samba-dsdb-modules-4.13.13+git.531.903f5c0ccdc-3.17.1 >  A abp9|*SMgj7F i0> b,%ƒhS$GIe݌iw!gxI VP+;5XEpADp?D`d1 8 J 7NT\-P- - - - %- T----rr(r((8(9,d:;>A@IFXGt-H(-I-X Y\\-]-^bcdeflu0-v-w5-x6@-y6CzDDDDD\Csamba-dsdb-modules4.13.13+git.531.903f5c0ccdc3.17.1Samba LDB modulesThis package contains plugins which add Active Directory features to the LDB library.aa:ibs-power9-134d@SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxppc64leln -sf /usr/lib64/samba/ldb /usr/lib64/ldb/samba /sbin/ldconfigp @h @a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`a`aaa`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-4.13.13+git.531.903f5c0ccdc-3.17.1.src.rpmsamba-dsdb-modulessamba-dsdb-modules(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfig/sbin/ldconfiglibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgpgme.so.11()(64bit)libgpgme.so.11(GPGME_1.0)(64bit)libgpgme.so.11(GPGME_1.1)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.12)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.19)(64bit)libldb.so.2(LDB_0.9.22)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_0.9.24)(64bit)libldb.so.2(LDB_1.1.0)(64bit)libldb.so.2(LDB_1.1.2)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.1.6)(64bit)libldb.so.2(LDB_1.2.0)(64bit)libldb.so.2(LDB_1.2.2)(64bit)libldb.so.2(LDB_2.0.5)(64bit)libldb2libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.4)(64bit)libndr.so.1(NDR_0.0.8)(64bit)libndr.so.1(NDR_0.2.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.3.14)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_PPC64LE)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-ldb-ldap2.2.23.0.4-14.6.0-14.0-15.2-14.13.13+git.531.903f5c0ccdc4.14.3a@a@a@a@a9@a`v@`a@`<@`@___i_@_|\@_{ _l@_i@_d@__ @^@^^2^2^^1^^Y^J@^2@^&^&]]]])]@]@]]@]nU]nU]i]e@]_@]J@]B@] #]:\ڭ\\@\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USascabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899);- CVE-2020-25717: samba: A user on the domain can become root on domain members; (bsc#1192284); (bso#14556). - CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID values; (bsc#1192505); (bso#14564). - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other servers; (bsc#1192246);(bso#14558). - CVE-2020-25719: samba: AD DC Username based races when no PAC is given;(bsc#1192247);(bso#14561). - CVE-2020-25722: samba: AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues);(bsc#1192283); (bso#14564). - CVE-2021-3738: samba: crash in dsdb stack;(bsc#1192215); (bso#14468). - CVE-2021-23192: samba: dcerpc requests don't check all fragments against the first auth_state;(bsc#1192214);(bso#14875).- CVE-2016-2124: don't fallback to non spnego authentication if we require kerberos; (bsc#1014440); (bso#12444).- Update to 4.13.13 * rodc_rwdc test flaps;(bso#14868). * Backport bronze bit fixes, tests, and selftest improvements; (bso#14881). * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal;(bso#14642). * Python ldb.msg_diff() memory handling failure;(bso#14836). * "in" operator on ldb.Message is case sensitive;(bso#14845). * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871). * Allow special chars like "@" in samAccountName when generating the salt;(bso#14874). * Fix transit path validation;(bso#12998). * Prepare to operate with MIT krb5 >= 1.20;(bso#14870). * rpcclient NetFileEnum and net rpc file both cause lock order violation: brlock.tdb, share_entries.tdb;(bso#14645). * Python ldb.msg_diff() memory handling failure;(bso#14836). * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848). - Update to 4.13.12 * Address a signifcant performance regression in database access in the AD DC since Samba 4.12;(bso#14806). * Fix performance regression in lsa_LookupSids3/LookupNames4 since Samba 4.9 by using an explicit database handle cache; (bso#14807). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Address flapping samba_tool_drs_showrepl test;(bso#14818). * Address flapping dsdb_schema_attributes test;(bso#14819). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Fix CTDB flag/status update race conditions(bso#14784). - Update to 4.13.11 * smbd: panic on force-close share during offload write; (bso#14769). * Fix returned attributes on fake quota file handle and avoid hitting the VFS;(bso#14731). * smbd: "deadtime" parameter doesn't work anymore;(bso#14783). * net conf list crashes when run as normal user;(bso#14787). * Work around special SMB2 READ response behavior of NetApp Ontap 7.3.7;(bso#14607). * Start the SMB encryption as soon as possible;(bso#14793). * Winbind should not start if the socket path for the privileged pipe is too long;(bso#14792).- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/sbin/ldconfigibs-power9-13 1636655418  !"#$%&'()*+,-4.13.13+git.531.903f5c0ccdc-3.17.14.13.13+git.531.903f5c0ccdc-3.17.1acl.soaclread.soanr.soaudit_log.socount_attrs.sodescriptor.sodirsync.sodns_notify.sodsdb_notification.soencrypted_secrets.soextended_dn_in.soextended_dn_out.soextended_dn_store.sogroup_audit_log.soinstancetype.solazy_commit.solinked_attributes.sonew_partition.soobjectclass.soobjectclass_attrs.soobjectguid.sooperational.sopaged_results.sopartition.sopassword_hash.soranged_results.sorepl_meta_data.soresolve_oids.sorootdse.sosamba3sam.sosamba3sid.sosamba_dsdb.sosamba_secrets.sosamldb.soschema_data.soschema_load.sosecrets_tdb_sync.soshow_deleted.sosubtree_delete.sosubtree_rename.sotombstone_reanimate.sounique_object_sids.soupdate_keytab.sovlv.sowins_ldb.so/usr/lib64/samba/ldb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:21756/SUSE_SLE-15-SP3_Update/d81ee65394a4fbb1f1c97248650bd532-samba.SUSE_SLE-15-SP3_Updatecpioxz5ppc64le-suse-linux  !"#$%&'()*+,ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d32c0d1e986e922017bb71317a18821fabb84206, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=26c44100612e41d8dedc5bc0ef39a5a4cae45500, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=51e7afa75dd24793697107c762bad1a87d021a1e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c6bbbd54aed5887cf9a3c8a4f99140c04ec1edd, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a4eb35c3a0a857b6c7ef656745cbbf3b265931db, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=21ce29ec3389c3bcef5416725d16f5fe2a0cb9cc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=051d716983ff943f8281ffff20f1540ff8279ba4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a079705cc85d70d13470a72ad9af0f3a79a8833c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=19ed6cb8f45ef4eb4e652234f80c260c1714011d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=535af4e36a709a40d3e6aaa81907afbc17e72cef, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e56248fd0fddb3150eccb70504fe7d5272c90829, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f82de49749654509cbd8f5bd3e1231a4bce12ca9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a077fd5275eaf51628cfde5aebb5721eeeeba270, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=67bbea707a01551711e1d173d631743a7fb95222, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9ac10dc02ee57208b4c58b3e2f3b0dc375b70081, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d1e1b6e74812324d9315c54321aed4ae65bd8ba1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=50031c67c9156a0a32c7295f3963edc4ba1a168b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=497564aa44fbce079497011dc7416157262b6b81, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=83ff2c5b19d611678d36e08bd8e989d458ee44e2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=71cdef74fa67562125e1f7dac8e889b59f4ecd9e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7cc3fc81b6a2a8fd098d094d9f161aa0c8ac4df0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc9c554acfcf29cef121f50c5d1fa0cd6b5b29e4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=abafd0ee18bfc0f876fe3312364ebbcd7b308565, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=190a8cdaa7607db919fda1785bde3c8fa329afe2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=dced6c4e0caa4ad94c97618a2742d4604df76bbc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b1a838028bace788a7f99052d2656aef7c2eefa, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ffed718797c13521df8fcd569cc12abd4295cdba, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f835e5a02138413c519a388bbf70d63e7aa6aa2c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6b8fd35916acea1d4b9bb22c642ed4adca1f33dc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=617a410ef14083b5f75d80536eda14cfe2669d95, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=65ce318184739817abdfe3d2009d50aa4031d64b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=19ed6aeeb9973028044db18856877b42d2531369, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bebf58b3732916266882bebe3f02c7f1eeafec6a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a21ec629acdb0751b3ef7149a3d329bd51501ec, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=983e058a9a589b9107dda2b118795bfce7d27ca8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c6efe073a757b67a66bf6a4e4420e6cc57a0c9ad, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0dff3465ceddf7e3a1dfd8e42cd8a053aafed29d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e698467f023d1d270d325892ca4e26adf00de838, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c773fc14718c161a51201cad5676e9fa41d5f4e2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=819f24396c9466e764013b2d8630c37b5c22614e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=884f5624e5466f00ae50b4906bb946b0023bb1c5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4da6e3ec84ee3680c2c52b92922643d197c2b670, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e82081ff4852c03d3a4a6977025ad687b38d194, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f77054db984e5973fc8c2dd4306ceeb7133da24c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9caf2d30e834ecbcd1b57ffe5e34a8f319e2e035, stripped5@\k &/6KVft"-Yhu-9      5$ ,    RR)RSRYRRaR RBRR3R-R+R[RRARZR;R=RXRNR`R*RRSRER@RhRRR RRYR-R+RRXRJRAR=RHR`R*R!RRRR-R+R%R$RYRRR=RJRRARRPR(RRRTRRZRXRNRRkR!R&RRHR#RR`R*RR RaR-R+R`RHR*RRKRSRURORQR>R RY^i ҩA_wm`+D$-x>n E'PY}pneg9X1`ރ0G>U`N$OUcƋ0iNMQb`_ȞKbA0zuwSτJu3ۨ@~qXpYt9|Ň!@Haz ?mN? &cci `X,,^ P zLyϢOrjRd SV={P]b˦v8v/-oQ}o%BǦ8Ѵ g6e æa}0Je52*|xGVkjzK(MԄtKwןUz&?EBZMk';IJdū/A7[">{廸Q3 9-,hӝuU$0,GPh7cRЊ}UՊExӉA.$߸\k6rNOTeEcxP8ڄy0hP*зѧVU$;cX\{y,̹#* oBzTUr=;QZPSqiU5&*%&1Eq;65rv3{†\o'ZA"%ZtX#Yq \9TdJz rJ'HםT6xQx{+%v*}4bOTyieʀ {X{:1 yo'woaɶ喠:~.#у1|WgýE^6Y@Юn,Noݯpt[b[͔(<5*9Z`C3uSz3>p;Aٮx!`fs npE@`=h<9R{U}Oii&p㑽Ȍc|X;liJ\䶲rxn"kQ{ks(Kӯ*f5P+]rzIs;@f9eESӎ>e~_ sy BϚd}Gkg# lwmM-pfȯN+ njjJh*% c F.[5=ٯqxS^gݭLMD)j M]O4m53̸s .Em1ȧɘݬ#4Po8"5v.F'|Z ȋ6A2@%pBnq9;he{Bbh%᭽$>0:];<~?&>UD o :B %> Ykq(!tlIA] j9-y.f">ǎB|[ `}ㅸ tsUX/* G0II 9u6[IeuZ~ u.ND7? vbcvʐirms`=hЅYFfGT{=5ݣ}Cb?ꪷP5$_]] ^es>cZp;xu2[̺;  ?QFmjtMo  ϙ$YZL]}\!Y`\W?괣zuP;š,nl ( }/Se#ZUӹ KmMU`]둬6J5ZLF):Y҆a#9I~@iYu*-=3z,oC]OW_JVá݈Fr8hh6ra0m.ʼzgP"l97w Jl"{"UT5, ͚U QRq/JK.FG 7XDXYL});~C0Ԭ{ :om<y;9KdbO%0]ű_ VPbP;5)EP,˺:@Y@lTQG:XAw4KMrTxuvq[y+?q+5\}=l#lӢ)h֪0KsUX{)).9AA>s\Ld*,+˨ Dq- (#٩ y{3J.hoOB1YJ1K+1aßJ|<3.+C,T2)d\< ŋwj !&nZ37 j^ ұc-WҍKa+3.ayW;~&'bWP_M\T豜aIY/.^?k\=@&^Ns]+U0mK&Ek r]WL 9***{{,,S4 ,2d #I^OmeOGԓ<6h9 GHDM¥ql SmXQ '#܇n6n){xiGpW̪|BXt1ɋJE9k[G Tg|Y}bT:Z2уǘ_:cO +묆˜1Ƿy\?㔭y#CLTckϩ 7k UƔLat81gDIEy[Zߋs4ۦٌ퀹/[> O>SB~P MOfJXiˬ)oPU`ٸ#Ž=PA+>e'%S6 pmNB<hʏ`ai#_Z9PVf =CE+h 37he7ϲOcrO ?Z.(RhQSzĹ+i^lT##jH'{(ȿxd"C_:x„E*v ,)|9Np"TA^CaE#O7 "0; zk'm/t?FHkGpw)5׬9ѝ\ގhlF;kV }d, l3Fr3OI/2Ae>ZJ6$񦑪VDp?ﮬ?z ~Eb#n4E&g8upț=u6m]@Sj1V23EdU' / ~J 0PB!$jۂi 1v_<:JRęK8 (7?Jf|w#E 1bz KC! ؄9{vw r LqfTA;K}H}0v@SՈՑ(2 %)ԣGfp (\願 䉄o A{?\|_\t=K։]rR.x.꺎!1+{sĔث#BbRnAdRG2.(DC4_}m m*Z[6QǕ!8cdHX3l Ԙ𞐲U+"Gv!1y\KG?Lf;"9 H!xdEH`iϲȖB~b?r7?0: 3;U8}5LOĭw e{~k5 +1*9:$}0by I9Rp:g5d $ݍg:rˆ/ڕѢ?h/BGJpxb!hVD\Gvf ;/:+V0qQϝ[+D>T`ű-.m9PThXvj*$mԨ|{>F0˘X-ux =({~D\k#34Bj_ZkY);}V uk'(Gk&fc}"p}.~`\oCެ{~ {S̅^ `Md8EԄ;yOIoh&1^hJp Hҭ}\ѐ9}ȜWνGk+Q+;ͯu-(K&C;|'tMQ;xoQ ijգ@x2C_+PxmK‡khynJ{A>2:^`oAx*H>F5]5 Q~f]tǦ*1t&mPKͽpŠB:@+U3A(#1 w-i3(/f |N>oXqc0}:)'u4 mw-J +h̖b~pu@JKF-vD霞|L s{BlhqRqwF:k!sA{ǰ*[oa $[dsdE ݵ5I~쵇m(Z櫀Eӆu,a'\| p22Pp)D5;S36DA6x#2zk@NKrD YPuh}](_|"cC:o6ū u Xt qYaG?QkrɇC}x_CP̋ʤhBBI2Ċ7q@lYJK٦.~Fscx03k+gפ½F*nk${.jb`Z>ׅȟ"!1e yH |t`Yʐru?u`BVOE@ApsKI߀wj\iG}7Izp $cyk)o,'õ3wi 6OBltϴG-A#ul,NXSxz}OD-n^25N/~_p_"Q]%zlwWT` s6#DԇZf6>Xx+w-s#g*@p$LhDLj*S]'p˛} s;y33;hb DmXiY/$<{&ջCzϢwOG,P_h.5jP:@ȾK_ec,vm/T UEM9d,  !OdJ*Q&" 9 -6*tow̔_V+zRڼWuc8^N5IaAS%kK[E> )gAX<~NASo3u?wU UC|FLűkV<`])R@Ĩgz̵vō$KvǡĊ/E ɚg)W`U*$X-XHSEa=*8 ʅ"ynx~?O΀!W:ҟ,^ *K-j!arw,/|D @gme| L dN6Y2l0ߜo&f`6K|I`fG~Gn,#,`K3F*~xsleŋ h6wբ6Y^AkձXWKh|VPL<0rgU[f+RU"XD"L9DzcK׭¼Q1xsy0_--Z:=٢@ ԏ!}wcaivgO[ψC*/Wd$"Elk͛k}ХVp[/UGd7{d-~t~7JuK$vBxm#jT,q1bxR1xQǨ2TUG8;3\dw B0<;:/VT +Z-_;erⱎ~>icv1)jMy1$뜫 gƎqsu`5rYM' (׹ssPttj%G>{;N6 }Y ay7GdHaUI믕h2ڃNrFx"qE@ؒPV3 BqؾY2H'm/4:>NҗCj6qQ15渃% f`j"2){yC3sV7߯5 &>DmNuH}))Q Ff0H)Y*#XCwHэGDF&8\Z 8[7%|0ۂޢnw)h0}^E΋3hZwUcilF\؆u-=<:TFKV׬4E* #"6>E͖88ˡ#IkYICdA$qnv0uTu7&Vʩ[)I[:UJ'AJGZ? Y^=)\d%nK˂Wfz >_[i e/ ,=~\wxs-߮GC 9Lȟs8hy~r\n(N>H/u]5HtRx @U{s, bh$<]ȝj 1sgpS\ /̑5Dfg'ŸvjY hK=1 \>/0d+6:.ѪT.L?U2o.h@=pפ_`h(ղG%_?(f#bInp  $'zOnݽrvL,&K\ }ɱr/'= ƌ`_Q 1{TPy+ްIo q~!Om2X:UJe=˵>h0(!zi(".I0^asǠdZNtC7Mw<, 2p4َ9+gڂWN3m,A":P+O Jj񃻼2!G7]696l%` JHc @LK"Цaw՗gI5FCGjZgk W>kþX6 m=_ @(e& I|W-M(Mw:nClFtxF+KqX#MMzl7?noɬ:X@Q[fU0Wlz1Q2%y U9L첼KS)N(3 滆+rh6IlTv~0dҊzD"̑G -ߘgۋuC'SK91Φ O:[T %q6I5w+V@60s۰dY}κ ioݨ7CcI_jbF.4|LX}H*ϼT!9q4Ŭ?Ȅ̞hp,68L%M)yTv> .?vW1MyC;;J~;2aMLF/}%SPUi2~M7C~՜liG)'H=<֚rú|J:kA{rfi4/}*mjfH&es>rL:d.Ph+Jb/w& g<G24&:o#[bi[QkQO]Ӌnh/kZS=ur&n889ۍJL~kx++ʞE^jfT~OL%L7M/a$'j uOG/)FP8p;2K 's~!2TR`MP/t_99m2B dXhoEn%۶w"Nz9>`bd'*%? ]_F":# )1^kXߢ4˶bP@4~HfI0~I緡W /I8h̉]R8Ú0޸{/% `Bd`, Mxק:ĠQ3ҔbKA)PM K8Dq;&9CۿNu:hɡKF7ĥ=cd墂.ZJ0io-?ݡ&!B},Kk'ϧNd"Hzrl4_af۲$ˏN[Z2 pU`:͕|zoL#aGŅZJc'lv6Ǚ-2zE zҦ|M{fj&~hCհ~Y|N [}YhPyٓz &Zo \OCޟ[SUn>>,j9D.*ݖ (8> d?)s _H^;l M3I,z>֎vI؈ RNCZEAS:6|QgGň*f|S@mn_ 1|e-'Jo$'ڤW{:yhoyLZ#H ykAv K[k^c|\aY  iS٩?܏DirZh\τf9d/?2o+PSi%83y^k~a)jXH9ۮmjuOO-dlݔj}=<;=B5jb%p~6QdT7rsV^e#uaS1;RRRL~Nz,gMY2uֈaZ?F+ ΠN酹Ϋ 'Xb,׉+z٤}<YRO#.jY?qcy$C~VŲ dzzwEf"'(p9us 9%B帠@DOjNn Q8ۋrRnW;~3ݙgeKMo_"-('pqɖXZ3Mj?khb_5@-;$x:MʓڊI~{%V 'B, mx'쮀PB&!^[*åcVZ ]En\zU^ ZjX/e{1y:߹b3woi;#}ãAФOq;<;Ėx)8kbQ}*޶Gp~mk6sQ<5?H=6NmN/̰թX6HT|m[ $ (@&d󨼚a۩s(3`mf,Y p|!7ؚa=9 :PZ[mS~h wYZфTYJN!Ŭ-ܧ1#m!E<:R*G 8dO]$Mz0H{L"g.a}ͬ eK}bUYjW*KRnyK§3 [ɳ,S9[T$О-!爢$ 2ă@K frH d7J BEp@an@Pʉ]b, M;kq6MaXI0YkU)YA3'l~.ǑW!J۱9z_l)=mQ X^_OFϰW !QQÌ=0U;*9LGN ‹)1J= ]0lIn .aTF#>2Fx~7+@^"߇R4t/@'ۏ96fɻgGjd3e U$FjمKiF"υ5Jq|!ݙGwy.v"? RM%4 ,7!c]>+z)@}wD@f%P7yp#7SdpGDs1/Tn<SZ)3+ V8앬3Q EŽ_;#9AZY620%#?Gv+vd:&{ ȓ&{|e[fIoӺMDFŵTsyh5e.L>xè-zT%rv*%O,q'thM/ya2 A zգn)1PvCXi Zv:[D iaDe qC iJ+70 PJwWxJ!3q?[1JQҴpi UX6g& bh]*8-ZUaKr) 8\Fk"USwf3w]>lqjN,~%7"= r.݆(}TBTUEKfK^ v(l(G?kGH MI1I? `JxXgVഃK',a! EJ/#Đi`=~CUs; 2\vX8#~=ϖ*5#Bm*W`l/:䧾ׄ?bs殙RߛU֯.w='R Ft|M:ag/Dn54#;}=TA4$nU-nԀEe9FZ} n4(O?'D(p$YK>'S1)(:l,6A dU:ˮYt:D,;{iH./Dx7ўӤ'Aaa3i g[0; |_˟a[G X4ܮլBc.ej#Te=F}ۑxEҰ2t $DBVaX= X ѓJӁuH_^YCx#l\ێ޵PdmG⡢RSa U} LDĮ/{Qt $7p7MKSÏ:H? #E,$wA9woq4*z%X`Lhr20IP,* sEm| c6[yxrU)y&l{#&3kqJa::w~} Ww䠣sYkdYKאsThI=Āk3vrPċ>>PǚAY]JN]j2怡]k*SO\T/QjM+7q#ddND+gUYWߋx1ϴ}+rTwf4U>b (3ґ/S|[6'0Υ|d_.1)'g +lY#;nWm_8aBbC Z?7{ h1޾KdviLw<$;\t_xNs ڽECѓ1޸ZM̔JɌ6G3LeW?ThmD R|SP􏝰 z]S'?  xށ:6VP#9[4h[ >0*&} zbvvY4史?npmgB8=1 (FmU81@"rW{DP"<Xf3b8ȋ17դ6DIʋcf<2&Ԁ?nܫzD0WsLY(?9渗 , n 4{c/ R\Zsְ\+$aӁ`xc.&ؕ'+f}zoOK fPcp< bas7|E. ͎OrhRV$A.+7z~+=XP7!p}? Auʬ>8g F*JH9cF؇栅YJYC'.'· RA1]pu^^벣LC?<2,DՋkzw1?P Q+/IheS;r)Q $m]NY~= ,mI`}Yw ]2AEwLmsu?L;X}b8-h~jGg}}>aW@f^]Pщz]k9r?!&]n2TKZyC,\db^]?T*8Ong*q`÷"3R)ֹR $Bs"')1bFx#}|zδN_$Ģ\*OΤ>g ׾pYQӒ}cE d# 8^k0]Ns`K' Q(bn?$_Ⱒ_J6_mAjQ _oǰrGvPk'K%n*0!)78YguPq!^FVMP;Pa Eq: 3bNsAsg?oBl9@p0p\ŷP_6zQ̒x !h^r W[nJʫփ<"Pr }!^&:vEVH9Ë76!#=6`zX4M ؇ħkjwm_MQFzDɅ𑋂 :w̸+:Z_wDx{jtb6H\1{b8\/VRE>|"p/YeDSӃ 5vYvg}Pgg^ͬ }q  mp*>J_k(lfV)%EMBKLNF\sŘ#޻4MwSo L%C@)<@Cd5Bю~'˿~LJYJJ{f&@^ #(XAVGs#<ةpQQ|2~1S (H QFAc(!q _2sє=$oB,p(iuc@<_&_Uber=U0}DXQ7,Z-~4WTFUAUW"zm5u,ê1N` @]} | ze14N.vgm"E Ep~` >TJlL!I~k6pR1z@uĭ}=֚8 =VORUV.|m 4+(_ha a c3l8Pq;G` Gz]jr6ў3B$Bd7 V:>9b*:n߯`C{m,5+ M' #jMC d;Tk7~ac3ơǸ߅D.$*tW֨+Ov%ME-ȟi# q-!pT2MpnYE&ARMb3~dNݺ`mp@K)"' E)$°:?58IN;/A*]&xTb c`eM}VSw3^:&/\жOr"`9,{xzo`.2-:$BǁM@YAG7re%pJ|I`4ܙQ(9]z "#XNdE9$3(8aw9 [oՀĀS78F`eq|B>a.?r-% ZOf40HHy,LdEp􈋈i[-U(z7`4u8yӳJt 8S <ٔyVeKAEcpn%uQVa<AɛaF3S$_gPˉ`C/sõd&H le ؔDG'!X~J|pqہW}H2 RXRJԧ&uX4x6&g7qMJ6Tڠ/«F 6k#/<P3<΁ UTM=Q՛(>tE>xW. an>.0 Vj&yz%Iz*73Oq߇K2$jE0TƲ?xS#E0 %pYg8sJ=6uN;4Fqܱ̌!~eYHzNз鍹[Js!Dl\˜80: [RdCZZpv4Y2jBV78o4.d8iJfmu8ǒo#jtnQf6 l%vL+/-(y0jky=xnnH?.0'1=vzc!OhHHlׄqJt{M؜8ɱbY ZX;Ɗ߿"cW 5uYˤX)>_'+d'p$9vw4A7Badzm D~|`fouhmMЪ"4YWB'z`RF)U^z[#cs nYU嗘fX[ǔ'm:Cmqa|[P"gV=),h_ GKFޣHz+QdP ҃#3YL2#+_e΃RaB{L"nJ vܷ Z>bGi3r~S;dԾdnHP@Oyv N4}ԊUq=9Bׇ~dMh!m~wV$1Ry; Bq>نV"]J* O,7x\ a~n7+qTmSؽ~-(:@fCqيV *TOс|QDœdj_!<1!bO]dp</T o1pX iжLdKހ0 Sq+R@Dy./`J3mmUJ@QnCxKi-桩j_0LWrFDcMP1 __'Jů9>MdU-.JL-2ܰƣ=:5]ɍanJLfM MF}4$#ؕ05<ɡ>q*%5s[o]9tOڣrJ] ~)O$br\я$̠gIIQ#b.1N{CD˦+~Pv*p!5:d6VgZ7Cdf[O;dê $ ,'ɺ&K3Fv4grKYo-U5Bns}z.E2%wQZc"0KF9y}@1l#i" fN+$﮽|'ao~) 1 ŒOsݤihnUIJў~@:Qz'QR迳sz2=}̎Ď0 5\%z~"@p>L*@Up$cu)TX=I@"dvyNGI~qXPWҁ(4Nrx!$ $kէ@%ӐisQ3)j 3LTY=? hz(wQ/Kx) |MҫmAKӷ@>gC4mU!16Qoo/b)^HMp8ZxmVvV8YiA֘g.|bRR5T "^W*@nk1=k!uTnXJZK_iD$;ZA#`B[=s\D!޸u~bIdzC)&[' 䝹 Ӿe{2/ܹr8!X ~^c;ς؆fp28jfueP >Dk6I}g8^&L: e(? hT+@q;MH}qlGGA2aC`6a(<RN}-P@vi$O`C*`sm/MphP{9/uNĄ]aCMXqx:t9ʰ(MRȵ11`pκl'xnu&O5_B?Q]"ߍ?H<,>Y.wTpk(F؋ex1Y~"FInAǎGI,8q *R_2C2<2vPOx,}W=bޞ0?&| -i Vy"7,1 lM[qYsat A kPOf*W}Z^U$f#zޓ '>(zY^!W X!^ ;\ 8;J*VQR35@bzHdQu9GPYjE{("o<̍=ʈ(jMb;$\POSg4Ncb (SPZyҝrLgr 0nM¡Mo rKͅ^jeNxvVz)ZJqqG?KZu@ݚ~Vpmt6{pwj!^o-QsG~UZ)ķo*"cr/_s_ w+TWg1\Ս e/[;.ƾ4sQ0"g]a$ LA&s1U }| 亙Cz#xC^Nv~Kkw|1lp|@ƗuFQwa=pi 姲璌ELyxj5B)VTuiiHaCڜਥ&οΤ{(iw|1ʔhQ*5Ƴ7`Xоq#"k&yҚ/Mu v4*cdy>:.x| K&(Z Zΰ{_on Xþ[j(0P ŊAY\_dZmx&POdb#w52>6i}χ)C%c G~HUO*]dyqf1`xyV>\d8:1^uؘTK 811Ss;g\4{cm۶rduوΧ]\ Il6S'^u[jD%3gTV"U~W?vDKf-E]*>"ؐ2 R4iRnM~ʹ&0^Qcb?߫لiPa8-b+t+]!{z\юG6P j0NvqB x%s`G~ջa ] ~#J/4S-=zX?-Fb*Y"+d[3J UtrķnA)\&e@@B,J 6*xz4#:w[TL@aUps~_}@ g g"@w& Hњg+SMg#t]UW"%lB_0 H&c2NSГXؙ .V9aÛ3 3N.)_QhS[Mj:lC[\kLl3 1+Tի[DmZM^W-5n-:\Mha4ݯwPiec@ 7% ):Fm?nbT;o}ol"5/]fs>NxA(.CrbVP xdKz}|y%gq/;e+ p &Ƕ?~m 2"Y,;}MثoɥRxąPRmT27(ܾᅳffR7[ F\|sMƗ^4Y&Q#* 5r,YxNz8ա,%8iYe"d51-u: /kb?-1x@DWOv0} (!!aR= >Z{]<00kSX~1Aw? d,Wȱxdz㯅qX{ă]D)uusMW e~?]Zx=0r| CPy|_@a&+2:+9V7S_ b1k$Q$] #M `~(pSϸRqۀ9y3yv `]DQCIҞйbo)EJ.˦,hΔnb4o-W21BސʒP1^/ o`Qi ;ZկȊܟ(W0\bA>(]q:6ZuԂ뗳`']-ۛװ!RN'\s rc36Oe*uإh}EN}X%SpwVEIqC=JIFPMN"q6$o>H( 4e5 bp<9Ҭ[[ˈ39>z€weAE]V=EQf@-,Ől?o~aӀFk$1l޹34fxH[BN%/ ++IIH_U-BvjpR=AD >F~;ݡxumU4 _i7Vu P蘻V:G/vy 9\nZ,:K|3Ie "H?}W Pdb `ڧsdH^;- Fy-3Kle`NJ$g"vsg,oᦩE:54#3Ey(;lV7䊹4ޭ3aٱݘWxZL}2qo=|A!`w,7+!?[dM9 F(J;8?SrN{8#Hmg__GW&#A:Ϯ d)˱MLJ#ɅCÃ{mHԑ.yMkqIkI =+jݰ378&v 8 m6pa|iIy&)ԧ!gSqL3Ɗucly$Mm;Oȸd43Wr\x 2b],fbd~pǮ.]?9Kܬy[ApV3NY :whuzt}o>g< B$$Ur? ȳ[i@{ 8-;v@19pуVENQ1yyISp*A(O&whgwUk o/YƜ8Ht>9t:) 4nq o8@`WȪo$ fc ':iD:*hEG$ReK|Uu(` a ĒUn0g0?$בxjPI_8ERy_7J2EYCQ}3&Y蹆p%:,O+y)?0yqWaiRsekFTp˿SaeLZ^'/퀧: tBH w:RJj_I[,xZQKZ?4*![B-_S4I~a^sqvZ߹#$8WP-kE_ _EGV6[,xz8231dx;RpX"6 nWZK=3>;YfHk|k Ƕn~$R}~7ylq[pLo#`[\sH_M?Mbw ̙߭g:.a sWd;8e&B1zXdxգ*[/(zZgOkA2LR,tn Pab$ ܝveF_Z{߭`\ʎ, M8vBW rAC b*n-y2G|cNϪi?h\W\^`Bv>@}f 5JCBu.ƢCКP#G};xӯLATh|+_6]OK0ab].ٍ6W#~ɃjRcaPxQL8 w2SAp@4)_~s&C ! Lh(]52&qgɘR왬+sY0!䷅U4UGթH4u@lz|$a bR>v,Օ (0K?ETGX7f N1:L;|_-|U~}k is[r?}6WWaS!݊ #(jru.^K(-WbȌ;6AP5g wmԐ<`Ty>f4YcH<^ğnv[YO>y)r F4BF`8=~SɒWJćsoD7$W[WDm! NZM?1(bd6NL!tƪ|G>TʑWdB#z┛gBӜ<)}jJȪVP}"a.81`Bs3BpբSa+ʤւJ) ʩ,_daYgH}~BAaU[3J?%=pócXlO.&d`ŹOڡ#gMA_ Sfuk{0z6uLuC|HU7F>Va^* bhL o"%$9ǧdXe,+>렔m)OKRܛ/bjR; d"=&>ejA,,4(;|u]*p Ȗĺ*k1:3\+Ήז`aN\{F\P1[7f!d="+X:o-HX< FZqY<<)Ddb!P;@+IP8hR?̸{V8֪!Ϸ'{,qwEd#rȣ!Ǩ8CM%[JU=bAMq y%n &~fMstZ=i‡\ FEm#䆳C1*V|Q6!ŕjLx0ؙb*>] Тv}^>d5\jـLj7 ,#NF m" ,}{.sbE>3ہ߀@ULHeqM1UĥU/nӛV6dh&ӭrt RX U|I:8O͙D|wM/ݹ)׻qW, 0MIɀ?5ͩ4I; aw( rŊ`H}Fq;{Q"UyvZ/3'){r7L}v^!:U9WSM|*qv ".>Y CCX8 KQ&-1Ozȏ7)0Lܩzi4Ɲ^BxQ~I;=X3 +uW΅bAvs &! Bb=vj}1B1d*wwO|RO1XaO4c3^'qm2/1#L饺qtm,kXGFoGEӃ+G;vEIzs ܰs$.[jȗKCT = qryH;BuTp}0͓]\vfbl,OGZ|\~VX'ӄkx<(mث z> DvzZ @=UY}io^ziDllxE5-'խb7>`mUUωǶߣiSg][UnY  :~XD448Fƅb̽@MM/ اd=%Cf%J[Kh0qh-LKmub!.kpI-cllKd|(}hiXn`jTha*VkS3w I"1%tML#UatIևNNA UZZm_}З۳KX'8%8=?xsjAº g&(#sV=l9TьɩQBlljȪ357E)x}i{\ׯt9B?·;lOgF9ЧNnz) WV󖑞)(SQҩ#T :}44;#KA/9C)dFj30?| ȎXߛ<=]# VAG D{q}z P1=L7 +=c. dBn?Q kdBBfbmDoV0&1 $6a@?( Z{8|kdq/˃1MXٲ ~o73p|GԷ򩶊t0)RCdI2Ț˷ζD|ƀet%з3(OϓoXfV?$/O\_E&h7%U-e͞Weڳaz(0#(IRLQ;BٜU8W"-TDYɳW:_9y:!Ofx|`!YjcD0k"8J͠0-F.F) K!s%hd5}񽺎r+]*{ohOW StN#'+Ǒm, n С>8M(nTTbH6H `+ d qxT,FPS!m"RL6| "5[؍+ӅDֳ.jP >&fmIA ļM%tgQ0E)uP1R^.7<~Te[ǜ2S:{ eRe[u_#`gh^5 vK/}`E*e6XN SG\h$Tnn\6;urQJ屨%Ѻ'mhDdYt֑6 N%RWvQ[CBƩw^Mݹڎk&JpT-I5R}y>,amtq/VKY}Euн<Ϳӥ(XahCO]{O ipE+W#V(1Hi$(!/D&cu'hcLc(.v$[Ks4e2'ej~л;IpDe|ƺTPp CN`?$ⲩ`y'_23bէ3&E|NUЁEuH#// %*z0C9˘{Jp=5tE˄DBҖvU/(3]G0w?䬪_{š dcc=L }/[?XU{Ě;hZiNWֺ3L jz8ԝx`Z%+:Z ?W@)~{?Ƌy`[CU(k+ +<8uâJJNjXA'caF hJ:V hb<߂ z~l\C1{ !и۳rw&[2 onÕozyrP54k-Y>`coZ RdyѝSD/HXIT;|3.X0 WU0{l&,\Jt=kE_7ܣc uRaђq馭+^4-@80ԶmŞvsU,菜߯r'iQS]Ei*w+6Wm`)(]grs[?o"T'j~bh wKS.5偱Ǹ+a8jwh.tG-Lf&qE5N $GS);R:*!QTeYitOoKl3PV-3'xa?ʍ}ț~BEs* = Ť+GUk%)RvwqzT5EX\MeՏ!fGKg͉Q"_`O1J^QnMd$#(:n ϧA60wEI%Y1OC_G#;&e ׆*:Ou]+%#=2ي-]EjH&|~ ,jhtZ;7kO&qſiRe%DDN]nȨ7rjT>|D$i# tK> )ؾA$dA[Ds,&mNwFʝzE`sU R58ZEEp@BB1D _zCQ jP(n% B1{"joax[ "[Cw" ҭoCS}XW-@}/wr-!Z3ϼvzS{ AE I(P*L7^7nu= *hѾ,p,~|__z8k@H Q (:Qڰ+@\iŁFV*%UHx!8|/v24b=QVGN,F/2bFS5x|*鰲\ Ն WD_8R|R&ɈNMFǫ.|GqQ3]@lLx)rVPDbD8`Ł6otګ͈~5yK$^jBO/*#,HܯYu2fgF,F+%$/9Yͦ#>Q+ZΪ=6VI}% ]kA,[TDVnkAa,?K?zLX9Ҵ.I<; BiDzqMnx,UL@5Ԥv }꓃9& _񰳠d_O+5ZfQf (g<B5RE{k=:ΩƀhM$R?^VSjLS]$ȗ u\t~viG/46M`)ɄnvK.漾U5Qً[=$Ќ"jH\z|Rkw3L!{+}&Ɇ Nu IoPr&s@X8N9u$La RA71?$Ua҃;l1/VǀT~ +rTS9G]I0`9fw͊!C֝Rq,83/[kSڢ " Q'eu-siu%/ ltoH5֧o>NaPmƚFk U" Ӂ9NqC-Ks@EqPBR-#simϑQyEggPy"#e?,[ݺdt|w&q6P]4H\J ;s0W M)}v!RD2m&ϊLޫ!0]S/HuץtLǶimV|LhXUtR7M#y^UP0ŦŜMNoehCdhGr' hneN3% sN<*LګUtBRi1]^%Qt2;f(4Z*ŕ 9/vp!/K!!C8)$d"ϳ`ޑ=΃Uy8WدKva| RRYM1[ pG}H&|G:mu:Q 1-j%ZCOf'QʻmY_:A|7aTCʹ?g[]'UouRhlpg* ̡1UCZ^U5㦐" N_>gY]~ Q a"Ib~|iXb}w+ ЛyԏWJ `;9b%}E}X\a*0EF2ĸS<2|o_[4_."7xd:s{l!9[ W*Q_`FXs7o:S./JUѴMWlnp@C/-b!r8h ?dsNIQxB\hR3ukKMR1LCŢ"dsx'9~'4b`mb@ɇMb<LC0bÈpgKH6)1yӘ31Q+E qmkG*vk%i゙죨Üp+vRxz1㒿L|B58գ^3dG:^a5YeQ)Ok|)O][:E4:OjdrEx *G#0Y.2P}ŴA/r*-53SD PI(7K2`T1aW]U:JhueY9VN~FɞD6/ mO O_aS%Bepie xiSN!2D2h/l(F_Rt)W3RBVQ^b!u Vb 8l81O  4r0aұYߠoF~1Oe"nW%i;)MqK$b"g'p^<DnZ5( A=r "y$Cer&6¨&hSwg^heCL6ϢhS쩳wp?#5 רn1' N._*?h];L)c5l+YĎSHLO_ ݜ!&,5[,F: J]DDj*? T8'༈EOo@so[-e\e}:q$Z;ƙZ4xaVd9Fښ}/ 7{]|C/ RȼaF=.J@LtLW]f ڄr"А/{r.l)Y(?;!Pfd)]PAg!ADLcDUs ~A%LV) Y[x:2-=-?5 qi{ՔoyiKExcsMz/‹G=Aw$FqѢ2o4"P&'{L;SHJ27I| [t\s}aX( 穛Wv9K.30MaX7N]!- 6@[ Mlh4JoOyGYr4?& CW wO B$v Hmońoz TfV-WctoQ9{NF! FVo|ndZ Z [}G~gfi%Z@O4//*}XRTr* y1bM5+{}rÕ(CŔJQ?9>(gu_#d/M {Ru\7G2Ki-dLWk\?V\+2@.fV@pğN8r ӳ=˾"Ъb.@Xm-tl/c;Ƽr?H%!d+ qEj$X"_bp[,?h)u!mx$R`;YHq!I}K/ 6b*2 DdQaMڗw(ۑ=nĀל,V1<%H>'4e?{tࠤ%$Bm`QZkzm̯F3s0V0\fق5QM&[S͊>c2U._ Ovfu^)PF?O8,kIqLfsI;#hՓY&'#+ EEȰP*%y hxjb1lէ;Zh:`![ -ht19b`k ⼈r"=UfrbߊuSmV`D%G n= @AbzB T~5^p.&І(]Y`k#+g?km̅*VZ-|HUn ȎON+*i8^'@z[A ՟TU@3Ja r?F!ߐѣÚcE@v%bzޮS6f|NY`8P4]7 ,#FnTօQ275zv󷱻3 m`jP߇: \DӢ, RSĤ%:TP$DqHGw-MX&-3cK3#^E\h4~q$Fmdt0֫X;TH z_ƱVyG%\oɈH9PP0C .Dp] gU|{828jJ7 /$\!f]d4v[4d4;Zpy^Hv9=弥̲rr|g9 k<-6_n6wʌ]p n+5:EUiLJa]#{YI>Wlv#eiRE( ЂKc Qv\㗷oNF$r;pT pIMC` dw /*TyAhjy6N$Ns~kq16'Myc܂Wxcƣ`"1#AjtR+'5+i*,s#\R2#/С/ @IN27Oq;rxfxkkYhW`>ɮo[tZ * Lʊq~{?D5YP_\MDoLvk L6yߞNƠƄcl/'yW,ߏa,],sfs=3v[ɰ3Uw;G_n. l+\3JÃYRWтbeMTxvPÈ D=]I,G\"JE; tܚ[-~CNaҨ8:IRaLF>'Q/ 7ca9GW2n\EByg}O=ΜRa Z+w/30DryfA3' !'Es7ԏ͒Tj3Eջ$8fjj *\rۤmvuM[胷­PV:@n*YĚa[OBݫXX `IGe+q]<`@.& h2)J =`˔~F|fVJ+倌#FaZRAO3~FKH (+aK6-]O>"5wŠw(QYcN~[./x3#`0HڰG WVXtW` lG.VhuZq@\;FS{?sln_"WF۰OWv| Β.ŲrTepW _5Chy=-KC$(Yi',ݨ_h3,.<9=]Nu.nHle6_ 6'l" cyj p^%m++& y9zD}%]q!}N134zWPS:5F'3xz`WI֤ji!4jw~b3ӟGnL΅\ȍ͖iU3zҞ&92 Bs@K}h,e:pJSؔ_ ѢT@gmZ<֯L_*LOj}[fmc@P<ڤ,DM璙^dp׾#onH@EF+pʩ!q0mMO /7c#ۺs,xOdqZL2w)t"^4j1ws0_eHя/+g i  {@,Ľ9n_wu;9Γ|SxY+7*h{5PE Wgu'D0o= Ϛ e ZR7_zv TȲ>a#ހvvoݐ1%nߓ-s mW̆.B* )# 9BߠΡ^`)cxkܼ0W#!er&?,UzTYBJNWs)۲%njO Gs~Pu~J͗anv0Пg)_:IuJMGn"XnhlLdNɍ}tqZyPCѺWY2tCp7ԕF`|ETU-' f$L%7F1?n&f~I [Aqq2yI`yqQՊh'"tu5REK`G(y1] a)UQ~pSO6Q&XU qӿۭm*D\JXFџ*3km\$h銿X`m]iҖ1u)y Xwb_\""K0!)کA4Xuei 8?;دS֊y8='ߍuJ,ʪ"pSuu_(H Da1ҤRaīCL2HZ1bv;KxT ؅5nq˞D 0J. lS̗0$@\kQJO]ܭ)55K99H]ÿW ِ-yd:j9s0}53`Nܧ82afFZ8Q[~jN(z'T8861SBBwa0{FzyV6,;eWlꝹ9ۚR4(hdG'1RIw< Q5=G(A#DfFkxi I?yg15 P3{ĉLcN1x(dKN/HYdݘϥHj #$ed"[ٓ$9D/>t6A:mjShK]P?a'3d#j-`e^~M.]'xA('Y5#] ΔI+xm2Y|7{KSInG%o\ 93FDRCxUj 5#RIRזv 20?(S3+n veltdU%ک hQAՌ)wP j|<2nr1}$"@s|zBUV^2 [p2 WmxpfZTqP| :^YІQ6+d8 ;M}!Oݤ_2-q3zm 'c_^@|n ,zmCfq} m@Pw c|<,kmxLb(Pq%[kY3jΪlNhxW9MNM~PW>6I\^zLP1Mn`L/kazn_lD!D0{Mf6cPa <߶=FsY-:p؊gJu;v$V9XZlew& =CUezÛ'Ƃc%ɳE  Dx BљE,#O5 c%6[ϬJg;l$^g:eU?o쾒pGF[N|q;5@_axaX+D@aF{'ڗexK$3!hmnd=LIo_^&֖ٗ,-3U(}e0iWW~.EɃrfPSI^EU e*Y`lo< W0$&Nc5r~>ɢNFuay |/!ڑUլu0ŀbamY8Bq, /plJl2=ڋ8zGO!E0) `9kJg oF:rx/Trv'J0ۺ Y w=gj}>ӏZVB3kc**UJ ю :xSb<+kĮ]DzObDZ+0+`{^)vcad~> g\FauVf4)ŪG–@R֢ݐ+Z}N1|4(޴}77b] y6\LpŊ/Rh3l=L)+ <( VOμ76֫]A׊!7f (W+&[m/5NҏnOE1/ވG'Q,PT%~c\ C\/Hm+c3=OX5`.EVhD`Z$[gjR*7bC;JFdvVO}VwEC\<'岰AU{E-WjdԢI6m7Ms)qR]!ekqJSh l\nldDT /P;خ uō< B"a)I (I x޹.(FVtB ]4d(-z*S ՊנYt7sŨ-qieۂy]矰y["&5cCQo)\7\X|q>zi,?`Qm'3CzȯcYTDŧ$=tOIUhgJѫ06Z.}Gr6_]mN/E 8lkk~$d "ٙ]=xF# 6"vHꞳNL}βuj51U^~@mф@)\yB91C9'Pβ h(;xiƑE|ވpy=Ҥn"- l#lSXRV[̶hK"˨v'`B"`_לDzQ{!P\ NFco;L#< 9XFk(ڍQn)0(ڋځg??g;_:.!i]C b Ht#E_|Ex%ZpTwUʱy Dz@F0R=m٬HxzMOζ7r294K ăl3clA wJj}Un5}|SNݣBtoƜҦv 役Xo7|%Dљ裝% dtмMCdIY勖^NvW:ַh I{<kndgsߜYpE *@k/,yG6wN{vC]FEs(K{A?uqN-Ca\>5|zҧ]_cw{)ʠY ,U 瘞( UW:Nq<([+ȉb@LxNR{4!lTM$_OP7Q-_ go2Z$˧Ԕ%OQD6Wѽ\-}qM M}fRGmZ8S$kÝp%` 54k3O0&F&AJ vb$Fn$YK(/tktƭA'Ke%ڙF"l^ fRÛ {aW8mdO?I:lnV`6Z}E%?w+2IGJm*գvA"S eXr4ZhHrTnOt_MelH񚿜x{i|>BmRU~{SAO/]_z솺S;KI%|o\Z_, |(m_9x~]🔖{L\M=RŞIR&H_?{2m}JY/j@'n;D䖢b%3_;+H%Q0 W"tV+hD"qLQƾͫ:w#?~I!(Hoh 2j ;|aSSXBg"`F|`h8A;ʓ,*\eō;ݿQu-U]Knj닂^s"x#Q9nd/"(ƍGs#  _Ĥ{S#$K 9n|X%EeKiե?-=f<8Ym`w1!Lb_$z"29h-JnZ"k^%R 0&}Y/rip]~+֟*h}S4V}[waȜ*J{u=7"=& 6ճ7|HJ(&Y[.4hÀRe8ʳݎ+-N$M\c}FgzݙJc}W(șlSh3NDݭO J ܰ||4ߨ(z=BA&B!"^t *Vpo};?cb-a+Ll =A/L)ep9, IFoͱk"稶iق ƆうoyOG_IT+~Hn^<淎LȬf ]÷Ži(;-nR 4ȹƮgacmB@3P7Z-R"+nJLFj2=?p@> ,%wp|se'~]Bg=|3}ԭ+jn(6LpDME߁cCELH!}(6_+rtv f[_"3 iaBf0jU%a"3F  RQtUfte} 5=er:Ɩs0┴u{ `~Dt 62%L9L ;D"1wϠwQ7s噉ob&DžbN3^+?kѧQI^v3ר9Y3X݀BeԠ:U1Z2"ŋTr뺼Ƌ"^9!$UeB}p~NhD A|{w4HZ.N40Њ!aDw2 :ߦnԡq(Rc%zQٸ}qFoeSx2iI id d aƳ1O݊MkdG-`bf:]|߯D1gRFEEj:d-HVP$."5%uƛ3xXcR xK $O? 8Iwi (Leo;r+|FOMKoeaʠ>T&zɪK )PߔQѯLD aƳę{=N K&p@5?Ӡ-ag; j!qk~xU0yl%@C4YUO&Z}T&=11]H ӀNƩE3/8W{g?f0ؠ wѾnCL4ƶ{v`xg .AvOP4']ܑ˄v-k^{[qno,qGI#bpI%buH&`z 4Fb1w3@8{ҋEu7pެ$T ?$ZC斻hS|Hog0o_'Wn~Ω?skzOvHYKX(,ЬՕi/=]`y,ƌB E9SEK2[ ]}^@=>9^n:g%?w;K2 UnBQXҺ-B|_ZɮŰu Tq~!ӀX?G [HSOE_MyGBl94 /}Iם@R#Sͣ»o64L/08R eB㩭5Ed3Kk _4UIKNze1_eq`_\)?3J_bfssvH"yΛ_õ#qQXXDٰ))~Ξ%-T˲tjxv_˪A6^#b H0%3= BFj+I$yiKe箭^Ɠ34P[z~Ymt+wzkVh)G4M_Zs s!).:e>j 񲠚PxFZ5.,;VƱmL`)k\9C _XR Smǟ"(~|j-`y:HQVI ij@O0k2[1ឫ)J2e9l1UM:ؚL)lP߹!jTo5rz-_H&!=f \-git✒gnc\drUug?  w{3E9bX:; bO>k$!GP\7~ 1.(~{2B2D/Dfzk.sjNfD$sI%/؟ rɅ]:B$!xGipEfsO7&Օ@[f135RV14޼:K5u'\ECPƝfp=- SaЋ(A,|^l3ةi#]@ Els%L(DQzI_\ ZqzcB/gFJ<-%6ȔaxLqm~f@8A Ps4J1 [w{RXo#2TzŦpTl}5#4`rd7 nhҖw 5&?wj7C<%>ZW [K3q΅vQft (F!=Gû$paq..㈾{MB*M\O:կJqhW .(EƇZb;6\ 2P99M Pj,ջ)o -dWEC)U0سz>$O:e,WYgU2(IS>Sl!ҴA`Ȑ}O3HLuOwx?Lv%p°\zZ8&fDy(W`%VN̞PmL1i1atq}M/&a#ňpd0̆5}h; XCnJp>D{F/^D*̾1EjYy"}gJ/٣]-<(a[zΗsQΒ"ķC^VeD9灵c}c~<#WĎϬui9kuAgLDͣ&P!6I,6vϔE().1 ,ALv+%8G:(fpha?΁8hwP{chV0NJ/;21M6Ď_Ri{&%wHi/&R4 2k( :{!țLToÝ8@0sA?܊kryJ2"Ŵ"f!~!5KHLk`?\3Q*bBǐ'GgvX$rvR}>AN,{ Rs?3M# 6F:[ קO@9a:k4oW@E(*1"&ьxf[?Т쯾& ΌfTNHLl%S`F.";qGdFРWeҕy y[|L$},]KSۗWdtW.P@8Um0G%aN~ؤGb XhsrYnlUxˡof_-dCsm4HmsF #HY75D[k9A@ngCܒ:%iFן׸N^n}0P/Hi,?Nh^#V1jOj7a>>Z*1"3.u4ǽ>~=*.Tq|w+Õc6|w@2fO7DV?wIXI/)2FAoN=;e:4qEnyGE`6`n3Ԟߺ =LTWdDɰ>c{Q93R0>"C 0:*VE=$BOvR >s#UKJ~)[w\C%-=L &TдÝHEzV3y;PSBRFQ"N+;M/AɯYZ܂xq޳j׽R,ƍxH_F\<醝3lGtUVV"jgASp/Z-Qqgik afǮ6I7=2μkɠҬ_H:}5TB2uo+)nrzG3&C2;Lf$QO<'=vheu!)'D&AXLٲ ]7=,h4AMVKyƐN1bƘTf{r=fѴ? (uFz@.>>.]aڣ1 2WU("Q":1ϛT@4mAE eb~Ҿ~#>L/*'U#τ_[eP(?H["IHm)LY$P8^FhO}BҤZ"t%jn(|䅌 Q_~n$AҔmhH)L ֢84 @7heK;/unq%s5Ld Maj:P_NuS&T4dPƸkC1 kd1?BX6@Sq*h'+ Y%|؇q}2@(W ؎^^; /'&;y%oѶ&n/9 VhJw8y VYb<`\9*sk9z(g  4)ir@4ruZP%zp#6yб"ՕOdЏj@c<&יz2}e+h_KPBlOG,X̷/b*/j #f*t:Zn 8m"{Lmxj;OP񀐍c ,E &I M[kM7Z]Az%wF`0+dIhP.Z*gr|1)]!!A+L)Tf9]TC |vӧ/`Ad0=!Z[uSUg濱LpItszweD5wF(|x=|xlTY3t8Ϳ;qyJc5:+Li&G-\4DaIՂk>*[#bܗFmTXK[v+;ޣw-y-H[aڝw9/z>ޡ9 ?'`y'2YDey}W)|AϠrtO5fH^hs$/` EBL1kЧao fEaE Fsoue(i[3KVPz ,Wѓ@,{%cbe^.|ApcN7H=8)W,_CPF ĕnnd͗L0L -|Äd{WvV r4iMůb"ŷ#]qܾ!'`/< BM[ߥm\ݕ č9z(Ihm7pzWˠCT'AIEvжobE%)(҇-[xɸճ*P}Ai!TdO5CMe쪅4hpI/'o]\j0|19 u y^'pV3EآnQזFIj :.e]T faDžb&㯞"m\>I vظ^2- 654dĶߕ@rk˙}2*oKvB 0F/kgufF" bi\a<U6|{ I$9g 7'䞿\1eMP 1]h5KhصKN| @U&MQ;ӓ#FJwT J)XrF&[ zF^L"z&{ؔ~M?29bwː<`*h[jj`nc/6AΎ#] I5w/Jv5O.ǧh50~7$Țcl@{2[s1bѧ .$ OwdEUr[9Ty< @}0jԴlR7[=QKOVɬ+EȱJPF؍uK;U=N ǣOFVϵ7ZW|>L3DȳpNs yA:Źo۰V"|* AYh0h]gkr3[°E`r:d0(du|+?NPHyPKDgu[Kώ_*Vod(ʥ=AX{QnEӘ27P 0"?Cu7A,Bҫ aEzA j?&E]"J\>@ԶU&Q좭'~l鋭Sjб. K[ۖ x d}# 0WT*ހ2[ϳ*jEUѬiZܛbiB+rޜ|év+.X)WiS|lpzj&oUb1}@4sfZzxQf4Fp.m0tU7I0fZn+H#h{*gF:bSOٓk3AvV^Q‰;*Bk$-kb!>(GuS\De-1>l.l0I1!l&IC! ~ԳJ8m[AI+a%"(أ @#K޴`,Y!gI8^`AqG;'B#>N1GU#*6zQ&ƹq3,ցH4X5Qf` rJP,VqՐ"' |fY (q؟lڲ-OkbkioF-Dž7)52/>E>8R[=A?%b38 ]m4hAbΒU4#Cnr5 eX`p뀶d:.>t3M? R+.Ky^k0߯ eqvTQOh_6 ^1g$qv0W[iO烥}75[Aمf7Y8vN!U r `􏨒;a>6ᑱ?W ͥnTmsH݆(M\%IK*x^p"?-˿^rF ՖzU1vjX*M}.HOb&]a~&F쇕`{m1Dz25Mq,C$ҮqUeJ\mfR(k vsCat\|qc:&Ѡ_

%Zhzp?6(x~ZkCш2S&$%rUF8Ͽ2QLn#P(J"EVIܭyW1pR"޹^|ӬR?Ļ빺!aeJя;wblQqaП"6@/EEN2_dsY£rWf7´{Sڅ} 0K@!Mܗvb`hrV'yQbm@x׻EJ7R32NB%)ndl񁪓&ѹNIJmwF?\}+*WH ҉b==pjW8`)Đ9] $M YT3K:KH>{mvzZi2bIzQ] R$Zqo}"SvjWSrh{-ps! p z{[7_98KqvIRתS . pJH[jܾJ^Amd(~'.y t}IajgHFgSlћxOC\|$jkY0pDwWo^~< byh+E(;} RxshnOJU'PwNL і+vӺ&[W/,MMsyĎ6T=Аp~O-x؉R95 rՋwi˩=Q:x#U0qZ`By+<5;果:B~~ҔflH^aʸb}'q$ͰI%%H/2\pͶ LwLuTrd@?9  ٤\*Uٗ$2iNZ1sĄiutғyLfY28ؗcf ?;WكQAd}p&*A9zIDJ 2xeL__CȨA*5'}v\)c+7:!"_f%w<ئ:_)Yujn\#._Qܠ*[uۿ_N|JȜm9ɪհ;7&2S?$e}0xt.0:?lv,nXk U"^ 张zXD~ڇ'uM$=f:"\.y5*]ˍG kA-մdF6pdUĽgv@tf !TNN!_Fr\~cPrNbd1UC1w Vvf;(˙%^FͰXG^҈?CP`0ntϹvs8 r2c5HjKcL'5cd"zɵ6lFEI= %z~vDvb~GG} Yɻ)nCߝq 3H;J3"jNkyBA:d>?9-*?zloÙ +8Jj;,_dX.,Hwyb剀vNK]^Y "%=&dVqeJ#@$Ժf*/1Mq39\lhz&(4rüWU/𫰇D$^DlU%>Y'nYZOa*_C/FzP](}3Z賬c._QPQ!3$z-n1<@_ ԛ%s6LTjN?PedTnFKf7U% mghث&kX~TqY bJwcO`*plܕ30M&N(jgP+E9^H,Gූt g.x-YvpH5ϧw2hvw#g.;j^ֻMw-FlpsJE9&et*9hԦ d0h20b֛ k!:(->$ku&_΀Vїj_@0>P%yݸP0Cw,W޸ g-Y~J44j#\*)~}dTE:[s5yA_V$SI{SeGWPS3|7?c6%ˀ +fNx#)_oB|}ܒL ]<@A'uFHv(K`G&"㖪Bc2l]R_9U9fq%v\ xs;DR ]SQ=SnMĻ^vp.ҿ~ì=5`Se\Ei ;?i C^Y R5 a- Jky!ӐX1vT$,N(Qz/= l(7'$S"~.ߪu!XVsX׌JU!w`Γ>'@?#,:\ 2:k PJU `?b:!U.R{50a}^ẑH\=k&jshRyP@WI9Ŭrζ%vv-dϟti>z|ɇ ԉ d ,σY\tň:b|+#DuM-\t( 2 im͒qb 34J@yc`yߊ.vo[ݔw0A̿f`ZcP 4}0Y?n5JkL!/@-.QQ%f& >lE4]bv.Hwo[s8$zQ EߚA-ڽ{[俷x˭a8a#Ӝ33pe].*`p/j0l9f wA!˚wq%){ 辒/p.Sn8ȫ,Nk=ME^\$&?I*ߪ5h*AGbVI)`el' ڛ9hvt:'.8+T~g^YFu.)wn= fzN&32}d )J~ uZ.R׋\m!v۱W`p&D8WE=OD" I:$9)iVY i{ 9Y*zkxwnhҗݦQ̙ۉ8I24rVb5i&gV|sWV@)ұحX.}YRڗ/y,slTGXjj&qNJ5ob cCێU ߲q4܌bcc @hK p=$yUYz83ׄ# bd\?.15L)Hx]V>;˗, Ĭ.@)#rmt_IFỎqx(%AI4;3 7qW)3id-:(O).s!IMKGiV>i9^Q/"›ay&fZjfi/? CSj* 3oЊ"|{ULJgsSk7ex~BU0kxEdcWzXŠ-K#< Z*̃~?/E<Rc;S/rA650M\LCK nf@+9j&“nmD /ʪ_͠ts*Ł=jmнH)4JQ@awdϴϕ^tNs"-m̜u BYV֡q(Sm[F_vZ;bm>;4c Sm g;eC"9"q-)Xh(Rb*9g6%8sb`?M G+P˙ܷi'$?VX T*ߎܗ]!q_;yIn{c; `),ZQՈ%YG>s`E&Iډ#kp!\W(vعG4JD[+b95k!bq#p4({ HYin+'&Q͢ڶ|tbE?Wh9k+P m Fo:CQ?z<0/\ +,ü xLLW&AX z}AS6^8JyNxcZe_g .4G+OL8|}ͨg+}c%STA98)gR 8*^`~*?ծVL:h؎뎐^qET6g ntUd @)I7٦zXiړ c6w&0ѳeim0̨mRB\G0"8grO dF5ÜH;7ޚ HI@6JI WA\}8_=󠣓~"P{꺵ZON牱%LˁK_/ =9vh*ءv.=O^+Ʌ4m.REݤ"D':" ?Rh}T$,;1n=2(d-U@Y-Z_vv]1M0wН'gY!p <MD^wrfP_'jXrKd& uM9jrmC*:sz`Aӊ}Rk 7P|Ѣu&`lo\֒w:} ՉR;beIbm\K(HpChA;N-bיzL|Q|wSY;.7мOXDNQeÁtLIRm? Je@ղ<7.H+L샃s⬷<:,edAM/7Զ,\uWb-XN7\gɃ`z<n {li&*WGݳSkJ p`'$Ya\:Qątmv@}bA=g)KQDT8j"> ې?"[W3ziݨ˷뙐,i00uiŭ*a{VK7^pb9Xu&"w"nlJ@ߧA^^ zDO *ҁ_MCK&"-9`vB!RV@]@^COJZӒUzԍ=Cn0aI%,$ni6x}p5/FtWesoiQTpX|Ԏ6\TtӯhC >Mwh?>E7p'sL8VǥJ\c5c!M^uJlNT@iƘۓ/!_ ;|z``j7!Yjا$A-ŖTPț3B&A@ib|έ+7GnwhVM2(X{uaJ I,(7p̅Z& 1Pڕ$T< 0cBڝTPv&s!VyֽU59Mohʧ(jD&My—&kC\zhqJQ1d@J[…`;kA›L6 =Uq4# }S t,8eJ_}B\ݗr48bi51ݧ_s%.N ʎ Hd.;_h'3do[a=R7 nW*Y'_(z]:cF)l5'"z^dyF&_z#R.f|_3D,k=@?E܂}^p{J")orNs{Mxm6㿣 l[SŮPQ;V^XW#WQN;GVupֈҒP$u13TM;-lm2׶H# YmBL$9v&4x ʩY(E GvLJ:6.6G`<(CV{D[ {#Q/?!K_$N.h-z"Z]~OC$W `_v@^+WpG/|53qlij/l۱jE ̚>m,>R7R4)Zr" #Y 2ydok`O"7U^m>xQb֦ !V[4ZغuZg3OX׶yeW& ՘ۂu0xTCS1R)l_HKnߧ*iph. _->!]xUZ;_ΟpߜRPBj%LEL#։w=,Z]/Kf c"%*Fǚݦ^CmM`u*h%N[MITp}>9?Ձmƶ j]?'={U&YaڃzP{m05?̷]@,x{?t;-٤ar<[M>'ٺrqג@ ~~quo8L9!ˠl#|Vafl@gNh[kY~+)4ZO;?9PF_7d+E~fOy}ƊT܏QΎqF`svOJ9]׿`h_JoQ=UF{nx@*d8l[_5P洬Ic`VIG 8@9 ð@QLH NT|3~9|kxz…p2OZ\r?SKvj٢8{BVWN>*8ݯ;8b2N84o"^dNbBZy)tҍw`l%-L^?& 0eorZ l"Qv8>{ LMo27 3Ca(1@+0p8ܹpB@ I[ LF&8>잭${:% -2u(}#4_dUbG4jR"Zp%| 0n2GގXs%0;?#8Vu*#zT<}}-v-v9p5}d& kѨns~Yæ+ݖOJ 6{A@ChN[(ƉVX$h>o GȔsnwSI#& PmP"ҋ#unz)c+4X0O< Du:;!}H027(; a g$fc`1huߡeƮ[J}_}VA%`|qcvkgJi?WuG\AɩXZ'*\VZKĨA?>RbkԓW\еfٟF8a&u5-(wiˣ,;aMZ'i|5K|2<* -k&1'PX>&SžTEf)r6%] kV%҃Pmlު}^S k=8j8vP@ȷ!wvՂ`0BtykA-fl+S9{8U@33 ^6Ndl"kv_) %v?epqkvF,B=Lj  c A`woFI nvGyӫ|#F-YLt֫&OD7O+cΛHEM1{'Hf^L>qn4ߧXǿkLs6WC8egb2_BQ hޏD~bՠ@f{ࠄ&Nѯ^Fgat8O2G0pj w"c"+'65 V{[v ޹C _#s`ڻ۩ Xk"֭8 WɤyztnIf!pxO[kh6V&=T[IQ'}x!Q~(ZE'G+IPzzO0AvjQ]dhS O?Xz[5Mw6jUXkn+.O =CfRs F!|g#o*M^_ $t24Aրv)t-:ndo`Uae yrGDxc\MԴLūPE Y/]XSr#1~B.oZ祿δ\ f[.9h*ޡ.]ҡ+v 3߳Êϧ*f<n<cw ޖΚ ̙1~I=w -ٴ%J psBOc]T9=qi6^FG>GcV㜣5_5a2E5'9Hd) #Uh܇ vsͳswV0zywө"<_die|(qU?#tACA]2bOlxT9E/30,V?e]8: A_>"eeh93θ7Q+i?φ{3-&O)aEϣh{7iܝ.W%nF7CtP o`q0F,4KfǼdG Gj  8__?=^KN>C; v?LD?>6/qf=,?>6D&e.NpI|k-30šJwz ya:Nm-xd%˂4\vH!ǁa]뜈,jq9Wn%ַugmkʷILdn#!HhD^!N8t>TnOY˼53XgI&HݪwGT$[ &fU}^=W$YF揯iB"yl]kLq%_ jrF,;^LGsHUebxG4hk Ը3B pɻXvb|*q455%=Q'd8D^ )<i\G[cf4FZLD 3'iaXm 3onr߃kf(QX^_d?v!]E<"YB/#) =rc7Tm#=BH".'Ug多T[=[H0lKv(!mHV8X,=sYʪh!\rJOVcbb" pc7G}f2dm"Ar3KHV@PǚN?NU֒1K+/+g m6h! %ş}I1 q[ȸ9_I vz"ET#|:ls]ĎF@ĆCYδnC$OX% Aja;fbĽ ?'0W8BE\:!hiUXNmxkݴk'3TCO+j*q!cK4!BɈᙳE\Q B y i6A@Ȩ8mLiG5%ΰv?Y Ak2Vp%z?بϑñ5s3,_V!E#Zh^YޒgL)B92Q&ٿ &WqeAf Rdzm5DX<~Cic-y1m&b`^[nq_HRߟ\4pbr Y=eut1dN?'[,&B41L_B8>E ΁b&A]!ɶ$Uu6/s#*Ox0MQe"ZalGw7(llޛh71%pV+vN[Q P6}FDSӏ^6|#5E-K0?LCX-c`Г$0nw>/% ݇*! KіpRe&gW,`xL U&J@[y=cqF֢}gU*DjvX(Qd-꿛YbXj 1ݭrX;M` b3eŊwlf4D21a<7/ؼ.W?v{QMn,_EuԼ _c]/&5.iGh?# Fg6;/3 ,j4ກN~Y}mLjȡKS߅ pjbՠK)_@WTY[wh|zq|OR;kzZK^F]ϋKZ=X%WD;Rc\;PQ 2wYYjv¸MUC:%pgPI)'3lZ5UYL gDpU xOè\,S 5r[w b`ht,9lS<)I(~ AX4xsE#(XیRIrHc?(SĸihsHb<f0H,#a}GSGyÉ@>Ա|75L [,lNYHtKlO TMS1tYɄ4 u[˙o\쾩gMt,5i\ZDD{޾QǬ~ x V:Ar6'B5P ٖj*z`L:R4 KV}U7A) [d%¼6DVܽ.Si36p}(}%jaW+dEg|)>`P:) bGǑ/>Ft1OG!{AX,2#z~aS<񳐉2ˤ/FXEh cOdѫƌcH!ōm/8Ϭ`zjR^3OhSakK?rӕ!+D$K|]=[..S:P:ѻfjk*mx?y# r1 BR,x dH ѳ!PwNZrqkAvϔ_WrhV2YRG'~j6b +G-Afa<1шMB蔍 Bz$iHSݦ8_{7b7eR|q! c  =V&$} wN,Am11}D *`_ 0nL|Q z%Nhȗ@2P AH"SsOlSŗpl'#z^;*{&l&h~~CT_wr ħS4QOiT8l+ 9Ÿ5NL)f,W#1>3^VU(5;JlLG^ YvCf8UToi܋֭?%D_WއTĉ.|$uBfc{;VN"}T Fw85kˇh6 3{lRii- 3u3+j*4({{f0mY+H,X"0m /<h.Di 5F4o}RXAJb-/`=Qyb-3~0;A!7u/sjr-{,:qg[I yFU{Cr>{HܐdCdx$ ֲلQi8ZsqR oӗ{Y*^wKf =n UɋRԢdr1LRԮnk_6@mɷlo V.8AdJL3K歆b=Kpm''WHJ3 98]۔%)=[z{@dQiؕ7?Ow4Cr15D^9`܍k?Ğ il|" +"1{-/ay"E"Ymgh\"Obk)f}<}nzn.$rRC-c#Jmꏊ1fvB^"z,PxFJe WA{Q%pܽѶ5JHLCgnn*ɧ>ҦfR1ߗlUKncZT:\ȝnz%5Ky{7G~LT,W" i.#<m!6%8F6{~MyĄE!tR/8E~]3`NL4FYC:;y/y=>V 3pz_):9me&Af'0[KMbS;Dߩ6ݽ 4zR@%YAPer6x4w*wr?c;2O"F1 rX 2ypW.i@5G2$ϙrQk]jo{2a,A{an_- tk؋bGu瀼Vd6k3MG^qr{'rk+uxw?{)Yg4c@7ws@wJ9C9[&$PŽD7]Oas,ghNf m^ !ᚵDMfzx 0{ )z9֮E xC.PT ' .2ߡfWI$b]\x A.!#ҽ,X]g׃ﴁEt7 1[8 kF39 0qkGo5^?bADJۈ+:U:O6tP'`kƫ~_MQæݶϘ!C߆>\_8 נ@_Bs^.__m]<Gje9V;PZ+T- O[s}{_/ b)7{jg}[˵*7;)\e[myjQȜM>V.CۘM {-8=E9Kj 5Hm=@F"މD5?yN8TTf'?GóDWbr9d}m1ģ!LW e(O7U &$#? xSaFhNX>:_d \dr >2VW{[ï h,1F~\hnQ]ZFTge%݄XLmb%S='K81PQ>z&e7'.*BM2:;A gGR^h-3Pnwpl .AVainuaX!h[wMi#=U2=TYZp\3WRD(/*ҁu42s :Ae+#n +ij/~q{S-uı`a8Un7,j>ւgzB;7`Hѭ}"6*/섺8>,ƄjtKưW:qKIHGC&\AD9#sNfy>H{GiORЬZDMh6gOӚYկ*7FO"yg>&vQG^9"ژ}My$.մ%F+6fڊ9¶.׈ϣĸ4ҧ8zJ_ Vj惵EDzĈ˂ˁ 0k˒C| ļJ&Srh$NQ^&r#Ւ)PwFڣ/ dZ 1m2苡dܭCS "-yYMH M%7bgj¾Ƒ4.CB%UhO.{lٕ H^N7Dzm+@e)o!{l^)j^@ؿldEMdڏ@ͭi7D pdd#5fn$`q[o̴4ڛGw9=ݭ-z蚄@X?>!+$^JJ~bI̖g`j͂ iUNmT'^U𧭜Rbw]xlj~L ],Zs,{RWkʘ,8DKN3u㸧/.T?0)suZch;}P6CȤ2P%QCǯH6wESpٽ݉-!~YL_C[֐5&.jsy3v27<}ƫ.;I q-9@|C`m*WrE5bŭʌO@x-0SqƻF ǣV})X?1#G\!(/kn9.pD'OpúHxBa$OӇ"dSՇ5zsZ6pD BJb˃DݤՎOSʞ$h }Uι} -+! j)DDF5F%](r/&ʞ WiOɱeTtW QmG 1ݛOʿ O@KEGyž^ͮS+D m97&uP3q^Vdxl=ˮ&ݯf=Ό F#}1'/7V_==[8d>CbYe_Ym V}Ė>.*4XO0WT`)HO ׶Dvo9>tڪMőEYjy_55^&#kk.{d~R~ĭHo!Y CK?N~֘!qzʛ|ZO1 4,S(LUA!zGQ<ʯL~=Uo[ ^OiNL"̺'c.k :vsG7Pugz3avʟQJUEh}_QyB>GYp5fv)} )ukb|Y=WX`dSPylxèjUi&( ˦80m\aݷ{&5l;w3c9it!Z2( 4K`!F쾽K0Kz|k""޼i/?׺†"} \Po.jtt-]1)A&fi9 @HI)6`.JO7Ə(᭲%ԫh0.}-= EpVGe~ei9O ޭ}ECYm> A/fk+Q:(E!ؤe XIlZ۫V2u8OKMbuCLJHA1ytOo@ hZRP(t99(SKsRMp7(4'ɠl:ܻsʭ0kK;qzgxRwlوH DCeB毢7 H+(Ω7p8 aa.v mhuΎ>VBRix%cK𣊚/S=9:hkiOD,Ш'[]U1hH௼@>x@ʴl2n8tM1ٚsKÎ`n 7NW;AL^G>dOxjpTNT(5L;*Uk)وv$th@hx8|A){1\o }lL^PlH0*POrfŠW®4HNXgԯ* ͧNIawx< ZjZ;Pn鷩H:cױ=?迁ktW>ea2RkEI 22sf~^$zbM*ğ[AuVܲ>k$OMo|x.p춚{7-fI::~-d;:RY<&y`5>Yi%ж/ﳟN@ӟB:zA΄'$7?v0l )lZq>(p Zz8< b`tUp'~]" T^+xαyVڮ0yWf O(bЇ dƐUN]2\;.ԽA0 | O 7ٳ7}ngrD1ߨvHn*~%ʗXD-7'8Kt;19bK gGbE3 ^ݟw~&8l!#tGiKVc:JI,EO`qѶ0W9%A_PבmG7.y^b5$b4䝊nA}LUo.+o}eMs_7&k”4&^A"M#qˊ&"@-3`/WE`^C4)SmT=z5&Lqa;*c@;.ZC+GhL*™غ;DJc ?T%дcqKKF2O \ !B>B,Gmv9M'hw۷>s1TVC0ARZKѢWk@ l[Y@N~k)JR݈Z( 4:tFg5B3צD%!qXD8?DFO>Y0L*V;Tx#S#{x5RlHv5,:Lyڈ3<뮀JsN+ΒeptAsjha9~r 6E?I#09n@7xjyC `Y#n*ԗpalf0 " 8~]X},h`nKDQ\'Pqқ2M-tHW pg+טsn!tPq"aHn9];ښƮӟi)֓3ˢM BI%jiwHWz~XURs^AfP0Z#:ږjfBІuDJHwZdFFÜt,G^'ZjFB$2L"v%_dƯ~crPijq)Y-WIҖTTmk4qly]%tȿPqiN'_&gG4BbZbw d6aŇ|!+X]DHAK4  h˭<Ҥ \djaF*g/} ?}{:@;2Y׻Ԛ;ieOgZجzQ/JbΝqP`BIYS˴<z4:&,e'+S1EG %snI]z 8gXn/b^ݠBr ȫcDm$ZL*^`jMD1uy`n;}c;/ @j\f]h= {ýfSR>/ s1:}W閑`=T 6>V}k2} u_!j80QQ 3.5Sd0:K,fr/vr% P%c WysS<㥕k$c Լfeژ*T[IN,_j\Ћ&ֈCLDvGnF̙Yݢ}9*2Jq~}iD ̸RcxwaCx@cvo;b2ķH[,]y)Ys<5jMU2|3`ˇ8D EeOgW`qUO?YT|$0?zEХU;s3{v)tEB +sx`_&\̆*$Ц5Bt5Ԉk{S9lZ3% :^$~6 M`E2F9Xsv+Bzy޾`W]dcv!ܹSv}2^tJ{J^S5ٯ o!{_|O(m P3o>L}I;2dv2Wb[k ?UЭx23+(kZPNWS2Lv%b&ӨdIcd5"9aFHu7T HJo_J%%TDg7=~9tslL&qFfT ~gst_oULm?ٝ<#x FxwJlO!@!e9mq_̎~(^˩A > r]X[2<[VFnNmtBpMڵ,;H u#US2-{_5q̳܌L] 9ިkpE  h`FΟc̴8X+[6p;QzAO&c۷:T3D3 `2I*QˏlעQzzp_ih_mP`?\{֝F4d=^ܿ]J2',ZkbuIҘXI?Dj?\,Ɍ~Isz-><댏rgTLG^R$~Gތw,fBCªG|kqs 0r}#M˷ "6=nq;RV9;8} t 0ƈav]SPZ,ѕ@j[=$iDzX{/WYR VNUG\!Lѥԉ04V6x^9.S UWC a#G{A)?+^'bb1,[hy!q ]fiX s>Ƚ#X[ه$t딇#zZTEmZV' Ge k@<{ 1KCޚVҥ BTnmXefC헽4<Zr6mQB禯>ϬYD;f •Nu'rj$$o1Wk:W25[ΖWtc֐Y&au|n"(@ f D#@v#tPyNs]-\_i2[A8~kUg8mNw_!X]v[3 W]u#U-{paT栁Xعc )M?#W{Xr ePepkGa";kR@DOE4\wr˜H҂JޕtX5%h\X,#A@ NC:oH%!-x9sè [^S|.ͻ߇=BI. z,@gd=A>ޡD]p!>"+?lbZ%oE8Q¹rr,ph*q̿Cۧ"$;@º]ִˡ߽  K@XX:a9D^z:dq":`>];N7Xn[W#glNȷwLGrm31ORNENꉛ(}Drƻ%9(ZYV#U40hϺ"ë́GZ-VlfK eB} )oq"ϑG5Fzx>:ѻq8}zut!̑N>[BaDLhQH+#zo ZY1m|\ՄN&t C{l*"`2Q=;N{i~"uadҾ1 ;B.IFCm$.KTkz6?4u+g0-D_JY]7[MeFFwaF) GEP lrw.+hx*"r=gR6/h9P,| n85!?Md/D'GVH w^UGzc )^^툴LzC'{GzK73L'˳TU+TxlN&Q5ufp45} Z>jcaV$ Z0|>r82Yw{b׆,^pkٿU# `ܟwQvrY+) $sӡ Y$\9ִݣ;L&o/ >;R!w /$9W#Y0%)DQd=,S**Fh 6qY[Yk}?~'&@K65JUw45ˡ6|>U5d)PVv@apUT1"0ܨ‡/QARk,$[E0**gѽV6ԁ~8@%ZT|ƿ.vt[.33jo7I84مхpnR=մ5_&9STeu } *,=q)*?3Ep|S3ߟ* :,ȇ?'ڝYlϦߘor1]ϾڪbKmjyw].Is9]5|Jk vOx# }kIpܵ TMHBm韆"LH]>-( nN)}~Iрhc(籱~] Ő?z|7%Io/]XnLи'ᛪpgR6?rBH.ꭾ\Im-ߧMkcNo&o[ڢBX4vPGުlC_(gݫdb_+&,O16TWw^b JOyCP<0&\ "-ݼ =IXfpnb(;2 $2-ݤ}/mw_@o!?n|YzΊ _K_gX[H;#4?*#Jx~c*˾dK_ǑjX]i>BK$ s3PP9cKD7p#Z-NDr4Ph"m0crb:ykJeתN(,{I{p k7CSp v0D-&]|A445@.y8vKyzV;~<;'`7 _]U r8k;f#-sQ<5fE웩ku8x@fE {x2I\P# HU*uy8\ u iObQWd ȀU*wZ;k7dgUʈmiF)bj?w̱e'D."5 oD*eM}fpsi $}M:@1DԂ[14K:O9PlƜkt5$G(QVYMtfQ&GU>N;grsn:rn'Q nruxzGљnƐݒJLfP^Qz=QpdtG+kr`qCA.MԔPfǗꭌ/ؐVa" ^T[ǘ#:6 0 PPU^Dj*ipV^)2>h*i>.'C0,G8iC]OTf7iwTmg>nq+%ڱf͞`&D@ƿܲA!?CMf1kwK1>~=5e1; PhwJ 8Ϋ#fm G]|;FgX|jiǵ#JoB|eV~Q8LiXN,Y(M`PNt)260Û 3 \7HƇ$ͷIUu1_Hd[ltIڱh*Rs|J+h $A9Kfi1n ?$x!g*8:v@/$7wDk 4=<&rfĵw|n :Νuh^s[Nsy'@?K9j(gˍ,3T[ˆ(mԽXVSqQdH!7z J?.`n~ Iq SDeEac^VQ+X1ʚQA~L9}҂&U{y:v+xLi; nqk捛ʚ(aܝ3ʠ?lِL۴Pʛ>謜?^-ⵢ$eP[R \l"v LcK霹= x"IX&_o~U88Qab;K#"5X&5~[$- tpl6&] Lp+r|Բ_~V24P ۥd|Bu$R&mS} ( ' 8]G ߳}q& DMlEٮ6ee iԍQ;>̬; 5CaSuWlTJ5FXEE, t46h֑ XC&G.eno:(FJZ?J.K5/c\aG9݈o.v {{H;t_j/g꽊Jmw Y7PA+ךaJ*EwAZ"7WȦYGgLs^ ۫s;zjaO[6-Bc#bya&o5kZ{E7`|86({rڱZQS˫΢xpJi╕-FWT+70i؝4<;8` 6|aL;莄 Dޛ߃ 0 Ś<=l,>o@QK/vfwDƭ3321:Ae(/45bPB9Ү&<Pλ+dgwy-Q=XKZPfÈ4RADbE}ѯ{1oXt0I[[HشuU޷D A>Dm!R:䮼*DN]$Uyi|rG:65#G] H627DqQZ;u(Lsa iU_!,d>\hW!BeLZmw T #@Ā%gfdq$^h%Ƿ5xS^ wA7ZDw8vec940DZ;601=CnQ D^v,~~67 XRc!3SoD9h-c9<`[ XylhL5U,cR8c}=qPm鞎Xž?2RŌ?Ɍ?c ӣ ehȉ3^ӜjwMͳ^>E.P;.KJ;#HX29bSBV -8j oɵ[p"?AԟΪ<4⛛IUē-zmd2>O!EgOTH0dz mE.[}ٟ%WoW{&30;_ԄI2IHԳ)ziq$%>4ߦ_oܪ5vŝ1 WtPw_"'2,ND:+?Em]Q812u n.uL4>{PHC&_nVtVŖl[+`Dtc+ei P[6+ˬAn>S߅T$KfPAth8vR^+ٺՐ'C'411\Hދ Secr*4ϲNK5lS}Baqn)*iЧƃ7K!mA.}Cڍ7m2Ql,)`û o6m$}#P{׉4 g;%[0$KQI KnPZ4b7P3>VJClS<ϲK!lGCSFxZoj҈u$MؙYӧł{d1 <܄HkYx^)|bBJ * y;#+@| E(1~ʊh2s^ȟпcW6I>dVJH.d=0,\aP-][AB̋:^ 5bQC)Hi1sA$9d {} [)i yexCEyd$Dά?N/WL!thK")eQM}6[;t%޿bcF'I'6ɍNFWbYrU{a 9Ŷbk`cQ8܃GJSUAK3RKZO*ȺǂVG|X%B5Md{vk\mdCgʑ( Tb.0 o;/%Op:ErE>:qx 1eC|=y/jPiJL/z-NPn8m;$ˮsr 7/~$أblLTrytvΛ˩`܄qu0|Ѱr[~rY?RCNXǞƿKX7c&BSȨ=џ?xu=A}Y6@Y逑"ƴ1"HZiDmE6w&Xp$>Eo3RNE! NIʼD$,üuF1-lݱQ^`"py"O5ΐ )E_SQ[ X<sWn'MTO?q|kx OMPe&%b)jFe,O bjYB8A/vA~VP`sHf yw7>e e\[m??Fqvcn$u=AC=6G0 @MJ{"J;C`dXn^.:Lp3y,ŗ2v;▢ʱq]yhW 毜Dk"vI޿uöؽ¸f<ʹ6 @EA\KB7RB_LMqW KJ&@;PltJjB9V*39*Z.šϕʫrp[dSk*d`a~&=_-H~Sij)k.׹yu9C)h[rtyֹ)1ҟb*ZL"A} T'f/5R~G!5?w[ـj)x1nQ,.):=t3W%$`(M©pI]N1%ШH۷||{hpmpzE?.eL(Mv Olz5-0(|Oes U•^tS6-%tZVV7-yqG"Y$/~GFmʽe󐮪屶XR *w1"_Mq涼q-IrvΤJ y1"Yn~h&ۏ+D_Nhs`-ya蚥rhTQd9D^~H8)Ϸ'pC5qWP6#mb ۻ;:kM GDM @gm`+!zyq@!d|qj~Yb+م)X&7r(ífQ.Fwј 4F®.x*IV|VvaTޭ'1t| n>?X2Y"˻Ɔ=N¢Ur{!Q7d@s/쾓ّ|˦~}x? d8̥A\yQB=|‘eL*0i9reV$ ů^C@xz Op?]pg3{S2eT&5Sgv#A^EW\ui m'f+uҎ~TF]޵!>Qo'U=NN`?SЯŸbQ5~bMZvl!K\iIx۰D3rZN |E(h{UuǠrYY5$n誠㳆HvwZIR~o|Ok`p Ϛڅ^ۡ{)A]BZɶuFa=O '7y&z&Fd vOIZ`stG|0nQ J "ǕX1KE(ӯF^gێ躾-0~>H0}RszѭDLd:-a"%@K^C7mV?{Ep3 aJ*-MrLH~\Cx\p@=笴c[oEzOWAsT:B~nTX}`5ZtEKl4a)b*$1I8J~ToESVv$bJnXbqo5AQ@uDqנwxPZE); g=@}hb&thgwcu+J4}TVˇX M0r 91Grz ɴKRБ3.f5"?i:P,T«PۤVעA+o[H& UA#aA5aW! H>1v-) :̠ y$֛!j47#o0zVmPJOG5`T]0D.A sgHçЍMp *떵LS7{t\Y=&n~j][p-C)1r\6O(~ZԶƧl~ެZe D)&(&!K"5gZ:_ѽLANT5֥2Qk"d#b`+I872{*%/@*5`li`LgUOCaG ;X6㿭2p!d(GB5X4xqaoޖLIdT6RȜ@l#|9^~荕ygriRG>1ٚqit5m <DYV nx{o GfOXg kҴhh˱t6ea փ؇,Z=Q?h=Yg *&]q|:Ͳ%֭[t-u/|4EuN":|OJI|dKF?3n̯"h[v\9!1gBzGq6(Z4WDxcЌzϓqCB<F /_U*RꌳhH>=OYB&]-~VhL#wYk'?%0.gkb0' $e8>$uV T6њ99A1!|&_ 3M L,.N{WДNk :8 CatH՝zV+ bfF$# @[*A/M,3a7]ֈRz[^MEm\d_!71V06AmzHŽ~_TeOFY^0~.4IQ ; usӵ A0l[wn/ 舁K!Yn3$=Ct[,}/'@mSD CpX_p>nu6&p4uP<xmAPhP*H)ٌ.L &m#&Z ʕX#@VA[%CԎw2,2LNX/nm҉SYy ӵ1 G#+Ek6߾&8TBMd'8K 8UUƳu Ytq# #:kYe{PĔ _6<γizN:m ̠'>)hI,-79E-9+o4kfn9ۭ?Z tU)k|aϮJ^n|XDWG2kC h?i(?Rggu #UTz7;E4 >QncoH7bI80ىsUN2;rqz FX*ÃTI5AGK!9(=KIp+tpMҤ擟Kw#T`wr),?AUz܃JnHn|-akʊ|ׂSGp,$kUɨ=d ōtDӃ[4հoeM eX0 Ncz_-POpJydZ e9֙ M}dCСzxx.g$v{oW+I_Yr}t0gGIfu/P5ʐ\igo;nLj3N$ʮ'WW&ݠ*nƪ Ƽo:K Vu{[p`'igx;Q"4 N*ʬ:?6zOPGG D :Vt7-͚S$gjS}%ӿֳc,q4Mi3-7ھC 2+|N1 |tYxJOPwWV1I؀WXp(g+y']Hz!ɕ+d3`* (Gop0(1N^yL&0ێQxu:THWUäCߣ t^n +&%A`Ԗ?dM>Ee^յ}qPE( ܂mÖaDNtplNZ0x6̑ Mр#EYp!4Q *X|6E11J@}DF#N+>;waVE. 7pEMn!}/6@fDV;%cZF$oqBD ٩#,nC[KK 6L8W(+]U$!%+S @s{Iƻa\7Dyhc9@Ue h73z=y[ Qa#E$;!QP|;D"51rC XoLNiyss~隊]]$;BU@jQftɓk7˺JE'v\0pwWEF,+'0<ބ{mM1 g71<<-~gKWjq7'z_ȜS[:@G)~Ҙ~kN9֝z+Yv/L~)vZɽ̏鰯l-]%[\`^ud#{h_XޕЕߤԊ}%Vbcҿpɨc: $t00V=dsWB?j_hՐ=|eFn~z9&ᾞOHtDD M"\2Rk97\F5}}3a!p. O{Hc `WRj=ʲ/l/ҨhXP ;ZT1U`ͨ9wgdjրp1Lp_ɟ3MzCii.&S:<\K&2d a.:"hr'qeIK rUuCog B,1n edh%yzwKINJ`37&Q % dɱ?r 7yuҐiEZ.S8m<ƺUdc&9ݻVʫopF^`!C]ݜQ|XWzk [OJ د{ ʂI-6s>f㚂//>oUu -Bd}db@G,3dZVBRz-ʦ|P;4Zv':آZ^~\3}Ї̙K{,[ik8EfK")LSӰbHv<#2:. gvJ/d_A}T_޲H' .aCt˼? ߝX9kH$%w7:b2)ɭJN < %ۗ1/L7* ~ba[4=>~b0Tycݽ 1s?ꠀixiV2ǐkEp |# rz2C(贫,:+LR]Ш2?Ӣ8)sDroqq-dV9˧lb`>PiۈTN-s]sCʗ:Pp{ɂ G雬a<0iUOz7hq_ZQ$Գճ=QX^ /0) 'pܶPVL:1PB9v B) )hpw_?5|vkd\yln4 XLz=Ekآ;k:$ۣZR~s]Y\z<D. Z(ab-{fFjʄi'xpQko1 l&|A{.ꉏwAgY[,E( RʿUtVMu)s,lȀ_E&55)R40E0VAuZ ;Gq\Z9n7ٲ[?W+eh""* "ho<@uB8|"!_# \v\ʗErZ÷_H]!n%ߨrt-[B r/Xkp>4'&ꗫIBB~n_ۜ^`:Nd0+)PA\vWG]f9䎗-eo/$Mv \"|nx$vd)Te[Z27<E`j|sadv-"'9>S𔠂b% fzZdMKʨH]؎?y71YžTB} j`F2gOoо{[Qƕj\#Q+䂟`eQQn'ml seʻ5'`h{.:."8]6,ZFBs d}|JIVo+i>R{{t4qLzJЃfFqBMRr;7cw[}<䙮c b`ɖ!z!\G>t/y D+t13L v놻"%uV>֒ sn 9޵ߧ|S7|4y22SB-!A5˿CS^7 VOQ<8/~hyQ>\Y.LGWh^x7@xW*o{KP\2kA N688ƾS\f]JDs=S5;r=wD\?*94D>&WQ9+z)Ӫ!F۬4}5|He sULNE9氞>mLH§\{6s{{JͭLSNk چ@7Ҏ{~d{2ء>2M KT5wo1@.϶%/ : :}1D]4VD!@%=:T-鈆>H+#>o'a=PB oj_`by$E*-ge|n{{V3W"3ϭS*OYVѯK 03ry@2%iǹ00bW靉'5&j< qH:vtcI<$uyW$C6PLͭm" # +h+(NVN绰KI(5ǺKw%k2Z=L_ nĄ&+aMwbӥLwZܘ[$9* Yf3'IYO)+`2޸H@J{vn4OQKr4zqJv"=ǽV-JR1P涄 VXڗ7LV!05vL?xzWQv!إP95h;Xiǰ7Hhq]OR7RƏd"ʆetlPX^U^`Yl2w+t ;RpL9u [i',2`+XOe>`OwW8"/AAP] da0 +JP ?=|4 )-Bx$H˨튑 (@f~/*]b$:`+뉙ڒK%Kdp'$h^t_M?[ϻ_MvSkRU)eo5V굀 u6Yf6A۴se̋/tu҂׬E}?U0KPʧ4l(4Id8%cM #0Ie)aoE|iwc!w\۟9R}kƠ+\\# {B^CW)ǎ؜~bڥ䨀]k1 z4/E~?RCR~M*k)Kk#*8.xiR@|ޝ.Epp՚1q#[:!ei_'tK)'c4Y1dMsPgthU ؐ`%*`xnD;m\&qIE F/NrܻK_4eEܼ$6/V|6-ͨ$: !ˆ{tFL?pz,KD^4]9̯s|J%<ݠuS)'w +[)s A MF,ZFsENߛ뎹D$?,]D5T؎KLpTR̻.YxrKe?Vw7/E7ǽc \3um׊!Dd-n xVn} )2G"!XUd`r8\02;MP♣nzoXnc/l%0R ܉ 9Q~33r xSn<'Kݥ[' J Ks7. S,}K'6m|aʀ#d}~˒sͳ A(7xʔT<96~o7$RD6PseX5Xv\"pnThw 9tGRh0GW_&N &޵Cq#[T$E$٘;amjpp:uA41Cq~"aCgeq/lt>+(M9ϩnUePHI.GFgiqLab+朾GG2=`'>A8hN@0ZF37OX5֩Q+a3"bX*kk8J)I{8ůFcrXic$KmI3{PHZZ0ސ2rάvsZ8uBXgI5w1&k1  K~BUjhRP;E!$":$C6[[ܩ*G`JYM>wK ꩩe!(`_W /wU_Ÿ&dm}X +\\)EI̓ ϘowA>:OR=Ք1C fkS!y-z8dB5?UA@C^A58W0U$鵯UKGQ'UY^ <^hؓM)Ōz6QN012Y@풔>w!;1} Oa\n?j|n`}Ejw%j"`: 0KOׂsKI]w!l{u^Y]o0t'1ELpФJ'tf>d1:0 4nh&ޥL j@CcWgG!NmysKyegNpKGMkZ]f8ZD}О9I30g Db\(Yy^=@`:9H 0&hɛgu+l? gSx}nnEZ~d\CM2|b珊M6j=( kav+&7`?HY $4C~y6 JzV֝9^BYog .8SVLS5E d;% RPL Dv@~H 0/T<}F6pҳ6M/j!C WoȐ}8Z]A>{鲺[.]Z*>ŴJC&ޕ`E=x߹(zyj^~RRCV}Ms/BeHxr'n2d=1ٝE"Y^zXpt"#ק7?<)t~ ~s9G,e.Swr }W|b6c^CQP^UW6 Yk2@1V9S4D@9 -sUp RɒŗYdyhc/s~&|AK",<Ք_A2ptbsDy&T ?'OQZgvRDM@xUQ]ST Mu*83#D ;Br [=o{ צ$2%{\g'IBpS)R S_v=elp8d.hb p}ywÜ# 2hM$;mMbtZ84삆V8^kDw`9eP7^R/[=sVywߐU83}2 @8k,&dQZKŸ)QzHᕭ%{飤H IESf`mC鼠6@TLR9%YuP25:5%|:?љqlؐʥN, МQ}2v3vj"cv-Ղ~nU@]ڐ*ߢ/̫BW~K/4xb69]JAw4a;۳r&@(41M6HŬ2jK6d/\Ai‘R>LZ|J|^U}2c8 x,|D΢mRS6,Eҙ0Л"-ToʎJsE%Mqn諽zpCSށ36ѧ?cCJ'<c5(Ƙ|*$,]M@L)7-!qJV_#Y! PY!PlHkY+W"mgC>+ ʉt\j@!10݌ @= W>^ bula.@*ؘ]mq׈aV_Fyܠse7"Kc(ߒ;JRV =%XGTmó/КomS=qnW&IPcY" D&Z_IA0p;rm"PJ֏Lس qrH'dgV>s#BA'AC+Y^3 3wt2=S4TJȉ{^aBJm4W5<|"By:H;o0Yњ ;"bKڱg:1}{?[}*Z'Z۝82n UHfe,w\ M EsLnNruelk}z}}IΛ@f55_)/m^^n@>aKy~ V4R(8L GOz8pT-U9XP e};UISe{8"")"s*՜/{)jùUxysMW'`[$y?s@{!pIM,}n|AG'8!OCȿEd !N_Ч_N0/x ^RՀHjn JqvOe?=]3ja1-#Px(R@C6Zj3i+ Y2t巳&1w$ qXMݨb4Չj+i^_Þ'4h4nTʶ˾n~UƆW)_NtXRm"c?Uk݁@J<)گU/Iu'C6.YtR/@Mne_f)_7dkDlx, l#TmAd [#" r4 6S&eW_(U|͢[Y: w|K/;-?J^ڍH p?U[IllPߣ7N^>(TߧYg3yGzo߭rZrZЄ}TG=@ߌE+$]ɒ+,~ BM̊7Amv7C  &Vբw̅~5oH7OIF$(ie.yu&yɩ9Ye;5#Aqꍜ wfZvU5| ( [f,;q\aC&Z_᱊Cݞ%xYb2ԏ~8Aq;j*u1&[_[C TѼ$߃}b̽/ͯuB75/wI iYkT9彃Uz wvݰ%K4<ףsPfU,Fl^M8Ve6|`ywmN!F"~32I/FKymj$Ǟ!mͬ蕀&!vo JO%&; lJn$v1oY;dҜEӐ5X.72Oa*E` {5A~ZQt zS 挟\^" i ;@1fW9=⻬*,kk Ayԓ8+ߺ7o| ׄɓv%GN{bo>`(*|Ae ܲ,ߩ ꩺf#D6N'/[nXh܆DIޢ%pK|FVJQ|_&wa'g|[eSӉdQTAM|u^IJ2= V_D}!nN ؑ)-3(ӝyǼ%%'}P5wӿʢ 2\ﰒΉX@73ͥVߤdK"NƊ5ܴn1}o^i`|-#m.'5(E옓*x 6\ h=u#aZ:\7ͅ<&1;2],{ ߔ}%1M}o05&ɧiA;jVE>?}IVߕ,$GvQzSī\?оiCYq5jo%4فYdW G kkfѻCb1Mdz2$>xUcsIG mF){9̿ y#}ү#,OYtő=#WߚLq픜;R7q&/zD2>qF:@H>k`sb"K]6C? Ez}=u{ymp\-i<:IZd:#MZ/%:)ᾣlρ?'T\ww1LJ+2;]57?JOJfOH @u$m}+ɰR.D13[Pc-zVnՂY%V/5%R?tf輝Q,V6'\?z"It)㗵JU$+Oo;E/ Oz<;|ߔG^|ShnO+ \OOO4^yk=:!11EwV!lkqI[R9FN@ -pClM@DA Nn|3F$r9 7MF}I:Z9yߎhs3Z DA\2OPj>Dq w:ȿťʿvW]a!=NQx|YSjRZvD[]z>1 Y ї1EUӺs #ےUI!?Ml]`&Q%PwMH#_ڍK8 '8,RGoG"m^ֆ'qg$Y쐻Ҁ:CB?Uu{\(v3C7t Ih7 G̥gOb]45v][h/Gbg\S'ٲv&[|qkz|e0u٠/܍į?`#cv)BKפl̢ŦoG :YH>I{j59pR쉊wNRFԦy|:l`Aן[g?{4@8SbDF1wUJX ݉|0ԑ}|,[HҺZB|}+uv,#<=HRD:C͛ coj)áb> O`f>rDIKak5SYsDtn6F'"YjO=.gA޿{}bM/-NmL$S<:Q`j'CqK^C Ҳ^P짃X60b}D:­ ==9ٺ1N9K̾ օ|9o3q`TK1y _${\d,٢[3 ګ*Ghɻ!8mD1a躭. VV $?`j% ~.Y8D??-jdSmϩKIoiG)zj"kT仾)+c4cg=2 %JcK[3҈/mހMJ,m?7*|go8^X7XɃ=|sN{aLr%0%FuTڗ6hBZkSeZʪ nGN.R2,F5 ݞ,R:&}.&UeeT/oLe^m뼗qizY<ۡ2E5.k#l_c+"rp,Dl = 1O. %S X7|9d6Yb̜yEal,L5@d.碥@ h쩶`EmAUn}bo=  9YT]OvƸag829JT PR#4>@6ī%AneVרȎVG)w{s.R8=TzRɥ#u[ķi&ɜoO6Z"}QmnB0iNl3|t:OMq/_@42J[ԊݘyЉ\KTE p+˴K*ų1nM뙣ѕlIeqETDe"[vt(Ŧ;!V<-ɱ}梁F:bYh}OceV%j|2n':iS>zZzSﴻHb}+%8#-W&.sLיmpEfF'!F*q(ce'ܥm?F}L ՖomB쫻%wR5.tg0ФRe Fa­w>V`X>mޖ,ǒ _wB9ӱOo?G}h {ѻ݂sS3Ri%>e IѻPv>뻚 K5p;\:ءfx4'bI<9'4>a6w7 U.Ovh]( 曱<@Zq-+?\zTKjʫ#cVzQ/$SRlP*ձeOXև<t)nՉ-3\5X N[f1uͶS1ÆR5C{Ac0)xyL||S?Eth X;%|3),`@EX! TH+ #emVlDmSĐm>F%Dĭ=f2kXiubL$ 42m- '0TFdU{~g熏_!P C ?] 6RV$0vĠ4ܮlԅD@HcHt4sx@KxS?_9f/a䣺+ʑb?;a-9tI6jc 9)&ߔQIL4QQ=uP"II dO1.^$R(:,{AC:޴N4C w)fA`x.0I8Ѕbz Q}(⇤'~ӆ`wQ/*8FOi1[(ơ4w \s6:}N@,z[mtד&5K8l7n_o(7oonXsfrus/%sBTco}ѽy{9rEʚ>ˀ%h흪WDq"v|4DZAe;4(:8`a)F1$!&*Z;iTW@ aݾ{H~3(I,9f%䯰1ZQv7J)$G=c8FF_yk-$ã:4 (齭g%#Ph,nGZ~ZbAzrk+qO?`HqO P('|$^ /g]3Nl9벹0f$<ۃt3%#٧U_gRYE;MOC$=E$/ha&}Of46ժ.0 sCT= .ch ݆µ0 nf mNw%>jabܓ+T69bOn$8Ak̔/w$ rEdTͱ71WuVBc;8 أ2Fҹ,V'^CJy! )ھSnXò'a[CYoD7uPR{9Kq˴lJ?\$Rwӌټ>Rf9G- AY![6J@Lxյ׹fb͓/ϵbO_dۊ\1DmZ'mfĤoFbާŒ׾zḣUY&r&z T(N0DObC'U$ diq[S!rDi$Tr]fBYMNPgaDS[*l~LULϵݦQ64 L2'F J2ok>T$}STQEwh4, ka2`M݃hҍMRc?)f#1o?` e_AJI#uB%sɪ(Ih{7lmUst( /aXi붞Ƽ թ੅'+TWUTR6d9D{ MX0Oa7 !bCMs0HhuyX{fffZa&D,[aSr]ޔ3TZcLBs4./9 O{ 9F4!ЎS^z;z'hU{zw`ҕӽLb rhPJk5-@ְz9_Ҵc+PV@~a{х+ ]!$S?Szs^:!z(|ʒGI/RXoa{E""6۷$]sZP ŋ?M;H|1t_0GCxZ|Z_=6Ǣ:A);;X]DIՊG [H !o[HPc1`MҖ޺T髰wS3DF3k{lmcjbLۺsEґD}>|EZ?4j!`yĊe FXC`)0%^NKN khZ dO1K%&6LssoI샛UUCQeGM] McO5/¦gҶ1LO6#inp1s#qTԑxu.yOŃ@V7~IGY ҂׻ԶgO`]ѱ8hίwp;uyf0d#dX靦Mi8V.cT .c#˸mx-I1eL`pU'jqNH $9GcD<c "xGK+J!װeÁL,g$.1ga0TcneW'a |w _M_רt3y KiC7Ⰵ\>3d|5?j2)bv nv"d?Zp`$Tяҽ_bsšdJWB<7dv#M(1iuøLzpC |j`k)_ˈq(aX%%qz-&^k1|c-g{8[έ=ֲSϖD-qDmw>f6͐=ko!Q'mK{VUGA5<g?>.dܪu7yzp[{3;Z:W$ ˤx0( T@Hڢ𪙩o5pN/}<S#ai9=)5{~!֨nמ(i+-ryhqʦ|οΩ1ָAʆ#Gջpak7 ;u/9a2 ߝ#BnˆlC:'d`Rfses)~P]Pwűǡ6wZBclՓ%O*N¶~,@Snq!˘0 Jb-0Dt0tHɧOX4\rl >xҼ͛3?'c:@&)~S~0w>v|B.m!;;(H,(wl: VuI3rU: h.KJ0^ Oc^zVrmֈ>ٽyVBDI"\ GT/L%jU/Nh;ff0?[>&/ '0DhA>#YN ]UMdЁV*knWHXK%g MU #s$~_iy.?DKEHDx.Ps,˰(>J^j"(G~ !4I]ureJdbmlЅaDK@d`Ks fةя?{v+rʒ U&3D0'S}`K Z9=\i,/I? )iS+eb-~7jQf=EClxL'wȹy02Oɀ X<)ߔоM ڃ--+oAiO -Ne[w7sզ|kQ-ѹt.V+Š%H(% vģҼOr"T\i GYB0&IXHw и7 jfhd^ߵ6~d@W^h$JΫƽc"ͳB5#^o_ZQZI]ݘ<+u,:B^5Ffn\]t8CM*\r*ԩzp!jGVe5Dp7nF`@Umn.Ds`tK;eNK?Q0t1E&g>b`!êkdڬEˁt/*3\x̯2u/?/ T_ ݷ.zYꒉu3dPU¾GE~.6yGpGH(MN!'H6 dqLT#)͇Ɂ TZ^Z=[3"h>7Ɯ1E 2 j9:sn-a7*cgGsv2gi޳0 k`5c4`ʻOGڲqrsG,~}lNw2ol%`yGy%Egfg.ZyI|v㮜9xSAd8 b`l `uw; ="F53π)"C[' ŀΆ" kVX+`_?+leBq:5kj_qBe| c'sUESg_fYxJEN̳\qcvw]+ LipA8 s7/~dx7=@jOfHog>v)6@&LY*3 %,?޷; kqWa5DԀO.5^%UEP4%I_?2bROC1q /)CIr_'AI1Z -j +Ƚ_r 5ҥNjY i<2d<ڇVF0k?L"T#f >g q[ qdXjNAgUWwh^(u )vkB&#%h$ϕ`.SYì34<#ڿA5p46UiR桔g, :%XN&Zx5Ƶe懎RFA?O`^˄ hpӣn'=Զ8Zl_#9Y)b\}0,.=gF!q8ń(.gI$@T @0 \Ba|Au+S:j"_ ( J#-H=ICufq]GGz Iܑ봜Q)Gw+M͋\فiȈs/i^du d|Fo+$*c!tUJO#+M0:ȥyj:VOc']y̍S j_ζTJ8G֡ "0gUzUuC)E`C PV -:HrK:D̨ S#@mk.#L.G|J8̎ZԒ}=0]vk-#g2 rb)6o6L~`TM ;H*Vl0Lvʙ]je K$hg}P( #ۨL 8رb$;>D\7QU dʶiB. I[ pA΀G01mk#AXw=CV-ZhT # Y'6͢eq:q>#;]t [dy} P_2Nz:(\Jȿ~h7p EVnY?V hp&e | UBtw֤l.Шqjm+ʊh+-mVpD~ m|Y/"|+W&Jw3SgsYO "R4W9q.2D.mW[ E4m{"jtq3Yu3ebT[2oOuT[4$vb]UUCh(y?/Œ/r=:Pձ+ID?ODDBoKuḟNƴ†Go)ܪW2eK!}*̻nm*& 885}mԢ2gϩ Kgݺ8{MM^c4]Jqc5Bnfӣzz1aMHNݱk!K:C_jˤFH1j<{nF7>xm9o59ER/t!Xy&U0ɲ'R`Ul'bQ+ `)I?^ MPȈkՐp~#@x@Wov~@ކRN:e`Dna!"lr50*00?ZsOSB"T4N:'Haޝ:%.5K+0ب`9ā-A%\T,N;H ںrI Qׄ 2MZfY@ZSBhEq&8܄y+8!uc;R*M\ܜ._1umR|=U xjKr!= t (Bq3FX'%'MCrR愯pl1ex&bkiJg6JC𿒗\AY>3 q[+&g,e-K1P()]q JMi [D4mFW7n2wtAX&hBtP ~7T!huυc=*s$)[X,yuc$Hc/ lAOvԺvɜ+2$ivNC-|Q @1X*ӛ3ؔ6F9 eXyǴ]PDR&99~kRMՖy^Fz1J(m:#*jRyzŲrE6/?g룛Y[ǟxٙA3JJcZDz3?p/Ac@pKcUZ.8)fqCdB>@(^=>ٜ˝֥Bh3%^я *oSjHhɛWbUDY&vb8eR wDJ EMEiI2_"h9^{%5y["*R% J)?tƶG=C{%CC߬UN"?~͑ƒ(0H ,#Lbf3/5]UYABN<W˂ҠUosv tEغr^ᚋ&Je`h[)Hݼ? fȅ |i${R+4~FYTu0a_`ax plq\ MOQm]5sc", 33#[Яs S>Ҫԯnh-đ]!V~>s^aqPL5oՇhQ7A[6>pY5MB2a`P˜4U&S=^ZV/.+`RUCRpQ4 aCw%\,@Y[cl5Ǘ>V8AZ5zuqD64f d-mIM>h— AmrR8Z)c03 \2z'FO?5-|N=3np``afQ{H\a)m^q}Ģx:o پk)wt'B;\_sj,]bbe|2ay3 2QKmA ]֌r`#K|U 8Q9K ɺ{i[jH;.T4"EՊ Qi,.0|gMIA+ ctGaICkʌfd rTK"E@mE@TMvY@ VBhΚ wRఌ6BaҵM3HfP?f'}o+s2'2|F -I[?BnZ7r3w@>PZg+U;(^~6Vq#]:92'G@zZQB͗WkՆA4ڢBgĸyWjC J!Riŝ;Ѯv}eeؾ )_C4,rhᜫ-Z-d>:qIZe%׿14I*Eݽ\]J|Y5^ zT!`+?aT**ե;G" l} p'7=P+gpNfWP_3`]C_϶uvjݵZW}G&n93Q scê'.uL(ϵq WYU鐠TT UaJG)@];{lH'je3;-[^iS[ҸTR$6mt36>6 {"U=0eY4GVKo(f;_>~[6qȨcKu4fjBgM]` ]<]MHT~:_\R2!SC+ hi/jc4yӮWɝ ʽzXc$Eg 5 A|pn9F9?䕦DIkHpv” =S|!]/l,q彸/CTna>w%4#̽\b(68Ze5="F*rPACSߎsr`j]^sO 74;~&:%U n,3{x7+=n~: ?(ԠՊx{c`{/@- Fc} ! Δ_F*r}q%ӆ4;!3SvzM<=#]aP[TF"u1 Vx%bqNu hޠ5TӖW ֍g8e909\6 U1LD م E7d=%Q 'Ξn.-?ǏFbaf cp~ cyć{"gb.zu"RT?< Y+I"|x8;^O(IF6C4 ,DhwԪ!؀\e9H~kҁ"k>RJɽ%PFdj"+T:$7"t)8g[V[fe=P,^ M%wE1u[E+M~W׌lA]~p]Ĩ)laA)GҰEOyuTwaJ#2-݁x D:~$sj2v 8J'$R˙=nxw'D+il\B{WՖ֓Z|*PbOEzʻ`F3\jnFY<3_uy/aֺinlmBK>H1PNK2ɛ?*hR:0r| !hT@cKl +leBI?+NnU؃<4A ,g.Po/j=⥞ &(W{PXSmԱASSm5y**tPM<۲c?D6 /C44xΡknZfZu"r՚ c7jO+_E\2K^-  ^"mPUEPA?+rɌ,6I{fEp o<:n 8n;їdu3/1sBUn{ ]u L{!:W@4iUn#e9QgicK7W8ZDV|GO~2Z ~S|_tWl Og¬2iv.t' DJJo ĂA}x(5 D޷Gxp0@%&Z˒SHy[+流xQ`0Wѻ/ʸs_l1q--& uhb\ۉKԊ[t~Lb9ـC:8~Yp欵eL$ˆ#q`<"d½r;A\(ÊEۈ>IVuΓ8xD*2c3Xq ҝ V BB^)wGU=V g* &u8xWz<ŖE$pOTR]Z^4 '@nFZz*(>:b4J{9OE)Tפu.i0Ub")j5 ƴ`k/{˝V@Y;*6923Q$l#w]l>7CdcvE,ܳ,T?vwK{&pUBohk"%Jp[ZiݰJZ0i]uWY-<ܦs' Ta'j(T JE}ЬZ}/dcf]SW~]|ҡd5Ĝ5t^5{QZ念Yd3„#0 Z&aZ% )~(ĈDyZ#~gs=8qaT]AG&_:ó$༻zĉ3<߀Z2’a9Dݳ@ T JPG>]\pv:lDtz4+\/ԣUNjs/rZ"=O/{޵pk*logsl஛"CfqF&Dv=i|أ>UBuJlJm9tG JsdNV]{~3Vk"U |`e(:ʫX! ML!*<85)!Bton~J Ip+Wܼ=(~E|$i|Q;С v*b͖o?1U܅wgelh⫬LMCՂ`i(Z7Ys]|l7yXkp\xRsv)uIʧh7pl ~=yil /|R?L3Cx2Hύ^, L)=LٚxxfF31Ǻc/[b]E=M"x=_㹶i>^pڻ<Աi;tTvl#Kul 1^T*1:m& b6eGt~OP([a+ {RԧLB䷘ƢjkBi3L 5gGn| b>iO._lr+0mAк>Ffz72kF~ kVI ݔ.P .pOڞw&?H~y-e97V@vgq&~[{!bweoF: 10NgXniQegDJWQPHq .˅U Ǹю;msFj0.z+:bE9vW$Td>_"ԟ@BIdzL#$#1SonT\q?=+gl߂V̰Qӈŗ%"C$sˍh=)&4c{TyW@w]瓵q񿒿ZJ䵧r$/kWkBG^w` kYH9^*$3K3(M}$VߕnҔo?H $B:F.lEVw.X/,%2Q&!M Ȉ47bMEtyǵϣA6LpMV c \CԊϧBnh !0<9]yM:\vOB ŵ Ltm!G[֗;kq|2&֙@`u>[tJPjMn*B5nndb=M}VkϷcVB`:MczjpKb¸WVW1?ҌTe3IUv?hF(]Aʼ̜ y, ! 82ͯx7ru(;tT 5n".f|Z;[ML!3_ޮSb_W-ZT2OBR6{ZZ8o.Y<q)qlm:9Y /\q^vĊJYzCX Y++!/ #fYmI"IjJaۡ2YÖ?Gl> ӕ"ig=&W`ڴBP[5 6.hiF4;)aX~/E+Kxr/fWfy,8[x>]%DDkҼTO?% cLU۳|Y{g9 Btah`#wF1^ mq-2uD>> ϫM 8Fp|BXLׇ 8I[tut|]Pݷ{e4qK!J2*z';h~Iwkk[b=گQ]Gt ;LNpČѯgӕ^ae"ccPG0_%|=Y]^^\{0e =޶(bU_{2ʕeOt(}iآʝn-&2aXs6 Ar\ d/=,op mS~&lELd#ߜW4ZmxholV:<OELeT' %wUE>DQuBq`%2# nb`RF$ ϩΨZHo抣d =`[`~m]gڪ @_GR!+-x*ş۵e¡lR3V~9wT/D͚e%{(ڲ9":}9vǞIg?NR0e}9nW^G=wɖ)Ź=$@da"\;#+M'R]$ö8 i-1cBŔ+h"&s2!Bب 72ӿ8R쓥W&Ƒ"r*/rcTj݇)>"=vWјxt!zE =8{8^`f]&-NWѤ~u9|,S!hle(~u u<%ɿBvTjy,߳(۠Y!Bzi": F0!L}%"=W MWHqq-?d<)zH Ͻ[2]`K %T 8KWƐ(__).)<'syQf'?#7^pI//F9$gJYu+8*)܎;S7M#9An&գ˂۝7N)C&*$/ Y($$[!L2y#c, 'n5,G}E#rKW`Տ`_έkvDhlmI,P04>[1M!Q*&eyGҁjl׌@Kp M>` & W5 |7uy jJs; y F8Jv]L$Y:`#"G=<fx7G F4*;^S34 MG(ߜߒ4 ȑxKoIs-/"zPh vY[8űAZuy ;p㠦OjcR;@Odu="sL,KK@<ĕZgO @%!0v5lN`[ :}&qBTOp-g̈́WZ9u b(@@!@Emgq3ۥPCCXIz\mI^*Fj5._EĕCbg8xn]1(KJl=q1-1 Q&\&6|isFwR* /,\LKL:5 XGJؿQSk^IP7>|PV8m_ƴj#͏ÛeX3A1~ ǰ/6hCjƩD[' Nړx~1%U)ʿ}iI&/n ^L>Ce5qsM܅obh&#^2IUZ~;%"Q+/y2j,e &Jw=Xq쵙 Ln, Qe>2&n:'dsS9 cB0wqfnba6EN"j}LC(H:QMňٷ\7@M#&σSW8˝V'ړ8YjZ$+_Q wחq9kB1g)j &nQcx5=-{:hQF ZeQoȀ㈹VfJ=5z9 fTLuM%j[6(6| c||*LoYFIb/-zwY@;gx(wd;1d'U2gKl$'M QE2֤ф1N/cE8ܐ!H=jޓnby%Hߺ.W AFpT#36MBш NW$ ]bo*=pRqwÜs~h{>2Gd:o,_d!g(8fJ\?{@'^\&KqF]aV/\ʇ("U NmNhP:DUu<W'D~boI5hnyRM|n;>N xi,c5阥0xxw| 㱗uZ@V&NmMH[%Ä+;W pM6Nψ_%1C HgqyGobYW Jy:`nJ8l[Mǡ4b6?W5_|88`2NZom\sIc|8P~QƒҼ[@vHCM>.7qTe~d->|tHq~:lP;r9us]D FpRZ̰,ㄠgߩy[p:ZF?LGK`q:*Kѵ4LjK} iY/ט 6WNKq/z7N_|W0 )aeqN2٣ >2&$ T^L~nnc)JiErdw:!2{-8f$L\b$5{kCi{I{/V!g~_jID[Wޥܯ }Z_niUbZ"(jQn\"VnwڷZ!OiX\r(xIDRcQflJV4Ԡ۫qOk'm,g%m&,\.:`g߈_BKu[nYSQID :+tg-)bf7O[HaQ ЙF=iҟd 4#adlKvTigOb4$4 `ܯ5 v RZ/M![YKp#fZ^tOc< x![u.%e4jt1-.GvH;4lˑ)^nL(?ojYumň{'&޹&k#iƅxDV':(2+ =_yj/k.4Ⓐo !ܾ7jzXkF=kL٨6{ vwd;n%9/Xcnp!M`|63]\SMi\ O qq4˴׏ gVHALuO(68Ȉ*K%v)T?&,B;ӔlEN6`;4HJ(?wO_yMUSЩ?jBrD/5| \#YOՄ0zTwxNs4^~vosW25;ʳoJȮAZ@+l/`5`fZ Uvp+MO)t*$+ӈk KEH(9w+m A2][DLj@cA٢Zw_/9~>ڬ RB: LӸR% ̲y<ꑼ8ӋVMdޓ=(&.dӎu\4ETR1tM oX'${_o0iU5RPLoH>B|iNk}q.U#˙x`/+Biژ8zF[WJ*GQtݵ \Cm)RU/k=.גwsnlO9&ayauنSi!8☞"֙q7a|BlÜ%LUR/6ؽWлL~R!Ub-scؖ+KZSܬɔ\v@Vvl͢ybvVߎ @$09Ā5qof8?ΗO ].'LF6JMɃYLՙMJ}P3T!X\zovQݑ=_A:^}p7{C.1CޔLog鐗1T<+RX}~an(&&o'5Bmɹ^%-˳<4fS~;:T@u[H].(镤ֿT;o/S+hU) |:9E qp$' o>zE N$ NHa8,;E?PsO'C9=U@t%x$|gYȖcO_DO|Lh}x[+X bum>SdPr_ćD31V#XZ(%^on5^)-Uv;$fKQ4nVdjn~\eEzx^ UG4r)khnhZ4=3g9]1ꖟsN4v1ygHe7~T xz Z`~l Pl6Ȝug*WYzq)Jn>$F蹋KrTpg/843*"^H[%-5#£1GU%\S~2uұ@SߍqEPw0v?]P†*SG2?$hJbLl +q 3P&@}x8n)D4kjP%Q+Q~pة/f0}Ai6ۥ[s[A=J>Q<;X,i e3laq 2;& #EyCzLs Fܚ3gYsSEϛt]9`])Ʊ.S|P~'۰kLiOvl\Bߡ.g焋2承,OZ`I ҀazAud8_,>k%єqS(K'R@3v$/_s'-"ESPQ3f &Ӵ vFu,r2/] Fy{E9KO,|, "CpHUK謣ƯHq~ !hGtٹ(Z-5uSDbCQYfP_meaY/ofLo {@tGxK:/Ʌʨ#%?k [ zM{뤄i"8"3ku9+h2jt1Xf86c}J;y)C"wx/AEVL!G]&.ipL*~%X n4T3mah0ޢb'sNtɋYoˏ6?k!vw23fྐkscFMO* < ʏʡzD1kcR,IB)<w ]e<@I=,V2V*"6o<HUZCd½u%isHxϴ lsÃ-b۶EFxR]zpBvUIά [ =PջV[25z{PKkWbMIE:jJZ$bQaX,t:5_&Z|mZ`!_kh>n!;+W>'ѹE)*vNbg]E@F@U%#iyRJ%evӭ>)Y ߽'Xӽ}w1~J*rq|ԣCuV0 Up[K+-֒,FK?\)ncrzZ{*kWʲ׋Ś&,%0[1>s`8gO0A=x>B&*5` @+ǁa\ ?^2[PG5[VR'Aw g4{Z'sط熀@3BVϳ1&?i_{i~D,uyVABniF\2ӲA5NUV%iLur24&QS_b{ϝ- ᠐rY%Z"n$"yW~$#!94ϙΕ+Sv#;]N(|c5Ϲ5Ec\zכ*(Vm2_1_)A"ژp>^^qg(juS) ^N;eݬHYe̩RD#UB2U4l0}u` |Pl{!f8n"["p `%Hd]3s.=^ϙ*6PVo>%D TYݲ\EB&72 ?՘AD֟m'>m_PR .4v_r\X{VsFJVF7Ht9}Ȳھa­mNXDiuӃLℝcN@tLD_3:9HS=0*C*!wE q?ahiXW2[⸩x >.JQ1r[XCG)㜆vnpRz^XS 2$#yr4?RjiϾ;&B~Eb!XʥLFdV/.d<N9V%KGm z2֐]Usa4ŋxHax~>I\cNV̜d_}Di&A#3N.8/mUN%ţC|ALVԱo27$cw_h: ޠ,8R@3NbSn̄2;X׫E##;ou /]}MهZLp{9*% >]8m0O{`\uV AKdc*; + &.k 4!!ZUT\Yb/oCeJPpY{K C}YZB_67 .Y.P9m4AUHa-[h`3n?o禹BMWdt~<%2L~N 7#hw5V@:,?e:N;jOPs J7)OP9AV8JyLJM^{k?dkOx0Y BWmti2ox<mm=a)H΢iǫ_~-`FYU% pۃ3 >&f^<"ugbeՀU &2+c2O6w?Y;'\gKAAz`.یFhq`W++rmj Xh__p \un$软\SD` єW{Az*{l(Hph7o=X%~;[±æ)MV}փ)K28hzU]$rcX2<] J;VP&?S/qtVvMRd?JG+=-@"Y mK0y ]J(!N. D|"z|=>>YlXnI6ZXC9.4vH7.!!tsA{Yzt ;;b{`f?k/+9y-ӕ LXMT5jYG cfr]#.u*ﾌ3#BAuQ[NָǿQ5ϟX9=P *|qHJ|0G~x7ulvE8 -oL5MDm;E4.?{=0:Qx kdqR- `(a2k%* htQ|d/bs$p#!ĝK\P].SgYLUB[(ɉ١1P2 ]k]nf ,w=d >z5Y5 +PC,ˤ&"t=Ie^!9>Lէ+ j -"q[\Q[ApVst=wS y)GEhEmg㈄d|{k}{ .Y5ij4GAyp n*S,$Qb\XZ8m3pOG${&E8ݹ=e>dq}PKT`zYS<U#^<~}w'bH?4Ĵ50V ;z^{i!tKiG=zNb?l<7[1E/,S#Si7nГ$K[:{!ҫܶ|=F/@*yՑ N?]^Ēsw&0C}#My,gy$(޲}wC0䬋?;BVմ( ΋ަnS? +n*K7)jg|fgAsyAQ װ p\ 䄮!JNڊ{]? v/uh>U\[sQ !KDPB4_][,pţpVpS K'Ilq5xLdU)M9aXO`tVbWIcž hٔuYSLr}){ HrZ0?A?Rdƶ6m[*nixwd NPj"z3Pgaw7G{tv5Ifj2F4U[FRxly7IG̈M&eqB4@j5\Y^܎L$i1!:OJ2ކ잳@:GSE,omy~NzFFIuv-RMFRA&w\l+0TY;S?-.t^Ee~Zx{ Y.\ `Y E\\ pj( p"6 57wEDüFќMkn$JֹZX+e.fȝah`⋜Gpد8!]e0J"kPMæGB]QqEi?r|sjTrZ(&Qj*D6R'ġ7vo(AJ29fJ DfUN|_oO!Ƃpybtg ߈n]@O (r>@'XQ̼¶A>-[ףSSxmp]7EOFVEeCE/E(Rd}3b&s۪|#tapL[ `9[H,k{&I`!FTaC \3UP+ե=QzxP~f^_uceگ@x8#)rsR"r=J\6{5Ș q\A^x*YR\9g gܷ]I c0R~֯[Ӵ6ëDЖQ^uD[6D4(nʒ>JvDEjTq~FȌc׉c [?v[(^=?͹8l,\ ?&]c 8m=Ij`Asg:S_ـiVPګg9b#k\BK:MS${]4ѥ'pak;0挴V/D8=8#}•K2X"0+,]J7|{xCH5[+S"\T7Sy'ZyhU<}$ m.ew7%SKx SFx*N:L%$ (9<`PY$l\,}Z2n. :  Dӂ\a!5q }$a^f*/1:#N_v1EnOndƴV ʔʼn 9Cc Xle4\#9]:ÕHi[hUG5._`O.!?O<.c # @2*y)7\{_w-(^a~#K 2¶c] e>0y@SC8ǀ:.Ʃ D1go!?nHs"5ɬXX*TBf8[Cӹo˘ L;)΍@IaQc Au# #9V^nJZPz8i΀ iM?3`]k,I- *9,^"gkwJˤ*_,>[bw W1P N/ĺIՅdtDH+j!fe5]ͣ|q ё!iǁ3|սD/z$woEoq3=tA"PFj#χɹM|ƫZQH ӼX}d6wXRϵq=x0aٝѥTms줰ӌ3?visXI}b"Z/ 6XUBŎ[y5fO*9\L('r G )zD 79S)^V&U}/yՓ)]}+#4O/O!w2WWPʶ8p6SV:x1~IxA:YKY7>1vH10Cr=SxCwNTuXvYDS(P`.\kh'ALohF5Yvh'_4.`} BMT$5$wO7uP.7gro%!N(׷3x @Y=)V`!jˠU5Λso@[*m. ~V';/3 ڤiHD鞗^! ɠk4KA=t/hǜWn9=1WidMzvKH st/=dT+dpnØKŜ{%84)Rpb 56;x}S{Zǭ):ܗ64% `l&/ya 9YKLb$ SQ,֛ 5{M/ yT}zkG]ɠGWR Z edf}Jکk@]pr ۱t}8.6Ca*BȳU'H5X]hp=k k S\rؗTC`a֞t~Z!wP\ĥ,yT5VݐZ/qwIP!cg\à 06: x.SMLuuq^q>ļcB i<8 ߁OD3v"x~aN(c3iQPn66m´\3t‰4[y Udf¹{׎~IĆ@ebOWL/MBt Ռ#d)ܓd凝W7(=GMFԏsȴ1_Z<`)Zo#xS;!bDQ\es/ɡY#NOÇ̇%=W*cfViHl/+K: CH}N"T=UЮ}aլ3(I'T}gӬh,[ƺgM:$[qG|ܔ?қg؉\vq6ilYGQAQdQ2}9rߊOvi2F rg1⊐ C~ԋ2YQk$<,Dk]җ=KXj#O'!%U`(  *}%PP8Nc^* ՞-mP-yaSs  h{0!3_s!,(Sn@8,㽞Ϙ|;QH+m9t!Ҝ(I՘E3兰kFǡk13r626'LY[(>iwhjdÃKsZY<ܪ,*XD]{OWM1q2~\$aaGjAm ɞKkS-]U׶}E9K/kg5"5,c5ӶG ¶Wս:\Ry~mDq2Mk4uWW=|^h_}I x^@%scx%\pR)d XwDp&(AJ-E@ܘ|1y^ֺu{&)u31U{ѩ(ԳXlj@[%cpx%.rk .cC9`$^d$N0H-" @#p+_>׬WCA@lAk<@fCE^BlTy+N d; Po$I z6w!̽A}%e})קyw>u6F;M ˶oW5O//?Nz-dK;x 0n2YXS_Z⮻hǻJQ|MCZ#ǹ rHC fvgEv @']y|,VBuv>9VX풠@4]{·"LʑnW=mZ@.ؠsFgkY$D)nBRI p"s~Qlґw,TnJٰGJlW a8 kK^򋖇N7xZh z<:+ 4J(J)m &[k9L*ʼn||rH=/j^/q t!OG@q(\ϳOΝcRs획6r\x$5.kS=ߗ{ -Ž*4c9="q--ZtGk[AH׎h {ݜj]ZHc yss"{)a'a K oėE`?!Ґc.C(+KwX9s='(&.{ GY6Me̋Y`kTrmfߜF6&5#Ps*5-݃ew-Aw ZN `EQ@:>9CGYY*䷡b1;(!\*ܤ/.@Tߥj6UAH^?~?Ӈ#;*A} s[dxxI LH0Y)؋g}t(P?52e^R=#GC ~GAk>z^t8V׿Byim^T M*3j7#:&OqOQȻ)>X#,•Ɋߐ19?෇/HN$%dm&kభVӄ#T: A`Нbhn:/~6>SJz-TB&mrq/QJ!frv]ZI+S<5aaYW 0祎XMJ_Wi5!WNvʥ93cRl@݁~&l.@'z;Kוmߖs8biM ҺYJgƆzi6YkȢ@䄄=x\v_-ț$0.1|5΢!:iPF:Ltp64V,`rٱRaj,Γ[q! W#9s@<6A\%y{,ʄ6T%qFw7 ':r{ ?uA][Έ:Jz,w]}YkihR=fbK7λf/ٲxZ>`N)VRW JOys ixC=Õ@Zg/erPǑF)i5-1(]VvA͐ηA4yЌc'r}*`J?Od4dY)TSJtv=6=A`/p'6t7ࣘuCF_SgB [֧ ܜdbzUrs?ߘt=2qh5jk3ZU#m>t2}*B<,)Sm{?-WNkH9>DװC& =hl$kq%Gj #25ipwdAR"R Iga휪b,tTSlXY?LfA[n#NPQsrKUS#5Aܧ+މlkłtmؘH̘8bޭ̀vŦf֒2FݰS0 z8hܧF u/1'i&=/bf)1'?bthxqGu7Z ExnMq$f^'icf&m  z">IYy8''u&B* t0rla2go[=\5 :獇$ژo|xehXk9Tx]1]Fzi%)[Eqh:i"R5J6Grxl&"u){PU𱫥;%,bf zٵ,f۹.O5#2S?l>)M<ۭdɈ)ƒH;e NV]z Hk8Rn:v/R!,p6O9V)ktG 7dވaMU$Y(YVxg-%*W [K8֐Uʧ ;)3RIHӾ|E LzueI@!V!M QIdL#FHGse3 Vl3ԴxT{iVa*ܫJH; ؠG:Ԩt5qֺ#_J5uaCٞ5;J%OJƑ-P͟O?nrκ$2_g+*kg[F%#w;[@8G4?GP;Qޕ,$~]";OlLaI;V@K>!0M?Ǐ8`.toGS)'bc4Y}7@CA&W xax(OςԸur^Ϸ9<ׅ-SAG^:.p?`=upCmA/߆p;BSh؉j'8 8.d\Ǥߟ#~31wT]O.P#ش|/(3WLT~DWHb:m@afQc>D€Hm(^ϔ~ϑ,d( T*j._'ȿQZQJ 1=зycQHR"xámyI5w2!Rra5u#~N٪0|X,'O~xGed@rC=-=]f0=8*Յu.tMdG0iM#Kt 1kCwa4zHHὂw3+^pc2n ܰMqZdSG71": $Hj_R.&JY^9j)H/c<$?/ꥧm-%'}@ffwQ0R@Ȍˍ2MiP1-?VUl"h_MX}S$N*UOyQhMmXzgHPl]FkLꠕTZi^FbQѤg:t:pl]߾R]_4A_usQfRmy)LM"BwhPn)\?rf<)S0y*8empq?+ Iy;eM3rs3|\je.~aj;*kKFBo( 2Zҫ(YSdiţbRGf7'ůN0ľdRLb~w6 w 'YvB貈c1d=;1c%1@a;A><DgߒjɥE&+!鴿FƘ2ViAkU|BA H4_)Q,|yO@fM4h,GRY7lIY隑t_xa~ JI}a&9zPbMep4  ])i")}? 0ԳX$tX | {E˼\Y5Ϯ˭Yr=JN@K5u)yl_ ?Uޟo"^r Xq$92u5VT ~Ulr H=p$V{ a"trKo.{"^x/'0Vɕef#XP0,=#Wߚq(1#QWۢ#WzFYF;cm:(W q#2d:9~ԗ71~]L*]% Xc}n0oTc#{Ƚד8lDS&kMT.QFjpH^z6wÌyzVL5(_$<ݮo&ɳ1ESv¸BGbWLՉ o oBY_b,3GmLpr5D5$?lw&<ְr#gJuMrEBzGzو+0,^ﶕ6D? * է脏hT7je3E]kX}1ÚXD$̏C4D(E?Q9N%(h𝚐'Q//[v>ĈZnu\YeD~?fjغg؊W!@O/c0۬P]̦H)\H3F@%7N2 %t?^\r~iV- -b Z&A-sɃ;j0ˊ0 `~A:NtusSa--m\eYAY ű\-#8,QFH7ϞYךo'NZϽc[g";]2/dxG6OwiEuLŀC㨣OSE2KT¬,- ,2nQ1O! ERɩ(FCm-P([Bl28ڹ7)s1&rh;Biǹ{h`|-z[7ם,4\iLI fstiXK^-+=UNp  (>2OY BQ6ca4ős/ F{O;;4TUqYiqS?4ZJ t]A3ymڈy‰& +RVWCՁhԷE0:v{XmgEz淀=l2h (D")W7{O>@=MUMb~TVF-Bo@SQ77.‚ E5=UHZutn,GX/yEs&/ Y̵RmO :„q @Rӥ =0~$AM%A"|p+ Kn)d|#O9w& prvfE2n]b;6uT}0V&,f?26X&4CERL# uLZ=VZBղ&0JǠ+;BZU0j=L>7z75=^oWҢ>IġHoD}eg6:4r]&2@g^? Ǽn¸vl ]p_vTȚ5Hsp#WwzC^wIAfq]C*e$%Cp~2'ʩ 9i<]ymLd*KjDDQNG:L2-:W+xF5eUJw|l}dTE\$  +Xy% Ew.WԒz rSrwW(1S&̰t2oU >a%p\a3~A z ]yn}ڛtƴf9yHO'L0 R!ZxV8Œ(m+fiMC`]\6sj_r$ O{.>R[x(Iˈj+:̢:mJP9rq+^mIk(22`׭쫗-yd-תDG[MfmMuxJb}@ !6~4\sq2ԓ+LZj_,9wQrӫ7.OY(,ÝvJ~dތ5YG> 1ց$ߴ7pGơ J%2/6 |^Y+O#pЋf2=a,R`2t_⫼'fS`)ks?i.An>C ,Xty/Uû͜~N ٞo!8sa,Wvo,!\lɁs󻅬ΐ5!A%ayc'o+$̺mDACZ/مDmtXo ,;ezAL;u.euVR08P6K?iѢ2v7 ڶ zêy\p[懬oXozʒ2xi&yLR7mxXc`\JZ Oq4K.)km5*c L||Zbڠ.Hgu^x/" "'zn#=]|B1ч[i[P 2u1Z+.׌H"c̩Az&RR]T^D22n-BԛzHݤIv@f .mAAѥ{ƞ14N`=A[^>*{YJ_;5&iЛ᧕ '{Y~A0jCo EatQ$C 5 mV 5~ JjoE`uf鸪`sדW-YmY iXyPV$D/`C5CaAdj)}Kck;jVs=4;TmE0)*`,ĖMvLC<=Y_i1[4>`iXz]/55|Ą;q?#=='sHc7:%ӿ_~#KSL߄XaE}*0 S% Jez`e0 p(܏P5XbGseFWȦTCE`LcӠwХ]_z,1L`h,Wf*PP9,Z$3zMs.aքJ7BwD5U)mumc +\#qB !_)϶t,DAqϭsDB)UYT0xګB"%c *]AZ$8]ݣ53J4 *N_-V='XH pTYZ& و>Qv5{Bt=WÅұ>nXu.}keݚѰJN4#i<̴=CjvKJD"rv<\fw:釃bpI)'ޗ?EҰm3=uoCӮvy24A_( FRU'G[":r,\"G *ˢFm&1}zLuy~7.=r&9~[ʯHDi.[/0_|06tQW@o=[GKjF Rx2э5o:\! +11uI{TlV5QƧ7ע4xi$&u9NaYQp?Cg+_sKFIouYv}MlnSY!'ܡRfwCbkNal'xQoHwsZd^cd4aKv.,'lVQ;̛ra̅9M$iy=^c$ #EC-㷘b4<u)Cv X** , ({m̭}b{%_4Lᦍ)xIǾxV4U7emFu;< "Ƌ`\{G-,j ae'KXyZA^ߗf}'H-[}.W(RDJ] 0 #Dz,؅+%wxi$/3S䉗'`z^#F,Uں`r[8G}Z౿iIp=@825_ s5CR {.~-m7RV&;[E,FM\wqx&A [ yRkVL IxXh*B? =&BSA#o5 { cLn!_DCVu?:Y gP"O]4p"_FDžKd'҄QZSaKao^ @HAJ8hK3?`Ax%~!a! <)),t8ݽU|9w#"'*[ R DYRZ.t$wM 3S Ob\jӮZX ay~$l'72Y3r}]qK\L'~ABa1ql3ͨ4a' ܩ =CSq6*5}`n?Hy劯6p)&ojprsH,`V4*y5*($w4K P8F*iK DɶKFqy2h䦺~QQqdSN[ Ye^]8Ռ|_s,GUܻQCtGDLC%-abKP`HZ?w,ipax{ZZ7O~Q,4Yp,H?r7lw`%:e0u VII_M)g&zDž!l$:?Ԥ\vSTF:ה>~Xdm6r^WI!Ԇ-h˫ ĂIRJ57O,`bƖ[ ^CN(tG #2;_T2ff[pa08k`sהڷG a5aOoY5qىO@z>}I$8Ʒn#'֭icOcXqʼOݫ 7ʲZ-^u@ tL<T47wA5tZ_ր.O8iTH۱Κ6|p6Oi+Xi#zSfO6E\-7o Qk#j /i%!ٶVK=Iif:^"yz~ n[g[tdy|IC#FNy?h<* k͠@PrM%In}bỦ=D`"+J$ KcɦA+,tb zD( L_(l?d+7Pu!SST-_ Wo8ǀb9H%L'ڈk.(6~U2<J.ϑnMs#F9!+ EI34$-Ԯ1u[gk jW~lWEA(Jµy><~M;r.fN)hZ{;~9=N?+3HdFZSC%t=`y$*RP8?$0`R aA "G!~lXo(gR,mYz~dlqV̳mɻsSWvZ7[J?ܿQ-f糚C'Yv",hRqj&tgx]?P-Zu6qA!)/R>(e"N) QL0="5DO&ϫ~3[l~[C1_yĈBC Ztƣd,#H=%ӉHJYLP1©N'g8֭,lJ^c )롷8G]Vc2CcԧZ(0=ygmey{Euψ0t~dg@D8񛼺lV~e~859m ($m7XBB\fE781E^QybR*򨲗Kw2ih Xv]:r b31 3}uPn݃sOwH8mܰUܒaX8 lp,.Z@D9<7~ \7KIwٖ̞ \ÒW~AwGr{TQY7C༦ȍ\ŸTM19hLǕrh`'(N偵>)#1tC %*^#8*|LYAU?#ra,,֠j0"A#QrT.O/9pifl[VgL%& /1h4~+W _{J`!Uv7rĝOQ7q+u\{T"!ܮIp!7_P7P,v4%sL^ z+U uM,fGfDg4aYېޕa@!Q+Y.^ lb> ގ##68*\"(LGV`| \uGAxЫޯ.E|JˋUgHMBY+ /$g_>`]1-y>NVy"\Pᣙ?g$Ʌ1*FZfBpmZr>[۫LxbQfVKٿg@WSJV5ao^ ;#nm'Dn2?YxQJd tQj?bm$( L7vr*saXq`Ĵq֪"6Ǘ|gwh=؄zz^7a7n-!!;J׋-_JFSlc{R(3qJn?/lХb/hU=ަ%H*rN/ u9{P ?(ZWpR]3Kcƾr;ɢɁR䑒1љPi}x{0%XG?%!aϨ)I ֮|]/ZI82_Me/,οKS[bg^f?>/7$H;pnx!COR5'o5GurJXj / ҋt[nÛ<}8;Ăb‰::hP snp71m[޶wo*惍 􁕛|EOmTxg2ǙTslgxFl|)S#eʰ͜Rzg{+Wf3*wn8ǂ8J6vx>=@rＸtgPlhU??["VjFY >jGpU~B@id2&́(I !c'h`/j_`z(5}1n? "G3j-(_|H.4̓x}7%CNu-]i븩@טC QJ +қzټy$5ʉMblM41O a]Z:<^^(Fv ԌFH/ Q*chj˛ ʕSUхT;Qls.pO,%+MTzoZPgv>e9u7Tl[ʇkwhOBkojnȩvw-?4!@ތ>W%ҔoПPq>OV<*MW#/$w.;nD*Cv3ȞU¨duQ[bYd ?vp%\19cѢ]#3.ct? ^qNP9 T&R.:h.YnkR80?T\u"5c(l/vJvX6S)@rgP†Q4KL6P %E'ۇ3?pddw-I,736K7#Y&JJ·298O LfF˸h[ɬݱ м!kw!H>g@Ծ2ivN޴Մ?:ߍo(‰j"k@ic5p y7 EU)Tv#qky 9] se[N`qF2k1cf{B 8Rp&mt0zI%(բ OGhdY,l)LQ:?+Hz rG9dNɯr](O;t, >bD*gV6p\%P7FtHȷ_z, i;)t 9}>~D3DRwN#d+Uq.*PƱD(F/k[>W!)}-@cvK As=5uE=מ͍5=p}ei`>vpLmOeZai9B܈8 M5JeuB*inAA[i{ڵ*/ohQ([48YNg68 r}_?MF[JNvz?yr7<$%ֹ`E$@AD|3:fM%N|.Iسi*˞XA2T|D#Z k22oDP:݃؉ւ$6lDjg1,"OûL%GS๓*af*mX&%Q~K>Yy`}yWsm5|L<.ɆeYʌ?{,v>tsaL"爰,BJM?u ~qPPnˎz)TNufx;:g}Wab=1HaowEe"%|Rt+% Wg2ukfGZqCpJ8<]xH#Ǐ9w *%Ɯ@VN׈F=Forz<ؽ8@{os]:@& JGԾ,>#emj.?܃2PLp!}z`4p)?i-v>s<_7 ;"ǩzT|MUptu@ʙ+w+U63*3hS/e=`ȍDi')j'kV2#1Pc֫U2F R|St/{s |ev`_kUH$2)+=nU]:nH]Njxwƍ+1]/O&>9؈2^?5f٥m Ɋ"wtlHHoz}沗Y{פfȾ]FR6}jVҽR -;D!t"]B/1RmϞϰ ƣVboey-[s3]ui768*K"l%ҨXH>u1 ^7k/AxgI<+wT>(=r:V'ڊhx#a@%HHCi1pg*pRXj^8lMD b 2XlskQㇿ}h4yNPdq Nq#%y;X.W`2]}hUͬ[\Iq%Yp`=#OF`F `ff !k\3 h҃[ub;J0=!ъGq +zc10h\cZd{%BUP_0zB8?N6x̷o`?;)^f]Ă "TJ ^s/e@O¦l$Qs֙WBCHa"TJ+#\pQi\ 18C{*1݌ȿKb(E"XٰBGKMVߴs;}u0wE( \&+~x j4K:ӕVJ]W/|{=;gcԽq.%d]17WEAp5x;:kZNc\c 6΁́<_,*!YkAZ -B2㯈H3j~!s* eSaנCI&E2R }~tgz+~|"EXSVD7sSZc/~ɕч;M)n;UaK', d4|Hkiڸ_Z8.=u%䆔*/T;>Xt?oAb1z`&|g(Eu( p : t?(*_wCdY=Z.F #шuR"_Xc[ t-d9NXA8s^Lݯ]0+]5ƙd++y?> ]W"/Is|˗nl{Җ&/~ϖ_}uBʓtbiWq\KjPFIא2nx#K.;p1%Onj.݆8fR^䶈U\ӧ6c Ǎǝ卟(=goəܱ{pP9+z'0Xi fKZoVNɞ=\X߮+!ƯLR~zݟϸU; A' y6G_Y+vQilxP jdJ6Tp$"|)#"\P8M,Tll>ImuO74Dt]T2X٣.3,ۖ `Dnz'+'QHd[^h"ɇ$I/twN~t=>E;^ :=4" 2|“\xV,12Yn8|&<&^lWˤY0˻9[*.ė%'X(RdЦHi?Mh{Z,!f%{fJatac1cٙ3_&Z;切÷KgDV*,LFA{4l%Iz%^^??6"c帽v;S>h#e<@D9&> LihnOu؇+e`,/l|Ki05?] r{hT8ppfRVdvz)ʁ|O챨[8t-911E_hg?Ef Wx 9- 8ܸ4 _d ,:HN4ۈcV:\#eCzؿŰd<bY,~ŖgbTe ό ɑԂ -; ߥ[DXri޹ڌ,T#I^cҝzbITB..\toW@ȵ58u1t3;oE/d P6N-؇r$MKۭg*%.:i?=F>3yۼhЂGDhD '9ӅёM 38R|Os!wܲ-8˭累"1]6F:.st|˭1x0+ 7̇oJL< dO \53F]'Hb lB[8yskGo#*݃P|7r׮ eyM7?^~Ѻ϶oU/:qT.k39/,bɋx.?s/Ν-~8x"3&V1p*UC *DwpŊ&Ph^RH6su="Z./C~VRm #,EVRXCmlos+}ıo Nzby?Lrr?Xh˥1Nuݰ0ጧuFeOF~X\vi<"ǿyk8Q=`vdUUյJ" yNOԎlrkZF8 9Ep g tDVg:.2iNn(LfN*1>c =۟"*Tc04K5fPŧ. VS-2:qwyР|8x@d*ԊG ; -絆Ŗzw~UpmQBՉ/t0wRA\>U!F&%mR"'qЀ|scn|\(i\]m3 0co[h8I!p\_C|^^NU=T;4~mTb+*P: \@7WRQr2lEi'Tx/HuyUj&SNAkS`NŴwAZ\X'~:7$VүjD]l,Go X6EμSHH }H6wdȗXULGhxg`o4PۼNYJ(@#qXn"NK'YXD8EHs~Y`Gᜫ7Ï1 B| Jtlw]]E`*q~Ҍ'u I>@+J ^ 3B)ij\J4s^1\81`]ԏcy?J!D.Wٺ 6 XQyP6x!Gp@Xv:V jH"$rl)p^<.;zWƷP9f8*U3Ѿ_4S'Wȓicj/3Z:}*bcF"]U:"(`lij"_Wmc^,_Z^Rl4gQЄ4wo|M fz E-$k5~n(klDוuKN% z{D[& iGC SS2vdy{mȅpQjAWW7݈/ʫ<Ym4;MX : O!-56 ['o/ȸ\{_i=خ[$'sڍ,iV<&ڊF``$گH~Nl<`@rW+;,!a uy⑪ێ8?(9GR^(T4yzdEu61k%X:E?ZR}8 ;ϪgWqli(YNhHAR\7I(a9ah5ST]QTd[57/QqIN-ۈVg3IQt-~y!|WYDZ#㊩ lK{@fgb-0VqnT5sц/$R'MFl2|:Z#xDalL 5z{kfdӒtջ\IQׂ-2[i-}_Rw)U{ؐ!)۠5S<9o| G>QqT%qnS67fnxo*)ˡtחo|D x~w]YYZd佡;MTљ*S&/I2] 3葢 r Q=d[lNӱd9"+Btur r?Ydu(xL̴$"ˠ)}-g<>g'*jR:ܖ84Rڥu{3dS/h,qqĿ'! QU.=P.LwkkPHuWIX3}H͛ޠ{>meK)t}FV,uec!j̲tp+H՘ 8;Y1.xbx`; # aݭ5 7;qmlN_VW5?qp9S:_Erw8e-bSf_])]_h$t!{ >+uh{EcU a%ںơdN wjrk-_1(|ޘ?@  @@ bs?-jrt q 2md{ +'5+R' :*k. _/"seGqh  VE2X&_, 9bBkGܲ-jȔVl gB5yWAH Vagk@m"-@3-\15AŊK fBsEO,G1RĶBA 8w/RH(Æb1%6kE]I}#ָK$RkUtT0 АX$aNLNJQax{_9?m &YhH}+',\y[eujpxR< !vF<gw4{D B5tPZLʥvϦ"8KNRm^37h(KXE0XB䫫ϝP'S" q&hNFw\wZ<ϟ$FNiCA _ЧШnr8[V1}H2'V,1&qU`v<ķ|96ckųS BXM@gj AUG f|~ ſJg6wFtKx6;IY'RVI0v) n٠; y'n(3"-ٿ/5NBs_۸>s6>guWGla3eh O]DSk/; &N2iht887Ycf˂ c[G>mpvpAR ׃MCˍ&JDВ Dp6[?׆Y}kS{^Gډ{C\N1HaHL>p$LɁy*/k,6,Ѥk0^NOczdBr55# O2Ea;b]swx˜\ D%k^e3dQe{>8uWٚ,mӞ޶Z Jme9p_^6wEH3a{UMj5/)ec(D8O #nI21PªN"%w8$sY00e˵J S(fHAZ%ʊA9TPMɖw(ڌdT,/a ӧVQ1-YܘaBV '%+Ȱ= = G3k ^FRSU 蝯{H8=RucҋfA-ɫTօzxFw qP7[ɜc]_lt?fO`h`ʍ%aXokؗͳ0W~+9U V*6ǃ>qH >v"wTۼ:Fs;ʎّs:SF򒹵XϢ ev\>VQw7%@JF/ 86^_!7e LzRwJ-B3Wr9 c ,Ho)/5*L0J߰]AbN_fꯅx=I:t?{~Q yiC""V[h;&"jzH*HAge~MzZq%u4u:ltF idbU&EkSֶ /*#)M6yn-2hhRra[S|g%65v0Ay87Hb{ Tvr-1SSJ&yfvv-,#Zvd3߭V'<֍~ka=3Ze~Nc!}ǯkFe9=9n..iI˚>"`QA]S9tپMĝ KluNgRs,wE Rig7+i y"&w~ya\18{ Np9&/`C a*eH-i.hͽ/oVBk$7jC $3ڞH+<{}WphӕB/ 0bCc:5u+NB܂Ԃfq_5"$ !W_Uq| pncأDui0s߁Q#K$bcuw0 sq cn=oTPsT<S6#ʆFǝwd]m*<0qGKJEMX7E3 7 #|iF]f+efjҺK%Sk鄥]tOU4mc iM'@r-Mt҄bwס".b$x=8uDP-ci *qU%] G(/$n`,- ڀ!Ґ=OvLDʞ Of,3/D]t_mݗ%+X)O1 Q4 i'֣< ]I^ơVWҹN8 ?AN)9A\0A%_']6#^a D YՍUU`rI|I#< e=W[=n|oD9JIW [{Ǝ'2df͉^\NV n_M~ֻ$BquUbk]O?h2*"՗(;YgO,zpK,b_A϶INGV^$iNad6&rjUgM*#K`kyb]JtِeظѽN-<%hH$ }&Y}m}-`/A=v'$!X"{"NֱJtd x@&"yaghA4`?}p#i!0n+ږ\Qv!W&USt|S%l+#+KR߬v05RD#mqoFODL"+!1@4]tE~8%؉dl# F@pT;n+HThBf0P KBV@||ywjPFq*սa|>햦@ˊ2=~@B{l(}'炦Y#Sx㈆7N1pաS/%DJ^!W(|dOne4t3Ij%"EF@}ӺY8ɧ 6>MvK͟bąC`sXo2,8l-s=#3X9+X&Q`?Yj@)P֪97?nnB"z7(QYV7tr:0:O^Nfr*RFf4_ACaT5MZ%#wAsSu^d2V .i84||y<LDQ{ s@3h PٌX̆ZB&q@^ZmM۔%]\ mD)jpg5ы]/[q/"BdX=|Qo6߈nKrl7-F-=rc ?yq3z{&ˡܶh*l@θE+a~N'is Z_Œ(e4:D>4 ; \~z$DxNU7Q>ːaDIG6o~w<98fEYX=1UbcF]2źluMǼLs6MzaJu$ ƮGB"TڳS߳?嗍@GBɸ 3$K顈m4~wMIHbc>])::z`rMusD(OQI6:;v _gVvK/U2W3p<5͘-Q֋@ݶFi$Ǎ{ LKd7U_yW6ǥ=t i$/\j *mJ؄hs dGOzFg+(i! QKL3Ӏ_& ZLY\=>MP@QRoT}DPuH8*ZuЃ򸟼M}7|o_Oo?d0HhIcz۱=JVU˘SsCdp&kP ~u> F>o!'}Q_aeUZecG+rg^Ii/^̞>h,"t16O*Y/S{^2FnՋ:3bU6}6< b%'J1;C#$ZpG-aXH42{` O!@q-=4n:]X-Jy`T,?ڷ4cWZLJkgy9]?Jݒd,qMMAYVa}a0*HѮEs "lec!,UH)Yt}D5`ҝpiO'./ϴmhn&GqJzbj H,OY>ۇ$ !hsD2*d];CB'GvL;-r%2&ndqK ?>Grs$~ E#w$u5B^Ok(p5/i7 "!{de7y2޸ Ͱ:?JqI k:11ǵ,㎚NF^?j EeyTWg$-@&LQsx}*@[Hooag7O+j(@[Iʐ +lhElQ'Jd1iay'3(do׳0Sb Az-&N,,2n}ʙX02X:Cfrn`ʶ[RtGߒ¤X9VEmuР9Ŷm \F*lBtMpAW㠙DgX3o KM1ah\, PNC[|l# +.zt,sw }y^M';D<]<@Xܦڍ^qQ@ʯ[k,s1_{z+ 4C4r~ 1砣BuMbUU {q$$ 9Y2$(6BDqf,&y@I?I\3 m&‹_;:ۯ-8am xLd"# r'C~8KB >/OhYZbM6*mՆwU/sCͷ??gٴT#nX͸I7&o 8:sz"6G9ܬOqxcA5Ө)xwW@y@N`jLZ`%PU՘g2vQ*j.#dơa[Nk{AHkr`?d3(m{"e<@1 "Bn+(y ?_n.T˴ (c:{@xN|H[JgڙRGKu+`?ON9)wK-+IY>K'0Yu<#kُPdH>Cګ1^|.bΝ/hY.@$~:#rJkT˳и뉦= p18k}W(a_W '9GXcSM?ܔLۣHc c;B87 H3KJI"Q/#Ek%.Li]PȬe |L}LE#@Lji|PiHMYY̦(`+Q0_9=2DZ`(/4T9;RAvⵍՉqkM:I\[R7:ɮ5JYTe,|$?$RxvNڪrbVtwfW'mFOVV埄653MuciEHA.~Zz̀4>nJ#W*\&9W Sȣҟ^or [BcW4>nna6ŔڕrZ,k)A4o`lO53@7 -_|ߩmhS82 " &qX~ Hީ^>TdA`aK!O@b隮tCVwn % #ih72[4ucD$U*X,b66MC/40!Dn9-6%`.|k ж ܷ:M.b{ $PRB;}pC sf{O9qhxM2,q hoNS5/o3NKE/$P! ?Bpַ 4S] ǏqiMF,yEow}!d FIz9C $֙ê?^jdfkHDHJt4sr%rB[ `N^pէ1 }}(J";xRb*-&C.U˖ j)(E]i[M({'iq"ʆݺ 3$SD!?52a4i_a2cJZTmvѩë7}pݙ>KlbDZ8Q֦adYIo@ɸI@,K5?GP[ ?uz_<2AzOrCl`ogF?M T!+/C8C2ҰCAY5S>G4DlLOeI H0v&>nq-5\FC8㐛 fJlMIG`f_ Rxvz\lF~Pq@JrQBWpE-hDꪫzr+Rˢc㶵ǎq*%sg$hlDrO[cGnT깻 E.$ٲi̊D1[BBV_O5!bMF[|>_{ .gqv!tJx7.O-mS'?q2O@N0]#%yyvuLd5ԛ(¡lS7͗:hI,3q}*n >ZJl_zf^]tH8>FPJ:{d}.!˿iW$ vc$xM~Y&~3! IT*83ˀBDvf-_y6οـrzQLQH_OPwjGhѷȒQܓ{{P CSR4ejh̰)s~LIZ>$J-(=m@t LZ^]̀[B3Ao8Ǎ\X$S{DN2dS 0 v|>jc̯h{*P&Kq#G ~z@|9vOG1"d2ߢIwmIf2g/$,c!,y W.I_qTz:$xlg&`(&8E(pik9+R|Ճ _\w{ 3c9/bXnSa Oj.j.'#K$9BQ ;YWEu@GkFm}h^wL}JS`ǤNCOʗr+ ݢ UȍFx Vx Gm~vFd@p"蟩N!B}W/^ldR fb2tc9cv̏xOcf<XB)lΊN.e}Bh\UqYq]~J 9'x}s }edSue\/7<QTDy1eGAzlЖz#K0U^Lj(&("@UK*g eQg[P@dqbGL@=V%i`wDzߧX8yK\a4UUKSR _+\ŵv)Ok$(eOD[#ƜIް|]#EFW[] / QaM?@=Lp(~u P9*#T/)Nhi8tOX=}3KקCcn t `K/,*kIL&ՐC!WF:kCh ]=0Rܵ9[&@DN:b޵뒁'A[2Gn {ZX*HRwÀ.ubq+j}׍nTq4/o,Q U޹[F[n~J Eds{t*Ւ-{P`NדG+nqN^VOdJotp@gs{}ȥT~0Z!PjC mr8 .Wd@r\̌yt5%-+c L^2 !s .@Sa#i`V4 l{ S GbgZPWJRiw$nkH4ww2 &cW$0񑹀5 {OЍ#׽-8IkDf3荿$O]-l;&*Hw+FnN-&YUYL]e:XF.Z=@3]>eP43 ?XΛE5 v|B2Axmyr?V7wg1 Om"Q]1[87-1R!~ K7D+vMJÛBܝ BڲevL|abv%oxXҍr֔5dÌ5$;Wf>Ce8v7&sR3f5HnA1 %od>QT;Iv X]Y-D՞@*g=V+E7Џ$ yr ^v'!1?, A|wx[KDKT WXUd!.v&GsݘWx5_@1XmvʪMpw#.ORyp!Y3-{'^=~ kLٮ wmSPHT_0ȁՌ,V&8K[,Cyj,!u.G]9"ځM,EK TA3֏%ij%7V225_]XUwjk[)"SO-E5`ԓf[d8ƄCt @h߳aC?]$+~qe`nuF[0 9]xM}xls抓 4S#{i&Б]ܿ";HE(O(Pl Zei ͰP#ƐC@hX(Fp㠕; $PŤ׭eIZ\0pWh/,K43w9[e^ 0 S̘wv##W|Be_7a؆ZMnG_8-_bejoy׭: C=*Y*ѰFZ묘^yBP3]%vJQ 27Lh9&X-ֺWP *E$skt"VwG٬oD{0ocLUPbNNqpG-č6I@~ W֯TDycy3?sT!Ts2}Gש|tQ*Z,#xK14bJ}&0[ cC̹4lwB<ѱPgOS 37R?tiB>l;j-V4d0Y^[HA/Kڧ |経<Ϲzwq$R3[R1D|0:s_'d>j+bu~^rdwZ99or;@1q|Uge5aEO0t8޻Z !;aV96%O|J) 5ij"Φ(PT2O+,z|Dc9UBgC5tNEsjkQ_Tڄr#5%, i`3 %N<=O[!dDCTIKs7 ~mCyz}}GPץ66KHw@\PO@$lBTN:EmLŘڲk+n⪋Qyg^: ?3xGK[SvLm`dM D)szߝ?JiCJh\?;mi[^v '_21;MśZ rt 71Hz;@fVix6PgZBBj&hs9WAS"..*Ը %藛Z-fdptI[6jtqu0~֨T2.^]}mĺ{.5y%N)ܖ3i8y>:{Z5T+4FF(T‾JR \ PpUV8Tx(FՏnنwr_ u륑?U %3Aܙw"&]luI66R(ƇaO_o:U5wNPp#W^㘕nTCsŔ0)&=-q =X,%u,PRKE@ʒKHʵh ` > d'ԞS?:oH%B8V㮱Ϲ0~1vIlIX+Xo.A"J4/i섴Dd"˩H"27B]#ЇʋQ  Iq2mt}S̚հ '-L5)~)Jq ]6Hy{\ +`L^~s4bRp,x"n!8-ݓƌ:&Pet!"\㬦Fn::d)^--41;R.!*@_J[Mҍq3BdnnE p$!Yn:!1]K1eG|obTU!9ՠ"H W |X؂q0B"MgΔuSЩ]oژaZ[˞. 7q/Gz$")ꄞx,>W0cczW>gyDKNA-\(iNu"|RygJ@FQ:'" \ lo'Hbc}8cUgŨO淤P7*' s1ɕ2 ]MJ5`5-ӳ4GaҴESm7Ó`0iɱ-wm|yL1}X;mmrvgڧ+sJAGS, 'iTcxcYM@>ca_]VJ;7VOP'.I~G߲IϷ1'ZmP{'D`Z|DF`V;x[1q`U7WKrR53~$'4k?#1qy5‚S#O>_!;!KMH>.-]׏~^em5%[B yB#U6@,Ouwg[|_"l/4P#T#x>,nؙP2(Tϫ[GKyksO= 8Dc3VYD9/[GfDE)%24f[Zp1#SJ F;" `UK-Afk `iZT}x$f}֠;g89d74 9eoP'%(AGggJk֢e_Ы 뉼ΠLeqn\ɳB$鍏Dv\Y[T{vNHb|_5DPpjɱj`\MNO)[/N EЋ`gQ/s J^@klѬ>F3w*:ŋ q5/3>P؇8=xUY!pص~Fr^XZ_k7FP,YMPDY\#9jw).0}ɿ݀IqKů⊞HbV0 YE8jU*<\t= opqG$2H#2W!>mP!'# CWq|&+oXK bqA}8YO> 1c .17Glp B+҄wsxɖ5wl?Mk ZnD~:;UR(OUڱ"P*Ob+$-+;¹&Z+|!ԃ.q|)r2p35F7j*>ݲ}`_f~#t6H]\$r'JcҸ}f5M_* G.2ok8GX\xqɚؿp}#v}-T+Sn4$";rByL[?[ gOl @K؝5kJNK:{R{"/ olPvCɭ;QXA'*,cBU c>X~-(Dțwr7@bv=Q \lԭ J ZcJs$Oj,H#ێ;)w 6v9\\ou/`8 *n}=CSYO ؞XKZ&6v}Un"Ϋ8xkH.zZфvSWH?'À͋Pa}su'M̗SG ,I+.S}޽9yPe谲`FNo6ʽZ`Q/ S\TLrnT^7-jEHsD we9x)kjSٖ hNub}Nty+Dߑo` ŀB GխAuJxILR"* n2|~(<ABW vz T# =NNҥ"os,a[2ޕ(qiW``hTłEAJ~=| e-՗I_%fy )m={4`SS`0=gZssRg@%QU"7J\ث\ӐEVA%y@20?\$|GOMɑE 箍̗E+1EΜdޏX?AVDa5+1lkW;D q~'~:^N %_nyTv\\D2ڼTal(^_~̅jl{UH-'Q )aHso$q94R  ^xm]]mL3`6 ;ҵg8sq2[<%Rݮ|5*Gȿ3;zVk x\^K譪u aQK"5R\"6K!Hi 倲VTt9l+3 F=m3ӑbV ^37 :t^%jCʝ {9F:P{5vwkaOGgCm!)R$y.3dRYNwU*[8Fw+4R'uaѨQơ]C _M-*PE]NX4r8O>/˭c;˶6J2S޾ 1Ɍh<]_ "G#nڥShf֟F`0q8i.>e=2a6RF'U,׉%yV*(y@Ip;٬JA^=cmTwK9=:ss6՟sb5kxH*Q@xQR`#70M}^>ް^KvLJd ?oJ?l4.)k*W@{Un ˻ sc$oSr5)/d iAxKՠNwڂ<-J:9[:v/% 1 #8^9ymYzs@D Ro"BQQa8dB+kd /!?n X}T%,ES9†6_ۢp(䞤ni7Z ]ҾUQ>zIú㎷ې!fv}ѵ /v=DSg֪ݟ.Ck5=S7 "9*YP{s ˎ^W&bl~)08Di0Q6Ԁa5_-mDLţ8^kvBI3ׁ[:cYcUCdTE bqmC|`Cս-^s8Ծ9BmӑS:ɢ܍|?T8AF_П^P6dOy:[D*I Tm*l,Ӟ ٖQp͛ߎ}>ށWq7].bY͏,bAR2{'򶸾u[raXUd ۶, -YH!ֈн0 qlak(W0@=2VpV4S{;stf=WmDZVʇZ3~/=Sôڤk" qpREzW2nUX\w'Z?$ss+<->,wNc \FV0|Uu]RhpۡgCFP'KQȲ|'Jcl7m[ 2D190hS6U`lajϨ] .6X\ڶMk# 2GEڠ5"bsZ.1Z h(W:v*Ac淔=Zff~#Kk~C8#&A\։Оk\ENT"rd/.űV5jNmEyA,_ܥNwpY10tP1 BuxBQ\tDd(Zv zcO‡8"@;SB} YHx&rFrd⥯MM^M6q,2YEa}ĨOzׅͩ|ma;$q Q4zQ?rE*' G*!Vǂg\|Io_7$Z Y/[ZnV~sa`83""l* VÉ9uŕt _b|s8EWXcvߍ0c` |<Rv5 BV: yZ  ~E-~$8L>cp;1eYSƺnDxU(QYq%P]1Pj%ʣD=s&+݉x']3, N,iwtdG˧]g"tr-X\ 5|NɐKBN%upRnfi ,6MjPi+@PF #<"#uhYL/}(3Gg 9hr1r OX3,NOlgK>DI)^gCdQ WzLvW5.r1 ; rދ/!=(dLX5ـ { Op%c?^#:lg 08ϤS1oEoĚ X:n*ɍݸePWdi[RhXȷoEn%XΛ}qm>'Mgr gMc}V/Y~m]dݫJ&+D (vZR'Mvvpȧ__+bCY0LD M6 ؄ɽbf!0Ó&hR1&b0x v%2i"C4f~ [=#NO]xYYX̬<@^aX)(pT|~Y(ުrJMpxa'j3}zELN`͌eB%Ʊ1e{Z?C+CEY1W!y\8+)4j߽> `'wvuh#ՏӘ282Kk:Ok A4KZB!mD^Őg _wO?WwJDPP{y/vBʰ ͞ >vǔ0Cc˳ 2%XtӲAPu I@ [KrOɄeL6=\1Ɋ&7g5KsLˌˡ20,:i `@#GVkX=ʘMODW4 43t# a ēRg?ry6rtԮY&VVoCz~ϴY_08>as\: _"ާlip@hݗ UAJz"L08it=#-:cT }#P+[/P߹Mt\g(vݨ/$2rn-@M$%0:u! V9WAQw,4UygH8eK݊q>6埘f΍P^a"蝖B%ʲBjz7%ʤXnyR=;5 ajVc?&x-wtpV$9y3%4srL<&l(H8?Th+0Mosf!1=XL߿C|p j.B4ޔA0Jˈ(+ `f%QM/XV2|v%IqŻ cC ۨqRׅup$%"FɰwZ>&uZZβH(_S?(jIm& > D$0Tr(dC)sc(fb% q,Ĺ$$y:?aBH +Z@V\/|&rJ3b"~Ԓi=?9_Oc7&.tghYS9 o?Al2'/pk&tDY5}~E%+Zx 8US-25d I?_.g۲uSR"[(./~73?7w[\ad'μ#?mmg4Ɣ\?V,aLoQFKJQKy qq۪~Ajf{Hx5_{I9cm/͙SLM|v>Ux{qX2ƠZ335(mNύZ>őd q}Ld=_h/"N2c^1o6q+y2*ohU.|S. ySFcH]M7 .My/#-2%GHNwki̇5Z8Jsߪ̖nw% ٓBP6ً :ضuM~tğ+cBUaw)}vV5VAl6Mę2!pJ܃K9yJGk7cw ]k 3b@mfj\ق =88>{oa[K*C #Ʊ멵wjI%z*T7%= "<6)SDz&\zh/=mz\`tR`T~er &&3`) b@sd̚<w;ʼn>w0ğ3b!'ՕdE1ܒ93ۦ($Q]<,?t$6nB)|VeA0hc!l?ad}~;PD:}oܗ" Ϳ%5͜WI1FCM6H+ B"Ʌ `- . ޱ8u/syO^Nͪ 8Klb2(;afzl+%Ոm]> lCAxU}Tuε 0/4y/zZ[ ݝ0tdsH_݉X]TȐ^=36ws>!(/IReիqQJ(MOvyQ퇺8s!턽-hS>Cq8D^ 3@w.jYtϭ3 QBQmĬ͘*8]^U텝EZ'J=6zQ.p{TsozC/=aĆ,C0RhjvnIK>9ydْ_5ƽ:>('D3uipVpYG#eZƂq!&32yAV}pm֗YN - [Vb"$(@E| EDDVaehۉ)}^+zyKs\1|56]d] P{)=LZs#E'PO)Y:{Bz?үqC Śv&rcvI[, Hl&Z.^ 49{Lf%Σٌec{'Git(}L9? *weR(8c"V,$ޤ,J}bJ$sv3^/Xji6S#GՂ&Fj8nXae3_X $IRyrHYfbBNr'qR/ZoO&u|L g9_τKaX!hp_@Qj,aO,٘=g?Al! A<~'*} bld( !%hkb;N;QDVw%=5 e~{f&IXgI~gtDB7\OUxbSǓrPWކLA.|$ܜdOf0;6`  > ̂+@%*މ0'>SĄqHvHZ˖Ѳ=]Je3dW.hp3[*FP{Px> wPhʲLjE6V?ͤ_1rBK"-C9uAiͭs-hs?:mD \(˸7 s .G^?̯`y oq.5(e0PX+\*gDn>nY*t=,5 &.ywRnF|&/ƴbyp!L_FogyhJ22;N/ωLq5׮[+;V\ypU¯8Gn``hc˳=Ᵽ0\4k(}ڱ_FB'krߒ`$]`n0H*>/pzQ~,˜5iC{{/6jO"\0 BL!%7n5B Ɯ>Gq\)\48AgiNY xc{&nz x5'>p/5P薏 KLfhg=`fR {;H{i49 lʝ֏ix=tDT =@p=F_2䯕V삜<)}pr͏AUkiFHJ=pȱ:Ɇ xFQ#t?pc$Tv; Ls&s+W'?l* 45b _C&jW?.4=-B)  t)\X'a.4Bq C<3Z/6WM=>{"ɦ4] nW4&2E;sVڪfTݑZVfMJQ_ Ja`RD؀~ A׽TSc9βkktx<=6$FHEEkBןyHTHY纰pfyŕM/?pqOpV}]ƺ$xe{2 Z1奣uMT);Zo3-̴+u"^Ybh8jAvSZ6)ل>[BǶofxfK[=NJz c=jYjtTnh v$޼~;1̝n0pmog~KxS<6t蛛ACu 6̠ۋZH/ļqZcW6TA8(h!~4W/vSFNQ8q~HA&ْr[ZUٻ>G.0u}3rti~֍ӕV4>'+*R"N|&r` LiǃK tVQEa9ɣ;aXկ${yGK2ݛX9DC2Fr]-B"dxj VI҄@5@[ ،3˃ {+wDn?Ւ$~,t :<Հ:]۫6r~)n`;Q?P(So+- y^ݖE[?Im*Zhwۅ#[ZhA@167zj+-ͲAܥOwe|!Q+&Wy^-:ck)F Æքv^&pg촞yRg~Z7JLvC>*H+f?C7<{3u r? Oerڠ踤IcE Ċa1 N2ePk 5u@ܙ s ԋ ;}'qGyױr: ۨ>r߀c4x?*i:qf`8 s+&Cƀl ?8 U+1O[ MJP* p W[##!iX̲d3RRu mǗ8,Xnu:O@3F@dh p  ?xJXpŭт BƫyGmH+HӦ|4L 6Bc(KĄ|`)"}pe ơMA12ECW~u[%cl9kPk i r˻X J`hj7$F{mls.ˈh* =~3(vs}k!u97\"먥!LK4ܨKQwhx$?34 ϢҘK[CCeE\Ľv}gK$o~̛ 4X՞PCdvI 15ytiur(r!qt >"]~P_VpJ]D3ЃA}_Іq@;qºaZqjI^ Zj:/+:^#\m8ù@p|nn%oj5K'Yb˭R^'  Z}5+v VI -ĂpoA蚤ã3C=͗T [SDGw:$ Z̚W>P֩A fD_Q^~ 闿ras?Lw+0Fu fLW4\X^穥UC9y'+})\t+n L8j aG!bcp#^_pw/+F4tg{ ++eTXV|vB lܘ$f\Z O"N)ѧ!ii %V(؀ϑi"Ԫ &m5J RG9MVs~ѥcC_pKSM5.^=d!MZRA1I(TI<~8,ve^o7=ZfvE\Q*6d^,PnY>!` ca4zK+w 8r:Lw!roݾ68!ΫZtSy_ZsNݘQA̬ dP!nHi\<)Aa8*Q* mp nDuNB͹W@) J}eK)* 21a'.U8-3 NV>}zA~$ʥE9G*yrrovI 3o#Ԫ̋!awȶ`&GmΏ cuӐJXݟ@MYP(W/̺VY- XϷunCKwo2+ljӛ K,qϷ;2nfr!3xڀePwxKwKQ'>ʽH}DNwx +oBOU,(eM joWJ=GZi¢0]H"C [ҬM~]j?%7} *E5Ekl"Ӝb;%/覟D µE)%K[_"a^QpTBS&'pB*Gr`MewU_ԠBDŠc8 w =3{vD?`H`^CD^#Α}K9n u m: xnL5yC EQe7a]k\^/{S+ K X9H*YץySZ;1IGҀnDYI ?NM}Õ3 dI7Fw92 a-ٱ6?<݃V B F&[@'N~Q'-e\Jo6 oj %8m'Ϻ8vYLՆPq3 'zJsv_xV+է46Cwp^2Q@Ѝt5}{nSAHFvyfM{F$!MMb4/aǴiU0ժAp_D\h05D[i?Bets{20 DɺkI[ Rotkj"Z_xN\bJ* r[[ G7#O5v^ Ig37|]CёfD8ҬII M(V2n`'2xReB[8E JH0HZi>9j--?u[7G=b@0K=Qj. ^TVѿgl\& lˢ@ԸT?Zn)cL0EHvEbT k7h>e^[SJLE7."ͪ_1ϙh\z{_ERd{x[ӕw_9䅡3},%@xP`}nT*  RKo=;@Lw?N&2zzKs JgO{\o}=B#㪼QV+Z=\uvY[C];᪆E %W1_(kҟ&KH˪Y,0㸇]#J#uP$8m*(]VP"YO"b͖?xAb;izXX(%ל 2p[lŚ`'Ŝh$ irg~鄻(87yFKC(qf8J45TEmTAyGap^mt=E}. 7,G;T9o:)0*խ25. &w{BE9PZ䎵oot} "wCX+ GAg h8 )Q;<4]k![yX 7I7Ge'eV ǵvC;B|]z"PF fsLQ%zBWZ 7A~?w+nMGjAK6ʫCo]  b|j9_c>hkX5ˢc.+HRՠB#ǴY; C`n3_S*NĢ*s1T"}]&x\e}mRaF5 af]Ÿh \,V/p]ʋn>SSi"/ͦp>i);4w1䜶-Q NmoMVv'`VY>͟7[ͳb0$Azd/*J@ T> #3ePєUI;|li.լ]pcgH y쾗؏Fgym*KdeGB:T@ -ݗ=j2Z aH],'ƒ,KcKgfHFc(D쨢9tJT xM!;ͦQim s?f>u7ȂjFY|JI= +K3]4D̅ڔ+r&F=0W5R6X)]S=ءv&12|;;Hh;m[7_+o̠2+$g!DleLMTwcE1;e4E8E K)soLDIˎT >iݏ54iY 8ҾR5`ol%i\l} O\ȹEߜ0e5K47q4"Sk葊T8 pgo@ԅ=اU] 'Oy3:J\~!lsH!%ۃf KNk,l)n1R~4/@vZ'}# )Nc^5gkeLԑiHr;>gݡx̷m*YTѯ\u/աpD67g2PtsJ"t|:X' z)Ivt>;#c`O*%RM(T5;AG[.|c YEZ!&8zw5o4!g$[\NOs kxjLȸ_`< #XL?eD &pWF[^^ečnkQl|/\VʂKbFWvC%uDW"HM]} .WI>hd LM6-B[\@70 }lx!ŌY%-M^{ ϗeJiriCaJSoe@؟2iDӏ9#9wXjxhJG x|ݫGx ƛf25Х^luz$0Wv .}Xu9W KO(/Ǻ,.J3l ą̋։?)K?j[- 7XZM> 1@: 41eo@Q3TXCE0m~[@.?_j{`=Q PFD"e׎%"reU8`f*vR #aЈsySEVFVbWo ֏(!A|kޑ w=ݣϗOA;/0=}9ax/LfF??[tcN1imVOZ1w+[lpn shER2zXK/޵gq ?S^5iR=]v <!v?f]YjSF4ȻuacqD9VRh[uͮV[yH:[HHyu"NGL5ʞD(&z&4c% bO F1kDw?}W";UAIc6{-0ij ?)6'}@BAX /}pAD/ͼtiKO߲L.cJe_4&ng5R)W3z$0uƎ#Nmc1(;kMX+ɍ$̈2"+"cmM01 9ӻÙgX|d<3HEY9LCdwjC5c,0g`zʹckSIǨno=еI볷ĐʲxqkzRro'aԷ1Te I qhIN_U}ZL=\-[H;zip%% `͈Q aa^QӵBj0ܶ >C0'j?Et|hmz fT 5aZyMsk@iݖzV0`Y^H \#L[VD0Ytn҂MQ^p4BsA7̲9IIOWC8?N;3Eyl h++A 8i7xHC\~5VFHc{"ȥS ڷ_nC|ʍ?2qL~3;\)J1 }ХA=X[. Ŕ=@oc'0?`;e~QU/L.hpz00R q7JPVH;9 PX] ӰskAXSYD+h3nW m|HP׶O3wDždv=C=?ûh!LL_QgB"2ASF?ʚ{;fQG}Db88D{IV48D0r3Wc^۩Ih~Sƀ Ԑ2 qtTlr_, Ha҃q:I cm0}kAyqe2޾(8?F?d(K #Ytʽ j!Cˀ@!('b&K]2t]0ʭ$cjwOD?fze(j$d"hCf0~-'bm#k[2>AJGyFr?]ܠBL3ӌ䗌ou=(T 4$4+2)w1 o;0t'@7{L9( (\cI>!YwC;)Y5f5$#˹9 Q>_2+UUIPE20$Hq8 piQ(&%r8|A^B[Far`34,[Fzna6f.^ɡm"uXnr,7VtI 7gNxТ߉ 9QÙ"тGJx!oSv`U. >0U[.pđXEABiD58v<)FHeD# *^c\7A@`wrR3$>I,{c_R> 9TDifJ4Ll0.G68"x2`:Uaa/Ǵao1pju"p <߅;"-g7vp r8<,I4@˵=IS0= o\?WoMxc`z[& 5[2DŽePue#{*6؎aDT7SB$aݎh!Ns2F0Z7ѯYv/2 zDZ`f ā(4n]F3}3X^|a[1TT}9 {GU*թbN !sEV2.%9Eɀ_/IGpCs*Ύ)fk~XԻG˒-Io'?ADwjuUm;qP~)o3 Y<ݧr& ͫX &`#s a}>zo۶A F8,mP(>:YVymlx]M{82 X3=Z_ݛ4M]FnPi`墬Rb:LwŶQ:k[a;ΌD,f3="TrJ֦C\V2EInq1vx/@/7pȪL*Ou7,d1h1)8`3ȻFcȢVU^'ӊyܷb P,iMNN8'Ow #$Ӛ_H jsY钹~T@spV5'zض( KQf> \Vrڔzl G :Yu"ՋqbjᖤO J] #bL.sqU&m`,P2_b e n.H<Kt[&}E[^-HL{T! +Ǐǰa<{I DG+_jy. i,\.C:T̀TU`Lr+Xd ]N:}2WrgqB17o*͏ goj+S[<+&o6xF O5(9F.La4NuKrn~(ŹU&&FM Em`'IdOw'\ƒUX_m8hZ\zE*;( R-d'Vn{Tm;ӵۂu/>&8<.GL&i3)'#6D(,|?^=3 '䂋A=*sdj{¾JLՉNvK&KU 4I %~brF$ؠv&% JI8\s")Q1QF:HDDE$OQcU,ͪyy"1֯:Y;ƃ%2>)c'yR(`+3RF *1Cfzf+S$36dܗj/ٛ$Apwc {p@.h ٩^<.ndk ;DG~Bz`XI2#獭,X.xz^z 6\w 3Eh0reE&Y ? ,DqKIJQ'CGUZ̞ؒzPS?'kSSTl}ߏTjPc[w7Sp Uݧi]g7cl}2!bo(p4ƻ6oY}<IމD*s#Z.~5[bO)4p⾟9%)ړtNYRpƶRӺ0hg;ePkj''75B~Iyw3eQMOk5K4$&8O+<9VUx$rq ANs`{UYfZ-p43..|Ab_`}F#-$=ݎ bd̮wE=ϼr'EA9r`Ez(Ndegj:fS?+2ݘ$=dL_?#1.%&ǿ'q)g_'Ɇt&պ)*#B߸o3&:E?6R& " ]6J`tMX\\G7P2fJOҫ{|.fڬ-Sn(@*):-MI}n'lH8ΏlR~vqup1F0,M櫪3hnii /nSoc]wQ]*RqtN'笮qiJTIqdZƃ8M.]L-- #P \h:oɴ3%=IϰL'aipRޜYz IB> h<@֝35񏁕f!U^0PKq(-$(4ج3& OcEa"7^[;<8,׭9 +FJ*ZJYx+^1gNAQROB#g(C2\^5ę38|3tvA3\(/d'1jj |vo[tysnڭOS=@o=v @>U *J3 ݎWVw;64N:9Q+D+[Mc'dУPW43^Ō}3D׻  SA|@K[>ˡ&DFC%`p\Z iwh C[b/ˏl*݌B*ne E\(s>@>}t}MZx;wrvPćX(ʧi\ @CfӮ4ꉏ@d{X3-(}m4bSZ*c?k>(?'ʼDPWH/9{ʮu"g7ldEpԍn͸s2,o[ l)&'4O8F/+tn#a&zAZֆbGkN1`h'Ae.vh-w8mc03*fJ~jĎqAUDm`0g^'[Qᩘe7{7RBfFو@EI2~`ۘ~S@@Dl87=jIgQÂsjoN_lzŴ^q|}\ܳ f;c\i!%QlPEr:q2?-2T`[G(NSȬoc9CvQ? t.L &#t 2ӚcmNYcjk% PXA!4ar' 6G 9zT (iO;?'F064\*0p f/b L^S@]gz3r3tJdbsZQ`KR6e턯 1Dϐ'@Hq@<&ߠ+p,8Jҹ)0ԛ3TmOԥ\4{DaܛQ<|v-#SDuI%1l"J8' fVֺ ۛbx&d;Ȃ_ZKi#½1~%^җ8qm4v6+!!]~fͿxW|͟fڟX\h *1Հ:$n~;L#_KuPIz7ޔݔJLUg-d4lvcXlcJ` ,s(1+U@a Rd dh/nСB˭2:>>F*z;y̜@5")ó\l<݂Ş+T&FA5r^,ï@PrzJ@|@ 9 }VA򏾧U|Ŭ4]x)BѲHA$]WloK?{s/Ex"/"z\8*;@]X 1U2ZXcIz$fyIUaM_TxY\(j{g]Myqg i'}myӿ#So2W+32sºCUmBqR|B^CJF_BLk 2xU2."NmVLlv-U`qM8ʳdoܡIp05T~ ]$AC}DgKJئ^~8)"Mc=ʀ7ȩ4h$>q$RX\͡soLDĺUBD28 賑},L;?;#;g[KvG$V>"8 uu]j Wmي#5p]8AȗSq^`x,?V,P-R@,XN7(_16-47t{#!"ZiwqFb*.l?%JP eeP-b1[w{-Jڳ! RoTLךPBx*kZ|959:~N^)AtFu$( } Iw==ۇf\*},R@$>ӠN}e栍kzP+vA9h'`X(`6P+`1 D 6Ώⱍ19FM)h{}M9_hz]憬n?KJ4x 撔6$.;ҕW[+oć?Ih%g-~( '($Jlҭ"?6"sO=L';wMTcARfxu *Ax4\3FVCa6M N :k3 yS:s<焕 IsS^{ lھ8k)herدrSCa+whO" !T3`&#=U<)F=a{pMCwaZLM5TdV(I66[8I)>њg]t]=Vwv~_2V  B ~C[X6u` ^Q )MZG`a4Js$g'G`nkRx5.|t044̹"R-Ɵ(.Jo-.bfÚEw'@ v:RsׯL(l^0- BGufp A*"Lʰd̈q3o\ =v<}~͝O'!yY^'܊CҰV=_D+CWV&&"<_a!ӌ'IXd!qHב؞S` 2ܦU~[!r(ez.<p3[H,L׎БsB-Ƣ|ٖf~:Y&x6ג3ְk4$IAs*URf J0xNR(4{2JY+'"׈R:v"ČDƱn3},}3Ћ ա]jx/G,GEj\ .;JB/G_WiW20d||GKHw!ۏ8^.deSښ:abDo0*}@;BFU\!s=:)!ZQ~;x()V扑H.D :֗=k 9ayrҚ]{оN? t$gꓙ#6 %UYot\p/X#EdT8ê&ї!42Sbq9 4N Ǧӓ^URn@ppu˦%AIcU(BY=M*<ξv sPyo/l]oh,Sw蠶x齱WoE,}+zR| /MX)`3^>k,[qEh\chEW¬:aB1#^(܏Uzp%YƵ2,[0p_  PTί6.Ho>3 Xa8ޓsP^salvj+-kתW:JQLLzGlF-'t{Ƞ'1CrBDN{y@N-vu_4cn/chw306D9|8/|uף'IP5A۔i^IFU#6d8t]:FܮMc4˫7AH1P*ܰo]"S!Mɺ$O#ZE7٩NP/%hũYj rlθ/C:Wp3HU2 te1%S\G="qv`8厠J&GWa%.!rZGi3hT0MBZ.CǏ'W@pԕb5.[@LH #.I@u8g,D6"Ai?Y84lh|mG0Ӏ FZJl N ݊I i쁾d9HZ\u'K/S(CO݃0 v/; m[u Qk<>@9/LΊ·ꨝ] AҽX}cՒF)(v_?-GCV6-,᪬Br$͏A!ojn39MW> G2.ܺ LF%-r2#}Ǫlю'fԋ<6҇EO7>%m?7w"/;C֗dt=+mI}+ƟI>E/ġZO.'|"4:}_iJP"%CT62"WЊ iÌt^wyR rYlH {W\nQcQC@2AD/G}.= K' 6dw2S=lb8 Y36_vBYJ,S6H\~ˁ#8)18R 0ɎJ/ #XIcCfwPq2|[pF8WhgYYܥ'4@ԫ9E DJ"~;g$}E"^پ?)ЬzLpxB¾7$JHn[A9P[&qө{PWkx}3Ҏ3%skhm\7)Yxк5z XRJغZpZ #T֏$P{ze>&7B?->9YFoC !y˛j ϑ=ϹٍCRҝ鲵/}#r*d_F<8`T/Q3=٨iDMju.7 ?;B\t}ƻ(/i|:FYM ӗ4sE^sNfJK+Y 喹r鿇7:cz"ɕprg?Q"afQŶ!Rù肏LM?qڿ2s8U0JuynN0084eߩL G\8~g%hj$>-d89zS`?V V{KWUDZqg^!`AGAs מs?fTu1<0- mJzh*@ $GDI|Ao4mO/HİC{a'X3n8x{2Ƕ0rS7uŰXM[Yh>^I~ yZCG>$@h;1ޔM28_MKJBiMRH#i@*β)TA}v|Z$>fEn%ܭ 45U9&/|q֖=5eY cJqD1iw4𱔹 k-I4&ϝGEf/]DO5@J >?vw%Bu|:\n>pgf etue&ݵʳ' ;bE~&5gæqfю}{f qTCK-z}-RN ϘAʁM2)@ڈͬEؤJx|f2s[XnSApFŐFK_lY0اc}'P'}8aG7@r!{$]S}MO 3HĎr(9!ZhzH zķMEVv_k/Ӑ Wy!S6ܓsjbnyRt$ z8&Ed+Pi85=~ DR~$~K\VDFiI-7N9U@s:wOùw-n:U0^ll~>p Kd3zZ_>Jt k+ǡ!t .SP$JX*=;{^T [_WYLh7߅?+i 1}hudSf57cw$Fa Bw%:FB TCFT\&&q\J",%{2$pMDS<092*ΐvm%FyyE4 •}۲J^7Sاrϕi6N`?k>['Ojx/LJY Q ~Ja Vj0>$ ΁Xk;O3H cT,*0,X᝿bq.`Z[z +럇'G'̖rFqNki޺A`4Z˃Q= ޟ2 zx ΠB5I OфQ0Ybȏ) w3Ԩ)M1 ۅ]hfSz ݘx1@`O@h|7i}k9Ǩ[l*׎og93B%~[6n߱#x'ii*Ec?7|@zLYJǒ =HN_^>gSڎBgG~,s>|HZT9瘎%Vam~|2DX x.>,[nܾ>e!c.~Ң˳*]K^għR>7H7wR,J/ڑǮ)>dY%̻i&0<}΍yKv I[zD ϡe`kO(U1>xgCHՑ؍Dlw1?9ێp3b蟚bՒҭYUtdQ'$1{ %4g_C~(*) s}yD;e+D͗$)br[TCRKjk]eu}:K9>L,@x?Z1ƪCUApP"X"wF,RQX \jRqHs 2c"Z͎1<ei*F, 酳ԩX7bi}>$;f ,Ɔ !%CG|^x\~VNiD‹ǡW*_|8׷zV&]WHW 6x2o߄AkGTT-u2!`b @|7%==AR7K8qZ2В]PBӱ'r>棏5I T;WS,luE}ln6w5O|=D[vUL`ʗ X4ZgI^ )73}xL>BwjkdnSirr#6:7(|`_3̓^eRZgy8G ݂o%2PpE\pC.-"*ʳ\O >-OĹdaFm@eJv:~᥷'>mwRq<"{]7q5o¢ۈHB9~^}TtW!@'߫x꣐={%Kgl5EE}?1UmC_2Lԍʆ盤GShjr%"R27=ɓFaG&]L`xf7G~;D'ӡF> l018'Ű8Ic&I6chR{ObИHT#_J=3, ?oE[֢$ C`j@}иxΠ"UNe+ /2mǢqeF3uDfϴ~nt`㔾^Xt-'-HxSň67y]˹x*kvvYi?sw^dK кBIcy<T^, LY`nVE}~җ}T"7:&s/)wE鴌H2rS`d(Y)Lv^'^k"7|,+tVk8vYjwHǪ'/r("%iF勉=KdY(;-qW!2 s<+;a^U!o`79pOwX=$'1ݣ^QyưR. 쏆h^Q=ž Mo7fn6rNRRF=vfE),[ wfU綣v`FB+ל9v?#mm)70wAS؝9N N^K&`)Vt8Wߡ(9td:Vq8ʫNpF+I=L2b)242=>\x^|{zn^[؉#xdx~bb{ŃʍH@I@ʹ>6wײ8am9&Ns*x P3'C 5ÌڎQx[ZB!oy3nt>6f#k|( 9"bgaV& y.|<]BK%&CY$IcOH)cz*}/XcNXOP '}sZKYD+iʆ EL|w `t#"k}b&@87&6hy3R*$DR.=P`08ӌ(AQ> ^Gl2yKܽ[%fq3>jF6ΰ9#)xoM4yX~8>pBx)0l<*?Z\x< ݭf9҂(u]s}nK{o/-n HEw#hSo7 rf&e@.Xk`=1X9 '-6X/-J8j{X7=ؑBz[צ[-ubճa,Q v $@iRzL LH>L uʍY'Ĭۯ*EAXn h~~OL?L?-2qxg<0v9ȧںL5^ g:Qݪn2Yϐc[ha)/ B*򥖚i2^` j˶4=z?F'pc]\FA-#L'*&Ayػѭۮ$Oh)!߿^oE Af-2G!U4_TZn:FWB_:UF~ګVG)ퟆ{:z =dL3$5.PI5}i=Z|dkƥ {_tXSr`TBu0gluIswWLAaLjyXѫ|6x:M+Q ;6tߣ; ?[*p[prؒC2/Wor~>΂хqoQdbv=V 뛠W>K_XB&К+R#KE_z%}D_%ժf P ¦^AaCqX07̿Dg b|% Eg&ESn\J cn]k&km@GPө8| Mb_Yʪ,?׿bC'wS:(aRnw?\na☞yjhWO5/48}21)coȰj7C}Lۃ_Pߑ&L_0veɸSbJalxԬT*<),hZB ʲm ~Ox +, B4`d 1$gYxq'΍}(G x0ETж8\?ҁZ+q<)̿|f %_'mvZD7QדӁ~+Y -W/Jml1K]S6#o"+y#[IQ1KAv-t`B\{qYEccF"bGp 1~.^M !:WDb罟zF!(d4VpV`AA:AF!#% OD6s{.Ont>ita`NLUW2g*PͣX[>^>TOaR)qVkV(R3;ۣ䧁Y%<+նffҢߝbD|A瘨@KgP12a!b!Ŗw6Kvk_%O/,Il||wh0(߈CZ:ƒ}dVC" ߊ)H7: Oļ-)~b* ea:ĽʡS\_}D4Sh0+ Tw`M y̯&x1 *!\F"V!tm?z;d6I G`SY1 uaVw4z:K4g JeF箠K4\K%(˵S}?Hrj`XF(ai@L>-v$-IeԸiWv pjǞ)WCNjȋe_ 'H)l7#!0'.[ yq|(ŕxU-Ñt8Ų|i^ sC^[&0]A)ϋbCU9!\bփGP5"čQcPBӻK 7́q8zAp Ţ:,w節sUB}oT?2KLųdؤ"0Mmq9"A=l$L\+\vćю1J&|U*eiz1 rz-"$m9?Vu.2j6 DT7JŪ9`%ǠA2̚exu\^\G}~Es#^O/9wX} 3X{Tf8Sf4M3E@u[ ~kK&mhn`뾥$nĖ1B28c%(eE[ ptz EX0Q"`>p+ƹx飆Yx\ l$ ^H!T\񣒩p? \݋Ԭ d_>b Kʀt|KN((jL_.6lK]Bt"F|/=ֆ@pR,Kz=="Yr[OC AO\|W䰦/<rSb{VUqtMh tyir[a3 cPD<cD~)+)ޫ"GsO&H +K۶4}Ei-Ltd eLgO=۴JSV 3DDT;nE-~%}h< =: &tU[L[d YpH>!{"^2t$X̸QR&JW/DŽ;,>okEfV*7OVg腵+}SLa@.}wGpsW)vX VpIGiw4_O(T;UzR|NҠн=Ւf~kW-|_bFw o_K7s'Y5z#c (yeCk;Ed& -^ǞҿUى߶Jqu^#!Tc V?S! ؓ!-8FQڜ$] '|vo ,n+*vN|QXbU u p`םF#5f`Daĵb6UCdYD-,<@HE[;& RhE#xBQKÞl3 4ۨ'uE^kˬ$*=t`gP/X1ouH,YOO&2ԗuY Va(yX8^Z,ŗjp1.:wGoZ~m:ylXUF@+.pu|OhAWNof^,pvУ=*ezI)+ӠA^ |##C~{=+DzCo9ws͘a3Ima%iEN#zu*nR+dweg>T4Ft[EW9nsR\7 JW|ٵNgtvʋ˄fKWF\92tp BS.w;!R@'$?hh61vLVngʃJe|I>3fe97zn:dO;H }<8x,۫rg^})x(U$V]*k!u͔*AEaWA^MuņhnmE~;h"*ws[W2r]-S4sYB/0 (B<P$I @.cXJ@؉x 'ԥlVNN{+d/s?'DNdhO~}H{+Pzgq`JYTm%]{'w :+˃, q'ŮNJ(WDV:%sW32U6W+[wJMˣ(;\fڻce W?ro ]lNj.}N@R@daf~zF/cGKehsEs/ǁ3]\p3b*~DH(WvQau?^i -LԌG 8޸yD^ZVbLiCd.cVZRIQ%.N@靺YwQ7xit'*.Vt[~Psp0!ZN_oHkdge%àhf(j褈쪱QO>[ɧ}hzE1aXGⲹ?\uJ%KbGf{&k̞ԒeQ^(z^?Og|BkhP,B"pªK ވ>PIGL8|_,~0DbzO'z=A^NpKy9 &&TA7@=R+~S s_p߈ z>x-GAMPgM'Mh^aeϿt.CK<2)`"JNapHT-ɫM+:/oj6L6mMjWb1𤋮fא}O*{gCN &5CfhAwT Yr~mMਫ਼2ӝ"]Ls?/0C!H9-6чYiB+RAs3ѵClcd;$}?T z3o9쯬K=oPS}5Q 3OE(\Ȫ3,9j$,W 1+@7鿄S`PU.v+]*72ۍZ<߭sӲ!f+UjnxC'jP8µLy~hvp龯:'Sk2}?uezGNjh5&75SD%9Q ({+XSZX_t[c( L0 *;iI-fOgkJ.YLUIZc(:4_̬$5]d+% l1':1],_‘Kɢ66Oɇ9S~;9Q.F_CJ!Dl|Ps$M^51WnKOI jJOЗh.f=xU5CsqFLQ k'G9꛱\$Uϧl%ԫю'; Frbá,8v X|M@j #`̹X)`J^.Տ $ `7+NxPkMqkP57q2^|wGF}w0)k&vU`c+Mnx&©0HUfs2%޵qMVX`|[!zSBmY{eGE։ߪ<-NYO V(,ȇ}yұfbd$,o%?=*]{1i0QmJ,TJ&%IgI"L[\"eFGE[y;Ե~3\h&YӬDb>V(ub MJ~yb>vbuyw*UJ9$ӻ LYZU\{mnfEf?at I|ڇ #%{1ln ?ql#5U58k4aXLOG! sHKQ6 c| אVR@*iVyt{l.|*OǹטD%je+!Xc?7eVbUVZ@qPQu<]0Q:Hyţnnݐ+:Ee$X)_t˅M~|U:@aygx$s|:K}Bpc>5V9!E)[ߌ%!*[O&@^ᆌ}E/3}&d u^_5McyxkYwRۆV/E>=6t؉KPF973YG3`#tN$ȜzGro#=bz6TI&#OIF~ G?8")V @pXƘY9wXuu3yY\z V(j'폪ybENwR}K#o<01dd}XQ2ybA9pRW %K^<8uflZlE%aF%fU?? /E}8#qKB+[^^t#Ř]PN ,tЦ\~y%s{o/W 1g  g?2o]; C$ܘ =S])cĻ:ibG pR?1O7D\0I`L2-iMGNItHئ+HjHNr)ܔ2C=18lFĒM_až-hZع,:|t{ТbwGgmڽ #L&rAQKI䅝 vG5VvkQM!TĪsw`̜Pvr*Hl"_rvmOo޴[XtVm G)GDkʃ"תqb*VMJgwAPl_W1 AøR? n*7H`?dk+#.Ru As9j-O2,Œ6j`\dOj(}г4kk@m`.kMF-WD-[ RM)Qf7:˂sRsBϋj R8f{4"as M/6u"əs3 Ӏ4ahGSbFR;B 1;@9*}fnSd̥z4J5X,24vblNyߝ?JyjiM&@[vd2tbKJUܤؔ=1\~!b^1O#Ŧ:.&_W1晶ӊFɷr[n?iP+b-cUn+*}|1ǺY4мtToTiZc6M &HA{#+Lax7iRs؞+MxiD d7"E涛UAl#/xdQeAӒxփVVΘ}םhe>CX`z]Y"$?8 *+T /ڥַ3sH@,;=ϲI:N#c'iw-;!r|BT8w~(P|O]3GURlRm:-2ұ@n=Lc%eÓYC>桴ʵ r?9yn$ %4. 3S-x'ɯ~KrMIfl'`!wm<=GCȒj+!N&p\܊FđqR\3#75m"}fQB1U2FĶqecg.&ԛnvs7.?u{q zD@&5p);V_yWB*bd |N[Ъ2ZNE9*uȽ)3GMWb| dhOdVsHٸ-ں8 gmrJ=z?ad\⪂٧`= ǩ%.S-X=k@xjɣ̂8`rzL9ӯe{u|$ X=CKuw ʄ=wBX MVb9sr[(I%DO<bԘP%/LQQ2UASs 3NpcBRsz俼T*o Aޕ23upq2)swDȒu52eku HJ*젹, cZM6Ppu QO(~"^&"ndYGDt(,cA2pA^dWUGpԾV̴°DLm NjH1 a%}<(m'8 D1ǐ^Rs*" x.BiؚC=@po:VvVIg`uXYGPp2~(qA [?%ElY6S ӺOY1sf=\xE*bcF'J70mEy?Z$˔Ǻu qeï0I"ˮMM!KNxx!:vW@KÄ9Jo6D/[m!w*Jt?G d=&3,OU2f5KB iS?*8ed@G.Sh#_2zvYU/Y41זi,2۝nH4yn/7F߳Vƻ'k`'2(y& ք7 a`>ǐʳjGxDٍ! 9)4`>Dg% A"tmWxi@=f;ݼhA학j.\TKr(5 |&=1ga<WJg4f16!Vx;]\&P,QG-y.tQQ I~ӜyQyZR 7">qR'ݣzl+Wk]/d7ύl% ̇:&e,;sQӀ6qYĵcVmT)ռ,F{1qլ e]7^B^j1įX&8=R^@rB.PZ>~+ Il$wbuq.5Ёt $A!1P<>'!#_WX 6g<6 >:Wz,Q!6Rnn(QUk|$pz*e pAZ7cԛCC )WH+o(A Z;!;p~l6<#VX45x)*r?׷"|lVv2״8l8U6k촫d+ko|IX *o>XPTKP)i4~mB-tRv5> ~ZEA&j;% >MrwO;lzڑJ)^d7C+) i8&inׇtFV|y' SS!Vym@)C7/܁PD0vD*]мPg_LYXsn!S԰rz>cKcaN/"FG&B@HvL}UϋLD?dˀ1Q3˦}JXۖ)Yx}H+|qt-FX7i좧; ey SQI۟MK\^%zow%_o~UEc{Ovw[|:O0 Z#$U{)db.~ʪ49?S/-qz糎.}+IԬ 9F]Fz2{UTf4-" dTI^ 3ƪ`cNA "u V;AD4T`1FP'F]"ychPtz7Gʧa[-F~ԏU cU3W ZL{1>qtGn'q~0R@ҘQ ; ?`NtȒެv+ uBU]>ơp7 ReKZh ?0UMF0 "Jy3{؜xb<|_.4PʓYU64wa66y1a,Xi`(56 FobTrb\Fo͛N h˰7s0YHt5NK(&c.{@ Jq#^(%I?IWo\TJr'%@mE\n9J~}j0^TIζfSv"5'TAOYP,{%ù=8 WIEȲ dU)7OֻxSV,7'qːz; sD'T s2cYu]J60|&Ħe;qWM^IPKkݱH ^%$!:_Z*1TJ-NV:KqnҀz*GN҆xc5}e$5]8sD'˘|dPc /faJS)!W|;l?V ۤ.2+:_qkqVƑOnŷlmR)藊-ǐԏ JtֳƳ2ht" (dH],2 Ȱ_+cu/]y*uj 9\:ݼa)*y3p!U B&k۬, ;8w9vKLaIMqz q <\QRkk |Sߺ<>abԔ㣢"ɰ6x]dЎ܄ :v]|@#xuTT?JMXq4jydQjV%"4Oe7q'J蛬:!1k1]q=_ǎ aa]$gww WeZIp].E9F}Tyg#&VzB9vsva%crUx {+ە4?lU3z}OkV+MOg`w2~ӛw>K|}56қg`k=xVŠĆTB ؐ ;=CC]R|jט8]bӫ~h% - ^K̙w܇^Bʙv OndOk ATN|̠Ƀ~W0Z{B)[P)n[!䎥 GWSsX/x&l ݆`c l9ZgZ$l 1 yS`c%$M+ "S=gwML,I2,I0Iw*upP\WJ昙-OjD#uSnr: -%!2HYba]U뻬jo+'|UN9MPx"MS|ڮ@a/yO}ݠmv'nQv}҇6nSZO:gihS=Fǝ ?;z|~UGM_3*EI9020. =olI)Chbp4hnjw*ס(%gԞ@\rX)>&υmB;ѝ*}LsSGN@wPH),g&0잤Z|<>HVk=Җ _.HC8N⤰sTɴwOC/Z)~_pPP+F.Ϯ`Irsçw ~qw^emN}EI Zlt -5] ?Dnrq s%z0&7&T*~e26Gvݒ9&_#3Ԁ@'wN} X5^u?` %"ԋ誼כ2C :O 4"W scx @3o3b'IdQW Oo+JV'XNE|/ @^O*>c[wO^[<{߼ɵn5Wn!j)'Fh]9vNw5\]l6NkA]Sx'MYy8+!ۡ9h.mBSL`gAS쭻90͝3T#K .Ik n}B~0=ق~M:jL^YgF6(x]o2𾨭?7q=q' ND}_+hA@Xzdu*;QD/?}՘]v=rR ,@^顉w pw8(aeP_gC=(IOK:2щ97)/3ٴtݗ7~;YJ4?GP Fתb ٤0ӳ.BzE ud1 Dc,pY#\hZV rlF&[{t 3HZ^!~`>q3;ҵZ ˳M˺`e'!} 2)NT:Lo0q.',5p|d59)NX ࢎRLk M_='I}@%_Lnqkŷ%a1DL |xo].V<詛mGN I-zc?!"%Z/iQCՓA\1eCBЋhc.>ힰ")H!|w0Od\NZUr3+mZfN(f)^P#l캦Sȥ!!^a+]ʟ^%Thr88U =W"߾::ȫ"֤YD2Zz|iuT_Zl!%FaFp̓gyYTe{|Ɂ()8TćΞT+C# kRaWÝ"uQ#XV0 -T埤hl) Jf?y jm+ԤǢ Zg6j˯8dz%6ȹ _ΞUzvpڇϔ>4Zwo5(tTȃBP O,t xoˆoXcjϱ.&%KKr^`$8%3תX͇`=jBZqEImU4{v=8' p ",& R mP넌v8dHE ֻE9Grp\N}/)_:3.Vz %6q3H̦F%!EoZjp}jr vǬ%a> k@5L٫6% CT6s i7j@M2=;pÊëi 1Q 'sĦdQJ Mr 1iO`Ğ:G{RiLºfD`O`г; 뼔Me1M6Ӧ3SǹXy#X4r0qP?{SBjjyFFAnGppzlxWI}b\.O.b׻.Ɠ `o0*i4FEgZ4Ypuz n\`V )wYHK[?Kդo(ਗ਼,|d\fd1ၼ7Fk}{z4ວm[AUb5K7*/@=>,PvcN ,;z&?: /7mk:՚}<ïJ?89Pr"W}Z U/FaB ~]~x$*i* 3^&I,ld5.\<}$AuHX,?PҘ_0_ ANkCr痒1"laNp,մpNӬM{PmlQόRcXb%SҿX+v6+9#$b)̳4V`5-b>-9gp cs%$="a{ˈ“f2{ :|rs ;ʹؘ!=5P13m91G\LV8Pf4e< sS:ސ .'WB 0BذVE|)ȊP*jsbBr.?*>ͧ!5vgr:T.X 儵te W. dбqAijܟgQL/Shk( G_/q/זKqI&b5L1O6A׹z+}& (M}t K m` 9d7Pj $dYϸWOOċޝGSܳ"LiW}TB][5ąR8x LnHJ¤]/7H32JCgxh5W*65KxV\V0;FЖ$ESnRyPʗVM]0Ԇcם叶lܩr&zc*?S0A?/:S @$:Ł yڳp*TW>L(峚kV|ec4˱#;*ԈMhXΕ?6dIl0+)Mݕ {#6ܮ3(/*|;\ 䁆bϨ݆FLin(- o=ˇb=eyЭogF"L\ %+["O<:R'G?ՃWG)HihKsr= *i- OgRKB߹旅a $㗖e2Ӡq&┙5xjd @\95^oRm'~kZ?kx9ql&\ 'nJTe3.~:TOniv)OEYlV\ .lA,O$]Q$%S{NC.Hys::"+a}w>B` +Mԉ&!I_* .>! +Z֊Vw֢NM 9N~`|3l(:CahE?LƊ Apb(fM+UtYQ">VRj[E[+gu/uK)vcs:OyDl2GRPq NJS.7QԶwf Su>t/0o4Madfug7P5~qX"S)?}MT]?HCDۺi1/]^0u@b= whBzB5/jC Bs`ȩ!9xmߖC {/(*w^`wiTXl33;%|cAmw~٭:-8kQI]Q6T2y2!;e8}nh2 _$':`izhd[ڇF`oYZL)rm m #Ū6B+zxڢ  *$70Mya:.G!ɼLp2bAGS kV$N\xsUZ.L- PO-SZݡ4y%Ehq ,bH %Q 8tg`9]c" _C l~-YfLhoy/k@pck6ݲp31P*:FHh̿r5ǥ^sLn<$kQwc@|M$C BGcF01| pLC0w ~1tt56تQM <=aM=1 <"a_+*hu5-~1})ݎ|f } ;Ti Oߠ]])§kZ L?^:8A ISkꚧ3}`di>2Y7kwm}X£`P%uADnX2h 9$0Æ0o`P:TlxpAF!y2]P ŭZP2 &E*y9c/ܻ |nmf&5gϛw8QAO)f8Ho]]Tkߥ-q?:CoUz!*,:Yvߤy0Ww[JA3S;]lRìg$uĺs/ v+Y }r/C?S&g=qkP{Vp-Y3d£xJ=ǵ30:\Y 99H# 2]G6.3m+uhcߎL0Zy1 o u͔?;;.uO<XE^X3و2o%ak Qhа@ISM7jь#(v; dđ|?pF^IIHyq'2n DBDOǦ~g*$nY(̡,`HCISU\ZdNR&U%)6`s<Tm2\sqZIZ~$.MYA%!]ټV5(ݗ@̓ Ʋ8//~Xk~߭_MC̘c`bs[\6KXx{$aExu˛n0 D+̍HCKWK5rPcQ,SZE, ɣ !? h$(ddg $1é4cm .oF^'.]hOFJҒ8=gJ FW2ʂn|u2_W{>mNA-7')aϷk@lQU,Ƣ:D4?x]ZY+WX3o`ۍ`"KփVafCeѤḑܪ7J)ή[]q'5u0˥u`iDsƘr%˘F` TpvSFWk2t;qY,NSo;}8B\HiLdX7hL$ V7"B DdqCUɏ$w*ׁ.ԹvЪeJBnGzaC#8kFM$ɼTb ˝V u'XbYp9HOc ӫ_  WXZ,uLhm*1a 46t{x{s@v~-PT;DA~k 5< " rǺmS}noz1/7XZD?;5UDj tf*^ŰA$&XSFiOkX )(QK6tJnPy|]a$9 V 1:qA`Y<5_m &Tx*H4nkNzq9}7 ㄛD'@rS.)~c+j5=& +vId̰?PFB2G[RiǗ]㹗}HySFKFA&wZpwg~ՏeLR-Ҝ;N+]JR@^!>(+W ڗ[GsU4DyX#,vͦ 6 Crct^>j8cyf쭕Yb6\dhp.S,dXP76q7+ XLIU&!Rv/x.N ] *fhOZS!nNܨa%rbI@L&0 v ϣo<B37oTrG\X' `', haziuEQ2fE}T7ēT""Hv%pqF16Ud-BlAΉWGn6|?Hpw}8gʴ gq}k(b%sҺz~9fA"z_IwrmZR׋Gox  5Zif-ܠV%kِC$)͢nYG|i ka;! bkgSQӤ&J$j[h"te0@v= , ՟ '0vE,fb8Z`;r\gvZDGٷxc&_f{M 7>#,^^JG0r۹7}S3|qD_;LK91jahh!Dg冋4ʯBgָ5aQ9[OmW/"u GWĸחu-lulkz|J#QOf!|D~E* |} _3D<,tHǝ+ Ce~;3Ҙ4{sؒSD?*!J'>#aT:Ν!j IqSY녴TK*v"eTWE0X&9\)#[3ĠLJen)0ۑ2hu~_V3M}[]J#-kd+AȤ@:Neu],l-sa s<7@F-6t q4@;<BvV@>liǀ(brY4FўMUt`vBs2:.1xY8~, v IZ_:B 2SE e?49%<>?,2@K#/O:UeJb1|;.oRf#y0Y]iTИO"羏ړԺYhxa!?#0,"z nW )|+ߓx1DR?t#K5/1BZkξpH1J9h" 3[f&?nLak1z \HtLNW/ZR$i=O}U=b \o͑kfw399 Ul p"̤sA#lMV&2Yqrs'K8؀nX䍵 }=O$KL[uwqGWEɑu7gj.R(j~'NwwI5bu 3G螌b/dYK϶;MMΐF}% 7^^ޛshŶƼ%Wl*|D&`~"H{gbdfLayנ7ت^#џ.75^7T 4"h [/ೈ""ӽ̆F֡P$ϡPb  4VS/PJ7\O[ڪ,DƌE=+O>{4x+,4RD*CYw^]EBP|!ڰ)Ϸ;Tv\5ol (pI[bHM[l[~B?r.͵ƣ"sWL( ,ɦ۴ض=x 6+*-\1U?]/d`-Y /~o@֭ t@M:5q|D &ޛ6uc74nBohqod($')De̕E:tiZBT,C3ta g3{qBZ-}q}~{m2*֢ɌјW^10WdDNwKjo <~b.EuǂGמpBWӰ!$Or|Hg+$ /Ib`θ~#lAemQXbb+3Hc٤W͌TGiVUVa"l%NN̏ )6hmĺH=b.5/f#BGqv }#Y[k4 z(~J(u-M;4]K^3 6!IҲRlA8 *Lq.u) 熺twePS̮L`t]e> ƞjn"u,AOKat#x̱Ͷ˪}թ*a66?O߿r{\Dnǻs@8wW &pPh/~+ĺȒCO̜MղFpSpZ:f%+vpEXJ!.f=>O)9Yp0X܋Γ\8k+E\ խ\O<<}W-]4W˴.ѵbg0VP ,~fw=@Zn,$ |R39a&lTRw{.ho [\rb~*[V[ךP)w,57 ؎ie `H~fi6p[6`?j1Ẇ|#&O/rp.4i2ӈMvƃa 5& ߛWE,ةZ.E۠8:DYy^X4g6F@fENlLX1ј)A/H`XT3_l%x87Wj'm KG_'RFP acSD_\WfU?&;+1unWo8CzdˠZ;]h}R&|r!8Ci}Dȣ1+ _ .#r$fc0_t%yxyO5)JP ǝC65UQ{ɀ/ۇ$0`29P ]|좿 ^PLcZNEϹ$|YKJ_ 7uf8ctJe`L4/- ?y6Tݭ tH[IᵍmM.޿!9HIdI'?;r"';S:~ZǣvuNgM`tc'Rg/orVaTk@)plY$URei'?İnd;?- RVip=CJtO1iߦʪҶ:Q=c Ac[XSXAfjoFUþ땷Ux2@ )zE7G)dJ&ֿiF@c%.#̝:K/NzI ߴҥQqe y`y)bG \y^B'em:S㷳I!|=K$ K:0YE>I ˊ[H*I} >166&LnD(` |KL__f":*ͨ \Ln ` *UM/vƚiM')p ;xt񚑲5jm?xILQ-_5Wr|ͬDp:?}z<Y6j!9 .5N*dGMmUq/"zxS3)gM;fo!wq(Ll@&"_<c#dmHZâPԥuVoVaXu2b=y2'$/܉~Z;W,f Gq=<\AE/?+ *ím+ % yss _VR;yl fSdx:86RCt?RbZ;G7K^/.Ιm}wyà:m]G<$5|l{ͳ瀌K.^=in?)i ~~,yB#6w#.{OwB#2cZ?fDQwP4F9-[.SgMh 5CO y\5vQ/XW4}l6Uv;ww𖈄2EdV%8nMJv\Tֹ&u6 @`&/i7*anRke/.;RM)骨ޘpj Hmn+?~0v:nAP`t`bva.IO,CWɒhpDbL-BnW3b<9{Rlv'qS >bӺbwr(<5_ĽVrI@V=-,SHj-g8U&QQw<.MVaXO~pH|( ;68f |>hL{hq_(|px+ sCC_f:.5hTFGYQEt3؅n}ר.7xɧx|qU%f ; MNN5?.|"/+c!8>l#<ޡUdI͉2;!CtJV'[b?( ?JHS 1AwU>64:rdF7y) ̨4bĦޙEt ˑG|6aLB@,}׊v1,c8aO#vf n{XݓxKh}ǹ0n}D9HԢېxʤi\y}is' iז"{UΓ/+j9K|ЈaM,5E\1@/ IO];IA]K K[O`YyN(F#`h&c@Q564Sg7O /LRdΝ ] DzB%>xrn=U 꼨:Gt"h0C\>TpH_#wk{{e,Fk,64]9 "|W`X]w: 3?nxVI%Dy=Jf'ojYgk1/QOFX?בFB̪xs<\'f)Ҳ% 9#c0x 1{> )l_hU*^ZWXD Xa {XdK5b"IQ *=)o_k8?sWr(0ۼVGJTjF^Q-f֛u58ǰ#ظ2=X;3(bL=}%[[iG V2kֻ*p9XEj߈~1aGK*{D|uge!}feb䂧.3M`'] =ά9\6~oС5Dzg!hzj0R*Dct rE mc%XPt`-k ⍐x>t: \M#~2-Zָ L̜ -]ҝ! m%Nt\(;Id`vFe$q},zh06`d>H+5YC=xKk?Dhv=,$E) .aܒSmɾ /ýNJ?Q ן>U|'X#&<26KSaH.uCh35]g!b,q hhz̯p>[le=)[u:#i49{*`Nj U7ʷB}9쒣lTy_ecQٶO ZT#DG[d9*`/w?!c"r{~v*\}H. IhADaO>&e=6sTԫaov+>sQsq1{S(b:7ZKn(@S`7$ ɋ/&.$f *lNom(Db RUHP} Y= [)jkLu|l@SVx̑h@zzط%I8 VG ":ƫɖz.ϟh҆))eAv e@';XݍfulM<!6NѾ$Ɠ:[<N!`4@+3Ld|)mm(h2*98Qw[jX/Gvan&+;d>HN{z/Oi[W#|:`?2B$r騬}m;#؆3#|i9R]F8fY__X8}^αjqUKt4P:?  ZEjH+KީL^zo)!9 t6peU~aɈHt2Sb/IYaUXJ48I-ZگN5a''1wt*-L;@d)@%teB+b,ؔ:f?e {F~I.ךvnN4V ]PzV 8;.\>HIoJ^6;Z4)*BP'my0\mA2h7~F9Cq6Hmwt ً/`P s Br#=Gb|ޢӘGW#󽍯ȵK&Tk"9H"q \7jgvH_v]ICAA9c`F CP4fxj&5ʺ])I3_4+quU{t[5XYS,˜B@ֶ~lsm̮f7/wZS`YYw:ڢtF)}howgU99udzרn6*50#l3Rk#>LvA.o(V*>6J4JUhy{%ZgMF I`˜O|:r`M~UػǪXOPSY}j# t8Yβg{aƦ%([(qLIm쑫?ZXN|>Ni,'Z8 βI`~17[5'RN"LU1`?UeeؗȯpObP]$}bT:#3 ڹ xs{!ӊ kaϑ<`urҒYpma;1 (rybКFKMSL%\J\ ) QF̄Bb8+&0VОZCB$ŤhKh\gv35a\Onz WBRs+:AS;tOA{nĻQj>>4c?7 "bYg"F,C+Ksxځ2/k3xqsϏ̾!ϵlOf/VO~}2jKƏ크lޢT9a.ڊ]) H%at bǝ`XДHhBPVUzPu)[СsP`Ar=B]Iv^3XPcqv`m]b T7{#v˙7fbo+QwVR4~Yo ZgG!Ex,c0vo3& >Vӌ[ye"~?ㆯ5rTB./ JVVzȍ^9 !$FvA΃(eo3c`=KˌPJ-$5>&kH@A;yXPĐ2,u??Լɕ:cփ-=679LVUF{Ӵ`7oOq^bB|J i-OҝV2eK]+^QCW &7r3 ?QL!"c,NJaނ1t4ex O,R QT2iaWYGq yvy o>g;-q{AwJƒ/#pߑ2H;]dN~BSY+XfFTQ2i>=2PNQitT@'[MĹuL7} ҽL<#L'yuՕOm\/8:"\Gxil v#gsHElx:#y:Qu?SZ*>[`:_Ɂ;ev5f&uN7Ֆ18s/ŦX{]KanѨCA;x~t9tNi0dsE#tX_e?BMe1Fuloz@fQ*1Qd"O,6&1(;<t k:a8)|?ϵYOҴudۄ1X̢}?T퉱9E"ݦԇqk=}y(@+S`g?dQ_Da5ꁚ-Jd^elMFI`\ ۈٽ.7%CK3~'Yђgs>U_i D{;s]UUJ|9$ϋ`uyʈK2 %]w*6[lem-E3qZ||M25` PA*6N$) hλsӿ:1:S1~bXk'[2:>N* yF,*C=fcDWF2i4zɵXn[I-pZ܂\.RkvȡX{}ʞuܭ%lP /fZ%bTpl 9[8$]*8QRZR6:QU0a3Ew|mRHar3}h4&c:}Y}c._'4WhClMLJE!ק_|O>j2L0HT*~Q-FuYś"kqʝ8JLE)D?a.Rn#x40dxXk $F $ewQkcw,lV^QhzӞ4X}VX!;rO d|9t!(v3|C4컟=ӲF{6΀;U 4d$ܸRKb@iw~6a0]4\`4N*yĊ =@cGD~ ~UUPbf9` hյFҝozI%_()DטH#Z v%n"#7:iS c  !2vJ/+3b;Wr%PVTcf}h@C*PCUTVtƟ540A?):SRL_x*A{d/N~&wKQјR5M]AO }pBB\ ^zs d`lr2L}ĸ0lM~1=vDhi\ wPu)_4csDBtѐgo`Hxp\ %JL*W1y?PDY.ͶLDB;iѡӕxc"U2BP/|h܅-uITw'`k0ʑlFII7.wb&9B) G""A+8`GVgG׋>>7"S˦#]"!nN`Ty;uU1ܑ ҩvk2@ $ BzXLvA> eEbn$+ uRFr6NN}sEeuRmB}0+db5-hP2Ɉѯ97/s0\a*~*_.tÐISe(tޫ7&In9@j_ ED (o3C)N@=# H'jQ6Z,CYe> `&YY U:/Zb`O,,PU{䁳QE|Vn7X%l.XlSa$U ŕOar XTb(k!wvZ44,"]qСLI$#E1d8Fe=05y/J3wzgc=³+"6`Zގx]^%l/Kg4BAH긔^@SBtdrjT/NyvDԳg+C'b:.{AZ"65mp ߨyCp ]O8.c*Pr~\`H8ލvEIf4«DY&sc^k+K,䖕Ҕ|_l:}QWǺT*\%,cAqs#nHSDg %KZo)>~L MD=9*DjkpBx}P/"wUi(NkKG{=D_, zq12SozSeb_vFbX}uk0(Gn }Ј"qGqZf= vFV#I'jFDJ7\~;^7Ǜf;B'xיނA;z+cWuT1l0̹((I^#i13ś|-unjpuPBϙK0?aIBw8pbL1 vCW(f0֩DFOO8 /jk1Oa K^{Ѡ\t|A zev^ LngwB |ʽpkW0Ϸjhɀ=*J8KJص0vqgțS@>L!]NVhJV&MQaɂR}kN An3tNԽ}F@yg͝|dʧr0ro~Eug,vja(;w[C+lX^]B~G f6W e&Y).:V 5;{}ۮ_KИvYw?ĚIa d6[sp䱠(S)6VU/|oD DҲ~O Z/:([i2JMx%hl=glx#~xleM#BMCf, e$HqWP!M+ UDXg*byn(]if"=ēv;3;-1|&g.[W+ެՃ(?ߊw-B'{RwhOXN R+0{kaց1kLͻSPO95+z˳ƗAoiә5:QUw @פ"=b xȜLj,;gDɱY&û y)qM TDN60\E[g'wSp-gLQ çBH2Qb m4ws&x؞l4$=Riu>OY\s3TdfhWO;dOVwR;3cĴwCuEznş;u ilA+N,wscˀ\3pLy"Vҽ%GlVLrV:\aY|t0'/YեEf^^[{tYO~[-@F@lP NXb]߻^4]٣GG,#T6@HevJ2]UzQ,6SrY\n|C 7/ V!KjqkR]Ĝ)\8Y4HS<^|.?CQ+ц )0Rlݛ7p0m8wQe}غJ4%7S8ehh4rԼK{J>m\S#o5h/kFsglBFM2>l_z5>D/t޺SDq-.O hRt;$% Җ͡`Xnj<8Ȧ2f(a/R#-oiYZ׆rEz"{m ǸSy/".FjiEüaHHYePP^IS*R+ǭd/zYPÛaL.'Z'_)A~:K1|MMVZc*%ږ؎MU &)Us- yi7-;lIm{lVv\m f :Zc3i./ZnKpq-Aa!1`Z(JBEY/6$׷=BƨY>!= (kpM+J$`Y?Mr&Qg#0~qM&E+,b[2$7}  a R#lӖc$-dU< A=>splrZme?qT$fJ9axQ̾O=CD0 ;G3ܫ]b85{x{tV8FH^*eA+h:2 ,O-{Lɧ# ϡ Ig<$]F)  itmҡ%-GjūOH/Ijaߧ 5_\o)d(IxItԏR~N zW֛^oށ @AfIJYLu%V~;Eyo[X MJ9HtQb׀hjՅ|]Kl}Մ}^!L9۴ݹ]vFQ ΙwM[Tvaơ*6Ù p6mt 4_aϯPzD >r\;m5=cn h[/Z VAU>h ^fM]l 53\m3Jw7GB4#Uua 6Ǜ6k(YJ+WS;1f^ e,.J0Av~9NW` v]vcNY5Bƭ/(<}.'u)iզuDgڠc?hΤ:= 'g dä(հlQ(T^B}"J-}Ü0ZR24r ЕvZ)$elbo3z9RazIPIs}#ۿDlm%\ o*;> $B{"a-j\8\ ϮHRkB ゐ<ݞ`C~o.je / x2˂}hEo1M md1Go?dzA/p]zV\,  XzlT3VdAAC21 5/vlEjg?vCCR~c>i3VBNG%_p=zPsr`IkԬgfq';>b%5ikQs؂\x02<|Ȉg@@& ZBݵ %;2킃=Эأ q) GFv]P2{1ؽ׼Zt>Q'^}*ݜ[m*ە3#ozɉjT0jدFve;Y0 }MǢ$WzSy`n1`!Ӝ^[^v^Մcpz!S; |ky9릃=yB?d2_7W&?ȀږA*u=_< $GS؎h0)c~!Nvk\k (19p(ccշAUgS%_xuc-E(*e &E`۹A+cifUD/!}ob )ALή#hd*B'ߙXT$elziǨPDܥV~Be\NO28*Xi#ʡ+.#Tf#X 84vHSUep8uf }2zT~ !L K *L#mL7eD X>(dCBGW^?DwJOf@m% /tj` 0vL&7vPRWEsY",NJRT<}7=H 93*F+1.6tu Ը&V-rKJct΁6@5LJ`/94LKbxU&DV@J+@$vyY3븿f/HM“;T_F9KfPN n: KY!X)uٻ@MU$Gi; hpWz$ݳ !**.ی\NQwL(j@瘼V%) ~KmrĊAG7moIwbf~MgSԏ65H~eywu2$*fuCC^B?Im%¹ٵTg`)?gn`I{yI@\EDXgX&(Ud@ q=X> %Q3f"be U2x/r.)y17R(+9.4M9B4 '2كSRZ}Omõ8޳x3#ɳyf[Ԕ=`O&n39M#گj h=>:/s)Hbg;Aca4YHz4a:f2B I2a|}zAIJԧHw PS**d) />}tjIJeHCNESop4(x  XޫyQѸAfV+-w7 '݅ثg,x@æӋɁRoH{eldվ^R N\ ɿ64L~_鷯¾z>Q<0/A2 ppgwy~rZrvYZ7])5HUiROϥFPJc#S@8״m??1d-h2KStђM p缁c="G}]T.`Om"G_)j,,ܔ9 p$NQlG,6f(+Β(%UDs5#q dhpys0&;i]($x. KuJ"v7~̻{WoLoܹHic"Y`ҩgT3:*l"VB-lwEXÕ/]8-t-)`_J=@jAZnRص3 fP} ט`׳o5t;*w ?c ܊]CbN(&RM8gךG٨X)AfzttE5x'A9JNʑE_2 # o@q1kL#o>j+&¯r4a̍:%KHw& }>{@@sLc'+ws7e;~wuC{ `H|#,g-b_ץ~+M>O൤xhh2n`0<4z+}N0FҖ!gkEHJ5cL跙첷bـ|a\[N>;O>}c) PBƚd=Ke(*N)(5_\x(¶T>A|mB])$HQa2Ѫ<=ScU&×{$]W9!|ȍeiK{d23=`I}oTls_P&`*8IJheJJ^#PJ1tKV_O׆EAzې}dɲ|U(O @Ca3P#S!X7=p3GYu6( #DA@v&Eۣۛ=&jV 8B6@;`+ ~e”O8XmmֻV2p>'\59t_v.%1 %rj8un2;_ESL.LZ@HA4`wHx 6NfvP0&xu==aRs&[l i ?d`oh_a4XS΍γ7?d4hlYJΧ-s@}t,0걫hf<Fn*v<;3-{氂壗5I$IP^eE<+vY؛/;PkhvJ;ӓNed9Q?Dʎ OC g8 |3=ZC6|5+4.12h磧 {3dg)7LʦlA b{j`a i+iܙf~9 ]]JRjЪz.RӦFgf}ՆȥCa;=HJ% ?1Hz$5ΧAqipΉXð8U'ٙxz܏@ctƯP꺮dNQ'BbDOB8^!\%غ4~T"H>tm.yJ;*':*u&fn x3J0puAqaN܇ӿP+V@Xυq帺3|4DD\-{Hl C؃:?,$u]K:̀˸Y)$_)~Tg/5,}*7 QHI coElCIF5ߺDMGm}e!|`% ^G?ycUy O?)sVkstԱ0 k (cN̟O `c_qvL 乳2@flkY(e̜? IfbgT鋁7k=?i}[TDx;^ g9;|Ȅ WR*BiT֖~x{TzhA\pp4rdŖ$2Q)IXXѺn׽qr|$]|g2"M&|ëy#Gr7bF^1A+`>xP# R{͆R-?k&&.o#׍0к59yڝ#IXthCZj<^q+:n3U|)uu6A)WỬCV7{#y` ׼%V2 OERYH xA+@=Ba~zp:!{D d PwL$GL]*kJV^ t:fDO` _WQaw"RO 3O ͠Jy-bcJkug:#LּUpsl_dwZ#8 8,ƒs4#=R%%J<NDזPd \f&jMC]=$i:vňx\VHsA ]D$=\EۃZDgp)=?lS:ޑX/D1:W5P.MyM8gn쇉ܗ%'bo6/>NoD7ڥwMO:V/ifڃc6p mi1#o $S'N`yH7hzzV#cJt;{{qf '5|ݵl~UfZ\cFa.B%vS$-П< ϟۭ Fk!|l1L-U4l-[UӢ}<]AzSlՔdj赨:5Ju'#{{h avi}lP4}pbFD~8;\JՔmi&a@0>n\E}CAq)AѪ,7c(K >g` (oQ.MNXΕy:psMP}fye I7IN&X5/6׋1(wj: ۬xCQV/7L[@# , z̠&u]s-r9`}I6a?|n9^VZ6uSsu[U}+D6fI$H;8"/8pʷM16dzco +M4wݓR(!nlfi#=;:f-p/"IϵqsP+jjfXco o Rř4d .䟻5xD#lbAM=<BO1"RAAGo0Ԗ &|V'X~\[!Gߎ"? 9ĭáB{v=Xķ<]{kwfs5("\C'^UiO,h%{ woS']`l+Dwғ(8hC٢v,0;n{ck,!R#*5Pxc{f^J_W"&T˝p9f;.h5 h*.v=.pIq^mSK[,rGNQ,fuOv*ha4N$|6]7:5V ylͧXoc(3̪!"N"ɰjf^h2 ]KcUaYÄ1{PBCHQP-q~z C^t1XJ Dkzm ӠޅZEh<U!A7_q]J_DpVq&Sj}/'vAhXoWorF<{)*C=K}#Qut74T1` a-O{{ A9TZTg`,8XOzI&Ɨ ܶ-(Z,b[>$#]<ݪv… $E)KɬPŶ(!6*+ zaTBP{lW&B͉`ȴ8cq)"=qCaBFU}5/5G}nQCv>Gr]@h.=3yiZ=FvG\Egvqp[f+98,N]䡟a^-xqڰoT=҆Pbm;^ d~a?Ǒc-4ɩZ/:w#AcXW Y19h+fn3Q;h'svYosww$+,9.Ey*iFTqT -6'(f}WyUߔv9+dJw (ʼnmdaCwWn7;R %"5:WI tXn9?nL=\\8]#є]H .sugzܫam;+F7hSkyJO 4.p4 MIy$|UCYK俬fzU4HE+~Gطwvqg/ofkXsI%"U o[,aCcPM:e#H$:<#-\0O/r֠8Zc߷>[eÓC^!ZE$^:l!lQIN1ŗ{΍rh ga*0R4AJ>22Q%D=wwD7[*8 &+Vgx –ąMp] %j:lC\"؇U=qB^j 2=LD{!^pòKI}GMqQ׸!] ȃGwY=@WBCXLM[\Zz.JLr)1LyA[/ |w~R3XG{dlC#2 Y;p%^5[d VBגܳ)߱9i;{QvaAr( X\ I)])folZV0[xb"tE/pL>8QSM׽lMpһfZMdO(v^$n%qZP;ƅiu9*&R{KLGy+1F;ur>x*a(C1f0'7^=%%: } Q珣a}koI5MH W:t)VJiѵҚSġR)g}]c?TRH F|i.dh^` hz8z$1e~ˆ»P&G|ƍG9QUoEgs<=KuYKXo`W%?sR^s4h3ڄ"vщ/azIEiqCv#7JT^x\ 0 ԟ?HEE{+b ;gx%<hZ:j/}j ŷm|X ~d~ݘP"e@P7оqOusP-åZ@e!7` ^̭M{`zl͜@7iy89iz%h4>kc{ʔ򟧧[#\g|)\**::tQd ]85m b/*HޫuO6 3YW:yjɆT@΃v: YZ