samba-dsdb-modules-4.13.13+git.531.903f5c0ccdc-3.17.1 >  A ad'p9|21?> ;w{؁8@S\ɔ&hʷ)(wDtŢ,~nFmO|Fyѱڿ?j"L'L.yMQEyr݋܇Jǫ^w;ZZ&W0ϡw`3ژ镔Xu-fJ6hPW7,s: M{!>ϏxEjl ewb&u߅C!g89059865df800ec75fe5ca7e2193b9e9fbecf362bf8b65ea17b728d24d0473f2772f70ef1d1700c8a980aa68fc4445e65d4a357a`ad'p9|W_B_W\J ҫaˇ)T+o6 ,X6VpAUf_vMwS2rv']m9xU7|"thmXAef\|tm&(W4BM\ xUWH_؏azrZXg2Y<@6XNfyFVg5_D2)*"PG;^7-CctnfۏBi/ ϖJ|$LB~(y#ҤH>pAB?Bxd1 8 J /FLS-H- - - - - L----ww(w()E8)L9,:<^>@FG-H-I\-XY\-]-^Qbgcdeflu-v`-w2,-x2-y3zBB(B,B2BtCsamba-dsdb-modules4.13.13+git.531.903f5c0ccdc3.17.1Samba LDB modulesThis package contains plugins which add Active Directory features to the LDB library.abLsheep01.SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxx86_64ln -sf /usr/lib64/samba/ldb /usr/lib64/ldb/samba /sbin/ldconfigX7Gww(hH HX x''(wH8' H87'7I(WGYH'((8(HG'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-4.13.13+git.531.903f5c0ccdc-3.17.1.src.rpmsamba-dsdb-modulessamba-dsdb-modules(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfig/sbin/ldconfiglibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libcrypt.so.1()(64bit)libcrypt.so.1(XCRYPT_2.0)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgpgme.so.11()(64bit)libgpgme.so.11(GPGME_1.0)(64bit)libgpgme.so.11(GPGME_1.1)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.12)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.19)(64bit)libldb.so.2(LDB_0.9.22)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_0.9.24)(64bit)libldb.so.2(LDB_1.1.0)(64bit)libldb.so.2(LDB_1.1.2)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.1.6)(64bit)libldb.so.2(LDB_1.2.0)(64bit)libldb.so.2(LDB_1.2.2)(64bit)libldb.so.2(LDB_2.0.5)(64bit)libldb2libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.4)(64bit)libndr.so.1(NDR_0.0.8)(64bit)libndr.so.1(NDR_0.2.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.3.14)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.13.13_GIT.531.903F5C0CCDC3.17.1_SUSE_OS15.0_X86_64)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-ldb-ldap2.2.23.0.4-14.6.0-14.0-15.2-14.13.13+git.531.903f5c0ccdc4.14.3a@a@a@a@a9@a`v@`a@`<@`@___i_@_|\@_{ _l@_i@_d@__ @^@^^2^2^^1^^Y^J@^2@^&^&]]]])]@]@]]@]nU]nU]i]e@]_@]J@]B@] #]:\ڭ\\@\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USascabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899);- CVE-2020-25717: samba: A user on the domain can become root on domain members; (bsc#1192284); (bso#14556). - CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID values; (bsc#1192505); (bso#14564). - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other servers; (bsc#1192246);(bso#14558). - CVE-2020-25719: samba: AD DC Username based races when no PAC is given;(bsc#1192247);(bso#14561). - CVE-2020-25722: samba: AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues);(bsc#1192283); (bso#14564). - CVE-2021-3738: samba: crash in dsdb stack;(bsc#1192215); (bso#14468). - CVE-2021-23192: samba: dcerpc requests don't check all fragments against the first auth_state;(bsc#1192214);(bso#14875).- CVE-2016-2124: don't fallback to non spnego authentication if we require kerberos; (bsc#1014440); (bso#12444).- Update to 4.13.13 * rodc_rwdc test flaps;(bso#14868). * Backport bronze bit fixes, tests, and selftest improvements; (bso#14881). * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal;(bso#14642). * Python ldb.msg_diff() memory handling failure;(bso#14836). * "in" operator on ldb.Message is case sensitive;(bso#14845). * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871). * Allow special chars like "@" in samAccountName when generating the salt;(bso#14874). * Fix transit path validation;(bso#12998). * Prepare to operate with MIT krb5 >= 1.20;(bso#14870). * rpcclient NetFileEnum and net rpc file both cause lock order violation: brlock.tdb, share_entries.tdb;(bso#14645). * Python ldb.msg_diff() memory handling failure;(bso#14836). * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848). - Update to 4.13.12 * Address a signifcant performance regression in database access in the AD DC since Samba 4.12;(bso#14806). * Fix performance regression in lsa_LookupSids3/LookupNames4 since Samba 4.9 by using an explicit database handle cache; (bso#14807). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Address flapping samba_tool_drs_showrepl test;(bso#14818). * Address flapping dsdb_schema_attributes test;(bso#14819). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Fix CTDB flag/status update race conditions(bso#14784). - Update to 4.13.11 * smbd: panic on force-close share during offload write; (bso#14769). * Fix returned attributes on fake quota file handle and avoid hitting the VFS;(bso#14731). * smbd: "deadtime" parameter doesn't work anymore;(bso#14783). * net conf list crashes when run as normal user;(bso#14787). * Work around special SMB2 READ response behavior of NetApp Ontap 7.3.7;(bso#14607). * Start the SMB encryption as soon as possible;(bso#14793). * Winbind should not start if the socket path for the privileged pipe is too long;(bso#14792).- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/sbin/ldconfigsheep01 1636655692  !"#$%&'()*+,-4.13.13+git.531.903f5c0ccdc-3.17.14.13.13+git.531.903f5c0ccdc-3.17.1acl.soaclread.soanr.soaudit_log.socount_attrs.sodescriptor.sodirsync.sodns_notify.sodsdb_notification.soencrypted_secrets.soextended_dn_in.soextended_dn_out.soextended_dn_store.sogroup_audit_log.soinstancetype.solazy_commit.solinked_attributes.sonew_partition.soobjectclass.soobjectclass_attrs.soobjectguid.sooperational.sopaged_results.sopartition.sopassword_hash.soranged_results.sorepl_meta_data.soresolve_oids.sorootdse.sosamba3sam.sosamba3sid.sosamba_dsdb.sosamba_secrets.sosamldb.soschema_data.soschema_load.sosecrets_tdb_sync.soshow_deleted.sosubtree_delete.sosubtree_rename.sotombstone_reanimate.sounique_object_sids.soupdate_keytab.sovlv.sowins_ldb.so/usr/lib64/samba/ldb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:21756/SUSE_SLE-15-SP3_Update/d81ee65394a4fbb1f1c97248650bd532-samba.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux  !"#$%&'()*+,ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1d810f7631c3981dabbad0ae865570369ec9df9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee30f3c93bc5cdef0fd4291358ef228d932f98a2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2688dac3e2d29e8bbb6e835d03c033e186ea4082, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=66fa95e5ad3150cb1971ac70604d08db5bb9fb27, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4214da450af0ca8efeccc7be1d8422500baf68d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d9b1bf27cd144bf1885e75c15bab8c637a9b3d06, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=08c8c53d3db478c466ab07b7d3e1ac39253aeace, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=854644d3ec3baddc4b8721cfce543b784506ae79, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=36391743f0df08e9d503b62df72c1131412a9aa6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9a514574cc4b5a9f63c7bf053bca423d0ee452ba, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=27e95363d32285260d0f95e723ff9773604e28d4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8f3aab49528829db067bcdd0a370198e1369e5bb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c573f33408cb36b515e412210bd22c21ef9c968, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ee2336eb8cb62135fb966f77bf428f10d171878, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=78ea41de8e3aedae89627a5d6b6bedf85bf082e0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1d68ed0dcf1d9760fbe1bb9a928265eeeed465f3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6a15787bb740bd9b2e8d2af7775a1660e2c3793, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=623cd322cdf6412a701841390efe34df56d82c90, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=db04cc0441151520abfee338f9227ee06f620213, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1a0a7e8cee46e7198a2a32876d5eac5c9f082c41, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2d45111172932810e3e4c31dda8e76844e6b1dfd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0f0acfd45781efc664110ed74912b9969acdc40, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6cdbf708e4b89fb49c8f773bea756d53cf1e1182, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f89ef04aacf9392b8384a426f655075832f54048, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bf681eedd5769448c4ac682d730a480ee92bd4dc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3aade6a6ceb70dc7022941790e39cdabef2c6f7a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ec721d5ba07ba8d3ed6e097d2237d84969d8bcf, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee286559d70d6dc5f281b341b759a083e4eea1d0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2eab95c259ed2810907551bf3bd2377c87012550, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b07249ec9b223068e2fd52d1932db00bbf8228cb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=75b4ee116c40524c1f28d65cf1f5f50e77e3e3fd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=da96ff5f0c926f8bf94910a2d0ea7b51dbaa6b28, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a248faa64c2852a478dce1ee262e423a6bf6738, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=60abcc7f53cb7ae2d1e6ee3fa8e636392d23cfb5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=abc9e96f85b9e46d1e0251e3a712284660de2b6b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d979c48889c14c30c01ef2545e87efc416e02eb6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4e894b52f54373b93e046a63875041d16f320f3d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf3fded39e570b094e327c28ed26e3bdafb1cab8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a0e2c8720434f37bbddcba3f5e963e8c239be1ed, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=17fe35320ede744701faf5023d397c415b8b433b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0eaebe7258e67f4a86ec6b638c272392fc212b16, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=96e4bddfc697f1cc71807e4b846297f051c761d7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f8ee2b581a83e1881c4841557840e7dcee06c15, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f89959a162f68f567ec12a138c1f7da589cdf8d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c601dbd2184d77d4b597dee27bfdcd0dad4cbae5, stripped9Fdu'BMVmy*5[h.;FQct    8 & . "  RR.RXR^RARfR R R RRGRTR`R,R2R0RR]R-RFR_RSRR@RWR+ReR/RRGR`RZRXR^RRARfR R R RTR3R8R9R2R0RRYRFR_R@RWR]RSReR/RRARfR^R0R2R R R R]R@ReR/RRRR^RXRGRHRZRVR\RfR R R RTRR2R0RR[RSR]RFRYRRURWRReR/RRhRXRTRfRjR2R0R R R RWRSRgRiReR/RRAR^RTRfRRHRGR R R R`RZR1R7R2R0RFRRYR]R_R@RSReR/RR^RARCRfR R R RGRTR`R8R2R0RRRFR_R@RBR]RSReR/RRXRERJRRmRoRVRRARfR R R RTR2R0RRRRDRFRRlRWRUR@RSRnReR/RR`R^RRfR R R R2R0RR_R]ReR/RRNRGRPRCRR'RfR R R R^R2R0RR]RORFRBRMReR/R&RR`RARR R R RfR9R6R2R3R0RR_R@ReR/RR^RGRARfRR R R R`R9R2R0RFRR]R_R@ReR/RR^RfRARZR R R RR`R6R2R3R0RR]RYR_R@ReR/RR^RRXRR\RfR R R RTRZRR2R0R`RR[RSR_R]RYRRWRReR/RR`RR R R R2R0RR_R/RRR R R R2R0RR/RR^RGRTR`RfRRAR R R R=R5R2R0RRFR_R@R]RSReR/RR R RfR`RTR2R0R_RSReR/RRR`RfR^R R R RAR2R3R0RR]R_R@ReR/RRfRRAR^R R R R R2R3R0RR]R@ReR/RRGRfRR R R R`R0R2RFRR_ReR/RRCRGRVRAR R R RRfRTR^RZR`R2R0RR_R]RFRYRBRSR@RUReR/RRHRGR R R RfR2R5R0RFReR/RRARhRNRXRRfR R R R RkRjRTR^R>R5R4R4=K! J0Ȱ+m!9|q rUw`eA r.kNT :{o蚛UoN59 f?mgqmpt8N4V("儻xeo{mvc+mnl~3rںjm %.nr :}P,@o=;uLn+qDN D~uDS-8-L5'VI#7:Hͅ׫<64Ksl`یoS]G#5q'KGHf]\JH8:J NRX0vDX4/$K}Jk9Df3Ω}CWf6O\H9MԠ,rZrZ01 ng}9pnmea]oBaJĐ8ըg**EV"ǜz/5!w_]I\ S@nj۸r-SI/sBK&濫\KsGXYm1uK&z.6 Z[SWF{>9߷R,h,E?N 5(`ȍM#@ZJCCb;EcË_+'YRv `;CbBfq_1χGLMvBZ TXd⭡9OcIE&lf0>l.s?iju 75 ?=j绝23Q%tm[.F~V|E"55l`yP"ek{=uy,|=_G&:XI *{첝 -DvjLcYs߼|5׹?X~rupbMo4E9vk倔¤\UkAmrEuhdzvN|ںvKwGMsXD3MۡlKyKHq#UT(}#mO3hAjLȂ|x ,=>DVEg1{ Fc/f hGS^Ȱ(yv,eAE8&TZy+©ƐWp].5"Ыt\)^QU~xrq,/:"̛">xK~` 1 2l{ !MNFN j ߙmY( 4y'֑Ny= ˤ̌l*/c(ΙR ˞{@w]AL8Bhd2I]v^JVbg ;?Z ^m*fكu~?t߾^|5q={OLH0߆*?FXyŪXrߌ" סVOӨ\i4J( c]j+{VC_Rj%v=!*"cl}}4u4HB6ו=``:u O_vTR;b`{"kbL$rz@'>{'VڂVl%w~H!ZefUfoţ4O^X4,{R 9ͻgqr ,@i+iXbEOI(J.iM3?E+@F'Q^s/#BŞ]>߸.%4^*1q%(ڝ`+$T}F3H"UbE n1g@ke|2S5M4VWjj+IJm7D$?FAiWk : C'ĚXX-Or2; d>߇!ym;P1™U! i̴<|P &GIj|6[6F vR+>J2 u̖aeWY_,2yG)4ZH?0@,fD${&Qٲ?XO"Qϧ}u c:[$E[W.:kp׊$U|ԹbT5w$]Ex8C]&x*#'?LmJ)֘ف|r3>xlb!I{l o;BvӕaDc28=Wyj=r9 (JI]uN.}#o!K9."rXr!7(o8N,4 MjFmZjCx1;̵e,!Oy} d{wP ;]PK]P_XIx=/ .ײػq>Ghck5E⩏i@=K“:ǀyS=8@j FÐ^(fɭuX{|/V0>X5 UquJ6\4W%b/gǚYY EIC"懇`iKZŕ)^!²0]%9a0_qo(^jtw]mSd-A5w_УadoY6(o>J2)yxL! +B:+Ao~h08LFB&[|J{͠p^fq^ 7:k@G~Zut]fHV'_-);h3u+u$JwKa=4u,S3i*3j[: ]9D)izǯ7J4`/:y`uΏ*%@=@b(Džl!z389/&58RfZ_Q\P:k  0Q& 7M]W7),u(> kC`% eLHG/F*|2Ae(a յx}RO*_e'ܺHF;R@lfc f|]qRz/"Bf~f_?t7y^szUDEoY^e;o|NC<"uXuίl:]6}! Cc,;8~_L{V5sB"ZqBI9P)f(Yw@ # &꾿![}pN*@㚃Rqە'ju>؜uTi{Wep$}f)rQ-|E4(EKvxBP9%"bDИ5Q0&C=NQb"76m{v](->nޒ.(v-FJK/sNl2_wo!LBvH9Zcƻ &`5聡o x[Il6 ]U B hIu*wYX \+N4JSԿX!|ځ=xoaN+pef2( JRE0k[YWŬ3{s P x/Mi:3K5@n]XΉ<~@FlCUTN$DC"]'9.Jg(e"pa|.{tzӶ Z1JwRYnPun p*:]3P]- UƷr~9W]o~JT`ΥM,8d67Sū5e6{Wk%M31t)2)Xk%bdJ Fl"FnZ.Pfnub,j07wUq.\õi|EA'$65tHZ㳃[XD,?;Y kmk /90kC}P }lg{EY A~ ȹ ŵO#>ws ~&CbuON4Rru|&P Fwс,gu$7_d}Ts7VǻMІy +꘬˂e!gGu='nNP|[uCMxݠC0̫t`X4YґP`R#M_5*N:<7Bk+ WEfښZ0!G=PYh :(>^EC\XSjPwuXCmē/ PKϱ`'Q:o <ћax|.^% 8/3cHx EVHD\لA:,-q!wj_˾Xؕ|8>' R#iq'>Ŏ_,SemgVI-⌟ON+l4%O^4ƐNAN L?͎DHuBAN[׾Tה;wɕ':if֛J6:t.u^΍KoE$CPnٵ@q)hVP-ޝ{*)弔HBc9sZՎEJy & lC)p==6GcNj6`ʖbfꅤGؘJc7 kg֧AD^Ċc~;!v%Iò{q%8$G #X,z4S6r}b0@/:a*tV@.W {yYNSt+$yz `o6oegBOq'~s-~,1b:pUDp_;J :Pʞ1!-b5F mک"33 $86bF\NwFzd &n}zmdF:cZ)#/;{NȚX>9k'ߕpl0S̴Gۥ:j^k1B1 }\-Ⱥv8 P`"_ ]F-g!z''dl!G{.*veA`S0i֞zCF$Xnh0:uDlk|TY?x\އ)k(0C zf]xfSvgZ7v6~v Ԃ%ȖW[-ПOG'%~wS##935V ^T׮o,9*\y LmڰQY)W˔)phLg60fU%M2}$(mF8פ2KF\^ K֍䪩:[J kOݘ^p~e-0A=wڇGB@,r)h:-> p['I)#}s]8LuP{)? oELC&xLt1dpdJH:s": F!ʷ(]}B2qv4"w`2פN]DY\:%Z@CHcely^6pW_flp?}vL`bAvV!݄$xTUmW1YmJDOvU<9h||ηo"CqB^T"S maZ$W$. l<:sck+}[#JbL]k"e[?X ½2)ͤ\rĉ4Fp͋$q7QwJd;.FG;a@n|d sdEY{{2}/Ȯ0Қ&,b ,;"ePWj xߺ^Gz٧20w&Mt:Jc>uaXN^9m,g0ͼW.qi[ӪӉQsJwW6hÜt&~6nfuҶWߦrvƘ> ́)1-:"CҺs;(#Y$ wǖf71S֊^u@ Lsg#kwDq=Zb5?)`d>?GhG;`(?]tA[zz z.=6LԨJ ~Xx1Hq}` q-)pMR[4l̶rr}&oouG̶`>5 #p<ciTL&X9J&n<NJQp'EpMrxV͏  qc^nP<[Ʌ$7519~t+og9~o.K(LpRg"v Zn P=ZH%_OwSĪ4 >aФ@ۚ?ThC&v ThԒ@%y7V <4aAȸ }vN R1 Z G{M;"/? v4؟K!G[r |j#n;;¨y&8 #@RFf-rGcY*q+ﯾ@}ȆZn ;$ڙZ:4yFdvTmէ9xW{*Q{q`VM[bA97<5'+Ըjg gƥ4RVc~ͬL&<"¼uar5ŁZGL,+@L,b;u;Z`WsPz](7c=BLH#3b@SE FAKWGˀ9-.43F:wqQhuW$J2S {9D^wغ|1OQ3KoFHzU8TU~Z~0)ú4"Se 3Jw-s wpT&; m:./W n?D@ІP(a"QҟZ.XjѡJ(ߋi*o8!$B>eGjGd^dDZ&sXk[ [kd!#I\ Suh cO 0VE(܋cj"ÁV'.t-3^h F!<#M k}3!js!ѩ{=Ln f\_rܿB֟jŦ!a;̹ A:4d-Ze"iywE{쳦EeIpx|~'ێ\"~ݣK:єU3/<8Jotj1q}0ĥB$HOI: ',GoPt3 0)9Yޢ; gt0:(@#?r ޚ sJGC "\h?WHS̽%eTx!Mx}q=W-^eS;dî@A~(r%[Ňņ·PUpO-vZ !ui]m|@FAa~'W։J.P-O~Zh+4s`MB5y&9k闎x:yүpT/mgb{v\ux}URh_3>Tg .6:tHI!vZIn3E}dY !qķWnygWF*X{ ܶk,43x`rmR  Dj(Ҥ>0tςGn gÉ ZvwSE(d`IB'8h 9ғD[59ֳ:~ސxsѐQ}A@C'[!cآa"RŒogۆ|J8f8*E9k1KȚ(qWy7Zs'@*KϒLrtk@MMnTt5/&6dg V#XؖD#\9L"4EǏ;jROaƒ?g/0\CӋ*[(_d (Fqvߟprģ=,'f]m uG#hD}S2aNnH`2k?a9uek@e{완嶉G]fyCɋa;whgO zmHlYlHK6{2wˆ/{J]P-#^#B:?o8RW!g 70\U+?kGꆰ3蕏[a~8ީ!,6#DD8ѿƷ-Bƥ%F]oK(]xp\HULFr4^w*޹:=cj>%>!+e28YwkufnHG飠 4xcԞ1W Rdl|pIOEӷI9{5EvL E$u`Ӑ"U,%4" AV1jFrEEOa*LKIv_ևӿwwQށ8ULepFb7zluDMΣR.A4KbsScYdBoj=:I7{Z|tGYgu5OLyk7ƃW8 ]y/VJS y-RB9IivOYiO~SCì4 *aBrfAO,kwoSk,6h.N#_W4)VuEEd$2YNq,3m+)Ȫ =݈@qȤlK>IY Uu;9G)'o&\焸9euld@]v\y}De#9t-Ul@k{HO0;n9f}SgAV}zȂi9Ӗqӧ(yԞ&baÜ:D!$hr2(}\Ƌ'gN4۠2@Q;|tӁb h db `WfA"{1 geBfg([о ʵ ={4C0U¦*'3juS.#\.ݕb7vu̺ww W2e5rd2O5ub1|IE>[ C:/3u}yE` @,1jUc)sؠz,}w7&ǧɚ +]VD=DTB,Y{,N "[Ӧmүe՜u7D7Ѕ Ψe+ UCX }l#!K>6'[wןZifbf@oք= (1x& QRwk={Vh<931ϔEfjt/!H=nz=U `!<\ vdY3cQ%FeoF_Z+4" $xz 1l38DfHMJ`DUf]Vtf3h]8Ł8E56uxlW ~@(E+p0V;eh$t{Aa_5HB9mquxߤjeY`mV#Ӣ |ٓ5i6!&2W fvPy RL+1Hjy9@#!Ga=.7o>:uŲobRV"<-S'ǡvyfrEfD]ISa<ǰ&6Cc552;66ー]/~N&fe+F31͒FS .MW_ *~/$bT'! 4{ڿ1q\{MV5r(l<7%J^K+RW) URڜJB!f DKM7]2KJhUTt_՜HґN gF6w|E}D#%ޅ 0QN:Ş Y`iؙE@Xusݲs /.A1AvS,ho)^寊2^=Ӧ3P0*{t '^􍞽3NRʺ/f sa @: bw߅S& g{HzylXgZ 8qŚh4# Pd}~a&n%CxJ%5;;7ÇyY-vG,*r!xZKt:7=9'~"B?uMͯ$!}l)4 0oKmuo fPm`-g=-kdd+lG:W_pǞ*hWQ^4tr, !Q0*gHD0F3ZuMR*WD"JkZg(ؓ&ۧ (:p34k%DZ.D6ӕ#fW+XB&lV2LmAWcR|(m%@$P;<4qtK0Jk+nHAe##p@8 ą*Gx0%% wA]r_q} a;l}/^ FEd V2;|V.\ۡA}z"NIg;c] ~R&_<8Μ >m O' *̶ =k˃;{AQLOE.瑟I [+4Vmiuź.5)T)IP[>qQσE#".ȺA j2 &ĀyG ªӉ,PrWMS_a>e0ҭZ'|wFO:I<Fb}}hPɂwm~(8~5}8\SP m`ZeG!^4021V=ŗ|v"sF;{"4Հ+:8=ttO*! l}dPwm~T $[G@34o{9gX\I~#둳$bXs*Qo*ֿwUijOFpI7Uu{eU5+{,[t~2Z=̴k}౦q1! XeF6TKZ"05QӠa>o86[^iL\2%#En‚ LvvcgÁ%2ǀ"rTBpP:qP .ŕJ"4ༀa$-~lR 1WyIv.5:x: sf{Xƶc Af N$-1ܚUߗ5`>|RKX}e)GnA|5zͭ( "7XSR^j+9d|]YUxN@Qv}a2(bc 4V~ cڟYD~*E^>T5w zI=0, "r=6lG95c] qchɒ9,˯ $υ9/c0~ߴڵ7A@vCa3 {.%\W(l c+lRvAyux#ֲ|赭z!bTNR?U2^#ِES+GCb%9]~tS7u@ E@HSW(*^̉ӽHRSe'$ֵE$ ̂ `oz6bUvM\і?ٴrf.rr5FO]m Ls(x!JP"쾚A`rF ޝgc$;^O2ބ|zFS- &vҌpGW֎$Eq 8c]Q]uKSqn"- P(%ڦD3>g.\ !un>%FUCS4j,+6v=!L;ӍuGNF):´v܀G39}]*b)|Iܯ5p'VfҪ\JH&pIkv TjDk!O}# N*`Dcst~/f?GlA.7A?SdyiTGZA-sVgjey5^~YVrQ}W+ c G*fqT~u;AǍ|Й{LZd}h>Q^ElΘ[cI3ȣDhRoWʤEidhrΈ{&N8,Y[KƮ%$ 2 dyL*j@c&N RD}JQlXח|Sؾr_q57iۖSΚW$C͉mr.}Z* cƈ xg鎊͈·2IP'@iUdLM7hNFSagNO(ڄg]5nL03%XJ W0ɫ\_E[胡ڨ*hPx\!la|+xƤdt'hW{ "-$2!f^E42f3?~7%_ K4=|;<du E^+;Ҝ& B[(j[Y@ 7!%F;SdAڛtCsmQmEL ;M z{J PhaW ~dɑ!tV `?;LM$fHMMG~}}!$|ǮgB%]}= -#I\>wګĿr N]mby,҇VN]t!+M89682OGLw~v0銺j'o ߢǐ9Xۢ`Z,w^J\\a~l߇yksp~]OXC}!@Lʪ+o>wdY}f2!?4{ 0pSPs#Lz˘!Qj!~94+YZc1`M&q ׻< f^޺ECbțנM4T=hɖW%g~)܅nb4Rx#OFx;TF7H_A|\xQ۔}bN1WR)ȹrMS:2D$Į;C*.D!/ZaG|_iRd*03lH;_h4?Ce  ^醅O{GzY4=ibqJ$y.ʒxkV8%(%UuI@soh]k1,U q$eo;+lP[[@Oؤ͕īD-511-@[q$*b+Pqytj>#-E*߫QY^ (_%5zߌR>:=ܼΟ>0ֳhfIh._FZ]&X'@n}zҸ;vYAHCx$'xE_q8}m5QwD1#:l1: 9ޤ,#jSsbOzꙂU~ ePvㅗkMDV;]*blMP}9VP'ANr7N$T: Χ-PANP@2@ZA8 a!H}_C>*]/]yI,󬮎EM]ov 0xd¨m5N U"sNӉfx7.࣒yp$ L1ܚ֖apA$W0\0 + Ke6\KRdKߛ.#{@K;Q#ja3!Ot2C:ם{PPPQw~++Cj%L7Q߱&ȤY3zWIsޗDP1N*60]o\՜!Q_6.&ZW)'z$E {=W"z}w[ћ/mՇڳD8Тg,9m3u\YC?P'`%kfʁi1:-q^/N\_ LQl!dN5OWw(Wj6Ҡg/RUFˠu4NL-&t%+;m/&km7E"vBHݽL2;Ѣ7 + <-o>?A(GǢ@qR2#qQc gߙS+ŧN7VԨǿ$j^E Fn#+e0N#\a>j/ #a3䔥dlDSXO ,SjyE2&[6-.1Mu_S.iy7#p``8!F' Hg1 ,?ao\i 3g9`z^.]GtF/D#C\m|C'IOub4KT-{lx;57m@ZTK%DhU_lIBjXzM\pțgd;q =oxmT"^9 AiY1K=ȓ lR͝ 3by@g?Q4̣f_t줠5?,EeCr7} aP":ɘUh"E4K2q 4Ś|a˴˕8udƥ2EIH)B.,rIw@)nFov' b`X CfEpUa}߃[{Z<ԓ}Y[hh۽m=fMdGV7%+8xG/:1H1T{ %HG} šwi:j)o㢃d5TOFutU`foH/ŬSʟڢJv 'R43.59Jӓ78$Ս`րVPR|E.}:1xy=\Inw嘃#Zx_m qTlW+^Ӊ5`z;fCoG8NO;r,Hkʃw`?.1pnQkE AO6&=f{2E0ZބG\Z}ts-Jv(;5t!>ql R9_SrE򔰖[@r'O+\$gwR@,zK Y d1;9DqNW:rKޞ}+!˲Ҽj//v nV?rlF4…ƨ04 dn6ts($0U1#U0 `⢧ʑ!-&;-6UuQt ]DU!MlLrY[FBFkfxhEwt!IRDx)0rSfa av,P& %Y~n?8|G4m&dP} ͓USN}ә%8D?zP Zrulqͪjh T$DwT2Ӹ) {e}z?\7~KDqu@DkfHTiYUCi'rY!ˢb咊^tX #7b~l|N'|:@SuwxQWo@񺥪ver< Z~6Ab壌z𥴶,.@Ȭz%<58}KHcֵ=~&Wa)TKP6c3ωb>K ofl*,#G[@CvtvJ7brnq# ߻  T)&B$B}z d֙0h ;xUBmRn .jb+P㮌Sb[ett*13 Qfeș9YZMч#Tu%-g0MV jaMu-P-{cZ9Ty#X&\(~}DEbn TźN0a)KM2cƋ(I⵹k4CT o +ZZ:?@ǵ$ B]"`!)xrr:wczHU2Br 5 ){̲Axfj+mRI} ӱyV[5t zEW<9hg 7W{f8܈&N!.B\C8Ϥ̬CCi<1nV׉$thT zQnp6^.%HNj9. Ji%HLb2^1dy7G.:CR44'eu_>|>pK5l+!g܋`ڼB?b(߬ęe&9Ww/"^10Rd#"Xn#G&q^ӳ a^pa׾7l;A[4TVdkAbz!!/c< DE*"l|=w}S澫O NNZX}/Yώ3Ɣ6$+ueKZE ,ͪ2F0?Ʈĕ1`U -BzF˰[-h g[^[>)qꖣ׭B-^wSCۅ&qi% !rJ=I҄ $hdF*4<7ybzl5Y*!r߆A.Li)$ /mbP*ܢuِĹ-ޥ)TmYΫ"p\~2!mAOL]H413&6?dCt>Ldh]ߦJ߃RqK@ptuEdYh'FӞoWK7GyPPjVahr[gc>FPXqc\XȞ\L@QvgD<1(D ^*N 6[>aa#*7N ~욞*#$Vxhpf05 tņB4,(be6ա%aSFPxy%"q`٤ ?oe7Ie.x! x)a c 6;qlh`HYQMbGR>hչ8wtb$Oi Q'0}čn/) 6cAn35W?\CoW/sgF0nN_,=d#Prmc l[ݗ ֎o&f5Ms˻ʦعP;‘aɗ%s5)67s(c0s LXWHgʕf;tt [DE Q,0Z썼߾lG 0 ִQ{UNUY M'kXH#c)$)K7ͷ (+-׋m#֕}ZgZ3Oj$gJ5۾I*0G[oO]_7(^oeavgötH鴛tʶ$WmN]hXX-mG5UHzqg#7}K Jҍ>!yު&X.Ug5vK 6KŇ cwjo鐌XQI>.7J?"W\wV6I?nJ.(NYOn%Ԫ>p,Ʊ""Ǘ "DO sPKLIJq;s+򲼼^V&tpqӶoPӌmLP*%☠Cnx6)vDY;A3~nNiszK҃f%+8i ?Do"{\Ǿ'zͳsҾ1=bUAe'1f^POiBCz8k#z n):h ~/+6//36#d偄\|7?9+pbp!fԷ2r&HHd߉uIYe'Zt>vjC2>*z]||t:iw3A2ҟ/B5-JakZK;}|OnlFh%(aq$%X;a׃g&A-h)i=ɮSضL+pY[ɐ槽߻ph)6Wh st((JD-ä;^^)62'8T,1Dp3]ߜ '/z vp>@R34n[}q%*sߋ{M=RŒ]+QwG>}b\Il,~{hVTy%=!l+4ŗk't-F ~||quSCBxPjrq / ;;Q'OAm7L[#(gP-p5" ^ErNw$RTXn,[LW&gx^t*4WޔOdTPZ@Q5ؓ6H%ڥ( a$H]Q`Z~DqB(jzf* (UԸ1I` ؙ [!Sɵu;q$ bNLgg]c>=[S3qNgX#՘R=&Ws덢:$ɽz+ԭ+ Q^zb4Iu@Ǿ?+X2eiJ؋%ya}kd$]BkdSyB7ʆx:lAaT͜m;a}ZBu<^L?qswKv};IєC$$priD0^[)^v4Z悸2>q.AC8`Nfcvz5&.RXaO 6hn䥬<2 #ݶe4쪚8V΁<4],byukzOM&f''ǖhj5Lh~gT.pTrTD8eU rR {&q}g zb|=mhTOD)߻d#2 m/VB0 M%A.6 ^DKEf./pS#RjhI.:5W+˶V$#{Ǫpdك)'sٵ]cx+(yqҒIgkvmW'Gc#&h$--*% ҝg(Bp(ױ"+μ];4@;!DvZTEg7 -FXM2w|xFR)qeVB)e 2+UV_fL&,t6z)̗ꀝl3| a\eYnWv;Eݾ<#5S$^7N.e[dH IZs:d@SG0u\{#i7;V/smGa\( qM(#L͙w= +wK`5<4aiw) 5 c;>:> W!AFRSk> ށ]+L!a a7w]s2\ytygЧ)PU;*1%oA3RTt8LK9tl!jZ@ske˝(TH]2Q`(P-Y;myz(‹LNg[p ,bUW%Yr2m1и.u' VRJ _2X!GFqirĬ Ug﹣'-ƣNʦ1¹"ݰ%uɞz_ fMGCU8nHq]ݗDfZ >5wgCh,wyMK' 0IMq*JyZ(ُS+M0Bxdrӓ]I 4ZU%vЃOǭyJ5 a"Z1vz`)nKeL aW:q\bP)2WM@H@q:"AX Y<6TQukVX)H)|/FlvSkrƯu_&:#xYV+Dے*wH/.x61|Œ9qzhqnlA.R}y 79`v5I.>mKWf+J4^9$0[B ;2Hef:RGBii&~E)e'`?I3}^ 1[%/6Zgvgh9`f+ >qB0[Wm?qǨJu]V),2 L"?!;Ed[{&vA~>khɝ'+Ւg( jݰج#uϫ\^97r4 ȝO ZfgUvŖLM27LiCS. v`,͖/7imwdk}`Zr9?J.[Ge2 |Eh <:P@c}¹zXOJhT *27אpa[~vʲ ܦD9Oڕ()h"X{*[s13f@^Rj^\؊̠ද|8(f;ՂΗ|A @D~o7ĺ ;w_ijڦī"ph'ZBLR%fǕsK64h (=~`˞c’O[B^&[(5 V& 63!\PfUTuS@M'kAAwܜ0#̘[3wIґ@C0t*#_D+ 0%*&i 1TīBt 0u! jkf dQ gdZrhW Exg^1lYõ(vX{l(L0a} Y}dK<ܮn!︷!` әwEYGm)^RL"01^+ᭌ3C>;f:6jLdfS\ HB~ϕ1 ;]eSbp>>ׯ"oFHE3(<]nY5cm)ð'S )n/~ d-k -}s+ݲh(e<䩞Ѹ!{5Bg2wٽE~⢍c2 ZKЋ.<"f)zPZ^cCB be\v (k~TK乽'wb_=Ze,o)P&>:?dp\DjMM TM&@b{2I,:VDFM\ ADUï a<hbdl͌2&Zg!*l~|=9Fqÿ.ѠK." dG%fC:Q \97W_ӨyYGi[ΘӅ‘/v;HnQD1 @qq!(x={)䓰_@JYD#R𝧾9Bc1±RWm2th t6EjΟ`;eo+y7! OywS$pO{I#9d3m`A}'q.ce KBkAUzhgj / gڃ[\ ųzR_Y`ePXJ4@ AĊ|Ĺ Gr*#|v/B~lU/v t L/{# 0Pk5gj wIʇ HS gh\yU%9lHl;x,W r+b3D#W-R2zZK&\H'SURS 9/! (ٕE5(g=pt,GcPLI+&g DkI2&KYmvt<%1oXZ|ؙh(q {&7 2|#pX| S̷T=ֹcpx牣Y.V^W/ՙ%jHYqޕ+fɩ9-+Ĥ˄Xc+fZ 氠eXf͙Enm2j!vz ~&?ȵbȾ't6p,y mrVW7 Y7 l<%f[Tۜm&M Jӆ6[9O&rxDa’U‚ϳ ^h$d |qXCֆ筂Q+DאJՁ?ͽa5.Z;ZtQہկxD*>Ck˩* C+"KeBc{ng9Ǿt=[h_W#:h iG^j3l]W9GAAf.0s|.-ߑq49JD Kme(b5FB2$qlx+(G ."w 󟹊KaEݧ/nK\?G\ anbr(|ܪ=9j=_mo<8׿&&F2e6h]4$جMMb rJ{ƑZrs6p9;כA=@E rkO|v|Ih*/W?ԑ٪^3l= 5 b&"~^MtKQGjU.gOM|1pT<}`ѐU9nz-(qތ*PwO~ZV9V"E#.k0pU ۇz~˝ =;N/2ӳAMODW;t̫OJM/*.<+57)EwT+ul\k lvei֑@qh}\J@GO!AqnpOlS4c^cAë [^!A7ZTGoDa Ȫ}$^>|{ʑܵgSSa}2-]4R[ao"ObDՕysM 6#*fL|i<맇OsSt }zV Fa쀼=FVZج}![=9>/cU$im{m5fRuz~7NƦh|AIO#,0S"SAf ΠAHM2}c_1= >(wI ++D7E5];7MaD Hr]s.yӢzl^%%Γrh \Ej Ec Hw*(Q ,BIwJ"žiR7^d.`D驘ڪr(LF? [cK蹁m|JW  e 1 -J7ď;N= /Y=9QZ|kT.T Zޤ&ɇ&n'f]QUK jAt`ulґmZ _Z-+Pލ ﳓŊ t;jIzۛAo\ ~[/ɕS#t$'g3\e2:H\ Wk†qF+?mb;ijؿmXs1qx1t| fit-Tz;厅n3R* c!`)nӦY0& Bيub`q{]xUKĸkX<R;䛞U/Kn3ז|.9q\_@̒4̘k=:/'h6Z bC έO/3'B3u:ɯ65TSgxeX+n^rn|=)&M$ $JS1~?H dH # VM*Գ>GKȻ$h4S?{ HPa~:GgeQ@ThG,M+X/ y[ϳwC^ok$82$!F-ҟ@o?]zTaH-$@SOn~~ZjEUʯdQŗF ܉-@PrY&}98i,QƯ=UԐ78| =8>B˝ ~b5FG~AuYuz["EG\x@He{꡵X)Yq'a1' Oigd.&j KR.6zDxVꩃ$rO˻\[Q-M7TGF%i8U^սޅbxûh KٽcsupvڝgBfЃYmс\!|CzqDUYjXٞcȎF1?b{͏;a j/jqXP},6*'hrkmļB(fTgB?qA@~[IF[E =D?3-/:eSK-NXXX\)ļ!DVZq FZg^nȡXg*ԃTDﺟ'kC<636âBؽ؀n)ҟTS/B $ܓ9|%gN7(Bʷn0Ĝ%ꨠZ;0i9,W[r;r=n2/<W6=K k5¥jt\0\'ΏL <-KyKҷcP Tx#jff}/l /?5#Dt2J[tP__CCn;6r|jw>^V~W`Bww/u; wt jȬsSp.xղ bR &YJs] ;\' ա&.HrqQmڲ+="eQ{Z8+w4vǁB( PYH݂BX?$_]&.XŐL k49  E}W{h7|gMpNi:OvÍUkmAV0L"}z9L&T;y2[5Q&9DCCjH Eͯs%WMF$놩Bحm>j#Skuq,Tg*Ž~Iz.gַcQ;XgB/zhbl>8 7dsMd0䝁D$k6R_C̓tCpQT.-!IruN1S$yBb Pwϸ2 wapH!L9΅,:rim0%QYPѵI[Q@YÈ,1[ɞgmxu"E]<Љ4Eb2 8nYmK]?HD{K^N2 zZ;Cj9!{1 hv@c1ʀ3bL%=`pqz/xA⏥!_e>|(̵Dca4"<{Qz9HZ qX_f$7=w.+onMZz}iint:*D=U<"@[? =^㡽U)l 4۳dHSy KʃS}8#2G>wFg},hn0[AdJɀLI9>"E8J,ŶCRG7[]Eh5/)XߖBAr#C͚J˛N0 }2E,f%HT^|-f@hf]i|mf {<"3/=v9oY~GBd czK!*iCo ,DدolXICh) ^ EZ>Gr#o[ kUlÏllRґ+H_&D ܪtiMl3MvXD~UOX^] nU;g_}~4Y'ڤKf+B! ޣ صmwgp,B(hRQ$B8I``v Kr XO5K]i^".[fPҽA@RnފQ7+KǓǮAs6qcеwJdZrȱh3 , g 3ǹ}bKɃ7D|K0D!! e/??mu^fx%|]T9|4d|6O~!1í+%+h2\WܥV`2Fb5~{0w|l%Ӵ HW2|R^L}F(Q&Pax}4YR0IgwV},n hQ^U+yTj V:Hu4CYEmx?V^K{5`AHˎW%cv>I_tDW}zꠙh50>Ah"ѹx+f=%΃d`z(>37 %Qzyv2LsXs#眇,i!z ,Jʋ/yBs&oEk7zua?/Cuy%&]z3nJ5B OJh߭:<ƣRʼn4[:%at)U*'?($ez;jDrpKd/!ޥxZmyZj3)-l ŗ)\wA^|TC kj:1v8}XV<?}Migw#b~MwJNoW"E:~@0M͝[1W;'5׮{5_"ݱ37# 0/BV^cF:Sl/ug8UtYa&@1O}x7&ϑRbDw܅Fɔ"tAG _CXaЎu7ݭ޻X̪=J(8|v3W3擈-dﰊɌ/} D<;&HHTʣ!L9,BOd4 s(9GoLKg;_~"|rٽ*2Gxk!/yG^D Y<9B {T*00iUG D~R-ZN]6҇2k)wh#XO7Bx-JE-^liϙkˈ D 4xuKHW#CNdY:]MD "9l'{SVlvgR&eřy['2HKQC3%3=^ ԍSVI|kb9GkDY=H`j?<0~Bkv)#KeGz:((SZz@Gzh#꜠:td|^߹86V D=kT=y {j.j[XwX.x#FuX3DIa-Z'A= Dn].>߸ LE2xW] m>בڟ]滹uJjr\PP: w ^z[AϱȜ0*lZYV^ S/.lM,G" (H=!6OL{H=HԞ3,0vEQ}0IIw{&[e{nRۿ{CyFEwI5D-O{Nu-`=mrI(E{:?x#K='t+l.ޓEO .eP:TKݍF\ OFMe^``AǡwBuR$(xƻP"Ƙ)>n=JC_r`桼QltQ!Z'RՐD12ܶi#/ІD~p J,oQ/?CK<)E 6@n~KT{Hhm;H@c.0-)MY ͇ҿڞuEcFEe;Ѽ!"?ݱ7B!80 [`PRz(!fVD~hM.aA [5 pչy[XiY9dO;7 f-̙?Z A8D{f''܋)O2D`DH]0>rӨRBMQ )ʀbDdrl%K~q\9/ru;c V9nV &>Z:–UrAT&CVN?ytqV`TD ] p'MU4{K-[o;<̠ܘ@f]5k6#zt#:AHpfL@VDwl"4S4YkTO3!*\:Έ? 8u` J6܇!+0SUIn'&T!;~6/2X0Hbcu4 ֍q=  H^M/b筄hjYǠU\g<"ds:)pZ{mJ&pHO,,@oT)v}2KA&  Ds0Zk Pw~3NݽVueC6r&pK­ cBr%K,@Uf?RΞD/yXM7%ER,s vS?zMF0&W)PQQ/r[k^яJaTY3*䭹FQ䷙>y,7dk~ $L F":Ự9{cΑJ}h<[-åVA^ݵjۄt`mLc5{ I^s:| cOf8ݩճ|ecx=2u;|#ORLA> 2J;chXlփ~ɒӗ7^_e mVȎ4Ʈj IvzCU 5vጾol\ 4z}xǚuAY'kGӯZNcGdt>} Vͭ`@M( gl/hL{l!0,=3`]u|tr(qDbl qݦNj P|{.u1gQ_]7Ʌy`SOm80TڠO9v14䩁ۙFbm~aFY}&8z%r t],hX(Dy2Fe6uԴ$UPe)=PLzgJoNKx r>Coyۯ;U&P(Bh&>4&Hw(2Y-oX,p =lg6KE2AbqC{R[&AMk^W3ǪXt?- X+\ cA=IraHk83Np*2LZoޜI^2&L+n:v.Kd2(j何,<tLT|7MQ [R] ?aRA d͏^@~E1TfwYL.WSuu96t,Z.)|,2{``Tk#oo.|1+d_t^Y߹5 aa%PP-g:>DrMef:o~lGUa'LG4gCTdWi?1aM OlG2o>k&b3_k-㷪 fL50!J{;eC ڌ'nEz\A/[r`5b콹N =w+~^bԫ^#TT'h?66Ȗ̀ǮXϠ|:Z/ \.ɻzSs%u!V>4͈(? L_ƥmQ\ 6H@~@V^K> ~ВcUh5@Hm|wƬ(| os[y5r:Pڂ6dϒi4,zU`n1Zh2黩oh]XˀT$Ey5n(i^|QD]dW}-7(t8 1kn惻yv& X9n1.|TJYiRRNȾyQF<gU rEACXތRx(_)q@w`IDQ6#Y -۵mH{D3*"[=8mگ̬z9Mnt\MĸRx9gvCy]F^7|@V2,^ɰG$ĬU9Wڏ*6G ))pK9= Q3ብ N#}>E4~jU3+hB_ێ'MOr^NihWkiI/^:N>0j^8:q} Ƞ[Q]G|V ވ4G,t7‑lLC|-<[hMoOrm%~~ Z> Q|I:+Hئ˃.{&aܨ@)6a,AE״y9?y3,-c/ŠthF6<[WJrnĘFQ8}sF%[u\N[z۠Kr,D/X%IX'~>Ng/<$r`wM:p$̹v&./0'\6Lͅ:zS3ynAN sO0Nĵ(s^osC7Rnm5n1$C ʞt.HE's/nKOWv<^fLp+^rȥ&;5[ $4r>rߕgO}t Mt3/m\.4H?;ؚʒ ci%  BmAsjgR agv|;_g/j܎곮[nc}kQ7֩u 6f[[u!jp&VU޾ Q(6pC&&&`y.-Dݥ)W V6[,v|6)ZӐ2AMQ/<H PNBRD,;ǻ)o{RK- 7\E#?gyMS{@LaQeOB{b݆lމRT녂*v'*<\`P>uV.^ +n %cUKK633RN-R;7A_M;0T;qccHtxAz_%<cmo;x`ρ;V^ :Ao>O>`Cm.0!2s汤D/%F$࿓8mj*DwmR-i:@>]u7&B@,5kyrwUQF9{O(b*[·fE6O=(CA^r4DdΜ7{2 L<GS={bUt}~@tʳ otY\x)pI@)^,QVCJ[2:Ҟ<9ĺOVxg%/;w`F|+Cw(~bV[ cD%9AԱ bqYxgf8ywmrKj[Q抾<{E\y%vTiHg;SYۍ\),kbmP$T9U<_w Vʖ.KH2b\e#RmF=Jǡ'O1㽃~wbu!p ᩊyg_gȻ$W6k{ g u6nqץw˺6 "1  HLXK"Ldg&a"ĖwR~K'+NF>F]UBcV[yž' <$k8y?;`[kNlֲՈxb<7LK&Z2nG+kWY.Jan(K=e*׫G+f P'fHjWhVHxb5KO}0{RAg#ZECfܪiz]M6$yکZ\0"$# jU [eoqTi1(l\F2!8T̻.El a椪xJ \VE4?|BCϐ' `[opn} ѣ/ŌVX8>6S/z烚!;Su*r+r,hW_oĞr*嶡l>Kuh'-x٤zG1>e~j+g Hx 72õu• e!Yl4@88%\k'*KRp~+\QƟ#Bt#Qg,5Gn_˩1鳚dzȚkbӄ&538g4㜽(ئ͊D)Ɏᯥ2hr~B[5 xpʥLIHz; G+ٚ:uGFGOE>k(dr[jlPg;u.PY.nEh\%jwz} 0ewB}Ř|[ )bAя1|V:_N6rAN}IXl7 +7*AyޝiiYa v/׃_?7MC)1sU;ߜ~ kfy<4AI1,J[21v+;e EJK}*~JE#f3C쒀k;ÒQn_^"ocD\zq)›|D\Eglxyʰ?˶WǻG[i)1FWv`Wzs(גQ&J?z\!OY&ÈJ+SSX=ă5筛Qa' 0'4G6t8{ߞ]^)x cMcQ&BI>t7*vNUxl2bJ+3ˎ+&b4ju3Jx O"c5Ê?XчV(4۱4umQ7Rz!htBDrxq BZov)8NL-?B\n+2[S_} 4:$Gx&\,MmsV2&yMB;P 5).lþ \!|Bי~"D'Zi3|fUǏ\iYԨпa+&Smq!TM1Fa#ṋ=r 84$(xmtxSPa>k7"'E5JTKXf`u*-ڤPHpyXvl5꟝]BSuPOn6Q [W(ԁ zYVi(5B]1As4avO⍖1"PuEFzkIZ6qCG-z1"XTl;A"q ǃpxki[_FYzb$c{}c~]D3qR5 Q0 IP;BCgVvD6L?`4S[E1r"=&$ڸ߀BuO:Dqk7YZ[͊E RX%m2(Z'rĔXA{wH~YY(?݉V,BsDMG0]E? Zڭ.]p "+7 {k<ǁ~8lL ]uLzVH\KF]YV =f* FVaZY3.[O4 +YT"m$f{*ۈl>/8/p_&6MyĀNX2 0pGhj$lmtTӳ3\a%2j֫o.(x3y J[2]d>R/k Dyc&>6',}Ŝ?[bHҺM?T9ĦnpתX5Pvf{-u/b4FKyox9q5Df}$ڇ7ٌ (Sԩ]eFNzU:6cua3Rk[~E+U]!XĂ:AdnfN)&N‘lޠP|~sl)")Z*N܍&Imӯɽֺf.ë~8gMIH2x*ҪNc(Co)?n8v/=xیW kS(lTz ufPΟr.Zla!"`{Y/4aF,nT7TT-n/#E[4}q3[tP1]ʆYWBۦ5v+ҘwYs$"+08]Pjr@)p߯'.JC\{ ,ZҖ9~Ũ{՛))-Qhy@Cxw[B Ϭs S:4#֤N{0r w\bgtTm9G,&k +qIFdAʥ~ i sqS7b|t@N^'"0 !)rj qwXTrzI[z )o{1*8wCRz\e7Hgc"f)y@}d kNQd$ڨOBw%]X[IѢ0&^PnlAgi#ߵSi/r z ԡ+Ca DaG@Nl8[  }PD/P)b*K(جr+GhKgbUl9y b = (n ZC+zfEqc97>,x1b< /Gl)yG1QG]xΨk;8"16Η]K2FbyyQ 7F] x9]i&ɳ1kRtuߍʑj;)Ǚ=3MBkDм)tmG:&FS//1v5M6MpVhm69&bHpeDAa! _.&3PQ0;5sg3X?WjxJTdDŽfI~k9}#=DPH00&GI1S}&ḒAn(0_=ʉPv.H B)t _l\ȗgt4VGf# :relH3 ]+P 褢ҳ{Zy۸:RJEO'sh;b=" -SUo9 'UCdqa\{{"|N$|s2YOUyYe;/$57ᔰ53ڝ4"4ܻh4єHvOJqx'r ^&03#0N,,9k!wzzMҏ`,^hg9rN^D"kᎅSOVvB⩞}X`RˏkV܆Z/9-S,Ë:-M&ðe{ܣ8IpNX,70dR/:Ҧ}-j ;BlEҡֶʛx`"Uz\˧7dE\׍Zzi]ķl@V_& @1L\FCLTe)СSi1" 4pIA P]{KzvkƤX7"ICJ`B4*ִ*CSWA)4=Eoz[T>/gw%S@N\@?Iyր8v-57T،7\!Lj"ݍ*NXW8(c lBA 1ÿ'gCrbS[62^k}LpvpByd.]J#U@KTu~kJ0Ӱ` iQꟙ !J2VZwjl"/.mmQvF6K利/rA48<_8j`BdeGRŒth !MDwa܉ߟԤyN#vŇY")d>r3CU`.B\=Јw`~NN!Rh蘍T]L殒+Т\ng 'WM)HDC"4 C-tQ%CGz{({H&4 vt ^CYWG0vYlP{Ig %h FcQB軧3>ѕy!6ҧD# ~96Ļg QM5ILdz[KCBr߄JUdc[` |S>l֩YƠ3l[ BCHU}]s>$ѐ)}kXq wDj$z>R@1 9䱊dd2=̣W=Ko6HQMK)^*y .6&CB2aTMgdžvJ aS<^u.TChJ>mwC{ IDmVu^|oa>2*DT/5I?o uC{b0.(~RH0Xs8B x4NaQ>GXL'¿fFgd*q񏄭Qr[Aj^}]gvՋхyA~3@#D_^ ~I%+;_0{5&j1'R6/[ʶKOQ~:&*h]Y1S^fXsWq\|R86*"v#C͢ECpE.&E.6,1'AznH'f 1%&vƨ)Y$xLgOm=G:4ߎSUR'?oK&8\[<%\&/V)ǘ9RZ\u S)էWO37yIz k ]bOqPC|@3jE:Y%*E0F̫/VB*.28bhM= &3{ߵz׹5mCTq{φoBMc5 }MDGZwn%\Wbiwsp~z [9|@JFQR7hFqC{;tÞ*} ~,Fb) SG_K$,i29o@󷩮5`A[ S-k 0e$IʑalUHi 2|HhA ۻh!wTuH xW{&1SC)J^\ 0 C]QukZuƟ %2"l ;*GGxoOQRL] wfY*8YLnB48W-גlS: Y{k_ pRơs!,n(X L&>|W]h!C{_-62i1w8~5O|qٜ@nzs8 Tu 7h̑5&FNoiURP[\Ou:l44P @i [zB\m}7uH%oV?)#q`ciԡE dCi4 ?',;i~Ű`~͈"%c {o9T]*8(gXk ts G1=h=&MC~D-%=oTn~8B.) 8{ygcoo9}f)7ckKܼ"TOL!(iQB#i^=J͕X 1QC Ly9R5Q;Lz$D+0ˇn""u zPXRg号P0ݎ. B1Ym oXK`+%2T]-ꨡ5fH9$ة}I^'$pʂc@V*C?5b Z3{3FHGwRO?dcXv+o[n=#!pmI#pwM4kn^̧W.w6k6FxY#?JJ{ĀE[0 Ot'BHiDxlHMۏ9!=jb]!2ׁZ~jW9_̣YlH^w=j EǓ=>=Z&z CLF9mBͫpt8,zzS<9lDOhv+wzMn'_zDT1|K/nHp:^iPހ*,-_IJExilЍ}|$8oey 8O;t m&TO ~)xSXqJ= 5km˶ 3j/-᫭ WdZG%Fz{ "|d M,X}?@Nj24$kc-og>?#}l6}PfZ;jpP4 qi+y#?1.]:=i*ڥ{os+.Os{"zl>;3n[2KA;,=|%stY+voRovN蒷>X[?4YjWy%+m`J@oPG c1Xf ,/T\8 VӻaMp2p*WZ>K}*7[^o630:Mjlx㍨nHw59GseXw.ԎI-.1ZdPw{3 +3FۋsݲXVREahώتJ/5ª|PI^X[,4G5_Zhz`C|%H_/9NsR?uҏe*Lh'PB|6-כwՐ/C54͒a 2ϖxdF6vV荬Ruۛ *O^6~ ag}}E K[PZ43 N_졟8] 5G׼_XBEӜFwmC+-抁k[{o< -X(N݌x{ƾ]2'XyFHgE<[7m]Z a죴8|b˷P 'mSNM8";눵Ԥ>t=wջK+rX$@Qqo[ܒr\]f66_Ux!6屷W/R NڀŊyK;E*3~+p𖏹1=&q7CV^ ;<ĎOoU%h: 4<r08l451qcxP>\egF0 㙆}ySMlzk?p1|AhT2!(8ଡ଼΂ʢOEpBܔYru4剛Q@.89wv6otw-/ mxO 7tۓ1&XriZxvBZAW>~)h&LdOs#C+8[vϙ.{@VFJЍ;~lMХ)ɀةSa} `HMp*=^(<rED"?lzP5W=y~OըXBiZiGI.hm}IQS7Ơ7Ge㒡T2|b#muZx:ʼn.6zWҋ.Y\Da+{m@]@l 't{פs yV5ȉ`BJ>z Ϸ; ^G|ި[8plX OΒ4@p\peI9zTUgg#~@E'{-x}׃bK=+LI)UE:07}eOݡ2L'ꪢ*O+xgJ+JATƅ+oUqFpk3\K<4.a{f4f7b꣱]/-: *Fa+,"1`:po8` $_[g ;rKгN(r FybtWos'+! qNW=ʂhJP-'QꁰP߼Gy*ȧ[Zud[> dߓp۱)#feOQ-'#1KA3v& /Sp%P~6Ћm{F1T aW$,HћRX"b.42'Y:}ЇBI^vbCb}78VN8\_qah[˱V\<81E QNE+/'J/cZ 8p??5mcIJwʜ ^ېDSB]aMX*aS;E˩k$ɡK~{7(03j+PSvB1g_{&-(4wj:0L;hQsQ_K)?߂47*v/'`͵6kdht='"G>Xٷm'hbBN_"T|CdhY͙FJQ'Gz( qm}F\F?eRǿ.!yx@$(tPѧuP*ck!eƆio+FǸu^IZ-CoL;PhRjei;)1{G'=^ؤ&ɐVԊei~€'U/>锆, $EB9p/)]"1$ЭN$>W\0HPM I\5D(Z}4S͌PЌadӃUo%sQtϩ~Kd66A@٫IB¾rT{-YӗO]Σw8̅^/Eٜt]ʹ6OwZ-9Es#HXo h3[=ywP~v~v1MhDajB>iR2y=@$$K -ywדcBte֭E+ݠ`g,519.BwM)Y_u #[Q5F%sH !AY@QCa Cm wIl̼YEmwLJ&\&fU7v:gT ZU2 7G)7PZV5\FWPFx?ݱZ]lZDk-#-Lho-YfmO<v/dmD<_4N>x3n.-~aIs^fD{">[ATmǽ}k{w/;}=v=4kgWe7ySv{ =Xfh` z)$J4[5ݤx#s>Wi 0=f`ɌO%.D_y8ٓbW ʌo]A:|E)>]DOz~FkB%Dlwzr8ORN.UiJ ^t8LKN:~Nn[g`g!g THNϢw\"& xHع%B=[6 ;XYw6~V9SSC\wVԴ+RK'q f<:C&βFDK.W/cr?1 O\7$o\ jm-UK2-,_㋾x͚p~AOjr ikƵ2:/Pz.?l_>xH)ZAZ]Խ@oͨm9 nu%gBEl1hZD~_l앴#IG4:b{B7c+#nx >-Q^e"-ݫboкqa>$E :ZH*|YDy0F3aϙ薴Ya:na(xtv'] h* آnv )IWՅ¤ɂ{8 Xj) fѡg'6s j\ˬ*ұ<ņUTvK9+',M ~;&-xK -$|SSw_jv/CW)&]EZb%~aJr-vtD|1bnRڰ1v,iTx>G0]T#7U3pd qӸݨ\n_Wa_@°\IcG7D[?͝ FQH; k]\T wHnJ!] :|-i B:>Y%UrU.\a XqN6R|RE uY%1Q?x[+ 4($DAnɳ jk\!z kR -[,ǪU#u-%OT{mi:[_AIv`P+ݼb6|@ɎhLAcw-g>D)}E# ]Biz >&td\iSRS82" G+5m\ %IWXrdkP#խ&عr 5_&tČ_wыwR hjrdP.ѭn]1<0e|d_+ei?Һ< n?)ў:4[#O 0jMI\QtK;#3-;(αsC|">rӤYk ײEGMЌBU3?wY&TPLVAVWI;Xʴ8{Fnd=2e0R.p3ϝLQ)TYA_lMYq+M 1} Zqw ݹ@Ww)q@/RzLYt矛J~D_ћRޫ>H]o"ĢLQ4y:ط$X1"@WU5?4^Wp-/u~wl9M>[\noN.[irpvmM]lET%~쀢i? U3gQwU`)N#J 7uK[Cm?<ɺ7v98 [H^{zƉX!$zu{ژMuFC 9br4gxIMrzL{_1)c^SWpJYG7 V/-g|'IK2ƏļmڼUm,urL$کв8xC]nhzZ<>@3ztEm"<:P_ASșt3}alpC\Lyt=NKZWehUib;} p($(^D:P-) [xpP1Sk]}z6즎S:Ϸ>6gҽgΚv_חT1g2 2,'_> @l\qMuB۹VK^[B@ >n"sy|*G ;@a}q00C Cc*`G`e-]E:UPLsZO 0*TL"s^X u#VwB$a*utW>P#J\[@ ]Bz7 6Tbh7 +44K;iHf ?ܲ5kk|A;EeD^)tyDܹtRzyq@tC𣑇^3/gmG3J6U ыsʣKQGUA4ZnqQ&Ej]&h"=IR,.w e>ˈ'mVYMϮVS `\7gNכBLGoǬ藍Zz!?et yjZ *Կ,wqnkahl9Q cq曽.@ Φ_'<0r`u͑Ou ,HU o h >~_bUui`)h9Bo˗ aY#Yz1^KNVnWǡv~)ߗGK<'oVYy?3+P7y7>_v 8h#"*.䩋EpV]RstJXs{dҳFǙ'4@dU/ô&X^7ӓjգ0᳟#Ui9CO S 93zOr6%ؠL T<ʨ"'VL!V'iH r5|ζ<$*R1ҽ+Eml(ų%? = }aQwvC<~ئ)9?6g@mK0ߕ** ™^}5kV${{-q@}大F#t͂ TD *,vD'ģiaYcvs*tI7 fhkZh iN5lSq8/u휑/gB(^=Kx@#I+Cu\j~ʶO[_:0PfZ,k=p~F~42 ĭ͆l.G&=90ƨߒa BՎ5NԶژyȫy +pS}џq UF@}ӥ@~c^&m$5+YSВqo'ٞ h9f FyZJb9fWl $rb,M8WR%!7w#&-u A%C5xFC=A;-2;9h({=vv$=ms]j~wJg\OaR>r.(;p4f?R'ܸ e[(%B'Ӑj]QH3Arycl-[+Q8Shʘnhp|q lv@LJ[nh uT#uӗQjGHDwiR ^ ȜfNJQa@d| AxK)iO= g*sX9_hǵx IDv?Cʉ%<ɢ}sQ&GMƯk\^ i(6̃,v˞lj_1/WϲSk?ȸpl$dX|_$vEM((9$UxEBWgQW|@!F;cPŴFGm%Vy  :Db2C=m_?t֍v)dU p8gEAI*z$- hӕ陓FEq-(.c'=>զKa 7. MRd5d-u$L°X$ 8_Y'zap*Ͻ&Rw#@;K)S޶_d OUqԞ7>|c2pSpa_r&lIl/I.E4K_eɤb"~xm 宬eTTe65D}%O,Wu y#RFmυ9X D3 ^f[7tPE>Ez q`5rzQ3  s%]>)r ?~ ^S ##m!1K-GtR?ȊxMUk㓓槷Hm*JT,@*_nr#:W <B5xj i zt -}[v&>+jTH>U2rZ`7FVGD zxue:GL+^z:3՜eP/5ԅCNFj~,( glz.zɖ7&r y S8{1fn5ڕ$qP ;0C9'̬ b I4CU >1M3&\A2REZAS@\7>v3k۪,}Wser[&QtكJtEad%Yo΄ux&CCϥ_O+B~|yDyUhjWyvF9r,jl6- T#F/3$?#e[^ǔ+av&%ѭtA7Wd\5 ]En3,9D I 6iWKy|,3]κ@{W"WA&.886 $Ȏ? L ,6? V{Y:O@^9BueB1+ 8 !ՕaGEjűc^+9?q5dmvB ܌if ׫Rc~jJXHsZ}WFՓ1kVҝ5ǂmHQM-\mdDhEߊqeGȣfZ2~/ ؘޘX OgqOe;Fu~(Z*֍)\9Xw`waȾ48G{%H^cꍭ i&o9r(:6l3/Dlg"p񖥁1(8r^C/%(sգr c@`1{pQRJia A#U5 'C=gC `ev֔k{hΓ77x<L>.n oѬkH_!}ց2*)V=dn_1SZ@4u~sQV^ߍFZZW| %m9ӜrpMr{`rbjgO%_:M1l3>ȿƒ't] v$9ĂG7 kW@ut"|'M xn0sM(p?Ok ){?zιCXRRՇ I13b3(+v`l@[#!.|䜝$; /~x~Y| 4Wj8.rb+b]PԈg:ZSBy2YX/JǞkk*Nmޯ9κM7xDz=q(}Ȭ؏ @2VB:=%D! 3h蛟sd~;UkORB%~@9-Y71X#7Vt*1aIE΀]\o|; -E#)Qe؆ Ŕ;cNi.%_7Lزc%A =6WҨ^FDoZFxw*{;,iD;K(K[_h— +},OXuIo%$m8`5^sƭоJV$A[SH"oދ=24E;P]ahDb` p 5F>EJ;EߙFS2o1=hrbTgƸTf&@yFS{T %BoYDQ)!`*((WU~(ԇ#͌.ܧd‘jL,uQ4k(YGM̊?>i1m|1KGcΡ&%3K.~Q-×6ys.yҟ qs@4ÆHN+ #G F}&vu,WwVo_?stɚ)> TݮYQBIW!'[ցޟ&٪+͞*e fÔPѻ]Go8[觿?^V܃&8οZO?p?D\mO$!4\V4W0Ot3>nN`w_Q9⸉ޤnjUs>(=/'lW3ӮG%L9BTgQ5"b[mWD [INr\Ҟ'ė ?c'$!XXguZ%& 6o,-~V)ϔ#?:61ш>2V+{)mgT2{&1/=B$c(E_Mv۱x/Pݲ+_[L* ˲>h`pb#GݨDzvZT^9|] >{woM>I-P}x'-/ ztEg5QktN kD*~ blS6<i9Ly45w+Cj^`,~; ɧmd{/v9h#yΒTV mtFnQ|\'[ 3VkZ\o;q6DbP. Y#N \Hr6EGo/UJΛK3g1wքTd_"&D zȝ xX눸怩uAtnFӊL` {WI?ns=1i Ά.`H82{v,܃\p7˔:<qzd| [FY;nhlkfaOQ4Љ'm =^mF+/L{r:]/dO0R5TdQF'+2ݶMk3`3܍%6;[T6j8)ZD`?L ɵ[MR ׌Dz{~0|R:dP_Q:b;w|yV,V!3@:? FOA?X@0LÜ41Z0MHX8ųx~E>U[sۻa eVb`6Tp<&@1 ƋbQx5Gpؠ͊蟓TwO`ۈVhr(/v^Ohzmk9-^.#jeA^RWBkW xo"oW•fO<&iQi`׀ˇ{`pxe?)i~ty7bxx]*LOV/$5%m|R |¸U8E|ڠww{ Iz5 M.qO{2=~k * |ͯK /c3b+/=tiXL8;),{6# #fb l5M)V:lup{LLʐtT:BYŰ^"\)!{~XyP0"z6 ] 䀈_X؎vjB:h[2,EC")umVya>ËDfi7&;Rxi3K}i5-hl6?(,)|&+eR.vذn I~cSwLՕ|RrιJb2  wHI ~H Er a'@ߍ1QU4@ۇyi Fm%ә%'{dR 7]g $%*bX.(6i4( K 3Ruw[bg)&?_^z&=ĭxmQ5 0"XКҰuH(N[ySt0?6ܳy ~TPZ%>D| }7'x]jVQ!,JS #Cذ7 [iT7<_'huXvRH,+K 3 Tbz.ZC+yz69#7^0FQR|n:?hS'') MM[cQP~`kqǪ/ {In h_S^8zP謞jb. )ʢWt׆Ml.S(L˽1OBE2{#Sg*[K*ml*,r>1k%>W"d1t;_䔺f\r7m80,*#6-QĞP7fbРYd۰6gz0uÞ2A]Lx/ރ{4C=mVdrFNCD/Pjԙ#J?#+hy_!֡/Z1o5tI(yQ*?Sɶ駻n`=FF8ݠXD7m\OaUTV`KSJ['WqɘrLW+R|%&õ8 xFT1NX(Ύ_t2 7%U1ʍ:0<--Q+;DŽRyZKMc8h)a[ϲ2h yɼi[@\ 2 : JVgw]~C%OqV5;]C+Bv#B0YQWvsnKTClM% ϩh(Vt5RUBjU_lD&Y=^wd~7=|mAr QlIbLQݨ=HN RѣşyR%HxQ..W-&-{2}ɍ_[ixO,}k81@B{JŶka5x@ ׯ_M"ړ[AJ}{4r WpMx̩~0zz ]ӢR_3H[eg)($,, մ6ÜF +̅[FJx[XῺ(ʚgHZ.^A㉟gvңo2mCv$%z* QwY~FW.{K=ɷ1XT5@D$q:c4&H0=c14 _r=HoλJ 8gq"l]}f+y`c1YN.?`^tƻe*mHFP턜OQR4(C1#ixSc % P0 8GmskW:]n$l|#p$~&D{>urSalos J:sE"#W-P<=f@#[ZCbUZTŞOIQm#.V.O]F1ANHq]b uu^g:'*.䰩p*: lh ,(zU9#͏M Ϫ RN]kT+* {f) "<=ހߋzҭBi:@j4dr[hx^Q`)~P/w$ܾ| 7,(S?SѕIȎ=_2~BE7v61אE4br'1 bH9|+^t ʙxڭГզ%wc?,s{ J ֮gDyqDp~gwGP ?N4 ba%R Mp"ȷXLA_њ/W)rȕ yH#]˿~6!dYsy㎻ kZ77 ?7v72CaxGDK޹ ]g\lk'8uXuȃՈ"3{+4nz˒22 ̩ 6xH!+#a,NLnȕɚ8 +w!$Z="-hp :&X?kTs6d]͋My]Z ^GK2DZ269(t*,_'7AH?"Nn㸵uP-'7#&W&V"/1{NZs,ֻd&] ~kII.qC9&%JY@D+٘PDO!Zi`uHbUPcT;^ve |Y2f6rdi{L>t٪X_ }n>8L6 'ZO'o?ސ9x3?:- ~[*"0`3^NXkce̸o~Bla+CN/WrHDH%H3<90}:]a/*yhaAK)Qu0lv{Zsȯ@e]6B@bBK~xGX*(ƼTĿ$Lz]=[Ԗ;%niνwB  !P5D&X\>cb*z4 ._.5\gѽ O^ZԕVDһڅ$(]gQ-{.Ngފ.F۫yI&tv_Oԅ|LDw`7+*|9pbՓ!۬ojJ9Œ5G5!LրcV:МrKX(VYw='7&;q 9 alʄ8ʚZK Sw{ 4 fyUĸH2bzWx"iDĸ 1W1R2C~xd|@&c3cͩdz[&Mn4M" &25s6Wݞ/2RcԖGr|ݼU~4jD-^ņReZɐ 4x,ywL:ȫWK7?әͅ:Y~Se€{`[ݑ97U&u}a1 e G/\7|ZtuK؀m(q4+c=n*;Wqn[dS)ΨJW=c$tA#1е'ʤuV 3`(t0-VIƶ~6Z~$f4qmpgޖBܸAx&/eg^ ^ޚ}O]zBP4g\x}a.[hvc%񾆙LI,拎-DS Mgi¿Q^8x7cA%l`=*<* %7} ǹW64Q}K%NY8ǝA#5<L-o=Ϟ"]`T^ڡ)+ 8;:u=TZ-1!RPcvCˌDZDp&(!K |҂"FEVp7>>` cGC.*ErJv YH\ |4j̚z `Cyzc@ z9l`_tt0v ]24SNy,J\rR^Ҕ2F˯NVd<*uYffh h{E:/~X\q.W;Bsezm U7gYCaM-孙`= V2\LN̐Dńd!.x^>V1r{Wn"@ o;2SfTbZ UbUuV}dς S?a:1J }(Ï!zh 8M=2LJ#VDnQƷ0^ST^|,qTӿz Lo>0"x55L5Oeوs>1gxHs$RZF4t0VCq>b&3e^ xdE9H֤?JTZ0z{^yZp[Οǽp&m1vNOQ#237~wFMw.9-?#q=S}.p:EXHJ>D65%PEK >糐uMNc8i>_&Z}(]"â%k#NG*[3E^b.Ӂ3n/jOx8^{t"V3ICi';I%-*Qݼl3GyѬd?d}**USR7saM`vD骩D--?{I$yOw;\P=qs͉L]~:.0̱ o2V2#|hh07-T3,Ugc6/$R+9BN\opJbw_w΂:Y۪zz;CH7хCRMk$~> zj>塦*aMkusǹt=B(voSAP @Z E;cڑ Nt"NiK*]ĦW˜w7[+*@橓X^oηk hv8gK x5l~7!5᫢*y@G DГviމ;9G$(룋9Yo.l&(zлy" Ii9$s<J+亪 .α_V1?i9Pw!CR zZ>Jk8Guj 㖯()2 8NX.۱p.AU$RؤΠXIRKBYtq[SfXssDkG"nrt#%H62O䢔%݉x6 tS,P ݇_3Ɵ[r:!X{5 eߎb-T9G۴vfi l &, ԣ[(cWe]ՂϵFMpkiL{?3mέu ЬAdJ7Kd} ʘюߋsu,WEGWjZy&h++_KdCsh|KA [zYC"ݦoXQhX Юpjzv`Gb2x:|L(n RQL)|}X21Lv%_x;v~5b87xxՙ7 uI68J-JL$ǖKw%;J'WK ;ܨ8n).xVԾv1ߋ^UHZs(ga< ;DjG`bq +'`t{FuY~['98i=~@IDITc5af I[;Ћm{N 3̱]Gd8!T pV((^2+"eO$r&pš:ުa(/+{Dh-,<$,_m~K67'䥭׬gg 1Tܠy٫}O8:3.2B,]ŋ'KPA yeg` ٓ?"ʱ^'FSg E'J\=X0>ڹ3މ"Cu/b>01ӕ8jC-ISHqPvčl\U2K1ˤp]U:9/.&U_GHvI%PI3ʺH B뤨%1|]dO$!ӱG**VAdפ à3 LGlfd6ؤqeRgwM)K05)Uvq Ƈ=ae…4%."mѡiwٔm|:D:vͬyY1+~w}r~`<|Ż*X5|jAk~1o6eXȋo"P/M,VJV ::oŃ`p~>02Y>T9#hb 4`/N:T ԧCߊNm,Vw :O=&C3^N[`,(LBK#blTH0MJ32JEhN"Lb+A%2Ciqϭ,~czB8QAb97/UNCj]Z˝ ۏıY.v "_AybF&f!?l>ޤ7b#t; H6WVO[]b\sB!{SXE~uB r njg=ʫ:U/rV愵mR39jiFc >OTd^Wx(g{[2@ (b̶Wwe9=MP]LX+$$eAM UWH i=\փ(p 3gp @θ^wQ9<j=[r58EX0>mkC11a\43lQ\졲c@\ nn(ظ.wЍTiazjݑ̹U'|9ǮM%$=WL %ӈ*{Vچ-;Y?51Dw9ي9D+ ퟜe 2mU"mc^-o7;][p7>#0BzS7b#, dLjR#xUiFk/Y-;l\j[LoFuZ(RA$`EȢ)ODvu'} jj *%MTYaFXXQw%/rY@NeuĶxG\ZMzTPHniqw@X_$ P߈|1/e^;CJIԿV;: );g-!.b٣y9I|94ĻuD"fHwec7G6|pc8\fW2IZΨ?zя k86Y2( $t:-0zpK/Ϩ ǘ dqE%AauG bӀpt xuK"N@Y%j;Oxgf=H}LhZ>ŧ ,%}P2WkHf^)/PS^D@&$0U靕աos{ѭU! w&\-[0Q HZ; R0)0@ U_S",M֕n.S/~cGs-=!N7P'MC) 1T/bF:ˆ5;27Y#L褶F8U轅gj!ck'p!QSQ% z=/sWP]ޔF 4a[?p@c^} R)p|)ͯU~ }~g[#¢I9rkҧɱԿUudt,36OlĤ~2n~=;hwPU78v?EKȯd$5۝.!HYϟj7U ¿ Ih@e\/hϮR00gM=bdMًH4Xl3@("jJ5#Ёo, p|!A%\zP)8vCF44K nKKm Z `HΘSFK<n㘭ڭ|?,티$0`לk.a^mW,.oῒD;y acr^QlX&Yq8#8 ԵAQ#Цqx/ Ņq%] 2'm~VfM!J8VO12؆DԫƻW&5-!Q4:jLZвpION1/"$v߉V~doT u iɟt풚kZʹ J,Ec0 > ?kQFsv n◸' : ř`c0)JꉚZ*o[n0PLQ'ۢfr"$*٥+w@.!rgIKiX0,T+aXXޟwar#v$RdϪP;H=U]f&YJ \0$A'hyx 6mzH$ ٧F<n/q龍 ki^FI/zX1,KZr:iȏʧa#I5 &e| [4ͩI-&g#a'&Z`w bG(ً$ ȔSMs9!|\.dKN0iG]6F+Up\|hV>$/91A̔%<6TFrX6vT݋+ᄅ;;|ղ3QѦw ?s!רFè9l`I WvEyr9I;AMPp`ɪ6ӦMt9h!sLo6֩ Z,SQj}tO±K>UIr]Bوda& Ĉ{"0 :"eUPey46KlMgqBub7c}x $Kn5ZeFfp+賿Yud?ݴ4 8FHGMÖ͆wMSRZuş+( ZA8&mmO58p)9ES=HmbjQD0òvL~ޘ M(.%> nEf?avE&#I쥜0MrvO==v`6j! 'YYX9!7I^Pk*-+ [}+ +Bς0΄Dc.O4~9M6GP;rbRQi(]] f+`F<ߒ߀A'i'o^ZJ[ioUf/*X]>y60 mwlɄ*Zh >7D3G.z TyVAa6\?U~+ Qr"i9g*^ 1V5D'ѓ| poQF7X}=S)͢Щ#MRbY &19SI{GEخF8v]J;EZރx1M6.o Xxfԑ(hAvUNr>Y,R6FhE^*VwZל}2dq&F]'֘0O<~!1  "ƪ+99ܡgEТNOa^5?'yaO0}y3l}( (X KsE:RHX+'_PD&wȟmj7z$DBA"l{[ІW~.Øc_lW CJ0AIjYu|lU^) F1Uڏb|\۲{}bj9&7dI#{u*!ŏm3gU |]Szpa@fb,tRga.ebF,Hf3±Ĉ0:#C` :ύ>1Fr0Q bүϥi}D@mnXwDieOΞbX 95r8_?Z_~j^}2| dnV#w=9L7!{l1lf¯N* WuFt$.<qz(2@>8\ b`8\;zmFq)Ѷkc0NpXvBhq8 H7cZ$g2òN0 nn! UWb^K"M+;6H-.qJXwPEqn!"*t0E]2*sw5,< Xii+^@b5aޔV&w RiP)3⚚QhgƼ*I]iۀo.;G-u0|yB uF!" A|_yų}>sdK) VG\XڃIBbXfL6Cl3Hf:Zlmծ)OtҜڊ!J"#ce&قmŴp ރ`݅֍,3on|n P "A2- +b=(Sw3蕐e {FUqkq-7L=*{YVk\zAv7ay]!Jt%jx,Wu塥ޔi#b}[N%gc])a.zpGT sGߠюTr]u15*s \FI$f32/wU 0kƔBĴUhHEb.5wZCpT+liY;.RPfx^OT"қc68bgXv^pVʔԅݟyۿY㰚#!1ز3Z8yD24W̛0\9"wP?s+sj-¡4Qۗ>"=H.ol4S8=Ejr23&G6qöA$5c-◇0ggIPᙧǹ 'J約W{SIEcP~ ᄫØ.fg!uαMJ #blAO\{]ڼƲ.d&VjT9 [CtL;(x/jaga嫸1@S=)t9l?3PbשvM^b)ǧ_I1\U?)q'o"! W0ڊtC8LÖ;nj'9s ` &VVGWT`|mIۗ$sEeĹ3*} !ee7 Da4.ou7^I@m22{ptXUo̓.)U5Cъj>F)tZד$K-Ӆ7p!UHkΣbsaFY%^}s%On~>\;P[r̔2{YG.-@طQޢP(U=[c1JYt,AalMSo8DDObEcĶ@ߡXmlIGn7^+sc&t!x]GA^M5D! Lш [!z ~ѭe+"M\,#*i7g&MJ\C"RBEDז_FHLNgS;msTb߄q|rM6cZ0I0ME.ĀOAڈ]|o*roڗMҎW RUNӲ/Z3On5)#* g>;ky*hiZ_;G1}w'BVf w5,֧b۪NT$Iqx[׌X +Hv~o_AgnfQǎ>+#=v0 eb z;,^ xnbL$Q2@YGσ-,ߩ|@{Ak0qtz&s!cJyv4ꝙ[jT%q+J@4+`&QG $ h;E<_ =.ޢ(y16<ÅZK&;ً]q򵁞N0r29rg3qT MR妬X BYRot"4Q3Z[inU{qIa>zc9f!^r*F - hy54d0ƌF0R>jm-v9̷|*i>WOuo-u2e>;Yփ=W*npv.>"{޵9vVۋ?-HM?(o+4-%cjkP27Fs"|g2ѭg, GLNk9jt!dxuG}z, &뀂&8uV < bAɌL6m*< _vibnspNs «Z5a ?^5iribTW?DZ.SDU'\?15ewܻ6H o7"g>Q-R,߶d"}ykrxE>sFd½k`g: =R(qW_/ h "Գņb{Iҁ%&^b9βXYGo F%K 8Ku,j?y 9:0x5QѬ2 1_r\$s-8|PՂ$fpBx- 7AgkQjKo @OC`eLhJ%EX- U6KT$evh"r؏VZ[v6E"O" i 8 Ԏjo?&[gp䙙80?wBqx3P+Tm+qָ M_0awt;zKLu$;H- H[`y~_k^(6Eģ}d+0~oC)I/ɴhQW3w;3rqP^4gi#7u=JӷE)Vij8>A=b|iBYB;YnU臫4eE w{Cuz]!s;/26NwΕqq %iw2Xo[q>F)]O2Q+%lzA.n`o\J jv-hT"PLU[o[1ipMb|ӟ_Zcַ$Mٖ SZ*G0fPAwt|Ӊ0<ҹ P+ݵ+Ij8ǽ*rF 5FH0rx5I)]OEDqRD?1{8Y?%ڻ!]GiK!f3?r=>ɽcfs*AϐӕktAD ,ф/Rͻ7Ly 83W ceeLYՉ̽2gp?'tҌݜ- 9?*Qg!Zi Qmth K,l=認0DKb^C=ˮ&/"QFOVPOԎ/[hW1|u|q-Տp+Avu>BEnGywNƐϔhJdՕa3tNPuHPhEBH>{jM (p\{+t;@o4C/4p&2^8A aCŔ:W=LB5 G6^Npے~.q"^oF wb̞VIcdY偍M|ofo6UOH͊'^i1Zj3>Kަ(\AFsyܷ%z<#ز6X\1]Sc3e> ۛMX<{b}֞]nP O?(ڇb[ysMoNU$Q;s*BmIS N(!έAqR; iх9~& }OW gf>{U)rkvuTImD_rȏ}S+WfБfֽ3qbI;GiQӓN vP^aj;8=*q]MXP> :p7};J EK2} ֫G !cBrx^vdFT9|Ib:Zc<>O-b|¤;@ Kc &բWG`ulLSHޓ'B3" Us R?jyvv%E BWZ06xKvآߟ!\ᨸ ;ffݓK3G\FV,m.Ҫ7˲R% 0P##k\:h_;tP*H<>_ӜHm񚷗$Fu~Kvvk;P77aiN#s,p=cxXhk1$J͐ #6{3(hTDK7Uw|7Bym٪eN͞ Ε%9|g4|sQh:Djp%* )TD ɾ8NZxwVb*FD6\-j"h+?_䜋B^Vi{hA }9RegoدH7Ы\Gt'!]ĂL[s%wwE2ad")Ӝ7I8 z:ֿt`a+DG4FzMmYY罯B<0 O`KVMYS*VcZLKL L+wcQJG~L]EaE49=Zy+<56Ї% w.ZTp9rZPKEn 4L2Lʚ{zK]/7ۅ܍@Q[8mZm j} Ϩ3'&#NTdV7PSvz Բ6B4?xvWвG17)ɰ|UkM#ˢRn+B*]h$N 0v[юvB_?ĂǗ܂ԎI ǮTڢ\ײ ,{نab|Iin[TV\A~ 2<:`ﻷlָES{R! ^G9D艎WuF ? ^IԪ|ܐ-,)ΰ\]JӢ+.6{E8(uݾ8R)AQQ?ԊW 1`x(8IUv5J4rΠ-4 ǫ\K]P.s< _ TyA6U!Q0Hx~|CvBOn9ŽmV sk4|MsΦD}43wi-ݒkX9r7}s>D:7kR*ds>)fn}-1f}$/uy wp1V 919_U˶C1 4o5zNP~$*qy.|)G-?qPK u9cY; VԵWwDPu3qR;i̺)N)/Ixq#4|6'R$0뮣Iiҙq!XDxmqs2XGT w `۸&[ZCt\o^TkNnʶ~`ual9 &,]8R֎o|mxi sZQ&OL4M%]v@|V9'̉uàA^ŕp6!%NS'Y$:gPC޺ZUu82jWur)t'` 4H5q6ꐤdp4v(wQb,Wsvc"/SNO 8z!T?= qA-W' W/mFQ汍HoCb2Q*6ѧA'A ^5h0 nam W>[ 3j{ E*4ew/ GKwooI~Nҋ/=ɀ~vX8D%x\$ΣĔ$B΢qMvG*Y)ڑZ0޴vM$ؖ^"wH&ܷ޴WI V<,+xW0蜐\POG䊶u`=VVI^;o\ɞ%#Cydc"1EӠná d[rOȖѢ Sχ.ӭ5_TaMM,ޡz +V<6 0dR 6]<u;mbgPs\I=ixFZI*͔;üh&]sYQױvH֖we~Ds [k_~6sjS =,tǾ(o^XG+Hm|܈"v_ueH';_s^\t`=bb^3oS}=8ЙةE. :13jn :aO[A"'?}$cmӵO3vy&FX:e:SG7G?.`v4F`0O+[ŪrRBx$YZ+IT6w"kٲx gWzNĤ(D% dC//nQEay#jjT7\+!E:pD#[PoUb0B G9vgdvQv_9KxFHG{2"ΜZw#D.U5޳=]%4 /Kzg&h~cX8" pbcTm:e!s R$,Lոi/C:T'[rq _Ʒ8n_ ~ؽ2 l `M~8둊XOd@=C(0 v])ejg42 *|}hTiVHeJ\+uğӐ R,:xZQnSӀ~дk7Ks hI$5A U~{{/w bc)8 󪟠mvE︴;ҏZxhq(A om'.*)ɩpϞU%S(4ѓ#܁65\H|㳂i]g @łkh* CyOblKܫaU"i.%d69n~~"䄡oO>vέeM i3w d>lV"gRbOY XNoںZؘx89Qڦu 0&Іڔg$̀L&h5JlћjACDa<тBP}B2MՍ k&,| -QE soľ)ME>Mr_-a9έRÓ5vbh%!%qt':))R$o6 ryXNM[ŷ4Pp!V^tQ9 ,8OHMxx bxǂAuYh2M-HEe$ef-8w8ݧҁ71mc79Gf^ SMЌi@0y`bs4 C-[u}a2UAcYXLi}=I% H-dCF 2<`: ~^fWvR7aihmt:a*v`B~kPi,w+aIg6uN OGBx ˖Q5Rp<5ɂb>GFk[Hg$ن[b )o(=~ZԂ:K?*K!wcTV!8W֊Z}xȵ[+[Ʌ0E'E[ m|~ۨי{UkjbG 5oÿB` ڿC=Vxxn#Mfά),J[p 6$UEIk* Y&+PݶCrJ;u%Rq|F/,?pf”@GԧS޲[EMMbnH -š9{R "?t䈣LlY*쥐D )=jߏ UDvzf%d:+g#^ ؕ\l6s!SO!)"o^w MU!CZannF{|I |8|W+rS &z 03r(V)v#dtZ۝CUKǫbͅXiND(rerEˆGe]Bf s櫅yVdwٕ $iJa{,f49՝Che?{tG$\@7w#bEc˺2XK_p@Fps E=&{rЍrY =⮯pw8+SiH EC/IEzLɹLǧ^_ ~R" KlUyydLoG( G(/.&\M\yٗgr.&4={GSPN&vH3"w^ĝsD/_[s^3ILR'y ސBaِ2@ȵYUc )uW|A94z7fa+e=H'ݮZ8݈&Y&5^JYסLЯA|#ı Gִ=Q |+kUcA1)>› ojeIwK[^ <ܢ2-mcCӁm7pvi\VR>yBSߺ_i̅by@9u}X_wBeZ%?s9VN8!ɼ_MvAw- (%i<،tq" I@fd6K!ӟss7$eC*e`}BЂ>/T}6NvPu"{juZyzu5G.bBR>Q;vZ9愭tm/i^ IfBtތkDJ۸8.:(ʬ] (66iylpDJm,SO4HO7!&Ok~RL[@(Rxd%xWuNOSB `.ET3Hutyi.-U# augB]ZZw,U( #~KuE"QVY X({"Y4Tg_`?ZwLkfOŽVC ,cRlZRD95s#,opXjRHIzkƛ'vso~"X0ѵژ7'Sw?7|>/W˜沲".@dy}fe`$g?ao|(FwM@#a};7Pc3kG9d~fmM&GQIa'Oӭ͇2)u{桤F0Rlӿ3z:CcƂpN'W8fK.5ڛ$&^\Sq>h, Wo:i}~N%pKd,a*xxQR1 L'$v $*#5v-Rfr> 6%4湙~޲.qI%ڼ50~=Phn?Ͽ*\Dg.;; P[ Jcd+Ah#٩WUGJD߈\FY xIײBՌ_͖W#rusVzC.laTog9jNMFx38ɚ[ڛs];Olr Ba}j3t2{pao2l8unZ)~o0m*~Q-hDLx/,ҷ͸-A"dLZ[Q dve,L%e ҆Ұ8 ˜<&o/R?b1[ kB;Ftӈ2nQ0.wQqx.8ϦGMEDž]JQE4!ң$9mC]ClD8ɘ?omUqݚ igf2(.Gqj҆82JOwJ0Xc⑔s^4ygXs2lQ<7 : @2IdD BR0 1!T Q9 ZZ`q9e"3kU3i|>d1[` T**jJ=HQOHZC8ORjWr?Dj-Q`QZ4rUy,a8gҵҏXd=*s9if|Q,柸ʖg eҴF7eL޺qIu4l}ryMIك{k( u=%Ү+U@vGJSc{}oY2os|#'acS*13_f)GdnFGv/' G#PdZkYG>T:8'vF,1ZdSYU wh깂cck2/b0Tp@Ҳ]~%Ab\Z裮luG'bćUZhxXk08sTUv{36W^F(^Dy1^.ν}`2r"JwlF%[f|e<U~g$]%9E,![xn%xIZB}67N9=!%8o491M<\˴m̤7I6&Du=:Dt^5c8=T%R쩭p"u9U$ݶh;b{0]BKe >Z+:h`.|KOAxZchm9v:ZX/"oL3`2$5l9EǪ}VJ{zw8X؉66'xiKK۪Ā4#mХ Mu}MFdԹoHB]8G7|wgL#F,T8?J9P9>O' -$Y$}i!*d;6(b,G!ůAmx)f#ygV/IXN=zG6h h0kjwLҋ?4Jwfr2`cmZGO&2k^:Zx}dA|ϑ) h, >QB;ۚkS܊ܤVhC5w6groi'5=lPF66REyyM>؛w\j2Ʋ佾T>@Dw GA(S¤Cctxm LgzYڑp<OU iپhC +qt2}695ޡD]! gt,.")~apq,gz>>;9I7G=q*3%dqـ VL2&NWsXXi͌]eG,,WȠ݋nY }j;+\zN9_J.s=/9/޾)ج~D1Iz9:f*8n. ZJ|0}@ODʞ_bՌ /6= ArDN w_v$Ǵ29'S4$[X)i!nPdY` 7u [77k`">:.|GMC t/z^v:WXYjc|qE5&F r>0u1$1#=B.@F dwcW."X':4>YyTڂcU i2Hg9&k\8Jq} lZQFBGLzxEpD5Ra7:hVGaӕɫRr5pCX'jqGKO(©?ŻRtĂҪۥ,c1M!~0B9"X[ j:eEݗ^ &7*gV .kinjY;BMFDQ9:cA ([Qa%Z5ܖfiB Ԛի̬L9X6,a Ku?DV։C/8 |IU G k܎D ڻ!ђj7 왓oj/ D =eTN.!eSRL祉LbK[0e3ɧˮrN7 :=w6b /Dwq0'sBbI9zDY4(Eh.QH]h&+hmS΁@ܫofaHߥwţI;"bc p_703A:U[qDSx&R HUykS7` ( 5w-fY Z?I"1͈v(BqThۯ=vXxD<D(2ܖBD;ôLQ}@?>냕-;' 81>cSq{.k]k t_M\w2v ES5_&j7a)53 ڋCRWp |j܋׺#C+*)Y)5B3+ qw ew-﷩%e詻2bڄ OH6B-smv#@in/[3waz9 `٣/93j1p̌njxu2"1{mTF]cx#iO:IVaݎiiap]B fq)%#@9Hb:HߦZ:!鱕: ް.Pn}B܍D{`i )E"Ӽ2sqtN#-HGvx VU$m8 pfrJd}>_X-a7۩COĄs';t8 Lː˦O4po=܉B uK}AMȋ e g%A*66ժd7j0yG~Drʦj Nw+o?g?;qTEPUYǥ@?~g=!1U7%F!l3 K:ƖS _żׯ}xxU:, ވfK)rT,{z3$x~IƠRK!p2jvg;6 K%o*fOgX`T,67M8E9Cy!2f)͇8t 0 r& ݽX[<O%(W`{34ىBJ4oNCYsC@u߿kDi Vm<hUV{rzAV %G5 _8ÕB>7Un]~ )dZXp!RPV^.ջmϡxXMl kd&؄^S< bV0MӛȾ njڴ@XJ 8F#c ,0nOݞ&ݪQ7S l$7p_ wD̪2 Cׯ3f3vTV*r} ;s""Ĉ{JMsU}%;3jRex!)a4!Nш~$i=Ow4*c8JxauR!*Q^#ϧkSka]d$q Hs͑9ˍ`E sQ/^YvH6\[]:^2V߄~{nTU^NOC8ô%v'H22N1n6?%%YRc-nx6nrGEBcUH>IVto`侮]R(BG`4VT.NqIzR;Wf^cDdwv^ G'pa-c}KjHULdθUT)9h|7# wW0 8ũ w֮/;° KџǗ]# D@l,M s40E'Z'T)p9o2ș0i#7s<&ېCJ_%'_19` ߏ(@J 6wo|/ g\j.ȭ)^FKw}Bg@*iMe JZ4IGP(^"3Qv+s)_@\eEL +gc &38*Q~8i^ݩX!yIOEt'm9V&mg_tvv;dI_2}GQhTBW[9ޤGMz&#;4=? Ϻ@Ne>wB=Ӕ.UV eە9UtZYf!7_ } sIX 22iWIVVG'G~D>6bQ;4+n2PZ_uU*mqzj'[?8uY橿%u[(E2ݛp2Vuq. wwbb ]Òd[Tͱu Jj4%YǣP=% 쾇Ymp0 v9˩Y/6-U^YRmu{'a>;m`م}s0ap41pXlut ΀|ӿJUa8Z㸻&1 ҙ}g ã18$)ekF&.Z5rT /\V""AԁCdyjb8MR'1"q!BOu2+~ $#GgN]:}C^^9H*a_!#pW4cAĄ5%ŵ1z¡GA&qwtB67N!{ o:AOc3RtveoicQ(:qͱS 񲊯2ʨ=.cblޔܠGĢz2M'镥%T\p} ;F/ K'fMu+_EEԷSplᱴ.q5& X)v$_&SŮ_CEi $}hJr$#h+ |GOyfo-C9/j <C`c>G`Vٶ-L+$e H r,B /A8\ /8.?9r(I4Q!uGr:D-j/=v6\(WQ@u@lk͌Efe {h~1*8; 5r1t j[e&Z$*K @} ഊ>69;mANϖM#&*Mk97u|J>=Ϋ{|p B3ΗHˠIAV>̆0L˶q3Oŕ'()GQVRL oa'#U#):010"Ϝ( kpLr(aږ ~- ql7pt1C֪ߌ󥰶 l Uҿ!Ic͙v 2@nk0ᴑJ &LC.>[ P&T^NLu63D?=HH% OJ͘g[cQgˑF2y!}60 vOȭ"LZܤ)f h֢=q'K*pan0Ir]S@؀]S&ˀH =,s1g痦fccCJ/ihnR3si a._#g'eixnzs77%.:Fz{,'Ps24a٠7W檭MVsb?vmR%ocw;:{`#ѝfvVsYT'l܀}-s(>1`COK :),nh5p|ƎJht}VWsh)RA4W҉ Š_1Pٚg]:\Xzﺐܯ]ץxG/N8;Zk^Yne¬USo&QMOS'oTյ Bx)Z!$0?oDk/.IxhcRRfg'b<+ɯa&L=cdگ2syA-̺B&f6^H{P=P83SNx$k66vxߊA"/"*INga||K߳*cY+5.t@2-~$R* W:|}> .B=sIӃ:\͞{_ڬԂ5-K?}e')tg˗,m`sR g΅W'W/E`/(Fu 댊 3`*%gf󝢀XԵ_$,ӫ~ohbW=ݗ;!m*dD*Som51zoc hF=3ܚkâE36]OߑQBNm",)VVlcnCN"N4ʴjo=CA(~D\Oz8 dgD@0D&q=T6bO,C4`Z:֍?"nOd4aX*8PE ̺υ0 N6WA迀Z91y ~tơ^ P1!]:Ė'_фS4kg$-ӼX ㆷ5y (m_*ϋR/RmO]om'3?+'pvqِrEWMk%R/c@r3 -R!%FfO4Hdtq.[隍X]Va=A[.̷/2g)OʬvDнx]4q+K BC/Ż~RgdX\TGL5mzR{uNyEM/ȉ^UfQKd3@D_Y$]:ژ _!'N@0Qxs(GZ6!99|XÇ eܝTf{Ӛ7w**hkCH`j݈\e_#c(09rpϨx埢>#kS;썚iڃb]#^ۼJ)w )2X[+[*YnbqQ7X^sf2ۋ~+\'𞍰΂TG/~N>L}#ECɏ1{r4=×g&UqgpfGs9n-+G5|I]?ؘZ&gHKg)4;L(=M#R6!'w/ErR9Qie e7{YÎuQ,1~{9ASXxK &vPg¶+]/ B vWz\[.{Մ ~LHG_M6RV@K77Xe!H'PiEI^[bRѯq }ˤ7gʮ3Z+'T4Yg dO}窖Vѽ?vJ+-Ӣ2M/ݾ$ey0 '=6L_H$aقs>[u9+M{5.\Rldٌ^nquG ] vb{0`i2fyHNs9N9֬H2;!Qlf4fjeշndfu>WjQ;z GJ5];ָUML#MwZ,H6uǀ߹<7xQ`@@$VXʼ5)N" ?`,)ClOI0C!vS#d[`g7_Ud+@?sfP"6oGc5[AfO,7_ݩ[cTD dXU[;5.b ɧHULp %&({ Cv7[!ДsHFt(/i$z}$ ˠ~bRj3 4^!]qww, GbiBLu gc9~A Mu IF>fWEc͕q._!R1BSZ{:퀷,*/D#|)~'+c|ʣr}aNB6N *WEѼwbN%iB&ĉ#AL:/be7럋ņ*Z9/ xjyӛR=k'N=rfql]gTCcVJG{hSSC+L)gߑ/ wõ Ue$? (6I{MUYzQKzܚq d0w|`F`c"O Y|լ.qW/(C,>ssڍ/$njevYU6]lQewsuwPu)z(ئ^ؕ宴r5y0KgCK `AɈr}M/ׁ9/].7_7C@y$뛒 TCfT،!y%}IS<#N֛(N#dL Y6V:2y;8e(U4v 93|b*[^<<=Eu_'3;Ԫ)~q 8|ʕyOźAîEy*hzw^ ͎ؽ#"7Jğz1#9ZbpXMO-X:gh΢$Sz ҿ`8+!Gq~?I|G:٦K4]*:`}ܡC?G-)K~ ֌?::ArGA JG t+8=:rKg5-No"OpqgeS.ڻ0 எSAdB5!:\T2[.} Fh/۲rd !Vʲ|h~3MMcp_Τ[#x/ 'eӗ-{&< - F͘nr9,yJ*1ʝfEMj_`i۸݄R^Ut8]xPA rN<:!D`/֨xM@\jf`rO~t2?0}9HԭbC*!>t&a:? |Т+dBQP{j(qłOƱK_n 1p/oKp3@0j&KSGXBP9)(eUOCbCM%T!Bxހ`J_G I~`eSsݢd`!hvӋ+4ޮ'1,dl'l> ,ZNogA Ttc#B}dsi='L/[-ŋ6o ɴMX6T/-hP YZ[5WۆfbыKJIc.t$w׎ BS~ZȂW-2폘i_Xi @' ROc-[QV?Z2A#8xv H%6mm+ԈD,\mg>xOpHeb}Q,ZJͿu}r\Ӈֱb%X9,-O0JzMe19geӬ)Yc2AuS5dd 3k+;*#Egy> ]$my¨SoHH(dWNfm*d P$z^ D𘢦!I9uyݿnh9~V(EowR1ݘ2<PT:L`( %1ܢTdF~)p#qct0Iv*IUE F )h +-6U28rrn WZQ'~sfS.  7^uDړ,ܭ%τl_AJ%@ơ_~<ٹ!qđ_ `+[IO2\M9DGUiNUz\0RtA*mȵ  Dv!Rq:ԡ͇;M`$ u굩e]Yj:vPDz<9^V&|(֪\"YB^'R%$ {&Rռe&W]U.O]q&4\zV (LeULGP]n2H荙IX@>oJPױ{<֧(EbI8 <m`&@m7i_#j(4t97k .rX D^Oyl|sQ"ܱpŏ\mjAH t-Ӗ| )ץ^m.8_BYoSZjydƄ>śK~}iq8hNE4"=J5;o)gX(TcasG|ll#{Bb\s] 6#y]Y(Ɵ`Ņ[>n+#@ +6E(T) 1#&&cSi!bʃ]L}`@qӲJ{8;G~ {LtKM >HE|&ɡmC;!b8ytOnMdyPOiMpܔR ަN\JV Ģ@xVbiW /CFO*UmOR'] Sxa 2!{gm `f\gB7l &k@OD~dX~S Vg>/ٿsdu3rV([ .r+!]C^>JTLq QO{ވ0br ׷:(+Ons-?kFdA5v9 "OW\g#d[ב1ȑȉ-Z_R݃(ɣe.,(qz`bfǖ´ާz]`J%4`p6ieee,zU i%݇[Ʌ&{RJn1Qƞa(h8!D,Kcd-'7M38Sb;/꺤a)Q Xik]kdK RۄP|,x2zlWIc)ץdb@y\ R3_ m ap00Dꌿ^EBwҸnFK0Ҳ%Wz3#&1J[Zkmr 5N+7}xY}(;)B @; ^ ѕM#zKݒ|;VчZ>`f~Q́ Sսr yȤnZFNS=%:@! g4q4CƋ43}[g=34p0_bl?̈"BF2XKgqV t YsFmS>9dE_AuL "in1wdrx[w}Ⱦ8B2.LwL]tʜ0 )1ʛι5/5){wm"v~(rL1.EЂ>9 >.}$_[%2膢IXEܡ1ykzya+3Bg̀`6 QC`F"gs-U.GC6+ @0U*.G>_5(hPj٦7udO\3Fd#V0|-eB)`}.ga- GLy%rьpC$K+vmv?>[h)ԛVQE Ĩl%# lx+9C1o-FtVi > 4|1wƮzggq:j\#Ɖp! (yCwnYjK"W''V#YrfKԃ.C@w!5(&! 'Bz6 wfϾyU-ܔ[25E}>='Hl`:Lx֨G8Fbi\8x B#gݺ syG:q(8JmwNC/PtFs)G.6v=x XnAk~i @Ѽ3>U_0|fNyIu$ BvRzތ|Ul{4CaFsyu}U*In>'G!B p黲CqcrU&ՉN K9X@٘6FIg\ }% s< ԿR$[8{P7)J#C5#̤!Oet]W/f/{6װ&mn#~GI>c/" qJx* Mӣ]}a=$0#}~Z/9~z3~zAޏFZ.d(cǽp&1w H{nSPppʭ7~\oz$f͢a: WhQ |we P ߦXc#Z븍O%u ' 3,ʝjK,_Kô᭴{M@YhDn9~ I3_h]J֟Ç3$j*\u³bX34Dg[^qlOJmY*Oaʲm)4y D ~FLVq^Z}E @}+ALњ~gxQ9.5Z&'aX3f9$l9;pu[x!\-ػ}O-117>{ bE)FYNn|X }0c~23YZJ\_sT;ʯLקf,hOf6Q@?핟%F$hmNضgzW,gva;[kEnY) } ,ͷg [qB'&V-n`i{7>= =S(Hv(T55Jݳ\w*!ID*5-۠mNl:x5=F{Hp7j=!`.^̠\8Z ^L~|q]RkCFJҟ;/WKMҷ6*\hT_0E#aB߃HpeZyĒRfya AL'ベ1ҤA6[d'GGF2; |oEG%]\a X`KO#\#UЍn7O檍z)~EXXZ6i ،Bot t#۲%on6[mPƛD}Btvڑ.ynٽ'ZCw%UbnsX0-jJNOok92J9yIm%UJqme*Ϸ]iҖRSwjZ|WyB`?:.M0&BRo2y1:JDojP$X D3?8%W^TAkJ@LYjLKfhdnnMӐG4˖PSHjOzWyaBn,Bx9{`H zZVJ&w:*ld8Ɯ \gTgδV 2]{j[fS,)!?|0m&M{ncdvU7EqUR?zUiCJziW8>|'0HoP xS\*qg*4E;:տ 8ˁFQHwTJ=jցmD2o*\" ljb\uRϓ,26Z)PX6<Uu3SBHKׄ˧WHA90^^"Z8_Ƣʝ)i͡ p??S{if&z.Tߚ۾#,X*iI:@09*\3\xSs❢U:`_D%.99$O9q&,(><sHFnBMR z71-ڕ~]".Ca XZĐ!b\WLƈ$KI m{> pt#nr,[+GPwO5r ae]W_[UP99JKQT b l '+M?b2Pf8{]/w_yq|VM2v5pZ>!I\fU/*~M"et4\.2 F]P& y'??XM8җۇхѳFBT-&?  `Q &Fb|(d(MH=FDҮty`A$Kv$K㶿 .+ZU[@sQ8Xsv ?ebR(Βu˒KmzJ #N iD6D{D#}HWRǴ& UjQtAMVt@L"E5h q;dVPņ4/u09>.D"1*SvRo48q5 7%2yo?.[5tB n'DTWDъAx 1ߠ**x 9I#>|Ґvብźi% U_M'x %hRyH/Ɂ, r.L L+JPMrsg 6WP_GY*Q'`QT ?Yfqu[d#ՠRj˯=$%8T88&* G] hͶ pƢ{^E4jٴ>U{;`/?L\G_izjNoG}".aH}F'uq%1K1,8&%n%՞j&lHP = Ƒs^:¯HZ7lH6=‛~oLY@Nwt8v x&>;"iyL!NGk|B{G3y}^J*Ň\ͫir 7 Pڵ*_dLƛMԿ&k/ [ 6 !}n^h[L_ 7?pg8^ao&WMu sRbHeTY, 8k Wi0G*S6  YS:Dzj r>!ꔩw,'\!(F"HDj%( V6c @mQir?l7{_jO8FݹJ|::pqN#"I%RS.;̕G9wyVc;U$eyW]Ǵ$m 9+*8t)CND~}%ͲzgژNE{(*:"brcO iYB{%2;hr:@ڼ <0F9.2Dmm܌J?0FuȖ?|^'oTH:z+.8@~>nL0w9t03m麔ꤙp T!6=I\t%af'*]ȟ,vӼqCU6;#]|C;"-'gjG]ha=Z!UΤ,lAmr^KkSCP=qӟoCUcՠǭ|읣TKep`ᡬD /aNdRv[fW?qm&@C'{+L/1;ww66_WCRVHapPr spy:ʎsПF(Î}JM]oiXr J#~'VT0Hy֣H/&*SnJڠ1 W+܊[q'mH Hc=ސH Bsj!g1I<;h̎$'Tf]bQwJE6I֫ӕzluB*qq~T~83j>#˜hQޛ}XLs9]m&#eSWI?Fe~z?z8w{+*a_,ISSЯ$|f$}3J'P0t>rjYFM՘IghchWIڧD;;CFBM/jWKt]Jm 2 07q34wKD _;suAԤw@jCwʶ_JUιY3K?* *?P*Ҽ|wsiA ݲhx N'8D0(%Fe( >껓ɔh w }iߓos1.-ֆ== A6 ˾{.ثq%\L9̃!#y  )_(vqv8L{8"0{Vh Kg^WJk myp q6:q/Ԑ^;-/vT;+,:1e&ɸ(W /zծ(ѯt6 CkD<l(u0L M4,j[jLUop`<XfPJϾIڻ ϙGi-6&Pt`M/7>02M/|J1)# o"\O}f'bXBbnݑ{*[is)w1|;xۤٷ< h VȻo[(ۉ= sc%|̚ep;(dӲ? :< PTxܴ*ɒ9E<|qqMS*i:iE,byc 4Zo_;}k'kvSƐQ5znoy2@`VXDHWl}NXn2?=v{̧Qٳ2T/7u/ u" eÓ]q}Xw4^C&#p\LW7޴-:q_E:Rvd~R8Ɛ{?Zg=~m7$ Qt0:Yy'LgevV Y4@z/ a@" yfJƾ##ٟAqqq2f+ [T!kĎ *,1|C6Ľe+y)ڢXekǵ7 1ǧ648fQF&׏+`P?t]29瘃345NLkNN`̛-ͣ~#Dvh˹ AʒpPM8;F2e@ oHWetx/"Xj9" tZ-zxػj5P\gSOw_BZM!!!W?7u}_l=cnJ&{۴[qEafQ;lD$IѺ.#ħ+oY]&m  vj]".w5?IrJFpr8쩄q_Im#{x,ZBsð!'mceC^(;? i1vP2&+ ۰=դqe_?ZLEtV,ih-HYd}Ga08y9ya%sOh]TWp:rmj9qunzXސT*#]7|]9{Db(2.1=N#K(NwY^ɤߌPـx 3b:7ɬW(.'jMV`_Y'V @ikj~3D O,o+  0 hLSQK}i s}[:N6T>iܴN$in . &*E\}..x5#F+y{S=NuM/9g\[}ZBr 7&9_Ѓ>B#iI|[_?@EZT6c]¶}7^:J©J:MoMPAt5UV&ZlHwXMYC ?IoMv3B]u|EzGQB[UT) @F2TAMd}!j7N2{_>1xl3ʔD|- Ԙ|[yw`*eF뛻d#E4*cI~.Q2x'H|S n)X]YVe9Ԧ?en|Պި^|@Ziq,YaCchZ&K\']*@deǂ{|Bi_FA]b;?A e0|шZ1pXyq 1SM:fSXfg'sA/c/P U{UeL4MD)xA bPTęW6}?hQj0ŶqXfξaAj iql5oG0W׭Y/P$- ksaM"a:q4nz㾿Q>Wb i: (:e87K~Kh[ A`_O⪪` /^ & ԥU!&Hع(p*jp؞;M #/*'vYFmvҏTJsvXyt 1E;F=v>t ivIS3[A"a2lZw Uڼ #҄YfZf鶑"8\DcK\?QB@l'o&j-U LpBQ&LR0 d+>i.ƞ([ENx 67vg!(+,\h9IR9?44dІh`tZ >t`04t_,bj1.FyuD㷎K(.j]hG4w67fWjk :9 rY5 @p7Jb,.WioO Ŕ+d2kV-X+?^ n. (A(%^'.0GwrOdR4㰔*t1%BJD ^_u\~;|]&"զzNyk21WĚ!0?j8K!E[T0SX8nQ\ MХ7Wg'n*Ԭ Mu3r-r+l!Z죊H txBA-' FiOɮY`E&QU[LiCuslL  Iyel*VI'7g-A˖ĪsX a9Ivjr^8/l@. ==Th dR @HƜe4ץ[aN³S uPHB̪~P9{Ci6#& NvOER)k䬜9-{0֌I}|tMjcj#ŧjv`P[: meV(kj `|rL+S6g>Va.jƌZЇr|.ެɺ" arbXubNQ u_AAW[?j)wIP[;`}ZWtTqǔa?Ƴ^݁n^:Y,: uڽKk;1>zFF"^uJV.cwk#sEW_% e]Ua%B|&N@V4֜P-vZAN\5F%i͓v`$w>O㐋9½ MB) Z*?Cz|w@l1nd'ee0=@:醩b5<-Zc5SuOc -w[e㠫 5V֫rF*Hv]r"ŕ?Qqu>M'=\\o6=56xO7LkS;k\\ IX3KxU"+@m St _<($Fy|M< W ??"rV5|U<vGdc ,7 +՞:!jbжG:%+Z?L8VBxR"]-vSM$aW{դ_aMP'^s  񈊴F)JQ[(Ҕj+k i?J.pgX4^s^"(\^X_U$Ċ?;m1ď54fG%;ȆE]aM-yu9~#9h<6EFUA܂NaRl(r2y946D+*x! *^Hݑ3)SqDU5X4:|p7>x[)?b%K`U&E+KIJv.k$zԥCĘYBm ʖx2WKe׫M1b)|9kzhhj=?xUEU;yo6f -J)$)גnj?햞ub]ş2: \eC,P̬N[߅FF7sC^-PE;Ǽؐy;$ $ۊ7T*Uu$KZ5u8x@Fo7'z.Og''O/&[HW1kEƑHyD:&WyV}H_)͒ oS@2aLG^)i{[D)-5|tƦ!g]s[u)Ѣ> #-sj^LsڳWm6V"6ʴF~;}3yVXrkuJR,^ NkzC|˜_.Qmn+m1&a!娳6ƠAZ$? 喲^"|)뇒B]h5.3RzĐ3_pcһh.3;>趻`j<IaY? sQRM FG+GH&p^gOU ay &W;eK #poؠdV~ Kyd{БT4Uq$~bavO-,+i5;*A{f>u] 1dTr(kX 4r{R>nhMb ž壇=0ܳ_ڄ8RYw6+iCPzoMnn_ܷW?_JTByLxaSvcǠ[4Fj^ۦ9 RGuK_sCH: 7h4`B*h} 0bn~[\JyT!IK +9.5ˆV!]1rJ{}%VxWӥ, -cn'T&];GY+?SYg,q,Ɇk~AwM!/#?KeR<tOzbd"Sq Eڎ?'$˻dޕΣ.RG.(`6vQ=:yctDg>{tiۡLtd->T>/n \2!J}kj@ƅLh@[2| lo2h?{},1kj{&Nt,*V)* s{9SbDdJ(lV/}͠1tn},`8- L * Aäj|D_5I>?jdxf2~1Q Ckkx6`$=MC Pe%͛hrK'NՄwerF mDUxrSJQd13h,C,VuPf+ ~)&4 *xM7!/Y)޾/f( |DZĀ>&eo'Mϡn]Wwz*jyWu |EdQgVE7f>`6z)NHy4$DOZ*ǟFn@7%Y,-AqaN97mTX~c4)^tSc)"C~;zx"|l(1I <ybFWއ4-!XH9q^)vjY='Wk+_ J2z]9fh8fdqT2ifhk+! ىe^&,HʣTa$] _CqcR* $^`}<˙o6|!t1b1 ][wl^ uRA> F.Sfxٛ4~xU=I9w`*?Dn1-7/ئxEp+( TB9U:~yǬ Ȫ =ǐCE/tQU%<ΡΐJ/6-[]Y@< WOĴJ?*"!X6~d(E+Zoҋu{e닣/C4X ^`CO0RF' C9 slR!fiK ̐ ??%l 0 zoů D= Hd;[J>c{Ř6Lv<%HKƗ궀&6M )xC,+~GBXu~ $)XٚIJ'VSRx:LHa{T 9xsFHki C: @nIlD_I&a)E 5wדIUr `.ZLiIy='& Sp$mCunB-qA0(# ˕.ccM}ϓ"4zu:RFhVAƈIo{䁗TA߻6T%lgtЛ^x{<{Đidqr;]-Ebj2ZlYB\eRcpgbzPs'lgf@r=C 4 `('V>d䟊S|E.T2qdB:E@Fr+0r2winmTeV "BaD(HN}WQCLOd@9d8HR-?|Q|P .Η±\$=젗[ޥh5]׾`7͈58sC:ƁGqTL nH25kң #?ݓ=%O$\*b/M24|KwGHŇϯ(tGIt=+1ϒZ[cRK΅NJw@'9RވA\8*u!t 7U_כ# bԍcËWzVRf;=f_v`4 _U83D{ἡ]{G'թ:gI c$v ZiU $)]m`eҕF͎:öZJ ʢkt`q'H$Ҕ3pA$⭌g# Jӄ=XԮ[#?͌y &ԽRJ -]HiqqM9,^$z(l--ٿ_yI9Vq9N"~$.Lǹ7e1yM m+R=>>=r{Ih?NgxQ|2n-YKA 繛ШC#"Vw-Ap{W90q^yגsI<  .E Ӗ긬ܺ }WE̙ a5׈dQ$@hOVcZ $l/)]W84obÏܴo@mM(ܭ M>GgTڇ5߰G˝Ĉ{ͨ%M c!*PT!s&Gpa9D,j_5w o~eU:2~XLX49P;b}24Y|U홑w9SRXrx6ywF98\@``z)֪ b UhlR?RO> $2h;ɷ$ǟrFtrIRVS#N~91g:08˝qg"E4b,y+ϲ m`r\ "j01~u|S`Bݦs= 꺡5jdkVˈmS],gbb~6UO#3DZ!;rD Iͺޡ 78o,zabPG;$"01>ZqxۀQ#Ůe^hMK볰?KY&t?MD$o";8U F{!6[2~r@{PW%tm\h)#!(_A7)kv=ROΟ>nɽ3{5#o͘P 1ڿA>D6z"y.Pj. BR,:Z9 #\3S 6Ѧh)^u)ǹ+ 8ԸַG!Rԫti` L9Q4]%iS!T).)ǮKkG?QJ9-Gk" VvS'\FM"ץ|w n.ӄݝ=N[AJ0X?#@|f0l[DJPcG78.Ԗds5Μ"lHxw(gicqeyD1:}ktI-9/̓D65lg{-NK;NFv_K&ʇghr}ǨGZ׃gZIeM!6 je wC Gy% EVW*Jɥ؜݉*pӧT9V`DQ^a6m(T#ꁌ1\o0Fs 75dW< o2$82xetTO9&c!''2h _jWP{(x>?w(:u[#C grQmd>vfE_L3py֘>Rf2C$4'p.56J"E%ˏs0T  vݑIWlJvݩRY/1v@QE q}Jc: F2HsUK;Ο}K_ N,1@my^`2/mX+t513|;`cD)L7-[kR6#ډ7%q'e Om,N^,Fz]L7ٺޠ<#~DQ^zLF+嬤ؤs̡7<^T*? ./7k l?FWk"Wonwכy!rbKoߍP2'\Tڏ|rc}JWG=u \p#%5ͼR#ΣgF76cvޢ]ԞeRUlzg˴6/a]F8[ ~S.WI<6wȁf'dδ)N&ǰ@ʶ#sCn{#ୠU[Ϳ-uBD {7\GDխN$PYIm#Y[']Д" QU$#(7R(Ro4Zř7ߍEyk&(UkhH8}IɪNǽ󣶯bLF~Mp:piËi]Q4’bݚ%&'3Ymn9Dvd#sbrE y ڦي$Y徍|W+ŀ Fc+0QqgYi`;!M΃dH O'9*S l8Z૞fK66W1dhb8Ԁ&LCKhș:VUAj)}3,-6z,y6qz-CV4}pb^ën~<4vkp_p)k|e`;U utLsm܁s"-N igܘS0Z-P >^B4R;` چNQ[IMۯq2"Q_x 킨! ?:{Ez{Ea Ǽ+8]n{[U`ˎKO^~_^Űd]ٛ!>J/=;ޡ)$ѼR<7/+oe(j> `LJ[xڱ[dh%)SrNG %{=V-a𴱀%حQGK |OϽ\F>>?1}h̔V;P hݬFGL'adiELo+ҩ(+2QJFEK#yX\p=H@qؼ6# Gd! 3H dbP|qSd"hXf>] Cfykp[-1u!dz!St#{}&s 6 ߖ}3JRDb`/|* ;{EĽ%<*rqRb@E3<Ë b3jD!Y5|r lϦf2`ɶxq`\[xU³Vۼh70Gjp;^!߅8%!a:U2k\f؆0gLh%}jK:Fi`\[q֘,!cVu!#G=w^{P(x6 ʘq m }DyQ݄yB{0H _.PϜ-:wnh4+y28G}> bmWW ~bäw_^ӂ]ŔnʔF?YcFU~dbᔮ f)j6`Qn'T j(.̠TT$dХ}P7]f ;OI=:L2B/Rl'p[^%k|6P" q\BZ׬7=Ex'ECiY!/K9C|-ljw] L ̯o^B}8[3 Ÿr~C\1A],Z"gB/0՗չfEZ wԮĪ~2 +IF'Ss/WǩQ0'5skt^/ΐ%g=R6]W54uZҧ'UqD"458WW0@NJ臅|%vsBePv,MA`\!1"KeV}ƒ+рwd'F3Ὡ^꞊y@.qy2ځcaRaӶzN5ky?"6#լdc JU>ȹQX` `3'p E!\gL ueU|>6*.Bۗ$_FF=s:%l U/P= ; cU,b8۟c;K4`s7ϹAOdۡ;yiDi7`r{y+,du6ybsNRR\513Xdh*OF . Ss9o;$Kv`&4x tC+,Wqy@[3 i00סPSbvPQ:4pH1Jc2,6bHQUHrEzn/iZKwDTAE7[/eVCAW/cyՑV"A]*NhdFoRB)%+lX v@EGT^!kGS*U;YZq ^T0P2xyK_K8̾![ݜ(6;W.J`6 ;x)a; HWHv~MO.4'?ܶn)gvKcr|mB醑"WPO^uF07!&N"$ ϠcHhW GesPM<$Qӎ'_,o;W3wy t +`f ?:H'kz>X{ )~At:Zh!1ZC%젰q׀EoŇ(q/l WKd?Ruxհ F"=zoE|;uSy"F5}OJhKXǚÝyIsak$ 3^jh]&| 4M D0+թ؆ 1rT|Z|X(|Q(mM,2ӟweQ>A8 xk+RQ  ~a㱚>4u88-֣>樄㺂V"&lV"=u66rȬ7AVۃ|6v!M!{.j*`(+H.%<\ |O7d܊Yx)9', yљH> Tj鯄xI/.{#LYMn44a`1e2;!5W|#nP_̧Q# J[rxt20l!V}1im&`9&NX+8̆'#k?y,;7E'7ff I,ɴ#:XV{ EXI~QF:iĎ~&6:z0kDqavcFwLG{HMIs=c%h5@&pS"MMXb*a pS8`9wxùRny~ظ bئ־ 2D)tj5evDSTv(N ]?[*nE>o9ᔝ:W,6m$\a^Y+̉kLRI`a|morFMd|'14h9*3դ_CIkg)gPUS" x;yG[?n!` K[ɞpSaEw8fYS.]t0sGjZ @G`r1SaaƂcH'ϭMxKe&ܷHj uKz` Mہ-r5 9YwE1s*Y"CBZ"$ z~36n2ȒCgYJ sӆ&GH( ,? ??'L]:`u['Aq#">¬j羫hl+V:i`A~_BOD15ܦi3M/VH#/[tQBwĂ%t% Oh 5'1ȆVS0g:͑8y=&g&p" i }ϺĨ"SwYSY4p/>[sUº1 8sP+QP.jFSXgԏe*`tMcSKv,PZ DdU2T\%gcBU~(#S^ V 4=m4Qw=g vb_mEaBzrBxĚYtlT]{,t$cG#J>A`b*X-*twv9 aN`>Fϒj򜕨9'T0~iI\(#~O1T]fÄd;)FT2J\̓:,q: ,!-mZKPc!cIRݗVUSEiǞ&Z9LO  P5[eBŪ&(.8eҧ7Xx)dP.Tjܞ2% ;!vTlB."TxrM y(Yc2}m$ʰ|>c8ob$\_6AwS"΀|\FWڟZES0;ފyFft|4:l@ooץ\ ډLV3m囫[NM\Iz,s:=񳊮ǣaO+o} _xԩZP\'ZDҿ 6{SNql5g&SDS9GTɪ#b<.l1:=`^2`V4`V;LPay{s9O u]9OYq[t\{`QΙ]i&ʪ;]F B'dW) kK2^dB)ZQ*,V7 h>煿Y+4R_bg&Q􇯽Cp'Mf.>r=9Wl<- xyz ]?{d|$1KR=v(h K>E?ް*lLcT|YJ=?Xٖyb[m6"L.D6=fodRm?vVl H3k" IaEb-v$3Is6Ph7U~źqz_68:UɢOePaV߁j<hp+CZ žL}K3$:t?> 싅Z9p 7b*x@K1!{ $d ?JS #wq듈2Ke ͙H0rBH"Hpz:\Qq!bF*rpd+측-P<˅}~LNfbU.׃sE`h>e7L6.\Iʟ!@YE x/=q]MP[HDlъ'7\iX.ss]t?&Z3>4m޳PyL|RJc6#H"Q5F@KM["2T_-hUL~tGWU X,Kk@ˎN-[tF~5p\_^w6kRUܔ߾ϟztT'p3g <.zٝSNʈ Wz:dYB,CƳ)0h2TS bsqAd%{:3m̦B!P)ҳۤ0EkID%}Xm?EJJ*#URz0$$tY4Rg*;vGi,Ŏ6D cM Th16LLQ@QpEit,jXEt2s"V,KtQqA[oM>R+n.% A*6VI2!~Mk(7}D'br U,Kq{ );G&d2 Fuioj |iϻgCJhCZb D0yy$UT7R,JFGwp{Tup#BLv÷ 6>)XqnF|h8YvKO P7 fl}/ED"\]!&*v5l`c u;7(fINk74eM";H‹h6%X8al|k!')FW5MG12fctBa ) w-(K.m\l6Fc&q])%eX^h3Gbq<{ɗV̎ >TtԞ8Vb#} s7[s<$ Y盔BeKTNzN[ϕ}&JĨTd &m wBȰw:]!Vݮ`ld mZ#qyǧ~|ƌړ{HWDmϩ<0 ՉU}X׾r4Xx=5| 你!*fXoPB9UTr{&& h[v [N6lww;5TY:ɥb## EzDyS$~Bf>wvF15HF:V+IIDJͱϳ&i"'O!n-wy`p$S[x5B!Efj0~J>>6^}1bđ5] ݅ި7%'׭aj4 u.B.3'yQ4(89ټzM;\9nF,Ws (|e94B ؁d6eP:z:~aN~fk};6lNʽ^jVd싯4u2pKHt՟xG`?n%%7$IkDUaU-'[ZZj{W\C/~<g2VU҅- ɘmm)~l& yI+ٛ_{YF2vDvS"y~\L 7V\p>çӰC_ (A`};"߳~#L`*^!lUoRw>_}0 V L. |'x(yJV—qg#Jж L,q^i+aOU|c>Hqa[!*ѣ]E>?oҎoY tZ#&>'6 E4;}FMQ$t' B[~Bσ 4mp}~_]&۸,fk|2*Kض@VT(kUz;'DU,$k<>ù-jfhyr u[J9Kqrn 2֙3LZ j]0Nqƀ8{C`+c:xg*?cYo^ P IVDޖJX̦`C><ջy>jZzm{?2<ē:\7{~|HnSd4tNOw-FI^W,v_fUVSݢfu 8579si]H޿TL2d|: &ZmQ,\5Q๰8jUA#\;dwD ԛ~u}>BSqOqlSYHKLgQY_춟? H5AY=&s=_1Le"3 6"њX)+.j:d{}`y4^_ǝv]d"wO8ȍʀs[?TJL  U=%PMh)p`)msSbo匼5qMư|/ŲZ;i&C r¸QJ-"|m^Z׽Brzp>gQD7UzJT9(m NKWvYlt$Ah{rIkqeֽ2@Adl`PBt6*:;. ׵~ HScJ EjaQ^Q2Tuu~bkomdSeXfmc Ax͍bסߋC$ҼHvyS^'ɱ94p]V/#84d8%}_"RF\}!a)6ҼO W3﭅·N jlu؟;kO}=D +\O+l+~=tCȑ- tOuC  nd% NjR}0 x9!mа˛&8p޿9 :;A?@`݀# C"mU5&]|6 VR#<0@oN VƺFxۧHD\o\{htIC9,caJfvSRHqzQZ-X (b4=e£Яϡqqx4e^ѥ(* E[`X[M=DhmH 们gboG1nFy)"0` hM= 0y)<w>2uz?OgAbЁ'P%i+tΐ;,n1WÞ f[&#F\W{^EgA9}jE1JH2փ>5 ԥ9}H9bO[?29IQWą0p@ TުôE`n Pu=+e|Z9RaR@ CwuYNe*=Xu!sX_9J? dks`Е_t8|?UsQop L-|f9Ɣ^6p)ё‚\4d]QX";=hAJ|߃N)|m#̐ˉIDۤ}GY[l.KFB܍U1b«|}c`g o!V[~'RBMb뀳"Nya #Ÿ`rBղ6]0;hηP,3lE<$7E=  / )☆rlItb&<|,l z_*s7N7L|2hIF˥z7nxܛʠ5]v_VcJ4 ]rb D<\@tlUp%_ #C"c3f{K AB;pC)ڃoz X`QY$}#.tAƤ௞J"ͣtgVo󎦼=izvyj5ifCtṕ~sA4Jb\~cj4µߖp&,q&1w']e&r[\6ҹG)ZJ3tt Mgu-1s'͝ IrrZggA1cR?L{7:"A&T憔.i;ia0{d9kp" ~{rSW'-֪#S)*g.|C9t$+mHͺx2xof#{$/4LJG_0`l$e_ gӕ_ >:cUjas{1NzM#gvu yQ鳐5ڶ! ܣo^E8o D_INϖ3Ka5fzdiTC} 8r_ ] (6-Dñ2!RLŰ:y"'`WaHi@zMD~ݴdX/SqԿ_Bx :u XC8~G *|&޵yd c{ =* 1p[Xwjz/V&g{yq? g/rKs_XBWnu 0PǨϼ@@y`O. q4#U\ړ|nF(=Ջ.n!pMInu)н`Z_Q?cS' !SG1nc'ͻҫ,YbQTy1N[w@nHw6bSb͟C)9_4JxR͝Σ|N*Yl x-6B6 Yi2]qqRsÏ=x")9s }(3k{ mn^n. 5mhpdbŻ{1rȲӅC JץuT=oڛ1A~ң.#xUi{<q䡍 ܯtO㟞e4ISIRڡ;IIk܄ӂhs@k:MVT8Yݷc.'@ /ִtq+@4|5'YQNY܆6EySuBk[T1cy>VJأycb`ީe,ЇHt>AQy s6w/e~) {NiҮeu2 UDLpsm6tRvgUY׿v⚞sq+F~xA^i GIh &>9m$?<@"t!o?eZSL.t(YQ9ڊh>E>b46j#o `/![6h6 h,|[ -OXw/eìJ>`pʲqV?bdC4q<Ҡ}Bio, XUpMԹOif}MRǤO[jZZI_{=/~r:_cb*#f"LrW/VOM&%A}mŖV.7aX z5z*#촀'*);V0W <ڒ!rN8D.Ak$ZkVY:𼱄;z('dV=5^17q5pPGcqC:ꪋj>/7ʩɑ \Gx0Hl@,tOd3 ST#uߒkPvz+/EӬD,}gfCaŻAꊄojLcK xCR{ I0Fm(FEA n2+^ֹfгɗ~8{Bl;ÄVvE783d]$btmܟP WߠHfQ-5z^s֟FaIQ c"PSRsؑ:CJINOѮP 7Md[p[Zwϴ7Fk=gUi$¾GKnZЃ-Q(c|)p 5ʑ;ۤޞ O'q)WdDށه +5G.INoOYԍچ'uvov_%hD?,[gU?u`'j7W8khmc-c"K]8_#wBY`t;x,3&-`-<:XHe_<6ў(p}0r9BZ~tY=^w΀޺+h53q`p$`^-ٶS P?h>M `ׅOS)\R=F*5@Đ*F"uhZZ+5:`ة#?6Ec QD;e/='b$\{Q/MgY@ȥ7:T,pqbo#L`=]1B۲_+H0/4| kۼ{DYщ:/1Zz] g>5ceDê [91K.~(kڒG⧄R<$Wʾ:S~u1 ~mr"RwX7bQ tX GK<+\`I^M>L~ myCg̐>hλYelY>RX/%3EF shra9zn悌<ࡨHOfIh-^0҄إvmn9{^ |2 >UJl(J2e%ߘ G斫L[]A6yz)4Ǯ1ԀE6|2AMiSF C &/YkNQFxv-ڦSKh!YN %r"kBNAnjKՙvHz+Hy.tٚۖjN{o\uT4>)qKR.g#,dQ' NEDΔis '[Ffыdf jefs5ӬWT",/hhd6:CN6TDc0twuӻ1{}FZ[2E= ũHX8]B8-8P:H")&wdPnPrn v.8ɝĚ> _x(.G%/U>*qb/ MWk =Pؑ7bi= jcpԌe9'oxQ6X𬾢"L`$r-Q͠IՙA,P_Iȑsw753?DP4^lT "t0[?谅b%]ψ ^VZ SUmƷ7Sk3(n-^Y<1z["XAvu2(J "VX ;P"ke%l$E%*HZcI__K6+]+Oar  KVxCC7YttvM/N$[,zwXȋub֞iGM&('(g1_Z(nlm7T ]V:{> >fBr>u af{FƇöd'f(*x0ZJ:/m݄Po LF%Ϭ=׉r"b =ʉ v}elI@{wv`E )D 1s|OyاG<; o|E% BKf\N#=ctP)뇖w6*N36TT036T/Z-BlVxAnZ(3/`I0jFP~pOU.[Ch*nUK%Bxح Iz#'sq2%Qiy gkf`Ȥ7iz2 jƞ]*>R,uFȣ]6({7do(U =}ܺ#Q?)j=5ү%r6Da,c8TܯnmK=얈F]gػ뢷7PZ3l+RwYA z 'ٴZ]X-q®$̦c"Xc~cvwj@[x8͝YATJмS{b,8 s7:ʩmg`Eg}3^3- ۏ\a 2x'ƕLu.H{rǑ S3daH{/х׵~uSD]`v9 mԶvxu#"XP<(XZP\)INbKjh&oRs'_].e̳qcͣ]47U7[Gi,%yvOjO ah䰦CISJo(}*7#-ԗͣW4|/5z#uy% SgV=+wtVBEJl߾ tn{o:F<2zPF󟟏`xi߂<(4@pt@k5bL5P #oy$^ BΎa,(l>sI3eNw1.'4փ A䃖o_#۟Rxq`j6pbrkZm>?SLm6o9=&j}ȼ 17W-Reg7 g?(=LQ bfJٖ1UPt go9+ Xʂ)p[.;u=y(,1bg:thi'ur>TY*oZUw2hS$G@8vLe}i6twJ)dG|@̊h('߂-͙DK?wiAћ/ $J F+voԊ]lђvS/  Tjke=b -#/ AӪ=12>a:9נ5X ^79SA{Q5q<0[N# %Ƈt_VϬfx,JXt^?'oI<$R1 7@53𶎪eO_!V!vOg#0)*P)7*9U7B+Gv O5xql{Qk-yT_ vRD JOΧ EkG`q%N(؏nT[pA7bA#/ZAy36i9nYy $-/ IҢCC5{Gdm{"I[ LBg"$ՙ+U~\aL!#[{&|"'fCS~g j] ]a0Bqԓ /qU&Qj_Qaݘ-@ط>JsgFsaGvVF,:LZ̀X{S(b~c^ \Let}kN4V 3:5K( gH=lE)!"-(Ss:Gɡ 4yUc Xd&wnoȮb+#ӻgf`ʽDD*;[@meDn4X%rʔF Jb6ZBRDo@ nueTL8>ǙPp\L>DbŪ۫S)pGx&J:R f[n;^Qdv륉bA8L! &7=\_|TTԠDyipru=Y{)o׃NY-&9J{rDW^aδJraa~5uN#D&3x)ayE/ I-gCX(-gS]i0aYƢ<$|Ǽ%۔\2<:zxF"j'6ZHg,XSeU&=cyQQR ;"<ky)IMߎJ`ௗa<:{ChZk"> yCPD\TyI1poū ,@Ye&x^:BXȳ'*e9} 8R]t+zfXx6N@ϴ[j$d#%g~LmSeIiO$T6'aj3J|<B8eqOm?SDI">^2AQ|~E~AK!S&H?k']4Ppbsn#?C5[FZ(NIt_ HyJk>TIqٟSV8W#U[!ZE,rīl br;!1< K52Đι,G2&&ǾOCW-V ղs8~kxi{XaO6l+ _4pH]$NcXh]jT1f+B3KR6;љ53f/2L{+&]Ue& ټJdžNΤGZKyo!XNRXNӭ=x=Zt%<=qW{\b=Px ;v*H"H&B읩hZ_q+YL>_Jh /Eb9mWApSa;e剕>I-G\gR#!}_)urf^sKMTsS nLQf\LM2:@5mϹdC)q;E$VgàE/2jn8|~,@-]w0mkx|!R8iAk?")LEC.u,28`ov֑0mzp^{dvt~4v)]]hRCzYF}RL s#I a?1{IϢO7d.xvafuH?EC6IfjA/:dQ$EcK$#]%-duyj$Rokq.i&ZN"E} !ŘJ3q_s8?w=rtKjW/m%SÈO]iOi6QV9 ϴz`W2Ė}`bւ4MOu{;!So$dDO!@}8}A2A3An[vC=[LZg6M͠fV16@a3;PwڧϵfB*ސu?ȒCky`a;Wy h&hsA?a(sӦƏvF9n0[$[QGvf0*^̇ iayhs . Az܀*'X_8:̮S61>I@ʠ&*#m[f&" 4q^ao[WdžG-zCYQ6>^W K=blj<>ּ/ȝc a| &>piPwK-jj:SM!]z z  bUt-Bxa] 8i_(Vw۪`mxՕUmF3{K'@:t0KU uk H*# pyBkO@->; _ހ.s+b(b%.8drPEjL 1bCqފke }-{3뭪)lw| .f;pK;Y-i4r`^ g^qӮnJ%pZHC}wtҬj@-[<cjLlGE-Lƪ0TeeOR3Dh+?=[R9Ӆ#g[:HRļ9H/D0BR.;LGC؟6~xXqMm+r^9EW}imJtIK9El[Ox2.߇%1+3J]+7d[M $漤mklY͏.D=Uرek ͣc-Qz)aOهkO=Bv]+eǒEhplF{ 4[^SkY6<#^9LēAnS|}t>!ST{A`X}iexX3L-*S_{K'kU+ GC v(DNw [7SqQFiHnv*X#M@Xs/ȮTn[UAw;&T-2bqQH  s,L.lj}@={UGauBkQϖzE)iω $줋^;e^&,ݰxO.?{I(`[?d3seڝ#!Sۦf_"b:ovEu~Tĥ̓qA)#$+&촍H2wn .2=`mъ\ciU((+N]Վ@pe,n.E}O!:Jm \3]o|F1hG N䈲UZEE B?D,HD#ز޹_D r-۳RU 9 AXcPkE^zɗ@O$QCiRvU`S[q&{}߇(ΙuΞT:F~pLW QʀW*[S1;#zfRS*y3=ft[ "LZ<^>~zA[ŅjSE{M{AL!N 7:õa$2VEԖ\9_O-_C0 O2 K5u3G%c$mp f,/> PYѩU?bِM l) v҈sM\)o>ove mgR8XTg[ ܞw0ًN{k8iq =~[Q3*{cIlaOZ%Mjsh甛 J 2DY#jKi*E{i64:DZ.:&?60[=&M:Hͼ\<]|04ldET #Q+ii~q &f OG},J!lα T|_^b`9V.l;tY3R6BTM~}dg^? \8͘8tJSA PkRH^e-wpÙ# #S^KB |f| ?BEU!2N+ Q (%RgښjVP@yVtKB|'!x~g c P k_%>S:k˸vis\>Jvd?ZڳBVi6/L䕌?%t{Ճy.!q)Nt8 Rh(UyA@jʓvq5Bq&$R/ߣ꼝\Ll񗶥ٜ8`PHRzq-3,̎G(04ZvHz~]O d" #[a&*p%pvKJaͧzGd~-Uf:OyʜyяR -`XvL3LD0UYfBsʓG*tQ6J!])Zz$nϪrj"~NoNKCo3 tHZ LqMvaz|{P2+HF FN>anhBu.Hv7P2|#xގ3#h"*o[,✅b|@Q :t^\ą'|Q [8 +_43=(^yxCANZgd;`4!l숻9=VʲE)ǩC&/{a>BP3*ߙ3 >l^/,(~StOԻ V T TVSƲ48,\w}Q#{{R @N@{(IvИd˯K*l;^vARS iCwݔ}셦 St|42v}bq_z `QiX }r=a]PR"KTsqc)ƎHfZ2,;t|#bѿ^7 9nuehܔv{I},<8yI^M&%XkEv&ZR˚Vo5zMM<~js5LW xd Gia1Ƌ 4׾eږbiB1c?z7csv S͆s0ֳEAK8cΟ k<NrׄR+KO#){v|\{,:tTvq<@&~:HA_HROAaCzWDXh5=0%I~RXޞ~0/q EzPQl΄2S_\>J\ -mcBH}PK V&A +BI('H Dꡆ_x3QE?$8~ 7b)QA)9T^ ^KځRϥq'Ï,% ]褶 Nynnqmqqw|ـ J#plk=eEY>fwZwn1TbxP Nt6LD[`m?GWJFSی9:\pAOUw@{\O4|{Qld2_{5\VK%z+D*[`F~\gXo6t͗㿠l8+'4Rֽ-e`$B K2_eCsfJ.z]p a#M]gcE&`m1Fdzr#5j_~ &W,!]7<C&_mM.:P4/+d䅙\1l/;k5Tm<) q ?R46/oceN\&yѺ KfVWTB`[~eRaK֣n9~QzKWŤlӢ!L K9Y4T#9_+=>*%Y(>1z[!9هjgxyϩ?նyE 3ʅ@{&`a41I£QT7Aw39uޜ!,BlY̓<벲Q]J|'o#p% vZ69W==1,W42HR*p.`yf"')vD4߽ Z?R8uP=2&\nG5HE0W- [,kz)c0SzȉYLnJ$WVc@9Y} k6,[&!ZѷsۇCpL0*V5ȝ gd:Ͽ@l6A"@lcmNdb6ƨ%:+.lʟV!\9|7.3JL =fb~ kOŁę:h2aO1bnGGͱet>S&ReOk]@!+njx.6 u1:ǭ3p6 tG>O\{ &zIE(l,US4v+э,60}nW8?m+i}²·uX@4?,c2IsԯǺ ?S `OBf?su٣^5{MAj;R`+ǃ%̺Beʓb,˗t P:/8kl-PJrZ{5COJnZD 2=>#դdZ+V2oNƗUV?J$]`FH:]1Z\3JޗghS e%vC|H>O;+H9ʻ4= N}he[MSDZLصG}rziHݿbDDLtHS UY,x彫@mPsՆ( & B]ȆVR1GPiC_#{q6/2g:շ= j;|4kM9$rP}gi)նwu48= j&&kO^+l/{.6Wh- @ |HBd"t^gh7mF<#vɼ. 'M"rr/@//4e{S[}`VYiQ5R0 nmw~i@2NL %P.{2jи^in.D_[Eڦ2Yxh.;nV|p /:m}ЙG` yA$b+:o479~2ẼLdiLUIɇ/jB vJ4ǘuz9%Um͝Q2+P FA$1Ah SSb"Cþ*^&wL;"_wsێg-oU 6 7SyNѴR>^JnǦ]H%WŠDw #tьmgnBuo] Ĥ<"? !}ɰ b_ H2ONsIo_cw{ H`3k -E6-ͭ{o*xY<9WDX1Jo JwB`L{lz:neSY6|ӌV/SDlPvkDF%tyíE濝W4T2YQF ̩7ME_(ɇAhd8F Z*y^lq]aGbd+8Jgi]Al8VM_WY^f? ]r4HM/4V(cP2| ,(<X.F\IÂb8 `m#ޘo!Yv[2ᯛw\{~хcufzS,8NQdG.hQ@>;I "?~I2ac|Ʋ;] v3Brr9ĦwWpf 5rFǂj^R^XW1w-F7 U[8eTr_ŠH;=AhB _QedddQ?üsVEo35MaքuxBԔ`.~/L}LC O c_%H2PLM; %qsD4,Ʌ$BxĞ&|Y,P:A/߄SR؃ أ^TpYd\z89GK[#С_&ɨdҒ 8sEƮU;"1[۷M+b4y|m=K:Puo<#O™>!D!you&"BU" CFޮ_t~q CF EtEkGU[&#IʇΖe`Us`V拙˜mqwOg0ׅ]6s2-V߳|W)%Vc.\L0oY^ؤARYl6M(u$8Aq_;83 _tW`q(:[q$%4BdP~ /G~zbSD N.Wҟsxƞ3ëu!|nb!Oх;iI1216jI J0ztYAE\s[qm) hևo{9Aڶ3Z̼|σ{cns= g.*O#訵ـR<Ӻ=fB%RU4 ;%%`Ȥ;vI3n?)]镌ـ'R/ܼ>v+` A#QqA]`;L֠)[r]$ QK8aʛ 4:) ]ݿcAkAFL5*]ԫ]CeK&:ho=6MCt ms(栽Xw "E k,'IDlatdk0~M؇sV'bdy| |;vxΠ{@WPdDuC=-v8o:tK龁:-Y%#?"'VNp/4 { Z4n?hh?8ڵ(d@HlQCQɡhqoۦ9p ñDs*%S <?XDd؟:Bݩ,^2B"7Q)ZT^<夺MLiLhj|bTჅ!'wyuYUm\[ֵ{YA< qFm᝱4#,>c(@_α#~#rd;Oal=$~SJؙт p]Xی,lk,½ )cYQ:ɠt/8gU;dj W oԨJ]en@AHN˲s(: [;?o STt̍iQ"bNSB=Ђ"w*M'<@ዙWBsbw_hrW)Č'8ξZ"6J|\yEN}[S] z>%d5"fz_^*tq5Co3j .=HY LLH\DS7W+8 e Ny5sHdüy^řN{Z*^ o &'r2Rʄ\j7k姐sôh3Qԯ# 9dR{F"՞h-痃ͷ$idIٜy0˟*e$1(.C $NEbp{ S-Ry64]v,M3)z X_u ZA,9(^fA6-nq2iVu(—r%:Nqz O9@<~q5 B2ڛ3Z.`DLEWLohڮd6C`eyh=;AfؓdJd1'`uE~E`ZB~!2մU`,u/2[P:oMSc N 2Be0y}E]ÁT |Y},!AL>&K|luS\?^ButYߢ["Vh0шЏX{ Exߟo)s ]͍x[.SNHlA_ qzh gR(&R@؟;Y[ M]tEQoJ;L1SΦԥZ z<45̰A݌;)^9;-!Yad\bR4ǁ d\Rg5>v= |=#]:q} i&V:EF\FZ3)X٧8Zל1,%\kJK)qה=NuR=#A3^W}?,cO={uDY_'MxLvVj.|:Rl;>UN$/<-j 2:FSHAdѳ=βS:IwE,"#~[Yl^.C"l^םGĥ 4k>9K-.I] :v*s̫qx i Y lٶo`f"sl)U@4%F1jQgK%ws{zKG@:6l 1Jnc:t]B+ZO*v5n|ڬNkGOӝ*ڍkUO1R٩6cRkc3|jq2e:w#}zMk+$0W0[rxا:dzpѹ2AY㶸 $s CP^A'9* LfױTxoAOe]l$j_H"x[W I*'X8qZ>[NQ*IQCSQ5q/:[Bi2R'F$[ )2"x]V+@NAͨ@$+}jV_y-rJ ퟖ ?{UرZѥpcn4ѮTįp]_\y A>Iu&. |b1xC^eө >C s id1؀| J&Vt>%wޗ%| : }&B4irVZsQ5E_XڽhlJ|3gt 44JCc+dKb1vGp9ݼq5[`FLT1Xe<Eoј1s188kIqf-vM#ɴ[ÿ'@=_Fm@*N#< " 2lP5Sr;ߦ)Ec *"ΊۼV"3 -רa(M_XzzvD@d]J Aa~ փdP>F_- =5P>MT.ac8Ww$I<~'G1 q)yّ ʃdU0:]feAU`x纙c94bXD%uGԏJi8J)ae4"6 ֭LZ"a{YWb7G<錀9\/VxBLI6{(zfǿ.cWwy~QR3*r37fѯv7%I1Y iuN1d<2#B#S+OvqX#uӻ5L[ʗeGy\z"Via>fPRz>Ch8q:>P_(Gg!{`n e6׹RfB3F`Ԫsy7P{_4oB9]w[K<9A0JVBHE2Nv/GȌG*G4S'h _^ s'\YjjB.><^쌸,3K:Q-MXJ=( S^Cg *mC _(d| h=f%~溲i$:aǚ9-3ޫ߻TF*zV`:h턈Co Z7I+@1acs׀!Q4$4 ֫h\SF~3Lʿ TdXƿQ,Yj.pdO11Z4rxu1HLV/X"RJ81͘?kg*e!Syd35Q ׸= lxdTٖC6CPW;4oI+W(Eqm3"֤qF@Mxihq ɖJ+Wۻ.4?GI$@dvR|֊:sg:[<DI޾ۣI.a~.+0K&%|Ͽ5bWZ2? U?:LJͩ Sr'Zk+:ʃl$I(0@bo@_,ctJ\2H_#ZIGiIؼ҅~|"dZ", S6 B^d57&Y'%LJ c6EQ0ao];pK#=P,s6:i 0J݅иYR%Iޥ/WM obir8yyį,@՛S*I}@![XA險i:KӨEsÚ;˰eR[7#YXʰk R6pGfMݤ3 ]2\Ѩ: }_`R&(@mWjXՠ&h0e} ]W[qc9o=T jpb9fǥ0N-6 ӳE؍^Da +UL^ G#|Q!Ǽ&-Aj@HW%+Z>[m$1a-G?թqUkBʢZ c 

.A7X 35rSźWlV7BG/6e63EjyG,ff{_UnPL]?hm5},/d9T"D:ӓI08"Մi%Axl#40xA=]!-;X\n1.]oa cTA|ƄMRQp@=j)rkitE¬h|6f_^2F`t]Uqf_݂0Zg/0Zش_iqQ A#XBT*}ᑫ_͋Y|ϛ@NF\,PIWhX91Pz&D)9QTYw}[tJr:{JY1c˙'+]{;yeKR/e( ̗k#dct2&cY')ۏْaC24[767aQ: )FaXT( V5IВp ?C"ͽB,pԚ73MPNn0J3/* 08\(ncrlegZY(Ĕ(F?B`[g)l?~zwc[ 8SH֛-x1?`N##wo56e''R N &<s+)Lh$t:~& _P0& whPIQՏ*u}|!&fM ߷%,}]2~ra! kRǹ ?}B"Rͅ(*s(Ӟa'A g֯S9TOajl6p%PG;,[X1g{*̙^[p4L0U&5(ǚ6lqKm^2bMYuQ%!;ʩ1 JF.3q2 bI;x֢S8}60@a(1Ӡ@n&xIxy,{Ғpܾ]l,Li %A|+H88b@5DɦlUg@(&H}|,]hgu+j;wfwaّz f|^{@%Ք5L)$ \ylVJ 'dI4Y` -_ewBƿBBm2WӛC9![3S;It Dji^Ï;-.O,Oe[s:ʃӠr($A:ވ@ޱ7PWql©LP{Dg;jL#F{,_ג~yyBwcrpuKo,FRu5֍T4:A]?P|7`Χ,CΝ` n9A4V}RǮ\V.Y';/SbuZ|T,[c>}O F`7;<=ϭJ~fAw|3,1+sWTzZE'kr* -J w[2w>KUI|%l I3Sxv-)@p@}Wzwq,nbaLay>2@5ptMv]mLXWˡBH.D6,J2dT@tmJٱ|Łq;ԋ,pZu=hARvi잗->tt8x2wvI])$+}u;o̚vGJjh l_ǹL*m)e.6yp[(w3z&EAq $:'QXNΓ7ZfdӍgTҧ9zm{9P {5 19P7wrC ^V`L (nlM#C ie)od.vl\ШlQ(^Hds"S | N+Dv '-eO[{954[G\mSFs)qW;)ƎM4hzBFdiǝI2SZFvDbTvP$qhúHL9ޟȅ=̥$M'֛Sa.Ƹ HE`|8Y 8,CO"Pa*0: OsA2cTYuS 6sY/E0H*2NV@k[k^VRFCy77*QgV,s<{6(+DLǧʍjgAFJcP. ⫮'(BoYA&ncDX׾X;+c8(js$KE)^)7Y}ln?Qґ'y8lCE!>ڷLPS=#oejKS73έD 5;p;CdOi..Q -Vuz$ز嫦e'}9Arb<hS$TUʮYCu su^sgvCG i7(ڼ"p!(x?da˙hW\",#9 raU^AgťⵀII!]RʾsT2G>THD ۝L Y>1Wli4WTyʠt-,ZOe_Ns<9pdyho k!_asYzl̟pH~RY} ď`fdwR;[,6TO}uXXUal%C ٧uUdy䎏@^$#l4 Wq0ӎhN-M.U¸ZO(sx-NՃ%Y֨HrLFi>w̫:1wE ['v 1"6y|+%{bjMŖ{ν}U,ҹk* B86`x_q:mb(gZƨ+j-=]QGyCƳ ⮞x5IFWܖZjp23͏=Z@qΌSw f? .r6yc(au_IΜcwrhJfXC0 ;^A ȝsD4i\ hx{<+p772gżhL5b®V;@}G9T ~5PHX yvCO!wVui)n!ue>]L#`y]j3<UCAxݵIA91B\su1]z3#PnM>. tNfs 'F) 8bFQm?Eir bSĨ0rjUkA@T0JzrTw{=2͆5UN|ǨC40εXz/+4.o',DU6aϭuo|fKlOv;b" Gĸ_=~]G):eGc>g?1lԴAY`!Qݞ"TϲK]NPl{=Q{*8(D7Ov=j4ʊnV$Q/0ZuȿHp┒T`B(є]1Y{w%d ݻ1# )ȩ/>/`ۺDݾiډ(ߤ%Dccgscf' ||GTo֍|fm:˼Cg?qjuN PKOzXJxk6ʺ$3쟬Y@O\W% X@Cuc-pͱVz$ӡL6.GRxŸqnY'jϧ`P*hfM꭭\sHCO*n lKˆY W^ խSVX=h!Sm7Ąv/թ.u6&n? *F(aW,:=TLIhC%DLHzKvWHV8Dݰlc\v(,nBR®-]v%@^_2{h)lNu`I{A: 61iF?E%.ڣ CRBs?IPl^{zd} fgE]#D&ʲ rF,jNgMg(/Xڧ\_2bnm9W u^ Y8Oa"zUD,H.I> 7:uĕEV4FjUd,v9B~(aBOCx<7XM?lIP׊I+qIrnm*۶syeJte#>4]:e=ۓZT7 W4ay}gV)2WUa iBXʓ~wm*J~~.v7?dܙ+Y7 d1Νf^ GdPCW+7jFyIRhەZ?Krdo׍eq\*N^Z\QL-}_ȕ>ynuBnNpKA6ī%wr_ ,(dPaq])27rԨ`:\-lffb]C֚I!N G+-`mW0Hm` yjvL[ 4x.uwzWm^BUhq1J}2_?{؄ҧ(5l ?s0<&G+E0|ŋ=KDD?֢ݩž1)7Ȯ(*Qn!%/C@7|z @o6|CdfVrvpa@nCdvW+iBD|*{|MY⣷V"%bQN&Hԛt|K@Z ]ϧVeEtIq¬&I&:v t' nzTto6Zʺ37ԯW4QRׁ;DZV #سKAFjŋAf}ϩk:%R+[юbe_D:#T:b~ԷNBu7#ܿ_vf*,)*Olv5/Z'BݭF:wgDĶRӃ\&" HNw =3x@2O gt q{o_ n7`h-(/1%٬0 9:)&;ʑ,,˜Y^v|ex5oJ}a*o8,G!BjZej̞9Z?1,|jWӈS;m"ZAA㛗B1}A#AUl 81EEC];DCUpQ:gۥ"[;Apa xkCr^ʄ%103CINMc$ )0$աn('Z᐀AI@^Al%](qbGԀA`I-; Yn/߮.?p]os;o2C)a^$MMݟ^(~*jmÖouAUL7 Rb,Sb e5&B KAu3 RM//0|N+v;W?U%g Νኁ?}z+\\"#,au~}firn3[^a /.yd1d陆zc_'lj.vgqwM@2y~Qw' ;]`i&ou:a]-3n!W"itq9l- [ћh[Le)}O&G"Y!وᖅ$o|~TC.".g'H?b'J{pɽcٳo52yQʥ~h! cT{ί `;bF[g+0;QnŅu튫=o Q` 7%й5XbқJX0A+V*XAp+X%9z^.P%RA%]h- rI0™$<%U(9=9J}imbҭ08(KU`?mHkMk,ʒVr&Aʵ!>ncV(:"bՔ(fj8\6Xb$bg`Qi@1Zzn`c.TYJ5gu鎁 c&$|ޗAa'bA"|#sarU]Pi^KQ:\ re1Wn;Om7[/i4rvG`M0c^O.t~F/]ӮA'5 逨r.+l$I'+'A鉂J:MMO!3xTJ)\3VT%u2п['ofGCunbv!]`N4$쿐 :;bQvwY0-{:!S &A³RA]$G`Q=mi 7x-Q|19B5X &Ǟ]0Fx1G9nͶzu e"4FGx#I_uװZs-D`]U5.n  # %V01'8_#wUu}~F;ٽ2eCIx).ee<1I/sSvܐ!MLtUR$H1?h2e3g4Q.$!$Qg3eƹKZ9+Cib+A>$7ȍʺN.Fw7 4M̄<{G\qeweh$K g+ss!ĜEȍlx h~X* p!.So6]3# { >i DdYǻ9q-8+i!@Qj𡦐K8a8!=6,63K$t~M>Tm'{F*O-Fi!Z%uҜd#EAho.6T`RHg>flakD6ƽb;|B[J`f, O&gaaFD"Jyiܺ-7ox@ ǪoH@RU)Υy&y8T5ZdKT&H֮9+ڏ׷$sL7ypU[](*OϛS]q2]m*C{&Z̑QNۤK'?;Ղ$RN^{لO0z/Њ|iQ̏w]GG[Z:jqmNοEq'H%|oe,"Z̠N5p nb3Hs6m|igMs[JL_b,WFl[LCM _)Z9%פ>9]D4$oim̽ &NXX(d0O7!kVUW0/D VQ^D6t,0_N;3P_>v jOWE=cpT3*7mr `-s'gUPEҡJ'`^ $OjP*F^#{ ͙->k]6r~-?Gf[fvZ1W,ۢZ 32ӗuXG38\YR{5xk[]3EqPeĒT J3ͻ).!^q0@,赹꾝90:iJѝYk=z(=~ڬk\zEʾa A8L ֔wb; %Y ZNR0 $2anͥ+g / d68AEik^z?:@'gRa?0C0S Mm`Tqդ,*`waP \'7Ÿ )n}HH(iٿcֶ7>|N,-t`7^ ҇0ŠWN Q؞s\L4\H`BjB bL1}G*'N^M{EiIOL`%s/{xR./+؃TN + kIA۝:<{d-l1F7J[.4d u\[DOhH5:,6"v GB)IG u>v}x)kno;k"b/Ɵ}XÀ\;1]ҁbd!Ы~ cmH!醱r aw6][hQ\x<+oN/ѓ L< 0/6%)@|?Nrò=*}:=nќ`f AV(A{TI,($Ǹf4\؞{Y\75ث$W"$S;R)Z!5ѥ1F^]xmi9nó[4й*_pS|)!D 톽fK63r[-HC^۲h2Bھ H5)'j1O)9ma:>pB]Nv/]&M$PI?)DAr.jчwE.l؀n?`qaa)v)ڄh9vUnc 2V0q.u+dOF}koT3q5d#vvmM[F/xLqU4O@Y:Y Lrb|g(Hs[h0pkV^CVj 0gt%$Iz4%]Uy(D}kd.L߈>$I,GP-0a#aΘnNjL$#nЩ0^>(@Nsj)/Nзէ0=%woM ("\܆_^l'jnnY+?UsڤG윕5ƃnh`"V_CvrgZ;"Rc'`G=HQ@N<@PE~A퐾h-1l3~9Tla]߁c;AM=Ж+xD~K3#' ?[@WgZ OYԿ<e~j^bt9JK̠wEͺ сovq"ӌdlS"aղar쌆JNQ0(35,3?&Qu*Bۘ%:B@@+s[ZWdi2ahU=cM=v2 3 seS E?GKB~wZmБ9@xu}4&lJ :OdqA18zgkcс^c+5}>9e`+f=~mFt:}W*c_'xgwIe9PiSy^&w۴3;hI`k3Uu#&Rn}p܌Y;)|_7;Cɶ V y0ndT\ bQVL0AZf/I5$Q܇q+Ek(/ŒPÁҿ,e}:0MXaoՆ\b>j >N2BjU Gw줳۴Ν#{صny 14:k2Thw!NJX=8= &`*ovǺ\J&]i˂HS DIxPZr*[vVNƈ vxTS >̺5 Q{RZf͟/*uriqvB0se^sG>dQi._>0L>pg>t4^1BV"`"籥ng;i%XL>G;+bQUnjȷPmwIyF^x0#kuY^ʎ%R21cu;|DC*.dΟ;&sh,s<C7 3hYoL˫qae4 Bl@r9 cxIh֩qYi˜D#5wV E@486nYwJH_6@\?v./П Є&ٌ:ۼ !Q .?#\EJQixIlGPjXQ3g VzwݹJ$5\߇M#p멤pwˡ6}Iqg5ۍᮮbj-Beq|'ݼK[m+L&SD]N@Z(fcA2=kl1ty*0XжzWm}퇮+& f O"a=Z+BFY |=^*AɅ(qfuhƌJ!"ᦫ5!0H?ySfL9W$F\b$T+?<RG1-:cE/KB!jXz;>șt%+ew Fȇ_,,S;|> f\32bEj:$c֐e<_4N;>?og4QnYpԜ2SI6/o ±Gj%}\$U8qQ|`F9@sOACT̵=߂ c>u;5⮞v\Xҙ0vEz;x_Ȝ_#mpt}\I]tvE?z)4aؖɿxR6&]`ãc59rKC~4[gʹ!a߉tLΜ9< 1{ }@!';@$D{Y b0Nօɩ E7FRQOFz^ofIJTMllL j Q^9p C' xSQ<[~|>:"BC8jܟvRb%:s$JZЁvq7w̛t QM'1ѐ)0>l󉀴 K$'.N'=:vgݡ IuO`_3xɈ~^ZF'H~Ene=Q^ť6)$Oi,ƝSjHmpX6| ~ɩRPFFPj>kja\ x1^eXuDh qefN<ʛw6'`d-,*GSql4<ڝ7>j+h4{GŅI`_W7&]e {b[nqOɝŮPiELR=*b˵WLpTtx&Jmwvhj $zc4+bhvtRΪ ի!eLk[[6|CaT=Z(14aQ'6o/#YY `s+X{R2͢=,[+(kےdG:ljl-z+\14́$g3"H}" ,'iLƩ.:Y<@,Lx[!MZ֬~޲ʾPKe*Y$dZ3QOS;Dly7W]}bZs@)2sAf h!h8y"Roeo: GhdܑQ..W)@H)UW=6m>ݩGTei 3P6tk.zLC;CŸmHBNw1R]I@خ^Uڞ]FH J_w8W&/EQEHuib(ZJlŠvu:pR7/vYDvz7F9U.Vݰ"%ky\V?÷4Fu0Z[s4% qˎGX:w8繬{߲YO꿾3匮Rd"Y5:LFL?*̑kP:ʦZE'Rlg|i(6켼U~Doq'kt]y1r2BS0DD Y~ Sk#*OYRN n_&/GLW1>3ۖ9Z6N-)RFCi[ko[[ԙgLR^+)jtf:S; G܉x{v[9!b&tQ}? Wisb::}gx[#dcD=h}Q(:8ݸ&A%SqaV;3qbкm}VldŕAaݒ>^0TO: @ţ^.bU8XqDס^!*E)kY^Z |hod apT:z8v N8"\fwd3Bur=5#'/UFX,@|:Kpm6i!Xp~1@̂A4.wQM g"LN]%^+K,cw4jZrJ$sX\hT$8" }<,Lh;n&FLKPKp8ʬNjTx&꠭hW|0_hitZ>M \ZMM{`"aȠueNߙOLCEPw8aDob7F".`ۛ-WH:!0Z_@|_`/B9½#h ťd(XcFPπg]U77 $5 V{R~˜X^pppJ ):Ν =Fbj+ lF[=uTC&oqeWAA0Rzy~"ѱ-ے!׫䉦2?%C (Noȥ LC%ݣ.WE`2s~8wDȜk14ZאM[ NƉS.{bWQٮM^j<, *N@R+R(YDԑmQv3Ⱦ 9pM3<`r* -EI#-P~;2x%>Ǖ%7ݳYM5kjkYr'Ӳ`E~&#ו@ 1lۃb#N8o]Rxο0>Ce#N%_/ jVgLj +PS9DCDݟj: kt<{O/@s Sbe4*šO3tu@^:<>'vdeqp5 aai(]sE;a37N(I-AW [H[4&uDf!t>44P}w-~F\cgܼy"wrߴMj`u0tx b7|JF86uc:jPdo8>Q| wwN@i,+E}ٓZ{T~MrÀy m:+W_dAm~t XDoB=?F096> ~&8VeBsb9ݠ'Q0LK VXxdj ]m#0UfJ CSc MbbԋGI-v(4@{cYh9xWlCjkb+[01ľD7kHڔpW6ol/Gʖ8M=jvt0(ΟOؘ 1gwёqKXSr*ln&h#1:soe6T] )GNih0N߭mȌ8yW5P``KnvXFɒ,.dh8-q|S сˮk]K BjRG_c~(L8K'YUbʜ$/p6O<[tзbߐ&, ЇcShī0+S}SRt:*r["E|)M(tKUޝ9m1(%He t;i8bT >h5Kt1͑UcsS+-NSPStt%`jN[FBl`%UHƞ_ (C\Yi{Zҫ .,F\(j 佱.4`\~8En^bR#Vpp2S.G#9AԂw5fh@)WcI!A5moTp$5Q Sޔ.0n]XFр5$œ\UBze;[y૧U/VO[twE#6 71pK7<1fK q2heXCn^!!8j(P8WF0(iѿaTO. [zR};Ddɵp渷Cl#7eC-^_(2D_SN;ِJzvc"Ck,,<˟i_p,oY h˾=AլWކ:2})ř}ӻQmQ4X}"5Ŏ/˫SIS&yDL!MccʒR) VL{i0e_$ p n߳Z$4HK2)i2@=AW.nu#!5-KZjT}\+u糤<2~'$ֱX_&Xޗsnß :Բ9jο;V=Pbls }nZ VuGǁ0m[d><p1ۉT6 '7%Ag}VL*Ppz1AS>6uN> |9P-v 'Չ|fBհQj\rz|d's&6ߤ`HzaE=iTn4 `65ȭ>3W8mXOGd˅ ~i+gր3(o/҄G)L H8e44k G͋'WluMT;Td]mEOgkm w[&cimjܚ Z&UQѰ!]i-U9Yo/6[Bd dn3WvV2^ԊVږяY1y+w u>>dpvF05W+WfA|KIWFkV^9djʤZVH=(ыax!s1M\&Dsp]lo4;+j nd/OfRv ⽷QOY5ᄉI:|::ሥnD8;/R;#&ؔOɡ㿒c-< =?(UDuT˰]>Ls?|=IS0OUoɂg+$ew|! 1]`K5f!at`q|vZQu qZS/ >DƼcr`̈́ԧ-x \rq"*p凎ݾ`N#$O5KUI|1^ yK>EPCVN4\@fϷ+$0&Kەh>9FEI`T@@:!M{0]Z:M*V| Z[`~?Q$527[N$6J.w]oiy |%Wx 75ϷgvbZtg%%΂oOz=_}E'-GԤLk&<Ѵ_Vr?Rk:-D_Z2wA+OJfaP1džxc/Hڌ `fU@!*fclH޼w\ ^C33d'i}֎cFL:Z@ :x}`$V(/1*B$z#M\䫃zDћ9* g' *UH"4(7[-@/2y:F{J3Ex㖥21MQ^q5xC }Q87F^'::غ>~(MݜoaVA!9SdlwF cQ[aj5O$DUpD ŸA&bSt#Pd}6;SB6H3sWjur4\ >}\ "e$A܄Vة] $~wQ PTRs 0%QbZM>l5P*t&N Y-k%՘jB^ƔZE36CQM̮U{*Zҳ>%J+[ܵ MUO葜 ZqwNt|qgFbƬlѬH2kpy [.r0AA9[itʗ%/a>Խ>P4-X~PffV,~lRCAz*5,dJ!3ThyB)4.S SIcG0" 腹c#|=sf^~І<\yX7_[ Ty 3 $OpsQO*­#*ˡM]4%#֒@*"?&ccNxV2t@5qs[c ko1 Q i*90F,J$0x~:z06,,V6d;V)/sW<ٱU7.~4|(3kETI,f00HUFЍ ү6۠_:k|3w\G]'@Ӵu9)DC[v:A,,cgދEq,%RǾWs D)fmH&\{0z_X3"߈= =}*N*dB4,}i&ԥ00DqQ1%&fR?Πa- [Akq V,sSsuSf:Y[8&ޔ%9 \YIq_T(4'-7Xe8um+נr;;]k$~E×\ʮj%*1gHV|dA*[OEiYYyNɭ'r#o8Z RSPȲr8!rĬb$ ::.A)K%VoWfDQ6y8lG}C,?Ͻ̚^$L_#G W)߱$%*iźWiëK䌗܌nϝp&`8 4r6P0Z;u^՜hSou${eY'5StIaL3)5ykw B\3 MpudJ\ٵLCG3}GJgrDcL@.\~6l+@AC oF8 ̄SJƍb^J5*9%kaB1]x{fdFȮfcBRo0P4٘P#\r4ĵ3 M3|ӳ0gf9Z9:fD:_M8EH7!UpەO]1?=[ǸCs=T 4S'O'6nqA=]`,gMbtkF 0nL_2ە2לU[ 8EGZKk'Ӛ=Ei[_@x *z5K'; eW31/-dF H0b-:kgvsL$!KmeY8}L `e8M~_zIB[U@A+xCefS0s) ]7.Fϼ1>`~oIod3npAfЦYv@?H{ml<{~kW%c=8^NX bI6|Y<5`ğe |R/,!-/oUY!l3N<(pYU'S#H>S)213-i0ۚ!z\zuxۊ`LV QX !%jj)}jx2eu>:xp6?nCV?Wg5ۄC+7,08pFQKly#sa1+_Æ/dId 5W]\e#ѴaTJE(9xC᏾3j=0@?Qq?B,"߯L_E? 3оz#f͈Z kiAM(}d83G`TNEv?w#>D_4~idKxTRs2kvy. +!3TXʺM"i[+]Kʥ2{X_INkfpag&c@!A)]#EdKϘ6eSxӝN_a?Ib!X*$lˊ`69 & BsvOE}Kcұ1`=I)ria+_.qQuCG$BIƻTWQP0 2'LBpPAX=kluMwN 0LnxpdLQ~GEMEoWa7W7i(#iv((u}Ai_#Vl&>t^smL(~O`{Lf-\*jD2tb' ̮6LGdsݸ*拂6mB |L-ݪQ4C[HwFc!ɘZ$ LjD6*ILh*_N c6d+5|ǖxlccׁWacؖoF+ƣM..H9~Jlwv,iI{"r)v#o IMzDcNKd ~*.fY,"iNV;x_̫ExŬ8\_eUL)K h&(CHec/Rt gv3Suڝ0t;D 5=8z(F8Vn} Km<wIO#+4~tITz[)"u>7g6͗cbIPWZo/ Vp6e*T[rw4 3 HLu #q_3F`yB `[lsfnmI(ݞ,|E`r;WE/52E77R7s;W?F2eu_ >#ZRT90%H:{ax$CuFfqi~gX;Yuv9dgl'uF{3*\p̓f[g:fO@wF#h >IaM:4dux}S{vd qoėpͰWY̓PNK 2B䜸czkQ; tYḾk0[ʾ) .C?!.Vͨ=LwEP`bu+}|jε3 VD;;S. 㒞L$ŶHrg{<i3֘$us6iyHK:HkwjUF;S郡XjNP`hKJ|YMO/K֙rkzbԀMy-ehjSX$=3!TOz GX`P#Vl"d1M_Gbps+dM[_~~8A?JI^`!GvnX! 閭#OLT)cIΌ? ͐?ZClɷ~$>P6fGF&dAxPa\%)֑lӆl8Rv BE1ԟ!yVlOoE݃Fvԁ& .E&Eȫɀk;a!%_%m`:AMąU &ό}\w{5&ba\R3Z{^#҈rqS+( ba_S9N[%D/[–G/> ڶYGH3%-_}~Cju^]'A¥ba0GޯCovlc >VC=wLgI7@.M+)⍨a_3J; Mvy)ҒN#3nJn=Ԡxߡ3r58zF' N^1.\zNĘZ<`Q}o@_t7WE"twX6<짷r/>6NJ4q^P~,ehhploR!WŎ| 5pC< 4C(4=؟s8hK`(2s{ݷ Ě[s-@6`\l1 /z TUz,[8.߬~zI$=3[E6WsObAAMZLUm XCdDA7J+vs'dt〴g[𳦲 ⪶nT\[z éF.9썧:ڞ)>,~a@TY61Ӊ䋐ʮjFjP0M88j2\)/%`% V24&T$- ykF?^_T3,N9"ͺr)՚4쥀+߶(oQ@ 4yrq*LJ#%hR'p*')< b: -[m\p[}+&pl_ϯ:>vKqq~+Aw9Ŵ4 f]s^;|i FBRn/<߿FcY{z N[" Mtȅ*EIK^ll`[5XXz@o&ZJܡF+`Y L*In>aՂ%5L60ĘKw1Ck8Y [sٓMs!S nib. 3`;!,t?)R5'jĨnWSfP?MS+b'/\X[/Iѱ鞜Oջa.tܣMt83z'g"Kti3x֌f#Ty^Ѽ*NIYTR c4\6:zvװlRP;9tVnnXѐr5L_:G=$.-\Y|ei#+֝#d$+-I$co М0\ HE=yZ $kW`@I]̝Ah/ILdJPMݶ T̮$ DClEMF' )@{D#B{a hd쬈qvyGʅe1eKRcK%W(sdZ<5Pj¶PQ/} t..KICΓ*<] 9Mc٦_{'cҺ\1Gv[\[Y4Xaޑ w`hWl'<ٖ')9PA޻";Ly:Wlt8Vf}A=qFRX2'ൿB́](ef~r#1X/W86-{J-Ƥ++E8Qⳮ&Dez!JNpMY])"٠+>"!Fqo?CMLa!u&=P wW&')1'2B8WW]&JLGCY80Js,E"@C__('Ǧ*u{ERjS*[scfg|Q˔LM8[Ц%kP۪s/Z.< N]\)}=Wh;uQiOBK^`s3 1~bp 1%Kt#Q/}yfp{E0xկHB\w)kɹeUR!9 JlL}C1gt-=l2OEK+Ch!EG {ibJy pۼ-ȾK&8Zrm?RBL? {I־|Vt8Xَ4}9b Ijj$l,Qm}v]]JW_^h Ѧy|+c ž2OKa, شɠ6j*3QnYT#~4bZ)%V\.io=_vn0 pbe$3r%ک@i[2:BXoidF!.j91!z%Xn ͔ߌs8Xy^Sip( RaSkӆԥTukP7_WZ<M ,)Ǫ='6ױ%K ;gfδN[D.Hj#ٷN"N )Px1%K_AD@'bYLmm7{i?O2PzR!%E~znyBQ"*`gK.L7'Z $ 3v*@u:Wނk5.rU nɓ$ā~j_ yE6ЭQ4|]8w&f'4_m&W>("vU#BlPnR ]uztma:DNԫf>sS6qpz8X'Km4rBX6)`}x$d.H,:gu&ْ H6Js]ߝ1i=B5MގK(oIKΤ | -wr̠OQj ?ZGe>~ZT:+()<8eN1ƨN F3C+^JvEZjTW5_wJj";Utg(7nX2/רqnu]%OB(iy um|4ѬW>ak?rr›TEU7it룼`\|hG%\a`~ >̕ѥnu~lH:B*bLbd=n'Qb3jGlwhݬBn WvĶ4$Ʌ7aDa;|V|L°_ Cp6CwSdɪP1TRNܯ5U7R00fqc!y|%C$e1,g\eRߥ==b Sp(mVt35:蠩XG7*!oqЉo<ʃ1&%-.%be6ZfS $3ɺuDZW1ZlOж!N8F?wGʞ%{oРZ KW)3[5=Gn)1`ٯ\|l}. ?A id>k(S,kcZk8(5QAz؋?lWPW!wm>֬_Mh,~'w .ɋIvHOA ސqj>LJ o[a$LE񢎛 71zpdnMD-GP}>J)|ˢ^w̻N{`iĪ$ω2$N7$CӀ9Ipfvu0ʑmVZWvtD"h0zo"^ENfSTR^t,rã f{13ky[!,7IHI$d'<=pRx6ku  fu?bl g;/_b:U2-o{+{CmP805`?S!%-+Z0";jAbipn?縢zׇ7#q:u=YB6PHHў1]U:I7j3y{z{A)71`&}֚U_Đ5~kVqui_\M>*W#,_n`@SñX)8˟٢T [ѭ)@;C+\w*_q™rSrq˻eH7yF }<;o3[EQь+O*ڲާpU:;a&KYWC fG\[&]=DcOrlx&M.$DQzM}Qkj 6Ue;r,AJ` 8 r.d/|]0i$F@3 դoDxP<[_0өF΃ݪY\Y7Me!fZn uQfg,o(R2Ak`D/{UTr~w/aÙ˅ i΃F} [+?1h64l,GEiPgZ n[/ ݌3tP.>HrO%?d #5b˳ASs4^N @x>qɔT$5hYAxJK __aRmPg;e&ba:SQ0'.b5ˎNJ{drs%IuuL`]'en)ͬHcN?6e6bR~A_ Jp8XWF=UWQU xz,r}jT%L_=\?A*VP 1Kq[+yEO&C=#- #t<څ9ȥLŕtFزyF;%]2\9qmI!'jN 갖"g-Iސ6130u7y{FnR>hK!NNն3x0\BZZDH܄:&P=%%V|"6X,Tmkd\p0VI<#_#̲s( KV6ePHQ-7=bV m0dLvq>p49/TeHg85xèA=" YU;LO;h"nO qX?)4 ,%%e\5:uVo܂}Mg8ܠCMDBTD@qf8HXɋϻzt5%cP 75"1Jg<[i ^q~0XJіS~NfEolAU~IW jSJq{c >>8!f]! ?˞AArct^,s4$ы`N+,7JYUozgM[YtAZ=x-mz\.4R-fBMN&us;>Z+hzy=D((tߔC^ ˍL{Ƶ"=}SÑN#?Au~P_Ue=Lq !Nv 3"f_["HWrzy09_&Y֖-Ʀ -!fzEy9*KM$+SyR>fSׄz0 9zċًg/;>?jC4aV۳+mؕafVkZ :GS~%A4%cE2p$B3T@sPa;vʍ.,w0r:Ԏ3qSqɪPZ!sw5˥oZ"G6)OP &,nC`Бd?Z ⿖NE387~j} rc:ɰaW 2v:PP+Bǖz݌~l "$֌ Jn 8f*Bvz1i4w2wP񐽫cpת/'H[U"i8dd?,iIàݿKcء0no /qndG684G{@W<ض\~fʧQ(T L0)m[ͅ*M8 Էx=P7Z#_{ gcĩ 'K^3LuYק*~޶iQվ}. >Ag)h7f .jD+"Z &$|Xwj_]%,^u?/CUl׈ iQ^%ӇqUR dYkZ 7Ԫ bTܗNeQ =\,4p/ MW]WCȕ=+lw:s;TtA})}rdOU-c|g=nJ+ZLpEG_((Yu >hrU`,*+=${ZtBVcDrq"&fiwAGw'w`'ɡCuPδ{˅ol?wMjql>ef%0t {HM@wMD>뺱}^KU90sl ۿ?/.ts}ޥ UHT\RYxFLjPH* Is 5|}" B%@Uh'wRfqM׵W$./[/L` =}HWfbQ{б\%هдVͽ'Gŗ sH z cis鉥*=%Lڹu. Dtu<`c &D埬[Ӕ<۩jfl'4J[yҍ/T&~Uke:0b kmHe$s]_9P<*FX F0s !b$}Ȥ=O}K6:i4y IL.#Hznx0yV[6K.P`S]n;{QX R7]GBo^EC.lOPذHA:^KV9T0Б$FK@IݮZ,qb ĵ12<5?ޝ*ʛh(7o?3t 4&V+cNPAG*hi זk-0H|/^`K NWMS &U|"܇j7{ -1 ,=[0IV|Y>fdx:5a= Fxd :?2c3~ր̴ȝB$r$Eˢvfٞ.sԦ:IAM=;>aaG6R V~uR;巐ܛ "΀'f fw\2h9u6I CG}*c)"tj|u+ Ӝg9T%e/l1$WdY`s@s_)W_mE[mOlMw*wrY׶Ka8/fc{,vf2.[/T: ;_4?ԒG3BL!݋+w~+w#݌::6q?2) h4"t*rV1PGL5q]^J9zY`]oαw8_6MͩtZd-^]2:+k;.Ն>x_ 0-V 5B!iS#9N IOB2UC(Ibf:~n;D[DOɈ~N n!g74f#׉ΧAS9^(ixX*5zCXA@էq3A"_FO5K.2ĒK}jJ(_liN~7P9C]lha._6{+PVrmʅTDRZaó7kv R]SMU(eiVkήo /YolLy#<|Eg-ᝑNmHUO(tV8uYR҃*qtXJUi*h͌-R8$fg;9h(ep;NV-G\a\4950<|S9#I=aBdYݜ4߃"G^Pw^QIs{SiJL$X>}|&T+vyqW (9"&Nel}zq,Y_ 5XL[P+q|ekb9ojԷs'٩+xx<"Qާ) .#D;sb&?c}i;m)#:pŲ뷳]wj'ΎGǾ =9>]ycťD^:*5#zΕVjPN+|A Iqr1>WB- |1bJܲi<3JAtE%o%%8SW L1xUȶD#XeUŔ=^: nyOx{AE$Qe)4H~Fo1#zսVσUYo'UϙƜ&c{ hH 8pS U:H{P*ɹp19NU%$YM#OJ UA60K&QJ2v<6}jN*F,Z zìyRA32IkwfmHc`4sy2B[L^]:qf"PuK\QWb R\gY6Ȇ5*zqhqD wBtIg[b$/&3]Q$ EK7Bh+Y*1;* Z0 jE 5{YU4EX,vG`i+:(( V9NgxW{:|  hӰ0B)ohͯ' X|D&h%aX[U/}EE*58[&%.BTɷ Cu&CHKϖ01JCi :Z~n ͥͦGQ&g4P-L,Ud{U=,pkE[sla$LgLWyTnjjڭ3y;[^7ҢLʷ9ds{PȠ_/q ci0-^V4– F0;C> >$8Oo:+w2'U ) yO#]3,D(l>M\ xי.8P&~ֶ5isLϿLw=-9f  x &t-<`j2m=;a;bg^,Gβ?6.RpJ*֓),g&爵nrBPЩ>)7vVe)?.K4ԜY ׺c$l-cK/ABm21Gg0GϨ}u)>đYh~N^R1Vk*~NCOnC-ug_ءч.{c߿pAusy8ȱN% q6l:GL"iՔsgmuKŴAڌ.+ߛuAY%Z)9Qq!'ܿ̔Yf :^lWZ`\lE~5(:t>Cb3R#6$SW"M]2masVC@(br OLSX85t $1٫bbZ ,H.=mO7Nu)D,p67JB0%+"SZ;;H8FuU1v6Ƥ'+ wQrըLf Jv^}*7sWhJ!q4{$gh !_M-7L_0j 9~\4>{7#0U>NOI^ܕ,28izk@S'~zuJ57c;7Pdi!Hsﻈի?#PdaX(~AT)ߟWMt;@Xʼnji9||yko]lyHpt/x,"hq;zvulg(> q  pJq;iD$XYǶ'Q6@6`IYxL %oJh7L§ )) s ˪EVa/nZ!:>vj㽊 _N*̝rLUvGz}Ԉ͉5e;ԣ0;BC3#N\D7`eآDB>:^$)$6c@a]P(fo npQ^XOptڰ" ͙5#?w^^LL5=Ui_|;/b}9 '݊Xej+s:~*XIاz=7X۳(cVg0X_LeȊUjI2`C )zV@n,>O / 5qE炤? KS[%}J~*&_* 7هV`#?S5`nDA^a[8p+~!eh,=Ko19fa<w _|EѼl˱b_0J$@t;#Эл>`󽥿~(\* l,}=M4Ȟ%ZSr~Ld:xtbQ6Ϻy+ya>: ARG؝C`t[.iJJ?"588=~ɟb? (dN13ՏO$?;?pcⱹ!|5j$JJކv ΃6gIw ? Vj+%=nk`tdm'BXՋ Js#MEm4\u< fCO+gg@w%O%7fAvV ^aڏbK`KOy [z%}fo_13w܍]jp1W%~WM% jc2cG\o-xUmE) lPPb}4yR)~<9Iѣyv:Z!֗5&!PY[] gm켑 ު5J|_i~ ہS8K659cmL`~jU5G}&7rDx&i-ᥞ.(^uJ|J+,t.}*3Z+i׉䠢#ľ) >~ѿhYH.Oe@0:Oz ? k}ZBy#A$Pe,fq̨ؕ2#RFxr(498ک7$o!~Q3ˢZ fHj@3~()<Aڮ2!D dRN2.n.üz[&tKU굜㤡U\: $!M5s>aZu6NLMcCr'UD(PHّFHR0Ęm?Bx'bߞ6Ƨ^ŷ,X5C{^ݷ9a1@I a4Dx i TD~?imy1Z?MBTìSc+ɾWnQ`SCLD%r @ gjL]N,O,s0^/vK3p}S _륱n&bCƋ$*g|}:sJ, Q3QS^)|G}%hŘZQ7\ɩF6ԔD\> {.C"E~RC~ @9j048q7v+lzg-mU-M|#zt$; {vNw$:m=Iw 헬KZhʢy2i]Tz]Iz["Gֲ0F)&lSx"%Q>L :r"8NJ- _̎`3{A$>}Mm-Dun*jֻQluf:V : k>8`lY$vO7Y/;+8S^*bAmRcݧ *Sv *9؎4T]eF+kpvi. O2?m;֏g[ceU+Jrh=iV*y6T%%|J>(DC(`]t/`HJ_VI e(W WN<4eC?Bc=$v/He|iUÎ.KN)MX%,_ :v HKUeIϥo!%blWӗ=Qr ;Xn9#8JRw9UO 5i잁wɼgp>HlgbfN/1됿Fx.h1$곫(FC'IWKc<%w:Iiq(TG}]&g&aڌh*i]*wؘG%7NqcFS+ y̖%׊J>U2AEyyS*ȴe}>&3_ Hkקr j_BDv 2I)LZ5U>yN q}Pp œB~[v L~h̞7]ί9ݖr ]Fo@+'By1.M@ZU ;״$o!im iW|>&q> 3!fy8eG4#Qlx^H,cpmyUj;OcX9BޓYt5Tc|{iw)C?)ORmˇ(TQ;o!.Jx^@/ξ8Vmd/ ~H:dm!j^6 q (Z>vEFPxp}a(XW;hג`h!oomðbBC;|6!N"2L"W`*Kws8-:A[_Hx['9ݚ]=YS?pc_ t 䥄 ͙ 2ռi.i`J 3,I d ǟ=ψum'L$f]j{|7|u͗|Nd~&].ĶtUդ ̮AInÆIIz ގ;5&^ZnŠZmx0/8;jZZF)\:$(wx Aoݖ\8`=i_D7yJ\ߥH*0\"H}NW\ϱee|"qi|pp0 [8' |!5 zjzOlƬӡ%Hh\w kUnbmޣg%/_=@Nd3KH=dl+JlG:n)L7JL.~}4;]d]h.}}?ok^ bT U|9lRy->if40r'`wcd%-V*N4?{< \, 3InW ^LvD!r&I[monq `PhTh^:9HSzڬ0 5'!>']BkՄFƨ_G/'XFtnq{JK?1ݰmAfaT| :yjIG rP_t|` H6t,?ˇ|\* wW(9'ޣY6u($ycAV2k S{@'p5rdS)HЩ::g~bqcgENN0iKwwàFB뽎,lyΎJA3;ƣ1i&rV0 `k\%lt1͖ ~؆Φ"yXrBICH_&AҲڔdxO0x3Tߗ ȡ2 "K m >̋O&0!U`=b+x *LozXQ.Fba6:A֗^cR`;EeDD$~ H"(R۹yfVݯmDtg74"lˣH9ұ~߲ھ®4#kUAˆQ(6_#9Ig1}bli,2\eC2x\(!YB/PYsIkĞ$kaTFo< wFr==9˾K!?!7Cxg֑9:<btlk6J_ő8,K^M ?$z)6Fl8U;Fun ˃ܶHhx~`, CxbzAPK}Mkl'P&ۉCTlY zOZO:T31ڮi3vl;3z$?&:*&FS&S*MϥmG?b I&.S^-TZlJ;UT@vά^eH{帬H 9#kUMwC$!X@>sS<sM…mn7pJ]]z߹{|.pK+)cxg ^݅-]{)dR%>̰ CWUCKgfNa|:=I/f_>3.|tiIV76y^88`"5ǺGKyi8Ls~7=~];Dq5K.f34&z̾Л]}=vH& RMM:5JBC H"\,vo qh 3<-w1},aVD<92`su["urBr[EJh06GSwBtԯ, N7[=L,aJC-' ?땸l7<}5j)R!h*Dg5-GODė,.<͋m vXSbMDo#۞૘\!Z^[ (L6]1 d+%aop yt+@9Q-36ҳg2zE)OAnEg"7tx Ua)!P?Ap{S7u˾^a{">z@nQo[(k=p"@ p1ю JөG<>sg8U[CO+=02!ȄgaϩZ03ҿjn#=\ZLӐ2z¸ ny=,\uvlX1KwyҭE:#ڤy$i 0OԬu}{ o^59mC9r-,UX&m٢4PMu~%ڤ.[ߧS&['r ]l?|V2V`J﬒TC|Mi-2EM(!59PwPkyEϫi(n} ,<{egUzsΕ廼@Z dqaGtFFf'QBĜ>XZQ"Z]3)e8^{ wk)av8)1YҢBKiX%nb?_Nuy/evјp?ޫ˔Y /-%Bja mQm߼j"iߝ8 )K4.ڞ(\Yl[CvQ^vK~@^тtoɰ/&٥X"\M^j6UM@xi GC).XX>9 GZlaAݐH\L i7q MXzɑZlZ~śjDcyǘ; %4PmM.KdCrQ<ΚtcU/pC혤Mk0爾RJc8;nٟ+x NwXC?)k^ Yjn_옥xL H:HW[37 $ ]P> %bB:aѹ$7kn5V6CF:;$y<bnfӋ5ﻪ}K!wKbP5w@WoT w*6y(wȈ2ݳ'f*VB+)J7_ƌ!vX#n4YcQT, H`@>A= ~uτr禹5m!r|9=co/ӗ*a2!i#b6fC6Rԉ$uAFH~)|NDD7Ϭa9&1 ǚĺ޸f1:50O? OeG1 +VI@L#̟$ d%@ePZ1.zkG48$KK˞׀)n-|ӘmW 7wټnV]/DE6NWNI˙gpF^;t׼ipFiU#BzG罰0 ּVir T<'Ϯ$C@)YE9 635z`KR]/nQ)6eΤj#]sFm4ًXo@(o UF=r&emVU<:+sػiblO:xen}eTa 61+$&ah7KU@;B=%,!o<%$]16\{V;1hODD* =_3n=Ftܟ\B$*]c=}y2X(1wkJΰ胨S^D}1i'u-gAzgؑΰ\>nX~=3pBG ƾ^6(|3f*r*5f><% 8-"`,ωhth =!+}@>^J7oB̃δHt4 #nY" rb9 Q}z*J3Yr]c枊7#v밬zSRRU{)K?]U*޸-pq;~5Mv"x"j\ț aV&NSg;( xy<57:lY|?up.8 <=#8s{KԌv\諾eP8DJV19Di]Y!$ַ"Q:6޲.2SM^D|˸2U[*'Kiuv+P(ǯ&cǢI'!K|'-S.}Rt kt~Kg=֝ᔒ7粼/MSX&˅>aS;9^j̭uj65> <,g.mد LXi aϘf@ ~樜e.oBXJK[Q*7ez TԈTֲM,t}7K#2̩u}-(VVWpjlo_Z2%")1 R&5/f6xیֱ񱂨mEӟނV4ap+Iں T._Z W{u)Wl34VmClLs16'i,chi, Q@)k)\tASp:5ڿ ▬ʌ G4Wz083BJZiֿZ4s[@`S )>?R s\Ƀ${yZ?)LYlvR,>mq&dɸ<' 3H[W0T:0ꊨe;Z].{Ԇmc7G#;pׄj,E@fV daoaPuOtݟϝ< OtLI<']h>x6ZZ4 Ҕ͢7hsy|%:M(/WZ*31CxdY@憭PFSq1Dy.C)|trD$n׌ -wzTut;%9Nbd j)a._]:k7"R,A3gW b N koVU9Lug?M>k&,Lynw ݢ_!dh3ze1LET\.t|Lu>L\uDi$J1CA7Guuvl ZgΓǀ/VxZEC!Vط Z _R}R]|Xiv m"=4`aX8wڹҮoCu1$j ҡ916XC}JZPXt4V< Ƙ9^T#K FL\T+H`)@GQ2]pIULrCkqכXy)FY|N?/RM  Ac_10@EF 3ˮjmĠ!ӌ]lOike׌NÙkjkTO Vhf r9A~?Nxt77۹6N@)nuiz2AAK%)|#hD樱X/!ͧ@GnbMwk&M;.G.1 yؽV[y-Șˣ.Q70 Z.}j{mK{nf2ʦ>v%MW.vfK$OPt7šDêǾ^<&4Mɯn臾mq|`;!<ܓ _pDhTȱOZV!xx:Ocw\'7y^a pHdScƻL"$rm{Gdm9!)s\cKt[vsxL]Be9!R:Y lU N˛ESPZrnNj7Ddf;)aνVoVGBvG6Y'i u l;CYrݼokZˢcQF7eu}LQ[c}ZW)5y{tE-)%J9{$WRey״ sUʰ[{I'' PJraFd??ʉ4|"V"xPTjJeJ1ÆWdMOE:_lv>l~5&賣Q1fCp`P!&AOq[.cY?7E²c,l|j9.Kk|tG G N^V@?3 a?l9I7 ]Tْb \-%Ms3@'XLkv8.Шi"9YulcTѰ ao^Gtlm+nЀ&ɺugd#Onf_/Rs/|?OQ -=2S抖q@S=\Y ĕ#0[& 8__KZwxx _Nw 1?W zXNzvǷchJNN/ =<=xvEĮefcዲxLa~0nP.S—|ǿ:1 43ys~qbD+7;M]fB*βe^,(-O9ڊ"cw4p;M<ޕR530PlUƿVW\mP f9D5H˫tP<^Hff@fFS5QԉBWver\мMX?nWo+p1Ɗ|E "zS:ZuTVS>6KJ'/Mn xC?Dƞд iDecc4Ems5PEB=zªSN"A^UkkOUoN׀XaqE5KdԒZEڒ`A7pXqDF7Lx5〡[Я~tS?rw ʵbzFz~=gb N\`q&JQhMRb ╓% Mk \ARY9v>O XLDn 4i]l֔f> Ghl|Z55zᄎMB-_L=YWdy#ɖPQ!b^TlT619M|Jk; 4z;h2!%Aq 5[jav"`]DC!.u 0lL20pD4+֔zfIwGW:m{rހC^O h&U_;]DZHޛ ]Wpvyzj.|q7_$  {H0M9?}0>qa5|82lL_fm}8ţӏZS {-V/GďwyV/_xEUpD;CjGTz+N%l>:jS)pZ@W # ^Ta` 4dO!Rp_Tk Ac"I\Q3 64DJ-n NR oL^A5^;ϡ̯A.@;_eF69i_$I?Ŗ!=*0v83X;L;tCӊ,s; #x4;Uo%t`hڨq(Dd}paτUw݄ʸUB/Z_MYQoX$o"Y#"JNf.Z6l Ԝ˾܁4[gqI,3: kaxC}miXgs_SSuG'0'No”]}~dEbD/ : %6֥I!e줾%+q@Z^D?܎uo*6R˪]< GRL_+7x>Tt)i{'].>}sh4y|2-t|%kebn|&j@uYi|O9mwV.rT(w=/ HgLgΜD~;ͅ[kf҂1p"=^֮~KUL*M.p-w-CpgW( Xhl *!}ABپ#cV*ŸͯjPC֑ ՚\ڹN`>[[dXSPb…^m ?WV9AkP2<̧U&`W%w߲vH,!wC{̏q?,꣢Dz'9iA _bFYǚyH C0ftCBzg $d)7|&SQy۩rbZ> 66P"[-;t#╠v+wo\/h%ӛHLdu@qjثzSŴgʹGi 1˙J?-ڶ?nQe{Tr!@F`~jQ<>&]Y; Mh{7RʵėS +9nOd1=* Q**ޑoi e$ ܍^Rx\h #wh;HxVr] äڃWXTo qi_\ٳq{J%\C_4j9 z?Z:qoQ#/q}&DE]uܘmkj։l׼")wKitOgEhܷioFDf. nP0SI܌CYGI; 6Ȉ$a}OKuq~9E(%S7PUEWfjt~ESDΟyn(<JQ3IT,PYiVy]X$GFK^1B:fm݆۸'b1JJs<2wQ3jxWl8-cuO6}ACkG--ҙ"^ |xv6W\[2)6sSe8LXtזo"pt!hNOܧוim4rI\'kFjw ( (U&QR"b9~$F_aZeJS/Uq7e+ 4e_{XB%lwhC9IىƮS 3#yĬmTl)6$cyK@h'4aLnϖ٘χq-W!H/;mFIr9;V|Ĥj[(mꃶщŒ:2Cn77C As2@`H>J%tNcBJz ,R/'n Gi[yr@>SMf~>U1ApOw6qXرt3*S+?w8ׇ~[\K23n%z0z>+2y+?r4fd_!] l`Agu&bp98\2Eay.\F'Ͻ# a^@@)=noLzpzS}&KƜgp7*4gQRNG b1=ydTUA?\# =,CUocE>ۈ1%Z>DMZ3\jk D۶nFoqNoM]MgPR6~ڥ8|>_b=I`r *5裯3LcPlW̪i_Ahct@@⚼K?F^" ~ܛK"q2\$MYXej4607I봕d52(@ ص.+P+g7Pu'~u1SɎPDSoQz0 a{cSeB?%Pw K "7jInJpIw ~IPI\mASM;,ዢ6"{^.P\-"!#Zs+]+iUK!!ҖSB> kWƛ6.nz4fZwB N hOJf!ߪ]m>z5noض'C1eFEJ%S3[-:_?7f:]7 gt>pR΄;<"E rg69+N-2]*Kɶ-?O <íi'%:=YK6Vs-gc`jCI?7{y_sB-/X JR>b=ZXKڬf'Ͻ _=N|)}C& *]f2j"iS jC3qj{\xg Y-~>)#WR*Cgʈ)uɠ-I@_d{iySl$9L+k=5I{zz52CS06Niz6P[ڊۺd\s<5z:35YX<ACc4%9}f}u&۾ˍ|g|NΪ*Ԝtu,;ƊK~*7Y~/1` oQ,L0:]#Ŋ!{b*ް1 JgTKe!nȺ; RC#mfڑh`O(k񳗷"$o,92 튞o:P66"t=.w2] ֹw(/+!6-)iϔ.`9lA8] ~.`;a ˴AUv:[/=cq2TD{N ˲ qpAX}dϐLYV#K;}NTGBZ':Nǧ_ۻt00XP֒⣎eby=EhݟE /]+pɔW!lTd-$&d8r://C7`g u̓zyw̒z[Tckn:4›GHG v~27WU4F&IhБn:PaQd\tzӌG kٔ;T=BAe6?ɔ.ۉ[1Q`)%rZHFWUr1,Rl.mzKSU1,Mr{yT4ȝ-sg2?s2 'ѵw)J>9'`q`rط `$(cj #;"8$ \v|]AL=mU8hJ3~@1>S3  s;G ;{M=DA]y[WN ǞinCXs+q){*ev:'hp_!$M D)!1ޟvkIy٥lŔ&݃sˁurasXk@!|]=Qy.f\vg@mvs8 96Ʋ;˟@h %&]l6);k&!)N!fd/S[n= \t 6Y7,ICgXnw[Q1r^yB*(I4a>ҨF#~V)3BҐT${٫BԞ?tMh6 = Mk}1.D5'z$K$v;9ŝ>⸵m$Mv@5wL5O(5"슚O>%l+(JtNP^qdx~_!S|ڿrDs S3e/ymep6''͊*|% hQ-aRf)kyƭ}_(_j_( oLh*H5_8jlR6y\3=m m^kDf#tޫf]ezG4|'ԁj]B*#ڥ|47[j=pbIիѫ$(V(dEWC|u,&gW!XjP%CNI.ɞbjo?IϱdKraordT<Ά9ȡm%<*DUXk: cKP.٭nޥ?W N=YkS<`>bj""XJ->uߋ%ʮ7@ujWX{SnO@b\E↗? ojz"9~MD6<8.[3ꃲג%}iU>h33aM?Vewl3GAF\\`&Fг{wr9WY{Vu5wX4,7ݖh_`%>Ʈd{t`M/a[Wя胎yVT? eU|!*R\?`[@Ykng:45%SrrfvQ R܇w؏=F:uHnzHfJ=Y=oF;pJQX&Bߠ,@FMS=MEX?[1(0Batyk GŢ) W$S1yl bР$oG2wπIK#*7QgsFl vBR_esmMBRPGQ\a\Ϳ8LS|`;Cz)delv;4\X[ǤwMΥQ{Ч %~ϐJ+ F8/"4d\G$lj2ؾ v|7c$ۯ*|,e:`兼 V\M״!mqt)_"K2t!m3b@·weE2*T~v#օcg>= 7忴hCʍ@] ۽EM2p!M4-7]W'gk]C+jej-G6KѮ&=QBU#ϫޤ{79Q "HJ/9ƂëSegֽq`D yq>ŭRDT/$ u/' ^[a9g_"Vz G1L~(~њ`2p:0L{M=6.AS J6Ց/s}[\CƄ֨yO;<} _C@ CY̟F 1ksA:RM!mDxVl־ox 3)%dUW\es, /GOkطJ1'E>M*l"[e9xSE _VKݩ3  z`uz(gdVF+^ToJ ?#:D~3#EZABYiMM]ߔʈ%on@$^@{T2=ݩ40!e}ңz 4>eP!;nٸePh'9O֫۾\g-NJJJMc)Lg[+mNJ]RI\`/oaPYhbLC!>Ll }hBiFF4I@ҁ㖖"dfL#3{lC/$,} ijWV-ITx-d&=`[r/6%$q;߫֎>c{lvM@.KP#l2tߐBҍ~݄us/TooHeCx#{%WTܾa_1*VRzPt3M6nE6Z,+xOMTގh 쾉6XL>hT]Tۍ(ꫳ)^50[{[39 ^/+` ׵;;[J]yCL 8S{nv?u$wrJh!},=ͧwS?ηޠZ~xQ$bC _PYMg}C\>n%ʏ3SrU߅iWƆWM)z9J*hjNk-3:rO`]^ysYnCl\>b,wk(-L冁WFF}^5 XWc=*#4&0.⭌q(?SA{!R kb 𠜢'eE 1<|h*Lj0IDzkF7KpT Ȣ2T^;̔YžY۹ ۻ#N_cw3~/;lDa]4$ßUsntGWh7<@ggACC1/ ABQ+2܅) 5[x'FڳSCa'd+Ahb;_u̚6Lo6j"xƩ[ *ؤ N1i*n\{KGXL/)|?aT򺫲Ær/)CaU!m[8#BҎSo -]\myߩae«}`'\%wD˾85VpFI.KŴ6m-'i[=j|M((`<_x lyV,`-,T@@ A17"} l\j{V q!kzw}S :c|vƏwx[*9d $+B DH@vmDэ|dGe: < .>yXG9%%- j{Tڲ5/b+%r*_ lJ:4WiyzEm8 hhn꾯h!_?Fn98+Gȵʟ%_?G lJ8#dz]<u$hl8]x- "?BMӻ|0TQhH`m`zyU/,7Jt"گR}IU#GQ{'ig^BİY SSxstLC7\?z"(իfTU!CY(I Zu.-,ă`t՟c:eT|="Er^1豁DG-׿.ZN;x +#m=?fFбGpf2'km.9_)ܨvUi;bjK]:FJ}H+>q$EٴkTfK/M*ԽbU^1W?@y4&6a((\ok8[R^rvҌhtr]G#{is%z:)j~7 ZSYM֍↟WtPf8loa(uߨ_OT=k4hLkw&ZB=uY8)2#},)d(4^:w&>\t42ǟċ@\Mp*EQ*fvN \Sqi%8gvX6ժ`! DE>ƚc HrNl&q`yD@Bۨ,zދΰuפ椓㉑sMR+j+ 1vydGòO\-&~k}ף1U t耓2T*Һ+S9}GBa {X+M#x4pe\d x FUzIԨwǵ ]}hq ~ k*`b1UDu|{]D(%kB@sSTgVɽCɱt>5{}Djwr2:r첉EjV7)UM5Q;Z=NZkǕ3;PI̯N~/|}@:Ƃv;IYF2Ȕb'jDeH@2S';in8̰s_1~Ne5|7iX~E Vs`FlA% yО$4UoXFldXM8,RFʤ,b]춑W^fM:v'ޘƆ*4t*w{ ^ddod꫾$/49?9@97 B?ocilFJ&1qamSmGΘ@̼iY3s.&${s]I>f(%_D#Բȹ{{8_&,8L[z݀L23܁suN1fidzj' Xe݉g\X)7q H~ *8>0Eǥ" jed jWil$ω1Yܣ 1K`AhX}Dպr%CyM&3 YT\ qfE2ԎixOCμ1YqGﻖ2ٸPrVS\Ofw;2sׯKkm,:sd2|z ;JB1,Y7#ޝmV)G7vƎ0i}Gwoߤ*cV/,nAYQ Y*^ i<6R.?|q#h,c7p`/#.7),\[S5Vd*ϯ_~eIodEZel`9Lx DcO#lHISS&NO,FF'Zٮ^^/`ox2sօxdx$-o)Dp|FB = MC͉Ӗzo<ji\FW'Rkė ړb(3K}y(}Aޗr8FeǞʳ{Ȱ">f?ymθsE1k=@>!!nvڪ4X #2*XIIߝʷZ8߂XxZR 'r-:rq\_.|콖ru+8c纨ݍreC~z(UN JO:k+g Ei.ȫ3>5Y=?P=>dY=[֗D+"Ϗ!"۔&*U ):" cZ͠sܹɑ[)#YΓY wN/zxIːVmiI_䁴{CC3Smv,EdtZlFܭ#:m*<0+&PANDn_>z:4X@| h~vGi,4 o1QAE"y--a+"|5MzNʇvM 뒻`B! %[Bs]%Pʸ,e5OMc HnffWW+%h.KErWs~G("d(-]Ҿq9SRQ+΂p-:B-j#WRL/hd26Y$G{ $尙JMfs!A4j] xj &?jnXw=xͬzv[F 9FIO4ߞ*[|~3 >EJc~8*م ^$tl.㥝NA_+ڴ ۚ-5(C3fy#o]`OUۛ^Cj$P1 ̿5c†LmM_y6Kn9Β@<=LH#FPfV(FY;&e)v:0ka#K?[swQL;f䪴N*$_8Vܻ Ŋ3?DE4n[qN:㕂P?z㜓/Bն)B"&B81Bw\y_1ڌ<[^O̖jfG0X{϶y`R'OC 'Aw4(cDe] !ae J dBzDoJQeqԹVŘ%ؓu.X0y<\ JyV.6nL@߳P{Ĝ?9Fv2DzJ>!ϥ>|_8.j,<k2@*u3ߵ- oA J:hp#JYHUCf:rL/_a'ĬϹKk+ :Xi+9$YX*L54#|9*xJly*+[C(F> ,_)41ACn; O('"C)0(FZWnHV{sܤ$jSvbTRMG[1 Un8)i2귉$o쪐 Gz+ۭ.': F9bȧ˚9?I>~R1w)y +2Ò vԆe0м> c'=~\5/]ϋ[ExF\hpÇ" u){e{l dM{<pԼ^ )E; rt 0R$>.JOHO94Q?C5`fL{.[Fe QGh{e-T:qӎ4u&h&Rz^U 3 h\%wlH*/>jJh[!䲽IsjR%^b1gVY&tEifʛau;\^r䈁#YDIf7vt+ y8Q h&:"z@bxB:A] ͞)S`׉aʐggףGԎ껹ntʑ+<ѵiM`oz@&/v"#}UpjTh$"f"`w1M*gʾk%[6 GUdBVC[2rJhݨ HZZ?)@7'r  UUdzwS5,Nx ٙ!ߏ }$4"BuèV@bEgMsI0~΄mI(QG_I@C@bY'%ŗ91T}R:kr,ہ5%6.(=Kp\qѲ@dE;4Dv B?؉=^tp5K @H=4UD$hdC/4-$AMcDEhTj\K!ci [@rZ̗3%oS6.a+ȝC` 8S̷:ji+c [a=1.pr6>NIfs=ČۭT:A}]ARѨ(334/[ՏPߎ?UY=< ʺ 9>o.O86jz9fGE{wLϛF&4R&ԃ:1bOBq}/n)ʘeXh|V!t0.+@c伎W"Jso عd njhK Fk`#xS/!`'ݾǿ[d~F۞ό ]X,;:F?Z~38FHz"ڦcsؔ!L+|8mcSv4N@e”jRN68g̢v/\\(2߫Hb2ώ Ma]/LgsgzglX)DpVvx67kj1*H #+D͙4R{@Qf> .(MiJR]j]C뾫D)zX p(ӥ+@Iv(h;P ΀j ݈XG?2ku ㎘%`{hUL]賕pӼS,6-+ڨKq e܀EF/d?9^MV!rpxiH2 hPقl@%,Oy LkHyn'} ge"sL#pwt飭ZlD=tsI(U+LP=W{[{.ImRϱ?&])btc$*r4oI=RSd0h,/f.KSb+Gܑ5ZIV;dVj%jVIPtʨ6y2"#=2'$|Zkk2 j"N]ezpNa G+6ݗj ꡉ5i׵)}q֌ka- +7:vHd͠#wk5[~ͷRԲLlƆ1kŘhAV8ᨌđExOGbGrU9[A_:&t$`i~3U*}0ƎK#<[>+e&k.OIop q'or5,/c!X%UJ[E 0/gPcaW quZ8뷼R /OpFU0 Fb$ ] :7RPU0 '{s,&1g-aAO Ӻ`*sΜ;{ eYh@CoIIv!LIH"yqϨCY(?I1֬:ajSD&_ 4u6U39Uó$bpJvN,ɺ)l8'q91ǚi0KGIGizxtva;L*ja4j HippWqG4e{B6'+5zuӒ4ftM;N n!궸}ɹȭU\--eI$F]#qLBmGBۈn 4sYtn|zHbi]0ͱq33,O#D'׭ 9Ht + ļoưofaRdBDdM)'QM:s0{_kaZ&Osrz,?Ys.{LEl|9`6 ʆ`N_XË kM}'φh+ juR~ >|`+ L%y2Y" +mҹq8 UXl8*5I~;;x&%zA}A[Z(+s^莰)tx,({ђaב6L9 v? Qί={8 ^ׇ W" _H_Uw(L}:]'8-y!#Ccz2}w$#O;l$t+䑂;牂~$,5I̕7wBYgɿZ쫢gK2;ZU: *}. T|*סӚ -맸]hu~Ȓ&uB?VP0{ca ~o~2)a%]#0H-B4#gY9xl#%DTbQ:2[/Ҟ܀k2d9g-HNݭk"IfOf:?ETʱp;GlXB]2fKᠠ>(_uxsPq Hoq_5G 1}p0Y:.!܁S b)"fC>RZ2A)$$&b_"/M2*'qT $W 'vw'e7y2fіftO桥tN̈{쉷~0(vf)YI㈕ql`0ON Dw2ED \}TYU0l !}D&gXU݊]Rb߃& Jc J1aY 7s ;zvE[RGMuUm);O(lBAS])kfZ2A z/Y;GO:,|PG4\gLgQz'C-㘂_&oS(Z՗NcEx̍7'\"\=8, ^4 3*SEwBZ2(ϳGJO!f^l?iY$<2gvg5QWRȰUEqΝqLw`*ڮ |<x6AXc!V>\+'2+$vf?Co=s>ɦLZ_.Ώ21GŬ2 6 >SEL!/vu^{X."6$zu9f=yyM!T2m]mʹ7ua|1^2iӚ F!4ȇN, LG3SXkP14ւkhK1DeMy[dݨ2JԹJo&ӵyq0y3wFDw2с:Pj59$T#UĆ5q%:Rw;svSVi'U;:`ms ̀ahުu9+\.$ q I`wc5AhO̽P zVFհ]ZF:# g2[W2dDkd`0[A(^ԯ)>lVtgpI^Mw5:m4QZ#] .yeQ*.܆ʈ:b@rwh psv&Gf%:F~xr(`M!T 7KIy'蘊,p})1[ZcR jW?.3>T롩~u/HW҄@F0؋,q>sܘoj:&ƚۥ/)u)Kzh33A 5I3uc}:[I,E i!1o'}18Rȱ_zA%n6LJV lws@(3uq~bMyF.=Dr6:E4?y4rCb:oaJ[:3a 8^;L~GY =GO=z& ^UOѥfƐM,dK5d .#z-we׏q K93Vrb@r~eݎҊJ-@uQeZR:) 8]:+F! 9Q{` .ٴs8Et*%Uȷ_`O_1RuEPU&3A/I̜N-By Nr""u`wNp톴* uˎ2Hd>|--I.o 27qO[E-v(vɅMX Y&>PKQ%,JcațUkd$M\ +D-rEN:ZK(IKb_-kͽYQ5gV,!]e7MOGn`MISbnT2m3xZ9_s4]] 8L6y=}mOXi#/Hwq'A97%`~*m ٟIe2Fz tιJ;z>QM$x'q1vW(oPZR@PDXϽVjvnDB?u#C{. 3Y *)C!$ wb7ԇ ]2+HM5LlY5H#LH'a ֔CS/\:Eꕸ0 [ɂ| 𦃒L} C,P4: l@ZJ0aܴy,տw{ k&yzD&LI!Is?QmOV@*PH#&tZޙm ?uŴ+cQfƈ9kÔ箝#{ aR&eE/9$}Ry] 9@BdX>Lud {/6J[3kgw4~E4M>AjEVյ%OZ ")5قGojuF]gOnAצsX'wUGis޹$u#kPeSр =Ie]" >i-'+ 9bIΧe0X&SŷOirTT(GW Sr˝n@%/I}Mд:$`^KCbPE݄f_z;e6EDdL%A_UY` e!·:>AF]#ri%7Yn;RXCGy]l G(w!,-!ȼkvݣ6iN,9G8XGX$< @hWF|:wƕm]x%#ęk m$HKyJ?[1prYWkqFF?UO@.f T<l/`]gеb%ֿxS6$8퀸> E@$lOt6@cm&K&+hO}KVP(c˨ 7r>8j>sGb{?)W-~?;D(f?&u=S{&s'8❀!4~ׅA˟5hfS^ 9G/Uw_hjfj YFMrU[*A_L)9kwW]ŶkZN΅Ug0u5Wr~2Lom֩8 țdT4#n#XsJ Wu½B.œm՜i(T/2/r2F☈:s3k{R/>bZdT*j]uѸĆ8BS~_EBɓ]E:Y1v>7drB^R t6r*M[kJ$WYLe!W&B Dh"3+ sEb]Ⅻ,!3\xܭ3E_ Ӆh@3&[9NN~!._&^a,h_h#E؎ʻWF=xHv(Jd5 O'<ʨ9R^QJpY(aLN 9e?F\?p^a`9=e͟',8e6 ԁ#5_m(0O:-= X2c6^sf5}`wqm;ͭ3MOS|V3Mث} UصH5}=gz%rN#-ɰ3I>(#c5 V|]cM]$!Da=I#ނSIaEn཈7)f*O6ÚUQMo uw܄b=m]I+20hDR3d8`=/ } CssHJ|ӧϞsyp]Ԑ =yPJ-Ne"9(-Q7`O|AMxD["m#'vY0_⑵ZqBq{(PX {^{ؤ>NƔɫP$BGɴV쮌t[q0D>toD[I=TB%ZկFoX./KbhIA?TEJ^W7\<|1y 'v9pl$9v<|8E0B.0Ci]m;]¸0'73@0,,؅sسAn x>lj ˛nYY%J/ۊӳmOYRV2lDk=[xDy?b{sVJ \o+4 >l̉ɄlJ!SyY&؈:X?-$[ayNE!FNBaav0.@g9%&U8f0(`hu"4-sHJsn>@%D4;Dv.ǜ3iO!ii1wk&BbW9&ǃ.ptHQ6 +0&k tqH?.W6 iaQVD< ӕ1g8uFxt r= lS&U"RzW`ei}iJCeRR`$}_ihBRQ }m/ڼj%HdF.=sGáܑ Lԅ$̇AZzk-Z=|l?31Cgw+o%.Lii֠0ɤ!8:6|~<lMwҝa[v6F>84"u[j|ZF$ώP^mǠ”ȉ=}p4^3OGPZa_ C]`$Ӷ!F*)(^TLс4wcOM/+uuAPTO$+.]EwV/rn]`iX[='pRK}qO1FAMC0 \z-YQ.Oϋ]/tt9Yfe!t2׿;|Dm~\ZVR]&o~֭!jB9 ;rDof._맵/]h7I)8SIޫG1V9pq]ZV̽`2&m ^qA5H]f? G8Ѓʼ6OF˩R`Rqd8bR!(C>Dm_vr':ԤGqѼ8B(4 :[SHJ{SPpo.ֿGkJ5¾ .AhQiI4Si,U, 6Y}e/p-)Wj`٣U2t6hB꼗Dcs")f ܧ7bMiҽڏ-4zwBS @ahrk(r>'_c:XTW͔ʔ3?0ykRp t{a$M ފAHЭR/Pɤdk wNC4'#h8{jﳕᏑ:Otyέ3HtAMEs-Src=7mH& lc-Q=: ;I}Tq[`?r,G &X)C9 UP j]5hTkk2OKGilJ)oP5H/Jdu 9޵v9P@CIZqm%FC^'i'π\Z;[8ӎpNA=(%SFSh8g\x[w}*ޔL\OZ5 W 0LTЙ@V2ut>Ow6ZZdw/-qteO3*~ÀKB+ dĞ=nW=6 owKPE vx5P{u "1іV ='fyOw«23PSԙ ]H9TG;Y򵐐Nl"/-%NF&ǸE^y69R VPg8rXT_0۴Nq78o<>VSteC4*9\q3OX믥BE m/^+s !bIJ2!Uj8BCE=S+75(@Nd<|PMH;rQhhzv H*" Se (U1çt!aJ1iGXH$-Ei7!A[ YeJ &3fHc Wg? L+󧳶`$,qH֩˾(yFv"D7Q"[k8E-\h$TcY"UF`Pe+ uR. m^wq`H}mJv{᪎e{[iJm'OlgZs%Z g9"+vS>pr0f>1yu4!\OZ4-}kT-j4QA_|c5EѴܨg)ӋPOA?1Y0Cǭ:}\+"0iaBJ,rڻ:ha 4ɍSˏe3_*# -+RːrP@΂ sDmEBp 5-§bZh!}W_ 1ܲItɃr8dj*]Qy  HVTDà~*]lI59? $BV8U85a$M/pAkdm7N- J?GnUǙS&LEZgᐭZ)gӶz {=l?3l9Tqbi"RЇ9U;p []8c׹&o42ouupI9Kc38 aB k9t>Ks#nj+XjzBڍi@fdp o# Shb5 iSWCT.#43i껡)m͈}'KN2,]T9n"]qv,Q i1|$j&<",&,~H 5\;I9G6NrDhpoz%'V9,f4͏F4cWfalG-b)*O`]#6|G2qsͨsSε${|7FqD#aH@?3%@kB1ڄɾ7&!S%UEQKk֝W rR[ڼIWCs+|o$H>f8?䦨H\y$ξGuս- ե~(;|=hw#9:v_VI?eI;MjntJKhOwIɲ>nT˛)aP1 FsţAGMqxu5Pg՜u+DcC_fR$MЕs$N`Z>!d-9$&q^/sR ￞i<Ʀ)]a`H-ZظO6>{ӮLk=""scօ}!qR+ֵ%3 !&Րsm{Hȓ9 V1BխQZq|R9{+bTM KLwQL:5pzOv}BhH"s)Wlluqb45*+̈́zv+n$04l 1H)=Jp~~o m XI./Nq",!V^qv-l+&q`XΞkR((z (`h6qS*7cPCњ  y&ޱLlyvBX68zM [1y$2o9Kg]ĩ x](q ?Jo=rGl6!q E*K*tN۩Svo&\vPpiiy)Yr7 yZ4ST(^EJֈa@+,L5V3c3ayclKr?7Tg؍X ;ӦidjW f=](7F ?GS;6Toܩg6`-8 7;Cw;G"Km-|BCaGY1] lNB.6Sv|о+3k}|xm$8C D4_&=|aZg@R18SvO`2Y77EHln]E(m?X cW_09u&Pѵo%;򳪆yx ouv[ H Y~ (B2%MP?+.cGj 끝"i dh+?%`Ak+#ɯz;0A]tLh\. c95G}#mU HQK1Ng5G"Z>rxMѣq87Xɍy/ ^pm}[I0et.r5#i^zzYFPa['1:;F%U/ v\­B<bhsBKm A]Xu3}a'iVPCo Q\qh [R4xPɶ,M=1"w(\JMּ8%r+v# lҜCU'A2dxy; p9THTBNWs#渀HV [#KAφbmҨkk$.cIQćBA˙vZg[TuĘk/WCڧ!vc ʰҋMOш? AI^O /.`zך꠾kO 7,VdΝ Xz[݁ `OCZ,hl\+py@-Vj IOI 70](iO~cLϸgP{f2IF3~(Orژ -K21.z`TrƕZdp4a *d05h;IjhÖ;A?.ݾ{y~L#K84cR<Iъ"n>/K'xrT<|gJ6qR8̚)ʗi4,8|W=`2Z1rd cNT Y=*r#ҩ3Lg9z52TתCjk['SRRfە" KTUS?(s, _pQńx>H^uܹB{UciCN6~-dOؠ[ca_(;YM'7[SZDt]]T7?ddgECXKu{j!\qti\0EE|u ֶ,y8 v>`"`;bアu_pbۆ]g߅mLvJHvETIRgMš\nxj?5=!'0&CԦM;DZW.nX253P="y՘|jg(bsdWC+ЌݾGrdwJOm:ڿ/q6o J/4r|x(NlǙaՅl'HIpHw$3,ݹ}tmΦ6h?!t nLEmC ݕ^dz\Y5xsAF g`ҬO^ZgcP@xi_5,(b?fZz~'-ޭ"Aܜkqb7Ω_Zz Y\:$kO1`'ąÅ)/pYSAj %{eczC}83E8P@@b(*VLQt$ogM4uSھ'X0 k~娵Sέj'):\5@N왱5%'#p$$j=e f y|HH-* s3-mͪ I'qpBC~_=FE8an")Da$4 yp]1\]%g8AnsAkL"p"+swۍ˲"N@u J.lٿ84Oܕ4$tD!#88x89m9/,M@-c^e α lRC|!6}M> 2'ʣrłJ_9kĚz U0WV3 D'Lr)~pcR3F7<|Z2nnrxEPEOU4!> ҬߌEsp/US4Ǹs#-Ae 95WYόS[Q[ku%23*6=nM9;69 4! qtNy8 <8zsсhW✉EWLus_V0Td9w˓:;Z#_!辡HTd(p $]掴zO@,?',B˘ gIF 7Eϻqojwg{KWky %oq'?G_'Eв%'Aβ&rv}3Zq'=k \DtBG9w*p?xol`aDuQsi@ 3fO )KHqQt'??w j_-׎I$0xx$G>6 A{o`GkIc{aՎ. >>%~lef]uTU榠Ka=K]uUeptN9rN{>UxɤqY[ϰ;?v5K*M`5P5nU $d3!isҬh[U WOK gπ3yya݂{SNj.%l} ѝ U1Sb)Ϥ z^oPm4G3TGBI-`mdwT RQ?8ǘ|P}6[UQBgrjVi"(+JcnU>%F\kG\RT d5ypTHr኉i,mWu%K ϼjRlp{D0`I F ̘v a攟cZ*)--NQ A My;$VtGi*k}`O^pkˣ1-%;JC ;{-g4s|gáAOnPHOPČ5( lh[WD3$b -›AybH\+m<cQ=ZO;^]eD^ōGqk?$]Pj5BSAxLwfA7 *0@gM{~3uF]je͸${#ۆ0\O*0GJ{~wwMbP-/#o`+{qɽCA^ְ+yY;Eon6x߄vQSsӄ QՎAՏ;Mep?(5Dݐd( u䩫7bH#3#nNJѿDIdIsvIs tZ JɜWC7sW;- X2=O|d/xvU%7peTYIFfC엦/iw~ 剱5kqC+\=ũ擯d" J^e"G__@ݩ%B6lx3 rp1l\kkd"sE·?4rN-N}yWC$\iXAbT;.vsAIx`['J֣l}I*j ѭ{FR!7k}(H%id2Xq^S3)i"V=N#3Xpx睯 @LϞ-X`xьYe09iψ+y#Z[J99 *Vfh+LR6C^cqД,:[#[zS*Ath 06?B^~Y/y}S|§lXUǏTgƧz0na rpDVa`)/]r#< L(Ŀa#d%30?Z, aO\?ģOb-mMcή@]q7zk?hV Re :/$AaOz` e*_,Hx]e&+)봪uX*x3]@12~vTT-WyWiEeF("VGMo3s6DjoÍ;QZtݜuk%[,I\bՏ4p@%qP:<,۷iV E3حD 5`i1=O#R[,Z4jX ]zf7[1gR4 ͇=t\#GZe9>NggLPg[RУX>hTAMz g4o'jmT|Ȗu}qyך%ۥws~9J"3_x3Zt7 *E3Sڂ`oG2xit< 2'A͇t/F(w%}c[|Q7# V &5 lgiit; Tc6(n5}3*V5T: +~sTS+cy% `S|,N<_yY]O8nɁ;Od #'d thޟ~ryz 6'}/X#[ш}lV^18ۊ 2Ղ)rZ2jº$H,lX!yS״pNZ8ԐHəNݑiAl$/C&F|Smߤ XNqi$S,䖣ZnB;6Q΢-`Gqk e"V!jg>mvXDT[LK`qQnٹ"8#I 'QSf9">_b JXfQY;RM起`AdB@>w!YsR2I++:2ރ1@E'NA_i˱Y0bg`N%5w "+6vMq[dDvy%rvl*Xۈvq1@X/Cd1|EmEޕ=_GA'd #ȥcl >5CF w.W9< 'HVn Yg}n-#xUS̔0L;b`t_;  ^5HG*&#~~,TDu o4}*=H~ܕxCJƄ];‡@[9[{l XK)yY[m;_ RyS]-?V c ͑M\P+>N9*=X=womGnz }TẄ́/pҴѮ,Wiou]rpV'\y~e~ mo2|*RL=;dȑ Ke˂Te||f/âG;O[o #c}po+'A(uJwzC^l*rr1XeBb[ΡIټrz/O}szm`H|ZTZU<f b9 Pg[ȈLjo~8㫑) >g]VsWF Yrl^G*:ǁ>n#?,gڠ Tnʹ[C8$k sgyNO3Ҧ~ b&:.[ #}GT X>sQDD:KP|m)F9_*jS>*]nT8=3Lrг&d7D41ʲk{dIpв 1;`W* O}RP#ԤC_+b%*'\U$. &66Zuc^o!\nZF&ŝK^,;(ȁvXgYɟ)٘æF㳲БMċe YZ