samba-ad-dc-libs-4.15.7+git.376.dd43aca9ab2-150300.3.32.1 >  A b p9|a.{\G[edz(.ܙ=^q^;#ƩU9Ύ˼\3 uf dh#&na+f\+B `u؍kќl;Vq,_BՀT|7˄A+-Ye 'd#K+; 2*5/pt&rZsK9:L \J24C\щקzn`ބ]zmQɥ-3^|/a89876fe71eb0d420e0d23c5b141f5fbbc84af30a3e8db6b9b8eb40024d6e02a27f15c0e63b3b9b914c43a9575273e07a8b4f8fd 1b p9|pw^SmVqn]jD^Ґ癁M[;ZIeY"-Q {nBhOmoo8 昽c[9.%tTvJ @?n5J3'zHx' QyRI'zwfq)$Fywl,unr{rtZT Rh^6m[ >Ƀ<9bдr(At4S_ O&1p3l酥#6%$H>p@j?jxd. < o# 9Ypv|$ $ T$ $ ,$  $  P$ $ $ H $l50(6!86(9::J>= @=F=)G=@$H=$I>`$X>Y>\?8$]?$^AbBcC<dCeCfClCuC$vDh!wU$xVt$yWzjj(j,j2jtCsamba-ad-dc-libs4.15.7+git.376.dd43aca9ab2150300.3.32.1Samba Active Directory Domain Controller librariesThis package contains the Active Directory-compatible Domain Controller libraries.bs390zl37%SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxs390x h( wH`w8xgWG'W(WwW''Ё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-server.so.0.0.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.15.7+git.376.dd43aca9ab2-150300.3.32.1.src.rpmlibdb-glue-samba4.so()(64bit)libdb-glue-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdcerpc-server.so.0()(64bit)libdcerpc-server.so.0(DCERPC_SERVER_0.0.1)(64bit)libdlz-bind9-for-torture-samba4.so()(64bit)libdlz-bind9-for-torture-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdsdb-garbage-collect-tombstones-samba4.so()(64bit)libdsdb-garbage-collect-tombstones-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libpac-samba4.so()(64bit)libpac-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libprocess-model-samba4.so()(64bit)libprocess-model-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libscavenge-dns-records-samba4.so()(64bit)libscavenge-dns-records-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libservice-samba4.so()(64bit)libservice-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)samba-ad-dc-libssamba-ad-dc-libs(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibLIBWBCLIENT-OLD-samba4.so()(64bit)libLIBWBCLIENT-OLD-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libauth4-samba4.so()(64bit)libauth4-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdb-glue-samba4.so()(64bit)libdb-glue-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc-server.so.0()(64bit)libdcerpc-server.so.0(DCERPC_SERVER_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdnsserver-common-samba4.so()(64bit)libdnsserver-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdsdb-garbage-collect-tombstones-samba4.so()(64bit)libdsdb-garbage-collect-tombstones-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkadm5srv_mit.so.12()(64bit)libkadm5srv_mit.so.12(kadm5srv_mit_12_MIT)(64bit)libkdb5.so.10()(64bit)libkdb5.so.10(kdb5_10_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.12)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.19)(64bit)libldb.so.2(LDB_0.9.24)(64bit)libldb.so.2(LDB_1.5.1)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.2)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.0.7)(64bit)libndr.so.2(NDR_0.0.8)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libpac-samba4.so()(64bit)libpac-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libprocess-model-samba4.so()(64bit)libprocess-model-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libscavenge-dns-records-samba4.so()(64bit)libscavenge-dns-records-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libservice-samba4.so()(64bit)libservice-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150300.3.32.1_SUSE_OS15.0_S390X)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-client-libssamba-libs3.0.4-14.6.0-14.0-15.2-14.15.7+git.376.dd43aca9ab24.15.7+git.376.dd43aca9ab24.14.3bascabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.denopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Update to version 4.15.3; (jsc#SLE-23329); + CVE-2021-43566: Symlink race error can allow directory creation outside of the exported share; (bso#13979); (bsc#1139519); + CVE-2021-20316: Symlink race error can allow metadata read and modify outside of the exported share; (bso#14842); (bsc#1191227); - Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- The username map [script] advice from CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails; (bsc#1192849); (bso#14901).- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899);- CVE-2020-25717: samba: A user on the domain can become root on domain members; (bsc#1192284); (bso#14556). - CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID values; (bsc#1192505); (bso#14564). - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other servers; (bsc#1192246);(bso#14558). - CVE-2020-25719: samba: AD DC Username based races when no PAC is given;(bsc#1192247);(bso#14561). - CVE-2020-25722: samba: AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues);(bsc#1192283); (bso#14564). - CVE-2021-3738: samba: crash in dsdb stack;(bsc#1192215); (bso#14468). - CVE-2021-23192: samba: dcerpc requests don't check all fragments against the first auth_state;(bsc#1192214);(bso#14875).- CVE-2016-2124: don't fallback to non spnego authentication if we require kerberos; (bsc#1014440); (bso#12444).- Update to 4.13.13 * rodc_rwdc test flaps;(bso#14868). * Backport bronze bit fixes, tests, and selftest improvements; (bso#14881). * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal;(bso#14642). * Python ldb.msg_diff() memory handling failure;(bso#14836). * "in" operator on ldb.Message is case sensitive;(bso#14845). * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871). * Allow special chars like "@" in samAccountName when generating the salt;(bso#14874). * Fix transit path validation;(bso#12998). * Prepare to operate with MIT krb5 >= 1.20;(bso#14870). * rpcclient NetFileEnum and net rpc file both cause lock order violation: brlock.tdb, share_entries.tdb;(bso#14645). * Python ldb.msg_diff() memory handling failure;(bso#14836). * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848). - Update to 4.13.12 * Address a signifcant performance regression in database access in the AD DC since Samba 4.12;(bso#14806). * Fix performance regression in lsa_LookupSids3/LookupNames4 since Samba 4.9 by using an explicit database handle cache; (bso#14807). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Address flapping samba_tool_drs_showrepl test;(bso#14818). * Address flapping dsdb_schema_attributes test;(bso#14819). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Fix CTDB flag/status update race conditions(bso#14784). - Update to 4.13.11 * smbd: panic on force-close share during offload write; (bso#14769). * Fix returned attributes on fake quota file handle and avoid hitting the VFS;(bso#14731). * smbd: "deadtime" parameter doesn't work anymore;(bso#14783). * net conf list crashes when run as normal user;(bso#14787). * Work around special SMB2 READ response behavior of NetApp Ontap 7.3.7;(bso#14607). * Start the SMB encryption as soon as possible;(bso#14793). * Winbind should not start if the socket path for the privileged pipe is too long;(bso#14792).- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfigs390zl37 1652865052  !"#$4.15.7+git.376.dd43aca9ab2-150300.3.32.14.15.7+git.376.dd43aca9ab2-150300.3.32.1samba.solibdcerpc-server.so.0libdcerpc-server.so.0.0.1bind9dlz_bind9_10.sodlz_bind9_11.sodlz_bind9_12.sodlz_bind9_14.sodlz_bind9_16.sogenseckrb5.solibdb-glue-samba4.solibdlz-bind9-for-torture-samba4.solibdsdb-garbage-collect-tombstones-samba4.solibdsdb-module-samba4.solibpac-samba4.solibprocess-model-samba4.solibscavenge-dns-records-samba4.solibservice-samba4.soprocess_modelprefork.sostandard.soservicecldap.sodcerpc.sodns.sodns_update.sodrepl.sokcc.sokdc.soldap.sonbtd.sontp_signd.sos3fs.sowinbindd.sowrepl.so/usr/lib64/krb5/plugins/kdb//usr/lib64//usr/lib64/samba//usr/lib64/samba/bind9//usr/lib64/samba/gensec//usr/lib64/samba/process_model//usr/lib64/samba/service/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24194/SUSE_SLE-15-SP3_Update/c0ea892337fc5048773e39b4fa88f344-samba.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linux  ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8e48299efa4e11b4aa4f17335847694808503f1f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=45bce2292d4a6c8a71e038d27ace39c987364b03, strippeddirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=13161a64893a79417132bd13f8b351855f38bfff, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8e36807d26ee4c736010ccee2a2ece187c31a087, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=70b61a15388a8a6451afd151af7b3269c1a66e60, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=06fff458ed9283d27ff5d930bf9962cb5a778c7b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=feabc43ecef15f2d40c3b9c95f0f39ad1f7ae9fc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ebf3132949786a8622571bdfb1018d885b78578, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0e65f1079b66d8a4f7960c730e42440caf6cd407, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce9e7e0ee61db267b3cf3eb168f2a9698846103d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc46a34e4136ab8256caf295a472f45948d4a3ef, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b056b7663e45913baa6178d3d080de35826729e9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4bc545576ecbb9e5aa628c73c0ef558f2bd7c403, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fdd735a6ecbfc4d472c4752f17c956a5565b8070, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1cebc5e98a048b5ddf3d76f6e040fa881bdccecb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5fde984a9e12d23e7b411a5f61512d03159a5f3c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dc77e8e285d20babd92392ec34f0d41f6cc14807, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1952b6ab04473dd883975f2c943699da82a71061, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=155bae13b5005119d4382e23e8b6aac8cb57a812, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=905e678e3922f5da88a2441fe4444264ac20304e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f14f5e7b7afa786f56444cb494ad42b3d378a90d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7c713d6856a698e08fb4b09c8ebdfa5c97bede50, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=72380a947b3ef4cbaa7a9c6026d1e252bf27a04d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b8adac00e85df74df9f3f147b5fc32aa875594ba, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=273c1765b7117017487850bd7eb45d76bf938066, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=731190074519f6f109a3af79ac156dbf3082564d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=60d6db8701ed7f92ffb1e4371c2684727f84439a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6423c1e1560f0ae632e6c43670b640a89653f9e8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=25d409519dd2d0d2483f2e40b1c5cf989798165a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=de8776eb11794cdbea8683771d3741c13f5e5e63, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ffeea1bfbe090cb6790f767ed5c132ba953b3d7, stripped*9Y-Nu&HzPw*e""""" 0$)'!'$!8"2)A;1'0R?R RRRPRJRyRRR}R%RRRRRqRRNRRFRLRRRxRpR$RR|RR R~RMRR>RKRER!RRRIRORPPR=RR R?R9R3R5RwRyRRR{R'R}RARRR#R+R^RXRRLRRmRR/RRRRRDRCRR)RiRjRkRhRfR RR`RRbRdRVRPR-RRRRReR8R(RRzR4R_RR R.RRR2RRRRR]RlR~RcRaR@RRxRRR RWR&RR,R|R*R>R"RRRvRKRRRORPPR{R R;RRRsRR}R5RRRRRARRVRPRRR@R4RRR R|RzR~RRR:RRrRORPPRXRRRRkRfRhRR`R}RPRRRR)R_R(ReRWRRRR|RRRORP PRRRyRRR}RmR=RRXRRRRRRTRQRURRRPRfRReRRRxRR~RR]i",&9R| pT.spF3TldګGN|߱U#`3y@4ODt֝' aDIwdg)pg@@yXL~&rή8N0ªBj`i \RtR̪iq|FaǤqAF$@%0-RQjWО*m+| vz%-Ti9YkynشdݻHDLn~rҟXE0)wG'BsFJ6@̮XԠFpOq-q@GB\z׺j}L+:v 9}qy\XE9t@[%u6ʼ،Gl൤ |P=끀p2v")ݴԖCB7$V5G 6\MnZ-i<42qYz4돗:.׸UDZR!|Yn-$.~H҅J4q#N1I4Ky#*if/hjd$0nn@-@Gn* $4D@ V=hpih(+$_`jϡLQg5KC7iyvK}d2(~h >m?DHk OcPϰv `vj|Pd=CguOth?qO R`uT,yt?-cS`"ClE"ߙl+{NΈ}.>]m`MNIq)ߪRrX:'B)7@07G'@WJV%NOPʶlca3n;6ѤR* {_79B b5./[>;o+9)!1UWME##F٘v UO{,O--l%  tc\rr.`VT ڑoI'"[+dQK)=!Cy꤯ ~`sW|rJPؠLdڛvٳ<Nvx=^JEz 020z">(kT:jyr+q|1?ӝ|PWz&B3k d?~TF<$ ed#U nlÌ,"ϳ7.&&N4HqXYl- L;ZلʊWA!D ^O_ȴl>lpiUW FFѬdX.X3/Y}nIPip|4W1)_zd~^cKo>~xVdYHüQX)WSR#Ư3/j-ƦSK'%Y6ٵyfCB6 (X2, J]v6kўM2\Qeu~gaYOCh=_i.^A龣haTKyI!'M TE7!Y֠cnVLsP_`EĞN\1!?ץ7ˤ tL,iw2gsDF 0@4br i9!Z~bmF ! r1ͻy2%rViPcd"Oz?(c>[;<1rPLKDȗ[-mv*lʤNԊrLoxhgRaդ,qۖcC+{^78\|R=p>"zf𜲩F_kH:6@c^o IC):JnE@K@W1ӌ7rod|tc9EtU@ loI$:7>``0aJ7n t3%bMMɰV ;]Ťv^LYcB} m0DP\10s#6 <:]aN 9XȽY˴>+óEŖvÊ.9'bP6lI3wl:=G\U:qտs i X(-.cdm)>oS}uĶg!ĘWЄOm!cvJByQHOBjR2LdY⬷\YoXLgBtKpJ M}mun ?[烆wCsZ#LUas-ܙg/.rHn4I֔4YJN}WEwnLnR)aH SX wòP LѪi{ߔ.Irep&f(#T&9?17za 46+"[wВEQ43r.Vv5|)Hڨ+z_Ul}@S@o9Qg|Sf)W"PcuzCed{أDҟ(FƤ)f#˙2ǟ?#4?UZp{.@38CB W!k1ķ'Inb-I :'z/ _^L_v\/ޕK u_q@60B̯2 $|^{6 ,v5Q8d.";&*]lQޕlKZ<,O}hױ* #% ͧfNd3jG9 gO A\"عw_/cOqJ ]ZI7.XH፰.@C(XZjNv ɻ"hwNErn扌dUAzt&PH_=+L>1 (,Y'c*]݊u OւP3Q!#,*YiHZo5X{fr⎊n%(v }F]@=' y(,pn>~MT0sWKb0d4Ե2fʦi)]^M,b)Ug(vWSKh& (am JHՒT@Nh© ǝT~""ţwG# Y2 |G/6і!c{[I1:qj EZQxP s(߇hb픟F5 5;:tz}d | @u"6>i`j Ht'0b wKW㵕&o]M2}I7Mkc~/6&IX pi`TԾDoPjR謵x |@*$:=h8&4ȾJ}Sq#>:Y.ƔG LUs {8^$O-,N$MX+XDTݠWS5D֖yd"!1ܐx&0ZreIXha(s?#1a`U*'xէI*KSm6)/on)BrWFRܟc`=Ti FX6v8Ij)Rq.8SjANkc4 &n#Sc}yATwp:O!:)tpƿD2:C?lH~aUI  =.B[R zdؖDKWK 1<=-=F[i 7wc[Q2|790BF|{/hEִ927-u.2瞸V Iw<+opmKv{k؇{/9Og*,12J<jJHsU#l+f /[jo6(Յ&GM#!{C`j~(hc5g5{"ͱx\0\LGs=0#*v >;* K_d. RLJuࢷxd&{wM."X* q*uU{X4k,d6Z12'aB!V{îm'kmN[e3h㉪kW[~[1?lh^FU)H?GNtp6sfCEaӅ93չZb^(2>3nV Z+?\J􁱱I/':: Jg`8@Mؗ$FKIA=W&z<nXًS= qҨhC  3)Q= 38F7rzUYO+j0]̱O7U="p?g]o|\~նiS[tÙj$ qoS@:TJkmnT4+i5f9.SJ1'?9@U@%֫YK %$!PH?!d"su#gb2>dtA7y Wx7DW?i;m^x׺RD#B:f>PcOªEuH=R &q|_" [U$Қ-%oشװ='QW7QhyNl"~kFsl+[jDs9) 74Lg'f\`kN$".7]Ws[\6!ۃu ©>4g?.a& [ Q-ˢ}^Y lޭ$٧V{Kp0i d@3 X\?X3G'#B2RU/{;:AD1y=RY叺VxYbS5$ j\c=rQ\M:[/REҕt|KZ QCx5Ov!I_WT<0]eG?aR ?LxigjnDi)m m(VyC,Njq4o5k]7'J|ԘXal&ф5zc S@ xP:2#e;23骈E#4 CX.Fթ##כU^n .5rذ͠wrϭ>s5:u!* q8u/)La0S p)ka YV Ј4^'9)SS ={137Ѧֆ}2[˗6b0Pa7WaBMȀΕccA[!oe cF7=kťsspAסoΞ~sgzWM+#& mҲ$+%2SR -¹s6e@'!iQaޡEN!eFͯ0hvHHJI`5n]mU*3sCB{w#RTrX*HDF=@7AzCQ2U醱Mzoq.gW3c x32c[ NI^}-zPWd Q֊]mXMg櫏{OszCěj$Q)&vu w<.}i|G0^DՓ>cHc!nC3D@-7"ƞ;1=a\z73lQ@:6^|-73!N7R;-\LH .Ɉ}vhew1XD#z1.Gי|۲Ë?l|E'^s0 g̪ҵX \M4`0f֏[ 0_̘L|, )8({1%y #q,ӠkǾM}ʝ@Egp@c) hm!l& ^.ģi < +QXnՒ݂ŘlĴqAf77 V{}%Τ165Jpc: [[mGZ<9 oES\)d-sssʨA{`mJLI;lA@F:h>lkݰDx=(lExIC M;EJn wT S4¢,ʞ~}ܑeεDeaQF(mFiX %Xx)П/O;_\NAq RP8R3mԊ.#-$Qɞ01L>Ʉ6YN~~Ax ZL]ÖK S $=wTOOE "@O]/f }0 UuCm㼳f鱞U*j-SGB9j{0t'*A_\wj.{(LGTз\JlWl,ХIM2Ru$#ڱǕy*GBfVGeYEky6/ aD05&AB7o3V'+xC[_[\[Xg0>ֺjm0bPHk{vۚVcFQjw-L8cHE}y^PTU]A(k.{L ;a՛n鰠E_sEmf[e cTSgGsQnk>@OG/B%F[5'󣷃a1DΥSז缤W͡~ 꺲Q؝C=*D߅(`¾hIlBx߉N8SFD[㨛$ _WDÌtAgiW~Iܵ*#yXN0q~c!lv k(QK VE Ӎȴ'ਊڸ1"9 %tkkYRÔzp  /^ZwzRU#|0 >g,l㮇SIL76)}Y2P=SN@&'<ޛ4j7<'RDfJt;Ӭ7`oYA{0SCZbۀ33ZkERWe9 b]ߘD;wh)-r؋ל ZV.Fs/PcvH"ƯdNK-m#Vsߗ)8.48(W }}㚳C{e~M%\ QY19 xBnWo.43^.hcR-Om9jcRRm\.|ɄOAPG Fqn/좭?}e^o=[nIQ4jklkB}?jJwnTtj,ܰ~An.L0K!ְ8hBͺ.k_tu u>^P v+&9oP c4 J0>I}%]In^&l}kA_;/z5fHGm y/\[ZT.HN08ȳd\?=+0KCH)|Z<چGB4zw)X`_ `aPmV!'0SDZ*S'n[M0?֗B g`(|^w^hA@{~G⟾4PHgtv0e}  iʿdF:2!Wڻ(%c{d"8A[ᅗ>HYÁ 3&bvɷKSБ\Z'bUfEڌP;R(Iƨ: fp(gGb%|gZQ9H67>eBǏ.xAH|NDʅ8ca1H[q-*Ĩꩺެo>qH+q4 >^D;nᲥv$I@@г I;VMA/SԸsT;Ѵf3`R9U`Ty*%))p>YԼrgs32/~`֏UqwOCK z;^`Ԙ󊳬NE ;i0>'qwt*Ԍ̿M]bIkǪݯ h:>v(K1V %-4caqKxtR_fhuBŁ6)p0"Խ(ݘMu򬋙^])~ o']zJ5S̏B1zf \rrV.8k~L{pv}DGRN7I҆@y`+4;^1Us9! Ɋ7/h{1TSt.K dEݖq TXCWQ(E3GlD]Qu&m EAůP !D(5ɽ̝PHDCp9oHl-q:2R5YبO+㛪 bzy-NfLE[fM=Mrˑc=3;{f$&} 7ǣ*5vi/?TqÛ?ʗ2Wrz+' _^}= 0-`;%eJT-կ{|+I6plh_>\;w^i5AQJtn$wi!:wdWC?hKO-jCstcH&xBXf(yGBӌ-zd;$"0lgG gQ/GS#k1'9 =rժ0FުuοZ)~ ʴ:JnԅEᢷS2>f_4 P)dŏ =(2~wF.¼fqy49P|{=F<{8n@f6*k})Un9$3Qu5期rR=^hM+3hGE:V,/9N˒cYi+tlGP(wLK)|6()Ziv;yy4;Bi"coB7[|< V'5}ؿ:fV~ @;P6Й Q|oez|=ޮ+;E%ti Zz@GO"=z܆N4bHBWG eq-_gpTQ4?4jt1ޅ~/% u`߆˝%9aTo}y!tomMSb'ȹs"F&gcX^b[lD<:J %/,|DŽBH,Hi5GvK)GRB3kq\ xۣLk'`K9 o@_# 4un+YL; 0`}En_Y[+ť$&3:m$F) #8Tn//$5{~ӵTA Cy/,@B؛ںΗgډ[=J.ͅ`pKV:׉,i~ۅq>/67 lq&p>f*}"D:3O3,]ɛP5T$qξtԈ󥻎k  ;ӦoB>O.RVy <¤(2ŤiŧTرSD[90@; kdDO_`m q/#o86 %, -Ao SG<-~Ι I_8,2ɕwGb~bgjﲻL +o^i;'1u[wLi괨Z~H1 ڬ-ahMhXEoF9 ݣ"DGjȽ/X`żj+A,K-4 %E~}rpKslpU8"5tBpFy9)oxAM/ d2,II֔R'Yږ>=E=8N1-X;-S툰#v.s? ǵ}+lH)sbQ19TW|L&kѾ狌-"R+:Q" WtQށ .妴 6:h,>}XͥKj9+ 4;/i]б ɼ Lnδl Ks^ :x i?!Y'F qGA/4&B 6mi跽,ۏx]S3~LM~^v҅x]2rWFH$I3@KD4tG'x>%Cg9jWFKmCbP'u ATRlr2[ !n>ٸwn)lh䱳1afXaE]1:`%@MY+*2-p5[RT'ivJH``>XiEȪ bKФe w8~(P¶켏,brT_ qP}[ѷ%*LG,Yh#Q09dBpǾD#>,ٓc2c3}1̰s,I/ /&JsRm~ Td2k )V~ dnf% _BuḰ6)aؠxA-H'%4{e }'$WAYNY#H#DA>{ { xЮ:L= 7x0| [^pi^`'!L[5q6^ LaghAPcS) :~ʤ:{s~ A6iHEWKW-B~~C=ÒWP)09햵9l=I(Uh)(!Vq8}sB R3&]! =-Yr\ީMTO،˞txW xYqk>s[$C.2K?He= +NE9b݉'MG_Mfr'+xi×?d$_Siܕpu ւf- 1/D$Fwf{(߼h~񸐍Br/Dh=`gsD7d#Q`5]mZ x;Os" A@#}K9cX ٩Zُ7keDx#щk qpxIv, S^uhH|%99ޡ-#a LN$~FI"aBLA 1mȺn(%cJd}uIBYEo)xMirE0 )]Т\2= *!9?}hn;;GQ59}xe@%̅/B_~#1Eqڞe.oJ$k$:HυSrm7CUrRY;X㒆$Lgpff8jy45o5*BHpL+ZSreZ9ZyP鍢l2^{ LH@ _mZipk43jC/ᨄb֔ i%Z@7`;4JgcK4 |kz󷽮 ii՜#3d/*݁ϖYHOqh5zt.qJ7 k7'[&Oy)GZ>V9.@G_mMc97F,ѦnH4a_ҤNmGH47`%r+ySgwd4lk:h6KzK8YS]ъ1b.[ͼHhӑ=^|*HBW $2"2s}"XG}1w< HbG̀ `Sb}ma?Eޯ/R=Hs~VϜ)`QY,_A(*Xi_G8?vdDqHpAtp W*85Wv2`YPfya>FGq9CyCLwm~ᶴp4LwK}0½>SRIo[_EyͥTz'w-ށew::g&kr>AYνJU^ݢ,tUi)Χdd[w >h iR _&g<ߌgsx(T 5ej9(O zuҝ`9f *QH-r I=nDL'*gLy2`i4Z̍Y9 Bzu7 d~҇[y]` W[r">&0+C1"anHLͺC ݹ } CqW, SG|LG3k* ]u73'v3o{&9\=| ps9[ܘI% 5h6cIg8P43ipA4UCaұ[JVÊC *ck~mфn|LfO-˚ ;!+2i8m) "jD]~h zbDl]G;̉C`}\36r1v"8-r7K=2o$h=!B[[+k8?^lU.WP_<'Ytuo{>7$#rû$@cj~JpOzDC@?ߒwpmA[V(VktS{JX}cKS`ǣY&WĽ"]yn.&N|,& A "pT dʱ6nK;kyN1orVMUmEfpܞ.,['lj%ǙLPDq+Y滸aDyp;ʿ0,9'W"nEڳI[N]`PmY T@ ·ݪ@q[kK$҃ hW:#H:\0\ձr=6ƾenOOf57&v||L0iًf|w0K=theK AЦ6FjxuC3;y6+17v]ABPErb•wSZ9,?s:]x}6j9T#q(;ֆU= }%HoKS}Oc-g<9\kyvW܎BQ0˗RQ 0*=t1=иi&KgEvVe!Ny<4NO,'4]&x;*j >5Y$ qis_عFN? oxqܺXG3kZIjq,3!<1j>q4Ts7qW&+ 84'9H8^Fatb  mH3r0F3=èZ,Q*$Vt`awg q-jO 4^pUAƃ{] UUcϔXMQȵ~6ࡷ(d\(s<+CG`AE8X.t m!&Kr )Y[;7y}˲ rGA(jp'* |q:l%J]6NM-;]fՕsrM'PB+G(Gl@oۺJKC5ͻRg2H{)wK33*U2AxHn81U31â@Oڲ+0E?XmC ;DxMVV0ff"+dfQ0 s6Xq$"P :i^^ʒ߫/+tQF{LJA]]Hį"lˣ46; N8ā#B GA̽d+++ٖ 9Rrۛ5.Ep%<XvlI5i0GX\vfӂ A%MjR:=g>@!dz $kϳzn29f &5Bp<,W>ݳ:pT'a ɽ~Cxh7ѳTo>8f*Ķ8QK(zpZ_eQ޳~;Bl|y鯩/҃=V%ź-7 J d 䤷OЍmvi&Xo&ZA7{Teztu2Da`*{g"#?AM8'W㳑U Z^Qn$mO0Р!ZRO;)2ڮ|*`%[ MS `؆X\ Cfƶ㯫K4e_w4gz kY=F2.f]?b~Sx NhlhlʞH  ,A:^Y ((@ʥ.x Z2M{Wx=9 "Aqٓr25[7uW^yjƤ*%; kЃSaWQ#LbS)1N 5`[ 1Ybl"O7,Psǜ%;wľZ0NqT=n$[%3MU1Zpڄ6 Nps0$9,` i R?wi!u#I*ƪ¨ĀbQ ԮF$NNbx"ݮA+%y dlo@nbUNat1E9 OZ ȅ[6 K_^;|JvP̚>`HVSVX (.aT|.HW3|;nN?JlfJm ?nJDaSO@b(ӛH\>A~KEQuٔC]_UGeXO@b@/$"ŚkAޠy6 /E}xs ̷X;IJD `4)я( 2=oҭG !x#.d+d> s}9g|t+8&yfFkU(~?74fo@ GiF+B%WiEPs֌({1UiȜPլ\MǢ8xW v4lyflweoSrSvÅr!:cMXU{P,}O]\G&OP*KO  C8Iх4aZVrj V}K:/67K-o^6nݷ8"(rq2XVhEk 8^.y%}Ym":L44nZގCחR$:9i˙?/{"E@ڵ2SX ג֑ضC"Ku=D_&lJZ@5Ll$ _/-sO+u$DQm_P^'cϱt4dB(J̭/$ lҚF+&cRRdX1 %_l WhO"ڇxIZ*e D1O{r׉ /F9p;uJ!9!3I0~ Nlr @%Z%ӝ9䊪p @`G= "¨1RU>QCH bHRG5fh12 *ql,>)@^P_r=i$_PyrS.>rvMFMLU{M/1Yߞ  &$f[[ F[k>qP+ֺ5VLUǎd0c5ly51L=b6-XKW;ٚu``_VWF|TmrM/)Uv:;r_6 AUK>h\Pc?ZI0%'a"/MHc:v Oh•jSQH!]Rc ]M'>KcrF7N2 f?~%.ā1\ y,(Mz;K6zk}>)k~!klW^FĨykxGʄ;vHi~{D TpAuD4n1c y3b7j>=d,h#]=9VF &Մ025B$"yBX@XI`+CO^=z6Umtz7XMQ4{r$IRz.'"˛!|=};KL26Fw=to(x u/Uŝ<rt%:ExTIMԴE<#PN^{-ԪcgZ;6'VS͇Yvt*_\2B/j̙D]!I)smC )f_8f3t5 xu~F8Gb?Kb'Kϴsz*]=Qѥ+."f,5{W\zzy\Ͳ^^ \5L{ H':n}+=, AB䲔|  \J}b # DlX,˪k8ac *`j&ZHLCj2m?ؔ3{j3[:bxxT+,& LU''RheUySw]bp}eV1dTw%2,أ;ԃ9bũ J*˅/Il[Ny n#5d3s_IeEp*G_>zw7KlIƹmq$ˊhh`chM 0}S%"b5?]Ki4jzSD3"uE2L}bg\ԢtbݛGheq>>˞TKA[Їg'6fZV)p|j+8(yLݲ"itP$P(=l4V~Pn &Dc{)8\GPi0zX VAC&*NjHDgd;Ť!2B`fr&|ir҈b7Q.MZIW# `qJ[} )L)i9&xT(\~bɠ:P"9:qwbطҶX+C-]j@GR iհM^`UG/<$ܫMcT؜R&UǔiK&֬Sф+bl3)!&`Jg.L)EF6AS.<6N9ˆeX2Е N& soo0[%Eq6Rhf26_c%dP>WM-ZV|&vE3ݏ2^v'兴іM0 Z5EEO؛']• WxT:Xۑ"&Z20.Rz6 wO +Kcu")o`˜fسOW&Nst$hgAK|da$e5L-! -W>a_p{wp0ˉMϭ(ocg9Ais,h*H9\y=un!z2(,ca#kV#Gg/h.yK=Ο+ǎ@>D{]M]gӵK*k-_=*<ͽ}F _lҤ(o?(庴r{P,r@|=jZo PxA`UL+(;BD^8ēʐ?HQ΁emCݰe:mGq9ռҿCU6'x]s~C[u`xuXDGw ª?HgXILWvcc HћkA|B3#¥z j;i5OeoQ$ʘ4#;wg;[Ҥ`uICoXݞ0ywTZfʣo]5V{byA`9gSfgY qRfS7wby[)7?Z"1ݢ.ْ&]i<ބF>0HRlW/]p˜ךּ!ۅd\Rso|W 뒔t$V+q{TmjTLa۔IҢˬ%": d]IjL=s/OOR$:K2ףo ANzepc%\ij#3@k> PE5E8e |RM5^Q,/q^P ,:;&=5t AAeQ_Ro@hKTnZD}ܻp& SZC8/{kLKQ D~RuFw{oQ/2`[5h!qOH_ P'WU6._ÊD aN:#k m -SOݨB 6*ˀeA_e + (zܿ􇚚(!}Zy:UgveCjKLZ}%SNdGd.MU8kq\hhbդKpL2 (l1 RF,taɜBhka# /N b1wNim>n(6@Fʻ'߰.gњʗsXկzAq?GpDu1v`0HgTv6>lg').2Z+*#:_K7d>^3WR׳ 34G` e"/@~79wdӼ#ve|ʦE5CU/PnjM~HGV)DJ?+O,7d)$6NN"A۞p$[|YD2IuHL@0~586hl#޸yƀrrgmLwƝWSBܡ ^$bl}E8k!GȲ|RCth)g 7T%Lroo@tjsdjbWl+>lJ0 7=A$o͕o|Hޗf3NW ;񁶒IDJj)S6$}\ύG/k8xC %NiYoJ^rԘ[H1E)Mhf- {>^.l<ŞծB (˄_1C8i+VW&dKRuMۋyxAjС `[ϹiȷN\-su&^{ UXU/ZZ-6>z/wo|M(J'_/#bw/isr #܏[C"^7Qiäꇳ# ųp}x~J,2˙H>nwoWe; ˺6~c͸G1Y4Gɩo ?MrHYMaY,%J=)MgQht jc(*,;&L =b& 7tj.Y=ox21ܔCVqP?[9'SdN5G["ab)޺G1S kgӄ@ ҁ3rᤆ9;9BYQ;2wc/)<&dn^>+Ude2饓`dž5=7,ZoYwB۟ p &_ff'XIi= 0`̃ۗ|5\$wpFw2:|K=cPDovj!p.KmȎ >EF+{cXJ{<-!da:%❙V-LuD k"fD dޚQDF:\rH.[4-ȇ-wD+L7 2ĭD=1?u%qK(=RY@dP ~kʃ#X9)0;l[bCx:::L054WsJl' &bO=Aߘb749P'W|H^a%9Pb%B:g3`剎y A+wM~iC`) WCXr#dMP [#OWN(x ,H[`&х]&\ⵥ&5qdAQ\^Re$T+VVevMgv {/od X5 ?s8`fma_Wx}Msvy}k&+DTgpwR9dk5h!-0bu3@-s~5PYU|,Π(Y&|t]YE对[<8۫2g".1 &J)U|sB-`.S9 Dsc9<]Hh,g:vv{(hbB=©.H"+p܍,x_ʹүG' E+$?i!M聯oVrbC8@?35e:r9HNEsu"nQ*Ӥe2N0qۖZ<C]?I7E(F5Bbѵ]!G5높$c(dAnXJM\bDkmr`'~";羚EdKRQeSmqnt& +`%d6c 7tsVhvۏ\A%%2}Dc2[p>%.ZM>S62 vT]QA{0s<}`-a՝ \W aь S2{]5#40Cfűlڎ`ɱ ŷMEMl fER[xgwbԬ$?4}q>s9#2*8nnMүa] ?oh8*\/۽PGS.O2EmaK^u&~\YZ%o$?PE27EG'lUpI.u@2xu CAAÖ ]8!XЖ5 toL$zo&03}0;oVS=<@Js d(I܉}gaF,ZFsA?9:DQQ`B3#[0 |&W6TZ`&g 1sW`;8ЯZ;tq]/[&BT]sy)Ĩ=Jm̤֬u2QO98Ab_zv%}LF4*c'gba]PW~_gIłY84t98K#T)X7gTXP@MFlqȍ92^=9Σ 'em 4_bUos+]9t}PYr#Gh2o쫜w-‡m?63_GCjLO1Z~/vumt~{K-,{G͗[h]{Ɓ,/D)Z_R-/lSX^B:6ytx`C׷T5v0=66 5;Mmn򑨤Mc?m߷kr+oMQF0`Hl}Œj!Dg ɷ,'g]b̖!G9 & | K-6a$ <-4&:%1cZr)S|!aO N-hÆ3ЉS>p҉G&' {5MB"k+1J)"-$A ?LRVo$Җ}^߷| %Dba'oiE}%; (Qun?\ܞę^}"S׽jYs(YoTBɛwpWm/QeeȈFUP/w5G2̡"]4Ytcx ŹxTO=KOTk{:0+^M:M'a!1G#B,`TydN"ɽQf=3)6'g+0Ze'D*#_XJx"J5BpLW'~s*:Yz F=_xotruiwW[/(^U:!RR^7x .?uJ܄I-,'Jc 0_7ưD&Dl B% Y>Ϲ)/#з:R OAq9Fq7iCܾ(ԟAPATgNй1?T la(lAF0.mQo6檱.86 _b4|- 1S 1̗կy n" 2lз>Ph?!zJwAa 𻶆zdAcvfld9nD[A_+xim t0^2UW4Hx}$ރq0F҆0U9W`wpiK w|`I؊@o4-j!  (x73 =?}zu5p;3ۙmN2ٖ/MfIC%4,XӺ_ FL-fS ؟ez_qŒ In}33V{X0̥OJ69|xGrnXs݂A\p@ v"HPwLo}AʦA#m) qۨA=U#:%7emq0GDub@ ojU%rB~F6}$ j%grZ(f}I$K_:8pcgMs}{.~r&PA"-ߐ0rpd0Rt:o"P W%jUe8wඣ2uH>ɮ9pW%˄{Q-6H>y׍%T}ݜ;3YIc7=cyYVe⋃G2gKt'@gnX1٠5%6^2(+nx^{KKm[J{GJ>Bz{jEqʖCͻxD9}Y{2dEGs 9˿{-YfVe>`zc!ӽȔ*zd|)6[sxk2+yOi-A0(=/MIE(*nf d hVW^S\ {MJJ'7s(BxN^.ɋETm7|le,"x^޾eL i]?%#߽?$G}w3Mc(L:`^@#koPIw?n R n;7,|1s;kiQ*^_.f (|^.E(a&]BDA ]VA{ވhaCx~\)$ UP Z~ 00g'N!bd?݉h,=wMA p1ݔ\4Cu.<Ć߹a=kSȦ^+];AH LR=ϬE8 WV ƥEm9FNO5л?PVFY}tPv.R[)3ID M Bǯ>f%-Bg.D [rӈfz*Vـl$ lp~ k Ud|JBl8΀=ZT8OT$vKhA&!x:+ /o‚dN7=ލx~VZ#'H_ԳsBڸ2yKf`oǵ m?3[<7*,qhoa!4[rrt@$n%Bw[4,3Sz £}R=heve"C-U\+gE-Яqa$P9w#g+_oV ]NJ\ G`u*.~ )(0D9 >4C9vx(8ҼRjhGقVT-7hcYDdm%SC>Ӣ]1;XJҕW즱$-`#Y)jSx?x=x2}J֔x7y.N\E'-\ۼ)hM W R5Z T6P=_ٸofu6ʄR}-<,4kܥK@= B4 lrLgٙۮvyÖ$ӗ(z6v?s}Ozv%Uxb3[4"Mk0 7𔜀%lHB#a-% ЧYŻqz]2?,d܍9m~⌳lKjNyqB%w OszӔӥ1z&Eᅐdbpd=ec C]7*#u16TM)`ZtїLG)b&,텍C('X5[[QJҧ:EU[=;J'dZl(9vPiwf>*SF⢶Q=rψiGAlFpGRXx;5ڱN$fr+$>!I33W]H*%pٚh3d&~P~!;P=Nw#v<%qN`stdTXD<||:fa6>MFW +bTR) N0"XXsPF㝽t=ޟ"5Mӂ*+\Ըص_ISj:1{3}9? /]EˮS!s@Cο@1{ ,HqӗtnREqϲ 4a!L=o xI@on$EJ9w~#y\eA,YgQ>dJ_}Y}0<3wG6tZKc`LѪן2!02=-u0#7 )WUvL߻N=2Kjj UvFm %؉\H>*]98TM7vQ΢2'7{f;- *lޙOb "HF.1K#sHzGFk_j~e;b8t;UIJrͨx{ұ˰E'Jm4 S!Qw3IPnjbgr+wQ@l8|:ـeż_ʆTE=<@lhC~2 w3x4Wҏ ?̋z)0d V y: gR$S K7X1Q06Ѻo?w}vtbHu Z@(7מuSjdLB\IL>WKd\=)DMu.sQBJ|xP( \o&;1MT|.`z[HDhtч#S4߲~S4_( q @GixCtJ!`IC30+LfOTCÛ Fn9ͺT (V6/K:rX//*TL`/Q =yU%8&G׷D>{ߧ m8.u"_ _BPq|0zg&q;9vL?~%ZD Ū]t^~q "D*`L„n3C+Y{%?.Le#v5*M>)BqAg:{^R94B!xTa\W 5d$ sl#PHl V\yz4t9'B"M }h}&p$x0@+HϾt-d"HOC o(' ތ+6(7'%͗ln;3# ?9wT@G;LEP5a1sNt6[cb ;\1x aE UĮZA(7K$ܘ8L^;O#:v1\^] 7{.$?D.ɢyznD;:7s"xYi m. vSyă D{lڃH.0~ Ø^Um'5Pqu tD"d֘-ڄU٣Rj2i)2S_7| Ξ]lEQҪ[6`10TӠEj%ޜZp0 VS}㪞6( WfbnK|˜$$ֳ8U]vt'SZɷ'K'$]ݪCGF /QW]/qaׁ)t=wF; wޥ@|y2}V)c2hD<$wp~ccwF, KhZwǭ.D}کR {i7)4[REЂj "da>*l'8/S#.Y`J|(K*}{z hZs:78'勵Ѝ/p|;' ɝoIФK_!yV췲o`2&~/ͺOՎsDޢ%0j'= NL]}ՓB^@7X!@0- ctܽbWyh;&^,fE.GҴ:5@[4̶ #$ rh&|nG*ZD_b[mݑM:Ku7-τ=י{͘ Iם3߫z6u/e&h`QJB&c84m4֯Pk6Dn9wРt™l?M]PkJɂ~v%xD<߲\P,DᖏJN g\ep%{P<"@UƣeGp,lA)d6Ü}&mH*c!0ܬ.pPk խHʻGO(ZX ;,=ЭUYה٢CcD3IK⌹~GRcd} >EHgNPJCw|uBKZ1Y9#1OTWO%r-Ykoلm &1t[,[ݶ~'+"%DҾ6O'fG:wq!jqϜ7Bst!J^v٨!_ڸ:g!pݒA?w.C =+&z`k8q؜D\`x9!#/˻)ȟVJsFF=e}ڮjJ1 ٣HMh.#8fdZ1޳|z1]/ڨidɹ1M,R],_-WP}-5BV \EsryҶW K T3 o!C'){ΏH"8Pױ_'DhPC0 tߞ^hh Tr\h c_l}nrybrmG`v#Aq)oU'A1C5*&Ia0pmP bU~Jş@wQ>h=I󞂅ӈl(G(xc[қ}(Wor.;ƽ8{c:U&8n#$1> يGAyW>w7♙HL[q\{=k8^7flSH؆޾*@~j1]?n\ V|@8G`GݔOq' 50(Y${U90L*-EvoOؕ-QEDFZdeƛEQh,֌,ro)"^lMJ{[VO(M/q$ak#4ntAfA4yKiy(NPhLJ}H&Tzk}z k#ao{ޗx[茤LKb$TDʜ)OٚV<K@ŖD IQ !3U _Bi?&MwE$TlAC+J؆QAg8/O*dwb=AдT%=L4ϐGR/\aHns ]n"Kl;i?@VTG3wڳީ=tHdHSaʻ)#DSVSxcTlfpSj8U,poisgzsVߏ?uF*U/AvV4H4)FnVGyن@$S4~4#ɬl^0z´1{ljtqP\S6- Ehu~Q/́e뿌b|S/PDg:k0'uFc81i"2bAPvY*ܢok:ʔfkvGH.M v1^b:]ѽ5wM[uxS /U_ۛ$م%ǡ,S!P) 3нdtc :H 3v\.6#D5=LVR'Uk0^-kӭnGVF$P(>kהּB3Zop d9#:x#l奞j`fE8+3Y_<$M=k8~ tlB o8 -^J6NC}+o%C#;dZC}-#Ot4e,esK򓈋 ˻u^q;<1~qo"ңmw 1+Gpb$hs^ȥ>HDdցSKpNh Ʈ`FEs:CN%M5Y*mT^Jl+{  p+x?^x=+ZfҜtWxJo`5%|4wR$YT2:,uFQ1$ "دx*ڋ&U ?JF?"Lxs~Uڹ?p̊,bG{!$!?o|ĿA UIjPyY$6lڃҺXN Koa/wIݍZwUYNX3L#Lg a 3(EGep ÁL!`ad! ߕ~bp# U5@ODzWĜU _f 4 a [vjL2FM<z8 2Ҵ'0ҨS: *\{jimP}<:aU@) Àgm; P) m^Dqbf\ ̎%\?Բ;bom pcҪŹQt{r 8 J2̀cȯqL mرe>܉( ҍ7oO24d"g}y adEJ9]((a 0BRx_:3gW^:EyhmuKf5!}u~M)]T(u6d(mi >8FT!DF'i_c{x"^\/J{DCzsǫ 6g ʁ8`wg\1xRJ_"U>/Z7v`;ub,u9ۡ+xH[?V J ZIUV4#3x3d.P'.Qo!Z0`B zLd! (EextڤgeRBQ׊$b@ȝ1,Bѷyݵpba3W,F 9PI8$]~A]8,g@ڟ cg{Q -#i;)3NF+MZ'71ޣB762 .Tl$BC6B~"s:1xg"Nk}vF`3X\FF0H-NBOZf:]c9Ő4.js>Wg*~vaB+4;:Y眱tf t[XG3ZHk{%/~;wVSB̬Ui|M+23Cj߿{ǂ 0Br7B6da~n|7H[H!N8D{LScBNCe +1\0cZNb+J&wҏ*b P%_7t3hyh*س2'\ ]下ve"bxS3g޴cׇ;3Ze0VNnOǝٖzdhq:l@_ 컺t:'O߈4A{G9*lKsu*UatW\ܮZGD:k^HȮAichQ 5*sLV~8CP7^-T1a^](YEuĄQJyq"OSGpu 5!:6p{)sDxf^oJnZ%Fv >P%NUsJX(4p:ϺFUd")i0ҷ0STF(q!J5Rs:z* \ۘu@E'Fmm.hPm6+Siҍ!فs* go3!g% Q`ќiarc[^pyvHpyZPlr٘_TsSQ4it?K5Q&B#ͶBZ_5'i,/Ӽvd19i#P@`|_{?Kէsܮ#x6"J]Jlhh`/zj8אƢ;%<*&`>*uJgTz ]T`+E,"XSހO羆.aC2?LZᙕop 'GC116b$}|i-%E uZ倀9Q ]K1kh9%NggMFTrIQq4աT\l=A5=Ffؚ22O~Clϳr0ZSY;Jg1+j[+UgLm'<Ӆ0b/X‹Dosꁾd-$&^bU52BRU YCy-g,ʨNGzz굗@߈}b m*ɤrؓ1[h5_ sS./Л*}͞2]O<̾o \i!_ qr`TAƜ_䙃&%->v-oIfT) 4l4,g `)e"Չ~s `el=,mDd,(j\Tq|9vAB+V̿/x U/2noh #j5{?nZGo=  ps̋5pJBQj_Kn|hX1rI[ncKe';G񂐵zFM@цHFVtE@9%VpZu$@}\ ej궥w6vx{8R f3K \0+-x!{g)\_mٛ.ҝdWw8dx>#bhaEn)h]\/=+.ŚZ0 5x,Ug4Ǐ"R~X@g疎Zhl9ã Fj`=y.a>g*yN0T<'F-g0~hr["}qQG*7p3ߩ0Um9Nf - G?E +ȇ ~m`Vҍ+5Q6 *hv3LE7:| i|EϢP?LVQP/ jS\ZqC?$;cȳ uI&X9"Lb.\KJo1+dFQLx}A@pHyܤ:Xܞ;3Ia,'{HEwa/:"3 A(^ݫA֣8Q4~tSa3$M"fY}fi+8)@I17KHCx{%J/ʍ5o]uQ f4dfӝ@^ڑd4Hnn<ࢥwy:nN0 =PM/pPvi0RMzL0lmkz^k'Fa .~apչT=\0lڹugawW|;WpF8B+ꄜQ³C{W J`l9Ԭy<Ѣ huŽ2=g!؋s>~-`eU,K4Z%Ezg[ !-}5 ōKX'Oj?ڈEcx cY^eǗꣷsU"2nh:Rܭ\$@z +dYGG #`a:w~P:iiv6=R'wU`f= MMv(2y^ Oο+Q.5*~c3QI=%`C-*oA{[-])RHa5X.VeZQaRZin:uք!P/A?Cޔ 9CѼvŪȑgsvec! 5RRww4(&Ãk4LTH[lP} p-2gN1`YnF =5G`;ۻ)687˵䄹2NKFlʷ'mHxؼd|(׾<9#8:~qP?Rw}էI}n-grŊƕ 'Gտ~}C`~/M^r7˼?'$_uTV2]ui-JԈ u+d+\{JJEu." D c;+>u%b=H ,:D63"5J덭|0&PW#vkzxn$'#?+beh_j&*$0[4Lܶ!:pao# 2@ x$1fH/h8Xs=&`qW"{W ?d&/XS\ɥ +|ދk*?vm'T֣ѽة9YmC%!@:$(;_[xtP{P:p ^EUn^g"*!RT(O>V{Ѧr<kNYeK599v܍TG篡cW}rUȫ[3!ռW5)J?$}raW.(dElG.եtrtWڪ_ L $@k`tP2qy&7 ]Y{ ԇ۳?}-_8j0yU-˗3(7GE] ]Tfc뚈׽ZKUE϶̱_;ǟ.qo:^*{.S{p& ]"6`yDQ8Eer [2553#[%a:WX5Q{>? 1a'l pQE[* h(K!9 "Zty?g<x}[guR+C#E#8wt`rmeD>/ɈaJ"tw]d=ߌ#ӎ\]|NhJ)BzE{ YRKsRQ;'0_˅pHb!S-pT{QQ,ux`0 c>+CT@h#2yW8"1ܶ GY`ix` 5 حhP$"y:ZAaȇҮCtKc)>o\lU Dž!5b\g /ǧfslo@m"as-25@]bs(5/j ־| wȖ =߼jX[;۸3P,+7~\^U+5[$3[˱60~2z搣(SWVýK\^X`0ƙPAIsGǍ)HOD\NU;2rA"w׼ NsH8c ͏}OI4J|YR-]l'1!?÷ %&Kc "31?]3LmqW<8s,M) ִoySZ$h˃o9,cxQ툙Kis)RP'M&poSv -ݹcFFŪQf,ߐI{X.xL.x6%3'bwH2:gO8 buo6Y⟽yYhfpqmxN Z䈠Gj-çn/GlvXsKc}ȇ'v'0*OYU'u*ol}Jm'(L"`oW'Bv=% UV_7uM|J 52T*%|/ =b z˩ p'u0՚4c㮍MĨr¦I^1RZ.?&5e2r%SY*ڙހO;moթ[aAϾVuϸ,ƳcZ2!Lf ,\IO/J;?"Jةf9w9-Coف۩"D5un߀"QmDZֻ[Pr {=g*rjb5:*>(mzЍmL1n* b 6Ԣ+^S]%¹1>,q. WtF'T)&]&1nVgz8k=ot9:M}܉6hyv"OE0Xl,($>S|a62 J z#lp»ɍ갦i2z@*eN 4:eotˇce^!rIu-Ho%ښ"Þ{;!vjNR~q?}*g~K { L[MTqBe6o'w ""!¶?J}5 iT]ɷ%SN"݆mAQ @>~}O\ic0Vr}@?_0on[i&3SոÛ.gب,/g> )/k\XͷV0"`f,X~v]^ۏxlE\ 0b\o:Tw؋i=1O9{[`ʿ#+arG8 1;zQo,2\j4,%-9p qRٴEb=.$%o_*X5IސcA?}\LY{=w[kV(e➓^ f/+F3ZNz!܋4>LM|w!dguđlM8Vީ;G\dž?pUqY;#0M.:!7p"viC:&naY92 i H~i-XFvUE.#n51=k%xq6/Re C,=UBIɜUD S ~gpxmTad}gTV(|>KoR&p+NOi)ޅ7'8qxAY/X+0H\7p+v .q;Y νxP\`N͌@a.kia3vzT[DBs,QGl|v@NuGq) UލC+A s | g{+e!h>2^T2GZ3`Y,6gR W|Oy\jz;lvSZ]YB",#Bfnn[TJjarڳp c:v*-9?^82h/\x6 +mS#Q{$ B6,Qt0I|><Ƣ*c4뎹oY(7[D/dv%569,ce]ȹ܊Gs::E ,m@i=a&؝&I/ޑj2;!"o] E>~^mޱ1@wjF(2ZKJSw2k 7F'x1O1:B~@qkn.ԲFZ[QpCa||xJkv";/$|p֬œ٣NUb!e= qAGoA++#<63{{>ԝH._lX6;I;x< i΋-<~ FȺ+kIںf`|6,c-gj}H];ѼpfC9NS9EFلDgXj >,2 h;!rY`@WٸN/ZA~Yq>hENT\/sn)K-CQ6?qo h̏݅;E_ÍOz&p'kԖ2+9t~PW>džѼ~&@彔+cC3\"CBw-m>+oPcwm mj{Q'޾>~Du7-lcͬL[*թXz)aD ?Tl-FPbȇ@A5uh7Vq@``՞GJ5fd%B# /1 O4&p2S-/Rb* gl+K_jު'I8qUv?9.a ﻼDΝ򔮱L*ԂIܶS$ fRo` 61B( *Z4/3 wvf0ԅ-2uLUT!UB+CN^֙훢8 ٗx߱'&0?>I şQd+&jR8AJ D9pPfb4(}{}VҳWmvY juc9zE@ ;=`qf?VxZOkjHt i J"Qӿ'Kˉ:qFUis$-BE-878>o N6!d# B)m&@Ec"EG6S!iiyD|1xe[ml%ybqk+yS Ε˾yp>qVpA] >}[D瓯YE@̏&B ^؝Y,SKK}բ.ׇʊP*PmS(u#toLA 8sD~!?+ˣ%^7nW\ޤx+HV-jpU|i\k10)[Is $zq 2~aWQ gG~;)ҍ;f34z #}b.)evw^E 6j~"xZi?r9LkwYˆk:aNrՔ=}wJI\&k]^!V}g Xyr͵+R_iz+LYٞqDPBfHdv8ߑ_FRz⒐Ƴ~,FP_=nW/hNa: eLb!Ш+w-G!\Tρ_ >]k7<;MHZCr|kܑy&#UBݿnۘ۬CƯvY"[Eq44 bda3w}od<*F?a+u0pμn(DŽ>`E}k9(4) 5}9d0+7xxjqI#s~zJaH~B.NqNQk~ ^yf,5t)ڀ`F^o?~.qyO L;ӛ j9nB6^͎c I+1'qpaؿwtrq7H걬_%-Kl<{E&Z,Z]MڵtXNg2ҕA<%3s+!Ȗ”^iia +%$/\zm?Vx 7aHt$!y/q@j$c~˼1ZgLaetL)("]TO97@b q,qiEbٜ> ݋ѮSն7d^Im(Cߝ@A*_s+9̙^CfN.y!(`\=q1b2-kW ~'Rz KU%-޴~+ñO0K%K!64$M/y""r*[mBO{C٨tVR5UF/1~ TKFx?S@fքŝ V΢w8gE >&@O{,$,<  6L{KY"ף.48Fɒe`\M1b) =jZk0h`|i,(GҞ4׆siXW)8 6pq' e Bϭl9ZYOjǐC϶Oe9E*:àXutCx1WU`E[Yl6:rnd bܤzBo09 Ϙx\ 7DXQMO҈N/ˁI{$k !%;݁CX,4'=&=JWj$giB'_ob:TY,] ~ߔl43zy~Ko5wtG=lfُ'ҥ%mj!.H&ʌ{c6zUk0%u'₉edq'.+z3\zvՄ+%Ds@6sWքKƚiZE?9PE`;l1VĦKÒf,hYJ'%զnBkjmUcJZ V=j֥ZdP6.yjECnv-E$c{8R Ɯ)Vˀlʒ)Ħ愦Dzk]4m$R7XMB<΢ˇB  ? ~ YC@=#`<x4[\A$r48KMAڛ7H"-RIkӕ"D**S>|© Y]"0v׏sH(u"R~b!m+mZos'sץk>)r8f5˷y{TxV,}CM)RU^=AwG_RyM\j ‰ I:nFXݿ) N(xaQSϖ oGcAkk6b7@FK.Oi"Y %qE/4XcW)-O+U#Jp)r@O5>:"?&Gq GFOK^ JONjH}t+p{x&\s2Mڧmq")9veV/m_3SȢuYr_22S9.$ǹ3F6>Z=6 Pth05s` dNjb!Nmi/0閮=C9f/%wݓXA۩z&Ki4[R^tf_L燿?a[[jbh8}+qʾpYOkNFY; oOKN࠺^bP?s(֝P'۶FB.9R0ƘEUٖR/Z3W^Ek >yMD;pt< Rڄho7Ԇ̝\`[_xfsde1#ij2z^" Se2f}g>2P7"Ջ5M|}!1_ŕM*6a'9T|XjVbJV,ju[*a/+ppj2ppa{G:q)L%Y7VYPaFHpY})/S"h]#>v&@Cl% ym.nU%3HS" G۹Ovz4&:Pη[8"BH)Z* !z;Hbj!H$NB8.]tc! '/D~G`좩yBa4?0H6ޢoZZSmZȪ\:G-{n1h) ;l\DZX_XcUAؗz}}́"ja߬>>vzj\ss /lbzV1GfL;[VVA:e1;6Ψ֯$BtOm _Z IV0/0ְRޤd9٦nEɷ"7i ┣NLNQoiR0\6u2ne rNxB~sO1.#]iO^s9 ˅e`rVdw()NQ>% r5b["|*FRӧqۏQ}Af,tfsHZ?7PW!+85Ou}赊j>p[\|ӒJPh}Ăv6{FTJ{7ok&+KUej&,i$x 3ڍ.DG5 )PpT C_ڃ ʏ4}OYlvBơ|F=Wgbu@8#҉&JoAu^s mKjt鏌/ZEEX%KdO" WO.ԳV4,!0K@nhg#BE2îWz˚(LvHfHu1lV9~Kx-_8vGBq& Kjhȫ+M:"SئauhN}`nU qz'Dk|,E2SOfQI;ʋB1>[`Q[ U$c (lUx^3.eci@Ú21H&RTSQ Ѩr$LmBWK}!zW3Of)8S6#3Jo yzN'); 7;_ ?3W1"_BxޯAIUTrRecs \ɲ|C$_%Ξ β:6g;RɊh4S1_CgޫJ =^ e"ؔ^ Abt:N-yAf'0-\l]Xm,guõ};">*t#Vŋ{Q/̩?8y%ד/1HlrT N5{uHd31gE"$4y*R[ ;,%͟UJŰZ)ds ]umdWjXi͠&(rTLFjG!nmh-/cZ]\|zн>XO!*L[d&7g.ш{p7"oyalD"p]P7Qh[s% :kЄ{nESO$).΍eusi>&`/_].l6JBL*|yLk_L[Ķ*ގZhA{Wi3zvLPf7YqxSg5lLITJ sDR8}\ڣX^%\>qLZ7!~ BډӇɛC<~C0]b?4sXt(h"vAnfI1YPePfu7?lm[$!eOm 5Tjρ.)m  b:JZ̋_0U{sRg2WͲxQ9|PhF݂%Pނx8m|zttJku )ӕyx,`:- #b`|誽LXD߭~w.)^v]A5\ +$0T3tm@[ƭծ&kg saAw -vZ~0\oi3Q+0/3]WMf-&*SLgxfD;,ւr:B뭃JSZ>MuWBjT-OAIc\|Xdzec}!}ckI<"$.Z{އcRvB٥Pȇ.]bӛl',-tCNF #NF *@Vn쭺Κ;4¬jҍ8,y֞LSֳrIL ?/7^:98@y ^cZJ w4ƍ9KD^L>qZȲ|c& DTEh؉R"@ر'ijFа깕MRӚTvHQ9QJK\A{uc;>+usݬS} { ',I\!ryǎEL~-O/DC*J?7+U [6sQ36kX@?UĚ݉5qwbζ&O#r&8.&E8 R9_8cK_;( {PnP!)xk Xt f[<$_ֈZHX||GC8O\[,}Ǐٸ\!5mt~ɜj3Xt# loB7 1}Ml?oBϻCʦX#`1!T+ 䌻r! lE?o!ԙFN`@9GkTJ̀Q4"8d׉\`)8 E Hch|p,liyi2 K(+%XZrSG˚>GOdjp#ak(4%k3sV(aNs\b$ Aew<툨| +\`Qn5eSkre VBc!pwU+@ݢ3B}YLJ`Z/!4~qRjӾRN6gv=SZ̙/*쇐i|mH@_CyWd1<2 7 G8ˆiO?(~_, jyMtr' *ׂfP%dbh#\#D"iBt$c̋B+ZCهq35E!%ZrHaHٌS*Ru<5+KG0,!fuģF}sO>ݐrZM`6*{"V">ikf <7-a`nsՓ ŜZ2x}u3μIxb؛5Sɾ_%%w?myekb\Zk)Sۭ&L l2KX:6T$]7! %AdwD)=.?F*>4\` ?|l xv>HݐmHborʆxB|/ȭL1xIeK{r`,wcSR{0Aw欜./]yVوsHJ 3q(#zGO_Zt k玕ݹe؞%ܙ.^?k bMԯݪJbz&Xxi4C}u)mF sk'd1F} WjzS;`ݾ`F{ﯜ. !'=/{窄bV~yUa:ڹA%is⣨K|&%E&˘1pɽ7/T{w"!A)P* fHV~7HeD݀󙑄m201<{ƃNO{|$pnD 9_ ݼN$zgeL C\@+Rd yL>`ZnaSѦ192ܘq IJ{ow'¸_хoE?>/#eȮ^Bq罎ULnQ"/8:IN" *;3 y OGFʔ|ދ&1"p Z)=w ?tY20)p& ;3nA{Q0@l;iS |: YK\ U<0|7i?t3"ZuSCD6)h뎱v7s;j#CiYɂ&:QHK.-h![88' %57oBv *I>'L_n{ڭ?z6=}IhEq $;KOфZvX a0ˍPaV\E,& qk+2~!IF:A#ҋϟ55HL9j>`b3yC/5cԚ ƒFr7o~#Mf!hq@.p/uϾ[]=3ayg R!m /M]K k70Xw|؄xwt,$W\ZZ)EG;RJAU>܇JPM{1eT&!nJ5<`2,ځ8tAJ*Ұ1MMXZȴ8.q>hrz5R0RjcЅ֒ ..Kx{u\:"-!ȕzí`nyƎC$sx=)r r8л5 NvM'<pnz`3 G<=&Q+␪UNĹ--G6`RAuػ:QϹMv޿"P%"K̨ig-Qr50vrh+^|@PkGJYYbڋimua^)Dw_5Js^"Jg;_nC-4t_v)2*@mǫh M, Nl)9#V6%mPwaO@kO닪Kbž>N=ǑvK}3 7=j=U/FJnT•nѮSУyLA˙/Q K2T*qeQ)>[kbZ(o%F騷W:iߏy~ρE)fp[Ek j'0d>\:k=ͳTiYjuU-W/c@Zn|UzeGsɔb,ucv_Ym !3/UUR[V+RGfƍ) 2A-QJd"!47<Fᘪ,zPHiaFvD\$ɶA<_0ގR[W\1T]T7Wa8  7w[sTտ_ϧE8|s4&Je[#v^*;u.>򲾴/ #4 ?fB֊|!˴jzX "jc\_Vu%9@DިUZt멄Yx}vz?(^+~6K=)AU4NPk.W!r()QTO6՚3n4{y< XF|٣6v% 1N\&_T4Jpb2H́zTt@DMN'ǻ$!/Fʎܐb\ͩfc{i WX B!Ud{Il~L¥}J廳!v:M?w"N}wqȉΡb{=;C5~T 第'9}a7_  =qT>f^`_nF&/J7_p}egxB-xoɮ1#z6^ya6mgi i%)UցW=5N[uLlvRMݛڍ&ذ^y)Sl͹΄W<] 'B"GXU;!<ȟǚdmPC,M1?^ҩU]j`^Ы-zY@A/Ec/Co?g݈ަ5|M5! -!6iI%x6Da!_xa\$ꛑΜѼYj"<ȍqIKGo/uɈ5zypNbcxZϏ֩jkK:94xoʢN#tK)}1 x GB^_^\ ^e{Wn3f񖳜`.vCHZ?(hw6\/A&"v-$z4?Y,VW7/, (h*RO>z!zPVj%z3ſ!VƏn2Яf^C]!Rp) P06R}{ř&Z̥VWW4deĢZ!LOyκг5z\B'|f~G qܤnT Ymג 0ڴY3Yh[cلa,xe$bf t[ kC,o@:@υۈc[K2#<ȱb;B\M>usWxiJb &t濳+A;T uAPC\MXL@=[sRB@7B, ߯ 7G6 ik[u+贵gbDzq,X?!t;@%aO YGwXuzo잮)䱤sqh̩~n5׫8:.XgCot/ mxϖc6Yk5rqp)"eEy,].78e4he_{nf O1*c+R5[7&!5I3[5h3a-j_ތ V 7>mzi·jQ :Ovk]Xc~}};d֐f#AvGʩ)3;mY83aD^%2[5c۶Oj}jjiMځurAoPBvr/#STtdiF`\2!Ul;xjId[J0Iu{O\Cpʆ$?3TDqi:.q]/}.눦* 7+bggmwv`cv˜@׺&ٷ 7hFr9|t!ٓ M>cw+`!0a# Ayv pҺc| }>pڑۨ}\gU@y q(r ԚA=V#zty.j|XO-G%o$e].Qn_̓撜%,(X0. B =hhG_;G*ްT8ԊIUC'u5uخ"x ќڐQjil~ GU8xDb rg7 dPj;]b>{YP>W`Fe` 5l>IF[MIR*ܫ阊] p;YՇI77u#p9=`p7/صVrBp4 Y,,Бtk'hE&D$>P䆋k]L`OZv" LFrBPUleV|>"/Nf3d_F#nt= @՛@Q;/TZ!044$52w.:ћYeU5!3E >kY(bkiAE0V~ J64HbkT&ơ}^`IXYB.\Yact"$U7uSzi[NyY1DCF橄YCF*6 fabnR_4/(G%yf};MMsQ4MuW uP(/r $Rb]z?xM+9]+iJCCu:? O$QbxAv4Vi nS=bXíO*qS-г/mO[j& G (#3 RazrsF݅|sY#@u05[T2C}d*Ŝ. Ǻȏ}4 8փ.^+,tp 4NMU GnmvRLIE+'E-Ȓ"F/K"prCzj C`7pg7$qWhG,bMr* O6CƎbfg[plW*v@}6XH<'+Lraʡ\WmkMECoG%m5M3ͱ9t'oqRߤ&iJ'LTk6spJ_^s>S52qHIQ7,+B)핼 vd7(R`\Um^\~PfG|E8eT-XY!dlzA'cz$5COM8 #FwC{8C)Nx lSDrd-N\va^kaB]nh[ zx iRHSXO7B fzJI0v#\DlbB{?16ӨGR쉳E|_Skm'" ;RSCؐ<ڵk rDq-=/5\}IݦA?hA&{*eSNŨkF+7*[608` 0gwq1iP7E\Zg-P&]Y蘖+9ņda\*-/⏤C?]"v"ס.if^m=SfB6Rk'ʭ@Y^GgVA:3ܨy4ʼҀљLclB(_rǪZRfkGQ ErH{fW0:#YMv'B"'7/QVoiOh%PTzPSPQMsygB>>k<׵Y7ȍXZ@>Bǁ3͙GDZ'I^#o=eqfZmv\5rp<,C/(wkMO˰;J[ WI~([C,? Y%T|2<ĂtčiA K7ܤ:IԶհ_ؤxZ n~MǼ7慧 ?HTIR9XT.1, J,J&p:_3sYAJS{p"+{uo<ԗoEr_44qٯB'` :ue܏>g)XƷ\#ݔgj[U'%2k<[$DS|P\7W/oWD=ZG;hbì=ydQ@:)YC?8ȑTjΨfGLϠ`\J!{Xd721~ ?OE ^(e <}@fa҇[K,e}73yl7fyZz+E M'Qu}kmvC 0LEj&`T yZVG>|bڒ?|P5ӋġTot_ [Q`Y{#r=Clɶ]RF&w[ y1^ uyc='3!Q5Θ+lQi,w@//^ܱWpٚFSTcLO m,aM=qKŷ "h)!g_3Mι!2R&4vh~ ]_^).n*S"^r^ݸ3͖6>ܒ>Ukꐟ>F,Xir`9ы+z㗙+36:m6 fا0o@(7opwEMpnCV1I63 s[cªyL1& ){H.hŷmfP0v>7?xK?,x3j#~SYM-7z6`QF\c)AE(ǽM ѳݴ),#Y`D Azc3:U؄{P*n?VĶ%AP/3㫄_Et-Q/?x}r) hoBxWu-c?W# J(P~)4S,;h1><F/ѹfp'8F^c)ljN:cL஫-n}uݛs\2aƊC6)k@ptW/jOX/6ڻ\k @EzARޤsTf<vw4f^ɉgAlB*b̥&Aޓ?'PL?XDWn`?-h+fjqT>w6'BHo 1<+d7 l[13|=bAZ*!Kb>Z4j_5E{)z_!dMen:f#syA ~'^qO\p {2\QEџn_tkɪ< pZM;؋+!.!e]})ֲ3TǺ34 drf kX8*_!QQ2:89/#e#KSj di0ru5#67˜ޮдi%dћ_f]5pu)|nX)v/ _>NS+1Tuy\^5z}p&ލI~~Q "k Sr.V. RG+ORVݭ6~NE~ig0I +k˞RZee8Y} rT E`!}c)G<@_|j;,rQYWŊ|SRj#JH$^.Mt%lf10pw wC _X/&ybNN va_# 4ҿ){fW4M5M?U1zVFo D 2G:Q1(5uFRY7H hRKXYVMnK%C$O6Tȳ'y @tZxU.S*h/$ /e 'S.k>/iS`&=]O7֩8b鰃OPނ҇ zJh1Ҟsc%;HH&.Q(ym܃[裷oXBȚCWdYS ˿s\~b|#oh *9 d':;>3W;ZE>^T/VȻ)ASIu1e^PX|nO )U߅f64oI. WsՎ𮥁Z_ƺEQgBn߷7 ą h@Ni!B]-  Xh',3sS6CPr"\ JZDFNx덝}s;Yx;Ҥa}ybyƝ K 9^e'Q劘F&[\V*}x.ڜ왈cuSW` qf,?"Oq+nڼޕP/N)(nFXE"ET2%uiP1e~mf4G_t+dxJw˸&҃}LQd.b57[D39] *fᤷ΃20oR [F94{3fܡk\؞7p7A 'yh2]Kk?0 'xDŽU;*%(?>ߑ{]7X3>Ȳ?clnT6όȁTscN4Aw1DJC#r^͇pãf]-"OyN\}JcX 92h; sF^wkcK0yI .L 7?,DGg*jO 2z de˜pqCxh9+8%s1uN&΅usU%:+AhπMŸ5],b>IRRH0ԦR, 9j#nn쥽YzbL"ޫh^$9?j :Vw` #"`dZ )`]pUA2rUg+G+jcy`cbAzCH3NU4V "hOaⷺL( FA tsصL\GEQRQ]&hiz4Uϵ8فggTc,pCKdXVKMED[Ŧ&͸F;^0|68Җ7L~}|톇sԽ:TDZ3hOx7)7(NDvuPJ[XI6Ig`zEͩ+QCmZTs.̏A5?]m. Ȓ1wt 6m ؠ̙\Mna,M POrvF^oXhCqJI b8;)Y*;b%aw:h[ub+)cK$&pG|K-I_äppM @"Xe6 g7}m87D$tV"6ږL}X<KPN)I>|RF3̬v&XZcV{Sk]qcm}hk/[N1纱T)*|k6oR/D%$s^xrή|_3y£Id'Cx$-a`e9w dUү]!Ż1I|up5@j`OEhԯH֤Qܴ24ҹM7yr;,;@^ZN 㤭!O@<>{=\.cS]QZ'-Rj9&=@k˗IX1BO1+ cs>zW$6x R:\Lض"ȏ~W@-$@Ctq5$]g]؇j0wRGz@ +TVAa*òFa0/1>SX̷*DJ5tIѽgjH>]{Vgv~Ϧ!U#b+BV|'\0$W=E8owTïSg\ˌjٙQ&Rp he6T0qmTHF>ykr4Vjg0qK_Ɂ? uO\ ngMxo~M|&餆2$-H6aKvryN3Ծl❂4 aET|&( \T$Q2AԞ7bT0ڑ~0 Q '~V*qnVUDlKk"ᘕRIa:XȵDaSw~hE\$#" ]?Ol?$'(}*I UI֦2EO^/*N=o2ؘ>* @InRl_I!]o.O\:7*Fi y՞FZR>4 ^uH#D+նe[=ίag'ի9u%"|QF]f L$5QQ$Ts#NcHt!(13tziMMK",n,F]zG0p;\wHJAJw-zQ,E^6I/PoीFEZ /K4xČۺ.p~/06DIc,T"n9]ڠ VU\=J Sny1tOJq> x暇w>%${ʼfN-ib.mA 1 q =ZcbU4Fyhb{pQy?NT7d#syFkn[n̖|Jf01;޶ 2b=lGG9U %yI#\c.O- V 9u6,;vUyXUgyn5D$ (Wƃ"pSF?:!n nn R81b6_{֋RA],&q>!R}A `lZ@|='@Vf4](i 'ܚp&YYHp)zw4!6s#X2qQOxJҏ1k<#qxGX: s;圁ɻ?| ѹ \@o_AvY ;{G|Ge5.JYO4Xrnj Y$XA0qk\ah) rƢ%Q+{%Tis"w:8s'_࿰zT ~n Ps~}b& y7ccPvyNC0Nʆ%{ObnG*mqo9^:Bb| fck'ǃŊ;qqD ~xhp8,A H磣|F@!=;#;ˌwϰ'~o;ȹ{[6#"xK9y_YГb5 ;F9 3EN'!]nX$t" SAX| _87ȏ9YY9EД!8h` c8.,Czrєax:~I'[yyĊ0= u ۖ{8^AT"=*  m6ٱy[A$G9@U5?tuy;bR S03la M4Aj5,h^}k LrD 1aKRd)RTʭ VZ,3L戓Abjv{Jf'dV'2&FNܦ6 {Ek5.B9!Sb[do+}p}#FZB!~2^c l;|ʳ(B!J)HV'BV$>Ĵ!)A?!gv~GOGKgR4r:{p%?O`/}Qk(4{&t7^ɇ=J`c/ xczMMpmvQ#.Kм*Qr31L 811r%*1ObU6nJ)(n=p!NiRfʣ{GHrPgS괷Yu&T_YSmKDArLF`\P']ލ\junl04GRy>=^]LOZˣt[:{l@ (,'l4=} )${+3%:U'BAl> տ֯N~ Y~MNQ(lHMݮ~rֆkfF9$j#ᘜNJ[T R>Z ~q,]KRX&5>m^k'2Y+:ߏ$OPzo>eT%a9 w^~@9 j=rm. :dDyˏmreX=GLU'uO?$NĻ{)Tp 5r dexգ)ZjA%~F {[r-k%t$z0S$_KNwJoW`xF#J^c!WMMth Dˋҕ#Anu(SESqrqc_@v#ڽ}7}1@O)AgPA|sT^@g;RD`M2}㼇^?u#5An&/ I `Fw }aЦA>twk| 6BD'}# &H 4[-[QbTL5= :t8(!GVj˘u}Xh) 7W}5 }RʂX{QaM7[o_/?O<+RV`M  ќ T% 1,X;zxƒx.nUA,>\&%I穤u\}6$+ڳ@|A|`~nX \1<.j;c"ɀGL6V^sH3k.jv Q-O_|>Cxdc? 2 r7e܁P@Z `@ *Z}縴F7_cjXLไNT#PWu] fPwZd"$m5iƛd+7PiG+GV4s6Ø_벉ٯ,Dh R/$} H]Q~Zm f-Ί˨ye W iBlƇ0翟W擁e9|9`$}Ap2{pn?izs!ʐS*&UYI+{fg[ţ٭_䵚"]}z]s؈2U ^ ll,V?3Aת7Q;Gߪ fo(=8<$y ӇĞPL)1ra taY!iXg|* F&]ir|]o+o"[ϖ?LWRZQdH&&wg5 /oz|tS?M9LFT!p:ι$-q;ԅR;wWm,@/ym oσg("įqFdU)NP8K_{/:Hd9 JlݡiEYsV75Ǵ`3`d^d8_3T+,K!PB._xތQ_]ЗMU,̟Hi^BAh?ޤiEG۝䏮\4EdKd@QhfsXەr[;hN)S>dD/TP]T_H-ns&vE]8X ҍ_N.A8vCηZ'vO !s艚Ci5: !BwYפ, ,_k_E!ˑ4\u6)~Mb {:DB:v2$b`6%P'?r'|)h3""-3M=A1b H {p9 $ #c _v=ދ*iq( 啌UY4%%|܌VrUy>c#Z }cYS>\S@|pZvK#~Od]ڲgn^|j /[$188wK3%Q3IWNOմyKv0o!bU"Az#&<[7& o>ƌuGU($Lԋ zCԏ+v_tWO-.;: N1͂_9íT@g>-Rό&{'}grsim.}iVcpí_cR祿s%R.2,' Htc9oT%`\)LPLTcz(ߥ*vn4higTg%WwwYhηVn[Ts}[nH]xJ/Rc4 rcEH'F#S~/ 4FVg@5t t7^ĕVBIl?vOZvIQ Uզa5HҪuٚ jX!j[ X"y3v]YҕWq7qPG3V!أ$.[((m !v8o ILo7k|# sA~iRfO\~SBiǯo]angW*n@'}]13x-7n+HওvDD('9*- -Pm6l9NW K%"G-ף`3];4'|\X%k:rt1aYAr kn` w>GFh-ody$C4 3})z7qzLroG.L,KH][{/} 9,I!ۧIwtNyc(UHWvKCT˴|{eATWꢧ{Ÿf\]oM5ɍƱH7to@1pҲp%]ž,] hgvVw MΊ)pM qbSsNݮbouo/]q-6u+Є| 0yXW}e[,HiI8 \:\cm@Qݚ^@eh&OQ HZWsA%ؤK#d,KӵA /}1ecYur@3{JT@atӒ7?6H( 4NBV)#ϳxK) G5ux|u仧=ɏ Fq#{g8b,[l|9_Zѓ.)tkW]I{ `F/f\IFy=̤%oB3*S{V,A487̸h!D]q',fVϴTSNOr:K%%: $J j ε^kiot|X4-`γT2p/`=] ,7agx'/L"-S8Njv6YesǕaaFUlݙ)ÚXtʩI} d4%ɫryg7[.LH6+ ڷ@"0H(GIEW׃qe`'0$fMV ͂7X P쎂R+;fxܪ`AþpAC"rOЇr7}}=܅( D B1zoa9ɚjK}=ʡj"׉~L3=Ќw5D5|O5?M]l=*B&fJd:L p/P)o6 svؙpd$SK|rrLrzIN8x2]ߖf5Ɛ9k7`TXMֽһWa[wXx ZIE_߃yJFcv03voІ+cS_&wd/xbi&/̭fi LF!tN5M☯C|my|UU0w _ 'd<[CgvHH^Ό#L U/-q]q OB6|{;Z|ſ wɔ嗺$U(KIynϚ3:Ib|ǡ2udxp:F &O,mV>>S*MjZƸ^4[ۗcSQG.8ٕFݢ'/p}HD3ȋW{A5JFZDB:.5>7@mVid]Oϱ\:2µ Fw!}eEa;x>b+2pUE;2 1 |wNܰ+;Eymf_46KpR9+JDMLs޶XyQghtcI 9S# )ԞLз!BOɠ)Z!C͈)G|kp3J_LWt[ %[ =vy"#p^ՀSR^ rQ/HFJDDaVfqPKtz^> Nm:#^}3P'yob8 \~_b~xtfhvP%;Tj~f$uTq( e iA[/ݔ-i}<%+ !: j,l.|l0)@_qIՓAaUqqecHbП]f"e";+g31YR- %~MwF\x `M2[8;qU5ՄDKMa+Od%0<*C">)D,5K]0n ]NCeEɷNFPX;0/փk׻tu'Fc&PA(ZZ8 r1n kIV썽Fu@"'΃׀Œ>}IgOn?3Oj`$lg>hoXފUb)x1MujE7L %eBT02j>3lH6ڭh/֗6 fP`%Ώ,ئV˹7vg?A4B'.@= GyHI͇yϲ`$v2d.|XԱUH"qOrS&0ҳVP~qXML. N2.FZ$atS̐T:ɤKf 1 9q_Wo #)EB?htBLT[Dz "o[*&*oQeڙZfkn_a ;-}nW=fNTpO\l(T2;Dheۏ.@N=^g:TۢmЫ5 ;JD.WWzAgq@i*3Nh}VnaƘ%ѵr9T[?Y+ܿ}#iX8N 2$r߻>D+ n}u;^!^x:)IeEk[VNmOD I(^D i9m/ uīk+%*O01=jh9bwE8``U|3,Lߩ @]&2{']Hq-wXogjcr#.۷mY$a콼v)[r_5g}1- KUq6]F@dPȫd4%1}]3g~jE1}\e)&}_UƠia-<:֫q7;obg#_ƀ?R-v$&/fQ!26'7+Zq!$Y6)EYǥZ0?K~" hE@P/S ٺDe̽@2aoJP4=i1aXФV*߁qo*#p9Hhv$#\2&v;3\#[9䇳NüD0 VX LlDTUwUbS{e`X>qGOV $^DHR3\xU#nYUN28!6^"(9tɆ D+pGm!ֈURW]ך֫ʁO,i)%WI3nYݱ44[ī!KwIh#h~~ڹ IzZk2 wjJ  Y;8FPƽwz6 bEU1y <,+^RR|FWghųP; F):Da.P#TAtY5V$TU X o8ϤQ8uuOSm̷8yMR88MXc(iLS./4:n6EҰ9i<Ј`(S1-0n8%=n}&| ФM`Ak:'萁kL1y}oƨ:+ѡNەM~:0-⾗ Րe2e|OJoش~6DEix 덲OÅz}D(@>Kd ]/tbxסZpv^ɧֶ bT^0(#fn:9*i2 F\=Ngj'rR(.oɉկ7`2Q. Hadܚ~hU[.Zn-ꥌ4asQV޽ѰY{& ݃oΙ]v0 M{Sob)M ]uWJ~vGSW6 K98HI߼Sv Glo6PQunn@ g(<Ө$_Q=Jwk26 |M|dy/+9+^JcHn:`ԀQy{T:<T9K@Z((L)XX}  i?AVrQb hRqL[ Nܿ X_WI;R#gN( 'qpgSCt; ?+L=,7Myl'n8̲݃F;bw^Z ai[ͨBͨ  "t (՗#/DV何V2k)c U1)vtj_?=~+n3j|aR0옹'I= MLIԀa1`[Mϣ34NZ#^&8!TZMzpt#4|ߝ'9mbA%sZ@*cB*8>WUiaORK6i0c|1,r|+3n_و23c N䬼[\ݔ%w;CF݄x>Axݢ\b4o[K "0gSv^͵٢g)ww/QINnZdFj?;Z|a_4}qc0!vwձ~hGHޝu@j.b+ ߑvcXHָ,0xnf (P;sf&z{]Qfp mv4EV84C۟zP=W,i@BGC'x0<󣴌i20i9,$ufVk >q&# "Latv\>vrpԔ<ڒDT*@n&3AUayRnqfld0CA뺽n4&׊yqy(MDV @PqbM"tah垙~%Z.}C~npT"27sbZ .a\p^08b:Ėe=cqAa*Jb<=w7a(}>u-tF'&#)nOA}'@@TU;ty.f/c SsVKJ:V LStz_e=W=mdW5aGAúMV+<$H+"{Q|1j Nۯ@bdH`N"nO(}vpXE av4^6{}@};Vz]v툪 2cM)Fа5,=7=O)Pq| !JJ3J +y!BJ`߰==oi5}8M{xmD8TeG',cig`~&,2"kO,bgbGf8"^]5DBÑo 2g""T%c:#^N"Ӝ,upbxM8Vn;rF[;f*{biک9e-~LYp*@!<[,~yI $-U>}-B‰a,hq%6yb]|t\.Е95,_Ť9(Yg>-g)細C0D٘ld52Bk<,KSp^ Ѓ(DnKPu83>  P^`9&X|4O\<)ozdd0IF(!nUl\ CMI.ijUvY$mO0샩6x>5j@pY{G}qoؖEvbtyI<$AbF0y7V 3FfDfẃ<dcwx]3sE^m[Ց75 e㞿u}ʭp~u)JQ^"< \1JDc@ .섫mUxo)fsY%QdyړjX3 %ّ"41ztyAQ:ШRvM ~̉ [`+=YF멼,Jg T:Kq$а*e9rc̭~bNH5B(?8vAʼ$ pV p5jXwBA1J_jO-b;}F%5ُH;9FS:ӌV:CU2$j%~PyRd <ğ``lta'ӯS@h'9o(gY#e-7[ވEXJtC`0B (g* D-O,.&.Ęպ:A.; 8͔^*C(]Т5ݟ׿\^%!; .lPx}XUp0\/%q'OQ)Q@=GmQb +Xgewivh+?D͘o lHS?Rh!nois6⣂mE«=EKjJf΅@O"6{0ak5V R)=I̙IL/Ҟcx뢤?$e̳"APZ17yNjfCL"  5IjJ֒ GY4!hV}(aD聖SQCNj3=ؘ;~Nj,Ow0-fǧⳑKY,+m~:+h<4=Q42;oY.ͯv46glم5L6Ñ!I|OB>˴lK;s:0Rn18!8Ij$mOXy2atyy Jq߇U͢m>x[YOw#wZ"rs~\dt phVF/͸ ۜ un`My=\aFctHW6]H,p풑 3cX*U َE?re_c?/M$ZH(}Qa %PNJqa.@F]1Kr>ێMp&EG^tbLU׵PN(FhEn'/آc5/vZnjHE>ițXƺt-@hzb,?UG@g&i'~#;26WWHw81c=ӶJ[U4#B0)(~HDmnL4;PBѩgDZt:qFϰGD?qÙa"=RʊƫLm 펶xwMw^>oj4fϿ8^Td؆& Sy}bytѽ+=|FAaK&豬(QW܌dU=u1y)ܟ<0o鱙HfWȦbm)PQAX%kmͥ$}6j:v<E[{CV.:굾a#5zˁhq :!k#Wnça@⍆g 1;Zc 2~Pۤ:SHe]A1i o e&e_y[;<1vLT&й;`VxP;J jS[l(kߩ /8'[,j+M'Y8[ni{5rE4 [Ka)=Sib8<|cW+.T0ӈ'I)mn1g+J<ʊ'gmV9 dُmPr.X|ΈY1Vx+W|[ m&w XhbMn٪3^y[> ΟOM ƃ!Sjt䥵q Q'h-d;57䌺n@ })wǦ3߼[Ł#6Ðd̟o2G:~"t0Ժ@D.o0EM n 騈_hϊ+jsjb$!^8c W)EeNNn}O_M6.;/('mWgi Ãv5;1.MGiP֢F;sE\*)۪)neiA ՗>o Ak^&v>zKݗ"Z5tWE?hW7\}@9ԟ%gm4 sV5Kwp tu8{]5LOvRB@upq $YZ+0vcGeLvW׀Is-`+3 ʬ1ԏύ> 0ҭ; [Gn&Y3np{fb"xA|_QB'5G 7oM *^8⭕BWX1G%paH2rL pcaMm$t^$ZfKXdOn1?4*^8M XHa!v`Lԉjd&篦NX6 =gyhB *[R~-ђ#ؠAei(͚62ҏc8yoqՉR-ǴxXCg_D lQfEU䬗hR[ iv[6aTm̎7,|<ќ?d`%-Tx7~2JPV &!CDal1V*KdkD8z/Cp1vRA ɴ1!A{#UmrFfCfOMa *P]H0F7]5"Ί 1 ^$N`s2h-wH&fMifaNi24G&+T(zgB0;A(k"(w5 h0'\~HPLɨLЫ&Df%lݓvOv<6`]FVY+ij[af#p\)T4zX,!%ukoZ'muH]i+{9!zXi?al{)q<"jݐ &V=nSv2#E>e߾n_PLIJOj .KI1^ iwD3 S}|7j>7Mw_?36ߚ9bx˴,cDb}[_)6ghQ`|RIkdަ6K)0ύU0S[xX 3Q,D-.[mYGWR fA%Y^Uu1^ yu =hK`9B҆İOlExe^h*V#.H-|{m~A1,+@NT13Zbkao=]J r%֘=CYO ajX1,XM2MVAP(j/-dRCJ?i sQv$d.e:`+Jx'esإkfŐwHˏhlonٮzmg.Ak>.cv8Mx[`ɽdgdM@\DնF2 SS5I]m&&L '8$559=7::齀AyOY|k2Vsv&8Ik򼇨xavwHQYbl`_|:'"Pt NS2466R2ifX Mr׉-ַ"JաY& ϝr`L"A>+}04 9"\(l+e8'P i]֦ݿO i%)XD= as8e9*&̢ZP~xTZm9r89O u* ^"@!8}Usj)k[!KglL͖X]VG=nNPt'TviloNj ^u[Ifb?LALwH},Q6@:8&#Yy+׎i Q^m$Y[#n#K*Lj B,IB' a?[rCW޽%[+1n g-t V0Iz]M6lc-)_P_Trtvw MJK!ebOR, U˹1ꄤj!VV)̊p,tb ъƜg6/@4g3FP1 ހ k\qòa? 0h3~ #CP&=5Mek;6oY{-[l'ANd_iI^hQ½[mnw\ً&ܠ3 "hbM {q cKz#8*A|;ݭjρ W `WeVZzs XPj\ lC^Sr󌃴| 6Qri>J\9Ш-o sĜGKc9+B %& -&2_t!I J?y/pG_5$.:`(FծmR,f>~UNIiȎUc>y-겉MzӸNpg*H`C5H։fgaJh3M +"k(&pfirJ^ư8,ͫ;o,>;uh6p^8ɳZ_ciAa+{e/&kM3dLPǠ% e tK:&1#:[2ngME%{ .Mͷ$UeBEٻ| H;m79oި[?@h"f @&dv,Ӌ`?e>Es[Jz -P1F(>ǮTw0_BJ`ǩ.40hJ ws/^B.ɿ~SmO,קi T(XR:q=鋀UQ.Ugz @T:Oحu+ԕ.ŨfaDuv~:PCqW|aGn˙ ԃ1ApA,JTo1v=_{! i R, U||s5=|Ş8(  <$n5hV ?`dOwn뤸l'yDGP)UD/\)DрpʐKU1͕y:neWmɇf+05ϓ^pҍo|aUۖ;kG C6]⭌|$̖WR;viBSqFgI#h4+K?2 RlNϑ@W{a! s elf9J}d)\%g[MZTIUI/NScP [ ?3#'X>wȉz{B`hOMĜ"XO()꾨9NKxc4dQW.60L#aW>=QXp%̝nds34塅"hdqL:%rh] 7,}4.7 U;<7X|KIʙ| <tgw6?5A/Ce%w'%Ƶ?~#QBc;L^'r8_p0 Bi%y9"gx;-4QZ8W/w1/tn>.#5fIӛwtkգ"?Y56ƭu۞ gge{,NiXi#ݘRFEkpF~au‹lZ߆u2h{W~jᰅ$td g5T?"%,#4HQadΤZ8ה(g4`61,eԹ k\i-{_/cP!-J??*2:㩧=ۄQ11cbdM*/>h~'`ߓ>Btp&;Ćz)"'Nu܄,/T(5|=rGO8qp)~TEW1Ax߰{fѥ6ݑD%{wET" ?"vf@T4G\3zrv]RO|Z2 '(0 F;;+v|n@vP:/eE;xW8ͪvH.!XYlcISv^ _aJISAsçTK_`+~[ϸv񦦙;룷Bp9;^&|jxx!bxKݪ N\Ys#?"yF}1hHB- Dy5xO0ICSwd3dh3"肳ƕ~28[ \Mq5.n2&d05[}ą֭~q_0g_ǿk~;ɜѥP'vd"5L)xbYh?3YB4~G t ߑuj]}fPOq1!H`Ei:iU'!0N^+ҢIaV-d4;}W d>~uָV81UVt9 t*ྐGq(C Kb΁Wpkf%@AEF>a5Q}ojЪ\* bv]%Nb&Evھ?3KjGlQ>C2N¬V~ƻ| IKj{v tN`"nr7`mQc0viSx)^gх&A6\E%y I}a9Tp鮾R0'(k0*,T&B O0@JJ9vN"]IHL-R>}w.Z>W(,iY.-N2쿌* q1{50"ރ\L0 25tbkGqH t=`xׂRKQ>4wt9<R(`^**B"g  f{Zn䥎B(l7FD pA0hlbwPhIaNoE5:({bo3uݍ~T;6;-b]KA.A$ǘopτp:Pt[A+ߣܐ+%SHhO>Lw}u)t)'Jd e:)YD=?3VAAph-4'Tz^JY H,5[8tQ0 (wm {9rT!erDg2eǮyv|N\bdIFZl]Hpݷ}1(Z%DաRx|zIO5*xSE8@%gٮ>&"#OHKa "eYN!s|Ӯ=9DKyY%?NECA(Zaځ.MFw9xez"'ZukgR9Kֳ6ft9,[;&:n#pAcW^ctD8 7>M m<=U^0R,CkַzEYlk^޽2,F"MLisRfU}z#x9Ϭ34=ԇOkqkCC52;Nq|w'cɇ`E>BdGN8M,.eYK78cDW;DkE:^8—IZ=qԊrfӊ>iStI ^19C2\N6Yc20ʋOSS9"+s^NtgE:Ǯ>Yp /#ZO,&B~sU/ASմY߮$Y~Irؓ!c4MbIPjK"+dwҕ#ICH3F;^߱[yA'7IF!#\"Bwl Z9;S-տNXsia=~dd?#)n+?Kx^j=,e šjU`a^?{RxЀS@V;}.f,tX5bPB4:K>'@1Q>O!<;U_Ei׆xBҳuf pDl,>%Q(Z`.g\ PEbm$:$TϻiM$lPL"lrtFnO'ˣ5Wǃ՞{tؿϞ)y;T#{uƅL`NaxkO&u.>}HIX43v& }7 N-"J pfj~X'g%sɵYETH}]Nh{:?ʜ7U3p>_}J}=ꔽml4>sH`}i~V/w~zРlc09֪:d4rAmQƂg` <BLt-Ɨ;د/is e^t}fc}Wa Q"a%EM5Jc3WBt+ !A;~-l:+]{Ȅ ~r*IX*8D ?F0mDw–hW0;~D*P#D4Lyx\HXrIT8ys?`7EI[P_%ۋ 5WԦj.3L?mNX\B$ 9UmL8DZK']\ᴩY1=v->i=JCoov}Xm K:>z&iu5gKwY߿Eyrۧg!gk<'|a#W:>/Ax@Oe޽pq*R^yb㢯 F&履o\&'qFqLXiCjs4u_v}n9hM͞fG o-1FRbTTtir:Y3o?IL^G'YX?zy8KAVxCp (TU7"]ԋ^iOZ]N,PG1R'7J(9.?&se/`@ ݣIr?gSӧAytL ^ \JVϔmT9@P;,`DN%O%$ނ#akoX+n#y>ǛbZKeA^L,Ԉ]xCM:0YC"3yi<-첸*P9)@,\dպ.]⫧ͨixA&}¶MAZ.wl?Yp_v6ή95#<;1Sbf6UȣA@r|ρ_v- ;_TSW_ri\uQCVp< %+z m\ S[ʖ8gױvGOwM' Mh9@(_`_ b A0%(e7R,;YB癇-t^05-~O&"Q~s ,:džx?I -=gu_cȿ$"j<9&àjߘy : ' $4A)N{JniaGy;|w&gH~^O*W0_w =㸅0V\n'UIuo3@[iu=;75#'oD>QGZuyS:$?q#F]bZs.έKW3aRq!i0L쮗8> <^']5Ȁe'[XC39S!}?0L\RS&wKl4tgpSpiB$G]"+h(Ǒ0M ՑjuBGW)K ,656cWj b5Fd!fP?\=v '*Bj@aȹmŏ{H6C5 L5wq*TӉgAzIGUVlGt?iёb\}+[_DŽ dV}!N0LЅd{ZC d?#RB@;pOԻH勧-%8vJ@w_$hLڲ.*;鹜?ad&@9O?qŎ(lwȵ5FI  j{,Y]qj/lBҷNPޠGFZ.kR]:`!FӴϾ jٗU#da&n) S;?5lisL/Mc|ALQMQ,%PUHP$í(7"kܝC8:0r`®~HM1_}iP#C&UL`$ÓEڼ+^ǖwyArRb&!I2)S>[rۨ"bmr/#rq2bWQ!p?+醇.(K1y(DĥmˀkLlxҍA?>􋰡GO!51Uѧ36w(z+p_ieWFym7M#ؠ%ZB4.j m֚΅%~1HF'&%oLtgL#Ht"bulƂ.\Z T#L> zNLujxZG]Fە,te&eӓ gS<'fBhA0wIZ4pfi4lc5DvX; ݢrXy1!&s-\ ) 7C:T GυY I\9. P* vi(їoHFETd~? qWLh1R R4FCD SlVՠѯ,x8d-կr߳u9U(ܫieEƼ2yO#8y[RK/3H˖wvjOd']2,zIw%o!lXȑag4r3'"˜ٶ/Nև«6ZKo/yrcn`]fP HPR,VGz>=3Blx ɍduVtmScvk)sUyB9ˡHa{IAV35iD6k۽T%|b(5) Ъ[q8^:0t[<@1&t&шmqk}3:(.{$65'!޲മo |j*o .J,*}m4R" v0p"?~Gv0$௵1іӟS^G=Ktࡓ!Ch+zѷf7UJK Ő4'n~ MWEmIq msj[{"ߣ1멾(F@kr8Y C566Ą],LacDwdyҙ rϋɨ+եgJg1itcԸ,_*q[]Sٻy?FE}g&C&wH/4F58֋nK؇GO>-~[<c$ %_TJZ}}*/x'T@g%5-IS@݅^DJ~k8YQ|2Ԟ.ԋa& +tACɖĦFTo!§72fOI' [ٿ)8]|&CWjIh.)ptݟgtsIGq=._8z=D5'^>#in H\}Er"O0XfO lʈNɆۉNa,YתBGKe-(d3<@v;r-5>KxM͖:`hVvsbD`Syn*ִ&(o[=vKKKdrTRSZ\6VKt4hSe0۳rgf=RNg+3`S'+FjS%6P/(liz#[RZX|BbW&w:^םh^;[X )iHS'cۙT F-3Z T1I rFU6m /}jYg+IC =:n; \HLT!؈s l͒ ˚^ExRֲܔ;*-*#vHU/m># P0hTNe붬N8ДIB),ALxq+}Xis#x`{Ittsb&fq\KV'QJJԨ%#š3}%<NTO' =5@\QY}n}cڞqO_dI8/0fؾDt>9z-#,PnQ$ަ@}$]9@^*X\Ҩ?4ЮaS}: jA :/AҩeP˱|qcS>fw[4b54ȱ}<habz`!$_Neڋ.*=I6̟/$ sլ&ޟNDD>I mMxzZYĈ%r +f}/xucN~I&e=~SrGz,VR]3uAsX=K jxPN;)ʕHkXbf[N[|+C΂8Nw,-kkZɳ+:E y7,ͨh!sxv5ӀXFФRN+܈F$x@8&{ cqSZ /4pZFXrӰ$'ew45MVB/]gVuaEj]{ -DQia5i$ۚ=ѯ7+-M`zkfn/Zv`w:cZԙ337΋&;HԵ*M.`]|\w@/$NlOAS]4^Qj3 b" l2݁!^yъcYڋBy/EĤr N$(`l`BiMؒ2y{ u_:k ``Ls&{UcHlJLfTC>|\s+@TQǬy*A9DLjrd`rҥpqrQmEK=|uGƁg<Fl?I{­6ko)_D,R[lR$_(9BH!y>! 5Fg\Zs}s@ Y 8 ꏫū*=1!K%6Zfߣ* ʴكlfL + U?z.<5d@!tt[txОowɣX^ n^UX~.FؑtŅx ꕥ%qS(I9nXnɉԍzĐHh=0pN=P]Lom\U,ʀ`e#ȡت=8/)kg*ms2ulW= .Z&duz4(R:Ѧ)r&2}.*fOX*QC鑰#h%њxV|sb:#)y%=fШ6 z륃/-Y<[ +ρ/wy5z00怟kS{+ӕw昔.L|TO\) 3T:z:ìmt}'bc<#{G`c1tgɚ$it##p#]l؄'LjD5(kLfHvcHo6MvD^4IXqE%Oꙉ8sQ9oɊk~5 ,τBҳGɒWJn^, ^x&-B6Tn\JcfZ$A C<*oXnK2aK=ndnC@%vq3蒇ʻ"w<ԴVfD:DIUi},/_uGE1:1xjVKU{ي@JpiGҬaŕԅ u0;~nF<~%r,D" %9V;Q(v5=_`w-wU/ųRZ^_.*Vnr°M /V撛';JZ'EoWej[_VdBz_e&;yݹ~Ks3{ h[Kj_Dϖ:b&ױXl}x%+K3+;t@Q^9 pmb9ډc`=>>zKu*PDև ;c4.KlCbӺz0ALڂ/E0= uq2#-`=/)W E; 6+2i0\z}HYu2ǐ_Fwnv ;3wwA<[W䌥Ȃbo" @}o'F#[kI^:mu|(vPFFf>q`!"-Z-o;$-1UԔ+H]L  ܻ+9OeZ05޶53hp:g0Or[M7[3QTU-{AV} GzVܸܟr67#ߘͤ4 m/L$l p-ap?2&)?d%=_%\UvyiVcF }Iw܉!*,#-H=8[th| hpqJcu[XQ|ĹAOYfZ+l';x!X5=W% H (]V"wj#']6{Li,;?R3!#PO ftN_kIz!VU P+3QN[9VexU I7}XF8hW;V&ZӬ+ˎ'jވv^dIw`?Q|iJC{P ӳgGB̜K4}~Te=4U9ה-O8)FC`#|:QHyU?=ȳ*6NƩe"(X1fHwŌ2,1:d'[ -%;%bc=vRT L=X:Dh.k mQYP)wB$Ǣ H&7畦xKkBswǴ+D}ML7 *wBA3"FFo(rn.yC̛XtU{S^K6dY!B1$~2s;}HA f-1 0DEjż, AF2௮&u FD`{>'#:-ˉ7Qr!A˼?~ FC>[+S.|.4Se ZGYPt_`, 1L!cny9r犰 pV uY4E4$Zp~1xN|?3YNB(μߢG_P8́צ;ȁݿϣ\Y+Rr8s-^\L$7r4=Vg wf#sZW ū^],KMS[q`6kx"==8b4n# o;7(Eܕoi!x\ObGlZ4[*1 t8c[ IE=z&xЩ{ VΕEpLc.J~P=`-4+63Ow4W %'=]ZyZL $祦jgey!G,獐 *ι x`KojѲ!Va=JaJo]nxzO˃ MW_pZմۥK R )ȽS'x]D`kl~\K|x8Ǘ'T/ݍ:bp(&N 3lUT$QxO|TS؏ 7̎91 Ÿ )ӊ08>s5UI]qqU\1-I`Cb{ YwK'@&f$ZRzȹ]8^ި|Mތ%%Jp_CZ&E@8"PIt259qO$'ƶda*\<} S vB{'{>FO!^;{m] +cܺHejdB$,6^!K'&)t H} i>o$`ՇO~@&toX?%Y !ШMd|: )Ii+9z-^STh[^Zu[ siU  3e2^Ii|m8m!{-Mhh "`óV=j=sK$ &Gs'vxkLrgo$ ԿF0]urȈ .?a!Zw Tɽoɷ|%e'`}Rg3qeBӺNɐ6bܴ܎ Ƭfy6oZ=Z',1^k9A<|XU'gz'48KF}mI=3k w9zkk_h|q(Q& jLCr(>R+y>Nc}vОsLFo>%W m" ) ʓݥC{ſɬhlH'nç勏Pt]@xR%DZXEЈDvz4x.5yÅv "/P˥!"hMW[SsCb;jA*4Ogv;m Cf qEFϾ+SeԢ*"dMhãt[BQCYc/'GPa_ZV<pr^7V7b{~4 DphQwJҶUzO)w,) qh5&mU#u۠cg5_ ߰ eSE x󖠂﮴Ʊz&Y`fvާf/`c;% sfi+}%o~ikqӸKKsqbUy>8e~ ][YDyqP29(ω&aK˿t"=IHZF}߃D{ -da sT6xwKOtOaQW*6Z1\^@]\hAEˢ=zCLKyGh MwzkANUؤ{BD莠vuSh&>|p !5Y%h" k C@![⧊QU̬22GW9}<eJլZz0-T`(t""ofa8%C:iwi_H!]VbNÝ15F-7 %+cW$F 1\e^|p7A.g=Ci 5נd.w? CL^L}g~^e9rw[7p$ PV%I3& woZT/5' 9砩 BjS⭄uZ\-+_m}MrS#2ZJ/KB(bf4:H #~c 55Glxk ãARDyeZ8oLg8+X*K!IY4v , p:=.q}oޤ:=E{/O߼^{3="EP*oU&D3>)C*ӏ%xʾn?>:mH+-  J3rZ'ֽfׅ9LJ/+ht>2D}z4^Ob6M%hr[ɾ!e~rC+1+0Hɏ03+o:e nC;P0G#"1j:]TXR9$o4:+H̙DgRY52 8o(̙XTBJ;YZ0ee!C!v١(_H֝qh)5TdXoJl.) ʈCC6" 4B a4l ~Zu8jG@ȸ]"ۑǁT:/4?X] m4!YF)}Z?#eq4Sh^)v}Ln؅O6[4JCd=pXc4fh:$zyWuJ_JqnvKN'=2qʓ]'> X:K VӮF}+ gʻ˂Ed,HYU@|jfx{۠lٰ7zT}X  !?D8MQ8reBigȄ}rџ{jE=xi_E MnLg'Є۹L^ӄQ'Pn$oYʯ$Pv5)JzlIe4iw*DL1ksNv p'l /V'84O蝵9 ~ 7߽|z+tJ &=X8>ٸAyvҞ(՝;Y<4Iy=.KW+v%rhҋO?ѻJʪ@Bh%ڊ6ܦȗˤpSHN$ݧ,Vw/oDV=-Ү&C*7@էp)i+hQ4lǼ|G$`18lZ&"f]xfJ' s=dm6Zc=h[Vu-J܅?E-Ik FςGT?lʊ^{Ij$:2+BG~Bcc|igR{.j2|?qEHqzvҸ @0\cwKX >h%AAT!cFSֽ ?% \}0C_]>J%A\@?ݣ͢~ \ yȧq"{^{/)X3/> 9;~J3'4L1z6D#J[p +0yi5L.Se0盠(7>KR=c-C&k(c[qp|<;]FL /;6TMx;v++|:/;rs5̾N&%y`<(wK2`v*qu еJpI+| ]\Jf$&2.,AJJf_ u Q{6A7+* ?Jt RڃLXJP,o4?8\ma>@]i-a=CS$`W\SYNe9M"/Om_y9t(?:U\Fk{nK %+AҦfjjh7/A~qq9MddcheԆV._"4Qc=6FTwR)H6İ+Xcyme``e V*ڋb.Vo6[.<4!0>k#i&3>A% _[~Sg 76\C1/>4ǡ9&+Z(/mA 0\$_vĄiVaOr8^SGшhX"~D%!ͭc3q*+ WZad}`oJNf騴7(RKDD~s3r: ߎc${ݎzam,a\@9Z# /YFuZq8׸u=-mfpQ1#R/|#^L >BYsgl;l4_y5p+G BZw]׸I["Ö8na%1hGWLSudzec>ժ4+7R;? )zEwC{~[@j!˛jl*AE '.Ŷ-?m7IqP^ Kxn_nEe']NN|W6#U& Yk=  ƺ~4k/%aP :{o 6 \[)󆫱q!ܓ X yj+!0?M݉^S`;C " `±~*bko(4L2CNXP+ȡkVU{^Nuc {Q h0LmyuM$_^-Fd4eBND%}:jï* D[J-_==,?lihO4F߹S`K;~| hsd9D¼r/ƔoC,u 6 UhJ=F$/P=Vat `YWɋƑoC0!k 8 42i pm R)5ᚦ4 ȯCC@Ɵ,o b9#(ΑL&`!f*użDGJ|lQJ.b*7]S$.uďCl/"OlĠX.?W:hd!^֪D7!WAØX ϙ&_"JVgb &?V -Zކx(z}-1|n-JN3"l=j>h_h ^U6)V5z<#blsm6,&.-w_Rҋ/tS wԅ$۽)tyu H-j| %yiSܚ^tq=*1oIH6NmVI**%tn/+7dp,J/ j^36 {md|yr9RMc:,%2QHGk3*9D:-d%þS3 @=lU7-N's RF8XAH3(z>kI/Rl|~Cì6_eBXiQ]1nqPJLp[qKn'{Jk5ʒ C#d{A$ :v;#$'"-ͨ@b{(,*?[9[Jg2nbޝVcfx:1XyC4}]&ܣeC5$9s3ua {V.Pq PMpՒ.QW^G$ %^]6kg4Hb mT73lK&^bp2">C3EMJJLr?չǐPcCgt/YZMu )88^U Xvc"ǗeĶx/u:Y;yRvHZ),4(a7rk1|7l6 a$Dž][lW=&8Llw-E\uRnA`ΓAa@Vj߁_!;1hdhmk$W~ˑkI>F+pِ=[}=a.["?ih5!JM?^&[$]tT8bsMu>]/i*_[IP{"ib!_HNm,RdZ8s\1%nR-%5͎:ij@u{~;W*4wbut#\y*u7_n`8rڳUsyd}AbrNyq[<1 ^CM=lJ99ݢ~qP g Tta1"v7anWE @ɯk&sUF2^KTlD!bJf$ف"U(*꽧p*EGJ )(l3v?{7Orڽ> Bl%f0J2҄_Hr\A#indmpr*Qm΀+X-U{5l[8,1jĖh6ff`$:ڹ.!Ŏ]Xg秾. RC} SNeIz1"xAXV1 7 &`ˋp͆|`O3:z<\}*z v<Ǿ98f&p0{cŻ%hc fڐ+)9ˍ{ռUQElP,h@@ K$Mk}Q7(r:mgPwGXp*Tp!{ZB $90BD-*X|[w<}AI@)xJw5h4gvHR7BY11>n \s Z"uΆ`[1 +_VA^ôIE6 >Uh"bw~n64~s`$M\gQްaq^'̗%"i{48 bX y!G94[[i*M* /j9øJ()PZ ^ 9轰'`!n8mk!G<8_:OgD|P?MtwLލyGư (}؍!_H.Ͽ]K)R7a=3ᙐ$G4Q嗽@ &m着 b6i#{Y7sȹQuJE$74sfFxux룄AIfl[hX߫Kq!X Z^U)hoMChsX@"Q1b͉6,.@4 ᆪ`S/J7! Y@[l-H-7;La'19BFw gn!a5WR#8m 3?Oʶ:#;+lүMJr`,gv+V[y!v@5g+[L%>l.F>KORINw(eiLBӒQE`}vtU#Hjs[$g^'@gĹ,¤'.iߊq/٪7;#˦nZU;ͱj_#q1HDb>,'o&WY6?H4Xam<'C5q-Աҳ0KQBtT21WzR0J#tA{d%aGAR:Qx8DgaK2׮v Q<ޭts xs/chrߍd}o/G! 9E߆Ns:NY2u2;cXFM-W,0p&N$iOmr{ fQ~V 1uˆ{ԁ>[ՑG! $?,{;c@^AgIJ6jR*S~n!d!@O7t[SAM,7r ªRl# ,~WZS=-:vWBb[CFh0sE$4CH^O]lEٌ%w<똴X^?X6%|:.h+EQ‘nGZ.depF )X\rCk}vS3(ӗZ{:X?CoFĨXj/{f$1e~^+:`+rw |?n 6aB/APR:N2UUE=眴Mp$; YK ӂ y/!@l A+1jt.!BiFJ 4NH[L +aSjF# 0𰻷3Z?V/+z'zR'd5,S"Dl2MX3%(_HU'NrL]ҟeTssTFaIَM GyKMYW).At]|ڝtooqc&qm^o,͈Q+8p? nCJt2EnMNIpCe5=_@K[dMˇ}`Z1$o,[wI^zݙ9!@}pPIfcM_#,2̌L80`:ɤbLq(6bߞPknkFF,8gcF/e7r7iTڐ-S%>~tCL S\HdFm㆟ a>yCۏ \;b)Pf6nv>Q(OA #d! <%RR^۴+bC]\ы8 @ge7S/B.X/̚B}L&QH٠zUflXA5R[Xʠ1^h5h_W=NAբ{A{ :@ 'V(E6ተ(P+[pԍt0q'3U`j±|wW  6`QR.4 zɅ"Eqƹ|\$m }ROt>_aG̿Ώ{3 t1_.,A7KevBKozyr-#h&D[+*7(sNFɬΘN#(:CQds0Rv5 Խ<mbF?@-Ky+AB*1E-ydRw}q/>Q +`I,c<'Z8YuέL IYߜ?EQ{& GV'&ͫ|\kS/9! m\?]Rғ/!N[Ѹ c%f 5 H(wpxV)̠1ed]2K Ӝ=n|bʾ0 RCtb1w d!V9*VH%X+1YMuyi|dq6 Vo8"#SNEMSru˅;x5ܧbp0#hi 6p.=\5c?#[Qa|LoqVvMDnNM*n94Y|P]A͸'TuC %Y<J&?[Ţ/43ˊΩxox&آs aY}=?q u!!*1cHf/Բ٥.%"ꖣKR2聪y~$*:I(5n# żDl:!prcDkC*ٙC` -{-3+Mw'$C j9Bdtc޳fȄY1>͚ .55cQP?[dF38==j<'`-%OdO"&CA Cie1uʏlD7V ;'AK)12(;oTZ;Wm|~U8?3I!+hx>.devcN"pFϿᕸ' rjI`_|6) SnLf)3+ skH.^.ۑ1Լ;Lkx?vBB578H_&ej</F{OMSvj,b(]_#?@8JL[1]|\[?IBGe `ڗNw wW;@ٮ)vk޵>4Y-%1aBWSttf$d6:ɷ[@8bhc8.Mp0\C8m:oK1t@NAx0nHCv:>Yarpq|1-եpk-b"3!۴@h!6P҃6a6눉q05d ,j|;~]#Sؚh띻5KR$YHXM4!S{]%]\h^o|Gh^)*ޱ7sdA6BuYE?z#q_|3F`sn;m J1DAِ N~tpv\1+۾{q=9&3 ܶT7Ca†F.oL-}_n]M8jR5q"U.|/0 ,qnIa^7jI X4H HKO)X] z<(^^suEml?SnsF n}>x6:9)=bSq~UMlzfĹlvvR.׊vjĦ2޳>~x&XBE^LHf0]YuwsJ5(O^d |V I>g@_D@cm͆5ds_ZM =ح(Om:6{n%bܘM";ߐ5sRR4Yud⺱[N27iT/1xOS IP#r= r-( CV(XK2́x:uKFzâc-0Sy{ubIٷ$u8N7/9YVZ^r1Q ,gU]w*3Y| h-|`$(OšоP ׂAk>5"eiU2`PM(g׏>qUU>4l,]& U`THdzܳ`'+`>ᩗɤkV'jNJ!!рHU?{d)UDkGY Uq9r&hA^ؚ_3^N$nL޽Q;c396m_.Ql(l+|l+2_V",lgz?/1N @h Ko:h_#o@VDcSP;2qOS;,%1w x+P83~ ߎx4/xHMfllȥ7r]|֣;8 \FdO 880H`JI׌βq~c֗&pـT cڳoo~)M^8S\{aBAH 3`#77)U"Ԣo"vX,"y/ʳPSD {P<(H!=ebY:[B|:FMN;{jxyadRֵB Y{U/Zד_DYE>&W(mHW:cEg;`Zє ̗-b%>"Q B<FOk!.~܁GN*m|\A@CYbad3Ƅ;,5]dO;!x鰱"mHS 4 nᥠg"\u.yi% ?&IM5avRM4ЭuMVK>JJEYG-V-TgniL18h ~ñRpWvZ<#aN8iJXLeal(ЎRufr_ͻ/=^i͇n^Xa,x=>Wc~!tK Oy-*  'i ) -;_ \XAPќm^S/E?[GHL:9tԫ(g݂Cʕ@?3?quP09ԤvP^Dޓg' &(d♺{17FٶNg&B4G6sy գo˂lu%.D1y NWXgz&{J.NJidw(\6,V:у0o4dkM e:󂑪DŽЎCc؅eak1\$$z0slgt8چ[R|i(fX"51b\ј:+pn4~S(ivzdS'ǑeI⁘H8u_G'Y* moMb]S$$Sֺ;:Km\L"T| êV_UHdnw_t('n6)z> :[kl62_'aAO?` SB TG4MsA[dI_h#9MRi8YVg5AY>bË+ +E=/MYtqDs`:0~q?i 4HW A1TC:uf+x^ GEHܡ!԰1 ٓ*M K 쎸 M2wixl;: 8ߖ|L+9U\רи(kP&Eľ[k7)Ay˥ 3Ô|:~]\qvi|'Vҩ \ oBݙVKOu}ۇjضBcHvo6GapK}8z_n#~Ffk֧YmLjFT Qt~%E Khw`4 /2:q #\ۭoI_#W;\yO s *&#G x }Uk$_ʵLS4JܛE@>j &-`ٙ3H91XTzU@EMJa{~ž [m7lM" (VxTr3nڿޒ㊥wjWKDUlKKHk-B1 m!iїM{&-OʡZ 70k!zIɚe{׏3)CL 2.MϔLK:/[%)]C(NsLgDn h$x}ⳜnwJ8T!8'(=w"iň2k-H~Q6֟Bf_""rIळJ;آ{BeeUv?}K홳5`NnGjp>;;_YC{@%vʯOrNٸ`faތ~Ƙ7w?13[7X0bQF Y\->_~q}gKƫ YZᚂ S%+|{*4Dz^FaxV3 Ex7C`ghHφ5rі$;E6YuC67 ׌=_&]#40oEVLʒQ+j,6G k–t`€/ߏ be$D|+URF+OP۔L"PgI|ynaL*dže⾬@ _]8\5֚7xM˜K'?it]0޺ML+Ǩ"!84dVR&曼cK?{N8C'4Oc6.tz`FhVZy;z5.Kwxp$ ܂; a}=Jv47w#T>/1!;alaq3c^/òeQg, /ƣi=Zsԛңk 흾^Dxȕ` CD>äH4 $ro$򜘊HF3{3hc\=e޶yx76lF>,ɠ-WaR^tfS#t Ra7aq1}9tuťMtMĬ6^4JN L^Wk`RG>)t#BWTd֨a{w U _>=EBWK38#?D;B-막{QqI77~GuNjx+7Xܾf `*ϹkP&Q|(2Og|i$&rÈ1tF]db,RB%Sw?NF؞P(iۇ~,v<iOX=&@n ʼ; eDXXufYgj)7@1Et0\,СRkKY4z9_ S0^37/z%FyŌ.쫫R75v j^M~rSAQ ' W)sUEU]f7֒,I_;"Z$bNX9q4stmXN { tg{ ~H̸cT1הbP&OӡXmjnɿ VٗL:gΈa8@#;z\S!sp"oɝr{F~2f\M %uuOCB@*mza&Gp%re jd{jMt@V}! =@D\tw`t @tk XδgM~!عJM_f)nNAؑR*reՑpo0Ԧ+_AR%M{~=c'+<%4盱w iSc?gD:~{whݳo3)ُHܜM"2GS[bR\4qMMH4/B6h:+9酺=% &9&\DO` LE|mTi \su&pC!IyhvC/2˜I$U-٫hog*\4)a^O% ^1/q^tD:L}I9Һ7EyMyw|;{Me-(Edvm+F69=!̐n.Й z(נcV>sTb'}H$:l~)tCDa)#@4qJ'&IΐV^2+?nA+iH&~pCY%BHѲUfOw㲽;[wE%ŚND>@Xxa}2Gm ]FA[gl* {`@ V=\Hxi#%|d s-A4@=_o%I4<@; JwC(S֐%vǥSTH`&Qѣ>~qٿ گsOQKq}~kft<1ش.nl'?:KIHftŨ r8ST rgq8d7d%1oHP %D3#z`(B~~_\p(.%[*q>lMcیLO>L$qa okvGDo$+> :C G+NHS%nWPb#Rn@A~^ eh'a7XK%GOX31[k>&e7t} 1d)ҁ\O.n<¼o ff^ӲϢ_Ei1lqr e ^Ԕш[\ ;_oeR6`= bDA$1LSċ8Qx(,ds?u_<(vB˽"I!ՋfAD)JNmʹD,0# Iiyz0LsőI$-̤O;/ LMqrҦZu;Hg3aQ\~Op֚tIf]؊\9uC D~&Pqք_<}RlRmЉkĶ-m%*Зy 蝧MC6O{CT$'SiV'@\5}g4rDXAw9l$V;o xͶ }:c9yq#aj]MoDJ5;7ף1p9.1M,%}_di[Xt%I]}o`]9$&GqT@ |^wn槦Z҆GrUEN`D#Ķ_զԥ@ִ#0vs˕U('+;rQ Oh^/.>BJ0q&~rLb jn87m7g^I |`l,! \џOc)ngS`GaeXrR S ˰ fWPeS*)4[4Pa,Ҽu6av|mi[D|mLH0^T[bʿBi3>GUCF4$<^(<<a_FE"Ʈ7]Ol:SPҀwJϛqYl= Kҭ(!_ @کIdgYD `Kv-?*JOOvgv 4,ڈ‡?{nLxi(_͜6B&])i} v[ngo%X9GWQ@iP b& =4 a$yKq&Ҁɥ@4Ug莫f4Ac'ᔊy:J52X qn*A(I/Ns*.v5 sJnVbW_?cZ:(wu*L)k.£ v2)bRPTy-k0;:+hhTaD8J'#.((9y[xoK}PAW12n,o H ;û<^]i_zR/׌ -3esY%8`7]o VtǞԐXPZ*sr74T1eꤐ LWm,ܔt`' ڂC ? Na 69U|SɕyGPܩ6DDi @grSqa3Egv 9Ȩs> 0JL%ҷ%`" أ[c-Ϝ0M DlΔ˘xmH%|̌SxQϝ&aK5_f3;ADtD4?L$=| P$[6-PWoE$oFuĻ7Y4w%j#zs5,2Od"8ÝGUP@(WMRi0``ͽޱ,q𤝠8CV,|5ǐM7Aαfh_\#pײ86i=~2 Izux22qm(R]˥VɭLqx;)K*(\8Isq%q=ŁlAټPˎғGm?'Gn)3y"TOz\\{lBcf|#N1(B"eq]UAD>[+Hi5!H3RDc={#8Gx2xY) S~Ny('QgEӒn`x+&L&rѰ5p4Aš;@F.'=m'OQs2Sh&B>VV5Z=sdJMNP 5IqsNRU@|{ aU\`Ad-A#@M=$s==q]E'?HQ ~y[x 6`.T f,Cx<ƾ4Of![-?UN2׳SMB2-|r)2孍PBkvKͫϰY7y{kE^lUlO}ڡ /E `<.j3BP."#|T#is$>ߪO1q _d@ce`mЍӥ2?gΩ^OӛQ!o1B&B~]}LpzBPŤ>; wV;b 15|aL8(Ձӹ,6PtKoy6ʥ^|o7 'f4vFl"A>(-*S8yN4BjsRW_ Wa,I"!zX rdTUn$@(0>WM+k`+%IQ]=c,V5Z4p}@qq|UJExS`C~y4#Ն [ S`]95-[z/}4.Apg:KZkcxgyદ;u'S^/v:is_U냮~hPťry(ݭ &,Ԛ]~Uo9#7",WoHrf Ũp@ / v v=3OjUΉ4j,φe‹LF_Y7x <|\oKt$plV,X|.r*-n }kiPx5-CVxqn߲CB!WY5p2ɺU0w #_Bn`7n3Ulp0\;zVZjH~O[|ڈ?*yWD=:D!ۿR[<[J&si=HVvnJ\oH%PFqΖ8Ɣ'"{D7A||)=Eg=k;w'G|ЊZdVfm<M}Ӡ+.\ H#zZx"YYsb04&pJjF@K&f9E+ykrj ݨ;7<]!FT q'k@̥m#T$JW)+3Ok%C:M$Qr (sIB>^˕xz]@3mԬq%3Y70vS[@%s# /]TY솅>ܕ^wSf5P:lE4 6.Fq8Y#*^[AR%H2"# #Cli}t^!#'ކ}}L/~C@bE\:e| vEص9kFTyс*VKZ*C4[f񫏒\vォ qQ%J~|c\#iqh._`ȍ"db@YڃNep ɢj`7t/=M'N7de 23IrnW(-\E;k{ϴl8p|Gw(Y4nw:~;^7ɦ2idm+W#5OtVG\X_*j08`yŇJ&krqʛ[CWP.ZtXlQ/8[!-VyA2!q94O,eᷴ@,ˎ7!thv%1G`hWߏ3:t'mKqj=hKF @Ep{"XtØ`UvPxhw? Sr0I u‘oA{3-%A;@GN/cH}I}~[Ù\u8)[ KԐ`tA" -?jt^o0<g3LjMuս@"nvG[LjLܮ/Q+~M1W}Raoa8*q`wDռ]Pjśg}mx:?sz bb q_Wjp.䥦L1^`]c%KL9]mm f.+Te^@apÿE'jgZVOI8_ɚ$=D&]X52DD˳yPփSj? >7GO "k'gt$|ZϬ:\z33ڨektmS%ne#]:JFcKN/*҈A&fҥ>^sǫԘ `/MEJ~GZ/nhH}>M՞{w0Z(Lr4SMKժC8+m}C:*+*T}^MF_d.ᄫu nF g3K4B6Ufm03#p#MCl4Lj `Ǧ E}t?2JũoE+>q"k3)Ň](Ʀmy $82:xfZH2 .+SDn4J=f1j1L*meQš}TJJ|\i{/qŸO/mloM"ᥭaJz2 Xjً*[P)K!>a5Ue;gCEnơpWM`1:y5U( Jl4]kXgHe^F륧u0&LIMػ ϒ^rWdV,uqqv%B%ĥ~;p8=|Bm AxQ3q$p--&#Z_a@ ݋8GmҾǯ>4K%}v_#5n-xňP]G͓ X#꧇ؒj~4z]1R̰yfdd |1I:-ʼ"lUV[1<þxQi((okDpq#>5*ExR}:6!)CV4KaI=JS)5[rA ii9N{"i=Z#+yc}}!LGnc0aEp.ɯ$šq]+l q:D>kd j.`tڹU{;7x.O$oAl]H+Iΰ|TK 㳁 uҡ^ҝURz-7) , |W?m YPJ_ gaKa='Y8܉R??e YGJ)ߙ¹q^@PAND&hG}!XZR[s8>%K/^!OW ;Q7[jĹ.dP8!R.?Z$|8A 6ܵ*|_)R#øxpIɽ.ZS,j|QޒgyYs_"WʼXs*Zo©V{<ڌ#;:'?d2dofx<% IS!a@izsWn;t CM`Ur$}K_ 5dp tG~#{EQt*$ :oM:xAUM3ĢQZ h7?Ns=$HVD,9ik0s+-JQor^ve\ sDr6 uC魷KʆK_wbf5S r4$g>zbhpYe[:~ S N,btjD֒tBbوD^On4*3}zhic3cz0mB4OzA]IzNҴ5aPYr1,:$0OMj- 7N$.J4m0#ɶ'tH\76#_*~M/*47 ѻQ.{.<xN:NWp >g2q6Y~LvNHSط: QR: 9ܚ:.u;n|\70_懆4a vw'^ x!D틁;=6,hZ{d޲&N(䕓mXO @:;~*㆒jT2h͛GS~v `2nŔggSQ!!Bjs94,v9svN>n& zlDg(m IWLJ&rSzG8P&3α֬~ mc+v$vCgʔ˺ 4u`u*wewnbJT.ұzcIa&z{]/-n3CduvƆoJ9_,&Rh J#WoȒ`n<3z#fEʟf ^*`Nb@+Qu ~(؏᳖@­3)r{UFqD&LW{"=lsAsn1-Uر6bC ('?̞*QQ Ssr;U]|HˋPdaR2 D/P_îĐt>)ҭwaQi Âg] Dx5\Q"YE2?Ή/y׃c]7wf@ph^C&N`u(vFm):*IoaɭɈ!8 5ٖ=PO zL$ W3: @ݰ3|v Kם;Wo@d7Gx1v]rbg|ڢZV=}Qpђ&C>0i{ɨZB&̿_<.ðJ+g[?p9ȌP *f߸"o8vF*ōSX&w}3D~U PRK#B!"|R$@IRf.+fњ{.*mS0bɓ#RQ裗&{]i]{ńFĿ&pcԶ-֚YQX>FYIS-SHTFHzΨs߳K~BcõXjx)I)q f) қkJOfT!v ]W;ɱ*mԥC ؝fp, F^(8nڶtv|İnu &&+ӕ&C\㧓TS<Ɏ QAA,i)2XWo y~lk +s%}%tYSABd)çfUH 2U'F,$AE@3ǑeOCkTt|_eW})(e\2$LpUC8\Lngkخ͓h%YDtץfC,W~˫^o8(SQJ8"=UWEiIA޾pe͸lE#~A۞p5ծaW(Дu}2/*=,R:Cb`KPX&\tO5;{;o$iɕD0ruܽ)qݜDP0~O+?O/DsSFˇ\m+B}VMH\<&X>I,%Ξ+ጤּwE<xV!gAV'tTK=dF\:xk!m!&@t:] N9tp. :ZwGtԍHK/+Q*#P!yjux=_dKw9F:t {-A%M0W_}'X >e{gWǽ!g im u?7&H*= (/;-l4s ɇfЄ!kmХD {?8mRcLGT՗ AV[B/S Qh3Chg)?p 8>]q}4&AOj_GU?859FNVA@rHHh?.iE6ZޙsZ@vO&lChPrKxkIQ5*Q@KZ,Kϫ!NG&_C:rsIqmRi)c$gZƜr/LZLU[O*L&oT&˻D'YP~0W &¸Q\'M5o7NtOmyc'O%:n WtWKn `E@KV}@,m Dns bV L4!9+1Jb~gM@I22,gN91uRo+}fcu;K[R )]Dи,LjZF]&t-bn$)[zI;%]cIO7 :TWb|'<'Q*wGka( Re1 m#LJ( m~L8&_X)*E`4ϔJߦesO.*P!ٿ 1M^tz1ثAc!ϜZ1&VEYy8Y~klN24IVJ+ݪmg9{0D^&3Z}l#o@uYBY8tC/%4OrI/$qx1k`neVپkT(Xi) Oֳ6CM8ټvt;b!:;_Y Ϣ4ƳZœPWlo%`W?krX60`h38(&dNC*^ P%~1;Y Sgz^T0ñ7iNDlqw1|(>,BƄb-a;g9T@-:bbbؑ3!መ ٿ@'bjAXr P_]j8hIgp`jXZ@ͣ7HM%'^s9Q$ǵ|_vٽ}Q`0͘1Jsm3{X H3׋P{YpPg`ɴx\+VKoWKx|]X\VmB-P."aPD7,ƈ,NMHyyÑ#@&EDnх9ǖ QlꀡQ59SJ T*0acpaO 2ll (HJ=sel}JsMQ"U3!J#QG晿=Ai"RcqݝŰ_pVӴn[x+5ٍ-XE)AkjDM'1s@_*2}2db:FaGjS͎Ie%H`ѾţstSİ{Xw#! c碌߱%P*1A"4̧ &(+.Gݶ7_`z gFա3IIz SN2|Jj}uyn~Ovtf:<O|%-D(ʰ>/V`̚7}Y5Ϭ< ?Õ_].,G]j i2۬o+-2Yp*\sPX|fE4 >ROh4먴φϿҎwLdTV@4R2wq4A}yY鳆ښ$ e"Up9ڈQEtxv T%K@>,BL jU܎&ןb d)? ^l(?,,H1Cj+4`3k4PpT{l1\{2TpxTe@70Z+QO4WdC1i *X?OR%d%_*ɟ"׻S{CX.r NWd,p :0bƭ.XMܪjiʷ ZvF_xLrf1YM#Se5 l'˿ 7k,@퇦f랃Ic}#C,ģ ڒ8}y4V^IccAV%, ;C>g B6p+t]PA"V,1~oIcJfZ}ARh"{Q0#叹sIA hۼj+ۊfnXk 1z.Qr n!5cmEVSVEL~ Ѣb2gS21kՕUȐ+{M3-OgȂZt6"5 e]jbqBȨi,lU_zacGb!#GoUY&܇AG="\loܒ23JT(=!.OrQ!bfeJ`: =-xT; zGIfm@\y _ـ0'2l༛xKM.+5͝'j LXfRpu\Dw/bvv1$7Q(ʨSEi\6V ylݩkD~)xpSx@I[nS?7V^D@jY2~bo8c\9A. 㴩4X] pI^zUPsf8I8L|"M#fRsQ4(eS2;WП8o4a pj`VIcɱvbycӀyzEGyˡ|]PmԠe$ߥ1)Bz0s} .DpK'`΅Q>> |ld).Fr 5tKΜ'FbDy"%:n쓵 HRFlH[.*ݒ,+T` bQMmx_2ho1W[K.<m z/(ȓ_P-{2/8tfo0 4yӮN A~5GkhRM r;BT7ǃ sm A tJGxBXJ1Gkx ޷%h{gV;牅p09g0Ӟ"&;ŚW/DċwZ*56#^M+^nrd /sM֑"hx$7,]P(ğ!Rҫt(mF` K1TJ;A) -o(pa.-aNX>$:5p8ek9dʁ$KoAc`N΂Z"(3'1 } ZYGxw|͎WVv}ؼ"';2;k bf iB;y-ϸ#$Y^芩ldt: z0O˱E%"P%8ȄʹQ+.3
YCxBXq]@@rj); #e."dtUvCWqj|NENeDҎiFتt!YCv ў8_|Tf(˥6O&֫ ¡^^#sh} ;=rzIYJ{Ipgt Ò[<:n4~2~oWbs?Z/;H7|8] ? [b vZeZ6I[z?'^nPjwEuYZgvR(PY8%{ v+HiOz=R ̣ztyB]UAlwFfቱ봦޻ \d"[2~B7&=dH9NxfT 8 .WJ(.6S-hIԄY4 ,&o@1Ψ$Λ8Qib yE$Qj.4mc^].8ڤ3p/Eʟ$OhH5 ьf}_ٚ(GE Pw2C)Oc5[# ;b!?Ƙ;OοI:(:cUyChTM ،t 7؊$J;[\T _6:gOpjYZj؍}8@12" _ܗC>lead#K8nbz3@܄ HGpNX.HcIhč㽝jSu,# rB-C? ߀gtu@U?Y7jHњ,-׌՞CB Ϧq\SQE--eunJf9rp.b )o%Ճ,KRRvhXBu^E'0?KkuC Мi-"`WBSWa >rh c]&r 0.ߍK-|2h5Lx_H#Kqr.Vϯ)dϘlMK~hY1) m]1jQz{2Df@a=^A-Mn\eY77/\=N#?0f}uR^*)- ܪQ8;Vj:iD(#Q`캹#7"aMA3HjFa<_ɱv;w§v# -<DO0eV5S d$% kIMrm}mmE6f~|z{."n. qw᲼(V&< w .=:맘Р= /k9ʨdeQrh]ha3a 5[{DK޶0o6\؍ً֦ŹDrldkxPJ ZsY8g8SNYV]|SAk A`?Ĺ &0LT zxqGVo&l =aՔ-).GfEm>Y4@1C ZMsfr^yҋKڳ̺ro>.b ,LӷD .fEjd&͝9lAEBcYk}EӛK$]i2OR3>ɯ*M/ZI5|JM)(tlA~OdQfS?(|j>@嶴 N)6<; 8xmAA*$]@Tn-L|j'k0_< ;8;E; DEU)9Xl )ھ<1em./(j87|[϶2@r@8a BO Iu|*rͪ޿RUP*Imq~иt26+3g U^aTb2];FLO|sW@5O}،'{2FZl8le`YWIAFCnN\ :btfCS _/u4\|AeXZn6/ۧjI H͘\F6.{_26::ont`G8 +\ ̯= jv:4i~4=RBrE(fKaqZ٫d;⮖PVܩ( zP! SHٞᵐ߫"݊뚡]A< B|s8 ?]p\Gz_!ptGR;-Zd>ڊ,&.~q#aUDdm)cXGt;X\Z"=nORb@?XgЧcT#cpҘb~>'k3b9mίӽxwxiya>YʎnSf^ Sҽ@ibtEwl@?GDNdڽ?:h4%K6&jt#HpC>x >sr*2a#$ߓw2LZJ&/oY3/zLzkd>'.`#"[M9hIM 4ooR&z[F&< gW,8V PqlyRE6fyh\P1,p;MiQ/~2 YNZ"ړD,Snj%NeZ(5G-6RS޽9*h̰z5Nٖ܇iwHa2 KI+*_$娙 4ԍhIEP}mC|L -\ C}ez :-賔FS+KFLBE$>SKp) N4XEҎdh*VѼ]{lJ+nxf;8SUu`ݽjeM _ax YrD#D$Jhk_\qhxhTΨ 5|Vd;e. )Y iׁ#{j]dۻT -I$}TmxLA瑔~)/5Ź.S͏1NdѼFRf;٨ !RJ( +GÖIW L[q Xbƫ͆l37פI8{M.Ο!%V6IRogPD  7 +yBL~6 Wu±ҋYKp{UrïZDҥ'} }v^Q̫kR4Q9S%X4O@uxCM3"eн0Ha$5X-z;ϫ 6Tn}C, wt4fDžs?o 0OI+s S˔`:c@}ẔeH۪႑B![ md&-#FD_D#pɝuJ[sk>WҾ̽x't9ظ>N8龷C>$cF-N;_-.UZ0pϭK Zf^6xq@[?Uz2 JyRr֏(`5^ 9/I _yZ#AzQFIA?<:{r肢xız7Ruٲ 'Ց)Rk/Ep$.}D] f8WEjU1{ XːeQ&*UePA if7 ^u\1[@rN]gAx0 ;wԙO*R@DfeRⰶGwGٰ"mⴻGB&N ?qڱڽj[H}2 u^-10Cu&(IY&HE/͙D?tl$F#Ptb0Pvu(+vG-aGٌw6:FD,Nǽ&;`5ni:ʩ9ETI ${ z=Ù0]C ;cR}UؒV vƾaVM')T ۇ ^#{M&zudp (Bp;ߌbZtsVrmrQ"wB\&Ѫi)2,X*Mc˩ؓ0qQX}^;.WFJDMu]mh;[oq)tbhи"j= ?a&ṔA@Fƍ~f tsf49|k ˔S-l@K"1y&8VW&=7aQd9 TJ&~h&]6mhAN>EOjC7W|<&>e0q5tوW ~<q*53uR{HGE~j(>ه1% ^Y29wtJu'_a[5?;#! @V&3?k4a;7jнEʹDT߼鲡^N#[d ̶Qa517M&kSԕx7ϪlJdqgYr}Bо!Unetf:1e/?s9hC_Vgc v:v(Xzwb\y՝>rR }H؈W !)_stXT5DY2lo{7bZ3TxJe3Mj).ټᏠ{?)1 GaBܤ6O Zd<Cv@!k*[ !b{bɏ7@S2J|"evy<%PL$yw @$c)Nz[!Bg;LZ56m,sd,Ek*GhQPcp P*RQ Fݹ!s;& ǝ{^R 9ʃ4*X{F֧zD.hI^iX㡢o-;Am_?oy`p(2?V3n;8|Yt).\aD2v1!U8 ay)47=)kA'ET<v`,0|mOpW %A94/234 ݪ% *3Kl d錀&鹹6n P)*]h7):f 4ۚ@)A{<:w aQu~^ewS/.3ڨ⃷J{e4BtC᝷jkcfv_ עfŗs#UH߸,EσmĕIjqsC%8e DAh Tl="݄ $+GӍv=P~7JK$YʧnD֙'W0T1r.&V/O9IޖV/o6w Q^GY!S6hG51.u)| <$uU+8:z<= `sސN&M->FqBB,4a6/v\T y#7n (a=e,T{p4)Ch2{bp_E1(qJ\xuĩEl]%1@I~YN;JgPV#Z;pnLhvWuS0(+s3YO9Km nwe3Gs%aFpunp`dOyَ!|h'r |n&! , 'QXu޽`yV_m[TPeV鰊3o)IJUH vC~0=(=Ly?R07TOջV7w(_Ğsg]KP։%e\1ؔ/]ck1phD&(Դ !ajDE)|[`WБ;NT-d_wG I Fyz0V6ժ]&N𖋅N؇eM`x6 6SB}#~.z4og^0V**GnCna7#rAa $ڻl23 !X%'وVXKE[@eTqR>GeRp[D`$ .{ESm=u1O+y'-9u.wtZEPf.B ]4$t~!.6ŝ%lS.Ai!f}#5dLŒXSX h#RQH0{L5?@&6 9^?Nm:Vۣfq QZ% |,1p+G` |)dKnh},꠵UVDGn+&_<~3ںV<ţT7gܳfXfFUT٠FFL+:Y&^_!!^j-CvQRy]^Kk6Ox {Be2pt7YMi**mFldhq73pdoћsL7lP|ӶxfiGxYHy2;@; d_ X zqiW>Pi}֧A,gQJ:N%|ӎCXnTZ&/6H,}l69>x]j)hӗ`{A.u6BP|`be/:l2nON3]{Mr#UnWN#H_ԒJy3~c0.ʗ*^K?am孆ߦ^}@] _NJwJ*x'1b4qm^r!!bh߸> d-&G5jt\7wRn Ѵ0t<ìa:hSceO<߫`JE/A{W.=< qz2ݑĵPܒ@e.6ZXm-f9FB];CN0 O@ǀD \߮k|Z 3BjVRcv0~cAzU(t#y,0وKu6P)/^PcVɦ0Gfe5@b:ԆU5rwY,e-*]}iQy%f zex8 c$@{(͑t}o#|i|CO$}I\X<[/>gG-!J;ŐeNJr*KJ9Bjof!pg4o| UbkOڱI`Nmxu>(V|BhcpY 8h?BZP6H6 +p~9 +qQ]b&]nz >hhvV^@I{x[_,[=\BFV-'V1^4T %se GoB#$ӑyޅY-Ev|Ń9f-FjT0a#^ģ1eO"63$90_ÚG $?gW(+h`G){_~pʰS3SՈA,_;ƙJ ~=^ށ oT qcQBKxsAS%#^.w\9*pko}كKqMiO%?&kp>?(*L&qgחD"V@ՍoIn@0U$͘}F w+Ƞ/f+Ƃ};D=b˓ -<ͭʮw}ҫ+yAc*,1Tۅj]tԏ3g8nz$BT CԧT(Ǥ;Ul>A{8h#?FQscJCfmQ~8=˥c +D xN[F|yiTcGxR@xKX#jEd]d!L< Izy!`<ߘ.V0Zk" _ N cqkRNO%h.b, )׏<"Io_?Pvl18$}kB4WӔҭ/ NI}ӟ`X΁#K 1oXM/1pU\FCw_..T}UC[4nWuX;ab(Z!py/q~,25xHh!Z[[P z:gP4: D"\'JKl >Y;"f~}9OEY6/ щO(`L(߷lBh#tvߊ+?P|Ö^Qrr^f-!,EGucXyV.*i#!)o£m95~.>0+:zbi鼮]FiPy@f14fi 2W!Fvh/{kcev>2[޼)pes7jP;Pr9NobE!*N"u{zU1X{Fi+o8eTy; i"wXp<Pt3pwE< h{;3HՁx@NN"%c%.٤n}h3eLy [pqjE޿ޓcE0ntX16 4=}F;o3|%̊Z6)~F@뉖u4(9P(XյG w:wcՂqԆ77&x;7p#{Ջrb#@m`p]W)^h@d%[I/{(NZ`r $Xtb=J5,้=EhE鈳HegchwxjzNL.%^ idu4r-;B|= s޷k@x)ĸvDE[ްmD*O+MNN{rb0ЅoY eTG ;F*D9R-fFx,OlQI4F+0ڗ9d!UB3 KYPutB5L4Z_bEL[;t,M3͘/=ox׽"Lm.F*J^)P|n^_"l3hoj)  !p'}5ˆ7$2gZQW]dxm"<2CD}.}Ynn&Q3;x KUᢵ16nrli/~@"3E)6˾cdFTܽVx`fD rftun hjkVѷKٞx4'%S_x`qsAX05֍V; c͑h}h#챢r < ~ho!kW\%6_Nܜ\v*p:똙ZQY1t`Jww= faVQ~Pda늞jq>Oə19XMvMhfm P1B/{> !k3e4S%`M41ѫZplnj}4|{}^2+w,V)ҲPvтW j8,̓&Ax N:z57 gJٖ2yzsO[XOL%S|>>P8*OapS%697i_DJ4x!fMH/SU= f傋j:gAN5옹!3O)O24CWhCDGC^,!AL^p6cT5ֹ`"vjvc6厧aS'Xs vl Bc2O-C&3ڔ߮/+5AOMPbpHy?QpV~L #QB!P.#! Rhb} MՊf;mr C8!pMY@lXofgcy}F iWݚ#&xI/8"{ČZXm '>z(g6ZłfЄNg: ?E}q>Gyif}9*'p;?kzkgU8b)-c곆E^L$wsWhp  2yW^dW$On)Q,IC:]gI M^QP WZ.PP3x٠`{L&I OW5y/`Dч||/Lv,E ? 2es߉db 68(` )I6ډĢ" ]Kx3,9dBZC#D/˖}Ux?G4v#;t֣k3O ݄(eY k p})baN'sBZ/K80#|6(kez)X<,Pщ|1)5?>-ʏLm1N:W"M+\Wqfϣoȝe4O?ĮFcǰDNڑLn\Q(7yZÃ>|۠=duX SE+;n@4TMWtogԃy:*8^[Uz*)C F!YۮOԶ{e:[L܃FaU![G/r_c2.46JkyET"o`"b+YFBtl+;or3wO{[۹5~½ޢ+68zUɾ 8&u8 # ?ygP{5QWl%}Nj)OQ@ ,>Vz@6|g7*=cM8voW\vK3X!V'iU=lTį!i񔵱yJIpǧu?[aRGٵQIٮ>?,:&%߲ڪs1/Ԟ¯A6=$5Io;+v]H2o1W!2#')1bpwek,ėFM|AQxWtxˠed}vWdi7"W(:H6'\76gawƆ.\dAsRz x'f_n_ˡ-xZEdhꭶ9C ׼ C(`"QD53^4:R'쵗v1F9&< ?ˇ5w_㈹_ g;wjzi˶@v&ɹjO;;mYLBF fd Or`/(yAsH Z`TtZ#*k$qUJC]!:?nᮖgLuT7H#i̷nFcX-8鴠*h[ZmaHlCӕo&&qZ6n)}]r{?qe7em`hG-D5hlW{XG(xiw8v{U `#B'[zgcU)?Xh3p*uZX2,8U%4˖1!6(xgdظOrH{ rݙ7>y+G#1BÍ+KxP=C8W /0lw">"Kjp;dH`9U<ÿؕg33$,ɝ"B$Fk&n+wP;1YSD\r5;ƴYx,_sW0:t5./R %a /T qc3LdWM/\ ,rrscOU}E`!|CZ[h|*q]' FДsиyIs 47}Rr\Z19uũ_F^\Y3Ԥ]\;eb OZ4>&VZ2#  wpg @.J`qѓ{ViD :Tzܱr4hu6⏗،$ _B7/SGTb042h$KAb Dh;߮b͞ "!?P=!EctIXnb#k6x"DejjL`pwț ,.;=/ܷj8, u+̌L  y.SK7io\/^Ay[ҳ'9u;>#EA&ӮL۔P2haV%uc@"BF^ 3p{M4+촧>p@5l-Tէ׫1\3iuS/iOWSBr 9}l,BudBa.H` z(?^@&~0՛pC*y^x{nj=>Ի>Ə𓜆&6}$օT ֹw/|*=@jc7.N)QI_T.mtu{$%;Pdr]~vn%} r؀UX*K4/i;d26<6Ziuz^JZt(fܩ'X6Vh,BNӭ \&f8{*U%bF [C`* ⱇ,i̤R{Lk>37 '8@Gxڟݰl$(954n|x@)ckv2m̉ws⊂ۊf㒅IR-1…ΏW_-[@yhs E2U*X_c),~ lA2Z&eUnW=HY"8~`. ӎ2B?,p% p;3i"~(|,W?a~ 'mm1Gw]CաI$5"A#"'B]E"  $lr++`WeHހӗ`UDJL_F96y@lh[Ȉe{;QG%|PfK! 4f¸/x6PL+3;I @ vw|!5ީ̷ *Sveh `U_ZgRؕ -шكe28H˻Cԭغ1nꕹ֐1YPc]HɳzHΰG;(Jz h*TP"ݽvbe6`qó]BCH/a֟֎ #Е ۯj}8eN] "ָp)-Aܵ\:?-Z\a[88#? xrᷥ첋5wͅΚwJInOCªEh ىj  ٢pF ɫI Gr]ڝ#l @]KI&_9]͞H"pFHjirhٰӵ[B@nSϾj C~L̝ۖ S\ \.B#\U!^_ Mud : 1f6R(h)H:g鴅:cp@HOhӑk;ASۮw;Xn ,/c#ݯQ^ѯ5uiX*V]縷nNDʭ&nM>W'`ė_s;>b&UJBo7Z\1%T-Vh*@)KX6E; 01q8Efm鍪i؞\~V5zŔL9 &z?'& r" 80¯wmS6$jPujPg],CN|DNo=׃AFrUX~* tÐ)تѫn+1d)q˱S.B΅;#Eove-X> 8a-;\/WND/iGڋԳJȪ}nO'Q@<ݲr-%ݤeAL;,:?1-K2"2-ORlHVIKC#<}m-O?=NGz;D:N]'t7#0QZ>Ku@|T],DG7Fz'{-JD7n:UCDNRl)\h6ֵdbUɩWPۻQ(l]kXqxcc#x%_DŽaR9}|7jd^`=96Kh C-RLh';59fY+ KF(3eݘh$߂uB0Jgq|Hmffsk3}JS(ˁ捹u4eln=cl\i2/ 5s;a Mz^Hke&=XQOҺAw IիG=pZ4|BCjSh9ʲ%gyv3)ZΗ.L S9V͟a"ơn^riFp5hҢ U?Bm?vIĺn#r,@X د¢Ҷ*?JIj* &%2'mԣq.Bsq5~AۈAQ~X30zN= b‘ßnn~{qÝ:yO=pU .96LiO;F_o=p1%zH ^Q9C>goQF5+޽w$/+  a Zw}:́jqIˏԹ#zc%,aKo_)fMqC=拑NzRdx>(9:"䒜zO>aGoq/^>,@S0` ͌uJ&6eUq-ZF3._ַ )e`F٭eD5|Xǜ] y$AbCQt0ϻΨb#h>:9uװI?YB#4uqva03:Z۬L( v}_}m ˖0$~vnmܝ`Jf3dzknyMk*Z 0,r!U07jt > .gAb8*hj0'pX 2?Z|#xY# ف-AOK0Kg }49^Aۄa|m,^Nid"ȩڛ+T_"A\7pF̳ q'ʌjFB1}LwnU z ɉ.d! \mTe5'5 pw"q&̏=I 8PH^Φ4;V%ts6E(sl~D};97qmzTO 0H+ ,[pTC@"<F iє_7/m(g+w1K}^Սiz,ېSY뚶>WUȁk1fT xG NBoO{c8V0eqC b|Gm>76Ns.\l2ZmeLi'gvZr1@FBZV7{mWOp[R +-v!w#:Vklcͪ e@ W-3,ʖ)ʓ.H\ԉ:L0vO03ԟвpe8gyo-A[]; ȒghI١a|K6, Z&!T]ybz&@T ] dsNDi HԪ A{}hKbEC Ak|a_j8g0Fاw2AM}Vp+ǮnoY( "i4sr)'pȿWy"@[]{~J#`J@0tg)3q6ݑ^AvAεr;꾨 p9W4EXO@y[2eaH4ja? _Al4J |2P@2"^WxmlL 3‡H(dɘ+`97 ,6P\ q,EE+Z. BG5 wVuRTskĝW8AA $Cdbxj/9AQm2{d*rP dp;>9sK9GfHۻ Y8-y|F7U!!>}d߮J'{DòHfK ")4:X|O?4Ad|ZdPXOʆ<չ'3DiCZFjCϲ=ljx\ug:ׇj+Jk[a 5,k5<Dz@Oϱu>G:c8`cQ9ވck $Jg4 jJU%9sq [mKRTS mB PKOH )Fw_NYwd(W~*^ƅe|b.iNo<E= vrQ(6a`!bV|&JU&9AǟٚÒLм +JRu9\"I!TvAGޅr/)#HPM*wOpڒ D\Rp\Iz&h+S}$#h#5 1 [.C^9zy-ɤ:-[ E-rxS w]1鵶w;.߷Iʆ=r3>w}v܌}vSA6rf:gq;v-?Qz XU ['vntaImPI1T꾧u>&ef7Dix.z @퓏G&5~Rxו~. |-XMJ͑?9c$eNYV9Y<\d ^2 ƙ)wtE5Rջ .U¹]Y8{{.|gT8F3~%7h 3 Z;d۲jk-z;S(zH=<Q|*3jzbpj&y̚ʆ|/&*(A#ze?Ӡ(Ȋ_ٷrLD$(F^XUKWÝ?p=ِlP{N_c̾eߓHU ',K^+1-$2-I[@0LPlh|<ρ"(0Cd-kYNFڑu;y ;ڏHAI#Ot4vƄ7;gld3dn7,CCHd{؅2C8wveѼjxsٗΦ: Í9{(L}4VMTjԡ< "`/kp%ZҭѬ_(4\V':6ژo^ [H5#*IJ}Uֆd+~1&)]hoر!!oXu:#h!X'g\\+M嫓d41Nyq`0ǒ n*Sd nMHE,M@Vhm UO)t=0jX1)g H]\J\dG G~NvG?oU5EϖH/k~B ѭfa,S&Wj4> z#9˄%P"sVd^zi]) C9跃:$,%XO(!i?j41s1zJ'}mDi?xViZ˴=4;c11-&N6hz$S7ÂwC _ 3hi4\U2*Ǯۮ67^葇ޛ\l:ͨ*/"t5?i_6f ;<fg? 霞/w+%G4@B9điJts3M]gŎCTRnL gP@"߶\t\N^/9ܓ4m'6\1o ZD3!RqVV}]n^@ 7L劀Lh֊U ahLK.:f0NpJw@QOU}|c/]6߫d?Ն&[p >d&65׊r1,^]sHnv?" bGJi'  ZKWݞfvYcRT_ g 6K)YQn }hȝ]*\ PXo p%6s]{4f4yE2w"T) *I)$u(}9ψ3y] C)wXqD )D@I ^@PhtrYK@Dre[%lXt}7'8sIRY[{3VI?d=)D AN>n%7XW.qpEHv0~XRR0AX̪7(߮wf2(2xƳu03oi`j;|K>;_RyXH$St|4ȹ/&ւ9[d_sFџS Y? }cm޶˄tDc.o6;0'Ȍ(ͅ[p`f\Iw{@=>:f `e0㿸 q:*Ė/_#B1?'jJ`!rK4J~rf_?c!m|7#I zF%6KKPƨI OgqsQ|ӊTe~_}4Hp2DN?] &ƌTYR6rQI8kH'OnuUdyx7;*ȡ7G6ž04 o(~RS1&lRN}JlE"?D A7@Ҵx+%6P5 E`LV8 15 L"[TjX)mNvc_01_b :s; !*σ %l'oXf&NRi ^QV 4e݆s_f nc쀇Ny=G@qu珞e|NM`g.rv9rĭݚ^MJ}DN)0fd;[Aأ"h"/Hbzo'4Sk'c+ 98: 806=~pr|e +I' mUu\h*,[4 +4Rٓ3RnbRs2YnG*\v4^I @ |'d^IHA=0Z뮺k?yQG&9I~sXL3wQ|di n89̜4Q{%p_O7>v'כh2cexȕXڒr/U*{p :(5&e1(0QhG([Ej_ Aš`57- 2I[ied!HfS۰Bb6޿:ǭ# ߇ra,鎱"Wo  P&N19ϟO^'2em0Swuig$ӕ[0'c A@F0S:U1\r}QVЅ Bˍ.eϺ ɕG^(Th*),ghC[Ӷs)p%+^ϬʗVSNL5 Xz#)e.YD 6ԡf[LvbT%My?ϗTJ`C61a2YJB ^82ѭ~*M=0V}i̩++Tcqӟ~tVJaUif3['9;y#A/ ;&#iUS/|1SZ1H iTg2NQk%2jpyB(Vx8 <??U$xYS{0$ɐ_0ymz9Z][m?n;> yT fX^ ?ZǘJ#gZw eR95ힹt/{K^P4sKX}þFqzo'I\_R(sV,fg#Y0lg|Pc~ Bk^'Z1IN\8j_9T?)N 6 ""%>`j6\?t0s⧛~*H6 c<2gktp fxD(PdlJ{LJa\Pg #8 X?'Ul&d=Vٵ66G!%yon0I~'s|8A0?Sv L橥IJDg^DŽ[ު';'rUo+ pӘ GבeAo ~$H.NkmWSގ; OeБ:xr$iJMDE(M޳ r6/!*N+!G 'irQbU}ںSN .8ߒbܔ&3_(jS9(kGfplo*1>oXz-Хg!Lݰ[ +{slԁBc\ʾ9NVB זBOl&kr72`bgD2~@:K*ܱq}rPK$ɒz#D[e 'ئX.(wSqEVL=RY@e9p&,"Xn^<ݫy?ʹ&. [ w\BKeGXͮ~Uo/rUn5>;3tLN &@] 1f";F1D{}e<˒@{}<dBMAQ:cM†k!-5h }0qa^ɵy%pV \7#<ƎW%6{C[ W%B;i-/~aNG7>uPV櫗 w,G>"@&[@ ݛ*5=~ȣΑDcǪQڬ O !ͬ:fe{H,37ce!D QLز8EI:t| 7dd 1b&{$-7G;>I?n) KgNlK^&>nb}%|46% hl;Jm.|&aDtŔ׳'<o#Ig> .ǃ~D׆~Z21z[/a'((~,oYqXu*a_!Ƭj=ϰBH, R7EouSJai}OhP+BIr:?3Z3T@eJ3Vr{ 85+dM9n{ \}o@vѧU]nRzsz#H#?x WH/;q2zZz:x%/EC{ƅ$8ؓbnQ- WB7r (_K*,a]R7>2B?t!dum?EiCn@\ 6nRR촔G'Tzop<ħ?%9îy1ԟT pmr쑆 gZ=28 t ښ\!Zn90xE(F޿=BuFxapX8*V 4*hP)`x{9!u5Zrӑ}'SW;siY7[e2lci'W+,L8<ԻILd5OI>-Yk 'mK}RJc J[o*"ESౝr2nEݘt8grEeЏʱF`GK=a.~F]ԨfU _Oo#A]ļjk8*y{ɓkWjˤppC{"蛱o ~ꭂ>^FҶ, @80k "֡C?aT^fR`O"p'[jJrf^T\%8[&XS!Qmg2Bu&x> kQJZ_=m/7pgBRBg7x٠Vzwy,(\.%HuwyC]Bi.%R apA:HI \<΀ޮej{nd(/CQ{qݢle![tu'DXj#mgVC7ΈD mJPg0#c6t ,Q%b%C5-26b:3r{RrS/o$MBu5 V=Hz^dyl&tg{LUdX5~xɳ%_X؟ץa:UsɮO.7<-&?:O52( D1c };slb3gݨO3PhޤHh&/[8 o磊8R 'o( tgLIŹm L^b`\E߆`Ți_&1v>}"^s(_76V{ЭoEi^S3tL7 <.V%s'XI7'7Gt$%RNuH#'Adf1z08KX8=DR:|<5;_02Kg!4XHIƠ:р7L0ߑ;98d׽%Z$Npָ>OTKH#?6BZA&/Wաt4w;J2߷ɱB=_riL[NnF%kxC0ǢӔځ07s> ??x' ̫,C8$Pvyyծۮi:jH`))/~exi~/B)Y?Y.=LIPR%z5 "l F;f3]-vl&1=%XJ[/Љq~%H &!I*!uwĺ.ΓrĝĤ ohހ`gnƱGݻ2*=OZ)#Zٵ~wk{W;_;rc̭twn== {Z*(uՑ"@(7 B2=mߒv\WHp<#E Tes{xhY}DcGbf:۾˓/i}OL3` Ԝ {n0ńkfqJPi./lS0KHزgɽk #Gzժ6X;5&VXSQ鬴[uK %#cTGM9-t8D6vA%h*D{}<`k]Q*~;ؑ_[R|zZ74&7ȥ$ȏ|ٗ] qWDR[7 /P=%R`$p#Z'OB?6h$,'ϽTk,'9dQs}Lo>tȓnjpȀ*vE$2\{' 5H^(Y+Y IRÈ;L.xp?Xۻa4v˜ZKV7dD K3ͩ=*®*%eU )>6P /.V%H#XٕJy8M;(5-\Y)xg)a4T:#fz\{o|u u+D\/aj#D:Apj?btB+Q`5]TЋ950t4<8 9Jgc% >tI|`2:ؑqԹz@WE7M._cfhg[p u;-¢1s%z2r,Grj;Ӵ'7G Ϟ]_O"?1 ℎ2 \Er7݁d~QT/h; LXG)Z~G7OP+Mzgɍ[cMH_I˯0ȷ<\iTwZr6]>kV$NXd H ߯BpELZ4tobc:Еth@bk ҺE!; 5owgOHw] u* 둳 js 12FiX\{ìĆ#bim(v"U\o!B! k2{c:4V.i&Zp IRƢ0ٓ$T*p4߁(zMvr#9' D*;¤S>DuraA4i!!iZt;Ie:tWNL*4D^YpkpNQ]kJ+"ecSbÿB]㑾0s|qI#ӠWqM:o2E̤$fS,%q?# ^g6fxV_b:rC3nyDmhզ3FYz V-b9,En.Ķ6cfus'yHϴ1ןGXC {_1aV&h8/FAoX¹? H3QIo5QT=0Zd>5W)XdN9xss e)$ G8t%=rVJȊFfUj6nVԥr`m+y w 'ȩҧ0r\ӳ4 (Ru,T <7b"Ls2srR2y/CU/AF*l- _ ڋ%%`s_дs]eL-R!%:bvo,'Y5RLI)s.j(]i@#F6*eϴi WISAp6#Y575:%A/ 3Z;݌f`N2 IʊU"qRQ_u`,ʂ  r( sZF+<ͻ_Asz=WuM쇇]0VbP8f>-0+m\tM X+m$SZϖ6z0{\R |iWoy%K8qrĶ1H2r,Z#0Y"&Xg#Btm^$ Q:Ύn־sn$CaxqpRHo Y:D 485,/ډGf[/!~5טvTjxn'?*'@(\R]gr$}ά^i fk #:= NZOmSvZeo)*6:nvX "A^Yf4> U;/OC0(r^9SW;*Gۡ؊y;@v1BETwHxql$#-2t6Z/Wj5rq{>"$k^r:@rW T.QS*y\)8k(oVj`5"A?d80"b 2㌖>I!?K?P cQ:76%<5 nɷOQǚv0]qDԈp%g/mNLiߝ2@>G{u^%F>I ūKzc#K&yD45,1- 1&ސKcբLunz"7GSy9iu/!26z_li=9 Mω=mxٳ!/cץ|68cU`h[&AE"{f1׼ ̕i/(ꑍbҺ!&-e^ۿ@Q"̣H: D2U{VZ[PQ_PB6QVP3, y">~RoVEBVxDCU O6Ž +.~ë=fb$6ĹVpGao2`(ď߷6©lBYAi)1D ϰ5:zV|aRno#mtpӰ Wן8ѳ$>n_=0b0`$MĎPO[ (`_ed>ﰇb*ELs8sTEsSmsO1pҋou8qH@r;"G^:Gvě(_͏9nV % kvbxfZ6$\YXߚ lHy Z52WP>-#hѹe~XbQ?VFb諩٪W,Ae;u4E[ IGK=/EKf)Fٯ…'H h[8g 1pQȺrp{v;왿=neg|AS#ơ0 pqjmY[Tt4eYI.\Ugf O zCX1c)y~ɹbpwc{}(ΫL/anXx,ΪY0k$s1-J%a,{s}5 E^2Y[h[NJ{wbzQ?T6X< CmYnG{_iIU@ )TԂ ;ߘO22։hTx*6Z7Fk^KUPlw*y7u}E](C$"H؇)tGA¤Jr(M;D q^82u" W {s@/?ys]VE渞oP8/2j$fAo?=zoL[ٽK?LըaQıZ:zѓ݇ӺU|nq^J5wfG4,gU'ն rfm%T"j%l Rh`-_tY7jV~u޺/ mz8IE{lw|76Kjv㙈v!ySb+{KOfQ7Jp=G ըuk!lDe*J7 ڹb5Xļk,Œ.7z1scѿU|A',.)0||/-uEæB ޜ^׋-EMC%W3q f ؔS\+zMlL50>ݐ ML>v&*߃bmsXΔ|ʛ_ ?q^dfv{zʫX z lz(KXpW0K.Հ O56Ep "Dw)cG3+?>+,7v)cX+ŰuurR&$RBm bcY8@|^ɽB_VoB>]>_LP)og[~:NZZco T~bF%߬Jd~pg&/Ud]S-j67tVOhz"&l43y3m_"3Ml t`"\J6(|E}DY*!y˿u^A Aw* !{+u.s2L*#0{d;7E`V W(eM6<-E1-6gYc0?"`vm}+- EQ#W̢oHcMD\>M)MQWRN6acŧλtiaR.itެ5ݷwcK gZQZN0qwdM|b /Shbz!x6OLJN.kb`lA7 m QK/ݔ y';v ҳj 2PY^ c~Oovz`XtwLİ_R[(ju vLaFI,^ꙅCi((5[MD;+i`s:~%t]rC,% jۥXŏʹ=7$2XK)>mj>D\zL5{IQe)勳<[x-;9NZYxs9D @rzߐF5):'䩎F#Z8^*N(}%jJg{H.vUEcZƠ4'LW} Xe\Cy!ĪGvsAR3Q˲՘ j!}GƓP5RU$1hga vJOs<$uY̸3d+ɷ{ Aտ1o 7. _%Fe {a)5orP) )-2|Z+]j؆VnN!-^C%56?+|3SbG:VÖ'ͨ12t*5V3 yuzj<8Mi1ܠoi^N\ =#Wy3Fr6V5.Lh |e}X*fIJ-EpIguB2"K!KlU\UbobBL]&SE pG6:NĪuxI.K Q4Zuй(Hظ}8 pjq  8,;<*cxtK9{Tmoz^Efŝ)=y0 ”7 [Sӛk;n7~~jdFBM3(i*Yq &sEь8615g˱=5~4l4h/iq'Ia5[HGn;೪&;TxZ` Ӈ`2WÖ(ñBΐt>_VPB.[5D;3؃lB;{m@2Ϣ ּ DU߃+M?UN}њBa.g4/C̜V0=֬J!/C^V$p Y_} "oTvQޢ@q7)_HE%}gZ8T@>jXqvhxMew&=&/ qK⫑h)p5)bu'3bۑy}?.]' ]l鷾.j820UG@ q V*}UlGk|N7;Te o<cΏyS%xX^tZG,E3 qu*6@51U3)}&oz#Y)A;5>GePJuY`IXF[|O \3ak K0{ m1a ޑh@=*g^㜏?MG‚Ԉ k`8B" INݼc.O JkayV8$W7$>V-]=95"ɰ T]?$$.IHg!)">t3LG2 Wb~M3`d͎cE!JR1 Ge؜ԙ -U0V[>Y_N>:L3z) 9q BeM% @w;Y:y}t7!fj&F|_U#21W_Z*l"b~R>pf;֝ޡsxDC)ȁH\'䱐4la~8s X|y#ZI#FįY>>a|Qy23;;s 4Ҡos [sGotwȂHi 4aY 6 Ω X9G3[9/!.\ aHӊ=^˜fɎIx ;P8FOVȼx>@f$F.ne}C{?VњKhݑK\LҰJ{*[JؖiaԽF@Ƃ{`]v~#>3i)4Y>dwϐowG FƮF ,jvm#]]LUoWz xãc/+Ka6|Ae44xT#-͎i׌Po2`?ĈѮDHI܊_~+TsEMFtPs~mn.; \.#%I}thVj8d4ol+k__>/BL+;8)Za tXtAJ(g~FL6XSy)HyS7K ۦzGاD4p?V?e.ܧ0" ^ѱ{N*7?l* )@`GHqihe:Ҿ2&%Xbi:*C=ffa򬧆1SIoFE82z\U.<S]; ^M=+t_( IW0` :dO)4GàX읻#paY[NcĔb]EkHmf~Mj+I 9%ω2BvqVC0Ć .lkcMރe`|}㪶 2 xU\AlBn`{ԗ$ U@6G^0n=d؜A1Ln޽pPͷ^z',B7,Ym9RJ96>‚`hph)b$I/1_O6dmvH23Ql; #nn Yq3h)v]e>Ι~t5߱h=$hfV*4}AqdE!fFx Cj&'hp9ъT 1Wbt"gg ˻I9y+^k[Cbb"ww)8v9;sȶ郹F{E6*Ԭkn}s37[/8-#ՀCz'$HsAh ʸH }T?N\M\a*UރJ-Vf:g[:Q(_ٮ>:8}4ԟ{1ADɐJ=YM6AvU;$9S (aċZhmh$4Xp,7vdH[UJ$'"6%û0%-gnj X-~el`+$`n9ٞ4kܱaCaVx`s&Ά?ԷF](&؅܏/D>huHhJUֶ!ݧ8W嫮i Sy |2oFAxsz%J읏UvHwF.U>?@ɍr{M|m6Z/MlM.Ҷ.(c @yS>G|ͽ qc$qрڢWeb*oO= ߤMS|? ch _[!iH"/`iPY#T~RPݢܨ/v>b{OW>\R~} .keߧb|  fU!H|qwݦ?{Hr˒ 7LP>bP!@0.iXT.BX6N E),QtvޙWҐ4X"P%S}fɩE׆Ŧ]-sxM :VR|JP5On$eOh蘶+c$##3xLkȣ3r@ ZQ'W2'R11$-ǁNZ"!8 ٭Nl)@;FHv}G8DYY #r݆R0v&QgJ5J ?+EcvHu7F{ϰD^  BAT٫4]y?UE 2kˉ azXThc#A pmuG ^W\H P("naM \9Эq| u=Azo> h@6 Qh ."TKZtӞu,D{^p򅦑qaZ ?awǒpy@ {1B_ ]%G88iQa]u,@bsxyDWuNE+O-( hXak]fB2͏!3'+tҜ\IsPk+|.) @")z^nXf$6S0KS_*.ZWR<.hxn8 SfǿpE?Ӑ`"'fo<5,u5~m'r6)==mV6g2ky9Xq: &jUwNs[x38L%;*z5(L+ Kř曛š c,61G HJ I'ꕣ=/?Ϥ!x﷢s] x|RORT_.b/F.!%HR??P4-4K2BUtQ0*ToRtݷj'CynRVL'1 TO,~-8.q^:a??=*򂲗Kf-,kەJD}b"_\-O=Ipjt&oQXlŒ+ەw^kƭ_k[V.>$se 4^ TyN]М4_mR>颴WvhJ\'Gw3p[A2r]?l_%iykZ^RWg`+ q ` Q`YX2qdPXb=uo%3N#CPo\SykdEkpU#MdrhOGs^8B%purtfayO`xEsmBLH qO~cx|9mE6&B$g`lۻ3Gv+l;c9B%TPc:ޫsBpH+@Q;1RL/^=< LDAϢ|ݐU*3mҀ,kď;_'Ɋ{   Vc/jI$Zc' )oJ#nLyܚ?kBݎj%DQZܛUt/ma MH -|\h/Tpr,n?8LoJhRx|"4_ |_$Ro3HxcC̭Bd9@xwd%%pИ9+5&(Do6E/=- P.B$8z ^|^}!yLX [gyG&Mp÷ܢD l.[Ed̓; n!-3z݉X96c:_NL )'ٸ $ -o>6H f%X _ؠ=xYcnaCVLY0S'|u.5uSJΤ# vh t\g֜IL)!C+r 83K&ƒ{-ܠaz4?4 QGm^r Mlgam%:eSKUj4 05Y{f[-h?Ĺp?*\4TU 3p-!s'AGX,y`0WyS[YR,7jS6:PcCaaxEؼhسm Cϋ*>1&c10̐[Лv7M{߃<9Nj+fr Bد!-hS.lYeICgKj4oT~G^`ŸěڸŹ,tRi')$33WI٢pa0R$wMQBl;\xSvKU"qbc ͗]&2֟%2h%S?)}$ ̾+$H\SYri#@O9i}N\pϗ#?~5zIf?U5Kћ:X;cM>%pVMQnxY<9Ɋ8Wy-1it)0g?ԼҟLr?*J("W+7F]Xn !b9@,ƭY;/4A,|)zPM)=`|(Zd%Q}▷7Ƈ8o*AU&lǮegۙYLd-Ag{R ΐ;Ӳ0Q׉/rJ)i ~HÁj2WKbEʮڛkXJ DGͤ&C3|as䞽8΅HM:둷+Ĥ.AYX`h#4A`lR .vJI:O|MFܭ1B"%XG@z ,jԆ0yd)\{"ݎF:c#Ki A)XqNC֠ԕ\FroGjIIUك}naF " \Wpz}+M پAkvot܆E*<,#e!--fI(Vxe«m4km酓p/W8n3ߤ)лf_gzӶ?M\`4+դqz)"=( icYE7{[XcRM 4Ձۤϩ2~9*Gu±ͮEhmh .ʯF76&8A6ጩf_?u#/~Cu$nxʤqZKf;Xݾ68>\cSH&/EdhT|SgF u[e3O4J f\L4yLr=(T2;C 7lF] [HvuD;סj a'`5FPYkbH`#TU0rx%[>0+2‰gpb-㓷AL K䂇>Ngq ֑:CNDE?UoZfa.۩$p} x$@d{ڻ3olcP!d#Z}>Gã=܀UjiYZ(6%nF=_l9̞;mu5 '0 ~fwW-b.5H;ͅuJTЖ0ûo3g KЪl :B!{BCM )HVA Ϝ}.N9>A5L($Qݙ xBw,e+)̎yGqqyܓa+,Fa| 3XIC?8pfgEPg <=&#Wd5 4P۳9gs)} `'nX?X*~l1'-9e7XٱB %tԷlG|RxP7 Wo7dw="XO*Q{ %% Ra)g9@U*Yw9t p1DPVȽ$Gkt]{#:TA!)z'kSY|55q 3O+bLMQN.?$DGkQ4>"3DNy5W>2_XoJT9퉣!7 nJ0{DP!1 K" `dW^*=<) cvb((*KY7CAYMG ;?`/ЏgUaDLjXCP)2MTūb‹]T,8sՆY}7`6pl=p*Fŏt#1oBB\ǫ*?-px`xZeُL"fpaE ^0[W9p7~[(ɁKXS;NtjmI!0Mh%b)VI{fiHT'xwkڜH$cO 0TW:q;K M<ڷy A+yPj4 h<Pd}VO"* #[{S@H*_M/I[ٲs#̰(N‰Lu0 XEM)V`1F1/0>ejkExՁk1S6A[Ք"/e>#鑋+B2($FGa p)YQJwTpGbfC2(pP4⼡M mlc+ܷI3+>3Dv:\Wn]a5s8.\,E._9[VafK.DpZBgw¿i?&^/7)QFj[]!:TO]XYʩ842pcQOZ^s ۓ5!ֈ*ϟr~ NRHl"q=g/U -yUx}d^sDvɒuy(~!`_/BԿSm-h9ɘ ÆpZfijdM0[-tG[ͺQ70W ;`O11I )ƽten1!\KY8:Xh^矗])K}y jܢz~B5JIō+fF`v ȍʿ%Qk 6?SwSoDC hjh( r*0=%qŪ Q`l{R[DpK~˿g>NuD äă`=|6[j2ٍGַ hÛy8Xh~7-ٮh۬Z9^Դ(,:ͅPҧ S"!tDY%q: @і$~_^olӢFTZeᏕLLjfg*nT?iWfmQu奐mS H.A0\l Jf 1u6g0n^^{k!O0O:?c;|Hh*Ľ~WQޅSR5` ;:E~1k_ğBC#`mTe2N>j;)u =,T T-8/*TwܷVM%;Ce(jӋO; E'AS7kɁt0yoӴ e}Dz,dCn;n"YaV`5h|"C)GO9Mt\Qjv0jW57HգxL:QZG{kj`]XXۓ^G}Y:蚖fwx$:E4a*t5/rrR"IS3-0 ګayę%T#&$ =꧊E"<(@8pc*?$ǡygPstq3cZt/]F0i *Cu5<9Ckΐ6"qAvߔ`F4LV l99s8`ev3:$E-z3vS\49), Jl@&! HVYԠrRGvLn#qbs.jX&uQ0tN|% u,'<Hxꅯ [rOy3{@c.*àSg$\= gT=U-w*:#oN@<^ۨ`#z [U{b+>!"n\-#BUo"G vZAapx.lCOR. sߟN(4SuQ9uD$n3d؋wZ+47Ylt+ K FRmzԥ%0oJ).s_XF@KFTuOYh"';8A<" N6NXU!BϜe%N@14 L- yQԸ9 n@o(onCU>ʍOI>g\G'13O{/mAlr0*\R Yd5}MX 2dҚ充;:Hk@M5hh HroiӍ($jbǡ! yA3: 9A\rJEǶ\]'"dfG@g:&EuqL7ƛ-_񤮋60d'ֹ$qy%Xn{ (NG.wytW ώrbVǽw?,TW#!_h? `;&ᩬ1%`%ynb|ȣȫo0O_qC3]pu*aH(4 r&dCʀ3z'v4I]K&} 0X8dq4eb֩9B=Fac dٰE*!SmSȞChU-TsC@Vl8&$\2AƋѽ{OaPtcMJeADzr/'I(se+]U!G 30'kax|0F(0V?qrư2rl5C="9WNa>Պ]!VOkAW&ym;QʚHkGk>\ _8 x!Zf)*%T̐00N43(G< w-Vːs(8ř AnHr-HnT)n$XI{|J6|6٨;` *a'G ]G~yߎz&YXFXV|?;?F&1!V~aT 2ѸѨ+WωfZ2|qjO5'z H]{lJ 4;<({i) a! AMŒ4< E*G$3J`c8d%R4aD! t0dN:1ͨ q*ѽU,%6ެ?O@Wv0*MOdZO9v*He }'Z}niJ`& a/ گv|H*)F=^jd SO/϶'ueb~ÅƝXAZh'CI ]_YK9l@F2eaNGLRmUx&Њl]p @˪sߕYC|slp_UKݪmzy 2/''νBt䅠{ _ a7w#sgVdEʬ *nQy+%p"̷RrEAbr4xun3S#G3/>T=`&JW2I5yaz0e @aX+]_p&!Ɠ7tl{6N_DN(:4q 1OѶ(:+3q㞑޹EnXQ^P6#FÒQTULv tZ5ac.nL|8EƹY #~>L+>B'9}1(H;bjP?Мн$Z2sX(qU bEG*8Ip.Uqf3R4[o<瘮A&]OCl{Ѥ$a EyJ}e]`X:]Zu~mAȳ؊$9WFZŔ$sIP,4foYl1+3C;W 75 cT=?ri|KFqIlɒ6'Mtȁ_(4Xȗ\[mQ{$U+`s8DⰏSxKU *# Zgo1$n9ӝ2s h((''N0"ogrJ +݀qg̟_N԰K.73(77Ғai``pV* IhMzGPQ($wմHOXYcYomSq)tFkF+~\BNрb}"9C9*r)sQ9gb-hVYк^VC'Ν.[Jeg[H[f&Dk)bϕǩ6 5hDBu)Jc҃ALvb?|/%Ƽ4}Hԁ2+>O}8Ɨzݽb.>,p՜$jţi#$tP>c{H繍G\"~:15S*!"XhMKK▯ 2VT.Nm'?k5?4k$Sw~ I"OȔ4&Bu9/nNnKV]Shm5QIL~cmu!RZV&R22f \,]z15HCNqYȝjLkvY-fivtF"a`8 ՁuO ""tYP m-Fy N Re:*ɲ?Q4Uͥ,C V;zu iU{e@7\"_0??nN ԣ_0@CTˉ}WK{I}&W<= )4Q֞ jXm^/݀`A{ȫ#mih5#m@7y>)rdp6&EXsp3@phZ|.MZH@CA k\*29 {HfzҎ}0| z5*L!"$1E25*Ċ,>>g5'-L46߲PZIFJ؉PW|*2.#9v0xjJAq.}Rya1kM0N:Mkw=s=y3t A>4#]/vpI0Jsr.4P~T9-$)mVIRYr EERS|v߱7 P'DTiؑ9|4dϗ=0,BQ$#/ۅ=!.(cIޜR׍ܩc6L(yt 7u<ٱFSt,J亭&(dԚ7]m1cy *_e0OHڠQ|Ɛd"b~D9tɬ}{ߥ2!no6u f.%~+rnH[V2z->2k=izz_D+vhD,Hebh8 רH幭r5Y]9hb=}'k?Em& )07=@sH[L:dn|lU܁sfS+=V1R#4dvE3pp\σ68mJ+3)I{ yYd5qݑU k',ɦ'D^d}ٙlVSZZe=L#{=t<V_Up5 S3Tr]+)tт=Iһ]2+CMrZUzq8kE\\6giws;gR+=#;\M6H a'eoRMmшNAyJ3cJ]>:eq[ߛI=ɤQOf@j`QEѰRV?NJq IUA sgvo!S.p>K`Y{&Sg\fA/ek@v+Ndz- UċӀ:S~o訔B'HɿKXkC7ejvxe-<!(¿Y왳y4-39χ=D` Ѭ~l8+gR$g;xP 2MBms*-uz XAL(}o0iS_(Cw.۩Tj:FEsMTUQʢISed21GEJeӺnTq2Äa=gpo "SxB[JZxØ'̎yԐF#o) gPtZfYW|n=oteحܥTjSQ?U] )#Oqlc@Z͛ʏ4܋\5U$)m>|>-] ÆUd >[r ^xABvJ 3FtQ|}9U@Wi8b`g?@dwTazëLN)ns6_{>uhɖ<S# ' J FYrLN%@ U*Y#]K) #dZ#nh3[p?,?ŋnTٔ*~euUp8iشBY*e\Ee o7G\;NeYyQ%Sb TIpǴJ A΂˹`[Š->bJo5lWo@A gYmz|Q5a_rcp-DɁueaXy4ؑ5X-rD׍ YDT ; : AsoT@]93?4}űC;T6Ī#7,ecyo\L/mr5/T'z Faki@]t~ժ q |^6O߽Do]b\k_ ʚtv|~}Q ubD7rppF\Coa 67.2n>Zݯb5-nTU#7sxiP/sǞ|& _CƏiNa0M`C 2kQfυtjE [zc!]q n-TPXǛX*#?SnIo`ePF2x'~%]됯9M&wf:H42u8O(P] 2=DÏHMo.K<q珪*]mwψO6AT*tb8@l? q&TL3JwVcܟ͆U&r|09[7%J <=yq?vN w)0;W(eD<Q1jfF ؄SgMj$YsZEs TVJ+SUÝ){cA?b8#U"}dTp;1 V6NsMύL335JatɈC;pOn,LXs_~h7ÄX"s!j^5Rڴ2 ! +Wh6 ܮO^Wu"I6k&Ԕ*hp&&܅ax32%aЀaY>D!.+yWJeo z);PR_)Pd_:fkq.HKytyQvm=GuH4o8tqPR-7 `iDžjE2ݓn 6]xON P_\VCY쒂8 y|oiT!cE"|}`-&U_o745Tռ_ZTqƼt3H@Qr t?cXSE K_YPZ/IOPZg1 4$pSQtaɉȗѰR#tTi%EĘxRV!I0D>p=wtzAnYcN[!'/W@zJ xx: @KRXv !N|_xs/`\nIڢL#b5*Ir7CԤ=O oC .U0M,Uc5 ?ڬlm$fSacdϜࡰ ;l Y]~]

l ~%/eXTIRem#d8u86Xg)V97œ 4 $YVEPk${K.l-;pK}yhCw#>($3?# U^ *2Z{gKȟ&:9Jf'64=%|sd~t0] YՂE?wO a+:/֭$/{G]YWY~ܙ 9[[4KX譕'z1hr^o=BTgEex I}<"lqVokJGL+4K Uхh Y旤xo@{BڄXoO|DrGY~BPW!YWݶfUpR4JDLS$O3 LgH Z,,k)i#ڙɣ_8 Uq g]qˮ~UYZ#sӓō) -| bDk)C7vYawr; ;LUiSi tg!Rj;Ѹ8N׶ m7X݇;Rf'>?ofS!-b]VP:ȯ'ݯ`Huø8HL\"kydDn;Yi,V"[%4yA]K±kU?GG<zgX3Ԣ{*]mnH wTԧQ*=Ea"GŃ 6> ċZ{TΈ38 xt>{TCmW0ebef@ ;V<Bv/Zn;k5F, I["ig8Ȫj-iGjmۀ_0&5.+ZpEE2R7;э^u3,/[:۶h&=_z^Ww@HlW_/p^#%'ɲ ~  _\1hL\[KTyDsxs&QW{]lئk2Z%ռ1o3 aa-jҋ-=)׵CɺIHxhb$@Cp"oIF&R q¾&Yu 1m[F0-&^nMͷ+ԝ`a*\i`vzȬN bTƊq׻|Bd_1r&9P]˕[Oq4``Nvc$Bu{·gH'Ik7a ,,Q}sHu'@)hn-wzԹOQIJ<+Ns7x<+z1 fc`5݊Os^x Y:{ 9ȟzAā?>H/Kw70xʫÒls-YEp;h" _YPȴozH#f\>Tx}^54/a/okՎA"{ۇG7 ( m&+8($W))%irHb]E#QQL6*ݦ霔yBvM+C_U"%GX)vֹ_4'++hEkxGG-Rmr d'.Vqr$`~5ECc7<؋p,/1F Pq;$Ad3&23l5hAt^TzXkH.IMRku3ҵ5Crl1jߤU- ݫ@M`d,?4L~BE30-go}" rtnW߿򊇠c:#Oߪ4F{0QY9|GR yT-ITeĬ::P~qKzeyGdE lkBgS9`}]3! 7bo ,&uE8KrG |-7F׎$8α?\ic]=hO$ee}6 &7L }-fC Lb,P\n#V4*[}6cPyo,Ƥo68{ov(ERq&5ѝ\Q" 6E/5ɮ~Gݥ.bJGrn2Ep RiEgſ)ր3gQfO-Dz:S%VLE:O([ů e?ha 퇢u= ltm 6j Boʶ`Y~2 [82|-QQ}m.c2T.7o(K40-uẖKLX0' )l!x p1x%|ސ>NNp0Oc(gKcL"o-͒ ;Bpy/Uj'1Z*@=-H|7G[N#@f5/ʕwC|Q?w?B~Ö_lG4\Qkh. BR&H=](Cb׷,I/~}}D)%bYAprAM t~q5Ӎ);y?(Gr Xaٸ({,GYک47ɫ-6^!0pد`(|o>ryS%{uP@\a$u] \PI1D֦ТMbI ъ J\eZpq_*IiMi졒Q4!YdD99n:==OZ)&l@׭HRKh{@T*N]nձ9U0NhArꮊ_iqX6?fSV^MuPWO3tp8 vgj;<:=Jx0̛I^>:El,) sK7ډ]MЬVㅦ.|^$QY;6qo#h*ǬViӜ=\YٍxK ˨6\{!g˚3_[ \%jBsWλ˨S'~Ad=";"mY Y/2R|R.[^CD4VФIC4Il°4ݼ|h7\9_4>=@w_Δ؊{BP2˅&A+kP:Ϣ]kzKVfo;\{AI0]e}$jN A}r&-Lg~ui!DPH=?*w 2Ļ l'nyNRZ4Gian1tZ>F87]=#3&z 0 A]S?<̖[UFOnSDMRS1xN kFftBlck1CNF'yBcrS_dxkT(SLwuLdf>cΉkrNSceҡnׁz-<7EI]}* 1zlZP9vwaz 1Ԁ "8y/2сAdu㣃*:ʠ38B?Q6bؔ= х/u#9Wo\jAVqK4]QWMťד@+iR^)TC+D$O+ka'$3eqዋGE}\ n2ZAts&lRJ& ##]JVc8J_yVXC,7*qۗ4-K@!i>#e1 sĊ z=vN=JK`D&<X=Gm-#wUJ]Of~/j| 8S$ Vyk lˤ%ڀ7`N@0˛62{I {P=,%G`^~? n%9b4-;i(Lq^]?[b6WAz-< Ԧ g DihJ5O:TelSjO0zRQybWNMR1ց§7k@]{# ] W-\s#F\3Sy=sh=O} \x"pF>Skh, KA G QVi49՞CnQu5h,àYHPqYXK(opG^FcG@Qc66*YY I߽ė[ dA,f^:٫!Aun/{T1sm+MzZ4Rjp*=ި! M{VfpʢZzcq |3XΖE &8cC#;0,rc1ҙ>pL;4 6.)ecfDł28}^(JJ)UcrJm¹n$ ~K. :rzfh Ŀ TS,Ѥ:\Bd8*gx8+=DۖpᣬZL0#M+(Grx]ŵ?]=< i"iBIiE/fY{Z }v.X!K,ROiI;_\c_PJi3CfUV׹iH.V3>=B O:)iɴU-A^i:f)WRTӴ}EۦǕC NVp7֤d=" o8Kn{NVzQzF ˁvǤof2r;6}vܓWŞ'p܅% AT[6qkb#\OktMw<5Ҥ,Xo W\';e<,f֫ߝ-&R Y]vלȃctq +7ZOa[&>[([{T~Lj,*t/q%hi{ R6OR֗|jtOE|!ؤŨH[.9i?00DbxV$?i kuC<;6枇bBsb+#}ӑ3jL`Zr (WCS|.ƫ0|LvИյˆ^"LS f]O4.1CU^&A.ոA̿)zR?e!>C0đrjiz_?g_B2AZ=9X T|ogʖvDȇlJG\)YO!fak|*cL_xw) qܬq\n7qwcC&e@2 Syti¬~ 5]Wҟ̊ c!az[w8R{n}B6/w?kƺh0ܑf|ܶ;܍ dbfg`ڜ@!Nڷ9]%b%B/y0KÒ _1i↬Qt 1OPK9 {{yMU8̩Sjbw"|Jl5x܄1Ä) Fv -ǂR ziZ%9@Zz`x ĝNHHƹ]RL*dʩK9=e6/KVR=,d4o"ڋ_Lf֙kx(o+|C<o _^M}^,PO<-yE 꼀㏒ޙE癳£2Hr춰[""6R;w|ɾ` _ 7YvԶo:LJĎEDaXf54My[)yR0$I0I+;T(51SEل5+B4z-_%-z|6 J/xs"]k٧c[CU!Oxk+0=25%{q˪ hw~ެ¯;|g9mhXh+獾eu9R^{mK5#7h rwuQ}N1.)ٛ@:1ZDq_ +ώ3MCH&݋ёE=?V6E*oڔ'˺˳1!`?}͘&& f.q+h, ZA\:)3W7vݕ{Ћo\L\6E~-ҹR"^`MU&;'`+[`&<Go?-ǝKY,n<+U? :oKe0"Y^J.ԇgcgjZ~,RԲ:ƟŐm1p $Z%l9-[;-7P J_߳vd6Ru"{ɋٳeΒXwͽ>ڸ\A ϩFPW$I K*SW"&WX'/ȻA,9O0ʽ*c*k: eȦN($vPrj z͡Qc<%l2g |mzN: >B p]%{Ͻ5,oʩ6ݜ5T1n/ށvmx S`r"K9Qţ#\Z&w1vFA2ʣC0o^v - 1ۄ*(/-80ggx) ѿeDOA4`;0J BGp/<#`Go9EO>Wt\"\6hV:3`0[t3.6ZQx{*5heM 6TQ|ڜݾeΏ+kaۋ=~M{~c+8<5й~8ZE9)~^G$isCЭdxM,5N.\Lf߬(g\PѶ!d?ueoE OR$F^_wR٘|9D{QN/e1 _. JR_1iƦ"qIq'& UTO`'^xo .Ċ.AC;clbY-TvQ0nN 9 roڷ5]HҲW(Tfy>܈zg*BLh[Hkα/6VjO9j@#>g i bgݲgl@\M>/l΂~V8:)ysSw5w~e~#%=֡#'l_u[nmuWǦ68vw"ig\sNvX-i\N~9Is{,loR% x/C{ DEu[_mVZ(bK>@U8yΫ;nJOݼdeP) AXo|MrYєϓfml^OsNHkۑLFԅ/._l4M?*i3ȧ)l cY_{/qIk܀XPO ~§WCbcI0l~V^)h% <τFU/Ev}J?*0wI 3#Y1f}UK0I&B p쇔\;0hOb7 F!zs?3|hgRK6KGٹ|>0k˛q_\v dt2I1T T]9c&pf=L>ҙS5Zqq<zmgP{EeS(U<2CLηv1&J:1C HQN̼3e@ԫ8}US!/ $hõD].T2fLR,` #|,V;nG&b@ Ø[ϗ6)AOH(k!; x ,rNpz$R.G~ֶG2W~s F o1|g>ꌶ~=v:k0b.菺9wXb6^xJe1:/2Nr2qiXeXU˯]rGRwRn ux7l@.?3U7# b-Nچ $~B.B`] P,"޸$v(DMHC!aw= }X]c;ُ·LSh/N\-WӖ%6H:b!Cǒ\ ^Twdt,JhU@7Uiv/ )P>yuK@ę5A}{v^b=V'tV{itOe@OL( =gũE/nZ_+_,w)[~9&giܧ6izK C}dޅI\,[dtl n!ms*nhNꕢЌn[)fDF6a&Z|FF&O' L pMm.3cPLgw/5W.SdmUkz+;hdIf ^ڥ7k56fIB/{=1/@_MW&fr?gLjǖ(5 l)x MFG#+̿RE uwԅ%\os& Hd,_Ȃ{^䟵խ 3Bxw$"#8 4lGg\f{( .sp;rH͋7h Bm֕ώPaf~wfG/i# fr_( @LĺΑ6uP^t0j2mտO1Ԁ?2ۣi"\z\J!^jñQzC,jnwM~WR~Y^Oz0?t5i ̱WS^\:P0QSs˖#an ,q |bb# %Ty+ ֳPW瞘g*7g=>< H ޸L9/'t a%<94ZrlԕKEI O3uӐsřm(܁uw滋t-T6g _=CkX3қ #ne V޺K21ݿ?yN9vTX nGx~wAEo^ذGȮuwWrcj4NWφk<Z؞`>UI&fS*d-}v(hvKDyIsnBJmKO]"9$@$!+8vg?->lϲ]Yep1]4$keYYlQ$d(/C7/ W>myc锫^7pBLDÿ-Aæ6,n%6 dk&H{JE\O[Pyy%|DLw:a|N'6xx ,c'‡+;V{Iqjj/~r:Mk֣pl):il !ڔ<4wov>ZW"D=WCnж;,uG1=DwP<$t4If!Uv+b :}-^!*pL}F`Te*M@s*Jp7#zHUH@ɠ1+س3N,c\c|zToIZ&+Qϴ^d({~C>$x).}_w՜auPfoY2yO2S΍Zդz%<]3|RtхGOD VŠ8 [g A=!'e^ ѬxE~(cPU\W[glրsN#ڷkq6Kyibz'mG hbb _ƭ< _ ma?tBG% O}k[OF0tU\HMaq 6hy5hZgLgӊ鏃x3nz@a/uEe+2Z{ݚ VY R]6RҠIp}SQ炧"67p瓤W{S8ӛ^$?e3.z'{ ذ4iy9犷,1o)SvφMtHjOOܯb! 2S:9ipd4¼4ubF?MV㔫*eV4^i>qlb>+dϘf4« T &.K?>xFed&ΙA;B\U۟$?( ףZJzpxE`"yvV{p}%BE1M rXRM8nVfpXt`ⱥAm[,8}4aM.0A$=OkmB@`ȵ8d$H"u=^T@CkorPxlxhVGk%*dRbY`0 :ZG"/0dDBk @R(Q8.SM^fJf 3*0["eրox4+z^oj[7$"cy3#͢02ZU>-XRsDܿwj _K!K Arh¸1J`ȬU1"$s})t?Ժ M8ϰ4׾ԟ傜M[[#٫DuVYxVR"YGB0 PŸ`kC@uy_cJT xMWP'f$-}5rI9/ڸ #B^@A8~6[¬q۴Ź6 6vt$+$n:_汭GGƨ$,ªF/0voQ,/I$gfnv'\Lӆ / 9e@9`I-(z!;Ɏ˛(X`8x@i6nQ]!_BՑ⯾_LgO67RcUl!|7- FZNm0QX>ŊvQK0O-ap" 6(z*c ΓI2ɛ4@0_~MR4يpO9kz'M7a8e}XRAatL4("r;G#-0@Kc֬IR08%aWQ7&9 P{v{޽ۈc~+z^y5?COքxK5gtNMWr d (_}LkŸ 2TN|:A3mI(s{[[>fn{1~O Brˑhi}&{3gϮw F> 4f\MwÞP4&'A i%u2~^ct^=,h9{+f4h?XĊBQ#CVs:؇Yސ(IFNYUS"ĺ"hh>vԧ8b0N d :οOF0(8'UC^*JOfMMpC7Ȏ3wDl{_V[/W; NTsa6XQ &D&51 \TGU. d3 ]8d }:y4hz44tqy!86sk%5c$^c .׶~Xze@$o"Vrr;kGj^(I5΃[18c#&]xsdl{% *F <1p;٨rnpXkP٬̽=;ZAry% *AP}HXqCp(6F2ʚCF85:@J{hύ(޷^; 57 Og0 WH3m_6;Րt 쥣0"0iNwMND^%M5Tb_vuU6`{Fy9?|˹L(bqzxE{$;*Q3AAtx!mpNց@GRd-j䯉@#EgVc+Yߏ<8D@*5Vj2T\"vNilVte|'`T[D₺죦9f>H˱y~PQ PAwoo>q`Ù0W:psr] T&F"^lS.ulm G4 v}R)ӮVQ\9ć۸v j(%!) Nrѻ\Mk@)46TӰKoJfذP_24 (.D0m!.1hBmUz5q ݓ񙨑vΫcr:ްV.U1ܖǦ#W 3̳9eAsgBYt͂=ךȮRCrB{A3 HJv_nbݘj(Z.{trĚ1͇  Wr{jf5Q E*=3sۢ>$пHK7Fuޭw 8B`HXʲ^S_ <@+{:b#P(!R1[v3%ԚĪ:cBL,sm 6f(HwQ0tvGlP-baPͩMQ#\jMeHu{jz 8?ϼHn+v) @ ;;OI Ef)]UB~ =wbV֍;[̍R`ν dʑaUQS`d`UW <BK<-'͎ྋ=$Ǟ[pKcb lz DUNS;PlwZHϹ:V"K LbbgR1쵗w42ľ`7C'K~D깂%y^/SKq@h7MSR;&Dt7b`RdfZfAʞ&+M,L`^G) ōڸ&Wr s}Xos%~Yd\zPyj>kLicZ0?c! clsbG@VV &lK|t jwg4~ۼt=i(G.HJDoYЂ:X 4Ř& cap1SeьYa(n|[AUgA^8 2p9p7Zz2*ןWl ؗĦ зM⫮9t{*9/*K_) 4j2=dN+cx.,Cq;b8ޯ?sͱ(]qA7@r8B1Nܿe+_-~U2s!4i؎3': lMhDOLH *tFn ݰs܃wmk#w C7 E_3 ˼f'I/3:%wi/!f:x0vW3* ~yTvFEmI3 Ȗ=J7uVhOx[UF8UJn䃤 WCv4!jc f[>-'oFp:j]!^-=ǀ5ȋb#͚KmPFˆrwE#Xj>noV$COտbO|^9Wb<mVsnbǠNb]4nuftV܂+͹I7ků.:—EK|h;m8 0~@WUuZ!f N~ TA㄄ zA}e^vbKLtqþ@73pe`l:]33U(.ڶVewW^Ot+"(?10bnuަ}|rކU⩉K5CѢ:Ą/᧺_x-AetxtwBu= n[8qE +l) EHL350ˁ #_c =yPw!PZ쟹;EN@=LJv>y1RᾡE>h#}Wlp㕲 ,sk wwK ȵ 96u0A1Džcp^8.dc._2fw+<`J.K]lx*T$up'tcE`gG*~KpfpIcƑZdKQ| X{So)9r-:c~ RdWb2g?xs$RܘcTVl ={5+֋MJƺ=jPpA3hl)j OA8(ߟ/4HSBҘ +dW9|#kpƿK(BTL&,MM%'ξrv< K^ag%v(P{%n42<(Q*+^lK甒B yXå[~C+3Y˙x"+3ξFBNτFCC+Y.%6%,U[V2VHH{Z; S{0#mR Iy~>r=tM[%1zÀsŕ >T=7sܿX7oWr !ͩʿGRmK7v]]4Ja㏈l{MѺ˘NQ氰y _uq&~XWTd{=ؓl `,PDntN K$*N_af _qFc lAtEvK n()r!LZ`hyc]yBî4S5VGfыBȤ˕o7 ;,4v7⊑jrsرV 3+O'#I(Z1Cm7to${a> V"Rd1J=FHÊEk6bzL -(Xt N.A`90`l{"d*DDf!nm$5ԎIcPζ E/yGQat.ZF3/"NR{N=x<5KJV^FLl[:i-$i21";ɋȐ^l")?rЧXm +"UCm~ 9'"Ԇ܄0K_Z5!©e&}첶^pƏ":1K57v/{W4 uNn)^j`?vxp|8f{Xc "64PԄ.2rbs do"X}s2c d>_kђ(=aHˢal?j]"WII'v$]{\dt:"@qxpca% ^¦`u 2=r2=JNI9Ӷ!f - eTx׈cUrf(K첿|B@v.6 A;̓ ^6_|ݪ;fi#*SYa%%3Ƽ4yڳXM< h5voh\{"SdCxl55]xSl g7b>t@s\fr Z{ J0.q! sDYm1A0{* (?Y)̍&K5j;dflXmI {-8+\2 iY͸+F d LzRjy!CQ;,ўMxmxdC:+A $87rDYS)%FSgEۖcRWdce/)l[*;f<hLUTiU Vf-gD1⫎ rr_[{;fjy`J\ٞs9x?0muîd: cd|aK^!oe=ܐʥF5~wEqy cxRmߥZ'\v.A5YȽKd/S1T*gY00TqV 3Yȩ,v2tAWhd?d .iKrnj)$ZiR[fSr5CN}5IlQ O1@[GM7eY9jtM*4DK /]ptb5{Jm{u\q- ӝVe`x̖ustL*>`NLS o[2Ezq!ӺKV2;tN`9ZN*9d3rT_q*SRƌn*if ;~߸AHn3ltq3~U|A>IF@T\CK ߼X X2{wUϓrw^*eD {w: ۧ/}< X/>U*4+U# AؽZx?EᢣlR;0.GNxpt4{JopSJ e&~؇{av0ɑ1[nƓ2FZ*mWwR^_BܛG&¢V`T2`0aJuޑtO֨H d[hMMoE*32~BVdu5Yrń[x$|>f-Hfz^,p_y\Sig<77X?,fqN*&-CN=U;r;F EvY~3<;E@@U|p}sۡn1Jq?^ѵ"Vmj昷(p|\wIlh!e W/d" Xpv_ eҷCĎyDMHo -84Z08k;-0{wp'L#vw~͛whK{Rvf378"è=qIVؖzK =/BĘ_`^[*v7JhFHφ8zy+ry_ȥ9lXCrC@6OObg5ȅ$g{l{ȝԶ(Dn}"$ y2 2h1p[dq4[#>MTVy # KA1[)HW آl "sLaz# 8YAKjM 󦽕6ѽ!7\Kb!Pt Yj ՝XnLl,;>ʗ,oՅ/UbZmXɬ߹bpNR7UjЮˀŒnNp{.=Vr]*sU*˴Px{w*LAbiN^~?lC͜I` TFl<4Cl !>$^i* ;aHS*5Hwui:,A#aLTߡv*ݫQ F){Ol}inYYӉ#v(xF 8ȿcRHvfxYxVR(k)1"$R6J˗ZjkMxJ*cn7ˎ\Bn/2%[`ëN,A7@ 컏6ypTXU9p^C0^d$:O$][y,΃^faE! 7N\1I6%Y> zgKӳYjBG]WH h4v^Rkb_=HJ)rj_D47MgϢg B hA4#U\=pV#uz'K(]!XbXcCKY[M\i_=x+\io.V 3S<2ipB>8`TdT&g{3heX)Ld wq1B$Sp GnOb0Ř4kilĹ"lW&<oCv(bmޓaQFzab".#:4 M | xe/)iE A) L=~UT{EJfHDjl;Z%œdH wԫ ےAL־n-EgD.U(,F!l "rP(hKdTKFō k%kƉ^Zj:&w^fDX [TB ^A,fJpΠChCZ IAxOߙr\7f1Iǥ`n,0{Op#E/j;`!:GD@<s=SK5W Y3;?:7f jlq} gg,ހ2 ]H ġDq>;:=F'^t]oeW YAhC:Uס,; lsE<@L5V9(ϰq\8҆2y:شZױįYfJ$hapX$S;s!)HHӢy,r#`g.Y/͜M(O9^BUtn09gv{yYNAoB ?  fKK\ o|̿iةqFnתZ_aя}D;3ve6m" >ݮu [*X3L䬄Lػ&satS2\I$Xn,Yk9 L)Hv'Q_ `I*uh`CPM0`\~&9 !0m81?b~R+/^iQ1/*;gWƨ)_\3rXGGvVuƄ";:q9&!aZ%j"RWP El=Wgڰu0pgoiu0Äo_^& ͑]F-nKY4~ `"zәg"bZT?"̭A5ˡ$g ҈G`rZKb&hvCԛVj943MeǼQ=F : *L"%P2d}Eo;ITHV[0!%كb -Lflm5eΨ.7*$3|Y dq=CoEOupwJgO\ڿ7$(T4K^WP;mšͲm}eپ$0daB{sS#DOog0ߏrLruZynּ(=bIy )anM' z3=Si:'Sù VK?.0y׍dpY gW`$p?9 5i&WrN^cvɦ5x&lNښ/:\" V;KpϋUx\@)kF0~c[4R#ݓjyp͒ :bBQ-u u7lα&$ff]ל]x=_;K׌S'\QuV4"^z&y:Bsy߳38ᤂ `#v[l\P #ܰR8Xp\x'TAT[H׻Zy*@s%<~T XB݁8w9p)P].GCB57Nrx0Ư|;4?NapFH"cz !s;s.bdU8#E 4vȬǽPm;6HjUCtZT2t q !:!̝zgq788Ԇ'Z&t's>fջg!%MEZv8zN'n{ 6zcޑ EIșй*Цӵu 6اl/TMheʊA|X&BgU;>nA4 @to|*ҾUl"moGyMCu}.l o=AO2Id9f/T R?eqwݡ䩠dr>kW;rq5S&oVQeP rN@Fiϫf(İ^07jڑ@@c p,1hu{xĵ0,Dmg>+t.Z&hK9dOY WyKPki@M%;X '0%^wVdh]~oI I'h[t36gMȟo QC PC?E^7okmp:mUwW0?mzA2csқ=pN|1wrQ6A7Axβ!7{RSl+ey i23ͣ\O5}Zp &uq83'XnGcWu*ѽӀ &a_b.VNg2U(JWL,w!G5R6~ D5L]FE6,"-`!gqF^OY$ R}]/-S_W} a8!JsU/<,. sZڈ8b~;S<GЁ XD>󎊸܍3s[f,p K8 ,YQNArM'D"xz:0!)a9z!j (!"fюXGlz]kBj!Y2J,}x&(kH #.OK |lDpy]FD R=)u='q r(mb ga[8dD~q,ztnW:rڢP$<*NTM1jnuقԓt1xק6͵"j uapQ`eNrkV|#)ُ2%V\lmND*]+˜(8@n< 㲫~=*7Gr\9r)&~OrKsG>eRM!y fP̉IL }lؔ~s [uy9SaEzYqj =;}RvMW nq.]r &yɸە8|h.R35F¦E1soP+tw=7q4IWW 7]Z#h>lNb3FQFP+ePȻ[־ Q_@fX r~TZ9ڂm1,PT<_Oba@jad#t MjwIdQtl'd Vݻi+&u7h:L`7Y A@u2/5BLwXEA FeUyF5JU Wj|fo""_Y(W 6C&V615(b'AfP.YGpڛ5fu 36T HR)@,B_$шQ6,同X|K7)[(tAdT\{Lj}sU !(ˊa~헚͊"$"h1yEƓbIsŕ)Q=ΥLpd@Unq#p/*Α%iOASgMf;$cprHynRMÔ`]Q݋ Gyޥv9$&j~ Dl^&`}g4Inyy&$TNsԸcnObq25-'I%o7䮣D>K38MwvOޒ4h*mducEUB0'J 됅 [?^ɘ^DA!-IOeikۄ<)j4!Iq}xPD64! /nRIhbp/;}+&ϊ` (%Vb0roQ\K'JPZ*ň* pE6om֌qRR"uȲ [,%tkpmB*‗G]Zrkӎ.m0nU (y~j7zDtP#ky9XM~?֡1%KB-A;ƒJ@(K,(ʢqxvcyseʭ:eF<ĚߚՉ^(IUN~y2VXD@+9>LUrO!pTAӖÖY? W=3U;=d*L U-kT=0+Xy竣0h<퉾'//DRV`Zx~AXTF. 61JVn[դz#m^ήP.y'KÍT_,<"ތ¼ ãaB OG |-eGIȪ*Ń[|/-n48[Msբ/T_)l!qaE=prHd[3jSkg3)Q9jm|en?0?.'EՐLh<\7{U[@JxҼ!رY?\bAYLԲpOnUNmY`xn&{~-;>#^{ Հ tFpg`;@hQJ M'*3ٗBfoC'^P=vFUˋ %YTUI̅ʩY8Ž2Ժ>be>(39B&c7>uW葔)yPDS }1',q|5p[ouT h;qQf <7`4"dB(oR( w zRŴ^[fL]/vŀ+J^&y~=cRkWUܧwj  3Ҝo4e^P>MTvcF|ك2Ki =A\Z\ 9\ZkQakL~+H`<&[ lXhN$9Cz^E469y'w3cFds=[d-.ro4{Ln . JR_6_K'·žW5<fV-3 ~ ׯ /]U2Jj&ǏevnxąOY2>HjqhLjV4'wޑzIQMJ3հ (SoL*M9D;!usVaE@9xBЗuU= "En]>O'%ON%MfZ~}"dh&0\|C`xlI!˻mKJ!;p1RᒸJ;FķhjZ7uCaxXmtt8Up(,튢~U%5ЯXЪP$%0Av,^z$@Z#iۻQti9iUڎ .2*t .ntyBytI 'DP,>Oty o^EG5#A#!moe8yO|&h"z Ýs%7&%2s!bB }K:b5Psqt n9דn,'(4 dcΤwsuۑR&%9HXܧJҖ M{ҧxL[7~t*Xs(2Uoh q#Qk !B80 -F[ic],[/f#"|ZRT4}X>9+qU8`r7ì,|0τ-ZbJ˃k';x;us 5l1]DثdXl,|%_(}v 1TO<*]#cӎ75~n޷d9ʓحs1\> zBU]n;*fް2,[O\Ï%a6Yqo^X#Ԫ~):dHb:qA*.#~N'W,im?"MGdi:GWilXXvs{X60Z١HdrPXX&",4cR^eie@W!}FE= \ g>B*"HŜ*9ۀK+#-;MX觉οQ$<hV]w;؊owAm6d9ҧՅ dᖵz 삁kΔ WHo2_-XF=0%g^~,;q4Qv8<}汤@Tp5wl=tcay@(CB Wlޔ4e1L1.")K & uC#=c@$1S?hC_!!ۍ>權|>E$v% R" *mTVHiԈܥv386kHtmeIWGFxb:C}gkt;~e^#1$-ݫzi_=Xa'|A-/C# S@}*&FdYġJ5Av1K|rjPOpO{K}c)= W௦C|uuvr5BO*eK]ߥ[%#^-wn@fգpYP6Wj}쐨@,W]oɩEAS?@mJ"11NN-%vwbN@$Pcr8O"]8V^?JoBiYkht|Ϭ#ݘVLR ?I)Xy afυ{CTux]N"fsQLn嵥L'Z:lG>%vf -E'{V 9&`7`RUKڏ5akaw"q>\ xI(zw~7@4T4=E"2d^%2x{<}u gL$RDVA+aKDDhSKN)İXf.mFR#)`'ʅ.r,c{}K7 [G2Տu-1o1$0xk4i<=<%m{p[^-`UfUtRN'Y)d'^dT^%VrjyyFH-ᵧLM {u?\g簕 O^saW<6{tMTA1IKO/vNp7.2&쾲Q/Gl]g]% n.VWf??$6T6_%R2 ﻢrӝtGKl1Jci i뼎4__ZV%v'IFh`IdF0geC*C C^ ElT݋uQ>%5=NN&.WP7{ϢQǺVw#SEr|TfGމJbRmxd[Sp)QP׈4-kf_.?2o}[Xa[)؝;svml~ÅAZxfׅ;x'0e –6a;J`Vd})C7OSnN2<|#'UȀi&oxq+U,S\ N6\VESiWthWHܔfTץr77.\ŶMIdqzr]+07N<~-t/5 ,هiW)|_iAF5 mԏ]YgR- p=]nHZXD_u`/z}a'&-č(RfΰD@ň|2f%a'/JIwykGUMk<`E\E=T_(Ž J٤p>OS@H&Ə?%0f5:~>xGt C\yPD88;tCX]qx 9Kk'&J5{ޡ3d#3 m#f#Ϗ(Ztu@A㛳c,) vڌUxMe x{^9҉$B39~ەHo tr/4Uk =%5IEYJ7ۇ:Zش`F%7In|RE4ץ[4ʪ>fҎF LS^I^YHvWO) , nvY㳩[>oqxI`Mh jWwsRhOE=)S:%uEe[I[ꐚ1&H_4b(g _6^Sw5gMb2gH-\))X3/Tx+G0O?;LMNwvj +Eה>YX!jx,;H2Hcvf?2 uiyǕȏ%g7GE}`iJř.$7Xl4 +5e,v* j]A6ܒ$. oMdI{Yj-xo|OiwՅȫ5k٢Ip>8>sɠЋCi{g^F4e60_W|1EU{YunG-U>h|4G~-nJ@aN}sDnv@ץS?">C!0Oa)[#IwB [š/l~Hg79QzaPL^̢;-[A%$X SCga5i"x.} h1hhE_N=$x+HL.+ɏefv&_A37 +/X{xQZP7/Vk[9iNw=r)PĠ2*x>,Fꍃ4{f2d #J*"`|t+ɱ 3,D[݉i/JH:3ڰ_5$./uF^%F0Xŝl>Ȧ^դZߑhIhnth#=-RAu!/1P/gPE2T&B2z!,qT ݋̺obPv]4 ®ڝƍ\ܹ0Qcl0ԏÈ7}N>jmTL%ԏ!L^eY_?,Ǧz5<X02r/AgꦥN)Yx (*ŀd#%jb1n2{{jJkMOr/aG;z0- Y-519CTҾA 7!GSp-bbRHD?_(t 1๶ی7qy:k\3dљ@>x$+%hZ-c$NYʅ uA8`(2p)(I5M_ "9nc4}Qd`?(K۰PfpKTYu'jg6a]̔nڷ D)9V|BJ[|$X5oNŸ]O}|n\qtr<"z;W\coߓZZbD$?ۘJueqh!PR-]w.v^F*Jycw4Cr;`ߕXDYܱ':dM6 өǍnx*ird169碃:+5J w>SLSUJ2pTU4 Pն=m#i'ǩxwhXhV}=N(&Þr8ˡ*!, _HhurmV}E: x,  wXg#)U+* +G&U OEk|ZwiD11ɑYm:g%?Z[M ^ty-9{DL"d'(J{ R;y`P;;.A+/Hͭ( C ^w˳]*a~Ε0hYxi5^qh:⍈h m;ɍ6>-/&OγjQݓ)y٧BF%i:_G/obHxGr3F~R ~`[X#%Po >PCjt"s?ϑ6 +VnPЩKPoJ2DuFqkCqP7Xm| |^NOX760='pLace9Y*N- 2wό0Mw+ 3Š&կE֖ H Ө<ՇkwhK 0k':'yoO3:^eC-hݼlK9փo 18j jc#}13螪J7X %=_b2ϱLd*,!KQU BdK" x2J悰6o _&nUw3x~JEG( ݡ ȉS1y Y s(Wzˏ` 01}2@;QJuEH}1jfM< 14ЧOZRN-뇐=Y^5>ζ2-;Z; ܪtT1#!HT6*V~?wh)5#ӏ){,> \S]sĮݜ >j?4b);.`V__ɾcZs-|6a%݄09E[nt/z|]fs.Y-.|1ͅ>=l8*.gPvdoy3  . 0)\L6c0YYH\/L3\Y7:<\=fǍia͵"$U(Kv2;.$*k]2ZDoOfWj$T}ʊ*}g/A}CM(>TZѸYaS nn\t[?hM5S8ޑ wuMTIYsR=PjF=h`':\IڶyJ!VAjVӶ~9M 2m uux>|9"uAU|}bDEp0"ۻDejs<޼!yn'J&%OκX ՂLA=~)d=tۓP—;K>,QS Bg,NY~$}+C߼]…؉]՛ri)h}a^yU9D{TEf 9Ltw4kz2^7҅v鵎GQz{Zӊ f,o057K26RНrTFLu'c퇔,7Gvv8nx4ۜ\]8Q*bUʃ~D=xlYCMofr!adJ{փOY„˼[5ou kc=yB$2צ]{`&v>r?>7Kٟ*"أ??qp@1(z'7.+ 7DM?Ғ`c(0A'vr<)s 3:|<*AL Y=3p2$VC)^l ^QX^6cN(\n_):}OumEiD$ ,F f0 *AUdmf[N\g'y0aqQ192_!hāÁE-J%* bݘ?E9h~^(Mt̒-3J6p@mD(Y?U{dIW=S "F`+[g34T6*LPBc.YNFQJFX:_'uo+Sm D- KҨ, bFԇ z.%zgrOvlH=GH w_}M~v30Y-I><0W{NZ~${.ZlwfRF:>07#l(316+2hgW2n!zTǾ!;0h덮Q@oV(;&\^phْM+dAC3cMbԕp؋D\'OO"E\0ОE@d1c?rIo iK1m :#p:5cZp>p߭17#pYî  ~FuwaXx&v'M4R0۽o}d+v-Ft2߄z2U^eQqn`~A[[ 9KGa򚌩cj6S18kߣ>G\7؎ f`wrx# sco$Q\_z ٮY|3Z2Ć{ Dv0Xn}u\'Rܸ>g>=p<'[7 |g'mq#o={UWMXS_JЪ(~8I ғ#9+1Q`jVTSmXcsaFY Gw%%t-Fz5_>6_%~*g %z ˲6ߙlBY+_kK|҈HAʢ;iڬM҄UF$_K6h8T 9 .Sƭ(!+مy~ a}OL-Rt& kat]٣$VOhFlt{nUFAwiQ$:9fSޮ17%hcI?gzVl/c"AJ"Nuk-돹͕&9YvT/JP8[u5@t^UqKQ7%_r 9)DV2`K[[SWGƼq]QGNg$~Rrax#? םrXņoaL}=g.8(S X`&3S0)$~>ln e-` K/qi; c)"-fl Tev%[s+xưn- g- ѧ4ˏ H$H:*.Mv aPdL 7jD~{cImǶKu<*y:1 ,^F 5Cx:tԷGNi㤮49Zpu! K?iGbIb4 'G2~<2؆̅!3A_mN5kTu%Oh}RinJ j(:RdǍ\]4EH5 Mfv!,q}b$|e~g2 ւyf&!~3ZzGE#jd.S/SUii0IiGĪ^hz:I-LE-L~EĪ6 D;Ȗ YnE)[ Rl׍ USheZ=H+q2;X③c22u,>ZH_B0~7yE7{oጰɯ=T?B HG#y댻* h(QQ\rOJ~}j))uͷ;4hLB}t :[ϭf99/ Wf轳N{˂f_0nsҚ:+{AuKOW.GfAI ݯ^cY$'wexm&o#K (E-y6|4orְyCl&67ymA8jrn`$ݙҗI~x_~`̯hR$GOZAe0$ {LgIc$r洿UfEEzҥj1pk@=Ք핽kxʁXZGAЯ,H\)nrMx%b{Gvaa:badsunLnȖ: ̀+O'W'+Jv@w 1ߎk: RG)7Fx`L݊0<> g7ķk!h:sv@|r}XkZ8"59"w:$v]4fjN@L$!䏵Ohsh:_9Цf;DTtӇ(ߺ<>6Pyxy]VOz- d@}rݦ@f?/ M@Usk虼Jd8wN^ERH%˷Gp|s ~C4ڼH3g# OuxhSgP ,fi(CLO*`4 v*oN`?lC6&_0Q|S<@NgG!7xHlU @'ڳsD_l$_3fc-xo1ijE+&|SY}Mkvh~W Uʒrdlj MgVhv9FIJ|V%pH:t `OCo>Q{Oݳ~jEvicḍMo]S8q>n9Pr{~aun`7]<Ǯ{_ޜ%h>}*:HϭVkAbCU)a?qk쓵LT[SVq}L :_oUUH&#wEV5Z3ՁhDJY|(@7TzrYO>˩@h:gk+!S tPp':PXj}(vB;ofGvR۠zv[:&I>&W@/ R?^qJ7dOnrd:bG09FFʼ627m:ՠ$Q,oUb4f )ٳ/j֏?]|z,A5MzOnRTy#|YĖw5mSDVgfǗiP U+hz42tw|O *Z /M7:+_;~d:xC x+K;GmlHl]]ۨWdaaYO};Y)\EexA/l*C2"8, J<+*&?"b֥8>a/:OCZh6iYG?"sTdY:Ƌ?͢ VY)I|ɚ6 BTgzldIXߑvB^&Iz+b>T:(1/Tu(;ģLj)畀]6/t ӷNݪ20_CӦᨽ}ݴvyW񔛢rFP0^H%r`M|ZkK8#ɦڹڬWe}YoϊNV9+kt['C/Brp݇[aFc/ߓ"[jNQ&wGOUu=[k? w_Br#:cI&~%@P*{k 6{ܠR| Կk_*+S!糊U!˃,1v:Y\$`қ!2fTćXη࡚ӫ$@읚r>)\HM.R^;@&Y7 ^W$}z=#afπeSgXw_1=&i)&Y@+c1{YҖ0=':_cƙZ}80%mZOBx]C!IfDBV~c[(BN Uj"F>F-YuF_˭f'Qm՛6Q[Ln^jp0BMB)%VC:m*ݬONVWg|fݛ %JvGY)#Q \PD )^%CMl]MsUkCS?7e%Jv_u:k(6 dDdT$rQ <*?ނ,4^0;7`o輥v 3q3SOXjpC6낇rJ ?{H-7HuקPrj*()CxQv׶ĕ" G7,W6@xknS^!Of'RQ"=;Ϋvb K JA!0K0eM^˺/{ 0` vAMThA\[[:sZKXQin46ORQ0hhs .j}($p2'ZXwҀzˁ3 kR|!0;T$Q*_i۝>Rpy߅)gƿt\>EII* Z=B'tp)0Y=fn I͸s5V~ {@*A?cy§~g6J\ bF ?tmǮӇu++`}0`qʀ{tD:)as)߳札5OƇܿul'Y{D$2;/}x-&$F2 (Gb:ga3۝NT5@͠ėE(jU_@Ki0t1Ӕ ؈֯Q]Sf>wTĺI9A*v%0ѣfۮUG{˱jӥx/&TI7s.kOީT~OY-j}=4D2+*="w&X{乏ױC2&nQZ*0GWmHAB#'O%&,ng-4-f"U hlyU 9}FѲ<̦VP/ǘK͹N0/#b(H TUsTɟ2FvW@"kvN@ 6N5I[@&s@xח.ڿRh.x!6nuz,+睎Y;Q~)dJjI`.AE0@v"11e !h8bO B8N8|B4G9PJ( se+`ʉ52.}<˙ &(f&@_ΡOjy:+";QT0;Mh#] X}t<2DJKIhH͏"gu8(#ٱy= G1Ok^ j,4l*ya 3sia(n޵o3!~eH|D v>$&%lo[L{1k3Gֻp? אvMHJGE7pr ĴfQ@hRu#UjȠgϥm3e XL\NreuOIC[31̺(H |1 rD2w U?*tT\X o&`#=],e4n2@g[#җ# դ 3 \ ":)ÝyMh1$7ql7kqqR`)-nODh/TU2-ԣup80菖å˭wn;s:Cngfx?U/-hs8I0# :& |`il+a~x>m%E5q1@~|/,ӻ1zN(M'7Mߐ@,~( ٌ2)Bsvs`Sj-L$#C>gO[yL}) OW|Z7/fB* :*[v0\/'9#8K%YU/QR'=-'΃m9nE| R_~ tzyTxtEm[a2H}$;.Bv@wG73K!ۤ{4YV3PD%HDbfXzn<12nA`G߹c:w -v`'>;{oC~ Y!=gm$TȧuGWPbJd>ESo_2?'DD *9\ip>-~->dB*|65Qq%ܭFȃzÀ^ +aC#g8|)OLRbPJIa)Dp۟6'HƓdd;+t LB<^z[q6c1w!0x,1{yE,Ҋ̐'r:r{O;/?b8H)٧jT|#OT7wL D52xе %Q.spH^G%`_+W oh6 ibҘhw;v.6$>RuՊSM XF XRd䗶 qT8__,rvKxU(UC!尤xZP?4.Zw\k3ceY2YJXSLZ5s{T>r5^!RE;Njy[ȒhrtQ@ȋR#/f^糈rR6 3sJ e"bh (Mo>]2YU,*)tP#}k\%+0G2rʾYlҤ2 )BGe`̰C _6"<7[#A]X5GeS fid:tϞ1)bEe|SsTCe(g ʳ_Ao]y`&ڲ lYᝦfz*..Z4B,3;st>$%tk6qdf 3Ug3T k>9Nw/TtkQ~`VMv5@ WFcrYw0IHa"E0'x΢ Z]Ril.9ߞ~`9RzaJL֢) A)V'> [s懧Cf, 9ΰ5Rhe/3ܰ%Fo;&2;ozQ6lgdEChNKja-  7-ߕqx(n7=eSR**: i7FNYlsW{PAx4a-UL !d=lpzR녋&mP8/poxE@HUOɜL(=RܯO^=<8neG%xoVcۜ qې4'(<٩fobĘLlݿCϢS,c7aӮ)(>XVo`.1w+TAcMsݣlz-MUCI.̣)gG+I+'Qo瑊^eA!8Ot@< 6B, T>Wzl$;‰a!d?; QwIމ[bⵡ*Oq2Cо{D*3ؘ}ЗԶҹGS5GY+;uZ}ppqѺdY_$&0\CLv*Ѯ&tWA G y TFg<#}i61Ҫ-'N泲@n2s> ^= ot7 h((q3ϣ/e5"2k[eQ9 dGi巪""6Uk*,$u^k#1VҖVw)wϕ 9?D~%WX m` /}F]*?T9`$PZhULvU+%PQᎫJ. }/:pĆ|Ye7}P y6C)߮j _R% ",HZ+Zv{ [D ud[ՅgѾo5c|e)y}JejZ7"6x«8P SƝю̡w<.%r}XS6Ӫ $K=C}n֚ójѽ-;a+": J{QTN.yng]}UL=RAש7d.~d?"h:31U٫qAo@M`/#=ilt}Tkf r$~ RE`Z8W"A/(ݝۇ2-jY9taS`(U1}6h vИ_RO\#vl=e|n]oN)yL x1Ljt89 ۡ6vGؐn>BRa@ &c0FgǺ.ftSa= +8wuZw'$t>x"X667ipLJ]"0 DW㢢&D#3T:Ck7O.Vg`! 4-fIN8{{!Q|W.@=C )kzEw2s̝^B6N䚴]f:JjLOæP(f\Tk&7W\WTU4ve{^ BLZD"¦,J\U)Bqb %r>=Gt`Tb>ˢ8a5hS7B;jtn.2[ [` )ϼ^gkʎ-ӿBeBP:S^^ja%7)Ns,mܥ1_z~GY28," kkUFG3Q/)<ߖ=\{|rv_3[E@ai3h!٭"rHF<=8(Є5Űe\a]ʖ0(VFMC6yߡwIW sCl$O.3c\SD;f]}+&Md+a?D'+IIyovvDft:'gk`=!}v;1 i428  J}%zg%2j-&p7Z:􊜏ɖW"g(N>5_Hc% 5?jfJ2yaT ƽ[^Fޗ +T˱~d\b36v  ÜzXvd% *H<sC)f 8q \nQ7H4-v<$jqȞlAoh=fkbHuy>6˳<`{= '.$s4PjF-rK 7SK܉U*DѐP_ٖ:xDZa(ВR3L;Q{5۹z=o ++;p- T f [f2f 1e g꿰5Z8=`sԟ8qc,gL܋/=ɳiǺ򠻭*ⶴ(Vw@ld^+j?GCᢥm)舜n՞8CT0>|Ί#Q syN~ + BQןv ~/=kۢU?:a[JM&Q>u`uQ’̉4`5̬ԉO-6+E~û_ܖ*?,]׭|J:sEg뫕øFTm Q&~?6퀲KI ^Qkzb4vސW HM(EQ=K0N4vL!Q&[c6ctǺQ b|%QRp[ӧǘ0f5c2ngھAWH\# ; ǏO0UFIyҞ giT3\iɽ1xù2C@vʴ9vIvf+;+'5P.O> #~Xm5Y-yPwWdR%R]K`p{xK)Ʈ? (+H[o̕[v0Vc!:"*M>S/.]k׺w˾gkWR@ƥ{\n^%˳ƙf{a4' i w~>BD;/C{%DM)bn \oٝ~ Y_M5]ȸUKȦSzEsm'>|Int 2P'>+*5sbӷ w}/FJdij@I7 &(% tr~I>.|Tt1i-yrR9{(Zr3 r8~){Z _w7!P@6r2LhB i애1/\/ъgs6,fbKxq|w[[D}%D֯?h}n{yv-8= i-p1[<̒ښ\_I`U{fN}ٛ 9)[/<3UJ1@8lmQ=E(wmC!~3%vWMƳrЪ ^{;J\`md{ƒɂWୁvX9o}& }aDBDƢWi.L;cJ[*?P p`7oєm JbUxXPxrMTC5h*uw.3[ha@9Ͼ(#CCYb R$$HI-wd(c ~{;s<תE-f8Ԧ8vh>vʇY+kul ع2al<9j%ֈ |6%@YL۠u=YIW~wF6#7b(Օ~9Yz Us {% vς _Lo@PuR:2=8TRnGvZF}X,32 Oژ;ܕ/x !>YyІL]|?m2َM{(-XY{TEBΜ<˧]ao˙a0at_a4k~J` 9օ$y,l{Nbn\Ay>02#z/9= "vԳV9dy..k'eWlW"ߤ'i#fe ֿ UEmup-A,I&iChyVt>]k|}ϔ {P-F$u5>AX->CL )u:%s頦Ql(`MZ=eN=:Oqt77!AmzmhQvZG#u).1ѯ#㮹{3!7s.)R4${"#uT E8S8w -3o(8)k}%J5-f&pK`/ G d;td^7 Zq Əy_8}'5abA^zp,k0\ИK] vyB1WJ< 俜7JL ȧmA1Hnq|*:'4JT:nfMR|ΘN%1p~G\bAX#Jl_ *Ty'PUL9 `WGJ"WImzGP+JS G.+iG@Y]R~S2zG'JZj6-Gxn f :o(WɁON |;(5ATS7ar< 2 5LmP yt^YCq 'Q `ZzF' ٓjܞu_;e^v1A9v rqS$|m_Ʉg .#r'ŤT`B_\)U?$; L;"ׁ" ~Z`^mG5iAn@tn%m${TL樫e*xx2b.HjwWW>1PMbRG3U_L6}ktZ O\)v8a0=ưrc&/F!҈B.דbrWD  aoRc p\tmvT:NFaBٵǫaߞĵIրPEr _y,vpm6J^n26ZRMx<ۚASJ,T+EQ[!lo`)n60%`0*{]ۂ%2+V9oA$l%i["c|:s l* M"ݦt }ԩ nݙ(!doseiN=M9poqRֶB$ΕO7NgI.7gz#ɉڦbgq,e@x d-ȸBX"9Rwy y⠲󁝢QBVkZȚJgnJёp 7ֶءwI6A]n|&ԛMEU2\ᤘwDKp}YL F:ՠ:k>'&e P3-56uͦHI; %f(+hQ,V`(\VL`b{tM!^c7;C?XLD3KD{M/\UII %ހS-ZKVdgR=3h̫w+ OZ h!c/}f75i̍\QaGzJpr~=PxnP/jlTr ' zqH"5vGU|+ =Q;$MLKIV9*7)qsA.@S;.p7IU}klҮ&\%bf)-b {"h /"@q-O 咚E ҉B1 -O-CFRlf%XV&TEGܝ% H\w*'O~,kEaL؁_/c HjVSˤ4Uk\e{ ᾝp&\o6' O`a 8z I{.c5 1W8No]Ʀǿ+-*⫺@Y N)zeЖёh%&D}y[Q8~R߮BJUEΦg?菤Ts" }bj;r% J^Zu tI/"Hqh8qL|?a[yd׏P%gF0[&4۾8)|kC$ q"[t% \m!ay$tJWA;M" 2 NcpϨz eUx9B J9.5Ry񽠦x|yQy@09?`E-Ne@q6fuŒST甫(_MSŶeql tF`2m-L|~n>oJdr*ŵD;5:G؁L唢7u. Q%;r} T ?D`+LG ~IBA&EUDvDLmc@gʡ|4p2-ܝ[(<^12Ԟ1H嵽nZT { #s\۰a=>?p"P0þPBjff3o۩;_}ؘy$1:6x_v-;Lj˝r'Ur\`p?c@/K8+k/P?/C賱3^1 ]:vTOVXP%X&GPW"qWw'bvzb\>!Q %R{+I8?y}8ʦb F >-lWW y9}48@V VFYrh-&}?UF6OcV,A`JR];,i,IYˍY4/yUv~Y˹ԜVcH+ ǡ%7֬}Q4> IB8GXXK|fqB Ñ_I%@9 lGY)k1M(ݨ{Yy$zq"1q0,;n}O'ʒIYVg֎HMA7|W1i,0l@9@7mj0t+:v:DPO'~%Y#vϺ:}F+ѤL2 -LfP` !oQfz9ZJA%bwz~'A=c/MsW#ÔOcZX[hcˮ3V/f+ Q7)TUD) H֏q`h*t8YX7\&tҗ0 E\ *@U\-3n^;;_/Q]i8>QG&%ueE z?*ˣ3'^2 wRI"hFLtUbS}ZvG^4kkS !o1<2V^wLWH%eO]_XL `o#1 VR}lӌ=4^h!nd8󛊽mżVz07s\+¡0!;<5te2EU庁ȡ;1;11K~XPIG<>Ȓ}UŝcjguEY@^Ky7te!Y"υVR˫)>Ü8?GPXۏOv=#vKU9V>"ҋI6 Z(!'Vg/fw)ϨZlawF0=+|eO$hm %-Yy¼6ΪЀ?{*aT!N'{D qTP}Nzv3*YsoáVLi8U4κ&v;1 tϾ3UV}bvgvQCCe0 Mb6)[EշLF bE!aV NM:4]įDZR+:3]ji;ALSL n9O0^cL@&N>0BneyXB ' 0KVgA;\@೤prâ-nh2tBbfbaz," g=X`e Eh iHH0wšJaˋ OtqBiҎ}ʧsѨRffo[66Y!nة4fmV[jV˕ cA: 'fhĬP羮XJ<֑JOCp"uә{SB͟z]Y=6G_vԿ FMwۑ; 3MoUu p7FB!g]L#waHH)PM%;Fn.511Lsl[)H};]N[*i'˜EOupKI4U)$&ﯼ"܁껍YB EP~k X¶"բd솑 +!]4,B0S}\֬tsN+ 'IT WkNgK4My+HbS2eKHD:$5bnP/h_ /-\E~#&)$a?n7Eh es&9UH@δI#W~;mǸ:lZ>X 3&L `#P,8s)RewoV^nGC?g|ST0zCe<E<1pV/^Jy0WQictP^yq&"# }PA4ԑo`I4}؜m|(I\5 cWdo/ 򱱋P-AX+i>Z7"/X$ gpy?K{@Nlω⿥J|x e09GkGs{tNƍC!b*C8q} JYTR yuc 67CDX [Vq8Wǚ`%L3I:=zKZrNXK\umܸnC#b3oځn)UM]N+,]ިWV*tڐi) vÉVz !p{KĜSkKMsY\8&?ıa4JVBw92]KU>XjmϷYן0I%`[%6=]K<|DGLPlB>aMgc&P'.Ra|\[cݳ)tBLZ(!\TB,"|@);o6 T"XMBcBހ1H2uw&#"_i v-+e]]KHڨG^%1CޕYFU_ƀD["˸\bx$'!QogptOjL/l)# sl4\A 6/]3=k^l4nο"rN uh$;/VrOGb} {_3K\p3SRL2SYW.yñ6d}[kA2KޝP5ͭMy|K)䧋%2UV  4U%GnF]6SA%%TGP3OF]R-L=M\ tW*]Mܚ?ݹmNv<x7fNc`A&i"Y 6١8q,1/A$X4mp.G/ƆԔt`bh-g@6QjcAP$C+)%Abu4:4ԮiY%-jR0X}9)G)&;\X5Ae#ig9-[Ҕi}5O 0ʎؽl;̙Z:i>x д(e!)ouBpA&TQҕtՕa’.ʉƊ#/ \`09xGԓN%ҿ|y0L} P/O?K.O5]|O٭5zƿNd)M ,Cf)0icG;3M/}L ¼ 1G{Te,x\eXVPlO-`CS) #bͅQYC㗕S?ܯkE[SI%q5gS%]/TT(2 5۰Lƍ)ҩ)lz%f齍9O'wȗ\oMx &4Qw=_Q, {B~cl1 Ơ Ӎ"eN^j#ՇLT{zy%uꊉpH" Zcwƶ~IV|AQ3Zofp&'TFBĜ7tMpBz|GTTޅ8*Rv@`'̱=py?E`ࣄƑ[Bm.jf[9/\ _b*Yx< O~(*^$Z!KµHdΚ=ۿܟԷqo%8-dޙxMFM04'a^`az!4M9vX _wD !R`+-P0) |jqxX{TgځnTX7 -aSo= `.5QEѰz))ziX4[ ;}Tst_رAyM'8d%]lvILŤGe*MDD"LvKF<bzރbW_pi"/8+BZ09W6" Ja"ެwy|P[xطTg83בNy/Ga41cPk"1z8mv$z8;̩B[jSH(t=ȳe4f-c [g>  >/6K ~"N 7CNm} 6-攞nϗ?>CSFm/˫"vw3B)(dTwڕ^~~uO&Owû_h9'OW; }uTgh966QdgG|NU' TQpKѿ()ՍNgt:sٴkøV9>6I*_@&[.2%O$^X1/AVط †(<`T>FFf'C&,|~ٱX/.83gl W/N7eA 8g),2gλz1=U/Ҽ&`d$(WLSg4h/(U)׈]6g@'řZVHu xR3'DMSwœǒ+)ĿP޺!ѰtpㅘLbKI:4S&fMتB׼7Gzqv@y5,ap'wrP蝾T\%Ԓ$>]mP*f++ #kK@eIK@n6i fRb5a3 6*G *m_zA9\w>Qb :dYNBg.d2B42 6 <[$Ê@ alWzjdŹᥠGU]ڜ8T ]fM;9lJ4q2$lOgfZXG7Nגכ8_*2 1r&m0#:C; (Q= Gn/6f9{rP5u/_`-38*UvK^H  APuGjPO C3[5T6TI~NZ+r[4-t`@cr2PSKO~1؇y?sj}"oh8DO$A^ 3-"вJN.ol&!8֘Ej5+?Be4ܺPO}Ӷ鲷AyИ~%D/ɨ&˪L;e悪AZCXC66P3W.n';F\u=P.<#o%E=W>4 {4>*ϦDjU-jG@r& '<2|_ĻfaS&K¿:/ 33籪Axo>ݧ]Z-8RT~u#v5ُ4[Su4ՌXf:!CmZe旯:Mnt7 8Bhz]OD"$㰻cGcQnjdpC%]}I烨c^u:a{2v[3&q\&$' Ux>td8x4btm` uKX2,{4WKlKE!>a>f{~ e@y*F{}e!ݐ|Om/qZ5a& O8GN[<@ ]iVK7xzRjr]MϽe_Suhi[=ĺpDƘ E3̘^sIB#}-:ŋZ24Uuzb%ш/eSRG]A0/"6 lӱs a^Y e 4`U|!DSr$t'N>_oT9iLV(X>ΐdo@r$lt7z O;5c|)I/Z^;HQF㍐D '$Hõ~m3[; 4)p(iJ&9D0Jܛg xi%=%%?3.722`Ii[OoKɛ,|2Y'!@ ydoE)>t7)*i0-'zioϺLdNә%%aҵLs&>FXܩ!}a嵶_N暃 +:x1 9q:,hUƯz<& Wu`v "TXk,_q& .WO8#clԻvy:uOpXa=]R0&{PwjD*@ YGZe-xdLSʼn B9]hǠ?-2*5D{!`NĽ8@x51J㙑J l1yv>x7 C*4'Nj-!̔+wlNPuo"_>6RVcRA7ڌ@.x;dIDYFSӾ*Yp^[v:Nq952B$wN چFi T#bdFS??i bU]GU84/ݺ@#KU~X.؆2}iyT@oVwDᲱFu7kYIddͤ}4&2u׎ \Dq|(7[TMEBoCY ./\?uGJ&0adqrIǸ?et Wʟ1O+LE`^e$Zfvn2$kae 3NG1 lYLK2[utT'p'3h{ e)gnT?& {NtzxOX:J0 u;FB$}R6ȹ>ì &Y4㭃3v]˔aM%?oC}3_"Cn{\x]>~1ʰZT吙:ѓ,&gЍ2UW7RI "|hz{ u>`xȎ XgdRX&MM=heSY֖_.q)YM5u4X Vare sRW+|2jd,e5q0}[`iK=W?iJJ>d%[:έn:=`%PSih!hW?)RZRLGr)oʏw\Qb)m_Q DŒ H,wAbҳfyO+8.vK#;u0| a2'ji5sۏ@a>m. Z:8յӊMWHٵp~TkB8L%k#ekdEwK;F(. ho{#scE#nS_NtJ ʞD` r*[H}x>m"-l+x/ YMC2h2v%1ch*R͞E="/C[_TϑCuФ^̦Om~ K|Ң'Ńh <+C90?g^ ?t!( us t1xIxv̧ b&pUF 33轣^slY4Τ RvG*,sN"H{xV)vVQD"Bplz8 xǧo.b{, r\;νo}$#P\ˇLGESC%52$~D+Fptf%"g1^^Hy9m!mϊW\Wb?褛V||M z󌝴 <\-m("v1&vTe =^`(ɵa,-pӌޱݸ:H?; QGM\ȰN̻yJ$d^9y?/9KR8,8#vzoh:t_3}OWa{5".4o٨oM9QyhWqPVҎ 9a Db'W,9{0q%%[Ml>. ]U/,bHp5 'w`ЧT=A }@Mt:Vwv'Pk}5TV4s(8<㋖SJn_ISiQUEp`m{'w{)>9Lvt d!y8Rp1afDBFO\NIRM/v9!ZJ<$,#@> u_7B,%$\Nw!z`o"o`*AV4XŇSitKLB 42Nyi5F7$@\ۖdklw=xʵvn}Xbqqj-y|ۙ:(uQOăCtJijL,,L=S ,,syy;-V p;amL܍r YZa[p/N~Q\Kҽd=yϘoa^u&ČfAyf'U~1IJEz )edD o8A0^[Yz¯C#ԓO2bd+,h/-E,b}߫Ŋ{c8Bdq+Dg L%hܿ'۹@꣺X?ۥ8]u >c" o\|LdK2]e˝I6,)S "npUZ!/I}oțT=UhYesZ#1rӕoW1Zن .Ӈ4i!iD{IךOײj_N@ͮ0Wq[>& #'& >4?\A);9GE@FV̀-yjD_+yR3ˍG""0: Ak5KdNvK"vͩ11d.x+|LuTv8 Qi#Yd,вhHk*,3Vj6 ETmFI^;Blda䰋,b>'>6e:vBŃ֯q|D\Yb3c萊#_S}Uk3Ji8A"$R#_?cC8['7V@Y y2b=eԾsl\1!Ls6]Q&%] GlB X/xD+-kn,gE(=Ԅk욟|.rQJm3-#Y/rrV kp;t&NQ(t&L_H^(b[Ţb pdV g@Is=u^]eI*Cxd!PKE(Lbn¢X{3t@Mb1s-c\uUJaʫKUs{J1*Zp㚆rie:QdUgXhOǴ(7t_@B@K ?"UUqxNEF0!賆bժϥx"DdqNb|ΠVe Cz? Ic17QISG"ZMV@?{r>djzkc=kV^,0e*3D` c?KU?OKbg5y܆ر#Ԕe =%T}v. 7B2W^)jnXt+iVWq+`]҄;LFL_h?yg~,!pwz1żb' 0cюF6wreM$ W['z%BxW ]d.G.w]k6v*ftW#v7qJq="zO; UeE/01?J~Ч> W{BR>v&w WtzH |ƈ4/Zl䪤  W eXK~:KdҒl=gZt J!ʑǪF ˍxr`gMdis}DHibjTi=]0т9rӪ#nH@H~iQ^/Gy.Qmq sjqpĦ_.+(mnmII+v-܍u14!)pk.e6C]1 YqxA}n_h*z*Ni%~Rc~bD R9#)F%aSqvzY?b2i3#q"h>YʹiŞٳ5%VS89ѝL6 .0^5 KjY"`GNeNӡ ݌ͧm_3")aRi_X,@ghoC̶Z{f `T}g,'+Y2^c 2q]4\I׭ؓ*QţD6uP] F-1)b;mK/<e E!GXb%er.MMY Md)&)2;$*.4ƒ.31/ތ${_}F}Uu@ۋޏW*B ރk9i\!5TsooKBpK_h5je9X _ EJ6sqYšm%S~Г,Yk-,W=4 mP`M&F#LgiOHVbώR`G{YLxӆHMuU猪yl$)gѸ3pהKSuLi*O?ⱩY@ckr ѓ}6|݀Js5[_z:7+ ]\2Gq 7>,zW~DZ9ݬzsk}Dž{qLtlfmGZ 8" o-?ʘO|i_Tx89ɉ%mAn1?SZ1,c}5x=idc ͔^Ge8v3N7[g`1WVCg,?t5mn=*٤>VAr6e@jqh !0^&SJd^$Z6#*Sti巄v|!r5oLT?h\m ٧g>Y.d2 Vb3X~MJWc*ҍ:OYvátt{4.G*Iι\=_wAʣu !ޒEFWv>?K 0 #DSͅ!F1ZM>{B`}^[U86ߧ'nd0 ሶՆ@ dX,ZWuG3IrOd`][p2 ?b51 c{ K]2_JbV3B5v1FýƁhtzn@?|Zk_:}HL"ѣ 6a<52zJ,*=t'"SW @Z`FnWc=}Evf) U'#8!hX޹X ax-w* >"Hq@PupCK^>㋺r`FIsTl7. -]z枱߾T,u6|`#0cTg@ )jbmj0򏉲 ?Tgtѻަ"nCԠoobCO)ga-i^<2~YchxL4TʁŸ<~_AeٿG h,DoM4Z2q#cA 3~& ˼*͊SֻoX]i%t9ԋj<~Xȵ,r[݁1{CANjo.sF*B#HKg@sH{.nhxLSmmS5 9Hp 6SRIL$P(%ЃmaBljBHHm _~̲j q877o&㒆r)J<H e*+nr鎟E=b^\;5_m֋ }*aH8ERR!KrNH75EnkпiPj <#^[ .XU<&k.dz{Aκk#Nvb$}Dyk,q݀B'=uPjWHoƪAa<9!9?G?*䞓b>uXUu^(CEt`̀n-OgNh8}_wrt H %ML\{jm}}O3`ő9=粲`lDH_ ZtΧNQՌikEc >H9NFoj$C"8Ŗ5ʬ>7R*_7jbC.Uvk\KpؚkjŐLk[+o _^qV` c{ӌs@ߙ`UH^ 2k<Q%C91<Zq`F%D9sp7 )X9DTehi]˙@,hj RuT6PȈr%VKUNlz,(U+&`Rk42ƈS]e+K">≅6W}!&wA)!>&nU(,1l۱QP: hK-{Є\M3GF؜B1BL,[L"BkbTˇ}aEt8iD0 jp NR(BFsߠj:URq #-U= sNAneĉF9C;9nMTaޠ]n9\\ZǢ}*u`[ ?.`) IOoiEYa"ѥ2zǁAA+˫:] nd}'0xF"yt,]5&%rN ǜ&ZW7qDt7%`I͏fs=yfئ@IdXQl4A,\mg@4Yj=] ˄#Xf_3u]8:jޝ<Ȓ0Fc~U ú-ًΥM0׭~ww!3F@^0&B*G{/`[Z:&~0T?CK8Wt ,j~GLTT9ꑋ$HRxqo !ޟJq ,) ?|3XvfT4kpkl!|юEFrhZFD2F𛢌;Z=ThCM~XxEwo[([?FU"X@|+/:d}IʘW{G[(N3/.v^"p MۊC锗J5alٳ9@:w8q4K>d̕FR,"?);^6^Dd# ̔|},xl|?܀;9QYg 4}(_;nWIK}6>Jr'1I3 >u =LDIE_hƇYo^l6 gI;jS,Va偋<9Y9Py  }kn;ռ1ȗi>Gh8 ۀ/n"QŗriCO3hF,bP ݈G7fwG#-f TzDb 5Lvʯ 0)˄xbTX#e { D"q#X Ƽ!xv{KQs*Ueq7 5k?8o1zD^D- g6ǜeO3OD3=ՇA{̋_ى>bap-pTz5HA Ȓ tX#}Ϣ,J+scDb~.6+)~o4Ꙉ::4Y@mنExv"VbvUw(zmf@Ihk޾GK7kU&!g9ɷsy6k`=} &d՜Nz+A4JDmh&SeQYlU7t!S O񆞒%0[s5Mk?y(rU?pV]l't[X)sIOxۣXxS0j 䍹}ytk,;bd-=o K9k%Nɓu({ 2>gbcy"AәbCS# ]w$0a|a!OЬ28xgQwD4sB&auܢ#0g?ZJEWpbp.紽aMQmO2S+ Dp)^]7y}O32~K,a~%XfYcpSŨ*{ҌbgMKI~#.CBe_V٧o[!!ab1`$W $˒ס-J`:=`߀8V˙(+ LL+/t]=۸>yjv1d2ҩk4LPC׳<=vҟd,3e@Q̪M?;T5cbuߌJ( C+~{gs[|Hqi|'_&XuZC' bt!q$ \e`8,wway߀B֨)~ǃt\?8vHW@TCJ; {yJT6GOF$آ7z׺7=դSF))VBrN!G Ա?mZ7 :TCXQgfdGףǭbdw a8h-mb%كi?(0RH#FDz|#81ߛN cgdz!Q>m&Mf ؒaMԊ<ɻȈ\[4C2vGiU6Tr;ơ J'>< Iy$-h!i)/ʋ%JseE{Z \q eAL1x`V{VvD}qh` =QhwX3r(wr!|t%VblعI^/V)2oeիVcuF׶a'ů^srd;CL>%/nwma0zLgluunio#FN- !кC0йG {ЫnI+}NLއ7Oުh?Ssk"*W]׊K n6O"yjR*ޢKbrn^%hZ-? XSrh_yВ}6̕*Y4KdF lT-L忹7^шQұ`| phx *T Hͨ+>b ]2A0m?91:Z8b0lfDd&Fd]cK  iH;UT b}|zI=ҿ>!C <9-ER2xӺYIO$OM}m[.I*Yt> -xWBHc|+&#1I^M͛E( 3RO9&On;cW,Qhh輶Zeރuo(&:X P)^λG#d# ݛuvi_ڕ .K=`בtp^=)"K+~΂roFX Y``i7oe\;.4j^/PXލ+13Y'`\%$,)i\0T:`YHz:{V *1K?Aŏ3X-KV2޽Tvۡ"SzuoxB5 Y~VTH_Cg\@<0Ŭ]>cdڏ7S-쀋֕)URT2cyPU0> Qi or0?Uw7UKL9>Kn鈠U*C{s7D-/ ޟyVp6iMY͠_"B '9ub ዻY^"6}HR15\$Twƚ8: }^XC~8$d5{ owG7s18 -lRR)Q޹ZY5m!CRs$Gw_8yl>c2kl6~|3˳Ddq"EzDF@6k4\vX{'?үx"e1ĝZ8*G^QR % ζGq#%=4lK6g-$F$4J71R&Pw@Aaun3JbiSve!Fh]<]U\̶$b=6H*j8p9>>Tj?R%o w+ j;ibr $5 ku\x(ʩtU{)Uڝ `ҧ^6*nIv]0q2-"a\~&k qv3̉$Jϔ7`0@?n٧*E$ {&X,lw=(Ŝ'L Fc1rzauEzL'N24Q^56"6fb8\H?+fQ: H+1^]h@M23(Oί&_6q?K1~gqzI{@L@W+x [tZ-_qP!*߬hZ&Z,aND#~|$4fLyc3a xeE Hr'u-@97Y >⯼4C椏b÷ { Zd"R5[9M YlnfZ$¢Gf+UfDq!`VQ.E k.)V#MӻNwG>:a%(+j޳Mc(mTރ 582&YFbr wSrdh|a7tRniG 6{Hǝ[[ȐiƓRw?JDXQ:kDyv[F H2~豍{J`v4}ۮB(LHV;Xe=gPYvgʍⱄáHzFN6o3|X`̗7e#@?$ܤ-G^ku!ɠPr- ;˘&nqhm?l_@Gbwm"S)2Crz=\WEH'_ۊY'ݹoeEᔆ_FJ I}Z< ]nX'Q%05jrǴ_A7o!xsKq4 nESAlGO  "goyOWr\|NǀhN B(MT~3/쬲F0 ./] 53( PS|h|]M%&ނ O|c#L/A:85s5x)ُ3{c]evQT-k@c߄֔ RQr8~ΐ^Sc6+O(C_v M=нNL7 FO[-=N!ǹ")֬Gr~F\r/hpz1w}2W\4:CzhD} S9$5zU/4q5ްBkt3?-4w's3X3 (znNVu*Nm5>: 'y3 f_oӆqƆ;8|7Pc|`i $uj5ѵNjneKw1qG?`zjB47H@n h?33bn0OoٖNh^_(P۳9Yt5NԿ&_s./s|ֻ.()enŗF>DY8+HKp6v#2YeM[:ǒb@+1FL,jPtw24th(&d1xDX8FA,3s̑J8FΡGGHx<. ##\;&q[rc-I͠x\?%лxMQy~'DYeNjP"RMɿyn }*;qůwW[i0]j%MqAУ"8ԋT4  !a0)T~MB5ZDΣj+݌xGSVr.lnA>+@{'pQ@*О,GMZ++kG+s|;/"4y`BWѶY0?ȗ9"%@WbJӓ.̫\Y nouE&uͱ._ZO-izoLJݗJm5yPyV|B߽|_? y-|xW47򚵼!nj,v|ƙ˥bHZMSgL5CsJ[G;Ie@Ng,`-{4M}s[9@puϣʮ6P֓ƉՆ;1vG&xoU HPߡ˛(Ԥc[$]&XNwKM+5*a۲6D}GېliA";|2q:%cڄYZ3P\4!)][0I~:^x NQ$R{C,67k:Zp': \:@7̕&'dOf / pwJf:P"-瀋FtЙ+pAkg)OI!W+Ǐ}SPz"),/V(zGWoie$'h1Cx>1i6Ucϗ9̵MsY(]7g>[!}MkݐQQrT=ixP ;"WpsgpTO&k"L&VmH̘qąY2 t<*.4XN>O(b\ژOCLR; FD҈U.rvng'R@5pT(A 8\uh\<<~!z8qސ{]%1Vl\.<ÿsr}=q~dC7.ԍ6:OX{HEOg˃ ֖ROX[^#)-)C?}ev[}+تE"CME4 g=䉀DjM|'E{DZ]d/dqvi\*.OheT&3@ks,}`^؆$6\*-I$].g8t!'ܑBXTXi IҜ#/X:+upA;U): 7SQI"q`cLbIG^Ti4C7mtY}/_}VcH+OԒ73e[h,ïR\/d*B،I nHIh=;d4`5Gfw'.B{>?OTclVb;(~7qAdd*ijl:RP^OSs04&Z^#RR[cS`#vhO tǍJ{aY1>sab\e6{yJf&8 e6f2IQ1.1 ; Xv Ct/ވ z]P95s kgJCh8(Pp#<}zP5x1zQz$(f䴩..?x4%`@nd$q4nϯEXBpx̑^) зW@}>,{oj$knV0BS]1JUSekxgKq\jCX{WB|჎4Hm|iݩW>C@91[#wK Wn{FPt-<Ve>S5}Yble}M @K͛RXYVsqN=[nSe#51W_Ma 9uͣ'سǴ_̷' g@yw! ;;03F pjB`.w&)0S*Z֏OUHra HE i[kPDY,Ƶ@JyE/z׏es;i\(Hb/&)C8U/=7"1ȿgWc/]UqNВ8b"i~hyGy TtJ!#O5ٻ:f9#m.E=յmW:k{TB2 O^ljZb@@&8/E3=Х̭%`o`#G P9;jҰؚ!BN0a5Mg}|vSR,ؤQݠ|H!ߔdFkTz%l-ׂ)O L^I }ߩW^ .2pHA8GБ'8xxb2gAKN7 w$H1!MaK>[O{!wJq=mqqwdJstaD,7T: Gn-:rkM% *=||Jnr1ՈcS {=G Yt_ mWr4/[dAbrHO~T3|N?'uAD$팀>A,$hF ;U,V`lhM8ǤLgn o'ar18X uG`v!+o u4%ԗoO kGH0k/JNb'3ɟhUv"F&{_͜9TL`*gGʠ‹K3J1V/#eGNLsLB+`XSѷ^/\)i֬tʜM߂E*Ex-yĨ0u -$E.ws:9&@*Ȃ&z-re2eұ =Dϖ<R.B5I8R$Z J/ϻe ]ҙn {%RH r.Vts%y ̤Fh2(.LZ;΃i3R62ṛxNg}awe{cka4[269dM$Be ÕRJ\3&3ޮ>VLP}FjG{OSul \A>d aK*|P9L`Bh,581lAKui,aLœF{e$i_w7ِGǾQ! BnSx?bHb#\Zckb^E_^Z=u? &&3׊ T$s 6|TÑj GBCk1ALpڟGJ&|i(GPKQaw[Zo"2-\+g.thV9~x*Ȉ̝˃afh^ ݍB-8*+ Q5 madf#"hl뛝\'w1="]$xKDjA8`.<3 ODiz'm_1 6]J&Cs5`E0K^[Z]aM$!&F`xW1V~n0z.PiRypB"BlH@@WТL0bFPw1a&SBɷ3bo'$Ӛz)XWlWL` r)Ҷ{=7O3!Yfz1mr>0ѭ.Gg )x ʲxD:jH ʪU4^*CAy{oO^Mj)/7{ŗ|*(ft1Q #?PGO3FBN-j7oX 衰4Y[El.?E ž%+xbG0qD˔0$ ^U_ꯨ'L2^2nch8"_rXW}n_Sf [Ǥ̘4x<+ݸgM+wt 6e52a(\' $%K~w65̚~DO\':1HwfRr,dDV[VWX'Nrq,PO>j%T{#^4w̲36|.˄.U}W(mg)1m;Y~Nfp τ7Kږ &T.2x#y+J?ƃ¸(*u^u:(iSfd=?$lh[rZ{:~1`-[_F=$R!;:=6Ĭ?;l͸`eȽW+uWk&Go,a8ؚ bX[cD3ځ1<lj>ɦ>hHƗ q(mСd@Q2d- Yl%nLI6l,) Yx8$픀XU4ȖHRlI.+#.І=/B W_b /q P%Wn<y쫈,y;ss+I?KAobI@f[6=ZOas'9oI~tv(3'mP6\9 :䭈h ?K!@2t$Ĩ0ڶڲP bm-c1kEr:Lޔ`B/Λ`mZ)]܅8D)j{{ xGҭrFⵑ7TO[u8:}NW ,.aRs 036c؀H$#JPXbS7f\0 $R]_=c_=U,@v-z]̾rRfDWԼ(\[%>b{^m:F6A+sz>ۑiՠ닝]CԀPQ|OT} E Qޱ4'9v;'}R[2`ù;86ku0(?@8ұJ-M QlNqԆ)2XߥfT"He#B t?מ],W41n9ȐI?T/K] LY7jH ڶM:;ؒJV&Ng`|O 3DAj:5]~+m'a}; ;_?Zg_hȤWU4ЂF?&XNCMYkr>:%TD3Ad80mGh!GƫzEKD-h;@**гj,qMl~0z YyNu{O"_llJw5e5WCm[ 4=/~0I#׈>Gߡi]V?#XB Q~BV⧏Lm }a'>K]NFJ䨲q^ ݚl|"PE5G6{hr{)Vp~Z_4&, p/q [ȒHj"m~Aw&<Z>$ܸ[İxrEN I`4zq*;؃#:o+rv,A%7z9ܬʀ9Ǖ>e:ְj@Eoܐ]4f@ѽ_ݥquqm}kK.h ww\؄ۍ g !cQf~44%|:S/DBݑ&Cߣ_H8SG!EFS 'O4`΄7f䪴1 Q-#=hL-$)`m{@4˩TpLj $eԢ~bR1[1,Ss󏜮u!s JHJ Ǵ1ۼ u&]>"xتc$,"C1?U]e4.vq1bkPU]#RB.n%_gՠ3  jmH)r U;OƑ ;]z95#N -{ZlUD"K/Q }8['T''diX)kދK̙Lތg&Q0هgu(`{}+1 4Er/6qȼ~.~_xO>lhCV(nEטp~q%Z8N-h32 TNsQJZ/rbsSԠsF\3ذ֨~ǑٯNfc%`;f˓}: eO4n:D_l>4U䝹(. ߰ iCωZ[q7]B[L}|[&VX̵+ #$§-mJąJ9 x9B|{U7!1G?0"`x.(4ala@boY!k^'"o\2n [Ӽₚɡ%yPE xr 9`h“;M{_/wZb*cEӸfqu>vH#lH x#u/]?HMyJO^\.4r$ nc{daFD>X`nQ(dX=h`UMuWn%)OL1uـf c5GxOyFɜne۟)#uo4>/Yx!=BXS(\2dI"p5846v+3M>>KI"q'\?e4NpMC{0J(qF$V5ϙL%2EEd!7|9=ꝲf@s'N lBtLQmhnv)Wf.d^P0(-=-)eV+u$̸?/|wmjxO vmt&!G&3ȣ;if܏5_P?:o쬓ѝjY4>îB`%brE "z@l,͵D2$tۏXϺrvk[=ŝ~d&*mgm:_ I(I+Ə"F9҇ėuΫh~ CSxzA Z}{wy.?;!e1hxNL(g 6s}oҼYUH"dDyNzKS" =*[3jjSq0 Dȸ(ok/HJU 8D0ꞏ p[:)UMu?q-n`CrA40s+; G.ӡ  yGӲ0@Ny0an SU* ھ*Ȓ@(j?6Hu.zpjIfX%Z=/c4e l5,B*lM3+̳pD+T=N tg;`|o%*Qa@oDw a~UnB G۴A Èy9x|'THl,z:XHj89Sj)02W/ڝailxB_9c91g|B6꡿|Wʊ?pqD Zm|o9T1rԝӏ!]En{P 1$ ;ð@uiY`WRGiXcsz>wnwkdM< ))iG)bds蹸gtQ>ϭ4`&5Qۻ3dIFqmmp /Io8ݹ\RTy/Vå@v0N6KڏºO9ѓWTh%;*NW0YZ\: d[16WL'(jW*Z!a5V?LIC:{(eELy-YwMor{vl"!ƣCMpϢy0.QqŦbHNڢ W3_!H98?&*Pqd K4R2koR%fFdT dMd.JXPbcaK̯/9\N50~02dq ˙ߘer~ |`­ouk|+8Z {ʟZw+͖>T7}"ܕ swh Z*|qm_U&xsiI؊`ߌٓ @yG*>&Jx6lo}:.YBL0!g9tny GQ3fpUt!@\a 4eEBY)8]f'Q8uĎ 4XYXg+efjkMwO[*9Ӷt .Ioϒtvs )uW9B&ţ<,-V}hl.^Ro*i_[7Almy+~fb6F|Cw[,k$)tCp?v8g-˾!5]=L|!Lq6>cpv嚽5/>9q%ZtII]fjmAI,6~};k;/xXCFYET ҟY?O-$Mʒx?=b(bNd{x:"Ԝ3>Am:N&я5O{ܩi9gwd׈N"V?$aMj~eSJ )#k=" }ZT~5_ޗ4:IhR)-,HQU`աž]~{@I:ɺũ73Zπ_ӗIޗ YQd BQ:c{P=,,m"N̸ m6\.6ܵqwIѿ\Km([f` KH,v'&A޵u#G!90!j9IcF˓tdQpz()vwnwBQSjX<ȥ+4}3Wl3D/cFU E,'D6eFPCnZҝGM7{.aUcޭ@T d^+7b OT֕h[MHnzyI3Ҳ[OܦĆ1-e8#|Rm3/{*wjT3;G6NF3Dh05pJ^՝ s䆗kko ڂ k!6BTIV.}jK*Nbv20J:ύƷ {A@'5P'^ALi8bJ2JlnhV惽ju㵿h\\\ $:uUBޖ ),M߰Rj^[Ejzމq$3CY7m/e&=/Axmf8&}fǟʼnlD^M6]#!(T;9HQ%5Oih;qT/˟$1QT\P%$O៪r.:9ZXd;i`4(S\cav{1*<)m7/Z! `v+Fu1 1žmSVw'n(bfo(k8sV]*,H{0\l l%P]sS>̋tI~FS0cT62 D$m ?m&zD&jHBh:E<(hMf@ҧ9]mܸ:ci6nHy+,Ո>lt=m3Ua@٪Rϥխl1AW y2Yi X('KBmHs?0c*)š1c߸+)jZq30㇛s,>I/oŧ@ɬ)e/`#NaZ1A^wK렇Àƨ*MxETξL[!G 9:pV<{ta&ST7q{gBX!AL,1"o JF!fD"^$=^=m + rϕ/ }c ԫ1_59OQ2oaA(,>ΉԺcq̘bc t*yU<2ٝ{8y%[rF̤,EǏ؉=1W2N<)F ǝ+D4w Z&Ʈ49If'=9LَQc*w}<{e5]2 =2fc=f F{ЈX8T/rDZ ?u:h>9դL"!wHL&rLP!ٛǫ6q01|e qGYlgñD\gJ+n$if3M6ςshrHSz܌!*~W,Qq_zKs+zHE-RƉ9H}iJ`#eY)l.2G!%|!:H~֤ -/I 0O*6 mtM<8BJzm9MMdWe s59|_^-R' ź%kZ[@_=[T.vu hC ك85T&|#ك/N OZձ. 2v:#B%:_pYBR2feQ^COr8!Khf>~9hg<[YסUb<=C&w+;/lbr]B 4FW z8eҁ˄`5"I]uAۛ=_haKXlɄZWv `D1Ot0°Mԋe>m0AĺҖдv 4h FwGfe,dzHXzM.PEvp36viG1I&@ODtSDxoADB 8P3 (M_־a\랭yRu<2g$mаT (-"xMo{ʔ^}]F!md4q֒H~V+ʩ5%8Fe$$#+n;JFP&P [# ǎG#ӄmݾ#ɧV3.`0?1E|}"+M  @`tzzf>aR)yh6Ac8BBoUivXs.q&R<' П H:!MPԶ:s@VϐH8_^UՌłdtF2Te>^54:Ͻ>'ѵEkDU_̔lGbƈ.=+䨹{I|ۄ02C0H/j:9o P XyB3g*ȼ1+>zJxADɷBE14H6 F2:(,$vOKv7z(Q=ͿFrWf%>%!6QH*/hudFMkS;Ko)u߅ ]?w tX֡} (rwfj3vp -9uܵxCr/?@ SOm^iRlg(`1aXn+=ImO`a"}U7 GMkX,Hwy`G$D6QV6K֪,Â]&[ )Iųq .7)h\x^sdeMȨ_^tfǐc0d?F0sǓ냰E£y0/Z&^[x3DqGyld 0/kĀ7\R$IspYf; 3P1J3f3C#gn )dڢRu~ D/E.;s ]g.p;Z'V \i9QL-*ijIi#tiCqQy _k++s#\G؇jw5Kt=X p59peǃ1=#MgSk9Dzt@kM{hk!@nLOJ"ل^\M$@,&_= t< 4pWf3Z=c؁#^)ӑ<#{3!%\H^I/A߷K D-H+hZwo*yŔ͖᭱~qXy;7T K]Ϩ ɲ wKd7B)H|@Nhl{ys|ƴ(Vt+Xv)Qh5s .ZjKԳljTƗh5gGS=6sbrqц2H0:PUr܋-6f-D]@>|TeK1- ZYErLf6oTP`-A:lIZa1N,(\jc79s&nv39N*5.n5ǥ=8e|Idlٞ 976̎=|sNrl`j&rma\e1=*1(#aj׺P|+/Aa^*Pw ?ċ*Sxt ++. $XL]T׭,GǚA(b1PjS5ؔQҽFg}jwArq|;tj/=:)q#k&hhe\@<&>@ 8@S^Ԓ%=2/{N ڴeۮ![xpI7Y.'Ax{ke6wp8hߞDuwTK0c'%pѤuo`FV[01D2fdS8WXpS ApaOA F#sݭY؝D4~]p< !U.BI |@ @RBEqkB1@דlf4zn݀ R$qDzhҳlckf-@ٕN$bE#IϙfF TImO+G48ky bʕ2nX'4*+\w+z7%)YYSC-aBr:aTp6ة_C!Rcr x[kYIv_Z^bo }MNTK>M*jk0Mpݒ*pEXK߻3caUjSXzLЕ[RvRڤg/n]/* /]TEvMpa#dh _og^Gh;n3Lښn;s̡` =S&yE4_Wme=1O˭K2/eڪmυ{wҩs^ .K'L]:WAZ݂$tU%m]ȲƶB9b1FߏѨ41EXͰ0G' 3J}wTJ k6*{LBĦ?wj# ȏˍ(r,Oί("/h5^@Ft>oϽ~_5C;\Qٵ . dFK26e,ڪـy<!9rKh1PAq}8Tqbql7>"𢍣J"<`M6!oQ!AI3|YMYmF@XH^5C}u ?@y+N4,CfEN19W* R.*)2ѐ P1<#vj[ޠ] Z,FqIp\y-LTH)O2lHt)g"<Ǧ V1Y4sx<r#SVd'f1Nx/35D ?^&{2/(ÛƷUQ5Q*>8!5e#cT:air&]d}{*i`t2yD~BJfcL)H9ZSq!D rUԑ[tmɗRPzģ,!ϢŸHIn>QNr}In4‡KֈЎw֖K4$Ҭ y[:LXm C U`MHЂ>Y1PVD" R샙R j C1`D%Tz9/,wxWW9J@C تu 4!Y,PEIW)Y]AC!!0CY񵼃U? ][@ *ͺDOM.a^'w|:Ha.+,J'XTK#ӹꭕA]e UT# "'gq_P 7N[Lwp( .N  ~EXuk {ƀ ;"|$ة_;d} HCXa'"l \$S#OTu뀞Z6%u$iv*D/o+y865q:5#p0A}ɩa5` djNG}1|!;m'N\ǐή.|Eoa$y?%;}̶x6%A|heV芈v̌Dn%\obe1OqeVV|<li*loʵ.BF IBmt-_!Ԭ (w$tb׿W:̼2.\{3eeʹ)N WT!v3!ˆZK45ưfG"%Eɥ̤u7oo * <:X6'3w@+v:&;K=E1<,CSmw?4a7 ousI+(Ҕ><7qp.7'[v Owt=ڝQ9lȟ߸=(I}W#zh5[^*:pXݞ}F>'U&;#>Ϛ%yO | f=]XJVm1 Q N%,u@ÿץhX}tAZǻ.L5:6q@0~{ɔT1=苏ˏz:ag}>pՔ ̓@hp9siJOQo&fӨBypnV,mw| )~ [bͩOQb=D!`Y;7*, wn͝u⟍Riܱ#$ڃU54pHM$7DW3M :}iYmhG]D40ƌiڙ[?EFKA+/u'wAZ@™hf//j^(`M4mqg.c+Grѧdm(c-넙UY\7"rƖqN+|nn h*`rd )\/(=]QC0H:)1}^: X do(gX~搖0jQCcˀ); 'od|ML_@(ϡ]A`-ƿR;Xn6ƃdnGo'/%Å(~W"JWT;S%/fQ/էUK#c^s- Bwr5=ϒy up'lڡ}++;SѓC1P&;IUsC;DA%,@冰>g\ k/':z= ;x 79O(j .eX0oc!Tc5D,L=YHI{e>G6 r4+My܇˚$FvTٕrTe?*_Zb?P"l[tG '4jr F8a/Ts .dØ]EimyHV (\7K*|~\4ºۋA# Jdq8ea%(m(dۧ`ZB#Xx>%׸ԎFEPc-\n9i%I T3͙Dс2Ix1)۳=D_j.맧rP Id Io8EX0=ʺȃV'+8}JWջ~v'ؚxcCOgNnl{T ajN0)xKZ7awZ򀀝t+28 chsCDh;N|鷋*7hg5ۻl}uj*oqϳ[~eiQRu qzyq4LeGa)%hetbP˰HgGމ 鴰>_"PgW^AuXvtC(Ln7}ڜm/I<æ|8F`#&|oZTpe'G3?B/O\Ę0 |3y5 2.Kz|qGϣ}~hqt2..4me2@[Q 9GXL˥aq#`l8ג1 ҵr&J])[%īKGQ :-{?%kNP VfH쮥'k .,bm}۪RuT}!k&bW'%Rn眙Qyw{9^ 8MCٞn؄^.JH*!GM;xV#^V8_}lirs/ jѭ"ܣPYNl&2fK+:ѻeP ZSP{{3kil=n׵"N?i'`oVwIMSK+:9sE+(sǘ肞۲t651X (x?P&kt.3mm붝(=_M3R@V[-Hη$fgax,*{r M F(ZaJ$ ;,ܢ?J#)d%)?vW#$g哏 bxӠwd;yS1Y2za{_?p|NZP![-bLZskqd rVוiزJ:xy(Xd" 49][!pnK'GˉgT!)j?|z7ZBy)77(J(PjfR&r=?h;Nt7 [ǥw32܈4,%I6^Ɋ=W'Ot 2L}G MF;7ª>1+XGJx]j*ZlDIŶJp)F9Fn+PqTe|v'0kԻS'b2d060xߒ[1UzǾTtfFSFFgo,lNt_Q#pj=Q,'W:~c3_.dO>"#GO47(p?6y|_cr¹v{ng #vB旨Jj8 1ӡjk?0GAl58m6v ;R}t#.uMʰNc2h_G̲hYpM=QC 14c^++j SFhP"%X '}%Tү)p,IU^0LznX05$͂W+1VuD5=1;0vPㅅ|"npbà ]vg4u8q+@l W5CfŞ;!ݝW) ?c"kQKFg@^׻?86Tp0H+q5)gb9Kzc}zzbfsߡ!.Z?|,9fW@#F^_*e(qT;gi47 $>kX~)Ϲt$GGN+`fL£cE4 ,U_;U:F}o*)IMxAeM5s<,Q#Iȅ1 H|ږU&;4tϽ&:UЦ}z]E '8@A_A̙O}O%6G2zBdz6{.U}tyn* BOȵMWO8Nhg;Ube޷PuX3t\=%m2&򶔾UcBݡ#E %ɿw+]xn|;l93LcBv2xòp'xK2T6Fk/Nj<"t] FÈ %WIc̀]‡m߰CMF¬M*& ,T*eF{";h&Y h׊hiL 4"*-c*tMШ)fq*ca-7u7^b[ku E]t< )4y/ &0p ttSz68̢D~NpVZe)yquZ|fLkXUƵbl:X̕h AiILp47XǮ.' ENʪŀJ$Uh/R`_B6e. Ĥr)ssw򂧊9 e,em-6kM%lBSDHrBͅ=DTdֺ앐~Cu+Tx =kpLH!NֳG_/42% IȌ,t ztGf*<2ip8҆fib7;/2l+0X8eN=9ƁBZs]r2^|IՌzO1n ]{YTaq1܏TJ6m,IˊZ8?\JRss3Ixj mgE3sm~d9^AiN1ٵhx#ո[4)DjY;.[/*u)mgCZ% =t|V. ս, \% E>A,'`/Mu+"ӊA֍EA{ѽ1RRSkdk{'P_/K!ޚ{&,x "†Vkn25O)7BSc4޵ߨX[+aSJ ׻%zFkfj ]L\2+U| &%`;muȤ A; KNpOp(n'?hI5;:nvS}9X.Nz'2Ǟ/_':uHu(q y >҉ TIWB<- ˱.u\(QWƫ[MǓr+U3e 3m˗QP tƃz?λy(\c}J8W9U ' N͗@QZ҆gU{5z&k(,qOiyۃD-G0yf@stD>47)*m4ǜZZN9k[|J&MJ ȝ{+x4<%=KWKo@_]4W940ڝAl:nx.Kc<;i;Pk$Y;dR\۟=Q{4tCR$[qaH1⧔pjL`B6kEߊ*}PwTZ3 p350YoKhߖO^d.%\W\TkB/kWPe:STaקwNȸ\!C3Y9KatMts[R|Q^ç&f/GM觙D5Ӊ VDT͗MR}{h A+BFTP]Д\}[ҜS)KrU%M.G0 ,>d#`1eqq>ُKsܗ(eVJRO5F<2SR|8K̈ο F>'@]r>՛^ajtT`lO'/4(&('U_zͤ |b CЧ(f=5C}t+zeN6)jƘ.X,q}:jpp, o8α\pE٥^xh3jN_Eii&몝ǁt@s2fʘwnOZ_@xh-]TwZМytL4e+E. wid:RD:t~zzp6{_&uy;|8ϓEU%me dne'$?~c`Vyt(Ky5@qFuج|&ZP}|撈qio=F6+ctH1'0‡jfwom m Fa E&;oͬB/tgPOmDe j[7=`iކkq#-Uc% ٯ񆋝s ᣸R{!l@G`hT]?pIN~6Bs0x4`iVVq(29KW:IeXNae`"vu@y c{ދ5[@?a2|@2$g) -12oTYgrG-[lF4~*4v!>L:åelϵy 0Pfm{Au:~oՇd\ph`mE̊& ԏ)!߫/V1]D@H`X'@[^ ^dy  :3`>B1C#]3.&%7@?e7"M٨܀0}̄֏>GUjF'\YtZ٨[ qO [+\ 2p2{G Tӳ-ϬU05u+I CKy$EA ]Ugp9BA%k(0VC^lMU`8?;|vIL`gsap8w-.'fKz̎[dDN9:"Z?۶_?iiqpYo;)I$BPk59]f>0$ >TJ?,z⢟ܸ|,%J^(V QRE|!x;ۂe? ӟ/K?/L)|0R뵉үNvnĿjHDA"E|sOk_9oS 320U2,hmi^3Zu[T^>J9%kw2}# &`>im~ DR$ZZi0V_"RExirI@1dMS3fk^ko$]Z5Ku  x =Q;%os4ay\jJ|vOɨ2L䙌N%ǛdACcT\kAD8˛l%(m6<ɃYsg;f72{zF6hOSYuBjAb 5BosU+"+&@ݷٓ'pա0;X*ሂ1]/9%nDt90v(xR%P Xtm5)e˗d0;Cۼ }'$c= fsf$V1N9?Z;\wcmzꤍE)X}P4:ۨvo22>6J'\.Mh)8aNtx Izo?ZӦL&5Z_i不HywC`w lsk&Vmi.E&p$ >پ",Ôp?GPF[>cP 'c7ӬB=O;9ʰ"H< GY@^ Z=SSv ql%O2JLәE6AR MVHlr.Ho/Vŀ7~ٰ]%I<-ގ_IG|CTK'so+^\ҬO!'f$e E&qs mqA ' TI&_ìW!M CF&jlM$p¢^w2KjCIRp$fmsTlms [M^4WPBY|knS86<<`+orYي}&r򄙙1/Q@b3vMc5=EGoi)fĘX _W A,$,E.OXC%W,˾er7ê Zb²! ɇ6]ֳ1W8<Aj.lWB>e#jVjduW;C^jW ꋦJ*?M|PNȤoz,\\||)6)&c>\f` hz>XjC1ʩσpԓ V`S{H CfڦO1Aat3*r8T wXwF6Ϣ*{@" ĸ5ݙwJr"eG!mdrTiO>z~rǿ~$g.#k^یa"ʌc}C䑉b]flq7%%.&MBz5 TBr;L<8zQ2ѫ!Zg̙K-gԚ<]X[Wz͂NJ9 jl#ujmg`bZs dÆ5޷x㖴.< gU| wLAu W̛}8chF=]S!s+vu{S,Lp+?2>YTl*9oʱԌ=0ҁysP>TۈtOi'ADIc8[U@oI;. cDPSK0q. 49$|IOY7E#;B)ɒ֥>?uFl@_ QAuIJw5e`r;QsXoq.*Y#Jw"04s*gfb޸13ct:ur$㗓a71O)*Ĉ'v*rFtICvk'>c+\KLI1קFwIst7eMofHPQDAú4emG V2GۆxAPBF!\p,wtpڡ/ rg,-8i v/e~ ֧ͩ/SpKn#pgSU;,27"xzAǀ9\E|lUf\m oکsM;Q&LƗ+tOv&Ӛvթמ#$@Ěr FH L +@df_Ə 蹨)G Zvj#xYZ.a_"Q3@E/s g!NmVdw;_P*>%fidaifh\kG9>I1ŵ3"ڱqԮJu U[#=("ZCfTtZibUrq0g"CVE㍦o5vi 8:F8wݶ6Y<ҿ ;<[ƾ ԓn(gI5'^.WoQxl.v4d/ofCk[xy5M_9F 2lx75bq6N,mhr=w-,-x#A:Oa8bG=. NEMd |\O+æ3(Lqea % hڙՆ4^G,Ut-(,;@8(={r`OR[ w n m]l_`;Lkx%!9ljBrwti"EM;RosO68Bo16yrhoWh t A)&Y|A$IF ;Lѹ}*DCW)9)t0i@I;{*x 4 BgZz◥[/\&LY!d<,*yDTĦ<5ՎWjCSd&~|.K',񊘡>ѿi*5M8ZD>j7B&;?._ '3V@F6&}0RbЮ){ۛ! A |L'Զ~ [T9ԕTޛl}Ia-8}yS' .KYrϵV7 8K7 h~I>R.;[D:0x/V"7rz9.z0Rgp͹24vfrFm}DXvD>'f 72JB"JyN򈛃"x23X)u5ҽo^>M,&G 8HgQUФtǨ^C!y@ͳ{,ù{F BM#!b6-8$/{4gY|;ۯv8,mϪ{Ve#{ԨCgHudRݩ_Rp aJK{Q~}S3].Yei˕^4+Ę@@LPr&ǰ&7 !ڛܿ+Cywz%,I$?[5|k]L;K8'̓#S$R?y?Bh+g@Ձ# HL( U]rr^̛xJbh} c5:|{̭ W:н.d0svA_mrM {ۺHGh$F7P/w*DŵY`H-+߿5~QRGra|ɴ.!qo]gziF)J.?}>HK;G6`) ߥDxvm5Ϯi+>|0wHgh{ $$v٦N)~1,0<|Uݐj\"1 pq꣏<\;Y>8u珟Ԉ \X2f Hһ&d2iȧ3=K6Am%3QPR Pq]um A=]Z FCxzB;ekeHځ+BPþ`зiڛSt X:iV NUG}6O4&SwR#3Q@M'J,sv~6[.J'H#jqNjIVM=ڿcP:-f_"J )Bgˬ}l;_Q Ů0d0K͛!v)*v,au5{Pv~`LS[I'b#H]2J!#_y=›Nwj~DJj }ET[~s䤜)jDAS Xʟnpw>|]'~@Ze2\NVN'DU2>=-f;80 p$})(RQd0sýXd .CiH鍵>pU$s[i (7g))[ 2cgG;*lWheyZt0"oCfA{V%O[ҳ "hh^]/4&:*>gz@BP}c:rS”>nz~׀< lM?1-M휻g@UT 35.- /SrVV?5Ojv^}0 Z?:l— .?.p9`|u PLti>&$D/ccRXEL?tQxS[H^Bn;pfտs2ZVsF;dz)?&n\uhVm0xppC4Yc~,Ĝav!8wg%]\4h-HkQfiqgKM#SGe2,Ǘ'[+{*nK5 8"I.7WJ\_bx.n',R\-tcFaU-(ӏŸeY&o9QCEÉ5*r7 786Cʖ'eU_ ;av@;ʳ4^pQ_=ʃvh4TA0˃ݷ ߷koF 尭^$R/B͜i a>rhd,WF>mV?!5[oνiG6QrycH % 4ɱpWYDơlPz*O^HP1sٶ(Pf@Z!~GN4T9W[M i+BBhL9m߳tkEf= /(h,*F1q @W!4UY+n 䚓A/Nqv` z_g)yVi)Ux' Ht$@9(݊oq7ĐTh`F0L٧{l%L5H0 T 5 w>>JBPzC@''TZB3zp^cmTAm D 'f\Z~92sRr.<0^cauj\㹏,K@OxwɐbMVkȌ ?i${ gt\||OH{i:} ~KDl; [2,qzTƮ}nȐM(G$d󹲑Esf㮴 %PZs!kU5_&&UUwZCAj%aɧ3C–TѹS6`xM Rk5B)QfRQ?n dN oJh3/~:"3/ۖ=3ޚB-&EHï{;N' `pe͐É|O鍄1bxv3 Y$$18eLO:D3Mn]3kQ3&i0~C!Λ^_ː n[ lRɮZyxf"կ *oEB2.6F]߳#2 [5qϛSd}V9UA\B dޞ TցZGWb&~ccؘZYQ&YT{Chs Wų! p4",gVK@[p<*TO'Y!h;L vj(Ǽe7BZ }i*bAI`>NRoH ̝B&D p p%$$14Л%7UH75A;a39`KiQMy~,޼Zlѵj˭;KV`Fsi/)lw5Qu"`A;D`Sc"cӇZ-гB3Uݗ8 |dio'fI<Ծ}5Dn>MICIBmE'Dy6UҧLhXdp%Ƃ>Vߖ+$ .12.:N`+v0onJ7NOSzK08(XIDW)/u":$="Q"aכޛ@)QSg}%oZr$yȻx 42-[cr8 ML9H PZ%U#_n|7e=g}uJ pV5C9R1CF Ըnq1pHGZܲ&TNU lY \MWO@xq)'/6!CC:R&fviO@)8OkhbՆGaMع#^S{ uDg0iWQ0II}9 a(önmmYo?yݷ8{+s:Q"I[#m zbɳzEڬ^Ffa;<]$-qءrjzD-nb%cr xE[wVo1E0Q>NXΔYw3pmri,Z W D;ZlsLBZNS"‘`)+[;_;6/I|=.yOJ瀉SWNxwXA=YQ7mCQǘYvf(bŽL{T92Aq>p&it:휰>PX!1))G?r? _ep?Է)&tr 凥RB';F.=ı܇R I K/uw9#Cw#$e0:\}b >~=u f%bfn3 sV[I[3-˘P ھh4gIwޭcګ&mL"D磱etc¡=UQIX6p4Fҋ:oxOs h]ն '@;x5?^|̘#buvn$5֘{Zx ೣӌC /2C1n #=RX!ZPD'jٺ' iL$yP'B{ǖqacOѼW-bȰl>Qh UE4-5VFb1髍tc[ĬRpH_V8&/įqԊ5k+$dj{/H&[dm)Cmu|5,0. =V$H-UAÌxB;Ԗ:UҙHh O% hf'E =61F dRRa/4Z7(J5F`^}d,yRp+`}l dh@{ս ~hdyQ1Y#aDZsQ] c7]s?bϺzW;AXζyc (c'=j' lӇ ڳxbJO.Sơ d jڏ,fk:r "wUBuC\ܵclHV1E R2Bi^jRpA^!Pj5EEߓ΀QYƼMzUUV BNA!B~v~̚UCg$:6 y9R8 a 6<^۝U$Ntdu4`zE6"SԊft`ZDDt29ռW;ZNkHQ 42EA_.x=h o=Ŀʀ%j/)%E92;}ji|إj .e#`h.}T-1;|wt[Rs3;;VV[dba+0(* Dkw@ ad =<GCƈ<8Yy^{aKΡ?rqHSz)M:+2flmc "bvv)X57ڤBbHo]_#U\@Xo(ժeqm!f# TW`f"u=!zU61 1OƵfv h/ dĖ$GD+Co{_KjM~#}>zS^]w5zwt CPc2/^TSВRa&iEG"r݆f,+2XXg[@1^`m=A|;|55d7oV1rm}"G Ɩ%3v 8ZYī¸(4H[ *Ajԩܜaz7rnit߉X]=.6wN9gi -ʙmjZ݆3ޘ~kǚ-V`j!B=7]sW?v KQ:`*=+<^ f_#mj%qM/Jj%L؞ J2ixlŅyYvL7ц'h<J xAk$*b'9W]x -PH?[ϘY|zcO_ym Vb=4*qe d}'t*ACkJ ?jn*Ϟs %(_6d wM2+G׎NWuv?Kp{?6$lNMiAH|ϐ$M;BM—\}4]A#}/'TE(D\- +YC^^,3ڒ͍w xFezrn+z@,/`썝; (.%Ƽӕ":[.nETWMY:ڬx(Q|/98Z A6s)'+{OM*.X'04 kT5́EYU7WhyFڪ:5UoYꝹЌ~1qpVR !Қ c$o\2'T`K4|.JVC;h"kSQD8'Ǥ gnf!nuHCAD) UYٞ}l4zPz7H㳇~#A۱l'f>_F6sN/ -!'T"gHs\m@ lz[eǫq<H Nrx^q%@FL,ق^NH2x' 5-8E,tX!LvkU%XDk5ԯ\oЌ,§+oÌѯLU.[xԹ#"ȸԨFN.v.)*xyۗ+s( ]$(SL T$y&u*:R`\N Hdp@no{!|1*~{fmx';kdHl¢vhڶvQkB4H0xf?Nd0|ng]a[6̻Gt߉1d@^R-h9pˬces)/m{oܾ?EKnǙ>+ ^cc7| \ts|ZR%hY:IfAۡw^jeN~C?܇Z'I yr]*;㐰tRW@bWv`ǑjCV>{)N}r<:a5V]z\glp8ɃwƴB 5;TÂ&̔qY?'$+[n'H4 C'lʗjm/&gx-̉DY$+n'S*'Q(VAHI3hLT,N|ZN*t~%4nTZEkٶX7.2<&^RZ}ruru a\d~1QޭIp<+ Ac \:4S]s_ wcw;E~obM23LB/.u߭X.E"AjJAb3"8HW+>vKl7?anJl S#%-l wӬy;swA`в|,Z{.ye>*8B8<+ Gp%69f kvq]XfK4~u,Q):܉#Woͷ/EVj._Gܚi`0Lbd~zU ǕYG*ZQO7u4B( tKr0ỦHY/q8 g>tEL ,X롥Rm%ANXQ!VNbMY>R8ĒGuÞ u6fu6`4P j+{0m ^ޱ\K9$lԦ%/DK7qu_t0\'f{| LwT?9uteQXEʷeqnh2L`tU GGj^ u0a/?>vK6&9!}SvEI1vf<YR=Q!L(Lp(3jݮ\a"c4"IP:-cQDGQM퍝O!B\@A]TԨEe9eEh3V7 XHcDu*r(D9>݈ :GSe]]wbKѨOŎ%ؑ/C 3{bvpށf@2A8έAJMn"[<񭯁?D(a ˧tTșfbfP3͵W8p5U{h^;qS/w+~% ;{ AeBʉW/ܺެpuv8"Y  kVd x*%.o?djtdgoI(p}/btµ)Vϐ[b!~> %gcW.x9 -qdߕf²+xAIQ:Odz6w0=T^m-V2󶦋dc;ilhi$t`[\4f$yS[藞|6c*ޅo9sIL:6}躄1g\lhn-K? W=&&nWnٌKO52ݣЏprA\ʓR*)FHh5*w9˾h!aɒR]XNSg({7COE;'uL^W\ TR̕K?H 3Z'zuOMћ>XȚx{S xA(hY@a%v vW<6C.:B{Aa5}=ܖ2G`rtC_=r(?EMHӽuʰ8X%qsɷ@ KH_).x|`a`V<x*+xbS ڏKsjzc:#H1Α1hV+Ӹ+;#I! wXaNg}O&֘pf; YV4?PDm0'I>O?NETb "`ǙYĔ$,q[fbVAv:I&(:axGT$v&&}T̨Sz, Ɓ~^4RӄQ{Ծ6f}wdHteEp?iqRG`n$).8Alߕ>Z|oɂ?̃ GH|B=m  1%K4 ѨTietjv(1ne΃a-1*"uXsy³ހMG*]@^.$2*gҤ )NK.r<*Njt* I`&y>f.lL2AhDL׿`l@e^'- Tv?ϼSo+_ RzJe3M&;ö}l'eYSE`n@ZH3_o71hZBrZ|?(i@ͪyvp%f 6zuMpܯǏ"T5DZu}+ HPM %]3( >0Z[R?<;=!H^oBÐ;B8/hy3 mr%tQtj6:;G I=-*(,""J֧P n$7ʙ=]b dfJ$hXduy 쐃 sǖߒ'aFj=]y93?4mO!xx|j Os=ta-Tl{ ^^q~y{!%\45nvj;)̾_( 3{izlPN,v/ǘ]g?b[aKU=Βu:ѢJA%طWcnW6[Ň+s@\(ưe3YY ܨG.*Z[^7g/&N[ uxmɄDG/TƸ4Qy5F[֮X cw)U:N ;JdB6!"gG:"n̫&Γʳ'rJ .eB҂j^Kz <ƌ{Jg-jnl)LIiV~<~4BΡX&V&hzS,bU\ vzWGNi|Lnkz?y ArTqO 5yK̡fl X b# =,iuqh|ƪPS}I4UdZo'%dG"j0be dAQ4jx2nV{&97:mEl/ÍdY[ Wa~)"xx 'NW~gH."s#`K G^uY)ü/ dpFZB!&NN>߇"ʐqpފcUOmrڧUɩmToYpR* k!~^Z?]>^'M+֬)dT|SR6)q|t9Nw5Rv4SarMj+ D9E'rtDNS ^uJvO2ݪ͉b/MI`fpS,om s- E=*.I9X+*'AW6Foxj08r fmQM,-Wbfa>B1 tRCֻy=IMNf$PNydtc^{{~Mq;݈8..\H&6ElFbs>9@F`&tPXa!늑]g @K-M}ukm~4OcXJ#~Pl.s:SvZcۨ;3PK = o&RjDHLqUK;b#='42wѮf0Ƴ ƋzƐ0;+VKA=cisv9\_VbRDx$0~pG8jG o^% ߶ LE# ;nS JÜ㷸4aA܃Ybs]3$L߫aR|R'N􉞋zm+dT=GrS>ճxwY_Rчۇml& 9c ?@/i$][9'ɔAG~$Du 1Ia+u7c:rKǮn0ԃU a.ǧ >B(zg9 $d-$yg\o-q53q-8 s´_@u]SiYn+/ث&NvT]HBj ճ$ߺ弩ZТuCx-%A%-C³Xc}-2Vg+µD%NT5T@un#c-ȅê'3AM5U]0a:,&Fa!$Z4[of:cQe]VO~(y,SܒjꃜߴP$0#q:cw ~BL9LeK@Ox8[% }rfJ)1HQD#|Y-_ǤT'"GKPE{E?Al%-p-Acq9q*J+T|xJXc/ᇚi<]@ tVShFF BC!3V׈Գl[dƂqEO7AN@箢T,:Vx^ɜ,,2,"=`NQ`I^TֳH>z\qnqlr:;i6U}$Fpr{PU[wdl~fzEihÓZzO xi=Lf>L6. ryXVT[F"kyǕR!q)?U=g5gx7N8P:mԟ φve fœ]=Ñ~|__jG7c/Pt@d9ibnRLTH$˳c U巙3a bժqv[_e8jFx r"rh劢"Tnف?a/RQUhL #VKY!ClAc`bU!{Fߞ/U<>O`ؒJz-CRGPJ@Tt$kC!V4/(Y85GoN3/& t0>ydRyz R#Qڨ&z8LUꩈw 2 $^BNY:p!# 5C4hB :7'%,қ~d@qn=LGa|Un<[u'j2tF2hx=ȹ%n9E+̈3hxaDž8Jzxؖdю~ro"ɞB+P=Uw't U%^&@+@}[LR16Pň)ke5h#')o&r wʹh-ȳ y`vj')sOXnI6j]~J/nُ٩xP9:W8߮~z_%U86Xw fw~Q䈋Wtu)6)8hcu7Y7W 8^t:MˀX |=H&ue O`E5ygRF@X[jIXQH-v-fZ'~yT;KG\B .޷̝q4pW\S 3jMzp(.S[8лa̟cTm[[+wY(GN%T?!ڵﱏ+ 7j'FOKJk @Л$\4QzH,NNBOκ;tT̆JgRw:qbEpRFySsLAPyu5hoA,փKeHx6ucG:~$[-`훡ۧ b*~N!ig{G6tfkj\nh_zFP`8VTͻ!'"a @GB⡼uŸHj}kx$1spWz4ˇє-$gq,ȧb=V8pٽK@q,@vz 9C˧=amNG|@B AnA4`Hwkc_bX-?`4P¦<3k *5Ȯ+M_YvTec@J51XЖ%7K/sW&kPשwVC5_@? 6&kXy7Z3 MdmʶؽE{ZsJ4w^¬\['erVfp`t7 ͽ+3@j"TC9rC@\/"YD~|3Ag0Й]Y=I{%9g`7ϊ "bL>o̼͛ʼno_HQ!;|+U)ɋsk޹؏k!^?HuylsTBS2:åc:DhlʒfV'|D~nda"L{oFcfM}u20 _s0(QR' {t0_YMUIk!- < ǽś,SFw>IHy<.ji)n?_NթSTL~ᥘ+?ך&g(˰ * 2?""fyf D[٧|mww\+X*͔ `H~8XK٨$,ܟ530-XOD! yk|7^`#- MueЯ,ҡ;)fp~T @C ]3Ytf+䨏RߩzhiU7ߴNfnRiĻb<جnly_∛wbbZ{O1*0MYꞲomH'2[cJ#,?DQ2kl.c\j w`\E he߭`Am]:I B,g wZSn\]o-#Ꝃ.OlyhY9؆}N*u!`HӠ|#;F|>Omaf#X[)^-Ĩ쮕Y\ˑ$fmNE9?M?Z]BIE 鯧Ɏt9q+*>K{j-=Z-8hxf{ K؋/Vwä' U"Gqn{]ݕH#[|\͊pKBAȈ_2jD_n儚Ʉu_;y{nyb+=?6lՍ,{f{ZyQb2iT+7[hkdžTd,6f9S&j9hOJDiًC׹2!X’xF̶p6p\aXB d2uHږ$iS#fH;qh8f8i -x3ֵoiU} =pA-͕5\#f~3x^1j^Lbǽ:8~퍉yAu9;=pQyhe#MBN$*R EYOPGQ,? <&MD$ݙH;C yhazdA)8s=gbaʊTS_daVHdo;-jk3F=Գjy@Z$Z|1oדhNjd[ހV ;!Xn[\S_q%<؉J=8.O w:=oy3 -FD=U9nRKKIcnX%OE"qA_|K&_Xd=ZCjcOo'x Ǒx ᶐqXYP6z )TUC .mG@R=).V 4fbh:eN]: NJg !ހ6Qlɔ rKMʯ6$N8|&PGeiU7ZpBy'&E$7$@Ab×Jt!hYV,\Ѭ }IK5͠,g.owjX€0N^xvY1)L?wW2H;>3 y,94{xuT`&]ݢs"a@(8In$|xSg"vi!-܀u \m$VJ7uwT@1/뗊F' $QS]nnVJETG7ozq $WNrcw7"n@\&K%kI$8?ҴCbSVd V#z/nUCCۢ){T `y k2M,~tΜ!aI Z=9h_-=G7IuzN]ĩBM!$nTD=\F7`e)oQt2kgaTح +p0ﻍIf**# ; juZXRP3uvSdHr5Przk6Ӧh6mؘv|R8w rE)av JAYj^ڣ909VŠpv]BYβkD/|"Z; Cz̧;C>oMM#!u{KetbA曄B242aЮ24T?~8 X?}h0x6i1*C@BƕYkdrsdcjDpby R4! ݕ;tkyo٫%JذսCyg6C1[_"Zȶ4TWO/ʀJ47+8 4)XR49 e#16" j`]}?XqPGjxƯ%䞻D php9+k47ʂ5^YTŕ^0Dw=e@ G>Wu8&DoIBѧX 2݈)Thi.j|lE;UOLvНQ ]*oyzkdjX W٤ moǑg9#WKfpr;sT+D ۀ.#B-+uՈyęȡ07l 2PH2&7ye&0SyԀX߇%)k)U@t$hE'$ }ꍶ-jY<&6tpW#*Y{?PsӫPF|SǴzq~:/&dt%^QR,qAwadq,[d |o಄KM+^s$a)blYd牆a͑GJ|jၲZ iRXy7AqY%ڤ 䬰LFb6 vThV =AMI,hT,bKp!4f*zol`#z0gGN 82<#چ{)l_pOzbR|mc?<,lEhaGZZqJLҺ Ʒ.l&qkRdl!HET9E.^u?۲R֩4>s$G]AQHDa@YnTiNBzQoۮ,N /(k=[[6L68bLɨ3|'9h3)),^  lߋ0V5fDf F=qNIHLm-!~iy? (9\1:>@ O]>͋(\a5߹uf-4eZi,]yXx ; सTz/1> HUܔ1᫳J*Z"GXuQ"butzA܆9Kv޹mF\5Tv/]t0 l(dr7zɮm0Xftר/R "%wiV-ӌ /4UT!oHK|*FY`LvwKwI 7dv2 G/3M1.%#rh áa&3]=7tL<ҙ%@ 0}vl6 ,R*6M[yS)Y j5W/~U.Fi-Sv)VT#7 =[ûL/#FI+s#ݷS N $op?lbm]/oqI$Y#5Uj ?wUZJ/ \*ff!jděwB#5ހoUM֒SX)_=;D;ӟE11Ao3TvE&42eu~x̯ k7?ALOQA=aPLX%]RC?〬"]$e}Y춢HKqd{|]T"F&?U .g(I#Qr \0>hf|vnORh~10!`Ձ)Z&x[&XlQbS}Yu٪zJ?ըC<t SE2'@O]9fI]8%25h~mFwZR`7YxCC&DRmWۘ+4a'G8OJ7Vռn_$E3s>+5cHpy1R?k(HܜO(kDxb$e|o6*:BsB! vyvZZ۱)lĚȑgn;mG3_fr}&)= ΈGŜ{dD˔g>֊}~u21]RvSݟCs@Ũ4I]tdž*yo=mDQ3Fr=!~C4Xz-NxLAά(:uQ;Qp/K }#QT81fДCEuτ"=Fy^h-@P..dux%)@&t F9){Q)؊#pv@/yT>pNT1j'_יٸX裥.27\F6\3NXїMЀ3C]wXI$[)Ŋ/3+^K5 a}hs\uL/>a2͆5gvBzpzFć}kN1I42۬nH0O˦5,Os.7زWV-t rJV慖?޾Zw2滳8J>g`Q7dG\p0"Gkz<'(άd"ʃgCwIPFlxzlOso9[=7%.\/:2qLJZe3QCTedOmvUEOS#vNg5' Dl$MA?0tNͿ1^Y;Sg `-;᭗quvd5iQή*MUBLP/i\\֣]wNݼEt[>!/w@u[BnHQ(.@ln;^QL ^p~MXbzwأ3@ݟM3hpkM R6?:<:iCW?-X20ؘ'kjh74MZ}\ET zX>BgrE=*:̕B){LWE+a"KX;fbj뀉(UNiR?"@e ~3%q+]NRx&/ٰO !~#E)Nk.dڜ>Ιm]rSr:ezHnkS 6ÒoE~פ22Nd^yZm+ȶoa&|+لIҖ0cZ2ɌCۃC 1;4v/;!YG_MY a;TJ1 =EΎg2L' [w ߌ7cVP1kJ X)-*cݵ|sMt;1 # Qj]+VnAN^/W iTEql·b]"St IX0׋CKgR!O͑X8yAz>Mu;k`W A?6vȾsSMN2^Gw92H)ˁdr5P1[84#iuC: qc3Yt CZhcOFMXSe&iN[Cu(`%P:m1Z+ sSIhRoxj,,:+DZc;o].t6VH.V% c?/X;q10M7jG/Gݓ!|"-ګ `+'Ymv 7+\C[0DŽve{ӂAE@R $=5Amíed 5bz:Swy)U9-Hr2` N(u3A R?&34gw W$Q!1J:N]>,k%8X?֡Ĭ2!Y縚`|-.HPb.a.8?уE,^p߯B}Ol~bHΎv oUז$KY8m` o r}ݺKNd?tfWgv9CvWr\bwN鲨3TP:k&;SU@˦p}qjBN&6CXcܴg~YlW;huyu,*`qEL#zarY?,K-V7>" Q:+:~4lN( A w$ʁ&S$ k-(ewz涿|)Ud)^>)FݣbkLkp03Zz@la}#=в/g֨{3Τ:>h7 9wB3>IZvaMPq}pm&0'4RI<<>֑ PRu= čC0NoƮE*K#6%ȩ6A>U:hsnW<Dn]b$"i^@Ԍavspr;v}ev|I;.>kh߀m\6aőU$S! H/!l(Uf/^Nc8F^/qZy7ε|N4vHʀ%A^OЯӛuA[dTqQkDjy mIxBT-}srK^}kA93[fwj<_l(e0ǖpPQH":.!qsij"(<Eނ}HXcI Mwg| H6&TJx`y `C2>!IpO)W4]& &`3^e;ʘްb5%M:^nƭkody,TV[zxx-2TG FiCl,=$N7va %Ws,)\f$R Nos/n1ڙ?+k9%b-z{.fV~pw,?_?!fJv)% (nE>6AlXqϺ8`5xx*BF U.u.d01xpГM&$+|"{3`XZ{?F5'yJԏ˓`\Vo  M#ڏR!ej)Z u!qnZHo01+r c*,QM` ,"?(B*اk/pi ^[Pez`ֵ-f4jǩ#b&:Oorp4$>ƻKBR1͍hL, *c14%N~wĜ?\J=rHL0lh[ m:A|ê8ԇ̭DȞȖʛ\%ub=ݶ teE3ן/6-ۦx$C62޽0D%^&.d.~LAIX-1 ~e Hg *N@f[3w.`ğPs?d_|'tFetTB[Yz恣qOɉ';9e(־_%DyS5r$M={SDaa3{I8r?ǨgH՗Íe7Piz'-Kc"+DxIȘ];VR@q*.z+SLa.Xf'KM*~l{CAOxM/cnq Zg_ij j)ϻQ#)ʛiTbH@L2?&>T&?iRw)\iw׃"ZV&S(7rZgܪ̱y$/[7k僧^ ߞtEeĊ#IM>TA\uDSB7[@y3;mVE@EP"5e;7ӔˀD1Q_Dٲ.!r#t;A/4LQQQ5-%@9ZQt]$|'ZǢf+ylMcyX|o1lv7>8̵ӦᏧaFjth5Yl\gS(w~KLRcj5czr7wAcBT,O"SƗü/mxǐ~ W -CV!I,ǩ`T'L(6B;ۆ_*~;Q@m_srzawn;T>4/;Z4f:efkh65L[C^Z|j1~)aRr#J$ר=:Bu$p}e~ЫD91: F=9F1 `P7WU #g8E@ܾX{X n.KFztrKjRLA-1%c^Z9a;s)' 6t:ȱp⡋VWv̶8 dmO#;ݟ*y Gg2sNԧ7QaN*PSV?&e"hueW"Uۼu=gDD>Su8ʨ` Sہlev-D[z,E@+5jSTB ) ̣``Z(I&9Idk$McR[͌ZS! }/(^ S/%DO>3k֯zBd1 C[-cܔ'"wAɬ:N^܆Im9bo;IJ:fnK!زA =V&뉯jg*( &O>&gͤ72U+Oy'FU7rܝ*J8r+{}O9t8,Redұ"8e VZ>Gh_ 'Ж,2{B,s$hk23H얈EoQphm!uS()RTHGaiBֻ-k^罌*6Ykag'rA%_F7hcOϟ(Ƌ&vYJx--dV O3sqTa+)u a~9tmgk6VnZr[*vE1A4)ZhRIY#W)B;;]٭F,=%t;9u 2>FtXREA1л@=lZyٳ?ܻ-xo Zb5b!;nDY@"*/''yCP7%rݝ۱đ:b\44r ڣi 4W{U.N-z|C\> )E,;zN5TCLjjzޔUmm~{Vv+~9տ+J"V=SR4CdF,a [p-%cHCa|L3LK>NFYJu|~UIk!#>3ל{0aOYR>2ئZqi[X㗑;rsLWcw[vC=_jL20WQS.;lj4/(cy'tȖ4IӓR 0'@,Z,= ȧBRYPӹA? zJk67=;z.ZIcf; ~c*ko%&pfH~Id4wqkș+57G׊ǨR3\V!)1pVAƣf y*|v*4f:IH;y֑$Zk=ӡ,qK9 Ējxn6maVzS`]mrAGnʒ`ݕ. hi6hJ>kn{{G(yB K^̔#~gl|ɛ94h_ yr \OE* 4+NjEg4Ut hj tK rɬ1!"gՂdsZnelL|9?>!BZĕT[;G(e\,^jR%׿M6"D?TݏYKN^_͝5Q#0ɝ'|W@O@u@ dm؉KB5$h3>SnâSקv&})2M턆%t-`#˦tٴi>wkոQ2gM<}ݖ,*.G(H/ZlqęFr  pmΗqNA`*nS(!-]H ~rN, ޝ: .CDfOE{_Ң<>?#(\- |Du(󾿿)uh/@. *ztXl&*z1~qGofpSeYh)# _Vl ;zSi 72?P3R|6撞4RDxl@ >Kueƍwvn0FOQՏ9+ߧ &"0%8y8 V6dsbX#j4qAHrT&;-RQ`[O'U/$}7cWYϲ ʰR(PpM>/ῘS$dQ_ @H5ODc/޼gWgzrK׬dsbUnE=Hoc>~;vc/]28/*B#Jat.~YlHietcܡ -cms!iGkQ?8F 0UĪX$Qmx&|kC=El\D#K_x2'lYQ=n>%lO{Ij+SK)Ek\dA]}]gy99$_?X+( F"IoVtw񷶲7vJÂSӚ34LG&>1} SG^_AQE((}tB[c._?jWV_zB8JbRۻs$s\i>URq6}{X 8_-YeORifs[gmqQ+`^iMa!}v,">7q@NqG62fn{,1~ UI0er1m;E"q-_i@` %G+hڔyf#D!%d?M. ҍ'I8>>Jܵ{V BNd2hm' #zOvn8NzT5am%ucw.1*+Jz2IxA2KU /A #“&uw.0r ¥e .,)?X.XU+R* xzڛq7oo7MٲfMHQ6}}Ŭ  T"4oX=<)݇9lˡF^><p[<i YbA+*?̧h)y{-6uE?uL,e`!{XXןV>}-rvztL'3hIjDM(5;|4VFaNhUt;^U_cኧiXJ Bn|tnB,A塱İBf_up9']Z PΪ>8`5NǂٲcQ4vꙑI G1h0@vV;V,^^#:P%m=1p"U?/1C*Wuhݨ, ɜ}Xܚ@ _eCvqv%Qqێ#&-ðե6gPN(هY1iQB k/[Vؙej8.N7X܂= kqN[!4Z7O1e^RÎ!c5Aێy`Ѽt=F{/};;jkV̫$ Z\<+T#Y),)JjrZOŻ*T0(1VT5Xo7XuJ4E,vF7G$2vaL15Wir^?'E x&eyҊ-K<T\ S>feCMipt9Ԍ1@tecתA‰(Ř*W$>:`*}˜e¯kLYEDmhs$ŹGV)ܗRn:'y8/*3ixe\nBT`*R Ǝ7io{#hc?.ٱ0k_^d7ĞVaKT!=b&kP"gzU3nWv&[ԣ] _9 0DGDrz}#M7`b엋8(oRGm 5--4U*)]~V /".S4d9mə̀'?'md :rW\Ās!ؐP9Bߊ=R%,ZC4رW[]jD8=E$T%4~,Ud o$z xGlMc2NlV<:STaenYIի;,w|jU -J-LnR.rx_Ȁ(FjtIL{[.NV|-' x[z`<AKEk M<S>x9 f҃]..|ph$[ WR k;y)jEˠ!pALοH\hc1eUA$tAqJ7٥%!2L4kiP}A\$baQXOqTA,߶l!MbW"#}l]]<[$9ǹl;̳ȼvg>A(bgI|P#} &*.*mRGmoɂ48,4% W^K82Q4a"ff ZQA9P |*pq9CNpc |T'MRSCMވ$$;e)ZuczZLleAJ˒{0A'y(LN+@'j6Ex dXH^A-+%6QS(-Y@T)e$U ߬liΣO6A1 \Kf}R) }5*`}zr4#,.DD!6VfsAnznk+9,D6a̦:Әj `w 3ks#aE7'.FVl6亡8d&4HՊ $Pm3 YLhNWkEiM3L} <}r!3خ42f庼MiS/)ߤ{Wcx-g7+n.)p7ZrFk9l"fИ$8'vG {wx 0i];15]XduG=1S9=0}Ti \OhmCY~3 kJoeo!Rw?]r\/°&5ˏ BijWhvJ=3ɋg !d纓vO9޿~Yx80YJ2Ȇwa\$Z+Lxn,>` %6&XDl7+rCAb[32`J059RV:>3O">]❖T^ݲ4 }xJ\~%s43a OJ65Ƈȫ{cI&!mzH(htGͮ_w ?EZS?_%u*ܥa-٨Qgl.UIi i) )m!7pZKАkjCY)jF XUZ7[S~$rXŨKf˴7O<04a;/^4nY_ .**k?_'J?4 e`¬R}&6G6sqYʫc*t>3ۊ'Db|Gc Zr)c`t"S]`=EW8 *~ln"da}N x'*>m 2+ F` blzc|EVyi+̊Pcj Έ >+3/:<(S>% :E YefOxQ;aS/6CqHm%/%䴦@%'q#;sɽFbjc -dEf\*ZfwmT7a;)) wچR|K^r 3n[}5Z]O+&=a޸ݰZ'{e3j.0sU[!6ctM1]zlvjdAhBXDeDzCyZ6JBk `P*Oo&v,v姌YeO,`?"̢q(ӏaM;xZ"7oY0|gnߡM@lXNYD 7ȒJ cj,|<5{BPvށa.T93\,@W 4MWg1@Ē%:*,JƜf͒g*7hM*% 9I&ȓR0 Ւ쨨*HTzuo(. k|iU,Cʘ^gmΟYL@Ѩ5Mַ<wo ٬a@6A#qU#)N3vySP?9@=obD({Iܐ~:M,`̙~-~YBUob*熭BTQ "5tzbϔk!!Mݵ7g]m[$ H董A&w?In4f[]KYݒ=`7Rg[f| aj24B } ;!/r&눣YG[^gS%JqS=ؼGPcF[2bɚm'ROo TzĻs,Hc Q64J.\YEl wG8MQFӺtJOvH.,}vEoZy=(fVk>SuPv+Pxʺ~%ǿ-̐o=<(_u} T'uׅW, a6A8ο,G7ʳOYǯ˴U~Ȱ '6+: :^U2Ch _/o$r Q ⠆m Jg+4v8^BlJ>Ц26*: x;,~?{$k:͔$ F0ɔ czEGqf.xA-$ -Ne-ME{KWvwZ,ӿ{6n:iQi8E} _IvcOM(xcJqZ6sI,ҏq[ UBB' )!4N.0SnjC8|SZh04[e¾0 VF^ /Ӯ} ac`ez6}U`at|dlT+" FmcaL^>HdHa縸3IǐG>5yUGSAwxb Ӷd}UZyE4ո!d)DxLaQg)mܠmK4RXn0~,V# !aիx!p#WdpǜFczDtp#i ̛oDVN@ؕ/l c=;@c[Y. a!cu/c#Fs&2֏Epc2uFdr:. Aq,¡Z͕X @u"W$4dp(+EH14:S%KfQ)Gj|<\ ՂGEar9zzWrP+wL&nևl[#-(O'IY0>,^!;BXyV@y/LQF< $7Y2;8uFCOc+NŎ"Q'~椚& 08Gvo:!T) iZ-Ǿ,]F_dqh3FNǏGX°ۿf3L-oZm%c)HhsW1&: H2hx{Gק圄!Y2 zҷDZrܖj9;

IMBҵS%5$-3Q?) /?' LȌ -*V}/÷ngkk(5LQ<_.ʗRV f/q-TBu{˧0 rG+.>c$xD)."B6Jy<- WˆulWuQ#sB}5ŒD[~81 41|w[5 WR+\9*v P]ds uK{=!/9fssMщ$ E#P1SDlk]1R_/`NJF }h ox}hޒ7}oMyUY՚ɚK\v+60`2w^v%8(L@<H|`hكNvEww/T_ouM1Pl$ ;8\$i.] }VAf@j@{P Kd "41Jwe8L=Ke{_@9oг`HOQsAuEڜf\BUw )J~2l9;-!8Cr o`J Uh'֠9lqKB"G|{*rCb/Ņ bZgYfR-{NMЮ{kiۙy\(^40qHbL0d0p InDn%u& Y%e(681eN~HGLѷ?ի+ qp(+O2弬%w$ =Xʒh?tvo2fQ` :j&"fԣ}r @a3 pS"$CR_4lsRNxd`{)%K̀N춭UvG:E7)Y2^ :Ĺk姨1ipx0nf0niTi4TUKM+ ܁N)1O7M;ł3{QvÝ!5&tѮyOy^J,$WW_+@;Y.nG#Ӗ ð5i YE5E`'p,Wi+ȝ.L˓~~i$ݧsVkU4׬at>Z5 t57VAU4[c]UOhQR(y d1c*RQ@5~O~[!HijКu9kF&z3bA+xǴ,wgUvn/~c6" =iX#Qdd2MH}6 no?#,w I; Fꬻ/+#u.7IϡEP#]ZW 8m__`i$0fJ네Fk% FtIUfSoBGHC8=$t4\|JeaY@S{OHy,^V>)1F,+?ާ NCC s:"R$66{_DOv`Xk% :-X09k{V^9}X>xƓ"(qk=?kT%`tZlY>ҳ Bp ұPVvH46;x>:-(XKDl{@6*z5!%LGo~=z50-kAAbAbWQ^A2%_Vpl6!Cj۫pv {')Zn720g!]N^n89`aI+g+z#t1-ݖwk4BXK,Ri (mqH|I'{_8])2X '[ Ƌ)N SaK<;'oSt]r>IIQ, m'#ꖍzę|xLnC*}{kJ)ٓ˳ZZ`Sk/E% 66 AO0ig,i޲I9z=?;ʝ,Rj:C4µO,Vh[RG8e :Y( &qa}F6*1lu8peR*rJͮ"d֕S4pL6]B F &P,{yLvf+잣qW톮cdn'm,62}G  ն*`Zy*?T*#ii@Og[@HyR^ċ16?[0U9#_UbBkLXYڡ1b\Eu@Tb߰7Zަu!c5+ XO/>%F@G?8hGjV[5 0ف=__}Bq8xdd~'B1EVo(~LnC?X3yV? ҿgD}-̓92f[r(ML92>>F4qv=#Ⱦ a(k:օY;r/E!AڽnP˓pܩ)v(lX6R +ԫ$hP$-C:ʫ8(=Jѽ4&qʖ<<.&nRIhr\xʰO^=Њ" HI%NrlPɝ>dm˾äZId-{UwCʢS3ŰfQo@C,#;JU8nVv⟐5USd:0Ė0>+y6#؜O~N&9zOXJ'a\7w1h/lk$GE!0ܾd:i̤c 8Gab6\ )]*euiI%?CaacYOJMeq8k?U$sM־l`btޘ$xUqg*dsi(V쁵GE BOx}] 8"ĐNgG++yag%LI:P]ß`Fl Ꙝ&d*M* ‰̭ z!es h}]HϩĺBͣ(@3u^leGr+% QKH>p\88G|c`ńa!HtU>`CZ|j#)lt߯IL[iH3eţzd,a5QoЁD[[F4?bWorznn%2m/m'E3kc쫊iAχ4(n*J &"IQL; zM BB .T%M9Dh:,ZMz.˴Ϲc=ݔ-T~U\ßG&\o!z҉< OLiNSg.LthU{ֻQFIKP<[i[fj'!Sv?,ܙ)xog+Lsqz.U -AJ(.k_)BQ}Rr8 *=X>v[#!YO!a[pJُE5E)aʢClMnMm)SV\n<_`Ј7O@u*Dq)4.'S}?)E-60 0cJYs'P֒BƌDž2yWK)[]9ow\c}AﱩBU % &st[k>l5%78ߑ\Oe{+nu3 \ ^=+ i2&n+5~ZQl/Pۇ) !!נ<03 {HJ ed yi Cƕۋy; Dtn>mR^ʑ(#B&jj;UКbȓZ*+Ow^3v h."mFΪ-D}?4["|郼$~b&~YYf0-Jf-i׊mp@'Z v + y- ^Hbg.]-½UaP.*զTEs+eK$#Du*0@[Mecp '2^B=<{idw\mԣc֦B V(fӡQpuӯȤ`-rxKĺ@g} ̃0=xR"Ά5jbjoGHd U醷Fat &Z{txA 91~97[:4~^ΘU=&m>&r+ؕF ¿`:If5ێ/=gyV\u4xuaw|*4X7Lä7G*$F(vpElFZceC O7,zeҠ{VR4)GO,812y'yhL$'{iہyrGH(Ӣ~ A$}c@$#K0~4;)aҘ>.YV2PˆV%|/$r|}_C1ٮ0*%cǯD qU* :ЃYda.`8h )z*e_%rb64iv]7mU@Ü#;K[׵G&{n_'}N-B3R 8,pls)/3?!7|PDa@0y ͱ-~zr~e{meQtD}NM5I<ݷpfoElK3<  %^ΑC#r4ܶ ;2b , ܘ6gU_q`?J,\$cjo> G.Y- 9.2B.(.no;o27 aW\a!;M&\`Xpܳ@$7(ZnRRUAm&g%pD`؃ś+,P^l0%N ţ]?KN$7 j`k9g %Z_*#:," fOV{Lfš0țH^z/B"|Y'L s$WBFK3$VbaymLt2_oߴ uWBx6yZ5KE!^l[6ߩ>MQ8R S| u*@A=1?b؇sk: vt%ԽON$ LXӳHq6Dj}]ޏX9 ݇4TX{-5༻I sW/lR4r`Fl"yQlMR55*N$ryRMYG`HWduINbt# ..  끚ovZZU78[ř"%F&D`'n}ޅTvlH%n _-x)W.n;lKp|b ˅1hup|sؿgM9@NMy_8*&5߸V ]P{/%wr 'w?rJu6 /NsgI '?#0.,M ^_+K*O=`v ̗zdPRWuto NѼr}B!|7쩊ZWDni7@D=Nqh? |lgW0BlU(H6?xBy  !NMCS{;:iX5:!4zk {@4ߤmԴG?0'eNƝnya,1~ r1ޖ_l'ɸ>hك3MMHAR?`(HovU:{ 1k1n{9&}XSyzUnRJZs#P+ﺻPsuI;͹;} Awn+ٚrJ nZ$IcM.dFXC6͐A@*N 3eaU p-> lP@cOʹOS?RZ+I(qkq . oTM{|IH͍]RiXciab46=0_ _,'*$ /{sJ:1f.__sQSv xk 93@2PGDjNbTl6\!/Tv ApMm# SryOl;T 78;y8"leR-- ~{Zxlq+ A*S$ ዯ?}+bv8<8KW_ƑTTcratO>D:b(Q*w]1 .AN[*B(XXhýx;;¬ǵFK jmq/0Ps4oj^\ĪCS`NQwfC<[l!snRӂj q,0ژt' btg뙐 } ^= ԅ}pF: xҹ'"o _2jnnn;OJ:whS"5^: #=HWr.T7n>(/Ӹ8ƺt£MRX)=#`R} {Xoyfy32P"K0rs+d7 {-.ca{h^줸"n:IG\l@WuC276/۵i_ 11(~4]UY0\ 'NF"V0VT&KRl8i^4ba5!Ԟ!+,/*Q }ұhꞬῗ[UJRr_rM1tyţ4~M>~! , i+s.Gwz?ݘH@dk I"-`V:H0nU9n*7!S؏yk ݵbSR"}g&2X}0- _*(IY*buGHδW_yU8ĉbf7r r' k0#KE$so9 3dlUG;:$6Q_y'XEtLd iW~7a"M2 aj))T3D0"򳒪9oY){]aD>[uNH%At%ϊK)|pAV\91ל(q4Ry?@DM2&EU|L#h)tov!qcRYxQ#z{4}c{h 2tLe-WU+-R&흅1" %P @HnSJǝL4?>nڥq@Tbo$[ k}nVxvk5pl=8qorO2n͡ؠvZ} GSeXw֋ $BV:f$W $$&o)ilhŔբU2S&=U|Ai_wRtbk$ ;Cȁgp/s 4$IoC6C&nf;9*Ss@+M=53kvQ-BI5}(Y~** OS?!9--uz H_Dځ:;1u _Һo| + Mv qC>Hʢ#kO[Xe☉ ߉o:1cX\u!zQ`SN]370c7gu &VtiM脞8R4G[V:>Qu,x3jy^MDKNx  L9ԝIYO.!r(?[Rv,e`CԩH~h'd K㬍t⯔j<;7NmA@^|KGbSBDCHh4!j<{!EZ%hC1+bVԙ0*#J 91Cpk/ĄCe6%jӁDvM&sub73n8P)hd͖NKF< _A0obGW5<͚,/vĵB:iU:raCթET><ə^r4qhG lGZ}.tJ֌g]ܹA< Z⩥:5S "0?s݈ԙO'*g˷+y )΢\Ųݖf锣D.Ͷ<]?) n]:'8{>|47(w~?LحIb{*2c8s1KaA u(~$,bzK҆|*=?yoYE`FeiIfE'hN?v ۅvF(zjkxQc{fL*~@~ @wo[wP\Vkdd[S\t?=t(,zNfosM[ }yQBU16 ?f_(RC ހ?;Q  % 4qP6F?;YtJyJҸ!x,FgQ=uSwD"&O%6-kMr/t3Z_\ :Ag4rr~b6ix2@ HkA.5 u'gNgQ3ay w'!֩4ل9zx%YRǝ7;#.fB>JAa΃f3ekLߠ)'-6o~.}pj Li$p$V2jdai34;SOBfn$[^bkvKm礉~F8a+t'#F~$g7F!nTIhu`T~]oJ#czαbQh-xITқzP̀1d)86Pp4}/$c5b"S 2M!k:C#Dn>CßO#Es LPD8s{$F\&TeA|BĎﳠ\2{֮=|9TձG'&h .6  h*]W'ZlVىG>⿕Dt6`~3o3a>=[ok߻W`L$O?f7T;Izmx h\& }K>|CȫMy_a uQbF핊h魘Nr#iѭϯ t8=4E+M]L%zsfyt wG87Ap*1q֛%^rŻH9k4jO{N !0^uzln}nk5y%SD'Os3p*eQ0v( @7x\͖FMJɫo'e,I$̳2"V .gŎJffD /|ۉW}Ĉ.촫'N=EpdĀL5sX_F&l[+"8\',ê#YK F`9:]zt1۪"I6a5M&$Yi{X`!wHtMN8QYct,@ۥVtM2]$eӚ RٿԄQ 0 }eڪ70vz*b wFc$0BwJ5/Z.*mb7C!wb^ǕY)ExR*ؐ%&&! )ݓTHV;4 v6vh[r6kcJJb8r y#a7szS`4i3EB {S4&+Ww f)PFoJqkMa2>/ b_ do=gMI7eV$P0l.]6c0L+ڃ<\y{3o"m-+--aaI pƣcmsOŋS=2Ӂ5{|m&hI}@İk>=[1$L5 %'%NxvH:] ܚr0jqć ?`vN\^W"DŸ ZC?2ܱ{ v57K^p.Ҵ7k-hU9㡖!bp{OO&8ϸ&\碸GD@>'pƙK*V2<c]+Fr:gj'T* ȶ*w3<.@NzƖܑFT+͓X<& ~jV 8Bkq]b!ΧJ0S% /SX0Z Gl(خ._s7@9^HS-U4R?5=$82|RU2l{ IȮa3e5vSUC9ϘJ.ijY$v%ϓ1"rbNOw y<htQ Of EW(~n؟5;#o/lS4b.vHy8[v-Y?goO<"ڨV:88 ө>5. `ԶXK}6DNztܮ!-n~PeNuE@A4~DZS&h@fyit%[,72i+߇&i5yLΰB.c1:P2zA6u$*dO]Nٻm#bW$ yS/K yXU|ws,,ez<D>AGlCbG][fΩwMIj$4$X|>% g^'88aAoE,hOSW oe𽌱I^T{$G}6$9mrh`M1O&.).3V) ]TJcg0*wrI𸄪qxoUw6ISm%4<ЬI_۱,-1}JjdwY }dj5j*hc&0H~l=ّ|C ^GR i2!dĐ:=փ@M"̥>=`ekVbP[ԽNҰ]i)^aq,'m,ȦzTS"?Rf,5 :vD6ܛ=Q2rUX& Q_ N8debupNR"^k-?!4Qr.<߼e!4ϺS5:3 P͹U;`wjbd+!u\7E [ӕ}Ƨa2 #8Ԑ씻}Quޖo˥q7zc0]cvisjVA&JD _,MVY!Y bAúvqi9S]zO0K0. -FO7u1A5S3M{q[y \g 5:mr6ɿ2_w7rV x8(*L @E,&nH[,/AJ&%01x7N1p]Mn 5Ps_wkWWluY4C-g,VB,4Aq[NWWu Y(eĀu!iF0[;~'%*XK+u\/c j1 W2k :ugX1cdqvQ2S$k@gVb2}yO$< 1(}:,)`PZp!-##6d n@{2X^ bJXU:65U[ icP_`ptCVy2DO*^U>x$] EG) m+ bae 䍂ԊWc ,v/j.;WUQ5,H g YDV ,%1xͼPȡ9 5{AܱoBgWpKg*Pv;S'd8gz }3]=ߴaZt`Q$fMUi'چaϷފ< ENXX0f1))f_MeҦ~T-I8g4lVM$g1 1%)yzH!՜3n"u҃NjY_mV (" HcB=vL/-?`O(8Hau(EfC=fH{D}J < xtxy eש 3^)yl ˧i$C\LxE1h.vymz9G*5)(l#H`FUg7-&L8LKE -sw%Z bO6qXI}m'fT%{C!WD$tV!Rb?*2CJ/J&ǦΦ w]=i$>=Syw@31 _z [Y粳ȗ I(#raVt $ '4 +&&Ok._mo7ʹ+{ ΣET!p8w*O3ڋ'7ndM6{&!yk?q8Zɿe=|WA\b11Uׂ`GV:T>[maql~]ww GbҖtjyhb<<:!Z2{I(h?3ϖ"hCq #.S$v㫋w+{_+c0 A^4ޗ"RvW^A)o( <>ض=~ԓ[Dp")Y"K+61B?H!X;^vҏ9gveWh9 =G7D΃=Ia- |:,kWMR* |: WT-)0W5VJ%'cR/ؖ;<<Coΐt_H.Lio^néK]3Ơ6ANb)R[z)Fjѡ ~,K N^Kj#NSy} &p !4#; Xѵ,V)]rȊTU)G t:Z㌦ [Gn-`3wRI_eE.)i{4}ޯcshfG@vyMm;n4rȊuF\^ p\9 $lpZձ-2]k &ԋ•N`ES1E89Odq9E Vzhj<׳3M!vƩn&z4S1­kX6p}἟csPk!T4~u:6W%ҡ3g9˜&/`o_R%L~YkAꨉ[ nm]S=Urc )ndgTĭ/ K6U E--v{og—}ǘQu|QwZHC '7v'} }CYFwz^-:Ar<7nm^[O5")Q&Kv9_nڔz]kgTf<WA6* \/QiX7ļJ.a/XFߖNρ7c]4w+*3pNvy~ kԃ5KC[mXzӅ|4ߣEynr)/=8EbX#+,fi +T8F^"y,moMr\g(Y*{;ȑ ͠zn(WDdxcf lPT r.N@30T8%|Nb(Uy{0tMbվ !3G$c{SNM1Z+j3TէEAfXfSF"f˥WDcFnL #Ӭ1{)@ G˟p3ٓ kY䶧%Nc轞:ύp9KT2KJoe*V{.IOuk-sk`oUՀؙZ۟Wԓ |óiiRRr'ߗÅWV0Ilڌ7( 2(yqŇJef`R7VE ۪/@ Sپfsou~S Tq| jkĽȿAAU\=8ŬRw34W`m 95@hlЧ~ ~(>^Iy'OwMcOxE<&> vU[=k^!aƅiS:9ka#|=XIvtƋvue:O'L!YPBT]N,ߚ~0tFϿvOlC:>Ii\K<& x]Fas  +ANѥx%(|fKם5!=@,s2(TnXJYlaEM WgB?*ݤN0/㫨 dT6'lq+lS-І~=p6%د#xm.*+R^DlX+q<V [n9owK)Lf ^7١\%C|#ˋʏ891 ٪nVf-ۛ"R`D-/_`\╬8Ok(r%%ImδtR &jSJ5^,jDşAvXJ(#H}3Zus$5E)dkyKH$U?pp i>fARLj|9p`s]ۇ.¡s (Ñh>Bd$cJm9*|I$$g+k\vYTjM \7cM&՛%O! g νKDޭjNXQO_qO=2ˣj.zͼ2Ǹ|)xK&Ԯ7k&;`ڥQ/|BHb8 p'u?3,DMw׏FߢBa㇐WE{ɷ/Z(6ؤkzG;_81YI͍8Z KνChTTUb 4"4YOJAT|(2 Ӣoms1&=(F7׾;zLp8xTYO}VC>It#օ`'&`RVZ:{ zpO1akjLK)v $Kq}U|C^7Q_EJ~?6i xdz9Ad+T9 F=.Rd=h?xr1#L0O}7yU,Xt3E&y1̭I0͗)/ekG8_L3С2vY\8 {`fTwhXw42Y~´6$ZmG| wVЌOVl3)?! Ƨv<3fB\:oW'JQ5ϔvt'1Kyq$58yfrZH)Qdyfs_|l+EXTE6ړ=f 0"t:"ŏ5X"U1QpGjͶ>9Q5 :tʸy.Y*"q<8Ȏ ~HQkq%wh"]+ГG˶E>2HmS'Z:nB\(9$GrL~3-n%J}?t'Q |`'Q2X'.t7QZ 61 z)觷4\[B:AJ$)#r:q'mĴYe0F"',^m>~ eFxeOѿ\|mxiwu4j*&B|R,2w5Ѣh.^NsVM:6nzxrC^լe}8"^':"4Gp&ڈ[N0_"Tb煋5i {\ Em+nv3tbw8bgRuԞgEARFS5wr5G"7Cs/#{ sr9hr`)F\_ MtpfuH1*rc(<ݟ":l̷)B| gH`X8q¤2AyȪ+$2n )fυK_ !*;UT=o'[TFVb a*aI^v{~2'JekiB~OCmJ$I@P]":NHK4e?s* LXgLD4A[vCMӓMK}׋Sm;@r OLL܉dO_C;5!F@妠N[PŰ|Uo隝>]UG\,K< 3 TF{]kqSOMY6.SÐsN_8rmg<v\ridyC+߱$2nc37X/0{[F{KAVbJ@MUgOD0kS3~c<).[G as7fc|p u` H1!$^Ȍμe&i,j"Nn֠'B>"KA t&E!@خ7xuR<6'S|]19qvtuQD7sm ct>btOLuWe. m"@<+qf! ^_.,˦/ѧ"MC5 e?|ݦw~f`faNb A5U9EVWk0({&oNB76\\Ylk̬6Ŀnӟnu~}"5H%uo1Lv_5?{)lwag临*דlP 05#jݭЗ[ͣ}_J $SևbĮK 11x;;1ZR :?OKxBQ98񘤏 jү{ BE24 &5N7;^],f;h"`YtlBJŦE8=[T->Q|EJƒͩlVH~ΫW2j$d# tuiD*V%\njk6lZz-~vD.sBSw-hV KD*ߐ?*:5`۴£tjBtBԜ̨ :V6'fC=DDaH*E;K_A.<Bj0M%ڴ(~[ة DK;L1$uh H@"NiIka I}݋w@5jkۀg;}{>Ņu_5NX3ˏ$Bx1zdؠȖY[%PZת"QgLP/KL^VjO K:BwűZU\9FG0;t$*Kh!-4 ec3@WV lI)g<,`I^D^\~{řہS Y7Ɉ{58=И|EwL(*"D1 :v'Nx2ebО\A22heK(nRqƳ`SQϮ(MGZZWEfQ20lx69g;#.wv9cB[\Rg>~=ˈ{mwMrNtb}Y϶y\2h?]?4t|89Cdlc@ X9Mɨ6|@7!7$Q\;p/Ys[B6"F`ȟ Zn{V}oEP8ET@CV>% //*`Y(0C*%6VПj]qKA?\ŪicmHQn|i`\0'|J *U,c2Ʊ$( 9 `U;-<"NDb*2=\gd&D#J{֢ZC &ͣ2 0.sU|h? H|'pd_ъWP&ZO8NDI8A2f)6+%[7OT2s8*z,%`h36?K#G417O:T1.O7Τɲک^ i%XMۈ44)Fh<uLP_gS 'puϨrN<n &GDٷ㋯9Ս |-fv$G-^w8'uG7\sa(W.KZ| Q\!h!Z̅a{F2 @E>Hu5Vг&)(ZO}VFM)-jqp<]T(&]he;% fÙd# K("4BaP#rFgCV.v"/Z+A)󁔳5k[>TIF1jQ" zb ?y KwY2A΋2 l>)32vrʽOI7<A7#0 lU`dXbi) !y]`ݻt\h.iˈ~I-}X81OQl4dǣ[Z.<얂PcSģZ?A6 ⳩Zp3Rf:]"N/5~<ècd鎳CQ0(^|hI V(Mgj K:]9c4VԩՑ~X=Gqő|w$X?WhD)gv ߘ5zPȸ'ցm`/] ʔ7*-`iRn>BEߡiU 9g{G` Ū u8GRa 5`h iJ/F[:r>'~`*ܗᮂZ$1&_gqXfߪ ʾYQ[o_@F۵Qnk @=FR xpQHc6ŐpyG0 YrF΂yϾʟSiMj+.;`lu ".hYIOLAfYQ}#ce*zu–̷ ]b4Z" rO;o.yN(&*P42וG^ۅ* fnJDk0f<$d6⯡sU"E[U%тb_fbNѯ/3o?HU450y-Δpן*uӊ{Q{rmpCfNrq/0i&Qg_ϭ ׆yn*''uļEH&=VG6퇆Zyń#1|i,A:1V4{i'z/BѪ@ɯ`z.y$҂-[6@ F@\݆#J i4pvW NaxU (odd.myg A',ZIFcD~;r7>N^:y S&Gv;0J M4"sOMjDأB8 qR4M^?DGXHq5¨;#)ruǢǛHmr2; D eQdM&ffѸ>b=ႶH ^΃O}XcR,hW$Qgz߄cZp I W<&'S^꯱RYYV jRVoGF~WZoQEy2eHkhm|FVt\ H0t)*d? KS` KRP"&6o_$@d@"~lC^|U,9|6C@ɝorl;Zme'WbѸ`&. چ$)LL5^HI8~Sakx(`Eׅ>(`pn<7#(^i:w XPm,9DyI{c1$9~~W,^@yihZgpLe8'qJ: L*lӹsYmSVWp(dGafLlb7|!rŶ~"l[@- 4xı/w%%p20^(ϯD') 5,m*&靮4O m@WW[@\hٔQf5<|ރ/UMNL| ޓ7dLaZA^]lUϏ ( qqZ\!޹נa^ǭ)(2.ELٱύŚϫ >Tt^6 b%@b9{JӪFK߆DgWNP6 l>[wꂯظW`c$6!}6/S..|E  ~8Vٵ(!dbeRoc]$i Y2(% <'gKj& m [Ӥ,̀9+ VAf E- Z:؞ƾ\fL%: $u>_5k_L@vܿ*;xE%b{_ ר|k=$0*aYb \g1tfQTJƕ} Cf(4_]Fem2%\.џ^jXkyۀ0=#fo᫚: =ȍ `Ay!jP8[I;RibU#b >La`RlOL}HŚ WNkAEzyޑ,0A :4w=hnO 4)q WښvyT&w ! 'IP\oE<.%JƤBeٮ|iGDĕnJ')7򆯪 Uph*n ov:ĖeϴhقH+NTz N K~UїO_/8R=T-$J'@-xI1ؐƫmSǛ0pB'"KtC]]r%yAlKMPDOo,+/D:8CCsK9*W[=1~pJc<_Ŋv4ʱ>yAS+U=z=irAͰF5r6 \P4 r'z\+9TXRq9-Ng l Ǟ*!k2E듷v qsCKY{X>ؐr3݀OwJ&Pg[é u\_Jn' Oz[ϷJ8'h!~DNђ}F< R7ɲV< P}e/;xQᾢ4 Qt&3T"})f}%Ɔ]!4Y ve^\ZDVm@cZB5صzI4mGAadS%c'9LwU\ |%Ȋ>뢎%!w.=\A.1G?fq7lSG6sˉC4M]LEy%H4KJ`uce4|42K!]uՏ6B|]]dIpp}R -!$sLI ;NDۿyqU)GFZ.NC#HtoRc#K,hK{]բHN %o`i^oyX] ʹ҆[pȝs/1q˞e[ mr7P2Pj0x G[>0>L܃̞/Yu{u0EÖ?/¬]$Ie?e ۦyu 'sZs4ޕiߵnO~hC #s\O+NdKo{{~ T3W- Ѫ||ގ컷Z.N8*Ϧp}Kjn5^2PdQ%㪕Oį֘a>US ҕW{QRB0L@^(Of;Cjg`q,(}­5`h q27(sʭn(%(u)6Z?mdArq"zdȖ*䣑"lW K,d9G+իl1՝8x*Fh>NM,oDI!fwTY}b nZ=:֓KE쫥P$ǘ~{E T]Gnض6믃<]r~*K R15?.z$#Ynܤs$}Jd׬7bTt>%IvΉ<h#vcD )ZlᕚDWptmalL@KM v`8t!=Oz=_NEUi4ִO`XDs`92sa}Nil%[nU,e)1JTN ]0oXFxn~dW?IĻ?zRYSU}0T0yozLpX+Vra|PqT|/qsvfRuk&PtM6\/KY\c7F˝ct/&ggmpޫ:|yβ:f80Gs ,.=y =ců낵Э=JMԶWa$[P WfO ֲjxe 堨/||jږY?ڊv1$YD{.|l{'Irh'[v( 㱦1BA7  \A-.ޜڰgqw #Bz6TFgZy\w! cn*OL'|W"x(cXxT/RGD2=Rw \պޛ'P,͐ B/8cQU*!Î* 3`Zh+8Ńs:+_" ؄7~VIBU-Fp)B#I /ON]˪W9 EE`抟v tNdL8X1C*h [d t<LW\)A\whh - P]h~b{ ;!JkOI \a8oN/hG=:,7@| `)ru Hmt\1 t3D1r$ P,\xJm+ɀ C2IͦpfpFD2"`Z)'fwsI?a9K.JpV 4%Y0&zEW"p8VBi/q{?e()*SOOD7kPw&ue1DKю_r*cI dIٵvrNLNgN#i wSY^ d6D٪wu=v38$~O9P?L IJ X!*/YGÞs V~P5l̑a:Of1t Ǫ4̼F-b~U @n-O(Ή u+,Ȃ)E7> ˉZ{[EDf`0)I=ⶆf?DYNa=NI6#FY{˖}ŦE 9b$d A|\ DČ&5hC qMʕ茤e9b򇹝/+lsqIy"~~xж.E- b)~JfL]ag\I 9S>sPWksd܎zʽbי_5 `+Ty] Evn>>Mzkw:z5[=̤B }yOA ?ұ#'fhHOչள]AWge࿯@s=5X'?^&J^XEU.Jv"pe\mr/Wi;[F9g&aW@bX9[Ej0&쭁tԋK5)81KAC>$K"=DoqnӅ]k%PYy-juE]M I3EĠiR FWIm1p3Ġíe6ݥBu1ثN~7aJQuPTޗl ^yMXokAVy/>~.bPՀIBb'uM7Jخ@ 1diÊ}-2*+[Pla,Z ZJjgJL;֯jngP@ c\VK ;>;REnU5x=s=ح. %~zIZj땈WnCv.eqi(w;u QY,j[RXs,(eb8irC7;]ˡRn 8uv ٸ!/H7Q"@ LCAq Ԗy府J>+!5Z+ 7_k 7RCh>0Yڨ4L(=\dǎI ;^Z W༏%"f (|$>7<!?mxQvҁApU  5$`UL/'`uJ$tcu}<@n%!2LpH?+3߳EmO' IEuIvr=aKɊ.ĉ"0}v0x mƒNt+Lo<0(`.<"ø*ڃ|kWϾ=uidMa d;/b#0, )Wh*"1g0S#vx>D~AA7z5‚~ <}^hpd;Aҏrc0ygy3B[w;O@iDkgo}>TS+0V.dߔN (}6'=#|6𹖑 T) vVf>F dbЫ& #"$ġ u"_i7:]*z!31"A?i>NIVKol*^3wm>C8\HS-[(:ĢQM O훕lk\ԭ/{# {%yXA3¨}̑GiJZkvZVhq-_c<LȆul+J^h`6 Nleqp} ٞ}PaXt74ώ;ЪG!Nm|VBU|(n|! 7 R&fzx8 B`yꎏ%%0ĕ ~Q//-X`X ΀Ne @fVMG(D x,B ՈxNz`7` 1.(ːTa.(V3cl,+n"̴]˫,laQ mpig9W!+%grBrۏ5nqJdG _u/(ĞS~J\;,;Q=pMDwĪ|'Ⓥ~)KDS${gBj i zn.(|15{W}Pgi֗Kv7Ndqm7w^QTvA. $TXI|O3}N+9f"k8&P[2rw{Pr& |*SwK6̡,zՖ_vĚ\ dpe,m㇖S,T7ytsF}ȗguȉ)u\)QlGEz{;ڙݠ'x^>aS9<'Z0dA!`uύG:~yx9@2Dlj3J.627]!-E %SRqO:AM0Eb& 93+ U~`G@@5/˟ۼ=/}eR>Ѷ5O˵Vc_J^u'uk&1Fx㚀+5" ssS>hh_3' L.rZv *҉, ׁ {1,@B}׸wN!hr~߾ `,td|iD9c1fܐ2AhF#/E!"0׸W- +BS5fV]Rk=L&y9h4Hּ=1% *W`AE޻1qW5Xgӽm@+|4]vʵ`٘I$ AA!v*i_yHtP :flBi~GE߳YWqhj+ Aɠ R5n1ܣrl/ȚK'vV꠴'/\Ib|ΰ+UH3X$|foE ߃D_`Ƞ;)z;UDPކ*0.|V\~ITm*~]*I ɝuc~lF:|G:d 8JӃ{XcZ~ "!]2InCg*+c'AcfUV $1{;Alc:u *6ѼHz> B@Ap} 2x21Q1 \5qZcNrtR/dnɄ|QH ӭ8P]6udq|㡑^!93(+ͽx-Ӈ'6[O 5ko,HO s5Q$ptbWZ#+÷(F&y`TgSd':tΰ%LpCe$rrk9tTVzhitx=7*`VQT|4\qT:Zc" ׼,DžEV}o/` ~QH8g8bi EF_`lj!^(<݌3F(w9X4(5} %P*F ?_ɴ  M'i<-1A95CE.Z7 Vhޜk'h$>+O$\[_j }$:>P؈?9N (|\EQNGMf~废:ߙ5K9%MgL!>KYLWdUS}V4dL`FĹ G i;}dE8woy36ݳX@, 7 b~4^2BBe9h p̼*`3u{Db/i?fM| {aPYv@ݲ1vpP&:)>/t;qVni }酫2V71v_WLQsxx/W;s >Nq*8qyP{XSQqmQV")3}Dd-[|o}y>^\9ےBwwo`,:Mm}'ōb@*O{lI74Τ8gݵ)kQ%wTtq04rآ%FK,6ld@wTd&V HʧCZm2-;.9L>-;; X-,v:!ҴʙHiw;BA,_(MCF@Y|f0jKPLUg\]j|r o[K]5S˶ΖG /WPwA8 VRoAƚM8!Sʙ)L軉c.U)_>T 7Zj}K0zp~ꦝ2rO2^2'>},`\;暪mxPi___Mdn PݲՈ$bzd˫ \ϛZj-{q4'g'/4Դƾ|$oβgk*YmCn/&+Rg" ?Hasn[ZE+l *Cqf1Ut 1C -Lެk~Rc'_L[~%SuN5qN K=( ma -(Sglx>݉7&epvCc{qM̬w AY}ZYBP. VK.ⴷ3ȟl{x^ޠDޥ7(nDU[wEќ^GXv IPa&̑v&6$fLg9cԲy[soW8ZKO̺U-5mtC) WL1&Vd^R MQi|QRSCfF[RGէ3Ӷ=0leA%Paa ;}0oAxe<~Xrn%1]SdMSCFv(uX>kIH/h6k__\+߰s4Bs:0s>)MYR zj{KV孭We A0g5*-Ÿꮸ[y# -hlڒ2/"3yOܘH= V%I+$1 M;!KC}2 HrƣH$Qv'gv<_ '@/ٗtO[pLA(op9#daƆ)IЁB]\qUsm^5z/CN(9rW*OߦјJP={/*& |/` f?kbdq,(-Ez7Av1#8Nu[e|s_{Fx]M[7vEd ʜ=h DdǙ4#X3zZV9a+gӢa>&6=U+r(hO;04oGKew7qCbn-cln)?<@%|6J8xE~/*ơУ9C":-^3OEe2gčY~HNsҞj=J'T%9Pl+4#Uwk-: CF:Lyk~ˮՂ[.8gyYPՃA q+]No`V~qg)KzwDj3K+> bN vkc 7 C ;®= +jX:峡5_Q s ီ $5I>>"$WqEdhluH<<^O[wqe.,gv/RfrB"3=/J"<y/uc.ol76I6YGO~fX}w<9^пMU&>+lԋ3 iȱ钆}޺'56Jf:DB YsxU<ې]UOi^eheP+Enx UQenm; ~|Zࣅ@/'B<bC듅Wې"a9Y|[|:rl% :Ե@`Vb0/*A@If儯3~i[C-Lwgj쌂IidgzBEЂWSor*~T7o"UX?W08gcx.n;Z3m#JB8艩tѴ8-q){QzYQ1G X}հ:8٠j{ hGs]ԦnYi1Bĵ;3c]6Y Zj2[ɩ(ᣎVgߵK\T@莶~!W&24;:YKŲOb:>(ŧ_{hT-H>CTubrs{(nTz =GCwspQDndA9! VcjMnAsJXUavd9H&~!K = ]i(T5٦"h%iaNolv|-X-B9˵hd[8:)$@L7U <&!'>Ha'dE8JiLٌ# qjX6w/V@qnJ p,ٞ}x^NFH~s'-HYs*$C9幾G )e0 {.ș6c:V'K^B׶@񢻶¶@bPyBoݑh8˻6]W#8BmY_Q&Iwj1zv8wj%c!S[=Ğ G3sA[A#%B0")ZK}g!p-d&#&YDȶObN Q՝гsc{eNی /fw?H {1ΛvATj/+WX =!ސ"vagm[+9[lHՙ)%n R#4 xNZvPTIݝ7F4zJʂ^g$8 tiSKۓhc&Prl79;8ݔM] ?J&]`hf 1㑺4&AyYejɺP#:s-F?'TW`i)Cf^gR RĚx۸C*:v'f"6nx'Z|jK`R5ޥ[`Q |A/ ⾨E3I{Rv TiZ@e|b!bΌk3em.nM~GF['%uR ~{(,@j裔 ͽ'A':)tn<`HNDWWC[݂jm7yiXzW7؆ @O>;9ڝi m|ƒ`Q\tJcvG*dž IuCrӝ{nIWH#eGN9jB]):c}/Vosm(Mlٱi6z.ޯ^TcSCTnCؚOj=gKr@*hECʰq˞kVupF94Izӡb*k+YИ]JOW/sVy$AH!saߑ>Uy 5?*)r1CuS;s f&=+MTD-"tI=t\[^,MbصNq1<}zZgKj`f#c,޼ E{{̑3r;@`ҤLOe/RY%ϕJkCS$^Ii.i3K^KL.Q@tE!:<7o2wmڇ[@D֭}B|`GL⇌)Fchq CooPP2A>F<6C+oc`٨&~4Q⤼n|yfXcKV5sA?Qur\;; 0pN\CEKtv4Q+oUJH %!rگ:P.VXlW LKFXg0'ڂoS; pSu ZN) hn<.1HiN!ITw] hi#Y5<A ?q΋ZXfn.ʄ>h&Ƀ;_)~@0&gXS5 unO(b[r?HdEYd%{PFf.hyR~ -/K&2=F'OcsȽhBeރJj˵gM֢« NqxffSw"t G!8vD#zrܹmdHHkUr} ȅȔSB: YZ