samba-dsdb-modules-4.13.6+git.211.555d60b24ba-3.7.1 >  A aDSp9|WES>9aP̬5;;r7h?[ ~X-r.(7HP3*Z˞VpNŅa~Ј |ռø4NBs)F;zgue>  ;*Er)wӝ;–/<4V9'h՛Xy*yBo;tJr6LJw$^%]' qlZ*fQWo؈Ҽ@Ƅv,1991c5bc407dc6356111051d1d10dbf8fd4074a95ec378c9f00274ec59110d3a273b6d8dafd6bc835ef1428c9711891027b061264aDSp9|hY 9; Zse*k)4m J+- f鈬ts7J'Zfi<vXW+>h `wcUfvBQ@2x5_IzaӠ%ng7+:cРqL..G >pA/?/d0 6 H 3JPV/T/ / / / / ///~/l*(+{8+9/ :>>@%F4GH/H/I/XY\</]/^bcdef l"u4/v/w`/x /y z/l/|///Csamba-dsdb-modules4.13.6+git.211.555d60b24ba3.7.1Samba LDB modulesThis package contains plugins which add Active Directory features to the LDB library.aDRs390zl39SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxs390xln -sf /usr/lib64/samba/ldb /usr/lib64/ldb/samba /sbin/ldconfigW7Gw'gGWWW''^7Xh7G'7GG7Y8'8Wi8G'''77GG'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-4.13.6+git.211.555d60b24ba-3.7.1.src.rpmsamba-dsdb-modulessamba-dsdb-modules(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfig/sbin/ldconfiglibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libcmdline-credentials-samba4.so()(64bit)libcmdline-credentials-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgpgme.so.11()(64bit)libgpgme.so.11(GPGME_1.0)(64bit)libgpgme.so.11(GPGME_1.1)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.12)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.18)(64bit)libldb.so.2(LDB_0.9.19)(64bit)libldb.so.2(LDB_0.9.22)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_0.9.24)(64bit)libldb.so.2(LDB_1.1.0)(64bit)libldb.so.2(LDB_1.1.2)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.1.6)(64bit)libldb.so.2(LDB_1.2.0)(64bit)libldb.so.2(LDB_1.2.2)(64bit)libldb.so.2(LDB_2.0.5)(64bit)libldb2libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.4)(64bit)libndr.so.1(NDR_0.0.8)(64bit)libndr.so.1(NDR_0.2.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.3.14)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.13.6_GIT.211.555D60B24BA3.7.1_SUSE_OS15.0_S390X)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.2.13.0.4-14.6.0-14.0-15.2-14.14.3`v@`a@`<@`@___i_@_|\@_{ _l@_i@_d@__ @^@^^2^2^^1^^Y^J@^2@^&^&]]]])]@]@]]@]nU]nU]i]e@]_@]J@]B@] #]:\ڭ\\@\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USanopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/sbin/ldconfigs390zl39 1631867532  !"#$%&'()*+,-./4.13.6+git.211.555d60b24ba-3.7.14.13.6+git.211.555d60b24ba-3.7.1acl.soaclread.soanr.soaudit_log.socount_attrs.sodescriptor.sodirsync.sodns_notify.sodsdb_notification.soencrypted_secrets.soextended_dn_in.soextended_dn_out.soextended_dn_store.sogroup_audit_log.soildap.soinstancetype.solazy_commit.soldbsamba_extensions.solinked_attributes.sonew_partition.soobjectclass.soobjectclass_attrs.soobjectguid.sooperational.sopaged_results.sopartition.sopassword_hash.soranged_results.sorepl_meta_data.soresolve_oids.sorootdse.sosamba3sam.sosamba3sid.sosamba_dsdb.sosamba_secrets.sosamldb.soschema_data.soschema_load.sosecrets_tdb_sync.soshow_deleted.sosubtree_delete.sosubtree_rename.sotombstone_reanimate.sounique_object_sids.soupdate_keytab.sovlv.sowins_ldb.so/usr/lib64/samba/ldb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:19341/SUSE_SLE-15-SP3_Update/29f5bd08f0da5c0cd8a4b505126bcd3b-samba.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linux  !"#$%&'()*+,-.ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ffacc56c717962084fa4b3fbaff8c1188e0d9561, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a6219b3ebe3deda51fe59a071e3d35940bed887, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a5e0e3f94b6bfad5c6d445c4c5fa1a43fb1ec81, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4391bbce896cf5862383a749520696c07ffe08ab, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=38d393cc6a0e0b148a6a55ecfb0007a462776bc3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c653e8cfdaafc71331c4ae9501838b6b39100e64, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d76ebfce8ffbf145dd26baceb679d8f2af8554d8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=17474337f1275cc5c38864fa7d34f771df42eb08, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5da52bdb55d847dff79e58322c79550a9d4a2c2a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c200d4ffb6cc3826c1ab5495fbfc0fef69c4c60c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cbf681fa243ed02c3bf7575262c72f9e285aced2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=869dcba0c5f31b0709db8cac7c0f98d8848b7e65, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4bfc88ed096b037f5bf744e5b4605c6950995d9b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f725c70e4a3f12706b073a39af5c73bc594486ff, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6912a6ca8b5949987e07dd40b5f89395e67ff5c5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9719aa46d2120a18935475a0b56826201b6df460, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=296c4686b34a7b325c8ab77499597444440cf0c5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4669d197f5b50de40e1b6f02bfc44cbb3b744cb5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4c8a9c80b2af24e606afc6f4a006e2c1ca4f0f51, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b7693514f9a2323ce46c5ae0a70d3cd91dcf7173, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=700433def1fbebae47888cd13178b76709ec7c90, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=564d0d798bf14adbafa9c0c42a9ed74d8e4c66b2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=faaa864433cadcd9474eaebbe313fdbb97edc6be, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=92dea929ec24c8624c7aa444fdb816d8d388e63e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=896c9dde0d01757b3689a7e9804c6619be4da8d5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e561ca0d02c2596c43572c0937d4f8efc7e74cba, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8e326e30ba042d1e85287ef8cb110c7da5b172b0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=95c77ede603a101cb2de40f20a38c8b7553b7eec, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=437c999d4f3974c6b83b765492b294f55d19a58c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1aa9fa698884401573b8e08512e0fd61ab976912, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fe3530d6ffada16255e118c607549209779e0de8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e93c49b201958f46f9c9482585cf35b65898ca6c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2f044f49c8f4af8fd28bf0326221698ee6ae9f17, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=966694217171c242225bba81196629893f078a36, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=60e1c09fd21416a611fed5d7225feae05d59f189, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1523d008c4cb2409a80d6ed4925de2ddb4df0c17, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2bdd978adfde3df997fb5187a4abadd48ef33559, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=93c69608867a876e066ff132a4a089096a6d07de, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ad9798831b048cca14b93a5fa3f71678136c173, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6b192b0f2972cb0bcf360d42cafc70664ebe8202, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce7e8283b7e24f5bd6616d3ec4e458b209e95df8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=780bb9806b2353874f08e43ab1af10ba41dea2f3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4109f9dde00093086cbf4df5e4f705e48cb7380f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4c759258a41eb432b97054ee3e7e5fe5dd83c462, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=07604a60bfb6b06a91a1d653f2d957702c5a1acb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c395aa563849f0ccb706a6988a6ae3430b93ffce, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5a9645ceefaa636cef2eb98f3542b7e8c850ab93, stripped7C`p4HRZx CMr~+;GQ[l|    7 % - !  R2R_ReRR[RoR R RLR!R0RgR6R4RFR RdR1RKRfRZRRER^R/RnR3RRaRLR_ReRFRgR[RoR R R!R7R=R>R6R4R R`RKRfRER^RdRZRnR3RRFRoReR4R6R R RdRERnR3RRReR_R R R!RcRLRMR]RaR[RoRR6R4R RbRZRdRKR`RR\R^RRnR3RRqR_RoRsR6R4R[R R R^RZRpRrRnR3RRFReR R RLRMR!R[RoRgR5RR;R6R7R4R RfRERnR3RReRLRFRoR!R R RgR>R6R4RKR RdRfRERnR3RReRFRoR!RgRaR R R;R6R7R4R RdR`RfRERnR3RReRR_RaR R RcR!RgR[RoRR6R4R RbRZRfRdR`RR^RRnR3RRxRRURYReRoR6R4RR R RRXRRdRTRwRnR3RRgR!R R R6R4R RfR3RR!R R R6R4R R3RRgR)RSRRiR_R R RYR[RoR8R9R6R4ReRFRERXRfRdRR(R^RZRhRnRRR3RReRLRFRoR!R[RgR R RBR:R6R4R RKRfRERdRZRnR3RRoRgR[R R R6R4RfRZRnR3RRFRoR!ReR R R6R7R4RgR RdRfRERnR3RRoR!ReRFR R R6R7R4R RdRERnR3RRLRoRgR!R4R6R R RKR RfRnR3RRFRHRLR]RaR[R R RgRoReR!R6R4R RfRdRKR`RGRZRER\RnR3RRMRLRoR R R6R:R4RKRnR3RRFRqRUR_R!R[RoR R R RtRsReRCR:R9RAR6R4R RER^RdRpRZRTRnRrR3RRaRRR0R]RzR_RR R R RLR'RRURHRWR[R+RRgR2R!RoR6R4R.R-ReRR RGRVRRKRR\R1R^R`RRfRdRZR&RyR*R/RRTR,RRnR3RRoR R R R6R4RnRTR3RRWR_RaRHR]R[R R R!RoRFReRgR:RBR;R5R@R6R4RNRMRLRKR R`RGRVR\RdRfRER^RZRnR3RReRFRoR4R6R R RdRERnR3RRFR#RcRRJRaRvRReRxR!R]R[RoR R RORLR_RgRR7R?R6R4RR RIR`RKRdRfRRbRuR^R"R\R RERZRwRnR3RRmRaRoRLReR:R4R R RKR`RlRdRnR3RRgRoR_R!R4R6R R R RfR^RnR3RRoRFR!ReR R RAR4R6R9R RdRERnR3RRoR R R6R4R9RnR3RTRRRUR'RLR_R[RoR R R%ReR!RgRFR7R6R4RaR RKR`RfRER^RdRR$RZR&RTRnR3RRgR]RoR[R R R6R4RFRfRER\RZRnR3RRqR_R!R R RFReR[RoRsR6RAR4R RER^RdRpRZRnRrR3RRRkRoRgR!R4R6R R R RjRRfRnR3RRoReR!R R R6R4R RdRnR3RRoR!R R R6R4R RnR3RR!RoR R R6R4R RnR3RRoR!RFR%RgR R R5R6R4R RfR$RERnR3RReRoRgRaR!R R R6R4R RfR`RdRnR3RRRoRYR!ReR4R6R R RR RdRXRRnR3RRMRgRoR R R6R:R4RfRKRnR3RR_RQRoR4R R RPR^RnR3R+o PI"utf-8493cba228a11521e15a0e86ed72ebd39213224780872bff39f09ff0b0de9bcaa?7zXZ !t/] crv9wytۣph,zO2b_q{-{ah?H+ޙBxr܁FJNo#^R5eL,R%0,]F K*_IMu]vmvH aEV BKscbI^cѽ׃Yh,"3SymZPq>9*lQgZt9mLü( ZSo~?gjUp0*chs˭Q3KŒ I4_".IY5WNVZ5qf{Lpq|g^!SnvgWl]E6p3/]K/@D_Q~) kR1dOsݾQy1igq}̫6O2/Xrz- {LpY-[)Ai>5q&8VqLP:eA mNG|S5{ ٺE쐆w鱊'O֐vں\46E[F T݁zi-<ɗIV!O^3?Bk _K+˄>7|o ck'#EOvO2oUH0MfكQpLzQur/Pd]}dp∻K0A X~tv |gBE>p&8{*}QRمU;Uǫ˂`GϢ`hC=?bB!m3 "_NjQḫE~p_ 3CQC9l\`15#9M-)SZxyy"zm V;hlY!ӎ;1soaS |gtċ-2[ۄE.FBv8{]h wg4w6^uRU v3&(vbm\|1`f3nxsIGZW]м]ǮwbR*-Ԋ;(jnA B쎹$ eRˍ$[%q]@oBC+ nGCj7eK1| .@*bY0'f/忇QCUYnAh K|6ꔏ)[h[3| 6jiნM7k FW )Wi>Ysivұpi_[ KYKUW[^3Cjش>S=kqt$A֧x݀Xߤ0ך`65 Uf̻kWAͽ.-q;Tɿ7A^mg9tZSle+!?X {sO_bݻ:/'2d>?5>|bc ~NLRr25.8V"~dSiosեF03.~@P ѺJw}U& G--+rG.QK^Uu$}z|p!o9_h_:eua%&{"L~f%)'fa]7B1W[ я+&Ԓ$Jm *JG ҟ&.ÇZEF\u?W)fX1ĎXIcI@,f)lM%D@ܟN Ftvیy9(t-CaD610J$e_?*?yQX\ QW" ܝpAܸ2]ýO.p% F3tcR}NCM\%u'++*?]Fq5ӷr&aV,E婒9.IZ}z&`]=RnXB GէܭRT^Q+<% l*9ݹpQ2] Opg)t}`2Vr"Gnv6:(q-% ( (\4LLX-<)ϙLS}BI'ٟȟw eva¦}8Nd`+Q.ל??GY"dM`ƙV_|BÜNȊہױ!cB:1"r6Ւyzo ]i] +:jCJ0oۯx3 3)t,3LQ 4$DOTЂ"u'{.ߡiX[~_poV&(EO8daP oH#a,k~oTK6m8e|6iɱ";`iA8 P\Hב#{&nDz qxTKrh_mDaQѡG/Iai~u2D%h*g e|[>LUJJvOFMҺ_;6̄-K9]l$(@q/:!ڦI8Jp8SFk]!At_øWh^OǖZb^yx\LJkL}4iW ,X 8'ř'ON<'vW">(/IZ`ԍ'Q({VڇH#"\Ug ;pzy\ lpN5ШK\x*:xT.#gƜylG\!}&^VSY`9[=ї7H6h'̃8k=*D2̉% Ԝu^.Bt;{$-JN*T|s<+c~[rBܖaf {X%лJ 94]' Lp֦\\mLZޔWS< }JI#=6D L%5P&JiZd J"AZ~="d5p|o:JOSM *ٮz&A֊/8<tnQJdH$3NdvI5פM^-Vfb<}7KOW&aw5ār8Nm`d*䱯0yظֽE^ 9Onkƃ ߓngY l6Է<\ чO6gg"YtP &yŨj9웕Q+ѬBpG= x*N MaYixYwM ʢI%d0#yŇ{Ҙ$؎s9žu ^ gY@cګM7avG< CZߡ1K?%IR(\ѧ}J@"nJ: -c~D4)l e9$qot]az18#ևad}Ʒ !817ոEI6_|8Gu? s`&!$h]LDzO $h 34L.).Vxc>*+nw3sOELK״IxN,6}0l-}tkE5e򝶦6]b.Z\D=߼kz?y~lŖoW*\)>^Vv;r>xkʼ+/ K?XIF*O\q;}Hj1|R>t>CGs-x~B!v[P.TT?uã\%9W8ħ3U#;(""^1tdt>&)wzJh7VRIuԋ$ү?϶ pZ2@X)Gb4h¹˧,1>yFj͐;;kg% icm8[+M!I`/.¹v>(կ2vwrEHg j/dĀٟ+J 'cג߰D $Ūh &e§ST6ug.XѤ!oNWQƀ'4IiScڰo.U$>X3|j*S\)U!u06WevBldz#WQlxeoժ.,CԝI!v|2!<$P ȫ(Qn@ V6 ĉب:@ q:_K+O!^ TڐL 4/ aI76FC9@[R.hiv ZnNUf<@xZ7&%^zQ&w)tRgtY[S^L$/5L2VzֵZRO]L~(#ߌ'(tV6lҾQ[PI٠ު=#ڗwtغ:a)kIg#NsQOT\"4>`Z3ay@: :p O'J4(iWW!g VnF>H=:ANӑl iO )a@ pXjY4'+Ȳ(zf,j籎lUˣkP$HYtb\lۿ(ʤN5\a c}g?}(] mFN:Ea ;ZrjWB9P^):M$;waJGž#<>`xZ ?Ն] u wDM;HM??!:eRO%o(+A(e7sa$+ 0(7Pdwc'h 2r;/ɭ0{!;D~0@[3]qׁͥT]%kSfA9MQN!CNKTXs[Hut\ \N㡯A-6| 2|舴.,XV'ΔC3'$ppkG"v T9ѼRO7B Fg`s)qy `_*'ji;W3vi?&`9JJ[y_ywđ.o:iΚۭG )ݹI^tE':{Vɸ*sOмlèi;n7J܉'h>F' wtrYw,*gt7=GRR˦VH4sIaۂ"-iFqjj<*ܻneQ5ìC`Krh{\V]'=o JD4J҂W F"MMgtW%^8ѿc7tA]Ru&\6l!g%f ,x^f<{vEϳ=^jƁgd}D7 "bsȦMj{2v z}? ?KŒG0Hd4>[R 5S˶={n8 iRgr!W̞^9ƲYeig]Kο?Qy(w7dT-"Q)>v(0AH9y6(:),5+t s/HK7QfƏ;gHڥO1w4BqGMBLz[ԅj c o(7 M~Sw?A[l`cǪEQ{NL &#U -uQ!umoM_ƢgTeP ؜/wFpiE.(q>`PVIc //)q/l U?T#\!],HpWR)KBԅr*aH#'^4l#kx37n~]U]qkb9"1m_Ì֝d5#d d|qi2 _atXQIZSu9N)FB<^RQ$!;˄-N݋kE.Q,fp ʔ:e"!V( 3` jYvJЁeH 1Z54D=X;RlcT(㉰B,pq5XwV_{)t tصUzo!]V0GunhbflweA sg#Z{6 Rܻ@FP5"8}X*BLLy ^Wu29<0~LSfUn 5EGZ0W$Kg3 A蹨}05rE4o,I(Fly&6E`K/nľtZL;hKRY>~(WҶ8 ՗rEK('g9˦VrǶ0X*yD<" O[%,tnbJ:oHIJP,QT4u%.8q2^-Xl C>PQ6U6ٿy 06U>Rm…:j\B,rA&; l5 MO\7,YR#UX!7:B?i^BZ'C3Qy `Xj3@O7{.mZx18kiTaB#.x((AC /3?{$GZdmѰ\;\Bm?dY}1$GOU_:7| ]:)TԹ7YgE  55 Y+ mP\zx5]96 򧰐Fd!VhON;,ݸ_'W%t0pEWSZ cP޲xD~&,澧9Ҭ]q R`ņ(&T ?f][&'D$I*boeU/Ê岵Ǟ .(q$PWN04SMZ˰4&ᅴ7I5Kec5Q?qp幂\r%"3g䨜J.'_;)C@ft g|h|¼]<MWk> k[3l͎L- D|.u}/ crsGr띝ԯ+Zlc&N&D'bܱmttʼgY rRbCWA~N i1@T6h;-B |ΘsQOQqQ?aޢS v%Bz~ yGp^fJ\VyFw6Ļ]Ia;!cZP>T(V~x@ 8m8/GGO@<4omΫF8~N|;? ̘{ez2IHMڤG6M-TGEĶƆa]̰ /.92M;fSxn(K/hXh!nPNfW@,NJ \vA 4.E2Ar|NWɋs$co|䯖1" 3pi}w&n؉f{/Ԏa#ru>egj@B6NOqp|dpBJ ]߹ea;:kW& oS8I>1%[w؋W1T@'_&byjpCbɍ.طTp <"yp`MWɪּg~@ǧ$ jΓ@z9Ӣ>RM?kl:B&Dt [ ,ӈ ߬ }@`~$4{YH; ZC$QvҧWgG$mGD>=# lVd%L&ix{>V^B 3YL;z״Pր̷†:d *@{K=8C$X^0dAԷXTs ֕ /0eʱ!eNVxFUjZE-]cPaN0\o6t:`L:K;H[9!ƃq<.3jB3`v0Str Kꩌ3 WȲBd 6nOy$G*q1畽 mPʼnFX1y +Yi 磴+ц]~uv.p3f2 08ȞRfQp,ΫWlAD1IϫסEWmsn%^/hp sṷBlx*o`'׉BV'gJii&jo]꽏5@oC8Lݏ㌵mJƧMJw\X%/F_KwaC >HNؙY=&Y D m!#|k#-e׻:oi=/lڌDK-@%ܳHʦ ԭ $`4'5Fu #(,b,CZ=x|gE|nKa LEh]`'NdL>+q=.Ho}Ί:+K7t.Of@ RWK!>)|jxF+1Jw[a2'E Xf%SΪxd>LX6}wH㽣]xq#ŅՆ>O[Bo>g5NQَ&[;']]3/9::lwЙ WQV*Gg%zBy}hD 4Ҕ5Su ҮƘc%+ocbxL:Iɾ3~ C{֝a |bQSnv M5R ݫv]sSI3n 5=#g{6?%' M(AQ5Q2x=#}iSaW[MWSߕGwoIK2s #(kJHI0@E,Y'aMV(۸ӐB>aD;Yy~z%e˥^xOƦa3(F;ܚ\O8_h\އOt ws˴54@*j(:BӔwlT~0r1"\bn?vk-8#{B>WKMV1ʌ~;t2Z%t'MN+ # šZGC:M5Mm 3^n/.f3P^ϡ/%e> UHE Zf5_škO26qJ-4uYLJeH#1fH^E?Ci!8}G\SX={:~"zYF>1ZPu<(5(;bbΡ/OAHd8V'XtU#>%$ {6A%j?{dC_ ߗ`a^oWN͵l/@sHѯ3#VjHʤe@7Jq̇>Y=߁k\5DK= U+j1 +6[^@J 闣cs3W -]m ս˦xO΁PjL@2נMAU߂ϥţ򁒋܀ oL_E D-it/Xiy: 9+Ae鯦=Rޣ6/D6ɃmgT+1x;?bc]?PSj v`)-JveHFyTKL#֟%,rppԷ$.t5(:,*3H/8~J#ld[Z/$UxmK GĠ՘J (pEO1& 2,po9JF]*AT18O=f;`Y~'JT<2LlgJb&8.+H 8s`L1od5WCVC Pjey8&SHr"2B6`-L DDMq=}g{ha&H>W(|"ۯ3hZHq8Ȩ=oI`j2dTq@+ BFXO),l)"&9 .sУ77J"&UP|pBVR`CUUq,r!xA?FtPIpA7v"7~]Jdh]k*pS]ʃ@6vDz7Ө $j3Zp`ЛM\ 73~ɋ.GLᲙʲfQi% Xz^TQ-*ZUhK1Y"I6k"I@H_5 ki$e1m > s+8J޼[SV`I{MFaFjx<{* hjkϓw UWн1g܂]:})R6[>n3NǏaьm8K@ta8PMauhҴ|7G5weDՋےo-=S gL{R$ ِ,?*ͦ_6? 3M4{GtoY"хYF*\$ B!nC IJm^MbpY*tkT:z5!CY}>!ׇQ:dgjc=V+7FF#012T;)_(r0b9qιV2 P }66=ߵv>bZ3sԠOUʒr /'ӫ8o@*VsD^xt H4Bz֭W#'0l.AOS9SR\Km&<\-od3s6B11coU3'_n'nPQO+*v&Z,mj,-|mۦkF&D=0%~^c0.f w"tU㰧DZGKϩػf-sa;^wiz,wq']/pEmByl? P]`+h=p܈\+j%/PɴUHBQN1ɸ 'ujCb S\8նb8QQΛv.z1gI/;U.Pz  8~$ŮI{l|-OVN3Kӄ9 i;\RDO!Kԅj1O~DG$wuM'1^B;<*LJ!k:d58X5lG TDl`ʵXyZSK-Nmֱw ڴe[l"C*yx#ܣq=~mDQp}eâ~RJH_& ޴|xxlkTbYϛ%(-ec! ?w4Ǖ9~a}0OxtLxK9R&dGGfS>b$a lJʑ~x%| ]-6|V a>wG٘x(4|lq8(}d8(XI4 <(C%gaZk{༷PtOGm*kl0fqbKkk;Cݘ7HnO"{!oe֣ZziH[[!Vc\7Y\:~J%5-~qPu̡ 'ePXz16ɂVaR*EzPfPi9&s[8@:JNO@yn4L9ΘbL>zyJ~C@ᥲ |:!%(;"IKx+" y÷xOס1B"AmBcw,%%#AI,+$&5_LJ?4+ 4%K-nO*z]ItVCKl3v*w\@;-&oWM}kTyO<Drh++ <`pi!XyhOhzD &D31CNl9^_-%9N`I5ʘ  aU t{T]h `뒎|{t0d, V5:Ʈrz=RiyY\3o[Lpl31m eP˪iS֯{ʴ+Ԩ9M9 zDR~_<8t]bB'ZJp2m 8:6w*r l=KsC}@%hL<;νʃs!\ΠEPLImE.7i/rs:BrQy0LwKX"Wʼ j*F.y[SmuYrp뀯Z? &}v*.8 qR(H;' ?up y: sekhX j#*1oISrH^S yK|_;^SpW_b,B^C/SqDEolǪ7v3ȾGf5ҵsGRtVuGY qZɌ`G'Cf*|Wτk>,fV-%fM\?t3sE*%Qt W5q<~cSY:\2H z.ᲈE_ űUR1Q 0 p /#*ΚӮwW_ ;^9ڕoO_"1(Kt EH&XD_+߬l6 c I2A,Xw  crR2 zz9b㢸p4jJ/\A[m4z+ :﹉0t8r*s=GukE4{⫳>ʭv\Q=ֳG|I[DiїExph&4wZW}O}bgU%nˣ ɭ#up 1TC*D|2'TL+D#q ЍKkX!=2pBAu1AY7Z[pדU=i&0 0I6}dW.QT^KJ6ֽJǝ|ڽ8n M/凜âET[mϊ,12/= GWXE6RCU`UנvfǍµcʉX]~PuN/8#W|bJrgԐȿt'cƉT Tk,c1 I6BrK#Z< ]i.Ǥ1VO|; P{ a;Ɛ?<4IBomxkEQ( 㨤9K.@6fB2w= awZes /_u B UjxP&M*oy뱒}KI-W$8O}ۣԽf"0KjAf9mhc`l罾(`>b$rvlI]TU\A釣G{>2(j GT?=l ?єNum=55ph=MSA憼2K1W=Ol)Yy$\_V+iuuR;!o|o;I6) $'94_9 hcl;L[Z)Fmo*2"~gVi]WY3#$81B勍.ǔkU/nm8@[ -3mL R'ZS2UxY Fֲֿ%2cV\A P0aNxU %f+ a~ Ia^UK?܎OJ\NffpXG| ab>V S^;kgM!|޵ rv\7-CF 20;mQf5gkhW4dī+ 110M XڿTMё뉿"{X%!hUA V@ȲϦ- vIsML*Gx+2?3!;r(I4pӋ?o$ JܳYXn*{ VCی}S\L< (xE],}so'jliSDB RL㕭JL[?u/7ˠxMg hۘ+E4oPϫE>ВND4;t)ouۀ\tQ[E:c3# i& BC^02"/ǮGJQ"('=&}]L~ im&mSN: KѠU0։3bԑ" ΐ6=Xi|2H&b|BojA6#/E[M"<)iA b04e`}@䄀Νs]xQ5%H)8AU 1 휰Ex-R3ldڨa5]z=-U&R lU$F0%4 ~un)Oh"m5O"2abA'CiȚQeʗkeF+F{8}MaVJK0: *Ģ3^3bVBqOHgiCTzZ` .RQυ6kSx/ӝ~%z&b W0+sI% $= J5Np$:F{:JڦJسr)I;C/}x2/}z1W{c *?YB}(AT32(P a]]%V pӴ5A&Px冀;S0Cg_$ | Q+:mJUK;A9%JXo%e=ⳕ U7Da,*rL^5h?ߖ: CcoV5Y]庲1NbEv1r䜓[f߯~yE~3Mz/¸(z0c{E،#$A(흶֢Ȕ|`}!]x)@hۯIEO$݇B^ƺri7w[c~/Jy0y41ƈ,L!F;Sc^ %m(݆0'#7D YCSMhMS?P椱a"/ n[xZܢKg08 *iU'e==@i;&s)7V 85눍W_@1o*aҝsA&Wϴ{Csڲ˛{]>_x/ < Ȗ<!ƦE3?\0ZMMׁ=GOo}栳~<+G.ws4DvNBM2˴oS6>.@=wO^m0j6@܇A8m- km$\cvz?|`l7Z3MpWzϱͣM!pvK[vC;)CuhЁ+*࡛@H=S]7@wurU`LA4?d$*N)ښg3MڷS~}FpMpDth2CW7ef!IMDEct?t^@BJc0K.vio2&4٬StO`yJu^Q>vfޝڢ="w1S^I4`hC,CqݲX1nSs)TH`GM΁9mUI,Mi!<qa˾dؘ&Aq9_8)xvaL:#-#bو7g[J%C. #Q|Tw@qiKp7= 28 6sωq48Uϻ@{df7 y%9U/_Fqqo}g{m}5L0 EokBF{ZaTJOu~$#svX2l%fޥ~mcX@ClJc 㵔ߒfU={N,>|y>Pw3lb%kymK{a?C`(=g%DzDp2˗ &:wy@5 ӂ3R]r8-ܜ@)Aґj#kkNe`yiDY|M1c@حЊ1s rֆˇnܷ׻t'=: 8{2M>Qo-ږw8"ƣ OR4`Qkt}#̣p!iM)z_^{[Ѱ<%_=*;=+}綤哤Da-#O%#)peAOuU >M1to>A" ~yֱ_ yk+2A&®>3RGz+3GѮ ę%Y2sB #ɍzht1bK텘vH>iE{cN0"-'}[ db [d>tq)h["~*ecހhNF83s:Y?8, Z OH Fg>S [4lX?#G7g*c%3"u_.ay\E^ߓ $u!@ sւs6BR]m.ٻJ"VZd&X Kpה|][{yoJa*?_{}DKT;P9k6iyU,2S[y?ln,luAWM}+ɨk >UwP^lvcPn6XZKټ'I\XC;R~"[cI< Q(6v^ׯ J}>cY7xY|,X+[1wnβ#ɯA~iuM4R$\ &K~,F`ؼi{ӡ5lQa>T_lsP_dSCxi=CQJ2E65q6. "\}(<$+;hS ?O=eCꩃ9칟!$ÑSxVˌ<:ʯlWfQ:Vr#xsHj YFYr<6%gMtWbGKeEXc|JbTC$k"}s]AX,eZ7i봟x/WF.uM=^F8gD}m[n=!TPnJ _p+ lqߤ){쒺$ЬW)JtOrZBDx Vw1="~S6Gz}f6Q)lPM|¦ c5>į(Y'.}Pl_uq+^Xl\]/6 /@ߌfdž DSuZjvũ.vCƶфv |- @3[Y%S@jsl+J"v_)T'jɽ괎|, ov* V.Lľ 7͙$)f25G>elG_.WXE:v‹ZҖ\F$5Bn--v㴑[$BtK?*w9yB0K*cӲBw0ʢںRM[nq.4 o߅Em&ya,iJzijOpZľz$iyJP^rp_ cZD Y`b\ -5 *9 XQȟQsk3%rݣd\) M7| g9{X$4>>;B}O8@!1+?:|'I Օte\`VIh K[BsJY{;gZmXM@h(B6V()ݒvgt3@@;}!X dŪ3U2mdAvi LP'_:)ܖ "jYZs1'?y6:E樧)C-VٖɌ؁bUYG1<E`˃8@j1Vbх)ieTOyuvINPJQ"-By நŬFHK_*]ryi/OÔAn-B$x76$\#5~)^xu!^*'~h סBf>}'Зz8D[0ig -ҩ 6E⋾ H 9cIOF\߯Z Y7k"2-0jVjzݟb N9uq<6Q5vV`wG=Z+hmzTEU*`4˖9Ӆ1^jYV*u!_/ AMy^2@MvEVK83ϻҮR:>@C;EΙ7F%4"BƯ7& !00 ڦV1Ց/:境(L^]l׹eajgF7׌%VWSXpc%Pv0܎Mh,2w:{p!i;9E#x6 ы0czײ-E.X2v ȋ2iB'rTU:);;sҵ5K([MWRl`<S]҅V>'ȣYC^'`UG᳖+/ªs-ƒ&E#&#T-cAc%%n#''^gOF (v@Zyz>XV2"{Er!CMiTU~\db?ȿBNRڒ~Au_xfG{ 2lcV~NǶ*́'IK;mkS`$oi$/  ;m2lX(缵,ğ{HXBSnkys4%BKQ4-FNj\Ts'T$٭x]'&?Oz4r4TYdK[H٫fr/NYH-^nxQ߽m Dʪ+CG9B5n- Cr@ .Z'ZЖlg4ج~10&AXLVvV:AkT15'2!DB˱Aj0HY@ 6I1opίۍto.~^CX B؛͍ @UJ(9//$Yst 9W iC#lW/ڀ¦10;ֺA #czTq1LFOƊΑӟKIN7" >Ĝ )v2KTF- ͬgRʹGj͖ÛJP085#t#n 8:я6O]AoLZݩ$rը^>{ YW[w>81 p+Z7O3_ nI|@ɪE:)y:bS؂́[^$Ie l 1d.z1C'_7ZE≻DG8<2>g#Qbzs- KnOB2L惏yc* Ⱥȩg{oqe_G=N)7ZЮ1ڋ{Lˤu~1ϸ0XJOT,f"1$EzhZ"-*AbdTR4ϯ( Dd5$qRwȒ83(ڿ&/l6( ,Z<9J@&BѠ)3u(tf9 Ok F%PrEsrmF% +$͡y1+ f4[I,v|>mwؤ33kIjl4 |lE݉ҸAnMk\WTݠ-?q`2"HV U(=C3ݗ% }m>Vj7h|OlGm :! AHoy| @&v hB/iS0""dy[X3`cGO($2L}~;Ŀw#,ކ;jr'+Ό!=,I)"{d*(~yDF]sTR: 7M||hX6lu}ǃLJYU18ZR_ݯHdx}ǂt~9cxࢶ>DXӨdH$3]irl8:mG 5m(n8ʪO*OedF^2M@bŀcOwy?Xn߃\OU(mdIQY[ҟ Rߦ=!l8Kq2ȯTkO2]Ub.l<`O(Gw%Xb?CXpy}.LZ rP2Ʌ 4-Zq*1d˜yM|KwB=wj w>`,)c- aȘQD=~n[7dsz\V=#dop"`Isc!ߴ]l)\ 'RڮfkIm^ꋢ`S`㘙,҆  GFG1꾛cB1Hc3 Kʷ@uMĨXU]?;1Χ67o>ee^鶴}j>y;[<:hcL}A?vqeύPxȝfXM48ҿJl! ',);~PV.M%f3Q$`$l|xg rq\۟I*IOhB]1:UNeQve~p0F}NLeSj' _Nh媣ՉmI'_2o`4B:FNS|b- CRA0>7\(;5S-D̼2Z,kб $ܲیҊumА.9 j}qz KBxSqVE +i0&)ۑ), Y_:c/孤=u[O&lk=eOJhT{&ӷJ Gg`v _BYaN wfkvSDȷ[4yCDsrΪݰke)kH[6N漛;tߢlgmA9W/HېYmAq>lQ(1O['mAIa%ı)!N N rrH(^LέVBqSԀ eg]=9!c<Þk /Ƚ;O|XX6OFWm_a,eK 4R(4Wvx&}WnMbd-C ܓ  ᢒ d̝L 51r v Dh^RIDrbQ -̮~-n|I  A;gǍXaE @Γwi {(AWf谇PrYwJϽd>k.("enx†Rea.uTJkq`ȿcySFA^9 *$t&M×5uVpƗ>$>b%[ЯG)-hȧb(u~ FB7#{@T@ ̤B#QZ 0XF&S4:G6L:g芵7&,g,9ff#_Ěg}r)p,n8F.0"XĢ rؤ%Q"9v0O{K?63kkm?vР|' [2FDR\84]?x!+r[o)TCX~}[I^=I ? d 8lZ5WuhI?w:t ~,_Q%rʽzT') x*2ƎF fSv=.Qm6 I i^ `b`fbƋ)AE&ThE>0h7kdQ3" l; i˔ع.sNnkV=ҩ!'Kz׭X<ٕj<̇T C+]%Y&< >e*VgS!I BeGL+8)[|9wAQӈ#cub #7EsfJnM.lӺ:}g\Гt/VnOݵPݲZYN]t 8i(?CYԈEȭV~;6Y b M-4?#+r'69oT(E~Tp xu)#A.[qh\KQ dú1Vꛭ: }8Οlwڦ3?B>j$;Rqxg-Fћ:e֧oV.PujY54exK#HM!+1ްD *[Pd%]cPd&_[X awCtZΞ98s.8eL(.$J!PxJsC(m uglsq/7THӧEH;K#33@z\n"r7թ$Y/2Ux|lqX|x9X\.Yk&flxq֚P뱳MpF]1;l}!>T-v> pIVS:A}bI-M1Mkz-ͲHGv\)0,#t*רyL~q@&c53XEk#ysͥB!_۬X0MY$lJh {<Mؔ1΁_X26x~24|Eְ#fdנ7r]]nAj.Q0\m^ o ݉wD3ǣ)ǚ_i}!*_S8vFߏ70AUTխG ]&%o#i\d%uv9¶ ~]n 3ng+mtC Օ*b#UUZM=d GFT߾raQ?.4snjhՎ}{G|F/403YNr7ZUJ3%Amseh24)* tym!Oc?vsNT:,>i8E{۶OE(ّS &[,^(5rbT1{1[\aMip?vk[~"yNݯ[Lb3eoY~aM@RҦ!_"'/B _|qEt9P23,BK{'xջn gZ{FXjvC\6wJ [5Z{4`zT6e79t !j3W<B/<0 U |SG:}?G %6ĐS3-uib)FxPL`m uvܪN3X[P9BqB֝=~09[ƒ|QK9ts ˩✋A^oξN tzjQ$uSQH PQ%Nf~3&ĝnF 4.ca;m8d7$G 0E3X%$}Q0\ϒj,Qpe:W)v2Eq/ " c|-+NJ|P! )m5] Ed_IFz/Eͷ|Fhr NA(M soNC'?w+ +(0z2H&‰{'9quWX=J<Lg{Z@wg}e~9n,(gtmK9ˤ%xuf+ZNg4!vf&LN@B( 伈K`/45 Kw<$\bA ODHVZ~z=E<wX'zn4ѹU`NB?& "XfQL@i<^ 0j Hd ѥ[1s&b^} fvN[2-..$w\@c(oRtV友8g~Q9i},#@HJE֞b; lWh&QZDR j猊۞ǟۂbncC"g8^=̉f Km̢!9$&ۯ]\2PBt)>M:4% mVucDq7<{B'9,Bn>bhg}hH[cހMf9_in:8eڀOny ߅R (J_C8]Nt 87(O̧SHL=ht>S{r20ίKdH⍿ցR8r&sB 9H?)L4KBglRƈig>!nsdIP}xɘ,kB@B=.2Eg۟S](OW/Y#m=4#G!&lKlbr?4*ƛMX+ +r%xU$yjxb>Hr;Dڑ9/ay_c4e31w<jZW kTXOb̬xu%j麇QF%YlUw.Zg &gBPD^baEQˁmiU|zLʮe\G-J~:LZ'u4Ed֝=govzs=Qt |ǜS|=Hُi 3ƙq эmԍ?Thls@G1Ѽ;|MzPg,bدJ^`#Avm]b la*BLݏb##9ArS7Jޖh57vk_<%5g JiKs,Wk"SY7UıG>^!&Xl֟ F7 IFb0ZCaV'g6S|a ̊IiJ72IKk˶ؔqך4ܴiUk>_L&r%Sv&:am i'b1qFtH/\ʝ& [d_nQ8N.@7NW2ڕP>E,  X|YԉsYZkKIVipN&lRe=(3_tr&_i/tl`дЬLespu,sAݑwE z σp c_kf.K˧r&v*P4%Q!Cfl @y0Br}5خ5Yw>% lOe,ގ#m'%J=x.DJlC(&$:R +%گЦdqbdz P<,twzVuN3vC71-{7|EXl ⹶(*B$APOb(~gJǑs}mɦ8'u.1N]䬩snN xx7,iRzxSPKkkO6Z-:·a֤lF]hx\HYّP bt8=~+b-dŐϥ6);1pdkpYMkFr%%FO',"ao;w0ט[9;*SMg[Y«F| I+~kw @Z›|b/޹ [vlj=iMp`_[w4ұ +FXW<=8Cn&"4ص%ե? ,(o1r+ IXs`2nO3u!}rƋ1HfaoCw V<؆ڶr(Qx`P؂`++6 Mk2vY PA = MH.wZ!x8F77e[rg6^f0V}Xf#%p7anji3c>{% c_rCS}1R₦ r}s,D>c݋' Z 5/3\Tb]5,`D ,U^!}*4|>TtހA/ eԝ~)1eρye[Toh<ଖ<ǓNɩ8# ݂t tJJ.ܔ cQ$ߩ, KL.K TL(dƷS?ktx:֍VP`;ΤEr:o~Ƃ/.5-KK_w/~1C  ev 3 p; ,9HDŽCVC1z_NhQ[*PPxT_oFjcmDM8HMv}#R6b|xm]uKfH)(o_*zs;q1nErfd&H樳S"B]J*T?1rgI'2ݮux<'(a: F@#VKzN{@f7/x3Tݔ]srٞb&҄co̻j$gF-E&Jf'$ݱ^`^K8suÛ5' 15?"7H R'VfƻJZP.%0q [m3BOF\3gqA1^p#o~ٟC.-<~zFZ 7߼*[ŵU;: _3 ʗ\yиx?YF뀍 Z9pֲT.Ќj{𛫀Q$s׈]Dd27z?/8!㬷USw(GhNN9$!NeN@`;ݲSwc`HB\+Ѿ T\%yD> +ïҟPZ& (Pr [ Fn4D| y~<h8bdm-*֗bK$ƠBԳhV!>nu"_/gLbl& 13%!r j^XQ%GՈ]s%]:e 8e6Npg~$I }v= vP b/lO'yQtH-FƮcJ .f*e5+k(9/G]wP'LpsB$p'K rJy-yv:i"k,Y H=lYIh1=EWqGMa@N}r Oj),K#_̀;:.YB:urx $Yile_Eï"\sy*'ŎYAF驒R+a ,bWbH]V{Z%j4$6ەݏ(}s:G>m 4Q|27>CTpx6ө͉Wt] o=6?pAFitZ \#VF; (Fb}[SALHk hް~z3Ydq1奉%dU}X7Hݠ}>nϴ d1dhBl/V.Sd|cIuC|GZ̮a3tȥ`$|spttPqgz28قky,ۯ،sL|XCK E(&A[0#)Uhvsc{?t %ώFGe2s>h֌6RTSsrU/Tu$#3#2ԅV3|@jkYʌ?uGҸ.*3ˢ :n4g7߸w7e $}L[w٣mGQt԰ >;eաleM&x^V Ϧ˕7T.abR]1h'U26mBB,`aynܝ-y`pvELoƽJ6Ia²T):5DQtDwhpI$8ӿ6H`d*̽m1Ex#'U)A@DAׅU]b tb6P'ڻZM4v+8)n_em\݌`\q w ,W#SKw/v qj~:E|ťC=Έl%H;s(x$s $$ !f@ǃ$@΍ bГ(F [^!b78H'Z)t5c[ -DnR/5m*b)8\feΘsQRr|0IJCט;`3xB()г Ȇ6p$U$(p*@p k29x4ըsZ9LZ'i~ \vRډo εt'2}j"j+*,ӕN{&a"K ^}Dc@[FY}Hm7fuhob}$I7P(n5&.c$px04UL]#`b>ԓIq1FTN7TLDe e)5{G7b4;]UEfh>MlΟ*æ7d hdR-v˨nX.P{BD2FZ/4j>{YE Xܫ 5^{֒jV|Kc*~1ûuYQJ aź jtU"C8bFf5 NuVMɎ!wmx ѻ rt/G7^́+hFRc=c/&Nm>6M~{n çU-r Xq Y6c~"a01e\ǁw^ W AD@(B+o bn8`I©' kdr:w\l%} CϚVn[ +2Ui!{~LX)Y95N$茈)k]\;{! 2mb?;2M^ nxT]qEƳ6U* .o1uz!TZjP3Dcf0;qzF m[K zE=-J۔x7 0h+Ev-\EWڨ׋>3l}C,C3l!@uAY<ɋDe (c8=VrO;. 17``X=u{Q^W54E5ͷI-uev{)jtfY7"̛"N7MmC!-@bh(f3 ,5N0xLfT^: 'o A2f66x5ՊkZe'.eV8 F4+\E }Xa樻ଢ଼^k)[}`_ t&a!ĝB"y5֣1A_ڵε~,Ko0,K-gG$H[ˌ_@_4D@F\KkW![w@d!Gl)aT)!'IjpL=#}Ap`{J:瑭{%Lhw!|UX")kRb 6&%ʱi/u'ZhaǷGoQ υNjeMw P4K'=hbmyM_K`c]!hH #j8w NVҝrA A#!Nf.[$H:K3@"Rhl^PbZʭ ?EQX'~78][H]ms#I36Za͝%Pk<^0P͎{S-Вqf|WOr,O'.:(wxޝ.qoϹwԅ$V#Fpi+ ZQ$3q X䂊>WŲi:_g8-W$w*ޠ-+kR*·ƭ\k$QܦRsl}g#_ ;{<;'#w9?9~qBuLEms;)kK？52<"*Ԩ,O|~Dzݘ؀ ~G3G-+~*]oGf6յQK1 ^9M0)o9z:Pn`Í@0F7ELM9V-R ѣYV \R[2H@93M)ŕDof,u&Ujó 2 <(5 jsߎXvyjU]y g`ֺQ(ӱdɷ yfTҽ6ZR )k;@ T'!޾dtEc?S6%?pנ{Dž%k\8u#a]>d,_ɰG>L%@ <%=(X^Ʌ*GmYf0~)&YID `*>׌I2,G ,Ok4 P {HL $FϻxWȹMFRB,`y>ѷuNYr(} !6/_~@;Lq82%やߺT;~L9BF$\eFJM:w [c@Nd4)yD,[Zr4>gwPOGa+3! 'RpiαlP e0 ް8TPB7c)/ķAsHRԪ_~w~~S-T%HcuG94{n ̑Rh s[/# 3s+GѤj.2}Yj)p0;(\ !߲ooAUyCg+VV57ҖD*4ĬkgN}ω7`*Fo!زdi7p `rÿ Q<.f] s%#pshl!v+zoKO54|*EIvI1 ]L]~+>ǓOcs'M"§"#ph"z8 SB ,_#k0?_6kx'AL~xujwdsn ^E`@L$k>dfb'kIYU8QI,$g48_O70Q|P%vWg?p~M-@3-Ȱk>ܫ !^c>L "kB"更dgtcxpTl_⚨Pݓ3jL1S2)~fzuuKd}pn1"[7hD!ndKU. 1v VesԐX+DE\hJm2*cmaꆓꐁe!uw=SO~ŵss9:Y2>C|2>W^%6qy/4Wct/[ǭ.ǔ`Zy禎P).nGs_TMB.Ҹ'&2=:Zew8k"wQRL OG!2A_k#Z]׿rYQH֍#5Es 椄!tzO'bKh=+%gSx%fAI^e[v3Has{+&KƥQF)W{Y_}yZy:52d#44Pp2Î4!Y2?!a7VކM6PL݌:,;_l_%#\E?{fͩV5);^LvzӑG{@%:a|sswR 4䙫}BT-5tiA#|ke#mلx4/^{ƔM.vM.lrm"Wzn} ԔZcX[2!ơR&}IjFtLr 1(^sa>~@P%lOvHqכδpGA`ǙҨ$4`?h:cbpu3[~]TY.>p1E_i{bx`b_c,_3xpNWlM%ȃ1xq.]8Ä|P`Vj^&w-|M$qf7cť(c ['+P鍲nEvPru Z2C:t 48`n톩wHl4ͰȨlOtz[l=IEߒ\֎7f!ly6B=Z=_S:)n˒:l^x|TS;()!IB}f:,ZB׿,MT2!(: GtUXJҐz*MWŖfyǽVoUD* +]~A qq`vK=X(rTn,6t[QȼP/RU mӥ#nsTERYX |k=?s`B扏D& ‘@R{VؕNR"͕.vO+}]i}mO-v>B< L'YH?0/hf=ܣ Ɨh=I+)X{Fz0m dՖD;%'Z6u]:,ne%av(9q)ad(e쵫2CcZ=nXu3Iބ|;MOSAY1}dZ$H>z ixQj$yKI؃'"oYEw"$oT&,͈+Zr`U7˻ /Ak ۏ/F.\r' h,o<.1چ_^@v!B O26`/Dj%ype# iٜ:ŗH ٞF\)ubtSSƁheO,7K-& Ue(?H-o8MI<; ބ*uOwEfJq T;ӌ?HT"-ʻK)No6 o32.- +rEʬH(Y\1-Hkp:d<ÜU'pL7"Rڷ+EaXB~ =XB|1 L1z6aixL\2PD=0YR{> *“r\ En7~s`!]zxadzf냃ȘnsRh!.͎.Q7acl7Z/s*ɶ Gk -I >z aR_jXI!3N|.ay#]oDyŚ͕5^\aEo<.pqԹl gX:Ƅ'8N$tԌ%:8#:'_+K זЭΎŌ͋vK#AU@Ln`>Ź_뽾t5`kOscZne/Dήcx=ZG< ~N 6QuQ`>?GKu8Ͽv1s@@!<"m1)\q\bQN9]?S%k<.<3Qw|xŶ8aׂ| &j:d.xW`PP`MRdP9M_sr*ۤ= 6Ďe[Ì@ Y%|(|U'0Ylkq P5Vnz>?ep}h7 -}(fPE5 >BM:. ;0ƑھA:[7u ۔T{U5U8jer'(Y~zoUQí@Vx Ԏ5q hyZC(Hp[עYǍp|3"zBu|)c"<4ΉIGW8*?)4w*370?VBDS6wxv&in`QTIcR]blXĝʓGMBf}kKlԐF4VU}_1$)"Q\4n0rbL3`:&P>ML%L?~gǮ˝UPP4xprbQk T% UL!{:_PyCL[%D}H).+ ,jS-_:c/\%j^ջ.J"-,VZ u] DM$.C]U0R=8 ?BD"g]?@`$aE'خ' t}ʇݚ@Rxeek" Em\rg|M/&֏k\yRܞ*0v%!S>A.BY* !^j!!ƴ f[lN?>Afv[NT±o|T?0M*ɢκȮOjvS8p({{YTS%6g~2;n L|9tZ{p{kSL|=^=r@ֵqӼvIUG@i>MT󍮇"]}20t\+Ju~_F5|j][I3ڗ[4POڌ):+zȃ1ϩ}":J J%qD~X3rC%zXSºM# ?9e/JǼn1!&DIߌi;伧}]jg=;a$lu[4%ۿD13؟OR8U }_F:`dWɴ>+q uanˊ7ռnvnb p\ zIO؄c~ $0`W]_Y C`:$8g9(Eh<9ō0U|4(s6*c9q+7, Mӏ'TC}ldlK-+ ^߾$dkF i$ ٳ3m -¶ަqOj `"9a{6#81l,isu]EhpH4>),\3)2m$a(a`LTJ᮵MVZ|@!#\ܹJw]xZzb)(%ȑB85x!x@ƾ(Yy5"ިkkhU;;'0t[W0DYjh%Y{޻}h+).@H,a1g"0#+yf?5N*l_q}H=ay~/T+#þ ‘zS3o E^{7-vnn'6rƹ;~!Y BTW8~#cCS4ZSH^˺ CعDd-w͍&kv~(0V\ڊՠA(" +ɻ5vxCV~_kjd- Jl|4-ǐj87tJ%\IЃ|8H$ecs6&RR>=nϢ}ɦa<2w8WGHym"dAzF jƧA*_\Gk[7MFCT:f'?wg') ́II-O80Ia/!$Z$e;Bl,.߂x= tÊb#$\IBjuMg[j-X/n_, |l|:$fɍ՛i6FuRτgj]{^;^P)PSHbiRG?X\Zz}v{2I8&Wz#ӧV}D3TYϻMk-&q^~VC3ҵq⛷DVhî o~)̚Uf*U[=(=PM4<` @h&vatpŒQZף󨓝fӔHwgj|Z{Tbjq3BV@ h1rG0]ں*Ĩ Du 4yP{I^O39$ˋ7WBwUgT]-7EHI) }U2JO:'oH*rNBX_0<4X0H2mmS8$,B گAϬp~JmCaXtuѯE<$ ;1 )!嚁߉ݤ#Eaܘ Gmk>I0@ttB)ST|H7^dӄ?)H8HzҐ (=1HŐ 7%rHsڥa_a> ey")#O.Ш]=qgH"ƕC20 sHPʴ~\Ay~L-(bxǖ~4)̨H+"fRvYp\51W ˹i-#xUGO 2CX(<`#.☶v8k>9z/򦿴:BU~s}Snw(3kUni]:'b Iea尚X_yy3[ĻKEq xF+ڍܯ5C$UBE-x{+B@)BcO,CώDݲqmJEJuw>j2kP"$, ˆ8Εj4y1e> l)n (GoJPNaPj7OmЉ(K슼pPT קE_0sam#]HAe b̥^^Xa˜<*"Ö 3ScZc;[0&(ⲟ II1^3KUw-q$BpM5āzge] 2ˈtƵ?r*4Ԓ[]ݸ*Q^(]$Zł1ж)!9FpwZgȼQKxovNq`G4X!0q ɳЃ0efܠW٘CҙA2,8py;*gb}2>Nt9'Hj~RBG׷}nGx}Y)9,TPFd]G2yq9`w[H>6%j8Ia ֧'"*@Kic ڶ)g°8ؠ6/Oꔆ}R9Z'ԱvE KTH0Tg!jQsÍjѴZ|Un??6fC6w#EM1 Ro:vT,"8I~{<Ʈ^o\ s?G:3o7X%ڌKi{q)" L C~fCZN.#- PfiHej31&^@,S} kcjgMѧ]_[<= "ɻ/rN;A<捼ap?!v B/d !Y\X `~|K<ۥ`r!'UUE,'5/qg1+/}|R_/e1ޅS翖'rIWkyCf݊ ݈CkW>L$,C ƕ*LX@XaѠ) [cD 0>J`3ve"Λ=R!$۪o(-uĵNTّT[G,xw!rچ)mڧG}#y2:AnޑYؿZ1:yNm<deչEns"ps3\VgΉ~L3{F#|'+>1ǝ'Tcu-dKZ b fxY+`; ƣU5]Q?bƁh,%I|BjT\Aܼe8ӽ0 SrAoT5Ƥ}\mKM50pK%';Ʈ-h%?gk?rS;=nc!< j O}-S(=ǸfxU".JZo%o] f6&la$H7XXH|n$2 d:}Pc!0h]zviݐj(@CT!p\5z؛ iВkR4;gB0=Q2;i}t m3j6zD`Lc'L~TfhU+#fH[ V\l&4 +STM:aK$V$8{W?6̽…(Ϭ;[ ˭-l"|1Z~B>OtSB0ǔjM{T @qݍɛ}ށ)"dBmRdqDY7=l}1r ]W87 5k\p,W =(in zFyX`SScE2dXmD*!2{?`c?ZEx[9\3YE^j# k$!=#*pzͣץ>R5jBqRNFT z_M۬^6{‡oAX"6: ;L) BB@:.rjA:% {8*:M&mA9pEvto232h] šPߴobD{A dϳG*wHx*=] ͤ=ǣވ#V4&h{z:&W "$YLP?$"rdmkcc, 쓸Xf`'y#$-Y~S 2pQ o'ȞIk*as>5 0Sp?LnPKUYrG\pfK:hOT6ކKp61M3ؕǮ^OpYD%toϔJy7ʋ5MwfHO]<[oBЁia;1yuDyNMx7zuNe͈|!_~4FwDky*7>K!K lŞ=3%)ύRHddӞG ʋ'uItjQ$Se3!} He(pNv>YY+],)њA fwIcF9RiٗCf(gVkT2f٘N !$8]ViB򖑁-a~0_.OMD^{pԣ$B,PmCjog*ȷA@Gu+aƎD\9U7g/wMlF}%V{?؛qԺGʷ%r<Ⱦ36`-^Q_ g g#[ sGsn0FЛpC{F=:]&,gOt!gr羣KuԬmjQvӶ96]v|c>[HO !ģW7>2᧍]B9"6ukfX#X7v_~J"eeUMP F>\DMhj|JZlc|2ed[:P7]Odt[d!š/ NjkFsUN?-4[aY/֚݌?4< = zgzU*z.D"\b~Ao-ZZ\Y\^D= A |]훭Zl̕#S0 &`/5IYǓ<4w˦u򊟻,M Q9U^^'Q `c8^#(d _{grf #LT~y߳. pFLnp=#W'EDx'h<;2l' {%[ls@D# gi't7v'f^@[/t1xis55߷`LASj~E7zaV4| h~34A\ӯJmvpfϷD~VJZE% kQ[h D\dtQsɹ!BcfD^LjuL*e}ytƋNDODO8NzaL-j1JQbeZY 󗩲X6yeS>`C5؃@Ϫ[hH|Y@C@f7xMmoʳ:IR . hih i.Y 6-]]deKD l1,m6RVp4njEnELxy~b]B6hsR&'{]b5: (mǮmpٿk2,|g>9ML[ Fd1} IX[M-"t Wg̯z,DA׬yU&pP|P?U+ ['۹ToQQWWmK:ob1jZ0P<.Ciڋ3g2ɳz SDOCEk2w DvkeBRDݠܑxǻHyi@E)f׃??rGAIbyrK[̡HG)b`v' 6Wę,?cKۑ^$ ͢ÄUtרA[YU[m6Ƣ^HЭ 3Tˊ0sVMt&꼎/#!x@wkZ{ ʼn.&vq =fEbb؊>vhҺj$0XWU= dQ#{ʑ][=*EyiL9U6 cy'n{_N]ha4,$R@BqcH[<}D˷X-Vbۈ-vsEPBkMչS@R7{k"ALs5LSRz8]@[e *"T.Ar7N*z,d42C "P޵QE'ox ܹ~7 2^\4-7x\6X[@oh@/glQ c $m;NyviչZw;xe׾ÄOGgb3D?j0U;ve_yE$f9%]S"r^P} 'bRrvܷF&]eȢp P=Q T|U}fm>pf9 į8qdl K%7Ѳ6Q d†-˔/CPJo{6^ ɦUVFj_&R.CNΝFaܠ]LUPвMES6V tSM\zfі˶Ly͜\6R 8eʯKнfڳ/[c\Z3$f#xއMT~,;sqShCDŧxaJPZ'Vss&χFF>&Xpz|3Ȩ}+LAS49L%uv@&*ΧM_6S'o$b"`>E;IӶ<dH+@c9팰ȝ<3#9(wQ,h+b\WJ? *=u?~&hMM9C7 XN W]X5MXsxODg׳@ Cw#ݰ 7On~/W<_:oۊ LO%qzxz e lkd:XcWe/UWQo~xWjK=?Хg#b)菹<6Oןӛ 5'5op/6*,.߈\Zѝ[fy ٔJRZi]-.JT gF/$Ha }FݠDzrO=>=('n=D?:C-Q93Ȕ $>5TQ8A&TzvU V`uC+PÏ[;ԞeDz,S{d~$Jp4)D}0ȩp\n۫cHۥHOTm,;ֆk%1YNOq"Fm6 =`l,bH]͌22av垆ԕjc\F2 W`9 iM*w9}3Q\٥)#jmj3ZrS{F窅H()iM67ףl v4g-HFUÏ3Ufс!UnVFjaP\"[֐di4C&>Js+!7%8d c9~c;p;Iž"0YpRlfkN2,(rQt?gP clن"26&2p~&J|Ebx*i>DOeΜS [O{Kbx/{'sE(⽛nV3u|Fj4L (XԠ?g }gЎv?Bg@% տCj9EQ1~&n!W*lR{Ѡ9s{qQS*.mNMw,qx Oha?'#Y.+ f"jUhB,heAmO46 }}*^*:! Cb %?`^ױLV# l 3BD _C;2@=͔ C9P}T#&!trBh<‹ZVD8$WLqo:Iѿٻښ8$By<1pt|K.trr<ÍRW6%Ca)K|,|hz&_jl2_wa2v^͏~}A)eV"'Oa M\0ZwKe+Z! zjN|^tV&J-1.. 7xf 8"ED92R pԙxOH;=%R>?S oGD&D)FHIߛܟ!wi =kұχ˫2kt%~? mjt>Hiki}tϭ7焵:?zzr#i{޺MrQD'&jz( D_hQ6W Áee~L'at2j'-x+ZAh0 hΎϓ4LP,z7V`v|m|b8^tϒsLtAb'1TsG]ݨ(x&gLZi+aS̲.zEӀulZvLgnRAՠW6&J^^Ŷ C;*[RI z0I($7ILw`mI2r#y%,fI]Y(E7myYe˴ۘr+qzS"лa'3t# ʋʴњ]%ncpV4 [ 6 Q=P%jVͿ 𨺡=^N|eʼn}DBXLriAWCK>Eqq hs5{!s *[/X;f G]0iD-LM3Ofc4sV(?1ȹe䢦 \6q,ɞɐ?,ةS喝X ?}!籣_HF'G4iLPWhmA7@ށYgsTx.%ݻNcUoH>4MDiRH[ȼ{ ֲ3ӗ#@D4<z@ @OZh?Őx֢HT8Q+kZ|ƭc i<=-mEW:"gQ}W[3 Vo|p @0+:/SR=H3^3ɭ.d!k+OA`|7lG*|́Eo=]E?VQ*Ve3*٭R^DGx2"y#1(=Uy5az]1G P$wCgX~ jҾ ܋/eɒ} `NQHd4?{T 9 Dni澳*F!`iyY!k[6w%Y"l~qEec[TO7+fw̜8 Nlc䋞JdKLdtwiˣ=n"rFĊr][*ԛ 'g_#G9<6U/(m9⒵o]0&@pM˚ x 'bȭ<_BсHdCy HO]SK9 i@_`@X )^= dn;P _a52uFjSsk/xoA5Nhx{@-Go7n0 GgWNImS(PĊ /Hх6? c'hjP~,7:1d "ٜQj'rRr/SDSdPI#H!oo=WM-EOwPC&^J㚏eq\QG N߾x6z=Wl,ҶwK\} 0Ң˄{ R')u7 5VX&Q/xmH'NGj,;>\X,3H;DUďBM}kp|nꗭQs-ڏQA:c Ue+Xu#}5Y-5|h;&6D]Y`-Ё86b#NKmDUnB.{}Q5Z>e[/0"H<,)L2*N``.*CM ZolU74ްigfټգDߟ9󎦕 ɷh\kR &"jP.i7Um*%"*XUoD":=M%#f!( 8#, f"}YV5 [s;'eW@.Q Ë,%d|j)xe{9)eｫY 㿺a O33:ey?k9GO !߅yby <9Ię=[XXuFOW9?32P}k |\)~Y5шu߱/N]wJ|OmCwtTo>XcД^Ԁ \Z1{㡛RFk05P Sr^^W^M gZoCx{7Nw^]ۄ&0]t3$Lշ, uKWs=HB}Tk"H!?iQIc(%[քϛxT)6oAGj 'LVbnrDG,)~LKD~kzU;^s\OIODlobi~_yifND8r!w\J!Z%q7d= 㛝XEQ?S6Χ\dO9jx/h:0bC e1Q(*lkN8Rɬ[S"ALƅXoBPC'Rm2KJ9(*\eDE/c cPETO_>:NQZ`)/6o+o Clfm& 9B&ؚ-E!K]*$]+`؈?WBA;GZpc|s[Z5DITG'|8~mϊ՗8"SH1[.>z ڕ0bJ%:QwnQ5jF{+sU_<4: t+s}>J)Z^=}BHg j?o![0#$7 $LݒU$mAޫ]0<;zb4K#k3rU%^1, =L(Ԅt}ol-4p( 60rDƇaJikaQ5$R3ZNrl?.D?GI=nW !-MO':u`ߞ?9:1s|,H= x5]A6P.pyu>Q&84O=ߓ0hCoVʦ}wuIؑbep/%9%GS$_m2/?fz,n1MO읒*ggInwN*S;: wY;7 *Tt5$GzЙ)_,7r0K >v}Lv,6E~h/ln52W)>Wv9޳`~!bA]\B;%]N%+XzK x]SЯԂM0 GmLAc[OT"MN4J]7MV#Ģ KgbesՄCuxmtogStZ"V|H*m KG/r\;uݮ Ñ3+:9c \mK}O:vt Z9O//ֳz~ ͼŠEǭO We w\t`T|%׶|_}ٹ>x-%aw U*_=.oUZmX[Ao)VR~3yʦ6!Of_QE &Q=Ԏ\|agZB%8i7Z0!h&ǥAh6il-VQՌu$SzQBdY[3" (  %cV4щU<AŒk-KxgRsD3(VR8:Xb%LJ{D1…fTZаad?gV%EƧ-6C:M.Y(FM/e_%55kc_M.Jz7E̙LPGBF‘9D/K‡_M}>8`<΄#ƕ\\RY~>eE)ls:0JiZuJ)j?F,Dq ~DȌC?.Gη@ÝZpFxÃ{cs"%[vyq۱o 7`HovX hL:zҸn!rxR;,rgIr-|v+.=+ɽGR&;҂S@E f()d|QSO{ _ 9;ֶ]E+ڜ'9 ϺVd1=?Rd=H-l lfSXÓ]3b5"V@)%氀US>ZJoT\CڅLzn^U-#Fs=tմ5f2ZJbF> RJȸ߇gX'Zq nO ZiR3S_#Ų \([{0۵s d~ #]\_%Yr8~ i8'nVF7Xf5A F{=O" I7]dgGA]ܠab>/ظz7[b5_~(z+,iU&yRP|KQPpȑqt%rGpnA=c!㓰P~kr-ȸAfNœ (65¾ؚpNDrؾcnKFt`C-,jz.J}uK=Md@buڻ:?qv:dk_CK,&3zX-ٝwwa݀k)D襧ua#,5>K#c(& ^҇ m};wu4zoq̋xdp@rüw^/,ف@oouW>1 E_e88c܊09LwͰ@smU^gGݢE3CkO]J_AFfJg;`::u3PL8KM)ek$C 呐\!q+^2VM *'`/acKkϑC=`ofai4zJPi' +]4 x_1LO݉mɡuh=ʗ|`7־W* >0M|Y6.h(G?LI}ŦIno(x= u s Mïhvc32rwLT6\L͔8kK^ήTT}?:"F\[}4g&۬\X{6S:@xi}Qfn ] X)"f0cBbEj&Q>2 W،ƀ0dcMB\ غnL=yfw':ZUSipMO#\]B_}s_4Op)2G@>:"u?1N2-'Uoɤ,ՄN u|:퉨<dSSS`j~V 9osJf/SYH[Џc!9p QҪ`1Nߪ߮ώ_yeGCc-\M@]6DZrgx=9T[Mdu^ΆN /u'=sr/"6f$44XC׀|$\ѡ[cPo7q퐨T n<$`{TpsBtO2A>YwSLMhUJ/pWV eamٮM3!{wR4 )#&( Y~[}{rHѸ4 .Rа >=DDԽԀ&]֖9)AjߎXgo-ht;W}|YcC]:7-/ lXVOlb4byibmr^f85.CN* !ἠl J|Iw|LI~”˧%2iZ'!Tb`ۙÓj2'tJwin--EnO`Y˟z^vy@A? ")R i"ڽcS|O/kG<>XOk3W5IC"UWL̈́} ޓ/-ŽI5Bi wE^ U /g}xgK,}4d< MX,6E:dP`jIOkb 뺲|ˠT"T[RqG6K?$a.g|G3gqO)|M3mӋ^t-Zʪ <%3xaΥ;״ 6=QuĂV&'-_8=$f })`4eK9tyy^ +NXQ=AeX.uJ*̄l g2t>Si,Yc;!% M.Xl(CwMctxQ9:o7}e7+λKIƘf#OJ:{0&=lՐKk??F"8FWi TusPt3/gj:S2(@\o;:[%`1|~Xݤ)lvɄʝ=/t'N_Sjr) 61BR<|ւ7k^]bhV6)N| }cǾjr(PB*.GF< ɓߴztc w5V콼Aa0A/@U\U('{.ٟLt>q,v!-)VAmP?>ϜV^Y\? (HIQm xaն$eΙ:ժ',$֍PAs9n 9㡗딽p')H>QA]a4{GPb("qXf#EE"4:>@ZG`eӉTD6¨=->dɡ,qN97Hѭ5W z= +w_Cҁjtӆ!4&ۥ ([Vtd)NxPq MaK-a):oZ2Q~gTu8+#f @vekv9)|;D3ⱞ Ǘo%.Z)VkR:8 ekXrޝ| 2߉JGgQvVhV@z5b گx7dFOnk Б`5zx\/z/]D -HJqC9ZʀgsS !GK֓Ju{}b?HChSJ5$qUkDֱ ;ZKnxhAX;5F[r46 hӷZ<9Bq${\cjv19s5ggV$rnJS|Sr+XF~'w\DN/G 3B:DԼ|PEEM4rQB(FLcCwyiHT>IH-`bP8OT-_R5ތ_b(QʝlPdVPDjF5#/٫魭Yo4J<$K%aHՕs>%3Ǩ4)8o]\n+B i 2 ѵ-SO 7*ӞN GZw^/4ύON ; FԓpYI^W u4{[d m]ɌCt'Df!.T~R!4q<,GqGSG;Awe8ƠU,E5jRױ57 uG_G_ Sٲi14[0Nt*tT~&?,>l(F"z~^a:'z{.K Ά`~-E^gB5sCn(u=H|dMg|0KYA`Z%uݽŰȼ :Хj2:MSl  QwkP+C+/!/ |UAKhHC-)QL_`Lx<lJLDi)Xa<*i#[=I(hQT\YsZ!V$,v; , UL]6wr ـVH9aÆD)( .A M3w)l /bLoxأޝZ^av#aILS# I0aSf'U 3yrˢ,&)ZU>Dh\w_M-e񗳬dۚl2^)%Fr0/S#OLm1:t%"OSb_Mg:C|?Ӌ1]軓`'"-Hf4pGY/ Q5A6D K= I} MAG`n1#/㻴Q:E}8! g6EV]9"6(܀v?vsE^},RXw-fckRUqK|bt qbqU^-FD;2vXR ,lRM1dMhK-vv㹁/mjSȴݖhҸׯ3,Ƴ);!R~mT/)ڲ+V`ƺ1k/P+mHhq3䋕8R|j/1ԁ^giЁ;GXgMmׁEҧ:K3]IỲkW&Afm#}GW ;T :']VuÊ2e _ee]ZR=Lr0ՃA?\R|2 ڊuw4(l7U8G:6Nܖʢչyő#}15i Hݖ J~q_ GAt"+ӝ K,DBYږjb{A^;xTWf<9e">Xba2EcU=BjEʙ\W.1ωlT |MNü78eE^%R\ ppdE &gjuąd9#Ucp=K33<Xb,ϑB,# 9aXei_䳐-L6Fo2-msQAi!V5Dg !ߑ+YWۜlpM3&ynQGvI*'qz9n@ޔTmL%`DKwdȭcw^ `*@_ﳡ4F3 c N0;YVl9W?HyU/|Rj2F+Aiho *[LcRڿ_ V^%I`sC1P =S'RAP?grءsE* ~W>pɵe,KDZFcMɅHpM}WbY'f+h 7˹8Rv1,(в~OP^ܵ0a#Gs]7Gލ`NlZPv*L?&maTFYȌ lO'7ΫhS#*}#=E؄u'uSP3cT<ܨڰN젿')S'3/7V{ NQ&7ćX_2|%4;<šdeC_,o5j8]ݜIɮc^*+= QxKֱ$ 1Ǧ۰|{|^WQ=t-_"혶1w I8LX?&zL&8Cao6#.@% ]L\?K6:~dVY4D5`~",uaѓWڄ]UGn4XOmWO鶄<[s%@u?$tF~.`\K;zӍOq&<14 Xtϲ~Ȋ!I2EayGH4~wcXV׀ϲ&O\nW:-%DJ;47gdDV[$T"//Bz Mr0BS/z8PlVRFO_̟B]S\@/S A O!' dZRqZg!Aw)Q8*zMk5!& wп@nSPQAe (Rm:3;O墎Z8A1``<)I/ɗ&/p"S=D*[2G 2YM LT쟕([k}!i2v>n`mky8kd]&ra| FgHVW^Q..Z[_C,l@C(2(3:vཡ7cnL~nz}WhU~K6-1{>]Xke 5§h,Ȇ0el( w{#嗴ezgC`BK3s(mޱ3KKoG;nwA"3Ѫ^Y}nZbοiiv`%S|AG+NBt%pSȔ-.[}hRz¢C3hh5o$-WȴDV̡[V7C%߽}557H4cºvhZlkEa'A+[H&^\jE2g.3rc'n݇5݇-l˭iY&1:?*,3Yyd$g7^s1łΣb/OuoڞILZoeKK2^j'F},(Fԅ]G%M,̞Q_c~ - J>5Ckv*Nl{䡜Xxlb8^u5ipCXr?܅7RO_D%o񙩜3n@h{/2g=dF}W?1~X[gL?AkKߵJ6bP.VyZĪy=@]2A]qj L57:Dj%Vͮ(׮R_L}/E yh_kN : p]btxO}i̴"ƨhgr 8QܕI֖ܙ,2~iYp#yYhqu6=#j'Q8FI{!䁭_66'ߤ )%h;ާ- LF{h){;#bݔ&Lw~b@$W@>+e%Hp*{Η2Q+wHϽSq֌Iqnk)@gtĈcb3W5 jSQE'UI3y9#D"6- 5{#e`c|S :%xh'* xh}<@5{ՐȐ7Ns,!58/|Rb eRKs#/۫ѧ iD%$]km9S/Ȼ";0 [&>;%b;O:k4 Nhf&Hj`)Y*D$¼'Joa]V"0v+VЍU`Fb6}2p ,Jp8[Tx`t%wF,;$ glcۧW\X}T6P~r5IE.e*-1ZNNÎ+aLx19.QȖCٟZ}.?_iʽ0}Qw1o' v-`,XDN,s0(wEac/)=GǸ0k4)bw ;aޛiXDr 5Mk")Vhu\S" [&`Z$J\3R0踲YrR.WPĪN|ĴE]HUf;f@?GӽX_KY ~s'4GΑtT)Fu%e\&fHenˑaVF>X}pFk޸ Nu HAS?/@-)ctmw%\I)СB1oM/20IQ39pVcF_-}pllh +Ibf+q&KT{knt #ʑsɧͩ!okVJ߉T_9d /Ƙo *I,*08+sɢEx!ʙkg!ˑ:n1IB!\}ޓYx P,s3\43NPu~p@+C4~1t.LbEb.Yu )['pbjѪ9|'chz.BǞXe-ٮW -yMn2bޞI'?.rFcCLISjS@^f㊠}%%zZϞ'{t\a4@5 *ꐠjM>b!W}3DŽ(ңq5boS2d?7ZKW̞IE:̌H"50Ё#Ww<#Y J2ES@h!@a\M׿b!IǡvqHeKl`6R9ƜጁD* %fnFZTӻH""h-% ZK^"r('2;0JO vwc0J#$-UKq]-Q!'hÙz"ic9Eb}f)3~ 8))\QFLF&ta+ٍon*Jst oGOi 0~-iO||Na {DR2:FL= u; G}?+$f^OTf~[m+q~ŀxXy| Qh&5+<.drd^ZS)KnpK_`$UU/?^ŘAg `+;W@w-]}#s0ovށa)վh>܉E>ljiiG_":?XSzf1݇!wajgo=|أ!Y|8'B1}c';I`NL(n0"l>T:;}e}cm 'Ԙ\(Y;1#^ +&óΓZ5Do.YC 6Cڗ_>qvYqϪu\>UsdC3, I .$~"_~ 3|fZ)/_Nk,OQ;q$ HkQ@~PG.1N'zVFfN>ʲ~O`)KGe ЂZ k7OE)L*ՖvKpGz o?v콍b;*%M'(,}؛~OtS(M,f:xGI AK(x"boȭOг0 5uZӔY0W8+Pi#vɿ:\q*`H 9~+ |?:==#֦VJz {}&) ,a;1Q<>Sl*aRu$3wYYG. ]>∣dž^[g,KA!RLH'Ѩ7.c^v<&HϞRad/~&xUĄLz Hя B Lnq2L_l(LsŝP pDj߼qM~$^-mſ G[w! ΔPF;'vOg>' _KM:ָ{P3r> YQљq#S.yp]+=I+C(w\(0@gT&OVbK^g'Vg}@MB7]\*=/&G3Ϛy5^"c:zo3XtމfLjC\}.|hH}'M% \r#otH{S͚L=0pC=wꪩoBSi|i@YX_LU4{\V9ޗM'-^z #b[ P TS( ~%5]pF6a>mn(7v)(hԣf% ~N6+DQ)*=6rB x@=Zg}; uu4;Q$[OWD"2NUA,kÕG+~x{bdHّQ@j/엣V,SEAE ^dK6_b!#bE(?IpJ`G|҆ A2-t]V>W|qE]1A0`SS]FZT?E& RC'Sh౧ZIWc4d Lc %r( |~R[LTS#p{]C?0MzbL`3Bɸ_A')Dv]:odL6_;$RH[\72pD߉P%j{B Uæe:?IA'/pwEW\x:7-KVO t- x%x .@'7r.NHҘ|9|&|]e4-$Œξ~{̋&Ogk!$V~(SDj,f}JMi|BSEҀs{+A]cFY {sj{Kc_M竻O9htEt_՛hSźZmL+.0Ԩ$H \,m}NKlby!sIT)kU[T&)߂Cmz~Fy3D$m I\ _ۍE[ L|q{vPXeLnh2>ϱ/ T*:%_N^ׇ֑o "c~H6"x(1@ HZ^/@s2e˖d=vɟ <߮o+7=_nɫ䨶Eo_!ls`ϘZ4r YwLm>0=3d?E@*{pqg]W M< ?mi|wQJܹ N0 b׼k<%T"c6zQHJzY] 3O>h6|z[`xE^ $uB;KX8?T-t> w bfKHR?ֻ$qn<ڵB7}XifS>W7EǵF~Yx.v!D]8%ˑƏSFM־RH?Ž/~wPivƺ}W<ZozQC䅒bwytY%:SQ6?gEB1Pۓ1eՔdBspVYJR[4%[vNHh Iי 'wM2R,X͟.{MݗN$#y'Z;?2ggWDB2obn'HdVvvG^uZՓjwVS i3ƹMxi 7]~D^"|dbzKkh60ހ 0.ʥs}?͘)Է@@a{w,\dBHyZWW\ewwقI85)S3b.Bl[K=*U)+nEݰϣ!7LQ)}&n >tP|$3,ܥ0قԎ(.Nih; Y?d{} >`CU.jI_-Fڕ,Oɍ@<⺛6WK|4fu [ šv8o>-S r͔T,a?NoOrotSI܀pw9(P(fϑDZ<*L|s>jP(qnoqGB[#!o36r xVzpEEGUf=Oo#GM$WT8CeHZh=b{fW"'J]{{Xk= 3rYVe5s@BѠSVuD3^k=WhAdD6=Ex]&tAXu%i\ЋZRS](A(m4 9k Z ZsF?(na-5o `b{ 8cY1EgYC7=TknshMqWZ? T\TttgkBOoUJNj?P=xrxo0P]:)":yFT (m!G0uH?-_0ޅhAv/,QIWXm|42'Z%,DN-kN1!7TӣKYh*6NnVOLEgelꠄw<&]Ξz{D8 R%_X+<{2j:[}*ږOTR& ỤHfJ`p'H;{"> ,U9O)?6ˮr@ki}{ڃZ09ز8^PU c+\rS]GX%NEDuEI~ *˺!< ݙ%=>7L!PQ $N8yG8\)A0Wx~Af-7_³KjHr~C!e+# ,xEv';r0!-,Gz {:XdN5$;A$٭w'(-ӹ *(|!|ܒX$%. #N !Rp2Ϩ zL{HiX C@qnCHF|VCOotW>6Y+= l}k+,nyWf 1eAh11=䴘%̥a.'0:%g:FeW{SK,[Fd|l kE  CR9P4j_Ke ~,CjwkxR u.*HW%wCR@soҌ8R |6`޶ ټҬ3|U,ew}נ2wYC] GClasf ![pZ J{1k K?D=MӅ۪,w{s=Z-s6ox``䭥ZKk @~dyQoq-8zB DXOg?F3,/U,p@UMnъ#IXw 'ؔG'Q/Xo>v>`U"@`:eeZp{bMLk>oI z GRF@LA DwYg.b/i/U|6nP;ՠ{#/ȣo D~GpQͧq-+YfIA^ JVύGӀ)='PfiNN#3b@䄅h8V,jqKʎ{̒V{ 0qyPrCCIJ |aT0%Ipj4y"L5k't~mCAsݳvaچD,SKu,,s`+\X0 @{]HӠa/5NML^}m~\WFl6E4gvT"&\#<<{ᴅkE ]!C2>fEBCexP4ILOF|‘A+)XВmOm9u=t"jo!s֙:pاY4xg6S~rfp@HE ß/7U~D_10{iLۂ3#n8Diq?z+}"<_xͻST$$ Zs~ź֧7YȚ/S ]-sabz^ڸBP1l{U7-I{0gI~7~AYs{`16J܀S젗GUAjIPC0P9ؓ]+PՕV8󂏚Hlb^XO5$t^4|W%RkHϾ^hEo@Ė#Is/Гp3غOW1dNIO &aa)Kz.VJJҬq@pq~^&":@$`Tս'R#T?WH\oJ"a:xXhBB{!Ƨg1r]p=zlї7]Dm5sX]KUΗs۵z\A*yPv' Xl7 lS>HeeKJɲ6u\#]}==|LqMq\ gQHn/=Q=V¸gpunWlJ%u4fR*hoISxF~.++gQ#5=$̢v:LT2|r8'x>ilPB.=c%m7Xe9"A'8ξˈ)D{&m(|~ĕx7 xlgR~ΪU;p.b}/ |5w ݑgRH3s[`X܎ϾViCi@\HES6ހL&`഻bنe{G w\d|Rf~ͤI2A#p`~+@(E N:Ɠ8] 8}sav76!taSk؋K\=q#㦨,;H˕9uQB]۠Vkh Pv,!Zp'zee[|`׬K +8}lW}u8\eHN-s^_N46RNN'g֓/}hCVX;FChj$,%0T do+GZW#oxO]Ng=V3u:KpdLsi;msœ[K~bY-3{a /dqH-}YxB+T e.]=&Ň4YJ}\ oзKYoPD@>GlD~$SyJ"~ll߿zq'x);1N@P`g- ho7[Ikxoxc+,C! ;KS+WSgmt|/%.нIh18I[) B M "f\Q6P '.FUEl'/OȥNɹ'h& r)#U|=TRqd*!!:ӳIO1DFWXbLā\ U4jn#& l%pVج9Jѽ Ax-<~pr%Pn ĘOsȊCc| (r E2BGTW+tT-B /ߧK{xF4o:o~x8⏀O8t]n3;ff!%0vn+ibjʕ|珨Web0\xD6A[W6_cԳRKxmZoV8?́p;j߸5a]k3,ކUA%֐yiX62bk#IL 4ϱJ;`z|۶n"?{{.ΉZ +J!̄W}jk);IG 2ѺƫЍI EMeҕ%9E+L5Ke0F\}Jth %İ^ 2K*cDg D<ɑɗ+y9"|Ahu|cHHuu04G=W4;_s#ik=:;Bf{7l6Rp;!g61I=m@֛Ϻe7f!8:bU+ mc|C֐t8& _޴0\zˀXZSvSg׺t T*q)~M%:`Q*e \L͒crY#ŁI>>lQEGQ(B[?oz=HV"F t`(nngI1߄rF.ʜ?рXh3_.P{{#gQ_TP>i wEݍ\  i/Yhìow˲LfS2&bZ Ns5HiTEͱO0m/Ka*OۖQ_uTf ATɜSόm96|7C+hZ7":=U4f2 iDM]_A@% YrYDc":PeP`UNۛHHܜ/ʔ04isLF~K'-?vJi]V?Ќ]٥ }pߤG/T7_uM8w:031t2^߸FB#>HrOo*w%p b+7!C>.idժm: n⨙GIްCwKq9 ^p]-.ןAX %'9JӠ;Y#S=FbDdTiDʴW-t6V9YV1riVÎ5SW$e@[̍͘S_*39=fy . ,%*m;R٧?g9oWaGx_ǚ VX,~Oy.|ɿ`|;8"㎹"ij1]&zYz"ʐQ'_; ʝ/{W+cF,!':YOixpg&M WJ긲|_ڲO2pĈ,vO/qX@(Y 3HA\P>,~];nd5[d2gϹ^$$?#% 07CɢOʹmQq_**E6z^E}ݴ`DN؃uqʉKul$_NC~+B:@Nzj$QZ~I"_ba8?s<|hTSaت0W[s;~/E`pQ=W{1i&@.Ew8O8o;->FL+DhU@mx HjtonQAֽ(e29r p(j8}rk$ nߖc4Dc׫";~E1ɷՌ-TEY`!&//893ZEuy lcgm:No٩m[R뱏[ kAAˊ+I̍;r4 +M}"y3GiO#&ٮ:q[ u"Y;j(?ʲ7^&m)*ՔCrIme0Ϙ|ݩnB)@GbPvG;I}Q']aANg ].aV. f{u,DZAo,é kmh,Cd)"onqwl6v<ܛ~ <N&2d*zԘ֒}Fmp RBt=א_܋Ii/a+跪”$&Ij+Q %qD>G]= £ږ@I#;x”~:qTo%f*>=y"lB)*nrTN.9d%ƞm)A4r/R(u>}03"%vi(/4YăQT]x; @X}fy6tQgVo ʢ'QŁl mIt%Bstbq#ڡ~'f Hq.%>~֋5=Xl?&Ol/X[aq.绨P$[8cF+B9'{eJҤF<+*{å-ާ)>; +_=FggcmYdKv2n)OG0EyKo,2){aE Ako+OU<~F}PB!Cd(g-pIBtB&>'R2n=o!=J gFJQˡ&fM| uQ%[߰mk`c{B|FZҗ7t sR+Hvq:cWwf[Ϲl} bB-DJob#rpO'@i?@!n$ͱ#ƐhCoVDXH}xsG, %C*$Վ?Fz|@䚀f\eӚ dC: ޷ u:bS/`+KH0 rJFM G:|=S^_[4(sM+C{g Jv8 'jbpKj|Ȭ4>U.[}Va#cqLiFtn(ZR߆YǬ=3'GW+^op`*9}ӷ/rj0a-E0~͆P: 5: LD:@lc}S]Í.*I}oږ@`ǒɗ%6g ,,PoȰ~3tkf ڋ YeMXCKX^,/b˹Pc<#WIV]#8b`sA-^+ɨ| ̱`StJZ oY`k8f%DLJkտب doA%I*dPMx([2mj+R6(.9)O+a s/-<0,FV].!bZCkQOC&)*-eȲ9+G?==Jٙp7-Cݲr#;ͼ]kE- 5ϘJb#hq{ݑ_>A/\cp?]V0Qv4$#\Tʃ`s=ÌP;t'pwWr&sQoɌ֯ǤausS5k@*K1Q0o)hiQnϽ/ri@k:7fgNў-0xIL[7#?Ž(U*cQfDW?X lSSJ]'0&Db_w6s?U%u#ijIeWA>2F"֐wdf8S9&r,oʉ r:@LgIiMVG| *BB6qeDxę9kX0Dς:&Kl'yz? .H\|wI4[qEvlkfh,c:V~pMZ3:41t=1y=:߹۳ci50¦ n_ jiI6Dn<')Zj`D<*501T끋]&٘BVzAǕ{Lb$ Ǡ6Aա^=MHl1WKV.w&x(R?oHnJVCm%Cq蹜w#IACK>?~9|!|;R)6S h+Ce_R|x>Ҏ"6L/x~j_cpoEė0J=CUrp'"H>Kw܋pk7|8MF|ec"?E$Ef7 Wv쫱Ѵ6`N*CNzd)ބ&5\!>|jEc0q6Y> l Jhjj`VpR\Щ-BS%p3EgPO44坊aԺy U&43a^VH֤2nh'YW |~{wO{rR₣qqP0B.Gc] M3uWt?^g*"e4S.o,VHB:#¶)zk'<ոdF#y xxxG&.O54i5皧g0GhjXי:RcWpQ{)/ѯEO*=,_ll _muN6U)[Ï<6I,m Q44 <,ɡ F bp-g-PviA^m3G4J!9ދ"Pub[>RT~A?|CPø|j'sFWo vvg+/ԗe>җk`fU, iO=..?9U+ LᘄS r''1fؗG/9^:,@]5 Uy,=vEBiB;#_Z~M7n1y5hιC2cFBx!Od# -pf3Qظ~ b>tgeH-NW?;)l@580ډ:#N|N[ ]|$$IyVcLV΁nh]X*(֐`OLH^-%NZ3 Gms s1D_jGKkh, G _LtA(ul=i ,Jo;߆Zf! $_+[t 6-IW<OC$57 IYנ9 c~Q*2POց \kJ|OBʒNx?rz[qzsNc?yd`ś+d(f?֨sȲI1229<r1hy}^- €k2W-@,c+L0TBa'g"O<FM?"u~B8荃U2莪kx,#!:zCP9 rDhIHp*ť5f>ib=Nbƶ *odCϔ@[-1Q1^MՊ8,`mw:8Uz1%tF+e`;Fm-%ط>z pI 8Τ!AWnyxn~y[i,s$nh!ڻD|q2㖺ƦȰ2)2U='=o %"{*^sz&1n̸Q3@הZeV^ZԻx4pA'??|!zl%]a*_R5eiҴ!z,8uQR:)/$/1}Z2VᲇFTJPf9.ngڢ 0؇@GU&;,y}<'f?a&ZtQ$W,dΤG̓6o7OV\z('[ஜ[a^lIXŧsʣHY]9jU37>un iyŷQp7P.C>[giWɖEqŇ D|N.> fGܫrP5D& l$6O/lFࡻϑ g^fEO,F4M3AߏsHv Ut-#>>wvJ/y<38;;ݬHɘ'} mfkxU [CZQm"j]տ1DA)`OÜ*C4+ɽOxŬ.clƣg\:~'ͼ>8y  ρmYxn[_¼"{:P_̖͑.\¥hk04ef -vfI&AQ&L _H϶x,`1j1ﲈv:00)ߙxUtGҠG1\n BA&eOzbpjE,P?K =iuƄ۵IC)ҝ8?xA3΂\(}s-%1|\`"kMYdi  N/Iu#7А˺Rh8MS8?bZ*) Ȭ%YB&a^湎˛Ym1E{OY:VNMl2%9 iM| v~.S\"k6ę(z@c ߨ8FRYJ"@#+즑G{`ff 9vԊqqr1MRԉ.RT';~N,b͝:Lz{'@\v7R) %)$\LPHly` EĵO$~/XvN( Gڎ?ߺA3I*=j9!\ґstd1$6e,S餳x&c{YNJĊR˂R\<8;_<[#@ӂ1ȇg1ԯᗃhk&*.J*~{s!c$.I@ !=0 ZtPϬVP}eVNM. \(>=np'b'W^"rga 'Yc0LztJ <@~GܮR D 0lܾ^v O9qNUtHĥTNƏa"a3D#ʬ;4TAAʇqQϬ@iQ'~V:B/wmHoKhfyzrv+Q1Fݘ߂e{fr=͒ UibˬM#YPzE.qtio嘵TR4Z1T% z܈:nфֱon􌲶,K52+Bе= eFhN.mol`CkFQnM㈫adڈ(+M ZEH9>87"!C9vbOrMiM MVQ,DSpZC?c~/WxB .Jc!Who4=o2 HY¤3Z\q:ւFn'ud殲H_lvū 5J@>]eqWaCШ`-6$6J>}|=ͥfaB*ohTSMUJCSi}#w2Mͪ52`G,ڷ)d[Yl$ܳU3tSz֍q3 Į?W``>Л1Du \d(XU@q _˜*w<m[bdBBPpϞ-ʝ”<CfvN%eּnOjd 2])@AqchӫLꭸDq@z oV&}es`h2ߥH_΀#^2DlȱVuj.߿ǒ ) smX_0I!v or;lzy:w/?B 7n*,3[5C-qʹ1E(moq3ia>L :tp5ۻ)1iHi;e?@${ 0VJ+j.h=<<;%]WgY3N'Tdy:x/`8=oO0#/@i"V("!vsD׸$j,{ݤN[y\.]D0d /P.xl&e]v&W;7xhpsl3qXPtzLV3 AVBo&8ed|:9UHf8i@H[!Lc'Vi4M5i:qw&YlRJnQyql?i<%ܣ>yG9YTEL/%sF^!l͆-&jpיpUZ2uj /x(6waL|~PWЅ-a/1L,ȿ*ݞid\ !.ޚU=)mv&H7EOtG27R٘leӷhEʡ`KO.p~=dy!on7_FO.PT#Ed؄cENEѰo=dϺs'k67?:SWٵ# P)`َ'ϣ3xi`6%-%{ U _(vIϮE"8PʏBM4C tފ/F0]_7vRq{TΘDf*.6T: 'e} ֗\Dx( wˏ,Q%5Iwb5ut>uO i <?s7m/ӪM2䒯!P8$ػX{[6ZSr/jVS~1zRp3uڎ˕N 8,*xݺ k/2seY^Y#VQz x}ۛ$?v+Ҙty'#*݅"pGNg6w5k!)aq '#oX*+o)f߿kL ё!mYmcF18Jb ؿ1_6#$~nPZN:Oϡ`{}uo/ 9JnM/ld޺jD'멍o1<OV79.;>M_${#Kt `~~!33܅%:R.^2lyiW={,(" \ kIDA04>Tp.hx pZg) # F'FiЛZt `>ȦU9'hJ֦ )CD gu煚c q"Ϧ;S&ae2?lm󟌻 A}a &ֱL>] Q$CNfs;EC3o{;c{wCyzoM-qGsuʼnXfj󲫂mtճGϽV"0q$jQɉ =L&5A3>ӏˣOutG*f? ap>vW_ww%Lߺ)p_; jRbP^hJi6ApU~ ~vY*ʇL0vrLDUTAJW~"d"e wIJ9#I pcՊ-m+ٺ #rB 6e(mګ:7D[Jfq@+9NI*/11.E8! G܀ \}/f|0S bR5P!kӎ:]>|&U-{om-ЉF Of?$ƚ$U2<)k J`'Qϰ=-ZsϨi Z͆5{C{Q øۖ(%bÓiA)@砵N[Ar pĀE>/ԃ3- kFUVQs+YL?ͬΎ+qY;`&V+zW㯰Y5DUE[~O.w&YءYb5Wb*K/qu2pM^.q'H1 &k'B~Co|a1ew)z$mvuKVDeo8_qj/X39>0eE Im|NZ s}tVF̜E=rrm>Pn!r@b&8/h Zٛf%Qǽd06J~[HP!oigT0N8K:/¸-oчdtW0},î]*XÄs"(e . 0ῖUȀXVUdB_ff<>RZ'J9TpqO] 3ˍj9#C0Y!"I!D:`Ӫ`bV=(ybcZ6fSy&&Cu3Z_y24N1$1/2`Bٍ5gWj cSwt"ʕh;qo]:tU[G14pknj=;8t?ݖ{a۾]U-v>8LGWʠ,l̐a, /Pyߊ,,v|c\!C2yGMo8]Y<ʖ8) :u?fNMj0M%,QfA;4A|F屃 *V֡l9iHp_ nUˁ!# i JPsH]L8n:76+4zǼ4Y=P2X9:>b7>r06 zMdZ[@F{ǓɺOX#Wxl:Yvl o7 l%7OП-Ud<gTu9n .[BD1jfjLAjsҰ“D=_ g ҉fgG|J%qʾ3EM; 8Qf/TWoowDỤ}0V1 gLcf1T&{iY{50;gg7K:hԃVxhcZx}dӟq6}yշ ڊ>)=k;˝f28FQU9n-nG.BHe7C`74+bo\OzOR+g-e)O9)> OaʫVhU[L$/%CA"GS;c4-fzBF8O癦$ 9>tIVhSĹ9~K+PYq SDBEVRҟk(+nZ liiDgpH"RSc$ezr@\a6mL2J|ERNZI(dFLW6*奃L S!-06G3qFS8F@m˩En#*~ {X}[TV$cϚ+6TUSAa"鎖aG*{42J+bK[{\i]=ۄ_Q:aQM峯qT}է/gGwWa^M )C,Mg?`qRpMG9#^;%A57Imhie夹0 ^_N UyWfaz~;QY% ˹V(mtyz%6ȯ[dG< ;~96ơvYY<*,B~ PAvC_&u5J{=IX8aN-JHg+KpI:^&/X,,Af+n֖{>0~n%*+/U򣠦9Nrvn☗4v.'CiM"o뺡B rVٚQDc]t@%YTV:wK2 uRk j(;fP.xUq.sLN'>C$h MWm|BEhD2 @ˀQND͸I^\IK!Gm[t#,W%: a.hSQd"%w?R}Z4 P*C 7=hRʰY7MJy~Aw|+;_;Jz cq`?l5Fj8 TpW[-y}A٩rkv(Opd?dB*%*Wpe_3C b: ,wsN  YbҖv' &` zOZA!ȞrP%*/Ë3߀v @:VqYJd./ݽQ(9Z( _bP !_ ۜs#?!_>⭻`Ǥ`u6HsbQ)5&`۔jNw9[-~n}uFad9TzЎ]M9# $2STXs@R#|@ A߉zz;W %c{22X'YYV7&̧Aw:b'eg{0ڱM?ʏ,j`g k ˏ1gnNm\}k'pQ~;ΦflmSjkhib^#G_8mxcGa |ei,z)dYGT|SۨS E|ğ*I%(uhfE? p1rڥ}%5h>U>,|Դ{&'*ۗLN!2D՞UDp98! -skZm{o➭Gƈ"zkfl`; ap$쒪7ډyR""qrQ-&JF'6N3dqcGѬ?Vqnk_twtLW a?2^qk!PYK&]H&e"7OuM&!R&FTX,)  so%)5]}28 HuFo?6Y+?\i_CI,v^,:`hvyK7( YgSC`}']SJr?sc&2ݺ$JJ--Qh7+'fK\}:zJ)W2质ugNha /MiKclG{aM;At $^/䬳EtzYӌWIK.-Z &L^BC-nq 3Z-Q^F(|O2Ep=>mWq4⏃jI. r`#v҄N"G ֔?g%8pzԥlm{H w*Z-Ӷ7cz tOvkJ\ s gKhʛ!{Y*XڪP ,.# J :̟E9?8A1GbЗN0dc^(y[@eٷ|.U=vnOσ*xӢ:嬾-{~t՗ܫr>bpѣV" XpאUC,GξZV6ފR' iZZRMz?kg'n>JX})R@qEP s_GŠ 87w|v=:=Ƞƾ,#AE녓*;d.ǰڰ=?拨*W bXvQ9tk+/TY@k'J5!ȉ.x#Ue4|Uk#>|056nfDh3s=O)z@'m{/W:T CuGlz?"a0n,X%zT&Kd"7;Osz ΕaҚ̣ϠF)@n ְ;_ ̓c1(\ 2! s>~u+K`|./#ryE; ar9t\T1Eg^.NM9;l18Ac@^fڔzf@izJgDթWH#gmDs5(5jP+_øK87X lW`=0RrG!5D CAb)W&S хN_51: Zgɥ*:q2k l*`׺e{Nx bCmG>o"a}P#R6 Fv[*#c܎aD2 Vf7`( 29b%qT@Dlv6#Ĥ=נIo V!ǾŋdȆh&[#ɘSO:)QBJK{QBjO^J|/BK> !$Aut#Е~:I- C{*TLZ?LvkǕlH6m7?5N^;"ߜ gtH8|H8Ȁbo͔j3ZXRSl_%_+^x)B28,pO*S![sowDYJJ+Y 2)_ogG`5FWճwG^kUej!aFŔMrplȶ b9Jdx&".gHV78urăX'5kMe25OXtQ̬3W:Gs;^fLJ'n_=СѨh瀍ҾNˁ#@n ̌V&G|볭޷B}{e'x QvYML_s|;Rq PQwEBjۨ(ރp"ϲ9I5vra93 ji˶NɘiAI-0>zQ YwV큠BS0s{Il"T,CNwZoWюo#&HH*_ȲW6EPNE7ӑI ͣTiZgju[0BZ EZAtm&X.E9́`1[!L01Mrd 0ְ'~!{ ipg3hhv6m7.I$.fd!@!^R+#^*h:8\Rj|algV+ZqlV|+ɠ+}sjfD{{O:A<>:Wa!M0gnn2s;{3֜V @g,4/Tue9H:0kc:eDdNd]D~ <1U'رNKwoľfR@Y^v>8NdV4p1g*,2[h6y[zih 4<2h+ѨZlnR2$֋lmZ7=IސiGI7-88 g;~!ߙg h.^wmJ>^ab1!++'Z,jF# 2\3Nt&a٪ Wf=Fr=S;6ZUp{m{Je'Ab[@K 'YC+BCjtuwtQ@)m`d:(NUpW)b1dq띃qO-11}jWhtt\M26mOE\B GjPsܝ{&bE(v3ϐbܩVʫo &n>Y;?Bu͆a{GՕH]?핶DlݷaV|WjǁN,Cctw ׏Lmqĉfaun??i½*(.@8z`h$0oK8|j7fY"Wk/M3p *z4lF|SԕuW/T`XRJJ9yz & zB ]I+X-$ BkyQe=ߥ*-n]^!Y{kxC 9J/mx8Zha r|G) ukҫ>r;7!M0}&QV 5 f5>ͬCɑymb& .K[l6"dFբ%T#XbOH!^=F!2GxoP;D>9M똆 ߚޕG:CE\AQwڑ{pЈZr2-JM$ ɡkه,==^8p|Hdq`&^( j2\e a x"bQJtrMr)tf*Ĺc;֞!fv4s%Ύ"Sуh:oedhf)y_a5B8@i$:GjR,T4CSj_l~W/ e^םZ X0^KB".*'+XBKFbq?%\h % [JvkA9 \Ծ~RwsݼDfTrޚxt %5ʹГ eKBpcהIwq^\ Ak }z>*n{V Pڑ)6ȼ;hyl$#A':tzФOCAZ:YV\*)+T5!.f>O DݧWpF @.,ϟk (efLWϲ7ǂsW]|.:oKLg`[ A|܎y#9^~꣗ƔB%p,YazX+n{:glZQ6?!A]nhظ3ғ&^Ca}>uSm974GI [gS~Nvꈴ &6̅5IyOpGG ̹)c:2EG`<6N)$Ґ i;MUR'v|. ;q28zu #GjGc'R/up>q4O&ۿ9/i=k=UӉ. ,ÝjӒ9 7jɲ/LY:Vh~$TCZFP9.i_x&L,9a\p˰ oM% #cJ}+غDW\)jb G4qzq<o| bR>hGR D6?,h GCKwc~܅eV\md@03+*nicZ 87i%K˔- ?u:O5lL7j L *׻K$ 3?"| ([ٯpt,&hrd+&Z bMB5Ggptdލ0 (;EhjQ~ܰ :( ҷyq? 9IǖGz52hϸkLMUeP"vn<7<67h8|c@?Yti,H=_+>(h75{烐!:6 :6o_ wEv]  v;h፴'ja0rסA(.Ʀb\4lV䨫JCCj ,{ /8 !s蔶H7=u@<Ӏ+z,sooYEѯBWL萤iJcP盾a^z{9] LE; uxr T_Ss2u6[pMR [L/ɩf~2N[ЋZ15q sRh)TV|=Y(†CW޸8_`. F~"swz(A'wAšDB%r<Vߤ-}l椂 ^g r!ݥq-eL_zs>ijq2VSP𬦣yX:|=Z6:Sі5ST9m.%,mT3Ed$YltAr #7#m`R1}uS& |n<j/IHC&h?{^ jXJX~˵cG}(AS8 =Pꋄ^→Xw7d{n0U#ϟwtXxGI? +8wov1l@IЯeLҸX֒>"|Z:?SC7,VNt]!rp-rZB% yr̥?8Z g{ gs-QۣY;Eȶ Mu8Jd5' XHI0|u+,iA4Hu-{\ a5'is2*cmg߬)t]ydҫ>8TxZL&߮9I?%m05bgR9&8l/*UPj#AVE4P4?Wa,} n@lѤɽAy[9C@Y. ӓBԙ~+t, Ŋ ެosXp ie:fNNq09C`>r$D#TۯlB_׫CU!ZղZLgsU~IKFl̾G^d0Ǣc/8BЙǟ,~U6`#AE#D%⯷1*";UQ;L@/|q\BIPS(TgIK7rLjK9Td$7굄92:& zEMg9THO aaEj@ꉴ鍞⇧逕G!D|\zx8NBZhѭ0da@{BOri: ,A0)R6գvH"v4M.ʗm?+z#W3;JI5g^NQ'g$dz_4 1)7c6Ll0Dr/J0t9VnCΥ{n60D@dkx "6:&Lgt{KO/?gP@A'f̀:_9BŹ&oWw YH={(ne}v R@Q5z Y(2ld'^73%v~iaf{RhJ J3/pt3 ٻ>#tٖߦ\K'_b6z/W;'Pu&r^>Vws r0צ-06- Ͷ:urn֯Hڔ5:݉.P m m 2x_!VzkF gYi%:X)P 5ԞezL$ `<#7;Hi,}#Q)'o;ayg#@s\޳I 2m'_+3_ecߌwBBs$o8㤂-GM#N0<ܽ9/w%u:h1E""MƟc٬A%yֺ4 fUp tNou7@da.+4zn$9|@w=Æ \U%T߄K•\a0A_`SA.H}%Ol^ݓt'C:WHy"@bpYK'96ÀA7L &S<[Nu"":kd.d=٬ !Z,iAaXdjC&ޗk+7R p F['pE= D7<;v_{"aj&5х?2yjI$GlmHU"B,Ps|G*Conm`Fy~~YԸ8hQҡJ[Z>lt=\|3>RQ"`͗dI>ʭE#Ǯ D(mWaxWhhe2!Lz7UckO now `RNyh|]" 4.gPSWo5wcͫ^95)vuD;U8>;z\BpUB)*9;*ஜ7R>fd+ |vgaE/ |u\Q>q7AKο Rrp%y9:ŃC;hdd#'!ݜ( E(E  nyHċ 4㎂=uj48nmﳗ&ز6J&]QIHP]O턕xCɖM%6QLf-=3podaV$s j/O6D,**Qv 5|E`J Ģڵv $8֑m*+#QZC3BHȲW4́nMj qٓ ;ث%⚢6)+CO+*2 Ijz㢅לƴe[ frQ[)"QaSnp$d g"h3-ڃ~]^dSNQ,/O:s˫L&oNl26)-oT(jL<ޅPtcbblF8ATޱ@(/Ilx0P1m#1`Ughd>,d09g!rB,ٺn%FF{r[X;v S 0(jo09=PH6W$ #r"e;Wm^z8h΍]$y| #Xge$PCtw=}ZqTFT%d/doG)"ڙ^pt6J\oK)/b] }W[isFafE^➡=H1oWR~.QCAM7f̹0w&@@փvP\)Ut't#=;+j1[<.&EPԝ-@_=Eqࡑ[*S$2?[ẸF#}aFrcjjk;}A)ԷP sCؼ_JL~)ą˅ R}̉,$h7sP ]wmLU%MyLz<|WPE%}a0Οh_/d9zt*ƥJm/m:ߴAëQy8 .){|p6AKKڻ VCN+tR//+aI}ͩzfbڻ}Ǭ}ygjU5Hjd<)Rp@6%"xi\d R06,3sM6*f L衼";}>;|\7,j"eۇ aHCRd&vfA6 )_J}-%67rJ:D"|PͳgVީ@mrH{C}fK=y3ٜ96s؛ uf PanA#By'tbDJPo*:@iOȣ;x;He MT'Hu9A7~AE +i::F"زޥwky ^k!ݝج!fJc f}AN/)z`d Ex&*(!`@@QMBT l~EA#LNQB#FR.zD1H][p ̣YFB ;A\,8"P9FX*n"JD`v]CVċzUd%< vQOSA`ݼ`8~?#Rہ" CPm/E,?8:bL9nWI]n $K;[rzDMrO$n,zɈk60'`чu`6+!qw7KxIn~ x{U1|YsnDyM!C>r_'6Rg |~כ#k0Bn`R}OjmNwKi]\5;qܙonA%d Y汋ހ(Rd.eX2ZyMKpcU%agg-ZF6gf)7a@~Qεx穅J:01->(i,_3{_z$[)>w^g_vo]PiMuEB;CSXKh `Q;oPI ֚৊qȓ'8+O!&*y Ww_289=Hmف#Y2x 7 nÈeF7:&J~&u:`;mD-OyiCrjB nd$80ff\aQ̦WOqb&סI֍4\nAX0N *ya 1?b| N!rW|;1;PR#1ށZ-^ ?`x1=-!NqDѺUe C]Ž}n]խ<;@<~?l x@yh :F[Vlj`mN!X|Ck#ǻL.ft}x, $&?kCtOk(W5tޙkҹR%X>vlˠ1i]HybqWi=sc~N:}F!wTVދ`.6oMB^_|PAd @W?L&\u`aRb1k0$_a!%sK`'8r=}Ӱn<õƆ$:(Jh^R>YhتkIc\D-_yHASI}ϔLp3p^f ;r TܵYRiX;<> =fZq黣t+%WB2]e* xCH8 @hm_: Yj:n+E-54 h3 DU(O˖Bcbk 6S7Zc}ռM^-L_sZ)m?qݞ#UƼ*({!+8t4oHJTLxlq >Z Y?/+_VxLfF w4׮5{V|-e4QKq'/c&\Xv`PE2uQTB=\݂6 aѱ]>|/R:S umڰlAf?ˑ ȭj֝~*6-h)z`:u Grb#&+?gCtUO>hap ecE\{EbLP+u"Z E%k͊a8[Tm`@ #y2wD-}]_GˆjLkа< vgg`vx8K<} #dn}9Kxd Gz#_o ~~ޗ}'@7_=-aXoEn??\f xO-$oo ֡܃o- h o73xƪϋ*Wc!ֽHi%ֆm|'-vE;s eܐLiu Wg&XE#-JH?b&dfgÇuTHa7pQ ]r?iYig#AˢzbGe )u ftX\3ߏDa#)8o|b@[v$PP]/{"[VIz_1Vs1KtLՑV ]F[]#̡ U_b/N${Ė^BP[a^m_3 ԝ\ T)gGq }X,IMVظ8,C.9.Ӭ!`= UC;gVOڵq3-Q4!*"p:b{68d14 m0 1~a<9ީéypo_#A/_jq #o5;GE,[y%ũK18i, %I T_snR(v:-6AZ;rm^|IÏӹ~tJKI;v;zj&w:7Ĕͅ+ )qwX~=e֤Ff){M2P+ˮ,A^]QGeV`2FK moxT+j1GQ&nADӆki Nϛ 0B U&-Y΃{5V3#Ra$ړ8U̶3o3Cgf-OvS/}~1 Ί*BRlԫW e--w #Y]Em멳m$u\@OB&8$Aw0Ft?X]Wez:7%.? y0ܒC~'~jG͍ki>ԧ$@i" |F5- J5T2g).rNh?DJ2R4D,!ݯA{ mS9D<2t+y+C =3S1u.; # ޸oYhKUe7FGR:+DWϡOX2NG"c"h/~ؐ)l[Q{)\;Ųt! V_UXu+K~E Ryc.߷[.71"&.qFσ?^L4BvlnAPS"gO0-٢D&FO#&r|~U=wNq530]=^ؗP Thc]4+> ퟼C0 `RNL}{Zt58RSd |ejn}!7FuY_d}+"ș4?X{̀i!Pc|Fv * 3dgMYl+|NqYp!5"s}zNlKnMUtwFW0|/qF䯹Aٴgti%BMyO,+Oy7Ļp/P5+-o]+9&ɹ[u!]s_.naKoQ9hwɿ=$O8 qENe/=[ J t%um 1G-ՖzLrh&CN-6aoّb9w<9?,N|.@K`f @ZV7hLG4#"meT]w@w?j}&^T[;|β#՞ ,筚hiuPE(W( ևP2evV-{,Td>l!Z~]+lvWBhU5KUU u y?3!9RM`U6hmk5- s [?2ʛc~]`HJ> wRJqQ0dG eu8ߍ\ju`3;Fq䴚VTf\gݽsfnH,@&=Ŵ*Ja.Z:H>Lxy ^rw.v-gֵG4]w3MhjpR$%b ,rF$H҃crJ<)L"%:xv6FNLB<}8օm2_C=.L?]y/̧*xp /.AkVZ9:9[7m`F7B,x`1w jTh_e% ѬD[R3O`{i|Dר+_V8?Laap]?XWO[.i5@[L;"Jt'aݕ#ēѣFFhjFHZf!3}T ^8>kʶ!5-WҺsّ>W>eAtyŬ$&0#(=P>Z8M#?ul{>o\O`G a(۶ZApJ#{PW CKZ(&!3;\3E|:qUQ)&7.fba>l"2U|Q&E_nۭUkY}(*BTU/-g5@%Mi$ {bAjGaO԰ #) @[X(3lr@f0HAjFs\ _g(Xaʯnr"0whb[ʊTE @a{hl?x!Gt&Q* W_ 6I#]/n/{_(V ' t-GƼ9wsP~#I.Bů}MԬnDOTs-H20E/cDfǧmY-f ^D=x.)run-eԠ.#@Qr8S(!S8-M?hL~rM6m"S^gP j>xXz$95.:t#Xh`F)pt7 eeF wںr%q% h|.th[e͋<9b,(zqߩfęUhlO.~+28 _wۮ|·p訟)¹ͰȮHlPf3 Y&e tLQs+@cqᚔ0[8"ܙ,I(b*$VvQ ›BsԄūH/ϴ4# @Sp3h]gxn(TCG& ` Oō< JZstC!jOf βj̶b'cǵm}o)SV{^Ai,[aM@*ĘM1x7cA|{ Eb>c&>lBk>% HpNJ $O8$OJo*z8Y,o%qtp^^;>NJ6zyҷ̎y:T0%IpVxğ ֫[g)IYtW"!-EyC1X=$ҼYp{42<P!#boK@_">Wܗ@h@DhթT-69GjDY0_EUpMh3ۆ TVtX%bWa [I-5O04MY~b9>^D4n#Ujf&Cv8&JJs1  j.OX KK]?fUU/#g#2AO5'{d' uӿ.&x0bhnmoS ?7i cvKS##f&?@PϕۤO橪EyJأxXj=1tX5E˚/'*R,L-"D:ٙS`W[,Ó?%8lmBtpaP):p8aŲ{}A="07I62-Ob2d5̴*{zBi:+9Y92\u{rHf t-v3M^:*:x*Ve s3@E{}]':Fp&߷d{BՍܮdyBZ{8ļɹ^{~w*!uɃy{dza62iAWҷ_7mJ_V -<=Aթخ$O;ތIH6%U*f ؼ.)}5AIISG_5wRvGktHerXεfqU|:}]UTf4EtSV}*=MK 2e:9Qb#ҡU|(uR1!L  QlZx;J-/zu𔁟`c-297!g7i…,v\#˫|譴g Z92=ED0ނ sH^Mǘsay槞1uh<%GG~w?I 5' \(\W` ]iV5Mޣ-rbdf2{, Ǹ˖2&hĭHo38S*Pkj9N/ܘ?ÓnWVӠh"Fdr|$KxBݑ.Ml3_'ZhuE 4Ry>wɒ=|%ఝ|2#ז2GWcK󇮷nic[ݱr'm݃"#i,o aOM>pIC#]'>*ra8>mۚqx{}xn3*?fsk3!SaDN Vp}#}[ȝt D-,J*gaC 4;B\/  *E XtX<ivFZ. "y rBxVn&lڻr1zj`WZv҇&TgrM ~$s7o33?pf)\9@PJ1sRmc.(]$5q&'E56P)F#8]+_p՗L69Uࠝ=1lo)Y5^6Y4T3%8a*ⲩ5#dvV$w5SL 2Q}}*"y: yU;|uK;^PBLŵҙ%|!Bqm"r,g&2DmT[<&i'\~l  U3l M|eyAP- 7ŗ M] #א 0e`i'>c Wߝ`H}/e~mhRнBvPW3v^j m-qﺄe5%^Te~uτc76x{x/zeҟAX{Ui\cԬR'+$+}OO HZF_aqЀ:m'тpvR4@+|;=EWNi(B,szk@_ڹza[;TA͒iouTXsZAwLh&Ɉ&.tev!M]P],-DlާQpgCRaIegIM6glj6@ڀ]du#[s-1Z <|5 Gà$ŀlۏKEpK[}G3BRL!?J7znt@{p"Hgpbc/iO2R7&#$!-m") +釈$@YR@#fڕƋ1捹 !s Daf sZz(ob6W꼍!U i!\Kq .tjgOBC(+Ƌl>S3~面3c6]X%aBQ3{kYj ~ o5. &a@R$DcԉႮؽOj(qt3IĪ\SZ3b_ ؉%+^"]"bbJ p,NMnRʦՑWeGK崄L`2w7[+t"Ic֓d3>9Zpd@NÌk=v6w5gX*~`e &r==(~ʓIwb^n} \dWf̏Μd{W|ڐ1>BW X&{kD!fheUb&~FF jE$tmȤġ(0STȱ[z(->1JhEox8Վjho;`ڂk癨q6'RDp [{<"Z}lY<" Ͱks3MT3,?&x73<&0«q^4їZjS`A W"b7oͮ§rL5c7G ZP/fweny]o_O)+gN1p`9FkKGϿtfOdR'ԙ2(Mˍ(n4M:7!YO֥֪!Osd argNԴ781- Q rd̐}uUJ߂w1=vOd 36Wh\QK{84JV tyD JO_G %֟M>l@-xId^|[YUN-nn@3JeUAȟ%A[RPP̀1~_ R]UM8Q MvJ[6]$JD_= L9\o0Rkr;"[L/"IlcMa]h4sݨi;OrkrlN97*NaRw'L?-P^^䘥ʷ ؄@E1HfTDΚe9to![ATg/ x 7 DoJ #~+SfԣAf_ǐ"{-K#ݐs@Di}quSpT}"<4l'yDojWvd2̕jEhU*zH- T>k֓!#Bګ@)B3}-A>kЪF. o|O,_'*ɜP"_M\ܙA/HE!?Tgf>`PzW> ݽ(ez5<3 y0gg Љ2CW7RLKȩS|WaqHԴ[&cY6/ϵXy'w>)`Rx@eǚ!<Kޚ4eo3|ҴA$e,ml^ps/v+JX-o9Fx`\_~1O+/Oߘj|N zyL%x3d](^\\3#xJum_{K t\9B#X ch[ \>Ç6zl⌄ FwfGjʹԩA\+QPmgSl}>c[6ϰ a0-yBgɂwp72f{fX[)Ћ=nR~)R+X }L6\.5.n2ubr Q[/4kw׻;@7: J4TVc5ohhֲ3>fl=DGKgƓ~wt-|jpy3˵ƀ0G0+)q p;pX()d5\|+ 'Kt@-i҇niEmֶdZvǹgG߀3a!-^RwvUO4v pi@r-99[O w9;}~gjnu |%66, ~s`?~0!B q-.$LcUKclZ9n7T(Ss9׀ OA,f۽\p$*i۪tiGӪrci68*|bXfS!&"~ًɍ6XCw׳d'ybNg;3J VH>r?*'3t&fkԴrjN*&AAJڛr/>) m߱HN:§oD#kyb9u )'ԌzZt3H:ky|Thr<}U|3ūMuhf9rH ѽVҬV3dSUbò(Sq*&N!_.(F?D$Mv4nzrM hVjqk|iFh*B筢DB5(?m@T&JRFYd1 Auzl={iMR|QXh L6,Rk1;bJK2.: ׺^~^}pݦ/3v(MUe«M~QEESGh׋G@ެ;1i=h&}kN/pMv͖Pŗp0z\Jc;s_CEnCB!2׃\P\|ECf.fkhnәݝUV?u>|sC!o7<®ǟypEռy ))']s8 s%ᰴ %(R'322gpš߃' G_slirB{w q]qqm2,!E= hVZ,+B' >sg;OMC[*ֲK^V/ȅb_y>gxtWOFLTx9j(?Yik> TdW؈mA|K'&*h,*y|7ujEvd?Dt:39(PrpaV?:^m{#S}>M %sTaYݡ?)SIDS]W ex [YA6@LGX ̙S ij:QOMMl5foCjI ^a[BgHZ3'4 ? T,:7`Lmd>oHˊ5F!wrMye+Vb&.(s= ZiĻ1J(&Y7mb1YYČđ"e!yusc{=$6hQ SSFYQsFB,0AԈ}NvRa*jvqdߋK0v[EdBVS!\QZJzb[0׉1`\@ҏHs:GS]j4[8DXlO[5B>|%Y "Şu+kϗS_Rh@HF U6jH깷3ʔVe_}>hhDI^;P ߗ*rH~o3Ɔ5x]wtU y:ʥ—3q掯׹$9gyyrkqjS, B$ XM{eay &poWYpX3-U/] )+3*BoRhhjٛ{y*D,qn")i0m~CeU , ؉Z 5?Rұ(|(FN`dH nwMb:"I]" pT8jb{.$:_{lǣ}#ibrq#f5 S94uk;,lFlU}EֳMճUz?|VkXx}nsc|‘ٳe(ꞡ| 8H^ֺlj'7ctİB)͌g:# —*:|w} C#D'I&ޛ=^y9qO7 et_<P^cPꖀj_-")N:ꗷnmN`,_+E&uPf E̍Jk[Tk`0x1ob.V P.= -©B,`M[IK3ɱfC+e:dJmHdjOEV@y> /ƽD 8RsѼn33_1-&wm_LC@jtCxǭ¶)5I,E hQ(Og¶my}ԱDd^,^77iJ-7mx/q Ah~[rVI l4:݉%,ծ` sm`< 0ِۥ[[9q"v.~4!zjϡܒ,"ع t?]f+Xh\Rt9ه=oX^% ԓ5ld̓^2C/kЏ%Ub;4솴s?( E}(m)`*ez<)[>z=aaBZGL'AdIfVFzp8ض{bQӬ`)~hbEYG_ %x [w˗oٔ Bb;j%7{{|Z($|.|"xsڙw=8=?~uoIPbDp5|OK>kGQqYE=Ѽ ay"%?̱9!TFeɖf{[%lġ{ˬWWh2à)(`"Z0#<ބ)\Z g9MV2T6\_do>%kCG&pX/n#bH(ƘȊppotk )bi;J`{2OOeۛ̔M+#ޖNM=hԈ 4+?A6ɚn٭eVGw#v]E:B|NnXfTB YN'|Dはb|zz79x{o TAL{$ Ѻ{B!{ؿա`\QM #+ŞVދH0zU Rh̻b*w`qpI7 N7 ]?_A`|c#eAqԶM_h܊P9l,[8 XS8t @=|yVi 7 }, zZѓҽ[GLV.xu#+\VD#L)ƶՐ#Z1||R(w`Ǭ"5<*^^w;j=R8}o%zSUj9YJKLJ9htRCaub^9`@2򧁍50 1H7.` 0EQ5 _ ؅۬F{>+v Jz@eVOCkt:9gCŌ &"V.0$s/bbKܸPbzN|\2"Yz¸:0mЧU AE" &ܢ<41=I$Z!Utm;JĐRpoּԀ"0X$ҥMpccx6$n|bZbKYl{ҩ5΅^.j@¨;ֽ6)P@_~|e`/nq*]T3J+EI|@زM2 _0 `lY ॡ y&ufеx{b ri:~NtLnEN} 1yepL[C _ (0_cЁZtd!PK!Fm9vACc6@%hHSA5C "ź ghWsV7MkR"++ߙG5{@bmW,nn̔u@D'4nr+W/ԣSc& .)qM_QUZ07Y;G~M@|Oi6/DVy&+GESkA>vPZ+NY.u/>g U~mCεeUP̓$ Qʐ3*W)d CIjgZ$:8o񺺯\s΀q@gf^*̓rQVMd !9XM z@&$ZUd!iڴ+솸/Xk{&C듫u0*-#fpmjduы^6ˣ*[e;Bm4 ' |Uw\|72UOTю|C6Җv.&C4i ~>{S*^RIyCZzRL’:]ϦhpjXX?UJ &6L\Pc{0=jBZ0hp(0):Kztio\WxHDZ̝b|Be@fIKj5(L_.P~KjyҮ7[ѴlD.RIsgrNcQ^~eU TzuFkNGB, w`@ R@\jzn:};޺vV.`\Q-23*cC$ڰtX8:^2'1ԇt4#b,֋/)| :}st*cscZ 3o}1efccvc29"^ ^ORp<YqZq_*r Jv!Ńk#4NUPCpC3 aSR?n }0??ZglVuL%[P L;Y8-gl!K`6S:rrϙz{S~1xVFV뚦yc2zD"Jy VEV3 v?9eďyT"eYW t C\{?Z(>Ѝ eC@AAD87/~xz5Sv.daj?]s,3Mޥ#FH%$dwE6@".=W6 "¼S2jX,y+ephw*R)P3>Ǚ.7T$ם/ f56 Z7}gq+J:>}@z{ew9*Ur!G"΢l]ؓnp, KU|#4 </ƱMkaϙuNqx{~Ȼ?j6 V{PjƓ?XMqy_?<>5\N 1zoZ9jj߁6VCfJvAYs_mrg"W4[vߥNՓmzِ㚥anc t- Q .8[5Sܪ^bmn:84׳/k#~X(T&QK_fk)Ƹ:hr@+6/*iXFAƝ&ҟt76 ;~t>ˁ1^?sv냹{&WnRNxarbzӺEs}n3M ӎ N"Nlu_lͶSi;]j\l)8g|]g3_9!{Bt,Wd;,lsYdV@zY̾nW2k܄s#2|S;ҬPیzCY37L(obd]K%$ŹW 19TsA7V9A]g[.ʝIC`t=~ik(fr+L4F _aσ6.!s;ƽ5D%[p"֎qw~XtweV o esN1 keL$\, cys찺:dM6IRU!ʥmǹoBZps'4f*pHL}![{V/3]vH`]c8Hiu=zL9U7=sEɫzk;!gL7NB%థ"CRAvnDfKWaZI_qj.͗kƻF3ݪzQHa\P!^:~VB#9m~\Lb{pS0V3|UM~)=0TXph"x Gp" ޱc.׏zzq<7O΍zNO8ҞeaS2ŝWDh=Ctznޟ. 79EDi_s"&2Qa"^%I=(u$.:(Ije.T(ceң2`R}hrd{.s޽:UeϤʆ)4IW7Z%mSQ„T 3 Ց;c0y' ; >\=M/CNm$A2,,{=ګo/˼}_ MyږZ԰㳥gd!ҟ7|h:4HE_Lj-SJ^7fbH<FJ|6&($G(Z~{WQq(}Vߴ!dU c][ !<^X|` #tJ)j஬dY,J$V%:= $>@?w,q.[8͡-ekOc]Y{CRDu7$6xVv-QtV&'q*=ס Mv.Z ז7w!ƒ GAqBhOGݬA$G!h/8wuЯYM1:HHjEF%[ec7m'Ff"BTaP]c>U,Wh9t7U)}8#pJ+ߜ8]*/Wt!{jI ZpRxn/FG+jT28it\^|^|W쮇 ,ֳ#9-ғӬUGGS=qO&${uf:$2yG@$"zZ:)0Mغ^{:ڮ=BQ Ȑ|(@6J>  1tڠOW`B 2 p읊xP4~N,h%-m|Z4Ɗ1ieSW]Εfm%Vͯ,\Y.+J&"l4+9tBOo6{NY}zH=r "bÄ|y'3Q9R{BjcցrMV3 \PAbA0L0{t&9-W9*Z(7R yR8 § ќR4JR_;XT `о1%Do-vglFy;HFbɯG>yFG^l\ L'ܬDBZCogp-8Qm*n X,zCj&gw% *}t>Xԃ鞌b%ϿZ%+I <~ ,mRRլ|qïj8M^k2UǍy\,18"4os9ԖVLJ0|ΉbIG^vz{H5&ե s(Кd=!8SD!x1Dٹ,t\KWӅMvћ̻ii22L}mV$SQ̗6):FzrDt} U^eC kt'~u1TqG[Zs2 Qv@jݤ?\PV R) /k$.T'NTQ!, HH[C~="X ͣ'Tu%$Ժh:3]ZV*ܮ 5op"vaH1v@Z r)ݒCA;_j[RbXka? 6=ĝFD`+lOI_}~k;rMn9Q L# cKȔGQaТ+"u;f#Va?TXw Nl<=S7E}XZ.x60ժ |vڃ1&Wq7ޤ+H n>ˋrV:)J^=a=t|2a-ʓ> G^h;x40Y|[8ap6nt[һQ};{'6Ϣ -kdk ߋkEKs:j$)j<`;`N%Z]Μ§?Xܷx~#ݲDZؘ綱FB"7>2zhQybf-\΢gW+"**>`ǣCai.wF+*iRX:/s9`g rf'+Pt v Qw{K%|dO*3uƒTj]W˞kBӨ^G5_ЗZ[ eumT ⿋r$bu#bE1a: [U! E;\&@45)agZI)'*7]xoS(<^>{o-bR&/u|9 #]`XUKS/StŷEo$u<,7@aƶO5ݱp ?d$k(($ H#=7@ -"IEaqRxjF{\eq{nc*fa-b}ܭ9YrcN]i7XlNЪKqC>7BKF[c J4Ӧrʭ's|Y{-o}5"t*n"`H91=s,x=~>&%?g(Na/ lm)IQ8{h2Д%zTzkE)>Ol[/ؼ{NF} hgn)Dlo}5zX` dQG$&P N -:R]%~|KVH9,?* WO^dbluyU[Fw $DM =kwri6 w:_a4tO2R`!)q"ʣ'YX $( ̈́vC[ߗO ?}nOQYpV ^ڗiYz7u]K|^HGmjn3z u$}ζd}"]NuR;E5-Ծsw@k\g6] :?,єn/,ԩcuIҝyA9up)'7;j 5I!f ˶ F8:_r.u}voQmQ.j2e} TRZzOueOm4+p㚕эw}Ḿ燥jՎ!GF+A?aZdNӋ jG%˪072t'+7SZԃbʒtb/e]Á-鉝=/77ML *Ojg7 2BXÌBWƎ|4Ǖ+_M.*13MAJ'L xbP@sAR{Oe[? :p,}=+odA} w5>5e[cBj1<̯_ hU\}NH 錈 qEadIǬEzi!b.ϱ<g9~'ҋӦ߲;n y|)m{۔I U@&eωz Y.@هO4`cq6E]n;F~k9k[)7'ˑ#P!c+>o kĹ)dx-=Gj~4cxp/hY,MHEC 줌~} >c*9a j(r^U-!6RǼ%O^UD FU f<_8 sڗ,>/9M&@ncMF&39VaR_2d_wb7+t`v͔c6%)k8A)|}#ʍb{NuǍ2 ?îDB)Ib}2 Q̌l"-x4{ RWD]URbQ<}N :?fИbBVqci " ?]5ڞѵ.Q)v"'?~9##ɻ'gw駶W2ϟ{z*]c:cQwd)iVudhM2csp+zj !B&*KV&* -z㤞N4=Zlbș&-7eR{%v.y}u)1 q$NhmY;q& D yJ @OV^h +Ga yv-r0Sn%pLHS"m.ЮF!$ߝ. 1 lr?Kv}yQx x7}-ة)h̕-N# cT (DŽ? -\ULG1~vrbe&q't.8I~^Y]}7`SULG/x4iŹ뀴!I*6?%5|/S\+;бCuy[տ.CC%»7?7g4~R"  Ew~1cjSLpCim`W.q7r]ƫi1! 0#UK$48{a.jOcϘ!S g54T7t߰H`=ԃ%SjQnquBXgZ}`$,W[b$ږ3 #HRC℆F>}* `󬾘f4#); .$j,5Z[<ϋQr%#{{YuH D`tLi+ç-ʏj {9 7as8jrNOcr[RҧC@LE oց"+IfS05,Ӳm _Cy7<=ָךV+e:>$~GBT3z_76uL{2|*+ J!f7DѶ-";׈jQ6w!Z|CF0( uKlw.3r )_2&AG){Ha//ٹc$t87LK{[!p &=3cL>x9 zI->uwn+-y *G#YH ʘ4fv-]0TR6*T>|b ˲75 >E)p֖p ,q]3a! h8.jv9.RKŒcب1,E&=25wO)4ò]-y;Pbb'q"ڥ͓kug*l?=ȫնt-U Xnum\ɵQKnX]k2*8u2M)"4Z*wӪV} j$++tJ~wY|Ќ ˤ'M KӍogMCgŝ5!R3^G)@L/pθT GW&m􌆺DdNP~C޲c.B@J`"5+Q}˘Pnḱd{͜DĥB T P'R*c~yB޺/Hv/]j(4o\ Y}lbQ\,C{y4 V*©X.Q5FԢWޗ,Sq~&Ui{=vx<ʜ|Wz '-f@9z\ 2]fx4|6/ DGk25J΃_ 䛳44vOca&'PUsvHo,-2o%j?6!a Q# HJV l<=kA7C|]#tZ-J~'0TDr~om^תGC2'vza}|٫T.tD2Y݀v^ h~͍D.pς\'vBlס$DGG:̹8n*}IRh;Ka#o uiYl) ճcC/@ F2GB7غB:|kf3{Qk \2FlZB6ksMAMwb?_ OÛ ]_7칾Cy t&Z| =26F{ ,Y%S R=k3BH0WzHgJR7~Qlh;Avfz=+ I,YJ7ٕQ07ʣW,u=-BNˢlvpZsvZ+;Ĩ9AhNn`D:Ml/GyAj&rxtҫK|l\QJG` RU% 4ibN'1`>0{B>^/i勪s-j5gb qR#t*x&!ĒH|a4h||)—f7cL3|{@ !PJJ>qY Ha|1VXf}>X+8|n h?~4έZYڈxr1&vlB"'.#d}d MPqd'zKn6aZ ]#͠uws!bDiYMXLdո?4#5OA*5NLa#Ҵ5@լn;W(`Mx).WqVwH|65M߷j^Љo)g0TY(څ%ՊgИ=U=TMRGJ6+oZQ!* TAm6Bоʷ}YMd;/n˰am@U.$~Q+_:3bݪ`P,cd3W7r#DbLC<a\unCmE3I|$$ELew!ԋީˢX#hG|س;596 TLu=;SV<ʥApB7d$OZ3]i=1z|3s+Ed 1"Nȣrqu9Ys3VdpM|6ut`*4{վo~qъ *Yc!8 Q&Q7<-$TzD:-bbnyBapَwI߇s"h[(٧^b!. #X"|T )ߐZ ^~X,ڧ@{ҤןuUtj]- p#qD ?eή懘&_r7~)ޘT![H:+ evj͋,]4rδ1MrB>UJbSyX""}9Y-ֹ|ޚ؃FH(>l(z6RӍdS3Tn7؝dI2Wuo-If]sqÖg9+Z7B[lu8.>d:}ʰ ;ŏ\!qxG>.*/ֻ|ϥO ØVo2܈I5eR`@ԟRN\&~j:BES"Pt:eǧ&d+災!lΑOeβȍ`beJ#14] J x r 7vNk=TWqo U_05m}b%sZ]P!;jh^89'jqF9eZc(>+ 9R=\ߟm0*e4fHr(*V%Dh3:5dlXo9鶄i~?xq9:Kdu3cn7#k?!U뛀d;;ł/܏h9DWuzـ ć?D<ϟ2k9h7Q ɷXAC`@qaxrAXQ,֕,Vfzځ-6!~IFP3S_j=A`lHgZR$/༯WOF6P`Y AQefV3w-v^w5 :,j'#NɗqS"1J  $D\loY}@}6KPXVFyo]v24 sw#>[߹*b|tsj=4^|KVJڮ>/3qBj_M)BUeV=h "p2f._i|~mkCVRFLOcw[a)U1& dtUlpJ;J^ B2y3oa6GE\;5ӼS]gwWB%q_Y瓯F/չ`n.py!gGB6.{սϕKܨ#qXF>,OMxFC׽7O0 )Ap-g-ز*Fx/ [nɞ X% te:/0&ٳ`榌߬7|8&jeHk& [~Ϳy86{~r-x]ȶkzZչ[(PQW+U8oDUfЛ1 U-#@Ȅ]R"ُ5mvkPL68C#Btv+sgO8J ~T\o0vM #92t Jz sDs\kL6ٖdVXAM'gJt,|CJ5V͛_rj^l'O̷ n.\/m $j`h&:q%+ th0L+gH`.atM<+9q28寡Wƛ5挰":Kn|1A{DyI'% k1ڕer)uĂ}cpFk4`dj-wtd#~ Uv̌;}⭣`S`u.KWn9j0!1{ W>s1L'TOd? v=Kld6AfjjVxSȣ S ODz.XRS25N:LB%6]$ץ%j`OAp[58"@4rS /Y-}@@ "+{$`3/!?!H,.o$}r1QA饶yL@ mgČHsk\%0YP9CJQ,l;9q9[-:ybXELZX+ +mIM~ hr,2&a}5_1W!+{7嗁*F#I,40w&7R]Mo'zfḭ~CLb!D@wSo4e׌TTˈ Hۖl=Qpy߂=8Eͽ$9 G3CbgApTkngM/pkD{.THMJ^o^k wy푛;WDk@wci'6|I!l.kk,B" Hlף9>?618T]<Ҵ1EJۮ7ZKmp؝*\ާ}ԁ%R`P&|՝A`B} l<u}4F;˕oü&ظ+Y xoJh3p&,JpTU;'G!7NRЂpcZA'MEFM,:+ԫFBN-ncBU2gtOqnؘvFxぞ󜎹cDoQ"A[$ص^+dcPxڶ|/O<B[ru72Nk+4 ݚV 7-pa,(x3sG?rQ9ٖt sI=ALlV1)%F W/׋͢MtKt|Z`oímC{m _Spp逅]P8Yr> g5q)s{4Ku: kG3^1p(m ˾ATk*^Z=q/tV|DZvVV#h'6]w0E*C NY{W:"=ޠ')4W7c[7]B6[ rsm_jIDsej5> VAy΂3Z,s<Ĝ.b0)& ( Q6Ῐ(5%.fC֞L(9'!k*ҊX+Re4iSeFUޔ1q4g`q< (1pWD B> M%K?C+|Ϳn?Do+\$K&^?z -_qweG0e}! /|%,Au*@@b ۻ#0W϶j~R$O߀fL'd{C 2ʫwjY"ֲ*{B6#&vo#]|#v?]}D̺[8rٕPG#>|8Sx$p8NP@઒3Nop[Өۻ7]2!7U4Mq=T$S).5$a%emG0xȟyxM^K$!386z?aS>c̍Yxz cf spX).eW;>+o84QqYY ȯgaVG': TRbj" KtI1-;%R3J%LVZ@/c4|S/{TgǟlqO +jPȗ5^ d |͟$6"P;j*VFLRk̮Y8|=yW DIEXPFL,qE3޶z;(2x\n`9A J2 +6SeL\S'ŦV+⤃{qPW0ZR! =yys AmVZʖCMDZ8L>n۾hLX~ YV^rS2Ja@$ԝԗp3D14j64^î˩-IJ7;0twZʸ%վ}]a|o? { *Q=q%QįBc|+q\Jցx4/eiD] 2?ꭕ6^{WM@aIgXv]]S$:q_ғTmb¸,׬7)%6` ~|0bt |҉);[R:gz(N`Z*"٦e:p^eh?]+* _7a" OF kwg ߁_-prmZ&HWfiDUâ£L0JL"C/6T:r%PvW((h1 AINgh16_q`Q ԍ\GzQ^5pS$c } teHB(RN9i1ruťӁ+|.G8: ci?]7OZ=Ǿ]=@-m:QC^%4;wgz]6Y?̺.@kcRr(%3ͥo-""^]%OyO-°s*Ek{lq H6*jBN%I?B{oC9e,Jd0C#ʥ`\v 쀮뻿wQ=cPZ ޡ6ʑhqBg- 5M$KYy $ܟ_^ʹ^H r3ʙz).mX7Q ڄ#\zM&;\y󶊚,gO #݃WZM^h Bkujd.nGuK%Śj--8F;B#nH푅\dr[Z1/w󻠈8 I wד5Qۍ%҇-Bw/-f vn::jIJf܅>n_[fͰn1Kky#ّbmqLP!*(9gVY--I9^PͿI S"`<=oW#q!vAFF~3˰WV- Vr/eOjSLI,3cv_A`:ÌrqJC5XPARڔn-}@?$ꢋ^ :>I)Q#*~O"T=O-#n{X{TbyA oGƵHn8K(aP\GagV>Z=gҢЅxhY7F\Ehy2"aq*aJAjƾyHW4s1g_J.ʃ7pFX[|6TR~fIK8KED)ǟ4 6$ x H# EMB.#2e5I ;xs'jQUv"{OXn ?1mpÍi+Gi@1\tCk4:gZT6!{N z4â'^)!(ZWXӋU7dT-OJe-헐 ZN,Kٕ=HЗ,໛U 郔P`"= {MxV̓{(ƕ#(N3#Pg8V56|@&TCb {=!=SmmkUZlIFzFM7Wl3zel=e/aQ2?|uv/?5O^}LGw Z Lû2 Wp/ƻUYuXpu3R.WT * Qảgt8^Do HLGEQ`\eEDl^9]9PD1|*{0Q!5O5)#!>Q1WkS)Z AGȰ@˚ԅ$(,E` cQuxF/Pd60f;!5@Z"Ou}#F ,|=AZ]vpqAneyo+NmݔBCKjۧ Ku*gN O_VGwT(_ Pte:D+eR[2phSzv zԇ._} (mFHɻnnؓ6EU~}~2VieQ2Na~_A+RO`z]bjP~o9* ZtЭ!89Hj10^|/._v,t's (9}8Ȉ& d`w-5N0KPX1{l,9_)xF1tcHhg#'#2Z:J\ 6u2o4ftvmrtxxW& >|u'\ ]g*IdӢC A |⍨@_-Bub4W<^/-g(h!h 㝙fMU<_9emARi\u[}NOaU#pZ|P&yAsCWS~x9s^a@"LӋ 2QMWexSRIe][܄{ǖ[#dSsIC@[*݆`{#fr_ֻѰ~ѵ4r-!r>ݓEkX?Ic4 F҆oel7ˠz*"{ ^Tc˶i@'8hh8`-zE}ǑpϟM=JZ Is-8޴;R2,GA,RR"O09 cSzٙ1s% ,rU8ӆĬ0 1У\"V츲q9de&xev)2^ )u@ qTd\ߙz^7uTl{D/qv_a)u}9f`X.'CtNBC4-W)pbzap.|uHŷҁ8@S6 Ga _  nՀ}1zy5Kq4um:5W[>qd2\Q7ql(rf/eqz|s]H-X, K >UĒvhf$#~ WX<0喒 Dc![2ԍ|.|8 ZΑ(sזfc`AjeԆyS-{ |QؑQY4tEzߏ,`CSY;H}`a8qAۣaİVҶ=㢓R 䠞O )0+6D8HgM%ĩ J݌SH^i1C 9sC[b$cgz ّIf2Yg`.͎ǔwy{'4! e_I4VLvKtC&Dʴ:Mx0j B ^CG[}a⌨,r5D\^&ɿ,ʏ B_j !P=vw{\z7 m׳wzSTK6vg۱[x}% = Z`yH;pmvâ8{2ˮu5ݛ-vi@,+GfdvN}Y,[ &MHtDiJtm q v+in> 0wHU2:+ȳ~u`Sh?7ӵã,w "jEX#E@Z!K(1Kiˮ8-m|~^О?s89ZKsQ,l몍RJކ72-JU4Z'Hu!EK6Ѡ\F )p!J7#Y'f ]5XKZ(h7`i%bvЏ @ LۖcϩkBI*&@-}IeE`9}а%6zk 4 DqiBZ1/ap r}(Fh^mTuX ^7ݦK>s3V#w<*ً[ 3 +dʄ.*nmD؈vm1^|FzIu#j[# c#󼛜@,gYq@&Ev,'Ȭ2K! C5 wqAN_V+opXt]uk nruT. £B Lֽ 2]uZ Ѿ߂ֵi ̜|==['u{ H_Oq{MD5d44{Y]Xox;Rz‹1j3j VK)P{3zKI1]*;](Eݤt`%iODb|F& $VJz*$s&2w mjEFlh{)б=BvęzKĮ7kXX=G7uY! MGuGV65 U+Wp29-=CTƓ엵̇i'g <8C}nRRs&x'¿6 SkE2 $]8|q6/P?xy$&s~v+liKLlW/ۨ}$1-ZAP pa"I98oaa*ۋdS+ǽIn-$o!L l \v0"H0<zBӶ{BB-v8sfx}gl=`WTlstTRd8)a"o_:}m.fw3߿#d(r$o)]ė 7& f{`^^ 2B[)iK rYkE$ј1S%+ӍAԗ,!ᨇ*!_پ^ρp8j b%rHMM_1ZsDNN(S/ĕ5N5L`^){׈'yπ3:2-Ft·)kj'G[]D  <)`[tqu /SsF4(D\*V)v^Y8FcE-*~J-@n]ΨCjk"Z5 WL$ ȣju̟Kr\@J-3Nڹ)s(5vB=4Z՟WlW'D%*LsB7P֚5%a ^em2 Џ:B -ƍ.*U|DeS~Tf  l89Hvpp$a, .⵭PMQCN]jyA-Q6l2,WwR'$$̂2a;PczHŃtmN7%Q`r^W8j$0{ U(EN>Җ>O:$63lxQZ'axtS@ f.XNe-)dQpTbr'@`rSriWz_)inx]2::HlG4*Z0Jt%ϒNy*YL_MYpd)os aEOZ%jYcWijLQKO#cᕴ 3&5Bl_4g-2<d &(6*V];G5/@_]>HW5bfl7a$v@攄,ta#SK>oFg2^%Ĵ4_3eCjjBC# c'(wTtj"uMq]Ib(Afεqyځ`]'=VFdG ޴7Iÿ1bBz>*AOuϩJEd@8,wRy#B`3[A?8 e"z%G9p !x'>}С*<ZE5(94*ia17t/AmRFT5H ^;h͑m)}hos:2G3U@ɲg VlCEvm~`)H8Xf)]޾koi 9YN.Xj/aAڣc|jvr`JM(tK#t~cb;"N : [w/T%EcHII*M~3@Eu" Q,TgL%Y O\1@ Ŀ{qn݉<hùyAo;o `L9lr)<2:vb:T ͫ/K6JWdNF^H˜2z.<#"/|cZ'j$y272:4|.fE'q*Tz \RK,%S.;̘}7{5G栙8 >WizM(}2q:JZ=Plztx=|PT+Ќݨ6(/q2[irYb@`& +vWfaOA)*IN-P8Q# D<0~]KrĦϳ YDA8ЂrdžOtdFM!DbTȆx=DNXuvUG1yFI};2/峲a )} ZU;%ƑmP@h, 鸡}54I"so%͆b_֘6VuYUP]##kߪmKw~DBnt_ނ>/GMN)#,ao$x/ 6W|ECkmͣٳb G Zy.UYD3{n΄>*KGXJC&3H7hcȲg"6* GQ9Q9 w,\IQ2P ^>ő7C!AỎ!t]'EK zBNX#ONb hR՚H=kR&5hxgFuyD{ȕ,#Gெ-/`y^.8dCۭ|*Hdq8!9Wz)ѰT֓2md\ YݯX{K2]|l4tiPfXrЦ͆Uq;v/Jj.:3O/kjnG64\pYєW"31_'sK-Q`aBCqbz2˟nA5!fֽ|KH,. j\ft72I|-wqFWv}FCđb1&ABzctHոC'r'YʰC8}p9އ=vڀJíГ1@<ӓ"K 6淚QX$d땎m7~ST6Z].ߡhάq s"T8E5i&LCkAdnMaMmQH&ǖ{n]]HJ޳% `]3X N#q<.IJ.~NxW ΥL=$2>,cZL^=8;ĴJ3qGZ9捌ӗ&Ml rA+Jʟޓ-m{邡 A%HߢA@#<-F: mT dwH wLjì"(-aˆ< Â2,g,f^~wsP8DgBO?`(ӭ ),Ca9rmoJf«xA!oU |#!t1=Vrpx\}(|2:59/O |+VK+O|祐;B[5qܤ-%{U9 E8i4r/'B;WH`FXLi"uy=t,in<1,k3#=F l{hZLҋ<>"}j^L VƂ<tz ` ,.ڊ2[&ޤeTg*{#EDO.JWE@. Pv?_2[ۅT#:^eCť7sHW5;Z9,ހ?8mS_K"fvegG6EpI8aKMj'ud- 3֬z˃>|lӢXAz9& @F"aK*b BMJNau.)%[*~|nv C寅h) Pcl&&ڝ;Lt[&ׂ5uiH4:uRR >e{c'N]_#! Yaoxl*ȿ oֹ?1V|3=i[kaݭF?BKfB <gќ5[V!ǘb]g݁:pHF/bYs(4빝P2‹gT2P"hX}&&9ϖ%~= Vup%]va[FYnD: >c"@#A<ߔ2T[]{a=g[)R8NL:R]{2V%Zv!*tVJ̊T~6T<w#fOԳ>)8blSۦG2OKTWi{WI/Q/l }13%5ͿR-8\a)m3뻿ӂ,6')̼7W;ش)Ac2A'"hߊ:{1xT{IS g/NƅdP|}L1,?j2'xhE LF s&!5aWlK%c- tߥ+NWX}XTXgbRnI%rI$hһE0GSfкbЮ?W2'ʤopW/G{(0 rzS\͋{aȔ%VOgTjA<=YN䛸H#S)fb /҇FjN*M֔_>%$'ˡԉfwUmE8iOt iá1GIS^/5.'xhs:FM4}|1jK|<r,.#8jTPA61ƒvQ_zcg>^Ұxl99H 2}nσ[0Uj+tV^`.x K/(yU2T*v+>;ɾ³-KzMRw697\(_,с@UCM_t.'^s^P,3#RuK[  L1*c>[&鋿u{C1|O5e3Ī{"yb2;P=Jy;y s~kŵ|0m TIhbL/Yi[+j4:(Z{kזL( ! TQm܂7 | inWh%`x[94B]|')ߨ;kYe=56*(9LyykkZ @IndOpDVOR6j^jxr82^SzRg=e<\Hx;RL xcC,{=9s.x͚zFU)}rH"AeccNͨ:/<- yFOXs@&DD8QS@ JIe<; 8[3&G^$o`䴠/I63O +'}`O&AHJ*iHW8'5)T6c9'e ʵLJW0* 宯[/GLi!9f&=4KJE$A6ƞD^aFGLXrJ,#9G}r"Lt#~ 6 :Xb([4tH,iTg+/K+aqxU/)'j"3rO&Z 8ZD&3h$sb2?DH/,~J8jZ\"'?QƃAw=֜XP<"]Zα7_uΝfa_kv6V٨&(h@ˋh_jVIN2mr!tH̆rL֔êydKGJ׹Pz-F lJV&AKL}`5a&Iw= @ejqnWB} 3s͒܉Js{5ӒdM OV)r>x)#m?j$EQWa08LjQ8.H}^L"hoq! A3 7} G,80O$Y yʴ3RcekUN*꽲ϞvM`:Yl{z;TH]#+";m2r*JTcDriyPY&.$R8#@ k xfBx.2ob96И$ß{ɩ3z }&V(+OGÁV]m"]apŐ/)!zF] 'q']|HGYWh|uJ 8d?yXq2ЏHn<2D~]q$,o۬L&Ł}oc) ;el+Erlt=}*RBL".h}2̨7T P RW^Xfݳ=/P9]?C# i *3̉"Rۺ8g+V[;1ue Np4LJq/n=q"M\$*MYmJ5Ee}rüIPßD|_ٽXײ,jSߏ4sC7$XZ/s;$dFe!5ן 6~ j͎^p,?i9s&<¶д rXIß<:KxVg)O1z&*zp\zz'=v.>Ov}S1| +()5eeOB&7Ʉ>Ii#`&9km>T6>݋0o ;kmk譴'~;簚w 7/f~dϟ,7UҀ)Ǿ`ov!6OG'T@Ol*qQ q|{_t!WjR$7/@ܓNM4?opo v!(BhxUzq4q5$[͖85Lj-Pqwނ_A/n)EaTrRcM ??{ J5h@`FW_W_#~pJQ>43fq0߽C)Fp8E=?7kVl-b xD݀,O;m6Wab/3  df O=IJ`<1]> +XjѲV/䨋1!c{Wz]کNVJ*6'čPsP$tی r| 8|IGl2KU$B+v}o8~ˡ>f_]m J4؛X5I)=_% ͸Jg0T(5Swʐ})-݊[ʣ*x<3dV 7GEn}m`GџNqi&\4,˷Nۅyz/SG7N<)coi6:")wF\ B)axi 5௽a d*6! `'#[tX8qkGpFbGVȡ5Ľ֢Y%ִ6?)-u|bAgOX**ΙmK@-Bt~S4QwU__prcɴ,C( SMm()k rP>"xY-rm1Ŵ K n%'5P]sE*<.>ϥ ğ%!$CQQKYPaVsx͖HkQm=V?&*Em%6X/so"šZR;:`קrh^n|ևЎ&OʲzRW ~qû ْ$&K%knΥ3HukK>p#c)9s2M [Jo !sK7N#heKO|Z=&nTE)3wmg~` #rC1)1P]L F3*3?>N&ވ{b;>8r}i+ú(AR:v|gUOqzV2MU$<9m:qד`k' Ҫ;V_P1՞zzKY9hg2iӴL!:a[\!`Yr\U +c$O!w FH!F4vHD+zOˍ3$@0%JB*vK(m='7 lH_yLQI#)i4be~kb3ϺdM1J´itcR5=|y?-gR~}3pvjVH xGO~ir')b?ivM|UFEԀ;gqcs |Q^md*vV3hXXpzuK=`jGE捩J29 yTqeu~%gh`5taRB0 ) @5}&&@5Wi,\|qa^g<Ȏ \[;_\}D=En" #{&TOx "Uj5RI; ~s#s[| }p:j" K b8`zL'χ*B^;b^P/>Tbs<-rP[1#8k(2Ƒ2LeCm[)Q4#`cj>".:i-r`abR<3ι81w9Ҭ6]vz;̈0jnq}O-HsZȫ? & FS* PMֹ1 LBEj`E{-ZKԶՉО{6Khjl MfϱmbꍽȗQF}R~4tO[hCВrr"^nG1_DfLW_ pJj)E!$ٿ߬&R U#+afQ8u G̰Y%\wh8Fuq`4Ⱦ>Tn<2[p: /L('Ge4#¿[f'UYo9CI!vH<<h0S=oaA m*t}u2\SVԡu%l6 !qvrCe]:#S)u({.!gD΅>3Q,)JֱOflI`dV3GB/02 %[lK= Z7$I.T\WqFK&u7V@/oLQ~=kĩ3oN{4d<]ij"88 ̖@?T^\F4ةM+kCaiS?9R@s*ͺ RH-B2Fp%)&IQ[4o_lߥ5eIN$U^~y+`G q~taC2̹CU*d XK?쟞Rtn4K*H%.`&9CsMF2ܯ98K,4s屢)vWip/&"fn T+%]9543F54v8 B#pyHD;V9nq8P 1V]W H\UP;H2#Y|GZLJRR-l%\Y=ف\3oKhR:;F ȫO+pEēKFs ,'$)Z.9?[ٶ%E7_E!13m/ЇPw/r)PKUmvet+tx1*tط1 U4dZVfe$\cЕ'b/ؚy#!"xs-e9LjC3䆢'%Q=)[ؿpUrvn(g>ENN<ܓQQivj絜ĖH*Ik[`Dʃqw CJX)h7r.+'%BGz4Q2"&'6K6IOn)%M6F( nـ]#P.1ܱJ3'uVJ^{lUZTshJXKps!.hP{Ye!9$%)ˆ;dI uf\cg93TI/CP_JBxvS#ux  qɖB-p;Mġހڰlўw,n J͆ Np N3;_KC P+"p\_._.CN<M[W`sgFT m8q^m;om#M u{ѓb+OG9ܙz_aYcbqdEaW|rb)aX $F*.l`7_n yc aR[0oڬ:=cɧv356s4ӗ_וӏd' H] ïK;t0ȄKR{17acϻwWz0dKд6b<3 Uj>jLi43b|xHLl/}srE_6' 3.}5(q3q]c_eMLO@ʹ\z-,澫Yg$^(,!<>H^A#w2e\5u?x,=^woYit<~"'A@gD=3hPW,@_z{GH S7Gs*ywC"!kH 9*J <g;rL>!`|mZQ=m"CUWqJјQD{G_Ay漽֟yxAߞ{kBԑ#T6Ud7ĘrŹ YȬSN.s@?:q(zydI@`M;Ρc(d >lHa,sfbf0Ç<`-Zncj+y4c=hlt?Rt?͜DxJn7d' c,4 LAF^W[-;J#=Oou@$eZcn:;f) )L ]1DǽBp7х5!MB)~v-;Hd'y;^x5`g;êY5Q)%qSKp f0?\wH=vH @#x ;jl;G?e'!~5>;L5&mBq̉Mc$WPܻet}WZOs54e_Шt;)w.=;ӭoGq&B)eDJM+t:w!#O껹Fv ǀV  $\u7^Puu5`jhܠ3S/й8 rHpAE`F$G3M PZnEdvü`.FnCY):dblc";#tI8#kL:R*d7edJSU'pk̰v,ur5 T\OAfw-[+vY%.F}qu ǧ$ BK0 iS$`j^Ѣ3T:-4fW,S< w<:D01Qï|V<ȧҽ qmOɼUD'P ehf%/-ɗ%Vl\>>kFE3!K GՋJOpXi#: Z7h@< Yl\,ɉvz/I/"t*P p9zL0)mJek+xEuUp;nj[x/7o SMy~Ɉ]۬,U5V2<)՜iU%%Bx~ LOR.i[eNZ>9duվXz;R; DZԮ>ލ*b[0lWJmW^p6gjyb f ζqb4' J ]i\0J0zbρY^Ck݋ MN80{`:gg׮3\!tgcqb(4O_[{H20MN1VY!_^ 2M^og5$8U$JA?=!#f}sC͇khƙ 2Dk!H}J#˩Hz*PmT1!/H%xS?H (xp l C y=Qmlr qz-: ;<$0ȶ`33:tƁÐ]:dSyeTRυ I]/Y*@T`XQ|A4 uCe4e?HDٮWZ/h.pX2 aYW3: )ܚ_Ϲlg/pAr3vsLZ31=kI [sa@g:ד18Ԗe?ћ~}X8t,IBĔ,>(Yԙ \ԑ*,嚤Tf#'+%sR@۞Uнܪ /dx#R&}el5,ƽT. c^}p`ҿ ۮMv+yepʫ⡒X]0@t ',$[ f4O,0RڼRH݉; Mw["oo4 L, %.i16]u'9ў67ي'.›?g*+C{EHϩ39e nڻz >TRg?ekj0bx[f›G< KBK|;`wV%҆s\fc$N'h@L^;hW³["OJm5}ACuvARa(!~jIQXX)b5 ]_\1&'?Mt?u3#V {VomXw Daӡ6&ҬH'Zʥay==LG ?2\=L.nM%: EZ@7p-#8yۅ[o4@'n@'> (8ُ2ZhbD}%s!74[_ Hpٝ\‘1$s.:ʿ-_bgYLiY\JNl~TOj)GpxVX9_tTc];U|C :шrشSXBp>Cz\0ΑAOVtS>׶ؤR-d+ʹI } ٲ 0-PX<ϒ wMRhäp:c{Ui7^k$FOJJIۣǾ+/3y\ 'Z<ǎuԭۗb#ygr?އ [F mmz|%2M1L&_v+% |359&=sHۈ'E&sAS (h,&9UbDzGaL># {_82IpcҚ./~9mFqۮxpSr\0vӂ(7 @L"_)w W L n\(8$I`NqX끈4> ojꓘGOTTmO(D qPJ98}Ow0^&ٴ0hUv\ XbI;Ru/ ;pl8FةZ|?Cy$γ7eэ?ƨp{TuPq;v{0Oy>QG9BSscrt%6U G _d'~sHE\&G[rVWR)`9;Efd^YC.Di :7aX~>=rX~rJ5AsI .ݣsEbh-y+'xBj|1H_c&ɑn GUB4fEe*2zRь똑ѕAL&PՍ nT>;~3I|D ykyH؅V(K Sfu#fz;gW9-t2ĒJ͌3F${=a g3*n^~$.]||ʞ#k*ōǡj[q\VCV9ɊuG=X!T#u~1%ɧ0,@nE n||Xhbq5'@{5@A?ыf\IE9fR Ͻ9l`*+m5 *:&k6lDdU p?;ڭ~@9&!?͹vb0h1ҚKK(R v.&8V\EZtR\W#]9cla܀o``/d Hgu-^Tg3*%71 m锾5ǯ'|u qCKzu[+X$ji^rVgJ5Tm+-?]qO kyk!%Rϗ b_>վ.nGM01y8[D觢Peuu༕^s61)YA]m6 B4j qQ~:i]B HBAX'IćyhAb0 X6DvrIn+%@b=Uq%^DޕC"p&BB{\#)dmUt{v:P>%u#'34 aLʢSAD|tz|q~\V؈F/#uǓ)3:*=]?>ۙFR%8h|T(6Rrc) [,XEC}Ov!pG +tj9.Xj"+DlBWy<}kWL62 3)Llf3@D+PvCO\=p}hy/^5][4F7RU> kG( );,˿1='ɞ޹P#N^ Ruj՘ B@iVIΈ&*ծ 3Q Hj'YdCޙ/v+b9 Z^H1ݖ45Q +W~-i^n!yF5էl!>b(gBxT3I5Xڼ ew7o~`op$6) =gE3N%_ k,\6CbuƸߋ%e- ~2#yXA9\ Uo\-̏YsTMF' R1? DێWr]qYqÔnHz!T57nfuQe,ONAV<!՞}]̸&' H?*%Q#;(X-cpqz(~&_\i!P?j'jA@}Ui &"Ɣ;K U [ o-R8}'Q92X<&%RiLBvZkHrj⋿S2l"~ՂaxU@3;hIlՇj _sOZ.N(0JMM*c}^G7iHEҍ}/M,}KAd{Ǹe*(E"ɇJlO]; y E} o=>.Mzv'/`1maIF¡̓W6JECRGh JkJ 䡫Lgγ]Wr=BZ@e5rߐ߲ ͳA <9ܮLiAE8J724h'oehZOF MiIR3#4YZj~0snZ3JQChTZGdr@M)sIl}QX (MDY)4rͭޝ/>b`0ãX0cX >׵tZ4Taar5@1 I<yyZhdoִ'RbgQ 2O[vز2#sDҽG Հ@NW 싰#E|Gf,gQ=ܭiQ"O GBFvk| RX ű $Dd[&ziL #2gxu ?.ӻ8_ZR=;QPn8zzcxqCUTۘ;A˥_;'S/.EߜO=\sgw.r*_vkF6S+/'AA9е劙?rh%e_F qk"9vv94[9@,N)V{fa/܋?82ȒZ 1[LOV{Nӿz `.J'F70~LdI,^T'qW$b #Ip8.NUZzb!Q>́pd0%؁XrzL[{Ҳkb W\\HI,@/n犚FtWH$iǵsJ⨴3 V\!7җ(qzg9k-wjdQblZW Gn(Ƣ p8g7jJna"XNHt/!Bkpi@K 7ƒNT+++7Ep*EG04ԷS¤XK\S* 2V?vQ(%f&'t&XɺtYA Ӂ:,T.J5ίgܟ+_d),d=):Yɫ`CL*o^](W4ǒNXEhܹhBRv"6y!Na= KWVڛ~r-oB[ 4 2fX =XWmn% _S^UbџFܮ 54hP?ߴ߰K3Hț3p6j^KTS2>1sYi! UJ4,v4ԘOf D CR+}5= ]t (4l`ÒA!ubeF!bQ6N\zKq#O)0%A̝pHr5ݻ}oy"Zt_sg[yS~[X&bvjWՀk]b ]Yg <'L,wJ^؆e&8C .:bhxmעW+%INBz~ ^7-!$4\˳PNdjӧT u+r*@6WgԴ;ݞlU%uF3NCTIh8>Zd*=ቍi&_f d`Lbp/@vT;oai@,!EƢmij@N]A|f%Ess ;9¸4./ʂHl0N $?Uj+5+^ ?rdN,.xǜ+{3 $9giꤊ)7A| b9ɷ,4>u3[=dvYH&[8.u:zBBh)f3vk! scEg8B/hX b s<1O$[և/Fn,o= DAƒoo$YVVUϸF"H:O3|ԏ.* d*M#D\^BAl \%- m(Hb>`|"{ ȡ{ʮuOPjā/@/z=("|.y&DnqBɧke<¶ypn[plJrJmF._5 v\]VM#sEYKU~oT@R9؀y\4*}^g0[{z| g _j K.Fa&_޹zQ)8viK~*hEHcO,m 94hHX.a*fFAke+$8jVb^)׏FM|o0>Plb j'e4"i>GUQeC=M__g2hQci#/yqYb 2Ѷ1&Φ!K 0Q3Po3 3$:P+d_N(T6 ƀ ~ryr9c~W|RͣP's">loeyko!*B3;r4$&!xRd$ iҚ;7N>_qqPp Do=I}[v*>5<>ȗғs4?* &e|q)tR^/EWt),ŴF9lJA-l%bX޻L#iQl>kwf%;v29&$ҞlIqKO+;D(_fUCNUXID|TΧKX9$ct|Zp^z73EϣoqXqI^UF :>*3|eTjfl_-d$y{%wоǮ s2}ȅ#rl{J {k[3i@*-@(LL< E 0;eCxcv|+Ir'/+YBkZ DzL5W𼢆 +:TAC<&Yx"鎨OqmkmcL`wMMnFus~)= L:')Ѓ:~>Q+ch~m8y3ZoRgh՛CWG˗PH'T&PZc+kmBUfx!̭qC{fԡa5O!aʡg? mI[8 "#߱b==CL@\3]''`y7ڇTޛ,4_{SHšSPigtW/ Ʊa,^OBN lDaJIMsA"膾|)Ԗk <'9am.' "g|P51'm閿2GȑH7$iI5g?MLR6J2<`鋏E먄@P=Kָ3O- TT~0 gs{tGovbC,Jw$-k*>?Y[yY+nYaeչS5'+iN,^67P ^ b،N}|"EA I%;HUh 9^{ bn43|L]9?S5&jI2Ĝ辛:n crV|Lf:~>p@J g6gz_I넂N^w=ޣUx%/~q~CV@$zsI(QK$]zA7$ƢӂvcP|\{t8kMR'OrǪ| nuV.^%'cRsK9QthP]0Q$&2VɞD"Wo0|̫J2ZCS em,%ƿsfxOhb {HzBe2lw5 U{EԜZn Kh gۚ+؁kˠ+"4)FX5 2RG; ?ؽ, .HL9\Y8Z#!"3pjPݴz1G#v>(]0*auKE/N3Էߧ we XAtu2OE PLץ~ hb_5 qx4ҷ:EKWϻcg ǚoDa ;X|yZutG8C1R$$-.J%s%,j",QYcY]$HHɕ/ISŷndPwRb; 1!a`uC=j/ Z`ޞ@`Q(|j2jl1qcT/{O5ۍfC'Nn.T+r ܼDuP*}1;L>g*gG3g~l55ʚo)sǦڂ9P AaO : "(432 8/!Ja8s]J3V*`KSN|!2_y#Q, t"}Z&**&L9gbgE\iO{-1q\AS_NUlhvCI$[}vwRU1Q*F_S4~K-H 7n{ĸ&S%s[Yܫoq@Ox ͌)K.#בsVp%B{{t֮@MS;ZJHtF݁0`Vp9Sf8Q~&HrV~۱v=Oa{78;VB}uO`v^ǏX3+`mR95 W X'\מD.%>[ImSՐ=}vz2sjGƫ>RŀxV6ʉ؞?pKu9zx3$~:K~ھF~}͆5֘Ozx@)"=~R-TJ|_,<%A\bȣ-Ͱևo `}B}vc/N8Љj&V\4FO [uX%5z=A;0;)^!':~i#ߐ1fk1@cOXAina+ Siy'?472Ei|J{[kjoqy"BQ(Fij.d5A"V5%1%@L'x=:%c֊ P:UȿWYq@̯,dOTxdsU]g/2-.MOKH~/,kCHiV#/]^ßvQd+>p"\B%ٺTl 8ҕ8,a/шo VZβrv u'帵X4%I/i=I^˓՚iQ KK@v/L4lʍ ,oFt m&ÆҦpd4=Al<,ځ1">#H|k!XI%nWq@Ӑ:E_`3F z&?/&b5Fاqpnƍ'[:\~1^녴mŎJET Y8W ŗ;=VG9;Mbo~V{m;NoCvXC$EV#2J'-7cFo5?9b-QM~(0TS'#x+ LR jd%N{FN[~Ot"s3ÅATTcc,nA}2OCA\c<"_(ЫKlpfl\3;)rI?V\XͲ hV'6ɴ'^"iPs=J-3mnu>z&M~)~]=Ae# X8 L\>(rYv|)$-vVL9qFw[$DwZbl+1EH3D17w)Zqh&!R׎X{׼ ݞz~ЁvC2q% iOg@K>.!4dVucgA7SV _ poq% I'>)il&M| Ȋ9A~o)_0/>A!E.)M0G֟6Ut(CNDM`bLx/UT0GzUYt aLil>>K^#r27ej*BrU'_'Mi9i)y̴'\,n'CL(V$4bķ~T i `3~o#ڤd?_%W`!PN#/;kZ +v&MVnP@mľv15~? )5KY/Sۂ øt{6;AzP'|g\I𾗅u׳]0Q5H}YEzr6jFh+U1G.oE|y1Ty fhQ Us.aR) yk 1<{iѥ3dp̦sWZrd8R22> -6ZHW]X oCT۷*^}EBsf_N-޳ypϲՈL\cz~=%'=ts!v0H /O'C v4[n`=B̑sӆ:o uҩH9] >U+YZXвv hrֿ喨j)PcdO>omsZr@)}jLΨOFטdVE@ L' 5`g6@e^U ޖ`+<(vsns73S˼Y},jW1-r<9fh{]~މtQk>_f82P`t#dv}- "G 7(X?NRU,Èv٭Yw;66:bT%ULAObɪv<&FsͷHYDZ֟ -a46,iWq%r3d!NuK`Ցn $L} m3:44hlpp@gJ`"JTU#>Mdѷ,m04Z 3)| ?OĆQv(v0tkHZݎYX) u Nr"Cr[΅İg>Ψh01ȻnCK`NJ|.W<+ǧ7o˭4M=饩WƵᇳuKӠ]#NyY8z[s_kxHcEiUY+PFwC04Ʒi|a榢,3"BA)<&_At˽\u jڃ;RܰJB 4+͎)GγA?8=rgT_ pb )p6C=n1"_6N@[oG' KiVDHԅڿ.hVE͌1@V_<$AZCfL 3 Ł\ ;wq:屳 A>(6AXLL!Qf$)B;6qI"ٺ: e7# +ܻXX>M3I/;| %hEsXz =kk{vQF KX4ԑb6b؆eTkW~AIwPq' )3EE Y)5s Tf"? Q3|Û%ۏYh.}&f~e2IgVteOsO(91}7FFuy׌f]|@>ڢKWԛ9(F9Rֽ^Fِx~,JvV)Raם7y/Ɍ*`1.6>s>y,ƃ6GlP׉:64*ak\/B%5Zڗ'hw1Mak]âDg`NU{6ɖGrŨiߟ I49pfZPA}Z͕6R۽fJ9φQ9pSp.4KLeK|XkvS6 +~Kҥ@]3|AUxa79؞T[0la.V(ZFRsFWΠ Lux7 `abjܱ,Y~c:z'(-nSg̾FR`C!2dy?[-&1GGg߶EFn_̋Ya|zskHGNW$K6@ݏ-hduW$ٱ01QNN` p ~Լ:Qi\Ms0u 1VW(Y[^+娾6l9U%1bCD\,DZX[ĖLe}A6;)sN7p9E:vred葩6Ndr$ܷ`gDߌ]Hh,$l!szt/_{ ZxEͧ u=?}] ;Cݻ56eRj j{ 鄻=.s4{H)|S|1>G<|i\m;Vcbw}CArsFwEUAciN}MѿShVT[taǏD5.UM 4Ƌ>ߝi՛G9;ucچ+:/Y7kmjޡCE:p[U'dǝ$VbfƊ݋`>'b 㱢)H< B%aΎvT?cXشk f ,@(k}!&%[V2[>zFz')e02A4Ϝ+X14;:$(#KX8W_fPUx]|l 1O>&c^h>Q*f43 5x*K2yH Dh+w,F|˥t'Ŀj(í__MwQ, P 1\r2C\o'Qr灛v+Ddm٪?.$C\L|!ѰHDF&,;s@501.[b8U9i;2! 9Oӝ@M^OPi6~Qd`1A4\t -*Ma{+-뗩ce91vE\cZ]c8tUs̍JcCIS_+訩Җ qV]x+6wɻ_t#Z(4:"m9-aH13 m9UelC)eld)@`ҹ,'tl9:m$}(qZ*R3|zj<' #h 탺hk- SrzPHf.[Eq_=( }ϔQ@:ҵ @`h#⣅zkc K+*;o m$3h:pG ة֫f9-gtR4=" h]׸jI fػ hRբ9f.zg/_REkBOނaE|xEkqB2V {&֣VʿIFQ/Ya2єh7xbjG5 P>P`݂/g.;NXBWCE/tWc:>eca:L*#HVWH`?2^6!W(.7]pKrLyܰ6$(< (YFR+" }&Yߖ{[b|Hᛩxy/n/!:trB.@aBy#dB8̰psq?ȝ<Ôq¶|Ǽ1\ InWlbp⎸YAQÝ o7~zn'#Qhi34%5[-~&Y;+RqwjѸ`33|֜SOAr{Po3R֛ 2v]Kw?aDM=#-qI8n+}X±B8fwqBEaw`&"F(h5l;p] /{@)}s얢[0w?@v<\x_U75_Au屵RGl_8|W5L0l R}T}C_Nt"v'? Wx𽷤5Zˋl6 F2]C7I(Ne\؇ YjA-sHXSywFb ,' NOomκjN1O/ ¬]ԍ_qASJӵ/גe\hE(˒2IPҖb:ɖ}F3GMq\&pΰ\Ļ;lG6H~|{ܱ{ 3UyX兒hTʮ{E9sSĄЀ#LB/RV2V#?Y7Zy?%hL4k5?,tyXT}SA_Fqh9꫎r+ag3 twz)QIdRhTPӋ`T_?+.h~bQZȻ^a^j:T>Wo1Նj(}.5'* }BM7F2sgqHj'jHѪ8IIi;9+P,?Hjb,&.Ƽ|Wq[ 2{uD3aWѢ*pwϔ3a/!V&>)8~ebkGӸ[~ڹ׊FoqVygݎfGl rrV])9r熫/y?XW0@)L"14!ٽ"p8.n{뺢_ӆ<0Nb)8Ȫ[Q,u V^K(J5"ƘBWvRBPSi/c!煦o;'C\u>ce+.w9Np0nmKrqE`, '軓_)a\糇ko\t_uA(`[2c@3űM)82#^'o@M~F!vzd_"ynvf.$^SR!` T#zȣp*1܁sZۦtH &RduK8L']E^:j_puH"Epr(_UL-Կ ?`2Fʘ|Ի9VQr!>dc^ XgWidߩc~hWFu3;qMQQUgc2q/>>#a{Ԋ3㡶ej)z {rdPӑ9nqRB(ȩn4De,LV'Ol)=ڪh2md]e?EneL> l3\Bzx-+jɌyHV[95_@l$1V! &i;x57ct7 Lta=g2 h>*H1w%u|ڟ/ 16:u:9HZN[Ži3[YNPy8M_e_Ⴗv*K +{}ΝLT]n3ΕB= x`po^%Ȏ"E) !uʟ+0)5KJCFpе 6^>h1, T C|J?+߃Z+fy 'EGY(g^?&G&1~1_^\l1'RD ӹ^ON[4q0.BsV(Xv!ڪbcoY穤=bXp*v:ʳ cԎ_?24ԛ;XBy6bĚ"JwMZ&'1U>R@_ފЧ1K75I6|tYKP 2S906?{^[RSc#k9w7J-%MFqtv+(}%} '*Kr( MvM&VoX"謳QHYc=QXq wm4\lMvr|_Fm69uXƀ[ `7Z 4PfISvZA&O8T\]c{Mtn%]VerK톼6a<%Zo]OX}P TqHUCx⮇<caqB=pÄ@w,h5f9#B|+9Cv7_2J}WE'5K_*t6E/\8_ee8D/]lF=]31?ݹw4w)LDkɨew8:s‘Zbe!ؤ<\b3=R2n[H[T+#Nq8,Yp2NíKeRf ? |74{_a0Y*vښzBt٦Ozc.C>uÖ/%Ƅ|ƃ%^$3_'>Ei.3a n{X &0Ug֓,K#%Hfdn왧"!Y6VZ|S"P_.n^ֺ Zơ}M9F>y:jz7e.ܯFXPk0EPLWP^HPbnjrN6%SJ{+E!fNKoʺvDsO{d313v_smQո%sBﱖ\qNQ'QثБB~ڲ5\ZlVE]P^0H->P<3$CkER[vҋ-,ebcF%WZR\Ls S!~ O$%cӈǥo8>~'=2,'t*`}KV+5ziu즤ؾ5ʩ%H V&i]kF. g +(\)` CĜa,aIone4RpKa]T..!+$e *Qlטּ0D%c|ܯW?~ RQH̬|4y$8l脸jM0D}Ƃ/4:~NDC'}khThd[\IiY'.F ʦCDn9y ]pڔX E6,pG(k] CH +g끧 _>MP4)lsfaۏA l9!`НqM<lWx,[pd1j$rl٤+-/rrh]ߐd.0ET@}['4]qX{P! ԾFQ{Shy(O (l6}-9 `9Got1pONy!2[Dp{P΍ꡟ|Vܗ?N/S^HxLw3mo.%Nzl+YӤy7+-tz7٘-Z ]+t6 P)E:ĞX{_4p?A GyK7<AE؍>k#[-z>R}rUW 3.MX`}r6*8:%4}:\E9p>|؍Rxȍ6bK\CPA~(z3m0WJq 15j/WLD&M%@uӤ'`6U"[KfO^P.ٔi:Gg$-qkbI[ P#n0q{>޽R3d?U¤58h !Yǣ>ZlJ=_ ZeI2wy0Pƴo9܌݀OP-+Bc1Yp6y7#KVϐH{LE!O2 U7DDٵBxʣT*z0m>\ RtӶy/J avΈVF©U% ̂^ Bemj8-d~6"#"}<%ƜLR!>"[@Z5c#*j<Y9oydE:Iw%v7J3xt_ +^Ò߸rL!64W}GPݩFf)vxL"^0!(WfT[~ kXOV՜wcTU 4 CTά0YWQhdE5/R5Z#5&Խ u`![Ic([\Za|ߙX({Zmn[.{Vo9wzZcUVX_D@t?=41jܼŬ^/ݛ`>"3bE$Ӈк<r: @$b^T@?/\<նr}_pϺ3g{ɮ$:qX o >q1'#-D`Mǁd/˂Z]R#('E&0WA(f(,1g0pvr.a8GuFW'`Ofٯx|Y :;4e3L^U{fqת4yau_kɖ8)NQxD]toHӘ f:*W:ʺģqEԅ`?,8x諦@w/H3L9Ӡ>.Ԭ[8/ȽaQ>jR6CkB9Sn$EV5Ơ뱷,Hm3/1ND#(uU:RbKfUapa/O_=C #t1,N?;T8r|q]'FMC&1e'H[K@T00!{A)=I[;7b5{sz]!! ng]@jLCju?2I8DQmb(N2Vv^;ITt?nP'DZ퓍(ʻTOA>C՚2\*/YJr'3|}Dz-qݼ`*)ێ2-$ʃ8+G~5kT# u,!Uڒ9 l$Xߒᶰ8 Y'm!V˹h]Kv:*waճsءM*4 I3gxg1R.=H-=hX% VGe9OҕM?-1QzB%GN&^y0ru!w0!98,λwcč8a`܄ٿ\Dmkml km=#Ehmp3j) ȸ1 "Cj.ћvw,ӆNtZKN*N0Fz͊7IyLÜeH#sfz'EtݚgDz7{6 o-y3f tF$h٩[skB>,T.Afh9+!}ˣb,tOqI)2Jхd)oRJ"FK"Øw -#kF@_B` ɱ -E^7\l㖒 AFGÆ4x}i\i^տeBY7)-؊K@2D@%93MvH/xTƐ[uf% 1/u 81_ɸ:!B޵MAz $+#]dJ LY 2l#;[c[qAG$kNbOs`XQ\v||9  'Mu) Ov\R t] tVƨnggǺQF}'~|һdS8Vh"mD4,}A0-#ɞkA:o-Z0<%DxXIJ,9x}447v}ߡ&nCKh 3R6MB#;ۤKȘ 2a#TlP$y("EbS;KɜlmVSfPm#P۴YA?aj KW.tds-s*e⊭T/8Ok<C)-GC0V;& Gpw|TVgi9~F]:[M1kt@A}d33!bZ%]y0?А;6B9|<\Yaəw޻;ޗE7 ywM+ 5pAq#P_6jKi ѕJ; 1ڹ} r\5!>#[J1S, MhHȂ$3}zAMr'^j)ڤ?IMn~HY8 wfYKf1`m~TNbelۉ<3 i5їȣLf[fl5T`9B9@},Ĥem0EH۾I'f3a@#ht(Kf嶡Su=[t!$ҵgR7PMrXЪ!E`NS9_Thynn|yx .Q|C'n_hnF($4OczLEt,JgKzoU!dsU#Y>NpuADrTpX3"{⽬od1(:;XtZ72=>qgׇtj˹UO8ddlZ܇oQJ@^ZVCxenTc>ZmW(LEND Ikp$͉[u1r$]I\`Ӕ[fIVω#_"LM@ q-k5WR+&d|[NvK$'HoWU^i#:fN/o$H{U$eի@{u&6ł&%r,mA[gȖJ Vyb,[g(:I13!)afQ&NԹ 9_BdMUBUI1pVjC˛:/F9,'tJd(m4;ƈuu ҼO)i"Iw'+麍ɠ\ #u`1[!18]-4kD߈3Vb χtjah|ĝ6pf^TwgM>:u՚ ҋ]?!hѴ# Fzw;.,ɪ@_^?C1jR ECM^L7e2~_0iRYpl lifr`z'S6p׿߉̝Ƿ[tF'8* DB(;\GY}Q{EȥS eOcތԁ ,&d= ߩ9x@mYDǷ1`f둙o('7vFH]W N4QsYn+T|(!AI#3AC]^{=G"e9՞}0f@GH2JkQwi-[7=]ؾ XE0n ܖ0VΆUoBMrQ4{Ĭu? 0Z'C>=';puJ@h-z#TA[#w7&x ͨPɾ9rM*]B?U%w3Q!V>t7T)n10|;}Pc!$N?7}T+ Pp\Jj\ze^:ʸS{a+QY:/($T6EuRÀrE Nh Fec7bGg>w`0yZBfR&y,CʼrnO@1hOX R+@J"جWJ?]NP j2o7I1\ڥ1MVc$^")p5A ڟĮQ[z.&؝Ox#ΐxx*SZfo|I993Y&]cN@X] PWmt) qyOLw_dCUP΂bs荔0Rca/~^ կ T_akUZi k:)MpkEwTFu3d(r7i%7bPcH5+E Y Ɠ꥞YS4CH`&lszq)Bܶ4L:K->)#ո[}M5OQ??1z!)C oQu 5`^fCףK6l/cߌ/KZJ2l4n*ӉcV@ /2ASO$I?\עߤAP _[_ ~ĄԐqя,pXغQ@)yx-ny=fbr"C;{jڍPh`w~g--Lt/'7BC"˜s"+{PW^MS%"u1Ssb1=_{fSTme Dr Exm5h6 "{D1:xu%+&M"6,=5.2"/톩kߣv!>R!Ӛ*M-AF߅= DIk e+}=6L\29fwcsKr."Qa!!/@ -EW݊+ z5<0sNMqUNIL{_$r8Q HE*E ՗ d]~#e9{/(P͒r/#YG((Nj\mNHg`qxSa1bNaRs0HvnsLBQ.8._'S`לsL5[+e|=?/}7\"o]ޗrݮ|lVlLKC'zU68=bun'1&$ DH)qOibSEB5;P_elXpJf6šz2t gH_SA|~.o@5 ^>! nnN 'D]aiMqM*f5/Кj%?vJTo,HdP EMglRdǮ:.崞ј33n%b/#~_UV< 7:i[s>cE2[@bρJhane>ה*Ȳt^z"r:B/"x%J3L# B&>2B=Llڨ3t5 MWb ֟^LN߶ȠY0R.?ҟ_XѯBq@`b(b%E e5$X̠1&@l/÷9`{Oͻi,.g)a7Z;؃)T=ޓ;9\JRfY*SVQHG@/"A\dx엋b2Z—$q~ۍzCy[7ٟF.NcmV|n_r^OyƨTj_-25B( tL\-b 69\" P~*9!]*ר!I2ck nhVƳdgڝZ?n3N鏒Z)iÊK7 7j~?N&*C/)#Odӛ{ ux+H2Y[L]6[q.?+| =C;1XRh͂ M6;W((U%, Qʨ}[02!dܚaT4b區m{$S}4{;$kHzsgj1M9v0*T_JNsUY8$U},vJP6Ae`䢖kٙNP`ENsAڧfN4y /f{ǗFIP"F Ȓ( 7c~JX@i ZPs7YATXK\o}XGr #{ Ǵ-VNT[;CGv7nOۧ֝Z|Ж#y@<ǁ"9;b{LQ]Ҕ"$x .gJ>OE(wZXd`V3 4ܗs !O_p`.͋ z=аԎQ>Z*aMPijg`͹iϤ*ruڔAA~(:y6Α)% 㾋AQ.[F`{Vс7KB:?P럦VrA̷D:#IB#㛂$3]똩NkT(/ B~P0R!=:phƊ(1~˲'.Ca6㐘R4ϋO\f.ۥzsckԗEYk %v9ߜmBf'f  !.[HVR_5a;ixSF/Y\#~OP"+:KBG Iu+OKNw0$4Ԩ+8^i?&z̺IZl-}7j;GV\ٕ4wGRhIu-O5":BH!jK2 mW<ƿ^#mR-؎MkײZ{/8"ٹqiSs[kI%U`2)s N6`YJ*Q-^sT-R__ BW1 QzgjĵDZ$Zi ۦr5LP/~Z4系#16j$6aKp3!TB696CVh25eNJv8}mY搗S\q^d+[r@&f:Û!/-L/r:/$m8J1`4rEV#otr0KkgvxSlU"12`JttrmJ$0\EP;%.'fg"_Q Q~$Nʰ$%CY*Kk]xt=m]`iˆqܥ/n Rh % zԬborUkFxpfy}X#@K nY$הzڇ,({BgH kkLHz≆"GCĂzmߕZ[ˈ|q(Ǖk3`sq2ŶuPjBx@|w`%լcnP$ra!O)vݑʣ;'"Z󡗳)D ŅALb֟pY$e3P@4-uy_е(k`B-eّ c^i$3҆gDtZ. Cwr;s wL_P,qߣOWoZ§,7D[ aH]rpЮ'cV*iA!hǪKrbȺ;oWw.,5U So^#HdS:65ѓי JGRk1^rM|43 El<$,~ҌV- g`k^٪b%pXǡmDVtJEB8}L[L~ny?wvCUl?.v(ƎAc*uc"K =;qDjZ}`pgnUO*J e;ud0'R{=¬ma+6T's[D1?$(aETY4|v, CA7Fn82Hr$ף3zgS505B4nd J-+qtc"0bubB${(ҏNǘ3&;S>3h]'lB@lG !oH~H{e a$ʥ}ySDýq& ˓) )sQ;&K8??d* iG7N@!ٗ,F da =FeffqSÖA U9Fr^5tWc(QV1RAыƻvݵ:b^ Yq0^kHo(´J.MDg|Jmzot]R __{G6R=kiLm%@ ӼآpDgcEp[n{}|3z6ѫAh>ZEpm/OQϧB/C"byJjQS]z9ɩAc¯c}IbHZWż6$Nw)簢EJ w硓9qC\TQ%k'5Mp#~<<0^n E>T6nnNNh?FQ̳°X˷̠s٥9:XC'a,sa? rlj&mڱ1jPι+ K-ZeSBT"Hn="`+KI9N/=,84b%T hMulTA",)M. E$ۣM":u_?ZZϚ5o]3s=  Z %hMispCg ‡jCN+RčE0K'V V X\Rg^^5 Ix[y/p7i>$4o_4[|jk%ʠhCP!Xp2B'\-z76{YKru J&]n Vv_tPzK,uV+?Sr1vHC ,,NYK&N,N[kx*I7#`g唯64tPy.*=Yr4{ YFaNB.N[3Xו YKKeu:;!n5zYmᑤ >XT[o=ZT>1BrL!{TU.j7PŤAu |r&w h/X+$>%_{=P_"g?3h'}"nfäy4= 8zYnbi%;U`hV)~>pogIX>s=feTk_GYQ펧X]B6185ӂ0:Y+A Ik68Rm%1J*Hёc\(Z-"ܡCFS| 1ncxh*;m s%%bRc͎o.]U%PqnwGݧ)rLKY0D~heuVjrB'5V Xww; SR aWUm$d: JQ `IQ a(sٵ:"J*gRyc?`}zLɔטCW[h$7zշ*Yߞ=%v'nV(1*9dj>wƗ^#Sn@ۋLڅwʷ&[ggVV6'"߷ٹvrr{^2c9"Y5juSn8#*X&ͣb.bIL מ{3[lCt'8|6c0sdivlk] w|DcF27mtu4Ez\N"Xu6DQ)m&j 0v\孭>$MoC+2aya">CFq4wYƒ9]sE5iJQ)bVqEɅ 8:h4P:+Rv0{w\mdvi8X#vuio> 3R1ɶ2+i(-i*7&S; .9Ϭ͙ãb ##F0.꒻n9~;0i(E0ԤoCs% jѨ.qi"_tRMw٘ ZrXj‹ř JS-Tgשdzb %+]ϴwem3Nk+A`.Urrpg=)8A@MIXIW@ϾnNaQvsWvh%odJiT ͒[Uz61칦Vv1&YSO:X,f^RNpE,iSp(t _ɰPqwMgbÁqNXㆈqoM\CYg)ZhYo);E_I͸v_ižc'.UĦv. +):$N44H?Q} :Hě根h1QBpzx]h{"{ >>"/uB]=qD\WgZdhD'u|(&"TA0Kb 4k$1><%i`M.mYP`l1)zۢ.עSC.g`}uYf͒ uM  _:cĴU=ofN " fLʯw1akgr+Qvaxey$&X-|`yɕvȑ\c5#$=& 6BD,KRe3ǚH]4E 8AnݺR\8 qH§`:>(#߾cy>"ƽS g>RjǂW̡ `3QP{´퇑ʋZ`1&NA7M-pFm#'EQw=::eIDDYz5ԗZrN4gZY\]gY "BoO@J71.ӴIի=HXsIGLpʹʸHzoffeh4=T;%FGN.*;5HO&eDP9z'Rh8Wo)Y֓nU"`ŁC[> x}y._Dьt-#p~m&P FX޽\J&]r|а ج5ZP8r4,z:kp=[b't^%R,w?#.S컗/ ڰQ , (/!/@r]CQ} bVAx\y6?n$lm =hx@z:18Gގ_?x2Kirn|2(m2v?[߶8M' NLnȺt8:4@cFye,EGg8vUϩE9'2K{fnv97 :Sr3$$~bj^~ty"O%wu o-Ήb"A$<kHS ܏"NŜ|@W}6ů, {3R Z7k/Cfa^ _JBl-\(%K+ٵS@D%uDZ̄W'U4d"„wSNg_We2n|d[ZNť|$pՆُJjS%9]tt8f%g2Įr5%!.E H1rf'^KXIKգ7v|VO#W_d-#'~/݃7岐k E }i>t$#$_MK<gdU8+>](?/a>H?BhmBEmW 6. t,: 0#Оq'' /*j$D1Y*E.Mlqj9;ĵ&.FuU #ǖA)_H{iOUggC+[rmj[#h2_꼰= ޽N<=M-~ݑ=Pk^P=_V`+8nb/3jΦ&r(B>듯%/ *y6E)bx8e!n˕F5b zsN)MBMHv8\=A"oJgPV>: 1fqd) N#Z4(EQmG0L͊(0F) i%꿍 ծ5}{R[kci\>Q6VIq%⬃}@꾭eg]ƓU 97%)7J`ĉ'h9?GxF,y|7(AmuIZ2JLP̝,Kl2=M|[K+]1jpFrNBmVDgnGڃÀK1i'kqP%sH>K_R@<_].QvZY L|՝L4/%_Wyu!OZN4?_Qt{ց-8+!Fu%O;ϑs#lEGWLx;rD$J|nHe)`ֻġjZ*olMzA]U$3Zo}s]t gWuWdi n%C-X\&@v:|pۍkzKQJ qf)fض6A/7%x>^8>ųM|m,_fgG/2J2L9Uh;_}~ pGY=I=2 !аgq`t;G֒\GM`ה5DV)F|$]?6*x$@=*aEK_79|Fl&IiGkm"Ng~Й9 37LZм'݆#k`~E N %vr(@{Q欷͈W|Q-%/9 /Igj@KKin>~Ox L^<7n,UC_RX |= Dd~0.oBwY/P3fi5:ISdkv%=T1[(XF#d\)^G:cfNڃґZZUShQk[`gGI5-poG+7DĕL#87^5rYJԺƺlN `gc@Y 'ƼouOihNۤ>oIH+K#֡_lzN-j?kG2DDTIg`L'^br݌)+04GUlL=8VX {zƼ5?@Qw oKD2`7PtMGD\ky ۥje3o$jS%.#_U!KfOH[:lCU]B#zJKbFU@.^TG] SC4O5dʀl("8o;Yg§ yj.M;;BU/0ƄXaX^u#Fc4'xi%*A\͊M }JCg>)w|*$ϗĻ#ڧadlesȤj6N6yP_w<.VBr4@} Έ{`#~{I>ޘ1"Fer4%n7omgD=^L`0Cpp߽Z DngQH3&=BvqdZ^Nd_iu" ٌRej^{=p2R,՚rRqz R&(rDگrQÞ|}ū[D ) ƃټe _nʢ$ӥm-L+$K ь0/`()>*}iopqޑP)d0f?jmsj,j%M0͑'4早 B\Y0i(#Mkj7m2s>nbDu8, BG*Ҩ'Ow@^#nw; 6;'E=g#jaJGTK$[ݧ=WZ:CHyߏBU'&eG9tu=bU״x&Bb^^Չ.O!//U畬T tt MXKcKq+e[<ؑtBf6WS'ǒճ/SM",+)F_õ,BmUH#vuQCf`(bJc؜;X;;p=sx2B38TQc@ #{Zo`(h4s2u/j OPcwxɟ缭ןR+r5G~ ~t!PD@L;۝]q _>;D#N>SOb@,j.#^OENد߲'?󰔅o{6贔6pKgi 3#3`G)*@70Ͳ{^+w ̍ˠfNt?شNg9<>9nnaZKKB`iLHnF /{ig?tg 3 iz;,Q h64X.X8TrФ <$!JКMJZzQ_M]69i/'4HOq߈+4=kmĖ$ UC%?y4ƜFQ 2 !EfN@C쌥OT#9Gr.ނdД.{zŶűDf3I;i  @|^^^zPd6iHjV3h Q1K}ֹW\,ݬѻ%JgrUjŵ0`Ai򓿂 ڧl C?2|_n o=Ŭ$;cGe T!V2܃B6Z b4t˯#wɗ沟-tcY-{6K 륫۸ 3x Xoj-[ ^":^?orUOD7MZߩY?Ǯd+g Q1lǿpٓ1,jh95sqg-tY ;r4˛6OrK#uREFCLL'T029_]Vv({Tgp4!VjI\ 6><ijf{μ;ғ\ >*=~X[cr@| dIqbb7Dè}?6JVrx9eN$ AO.?Cp~"+/I'lg'ɈTb< ZN@0>Hc|Yt`~>w% k\*zɿZ|kN$FeX6~z\sٖ$VTt3ncsw+Qr0C,(41N|St”)90HoIJyt 3y0pM4B4w69-1xVb>ĶMwA6K-@]k8?.gM116}ޤ u3*s܎xdE"8/)1kI)!#;jYNdBd(ȱatO޿ F N4|<%,v\hOkv'>%xDg;}w>> e%}Y7bEv8$ c,qD@}5[ @VLw}d#viYdxKO7x>[EUiL6(`k%776BvSUv$USgj}ju\>HLgKRzu 7-1{ ۧ/Z+*Zfϸ7-|O슏y6}h=-7frnL)$3vz!|5@`w |9kAk҉gz&P@+ӇF## n١epjHf\0WlP~eDEHa.c!fj_ ٹnq6>nR\wg&]E9^eGJfkw37.bvkJootY _gCKՔ%MG+ vac3羻q*~%'|ƥq:ӌ>PyRſ09dqbC\v_&Zi\K4V?*DDoüoq|aJHPMUc0euZQQebU$NBu0! hQEskAlMȋ6ȁoyd@0`W>7MgMvRMI:6+~l0t zmboV60^ ZeU`}UZ?JՒ#;*ݜweDfsG8 #wD5PN# a驶z7\}HQ:QR%'ʧχ`ϥ/܃?1ʹЯSI˲wb$x533-o+}mH[m'b32l?oʃ>T$8]Hi\+fJj5*je{qC0x!|dc=1Xe?`؞Gj3W`'opĻ6ʪ^?;8-t: `rcwoO '2_,aDj'@{7͙8Xb+}X7qlkڙ1g0T,KRӅ9EmB';堝?uSבY_cښTuD' >T*UrL ܝ[Ԁ {OԢgTR9#zgr#"s&5bOa#8 |`dk6yTak6>a3)DЅUUUJ͵I}Y_Yb{su )6$kS :N`;([>o g)vS![  fyx@'._nC[3`nƢ(Ku~7Ii塲so|(51BZCb^Y)Tp#hAG"P <@D-3;|WCo%ȍPцSalHܫ@j'0|Ӧ7Xї +/rǿeTᐣtI FL嶀g=bfjy۶熠/o({/pݴbJB_&C} CVao0ύa툠m`X&"#p+:'AEjvN7qΉANBfҜBP y$ k^B#~,$,4QأyVk˫XӈґҔiӳ-ΆRi iW=6WvS=YiIj4D BrH^FsOxLbz}-)gm>ɲ?GuK#/5wZR0 K8|/2z&'1t"!q0gTk|&29HܽF4M+<Ek (j|U63c-T,39G nj|jSh[q]m0l9h{Jeᣄ'z#H==}Ț}3!_ԣy,Q*4 6%>NJt(<֪]H/CkV"B3 j 08;.Q#fU5m%?\wvK(@'4c0Uuz"I$XMz%cC7_! <>{ T~efq*ed2~;ϱ"A@v&n$f}xTjXGJw{-6DWQrVw]"cD@ ~&zRY>/>Y_3.~krH44\]eC;$$_bGZPN0ÿk_u[d_Tc`b]Vr80&=gI" t&AUSAx@YV.SwGL/bz.lT9wUeɏl\L3shBStD1dg>u@0^J֭kh@49MYyl_P S^eS{ >[Е!fIz}oҖrnbqS(߾a!U~L8̇c`rC05Q$f?"}4.ۉ1c+1AtᶬwTJ ؁vNAL뷤Y)kT7#uL1~lGl36#xG"uE7zJƵN6|qKrP L#CkS+A"Q,5$OuM0H6֕`0]l Е/|aݝW4䒖;B+߄+EM [eد] j #1[G5vx?<>jUDL;Euc>+e$a) M!$R\ž!Fx6 n0 ^7$/](2Y|0Y2/L?` ~PR<%s%إ`劂RmП 9#C/$[uB^ NCʦ_>H1#W[e'(?aYJkfF%\?<C5<\_sQ3%B#7,Oe5I[ N 0ㆽۓ`Ts#$UVNĎӨEѵJc2[m(N aJނzHH"!6ޟxM$)S\2 cVBNzوH_V^Ňȵ kIxuty13'uӞP4/:K)¯ӟ]&QNŨXN<*sբ+K5eҨIMG`fN!SD"QNj˥RapZˌcoytBg8Qt>.h.I=ieI 6;wF<c~Wǯ`)yKQZkRdߎd #7Mc=펜'z ո֣qg{$cTMW&.-1~gMC ӿJX2. e|3@r&v./+%$['e1D,깔<\ %;bݮ K<+!6Zmܬ4h&3,%fT ^aTWZ?OJdcyEXQ֟긩Lʙx"HpO1xC{ENS*`{BXP>t0;/Q%N?~fsl+K':6Zj ƂW3 ;Rzzw(Jp 'C>bʗ<-ފQ阺)MU-;Mnt6T&owVrYjJiݰUKx'Pfd)Pիӹ`!ۓ1_%worjcHǮVc- fSV %(b0hTYS-Rs!,O8G3'˄̊Q"t0e2i>l#'zdRJPL_e}R b}PDցfJU0cL+S!Úv ce $`O$^#IعI2^ꊑ:\4N<'Op?l'I9rq̤1O90y#nFB&mT]ыRQI% RvyE饕#pnX 2n2I ކ̅m~V1$%mOyiaD^Wez\̀/]p-Z:꿨+bBl_DW:[ VaHPxXuRnG]r/iBY8U>1RP}xx,j\l#&` _nNסяՁ+@ӓ7>^Ônk팪{luj.,$Wu@iyp0Oѧ~8^g]h>7e<0n`9Zլ7q^şVYphFs0(r)rT=MRZZ21|ԵlmH`chlOb1`It:]X!A8i} t&u:g7RK2aېxNGv{ #k [hNl[pqgGhh4Xʉc#2" ۄsly% dX8y}u_vQL4_'W_9`6B 6>%ɬ2G)eY]yKpn^b}G#'7,`N´,a]ö}O4fr02=pnL =÷!tHW~+٥W _6?`7'slFc}ȑG^f^AzPN#z¶H3~,m(e-d&?'60qKdbC(~jCtd!]+qLgazE0r=)!?g ס?ϸ (X8TQ}2-A?f`^ ؽI[-Z @}~ĥ𼬃*_h㮞-΄^ f @6ze̾-UvN,t&K8ljjMIU'/{C]j. Q']j׃(-jChǚoÝl `ȷQ1$G`q:{HsP sQ+OK 1Sty' <K`Ox2Q\.z4!`/3嘨Սyt+u/+Z+J#;\Aل(6nȿsG5e꾕5<M~{څWP#ٝ G4`yb|7;h.ꙂWM9EG)ɑ&W+1 tI_Aߣ^xlpJ\YH4Bx',J+ k2n{QJ;g7hv(b2ҞMӃ,ޑbP'11FSe8P7|wf%Mę֒\" ͹wz& idXegcZ n%La,`̒iU 7brLTc6k֌h{iyW#DlyF]A[Fws< E*,? sM"LGՊ+"+u[<BGG#5r4`&PR}hЦ_,%,9\~RT #rtKBgPHQ1ul}WSwz"ϰ e f=5F f&ddU^QhRmjb$:M\N  p#*UЪQ§u-nVޘDDKЎ$ֳ* kj2ENn~~򋷶șV8"F.\0 =Q̩ yʰ(ЈM3IYM[ &H+"S u20zQE4QBqqNP2c|a  Q5aL" T? 4 N挩kf+rMrrA 5u|#Ċ`ްG#BUyU1Ƈ|13L0D/ [-`]Z:om6ހzoTխ2g{o|ؖu ?odP}d8orVb]DtE =PhbHTݎWoq7z(^:+DJ \8]_PG7NMle#kJ Pw9\:e^wq-Bȧd^k5؞wzفŎ:z I'Z&=̠x&h`fz=Jz=N!u!G}]k(?r>.ci9'lgא;C,S.M?gX9.7䞶aI_5@B=]%h;]µ)y1O7xCRHU,hqYJWNԌ_ Ƨ "D+x;RT#V@@bu@ʹ6>K^9_쒼r䏼 b zqnN^./.j¤}V\ہ_k[ZLO2K;HR[-jS'iyqtgYI("b#5 B@$v!;ޫycpDfx ˖XRuSS{Uyйvwroj荙6km?<]bŀH?Fنm~[fRv]V Kw}!v4I]# BA uyi|jpf^v.5fB\q?o WcWlh|E~b0x`YEße(nq ~9PFrua9o^gQaݡQ4i-//+1wEkS11O\Nb@ָ%ĄCUE5<2REOG<lF_e8:3mHYi,Fu+{4qH(<ᢨmJ6#-Ë&|WÁd˽ tx_JŨujNm{:5~R &f<jwCA6<4k%m3K[(32"װ+/g버i_ZuXz*|0n_:&U]2K HN@va[zf8!kQNljW kw~r[ ,ʶ܁ #J^— _5 ȭT۶ YZ