samba-dsdb-modules-4.13.10+git.236.0517d0e6bdf-3.7.12 >  A ayv_p9|yjn|*S+}0d08hN݁K#7\oMLLNZPy0o=n/VQݳlqQodq[ 3ɝ{/MZ;LLYWmO6nfԁ+ç ꒰K Ȭ2JPw!cVƱhhEz-JC6XyIBJ5UZ)7VęsQ@"YR2g<y,77ac0296eda991742579e8b801ff249a9b1a1fdbc5456394f468df3659a791525b809ffe5786aab63b1a7e0ca63ef2ee1ca0e560[(ayv_p9|ܢBõQ(wv$:uJ0>C⛠hmmt3';?^|% ;J/m<4\ f;+tn@JoH+Iz~ i{u7eAőj)p,{ Z=9Ai7~пLPg]@>]1eRFE 䵅Ŋ+@%c88'Fcfh?%',7k8T0} h/EP%ZINiБ:Vx6V0Ι`3>pA5?5d1 8 J /FLS-H- - - - - L----ww(w()E8)L9,:< >@FG$-H-I-XY\ -]-^ b c @d e f l u -v -w%\-x&-y&z5H5X5\5b5Csamba-dsdb-modules4.13.10+git.236.0517d0e6bdf3.7.12Samba LDB modulesThis package contains plugins which add Active Directory features to the LDB library.aytJsheep19SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxx86_64ln -sf /usr/lib64/samba/ldb /usr/lib64/ldb/samba /sbin/ldconfigX7Gww(hH HX x''(wH8' H87'7I(GYH'((8(HG'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-4.13.10+git.236.0517d0e6bdf-3.7.12.src.rpmsamba-dsdb-modulessamba-dsdb-modules(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfig/sbin/ldconfiglibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgpgme.so.11()(64bit)libgpgme.so.11(GPGME_1.0)(64bit)libgpgme.so.11(GPGME_1.1)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.12)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.19)(64bit)libldb.so.2(LDB_0.9.22)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_0.9.24)(64bit)libldb.so.2(LDB_1.1.0)(64bit)libldb.so.2(LDB_1.1.2)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.1.6)(64bit)libldb.so.2(LDB_1.2.0)(64bit)libldb.so.2(LDB_1.2.2)(64bit)libldb.so.2(LDB_2.0.5)(64bit)libldb2libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.4)(64bit)libndr.so.1(NDR_0.0.8)(64bit)libndr.so.1(NDR_0.2.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.3.14)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.13.10_GIT.236.0517D0E6BDF3.7.12_SUSE_OS15.0_X86_64)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-ldb-ldap2.2.13.0.4-14.6.0-14.0-15.2-14.13.10+git.236.0517d0e6bdf4.14.3a9@a`v@`a@`<@`@___i_@_|\@_{ _l@_i@_d@__ @^@^^2^2^^1^^Y^J@^2@^&^&]]]])]@]@]]@]nU]nU]i]e@]_@]J@]B@] #]:\ڭ\\@\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USascabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/sbin/ldconfigsheep19 1635349578  !"#$%&'()*+,-4.13.10+git.236.0517d0e6bdf-3.7.124.13.10+git.236.0517d0e6bdf-3.7.12acl.soaclread.soanr.soaudit_log.socount_attrs.sodescriptor.sodirsync.sodns_notify.sodsdb_notification.soencrypted_secrets.soextended_dn_in.soextended_dn_out.soextended_dn_store.sogroup_audit_log.soinstancetype.solazy_commit.solinked_attributes.sonew_partition.soobjectclass.soobjectclass_attrs.soobjectguid.sooperational.sopaged_results.sopartition.sopassword_hash.soranged_results.sorepl_meta_data.soresolve_oids.sorootdse.sosamba3sam.sosamba3sid.sosamba_dsdb.sosamba_secrets.sosamldb.soschema_data.soschema_load.sosecrets_tdb_sync.soshow_deleted.sosubtree_delete.sosubtree_rename.sotombstone_reanimate.sounique_object_sids.soupdate_keytab.sovlv.sowins_ldb.so/usr/lib64/samba/ldb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:21237/SUSE_SLE-15-SP3_Update/d2f98d8ef4313516f89dded66bd0b145-samba.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux  !"#$%&'()*+,ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8bf76396b55f23253f8f03d161ac45d96b43bf86, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3573b4404d92f95f229387fae13e85665400774b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2d2c3135c11f668d6b6151dac40d6dd9b13a0749, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4eaa142455e6db088c5200dc36325118de719eb2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b6dd38c96ff9e8426794d0bd2b643068070dd1e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a699fb01d6b46f65be7a49f41dcab706e7b03cb6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=74a0bcc25b0ed5211aa4c4fea9b774e4b82623a1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a7adae19617da948109240df5d98cb633f0a1977, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=33713a494d928af83cbe78987780106b09939192, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e4361ce9fe494fe7d5da9eaa72ebee4da2e9c873, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=74a7c54ed5fa4d3171d383023c4b6d1205979d48, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6f1ef1b5cddc0d35902835c8ad5b8d2eda902dc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4800c61cbd97adf6f009aafa37ec7150e65c5202, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=78994ea79e5d96ff3f46376b557238700c34fcf3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=482ab52a152a0a2b0bb69a40c5efdbb2518906ab, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c2da3ad748e8dc664cf5e321e185a72942cf99e6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=186c4491e6ed143ed005d50b18929a75009d694f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb49e05854b62de4d1a0b5bf1b4031e83c5c2e06, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1430cb05ffcff1fc80b606c491d4500896102912, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=87ce5055bc4d4a9d2c6c9cab2c79295d14343bc7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=52932fc6c2699499c1e1b9b4bf21cb7827662ab2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6e300139808f4d83a1e717f6f8c2e6fda0b9008f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f810139ebd65b20898ccd7019f38aea37309e837, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9164bf7af8273b5ca2684ecca4f46b0a6ee47d69, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=521e6f24b80417b372bbb1d819af24ae9cd4008d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=21354cccdf11f4d8010ee598e131f0c51ec47415, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=05e59f512040dd113378813841af8cd93760e05c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a86656da3bf0c29cfd93da0e361cc788accab1c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb5bfebf353878bb4b718c562ed54ab1b81020ec, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0f3d6dcbc868bbf488c454cb7afd60efe3e2e64, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca9801df641d4d86432ddcb4426a66498a6b0b20, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5231945251b02f94fa7cdb3f4b481aae7283fe4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=16b450ef8a9690e1c7de4c166d0303087760a9c2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb740b551d9b5f2ea5c5281b9263f4f0a36d8f57, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=71b45ca33aef3329c21fac4e38e2b4435fb6eb4a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=595a6e744f4ae151815a99060a35970ce5542c4a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f367f8f488da01911a9d85e125bf99e620d8f457, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f57ee43051ffd802ed6e91d2b4f86ca89fa05d02, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2434fe6c7bb2d1c260bbcf29271fbe5e5334bd95, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=664201cf886e2f9e5436e0407c99df4b413c4669, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0691e91c0075de5cf495f5bdfe9a3261fd702e19, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a44e64af0c2374b3fec111e0e164f842e7fa3cda, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=afc8a6c8fdd772f95cfa6757b9a8243c9ad7b8bd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a7828008ed3be5a7e73377e15ad4979b9cd597f3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3ea1ef3b0213624210a83ec7810484242f51ce7a, stripped9Fdu'BMVmy*5[h.;FQct    8 & . "  RTRXR^R.RR`RfR R R RARGR,R2R0RRR]R-RFR_RSRR@RWR+ReR/RRGRTR`RXR^RfR R R RARZRR3R8R9R2R0RRYRFR_R@RWR]RSReR/RRARfR^R0R2R R R R]R@ReR/RRR^RXRTRRGRHRVR\RfR R R RRZR2R0RR[RSR]RFRYRRURWRReR/RRXRTRhRfRjR2R0R R R RWRSRgRiReR/RRAR^RTRfR`RHRGR R R RZRR1R7R2R0RFRRYR]R_R@RSReR/RRTRR^R`RfR R R RARGRCR8R2R0RRFR_R@RBR]RSReR/RRXRERJRmRTRRRoRVRfR R R RAR2R0RRRRDRFRRlRWRUR@RSRnReR/RR^R`RRfR R R R2R0RR_R]ReR/RRPRNRGRR'RfR R R R^R2R0RCRR]RORFRBRMReR/R&RR`RRAR R R RfR9R6R2R3R0RR_R@ReR/RR^RGRARRfR`R R R R9R2R0RFRR]R_R@ReR/RR^RARfR R R R`RRZR6R2R3R0RR]RYR_R@ReR/RR^RRXRTRR\RfR R R RR`RZR2R0RR[RSR_R]RYRRWRReR/RR`RR R R R2R0RR_R/RRR R R R2R0RR/RR^RGRTRfRR R R R`R=R5R2R0RARRFR_R@R]RSReR/RR R RfR`RTR2R0R_RSReR/RRR`RfR^RAR R R R2R3R0RR]R_R@ReR/RRfRR^RAR R R R R2R3R0RR]R@ReR/RRGRfRR R R R`R0R2RFRR_ReR/RRGRTRZRVRCR`R R R RARfR^R2R0RRR_R]RFRYRBRSR@RUReR/RRHRGR R R RfR2R5R0RFReR/RRARNRhRTRXRRfR R R R RkRjR^R>R5R4R߮98{2Ӝ0w8Mb\v8(5eԽqtjl*U ,͝Y"?0m@3b EzSVF43.=4d4@!X._^na'U%W}C |,#W5fb'yѰv0)E^=d^]lT؁e QEEԅO0_C)}|;8 Ddk`lE|o鱝96uG[7 N/e9(F1Fc$u=×@. `FvAnk1e`ZJf {˺8ATccp~c&rϱՋ g2^ltx/a>o]hUj7>A5ԽGIS^sDDnjE=42pDZ`D1bKEcV$xN~p{ p5DHzAf9CMgͪyp K۫!'ƫDήhIH䣋uro$r9hg-{H!]OFS ,|}ؠ8Uu]6I🫿H:b:)Aa $`RD[=#ݣS>/e?QI6h:Π~y@mVIH"ʙ}|=(@x~[QLn  *NtB}`x9٧*YYx̹WN_ G|o$j7dk*۠djMŌDi;Ǻh[N*xok\TL դ;X8fs6 mcB7^z8 ߕ!Yz[<WAb"d=e.e4;ôQ|iJ"TO/潊P/Zָ_&?%c\<9i T`vqD ڟab/bZ2eF>眈*xkt C_r=`h8$ERQEv^RzTJ0L{Рv-i ET~Sfgeu(ǡ8=tw|Iw 5]F[6%hPLpRؔ$Q |Ta{ 4r#z\} cGOE3+/gܤ eΚf1E>Pz;LM^ noڡu*g{)ZL牑A"RWFx=PD;p<𛙥E[0ΐQL%Ҡ(X34,ĶjHcdO1ͷ*,q?V3.v5ɑ y>-Nϧڢ^^R:.c(%aJPYՎ Xe% lރiR?o ujW\O$8.KpO@g/k9dDBsa3! ]s\Byo&,"fk46`GWqTlZIf-Uٷ)bR]Z67"h/석Eot9:[͍uH<*.f,}<^G&By7$Q\JC>dcapGq8x\iDqT:XPL*?oyU"ELҋ(*E?:80gJ^]g8M >*jat超j{479EhZ(]^)>J)_U|cw:gGR]wB8꾴K{!16ڸJ?ڎ.dHVy+<A×s)nSmSd Uǟ@O3sӆ:*֫/}wtϡ]:,Xyf^a#˾EUI2GM G; _PuUEpCw __`& `JKAhO7}Tv 1eU^[E1Չ*g&1^) a35\296\ /SH$SkH/6)ڱ L;7.%NŸS?oc48) "̝HI<=SQXX}4AJm[w2UmI5%gźC/~Ci( "(SW {IȇѪ6 _"\SeFBm+$dӢB3LnzO6Ѩl$ B)˾Ab&!_O8noI=d ͋G6g„,N]cܕbW鲧Xۨ^" Iu1)Y9d^P,!$P̉au~jYPk!3&,!yL\U? 348٫'c,PY$gB!^ygzk;eLґ)U^fmo z,MGV,aKq#dX4x'V D?.߱r|8]2,>[#hEi\7II!Ui"qGCgUҋBkj@YwjErꁢB|M+W[阱@Ϭ-j}!,Hys%펑eS>`aіUt.P$;-Pbt[V+Gn-\VjjנͶJjf^ w/=LG=4Zh˘zZ|;\ [GX %xNʋ2 uցޟ jI,Zǚ5a'HI g_2_T6Z%H$Zsw(~E{\S%w<ztVޟD7Nݩ䯰P3֙ihJH9<0>_J7whc"-_Sc- cRhfB6-`>)G/1D eDCK1evK+!9Y Fq.;Z#h9trdvl-G%^.)OGXٷW6Xx0*X,Vl *I8{:&kŢ41"֑Zz*Zsvh5'iϜ2 bR&=LMN' T?RR"WXYdSMb#N .>TT_g9ځf}F>jC{~^;GHjگ )Ug]y5=0^\6t\1v/ɋh;\/*Z)LoDn !*? ݯl!]+|t@aK:}`]g@ d*}a14X@N3ͥ~O*aad.Tb`+ʸ"<__U+ð-4# i-%PeHC]ӛ&v!Y%SB[O (i>f7%Q>~^{Bե%dЗ-4UЂXFtsm]t$ ;Đܒ {ܕsmT h& fqaX({{֔IQ-n єzIJ>&祯6N3uYn(d%MAyvg8_(1)ѡV#+B 1Lra&8(ٝ?E(8)B<ءIuLA:-ؑ^U19Lkg\%_뿕2n3o7TX/6Liۢxs]|Ȩ8Af!+Vg)V^|ԒշJp?^#>$v(Q7c-?c)4yr?إ"g4@c(YJe1DABzMjT&V5|)& <萤G=bѠH)6 u+񙠺 M1ל-k:LŌ1xb4D`ݜ@ǤHJ%EEBDط_ʨh v(g@A}Pߋ^49@%K2@dKD!:>7INMC-YJ?&/GSJzW,siFPyIP݆Jj\h* _B-e1^.Iˎ)^0gPH͗Q:x^tb E3 a=edgf dgYݕs8h!xM v ooQŪ2T>HQ]h;R.6A)Ԩ6\'+݄?& 79UR {qH0c ْ?߾I; 7N^_T;ߋ1GA7:]+vDD,}p!L~"-c,.Ur~F@Z^,G'CmNƖ;Z-"t=-qB`ElZ"aɐ#WMOf;-kfJ@_=XC`%HE؞3CPI1 O^ M'Cu `J>>?2"덶Ҍ{ ke3b\ϟrgle0ﶜ:Hk~Az|uQ\tnNW$b}>҂+W{ ݘHFol^TordI)~b'>PवW{ gx;܁K^M "byҒ ^y#퐏َ8oyYP~'*> }*ݩ)l`H/\߳ڎ&V]߱Lzp17<~mMwE(N@&u7elh_g]l^tUw"M$z#4@ȲT:0]qyאfmlpl)NRU=jqiizPD40+VՍ:2;fl4mڪmSQ ˥ƮAPJfø5H@&;zJ G$q>$Z>$?jIyUYSkw~t>7>\scaǬ *k45dC@Apn Nvˠ{0'}>'IwY 'xkhW+9Jg(i9Bg؄ꪟB\Lfy܁EHHl#;*u<.h::Q4gCSLMNeC/Қ~uDPx!Uֲi=^?zhwAR (`[%2L5 k |[g5BԣQ;J0o1{03' $ ݫd& D 3=FK@bMŐjO,u%՚ ﹁(j!oPZ}59ʬy' _vΌ&ӕl0۾1 my@=3y4zg{f{I%qQv2)j\X5b՘\~@31]\SzJeM| _M~q%**>Bn*Y+n5 !%[%M4 !R^SdƲq垤>\rWn(.q7hKThL4x;%hE:#HcO=X2le"?۔i D,n(։~.:ӝ[Dީb{NK{ ٜ3CaIot-`"ֿWÝL=F+,1 6;n1IzKAQeAá/<~wB,-:9uKM4~(Mʉ(~pҍX=$Yh&m"bVjiF-@tiUEм*COZ?f:3VD nQH;8]G!Mڔu_k] BA[T@[%򤽂ԯTNH}QLg5訸, ʁ3xdRyF'RLoWW.WI!-ρ("Plԡ`܊&@ eB~[mѴ1# x.0D!JYz(,̐ly e5J Kc3IKNxĝ{/Y^I^[)Oӫƞ8"bmiTK-4PRl?J'yR0_>8Z$B٦܍nS?xՋoa*=Y#Z xEӼF:'gN|Cݍ1WsdJ\d.ȻZetB6ly4sU K t&Azq gJʑŘHAuXϙ ,T1N!|kjD 2"1^b)TD15C`#_އU$ \4 N4glgrBRFޚǶ@D-sm]0AɩYI9=*_Ďa%/7 7@L\H¶?-kU&IoJ-gj_vƱ-tc\j( 5L~@Z($S1l(XZ$78W2:v-L)5xbS/vM_$Zl:;V͗idtcg<?mg&IoSVza1o0 SUr b7'.I'쪊\t|k41ʒyzzruR{.84+.T9-9Җfǟ^>$9_&|mB$#leX6@)R0۝ eAt#!xXiq5[譁H`O<#!#)E.l.v<+k Q7Iz?0@uĂ s[aT!oMK(1۹I$3dd8}?PF߆L~S{/m7VwU;xi_AnXd,G}o욢}96L{ w䃺 p7f\֒x "-H? ZpIDP)_>番oP&Dp `,A\h~ =%]20PRhMo{?DZ_#А]9пyHWj% kϾ$֡'{s?AVא qwxW ^m%Zr"TR-zDy*ΎwМKs!5]`= ^7N$tvjf/pv; >MZ># LSpMsZoWxΊc(9.X,nAbs7b~'9ک&ZCM{ &6ǭ}G>T/KƻCrٶZZCH߀Z.dPMڥ]{U]9DAͥ21(}kR%Ke!FW|1E@詚"^ٺjﯔ CY8#Cn} !¿Ql?@)| /ɏg|4v.LQ{*q/#>Mƅ8T,)M˭|U% H|3b~KmOw-Dqaa^wɁ~n~:凌 { 3LL_l`ZcϞ]Worah9:H7 E>L7(Q%WO|lDPBJ?-ul04s 8pr,VI/Hu!˳~ ,jRsj,/2|偌/f p.=>* T[0KZJ!'LR"K)b(1M:aAyЏ$͑χֱC[®_' ?9^U ю'zC|/0D^Zà P$x$;i{@*)5NhB_I ,&1З 0ZN%e5˪HtV605Y\23sk$JI.ЖXi%}5{G S129f<9x:? d=E zܽ W^fd;fiR4|z4p @UdFKDd務hQ#%hh Gf8?Vx.'mVESO-zaдx2r0)Hz-u⊱MnIri'U2e䦱oD_*VhӘ-'ap{q{1|xIS9_< _/7Swm>''vT_bͩb#{"o o2[^pg Ů}6/  LOVs>_Qd2jSOm.ho&kpdMg q*&21(^ _{f|pe'aQc21mOs IX{X\voXbPUuƺp esR)@U(\lZHde:Ά\_D(Ӄ3\-x˒Qlb`S+Uײ! v@(E fjiؼ\XGhz=ƞ^WLՇśI]] CןxJp \vw6ɔ8Y8FW^ 0Js)OQ$?XdKj"6y\!C褠hHo/Utnx9å g-+M 1Wà857WWpv ֦m ˆr rUFGH_RJTT²6{{)M>*IRa |%'dB)B iW1~ b8u,B c%>Ϳ?XC=W0:vqqY?] ̦LM03_CO=^^rfiOAckj}e9p0;7TS t G} # }(|r<\}C4=!tj?5uõ h=aDƯ`aB30 ءԑİΟYyz ^YRUdaʠb=w 2UY6gG辀\P ؼr3̥Fg9^Ew(Hת^ieh)R^韐-llg߂QzV=9G % 6Mv8iΗkXrRa`4@]K-=X3 _I:.ڼ@7GXDb&wlBc ޽;)ԓHBShhZ@8";l8_] 'j*E|eq>F278(/̠rTTD)XŒGK,Lt.|i^;:Y,2)K܄U>tOIc۫sTRlG5sc{Z ~ }v5kjOqqV\L)?.5viij`j8˧_a/l{:t<N .=FKLZS:])9*>~8yQ5e-}+\R{1]h)|8Ȫ\Z6?߂QQ{g]<+dqT؝L! 3m6[+/PV"j HIu~-o-Wo[+[<ƭgN3y04;Tu&N-n%Ѥ]BGZX]ۨ_;#'W:{#{BߥPLMGUT]0`pI[S%dÃQrYOЪk9S_]ǙP <]yWFj M܆ k כפ UCugkgS(~r/]Frkfu 6=K1! 1aƌB0竾 Vv%x"+4WL6~o"E*sFqi/ӘR; g`$?}ǰ^=b;\2fa;!P39G=.č"ŻZOJN?}9e.V{s`#[2.Ҽn4h"=^0[ӝ%z`jތrbXqH8Mxz"[k+rrAQ|ՈHZ$:Jd##S7c$%.uS1GX"PyKE y*v&atsD6=rSXR|XMF Zc8P y *]'$G⼲#Q7C  %a@VzQϿX֦5}Gs?α{rU[jLz#m%b8P# >@,l-c.(8jSh3eOzTO$yQ 5&L+I;*dӎ[dɗ#ǏDo-Tzm yQ~yNW-\wjiAD Zd1mES0Lݔ*D-ڣU/X+ņY{51P b#Y3^atjLC[H:1: j4"%"KK?M$l!~ FaX_[zT+~D&~g5䃡[@H6Ae>DjY g/8)p 8x{1] oJ$+|rmmuH>\+OEiJ\(CQzu[*lI!X0[,u}JgWx7Sh՜ C[o(ܬd9 ).'Iz/vۀb3V >J--ƵQSا\a@ʭAyT.2 1%4೾^޳\`I^4 Tmm+Z:݈ea4Z!υn[ak &6=OoXS40ThXR3>ʛޛ]SNhΦ$_4:!7haϚ T3>n/=ڟ3d WNiAU^}q&}kpj5! ,lן㮟Θ@v)pMl"RbĹ"8"f 5xP}ޝۃܔOrt>x|XTхeOy,-iDXbw!xò7Կ}HKG$fzXX `(lX AcPKh$7˥.|=u7rD. ы圜y1e O닟gHhjGg .t ae=%F0vY9g%chK>[t ވӶ΀4VC?Cz-qHKa?L1eR(Y9t\=5$g*"܈,g! .*"_3`MLAx˲NlL8bsNgrrrõ"'86' bd U/|&hBV5#g$HXecUE+2#;,`-k{föxRX4 U.2꺌NÔ$ `$p+ƖM§ q`wQ@FޘArީ1(O,/C!"P2YC)qCǶば!) Enb]mF\b[Hr*+2ܓ=evyV=Z\%))/QOzS:[{u^EL9:n2=eZY̏&DܘnzEMw`(E.bp+NX&c&p*K:_&[Ŕ)\s^HaIVq0YD.< &_<(seGgA6_LZ[ ĆDf)4']rB<܀ȍX ڊlFm_++;^a[s暣2 os>'_/ЊZKpc+*>4wǁl3Xl4;R+ EE8]F=M5-6MejD#`B`}즸J\@`* ,)ףw!f W)ǝ+ܴxB,J˴RKhjxpn%LeR8pFS}>[䅡Jq(1ٵ I+6UԬ/9p:WuР@9x`Lh;0fmL(9CM}nCDvez:=avXjkO~Cػ R唑!k9$Ƨ+ Жj"Dr@Fo.s"RO,kuTuEw*4@KWqBf81>V_D:94Q2*BTb P j\7UI/zOh\)fԌGA#ERq)ō\'(AO'u:$/%+ʝIxW[pV%N*=4ukx_CmL&4a7ӎkl=VJC]%à$ƥg*.rS8ni:k. hMbsA:/x&ajXMʽxM[]gI_TEqU6"oQ`IM˲]  Z a5;j=KtX|'bW)W/bOЇǿo}RӪ`7OytRGX|ʖ~Ky#&*TeyBƹnVs#B#'F1+IE fUaFv@+QqB p˛hiZC? (u7J·fN]PԱmeLaPj$ QL1 _QJOZ1Cvg$lK!!}h7ؙD^Qw1,P2ZS|%9\:C⼦q+ڴ=6T<ᡱ ӚUk["Ex+Q,0$#?KȊlߠ8w@_$Q2?hi' [U< sIU4-ݍԎW#-?NMO•_x.P#_s] e'ҹp@~t݌P;]X RtaP3-ّ"JJ&5k^k" \-;53kĚM-R߮9,o6@ӨGZQ5\4-x7`T7*&7KVU,_kwɂ Z( J4-ٕ|kb+{bzgZ]rLAP|%@gך +ҔCSM@5\ l-e74q4Jcxfl|ܗ`H_g0a&'@{=$A歾cS'uԜ; "ױ؝tΉ++,ib y\n"yX )򞋺z :K+! $D+]ddzϒ%RVԋXfPөG16.)Duhj C40ŰfC>x)mƸѹ8Pxޣ_oy:ijul %E酅g 7- #a˶Nxp'74q\E{PM!9%`bf7 :,ԲZ'2BUIVNg}o} D|{&M&g>[_CSMǩ7KN0%ClYg#[ԵhI(,J'GQwsEcIm83.ݒ~Wl츤Bl d8&NwPC+z0wd1,H!u#tvEIU̎PfpS+gc}g)},L(jfԟ o#re\ %1 v<ߏTcQOw9W%:} `בқZnRFaX0se6"}%#^+3(eNiyMTB蓀,OjS<&b&憾W(r;eMN5K5Msy7P7tF=!wzʵ`4Al ?k$G'C- `˫w;$ċ!4TH3iӭ)ʈl$kRǵ5۲|O!{_ӷC %'D&j$?:y~տQܥGv4 㣩;G~W_Yl}Dgv%溳1B@7r&wK=?fn1J,/k4GbiQ^ZD< 挽Wr6zzɒI156se/dz'L 19->7A+Nw3hmLxnF Г#A -߆šRGm6!%|=d,,MPv@k_3:w; t)MHܶU@ud }-82s F |.\Uk%VByL4pFJ>,, O2P̀">fDוC %S8gnl N$d50PLl4|c-Ӻ-3a7.T lt_p[j8̛[64oOpt~ LJa~pRe$rbJ|{d?bQ6w짥IN" f%BH=Yn0`$C(_BvB0st*HhY%]D&-.&5rc'dÖYIى7-@6 _Z_R^;VčեUXV^8qQrv&( ZOW]{kSMIY2G9U 9gDN]Z['fQobiy(z{K{dr^flE[\_)T­l7u0LB3\^\lޣNq*3+jhnZ?SR/$fR2UAsHXڋś y@š1o9-F_ 3L}X;,`xNs޸^k`qj]ޣ\w6@HNkO|PDG;;=8_/ܓZ,i=N% Lj={NZ <>cX͌' Rrqv?~mI}L1N.THu;b S ȳ +zu&%|њ%M>EW,B<{ wwu-AlϕT-%71WEsnDN3*hZE R;tvq=۟>ٔ^z=bgs҃s&a\`oT4&,nɸX(V+ >Nl-{["4}9?63VieV;PXτQ|}!k:cRo:<=nLUN׬ shdrhTwө ur~$6hFզwfa y4ubl^úƹiLѶ΁'o< ڤ\]>Ak&TQixf ޓLil wZ3xdjLE 8bIG=WeJ r˭@[ȏCI#F xwb/Bt[|Ok7ř<|z2/0^߶ns8>E}92^L=oGj~uk]`w>P<]`ҥg{#<c!3 .g;FIq2{|P{+N}#2nό^IoX7# 9%jD%sTR𹯏wZM*Zkc:W=M:@iqR$f=类xk W4U k!4hCO*6v"v-qĀF7 4IMgA.h%h]RPf: Y:H|_ڦφQY'c]nD Xeyhj|Cb?lt$|Ytl\E)Ķ7tӽwDR\ &TNoA=J%NaM̯ALe,LZL$m3gkpryxW6/Wȟd? oo2HS<%AMF5F)ÇtU1dHW#p; g5/w̴PF,do0, äIpV'P1setIm[2n!6$~EƗšDI%^@~96n`N'tbgsG%m FL59߱5(]3~gPgyg "4]osٌ=?`_ƃS }>IHvzQhHץJB(6&k5`oC4.z&([U~gx ьȞ{>U6+T?-JbjqM; n}a83SIH9TXO?ecLtFqQ d׊"%dD11E1iиRw̝yo;Aw{mF.Wʘ}3Pޒ& Sᛓ,}~na+H`-GRu5戻<7+SNh0eBt)i "6_E D?Ȏa9 s)"\ok86ɽgl%(=tϬ:dVr؁Z3CҪFסSH>#rv.S\zY(;0OpTi=J $gi/sn$=ɵBGJWio87J_b;jY# ۓ-nԡ/DU-{}f!Vv'7|͕$>5CKO4H]k _lyRgԒݢ}p tO.CKwdUJO dV'#Nmى8]!ro8CW?#  ]t] mP_SBN"-:ԷZ/8b;d\ ?_W8L`IݵDoD}yFiqEN&L@kAxui/_5;bz'w4ߥx'J'/DbZT B|jJY"VuUJ{EԷBAN#Pк@1\ըn2?JEdIm\'yݚSi zM/f0،ʹK@~ҁcQdŅ&sB-L?bU-Jj=?<:g+IXʟ`ϋ `4<|NϚՏJ,}{҃YvϺi^%ǝ7;GsOxjrߘ !TD{/}K+Y~fs+]hl[&"*wB]R :wKB8K'ٙK y'JS° ;؊<.RnIw7C4$`?~;.Qog8xVr{˽үEUW`y+ r<Ӣk3xM Qo-Uu؇uIjeCt/ *jsd%PE*b5-I6 Hw'#bw+tD=wthdU)MJ4'$ih!;7Ӟؓ86f[d($Qњ8Gh5cd,MIYxqL/U}˝i:jP1uڃ[&SSQKQ*Y{%F%Y#O<=` 3~ 4AȮbWe1(-u8LJ&ldh~'5ĩ4+J:#uU`Sf?#/[Jڤ>kK5u\&դQAD<8+#0(ɯGJIqU]튒> ,[Z?Q>7iVH( iDDGA1+ HɓTSzc24v} yo-d_NͰ8]Vp. ';1oۈ4zMBZW~zNa!؍,gxlQI=Ct UjE}p^#^IA>S}{,V]8J #MyLeŮ0=M{s>PjWj0bx_y_zIӃQ%qG<A%(}2I;e+C*YZKH#ƳA"G%/VCj[o-kPl Kn:x\|J'!IPa4@ h ̕BO#.6bԶ+B:!NdeޓJy)ć\" =ja,1j\鍮#)~ִF \٣K+:`k{@a<π %y ¿<8ua'uSyULAgJ=0Od-+0Տln}uk:r>F!:ނ(Z,`{tgUS}Qv h&$ UD3g֌\ʑiVRa<,zЅpia 9ie죀ZH|׼oB }zBC s\$R]=ac>@iSͩP®{''0cKIx\(u:FBp8BÙow{utZ0P<7 ϭ֊1  \j \KyXVM4#R=`γA1Wڵ 8 y];R ]^6VM;#`mbAk³>[J{VT:Fg<樂c-kWgN##k\Ԙku5@(S2x㽁*ǝ}ڌ˲SW َ_^E]g^8e@Kc@#^O?GȮVtՌ#v.!*j )FU7=f~J:!{ 9Vϲ&sM*c^(APԒ<ٚg4dby.kKn8OY1Ch gXcᷫ{:w.[cW0AJz[[3Qf"B}Xjݼq-P.e_4sN X"ېȟdUd5}̋bR|jO oDjYMZj/n Cw%({Rxc}n8[n/N:i׫i$ :@ff \ۆ5F/&K6f퍳׷`$GZ@' Cq5>WzF,~K/۝D'M)b%tϫ)qh&ȃz(F#If|JR@2x+Q7d"BMP#e}.¸o>y k7۳06JђGa\tO+nyz,U$IPdXrGCC1~<9t 1u^hĮRYȑ!78E-1*$+u7A^$~ب`' Ulo #^~ybicZl a(>2]mX-3IxM#sA_kCA<. 5x#qt"kzc#]U<V@t<5g.A(3]w_ OfwpZH?I?"ؘ)NԺwu5 Ԣ=c4)e׮"aϥς_7H奇mITE@}$9aAf7R̪Y0R0F9~3&3f(:NZ.GíNI Y*S0HLSvRIq S-zg5i+ mŒJH<ygՇ:Uu%T&EĽ2]__x}Z%a5v=l"T8QyDe1- Z&X-`%D5Bߠyaɲ?Ȭ؁} rFP@=?Zs )As3 z)CI]Y rT~964Qg=㺨Xmb![0mt5qNijl,GUV3SR4WM&}̻SK`=q? nSӑGvj!ԛ:`(jy\Y4akG&穓qb Pv=<&}vÍΔ <r.Z% eofvM_zХw*:WoVFE!_rGH.Z™L$xoV ~Q8I 냛~5G&;y;}Wt/oqQV4GH":D4 4sS"ls*F6.Tm#wqDO;Q:C(TsG$sdؾsų:ЅQF|A=%+a%zN>S1+&,Àm:Qz(͵ ,'s)7)zgG$Ժ49SYK9ٰ`C-b {9! O8vr}~6-돂:vlh5`VZ># ԹnKQB<\Tɡ3FhCAd\լ,lDw_t mbk^zL*1i-ŞOW ~fKaQ_7bNpz9P^}FC;w?nR\'FKtOy_$}* 49Y`:b"zV{p_87gf5|.] &:E/6:ub&x0RȘ;G2K$򲾅ϡ1}\W>nƜGolk~r(RLIHj ?{ ߼χ'k1zg=%Q@즅&]=NN\Z駖3I V QvzRL 't%Tj+$3Y7Ez8d̦ ng<\zva j#]f=-P[u_SmW Bgs}R`4@ٌ OEw#ry0!KcxtQWm/ )tp|AR%hY⌊k1{pV[9v ҫ7Vd%a( r* ԗqm6^:SϛP-=RaqrZЬT/,)5O&/S/LZȸȰce'օ@Vkؾ9 2oPhPiY2|K PsUo˶F ܡ%s"cP!?!W1>QZc;|O>~1^،uH4陞 gڄ5ab8 ȇtȳ3uPmacUDZ\J-zcCW `"Qz.t_}i^rۅy#jG fW'NWP\0&ᢹ|{-c躐[{0͹ݟP ZsS&`TI&5 sfu7oIPp9 av"%HQKHH&>tu =~|QQ0(8t\E##F1AU D Fkz}FUR NKh,5u%_C9V`wn/RHV{jmlBfee ߬H+8#-ľ'1z^X#fG4@1ѸF=AğzCH [5uw^o4G&KG`iս̣\kZ*D[esgnol7qu31Ve-$Ev7eg" 쒈5 .츺<(*_.\xZͫʡ`{vp'!eE~ xڤ.y7%PRlØ/tg1VGof~V [hbdhdP-K@9,M|!yӦ$܅/fb =P[1-ݎ`&?(G!B>Q;vT޸|0ALbw5e#v;o< 9+ɬC6qlx0a|Ys$q`:dc$TaՇQ__֯+z%6^7SJO腓;@3 }@ͰnOPG &^YoN-}*REfZ3ޔʖwqoh> H=~//`J37 Q\ v2({9c=Ll˴^:8KjkÝQKN0G2jXc+$9Sgi[JG`lhpޝ<38@9=`Nj O7oxZ>w &cz˿\ݱ|E-Gqq6g0{wJ3:w\aI~2CQEAbܒ6 `#43#k/jnLdAleuoK q d/NΫ&#C()i)o㏭Ż!լn3 筷 M95*e!ݻox8"v<X(%_?nUއ*ʷ4݆m/}QN(Vv7oFS넯e)+tdbzEu#ȿv>Vb=^ i<$}'?n!e@4(LtMBBƂKȷ{qe^XHSI Ӑ[}7=%gDtP2lxdZq_;>^9oqO}'>o=D,i)8w܋*l$}(6;ۅ@f¢1LH,sf1qjP\ػ=jDp{ TO8býH+/AMPu6[u^yjpGgaݻX͕zTVp\CukBZB `Bi,i!bi$nm@aR^~m2<Ѐ^# + ` 85fc\[&8EV8TْG˳}BE;e5;i̻vt8J&5y}zmVC: 'Nܿ|m ?O+YvYA3Z^Yxckq6AQ󸔏Nl(EL"ԣ)і5'|pnE\ji%Wf 2fVCV偸]" 'z0d9r6tdO3+i֕%'rGfc4; nv*\Z^7Qˠ^\nyE[|5qӱ%vb(T.*W% jO6S_t8qq9Xt8}̇t  <&~D@pky@%.вƻ&½0Wh  W nh o58αz+)]ߌ[+hRٟs@ge~ao,^[kL\_AA#Gm (suL=džp(3AD谈-x#F+ߕM+hE_y=u(Kϝ3Sg6&!ڹDkv;pͅf, - ྤՉu<>lCnu oH}®)͇s u˗@{'l/Eo/Nr$RAPPl<<&lhGwaoWŸ^\Id~%ۆqRPװ>gJ)n7 vV۠dXl-?npA7K9_\uTÌ@MB>Rh!+U\@X텰_o0/"yN!^Z1*F"0YQ)Q|Eo#㌏<רzcHŋ_y *%!5*}]oŘU-rcFmG8H?:EnCŁ@ajaCV]hb1v3.ޤ}'Q,Atpt텠,46dP{H.Wb=$V,!ܽ׶9MpVUj50C\2QNn@bXqTx&5\h1IH,S<4֯WfU($ ,HAWy޷Gw ľL/s^AmkəV%#d$qXٹ{%i[٘ʀ"]xDU 7ZYW rQ=BӄϋKmG} D/ F~NjUMطwtXu /P~j+Gͣ*4G>X0TJ~w[;mhmaňU/lJ1P{H+)`z'KcKmUm#Dvc{|pi2}*&p{c<|43,sĩ>Y"eE [XTjхQڏ=1's 򷴶r 6ۺva x?? Bp`6Dq=1BQZNHk}SzӺĸ>l>#/i$Ha}`jTJ:nj?_* /ӕ^!f]XPc4,6Q;]_*O*br}lHYhb.`/ǒY"MRO6m$  qd 'u+E''I6ڏ/«wVX0u ]xp0]Ϡ(J*e~5 *"42(ZmesfJno4Ooh8lEҒDߣPZ[>;/-~pB1X'JM8XZ!p)D& \ݥzW+ %>VvF^ſc)&ߡKUsxu§Z=Vt=XpN`= uJ Bp(x5)wFfڭcy Z׽Yl*uZQ'гݩ\?\>3~mfDYd J|Ǒ':ߥRY5;33jB"c2? %TV$]5xo+^O ֳaD(<rD&\ ΨEξNC_>٣nB1A %|yL).OѤ#M>]-.ΆPm2 _Z~d(O]@J+l&3Kh:x,+'#_/)hHZ`SSǯ40l>v#SKGSn; 0{4SvX0ݘo='<)s/3U5%u"IQv-.sk}j ƬShKlK4V^`cfzZ' H׃6p J M3>naT‚1;w%9 8>QAɒC pŝ5][)$SEqnʻQDICgԣZRfݖT='cOSlm@PyLKKsWus8)1_YRAwܩCN$Y; S=g'j) w ~ºOϷWV%tOP. !`Ԕ!Zy-јSO hsRmP$S {BiDOD48## ߿qNr}`RJ&jװdWκf޼&$l& QavoOVЄC.ٺγ{>ğ$+|aj\o`ǿ Dpn4 6#'A6ꂏOBS]/@I_0ZS՛`@TYE6elWVflqY`i6.'ΖvT׸^D/汔7kcO!/F" QeWUrfiVJ5~Z: |D a"+^@Ʒ ͤɏRCamȹ dTduZ~)`iI >"M,X`=u{LmAFFWǎ79g+3٘n@?~#mPmt`tb7Or|H8~[=` :~aw(mlb Bwl@ \gSX,&h!3{4W S7O`Qg0U. g,_>ZYv fRv}\D"kYo1Tha؜1Xl ߓ:}EWWWISCl pl7-ɂ۫SƣwGC`67\J0B-g湦T'!L-ڲ5gm]:Mt7Udax5>s*R_92h+2!K!p57=mr'TDFƛ.i]4g&^_B O$o"@t;xZi_Uh >_it2w9@cmO`28II`Z=t3nb$7F=nΤZy<9Ao/ 5)EW6ڷ%x_<,tgUHt©M2zL'LK`\+OZ'GkdH/^uZWAI5Yؤ f⋥IT &vi: 1_q _QȾ滬nNj-5f_HT8eyoW𽌀N)N&Z%u §x4sg\`q68k~%aٮrω|KYl%DS:dk H4 a%H紒G},o-b~W&&ׇtF)s7tԒN,jl#┯4BKG>n)3:\M>p`yV"s[aё֎FG; Y\`t8kv{t+&Z$ɭa[ھqI{1 DSdn[, SxiyL@y6&gOYq(<]A[=𤋮ZTmC>ĂDAt¤XK*>Ŭo Lnu{0:Kp%QOߧ؆C|KFٿѶy1[;eBXpΊMʌ,S/w M t;qrV,؂du24UAw֦{l55xGp?kCnYI!tGR/+zWB<szNZ57[ ??_`\Hm1c5E1V+\"/34[6Ȃk`)vґ<J@"pĊ:?eHnjᡒf?!J6oZSNCɆW!>Zjvyn/!@̜%=`)NDŨ&92Qo֬|\ϚYU״Ip*n1Œ3rChK)JNz)Q}_?@Bt6`G$1n;RN+u5/XsZ2jql,[< <y ;P)>UGF’ѥ!~DӪn[p>A"co$ %ЭU?~F;c>9%hwEÑrrОulfSF9=zR1ӝEh&YS*_R&uIWmkl܀bw|tvLe$صS@![Lf OF#xe?ws[&n? , Pa4FJ )@GB9vⶢ 9dk nY&i+Fac#d<1~%-]@/Dz[U>r԰ӂz0qYI,b5/%̛r+{{;T@5pPt*!:x-M`Bb5-<{9 ,jtgot>v6TeXs9'lMWᑆp .x+R6}8]mV" :Dۥ;Qj9&fso9&~5" LMS|uFiB8Rm! '\[[ 1(wq8P Rpyj:ñX3_ӕvAht>av S8iiyn5prHGDvF"lfb^vt55|+D PLLfRM0~i7 Ktp 25o{JM"m-X^G&g7}% yO^̎`,( p]`4!?hhl0DDPIvX=m&qYM=C뀁Qe:*N (_q':MvE*-!`f4BTԐws.qy$")Y2Plu;!2l#Ag l=uwM-Y5)6ZZ:<]vj3xHȶW"|τYMDg᥇STrV f"rnz?uI#3n"p3o5`5XDZ0dDuq;h@Jx Hמ׽!>jJijP~Gc keCʘ"B*nHqca:4ƺănb>Wz E,X d`N=q VUWi6⸿rV_ו;uPU($|0 kXBeu[ uN=qbAtZtT^ER@솜`}]|#SBG. pq;)!Px d:]ɢ|lSNa3C'b['՗0s4\^ԩsKq? u3b i@?᥎U/5mĠ6l?y=V=P+g9,/6M: W(bBTxY`MƘq76y`z1kXGP6zb:&s.íWžxaS0mRmGaVCE#Ď#[:Qޚ-rGt7PI7tcc}<uU%u$H(1FڋtUEw2)vn%Gr[.~#г6iJ"Dې\Ŕ#ݽ6N2h'|Etm2|{xǀq퇚E@I ?4(+5&Zeg6kB7c,<[X\ܿe[?+/XEʙ?rw vY+گ[ J&$!vu/x)ر%s灤 JW <)JajUC#Y %&с'P?2/I0TSdp+b0}$Y lG;:" b3v]_tbg#5y4F9 "4Υ7|怃IR7gSUK= ^{>LܶϪ(ɞ zU߈#,Qryd .YɭauH ;{h=cD\fݩebsa%s'$1z`"M ]:a]W5@h_-Ė>$(z0BBl+{_*lj%7tfY+ "a_kw[|w\{6-z"y׷ȽcHB7,yRGIP~s/GR<7ۆd: '"@?J%[ݠ]I@롻x&iBu]H5~iC H*+KbdJR|~sc1tBly_-'C54K:i zXGt|Jo!@4bW]-Ԥc%#Ջu\G[{Y…kXVƋV58p+^H<=٧)c-߂Ș#Е\f_=MY9C֓8w6YzG_TG*lQ<@8+4> RcuUPhLA}-fkê< LZCsj),ڄQmnL<$Ν7.F8Y1,`3pԀs@r\Sxι7: ^^56o]!9b5ȯ Lڗ3MC"Bd3^fO % K|Nr]"Wd[]?DBع"\[8be8aJ/Νphpf4ʠs̜[WB 9 tH]z2@Jߴq!lsK56t||l@,eE=K *A>1\X%L_b[IoA}Jlxi2_iE-x(ZL~s<|G8KbR*ȥsÒ>W:(DTqV_%sg~Ў F\8v B*XX' j )`>@lhE޹+Lۊw+ $z=ey{hҾ"v=eۃmG&(.̴浍WED ")ps-|HSx=XMPAN*odqDG2zhXNgթ?Whhr5 ci3 hilSJx^DWXG-3hli_=6ԣ< Mwް_"jSt\g5N BOD g;.PaGjubkL|:s)ɲ䗧 5Gthoc/8B)8}FC~c$|Cfm!x D7e GKgePbscY-`I#%|-ьo=G2c2W)%| vһ!nS3bv~(>2D%[kojWTuÜ>i^.섐Bm&=xy  8SBx/H aOFBʿ^#5'rVݹph e4 ]u*1 moYyܷ=vG3^-)1Ńl-C( M;y18BQ/ԗxXB+Q#rt`S[}pXY#eZWI1YgX8 V.Zb=~]=AYn};d@|1Xjl ኖ2_O?SH3R_KYq*LG;h6p2YEnN8}X|d?d|Eě2ayZa ajc`xIG.Hby-h~,"Ń@:޵90shm% 2%"|w/Ow.H#4Pzǀ bǁTq S@deפmRk=WtDxr#=xx/fb8"Ft1 q؍[P% SL? QJm5LJ'ڜ:XuۛG27F$HueS΋pJK_E4yv J'Kvm"S1p˳7Nj 呥Iqx>,[AI>`Mr79 !}V[bѵ ֣ 0T{2b+챲zTVS.JBXqao |n( Ԭ>~B6d\V/ܟ޹&%lBdtCO!@vG~ឭMbgզ}Tܓͫ7Xo3tvvL =yXW3c`'7l*}N/?y{rrxs&BFE)=[^:Y@3@I||#5y"@҇yCTjo"(KUQsՖL$X@yAZ$ mX|)EnPPgް{p /g >qrgwPcTOPtbI2!oڅ;n ۱U^QG1mlCzg^|:]A.7wIe\R ҟ4u ||0$5U u{Y] F^Gr](5^&'Z*fSE쭮i9meCvECG&j+DdzapրDŽ iJ|0S-7*>:cdXbyh3 u~0`Vϋ38Yb^b7,MͶZ gN,W#c]d?H'kkVE!蜯fEqw^joF c#8rz<5VA^_Om-B%* ۔*˞ -@8vargc6{2 )g!\dED}*c({'Ȱow{wߐT^Xuz`Z {m]=̩q"O]#[7,\r[2%25Vm99C#%ϭQ!/!Djt?kj iP{*)9=>8ߕਖ਼d}?,#{saφ(stL tkw3Fp P01B$BsB1ǽF@t0硴yv zReGEȭy- +-q|ؚ6t\kj٣8W΢VבWup{=JT7 {+ ӵn;v'ԛ%ݻB 2dH7Qj cI #*D/K~Js.;.Ǘ~"g|}#-C1AxGR,եaq\J]A;sr{iJkk@M'frEՃVEoLq6)vQu!`^;xȃTA`මXli ֕FtIE3U-x,?"1$%#r+V'* :<42+s#cR_Jlw~J"\>t+mcZ6F%Jؒ&-YSF̳>3(_n鹄)@3^^GӃ:,-4QoϦNzʦ gl Q?#%ulpZIۊ=IwnޭM&wPs; aO>uJV+V&;nm3Y'Es! Y8aobv(}ڑ"9){=ltUd9L8;p'fB7ؾ>){Qil| 1xK(Trˉsp y燣GNE/ӣt](=9oɦ !,h{7VX~*%7Sy19nXq16k+ۢ*.#jO%Β->OmT]".W:1ǬeEb.C<44+`FJ^d U`R4*@ߛs9=&КJU+ sC4"f'A)y!zq=FY߆vy֐üСf"3W_TuBF ,)H1T4m}@Bɂ]ŒQ=(@\!JȱܨO݊P1ȥ ~-$?W?Z%29R:cKN_V׻Ow/̳rX[?bjà]з:FNEMk}Ns~?s)sl !NZvlaʧ~>F| է|,~Ihoayr/E)T բ 뚓Cl1;f~amϰF"9 @@b7T݊DnnSYTLƞVYDwdsӜمOA.Z?6x2~M,(MwYwh3#2H _\tCmx`o R1=]  X)y ~p KՇE# xܹ[_!TBF-OquDY#1_lM. Ҕ4 No-NAzl" $v?ѿVH&E*ZU1.yRܓЀ$A/ J!RLٰA? 5,} /?BbIuF㫅vmڦG:b5Ch#?4; 8 Y A!C osg!< X"d `~}VZf뼤JizyY1P}LPpoN׬ OVC k9=iT w xʰqP dS|fCf=^to^|=oIQZ'$>-Iwg mSFcBɅF|yK\/m5[꼩@ytG΍X4ɄO33D^mq?Y2sSCv'%Y⃀߂{p#NI:pJP⦔^7B}PH Ch H,m{w5_%I 5./DMaSc}@D|k"hؾ}%N8#L%Pبzk+C E|˺K PszKJR+'sD 曍tt G~;vzbmI2v' QnHj;'z:-k{Sgn"ë4ʬ}H](n?ͨ^|wtj* K@7KP/"u(BJ6r!O6  j@MX\G:b7hem>-y;<~Wq - ;Y.TfƍStӼuG2,\ "݋AH_=7I+7$[&=,^Փf}ЯZPQf ͲډꬶK1nK@ Vhc3'B7u֓y~uиhCSoLbH 1JϨ;o/ 3 b q;\-xgPq$&mwԞm;䘴H: @,*H(7`DC r&DZlσ<@EusȬ:|0ތ/(jAԚd '#ϒ=_ jb]үlsFe+V 6GgU7$f宑C) euE[(~fwB̤o|!~2(ɃhBm\(TU-[PߏHr q٥ ;Cx5KH A#bwfm1|z'V8:6/vpßOEKoxS0;JR>u9:ҤQJ_}и'uJ*|\n&Z%Ȏrf9EDÇH7IC4  ÀKrPcމx+&R㹻TYyYDqϏ_[b3=M-sIse(PhEG)Ti]&r|uV8Rat0[ v%&"6}?lV< 1~vor⬶Eus9V&⻉cAMթ54ya=Eјgg7:-:9taV!׆#7| HjxMoΰ%$Lzgo\rϊv㻩YX}neu(B"|I]՗BEFtSG) Tcl@XahOXTdE֒GꞜ"IrsZIos+:y\&>3'Mt&z1"epi,E3i׺|ƥ^@!鉑umެN{Ѵ~8A˭v]f2pպfv ^lot<6{hNuUu0՟@,D?V0'$~~۲"-/(-7Ue,9bH[LJJ*F}\maɨ׻NNX|CE3^k-⪍Sڬ btu#RoDKm'1eA *)sQox_ȸ|va<:NO60~ԇ$pTVN&e(B .0i*e|2i,ȶ :Ut |H&vy ԼOkkwn>azI߬̈9ް}B`հt.5?;Tn#j6$s&9\Hꜥ|n9L9dǭ}Te8E+!ҥIB,R/{&ȋ^qRtf` . JٔuQzZKҲpnF+肇U'oR.Ьo9@c/QvcH(.h1h/ch C=~ao[6"O0vn~Қ^}X5oH)|e=ns3T~8ZdR~,?㒚C+Ai+kXp!OW=fL73:KBYFm“Rڃ'niUM8"e ~ಳ iL.ͳ7`ckX+^8 \c68)\2_nlTd CMGe CNIh 6Kmhdk5e0LXazh64\l(S,,ڛ/hLcOYOniY&g'|VUÍ7y=PdwgF9$K?iB^xऴͅN7ߴE |q ֡;y9?N@dxdhrK9bN,{!fK5<4[ɁlҸq'DRJևMxV7ӦE Ϊ,DgpV0'&Ft05>P dTC?V)E91аzP5w놺+֑)jl~fxs2| MFz`.Q") u#b _2ED{R`,/W-#KvbHgiA^ȇJy[4D`⪐Z5~9Э:uI ܚk(HD{s!ޭ%#NKO?~0v'^{)M O|7Vޙ'uˆ}ZF-ϑEPӃE!V*@`[МZQL:}fH(94O!K!۬"pcyx27G}8.xM̘ƏFύ XchE 1Tv"i qmVrHcrÇ ݳڀ 5CS*V牆B-{8"VG-ݱW$'m9hRF.,j<^ykIn-2v E~Fx ɫ+qNG%aqurbT{A0Cwذ5R<B8)&;n/+l7]Q֚<|xt/Om򾍶SPs󩩗dIHãDl'Qԡ,W@?;z3{fٖf@Z}Lñ)A5"TI 6wn1ΪHu޲]PPQ "|]L¬4ER}sVw#O2䒴+Mr>Y+is My:V$kmɥp ,%8|"w# ʃpگ|ɻ6uMkznP{XE έ2]x; "zO$/]dl G 0qшҢt)h[W %!ݚ$`ͬX4`<u" ~Gm׊efk6 [!-ZiIK=}7c|[VS(#윋,yk9݇yO' Y/xZL !@y±a~8Dit;c &wX؈ͣo*tN;u1v!'g_ tWVRhx{1NgTc(>g &ʠ5A˒-֬1-%pw7{'NdL?lvjVa@EaqK:u%! ru`~CWPvū"ۿD9S"N:}], !$F*'pUPObvo>uX39*Lj`xl瀎`9*V0_cO$Q "Ԩ.oRMp؟vz>_QDBIOTiq ՃC@7!߳{|B@PU"4jAT%$%%e~*b!S1(O{A R*:eNU}q*+ ]skwqh2P#{M;Q!hU@ԡem"" aFaU%pN9hF1y02x$ȯ24EhP֐yN*]B1[%}ߛ.k>MvZlc∵ O}y Aݝps9NX5\7,hU.e»{n',RFuɜ0:RYC!~۳deBOD w3 jy!Ze刚ge; r֑fAIQ9x,.3nW֓vڠ"v1XfPE}:v^VTi?!v z8/c+0y.{# Fە,]u+q%Ϣ߭NX{XQ)sskyla^6qng9s8S/kS0NC:'='oA򪸤8W*sT *g, ڄL2;ﺯ1~. aj 1.kP{@`D5#(E\W7E|fCaڸ ]lQmg3ĿY&D!q Sr'C^j"]nYCt!{wՖ fOQ1X5)F<TK9إ@a;+߽TÂ`e#zH, PǘQCJY)V TIkEU=M28ȹXS%#nhrӱP#c1aBa SYXuKHo&3e[@^:J'ùaې+st`~Sv0O9~˔MuOW *ʏ ᱩw?K|",GDfMؽouڤƞ@KVF_tE$Tr$Ԡb`}9t}]dVp9BsGaU_&t;~#b ʴe$t:ApԅɑGk 2ӿ'%:ƘNq{U6r,2J0䯏(qy6h-)@f.n`DP1Su'mֿ ܤ:R+#f'uL;flbHcBܾL:&wy:!Ja9JʡD5ޢl'D1 gVA !"uYmː`4)2ЍWsX_q`W{qR>ASeI^o]`QU!#YBL-B+t^o؍f7>`yⓡt}}#&+NPdP4rդd2pNv2Qm8Dv[Jk{?t.%ќao}=Hei!QEN,)ʬ5jGɄn0 ?{RUWgVTc|?GI>`;=]r*1ƨN_vZmCjb'l[֕+݌z}frڥIr -|3=gymT0c;Gl{>R|bM|+tP W<{å{XMYXh6"Enm鴆cHQ(2cw$K#*BR$ҝs0³6WU5~*.eNLX'Bcbr+h=&6@Jlsশ!R9GP&i%O?o>|myA.7yc Z.+~(a]*)C (cP2]ɒ;=?&כx*L_ιz*ePRѥʗ!7b,wILZh>u^SJulN{eY&Llq$CF7RjWx3FR=G荵3U2}oגj p^K3+odTt2 r6Q~boL>i/X7Tzj= IfdӯzNZ!JhkKN!'l8aqOwO-|mxkp/+ qPR!}Q׮1Z_œw9._KN҂ ѕu<џjNjs"{[mdώ8Ϊ}8ghtB] 7;85|N#ӈySay\ecHb /,q@]~JM %I.gKUiIs<r.X<*^3~m..u?Qyh0du"R* 2ViTuʂMn`Жzp+'ęEHZIYo%:SdS_0+-1 M*۫I+ECAw1~rZp'p~.76::c~Fe"dg` kA r*kޕzsa:w)lS.IgI(jgh*f//FJm=AY!7JU1 o+1zokkGl[Kޯ&0δ 9uPbԇ,_cxx0h e{8R 9&bkFrMհ C4tzltE;f7`U3 {0k]g09T12EFn:pV!!O̪7x;D&-h}"d.bЄHNv۟?w| iA|74n0P>:]fjx>"X5H/e0[RN7HOZ\.{zr.bvSpMA,;L=@cU.@V ){Ck+*\=|k<}nD-Xiv JHwqr]!ºSV`r QIp?As;>-V:ͫBdH>p|bb W0Mm- xn]4,ʀ|K6Sѿyoasw&9F&OsJv7|CNQ, iG0۹4Y7D0hgئm\rwAWN# ߞ,d(,2*wH%.3}[¤]4&Ǯ'zA@C-qX/8RŬrSUJ%_W| )%ks8NŦ)i[lVM&ح+"1hKHI:L\;? Q|aػqc@ա-vhKڊ@Gn9A*E^Hg55ddrL(;'{uwʏ$y8@;82汇lgć:TX)c$j3\ tC#B*@)t%MVYFgLj"s8.j!)*L O f7=(lt '_7diX2bn׫BG XOϐގ ua֎6s!jڋbi"8y˦Aئ)*{+7eG(hlہQ}Xu<J)" D?2FJ RY$t&RGΏS%zuRwD1-L0XDzps`@>/^%emuP-ǜ;d> Z[rLV $wpkPLKIB6ڣRopo0HzLqcsZ+SA %).Ss8s@7 J} P|-GM3$%,`0e`8 ~p<2ZEr~FPX8u`xޓ%=ͷMmMK):q0,"/B;^3\i>& tBf+< =r'%7O=LqW||&K5Ol6?-YO5x},&EYA*C)EY3XԧTh]ձŚRRH%~woFةg&^ٯJsw[w̆ Z%H'rpw+>VgEo 8y!lO> z{ G1Xj]+ôϣ4>Imc+%wQHSp̫3=Q+=fƹ!H'*}捀YZ RuzWb+xv ,ֆtF}GM YLaAׁ1C+Wϡs?V”]@sȦ[/Ѯ}U6+Fx?:u.^szbq> qoR<*qo|A.V'_ug&=T㦚Zxm ?f]Hb| P4v f=>c ̀By#lX?AR)RAZXq;#Wxݴ.1́yKi4nڊNw>jey;XlНK`rd 1iQ([Qri)[?\XE_75EQ?e smE` c;kY&HWEt)Y|8Ȋ8E *J15k\F{oDuk38>uBW8ʦ|* [8g/B3 HcQUL>p6zz_6 ։D\_?涭0I/mM+)..xC>eU)ok;E = rЬ O:6MO5:\q2Zj^$l-|LT\"+.X~jݲ]ܴpwXL߃5PwWɍ<ӯ=S Wj䓖 n5{p Rz:!`U kXݜt"K wd]<ʭj;o3¥] M*I^EEC?\ɋ]BQ#dU$mudV::GhQ{ԟ,m*c\A ;(KVJ\kixGe9 .)k*W"usKK $ +pB<Ȯ;$9P bYG+o_l>|_t/ e4oxm)^A=8e}BކȀl9q˨R\$! 6zf\4p%=Z9J΋mwb;G X\ SbR$F΀`8Obk^ʠA1스cyX&s,uC Gj5oq[_@d wj='on.FvpPQk?cͺ&R SyF1)nzホFsF[~=y!cSܛ&%6%.LE mdTB"[!P.7dDrpFiQlOG]Mc|kJVĩlW#=zV4[" $F 1G .C^-IPeG9N#.o橁IBl pK|/WuIFt$ԥ ӻUU aPޕ0 K"wr+1sM`@u5Vu:_vea w]vԔK9ҮCz)^1 #bUB6Zd{"kOuu4lk4`ٖ9 .3Z vr}<)D2ɋq]R9gS*J [Kr{}`R)_)%) H @&Ϡش.}Hz hen݊.k49B-|ٮDB|(Hb7F'06+$b|bm>2.},Șl=O/xnQߛ_'PmF^dhaI\{˿$SE4bڱ h%@WJE'g4ekXo;0!`LMsi{r)Ž˅1.Vm/ eibTķK7@!x[cGk٧,Ӭ6f Lz ;Z›?% FTᗡ' zDy"i%Bw{fӵWUgsiT*\A˞4^>h }~SG v4؂H(M F남َou=܍OPѾu&;g<)ݟ57o&ϚLO5}0.ӕX_Q{nD2ӼDi9 @SM dQdh 17 {㳉>5+ZZi`OZ+}Qpp6a9rg%3yN+C Hb5zZv\xގ)URGP\:@劏sM`持&gèGcl! ѓ&<6Reȱ\O|gŸORA/q @29}赍(,F~HL, W=ZIywGpI݄8=χUٶY'SJSCo#D'hU#VY8?L(jKk}I297L [/&e%hhaUmڣ7݈ ㄹ*_N9jW8JO[y$d`Nik.1&9p(ĐYV5b]`{7pQUoE'3vSed3i)EL+l(AeG_] Elp[ƻ]Bg ^GCbCsuYko2& ,OXyW"ZY"h2Q,BNv(!D#kt/@)2iGWH,M0g6`($r˜cejT11N l /"S/F*eȲ\x+ސa){o`B(<EHiLF^#::0hp !$t~ 7)T}؎#G [ha*nw, Zij>0 ݠkCW{zvHY /N.ۖ-NQ *Z&T3~^0 yؑGIf%ZH(aIG4EG+f+qp.ä׌aGxv$O?{+3hbC -w_CWּd[,w|"! MaUuڗB0sZP׌޳0P:CSDSy z?5|jFےH|xQ8sU)[ P& oTuBB|Z?c[%sN>,{f2FOeȠ]{]߰ϲ%6{0D >-EX~\ K"U?FiX+K!h*VG ~\3B $ w@MrzWega w3 XhE|;`b&0b)ޕ$MW+'t1i-!8)Cjs}75 ?SŽĠ i9EsH$r`$!E.D9 Nn )*Z j sTyT3jY'9{2bdz$'#zn_J7an\3fP_ L!o)0(!>2 Ā.Jڨj~bp8Y8jĀ`4(VWo$r!j5?5KXeC-3f{n~"ݾZKCw[~`(FE-wE 1` J mVR'|ûЛY`h-5" w25ل;u۵?ln{G?0{[C{}}js'e]:!M^mAI+Ƒy[}`$ 9=R1.O,Hu9ڒ&\@8D'u~L^6 ;nϋ(^ڬi4'bJI-~2}mQRD~_rh|]OA9TUƥUha#KHvߚۈ +;X"e=cY8*7d} U|bU&Q2R LȋEoJG݁b)~Jof&B,ǔ97,RJT3BK .R&"߳-#+b~oJ_P*kĴxMLPQ Blï=fxS6F WuJ^RIcxR5G\_m ̸9/?x~FN@]uF"߬7_FY}Cy—4 AiA6ukyItv9_ &##^Kgkߊi(#g<|v8ףo")" _ssiӭi>״p,وDv?ϵW=!sTH1,S* xu^$bovdm[_%H׊@M`@H(n ݱX7HpX|ӎspZѬ(ŹXmoy$-\%D _cPg̰ħWrp02F?N -"+q rY9M;+yc X@-w|G0@ކ:zHl!5$h?j)&]o)]5ǰ-2\cҮ.QwݔaxPr;W7?c$\`[#q: :ӵF1mtQƌD싘nֱ vQHSY e `Y tzb`o<#φ[ėE 9CvXGj!_=+H'p}y&:ą<, K nn{xx #E.K_Mկ=3wXRd8Lf ]UQ1ԍb2+lBK D anޟ!J] sw^JņwMh;Isax,P?k-o!5qoA: *|/ru6ѻ \N;׎w3!$My72y=,v»YOH?{8k\v&%!]\Oŭpю,U:H#Q; [~&* O U9qe+=cN͏1X 7ضk.KBQPRu8$+[5Ww2}A>txVyA1-)\ (Sנ{SZ^VA@xKY#|{6?>ßH|'j+0a1AZVbtKhP&/B]Ikm3\N짒Tt-^.3~mkBۈ%|P(`z(hA?!w3 # ˒ 4fd|"ڮyG)Ga.`rx8=5E/56>KJi< >Ǭ㏳CQ"Ɏ}rv9{SI\ tЫ~63-h1܆R$1\kj Ԇ7BL2(Odd_U:J !f62T_~4z7bhOQ3u Q,&0z?lK/I&PDem8)PUD,?^G՞^U-Sµ2햶鉙.MPLʆQV.qR D1uS /=^܋{ZZ?{?Ta̐GSG xEF1iRu Ԯ9y 9A]E~Hj-)Y C 23RCc=ǧ[NU`fH s_Q>xE{Fk>d'=fxjp=䎡C&Qёt,dՊF|s6TxRo],?yOP#O2%}cT*`˄k)/)\ itM--R0F!JWM`]]g,y6`L4 7$в/>3Oo{"mF+"=s4g3 ]+ lBt6w(jЈRBDtP{>hRY ނ*%v jјN ,VARi{>FeuZQ8t,Jv %4O|h{MtY 5, z}`ةkǽP^{@J3.F/җz<"Ԧ.Tbjc_AV6`ZE] <{u5S%a S&3M4 E1Wm cxwF3՝,u<*GQj3X05vOTJ-ZOb]V$ꈊ>c|u"A:<^Qasg wf쿃I"cGh:Jnް0_x3hLo(}s^H.-e !\凜^95r%Rg>LE)Ɩr'.QO$yk}R,p:7tTO::7:9 * 䖡&Ǵgr99bXiH>×эϐ& ))=kdzzg/G+g¼a3雸MQeL2%}T0܈[oDavbZ+F=dE#mlu&rlX+u9c KHỰ|eMnY?=)HT΍#{]_lQ<ˉ%V{M)ŐW!vXȿ /O+pJ[к :xI'2-mi%H4te2- 0CL`59~/P-3j3~~CDnh#9>"oe1ʳLgtnJlIKA^nG}QVW*ˀ횥_Pn!"\+f\eکL*K2u/429[#w}RY&iGmVӱT|ijMWbnl?m)߳[6(϶mxUOj v\< A zDSO🺙ut9fNa(byaSGCF['[2]5yq(Em9`]pJ 'mÆ,kmt=52D_!n#EV${caK%ҙ]tϮ> ,TWùׄ4sz]y`ҧүjƓ񧥆"! Q܁} v+94VmJ8 P0mSNX%r-j哢G9h͓`寮=n೑AtpchFAPՈ'tJ6_%.f)GC;x*r7 yM>۵GDa.!H@y}@q  l !"/艢TcjrvmU{xtW6}163oNESXId=O>@f|d`bBo! h,%LHC<;4 xz-2rK 6KWc@Ű\Z'Gihrڰ&Q cd6)@u4jC'y0;݂\=!Ųߪi5w4)У9 קO5(ױSІ 9zqrՂ8w+a% Oeʴk* ,b.G!f2?:c~`0w_` j[+;6XhVqD= C% '@U~ݧ%rdW0CfJ7AQNxV} yͺlkGvI[ҳlѯf T8~bI)KOjnyi)VjZ.]﮹XZ'e,\}%u ﵭap gȾZUy/I~%QBN^4'ZAJshhђ#хY}*1Z+5E|,Mt\: /0"鯎<-9o9՛,uI脝گ2IA+hаۃbeQBM`5)ϊ&%:[Џ!z<Oӣ̺zj'N_Lvm9 U05Cb/ZpLyڑ'mzoɱ՞p!fonwU9 |K]e7[I@V~Y 5%\p+^$?Xiͭ0ag/^nuwZJ E",&MY{뒫Y. W hT`Y~ qd϶xN\L몮r' .6jQVy"5@fҖ4G]h p\S3+*oxGڊ6V:5C{mmG\\x2;ܩD*7X x688p,u+e!U5}㉍ϐμM9}hjdM?>$w;9\x*bȼH B6$HN {DЀ)Z2nos7qFrrX _D36 u2s咬|xyar$djC"etQZþ=ӒLPʈ5X,Cjy Ho]6{W οXh8qcIꍫt7h8z`I"i.Οt?+4d=|gYC%9o՝![g& {'߁\-CFXstZ S_J tKYv'CE31+V!&vo~O> #[ `61O鼺-FP̈́,عp0> jfX#V9vNϗqa8Jk#[)d¬Y/B Y^4{sWpe@GIx`Z@:w2\~n=rROЉb6YMqp !PQ%-5vE8+奨i39c ]^~ςcp3ȼ{RaG$ҍr-80twp gb w;]պa]ʰ;,k/M(@VoE^(oS|v"Օ:r7Kڔs<ۆ !Y=6ɨzxZ}\4jw(1?حK;74[x,#={!i%!$\RJpEOi߽:} ZBy]:&3:>VO=}y}Biҫ [0hMJfX6'`2+%onB97QIn}+wg#Օrnx!䲌tsF k/l1`+SGYpVAc4oM!FANm+7a6b@QFp{3#WJIt%ga[ [`.Q8pe.&5BEl= +ZBO>!`DZ3mWėF6jeA?:AmHFr9ZЇ*lS =f#V/M$}#ov'X)sF JK*D}YPD* 若V8I5KU["(E7JZBh< ҧn "iHyሰNt(#kݷmxMN%S@s\҄/]Llf-f%:9NX, O*:MS돉M ) uzdu?v9OɻwCMϳ)~mk.E_"N9CfՍMr,ۭAȬ0_S+}I6( Iih\OboSJQ:66-3Qg2lF!IߎsOp+G_6w ^|c~ 9܀s_Hf o v+Qk[u:ZoGVXUTq|"6R^{bx?:]Vp 3 :"a(ۑn13Pyw]" C/j:L{YtT&xGbv3&؊]ߓ^-ж.!dZOXb^zogؔIs{ſ >|u4{&AmNnh57e0󭋟b +UX4&aVy )|N E3RUJKj>3@|GoU2'o}7Ħ0^)_"(3e\GNlPoaVY5c){qO"w͡8'dXm$f-}?i,k"SBM&!TH{1qheM?j>vs4Ah~y;(T%qNΎ# }t>to)4Qx; x?: bLO1ƫU O?=bDK"+փ7G*U5 8cDxzڴ. N&ڦ?VXw]; $y -PJ{5Fo{e-}w*- 9(9ylk?ŐG1=GݍA\fVBS: dVts?D;'VRjg)H" Ykhw?yӱȷې7qftHe*4C_b"3 681"C+K*EeNQnHJskYk #5.=c-Y ֲq|)s8BzBm?.<ǙGL,iT5. u%AFxp1ֽy q"rpWa>ǷtC:aV8NSmX'a՗32&b3u3l%ۍ cP Cpn_i4l#_24.oIaD٢ V>-1镽&Qĩ2]q&^Rf1q+9@t H~|'Vu^]$IhyjvvJnwsk ƩElJMݦ+n<^Ǘ]huEA'L@z. 3QkW$BVp?t\HY@|TK3gLs)k^E6x~ i8-zc?¯37m f'\]ф8԰ѝR"}@ y<׷[pM2%ԴO5t ۈ~/x@8Q] DdZbgyBGmɺTbj(뀨eNϺtOE 7+t?F8P 1@r"cN es>b^Q +c4Py}BG(ۙfWDS .T!}`Nliӱ(?%?4jZk}BƲSJ1N^^$k@{fmR"A} ꈮr}G(cktKۇ{\WᬛY4Ջb< SpǧN5aWfGEZȧ}ZƉ܃Biu~Z+nbm aAJ!s3x FRʟF$hJ jZF)[X&ÓLoS@r'M%EPԅGa-n+!WVt7Ya<\9fh f-^[`aEUdPZVKsrjӆ/t?9p%Sigz~_s(Qm"k=VۅPdDNYF7e܎zt "ož?(pa@lLp#z;b=0:=iJG=vqRƁ'~6=xRU:?\&C=,4v-uFDQ*sB;@3zڔ8h!IJlP2:,ڰGkT\fWz{跋4В%`;2<-iW avoYnj^ S`|M}-p/71a] D8#N)-'^ʮOvGR ƻo6׮X`0 T;|ɞu[PUٜ8&lT p;5G䆼{S#.m1#z.lƺ\ 3)GYUXlK_,R87RIWLS* [)6) ~Tme9( 5za?FB:J gr!V,mۖR{8Kˤ ->Q 8iآR@`_(I$6>Xw52^;c@'tGTWlD6y+2id*@/ O]E qvSk3 Tid&ȹ~Yz[t˜(iX/U_B!̥ rz"_*vÝrJd40?bB6&g$9|>}$! U)¶M/ 2o<:uBi*X'E8LtU,\EcvLDC4W*2tLY=pF稊y|/*sxUⰥe2!1e000g2+3M\-=9\Ua(D}ǁٗ8x4 D&JG2-M0}?Q}ʼ6e։1ڍ45Xg}K$SZL> x]Ѝ̸vw{>X&eLyS,9M1@XM&qvߧîv כ׬*]AG-j@ٿ$'TA:WT 3qU>lV%Ɖp>wtdCE q3WU?-lfJ^^1/k@Q0suĔ{Ds>=ebw{\tFq%!zu SN{e:M)u^DQ,jxOosl7pw+~(bna榾qNyfL"y H._z8H{lYecӇhw'4<px.kj :E)+^r(%Y;b~ͭ:4(]Xt@RCT ` fgv=De VW2g=]Ah-Kՠ]#I.|,{%<;~3 N&p[*.`t='aėd"n̜ބJr8Gfn&uk\?k\X2wflT+P4#5@}p2*%=:")1FqTwEj]x}ځYJe|S+E[@‚ taټ_4R[x̉3-Y}Q c *8:=");֖᫿fKe 6upC8*g_=06CV[Ӿ2w?}  IL%Wj'ݠ3S6w̷څ IKeif'^gK>|fM/ sQiFC_3qOpR[l=CT24~J},Z޺YZ=(LģgfX`\U3NZ$ToX1|aG85'ˋWZ6$VYOW@(BaEc4`ʪ9@/b&&[a\ji[%)(D|$B߮!az^!Wgkr;lNgfZX6@Y^&@@IG8Ο9=q*H v$"zuq(RfC^ې!B`C"3Yw fWt/i!Wk2mRD  G, za;& $+FN Ber ޭq:mnzđ+ XjJvHSLK?Wj$z58`°#1ʝ`3G|@ BGq8VMi Mȍ1N2kVi[s0b~wx>S{>] {$*ɾgha=?C{ ġcP6F*1a^@U_x͙k|B&ZxO6'd(a9,aLR?'k[1a7sGU^%14:ԫc4:؝8Dtfqaii@i pbmc/m:u#tiwK;aWkǡ6pXk&} y1D7)~E`MC @ ,ߖ؊y̸Y6KO&Wi~g]>(0+"/=2r-2"C6m +pM O lѮA[y[$Z2?@#juޓR-mA)))ً3]ҿN֥qp|H{ FjHTY|A%|);]Ί-m2_TMn9wpbh\riaNmkA ?;j]<YϮGy֎}\>6p>oB&E:nhf؋ ?huj7)w(vls8FKfL\- C~rCʼKM%W뾍7Կ[ސLu r553gEѥa^>aJoT!#r)0 Rō P€3'r/Wr(-]MVփ~GI}&89>eLgubp; @B8vͺaEn&LkS_Hь3bQڈuDW~I-#$;:S[ rkp"h94$0$o6; Hąa`j߾\ݵ{ۮӊ?1%YOJ(O[4Rc{ .l/ ADS ]7!:.ܺo*,u&Aw&e{- yYam{qiaV'.`vG>ѐORLNͨNe(`^bgL>BTY/|QPe` ISJgDq,(*Ի=Ɉ0ڒpfoo=/*ɕ* 218|lIO`tLH^#@-闓eSz1W3tq,w/ RksZ%q^ucrw$,2Z q1UEO]~R! .'̆0`y&k>%R^ݠ./O? X[{%P "2kWQ {7.;GNn[LT_p&lLj2p~suÚĩQ*pXdr8|ClvCp5Xj>??c%hmm/eyRb]T==| CVt;2V q64 ɨNo+}C|&\Wl5.ʠ̤Q -.' Z7+|8E <$a84?Xr&8N"a"G;D/*q&}y#BA4t~ _ȪkBusg;Mh)J4p5hh&Y93i94*# <3f뢋asD--7w" ? ENާ%uZ;7T [iOë KӼAczmD'V14.PZfkayNdn4†f3_t!t9WO@pB?Ʋ+i{BJr(sa`- ,h"ԽU-A[`Vt;vy|~t)),ӂX hpL?.!ŪR~I_ʸJz8gȿ g| PDqAvŽVwRLGSXL))CS&g钩fCx%9 q)$dvJ$`(;$[(vp%_bY(YI >%V>GVxey(S)ր,c9ʩzDA4qRZ)I'( ϩbl_ͫ:`HzV֢^UOSV98$ͱшv֤Ҫ̆tan]4}ܕXhv5lLDBQmM)kR /QI3NKw$Gk{1+~1:Yda$z%A-c@bU݃Eq,`TGJW)ƌf 0'Eu _Hém[FE H? TtױOؚb^sHmJZzc fеng(i1ī[FP |)YLdžP&J 1GwYT(3'4iH#][pD/J?=fV=[}\`Jcu?{b"C,ǹLoi2&ثU<,u\4Qn84$Hō)ȗV1dxy["~p/a◩ԡĈAG-Gh!찺TJ܆~*t{ב# a# S?{_'*%.e:f2J#g1|=:{?'4.٩i7d>y\U^|h]Z/o'FN3 a3^4Uv.'"Zgz(ys qI*})Nsqto{JNnɇJ/Nj{>/;h>|,-(HϷuQN5!]<9V 1KQ~I?c/:F _Dq.+ T$xSG3o;WmݽBv9\O&2xwO?"hGj W364= ŔhY!ip׼+se{*{"M@OeN)p3+2iRN iu(SllzUҭeD)dn\MYw;w^5jC$F} JYԪt#ؤwRWKj^D Pm?Xy׈F]kPz[>`CM~1Uw&gwL@.bjFJ 5O[;A+_ҸL|)^rA6Gsg/# C肮;CF6QƵi~V.䂘g^L{vOޣw:5kf ؞ 4񇣫.`Mʞ3zagQYU8nDNEIܸJ1| ]\j }Jēj(&zNۿu-3kg/> ~MQr3⩖HɦvDW&vr{?1/ (ޔ˨n/|0:sYڵtjGֿ]R>N |2YOȳp;D(SS5~Ε7?A;,)A5Ely{o;%[M"^c4%\{Y 8vҕӅ8#*Qk",V;ӓ-ߙvBMq/gX8()M ںYtC`,}V5L-U5{3)xQزvHG2 cF_%̵&E HӸG } 7BKt(7& X5֝E6vzH{),4}! U#'(ЫQDD CUvՄ؝m_ 9M[#7@(q0++pI*ԄUE՗=J~JZU8y<2a݈J+!װ[$kYm} ݺǑrG.uʍ5hO3_I:sX+>f x7eݐ9e0(pb FÀYwQsGQ+.Xi-ցC+A#41'TOmjl…$,m6l&-IC迏OC!(No>݃*A[pxgT]ʄ#`EBsgIïXRo \~eOE=-RXHv\ۓ3=T)-wPN[ȈpGQt R].]ca5،{uɖcWRk 3F(CЖv}b n}UI-umq!X\_%b ?cg;p H p0] YNy7/~]6ZܻfkDf8#TM~^dѺ5[2 )=wR [0(ycfe*3' 0F_뵺 !(6&WJ ."83:isI{#/*EV-E)3l<# O\+%w5,?ˌTP)aYIWX9Ut?d26Wh?7%2 Nح; tga+r.^:'Vޢ{U8YZHDv^9/ !< {0Zfqv@#ɃY6A" 4;VA..,9( s|˓E K -$^NްH_6L2}aH艏^Ц'2;У;^Rrm~eL4=0FkU{oƊgh zd4Kj"UPMFsP:Dm^j0l&@r}K`Hry-0TNYSZ]i~ZY",s%@]܌c}wFk&0OX[Leh Y-$>۫j8mwz[mQ'e?5Y{A7cB,1a\e.+M $HDpLe8cpN~ZtjF_%3NR-O /) SG1َGOحXxB8c E]c0BKłxpђY_.J4JײSڭ{]ґ3 bhFÆ%eD;5?,0-r 1y"1 6B g^ʿbd~ȆW)iss[R+,H$lRӤIMYl-.r8)s̴" @Ihr 彗~ͣK46pK 7|˓034T54to1U8ITa}Pʑ%&r0!{1Ks S?ztׅb;F'e ߐT o+j HPřѵMsxt1y*A#趾`ps9̻[/X%j :uV D‚u ߡ64~J ˭-> Hz| |<VO0zIR[ ;w`N} R<{^zkو[O^ykK|ޝcD8Zѝ"0E}ִf$)#yho(1 n>W]HXt,F`4^?ZU$l(jYS[>7ICypf$A=vY+fBla{p.GDxLKBOT6Ӡih^,d8Ӏ8悤a*KdA1c RfR^ʁR~s6O[}WY$[:=56E[ߚP8qG=`%Pt_F4wC-CF;`&Ki[&Pcy%wXEU)Q-DaJ1T@'d^O+E+?7OJA*K>m,n?~?²o2D/wnt']߰\2ǚ$ kHt$F=fqY[(ja8b_ t~PHx儙Sse$Mڋ.6be!s٭Ё|\kOќ^BJ2 -)/PQfaq+?/s'ـa3qiM!9lVK[i]`#i'\B-#XCcKL.a@XKݳ5um|;V?DWB[Q!s'ld{{H(b.ğU&YɗӨ;{R5;=X,;d5818 .^3@rmX .ɧ/YdMmM !iҐgi<)Ol$+R˨;KU[Wzo4|<7.63m<\2SU2Bx]}FPصa H U.5wRc}iK5j0筅] `;eì:4uնo(8c @$o>k}R{ vkM I6OUf+r \XMq!T.gw9~lQߍ!DuX9W.0E{K TmWWhDK(U}*j_k! rK dZ\/*&f{T+m{~hnhù%vhdͭ}"Z6l^Y?(UEUD%ڵҔźBGc4T3DXt5,3nG,a}WB0), >hf6V/VdDAkk"%wWa'BKp-Lh透O8PA4`67?i dqW%>nCfQ,]c嬛Fvd^(x'2LVVK'4ߨޜVb3}sĪzO-ʷrcٗ(\612{nGI-:JeiӶj_݃n)_@h݋͚ eۓ% 2\=OL%/`֍;oD$s9EB'THtH븄H\ִ넚=qm.س3BpP%cu}Aȟɼ‚ߧjcٟtU,̀Pp,mA SyZɏ ܣ1Xlq-~{DL99oD)t Tksʓ&D/iX =.^"( ? P>*JY RD:("kDFx'ݞ `P-LBFHGE;oǽ úiŮSS,GB&Ժ"A)w\$@B* K]VQa.͟5gpʾ*Tf)-Q /2XSZM-I+pu/\iDW @=-nbɛ$Qn'sN<1X p"s K\D'JjXQft&h篖W 6&Uԗn1b5n1Rē|֎Bd >jb{@6i_"9p?Y<_"n:875O E]qy#kqi?G ] }ΓiH~o:pwZ AuyLA$*M5|>md_R1!2mw+,CHDox5U Ŝ:mG (au}.8 7۩gfu 7kBM-Y:/cuf>Vis~RO(޶fs&Ft d0Y.t{t!^ɇ\ݢES7Re= My#;Jew_Nݨ(] fИi024*J-A'7z{ 歝ϨukaDSvN58mIeg%'Пivg+Cn"nۓX[k tɮ< *J{Y gx]vkSه]Vk%SʹޒD mյx/:n(Iaы6TCԗ6 HoBY=2azh r)RL$g .d8:,-& !oѼ9?ukZd]8@N(B632?>,SaiW[+H?3XjhF/#>G*oQJ:׽rJD5J8nɠ-#xKb~y:{F+O9Ts pۮRI~D^G aMsg:g6j*ƌHZ%!9 hqȍEZTDs@8,P()EI)f0 Or df"NRhOV<lp!^(KZ@0.ZGjPI_J:{7#:߮brd$:;dnAJ Fj' SZtE)S̔_?VjŃ>#wY]w@"xy/.HUXv : ׋l9Ӳϵ)7ׂ _1]ZAo•>WO#u)Ina%RrE|IXͰ!} ÞٹVIս_{/*˜@MI+9%8}rIOCXOy.ȨH1*;bܖoSY ~vpԾbXD|/$KM湝E­1Fc%%*NW=A,]Oa`q [p顿`Ou78Ip2&fZh|&K R_KtnAkIQmȫ2#nP"{/BNXpBD @Ɣ3&Ep]8nxc $~m,VYd*{kvoxe5PyKM8Ǣ[}zZ庨-&]$q؛xe\hMed+t3eB;{xLs" !Σ/3賹b;tuQ5QG oXH)gߍrBaǍ*⑹HHD"e<737LUH`S&a #S69&L ? "YY=T*@pQ`=ς;!X:PyZDӨ3JI`HʐÌd* 6ALK/w5#`5bj Qkr|C;.QH7ˢA k J1q85J l+"ݲ.~ԚZBӴ.!iH}P)5ÞoAN0 ϗS[]5;ZWc  +ϩN0jԴ$DQt<{ͽYv,k9ik{~2ow+<Ę@dmOr e?O*| טY7 uŐEB)&ve83.D%= 4wavtp4݉G|3f z$lm-P\xf֮ӡRM&.N]"ϫv@O8LjERŃm7dFHqL?0oH=!=[hHR; y>-kyY?BX_<}" wb̧Gz~9aP %֥K1e'sJʗx>ݨWĶj!O9W|=SUuI} q R6nAS"e58Y*0fr'1b7PDɔ3NZa96wyџ˓E%on'`A-x7O}ɞA&qJA,욕#insQn5:!CZ D5O_ySXۓ$=**MۄI7Q;˩E2a'd,ޯ=@z9)$=G+I.ZNe>)%Giŝ(4(tE먠-#,If5hYS>H|s{#OMGZ$xp_6:1tȁو}`z2Uo!P&ӻg- ~@i{;s֔? PDxurzMPK sKCKgwRQ{0]ōПAۉȩU7?ޠq ې6*n* v'd$&X "dܤxZL~ZblL1F~70@QFM3cΙm6AGx6* L|WSק: M`,P4rBW9n&c\Tɋ7Əx.6V8YRc|`ij+g0>q:@ò΢({QcPbLєo GɅ{Zˊbwokƒ6DVYom`.x尘ּexѡg`l$n3Ck`;֟G_e{mmH},ԀwT Z3ߍK Y }KgЕ-,Mm)l4 .;s8cK6 PG%i?&uF>Ve>1F#9`&zּԝXD95bLԶ wL7xe~c aʣeiW6l+]gɲڟ0FJ"gi5?Q^G9=*n`q }{YuvgQ;Zfe|B W&uWX >;A 4+D1<\Rܱ]rKy+L'-Xb3U+0{`K\lv1i7GXZ%rBS5JXIvɫ ~퉫@tȽN"7"KThG䀜/peݔ: Ӫex*n> əO{rtOA/*|J:B?궷`s]s"Fj#mmNw0ߜr_0cW@K˛_uTx~{ׇ4v?{|.}ǠҮ'4;n8)h3'N!nGڷ8S>D2q>P:\Pv+p_R'vDѤ]N'Ԛ5ojDwGV?x`ce֨3(@>x xWSJmy2=`Bn4/58YY{]}@seEgyIcF_l'd9`l>BК KCnNOU>L4,6۰DL\#7#G] #?9*:y3Jg6C`ODiz 3q3/#X32aִ'(n7ETYl0+'M|lOY!؝. =y3nm)7I0'@TD9O~&ڄ0AoᔭJ0O F-,f:g6?Og|KUY-"ޥZ m\.A x3&hp.Dx_9 \'i6pXgBdrZ͞/{W{SG}5''sN_pWfK,rk^ ((Fz!SJ/FLVViw$}k59$xܨpJR\ e+›p}C+O]P0r1ELy!PQ$)|Ub12LfC06ZҢBɪmu4_lТE)fȝ*dF;›qի7B?KLJh=IaE vP [3|ٳ[(,8H6a1z޸IE0܇ي jρ݀ XDH:y:Z״bGFIA~gCo,\JXn}|B>ɠWP|E?xa uBc>ܱmuBwϻʼ9cأU#ckU8DhļNOv_Û)(' Oo,Yb IЮPw]CZPcHwH(7=HY^q`ySMQ|Sf! 50KoBZ3[~ur{Fi# py ]2OpR^#7';*öxW7Z= Gv7t?c,DucQRth]ip4S+3n4D>"+i QrP[#"hVzj(;qd-,=86"K-v=~-,$3sL܀bw_Z*gS\e((hbU5ɣ%t^6=f$/@w(FC KQ!'$ufpl04,Yx)1\:]JDI7VC&|syף&IyERP%o8^"p1x1wVw$_Qd}F!ڀU*i8'7~[^^~pr4,ʧo-,"-p]_*y16s@Z_-TsPW&_vǾ_,H&qC6YuEao9uHP+U 4$+X?uw*K9+p{Ba?[K)a:}WZr?ƈɸSK 4(?oA? }Vj5{B n, Bڼ7"wji.OѤTP;75Vq8iMA2.e2&1 X33Hs8j<;=7`U\؂iLޗhߺNdh.zѣb4-"Zؼmo[O>^,0#A4Kwt``uN8e7@XR\;-nyϱ>$㦝':ǃ.UQo (EJq9&KZ#ѲM WgaodiN*#:BCɂ+;\B9N沘@61v˓'QÜe%m \v&2rSֈFY[S Vs.%F;5oCWOUzD=QQ:axfE46 8ꨠVJM˳bރzF'g@VUڹl5FEBhzS;A2 KY'hp/.OJ"l4NVDApkb\JCHgB"r80QI9z fe]Ol-KhyqbC 7A=@NG.#GhۿHjCIXER7M@99'b1G89W !7Jߩi1z;teudLLد"R5ߍt-+gDgՓEg Zԃ? hj ܴ8[xj ~!_&V~0:hFvsR1yMn'RLx(8Ǟ-8 h|o /Wym\/ WYjٞ'q~}s /C޾w9>hJY: x'k$P_;,[+jMĈ\g=eXkdi!㛨$?l"lG>5-$T:wAx<as ]\ZƟujmtN]HL##:Vɥ~J^ i>cӄ/dTSOGӹ0RwVY I443\oz"D%Nj6gww7]  أy]pbQH.hR 楧vā\!Q6cyod]5znkz6f?}ˈ*NIwܕ&>V6 Y+ouj"}Y!۵[ONSM˲僝3, HP)uiZu[' + X^<7:a=L;qxΑ K4=2N C#@ Twtc@3!ľ\.E(InhA|U){6\Y: &ϏPMTG @ǼQjo܇>WX2E kKUZ5vU{mBk,E1DTܭjh! \2X S gsIUP% $+Nj™|(>ۭ2{OX4,_3/9(7!;яn$a%yxn8s0ԝh fl'>@s>OZ]pJ|;^l'ۜwp*P`K"3EIq@2< pGcn{q G_j.__ꮞGPAs:s0x-_C{nLKey[0kŎ"BiYŚ¶a% b.jJj9m-gY|C|aʐb̈́1#ӂtŸP6 KIDgO!WtgtD*Z"少n #{}o;gE`ꬸ"G&(f*!7h/=>*lrѡY7ړ 8qӻ矉i<$ϜޓVO82&H_!a .D};ru~-jx [<ï.`"&;S@;X&.acEHJ@B-KmȜ$wT.w;߆mS: 8;i 1aWD*h?ԣЈ㈾  W+:ьSV!uchnZjS6fCs>hp/${R 1ϱԺ~([06EE8 G!@wAف[wV*iX:oWu1#buIHF PTs'jH 0@>IJk c(cI"NAiN}K0#s3~ΈN`@&` e';=j>jՁ)k6W6zd 8 ^v<TC_~Fe/VKH%u1H<] #qMa'$t:zn6dܻ;Djs3>L(zR@loH#+  7MXSYe=C- :xfYɈ"3)|zV=_΢Qc6!鄐Cb>?.UP^J2"ssHuTo;AJ*h=4@XIy?{ G:wvxY/LQ e q\ĴZ>G3X)ؽ)gqFZY П e@EqyD蹂WA-5vn!fm3o!cM9߉ UkB\&vJcݶHF*wƣ*kj>ZN Nr-;ʛ=#@pKbXoW7PXNl8/:Gt::?vZN!-KM!W:X7T [f%`^c.-ŁFT1"M7nkrqНp IjzO(gywxGjTDeV>Deڜ).*힛UXlTbi;!נsjR'ZsPh,M9!ʍŖ:'gu8Ygێ \^j"O>>L]{(>݀PN,΁4Bbpzeg)G(2\?(*!鍒0s%g˝>kZ#66}JOW̑!҉vZ?~xXg!sGKnI:]} *E5%YÕӕ.j\%'6uE΁CE,@-ʬiJGb&KY R ) hZhqXMv 1s(nD9҇$j5F7f@FЎ F,H@)tD+C9)/@>I A)t 2d+&2*u (o=i ^Ǣ8?@CZJcnl@wdjzG^@HgNZo#JLE@H&XP!8c]p OVu/C ۞/N ] n[U>?6Jmb}X:*]f~Ί^9.AUa2OG!2f0 g.@:܇ 8RH )r c/=:9(΋rCv7t"1xBk\y &JOYΙiؐr<~!x-7R~ӱi n<[{2d,kT CmEy(UcGtѯqؗ@^;n6԰zuYVOxnGb@Th^_DJMpr2jTXӧ&XDLRc ~HL<11 ׷T8R!X^ %."[P5Ȟ7sga'}'Bp5xJDFM !"$z@n7pC5v.jDTEȮ0R g"ĞH eܭ7C!*oSG Gp2 o'?t H_CX7 tc~\2 @;a/k)'B5MRqrAl9d$;)hmDa2Ѣ^.m!M:rغ֋yP>?Ob+3x&gR Wwcи.R;$10C`Ƥ||t,-qÌI!V(E8.Noy<}7`PGmD$Dsk 6eXpK)vc3&1yĔP<^&xJ'\Y 8 blN;SnVdH Tpi=?L՛ȧYN",Lɠp3"ֽٿO`$Fw'@C|y.*JyYqwk_ ;㝟O=0{R/ttSRh}3 i['FV[cU r 5nN4QAXp$纥 =9o|*mwi+y^=.Gř#T k8LQtrcHZ[`Z~!ZZ|*ٳkVfu+pFfnz BHACkޓbb%ySh~;ymx@^Qޫ7 E b3K䳞Dn؆(`5D@bH7>S@tZɟO٭}+`؀3*M!ڊ > RICSHoS.!ŀDE2?[Z֔ۨVfpXU0n3= RTa$Y<`-X*s0JcuBz {&힚]"c&J6" K}xٻ疜d# huQ2eo C(hfb 9\oSKK-GL.Vx,&.\~Yœ~0̤sژj\ɪ4`]4|mhb(:YVLm` lj*`&$I7tւ dRKw @#6]rG:;$ZHx-tvym8R{(zcҝĝ!q݌>iȅL{;yJHhP=Ym ٥lYDh8Vsd(?9\iveBׅpս#%K.ݭD ʶ#uXbHέڳ6<Rb ﵪR2!ׯ~R^1ɔi 'X@~c+RU: k-J@ r FORxDvn~CMrzk-"lphYj_6:B>\W+H:Hҿ%Z{xјTcs2N)xa=gϧd\)2FnDbqx{S2VUH:(56JՃ`s Y7|O?i MWC*zkwKpMFsGlM8 7rM9/ / qk(xZe|{3yVuEU{R.>B/wgVp7U 8SMja~`)I5A)(;xѡ߽A%[Zc;p%a xx@yR ~\4̓/Cz lc"l ә؉ nkrYѓṜR+0IRWqŴR)Pd` IޞTo 06V>.Rd\K'BB 3AH4&@z^E|x 3BY?ډ`FwNz]E'ʷ"ԴCNlbjEݟhCN:;O 1eꀩFʤXX<п\wsY ur?NLxIFُaI.#F)7n loI4Tn7 Sxeey1>z8",,#!_ +D[35^:}}R&''5HvB6V-8<4m% d7Y5vv>J5 742Acc#rb }GPɊ u`uך9T{JXN[C,>[92wŸ& }D7 g;e=7qM闬$TCpӰ$95I3}VZ`k\}Lo:Y[v2.@IsaTuq>jWHl/`!xif)nAdz>yP@\=/%t٤ akt%p%( '79(a= SqY&>Wk>;>"Y &Ls.8`b G(I}Cz]LoMsV9EHz))nqSG zwR#sz*qX=~ !βțL6ܕNItD*plKWAS8^׋+>_.vH2=P k\D:PۮEM~Ok0ᒂL}044/~Y} 1e윋,F?7s2-ַ\tݭm)]5@'z5D֝ZpKhku 0i xyAH#,'"Nr\ 5헂" C q=E2? j m 9g0'M<6Yt_n=;wZ-!RceWՍ/? $Ft# ]$+ 0@z*)+xd `90_h.OK*rE9н甠.u`VGQ-b%l+U  !˝wox^ST[2&O9?)#}U&gx\}ggqsI:@WBU,`ZYC 蜸G9K!ܿcޯÁMd0T]HŝJpSmqW[FVh*d(@FO=LF239:AT&9DeJ!at^M- ?GuA8t6y@H/V- " <Afj$k$Le->oQ%1w@9*hx% =^DIw~?B)[9wa+e oo mVToBьdn?R6_]b ppyx.>8ktX2̹d@&3Z?]rYմw2g.Ù}W<lEػQ8~6CP 6tŷt]kgFcL f7 >v_36촘R=C&r< t^%_LQ'GV-&Y#ͽ!mK%6>A1/lӔ LBU}UAqHn!y_4C,=qI5Uݓ<0*y= 2!6߸Ps+/:e6s5̈́=m(ts\E/JF^7p;ƴXOfB`@zdVYH&퐢vV[ $99ߖ-l5?d瓔م]}j!] q٧2Sl.mFD4} Y.4l*Z'. !3%/ސtI'r3njlKv#7I:LF\&yQB XSͳcC]JBϾ? zL'#(`VQPrlBs}3+rM?p2O@B/77ecf?&O0kB/Ϋτбk15Cpa2sE8a~kJ!Dn((']`큶> A$CVH& Jh!7d}*`[vN%5D߳מj쟐A|mY~pBs i[dSa'*SJOŧ4l+*hʼn-Ch;ba1% Uxτh/a$7ZBPDbSl+b^=hPJT nų(B\]1V+ WӝΖ Ր;7s8An-L6wt;BG4Ӿ:3: !Äp<7|1_AxQC W2nOk|FV`A%h^ Ow- ,Uxb6kї"3UZZx:8Zhܯzz][DPzRQ{96G{C$eh o.tEߐ{|MR$!)G-@*~sR/0ݧ)~1PlUR l> 61c@B*%׊vkM[pʏpF2ĥWੈKc5#$S0&*63jv(G7o"dˮ3|ZD\I(Jj6[p[#z^:}(5G$f'@]ؾ0DžM+~͊s!Z`r.!@6`6鳏g@-Q;Qhedy1.-^ U=K'*;S8DJ qk8}o%G xCS~B`~aF<`RgH98)%r toV{(eHVV{چ r5b|yx HNZ!f*s+fޑw*'Wsp$y3@alY,2-[Hi5A搫7(ibTqc;d`)Cpi l'i]iط"Gc^(P,􉤳țq{Hv wM=%/W .3n>J^ Ae;(R/8$k|vUs*c8Rp9Xf>zfWu ئB馗=YibC{<z"caioQ!jKB; . m)dt~~Tܤg,-7}E"NS"X|@g9/Uy@M2+k$Ғvb MP3 [ ~`ց p|.K0]30\ˊG$`7 "sT]u}|cq,>{")Vo9wp>[oÔ塮ڸ-&@'0es6ы%e.$ k ǡܱGD ГJ/)zC>d3gfq"vFw}cq).n%, 6Qc%L2B3(юfhOVkIB?9Ovji:ǓҰc ^C4%wH11Ya* O @Y ?e@I !\#ذ!rsHkp ?7j58o:Ϯ:"1P;9YlU7̹&awј8L+v]uu뻻;Һmpw: WxXXYnn›n*Oÿ_e <'֛rjLrSwiݧ?MƨJ3)[3hd!7tjs S7YRӮ7JI ɉI=zd3Ok#Xlf .eutQQZK -Rqd?دѠ:#+|j6aV&+.VcQUXTEaQ>|l;촏K[:Fcwo2]76,rH]Kz6 ,atxZ.!" r[ xIb*i GѶ'rPՌݸc{h.]pɖ U9 3T :itϯ j6f7u9mD-+XͳiO@ Jd )qIDo*Kez͌bd*񱋔~[̹3/r8U˄ A9 +烌qJliL~9*B3W/xW :iZEݠ";^k EDf1)dƧJ'G^tP1Ā%S !X P`?08@dNlweÕo7x|/:qnjmH8U@X5oWd #'6\*[5r[6nf5.2C/UpUΌJzhH?A?de1BCcTO,೮gR, ԳV swah  X5eC~DއƗ IuM]N͡CmN`U, A!ɦݮD!`px3RجT'6.*y1M,9~=V$%p{hȑ٤^oM'ɻX!UOĮ:gd NtLMܻvb}B5!Ϋ lsM_E WXTv/K{8Fج/#y ^G\3>P6bO8a N5R%M럮-4=SuH F` g$eH.[o3Y/Râ J|fQU7&D"^s*eq=#w-ypN<3YXd+]<\A{I&G>etJf/X1,!>Kf@BaZ< "\= SRa킫At!9'nx׎Mxw6o; D{bDE>}b Q|cT0a>6^8J674xSe^6\֭or! T oTbfdI)D;Kdi] u(oP{17u=tcOB=Ld)?O`jxǶcZeۄM]7R܂vOۢ a, i ˅V R~b@u^a™:]m3 <cƷ80!@?g`-LCt$ )԰Jb%T=GI}+JI%wI-Aja@ߦexš"xjm9z'Cp| O|O@^Qć:bةbNRU96I&~lZN)Y:-Rzǧ4RTE(qA'N9eLa@hYf IZYD\( {^-,t_1RϿ1^ì C]g2F#k_ێfzp$ $cubǧ s&PNjWM''bF5t'6a"H\UOp[$XuH~ݼb["gfE> le>+ =)[&ll_J6daX!!&2E8?Q̾ xK \ 4F0Gs0HWedYnt&4~'Թw䴼L7򨰦 Awqp]9G3y(PB^q_ʽH9'( k ȏeE`FTswke% ^:pyfrޡa+Vac(daָ dEO$-tHc)i:т G.&|5<b>r_&Jp&jcP ,N#1߷ln2 D`STp:{$$N"֘"Mfc^uW0^}њ57n{Rq>#aX]kAJ^LOLg^w?ZVF :(Hh|6nv!cyӟ3,c24P>r@mPE$#r vA%C9N+dM Ꮞ\-Ge4I§fu~}bXCJE&y8thf#'d<-B)+?뷔iBxQ3I1J7^Zt{RC)'+̌9Wvʋ ޢXHyđF:ȭ9Lq|g:6GYϷ9w.٪RjҟvcK]9I %ܥzľZj2A!=ߚ|f`[aSQh8: V (HC,vkDݥAny ,6MWY-"&IH?妖QK|g%Y˕kA^ Wm[ D4$\ =I5$2z@Q}G7s`Ǔ 3P^geϓ #~X4OOl@*TcǵvLՏ~3M]:RH#=//$ػ\sI%paL+ Ӟ92ͫ4_(1-avG.|ꏦp3٭FVT31fvAt<',<J@g.0uM!y*`=Az!C48Vl>#!sߘU){"= PMg Gs 1xG #U m40"%_٧y(sJi1nϝbKjH}$|͌Z(E }?K\wee9W[ei2(:tҫ+Uڥ; x-9Lj 0֩{|I-=ꌶwYmz̳Ԧ#s^+nFU/¬y 煦 _|(EHw ?{ʜ5D)o6ƩcvRdTK+?_Nn^_siX~k~A&2"b{sSwi16FxPv}, Ny>2_ҩOPJK>x,v>E%RٯūݪbCHK]ݛ.U^IgY!2R.󡨙3°NEQ$ݟF!IA\׻.&#7zp_^uVE{kܲ"ܓ650?9p YmT:BѝgToR`ݏ˪[uH AEXL|4D뼌7'*?6;~=~n?ȟWI+ey-qymtHO$ng{MSHT8F&̃E'y-;?R2='dhwZJpՎ$[E.eOp9Գ+^1o'U~DyAٞA2[CLG3^LQOu>8lf/rA%2zOe?~ hMl@[޻JbSi $r8׃;L@G | jw9=Ou!%sUY2:~9m }#xzPmH {,],JA'P} 4SXqm*Љ,@M BQ9~0^F_j_(@.ʍeѰ^) 9͒:욿ȷ o .l}aC es} r^KA ϓobLb2iv<32]<.bdV!sNlQC|gO l0Y-@{IS۟/xR V\)s EYe|nN {eU)_>Rj+7]#m84^2)<``D]a0}z+Y@i`򏐝A\H2q#Hf5j'v+{zV8'sCiӫ{! !ם^;Ya,9DX pNȞ)!?{,t#vxGLzBG]"Ɛ1uH8yy(((!Tw3\( Qg]0#ؾQͼ⚑ !ǻpm$+Zg=q6hzC  (y餕uĖȇݸPt`7جIk0rN $7&"Ğ)7lȯfab@箭JwUk*/B wUǷ,FU4{xH 7gV؂֧7A WfJ%Ѹmָ4XȢԟ_J,QYvQy1\|ug0/{g}EOmE+K#^D@[q[*väP x!:2h`k>%BNdѲS>!p}^ ch)i8V*_P` l[HO l ,G vV})*VK!H?d֛%^RUA3pؐWی" jH?!wl#M 6@!m^;BȦ:ۧ8mr6pfJ=Lr|Tluja";)"nF.|H1dʙ{-T*8iH_ u(ejZg;UfSO;BSv38vTY'ed!ns(RX#_,Mػ;'$;j. X@18b>t/A0w%m;.Pη}pZIFTM7Q}(JKxM0]݇?:Aֿ)ߨ/X4O%Ս ,D y7pjo~zܠ5ILyb+k=d YȪS_0o>p2VZ_t%rλM0c9_k%@WNjM"xxgZFb x:">PxhsK[G;,:`H5m'rPx Ak|&>XO`@ǹVJ+T11["F 3U3.z_9}GA7s #bn]4J) xcF̩)($B*m'EDc$]i1(OȆjnxђxqڏX8grw+&ϻ[q: S~|Ÿ=p3rdD[ 8O.8Qߝp?n I3.%qC<,+6èk`-7Bu.K-[$Q ; :.ƕߧE "|vi@Pfw(5:*=bkȒ n gZU3sڗ!2QF*IJe !ڂ#vj1;˦cc8u%޿DB,D>lx/FMݨA#M2uz*xj']\/?[_R^@f]|VSObt@pG2,caT3WVGm`_]CY2-G<)Æ ]dvR.^t(X$i0f|X>'Rz@M_˾4iO^.sL*5T^F@6kKo$yJcճ06c0M5YcCqo_"2^lgd*bx~5)Ab֗j2 Xf'}}x7"6y楺ҿ s]Yi㵙EWTaXZyi ]"7@E/޶oohcFô=t`*$Z9-mEHAU)wwPiXk y .n/<#hY&Fw94҈ǎNe*h[|@qt%RUoϑ/ŋQ⌭qn nW澕z{%qlCs9_c?ܴsEQۉB_)uMU`ޫ@HL8|d`vbiIEJt+9>2#ˌ:!\,dj5',q&űjկH4o@ QB榗gp:"Bφ5;`>Nǩ$Hў'(d_m:.bhkj?v9Bߪ/| \HLs`wj,K߈91S<[+Aߞ;n $OcIv-A=v)/[(s|uc;!GV"M AUڮ9|4)7PMB/y 6:#fRC&ADzD]5#]NGgVK^<9U3*\RtC5!9{5J<oŎہSm}ʍ?EΧJ'gyP겋,͸2mvHF >v˕5CGmW%~f0'x&nCf2p&U-W,:gL\ٕ# M?߳Nő~ AtBλM='Ai) kܰ !Re~ /@~ֹBgn 2 PnH|C~f#to9̻ks_:QղaeDpa]URj^%Aذ#r8J{RuCoB.},Teۓ7:SEG[W*ha|],|Ot{uGSf)]V=u̼W 1 WT_'?``fzXڋ ף\Q׺ h>{my f/(R%1m`>,*Pؑ'-87ut8r*<-y\!]^-Ve  jk0ΜyǍښ,V-X $<anI h W!g޷pYQJ5:No͜czuVXzrOڀ_h@{4AB/XM>Nu}`^ ~((3d áј0G`?J#NZ~23SK=- F9qj Lh1_ܡ]:QZFhbkz؎Aybe;d{\Kb$[s熼-5/wce).7c4Ʋ[dqV*ѳk8~[!=c[ͨ;d< u jtdvZ] K1Q] 3@BL|DzF8ׄ&:G:Gw E+^WpMpڠ3Y$.pC#薏" {y`.o=L{뢆RCf$KO[bnU3Cc9Z?.E:;KF(\Nc\j T\@so{U:[Y4SyZ?X׭ ŵ+.Hs ؀5V|6M}"KH]~xBoHuOxqRf^M'BrC t'Y`\G-(*^F}iE޺92,ߏL˅\Iz(<"/F"fx0w =%7[p 4ci +U&$:R9T̈0{c Ԝ?0v䁮.ڀ 옘%1D`dg3+N1Bp];,8aO,F1>g<n糅<[$s(fеi4T(hY!1gU3%xdo<^|μ}"Ǟ%5M:SnYEFcXx/1XT?}ɫ mt)9( ;75tu[,|m<+4 Afgp1c 3F4^op>(DP-,T RmqiQpUysE 3:MMWHB (nݘr{tQmj7F%]nLm $UڂX ѳb!cI6^cM8vY֖`~kei93J[OY\wE>kUȄ9pyUFb tTf 1wWz1_yxų&_X|e|Yy _~e!4GEՖ|ˉF x=K֦  L%:3q:$Rv]md()QǍk`cY{ݺ #4Or r6d d>lŊaCvL }lT')}`F2@OsWS"L i8Y,.QǡZ<ZZK[L?Q< 1Mf~o\Q ȼ{=_ TV)ڨ {J;bp?PJmfwKi@J ?UOvC+[+B$D|q9rݠP\ik0;A4#w.xCqo 3#CV{d}&UBlȤ٫ &@d/} kle>` GdkN?GD7y 1QsE!Rh(koG&JAtp-bu~wbZ|H,ìd-+/Ua"pfN꡽-"Ioc\@?̇ҷ,5ݸ`: b۞mcͺ!Q̒Vg&KEWD<=7`2QL(:\J0eo*V9ޙ lɶ~Y BEY*px3Lw|^PԆ5XlȇB@.M^Q7{*&*\K1(,MܪMvPfUR/ُJ5i`ayS^MAe{"NbI!)009DRUU3yU_źOR.X^%iVq/˕ eX3ggغOl^a 彺<ڍC̕G񲓃TXlIxh\.U1 ^2'ZuB\ı8C]HQqn$xW ]GrJ8gdm#lnh ʄWZ?H|fo<>0eӫ{n1ԤKUAxtʷbjP }͋`QxMQjgٍf߫:Y(&;Y(ף盺kC} \"4 m!x$K.%%j[K/RH,E`ng?:j]&eN&G^͛/f«Db ! N\hj˧1S9x!F,< f&5Mkw>^"R<殮Kw >$K(c %#)scܗghYKY3 AYk1̎͘nhL6δz̎@3$cH._0r'of)t@jheM78(\:5=1G"R ۟H߉lF;/J؜@zؽ_ۭá۵D*Y#!CFqrEGJMB2O%H$[p`1O6>Y' C!kӑgYQͭG b]x0L H"`G?b.|:y:#ѧ̔<.]zG0"eѡ7֯Ʊ=E/*WqYudg{w{قu=z% uBKqksEvYd!:eC>|LbdGǟĎ-0(bFW"¯_w7$ b1W <3cjD54'4ʏRT1_۱gг 'Bܺ\WeJp=L!t,);QDUi&9kQ]&cClVBmJ/&n,Û|3rW-4Rl!]]攖nX[zԳ^j@T9=z:0ū5,cMfDR3y2/|#ӎ,"'fhSjn$o+E?Ay;GL5,dT Jug]m)e m>{*ʻD.KNe ڈz߽VuFdonW^nsvsy粼T/ Km -AK'%yA;rz~ߑ.ݝ7ߡ:bgf6h+3PQہmO'z_u6ZH3Uk~(.s q@0gY9|X"pe60I5i{ke`mBPRȑQr~t oa3LCel;dSNqZeÉcj]\0,*#Dj]Ȇfl}i1Nap7 =wばXƏ$c|s\<ϚaP;nꦵ05w`櫫}@։Aϐo[Kް/ە2hv@9/ yꭞV! _a )jNp7ע3(K`\ #.RZ=?l`p$w]r̈́N2Bg\`YW'g9{2ee-pJh!%"^UW:E=#UNG4%Fa saP(@:)sEѩe3l!|rDG]$lf b>%앫KiXNFT m:cb%]NyƸdu" h2G͡Y~r#b[5Lo=^u~ j-|OGL$XYBE?OwK5;uH;h8␎|82@5 PkOWBJLB@^//OCy5w_Y &/̔?𠒞E+Uj 4Xb*R~h_ O&!3D4*t[?^ٕt<=P<-?Qgvc\Ybݑ-R{PNӪ;grҳ?r]/|!6lݑ+6$r<:e;O'"1@7z)'qxIL@rhI'?W86t1ė%4KxVAGk?eM Y hk?R&`vf*0WUJJy^ JIdzțnuY'נ%v_Ma^˂yI(6?&lp˚xVa9PLqL9DCѾj~nL?<Ɖ0VspЗaI螋QX%Xq9j~W6+ g"J'ZކhO99*,7n\17fiݠ} SGēl&e~wJu*d) :$Mp_x>L7:bR-^VJ·WQxZ3Wiky&SֽZ[ IL0¡l, M"Edv]鐌z`| ǹVuq?89& :]qksC~QINgNCX[&j_ydNۆuOy] ɞPc_Hd7Ȏq m܉M?˃kg߸9q77& ueZ@+R2saɟPS9xքIluMU h"0K%rU+PY1?C\G`R&"-K(lGWDL)֗ð;fcx 6X`GYQLMt/sMjv ,ckuw~8Dv5Hޜ#׍O!*`1c< /7rC."+@>ƨ-qN,Β\5Ns4^p qSq^@~rⴼh}ѝ]F&{d˛4ɾW@" t4 CgXS82H_ay?NIG:b b%MZq%RizV /T? [mhp@)uf~h9o_(`i%8qf"H,VYqAp7 ^;x6  w0og'ӥe'IMavP8d1L/ RhLJ\J)swz)imј8 _x^W\0SрúCUTX0$yQvaqfڪAa졓NhQ¶bfdi>2 O,͑`ylwKi㿚9%'ΐ飤6S)yA/?M)DɮOFhZC9h="V|%zRYnXOAfzEa9%t1݋J#Rw*p N@2hF<,ȕK˃AO暧Q<5iQr3{% ߀}L{-&vP^ <:ue:kD/ Ǧoڻ6◨K4}"Ơ,en=.a~ f?zz.`- H~srgmg͎MЕńDdiGohٮ.K@5|R,nnbR$ Q_dN@[mCSʉMq $q*Mp =u ~$3F ` H&IܓB̺򑲋mRp#jW.Φ|2"^U8 +vieQs=r,0-G2❝+,\w4NH!@TjK = eTtSULdws8Վa4} \އt}%|fG+/8ABo*o C!]hִ:eqK)~dVQ;icey5NmXR7l~'؊j˃?7DE R6D]Qx@~e#_4 @ &J?pRx4k7oB?T{{͝eM}`0> .b!o"A.x|jYQFo#$q_8K!_ygR\):EMxM>yP`k̵YLw[՘X#:VlbqU]W@'nVyUa)QQ-^\ 4aϩwqRB])jB;N^{smϢ%4aQ\s:[rEDϝZgUO!.u Oƭ]2ȾZ#Ak7&&2:FV"o9!'oƫ/5c#zo^9ϽD5F/ѻ |3n|-:`ݵp=9ꀲ{ y MqOh%xqd%L̅:+ 7T Ë!Z9>/:%T~Vl3;U8P"Zu.<(n缇: BA{IKدe Q}pOInjZ,C]cŀ#c/`6Ğ~',X6 Er!OU~T g:}@Gz#fzr;Se_S|MB$0I=Mm)ZѪa>4G;H@ѧ)ˆk 4ۋ"wY_'s -ʶ09Mܩ4sGN_Uk~H7_>H@n {4$2E'oD`%61c=Yȅ -YUT'"=Y/V;>Edڵ9O:U]%2z7`4!w|Je :rN~j~ NT@`)\kQ3=l͐&mev<3q?cm挟n^A\f`y%ryPԙ{GP/p?nɾhϹ "[MBP6J!Cٜ) 2>_wC>q򬈷Ъ)fv 7T2cX>SaVKݜc>ɠH{8A2]y U,*M(o"}=ɳ5 jʹMy)Qm֗A.-}q X%*ROc՜A1:}W&z/28|D@bSF ВMߔ,\@-\wf9왃Bٜ~+ w;eV]bzcK~ʕkb <uMWwW*Њ !.y-}fhik~a_A< UŊt:uĘ,R@!|;\ 20ݲZ\T9hS 'Ҟg[+ fۈXZȚF=MMoqեbpu(92 '[g9dk)? 'g'ywb^F&V߈p7}x`WE+(sE~HiQQ*ip1Έz->f+R 0SUoֳP< =7ZOZ{ZuVBp58(o6r6v% {$!l1vg&B!t%ĎMwjU.fbLgMlZw{ ]@ m2wz{[yF\,I PԶh{q('KcGc1=킸hš.Wԡ.z\7{=eW|l慀.DTGyLALe*Nse#ׯrU'X1-Nշ!^IV; "f.ILZ3?Z @?8IĹeP H ıꑍb00a5E{-mڹ[܈iUh叡5Q]lgA [NN2an-@9Խ'*•̠K?%@WEfx)cמZl=TaO0Qy,L5ryzSU9h ÿrфDRz:H%bb +Y6nsa!u,Ŏg|VEz8aS3!MI.ϲ1x\'C9uVs6 'SH+uIaަχc<ǽ<[R' d x8mboݢe>bV?q$F֝GsCfytw Jչ3TJ* 5G$Bl~nUh2"ʞ8kXRj%`I@ Pi4y(R%- Sn} k!3/MeO&{0=-Юu8ͮ_Ҡճ/)`Rgk 7.>WE؇L^غur ?,d8͍Cu_ow4DJ'Fv8jUVr.8} ܓkl/W_56  VD̐/7ӽi]G1ku{zZOzG×~J6)+Y<7җ&}&Be߂]Hd[mKv62hiI.κ)f9e|pp[1&Sl.9n8|Cc~^F#C^QO00N& q%X *1=qԊX73zf`2_7b@#f_]RK6NmB-aߣ.|FOM%K춠׽`0%Gx⫣;jA˭ʠ[YvI+ [ٮqݝ|3BKz1w,-ͯ9vVTQ$4֒iKoWƀ5UM g[5ߎ3^G,aSmR`k!;c&՝Sn'y߇B;"T n0 ƋrHEš&8uG *j )DKnw,FJx\[obB0cGrYWp[+lB%NɕMBmKB0d۾Chz6w(RD,01'a7N +\a«e:hTP&ә/SJq+oz bF?e (J܋Fb^>7rAffVwC-eH{"V$.; 140XNg,쿽!JZNIj{1U2]E~!=jTu} #^75P1z_Nhas VsRGU1T!bv{<|rT$Iϐo@:g3 Ea'hF sy߹2Syt԰G\/4+q\z#)YzqP {qy' 57ANF![s٘dG|[+Y[:򿋳ʏ V(*5hL804Q@ܬAu= 9Ɩ0TG7fǘS0˜6'PdgKNgOߚ椶,bɰ֝vϿT7Id_V!u藲MMud|ਗoɄLoOt1|DdAX{Zq'=|g^>G"5{}ZHgm?nG}gGa]MԹ`9v8d&>zFeǓ%"b>R ;bα '#ˋW2TBg =>%ZsPQGG$eo)0=濤49o609ҢUѴZ%5J)րK|GD03jJ3ꂚBջm~pgX+"bdW,L XKd ߻Rm%c}6l~n:Z< Xqbv ȸThd72J='1*(07Fmo? @kzE2`A>sr`|j(V|-+s7}%NO}'do&2|*Fdb(4m_|^p+:׀"` >dj T E {d-vwA.4;٪dJar<$glHAs#RJ>ۯMwy syy8kޘ!T@ E 6Dء5翛 ߲0pˢAt迿]@2yؐy rmmv膈ۯxL׋^G*&mⱧ+[B. ݷo#/' PM՛9%xJT š?ô<-$بgFK <7_TnZ!G`w(3jbq~Ps.T OI7h89B+dZs[zXg2gN>F8ceN29QZ,[SUu{JN\pΧ.`uecmF!B21o5I/K+dNp=(@ XPطES_r<_:噋:,dd) X`2jrI C5c\t^kRU*$HݎEfp>"d_䦙hϣO/*'Ov߭Žs^&\(!OEVg|cw Rކ-gQDn<ѡ7Cƶ67(~pMb'_;.rЋh#IRTzoB}DzU;:ТWHI-MX%z:c>ĞIh?>]VZ/`_Idћʛ9Yo<:(ĒCK.+P?40ݥ<$,G-s{ uqfGMrd? <'(ʡ7GD¸oӫy[d]pJNJށpAa 29Ok$kfD'uջSI ݑ;Myh@Ãd6zň[ӻZj8hFBp͔GA SQJ 2yXGXv@ϥ[(D}%x#֧=bhjX&r@^ɧ_u=W^T5T' 4O'y"yŹuA?v0dځKzۃ "=8|pC dH!i8U6eRib4|ɿy @}Ht@R4vX=(qe! /^M;m"C6|'VɲkXe J5DWWY>(`>!OAquһt?Z$Wͽ.YV:$,/.D#fwjgtAqNiA$ՇMJIOEI2+{iu| `)d?$i-~m!EtO[^]; ln5":Qn7?tBR/, u3U^WRWֽG +Y؝jh٣'7.YKzcc6YE]eU[ )PDב>NBRyQlWnmA_c>L/ 뒨3Fpْ:ND@vh)Re NEoFq\V/|KZlNͦ!ˇ{簾^"o &Fȍ~\Nȿ]|F?I/맒ˤ-VP;%w/Yӧ@QG&~{Xb<X 80c*L jPfʒR0t='͇:[<˒jyUYN»47+&l۟o%i?TgR t jӧqP'bN,Yi&V>Ud+L|-b12O/x#j D:1JuU.C%U?i.붯p9ٚ;ଞ&H܂iE9_X+:kx_?53BYJڋTe*LZ#~Բ̗fMmnyplZht]KYU8 6OfSŌdhq˖fuħ1[-Ϭ];fŻ5_?38A הֲjZhC8ιHO. >:z-*h8F筋'>s0q:/|xص!Ԗ홠cIޞN;/!xK5hK4b#rQg,ݥb Dcm.ϱgBۧxG^זk]xJaH7LBc ͉xpDsO]mY.Sx$ !R%)ohMƛTX(Ek]Zp坤{qY}yYnH60wo=RN)&ʵ *cXLzM<؏zޤo 6LAjf򟽼uU ^ y%Gi.P[g_!(XjcpEqG3É Isä=}/L+Ѕ&#Q-> /(8Xghh,\.G2^zJbXx4u**JtĦKV(3rqGJHG{[橗F3?68-nV&gVs -OV,]g~۴|2M}[Ȼrf:@o|-0+2T\ܶ6yH\<*jך 2FdɃB=N_t%N1mDSE9C!w"YD?=CS@Y}j}mt۫9:J^G: @N: RE3r4/лM;I;)8=){.f 2wL@PK'H)CXg\`dlGS>[o>k<+≮xvdt8NypˊȘe Xk\AٚLrv'a4lE3‹6 IXbc4 }3 aR>IȁO? #y,LP [MF,3d/PܳOϛ;Ed$4w0#vp{ W?e]<'$VQ)kf\Eҏ9>ӑ M" "2ɀI`r7jλ6RXVSa ऑ1ӴUFnp41$c{8(i-cr*| Yi*GZ*zp-QH[ghT`;e|R Ns oF)z[_?IO{StGV9QQn咅128[p6Onϕگ. Gy?xn"[I7\ltuJ|1y áC.%c%ta}mT•tơP( DHE׿عlj)jWMOݩ)yFkbUh bqQ<F'%#Sn3m AÓ%Ol,kjMR#񇚱p}P )ºl΀c.:Ll#i?! y\g\1e(yut1h}gƧfxd<Qj@HK FoPM @Uшld|)*.D@o vNn r\bߦǏK[hj͏`y]DL[Ԙ)ZMs'B N/}x5V8TZJв+ېTՐ߰p~ВkF7hH 2=B?5VnG<*]$2X1MWou27'_5{cC 삌۳@&٫t—si\_ "6 `qrQWN+@xTPڙvL N9g-?XnbJ38x7nr">U6yЀy‡k7:sk9ŧ/'\b..㸝U/%x26W.) rP}y%<=`_yRZW$2m:}%a`:3O5h ѝ饅 D[w]l \G_p"[cw#Fy>,XHJ2#cAC iNd#WU^S[2^[ExK{m#.`.`qCǝ`kegN>@w]8 n\"0Ȟ V|o62.?2P%]TAq+dRS$0xSQ=N_ A8\PbC\_^ݱHkzx-7,'Vbݜl·mRU #Ou$y`E8-v woja<=G 8P봦J5en`6X1I݆{dް^nЂ"eJ'gfp1QEA2L<%̾hF4^~{?cןLĔbL3<-wB6OKTx !eKsU ه>/ ד~eRVjA}՛& U.g%zUjMj%1392>ukɩt}Dr s*3X N+0ug[:A%\9@&\ϧ~_:. - +6B=j6nsO,M6Uq$XB=Ԣ8<ǙFV*YLF/}\ՐإŦNle`{/Rrs;jӭ`qWMYo '짾1h4>B2'Nd+B6~9?;0' uU?Z1Sh,`,8tjr@3d-`#be1z⒩%_ &G>S*=62#GV\ۯ-'̖F{[7w/C#o1'ezu+dʣsӃ٣K@MZnV)JMšE]pa:xhZhV}78Oy2go :[:z<\0-7EX _f#|PA&bLxxD~vPS~oZX3$$GsGeN?@#L q²ꠧ2mD^Ov_xYLC^FͰ<7l[Van |ƾ8+I[1$R@l¼8!h>m:(b[6ߴҥbnE KTE;N%ױsU/q",|:fC IZnE;s (] {)^#AܛSKOޠI/- sϰ(_$Np,rV[ PIj;ڕn ZMZ+j#Bk/+%enDl9NpAed~QS/053yx}RBjJq. 4`#[Vwh_Jwcg &--zkqyI+m}9p7s>X:Vl D-)6,{8@:GH'R8 UYUď^*zVUVRܾ q*D\j!QPLOM`L 2)k}ןkdz9R "H-ԫ紌|&ܺ$ݑJFW ȫ4{gc3eAkwZ$3a~!(\0ac Y6]b$Plu I$X븖=o ]W@8 a q?O\wXN (4zjIU1G:w: H.]F3Sћ4:RJَsՏ"*"ʝ0ufsT=OqרGmXZz(M-ӿh!Қbx)g=7ݼ?cXEj<BT[0B+_#) WuGU b@-b^49MZ%N9ћp\moj1׆M9ޞHS,V,/\;eR{n6[POH BI9o.n2a>wV}"8n~Q%71?*@)m[U-,֤F7!Ry~1ZXw |hD1YÖjmcI@O3OxN_) o"SByIA/f=vzLeF3QP${FmZhҕI]{Gdm6+&Htvr~(>$y ;Wm~1yG{⅄Kq26G[Ǽ1LwӇ0 X/bмWڨ1 wmc-T^ v'aFnva$>t!m> k7'-5G"}n]BŚT]B佳tnG~ӀӬmkaQh%~|'o;ɉvՍ SSDhD-'"tȪ8.FT<ʥ'{"VQ F$(bW*[`HP2FzZ,Vw3gķH 9 5r>vQ90$7b2ypJ:{>Wq UL@^nAlΧ;T.H 1@۽Yv^}ֲ%.KeCish6Rʄ<Ɍ ./Q/y0gQJ~Ѷu[2%@c;s94#KĻ-gl;HeZݼÕEEɋ@^"m~:P:prKySAm(f5+=*J핤 4g;q)-T24Bݖt[vxKB\P$`r_ 6a^KmogrX5G¾۩13Wuܦˆ"r 3,<]U1O|ʠa\iqM:G+}"ҳ9Wv+q}_}& FuՑL^ed>Lf5w& 2)9E)Y9Y5hg:SdDGN5=lvjh6e:N.@f= U'οyWjbf9ё; XW:ag% l *~+:\ gqFǐy9{aͭ}.VG@A'KB;ch)W $ۥdiQZPb_U0ϺYXy!{#vo7YsY-lx -ș)\ Wٙ6#j^qt͖^6ź{KoՖyq iKϪOM 4*l`}8mwZ}>rVscFb+ c<"()<2!F*_$2zv:߿^:(/eDݬ5}~O L3P9X9V)U0&xVѡ8P vǜP4[ax]Es4?a(E#y@;*&z8i]h';P2<0>"=ro= ӸVI3`]+Z2E:~O%4b|O']Z_;LO*tMp5gy#J ֦RSʚ]O=KM9eB*W](XAO@wIbm kh"]}':ݕlTcׇg &dJ9t/hl)Evwm;f\aܪG 3QT Kϝ3{y}mcDDAr?Un{i% IY+=I sA@xN1lAYBnRR&˜^md: }2ѬV$W3-mAhzKLdt> \Uɻ")VBxQVp̞UNzL[ $Ty2 ޠ\1{%&ӱIUv4)\XVEe摪WzU̇,Xne%A+w;|goA[e$ĆV3p8(KӷĸU-wh{nQ9:@I a:?;;h4TӢc `4.LϬgMĚ¿Aȇ9ҥu7Lcf=B*V.s$>;]Œe$L3D6YdWW>iXHa=!l.t^(XqkFIq;+d %O/kQJOȗeXA8li"arLk{d-Td#LF6{`E,ē;^'eL"I(-unmyvk/;d"/).!BJ}ёI|qU멼xLGtB9tR$ W )ӯeQj ZmylL&tvHYO{FA<I+- )0Xve{L%%3z@;)zwiquwT/V`+QԲbuI c* g r±t_LMWeG ʘI1j&pGcpˮ/ϛ BUМ*ǒ¦&1ڲjcfΖcSkٱ.TC&l9/ x`e:$Rۈ*=G2!jT%\\jȲ܄@0J`ZA_% (֔ar>T%#Oe,~Rx#mb9*NQ#0=xpB.3Q`}CP($(0X0Cf\O-~2|39/[j?D?Ŕ}Yq'm6'?A` wqB2Vp8q6 (, [$9x׽,XWH*ojq&~"5iJT I -y,( Fy\ F6)@f#2@wi+1z}iX}{9Ggn&w0\fRۆ]U^{%:@~=6鲞& z4'VTKioiV QV0vW~ ?0;VB ]e\L.n{p*zzF'q+#X:ק{:; ivRTObWȪ2 9s1{p:٭cu篅æbA3vfN-A\W`V,JYݫacݖc2:8'J|!ḩd_PBCga} FZc2@vtYXfEfvn_+S׽Dǁ#\Yɝlcl>pE;M5}vJ,FJө9s<>w}TÂ}{q LjlqC̎ej~87zMSmt'Rmj73Cv!1S F587vwYV|T&"Dh,Ou*nqXcJ*IX_Ì[ ԣQQ9 "d< |:`X ~ZHAeAp˘ g#ȎAyZB\>5cϪnWkݛͫ&J8Xr!_}?'yƑ+-s^o杂w%aȀh;FW/!AIGdD-chY*̂k_ľo&C_{OҌC"k9}baLObbúHdaGnX-TC_kyQ˼šf/MG |6tIPTal )ٿKܛ N H*u.ARQo+Ih{Nu?}aāfJ J7b?{8=1iE`ngkgKAqaJ?3线>y9f3 v\")ydu _^x~/Nkh6NɃ}ANpY{ A#8:$Kf |B!Pq|j%љ!t[΍,1syRd ?Ne pڢ{3VmR%٣ B t}ykg hb=#ς]YG2*?Y:7plan&a?]6`t>wDb[IR[nDl;̷p+c;&iplPHj@_I6 |l2 $N,P9(Ga2c{ +C\xh{[e+^WLKq~\%#+Q':-AVp禼FjMa߸mt8swҫ9Pxꇀ2 .?<ք(D8^ca+Q*сHΒ_8lYoD~xC~}, :z#IyRHz\KbGt T豯 M׹檒dO^!'v _h3,Q.ޮ!P:"M\Nvveaۨiy5]dyh'i4# X;/i?Z&Сnl9M< H6Zhtpj#7W477Ȣ18Bm$dKƒ槀:#> rQI)m'[ܽFp S,F ,D+U\tseǍR!甪uAjk"sgu"l#z%(V1^.5`,_>&\ݖ5f;f/:z!@9<F>S\> ([QsLQvIC-չ'|\Em"RO{K5YhD`/3KݽDKA_ ʢi a)rD]LX{h$F_5:*?fD f?TFsUݨ6 2R6xTIٜN#օ@*(M$cD|"9YBI T|_(TYV?.dDn,P5)m7VYi*[ '_|˜5Z{va߯V"eʰ\+܉gKB.+j t/aJ40}/=8n3]%~`'Np~xEdZ^ >#\>.vqbp]\\ *3tx jFndRFX#_TRWM[@Fi%V@`̄_ F$&bjPjlpתB~LJ\n5]k'4t!*$ݚ`]R$c(䔎k6nzuf/DUWe->,^ŀOb rG~5H=ל^ ?lC&9+aYRYy3%~b^G% Qm:^B#.^HM'&עqJ(8RZ A`)"($n6dQ IAu%g98w<湊 d OR-%@jk/՟.uV6tt{%免2"CB:#*[L> Ⱦ!@|>` x}/Q5$'ܜ* HG(hN}~eӍjL߼0>ڑgs߱F\W0T?)(_tw;ypvdeۋ/ vWovͭꅪ;wHý|[V%mB[Gj|pTmҸVzN<Ѱ-=yo΂mN0N=NG \7~MI$hZRiœs}h~ c{\B pspnKpg`CVQCܲ'31-!X8?z upz8^ԩcet=hNC-;s$uZT(~mf5MS`1<%ghn5㵴b>b=yIZch=A"6GQC§;3AҸ.+0o̔YNg.' f}+KcXSكn_m]N@_4xS{gw.8nĕ04v$XllgUCn=ItUbק7á$m #+ҒoM"z=^QȪrB@TwxY<$:A${jH| }YH: 1R\>Ja" !aGwYTRɿ5%^&v %/J Ro'K-c7dGٖ*rȧF"@{~slz?C4d2jg",&e$&'vGkoZr쟓y@\(4{@\?7/SӧhhCdJ2 u]X4$R I8GƧY]ghVMCVܟoWA?Z(~WhsOv_ɆW~ xt"^ѵM^o2MN78hІMOº~ʹqzAUzXhOg-HHE7F@1Ĵw$[_S[d$4 HHE!j!X Rv>ZUS>g:_h8QO%z[BP.XJ53^?*NZ|=㳗U69U) R"FQh>PZXRm Nq|ǔ%ǎpeJh?aV[,(6)''2cՇ2+5ľa3#4.G9#4v T\ƸT9 gᵠ0NRg\Gn׎c[^ّzAbQ͉n06Y?#:ݮeڶJ!ڦ&9x >kM*·޳j@mҗt4!W y4W >WșTzDg9LY#P@((5C<e-7}/<@Ǟ4B,MyiRlJՙ{0xOg#Gm]TձPrI :[&˿pUkR@Q{3Ò}+'Y ZوC΍F7Y⋖S2)*n6>,aZ&jN!.7+M^<LTfL&xeBfnD2>f r< ƒZ-R}7'[<_Ը#^-3^oD-x`$0>! vU!L}N^]BOtZ;䨟኿i]!BySmQ|Nr{3%Ie؟N殩\q̅svrb_[9agӀ~Cj\#=_Dߩ'pvc2}tk27A:+@=4!S.r /BC/ɺaj7W Xd`!Ww F/3r9%6cZCJ[5f.orƱn#EshZgE| j`(49D Nk"8E#Eem?>{ۙ9A㹁`\4gG1U}4%˒RU~L1<؛Cː#"/-8+j*vB!q7]rZG+xؗ]uA;[ s ,(آhqWbK$ Iı]Kq]u:%d~G`*J %&n[i_^d6s^f LS+$rMd8b͞yhM{,>Hkat@hIgNWWBcR"Co\ NhF0wFSP$:zt4ZO7S0j{lOo ? s%G4wM<&%+`Vm<4At;B&om=޺^  Ғ PN8h-E*ASDiF4WZj-k5_W y*iE=\?p J{UC8"D(w;77\7 #2cSO181? rTLNhhR&j:JM2h12׆e 'fazV ѻizx4kB aNk۝PtaP=cDN_>Aު9G{V'U.U;$vV%ReХoo`9l -Z?e)*#MOtl\ n *px^S1'((YY AS' ;(D1{#Aqa|]sŸˌ؍8'3Sn$Kѹj?0vڣ #{ќrWk@"BwbRc[dpU~>aYt~᳗5zưyX2)N/㕲?ͩjíz*̭Nu#b&#McXaiij^e6Žm08߉W(h`H\EЭwK=ҬO*aԬyX d2'xlB,0FK)'629"*s^ڞ[*ʅp=uXid#qOdbS#/3+O+}LY0&j=o"X}QŴ4xۤYv.`N1Q:Z㊭&TbPfB@_',ufѾ/uE~,b';Z3!y.HqH]U.]%ExZ87"[*-) 򁯑yrʤܠg\!#By&CV=F @`*JMTڽ^Z=jYBe@3(C I:bk'U3p86+`B0mB,H3-/OEDW͉^+%6$([,9jpc*φd|涇&l'%S̥.M]O+Oˌi4INRTe/ Eu$R _o^yJl0\ F̢Fd]٣1? af { 9ZR&<,zGjr~MW{xy)u +-ūOy')\/A@IpMRAJi?@S;gYɯlPcrpg_^ kz}grT ?6 ,ŪY=> B*l̹½6EI@> tImrl4^ZƼ?|C+=i*P3c#L|'+ȋ̓oE:fP)wˆ#V-0\LA}iK~)`]0p!YmjG"B@J[^/[['kZ~w%힀Ң= OIQS_t+5|NUkReLQCP"jeb%wsRP vֵr͎3K!c/܈#]o@ MKnN(~(]<`V!^[䤁QFtD,j#~G0(G -dS4e SF<`ԗGw+0s燬hSd[t"h.VV{4!lh u=(eZ \g(\tl}$WYXMbQxV(hUf\5LX'IęV A?D\3BqLUyjng@Mt6Pįg5ǼN_5R A 暏L=j~A^6L` FtlbZy~-<*C~Bfuֆc_hF]أl{4io;&Xv 9sgʫ)kq6cgIcbj8ѺÆ ŏ2uVڀsݥ[صP&qPܥhq?$ӲtZ?}zFuNe60L+"|gbК/ۨ鈎ϧ=;|Sˏs9`zw\PJ QH 9XOr#!fu@%juW@_'fֻjޠ+oqkDcK1 B>(Iϻ]TPZt@ tp*qB2ϖJ+)ZDfڽrGΓW{)U@жr3,~Lec2m>eJԂsa*^=9/zrt@4fGjIeRV%8;496mcr¥;$B%&U:ryx3ڼ~f8Jo<3x{2AO]>e?>Av]-37 m5A!) q.W1x9VϼުL߳rTmASAWTdB)NJDE,NV\/7 !XhG-R_X/BSvG (ko}yx{ZM9sv!#ajwtqזq jru϶UW^+fK=0'!-'()Mei.L*=c0XԷMbrWx` gYTWn˩t%s:"δV:زUF}86AP"ृ~V}ezijхMWDnlc*nr̐Uc/\ *02eљ=ϓPl `/Z(g G!cmoJ1R…9y?TZtf05z* eej5G8xscFC8l "#+huě̛{nh`}Y ٱ\u^g$ }C}beKJ<|Qcn|af 侬!5!,Nn˯o&-ebemN {>#.^j+| H l@Luv$ !sC"1"pz[ @U`U5Cv̺RCd.> #W\xVvD+.=񳰗T"S2ka܄"a\B\(+:лƞ'c7tu[-4V',C n KQ%%0SRh~|ZW#71o,Sӎwe{3x0E{5\ՉuB,İT=|B0DtP/;y[MGoVβl2W`z_Aa ri¼[z8Z'.Hv JxOWSQ!.emɰc+3e5g 5W4>5]M(@ i%0)&[+&ղIlg( (3- AL|zlI jO\zM#xN1`u̖C?lI'v8Uy{LNF3u-Q"}7L;/?5Hձ~VE_(Vf2a'-[?6]c Vc| j!ey3_ +t <:{Frь9lƤQ/mׁ7ͪyBq?Xg S)"Wf]sM~c@KMFFr'(_w͔\peZ2'@7?e"*PcD@,"ԴJ!Z dɺ/'VH\v=cdnP3)>|Pz1ҶEz `e^l~sٓm.RZ?&r,9x4oԒ0;q<*x-f,kkv%bna^L!y kDѠV'm:_+A#w=)KdpXT 5r8k.; ik6K6P%R۽/prND@s̀>A Lظ?LS`}RGgw^˸;{:GLSB/zq Ź(v?CP#7V 4֔; u˔D_E3YV5ThG!W+tРX`e z)smh{K9 `RM[%8y9ixL%˗5R/ ɋawAG6 < &WĚeflt>ynl(aB smOlP~`dFvD=.szڕnK_3f-tW%X~炿JU~/U[bBJ.g+SR 2GBDr(,2Njq>ueZXq]Rt= ,҄uNe>55\ FDE$U_urt~VVAjBGA5m-] 'eペx& V}Lf"  19d3MUCO c`H,.P_-1f{gӊ悄"M K Bve-p,wGTE=dYԇ L4#y"RK&Zɬ5*51}DVimŕriOzūH;dQ!,#<)vَHttc!ʡWnrDH[cԝ'\T_ ^@Q@#)/Ja,RwlsL(n =1z5a0zߩQHh0)S˹7HKQ)! 9<x%OQP _~ ){6;6LJOC]C%;肤6ͬjؤ}ϑ]"Gm3։ʍȬ5ˢdFmT%IF\Mgui٦N4TXSrבON|?dmHqnoz檦 -Q-ʃ^Y #zC ជD+Hq,H ׭ulOmRmFod.cKc~Ⱥ@T!3>HLM4J+XZ/:Y =wUy)xf?-qjxy RьDC7FeώNVh u(N݅d̀]l^B7K2C)  U[q816^-S 7Ehb 5kU.BĬG}I>>9aEX9ly!ëPG]UV$ZjxhHܴ k(â\NpD{kzyڗtnU: 5+5n0xqti*Zŕz`.& |"(}+5\}LQ'Ϧ -J{p)Ɣ-\D Uqt6W~<*pVAm/^" sJk*h/pUpbIp>BM{\g`"^ Y Fj1ޙhD+}]ã%e:-g$\K5EKj䲀h ?x!.#" +|`*3i:83E^Z}}A)&<x"bwG]3QP5*| ˳=<5̃.HNrOu[A-gh<4#~ɖeiMEr ?P<6ʏj>NXsȒӛܟ5x 3*׭YnYצqܸfnbqG96 H"['id'vlN| [2Iũj4Bqp̡g3 rn^7cפB <@Jg ^ͧ3ܵZ*.-7R-*_,li1NpFa2Be$"$؋;f bcg| _0D0[6V[6kiI8`չm5-62)Bi=@tr%A4tcO:L|)IiYT!Nܼfw>g k0xwkES4P+qy8WKqe^S17 Qe-^&1pLrHOKmrcisiKm +Ȋޖ)6$F4R_‹6 ኔgt̓4SiI-xa3%+Bwz#r:X_/iЙ\ʇ Ed)}N/:zeLl"fbG_`7R7|].'NεNZ[3*<elD$+; n87!̯ l@XLv2lzN)]d S1@GKCpV{ Ɨ(O"f\ݗUӞE5uфڈ,V*_iBNYpt9YRsS9!޻+T $ve&CRMP#׮EPB[t&4zk8t(Nޫyn 1@XDWgpFN 858=huxq:~s /gHuQ~pI3\1>Mq xKqnMwO^{M/d;z}ddp@Nt_|. <,ι%CzF龓3aH){ބ%Wped*t e:G TM:#C{hj oND9\ʆ<h8\Ĕ@:y5=6N\6%Hz?qԀ!Q4 9]BHtJ5ƨ6 ͬѥ;7&4Kx,-{ጤ^WaƩшɾ'"́ vy`(d߲8}>p z19B5%d൰ wC3 #ε2(u'& ^©Ɋ0A'VZb^TOwִ)<Ѓă ٞ{$I6yD=HfpO&(Wz` p=Tp*!Ȟ쓳K\])u-8?BS{U9*ᕾrϔ9q|+S7,pI t 6g'p BopM4K^ʂ:t^ E.{\%㣔(TJ8R{w57!Η4$Pޡj7Jcj9u ѬvdDO~fY|ta0^hւ!Tǰ0r{I|Q>`@l,qhܝ k^mMVEK OQ`J[:F{*p3o$LܢUGw^ B|e+ukUf?m _5T}}~4~sH7)%C#Qḱ#SP2O^z"4$gN$K_X?H|a렯5%O;0nbH`" O= FQk*//W`tpnj]fVMN؅)} m`zuU^Oȣg+#=՚<0<e(Szʵ[olv,jɉ>'+NFsRR=:,܈26^>š̶Sb4ce4a> T HPa_PZ6D YhʹQP!!|̺`vxeJ{# [fo07wXkS`tFeo<)؟b U6ݦclm382+)7uDڟX.oN5>0+©⓿J]c ^) `҅3Rj?)k3a76Aey:ȿ_;qX^!DG;00X*~,/Y^*jN7U<~ŻСR( | A4@l?*_sJ[뽄JTÕ[ Ȼ]tzm.fܳ OcYJ!~cǫ>N`F.)G'ȝ3 @ݓbIt-Is^ꈩ cV٤y%C'~?/u(L2n̞pG,i.{S8dYh9Q<^20=ziHn^Y B|X]GBCDhxtQռT]xJ}i,r*=e"g^Ɩt*i_6XeMƍ6#u'1 W\ ܑ SD{-^:ݚ8kF%K/R}źm: 6ԝ&Pi_P\\L-ve49M-{~* lfs1UǛw9f#AU5M{Ң [f5AtB !-Jԏ5Q;d^dhhAWzY%23D!4&XT4wwmaU `jY%pBP)d͇B*z=]6L&w>x1֬JT!A6goJ,\ޚ}|"Efą+B$<u )OYb:a%&/,OvSa~yD^Ka5ݗmIi[`Vb nWNyƻXe(5j=_dcɊ+o|Gpd# o}7ź õ"ur'(9Ga֎B%Re;}RmGb+{>ڮ̐^/2`iE&WOܡgmP!?Mjh2|)dT&'%+A4z?JЌFKzJ±ȾM?R>FܯĚ.|zZLicfLC0JKr/ }bJά9I<%5 Pvv `8]ƣcm]@P1YH*Thp+EdwqJ_5q 7/Jf? ;nh+X1Z=9Ћ2Tݏ2kC{›%#GJ.l{0e=nˡC-t!1$: Ӕ |^ i7ID3vöKdʊi8\/lk|?Dk=dzy~QmvD5{ U12F6t@pm޾5d)0@zʼA~ѷWw9}v3{eK]W|zQ!;/6'RbEK'y(dѦ?y-7Pٻ~ /s{~ P;=p96EVǾOx. W\"Tj ρI,ѻځkhHI})Kn |YTQ,:;c#6| MƐ,  $OqsG55&ơfV|OCzSNV{Pҗ{ܖbi N}O&5o)t&_ dOp DD̗ϨW`;&)HlCt6x%0wy Z1{Ax'И}໤far`?>d_7`^Spޅʯ?~\ ǣNՠZZ{4 MLyP{{oyB_Oy+k~+n7ֺA=[)~lm\'+zOBkD{PwЪsc,(kF2>dza:wpHWXLkI}A@5fmŠ'WΪn!t}4WUܷЅu_ouՂW{ N ֖5 (R1͡A?CS| =#)tlW1XT̏VKZknufߔ 1#A UI &z*U1Vaw:Upns"v]/ݸp~n|3L7]\Sh,8em+D$=08m5E@HM弪 akh/}_O]RT^߷L+{jgF'L{|W$nɭF_BC'ՇW3tg{8wQуpPt 椸KAA }^x۶~Eّ["Ea;rMߣt{l!|=_5w,` / p0x?YqרU~agѴm$UܖTҹA!8C aì-9+RF+C&1ZI[AO&~+S=$=*p֧'\Z_- E#2G`p)ؘ22f? /1B8RGo%@m6b"=! ڝ?Ui_ G;p0R^R#r =L]>1. KE *Oq2TSE[pPh 2L4ґ3 WA 윚WKg^3i<Vʀ+/Yt9 m2R](S ҟn}]=ގRe--$x7*a `ʔ;H_ՔzX"[HiY`༲%ҍCK]D'\hbg Ν^IpGTKWn5$-ܡI5 V BFoKk48(4A=!aB Y.% >WsmҋLw^Ϝ,Q)>ӂYNjJ\z7U&*oPɿ`iOG6@#1$j B9=R;B+WLPnFXtS"TXq% jN35Y72͘^dZF2X 6t)}+,*{!wRNw( ZhBxtA5&M Ir{_!ޘ8u.0-єJ#R~b>v[pY^-qC=)>Sa%y| B8Y޹ls~֝N. [(S s5a}ʺi\K-$\@Ge^``KGM`NS[LjTS␒uV)f ʅ0w970Wv_IZhNw _n+vv`tyЈZlpſEXj"Bz>B|4'PAeǨ#\rgx/TPtƛg /=)bD?X Xk|.Tgw-FV2O`ԑ͔UlB0kYi)%mD^HΘ8ŬsObԮⰚg^^Ԃz,,Eq&.+4L)T,nE/.-7{7X _}+<."ei$mB|B:'ƥYP7pf,&6KKj^|$Z5MˮO90F?+l E<6}uo#ƪ31B kOq{:礆lV H Y`OB 1 ߬$-e ^_>)ɂT EKT9MMOyzV@y{v҅tCVfDawLtR|8L fly,jz`H\D!R{^J %83*=E?}]p, Y`yH(Sg,JL*'Y((OdJ\cv:"M #0'yܨYuM=!Gol<yVQήeFR29vF0fa+[elg>THvRT*S-S~ y `k3P MH֫E[>o0D3 O(/Rt &3d^Q"Cۯ3dW&km+(FP}^_"Klh|?}0Y+*} r&{Nז:*z8G-!&";9m|0C56SI!aȫX.=03٠`o`\4Pt04&كVR}x>_(D.yT`X0.5?¸F:HЦрeEh.0ͰiʪYU6@p XLi˚BH-kWV+%zf#%SON8P#؎ٝVb䚶F` r\X 羅jC@wїO[OImfY@mCIEۼ1r&q)=,ͤavczM>鮗+|c9dD2i'Z#o <)+Kw2x}r+(C a(H e5tdyiO _ahh+ Bf+xA@td,<Qͱ]?CZȔ0mDe ҤQ*M9"8φ:A@xt.Rѐ'}Ծ`GSQ_7~^*3"o O|,2E?*#2rA$7a-5ż+"Tu&$^Ps#혛ϭΨ v÷Af&ypK")/LqifȒ5;ކe~r.PCk iPkglKh٢^1ReDthܴMV&xr 0(ȄRQ[ ,if]wx#t1%9|1w\\.Gɡx_!OrwZD/cu6s׹Ac \6%*_/CHHIS%ʁ/ fP" 7V+T9 xbmmE6MP  aS&ZmGͩ!8h0g4$@g-" 4gdst?4ݰARI2{ G .l',KJ(2L[Dl"Lz  1)m |^5,8@lƁDv %pP{@O`7U*=c͡)`a(&pX0u-o]E1ڦ݌<3 n,%vħu3XUH{Q}?Pp{bO?W]i?Vd\0O3SZ nGtui'Ѱr40>}gӉW72OβY&t?25nbB) [>1jqg㾞gf7Tȿ$ s)6kO3\i0`- cyq2 hTYOZn$&>諕jhitv @ejl”S)~A$"ˑ4DP>ecª '^!5>.54l) [w~ ūeP K.^R:0; 5OֳDL,`ze_Џ)p4i@D?Zcc 4JHҚۈvj$ Mҗ0qz@tiF *PqVr Vz{TU+cR&ŀA|9+ b+Ry hI;''=6X{j2\6G"r[;:nn9O=U&NK~W^ƺ1겎^f<>f2,D$S}|}]CXps_يx[PL \X74u{/ѯ/@I` CV9{E=0kEj]gm@Vn{-Rd+f'S8=wy9c 4RQh庑6mci ܬc K*~[]\_.cxZ.>oLͿk>)yj%()0A{jAG}rDw L/_$2cU ;77R}YRp+M5SRܣVz2Lhf|KB!F,YWaԤ.r$~cv&G\jBb^Lui\n6(%Qz)$.{u_\U 0Zn nx(֐#J<s[ x"^z}V4`z)Q-PZzBrd0w7iR9 >;?F=X$A%k0CRs!CpG[Be"PO'rՎ <Wu" 3y~|W7?lNKaQ$OA0l '6T4~-Q70'¤ų EzJ cD˔Jv%P8?P5D-uu8}syڳCz{ $f<澤{ 4h*sܬjsj,c#0|1}gpȋmvz l0n J۫ =xP~hij( fصr#ḲN'M3~.d-/*?}\;3 H#,<v`D8E y,Mo> \l- 7l7Cl;w+N}4@X c?W/,ZCq^0>3~8vbG˲+K+?#Y^+F>)!4wϣ/U5m;SjWtźb(j(_RڗަYR` L nƝo)~ q+#BT%`}m-refhl$t1^Y[]ԣ>4mxƞe;R0+QbS"fƈO|DžbR9྅'Y+$?zK95aa?ljܻ>Ā9\PB9OE3Se4-4Ƽmp\XE)9ɋ㸜KHF=zwb#Fm@̹oﳘEӽ2f%q`ХZ1LR&2 r; M&&dQk2&1W0SX)<ѹ[tRt z ,lG tS~KáInB!@lC|tYOO p:/?EvґkiOţyv!@rLOPfQޔή52%slJA0ۀz!VNzTWؾb]PCa?v*GGxy"-";17;W 15{tx9Be}{ 2?6OkfN{Op[lM]N8B+fكq[uuІR0*'}yx^g瑚  ; !|Q9#渁լ(ə?=ɇr:b7}|K&Ic-Df5s:.ʼnVLAӶ&3{57Օ~JwpSH19up'\(RmJdCAXr;[NC퇕E#%πu'm//Fns\3]RnP|U/4:D9Ck2-xilL!?aZ;6R|ЗA,:_thR{^%_Y>Fŏ9CS8,ŷ g~)&R6ejPEpJjb}:h%Yܿdk_ DSd[7ld9//^A&+/SERQ^rpN%;uU=-a`e,@q! =Xn3-t n}rh/sBs@k O j},MtG!znN c&6.7'~Fz\|7CeF 5gjw8'+&Hlp<)NDѦthD"u +v2{U5߷ރvnn_0"(&Xxrwh= 3*B.EUҗIi&L$ ~u& ȃ"D_.Uv4`X%Vz\T  0G; gsDH!:IиRvTs+αT п\@S,j.̻+BJ3L\a0i|ˌٙ~ tJ1+/oV~T޽5jQ4?]ơ?(K{Fuۗ}8Y%YVL0'q\~ 6SHq9Q.V)3:^>6 GyV7 Ao6vv5;;yG_@P./GX2p.p 0x)|M#/7C TFP#,~z64 ܮ7g,-Ⱦ"cQGjem,N3[p3Q֝R"w|[C-TD6R+瘎=]ԣc">W8gBT55hb) R!2o(`qq<ɋXsi,GǕLSgrUoME-}ߏ[5>ɬ,KZo7ə$ߜ#6q 15oB]؀Φ!*n0zL$#W"u!=ǧFbIo. yniAf8㻾0G}žWТ3n@`ET͜bȝ/hpl-ˮpюVon5B[g>x#FgF_"~l %lERo|^J Bz-Pzts\j4v!DId˿͐B;?r,ݐ'[1+.y!94%9Q?u};ÄG}N|' z)8uoWr%ƔR%D $=eG[,sY OX}u4czY4qz@n"qOW{T`}=r H"DCzf\ۜda(Y^)j$˵_VqϵV_i#MO_|$"5[NL3=:), hpIC.+]g5:+إKNC څjU"US[]?ذzc hpdIuD/,K02b=vĔEl/+탓G%yJ4.x]<T /a%5w0gKEz=4 +&ƎdA_{^BNC80(K2ͤdٻO[Pzio5OcE#ߍYfgrS}-6rU1yp(GsK=r|HЉ?c$ۨ{*p:sO2QPM2z z5г y|[cג_,&{3'vٯwx=3B7}VՅ27^PH@A{6/DZ3BQ*‹'? B#_˴ *#A\B)I]G#܌J _pB:A/w3p͒C)׍,x?UVl. fo!2\?1 37犰rI6p+bgQ/lMh~^\O#1w%8Yxwh|(%=g]V0+敦Gm{?*a'i Er/E9n]ļ!1كRG]v`n:N0yp _ù1 I&2E^\ťe xE1!:c6y`sIbcXj^'*w|iv.">fRS!1(]aqU뚴=2MiDT5SjWd9 dNk,AC6L17(ux! gtn LFb N칅{D-"lE8 ߙey'^Lg${§݋\7>chx1꤄)$?IPⳊЊDWcֈs. aVCpB{G'ݣM1XyA/ +H}݋BC2;o6GPzIVEAFśi +(!h UD4 ;ƦEnCcNGi+FnfcC9]HlrNljKϙj~0}5n! Yp?^d@Wr$~*wa/B*&ʉך]ɂ}97(:UmR=]_ll1N3v=@|"ք.~}axW[+"'fQ祆 ~9/̺9(`xCfF _D;H:T{-M[B?CkF;~=Ώ?hS7lkxH7x{fySY51:"؇GD4i Jw<83.#s0zoF|> -ޚ׮W,6w<0;%nb\-OB7'úu1ݱ՛jTNZfmcƕ4p򄠕 &'d\o?Q'2m2o EVoNujqY %)V\Zc`t#sŴO\;"6`?fw _ F=U@ MYwd x^.c!ce7 <^ D^mHY.6 ŷDkTW"~scFfYU~(3&f#ZzSxtzi/kqeƵ nj8ȋەJѳ#_ 4{P\ d@ؕKOu& Ƴ"|m?@{+ak]z=(7nܩ2edD(!Z6% 1}-̧+* cFQ<'Zpr )U(/Uj*&TmهyG*` SWf $ V}PEeA|rIiQ3\'wqrKjmjR 2\_{-9_@Q+Mu F"zZYc㜁qAWO j_`v2'IoA)O mVXBDU'/cG$Sȥ*)"Y6EiE\v՘it}Bp0]VA4XCK{E*ˬL =3&8p^[1iƶkϱAZo, ;IyG0-z~HelbumЧ%Q(:+eW'NGOx0IJ<#iNx?YL)M xu.1pHؾK"'_IIW|?Ц9KA (>;"ħo5WF@u]\7Wc6`[g mhԌ'CA*\1wg{qT  ?x&Ӛ2 IdK@]ܳ}7rMMKD|@ +2r-L=O7b,xş;֛}wB{.'}3P CPqOl6܃]TٛlU%$!dBA&Y,P%_V\L``;>w0OȼSR-3J{So<.[> 7zyX 6׋H%Nʇ7qX4c[S= ﱷh'^<Ŕ^Crsq? LȉcbP&]% #zXA;_2]l!`p>w;*|֏mw@4>KZpbhC"1q3-4s o לƆ{GW>hKhRUIY`ǯo`n'o<0 /-3 ӐaErqaܡrlh:J;{)Ak@uxȆE?,(%W;l/ zP[4F*E(6+>!B·R[ Ⱦ28C&9mjzPXAi797 U/L:0YxޚR.:G3H2Hr88uuFO<-04EAdP6t\wZsǣc l{㩞vQHUk0IVa E-g*壽>A7Y^X>i;|6qFτ_׀3ACw.DqMP ,Wı[fW %Di2Emzõ5Ѥ*uK.?(D̬B`i08B{A.H" R~6L6)I] Hs*eo |K(Yr :9ȹ>j9'9p+Hկg%h`~72t7@;!c1~]~q*WF^Jl),X_然݌=7]ʋki#61 $gW\K:׭E}C(O:v--dqEKJw_] L<ۄh:-e̹`8E=Mn3D0X+)lceNG>zVD:|ŝP!el=  EkN@8>8udJ7f%y~W򸲸$+^y>rX?|$vP$hpڨWnuRҪO\[Eg΁/f-hW -IMW;tB`Y^eğwoE?- ڷﳛr+-(>&Lz[]5ٴi}3ų]țE OTcw)}؝$YN,$KHp2}PaU`gr9rg[%JVO)1_8 {3ff(KܒʺTf.뾃L1~2:M&~ 1QIISל=ȥJ"Ln)3_c!(`G<"I[ $宰R' .,KkLʅ䜪I{s 4}{崐V 7Vy~E`rABpXrIVп3Fؓ§FR^v!֌ V6Fnu4Oí2n( z@)TǚRQI E{v"U|:OOKx0y@sdUAuʔxYȈqRyu8Rɕg #ΥGjfT}Ik{HVXKXeqA]bViӑ7@q\wL\o8alQ"G(TMM3Cbx+/Zl枭[f+ +/TzH=K<ߚ BZХSv%S\)Z.rk:J!?|_YWF ZG/?#?嚥C%QJw9}y%U?[P<bO|L}"߮"r}U\uH27@آAуh w|\܉'oßLLwT'Ppa =; } &T[1oh O@շV*MkKD8Y#xOB.r EqpfٲnM,z+8vֹ%j S+z&`K1zr}Ϭ{ώZ1V!"3J?W~`DCX*ͭ8T ʇwfo8Јz]Tj!S磳D֖{ˊ;IĬeȔ#.j cRl5 'ʰm.16e2G9msMﯔU w\!(ru2 *N.s~gϡ !N@}K\Uڬt4IĘ2 Q#{TGZ4ܮ)ΞQlE $1Bez楰!沪*{Ow iM8 vƸg0wm)Nh+/|3@m$"CEtS$9jh0'?v>&VT1倮ߧ8> < I+s)eZȄ H l^G疌jpO j =YRA|ӜoB=7Vz9MWw8W7/nQrqy lh3wPΈbdzq>hv&[m=dbHOQ/,e\w!zþ85ϟ}2x8\䕑#sxп&JЬu)w3ΗWȪV v3߳ķ:0Tb?ˇF<Љ_0kO&т. 6W ۪Pn RDGyv(aRd}K7G4Vƀ#R)[,bKCj"gp|*s7z[1!0x XokC|FO\744rWY\֟^,c>_f%iHϘ\Y}J257 KeͲ妙:X UwrJ1^=1N` `2pX'j]TŠaQ`ؒݚ*XLGܕT3hs=~ Ȇj3JE*dK?>{&Ȗt! S’!EY(.l9k!,<f:_kIOu}MwX9Nx^ @[y&x8Jy!͘B_".t@b`. ] y![cm7N&gR`*MSy a:>b6#"\oS08%GYy ?[dO_[-|w2'a(ʃմPZFw >9WDzs(;t lfb[1U-\^!7*ufY ˿ٸi")p ZQ"==hH>lZcFUENЋުct かgQGugd8QyZF&WFS3!mxNdK'2l{?$`Y"lEɶ|lC䞾o!VQOA1\aDu}ؑ1ӓ]SP{2Wǩ;Z;ݗA hN$'' ,y<n23iEeC' br4I8sCF=s<6UX[띹j/Iޯ 37d Gɱ ¹ۧN{)vy~j>n[QF1ا Jk}E)kv4k%L>]Uщ*12\G24d?q;{U tZ Ơ=Q>,TL4dGqԍXT%r}zҹVnOIjRc_7`9^t a mi"\/䇮Lrc \[TRd|Dx.0oC͸"_z\֗· (օ&5=/(;CGpI:T,Ώqus`XR\-'I dCTC5P|PѯV*ZcыDE ȳ2Q7V;a+'hp]5 5spoě7 n?-ii9>S9CCR[V487\4CI:MrvwItjJ9{!:VGA04.au +A>тVkqꂱZ?%rn!TpbڻP@;_c7EX{ Wǫ#}֮*,ᣌ=Q{\F{D2uuIIZ i26% Jp@ױdVٿEE8uVьfe,pb>V%B"O m=uyKbC]\^9?U r#?Hyаi6Pe+OniLܖdJ&u*~`%ECklu#i3p@IoEyo' ?9̺Ǯli\UB(*WfM90xIT>DB/Z8ur*x,IP(>_0U{+~US_{!p3[ HPe=ZTﯷ%Ae=eMo4HIbXY2˥㝁o{abNTor&4&Ek8Gn'hYъ1^qgOw#]f~?M)>ƊѡcIYi{J;Ų$_6z`Fpw] qvE3 C").'V^̾CloQKmوKYʶosz~d-]@c)E!@c;s80\n9Fiߋq &.v<>RzQٱX^9bX^Gw@'ٳ۰/rR<3>NӼپoƜW% lG"ð6 ;+rSkB#ob{!v xz*JB$]ojco$-9<>94!ݿc^ 0Rafq$ی2CYfttEs F oemudfbkXN^~}l4k\TփdNQViKkY@.S7Ӵp[L{&~~sb&M3"Z{oP#:2%w/kӥ6MV!:`{AZ )&~j"3\" mF/=O Fv9.Wm0K$q5f%:1x}~eA9ϫЅi 붳F e&m$:JqlyAtypn{n籥lZkt7d#\5H;T ,_4S?=Ad-9N<]AwufW:e) L`A8sM UqV&ztW) >6'0u9 |^[^ 7 {Hu lke1܋f>9ޯ}g,f>=^t({|yK VPU:rFؽ7Jxm~I-Ѯ-׼I5ΘlC-W7ѩ h_b-NV艊l %S5a(W)%#!ϻ~Ww&I7^APlᘒҗQ}6w?]?JS>4_̫1 I4 *܎4^mu3a# .(Gް|>kxojټyzzFՆzc:j$϶HNN8**&NI%XϬ:|P/IJJYUDc6=|J7Ny8#))M d7&&&o'F:4C=[+Y.?Gjܼ]f»YQMSMƔ"e zFZ3Ei \۬ln6U־]'ha!e1Ū4^8W KfJ[fcG0:|T:vZ snIB5rl\#qƆ։Z^.x^7S#sM#f SڤPZG+n7LXY3 EG )љ^lQ웑>:-Y\mdV^V5=pReY-D܅/iV:DY( aYm#k_cb7 t dkBZ- 9Ɋ2 O%XvxP? 9ۖ"h)jk_p࢙^?y33lOIX%Ӆ  GN nO+b ˖L!cnОdEWӪL[QZ?d{WQdB͇RWcR|HrYS#kʟT$,BGH SB97Lڜ 1.0wC&.Up7Fя8tYScX<n#1/i fҦwW`G;V]F[$ݹQP@̻:8Lq2_g@ewO1P۴ R m5$'p/lJLu}1}qe')N7iG@t[/tO){$bT+fJ@},Y4H4(5˂}si17b`"<3݆}lnWxS-,}BӅ~P[q`\^ '<( T b6!˄:c_fc9rŽW db3e:$Q"!٭%ׅOaQb_n>1C'<\mKSЇE *eQ7\{ڷ\!3.ZBфFaWy*;$RbZw]BG$R =joRe\GB9uF'[Fɻ0-FDu)VU[ie ձxBS7[LEnjVyrcW -v}KFJu59ZK5bKq9+9+QhKP옞3CrXw;*}5KhTҭ% Gfr4U(4LtZ`A@YIx3xyF2َTa:{Κ%jɄ/L_VIs]mPzN:yQCI!8aL~# # w ;AMК!inb܊}rK)dpqrKN- {B|w؉Xa۰9c#d9'ߍ1b[_)K ӏ**`RjIlpM5Av?{HNϒZS[|MEyDY!Ya@j9^[Scv 0cQJwO"ab Հ'm6nXQ| <vR•*WL1 6puRFU{Z\؉B*9jB3RJ™i[|X^֤L~uV%Cp, dRa:n:ΨiK?fg1ioQ]j j|-eј^ ߣ/q{ۖNwX>v=43W8s_I?sTJ0H1R; SX+%}+:*Аy=:2qH1PQҼnߙ x|@'!Y&շCHO@}k9`AJA@~GY`R~d/ft 2ilukR"5 xQC(ƨs<7ꛘ Y=J/n;p ёd"q7`[ ) `OI-)S:4;q$uLP90 E1 wVi-YT.!U.Uuн{gP)=_ZzcJ ـmfo&KR,^'fSaIejBub:W4^jC q'|EGVUv"a00-A:l^ Q>ne#NSs53mJM]O^aciڭQ ^ L}t &|.s"QQIQyV8 .Pz9.}6-;%=VlPwF`3b0ȝ!c,?Squƅ` h]R 25deWKј/lG|7+Mԇ=֖֕y\œ_:y뉮GԲ!OX* _y+"Kql;RmR;S]yAGlF *}],Ѷk8&"2av3o(x&~&j%mV9&?hyaZY0wfja2H>@2X<.pO[s'`?b.YcN4 f g~" yݗB,ȷ٥XKhr"𶬜(A:sL*ZvY+S{ʼnd:TVS 5u{Ђt6th<4Jy<rem51Qv s~dnZZA[X]W eBZ4 b@ Q z*CMA./bA<7˭'6{yq N]/a,jA B+hIg(^TV'1eOW7& A#j=:1cH% CJI%tHi*`6/Q?6"Io03Է9oM; d&ۙv6+R6YycҤxN6}8w$?FGP+3X ƀP?e1.^FQY4Ǜl̕C?QQmc)"M^\Cǣv75_ '-J3ft2s_GA6t-KOV~6V4n,av9 ;ƅt`0@A9ee]P8Eu2>;)IhvxE$?{V͉`,;'m( PÁBt]DkQ走g,DRS | N9SiByB@mʈZetO}m/ /5[f?DmJ'qX~|.`T9YGJ:umcҠ5*29&xsǥ&){G`!"v Km:9yeYfw\=yvBs5C6FKH?4֍ f,oCx ^pCkӬX(0.ԪKl,yFixqdk*]^vC2ko .-v6={uغ%#V/z@*@#}z3^YSS˅0n~K B?-qk~._8MbrLABrUf: \-ğy }T:{؅dȏ ^5C ̆eTjĢSu\o sw10FDqZ\/Ĭj; #@;ofy9Sbm0 < o23º7H, 9C!S%+hB>d ) AobSTtTF7 ](v6C A8}#FqFXZ󥹂Ǚxd#E\!^ׄtl΢󤚌]Vw5|D,鼈UI{I,[3/J=,)+U @Sѽ y e;%w9;U8Ui- 7kQD1Mх Q4l*+X$J;u0DR,ڂxF`YR҂B,z Kr? 7_;0HR gͫ@X[)21TsFuUhj@ {pt10=`՘:S0~ ]t'PصЀǶ ǀiqMdy8D}e \"!}]G1ɵSز! İb}]0Q:u1H~Zf47Xm=Չ}]L1 T>glMLĞ5Ug>I6Bc#H ϷM;nx7;cWF#f'ັlMTo4zco (q3v~#3̾z#NM8(ӆ `yv5=&q0"˟Q7e|abm(Z,!NJiatp@ugΛwSp}f< }hsr%6xj°fPRF"˶Z/_;~$8FjWۼAV\Dem5|7TbAn#(J9DxoX%!}TnÙSC 8)%rxwrm ͞9Q|kM?MM- Us0vL> 9W Pce:Fj-u p $ 4?-@3 mc/BE:{co)J*G}6rnx\5.)sRt&̣ "NuQ*3A~:Pk)@VCaKc|R-/ /om_Mk#q8v;~; ^8aU0K HVFJf\_$짝MQ\F\|=;<&_ݑlR[=g`5{Ga7AЉV~ly=f ;|bpEOA^]* YVԁjs(8a} IU$'y㘩Ix~+59̕$]xB?AXȡ(~o0l#R=Yt02cx4s 2;p3A ~MD7!5vs7V^lplWoRWꀳ<)poS&P{ P)T;A^ȟdF`r&-go 1Z :VʢFX+r5x0TGYXĹYy9' a|tI3Smf#hrA`e{!H\ q҄=Dr4m:F[T 6 @P~$гǪ j>X΋#M܍)<2t0zb+B7yFCbasn5I!ExfHoG/L rdr%,!5WP##pB[iCwWUP˔=CBT^^#L$ĊehSۢDwBGI iCm򝧄*ٵ.+4U..DM-\_-z7u #WЕ'jrO?Ϝ&`I4pMP[nUb ưݺBp]ʢӤl8}EGj"U423~' mh%>/Z9(i ]lRKnsֶOӮk~089t.LACڔ7+վ".|U2O&dOBG+h,5.ujR3othSNɟ?| TmTݝw儗gEɎ\;gKguc4X+"ؤ|!ow JKFc:Fa,˕8/9ױ$Hi:ѹ|=,UnsԓO۵ar)7j.;fG@ț>lH8^h$_%xt_;}^u4+w0!&@)cuTF1ZA5a\ЍMFD o ,u$=-Z[W21Ci萎s7SI%gE+) J qp (aꩅ}0xf7a+>PSg#ɤ[KQ,T*dT5 2zt-h">lxb [<2ʂy, م}1(4i9ƙj2\;Y%ƟN1XRByQ7JZo2Q/'u> Pqp;!6)rmy:Ѱ_4eŊTBwWBXx_*;<÷4[of({[}-ˣ `77D%`VWe#F7 78g,[CŻS 8[֬)g-C^經Bs˭^v{uQ@Q&&`]DUopFs LgRZaG ^L2:պ|u8KѠ;jኈFK(xj@ʟkM5zaJv FaqbyC::au 0>LI5a=ZreC;z3]؎I/U`BLӊh|ݔ_ *hsK$oKON7a` ‡9>;do9X^%1 @2iu@n+caYO+|=m(#(Cn$Cc _ cN{#fö7)6RZ`{Bx bpsyu" me5vo.ZX ͈vHiv -%V{ URd&@Q񆻣 5 }"^.;zɬJJԛ`:|rK.Y2Mõ%l\-9iDm kjLFɲ0LгSl|N7E}|YiG0=儇U6ihJc'nMھ}W@9k`Hį RۮN-Q'e, Y\$%;Hz &y|^BƐr_.~ZRk ܛfZoRݠa ݅# cBul)R0p9wi5Knѽxc$r7A'~:,LJQ+F~f&+_NSia HQ"ÆFlH%iD|,xyO70cgU۶ 8PXƞhp1XHї7Ȗ̠/ lqLwҕůiVm!7 X6ф& X틂@}J$z)#r4l?`yNmq<\dYD>[?kILlhgePVa#'%Vg|QI@mmh^rc=% *V{V[*{u:7a@cSzF;ݫBE^*͕ۣg'XY^`:6Y7FZ>ۋGS(8Y= v=JϠ) kPGNa^Z:jb&VDYeyp}}?nb1 ?fb>g?-\{'{ёˑ. D[QgI L3Fjb`0XpYDL} j^2w5$1]~ly\1)q.~iܘPWOOk c 2r&XژKP!8JenFrs\ۧ+&*F%BD| 7 6b|Z2*O2vSԉnP7k -BUvh 3$h`rrL;mك;Ze # Uc2xh8*V?d~,ǻ@#iY&xM A,u+ssvbKaMԁ]u.ZڗC_b d/JB׻b :Z^*4@4Nn図JC|^LOt):kAhj+p}a:+z(GIʷFc}=Lxi :գ| j4ĐZweKZq끫味A|:khO-&BhmBW1W;~7ACW:cbBtr#& ӥ/RPmrYZj.nݨbEgUcj?@/CY`ɋ\j-Ŝ5:][eW~V8٤Gߝ+ix=p82|^9.,nе㞣z/ [7 ^,PIq*ࢧDcL8~o`S܏ mbZQlz2hg_{зv 9g27~+\fQ#4|Q)bXhY#c{ i -QTIEiTe 3)c&%*v:@ErĖ [dǗxY %=/m,5l"~XiGa v\H9"ƇL8-C'˒ CAY,Y2[*l"M8ehupOC,;#S#S$Al_И3CGr#&qhݤ<7(4GPh}^W.BYГ)=90?]q;z!'-͊ @wБ͕"Qx `h-\TQa܎L#t3Y)upqÔ]-S\qDѻ5:=)}GE{޶Ew-H̬i+'}q)@kšwk;`h-p|6lC}=7:j_VSGb{*Q>DVt)ښ گo3?vShoEWSΠ))hv(o\,#%|q"D^h{as HwB!YO]XtNX-WNm9i Fe -rkQ/B|3=Z c*8Y$v?u2fnES֩8a?]e|⽕Ťޫ8~DX)ϝ({  wDg)G.~9UpQO@uA+9ԙ3 - 雈%>Ą?~&{dՕ,6}Z\ AVrzw?u=>w{r*1d[w_gpc7R:Q×o?QՇEO 1 5.vLx" ä)ʽOs XOm<픷W1R#g@jޛuҰGz A_5:!ZM|B_v|bR'whG2}<$~]% VG?T,Vu W 9aBÔĐo(L~6NA +hpI9n=/xxEWF Sd4+ieL``*j=H1ˑ'c`H@"1рjIHlM*4 5>jRѦp,ﱊ+hL=@ǖ.]j+;V"}y <ٸ?@R+)y5݋;(9\o}:2.ʘh]]YN;F_ cOD]&NNu;",НR/ fkZi%TD1wka֟l׳}o@Z΄Z9DZ/I>{h A>̠Xx2>Z>FYȀ 0sΧ ;jQԘݡE:,w" `r~nlʻ\fWO:"C@=&Yn_ULP@.Y_};dp$KrIsZa I[1 3 Mt?{X=.ArMP[g ԰3*LNK`ɪfvD5|Ou)$T[pj;BQZAsٲ #9wJDxO݇[utdort˯@_ 7cdY`UrUz/zM4 ISI ߊy!q#{$nM ‚8c8Tw@ivQ&Ũ4ufUThuz]~?X v$vb- ؗMo!UXQ= {I{%O;" h|L%Y^ ==P*X-\%R5a|1k0iX@$T kKv@b{>y4m+TރōYv>hE>$ZGqyn!W! ?Ɖf7)%mbl*\x(D/\2a6up;wZuu r_Bk#mV/Mg015de14;xNd y\#P5q4{j裴XSY`E`-&g˳QC:_m$g@Mc8M MrՅ!1e KG6"87ƒ 3+$SpN;]|DR_к`m{+_*kOAƆI\ƢҌ(qP~'f~ l#? FJ3J/bcFYvC]͘` $c>>ϧ)؊P&8Rt2?@1s26eb@ҷto=ZAFm _gP7EF$MH3]jȌp$XVJYĎS(A5;Q?+(L&CNH14ؒ婑Ml'`oErKkc|Z?s`b dyfԠ3$l+wzOC_G޼TLD,h@BY3\W`C!M$^2D]0a6XŪ{ٱd.q㙄8H]O֍?ɟQTx(rx8k2߈hy5͕BqĞGnJzc|Bk]mtWsE@T3^G f7qT^'/q|^L!V$\"a3N͟ɗOCx;%I4BN~ٕTOoa %P'ۓ=:Nr([es+M*,M\2{wM52)0A*F'Aո2_ӧ[>S9Q &K B}dN|_V׾O biFEm=Bq^v{ƻuTO:9hQ\ֽQ(i362\Zm2M*"O$^$B>lVmY/} Sl}άao⹹qp A vF/q P+j56장mĄ6;rMS85Rيy1n, A/^Acpl ~Kq3S_|lz4"?aӳ҃ȞGhVr@r(d/f_` )_-A7P õ,(׸|d50e~>Hײiް*s`)-UEFvV1Hs`UiݢDžjy܊ç<7 JJFޙ뼌Ά&3[zbXQ*Xg g5ॠm޿_Ǩi3oxN&zfd-Ț aj30yanB]bkΗ&kɒI,R: tlY*hj\~[ytۀjW 30ݢfUn@㸫FLUi' i' uT.g*nET7ϛ]/'< pk%ċl)_zZ>B]=- GEzndHã wxGX #=/c[զV^mĮIiNjd:eh5xKjbŠ'rL\; ܋`{؊`iOK|&mU&!YᓐUzhY<᥀ytn9^zJ&O=9Rh(\uquV|TfEqo\3,w'ӉtGf,}[,gh3 Xl/hۉ}Q=] e"Š:- ,yW2(d}iUq,J2ד>;a&{f bcqv7'?&"PN K7n 3tl \6+ў7=>joۑU.Σ9&!XPu0 BnŶD@.x⓫4x#ըnsƴU3NbCw&G%)]IA:-o7[y6j]_=Gږ7&tC^ yc/Hd:e/]0m -v5]D&*n*(G3$'R;1y' .fӳfg4p43j@bMŁ΄ MΪձYk-3;̐? ^XYh!duC\XJ99ϔ\ܳ4}BJiDDX=XAP#$v9@] (<`2X'ͩ?8i}dp>[rȩ"I;~w-b]pJ ق&+5%/w̔DgF^0ʠ|jUy-V]/RMP/CK 5B4ϝJCM7PKq`XI Pu:rXᄵ9B- ,&-~0/;=Sd :Bgɑ\P&7jVWe*L!f0af UJVKyQ)Ǣ:X~$' [ ,UyTY߆at_c e>q SM\-8+x+%6)ZA?MxAg&R/`40OI5M,.{&݉''P"m/ւ}# +6!R$1ƂُfUZeO߬i*H7D0=Po!fj[,jDTٱX :p۲rlzصݔiʴE롬+ ۪b;pRڱFs$="U)@8ј"d6BW:ӹue#Ns`NƇy 1/}AkO>F/_Ln3ԄLLb(ԪZ#s}TYI@s!@ҷ!Ǣü."6cQ~z+ֿr2ZB%Or ݵepDͤ*e{+nMDkV46gyr$w*1iz1Xa}KҜA+#)Sr%e lTHIL<Ȃ.vUzVXҐDz|4PX)T:0*X{D%?ZʊŢ:r$I’-eǚPd3=%\tsWYo֞䖳\2C=+ ҈ `L\l{9-Lym9t҆ ߈}~r=w/Nr)֎5R uv:zt_D 3({O*b p>U syMT[6hk@ZЮN\9tqxb}g%"N*˞KOS|z%wq]<'yf7rMq>"41:ʆ"YTV}GE%Jy,*$> J{.xDY!SecL5> \[@R5gP] \D(EO,Mg|&'s{3 4\F*lCiŊdt)7j> y㭿l8M_lLJY :G,:g{60: q_C/@LCN$wj0¿/I@E2gr9,nZ_&;B"N'&I-`,.t kEcY\+oꞔETA#Cmk:~\UЧ$֦.b,Jɩ7tVm<[NIvB)ï=6N^F7d9fnWYngUM܆NWJ ~? frR .]Hb|8 TLbQk"1̣I& ]Qz1?g|<;/W8T ]ۅ~6AQMI{.{?5L_|˜+Zdzuw"(Ngtm^cYHw9;mFgLV5< yqg?HQ@oQ!C o4&ѿB?'%)CχM2`jT /a[8Nx` 938 Ai GW%0fϵpO6v[L xY'  9`k2:ҎK-=0d)&eF aĥɱ COxID5D:6ߴLƭ`d;tRuk'`ohf#bӃlsC뉂pt`fZ_ZSHYR #+ΐc E*LW>rCa#{.rʯgAM"N8);(5 i"X$SU]D 纁ikwFtX`?J485 K9iF_VH~Ƴ5/*"3m70YNUAnn,K(RZ`N%KӖ&ɖy`2 ^^KivYy^bzgmG@( A=s4*Xb=0Q[©V_#gWrӈ㱶 17sOka-Vct*O#{OUϒw!j˄0Mp# б_k] 1v :ƯZmF%c(ؾm vD*y2m'sǢ@r: H"cOZtĩ?WnL> A@E-b  :pXt%@*n|(P٠,[ق?\<`aFʉ[pԖ_+*0n fa:e#ʵH9b!ϐE+fV۷Pe3DvEHIB8Z_h kT $c{ AC;]#۵ygҢN_Jbȓ  $(UJ//TMv@vL9U3Eϗen2-ݪd `gu99l$#_Vapz_[6QdLCs=Wc5&gYIʢB`]%͉!*¢蔰z *iJ]^s?)Q⑎̉xoB*\k>asVS[ &g%Z tN:4T}#mjQ{F_u1r"K-%6(`%/9u5Ni/)f=WuL~Nh@VRh0`^p G]Z~ -X=M,9 񼄯% .z{ݐ"tB$StE`k/>gUB>DWwTx yEx\X/KGtDvuUgz!K7`mi{N`Lnz|&g{o4F\Z'un5gsZD`2j{Ij<-a0iPԳKyuThإ"4 ZytVsct vڊ5a[8ǿYy/[kK,q \yM>f /6Ciٓ,y{A1qh502:V%]$Ȭ@7@]<òkLxd\+=DM!d2].ݡJʅ"6g6^[[T# W0_nLDȊ6l[կ7xUIMĽ-f϶yEcXZN`Yyv݇SW|`H切 bR-#JIr!İ9&ǽ.cZy&8.YV}^d) i@҄9fET(kCSgK* ɸ҃GԊ+pQ,ě3DR"6P2`7-yY xQ\]ZE ;(\*=鎋Ѥz_(Ԙ#'Cք[;C&=3(Z7'i<_ˬ.VFu.))q3@ꥌK.+86"Rӿ"v=,`<#Rv\OGlo;K~M@s^[ˉG-5}JݾS1:C־5m{ ^DêI=))CZ>VCVP$hyYT>8H `А/(?z$_0]DGQ^gd9a Z=N|pnzmK =ʢ 2MՄ~'EܬaEZ9eesrFuU6jyLe4pVIY*%!&W*ocxP}|V.VMyZ dh15^?䞳yNm26rsu1xVM UUb҈TPͣn8vLa#ʞa ΰ5'K'cYpdhq-9oxcv$3O$֩fMHukwCaw(¿bu'sw_Dg% AJF, NiￄdwX[ zHzeևov*pB1칉^G}5 c1f>0RPB5ftEcgI_߅M(7d&msLf!s&-`!IZm9’ xdvG2X]RZ%-26 x^W9㒔sB֍VyR)؂d VK`oG5GW`(bBg`4|Fo!4^f32zO e%\]V.Xl7~zK@,w<߀ElʳHd\H\]|S71_Ts$H}19Kٛxr81?[bǭ Jr4Os0J!ks0Aw8]PB=+&;OxV?RޢYbWjF9ߘ J/ 0LC:L@#8j=ύa'7X)BAxq*w$#ϕvd<UR5ZGFB%^QLr;4vwOy`TZ&ޥpKh.D$;ٝ}P Uw}>)eGef966(?]=>Ay6LFT>xP7,[3Z~6{e$CSD<yRX&w:HM9Yy m{e #o$ˁBVmġG ԇ$O Ihem#Qzn *iST(qZ2gō(@C%x0È'Ճt v`!l  tr^UR"ʋV3K0v7$J 07x{d5o[z Xz 6ܯ\āqAtN˻f/MSrn$x y.BLUNGR5l[T#sYB:'Ll,":2I)vӳ|X}ڃc}\;m_߄=1He;AL Kⷼvj GxI7L>kjHR/"/ۑ̎gZg]$d ƚ[u@Af ߊ:%ՏRUnbaoe،y[/ߏP-Wkqy` wёu1~tGb.wj^(T@rjϏ XS9rL_yޱzV<3S+lDKVWRץf! ۣ*EeX22ZmZ%dc1@kTw2ΥW:V|qC7&?HZ4_$=ϡ9ICjjmS7u2WwM`_6k3J!+WN 6Q{\]WoSnP34(#υ,@Ziwxa576p1wv!Bc?0;c(ـ0gZuMm/L߽ubGW5b }䊄9d5D[I n]Wż)do^ŦW[lEI?&N#NDe%|^v S3:AvlM2-yUyxu 'Y]٢Em~a/3CHrVH/~D]s4[ &9f,X[V$)dj&fV .ۢ%+bI=Χyssuw;OiFQW{2iטlL"lzzB:]۔it.k2Fd#{8Q~pɶQ4ܚMb@$/b* X#⅕Yc;!~XYOch!F1wksJNلmT*˜cSYOJ8wݼ&<(%r8$7] (\ ;,b^g3HV۳+ȢT$ij!1͚(Tcl:<9t:;(VN\Y!DoO|Ƣo.la\32;qR-*OJ_Ѥφw7'nnB,qmoO#Ȩ oMkvg:G yt%@x&j LgHՉp`֛8CxdD/äi[-1ǭ9_*#tl 6c&Qsڅ6m㶈B+% о DCxE3oۀn`\'.rn@UR؅@qRfȜɼlי,WzIv"ZUlT^!AUny^ Z^ ˼`Ϡi%-7MŊ3:rqJy5^q5xFЄz =1e`=|C Lů,,M/,zpjX^Ҥ ˩x=Ks|w5dѺLŮ{`3s%(Fv$x2 4M7Jҹ\.g aV\{W˔ayhwdH9) XG9!8GvOz N( i._oimyӡZb38sEHh')UV'r dD]ˆ5iX0CUYdNQYG]L0]7jk^qep=*GPåQ'xb[}b]I􄃑sw]oj,ma8_O2Mۂ8Pв_ X)qs.3q&y\Wyy?ȗw^D-gQXNK幚d#Q^AhTyd,-r+`[pj|(ɢ<_G |C`Iod=Ww4k1p3/-}Ӡ39E';6 l>nq*ڷ MunEĂo4%'];/'HףⲛW.a8[ *8We5ﻗٝ (G\y>~17vid#LrDQ8`˫\ PZUq[7z! 6}sAyn m)P䌾OD/hK]O꺋(M;k&ׇfō~\JP{a%]W[MT6ЉsLP( ?a&):Ҵ`TE|ܫL7"CQ{VW]. a/0癥ŕݖkd}Œ6{RΛvfIef1Bẞ{6 ~u 8c"i daL\0KX2IAg5IH{b3S"g֩=d+'i}:Faf`O1:7K3yݺwwL9nW |Z*25 51S%N TE"P3}4is gǮp7%)0 R_ [YxhHИ([ nvTբ)C&x/1NrՊ֧x; \ hEG1;'Y[_|+)})y=wK! lt찻Rn-. V+編kh R#Jd4QY ĸ11+NUph-J/̀gB.ZC;@o"f6vcFu93+c lӍi{ѳ4k怊ZqrvHRZ5Eκd簤4( Vo)EHIA, KfBiƮS}<} M= Ys:JLTDyB}p%n%RN|ˉ"?v N䂩J .N܅Wpk*Bgt2'tKrꜿ6{)X;fSҌ ]ݏ=, ;xY*u~rnt-vۺwV'Njqc/W2Ɵ-o3؄qI*%l#NS M WYuz=M~H*\0kA:YOc ZƁ۴)R9$1[oVv5DƛE>b9{}4CCLasK AQveMM 8,1uÓa$ֽ7 D\~&q)z7H`;}:/ak }iH~7{;m70ý&!2vWIiOC ~EX^LNIK BτG51Z=2!ta流K#z9um3 ,` ieEb0yXOxYwVL` IBt,V=rNe$ĉM9Qe&kH:.7 ə:6?)_9BMwXg@P_K1#b@ @AƏÒcUOIXMxVgoF EuVNQ+͘=p`&u w&9밿J:͇O^۫AK~Yej^|4IeZoġ1~4D0oO Yq h&cP) iʄynGmy&colMRoee_)](-EO[LgrjEوR%7V~ӈ^bSԏQ {䷩ъޫBgA(:B?QLǤBx|g^*RvkK \uoMds1uHq( 7^^~AH#SiC q^# >jPxpeORڔoR8ok">GlϣNe76ṋ̃5*c 偙x* @36&1 <#N,=ϥԟ- |N>}Fw!m1B33.]p{x *e_j3e]GwA!r9U.nyyx| t.6tYZD9k=r>)(.g:TW^S*95ɦm)z;-UƎ"[6HͭN'fs8ޢ%.lM`'||h$#vε5# :~%GS;hw ܝ4ژx14M')8)C7qЦ6f)Ǖo t" D% 7@χAT?azK 3c!f=z99nMKXlV&:i!gKʶS+>'c JLu]=ףe(,UV6jTYR\J>&'c](v_lFMv!efAJ m`*ENaXVx0Z mK6Ba`Pb]?<|ԊUN M-^a1`G烽8a5+K9lfmwD1_^hĴcW0c>h;u괉˞$k:0qsVK m|p-y׭~.,Uݶ-'ΫyN"'^{{V?Q6ڿ(@ 1 i1HqMT41IYx1P"ؽgKjsnP%\-zw9 ]}`Iz$O{!CSԹRtr@0{u?=+A[(a)霟cmOOf,b>ϋS7ڝQ!dP> *3]b`Y3-?`P+?>-9lqDzLXPWH4 '+wT&@k͌ױ5? k%cK.pmbݻ;#ꎳ#b2:eajYJ>:R))M8JFw̌G5'*Fm%ޭBqOl UDpWFb!Dp?qQRJ346 6pi*hzC߯~KÂ#Q^u8'OVRcu;^4?Sb[1Up%?Ƭ6r {Yݣ*R=}4+ʻ\Bzex_p"R)Χ䊼8Gs:x\|OVoSER:3rͮ:ʼnZL$ud> A#/O|r@TJ w,_VKe ȇ'L RֲJda&Kѩ2aSΈA+,{b ^_;&K1[qKq=DVPX5#VC#ʓju{Ecʗ?$|:NAWWʘ*Ì}Rr伽HMi bm pChxN!qdQRhF6UøH1ʽC?30:‚M h(FS=[r7gѻ}: >#OGX'Ka`:i؛v&CQBj߼XU'M*%ŷzu7r<AĀ+RG{<]GNUUuB27_\ c7Ӳ]k5qb2Xt:aM/w/QN>m{DbWa0["bЫn1{c?`OH!m>So%),R:cgݓaB9N^!pO&OĬ.Ü|rFwppznvpLǬ\;:LA0Ssx`舆X؋g>ռNϱJoc$ǒ.>#:ϏOjnWӷ&<_XN82)pfeuK6'0ggdOxH'WĔ|}n_2vc7%m8 QM)'%\v8kI3}1\}`7bmޕ-RjWAo"pIŽjֽt(*+qjvX=E‰W/!fW6Ơ?P :!5B3R.,o#dwmF1;bSLcx}-$2ۈɞ/d$ }ǚd(: B?i!*HX]Ec}X:Kr텍\^֥:nSx3:d;zSe}0j"iEb1Z6BLbrv  񝻒{M8 +甠 wǗ;~زJ8qdzWLMx-ϊ+"UHİIE\s+I9FJ8C Vnq 9X )PsK#Cl2=?Nr2d&°(u]f֛0A_^,mgL@QGP:fi!(2ΕkN(^9LԠpIw`lNϮSId|QJuWߴ(% B!鑃f~0X_v%`2Rc/ȝ6WewjqwprW1"#xN0t!4d:$cRcUs5>y#nj,̓W QM.6KFgJ3Z7* m/W(V&e>$,,gqq}sF0oa#?k ->invSGЏ6Gj:mશ'߷3ul'C[~**koz@z?ZwRcvֻ;.0¤c=HUW4p -qw: F΁&X7tdTdӋYls<(`A] CЁM(|\e&V93{`$* ,=5χJV5NP0}3TiܚbH}ԑtKW'{If1PS9%,W-z$@=źb܇%eeU+,󁆩ŘIL~ӗp5?k.쎲Cz}I X h^;^8S$ܼhMmxz *8ݛd4!/6MZogz+pntTvHSRAFxU RTGTȓVe\$ *{ 9N弸 RvuErZѝ DFrJ%Wr$) @-T͌:A7Vi ZU GTCJ"oډB ">oe[21Z@Ā!YHV} Y*ܠ:iKinI~PJ6ORvJYAgGqQK'ƭL͏ҴN.U cg鵏.㧊Ӣs F&@4?( ?f+&6S=y) mR)P5+ 'ly:[59&f}=7Tffȧ F>}NPYN,i\[@bz8e$&ơ yx"-]{4_yb:ܾ~ Z1lBC:5Sax)`_ i-4=M(jҨUc%#6t qdЇwuʎ_V 4i;Yôi AR93E@MUhFf^]Cv8TN"~@~񮢈Ì WxvaWy6{[굂gcUIMo9Q2g$& KCTIG`j Ļ5 nvTLȍ_`#Տ{j0~ -u!(G!$.S'vz3O96)o P'`vyP{\%ByB@;}7]bcmF<2KM&Z~TI?!ҪٸBҚ#iy)ڎ*<q5Q6J$œcv1WVs{KpBKVE˜WјoiGϒu"zQ^#:3'@OCpswJHWY,~^b=gK[PLPr4/,rkZ \;@a[iW%_ §QBvȴAVt y;# KkddQ*fT`{2Кٲ*X\c'خ̣@j< 2kz0o 7|w`>j3DLnNjCdEæXzb Wvd/O嶛5D,A3j]Up'γ`"k)Mb(RTDfcF@ӫŲ*4섧|MW/~\[2tLȄs~Pw|4);=FH)K,B{[KEtrk@ RB=eoa#[=IvMk uÉ$YYw5 lJ%_i-_`'$Fo1qh)*tefv"nu1REuupʪPQ[: 3\.^YƢ!T)W(} x3Q7}gg>J]s#Ԅ+igdG]W G1=_Cgs f]MHlG  (Q$nIv_C]Z>\Eb FLb^[ƧB{{+:'x$-L+ j\]WHBF69ZT"kx&<{HfpW I6,}wW&^-:0Ĉ?kG4ҍ_ҎhNj4⛚z$B'}LAdw\iϝŏE,N3 5~ \{^a,RPX1!{t1[ pH6dxBpO:aAsd{{]&J'lϾ|׺e|R FOIK ;.ܠv)s9 nR^  _p^v>/ly! 3,$z?BP1s}p֬Ӆ4HZS|"PSv2Kp!st'o>Ba5bEkMT3M#CI8hI]xC0E?š=,ԡCm`~@yϸI-Cǂ1`̱=Ifj* xmC1Pi2^[#P7!ӓ  uZ4 |PzWL, 8*bc͋W뺇,<܆:Q fKrA T\~iFHyFпY\tYj%6^Ŕ?< bs[Qvi@xʬ{}&~U7PPOf҄~ ,gl`cF5< !_tč`X/81jzd>s,ȭhߥ=De,?X{B;|l LFw"o}KLićRaNiQkLdLx EwuE[L4͂3 c^v]p)g|x"JQbx9ʱUncj%̪Fe^_ɓQ&O :ݿdZ.<(xY ,_kKמp`k>w?U.3ϙ33GDVTT{5 0v_@#S=\92VwKgݑaь%+9ܑ8>[0W@`7j.ru$\464%t1$849;4:qNJm?>*YVu&2|25>h*j}E%2Xepa7^y%nBc'@piۻPgRue JI&XT/u.2;XtY*9^]5,{9@$Dw^馳D)QB/kF6^B3O3T.~w@Dg94>5W&>,ߥҽ\@Ozr*AUxmT,g> ,Xh7IYW04-L.9J '޶0 V!nMܟp1=Vo%ØXB:u,F]J"FUnydY13c ,x-H VkFR/=Cݚ!DWA(x/# KL#8- SI \nҚRzE3b|Br|P0e"$, 61UP"^_TYw,t<}‘bGK$JRapr {~d0 6/EqJ6~GCJ{Ep /,$:X}:^pX2,|s-)8i}IPڏ/PJy4- O륮2Og}{C"N8HLyI,&Hh7,(_A"DuJl \XZHM H uYN\'2(2sߴp/қ h,]}32I3{ -7MIJ`ϦGN 1S $ὪL\NZW_Ρrex4z#&\#o|1P22 X.P '8%2 a5Ə(Pm+ M/Jk|XO]|q-J?W٣׫iA::Fk IAʾnN( TvIzʠEcVf@ފ]:4v\W @MDʂ I1XʌrRPcWAhq=/w5맔;)@~5 F438Q{zަrn`./es( m= GIGkOCdzxQHkfC.Rw~TMYXJJϔ(v|tBx؟{Ԕ@)2Ч̭&Jkd$>'MkcH6u: bΨ+6:]Zv]~P$C6NHߋ3Amn(V;&=?OzNW w/>'Cjأ0KZ.dgv]D%5# 7Q.Pe#]/l ?+7JD( /=iWCrKevxeq?"LqdI M̰Ԅ̈Ρ3ޭpT,a3 x 6yC^}'et6HM?)/+ 66"Zb E*Wg)9(8ʮ+%f?2t|y)\VވkIX '1fEjMxZ =p_dǩ_ʃg@5' RӚ!-=w"UjӬyIJ)7ӱj%ч|G$Jl/'/W<)PXSrO~X4ʣٹ" J 65WC1~D,APό(V1үD h8#pr "JN9׹*x.t@ 92C7ܹ"?aoA=pNҰ_悐IဟC%z#X~k J ia V&ے@Kl#V0ߣzԇzk0o+fՅLL K?yK 0ZnQ<׎ ʮ5g Fd#cI% ;nxfuf 2 \ e*~zc}RO=dyfbXe61P62V^!L lu>C?)3aI1ݟ ڀ94j*OVY}ryAT&ƫHC乯T$5{6~!.G1cuԩb8s2KH-.LY uƿUՀGP*e:U?'mSbw$V+Qf*KVmzDYVd@A=D");X>,/{G(#M7•# {mCh)ɗQQS-z}s22[q>;$LtTƪK@q9"z?3JI&pRxa>="xbwٍU1g0Y=XtW؜hk^mr~+%[ǣ+ unMr<;T}!&N \hŵtL}AKҹ=JacSعI s ݣ4{8B:vZypBKaqA3"rZf丳m[\=jمJ-ʎ.w[0[VPUCz/$쪃4&9$bNJ:IYVcjL8`_"iᮋR[r!0nE/;3ۏhzv4 27mK+}F3sr{ΌJ]gbc8>Et]6BL^6Z/ٓA 9"ǝџ 7_߻ԃxn8ѷ~ajAGt0~•0<q4b+Y@u?g;mes? vj@R.LPei2]fA4 ul._@NHJ pD\52I}DrP#d -f@E>q`fJ+}x + 䠍4 ݃/' ̆8& h$~*Ʊ?<k (BLfaI0AIm{ED>"ǟ"^"SO\";g2o󿒜N `1,ĊSO1RYDAhG!+|˘s-n-ˏB"Ğ闳ݨ._4Q1*A6n|u-<=U?O+p=gzc'SUADr *"P/L?& Y`O<8&I3T7A&bfK\=-DG-|\'o-EF-,"j𨍧|`sATpJVDĶz1kXM0Q'b9 Ͱы kD~1ólڲq@s2&Y$ZXo6L1`D;A#J27Mi>pTitejM#Sٺ//h ͸b;aw!1Xm=\2"ʝφ8 T}80s8͊؞ef}ITMhmɽs0[ YmZ/RBwN+RdVMWSrV'| ٰ2i-ȒRAD{[0-`S>̽;<, }5sc/@ay FIQ))n+t2uPmY'2nυFJ@qrC YRXPo9I&#cxRh$@\WSn e|-YJɔ:ꬮ۶"%Q «"Ǎfx=syɛ/wĶ3O/\dliIi1Zg~2- rr&Dgrk\JQ"bP9:3Z 8_ma$SD9{x;Ga|b8N7]ui @ۿXJv{38dfl1OMBrU.<+4$" m=FLt$LԀWAbs#?-"P`2 @'2G'~Dz/@rI%eͭ~{psy#H ߙ{qtaH,i%1aJ,u Yifa 򨊹=^O4Uyrld b<0rw2+OwNYؒ O X%etk5#t".isp&~!B͸iG`CAyLm8.}r 0) ^Ax1Qm'9j^}*QC?}Ri+9!w+}?X[:hs(mK+k;S L h2bKIIGaÎ'٥h܌!y*JdJ\ԭw,zC.^G "zەk5sJHqȜBٗ.qP>u0;|tVbbj7wTYrٴt͛QݟÚ^}#]78e-sQ϶:S̺ӇfW}̬,.hگЇqu(^m#<3d{},/dYޣӢOZ l} B[}By$l>_=#_DuMØ*'IG;Oϸ]҉0~i8Ÿڲt{s) [⹒bIdF^89b?poSROOJȏqmJCn _R `ɢ7j iJPۊݡ4tz8|V?Õko2 ?<^|@s#ˑ"t;+8 QP4~jk~Pab׈j}MjBK;abC qcǰ M̛wۓ /4Fk̒!ҡTWmn(W{BĿߵGKCWIm?Xz!s^;)D @a]uAO ]HGZ Ⱦfٲi1[-M]xvM70ބ`t7-u[tpl nN@+SқNquXGr& rkaDe +-qgL$u銖Tמ\V[SkKD(lJt6u vR|>Nuyp9b*mbԓ-QeEUX ,:}, &w4W{ 86~o=˜f*RO/R/x=˨\=J˥gkd!ܜ7?jph@>?Z~9OʞrUw5Md$XA ;%r? XX]([ NddZ-|װMF-s6dxE$•, ⅅS6yy|_@5 =Q'?0<}ĺ;onoײI= V3 x0 g]Rȓۂߴ dDVM9Rv;LAe UońLu!l}BlBKZ81{_gG[i_?0k9ls˜XJ= ; o9^ <*Y*F}UZβt~7bk:YeiH°"N<^sW0`YI KjXpP0 ڸJryfK?gi/;\H7GzE%#qNxnx5˴2ӴAq~jP7]X,(557 2ZL"pVXŊC(@ xۼsӓZtah9B%6]4FՉtknj?g܉Bu5;h!7<ۡ =UYa*}͇>l?T .q:A2hhK4x,[`jcW37`䆜'\Y\Wj@gmAjΣshKZb !&\ @erMdžؑv챸f544[(~4{8N40"}$=!=Ba@4!4U6[|u)A+O4B"t]TuDxb^{2Bſ)/P[T]9.e0b"Js{6P &6:)~0;-5TzFLQ%r61iTéEclEsȪXP%Ĺ"ܑxL [Cvtp<2 6e]h24,[nKuc OgɆҏ^%CA7DV]D~:#h+ϑ#RnIoђ[ŸpVA}hrzM>ͳ˿]$ SձkBT7md4ͷ\Qxlg^$*3 a?>呄wmjAnGgXR4-ZOڶ[@Vn[3Unj[k?B)Sr.]RPVrc74.!SoJd*3|c!wJ4Q,BKTj VYZ9+ p]e˒۶DqwT u|ljLHinJx Q!/ǜP:aNiA!R@I}=n`X\(?dvV/X> |:`VDuN|:E)] 1_r+v(G:-VRC߾FZ׼.RD %I͏d6"w-]H 0 Tk=2gDәe~;(\r=$ tȹ\,Qh}vkPO]G:%by7 w%\WQ|Ȍh-)*np+ ~ iDʵrPΒ3Ė!t\\M d ?}t7i']#P |HOWqhUtM94T݂jǃh?DsΨ: n'e`Oa$Hcp@F9j0wYmQKDeIg}UH(Io_9y]+bרS٤2:*S_\m7Κ4x8k\M:6LY|C|Grxj tծUv*/OWmW; .I Q<}%.0JSg*HuXhst, _76f;KxU:+qm׺4 ;iMNy,k bn-,N(Ь?8(zțq1n2.zOS]ज़ݙc@; !5|3q%ҧYH@=v:2:phPÃ9ȁ9"/ psW6ŦmH*~d-QG5 z osDBPZAPHS(6tPBRxj[hiR (?"KH]0㓏uH2ei]C< dc,;$;g]c"!ȃ| +yѿMI YͺT|V:WKJKA'$(<]|\| "}4+#2@CY䅝W&|kx1[5h? f.-(^B=X,lBjVK׋܆ Sv(t+4PHi\kgF{Z&XM2p-N'yO5uPE%_>bNn =oK8jԌ #Ϳ";\Uy~}nL(\k2 n#R ZHoK/ↇ+VZZ'Ƨ@_}!C 7-2zn=zy#M `9.EDʖQm#]O=aق#^f al4LaDd97?-2qxXK~شLJqv[,F*=n*(ye("`nF2Q{Co+PV3~4Tg~dP'R ]){`JB]% `~6 `>wBd!読n;6Rj|${* LZn{9"qLv01}S~+h!? Je9>ǴK%_+lzJ]@xa-*VA*  MHb$s u54t1 v@ c)x*BxT@LP qe T{Sg$T/PPNwDxn<)~{h-k]]I"&Elkqwxp?n:(K* l+IC)FqcM` ܆<8ul/g<^8 ר!A=Xd"vW(;iwjM|ԯH.k~3]i~>4, +SgfG{eAu)kϮ~v] s< >q~9@s ][ԡ K2j$QӾ)tFx==֬3};sE2q?Bc+[j݃^H: 43xOE޳ jMpQ<: <>"$M#tSlU,E<֍@N6_R5uWZM|ZĻ-v6DRI_|L'S~ }( -#Udۇ.ꜜbzf Beg$-7\8Y]ո2<~[AP*ZF:$H'gg`:W)GzE5yuR@5ׇDw37t{Ā@QTuc;f(]Klf6u"РA1{ Uvۥ1Mˬ}딖6 Kd qT(F_;NV܃酟򭒍.P >@ ?r"8VATJmr^(YGۀpTW;ZdayFԔpDimoWMN͊>r}!0b5ؤ:r"kJa!pb#f=:2bH#ΐX'l6sӖƛ Op)Uq&k's`P:MEŜ!d'L0RʝԹ}I: KU|` d~ߟHvXNd(Oh~}0׼"Dtb:a6 DUk*79:xóu[<=.ЯȥťנF@Ց'xJm'}:rD]H9^ TeX߹?>6ۿ'PSY5KuleIJ6$_{#{h0։._44r:^JSykEex0&mSi\cbz~dֹb|^5QmĮ?= n!M:Tq'$kՙ334tO7cG 4ZfuN7G#M#4"m0`[O _~N3kkD]Rz𩪖@IfʈtG>' 2]CGh)>| LGs[Z䶠o7|Ľ1+g(fQ1u~m'X@ƚĐc2d=BmAQq-RX"Tb0CW Yyop B[NMYZijU8F2]Cg 54 !{]IԎsb}&S1zvmXV d)/9R-dwZ雱bՉ|_c'Wu\ ,МPĥ=P,5VƆ'م La+MkjV5tD6ėm]?(8RU`Vg"nT~|jzƾ2mfmJWh ۙsJTՅJ Fn<9 U^YSz\sW H4ƙMy#^ǾĭxP#άSCm7]J 1Gq)Y .rl`՟>N{yaO)*iup9E}Oe4f'#JȻmwV\sS1~?-F ]4 vNyv[D]v{3@B( $YUw|"*22~r5+!WؚMKXza?(_vs DlkL$nܤ2B}{bz+&o(SzŲণ]3ޤ_qcjd,%hbϮ-vZC _".SQcmDckUd;^})G +&ۚ&@KnΘ=HL &"k޻"VSIab0:%̈uU=:TDH^x8OS@|Q59/om!I]^7>n^lW"iQg[a7tG uUa P3^)kөZ(וϏhØՌ l^5bsؚ $u35U/>?j\̉(haM?<CTGtW:|bE|#i~Ǝu0D /349 IC2sUyHQ }yz>v~McFF1I̠hrpp6MY!4h*9wM뙎盿%Z>9dTlY"?+{Xxs*_hߑcSwR`1?^))w ߫ZJu =#gԽQu&|^a!!u,gq 8[vC bTc0#5frIO~aܼpP}7Zmc@XIU݉pHfsj3lhBacK'~_B8!,~IJ@gh%?!:>BHb jx}7&@YP>KRӰ]ng([Dy?y[!E'VВ"|sfbYQIڨR<j$Z"cy}1ˀ QޗI XOIaN$*%ciuWa-tʛM5KH4̅HE[+N.v?p-T`%=0Y݃O!*o"LU@%Cx7c:ZwO.m_zӗ%fqɋӋen2 *xNe+#; a|E t$*ģԒ4u"IJ 'x#;SǼ-b۟Ɇ57%< tr@لܿInEZ=k#rOQm\ ٟ/YSk9@&8Qxe|![MQ<}bYpa9n%zSy¼')*16Xʱ(Q-,;%!zUo}0Nl#5wF8D5tIekҹjvYe0֗dvW\5`# f-z0q 6pB*ມ4{٠E[<[^j=7wkٳd/=J2- C% :wV"?❬XeF,Т!QLL-$Gz@ cUći5q! ]U3 Qt :a4]~iZ:t\n2wfƞTw$X )K|+S7V\kXC]Le詂{ xo'I,AqfeW,JC )>>^PPcW˚ȭkW@UMr3Es\y F]8¡a%< g4N0FGN9$:CR?ܦu W۴ǯrưE}#jD;d @I*Rx`fl;|N5 HU6o8`w8U͆bq_>Ϧk1e[% mس,o=@.:z"v7ch32۶P%,jX::wyxSQEPR\ $ǾD (-26q_Ki(̏VZ6ϛpzv/KqB Qi; )%*E΀U EZܘ( {3D3c['(U7rK*4ճEj!*xxp"~u"ԕ>*uR*YU5U&pkps|xd:b~E4F.L"jV*O^RNSGF?Z +9?o!Mb2g.&(SH-&0a"c=˦z 8/l/F`g{ M݆[t}ze-*zރ2Ol)C̓$| ܬ%f(gE|t}x&'N$Ɂe8Դ݄{)aZ5GOr(L#{ڔPIX@:F, fZd6')GdͥL憑ljcRӍaK@FKs6 dP}hn 1ce=lMYq7I6LWq*zH-0C27kM.8۾)7 heP6xTOev.>iFNr_䗳ΎQL(m\UvnUs|2ӦDB'W<HcҌSVbRJ5B0Ij<[U`hqznCz>G jѶ)U;E{j `{jByGvȖsYJ>A[TPB/Oq;@:B(.͛A]91oQm$˘@BVe$Iܭk~UKvx<\GAGle7}SmuoD7m-u$Se 1du6M2)2 r6(\j\6Z8l6Oc7^ì״7U+B~ '+%RJL~ ^~Aje"V+fa|];4M3~ЉOJ+jV}!0@wr q%ĿMWH;ARYbB uU EIbrH0.<"bZRf- c)ץ]w5=5u# K'5((}d7* fԍ% 憑Kʑ{qddD~^mE0carƛ9ʸJpft|:vM#tΦQ0C Oˋ\czp$B=H XBu@Ћmn];jX}uMpgH~):t|VphET_AZ8`udbSq@$C4cAd܆uXTw cLŮ O\A#ț &QD&uqW#TbM p6E7Cƅ570 QW͞l O'?8Yvw}0G`͠bm|Dx$Xi1$#xhBb~ڿ<}^tAQ(IuY;.Dpp,/'y1W2cuB}0V.*ً;#-;"/ F~]\z")7(İ=VSJd2]{>棇[+Uq_ӕwԚH-Ϋݜ7{~APV5IPFr OiQGMon+>cQG%xF V.;vDt~%)bߦFzx&8>>qa0w3G,hRv\>-EN,+x~`͙Cjd([TEgCshYV@8q[B&ftζ֟vI[뼶 $X?ͯ$&hfBmZA!*kII43HVRy9ٷlxaT;YjzuÆfsd-_d'F>@Y*(V:LM׬8@tEHop; %8޼7q1*nZetu)Dr7P"RT*BaZ_$(ld^Ym$Gj2S}_ijڵ0Se#tCFa^N[}楴Ԑn޼E|Oѣ]iNfg]g~UYdKQ0x^'ÁEs1tvSq67GR$PVs1gl066 Y.c|0ct=KgvO"U-1}dn 'pE4@%^Gq ) \Њ*2_VJeST13=PxzQL q#60uSD`vdxq\Di'A[m[ EZ^?Ce蝂"l9x/ޜdyjT)P*W@q3Y6cE' y!FO?<]g܋iv'G)$;6FS9#4|󄊀C{ +gMO+ (_\^!z:^,\ #1"  =l Kw>ٶ YZ