samba-dsdb-modules-4.9.5+git.176.375e1f05788-lp151.2.3.1 4>$  Ap]*/=„E}a:2Xc#~2XnKQE*$F:°~5& / 7-I8ODMe1'1Cd>pA?d/ ; M /5<|0<0 0 0 0 0 0000}}+}(,&8,09/:|@|F|G}0H}0I~0X~Y~\0]0^bcdeflu40v0wd0x$0yzHX\bCsamba-dsdb-modules4.9.5+git.176.375e1f05788lp151.2.3.1Samba LDB modulesThis package contains plugins which add Active Directory features to the LDB library.]*build82openSUSE Leap 15.1openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgProductivity/Networking/Sambahttps://www.samba.org/linuxx86_64ln -sf /usr/lib64/samba/ldb /usr/lib64/ldb/samba /sbin/ldconfigX7xw(hH X@X xG((_PxX(xH8(((8'7ZX(HYH('x((8(HG']*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*]*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-4.9.5+git.176.375e1f05788-lp151.2.3.1.src.rpmsamba-dsdb-modulessamba-dsdb-modules(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfig/sbin/ldconfiglibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libcmdline-credentials-samba4.so()(64bit)libcmdline-credentials-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(GLIBC_2.2.5)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgpgme.so.11()(64bit)libgpgme.so.11(GPGME_1.0)(64bit)libgpgme.so.11(GPGME_1.1)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libldb.so.1()(64bit)libldb.so.1(LDB_0.9.10)(64bit)libldb.so.1(LDB_0.9.12)(64bit)libldb.so.1(LDB_0.9.15)(64bit)libldb.so.1(LDB_0.9.16)(64bit)libldb.so.1(LDB_0.9.18)(64bit)libldb.so.1(LDB_0.9.19)(64bit)libldb.so.1(LDB_0.9.22)(64bit)libldb.so.1(LDB_0.9.23)(64bit)libldb.so.1(LDB_0.9.24)(64bit)libldb.so.1(LDB_1.1.0)(64bit)libldb.so.1(LDB_1.1.2)(64bit)libldb.so.1(LDB_1.1.30)(64bit)libldb.so.1(LDB_1.1.6)(64bit)libldb.so.1(LDB_1.2.0)(64bit)libldb.so.1(LDB_1.2.2)(64bit)libldb1libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libndr.so.0()(64bit)libndr.so.0(NDR_0.0.1)(64bit)libndr.so.0(NDR_0.0.4)(64bit)libndr.so.0(NDR_0.0.8)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.9.5_GIT.176.375E1F05788LP151.2.3.1_SUSE_OS15.0_X86_64)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.4.33.0.4-14.6.0-14.0-15.2-14.14.1]:\ڭ\\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USanpower David Disseldorp David Disseldorp npower David Disseldorp npower David Mulder David Mulder David Disseldorp Samuel Cabrero David Mulder ddiss@suse.comnopower@suse.comJan Engelhardt David Mulder Samuel Cabrero Samuel Cabrero Samuel Cabrero dmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comSamuel Cabrero dmulder@suse.comSamuel Cabrero dmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/sbin/ldconfigbuild82 1563035400  !"#$%&'()*+,-./04.9.5+git.176.375e1f05788-lp151.2.3.14.9.5+git.176.375e1f05788-lp151.2.3.1acl.soaclread.soanr.soaudit_log.sodescriptor.sodirsync.sodns_notify.sodsdb_notification.soencrypted_secrets.soextended_dn_in.soextended_dn_out.soextended_dn_store.sogroup_audit_log.soildap.soinstancetype.solazy_commit.soldbsamba_extensions.solinked_attributes.solocal_password.sonew_partition.soobjectclass.soobjectclass_attrs.soobjectguid.sooperational.sopartition.sopassword_hash.soranged_results.sorepl_meta_data.soresolve_oids.sorootdse.sosamba3sam.sosamba3sid.sosamba_dsdb.sosamba_secrets.sosamldb.soschema_data.soschema_load.sosecrets_tdb_sync.soshow_deleted.sosimple_dn.sosimple_ldap_map.sosubtree_delete.sosubtree_rename.sotombstone_reanimate.sounique_object_sids.soupdate_keytab.sovlv.sowins_ldb.so/usr/lib64/samba/ldb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10611/openSUSE_Leap_15.1_Update/732241d31e5cf48926a783b0b71d3f7a-samba.openSUSE_Leap_15.1_Updatecpioxz5x86_64-suse-linux  !"#$%&'()*+,-./ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=89859d3268813cc7eede79d5210bd0fcd06d8368, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7fe32c23c1e04bc4df3698ca93944573d17677f4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=35e004bf9d546e8a76830f530dd95a8cb271f949, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=48be98c59d6a922f274b60c90ab07f5cd57690ce, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aba66bf82344ecef1c0144e727e435b5883ea932, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f45c9cb8cd441f09cfe4f1b7d8f5a1e79dd50f5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a147693985807c13acbe3adf116fa5b7306d1a2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f84755ce01022d94b834ebb5eaee93af38ebd991, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a284b1610e4c5cdc208d3cca734dff60885b5ca6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7251e37d528e61ffe85a413f2f9cb68ee2e94bb6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=47b1c3cb9b02fced26e4856ecc97451ec78674a3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9ee9ff0913e35236b9c5588eedf8e13cf6a78317, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9158658658f253e13fadd7a081ab720a674c6525, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=974d5983e455169507de393212a85ac02bfd01ae, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=da60599e5be163a06e271f17c4fb28166de981fd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=583a06db77d28adf1528f55944262b250607660b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=af9404a184bb3211a0f3c260f6a1756883f6a9ae, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4f59d74d27fc0a4180eba2cd39415e22b719e6f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d322192ae99d2b575ab4a0b97c48bf2742ec315a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1192f459ea3d82238d44b3c09d52a825474a3d73, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cb7e06d6e36f8164461799706d307db6dd6b58ff, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=da3a667023c62058afe2203cc81712d0557ca5ed, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=08d8f1ac22a346b38d93a65df18edcce986517a5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=34946dd7ae46fdb97d1608934cb86f1f2cd1772e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a85635cae0ef73d74a174b782eaf2443bfd0d2dc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3888fdb5a101e4fe6c37c26e8636d66cb952bbae, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1093124f4f7342569382eac95af34ca8d33fcd31, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5b42d5392b64ece017a2b2e916e6d4001b516598, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=821c0cedf32060de5ec4f3d7594718d1d0a3cc3f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4272346f5cc834a9fe77c56641713a16cbae49be, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ddfd90a7473b9676fbff6dc5d66bfc93077b9437, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5fa568a5aeffe1bbc1bb5a09e39d7f5ab869af8c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8f983b3bc43fa779942aefd629336fbcbd99b8fc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=286c3694ddb239210746e41569403b1d08ff7a07, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bca1e2518a088477f599d510770a2a4ccb15a08a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=41737edaadeb8e035f9b9ed9d61b4f71c50fefc9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca7d678d2aaf017e0681c787c14d35accc770202, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7df140cfe5d03b90606fffd2dbd7569379ed984, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e3c401caf29d3f60d7c2beefc987f897e273549, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=75809a937255c37df3b8eab006031e92134d49d8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=710dfb2f5157e7da0ef4c7af523c22b6208fa840, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0b797b2aa432a1e6de9a3d75fe74560754f82d08, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e36715269629db91b5aefc696e1116ee157c855e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c1f129e69b50a23aaf79399b85546cfd85f47e2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2bdd1839aab91279f07b98e893efe8052dc8cb13, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc3d17b2aad4b5b0e620c340e8cd6103db3a717b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1630327cf3465cdc9c7280c6368cc44baae0584b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9f3e8e840cb85d36f3468a36c1f37435f775d6a, stripped9Fd}1EPYyIRv 8IVas~   6 $ - "   RR^RdRZR"RFRnR R R RLRfR1R3R7R5RcR!R2RYReRR]RERKR0R4RmRR^RLRdRZR"RFR`RnR R R RfR8R>R?R7R5R!R_RcReR]RERKRYR4RmRRnRdRFR5R7R R R RcRER4RmRRbR`RdR^RZRLRMR\R"RRnR R R RR7R5RcRYR!RaR]R[R_RKRRR4RmRRfRdRnR"RLR R R RFR`R6R=R7R5RZR!RKR_RcReRERYR4RmRRZRdRHRnR R R RFRLRfR"R;R>R7R5R!RcReRGRERKRYR4RmRR^RFRJR"RtRZRvR\RRnR R R R7R5R RIR!RR[R]RERsRRYR4RmRuRR"RfRdRnR R R R7R5R!RcReR4RmRR"RTRHRLRVR,RnR R R RdR7R5RSRcRUR!RGRKR4RmR+RR"RfR R R RnRFR?R-f8brΣ0t C2yS+fP,Q O/WJkЅI T۩EJ^IP|jSw܋v϶0aW nP kfX.3Y8́Y˝JH%ɸt Vϕz=Sx)V}#܊Clj\CFO J7481p'A JÍ\$H\`@`]Y'CTS݉4@aM JXK!AjC]Cӝog'oj(6[ 4}TI LHO8 L/s N&Akf_Q}1B;ˁP$&@$L!){YOcGpm9Oz>|/ _nGίC[Nz{w,DVąUPQRJhoֻ+YE5^ Xv_ Բnڶia^\s?ȕ=1h{a-ue/$jp}hk8B髗x`ѥ~DMxF1z>; 7 0O ɋ*,. Mv&rDy^I/Dp眊B%m G]X2434[ +?LC{Dة)aը!.ʛUlX89Zԓ(8MFGPwSG^}uL]Na\Bvoț=Y3fE;-76j[gm0 ئ-F73os95Z*/cK"Yz-=?G~˲Ib.ݓ`I|܅^)=#셺#Faִ5v,rIj@exzһ3$KFP1,95L9 58ջr ީJ;nP@O4[?[m+1ܵmc5_6!+r?` 01IS&]؀f-".`tߩ`{*u_ULT-_S}r,T{y"W}73bGjya s{ Wj~CP "hlR1Dte&w/5gOt{9 8LK-u8r[f,:~zJ/Gσm#J7QVJ}|Ohsg)#Y=#XV/)71mr\UFd6o-ΤKD[>, +-:8P@=dlO Zv+$7Ӕ=ww 7mjG*+pmñHe۩p G۰jQOYy_J $N8mػ@߂[jx#.}ư)xx$MPsǁ5[tgVݩj]u!mI%+3y}9MP1>$=]Eʃ>yP C\h{4 7µxz#87c U.|2h\;RcX@{}ilԯ\Lj:kk?*S/QCgAECmȩu{ n7;zE!|.8n%v1^q^%2EXU^nUQu-%IKL -!$H<I}{yA7)%S"J' /ڜ5jgH`L3zz30=)9e 5NXD^wF%yFHTsPjwOp%h hvQm+e6^'stvUǚ$YCӝ-w;X6lFPe7kc;@];ɶ/X@Q6HxB&iȡUFh>/{l:j">z[TY;t:^*Onsq m7yb#Ts ȡ-"|4ܟ&D[6^rlI 5MT|BTi9\]#O•,p?V=-'/m&,l{Ɨ2#OE1F!xzy,<J% }f$ќTgBO`{ Q `xF[™L$]T_,Zh7fQZ VŞyL>Y|-㖗5ԕh}ޖ0~)g $n Ti1)cEo0y$'#vW%jZk5gwgKfZRlitQ[=ռZ1P@ d7MtO_`7-cDR{}#Zֈ@I^W˸4Q{wn6;)'(_x,. *Nb%mBۈ_oky? }kJXaڦv4p!x$J!hH +-sP!nD ʼOq9CQkAM4P4ws_vXˬ]hE;;l7ǮXfO&-3٦2xܠa Z F?N9rM7գoV]|+3GvlgB=0䃼={cy/](Eͽ3Q>%w o^+aG%~݅C=?9Ka99JDK; +̅Wn ZNXvM&Ƕ/ 꿡yAb]+ͶЄG#2)ްc͇*1zSǤ)}Ǯ./qsڊ#[?x߸=薞y ΪG5]*X 1uMm%]ވ=;S/+oB&_x5(X(tlStx Z+Cff\3oLȦOհ_P.tS[H}-L8F䜴pN1/#AhyemESyT1 BD үc;,ن^pmm|QKVb( @ރ}Eic:ѱ[" *_gkś[@ Qg2Ǖ ضڥ~04/4,Y;[jpRqЃXF'Qeu0Q(Kh9UQ0NK8sY-iXɧT8U4Up$ZS8 GR"9t`c7{"VV+grFKSgew|6iEVSogUWPLIoYȡx^:V_pl L+$Ցs~T:d1ټgT\o¦FЮO(e>>o@[H;ɠ2.sv 4-l2MX1 $B{",GvW+/ϓ?H:&U';/ϲaZJr*"k&KzQ( !{aRTkzvȯaizwajMcٔĠt#_lxǑ@`I𑿲Ob d~ǽ I B(sz6rm\o@%w>+\.]SXP0 ՟ijp7>tg'imʸX=5bS_q~B~ LM^势@ȨfPAZ]: G?]*b[Yr2X蜀E~>ŷwH96L 7S]/cNĒrR# }.Ue"K#{!jϕ[ j(H#/ZpQL:ݎ%_l}(u $u(/\ ?1}l鶩qW%["Bt0_Ll%Wx?.|NR=\ko"덆58'b<V찒` p"~fO:Hc'\xfLrc[z͢廎* ~LNtfڄfӓ6>pȤKO`UmeVT?: 1$"E9@]lVL/flw]/ŤpR6 5p!Y 9bZ Hh.GJ:% i^k=^Uy\!+{nqHld0g ﭅/m2<Փ.Zm23b5w- si2{i&W:4H8gR嘈n)2hX >` t _]X͸N4Lַd:{)=r+ZaE.R_g/4N+o)G9J.郎I`Яv|ؔؖ[^<}c]*PKV&๰B[!H{;JIEPM+JSTŕOƝʽ8_}7qtWXEhlw:˃V]=.kJw5OI>v:X9 ΄#|Q~:g(Pq/f˱9j8m$:[Ũܣ4w*WaLjKԳ'iu Ei@ʺ[w޹`>DEjv&߭43ݻ+\>$1P%^c% Ʃ(uoM/`) bVSԮ+_Z\z̨\G ׵nݖy0\ymF"Ő_ӫ&'[}2-nH,~6-0;##R\~[.88fZ&#gl",E-d>zφP3^h"'󇺨:`P@~O=P*]|b뎹B5|݁YGuFZBG b 9z.{/-L x66?H$IiyViltH+w -25nMh5[V𵃅\#*<  ex5*tZGTπ^_ *I_/T2,SjAfje(F%5YS!9zr 4h0֔hxDDmIdHPkEhWe|)h&Næ s쉤fN{^ ٚmZHwQB`MMbu`(^e,nmm (\:C0:/_Դteh cݢvC#s*?Y׬/3NPg*s/{,DDEwBD[Q e::ĩa; M>Ovw'Ч?l0$,W%%"hAm=${hDv}%C #!Y [2lH@4bƚa$'/)|r:QDDqItU^^Dg̫ϣV-U>>,]y:Oʔi C732- ȡe%vYǔk7֎}P{ '#GmmQ 3dY rOPl-*#$'4CP n{b>\̂Q NLmMb@BWĤJ"<Ϫд9et$D{)ݶu(ї։\VXF{ܙ/WPpͪC%[h;6-Oc؜mL _ffM|hO\}rM306@Sv,eg悑w-LFK+!>i|o&B䄀N NUmq [,evxG)FIzaub\Хtm]1i6#=n-@@qf0 HMQ3 28T.m3!):#*eX)NίEZIIdcPh=bo׏cY`e/%-YZ]*Kz ^QEkϺ+4LL n3 aĵ+,kMބ5\=Mk>du݁k ,NxduL(6=gSjZ )wt۫a_Gvm3"6vA|7^xzqU 9JD~n(YNtЃG:ACťB0;@ rxf~ m"%f/tl7v2C*üOϡ t8HCx,?+4o"Dj큫(T% B\Z)pL# f7nPЈs=95yͅ 6Fi} ߌh1 im; r|QC*tykyy8uqDMwC};3rZgi];ѶF nEL6n<4 al.(o]*͗yi=hQh3TzӾUfRwFjm0_B`J)tM'+{a B-eVܪVJ&B9Ikg2Uh3M7MֳJLE_i7U {nRoզ\,e<8 ;C2r3'c+U^7' u4cIEёh.ȓ=sN)2XE;WJ-@U;}*lC zkuN5 Q˓KP3`%xIy{y#AdjGcF6һ{r<x O~4E=Z{4ε'HE˳ۍ| P;ݶ\] K50 v@oзʠJفU2WI8+:ȉIwUcyWR=~,.+^Up!B6yj`CoTɡJڞ ½!.|,bOp4|oG{&srU 唘&)x/]:Fa- _W Ku3Yël`If ?Af0cq_yvRe)^M bgd7{Ђ{tޕgmȮIFStuW1J}|7:N|yA*d&' y,t,9QA]N|l|@uW3ƒ>e2@ҥզrb,DɘDډ ˉT%ᤥЪDzք{SCpAA|vevW19nNQYXSPM[| Z;G]*~Od@x?̹ kS$. 5 ̪Ί̻WVPq-ar6i(}\4cxK`pxXN "?)F21@Cđ-Sy}>(dȇ zZxՖy+^4\&VBmL^돢'[Eqe;lukV/č̽pK2QbaOXaE0 n"}ݥjb}ebUhw;0m=+J ^ o^v]IUOҦB8!vi-:yEd37)-#ȜXR4 @=ƣܶ׫7{{3ևP"prJHݥe5cr֒e7č5ӓBҲ5 e'X{-dmiZsG^ \E`W{93N nxu VߪgwKd5h0{=K\%V- (13 Lma{<Ӆ_T-ކ<Q *ԃ2uX&[Mж 5ohjܭ-B#/f9a3&6`ro׊81fN]Gb"Vit=H.u:wOs1|;)sqj" Q 0i,aw'Ov.zg2A[P>kU|0,vX$W7 WMlV_tW -`x"᧍SGsB*wITV΋p{.9jW*i3yr!)GvV$ I"Һ`7~-TDBA-Hva Tg_!BF 2*_, L!EGmKSN0/mLקPK2EŰiBWZ1/ȁ#'ͥ`|&6h<1ڇ^*RR7w21);_Ru1}AFIĮi^:kk)e&U~D#}^J8pikj~Y1?kiQ ouPᪧ wʗSw)FT鹦V0ʴ%̓?xoL!0[fi~ĊvbR HLOU "x̦ O@-JJEE ;|,cFX =u X )k|G ܒ+ed2b$x 4[i6DKʪV/8rGB{Q+cXEw&ي,}SCgzۣf1 * zkJ'6}e.E|߇oT5S9nTK=Rio&G ^3g꿡;PHGius Z*z_\e|I* XʢN+`rB@<[;碖_Jg ԬǝSɸy~:zӁ q~Cw`_9SW4_y) )/F/P׾#Զ혁VXn'0꨿O?Exٲ s/bBXy"~p-a"sZ LgFbKBaA G8MTn1_JK]nL}=ծ}.l>AzG֙}V#r).jLf|AGM|f̯,|~z}G vĤBmr:>Ll06/0D3+ ].սun&{z{`L")Ҧ w 4rmIJ3t ~k۬&)S3SHA@*?QW`lB7^Vw2=ِ+p)Q_;k~SRm~1C<`ܾ]QQh+Ӣ%Cjj$8I/ʺJ0e \Ef ^Vg+(o -'za[ tD6Uxӑ/e JtǾ??K4VfOsPzxPKC4e' VٝNL'GEʵMDLL=Ehhb@-Uzbx!l܇8۹]}hʳZE0rVPl)u[{<+L>q+K3yKj'B{e;񥱻-rq<W}ӛrFA$>i; 4e`7w҂nVCc3h)!Qg' dQCVfяmݺOVpDHHplpi00(^ʵkSz`4(=$fw!LEoN!]b/3>)5< %ʳe(UxOd m,fp<6N_]s$艡fmj:H\Pdj $q6Q\Xv9b++x OvS,k:GEe٥}s4ē'wGfOhcF7'8KYhPvc0g{_ƃ0RQaqh^؋*xm =ˏjx5FϴRߣp@DwdV]"udžηMPmg讀 KfvĬT59VS*u$ɏ{牀JK {b͹׈izSWvٮ3nbƗ1{N(E/^19toX}<ߐ3v Vwņ|o+"]9[;>$<8`!:BR|L} _#k8zR<] ւ^E0,G_h PSk8TWz~iE[rzOSDŽbfneeiGa,5oo5G[wm 0d f`rW橕{$ an\ =ݕ?Hѱ@l"ye>TMs *tCKR58͹'L~JdN?+qoda߮C 092ַ͋}NR&L,`lYx9nBNh}@Vc6ѿZ,PՇX>soSCAH0&NjLHNjՔ)⤢'^8<&7\fY*t~!@N>§y#;/No{VݝֿB[#N~BUZGw)`1%Cl,bge%.5qdI$GZ 5j.l*0'NXz3-6'n/&N=$uf|H_I`NIu~`YB2v sU Mz؇nje1J-4D<9a[j_u`wq{7zجw%q䉥|F|1l`cm_s}zڑ6z cٴ{R/jg9ޖoy9Լ ݌ fc`r %!_ߩe"iޯrRk DzM#c~-Qd$jNl*̯/ $9ioRhV/1u 2]{,Q: AnC=Xg}N0x{4fV LC4"28`6OAceQfaEf W.VSwU8QJ_NS* Qɶ7ŮVګhC1ԃM;@bwWJBSɜRu݄/:?'4CIVnWvIڒXұ?;_QQ! hJ;*}O H$?0*Ȑi\k]}7XIXG)M tZu-B!0>@ΛۙY%b"w}SAs+/qRe vMm&*b76#~;#?'>ƍLoezSFoMɰ!p1'>+oa$N)t/ -{I„fJ{62-خrJt> :!8D{J(ciڹٳN1#(sr[$In0nEfԵja(!8G+~٪mߔY1w= 4yJ]#~^fmX!Yך`Pdx^7L,3G52E< /fhfl#&L"*=Q=.aS<;ZJH>c2Rz cguW:u`{n x3猴d: hL$>F}s=iڕ{yUCl%`);lfdz `^*&$]JjiBW8:~>d0%24Z)HŞd秤EkqZyM R\֔aPZ9%@R+D="Tt 8_-k|CQK~؜,n;y^)2v)x&SQI^:b@}]#"'!4,W&K*v ш?HEeGF3IQrػ0"}_x $ !E{Fx8W幮}DU]?2b+'3WOW -ެX2ewȚ$;hG0xXCm(TfAcZqk͙)}4>ZZIT yLoXaVhIk+thh*Jk^;~2ytX??/a~rqIl9Mצ}@'ʮ˪1dO~EIFdi'P+ʕvsKXq/mjٙ*Jj+'&$'QFis2& A?Z'C4NUc˝g &0ۇL*7,8,4Cjuf2n%IZiOtmV^,^s[&77*>93e 80lJx;j`9k-%]eCد{X:H =Hd9˰ў*;DV i.jtM! 3#d~3N(߮1Di':&U1=j Tj(@u#HopjːLϖHΔVg_0X>=/:931b{-&&9Y;94".#Xr X{G6͂ng6To''[Y_SN~G'vv*AxVPAu{n%o<4ld!Tn .Xu[Mj3D]\ȡckM6XFd8La .Ҿ&8(.KUЅD ׾(0+UB(%gI\%f|JٙMDn穉YqD3o(z. =E䚿Vd5qẼGYwڡ#Qw2a q V&z]K{%,NuR jD^jW\C9pο ۞[xa`{8&,ƌnײԉ-McS6ew31dp%JWYz[#!n}Su As6Qz ov09țdژ' f!y$(G,]#tI9Aj4ħF:C5|5ai|) t>q6ڏ2yUr/XXe&TcV?ZU;9ٮ.sݤßjwb?u`(=65ǦO=OPnTqdKzh գ>C^ԩ "MuR1 }=( B>T+'h>Tdz\e$Oß}l#ݢc$82Ï<vhZ}IAor0ظScIwS8I jZ?`E/K&7o h~r'̚xҞA "$n;3I>V:g:$ҌӲy *>=fJ/,IͦE =ļkPs0-"x!o.tB7(MiL 3.q"rPքߧyT4+qU:KW9!H~Q̕gڥr )'vUD\Xf)(K\\-d/`,یT <'@&w*%m޸nNj*nek?%P.[X>$.񁦑񲐘_M`1>:ivzq r /x+qEnVWXHo,ѷ 2p(Fvˠ7qV1()y8_yxv~JLj ޴psiD~P1AZިzi* hn'o*n,&562C2ИKtx(iEdxb7`.lY`˖4MF7.J8ś:NeFlJ M9"KF~=N uEΚNG;G7]o;e`IJܐbiy׬o'-EK /07}~*ƪImaF\Ƣz`e߮V`We+Hd\z)ڊ&z^wITv&uEK7rOfmjT"[Cڛ̤썶Kyv|L/vp{JCzݖ9{_tsdmϚ\f= m=>v gW+ڠsӗkvpA? QpӀIkV)J1Di^zpe !L-dZ\}p?2 ߠ!)EdeI"<}!kzjB}S&**1L A'Cuk|B: grV(DxȄE`;18xD*a#@5"Ű[+iCT0ml6F4/x aAt· Ȕ8Ŧ!p' z}14AYMfM:ީ0 .ez7O7.j7# ˓G@UGkcKxFtfmE_'KN`9͢^NCS7e5&^\E>'Nd$КAsMv 9A@yefO(ϫ |K!i!SU[,DTCYf~az:Oi;)/iW9M;DvjA=Y{*ZmN+$.xbJ:7WhSű B;bpH$1I6! (n(4NgSa<"N<܁˽74mVÐw$ԏl {2ocÉ?WυkI| `'!ȟԋמ~Th?3;njrwk y刻xŋ)1qF!sI cn&IjsZ\JRSMU@anݓX-̍U'("ݸ+ژS,Ng[.}:3W_iͺ8.?L_@R&spbQ?j)~/U r q wzM_umO..s?n`۞uT:"<8@Dc/\уm?@`<%F[)ߡ6B|t0M\>H@@pWåG[#4 #U&n )Ѽ PՔ3J7ⴵdT\Šzn~Թk4ZQ!`}GJ:YXc}c?Csg:`|zޱ_ycFyJ.w„caz|D<4?^_鱳[E ޘxe^;豰>#7?8bRu'4 &3G>d_O&1ajq nuFOoNBIrinT R1X*DF$eٞ# AWO1,1Q_$q34WA2;Fx4e_p-)b/%E>.Z`lO,BCU);iBJpEOJZ(iڟm`v#<|_wN{W)E%bt珰!r $u9qftG>ۑs6iѬ/8;a?%v!a8G'}FC9=(l1mZ$ SpQ,|/)BFB#^sT=itM|DkPvi0$ޔ$Р(c\t^&b.*3aK'H'xXMb⦊Ә}`APS4)Ls2H ۆapTȤNң:bZ7}P mHA;/KuDKۺ 8eSĹ~ç"dGU$EfS. <1PIE6(U+St\)8P. CxkMU#eVp޵EQ4"G{n#Yv@J->lj׊ 1Wα)=fo%a?8"afp0IFםP ~ѷ꣍Rj+rw49U!cʞs/i!O;wꏍg Ex%D2>״ U*@:-}S"maaⓗur-n~ % <\kG #}9!R`Yh픮V6KkY#~r-K1"ïpނ)ԒG_kw_B2(qs|7 ze2  53,^\!@~gs@*JbӔx;#N$2|+ljwo?dY)Eng{uMӄ7Ɔ{SRk ?No y> Yźί^,krJOҫzt/#vDa?-qח.}#1&W** %pI8GTdo<]G#pA`Iպ$PLPegAO{#DLex , έ$:U2m`ʳ=Lh*UgօMǀ; )eVZ|>drzESP伜=%_TY@%Aкs[&` }8Nzr@F>#xEOfί&@`q)>Ykr%b0 B7j:XH\*c "GRld:Ib%@* }nLF^j6 Z]VF9 ҷsyL\[lxca!/u'2t+=?qB$@Ғ$͈=[A_gJ}~PF$CD۠o⽓r^h :|X9zVb`q^$(IgQ)?zRADteQ@g>TWᥞb]42YG={BAԧjQc-OuTV(wjDQtri@n~P!˛Je~7Sx"zOOP?ٲ^I[Aē`̴4Q ˇWWN77X'hn.]ϫ}߰(7 vQ:S;IXXSGʊ6PU+qa( dd )Ñdtz*5SnQ__Ͳrq+OЙN`N'> \t$aن qקOWd3y{a޺!y܇5yRmɿ?o"fq%s?2X2(.jI y!~u.|ҧ+-aUc,^s5txvxW-6hpR*OXde>x .X;omdP3 o.ή|,sT䅵ܾRBp4f6?2.X=sT)هU]9 튼elteV$ be8N%Uڙo&M!hf4 UE_֛9pp:_ J150#TpɑMօHckkD!(8`ǻ.QZ7%KQiVD1-UQZղ nrs8P8;bM4L6ul|RLAafjKKp<`!>·4YRG12:⧻2 h%Q3i)QXdwbZ E5~6#8QF8|~VKvް3⡳Yl} 6UdzFP4=׏ܥHkI \js(8P GlnyVԱE8Uf\ޟ1 ."Y^nd9{M 2孆JПTD/}  jify׽ x0ˡEVFQЧ(jACoO!CGRTi$)$.'G6+{/fAQuGM6Yo{A_rvvtѽF딇(+nՕ E[A;kc U9-A?N vXƕ6L$.ET%Y]. )$#ES{gZ3qw$iE8G8b=[ɱU4Nr}J1]/uB|B>:v*ΐ|DgpڳE%> \z: OB.87pFEORz{C_hKsW^0v)pNz@ؽ L &gYF$3^N̈́#y ?R!a97u*7w#.WV_'Ou8Ytbt?<+408G=P>b"[ U{K'TH빱=nPf:npt*g;/}̣=%Y1|v=S0 &Uq A[r Z.)=jcT.B6Cv#Z &z_ ˙H/[+0?Z%гGO9\(i=ʬ7!Q&W|#ARcbNX ,^1P Ͼ\tv~2QL!=޻lHm3*C"4evͯ&7 e>הxXS`xz P['{qk k '#_1[C'!R:o􍙋h*3hH[P2#>g0ڲ,&)$ld@u HAҟjiϚƯH"xvǷl,‘kr+A뢜Ť?=bGTݽpr8@=ĭ)4bJF@c=`C>s"2ٛZ1 Tt~ڜgu#=y n5hlέ?N_7!* T( hJ:HS)䙔F}-ߟ.L]&tQvE>bpFH! ܸe,kݼLJ6{ 9m3c*۞,2@ Z5ǻ0NL 2(6=@2 g~TΫv7`9%ƏpʫZ/~#kJJ'@s/`u}$ޕӹ O4g_!y\.Wly*M~gak0m!d8y7fYNVxwHlj5'ޖYVVJ@nyuH530#GJYUGFlezW0`^!DJga~ȑF}'es *<*Os+dq_4Թ,t/>F]K S̜3_M )sN@hu _bD讴gPifϲ2чdV5-ȴ<8r&?vi\ߞA\]!z77 Cu V۳ʰJNJxu*ca3Бsq/ԩb"HAK( % K2pW⁐(pò&n,iT|~BM QܟPn:hkOU;~*GX}?N.=88@Hx%lgnKtq/pMy / vwh1N{UkIirY hxUpLۢv3A})DfF bcG~ܹ):4vya=nBSɒx6mUZjU+"pCە9<  ċOUO!O|Dq(f|}`TN}D.+92#"ܦ x0?GٛK]3_$¢(OhgjݷΠ|D4l,- † e̪5h 42;7s.V2qnq!fSH&q{TZ=&8`ٚxhcad)WX;!U7*e g([qgrܕ˫rVK+xn\K&ir-F?,^ٔ,jnA XAZBzS[f{膆~y/;Fqs ߱X ߶x(*;P:Ÿ\Ĭ4irm2LƦ)T5a3.$9ٽCe]: E*48l;[5גE׫] 3?ڼU`}yy;hGJߎ\;g l rߘy'^̗#L4նnqGyr)WV eƠN'04Z +12e^/JHvGް4FGDo/m hUȖⰲ?o_ϔ\}ݜPFW!e)@J0 5G_pM+>yFٝo==^>94KؔOA4/}`^ C\W(:"֟~ݰo jStZRdOp^ߤl|[眹'x~d`&^<m1eCh-~{m 19/>I,tЛMfOT`1,ajטC'}`5Z!w|beJ1zӸ.SWk4*q^g늚\9AO<]T~IyTFLM"&kj|ZG#rto! `Wy ;[ڜ`tOx$wS%e Fu?b[h|G @NVpKXLKTUM;ˣ%bDB>1cuZZRܐ~ ː5sI,X2bw_xOQ:dʤRSύ'A= 1dHO× ^Z+9I?=@BT&(6uT5ذjHe6[GN|A=D~'x熇 %/|_h0:i>Df2p 3h=K@ aX#^W'I}<ռgȂ0(AsS a\-L/O܍|#'v/ tE׸k|L *$(lQ7]dRCVb,N{B]SP )޺mLr8["SΙ@>譟pՍ[$$%=z +#lafFT4$w9~Xk9%OPˆЙxE9*9L_i˰MWR'}IT7l a|\z3>u@PSNxkGnsW0+  *> sWK1(x30ݳqjig ZaLjBdXVi .6:0-!C+?ݷVLU1j_'jkYf@c=zNxWl]k@#eDلۅ #zns82 SWj,Eɾ4K AuQe]?,}xj,ΧkCQ.\Ϡ߻ڻalc"aݜ7d7Ԇ{ ˵r҇ka{tAdR,oKi.ep`=R;a`ʮcay\:UQqcǀ2$d#l.bTH|Q;MAey+?[4͐m5';V0ΣpshFh$XVx lKfGX2 zj2^2vxwo֯=y98`\Oz i[4#XgM>\0RuZ =+ =8q]z3I< ~6kI8JHG(>4?2Ϧ (if.'ܼ@V*~ΤFfiL[k)+})V|dv sz? xA,#[<3)a$@+=*J:K7JY!1@1Uja'*`Q]Wy9|"D8Uv?zz$cxa?Ӑ5 -%r=Qyh^V&wGΠoY_}"> vQod&?G:]s~CwK+r:7:6IaX8I$?ޫt<Y22YeNT^ٴg'ʿXD?#`vNy1?@~*kc{6h8o9B RUl1Ƒy0[?<6Y3٪&i7#v`֚%g uh?wZ({ސ m[Q{X%jxAC!<c\ĞaC{.kQV k\v}' t7X.#1/=1EḄN6Np(Vs% aw2ه#]"ɻB p972y?P3AcI#fg˥i0Ҧ{q*@Hv.` 28zGyJdYP>vί^INBz"hSEެAQn?A'r]ղ@[>򑒪L8[\~Aطx3f.%|zQg2vͲ2:iY9':L+CtH IJP=ޡP0v|nq=15BB%y >Ưgu,wb;~o5GdEKJAiZC#W9y 5MgoBJϱ=[y[ք49M?@_mMd12˷!"%* z`ߵ\i4Y&<Bx1 ־K&a3u(v{Q퐓P\?QM/?fyi8C%.uE;Өϯl#)x?5%-w$(VJ8xd(>P ?\! j֐VYוLGϧ.A<7*6Z0z,,xs`/׎`x|-##<}-S vpK/{N)!5"`6n"Ӹ&I9+o(-g`I^7!L[Vu^@a(QEcU`]A&MF~9ŇvRb:1qzߡ  p?veqlݠ*XS'hD*}wY<F 3`W'K"KzAW<"?AUT(.)\o# pd[f6IClc[;2@*a/D5ȕ@CCF)EO'2ME#sV\B|77xf2wLyXd~KQ| Z(Xx hqCK*ŽFI1+$[czs!iO9ʆ:45c<ޱ!zI5?q {Z ~#MZн@U6?N."$.Dɵ_C=Mt m-QT>NbS?C)?1.RA˒/+9KBD#"#w'o6ѩMj`fpGnfaoEw/65TOsۇ@HmL SHvQߡDɃ6XSyJ86 #…Es]Ҥgy-yWinzx4wD@s&I%:k Iguhw.GQaZ$YI~tvh?:0;,LTϫDPj\a$f3 #<{`ڎ?ȯlV` K#Ňic^N _1b#AHЛzW#!IJe:mpwdsʒv̷8.I0?p~l9uV<ׂhA1l}tя^tyI(\0z@tľ³!2 n5[eytɷn[#AgAm=HΕ_KET\`om"6BDs8<ǭG nڬ힏©#'t05y90QuVvGe5Ѧΐ oٓ%Byjåpy X($ E$uQ2("DS< :Hh3 #sL2+}vv 5ٳD{ߙ, 8ȟgNX[IuqA%ʴܪ院.}Yn!njw:%ۊ*~ eAv;܏$zط TmCս k)۰IV[HzΞvC%dh53|%x w-K}iڧDbSv'+[*k ;13U#Ϙ{n؁3"۴Vx"7R3󄡂yAkb6 O4J:y1' 2` b@G!- ڋNzޜcz}uNC䛿6^ubhOb AzmՂNw&-%$HA =Yz3Yu+߂dXr yIR ^UKJ\8ah'ꂱROB&118d"s*SX4:ρ#h!t־]^(FSkdA%'ZJY#xetoح_i{G\Fg(_Os*j2>}h2XQ3;P*zX3]n DO,6{E^(,JY? pҵb>v,ݎbg_GDa%mgI{xlugvb1{iLJ"}~.٩;!Қr>x2Rd2x.Rޣ k۸ifrc <cS=0\OsVSl5f UCwp5mB[R UQDG?$3jz p|)t` î[Emi/V#WB)K'0Z9dd%p֩%g,?d&k[lu7@X5I17O?%n$Ir0)2d⸍ܢ:+/pۖ@vE P *d S83ȳA B* 䧳<.xT}&dnSp/wۇO:Ǐ]?f-ZʴdL i8QlR}Kѣ:?s]f@@-5ͧ$EK qinI4n +w8'b.iS"K1G / &ìk{%k1ZÁɗ$s0m Lo,@2!\Á'ɉx겑~yO,wǟMLiq۳#cAyq=9^%5^'R%W+ܙO&y ` ~>٫TWݙ~*htoɕnz[epbSCƷULLFXThLz æ4*9ӶфjƔ (eǂ1U*bL(U+_(4CbO6Y76Ndž.f WshBdQ]%IV"̎JT.'F Tb3o@9T EgeI|vgH-wW40-n~YI<ދ5 {k, J<~S\̣#xe9K96J̫=|XpAr?W8V[XJG|[G5&e-hE:<,͔˯ϓ!&k#iox֞5pa.nyƥ`蝃mVE ms~g·MzQ;_ A1(Yj3_T'{~K7ﰭr01U; i];ޖB)H]Wb*rowM`0{1vjU/* wP = ٶ%8!)W](FJ莢PCxL=9fbgTeDmjVW*'S}少q+3#6سﻝE?8Jݥxuxg-=AvZj@)H'~Mf63oԝa wf$]ҩ/咶T2ͷ V. ſ2[6 ,V2J20+G0|\I1BE#oRb_mJ 龭9uL|h<}2y؍Ӯbz^SR(Wm pZCb]ECFc`iGn};Y먒(>!/-E/+/?OddɄAPueh,?,;a[;4҈.%?W<[(TO>ΐ?z5h{ l -q`0pm"LsCZbt"\'@u 0V3sL{XCPZY*W\/)P9)6c} tIΓ %yXwTQ=9s\&[p(X2I}`~Z2>Ob.ڇ ;880xAϴ"eXHKlŽ·ϾnҫIˆ4.}6'!NI298[~KtU| ;ˏO L iڂvB=ҽbPʺSJM<|yf2}snߒ`'eWwZy~UMu1 D62ܧJbu&r*AF5DhŮKڹ3(֋D=[O~4K2."Y*R3r$HM8%N"XBdKV`]T{nP0)Vyp"!@P.SSh0:- :*K?> I1Wx6-z"Xvq@tx੄t?LZ}bQ2C:v}ן SW":јB !4ވIAʭ7 Tevه=fpK {F:9zc+\^I/#I20CqvTϿ Aё:3jinK_2LqŇN X{)9ݚ^ @;IJ~rMf5hGl Ͼ-ec5;jhI1yt&sW99đx.eBF-nXK= :L}W{.'['8qOV{[d1FrSN"VȀ:8%a`e m&v;3(V@Rn>)Oii(Fo{d53kGd|'GTvf:44(2ܥ' Bb̢N?+Deb?])7\,b=eUmPNAх a z*; e`$.kRQ95 c\iL/`u9 99BC.FD{W cTiҦ46ŕ9q3uRx 8'T&v2wst^tǻ୾6R]R<* BYW-ՂęR@J}`0Dq~l=:4a R6Ő1i?o}5̺o>L NCe)VRɻaT{}R@։oo-Wz-V'C=Xۀpv`mr,agF! >Ć-Ȇvt^{\++xʴ@*.eMř>LKւJ ێGgXb8OA={TE&QqIU^ CO5ך'd_ cDy19ddNjDZSsQL`ۡoA( X.Wg50*nJNq|M葃TXu.g6  q;!2820"ٛH<*4I&" c>`hAq@x!@N?ZHyi.Dô24DxT;HJ<ɬMNCť,öQ&d ]r'W0l'FޑMԽ\N=ʂOrh eghj=+Lqq)ǦFH5ŀΙM4*;1 C1a u:#X:؅sbyoĨ5ե)$h4vL b0Z3!# ܝApHO(Bkfqb&ko}_uHpAvߌ-+!k SwEb]NC2y6 XpVKMϻ-Zc#jj*Fү 7P?Vh9sM:<HV0#k?$k"|t߇\BF12 Ѱ&4_iL06U6oOʍzE<7JTٕo%U.^c99JYjzxw@ߌ )9 9uS5f?Lޭ?mmwO1LWgoJ;ĊWY꥽5/AF4ߚJJɌUƽ;3m>%PP-@^*ټkKCDHtAmJckn2g2~a|^I"l8gw3l(+ v{KxU,eRZVBZQ뛶c,?yun h1_f|]pnF3BiAcG](-Kw tyIϊI-ӕOaB0ܡ.{ݖ mOޜԭe_rHaIY|=j#ccoF 9K}Q.zOSL+hGTW|5*zqs(ցD6Ҳ'^݄J&b*lm-po;k4lv*YLSq |͗!ͳ6Js/':`#% |$8 i4VjQOmġǢ.9VB%7꜊pAB@»SBJ}G'C)[N;j傛p!һET YkA JͤM@\@L.&_ͩdi܍b 'ݛ"#8~B_PXv9G[k{g½K3 XۄD5oެIiA$.Uf)B JI3u*ZS +G\ώ;9iVhZTܠXELXj!bh.i.F2`Wb|?6 M4sTnȁk5xߔetþDcviDBj` Pf6#gH\CrHHiK,gR(K;pl2m&` KjN2R ӹ'bd 2a OʔqjtҪyc8V?[rd[[LjA8N6o=%8 UQ b jRݘMjtzÁ|t +'L& ߷ 38W$5{}1ꐒfŅ֤[YxX?q_ HwIα<V,'S svz`~ Z҇Ox[4Ess֬ddʞl/eDWolyn -]7QZB< j(5`O" ?w!}nx jVh F^6)Gig^Xs#J?CDpC5!G 'lQ.W8TQLoN`59)A-U!ETq0NBg8Oc21'riG7$D@|HD|-Um QQ6Tg k ?1[nvڔԄuKad7_Kls|0`raU  kQ}yo,sGv:cpC%(%L0aj/OBO^??Ltf~䫢}|X`aY3b{겐#Mw,1?rg-kHs6QCdŦ|h>q\;|0 Y\i Vr3k)̲< -ѯQ6v(G}i4mH@;\›a< o͔Z\~wueH9)?J2:0yJs%tGHM-3{a|m=1,y%/`&[?^A Ľ WkO!`|n̄a7&6DSP6S X'F< Z3gg'wj+>bKhd3klǐ!> é7dl(j( mE tLۥO5R; hsTTR,XQÆ\=vλy :~:@xezn=%atvbxGG L|tP3T #ۃF4ZbLDvAqL,* AW ANGvo<;/4K(W?FK0,$mGeuphe[_\#KɒUu=JWIKyW6$_`X{T'42>2"}{~--!`nO ve`/–z˯YHX\p &"E*aCv6d?X)HQȞ)l}E9#P2>L`<`14! YEbԶv>+2W2z }kP ʯY'z;Hr$ ?Ws&;$Ppf6?RaGxϴvG9RVم֫G!8A٣> ,6dzÐ_i;KF|<଻xl`53\/ڛ]a8}e_ȦtDMnYψFxOf3_exc30& "w$NQcſ&TmGE(ɶ--|}ۣ"wv҂ImSWZ|Ƣ\!=ChXѴ%} gcT2؀~buǹ&.< @kaMo{ {`捁?P>͍}vضp0 p&QkR#L %ڻzoz{Lf:_e􎗩{3-mx5޹ D dl]@i.{)JNƵv:%3K#C\ht᛹^.?2x˩Ek݈\X7Ђ<~n! h*nT~ $v*Ơ<6f:İ9M(> -5;]<xx7OG,ِ36n~p|:VdfO_07[$xZ!B6VvSu%TԷx<6h蛬bH+ⴀC ƞ(ւu2gL!`&VZ;O &wFE!bjTRӛ PY+}t_C͒m,.GF6B=U\Oo^隋f=6"}z 퉠xL2V= z+g'5=X':yUog5u,),|5UH0LwYQtߋ$!ib@fCh"~MP0F93nZ;bpIp'ZzAHn٭*YrwxԎ%>zAUiOͥSpaFm-?Π=ƯsjOf-lqݗ[SUY֙6JsoX]waԊe?{X&/7#XJQV9vúA VK%xmgـ ElG ؞yQ8Uc ˰vjzD֐X7HG :1 'Fu-4ٔϚnVŜY6ǣ 0MYq>dVzaƁ9#E"EG^FMi!">fLXpe Z O$1O7lܠv^&ֳl@]sOj λ,FLVjpc|_}Yy1!-H|…mpp&U}<мlE ـ&=I뙭,\N?Hj$mlkg¼2Bd@2ן #p`#cNjJti iDgxcJ 7$Hڙ{d]N0>^k]GH?KF>4tר}!+l0&F' !-ϑѕr  Մ&5j?/&9w-0q bCT +O"PXE JzYM[*QVp7U̟ 㨙W-e2 )l:Ti_PWt7PQl|( GZS #ckHqN[]YB. %`僀KU {YO׵f 8I׮$8J T$:ytOj)D#FuKMoz jbz&I^!)p`@2,@\tF 7@ lQ%z"]dIl wkn ^ >۞zӺs BRg6 ?p<Sh'nas^bwY ~bf(:w֤F0)nɥŬ]i=t./łz@u@k2'głzxY'6;͂Fw_eA&Ǣ`?\BKIx{ A"{A=5_k,Ȅ =ʻ5TRNd3= 8VIiͲb)A.y/LUȆߖdЃxr]F6h፵W]Rcx\V˛Faa$zz^[dc]7SwmթwI W"5 DvXhX>M)+Vyz!Pe.1,q3w^ԻȄ@reI ? 9nx TWD9oz!^f&?˳^ oޣt;KvSQ~Xݠt򢟀e܆v`BѯMympZ6Zn[I505X*zT "#t4:JᩄFZcIau S/Lx?5XE3a5)ȪWS9o<ͺ3.7^6~v\a`-yTIjԘ@tu9z/{蜗Z(Y?d "Ԛ7wNqFӎfv7iOE!5Ϣ{%R‚amI\rFn-R6IߜA`nʠ)mpp!N[Z䘈Z+2E؋UmԦ: (.G01u`x7ǡBWXmq67 UT38ގ5f|`r?BXx~ @]5q<d} ~G'%:Ge1kUߋNdNd eZT)G1CT*x')U vVK=o>~O]LوOMzo,;',k䈡kžN%|GhV[fXTW[fK /f (Φ4>񽉓 5R|2m?MGB7QiTqyq IXh@n2q]"%|g1\_4cpËs%UChH =q0gZc @$X= r^Fk1:;'47͵n\FeMЊ3{*_%@G08N.3Z`Ъm|UYC_ 3aa >JX @:~0'l>/6xMŨy7JQu#/ux`@9#jwN.r,}pV4P^&(b/V (m[JTy!"K=x#<ְi sYL; L=}R+-Rb /Xl$ٝTݨa@bQ4W0h ^ASE܁>Qf"($x͚Zzp&cކdDP *+y6e Thz@ZriiC./arNf|Äǽ8|TmT<" 肩)P/iysT X?8CNzB&v,k]'Np⏿J]\O9f~W`;АȐsbcs~qTkuw@FkS@>Qw+rtz o!,!T8OX 'Djw/Vm``A_Jw|"*sur\8(ՠEVm=3#We)7#gr,!˙ZyF: xRe$ZYFMY)3WC $818; ^ 'L87.v;,@e%D%tdnV.vګJqظBtzf#V֜\͙V9ſ@U2+HeoT,FS{MikX=e$梺V—&٢pr1ojRC"%cBG·h-K}GCU[NT̉]H2rf {ۥ`[tqEFJ8z%D3"=GD,;4|1w^p>jtdsJ&(pRE'lzLTd. ؜cIgcH;O HPB{6hϘJ1A oWQeD0ADD>J^(0BbYҠqݽiŬz>]YBEcN6 gye1cumH5pdENcP<ס2}mU;nPeCW"+):%{6NwQv)dL1DeZkaP&=kOiJ!SJKjcŸ=}TfQ W@_M]1ªDYL^+8҄s6Je}|%-q kt:x+5d5v s?]p,+c2㮡 . `i oC|n!|EDH3`p|z1'"N% ""}YkKNߡ-%Ș|Hx8*c}|.EDU:Hēqd3ݺCZ<.iՖd 'xZߴ68{$՝ $&Px@̳/s)Rhۜʾ:A~|ZS u\&7g*Ǡ x AiN!tmY鞴HdW4(Ox12(^6ET(kv&#E!}Gǖ? 5uNR$=үpr]f1ӬSzȺ}4k{-m;/ ip$ S'b{<Ô_>'T[|7VU礉_ݜ~\ ʝכc(fl^hրI`ir}C^xq#EV\|Npҏ?6g>nN4P PCW_̃wN{J%@5}<K*hޭ̵ma$4c5[Wֳq0bvch.M݇L"5+ɶ9.\ ʼnm{ꀿxFüD ]ǚXm,:LJI{E0ӹ@A`nAš9mdќZ,CjځxZ❊7/ o-޾k&2<*eT3'}[Tz ]3b) mhi)ʛ9%{gfW0d#,p;fF|= 8צNn+[^5T9MEn(T["}d{NLn2XnLa3+'93ic'[{y햁}9y x+ךN(p&4i3OO!lc?&&bwA6x߈v֍jÉA2Dъ)K@߀ւ-ƋvL?⚹ȳLJK8ozu#['QbF&h8ƺ 2_!8^SS`t0Ap/|S>t=zeaJn*F-?{o WfJ#t |R';tI@g,^w/|hs3n_YaI"ۉ/?)[G\y n^>R2!>[/Օ,G0:>5>'bl)0g!B.TQ hFַ- BrړZ)l"'pIC6l[t2sj,dBOʀ:,QaE&D B bD?mLQHۍta1cjdKrPߡgpxZP`7$h[]uO+hELnf*Tɮ.\]&ez}u.M˗ë|8lӇN64m6>Nt=I@@F{8L9 rr(^Ȗ6[W0o.ǪCxdHQGin5<&hw/P2N%gFőRv H*WKwFil)*)c>n qV4ىj|RSђT*$'#Ҟq?p˒aI1OD1Ⱦ)j;05R<b;k61բWu,7̈v2We4tRr ]7e"AEM{bjF=jIU(D@qfvPZ #&gXI,n]B Tϛx].N淁ֵ*r{Ү\&( im# AAtB U2 *`$H-م,i8C& z5{A|݀>%~G^ѓƻ+[S鏖Uq:0D9C +$WMe0vA5\<_Q^ %P:pVD 5SAKzśEq4v{'=[9GLyLlaj-eXk˦ZY\9w?Sa@#{R6!L=-5zL2K/6s`V/Q_Z誟w߸U[:3~Qۅ,i>GzDR.]-ѵM }1RCR0GPE~$l!._CXۻ}lh99\#P =8x+BM:ß[&Uѻ,m|XS2s9!IA\ꕷ)ٓ\{:5:H<UɦҊ Fk28[2P%B%PK'xk E#]?Z3Sz'kowE\_Px瀝nשY\S )Bf7~AЌ^#Om`BHK|s ] X|I3>Ey*GaX%]hh's}١C(At7c<Ȥ({G~$7^,[e+hJ\vY^u'fveg}vkur۵`7"_"W'jy۔211ZNyqQ˓Ԓ(=l=HxK#%TSPAci+1a!X%>̕.I邷-Ǚg~#70 d ̗#yCgx>ξM?sPBK}!YrfP";;dXpB7=sO_h |A< w}îj2 9 MPw*O]5>]smO Jt1 3Ll92';dNib4b" \>O;W ^i Y2%y.bkImT'3)fz Md$ (P"#i`\ge9AG|& a5k-J|3?au&.mӳ@Z6٠׍ʹE7課  SO$pID tkE{yrbi8oM9:͸H*`$H8is%g+LAIR7%DznڱB0QS,A:.2#Y#5 Z+&|n[t% yz~~6)sm\aX2J!YNs˗jl ;mE[r@$qЀ&q%WCIp郶~vDcesP%Z\VR?Nwhi6ߟ) V,hQ&J彆YrI"c駡j0YLqbQR8bRH+ g$Rl=.ܠBbKE/)ʽK#VOS(& I#AӕK6P0W÷PCeJFtL))n䦁l; Fpzb_[{uuj,'pe`Uh^}_txݩ*.'aժaG^lLlM_>?0P5"$>o.hA:'$( ":9a@6\`<ie<<Nt g$rW:J2 \W8Mҙ 猔)Bx SG1\krTUrY04Y IebmÏXwY9Du/:p^AAms8yށ3-ʫ4r F6L_13eaCP5_B攭v5q5%`Y!=YL_""/Cʆ"6A`XnÝ&``eH~"kgT]Gc BTfBBk 3S RHidO3*J V^ٔ[x}O4hW*o7ezdhٗ,,<.'5Τ.hNsysz\b\o +TsRC[Jʱ4[x,_L502Vkx$>Lw49-] + )ˮx?m\]'/ˠljf=7qa~Nbbljm6'#'ev[JkZ L+{"?]IaÁJWP~R"ԣ/yсTGbw3[Bc(XtT|B(fQ.MeԑiTN.T-1+q)ێˡ\O^Ee!ak vivz&fuK}1?w J+Tr&?k9C2CkTmZ[t4˛ﯠoI?_{!is㬩z7`0Td HL:k/E B(!J4 !DԻӘ(%cY*p;Y cǐIe q.W?EʲWCXwxNJ7Rtp5s}HO~9QÊ7*!5mlJ-aFX[60%hTP [CB25ڨQ]]Һ/& P|޿D ׁ3,KT\\2@:-O;{8vOu I[za|VgFJa}yTĘϚE&J:8uҪ?n,WTQ1מpwc}X}5āңA!w{uV &×':EՏHcU&[Z)řXT/٫D>SyN݅ur #'( 2\D;=I\FL?d6J{ƞT4̍*$u"lW@ptu 1Q ֕jm]X]/֘CgwAYN~nqkջߛ{44$Xy-PX^B6cA-_R6ݥO-NC޸ÛiM [FZ{EN˕U?~VqQ =d?JМȾ?̲c^Iv\\ׁjNU?^*RH!1sSҘV'n0oJM焀# @exK3ϕd<Ϧ+ISYh#8x2ҫX/iuj_+z/i0DЛћ4uKݍ ˠo9<È+S&{u/ZwǞW^S0l}7nKt 8jvVˆ v?1ڮ`&C.i-*HW@j/ 5B I J|4?1Y, n諼ތY)y+X?  ,q/^r6F8oCMd8lu XW9|\LpTIqȟ`<:lE=8ka ܴb eW&P /?M!?]^U63L=EV΃&e>>v=wx\2@jWi :JÐk2)=w=M\̑!CmJ9 M*x`wEH@!yLMn@ ?$H 'b酋ROb[ޡg6_.+GvX1Wlƅ]O+n ywa8|c yA_jR\.fy;!J5ǁN`sdw lLJ!LPa'G(7l9]W_FlHI#S.^S!.q]A.N_UHgXHc rt.<0c㐄z F,/ .L #Z9*l_uS=fb݂ZXӨd^okb2pآ-Jӎm!>TjX[c$H[ny3.+jGrS.z}V>yM]lwYr7wJb/Jiۡ;8C<8k‡:W7gm1G$ 2숭3qEpL2B# v~N9<١(Y˥֟'YeIfy￡xQ8Ѱ9b.&غv6eRq=`yB8`?T =){SoR6ĨSc%TN(l7|}A) {CN `"oZ(0dr?D˂6QN@VZP(=vZ\zΓ9ƁO: 'BS3= |zۋd1%CF\Uy] õ2{ZzFV ͅGU;Osu3d2NW/GA/p _"l#zfe7Xs8\_/ :Gih cYZh2/_ݰZBbx!PO7Ang8KJQ;dո|Sg |\ډV2#m7q7s&nO9=galz^4>zf"IG ,hvbaQh/먁m8Ԉ ׸IRZim7B@aaS-?QдO@Wo0sI>a]rB&uBXB+IB }%0LRRV"u]MiX'V;BS{ $1I$&U jc=f"md;q {jNd8iUH.x죒w"ٞ,D0)o9߫.f+ :Y>WhIQIljiE5`)7}7-SIw8^8 av] ]uaWg"YiIAbL҉-u 0o#՛ k10 (״:C\|bX!qe~}+%0Jzt`j8a{5֗5N(΄ӭK)rݯxxuHZѱق{3h Iw ߘs+fp[WRAws<87P]ե.Lè~!j-4;CJA; ~/)O  |̳kP9K3٦w?2x8e} 3*=0,yoj-ǡmx%_jFd|lMޅ{4Bk;yΒ-#Y U1X`=$&-Ɨr4#a?q^}$b 5PƢu;D` WTf Vo/|”(zJhQ{!qeܡ#AO^:{S 4dp:|yHKa-{0!QTX rJmhο1p2qSZ8!B ǭ^k^& &TL^D-= ѵFoƔltmxܠ9'F6p3 ֫|Ӌ=?TDA'dn'QgioM?k7@d0k@ə* JF£SS 5L@h{AR LAYA7rz&s& ~ՐOq7/wV ϷIbjCNHӂ H1lf$It1 rQZmqn烯x$)"eSkuNʓ-ڠA /w|wFuw{|s$4%G3Z4vW4'T{M;/h;V&!YCUDf̦u( WshX}&@$[mL/QD3W5(Ȕ.7߸&U\q[aگH(XaaeۏzP7>1My.oSV?Q΁Dv $rvSAmȊ{` rzΓ% ޘ4Нk#*B4#Ν5|m̊lX8Vk4$:>ұIb\S?ʥ4jɷRHXMe9L ;E)zIFTΰɗ>Z=XͧO"pܗ?q vӨծS^tDٱ4UfEtP"dElxD`N~TW:nȿ\8\Zxf9\Vj U ǃqn>S+#؎aD0jqMтsy ؍"$<ޯҒwy`Nz4}c%JɅ2d2hBP90_MYNivê忥e>rRX:A|3%=o(eްd!}Qs%! ԪGEI]ڧ-%0v!ψ [IYa75RZL3|kRzzI*bd>bXUے>2Q'id`d c o?oAH0cΜByK! {%xqD0\l|xim PE,G-QWCP. b(O3{M*"━qLi׳kZ9@"<89ͰC"2W!3JѢpU*}=d* qqp=2_eM~L|9CW(8Hʲ2P Yh2lgFA1XhF ީQD[trŊt _WaJwPuˣ嵶nkfvZK^`G6%ƹUk63=*~?ڂx)k/݇rO(E~`ST!zx~`SN gVCMX¸53~OPCqTuB3spf<2D ?=L">FAt\O᳣ܗQLmFEl-WI2NGy;eS5OAg}רVuk"WʽH}h,2TWHҋYqcr(j_k]6v,޿S&);8Xa֗'P#=fբ|7]\%W,eJ>֫` 6 9"o񫄯OEe1NL؏JKj};.<Ұ=>, Y0m!*wXt8mb_&uG+b ic(n$>e?o DXC~:Oyo 7F ^,Z<ޕw$̘;RǼQ઴r[4|&ۃTQ*L0U-{3P+px਎QVRs!,@*('ߝ`mCʲM!O$|}Y3H:#L_4 9V2B<&(YW`6f쌠 䶱+]TvZYh,Z$8,j>TX>0[ͳ"ZNPD?j6JYVu\M5/L0WZ7<& E {e:QY]!yJ$M!*CQԢ:;'jWUVX0OSN=hMX4k?ARE薺IYl7! xROtDF~ŸT4Sa2߯yB#|B0c@g_n 4Np7,/RА;ZG0"Bւ1qATq3'C ht|04%,1Is $ovE\~|NWQ#FI}-ܗ4Y~dW_,Ke|[c}9Mm3 Z6Fy'[̌/πbiiECIȲbYbk6YY,^ǚuzԭ+c6e<&с wعo bCoiioO  ɈY$ z>h9rmҤC+ij0㋾Rԍ&ih}qa+`4h>,uUGV\d^]MMG wNȲ SzDD|,1p~|ƨ0EڏJHgl(2=уQ|Xƅ tM5d~Р<!K5g6qhK҉ > 7\O8u UT])*'hvVk}= rHVہ>`m P~oZO% 1GC7nGiDUiw/~1$Lg8]ڣ yS]1ԩg' x'$G)zQnuxncɵ?!xt#1×;UXec- X9ŋL`/fJq L;cg#Rn6>W@Ap@k[ k= 9 >QM@ {]Zz"dZ cK*,!W3'bqV\N_<Ikѿ!w{9\P$vF i>kaq:Mp ؼ-Y`ԥy}c klo(xU#8O̖k3OrP0oN~ 8: 0 ;`}IOCqGxyz^je֞U2Y|e] z;`"$*)4g?%[FM@"=ma/?ZX-M4Vގlv@J 3x|T /nHxlLo=i c{ndXI_q3ję2B 2qt{nqD葳Ӱpg飧s`]wkvt/"ԟ+6``Dw)=Wm&37 #W>%b4R3ߨ_'4&,I ﻚu5 *0omsox `bm,779I.mu% B!NQ1@{ẒlIUV_ BkK˲u54%^"Q`DtC>C-qk,G)IoW"8 _@`{b'9]7En{U20P1tqX5i< ,s9i[mUn ^s51cƆ6RHŦQ²S[ˌ]qKp'!)ds##<4fo3?8 Dlu6!<2qY ?ؓ\yͼ 2X$5ƚEzy$Vmi$| Dteu*9}b?cUVL-l|J(E͇˿3 Fmx/E"O`hV;]&vR*Wk Fh$".Bj‰mq64'2*dsl"O rJ Y;˼+Y'r=R;TdRDP{jΤM65*wq=yX}lo`Qҷ#CUb@uU)d'}0gQf#86&qAr97Mwyb`"ٰY/; A4Qd;j,&K)of$r{D 2:br-8IQ]ߺS~P H8|NXI wHw Spf167K?&^ČfUmbBY !S0[yLhvȪ8"N(G!TmxWA0zd(ȥ^7^$`|-$1ᓳ,ȅ}91'm82&T5WvLl-OLmB0~j6΃q UqQ, ,>v-P,ڤϊ.mٌ[Yj]! 1 3WCg?ܘp*W؆tpbQK|+jS(0e,4DRS7U6/^C# 5P޿Bz1NV10uSJ؄͸r`v])n\ߜᏵ1B=uD<]p'_$ܨCs$+^EHdhͮ7L7,G:7lvYra<_\=솧qZcuq1X߼b\_zޗbuwwW zЦe7mjN㞌Q`XܦY>yӏ/~I|QTќ M3VYO)36xCN%씖9$UfVlf8!<Ś,*H@>GD"yr+[i`qiBSRCmbUN6ԋ2@NG|j\09i%pe"ʭ_B0wy]g e uB ,_qGZ!=doH)W$5sT6_5){G .Tm^L A@>/JU%$l UTG M:9f _~2aH@#g`|dU]ƇYhM4m"˫Ie>=Næ:]QzvNpφ%EwMvYM>lzHRPacfN <p$L{b+sڥ^E [(T1Ch7meb6Mӂ}f-dr)?cD0ET=Q{ TAP£ڋYUf]s"B*yZI`д["Q6Ng -#AN#iv ҇gLhbA*=K:|lat aզAp3/oPhfV 5H>ا9a"ba]ZvdΦ͌u9﾿E6IؔcN)Gy~)Hs/j*?.yrLA-Dl#Pʳ!b]0!4Fh)bg1M{?pf _@FP{ RMF_. Ý{vNyٸyN{ +"o{^MٰHbd-LA 4* wLǏN6 zICmMAyo5lkTēDimCMf.H6p}V7)&vLa -y91c Ֆ/L|l;b.9A퐢Wf,a9 Cf ,kǧb_H{NP$u%e0%&vyEe҉lj\OFu.0.IاE Cg:ց UVBP9b8nܱ >v;vMnhF Jl_(-|;;D5{kUk\UdJfFpü. 2Zü& ̈́eꁾtKYZlͲl=j3L`r3s|sPn- f$ŀi K1@n"%vP+vs#jEt6~@`*ƪV{v3}]Zqtc!UsF}nT=,Վ.)1E1BSZJQ9=YCeA!m8(|4eOnLPI4 ͜T"Q5R)/G^M-N:RI"܎p0.9FMʫRJ[Ys M5=13*2(=u\Jzóm|pLAgq l듰66EݫC!evr.[/߅]ͺ0o$p#d}9Ԣ;9)/1HPkm͖555G)o{V*?T 8@%njD<M\ޟ`ez 6݌]4"vakX?tI6o̢Y%,xh&09F ^֓|3t?Gm4=CN å8œ,5sz*Q4kg}^M&4{H<]ժsk՟ ;&`HJ Rq]_ߋiD,+FuӉ\*N_tf~>%Mξ(Qjy^ H,/$\d[ [cL.ƳB0mT$kY$k&AEX-i^о0\!3n?u-Ksb:R(BG Z^vnݹ1L16$nH?`eq+u\Q;j}u2'|u5]£[lyl hV]!-Uwa)zhzѷ6G ~;)+'/L3cU3üb.KG8EQ&+Efy_}jbLr޹E GY ݾ֑67ӬOM4w1غYJNx5\QjqaQA5~|0nД35v7{(Q_~]{9ES|槁tuJ,F= q<#Q`#! WJ]շFh(lӮO!T)DS%+Pyƺ&Yc. h ڪ%Sm;q^P̲*.mP9@H g[Yҕg$xKYͣ8ڱ{GN"RQm9zP`Rj ēSsWޭV`jHJaSNOq ^[=tЊ=f;2W;rfIN 4|~s— &6 /)/RRPsKu-6 90ɇal!ɮBD 3Z m4X>J3Fm t/ս2\[b}҇Qo 342 MZG!&2ՒchT )VJ,U [/=.6~dp|9T{B)Km+6y :׼-gcxfMkrL~{`[Diȕs5وIPKITx*cFx&^0b,h:~ 8{:fN"Kt\uB-Q@!ʆkTg¯O3 J`sLX~MQQGWc'į\^J ڿ7݃Κt ~9ݶ|>qc|EtF2z$kM8a6'f`4CHG p~` `~mRnrqꛉMCR;˂(tbt!8i<|Z@.1Ɵ X~_\#pc#~}_h9oae-{m;aƯBaDI:?7SP?|Qg*l@ePVBΈӁ}+4haV}IgB ԭ8%'dIDJjW !phMLr]ntt^E =[#12}qh˜t0Hֹ+X!j<Ɓui j_{iWh4 D& wېV %3PXq-0J͜+aT..% p ny4h+@Tlolq:;=Ʀ19沨8@ZZn[y\4+0`,G.6nj2rl9/d dؖF1>g7_mW#dEY,,|Pyg*[,4i5IĽW 'Aee(?k&.|8f3xKe!O[P`|(@HdJ Y4DՏ?U` 7i9 sI=ήd^Wn,C&o;֓J|HX&9Ӕ>TD`ԮއN_ Clc<;488q.OLd-TcJȱᎴU bASC[6F@]k؟~r(J&:h.IQ{Qw]w _h3S21"^SДko뺒)w8D}VrtNhz>$ Ѿ7&pH-Q.x5A1}ܼDd'˧_$&-:5mB^s'tcAZ`cy"pdp$ĸ:W6i<|6'y4߮ǏK{bcW2<xY8pˤXϚ89Pɳ:@X"'+77h)fv,I|YkI^EB}݀KgC~wc;R}rZrQ!Ci _w,r q3)@#aR{&@gk<~T;˲& !Q*\ltomB }q?!B!P;\0ϴtyWNIW2')[Q cHDud=hE/_떺S9o#GOI +RU?$v=>8J~ZkoΣ./=V [lGyqeo}j'd_?`|WOuʹ@cB,##>%.k a-oo{.[ק8M?NofeRa%N;=͎ن].W0=L8@)ODRtX;mGY4qU^wvd})v jyy' eKr,H5!#IMۍGXv L,0:N }(e=,Hrgh߽=V oDZ* AKod($8veN A(CS9A$ۛbo;/p1%mҗvI1Hdd<wrOJ5;˼~tx)ӆ/n.Hɳ*1Bn<<~^ @B=O WF2vGm_cy!>Bm3wbUr=0_p?LzzW46\:rktFUPo:?ҞWEj6Z8pʛ xb E|xjeҚNCq`8@;lfL%fѱ[Nmj2.UwGD*aN:|C)j{﫬g ֽ)$j ȶr2> e 8nλ`uS$+HS2#漟,^s4>fag8nkn]~ LƇ*7)ԕ"B_BֱH&)B֛?ޚL)S67]+`w3t*JxK^pH0UYr(ߜ7NTׂ(Uۼanl Qec̝M_Lk +4=#yi ThH2ۃ.{Wt&t+ \gXɯ$Qfi("S 7uܸXWy$x6ow/c[D]ɮAtL"Bݦ٦1̞:nw-GB.lc̅/XI)uCKX'Zc:1eb0NՀG m[*w@lȱuqv*%&oIbtDDIE¹ ?}vѠ><'!DhLq7$l8t*4OilܮE-,nAY-hʣ?w0حc}1tb ")s `qROT/ܲ:4}u&,AgGB@.>0[}ZQ^V<Xg dg3QK*Rs2kP0@V1IO+AS`4V$@c$_Kŵ~ٷj]DU1&F[3H+V^ Awk `r@t,Ѵ=lMSWN*lHwQB+k)5E%"92Q!0Sw"._0W8h>Q@1|" ?^-8FВC 926֧GțlH|]IE1iVzNXxYJWΎ٧-'2 "g=RXr.4:eC5 -9hw;V{!tz?ۼuW(:] X@f1D2T¦;Jiʎӂ-F l!/?\Rƿ{U|ܢ}x`ܓf ͂/қj_{ՏZ*+Ikr:|d@kaS뱟Á'Ě߽=iLOH"  XCs[pZda W*I4B9 ӗoSF*宎W?fhSE7U*|( -,Rr˱&jj?Ӿ#.r.0#P ^Be^ M/YGYt$ H 1LlXB²S f0Yߝ^C)tzCPsZ{ j[*ܛYĜ˗x`~QG/[ݝ%2DKM7C(³i]Vyq۠[zb%FPѪ@JHf_:Fm36.lȀ9wkC{ ˞z4" LYR?@'ʰ葾~L= ڃ$Pt-T;AcͿ>ޒ % 6LqH-6~sAv*׼;[XuqZԮfuQ^0H5Ez4ʔZܛ;cVۇ >4gg7.F[zg4u,%f[ߦq3;<_@ܦh1ҷ5 ,n3m86e$04GXۡERGr#Stӹ-}u O ː+ @YEIfӫ MI9Z#]!Y}mHjJϣNEgl~.wިӭ;Mc`ٝV]!Lя0ck\(ڣ}WWߝ*ۋ.*R VB$ ;H0P5s6"]V6e5":#%e{fY}Bk%hlE H#>U2O6sRTTTZY\x0κHa ܜP| 0'q[X bVK!qʙM2IBQ j뷈Px6z = M !ˋ 7's)w>p\nZu8a(/̅p3D$рU,bkrV$=BCͥ~LˈЩ~ڹ墮L,}w{My&I1 Ą5B煡K3:=TP 2xn)Jo£tpb7,5xK{f1:DC/R<&LY :upkQXnfXJ?tO߹ )4?*r{;F\1 wuuIN>X4:> 6υ14ǵ_]owɳ]7: GT<0U=~iF0cdĪŽxDlJ c/h$µvDU R*q @\SbG BzNrr^(q2lU(߿k;`&NY0s.$]CusWI G =ö 6 L6[njdz*V|Q9KS`fDwbvdd-,q`  5w-^FJ΀"FMˑJ쐙f8*/Y)+Yi- E3B6'th pAϯ#@R ֵzYRo=Y}$iTx WJ}z.!T"l|)ս-S‚%k4/myP(ӭ<ǦCN]_Il#]N̬x1_Mr@X/ gq;SjtmʊV$ ) j첊O `s(eGb.@jӣyzё4v)&c.Y<ogi+$ c~=|pvcIaĜܝ~*H`q?#P|ZlW)Q-ru{~1#!Fb`1N!r.*u1o'8X2h@ ֗4O5. ^B>]bBuns9t_jR!-sf-kR3jzSt܍ds PnK0AftwĮȧr;"ⶲ?->,p\X-XÞډ(I1fIz;W rҢ)R*8[K-' Ē7'ZmAؽ<їC}$}4zPSϓYgZkaY LmA sM֘z8繊daolA 7D&we59 *CeǚATȃjO YVuȮ Fʊ,eFf+qq;:I5Bo1Ei- d{Hirc\Dq+FHf|'$sATLQZ:8.N>lpT0ږ,Ut'/8o+-L 9t1bmP.m eҦUU?LuWTҢ~ڍH 2[g~8.VD}nCMN,4stZIkfvPSkX!貴@/ M\&iܙL{׍74qLYߣwD9 /O dH[CjWT>ԓTeJj?";u&%6!]\H(|'k%!.KRfwnM(9Wo^{ޘMfP]T=[ˠjF^p0gQaQsws "+!˶ Ϣ@z`Y%zx;¨=Ry,-)fzQO[?etawT^߇UMdwtͦb\ sy}'G?)<暅}n3Vy1̓*MF7^gk7Eh3tΔ Y;Ue\3%i5[aL`pw%ֲfIeP=m#731.e< p;dF?IBN?ILtuʩ90cD)"춣?,g#O~"髩Y) q@11ӹfp0xc;V}VR- .&qI M:杦σ"c+17Z!r%2Rע)^+"bAfHP =)TA6nhp0gT_"nP)l`R'uɁn~%ʥaJ<.exbdn=2dKgpZhnق~jxru&!'_[D;7 "?@qo ^#)W<<In u~@ oO-TIyk,A;& S.@l"`9?s"n)P ¥ODtw9\3> `L7P Vޫ'PHrNk4h(9l=J[[tN" xuo/ PΘL-~{}nVzhUpVȘEo5_)&()8NpNXFEZY֭OSW$" R#C^3 Kl^uh+ѿH  O~Q  ncШ?5 <nPXX\t#Д6Nkޏ-  1UL$E\`1s"2kmx:C8 US `hK[UeBSHTm,I83cSrg&똊>Q o-~Y:ݶfٳÎ擣l;au}ع/K%o3bo55Vg+),; dblޭ|Vn(1yTYvEU <'fa> Ʋ:Φ/St0g]*6S2`E:$³,jZiBP49/*I ¦8mS|{}r qM^IP0&>\hmܴ-2hP>;~.3?"NLꈁxnGA4uUH<`-hvt+2%-[&]-{Oy+-МWx2s6iyx$/ u*PmM,%:At%xTJ:]p n =NE&!6\^|O-IpeG߂jLZ;b+}2?ε;'\dNXJ"enql,Lyڮ8=q_ȶq[? j]@8]A"|LNHK(x$*|qM7lrܥU&RI, ֊_$\u4?[~@0B)* ^kx׳6D%M< %Rwy _1.s#VVTD8>{I9 wq߮;lwme &x8n8sW8z\Ŗ›qO ͉ gIu12P'L<0a1m9$U8ϻk)3뜋N%=ap?C` ~O^K )pūQ^LFMGSo^@bS:ڈ@@nw4"96dP(sT R{!k;Um!٬˜_[FER-2hicf@@hgf;"/gKйXf(+FR)BuʊhzybKI25˰Ng^":~[Z!4& 煾WvR_вf>k+N \fEլ v#U>ܐZ0gG]0h|,kj]!YW>|S9Ɇeo5Eaan+['0/v}VC{ Ϝ=f 7]:,9ҙop? &t#.EyލJ10/fE_=qڏ#rVρ[+ABKiN7 s~w5D pzΠ_Xm_y-e+:Hר{u7_+) by΍W>twcZRqr#.02ʼ:<"1RED#5gQ$Ѱ, }~ )-7* ?#RԞeThu4ŬvWFRa tz%ْ$]w05, AWfy|~+kB֤yMުWl_@$fME -x .R22d~- A4л*f)6GĶpߵa '5r.iRC%裟RfӖ1T˨\E1lh/+Ƙr9mE38_tn۵I7ؐ^up*^n4&j;h3نVY,U j qkcV߯i7=eW@x8Ȃս$Vmc~`l')hx|U[_yפvce VsZKkTC伛@sY$l7`-`MDg|О0c DLv~=^݃q` e컻+2 UPu=c6ըl3szue-ev٫r6Piv*iHG{A 5Mcbͱ5,d3Mjk&h$Zӥ|0古7zb(D6*! KCy$!l~2P$$KI\Kv^ ՓT4HKAV1 ӧZWHŸ;@㣚TUS`գ8[HsR{gpj\iB?Ȃ U_GK5y"]_'gM#H{E9 giMup,۪SFXbm߄Ęɛ3 RHFZAy;T Mgĝoʁava M,2XRY$Pjݦ;]e#vϤNTc]C6waTp+:g ܫg"ʮ SplK}18[jrxmQ+c]E.Tg?cpTPs0GO}Ji̟$]Ae9!ƨXY:ܶkoRܗK/?)( }+^٬yPVy3D *|U.Fn !բڛ'/F\U!Gbn^UPbuED Zl{]W8rF&;p䂁TuvZw?x13Ϳ"t<ĖVxrB]x+m  OE3~XTγ峱e!RYF`&yx1-YiӼa:`YyCfՌoa7e>$)٩3PFl/P` wu (!d{2\}A[ ^PZ3m{ 6UR/i.z@YfAh * %BV ͳض @ێju>%пȻRplsuhyfAXr>ܳrGLDLV[ow?<KTU#|]<#XWL q[;_WX?=3wI+clKhU6Lj^5}]FdZ;i3\h%Xi3H `kTyO$l_ YmHiiI-ؔB]ea 9M,VXxD\Hnz>8#9 |LN6e!"FQH> ' 5*y3}eRY,?|mvUC gJEЕ9GcFuxsšSWb{tS* <։#D{ F9!|.D&\iE{ iyu/|"$o,-lQxmL]gacDnhT65#0~M1sN)'edHI򝣰tXIG؛5¿\Yˆ_;Ir}ׂ Bk崗`rey-Ƿ>t!0qT*5?疈vQ]V3f1c^z`wYR =Pw!@$@_if *feD>iս2;l'ʵ*`s!I4|Q\BScU9޳AY~Ib:K^"<uIVl\l$͟vkUڏj),*4zN %yM.*B}իg#ӴW' QC!Ew%ŧ02/|<;|w㿯XtGϩރڞ1]\rᖌ0 Y*{l>ytDjUFOqfD+%6^+tc㨟Ҏ}wi ;VN˫2S 5bpZ4F53eGu}wތh: ~d_ZGeۚuPȠ":8uQ7ӏ)2QǧȮn"u{4jsb+4:zO%`ϴ l;e>\Ig+܂ףf;{8fb &Z[M8v?mh3c2 +躐Oua:ݺj4 SfDc>Ae=9XKoL-J>.:Uh>bfFryO*g_L4; 6J ]KVC_ { ]72O~b< Wo`w"~%UV<= z|4Qp1ٛ*79yPs-j !tǰA8sţ?7X=\6ND[/UDӆ'Q+`uhw$x O|쩵Wr`Ib_xeSMj> UoǼh"jk-7"@xO}hM/3[_#-=yl 5_l.{H:&N#95?\N4Jv@ߩmhS阊W[e0O\UZ )V P0mwΎN3enGu/$y߉)}kCձdܣϪW2 .$4+a 3흿]SKe}0/Cpd6z).[\'ermUd&OxlJv=3סttg="܆ j),=$(xG q+xW͙26*_fIuޔ 0Av)rǎAЅv"8 =v)"\ d6bÁ!q'qn8tNe*`t'J;>Ppg^vV߯ V.N6L{`}Սa|&*++rbΏ#hW]z7%t'8&o5n瞼V v!]ܾwNEݼ!we-+#$@cFX-N `6( =gݘ}VƩh4"q=QuO|ߑyiyc;qN!)}`443ܓ*$SWE2X.Uayz=.R:x;r\EiW{DX[>OMYʉ 758}Weݧ,9-W-:Cvjl9>R)YiDc. wuEK5 / Yy Lf;3$"LcxYOS=3 6y'3sL PMK&Ct"y|' F3pp8;+7[$:ArmnnJ0Ffbj^s}-nڠfh gČo1<4aZ\9Y2A/"5B1Mg؄ɏaCg}ܣPK[F{ c220C+Cy;>u Jn3܋R#ߍ wiDT{U%)o ąΛ5[yhDNBȡ/əB=I9_Qє(BwJ!XLɮ)i$̞UjJ70Ԏ7i/-?ׅ"F+'4J'mQ 2TJCF z&:ZM0>E{>;bU_ $;p7#zgt1uW.8̜ԹvMs N>5x C/ž`c:hdIYz|ӈ-ajY$Ʊ)(9d\f?.^+ ݜ'JF[fho~ܲIwS2= `EMz*a0ue'Tcˑ-Sm*jhFKEu*(#0ց ;Ϳ 6!Itc tu. J,BXˀj_nيkmzwzyM)]9W]C*Č5TR}&2z<͠M<|d#P=5~0P K9؊Q&KrfBG׵ʂJ5XhJ8  kZsg&7PaQ>1EU9̬`HZk gLWQnKL9~n2|e> mCܕ,7BJvBn[\Km*A>+>D]hno“F 2/BkuXt7SmZkDH ~w"re1^.gkTX䅐>eb~; (TRע/n{DjGRETrV遧MAY6CK˓m"of!\5J2c@{[&5pQ'N={%(:) dw1N~_s("w%Q/FU8Q (fW&Jvi!×p*5|2 pCM<{AGUp.DaY/xWʁOBo2/LٜKÍFAYaAD߯eJɟ澠3Uss;Npi[ה]8B,pzjN{E2 u_wAv +?9~ g ՚Vb:qcj*^ϯձPŀ\b'q"߈8o84m3&o+QTT[ȹn(Z$h,c/N=ՓǕ皾~2O"/ؤ?GRqcy,? (Ydf3QK.)DsjFMG3"P*x5xFЍ:v̧ eؐaRrmcЇF$ xG!Ѕ:0MQڂ\cCfہ%]J4cu|+Ŕ`@Xdg55DG/aرLFZ3El^(9'mxy|I[® gaCV8=mF{vv29GT{[Hb5% ^2Ho?2/8,Pc>cϤ8n_diPyU~nh8yK{ (t܋H^㵠;iSdFlȗJ' 7?nZX H|;N)ՄR[/O;D>Gg"Lmڦ[e?1j>gi4!bC1hdpQu!m㰯o&GB^%gN)T5;|Z2p}Cxީ5꘍bwNY(y e 56J6 ‚CR*ИfS*stdLUCݞ5 EXM]j HS(磞˿ 4ZӬ6BCW**MY+w9J9܄>AviNjdm dFvlΔX3~R%G3&0}QS ~mݩUP /_rXSQt*1-Өf!I?nRirqύz@G"t1OJ|z 5.X!&[gMOOZBo:&5}̔z,g*,BhdCZL]Z*>1ch 0s2Ɲa1z `Q\ˇ[e`y7v@-*ฐTW'EKՒSd;2f; 3i喞[m,ڞwl>V<.NPsh頟.F-վ :P(LenϮuӋE'%+㬭"ύ҅k5QdBX2gphe˕y,h3hhE_+8?@a+d$_ cEJݠeE`rjn9d3\4]Apn$}M~ PtU8詖AGc%A9 `<: Id Sp<( 2e(8 yGGjTu.+0L`ي+NQOt5d^hOZ'R%` .4Bۯ\ybzFY/J˞ Fΰ 5h{I\GK΅G@i4&X|1H03Q%TI}Kž}ڌD3Vhtw?g+rHK!X?ʒT~K*V\CUЈc`,y7FX@>zz׸[C.w*K*atm*cj.-={^%QSr/X1&M,Jnɖ SbPq 2̙X˟ph>;v >n֋2zEz$UĀ9*hh/-Ɨv&*7qf_sI0ۻ/@$}$t'\-O(:A(Qt13´Vb=.iquwHK B&GI ԟ/%c|yIꡆg|S 4G;2kCX` JTl[V,%ll~lF?Ig9Stţ\S$wB>IgNS_e$#X\uDDnxJ½tN9|&t Is g[Ŏ ݌Q&,>")E(GUKaq(ˠ78uqiXnr3&`^r $k*d[T}2.66ӕPnr @Nu{ C!8]t8ėu,X^8!WAQet 3m W{]!7r A<Щvٵ?_$k;ra6R/Q ّS6@jmZ{8.J 0ĥiO r!gw<:(#Ku\[tSu)X )+N~6d2%w aޥddh#;`C2U`ASoȕp06 (ą +.~$%0 a!C/Yd^/ESzW&`=2T"pMvafrL<lؙ'QbVs]A! ENaŇu_:TLcWp(5l=пMPZC~aK_p6{Q܀ Ouh(3C.Y)"KY4j¢ۚt%-iپK]l3p 8]z"=qWMp NBC<սP[9RGb4i2y UK{^14X!+J<[o}xLKu^SF`9FS0ZEVh=?sx+^+y}{tß#7rTf6NB}ALRvrgM-}`npuQmY?{:P&PF;U/ķM4-h=E%& 9X*d!-r?ZW%Z΄E}|v+8?v[uЖJNa/W/vY-\2+"Q^?STi 2u(=8{j~ԩC= WNhom*9T8P bq刈,xfL%oP3搿INm# aH}ٔNgHFg(Htn}XfU­j,+j$+@[58MVW] ~X>Q;~`z#ۥo {bi55{!Nʥ61"9gG/ǣ?6E%އC{IM"4n0WiKx3[@g2'>o /81k`BQ`mw_P^EKUew Z? qr)vVu0x9i)4j~KQ؊9&X63QEg*&=hu'?eVbF•tnOô0N@<ƍ+"e>@CIX9 SH$b,Vz:zEχb56"ѢN5[K\FdR)yLjI* iC:K1ɳCS^^@%?(?/q/~1LzN3a=5HlP@ߵlZGႤVDH`hHpD p Aj j+Lƭ kSު!z) %η)I`@1IVA,:/ C #F8Voh+a'geF#0D嚱fLzrQ{^㾒`+9qƩel2Չغ%!<?nt }Ie}}]'K/%wvC'_Hx GERXK@^tbWH5OVKc 9;[jȤ?_ǒl_FZ~̙XGKe*ޱPfq[W8XIQu'NɦL{+t_B G%Gz x5U;ԧ*M<L?NHq7'lgNE&;w JDobhpce,mqC_JZ#4GHTU<Aד ]9g4_Z2=YBKI1HĮAu#:j1%M81QMeH9 &inwK; K]3)['[]js GPz g("1/-@=M)XZMrޞ}:;%&)v/ia`2a IqMW2$JⵉJMc $E" ~v\*DSH<{ēlFO 4Nڒm|CAٺ6SskMB,``'5)NWBH}'B^nr|wpTkAbFv޺?Zq,OoևhEV&'.,MyC4n"Zh @5"+rŕ @5Ռ-[`~Fo@yr&f_O.xcKFw"&LZ#`Ux#jIzAZݚ^[+{Q)!1wKWj /hrYyTy"- Y5n!=8 Eܿbi[]b;;Ʀ#Q#շ=91-Q87%c $`Y)`?1T= - 25xs08zkC7=Y[YmZlPžܸ:lƛW--`w;!yoXؾ܆$PBz1J7Irk,/i_oyR[dpg0h-rXԇJhnt|"Jp~s.G%4{pfH;'k."2ŰA@V[AK D:6j.$#x2[7J=K%J mʓdOcR-OShS7:@D N.dԏ|BTw,!3Yr :q*$ip3ޡ/HsTh8an1)p0ʃ6auSʢwu#һѳoE).X 2hɨvS.}xu] 5<*Zܭ)"[H1Ao}yhohxJF #e?qo%|Fg s640d&mr!aZ;iNs8"Q;!8ʿr6CT% 箭gmy?IPM*%5jW-Ev܋dx S "^c>NY_!% G7f,JVzY<.m{Pz r'=.`Kj#td>٣Z8ugiFR*U_OgOmNkPEjMOJtށ>r:Jhw?s3}!USL$a)_#}Er٨uRS>R]g_ixv=U ^=/ ]hU*%d\oT㜤͛gL,Hk|uKLCu!D9=E(>>,@ scnJU1_F3Qi+nr }qZ|\Q՜&7l-!,OVo7ԔXӿQϦAvpwG; 3EJry['153qHk`\@/WZRҢuosOU8HBLBE(@ʝ;Ƣef*[9nh2LkÎ*<%O2d~czqNiqZ>"X'ؽ'!aŎ[X'-<iNnGiJv[4γ2y aN\`mre!F\1z;+CK$9Wb\+_zqֈ]hZ*la6 C[;e@*]kgƦ=&5O7얉lZcM1دXP/'M*"Ѩ bm vU[F:TEE#kfH0ɆMlvayCtVQE*z|ץF ɌHޭ50^^'ú vPy{ + ZhQ$>t-}1BXsџ^oQ$䢷ۓtn6. l&igW.d5ʋ%7u:񽡏02i8^-0+˓ĩ- 3\ $;ܘPe疰XX: S_|o/+r&Ja硟eSjQ5V|Ruiqw3(ݍh0r%Ӕ_{dDv^Fz !)).EK,g[h9òjXU ?YXXNfg,[cčZ04/5a !Yh'jY[6(0/vJhÄ%a6n IѴF擂yf+$ZF[)m5g*u_RFv2\UNЎT2ѴM.c%ivszb;Jg;.+ "ci:PG.NdtQ-{;x$K To7[Y]k_$& PMJS'UGaUC?[UVPg#TkOxZ_a-Dk7qui)wA'iw&\jUr N1pcbԔLZJi3m3֯j=]S:ECk !S`euؕR曅&-`mͨ(|2\ 2:p̞ua72&y@ttVO/>#,<(˴2pTX/&(_dS{E!A:o-xa`[:'TZJf30h>Zl]mgMsQ\' 49yvw|j5#zyPUѵb_Q^ԃ6S\O;Tx;"؃u~ҥ;:i<Ͼߕj}JnUxb}Y;F$/Im^ *9>·IHLWP_X=Ϳ<)NrsWv)U }t?.!0LS|mj1lS=?Th l;Fy cG{ ~0H_Lɸ4e̝y(!?:z|jOw6gwWvA Ur A|W;? =`J~uw ڙIX,zb8孒`" Q>3M%6oL￣la-WT!m>g\Y?|逼GBl +$VA(iEsi@] Zd ?;a(7B˹nH[ +lFR G*ϱd o+ S.= a|#$!Rxf:P^֑vPI/J2q1Pj,3#: *. ` c5X).aq@?nه7TY-5DEifzu7?A 0=CЇM8{R73\(n͹"PǞΛȄXC;\ր#/6J*7v Ϥx=)mLh]D&$޼!v]OA`u i/ W?I޾YLѶISP+7Zs%(-FX[@˂L#% ˴Jۙ#!nbm@v`=D|r5VKke=2 koW^l2p80ѵA_ԖA.հ'Zf@Vt~uu"#cQɋ8dV[i9bPi&BC~-oHx! nIqGRL>Xd .W$&5A)) ,(7F[.GM6@[c<n7f:I8VwnZXNJ;Tue|&iYEAA5Yŝ#U+! UX/@RBb4pET;p3U>⦝"RaKQ}' Ne(JL^x>Q~]avu㚿p={s,]!wq$`wJO7Ҡ^S\B&+ڭ~I1T~Yqcifƪ"oaeFVN2놲HB~5.4)=P0GT"i2$ сxZMiq1-5~!e]RQ|օJ708$Oa-|SD;_gRb?ңXJD\@$\Jmq#Ł`X0v;:pWW—'Cg}Gx|JDL pWQ}2%r]SiYd{rY%%}تATOUN;qhђI NlzczX(VC谸m+H_0O xr2L;Y&i[m O8,MŊɅ`Vt+V3zGC L1ޑ ;iqNJdXKk7X" +urL=\ߋ?tLITs3Ie#`uY?əJBV`v mőqF'Lo]9*E1*o@qcjd3 iAĩcdp"N6Ptr^ѧ6arMYb-&dϳX5nxP2l'iB@M=.N[GLpJ졽Ň8\P^wN&Kñ&cOioVD1:fID0֡.0m ݲ ꝳLiECUV9aYl"=*hQԻGr_L9{eQɸvf߳hg6,Da׈w_{f `f{l/JlA"${=w~@2n7'asJӵ̥{Kgs)a?]e#Tх5` wP/?"D8m9(TJ*ƥkwHe͍L0s#ʗZҮ+f}ء&f-YtϘѓ*lpL CI]*`0N5M7juhl "nz+L@n=/~FP3^XGXRHyr@b7.SCY&-mGWFjO68gR󪯞ʒAAvŠ  P2B鹍w9v-{=(+;Kh/@n*UPԜ*__M6r'Pѓߏj~q:uM^}B*8su|ۊnZ{?5΢5%N%RFv毑[XWnǷסѫ0 ppev9QT9uI@[٠5T v])b%_8JJ>;&"}kz.^y}J.uGzw+UjuR_JFd{tTN..w&b( '&> ;;* _ng#C*kW^E0(WE;[xklM?۵#Qa)oWmm􌔈qфj-典@j{/Ȗh&Yݘ]%ԧk˗!;ct⟝7HVs7/{2.>MQBQTܦZolZG͵H9(IƆ[-+&+4 ՍS/+4GýOfԘJ埋UR"xV6#Dv,%'/}:g碖|@5NXp%S; +NrSﴥ^=m !+*#$Y+Jlfne #wwe$g^>*J&YX9V=cͰh(0-~LPDC8Jz-;Upx4JhZ_I `DHACxWvا(EDBtI)l-xڲ/sܯ,OsbY@iLц[ٸ+zY=Ff| hm(an&'cIpލ靷<=/3\Ρt(=%[CǑ %:B. 9鏥(HSO.`Q)f5""OFjBDWeō0DXL7oF@fO{T]QR9A6V?218r.38oRVN,?P{k(a}jzC5$%r3yC,܆-NNW03w\d̡5i1/O Z`u*RK@~YTQ9мt`.)טvW?=oj;XA=XOxa?bM$5aR+B g_:4#eT(Ϩ07n%##FF0 ~M/~q|{@:Ȭ]@iHgqYwoC>ޤUW'NI}EyeeD]80@ݝN5ɩkUYe@ {]2d)sS,L'r5+BQ58HZۏ,`=W{ j&w<*1 /WU =t ~7(Y V~9D``b_&bT> pkϔۖrw> C)&p"9x9fkFU] \j(BCLXjjOQeɮ*g3VѽhϷްEMT"l \yb]["q~lBT^dt!40-5WNtcKQ6H>Ppfc\9j a_ب1"zV8YjsI^6ۓ r:\pwǕ7\s% ?U=]dXF&4cm:q6b[ KZe4n GؤWCH/P^p IF iS6Toz1깲[i@Fǖ]$ÇJUoZX&t~ESQ0*W+ B}yp̉o^SF˴|+d3vqԼc&k2FkpLJRkOe`\b pA2(P"aȰYfimEqg4jX(m?U D"R \(?33 ' POmzpQA<U`" Зft KequP^rgW1O7#? q g_W߂9V'ڑ˱1%34̟WoKGa_Enjؓpg|9!gg fv"xLJ˻si`̆uVA䚗IDh_:0 .JeլQ$M٨s^Qmk)Wn|ҦŸݴųh8`)7m2+8u:L9=hH^R+ͲxJU]*5 p{~Υ2X{`XJkDouf4Uxhn#c=lA"|iˉ>}Xy2o*8@3fį+EUn_ 0y떃Zĭ܇XZI,BA8Ͽ)`r'ȕa a]a|0ɲ &iAò7=M6.xDD<.k2U e}Ga>IKG@;뜄G[[jL4uOVx l.O);Y Mt$hh &u*?7CuzuXd/}GBhNJMXĉRhPɨcGHU$:śv|E.MUۧ+ݧ+vzѻ!N7ar/F2%;<C{Q (WÖX~XmUcUΘsai»e-۠Q9)@.A%K;v'2 K 8@E}nrF] X#Īu8f&-SƷH殤?.(W q>N |nG4]oW$gp-KПJxB酪LX~T vջ˰R }[[k}zM<pJnl]@'W;u/h-оH9AOv\0] NHWt$"c"ȪҜIOW:X,?"0߈H@)?C++:Y2FSZ"sbRXs$\N ftE<9Al(WQ5Gj>~[J-AQo^]Ok}yls@ ȝ48?۩R*Rm /Ve0dF~Vxj 7a@B,L-45䵶 ƫsrooS ) 4˔DX2'8"6fxqC_и`n]20^89S5*os$5}!" gde J__D}MysҤ7k4QJ$on/W։lZR@i 7G5 -?s{2oUSpnyU*egR#!>M(8 P > '0AQXu@bO]ZN~e`>L-#wC(/'˦64OUgK gg+(p$Z&}&,Kz.N_3N/NA]X:Ԉ_MmiƁvF>pE>ƕyer(l\C0x1.wW<@vO2EA_ӈ*C$ Iōߟk` XG]^~f^n\}I.t6ҔF\y&ss˘bLT 'Bd2?WW<Kt -{V9k7ϔ TV1P-o[h`[fRM":],nKmQp5*gVB1;N;:E跿މ vFk<R 'lLH" %1ߓlZAU]}*ry6$wROǨ[j*K h}=R׮|<Mrɲ;-KRN3_ "Fڏ@< /m yT:}QٛTSi֢'Iqee~ W!f\psSDq냎"Xڔ j=cw#EDbOAԴ[!@%tBF:1P@>~ڴsU(>Z9[o٤T6 WTugYJTsfOTğ RQ"+,aÖ75IMDc*5dXC , /B@El9%Sm(NBp"h@,P0p4ʩ__T hI_N "z^Dnr9ALs(n(`ۢ.|ɆOFƎ2uJI,1@:0z :W-eBLōm|u `͵|͚Y 43 Kp*|ilNzXv> /Į;PdE=0ϸC @*YS|*!.|{V!|QiWRa8S9&==VP_n&$(ٖoQ i=ZcR+zZtF< C.ى!&Ol9ʎD6- P캶y`&>7&ܿk=D᪌F.&+T)_>T?>N n e"J[Wg1,bm.3I$7si/R.e|xaJ$5P?L) 6"[vHR<:!sϚa-V>uG(lRL]I0 r&싳CWC6]3O#f} P\"}3(Hȿ({^>햏P$DlkٜUoI$v+LJIhUjFxU6g-#5RT(Ql339AS/L&yI^f§kh[9SJ3=@rFCO6LKMvJG&߼-P:D\yѮD_8 E̚A3,)@ @YHd7\r13R#鞓j?>6b04ڹ.FFs^_iQI N 8 jvU7QW Jӑ0: &)A !Rk0hRb|LEPNgӶ |z Kg]Ub Hn(:wr oc s}\@,8>YԜw-iQe&=y?7ި_> DZBvmA 6WHd_V)ZBt}c_U?3K{UI}>7֗mv!~%ͨ[Ɩ"Z,\[$@ko4Bw͙L̇](H_¥*ྠTPHX8BD=  ;ȀeaJP6!I/5\X|e)/\T -k>q~WNq7Ipt_˳2'{UW^+nT3 7@q:Kyg#@ E0T!i@m<.:h r P k51eWױ=p, J|$fG% %'G:"A ˆ=etj,Կ{&ƩzJH'u7bD0C_qMX42BU oQK+dkԏ]œY$qZz>x#T+j ]^nld,J_ÚO{%ZdtE. eaITE8E~E[}^窻53= kxjgs.WP֮jo-ZZ>Y} 5mG.| [2tjH1Ь@ZiGJ (%ӞqU`hBdƊt$JjE5C:CW<_&?Wa)w{4\JiV8fP/~@K^aޙmFVZ#WO`TI] 'o2zL>tjz_MgA#Xdˎ9\] ^33Z*`{ ԩ[z^d#ٿsOz< W6dϴy2YұN\JH%]jqMV'׷?ԁ BpCVB?mmW_T7OO[_ @;Kj 4qj޹ĵI_焂yVM4`94l?! qKf0xm*~cٺC\&*KNke.(q1ʅ%p^L$1j * AmnxY5x?&$^.Y\[;[9OUan>+,4(,N C5Bu/S\YvMJ v,Yo50XNT aSnJFECwu/M8x/XL>zcȂn,KH_PU: C⸥8a"FrHѰK# UjAۂMy#Z;u@Yhgh\C0m/ewdj7K55+}$:jEG)f0 SĸLToOZ̓p, Nb1PAr6h=Y }ڟF7 JiW(^"`]CN%t\O:ʿ1Mnv@ 1Kg=wvG #hn3j4v93ae<~QZ-]`xiܽ$*^i~;v67e屋Fy Rz^Vq&&5¢+St)h@?YҶe}+|OΣ+c̴Ňx^[p=OZ"UFC=ДT/..AcN8gm Y|;6FhbNJ1:wYۉlI:Q&E8i*ڲmn}'w!+x~7-r_ Yv܌Dd)8]=-r`+?шYV@ ,67|iZ} f(K]>/ih˦ ȁ7%zSN>J-MeBXWz_[.s.])1`#Jۃ"ĊL6&sNdң<hכ^IYs68L!C4b cOipu/ % Dڱ'TCHTDQ=uߔBZZ1Og&t.s7U1B4jwM0?ܗ!t{:}=I@,'W{3x^*4T`zN5ם`!7Idu;y^#%00!]*NirFb G8KQmפ&\-<^03nJwg}Ԯ|ګW]Һ, g& {kow"XQφV)/k4p\^Y8GC0;'0HSrڏ ޢ&UݧŸ2Ggj)ԓB/jHI1GR$C5$rM4z-YF]OyuX׳/=5hñ4Di_{:XRP4+pE"\Y~dbwɕD[dgrԗBʕ>U&Ӕ VO)4+Z2WkŤ^n)d0gq~4m+7wU7Uf?֒h!:kfzܰj  H!IC8%"8k`́kCڲȴɺbx"o0;ŖT^,p1m.OaeJEnEq^:`=!z@t[3}w#1 9Yp8ޮ7#0tu%*'ǵS,,3EIL&MSWE>~ZfUH[/F!OTqvLz(-Ei]WɣPzj>m]B.%^9KjV`{ã:r 엎i~ل˵f`4eXM2MѮ6#-8|Ba=ks]OsYt(]= '?%Qޗ 5xe4 ,Q0AҝN6?5e HO~G7ɔu"(ƱT1%ЀoVs-Hm\ǠPwb: cr鄓W[OѕS"\vicW4'vH.S9rE⿙ "FS_m&VJ $C&UodGýB|b2]Y$ ,WDnJF" ]xl'C6?DD@k F{t<11&@!=fsgvZW@^?0LK]V*5 52f0j Ma֛ǹn1&M b,ϐp)> 2 mw!v)v8.x'eNhHz:. Db5_6djI)q'xlh FRw6 ʝ@^ޖ,EuC_NqGxhTʽY⦇έ1ipA*NN*`)rijJϞ27,9dE~P܅op1輅qr-Mr )GSN [$Q5ac߫ҰjgIsHƚA)b^鮷 HK$AIVъjE1( h'XPe(#ϗ*Im^T,JDR_텕xfy(vQ\L D b윁=3 a@-a?!_v6بT{pؠ ,N$W5l(8}LǠa ˤ%%+)Zuifs88*?qhWnjD{-e ! dohd2AtnM/VoTp6.]{\y5:HZ{ۗוX[3:e%E+|kH㼾bN(+ /j2 =j/ht`kI0ZZe KTd/+Fok: )VtJzJ)cB]aXd )Č&,y,m6;꽸-ZmU2[Hfȵ ,xUXZn:{Z,"k+-.βHnl}דW>[ YCI@M}~~1f@^ ]NƩwBc8  .\Zmasܴm֮`;qx8i(d.r}N n8YiH ě6W$z#@۽Q6p3.TrDDPt{TTQ>UK2u?! ef@eJ#dل<<*٧-E'h]#|ֿZ ֌PR.Q/\(=R.6><ϙ_Ƚ /;BkYߍcIIW3j s&/OWd!WIjktQ(*p_=;K Mۉ{S9~i=WAa7Uʐ[~t0EGj1hQ#{/7לthJ?4*)Tmz.cOmT)!CrD|w2]TO4-S(Mt6RZ|S@$F S@I6O3_Vm8]  ins &-nϚ)&?3?*~ 5N)^~q+('mF.9 :ݸ_#yQޑgqEOXv:K G8*&+|4E+ Risꥂb &y$ nEJ8~Hݸ[ex~[$8"+sRP2}I&5 -++FF"=RƦe-MPgn[C6e 7:O͡[=#KbMD_(Au#& $Fuv`l]ŇVL>32E:8FvIV,ki+'MV+>E2o8iR WMLV PW WԮؕS4AkuЃVYCs$;6k₤E &^HX Μ@#Vs "թr)X0,eBhJX E8RYsxsz.Ywoa "Z^̈"LE4M,B|b(x@q|Vjoڽ^/\@Uˋ1,ڍ—+B3RYq? Y(|rX~bf"Qyԃlc-+8=Lh-jOV)+j'a^eXЯ%.'Z(slCZqT(4lL{鍵eBk5k #="Y q+mrܥ? Xgy^( ̵3϶X`; lmF'C%11fBP[h{h<)g3Ms+1 п Yx05d?Nk|-eJ 1,!͎٫ooԏbH#-#Z+*h $R6 ]khՖ78V$#/F3;,2V&@hʂ979L /2p;,z,0Yd= ZgF>Oz/jeXIˎ2*3Dq(5^r<,|&tL&2L`tY{>\N?Y㹆\tS}hnPyX,:7 C_ۍLF R{6w||{H@ىl ~e5.RE8A&5dsY e r0(+,;p! nw*=L71R4N[5Sÿ~86{T.6ke쏽`ć2{!;2"ʷKٝ)'l_ϑc@y94ZOxM3KWvIDJ:CD: iG֩zi/Z$b*ۿ6 *V 5vTE ` Ńb[ܮB1Y/Oۃ^_i{R麀ƙt2:͛4<  ?ZWqpT8B-|EƔn^7Kk)eYl}I #\j[H!I"K7RʘGh1+lBLl9tS!O8o'|P]-LG+ OX)gb9=h7R[LM=N($vY !DSCylD)%^E%v"-@Z+. =wd)ar 6D&QgMw{Ot9|G#I!-2'p^x0Xރ$7(x~B)32`a!3!aR\izcjii4é-/  @,QW32L&`0F(c:S0)Cߥh \TQTOLBecJ#]b5FĠJm^7sV"+s%j߬ͳ~ D z ub% L9;#\NeGbw".,ӄz"xK-`(]`ErODksDps: i߷S&22;hfF2OA{~)h=2մp6lhf$Ϳ۬z=MgD)%ee}&>l&VE`-aOܾO˗<>ز &Ggha@ܺd#TW?ͩPXB>KoT.^"ӢP8./Q 8K݁stqn7nv!n=3qjoJ& :{fMӆd_X5`䓪h ZTb{1_QciL72~Kfnbq}GeQ9: Y_:w<q Bkl~dn4+& -q`CQpB]9oێS T<=I+dݠߩ| Ӷ08T'Ib9{6/ F B-OWK[[;SL_1jGW&Ko B}(W':57;p7%9j qd+;Qqfz5p][}.;z_d08tde*ЂmJM {]= &ZC}x% |I5Jr}0;$IeϘa ?6BגHro>umLV=TnVij?<޽:F}9ރIS u 6r\DE%'0(A8ZԱҽpc>A{(awTuJ8p=" plW~rhCBkdr8F#j iɟ +twM.~Y3%NY2KBGtpq«kyCt9pP~1^ -8v$Y䶉 L:W&2Ap(lfç~O7!&C،=)B;רgPm6x!~g aOO9ٜ"6݂{Du}GgSz\+(P)лzt„ƸhPlTP+u t qu+~2aY!ݴe\";dM\z5Y6u%f=rz=͇Nʤ(nGÇ:*p680.!hEaqsb \7D{O()21<O:v6}-dj67Ӆz(ͫĢBuRhgA?ikI#DXK.-mPI@X|SpkI/^T v;ᒉSS&Ili,uNUBC3Ɉ,k..o$O"R͟p|p_7T&|V}3 =u%gwcz11G2)aT] ujDx2G`vvmMNS[~5 :3v:b*E^uKd=ۧ?njX"ّ{DZQX^lr;)zex;:sA-:54:)Fߪ^t |W0e(CZ.0gփ Z!B5` *%t FTX}-ई2﯆M/knV"fTf4+uE:R2Qh^?}Isc|CXǯ̠TI_5U-bfQ/W &) et_[ZS܍ $n(b}`<59nJ?p'&E)FEtʘZ߮BJt§7.:bo|v-=cI?sя pm@c_1@t°̠uWC` 'ƀ;M -#i1jb }-UyL`K :~trI3 Kdpl e@[ΔLb5ێݛy/gLtY_u29  ieϷ# vP2Ĥ޴ !%7Y\)YP*8=wC??a7ke{D#Ot'&h#&ziPN+w>&h/o$䋅3Spfqz\Ԃa)㔿J|~MH1rS5EѼ'S; )c#_Ҕ$wٮ8ÆS*~i3=6_2-18D+Ua MlE6+cAo}WBRV@̉ q)lA|>Ϝ .u[N3&6>J.?Nl[)霵7q -[kC˓BfmZTg#zOWC%LD tP Au$Gѫk(h ) !Bvah2MQ%QRxpeASIR=þ<U#X /! ؞,L4/0!xZ~qYZ.F =?MJPVY,Rxh`ݚY}R.[)*'BZAiyy. W^~Z7F~#J!U0CӖP[Dþ0Ϧ{7j3~PKMv"=Cl}n-ˏ@:d 4X?>jGDHyˉ By(&T%C~F6/bX?2_VAmH8YqA-c.T:Ŀ( %'/[8s[ "4f9-tiji4QxDduu L 1B&ڕWJ2"2a^ig?f-U3 cM‚fk5D;R<;Ψk) LvO_,Ϡj4»2n0@'O1?#9 P>#42lr[F*_71XzwB84 _7O&VJVf:(z:fA[sCC0,F JέP " |l3&FӌM ]"$tۋb~PKmJ:.T^|a`NVkf~tR{)WЦ.8_rg|xf%[ZoJ+9of*_K<.O*P)ԡ Fa|J66L-6)*kNwV~B! #%eLWdB%U/ֵ'`{VxEAtIn_q.50׃mݦ{JZ-S@9a7~q) (g=GM#KlZZk#pqU uYmq<5HpЖaFYU"T+KVWeN@waae]t`ۉ̬~Iy|d}De5W  I xN |4%ɉhXѿ0yJw3t;JP7){8*y/> wU]MpÇs_~g+OT.;e5/ ZĚFoDž|vܔ+Ɂb]OG{ag8̷7&�)WkF"R@P#'iT'mj>&$[W5 aȴ,VWpT..h3Gゝ^ad5=6b\-8׶*5 p89m3_L(2=5 _d9-@='2n/Hq>^P/{졠 qQ $l~|}4 oiW惷2% C¢5r@ذq+Ry{ Ӛna7sRv2wn6[ CG [P2`J-fr]2U.CgM[pIiof߁KGyyj# 1.짼 *"#X+^1ƕ5 UmZdgŌɂ!ȭϷ>irh $4|P^Z  GCپ1 sl;N"cÍ P.Y$[d4h6~P)6yZ hUv>$송OE劑i Ro4'{xXc?,+^ikAXt_|!S>%l\8k*hU<U*s]ȭIK laR*XrӟKhXMţT R@"R5Q0r+#4i%Âtt,Ppy{Paa5 )A{D{rkʶ1SӤ>H&!/(6qbkDkmJ䚢JSTVH(MHȦG O lMx<5LsWw7&aOUWijC#Vrҧ<jqQ1{"G]M mg_*o7:E??7 A҄O5M@TjG{) <I \]#kԺ:2lht^ bEe\&>Mh\O= ;\/Z[XiYR3HH~bNd~~j?{dxkpXvJm3Dg] &CT>RPD[v\=¡ PsW$*cΆVZ"Z}_wulM 7EV`^MY.o`-U)[Ss_ ld.ԵbDT6hL)X#@}]oU8KV}`Ks5Rkb`<]CIA`e ןlՃH5Y;9Tw1#s6e=ԚK2UEHFjpzD/;%M (g04=\G5W$z c/fF,WwKj*exNL<<~=񧷾k@W-^Ot 355_tqZscY6s[7Q6qwC LFd<F\AXk05!}`(1_^`D;nރS$+zyo^seҶ[Ȩ㋃IW_x}>>pw(thW(fzE8@Q7$e:w >΋N7ԹJuTXu<'7cU&>a& 1hD-K5ؐ(W v?ɎWaƚ s\ZL^, frl{,]|;oĜV`ɿRKGDFeZn %O6lI;VhrL 9#BeGV~}@c/ψr6}g9P2!Г\ŚL3M#ϴu?O,'_k.g3[WذCQ˲k`"ceVfLW޿-#,WmvhVCÚS\iD61Ή}HŃU&3k '0RJ:mEi@ Gx fmfϔ)m^W&N&ML(>luqwǷ;JN8 |&)@SMh,gֆjHS6T@ȟvAZgwe"| F >Њȍz|Vk<%D_19zM5 ZW F&C2y#ǛEgȮ>U~e7b*9ȻZhdʲR72í|VQ^wqp P0TB}I%Qi|Yfz{xGc=~?]ҕwjk׌rX-M;9ᘕxX)ArDl2S^`*}gEH:֍ 5w!xTk\')*g:,nt$0V'ܭpRA馊Q%zfDr,Ʈs1u9[Zũ')b$xkL1l%lv"Tcb.;ܮկڨⲷ`Lxt+~~B`!ݨ96z'I޶&~i&9 x"؆ =#r&2D{uCV)W@n,(xogަs}-Ww$d&/_K=OޏvkMJ| S~*b ыL] dq/ ݎd_n`Ǿq poNe2oZla/)W.`Z9&9r|8{<@&Ţ$0Š'NS4)v,q2sRp A#b۠iT 8>' rf.GIxκ"M!"ciR2@࣫1PgoĊ9uGh~pU%k Ս,*  αpF{(O'ECJ56(טT~r =b 7ES̜:;(OYbB}B >\ԔbO5Uƈu)]6X2eG~,OS4iB[uix$\[ Bo?%NX^@%"Nƍ0577%[CjKnp~2#_BI4թ(Γq?##N`0l;YL=Nq󞸑ՕGGBqBZÒlsu\iT5GW|҉*,g)fV 2*&Mn#J @2=Em@qNs;L߂EM:Ե |ijZ%!vݚgdQ{CUI[g #S0OoQKd[\ Yb²k2e$#;ב9 P4`)1;/qnȴk4a؁ʬl 6ƣ6qqH~NڇH!Ɨ2y$PR(]F-xO,h~ȖR׍_9j-w«৒GvtSȱQ Tg$ܼ'tTJc[ʇQm)"=GH*om@=N4)'[$-ꋦ#/Q~tC&H`J׌}Ho&<']98d4+ﮤW$ LTG=(`-1 nC+~c:fdv,;1a~O[tޫ0R;'4nSյ9~ynglD)ci@p!Đ ?~^rկ<5{cG8wĩZDejNZT>I9NծUR5-#te:MD}-)l1 xh£J؇kUq2=PZ(ޞT`&)P 40`Xš(Ҫ"fh/,@V[Sē_7V q,16?{qNCJtѳ\p㊽SwWj=|2T݈z%В8t< :׀ LTg$)`,~S.ԉ=Ue D]8DgS"z9. `/.TnU$L`s7Dlizm(&L63Qfҿ i~&64r|Z׿m~ʁd;{Œ $o2~V4ju+:+f,Iks>. zrs cΑWdƵ'VuՖy27I[|gnЛ//7wUif2%EK}lЇiB#?>^5 ڙV+۪'G-z>wYTgߴGeE??!Y:@JX#uײkjU?T]f$jUiN בb?Xm]kS$nk}̐"lDOXG%Y￪Seۮ&Ҙ['Gln?ڳrր3sݶ.ܷt'5CR!@uigj467%haX]h!Z`yҌmXZ'[ =+iP9Iq8~N" KPdխ(d ,?;n0P8afxnRjQܢr7CsinNˆvʒ?ى fH:HG_۶bt2~faՈyqd[:;*$c v/ +@L#UJY|/ݣӃ۫rer]`xN F"CfR5e*Ӆi}bMA*^fKœLxi93_,JD6kPݡ/bL!jG t^WC(*+}f65¿є4)2^Iơ]4`d/B_.O!)_ =qgxCV*qԞPHz}1cA`&?垷Ů羹'-ζU5:7ށfdBF sn)(!O6pxO'شm2a V?9K{3Skx @^=+=D Ʃg1߇d[jI^-o#a?Jn9 ԓ/^H>ܧ6Ž$X(]C>g.dń; -s"<%NY;siY~d iخ 'erF"CZݸu=gR ۙMjX6keYw(80 d)DS,N|i1 dqvUaBD>荝φIQH6 5^w@nF-> ]CVtO@<ʤ0%3x5֣ƢAܯ٠Xf#й ~4$T3d<ޓ*T#8^PKt߃^FrӧU(5i^rV#%CenQj,^23ws? !=}+7-x~g9pI𻋨5z'ue%^i:H|{D}h}q^+$}dǬW#Վ!<|5GA[L/ePbx^G!ܠ; ,d'}y*`5GpA|Ȇ/MW$-v_ X6zWfCH(M'T1,S ab,d襧&Nj%aGN!&vJ(DjJg^M|0ܴzx@ {t `O#] `:rEG3wV[ȢŵʌСӢ88W6/C_@[/OO\˧>C#Pr3rޣ *Dfyֆ™% w/di_I.8g3g&a7ಲexdN ۤj!UfԔ 8Fn!gx%^: p(.-}J>; #X N! S1[=tXOc9^H # sT-vw2LJNU+# I_۞\3>X[,wlGe0ŷ@6ݤ,08 lD ^Ns6re (]¯.]hljPӋ 錪1կ ~=//)sׯ{zQhdz=cS`yW絘_J3 xy)Lkg):fq(kMse@r m0T82w~MA `qY ]K_ߣ#@A ׽oTlx.8>m숩qDi[ Ь~M)}J~bkMX:BGb{hn?Ꮅ+52[D'ض[V"X[-? U9S񯵨 jĶUCX\LE<6Bj&OeK(ӽnɆѮa|.f4%UcciZ#LBLA5 l l|@]y.-wOɓＱV;BmJ@Ɣ점eaWYO@S_h3Ҕ/ntXlԷIXF#սC-iWw#\%h]7wrp] m=j`2=,zSi[/Z`L9ArA-"< %53$ 7{ Gnva"x^z?~#Qfr($B̵M`@>+{K/]n>Q\т;\o7 =fԄҖk*18mv s#S*gj{{mL7+HD-^r3vD)8Y*ߓڪ(9FBd.xN0n!o $h#2f V|S 31!=˸Dc4<ۣ-UYxGqȮ}>lQ3VIr ycKXWʗWfsE> 2X!%:4zB(t'\Gs(; YO[|?2#2uWk8~zg~ȧB/(6'sdpfKI[Qaӧ\s\,xw7F " Xe/_vy 6/c| ?2}JU/fǛ(->jķTۛbw׊+Hl-``f=2u\n[}J8Kb YR)d Ul҂t[3QFg"O2[4#%5^B8s(<_HuQ25e|pzA!Vl P6۩+5;f&g]3jz"ۭnV3kzYa9UvJ7dZ}Sw Jg761p7G땱%ǯߓmPsVX\j4A~(+.r؜ j͸@~pU߈ ,ou և~+jcI(5H-Dga| ˑ SF詘hal42Sk1!QI^dZS [ROx۪2(XTnS蠩rWbDN H%pl9,2{QccjDNeAo4ݬDˢ@d{R%-|m l^Pƽ^@R@zJӭ6TF I9s2Q2U,9pOH1;HM} >zu6l&gqu)v&]Hd <G w Z,,侔:rd`]>T7n cb^g2b6},Ql[XJҡ^ !1b%|8FamwsQm*"ET ƣs[d0@^1(Ӣ熽Ds]ߑv}P]=֯ %c#bԨ{[Qo J[/J[ 5 _BCg-f^9L1y +hӚ^ϒ\a-?Uur(1n'x0>ˈ >F]H-4*>$tk (?7֒z)mغּC)%r0+G?MJ@Pot4Jv,) S(|Y] 2H-ONDa<'zlՔ(iG|)Ҳݢ;Wic++,M҃,߀nԙ`7F ĿU҉?CK(s8KZq5,AN<Q4(1XrsxS 0:sc~iKNk0^g#Fp^bi a`,￫`}V=k_1l˘_ o+IT <?OZo%{8$:S ^'x|7dA3,3 )VwJI G}F2qMDÿ﬘ &6.ɏݽ8wLE ,-!?V5StP2g#K/ 6NZJ{xޞ:B#NaPJ.Ɔ9!Dp#la3XpXOPpea'և{JawU(g7P~ iՆQd1,4l/!Pd;Kpi"~2ɺH*_V$O@6#f#HhXGeuqc,\I, qqckQNb&!ie}5g)j*H4:WS60tP>ل0EEv&"nKx7`^,\WH ^?cGt3R5[z}j#~/%xq1d8Q/boTVЯm5JbCq@ 7e-_XYo? jL/!\D"+KEGdQ{-~p4N{Kx?!!]8ڹ>(<<ȶڧ7@/{S4B\\Ē,C󶖮v퓁ȓBbYnV}̸"paȻ|BE \Gs/gT݂DK@`1`UC)7 EbT|UY6!#v;ӿtpm+|A; xHH | >nkի CYO@oD!,5@㈻O54F Vs/nr'Q(*"4,i8=OꗻZtB'Ӝ(ߣ<@2}jͧ)<~ZpɒyAb{7od׀cre|9 QnY>NV=вȎP.eˇwJ?>_oһL=%{ށN4 p!HQ]c$鳡IVܨSqJ9}MsO{[N1eSa >wB2v,J|(iKY c /-,: 79:_+}aWm"}r'g.n{ы ܉ejo2 3ELн 8 ig)v3!QF3m՛=t?hX2H$ v!(8"|-AO1 B;+=V:/{֦2k ՊaN58uv|@oFyѨp1ݞ6UH-kXdnY>9SY|2v]o<[dB u-{ww~۸xsHS ܰt{vApPojD{~vn7S|T9h@W iQpt,&._I4LUJ2 ,%E %;Hm>hΤjFі^yKD( PS;I`+K&)|"ySe`7[5TdacǼs+}i.5up? HL;IM%ɶ!+&N+#^&#i 7f'$w#Λyr=J_)Tg7/'mm@Yvgr0QޏbZ@ԅA΍kN_a2b8!-113Q2t=rI뉏VIXw'uMnǡyYğ^ !6q BZ@"ąQU܈.ZbSyn^#n{+ VkĎozOݖ{YLa,X|UG*)MwՂ3+ڲc-sWHJ0-vms7W Jl% {[,f ^6qܼ\KiQ2Fsm(8שYxXt5krϡ,U*cvRrY@(ns3츥5۹#R ',7^;mЇ.=QWФ\}(7Dg|zKC XǦU[Y\"9r+@+⪅eM7':8Sr1gԢ(ްw`G Q:gk_v\`vUQ)V`4^"d! վs\ L #*5zu>fqT;~TIf''=6XW<Tǯ^khgZ2Wzgˢ:M$.G_p 7@j86lyo I؀ &}(?yZcX9.@t`MնV WZhLԫZvr ;OP~ R!@pҭ-MR˅dP݌?%fz3*ȿa &ǻ  ݺ~nGVmD_]%Rs,veE1TWy΍ %/oJ ?lVj.+ݼ9mUjgʦ9l$5fsRRf]yWwaHʙ0 )7dȩn|6`S*V]0xd[PEGúol{&gbyM9sXU[LerŊxHi#ƕm 8sp. s 9?~*$aLZE@Ha;[JNVa&uf=T>* D_1@CGڧw 9ϰMCk=lw>?g:!~ڈIcNp&v#_A~\䙰x+r.#G+}~%)U r|ƍl͐[V|05I|_-4qmgEܤGhQJуt(i{}pL% Ւɖ8tW$#)xծ垐˷̈́JL㼏V{ ($Id_t-;IM#')jbqvLJ.8Dlg&<ȁeN0=Ma[:;9}Ȗ}εq6c抖M)yq/Z6k뒄NJ%DԗC؎?#eyO 0ؼ e!XSޑ>ըECL& hX `D:ʚ#u`HDo<$WvaMy%W-X@7Rg9*,)Ht*ulm]mN Bo.Q޲#m{7G"*8M1 Da.`TˇSaua3mOc4'ީEmM(x0ZG%Y@N=-!C&L(b,뭸ҷ-_N_Xwim(=>}o ;r%Ucj>=^!;7C{>mF&;浢}і) >%.v>Qw ᬍmo23ӂe&R΁ΗS,iOW;J#ᦔKp()x[sږw%oH{ 1z)),Z+L/M \^k0]ayAEzŅ:L&z_uMȗ%dq} jK_uRӐ1{G68,r-CJ<֬WKg6 5.3F=n|D*yVk)toW,t )[h gXZ8:@BAep U2!A_?mۊmU"X?RgD<6biaF uYBdNYW[,Zφ戨3TKA»YBdky#IQyL ^3+V?S(+^$ 7 XWגLXav;mOweK*$|(lFT𔩶2<}_ZLv8t.vOۮ=WvfPmtn.XgrN7"uK5u[BGAۥ OSZ8R<89SS:W"g%e~*ڑ pd$q>x٣@DG,ȍv Mpf2NkNjД/Vtכ,nЀ>V-\1}7d2'A8XWȑ̕%e΍:7]MF &I`*> Z6Ɂ"@hQvdex8F}g(?S$8Nm3C -@ .wA(:.E5TJMNP-EPPdƫ_D cI^'zoC_]k:|-b2.~5L'~㪲`~5vub;ܣuq"Al޷nFBKD?*anT9C]T+% [Zt'{4nRawqxO7tknyo5g4K oUeё\Ķ[h^ٙZ =`3ȌnaN=+ * ){%νPL Yxmj4D- 6HOEsK9kChݡng8&ɠ S"s3)ze]~0mu˶0 Δ:=گq~@ATz'YoRƗʋa զeXk/K "IO^]öXU+IYURǨn|ɥbz6k4x|DU( fH VS_d8ܨ.-`̂D i~K)fb9{/H|!r됞ji2# AteB``JOcF[Ŀ-%On]߄t]#jYm~Bxmk1_{`sHFG%.X䴆'*R;%FE7nFɡDv՟2]_}I4_ϤkB8!TqǜiZ"]!2&>H$*hA$܌K׉쳄_j7ύrNY0jQeXҋHܤ +"!,pq6/-{qJz[G"ZMbGgXh՝BK7nB"N=7wR =ĻDߺ !`<\D80uKjC^g'@ab4?'= ]M n>t\ 9,D=,ˡ!$ <: IRg=f,p棢g{<+=5}zzGaތelto4tAZD OH;kB\Pe4{`t3}80䤑?nmn~ .Pyj颃XI#i'3id{Ll(s^h y _B l&82ܚHoen9z XX7^CہjBn\8YyV9uƊ772yUVZryo^d#-+$nz3îf\ՆW~2 ǝ 0&𖸅 !3N+#_؏wlFXOz଄q"4ԩt* ZP:bDQ2q4< \>t͹a~X)uՖfѮ4 \O !z_0C1jX/\8pղ;-_E {7Nw=&t4O-y-C#,2QĔnk ٪ NRoo` oPv1uJk],RO!W%Ywj-,ܬr¢Q1z[?^a}J>}.^ hH! p)>jDĔC(󂧝; }ui-5KN77aTiYv~ ;^i2) ev>Ը5(@;h4@w28kyd8%:[[ s9OǡC勇/U@ , jgl32T1 ZfL¦}!E$aWQn)+K~3PgFl'`vO>/3$8Q<ޡtЈ剷e02fz+Z/>?̹1ڇ_X!r6Q2xrpDzrϺV\ G4|nVҝ8$2A"Xŷ58o~,N07D NJ= OQLdPȽ.#\D }t#Ō ni.Sqc\:BRnoؒnmFN0+zdnT|17(XᬯGlۉn&? cْ̈́ln!_6=]p-a?6Mަ\zNl[PA]H3MLU>@sRM |g2Y5g*lIbWշCʛxNygmPg<)bKb{hF $oH*/2k/“ *11:B9|]u},31'w<-8="WΪ L@>(Qj c bY+9scH:T=[StO!c (q,Q{`”c*vQ&D WF8'r n-NDm.rp:CPolǶ7ORp8,7p : T:wKG \5ҖOF[$x:ㅓ]):4ƾvN",٩!ydSuONcP:ыOJ`4Sy}7Y"[GG.§&9`6Nd[h$h&a/1g߀3:pӜ{碠CsmA#Boh5ȟ9*Л-AJMwv ݿb񪽃 8mS*kv6lwuYJahC%OOcquv[ńJ}'oxmyu˰j{_i+>Vh9yCU"QĮ6r5ʍڍ0cVjȔ9V)=3v fguЛbHl5kn\/_/CC&]b9{է*'H#tJ$="aow@X_=sPhn̞:T^w 95 +KWuhaM SP׆wP$77W2Y9Y)aس3t%pSI<} ʈ+=!= K \:* [\1̕MFKih= k¾Wu=:f@*d]&iT-eJ3U$y)b;,GZ,=M юϥO}#.LGJCmICeH4cwaAN\Yt({EIlXfN};+nO;ݵyV!f:˧\[PA֕=6nv3UPLGrVkwo)I㠖)A^mVI)iy2~Mb"Ñm^n>A(_7VwRkQ6.?`kB/_ѰN BGd|r&vJ! #_U2P`(:xY S;nyVDnzQ=j9w$V #{81P/cY}o_X^ aдd֓h{ndK#!7nN}zxĠ2݁ /HuJ\ vSų;g휮EMn#}I9˘@v3\x!{2WB/ʩjj,D:NjJς@%V "LH{(AO8=UA&@f:)&AX z`'5EJZYo !Z}1̄{ٕvL.*~!8o9a>Q1|RlSP#ѻR =Z g5֥ Exx7c`G_Bc4sp Vh#^ΤMw=㴬f7 p"܋nSt9H3@#VQ1 {&@KyT~9}{=|g9m[/6Sc;P} B7wGˆI72O"۸c:䑦5&NAc5}tS'tarrֈL_1m{plf';+Y(,tꪞ7M\FBheYM٣hw(oWvI:#y`#HQFW߀ *RE܅lr\o(猠S|jjG-zʃ2$.uU2R:ڦhm)[ Bko`{E>ў)Ym1Qt=JPȃ2n&>rE A Jٷ#k0s~WR̃t".i+Ľ ȉmDk}aXP32=ﳦQ}ZLʣD,ÁHZu-$wi? :9tY~s=u,*Z<9r^ۋ6ߢPAF~%.^M>0_aŽ'T:ŰĐI-Oz}{K]P' xjF뵲{&&si+aud\Wԛ{g_R(MT[AA=i0f^i漎5L1 t8^ߍpyĴ d4}a-lXG6̚qԟt2~{Ob0y@Q4i s; ɂg@H P '«t)eӼfP3HE&⃟ړ4}`GT;MA9RBM+Ny.,vMAT!X!vNRdݙ{)TX4?3ncׄSY2-=O1NQfcpLS)Tӛoql3 "QԠ_<nU*ɡDkz ~ wyL_[ p iM 05~4ؤVE0߬rb6>wAR3k3aՏO,6f׺8GqsA'IA!|lpe?DPtSvexr35t~tfT H,Q6M1H?屟Wg!wWAr.U1u|oن!)œEƯ˜ C,Oy_ΆJ$-]aGZ^mk;!q/xF5B7k4JނV,qb+G(KC$"q '+T%wVkpΣ<]7%m3">JF6a EUCgsLMCsWq)jPtƏTeYΧ-I!Y/8@-\08Fk`c㋟l`F%*с!;Ot"iƼ15`̧εQEY 0ֶK`z92sƦu*7_Z=q>!iM2j\Уd [QhFC$>X!`oNO0ۚ] [p;Jm ˨DC* Q ̋GݔI^Ln Zn_dîELaV=F_Na' QmӆI{\A ':@SbT#2=i`Xowՙ鰠=;ȫ> ]P.^+)f{喓Y^G5u)FƬ`EǾ⃏PN4n$׸swQ[!::f|kƞM`߬sf$ʷt,z $7ȆmKHUYwҐ2?24KΊ]u{m.Ҽx6 CR]-)c#km)G"Djz[ VԣI=h[B ZywoZcaO_g5϶i+B۱\$f'o+ Kt8f+F1A]sQxAr -iN qmvxn7f D՚#R7?o9-nS0$)rcBzWMpZwJpGCG+Pį>LM&pC7:P 4w%bO~s,wb5&4O%ǡ*+z!m [eH..6x hna+;':y`u;G)L}L2.)Ũ5ŏw/ y7 u=ן/0܍#Y˜\vlt[jFu=1Xn!R`e&l)U*B"4y)YOU)J)jʋi7D:HRv$ZuPܢ)smQԚQqRNB$.cRq;iD+gCpϒ璮YԙLom$&rE yJ%DFPzI{@\MdQ:k5yfDl^fsVa!-ܺaziN6J7b#~"4|?8n0Dlߕ_(?gTU""4ukI#l`3P#b:qO3%T!6OՇG/ԋm#A:>kj3Љ T%GxAۀ@;Lg~7m՛G0A;4 `& 57 wV&a<}1.䢬DgD# 8K^13QJcSy+l"/XʱT8U v۪ =x m{ f {ؚ13ao=Zcuü롆smھ:h4|zEvA]"b$~F?w"s|r.DB C1+S(*.f(fHA$ȩpsEc'hOk HȾv o8+i ZAǚp.*ǣ$eN$U[RP>~|+_<,=DWoP Gvj"*kHa;F[ҷ1sT0ۥޥJNO^T^jϘMsSgOy5 .IS1I\(ꐻb6#0+]D`SxHXC.48ҙ6w٘W4F7qaRaYA[Kt$'Ă3^zOG%$I^N0 52U oD*"21%Nox|5=q;+#1{@LS=n]W;{BbꞁBxJB_ʰ\u ݻ{~H ݖ9Vj~{sMk!v͒ eʳ);1P4UCnCJH{6}OYq AgU.ne6rY0QywTϟe@. B3qBŬ؀k$>Uꪢ#9X/[4q:=2~/D͞pJiR( Ucg!:[ңy*Уx,# CMP^sYU8^H[!0+o4"E%=ϋYYG{L =X [[7wLT rZz5*䓆vUWeL=ru7i97Mfv*l>sg:Քu5mr42Q!5K.K#(Lmh%PNrBeJ H⶙n뾲B۴k$ ]Rqn7  w5w"U„\ډ,UTaS]^׋>q޻c|0aC&><NxȪ8ZgI mH^2#qSa\4ZIM.^&}x_.gK )l'S^B!;qS/?pvq _ ^@ Bſ1 ! *sC5ⓥ˜_XVßi]ō*#U <$j kBJ6k0El\?jRu ( 8ͿگŽη#γB3Z=-XHi%[|dUf|7\fҸNPܼ(Xy2.ғߞMFh- XLñsitIߒqϨ.Wym:Fvb8; ,@밚c&-rKk \ACU8\kH?2ォ`kMxlG_:fwn8m9ˍ`|:Ht DSI9BΨ/= t:w SaaYmEJJ<ݲBǠӽ88Φq|rS</D ;W>,g8kK;RU󈆞"q=% ٲ+еz7iB30TJ ?#xUCCD[bpeS-8ms2`T`[B3(2 |y>ʄe7Hke-;r9_𠲈C[bQ?j37P rXSgʷ6H‰ρΕj8-\4[˽HjrKpc[ECvg)dSac/W㺔 -lsD+ )me 'H @gs5J<8ogKlVkfPȍ#r_xu\!w%auZz֠K5؛gJkb>8n!? }ݜӷoƜ :$uEdT{ܪ0_! |ϋ`0†I$OR7l53ISf2=vjoj &Y3߲keWQ%$O/)3I-JM󳪚̙(kD ߅SU+x'Cc..OdGG/OD}eGGpL Ͱpb<pNdȱ YT3 2E79K:\ י[mT)= ԁvKܴdJĘ@"DOpwOemNH1)Y8JJcٮʌji1̝;2#.e4w>~7? b D!+}4 49_fIATH$NJymٽdD61Nyn5zm+=~4M٦j)H[E1WUHoKWYrU0 waɂ헠d;8]MOR%N/8<o f#OM̵9UN/>Z?g)VsqTyqz?Ou )#ދ:0ecѫasT6&z[ Fr]x.wDr-珵!{2y B&5S{J4\vzARlPͫͮ)so5'El7?`+ǠP7ls "9rA"<4(F(%G.&;{^?]&Ƌc'8Gx=!ꄹ:={$$Ep9;*7n6VicQќ96Q5%YuS_d]&b>JvL9=1Sms0oHxaePBr(}ķ S.@qa-|~Ms{|x$I'@f+cXo:zoZhoI2I( x#;gbѱ`R ~lzDV$K o_*˶:mR 'G9;djf؎qKmy˷#k>R;s<!ߎӄF@^EH|z51N`ϼA,ZU1Ǯ {Q0bsG̟GmI~(#P( ֕>FzAt ~5)Gnyf$$|KQ(#63}ܦ[TccvJ+VT!Q;ɂHc"gݕe+Fcsҁ8NQ^4Pmmm45K<ğsFxszKY&׷)YYXE-Q7)99TX<^m5>Pp|:'7UqAC8.D6'gc2JygT[̃+9yTT;̎Vġz)X1t4 Ƀ Z dHƶsgFu9J8Q V?epX dRpǭӛ´{vdV\G\1/U |N38$-Q{?G^1a\Pw8 hGvR5w S:Xx0ꋲbx{Oa^eĔ =-L$~.XZEpY)6[bܘs>D;0'`~n\zm0C~6oLxJ|;qTïo˘Lh-:boN[D1*Qʁ!BӢAг L_F^_gM1!seTj/l{;XW/b,dQo;9(p6:g hsR[_U 3Vw,56pW`JN{Fku/0 `Mˆ cEHȊg~^i~dVU(CRj6%ss^%SD(5̸㫃v=%` 22ΔC:4Lu(v/0&Z#'ԏzmªv{􂺬^Nڠ9wde`M5<\ p@D -rpO̱;HO=EH$Bؚ垧n:my%MH~,ӇFoE%G3-\fyi0> ξ9F-ɢzQ{?恄fL7^ d O ]ZԐvGpPf 5w=g'bt&SP˕7/@ɗjؿjcb+$ga>K* :{8"LЕjaSYZXl+@y2v[^PF,E b~0EW ȥr"_몞;C;bpccNr\$>ݿUt7"$$'#$T$_W$`4V;ȢB92|̥`CkwFe8xf]eY0rU'KTS`#gX( ūL׸{5]VmDN5 .`b{2iȒ׹iqޭN찒Jg# > z7 ȳ@zĵxcAb;^쉮ZZhSqҧNxFS;b|HvȝoqN)׎'c+&hKBX! ֱ/jZt9{{ymdxX=F't >xZU:&6 <] /ׇdF^d"żΉ6eFhT'ED_^y^8A5MĶH &C{<֚ۥ,&ju3!p+8_ɗENU;A5P1V{oB[ 1 5YMYܒuab^ak4,dDzeךA%R;試f5plskܮ =όU}XPE∧sbWad aD/udoNQgaZŁtcrbӟkD?8_SJv=~8v,`Y4IB6 6?1& )d>'f)w,P:뭞d62a}{ #!t? =JE 9D{T!dҮ}FlB~oihNbh4xprθx%)L:"ijCemmͷ`ը{$Б`۸i,V^!bwago6pD.D]g c6eofNY%/maȤb50/A KwN:(v!TnKmZȠO<IqV>k(,;ypV Pe<|o>ą}ގ.G_v Ԩ}RvC:W8p'ax#<>sbɤ+/>˄\\(*U<8qw ԊiN WxE/:2;&Xéf8R 5UC}z }A EvP9LZRS m5炡J8+Zq<" mӿVĒ=ЭƂ˞.Au$儭K,>) >&v]2i`U'c:|b|"-Sɗ]RUcxw!~f/dLdC#kJ"D_(xWF xï= hif@i>}hb} ՟~%E~R!HP%pJ.#{l0;o^ c&P Om7%L̩ڮε`K25mj8Q3oF61=nF`} RKM輛AX>)("܊}vrŁ2("WNHAW6Ջl6y4p{ʜ/JP_ty&en鱑aaGM"n:FֲP<_(w{ܴ?^O7*˽N[Oτ{k u$2l1 G7+AX `/Fmض_v>?zvF/8v7n](?* sZYdCBg6E[Q'?h5n'YĽ*Ձ~_sMP.0)~, La*PSg0\-(__Qj$Q ; 貾mhw xO"z "<Ӛp/.0K 7" # K]{cL(&["p"3O6j_԰A3G5]ܛ.%6$!j,~O4zH@q ^~[6 qEm:{gCeo8izm)s\H?N{H{93NU/ .#DCXS* i:cj 2X.)"lgZPa<*w0C/yeէ ҅H+06EºJ[2Ϧ,QxW볼@tѣS8~˺ 3S],FTYaeiʝ$C K߾Cmh5YN]#m某Hl, r]4g$ Qל\+\ͱc,syȧxqO:Ӹo?geQ6toE' ۡ\Qv䈈PcA-f눊č_*ʼ#"e|l-eDC["0Iuz;A+A7~hIr& *c9 Zu&[I */+ja\b\f" :9Ay3XQgى,|g9$*. $wh ѲsW'Ma @*]E'q-n^K5 MgZPKiԦ]9C\"Ͱ("k@RjMjTB8N isc vKGMw8`~6nbRBߢˈemmHʭSJfQXINǞ}֍R[|ʷDOf}l nci͐ZL-ОrWܓAuzZhpsg >6JWF7^Pr[Mc koQ\x%lcY~[-&MHfnُ~LJ:8-},$ \qv[m%AfCPm*F>Lfok<".RP \|CG3I*)cBрXd!r礘pJs^*ff'2l*ZyLsS ΰv0s{+5͢,$j3l1sB?e#N-a+!CfI\)\q{A%{KWӏSFi)4y=>.@Cd CCN9S)E-ng2˩+9r~,.p8tI `JԴm^_z)%9Cv<:h'71.Oy+h!2m8(J+ ܁ ɭ4%y1Ȑ<̅7PEje)J;z:c!p6.r?wl\2W¢\Q2M6hm <?`7gSi!Imnf2b`My]ܠ"t}q}a^OgѮF;cm'XaNS9wtskn˲Ҙnۇb[|$<"l'N}f팇-H :p<3Isz`~c0& ( Sov{e ?Mj 8XBG rh@L>7Hgر1֣ .> u]⸖jr nT\?aM+sos⮺vk)YTus@#7w%6m;+i^kxEM#csqO|gq]Ԝ?@ĹT%p9Y8HGZX@:៬TZ)V(-bI\ g%9JԉL2N"JtY,UY}fceR lP7ʐ ndwDg O6іaVx(Om7N9Nen|ofXI ?G(^Y(@%ȃL_ }~4 bsb;*^f\4`j (&vƚ#C|euŜ~bB 5h6 #UGYTEZ5;dA?^f[.Kapdg2W6F#f2JYfa-\R{-h-u \,|2e ʼ> !ɿq/“|5,˃\3`D*M4 g3%[5᧹TS{C ‡|7ilBq+}Cn ꞿ(n\^:0k `"9oykR.ԡxKL۴apOkqUeNI|4wUj&Ԉ1}A뤣 }ҲO=7 iK ]B'}+bqBEj:S+XRF|'l~ xC!?>%v~49 >  Cc $+8dOݔCH׺>-H; qܰ}嚡PN~>d}g`E=3N=',ΰOaETj~T|%XN{2wfKtHF޹8>CF’G!b l Vb "+e8:*l֔Wr5$)qP!?'3Rc $dh4B,rP %yTd@{ {˘Iovb" S?/MmZxkT hb]f ,w2qa(<&:ma˚TPgI C"ףZq1S \\099M* `Sao67]Y%R:_s>Q08/wmRF^҉~v F:ҫa <a4RO== "C&eb4nJnMXזR`r٪5oG.D1%)*u;_lZ$<`k <*MpȚR$& 5 8#݃{c(魉JMȣ|_^|r$q[Ve9* 0-ɀ힝^3YŘ%N>Mt0FZ.8Jxa9W9~e\sAopDn23]N90|޻^@vɇ6b/TʏW &;u}#Y,MAϛ'9)qk A^?w &t /@T8ܳ~HXBw~|XomMtq`$ƯN\_I3Q浅S >dUВo2/Ƿ%pA{,qHur3515)u}dgF_@̥3"͞[CEb:U){YY fg #so\7rZd_2 &.Mʔ2/U6hDaeEa%Ȼ[8~ZvHM6=]wִUj zm6&T7[iH1}u/<\RK'ojӂJifFGoJr00St9@6c>ZKhr%+Ͳm΋en3C#}t>C5  ϒl(y,zHݺZ;zn϶j w<=YAV 0`QD]NBB,ЧGjY$L%Ƶt<8ܐeY1b]܆W@YQ\JKyPm}DYۥ>zv(ES"G5@u0{L%Z'S4WROB5jJmzv2 )3 ~vMAP]sYȑ.71uϟ0L"̮t-&91Ooi `F&2xAzMG5IY;9:",D3/( F$6Vةr|EvG[׭_͘63_Kny'n bt*w83\6ď82a5\6$~Tvꃹ?2왴ڋ,&ķ#@!Q\~HDLڜ4bӰ!%%TI>kc`_=lZHJ1 U, l Ā9}1|-< <4Ǫxru{:rz ȑW9IAY5Na$)ڻ|9w}H:L_*/_~LH-;\^m_c^`X5Ɂ8c׷;>Sق ]V3|v @8_\7萰݀#XC9rK\X1F6R|XBFH8-F@y#}@mi/a} r̍ڻNiMCp]{_"Kzo4/P|,Rbjoݰi0UXqYU¼yڶl&F]& JD:1^QJh~;}mv,weK[έrg,Л"u9 xy~*#PX5]7:@ P@Оd"U`Ź{B% :}#ʴt~ ёI!FLeIBm5!IGРxNUDkd bSRSs@+.-ayOOYQQ5\ؒOQDb:’'&esJv{Kf]qĄ:>Xoyu/0wtV`p*U9_SQj]_))2ȽtF)ĶeA鲬ko@9$ Lڃ =n3y&; >m3˗yxA =Z<ё@6[H["2ѫ( VqZ ,ݴlH ?lr+\E[bwoe%_p3H6oa!r 7%Gf!~OԷߎ- {Dj1j9O`:6iGwIJm%.pMa$®ƫrSg.,i+2.u  RiUי*6E77luK5 OO\0W8@q.AVFGuJ6oY9#&Ѱu'n*n/!`~أ@+/$@I9y-~DGi67xm?{ #%5@@kv'\[ NIh 'vR2x2]Q6݆SNaA_yZcaCWttaOlvcȻl9m;^ҞrLP7iK+7NҪ.?06yhN:0Gk$! A$SJqID +ūtM"6KR>3z_F M-dך[};DtR͝ katZwޭ̺0e.+ZZEMW\E~YOG9.(QDZ'fO+K I҈+)l㽄RHmp;`?`;P;(F ?x uvB;m-rSL&]d͓X0KhJx8tȇp/媸}pWo;D[ܘqO-G跩r(9I CD@ո#f3,ݦS1VCG> sxa뀒na0 C @3@4ӼFwFHo>)1X&~+ʮV1$e"$>֛og3#+F!wX9{kC|d2vGVܑ,j< 7@ xYA`NI ̬+VVW]c)2qx|6{ZK7YxWpa(ү*\՛oiE y+rs}L4a\踋IkǪD1?b7P#얲@CޙAMueqUjg ;8ȵW*./ۣ?cмIxq" ~.N xʲ̝{]c͙R8'ne{ml-S{ #?n.qn F_qGpi0@iUlQr(iFmDVdKL <{ 7iq u`.b:Y0x[5⿦Jh#xUL@s fOg2oAV>II.F/uww~@E06OTTYD$rQ ׵: J$Ky o, gb m 0g=GmcQ y*OJ&=eI)<6 TaV[+}%7lRL]rfB~COWelj&9Ww=mSGU#c4Q2a4j*d1aT{B̵?Âec8 Q\s7_]2Qk XRPgֿ)oJWfZ^qsC]̣"`"fuQucn#G_=(v^IᄯvF JFs5%@ ~'D!b5 kKr0j/vsm{ F Ϸ}Mm_MmDNf[)1_E&UG LV?W@ʏq0&MWHT4+8nEv0ʨ_ |6&XؽX?_})=Q[u@ )MjNA@/+[>\r1SX0;>3 F8<ff}zAA'ZjXG.lfut6|ÞHFZMڣ5H4i%Nϼ}NMImMp)5ܟ({$޻^iS>+ǒ%jY@ڏ58ܴv1[9.c#n~E73zݪ^,SAl C{n/ًa%dUCalzdAnmA{"p1Ƶܞk Ѯ%Ql$8 xv-Byi7Xs;Gw=Z&g'XYky9.һLsĨD@Ӣ=˥"Fq('YH[䂮)Qs.eKܙyJC^hT3em7rnTK0Df6$$Q UycpL]<-h6/  ww)XДݼ6/oO8 >ux/w= ,"j<%=Dc!w1Q`ʎ: RƮsO8y-So󺾬%8%VI( ;MC7<+ F?ad IE٢#V2rBn"5i_W/ 3"23Aػ"=/h&R*Y'2ApҨr6PbxP:& o"!0:,sÁІi? 7džEWwMTGi#<a5_8Zo~ tHRWH|ЍTLA;m]qV(1 ţ5ĕԝ8Na2Oׄ^e#8X.eo{mn@,tr.h^Nc*LzթU5kVဉ`E!< $E<^ﶓod"Ve$aFIА@Dܼ11#;w? zB(}ðBs}n}kDf6CH cN@1479@P GUj8}Ď\ZuBCoS277NTq#yhLY8"Etɼ "74QxF3U3ݓ19'ԉW)90mo iW엪( Y,8eӛ.?'ZBt-|:z;,Z)c+FxYh?{6&ߪD3D( l_f馟Dr 7~@?*"yٚ&wꣃ-MP*юTS? ]?=" n[|@W֡(5``Ȕ<2EaB f2ׁQ茏oȭUWb7ݭ2JC&{|э.- zLNE90m<m0yђ"i_LMVp۫h͗hvlٮhzX_:+-_x-3(V)w/a2nDH :Uk Pz0'O:DU*"#~P(߹Kf P*` M\7.TЃj0z"S9W[![SϒF J1łu/KMrZϾ԰ay<Kd~x=sG: 䯚S4z Qf+n%tdÊZ18-N]IkTt'2lێPKI Hk}.$l*E WԎZ8(iLT \Y/)pWl_NvlV֛pX˳Sy $Gm"2%_k ^GŞ™FGe2+3l߯ s778:\t4 *t7OhmWUIgNδ5pݩ~wfZZ~N?U#=$d?.OpKoJ Eo'U3FY s#FE+38uvqx<$n! nM~ՈvمwOEgU" [<6 $2j! ,œvO'*) Mjni>hXQ8kMaIvSCg(eu*/ IJzC/;4|XQ7$دp~0n?H4\Ow <FBww^S^aR櫟$%gtL>Sdz,{E! _2lLҽ%NИœىnHs10|{zo|Iu͕S|b1X;#69]?e}- hً[C&10"(Af`tŠ/qUbbmbܼѰ!'"9of\ֽZF_{R8=l^zf`p}0u]?Gw5`_@#˧- JpazPqݮhQ) /#Y|7By넁KaXOؿDž5#N_UtGH8nrUȣ}Qd}ɽGp2 {IEC Fe:gV59lfK>)N|N5HtP΀)Br ~6u"Sׯ"T&1${h.nU`[w䢘~rP}W$:'Ͷ`ɲ,jKRR;eb]&=ʻ-Ӯi4)'#Fhh 1R`P/;ua^bjrh'֠19UǪڅBX o| z*qqJ1]YL !`Z>!|Ij2ncE*.z"Tb:F}d㵷 _ĎLj% 7ЌLƶDd/5 X}{zQ||~z@ YZy},WթVd}\ Jȹ tG/;np'D2sϱj̔lZ1 SxPN$ 2bV F0^qfni )Ѻ2+?i3[EI_=1融53 @p =R{N.7cźZnWF7{R @@ȓl 'ɔHޜֈo0e:ܝ}Y_.}/i7,h==1eלz*҈i93AU#:'B>(38 A쥹!~R;=nZfc0_6'%6(Bhj*ȭ?(`ޕ =(iy23!㫃Ǡa1O=)~__Vc(E(@+dE."6UDa0nBk&Pug"l7['`AvY U|cj-PAJ,>EREmyB?eX"y1fz\zW&9 s_3Yȧu0C ⫪ySs nؔ[ĜS(F4{ \,FxхeV-I׎}79VD:i .0c N ,ٟX( -jA72H_OYJ$T6)s*mG]Db <";mShDh݈qRDoa .7̖@;qL4l>sQ;WJ.|~bce.Q/@a_jXHjY۵qW]YWCB-mE_izn!ՅJmH$ !ӼY^?E5-Gh%ѻ@AC; ".X"2+L\\e\w@6fIHwWOwr;&#+Q~-1rx-Z깷T?sr?̋OK~wUgXJw;M!= ۆE CvutgzoSw&>2`> /3o;o(>_s'Gzc͸eu[0p¯;8Nu}'Di1^|iY ՉUO3sc^~Xf,O&9]nVEJHnVvT7 zbga=M6l#TאPQ Rg8ʥB`2E%߇o[ Rֳ sO1CZ!~:fҌgͥ%S`: grSyAD"/d <'84Nl3/Wqk1e̒I仗MVm(Kŗ#H.PON-PPQ MN"﶑ OSlĖ$XO^=f0NGh /|B9֬y{Qh`^D{O3w:L3lw(_箍 7 *+'*% ֖2 2ߊ Lo#% \ZGazJRRp_qWC8A2[7S\dmqWPS{zY+ 1 N|wD ]-T >NeThODD%($BqsqBnhF6@vM!"12CJ)Ŕ/s7Axw1/@Ӛx=`eLgINDITk~!J:d{2j;gO]VVX&1{qJc4^ y. kׯtv0(yІY , 1W]񘋦^ =)%(lLIuw>:y=+0^G^#GOyfL`HMQe=2aZeҐq+D^*2;<ؾ"+S85dBkl(+o6w ~3Ld=>~g&4V 3ݝw沊vOkSH<ʄ($3ֱLVAkq5!e0|L Vag/{ ƺ'_`}i>j{P O>أ%_hh6*L1Bp}6;zgAݑQPw9aRc#i[9 !Ʊg^~(tKGu-DVo):btƘثF(x?뇺# MS+|f'LCҨmRm=E}Й?4u!iMWwu[ DHUAf6R-:iɷX0 HE;FE 0$mrW|gi k Z*w,Z虤MZcX+i5b-̳!B\졎Xv忀p9<8<dc4IvW[-' e:̨NA_q9C9a?:vzC)Ю{ujFKsP_Օ/6r :_Y +'%55> Nc(,ksRWÜ9Tj_-sH׊P "OC8L8ed֎oeXNOW:!n&n?r4]2}'<ڢd צߏUBp(tI YͪU&U i<<#s` ýZFxBWyjwd$8E{M5@`&#-2f xCLngn+κDk=KWƶҋI`OD~ 9yk8iG=Gh)F:#gTxAA_>H4%|}K#.֯f1{-F" ")4+(Fx41S19@ ݙ-QD}Ȝ6M1|!ݶ߂\ͳ4ik]lHckQw5) PDdPbqE cN $1_%]◩2)w;On wDHKXJ)XŚZR<䟘yO$'\[Q7Tͣ6@gE2T2 /ŀ6Fn'rS{c)w]3 ;SD,m9! "9 I ol],2J#"@06y..˗i",:o/ylӎ60ukɽ%nnA9ٿ?YP. 6JސR.|ؙJ>JɱvŽ* twSZGa b%FdlCj ?IkrTE LBsڛ/*-^1EP;x%4MyԤw"@c.nT,%V!n[ k8'&vL+)Ls!rDr<2/4ozBkb PvO?{5+r8KKS~.Ҝ(O@aZ.%['xXqw$-.*q7 VȔ EHWO@5S̅ A~2-,K!$SMt:?i~9.Yn}3!V0aBU < ƏO^YjF*s9R^Z~ϛT!VU qu@ҕ:e}Qg{ڿ0X X $mzr+mu~;M!o[kXsq\EpȦnl`6O8 mDFe?B- 7xz%1VN e1є4 )(YGU,8s }kq81Zʊ/#ۧGh#kKizJ7\͒Ȅ!wk0:?-Ei܈E~8l*9ȭkd%8A*z N ]?wk*L$ou XBR<mI&S_& 9؝reB!wckߦmL paٻlE+Pbm}1pRge7 N{ v@Ԫ;CY'z&w% psY5.">d&{s${EԆVɟ|c#D*榐! ]>HaԭQ= *ʚ/]Hg `wK7B45[ rɸR[F ;Fo@2_9G`hJ{ A`Oa85xSˊPf**mɩ;Ml@!]W1dZv >czl[pzk*Rnzz#mf O=o\=yjre u-* litӹKD2{ E h"H@(ěqw%ǝǭb 8I4.A mY:2Z9;jD>6hj)AF B+`%fl4`ʤ_د绰u,Ms=l}fڥ&KJlU#톼vd Dדk:w` (-'*&q{_E^R37.Saܾlb`)x$7m ]D JRU3zQFmd"rQ 3Aa-N}ׁm\1%JC%Jo{م\hoϝsǦYQ(qS g7Mecw1o+l 2c♲FQRU}Ȼ-P62yd Iwe&UfNDQm0 $Y NKo 3f-[!9IXZĜDl=W OysUgH@MsTY7Wy@ՑI~@ʒ8 ÛtJ;;]sL4\]ˁ{jKNO:AJ$kUOGfL8ǭH- Ą f9؂FF 9!=iEڣoTi$}u=7BmčsGA@lAW"W~TMtIL7+XQ$rvn>[ޤU$ pRd?0jq7Xpr Fv k ! Bf}̅.Y:2 Iނ\v 1&/`)d^ᗻ8n6AqGYk^Iך; ʜeU~ -?Wm@B\8`s)I bz?i#oGE-Q.+U)ZA!OגXaMW`3G7 ,~~0< J%x9f4#;UUqyk(:zOhǤѭӓ-qGL\Bs[; Hx(%؋+9evbHԬDm,!HJ$RęQW'_HH!t>30X^Їvnn"|V=7'aF62 @) `]m6(\_y<+f_p(2o hωJ@>a\xʗҕءfhnb>.b r~$JЍБ# Y/9lEQd 8fA,Qt =@KD1:PNK-p^Sx@[ & Z ,e.w"p7@ yȷQY(DAiiY, 0OLh~4i~0Hy5fIҟPbLܷ$Gk :-ov(Z*4Q`nn6עr}jBK&vFjgEӫq'c!(*1 Fsϋ}iO !8 %1Rb"Ze-Ӕ%w9ؠM [)y"Nf 2P5Z;i(Bb 9*,r?{Q(npi۸rcɀg̪=9ے~hwOzP†K&Hv|cCdUaz.ד>A <02*CMtvk|smrǀ.i9}6tHo$pьCDCYd?)g-`N;r*s0dO%SMI5@%͢)0#L X nxpQ'إũ+>#_2@Y(:#ƈS]&QZF 7@x`!˵ZXgo˴M9ucAj_9=q#zyNYwM >_$?B|6m`r F jTO_SQS/;P:"ӎC`bJgEǼ[ ~F[bn& JTIv\MOl^!;[rߊQ9V\Zo=!f,΢ĭF}i*`Ɇ,_q(儠%iȃ,89 a9ڶPJw_A6w/ܧ*_ C!7 CA^W%2+G(|I Rm V搜mhtȥjl9 ^7Cw;5@UJ\}&M9dtM: }[Q G6($[uOGZ''MG~D 3𫞉tH5Δ= kt_~}SNnwۥ= K6 n,Rӎ9 fھ 4X#1"=R9.>cP ڬe8.Fw0dt/>M|y9$MaҺ[eN+o+^0\h+6Iex&^jC,AIKuLa뀋ؓӵ~*ƖIM'wylnjwClQqU }D1J19W26I,̂l{`> {N=ɯH{RKXN\ָ_#]jjOnrVy̪] cEy=ZNؙ(),tVAE\[r k[_CRL!tF3|)NMA #v14"q1hMژ^:1W=)SĢ*}Gz /["] 0k=io!u}YA|:MAyg i Ch#y/n}CJˎi_SĨssr9t~'22^oo 1Q&GO_Hz@%|A`+ <ݡld3a_(ٿt ]5bZP4GOC䓃#x "YRSL:H5}ENM5 AGr\R痀;Í5.w>be 궮EL]TF簿\BVL6*e.I%q4.ut~S?Pa"M7%ՆV \<߁Bũ^X; C̑G͡`e oL>ƵT0z887倡#7w#@ +M;ԭ 8#WzV sWPG&Xp0W/> h=\!ZV5-eB:V-QmX/w<_y$pk'\ڲ_JM|&leBt^KZRU3/[JfZ gMitg5 ]]U z: &=\4߭ϨX[/6K&XR:U %Ea(-h0E62gA ! #C_:W$ng*6{W ܩN(GAh#-ZMB_X{([:riZ^9!՞}(o-O|ticv3ަeN\ .ޠg:AHK bmD#I?TPx#=Mm"/Pb)b|]Jm5qVGS+]S~҉Jܼ4g.nF$ N/y`e=cG %J t%XT=J!ϝb1۩oNW>!+2A9V{>-'<գ>D8x9Rnv6<~pjsb{犽ѝGxaE9}]V?~*20 >@6Os+uΪ$,C~ǂ )elE'cf8 %{,\MN:ֿMyO5 ֟j&ZIB4Dq6x8v,@g81ȞqW{D1 ۦk$ Is3^'L^ˎ)oAZuQI;߮>$LݐD<轆7#dhϪ:)!󇕄n"y-}}8J=gLÖlƢVJ\쥞9SEYNĊ/ T19r|Qrm5qe#LIL l"uBe!K|՚NT#s> lED=lhS=<5;4ǔKj4.v'3MucI@AUep%HfP 5Ӝ5h`LtġW厔4WջEuoޤϹOÜQ?O^ř2j"2ف4Ab%D@~lőqfYmY1yx/)#HjyEģuF2:N8' ޼g^U-F9J l/B@#2lW0Gg8 3gKeLst;F.J\C0hŒ(Sηb^(uII3L7.)Vrx }aYde+af=;R(TFj Y1]?pGVLuaYʧ~QTfW ]ڎ=g]X^dO'3rnN/H>1EN2ɬy.Xh{tNth> ΨT0{A*?2Wf@>E1®-b=2pUUܒ di]^ՄKIFxOKD!jĬ,Z@bOs-2N `oj[nb2-_v| .Nm'9F-> lt]/թ&( ų?Y; 1+k̲֏ {6l8fv U}읨!xA3q U}=-=HZd:v[ny׎ؘb6u_/7vU͚*,O;HuhoT{ch"b:yЫ]!q]XiRW˼XNfj\;9:EaX Oǟm\v&O$$b UiȶLeF\܍f](9 HJB q2WSCS0'I "LBS21b 5 @v|eK3  O {hH-z o .\>o4@Q4DSl"Mn#3nK/bXbˊ[V!-KDEf+ &䁛ͦ=J"DŽ^-dㅶka5h*'GbĶ8szX}+/%BoD* K fVY+ !i)u=P0CqŲuJ\†Ik8|.3όޕ99;ͲГf_Ǭˣ^M}jYC<)kB;լÌE~fD [Р >x;XFx1'D̈:A6q%(؎ -zyO܂t8dkAdp27Х/63>YeKc_xy7!3̘_ y p? EOhGW=Wd$Cnorz콱_)㯋j$ 8&^DuJHb7GPA 0\_—e}Ҡ~߹,FHr(z@٧4STf9^ͿCx"&,a7P7L@ Tl;iM|R|vzr*){f#;3I/6ҢsJffj#m7#'{Ƕ?es %;C|v?T&>mPujQ%ع!mBG/Aw1K8AP' weIkMc q5q!h2bjQҐYm`InbQ(@E=QbO S3'lLn?+*H~DoLtM=Sߊ%N. fMy&$э:sX`D0=KLMPqJ]oΙk c3f4+A5sn3ji(@m$>]FǬ a!aۏp`Vt_3C <LupH&J 31Zqߥ~0KmuĒ>g2WC&1jRHa )c\\\􌬫cu9ϲ =aDm&~ ^'1vΌR”PGllnDmR=ԘoֺRoW_՝9Ảt2s9dٔJ4rl'F1C?h+ .|}Qœ#lE F-_R?. Ic;tf#L}SLɠZ[ -!"T\b7bVS"7XdԮةqiku<`S$$ü,J\l_]bt]q@ lǶPgθ|MD/xYա<&Řhdy">Lg;j0e?3GW\g+J:OIhW.8Qp7y̲J9$"7]jnpԍbrp%#Sr@4:i3,ϕQ7#Ǟ{:))/X``{4bE4UZ,?OM ̝D;뺽Fb>prK`+_ uoEc{],M_o4m }jQb~qiy KhZv/n-Y17nU.T 8΄&d  s/Ϟ TLt8\AF܅˫+ {. M\ [w. _jsp5LتTq4AIHؿQ@^nI]Q5s'@,U˻ <ĊH!lY~PRL̯˧ Ƒy*@Y@(=D<v:j]8k-f7<'/0|Sj siɴ>s>?<KhT):r5'[QM}%q8p xft!WҲ%nKPmAKkL+RBv}i*NEw};"BtS˘>2+\ l5Dw4O~PY@J4DW 0O&.P%ts>P&'\HzJt҉>1D8TF%,ؘZmnh"Mo4*lW嵤t{CDlRofl|Q Ҡw8:Lw_vIHG]sIu0y, ,t-P{UmQ}'Ѿ aFM4_cޮ/l ޜҟ~c<8:9j#)Dj{q6Ta>٨e^!+'z$ip~ǑByU* Kq#+"i'_7mXWdѦ ʒ'moc֜DQˇS^2dhigɨ]Pf"* VutfwxhG؍YLn !?Pqd&,$2>o@DM76eCEH=HU᲌VUG󰋂VSiAycH14LusZ>d7M  O(l9$5mÂG 81!X#Ɖ˭?N 5m/ "{ N[&A'ВdQF8 61yD^X QduY^(mⷯ+sV]*,2sr=ՄiZ\OG6W!m&Un ,7X&Pg) Gn!)5yAIx]ݢtmϖ%uGL(F cQg-n_zvݏהou z!}I~HާZiM5(>u7dLpv)T$hgͅL5'+G߿R=M=!6]~تfMomd8=JO:Е׸ )_ vZ~м.ps uV< X/Xv}#[{t ZA`":ݖ"Uee1bgFD? UMrhd*6[6I?8"_t۴iHW:wT#ڝvГt30D^&҆c}-(1 B=Ҭ BE 2)❳fj p0%Rz(^f͒v]Bd,TpČ9}[".@pQ? N뮨24v[,JEIOx _Bh˴|vM&nJ\j7m23jfxŀNYeo Y.-h-Ab͖r],aPl]|E|_QاRgat6io^A E 롻)&ņeו9k1Aۭr>_遤G;^jVSF .Fm=32 U 2FUOky<0l~.J*8"# OkV_a%!RIWzQ..Qpd:jl\K0OJע^وw= m5IHcմŹ絰{;,$\jCZ /g 6'v@"(ak[zuvw^z[S@-PEi[,$;gw (Y\/wB>4&.Ekv#fr5~񶏑e=6lRNKb%ต5Rҿ_Jlt РEa[% @]O`8yB<.[Eo$+^Xt@-(!%@O0JTa$>SZQ@9{,T|'pr&hqv,0qUyY ˯G^J˦℅B\ŁmHqjb@ pԗ?k`6SecoyT"buW!P]J6!> "/& 4-&&)P] -o~YC8=5ѱ116Toͱ"mon,DԮ]rF]D Wᖋ c7璇o 4׳v]LP{-r;kRmuð>#\'vz].Du=bԅ e9BaYNDZo&ȼGg+˄΁e} FJ%%dOchctlOl%pta Qûl%Y+R6a|׬b vY_a j>`8pv#4ˆi 0+hsB 0F]]7ĂsoEG;p_'a+_)2Q.)`.ŁCOٲx5kY!Qov/!Ỉ1qJ/@lr4?&DL1M#NK @^P07~FN4hJ`4mX6W;I#b_& ɳ e2m!t"o( MmZ6WwRPLM2oiy2Vȉh֞w%xN)v% FZΫvO^(YX$!3AS6|$O>N2*cJlbLٗTu۫ C4E˞:pdMLU|О`qik>JߚI`:5"o\hͻϭw0sUf \@ϱ%.X w&)gpbyR1-^Z u:w@t Jw* ~n9SE\!zuhh71]f=k;+" M]T,zQtIzy?h&A?^}H&^jb; .x Ȱ/v?7aQ vBvu\s˂&_2K#/0` T YI/{UG5܌n|sԉ}AR=됤ܯ( &]c{g+~aǣƕR~?d x j+<,]<$Eѐ>ck96PɒyZ{bYn;vd'kaRjSYdJp`j$w@ٖ%r A?>BKR`^G)>^pxP%KҖ16"/@uS{KĈi+ˉ~xtΎ7K)D H>|*K0o6wH=8։}{^U#Й )nҊQb ;Hil{)-=EXRrQܪiWBׇR{Nstm@V̍Kݞ@=ѼAʛaRQ쏷ku Ə{>$˳ڌjJLw R[xpm]8Q[SB_F:G5g [SFk렳 vZInrUbflJ;i` q Zw>ri?{TζW6LmΚp6\ ɠ8R38]19O?9I'ϽES) e$gvjC k%˖^5G)/ܷ4>=f#4,dWLaJ8!?wpJde”^늄:@50>Z1dINq-.nվ]* oK7!bK_aRȐ!gOYJjuo ;hc~Ih'VԪyy"K4I2B`3QKh@Sm@'w4wnD ז6!8]Dlq&6"IgÝ2<4GMQR#|opz@V,IB*t'!"c(gq! GmtFT+z~nPV/>1YEB*Hd|~2&d^}K xQ@UّATB$-/˴2BhLD?xϽqvB<盛 r(iԾAj܆394҉'KVڰA{C#. jf:}\sbXplSh nm8}NipE(ܢeYQ7_ A83mn.8P^Δ=YY-8FR$"E $w.#y~p{ZeɘIn}&NX@oK6G-DEFGS&(I*k&o6ς}R¸+&DucH}H6X'"Ċrtby7E*hi Ft[9H%]ؗ>3x2R5=˹?:BlvYKwpVB羕;Sܗ~gSI\_'E f={04(\;Jj=l餬<3a;}惺HuFJf{O?ĔpI^E]He0yLn-0WaKS+ĴEW%@WN#< .<, ?5baj #XzK? ^J4mŖ#)߳VGpQ=6cU%wkw+U ln8WK擋V]Da32wr(įEէk4Trsm{Riɨ*QsOoo7@Z%G=$TLdrV Ogag#1N$3A?CnP,'RnEjx֬g=M%JuUAD|RG$LֲX`LTATݘ)T#D# %Bms-g َtq"Q? + J\rD@5&->0w_!n.Ioeҗ#L.-֛ӌ: rVa)e`>e :WD-M>I7swx)^+[}$5qmH{?a9'Pi2!ž(Æ(6v1,-+ĩSu;N< n1P Gwp&~A8xƌ>7N67Q$CjLhmr{ uaV:~*6R]%Wt"z3ŧ`rV3xp%_'!jã yT3_"ܗVR{'F`42)[ nbO-l`sX<ǒlsy#l}mg,w* c:Vb #ڗЦV?(KgTVyW3%jhPj #a-q9 YW $uv`qjiepmc/᠛̺&"gУS$E"ks_Z׍?\A:6- {PsUF8t״ JG֤Ry+gAnddux W hQ]U#; #f)$z:YlD]4];mmN> p4e:cPiPZ : FBl~s:háCx.4276킷5]Euk{V<ƣ0i(<}$Y2Nl$D51!/ZE' Mo113'ލSݗ;>qݸ l #E㦨D0/272Syhǰ-,;%!/ tJY8ARm4 1 zC.7Sk~ |\'׭T%Vӄl,]3ʟLS|'ϳiw(g% z lV:"xtej~*LF(H9W22\ <1=> A;0aVF")䘰~{Uy7{Zmzpp{gg%O ZK|J"*]K_>ខg~Gy m\o3?V\#ȸ4В-яPAOၛD& i _w@\%w{(d.670Eu5 GؑuL=`\C~7\,~n%F(NrKf [t_*+5bFKu&^j;E9!;iKfW|II.|׹4[hnQvGVJR9-2~n߬wXxuQp(]W#CR*DlZ4X7AݞDlxy+vf+siP3X)3(Kqu0iYb3zȥG?}XK^Y E ) 8O; }Z^DOz'HSS?p5{mY"e8yaKUO uk}3ZAf3[g'<Ās n8+/ {\"&?F) 忔TXX*Xsog[hKF(Q/qt%Ȳ|n=x ~é3;VVl2= mʶB%F.CxWuf\g5x^0Z$OJIwW#pz#ki!'{JOW@JYYk7{rvsqV"<&yΦM:C"}"/Ah8U ȼ wI{6 p|B&wqځҤVn ŕM+K9ԫe.b@W.=k: ŷl9ؙeVd@$n} :|eTEJpď@8U:nב3'@ M'Jmjcɟ|-2OpHV_ft0ڨ1Xruܶ]/0y-| XRrh&T@JB;ݧЖ_*#fmÈ7^vFLގb%MsYzEYǴ^ #%'/۷v+K_U_BN+>-a(9ldžh\zs[ ut+lzFOBXVi+TƓIPR>VrD,H&&t87eOބ%TZCk<"Lɸ)2>nqZ{ڏψqGY?k% -7U~Dl=솑pund*=k ]t8-Q7!MebcqNb1 J9`J! ։dvՒFd? xϋ SOoKzx̺ #4'[\9%|~RVy+V'H3F Ʋ%]ǥD?!aZxe33W-<[#(fGKf+*zPлd'z{B.G\']Ngdx<+;8Wj*.M- 4搲Qp.6&+V#N#kPDm_Mm9Ǧ>מ*NMŊ- 2X=AdMZJd4Tsum<vl|Jfo2bPBGMa(,o17CC`hFh‹E@pFa1\eJ93aTȎNh6g62[\dVc+/eW?0 L.1x3lOY&Px%WRgͳ<@2orx#p+T%b2\rUp=;Zc{Ys!\/`hc v975ы/!fNt*Rî12ɽsjQz".U'NKrǤRNeqF.Qϣ]p0baFrK`BsBCI8LF‹CZL;/2+( P(ET2y%_θ5q +HKCnn& (A3$,^'VedeD4Ơ ̋<ҠϯgpLƝuog(0H7$cTp`zrom97k8{a|: 뛏ɨ"h9o5NL <ٓF%xJ#M/ALZg7uߋQ`|q)z>詳AO(%%p>D(g]F0 u3ſ1slwrGngE!&?\^?7Y;v=>3KvRV{"-hXSn,TU6HdoΈbnКqJ!sK+o*CylѣƗv/qzW1 :lEv'-Hᙍ5e̘fs|OӀ e7:70EV!F%%X8pBsv: KikT@+_oK)AI@%Q"gٙ/ά^Xҍ8P?_kmۖutBXB:Qx7goF8L>ۜH^Ig9mJْ,gp3A yrJe?lR { -c>ѳΎF>%rւJFJuҭuus'yasƥs31L1Rl9)lNvt8mpi(V.|Oas m`[˕|iT~^0')\Ue%u}{`ʻUt`YSM5L{N h:ZJcvEL+PGJFʴt?hqg~̣8JuīF[ZEU]ཆ8? 4l9+̹"#U6R^Oq :1S7ż[H9lgK"C6i~N$npwMgӪbf8b\%˳7_$YȿkW=TnvsB̎='x U/Ա+3e #*Dt3d) DkiGV32ֳ~j/>oY{pv\zʫvB򻢎035r8U;'\H׃O#D L&!bRqAfL 6ٝ a+*Kia((lOd4U_xg䆜dnq{^%%3% aPΩjVmK=Cƹm/UPzt4R"]1b8nz ˟M)oςЏuSe8 KD2ut [ֽnwVAFcOwa-)͍ |a %)74*QQ\:,f HU:47PU =%ӉqGhAtƸQ@ma& L(74PWP)sfU. +!=0 c'wG!5<0'*<0whkq Fxz+*>{#p$tXӳ^O(On"JRY sn3i\u^xԢ'kv_2+Ihz@uӟO YӉ ~L0dQ n䎐|o3Hn(kSiMLdU'0KD/]"bD7=1Ɠ8=.#6WL.Upȉ3߫/`k[Fh, "X\@2+m|O N::[ya&$ݺQUO{ޕbC/ˀ! nn_"'`:s2k_7ɣ%,i٥. V:9[_Fjdtک#6W3qHN5Y 0ݾ2.JrG8c. qsE+8G8 c7 џ\6Ù<)⿼g RqK'_F1f`2F|ˡ]ռHqf}Y tzNF*&oqEb־Y7`]j]0󞥐f'~l-( StI,ILc_ |=kպF'vA㮧ub$>9'dYqsvii%bl J?@WgǦ=M4PĀw׀ۀ}1ǛŤRxO_ /։?O+mۧ dIVFTeKA`7)}@qtravطa!AX(2I̗tSH8WZ(Ce^Bk笳veWaGM3|S᧜'D pL:6#\:u] z@v~hznaK +KHn %AyRj}(TU~\,9<&Uh!w$iKKS:*dZ U cH7AB=ĊV|XB!0|J}jSaO .&<_)P/}1;DsAwk уH-D1>r WˋA~5<<]MeH{(+gAAިXO`썖Ѱ*ʄw4[`1<~Pmn$>(re2x24&tӁ܎4F*!ظ932_Fط2fϥl@;2e~npZ0ߢ96sj{a?pW G jt<|Kk0,8շ<Nh.fpZ;J(&Yabhd9SVmК  śSI j_S!)9U0vHd0e`)+xO/fP.ypјw rywBN>98O~@dž-?#mM2;Bt,3ws:V%N9#N)cYC'OYKWG|Ǡ7;8tZ6ּxc9poe꼔]ȷ࠭9V5'IB#5՜h'>Y{_%} +IE\ɓ8ԽCYdLfuO$HN]$'qui<;$VX3Q{5P  /Ѵ^a2Luz*9Ё&!K4 e~:BL`\S}Ҿ=xl]ٱ&5szk1QA|h^A`GӐY)Y$׿iW#HnbO 9" p$ f\KiDl!Pa _3I3^рZ%FOGTxơJ5W C.,2n@2;cֺb2|͓MX~/?D׸l.[LCmC֜bGP\"j~5^4ݠ A8M?$y(}rKSj5;\bL,ΥY G螧ȵXd.BWin-pE͠jkoͩBU13nfw܃C5R #)NIbAg%!a+Ci]bFV <%N]Oq3Qw<6hn`gkxG;ψ;)pE`SצcublѾWIOvl5-\5 i8Zj/uAyumFOoh\L=B$v[>e= ^cE"nFHdP'I@Ҹ?-?e| PwzPKOk:GC.6gXczWKx6+=II!,Ca:A+!#ZG&a]cO*y-b%\QEW~B-_w?^G%pBB7,H/S@Ȣ_6찠}@$Xje;4h9Zt|~kg"~hZ67XdT4:[颅?F]^| :XۼHo}q?6QWW0{@ ?2oKOq6rYМy<*V&4=`-LT_rA9F,A`6G<ȕϯ].oaI aP2uI MBkH#*v` YF8vzW?~WOFZq,_h\բٳN"vZrU2l)<":YV!Qlϊr(hVg;DQ37Nshn ygs٧.˨H@!Fw_!>$Q2D[wcB)=í9Oqi. (\ +]ݖk+] "[@1B~bʹl]9H-lzgLds T?7QҶHl7{woipGHdv,on9XJ-e[c̘[T@Xx)nNI~2E&w<݃9+l]>?0 cyH*]t />=I2w{N;ِiKdԶ&o! .Cx+,2#L"?H& ++πn87+eF'!| eAwHU%=$QIEJGXF]\(1cd 6oF!tK~XC&~tRH<<Ƙ]TW΋ ^9v sTGXN:I>[3f#܌ JrRE#&шP*g2 hҵŅ}q^X˻"DG88%3Fl: jI+Q A{ۓ!XE}z4f ,1fEE1`>S3?PsE";" (vc$Y>A4E6v{iBm+ȨզZ%"4dQYm q~ťw+>h$f) ]Z{Fl~_WZQHP_!%Ԙ~[Jip+> =G@f C>/[e5 B V`p)`տC{upQLA#6@tE}I,Ow@ɂf{^`'U]KGzMe%fuzI1J͆rNdDGn(N^Fn¯R:,ͼsl<0!L)gݚ/}RAL^=Zfd'Am\ -ե [jOU/>DH0wuBĪπ2/ޓvH_Trg[:|QN?zk#Hga>r3To5vsC^F+blɲDT_Hw-Ks0Ǽl{6t{ϻRQn=9.s}I?[ xkog^Q t3{XROo R8eyJ41u`[:n{}TFxBIL%M8{Jd\ڢ .s #$Pv>tǀKNWM]oٝɋ\ kFkkHg~tʔ )QxiӠĒ!$P1aoE +n]5I6f;1.&Z]Aq]+zۻZyD؅=ٰ+QNH>S״8gDU*Ae`VH2(K>ֿ.K,.LU!(+\HvCB*cHII[e9Cڹ$NB8E xN1˖agWs8IMs4&!VJWénwt晾f{IfO7-dE (cB=씹6Y'L*VE 8Y1bThLH2{7[_K6t;CCO>ld1LAѴeryBEZPNw"}6yxWGn,v!6. X4P6FQfQюABz"DF;^˺*"S#]6ijLd [N1hO!qItev_36 := r$+f9nz6B_};% C`ZN0@l:),zi!F-JRXޥ<'x}nkpbٕ-P꫾zfP}_ b"0s+̂ CX,",mȖ͒!H2XI ytuep`[ge+-  :§lm'/ɢX=Ȗיk_eM4T#4-p_xeWW>k6uHS_-e"y7s"w (8`)cpɼK,8:NU^E[5<~hK+ g ?CqR5u/4IfՄQOrb'PD$l.:Y:d*"*8vxzw]eVcBz=Y?;!M )H&W2VVr4ro-@RPO/)Djs,}Y=bZrGpnb6k0<\ezfWgELʗ:٧et$fOPQ\Vt[+SɃv~8͆4A1}D2WVaNPd$.M:+HcXf?VmE;4tRrπ`ٰr2&wfZphZ* 5rڬ ?X5067.Kwpk{N]R"ڷePOܠV4 kv9 Aj:w_%S"'b[a xeiuHm1TٕNUvzd$+nsbz\ΟsE vط] iD MZݿ@64*0ybppbaݸ' ]GunΫr;UiV/ &[bEJsWGI.1qecd[F?@֎8 KZNdЗUG_`&|x4>Ee=$sWGY7,ӶJccOO7CKRӹχҰ[D8ik'>W Nl97s>"aJoBtzk2on*nZXIl`k]vBQ, ML3eN~_=&?_ĆUbZWUNC^m]/37ZѱiS-?>ío ?xcͰ2M fs6AѡgWK8Ǭ.DXQܹՠ+DtyÕcRIW6ܩcV(  |X 62(̳r@NF6"»HS3TFSO^rf=B{<c?O5~OMV̐e+w^fKzfzGd̂8fS(+3rq}.XtJ93XiPbޕReA#s͆)==8"\pP*sr5Q"y+Oi)a"IeN XK#\Y"Afi#dƸ¨G?18DMp.f5)p45mP:t1#ׯ/uHM[IE?ν} <؁{̒VfKP&>^JR'Ìd QdXtx^8_ܪ܏7.nQͧ0`IɝMahLXִ^3frS+wix N弱ー!H55bpS?jkD-W!ig;rWxcMN[E>ph:&K4<m7ٚ4]}`>o\;q įZ[lv:MHd.xpfV$oفIG,UIf= iWYԽ~KʆD9<)R/-$O{4EB ;]ynH`2bvxb,o+mI|Tʗ,0c(꺔lI/Liԩz~oN#x{3(Y;eKR^߿D5Y8z%otyy. Gt%bL-_>MvRWT俨ݰo@94_c@ʧ%2*KBD' .KX=+9Nv}8l]ˋE[Fݏ'yT'6yU\2ZP닷"^<KCLN`@-ҥdžEGh@'C镦ߊN{frt %FGGpmbKe⌆x"UXZڎeUWBVe|h12kM6{D)^ja=QJTao >|m\6w~32'ܨdnDZ[^f KHu~+E]}a| ) `lztkZpƮrϒƽ jG60 RTW–E!?NS> B6+P຃z+ga/<@g~ߞLQR9BOuyf=V7^}p|nۛDod웟759FNcr1w[SMztt`bBVErt:L{~ͅ cՒ?ދ%Iк#%v+j[0oE\:g$U;j_iQvcE\$1Ń'ﱄ1T2#W7f9T`jt^F/afJi >Uݽ gnTVWĊ>SfAx907Ggl(wOS:Y}h@1Ha{QOPAmxXܰ%w ;f_asisdcӾ31܉d6_N4ٯA 7z+slM DQۮg̷Jn:' hB;]VjO,hͯˢ+@)Rf~d_5.s;O" ^JBc:0?8* )%>BzCPTܺBq-R|xo82qLz%%0kc޹,Rʵ7CT1hǂ b\vfbYk]u tV&C_#".J@,N{B"]+B-!)3,CuD)wCؐSw +xc?`"˲\,``s##kpޭ^J(/ϥ^x XE ゠#C;+FA[n}Ĵfd;G`?cod'u:Q$$m3a:Q/}\T`"检E /޳SrVq gr;Fԕ6H$̚KB ?D"xN |qӮUm?qeb8iUԄ cֻ8q^j2z(;|!owOmEj x oŻ>kt0K裹$zSHIT'm ;!M|OEV},/ԙu @U ]ccZǩ@d/2|etXCU˯@A]JZ#7|i^A:#42Z5j>fRZ||l42)uUQv5%1@fk 빈/CG#uHքЯ n X wA!rOrD`7ZI-̕+ߐWfz :?uet;U[v?}caW4"2\올xfDVi+\&_1<LKfA0r:.cT <.LVvmxノcr+b2XZnP|4lԂQumO xPOBŦi 44qD'uIj)۫"~wRab`w,A fmq1±e+NN^ѤMZŚ0G,ȃj!v?ͳ>q[L~ Uks/na |hG;P8.>f"2phfmVe4nU$`~?o?dBFLFWlR3Lިf<bC]{ )·{d9Cmt64X6\lp⸭9"H/Ů#yPLȥtAq !`b|ejOd YO*. !)̝Ij}bE_l+X/.{v[Jߡ\r&4|)ҪJaJcΔb*q ܙ)m/~sMټ7̇?ce+^S̻7DUQQ74寱zCTbVT*Y;[~- BW/D0jpVUhJ=xɖF?Ւ]Xzh /D2zv(}U b|F+Ӎ֩tr+rS=:{Ԑ`Z.U #StMc$K[!F,4BuJ8@qei[P&c'*& F@oeIK DJd뵊>f9b: kwbSGs}ϯdpmUgM yoU&$sط;T| &]!Uyį"֔+ɇۻ(Mj`ّ{C2`S.L3T! Ҫ8z)y筽,_rb_ 7 @T^(%Q|΋&+uc" X$Qͭgb:a쿆Ҍ6Q1%GnF>wc Ozk5¤>(M{}KV!Л YuYyO5;;aTU< p=ySUI ,Ń&{rꨋk[2Xd; rdRk4߂6&oRTo kG9X{caЈL;5`Հk/Q"crJkY,li` zr0(ɵy>qF|{| Luq\R35n^ɚ eynbu]!=rő.RBFxD檶1= >-B}09+N al*_/,'M+g+x{3a18f*0.9Ա<˫w#֟:AJڧ^khK.-u''ci\xHgOP%o.#)#ew'x*{5 .3|t3)0H ̭ YT=90jџh:зJ, jt';CƗBaőeH3;ڊeR`>ގk9m)J!>*P 2@>|kb r [ak8H\n-X( |j(T.%BcX7 @qB#-,0ϒ6!֦G}AYٗlsOh_e > k4)ϩ"I{^ࠕ~lPEMZf_嗶Y ,e%涳UH& 7oީ:m71Y"QQ<}ņ{hSe6?9@@O{UHvdN>٦OɳGYi eІHWyԹ¯+,M #;GǏRF~zM{\qsh9춇m1N _%#:U iz|x/B}Xk^_hNeeSKΝ)$وc+gTT ڱ,wP " J/aBi& ]q+ ,m82m&egWTFлX'~gR{wJ͎>wzd^+5! cG8yꢻK5 ǻK6\O /W#dqƿ+=,tm{q{l,s5X$1Kss= =gQvićZaoS!hh{w(5ykr%ZFI9X,k3h;(fDI4XC4WQnJ"2Njxy-gh+`3L l ;Mhn}BGUˇk1g\h}hFoԟYjF4S޼oJs04LEU.l-{m+s'4ЫԈYB m'69}W9D4=j!<@b(0kt|Q!ֈ3R3h\= d]djwdwqN;[)tqȟXiws^~^2 %XW3_YRŨ7Fie\gA}Á` K'I0_:*ieYgj"RՔz(5CXY(2vi-W!A_lK[ӛ#rź Zf$'L9J;9EH<{y4{}QW<\Z{ɹ ":5b @@cGry AS AwTS7O'9 9I̵/?eϝhh^AշCsQqi>V*l!?ôL:[̊U^X(&zp/d /|b<R\3n@pL|(.ВV&0M倈.+WL6:) ϧm bVmhNш\psZJ6E,1v%TCDn5|8E nr& _]MΣgPm `''g;or5Ǽ^*ϻ0rvtv ٵ fO<3Z1ҶAYy`&Y.U kBKbҽ4gʀ<«;VW Gj|_g~Y &ч&*42?LcC;AI#hb ov`YD:JR)4q,]Vd?<+kKڶW7tiY^*)|Jruw9æНC@s T9TY v*qٿE@Ԟ\k&pvX|,(#,7PAf3Ӵidg~gF8xS 񜧲dFxߢ<)>Qj7i6YjKb:]D*wUvT'@\jE5s/cJkHH3)qN#MM4wFP+"})ͳ1w_K yd8}i A5!+ y+eꪘpQʓeN'w/Y}D.[# m+(j ,3^N'"M)[Yg^k!}j.g%y4o& `+8֪ #"H!6ILҩg,E>,}1HoeLRs 8CuC~X.-(RCHJK @li\&6uidD$sV,YCp/Cs (X} oY`4K@2㟃:'%C!@DټxAi]nh"+nD >v`Nݾ!7*B݇OƵ˽Ӓpަt- {0NA+I{W󊑷̻O[IiL&Ҁ).BJצIjhr~=>\K! xbGJQ IAe绘a6o;_R,Y)Pt,B;;B [ۼ&fR~YuFvZ=}%O{#MraĦQ.pMo>o lZWb8^Tio!DK*=4J/{2=3bdfw! ˩E)Vdfp1WAw.:䏸'e`Z:C>o2/ H $jf W{7Q L[̢ [F9ϝPящpNkL_ S8^0>u-<7\Gu]2Fԣ\svB3N X|1QշRTmB*eAnFb8νA^+/Ǡv9z(?lA=@_Ymu^[r㨀6>E\CÅMZu6MmК8OX6R#CYKW6g,&_;1xK$%WނrɁ-T$hPKẩ!-Ŏjăzbבm7I%mƜɴ><<\# QUPPY:sp̕KCG3%5N&aȱEFՑebYV0(tb}KNѓ҈a%*Njg.Jv-, 3 P,.~@w+8NťqCd3x)h(>r"H^z7z:ɥBD=R/I}ꪵK\q`Z꣐ Ekaq1A୏\?^?l790zQZjbl+beK tkVBQ淆!y]XS}M0% &^O1ޞk\OT`NDQ9Fefj7l?7D]cc(֟߂w)>/] E N.5x4AV䥆so<iY1t]Ήxy˹"=oJ/E,ZNrl5sxiU'RJVv\9Dv%.8> ǟY[[{D\7.Bb䊰з}騅cyЊ)n𕸸 >-ĵ!}^ #NR~`P@S  I uB;"H>*l䜩y#Xu!|0dS+s9bq m{\ uj`›UM=:9X!݆Uq\ՅU<,BQ k9[ ,3;_@+~pKmg4Cw۷#y1۶p9X޼*BѾ<Յ̟AK~ N!\7u{U}C$}G'v1$8bݚ R5XW]YڙҔ6d`x^t t?wt6-F{%+/,tv3k n#핓2C q|ɁmvA 3%p* g &ot]N7! jpl&RCnE7wwhO9-Lqrߠ!} ¡DCh`QL=nJ|zwqljo[>5_N̟b QPfFjZ[b`T)#MUu$Ĭcl:qLGNZn7dqg= ' H 28~xv :mjBEUӶo̎ƝK·1zC-+aV{Rt`ڝIhۢ}Gå5FDU{P |*J4/Yb{3wyB6UqQ+z1z#l?L7Ɠ":uU 4a#To̶Td}wRE675=}&[*ZJIټ9ڦ0=rM Qig2BpFMR -5ܥqH=Xx*j3.4فn4ژmx`d%x/ʩ-_˭Gۣ!hy9=llӬ@H)BmP|{Vֆ? t;:c4 ,“(nY+P1!IpG}! ])i?ɱ_,%_ ؾM5yuȇ\8~Fy!bݜ$iJֈS}پݎe.bƇfbQʿӘ3ˊÀXiM7:]j'|78,3gj&+l(C}4CXYbL56bf*-#f"%i^fh×&Òd`)!Y:*#zz-(^?u}@>WmzجũsA Ygb7%_02vӐM+[pc=Ξ6ʭorU2D k2{SG8d]_ y\\;e@h`/(bB<[U4}W6ryhznk+w'؈cxG=(W !\!bS M {Z;[^ւeJ1?MC8A zj9rږ- nBC[HGq NچY7VLV56WV_؈ δ:dWY{CIQ$@UdϖVP pK_FTGw~!7n@yx+&IJ3p H'hRЭ,_1Nໞ}^bJN=ij1, *\$uY ֫NP'@L<; 6j֮jF[ i=lb逘asJˇNKZH!me%U5qw'_ Q0{{<+gsG%ӥF |[C O~?4{ q_!JLsKrW-Nw(V'Z~1bMEٔbQ_H;5K(=v0<*Nx:ua :,OFM%+YaX *hjVVCa޼Lt|#?/ے1%ʠE0s> w+¬_xA ޅq9 FN/$ňEFaqgh} o_Ԛ2$R?d%OrI#1o8Wvx<=mFOx5z_ )&@,f.B%8%+_%>|auwwZ}t40!>u݇ܧm;lJsc^ 1+38|0@yP).!rУS]PM?PA;BSAc*e7۵,й_3>#CD ?V0sh6>8W-yGXI8_+l@ĆNSiVM|oMY R3VX4,Wץ; L3ˌΎlH.nKCRmRDHc,v%tY}Q T4*' Gnj`l%p#߫rv]O{˞u;~&Zq&;aSOlbz.%Xli3 bż &9rGzז!fFQ瑩wbRB;*]Ԑh2CXĴGԬ6tŲY$N=Ԑd]{% ;ǫzEjh Z*gjG(=WDž|^C8#nkMdM˨EσOM)I"Nj0σ$U>R \%ī+QcIHɰ^V(> V6v6(xA0DFOo6~ 0͂ܩHmTDkR!Q M` fE=(ʞh#B /RaF7aQV,eR7@I(K@S:r8:~"DRZdd)up}(#$yJe.2qXG32H𥉉aitBNytQn FJ!7GIw)ĕc+SQ_{cX8/Ա\Y=lHz?N$ FzHd#g J*9|1uv%uq^%R2©JkJLÓxhTAfr%U&)."nĚ^&Z87GH&@qʴBU'ǿm_sdCzٝA/>"8Iiэ~C5`}xWᩖzWIYL\kw4F+7c"|zDӣ׵v˜Ĺ1&ȴ9*HUB C[ {toT?0h-}U10K-.=$ g/.YX(K!tvK0x3K"-Π/g:55x ,8@kr`鸩!9X#OKơ h=X>9c|N) k.S p?E%?n@}nǵk9gڜ cZ^`=GvTm`$j+=>:h+22H+9E7޹=G]H,1NJSә.AeXQ Bv%U8[ m: 4ۡH`˔{vaj͠3~5{~ZvK i-}e3D>ֻz>RCR{ً $+@KĶ+ő鍊T[1`vb9mxn]~T9i7ɔ7K~㔴||:nshyKUX'K/kqwBycLe?#H-a(FI+YX_ yQ0QQd?8Tx yP,b j)Ekx6zU=.2( _Tk@JIm@/BnVݺ|(u3 /8wL sgg\*lW,KTf_J]BObԵYFUvj\m@ Nva;iޓUF>X4Gs]|3yFTnE9P<2UZ ,y Wٶy@Drk N(|&{&q/+aꐾ&OwlrSs&gH,Ƃ)B\0]b 96S"wIa:ExBMd,^3#ţtKtj-2B>sTVӱ|:Nq7#T-F'#n8p 9aUE ,^V۷Đ5,yqLv;<ø?M$KID!rhPenRc!n{Sbx%.SlgoYQ6 >N/ 'Yw9%ĐB^ d^tJEt-&r }Gj=eMG)4= sK=7E\ J1|RHߺ#I3֐ɻ\ׇ߄/֭ƸBx75/|2Æq5>. Qz;ea#jsumM3Y 77JR˕Ik]ֈwY?X|?kh#LVE[jؔkiAt#]Ov)SeOzaC+QUhj>L1mvBsapDd47¹^+5|pSPl#q=#QH j"$PPQ*Ao撮@~6}9){§IW؅&>~5@M¸n/)^݋s7xAqQX¼[.@f.A"?uoPX,BkͰeڥFk8 E̩@{fXD ~Iq ~cbY fI:#ǟ7<ٙi8iXd3{)>SYRleL⅃=/p{?JX~Ss~$4Ss/9_6\8. EfDj-uΨ=:Q%;*ޑ5.@Q @4̊NP~UR};hwdE^ Řz3M_ X cgs: u굪M rxnI,qtuHSdۥݎѕ+C90yy&9[-raBǢBb: Xs9ud;snGNU4y$jY4L.!rl bc#4fe ϾE;gA5-כ~HpQgSaWl YH66bNʢ_?3]מ|ɝz/eGcFRSlI3k ./X3U f:|JvC:K.o@?Q05jtd8kڍ@OV.ᬡ7<{*QΰgjQ(ANtp>i0r@jWr6EYvSoS潒rXvL}OX":' bP N Y{r- Dž S}80Ybx񇰈7)AF}s4rUY`*Z VQ&M'ElbBE+}rk+4污j O"$##2 )HunU0p4gfw2a.wys?6||A~nȣfX+Yމn*B Nዼ-.Ӱ}bOw% mف.)F\GYY/{po'bܠT MM؇~8`G-/HNa~.nfQO&:6?c0GGZ몲@ ye56OV+Sf\h}9k0\cbs]c>Du3& ˗rџ8ݭE9v6puSЀ5hHۥ[:TFqiS\"V o$],*IűUIWZ1r X^V]!qvJ1& mfۉdPvhSF@8])rN+Zgʴ0$|n#|ɋU3"k­\h) G6dOa'/p־| ۥɬʰ(kOs H:_@5rHnT.=˞#CŨY"-<F͂N)hgo Q v{cg.fp9 ˾b\$l˰_CLi"üݔB '%]lN7!>9^L7a I;xO?=DNjN3  p%#_A˴4_ g ;'%+ZwV~`bԎNg=DP21r@v(ӹIXY|YO$eAz Ntz}xR&)…]ѦUb8åF3o4iv y)І>\-.%V êFw\ɸRBE4Vu-dϵۆ{a'#MSɚB8#4%%]Eg~ Z6~?bm OQ5*8Z2^h-J\ǪXedڂ/-}]\}p~͎zKB%UcpL(` S52ȣU+P>]`^\iGRwvex퉘{D AR}ĻSͶMȉȞ:`cEn]GVt'<狦‘߯gdus[1)saHQȡ׼-La4 #w45g"[{dœ񩕮 [eO\7|L=y^[fZLqVIK7U6rJ!-1 `5欑)'2(]^iX"${ <“2A豚^ʅú(zM2bK58KIYF%\MA!rDy4n7j_E|ܡЇŪcy~Naк ?lA5έIMn7m½,/xei,>scu8PK*z]Qc8׀38zG2e tV~A>h4I Պ_8a]g 7=lIiTD|Cezf1'{6Ǥ^D6K1Xʶ)Ʉ&ŏ7PP ^E(MC!'6ǿ>Ϙ0Pa8&E(o8Qg}Fy4`"[IDFE?=p3!UҾwV{+iAˎJܯKg5-ZnΕ"=8%0cM5ܛ97[.£ZBiQO-%!h )HL*Bߐk "Йe B?s#ZuM#D!b9鋢:"ZNw Q["lˬ7}W99-# ד.`JzmVzr,D$!jL{#c9Io`]׍d l-N:\c껁pY='ޤb$?, ꯹ebO HRŭL=?99-id~Wa֛pM8 WO6ic ]lSJx8ogw87xl5 9IKEwIz*%Q.{ZY5Fio:'FQ hk.YSn1OD7G_^9HyJ] ۅ'kk?.bfh Mzj:DH BŰ'y[§坄tR̛fyr |p ۰roQ4n!9Q{[DhqR:ܤthx/}o4o6ϠiQw/Vu#C5VRdٚxɓ=K ! XG)f@IvG]V] s!!Ifq--!^Z]E"kG&?HM (86S4t|,;ENds0IHo!D YZEe?BP;t󡜌p{b$ZEW-cڌ 6ޥExu2hl;6{:_2\}֒XCSuX4+S0Ic"VJ># )~Z&:OCQ3Rn#|2& vA{mIRS'j `rjO>j"rɀsו(sM[Õ :iqXOڿ($Q7kNS .Jyq\(չ%fg3qpY6[ `c'լ.鏤PGk=ygo.d%w!FvLVLݨle3|&fk>693t9J^l"*L e"DMm#; 1v 0=I q8-HB2zpQX筫hgwj`bBGط}5\n-}$Դ=~?qϖ^uXŭEA8t#+=DE 〆[kpDG ~{/PMOLDb}+5G>:180/3mălN,tBMhФ**9\0>y#E>R!/LJVǻ'5 RP:ۚ4 0IXKI*fD-``M{IX<rWh*v[A/_|4ᑁ?9AMbqq5%Ǐ;1550nDZ1gFeNxZ]-(jQ]bo~D4P~= l&Ս% {v1Ûڀ^0oK]%Su~o) ߘ9ӌerOT[M]!G3cpz>MrJ,i- Ԙff  IC{oǸ٪XmueQщ'WER]$qF%,Kh7Lڗ7WPZ!uj{ӕ=u)7ڻ [rl2TZwxmN*dyf ;(֪IRNKKmpaGŧfHwp*/wWU4#Ƶ.oDa?|jbbD80Hs SLP#-Ԩ+PWz6aRs;*47.|JO.׈'Lcv9{9{XhH.\I{@开i#/N~bl~Sk2(WZ aWB/d eiU7_ylTֻ0gfgQ XfBiFhH`>|E0EՏHŷ5ܒ? =Ŏ?/=d`z̉B 0ϔ& @41o(q⮢׷@W:)[,BR.Tcqb}zߕ\& wEl , +!*`Jp+أp bAypNqG11r GFl0x?5$eTJuQc]_Ig=mc)$K1p-KCr9 sڿ{dI\ޡ'v4=[32J``^B8O ȻKsoF^h רn[ ]gx{V T-鷦05|>Ĕs|QkTVg̼ Q-e2jHE)4#L3C@_-m{ '8^k YbV-6 ][nӒgu`^l^뗆D֢Y녪9j۟9A1g5]d^Mu|LCލꅱ(pjbth0KbG8/ݜ%h'(:sY! o].+wJ na^XS+!9i KOàњ$IGG.TMv2ZMG j|XuឫXW6\U?웄Q] Dז.jBWފ!>@OMz8X'6KPh`O @4u.3uEEr!QĒ0GLjTމeA`+ \m,5Y+  clFlZ2VQh;YGf(!X&k?׿4;}9L Rz`@s 9';61g8T2f͌*Nst9$ض(]jcB{'b|iXGqB/S1i (z AYEZR "&pQ!V cۨ F\Vw@B8,(y샷|DN c6uK _]н=v|t"|=2( Kky;sou%~4 YJy,*6ƍf#[7 M x:v@0ddl}Y<{5ҋRuEաczgJPؒ '-B]ee;3kӞ!0h K^ xtώĭW݉ }Bг;jnH=n~l+& ^z,%튇wcb!طCދYYJ#q"ԓhiV,܄$G: .V֫uhF_~`C|Ɗhydߛ:9 \ʚu ڭL-!3=z }@7_S$#B^-f~'uȂ 6%=t_c-᩸x+hїP*J勛1L6j^T9CLD,5f#mȒٱ疕@]J j"VM^pPjCnP)nnqrz>қʙeVDLh!~W'rQ`Ȗ;PxThс ~.ڦ5rIm2BANu#k՜X[M }568 2 S (iˮפ.d2!]cHư^^ 50"t~bFY8 7X>4,k]>C?P1%$ruM&F~ C-H*ƪNoeL|¾t$zɳI}9F#8&$dRJbbjH,?m~Gߞ(K*GXLmbN/oZ~)Kb7x{%K*DW&24E^)[h)x&w{, d#J眭`QZŶsy-3<:U7ǭׇ~ *y ,W1UI +nDE 7<9?D%VE#Xf9& boƅ }.]b1tw1ijw8=@}DdX⨨!2/RDؖtw7P, N[iDŦ;52 nr܁]ՠ@C2sOQ >(?0c`Ycj, JsPHUnb8m#tz@jS ͠H(zVhl]jL.l97YSD=[^ڕf9帶1wO2Tᡭ6ڇ)wy ŊolL.er5ZPqoćC*S8cBO08 XW&&OkV%F=\z8_r-HEB7>bg*~fw? J(s-m_nbu9m N vbՑUڛr*y/j2}/8̺TnѶvamz:g7~o*kqUh|p]'7ެ\ ,OYDM|W:X"+>JAiV"K,"IqP{4\4 NiKzNڣV(~[[6*vGB4RL\ [%cãy0I#epOxEMv(,u:*4KS%﫮[cC@F6,`T,n(k.8e}[6Pg㨥6aK>daH\j۝.):sQEDfI k^h=Q(kR848#kEG \Gs({ignVp0=R_`iI|#p-l ǪĀL@ի#- ݡŹ~)ul=EfohĮϱ^W^d˗vIgG\ Fx8\R.ED׾\*i i}r7_NF?$=3CRNt͐b;Afګʁ.nRePz(4UHdd8m帬 O@G?mKOYx PtjYΈ( G}ߺ3!wqԧ L r'JOO*p QЅ\XVpO#ޝx18wMUWcqQƭW7XcJ6/ma"378RLqۉmy H䡞n]ĺwK,;'9/U*<>Wdxu| ^knB7Nez3G 4e(($aE{s(vPiY& H=%y#C눷[ԭzlE8S&3DycWs;SəҐFXS.A+R(;f3YkPMMrt9f8(4u|`2Hupy,b_^xǚ'-o5Tʹ@f @T6w!@OOS0:kR39)؍ =惻ev~gІP.rqXH ( ӂBCK E솛5 P<"-$ú۪iYT/:6t=;y+0|GEݓ_|+}"Ζy ^f :̽&' L4c~T)GSAͺχk7p.5<+u49lD]ΥӋ") MjM q6"͓j؇_H5Xی= 8W8!ì@ATCnm{ iP| ([w"ТYC*DW+ Rn_اqkp^ {2F۪>t,M]Sݼmst~bRI,#9P?ImlߋˌB5Tپ2czy#:1/dXX&%&`ǙxyW1qFgLjPĀrn;s2VXsVm%zc tZ@x0'MpV'T#` G;cWˢZM*91I: QUn70qI@p@6rr:xOT88Ko <?ʓN%a~WL!5rŗ5^Nш(wGʳ=v4' u{"OΈm%!j;>1zikێӻڭ*;XrR{L;Jޔqh>R&NJcc}83]C@aFTޖ8q#2+V?ڒ ȣ8~´WE\,1>tGlZ1es :8N36}Дw-f˦ם }'^K Hf{D0wO`l8os0r:b9^K4x!&>{)5"K;A,Y^~` I0TLN!,Oq11 ɤmRõskL;UL]!f'i&]1f#@Wo Vr>9R((> 8E9gǴ;Fd , 8s^,at#I& |GJl~V잂%tQVOa":ҝp()ռ@0w/&`;a#Vt f (\*/N=,ťW$\ ń}]DTbIo921oW9<'SDɺ. 93nC,30-nbfė-IsO|#P`Phd(k87aվGOns1pPdb}t5z*U Me&L+G]"6 &uY%{Џ-~n^rs"EHk2≯T2SZh `?DxiF ^yլGhML&4<QÏz,:/&+CۨhD&u7ک+*EZzK= i;{ͼiJ=Snvk L9:.:u# >{HNzr<U H͌=2 C.nJ箵)MO a{cq夏$nA񬲾r;XX\aGnBzZqPLHO{A55"oSB]o[V\HGLle'( =xQȄI hS='X? Q.n)~U. NpU>WO >C#8jOI7MC, n:55Xͺ_6h3ÖLa)8ԷNZxXʈ"xͪX{jh۷c2q";o0N33<m {a1ղ7 0VtCw@3@Nvؒ\4QuញS[I4WwSc Y Pqyg!t[HpvY(&,>-ٮ#ZNRAunErf qn7a`IRpDlW?M훉ю!='5PT8.kcl6{3+!b߉^YK\A mJK}u>wd5yA?Zkg{`Sa}"vCejqňK<zL8R+]0hlC+m Zrq)(7>hrP0- dUtD,:`xs8/&E4dWm2b$ɜ"'hB Rep`=gaNXD&Uۘѹ$}!)qx&_7QȿN@nkr$̐ÔS>#r* RבNz.˞)h /+5$v|;5kV#- }Zyk UެA2 oO57s$r&%Hmqq]2kNקh>z8Y Z}rȻ Ī>@o{.JR>NiǤH85L"םi &fⲏTAhOixǙ8=׿~OF|~=2:s0|EpŚ*?E & (T_ِOE6QkqLj,q{& ˅ {:ÒR,:"hc+mc#_eqj(ҩ:/߻(lNQ!sZSR4ǖ;=Ix8@,ןD1*MkS4-{`ː3_'b7,^ů:$MRb&k{0_yAnJں/qA8gt|#ˏШ@<%Yt󀶂R BfI6K3) K̾1Z S;wzRC^hP9l%U,G3bb zqw$knOrL5tbPBZtdvx[2l(T?vY,I_} l$VÎ GBC (Z7Ғ.d0QB xb"'PImZSGā_=>%a!"%'|]o3"ږʛnAMKscWU=/7u6 PKj( J-,mj[i+u RVV5vժ qMb}4y KJ ΰb RgY)ZY!=:ɟ$ueSTvNxl귿H||# ZӤgsp`Ol: I EJ 2̘^-Whq]@'ȼjm y/. Z"eSj\eWx Ml.Eakc$9NZ>7IݥA n>=IphD`M 8&xllx89z[TewH^S 3k-&K*ƹj#]G?RGv.^KZ֗RtQ/G Ӝ EWm_%Oy ra|4CJ Q1NY~Oʨ.lu_T]$*Q(bAAu?%9kRlTI'\) wg"0taX멬#Z>Gu)lUG&4[)G,S^i ?T^|^@Oim.BASb9Ҽ4n8 %nedv*i3.(T(#پIHͿBpT,Rl&2;e9ݦY8]*rf7?6jpsAh> UguGC{̣yg2 [B6)c|LM}/7)qT&lO  kS+MQURթ)4{D^GGІA\:Sq J Ƥzz/5h^0l$]. 8|ZoDm]Yts\MwcZ1JvvtE ŦBیڥ|#C9 +wDGߩ$z뫉gvˣF6]+jc,气732t?`S5Z}?.$:ǻ.uJue{ I(汻[Aoԁ~-SNM mr2B%1䩏 V6+a}W1@?t~yS:Zq~aP^Ssmh|jZW[!uV%"DVu ikWrE}?X}x#)k*tr(.]u0ƿİ/Nt_'wy' YGRa_nH٭A`ShO}9u%J0s+wo.C)2E4tK-wB"SDB)wySw pY!`o͸.HfQ577ӷ[@f; 5SafDh/=o߉}M݌rOK\稈l:K,XLqwSYydM'MG #*M㧻I|ubK>f{Yҁ@d=UQ.ѷAog_hs ɉ1òsh'Sq**n.jfd 4zW>XndyD\m Q\W/@Nߢ`kΜZ$s(b-!'\ MMdg}IW0vOܦ^Fb,5Rr@YK Fߦc`#l(Ui?Q,?6!C)?]McPW#6e}!5( &?ab1q ;T1?7k**WJxL,W$%! f}\.IjrCjp`{>(dCqF~6,BmT-xz 3"@m԰xu'#({yӣ\!DzH6g]7@] Y:OV i }`pTw'ojсLӚ9Ci|R<[CշYK9dpe5 qSO`r0>IFW 8\]R1=Y ;Ƽ]&#l-j- 3?xip]fBߟj!;ϦjړYd޼L2k%P\a6d`~O5-z謳=J̨IFNG2 Uu_/-y50f(yW7/ 4EE Dx+ d|ϘƝOZkhR_i/w"Aa )loR_d5͝MekӦ#=7/Ķ\>ztfV !z4{:!џ/Nyuc N1O8  YZ