samba-winbind-4.15.4+git.324.8332acf1a63-150300.3.25.3 >  A a)2p9|FJc](r hqN q֪`b '*;3"JFze֏bKZVQm/њ~SL#ܚtv,5Nx tv+ p۟*o:P> b۪H30f6dcb2f4bead3d43598e1944354835cffc93380eec474f1153d7af01da9c9e965c0212c1dcf5ec8670c81a60627f5f6b229e960a)2p9|K+r2p΢~O(,RYs'k2=F:S߷ tmdi)HHOps B4+$7ޒrhg2:za7d yF׷TemԱ~3 n/KCU#zªgNܡ8("imIk*Hžݡ 0>,;-#|ɦh2-¬9 ÏԨ˰lIe6*@wBu|>pL;?;d+ 9 Q .4<.1\ ~    T8|08(9899=L:M=.V>.^?.f@.nB.vF.G.H.I/(X/<Y/LZ/[/\/]0,^1b2Lc2d3ue3zf3}l3u3v3 w74x7xy7z:;; ;9;X;h;n;Csamba-winbind4.15.4+git.324.8332acf1a63150300.3.25.3Winbind Daemon and ToolThis is the winbind-daemon and the wbinfo-tool.a&eibs-arm-5l{SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxaarch64# we need this group for squid (ntlmauth) # read access to /var/lib/samba/winbindd_privileged getent group winbind >/dev/null || groupadd -r winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in winbind.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi/sbin/ldconfig if test ${1:-0} -eq 1; then ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-down.d/55-samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-up.d/55-samba-winbindd else for if_case in if-down.d if-up.d; do test -h /etc/sysconfig/network/${if_case}/samba-winbindd || \ continue rm -f /etc/sysconfig/network/${if_case}/samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/${if_case}/55-samba-winbindd done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in winbind.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create samba.conf || : PNAME=samba SUBPNAME=-winbind SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable winbind.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop winbind.service ) || : fi/sbin/ldconfig if [ $1 -eq 0 ]; then /usr/sbin/pam-config --delete --winbind if [ -x /usr/sbin/nscd ]; then /usr/sbin/nscd -i passwd /usr/sbin/nscd -i group fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in winbind.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart winbind.service ) || : fi fi<rX% E^큤큤AAa%a%a%a%a%a& a& a#sa%a& a%a%a%a%a%a%ja%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@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwinbindsamba-4.15.4+git.324.8332acf1a63-150300.3.25.3.src.rpmconfig(samba-winbind)samba-client:/usr/sbin/winbinddsamba-winbindsamba-winbind(aarch-64)@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/sbin/ldconfig/sbin/ldconfig/usr/sbin/groupaddconfig(samba-winbind)coreutilsld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.15.4_GIT.324.8332ACF1A63150300.3.25.3_SUSE_OS15.0_AARCH64)(64bit)pam-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-winbind-libs4.15.4+git.324.8332acf1a63-150300.3.25.33.0.4-14.6.0-14.0-15.2-14.15.4+git.324.8332acf1a634.14.3a7a@aa@a@@a@a@a@a@a9@a`v@`a@`<@`@___i_@_|\@_{ _l@_i@_d@__ @^@^^2^2^^1^^Y^J@^2@^&^&]]]])]@]@]]@]nU]nU]i]e@]_@]J@]B@] #]:\ڭ\\@\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USascabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.denopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Update to version 4.15.3; (jsc#SLE-23329); + CVE-2021-43566: Symlink race error can allow directory creation outside of the exported share; (bso#13979); (bsc#1139519); + CVE-2021-20316: Symlink race error can allow metadata read and modify outside of the exported share; (bso#14842); (bsc#1191227); - Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- The username map [script] advice from CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails; (bsc#1192849); (bso#14901).- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899);- CVE-2020-25717: samba: A user on the domain can become root on domain members; (bsc#1192284); (bso#14556). - CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID values; (bsc#1192505); (bso#14564). - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other servers; (bsc#1192246);(bso#14558). - CVE-2020-25719: samba: AD DC Username based races when no PAC is given;(bsc#1192247);(bso#14561). - CVE-2020-25722: samba: AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues);(bsc#1192283); (bso#14564). - CVE-2021-3738: samba: crash in dsdb stack;(bsc#1192215); (bso#14468). - CVE-2021-23192: samba: dcerpc requests don't check all fragments against the first auth_state;(bsc#1192214);(bso#14875).- CVE-2016-2124: don't fallback to non spnego authentication if we require kerberos; (bsc#1014440); (bso#12444).- Update to 4.13.13 * rodc_rwdc test flaps;(bso#14868). * Backport bronze bit fixes, tests, and selftest improvements; (bso#14881). * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal;(bso#14642). * Python ldb.msg_diff() memory handling failure;(bso#14836). * "in" operator on ldb.Message is case sensitive;(bso#14845). * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871). * Allow special chars like "@" in samAccountName when generating the salt;(bso#14874). * Fix transit path validation;(bso#12998). * Prepare to operate with MIT krb5 >= 1.20;(bso#14870). * rpcclient NetFileEnum and net rpc file both cause lock order violation: brlock.tdb, share_entries.tdb;(bso#14645). * Python ldb.msg_diff() memory handling failure;(bso#14836). * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848). - Update to 4.13.12 * Address a signifcant performance regression in database access in the AD DC since Samba 4.12;(bso#14806). * Fix performance regression in lsa_LookupSids3/LookupNames4 since Samba 4.9 by using an explicit database handle cache; (bso#14807). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Address flapping samba_tool_drs_showrepl test;(bso#14818). * Address flapping dsdb_schema_attributes test;(bso#14819). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Fix CTDB flag/status update race conditions(bso#14784). - Update to 4.13.11 * smbd: panic on force-close share during offload write; (bso#14769). * Fix returned attributes on fake quota file handle and avoid hitting the VFS;(bso#14731). * smbd: "deadtime" parameter doesn't work anymore;(bso#14783). * net conf list crashes when run as normal user;(bso#14787). * Work around special SMB2 READ response behavior of NetApp Ontap 7.3.7;(bso#14607). * Start the SMB encryption as soon as possible;(bso#14793). * Winbind should not start if the socket path for the privileged pipe is too long;(bso#14792).- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/bin/sh/bin/sh/bin/shsamba-gplv3-winbindibs-arm-5 1643390565 4.15.4+git.324.8332acf1a63-150300.3.25.34.15.4+git.324.8332acf1a63-150300.3.25.34.15.4+git.324.8332acf1a63-150300.3.25.34.15.4+git.324.8332acf1a63 samba-winbindpam_winbind.conf55-samba-winbindd55-samba-winbinddsamba-winbinddntlm_authwbinfowinbind.servicercwinbindwinbinddsysconfig.samba-winbindntlm_auth.1.gzwbinfo.1.gzwinbindd.8.gzwinbind.xmlkrb5rcachewinbindd_privileged/etc/logrotate.d//etc/security//etc/sysconfig/network/if-down.d//etc/sysconfig/network/if-up.d//etc/sysconfig/network/scripts//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man8//usr/share/omc/svcinfo.d//var/cache//var/lib/samba/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22444/SUSE_SLE-15-SP3_Update/4abb22113a3b405a10be97f0b30e35ff-samba.SUSE_SLE-15-SP3_Updatecpioxz5aarch64-suse-linux ASCII textemptyBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=0464b8a1b04cb246c5abeea2f6de1a0de4464155, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=d94535354018fe901a5bd6a79cec2e1d42b3eb5e, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=eb03eaf942d3648ad404756289fcb79192b81ba4, for GNU/Linux 3.7.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)XML 1.0 document, ASCII textdirectory3O2RR RoRR2RSRRRRkRWR.RR[R}ReR]R_RYRqRyR5R0RRRiRnRR/R4RVRjRdR\RpR|RhRRXR^RRZRR-RRxR1R~RRRR R RRSRRURWRiR.RyRR[RRRRRRRhRRRVR-RZRxRRRTRR RQR RuRR,RORaRSRRwRRmRsRR?R.RRWRAR[RYR3R2RRER0R{R_R R}R;R*RRR]RRRRRRRRR"RgRyR R=RkR$RCR9RRGR7RMRLRKReR&RqR5RoRIR(RURcRiRJR RRR#RRbRPRVRdRDRRnRR:R\RtRBR'R)R|R6R%RhR^RNRFR>Rr &ʾ({ΩlsR _cg8 In9lU` .=*g.^"q3 Rɏ>h~Ӟj Lz|KL)zRX_GpVcSג(oU{^Z*O%9 ?sy$[)XQ|"#ܑd}V} gSv/? (2V^2?qE{;i)$d&5]@w9ٽ#3W{+:IU!'e`)Kaz5?kNهmU)䟁l u}eܤsJާ267g^㇆n#8s|W.pl˩ֽl2E-x .ͻi: P%S]nw\5#[+xu6{wea4S;ڥ_0wЏv! ݷ~(*q .b^g+V$F Tf mKEa\> 6 P\=ć'*Vy$tUD?;BzxvS5f?$4'g jiHm\Ū(PDc- Ľ vCҹ)/ȍIǞ­ ȴص<3bI`еlF@j;>(A3vE>D9C~D(?u@T12ג,Q{cy*OӬe6R&J5cdPx%MOYC02: `$K2|&@m0ivwQxXu_ﲾTXLy )BOⱯ;2kƂ~O՗1T'2x?q$LS ]i HsUEfT|:+fADڊxcduo*%j'%#+ZrG} .g)ݗI5Í7[e)}*̳J?1 0s?v Ok35x5y㸷:Mj?&RЌbL[Tͥ9|X] 9ѭ)0H}cIizZX -) %n &N105G[tH@l<o4Rƨߣ_C8J(?I@'R\DGXD}v + xd-͓gl)]N_d~,QcoHp  qM%I6n)#W*sz똧 } e0)l!#.%~Jx9K*BR0xJi`k1䖏h*zFv䭾c>,[TΤ7JE)=9\0qP'i&ӭo̟|cRm-060p`EmDb `f4z|hz6 |Q7!XTؔd {٣0`͉W6B{5*Fi|/&J81󓡔f͛E0]^\Ϭ;r]<ׇ|fL ,vv, p?. j%i搋'svFQUs]%2 waBr,gaݽ7m,WBY9yƻ4(\UC/ZV+j7Gj"cyv\w,;rq7Ə1~֐ur(r,[s3`WVO Q JHK"'g.u,}l.~M[t]}w.׹ܢNBچ[+\*}$xrQ| {,x"H==@ܧ!2 %I9GVV'S Gg-$]`.aCT=b% ~Lk| I3}żu\xDL+0ۂҙ^P~QamK{Sttz\֌@QPL lW`r~WCh&2s->@NId +E R878VSK79zU$HPyl,Z4ʲ8@yq >-ek 5n- ek&ϴ=l)#wYYmݒCz6wϿacL+&K;&p5 }NNڙ:UIT^A`ayׯ@Py*hq9 :@@R|V9&Q"k{NهJ03UcFN1!(U1d;u #w7^?ҹɍcnGgߐ݇@hsbQLa&DM Yaᤑq7 8Ww|a;$yϲ>UU@ɗ+ͱ(<$^UQYG04O=%H@PT3ۆ4lhE.Ҏ 2tJdMG~%OW[L sobY[r ݪ}u&Ke;5ءQGԖ = ָ@=*v}Bkf3%/":C 4j)[3=4ڪT fV }EDTt^+a9|%fWp:ԃ,e e.~|%;v&R|xPXRk{-1quÚSM>4@ēs3/UjZk-dwX_*2A#ņ9,'ahSU##;̧srH&iyoX 6qeٯYΊ:S"GU}4}ݞS݆"_@f΅)ŔoKoV}KnYz\, R I#^g7MXʝ05_V)lƿ ]Q{0qvF=@W5XK#zAZww:=hNhұqGPJ9jlMu]`mlu;J=,1k!"ymѠn+2ķiDJ.E:u-1շT ΍%I[#)OtMeu7VpGqmh > XA$cI,G9A %kQ%5' զ&:H3*&p)ș{P*{{B=4Jf[\ 4J<-8+),ᬚvNO :e?pL= mį1ؒ:Xծ;`ΜN~j{x-gL^݇( ш1}q&`1uPP܃s- hAV˰|}'ub:d}y4K`_{g<   PwoNSAާB?\hC>2XDX&h<:`s>Ȓ+{zV!x_GB}:n&?of͋2[^Zp*xةa"Jfr` 974:?$G|TSO|Qj4'9bǪj?g)gXy& "P 3ڛXn"!ǻ?Цqsc4(Ys.2@\D2^q kَ&Y&q b<޽;>zrK¯{3pvLP7qӶ asM/&: !E ^tF,'ZR- VaQEݘq3^ӧ&羱vC3]Ny30ob=a|+S yE@i6CxP}؋Ǻ #UKijų[ҭ|%k?l/뼭;>huM^> 1d lF.,EPu\XUwڨص?Wqt ʝL*_%n !Y}"KN1;UI,V4R&3OኚjX˸(u\dZj=9.E0gK RDcaI[Rs^!;3 = K uukbSoW6q9|d7o&ç $Mt.3Wpy%d\-&`1?TèTBfi8y@gc>ˆM-:Ԉ =,"b ';\@2]6ڿٻ(餙ߌ 4dTsqh14y.1QP"#SL74g}~3KV`m`irNw%iMWٯk SĻsY𧫓KwIJfK<'Y_MèN(kjWrie1*n eY @4)b[uOOBxV YedHEo{܃#`-p)ͽ"'M[QUVpǒ.r6%% %Yݗ0\T/`4a6T kFpfdcȒR5ш3^yÕo&$Ha]F7uv(ZS\SZ<Տk;&Ԅp.$Ҭ)-P~I=` GNhM`o~["ݖ΢X4v cvȣVdEl_&|<6kJ2H8Cf Ghuc:2sY>C 6>Ym1aj))5`2Mv(p;0rju<(ЬɎ%H&_rT|<1о'V8KJȽGSX׭Gl96GV&լZ,isSB0C ЦA\.{W扠`>cVvd")zlfDRUֵj.GM?> uav,X.6LTX:7M6չ7./̍wû;;q}:ַX|&|IHv8R NԼFsa#_2-Ҭ}TA F%ñy;6?xt0%*D9NeF=,vP *r{)I,3@c|Y FNQmN^Xoʅ@C nzVy/1_DQ`۰Źsgy COD8h !j9+}lW[KYuj8y 6P4zc*ݼS>~"/nN$m>[ VmU? `;t} rV_l|]y{GsϤNa9Ro@.OF-MJ2U2&.*Mɽ.P)CҗڔWp$y[[QI<)~ p<9Cŀ)6}4.ƥ^$q'%_uXHs{P1LZR$%Br  mk dMrޑ$yPBþ\`0-)GOfϚ_ۺCh|F;ٿ-hLo |" jZHYՍ:osH }wmv4l F>=aݛd=і{Nd67'8P3 w T9աE@tKao'ͽN2RwksXGcska#X]mKp:}G, &z+B$[B؜}^! p%{ =-.3i@Zq`)93N/JeqwU&2X vnNjvYFnjsy{X=JeY`Q _I.Q$tҭ4 M^s)G~1}}m>nf],$Bd {8zVL "[M sv_ɝۈ)Ln<KƋʽtK/_DC@)祢Wߋ] Ι||^+ACt6¡߻lV.[P@֮q|@2]jՔˍAYbWOJˎ5hBWYyM-Ps+oo  ײ.4OCdS-w ƭrfq,.|_ΐ#j[CB43&.A|e $4 n)]K'byϛSͩ'X<0Eh/@_쉌_&7ߥAh.9 \Wq VՄ PsyMsx^jQ V7.N/vP=2>i<85]70LLo =9+oyxc4h.gh#vJ4O; S4 [ јc)L=h% ;vjIe֓_[@ <`lEr=Z+,wBL^ rjR5+XG%?K~{'Cp{SċdBK3Sݽxrj3,ܬ ry7M2BrxT=tz,jLsS%'w=V.ZCovib7!HD.e`mxLZ̹wd%3ռkbQe k%/FZ/~UTC,G^=V&y9&g1)n/7ۮ$X/%,FH҃6,,0UA q4{^6)03zLS=[|^utInˬ -])*ǟ4W53Y,,eR+ [X`~.eiG!IQth=Zoݠmn*AYc< SDM\"j;,NDARP7&I_OB#5A?ljsbV EMuֺ?s[rQF+wd}k\-YSd#ىóHSAlK0 #!loAj'b[`r2}᝻1pG;GX4@@ 9EioT5|gkV;I -,/Nd7llD>׵+p)@UGz^$EYhK5pyux"61i*iwlx5lc1uSB!!KڍEeb^#8jDCzASF)%^2)7ZrwzٝQpp"[!V(ϔ0;q8EG)iv -n(`TӢV m oZ;hD|*5&Lhw~^n/ YWs4^f0(WW  vAkȤ9ݫt8BnѤ/4[\J O l 4Ȃۘ~6 dA-&+X8MȪeP6m[t?er7W|2KoS!hpSYKCa_-)ع|W%RGI#ԃ}zxUGc6BUZ'C;uZnH˕O ٬HQkl#] +fLsY9 ̙җ4>r+6+ӱ'ir 5/8oo%mF,Y.љlWpRAnTN#L/ U!)94Q-ӹFzƟVL 5 ,-зHsUTkUAс+}{PB"Jogx]u-dTb2 }?4iDa/xɛHtuAN;Av& SHݮO#i'峆Y`aY`s OI&fWXʿň[/a<3Iw//-HѻǓ[4'v%QMrq#չEcM?7kvrG P|`\Ū!47_ bv&z2eP1_%/hGqe d?7DVul\Zw㊨βfg!H!I]_QtqԏԴ0 ihP> K髼%[[mQ {UvT|O<-H$'Ckw ⌟ym>ٝXlE nesoPp#Y>}iODRG0/y&8Jȧ ;NIM4-rfHȗt5 */J\x5AMd8t!ɈMM;|$> EK f` %:V/MY3-yZ-ࠕYLe3V kK(jg1c7K.v d]ZWV^{:C8 3݃KpP eR86N#y8Eo&}A&CO"pIEy<6`?&(ljtX\dlUm,/>&_ Q _A& v܉·I6UN~6%xүU b~WF6fmyeÛ܆$اRC&2< m|L{}-%9XBpɊ6]֥ o7 K;[x~'R^C|__q no\ORk|TY~s~ 4bwI=Ͻq2e yiF/2jgFy eP8Wyv6~5v (GA u]F;5CdDotTŝ.Ft# ;C';RjRG]K%uf 4^ oj;b69dDu a1K⋇Y, :Fjo4ｋ-R_nb1hu<g_gc~._J}hNvgIJigsUDL.PhM,RЇ.KH"4C'Y!-r]:pOi%ZE\(E¾ćfA-iVy8Kmq9se- }eHYLUp`Wଵ&<&)L?2EEd0@“<"E`C sՈdD>̣/j揄"]iHg?hݵ $Fvȏ'MP\׬- qQp#Йpޘ$i`q>87̗~ж=ֈH?T:,"ĸsZHEe6鍉 **ݑ~yJM] p~vM2fC=R,f\xk?-jV Ce]Szzs쯈0BvIjNH%"F!Urp} 4 &B292˻u ;)u|FGJZ597̇>l`vxnhk#*3Lyn׭ !M/H$hbۯ:'E~R'nDvӣ19M(u<CP5`H^9)%C* puG-*TmrKk9=mRőŇX;lBUs=w!$*h݆7K4+_DzoFB릎(EHgPVdc*LtUaԈXqiʗR-ѣT 3"g={ӾjB0uƥT;( :~ZL1pv&ی\S} }8jnF(T&]҉պͣ TޏWmhIJ?iـ?v{w!`X~hPH5?%?=!L<`rƣB*r35"PzIMV(eI2L-FfIn;D?C,׏P[1I$%Ԟ6tF׌Q`Y9k6.JZm/f|7D_{ /%x Nʹj!x8e9橪.L԰Y16EBV9CQz<~keFw|4t%٥m[ZK>]o=))3%Ub]MXtt[m).vKҚI e9eU J&v͵#pm\N7U& -zÔ E*ϷMυ \ͬviNC$6lNA0+$Mh3 t䍛ӭ=2.4z<,Ɣ•LL.B:D'XɓMWh,󁛫.Lb])7,`/AfD J -Dl$,q`+gyR,TY:|!umj.8<2UTJIHAu4QPsa!9KFm\C;٣\U!ltstM%b6vƑf` 8O6?E8%o]WT*J7V$>-4̗|’+<AԙJy=e?Є0{P^nkN/ u|\*4+F%>!IUy8't U&J3*EUH!Zwm5:h\ .x-6M&Pqa ](&\jQ\jUZ4I\eE4ݨ K/hs>o:*O ՟ 8J;jjRN7dx<0ע$=WX%'eb-(W$[B)\<{h= i_eѲ9.^3,<$`=h|U֊׹ sG0fD܁FrI{qZ<_zN/}pk^ #%~C>?N29[^?&2^;h"}ԤwDhVKY>qjԙM:$t y'l3.{lier'Iw׋4ф4BvyM@-C(߀@x|GKlP{$`@G5)lЁPR l|Pqק+ HHZ? +XbvύIT+n%S՛C+)ۧ9f_f<| c||;l钽G_56M!h{d*lj[EfgL$HZ̰T&2C9mílyAXrM<*܃t0Ӟ \ƺG*5uNVҤp̐ih{3${c洒XLN,j{2pFK(LEsr b[@9~T*"s2ؕG}M+l.PۢgÞo?HフC}{Ӕ[;\;i40yX_+S۷:8p#gno^B籂DJ<dKX{bW#,L?!?3;KAi 9m܅.pe\z9:G`v7}>A;[V-lS:iBM ob5T-3]qf7ꬬ.P} %9v ǿ(%GK"M< ^%k coJ62.c.źK:o4@C7V.GJGnE򨾽Ӈ%>_^>C&36ސWl ֦/ Ɣa-#AFV&$/N';M#H$1׀qQC0zPQ ߎ$q9XF8Lru6#"c ]#oZY?ofqD)~Jlsal\,i~fk.1eǠy"%kl6WDMɻ[Nd0E/#*ިL$8Q['vI#J@;^s:s*3X4V?%9H{" ^hU_rq b͓5K,~S2'I"x왒$kL+[~V촁0f(@M<JFڏOIФۛ;L2ȝ+oj:Nqڂzꯆ.fTkpݫh)2q_Ԑ;#8Fpm†H`B%Kgz~1;!ACR-% "zRpAkb*/rzX$73fG43E*o][gGpQ;˭)d;vaw9[ڇw /W{KF5ۘ=uNox#YBaY 6g`4^T.}]Xqg^z\ ̤l"an u@䑶(KtTK%BsllnۃOH,WU`ZUh{t0&{ULȗ1u' !/a{ini,1%*"xd&}4˹Jjnv UaOs[ -\(7Ca4Rf /92J$t&Skr(@3o5q( N1ˠDh,L~×m2'f--xG`wka|)%fgʄ4Qf[IV͹Xw*V|mOi3*o4֐F;֔Cet[=E]͒,ńƮ6J\&u:e֧^ޑѤ͜|UCh"xV*#ٌx)ܥ"YQ?oX^Nv\h5N:أYXYʝIwxzx ]i'o)oLFcZ.ޏy7gqyL6Uݯ"d#[J_&9S 5GSUT"QUٍ~ӆroeo{\e+e;|8SN~ZcGNLo:Gh97.QAkٍ೙ӟ3BƋ6EkTKOnBu1LoހFŻ,;WIFeC"snCi(AFZa X1|*,b^Wn~Wv4`_I‘Cgni9, JmD*Q,|/; ɫ\䌂rx<X0rr=+ BЩ zZGuh! :2nU3Rwp`̞L^yVzฺ 翌bb79>à 2,,߈kېYA"n4!Bzzث\I!RM97oKmlce- Z*f) .,gWJ;=hHw WmZF޿"Y$Ĺ)SV+g~Qa1o`]oSK5 gW^u5Y?لY"ބdFm4JV2;OũIL&snᣥWVt҆ɲb(+v~Vhqը0ijU!"]qO -=!}/܈w|3\(@b̎cLoFݱ bhBk.aM7%anڔ?aʚV q!>B.zÒ%ؠKeN;!nBK*dQy´K[UMs:+nx:ľϬ9AйĝeTvנThԍ89Ji{dOƳ5qi[M zRՕ $reå<)TJ_0Z.#e[nmIlxaMY{si,sbv)2Ynrs\i'rVn8N͖L :e'wr9&CϦu@04`d4(B^Z '{ջI65r{ɼCxP'&BW'/Ozd$?OB_f^sO6ta,H-RƖoG00cQ Y&Q)K<; <5 xBسVmͼ(p%\W%bke7y_aM4FbR[|YI}INRLZX`B+՛XQa&N1y51+!ZZM^&af|NS0s=IVLacvʆL]j2u#7);|؛Y*ޙ @G4l㶨J Lqj.Uh|l+*9k9<})qDwqwY\N+>owr^@\sv ,ʅ{vʩg^3Xf*sŷzD"}G"ڪy0W<w_y C[pxn %, pЭ&DIT1la|+r\<[HѾѧ'}0ЭQol&^Ӿo|qͩ`d'gِ?+8yHC&Ϯڸ ,00'K/]#l t'>a=&ߓX~ 3`=lծ\ w^ ӂ=t'(H\`"(-[рHp8?C,_ 7fv+\[xYIIݿ(&<]:LDUD~פn"ɹnU9_A,՗+2H.:,85Y\bʆ >v[M &Z.*KiR.D!q.'=s36EYthI*+C(3xf&eCDj$tר`{zL^]z[yIhK,+3EfklU*E7~ǎ%(o& &JYӕ_$lj=~.֔m@R9-'b<u[fpAL*!`^y`A"H315Wc@G8٣q@${[)I2IH1Di"]%Ϳ):̞Et8D sS[xZ(..'^'{[5i~! o~< %$~ 6`TP(A8xW]_ M*Nݐ&hu`2mVP݇/`hwN}p2~A'r}y+U7xH]&x Zq ؞,L+31 }3@9FQ>(qN:CmӔT(f8Hi DK &j N>R0R%YY52 +h~@lePD ; 9*XH6^ C=<4#qfUeX^tUZP,@XBb]fFroOXE5U2cE-{E@{_%X`4u#盷bˆ5XRqI㹪og'x3ZqDZ|OX6{[FR}wVX.tj_4kFDZh Bl#m,A۱.@DwQG&Й /ռ '?@y)|韚"z|Y0%z~ѤY^UÅaEdtA?/ka|o-ֵx`X:*XA6Lw)?RvJUGUG\GL3"ڣgKh%c\݈QDů }-,1nhJR hݓ?6 nG?`g&.*]thzNl+/3GN,,eh.d[!8A/YHiU/.#%I]OSA X0R &Uǎwx"4Nm.B! ٮ>iH d漁ҏXOK5`e lHq҉ck^(ޠxE7uPTΏLk1[ϗ:(T:h"rHa~ħwRa8܊V؛얛!RQ Q )tI)XZW{~u,ѯIWd(x.+I| a'R6>IVX7 ZSbA,y1${\Ixc#Ұ#{TT8n-4N.)?!pKГoS.^̫\=4-# a|vQ 3v{,N?ZqٺMj\W{8]NlJ( 3B92QByXqDz{jw5PAG5&I/|'.G+ jDHVI˛d#sN\-^,V [_:WD͗čU;L!gXܲGћ HpQ߷lxq$鬝Q!>ʲg=Yrik$f>0idQ4g2&}6@(]ڭuM3S$2mdz%@u%`B> [Vb4R1ٻk׍F0,Wte%n:Gv|/%S,& qb4xNPX(=t* ^|";DܕLDv]a[oIK {![i,NnBUޥ uZ ]Kl{>mږh.t mZ˰+/Q5~|l?Sѻ5SmqP]@muËJU Zay(*!GUP`]wTxEDPC '*&7Y+=Ơ3{D:ln|qNw1PCOj]h85d !܊->ANw۵..v{v;j 5 \~ VT-lnhGςZʉOG}1C&,hRn8NK-!@a0Cp ZnpB hxaρSP 0s/:58!jDӏch`uYˀ1`yȼɴJ(i5X=.;f oAˊ-pr(paJiI?cie{]%d֓ѕH}Ͽu XQ݇=ըvn],Ez;%טRm?}?=;G8 H?sʲD̈|Lj:"q2 pxSd աdjkWvM)<6}XjvG f^m@V_~ǻ1DVCY4dɁpc-o XQhP B7Pcv?E[)qQ))m\XSfMrH`zZ1eN ئw6&r߃{wFm <+mMzC8d<-f(BO J4A**v]J qnmhuxtV&-Jx^*Ka'kF _qS[~6֛wO-JhO{)OхVl4stQKwM2tnS#Xda L`Ϩ,WVD*4Z GL'AR/cXpK%d=P-E4'3gikyc.SWBx_a,iI@8$= }T7tkgBM_bW iMD7͜9i~:6fk{*;9e> ~M r[2s"14=U#oZXV6 e>+RU$vT@TQ5-v68, <[ &Ƣ^M_'kmh\5EjQIjw^mQCVЍpǀ0ɽÆb-ޓc疼HUP/C rpӋ ;}T1 CG^kuI:+ A ,Q"7Q-tmAv.Fv{f`y9bFS)C-_ryNSǚF%(dhMv#{6QфڙpQ8|G(5hiERPB2/lQ /r" +̌mCG[-vTn)aiHA!1%M @LaR5SbZA,`܂P5NX]7 җ SP3,GQ&/tJҦt )wֺK#p̔{#hug^d/}x_ ޻ƿt8+PNW? mz`A7a /PURZ/Bo`VN:FA :; ىcfǒ<\]q^y3Y8v~Cu >o|-+ b162޼_n{qa,bGi%|4V \жLBPL) mhNw4SaS,8ep0T$X Q:m Ofl5^=9ݵ/ P(:KP1D6jKeE֓ <'xrOܣ{o͕DP)=HĦ;ѩHC䀪 QӂSuq;İuT{w,E.2h+~=^VP@д_$ޛzE1Xæ Z!GV _D@! -Lcˀs|/97D\)uypUSԈTY{eنG`S=@ݸ 5-$ʳk'c+))I&?=H(Z=uXqn{]w4Bo`j&b?K.cYíG&A2SQrM@iN ^%qTJ}Q0C]!P9ɋ,7+-j2RDRYYYc'TdkO)̮N)sքL>o㱱XE3'HJܐ15W{$7˻x? @ $1Iǎ,WC.ckiRҩ`fp7+FzG( JŠ)qgQ=eHv^9ǯ͸=ٹp9RH_L |P[EJuOpKU=UƲ"hGPZTU=r$qдs۳pK]9͖n^ʅrHIOV?Ҫ ]+(3ׅ^\nr 7u+y>sRW p/<%~ϼlΖpE%!3 gC葞Ɣk{\``Bߎq)HCMPWjg?AgZeܱX1y^IX]R>t~ P ͂v V[!h!m -800Cke}kE+4]|nE7ým %@0g x}̨}gkm~"dw_SWb *ڒw͢xÌu,[ȇqOp>i-UPszTs30^4x^N}Ըn VCB(y;[Έ7` }7Btn_BٱFڍvl#|vA(:cN0䰾X{_kHxSqQo6p<TD\!Hz߇(Kt>Y̰AI!bj2yTfb^mU| ETbC c,>.[ d| h*,=ϣ Z\B'?hh 3 ;$ev@zarƈav7DEs!#fh)Oi tPjf]/oۭ.IggGplO*`!Q @ߙՍQd}ιb.6:iQfܛ%>OK{p*'L}Bt+\* j.p]݋_w^rnV߁C 7 i݌h[t,!#Ǡe\ _"/z|G֙ͼ߳ muW/Ȕ#4>XAٖS1Tb[WG]S4/unjnߦ_Wf@$ZoJjCJz'&B" LLCn}= 42 cHwOJ {RA3*{p`rOa@U=jz-U͊K>Zۋqz .;נ@]]nl~”aS/q?A%Kƣ25A_;e7KȢ+͊U !k<8 = Qc/UMYqLu׍L(Xl=yUȀ~ĸ-,{:Da݃Q =`[ ՠTqPj]x5\H`j}gYqͯM.8gT_oS֧HD.O?/WϡM̦r#`I ДT?Vmm$<}Le/AVU)uL)[$7HC==0R7t 'jeosz1Xkl[@zɵjD(u|*e;ؑ(@-Ԥ$Nu " ;Qlю! EJVs7[[l''{Uyg(½m7=kE ̢j6֐s!ڒR@,*&QbZFB.N jޔj$ ȕTs](˔ufLxuA"ىm{VFTk34ٳHCjbiI|bϪxTA7*fy|%zMW[4*}GH̍tvVt8 /6,Ey ʬ 24 0tW| sED'sNgL#}{޿UԐ)d ]jӔ5EO_Cw޳Z~nri&Cq=Q)"͚1%kM<@^oE70 T?c."9` u(8V'zZi2F h5p m֗ObzՔ*MOck!jZn7fUN<&è|W?:[)oFZxrf`<5B8| [ VP_z{$< NnFF +umT{.\^K`G&"3I JY@{N'._a^pi*J`VHS 6cct lz&,V u9EO3`~-iFeXDT&)J+ZKnp'o#Eh iGVvSq+[CY(gFq(fI crpydv: *x?"xz+ J/ qa3 $u7+/!2 1 dmA Nn{vnW&c!!GӲ<{1,2pq6J^aaP>9:AUY_DΌnn׌}} rOϳ ;McbuEK ˤ4ne6CVMw9f & { :E`k|bM2i{?O)BWr(ny MW9gG,ߣ+?w=9Fb@791_`!. ̳;\'ne(vkijn.vdDñMz&ɝfLwf"6}DKԆ:іd uGa$um3Gnk}iŒ ִDsO0 PD#K) "=?OW`o/3N#,ˌgyiTgxJaIf /T}.\(!qdLy Cp 5~:7jrɯgIX7ipq&_0~ȁӆsL[!2aDsӖhhwUjC<Xp]Q]tzK6 >"1bh1wd&㕂ۮ`7}ybirfs1 x_-}U\ >i0S5캮ȓoP[RP V>mX!.L,Ttzo+GE+ڧx6@s;?>QO P?D;Q$Ǽ(qS5guH 9[N紏W@8\fF蛉H3D],@GQaT[uvطQRzd ~b;#oÅ7*>4pΡ+aYIRny׃f1nv׵{-eM_.mJtd|쥉b[xz5<^%Nh.}Aw:ܲ9'ӊ)24[t\ X!ϑkUqobNlng`גÇ&?|.T;ObFU:F b([6RrFm"Jg=Гe~23++}U|Z|s/&+d7f44zx*紊]7:8^ȜÜ!/)m5+HerhaȎ,Es=9\ f^[7N8Z6c+OMHj`nG%-[YsnZ\d{BƻCMˍ 6XLZ-[z@OH" U-fw,-I*0fɗl8KOo!>sLPUzw,-Poc?i5; ]AcWEYϙ%vLBG/{!?+g%~># -)@fw< Q]A4_ #Mc#]_>a7ésWG`,bmb̉("CX^{P:Wf:-7}vF79}u2DdUDTW(.;O&!ɑվ}n':"Iz0ɥXp;L ~" xc! ,MK2 Ɉ`wצ=3}S6K)vf|@WR\IeW]_&7*Q<:\ooHV(4'쬔ݙ.]כ W!Lr#RX&S,7c\t/`sH͡sa.s|@8ul~r\-'0L'is^D-JaI2Xu6ԲuW"zBUtO%y;T: {FBPGxB\\ƚm`Z8B )şuh[[]|I&~覎:`jT]yEZO7L v^o!zW~r\'n2Ya 6 "qx?W!WLyyKz5vm;&E}i{+ }{RglO+x {$xD܏)\0P' qĔ eN{TSPb7_XbvD(*3/ձT"4D?ÇSC)Ew"8 du>~(WΧ̉B[ۙ:b\h Mr|[AIó6.c]uWV>!#v M,1K. 0v#\ GH ;:&^[y֓ϒWgN] .55**.l{bKG^CRo `>vVI׿pߎ=Y0g ck.Cwb#M?;SzAWHeAK [ 5Sb>BCٱ*Rn%H;H)REmI2 Uk&Bc=[uD\'OYxomGF7--9Q!{ z1[K (o*37B*ϟܦ7Tu&liw[% 'NZ iiItd'^]}i3Oޝ~,O8td ;f"2[kNY,@O)ƛȓ2c=<|8QajZwQpy %&qm>i.LjBusx̰Pv>}#dJ?!|2Xod 4^^KW_/pV.ڒjjȋdkZr0B)%gΌ|3&4 rn ́Ѱ"ϓJE%&ͽh' ~D' @ͱ &Д_ @5-2)C8M;$N4q!cj=7<5!fGv~ ӉE@O#<¨ҰiӍC\C#3JDzoǻbs{T ^՛63<p$Aav:Nj<mn0@AK\ 'EIY"˃B#5=vtFU' `D:Bʶ[yn]Vz) Tri* &9 e. vd!sE=Jz+O"[a盧3>Jexޡ%p,xwmw_)(VoOC ~43~O?qlͮ?F9N#tyw{iC|7 t1Q*bul@@ <&δ_ N٠Nx [IF Dj؇~hn$)/i b@#%?uZ=6mk+ T$΅t/sL*lF!je+P/*X^Sha~cÇΎ ۆ%wF+ݣhf(,[B'}Q|WWpWctWp/&t^ [JzyV u-("Btϗ3][_A3&3yѺVZ?O"PC\J4jH)Y>+>~mc83_IwZgrxMp }e$D.[+UEdٷ\`(69^TEQ9V4;[[ C/"H]qcP#- eL-m P#<)Y K%4069=CHC(b/?>ReWkRXϮ]"@_a=8>͘Nu\s;쵝=)4m:pp1Ntgpc+:,\q /:z)l];4ꣁD#t^e:EBT玐^,"֞ F8>ZMmvP>my:DH#vgF.+rӝ?WsդYHQŮsMKy_ζ-B]ny>[^ sT:Vac}IEz-Ӌk82F6LBߴ#d1sn3`e<8Bu ~^5ggʸ:1o]p{Gl7;)RʮEL7GP6ߞ3 X=0`)O[|e;BYSw9۠bƽ!tzsg7FXVbj(jokt.&Kę'EbQD)zFHO xʧ!qG]©BI cqhٜnǐ" pFg@, }qْx@:.ȷU-DϿ U9JU@S⑅Gp|'kf[mi%lR'n0Mu'[jx4T>A7z"\NgawgVYbCfYv.z{?&åo2Y :pa.K}DEtڠopeyaEriqǐOɩ-To(%tF'}L|ֹมFш>7NR;@Sc^B=.HӔ0KN=5\d&=pXT81xnd;6MIr.w ᖣG&fuH._az=Eݸǻ_,,xf%q6"uIi<-u*}5n;ކ#kV=zAlkjYb/UW6]_UBBmDu1 mt  X?s^w,ĵJroWUOyW=fݓxȰ)!Ҁ# oQcCT0sؑ3qT1T};g'X7jVBÍ /{D>\;HDZ'bg^$pJZ4ʩLLفKEBflܐ`x0%UYslǺ6Uϔ[j'2s0:x߾{A+8.s˗vqt JuSD*Gx#PÒw` +.K[v-no#7dF#!Uw:'9=V j:GHf})*i-ijtt}hSq+gJN?cuInoarHu3KM8W`y%q5okIHWWԪgnbWDZvj=S p u'kb O6vHg 'PG>|12H=x˺f( egnr՟,O]J*5MvwFu 'u$ AKnA0%NσPv:)dsQŲWB3![/76 )GhHI>@F&B~ d?\j T-PN`DN\(rϙ DdДwTHN|s-7U[8'N]`N#ήw]hgjQw F\mK"L0eNpE/fH#+jΖzKQFk)Y-#- h3rjKh(OP;pEAפXWb@bB)$#g1,15 wb $Ojq2NR:}f#[ڧ.a37vufav^+L@.Q}2ٲv(WiPW(4pGqݑR-RSGuo9q4˲BDr#t\oڽO6("NEaul#@ȫ碕K R$ t' p0!8KCOM2yCS* ǧZy8U[Kn.֣%ȗbpLťWyL2L9fiD+eF~1HQEquet22x^:2xIኛ&CFTU1 7G %dqk:Ὰ=OFT 9#i =jB"‚6ZH"Ee_LQfja4S>^^J!}e5$SnI o/{Y% baZAϡ\⻐!0Ī۹Ӿ(l[6c]YI$ 1Qq|Q要n {ۤ|n}*l7aƌ_VzVK_B]n;f㵴/M섳1G,"4E-UL HV_q϶]> NmLѸ {y5bro22˝m4Ü HC]1 h9wJȰ4so%#"BuId6Mc=m2`ULDb9rIR F2A%!́`s쟝\"!TqBĵ+Ypye!r\SNx6Ǒ7{NX1KU porS<,rQ`i53yrwxF_*mYrKL9aQt!\Ec*@aH$T.8Dz{H(a ͙bRqtӣP?ڶUe9<odDj~J^(V]FȎ%5Y Pk'{ZN< R/ޛߢэd3&r!Lz+!&A o=Y\9^^Pbxx0k=UԆfcrNkW$e/"/:I֋iB}/㵽Y3-oiL'&`>ANr\J^UZCAsxsWM:I7>|{gĔz`Pv%wTv'&}iPeB1I_&SS٨Oq_=D2v׼ipgQuVL${ljߖV ev.jT}zTǏNq0WЋYVp3a-iOuxyd;|$ THĤpe}Y6LFp6W9f-XC+ $QVRtXS뫫N5il. xܗl?$3p>c z}vξ^x$*]lH]e4aA5Y$C.KVE%xһz.'ؓ* >IW$^ ݃w>N']ڬD! x(H /:dMoJZ NG ߻;!b]] ~l]VYDGќ2!=cg^.vw`kZY $ =>FʆPD.2X` NR6 Uy9TkKfh6&ϑ%R\L&#$<dנy 12Sԡ+ ֓H4 Y>TZ*GђRw}=CK`c!P˞秌XsBz#OFFLI:O!UIIyِA2V;`41cT?}C@-H6X۪qJXÔbaaȕCh]DH@T&mW\zcӸܜ+TH+O4E,#Q(9yڥ$6ҁYpU{{ 7 b̄Vb)̩-40QcT/,gX ,!QJVFs.YtЩ7SHF&1}TN>>(kDG&4Bf& f=y!C_uKqf@;D\98Lyrm ]1W=: Ia~$(a7Rs:ؔ?~z=+!3cWѬx@WxN41ʴ}A]ppBihև V&ja^g(G=ۢ[wVff)N|@'Uues uY g] O̵3sxgldj ڟI{_HYɲ?ڻJG`pbKf5kdؑIG[Ĺ0咛[V'=\~Q戫,TGBc;5d uA muw%#FҘ*]k(8y)y 9y^(woR$(9P9*)*k \0ZG'^z6X3|y&*!ힺ`lf:>2y6݄,!cgOw?%b3f+MVr'h/#/Dp*ϊHqm}7IF,AKZvo$y!J@M׌6;']u@/PVuA$;̻ϔJb ϔx_@ݶBoz}X$`_J*% V6i%G`ߍIVIa!BMDCI|%$60GB=Ko!IxeBƻ>ѫE]oq]ŞHSi7 C$mZpCѣ7AYj4S6?'E>>hT%Db1kLV9ouPz/. v+q,B#v|1G)=u>=3 ǜƯo?5^A[|-8ec0 DرZ6Hdщ$VB p2UP3HTUR*L"$K1tqH*,oj:^q6Q\Y:pr9$d|\eh9f'!1ݥ3Lx%[DDTUɸDt>3یrk1;cЪat Aay~{%TS_ft/ #6^շd_>epf!#Y"3e(תyA9rWOՁח5-'TSWѭFflX&Sb0^']yU"TzomʓTB@r1+QĜq@sȓ~zw$aLp:BU,,x/8[FY==ȎelsGg -zLۏǁzUR7~;,&ieNZU/6;?zv [ M4@"A yk B!R~悐a9CqUĜ]+s=^uuҚn&ٖGe~8-!l?ߟTkWm AX^9I-II6> d`,-O購AMPRb8 j tO$o[[+)}S*$Yx½vAB3k1O˟xY:B׫qĖ{ZX8H! li5ɭŁj#x_#<,V2jbu t@!:fBHeaxgaoˬbGy:ejCSv毘M,{Tc$4b)j ktr7N@L6x*nViS?%1]HH@~7ȁ~$(ҔfLs_:8mͩ,~YfV'qB,c_S"cf O@Nt#EGhbA"WIQE+^RlPx {mɪTiNS|@FW>K~;z:/h@t=Q_P~1w. (mĀ+ք:d[# JQar3>.#8\r:0$+M C$#O/DN8U"sKY`o>-}1٘h7DSFM"H~U {cӇ֢2ћfB0z8ٓ$ 3GHEK=-%ʙR O!Hq^-.``R36SpHv`LgBݕq@):k^ֳP@ۚԉ=$b^a2IDc*}3@>m,3`^/uv3-0FHuCm+rr6-]C;FW.!I2VSy֞hoݏAV-|x$?\١~-!oFv7W-+"Kv[1:P?0׳ ɲ?(8P 3d#OO ,0ĶS 0vх¢c$*8An}ػ#84[3\9eMB Ǫ`BL5lf T/G)ui~Ǡ^>!i89_D#1:K`k0}S/m.daL~>Ëߺ@hTZsTᓕa~͍ :t`ϧ.ԴS1%УGƑt<*exw5!ˣp]P Sw],TٍϩBz}S΃C&7Gd) \8ËN@yT;?'*fTc2M߅fۇjmS7a3QgRֿ!$#}s 9yzڢyӱz\NҒٸv.KZtI;+g0KM*VY Q_ nRX9&-V\һ=[n2 bG,:94g_hW50W#gi_):;Ao84wƯSUS$|ڳ rmb#BQՔ!Ijk55U&ZaSv~Owz(rd'&},6$D F,OpH\D"1iNwl2F!ęI]=+h?bA 73+ʨzKdo…)*Vu9BT^(VN_Jۋ`jh:" D0!P1Hygkd`;" OܯQU#;ӾsG`6,C4ZeylFԋ:O:{\@D497(ҭFYx~v;vJE_ta`r42 {¿2 a R"nXe K?Ó r<;ܣn:^ "D/I Q_c חT_QOá{Qg4(u7|vjuN_ۂib6@|U9>RVCcnu?ca(D O!ȩ!P1&e*޹AA4 0"h9]FwيF6@Iv6'fAU=@Dͦ#0N2O_>Xs sS/3,ߑD÷0ݸ 5Ƭh&aN]8ܞglO(ILC˷m&fyN;m 3y䅁g`lcR1iN^F,Jai3"O_1uN +&WCdD PǢhjUj^D+愹ў^r=Xi7gBfRO_aLaA S.!wC&apu!WِI Qh'kAzK޳6գ`yvNcWoo0/7#v@4ɗM(܀R$ǫ T}^V'!*|>rpFz~۲& s@]䈙#GY哴kb %LӇ /3&q_E:4 ׬n9ڄtˏgL-v=z_/. WC~K"E6!9dxWj =DPD`ÖWRدȨՖY"@dʚ+o՚8Pd5O ˜ym=R򌅨|KR-3: gp@{S]Z9llµ6ܸNndB~/3d;@D_]C5ksЍxd*}G˿#vch[qil6LdVN;aUV[wQAHo& Ţg *)mJ(WH|9ǚh bVH%#@텧lOM H+ӕmc-gLCl1/|t F S*rM}H9Ňؙ1,G_epb^Oj ]EJ7${cؘ-@B!`Er`S=1&ħR]W~I}.4YrHQƙ5<.)LZ/taG~ 'QAx~؁xH9V[x|="kV vk`#8Ĭ굾* A}|la p&1km8# Re\!hB5>/k'Sw.t:^: P.3|;^ok'%Q9D:Bnc%׽>7B0Q3|)ߐc$Zo?PLгu#riȢ GT'3x<j}왽Q:/˅,zŲt6:y?M޹aYrX;c*[hSZQ`7k56\d bu $w'-.9eSx@(mɆ5(rp&1bv|;h$Հ^{lΣBvfUkf7Hpf9є銅K!eTgKVɓq>[Lb[Cʤ-b,2su ¶NjKP4⬔efMDu_"gB;Jd8Y2ߓnd=eׁJ9P8nt1G˜$7nE _ [td΄G4gQ~r܈3=`)hT0U5imExwBR(}HT>eb rA9ЛlpJ" >$弱E "yߔ%t+3so>!ŋ-IOoxTabV|Pm$Ε#icG SKU]!CY,8*8 0#3k$A (I$Hx`r[zƢrKEkpٲ:%Q^bRdU S@ 2#1+G9z-Nu;m[ ^e<[n5QH)/_wBˁ9Wyoz`[&Pxu%҄LBH@PB͋hpYN{]`i+%>7Y/?&vCyd? [v578w@xuֲr f26Zu#Wlh12okYZ.h3HC8ĀAqL\Ƀй Yʋ)WJ X2y.nv򓜈kB[a =U?Fr`|~]ͺ Y`4ڃ&$9ݣ;Ѕ~Ȫ:؊‘V]nrϰALvo%Oh' DTFk[aCGu^jXlrƤo"- qmQl5_KCxWsY<4q9ˀ[Z100T.3%SHV4%`Sb24V] IUV'gY0 h%`2ӑJФ#uhO_f}5WO&lҠQ.`IKoa[gs $_u~F$b K p(wl/cZafeѨC`yq㮅B>+he/餁GW"3yѶwKMTDEd-,Ir~DkE=9:y5?mIC@?šGH'h$UKb&V+F@j6|g4݇l7aBV{d$NNUXJBj B)2[/MNa](*!c]Rj8u8 GDTL@_]8:GN '@wY<ћB2xMG Osрh *#+(t 4btB 0+5OqIa=&h@, ~v`2) ET!}aO0öFl4EGӬ\(ak 42=G0 ښDDL܅{dfO?5s:z#j$L [ƢϿaU*p~3Ac>TJ"v7z@ Nyb]Yc<'ZOvf z W#mhfiIpGYO3l k3/ad؂y5U?u'Xonȟms06VHgUz+x\}ػ gbj{0mXRy-l^ ߸ECiq ,!g% 򰪓?IJ}fŵK)&Eˠ7m!$x$nXԙnyF)ļID "ds; fGSB^* Reo_]:)E5 Vn \uDa߲=ε/o}EE˴b:'S j)Jw{ʎә\WN=GO J_S5JX.M˒@Za`n[> 7өxE͘ABι2?U/| (%s9૮TpM'tZmQ|A]POSGh^ H*W#zK3"ypP;yNcVfxb}JzOW,d %ƅґeAf#A`w qop<(Ѿa˾^ҪR.Heݍ$E-؂ʲXF.p!ֺhXٿױ%sΗ!0ϋ x6Mf޲T c3hm> 43# - K2휸/lo$Is.46"PT ^"0Yb)/sЩUUCc)S811ψ'ċ1fD?m4 To \fV@8q^%[M 2LQvG![T:@N0$nLHαRO/ø ob90;y(#$ĥED+7a)HE$@$PV }!H@Zl>+2oxP{dQ9{'Y;{߉~}ѬFWv6a Eo`\-̠q-M}xy^g4]3M\R;]y\<-Gqw$Y Owz_] No[lmp0,%PgeBVuwu<ↃH-a`V+ g3U=)"Sq$ASSՏVɍ'VS5]=ˍ38{  E90j#n#&Wz>џYTμ@\\9 5ŸZjUpm m "%h!#yJ[u! +6tcWb:7oͩ~Ei?v4k,lw$L ٝxq#WC%5,9+'?ktF@hċ5_?))$F3a +BhZ`w 6xSRo`xrɶ?K( ̝'(h#9"T~׵UY!$>'l2ke 5 |%.;<  9ɝՒKCA^9Wg2PJd.y-#Mw"ݼFLuI(aE "0=RGXw*7H'X4?uw9,ҡCM@| [0;,ȋ74:~9Јnz᣿>ugzxyT *f-yP y5 -)\1n۬e_P#R=+I.FuAdkG! ],3f>Rnž1\4p:yf4Pn708>TX#GI{_Ȳ4z0N(;˽Box4B[n)li'`vi7r>~ '`Z}\ϲ(SZd+R\~`ŝb8 q<, Tr*VdY':)Lrgq:M jW%g x%:KA=sXА|γf̧W߽fNaͿo}tbDHIbnöwe$,HR?vOwڜ3v6iO(P)Kض?ݐuޝ+vߛ5Qkf[eNE6 6Jd?YHJayc`䥤ѢgC=]Z_'<xӖ}11Y}35uosq hva‚7wwGpaTShu-]L]S`zӴ5ʨ5w{PV0*0?9!c4C&? {$FMKNLu^E`3?֧٬O:'UqRtH~ j!L(li/iFG݊djd{ TL!Մ@2Č ;r1^aYС/Px*c{CH}TwZ΍&)[ D?qlXS" [gPK@>ҘDD8lڢR`=7g7q. kȓj,˳Sw Ȟlɕ}~o e A`(;WmzK(DZjZ͸5IyEQ4vjZ$@7G ;g3REYMZgnH> ܃K&^9U@ձa" xȢgvm\p l5QBKQ񲼛=Gplq)DO06SJB=)J_!_{Kxb?^e18|\2] ?*W_pĚC<U7ۥ̱2 SQO!.߯[vze_m$N*׶4уGȽ"*VH(_9cZ= f9F8^JL:bѩ6;Nڣ~Gb'8 uq"tlUoSCDIQ9ENY*w(`A֗'Jd`l8,Uy9=:V CyS*s< |ٿ,GSCt&Hq՞t{3F96\dT2ĭ \N +038 { (yGTI FdrsHi{g,E)M)Nu )ꕙe4α*g u~Jj/{*ԶAo\Y[&F|Ne{[aV*-o4b>Ei&5qbM*X4- 277џ z14#@GZqL햾U.qY&E8pWvvJ1Ry`t_[ Mߎ<\]&#om 99m'b"|*Džnd |Foԯb7 #GǍN^JRD f)/k#RWTȖ(Ro3dnBa ĄN8mHvyO&e]5?==v|1T.btҕ Ua_PSqvIde/R/??/D0JFl?) IZLh}bα| EtdS{FQ,56Z= /1jYtvc|zfL@>Y 3xHQ#_,SBR~9EXv#Ʃݴ6]QqAIt!jc5db*w!_Qó2;L'-[hれNGBM,fUYxGZ3T8ZA |h88R-J25jOOTq*l1 71 M vwBgJOm2/_;D_XY4P ڋ3f?*XC/drCs6tө1>z>HAt!t%mB.''F~>Dv _J .GwmaVEZps:wKDY5] }Nݨ}D'xBk˂Q\ހ:LlOa.Bs _2 !`]p:SPBHQp ?;=hC6B.nRhUVPC?,ftyFJ(n7|7f5?z Mͭ? GWT?]d}Ĵ/lr޽Mo۞qwhUGy2,Jx9wQa@4@ܸ\F2'Z -Y|kPٍ2!cg:8Ky97L5CJ c来֪Uby{UIL X}<(d=ֺ_ ²=K7`XqFZiLܚ*7u cDhZV_Z3.-aP*] A `'蠽밝{3WㄪU%+75uy$;ѹ/Tt^\]XщدJdmX;, *J unlLfi~%K vŌ[sg$&juր"tPPHYQAzCGAOdZd)K6WWՈ t\fwίy'r>SIhgʐ~a!BЏ8{63wR5 fvq|䓲 nЪ]k(d6^ ILuήMHރ9X>d5n/~~[{ţH)Jab? X+MF&@ :")!?v]#f1B ;}%I+&E>V@ ITOkC[% a)Lާû:-֥`9|_7oRЋ 7n.}$ {%`Ua!AS7H(KĉI:w2:M|zN_EV\#) 4n9,U!`z k*NɹWi 2 \Rd踗 Z$fbDSŤy^Cd6ܺuz:bѬsyO.{rFJ X Nu)m"xHAPdIXtF?n|$Q>ʢk6sf7xʎٽqWNfn@Q^@̢`= ^۹^Gq nBJl QqY\?M+k՝~s-ƮB2g(5K=Ġ2x%syCccv.>/N~ft[p_A+$3 -Ӆf_f$|$饾&ާmu!M?jn"Z7ԡh8˜Gr_vݰSKq?-_ѵrM leӑsMnugtC5I:'9m^`_.mF 5qu>ҿd#Wl@d 3{Zg D >}ܚ("4VաTXZŎ@S8Pizm$|uY;7:;c*gB$[ӄstc]3G ':%䄌(ѕLu$ܿb"Us9/hT:)܍dވ/7Sm\XvE9{ Ծ#;%KP6.&nt+w)+}gvgɡ8K 5^_"ٽWܱ10FPNynm‘%hW(+=p Ѽdc&|Z}D<CÃ}K7?^`Imylg}ޙT 5 Fqﭩ9mbvZ0N/U.DU)wS;ѣ́ꉜ2^qGeGHy@V) 0wt7Bti)4 &.vQl q_'?M%4؉kq~ظI=i^k/@ƭXp;ǹ/)er %hsxUy+/o>}9[1ƘԳ e?r,U(+C ZF\^Ykq"EU`hĄ寂ƢTnx@z*bIs%+S<- q"ي%!H?jH+TV| TeTvM|rXѤq~;86?W!iֺV y}]8݋[ק )V=OiFfhj 42:iu"fh"`;z7zK6#m*m0O/:.oO7侏c=Vm>^ {Ap,τܓ}סF}cgi$ljǕTP[I sE-q?<-,~X5h$X?G?,'I* 0DMS\!>cy*vA.z^QZ˚>gOڇ_鍀щ[SYvΠ<+f'YBPGv0i;k}Qu!a`}!be c!Ӿ|H֦7{ͻ3ˋg['37ă4Oqgc,ʰOqHݗĈAIJ݄N9Y//`u{U12ca JOсf~pݲ!BzUwhHmC(q8 :U='l6,θb%Y$Уo{ȋ{g iao)OMb|I4p 0 NWzf`[&D "Y EIO&aJ]x|Ue׈Č!qjUy6 N[CLKVĿ`GwA ץv q)sXN*mQ6. ǽ/v T"T#4{LT2ge4 mr_:0 %KnTʶpOЂj? dq1,cq0W~s Zd{=GrD%: Ј (NV ?ME$1PCPct؇nG(c3DbX`v+w 8b\ANCFXmaK[ B?3{CGb*'VIcER~[?q9OL 7=[[.ޠ6\h'bb =&F5>􄃕2ht8<3[`aE+՛k ț'k(//:,BUEUcЖ`>ܿQ:m T,ݼb,cva.,-nH|P5d"XN^㞉ʉa=3,|ݢIRߖ$ xOc.S$p&5ܚz5Qer,*1Aa*lˏTg:6 6=ϔq8Ϋ-ҏu3( ?* !d. 58=p/|q!oT! 夸p~\t;Z: 6AIp 7zػaxpoJ$\[-yXo}&Huh}n%?~,(a 5u9r\ ]e.l'U.zmPK7/zWNZn=c'IgQR<4φݲ21ks?:GRF9܈‰NGxuû_~]Dk9rGYՓ2%iI|t]9wb<T-;$ umv}?,j&~XįOcw*K|Xt=pεmN.VKg_:q;~X)%tGuk|xu("kdǁ&36Sp|Ln`vT:::K[Άܪ!] BuB\g!y E z` >'cdE5böy KeV%^KiSaXZn0` br)gqlVVJ_L̙R3TmV"WUta)9!m$&'eX2Y)Oڔ`G}ДCׅoɇ vi4Ilra6]iċ;*1J0 5Sw%P2 hhX#}u+ȩ)W81ͷ1eɫFc'F+3')CƧtPxk=^x7?a= 9i\ WOZ=ѡ3`fZj &X2$F^RC /pr}VXU:^G=B  g }Rd q'M1 <a|PD}=gvOu-wJ%^"k ENLrza54C78_.-PvNETݞ䍓30KaZeG>l#-#ƛYNR%1dtGZd6E6%;sJ>\H8D#g˟ILa DOq ݙdfgg5 6((q۟YsM44 /߿,%Ϗ<0?DgM\>j#S7TQpZi$XT it*` ,Ŀw2lR[ZbX}r#_oܦAMБ q\lhd"3/k3r1"Lc9ˆ_\0LR拶xsLIGEL<{YV2"ǻwc{6{8oݘC'L2S$j}o7lWIS /HZG(#7qO~ϋZ>w?0`tΰx&XaR/*2E1D4.V/T;2>WSN#3dhL0PbyE;ahD"`lv3,Cp3@3.P`}^{ C|/peFɣd ^;̸mU2 hʟK^G7ϖ" {Zo VDw٧ufP1VW" nNAC2.Rr+i*KI@ީ~dA&q!"B#42Uz].*ʠ(Xܦ י揨d䡔<4H&CAD* ʾ{ǡx/_<ۣ(h=5 _Y_6- "Mv +Q2SzY˹o}EK]ո.t'NcPcUw=rh ߷ 5$/*A^DFS -*&Ӌ͆Z:oQ]r4zk`[N-a_1X]B9PO 鿗 @tovzzQRL+r}HtFVsA@7e} T߁>$ڞ}? J2IĂbC$qDžB)CM_.#ekwF-Rh8}YfZ)Piy=AvB| L6?-H"~Yc{N*;WM6$]li_zP`t ֑@~e.a'9k#g -md:̖J8[ Ӄ=;9?]n6Q|R;#rRnGOBJG`@A2(kEmo.%NH;:RFb'e|B-=_s!SSBI?g,?blP ) e~<%z$ ڠ]lX1%h4I`6щI¼6=PdT 븢tę7:ܣO1j u2;q&V"ldZgL0f١2jqKNНuAF5KC(%}V|31nve)#\DV|"1-tuQYtZ/>P򴎿1@N0z>f( |Ąsخ( j{A]65~ w\hR%Ldk<Κi:|uE !8Y 6S.Wl@c#4V^}4Щ'djj詒Ej%kx%]l"9$x~S <xڇV`)J\X ˧X ip_) gFKt~70bY^S FhIAL.0o՝b/Oh{#(|JؽH#F޴ i!Ά1 T!{ˑKԬDڪN7tI6iLDͷҷn-X^WY.! !1P䃫)r(Dmw^dV+R,tGýǸt 6vY>)sytAz*VK#Ol0M-tXۀDAӀ )[armDs9 'Ԩ$|*Rwp*]":hMjS(N R RJEQ|}D-<Wq<$cb=^`|\'o',S¤\*j\YX".4ye;UKY,$J7t$1 Fx1%cЗWZKгY3B28F"~}8VEe$l D,Mk1V~Q aFkˏFW9XMˑ/z6;BӰ@* o| %8P3;|rfEtUlm 6:a3LDu% qqZ-ht|J8AN'~ZJW{;Jܩ>!)R~̜o[qȅFI[Pѱ*O0Զ |rKW%>KK ͤIB}cA@=eAG։L-Rm`'_I0w2Vko[ gLmyPcnđ` /|n GSbQl\\Օ-;?JũjJ|ci8$Xmyhl<^/JB(ux~ڈ6tFY2c%Pd'T@Iv"-e%%afDB^aضN˩ {, cQÛF:ʪ8Ru%dZً9+ doF+jkDTvmQy֙\E;[|hv>w9`gn S>D8"r$;EU}f+Je%7ߧyH 4{#LՋTu%E-"-!zΝwe:P.&:jEXT%Qِ#pz[*fsɈtoa/,?2nA:[,7Šf -mug$苾UMP4>Bl}(F?D~4q̺BKWϱP#@r#^bE@!~\W 2S,P0{꧄@Ȍ(_#)Wle٢45 tkP"Mٽq*`Cq Cy%*YlhC27!(1qȂCC^w5X&fYϚe-*Uq^>Hw8 9rDoj=3@L[aBwF.wӅ(?J J ذcIy:r)\pߵ4[l /Y#PRג#R4XGWS\8sa+" FwP}jީ`NL1A`J+]f Rbd)}+o6-=Gl~t2{!)Ls1bSXǦߎe1G) gfOZаA; E[]ɢ0 s;\KҸ>ps5oldۏ>-].ۅ$`lhW4|G NT-^ݜbQ:/g $}`y <8Y рAؓ\;BuB~!H2}kI*;ȾzsӸz#y7*%ߛa&Lw(vRKu=š4'f44No"Q4:ɓe-c:*j z`=^[_I̯ka,WG)M 6eSsuاr3[~GGod($l*LT4f- ׉ qa-W3{'NQ=oLRxxy~cސ{jn9~ZOPT3gYC?Jdݤ{)}6:i9vSw,WDm;hsY+5Rdv~ȨqJR۳J ,~ (db›@N)ő'͡9rd)^OC%) z}@#N0<90,]0N“o4(ʶ2SHSijRGH%ъ^w3K`a6 JD*Edwb]oȍb9Z2|Oҟ!~16V>uW;hq#aQn=/qd! 7qe b"r}j6!mu s(tm=Cw@/KZΗ\_js~Ta6Kȕ_b ćy>.W!JlY\:Cv?6C\RBcܨ°mߝV'ꮿ1 )c?~ȎFa9] MPX7p14QG5zrN S(1?x/!KԐ~Ֆ!C; 1TMB7кQ -',4P8U| cU qZl-/`U'wq6A!ò2XٿM.]*^4`Ulex^ACߵL"BP[8}[/,UQƹYͨI}Y."(&+퓿zU";`+p&ܽTp/;HS @ ]ax>` (th4`Gw҆ {*g\^1kY];RdW ecB!F₸a*L)щ8Mv-uR!v Q|E3Oőym\ 9U]j\ 舲 Jp=N!Pby[ٻ5 H*܃ obg8o"?kW;0cL%2IJNn:0fF!QN{}BC+{%Q}l];fb& чY`8@s9nt>LܱCke%eWV:L&2n-Uz[yݯ $^j=j:8-w]quKH gwrPgaZwjm~ݗoGZj "_t!xV&R**󕡔-,fbӗEyq*]haYVńVB~ZVl{8}B-dlxv-rjN&BLKШlWUFʳ)˺)toqɸIf^;^]r8n]BoZ# [lr0LQ~EM|~W2ʠc^9+,x&VB`+!Jeܒ/XuGh*OV#+QF[vQ@ryՊemx  U˪uۘ1ی+n5=Dd-YP 7rv^$M?A8áfqSĐꧥ1xZj]*\M7 aIq3y1:POoPG+Ȧ%!oixksa($j.$^77@x VAa. ֹ0ޖ"p| =؇1+w,wA3'rz-,٭ס(['r$PؽDh$G[*cDdWJ_ϳD>qDS;qpl``Wtz@_U1{.uĪaʜTʛbn?1OЋII*@5Lz$Fgb9~C>ւ5:F6*Uo1S7Ԣ DdƉa\Tb] E⹵)Wu-?hM:@rLRh 9 /fw"^I܋S_\D Wգ:_mu4 hM5KU=M H8 _wdfph :)?ٛB隡uV]3J<̜#n6ҥ{N_8~a ݝ' (FeΑeO]p4\7ߢ阴 gSnqE>4ԫz fgqXaDSԴ:a5Z .U#`V%.@nJe_雤Ra5DHޫCStZ잵^> m1-E8#"ȟ>W)>8O|O lB)w0JzÊs!,3lVgPptmd$Or"Yq9P=7-0C5s uw7M>@jqIl+*իbƤ7_kUQ"nVֻ'ʭO %LX dW%Jyg4f3D7ypS }}#MgBLy"y Υm\c|ps3Yn!vvFCFu[1)<`Z xG%"&ӆnǸ3*'7R -nb?eF{3AQ.(ž_慨4"/C-qJo<3W2_)(n G3j^ 4f*bb#!D)j9͸/kc57LD95.fJb]ߌa{ @IVBcb^堐})TтHMX~--_ ŲyGGBEZ+YPBW0>I~fN2{pA]Ur{ b,- yv<.FY0rq |cG}zIl}l"-ϞrϚ[/>EP4_x< @0_0T0`r)KvkNV\ct d .% N4:[+U`iY2yCm<4{WAt4aaO*FQ[񄪟E[#yNKYv`d<;7NdV|u3Rˁﳑ>|{-n_^+mגٛZG ,b.8o|K#-N|l^YR|5-+o"mT4>(3T;HN;N.O%R\;'R;)B,s@J$"ϦŌѵUqeHoDԆE2 #%;`Id0#6s8VSKi4NOpI׀?21X0{0 @'9eu@}3R ɛD@!R|< q JH}p +Sb:qm򛂯wG-@cH،slr*djy d @#ڀCX7j[$k3+<1|G&Ww~mO{A"&<p#|b@f.ι{#j0|6^ hS; u 5.'BхCO' +)N>_0P5KXAd7"ޖĵxHSdqPAj=\ Gx`ѕ|1i@h`OYUzW `$#}}5i_K uĝ@<z,޵*_Ov2CD{6}jOa;Z`mfNh.Y0{~<*.!-=#+ Jgc]57⢺S!+2bsI$),R53"ϒ e<5|dgSl/5(hk؝[A/)oP+mkj0ʒ:*{QQ{Ũogh6\GX tuF@=UwQFCsNPd9ԹE"J%r Ă`YҼzVW ;>7J3SFDQΙ4G^@bBp]vx0P?kGXuLb4L *c>v6Zm},T -IWfR&|Zݳlq \>Z̘4g;+fj7ŦR~7lxb}^(-TH1>];`Fe+ghţUH;}zq_ R" AN+I~~ q0f7++o߫* R*oԇ_bt/Md!Y>iy[Eͭ6ֽ3)pij4Şfh9'\sΖl^:?&{;zʦ+\WCto͡3 ky3 V=<@{Dju([M ד7=Rh-{ㄘR# %SA\?Osoc<\czﺺV199;])ȿD{“EMXfAsE4>6*R̍| } y8&F%0Z\X|ieٷ5O+ZݩOR5Gmd n؀!1-ed_v"XdC{,&B$(0t|bn|\/D~^ׇϺY ؔQaqm_{i?gm0fdU\4pn@=,i+@n $obFA0\bēgUSQtdyDa}"eʰտJ72JM;Vt:]zx3_?qJ9YQۮsN-IwͦuEO_rsV H-2y1z Ba 57E h7+p>q]>Dcyǫ>۵9xnU=,Q$ϹF;)k. 7PaFڒX o!k*pP$1 *t#ǚ2 Vj}l% M9]OjUK%8`y^)??~+.N9ESf'F-~\v}?q ))΄7$ݣ@HReΪ.]eAAIF&{!sF V6l@)ӰQeWu숿:<ղ7D"r~%@+l]*2ѳYo:@1LNU02 D' 5q~:r/V+>V[:,cZ5<8X;b^mU\hdu~ꗨTWn0Zcu9Sa}%`_y缪.(Gp7l0]&|jb[Ez S)Z #LQe¡= 2lKi(,wW\:#l2'""ުbǚq _f1RbhVq)ȹl1Ri#fι<EӹA6q$@ '-+W$/ƙM;'rE;\5,&eVPMeN>eMk_z^.ȇ/[tp/1di BifsB٠Wl7n@M=m0N@ƛ6L(.PL'Ő鮢 O̐} 0UTZgPTxԪ'`gV532F Q`Xר+Ɯ}8'EhŸv Rc;>iD<֡.xQ:8#E':fpS%jo># OWm-%,)#sK#z{< ڜ./ to̗atWi\1©F6z9HKYUF|L7jAUJ.DL'<~ L:!&WA!GKGiΰaz/fAȯgGf)JDbW op xT&X R 9fUA HnչEMB5LlDy338kVgVuerPq9>Oͤ+~Nif'#<X [gdS&OQ6W ˿G%xqzN:rhҎA>xxm@u[:(, -zY 0S174t9C` ۉ.#q"xhgM4AcIj"::=BM_ +zNC%n^\B@v\ٰvBt͎ʈϧz6$l-*@?&q tq0d{R?=l߲- !TZu([7GhtL5V n- K Cl}..:PuCc,41ǣT$>+d-/}PB ~t}f [f<g@ЧBe ;r ^ Y/&#y3 dйnG΋tZLcRvi%*yx&,s"SMm>)5H>hWM'#!),tX ,znIջUyTGҴ3_OBe2zlˡV C,*3D^V@g.b'yb22fn%?Zm*{~1W:1XMtvD1(|eG2BW|;9Gs=t:RQG-<7A _nE8}3~T:DHΘK_yx@ )xg`0Jni[r@Μ&d*@@v:N%PI2쏃77jh2%ct -8OTEڔ,QðȒ>%¶`վ8w=4( Y)Io*sFHвKý3pr`GY4c;1RgތBpΝ"J~G<a= B?g¢ݖH4O~ L;H'̰u `n[ MCoZ^Y_3&f H}H_qV!ߦx*8 .1xy2 rzW;Y+߆H ҧxt\ ECVXftAJ byw8yTV`MRj+'Ma}) H{Cu=mUiq^ .$# $:6G̿eT(xHO ;0 Nt2Ythg wd͛8rXEd T#/{;+e^bn:D\%XhlXLQjaO! K0Jͧi|)FxՓwjEG]w@g:1" ٿa|d p!rGS!_qˋZVHܩG`}`mDvxdHɰ}@Gi]ljJNJO%(L;6J~l}EK:jc~z$X ' usvDɲ3E?W[`Nʹ7H:%%$͎݈AwYtLI[*)dobK SOhsVy;'n0hDkDAf;WW&d`ĂiD!Hc&pއ5.鰓+Q/S̅2C^G--NrA43fhᮊ:a?'|_( }HFn35bhtqؐV/\ǨxF ђVnMrWwAaF^* Nqɳ  o8qlBGUROgEIL C^"n;>cN`Wi(ܛB%MC5dm*%LSxngg>l~)dƹbN&rU}~{8krF"?Qǿl6ՙp'zZX7_6D~I9%i,AMc8˰'E.~np/ҥبv4 !2T0O)2ŮJ(ֳ? ܰj9P29R_ǹ`li S-O׬E 17JJ.@[Bi(wK 06'čcCQozx ڂR M?#w+t<]6댘1ʨ؂pQ:lśۨXiB\,xBu.09P, Н1L$akZ~ aA7VPԹz?d:m. gˬZ3"w0 Ǡ);$eԄ}2KŠᾦكcvd+BLjtQaMwKDCfNvtSjԠݯLdQ* *QFP$d J2VXB^ /ud?T[ڵzږɗ̀﹏k};Jv0no6YI Jc[gCB3W0tx.% /Ҿ "_A]?aY`P1@p=SGͿA r1" (~q"A,ka P2}TBw-4mBvQ> M*^!qREn($Y4GK:΀Ycܸw9M Yu=v`~fR(CТi]pNsc :" GEh)y->ViINKLJMAS)"8mDHK~ϻĤx0W]Xj_CTƂʽQ-8ezCt+Jy]CNP{؁ יmjw{O5}KbhJ~1o*IsoyF][(l\ˡŇ{ 8:4ilׄw{d|rY>Cv Bl,I 2uθQϼ=G۰ԨD+"#0RK4L+MB B 2cǽ͑ #N|.R G驮$Tw'?:?۾]4j.(gWj_=' a8/``9ejh81vLKho{5gp@ŚIu.|~2-\+17uY\T0ȟ&)_8Z6(a[ݩ"G{MӘ~&X7ƙ qЅK.UU2PpDSў &i)E=+Xj|$6O '@|!-nܹϝьo:D[B7-:0'VN?jƌRuQaf1' zDЯa*v󟽧lGkW9-$림4jSJ{G `wmo- []qK"׈GZ]pN a&9&נzSo1umϨe+9mimHy)aPƽcKǖ8ܳjr9{BMrpZ՞*$|Ea0 R(0z&ǵcZ>V\o 3=3Ǔe|0%DmmlR1JC2a?WIp17%_겳 L@N%>cA cz<dsNM\no ڵ15}tɣ_vE(/#W!Xx,Tz2>JN1(>ry '_`rLj⒠3= UU`1y"'z>.>UT0Y9cQ- ɧ|NJc1z`pu2SP0 05կeU0Ͼ8LD!AS %Hq. 2xn>Rfk%YQ~3 `MSӎA;J#Wk|"j2^w[Hk}n\:$ 3{@ʇYi~ϘVSrE?*\|JCFuǼ'7_=O& ]^ӺXaSڙ3~iV*zE>y@`? qUD<$H0<7ڰ%9c2ƸX+ybd Pj|jE8aJ2UL A/ 5L-U?X$?Ma U"p\4pt9xAiwb*]8ў #]/avETQ1=_Sf%ssO eWY|ŋ+9eb9{lb.g|*?y^i'X?y??4m Z-Nv-yjxVvg;{1U^1~ρeXkrmU+lQPauF8aL1s+əC;+b%W"+t]S3W\a_}5Q3 sg&q.[ zty\i iԪz_܊93[GvJ [4jvqDHKa֝X1%RaTZ U9A~Rzx v%V@k'h;2Jv4mn_WdlUpwݞ_A; ,oLp[vC y'z>1 1{B@VÀ}Hyl g_L4^d. j.ơLERb$0X2~Xo[ WƿBLM:%@)^)!h^v;w4_vX%ۂNun[۬TTzO0 ϯæܜEU.#"] "_Ёk[{:MaOo ->V+f])5'|h$u!M+zQvptnJȩ!DtCT-§-0ykDQt@y3fQ4>}{a}-nA&4؄`oڰ%k n8ig,E[l@D42LW#ze֕-Vd&d !ȔVY\!Ž1"!m:v]w񑼗̋򀻁0>Ω4? E;T[[y,ȄW<3q/3$C* 0Au,Fx=x`H\SLN g $FߓS5P,jIyg4X+igH+r( Ć% %L_a$s̃))=Ű\. %E4#8ɌX(LBGK'yS8Eb=eO91DӟƧiV+e:DUx`8BP+S.[= 2:TF:M%*Mc%ο'%xEZ.YmU 5[bnyBf99SLIjSʆ`1yrFg̶V; _GEЎ|'Nl$5u_!y]zG:]B8g(9@.zJ|' "DSFbP1&<Ă%_ݛS:'V.\eߜi ڗSg<W<7pVP%vົ,L>S 䞦4ۘeF49z-\΂/ίpCtodNV 9&# }|շnq7Al6d~ip'|9D =yqͿ Ť;xo_mnK*l2!V|'Ҍ2%D&GPoYRũ}bˬ6Z>rL@,nr/w^a[pTq-W| ooP1gp2|SPY;j֐BͧĮ5ە|%zDu|TWbsDpR`f#l72D n -Jwf-3<6gFޤC"F0'HFI՘aA)M`HM)Jp"Fͮ,ey o^$:8~E7N|ynF{=U W ߽h-tt~v{Pp7MH04m\` <~,.K`I,΂5òu?L_-hTdLaqKJU jTR,?7f_x̟LT\E9q  *xq:L%WFkvvu4葼@rOZ%jgd+k:snF6gq&4!pL+ynJp*))1 9_JvNy2-Fvj7y Dٞ~=iciWIDhS[X"u["1H7rt1YᄊU VFY$,Fbk+# ~YBUtڈ)Dz14c݅0SyPsO Y*NMolD%W/0{[[uGsj6|b=c)c^!{eR<Ǥ4 w rB'iYJeGE/WX6M7|s H9(wa´1=2ژP6?LvIѭ‰irOk NkH&95B)s] Q4+EU1AipS#_T64pî8Y<)ZTu %kd?9 =GZ?j_IVI nz6<,JBgg$pB5P(ǰz/3WcGf=_&'ՊCSkqwc[Kp D8XyOZfސ+ ({*-hMB~鎐Z~?UisԱrN1/38qQ]'E&0: @R,P%DbNX-h_/InȷK ~{}?c5(Ox):M0wc|P!U>X3)U!qO=x@A1o*;QoM'q2l1vɫ~f .SY$ GvfzQ7_bP a6_9&*S_}!tqȂx5ȻpeVT,ҊG=O3pD\-=U YɌhrE_}4bGt--a+."sƘoL{ Y9zۃESzҋX]L(IB^@:JΔRq S"g3]'Ips}̈ՙK ؟dwX5LK,u*9c 0͸&@oN6nx]SU1tU= 9Sb78uq-uڢZw8@wD2~k)|iРb,Śb,c)3QTO !GNpW* S,n^#Y˸Y5J$FkdԟP2}9=?1)nbMXNbП78s^ٲlb I[ ST]D ^M)cRǞ9gׄwǟ!Vej"Ң4sB֬7j|.5Spchh u,<DltM$,23 hO85@Gh,IKg~^%^ KVOvdFBo-q|=2&|G'^05 dZӽ[d_ b} Uh/UJ愈MՎE/~ke5o|>vOC UD/Ur-{_Ұ/É.SIpͫt]",vvXsqc#*DK5?%Yrb- w:mzGs+9C.>x%O oWe ܙ]JFt7m]}ԽYh//N>n &B;lk26 ;/uAO4IzD .ʁ…Ja晵j8$24 8뚄 Xh`Ѹ|N.JlWlaF.lp."F>ޢs\%2ACX)A-o`%t3-pf֫Xtj\ֹ!2QJ巗K3X'"f8Q吿K Pvm/-H,nh<1@K8#wnp0q(S`Z̺)KE ION78c_6;HG8)g 1SAX;n:EN6l/~( ,H=Neye[7-COQi|;gq`:Nf˿qcOs*CNώViшM?2>:#^̥I .Т9w .Y é)#*_UJzXҲA&`;Krn^ J&2GcDw-7eDr\^ӫFDa_v`6{uC&e940srJSo%qGfz4V]!#O~u?ؼbJ<;G.)8U ҵh9*.# rLrd`~+s2j.\үV| ^638iȉ^o ї)'J_;(+Jr6]MacV5CO<EDFI=> /-27M~bƖ h; kI;+]kAM5-yЊEWhR=ٹ0SpΩ0Z[y6JƕOA0m0LX{HLg==Z:hd c\T#24exEӆ]9mF˧lƱ-/OUv50 WJer c(wXPk|P|+{jkݰ,+&I?s2@Mm\z$X0 -kE3+(*ކ1b$`Ovt9mY <z{`N4}p+N P)QkP^fl2!'RЗ:C^W#0e|)8j0՝oI&4U؃]H& :6 |.5c׹1U"? :+9s@wᢣ S݆kKNySk!&|eV<~ѸhoVJ{1ͮVŔuwE?N%͇Ƒ'VFmWD|W/Кa @vF\ӫ^R8oJ''pb#GQH?k&2dqy罕H&ݾOIX{ {z1g@WIЊD_{*( ({KrH8;mj}0,.(j -3`=YWhWݼ+IxXP'|vH'|: t _[lB3BD~Oz IݳC,uy7 \puŃ{b5:sv?G0IQZ9xxCj9;XۆF(1\Ys;mm⅛ V 4{!Opb MJlnOS#Z8X(ª5:jgL v%_g>_Ar|q^ס `JuaYȩ/-tEe]mG|AF^5'XЫ sX sf h,ȩ^U7|x1,B 6ŅCE1>(k'L}ECOh>8&\(;)c;@ԉȇOU, _Zw6G&nO_,U YqӔ7vt1dڛ[~D3hWr?'^4,`]ENt L#%*]kVfD6ns&뮟/-Q3i:;{!0 @0Hv7 2 Uof޸ICž;ɶ9}x eS`gwCIK#`.hCmRUsx!O/-5 e]"ۙE.Mؒâr92@Z" &D|Z*"1Օ]ig|]y<#36T藾&=bu*/l?Jkmv*U ٦K7, Yx^;V_BȨ+ |@Fs,ý~>ۮ8*=To,OunOl{]‚}"(?cn@k6^ MONgKRt{BJ W1Oc]{FqA0,lTF$Lgò@/o>?E ɚ3DuR?@7uBt)LbLG@M h8 qKĽ%vL5rxHC`ֱo`L)wSkB)-lG,"!jB\Y:Xݲ^&s:tey('xH2\VeV3 &8uDY@[t'!cȟ? 67N~.oG~ݻRΒEauɴz v- "fo1R3:5w,tkHjZy\m%/h|Uy>?^&a357FN.=R9lFFeUihQIbOvFq MHkhdܽ7q\H_Dh.Nz*͸`mHЭ_T)Pzz16&\0=7l׶#>VMvpB~ SV_nGNk ;|T1er4*oN_+"j&ӵ .+ !4Eo" y2n^Qb'3@ 31=#MFa5ebbuUE0fyk*:GFeA3;pg𼨚E̴2O.}uo)17ޭY- qiNGP!mߚGYX/u]w]^H(,ѧV F5F_ݙMk5ַm-~>WiP9zDM/n~ZŬ\ jypIژ _/"`G%"٢C؉MWj!hp/eb.Ï^{MG~~&2Jl%`g!gWt4Vgku@6{r^H>#L"U7= hoD\ A($,F0_sSRU0İWֶ @#~F]QK jc 3EH]W>NLd(۟~ 3gD!m0/3jۉ,y@'$i26vz0INY~?ꝑCػmWcyfa}_MvbWK95+leL)BkbC&AFz`[T֔y5)aȸ S(v8IWɈu*ȽdpG_7~k /mi ųi>'ޣoYm> BaQ!rJNGfb(c|>zySx2tGhR٠A^m>#Ff54)D=UhuwΤ\oQ cUhTڥV`cҢNekU)Dou"FjSu|nl яž'¦.?̐_QT^=B=px#i˃Jx+T{#Qe22(Ž"jk7 izf%6>{d?V +< %Vy*jZ|R4qclcB-tF|sM.\yfPr+y/ï5oJ @]L3l[wv.C\Yޡ"ahk誙XkRXrm `5 xׄDNn>k uDHVQ́nlYS T*ߒ*c2!/Ud5[e`cAX3Nl/WmP6vR7ӶYl [Z%0jFV 9fm]8 4ˆV_ݛ|aԈ40  ^g`(كWR4jYd#7HJk5:NKkhhpNE8;ߌK#\A> ͘vJ(UK9&;]77 w]}3]\U͆vpW vz4MtEuV,ُb'C9]DA>8v͔j[YDS|A{3:6EsI~S(cgO6&zSf)]~+gλ(Ur(YTfHNiqI.h4Ď'J]w3 ]54հl }]KL<&RG5/z'_Q|$1 zǠ@Y;_r9pxnRɲbcQv}vgw? h||C d IʄH}\}'S[T#˨KUwq7E\ObW1Hز. $ sʹ68&d^g!39 viPzYxo~E¶)b_vMtYϘΘ39zlI3>Z{!FwI 6^ӫg_5X+C܎şC{ѕQZe/Ͷ^h$*+p剚AGѵs0/Ǯ>XY BˤϚDɊfZr~SqS*mOw-.'xANU wq0 lH!wl<ב:tyӼؿ)+ ќcąJA(bg<Xn|I!|"B>«E}”(7MLWxJ!K+.Q7;:G~K=aEܪhpX xw,!wPK!hnߝr@"RRky {'k3#\*{)9kp"+n5TǞ)9M $c@Oa8@5ΑWȺ,@ bG=9 ,(u䯆',fS̽6RNnv}-ǵ"@SHq9ʺVpV{"vla5#JB:σ$G$T5}8/ L<2}Ҍrr%CqD4N3 *J` 4_ۜ\Ӟ> TDLؙz&ήNZ,?Qn6L>5'd ,vq?<)a*-4pő޸:<+Q0avzWzSP2,e1TnD49l{YC<;{ǞxFoK}ڱH! Hy:a]=htN&؈3;U[lBfl»GzL:W=d]ȁ8 @-bFI}b : LA.vʇĎ#^3*.T2U]J.` zUS0h[~98'<,7ެJ@HE8ſQr3+Ebť#DI5bF2.Ճ`qb(KS].Y++} :CSջ:'TNo b} t2q;ʾ?aTƁ_ b 9 ȟ =/@Q S*.ƽ4ǯeAvЌe$v?TԬ I@XD&K'w%RDĠF!eLGhk4oɉ\>E^CEJ+aP-PNMabqqK/s$Zf jmÓEԽ7QgeULMiMѺz)LZM?w2Rn?RUbLQ~Z@ZI*o٥&P)ͷaW;gcWdo  p iFcÂ-O.,pMC![q pm'23F3&m_D.(Vt'KR2#?5_SuSl\Z}R?-&£&wIjցzSG$sq4ַ#JI9aUz&m0Lym?,Yrq% Fab냊 :}Ds ^ Jܻ9.3c0]eTG/\ XRXt|p bPq-sjzDait/1۟IG\\ct[04tGׅ3D imtEEhrśDM P"A>}|`Mvɷp| 7NT86J[l2}<0= Lmܦu0z4I ;?)],vɶOO (S='# 'iێ>9^\:[0FL!lU3'+5f/ajw+Ʒש_6-|n55G{&)$Nki:fei0ncпE( rn.tp[l{l ڸ=ƹ ˈK:[jsq »eʈC,gQ8L  a!yƷVd n}p¢Q/mƠy1\ sE4>)pA`6}w#qkH= yCaP=! ,ErHJa f;t! gDž^^g` A1`tb5Þ+q=G8zq*lN?D]pwOݥ{z[gNj|UŽ xh 5s8pF^1.U5:qX<B;ГD޷0ʫFlA{Re$?42¥wI)/g,x܍RjJp%+T\d~ᠼw HDe(L!"9(2 ~ٜ=6;1x~`>};/H(<"~ Y)=m ]LɍUp9GOT3{+e<$3)SׇR4#8+K4XhKT"8K C=>qb cge!xr7/MW+2̥JeSn'r:f9gf%J+NZ (l`Vͩ7ԜJ1gKQțᶯ/y4k=|Lde BfNyN7j0(2+w}7loq1FdQ=e]P]6ut86b Mwa 熾Q0Ł{4@e|ryGiW1481M ov۝`.1 g豱 ;ƑZ'd-4qn;{- 8Mfݦ!$VXٶ C_E]d/1tл`ƸГ蓉Gbvd⭝3n6{Dhu{ `AFBЛ޺GC\ύ9 V1 yU{*0~E[?$z(5|ҏpLݤ>:p j_ \+7 &?@ǝeQٌ $vfhZ@&&R~)8Z:>JWh5L,xT@*^4Oǚnt4`0|Y~/PKUm B4F @숍~!pf=ߙ3bpLofX.˿1Ѝ|kژ e d8:o9#xGNρcje;X&獐P.7bkP0d;Egׯ u""d5@h﹮P5,Wi98s)P%OJ$ HU_`3?7(Ph'n)m>u,G[k\ 6xp}c*=71sx283koXpCKt-A[DrҞvc OUs ۨTNsqFU܃@xiNT|0ȪpHi4 C`aI29TrD뵧Ae-Pb\Ќ,VI22U=x-Ly+Le'v;A(g''tgl0!Qzn=3fk|+Ym m1*$;$sWkF^ZDp1=W,`ohwX4_y& t iVWN?9 K{+(Fݝ0;yaLGޡKM{B{A$!?HcVHpƲ.0=œ։85H22EJ4pH%Q?D d|6dLUV͠ld>C{ JQ1DьG n[Q16;6i~~AwxN1x^*cA@0`6*0AB%o ګ&Zq`uxQnA8CSjG,u2kLdW-r2珌:lץ&HJN>m4r7r{ R1EEtLnו(*lPQ 7,x \PT]]T.]3kc 2h:S3J#RXm܊Y\\j dk&2 >\gr[Τq9-$\LhR]Q?;oπ*x+Eb:])&Z|Oy5cjn\GZ09Ɉ"sQNDFڳˋ}(B<@e n8vD1b߉" BZfMG]p2 ; 2&v W0 9 exrE4\(ڱʭ@@pg_{K>ZIg dz/PU\uC"x*j'HW_ǎ-I]~S9lG CnKB{/W9_b!޶=h$͐+pۏTEr)wY_wmȅ0gp_GDaj_ev'ooWx2MI$;^ԇͥ휤qY*ڰ&Dᦩ6v@'W!JwKNuXq"/\<`uu = f:B}oXDI%" aV=L5'̜ B| /VFdqTw*jđX i.Hm=jϰI~<&'o$ibl%hdIS@/}RƉ@@؅OfIXL?`TA}N}evzҀ4ZFD->Y1v)EF\(fg}*nR7)D 'B]4/LkPa~*m9-;3eķ.<AɄXx.WzJr@ ܕKUϬZ4ԓ6}ߎHV!eQ<.Ijk(!5O̥90.R{T3].ճCՊbO}3jXDꅝY%bt=8خ&(mn "#)k9iWDCHE\uB)z|yw_q= -^~sEh<*M3lU6~ Ū!K^X׀Е4PS4ip~)z2O$iO(R|RAutk,?щjjP,@ٗ}'#g]u/S=ц; 6*0x!= [Q@n=n:H.uUBo{ ́G'Q*RˬOKa{gUW-+ʎ@ ϭ.7k)0i)3 2'"Ri+b1fOP@O8(ŤTxjd aCÁڗn_)J75OLf4Ֆ#-Qxx-=h?KϞ/X-;W3arυo;{+8n]ТR@"TzYyH:SP6^̩|8uhW2$i:-SAF`,ZRgzD_jCr/Juex<:WaloA!!M!,m >S2wSU Övw,z,h 6zܾߘ(UTd! v;ӴɣgAbAxȺa^ԣxЄ>{16L 8Wz Dn&LY. Ol5{[,`0atR*(im6egDYBXL:aԚ,J\Sie| Msa۬g~1}bgH'is[T[nF,ыHZeލ\k ٽ%& m5T($U yYu+6XkM{jR &{a)/d֦Q⚪-.ل{YQsu3;60Ɗ4tdxIu'L꒗֣л硣|݀z ]l5o6O١( .{=^?zIKqVM^cCu洶IAױIP{Srx+*7G,K_o$nv֨j\<-UCq*K,eC>ܖHWSսHNB,ϥmkzT33^5]ɿ-(.B bwͽk1uY5^J.+YvMAny=%̊M{U C؊"m9NtSߨ'ecYܙG@)pʂ1_JD21ZqHŋh3S[,rUeW+qϋaxǦ'`[ၤ2}-^+c{84鿑?A|BucDGBSeK̼s}=m qx#Kv7sa?jA8&м c/:=͈viCDU.fbcf ti:Sl|y'MQ^nữDZgZ9= c#fTv[c9'/Mjxw3Y8SK/{[}(} rAmYd<!̌(dQ75JkOQgJC*lf`>Tjz.1[jFC&۬SD qF ib5`ʰ+ҔZ[L\ )0@Qpy<u-:MrPRx* P2E2` 9Gz0"$ fI8BhIc9GI݆jAAg~Gg̉>ޅ['%ˣV߯z`@2 +R5X?HP{ZP2M r ə/ɪ6JZ~|i)ϷuXt8$#+\TZ#JfV4;\E=0Srwމ<,?ܜK?q!+^mIiE{ɛrP%D.*%Š.XNJAhwͦ~'HE*OYtӲ,7/I.tG-̯W:3/mku"/Zo,*}rG+ \QЛ_$=X2?<$&K>umjpE~-d:'ɁcW'xCtUucu'm~CkLTnbd55~N2iPZ!GVC)U :śH vՠ{ɢ<0uU8{eKG'>[21]"S6XnKZ10V /" uGlr5,ƨReq9 *MQOM>WJ?bg+ɠ!<RoZ3`Nd @`@x=&_Jm S 4נ5\"LBYQ9=1B+H|dr?jf@"k-Ÿݫaߞ<t I1_'Ӯav0bT.*oJOX31MƏ9[uLڿgekLI{ }tcC`#AZw35>y:WuI.T 5w hL6 3KZ{c\'S0=)Amk4Ne SFJEhK'a v:y_@Sugg{@OO=jW&Җp \/uP4 jhƤ 4ӏآawfHoq,bQ" 3 [?mYz 컳ksdqDs,ǥB'r|V4Ul_>1bq?=V|&PjXX1LXa~9$٨,kCK +qDAmM:s,#FكCEkEKkl}`lvzEZGm? zQ=j$/׸n(td2m+V"Mㄻ_)#3"ÒD} ^sR<Тlr2d0;;V\ Zbfq9^UXq;m0SVA 3uݞڒ i 5%) 때~Cg||ς~.rnDzt+&M!|]*BѪf͑WD, kN@lmR;f,ɑA|DT'A[)"2stGdj 7; A)+L /!tW(w )n9ԽG1Eహ$$2{;.ɍX B)CXo7vhA<o)trC.>qFfoSRqxh4TY' 0*2D]Ms 9:e79Z&fσ}/ŢۼwkQ_gu,k ZkS~$x=Kl?JBEToB3?QpTg F(/¼ ne6p"&Mjdoj߸նDH')vS̅Q4 GwW%u?loLo> M_a_2|0Fdu?moÖʙITsnm:pUm9 g w",@*Ca|vBXU7n p>kCCR:( 1WO5%MDؓMbP 5 \?;yu sn'e6]w&+ zS%HWWBӀ,g]rs[‹-#bM#Tx=-Q}, py\ WٴUEL,ZA ;Ϸr;#|G 30CN> tBIF zq'2Tex@~z^\ؗ>n$4 l,# }Ч=4: @x1b nu˚Eh%9(}i[>v4gdVa&-X#!<%XnyĠ(@sm/|U{3PoY6 ip>k;"M)\Q}Pt;/Rfz;5Al.wnjĿ*~%pu@99kkacMg΁eL0UVXh;S7Ӹ[;Uxij쑐qut!첟B (Fx][?CM GP:dX9}gOWnwUv(G"/gE"f̿_p8?P Z@f5tkc&iy{7@9g*Nve >i>Л Atw:x DFFkDиPz=~ Ο0z&YUW%t咁87,S(CЫ1ZiC{k[Wl7 sMf ؙ%ѹuS]6M=`*û#c8|H|'l#g~ۮ'GC_]-kIu,_OA4ӾCޏ5}*htA|2>> É K/Aк&?Ҥ\=J5Ѓ }fU[ $9mEV`Lim8pY͑2$> Mmyd._я*1}*E8&sI7P 2Ŷڑ?Ge כ*$PtCp/s-Qztdv}Pj%_RwUq?d`* bpU)1[byn>&Lr@PBnꡜ+`±4Koz9hѕɗ&7!0q o}w"Lp-҂Z4N!^BYI:{kSl'"Ÿ^x -|2D tWJ^eZpl5=؊Y@(WN(F<ܬDvb֬R <~@xVx2RMZIS&YSk[`d쨅H*L4L}nB+:m-Ģ!`?s]ܕI -Q֨<߼.5X[Vppl|5eȤVD}gQ|ȵ8QQ N*My=gp|UσڐP] .A3y $de7/|;b~ɝʾ"}}Ev(y)=PZNL 2e?H1X­)H| G8%r*Ͱ_K_oc̴l)jjY<:|yWٞY욦k#:te2^󷾽+][@ )-}˓{_q4fa唓IѝiKUbebe0'1r>%h𭤩O6$Bnq"J+&;Qg1l{;D|ĮOz>'s\sG,'Zw7}j]uȢX=zr3D#g'E8zxm]yiB)wwPJqׁK޼! #٫}O9|_5[f}[AHJɆ|奒E"Pa7꽂Ž=$_:1'AM3EE3 D?Tcfa0甆1r?W58'N^"ܠ8\f:I* |c{6&}Vֱ՝MZ][fJJR@Mħxqǩ*AE,չKO&H8-Vp\46ɑPԩ>łb ±B9/X}Yx(Qb&3@A/1/}bz7 *ʯaԜff+!V}XAεi'W˶S-H\4Ѝi^mY¸;ڧEPoJ܌33`V"C$PKТ5r7[׆_?PVK|>ZlZj0{$&iO r~3y*ɛڼȔ^uW~ѱ YE> 9lHyT\JbN,Cev{&1.N?dR;nQjdxż1@"E" _EO]c7g%ހ{)wOWsy[)}f;mes~j*ZL2SX1Rȍ;,XxRTd06)S`pLʦKCRɤw 9(2` 4NKy<=pX.=|ʴQQcAx45c~˷2akA- hcx5@QubmVm8cH DMpwd[+lDn Ә]Q,{{LL݊ uQDx l7䄕 smNShiqģÚm;/? |.I%M5%v,`%㩽n*PO'o^Md:#(\jPm *9Jo1=ct0cd. K561ޏ}~N42W@}|[!YDԚ׺f>;I oЧAcBʻڹٮpsp(KK 7r ?QC J>TE& m(*c2 vmH,/]Gv; fy}8:iܛ>HCNI% Yģ4w.m⚵WDU1Ӄ ,z2*6+OaՒ;h%mZ/g\&TBXoⓇO&KKOCuʐ{1o<(vۣ7C bkGK4E)u`IwwC!蔁=y-cMマJ\#y:x?R@LL ޤr$Zc/}.C_&LK^T:✒VI_Μ;)JJqڀ6wCw;!LdU;۩7$Uan?Bx HF—C/@&~g[;"XB#MVgb)}LM1S34'%!"Jvr6L6w"zp&+wqP j _{´H MTڲ*Tmÿ,ypz c+> j$QM ; d)/*O4VHR a0|ϧ7Rꁷ݃)-rP WB5ovd%_NU<5fl Y~Sj\*C}!<*IBF_nNGj _J\GO4-[12o:5S{xtOztxpK_|~z%4S[A5 kITSn9xcuÛUR([y $yTb}#KJc UϝZ,|XdHk<'7[~8]f,ɕ'ɍ p Sl3ɛ{#a6Y %z_ v>YR:FWߥlV'Irvz} ^N3z,հ!b9堥ʣQ]".|,z藫'Ba[& HFѩ :pES Os:su͆390bý۴JɸߑgL;;j3hBUZ,SR*"d(8L,,PPeEB)SѲu }ؙ݆IR-Ařf?^YX^%Ng[)0HީipxxCӉ5IiP;-fj@>|mCG۴KRh%sқs;c2"rA1eV;3ozkÙ3)3lZG"QBvuҺ)r֝O`V#|ݔ0EOxټϷ琒<)p_֮23kIN}|odS4QX|~.od@ƅFHc Tev(}3={FwJbx28Icfu`_[\9Ǫi{ .?%iYKLOHQ@M7bK\gArj?ZkF7ԭw2E~aI)d~YC,jd%ϛDG,R0fb8R_bN gH-/􌯱 t(R._\cw|Rf"qfxyy, 5s۳)OдC&N oIu3£ -`tr{$ק9o!p:'DbOzag)}mhBhw'fހqU/fގa`e׊bd΍so(׋2A[n'aJᖴ(>s)K01v1ࣛ-?;"92#L;FuFP)j^>A@9txSCDkȠW؋x? 9 tW1pOg b nJ=4nkBo&3fpag6K֏ONPŝ)2E cHjG)dO+c9J"x]Sf=W]1E3l|YBKVw3R\9mS g$Vhw |qF0p,1ۗǔ$=KQMx3@I2nQMqU;G 6QxG&y >0i%YAaE{6g% `6ncyJ TcZǁHbrٳV8sXlG[Z<ѝcyUX07{oq_>w?bh=pq>|X/0 pZwrxyd\ϼȂ6d~+Yq[Do hzg]`pC=xzΠJ@A͇;;17婗PoY6m\C!l2 m/쉀wkد A'XO^]k'( mh,yF;PbQcm&P?:oz|m5_@ZYbQY莡rC ?eԈ& 93sȞgV-e?,9u!NjBt3^K-7R'cupCVw<+Dⓨ%,SI@Ķcl# 5R:=&)BpY@1M¦ujmh%?6nma1ؔ\2:#')23pFiK[}/Z̎Iz4QMF*Q7@&aO¡qv'F c dGAqmj5v!/,SPYY_?!s/r_2*uv:+?^%m.ȶiE4܀?$ aϻ1AhN-+RI!b BYf NGFpF} ^LȈz\ 7:D%I)rص.:1SPl1]vрIꨰ@^O(u\k UJlv~cJިsZs]pxUlE"23*P{ڋۋxzDr$doo\v* ζskXzm A3WV-v 0BmdqE[\qj G ON/x.t=fn|  qصOR_6d M# AVF| 6䬽iB>@ Ix69B2ϻ*;mWhR `ܬzX6OG9/;8^,_ sůߘŋs$|gspwR7U[o{RIaʨj{1e{З#qIs ~PcY 3hG3Qҥe'09bUUZ]~r>ioBC+&X(H(hJrPu=O5ɼW?=~xooY@AALT1BFkp| ywmcV  [ª OUfF/*ېlu<\#$ҩP/mEb$ac ( h_Ji5FDȀIw"J&X&;g"4+rWy d pN{əf->ݜjGgdFЪvGw~nV]xkMy QB Hܪ !Bz@Xqt=빡\hQhdK9K3mSW ۄ%d[~[AͲ _$¡amP/EAS OZ_xTGCLl$ǠT(@뾍a6 rT*Xz<\EQdp"~sK%oJ69GCTApJПEm3:3l%P-\pP(; 7'{6&^ڵW#YK"s8DrBk0@ԉ*|"iB6.ws4t#B k@%|.@w0acc pAgY[8>0a94|W@9QCcu)}QKUߝ7"Ҹζx@4l] '#ejDMRiT–% p'Y0˝`jA(').;2%SP̈́1[L{j% i;BaJ6`mJ!V!:(cC ݆v}UWwb Xu i# ?sK`(7(P]z$0$u>m?x B"М9UE,E84}*@=W2S.<75E[<ߘ9c!!٪-K WNF'ͲD! l6e/tl΋Pó2̴+̤I%sI gbYpP _|WOfӂaxK.j RF?%\AsV!I]z> ՄOej;Ma:TX-rODb6Jdjph&e)jnD%"[/K5o`/z ?O*}rҦV:>3 Bȏ·xhKV T`</ʨ}bVGU-odKbEu[%Z(NZْB?YaLe/sd>Gm;4BZ8sp)!t)\l}>r|P2/bUlg ȃVaT1"ʅ_(q̫GT4ȶlI'8|.ۊpU:i{;nNxlyGz4N8+vJ,61..wN,0]#bw#( {,ƻ7QٻL$1zEylc{d3+ 6DAc "~g6𕮄\`x21 P@~JBҙsaK~mVt^c$ 7W)llNSYpN ~vϔNF<&۔2cFpǰ 5՟;!;,y&0S3-07{C- e}Hy)0ǔat"ځk@7̜Ŝk4~1l_Ot0 \ÅjXHln3 RTgľ9ab2)L}3gȱ \`:ac`أ7dH]rN@+^'[5PWP;Ua!\m { 捂\$+">})ezf >IƮͻ滢:ZFzF2v->&`Х"]>5ڦsOPkl*CXϓ`Ѩ13:-gdu%G;wB$R_zq#2 '[ ǺNY߾|CschCUod~XA@QJ` Dq{CK!GFO5:[M;TD(X,3peNobo #РBHu?9B2ƃH$Dح[XZXR' >>vqըvۥR c'N6K?c/X`-U>rwAĕ #b!"Uh1f zJ͈æzëcM-`[YG&Y U&ql,=\ `xUM m; D f 즶Ɋ=0 ̈}$`*M@ׯ IωsH5 "F5DyS8w fG3o?>aB*`D`ܛP׍?dHDYXxBY[wٮS0j > %MhV 2}%\|#] #@Kk"߻F۶ mےO[^"lL^6C3 2ĬE ASfv^42c $XI,\%l^s&ZB0Ayon !I k|c@m/>eoz 3\p󂡷#x%W~yG_඼Jd/ݗa4j]4ȡ~\c?x)F$A.&HVaJ5҄%Dr%5!ݣbCבYCGlB+Q r'z_Jmgכ0nR5!"BnjGWv2a1ZtY1~ 43 |>-O}$X]],r&NFqM[:-YL;WeN$'H54cz5呴(i:od*ɛ)(@E&Y!DQG1ҔbFV~RK}(5(<a*<뜒os9R)RI~R!6{gq ŝr?wf]=NMr]. `V ) *hk5 bysu}4/ۆLJ6; D%^% B7nK8a vd"c6s6 v#;u(30 Uf^&x~ `v~i{fYh%[zע5ui6Pncc`o0>) LvnO󄶿o gޗFC X~(3,?zob/inيA$;yW{@SBlFDzч_YCj5|pCt.x4ٳhwSnK4zзvNNDwg#VRakb޽!g"bL1 2n1|3tŪ\P id>_#K8j[ D}AWS`LBD]%e<_CBq9o։@w^E;Դv . 9Px S1SbȮLd tw;@/ g}Hme-!7v~# X~=$;EZ%o?Hq4>UBY-NS6ox)alƕ٦<RBm%;. Ms xMCC&'}<Ɠf#k3 O)J cPPi33;}eǑ6!jUs ɂW 1UT7JǙ2[ ,0 FQFohSoTKhY6l4kg/?rHGY|c&<&3T#ΊT9-&բ!Jb'`\5+ H, 2/[#[a/kq+u8YaEƼXMXmʖ]sީR1mm V:RJ6oN26p*K4~֠3W}8͉`#K Wpg9D3' YՋxEV /=Ӛ!!hd `KNi: = t)K::5Rv$2Qd(n:vGT95{?ӏ\d9Soa0;pN̓ .)Wվ:2[Zh*v,btL|FeS Zygb,@e.5-VC5Vn,SV 7Nq$˵I5HReiѣմ×)U۲.mbmx,+v# b3IXF;Oyɒة%M"y>IUko4d`<N,Rz%?`Ϻi)*nB4AMԔ| 96aŖe)2D >DSq)ؖ^6o֞Ԕ^T_nu/J zV3[ǵNJT>%r+o )kڣCVV&QOBZobT²r,k_/-$n;9C5.5"RTn>9|J߱J *z&Ҭ 7g~bf60B9=ndd>v? 9pSjbbp@iy+=ǣYN-]Up^[.OXJpT_Sѽ1-S sjt8dXZTXąoIk2-ҲyvW 36@._[V$[>'?>1P^*#wF9cpoS+`pj?\ᾰSSnE1SF݄{̄wiJ0n<ăVֈ Msryr2-ހ^Y8=#?].N&;߂MiHTxQ7 k3DR _9*BP}kcxҗ1~g>H=$Ea[!=ZUgJ3e ^0y?~),eLg4^Q'ho1(\J&ɯ+V%]9DlNБg7м ZwDj8Id d--r=d y= R$}jjH^}xLDđ%DUu+p&q]H(@B,1<0^\8b(`FqnUҏ H l+O]tvEi4Ô'<tmA V+^"Uy 󊨩 /#k0,sMK%W/"!:nFG]h妬?(ՠ=ʦfO᤻Xe-_'~"/I+@ DR{%9 j|B wzYͮ~; :.z s} 34| ;ԉ6cϞOQ'ȳsQ]UNYa1h̵T2p\%hR ,@$F-Pڊxh!։p*lwb!kq? 1bW~vy€ ɔvso+͛[c7LcQ@N ƪWGjwF5e c?KYK /o7f zcrPP|slIRAh57ѫJwa0q.+$l$/`/F 濷V."K&_*{ۉqfJ$GOZ28rϨ@LWu{9nrErtD-jN.f*hw1IAES&w(ʈՔʺ_f.>lIDo7{7v@P'ԫjs:8@T'CV>$0& I0hJ&'6o1;bKts4AdJbponEuӜ7b{_BE(6!^FTXyJ ?\s1rAo"%Ւb,}Z##%߄~u,j#I0jXS9~wnA+`h|8$3J!X`e@{s{#u * @]}ixF A_& 2lGnLT[)d G%xP SG%]BWoCnu-! ?'M,4dqRόJf;<0W|A8Z(>J}"WխN?$S~4cU>!]+n^VZLZJgj0$zgy.অ>4Υ@fV2:"bi&6!bk(̜/%\)AlD!$) a./0LH ,cSG\X}C/ @jV,hNr}\$gay\.EZIN}Ƣ1ҢlX0 lN0nqesk,N~kGZ> ?d%@Q8һ1"O۝Ewk|T|{P.u%Av'RG8xT0/A|S3>>d\\ҕth4ʶ$q9h$8 [#!,桔 ƕkm#yPePG\v*ӄRLbqÕ7/2Jb.2?3fJ,%(v~Nry+(TZ 14ܠq;z\7pwIUja $vgE!J(#Nϵb0!5? h &p{%y*\mf~iK5FA{ԕ|BUͮ쨺!x9@y,~D,C+u)D^N1Q!朰|O@ 5ӇEp/DOR؀JK6.p/6:EADĠW|1">hXIFd+Prs$! /4΋o͓ $P߄v=pl$|/ys5ZlrlSpX!O-wycAv#6Z-l/JLwm2ʵLI?|.%qm]467}$XBO&^&x6~!GO _Wa@ {tT-lcAӈP<<"9?4)e[ *\\_<-'V1z'tO5@X+ػ(Q#k\l5\acfQ)tb:oFdeX4]q xy)XohM+ixnCqH K8=C6'?Ɠu~_V3܊u`PȜf,.ҍh![5[۵mpzoOx#H/6.Mu n|)¦p]u(ƜI<]xo+3qٸp5;p:gl.H37 p,E 9ecHo~aVP2d(iaxzuÐLN> &E3FJsm04_SZdKIZZϟF ԶY*-I<~SGc)41,ᗭS;WhZ;D_\"Ҫ`wh7z{wpӾSq{b$k#%c48QXR,v6L ;l\ *AlKN f=ֻcp4RVεRfl}?s;*th9FLƨU,7ʊd$}G9 H=G萱 LrrbytvO5PW3KK>h`۔, $InV^+S kROeh-!$cX%chN j{9)+9A Eeu~nu,@ƙxZs1!3|6eq NSs(x劇,3*\@+Y-&gc?%tV%fPjj304b_o+ψWlYvl:4:؆9i"@ ڼar-Eǝ}t f ۏe Sl6aһSn8.~{Ćbƻ,- rE1ڪe|v+頇^SP)BӃ*):CuO0F)2JS:%ڙ/@F |aIήmMWzHMgYh mhbNjrpREqIG)\_F*wv窋V D]8hnQ&XQ Q9HdۖVzK#jy7_$KBrj} ݤH/./(I1J,~@C?d?oFɋQ+|,,! 1{ZPIXh6C(Qk.6#M yg "zy췔: 2>C9F[Ћ {~ "Osv(bGHBdAi|5|Mǔ&-hS͏WцF_U;.‹XG*sniwXVÜ8iJlҵr'0I)ϣ[ҹC@8sL#P=6 7-:G!2fg/oٝ!>a?V9$MX,-# Gd\&b8 (g96 <.SgOC n7*&Gw_ ~[x"-==2iAV!]`evo$ScuF[B$AWDM3krB|hE~ғ wTԹGiMڡ=+K9wΙhX]>:g7c$ts{ٸ@M5QA t}t  [w_l!BMu'ښp!_OVI<ާ`qE^`lUKeq/0(mѦӮ/-Eۆ c$ ^+{,fVIR  -#xwf u 3o+tsdWu6a=xՖJt IAcV&f3MQC4Qy0D܁&IJnX׉.Ш*Αō4 )Zp}8J؃ȴvv3LA+&8[VܔІ778ZQF +^XvJ MҤ~rz ߴn,?rC(Q`'K0v)qS0&J8 ld5Fm?|zU0A*ϨVϓD[:m3%ٲ5 , ؝ +]p,BƈE7ȴ=vGGJWЀCNJ(^)C'”LN,2C%wE&]z$6Dh:|}'瀚"zJcl%f p,)W4,sVHBWhߩ252#?0 Ƭ>RbipTYq]}pUUc׶o3/Dj3hw 'zfYq}ZkpgjS KerBG`0Y~aI`Ϧ/HD->)Mh;Fvdc;B;AIʂ_|/ 6ƨ\fYK0hJ&ؗ䟗|8ۧ#HNmb~z3>B: Yu7> "1Tns!פ JK#k8'zAb(4'E15Z%s )v v Y3K톍/ws_?+tP҃d)H%.~z78Po^>$Jk`rw)ZV@?W5;UحK 4b`hWQb3WM$b57FҶ_) kgw!ra[O~JC aZUzҦW/;gu &EW$N j3Xq 7>إ~D?^5, <]v tHƧ@¬X91>"k&71_ VRȪ+=Q{H%sPb7\#C{N޽ ͵({ bR?ʃABk-N7$  zW.e֎gFhS>0}y%pm ^BWy,xxj|3ˆEF 4#-3,2f~D6Hh-6ACH@`GsLr1tFepi!ҥ튝('4ذ̙鼒9$.;R{:%#G"vrb8f53k6ѾԅEJ ˙t6x]zAz(z gf&Zԓ88˭-cޭ?O-lzJ|p@v Q_4ǙIω~l%FZnbmn_[=}(a':Ƴbiw}6)j%`*o_D8pi0X40GQߜw˹1H׺EJ3O\z 7E~+ ˡrA$U~߮/!<#71]u<5e޺_&jTD6k#[/< #Q16!b7fj5P}Ȓ֧`EE@ G`kJ2.s`N$$1.x{㐭 0 ԕ7@sюxK@9HcBE:AipjBSp[u|u-n8&]^Ġ4r%P\ vgGYYiR6A7Rɾ714Zb~,<8lQ&8HN7P?E0J N, /ἷ؂a. }UwlY@9?Nϛ蔌6 t"2]i`м=gLmsLW?H壹)3&\2|vvJUZdV3_& Y9bQ**VHQNS @y zj佥5DʓAij v0uFo^U~[QN;0QWp[袑$?w\ΆcSڞj=+Hi|Цb@ZVyEB:)^7m$u \ز"6w~1 zԶiOd&|J-&|05+ͮz 3s\g1!PAiw'_ mvQb^}&!^Gdu4lx$@a=ٳ6QQVZ-phy(SmіЀK;m95BW@~l(#V  z>mk0b-hGJJ1r 1nUɏA0\#G0DsQ75v~g;mޗV)rmk/>ŧ)Ĝ70w@ ca$vV^nCLzDkH' QbM;1i©7F%) #r'ĞP6y&Ii~ 3m Sd?wAc R=v } ^gcd|B]5tW2m(ϫnP/voL@5-桼)A4 eS Ց9jn\P烜Yv 2.gb&PFQdfC~@B(ţ\{fw3w|P /^ĹNvw?5@-WLKgq=\0:b(vN mL\*Mv9xga+yku/V_aa0mޓaQ|;ϙ.RX]( Ԅ)?gqMMkoٯiف%+'E MM1 uP&ZHZ'W7fGybs1ހiH#plXb~̟#ťėȏڤȎňRz6 iKbQI sb}qP/bM=p'v,t>zmg1~;eǘNUѴڱ!k& miF3{p5g9`蒡Ln ,$A>Ub55d&+CLA%@]5 ۑHtUƲ \5kuRD~y 8\ПZBriLfO]YxX: 2w.4{pN3t#*Ė pB `' "k`_uvmymlKS6mtj!fX. D!ybЂr#d }}d><(KOQ0"j9bj5 T8"B<(,29Ms=[c:e 0VXr#N/X%k>>I\]|X) AC9BMy/ R9Ζ/0v E P\߬/w9&FG<{9[-Zϩa:_w@tEe >O;uv@Dan;:!>69"d*]+t!(n&u#}3NZ w4S%9GT#RdB"380J+V`S2H(dsy*hLU HD<<~xO@L {5T2-8ZESeK1䁕E*RYQO a:ⰃbEẗ-u5!z)_0^ȎJu5I!TBYEP^Y;1nryH#PcO=xֻm$ŀ%A&e-RHjrxi;J$ރ_Ĺ)-=N?d@o#ШO`XV_q(Bk37ޟd'4]gcIig0w S6g K^JmVT Zpس+)Utb JP:#4W"C1L5{h˜d]4؊X!2O0Ѽ&}W:Y[ ҄Z{j Z -S+" D$ T%뤪{< NVY~zk!IșRHPoϙJƆHihpSMG1 T~[0mUQY4PHѡMz QFGP~ ,Ο\P9i p?uzaoL"|7!fFM lzHgrD˘yKK/ʨri&);7 GP .vKl$ ٫ '@ .$i!o/o؍,iG.q*T}gz@n;0HQ D:˼hMJbQteE۷{eCl\Hlpڣ7Plnc)0ܽ*(Γ;|HDiGqW!ɠV4]f6}FBC#@jw2dQ@;{S~nP=zhD#*@u`?Am[ MWQ+ﾐɸ8Yq|!ö-0y؄$%Ö(_ĶCmpP9FSl:@,De t?-LTC|[4TݠLG'}#utר`:jeU`b+lM])橰smeK+qT2Ipm |֑b@(}/ g$lؚd*Hs%pgKD&f&J=_EDy=g]>ly{:ျ$:NFu>w0qi~ 0j PB !^ 3U"uh8EKJzV҃%b`)r c9-3J |gQ.{rMj-@} 0z>4&nKGWPQb~JH|iǭz:xK5c±/Vz*}ihb8S^HNb]j9nAel(ǯ; ôuGHf;0Z#XtVg*ME-dˊ*攊w0}St"HD{L*}N[NJb8P~ҟA Jp(l$o<,4B#lHN:ǀ=[ G3 l=1d-5HV cam xOn#N u1xȻ)D Rhxj[9EڳN˥=x@j3q<;\?QDԉXK*O^+W$^9 _ .3*DQؽu%EiV/_tR`ZLOG(30"QIjK4J9Xp>[(_[FkH-%/G3h'1/ӯ} i{-ynO_i(eOU GJʵUK~ !0ːbLvÄ'!Sh|s5NF{ťZ iBm)W/X^g(,_^1H6J%$dƅ(Jtl2aa@#Pc'Y-8ibw ΎE_cE6TSc}1V]z736bHɨG&D0ه t;/U+u?,j~`pyž84owg7.Vu>ہEiɵge_¶=LbAf<>1xFqkn3umPC'hŽ`q\hQE<+I¹,eۂ n:Lv;÷km-|/~27B+21йVWoS4r;sSCő92+!ڇa|a<ÅdT!}!i(=Qa31B[%' nO0ż>)dm}-$CV2m\YNG8XYkT!+hu o{XX]?|jOa jeDo+GLuVV9̐hc`E!UƟ $ԓ6",]ZIfL #1?Oyʕi .B[x> Jh3y18?ܪ_\[ȋd]5 ܿk_\|`#+ںu'B=M0G4 O֜v!~z)n"Sܢ/ Cf{*)G;;f}8_T b;Y ]xK?M$ɂ5?k+BU{ob">F!'2 遵5a%OMvc:mY݌{ ~ !ƺTkڇ |Kȶx/ S`io >ບq ky.ֿY`6SL!T+~p{? W,8Wt³`eU8D'|E+Vp2^NK:^M!e-RaN::,Tki_T`20d$Qg8Ir,Bbo|~~F.*OpʒHRbbDN㙞GO!e$).堰|"\;_s4O9>AþUEy\ nG'nU>inQNgC=&<퐳Mltܧ g}1Cj)w+m}=hϿ;~yc>3깻yQ%޴AYWqO)n76 欗"p80؛}|?`*Y#c}5Wڶ8"!|l_w̕ kIPE G*= g v"f8fE`5*}IEG$Y^Z8jeS ]\ܑ!;vzFo[R'jJcj4u@SVd6>R)qX,H48N^Ajүں W%4 (w el؂<OjXf#}Ls -?]*jf!f~?Ñ*0G_/-Uo,W$g>1 K|K@<e46Bw@04YEu!־6m^T؎N\EѴ#-RC啍 FHmyX ă8:uDC}[ 5ӗG?t;<斄Jb]i!;X y=nJX`S.@0C3\PLdca凞o؋T:tk_5#`/ 䰳, iYɰ iɈBmʻ \7J+1Z [["H=YS [w^rbjt+Tku p9P|:@FYyְGC MQI!7o Dy >[) t ᗓCb2QVMsE: Te{:xȐ ;yea:@)ê aӔ-GЙ_*03u'OYxc,})j+| =9s]:X-g<E\XMj#Tu ƝFWt.>AEQ1orZؘ\/kY 7fIM뒢95׈CM"?PT$/ϗJ-寀nƢѡ/o/bi$ IҊ_d-2 G7 #"&Y\ΦH=9\T]1#'"7,cnT~Ɋ= *+ѱU= *фD1먨}4K_G<%rmUr0 .1M=i#e+թ[T˔4B9sF6X;m'sncO5a"(WSJIֻny$Ek|t1 {MkʌmCf.[n*wWcŋrN Gƾq(B5se&$3fٚ]r-%'ɾoqOSsvJ%GV v '>PɶԝpPиLd gyÐ}/)~CѲBxfo2+X[f}ϟj>WbKYlzuPn*0]:=V=N;Y)6Ko/@ ESSD$+3GЁo!)V7 qhΣ+r-Rb %^#tvS *'@p)ZXU ӢBf\m*TP@K,a2S'PA]ݐσn_?3f!`&d+̼Z3չv R,sz2OAsi rRD ㈲.kkgKfl[{CЭ4pZP2 nPg|^]T+>&P#SV0 QOZ?iDٴ+Sk aFFh~9ʾ O?`^\6gi/ Cx>W0 @LsG?RR^Tǖ&IֹpBEW1F\'ƭ0oXa ]Ngk:Ob 0b[j.Tc4h/:CS!cǴLcO!.%un3-izbTaVnڬ@Īd=I Wvn 6Nc'a.#h+qWݓU~QPi=g;+}J:~ 2 piĶTԻo5Fȉ(vsvn0k'FIg[¥gj7n2m%'_Q8RW:H\hX3]wxfW6E/WL? _M߇@ǹ @(éN72Cm&-!(XJ֠c8V^dX4!&<7ibMBwr=as) ,?[IS>tJ@z79u4X \ͻ1HKKknu rWCJ.`1N>I$JRumtr{\$GѸ.!*'ɱNє]|A+)TN"i㴎jT^{q|JNPʊ:1E &n>+Ͻt۩J<{Kt`!pٝM޻bCKFHd4kO diԾIH:$B@5*'&=N9&ȣ\#fa]i18HUK˴7 ztp M 9A;$jG@(Ln3cG%](!rOpiC݅u6LQw0Lsp\s1s:#ŭ4V3P,O` 5]sF#X{Xw`x4 s9$Heei>( hŭOΊS#.)}*dt4[bVz nTM9j5:5_00;uf ,²ݼ|k[ݐ0sr~jvÔ!2-'CQ>&2+`iF~JLl &>)rYLB vlMW% ۩2,4~چyB㚐[]q!>7Ț{LeӼn]Mxgd})GآB_tgχ<;zWwo -:4qL Rt>Pgk렂AW#m9>GKJy h{& n_sBF ]2(vbMq;|{lIzGX`U*fu%M/ F(91Xc;Ȕ"cVJ2Xr@BLF{DE8eK7!Za";!PwFR`!`K,]#n|W8V,;GafA߀곏#ʐ6FJ&I=db{/FZGAvzwr`Jz_ҫv ; YL\݋"VGP08񴾣#dZmln&wYѬwmorAɯzTIn\(Pn[w4FeWMPMPrW“tlk15a,iVVl2hI"5t\ ދ'y;w+~9Ʒl @bcv4h%NQuE@&I m 2[7<~û Tc"u:`Imqw WclB$ǬSxWGD MJ׍ [#Hjt#׷h1&n>~g`?aKcxBTA[t(HYV{ B2XlOY#ҡś*N] RSq]v͊>,' ҙT!!./ĸX/5Rv_!/hn[uZW7M aNE#/,<)܊).@K%1xpzطӠC[_?7ZTŪ\~Y_V>8>NwkE-X.'n{JNQZ9y=k>^'7;=Qd/j-q$ + :,QOΊG ef5O<Ϸp8Q=pw_yi׹7M 1%Z/<-z:ɢR eg)kv^FfqDE__dyR}ۈ=q>r`ٯY%' ntdX`ULTL e0OTfeKC=-5>uv2A`)b'h|gP+";A[pi|4 K)m]m30_'xv3.RYE&̏b_$<9E[">[AI5xoirP ?&C'!1Y5-X Ql8f6f$BɁQ@kyNe`9 _Q$kz*C_,IМ1_JäJu0O016-8<2/7Hā)knmT~5cܩHtߧ둝.Fl>$ǸfʒZzBou0G6y.zXqi 3A!= vN:Ŕh<\n:]0dһYXp \! dT# nF̃au5zU;4}qF쀗e/huN75MATSuS}: HxXejЋ"z"0l;t}H;Ƶǯ.4?JȌIPF|AG)Pg$e=409\йHԠ,04%H4|mo$;G]6:' YJsw]88]%_ݷGٮ͡V+urM k 1{x)iտLw5 ÝΑ^D?Qdv;>!01Ƌyؘ؊`%ϨϷj lh#})pԸimljc4PN'RA ۢ ; B"@yBP!v],rjz%,mݓ6}tÍۈa*ƵT.bA&Z췪4-xBޤek ~e<̨l1ӰsaH%4ÏIUaTN7r8#Z5%`(b6UN*[Q~U 6b#*`ܪocK-U Tw *eƠu&e,*Ͼćkh ԁ>9TP &e1:046gzYH&"Q/j98M`zKBJ7VϘC)YYY;U$WvXbMJsJ󕑘%Ta̚432zV?hwU޹xS#GuT @(#mFn#ur Ou:7Cu\\ma8=Gߡ׷JQ/^|T'ޠV%k2A\c,z|#J-%:@4B%)eKK̠,R_.ÈTUZ!0;Ha@\y"|jȐl*dc$Pi.+<<^D- 'MS~[t*Hm>OY>BFFW])|yiy6OCrC&/1[`tb(H6F;m@ֿ9@Fb,?diZGM X!н*t1\F@ëqt툖 N Bn"o!ȍFA+rlVHk Y~,[=jb1kRB/+·4|$Ji:9n5Z̭Pې]k/#XtminuҚR6sE/AuW͢Z30O>v}_7ZVZNyEK|s٠DYAwl2h+^?lV$(^ImalIi˪qP ">W$B wk,gY=܍ `WEšG*gN9*婵՘2op`|S=zoI>>O,'ų 0Cͬ"!˩rDuk-Z&Hnc+. l9f*B+l|񳛟+&֘/NAWhd7l Ím~\rr>ׇdre|`ɂ&16mb '[?4t.MqX$erWj|`;flQA)I~kqFfQ(g97:z-_y-aA#T9$Pvw D2uQlj>I,_+ _uxw6xeD}룶RØ5A2&yHeBWaT½V ]| vn/u j U"]0n癨(+v(xǰV6ymB U^0W Bݲ JZ֧vobk#I\ւ9bޚ+) CB|`Rt\9'+DɪŊ@Iq|bB\:pCRmP7Еoѣ2-;eY-.v>01ʯuGl1aHAV>cM{LWnkAO/4&JIg^CSTv?TaW{x\S52IřY"o\ި2C#t6,R.]XC[2 VoQc[8idMVqq9`Jr1 RE S͵IBKࠔ5Z^`%;&olش@ I\PEi#?f֒cWNErRAG_KQIN xqC`Vb^꾅qWwn5-0n6H'vup KCq?Ur|9V赼+#y3Lf lR,|Hԓ>gT~h~<V`vr8|AkEl[*%/ yK+ G8<dpd*fVδ`ζkY kSK|~A +6W)6;7}/1zu{>4l͒G ݞeD}IXQ@O嫝 [ G1JŸeD 6*ej٠hs}{@*Rt+(۽PmSeNgxlv6*PV~NIlпKcdQJMeBC%PW\o{}peKܜQrOX6#57| ~ kǔmo w-#("^{UG`{_ x 4Br^ zfzfR@e`I:~)`d&mH׈xρ=-H?ܛ0U8) lՀ7h99kҰ:XeUi=-z)G ܞ{Q;(\I{ƝvmVO9V}AN~{n,(5r<c/WH4K_r  uclyt&SV~U3ne#њU9z9勞ܭAM|4\sikmo/`θuؗ&6f*z #D>O^JۢT)! /Тn2Bw5oRl^5BSUrCW; cꡖG g2}{b 3ΐ-[~X@J}7ReU^贊L$1kHvת|ro42 P!9~x^UE]ĩ@KyhcnAKTr]q5\fjR`J\%ğ"mNKbg ͬp(8$;f:J&]o|f$C`" S+ݪyM\(0[? W/܃ Sz+hshpǣFZL Y6>wf.s|{vqb).e%ғ;S(͏;YFrK]y6ĺ RB#:ߙ#x)ciʨ |1f I滓v/?H\:ER&JoRK$iFhKI%(hiW"◐BjS@}qb+3 4?3@tp҂1+$e_j,RiCjFi5}b1@0j؜GWL'nb>T`LhdMji,o&PfڜՉ+=! 0ެx_2F\biy'EAhaPdIkx~*hhuIxlkn?Ւb)M;Y4;D]k.R2}Et(5֓mrXp"bsL mRaH g\{g-0.;q %n.IA#(Ii/Kq:`% |r)lZxKMP<26{N ;2=jbhn'6bNAF3#È8DnhZIEmBadn+Hpȱ[~:Gj,%t}w\Cu[F<7lo_13و÷d[n $|bvGC81)e w.ٮEuueIHZ\ zI֡B 3#^%l΅PbE$}Z%zV^K2ȿ'6)ß<\h`<4jV؄7!O(?>A6:D> Nc dG_~*ҏU/T=. 5N#ˁi9Rv,JmktP`y`!0!%2⴫A🃞\%o)4Ga1M+<ҲzK*sLq>2Y[fWnMO]j|Z *R&[t{,IAp/%jOZ\c)O`/-2x3Ty(l{ЫZ#Q`]^hbghz|x;εW jiymyNyӽ2eo7Ǖ!>Zη&Em+R:$-Ӊ 'R(ožY` Z2iL< Cu V2Dđ2e҇vg|Ẍ~eXOI-H'A s:gFCS8 Xʀ$Hڀz4>dFobG6|S쳮xq~.5 vnNMck. ڈ9bf Ѳe̒ T3 5ޠ&ޫj&mmfjbs#`uUF]E`3:m}AoxھVUT=.}!;LWvByNd<%n.`Fqe [9"^OZL(tJt5bb .wlM=#<^N}|Ǥ_<jyAn;{F>-T^Y28y@;߲<MUkCŤ<4UOVMJPtӅe{1yRVHq-># =mܬFj'zK!l9)UFr0cƁpJ@^ '܇ahag[JOkT$lįȕ:D ~ϴ#7 i laX4ÝGAAHW"e{k7d)|J)~0}5Ro 9Ӗ,̀hΧ>YU>dYܴKA x4yXg5;( x}78ce\Btk+TZ0[y{;xbҬ"gd6(i.jUo!9դpV7[ nېzXWTZŭPtgJŌ y$;rBG 8[UI*,UW lDDfe t4՟y@cZ!Px-PJ#Fy{%B- ~ѐWL`ܞ:&{ zͲ 5<ݸ8-^M*oL~B.f)_d'XmHq9vx$P:0+*:GPVMl#qr7tG9"; F V@͛7=:H @4IbUP\(FNS Hu6S~No2f'>kdCBFB< ]\}4wz }?BI|L+k}zA^u2gv~0Uw\2IJ%ؠ:IbD!G@Zq"HgMg"`}M:W Uu\xUT'uGQS@/sF 69Hт^o[OֵӲ`q/b0I-hfdhRL Dxկ"]IL]M#X^&ni@ 9:^S9kY7Pu\yd4V.쬳[J\C{R2%4))x?(\WϨY3H A$7p7UbFhMf*5N4qě , WZ_A> Pe Gb~/Wz~ⶨ|k^ 4N6].l@l}?vNr.GoՋ99134l;iUK J1U.8FHp lǼ׊ܩ3q\Ky*kdv%[EPKY(l#TEvi9W9<#<:z9g?QD%3tIGL;BSoXeG/yu̒w;*V!3rhL8{1OpSmjT XPyydp5Fʃo0!֮&U=Tc[41hg \2y[fvY;M}8{.yfw`K2tL=n<_ D˿! .a?rbocV -}gM>[/Ly&`4ZQrѮmdx790HYBWZk`j&(bl"@_U+ ŖwUV8\eS 3Q uc Qkpн!fw12h=H[ tH ZUܤ&mtcphUf6FܖVdGBAfbeޛ? dKE4G7@GR^+Bjik59Xl[]%KqPY9G;s+Fm]ZްeI$՘J32;MF9ޛŭ0cwC J)TM`C'^:ȤSE6C5ٚ=[o҂+Ue,j,JJrSKM+=w'VC@*2 *%HwF@Q3EKT%0X'yYpքs}Z=d]C $ȶs ? N rhiUti`St>N,lWZ8dCԬjBSCFJ>%G_}9ɗ&a`ӖܢPLwML$$r9,5D@H"l?]ūz *|1l\{-ب$BE%O>a-#0D\,4~:>ҙͶˀ P?"Sh]w6$à@>}ݢyEF`-ֱ<uUE鳹#5lI2d~uW%}E]̥X+ ];hbFhj(?"ƹ|S`~>rd,gI[8A1=MqC0!7KIrv^o2YZgN&Zڱ>/+ 7rˑ*Lã?`h(9K .+8jyUJ]="\ԛ0m)9>n\1Гy,$zS^ECBêXa̸jdHqW2 =(/ev1?]AbiվNHh; ~meM>sbMDvW~${Cw͇n Yds BWss A29grX!nz泶>NZڰTW$s۽(Yy|D!pUVe\`!8e2ۚL8 1H j(wQb29Tkbo1- {Bed))]N=r'q@>Oc([=1&#_QXVω{Vjʩl'7)+&)>3\h2"ωpi4>!!/˥~+N9AQsЯH-!>->7a)o:xE_f(lFb9dzXZϮ2RrpUGGA]z'a#։nvEQtyRsF40n-]R`n"Cا1d24*:(h1c }_0?}A:[LeWyߑ2ի(^wu5q$m#NmiaKZj*dHiWdː#oYd=.D_S$a<]|lkQx]n!gM}$MYwEWߵY*{}-i?h:S} @*@,0WB^n> YԼPLSKR@08:)>4Sjm@7OܒkgT@&vqgE?ۑLҝi8QX]W.u@Ev]ϥ&ᇫ]{h)"Y- ôR\0 3vζݷ_9\%XPahWx@DxS_k|pC{Qdyka@f)ܗ-%Aگ-X4P~5 B@BX  8A5&$4}JBM𳰃sd p,ycN[D F~a{[Irφ -̳ecSh꿹'Tl PG=wx!Vq}!(58|KĩekG~l?FZ&r*VڊNK4Wmg8o}hPt Yc] K°Ѥy?w/fk7-Ryw 37hݫX;Ѷ|q2BE9H^O_cwDsd?DFqn_݂6NC-49hsә!H[2̔o1BYxWY ǶQr@:T2Rq ;}:#n32^Y߈kҟS 6u/LV P}=r$G}h.Xv d- L;syTyU%̦{/z\|p1gy\QG^Xng@,e톂*,_;'~9; Ӹ 8ld'uWA"~,(޸KE;XQ iYd\8X49GD}Z)辤5T @ ?q6x8U$"-wunU_H6UJlI[)xgM".l,iH O#u{65eUozɨ׹xHe26 k܏z l?Nb'?%F47d:u.a(TI|kHʸ v][ϰ\_k10b;dD8#LGPMN6W12l gpN?g#Km,Hu~fHjwˆU[04Rx (>VwB~zf|7,\ bbM@FYl^R=ND Q)(}ḙU: Oۂ0mk%Ϻ _z̷:dQr w=* NOPt'\?l`UG jiO}δdˆk<nltK'|6\h(X;Tv[hjC e&2=dk1G3D`8TegAy"Ȭ'[Hǡ3Iܸrjvl; {k?sŹ>j3^gNZPB%fyekϘ"m1(-Uc\x3 T :vYYXzURRt/6 Qe1Ȩ(>ި zM iv-.@#ʫ[6U T;롵]zф>`5⢵l9 VgYڤ}*N͘ߑ,nC5/\ȡ՛6,/Au6=[6څc{SIozQ&#iz 6fE>(H&=qk z܋J;&Rݤ4(Ǎ2p]%A!J 2[H ڄ&1P1J Ahp},b}4p8JI*e %6f&>^cLM[* )'0Cŀ.R4 )v[lApJ8h%4ӮlۭrAm,9)Y&=Z&I]%vl[W ˠa屉˦2N0lOIw˲@Yî;: -ǑZnt/؝ '1Epv\/{Lt(Thv' \3 pBA.~%2{ .,x͝^P!Bz?1c@9[4B?L3-{*ڒܴ*+F2 (J1z7= ]bPz(3\r.ZlH {VXe +R[Z#NU]`wd񀼖:(jMܴ!OW9u~9LGu:J zABHQ$ndQ` g'lo  /@F|M?L4ϯ~7bYXE^LSNhC5vEc@`z>WxՑV?]>dP !~O?Q f$!'-iip+`nꐎ-$Fwj^@()H3ȉF'W#ʘuz1.] T@tI;ۑo$∀7mIq/s1> bX( ^M[˾\:  vckC;Z xaTK:,J)!f{L1q%_} '!T4م\أYlUf"CEjm&m'No;n3hNw5 N鯃Pv;H :(_w  ga$%qV(HPhiK" 4$4Ήtan]9oAf̍/7}B&W'bY$hT+ xNt2wBጌ{@cϧWW9e)@Ox#g8q_a}_bRCv#*Ո1hz;\*($Dߓ76* #@7p~>$Y6h]*K~?P$ ֚"E9'ڠBfEaBe~3 B,A3f=^6\2ݛej[$;E;z`d2,7~S"JxJ'bdAJ8D.2+աlAxvZ!L{V>mϩhg>EiGBPljnyM6/IpNfQBNvňSm"f `YN rEsq{FeF[A5<̖nDlZTp$T8ͬlӟױlK׺|4hZ22 6<7oq>Xq>UjSga=hLYhqHmlϸb9>/5?/Ï;eF֢7޼Km ~ft.Rb&AПdi7&kVӜ wWDؒ~ 6d?yᱚA.ȐyO0_ X*chU:vWE섾h :?Vʼn Czw7c6I0śBoҽ :XeJXP<>')Xf_r7Jk M2/{Hf;8 r`\٦$8/5ek+2^!s,)׹ &Xy1,ZϿw,d{H&Qaߛ`0"sA3˽S8]Wwfy\xVWsU MG"*GzJQܫG* P#`kA:Q 4m_~Bm~I#?ҳM VzZf J3k[z:#΁;)YO% tח5AAl1⥨u=Ts3"Ia6[:ey}[Ut|"m誱x\k@@i λUhfbN+FMFJ=4۸ݠlO DZei4E2n^yHi:ahcY>g˽ƪwOmDHS8_l ή6Ӹm|=7x F|GO;gL"$$Vڣv!~T*>a%|B ey5j唑9ҿ}S/܍χ8p~Ď٪:}gMc6׍B~F/~Ay燚R P;&)]JWaDuoW˯yWaȠG=΄˚gl Yyleĭ:It1Ƕ1,{ĠVh(Qt#rnf|qzsitC"G{ ~Vx{7N6ؙj2(\f%l s7d6 @|lU )<^2^!/xc}ָj!jv5zdpRrLf Oʹ,6gww]ǻ*9#Oc<ԏIQ. b1eM)߫)˹ ey01|?<8 Q3 E:zN\ ~u%)2E[a>>/cUnw]UE"n"#2n܅tv-n/!Ѥ%*d]iﾧV[:XF:9 ڸn]Lq :a[e]}0g R;0m#[ Z ű-BULAL65u'nf񑱉ԛ|>u]nүg}P.>~G#%G!R$ K'BwqKd߁ b+317E.N!Rm-v@B{@ -KE҂yE/pb梢u.]aHm?f!'ZRt}M9G6 鵫55z.Ǡ>Sǥ;N~ƙᑷ@ oטO私D !`Y]+IiΆ3 74]>Sv]K/I5z1WQk{ԃMz^nl:g'y|+N&ӱi9`[ Y5n23{ѹ<^eߠp*\2i[s'BGC zhIAt"r'>x,)0N_[VdLx6Ɋ1[gArT~ InSGC{अy[4qFc ȥZ3*Jb6xO6JxPAgT跃BvbyO`8T%@Opgu;}-͛]n lB$8;ğ7R\&edˮx`+o3O([[ MvCJmqoJ2;U/(ұr(NTOkɟ{SGm@Տ9#;blg!zqͽX"W̱Z %"p##XYo mQ=k=WiC! aGSUt@dRaqgat [0f歹ʼUAIn@/4@P*Q}e8w%'V3%|wN(2 Y˺Q`Dcี{]- 4'W?(@e/DiHo}2"`Xڄ&^DUi/ >,T'B8Cx vNQn7<TbxY샐LYtJS)sR55.yO!hDz>бZ燚E*1 \\cHT_AA5l)8uoyS 3!")^w*#TC7>WUryC|=[.J {^4=Gk|y 7dwƪY(c`u(\t9-;g7t%j\ \zHYˉ3\fyJnCg,6館F~/24}/:/<^9_hߋ -j^rBƱPɻu-V vS۰֗(Ã1/q=ߚ .5X^O_ Ko4Tۭ k~ƙcVQs6wOӢ*ZWl 1izUp>&ބl4=PUqbYb.I ={dspa;'&-yÜsEOrA }MEUJv}bMҒ; [Ktksm5@gNʿ-Qf5l_7bRhZ9K^X,P:rL%V+/ ]uGwI_דX{Y:Gm$x8͎iV{AgCn@MmQo4 Ik;f6bR>ii0 ɽAsB²HW;GKİ3aVu43^U0Y<)=/i]ԝ>HBx)Sg `IUnLcwZg5qƝ%J\跦QmFWI"Be.*>r LXWr]D=EkۘW(L5ȸ|aIۻ‹H0Onz1r*`!7TEcX=b[*#콚FV$L<>Y\b2 j9`Y2!E]--O#^;s&ZYL&c1I<7gɴa:h) C6?u#l9&WӶWDI1ss~ciyjHcʀO?fP?'69P˝ js[Zͱ|eF0ewI<'[km;;_$WّI~%[Pc0ySpwj6lvP=IgrCPIk0#A]]Bb])jFrf, [(?2 $ L3ͬS$QE?Iavb+ 0 ֳhZLDOGZ-A<=7%w!%&I>0{9a-|t7OTOMv";|?XSzW]ZÛ ~P&$yˑ9}{fcf0 [b$HW1&;MMo6rU:̻~Sv6u9h E#L]pڬQ+p]~) =">/}r#~ tdJ֐ @7BBE/FO ,24a3hd&qpXǽPizScDg62\9<0BѦ:7ƊYpzIco+Fakȸ "#, W !& Mm-ksYKOMf_uU~D" r!|XA_ y~.?o5 om^$ Bn\"AM~*9plbcEFv֛ ZfU#nIz#%2[IFt1(\V;:X5eUE!ywA%Akt ϱ0ndr$I.V@( 27Q3K38tlZK #OI7r[OhBO ->IϹ1F;X|To P.M4΄o< ]#nkZP|d@f}a{0)Zv'?(4ߍ: !J`LO$lW/ZiA#ɕyU2k|'!;ds\q)nbu 4buAvQ|!Jwť}0eUcB@2D8j;b8EPR'wzz}>j0ShJ mv,s }y6% o[kd[[-g:5uD5{B}M tz=>Z7|AX&Y7*.RoD'X 25jry6.j K<}S߻v?;=(5zZ ۴{6\x٩ "-qw>;G/~SZ73)Fx%Bu`. pޞ?'yf|~x,F@-uU/n\[v8Q"/=g^3;yB*O>-mcALNNۚIR䔆iv0c"uyg4UxφO뾟l69K(![_}|jΣ j8•+ic>ؿŪs>sG`+ wJ5L?yø9bRWscsr)WCp#KSAT.4sC '# *y视J)>`pHJ#FM046>u] 8%,wB P=E *5'D*`^ mG{ߵxD+6w;>@_>AV8aqzܑ74M_hvLG~_ LU)l$]tܭ0q̀\Met'4&@LD׵Q,Ӹ!fY3а3b I[%őo|z"?z!Kf0pjɿw^?M[\JA3`҂L**UTjNAc޷!aU'h>%BC>S*9 9[O:n @)ykQ*ln͋|qVz."Cu2]r "4Ac_#ǘ9-isTt֕i~R(")os]= nƗގѲmSmdGYV z-`3-+Jeb-b ۱rN 0d4 ͗*~!XYo2$<*`! 2ָ}ƻAsZ"o^YJv~Jː?\gŝ2mzMsBM ^qoA6%EP07# +>Y.Υl oqx S#=p)AUY-"-b\(G;aiRdCUߗX$50#<$?fE3Qp΄m(4wKMΫ fߪQ\d/JoaCB~XS< .RGI#bRݢ"scZC$$hc?ۗ3Wគ/!-IF`B&㙠TyI!utǂ%D-߯א3B PY2:D-$MΪ4~7NDra}B"HH:n4Ux׋و(yxQroz;+jU*oU5gD 6rF$D%#)Wo~ ix`cpVqi %|}dZ dL4lhhh@=e+nfIa>Cx[R4X;0(P*z%MKM?p k9"=8L4 \&H4Z]WYtJ<E~ Īu V}PRȽdW؊: H쑩Mx!_?{(O阼@@{^$4E|.1.z)'LA-j`£&-Pׯ. x5B30&]| )AazpgE#z\өv` nMf c6%!h>4L&@`et b=21SnE3`i7ߗa'M)vU-c.`mT%D)O^m 9VFbCJ7!qbG3)K;@=]*ڀ#&q ]>[8R1:N(tK-R^"`\/F@]zIqD-S5 "(<*UHEqdxF+~T6oIbB?>\氖19`G!4k)I҈ e䮵_sb)x<7{:\V4垞+[)Cyl)CGX*w;w9']ؗU@R40Rj* %_z6dyǠ0+"t y="(o}" 'r]y \^ʘ-Q}}MROd^AeӔ5S&2j4ͨ k  ,+uAᔶ3@a㝴47}S*l>A'SnИ;T-C@ujYI=L*eKgΈ}y%a*/eC|A}-!+-Fmc`ʶs\&.BdS-Bl4ߧRLn/yAɞv֘Cy҅pd 'J!mdV@s Or`>TdwC5-0js_yjԴ,I &k&lE!59*Vk [bsV\YQf@]lyV-ݺsNAD탥$a.78gzv-8!3:+;ji[뷊*}RS ۹{^ o>ew.vC A22"@G^Tt*0Ll5N^,Wv? eSD]Nrg'`[1,6 u^Es1s,!g1_ydfFtR\ Sɐ`g!]6{*F \2To[qifFRRK',x(ݳKoJÎuG ģ^B?zr߽i{7}-He'/-VA6s;O*pAO2Bc3W1[BOȅY3a&D\h^dE=d%D Fߌ$ I3x#$MRѝJuJ]>,-'hU-,tY!e S&M*5#rCYd;8̡t$;[",?HK80J)$zr\>YXʁ5#1]W Dax|L~}D'A_ pJ/ql6s?mIioTc{Yy.WU3Ծ!Jzˢ'|F|@T_T4x?}P@]ԑ;U eF9oh/zFRL.i3Ah kY\vyz"lvKXHMcᯘẂ99##aaoEq ^p H8"}}&}_JcW .UA)}Cť0;A/ɄfڢwFUDc4SЂy3kz| j04)>9ޓ5 l_O~#nNz'3 ()I;[QC sZ1 T\՝e~c: X13V7 'wR=.CRoW "fu(ѫo'W_$ZLd>ZrWu}`Q)8z|=xXs)w{]"DKnklۋ*p]\R|J0S2gWu:lyh.¿jOy&h8A6b~BMTi!g{ )pnWW+>9{ "rCe/caٯ_Toڿ2SAdϻSz,R퇪l*LW?+۶$ 'T%KDTouyYmCIP~Wνpa/R_6fs8doMWrt*Cw0'y9;e֊[+MW T&K ;bLY_d#ť\b]4tEXIL~Jqw>x{_D~k~}~%rJ)XPj<#6hh.ὒ,lF|0bL2%gW`yBB і4z@<2(iO5Fe,uȥSp~iw3+r>" vL')A!SEC9d%77Cfu ~ G eٕG?nP6`1.+(*!C%18U{ wt7ҕѓJPuj'bAF`8Hm|$Q Ѝh/t;D->1H J&[_Z p()p>9״3iv>Oz77O`U$QL"Zg/$T᣼!X8A_أz@Dk #D9,UPKM%C8k÷ hgHRΚe]KOZl;!QHH.h*q'O&|D⣨乜88hf2e56^U"֣ҴB_~<4~p`z t>zv֞YR`IcV -AЈ_3{S fN7P`)/߲yIhԏUrG"R3A+=5aݤom p-~cSr8Ձ+2l) )mYad-OAo,u9EbTƏnFzM-q˲E[ƾ<5!1cMHiyǥ^ݕ&x9xaG q͝&pu-hWqf"DM^[ ǣX&b{Y2G`:d }gzICY˾PWFIʆrzWj󖲆.SP&uSw;k?}v*0Ā!*֣_A!ΊAVX<0Z/7.FD܌ݧ™( 9O%3 Oʌ YDVO!(?sZ߫@LWın)th6.:ݵIsgf=_>%Ym̙(NJ\鶁 ${l;H29;[#+ 3XW n0AE^s y b~c?TGfv v^c3@k 婴7s }YBAap Yqu#3=\\FwF2bH9=bSs~ҍb?`)u b]?fGG}R;F"`HˎLL| qEዕQY߽T^ݓIT@؉A;y]@KUw~!CQOYm!mjρCD__YII4. .Cׅsk7pكս@t7ZtS{^VMN~[ u}0#̛%+(ʠэY30aϦB*-B.3CdXד}҆~q55'MkZ:~ŽjTNS`O1EG(A4W>=g+Nc n#|v;TiNhQx/@FLo#Q\Ϲy`mPӄYy3SI7aJ#_jApW R_A5ܠSGelTX9!"W(S y9xKh)^V&@&\/,rD(8.5NM+ C y+γj#kW?x|;͂O`O(CuζF vVUO3?ز7틕 \W#ף2, ;EňIr"e#O&ܲ u1DNUMJ1:FsrYv}NW?Czo8lA~߰"L:G S n2 Y^Ȼ?jb[aQ9$B;);B7nyVxelIzuuM\/^,ҜϺBՎj 1KT1 vX.RIаE(g^;v+P dh˅$>7KA$O-j1Wڞ}B/>ziXE0; )DWQs+BOwO2A@,TWO:NDDj+1K:[{6l?6ƏGpgPi4?:0ݥN)pXjRx.%7o^êR?5cՀA?xzC͑s+{&k-[y{I~ްH rc122I#8TFdaZe.aE7^fRxq3CZSIjMzo EƚQ[,khlsZy-.9Ė6 N֡>4[2u.s˫T#W;W?[+TlqR"e@>yS0^6lyԣ #ڕaq>Q֞xs?3tWIr7t=&Ef > ZLe]9'Z_=+V^WownH'cNu{%I=_۟4[ŠE-BJVmD/; 7h3/*0|VN؏l' $\8f=fwu97냹\-gt+R1mڰxje3cvESz.AlkټMP*t5Y,Q5^gh)e#H/Mms$2YkՖj9 c-0>ƀei񞮱!QT (߲B6MmzmNvvGD %X;-HbIo'Xc/XgA̪btlCRM-j6E9Q& rOw/ /;I,R$%5?n]3кjqɨqߕS=@c+jQ[W#%74ʂg*w.M-8 JlLdyczk`̊Sb׭1wmpV>5JӵLERZ--J-jL*4> 5ݨEiF) jR'afj)_ME[p{hhnV} iY569i2ߑ8UGuĆ]申!p,Hp;oX\u&4S V򊒧yt7P*+Qe ?(?Xʈ m:BZ3$pn`˿wnI!qGhBHn7Ҕ)+7q0MpQç]^w#t1AF-`+7|ZԒAgغ`CcicKF:۸ ^=#[xpLԙ۹Գ'=P0$o̸54}$7E&V)x"[nV דEeÖq߲#l@!x:{-ZKb;esjwDq+UڰȑR|a&94yTٷ9rgxbN ka0X nϠ5j|G}pBS -Ǵ[v%hV&MelzV.}:ۅ["+89UeZ^TfnDx/R@C2n+Mi۱dlJ6 ur#>0Ȏj}.] N@uxZH}˺Xb=)Cް[xg @d=a[;d? ^29pL!߈!~!*w }'(YvpOxn}>S%/5y6%I01'(lF81L+^9uYl f7m'˨+^m&+uqmsaŢ3$_G|'{;Da |^|8KcSW|sŇHkU3R8=/.1fufjH[8 &KS4ɋ&[*m饌8C[4.8e!5*p\\m s!Cb<Ň-2g";fcZV s?(,QWh^>ƒD--RpU0<*JKM)"StBOC CLWI~(z@N(m3#s ScIL-]}5zq'A}r~Zc|YW*L6]$hJ;:-" ֡K+oX/F(:;`OHZ?x4̎#0gz8vdd\&\E88l;g4[dsz/X2=Z9'DHq9?!K-( u ~a&TTYH %}Hk 9(]J#AtaOƞxڳ^(/d.񗞞7HM슛[,"HZ#;Vb4,YW+J;% 89`!S G^`ɉ+6`Wczܛoפ#A86/Q?zá6w{&tcn$Ǯ 'E`A_)$|Bjv⡮WRL >00yip>T:/OYa|4V16u uw8ƥς'KukӮGF!xY6ƛҏ9l%3xkki~|‘*&el]5lauR${$.@LI;=mT1Bw9 ?SC 褶B696}wa@ykxv(+/'DLjMt&h(˥`\8#I{Ub^L wMKrYu5:C9\-,S,_yў6%b%`2D9ALrH//g*nVPmHVn5v} E݉VrHAhV+k436Sɫ"jHnonF sխ&2+Zf,|xG1'eAE_`\GsxJQ ^!WVpZUKVO[,f\W;j `yJRFXD|& \e*Fdo|푥mf'۲Dxav2E ,tVMK9,c+U^sܳDh蹮% mh\bN{y{6|k>X` T|@ND' ؾa8u߁ Qua{>Q@Zv@7=lpWhмϮTݰMlV hFT0[ ͭcA[#HAA`rmWz~D@0T>+5wqTÙD߅*d 6M*aڲ:P5T/0ȁ`p~zsɦOZ,htHXB arE5C^7U͚F`~a{9'5,).W8ahQ槵2ʰd頻)"\il[Xqps2|z`ڐF]sbغlV52!3M$X=}]Q?u19Ǜngq9mD2g^mZ+!in G!@gquP_ΐ;IKs~/vtE@,p@pIv1Xm"({~y60Ib8b_gx"E6ofܯ,-[}{8rCF'H=R3Q\ʢ@F(-%ӿf,s] Lxxk7krmdh0NK9˪ 2QQ^O @Ѐke ʒš/rw@ ;(krie1KU" {8mC GjFp Q~ϖps^!uť#p{:M+eE{ɀɍ:YHR⥢@]& j_1?t&pHd*~a'[5pkHܑ`~MKkc$i`#:sO®l[ENo z[HH1uCb)eՉY,/[定̹e]K“~V÷yt`Q'jH0x_FYgm 1|^w` 0HAvMelЏg*)9-DEG*Iu{9TW?j )خwk ~ݎ,XT Bk1xǨ'<6U@bn?hC 1g34jvz T;9+>1~=_3\3B X7bOd1.',) &D ҇GLbGGt E1}2~#T."P^A*.] yc&/uW Btۅxtn?|%w~!K*0rȟ+~C%lh ]쮙| : E1Ujdk}Fs%;Ygf)H\ĻݒdRSa@.C/oN>1%T&gְ?Eݿv':48FEwZE*ũt&Z|.,tWuEUDҹ*)K^;[`nu9{D=1?G!tE9'QQ.]6kDͮM*E¼g NK 9wg-7GtDJ}ʣ#\ը3=pzTJu+i_ BX.%{C+R##f(aMXUߐشw)pam3{hlK2}w+&V&GU)&CMZLy Xmg+NoEwJY0\h8I'&dkj 9 |_O~~Z`n"} ?S I!?Dv?oˆCC4$p&yM xYTSp-~;ĸw'.0=t~Rq24j{+[bC![0 RĨI䉒h!EPVpLqvyhǧA܅6[s$TiZyphהTW{ ;HD4O|ipx GmU}}# ?fkVGb:pMRLCsƌk2} xXb_p } |hFZ4z,ʇS@ݞc ^w ^r:E ѳ Zc2GrPub7 zhJ-!f^^ʥ+ EV|MC0fy9Ye_:ֽtbq.Vo攋S{ftV<Q_ˮոg(bWaλ?ܝ%0ex=u/`8hj9J EMWGҮC0:!gɭH_bN䙓 jg^eeU*V#",$p& sDVM&ۥSN{bEV_ ?=Ա'UJ Ky+ϳ!pQwh;ܰURv(uaN>eʬ%Th%X8-*PѐAő=^pX{$EDFn22NZ;.^Kz]n&_*Tu p7]w "4:GթƼp"ɩ D˃^bfS|+,&k`@@ Mɮ9y t7RӡteHG]S<gus%$ Ƹ__@{{˞d@"2~苴x(z;b!K=roV"6JA8vq@JL;d3Ы6[9H'sۺ(ͳsJ>v='PeiK]5P&˼r򤉭\TC >XYkvc! վ,ZMz操is%ꟳPCjUJ[jwcELݱ։lX۾vz9ňC1 I@c?Y@j7ftZ1ƿH1F U|bj up+k)VhPX%ng6Ush&m[. O^ W Q&!+^tRح7:]}(#Qv,U"fz[OGD5_̇ki{M@4tT;hWlQ)ވ1:d{dqKF?4WvkZ`u;KᛸE wE\&oЍmtuDj >+W\ﻻTAN$W>K[Zenҡ/w7|"IĴ# G ,V"CML50" rn~<$UTj޼ȇ9zvuEu?Cɺx%a[P,u<cMmxc2s9| qCdC 8ւ‹Rn!& 7t|v9:zR7(nRHfh}zF~2lگ~ al5kO`HaP s y@ 3j jQ$?{W{Ku\i7ph'݇6e#NQ{>B̈hoӬeL$aN֛OS\\_yDhmƟ `Qº[Ru`''ǵ2'ءȘk1cM҈ xLu1 V`Ki'uP ؜t~Ԩ x">Op^?rZ=W/c{<3YbbM__l~4`߇׾ļ?!qЈ߅6Z~H[S*d ^z% s- (<&xxl<{gD[nt KQiтK}RŌAc=K|O` ?0ϖkccׇrvӁg:i2+FBK3-4 VňQߦÌ~Xd>[&D<<'/巵i]t3UPL,1\d998_L΋!6`sFXeut0iwU;uC, Qyv|lǴ\æϡ*Leٹ [xN&Оm}.+S-':|ȌR v$r*BY]@ 64s\ vfgtąV4ej'& h_'"5:QzOkOl@l]dH,2ZP'~cN%S}%,s0L<9hQgXlٍݣ^ȓ*>>O;H5U_˜ڽC|D(yjsŬʖƟm|UX7)>0m E!e o%/8+g z(;Cs?yFI%=fB nzuk"yTiQ:o!Zu.~͗s\.c LnYQntgeT1e}s_,v8wUtRi?ے9s'|dfcC6?0a+(–-؇ur-@T>hZ~ԿN1z& p_KoCSCeyXG{Mt4nN<=]z3: N=. T:ӫnIhia, #kpXi) z`팙{ DJs?x,Cb KM&iCM]Iv|; C8fg%rHb%I/Q|$[VcrWиϷams7OÎ ?X0joN:s 3:ocs >) V(8@}i5y/sә.&ړK#[L B 7:C>P-Y% A-#?AFA J ܗ*%}C?׻,I/oUէXn2a~Uѣblk';J$ǯO6Tkh΃f|ֿ ;Gu!/pN1FrDa(X߸?9p rK2?܃xpG!K )P.up2PRK4F{"tdLn @gZz ez1V;W"h:Aj?\p@(17݀1#r}CoBS}ze~'S3L2o-@`@z0b3IJw"kPV0-g\v0}ّVQ:ͥHG`>u` B lo^W?72θ^Fx:7b55Xz0JWb sB%szq7&]taR5~dۼG(O3 _eF&o@ucb͹d0("wQoesK0hgK.xl'⩦5H-:6?'+6,b%]?ʿ>M9k;`J'[#A߸n*z]F#\--z)nJw-łUl؃ymXeq<=uLLhDo,7Y3AM6`y׹S^ãIKsW(L]OkueqAgGjI줋8vW~pLiR @, qF"ۇ pq(ϵUQ-h <3)c 6^ңnoߢ&,'<BKeyK,2 ZۢbԽ|*_PwF ',:Ya)/dg%Z;|ҽC78yȐIv0k "ʬ"a=GPa{'Rآ8S9xH"ƛm5{Llʇ@yʴ։]ƷaG+!K1#sfp02T8]1e+ϛDNLjC-c-Ö+U]7=d:EML^y%t#,S)C ,=VM}hBvաV#!OY9J?!Z€#G,jD)Oͩ?dߖha~C'lF"QYi&%iol;u w X`T&< W %n7w(9GSE+#Spt5هw M86{$T8̅ a2*zy]2B}TN[js*7]2j24;_gu>Xlxk婯eI~/6iuI#*͜)6a3]BVGǺ 6P\U.*u"鞠.qD$o#[YU|h޼fF9=׸0bAYݨR"#iGݚ4e7K|Dbܿ [7 ~98_ *R,>YjLQDbB; ^u@3F d%a(."i338+a`+bO;OaAֵ*Gǧ6 Y7LHqJ'iEƆGx`xfJwKT_É\n4vRQ Z\Ѣs1nLI=~_qN@j|DGۮ7Ig-Il/$f =BAܱyB"iaAdP>Ohx0j{/&3\`^N5lG,BE*d@)[N')WKG v&oe`ʯr^>FZx b0*S *9\ >"+ ;9&R."h~^Ѕ_z#>K.1$fC .x/R8ӛFrN~0j|tw&i[{̎ݼRap&wWE.hv=Wѳ[ك!s~ZD㚙FxTo_lZK<ώ@9Ҳ]ៅbFi:#-/Q&i9 1/$*(,M)y6* 7I#;'\1LTpn${.n03 "0 J$$"<[S̒3{j"؋Dox: ֆ|q{.hQ|1i|Jt1qhͮ$  o/s52,CL!Ł |HUs)?Mw}U5N!$%2}ċ*h 51TI%890B㼗 }AׯE]6fY XO)e/‰/;B)ؑWdG{p5 ~[SςwF9RW94et@QƋx6%܌G:e_͊*g ;ďhf[פOTThȱyڙa*Iɷ*u0[2G"G_ɣ d Gn5[B^3g4Tf*|5^١ "܁oF0-{Lx0\k ߺ]_7>:5 (\+>H3ӤbERLm<Ënsj2vdpe`MMYd0 ~HI\nqyMPNnO5Jo)jKbϱ` Ku$zk׿%\Ws1#!rud4-8t̑,10 5C`k*"S*M8Gdw)V$jhL8”g8|% :z}5vr]ݶvt&}h b}v' |ޘXtJ&A#O*ik<:Ѭz P @V 펊L/ Gl>Ҳ9ʧwʡ̆{!G(1|2 .H,8GuhĦ4ꛎ^yMvۊLZ 9i /|F淶yCvR|P>9yruJ)~9BuWy\sa~-"<.v6븋uV]}\6Ub'+^߇ pB>Ƞ*}d7FD;x^#xcRaPtv!:2)^B2ֹRtM)dGtv`Km 1YN T rHDq>k6l؈&xRqAD= T2W9 1tocM#q6Gг:)LRBP"Ay`/O|JBkzjCLK,Lt>a67+P~QAFUj}+4O%U~ni؀A#fOYѫ'L[ Z94࿄:o^w8KW=}{d/2Wx0e]GơGЉm:/6]Dg-3dgƇ(a0ccvø_|*ڍtB^=Waꕄ5CcL,,ZATq\ŸV&eؘ)>?i묌u+jL ]UnKS "z:P0waS.JfoԟAxx˧X58}%Nàvvu{bC,tBErZ(at8,neAg[0S@Ac!R'Xdr$b0;ϦU -o|#/w^<"3rsqN)1@(^ !#9z7\#H@7*AbTIo#D`}_Wl067G8l]@} "K圚J<Ϲ,ѝ59h&)Ix#[S|Qk\)m@>Ӌ)BQ|iۚ] 2uES .> bLꎪ)8SH*gQu1CJ A&r$Y ݬZ:T Q];v>s?;p3K"ή* obm@NVO'U!Rj:MŠ8AD6yQk[')#.}w/u[fK@ySd➬}(3!1P4:EI 1,eyUn}dV> \J.'2S 5R"C\0+RE0/أb&e$Ts5JJ@62q6m{ufiK1| NbDNċlJkJ2uD5=yD iLhs̙9<֬|!#QDsrse1vf's ȺEц~*,/y 5 v S`o:C^Ǵ8uu c wdX{ H_9]uq؆Gm?wFyOAsF>*yؚn(P>Deߑbnȭ1/X j7(tl5l.4GbD?n%Qcݛ2Q,w.+˾7!o-!{Mg>!ZƱ/m6ғ삨Yz^r%2eW鴾Mς/&NlAJ<5^5mHNۓԹYg{sGJئKNpo*)ArhY48?øAw*=gzAuRrvɅaX==K>?7H`݊W%.,p$[9l8'`d:Y 7wݺP+|ATy/Iev'TR>PtNNoSqVǒxjq vLt1 DA誝]:ڈC[V֬^RQP0<z MgϲOx~{ߕ5qCJ|*g03:7c@!45EG~xa ]˰=yK]]0[fG)wfx'~_.Um3~تڍjiJ9A| 8CU|vWi1sf`+U0{_!G9O0qL.{M ?Î~0|KWS2g{n}hNQ ]$jD8K?:`vohS̞ϝpYd:4xҔF񿰑; `x<>WLciι'&bHr;"):/@ZuH]m!Gop#zA+ ܚyr0sLǑTynkIA6ȴ.xBxVWymGJ/[;I- q>+LCgC-P( s].U=TouL2Agr\Las [?h7e+B)b#"pڼTc֋Ssp|֏^ 3.{R. BX½w[M˓鱭q*Sc^jׇW{|l_rWBqX Ì^_=~M=+FؼOsB嚜nkX֌kp0^6_xo׃-I luH 3?IP;mqN?6CNy( `f`#6LټO.Gnr]6J 3q$0 ubo-N$aלxʉK *_/!,(n&Y늉^elv\X{-8&5G'2w #`nYӛz_͠:?L*yG`yڢ۰L 0 Bެ/BBۏݼm%c,L8#aRUq#dMݝԅ^%]$8lnG#=tQ-FczɊ54Tx;3;`!kaDZN<יOinztʯ9 jRlC3|OV8kY"^v_j)vv0z)1h'p*hCJ &>x9V`gh7A F*9 G&'Bf?[ 3-Eg Y̛:+}NOH(* +P_0|%„LZS0 n,@ݹw]qF!*pDhf W+r% EϽV!)j >M$t}#E>cKR1}ִqIZkz7T=i6!Γ̵y>sM>3wdžaeH= q4=%5͋.!jjD@B:jXJޖ4{[hIO:pI.n$-owzŠv \TV_ b.;"Y9u&LR-?U5I}mZT9U߸RP7,MM]dUW?.l`R:wV c &mŬ4_p߾zpΚ@ۼ_Ykj_:i)2F&MSt&iRwϺgyirATR 'zBh&FX"o  ۳Hgv'd| l& 4dEb4ulf?ʤ c՟ ӝsHzA{?p%v[xa/n>4^gc9w0tQzfQ2( 1u@\s b(C!h7?y;1-t@%W HV. LqGT .Y274ֶ'>YY BzԣQZ])WI0Yx~;\D2Z9ɎIEx9Hס<N)t倷- U? 1:\s?f~2kG? 跇(j}˸̉$DhP6m&DӺs;g zOsxCӶ ٨դ =^S" B8m&`(V_Xٟ߱#Ayjk?L$e{m\ǒ@K#Gv<I7+T3y4y|xlLjA&*8XeG&6t̏* i#fU * YKձ2SazRwl2kß1% Lm5NT(h ENy@pBeKR74pQ_BCSb17Iz}tPXq~t53 GW^͈{@ʞ@S;wo31~A(i'aiYC/+0nG"St5C,S>}yFzٍ%1Q=co~k} k1Ee (&Г6Pd $&"bE*@;{u ‰j$k\~0m1=9 ljՓIG\W98JccX]G ],Otw&]s΅D6;"C&$N /"ޗb*ɥ;:jnz;~M.,Lkw~wOu N`$-!R"W\gPѤχ3Yv"4y.-!W-H; ~}*$*t,ΖM6g,Nƪ*8)`嚙]~iu.%{=ErbUM_uҾFif*?W14љ(>vmSG .m~RƬDggh̄& 9A#hMDZ_9OJb/yQs3XfZRߖXS޶ds.gX:lZŌPO[-6 "c҈V:SuI3 ](\Z:rDn;D0FB{ac{ fV,oBB>l!#}y!02$;ӺROf;hMP2/g\pr,"nG%; LX <:j_3hj :zOamUl$gJDVatRDfJ+fUl@3E`:n2͓0=|ܵ.Kg@!S[gfǏn?mN$@LhP6}Ӟ&Ca"o]4I!eJmBR\V&y^"K!FB \lXZ&m~g[7ϡv/cC研;[̂  rCxD.G8RN*G" m0\r8'@]_mdN5cHbk"osZ!k9+`n-6MZ |*hQ2к N*>{Xn&e]IVf/N(aw;a%''(=ZSU/9<Ki<*vEN%?jْf,f58n :[s<͎jhc-_f2--\y X"KW6VmA 'iB 3p97%áx$,Bhi}J2IWc~i]]ZZ7u( U qn!rkclwwkјa4JfXT$iՍ*0QIzvLiwB|$6ʛ76ߞ4徼okx$!;=QBH FDY TbYߎ6X9V_1& JM!&y "W Z" d&e!bJb]c&Y|ZU(!0d~.Raxt 0r3Opu@ uK0W@87|ўo t`ĥCW\y%XNn2ܭYDed2ٸQd9Mk;X"KN;F/)ޞqgQ^`, u(w bag3ºO$AZ!4ģ}YJJ} ?G৩lqZsC&\h-l(giAR%i7<^cz/gASQ۝zAcica9_B \:}QYhh'B!-j:Ӌy"CA'}9Ҿ%&iW=qp^ `% $ȊqaC\D&6>&H' Ϯ-%]O*$ jF#?v?G/`)gZ " Wl&rvrL܀k,2fiYBZv>so_}>ƴZ!H ]Lk X FHZT!JD)^"E[jL&@u.bF̰7B73@륥!dXncw3GQKۂ`<ҹr9dѕ18g ա>iig\{91=_zٕ(g]T{fX]<@( E]"Ku6L/K]L)RЙ^7C[if3O58e~y܂',,!kF"8d[x`?p?P6%-m.<H1}s6tO{rc4-G~ڇT F+3\Xlߛ>1r&W`I:Q<*>Ivgwg۫+94CM%b$_Ԕ0)@up}݄HVpݯQzMF N!Owė4}D 2V:wZK"m r4Fm1TwSgEk^TLobA^%8eF=ekZdhZl'AU-‹p<t{Q[nz+&R hђyWk8+_wմ]kv֕k;5+pt]B]D]HOjGup aNT30e-.cG2%VB}Zݲ?Gt^]wd _t}#_n0I3txq+Zǣ^ْ|3?e,Sgta[?)\fP@sf:*5KXs!6c"[ 3e&уU^w]`ɾ ;%L(yp_k`'y>vb+[qLaЂG%E4|D#-Z]OxF-:Xh,>F TK;Q6eYvxe?1Jg›mUk|+SZǭK3YDYd[;̗.a,<W`fXC;}%EۙUؒuRCi+f4&zG4NTA'S2鹀-o  C[x'JùaGDpft̑Mq lB5غek5ܪ9u'6R({T{rQ6!\K= vLXq^4aS E$ׁs4Ad$Xᇸ.uͬ5xġR-UqF}c54a*** m|ЉMk #I]}pE}Ah=3:鯑T^(LӋ_ZZvZd3k{U#cWM==?M0vTy)(p(M =M{'n4хTd o|)q+,t'tdbg?.ԛOQ +m %ҿt "\U].ndk`v#qhxk/f4UrԈLȰaIҥB¼^[NW`nm'Ǔ)J׹ADT;b2/KwT9ޑUeG] C|-Y}Qp7%׀:=u%̲4 9"9 - =\m؞7%axBuJ0-Y@O' _VX"A87:NߌpS.'F:x # o1ZEHۂ#ii\<%Xc8X0.| ǜ E J]΢9}f3-Yo[XVƖ4d)uOé["[IJԄ7O$ )#\Tk)!/K-)?h!ArHw}i%VbU<F@&}pja< "Ծ4!|Xٵ^9HLQdJp=XףkP,0%j.0FgS\4C>Ųv=hVk R'MY{C.Pʚ6 AG8 >Q ]ˊͮX%ל"K/Z+xo_f9!ueu'#d<@ ~6͵fX[ZV u;+IBFSg??,G}WP6%IDڎQ}BMi[[p͘j"Et3} Tiת!^?Vx̘:jO e jS8@~/Lj@ 8pAN0(ygWјV b]eM7` )%7E;E}g T0'_o9WқMb (<ֳ>350Nٷ"MMc,%;pT8r]~LUV_%Kٌó =AJz~wx4hDg{,xAph} gC T!~]A,;ip5:.yyA'ZCF|A0>-Fg,uZIM 5b巂`> P6nv;Wh2&%GB~+qvW, cF$PAּ?V(ln_>M{mx8ďy?n_  僻Fy I%vr~#;KA`u[OX[q6G㢐ztuTBF#ʓw\+@È |V̹|FTof]֭4fTe5 \pY:,%6TH6bK D|$& >l]>/:Fi!_[͊\[D_񵘛斔WҏOznIjю>7_m9BRwoX7`#ڬQf,}3{V}EQq˖T[I8) uB1˽^tz яL!.: -3{TȢHv=(3- oh.jU~imHP-.7Ԕ0LBf `z{;4c{Ҥ_ꎙcBM'ߌ/`mS(O"YPI ?}+p(ơ5`(d32(=d|zBJl0on&@PKkiξ5r׮Z>7o$9$fw B44ٲJ\ҽfvTv49(78(;0y4\xNMU>J-M H$qwEfƅ0Mr!8Wޖ+'%\єM^ C\@Q]ɱ2]67/HA%G@)@r?*#8wM^TdȳT#F}w-w7! j*wJ9Uޱ *o4sy/̺}T-K]IYSJq5ӡ j[VJ!-`p9KkX|Mgh~'25VlH"b:3+#&W Nr2?vU+[?KO8•/E2GbM;F@1n>2J/Ws.1@Rc$ W`ҕ˳jzd$$EᏃbGxq*цD͐Na[)m;qW5Xtb'UX@7(J)"ŤE%y$c׃+G G: Bwn~ֆ_3Skz[Ɓس0) I}m.s=?ƉVE^viyb VW%'GEJ}`!u?o$}j,O~`9I[ C#*N~Hwbn'cϛǴg} Eh.Y3cb [@^i^|{_h&Q[%wr&tfpƴy$=퉚΍S/EXC9LjgN'0S%L6ԲFy8j%6 [gRrW:Y|A@7Q^T&N6v/KaJ/)m6f7ȑP?n|ԓf=܆{*c_ύ+_ W읒ʹKx\}[FLok;juEWV MQvru0hi}ۻVB^$v[RB` w ^/Ϟe.Sӓp۸T&;]؊ BqĉC͕+n0DJ~ lbzʩp^e^|k1-v@ B7y'ꎶgʧuzb~ZuѹA.FZ,wR ^{"r/iԞ./*5I5K֔j6+!.C&+v\q|\(q aUr!94 Ab05Γ5_Ex5+и;bޢ.àeYXYIqB~'paY#[ZvtĪ'YA 0}9k|:׼}^YBlmq˨ʃqq疁h/ D ^Cr4e~ݗ|kxsRN_4F#|(4}pt/nwmv:ڝ@319?9Pxll ?^Lp yO_B<A>N759c;R.&&553O߫ΩWV0RJcY^qoWpʡ?5Ů.+ o|"͘q;"1Y| TUSR 캊LIq)ChI>sߊnoKeܥOaBC:M0?&4"dAr@U񧓯שR1sK5ٶ[?GxTO0UvB\?ϨS [x,oi?Z*P?s ߗHy|Sp;H[h['?8Uَj1l!+i$DO$]kt*}hP(r(ILJzBJi K#SDx\>, pĚUQ{[du/K:?MT6%MVy;)d7E/v (].Mg15c_P2Ɯ9fKS(2NWBؼS)m.otS8Z_zEtbkMipA7N(fф&$bJ,.K5/̮}g~,zz,:8`" uTd?]$nU2xZb])ۜFK,ګ;8I6~PL^"_'La</d^DapnP@(gk2ZCԲnsa}/P=E1dpI CC5FVuHIl=?…ƱRU8Y:$Oq'IV 2\CmB$1 *iYRS%=䦇Pob&t\#ɪ6d|r:?m3{dʱ_!- B4 >Bo "$E!0XAm_nG}Ldv6 |}=30B`#J˃M΋ 4yO0=G0Qغ{]!7L{4(lީ Tah>͹wTaBC+Xhf5uծ+7ۛ;،c#-#gd<7c s$AgMS'MjvG/r:?k16՚Fw4OlB"нW[8c8HavKk*i'SRY92jL)퓞O;00W/úKiE.*ݩټOM yY/C]Ca@RhpbnKRPIb}v#7OMKۧ\Sۧ_Tc`9Dt;?7?1=砌Yv`TQydP2hQ~tޟTāǯSgj{ч4Y ,{pBtQnWI4zv/S&> <'hi<˙#޶#ɗ5"¸1g~tJF5ulHE^2 B_]^ v隃55DTω{F𢊸0x9iTݡE2x.nÍ],i{XC$oጫ'nBuH9O ^pyQP-zV&c KZ|u}|_90k~a+ڕ3RcV5pd #*o ջƮɃNlbܿiSfrQtn(1 ۨæfwVaNi"_-$َ(T)Mql(%ADZbFj/ixj g=Dwf_{G)jb{ᥝGWJS:sQ _ {.$(%7.Ɂwf8Ff0#-2@Dh|x+4׉]zuV WXp<Ƭk*x`d~}(k:>ͩV)b*/K !(6Oy҂N CcNv} A>GԎ{2N|GBsL'*7wpu5[=lVi* b\;05cU-?&+"Fh:1k[,/Ls)co1mS¸5s~A93Ox՝k6(2MH5+h^\c0 Q_t0$⍥H/SwI!1O(1I걪]"}3-iH~H\Kk2z&`3b;66GZld{|W'Yş(56R "vMCMc^ilOX'x.+_. j}Xn5}>.'amI>]ЫGSwBO|j mudu[l%N|1Bv|jCi KAӥ]C4۽kH(zP>) Nm{Q łOlo4!΋6e;S O|M~ƻ5u 0}lFG|4GS~RԵPC֊.,8@|Zrg)vVp~iUʫ*ևTR:ۺ62W}pRP#(EStЭq#il/ Ӭ@Bkc4>LTF#CY|İe^EJzِ0V +GT4W OZS`^ )%5KGu}[=s|k׆6YW>lۯmUՁR}2&{-9OB`1G8-o&Hd·8 m/>xMp-wPN҇Xe>0;D[5q;7%=;G̗Z!c}/PUI`xE)i֞SZbJ7wv8kB #i;$2IkS|T% #j'LJ_JN\PCdktKyGRl֖RI" Ȼ[RXrb85^؍>RrcIvL"܅9{ڹ lNxs:6hnNa7yq*qWo(h2*gǰ_KQAf02$_5*SWfnRW ;a{qiu(3G[LvXm ܸzV?/K.^ ٹ)ÈWl{2nj0?B~8TZ ״%@Vmd%rzi,/L]KµC]6mP@H]=WKV<=|#@Vxh|8 f'kt&glەAu'ƨ4dqah\qecѝ/鬄Y+_*=CzeO(86Bə cԲ9=h0Vt)- P \h!KDžEH8:?,^qU٩Cʅ0|ʃVR{*\.@`YS*"JfU鏏 0.Ya'}cn7!CBtN (|8GX? n87uerƒ#A/ V ^{fJ2)\wiDÊ{)?aȃKx;s ]sM8CȎ_tHG F "\‚uPɟ]| .,MyZX>ԲۢMpޛN;s4|O-ebavu"c=H *RV2]R7sFwc]NwXX [vLo"EYFфwrbp. wО'/@B/&SN'Bz.ondOplȝXGކZ[O{w$0X~3%jܤ,ES;#r֞^ %hʴ1+Nabl.d5RX=]~?*!C+b g.? ww՞{DNLar1iPk Ű`U5:v72d1s-dQN<\#$-WJ-Q:T(l9`Ps s?Php H"^lEv3*;Ѣ.;.gҗvxClGmxw,Tn9*!,BmﯩQjEMbm-0T~.W}{Y &OM}hN} 0TKcaT@UwaY%7@=v, <VL5zk\+'s'-14-k#$o=RlɋJXv$D$+eU鐌9QTf v|vjwi3fpgęBI+:H;cX*x;׉\pW:+fFЏ m=qi4ɎV:Rכ%0㞈ڇ7zu;g*Ձ$&[ILέDa3чC4 3%R~>;TJ 0yn\ > ˔?KtԂb\z|jj5".4}n\ %{ub9%Sh.[SmQFF7l11fb[pklX (ݍg~sT)SB\/S:}vafu2%Hi=a-Nۇ3" ͱ/TlZL1jŢqtÙswXHg;&Y@O/@Zl?8D c߇C>({=Ө׀%,ZKvby>C{RЯ:v~;23 a<60\ -J:"A#GÎ/EyuZjVYMlD DĦl忦f 8.fz'/}`f WNl̷سբ`)i|=Я^]}-gC0~ vܿpL4ڭ;her1RWFJќG 6@GǶ8QbhjI(~/uFOkv*y02|Qe̳5 9U \Cͯ|Cf1 g!zݠ [a`L\l(6*eQ<}nM2#iqmj3,`b2t]ٞzByvC2G@OHJIyApKr^!'NnZ{*TF(j{֏6Ov)F(ϗ9RnXnStBfm?@ p:"~/\A\{ZJ e̎5;QCBOP6G]3'4럦hϤZ^kuZ&Ԧ\Jl"r -lJyggKS!SWa= !:ℇ5"ڙ73cW_wYȁĚu+{0or:_@Nc.bs>%F}lYYxe8y*,cc!];h@yV4C4n^ixʖٌ$% NL:.G<ÏV[jkLi߃vDrSKC"k`-Mobk{cbjQNeHKwR*ݍöA‘GGVe'O60"QOx$/N/yh'_x4 zݚgT'q| kIL!J(<6]|Oz^.@H51d&5pIа@\ KD.{LE$ì-ä:'xE߸N[Ǔ:,dlγbOVha=bc,BI݂ ^nd M.) B:8 Bf{DW,)oaaL,GXmKpۓ(ۇ R6g5ą⟰<hӧPt7+▫e_i^zv諓6>y{+>6:8*sP|]w 0ϹR@UwX%mXBZr0'zN-BR"~KC%K)ޖ4/ "Tv{oxHe[˶ ֧E.=FxtIfSWI:L%9 ,_NٴG fz:'}##~rw'g ,eLz1_A#3'y|qlcOt@{ U=U uc/>:vfjF+՗չu6>aCqPBՇhYY("cTqeТz&*v&s~@'A&`0ji85w\#j˕{.DPxcqgu4 _; J]U+'RN9<; TpŵcQnI#6 L<8x˹;&rvt lư "űR W@M5.W+ƮFr?0ϐZ14`é/銆MO'CP_-Ux f 8-ju:>_d޾ǻ?b1d8x2[Uyf,KU$F!SxLSLkcjr3ʝ~LޠSnN\] W}h.bZrq)LLJe㲼<(?pQQr`+ .kO0PR%'Z6C$ȡa4縦@a#uKQ^HHλin([ /X kRe4 yJ [c|b`[ki v8< {5%5Q'7e@!Ñ4go$ej %2kqE, ”i$x ǴΧYdڱWǔʛo#V3%$Cv*ts6>2VX6]p"z'T?{bdzc~Xm"ޞ:h|Z=|ifn)!BOG6. Uq_!vv=6UF&W/FI@vrz{R q-ZrWNg)Lkn'q!./mؘ7bFfdv46HbI"SrU)4L* ˼,-i~(u:p:5mP-z;LSLLugfmA3ΜfSl;|$x=< DVI&càp9812`WoBLKT\\kdH?cϮW$[_8LtP<̬s,<USrGI( ;`l+rsє9AoU ׈ 3mPyHekai޸g̚inJ vmZW'H$nt=.oaé}`Vż Wn/)éNC_ M8 '3MCDis}^2؊'T –byq쩆XHW-$D0q )"(y6Ç5wFKidh~(E5\؜oK ,MWBA/DgpO/Ѳ-.!=C"7H? 3 qyӪ,N&@8>ԭ^ Gd9G4'q`ux/gV 4$~+B.Jv]Gi[2E i>.-9О~W1g8hBqI ^Y1V,]Mﭵ"xWzɟ»#x[ S@1$s!^P`}g1eonfjK>Q1=p& z::\qKMOWK)<[^({ . :"43zŵeWȖvM7ITGw8"v0z,$|IYm7$hJЦf;r8өqv]fB#_7=dK%PX7+ho^DclFK{8tlsEL%;a7#?=@5%pq?u}I[%4rUW^L-'*i` Vu^&g3oMؐ]z?)Vzc^܈σ=τIn׈crK&s5K]Viͣui.O". nGAٜ?eW)3c ocO%oYlu޽U(+3,Z EUhoN^=i=Kk_5b#X$h$ }/: 0k"&G6DYaT4D,עs.q>ձ>tЭj2zL3C^ՂK ޺U $^@z΁!2q:m!Pk]K w*eo;0bbZ(4 .:scXvY,^+vc5:IW#QOzVRnVs–*b1h&*&amN)WjSị(ٶhf_%: ̤#Rx"%ou7r]$wR!/u A]oY(a*rVg.D -NB4  }2Un*֨a蓈.>ؼ6~u'NBeVbR/ Y_8`Il"rn L;phS>>bvOLcBN:)XkTg}kP#SUL=?.6S(R%s:׫z@c V%|aBB^c [gSa0=}̱Ǣ1"M8$^{E ve~]QG^K7zIah,t"ZH>Z֦],)L/G8_lvQqq%M6p^B[<l)VDMz(M<!r)DAMI'޶`d̆Қ#B~I)'dCI5k7/Xa͚r{'4F"Ϭ!0@>vcɌ4ӓaX7Ǟ =G̃ pGU؇=EL =W lw님;N～Fom11GPxx' .&}B/g,lkx$Y/r'< sA Xm7O4Bjًr_=N'z)3(-$g3V7D&G<ɛ婵:*N`0`QxB0lvH."$Dww7*5kZ 8_l~`?7(3g?D]R:\ns|bO`R/uK'/U[(qF ^T;a)JC8AջޭbNy0t-$bïM,A>4t!UqAz 1jՂp9/91EghK'ۨMNMu0Br'BRW)8?临&gnO¶!"YzxfI&Gw9nD+ SAzJ}(67Q8y\vKI]L܅Oab<6ʎH캹?_䲆Avڶ%b7_ʷN 8{?PlGfB,bfei-nd&|viW=o45fٿMu!EW; QS"XH{9(#$Tko2%rU敍,7IQ(6;!#$b/3 #!\ܓdۊ%1>Aa.9+5TH;Pe*3K$x/PF/.CH'XWjMq/SE_+=! puu CON: 9TTRZ>ֶkܼ2|ӚM,ȼD} = B/AomYRRb Z5#My7/h(ok _009gɟ>=9g pv깔6 ]-=ͩ3n!))RW`l+xu+fn?w]f&s u[iXR&IUiIy?ynQVP&sDZBm zFV8~bD2 P{m)}@a<ՕkR~wFX8'&:nd}MPOq{24y ;FfTL& : }~ Q rd@裚QAk9/Tn;,hu ͵;&-oH{r_x )*)S~^H b̚ga~Q,ߟJ< >Ԭ̥ˊDyc%# |[N3+Ǒ>Sl+tĉF ٕ/t:g)U.1}/g5{3{'AO򙨨h`#zkGi>ݖcWS*~%2fZ),m{y(g6cnw=>jzC^aREyo`1.~ lBP*2>ֱwkEBE3R^['W88OF֜+敞9:|sM+guF̽>JiaD|KeO*9iÈFvR|V)7t+22O AKLnHbRGe&!jh+)-h"0ՈR%.5 l̩dre!т<ֶ+ʳ`(=sH{,]JJr xXլr~m(QH>9zPm NfWiGyF14y\:@M6_:f7sg]X⸣x{t/?8d;ulq6Τ8f&+]^s|:TV&#i Z5"-p[,e'廉`[;:#q}VXOqjD#h7gQ4Wfa˱ cJnD9ļxamS:R< GlkCv+V킳ix&)b/[Vn{;Ytx|^V̻ڝiA;H?Y,Vfs.$}= ,\oLIvvj>TqK(\CttNr'gC`~/ףQxJ{ )+hd|O BH=<(mim BCeR͒e `\T Ծ`s_?A!|UuI W- :A6&/2G_e֪!{3"5^,W~@',ֽ&QeFU94tZ XԌ0:1 t]eP;_/V+Xm<6' ueFW?K=D1Oc6Rv"3=! E,Y]9Xi,ujS ;ƥ=fY/c`H՗J >il,| { ލ|݃ ޭC%b Flԫ#=a02Rc}zQIuI F#^H5,)dO{H,H|Z3T;xiU# 96~惯+o3$Љ2'S]nd ֳ\}a '3Vr`5rb&vw]#ZwRДGMw-0g[7b<@S#G3: ?В>()15a介j8R:h0G-Fm*/3$MQڃQȫ!s=m]+A;Um|JfDnW8y`\(=_o(\Fʖ2#~)M᎟ǟ1ѓ5Fw2VP{Db؝飥 N "gR:?MnifSQ]=x܁wE>,s H"V3zFy[|[TDba]?.OLkQ뢫B?.Mf凱U|evaidDb&gͲKqyx+1uG;Ym3=VԅgB_&o^(jzF33*]"~%x<"(+W۱˫:1ZuT O's{XV34_u:'cX xK?Vu{H $sơ?Ut8g?P&B }*X!:Mqڰ.z?im_2;{[ Tzo a2)L\*< IvOnv*pXxULKMzsݚ뵤˫K9` G1XHXzmvV$ZIV. Ʌ]%8{ JJLػZo 2S뤦/QjJ{JqҌ3Ӡ)t{ ? ]qI*Xa:X7㩬uHK*vlCg?X)s^^llX7/K9c XziS7sklVJfl-F`Z( LyNqałkOF9٫DGh7o*G]xBY*ͥIuoOwn4O ,?!d%+ܧYXI39"#&fZQnyIwRʘb ^}$'z., 'sٯw!5ٞ8ra.> '9WV֧hʸ_m_Y M,!*$`U?:9/5p;ZL.-} | pGOUټJ-zh7jPlLGGZ)6^oc? ! ,1.HrI'0fa@Ÿ%QD/JeLAfc^./u-6++~ģuf{9.CnL=&e8dt,t\UC/XV:_rڽfǟWIL 49c0#kuZRbKg7 {Q(}G#T3Uե hp@wb+uG :crq$bYH)e쉣hGf-6{@ÑoLAzJr)WGyF0d&40]Fﯽ߬q鴌&f(9/)!KcbK\mD֑|&3JVlèA{S59]G&5Q .*k蕕NڹE>jkPϳBճ&ЎAcl]O "**r_;Ry)ƟM}PF &iT+2>]R~ED_,N@MKY+LD O(=.b;#<*: ;ìdǚh!uuA(bV+mO+KjQ"\Wt!Q#MWg"hs0(/:ob+fns_z>ڜݠjߍB>m%cc Tݟv'ZxhRl]Obq lLH1n!ʗ<*@e5n,ytwRLSZ XKEO/+1(i̶%jcZ_a1u MY8@ZʭJPYsM*6S];Bc!)|6Nf4tvKzYD`Vˮ.5o Ulh!<L=Vdh/Ae.^+r1 8uo18r6ppMy)5#daܵ隀LV-FC`sGI͑dϋaĞ[6Ϳ5 /OwlߡHK7ˏF q?^cʈsPl@t^Jj~Ջ$=Mϧɪ5p:8K'CHWԼkGPf'(b^C^9 o&w\R]ڞ0nvJ ]fjn1O^hX Z]c.LA[37$ޢ[:n|/!i/M;.ZUT|O5mc)$b-b-= ]_<%=UtŒ>JZ~=+2e )+gwe2V_jJGˈq߁UƣWQ3<%$3s)d/͟ӎRX~v :^huO+e(X=ӪPa_p䪟 /,)@ϖ 듩0[-I9jjiTGC@| Ax6eE>Q~tˬ:=#5;NB\fMN#OCmmF$ ?)"*h2u={sD - YݫjY@C[!NNF`XGLkcd %7s幅Sk:c͙S/s}E|?v#:^._*%8v(AH5~hp[0Vo;TapXY{ q\$J %l (WQ$dv OAL]4E]DF2^щ.9x+9B|z,V&QlA!sI!€UDF|⍱=PAۥoڹѽS=M):]h$\}n{Ԥ9Rmk{La0,X2PQҩ>QmC.իM&>5c* % T8,'}LzIun>$D?.uu ÞS+b)a-cKP7&= <ͫhzTF60`TOdS@JP"wsRRU}X㴺*B _f kIg2jͨq]nrD^jáel$)?f!dHU8dh\1si[ɳʃ0  Q144_8a$ʌR{jJC]畤CU)mjtpxOeXGPzت2MC9U0(XDݣ !ږ 'k- * 'e!nX0kx |Yye el9̖ HO%F36?ڃGI$I"r:g=+)pg ̣5Ny{ 4$lFSW틪nkB/ADm( W2◁ѝ¾u%1ObP=;:Rt]Y$S&OPz>҇cES!:ܝq#~m/ n-0V6&qyz=RZk쇉1ꅗGj嵒T>ӶW YNʚle56VKX Q%*`;]Gn7J!z LNhre)75D³\q`TzePzd]fTb/ar$wUġ+54( t^V/?%_j2ggAZdrGAss${\:q: 'H/Ys&;U0ŋ}Zbyʟ~}G'V((Fw@;/mhs{rTe$QKYc&śP/!NcehSQqn˾?nɧGwOϮ}dcX)vKbl4dK&UN@`dP-V]j hBg=hOlHBTS2pXVYL~Ui7Cf 32X:> T_ctBF|` .k-yԻpiV9=JVvdєZ"]x=w!MW^Q;}d,NB3V)7HR _ɉ"l%>fT9wp{ec9Xd{8f/QSU7@"bNtDCPGPv5rC*h+|aXԐw<-ВF7Bk)?!W&5p {b6C ?.wDiun琓rw%x=<sFj:s6DXz]44c'eyDžk'1OKw+j!JۤPf>}K=t(4vl=j1)W:%7&D'n_jaIv U1R-iT-iDQQ+0 O񸵧n8:GƁʒu RК*( w]mX1S426Koՠv98i TIRy՟"\"hhj0B@ǻ97lxCNJ8fU9:5 Y#TBk`iKk}LNC/f *$J;nS0#f޹ da;0peI "B'φe\,A2Q1cCĦbJDF/f]SGυKC}mcT0? {~ҙb]/Z+3HD[#.`ڧ[48=Gm r70G4 !w@ūѕw `s.^g5'4qȰĜIzgح]~`-w 5ƅuzu KlHAvG5hW+7JvmG̬[jH>-댥u(Vc.]ySmW*#ޅD}.%f!Vyݠ^Yk˪8[$en.]}6q~os=M(Vz-&\,5˻9f@E#V$#EGE(=QNg<"cSAu۽#8%MF_x>^wgL Uq뉅> /~7G^DM;2śN~mmʇ~J?tk:mOL_K_r/.Gv=J HW5Ƃ8_BhN8]9 ĪMx˩!Ѝ ۋ8[/8iM"4*\%mHCdyC|-8mv۫,ih~^㞲^B *JFϜ἗x-.h i+#Ijfҳb&0>u>UD$K7EUtX(X؎Ryf9^ð:v_F9W Db_DvТT (4{X%""; "bbe6M#gplyۥJNiQq9`¾6Bt?&.SH$h\8}Z<+,$ 8TINkd<{eX? "##DឹKp=}0$7)5#p>fNWSK.d r ΋#bg#LD7# Odqlrep6?|к"+WMߪ3<wS: ڵ{5['&S޸d5P`3KU * -* pךj/x-,`W1Z C`ܯ@7Gy;4 =M'A`cdon{d4b",tyGdC[?2Y.d*'Q>t@PSFx J[K@ {ws Bq}Eh&~D&O>ڂ \3Or?k\vͩK?d)H;7 +=+i H!>rg]1ĴGZIEY9ۃ9fWŠٖmӢ31IWJ?*cp%eVXfv%|Xk4.LQ'iaSy=3}q(4N""uTe- aj?YBuAR~|\ ꅧd.s«醐XoA7]cpՉM-Qfk݉xNd+KN4(+X \ȼGi7҇bH=#f/|Co,Bz%+dng[-hk>G9S=:o[JYv#`Lib[(c.^NW|LY틒Maf/bSi|>2=tZJn&̫,9n4AQb* : dj.Q{ a{̌*IIJ@XuQ3l#閯SVΟ}][&XUZ'zBq{vGx03tElWkFF.X ^&h(n1bߩ~9MT^lԣNt`Y8lj@+hW2wk&? YLifmTϒGe00A[n{Z`& 8#-_N`g#x?`#PITROar0Zv D I̫"FxXlYj32(m8=mtD;Hg[*5< KWԩuma2it(/*w%"Um̤НpXU7Jõk'^tk@1M7⛩Ӈ4@Ȕ(jwzLDm4, ZTD{Dec󻭲M=wgʼn:\TǢ[ap0 xJ1=~g,/$IxŊ@U1XVy#.U][3 z!cQYV>ۡFPV]`.遨%i'0Uy~<O$ !UᢹJ=<AL^68H #Z*5N "kSǤOSGM\n?,>=5GOcnѨa-ckPLY ٰ}p}e'*6鵊^փ6?Q&]p@V4$Yy˞Ir!&|χO;`kNF7Kj:TCJug&+FH3zNz˻1C9wzZӯn^E/tBq;@ -b.Ɠ|Qi7U|1) +T=m3bE-le%t"/mi^(bwZ(YLdts<"6M&_%6e.)C ,R?Z!(3P۫`J ^6=(Z@EKcU5<H|~J$Y{@P2˄Phlփ`Ԩ讗6K9Jp:slqR}w#{z&2b|^79=G9:b(Suf$,1hT2A*8o"&s:6"+]6k2ȭd.\:+ ?rF.U9e_\Mwʋ3#]A0 {Q"Ɩp i#;EiԪq$3"{ 6zCӿmGRrm#D+7LZF5X~+@P|ۗer1?$iS[x 'fE8HKI1ꩴc(!{M^ʐ=-q!hOG-BM7NWb}bm0\ u6;>quq:А/&F`rCH|v 4%X#j3vӹ,NgwA3n,b'0}D[aV0qpx{Kl;5vb6GbU'v:YT4{|ñq1s^dO ?x@zgT$I7.?z]Uu}FXYhF^UaKdNЁRv;hi#E|WY\Ae7M2]QbV՛=T럵Y(RyEz9+.9 P=Bs!4ʲ0}zD# z]D}/%n_A㺉M+>F`)X 8R͒(ϲTg[ *vMхVSST֯loMeGʏ>]s(\G¬Rd,-Gw`f&io e Ӯ}5:Oin5 Zȷ yg[ʉ]7s1UIa0M@G>nے(AOP{S'?^,jxAWۼc(׾>҇!:3niU,.m~|$g߾*#7`ES]m'DC8ڈo(hӋ'[5$665#4# ENhmt-UpTU˅(jsS5{lCʖ3+% zl~){+iP3V'iVҫ,m$gbqcZLUu9&zֿWWO(/sD B.gUvHLŴb1-D.rKmfkkf2`n ئ4W͢E஖Ϻ{L1gh#AMFt uH+Gь!5GC؅36ĸA`ld Stl3$[$cH}@(]/1ꪻFe$Z! ˀ~ߥxfv-:Шj#B2?aHXHvy0Q[]ϯMU%$MCbÅGD Ge`aHu# )mOxh<.*OsOhoqt!Z&Yo4 2>ILVrQȞ߹ّyVbbwyC|>]ju,olўA$\)jw'ᠬ#{ PWF)LS֑Zy V bBoMϹI=_/"/݂ݭ$+z{j?0HV3EZG1xW$ nݮ.#y ذQ_#ĽK ;BO*yKX}1S)Rը²ɧ,M!/^&,n+NO+07:G(r2.L #/ 䙸17 6`7\Btf[K:w<< GfDbes,"py"ze8Ukie[EEW\w}]ޘ5􁽧Ys痯w/=q8`,uiSl-w_l îXuZcI4ŮN&{v66b$?RpňJ8Q&ZV+u~X?&OTA[aޏ\ ul^"Gr6fROeJl77?*_÷Truyq\wg0_KV׮uTv,D%Fx]ZP#:mScs_ɾStC\pۛ<{G@sVj-W\5^_,.VNw={qGIK5,zkD"c4A ;֧y*|4UoX4 V4&\ n=SJA~`Y%7ۜE$Vn obtr_G=Z@AR5MdP׻   >:b.|TǤ<)pH#>Ntl,fV+d`\Z eDHls4w8\q$QC0Ycڿo9,Nبf֋SsCTٞ0%3/ 6x?7vCK``|؇^J#KfICw3He6| 3X*[tZ$:=4K;eS9nzusz|׽]j9-)zS}KF ? = xK?9Vp5b:!~Z Y{žF 3ZC]GE܀ GMzH#!H(G!+RVלpfU@Y/랶G!8-1Z 42:1ӥv2 "f[^qY0-'6FPt>e[{jR!&.@hإN#oW$0ZT>|:5_+@&`΀ө]9nس7c+m`5!,ГƠ$j&;Q6$ >k_'[OJ0i I*D1l1fIzJ16].6b5ΔWG'3Ts*vZZ-ֹar}>CgvX :m"ڛ/e`xڀi[ qhaB[[ |O1[8-9Ayîcl8y![%mØXg;:Q=Oo,lsiKi;\@[%* fzuJ]^แ"U^dRwj LH9 ˓7$-sGJD9lqpOJZ0&F=0(pXJŭ1byN & yė}5$𰋞{p0v,м+WlAVW$^*q#ob'_\=A<ɼjh; LȄih\}cȦ(lYN<)9YFݞaCԱ:iN{x.N= ȣp?},(;\K9 >H*+Zuc/5c4v{nMMun}X"+C\͕If*JT\p[AWe ,Ŷ[>ppw'ww۶n*qZEsG;|<Њp$hM4vOH3&R0Ro?A7 ޖbJK򷾿w-1ĊӔ>g3mc7~1Wld6bO^gi,x 0d)iD hZfC0$| V{V-kPo.<vؠV;IcQ_x%קFԝzND+ɕ- Ϊ"Y=I9SO/5L-+eQ^ 3:tZ*jՕ5~>Ϲ*g`tceԃj*섳 >k?* `%@mMrMJy ;T~#,xZV d36.R[<q`3plMzT] mUnc74Bs;VmPSWd -PcJF*`O{`0 >,8*cqoգyGV剪{F4o]?V܀uw֞lל1PSv3EX(]:術VcS9V46a%aXdAKzp` D#!Zknm sPm ~Xϙ]zwߪjjS`i]jL; {,xզ@7@LLQWnƇ|v9vXtܹ!gQó*‘`j3ʍC'@{r6=Ifa`T2p?0ϴt-k♲ `1 ûېRuLYu[@{wNoњ{hR\W#*S Cohge ] 08AZA(,3}@6zUVTh`e^Ul5\ۉM-BX:L8cP^_z{?BbtsIJ3McPѬSV[-=e'K T]|z2Ba =>G JsVS:7}c[74q$TӔ)zZ[϶#&_[YQ~C{ ؟ܝm6U#u, 6%=Ilt~/ +#.0QlJAՊ #rR<:=Wܺ (ۺ!f=+uћ6u @e>ʤ%%@ך6T ؆vS)xDh,뢓˗8/2 $fO+ kFBT-hcEPż#! VRZ*lUJ*S}9? B,,{|*ֲgfŖ0$EȒ0+=2{@~|!?}I?b u|W/ob Z u3Ou=EA"Jfs[ኆ6~Nu}ya \iHG7SS%(ke. 4I%=iI VluÕQ֌o_Ct3}'CeѼhy$6,}ECHRO,gJn&էXr}0r8j#.odSܢr:XC|l|톸ͳ0| .*h^ے7z[=^~5KY񚐗8Z%KԥV@?HO>ϟ8zNI%2rN5EH-imv+AwM{D ÊkMuM /*exMew"ZJ=2D-WmaG(% - c֛ +$ m]k^$|Nbov\b)C>'ev_TK!x\#ax gMz'V:;=XImBm;rY3=PI OʥEͭ4mF NST6$_?'\itNCKgw7*:!W\A3&OxzD4l[ǎ$slv0Uw|H=['qP.IEνM_Z}'O漥Z$xA9l-﹦!Ix[}Xʸ.E"D_bO ֒)lh/|ӛ3> Q{+D%MY]pwB[!ZR򉻨 J#mu. [rYrnBOd)l}-'ksZ^9>QXΓuK^:nJ?yZlV};MSToЍ%rZp98cZ(G$.T]Ң2A0 ?qF4ZiVצ?^ѹ.c^򔠘Zyt5-\Nדgps߽9--ҏwտ lauPc(j"jpC!?.۪E7oG895;<$9Ok\sSΜ)v?p)saq"p)pљڪv O<Tw #ӥ?JͲB _@a?1x Pb3Oԭ I *A͏NQMjƛ}~.m-~a&HG]"ns E2 w0LS:yKiesӱJ_1Q72澟#~Cmy0K[l*;rw9 b[O'0=j%>;tvcC&`F52a]nJʁy@D(ݤMN17<Ux-k~&@go X5f^] = {-/aY\Si @gŸc(MFږ_%Q[<߀lru(][v_4$Mq  K l77&CZ#TO~̃γY")|yO֝2Z /+6$v+ A,su#.dO_^y1ԩ&c*pN'X5No/xyf^ M=&Dm??>P&ԲW&B n*ael \nt a؉wPL8y1|bB˯\oPTn ]i6 78-JX lrOyWߔ4~uv| g4ݥvV'R݃'Xl.f<7 a 7(X޳%m%2bno27'tG _uF+w:py0R]`6Ɖ4^[3X nEV?'._L:8d۴\2H>7E#n^M-gJeNܠ^UM Z= rH#DB)h&HI>lQ'p{ť*`-0 +υ. Ou^qR{hڀ${%Pc)A!&+VGmnK?u,}g;=[< >0Ge^)1n"E}67GJKC!לD.T@$T@)L6ޘw5wLU a^,jL"/-xN|XTP]X&ɦ>`bDP G*WUٕџV! jP_ɕG5j= 7H"Ց:\Z_#Hm  nB`.[>ĖDVժC1TU`$c3/4Ta_{D.j*(>2O3 >C_w`Z)䗤p}cB&f1`*NĶ3ϑ)K/n $g޶y uVyvͮ^WySyIX]fH%ޏ=Uːѧc$Hm2\Ci`J7qaMqp :T Vk2"[(.?i>ڭ(RjHS{ym)ߪcp EAdM x%֝ڻ*XP5C6`2I0J9k̍jgWjVa:o:Z9$8aռ ]io#NJ0_}BxI^pÒ: q@(Q^5S0{*? (^-qTZmeWʻ YGƀ:wsK=Ā;emi / /[{G76*zp +XGr~4.X®Aʑފ'rfM?< OQOv-i\DM;Da_h|.ggrKF03=&ڮD5uy{oY-G,i22e#Z|nwrޗ%)S[$YIҠ ;[lyVi]݃tgE `^| Q =E0tK]Kz+;|)[r8cSSR&('X"Vw+Ғ>rXǼy F?f%Gk\R D|*di.t)GHKkL5eExR$Sً*. ̧2qOYc|,b[8cH)l> Ill 'd)@f7;fpU0F45~/n!+$LqVPIGl.Z#@Jpir O0 qF̷ve.u"_sP02!PjI >XAMs"-RkKi!ܰ³p֚͗;[V*rkZy͇2P4b ^=Zc"J`ySc'(iF 1VRyɴU5) 2:1bHx=V @یOf$󬒙2ZX Es`|7䠤&M5͑A쉈u=Ujwz<@o[:;1F49BǐP)ˡ(d`^GXu8M 4)5ܗ^ìWF<Ř3,I/2HC`D%2ti9zruNX~G&$B;R/RW"bv5g|[}ublKtrKȭ@@C3)a9aP#d[ 3<. =Bi}$g%4b] "IA9R|a9\۳AMNqg1 %$&!REn+vFICTݠ񇪛dkwI_;_s-=K)Y]C@^&Zѥ,Tܣ.æ/Y wR^x =ڧ E[@CeYhꁍσ %?! {>+;Pd7h}FDI@|{V'C 6Le~̸ψ1`!N^'ײ;41xz22]!eei$[e<ؓ@vd[=;|dz}I3!%yy q<?<`8} $~DS̈/;fo%DO/xOl%(e|/+_) <Ɣޝ~(oe \P Bj^N5r GثJsx]rmYk =\FUK 961a)ԶQ{ex% %m VOPA69z.Z B@&ǂDvX1x@9@ IBNEiH`>q[pq5n㱮6jPw껾_v!>M"KʤJ!U EΒNXY;i´ő{ $xyϓCQ ]!~벝4B-c(C9LP*"e\.̾oun#5-L: ;b{y=U~A 9 Y]U a 2fD<= T1/=l:ͅHUپ 6E4H?nV Tw){;r£Uen  m-ۺ" VXC0<"(S7C"E!uPN]0wyH_-+!>HLJTLH\F!zE! Urz),ܑME~>MAB$CQջSJ~GURHfKNCy&t=b[IV!_T9d^sE"Pf5p.>G[G)ۆ%-ȉ]dMI2 ~E<̚"۾FBOegpo*5ɾLèEWf@dO/*4"àpzsR 6)绰,] i~lW(K""Hd"˗x=i1X+ed]D1ȩ5 fyeݓ֜ĉ9>.y+*-eQ/xP6XY'W6&"~>Wމ﷨[/ӝnXz P8j(B%vV^ ;EM_NN1R/7 ː$0L>@r2jE+o)Q% -W[6ԛZʳ-@{dRqi41O{54Am wb"ʆL(W3xgheZp O@& %-UcX:1rEmLouＳ⋂YC#;1/L?6=v}{Ěҭj^{O=*r×eP3bk#$.Hz;Yp{Mt_=R d"iq~v(vD^ҥ4{e6%Swɓ$c4ArN*[៼PDBʪ8K׊@:rBT{u]S/EJD_e9VUp9K) `ϟ$^Ͱ?2ٳF +Ų2ǥc)g JI6Oi 6W}!lFpʩV{g({I j/R25ZcC~C?G{Pan&F>S2]䍽"!efBNG9U~87eC'Zstl3n%S~RtoqG:3Gdh{>\czPOF V0ot䙛R tD17>d0ML# $3xӭrOD&`ݓsl>~ؗ.#U?n4y(kL /=g"7UW/BnXM@,@dXQƉ#&L@5[-S}xMq2sf-D0)zW̋S|a^?ԛ Hp?[$f$} ,y\V,3XC_1e *`Y.fp 'R22ub4Z{f:ωlm~|*LT['%ҽJe@c|-+4TgR"1~sL5#_C+(P[AS_1l 4wE)лO0S 8 GH ɸ5`ouޒv\oNجMN=w>9_2y"4h 8/?#j@7]bʬ Q٦Ōj{=ʷd֣KIe8l}D`-GjNJ: %>U,K/Aa&j@gwN3l20wW o>i9f KN3{>ycf.}B 2i r)ٞ(o<ѡX9P*.3@Wv8s saA  ]rk/o[K^nE/$aA Eg=ڕ:7"=dC{",/%v9SvNPʄk12(A#}\NϸgC[sc%L)O6yhnc ۉm漹'p%.UN6#K^?o]\g31Fv2׎Ak:WkX&HU{|XUs+;vPc'@ ʀoP*$L G73sWyy̵oLq]/vp}Yǿ#SjUe@?1)^ !e&YֿnBXmYzIY`xCM > Si !*7N: P ~JJ]QK\ 76/#maJ(=&|Z')7FC}lhW'Ab(g;RӮ? .`;2,QQf =[7,t,ZHlESt.yJAkKTH1cXUoiAIlv#x RBWFQkKC,p|O ZUHH073~[,a66:LY7H~ ݇ O^d=;yyT/LeC ?zefzZbmt#8G]rfjtP+JFdut+Hg>1y]Ve@N l=7"7XlPH%A` @Pӗ Yq^=o6{Ic'ʬBlZSg ;yߓ S>eSrx^>췲gXjdyF{F@'m'Ѷ7%E7Agx tcn:8܆yW$}}{a#gwM םW}p ]˱)~% o5PMmɁ;7YrԶdϮwn6d2zNY%F3dd^mmɲ־4Ǔ˜2 4zemmxtGʐ"=Nx41nύO?jtCdz/=*ٓ|e֚\ɤY@aNq0 &>^zK ؛l YnwP OBfd.Hj IU iZ6lCjy>/1)z|"ʛUC%Ġ0RZ=',J4c3djHZR[( |N .AYZZ%! k|Mu]/58#:Wl]8=/+yȟWޛ[{>TuSp stmP}vj x L^mwI-Qz9j%kZNMNC?I]Gp[zuI'd"tb`0頀:dF,Pk8rE|QY4:giQdwƿBCGQEeOzDu8vn_Jك}ܸIruC~U/nJ~. {Ʉx,;2Z['^b}w G}gUs|pkar/)R]Τ1 >yqKq&ÌQMHg^ Eڔ:p-dɀ*1pw5Ҕ#-s_5 p fޅdiz\c 1|&Ԯ3 kUl['t{|km]R=$ez;q㜳sTqcn,P^͚o'eker޸( BXEK/A2~T<[[4RšV.9{L>O_ +S;6՗Jncۻr\OT{?攌pmpy>j!C(1V &en"TTEh0F?s,ѽ:F)psMD}TJ{Z |$3FL!BILO_lO8X_r GYk?5"n*׺I3sŢ27E-'.&\]Sg w YCjB|eo!}3CK6] x;aqDT-oLjA|u<)k @;Qu2 ?}aHAڮ>-ۮ^IOID)l@yL2JfbGH8qezc|0Em5Yg.( DÔPVsyw\ďdcH~Qc`or=aIG(YHy;/s^u8 Ϟy̆MPs7`K)؝k<ؤs$&x y^[K K[[8[7c'`_#ҁl+GU$Z:GA7V \3YHjY1DMz"wP\V.S\M܉tѰ3AM20/ ǕO:(oV?s>+zBȃvA?G,׃Ļgm u= GI"`UF*h'U X81Dm3c/}gu0pb!F27}zE w4u xAx#tbt S"ě>W7 q[³sf0P얾[vQp+Íٿ~+aUNAd({{obxܹϽQzMA/PWHcD~LZٹm֔-|ؼ~'jsv@li6Нx㦀g[<) |4Ƌ®tFI)E.h9@Mʤz,"BDOxsRts{Uݴ a{+ަy{Fl4Pj̠iR 9F6qJ8C)}ǧ:YW/H~;(~6>ryK?)cK[S)J0 *8M'YUyX$9!VZ OY#-KDˣl>jb*L(˟qyL,[UO6(;?_X%f+CU/Z K6 `.`ed1}l8V1)NZN@DQ!.&`| O-ZkG=.g2.fkB2A r.b9GJɸi-TO2P!cb6X='yDu}#WA|3l'@AHWjU'II> {Y]\R 9=`jAm: |BKW8 n\6+T֓Mw=I0^{n5b ~Wq we LT~r楁t>~}b蹢d?.z}-y&.QcB9# :^/js.1PU(/1EͰZ*0l?4 ķz;-U-dYY;9"~Bx̊0hۭ ':B/~ ~ P__(t#FA$%> q# ~H+~p|_'W=vg'^[txHkLeu6Ɏl1tzeܠӭ>_H ]?9Li*;.*e?h"C%q&@_'HcײXZFZ1yCCzհe֕'Q.|L@6~rieu t;/Mwkmpz#31@㬲xSP N[8š m7P 1HFO ΂:\TDzN$e_ٷ '^Əj!1еAFf^:|/ AcW[()>%wCsFT-$(Q/⮶uU)Q$$1=$|o ۼb.pF|[,g K8Ypg31.RtM9uK?=<_i`A[8kMn[7l6h(YR /^ʴu^,_0l;ayAlꦵȟrZq[lR_oǜh7d[yÀ|$z} ! ծ40s+3n! Nj(F8;dNָx(Eм$t@3 ]O'Imwfe& ?I؉i"3y[TXҰdVh$5x*%OI0/M">+X`\-p̬@3kϖ~Q'3qPRY*!4]dB?І>$Zk.ם򈑖Mz:Qk?y L"[93 U2bjZD3%E`W2؛ah+2ၺh(B87)^y6 cu ZD5Fx/gb0Zڊ Ns{EYhCί(_@Xx/NY"0B< q|"Uϒv_9 ETRGa'Ft|ώl,x*3qi܂z~ U`Crfy(2S匁;+>Jn,[rH94Qf]NVUT+ o/m<%%\7YM_ ѕo ;oU:E||_rDLGsN53OyQHh *' oڹnθJv_L ,TTŘRa}c7>uŒG mQGB8pDTp@u< wtyZrlk9Ɍy/ya olo@Jڶ)O!ׇ/KLws@YOAHMe4+ն\`7o&"댈gBh&D?z46SZGbi ᕟ WqeupzdfKM<‘l@AdtGgƙ궱j*F SUE 85@ m )*Y=6d$Rek/GY \IlnM}9z>/5 fkHqY$Y}H`|H9Țe}nZWo3nn!݉?ƺ%zA[鬔Џ>ƈ߯|UjnīO/mWOvT%|Ӈ6՗e_UTl526r,k0DE^X 7Oljp?{dXHpm$t٣IvUGy j=O6Φ93+7z/y$7_ګ'pĉsGGA6[fuOXG] 1@r ;UJ5s,%AŕeKf3eJޭۨ iN $eL?8QW7ape11 :?Ը}D/ ʬKҐz(@bw&RvsR;jF/ N$G e= P4:h1-k?;ncs+kMr,,}/j;*)Q[;X!o#%Z/`CÂa P/cw1 +~U>"@qƁB́ PIn%WǫVn0wcƒVWVgXA-Gm ad6%fzˍfp#ԛs<wªc=AؔPlrI /0O_\+xٙc}D]7|s"zYd V6)\ <qo3=R%1r } J 7o~ Ao >;`Ʈu)H`]V-,Exh*&yΣ+>]iT*K|L mg0޸ ܁%\ И4q> ٢`60CRaS$knw珛@stjbf};ߵʻȗ}1UN3QyI][ҵQت8GFPz սUxbph{JL7F1Q\x:BZy#xDW<ɱW4IAW#lC`͓ ilR +{FχGMJ%J8dD&iKG[潪ysmmsZH[muXy~N,c KCc鰧IN!(h&CY@sZ'27ewYQ0)H &iGۈųVxN ;vxdv枒Oh*x_G̨*g )]"m8$f@WS bq{Qv> e|pz֓tH<V9@Gq+eY?C,v7Q6v&2-aVvR|8KL;5ȫi陹&0D)\բ& u[ y]O#RQC~xr4oE3~y~8I .oCYOtDxy9PD^  YPJ _% gQUBaSeJϥY-|d($<ϑ`Cvڎoi6P5 ?d 2p\>%laz6] :ǎq~;@KYR@ޏCCDE2̃5;f5-lv jU#*h_~F2Ol sѹ@c S#pR-nP52F8Muӝk82?pՊ3%)xqZZ7|="ulHګq.V*ڣRa\co(.L8,M1j2o!oFFi^0+4 4)_VOƈ݌N/'=-Z7in]rj&.b:Iv'ZE;fTA ê 2cEŘ5>Ǐ] )g/EEm. "z0DbT6= -^(!oKH MtI8Yw1Z,,')| [wiFvt,S{4%=O“ ۮouoP6Aoڑ|4ň]IF70gZ^Mՠ)¤9Q9yFu ɫ0O&a{uG(t?Q3cv,taD¢=4GB-Ynl$ !li>w˷~/Χ$QR#i8Q-d)Pf<=GƇdr 3o7RŐYDeЂJ*+EdWs>S.(@Y.p(,QCY >Њ, H Q' =Ifa>4)8 }#~9؟vHNGxLBŁnVkcND)@auTSn7SbO+Q޳7,]_}k8i߿DŲȡ8>!' O+ z7rhU&NFm+h!i|֨@X;'kxs=+>/<7{ B{kRK>m0< N8Z2lϦsBmRʯK8ha[p[jr wQnq҇E~x.iO7`_ KvXxVxщ_|rERTod$(= x(AG1)6m(v/9OW`/Z~ R &[3fXwD:a߫bO$t9xeiֈ(+6-q.yR_G[Zscf OxK: lO ]gqlZTzV⛢!Iӿ_TX voEF"a X_ADohT a@5(lt{,N/c )XpG^pDm^1dEn F̲gUhE)JgzAB<-G"b*|\9Ki`Ƅ /R^nsMְ?O v `K+٤|O=+f.%|p6B+8@Z 2izR}ص<4$9E%p!ιlAxngsX'pf8=$ێ=ͭ e~t7˟%CldKq5u T3U~ב1pZsm,ڙ^|[3vizaO%Fo@^}$'e x(DHX8f\4^wj 㼔hea i,E%;VR({qMhD2kD 0>a% DhP?$7sz QmO)7 Jߛ!]oT&vOY27<;>*{*8w"ǘHS%Imŵl}bn*VDnf-ݵoǩCgY5ZJ[~z\dr y&0-IQ!xj_E6oL_(G;'@ody~)Cqzj$B%Cexj \\Tu5xߺpC"c' Zߺ8npFCM 4AsAcc,FXd*%AO+LOEV={I\vUD5bSi'Sm *EPef*8s>R.˛5Xj11kT ]]x$8ZhkfpqR[0\ ̠K+B.!pUp}|[y?)qO{r(?ڤmaU_cp{3 XT4z*aV9[3{ ɒl.)Mئ+5c>Dˏox%΋U_c: qz7\Q8'JIvٔ u͡d6ΏRpFӜE36rqmtAD|%_=}i|_/0ONk9F"~,G ]0G WҊvZӆpBuƇ']D[dw,RVAȭWAZ+hcICLvڰMRڤdʵ]ś$FUEuXt?l/ZLs5"Ya0֐v|'f;={-{x;U=VP" ̒Ip*-`т9d:/X?m²F.'mB0f#f݂;q<?w/\IhZHsH:22 t8W8ht5m5h)PǑGo˚ W{Ph5FwlA\j$EJ"sk{,I$gyǪ\C=hge0EtH( ImۧK3IUQ:C |iU8(jd@ΐ_.QɸycIZ!-BK8-<5I SnW]Y D?=HcOa[TAG3__}:|K$ޱsϭkNZZCJOux &ǬYGQ92[#Bl;r!VHS 9o9>2+3O䭞 Z7d[;,?/˘r&z "&+Ff[tяX dCg/H%N ~W=JOy&ER{Ҁ|2q40DdȄ|2JQ:*uBr9)2UÈQQ V8w jFvPKYKʵlÛ+JSf519f\KK0:w- nOTojL–6+Oz.niu?ne\+u .[[K>Anh~tnǘM+o;AH?{C|.@˛~NV8|. I#Mr#y?ژȎP$aqߣp ~i*^vg @_FkLjf4\k}:Q7ډ's1U_Z3I,0G{+Pe]Gg$r** z>ğW$zħ1kXa8U-Iz[h">MHrf;g|IA`,'m288jrɼ90LWY]^Ó泈j)2DAKDA:Wcy J۪g3<3i3'I*z~)I?]NsCTkطi ơ,a-SA3(c]%ld~O@JlO ;?Ȝ28@iO <k9 @m˅Y?8y"pPLko*VIq};Y ܌V&5f=`(%Mzl.YTfuCb""1. CWq?!meUUNͯĵ);~|aCP]ݶ-ԮvPAr.>Jz$ G>ӄ"RKRy/FJeU.̒1OζmKL53IQ9x ppo+R槶t}x^@9Ae@^3 X3p c)ezEUp8ҵ E9=6Xlu嚜Ѕ,l*[qxpT"S^X7t#ߺW%'Ntwl~YD"ShZX7`x79+~m .1lP; V٬зO|=SDi뭒({}yqR $iG/#.H[8mR-<Kc侾թͭA|)3>;ogܘOȀ:DXO 7U5ߠGу& f,ƟŎ&ۼ`L{q6mU^غɽ>RĿln he˿ Nt͝E}p58^Z(D%M|AR +vV zwȝ*WNWK(p 6n8/^WT LfnEd{~XD59e]%947QLB8A5EDF笙D53 a'T2]Tȡ~P&Sm?8t;rؚN@NԕEL,ۥn?B^ծ1SJ+o cpvU>eg0,zW5Ǿ63jQA ]/=20tɽ)ִG{9ypj` gFpzh3r*C^ ]XT3FD K?6h?qF:'yغ;5S{v\C0%&Z-tA1պz!*T1 *;n`dwM51󓙲pNhO%}>KÝ',36Kv)ݹ#;ƈٲp/k!dmsm&! hmЁ&'v 3 Us51TxIum;ܟ|owE{[v!]3T'h-)izA"G+m[h/e AKݪtݑ=؁(fOC%x"ngm砠/!T|{/3gjF C3 ?%|Seld|zAzP毮6#g_GHV/z>32+Lq:Uo b'>:Ne2 갞*cp7wǴSyig3 v; }EiI6uؤIz+uCi`y7$pbm> PkUf.r[BӬ \#R%7mEz<ʸ5^vXZ4͆tWmS4d,jGH덡VR צsXT`\-0='V|"fر *"!Zƒ_[Nu$@aͼV+b¤њJob}*r8^BbN"BBy;IK'[-(ژ"ؗ{+@hCss8bJ vqw[FҬwr(KOE;䴤8l̜Trcڤfu]Rs]; Jormy-z*s^P,@07+خR֨,s#â6֦>a8% }t-Ij}!"ΧrfHPk;.ɮ<:kL^`Pyt!w4OYh]nĖIP8Y?.Í2n}-2\R}d)b.߈C0OWWhh5܋iIQAi}ElGOX; hc+@b|ANjQ*2 ,WP{|UDY 聱1~uWRWQ57.ҹA3S \0Ω*lɻNZS!>]Ʃ/BՊ)Xr!%ҰШDl_jK2.JeG@Q`?8ʢ>p v܃ǛsDQy5Q;x9͠jbyC(@Y]3}}Ц)ɟ(.Q@po2ikZFQ|>Nȝn0D1Pc5C39pkpHvQ%,L{ \^}@}AnVskL8@n>)e`IRS, Zq&~9w1f"s MwMʚg #D*ZR*.="S+OU' }E:!f{W໒͂+Fnښ>eZ;K צ'[DZ;CX{N\bKu%)% {v+@èjȤpnw0ZBkw*c߿ُ>Q].n{z>5$4;hhbdďHk+8} g5b/#8!p$Ta/A B63@z`IX[I_$YD72%dnp͎[g8[ib0e0Qa J\N|׵d%ȼLz|?uD[mt|z_.i |aLU"I&']&ychx4Z6ԕg,(VY'qKI;>^0q}̓\^:@"Đ ih^e{肓Zh>z4"[1nNnHyߍa,2Cqo(1?imB R~ 8 $Z&mU ^ +@enL1e]Wz|YwY ^~+·bX"t!C_}-M$ h9Ÿ%f΁W%xۮV_,''ry4 \KF[6QAvXJ|jhlq]@u+KSx-xly.o40dºR=4 .%}¼)Ps"XLmm3~:癅U5qW&ÖDV38kGP2iR ;Ì@ .?aw[OSgm4 G_I⻛#%jjqLug$F_kh9s?[bhPĮGcJIl0;b=-6)G[o:)gR"vgׁ-@֛9pw!p>SlN$0z7䐗'*4T뛣3lRL YNӪ&i_pY~~zokBICa&#gz+)Tz1o^:b cpKņJ1 4ṧG3olRlCpdEpI!W*,]<#J sVnް3xW~ lcZ[Aaƻ6+ȃpE~5P9cR8P7z/S/d2;Oq5t 0 y d7ܴn%npA`i5M=҄kz!^/ +anJuyp*H$Tf΂~]톎..? op c!6|2t@w99%yO'6T:' ז_/fY)<ׯXLxaK!Lț[j!\+BUOh{RՀXY!djՇЙ]FdZzvDI6|t\j%jBTRMMZGlIFXyt.;Q~Lu}n}_;i\zRkjҦ@f#-Jry6Nue:&4a*漪GsU\76Ї=bir".4 ? *pQ-Mė @X) UuCYSQ.M,FЛH9gή 7VuYn%JU6N9E!J:l!ok@L,wuËBxrkafM9"pD(j`<+x )gqPD:a4P ޥwпπS3opNG{ݳ~z:ACtFZ}-9K9{9- d=!z$NUX+[pvi\C=kA L뷳 \r&ܰv6H8u!&5| Lz]]le /5.9/T. =s >Ʈ]"pdaLmI0-DGHI uB78nD 29kM|J@Ff@lV>2Ee\z o4{s<돳,jLָzhBhc+V.CufR9 f]5TFwE(uH)4o<~gGQD<6C4JZڷ`]O=L0h ?3oTW VV J70`=ѱ;bߖ.gVfΚ5L ]ODJ\VaP"fpȿ)cŧxc8E)?m}ba`NLB!ɞͿqe#?;ެX:;oT9m,p9\XU}0{`(h% ":ӳiEe=I׏|0;zVo+{c6HP0{vCF=lgL%GŨ}^"O}P)N>dkQ"Qy(גej&B4Rd]\=2Jo: K2haK՟otΤǹ\7^/D{lO${^9oe!>#${ݲv{#IZ^B?0 JTby{pO?"B{Е}sDZU bHѓ&LF{&9ox kdö*ƒ.'gryT R^<uP4.țj%JJd4U6D> .Z!H$mQ3Y P@Y>꘤i HK2Rz2$]l_Iib/|ɄdQV,X^y(-ϛ@-alYJSaq@D-+6wН{Kivk&#ZJr,R7Nsœ2}:n8#N<14a{fh FGkԝ(|e]Ibl5gdb\t7Kv-3%&RUy eysպgX"P??dLۨ~U0㌨v'$]GWLm?QFe5}pOt?K\_5g¬5o?Uk82YgMۦ8o Ik $D3FQ۵OMv5s$lc'Jh)Eb$GTĨ[b9Jcv(!s/@+, DK4._M]pric^]3pHӌzA8yНA$%@<:sT #ͭf>\D' ';7m~A0ag{ҝDF^͚ !:c>R')CctZGJ$1(F愷MۘҰ_FO|HfR"EYg|8r n ^"Awa= waplpS`N XKO_q}y~ݐbL{DFHhv` &tF"U,ղՅu@Ae20Jk<7A"+lA5^HlQN\p0,\->Dooγ "k~%cpgwB}*)>{uW>)Qe3.jTSSʮNGE0i>\މ"‡ͦ&tyn psu7c R#pH&3dfe I M}+hh, CQt+$WW4ypD*Q ׭_ϓ\HU77ؘRbf9yJB6 I͟O Calx-"M3X.#~0XD9󻱞%Sr'=Aj]CGML%cpt7[jsS>yM*7*)JI0spo{+kh%?b^7 UrxȻ;l/ps _n쥛L͚L |+˾l6FEɟˡETIqR֕t#-O#u:05LJp 9EC#3%8X|%Kz1|_=fScGbl GƵTWy'4[D%liYPym8LZ$[hY~FAzCHY%5}Ӱe#ѝ5,V-D@vh(H }hKd?9#`C8rUGRiY61[R96jDIfT;N£S yTYEWU*5cuk~^ 30iJg xgIMX|g e%'&c/-rgna!?84(i: eW LFA~ckVzCPV>T.v)T6ZaD%\(.=9'.=$iZNFYMxؑ7 ]Zzfni}!@\e ̪&8j ,^st/WK5U8Y"ja#b[^Y/xX[Pi΄H~!ε$GScb 8NchvA3P45 iɨ-gJZܢ׻kYPϓ{ wR᷼=van$UGt;nK$;6!b=UÍ"3-?L=vʑ_1l>U0Ȃv#Sy 2&$oOĞpa=ILD۸Axg>u!_ߍ?n8.6h"*揤ӣ3 #k\Ϙ?E*o:'rq|ܤ /W?</;@Κ2$W,q̻d?wf!Nq2WF[XxKK3w&l?vŌ?ҁ=js8KzG97.]P`T9<*>y nDn+߹W#MR.UWMW(šfe/v9F͵qS>B CQLsQ?XrR[!NgiXXM5©V>]zxVE2ؤE U*Q#h!77C$z=`2JMhjrI᣿q ȿ~"u,De{#Yʕ1=]I{en< / WZ%1޽vݙ!D_;ʼUM0M9VZś[}A;2 G*awZD"qK E"haLgwzo6CgbH1$ n#Rw0b4k>*ca#-C [HOέeTuܔF)bݚxdg F΂QnN>~BK j+AS~i쪠7kEfUL/ ѡ(Ѳ]f$7RYA /STcݿخl >JΕju[Asc'O|}31ʛɣaڏOb45Re2o4n0'뛺]( ňW h3Oӄވ/^8GRt UcÈ(jaZUwDwbJJMH Gn+Zx :Q>:HeYSIeT'NӵGWUXlp T+Z!H*oV,iֹ %XX/Lbsx FF F`8áoq=Ab 6$rADچx vjWOl'tw>1FzK/-6&on,4m+|jDҞ.]r[fv'KN7r78=t h2s-(;;TV?6L*|G֨U u;%m&Z͹vs0ц(> [ }I>Dt^'S|F-'LPZzm{(z="9?:Taּ>tsx`aP)ƋCK8@8V/ |2U- XyF)@1@ǐp-W&&O~ 7VGuVR] )(  37_#a7n]ٷyjd΄`쯳fuZQWy_,W,"*(#&5Tx.-:GϪdDݭeЇi%:I7dvnZ]՘1Ԅ!V0 x٣̃: U%㉐;@F >u9ML O{DŽT䙤L7CeڭI es&&06\Udi+i:_ٓ8'5pn!q 8O p3IζM0p1(.*cn}Nj$x=I*skV:6B }jR`lDZ&)j Q9E. ޘS"/Hc@fg]SPmBE' 8k< Id>SlwCӔ:EK%ozPQckr֣v躂o. 7ru?nRp]^3-a:f׾߼*K.)zʷ[~">~8)<5 g$}M*LgKf n:x{:b)<44%ZL DυnvGM×Q5Mo`!v7I:mI5ta(pb&T= i. J^qScj^̹Qi*ƭt9_\ a5jʷ^+QiMv'p_Y,ainz\-їeަA\\k$G&mX9@Gdq"KtAfQ`Xʼn3=\ۆt7 Q4uMC5 .s߲0KrT}yr59wNjㄾPo -0 ~ i25>۪tSՠ.5ڿRQ!NtvdUq 7_U5%I~ -|LzC] ͝y5d.l٪ovտ ˃|LȺ߯dc'0{ǠU(?C=ء,Ds ^g6W0=oyfj:0ۈwWoB]r.aD`t̊Q+yƒWL)lع$(kf=^.B-ZHG T\@jDD$PILÛoJ3,R<#8 n~,Y`H +gW{2c3 Ҥi1P7/p=o(dxE* 2v UrS MhD>'~'T#uy 2L 8W_'vFyc~7B|xkΔU:>J5?0tJR(fp3)(2=%\!mmg,SR +qr｝(~|&+?&H+i##,IE}F:Z*!E⚇Ǵ]% ױ"D =ynUEWeb 5a9Vo'_JOJeb88;s30TT8Te!CJn>BhO?ݭGc5kJ?Z> M;~|UJFp/4l1 'dnz|. Fk *[6!5j4(dF!ӐfMd_Qpj@"+m֜?b6Cdžrq93e ?W%Tc?(<7kO%XZt~m(ӛzG ';w6Y%J4)q_ An]m7-:T* =b\{y.G0>$uEӚ^T ޶ݱJ 2J8VWUv#S "ӃB톓ܢp)$g}a(n!Qf%f7z P@G U?fiw/ 4ѯ`#T{]$圬ȸڱc,2ʰpAʥMAfpħkY"zhV Zy/xjs')%)8|H.ToVưpw<ˁe#߿(g=FL"]CRUkIr&y5 {S (VU8aHLT@POoapgL- k|L K!)" R+ 79qh;P*N3۔,rR&8[ w{ÙnK35Z.fί9HKkwrZ'c\ w]T%n 瘼~G\7g/aZbO:IuA{( z>ē=HD ʝHZ$O<3o{cMN\(h+``@]f?ʩbl.xz 1TVr;]EXʢT\"p&YF=S5haZA3v7Ool.Xgjqi\S:WO#(?+7ɒM5@LhS72onLtWrctDN ݢuE4߼4V FBe E&5$3?0iፋYs=͈ܩ1a{$6ˮ/GN>KQܤ!0ོpeN'AmQ%{@>z{KBxK3)KkYL9Y[$o:57FƵ=2m  \q7ӓC;@]67"koHΊC1V4c5ONo #840rw6Y瘅7/m:&Uxw}UIR|fcQ6+\?Zq~Y5>ɤ r|+]5YhPDMh ,OK㎲*UR L7Gq9w8} 0[=DuJya)ah،-zOջ< 2 rѴD>r|=+-451묾mF}2+lj$*lHGy Ɯ(TdMqR s8i(ҹлjI"ivt״{k@VZE74K? Ҟ4($}5٩³J˘$op˹9Y\wb]$O{M>3cķd7UPo%Cj-4MFHc{gv(;viF_z$7=:7a;ᇺ{E'Vڤ&kakzU\G։Qs.@݂h`uOIJCI' +#$ Bo\;)xH3X&: 75D0]$.IW,qf^`wtFԅ"Oc"XG[Io @!XwUN4Ur6 +c ux7T띊<~O`x2is&>¢ڬH^Tu0ͫ"}y53&y;a=~ Ht JrOY>/soӔ:ib\Cs (οDm\i5嚑`:Z]d;MsF˸{{\19z~(ȻUM#}ނ  LoU0$d'6dI+J=>Dp } Ȓ(,fZyǽ^;|#\x![OhPGBNx:IpEg&j%У;\OqIӮq4b)IYlȉ{Fc< }b5``]Yƚ1D#}G[cVKD _Y(t^H&!%0/hDs3<'o%q豍L5rsBC)mҍ>1USK30Ax9 B10&!+ki%#>5f|giIcOFew)"-82'FACDT]*Rߔ d-t[g0\4.RZ//fCdTbt=ŋi0UMNlEZnj0sk|EڒQzF}K\MXzBGoߋC:`ke2)3FUt+W^d8ǓS bkV&@ } 8g}QCY6'F|MҍGb +\\j>8 g:P'Yz AXߟhPBj~qt[Yj0As]Ț? 'UPߟ5&OOqƑJIQECOKH&vBznj?w;wP ½? w)6 ykpC@d` >U+WtPARZÆ@3c{O%&pt/TzIFMñثiI֮ ia7Hf@z)kYv\\'sXG{oeVjY1n~ڐ<#<.Ke>ֆkG1\zZ{4s̍C6!,uO I¤|d\[y>~[i =wD98i4?Zx3- e,xLRԣG|>bu(kĒI?N˯@؄{C5/4AV i\`T!>.8[s3=36EG l/fd؍ U ?Wg# T@{}e'|)3}3ZJ8.5i#f y*H U[5]I 3BÕQ>w\Wvbz" |XwnȐ6J أ!P@ )rAxݢf^^UՆוQ XПH3O{S1.-AyũyQGg?hzXS&jhP{^1=k/}Q~ܦиֵQ&G TTN(=6P$vITaK+4e iX}|*uб+@F8чf eԯ1Y|MȨ@xtQĿ[;yVUI}2m=eAsJj)l Hq-(~%|ΥO-0VvLZL/'eo$}HgloL ^)=Jt[! 4J4B9-eT/]]Zb.Ѕ:zÖӵZ94p# i^(Wk@ >. _I+"t5 6f! 2n*/\h@p'?|a][ҽXYcN࢙1);8_SR[xn}bFbK YS DŽ `P) ;c0Q\Uq)rmy2 1(:@RΏRJ}~a֧{XcX7QHk;ܠ{{`eiᵹ5,2.$rH7nfk|~J/ yDwHj!aڜ87-6nzƀ*w07 P7ï?ṯmK0J 6cd'Ah& ~$ 3 Wj y謝́Q|UH^ o{IEߚd^@z~%QRsabOD#yM#}Cvu3`CUr Ï9oŠvf'‰.'sҀ(j=auZ:\,7U)Oo'; fc܀0Zlˈ*aLұ{QmFWi?t&_$Φ!-!. ??-.{} dF鎋̎U&"9Ev@o}̑Փ ӕm?αѮB K}-UR&t ZUH3}(B%'繲SIrUg˕,*̓Ń׏ӷZ)m"9f!qyX-r9%)ee(ΐ? u]m2T<_H3Շ1AjkGPHOˉbvCk Zݺ1r@EL-MlֹWԨ лx<=)Ҥ8yOi Q w^,K~93`ÇBOɕN+89ύ7ÿ׊G5EI*bq=#l_@ ,Y,23Pܻ#!WEfZ͹j?Zՙ)]y PTׯe ș'Φt ; 8)q Zْ]%+;mV=H6wy|I$1v RA0.N\:?!3ȵ9芼JcW6hy._x1;} łtejp]nc9 S|;K|Iu=A?cfQ=RX ' r'TFh9;؉[_>Aȷ^PܭEmT) @|QEuZd[IZ-?D>:l(clg_̵؉+Rn^ܯW͈}%IÍ-2_4z&OEq]CSTt6"a ;1WZgDUrVa.+jDwlJ)G@V잃S}x4G^ATA6VV6<َJfh +B#Z6|Aj, lg HE`BNJKәuEeK${vB$aoJ/iR/svjE[c艋G4EsDx9mҌXk?2Yd *~,RT$\o 3 .E d2x mX[ X<)g{V~}E3Ghȹ%ⶰxǧ 9~E{gZ8 ӱFU [)SD:s$+׵Fqiʷ}mI,s5`E;ipem1+b{9w}M:SgR+kʣ6(V2.Ȟ,;+BZ,w!gw̟ 7-2(\ĩĈk{$Wބ|M"\ wa٥1r%V tNokPDvQ1HoY¤*WF>-{Q4-WWvM;`SL'%@Hǟ8-*) c:z8QPYAZ}78L ?۾)Bkk`TX2TC< r첨p&} 'zRYTN_ͺ||/q12ǎ`Sf@R&TC8m6ǎ?iREJQ>lGGdƚ/KKMW6-+kQ `!;DMa=G. eqWb( O߈zB0k z cΚ0a.B:.YAXpPrIWZiZq\"TmrO_u5؋/ji\B|~"w|^t!ZD%vm,"V9koxLK3b%Z}y bt!ANYl<:`ݳ9wOpv2Uc*'t#H/;Eo܂͢K(39,q5FGQ(A j>:TYUfFoegm;{uâ]l幊acvL|rdC$Oi'q㋊UTѱCkoƞKu:5^8&.:[ayWA5m|RH2]sWk(#|K8Oe+X8M&1cklsm1>oVpы}{g6q-Dz59C$aQ&ϪZB~u|"V5ܹĖ"L$-H~w>:4Ѥr-ArRmveuM}JM mF#ഄ5~dw ,.c0; '1/R[ YG4w4ě?@שG8 H}_/4 ^môpi-$.q"bCDDܮa߁N4x ^Hk 78?!)b$-q}@D}"_Aa 5ʅcH~H |zч-N-֝ rG}ؠl{vY8s-e)aǣ!BUxV]Nw6ۆmv#]rB4e!{& a4N5*RgLӻd|"0KO' !-Yt<jfqz0Fiu'ky#'^oLIonsg̽HL[?;TL-}?hH-#Urul{?aB5j%N;Q5.c5PU"FsSgk0L(l3`nRdjiWƐ{"Ki9MP(ymtvP96ہY@{neW] ZU7CS~غ7X?~7|~xoh!g8hĹ<[;ڶ\> YkwS+ђW 2vۺsr)1zAz>;PA,4rc>Q f֍?lUӴPS:JokVII[x TwAfJƉՁ[=VJJ#V(VQok*@Nw8:auH>Я_Y)efPAݬ@.ykKg+ ;?٘81 =c9p1vz?9ϵncރ甉jr6.ss_>s=N|q93tªNv HX`+\$0Kc/[Ŕ)§KfMhӉM: u';y~F9 #}]v]3xj]6S ^B᠊2 M=QaJ$vK'#bA7K? 3DM;#g,V/Xؾ4pXb2?.u4ꁐW((<[v jk>5w?lLZRРŌvbQc#( ?q꿿}9\feo̡rΒ_Kҕ$#ބv*TT$BEObŪN#'M$Xd\=))gGeA \U#_L%#{w|;bX}ٙQ|ƢcѐvMKŘaȄf="ۮB/+ZhI_KEϰ-' }uߣ~rنJ&A=lNOTHVC/'15OGghl.?Zݾm:[hq9t" Є(TrܢIzr :]f_+t-ؘwj6' X6A&FY|,xM6FCI ךloXH5Χxέ)nNHှx #=D|yҡ1Ƈų@5 L*Y K0.@7w2 7T?#'L<fp!sҽ.OQ4 gy') in]2{ū@7usoȿdsx}FbB画NmPX )dA*,-EqS6Ip)ƹ6G4'TXOR%1~ i_^xA SԸ"0"/2ySޱbV8˚ At0宺'~Ǒ9lWqwD{pJw7F[_EYV"B0nB4E;(뎺Z1?E,XB`;9r۩ 66Z9^QsLȂl_y0$A.©@W[ɣ:VO(l^f'۠f"q5=[*'Uw$4){nVx0x^7sK㲫3|! <>wif__%!ʗcvۨCa7>7bT'vLU\-2̘|S" MB38Oe^\Ehccd 9wRwVY+/&L9>=lhNj׏]S@mbYS7d C;VkjY i/Nӓ,nAI9 Æ4 $mWezT+[]ufÉc7!-F[ÚϐRBol̮|w]$fBD/7TM.@źNJ9MnjkV,ˠܹXm0E0JN`qXs|eoi.Cg`lUIt;3\[ 7b3yf8upNo<֊\v?>l8YK:ݤ9PMQ&{t~N< ԥLc fp .J/ԊP1eۣ  U_K(T|rۄ ]쩡s~6[~pҭ !Q Pwۃ'➃$x"}yꉠ!ҁI}ψ:+@pxjl]PGF{,228UI@IH':GEMۥE kwxW8vUXqs+h{Le@Q WG.!9Qq](L\ߞNxm/Ol|B_+ιmn-eȸim.:sHNjx__^huË* Q(O]uY7 Z w仰G/*iT:V"ދLJrLEeT؏ꎷJܬ z 6u1d$4g|C=-_fIjxU)j_w"/pc{ȠHjKz@bf_ z~ pQlnm%B洎*i($L{tSQe JC)E@ )$+Gm_3ջM= qтuR-Mܼ [hFxLA`T~5eo?*rosڔڤMv":IPP* @u`!5>:[s "{kSq\]P?/ 2ɸ{}Kq3t%ye` YRVܚjww}NjSأɜB e|>7࣪|o=A,n)QXqr*ʮdx;e.ve1z8q- ,,,'y)/FPjAu:Eеyuj> :mcXwGQ wo 1Jiv_3Z(,3qZiĝrᕲOg5[NkIcp='yRogpqFd?ôdG'ea( 3K 8zvK;Š;W\yz,Miu*Tw޳θ$0biYMq+'y%:qlifgqft!pdzJkpT!mJ#!":ەNNNo z]k FVs{ݐKQ#_;#8-n-l4ؠ;_hN⊂\ؑ-vy!E%^* I%P`0@A+ؚۗ*d,s6 ,g_pM{զCCŤNMKLlXH[1_0՟@\`\6 LzH%p+! JeI~`K]T[ v_U]y?%I{CN.ޚA)"-GA;(ŚIP1WqEݜ"vYnT@r9B?5!E2]b2l=ڎY$K ޽g'؈eNsqv-d,ZZ(kxM(HP4;O夥s0>$GܐڥFMڮ`R '}Ra(vh?QKedlB3s*־DpzgMngi xf۸l%WL`e\uefN$om&":$EH9dz KB%l)a OJm7Լ nUzZ Ӝ&iB/>{]LEVuŒv4-bÙnf|^ .ꭥߢv-VdQL$?oVnj񠜅P^{Yd 2^wPIץ!}$s y? g$MX|~#?{Z/ۨt{qLB,@.Vp|m`Yމ,XՑ )&ZyNΔ$w-T;.<5ZO%MuQ )ҿ?ܜ܃Lۢ|C6| ؋whHM2CK%j:d%nTQbH_#/J':3!  ŋ/zBk]';iu8y6(kٲDc^;b[+\ʑr)ɪ`/}SFh![Q7*t'F\="L<vf{|o[A};mӛ+@1K0^]20" IWHM`A+H༴K6J]_jp#?'04&[6d(?X4e\Q۱b+dt^X=նWJ}`Lm)wS(]Jh>hjx1P5>aJ%2nSy! $2m|ڠ >%ABX7'XWY?O{x 3'ލ'n+""[)ˢEO>ss{]}+Dpf@u[^=(lW$jZr.eoex5_țEd]u(z +媂%؛ nwOHUa&Y!Be!Jx]L]jV`5\~c~jK&Hހ^w!,܃D'2gl(:{G案4%d.;>߭k}v~QqY& ;"? 5c-kSt rC*֛&dzeM SdOYn=wyȯ|MI=?XVzh|ga]`=tEɋ1>Q7ٷ>IFª\|eE+~z4dT 8<άJ\8,Z, ѫ.[݅mbXw i%T-ـKԦ@]7Pقrig[S!b@~@Wԩ]Eh@.OgLT xMHC$c_łmgK^ L%PQs&lDVW7L]1VLyF=9몚8g? ݝ kz~DV5_-}3/K@pP<*vT*2# ?3%ϿF F.2lH WͿ@"Pa*0c=TX+< $" k&\H}6\{uʻr:xٜ˯P-XNBݢ%kȼ }kVܨ5SCo^vLHS~DUڞi>EoZzI†R@АA]1{Sǯf'1 JWˮa?ov17`hټVDM~o+H=0"$|XhxLoJ4ԻL5BrA/e3*~#ci'$O6.'v|xeuR=O"b"=SIHYj@kwUa#]t(vi]JWŚv"jyknP.N~0XvPGx-K1_Y#Davx"rNH iKPpl%%t 8gg}Qe"z}v;mS(-D:w܂yr =gQ٪ޢQH}'xdiu *t1Ǟ_\VF9~cGAg6#8Dח B,?rv؛cU-7wk*+v/CqR Šڞ [Psb6,c9^, ˟-{(OR?*Z{~bϠ`5w4z./l)cZptXQAaD(>L(1 Y/xx_\xphzf9TNE(K Ůe15\RJ-" ,uh74W%,/O5p@tl)>%DBTM(FM#fZ3͐/jjA}k[ju9Kg߯ab'+q}'WqȟjZGNb>tXnS!|b5˪H6ڋq֑cKvm9k*3x*O6TY8Z”q %LeHo^)v \K.2hl咖סӤs 2X`/d%] fo|Fp Gb.U,mDr؛\K=lZ!фoz}m)xa6/{^Ry*E-qaskYEy {^WLy "&I6j G1.4jnH,֧;jٵ?}bA; 6t:f8inش7bi5$ȯ%Qq]Pۉ`:t/?M~1rgD+;ipr(P’`˵/#rZ`f/!1n=ui3Zc*^ꇚ }l~bE]B?:銝D.{Qd򁓌ca7;b^q3S# + 3Br^N{lB;U;QVeKT3 gNOW9Z˜=?W4fcew(;oZ?ܩM1wR1V+gKqWJ vyHErLx)$_TlYFؿNS("X/jY4!<'SΕ%1έA\F *~0W\_[Xڴ, o4WU_-BI5exQNk^rR9@jj"u㾿 M9? u+IyښVZ n=Q.(d!+Y7QgԽo2B٨a?Eh1ۚ\[D9TD9hD8,2 Z(/xVzͽo#/K;}‰g+>^umt|&2Ou~ $}YM JŠZ {wĐvڙT0C"-vH\Ƚv΃+j , A$QCbNxt @Wd سuj}},)[}(Lx` 8d?>*+7toGt~^y[WC }`e x0&YKk$rGoi# :#ZtF o,f 9:]/FrZ2%:a#,|Y)+i!kp!% ϱM.3U3mK7̻凰x]Q"$&򕚿usl)Yh*_p;V{kK~F^ezS# hȝ.Q A*jAwp oE^tmOԅHbN%S5L}$r a,q<)DHR܅hh.2@u)uYe:xwV ^!i?~;zZ"+$sAiYD[pLjb#퉲 Tw&ykfVw_ WTULoU'B*)*p]݃-ymPږwHrd]q܄ Ilp?ƅ+$wy,|CxG9 .SJUM7>gwOWV9cjE CyTIûb=v vWD|l[4ſ)PNm,#K$Q>50aj' ߺ'S1PԐ܊qSG9 }U&3-"k>rԉL鵍jp9,UJ|-2U*Op_Lվ8#|{du-#ijvoȼ\4ǨbrikǵjUÖ$2c7S) -˲N5/5DQE#1k ;I$P2E<X3)Qi6"ɜ \oQ~p I4؂aX67ëH=7qZ @E 9 j&ص q85fN&(wq/ONϏϺic3oڼ̑r\O%dLmim^ޯumCD fBJ>Ģ'Or97(Aɤœ(C)%0e#%&9K[9bJ=ZZxM2t+!Sw1IFDUk4qHRCsrI KԯYd\|##XZ5yn p̫{ܨ@2YzggDd2wdME"*sCZgT_lH&7f[wL\NI]ƚ?AWx"^z<A8/L^ཾD<߆֝$P2 4_ 5;MT|]+ aw)Rv3<O l 1B_ 93mP#.pDVMODqX5dӅ@֩~$OWW>' vh&!la3] l+i16g9qնFke*6؇l+ߴKCPx eOFm}XۊELq̮2ƒKA|&vmS -CV4(=/:e[Ul}'xI7*ڛP~-fɥƄ~6ɢNzأAl4 yVcg iD&_3w_2j俪R$]rE:Q9щ0go.&0 pyp{Z9r!aSl_-PP.XUZVNMKj%C#8:%̘I0:5Ǘ&P]!S&1Y^BI$n=9NQ.4/w&#!b]ʡԫɨuW!xKa@Q}ϹV=JJJ^)W~}JC5 uQx[,Ҟ63u!Z+piA*d2 ݾky-P(0LM|Pi|~^E (a)Q9aDG6- @j>/Oq+Z( }Aze40:r; t6yRH>L*3q/x׮Aۭ֫!f197GdTZKDc*6Kpg\){i,yB .KhHռ m$kRڜ҆cfUm@` TaēsMɱf{kg/c#/5\o:`ѡ|NѹtpRKpF"~%p"z1։dizJQTT=v% jzcIv,?\ $%b,?~-6d=Qw^߼4}H`]"on׼|!b7j5cnkA-p$PS2Iv@GBS*D'KWZTrX)bh-#s¯GƩ&d#!h_SZ1;N<+Ax T]iXQ-lN 9 pK MDP1F U億޷-tTJW~̠kkGFvWLnY6Mѝ0^*5 ˃>^ =l5ϸ+'rOj1bY Z/"t7 Ȣm7PZwbRa&sZM/qʌ#Ku%p􍾺kcx0Ijef+mBgTF7P>qgFC kyዋ<2܉@FRS^gWxҝ6bAg۬ "udMjAuS0įP[1%Ai[Y|X)[7&^>PTRWTةIPߧ+`@"|=yF}}|}=*r-c=jo<][t}M,"*6=gAv1 qbqIyGHfaӖHb|+d#&5eA_h5e%q,`}"g9G;jHSIOerc \C-:ҹfTVޢzuYT龞ptp?|?$aH{tGNگ"H ܕ{:,x~[N׋5Ԟ,T`+9 ESAW _TzAfw4 P+Ԓj{0=# 鴸1 ?J%)Zd@Ji^LgEBd*?|bh]m#33~#kxpK')9w1{ZK S;$5X9K-׷!^U w렵8.ھ^ZIm$U_tot>@}"0t#̓c0 T-{uDZg<zV` ZZeEKK~LV2}l x1?ImG[%8D T85~qT3!% DWk&##-hvA5zeI dEdȤZKIO$𜑏81Ae.i%ϰlhRrRrٻZ t6VCH!1OXH2MB# q mev_LQI')68ҍ}-#2@%ʹ[kZSDam (I 5w`)sgzĪ!rJύb5MJzHV= ;^?_t Ǘ l6`XAͮCBnyv+gL%T>u!Ps݉%{{UJaOOsoa4a,l6|QHd/V|&+UryJ}(.I"*&ml^V]553MGG@ʼgC7QFd=0೩/Md66yB5Qq|+PO6<-8F=1 !oIwPY0<Q]e(zn&1.M4*Z'W`) %IFRν4pݯYk$J7>vBLVTO~2a}oFR*;|O;bϯ2|jb;ԭիcK9`1GfjЌ9x\“i[\Ø`E @H%\; Un[{Su cA^x)ܣ2ҕ"5HYQDܦ ˶'5'KFAHLE# +Ƒ&%]ÉMe%`Gq P2?ZH=ȷA~9!Ck%fvРFgOT}Z[K}䙃<]}29]ps0> ^~q~^Өll:x/B9cuvyH8bbދ̸:%*B<%񫨗 ʯPDVlʵF'gIѢH)>:8h`y ̣ J.OO[{l֫,:tg6wAsGڔ*O(A}* >edrdbF/8x4|k5?3d J$'45XU͋~JCŏ ac_xS \Yϝ|ѩq{²PY NDOZZ[++Ц$÷۹[.seM-)s*QZ,K(m2gj3 c8.O}D n(C's@o1VP'UŜ$|Kԧr#A}B͋HŰĉIy. x"Eф ~pG̟ UG݇+lVp?,ee  )ff\}ٍԚXTg bL8y~[ ]cȮlwגrHbf5 Dm%_8u.DJ ZK2]\o(mUUaB*j\9" u)NsܵM$Z]@4F2wc[mJ/[ʭhu8*%XԵ y2AeF%~#237=h7 es-z a0F8Ph:]V&QYh+Qe%gBۏz l܁&!eVu/l??ʃ)ahaѾ]x[a lm՞e(C򥚶 #"J=Ď<(VXPY?,cKM=P$AdH!Ȥ1c=xut9%;RuRra@~j /*]rp;{~)=}. ]B υ6L% R (gS9YQV۔4yw ]mQНϫ3--fun6?\1 x1y$wڅݲ.,;}Uȅ#S9v@1Gw+8>Ołf2_&D[C=s (g[9&T6s .:vts+dȟ֟ lv<{ʥw殽m:vf>6TH>lp8KKk9iŠd2Zm/щxQ`?ux6J0(`jU?oQe3~"_A~s3>{cњoa4`{q2ǮX}jDa5W<;T(:nQ O]B*OؚRS@# n d 3'?[L@+qmP˕ZGDcyy?ї(@zYo (s`=t~rZ^9aNz'nRhx'k ٵqyd~/|nǒ@Y̼tӁQgyCA"XefYC (Jfa3 G􊧝;#p j!? X)0Ur{]zh.QZ-1O PnW #TO^&pn| K|l5ks CM7v.5wdjS>@k5RWvFx>%M:,6j̃dy]m2# ʏ.RI S *(1yT^Cmv|ا{)t9Y?֊ gZb( r] ZDʊ N3*Wd1{u?D#x 6>O1;tx{ Jy[F4c#W0Hy{-֞Z%'\"{/ɤ\jx{uDIPj5Cmp@Y ^*y8^*cMWhNK7,ziMSYbbR^=- ?a7(L ==bW.߯o̅ 8ty8H}{\٦|7T],֦慖n+ %*p|!: FCVuљ]b0Z:vBޣltfk # Oo@X^4HS-<-q/}-m nl_"c*oPWs@Y)ogbƢk(=kh7_'k\PٱU_NkلtAٜӑhMk'$n`xݳYcIz)I@d^Eu } !ؽS 2*r&`k>VQY`]#+kolͭ,d!KZ}N⿕¶Tj a%C_np*-t@:&CpSQ{Mz/#/eOtKķqO> FX7eKs~ Gk4-DܛlYO ҝK%(H1W`@ts ]` @M`.hmpE[8MD>֯@K N;T%ʼYƺ4n[48a{/!IG~ʕ7s aSDJ3Q'0֠!O2=v*M\:,r7g&s@"S>?Ѿm(`+<[uN ePa|XG<,o\b5%DTtə)D,dQMCb=̦Ęŀ}_'1>=L\HR(ќr\pP SS7u _:l\wu)A0Ky|W<;Q{jKq IKkuo$ZcF$Xh ezPu߿{uY=q4uӑ$?e~P.7ͅ)ZʬKFED<KO u2z$B'9}:ռጸP ܷ!{;8fPWFOZ>e`?lESV6HFSTnj3pP̄BT6}4McVh_3|i*KY+e"I$ `'=1 |#] 3/5ȝFԭ2Ph{:WЏc_cX嬉H%E^*Ρjݗ bt!-)% 2\hO+)  Mjn>|r[}NMKVF>ԞzkrrRPs߲8"^vgbܬSaaŎt$ zP)*BL9s_SIQQ`my?34kK֊8NdIc T& (U֐VWUjZtM,aCm;r5nD1:ß|49g!q0u5 `dAGy ?ע4ݝTSZ6s vq#d`|z0t'C[IseU*;% ~M,ψ`I8Ա@IAlBqUcOut +9`85:g(l^/?auvdKEI|Mjz(d' i+:gr Ryd{Y!S'\QpScEF߻'cphl:޴R͚bw^A5xf^~CbAz\.]|j 9g$[GkC{<]ϥ{XAF_aJMumT# @/,wǑI8G\izWΣY'WZ#5ܿu{#vOm !zN= 6u̍vT=ޔtN *=\gz` {GS?.<6[K舜6^[-Sȫ^)S Gȷ.sUZ^8XU젹A;a[[Yͬ $·P:W)j2sAܕaP.!]^VH୙zx)2 |L‾Z{Y⌁M+c@vB\]`fWtks|Mf gEjA,1P5=%ݤtֹ<}KISk#G/=i_Ns!JGt\`0 'LȜ2`7:$S}Ŗ`cY#6k !9GTγvzםr7PSá+Oeuhd}Ö1\2\ l`VKbWȠpGN<s;bdhO$G^\H[KW(7|ٓj@7B[sMJrz"q7GJS|<Ec1}u͹(lB}QY---Odc2$'D b%t#:q LɤTÑl,ЙL܍^X]~8Az*fh.Fn2<ބ7|&ۡ0ĬčT=UZڄy$Ϧ_OL{> [{ՠa*PŔ(c 1I>{VK&Qp/ȩ|:>*]WF+ϛ|Ob9H(JE0Ů5Vn^~j5͗xL-k pQ1s5^ݻ-tYr q t;Cnj8ʩ-ƣM3]Ch| ]w(jl,V+Eb[NsKX&lfr+'ˆzdK[(ݯ\0t͌H"jVk(!i/꟥u('B}yBޕfaDX/( hӯ{2Ӵ };-jJw /μq1Qn9>rqF*PwE'K ̥z'9t$4Њ\Ү/ak%Mt_gL3-8>I "斜;1ioE-wlL AnD9nEHAe Pim@"~Zٿ$_wblnju.'h Yb7h3H0c~41&zvyu>[v']!OԊ 'Ȟ(uG@l33=>~.R ɳ1Z/,3XK10"u ^jݍ1|֞eҷRP.n88RS&%b\~XVїu"!~iBnL("C26?f \c>:pU6MVXByS<aa=7ߨ69klzE%ۯ*x`rJ@8*9:됂9rfaV;K:BLeO$aE+>9;|Κ5 ]s֨)jSG˧ɢXL\~kS/}F3Vgr866zNGiɒ@۟~M?Eop.߽]-F+0["3mN#'ji\ ZΛǩY <2ύGĝN w/as' `~ף=yAyBq4YhD iOԉ.J'XٵOqhE4J穽 @)5u]:ߏa"9l wOuvR/cQ]K?S,".}rDIa 0Ys?o C󂅚X+AZ1(5BGZ loK~訵H?ޤOx-CO/;*p`Kz;p=f3E> gdžoҊ:%2tI` _ŝJ}b=;lR/D'"ׄLGw4ZbW`._*fo_:@ExA5p<@X>q=R!u;DZd$hfw/mg)D -{P"3rԺ4$TxYO8l9m_jz;m^~fׯTSpo= k$+vͪ`̌=H]^ohyg0&9f!DN"H3㒩B]T0=gu, 'k\%GlsF懌Ŀ&q8Lany7x$?H 8ъT bȔ@s lg &Ʊ¿m lJ_wƺ\HJǛn%f ۆ[欸ܺmו ۑ/$pEW1g㴃b5}2J5$O_)D KXƓ604TΧ*AHx_p"t p@($ 1Q5_R$<}B9#Vhz-՚58$Mwv*)dD[&债Mq)4dD"}(F1=.d$)+*C4BnzOD2-]ʧE , v FML&pqZ} f ȍsXaFg?p0m@\8E?}?{h0d3,^EԊW{l0RhCXrW!./+CCghx,aoDg s9av30ʍ4'/0p/mO6OdܖUNL`,=h.0Mؙx#ScΜ1,p8$J *Jx o~W~vzTOS.?q/L0trPD|Q鬙QzPJ;3'iR 87'knumS(,%M7ieM0"qZ,#2MMLb #)3E[I[7cpEsS\DhPLkOAzqϏ <:65z:/J VfY5иGD".UmJP]ysL-e~{%쨀zS/iZ܊NL[ʶZvt$  P W0itk˙w{aDM/${$}US[ M˜ou=(H ?ʼnMi C-r`Tʪ-- w I(B!VT/~]?M?[*H(bn[PΓe[@f+z,@P}aqFVDW˯= 0Cs>35PWTbi+_S6T0N&WYvåoBJ8560vNc "&[B}Aߕ1:5=zP0aL$QU&OiAz%ɏMH:3c ,G'u$[=`a0AvN#A(dV?{0<21Z;"alm឵P]pj Ќ OBȈe>%tyJ-?(_ŜZԁi-ilm3Ec,j PЁJ@["Vf.8seRb u+mׅ>3'F. byKm N4V(^PjܯR#^Nw@o+_~=]; Pc8#n02SжZA;2F]D!vԽԩfU; )~;+7&'UP bπE2uY[ 8>M,cB\L&F_FE5(e@v\b;v^1*N:)/J`x)$'cH .ΉK+, >ᅍvQ'"hN O[Lti.B1g37dlP&8Ѩ(7B8gB9&HU]HVBfqjC5x]bj*LS=By$3;7`]dv:O(e{=5i+Q pV^%>YP"̄u{>Dl暫&16e\8 *uX-!Z$VwC9_ M?KNȷ 3 Ec 7&rLVΧQS^CQ.& dOv=ss`Yaq;G'9GSjp79]Ӂ&`˦CDr4B-qr]le i@6Bv|').t`ª1O ŽzwP%*% hnU(!Q#RNlJ@a&J`_HkQܱ:}hy)v]f*;WuFN?IlYǹwvozyAOi2%icQ.8aͲ*'rw2e\YDM?$KP V23(T*>Y#7%m3秔IW%k>H@JcH66~LTOp֛ӊ)7%q:F(pb!rOU2Fao;u.:j;Bz5 A sަڤJ-~}O/ p-ѬX;}l MDWUd;պf:F+iU(}x٨ď(T;f;{Csc;y{;>rȷ<*o ǘ?a#'3cWSpRR@v<*c[;eqL?< W%J^Fk•3%Kfa>s 炆Ċx#ԌntKh )JiDVǠޓ4QOu _[Z`vkz59UAD|fSiTmƍ:5cTקز%9aui͛-]yc3V';_AhG˕Ι;u8CXZs/_3*"^j:N(|rz.n:aj?ـ}#2ta%Ȱ*/%Njr=+$-8v}h7˥.\ 1RRCp~-۫Y`i޺Ņ{ 2/0\5-ku{㺴w>M)+ç72MlB(9C沤"Bжy{0'/'Kg(, P5 D׎p;yK!䘲2ulG]=E#mQ#)8>vn|^D[B̅tvH:RSe.1AJRmJ[XS5/Ks៘f!U7.N 3z!c0#PӌOл45GcUʗ`FpLumr㶬 jܿ jEHd~ȭ[cra5IA)S=C?q%)ۨǦjbhΣrlP U,l"9[&򢱼ϪO=B Mgv YZzug^~KqIh+"?qҔn@-y97 >V6JXB&8c##6'3\.K0o}FF˯'ǧ\0b!_#lRq#쳴-Q*zB=f HA_f|XOWI̍wTɤT{d 4{f T&v>D^#{e#RdPY~SOo r<`̨>mjxDO/ye1,kdz?"RV z}ukpGJZ^u Il^%hWǡY_]+3917f;k}jXOybk{ .G6UvNshժB (Ý)º*öhd:48u7HPU$4[|,ÉDA]Zp3]Xr+剬wx8$*KnJX!k/{Co^v 2Z?Z:G kyz9|6bi_);I L!,*+^.rk}T@htoNiݖx~Txmk.jQ0TRd6ޡ`fx$FswIS&ھ ,qfLo[`ܞCYSx#\s&(%EQzTM*Wy/oh |N*c0/qMw:j)5R2`3hh)~:8Hg3wo&YP^_Ze:IHPĎtdTjU69I}j1Ä "vOD>-X>\` tHM)&_x{,rD_~.Fl52J=vѤ_:[caC!8fDpD=՚YEȗ G\W3 LÞy$(^H+5i%-?_CA-J$"jk&mt+6虿zEE:Cxe$?H.L_,!󣌵AhcČ1>)WҟPhcj$y=ZRk,D[Z4q/1FE9ҫfU{2_|SG*; ]R$6!ad+ &30D`.#覃zi"Z9ɦpI2b33<Щ@}pEŢz D_$m9_@5޳&gzNK.%=1Z\e& .g3Bw8QTHxpBQ_molM|pF4Y/(JR(}%?ѱF}7̩w /%ʅTN~A2ӯ'@3rJIY⁑_Yp{Ϛ;4N|IO@VQe5Bs=T Yzmi Q(7>&CEB;k:J7Uk\`Sަ`IEH)-X.)пԕ` GHK{8Tڮ-u;?!T(f뚄ms#.U)q99"~,AUMmP`WMZ {n1{n2Xyȝ!+ (G@wTkwl) |y,zsRS^|!FV)Cv|A 7 REi^`gdI>5p0/^Z,A#>j*2+' ]w3p?Ie,| ѥ zEHM{tǪ5k,c,,Vguw1Y/LOuk,]M'^hiZ9Q:Zu\֪4$RDV+$T&\\djZх¨7ƈEZJ&}8&יǬ2>+q7ZmR*pdW Aإ^f8Ba:}($%J6YqO틤anaT嗗eRf'"\CT _x<\&& %/Ġʹy =>ۍw4S}ws<=\-|r_ӈ)߈ {<;dar}lǹs4}g/= |b_r46r\=k:xbՐVyyh&ozXU#U%8!`zf4TQ~&_yЃ9l2/IAޗJBQaa[K^Rs{lW4F@̪+c c~u{ؠV6ZxOEO>"5u[5 dScX<&λLTĸJ7}jԎڜ!O^yt/WAi'bIWE`:qInӘxD%@BHp rZȴK- GHV+* 2r"g?F@{#B g]wJJA6}EՍbꕾ^3v;>wQ(dI  -vg(X x ?U 4?AubfYZs6SNг ulJSP#3֫!)*s,xd%Z"W`|MgB2mTmm=4n5Y^˙0̍1cJ R^eSGdܖCGx4+vLwVt0ܭ,L]p`{aoHhROڀ@oȤ'IMv*dΛ.oZX!7f֖7RD:P%ZmsU[<fjxXgB(dN.!\VĤ.]SpDlRLreGcx6usnro ҂Q@|7C ,+\ce^E~6ߒpLP HD&%V,M<惂vv:Eoa;~Rj=ŹW G~0߀wN\ctu?U=|y~uE8%^LoYFNs=m^CP ֫u餭/kG+{h5a[;e#hu$d-ɛ Pu.'pv3g0rHM H-΄H#SmVd#UpIHBVR+cl>.nNFP oh'I>DLkJtt 8|xcr Jܜ!c?d '#{2blU D֨e4 Vk@Yn8Cle.Jw{_RӋF/q vOX@h+R'}oMGnU˅ ]KXXt3*ZwGڿy7:Mtc,p@- ++W09m?d࿐!;(zwId ˆXof\M z>eDf܏QfAx\~0qiٔW68 `> yvG]|yulz4 3H&~BlZȧ-V8q{j]&] Ip>=:5Bݡ`,!.!$"@Nt5rrNͪgU$',oߑ05gC-j>Џ햵dXxX ;swn{4VǑHjHޑډhN@GE;H{ѧ٪nCaH\Ӎ} ?T8SU~ JڒטM}:-?SH2T^c,~my="ho~hY~3M=i*JqkBn&@}<;AY_ DT42VSšw[qtym6.+eݰ +$ :Cm^ ck?w~y2)hХ/Gh:VvxB~+X!ik%7P5 CdS*~G^Y"2 @ ۱&c%{3jo(Ta9HD=-6IU,K@Q}LJᔴllxd? vu0OМ]Tg`mV@Ti͓q( qWB:_wf=A, C璳eDjim]C^ɸZz59V:桃5ULUeV{eڄOMn1B&Za-kEߑ\Q6ƛ2yoP=d1G5m)ˠ$tOѬ2=6VQ!,Q<[E#b6?H-t=gw(̧1KHݠ% ԤߟѶD [ݖ*?='!؟q+-7ϝbtB5MyKܩ Ƭ-N w4ê'?LPnEz* i'uUI6$ f=yy^i,8eFIiqLhrO֧8^jZOicҔqwi5ݺ[xLq$c"']>3ơU/93*Q.MW,#tr_`eb^╆n ںY7 kupU@jMgޑ/^V<>K)Lt{4{q`5'$z}gэ =Y3:.5=tj_O>5Vva<k:e0 .ب70=?"Ǝx n/q璹 Up$}GD/qGPt?9 CV8`d^Ȇ1E70K0n%(th4 sX*o*)=HO=XW`yimGFn @0y1" =`jҭ\6`9Qb*Zh^KAʺ Vqr?h)dg}1?zj|baެ|hR>QVBL8Kf.fy6=F= ND D`@]`dRhiʊ hpc#ni,vhlP\GH VT&h[{{Cӌ:j9U5jYf -DW̳BA r@fn8mnz\_k=0ziEr7u/x((t#P--Aٯ, +gv}X\k! W@Wkz>2%,7q QaZ)hE1Zk pR,ݙ{K7R7F9mϳ9ˑL_]ϷB )518P0@(ʦY۵:mݹV)mZowD[8lNZye+=Ra|3-Q:.M2nx $pHmۆ1C`@sa}ٓ<ɢ\>}Q,X3IZfI7֡mNx@ ˽v|޶Sqk(W!%ڨV SNRaO9eUh*Pg\p]j_q_Z=N˜~n- 9C]dz ZM?8<}A|Ӈ\(X[.Jx ,p˘au2UlhL.ev쓺] ;=6=)bp:[It1%_m. T`A{yqЫoa25giFI1 m}vccY5 2XpDl)t\wy-4J]xTLEٴ\0%c^PƛWR4/ SœІwGפ"FI /ͿW?*̦K&ʪ&).Zֺe1&c>6$ڇsc }D?A,1(M2٪yH(K `}A$"o }&zj` 'w%Y%ރPzN>qC=x~ '};l6_ L䓓+SQkFf㼶KARR~K4`f, G)wH;~ə/<2-hP#g? :ύN1T*9aN?G=1>c0sŝ.n,^ʒϐc2l3|*5Ms&$*uVEDVd١If}6Ċ%c>+Eɾ7rldZͬt![#`w]ҳo,H\r:fbݽNg&ұutbZ`E!z'*OxsԯV.ⱆy|b<_z5; ,x 'qvӌ.fCQIc YZ