}ŹY҄9CMӗےJk!Me`g/x|I0zgL{kH\^'2rl{[R ix^yZp}2d5wURbڿD$w6,/~׉*XaYDi[{/S<*_ll+pO䙩;P*&̠|)/@j$mRM4'´AwV?Q݇TnRS/RDOu X92-(HnűClnmڕL\^^x_fd>C ~'sݭ+?mb"3H,Shs&;fQimW_F9ƹ;c0"۱'6}ZbzR_(\9i-w؞)N`Y.WށMn3 vwp3TMԫf-MU83=Wߧ 54!nv]m}94>[@ys0Gel/6yb=s9%.o `oخ8bdb!։3KK={}:Fk0#NƧWآ_1יB#қ7\Z]~pYI3b L1 Z3  `#Dzft5"UÞ-tU2$:ZHrR;-'c @䂨῭ap`Xk3%[( *U/O*i%qإײQ䤸dDH#n6R[Qy{Zνh&8Ķ1,_.6YbכxڰNkӨ/-ÂYS} ;puGeDT3u~$az#V`EC3Gt '2&${50U=!4sC֥9wcbNNQM7%:gz=V91'I]%9 ; 0 dbǓ'օl ϠL/Xo`vt5-e<=g\unJĆ$ve/mGLL ԟ5RP6ϩ~ᵋPe SWMl de~!ˠYr;I2vvXZ]_jg2֋iJZ-;[4Mw6#EB N0/4aBcKD&'m HnFlLy/rBfE, t $n3cP|y'^uFEb< RlQa¨7kۃoWi^i>4g(iz'do(wS`O)-|4p6ԟo4=k;N %q\vÀ_<\0q 3+@_s^g·L0|zPQ,+#E)P.Wu0wd%ц"$] G׳+1D@mߡZ0}2-d|~%Q |(9 ɯO9Akƶ(DHw)#$} FD2sHyg~]^wOE߭@B:5iXQBvcx`#ROVզ(.w8Qq x_gYzJi(jjQoREU>X(iu"ZUiOk_挚[_14.k1y ϙ*e0DV}A\h vs\vJT䕶gD<v,fEw!=rW|v\I@PNoL*>_ XMUSW0b.U5Sy4U8ݿ k󪃀g0w?`mHu,?Y)N4W׎i(lLA埓YӦg}kh ~D} ג]Gׅ"@`c^壂Ҳ |:vޚ;߫76%Hcrnڷ&LװR}DNvNos1b7ڽlҐ?dn/bI8K?e-0Jdb59Uexr&sW-׷-`c-+"ޫpt(To`M[j0Y ЅVۭH[~*:5l̃+CTJ#a#wdz<~SXb| U9x4ӯ,!_?h(#UPB4\)M#AxER?a$Bသ9Dv9Br#l4Sp/0+8MD#d{9PD|>,7" I)4v1}d9!iHmuɾd|vMDM57 ?o{,xХW빀"LT>8Y\ Zl`"3 Qk^@@̵$s?3eEʩ_"u.- ֪'?۵;ڈ>W??FL,~au@A{¥5a>3*aÍ7ϲ ~ۑ݇olb o)e-g ~H h[ JtܳՉW†!2VC۪P#ry7=8pQiǓښ3P(jz\0ly,Zgy?DžCAh2\-GH#s/=,V #V,0)笐Wmc_Mn8-&MId.Vf)}k8۵ Vf1ۨj& máQ>[(.QYL0Dm$n@bk '_ )yOg-Y|xP }kٷ`,3Z!wU6Ye!*:19\TAlS12{8{P|B 0E .vq͏=3/f84}ɢcє[ZĘu 󟇷 O 2+y)gl8<;H htd(YŬlB;paoqm*bj?t~ר%<Kzh^TFZ N2~SV{`t^.T2m0 7ٸ ݅A6ẑT, c,>J靂j "jzzH(Z-#%}ҍpKN/1˞@E'/9px}A/PGH=jS #kʠ 5׃OĂS=ifg~&D@yw`O Jg>RA@eȑ1 ^g%٦^$hvoF> :P#yhy 5U-jiF-2=1I3GxVjZm*p^+Xyr6RBFoJ~ߎ 2mSBARC~P Koū՘)Q^ivŵXY1Y9><  #H,_LH p4f A; 7Ѣ-R.L;(86g-%NIj!3Ka3` Iw6-?[x @EXȶOPR+mc5/B՛K9b͟Sd[]h>=֍6k흟jJT,ƣ+10qpMũXp%aP? )UT p'ES(9ĔwQ>PlDRcHYW(\ہ$X-_@UNցTqw\H\wfx6cD+f^]L=]cI52Ca8!xWb)Ifpև 1#}{tw^`,}nqq@ζOhtwq抿2P9JjkO&AiaIj>cU#퐒g|2OPÚ8Pu%lh2(rgf͊XOIlYρq8ײySg*≑! t_PasXZ qG/jE=WVpH%'`9YY}QS 0=/hѣ%&-6MqTF?JbGoeR6zSdMY'+!({<scEuä00{_Ydˍ*Ʈ6,0-k1O4{\"3Y>k>gFK'O2XJQ>ۣ A]5Cd5ë¯O .S_mnSMHޥ2)lB.FlI,VӸuC'Rr] s}%T?a@j uN RdcA"~; oa{THz%MM3/4+u=4,*AeYc|60je sϢD^4jc M }[Op)VYOʌʂbgJٯttY4pt+eHz3]>.Ӻj'0|jj{{!=t%zm I^ `U\>t$b Bm}^4?̧Q'f%4O ,%ࡀXm2daE]؎>zĜSݰkD5)/@Ͽp-TZJ0q|nmS'GN*A40ǽ5l"V3]21̏@Ⱥ!+"q;}'6s.)M?MTہ-r`Gt_ב%ڷA4%1. E EUGM2߈ ,[BoI=щO htXӣcO%qOF~-힋XO,H`ʉiȊMJn*>i0e\,]²GxwMG\} H2[zezW&I4i3dfn]h#1-/qش]~'aSikb 3?Kà)-(t_UǻX6K䢧]4`vJϫ) V㉌g46JA*Lv_@t>qڵھM+qUt}:H% Vp[_dC hx=ERz`$醾`ݾel1 _Ze^¢KpԿNױ"R 3HJ-F}r #ZPnkyL%P4Xۅ'sN(S~9i[L(Pl%0Q s _ sDsȖ$N) <`T*&MaT>1;dTa#0H[6,>~6<ҍfe{G> ׯwh PsyFDQ&`\9i 381nĠܣ]%_wH eY _'я`Xx ր99ۺRL%Ҭ 2 q7~HGZ0)հr r3zQN%>?%C:&h!WYfS@ 6#݅89SlXb))C+ o6NikpAhF|nqPN$;&ZN[^*cB kj&F:`PpQ3DўTc:-ߪekmGN~gK]c]JjnwT·}cW =8ϮCHut:ǑhKb>d;\^}Vg+dhls}Dgr"'0͟'W+8Pxm$B<3bj/W0~PlmjqR {Oq\%l:Ez^$&1K:m=b=@(?x:t*Z3*G`6jrTR M3_^<8NeG^8ll RoՈ뿨ge1Ȩ=sJkT \:!o"."v775BtQ!:12R wy4=ZJ snZa5%nN05bdc@u}@chL aY .۾hK4wT(фH޶yYXT{Ma ݼYǗEV*KH=Ȳ^4Nsv %ۂ8BoJ_McdXHj#.V^JmVJE:3U+lbK \ ̃6v~ #77Yַ2y:Uƒ~5dTeVs1'eٳ,xp%8)e`BnGbJXC@(T.WvIzs+8\zMZR{:057D*-yM¯C@xx熩C <r$S/O!d\9.m(-N*g6ۈwsh4W.Sn/o2a +n6{b cзW$?UMLy&~k ߞɚ3fOoO/`, qj7z/CG}0LM֪ۚ ei]Ξ"'Gva^x`Mc|?mDa H\5[AD FƗK0{ސ>ـ[D)Pm -n4+\4-t$q 5nN$>x/38xTa ng3cpp 32qV/g/$JV$!:fw 4 5Mw/+Шs(5{-hc#"N|IF 0y7\.?ջܖaZuuu Ŗ}k}iL&_HR~utF!&>W0AK`RzOk0zK'ɧBբFL,l\)Teb% .I / ѣIh JqG}Lf n9$rx~ISjmAc.Zk Z\1w3L>}uN։бZL__ 0Oµ3ROkئ촙v)]E1}pB:۽NQ0/Z+#b3@DC3Q73[?=UPJFK& e b'zrD/ қNdDp,sFx&|Hpo{} z=Ɛ/k/Bg7ۛTVz[Uu c\D_Zp޻P튇҇ݧ⢴:=-I_riÐ`?䒦^7M"X( uŠ{X3սsDtDX>-F]s;%Tn豰 -VN 3=%Zμc1"yg)sSGzN7(WǑch1۾tk-G^Vϸ"roe`?Z Z oJɃHrXیvx!%m%Ll c 6qyf|khf N ޗKV ~^UEsMuM_ܥ-,q@P?/=ivqP){ԙ@lE:]~W:lD@].I/-"K|Tivz݁WF3#;qedWÄauJ %rgCB'/*|J:]$+AQb?FM c"-2'?/ ,8Un((6^)PRIz!H'/7;j`/oPԦnd3*3. 73>L1J>oѩN![>-Ǘ\һDx;?{ qf%aݔ|퍶tc gʇxhؤO xeML90VPx2P\γ+63kBB5J*asva贴Bzŏ:Fa\b~s)<1)@ M[|o<03YuHF_:$f/;l ER@ QS [s:_1qHt֕9@ݸ*7*'?^eTǢ`ZΊ ?Ԡp|W@ՓW s%5. qBq-f&- Wǚ"tYلjFQ!KaT݈ksU;!hFQ*BA$>Prn=r}+JG6/fϏFuܬcѰG@L%D}RHn׼Ukj~.e[L/,X{0F6sśEHi ^ ! )e8ȋQW\8ے0C +fsդ-(SY\k@d/ŦTHW`B*]z H۽gI(*]nV3hpH4ϫTԭ5)X3(ef˦LRʘ^2Fp{ib6Xu!s;Ц\P~/+ǀ%s1gH8Êa'IPvۜd0Wm(l2[Ni}54>}!FkA@ 5՞ z|\v߆?dstDʂxYd [a;BSj)>1;^۽)l('#)CʷHM=1ƆvZ_GG#Ұ ^3E9 &*7;#8Z-vZ~JҁhQ"L`>Cn]\~[ %4$>;!z]rߓеVkFlQ"EG FQSB}! φ ^lY-j&<&XvY)8\iϹiC𚠅\9ZӕgKq*f'b6d! C﹎'ܖFD9$sM'1(Kz.*񕐮{Eم#I*'.;_ v*f?!qǵTYúq,<eZwIptIdN h:ض|;Z2<&\^>DߛNY:/j]msuIaaoEv >ő`B| + \sXA'd~N\ Y[#}Tx&2^<5xID*0NytYG a"hPbj=3Qv>X~y~)Virאj<&ܦw||WUL}$u& ]L%^0˧snI"gx4LN屰$% d,U=PA#NdѦ`~\ppn*G|vTڦ;|ZB@2PPB $?zHʎ$MYg}V2m eߟt[A %=vݷ0UH.T:18t䭯umoP߄u,VwVC^*Ͻk4%5 &19N2BV@Bw5}.@cY[̭,wdi^up*u#jI^n~[X_5EjYr?!td-,u$aac*Λ)ƺ dznHmIeNK8x7rvы4{vL9* LT.>PRF%ց |%ayiaN3 fj']C^ mcXacc؅w-K{ySu7bϐ{vQv9HC>Dn|j *egM,.*V.Z߿ސy8pbGyAi4a:1M\^C\Z8Dװ2(@ U ֹӃ2&7VMK.U<`\)4&uyZl.U\˗]hD]^5]^@DDjNTR0Z.rO_RW)MtB͒{|^RJZ}Vh'A9ExvRC-FKULQՑ}ZC"EejD' 9pAi2ITƭ=b+0(zqn 7G!M*LIǎWd[\!c⢭+"ҷ@˖XOz{&rhcj(f$߸ˠCK Ln۴{+ҕDx7#N] ]; $'fm8~R-#W),f^MBA@}`6zpJhVAX5uS\=c%xЖT߀wv陝OD=(.m |oYuq'z֍{x=bl ]oe:+| BR\[)N2F@E{9#vK#3~ h4LOS-^h_iB[Ԃ3K{%Yh} dF.v''9`2&G]:WMfFZHH^׻P%hA-;-H1ȕ-cQѭJ1I\.Syń6_Zҡǣ KT\Xי@yon\N{L>1Cyv_D~:{II*t#G\{+pPͦ O9FR1x["o@7i`2x& 6|j.&!8tYrR+`xgJG6⡵ vޥڄPlrjo}&AÁ7x5n4+jd3%n, o?(%[4ͪmFO3?*vc!p UT)[zfo583!0&N_[g.uB'pА^VF l~hb2'4$3 qf5F4:3B+FHa՗of6<]IWRm@vEcWjR~Z;OV5)RBҙNJ΄Q͢"{!5ՃTk mB.^B~%@#qs .7[áQ@xNUO/0 aV|kp\SLh̯A)b0LBvm-:u0 M( K(<l:C.ǞUXZf+2o^6vGIzHH@ߔbDS?u!t~V.PQ:tЄlktyV!dj*E}H8M<薒Nn+[ӵG,t̄aSf^Y{vXtA *ܝ~gxoq@:=i. ?P UKʠdr2GsyGR v8Z۰`3YzdcO-9t0"LT3L AP0|@Zfq>}?C8]ep^"Z^$N$35 Z2;K?U{}yLEg띏z7kec"LC_Xfr7BG̳쒋o2!RF+^KI`S"nU6r3X}bTH`j#I,,!!b!rui.|:7.:xlX8C?<̉x+@>c?,*}_IG:J˱zM%եG?(Y7HMojI#@2L<kV}-}XAuMM3d~,x))LwkIL{$X**d"diHq 780`FtE:]hPLa^*ɿZ<"4RZnН7'tΈ*?t%s{ꥼRe} E5ZB]tZ4bܙx꒗"pshܕkS&x͌U$8 F5kaKZl$Afg,*%.tlqgzj80﨓&Ѹٗr)H}N7̛]*m@J-ĪbNM} 2cw4MQ,J ]SezܵH+wrꬾh3n@ f%nKAM{$ssjEZѨP7pee(R@ƔM%\;lauH~GyN jăVE[IO}5ѕ5HQt#,ֈ*hIݥ~'{)B0}q/\)5 w0RJ!@wZ Ex&6afqTȚ+/s; .Fk|CF߂_+ $EQ-A2ϯ}ˋ:BMI e7x{8IU Yy[%h;z:[کub@mq$GaLNw[)iwݴSӒcd,Y>@#S](xh {=ςUP PYQ;c<#ep ~w.D@:۹&LL.ǟP#-e: A#LnxiSnGJѺ񤉉wMrc aVoՁgfjfI4?^j'ŗcR%*J)*2Oߞ .Ti2pj끾t enCXGBp&1ze yzztJsa8Bf>; Y9,|Mcn![^諾T[ SxS4c;88 R'N8!C87P(&y\>pc Kn:k! S䄢yLebf9yq1?l.fy.xڀNOK[~ޤO!$ ΙhQhv0:`}bց[>t`Zma3 XiVOj>j g qz'UD38C^%pbPYzy'pfjĂ~P5M5W~f#Sӷ~OBshbemlCoA@ gUiwTtH.t?k+ l!%1_R80LEz _.U^E֕ *y3ps#I'J1"z=Dg2c gI`#h?[p"@E- JŤ>B-o*%jj܍gܻ'A@>{v |L6vy];==)X lmlnU3l 69x z QYhV`@ `N3KAm*Kzp'($%$ZS٨|V2a,dT|Y*v 0 &M^-O|[ i?s׮+֯BH[Σn>w\Itr3AL\­NN׭kvqrQXGU3VN5ʛ5+~.!ZFN>BŅ|VBsй<.N櫢L"v<4F4%k{wPt=x% f9=T!WOd~y:ZrV鹨3+X؟V w(zAʋ0yAp_!&Ue%tIy[o7Yx+tH+˲Wew:qj4)Kt AJD.^hv§]21o3`L6NS$vNwi;JJ"aE)_]x H2%5TP>Y̅m-HEq ]rsVN3]ea.x)(b]rOSSAVpgHpdeҍ]ܒ֡2=Q>/(Gyk=N5$أJS#"o/!GwV.RIl3cϺ*heKS!:QT@ g>ecзKݬ. _\'~0JFX#mr**in]s`egB/ Lzk!MQ[|Ol {d?D5rPt??ܲlVR"ڝ 3h&tPԴ卂`ݢ𯺵Qh& A3G=WlX)1cy50M8;ĪRtY1~Ln]XkQi 9d:?~nHIG_/dg9)7J& q%Mܗz3?Z յ}v%5?߂IȼnIoHELy6ߚN "r". 6:J鎸 >CMB;`` jmf.{.X('b{)R>d'$P䯗LS_WZ#mbd;n F>;qڻ) f4!A(F܄|Xc蠒VW",jSRJ7`МXb\r6.XiƫE|c{rnWb{7 b6u+AUl4̣1H#1_.<:Jk_Tᘊaw*\ ^I_QqP[=P}CT]ts 6z_ #TfrȒCQ&-~iϫSՀ*?Vl5?{fVqю:)]4r }(R^_ # 3SX)`HcYvbZeam6U~!ؙ= s$.l{Kj 7 kX⭃[;:}:ϕ7ttz1(yQU7FNc괡xFMpjYhn`uf%Ϝ|99"wKH) ' 膵CliTlօ#NnKa#Kؚ˧ l:6%PU l.ЌJ))>z&JN5j bԹ]6TUBʘQK,_M{N !!:EyAv+Em!XOsMZ|2H3tJn$ESvY2*QҐ!c4JP)x58H7ɟq-aϘIZќW !}$^h 0u`̮(-AͬiW}7Qs1ݒa.0җP[bw>T_)T%kl!ۢN @uzZP˘/P1ƥnwjgDbIaw#e_uyxAԬ-FHʕ2w={^ߵJmCBA6$j׶).;5I6 d|cc'6e`pjElj9aml>nMcͤOV}*r/Kr@ W&2/,tUV-[iSޞl랕Uy7*8&Q RuM9?Jk>:Dž9mQp`y2QI stί9px|VRq~J΢] `G3'fN=,bTe#e$:fvtr܄5h/(ԓGR^~)EryWj1PCZZ(}fڻm+CnˢGN09ll$+F4h[ky@mvV|5#f—=DYSJ@,&zqxRFdwD,MH$.Ś?q@Vm߲$E>WB7at f&1M"%Āk螻ZqXP7*]q6E'yЋMBvq X: rT(<^ w"o;eA'븭9E7MOCb.Im`fLV:5hЈ]/&GsUchagEG"ծY ė@R#% ٠ e&]25<}^2$WoQ"?}UGMϤ)m<]Ôz3 ͇E|eWܯ ؿ-Xi͚[T.+I @Ko-FSwQFϬG<ԝlԂtʂ]! wq]Pf( T[^ʯ^˴ڶ3`R BW + 54qk`G2,r*%R'q W2atFƦZ[P:+ÎoɿY \yd[LNz`N"ENzK.]q+5VdN[[ي|oUE7u"Zss2W8$~=5ߍ%>Ŵb3g ]SMg~$Bܧ˛·gabڅF}I[;(\5PS{ah2YpV挝ImgaJ[Q7I*  zuc]r+IG.K9 (b1oͪb0-Zf(-;0Kb !li4BZ4Yp&on]Sڡv%窲׍6a>&*D#7Xf>l8QV)RpReK"n\X/ˈHOHe5~#>BDOi {McM( Հq}b3bwM<T\?)@yze.Ё!RyYFdܢ םa;: 7 `l=@I .z<;V9U6W m-.=ǃNp +]S4%RsNٷfٝ 3l/pźo3P#ە=c![[6^^KD˵cAOu \/=F/8+4FtbpAЦ׸#R!8mcM7Z24#bō( ڮ>nS|XJBiZhx:ĻsN֞^r^cY mH$\Q1WV/pZ޹kt(ve tI&a]l|BwyصD"*Hec vrj;&{[: DG,m^6<+eşgNXx6 j8}:@] ^<%7/U]>jhpE,Y<`%ih=x L#C/5[fP1DfjjKU<'(OڠI'UdLG-u>3Cʥ80}R3y~Y+k@6SN` gKH=C٭qߦǯ7Min‡ڊ?ԟ9Xkk,g ϳbB+33&=Ds-EET= SbbcU O\$~.Higr ae.V<*jrVaFU֤(tY{6dcKH}neuC'c|L"iWqx>|fyW,X̎Xm !LS$&i&KɊv 3$tx޲lx-IF9_;LH'&\zƖX(4O1ikq ál]7Q3HzݗLkms;΋?i;[!"0ȯbWIi+O˪ץ6$qIsgLquqdz! Grzzcxf)ې,jnޑ>GaMfј&dTW{Vj4#l]k~AքTXTh ~rᆛG}% JN~7(+\asF*0UM!D\ Tz /V6߄=,%Ee_;'.Ga#˼١%Đ)@nYw&F8շe^A_F>؃W4'K]E:8Z*w0])3=??꠴1he%Ihc&~N̪5&»bF\)z^Q ]*i$H NTfϊ+ijҴ4(]Tk[1`.J`ˎ={%/Xk;uW4lj 3ikR_&yut֣u6z&[]5z/xzmHM߄+8L:Ը]z~%!(}_*e-5f/\L:Re/2.FI x.Bĩ AE"1$KjJ̇ JO+K{Ve7lN0œf&^Sbi{n\@?  GDld_0`f'8>zZ  ;jLG?lyz_Ok5S1|{j_]@km('˵b8כlT⩄=81^LצKFclyS@%tVnrZ]>1(-$m]]6̆YȜ 2NQXzgzE)puCI-Eq"\#T)8-zcCuӯL`-A**贔~-3'Go_08QzWxAWrDmWq}x+FA&ߥĦq{I8:C[*rX/7NUr3;d;7`z~A,0}|ˆ 1wa+D=3K .p'xdyWT/ Fae:еN kCX[&FQ#Zx JK ƤLH) /3GX6Vl6?7X\_3ˍoA ULc|hez%#T+IRZ2oqf2`?!_qLZ=T Jz كՙcf ^z9h1b ߅ɖJI%cث⦙Ͻ|&\wQ$r(ȷZAq˾ZX!c@<:"T`b= %qHtp2NFbiWcM o |M!yx!* *}n9ىgV27}(.]jum$xFn4ĖԶrRPx@><@Y*G3uJv\s:רcdsDz3-Ӝ%?NH֙6 9=E^ huYm=;lTcLnT N5b!oDt &?,‘#/K$<:4`\XK`ғ>N}@Fs8[8AgN+wDn;ZbSH8C0lfvyJPnj= b7:=o]tauY',Ad(7*y]sB-O˜8E*pS3M"}obfL Y%[wxAgm~22b%4Fu6I<䡞L1$?5@7rף+K|)$U?}ӡ&~ HEgxi}N'+8WQ},&ya}#ft[30QHD慱M~H2i~"zG W?pae ִM9lY8 Dw4 A4o@@2z}*uӞ %)3?r7zid2=x m! iw>_^@"zY-KW B+6BOB߮WdSk[0ZUZ .x?v.;oKG:*ROHFHi(c힑i#y@5' j8@7>l3AZ9Zz= T,0 KNTmxYM=ɢ,ZKƇgh)^ +py&f$%Sjh\v>{a_d fHmI[{cX6<,"j}Ls_8TݔYʄ{`sP8o A;taY| mc5)[辂T U<ܹ#92 EuPkfdN,h?Ef<EI0BԷ8@RݔOHoq-s}C;f~AY&ġNuuU(FX!N?rLBa~S(2`2H),_a7QTp)xڒ[keTq2YJō W[vJm׉bPX&_*WSHvb n [Mw6bW. pEf$>Gy0Aw >sx\I\@tʎGoO-̄G&̺n|^#Y~i@O~}[_x U}ixOS'[XuB4> Y=sX˙>pD6 p[k7Gt2[{lFG 9⛉!kyQ0)CFBuڅv]l{tקWvCV,Y7R5AOq0VhJzG$Y/xype{UwWL'.|EkAHYEڂg›dIv{ pRB= ۈPGPysNkewr ;.[K`%Z+2H|I 2SQ#wÄuKS } Ga>[-f@n%yI%v~YNdQ&SHo:,AƦ(`^7nrKEAy |wO^u F$Ҭ865tرŢ][z^Pȭ4Ƴ11vsEwKc=fi~$|N\풯Djٹooo-(ZIJ옎kRqh5FozU^zR!o#.Eb\Rnh=[C%:zf%~gd8{5G2QHewaoGNM;tT\$ȌpcZ$cXbf_Ei^U2,YF q6H〶&+ٜnPeu #B ώeѭ=ǜLG0Xcxhgv(Ie"KtkNwpC}ܺ='u ܒTr f&QKq 8guf$=iQ 21h0S ,gby=xSXj{*1[yO87sZj?_)|,E]oQbo3[ j"q+,b'C[wui5]HPD|fLF>&%4+ ڟiO2 M]jKC\Z߂SxSsGteߝsx[(*sյZmP)`[be6?6գk [rʮLnFT~v=k1l\d n< \qRֵq`SڇV-X <i'Hױ ֒XyBn}euf]]B@fX]llz.7;Ǧ@H]%WgaMi: ДV:r*Pp=|]F= (F [֓R1:,,y?"ͱn+PrEw&u%DB@?}8WW+&M(6$}^lÔƇ@JVNr/Q2~'SlX^!a5p 0;HLޑAw!$)D/J<Ȓqڝy/WǂM)8Ye ,8q{6.yh;xci_px6kDrㅎsR~֢{xXa4R5g;lvrUd&(3$vwRHqU" ˙ Y;5h\Wʏ-u*?͟uCSDl`gvڬ͙`fSVRwV.jd2֣tTgԁϏo 3|?N}/Pc;bp[;ijJ|ki -@DkYW{gQlj5WWr C8y&PgYi2oF^HblOߗ 5\xq5+a,| "vܵz0=ϒ m!4e_rڹUBaQ >dkZAqɐ[ {kw?k@-]^ag7.޲).le ~598GAY%EF<=\kDFs[=C>%uLV^T/u5N, DF\ԲtڟtƞlD }@EpЁ킪Llٱ\Yqg ]/ܳD5,޾/e"Q|?]"eO5։3L4ؙEģ{? ?.OF=iQ>Qn6V0JrW ǹ=nϻ5,Z4]Fgq[ {[x}v mC4m=f'}muҼp1!a-2}vČi5mYxMû380WmX1 !fG@)7bR8)ay03_dVP|8"D!Ϥ7[(SH# Z" @E%# 72d^ɹIJP9vR%D7eP%CxR=*,5JԣAEJ W=_KFXjqZ= Lqz|L͕=̠aQb_H`8 VвT tpmRвkDpDo yU9*\;4@_ɇW.pe_秙&Gm͑_g>G9oT, G֖B @ Q,'[2t0-6~JQr h0PO<:?Ӌx9Ƒ\lukHRbl_C3&ƎCE7p$r'ҷy۰(_WHVo,/]b":"[e}VM!e5Ha1d<aOx2/G?dS g,ԛ>955NƼB8GwW&WF<-Mz;Kᇍf:q$I̊Sd5̺7%>UQy t;ΐԾTaisjhE@SsyR##` ]T:0"R>I%zȼfrKǢ$!;T]Zԡ9p y×hKn|`GDu_i,\ˤ"6I$|,lЭȢs_& C3lPnL/ Ej,Z*%d,n;E\I` < o㕑mÈ[WwϢ c.=Tl';V K T_utxw?9f)1 $!cֽ' cE& 7t6o|HD҄`QY+bP5dUn'6Z`@ tJGQa*n%iι=C JaK${6mĪR`Ch\Xb!D4+GJOu:@>Մ8&+,+ZsAh>%?`窳'I"[t*˙f>Z\l G:'˕G^KCMfSӺ<΀Lt3?ɦ|;?`LAR;q҈2<9 8ru='LŮY6`UQB<Чb;:/ǁ0M>{JGDO@FG3>f(k7 :eCy$s&Lv۔>.RƋc=_%_<ٳi6g"I1zsm3 eN z-NҎʬ5w^j۩s.LEougO)TȽXR@Hp٣pCpg28]3۳io]./҃'*skFw5\}Y@&%eYts)kn8tnWklq"t S16Kb"Irɓ7ztC`LH+s-X'YN8oeN.$<4glBؙFCPГgJuk_Kj=gCOi8Xuz>``7 sj=v_ ݕxؚ9;Sʻyu ѐh+E7-o#MO j0y `E@G-|0>k'~p 3ܩĶT/W>ٛњD,% WzL]=y ä$Ί`J, N7; mNrds6 w$N܃U ӵ1MvɄCBe(cX(!@^+w$>dS @I;˩醾4 :N%Λut\\KH9A& P,beNH ~9I$x&vndP1G9d$.Qt=Y-Z΍A{ w: -8&ݱ`cSIILW?DڢNjLAWogP6~k旒Zᡱ  ?chjv.O^dtT"y {lT|96NM<1Dj9"A'n}D&)ݯn °Gw.8bfQ(XmNkZbj!pE7 bPNb{bpZ|I Co ,Os98|s_/+`Dd~5ڬwtO詷7mz\K[7Cw˙))}Rׁ37:Zm˷?RK$1t5:Vg;1fՉF;ʰRO{i&cIp[kx!kT ?JhS϶,Y B=+TJב~Acj]mX{yݹѡ3{vy~rՆv((-,L^9zsm췸2KIZ³)Nn,iF9n̓gUl"ݽڵbC8{0Oi 0L` a#YKA7j@4ۇդ]O" /?j@Pa+ר0ZxV%W|>ڗsnU) h|U^޲`3   wX2m#O汾K鬫[pH6m_TSxYL⣒"[\X{ev`6іyDUxo#"h鍱; SdLE0r1=?U\ZTuQd ߬Lœ5yYu,N!ExIF۬;/$"oaǔ$;Ԏ( ayHcnվ%Yic|_8>VSeRٱZjZkS3]|y|op݀m:'8Է|zm,1f~Ш2j|M3#y܊hXE!;@U] GoP`}񝆦8C"e*]ݸ3v}GO*1yBW訞$2}Sa;\wwD33$P !)_J8B8eܻv"&F?2ʼnF =yJ}&U_ \kY 0W8߻U80.K%y-hsϠ~TJ0i3nRm`wY5Mp$.CA&Ǐ<NvB%(V?DY}\ 6&\y*º}Pj<&D,]vE:4%>ϼ,4r7I*i\Rb6Ѹefjz!/m-mt5JB} F{eqb 0#9gI4^z9XKІ?uK+]7KԼyҷ9)mԣhSIs뵷9D:Nı䟩ń$Q29hn,h/ 2 'n_ B[#ĕCXĈł3+MU=>Б:TdS:r˜f,g\FtBCME+}@EuV50H^- ҁ󖡞<f*4D;rq'&G+QǓt/5:i_poE͞d,(>4{:v遵K8h)']rw,0 "ܞZ!wЍG6/œru2ƻE!S ok/ `.A.xkpF9gv5kA\pkc]eBvB_lBB7nٙ P/oLL7!+fbh/yN/XQf:dcs]]0ӫS*Ya KPT߰δ6?A˜%#Ru'=kCoM/ں7`d&E|Y7;-/=[^2r;#̚<(u1}J5x_X5;L,/, D?E3&:TJXaJ2(@X1ȥ$9+%=y}G%}n#,RXri|6uNn.u=1I 6d:cgi֘1idUq@h J޼]?].PbŮd<+87BT f5B\;UL#qҩ֎Դ ׂIIO-TpЪQemypZv'yD/U\#n91֘P@nOL^q% yZ2R +OiP7I4|0ˢz)uDh1b.dH_`rAq5H-c^XxYU&%:"K&gig@0Kz >zjZK,@u xCS_+Ϳ*C KG )c2 h(sЯ֡"r%ɿ.:Py(ݴGZ%j<}?kHjuiԱy@S(QNƇ`؛zX+-?H 'rpeB|U#wnHiF2vzuP(RiqE)m4(J}@<4WZM]Iq*A==5%mMX~~{x*Jr3xUړMYM0p\WB`ĎR7e(VK)%0!C,N\G~*[ͿlU0N;);{8m/Pdt(lW#{ z%[v]WZ?ͨ&4*[t ssp,-:c({nBp .=D5MvRu7d 8oB?~ k|[nDPki.¡^J>((g.xGYN?̗D%ª6Pg*臌ЈB{DZK)nOqzED dڃVnN!P FNLta/ 'Е(j{;h@ڝܘvpƎeY:>7&ŲlMvQN /2AY$.ƎLLَ!%E[eNm l`xV,#QNzx.)UvDD ?4vgu@jqT)ʴ֪Y( !ӥSnޮTR’,/I B4$c>RtK6>/˪ٌylS2+=bHL?\Hx~)r4-hMIcL0"? 2l#z@af_:(kM; /P. ͹<+M`+/fsZWhӃRz\y%+~jӋ>1C.IҠ׆kC\myh5xfK=@W;M-J\@`9$[Ekף)zょ8<n{OFBAkX)GZTIZ[OVk^bp{ <x +u?F3vr~W5߃8"#n^uhs,=䞮Z00'%bϗ^p`9 8̞[OZ(45N:C;_l!kT;^)jg=fqsp^ bA۴ pLHNavZ}ϼ ͽ}loaLR"v$]nh-]GGgT).ȱ Z-.嬔M6:t!@gg|{-h'%#GYW~jH߄>kD4D85q. f<(1:NҐL9`\\ta*d-{a3*{`EE҂<mv{S|x祋|] G~%VA*ZufXwR0SWSuANMԶF,@brTl|U!()%fI!ւ(#Y FvY#({}7`lcQr9?x+#L>T+:@3֨ 9; $*It\.$[?\dzfD}EB.e(uԡ,5l;!':OZ*sTo0N+s<§DbJwWC*QTR$geL AOoE B''&RuZyjFUꈮ<ϸLJith0O1w]mJ(^]t0X!/~/,ܢͯRl5`5謟+c0kMDGXI@A_ Qߜa01i[xMfS9~5:héx Ƌ&x7އ ^ 'V0D2Y?{~%1%M{C>V Fv[`^zGt;tc(*/$>tiyykD\bQX.VјZhA%!U\A9۫lsO4DAiHJFIlJΥDC\&(az@?:8liQVptijP`,,]1֬GsNYc k٤a*)Et{T_{DVgC EޖiiKG,;` zTe!-/)+uF $T7uw;͢ UuxSsXPT[|k^Q\IH I-_%-7[&8f jS|Q khqviY)>g ^%ꢞbs{,})G2 Jq8zc2 /BlG&NGi*V2aB"aް1T &rke2{7qw6njNqbpg7)6L{ݻyg"FL$x6K:#|Ϋ\ δn00D ~Dr xr+3>)#_{^ S*?w.w_H4e$/ "ΈjbeMs2;fNӑЂ+ki ZSxuUz3E\zlCT́(VMGoX]J c5jҜ:JaZ '_W!7j)S d׊ jq4$$0bzDCԻaz+Լ.6_"x % S>gMwCh~*z)O8!\>+!Ԑe4\hdQZ(9YfwWkO!V(ܟ?,ES+V'\onݽu ~ȅbxdV!ZͅZsO(.aպ-]_P~`ž# JItbEb1;3tUD>na@|ǣNjd>>g"2ʶe?^;4π7DXZNU4Wbbp߶j*^@= Δg6 :)pj˿ CČaXɂ6ܻ;`y-%'!)pMIDٮv-h;OhoL8:+N5Qtti/!]Tgԓ_64,b2Rp278I  l_QdnDmwS,3W,˿Hk)bUp[?úT6<p0e7T?VdknK%ꭤmu0e Tm6nLm\j{9b7QURY愒 -Wub}(NzҚ<&klr~&kh3WT $k8$́b10tGpgaЬZœQ̳P3d wW eD\<ڹFUk]nE2?gGHe=NCTn7v㵵_=1/LX%6@H9d)QkGDF.;%iNoۡ(i !1$4&aX%@ls<-0O ̧ -qS?9*T>cݐ5+ɁI4 ܄'}lZx}_4.F0t9ɒUfs +RX1eW,8,AE+(;MA]f ڹFTUco'I s Y66kruy0 YƕE1:wv4 ATyG,a3)MN)kI*zہ?Gga/fQ0,jGӎA p1KYrB;919P&OGv@^4,8Xx_\${ݣ06C/X~0h{Q?_ ^ݸfXTDkΪMtn﮹y0sʊJU]`" ŝNiFQ% ^iHd*GŚ .\|@=L{ lg5UAMZ`tI 5?tbɯ#v\m'թ&RI[t(q{2 yHKPktҦ@c|=BX:eR͖\3=_E* op0bfvbM1"‰,zٮH%w6 v㙷Ҡ_+\hݨ@6b< '}*_tv4" 6zgn0 ES⽵5}pWگ4zª;a+{Fňx>MQi.{٪{^nGv_OklIi0@Dm~=dt,TTpik=y=}|Es3Yvv1YHB+CEgUy}ԩ8$[݃sTQ]c]o1(8@yo-RiBv*ٷdDiHJ V ҝF#OQ?)gk#Ъ2 d(X0b[fx8&cPʬIS'uVsAflw o1ym?8@.Ut%t>.^l3-0!N=D}qgNG_FmEnS2@Іvͱ&d_*%3T,]ɸD YN z*7i{/, &ooD2L- IRpWf@͒N5n(G r*"~us2hUJWmk2(UfV3 .s o&5s7@j/0lL-&߀ Q2s_F9yE78ԇ(CPXokcaLŲ%jٜ[ (x$$kQE[Li>[=~zrC%=%,t,JD"ndHuge&VO q%1aHb4|u_[\bxX8ҼpNvN\\Knd5zvŸ88LZe;1Y!k^xRY k\^:or Bk\!M5 b]%D4~;9|thrfq0_阫0$2cs[XPOAwk&0+1c8N!JJ 6/6f&05P(UA (pLVV)KӖ]|V_so,\@@[u'd[',4`)Q5s4$iJKu$BC0r׬iz~+;h´ZXK}qeF[eLnFĔ-MEU5Gh \/t~c!l#Z%1/V.(o\gbGK#3tq4t4%{uCO}{K&`5#j C-EW5"wʛKN)PaNEcsIBWXT 9q \QKDN;euThÚ5 GL,&H9g_@6ؙg){Z\4,M=Ru9zKҗEb^0cDZ+6&us_^5j~71Қs$T=R7z DKb_<@تOm?g/E~~a5ޥzurU"1;r<{'桍\Ƈ^_9.`3f.V?>ǧ2e:N6H[ nԞ~7e΂g.4Htц* *ͪv)GYc-v&I9r0jg='m-CƫoK՜Wt\wܢe{fa;ك*v5%^;G ܒ81lR+~Vӟ^utͼi|J?:C<"0QѺz/ &H+wtWӪ5k`opU Dpx=P픤H8%6k4 dcuCmǛvCP)OSwjj/hD@`W?sopϕ _s2ܞsk^ƻ֒CǮ 2Cd~ \}B&j)Jyc3FC %ԏk۟M'r! W@ݦ *Ypt@S߱*+;Yy鬳h_yٔsLLc-2 kOA'r6@Q{L)4`;rfcC2~+eQ% mZud #++nL{ *B: 1D(&蛐@ՔP=Z|]hWI jWy2QdtR^I)wxӽ"D ir"# ݴG4ai6 iqf &?;cCv>z'Y`lK^kGhW_MYk jNV_:6=* G9e(8 {Lv;O8/+bG^J6jF|qM'&fh6!5h?"Ih $WuoԻh>oaƛ5Ҧ65)W>U%_¤hf ^߫1jY5*O[^wԲ9TsգgX!G:/Ic SR&lSqH?§}ɓ|\H_<ib^(MuRn8f@P#UC:YIQG5炦 y Fplk w5UJ-!Wt{$&3&]_q`6ߑ%"G0f3}֩Vsv*G7̤*?Σ7^ew{[qN<l/К6Iy]0#`(<#^[^7YԮb2kHV;o4QR@|@L_hoWGwL Z2{Z_4]J(MY:vt-(A:Y_p lRce"O._Ip/g_;x+)N#ϧ]-ifpL֯c[wgRݑ\cc"f`fԾm|Sbi !HhЬ]Y^oZHt6iQNf#__4$BIn}H XSc&ǰ@'8k];>ՉqPݷf)~a^s2M!Vˆ\`tENQ|-Wqa82s՗b;1<z27J$ aѬ+̄rb4 jv~zHَezE{H>`Ptə*ݔ2 r<᷵ sÍ-ҭ`Uo;\3B; _Ӯ&{bۭ5jcFV;-+T*SZ*P ,z ; ,VTz',t)h;o2On'E}"5ҪRUky߬I|_ 2'ݗ>kp&c ~9.X 90v #vT"UL0KU.qKX4џ]ݕagLy%jdfQ"-Wvũɱv?7{ @4|VuԿI/Vs͠%؎JfZ15^& -yqWʪ>/D5ω[߀KMʟٸfHwYs5©e @&ȧ߃*ـ!VgoFg:RkEJ2`X%a䶴OsP YB+]2\F۷QEbEK=\+ n8e@*aDt[:Ң=ih5O}"Γ]k"S_s3 ݿ-T9)|Ua|K1sP[w0O$kg3#oSvVG_'f.P"hX]gݐUt{%o iG S KL%gmtGa8pOHln$^nz1aw#[7 "u6V޾ί632O_q[S\yVFe!3v\UG@Ds6xٯ(u@\xUcFwXZasl50eu5L,U<,9#mx#dn;"I] u ^_+*z/$J^w>ѳn0+ԻgTfZ&f ,?/n tESc˚^L W(XV'ܐVJ1Oֹ,&fM6iᱨ-}$Zɼu3-c/7iM *"q,$UO$ΨѶ-),æs8鹼(D"΢E/wrY]T7ui |oZ KbLpX D\y@֘̃fɜv9B L}b/k;qAhNV3Y󉕐V|벙儱-s=r⫢V:LOcXrs+pȃ93q.[M.ZnG{(@*E Qfk}] { Wk%Kl]Q/OI9 z `hg#Bvo`X=Q _aLu_'^p&fd~A݄Îg:;ᩆ* h幺ɀOjNCxPdƁ"KO{Ӯo 7MW FU޻O7p ٰ 0 Rlj\Abޓyf:kRC!nfF< ZtV "{G/kU x 89j6U1GD#pFRp9\GCV? 8xxgaEѨ]},9 -V6;O.RŊ{LORRKa /6Sa T q_|9O%[=r@Y38#b@u,tABW$)+i۽u;[맀x2]{3?|"]$׏)P.Q x`0>G18ґ^w+UeN2m{(D@YơQE^]qF)mM#I {(:EϤI/G#cNlÜN'F^yhܡȲ4/<|T+P[4\B#]^ЩD$ ɺYp8p5 K.VCJ[cud4dcq7Ao|u N MP? i?z_Sڮ~T!Pm vgdZo>٤Zrcsd(}`h8 #w~1GwD0z(ndgٖ6;KC]yƳCS$u3+J!,k-[M lɔQ=-vg K;H,ϒ}+WF#]Ooml7 "'pэŊִ?Y^~_F'2~25fBH1_beԛ/ƽui-_- DkG vZ}c}r?sQ'7'k:<~܂h^g36/>׷~RuZrd=hdw>wD} _yim) tO2!P|^c-)G>t$P-k< 8l!xTudHSC8.gj` W`^ 8\(c>A$zm?;3Y @%ԋL_d[U XA= G#Ѭv0( 㓌9eSH,E(~ B B(&FC@Cά=m̮( Q6֊ ؑmlg0FtUZՇ̄cD- +02S/"+hZRZpF\:zS\%>o~1[ pRuǻ:dR9n>yH֓.]@: @&+zr~U6yvdO,yYgc[q0hͧ-(X$:ZXHѝyór3Fy}׼'J"m$N@x.x **T[1 }WD6.=|M5Ks4=Uh$g e& 9$ "ߘjXYS-IJ^nǶGs/Nc\-OHDWBY=B"w͕ W؏gre(q!t4GRH ky׃m0SbOHv&W: RHOL(b38z2&֝\^'W8xxyU陠g[0xh;@Oj$}ٿԖo~z&OlO}0^anf'̓.)dk-#0cnF!˶ǂ ܩ81OZ}H89jwĐkٽ-"t=k|u؅`Uާ{i2Ay+|kH 9xi<1YYC?fP8ï2 dt>5:m1x43Ik[}J"J|#YnU48 vպH4V]M,Wg}~E{&,%%Ym !1V2u)R̓ zkbF;uP0Lyc@]Vޯew 3jv賵uF)ɛ\KSl9g .몗'xz)wɄX[ :)QYZ-"'3/cUFDGa>ᙍZ y/ix;zb!>`|xRt wNLtzYϦt7'$f.UxOMRC`3Խrp_ܐ i{kՌgJ1?V zV83YpiHja )v)R# ^lG1VDb0+T=l^$c;ԁԦ8Q~=nDa](:žUe㯽qxuɒ|5);Пm Rm>bƘ%j_ɋ$W jIS/|"A^Yr1 w=+7 8<ռݛ-tlSFTEGx^[ z*NA4Pӌ7v~4pĚ[7%&. 7JƱs 6\% -u>Hwu;a%`,/ޯ>TDŽ\^2r9` h5h8H\P31|逜d@ GV> Jfg0 C -)w㣱O;xjQ#ȒAP~@͝7F؛H%U()&P[!R;{7@jX["uJ՛'zAcf\ |}/.jM P4py (%>i"UH~㗵 Y1׻5g | Du 9 zmu^cI}M B& =@xv4,ݼ!>0.|:S4{@`t±۪Ys3`||x,]a2s WPCT*X,q>@#^F-xlL+W{hգ%:u3ϗ_蝰Mgn- VNBK `D6U JP26[xYCCjroKLV{`B\Bº9=]QP iTѴ#2ZiHe|~#0SO!k c9dY/rO\΋8W uazRGD͆6Szys1YBUz"TҝhyD\*!w\ɓ뎸pkHF(sR«!h)DD)wzAua1v;NUP PύDc*)urF$I:I`Zx1dV~P•SUogxFm&˟dR"‰NǹEP-TC PZ]2oĚ~||#q!S߶=tf $_#*7~s:_#-^PlFT^}EaK;4Dm/&&,NuKFo^.ܕjk.(eL,Z=q;ė$hK&ɣC.a -y4eST H&i'{6Ka;;r)#/ҊŒ"“haɩ~1/Rj.7[kutiTqO?3 N?3 y)K 9St+"pWtOFZ؏ W6~R?UJxk-$[yvysN@O) XlM/8ŬvѥvXPAWQ2 m$/@Ӛsjh&TSHtߚWv|'3IRۚ)7&۷^"6[6jV8L"8ģ]x5K6 1yhe: $v2$DhxWk8.Hdl=}9xH-ܓ}K8Lm¡ c+zLa %q;KǛi:Nr9zѝx(FjoA+18U);].ix >?T{SQ ?_W4tx׿cW>@H\Atј4l l8'_hET7E<] 9yc_j  \}۠v~8==k.GaA 97ؒ.OƱT1h-}FIøfmTz*u̞ 1Y7;'X%8b:srY=!2lٟg8q!5}E/hրC,ۤ/-?p]#mݖ7Ă17n7v~>;&Y>Mm5qUs֟c Ӛm,lhm}2v&,A,)KDMHg *=E8gb=ܺ9۪U O[s &6Abm5q #C-Xne;# 4:Al4G0QnԂ+d ~5\= ͏EwAOat(|_?322ܛ{⭖tG( ?lVO5)cvc$4(L.+W[)Q>9!LɖgrͮR5 {DP!0u>G zO¥-~-3B S`y$1'P[AYCܷHFa]*90 ,f_o*=վ4N1?[)am3{KԆQ3q70n2`7U[6Kk\.HB콀\\@@%|J5UFvEޫor~DA}Cy9*,).XӦbVp$ YAMg4=:hðg+MtG~ .kŷeT7RӀ>w+9{jv_])r wZb* Bϛb~Đko` Ÿ .e;& ,1[?6ߎ%"L?v$rĂ*=N2FYj~۵BH'IVZﷰ6m._ufY6saxUԟ8D+ۧP(t*|LcoDZbip>e(&^VT-t;5v^Ľ{iB*4wS$4۳jJ!(BN7d2xc'tW-|dMrՠFj}.8j>uomcBaM뮍pu7ϕ\CVrm試DJmi~4zۉ2[(qaTq}ϚS>@->ĥ)FR"bU,R&# xkRΗt{ -vq/ND!qy^!;-l@!B"g$ddȣ҉Z;Ie^QfATyg2he Ic,a>-f 7ҽA7lJdDQq uVz(e˱ae3lGЌQ'I8bx Kh!.7`cVU0; J$omxqLCЙԗXOousǿPrS+R[y{Йs hbv$`¼3JcSCŅss!9['h[U5T"IMHm7XuF9(LjPm1&tibW}7|stw'|zcA#4drhx0Q]; IQbl|%Y^u~ۗe3{ k"ru'0N&φn ^k%0 EGUGYkMlZ}@* [;_??s[SZQs3dO4q&t]ڍ:WIz6 !h!QFM–]b+Gz` KNj14s8PݚN;Hl:\#MlK{dĭU2/ov۝li}Wv\ %SD8Hq% \&HToh :lla[>jSTTuCz} b".@]W.%츆 %B(!QQ_&4pW0-AdXce1M1д&XQ WSDՐ.#U !L?dLl⡶ovqR;5j@e/H~_#u%'"_DAD ES_ VZax#?S ǝ[ 8.X V`DmEz߶VfFH%XfSB&̈́Nz;Ə{|ʎyvcPm%k!mѡｖ?˜ ,bKQi)bE NW3s`G ijOT~-\: ꢀ%2$d>80 nǿlGp\+m}tS:duNtwn4他iWy0s˾hAڑk+h:in6`͗!VL@fzt>qJFg6}s @J;Mٰv O|}#W4$h'd{|279jO5FJ5}9zCNFGC*3R|ZO5:%6<X0$yBjCbra^4]AU-)[GC T"*݆ &ū̄e[5*W. 9#TѨ߸TGf'P*Aǫ෸b6k諨=;hlвYT#ehǿ27 rSR3a(Qv6$WFJb <$=匳y׉0'_& {fSR-H+:CL#8K!U9u֊g01UH49 Oί۹s+v dpm#ӕK`(R4]Az!P1W> #M I׋_RhZ9$ b3O啟|hm^֜IX{Z]!VR|!ikPSH{~L:BcPGqFi_\z4{Ae=/mxKq B+B@տ_U*7a:>JEO"7\ژfF&0RĤ.JnO*ftRL# Ѿ  @΍s5I Wg-(ux8ˌ))SKf_NtFU3{9,Wu|cD-X֟9Xm?b 6_-@|ͩwL^an\׾iP:'uLE֭R{gÐ-iYmv)3k@u~aq|_r=Д+,;}w;;0]AE}2z3Z?/*:.Jz{ V~%IW3FgUPToL27%Vx?b|?0 ʹMͫt G0ӳWS - CNt"+[Ĕ/`nǔƠ?TҰpuC#{#TK|'aΟC3T;_gMiAZtvtL;L-lwwԫ"2'k#4j¬ TTAnlwƙVxVIrw 9[{SA%F][FiH*Mmwplʧ˭uzҘ_:l^'fDI @NaPA-dN_ٯ1?IX.s9x+ijcL|=?ȝ2(dnħ lNZ UQoe D*1 ȪZ&TQN |ȞC\I[۵DQ}W+ҙ_N+tl|CKiߍ~*7 l-#{>A("HL u8+?{hQ1 8Ԟ!袐LJVbU[n%o0 /p+9 q(%׼ybȵyul glɞY$h Y*7뇂r< cS L@etc[9ܨ Z:R8Wy"'Qgt}.svTiI[XoqoP?SJ91e-zBrPC>P i[ pfr'3!|=;{/bG=iN(k1l#P _xVpȩn"^q0GLͳP{fV\G{0&MO.6/h+jhMM̝ sSKwjэm!0 x]O +"$7<~[4.{8tIl'%`*v4,8'2Fޣ:-9ˆ ]h)݀aR%Td%t#[sP%wtFO ,`rL ԉby6w_o;i 'TP,1.AO+AGz6n큒pMotvO(exbw^/)_=b 85 6I2(lԏY;"S' 1 BŎ\衤5Gh3u +~6[]2~nh GػKCQ8} g]Rb!@VI{ !Z3賥:JLͭ7O[XME2Fm֍;<R-:0x;Bq&~2.^vx~]M'+Ef|0|'ɚD}llAV9J1 *<̟W( { w "pY1=ѶVV1f5V$*ȥfQDvn-K5'/|v.$z%pFFP1' ZEn퉭HKy׍=ŮviE"!{ޥ k>YW$ŷ:E9`'yY*pT4Xxzq@E  LOxeLGJd%\hW0;̼ʗ5 O[uJ"Kp@"m*~GD+e4ݢ}QWKTIc^CA)@n<[VKJzz *( z(,φ:KO," 48hzByo{0W3|C[loA@|IOISok;&g )fUi?ukwo<. 7aթSuOmx@9 h <.a(7fK06Tv "\bQ(:AE^eʁ1jz1p !|} H:f!y44&O$1<{\Q[[Xy J]O˞0b-ڋ &m%J) "5|zc([z`2)"|k֌WijDPT$' SFsW5&nga;Q9HeAH=e+{ h7g#5)IU*\#`NkQ&\xR w%P)=-}5&P0a۳`u^' ѳN!I*Ϝw۲wpRхV7Ṙ y_HCT3|4ώ$x"wY#ͬgvVW rz-qNK - #8^Yrg ]_…㗢c[GGr\$<(IZ rI]#r,Ū<, di0V#G簐_0t}aʑfUݞjN^'TL_C)#>\~{ʜؓ,:7NtMcvޥ3Frs#pbzo|F|Dkq5"HjbNeo(= ,ǐ>@4A5,-ڂڀPWX)s#^2sS :D(>$yAP.֦f7;bCҷ@!=$?0o 0ۯ#ՅS(#ׯgn;lII̓M>m j~2$р]bqd^y,iVnQf7:3ۍ 78y\}B~ՉXYcAJЫ,,99>D fgrts~>h[+sW! -6wь$ C*uDWfq=rWnae<ϐ7'x`?d_uM8HkۘΣ 3t.mQ̲?d6r!$[%ot)|͘:9ns"ɊwXjZZqJs0PLqOjjblQY|oW|`a+{@*4#P< ϑ%2u'q\^`F-fBxxCn+%Ȗkf/I)ƌQ{G?P, *xo|vTIs'12;$ ԚGB>z&Wot9 y\ ,ZI\!FVe ulQ(稃(o Gp˾v)r00"6QzV79U^q|-4J_a)7R -Hu:S S#8e6afe-:̢%aIUΒPKVԱc&ui8 le05.yfZ1'1ZRTA2|M7;k QR4. p1)2ŨVc7q*pf.1M~e=Y)P͈WDQZaHR/1Pyrc0ZmG+44MmK+ςCgm8\F0":4} J%gQeA)Ioe @k 2lZfl~%;g4;, 9h މ%DTD)\tڂn{-W3 ]M3̲oW 92Lfq$yݔ12dEa!1-TO0."b0=SS-OXEy)C ql v6-N+aoT` P"ԙyX7cw+{d`p4=bsdx2$Z} ڥeDZemcO/:d"tt>U ia ufWM!n]@]u'U7/'w ~DR_e=+-ܢ?{ ZUq.Jk5#>XƅH8$IwK0iaojڜa|TdVH7]z72ɶEmF_aA!4 N!oEl̳U<`9Q9XMqqܙ$ƮGL)kLV j qh9%|h+yigcuORKnսZ /,->DYe)뤀}?H2QPzK*yv/=3R:9L_!}+qw^9"h-Lz 9b?[g)?v9Ygm*8RmmǗ1$⚵ Hno(߄wgeM 9 q/8PLݔZyVf.+#noG+_r1?G"W2:6%OhObkU|#,=NYаsMꟗр+0LjR MW0\mL/ \|GƦ[؛Av >yD2de"AAJ9<`s4[ԅ"qIûFu+xsTZdk+qqNi:wp{b9{Y4B@83E|׺j8ק^X!/LpDL[AS)KBuן[HGrLǝV$"۴1x@4Z[w8K) ܾ?Zvk mJ9Jd69LzFOǭ!9˾`x1tr$D6P00WɄ^ؖ+bgu^12=y# ;"HoIcشs&5CYPKj&h煾]LzJHPnS),Ƕ4[(}rf2#oR&r!U*$Jnek&;"( ,T,k(]mpo $*?Yy"XH: uWshG/.t@8sl_8ްRkȆ2pBTpwK1rΐ{^;k% yڒcD#):я`+~Fl 03tN2 ^sKd:zc+7!ahįBqo@>0#?i' r"ݡ̥`])Hi0YS2ko˵f1U Fu^-[c.vV@h)#LƐqkζ8C \2Fmﱵ,3]ɰs~L,u ecN~.s)K %v[,rLpɪ7G )v,Ά*rÉpR֊z 'Lh6 S?+V/'7t[^ys6 ) 07V`CއcL/1hSo{ }sF㉒-VBo5y9\IiUoEA䕍a'yIr=eiͷ: 1sk=d}IשMHwCQv]wCoه|&=| y)ZqmVT חF/cE(,fb} LD~vش7xYּGl a)'2 EpĬI@ Љ#@VA'_ TrPZ4s#7t{D" _ql3Lh^ŇS*\Б'oW}_)z$ڣRCC[Dnp|{}cbam!z78T}>AcQ*5bnňI!N]Newk g3Jd S/U)c:7+>*v' V#HLiANagNw%|RXW*WȸT՝q`1 &HH~ضݚ!\, 2|,wcwPFhN} N<`h/B&CT& u=P]|6Yv +SV?:cB[]"RwPK˧Y| 8P@NDI͘QEɳ¢a,3jrƿ4\X߽ PGG\eAOnKS%ف(?I8@r ̔.[_PK ?/}g"{\JP̗*eLU{{-_ȱ"_d,::t0h9 X T Y˃UD*([H S'\JK_]err0'D[L %urXbء#٨jgm9n*+[Yn='RQ$W ZxB34$TOLm`mLC:I[[ɊWǁ#rC(5 kA.km-=s98|ؐ߳8Ҧ\wl4:<>XDvW{)w<GSn'ImBFdv\\}z@)eOcZ6z  {8S&*z>d}7/2?r漢/"{z!?\@`jbU5)M3סּ(ݨx"#P/V _//rгf-p!$v M^}>aޗ2u=[.0˲rk^ IAp4^yTJlDS卦/|ǫ2QHeRHq+w{B iVBˍ[q@wj(6 FU?j̱f<tpBԗ ޗPR U D17=[%Y#^%ZKEGL61VxS:nv[5e %H&8*3.hK{:Ԏ:T}!bM>H9EkzLΎ 4Ql,A_[pN?N&}Yr:_b2 >j"5.&>{%}7PC2V<@F[!]h@-bK|d.{0[PVIx 9I>~~^~"^#f\`*?Կ-}{MX"y! u R)L!>ݵ!˾jf:gs-o>?|Odя,m&s($S|OFan>N.i3,:fpXGg>gZ(0a_ ,mdʯ:*'14JWž!PwcJ}1JN+Wge Bض5 h'9ئ I) zQMD#:*0^5= ip4RMZZ mkAi4B,{Gy-b';~+^>nG4 ځue &!ꕙv 6 O68[&i#ڮ3^VKod#9E XWpEןpn@}TVtdJpـ,hz%}v+{.S5-Wu>8ۚ:eXWk.ay7SIUJ%]l` 4L-2\ؐ=oaJrϼ~'U_݂a G6qK+4:vC#j4Oh#<,dnI .2lLHnߡC!џe(nKSk^萅mturuY䏰o҇AJ PG=zk><*Gna. S*xg7~Jƥ 3&@7.UܜT~c CڨggCrBU*^q~5cɄw轾[(ăo9fN6%mgc:m~  "k+2 Xˑ,_*gtMa?mzߌN͕#|d[pEȌA j ,r)܉nA &+%SЈljW|R:\&\N +ƴ Im|3ON\3bWݸ1Ap-kZ8=Qm-^ԵMٌkfWCiP}U<'>t67{I[~_kKN1D0p :OF,wj3|Ia䙛zJ'ٟ3)x`Mg|(\^rVyՋ0Mçcp8E脅2ӭ|f9K=ٛh1fdXJC죻}r1 zbۿ?yo YQ td_EKsgHpҌQ+5ƑG5 ^RWm!ҖBPU}"f"Pͪ A?91èv1`FSqCԯ\3c^*B-qi5>;[J`c"͛pG4{‰ e*g]XH<csK)#_RkQaiCY_ 0; wB ݃*&@mFXE̋X.zKl|_9.م6>K\K=Lߘ)K}ŝ;WFÒ^b$ȮbNp6GX(>93_Lo߸#gdd?\ ]JW38_%?lBfROHΎVQԉ) ~?9.U=5zjmQJD [D\(T:̌ڡI[;ae4TY9<9 \ýF$|\alջ>aq*PfhJHfZiYwlUQбt1Xm(Mh2!d60eUp@mC/uhMYyo PE$RYm1{|l5)|7L&BKя"fH__Y!HBjKE6Xr!8̮=? Rtiz|.!$^fp '=#AQ-?DSTQ+ⵕ#P`K̅z~*aLhwW~`Ʌ4f~Biw&h_ `2Tn٣NgQ7= #7"uWD:h4z1[rP-(Cmm?bUe~TKye&gn͍z8$58݇ڻ/=v`n׋)#wFs`|?%pt D.O:JfR/ly&d.6fEa(0c~M<û ɯF4n;;g߂&Cka$~i[6z{\:jGM/6^KSf =S衩LBxP KӁXiVyR$ebN،b0  ܞF[v׳ h#9n H=7s+/4cQRj)BȮ ˀ[L])=4t`QڲEi:ӌ[<&(YHo ;N ȃ'$bUmҳM#ve})E>'dDۍŸY_dSr̄6[jY_fs%kZ#Bsy2%UͤQ1ݘ ʡ1?/c?xʫk7.SxX~cy;|b='nrOU^ӗ_A8Kֈ;HbBObe)՜@j'5]VZna5ԺBiUrCW&]cط d })PmPPw"$Z"5ei; ס<`iZ|9ŏ@0o!B'x΍<}PӚ3}=$<t§2]a R2(e Qs)&!B9}HCA NyQ>lj?!ZαHQw &)5 [S^@W8-o`07Y{ّHeڭsɠ"sĖ}̰@mˈ#Éﲗx S5O!;LX 1w51/愐k)2V4~6`,VzT.8R:- s@&V#F>QBa?_o7JM2/|<+ 6dZca.  0%n]4mWotQQ Xt  Rz0~<ǝ^RYʔCC@^tZB~#r.a# 6; LW9 Tw{3Bb2d,6GT(Uɝ)5,JK}7lGa}xpN$ru9il6(vЯ_O{Ъxp*%=F^Vty`JN-0PK Ax i IWަ"vC-I3ֆ}|<\es_7Dt"cWO5__m2R pptݿWaHbkl{IN"g,r}gTzTг F_I9EEŠǧt/GDds3hmژ,Ɂ-1 W"K41*R0'9ʳ˭6DZ W#G#Gsʾ>bsOYdlYd1訩'# ~o[7+vNrĻCW) j",sj)K,kqEN?2OuW0S+.%Tk upQ ԯ F@+G>LH9l,N82*rĶ1qN29Y|V[ T\Y Rܿ]7eA>Ss;qܾa*E" }@*X\Bjq;)1Fc(>u-'{YFв{I( , ^Xo1 g[/ npp"o#G(#ӢT-Xq0}ߕ Iih8mf&%=D?y[JT'XR X;IS fuXT~F!>>~-[&krI,҇KE-+ē6ZngQX\?op}sn-lNowc$nb=P0*~>'he*~8(&b.%-L*2=o*LQ)<`/ҕ8>@x[}F! Z8ZzQR4P2K܌GВhRּ?bڙDy F5 ϹVɽ3H">5馉~b]+ p_sE?\M ʡ4PN& 5d,!Ƥ/ɰVQC1w4ywȺ)eϑiFw8'Ϫil虳,~.-V;fu5]H4ykO5j3nI `b(W+Z""EjW._gؼ9"E: n7iX;g '=JQ|pt4k`c&mawRUt>8zᢷKi.XZ ܈ -,E}E]hp5!_dxAqêWp;)yA8;2Yڱ߷tW9D>,HkvH4Լ GGK_q=˟޵#T]txzM'oPgEҢ7ۿbP;su2f^C(%",Y}G~C!O\)((Ex w/Eaufl2 'J'i։+wHS:CW_{ؾaױ4a]x?fn,5hԐZVvmkHX@&+R\ BgԿp~@X9S>X:iќ/E  Ѹe)|7rsyyV#v+ymw%GmS SARҍHw';ӼK.Ue=K) VT-:* uq(r AWu $إ$ ۅ&j2Ywӌfp&ֿ5ՈgQ]zxM WK7j #:9} N*7 O3ڡ6`x4r4œB50\ʙŅgOssYɪq.FYz X#3i]l*F!fx 0hT ̞#+}l[O7+ds>ZN4js;r"8i ͖uLk02Q{+rIVNI=ѱ^yT:y(깡;bTaĞE1f/^[A[L!P2ij,`)! a2HIw&`!XɕڳZng ~>_Zכ֮*a!QOcQYMv258t` @VPPp_XhҹBlcH0ȲMp`r"R*W:DEͿxy)|I?T*WӦItU*~|;AP>`IaD:i&`4|\X5崣?2$5ҋg݈,m &mWJF~D\/BS)r@z'@\>ȌT}u"vaV? AM1`6=uA]VHn;#S G.F}ϘC|2_%D¥LK6ʔU "|@UMy#$O~]K:6xiz`8'8/,ķgV0Xy'A6R ]/?[C5q;˾"!Xs2-[v |Qccn)";9CR! QecV'7>X*D,v>a6>(+> Lh!xo!+^JH@,# m?xXRB)Δb$>)ܐQp2uhOB.l|>:'{mH!;ieŋ87r#wagCYb1dd8liyԯsC(Q icF#&V\tG ERMDstB!^4f6/pV]=\w&^>7?7lz3]կcT8/ PoH-y-i!a!Lr<3r2XpvEx > WdR*߮YuǃEP(B=ű2gf8~t%|hn: m$i0a~]"5;zQ2pοћV@~)+!o׫/\;ؗKNظ%g-gT$)++}Yi1>4P\NE|@8\G"y+UoDH1;G 0yŅxP%ɵ/|%mF$^bRQE6<Qj3/+C9+$s5~0ğK-PReJ=v!jw)O P֌y$@*G sտ 0kwz 6?@S5y JL%FDk+E%1KYLyp#o4+x[DFd(w&V?P'>֜r 1@ PBHBDMbT<ؒ!ICf |v(ˍ:HX tk#e.P g1Oj8[ｸC#z jLG> <^˹8zS|pY;^ZYn ?+蕡u tƕħM4si#e|KfP / "v9`jCyXmw" ̱ 1]l7s UH# _29VQ~H [H0 Ճ)C#\-76Ve'Jk%. Bbo nAZS\pL`9#7 \$+Qigh3[[[IB+;2ڨXIĀϐ;^y~@NGoӪIXcMQ/NH#T8EyzӐ>O_+E^u;rcHXVhHT)I[իjv dTD 6:Qjp;jB^cڬ,SS"h-0^?yުSQH w|qXOz ̈#P!g<#3AI:"PQNڏC0ҔJgy4V^/Ӑ.>tFJ.kvex T5\gV `uRU>z朝ePYG{Tи>_^{qm{C^9eۈ^:jBzQp4 L)aJ|_um1 w%[58Zw&$5F_Sb~.ȎCspۖZ #"B:$ OI;#)0 i29WQ2`bJ;=R(ۆxM hbrrU"Ƴ^t*: %n1rBI[x>#^S[X a'^%eQJ%Vcf b87|n%$=VLFqʩ٪̧D Dj[N5#˻QyX)s#S> `>8tkڶyRwhc1lBN2{&Υ":sLxy6eWsFK͌ށo5tNSAFl~F>iA+de7@!8Ô#AZHfJƜBpɁmVFE Mӽg~L8S?< ~v'0.uqGBީjY8eNǧ0)qj=VXjx<T d:Q,Z~k'z߯H<->;+)zvgw *g8}-k"SYS#*g@5936ר1ShUT,p] U*'L,B^A^ĉŃ;К"Bu[c>-V}ў\Ere'+l+G|c Dٻ++CG5AH"D_{=["آSbQ 涺A]kvۀAQE$ϓN Y+ԩk=vwNb2g F |D+ b!(8[/8컈|PiUE[Yț_~"򖚥%6ߜ,rPBQ#Z:~>>R&-6ML4|ϨQ)wm+V. g16iɝ .IݡBc`vg'Q֜[$xIK,‰"0ȉR%`+ikIsǑCggo<<Es| ]z DagBbl^ X+)9廙{k@ǓR4äGS`o3a RS n^mv_̓``ϿFS|~J> WϢ$dbĵ4@\1G2jb?h#عuQg5sBw.[T:e+,sBW4x~fl<,E/ I1)#COSM>JzTnK3h/E.'60i G2Je`p!AuCub(Ƃ;3Eϩ] g&kcQ3=}J)~P:ԶВh'^(7nV1M(O5\=bݚ ٘i*S! y:)P{~A.|K1bw5 }%6vT7:|ҷ{*KjDIH>Rvsi{r$Q.usڑPzou0c{k. "oj"m w읃P!<;B~\Pѫ_ ^8/PME8/B_hZvOD̪ >@.MD-, s Ϗݙ(hoZMPD=z(UIdN~N]\=w?\ph,ٰ~NP7ˤm{E"TbQ2b/Ez51@|_4rЕK֜ʘ3sZ@#5Zj1k_n݀jXMvi~q4=~eDeH}%# 3iPt2AYy;I$;< bf.$E*3HzXG>K!b }IM h.$m"+ ’X=/$'evWC&=Zѳ[g&g8Lo2 eltД6k2?/KlF#U"qNؿ%eY }?5]`uz lB˪󣙑0թF! .+N?]3~ g, (UQ{~DۈC9Y-\V]5u1|^862L?@KMf;v(X&Q!N#Y4*MHTFO ʋc QL4|^=΄`;fPxEV7(kv*ie|x)6D|׬J1Wbj#5@ʫ&ڑ3=b.3K og-FOKnJ̒mY-fYA5S Gj_Ӫ"oP+ '%TGΑc ťc, QN( W],sIa.lMu\k 2Q{GFn%<"#'{ e UҖU&{)Qm&|7 {5OZ^}uy띫U鑭;7X\b/B'РB9ЌXhjZ$c 8]5Y F)^uR j]_JĮO55:\WJP[>Ŀ"zKI_h84m=tqObSӽ=X]^*?gol~d>aMʻ? SSEkx†WQoAÐf|^8yй{aaƷ4l-(iIl68ĺ_-;mv-:[S7\v 387DCQ㫪A#*+cjiewV= 9#tqA6J,sMeK0`zdL;/REh;2e@!-Hn8ޠ';I]k 9<2ʏݼ?o%FUdX#;&.õɐ GY/stkawq|#Ŗ{XY0z\'jMcث_%X}N ;u`JDxemlF_o [tɌdi,'6fVAU2~)W*n4T>Yqho<5W _*4C <[" #RfX{`ӒOIO/WꭳxMlPy|"Pe: )Pf{Bz^o2Vaz=C7"GMAGRэ9Ɛ.bn@#fgo;L% >ٽř C q~M.-LZ;Z_""jym>-]+WILnm!dKHn )T {^+v+.\ģ 1zF󌧂*L Ǚ4nW)my΋Ww=}@~C3ty$efb1?ޮMa_bHA;)aMꃨ'v"Dxrے-tP[m-jjbBqIZ~} L将BM **v9y {eUZ4ej"0-s^-+gPE+Bn, Q Af<n1"L6x>^59;f t uL[ sIF9w;R atZS;7/ŞcL]ll: ,?bz}.u}np{&̠`>e<5O5hRa6vjyeZI`_d)z)ӳ}6 2S ȉsJ@"%(ߝ&Vi_*m0ИM_E$BTPŸ~:b沥~MH5AL"i#}H\Ckim f3-)FIya[m?_XR4\_2R{w]OSǿӾt xLqRc~z7_m`uu@ ut*^JKoȍwoek{o1TGjpr f]<:{^kܓ}}hB5Ɠ8 +L7٦*q2^)nJ73KF8u곉RnbC5>^@k5v+`Pj6GI)=n)/y;h3/,$`|+NvTo}eX1$r$(V};L;n;"Hq8Me8F 矱{„LAXƨ]!J]4np]ø/bB.phJy筱C]F!qBɝxms'`S4q:,$mvENܼ%/H(?Ir(s ;92A^c NtnmvSHrpzO'|~ J3YǶzWuk|qϿβ18H.I½ A p.B{oNm),zc2x! }~nJtjlynFÚ%Ĭ+p׻Xo"aXm]鬳QzC +BNñJk.v ive[S<_SyWi;4 btNyX+(>x28*1X϶!4 oz6)|Q{f(X?[0)Ȯ^,ۼH̉8pYtkX =Rc8L鳍Fj_)Ȣ^Soo \2H-7kH3/։IJALV]ם+JcOB \]hU®l>iVWTOBj !1y9ҜVL^l7jcRY{K~Q|*1k8E:|syC)7/r9#uop5tԎܑ-..&tm6$X"OhH @hLyXB?>3SKgk_t&]wT9D-Gv͓ԡg|k̏B/„Ӹ*aDrꑅ!:=YdYM4PfxNjp>kȍSٳD?^)QTK. ~^!V'~{d9FA3'Zo:,Buu.8yEk{'?Z0Nl2H.kEV]rIKAc&yOr8@yr33̔/c#5/x6lm@F=wnI\f`/Rq5_F %<%==1 ˟Q*7`7l-gGN]sST['+h t N2F:F&3rPG A4z=F)> ՛#AP6Uf\n'OaM\|mDG*TcFOn`3*zoӧD)donh! 6Й'/D.BNf☳hŜh Ţ_kMN{o"3o<+qOPg/r&X]J5BbɵTImHF́{#DR[Vq GJJLR""P|n`Q1 YHդ)# fs4Pq<~3B_p빹?3^ *zy0thxt3/\x\w{C@ T| jV)#E=͠()ma): ?Vsce7~ i,"c0kpteEnM5vG#nyB<5 JUAL L>^+b}0jϐ ɊObvtԓz]3[hK$̀`ksxQX9qpKRq&EA-˕ʝ8ƶ ,4zJJ1ܱ/Sg/lCa(76 j_SL Pγ73?pI󰤺LZdԼ3l[@e&= {8G])tr>_uv -U1=72e %#xzW{Bd-ⱝnMJ{>}d4G8JKދ;ГaX[PcPu`ం|ܮX[ؚUVP㧅@<A2/RN9fQPQr'~%:7h+SƤ/ U3 gQZd65c%9_}'7GL)OԚbPށ?MLT!-a_ՋoƿαeֵJqj$a.N,KZ\a&T ʈh:S$έu.)pny.TﲮO5~U|:5h +Qq׬mKefkyiԍ5_.vOq,)k[PlZybO=VN;Ju )rM#6fFPLdniSQA (/a݋}E.ݣ8z!ŰIkY_zhd#5Foˁ /(E67hwoT.Mlo|`HQnp8YYވVr‚ťaˡ2yr^0Pz"nyHj囻1#m @Dcٯ3GE |ʈR@ӏ2E^`g6V;3-}y+3fdvl&<^vMYz==+ToP^جS ˗9;^gšAϺ-xn 9Pd\8m1u j_\QC9Y1 1P+'yyc8"H,R; 3+7pjh+@YqJD 4`N\DIb%RBfA1q.}ɴ~ r&ߔܶΆÉ} ^GkQqۉuWн4h 8=VgV^S&ʃ|h4qYY#X5wYmşv xO 2Wdd׻L̂ v\G+->"yf%INtCU2 Mev*QT8;u g>~1 YČ>ý5cEHƸTrNwKHk>6R@IYf {TۨtHO2]<$70"787 TF0}>d:z!n|Lo1ń4S`2r/uc'fj>뒢cҿի~HN+]r/Žݖ }TPų 㘩8 _v:au?iI:+ s}"u'AG8%:F1+9D&.QE-4 8%zydiX9<R%'AU.:m4B=rsa!{6)s9PU66I>}TGH~4m&,~sĂ-7joʹ)Dt7qëdOjLc$Ǯ]a<30/ÌhB 6{CikFgwK{Aϼt@(ȭ.!C%1x;d' EXt gNŬH2\"kű.}|O*Dϕ]ēKR }c Y_Վp'p [?U Sγ伯f P~7HR+ad>ۈTN\ֲ9SڕS_sEWGzXupHGdLz߅=Aߝ,0iunM`0`yG򂝺a{d{[f>n4Z2-{ d{IFP֦GJ*;tJn~Bm=a %my*7t+M%M,RcXGB$~MGH6!j_fDXoHWzq,sVk4$~9$!GՂAΞ5]\x,|{)A'̫IZUp6!Uoд^khjZ\,! clٴ$($ږ8I@ow0~}9)[Uj c;n\qAVc\[O>5/Dr%Qm+Pɮpu~Ë%k$%iZ(n^tv9:ZNJٕMj{?Wo@nB,M^UU -{0~Z#@v\ԍG29'WC`ev?.NIzrmhMS> 7u\OOS!#)Nrߓ uO\x<{zZ: ,j"e!Eyl"}Pvl2PG!0HbgdQ\0km1b'u(gUffe!2m>HMt)Cē1!%A5fhGcœ CٶZĹYPOez5jC& X LoAn3@ȃ:/Řݿ"н@ɇu1|u/Y QA$-q^ȵ 䖻}Ky}WH1d.gߓXZ;2t3UD<Ӄ}@ok3"ǖA:N]CB^uiHP6=Mɲz)Q ߧ >TvOTE !N<9H$7+@Wt9`qIKp=yK;v4g|`9r;wwa@5$[.F:  \GEj;2.6Щ)V}fYس{+aЋfYYq4OJarqjGh}+t1M8gL-z@9ǪJM'O[cMO.}udzS\q&:kYƢ`7k8.yhku[uK??cv3͡IC ;?x<:=g fp?NWg?L Rd0;c<ʋ N!nMj); {Npti6DIH˱ ZSfeZDJ2Q O_'CLdt9`P`#"%/?]5˰OQԐ_}(B"4۷`?,ǾDd.}+qs;q!nbhnLirz0 Tf4% 3!ݟ{v-4נFȀjT""Ee;0ԢPtӁFYQl76W_NQR; p{ӇS7&]wK.K#'쎤]y8D<.A@Ag:EXjU#F6xp9D #s~ڞlḡ;pf.ڱ^թ;f^YX.ϙje!gX9u@$8= (OkgRj<_ݏ(؞k\HhgI䅷ET^^4Zeδh;k#:(1|  ~SJ6T.+3j}*U#! q/ɼG&δ|aAYFAXVZtox_!2(j8&JI#%da SVWS@G:ُkD%lT44{,3܍H6VжhKfL5A2?,oj_mnf֗L:FcjFkշxCH$nYnJ :kx` 4 @a>mGXy?aǔ@-h)'zCerUDLBgNО҄!$? ^gA[ 41^sw()/qCǩa/tfV @쉬x +iF%XpO ~(E ,}qz=I0>Y5RCE4bW98<^t(x_˝Y7FBcox BX$ |rB5ޱY$:\G*.DtP0G2-qZIJݓqɗ"i_ަNՑH yBa6JRO+tKe<&yxb.,7Ѯ8q=ݼ>]踐Aߍ۰7v5'=;5/ 3tl>q:M9> QKiE.CPlZtmݙ|y?эGp %@̚`}^y 7>.~! ?{X+᥵r,vv:`lgqd QxHb9}e{>>aa7|'qf6_ @ԧ| 0ba>31Fq,H&[u !!RUahg b+mk &H90ǿ}}jVYPB0hLmS2]^|]ޥ, ,"?MGOoR960PQJ"7 of弖,ﴰϜ r-lL(NPX[+; _Ny D0xL" a{s7g} ,Y 8={vneIuOq͢z/@1׌,X"8/;Rȓ{rזNl/[QaG%#q&$}LR^~sxe+ {`~ *^Nad=M>60#fή:9p>>(xAv\'˜F4KND2׃EȳB'Hi2b@|N\ K5@NSZMݼAWٳ|K€\ AAWV4:)JAM$[|S$ĻZO)  36 <% XySCH,%E!. 9EK#]3ָ>\:[@.IK²ys66xÙ*; \%xۭ5SK9e DI,ѷX0ZS&%mY|CpKV n.|dƭU^2$RjBS-6^0CӸJR_Q=kLoIA}u+W+ؗIKlI"wbPua.&俵"D'òi {5L)‰тW)n+RodVu. !~U 2AXgb3T CBZQT6 C=KkvJ,C&+1|PȰzA?? 8E񃩄πsۧ!lPجХ/ˮF?]*IDwnܠfpm6+vN+!{112V!$yuVq[$%u6_~hj%{92QJ dhb !"t@| _OX(smKE0\m~]~IK8X7[ء#'A9oKY:HdTVz`3 jbgK5%H虪AQj(#̱h,svB=6W2d xޑ1`#\ԧ *=pHUR4F6<)1Gb82"{u} 72]OwۅV0*6w3snrRT b 2Lm- !˟ա2vI8oˍCJ:ݐ7%I*.{kgjܰ)'ljD]M uy!;=uׂ>%?bR1QS,4YG-lfc:3ycojh GX[KnDt i06Lnj ΀s  60B,]vnYnT]#~AݲiEgv,HdqYbi(r<)FW@-rrbYJ皛EnLT!*ưM T+_}٢B&L&x?N7%5VƎAG$eՇ] \axCqژIӽ=5ŤXI16 w$S|p˹@QՁ$2[CŹT1$~i8>ʗ({/T .r>E"ςʾČoPbY`;Klu1[:λ܀! ]rvyaæ`xH|=q4Ƽ_WD1[.\HwU\3Z6i$:P0w Lȃ>>n&M>z{;y|D_ikfiw] [uQPbQCT))ƀw&LhG<9fJFz:-0CWl |q- r+("!^W(ZfL1;yɎ Fb$_NzQ i2\ޠE"&}{Č{IRI^Bu@ _=\2\Ȗx3Gހix7xq+ZnV+XoZII/i-R\-r1^gu+f"x&r*u;R1@2<)YqDa5M }H<`YU,}ecVXs-gUBj,{!([ZJf';~{jkNZVEJ_htҸp;^y@vuDR䣀p{g( RN8ˋQbCo(C4R; @?]uo4RԀ]Hs䜩j)Gm?v~e;nXwU6[g+r䮧}88tRl9Szzlrz6(glX@J?;qA_p.DRSߪ:wsC$1W?>xQV9뾟.NC8Qrs>xl7 `#ρ#3újaL4Q=Ck“Y$yMlh@vh?5 5 T!w)b4Op~+O(,Rav/Ş ,nQX!ºpN||YcL50c|\J-Ηn?nr-TnUm1 h YAO/_Ks" \:K);fR!R WUq0({`5KtlLpzM!6ހ=T>`Q8VPH,Q KA[iLh-8+XhD́ҟL5-R=D!_Ϩ2&$Iel]\ʗ؜n%czCMPIJO2RzH?r(?'TUL;˱c'_٫%p\Ӝǔ3)ž=32_MO?i\"!}YxfM~/II~)33b%߯FyK@)xfַ)N^BU>ĿNj(' e7zgl:t LNjaspfpY}QDLu hZXlWCEаЂ$+u"#[oQ?4-9AO8wDd8YYӋ lILNVY.3 EBmW>:)rV;ShDbUͳ&_ALQ|T#qa"Hdl-5֓)Txζ0o=pm(O/2=lgRۂIMVM5vmM;O+h=/ n1,zMjaQզ+F' ޔ, dmW '[-D x]v8$/+E!^ؖC-V93}WA>#uнS[z2X&i4mv&ܾ81zW^xvd͢HyÉ(iTZL'tS16PJCBJ|ĉ[OsqI=i[^;g&4:QuZHM;j$PC}1pO 2/,ui`Xqc ݴV+KyFNILT :l3RrL reZUJ+UN [Rm: Dp ~X,,wb>ǁdٖLf+\{Y~ˏ^t}+0!O`=>Gm2aݐzϴ`C0K=ĞB*'~ )tM^&+}aj<_YKq)d@yS_lta|CEd QC7s>Tʌ]fb{Ce3[jҞ`T6DD0oYj;~>8rʼHĈJ7m_08Hذ[fd '/"e::<0rwEDjNǣEpa~ձLmz JP,B!wN>pP!36F15EO)}YK KLWN͜ZCS_9Ŧ>8E3e0Mgȓ+EUI?MXoXOM& 3; 1B%!HL?G&J{U8(=OrCfGsJCE516mW+ƤI t )1rn7-M \!G2GouRaiaVv"Znؾ.sSo&{BU*ﭓIcP_Lu=Ӎ3Z='c6M\kˊ96#߾ qg8*ԓkm(~G ʋ+0_j]{6S#<;jEC}ZnA͌[d框?b(>vԛzNO;^vݛU h5jEǵ&sxgD \)yRX) zH"p{2ە% R.Vx铮`; ugп߸Fc餫ӞϯJZ("Fߴmӌvv -#Y"y.UX3*cՑ3HO8E=x&->O(b.kiD JC6/Ds"N <O`Hx]Sj7jdb'zh9)Ҕ=*`io,F>G>t.ND?/(6Z-k֮xeMVv?* #7!H '/a7U1 6j]r\}4dkhtCQ3L /H W>QW[ŏjǪ/1fqnsu;'jĕjQi{!d|E6:6k"ЊAB⻞ec"qTz["B!ωxǸ{.7)[FLxf2:] Pv^rY;OIS!)g"_WyIXfkכ@i@E2*ihә&QjVGyE Kf%X9\e*jԢ"~⻌G4ƆcSx"ύFsx@m| R*tU+ {9@K|ROyvm^I 8*N0Oݨ I5sB%mJ68֘|9EL> #B muĽ V+aW`^ŝ,@{Uuv ٸ !8{QNYG4?~itQf1[wD5rBq_FgO.0Vϛ[&*9A,&&R SbԂ~8>"Za fԗ?VOhR=9Wo9a_4CbF*Tfᘸxw̘pߔ=온4c$:6FF"`e-*ó'Z瀑 !Y~occv[Kb"g5{I"Ԙ āM`r= }SF:KJ^U|Q5K<.ssbj'B[Rʣ6Zlu`)"qyFf19ςZUw lP> >fǍ:vUbIAp!ETW/crv]:2&xk?Qv`mMU(,Na~lE"yuI>^`|*ųW;YRf8_-l CTqC̽^QTѴ?!gi u}q%U:-G]X[eprsG-"zN$ugpkFYoedu8-| t7KX1k[vl]D"0 eҷj]vx C^!4|Y؍țpreT5K &迳OΡ.!EIzGw:lu&e%IO=aLX<ڨeу"*Ka0mg[ %>'Í(i'\yOgsZBXO91O_aϜYPJ\*S|5(@>6dvG #.Yh!}cª5Qi8cǁz045y;w>Eº:reCƜݰ10U-s12!i C*6h{ }^Rx\!QR!ERjP yC|**[Q478[<8B|j6/G"-pz.Hk\8dJJ3[BR@dx vwCӸ:~s )k6uhg@+}R 8&D&O+H`hsdaI1d0^E [.--n52Ŧ/:jhb(qMe| `.siIo8B2 ?ܷk{̭W87б =9,gٹԺ|!(p!-__~DLsDDo)?RH;g˃I *hiJ+sI6m6 iy͑ ZZ73=Kr!Ѹsb4VjDBjTAx-GpheR$ SMT&u>5<+Hs35ы{_@h[+ӥs*ek3D|(2Hw3E:(m#z[X`͝Y'Kϧh.\NI,XJ`ր;m5wLoTFL~}|q-@x.Lr[rljIӵ ~0118|zkH5A6ʩ:ثtwL0H{cke6l v(.q:'eK*L{;ED8^#0Įn{!Yj*5q>k3,[kx/ȉ<0 ,|@Ev7 ;#Bbyy}yX}lp %Fò{ӝ=yeZ{|WM EhD6 =PJa .IUr|',P9v"Y:{D7oכǶHOR#S>Dއo`k6i_A*%U6G=|}zQ#9(SZ `\΂%;1ñP:;XZ؝ lTBҰc$DL 묄ѯ':{PRXL3h0>\:d61>1w\ôhYV\3~ fFz1_ f+~-[&ϩbM\zLɬ 6?7{-|㝞N];:WOD3^Yc:$%қB'QV[/.Dc g~sɶT2ŠU1'HbOB)nF&M"'"+YlQUiG"a q1 Fb ;4z0-p5-s%nx$rs3'IS{U@!F"`'~e CDDǣ" WTx8R+Gﺇ|aa%*E0Z55Xsg'ɧ;%/?ܱq^F:9ouӲpnuԓzGU 8I+@Ary寡=`ԂAĤY}vhbq'M =+kA+k r\zIuV~s [\ i*W:ߩR,T)'֛8O$Tg|Єks%3)ټ bW}1,YLu[e薙y`i^V+ITQ_S%& [`scT-0Lt;1ꙶ'JW修^]@x5+e`1ƔYqQAڲVtHn0z]6ȵj1br2E:ʲƕF[23 F#qd/9o:C|@IG=B2 6nU L3߆i#``L:]|eq,׋>lN@%'!B ן57P+"Ocbqwghf"QL0%Dci*;@>Wᳵ!r'\9z?-P<[<ܓ%cZL  {@V-j.Q9NA0JPqK$^="&I!E,ZgC}DEI,tȀ9!EЕl͔z`vG!%2޺V 9jYe cdI*\*]R<5e"n߲4A׍ i-޶׼#w;7GXi}y tYIZ]+)^$'| :3I/KXx,i"Rݐ]Q*K]Q֎*&ސO!G)gjya$ ֮۸:|Fa@>' c.zʺL* k @8C <FYܑjJvj}^ts 1\s߅A:GnNٯ4\\f7n \q7f޾贌'ViuoL6nhjZ,U^;5I*Rъe=SElVK" uy\WIo3Q={TCyz6 &1FB%uijyTY2DDQ2¸ Nt7 [i6[{N P= I_ "4p+0 ,c|)/iQHg,RmU}w1>!F7݋}| cfE _Ѭl"0~4xlM &5őVgQƠw^ɷ2c q[xH-Oic:GbIg8?' B)zfR% fU2svfs4\ 7 1$8GbRF13Mkh&T4I!\F}^14y*jV뷚 "#Ȱώq$3;2p00}I в=|,x+l+Tu|厏ܞQvh43INtXmi‡{0 {^]PjnbO %q])ʷ$ct5Z宆ZQSVW#D?KNBoQ`'[hVF4+s'@Y/fzkQ0ARhz:gֳ/>د6m x;-Zd>#ȋZJՠ[zU`\Z! 9sen)*eAGĊ 0`kq4 o{I(iU `-(n=&}c~ޡgxmXvTujVZZ)շ$z"Џ[:YIi|Oo$YJ}傋qS85hFTu˘\J|Mg m& +8 Lл"[ٿhۦqYlr'~:GŇ*OJ >6wz8Δk ў'=W]Jrޖw WTP(AmWzVw̖oO9E}-60r~O/4)h97CĀW6R-ăvusXւOGL E- MmrȖ{+˕~$:FCǰ$2sw`%W V|A7TgΚLSiGyG@ F7P$_ms =$u-}Iz59Q힣{7% &QUI"_ z0Fq9YwMY=&o{0Xb]5[`djӓlvC'ktsڧ +EY;D<Ԧ7g53dž1_E]'W͗n6E0/`\l.ރX0H^/hHD$[;zgZ '#&߀9 0!zBW/;jj9h6`#]ažq)McvQœ_別gf^Id(/+ϹiuoB`F8vAT! V"P-K ]u3a0S'2VbkAQ jӅ< Z5h 葈yU! +uxg(%&A菡3OB©M|d jGg=C=ak(RwjD};-X1%*,cJ2qq?m̩c:MU8ɀW~y.5v-6RRw%3ڿ"Q'o\:]I"S^v =/6s>]W(60m{9GU~֓|0+X7QK|q粏#{r_`{ZS MLRgdjhYDĹp`GWjI?X eVGy|~N=MK?4g6^=Ha~7+B%,[X/N>j\iC["V+ŧ:z 55ʝ"F1^v*~',=4}l_AerzťՌh*a [&`FkBFok9_IUL89z_RymfV[bf~T;*LyQ U ۧ7vl0•%@]pwLeᎱr1A\._:D$ DD=at@givO $c*|*= F^ۚdzrX:wuAR3JuXzS$R)eX1BMM~ rd]J8#ZaG=RȞ ԮPgw 7wyZEQJ詷gZK# &m^kA|%D=&Ȉ#23?g Se%I%EqL ȭ )Y+>lvsP1dk%q`'$i.axЭASM3>1=}z i]Kk &5fvd@O57E[ӍTtRÙU ]".Ck۳7Ur-aLy_ym񡾳E=B(81:Rh]q ˆ5šd} `7NЇ&_ΰ K}/yZ)>J=e&Yp;8` :[sǺ^~KAB y.`nsLҹ*R w#[D:RwB!da'>F75^ mUmUs|F ׬՜'vt)´â:G2)!=loR1Ӹo=wQ-VF<-11OR!P=|C_MT_û%[ߡO MmB{#߿LY՘]u!3fՄXa{ H )"3-bhպq/{ip, S؅6j]:9TxԆHX.b+$5rLv ]:d~ڠ >ܠ()!VEGzg;қek%"餿dzLF3D$Q6a_2JJ&i<0d\dijٰ:O#]p>?4:oǩoFcybޗnu4?pr M~dօZ?ndUWr# X3魸c4S;mu} RKz `X[Z4H㇜44gU$89ޘ=P3 h_6V s.{F{!٠O,AcQV v <1@7 ZwlQ~á +5лayub!勐JuF%Lx #- e͓-Fmj2Uzȇp(LBl$RtNk<>7@S,p GQZyb1qㅭTsc mdR]%8+3թD[trĥ\^σ|JL 4=)${JN4bEd[*R R wo(~S[qO,HtƠXhoOzV|HF#y1V]ܓ'pͅrha@w Pͭ$jmiD_kҁ1r*$+cji2֡WFC|E'F0B%~ANΌ=9Z9HI] d-@3b5 #ϥDMmXWBKrd4bo>1#af$UkETZr3*w"}a'X\Oֳ7.4a/ m_; ejmқGɾ kCtf7|X[" F qg+{qeo yG|ǒ;*IfىR`刣nLU:]v!.*h3 O'@]}VW+ҚQW8ml<v;hԆZ_~FKpٰ> XW@؜K@fWL]~8f-%˛`B%;uA @,PMT@ܻCqXN/01_ wަ*vAO9+ .w5RvT`םijӺS @f{ru5Ƿaqs[l*EmLb54sAoM[V}>yX ?(/]\3!Md_tYPىќqZm)uS/Fq$ҢurZ+Ñxn0t\y;]"sp—=ttlB2s^̛|Q GeLm^Q߼ hs!D%dx[aqj&ԕO;_kzwabv6r^"I H/_ߖ08NC.E8(Z3 _ gW8Ő+sĪwr|>:3'РwcA&f!h6B9IB<i Pib_Q6FɅƱ(Ar|~Lʡ>Jy{Vav=MD>!P-q0_O^I/q^czٱٛq0ɈGܻtoEe;5)h9-Ⱥؾx3 4D00WS9IW=K0D2dkX%.\mZBEM }UqxT'A(+ze8e,0\S6?R{"_X>##gEw+eth^tWsU6C# חd~7S#bA߿Qk2@PK<)h*6EECߪALm>AHp2 UvIn]ֹKd*9 fMS>.̀0>%3 ŠEK: SĸO=rn/Y)#&~`Y@~e=DŹ>j|C!yw0.ͻ wB5^ͅӢP{ܬP;і7uk֭djmW\7R:&5 es]6q\nAn{YZIUo+EN|!ȥ@U+rT_$am~zkĄF`)z? (yΓp#Y=EI|㼿'ʴ'Cr%ؾY3=!l!Xm\~ZHqfEzGbnxyFA>2cyǗs78jkWIq-El]7:a ~صYozVƯ)t, amIrHxr׎f Q$ljf YP}MI&}.{!V1>xy;#Htin[ǓXt!vu,"(6/65~ xR K,&Vz+R8umv:d\'O ;LoX\YwH=g.GFŠ'D8Ƿh8/0e!@wH%޲YйrnifVKd6ĠbZJSw͓1alH4}1VckH`*XO2ԗγwGL|oi `:9u4Oɡ)wwe 4R R[`Zed8ISlqP0Rܙ.P-@i*Z4g=Y7뱐6a:gr~wJ=ܩ-Y=dCpZ"$m_íhiڻ&ۃ&Zj LXD70m],Z/Aj8(HZ@~&|sN,.8 >(*PK&f\ "9!KHB­cGo<. VGA3u(V] lH±s`R&8_f>d@a!kimyo{`Mkv5d#Q\LNKSqMݛ/&TШupN^fx.ƌEMۤU)5vd/j7[!U%"6~:uVORqkƵx6g|wNmGw9!vɥB_L%z V Jf#x1!BvHPBWp`1UJnWAyp7ӵ}&M?-%/ڦ| *ԡ{%$V0$i /%;qH +7ҹI.g!^'oekubW ct# B-yBe4ԓcYWCrhnmD*pP">*+7>A%*/?~T+>4?L*d; @\VEy`oC鍪/`_^X{k0vsqA:8+."f8,5J[ۙcлZrIpRh(t~Yhmljɶw)8kc1te x {}؀4(lFm 8v͏ZDQdw|BFv0sA㈕3t0/إs>M4 `;+a}݃_b-槲_1h#lC>kWL@sތVL.P?7av򱝦sJ27ԫp\(oKso{ptJY5ػt^)\2B:W՝5v^zr6>(kpخX{S.#< Q=V]0#J6"DD=6vhG: l[I&Vǝܹ2l l媤؈E~pvγX﹮|T`[P=c1N϶noOEh\JNJYbp íUI!㺏,8Zd18!X}L}bf Z 7}ZlЪB&^ 74 CTu2ޜn#g98LoG%W)_PN̠6Ƥ4Mx}Xmi(<5hOsuى.Ԝ)=(kt [HXaʓoll5w*'T5zpަDAbZ~kPpTfVN* [JYzw4DZ3T~~IS5צ/q@6J ΀/1%dPg`RSůÄ,1w1<9X[]Ve fLL񇽬NU+2N;lHޗn@7@+ 3oh-'Z :pP_q`8GaNpo:i]: 7HmыO~L%\2j/|fCs pRY p'_6GxPEb`ˉ^ЃqLD>ʾ[gWo'5]~ e]2r%ԆR| :ódEJsoҳe8vG,4fڟ45D!W~qNqYh:?RG%BJm j4n3Nc323R 7s`);R %n^||yH&Q 89!GfBZs@#lާg*z)m(+bC0*7aER,>P Y5iF~{Ӱ cGW_Mz E0*QtWӈx\lE Lφ>6+>~#FMy*pXգR1SGIRe\d%Q?LV-l6l쟪-RTHu(ǵc ݑ%*yFa^KV-t =m7Eܣ֫7aI:l k(wߚ>l- 221׃ E8{O;o:2%BI`jM:=a6uzki|jg([~ϱj7,XW= e;P)+U0؆6 qm ;pmqaB[Jr TEPa үbux؝AЅS%h^GEYynޡƭ/RpzAn_cҡT5x)P4 _f}F6 ,Ҽ@l;Ad|yb(w{F }ie*6tzaa?]k$*6gu=kCVVcM]):IALQ9.e5Q`hçH멵H3P{g kRT Ox/Ql FK=DvynsWuG1s lAWD3{hA}mP #ٴaKНv,a fW&WY7Hm&!D墁JvNE0bg8IN]Ž%nˮ彖Sˡ˻ X5bGlx;6O\Oc {gޜMrPΪP̱4q1a'nj%!1B2'^$0D|X/7|aRo!}k"]/iɶ݆^=/1:}^l5-yZ2/ 4Ã2_#6tTgUd|]J)`Y!2] Qj f9z=)OF9ֻQH?uȲ<)d}g&Xiӫܒ]):C^MآϓU$,Ow^G_%j?DŽ͝૱"RZRIޤ涡% ruB'bS༕U'Ӯ/ɧ)$Hä@c?MhU]g"}`Ɛ$c*t2[WPD5JX*lLpmS?[ I7JP5==`gUV_<ƮB\p9Ƙ`T@-^} k%3JXU,s ^P:N:~YV+͙hFWc8?杖j>kYSSH4/mly?k,ga*> 5=]qj *>9Ncِtc3l n&qV9=2#]?t취CyܲLJ>DL7n`p\ yM5?3mȊN*c9grwv5h*b  ʂ&3#,)7<wˊސ"B{> F:qjvhcWϴ_ (]9.ls]Aǜ{q+-NY~7RI \X@e"@:աBRbHٱbw4ZXY(iCf@Pfk&Ghgِ"=S AS国6-CJ%5`F֘G$n|B`Cg  pH"W1E[uWTzuXQ.qV1QieEI0/{u^FCd8aj;.o iմxxRL.&ӬOc;6oG=- qk8r(͎έufZZw@]Wdt i|uad34M6rt7Xonf[[DMafdB# RoW? Vj̀kR&0>l&t lG3mTŃ܎sqC ӢoM1:<9lہwK_G3@R#l\Edc3W)|T-_3\$XMG!8EU%`b3b*0k7ucŬpu[Ҫdx CP)!yZ 9ķ6$o\|Bqsw ǐzMx~;;w)xM7w~񢍏5tH:tZ)]MNɎcWq@ g i!1\t0l^kA_@&Bz? sM$dF1OFFkN LީeO MDjl>vHn1uSOufc'CkE= 6Q wq1.z{XyYV )ZOR1>0fiZ[^N1̾Ԍزl\_ Ko }U^ z8g|.10>;8ə1 9?hcPG2: >jmFC| Wyޥ6Q>)'Jl?J)?qB=NI)} zVJ~A~*鬹WC HaJtu3r@5Њ;- N~Ym S? ,k{zU{Ri*a w̘t3&Mj-@_\dhLebV#K/:]!50LpךpɳƂy8^tTc{0Il;cY6 >DRf5P6ΪN}IrvOT>%YińF ah%9=R1O;\<, Dž}zXM4Tr'A%KO.9 THl 1\~ǴsQ"wm^șF9W2VQ2[iݘ}'V⬣[3DCZR7q`Og1$d:8Ö y;GxɠK*SCp aj 7ĐE9aj(8(n(.0nRA":0z.մ4ݴD n&ą@V\;,RUӌ ,`E YO*xbfNV @dY{̳i|2Eo ez%TצjlOPz {JXK0Lo n!N b{Tʡ) TRM ϸT[2|= l঺5 -ҁ% Aj؃  ,kf_)W}M]c ,z|͝+%N6 :ُY ,Sw}Ca m-v;iHOQ9@@ 7MxgxLTYyyOh7-m5򟶯f'ՂTc&H9ĕRBQk 8w)_&>vᜠ('rR"oiؘ®L?3Sonmدؑ0BLt&#g/w ]}P[&iˎ/M )$>QWH'8AAǘ_@7Y@S ڍ!f>~Tj"b( UJfb5v >$ўhKNCOZqm30:99*dΛʼn jav"9EڰG\ [1L[q(`&ĭZ'75}-C<pq ~_S | b,s r3{P2l)i&c G3ǣtCKxZ4`_K}Y. n:+)e,X@-} QrEhmUڝJ~wU6g191R֪' i9ڌډ+_@JxzޯiB>e糡5||m3q׵/-p r>3ҳ1 rfI|3.s[-< fn&dZ{h^MTb`zE~f-wimQ(L-"1Llt+ɳ{nR#PЉq˘,T͵8`Ba_懮6,tEWV,|9SlBɁ?<[:%b5`{0Rb瓳B$Wegx4"&dkG9_m"&Nqz$~dUT[d0̔5 diI!6Pn @CSMVy=!VF*K<پ=P$^QI!W$H-fw>]KrTaDH?~?0384L#1:h]3.>QP)_Q R {^k/zY#2ZF&eLyn;w>f|6q60{ʗuP,7)_XnSb *maU]wտc}YgFC1vvm/%p拾~PyڥlC[\C)[sbʱ}\Kcܔbܭw@zWM0x: s̎-WB>eL&(xV J7^H׾;gq="E?BXi?&pO_*鱈A,|srǼ> ig7w2cDcl=жR4O:Rq|SS]:qK$Ǘ$j| ~7ƸnI-|ךC4.Z!5QꢂQp-= :N*݌ ךecxz{YiS@nҰm] DɃ74**^68Dޤr1PءOnZM!pS߉D{ǃ }{ ՗\ &El8%ܾWP0@^*lǥ%Ԏ='V#"zy&K[E8ee&KmSCɿk o~ HnpM4|:t Ū1RyHJqoS؉cU`}5/gR@J9'x0t*!AẖC 2Wl^`!\))|Pg|I,\I"Q7.+e-\zWݸᴫǕp 2r\gT6 Ąt}9hn>>Q&=OIL~D45V.WAPhC]F&'k)J&j=#7SFtcG-$(V_; 4v`MvvUڼ:Vehi%hRMk#X5)Dk tylrqXj wm݊D|kA5WV+%̊EmRƌ`#9a旛sB\ rI>%DQCge|V}$" G5O5bs @f܀B㣾U5:@8*pF蓩=SS.Xajɣr*{[̍gWSָH~0qN@O(gֺM^?M-ӼVJ}[0;vƴ 9:ĥ r*W%=5VqIR8=Y= 1tec[}˨ 4GÐt_]y`iQǛy0z.mq!Wq fw|z}O{'jnj|~ئr2G0}eE-toͻ;'M?r15ŀm-t$&{"ٕB?U;`ٙ 0:+8TR2M'BWɑ*i`Lߍ.n7+hM΁edf ~IL%eM5ˆ92qy?$Ii=m&H a~up7jQY*_$5rc:M58hv;T28&tyo*:c-,os#`J1?tD:|L>]rq_GB i ՘Anv{Gc%RV<`kv.OB5z<#JoE_>? +UTzҍ4[0"fX1RU7 @s]_b3EA )}.ZE,&li쐌dN~t.F~>PY/8n[;3= gm*id k,hhƒ5t=A+V6\/YLB(>Q(A.RCr;[/R{,p.W[F'1Gz+Ɨ2 H~,d ld[1WPylVMhh;\A> u U{Zؗ#FAi/'nk6ڥIJ@aV䶡/Y u!zq1əȥޠ/"({XEs先WۙgJU;|mxf - V]N2]$_1rgi t)%*3*BB d3ܳ""ﴛ 0cމXiJ:%Qjoć˩d-[K-X9FIo/ɣڙuU( ŲT4C<(R33t @Bf)e}hA 2橛Q&ϥT@r/ 7QK̦6H/VϚCRwcV/I4ĢTfYuӓ[ݨx5nD)7q[Unq ?譚$m2mA$UKket$ߟ^Oy]2K1S@]Ӑ\ԡTJRR4%f~,XVyJYpᣪ9LKH_qNDĻr&kﶣ[($ ;qMıpQt\hGR ӎwn@H$+P$!& WmU-8z cпSGaOB hĦy5Gwfw6g/ɲϾSC)=x6AKC/ 썙桜T^991:?-P=mކHR{s2v`P@0mHdUʮRM9.ݩS"_0b“]rD@UTF;MNEҜ5Ȟ):HA\6]k B`VRs,9>(j;˱QRLh UvY#Urn<s*GR:CNO^n{4@(m;<[e~6-{ { q9'ۮZ0̿ h}vjW<߃fo*8\ uֵ jF N8UbSD)Eʆ \>fipDBOC#aA%I%Lߡٛ9(h ¾㿡:IұnDh;UlJ v,ZHD_g:z*C|\K7` y"5#բ@ N+bA+P0|e#hC\zɊWX_lM7XdJeӇ\Ĵ q{Ɔ|`\y:g݃@4:!!䷛|iтvXq)@(0X/J7G1okD\Nzp᪂=:".lo<1/vzDpϾLW2$ccx0vD_>}OOazfC'z]vj4sa[ uK8 <5stSuSQ?ZZZ^N`4zP {c}X8OeТt'?d1H葚sFYHj+IQ"!{9D @Z#գB&`'9HJ<:xlOd'k/c( ̴.RgZSlMWxEE涗G]<5PhRwYi/@5! >՝q*YR]Zg4T~M.*?\$CtY(s~e3=&P01a Xc|Rg1 8E}uwS74A% X5>8Y5  *?*9>``oRr=qH;x~B!ZI H@Q"hXe s>7X [YKGًt̻g[אָx|ۍ@U<ľк>78(@Bi@@BO_[e*l\r3lՕ{6efh+HWڒ>'fJ[e(=0|/Q#q5iJ_H4rX~0n&YGVZ#!JAw'p>l]^C 267>Ѝx J֦Ճ1Att8L%XUE5GZH$*y>S;\oU{x_hr. s M,gCUZPMFF-$Ex# PQ*IYַ9pOZ|']t6Aod3O]amܸ^K.1HT }w+ v_;w4|Nk21iO3R2%;t&c,axB`ǧcwΘ3[12vLPdP) Q}C~GP{ҽեדQ*u4M}{#V7uđT n4AŌ>s_c`LQY-u]5w`j"'_bj.¹5=hqxIZSNU4Xw |&Gp :=3T({ӲP.gq\ߊZm[, bHȈ@ 3?~Pve3\>}[:OwJ{-^qG{8ܤ;fm/ʸt>1`JQ&3a< DYNpRDH`u| Lxcy)!< o퓃gj'+ t14OgR("|Waʪ+qYE}N@E]6mkci{plgW|dTi6FJPu#gs)s}Tl袦z^O#f]/#V@7>O.-@O)J;A%VO UR|mFJ`}~f7Tt/@Tf^6W9v@vspӲu"p R֕]>,Ƣ\($?!F)Wn(I=`/p+4) Bz,sǥ,bhHf6X1qNUo:Hᰴz]q;rԣ3:-\){a4ֲw``(HASjᐓJ3&{Vֈ?VZB_;h%o1c:L}_'߯˿c=[,*@]j!Gahqt6v hŢ~7 IC1 ׻VE~L\~ZWdH뷽Qxsq((U|ـ7bHy R5 0z@Mqr2=plk|$qʜ]Ip1Yڳ<vt]nc[_k;FWU_e >ʕ yFnkOtߔyO@ab%7-r.;:>z!71 8|ySQ2G׍Ñ|dV#DZD'O41Ot2?8RaS39DLIݿ6Rb99m7o. ђM r)yQۥ~Go5qmREτ]H!9)+=Hb~K y=Zɛt0^Z$ PX[ax 8=ƾz&IJ(GzN䚻zwӸqa1;N6qRɭ+/Lo).E1\ƴ'6$|G q{?1L{7 <{GA6b&+95+f;oU}cM=Ղ^?8וA%Lj !`sk }W4:i5}Qsj VT3Ihb6MX2. 7DmX6Qoi1pXi8WIbBٍ1{T},x 5 IOz9&)pk{ @q]KDmtWtMnXL,cSM0;m!M zG(W#oO{ Կ/G&>xԶ(y(\1VN EJUAVJyMj¥}"9E`6;;TeuN,E.OxqVc}fԲA9qi1y RY*ĺG,m+vt5Df~}]|sk%rR[ #nx"x?EVBl#kuH;:"Q=:{7yI'i%pZ~İ@>nt5ȠZap=qQԒI簙6diwWόi!.%;E73q<;:'}0T;/Z zݵ?: :|{:)ɩC^a-ۺz8A9`Q 5am}uox`e<¦P-~ A~Be!r< hȺ!E'$T>q`eɨ^tP7 fhCIK|%TC3)|}AJ[4D xzsPTH2]8,M^7)0fl;T@C5^gV/bS)>5ݶk NN9!}PrW3Nd)CkWtIڷ ;/U\0xiJ5Vnf|K=YQw #HjcW0;dҵwbzI02Iv }&%.qb{p8*x%~{4AdylF=M{NYuvvT) q\O 6.On̰4KN_A^Էv$Dߘ$ʳRWB\?$%؀3˅j8z;EwdHԌ56&i٫f_%N,[V ?w<wiK؉i/Zycꤑc!sWݿf7Q:^?N T6#g N}+1jEGVUg5 $lx.QMj'c:?fS:W# "T(Bb~ )_A1-.a>dQB6PItFߏg [9c%;M@Q3agy 'a-z&-]>kEcC#$C:j[L,Pƚ~nLAJ&5iIN{Fb%Yʓ-Q$rN)8zum᠘S$~p[kH0ztɴQWڟ m,*'=B'Iz"3[%NȺo.&.~ p j={_3i߹ѩWOx=[ o2:r/ʼnhAuHp(&o2Oe\~M]WhXvK?n╇W[fv橃ŧt}#l#m'ñڪ"i :6oEȏBJUouUөoڊiCMpr5xɃi&-,J7.ٰϚX~ u%e'ѝbqwL"K }/=QyCԈLC\=b=HlUrX#4MA0l#Vj6X a^-av^2Wl9g7EhhA [oJ)oE(&4V/`=Q-ih`4qnZ:r1baXd,Z(#`$d)?i}JDb<] g+eOpgQyMn"ʍ撃 n ]:G1uw n?SL.!, *@o%ݲ[2" c逖- i)+K^t@dИpT"GiH(rqp }BF + V#,cW+>s`{uJ/s8rnJp#ͪq*ޞRҶB)H3Ib!>0d:fGɷ}ag՛FY8܌:Ӭγ#!NV⧨i*# {PxP08P6bg*\bR[؜F*2Z d&;Jmª>5Gl3ff?].KEH/`vv PG刷ΑG Bŗ֜gs V3xvY|_q?$\?ܲ-a2!Bjۅ<"epўǑ`fFR؁[ k Ԉ!d:%vI:bnm١n$ ߭&Ztx^缇tF{@ճNhi/ÓЫ?k7[3XS((y=t9 [tM}IWj<~3L43Nnȥ _4 .d / Bq&µ 1ihp[ɎE(z)ma s- I2v~1m땆R'rxCHKco4]0 /D׌8_"zW)>McJskִ HL'Q7g~㟃5!H,hߝr$qJE2#@)VߒtMGەQj;D4x]=CջeQپnD"Ȋ Hq{Qw/rɝDy$/O,KV88/*3PH!wj~'0g愚K3j헿1|{aMƵW8 t|'H_?e2%ђݫ!u dXz-,5%%h.T:?AdHU/ A|LJo1sc<Ƹ_YzE*=7X<2ԫΉ,OƇ^RHWo 'T92X&t&e@軼]kJOfgne"uBQ9 2x+%@W\NJ>M_{a} k/OpzfsmgO֚ç((N&N>|v]V ӄt%ǹPw>yCژOZ!n6j5y-㽇ϙ.-'?z:)^C6Lu9mE!x&x[RS M ](S4 XI?B3H͸5JA BoZ ݤ@B#5o_02Mo|/DȄb,}9 \=N-lT"l-r.3'߽wݛS`A4?2̀ϦY\JqvQ(gOv#wkI${OrxVi $mg/ f;!o$wU5D$OPgPZ~{0@V~ N[i˘fLF>˒\!uۓI(V""=T\*PA8 P YهկЌFyg(>hּRϖO,x]CKΑ%9SeQǑ'M@@vs=%9ݺwdsF)oU:iVB^ɐU" + 1tMzXγxX1yye¾'.09/2xM3b¿OycY s*U{aX4-:hN O`lrW|ȫE`2y| oZ(9{X;,',0EZYaBmQd^_ޣo{>5;i [ѿ*:G@K*vQ`fz#:Rc_OKR LG+ GTinS[ ȚsfiuۍRz,TH0[覽M`ؾ"mew`65E([8~ pC*_IeG)Q;χ_["44-nj H`ũ,?nW+ˈA [e 7Tw+ I?* e\Mx'KP$r1b"r3*TQA[|qs QSC"Y>]пJp=BGV: 0Gc2򴞽Xy&Q0ܠ:hemXnm􊐰L6TB `A%vOsPMUnó+ 4Sz`*S\7W)*M2#c|Pơ~9˩ 0uN\K L w+)mSNޠ[ ߖ0NDp?C+! ]%ɍ[aX~_*m~%@"}*ymu RP~Moaڭa ,Lrd14ɻʚ]mJ+t6jIGDy޴h_)OL|r0<6Ѝ xEĵn?M='hjvhug-=\\1G3ZJ[g%2n zNM:@`:Ep:܈+UTX7kQB19h:,*Պ;,Wd:&mk45H4 MNp[G ^@[>YDž] R?n 9l.`jA74lm>g̀Hf5 l~! K |d mcCsYouȗ:.ەv>?&~fyɂK WC(rdX^mzc]M?ZKF9ː:g揚4lܞHu -"y~T/ɠbŎ]vQr~姀U{#Xx TXmLSmaO/PL;M;;a6w [ƙ> 'd]+qJ͌@F&beWHdSsH,*6XvhT5j9eɁޖT<z]%1_Q7qyI'wT|~0a~nKA8|}cCZfp XMLn jM4{i\sDnu~0&-T2W]`}VFH5U֔΂X2)u#BgV^]ȺcTIӌ #\ ̀:yc3vpKcP۶xn !#e,n@6!g+Z KgE}~꠩?'T)m{ѵt~HJt`^ Lxږمh xv yŔP*~i[y|ZSf aܒLPvVq/88bvӮiG'S~ q"qAkM=y"x=/wx+0ܰP~kʼ]D! 9<nzζ| V ڵu¡xJP5ݷQɤD/pmi͙&JZVXe8͙TF0,f:z&zY NJNA2{ 1 N"?3F*ѯaTiUKT k(T=JD:wmO;!ʿH:䘨_ifҭ%2)݆Fd>cRgY2&^lcwlǘ!e0M,;^[Iy8"ʖ%EME" aT>;Q7&~G9EMa$~ %zzxZFkg,]½LIm88V(\ramBMc͇|ā:x1N GOh2:'_0;㜐IR4%6]84[RdRV \fkfN_̍AyRKa)5Eem)F]z.?ov X[0HEFs=bd3bpoNNGqu}S%Lj?Guf8OnZ:3Q*%1 #>SaK.l V.*.ۃ-9Y~dqpQԵ*6 ;n6<,KgalnJnqk;!& w_ep$'EdOfKā ҅Ghp2 Vo)@\`Lmt<3NxCHB:kqVe^7&,ƄYeX4q!Wjvvbm 7]tͶ/Zuƾdm뿘P/Yҍ5:GW|(q5r &+ZG%:lVt9@Z1`X% I!= qj q \M>!;IX\ڪfFBUT%Ǯ) /Gkiglb5Î-Q؅ywV=4)z)LXG=mi閶&Jε5X3]#s?_]fm;Q  3bJk)(v*t >Z`CLݍlss=6,@s}?ח-[NF0 P~ͻm.BwzGHJ5JS J [T<8&J(!6YႣsFI7yg}V#1zG}O-yFRH|-4d?=7VUC5o U|uz>Q,VyHls֮i^ 3F[@c@~v_:uX*u๹&5E\Y6DRte:]<@A8ZalP8"N 㘷ZJj RtVR* L3(9&DB(yrǔM="q3s3NI),;ugQ/'0br<3VBZM8&_ EPm;~6"(RB4,#h l#g/a\.s%,zC>iv \  Rp#Vܛx ʷT/šZ^mu]9މZtK #\ lREJ|:,.j ~& } Qx CL_d4zy/, *m=GZFېia>3k"/ `}΃C;E>XOB%F˚H+YZX8XGZA7pwa q %d ܾY*&q}j'SشOQLv~xءEHq| WNe鰏8ck5Vr2*'W.DZQWդ"~Cq$5,8nֲ!MdN>9?]N6@t16=7aSԲ!rCG*ZEZp.fڡURD= Z3M"*PࢶcI16x/SW$h݀.c@|x|O2BrD>x#ŲBDg # 1 7tWp0fgcq#IhlbZkIg_7mq3b, %Ɋk)^ӎ (g=%TsQn``;KLثh ۬QEy [4{ b;OӊR~vߋё\92l 0nș.)Cv}ݓd$Hc+b.eJ5jb5\oF- #r9 vvkbc쵀',mBd{Iۤ Sk`:9[L RV)b _m$.ӯn>]"_s#ՠhln-.u 9%%r-1G2A'$q +dx .fCiݗ4n)t!ŧ t pϚfCL b@Ҩ%?#?f!qܔr(_ԛ4: JZ[nFƚ{FPIѿo  zi2<-c9rz-ߣ/Ad[q@h.F A'7-@`/J~Wn:UetS4E7މ(~~Kd)vs]|4чfNxsg 3<\ x7oѯEV'ڀUGL ȟo쉭ޔfR6́*gimSQ^̣}1*v L4yݠZTQrˊUa U\H ,1G_:C*5tf19#~t=`E%Ō1ښټ,nXK@sUe_W*(&``{vT,6ec頴d)_qkb 1zn-Bj]2UfПI[2l~,?~ UO08}_g [A-9u& mWfw96nS^_{M#1͙&OXTkW3E&:"NF5  ;7+ymWFA&՜RE0R=P.9Z߶HIy#8 ;]GeOlY|sյmt {&ULdz$3/n:?) rxqɋwfcX`pu< 17DQ E$M!BwbB~&59 ^]05ooQ(/ n~GR,Pe{Hu9ikTqSXuAUBJ6Ba__'{!?Vj[^_k{^aKA>AM^`"GD]ldaY8uE< 0hR'uLclafH7ϼ=ME0N]JǠe[k\Ȩx;A ?zH13_5g۝ka7XGM.|p% í-pyiF]u jJ7PInܸ̿1\V̙~ލv3b`|(p$UsnGSLVȭY[ GOI*.f~P!mu#\|1FOr{޹{0{\\zwg2F>UņPoxm'CxnGTs|DϏ$&"Ɯ=ٜ67f҄Oyl_n:%Be>1<:wy-U-*fT,NxY:sd{ϓ켤1<&CI<Pe4Cv7_5W0/ԗGl2sUO;$"{N, +->sxLdAȥ5Ĕ g/ay?DKTqAmq;3ڥ ϶oV[&\!G$6T>M Pk#"|R2p-&P/sR<.يt_ T5ߚ^y9ȇ2i.QUBtҍOH ]kNbի˂%:D  g<k;C=jk"|IMgZ8sc7cdw{?+̽  _ ~>sivj(ɼ[r2ʃI:,UGczDnB0D_S18]6ݓXNpZjheIc>8j y@3 m*Y$@=Уaq Ȃi,䝀S m)=d k%r5^T*&-|Q7"-Yb 65۩*B69m+JPT7qͪ)Xz(6P%#lf#ΰ~3A+>((*mp0, O7orxN!rGm W8Q cYQVCKE݅_pJŒFdTV^ep^Hpo/V" &f֡ v16 ǣ 6 's[mD%%\⪇l9"z6=Nk Jt %+\ReQ 켐QtA+S¶&>6Ev7͡V;Q*y";= ưI륒?'{o|屘>-BSp?1|b]9FG`hP7S`"^|_cMZ̥ם}=CqtQQ%Q ::`@O.W,VQ/=h~uSۓ~}!e6,( A {;UaT)uFFݬv˳&GD޸[}e 5CÀ zbT$޹wQO|Y'MN8ID7N0Rj13+MX%m^,? ۜ-Ed(K"T:  sM3p{8 TR6 A+%<Ny~Fn 1d g[Q٥ݘ߮ $L߰)ßKO)Ymcy0/b^MXGb台TX'r`-]Hr^:٪U%LeF<Ğuq J?ҿVو*A p=M[O0cM T~1\ ~xB$,sNfW guMNa۔ƪo&0baJݘ84#5`> DIV)Lpu﬽Z[p1WHӊM/?q;FǥOq+޻c"[ [6W=ܢ Qh^ Un2QGY!ݐƃ_:A~T8'YM>6Po ;ED + LjgҎjJ 4RRk5Q ^6XKeNoE}f|E%z+ZI'ZP Ve~*j^؞︃o% Ӟ{aWB<ڶ-!7>\B,._r|ε3NLpTuubi$YV/2^AK!Ej-9>!-8ڔ?SalFg X`$g:N,73`qQu.?mRU h-F ?z̿H(g*S[ʈH jJgRS=pGssQr ׬D&' }'S\no)cGX_ޗV2nڏ]0qNPٔ  kVH"O76bBHD@uȻRnuo&r.' G!grp 1Mpas@l 3e8Lat)"9Ұ2?TL0ece3W^<:% h9 ~b+b )G̮^vQQ4򵲳)@Ґ ?Dy,DJ|Wl]zr۟`&Fnr )=ǂ2FL9QX`hh BHG*']C_?ga^F;J9[_@O?m.TGpMkX(D5]OT5'o +5gK2_Okg]EO:^~cqDdYMv~ㇵH6SqV)ea8*0R!{jPޒ@#DoJ=Ø (M'$F|YBt L-V!ci%?yQ_ io0jJDMH?'"&֋ 91LsޣK`4jgHTN{Yʚ\#Gא 2<$=eVi&6ws;=VR>M|g+AzJKJ^1Vpah$`\̯\tP]I4jw&57>FUAyN9-}Z~w _VNVbO"b<(Oq"1PZ 9C*0¹gԋ7p%הbw('/`5 *Vu<}cʡ$\EzEZ 3qwa g|0@'<G@z8mytp麿ᢿ,ݱZ&BMg{ˆʺ[ H La.s?Șyudnow4vwV]ǜ I qb63گ{D:t*]u/Ϗ}uP[Jr]絈ޓkp^XO<|OpjBQhL*)~Y[ G><7]#)| A!' )3oC? 'AlP%0ˌtƲ)RxIHs c8~w-H0l+[s*l"xGEћGW~0b? Е-Pb1fn<,03wB;7ܞ`Q3+U(#2fr7Կ/lmjUD$>[OEw AKx>mA{k=_Z4Fg!4:J\P}ͭ!)߉d_']sBl,MMɃ͜];{x@<-q"2Z*I(λJ(Getlͽ^ND3Z(x=rt@83/<1qU ?Yu -1<muEym.IcXA|*nUD<lipݱ{?9JM@+V銨bGpr]t;5)=,y/&UP;"tp dAt]c)v_HZm\KO2J ]􈖅u5TEQE*i2ee-SWc14K.سL @Y= H } ~uqf%8<<(+Dh[챶l=nk>9ֺf_Xƀ#F4ȹLwU c!ħBA`n d'Q pZ Rm{OZ0K1!P gn/!e\*GO ~x e.PmcWZx: gՃ_4H^׊!$~hHhylqp=tl#8-kjh3zJ)k|*Y|v,>jT$ih`ߋ㉬M)wcfFQ'[$U+@҇R8mʳi]s H'PHpR`r;类gڝaAS}@Dnl] rOc_fGN=YN*\ ˢAK4F,w]KkD9 &QIV0"RmXi{pH!lC%BGH$+> {CU6d;ECc8%Z%\E Y6[j|@We \+ ]=zJyso07p2(VXU>]}pK^/PM6˕!X| <'Œ,򸛪Z>{'zʆB\E^BެM0eU*/qf6T}Xs헲繻Ή\U#G&0 pD}1u7FUi4? A+E ;'M#| [>742Wd&\GP1 :2u!cz Cݦ>ąX->D/83wjWt#UjSt6ڃ0W\f% !F.Z[>Nw"Hх*hl JPۦ4R%ZWHr' ݤc$JY[\Kz&@D%λCVB߾ip+xh ta((v|ٙ㕬'bdnscKhPuz_bRdM܀>ZFy!7:}2;,Η`3@A?Si8WMqUź536pCY\CPkuv_3Zh~ݷ;Y==:D% aN'Dlr^!ljvƏ8a*V޺*]>9PB!=Y>ﵘc$A@+UZܷY=mЇ_!f_c xa_7D-ATSV`QvU,H()ajAV T>b.6X3W& 5ƆxE:f5Q4. ze(R<3@2ODmR Gy90P^ mHzEӮ0&mtONb5txe㨜 P) 2ʯƳSҬK2wJ~ʷX&\jU\-R4?F@Bp~BTJTץmF iAlf2g`dnR]$;tm^dE1e J>pe^_?fOm"`)'7~o~R IbŚx#&Gî뾁I̓fe'|&~Qi|dej| XL+JQH$J$g46;;b%IQřڜ}%dэ*Ɛ8LXrMkhUY#twŜ oEPLfCW3NDgݗlk972{)^([vnX;5 n-zƯwDV PshaZ<ӟz-3G92:eFW ’MKΥJ*N<16۽ l.OzfKRռZU# rʀû2:lq[@ mK! vGU8֙ݶ~w1)0"R9<<yS{NGd@{Eu-*4?GJ|Ufr'U)F"4jXK\V\5V[qJ]H|^d4lJj@&RGEZJ[ox)vOə(ӛ]I@|BћKA MkMQWI4QW4F? M；B%wų'1~ᕫO{$'O+ i.my{2twhijȥdŸ8T,22:T DO?;4/P uq>w4Iحu|-냈7}Qr 0Ueh_>nh m`V&V j Hl(Y%5 ɫN61êL&HINݰ)) AWy>Ad=B*a: h21>\+T˔%=]ǵ*ZG96{. ȝk] = wCʌŀCÅF1JסA 8GgKAIK`R0yqΙSXOeeˌ]HhJg4Mj)ira2yy~fNU_eF'm͘MViABfNsKy6A VOn -i7֢HmIƭl=%SID-гByC"hˁ{#ɼ߲oJihGmٝwE:b_sl Tb5zUT\R`D2ucApgi."*˄WkHz3ڤ$nMz$baaȉc!v1,Y_լ*4u6 ܕ|0{R(Qi#:7HS?[E5 }[J yc,_j᱓B;Ȉl&s'B<:<i/h-),"6Ϛ'h H K95~&`TM e.9 T ##V}Wg1]P~0(1S$ͺ:6,eJ Gb5JtKxY\fa@*d؀)(;@-rCj{% YpM2&7%40?qc[j*cQTKߴ1~a'MJCWUTߊJV‚;^uXY'ѷ*}Q;oL$)CU:Q|xV7}[YA̋+o7r9gE_ t;0JOLv-ʡTgNGri(r(RӃ-Ւ@1=@r\|&- ĒF8`Uup]kH@^L>sPu^Rb76%7^jBtT4K.mL3`q蕇?aրB ̣2IBQ=*iJ}޾|Lv 6y207%|'7=i8r,?c^!tgV9ȭ?*;U$zEjlWwnLGe>c=V{8o ~d;2*/t+I }6FwtITƎ!caF#G#ßR8Lz%O,D,җ GJ$23ItNxaeWz/k5-OͮM  3d@‡2ۀ^ԇk|)&^V% k-PCU" @;*ނLFIʽ,{ MW l`%לKФT\}4V}A@y[`"[lf'6=8߿Bi1e6e7A ]\JajZo^E1uiC((1Tf{нf2@v ߪp2 ޞrjncoo>x'ѬVTt=ͤY(^w[Lb\?|>PwOoX0#ZBzy4IqsQ(pꝑlcLlQ49I/^s(ǸS3z+yã`Kj7⤷/xLܡO(ʿ͡ `n]l N37PYt08y yh$l4ӂw]w?)uOEQʿpv5X~MkU'ۻ>fwHjFKo~6O3Yɰu[ä;wp}YO'K EXmJ/m'ϷSj,fMZs{ZrFH7J"PBr`TG|j_ØG SQx̲K~~̚60EWQ'Q om舳&{_vO"C84@T- gR 053+ámBZp]wyhV6;*6Kkw >XI6*ŒZTC^ vLT'XmҨ9jU3]w}g- WȩB@pZAŞ^I4K1eY0iB}47[T0 L:ytiQ=q%+!f Y QL(61``%-l5$(k],qjM_ -d(Q A )_=#Ҽ(`C-o m۞2KB ̹(h5oSS06N;Wr&I;-^op25 D "ߛQtF;3>\.eJ{lbTv"q @˛؛%=Xm.N)O+;?XY Fn@DR^=?U&WgbpDI<[+6T<ƚ.)<m @,ՒqH~mCo=0iۯj*&_%9+Ů.w2 eV:ƇDM t{l#YC%8- G(㻝̽?k>0D农Ps,8VQցL=^uC0>)$d8D4nDkW{)]jWBXaDp =Q(Ж ŸPD/Ό2UH] Jlr(C$6sa`MnLnyRD*^IhJ*Dž"1Qsh LC.o!#c& ׸9jb(sԵ ?I=˵?gmSOqjwCo '3.EdFh7|-KSBA"lB(??B5V:X#{sS-d2qv6>h\tsP怍\|l_ ȌEn 뮃D9a(cT~1v)R/@J תulb߆eQO>'7)1oKC|EaYpO*|-iEmfg(ЮB얗$)mxM.o#s ﻦE`{۫_j⚝F+eKy`kbAsG!aiTuxhYT z+:Q#Wp+@ @#p‘U~F0V&ˮ:)$+{y|]]&A[x{h=uJ <׼I-L?KRƼ|\GDƣcu=zhGOp8)Ib%ޜ0NOIuѶ?TgU#0<̏&?yAF1 `;7;ˈ v݂#:ɐ[b]H!p<4ؚW#؋"n`c SH&C[1X8$ǩ蜋/F }\}()t䓵x:sgʮ0=F |h71cE J}XVSKI0`G7Fa=G/Wnhfud]c%o|}Y3^H"Cz01›KeIV -L^n'xpo<>T%g'aַ+6(-|9.84ZԫUfR #ysO(:v3bY\.Q&-E@#|_A.& I||tKcW9NrwQ76>hOEAfb*p!d佮R^<CÈSVl ~|;&s!.[šD IEl"NY0$6 z!Jm͚|B>7tjx˿u [d:Mǟy'bԨyD5 K3bpqOQ,Gd`CG{ME &A_ WYamLվ;y{ w  f7dTҦcd?Y|a\FW0vo-H%^Ųʽ}vd.GC;3LcGQLēFKo"Q")Btơ#oPs/OQtOxf]+d^ ?-HmRq˂#P`?zȤʠ3u?r{ݽr*LڔHd[b6@ 08F/HWQ;,9X[tr!El"{V^GRc2NG`YAרdNxٱ h2L`z`,Ax+_@Ċ{:D' H?S Mf\⹲ޠ2Jiz_|3Ltpb(w;dk0ٙ:陹VR.uՠ3= ܦ[ٰ wr4L!.i"H Gu[ѹ٘VY[xhn".uHT†)B΁Y3kژM'gq|n2588]ʍm?]Q4 z IO 1 (5Hb5;*q6lS\8ٖs_ xYn_s8i4ȣƓy{م]Vg|>* 䕺'<7{?qgDcI%(S:`7Ay䝩xe2PeK Fy.#?@ 3̜Ru3ttԍO nPfB`Hij ++jXa{J_Ț~U55Wc1-E9&cI >Q&JKv6W+2U2wBNBx9YOi2փ&ݲ)LӝZ4(G͎K=u8E&A%nl(1/mCjQu \U.1?o7ĉ EZ㉿ˊѣ0"PݱZp4p`p$<:))u&=_Ӭm -EB%[{q@i6+"7abޟsy_`^fo=]]nu/g ()WuZ@-fUXɚ;R #0D )RPo>Z1-Z?i!sb/掵uG ]Y{Uw(#Sqq&VCG,6Nïwdxe2uC"562w7.{H>Ƀnu;Alo<\Z缑d}O9o B< ӺTV y Hc(@p. n숾d-qw ,PXC7T-Mn.2JQ .pC̬C-ԶoO>Ы@) 8Kv=PxT5C o]XCbY+=6Ύ ذY% b(mIm$LoXyoD֓7a!.U^6WG G!G*?ϓ y$ cJ?$1uݏy=JAuV&p? ~HkYRv(g0:FyEЁW"ar`a4R?4Ul7ǫC.5mF$ 3=K5y<ZORO=WG Aư1hR{D)DUq^rRb`M(Z7"4^"̑~{ yiεf襫/:WyAc30e@S{~$-!m'.Zm@g1PxaYg쀩jD^$;?TM.WE`)3RE5i cr6o= o :`ahYc-`w,јtC4pyb33iז f=1tj2yNtuK$)xT1bX| bC\CHHlAX2V*`|;e5gA=h1O"qׁ_J΢; ӄS{VTM瓊@2jkf~ۛ,_FUvF=P lhLB@Fܬg.B4s0;)KYv#п-]0ீ]QZޥѾ0nKJp%\`ΙN܂_z+QgalE&~ck+Sb?`[׊U`p-!4 tFSx?Oetx||%J热7ؗbJYon>ks˩X`de*_( YӜf@C#4üazݞR| Eɲ iŘ%*,E\pg*x|TsLM1ztZ7_ ʇ&}|`.R Y>t#x_\dtbn5 `ZF;QKo.6 l̪UQ6i˙k) a}?Ĉ &<( tV <=eniqJn͍@؂]y9:@R2R}ߕ'|;fӤ/~5=v5<}x;Ogh( L Yؑ SPMk=(L[V,1X'Brxk;x@>g[c>붬W7f 1m5BY8'>GA$ϤFrqcwύ;d͘tJψ(^"wH9ibASC zK]榣Puu=Rѷ`sXZeȹX\UIa\+)0۹bgg6\}_Q""{38hTs2s=-vjz zx\{za-0i$%/V(9^4j]AOMDOhX02VoO<蜂gjMгj3gK˖TMZ G~3kq\!/记h&?[4@gdo_v,R_Z4lH? *}68py~?f; ~mLuS`crbq~^/9pߦd?;Yo?!,(]†M*, 4WYZ}?c( 2)8i!bQ#X)D԰zbq4K1/3 07YeRԢMȑ eqͽA␖HWxkRGGѦt! "\5^!xx&2Н. hYZ%)JB(W.0z5TvlX?ވ+a),#I)ai|VWqd]xZU^KY(הsc3^ŰCv(ZM֋ ǵ`rc+)AOz6Ŧb6={ v%4:%ŭ6#TW^MR#4f~/P&z'fR{S8 :]CP,DdüJ# )J8j=O TT2][Y%)ҡF(DA}g46WLdINaҜŀ.D88PuHԽHRJ8LbN:^kܰO9qb6۷B,ީHfs裾 /0Ԇw m#w pdPs?*?Q m|KMz VgZ&—sTزl,<9ɡZ؀̙*$WdE R\ka|x K+2Z/U_npf{^*8YH­Vz~='}UVŬUA\Ewoj/) q6O!T_#I)Fh:Z^ubD6IzYI$UV`PgH=\ !qIɞ0(t+$7!O$@9U/<?Jd+ -7 ez(:cY f`[{" y( w,[y*5[m.N)EA͡Ab#Qnj@M vL(,q 쪲͍*%՞iDhxÂVtRYɬn:#%!%,^k=W:7Rm:1IU]g(}T9idVH_wAWsnN @IbwV>ReIoȒnŸ&N[~kN3 Kj=TGYc-Ud1"d}(b| }o o (9QQ"92"=֕ig`.Չ J* wd} 2Q Qy-l