samba-libs-4.13.13+git.528.140935f8d6a-3.12.1 >  A a]p9|MwUl^ڀ{66K O"^co C,cUYe=ig ;4Ё;.D96O$s1TBOy.rW@]Hj6i4'1PKvV-b[/ARF.(3af0j7e໢~mY. >p@?d ) 0 @/ Ee|j4j j j j  j !8j"j$j''8j(Y]&(o8x9:u>y]@ylFy{GyjH{8jI|jX}LYt\j],j^b%cdNeSfVlXuljviwjxʄjy, zCsamba-libs4.13.13+git.528.140935f8d6a3.12.1Samba librariesThe samba-libs package contains the libraries needed by programs that link against the SMB, RPC and other protocols provided by the Samba suite.a[sheep13SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxx86_64(X8H(PPh(PXxPx(h(XhXX(P(H(XX@xXH 8)I+PP88HxPP'8PP!PHHX8@:8= (XX)(H@(XPXP8XPXx(3!0M'(((hPXH(P88H7AAa[Qa[ca[da[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[da[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[ca[da[da[ca[ca[ca[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[da[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-server-core.so.0.0.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.13.13+git.528.140935f8d6a-3.12.1.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libLIBWBCLIENT-OLD-samba4.so()(64bit)libLIBWBCLIENT-OLD-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libauth-unix-token-samba4.so()(64bit)libauth-unix-token-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libauth4-samba4.so()(64bit)libauth4-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcmdline-credentials-samba4.so()(64bit)libcmdline-credentials-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcmocka-samba4.so()(64bit)libcmocka-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdb-glue-samba4.so()(64bit)libdb-glue-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdfs-server-ad-samba4.so()(64bit)libdfs-server-ad-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdnsserver-common-samba4.so()(64bit)libdnsserver-common-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdsdb-garbage-collect-tombstones-samba4.so()(64bit)libdsdb-garbage-collect-tombstones-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgpext-samba4.so()(64bit)libgpext-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libpopt-samba3-cmdline-samba4.so()(64bit)libpopt-samba3-cmdline-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libpopt-samba3-samba4.so()(64bit)libpopt-samba3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libposix-eadb-samba4.so()(64bit)libposix-eadb-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libprinter-driver-samba4.so()(64bit)libprinter-driver-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libscavenge-dns-records-samba4.so()(64bit)libscavenge-dns-records-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libshares-samba4.so()(64bit)libshares-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libtalloc-report-samba4.so()(64bit)libtalloc-report-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libtorture-samba4.so()(64bit)libtorture-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libutil-cmdline-samba4.so()(64bit)libutil-cmdline-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libxattr-tdb-samba4.so()(64bit)libxattr-tdb-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)samba-libssamba-libs(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigkrb5ld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libLIBWBCLIENT-OLD-samba4.so()(64bit)libLIBWBCLIENT-OLD-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libauth-unix-token-samba4.so()(64bit)libauth-unix-token-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libcups.so.2()(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdfs-server-ad-samba4.so()(64bit)libdfs-server-ad-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libdnsserver-common-samba4.so()(64bit)libdnsserver-common-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libfam.so.0()(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libjansson.so.4()(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.12)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.19)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_0.9.24)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_1.5.1)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.1()(64bit)libndr.so.1(NDR_0.0.1)(64bit)libndr.so.1(NDR_0.0.4)(64bit)libndr.so.1(NDR_0.0.5)(64bit)libndr.so.1(NDR_0.0.6)(64bit)libndr.so.1(NDR_0.0.7)(64bit)libndr.so.1(NDR_0.0.8)(64bit)libndr.so.1(NDR_0.0.9)(64bit)libndr.so.1(NDR_0.1.1)(64bit)libndr.so.1(NDR_0.1.2)(64bit)libndr.so.1(NDR_0.2.0)(64bit)libndr.so.1(NDR_0.2.1)(64bit)libndr.so.1(NDR_1.0.0)(64bit)libnetapi.so.0()(64bit)libnetapi.so.0(NETAPI_0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libnsl.so.2()(64bit)libnsl.so.2(LIBNSL_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.2.5)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libutil-cmdline-samba4.so()(64bit)libutil-cmdline-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.13.13_GIT.528.140935F8D6A3.12.1_SUSE_OS15.0_X86_64)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-libs-python33.0.4-14.6.0-14.0-15.2-14.13.13+git.528.140935f8d6a4.14.3a@a@a@a9@a`v@`a@`<@`@___i_@_|\@_{ _l@_i@_d@__ @^@^^2^2^^1^^Y^J@^2@^&^&]]]])]@]@]]@]nU]nU]i]e@]_@]J@]B@] #]:\ڭ\\@\@\ \N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USanopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2020-25717: samba: A user on the domain can become root on domain members; (bsc#1192284); (bso#14556). - CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID values; (bsc#1192505); (bso#14564). - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other servers; (bsc#1192246);(bso#14558). - CVE-2020-25719: samba: AD DC Username based races when no PAC is given;(bsc#1192247);(bso#14561). - CVE-2020-25722: samba: AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues);(bsc#1192283); (bso#14564). - CVE-2021-3738: samba: crash in dsdb stack;(bsc#1192215); (bso#14468). - CVE-2021-23192: samba: dcerpc requests don't check all fragments against the first auth_state;(bsc#1192214);(bso#14875).- CVE-2016-2124: don't fallback to non spnego authentication if we require kerberos; (bsc#1014440); (bso#12444).- Update to 4.13.13 * rodc_rwdc test flaps;(bso#14868). * Backport bronze bit fixes, tests, and selftest improvements; (bso#14881). * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal;(bso#14642). * Python ldb.msg_diff() memory handling failure;(bso#14836). * "in" operator on ldb.Message is case sensitive;(bso#14845). * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871). * Allow special chars like "@" in samAccountName when generating the salt;(bso#14874). * Fix transit path validation;(bso#12998). * Prepare to operate with MIT krb5 >= 1.20;(bso#14870). * rpcclient NetFileEnum and net rpc file both cause lock order violation: brlock.tdb, share_entries.tdb;(bso#14645). * Python ldb.msg_diff() memory handling failure;(bso#14836). * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848). - Update to 4.13.12 * Address a signifcant performance regression in database access in the AD DC since Samba 4.12;(bso#14806). * Fix performance regression in lsa_LookupSids3/LookupNames4 since Samba 4.9 by using an explicit database handle cache; (bso#14807). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Address flapping samba_tool_drs_showrepl test;(bso#14818). * Address flapping dsdb_schema_attributes test;(bso#14819). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Fix CTDB flag/status update race conditions(bso#14784). - Update to 4.13.11 * smbd: panic on force-close share during offload write; (bso#14769). * Fix returned attributes on fake quota file handle and avoid hitting the VFS;(bso#14731). * smbd: "deadtime" parameter doesn't work anymore;(bso#14783). * net conf list crashes when run as normal user;(bso#14787). * Work around special SMB2 READ response behavior of NetApp Ontap 7.3.7;(bso#14607). * Start the SMB encryption as soon as possible;(bso#14793). * Winbind should not start if the socket path for the privileged pipe is too long;(bso#14792).- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfigsheep13 1636457395  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghij4.13.13+git.528.140935f8d6a-3.12.14.13.13+git.528.140935f8d6a-3.12.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1sambalibCHARSET3-samba4.solibLIBWBCLIENT-OLD-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauth-unix-token-samba4.solibauth4-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-credentials-samba4.solibcmocka-samba4.solibcommon-auth-samba4.solibdb-glue-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibdfs-server-ad-samba4.solibdnsserver-common-samba4.solibdsdb-garbage-collect-tombstones-samba4.solibdsdb-module-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpext-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibidmap-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibnss-info-samba4.solibpopt-samba3-cmdline-samba4.solibpopt-samba3-samba4.solibposix-eadb-samba4.solibprinter-driver-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibscavenge-dns-records-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibshares-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsmbpasswdparser-samba4.solibsocket-blocking-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtalloc-report-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtorture-samba4.solibtrusts-util-samba4.solibutil-cmdline-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.solibwinbind-client-samba4.solibxattr-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:21699/SUSE_SLE-15-SP3_Update/08b059d7b5a0f63758fd796f8b3745b1-samba.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5845bcf443e35d1cfe7b83c03e7d878644547986, strippeddirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=557f87e7261544e20401e1b977cffb375ee0c9ec, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4664f591c17a73f1905cf18d723c283b12306473, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=38b8612da4b8162726d3f57a6d578dc0efa0f956, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c351d6fd51bdc495a0774edb929bc7ff6bc7a96, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=df9fdd430af3fe7a5981146cb22664fc6054f7e1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4f4a1d83d2dc51b1ffc43f57dd2bdaedf90e6f94, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=624d3d8624ef93f37b397c393c4586ba95b15df7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3a934682b83561aefe5a92423f6cc3be973adf7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e7c6ab9375f6d3e1a904974eb04c3379c177e95a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7adc756514a3ae412915771ca7cafbdacb3c80a6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=df1d4726ef31e2c3f61326bf61e2762ad36f841d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d39c1db22cdb78b75c8724999a75d625a826dd37, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ef81ddb1e2d606e3b203b80d6cc18bcfc49475e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=25b6e5119855ecbc7a1b9767c8f4a339eac1d106, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0f91e3915aca47d2b7843ddae17a95a82585d391, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=885ff0b939ff61d3c63ebfa84db0e9cc7922fc8f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3e83cfb1041d722ef48ae26de0cbccb8c1bcc2e2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d5e6a10e67f72ddf1b08fd7b0bb4aede0e8f099, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=36236bdad94e24d75455495d51d0373acfa71b6c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=919024e8ed596ee80f1bd45240db9fd2f59fe90d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=00701cb7900ea492c0dc2c5b2f8ade6a51b415d3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea6ad146da6b64c1958f0e2387d399081448ca6b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b97e34cb007bcec80ecde495ec084b0822d75683, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d3575bb787d7c47056ec16085593c97c44ac1a2f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=95e0aed62be2bbe946ce3997fb39b7028e529bac, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5f5fa94937b740f3299826487208e814adbabbb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=89a4526c4c8d5e3c7c209d0989faf99e73ececbc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dac27e1dacf9633b781d408224b2f913b8c146e7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=08f47ee64d0ec8e6dacad17a9fbbe23a652c77f3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a1ba244b3a2ae7a02eb0e019aaed6b8d88579044, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=10bdf357006891106de3e61e611d1af8903aadd9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=96cb9b1ec270a07de17c1696b4af44e6467ad8bd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7bae893c2bb8057cf21e48dee1f8b6d23c0723b7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fbd433518762f9b119809331bb1d33f08c6b0510, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7483a004f5b97cf2ed9c0bd11a329395bb2cd5d8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3381d6e0c8727eb4bfa7ff2a8e5ed4e0b53802b2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=adf4074dcc43eaa9e49cce1e38cf9634c07bd504, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=948283cb2a5ca1dca73e427cefc5562474b189cc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ccaab07fecf9f8ce45789f15af92a41e1eaf446, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fe2653df261b1efc510fd0a92ba8ad78091d5b5e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cd01ea9cf73b252cb66149a4939e6eefbf8e50f6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8046e602775796c2249fe021ff8922683ea4e946, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aeb1f3b67803de877ecc0f1cdf667ea8d7e9a909, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=74ee467077243629a3ca2827dc73f91100ed1279, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5fa6e7d7f3fddf46f381ae5ed6c92ef809e8e5b0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=76f73576c85411302ba07b8584a487cf0795c6bd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=66d22200b409ab5d549f5b6e51bf2c79c87b28ad, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1a522c47e8ce7ffd218a961f80ff7f01b069b9f7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=def386566941f20556eec2afa6c63d0c6c2bb801, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0fe134b4cc39aba1fe366107494affd6a905566, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb4466448fe8f62cb25cf28efcbf5a669627893c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6e80dc66f99a6784fa4a5155321c4d8802b1c38e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3489e65e76e3c035bcab4b928def745457cc4044, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=55861193a9acc0246972601d8f57cac863f247c7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=287287d65183836aa6ce8d30fa671378cd4af7d9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=29d9b142e7263f13c2a1d361a21b591876cb3cca, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=93062d46a25606ae8a24a0b6287a013bd3f9a8b4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=88a03b5ff072ea48bc884713df9d1f977df89db0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f5fe9603a6cffccf1f53d995e825af4ef7ac5c9e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ac78441224cccec4da3d9ed25c5819426addb3e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f8ea62dc715c08bc1c1cb3753e71db7bed183b53, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3070558ebdc31fb219f5bcff53ed659a1831f071, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1def338afca562a5d629b3fa3448ffbab629780e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=26e6043d320516ff697c95acb7f2dfd86bf2c83e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c371399c368108ab282b525d7f39e0773eae7b76, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9111c00140966dd07bc88b1576d13924446fcab1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=766959ee8522838b9964cedc46e9296849f7c384, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e846e6928ad2a4ca5486fbd823b7bbccb3da2e03, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bbbeb436a0d6d08dfdb33115d4a449c4f268766e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7fda3d8d25f3ab7c4d5a01af9857f59b0f8610aa, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=29780fe1db38fb566be5de3c6f3cadfe9cfcdc2b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e26004f2c103c4dcb5a1d26a1759dbf459f0988a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7c392a90016912ca0d165b6c3f243495f88f554f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8580d442958fa1b2c85742acc6345aafaf19e1bb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5fdf2f917c5edad36ff6efe2c33ea3db98f64f77, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4960309f152f88519cc766dbc67d1ad86dbf98e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6cb338f4a0d9d31b1dd025ffa7f427a3d26e49c7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7a246ea1246463fa715d6fec4b63d45ff018fa05, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4dd214149c14782ed8767d2d41928ad612f87df9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b09ef23040e23b856253301375c4fa9cdaa2f26, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cae0e2c29907c2afd89c356932ca6142efe0fe05, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9421b3d0e21b8c529bfc582dd06cc3d14711ba5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=01b52badbd22844f4cd5ae0542ba7958b5e75609, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a18f552e2ce439351a40f9780f245c9d112fc3d7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=10ba7386c34e8a4d6984a609b463a15ae488a7c3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=00f612459ad5af4c2a0f203a0ace2ac2d56ff1fb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=43607e6fca3574f6eaa090b5cf2dc844fd527e22, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c8ab6e2504e0580de19d24ce595f08b3ed8c4f3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec429558de5d50694b697e900d1571107536a972, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e29dfe6c4510505b9d543c3d28385f15f2b0859, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=695da4f96329e0765b18fe0ac638d16b92254a0d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=874a60c9e0f930aa430b756cf80704f0da24da93, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5a32862f853e953f63455f9b6b49afeda3bd0593, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a48079a093421535feb7eb24731adb8adc91efc8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=719c3c3fe03ca06f00d8f4ca21de9fcae5abbbce, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a280d289a31123718cabf65bee368b9f25983d49, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2cca6c500d5b0751c7e38cec39f5c368f259afb5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a46f8069be16ccee5ee46e9f0fcae96a818b772, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c28456b076b487301e38a5b3a4a078e7c9a6348b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4cd9b4fc9cddddef4d9e04ffb233feee70f21b61, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b941536f41f5aeaf8734815b7b4349fc0fa06dd6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4e0ebde377c29d0aefe3f83237421e066802bda6, stripped'2DW:K4`8Vf{ Tq(/Gv !(c ):^De  * ? H L V ^ { ' )!?K5)&4, '  0*>(?#/!<#;  $*!1!..   ' P;P:RRR@RRRRRRRR$R%R!RRRR>RRRWRRR?R=RRRRRVRRRRRRRRPPRRRR%R!RRRRPPRRRRRRRR%R!R RRRRRRPPRRRRRR R%R!RRRRRRR RRPPRRRR RRRRRR%R!R>RRRRRRRRRRRRRRRRRR=RRRR RRRRRP PRRRRRRRURRR_RR6RRR%R!R$R"RRR5RRRTRRRRRR^RP P R,RRRURRRRRRRR*RRhRRRRRjRWRRRRRR]R(R%R'RR!R$RR)RRRRRRRiRRRR+RR\RVRRRRTRRRlRRgR7RRkRP P RR"RR%R!RRRRRRRRPPRRR R4RR RRRR]RRRRRR|RRRRR9RRRRR%R"R!RRURRRR~RRWRRRR}R R8R3R{RRRRRR RRRRRVRRR RRRR\RRTRRRRRRRRRPPRRRR!R%RRRRRRRRRRPPRRRRRRDRR9R%R!RRRRRR RRRnRR4RRURR>RRR RR3RRRCRRRRRRRRR8RRR=RTRRRRmRPPRRfRRRRRRRjRRR%R!RRR_RR9RhRYRR8RRiRRRRRRRRgReR7RRR^RXRPPRRnRRRRRRRRRRRRR%R!R,RRRRRRRRRRRRR+RRRRmRRPPRRRnRRR%R!RRRRRRRRRRRRRRmRPPRnRRRRRRRRRRRRR.R%R'R!RRRRRRRRWR,RRRRR-RRVRR+RRRRRRRRRRRRRmRRPPRRRRR%R!RRRRRRRRRRRRRRRRRPPRRRRRcRRRWRYRRRRR%R$R!RRRRRRRURRRRRRVRRbRRRRTRRRRRRXRP!P RRRRRRRR%R'R!RRBRWRRRRRVRARRRRRRRRRRRP#P"R RRRRRRRR RRRRRRjRRRRRhR%R!RnRRRRR RRRRRRRRRR=RRRiRRTRRgRRRmRP3P2RRRRR!R%R RRRRRRRRRRRRRR RRRRRRRP5P4RRRR!RR%RWR>RVR=RRRRP7P6RRR%R!RRRRR>RRRR=RRRRRRP9P8RRRRR%R!RRR>RRR=RRRRP=PRRRRRRR%R!RRRxRnRRRRRRRRmRPAP@RRR%R!RRRRRRRzRnRRR>RR=RRyRRRRRRRmRPCPBR,RSR R RRRRRzRR%R!RRRRRRqRoRsRpRnRRRR RRRRRRR+RRRRyR RRmRPEPDR!RRRRRPGPFR!RRRPIPHR!RYRXRPKPJRjRRRRRR9RRRRRRYRRRR4RR%R$R!RR_RRRRRRURRRRRRRRRRRRR RRRR3RR8RiRRRTRR7RRR^RXRRPMPLRRRRR%R!RRRRR[RRRRRZRRRRRRRRRRRPOPNRRRRRRRR%R!R$RRRRR]RRRRRRRRRRRRRRRRRR\RRRRRPQPPRRR.R*RRRRWRRRRRRRRRR_RjRRRRRR%R(R$R'R!RRURhRRRRRiRRRRRVRR)RRRRRRRRTR-RlRRgR7RRR^RPSPRRR6RRRRRRRRR%R'R!RRRWRVR5RRRRRRRRRRRPUPTRR RRRRRRRRRRR]RRR=RR;RR\RRRRRRRVRARR R3RR/RRRRRRRRPoPnRRRRR$R%R(R!R'RRRRRRRRRRRRRRRRRRRRRPqPpRRRRRRR%R!RRRRRRRRRRRRRRRRRRRRRRPsPrR]RRRRRjRRRhR%R!RRiRRR\RRRRgR7RPuPtRRRRaRR%R!RR`RRRRRRPwPvRRRR%R!RRRRRRRRRRRRRRRRRRRRRRRPyPxRRR!RRRRRRRRRRRP{PzRRRRRR!R$RRRRRRRRP}P|RRRRRR%R!R$RRRRRRRRPP~RRRRR%R!RRRRPPRR[R2RRR%R!RRZR1RRRRRPPRRRRRRR%R"R!RRBRRRRR2RRR1RRARRRRRRRRRRRRRPPRHRRRRzRRRRRRRBR(R%R'RR$R!R"RRnRRRRyRRGRARRRRRRRRRRRmRPPRR%R!RPPRRRRRRRR%R!RRRRRRRRRPPRRRLRRRR"R(RR%R!R$RRRRKRRRPPRRLRR%R!RRRRRRKRRPPRRRRRRR"RR%R!R$RRRRRRRPPRRRcRRRRRRRRaRRR"RR%R$R!RRR`RRRRbRRRRRRPPRR RRRRRR"R'RR(R%R!R$RRR RRRRRPPRRRRSRR,RRRRRRRRrRpRnRRRRR%R"R$R!RRRRRRRRRR+RRRRRRRRRRRRmRRPPRRRRRNRRR%R!RRRRRRRnR>RMR=RRRRRRRRRRRmRPPRRRR RR4RRR$R%R(R!RRjRRhRR0RRR&R(R$R R"R%R'RR!RRRRRRR|RRRRRRRRRRRRR R=RRRRRRPPRRRR%R!RRRRRRRRRRRRRRPPRR!R%RRRRPPR!RPPRRR%R!RRRRPPRR%R$R!RRPPRRR RRR%R!RRR=w %J)_'u .^- bۙ[Z:]|ϢS@Rq[GU9ή6 'O7p*$v6¨jHK+HbYxVEΝJ smo\XſˆÙ"22!$l1=)/jvg,GQ=5j/V.LpRJǀp8V5c4H`d\nIAciVJ[9r/ 8ofّHRqSt&*a,2l5sYC¸yl6u ]BgZxiU5f7w)PA j;X`mfr ܠ]vwtcˣP" k[ .Op%*uDf؜+NW#G$*#p7 1UC0CJכ_xtfYSƢ{Q6I icjeT;h(K*-|vJJs0|*_&ܖF%cF1l!~OhQY}S(hZFMO̮n}uZt`2{(2j(kh@R!DpT m |5f lUq.̣xPHvSsgxA,l^K ׏ j\O~O{H9 (t' B5hD&gϋ%Q9 濳ʞ ҆_\ia_zxo;^s ^tBƛe dK,+>YITG(]:ECb;"ʡVQ_QXcꩯ] ojhyZ>f$bFk+ɜIc5Yfo\OadrO1MkQꄃzT@:=yOfȡyB@MY1 Am9T74WW٨0PjLCWTF 2O&(l0E xfI>Jq q3$7gM w衹!߿ B8Zwُ./I[֚1?dH'[ch0R 6j=}iJk;g6apctb>jk+O :zwevd.<=4wG5SM]VK)4TpМ?sݥdmLm!<2ۄD9 -`Y񴲆ԋS]P'zdڛv]F;e~R[-0͜SHp5.Wus!O>{cV`.78(8nykKeTAwN-/vU4T0, Ԟn2B^l%^mla3-VV]Cʭr}'LrSE9b}7xjn>Gۢ> #<r7WvpM sK]z\Z S]ɡ 9 3Ť`ʏxr`}mKfbQ:$b"4 _HF-F/$NVp|PZxzXVj41.RU4# .x7BUf_vW2?ỵbF )O5qJ9yf]ڏ`P}Q+V;G[WHT+ I,>Ic8v=L'G[ Q uMus+Wx#w  *ZrMXKgL o]8 <,Fz)vKSDnuMDjau ˲J5ZYNH6o-ע%TC.v^cEF:/4 &\e {r FI1rA]xH>I*!$~mX!I-Tt}=w3iq]쌳a?錆a._ LEΫ}MZ*)='“PTUJ8uL,S p)QT:թU-;.:8UM>zW8Lĥ"`eg>\sfMOqDohu 9=W  (<4NDQt/[\{0|Kv*)֦j>RMfu܆B;/Ngڮ;9(FXK@cogJ0_^|[h1-nx+m7SS6]ϳl6 `;a (ަÓ&{KQmbz͝ޚM0Ժk5B镕 KY;t`7$Pſ\ dkߋ22''&Nw  E;t(#]"dЁ "-@?x$9U_LRWk77oQ.) ح_nt$ΆH[ >TBP4xRelwyuhI.JGQjVe$cUh`z>kشj`M;Э i0Tas0q- > >;H䒐0ʉ7%X/rB g Iku.힝דuJ8Ʊ1FՅd 20 \eKSNOU(=&no_ Q~qp8B!/IV$/1b*}P@V#tqd=A]|?YRtrF-/j%`]&Q'T>{Ҵ0]E` #HHjvC' Tn>6)\%" g#% ${FtA$KT[+aoTxH,[wьGDDEB~(o6W$~ ]ytrjKFm?B̦Dψy9Sqwj[C{3*0avQ0!*GKrQN{4&.z<S!^^i5YMx*nhI?xw[h%k sКq$GY_!Jn#QT7E@^e\S0f[Ϙ=2H.U-%2*">neǿ"G +?1 F{-V 8ZZD^Gt~b\[th@c$*Y_H/Etie[ &=V @D4l-$e`׀?(V\]+=]ۺdJ2\O+< KMjHB)IB6K kK$C[0Hv|.%hέeqwb¯Ƥ> ,\Y\4frs~:6s7ӧʢ(ތ&L$i@tbvd hRn S^֡GL_Egۜoz6pye L%*>J# ZA}{ESGܖo ݓ Q:(Pwap30͑'JCr8E(-5SE^xPNBQcZ~#uvgne%'X,fwHŶ҅w.ZW7HI#@r{.7ҰEL~^TpBbjVCRtL6R~o$4eYtH51sŘV΁6RZHhr^nHv(&T"r, 4=:3 >5ߑUJ胴d^|ΔS6zwA3Py1?![Z,vF=`;#|EFzoZ<=Tl 8[w4uciu2KRT6`[U[(NTe'P?N:`eyĹ2~ۅWNwYHM^ sMCO~%BhNT~‡sR]ޣC e(2m^{L0@\}De?[]50=-Q;پ*.wfH?PWʐ/eqo[OԤ+\†O-4MbDqjyjtb^:4dfuQ߅`j)lɝ N^鶇G)ގ|<;\sخfSnwTRQ$S7 w5w yUwm|TAh˽U~g]kOkmLo&~x#y=xp4%XUϏ,vn/,Yn}6W [ӧ+DWe엪3e ?"8w.k7I烂JAZ"οO &B@T'[cgsCFw]/aw,1y$)ZnKfK0saZT 8j*k7= n`pBtC [EXuWGb3.]6CD a_ԚlX6]}1De)6>*~/mٜ #{Q)Y)t0eI5hmA[aSɔiRIE+1~Qz uD&I M^:qo8< A 38:¥.? nM *[.@2Fr状r;E jN!} $Y6 bb̻T6*'Mλk߼1b^50^ms,EdsS29^HTڮGACeKf뭁,FM@TK:T.Gyح7;bpY~5-tPl 9AG)4g^H]/M.E! jhw\.af}g+)'͔nY[`(]zoY,brZw.u^"e@BųAT[eldeq[)ųwpbd|\2pO&:.b Y@FRiٺ9rj|]FM+ZQhkc]KM <-Gw,5#&<b%ٌȺ8׮Q]fV*10CA+9zo ڠ<&sCMi& ,Uݞ-GӚ2[M=JMB;ST-\h"؋C W=r=L~IăLI%D@wNx*NuQVW! D}K:ɯKH|ⶊoΠ¶k(32pyPLfdHqVht#{&~oɣ#bgKK ^PxsBysX W R S"ng3z`%ۣu5Ȩ:-q;@ }R{326tq :Z#2FK`Kd e>7[z&>?pĥ9녁bj~XvùBXu*W4L-~Y #̡4,RV뵂e+`wCXc̫XT]+sg{z9\fpI_-9M KOhrN /ΒF>C+KpNZqlx7X' ~5ۈE(i1=%ɻX9(cFRMԹ/`fpa!NydShN qE.dƲ禼4KҔ]"p&RIpU׸a~e*V%4:<ɥIħ>D;u `_ XvxpzkϞ6thY qeHK|0ҙ-c)a|K;Y= B> 60SIf$1 +C?2Բx>bK$$ hFߣU)ȸxBnk'_Rv.]cį򫃎.J=,89WnsZ5A؎H>&E%rfbrg6[p2SNǐ4ҹ4׍f9.q*ƨ+Hn$t+ZRKNAg*p`sDY0^>$mE]9սQX !9;/E3=l3.KC@WL3(Y د Ey26s`oUlY/'r[ _ rq.aI.g%wMg74cti$ &fa3qLrԉwDKN7H 76lH?ap/T} ;eHiCf͖ _|hMm#E {# Jl*3֘擱HG'BQr135?Yxr< ~#R{$0񎄋f0\{umR[wD Ȑ9XO=֖ $spp.Ηd2~ñ~beBA^mW&QJ 1oqV"/L^D嵰sA|U~4};?(8H |?0 R@" nu*w~<HoAO-h$Ss?3|x%ĠU1mCa˜1eCurt}e<9E[yle>߾/KMbX˫̍w!vl:HF9QgJqQSli}YQ?6Ӛ[C𻃇P[^.A_I,Xqb덜M2M<#(%~9Ǧ. OxLXd+vV)]kpvb8Q]ڷɘx(j{IZy0cEnEvC#b1Kw(#e޵[e&c*^H_ϯ8@$v:,Oj H(Gk]RK.C_zpixd_þq<;&SžLeP7ؒ9)ZU?9z$u.zΈ.L:eD~ZwQ!O 5*VFOfg~ݔրj!" TD}/|ht4jE 7J&=)nHw~;Q(˯Mڟٟ<=i ;/V)LP[]yR5,]ď(9\K?@P%Ӯ+Ṯkw1M^ٌ's,.Lfc|x vYlIBS[i'ӝ/f߯{6y/l;$Dt5fj:IZ)WJf={Z 1H}:g)h7XLpm'';<\~?V#;skyD2$ .:LG=+tyEbGћ}Jջ=fPmYt_hoɹ&S,>̗'pًF%D)FZUrcm45DyՖt(\/n^"~һ%FSjP;>'BIB/Vc݉ 3r'H\>/$4c~b2t `+PNiuOâ't %D?*iʅtsv/mƎo&Ҧ (4m뱠`  -׭T -H@tyf[4x>o%؜Vى v`7?8ZwS]ZNyTBqXD4v:ԑFA,|ᣤ_#T'3;oa T "`ۭ1!O-Bw_!,3C{^q^L(_^ZJ&1 (3NJC}g^VӉ[3%s{Zgޏ9Xq9ًNJpޚ?ۿ2ʓA*|Scj``c EHInI%UD†~uu2nnPPi,7'C4BPb>I ?K-2m*wB;rqyi5>>wsFԝpGj/*u$urٓ 1z%ZcYQFwy`q\ED.Tzu2Gr椫lQMo̫&K$!?:!k b}lh%#!=X1ar@@~#{ 奺䭾}[8>^\<8v; ^١q+j2ߞ8nF}*g;cJnLI@[կͮIX*#Cp˰@圼Ju+Rr/_g8UJ@9֮l&GsAQ@< jgNNdسǩg:+5O:\̬)mvҿ=F?>SF"Uuַ[fc>U8OƈJŭ;c,q/x8d"d~ 7)ῃa j/鯻 %S 'QTJU3qtI<0#FJs|Aݔ_b>nkn\1nXd!{?㉉rnL`Pc廏5@'CUqx3ɈW7@yX@_D+mM@ EsmhJAbH?LK%0d)r&>"Hdz -}2≇+.3v[3Q1D"hs˝᰿A@rS& OG?}'cM=ꟃh'/9Ey=LQaw_Swwܜ q% /=C vl3y ^>yCAu;pO,&#\M^V ?t! 5]W ͆Um5}?UH-#&T8ɶ0H 3e2 < ".1~>D0HHl` 5X"61ܥbpd\NzXS)6r-yL)&IxɛYa4GQQ[~̳`iOkcA|N`0[ H̋k+u&dEK ;dAAh#U`UŋsiE%x%qAM 9$MZH[L 5E1_N+.uW橿F.iv90aeDzv34uIO @bH$[ѝ1t; h5WqmJMI ݰn,XxlTZT/l>N< J~ :%0iKW/ɔ#i(X1p$89!.k;;.XRU|hYQ rzkѢ%Gk7łoۄ4ܻwwyZ}WoSpQ*f *uYqzdD3*ʟonƈ9OPqW@{e#6:L*6' K<7kcguhmDӞҥktp2gzD+ @&'ｌ;{HiZ} %xUPMñJ+m߲:^5{ *`{~~d;_ MBAY7eE-SnQEV5}ZBq([R,ɨt>E bA"]Ţ8Yn~]\laUtf9oQH5Yq`S &r]0Ar({6f= ~R}R=ڕ{Tfq`Lp]i:Af_NDbGp0V3fГQ9$(7k)UGڀ}ڧ^6!ּš-^G`DCB|rې=%LtdRy!m\nm-I>$DKV'r+zl^nK QAjNsܙ_߳ vZ (?h~DwVE\vzEj,f'*+?ݩ~ TB>ܢ&;a q,KfrwiݬIlR٢qOgl\̧'P.&wiжU2l!\E $⫉xRKk?eŵrFjG} u+"2 )|sG캙űW&]c! _u08OΰFQJTq`-r?;/P22R+9[$ `V9Xр Zs3N}j t C.]:s׎jWpx\WPRI9@m,hr,  \E} 8+϶GJ^@{NCqSGjf- D2V174;!u.\uTjWnxUQ =tƻ) ?wS®+[unq, a!=pgSh]'U](SVp= in&,/{ $Uf< r&+,A/BCŭ#p\)_/ ̲a ΰLl9q}2 D,_IF^8[) 8s?|hm6'Eww Yy u|ӊz5z4\11z6w佧9}́\mq}z#xי>w0wT|ê0&_No\byY<^#9( eJoP.8AfkӐVKjGY4R]{Uf!sq3̙-ՠG|H /h^Y[4z]o\r{3=<`}84ʆPP!˳MlamPϖ̔$dMDI:eC, \q{'?ꓟb9@EjڳًMZo; SJ5{D=Zj{r& e{pmu Z"ߝGΨa{hJˌ|˘j@6_ .B]/߫dRuEѱM4kC]w4i@gBz:Yv]+@$5fM8LpEQ?qGH`s0^(R(@_ `xY۵6eґC&G$x*Cdف].фHMs9c:\ߜx?t& 7ۛRFYBvfբoP'ms.fѮjB醝%+iXA:YiDi@ ډ_^(U & "uA0}#ύY!wuܔHyt݁O@~p.kEwл(MXłDEݨy#=ҹ҈6 ]UcO^FK*TQ|ȁ̏U1U\'uw*F**fygTFfs#% Zr!3. w;]oOa~ TϘLc }<~MR;^T<?WbX'&G@nM_Z Mj =g=y+s#E& ry/Ȭ@+"S+B2 /ɻzG6z&spWzҒ XQ+,7^7;t+b"6e0vsQ)W1 A?=@ɋ cGIdw=A{3`d>&- [oP^g{Xտwn5Hk ]5PR tDƁI { W1Bwc~/$M4)?z??-L5Yu zSUlXԛf`;j^_Ӳ/(3 ]뇹6wX}B͠u gL"f ۋI<14D+*_wqp91*Ȱ(u5(IRkK"Db bZ?ә%S+q7 bjd Kr"x)Y2TOESwWᥱeT̤3S|l;E;ϓ+'bӊ⸕?ࡏ̪dC ztRD.Ā[ KWJZkTה<. ?mc2 ^ǝp5≔Xd`H\(@f]eaiU 7~jo:-2u$HOcQYLf]  yQrEaЊ=>'Q;m;3]-ArɎtRI~/*.Dpw$VxcPWlI3 !~ 㰫Hzt%ɠ3 9Z-fi]!{Z3MN<=/e;c!#$ <==9Wz,ʄS*yGcZkR9,J]Uoi>|nlN&QaDvF]uW͜L]kQQA^A:!o{IͧLt`q5 ;`e;ntϖT; EJ{sYlG`MT`g+ޕ|@&#M,~ap2hb_]V;8DĴBi#dtJp_AL3lyH1pxLO`'{R-9K;wq- ֧91@bt/Tk޻o~x6y{Tgݗ']*4 Ami3XK[( U}ʄwDߋ6>s繳1 g>U{֥.T7w [CIHEN'ɤ Gojyg{ebhe%nmb]gɨz2ǻTI}ed3,`vҦl2*`yΌ0 D׫Euc+nyjE o 6BQss 1O!4SSb3e%GaQzX 2%x(*0fEoT!5]雽or0d\= -`į հ)20j W8Y)mr찘3/M8iaN4F!Wu-f ܎h=~G`;w7;0o| vt ]" 7L5q( 9Ms1{i=~Y)װ%mE!;n$<]_< UރUo-u7UA_>j@E[ L<§;A*S`TvV]rqO 6(5Q(rsѭ1!}@XNjwLkӼtmCpU¨mŨͲs͊-"0Ȱw{<#$I>7e\Y*.u`BJ=n4$nI{u1j^Kw}_DHK |QPw(,#D?T"l< ̠l` 7^"If] ,(C?h+gIu#5`ak ?QfLG "yssn(i*JdOG/=Qzf0>25f&&)*!KWk ̟4[n"9-Z7ߛUEDŽ\ a9it΃T+G::A^9!)،%PU ӡNNC^Y䯼V\6Lbj=K2ۉd:<6m*} `k wٰ%n(?e×Z8y":0=XqXbSѭI8+,OޕD< o$}P|ovnjrD4`D"u< u sP@""_ 뾋 ʿԌ[+oOJ9uZ%hJTEdƠݨ{ΉCu`RhwP˫|S* 0Pkbq+_Jhe"NI[75v!σ:*! ( e a_Xyj(woCM+^ Fsآ{IB]ur1MLNue}%yҔ/KMEpzU\52 ʮJx`cff4M/[4 ?Lo+۝ڗl3] % i++a; 56Z%\gxFB|DgpՎKGQqq@ c7Kg>jvRoNonS;ONEEe5cl[VyONFF.e'WPp y+5N}<,h:^!F y6LLn?X\q<$ fRA>űrL1_W`cQR*c6-Tim_Sp-?#kLk-qƑЇ#Eoڶ׺6@urh1Ev:aʚ^뎶6Hmr-Mj,|x4~֚EP+}H!Bj_?}MS Ħi:y']S?e%ӥ‹S)-z?Â[ 5TD:y؁}`'sfL)Z9 ^Z|+vٗY+=DZPPxXe_w(q Omx+yfE%)>r|ƌFK.~4vbm*Ex.~IR)d+[FaK=l#)?lДo%;6<τ$ iQ"3䦬h\P:vt)Q$>i+5'6Em#c;.'^O[N=ȓnPZ#@CԉgWZtEݕ~^p n̗^r7O l'!3)萳&=Ն3S~|3fw2&;`Li U. # YÌ-+ ]`JEQl2.y?bdjs,!:Dua)Os)ɇ2[:;8(WI]2Zߓ1;eɱ+Fk8bWJ n "z/NYwJ.xZĠ*Z?e'Ή׳eOI_DÌk}.%1Bw^Fj̟ r۩|kKԚZza~Z 9 *: I c3ƈ(yX{ljJuAO\U?%q+t)r(9w'UWC;.+F@Z(WG c$4-$"3:| ] f h!\*?3+Ia*M>8 /`8>wjh ,-$cu!7/\ǬΡ¾fCQ2~ω{Y[$$y\`G Pxwy]'o?j-\HB Qv:;'mGW\ nCx"qdS*"ח%@ ? J0 q`edm @Oe5[> N1{m4M3fy7zfЎ݃ E .bYCř>a 9NvD[R&4JxnT3PjFh^h3?|Zv2t}NqX 3u$r l(MWyL;vr; y< l YG{FA 584jc,[""vN5 "bbIPP C?Pf KLӐ<*5(^b4*lGs{1oc T-yw^]<퇆fv{&T;L>i!ϝAb/ 9ǒDҪLYyX1oc` ?F4l3󲙏{;w(_jImF4UVȩXWkS0#EޡM}_k YB/e_] &[X-D]5[AwP'd]M?꒥ԡz<Ƀ6MUApL)@SE [@lgD]5LrE/lTjb95@N`W3jhk4 6h,O޿ߓJcOO]Ye/Hژ-sCLfrǏ(@qZ0ŧa(\\%C8vY6hHB?|lTI1;* *:ov`? nW3&[J2}[q(KK Pv+aȿCRA F,%Bn)-J˜$}n 5S,<>"?6ͷ|/ #zL&j.uA"X&?`!<멱eGFqh^ivA?:Dhg:kӓvyTx]hWO?f,IW Xg`6l 'Nn]{yM pu"|C`^\ÕEP{X `L1j[?/I86z~KB(gys'koY4tHZJ>$BDV GygLKU\q?ò O@0VWg}3*ϰQF]1vlI-;o-$(>1%-z'gz <'òKlhm%zo3vQtJΉn¡Uʞ>qsVْMҬy+}9tjc /}H mFEp6ʋ+A+-aN7=9ˈl>D Q ~(pJB\e}i`ؔ&/ciAэؠOt S15s#B90=_tI G,t6ݶ _梅z%{VKpt_@D y?XRfr#{EîY|ohzANJ5X*7;Czk3Te)lZ?VSG,NIU>%+j[/{EM ""^7ftg~a̕D/n7N9"P?^8$rLXP3x.lM[WCBt"be#-<ZO t#O6E5)mk<.GEv>#M.S>IB&tO ubmwVJgP3y\ŊeLD~+#o$Ѳ=yiq2 ^Fm־ F&Wq߈Q>WrռpzZjNU6v%Z *ҫYILds+Ԏu[D70JQ0vM7C&Dꑦ: $ٻCFI<[QD,1^2j0_icQ,U Xp~ 6y6qKMwdڙXóew_Nśp׷20wI(tQT ?_ Oi׳~cA(vȌyMSrG@Y\4Hկ>K iOsTrG @)DB6AMJV3j(XGQȫR r ֩,I ^ HJ֑xC20aLR/Œ ֳO6ӯ<.XSuqj¬gϡ䫻dG(ėD,;ꖮ"`-yȮK~Ѫ@uEF0:K0smk6uGٰy(8.jqPEZE҄=ɺ_XrBi8?YwVkXs_ \c;=BQtXWś-jxPq kʣ d'A\@:Z(oy)hdv]0nZ{n­+3 Р2ZQMɋK6Ul@*\~& G7b'MyY4so~Y7&*R3[oλ–jo\;e:]/K 45mifMV:&AC1<"G2b[ OV̈́׿7:Aws /3SN$KnyzyB?oϟ hȢd񢙌DsўuZhPm˂ ؆(h!ɈG`|VUBqq>I6U'X4`;Za1ҹ CWVV8z(\nـL1Q6L i6LtZϣ9BXޖUX\_:jL\?G*rC|D\,I4Pްޯ6Pz9d6W`#R&kY ;_ElJJӺ*U?#u[Pג1||EVg@Gӯz׏U[@7C휁Vu>s>d9,QI0OҴ~1'$}ZAwU.@Olz];BHPl2"re_TtFM7f|e3?_Ejb„7UY5F?O'^)0FB}/l Ӷ^YRZm7AiY׸&4VPpcwC{ ]c3Ԇk. Ig-tj>!vI 1tvOG }!6w`VYSgwVE%k4lP Ej4}dD)9 +B~0ڔGi5OS ӛ&U֓O_yxhP/40r=Tmg9#2"\L;: 6S„,edsiɗŶ]YtEz6%Chyqo sFA׭[o:%u15Rgt2uUlux_ Ai|M}ž! oQ\iRxH3vS&BĂkG!YSUq GeUdP7Tٜ ɇ ke덉,֍GcQ$AS.I !5t Zv4YQ)X\`,&\sHk6.#DD!7Jm5 4=E/yo8'OK(9[1SLC&7woe4TʯC7hN- z?\\ T:襧5,k$3 -. 2ލ({7۴aQR~iM+aԬ]+}ae>,f`xLWېG""^t$"֗4:?)"zXVZz Gf/tyYJl7*2HwɡP59y HRktM$X\s4Ts37?!a;(I!ؐf)x ņwygS <R]J?)jCЃ*p9#@f FV]۵(# ff?)߻+_Kq䬣F_kYgEZ@9į<ٵ.1BLb6Z]( $MHC-Sqh\Ѥea&\vK7==>6J|mlֶDC֟騈5!/ߡ>+09sوߊy~H8t1 m7?MZg[&0_yTzwpp>cI[W$%& yFبAǐRwq4q4% ; Xvq F.5yMQ(DeD6?A:9hĥ )l pdz齷D5nXKxsC(wV{N:Kae3)ʥ=J)ֲƐ*R;7GRhA*2hމ,6aPR0vxrV# @ҹ'ԊHbga7{j>:}]]>m K+rZ2e- X`T:8FϰUWs4Q趥$lVK0q]СyqӣZ+τCb!*`xUBF(1@ Pa,pOPP|zV#|Fu‚'q/k~̑+5L!z|UScřMןvu ͢|"(ES*]R)Ձna8SSS&ߙQs,N3=nB(BW+7!oY}r׃_%yEL;3w<4ڎ#Lxv=h' c8i Ah."'*T׈I،B/8/7ּĒm "=ESRDOpk#PaxEqOmJJMh>sJJbhE&l1yUfu8TXl_ug{CghRz+<_f)ﰑ>Y3u+w՗P<}tc8NAL(!JzP|쾓y] Y̤FIo*uv ~b&-HLqWGt2k)fh=˄Elnҟ%TOP,k6EA%qb``뎘A,wJܠdO, taxl`G3 δ`˒aSm0c!7KgI+x/(Q6(t#M*̶vf g|n*KU35N!F#2wO~p T~S,?,Nڂ؏K6ߔ掲-KQU}.d8jX=9D 2TEdMsk-"A+ߪ-q>n 5U։B ~-Ҕ9;7h( pikhqwM$2Ж,azEI;IQ-܁_M 5?|3?}aZWFvTOE T&OfX +>Ͻ7 lViJTgFI1ѓ ˷Nef($=]a0YR`nq w,СX]Pp8i@rlrfb!׿dO4< ^k>4si$Za}V.<g ҒN-P٪0D$ rI"L4YjD]0g~$aEZw%ЖRLkJgÐGo :xhHX az] I@l`gB:`IBKfJHi=)i^1FYD-nfb1lQ+]~(K2|,Rr1n64BPCAZT]0Ny34=sIn~9袈+/aN3&ֿ NTs35zF)vAFQF=Ji733ZmSHDOLTWx342bȁ*bS9Jzى8ضN mbZ&ߌ UaWLj]|v}%oC&qgSzGǁm20 olϗ`pl}p[k` Ǝme/9B q}}M%뜼ICmkbdE b,I%TQ=q%?5Qہ*|Ow<7hd[!iy9"8Jt$2Zzxi@j.G3" (T5 @= >WnGgKlm⯡E.|j%)`]2(V3\bQn" *|JP +qv'( hqsJޡx6n_>_ uگ 2AaMPt|u0~PB"bMuvyrˁ5 J0 -IùMIB('MuM'ܚ qm3u8QL V ϟ' t߫(G!}hDAe =f%h2jnS0PA@wXDbG߂p!ooWCqN@}zbXQ\):xvn |9tG,2$:S p&M@2F@gCWk@0:)Q2Zq l% n@6~^G$:dH@NR^W z\}Jwy$ +2XQ|6W;?AsfAr Ehw C2=lYνz6m_~+*~h^:·Dܸ#35>~!ڷ^3'H-U>ꙻ>mѐPԫr QԇbOiƄ(l8XAhkچN7=Uj"e%F=KOz]`G_unHK^_n&E~t>mI`;`/] Jljy/|@ϯykQזt$>(A}Ÿd3*y@cpm '2/nOG}~Zgg;H@~~=QKbߖx+9l x1I[HaPCߢD:Y3۬Ə*:Qn,gf:B#@< Z%`$% T&7'(JΌǭ)5/C6R-(z1ױ\~'+"\pxЌ{}s 0MQ>-w0̘-޻fr.e8c[rp5+V(E782vWJ␹)(FXB^BzIk/R= Z2R5f|AeIYX8^Ė0q ;l4dȄ}W($2[;]sdb:5GqOZ2T+vՋRJe,؏2\M⺫3&KO*,Pjbg\$y#HpQ]I /hW#* N/*[BtCu$;mNqg<Ƙt=gU~P)=:K&|*) nP~3 kWK";׬T rf3xk+G2k ('F&"q=hbH!lP#3a5 |i+h|.Ha<*\DI&C}LSH\$pZcE~lcC.,J?fۦkZ>t{Nuë(Nѻo%3q V^pEfJkPUd:~m-<,gēsz;e/ZngiQ musbsH+?+w.=g#7{ z̍w]aU>1|3km9-瞧Eo%}x~` n#e/gIM"2iv]<9sP݋r7e KBG~S`F3þFjIڅ^rQP.`kNaGlL 7ŅBG*f"Z^X DQ!l\0Ux"ӗTXzM,=pZ͏Yv"R#/俤*ue5l  {^c_‡L g'IJ-)1#hW]5NcU&Ҁ\ΠsV+H˙54'Rwj-1/5XJE%\ }$ͯ>oN}p9&0Qo|b '?>+!a;-јDK0OqW}3I|N Kƣ85=wNB^ 8 UxM^ן N1] 2SCtE4όyE²d `(.!{ 2Rߍ< Ǻ;P80åAG8S{ft) +xNTKHP.gUByl%?vZri@X\+簸gHqr \LZޔfTIB*CG n ;g`AvF']z8{aW9X0Po6ύAq2'N$r=3\əeĄ:MKs@{iD|Sy֜h[K.;L>UneX?&!%rU,L% &}255N4Q F'f{~fɣ(#o/;Wr?a-ZM0/u ;\۬xK:ްZIӜ h7ܿIoxmڥ0#1Tz:%g)Ǔ/wYg-Is~4Q*Xb [ce3]?*(5":hJP8ʫL)d+yäKBa A(aPops̷֫` ,g#@S ;hc0,I+mp943ZͩQT^x'8s(h C/5*M1 O2>tҟ k\ ^`8-vx97YvL4G9 ڽx !`n& )R6CïswS彽 Q)ejR 'tv ;f%i }/EڇrD%ϡ3ZJ)D]Bô#I\d\NӟoQ)++O9P & {Cr0ma*:Wwe4-1Ryc岞[z!TF4P˚^B2r(ʮS3ON}%-hw)qDf 4FkoBixA, bC \luxm e6#Daݔe(Е.SHo4xQsXnF$Hϯs[q&JZ v)GN f4R%bIMD|t_cƹh%@o`EK  H6.쿜G}J{x&Qj㕠qUOkf6cwu"~6W?{Q\ZxQ703ug#mϻL?.cYf:z9uB\AK]w #R(?6袾.O]vIДf'/[階)z%ӫ~Rh])ȴӴ߾#<ϽJل8SiCB] `"` 2 Vo,?&QH+W|ȻOMDcos y ̭Uv^B$ޯ1L:lQPbTz>s1}PPnw\.1(86XA")'EI{=8iwpz!B埆[ Aq`LeRQW޻Ŕw@Hqkz~h䗓wPC6UI%}yH˧xw %],fI  dJO*5u#$YUS .š2lDiI  8%5pC1 ɫr<"SsrS}SMA, @4 =NJU u#:/z>{+.o Sg=c$I뺹W8\gYF4v0`ܴ!z7զvf5y+[IS``YO>|WrFDy.j*Dbk-Np81õOCxuV'֌kA¤>4NNmY|0{[I a.P)xDž(mY"]i5g[{<#M]-!P*y j#H' B7֑'h¼a+zӀ0B͹t G0z=&ҳ~\7$!rrސ̓Oh<̦ɡEvy=Gƨr@Wl\q¦_lPS; (FIv%Ɣ_NR3[g:24fQc!*>c *ʩ?  v>{` X'%O7BifMn`T -$Lc y|ax:orG>WUm>yTG9u )Nh'^ ';I(XLٮ339L]8vtmxi[D?C MטU (Lê.PNC8p5z ? 3GgyުQ.:~Tg)zPr8 ;6+VdA9wj(} kVw f2kuxSvf'Vҫxj?]~EEz2Dzmҧ¯B ^p [81 +R#*V g\̴};:Zv.( g j0௓=mu$Щ,k7Ĵ{gUb [BULyf0FR^iP *D>MWDyc*$'~y#QJ'H߸CYb$Ar7+M80+Kf,\ , m T SBǭ 07kCU?-"հ[V.4<.o %(z6ڼTj!H:IK  g 8LAM$B H LQ[HUxA~|1NğKdy _m!6 Q# 52\9Q!I5Ȏz¯ȹf^kSTqzVU\yCHŽjzB#:'EهK"SIK\4є f'g &%"U_0 cK,`m ?ȍn'-a#Eĥ[}ObV(fJX}сu_+nECa e]}xw*`jHo5Hl_s RjJ=N#_W E∏abi_ }ݱ=Ű+brt9;YEGb,6<7'Ig!x cXe̅@x)͆#fbdih&e ÈgQǢ ~M,g7+7x H中/ 5IsQ6Kg_X 92=YU Xi#?sU8F8M-svM4_a+*7L2"YZP cG :A;pdk|qOLưnn4B|2ZI &!VyZ8R$j~%amJW?b*g 1s mգlgVn4͓Pǔ..DJ N;[dH)()c᜘_e<:88 `~VoE.ܹz*"(ax-gM&jw} =X\} fP\0T%9NgQ*hojHe)+[Mr6䦾#{Q(QlSڽ\3J,*Ԗq?K"Szu8u#Tdy:{/ia2SfυTy~n7,AxCWEtYwuKyd8X+}O{5@R$@q*{UQz0qJPx?4#;3 ڷvSYیXKwv~-ĩ Qr*>1,O)# / B}DO 'H;1:jTizD\%J\kPP?X4)́.B1* &TS$8&CR[Ъy WX|d SH_΄PjӖsxUwNJU Bm;joȬf7B|8Yת+~fC&7.9-g:IHc{3^FUGg?\9i*/ zUӓe{cbG[h8Z ^,C?0t.7T JQZ5)9V†s+iX">f:ŧtj!U:YiXbrgٗ{Vhj xZ.P8˘ Nj0M pTӖ|< ?ɺu*KOڸaal@WpQD[3bjR\HK>|knĥǜ9hV58ĩ}ڧVNv"}8) ltŻ5 $ vGz%9qnE,T`g5b\25Ӧ1i=*g;m+VjK0p 9vQ*zz|) <pcac\+2FtwKxO-;li[#* Uo|kR7/1NtVbvTQ KSBZ{ly|8yn)FDVWw{KN\i:< c?pDWN-h#SK-ysdѥm ^!a˜A7*|e˨7D"m=e5`%tMZrB/‡WVN)Gh+_| 7 19XRн$}GR#fx!uI^(mݯ \NXn|QTp7σ:Ct_{Ҙ:28&s>5a eJ|k@P앳Mu:Y^%}*9L7<\36hCSޗ{x&'0їE0չVxW  e *QMaXg`"CgYw쟆[.͵:%+s-i%$Ww4^Jaks司 ̥XG7IH(;gUsPqfevjXpg)5ФI4f@Qy01B`h-D t;DV:"<S Q֭5 _=Z׭3&ɓů8oݓLa!Ł8XLjN4< “ɁBl?A!^s60j/: M!_QU 2o[4E lpܶ6-rڐz$(ZQ^IgB)hlv o$`n'hF(\{37u2yUG=9b}*L߿{lsJ"g$~ ĵ%~z#@厪Ac%r[FLfqj*L&Umqc'`<lreZV.L,ݤ{==2\&j8^jxy:f8hdz5I)əZ&Rm`֜>P| ¥gQl?xdKy=YY=sꡧ0 IhQ%+|nv2oA&)[n.W8wHky[Y $ϥ ڙnxi͇|݃9+,WXsN3u1|5.[]P.= lĀx߶ڢi7.8?\<ن, \;4\(ڲLw-T9KlF's IJ s,ìőդ!+06Dw}r 4oQ?&cZY"Z5g콶T謎A&ΨB䑢\.Ve8)BWOy}N7# Fvq+Yщ|դ:%zKVj Q' VXTqs l4#F&G'=T9c ndjXYoq,;)hѾhO`Y^y()r(c0+|L Gwr~J9-Z6ϙfAU̲&r.qщ2v]ݷa!'0x{#rBeXS: *nܳ]bq~/{E^hrJGh$wVM w7"Bsj|2*I0OZ]a&]`4Il-_<*b)7vO/9 |¤Ѭi8pȽS,b$ $+x2v,oZhzHPmS?fdݳ؈P$ 4vk9* JHMg4fk4~sߵ~)]=$ɻbHITE|A hBYu*4eZW"tw$Y xxI`-4$m" x#tDm'^1/Y73}D!oナY&TN5c;Q8~E Ϟ -;T&M &vrң!Ym^r˥i)&Bm2Vh2ų[Ze>*gN.v:4% ++DSӕntU(bǼ >NT#8hyMx4ud@!9pDe|eg%\`:FsU >FMz";:@.'BVdnLlrqM'fmBA4]@c ٕ:vI=ST-hS"cXPvո7\g=--VAQRRPMr@m`lֽ;ޥa Mku900ޢqT*KpkLO2ֵS_̻5Y EW[,|A=RldOb}'[CGO6(#v}YZ3iFl|2P U:DN8 2zdj 덎1_XFD`HV誅 : tӪ#  aCn"I8$u=ݻ¿"0 Uq_FpP\ȶF Zo^)%TPf aC X[3AL,[2b0$r\J+25Dԩ\ 8SQ| qr~QB(ۉ< j#]>I;fLT.`)iw*ϸ(OL.m1({(1V!iZ'ɻ_͢$>᫞neK?/00>mIB]YRHxT@mm`ge\i g1e6QOnRii7)l'1rt=1+?NH`y>^I)k3:dȇ7y?x;T &Bn])wfȗcEw&޵ hdUńU72Grb-5n5]OQiΙ c}ԼHlfHFėQ&g.a?O} ɛyyzWeKٛ*qc?>F׌5Vmh›y'UjdW~MTO0~hbDoJ.e)N6~ơֆ \P @EO}P<Ga΀:S:Eկd>tr3#>Yl@u >ˡ[twRqHrOU}Rr(D.̋* B qPr璧]4 / ѫ\wuhtԁr/2 Vf j~ltbȕjcϋ4F9ԣ*n[V>~ P|:,:+2c?X>tHT1\;]OKt_1ށٶca58Yʓƿ!zhq `dVbHfs3cSKZRpru}o5MJJiȔZzVI,9(Zfc@; s8L( >lo\n~Elj4ʢ rĔ\@*~egMj(gT+]WmuZ>%es?g.0h>rBJuNv>Q{y@ Î~-y'*ov~?zaЌlu 9+gE:֭=Ib0UPN*QEŽg U w˜?^ dz) 8beݜi< &ޥU0+-TH{\ٻtlTE:69+a;aSBjkT1@OQVwa?b~!:L[nggΠw'KhHU_GFMa r>C&ـaG|, BqrPwH;iz;1l)_@ʀp.5bj_-k٬ C/FGw/m3ȍ>249o' a^c+WFS\2r5o!-:DrqSqTwV` '+W oMe֍yg_~B/&݆G/ W/۔s 6O-b3iLKY =5yͯ .fHOwD䩔= =3aǛ)!JT5$7cJ4 q [eFs:2KGv'r*_iUKw^c!kդئwf/z}4UR_FY2z{H+%KZ-uʊ;;RzI;Qi*ø{ I 1?<(B_M\VvŜQg f=Qm+InՂEY<ę%1N-cUUp9p&R6/Avk%# 1ð"9L .*Y@m2@3lGzn"vrȎ"㳚^3yAFSVu*qKdV-'-!R;BDh $W k/*s 1F;ԉkN--ja2e_[}y@KD\*lJaq^ cEFZTDR<=;vGkFy$c_$qy1uKp$+aZ2ۿz=Ld-NZbꕔG0bt1 _j"v9nOp'ȓwR~ڗU*E*BC}vCs3NLY*SUޱys\lqtG 5W\!JBD.GyO&wtdi4%CP'uӺpWn,s_Y!dE*` b {צP*=%\?Ԧya|elm4JEy#مǙ=( xnI _ ])CVR5? :5$fNUC&#nT/9Mc "P)h^]{`r:kODt2m\V̴3QĆ q#X SDsaAd)l<|U`ʰNX>M˶va fkn"eMê<&<c RMuy#jL/{#lќѴ) VWvzIGm1Ȥvq]"\k.(k衢XC13V!!F潚9I#)1DxNSaK iWB^qbse|$ϼMڥ\ xyeL&>ړ#jCAŪw7ٰROlR$lJHdxNX2e :K|J۵~@Mz5J؜^nfQ;TKTA ΰv"vM Oh v%^R2)؂~9;ōƂ4l%|uWmg̢pghRSaXh> 䧲{^ v(BҐ7铧‡"kZPpA-Z*3LLD0o~hmTlB̗*A -\ ef@o;]vz\0/d_PġT28 L?N=PH7L!\SUE"#>7#T2O=d)@Q5JxKi) Uԩ+JC~la'QYƇXepo zI[,=Zoq<6TeiF>D;9!ɁqOZ!$ MC!yփ>W!>=u_2 J?ܬF |r.{6A9jwgg[mA~}x1YEWˏ`C tJ%VN8#&"c1 _D3/$eUvVL ^6f(ifp@3ko+PyR[p12%BiC)w\8鮰_7߮i`{AaPS ]LWg'H!e(>e߰1fev,xr eznxü>i;1c50*0\SF<؝CSF<-\J"9r+R4Q)+vLQpSIh)ɖժON#.738WΥL(mB(བྷ8_q D; "N:+گnuYZ2:`A]3eL[OFW 2R3o6 ~|BpjcZLNVI;g\b4Yҧ7?BF٭4Z@8{Jm$Jvl{2qwB ۠B+a\x_{+B@Pkpw(c.P$ WhYt^`Z WJ Du{' %S χ u ,:6gb@ !\Hx[,$h{|3 '?.Mѹ`i+3ovWtI\, cL||J%%R js=0uQ_W; iRTp|i@1z\~,)њo8qP; 8N^Oh$P `.ʾ ؔՇ̜qtpj(#jկטXU@%݄%:pcu. rc ZY-xJ4540!E@b畢*q62k\Oɓ@aD9Muw9l< |3;VI4Wȗ\(m[|U]IAŤ.YM+^9.a/$I/E3$6fRA]0#V?+cC2zI\dH|^@DgZ6ciCUj$M6rI:yPBPGC 1%W}e0WL^}uP PSbFn76ɞLFyu}75W!i7(>. |~r^s'&pH/B-~eK x:vz4ogd0j?q.>Mo:Cf}b^ܒ88TJ X)&@,KfdD HS]g4 ܦ Ϣ-'')<)n}' Yϙj6LG}랞QAV7 &ڼFLz5 72n)| UsI+%varFT} + .=y- ؇gs)PBoА`%rC l;alä|AN'9@9;U>t(L /xL?pee_LЫK"ZK"{=jΖ;z !Șy@ r')N[yTq*̥E@ ;  !ϜmǴ [TA1Y~Y*eVQ˃x[yA =lb{\猃aAV5,dquXUp.ttRobzW|̎D,]GMEnuޯkp=ޚ/P,469݉ʦh OGZ)h"z7t)ҩɈ."!O 'נ86q6ff&|O7E?.lB doNI|w/%7\/}x6K!kwh h"#9X=MRCk|_7WͮL e@=J"uLwO<Z}7r/63C[3Av9` (nCkHB| x?DMem!n\ UѯYMZa<`EWU굚<&.%EOQ|]5*5=ήv`Ї1 &lO MۅyU~!}~ȴj˦Ȳg6+Fz=IkJ{.f.6x&O[)t[ ~RХ!."K< XJ_v{/Ş1ũL}Ydt>,5;F)2ukQRÊ1%euA9{B]@hWzh\E](ɉ Ѿʚ1bg%1}eYJocKB"zD$ZK#rhHÀ2pEe'#hXϮ-oLϰ\qZ'o)Z f2iґm"lKqQ1H*g~B'Ժg>cmb;1Ti۵/k =J~% y4Y]t/]C& '\, C”MB}LiKJ.?pd4{{  [rU#D)b:wC%IViuIs\\>Q~wq3_5Gw@mZ~O8Ÿ&l{MK6MYamyְ;=ˊژ g_,)zڗgu9`#Ѡ*l?M u$%G'}n+E=_yguҭr>D jl|^GY^m82W\̪Ӟi/-TR;g"*!T~)@IH?IKǖ/idt@o& fAJ|n&a֐\At]_~VOdpn ?Ow6 wT,!.: ޅ*sM1y5t!Mڎ_-ʇaa(m!lCpj7f5dVqWiZx$J ;aҐXo^⒴j.xb~Go ԂtC("t#LYaGPٹ j0X ^^ݽ}UZ M~Ga!Ve%DQSςS)\3.rmwи5_6uVZ݈2sNt_ &BgZ/rzǥ3}+#% dH=Ťc]C_R\tPᵇ"Ӆ~Fe@>I`ULd4Y IAwW8]7s֬Wr9{_tDYr%He^b|" ڠÄվPWz>6ΡI@TLN -)M+T;fTx G$:"X碕0\7(T{) eEl=Ac2s!hľSOD%.KUOK+=m-gZY"c&u>ʣY'\|b&r]ٻΨ  f HC1mAoTHR 9|ZI'E꾴s._7j')4UiPʅLg¹gL/HybUc͵PMdo>̄t#>}{k $R}3]8h&PVI8Ag[yF2E¾}/CjN;H}P5ޥlkYø0F,^JbO65`θ2DXv{ 7QI0%s@<+q䤿QtKTdc|ޚoHmjd_+x9 (U(<:VvXҬ?]X3NM;Pك&֎XW7$qf_\Rz\nY6Ο[Y/g0h85)v/Ϋ̋1LԷۃo.\Z4ο*4T>37"p:#-W\͢9 J=8,_(DK&u::(6q'HfR\g/H^dpȳ֞ޠq%'K:UG[е{؈tóϨ6T֏y! Y*z٬x N){!*cR^._!L5 p]<(*eAL7l=q˨Y/-ƥGq>9?nL/.V5J5s[jc\=J*HiM\y.~dd8}?4= ^Sџ>+!5Uj,,f~q ) VR#ǿV)G!?zpAڃFm {m^{-ͦ<6*7WfeV@'\Tnܛ%qy4-L>wC;Jy[G'~0V9#e ˃oITUO`{s$P䤴9TKg7Ч1X5'*;p68MLBdQm &DѸ1LܩxۊITaհt[#X+ ;p[!n>NdM=Ȑ|ɾ(LRE;HUj9l)iDzb~c=^@Pada2a?WqzJkᴎ:S\J0e%y#']& Geљ$6WuNȝ9SlQjm,7&tiIxQO 1 O /a%#j!Ӑm]c?)s>d^f_D;Of;yG/Ŵ46:#HPZPM!r@äYC/?’Fd ^[ pfs|Go/\;-APwi~$s:c {gҸ](5hղ\,5ԺV/9=媷>9?V|}Q_F |*2s,;'IFCI\kk@{!esE7@S2⿰2"UQP;;Q'Zz=~ X4uS*cTܭ 'xLJ ->6T81ZeFFbN0 ?:A9& 'ޞ9r`kfT%x[sH{=ݚMq/ŮI1 6Mԯtb 0ERi^ogoS{6ڹrZQIzE)Tv)mח*ݣs#9P 3 u1` p'օt$6lvZwmz3e j|ir*`(4!n3—}r RL3MmoQN J{WZruRnp >EݝPasO^MAM:js 9q`A".Fa[7͈^8+Lh4TܵiԵ {q/jSfϪ:i;a J+(f}HwV U$p!9d6vQ];uS6G<~Z.&kW"v\Չ]ŵC1H)́45wbk& ofirͥmilZ g5 _휠#ߓ_vQ{GHy"o{xe zkQDfh*@c ׺pH9^Q2 U2VܤxRG#>߾ֱF.VLi[q`V3EJ[d0]#A <ʎ~mEIji\77fLzYmf~'Zl"zv(@1ɤE6gC\`uWTهI0MD+m;m;s|Gp5R]w鹀4}jƭcKsF"P|R(Jd5#愪 }XoJrV XXD)U&ЩJn̷LIdqaCu>"f)eSr(?rOh)lLjGSpt%f*PDjwzS5^6JũRϓ! R%,4;@ZJ06 ;G zr툺% j r=Mpe9RGc|1a:>!Vt'Kﰢ *هP w;']U'xaАp ns>| gM=8hZsvnb7^jRIO:GL3d}+# K'/DžGϛ{ԖsJk߄"=ތ !|:>~,^p( ȷG'_>p'~|jbXqP8a9q]X6ڱtǠ@E}3hF7p` Hg1TM;5iu'd skUrSoN8šB?=O=Ds K*MO'9Iz`@;?i;?|F P yuǢj[DRr$5ݼ|{xl^Ѥp&ri 5M|4foϚ<䴯Y}F7[S M~4-_S3iGxO׀rc/tj+-SZG6#ws7|~eSK7CDj<c= c} %j\hM.TK18 oAX^P*sBPG[fTϬVMLor~nC D7.\Ow޶B|*z>/kًH4LG0E0pNՌ6[䙃DmkJ7aƟYR{iֽ/U-X.&(0AY.w?7SB w$:!xFT@$"(nAz\AΫQ/xe:$G*op%jQ cDnB0}'Kw:ev(ܺA9*6>}ll B(~/(p}-^=\wn֗Yң$C\ S"~UTq^vIAcmѴdM~ -u責 ,TpKUZC.Sϻ3[Bo4r0XYf.UBw7gH^2+%|i!) .jIMϼlУ/w!d<e_$ckx(~LĿ wZ+ -*M7I"։3}]%6(ng]/L:~#g#ԉBOE|G)UM,6wN# jf~< FI2DL?M8uybI(О\p>KKuw2$Y#KN32jL€ hWF>շf SR+6/Y̍Z 52>X|.@}j Ofb)~}̤ JU:Gwl9Q"8fTw$#1"{˞)TSDO50qtk1LxFsJ0L7tpϱ4K/h*@ w$ =U% 4mwZ,E2aH#_xP^g+3Z7:F<梾.@ Tߧ ;Y{4#]uUY̵RZ[31(,bNUam;[ěWo@9,;7)ĀÀJni! 1o+ɼ(Tc)g"7K-|At4I ́PEZ#\\tm s%I9V}d /$uĺ3$ſGhSH6GENu!^ug9&‹u| @9F,YY?64 K 0=UYcBC:Zo6qGDot<Ϟyl W%EPҊ-ٻ 9Ov1^O')iѲPT{fC+ז_QqC&[)w>>nB|' ؊ٲ~19P"zBN;CǑ\Y5V`PcքP`Ϣ`n J߱W6&y޽ ׃~8~yv%'j&O j׈;jƿCx9ك "BNi]83+nlK ȍ`* )m7(~>yCStx͗! :*bj瀂:B[b)2TSăDY:@,9LX (oc8dv0!(+U#tTFa~GFpˬW>Rx݃΀{sX''_ԫhy׭Ot3B 5Dζt‚\HBPg^A./E]Ji JCPvf61}Pi6u3$9>P\l կNأypSh!:ljtШ>Ck*H]e:"iw9&~B ģzo< q0x ~:=5)gzw*&3Iq6uʨL`gبT!NPE١A ~GAY3IOR&OrQv,kAPoS1?VJnd1|O(myH!䊞νtfSd(cpO*! ҆$ &[OIg˵36xi fN.*JuF~ &[( zaf#F,yw Sl,"jFr7V"i t%Dd1U멌23!kLNe 'MuhPbr\`-I2iY*XXLi֜)IXA\qJ_v79v1بN$PR=p8 ;9CJSLK%w42(y.d-b})i7#`lT$*A'zԒfh0bɃG=DTڍOviHg>ZaE7I 2YGv:krԂW:Q[穅  {m Yb}bsmHG0e*ϼ9^ .I UYTۚ z2cg2vlhtwigh2uӴk.j=7*7$ɤ I3`N,(ix)oH{j醒F4>'6Ca["ۨ90G^'㯡*¨um c{~jvn{vZ[v(X6h@ŕǨ*͸.MKxsd C#k~gy*B EߌiK xxXh9kmQ#Uףɔt,fxPTʯQ3hvj~|oKu%qPvp'2Hj}aE&P,9~FCcs5v50~h7<{I. ]G l˸?ʓ"UYi4ʫIa-K{v0jօt`8Z"&Sitj#/ϗR-ϵ|9Xp ڷLZ)$2hBr'DQ4N _cH.>\VgPTž2BpFwGq0݇)tYY-͵m Us.!FC8~=bu.\L[|kJ! V1h+DµMulؾBAҀ~6-kYL苴Hu'8JrE yNԌʎ AT`ٺilc?]}H:\-ov ;9z yS 9ɥioWm;:%{"FŞ1F^pڅ?bu49!92&`}4^ɟ[S<`e$f6y!]a% o_o=Z@by5 f By:6vS&;镴19$|l ~k;^ѨA]}ܡ^FK$PC'qjhgџ@@k}WOIS5cG Zp'{m*[~b uW:. {foecz\} Uc5A{r+8l@L(̧zKp` Y{Jt' ~3VφE զtmӣR8JW}Z1Iƌ򵍾viͮ0c0 7;%0F/y5Peݲ25M|:4)יغLHe,Q!,!A pmCCRIDzē)Gˍj./k2 dckF_5Nno9[NX8&e=t'rot6aV$ՙI.`iª!*_2 ,iWH >8UסVWNY@[qP3HY_[2Ct5]+Z`}k|(4KT!ظĬ6CXM )̶w}ꡍiipt *ͅ" k3P+6\o/dz@ub9Q2yz2*8'݀"UʔuU *"L=*!?vF`S> AAKh+7kZ!NE(>BkAx-mR-QJp6znT]{OqIdVv h3󂽭.Vy<_ U˖wq:n;^0+R0nӉT˪@(8X9(+fV:=W:Ua:Y"BXCzYhĕ^m!̟ԵjWNȬK l8Cb\h1+U`lj2bNsSQFG3{UL\‘вrKZk3T'?rmqU\w~zⲻPM{^!3 A^!@n<8AK)n>u[\9 n!WSw/Յ(f+,S-O%4USu]KnUZec))iQQ[ģGGma}AZRT.'Ϋ [W~K#usg_^XS/`&)cHzyѤe:cZ W4OS7qۍn*zI[Dy:w*pnC;)k1騩.1 # UY _t=](8~F {;ұzu/ch[({cr 5oD2;o>ӞȼJ,kRgHVnY:[cܚg~)bCbݒNݧLJXfR9#T2M"'VugxyؖF S(ݸYeRm(^b?G-6r\#6պ)p0aV^ wʈ"Lҕ<.GW4œh~:FMeBpjp^xmOKV:PS*ʝ7M[/US4un_G|p`w9A=l-@'Gwl Ёe܆"xxTnPJ:‹z<zn|S4kG9@74 ?~a X솢N0mT#*h>7}<-5op!Ħ>!+`o#l?SXw̍)lJǫX7)F?zĚ+wr< ,L|A  @(QZi I˰x\ }Om-Ǚ|O텛"sFF?1Q 3 pRNCd3"pJA%!?Qt|NY^_@`QN & I遁5er?l |+z|^"q3϶6#v0Zzm/lMY*;`|LkKb4,ۊ\ew` ?;AɎ74Ey7* Xлޓ ~6'vV?*?a\1 Bݧlqq;tOY#[/(1@V=A\2U8u= [;@U_}E;\40Pז]HLFՈ o0U~_pwkǨ28zP):;oj _T[|#~a["Dc^J.EWܴ\Զlwa ,Y0= f ҬlP3 u ęӈ%n8z~W jJ Bm9Fte@{H6ݸFvia|dؤ;$ vwt1Uur*\(E<Ї6#gmcDy=MXZ^ EDr) 0fdͼ_vV:73y"eF=STAЦ}Mﻟ `4]m).:K5֗t+b>^ f4i ϔƦa7mu>6/ђew@ {x$'2Cd'awYԨ>2&ʡ"AM7"X}k#Cx%H1s^Y@bכFI1а:!kpS]q22kitDIՑ#\GVYS+Ch2qL-_[1,vA \X(e+v` lx\7Gp\&:m"33xI((Bߟб{âT‰(,mb? [>nl'P|4x@_-8wP_j4VM#mvI/ 9aI" l@(nt$az-{;¶䄢q[ƽ9 r-tac81 36MqB/9 ݙ~s19GY/VI$6~ɗc NG)0JV1gB1~hOT 7n\w ˭֧&km"89z,aۻ` `Qi[f qy} z(|x1tnIZQVuTvA&m,ZD"&m =6aiն&^eD";[g#KOt'GmTfXCr5lQ\/vM-(fS*BIUzvd(|k%hEqJSeJ8O&2VXiW}-+Y5a9Jvϓ1WQ;RmD?yV-g|􋛨ꖌ}'`Bȣ5PӣǑWDzm`Ըܐ5eq`mKi&q0ɒ+oF~ l"oh} 1ٛ!" ,K'y*n>U !ZGMZo;{䗇40_²b׈9y F򵫶nA؁xO`3"^H1=,=m%oTi[@FCf2b u*<`!st9"eH5: gJ+zG Eo;J "H"9j-o3Q|!fJVo+w:O$P bS|ȭP{]8؍+x#}&P_.Q6W_+ؠ$<ThKt^ZfE*Km9E7W^/_m@: Կ]x7̓ S$kpH?v/?ɞ¤*c{Yr! \:3yYZI=b#aIaWJEO@*AE$LXnǸJP@Rϯz91u?~]N4 c\J9+d<{,BaSw퀠|qU KUsI \L+MQ'y^|B4M!f&W,c~ܷ\, t ʵutyWӐ*Q,ަN_pęz6=run+L:j1&|6+ E[9iy@A|=)$2تEPIHOQJ)hI:'xs輏TҞmmD-*gPٚyZC\ن6?M#oCnɵ( 漈SPذ>c|YYy̏UGEy¾'pniKD}B=r&*W1*7 t,A%)Q?V?s2ZdCN˹{3 $Mvcug6s AXzԧ\&abbilEؤ7P+?Ng礍ϟ!x]{lAZݮ;%c)BR 5m.0 >|+1&c/Mu_ 1*^JD}Q჻M#^x01*Í R:) + ҕE? ͇%v1a֒Ol1L]7@md7*? 6Gάnᰙ}WuE,ANAa5q*ɨ!{{5w?y`X Wo諐a|=pV~l v피[*>r豷8HINޡn<9/ҀH0C\5 rzv&S((b Ř ʘN-L4pϢkқ*MzvI[Wb ^F΋$ {#H:gQu?NIQKRB},YG%i0ݨ8z`qL!gpkvW$C|ͦNfV (Ϛ7 ik^ ܒlYlj}|1cVK d #jg-R9볖p{J*+#A*vX u'6#sVHjNyj|^O+sHHv{l5IZb}m 2(̊M6o6?7m8Q\O2K6d$ B|$"P<^Ӱ$w>Q F0,,t]+B-\V>4~%lS&k|d? 9F@X N_^M@دmb/6EnXS?OۼCF̒^8RXHWz.dA k=(}\)Asvk ԺmTHQgNO3U1D C!_e\z w=բ\w/(c ~c f2`YKj䞉zX*N-$2~_5`T DAb9 $LV p3cpvCbGƲF1߀BMlRl6-ŅЦc[igTAD&˼8G#9;RΫ<&Ϡ3@%]r`5Z8,ӿ֠B8c1e6,\j4cн1ᮮFnPĺg~4̷Ffч\ZcǬaY9@:PfjT殢׳;382Vb<'DM۠g#WNLb,φ }9o<I~ x3.[|X@\Щ`IVh`?S|IݘTc!͖d'\x9 |?,C=O06 {;Pah >\x;#V> ZNL?+=}ivCRxQ XiN ĮOOt7rPpNG(Tr)JZMҨ]&!VB&Bgm@jL|Qq ^܆[2%ree{acYOZ{#z2 qCT6lVƞ;"wn|†yL~gZ<07>v;.Ц*%vY̤{>B0mB5Ee LMh;\<$(6 '$yҠ(\h,' &}u:ŃI47 ̕#Y-cYT 6dtR)kűW;FFgJ#tv6; -j-\9!alNsdv@5|LlʮM}dgbBq%&? u+(?ƔAD5U]2 :,PDGpPupae IO5Um=44E nseݞ/u8f %g_ݻ(2!E=;;1-Ҩomɒ<54]*pq7E;/1p, V֯+J+c(ݘ\%!W&hgIuT=XG[~Kʃz%*}cMiki)jeM1'8pHS+e /&2&;tHe#=&;ރNv JXĎ9xneB[T)"K*-o NXz6xN@ re#z_$ nk\'kFec~"}xӻdZYe[^D&eV^4;(F1Μ[TaVj¬BAY~ Coh(>)q)BF M&E6(߈'b aiO9&"&#=*.JhP[֒J}(0D_7$n sնIe$n6&U1OY ݚ3>bNWyY1:akY 8/Gtg3ϖ'?}X]y5?7ܔ,$SYK_B9Zt/!h\O=C짝ꮦ/kGoԒjX_`}gN*j0Qخ2mWenvghr@WXc J5eיr8\YTHid6 Ӷcam)`pPZ]P۹z7(#[q/^09Ifw3N^̡Ysr\BJauxxPR9n)Kwz, 4urcaYlÐMl>p![Oy~X-索Gq6uDݍ1 k >>as-'@yCtiD..ٔ3Kv_0I`xqɜ IA!Z+L2R-iĎ=C}X7 @&mt4AȲhv;m؀ %'+`okbN%Vx N%4l\ RllPڗƗ'2u )W)k=J%[\< o*}%17huqXu9-PK%Z,b.\K\ZC`y_iW{e0S4f_ٯǩ9\5υj^rCV2>cE&xQ<)VJؔryapPt?p0/ˎOЛ8Dc>JW"|ª_{[?˾( ջS7z1 5#yI|ėfc=]?/TyqYL{[Aݰk q-ʜJ<  >v>Ŗj/X :u.1NlA;ǕCXʿ 3*#GinJ|,AQ\sYxcEf'|l4+N듌 83R-i;oX^bP4&Y( t9H_U\BCfu}fm4U+y>hꪂ}+m)G[ܕ  Ve^确(jM[cmUp@VD `*,b s|<UKҵ֋?ycto:tCղڭ0i+䋳WR,9 p38RtV] B< Yna]t(z u%WnBo5f"922-(o ^Ѝb Ys͋lDAf( J>}[ Oj6&׬OVmO_䲋$&G$&QCZ՜/sϛ"ۨl衣8"ݢjϵc6row cٛ*듦ӈ~fOp1-!s1|}aӴTy"{Oa%:WboE̢V{*C}bOqGGI&,.ok\ زc cbW2ʄ PJ-f*>3·f8 jĴ(D^ k@*u tO#* (q_SI1͟x_+!땗 ᥌~k7׭6MS(WѵnI u10I_ZewASH@Ҩ~%G!K5̺mM4|t'%E"U|puެ=#I)>xF+nU a"Wquş$2).PM|V1!@C@)HBw&ʽw'rm_ps ȑDXsFskT"l*ii1l 2x#lB ws'%Cg6w9a6Ua%'&G%az=E54Iꦕ"Mlh>HQ"Uϩ<O5>͊7bINCgϰiMo ]UϺO7"y16@Xc +lU:Aۭv>$so"L&f 4i5Yy():iU "6`b|1ׇxL}sb̦}bA w|X4']|eY4gXT@ 8'1q3 bVl6j(yik7vPG3RJe}0vw7~5*Yʄ>B>xF7&Im܉6,&+1ʂåY]eY/R&^ݜ2&]2xOIKW 76lbˉ8M-N58B,QvsOtC%چcϮc}!AR=(5CcnobUA_V+ f1(d|Wqjte$*E o"йk}PwZ&Wɕ^\|%yN*['gB1Aii)2ɊB`%.S-s3@zD p*)o\\+1d:4-?xO%庝~"-ֲ{uDT7(5v^^BhTFbσQD.ھLF@XG{lhƮma{ĴT5nvYTL+ktYD=Uqb$`| m{*}hCނT{7NS˧ M.M՞B*ߙLi~zLSvώ]P`zekSb܀'3hoORkE)bW^h{DG7g+B8`5E*^/Cp=&] { T#W\2ТN)?_+ t\vBZJfm0T~w[&~JL]g {]D`qDK g)tr<w]ӎ/yF01-m3S3P]^ӿ?W%, =aLfGph瑿#_.Fce҈1\CvIS4-+cwaGڇjcXkieьw|ox3_2E;ik kU،nq87ϩڐx Ӑj_Ucx^,Nwd 4c #μ ەcMtAw1eտfr7m* ~ >hubxCFUÂhY--ic/><#62qkN9gJC.emvk˸KYLmWz!Jq(ϱz@3ܫ `곙(ŏB&&hDŽl'U8FeZc%ÍvpoVF m')O&Iv!-J c.::@Ed腦M4+iEX-^g# )Yp{fC?m7ܷ#YY;&֜D 9dy\:*x1n()deKD W}pMĴ-{^ma,'9f9p#Vu`l=߻wO}Y˜vN Ĕ \T1nF^if1z'z| >zo%Y;_m8HqmMreq6I:sNѢ[a~ⲱi+JX3 2I@=93'e29 8\MZTfEl_HB~M;+N_ae[S2Gq+ii?f%L}Svz;]2gpU=Dr9@ҭZktzx$aLk&8f 9U7H/V#sG|g\CxēXiP!sӃDo FUZ:䋙dJ`Ǟ"Sk[p+ ^ IU_[2$;ܠJ2<[Iť gK*eCW'⭊~cz1wj%Hhj6-Sցһv`&/套MFFc)09EU<L#Ci]l` m]sϻ(4GD zYx˖Y gL,C ]c2ӛ $.F;*y@TP=wvc"b>$cwE|y +l#1=D_e)_x2pF+V_chP4E_`}M t Tpm}wXTɠv5ٳuR6IV4d*݄pvWd $[ɐBs"T];2 <(sQ " C@~ҳ !ӭXYۢJDE-óS{PLd"|{(mi\[rNO]f%}!6F[ zpl-C $T: [8=DZ_}<?ݟSiyl >;XI-hyKQRҼd:v*sbRQJ?I\%I(.:3ĽKĒn7$-IX֊59K҇_k4%ޤlS(yS# n޾{D$[+I45SC 6_4@lnɆ3F/ B Փwx|i.#[!/yBil3{:ǔ3&hO＿ANi*  =[r,N- 7xqR.` { mca" ^eAktWy;bg-QHvc7E5GY(ɰ cY~0iFCPz81]HFy:ol)Yc.%$}xm>Ŏ4Ylڎ 9,YyܧgҫmB?I'p3D_s6C.M.vkÏ6HmXDUWd&I,g#|\ en{%:,iM6K|h@/W])zLU`lr^2012.N#(x֞9կE0OMC9$S4n Ps]&k$b{OȠYzw-zmL};_qs/^U* 2mN8h4AYa"cʐ*qe*{;@Km:?Cw\RO'+J<ZJچZj4~|nT{[B1-ĠlPPPbF(KÑȒ^+:Q(* ΣSq@pw9:-.]smPduPhb_%vX,o3G`//V#XuN8oJ&f d 9z&Kqhb0l/~"Oi~"4K@>\a2S=f+?[e  heo%/RyS#/B$j8xe 1yW⪧S5c3i:h7 #Rr,6MVsy&--]\B(r =20rɍYbcVnf!CM2k]Ҧ2=,է[,. Po4K!Xk;MG( yX|ք -]Òx[I  =b>KU\VИ`ut[S*RyMƒU!ܠ:_2+1^ th4/@'p0iP]u>CtǠNѓ[깰A3m+gj\0QF y<ກ YaOT 'a\{cma(y{ͦx{\X#%V q'XK^sV0b?dF, +]X2fAf٩8t d|ŸG?,04zqUd~'(H,1%.RZ*Ob!g pvB-gy%5 QpE !oN=_>r&8-bo6>[nEgFa nK#=0,ǓgxvUֲcY/^!u wN@ b,ˉ'C`OF!{.eV"1ڂ^nB^Cr3z3#n5'Ugęi^.@kJZf})ww"eꢖ/E~(fn).-ěh׮pn0 0 .wzZJ/HMt Q <Njpw'LAV~I296 !'u[{A?8p"}cGdd]< _;&Z8旝R4Pݘ>'%H_sN,ո [9h|Whضdd[z 7#pz񫷦.A\Rm0TLh.R!ٙP<& Ѯ=Z*E$6h<!L~d8t1/j(gZV-fá"yI [}0ѼwжknYZ=WFOݺ_R6 )N\P>OX!od`G(_s0*FZ\i ;6[VV+.!l)}9&al;Մ#WLa*_~FaWU7ƚɋDb臯4AOՖi+P"iN۬6£0DbxWV/Pc([ieeNrч0wf8AAKb!3(Ȏ޹2[Ǥ,kE%J*w_bN8@ .ڳeJ9U&&$)Q&P1*;5b>g'Q8&O2 61qb2/*߰^^yEj˕x_`/HKY 8 䟣|-!f 9R"J2Jb"uW'/I]0!7Q?+LrH@q֥^JHJ]/x@%P$|5}F@~JsK?fS-u/O{riD%4SZtug9M|\fNEnP5u5L1b-n2c8 GR #qL~4Ʌ,;S YXJi-]ɱ=Ázj=,:kA?.BkE t (I"w3g`L+O$Yޅ˳ N]05Hݹ~`}3fm!l}$MTKSU 跺vns[9#O69$ BvϮ=CVb

^5*k %$ARc;:6pt?]?.:ˆԺ_Kb!ُXq[R`!1N,E)T;H:"p9A\ cuXvN+U 3+)E }NN0UA Q(4WŚa!_xeV=ءX3 9{c7 52!Tk:C9FënV.??*uwAb93Jz12->#VkĢc/+u^yH#c1KAUqZ(n7Dmѩϙ*'5·ay,RG4P+2)߰Tփ.6eX]|)}3̧EJ$kJcWxJ;綇ިZ7)wP)wE235hnܤ)b_6?El[g#NU6f7%<H!dgS  ] eWUDʛc5 &JxDNdW6uS;&iRhetκ&rͺ4L2kf*m"ݎh51a%,*6Jw#-5f(z]ߙ"`Qp `=u][k RݹF_ae_4g3ݠjc'EjcUJ)-̋E;޳D9^VCn]1$Jɯʿf Ӆ{[?((ek4.U)- U02QUnF&g>X76fyչzs -DG_|CY7bQ #d,Am >sGG@+W?Ŗ~Y>‘^ W- z|?}2ezח^if^ƃD4l| ^74?Q(T1,+,&Xl ~kԱ$L_ B2CPeNé1!|cU2)]p:t5jHݧ6}m66,º #NE>~"§E6ߦt4L U{wS/Ȓ:⾠^'yV',L\Tf񯘻RXe}:W8ס-*D-g> #,C~ AVNHo' (ٖЁ{V0H}U'Ӻ n2BI}z^eaYPo^*ҡ{`IE5pKIz:WurOxqz -k%nAIY~{Y(18+Ύ34 C=#k<1B*;sl,B8X栧"#DXٜ17'E Ɯlr<&ȒJK`oE:tXCQ<Y18);87i;vAmmCaH) F#2+"|aUpE|ـ:s8m?ޮyN_nM/V3풅V*%,ׂݜ@e)>k#/ fIKY#JtjQ&wԣHU`9DP]F2"/HSzt׬?ƾwGY6 UAIY:sv5 qVڗmgl*O:7kcg ;1 bT o: fX{ШoR֘IL ]Olc1d9_sfAgK90== 0 )vCdCS Om[3#_Z߻]_%F|Ƈ[]Kz0 4={ucy4qNE#[Fqž4n%G%rUD8E ΝX ¹~Y6dvQ%KXӉ WO =oh i\ex{@R"l2 m O>n>g'@|j`HԳ;Ԏ&ɰ? ;YQNdQU%ӈ{O 'W5xp8;2C|%Z5JLו/Zt=ޙFnnfE48-b0`͖s Ei<`o ol`XPKZ]u(ڽQm*Gm- x]r-x,QRnR4V9;яɕwW{NWz8ă%g;J̵*jba]fyL zi ءlf2M v~I zLVSj.Ab5/~KpQ+_  B6بqwPqkfH3(mEbn㚁%5I6P /ozG_/c)1yzsA!Z 9TJy*Tk _OyE}p&TD!HP` U!e7p5bJ=B9Pd* kէluo @DӚ$sg ‡"R\Zcsw YiZ{s6_ծ݃AnO0]u+d ?[q$~FYL;;t[R Sʚ*_lew8|NJJ,:Vd( ~#Zņܻ}>N.b "3݉EF RJ<)c㒘 Zچus$QJy>}0nz.r|8@b5L÷9ON/Iۗ~K"( %>N9PFt)Å[H/kNi7bc? EHɞh=MD2˲IdPc,WN ?X?8ABMP*!n@0,kLq]~#mNzP Z҂$ *'P]`#)} ׷rM&M +oYY( `g!up^[XR!~l(_ٶ-LGx0V ۦ NENBO2,B=ֆp| J- 41IN3~kfqKgT@] M0SEJCuFTT?X*R0&ApohZ&xCOeC@LFN UqQ{~ )6g ;)`f2~di esVm9}0qd=a-=+5$ñcA$]{=M-=`(v!ZRhWD{Q1QD n2Q0q);WLgZ|_˂hV$>L j-zsbҳ<~QxXy?$0Fha,Ջ/cz5́CX݄MCξIGʛ+T\![K6v'AEI׶+'7>Gn6Fo$_y(QS>/ (rbqYϩPQʡMN@7j$xex^i>Q\ED>go]UD|C(!%ZaL#x"@PH?jrXXW*9΂]J/]$jpNBX!IB:+ǷOmQUyGP澦eed؞*hD0]ڰ0J<-pJA$$B݇F.bg&w'-5iKsY󁦫6%^jkġh}]CKx*Q{f~48kV7I#Ord֋}?70Tsv^deɽ@'p9^QI%U $|J[DXKɽ_W# ~k/OqPp\<;fII^m"g{+bBFt0#I}Ob_[}3KB˿rȸV=G,attY^Kwcz̞YsWOt]'0+-[?qQk Oɭ@?:݃F=F{c/ΐ&P\(IBj%+}s u3HYx-~)+k(>BCS<14P Db$h ocJ̱LEn k) ;\M[:20*Q,r Yg}ՀacQ( H-\$d@V@ol$Cy$ w4N ֋2ao찫{Y+/w3R/a3 ìOyvAt]a^y;"UczuG.D ̕LJG{T  QⵗV-RhaMH;a-뻉M$ksDE" k6Ԛ:!EVИETVݚ<<=[eϮU\iߟs Ba"UKpX^"f4OCgg9Ʃ!!xxBʓώ/KN VZ)لy)vHvXMTcgr?Ntsk5;x5u YKD05s0>PL7VFT$="~O@I9^EX: {ᆠYwXKߏ NQ3CɳJl(I#; 11=T-W#qW`;wnʋ>8+Z l ',ST0yXăRҜ{vI@Α-{T82IP.}*v}yX'R\uHjA1u٥vXoòUR߈8WgϧK2{l($ԆrϻITN~oU] ΀Řk |Ul7}9iي˕_ φzGGg:J- Y( Vſ9e6+_R }&M.%vԗ,ܡ3MI RVBqxue2:KjkqSl=E䋍#r'-aKLrFڻV3W8RTd,c6X|rK$8Ig+O8—ϙqk"&7 1OBX%dK+ѿ߲zvs噕xEgXyUgODa6}C r'5jq(vHhů&^>e2DŚof V;ẁ $UV8BJ1GflK]}+)I:Ӄ^*-bEcU ^/mH_(.M =Q>5'Vqwpȿȯ^zQ F f!oO-lL NJ= .Mp햡ZQ(23g{+Q; ״r!\%VE:#:R} ~Ǯ cw3s{-&T} *$K:Lf#`ld3/o7jsCD+[hw$'|V&+=YLHсDrz]gE5G}}$nIA.<Tx8 £2])Z՜;DIť<ƃuУjQpIk쑟* &$;IWFȂ(sq yT RjmV&rh, ܢcƴWƽ8̾ןѨP LTt+l20R;Cq"BUc0ݙ]_ 1CV)8ٙh;ǚRY5!VXxB6"ؑ;KоqXn4rH04y?>G@b,1&Ϊ ͗8z>QT,dʋ? 9?shGEzHX}fk4x]ɛfzVS[=3 w qPJ8sgiǰM:y76Sxcz0L7OUy 3/[K|,$3nb!~3~Ŗ1;8l(n6VVL|V׿66kuy%ĨZkUxwU)qvLqn%H\湊|4DlOؤ.U'@!/Tzq7;? Iq ]az jaP y>hj[{ŚJaH@eBϧ]B^_7UlJ٭/.ʴrNWfXmMd{ ]tn~L@Bt2DOX;qlg 0V=$0*ο&}U B´K)UNX UHZ9q*8'S|2L#lJ,^zUn B5#{MIUVrT-h760A#ܜ$lrY|P^0%کk9bVDpX+\#nmq22Bb)( 7IWAԩ].S)\}6;bZo9Wh?*w@CZW2CW7b?I؟Li_a?n?!%Iɯ_$B GVh]$MܘX@r]URb\gw~լYh^V|0 h- .uǂmf^׭m^FP 'G4(SG%zɦ0/SMQ(u̵u+兒I# %:5AʞiK$~eɨK `)maO\ r%id Ѳ] WB r_vD7W&UV!9Ff<A9I34"P`驯$O,K,zV"GufFnp($UZ=];TZ~;C> !m Se ZuR|hV]sN]%]GC+S6GF#f3-3mNvfz^8Kd0 TU\J@`σWyg[\~ؖJ&PyY }h\ 6 HkMվcܥrN} I^@+=.2r\ z~.YYrq zpJQF&BW; {p5mMnYg{^],*tȶ@ڛD4m_X^8>qT|&I '&2]6`AaDxVYm2$@eW>s".%}>H3)r%/oZd>t0贖uI|D֨ OyJt6IEnHTne:x\ZW#6"@ʖQp嫁hOtIIY Ȕ ,Y>iMe$ɕdwx%ޱxDXE-گχ04b7&rbϓ4EI^7eQw{#xa"/ӏiF;WZw~hu_,GvΨ0X2|~ԪzՉ%, _6l/9Bcle<FChw-wl Y#^4ܛܯm<҄ϔ#OGFupo2__Iz M17')X).9AƐ-iWXX}wY,t ຦dJ˪ Q"Z)YɎo q+b^-/>YouwAD6{8$~ G|gs2ԃWE SJ 1-?Vrx,z;eDՈ,> 譂#zW,jm(wRYOP⎍ X;'zW,z&YW[u<چqY;.kS U,چm !z|itAkA4wBe#jP Ĺ>I vG1jk>c&<_7N4K-ڠE|_y8WT(kXD7#6LHݡʰ/*fk^T2.))Y(~ȁ%V#w.E,[QAͣu]\?~Y:vmGGu@oL0 ݵ3XuGr j+(OtJ1(?0Hl:Ψ#uK%DYkRVf[ָS@QUMV;ךHً֘_^42\O_̥T VɡǵQ);*Ս4PBN};Jc g8*eL8mG. ];c~Ձd< $!\/{3)`hKMɩׂ7KV_/zmB6[%%,!DǡSTqOm&e4Ş gg)Gù@.:%3riJ<]lH9oqvt=CHolw<'X_UnֻIe&yF+rm(X$V[ N/3=^Ħ_*l;!e*V`{%# =JDќ"^d$b:l:?p:DwlʰǝAkc *tg;H|Z'W/Į'>%Nm x{u_c߀x37ss>+㑱e}J]aVyOm`H.LZyǦֺ}|Ȁm:U])Ӆ\X^a$jsi 49˺DNgxm3S-uRIf=,^堠!)@=Tg/ծyrgѽ$`trvL4ZÆjDn&Yr)/~v/V#S}#StcIQS[U̝'jNsu Y-U8%޴L,ݐk!"8r / zXQ怽̑~T!iXO,rҋC m V?ˬ"S(v"VN~ȧGu.Dǚ؆ϫ3 ?X{*]9"{n&]I~%UF#,>u{ qOZawPR>AVgV|(~5!MR lPDmP( iV#uY{293Zth7XتW '?~-gS K$AznfikoÛ`eТުDAb 0DU\@*㧰16w:jdܭ{Vcn+#/$:=J84K< ?K~-ذ?e)k{4:;Z \O:XQMKL["q~"!Q>&z9bzd.T߀iMxܺ"zo,xQfThwqiO6aY1DDр2kdk"+1q> C[?^ #)pCL\<_ƨ+*'^:JG6:",C/dG H Ru42c[z r.>>zM}qһHAz90+6-Ouf B{P$p\:NcSN r>gJ4mh):l(ME6٨\![X-NͿZ@MA#g'=*bA)E^Ԧ9K[.#! u%aZATcsd6HC `:mcET+= ̇(8eDw^:M3¼+8CTVL=2[YFRQ#UQS!OY|jeĻR6 ja+jQjhK`q.qqHwgx9g Qjq\C$2F̣ nZ[ߞۀP#.K>ۭsYODYDŽcŒJdbba;aEI$!^r\9QGagd9FW _o{DAȬʈfw/' 坧 N5M0oh#Hpm|F \ NA~y >/T^^9$.QWsA-Oo-C Qc`MԆrߧ\Jnir7]&3=MAX8Z QH@f6pOʛ7[&B%N˾oR^Q+x:'GPF}YL4]6JNbJq%jX' Kw!}!"ClyJ rOBv.9<Ũ`u|6zMӨx90B˕ kxaSs~Yᇒg١gP50Γ~^11RY,YfnT%Ss*E';dt[SL?}QbdžZPiBx=\ꄟr +W@ݲb(}@d]88Y+?/P)|0,Qme53 ojXv5EbюQuj0|knwɩaR.Vw=f:)Wvo~С[!:Fdn q)~wlfr6 At7  =ܓ9Yk8c|KG%Aw)P;C'e2#ޣbfC/ٜhY;V:,˷l6X‚DҝvT pB/x.9k,Լ{I.9wxH|kWvc'J!7Nq3R,fuoKӑJd,:K3:T~sYLbS*H!]{;a (9~V]&4uuAMGr:ņ^<g*: wW sc(S`WC"gBE]fb8@臄zӷ92>0oh΁6L 6 )T^i}.>'7d'<1&Ɣ8,nMѻ{L̠{"ce'a7qoEES%M&iT1^ yd "mPnO^V<"lƠH*Eew>‘;Y[P[Gy> Kq-*>?h7*NIxj4ca¨^",uFh?E-㷞#+%PNtP)-Mե{YfrV$j L9@G{B:RbvQnU\f#状xVi2Kv}xp}-mY`=H94)~l{/Bp7VH~E{ (vUr&˭mpLMuw k>Ca[ n/a"{?&7 Tл2߫8cyfZ \6&QL2vP8xoYN d&Si/0b&I5o(AJAAr/ZLn)4U P(&CXR^{-RV#7(_zҨ*L?Qyz5sNGGy7G:;n105 ׿z6wTx%m&"$58G h eemyA"&r-/V5Ǥ![SVyWDGoMǿm4&Z-8ݐ*Jz DDr6W%qqOXk`;J^Gò_K f՗udi,(hϢx,f]'xw8Cʢʉ0Fci3Voca6Bp%L Ч_Ab2STvgCmHB!̜bK=AD65pr%A$ڌksj0pO=2Ifx< թAqnE,R R4}`5V$JD"su>c7Am~22bμU ؓ>YX/Cyt(6&πSK`.U(Ip$l(MԠImVa`fI~JiE OJ iWW]:319raGFDf9B/BT6$*d)k&'N cH}" l7VFo8f]i_ *8MjBP*LX H9x=d?kNߦ$q⫏:ld)pL!Q(ʓ1P|&O$]Aw͗*iP]Zi#HG*eWl/7X9 Fx" i77_[==ſVir3Ͳ'bjQTP"|$ (PĄHtySVޙ+tv3Vǒj18O a6nbOT7OAz|PjcY#Z=L1Iԃauf!.y1ۮ Lr1^eY*y#Sэx;ssv`؃&dliIrA0'v(IJ6:\Wd<i*Z% uXa9KcPaa'Zp>j೉Dj?>~%W*`xyl-TKq7y&6FrŨ .濁cU7ٳ%ECVu[? -cܝ }o(Jt+qƃ]@"^yx;(VH>a?|[3N 9Ztc-jSMB73,_z-d0.6F-i>a&:BJJ{rŴ6q? YL7LZd+s >uw^y "FfZ86n* .77{/|FK\!m'ɻ]949 V[gF-JG{XA7 ;gl aK%"?1Y>[]={v' I@0TyOɴ/KYH))uiIV^vfBfD nII'01&84ȩ%K+w3="m֟6*,-lQ`_KIRkS: <8< j0es(6@z4=UY$V(="vitI`B`/%‘_`#].ᕰb_<]2zr wԈZ^Zdt'QGFrfl<O)[ZpnEJ„~-f}P|;p@rPq?P5ailn* [<ݭ Nl?ka;]%ZElrru2@L&vOAy3o)soI~ͫȮT>K 1*7pt!6G,V'pc+4'Y Sڣ0Ilhvi5NWf^?:+*߱|;f G k4Z,@~4!EN>0݊?8`4NyB?QYxw:IPLǬj" T&X(.FN i !,G%-Kh;ܬ b@cw 9/lr ~c1jϞw@i5*Lp1lr7lS-<>VM 12r a0i7ŧϢu0W|&e4C);MoOTy@oKlW}#0V8jZ-$bX4Q?K9գ3O^5J9xh~O,OQp]oјHr~G_[~0݄,x&Ff~N2\PSLFJx^^䒜^of~6I _m_:~xD#*fIܟ̌x&랱LwO%hfexjd;%?MAVRՐtu/ܸ3,>d@_-.2 MWbq,a4ax4-ngAm) M >=3E\n2>j9[ڏTvxGjϔc7 ԁr>OjA] nى'i)XLb{B]m?U~UZ:es.oBGcL:kXf a<5ZƳeYC[E!Ff75ݳB_̫W1tyi#T6^p|sT%\f- ѻ,Ezq"Xq$E&n)P6#L`pKYS}p[PN'D:^FPd/cQy+igaI@V`P aCbnhތN$!P:%\ˀP/ߊX!GvU@ HGc&TrCƱGED/]ho\lk 8c­,?GuJ9bع7AFE6bJ($V$ ֛]ׯٖe CiWK" eDF]΁Z|eR4!~fo__c ub-?jDNl?`ɰJ~f'׎!lr40Fe#![ŘqvNXxJBaQ-ǯ;{AdVB}0\q51ujq*퓡>w )vŴYn'+Zi=K3e@G f.бay\ЕI][mA)@h*ۋM<&OW gž,#t{8bש(brXHuNч)U[-zXបCRHVЂzhĐet-㱎 Hj]x397ߒ&XoK$u2 ZԅY6R&YwX?SKGwgelE$HPWx Yoё׸h9掅A É٬& ؒJUWb~弘xA;ŋE#N˦t,vv\J- C:Sn˅ک)G]kWt590*7'aߍ5\d(ĵ:D ࣍l))C`qMx2tʳNNqƏPMQ*n\jl7flLlW~5ToU:9DUC_oSxr0E[h;%DUw,h+) c!B*wYV.MfCeǮ7M B;GfWdN]ؙDx,0wI^V ɏ* _t~3{RQ$>|1L+ . G1<$ hyV5:<'9sS+Tˆ]UaJN;:jIڦjRvI !aqwʎz3c9Q 1$TZ  w~+ɥFѫn(Dl5":@YYY+=St+$?;L>$eaq|,ԝM|.3$a_l 2}!u}eU}t OW `*!,pvOE!@$~t0w-]WRPZ0fRwA]YF9Hukɽ%Cg͇eԪG+ϯaq60/R?ysnX{T{0aBAK>R8LWϤLfJ8:u&/"2xxTnJ͎nkr}NNdTXe׶.3qG򂄾E`DO$篕=ԭQ}vz)B69a&fdMMYARH((S;3o]<1M&e+)gP2gE<SqvcAc\JNV7r5fcکҗj+Y(}kчrz1# !7$0/:0-)w?u>&zEl|ς.:-nąҖ$:^5Si}p>zbCcujU}Ct%ʢ8C\K5@ \ h,~PA :®ֻYzB{.vgo7I*3=˕+b)|WT\Ay"=x;ʡ+ nK Ѕxy$x+ ACn3QTyC)/V00Lu \Q_9r$AzW~,vu;$j/0t Zm⦅.k|#XV'ʏԘ/_ꅀ߃ ӟ=~6b'JהP/q GR8[T1}l!ֽ|ؿMhI4ƐQp9qÜK@N!4!Xr2Oz3"S9?CX>?ߓczlP`1jz4*GM 5s]a ũ|t=}iJ jHSv4ŌQylᦘC"" @Yג¬WIV=0fp"1ըT}n\ ȍmyoZȊvYZhiڢЦ@@m=N] ( b_FY-DlޣU؍SIbηaeDb^@݀{Ш*TD5X=rї0:a!l KMqb]AfSPW;\\S# |{1K0";Y$mՃIב۩um b.܄7vM9_^et;'bkzl^9=TG\E7q;C1< :q=DxD5%E߈ۃifkf?&PqI(nf3oxS9ׁ.\ 5ݕ`Q1|̽xcwB<}k?@ 6mm%>[s<5f^Y}7DQ~~LR >\ZCT|a FupX[{X'dh|Ӿdw qݞe1ܯ fp.^guMl{a=h9(- V50⥊;3smߙ0vSyQF̻ d )W:H,WF3iJ>xk`!a,#r<;ۥy3c*N'WP;SzکcߐqXy56Gk3YzxHˀO|@BnnH]D%ſ{(bFrb-ʬ_mեg|sܯտ 3"$Og9Z}W6Q!u)JM:8"^QgIWOlZfq09!ex~-oaR;%LB{?iBPs3d|2㊊ YF l8eʜV'vjwdv?وoV*:~{%#=) Bհcnu$Iv%Mp=6 !08\bUI=7r nץ8L'gZڶMziWnUZl4KS#]ϑA'f ~Y7Zz2=sG(2죝ЪR(-t,X#ԛbmI@MP忏Ã4!x1Cnà\zݩje[- 4P.;lvMudO>0ȎCwCXG?aZdBFLpJR,Eh%#);P6+foCi#Jo: pь‚.L٣ʐ4Ng.hwkD}i t͵Dl Cƍ#@o|$N|Q| "%O,u'cUp1g3N `9: o2\tsb'/B\5{:npdo SweoOJ y`ܙpyzbСQcDکy?RĊg>uX+35Da¥'PêZmrtPɯO"=6,F@Puwr7e>CnͻV[Be/.Z [%Dl^̔>6P'u"e[>}hqZ -0}+z/af VtED&[`xq .BoE%c r "v\Al3ZrB.OCZl ;OVi2Sk-#s j8 k6&knE< wdbX,L1~" fǫv9`|T-xT 90?`ɽZA8|8,=+S:vK{}*B]GD?x,PS5/Oy gS/sDSw~[2-sC oBnGUf-vȜ#f|9a=Dmrj1TS$9&j6ozgb@&ʷ ;Iia!CCY=W+o[x1nsfE S[Ne{%y7`4Sa옏mX֊x8wTڑ;x,Wޡs#/俄!GI<ص:$`@F3PY $1bm\/-cT_;cG6s"%QYlT Fe]0DOxJ)}= Ի0J)3P&SwX` ـoZ~my!#&m54 ^Hٕ\+Yݯȃ9%~Kz? ўdQaS-56qDۅ75[_shqxV|G1fMdrlRd:Uq[)LEϑT* n_7[`'y(^#J $"T4 X$"⺳&ӐJf o{Ixv̾n˸SOJESM^Y+:sT>5a O-ˋBE> w 6zC?$b(aZkio}{xK"TQNBf%A/)'M6ڑE;ouۨ/g.GF&3Rpf1cYF 9TUrūYD] Y,FS]:vG|p+H!|QHlN:y[k;$*~s%Kؚ3J-黕t6 x,H }35v3 R$—RX{ݚҳ5ÜE+sծx\DYD?RŹi!!5+j1BCW72|ctb.H^>~,A 黂BHʜ^7 !vЊF^+U%2}m E.yL. X`^UdoJ&r\Foˆd:=&wt3Q%$tL@W:(M$|ǥ&݈ XtKyWϽW(6] ҢmUNahkGAuYdKnL*} ')#x\ 4V`5pd Pym27y渭5Z;#;t"x[ :.em֚|nsoJҿhfy3xX{_?kp~YLYP`H !9I@H!C J\VhBS#}u5 \suLG1۶vR>bRr,DJHF56;1uXrϺFZRYE-51ljF/?Zl<{!kfmm>NY&[b`y{(#B=mӜoʦĕRI jL+('OSVSHbc+b pqD0>drٱCiG՞!0 =ϯIsxQŮoЋ\z) <8|1O} N((zj%*1fmRT|Qj"y{oNΞ=:yg-]Drq6HqSz*U,}%Syxs bj[>ʧO\ovPiaEvWILR0χ-,&&?~҃ѼJt(nP`Kj2.Rr9H7}ŭZh2(M0}KMĕH]ߌeqcc&ʜb:@ḢH&JMdFtNQ,ݍfR"X ,2xH.琜18U )˜@1@[@-f)Dqƍ#':5,pc/Dl%=u/{лSWIה3p.\$V58T6NC>%|u)L~*wuljŒ#M>K>~Ui)θCihWJa>1J?/lwrȐp.K:|1*2 -CSP#eLMU0 vE[R2qbcf6OHd;X\ DT@{4U ;c4ZncG*f2Fe (hqDD-V&Ů"J\ZpBZ枮S>,5sXZÖ!SIJGX@-%ϩc|"C~9z0*k }< 5GvU'uН'BާT59Iĝg ϖՃeIr:TJ,c ٪}rA0rJ{{{iCbvpʖ)EjU0A|uWB/1ȏ X|ԪoZkB1WI駔2 ]|Mhhrm`~ 3E44z@G|1l,mɂ㋠s FN*Ƥg吸GgG yYw)ĩa2{OgWg_'чfi7LКc9WhاÙbqH ]{*N=}c-X7qEtV5HT!9#e }`w(ź]= Ur宂8tQgkLТr&>aVJ8=\kyH k.'z ) GL[m R4MJe[Ma"̦L<_=}~7W__Vn1Ggjoh'>AOc`7OCJEB䰡ta8_Wc51CE!&|pQ0\ Oχむ)qa1EWk diY̞9w49[*W): 27┴p3I< MTM@=9ze"sV8xP0Od A"Fu.Y΁hVZWyC \a<9WGCdqjNy8V P !JwU=ׄ){)J?ؔ*9< P"6UȬk wSBXyIЕc[^&B ?+XeqwFufVngWxhāDgmsgLP+ 7bq|jLIt:l !ĊK%wx7:̀&T/7iLSNa;M|Ax-f6q8.=ҩ!eZZbfn4Xy{n݂.!TڍoH,A<0A?XUzUȑO6zw,Z|f!@57@JۼRsS9 #]?`¨Zb9i"}xN̜'OP,JuBX9L+L:O.g_4cԸ̒1|am~]Ԫ⅂[й+ T9TtTKuBp OJ 1d} ,５4 lSLbX!=#Cw=dCtR @o dj.q0_C@ºYLU=J>p$&Hq0Ru9uK*uvဓ5Α|Owƽw/{%(3]ړPGov̆j)9#z[n./ßAdۈAhvӥ!ᮒ#:=Ap&2&A $.OE>C֣l0g HyB?Jʖ>A% Ph>XsJ?VSm֮m̉rYiM:`NR%= eoFzXmcQn1%k{zgvvěoF[=X3gC76,Wk{30?rwb&:DPYr !3 件%n%5k;5 mt`1Ye*mUcmDA"k&NjRQO{9-\8JRE[7?c\2V= U:]n3 OSԄz=)*3EZ{]TE<` $Oܭ[%Xn]F}q< ?b%m2\;"L!Qa LhBds W[lLp3/%DhPQSԒ Mc 7ܽOl2~'zktHZZ.OLZXӆfYcC'>{||:uiku$i vfKQXلe,k@''[lb_rz/!wIEOBTV 5hD5gA4졨Xĝ<G9qn~ kB3U"G2rMDz||ld PƺXv((P~9?W,\ݸ,4 XG'/߇!P"8": XHl Y4*1^J Vva&@Rdyiq\aTAqxs l{YpR1?diºNaJsC&Rj0i% tN`Zyrd.^sJjX;fjQv%z؀ttٷS-AM,N1{|[XN*! h[`eaYA0 hߴ1WH95If`ٝJE;+_RwJEg&B4 xMasoܞfc!]}=G;iC_ Տ817K p}IB':7Ra/9M9,.}l'CUB?QY/ڪ~51j~g<<+ Bjbԉ:-Ow5@W0vG/*dfSr!aɉך+IUZA+5!pM\85c?=,NJRz Rr&@2+Tp*wKUK[QBwIGDsvtD_O 8xhX q]y82Y D1 ]Czxv$~qZ 7o!{~ Ir֢d&T`~*Gۚ:M}ǩoHc}%zZ5i*D^r<1}Np1*.+wGɲ$X_$ٻլ[Ԣ/n 1?2X#@r"Nio4OU *ҶdZ6ꄋqǖmy(D>~GU:,Vt&Ar1Ô*uÁ@ciSQ_QkEB>)WX_`Xl4#ެ͔g.SL%,K="&$]4CO?F Vׁ|P2^Q.u᷅5W&--D A;zuyl=g=FR5(0̏VJGY'sDƛwlk Dy-W&htϒ#CS;^+mO/Z[[ JjMX5u!Rm=|șHs>n^u)濘4CT<XXթ-C8wށ_rg!@%"˕!Y/눬W%)dIRIC N>bB~Bdޓ)纀 amY tJ6|nAYf x"$_ }2t45t%Ee+>+:gގ+E'z>B_yjJzRf1,DQC) ; ~tVq7kOv`2$!Utn2̛z[XO^7hgLЋwNL%ڳ@fL?9ӷ d%uFy'޺5Ҽ,usJ6ԩ-8H"sٍ%&>㿝 =#V%嚬k>PZ^ {OKm9WD>^>$.؋fjҀPx!G2-oB0ONy)Ÿ1\uC>)^ֈi°`9n*}츧2EQkW2k10, Eo-ul˼%\}"9׭D?f(Eu{6Ve%w$H7,B#)Ure8%C1e1/.߉Zعh]qMMg4,G=e$wLn05 BT)ۛ8жJpxpAM1̮{Zx!~jQ,soNVB'yn|q+BQ~GrHO뇁^THoy|>t:/(3^"Q67 }5y*-־7uOjwcYlv`vqRx ھհ}Q?nƳXch6TtAzܳ nQdܧCh5$!dU<{ElQC'IfAZ .5LB9,a-K>sbUqd5׬nȦp'༕MKϢkL~(dWgq1$hUџj;@>nJQ-OzUDS6v u^}uPv<ȌC$_T[|:Tf%-U䲆/6]h1/pa{F;ɔyNCH&7.͉0ݓY8>=y\ΠTlg o3@`?oq[:bJ預ߕnFrx5q׊}mi6#KofhٓGį.u>f^O*$꫰8#q;>UgE4hc OkdJ| 5 OQ-O1_xAi)ߋGD2ӥ%haE4.-{G}/$ RY(T=v/L08̬X#)\6/Cnh +aj Q4~0̃ެc=BC[U Mgk.@49'| eacf'ks8]Zl8gjǑ_JqGo64d 0WeXfw=§OwP'@A; aZsUvKr5AT 9态TW7 - hX''Q=n is5‘K{qG DYkR qrȃ>oŮ?/XWolqbYTt\= 4mf~s߂,}e:m3 ŔD\,E+-`jGjb" HMe_=Y-}zȖzX,yariPGsʉ2+!]_rx~"䐟ʺWĩ׍-QVE/"r CqQbi# qf,@,<'w6ĩZb䱧 SX#\}c"2*Pa3=-!.7xΣ`3S)bO&qI7֒xK=2cuzRWt;A,%F^@k~EzdY z1W6ɍHFH?КL`̜*^'fGÐ?G#C,syz1# `w;ýt0*譍O2;)1;I#6iaBwMA fؒKP°c)?ؖRADW% V>̎H- & bA& ZnT/7q&NQlEU>UpzP!=ȥV&/t"rɵi7XC<S &~TL(hxFE8t]42uԯo6i9nܕ=zYM8JӠ>yw֧䦒3Vv2:Njf5 ӔF7XC\6xF׵#ԙ\IO4UhJ 1" ˜%n*D1#9^]rM:Ek`Nxp"БTG/(4vϤRG5S*I(L'k o#%:7<$|Hmz0͸5j:X~2JN&ꮻ2D dbX0)/Hr ]!Nl vk/mƋNR:6A3YKG;tguƾ 0*c]PZH"c2,3'\,ֹ3nAYLJZvJ8qJ ~b8AD KzqŒkKbBuGU"a|0& jXm.ä#ޘHI3fcx5ql4*5e A#`6^\h~SJZFJ/={CFw& ;2-j}Q-kOt%m#}vLt_ߴ^؏%cʫb/_7e$x \6V?d Nb[7#/9bbW6vcm< U8)IUJ&5Yˇʄ4+YߐdV׬a )@WoPOYq7ONb紨nB(yJ@oto1 ٯ1TP߫M|zA%+Mz 9Ef[q?>:L*J0=߀!ѧ]1_wj ֹb隣p&/krAԲj!1AB4g۩ ̘:h6۷JvÄD7qG-ѰP?34Rbi 1W>^ّM|J#Aؠę -"@dv'0ؑ+4Z$L9pMe\od MҖ[}1^T^g~'#Mj9X=Hd:d]mdRB,A؋lE̩ [Xl`8~|fz'j%'e(/T l={`5dʱ, EYM % ܣ4@;Ò"΍qQ/EWT>^ wP=wq 9T-SrhtWjDjΛ&'Gz@U{|7 ÜFYYt d[j6;-j*BeNB/bޓ *~T;qTܑ}.I^3K2 _Jy})Qe* zp3OOۯ=on h8EzPN>TG~pYu|{B0͖a!:Ք}rU)}:bk%*G'NNL \iG=.,Y_u#0jmdz}hY%u(rLCv[$$ ]h cIUqEҞn,NyA#vOSaܚSV ~95W/+հy҆eApl `eheq< q}غr-ւ?L\+BZ3 [YZ`- 1\HLjHo@9C6PM\ E=jg{t_EWyX}vHeß]"6`7bHJF#YE'gU]*aiD(Edyueaףw(6Q?2=ڟ.Byl-qr5h8Œ4OӋ> 1goھItx;V5* 3eWK]F??Uf1MtImhVAU!֘ %RJp^gI9s^z*yW,ӟ ]:eeAڎsh8f(|=P֋eGKGC)xW<0؞:gwXH{u!%׹ D gAU`qi4<'QKV?v6gcw0RzIw/\Gxv䶅cK!zJM.mՑ|_2"Z;{J9vlaM@mD=κ[p vaO5 4eV9Fm0$Wd^g}x!k؇sJLCxdy?z72e bF.J$3-WtxݟyBWt̠}5-5撶7fgF%.*Ku+:8yTs "zV1 OBgVՒjl'o3B3G#H i?^P/fC'\9!z5ݕcWGbd˦,Jҹ9W|_fj@avøkyU5W\ AYߌ]i ڄDu^M[4xZT$3hN_,h6쥺>ZXgQ?5cW+kٕv`0rv;l-a~?üLhۂƳ9u7\/UD;c CR\K@iR`oNP䳖߁̟Qب5ӨCC.f\(IIjhXVc'kBgP?KAX| )[u:|e@s!<׽ʏf{J*yp4. L']Pu]D]Y￘TwI'V&e<˻= ^)МiƶuTer@xQ2 * )$_v8H@*Z 86Xf;0bm׶Qx T"3PXvЊUS*``2= `T~Kpvo* Qh\u1"vԉ$ |INkd!c=Yu6ru-I3XVNP֣ s~vt̴.܃}[r6z0c]knΉ% _ >i_pCMvWk1 &:ъe x(sc}2 &圖=̨چ/`-V;2Fvhw(O 1'Ʀ+$EL;pDGf};Y/wfLOY7Xpjce;{%hH5v8BhI { \+⢈uQ#}n#X |D=2pL6ܬ4+9$atIq.ykm"vZMǐV1ilh &ygfsO;?̽\,|T'U<>p9v!hzG^Uy3eCfoN,akai=y¤=ިSS6%+rpel;91 1h1 j:M׻ ƒY0jY=ǶG֪bՏmx˝ً`4"?ZhGqˋOWqXf4A=նM}ڿhB;aHR|d1f.Ԫ '*4Z2+Dzq O[HI7{[ѿϐ`/y_ZŒ|c?.)wm!-Y_웻b 8yH-&XR ؼW;e['YP>gC"9^:"1;z`I<'7~n B [y'->s|"g@z|UA{i*9t'Eq[T{32#0?!z)XK SSOgfV̩[ÙI p݁@BwKU_5࿅_/MVjW+4_&q.Mȉ[nGV,N u~vuAn(/5:ZQmtI#|Av_ĵ%Ksi9%M~~ lYJPd{#ȳv'T.crq9v/ϑ—=GɁU0>bm89c8^DS$IL6Tz}[K,Kĥor*3\3EAۥiK8V\$px6΅WcLvȫ4RgM;]]fx Joh'Y4yΏl?"}p%0dQ6mqsN\'\yOwnW$e@4UWD=<]`W6qiC#=+p`>R g~SJ+-j$4 ܔ,qٝ#j+dv:jO:$3]6\'II`k"ejJ )cFͯcgG6;HVՓg0bG0Z:x ?ǖ]ҧꇱ͒a/H$kZFѹ#9erA-D5=d؛5j5ujAK ]V<[p'M9$LV GZD`3qyKM YL5ACH, |Cǜ;6^WUYXE<v/EY9> XVo{ƞ+\Ͽs>=#z5blQ*aL_Q* fʗ . F'X!aE  zٞ8kL@)丬s3 3X_G*Z|;a7)Xz~"_,_Ʊ:RCsCHMP9&ImŃ diEg2/ $~Ʌ2M$ؿ]C5e8[fXDpjMUk=|3 |*z466}O`;qtpS PfڋJDLJD\9zCp̓q-…zys3/9iʙ}GEg '甔:(? _e Ǣ~l;_yyepEV谄䓟^3|CXy1[uק&=g{1CLY%ia@SbP] p'$}AX݌iI|8\Ϗ"7:z_jAuFD? AWt#+Ȼ֩ײ¢i3i)`E9#m6k,)P7HCextZ@iXe[}Sh`I|9krxhr؁t3[RӞpf ޗ?~^tǥKLwi/ $.7X>|`;&:v$ `!swNEWM&؇V^/M.?ζ*`WI؃lYAGyDU'V; V30WU$HuLg&e8xD|ȑc~xjCnQJUI`l%NyDH)߮ksJB?qPZQ3>CaP<;v{lbCP@)zz/x)dy|1mS}IQ=WQ\g4ngk3& ʕa9E z=K'Q]B41#F2Ae^Sd.'ArNsåE)xզPw hc. ;R@4'e*$`+E6RR(Uu-d-+A[1U)wTQ@(EXC-N-Tu^\ppvxW䑑)Og/8兄M8!{ "F[e6惢xMOo!%E <[岌rRxEcAA'A|v=" يa`߽6Wiߓ+6g'[k1"0" F83r S gΚlq;IxES$~tr_2_'Q_-`eF{ʓU6eYw|J;7[:T{ld&_m |a~=TWw櫞{Sa<[ 9?}k69ʂԐS;i8In2}~^wx:!54cZ$Af6Ws-Ȱe`ITO=Lo?l Μ\Cl)!Ci'ǞFeq+QBC3$7FwJd A{P;4ض(TVbSw{noŒ`3 Lu?E)BKݯ~_?mDY>dڿU?l4*J?>q\ rr J9oBo~)dn")9^ʚdr*H쏀Ew (wE0HC:FG)P1( Yy5moQnjƛFzn߆_͵EqevZm%d4@yQFKzdE#rkC&&y_g*Cj'GA+dvG.xWejt$:ݵrDG.cKyضZ_WA)d2|@kvCX;_(r< %*CXrh mj}Q]Ir|u|Cs Qi-o V+:f/Y+9x:~| [1&rWHJ_aCv/J[`uڞPa_TVӽ;ˇ "E o߅6^)<{`Tt!Ɗ4C,9N9z&.כ8Iw`v.Д`}MYUj!q `KAP^$pb*֜$uTM v:hh9U?wOf7VD5A$<_7KZ8=AiGF{2 '#Œx[g1{ѡz"u|O`KoL3WKRlpǀ0:dۅ} v~&v5M8f&2Y`9ͬנhPFǍbÕ+07w_I*udS0l2W9Yta^9CJyYɭzZڏTFϗȓ.W dWxf]|r8G5iGApS[y.6W^B,//A&Xv֫K??+p!(^!8aɮ+L2[$_;&X~ƯBt͓N54 *V*IF"xo|uMFE耪Q. 6!As74`ڢL[ED|6>} x>-&D " '='m `Ӑ !Cx smzw,T|Zy_߽CUR6 ;KwN",5' Ԯ6t71(KkO⪔`:-FviWBf[5V[(rWv'deH#7Q-bTsqRpnhJ)'ړ2}" 8|Rk\Ȧj9HdAx=m|5Cj?&husdC rW?kή's C$)Uy$A1Gl &|Gx\ iXR]jV s}4]=q] _@"<-9?6(*\.a!nlW_30j*fb3"sFL.N?*ob҃fOiIzmsV fD8 B簒6j{+ow^;p'AHg&dq)=KvS˕u/uY{tQEMI 1EBXQWOfw G He}ds-Ά${h?vmECIȃ&Nrwv.h}hìV?8VWmLΈ ub8&nl[{.xb`Ėy$u3o;7<u5*X耿"Z z5Z\rզzvm.躠6;:4I~Z]rbDseh:{T2ujw*UwnN !W8jfͽK%xrlK?kRD* WKZ0;*;(n"Oߞ`F1ͱE5=w6aON)bw8N ӻͻlcbs ҒP}[,eZ=)|AY='n!\vªc*F9# oɝc+>ԧ8Ur}3a?^e^}/y4tV6{WҠ>^ӂf]Os16F߂^>,23J1SlKb}%0:dI"} P#:{dBaԊ8,=ӥyIO~zjYyߕ`8sG}]`,#E,FrE6X0Z`˳u`/nV;5 GlG+YXN::T4P .]LN1.(<$ey hhȟt3 'V=Hef^'xbU;yx.Wئpp&bE㷰!R e#JMr4*KӳD(sKzT2u|[j+z5u:&wN "0y$ P2QҲq>9ߝ *  땷l1$ײ[Uce} פ(4[Rnon5ί> M\z'g b^ܤv$C^hL?/`\>n^h،$`v\UI{R/7pD.NwjRt’쨀m8- 3.b] U&ϝGg+6WGS׌>DpAk}8o)] K-,310e ԅ bƽ0!om2_rt 1\dC&/mZ>Զ'\2>zsKab3f< nŧ*p~?Տ.//};㍼̖f/*imQ`{\q莘S]hSkj Gw+~^L6PE '}uE}*P8TIY7hC߬OJu~99Pn'Ky{T/~lPic7sb"!Au0haYVK#_>@$KYeTM\f _*̜e0WxjWH: `z+^hffJ3^q` . O(؜6[=A0z1~5&@: X#CfF2Bi-Lߧ@f`q$I!_*}~[Pٗ^<Ʉ-1|Uޫ[]4kX*ط:t]+oIĢ4cycS3,UFxL8RtL&Q0IA#DSMjq5l`c88VC$s= U7yNJӹ”Αs2v=;xЋޏ15Ot1HBIW;xm M8Uz(U Y:_{![dhϱW1'WcbDE$bmMai7k-^m␘lqxFRe(~;ՆӌBt#3$79/̣$OM$@DT+I'wM wJ wߕrE3*4ܺSڭ'T Z{β.[UEB:|ty1P^; N鳂fc$Z ;ނЋ@E9?ҤLh)5a|PRK~f{iļLTEwڰVP_R|q:B8bV^1ȹuזO}Z+>X4L]nR1ab^;SާnJRC&Gn |ؐ3L=؛r ( T-!5 gzYt*3dL$a(JRPc͢OwQ{w_1[HyFfq,-+G/7}~H+.}-H8kuh*z|ًju/f(ڎ_ӣ 9Gv|Z2W2Mp 'n6 FiQH0dWSNYc] ,ڕ9|_ҷir.WViǞoXӬxvƐSOR*l6zA+F:O f@DL/U}lm:4+pB~UWלa;x`fWfIyy,Y^s|v=#WȈzޚKIdew 93bTq<-.8ud:F)@sRiS@cZD!$T<~LFv/@1f?Z~kBF،}E=HELV XoHe6a@)X7>*VG{*vtWB,'_?MJ6؟Q|Q((hXMwE9 Hzb,"Lt}whp B؉@F5FME 23-v13ܔfBC%`vJ8E5)S~C\4n{+6-*Wln;q>Қ>C2 Yip󤩆j]&BFE%ƒ !-?ASLT_izK["qOBQrf H4䒎P" :>'<RO;%ʞ/XYWʌWQ|m@jS (O9u_t }zQCwW#`e4ӎ7ao9 ̥FRE<_w?[o9&e}iHd$6M5 D#SDE ߯ f TOI.~' (VT;zUl\08G pIhaDnZsA~ W7b1ϫ]mKImyKmwgKyaαuғ>ɘׅ26,6첚O \r˘K-'Feu_@ <%njv pG~.0'@y1SMdTm]sGsew LY{Bs6{C`^(: p "*nܕQ*F{ʱ[gV^g`[hX|p:.xדO8$|J&ub#C U Di$| ~.[m"a9H7I"vb@+_AYej;,YW\>34y{l "%Z#rQec 0_'uS|RX{IRoS9uۊ^EoįbQ?S&=E_:m~zILn i:e"T˭6jO~~3H|wtLl(굞7J]wQȓ _1",Ne`oF?IFf'Ф^\*@sfi-:jC]sDUttym&JIk:5bsIA~ޞǜA3Hg9V5eg&uzT754\lQjٝ4].^pL*Umbj7lC{\ZWjK,_EO/jtOiNgGVRzl-ItOG[ 'RQHM0Їr䮯msѝ|>J\O4X^olL,n)d~D"}hyefIr;{Nh L:Qi5J H"dQ$ql ԢD #[7r \M·ؽr!EVY^|tgjhjv=tA}x,2,AQPĺMͳ C@R ߪYm İn@O#$\ДSæ~=S'q)b*%Tnط{2 `1S d W).ҺB`Ob:Cnw$޼6&u* i-Bgއ**8t\pK" 7T#'-WܪJTEŴadCʡP| kL. !$- ϡ4^25ks(>V[Q5J}61V5.třY Asc ,2Q̳\ 8!VBhB)WCDdqoS;ж)zVe&>#)P̡ڇ!INU.۩VW K>+/Ix/rEΚf:>͖Gv:Rlp^g}%i|u$C'Ŷ.S?4W'vKU9$I (]fHK_Xi5v.c4$Tj4$$@ j3K 3 `BTz4˔k9#%W =Bʦ.P2@q>KsE ō1 ڄ斣~f"|RH.%n+z=c#[Iv87sr=E8D%# 9eLh8ViϷ[CK$U\T#qg2E֦; 4/MhSt9 @`rkm fgct,2L.?ﶣ ijW/Z޳9U1(d`'g/C5PǕ~jQp"צ=TB>gd ?Vrx~(DPng*#~h)sogtCKNE= iJZ4ޭG]5bנMZUMୂ(۱,Ǻö vƥtSn|Bx('Ð5㍀^Zpa,YV|\NR&HS[V#6} om6NdDxMߴFB\YTX/SO=)5ecM%IbQ:g@(vsnϵCZHSE6| e[c h18&;P D̜:h/f5]%SOYZ|OFh>+uі:mzGk|t#8҈XI_Dc/5v\ƓLCtKFl)YFF}IU搡G&2k0Ӆt,=%dA9a,)!2\RR Se gjMpĐ X͹ULd G_˚ZN~frWT|8b*%x]U8}f'6(# {M|򫃈 KNs0}@ du筒q'GvuEbF4;,Rp9Vʩr>9.״q&*m4 Oi2b|x?_*MVsdKBku3}tOJy>  7$ 5iUj}RB1/ Lޞ\i\2aUw[xP;|Q6&ڿnЕ1 aD PYmvN6j'4;ʐBn"hm ηxttZH%`M=/X.y: usK+ɢp+um{-lPK=L踹z sVjR'>G=1S"w"אWjt"|=ȃC$,^:N iDqj @v?AEV/mM{h*T)Ӭ_U80MP2aŸiv-M l(a/`u]wh%EneѾ+7N-xg,݈Td,f܀7`af[͸J^YԚI=&) *y 鋝(@Ɵ6Ѽ:z@Wb=@T>XV`8j{[+OF7VQIâ@J+E/պQZ?zbs׵$H49qs҇RHӌC7/̰~U (6 xݻgNCJW͛Óf4W饨FڌpiaǠ \:"OI oǒ`o"}0DjgJgLSP K:OGKc6DElE@&Śsct/[{"\Dsz9,mw;8g!I\p O렐F߯'--cSӻPR=0ؙNil0yeXJ+8.DiK=zds8Y@IqEaP}kHVf;p;8T"Cxqn4 :[ ֵ(1bnʃJ5{,c'e/w³o=/X'1S2-Efɬ{{CK]״44BG|+fExUrV-/":Ԏ3{9H"Y!< C*^!ݧfYx-Z pFwb5$q{iQ*Y;N16}^Hpi<"wcX0PTEW7JsUtt溊>e;71kJZTqWq#grIϰ\+1 CQE]IdB?赂['yN&>c̛Tyr{GZȫ,`QۯlсjNb1 T K`Ւjo "OV;6oHʂ2}_ؤ@]xLI#]xu;h.ul5{DXfxU487'>Ѻ]؊w46=ҡH OyȥY,ݓX>ѝy:9=X"qV0 $%HdX%σ'qwf,%x<(L(lh72&4( ]b6KcBV|JzYmgX7~@kxV%x#Z"ʀ_Q>RׂE\Ž# rޓ=Nwrb#Z{)s\9=*"5OUYʫvCiwo(lzЫ8_6_;HqFG*N8x_6ԮBFveՍT ,㵩)C/PӸlɍi(Ogh$wM'$~^s^:G% QioUH!a@kj2T2Owl quRJwRJ*g nJC;\IxJEB̦e9O5-㋂?3bpDqe?9XRMk-;~ԿP7nu#yjE] \$-kqEQ+(٭_ī ^"4wUdO.;;a$3q]U[-YQRjJ| ŒV2@Q]SJ8ΕcҜpo)Dqm@BeZe *R/Z9J-x:FvuƐhTTd#)K+[ Ӑ"{?2f=n3S(m"+p#7sy2lfm'ӔTPњeؽۀ:BIāg՚AB77ܰ4NTogzTNU蕜s&&@i[ǎZb+8h_ 6.~Y&+i \ 3P3k22upuP˧㐢´ GW[haM6&%v@RCDZנ"mH0l=P>-l$+E٦K8||M[)Ehr ZdcR}U 2x{Ikz~gZ ED E.SFʶS_1t|v-;ѻ/̒Y4mS"EZ]}XT_ivp''yvPau01}+` 6ٷMӯ5S%d-¤z+Ƒ+& Ea Tuೞw#Y-k]cEԢJ2}Sz~\Bj[h-`ߖΤ(K8̛Ldp^Y8 un$/[83q̱bΩ~F)4g6qٌ"PñGIxƌb;rn@)V֖MJK濎rɏVJ59/,CߕKO<ݧXdKc"V\I!|o DvؿqJZuh8l鈄K1A&L!Փ̗Afa'3!wfrƙأ4 EDĉP&]n*1zeY%7E ʹN$G*5Kʩ*j Ƭ<#W[Ak^QPeY-VAV'hFo; I\,an! we. m7j6l#-j =,'uIV֚r؞ЉpPD.폎e:DB1ɜ;C~mp9wjX<>qL$h6sAP]BX'+]<^R,\l?YLZ)Kv1>%Z?iGN@ rb{*XhhT: *uQ' }ф3@8*328=@%We0HUHq;JlH ,joƽؗw*9E5 (T l.vz2U dZ#RX*y1[mƇ;Z@ ē#waHΤVqcy")dTH骮\,K_ˬAV ߝ_"__[F>Bpw"DHg,X=ۢ ١dfBh=fuoc5ٔ(.$U$g;ZIq)oAZ{7=3N\0ʭ>jgDo\_D`*=x=syaZ IT26`bAE-줅RVcRAU͚&^#^zsq%2-^L_5E[TkT,8Wihov[Vxϴ >@֊c+544~j3le Vr&GU2W.vȜKQOkvdu6 `~ݛ MD5Ra̷t:n"Znc@Q^",x3F\Z1i&VI&U^K5* NNިCú7? rIȃP!'lab.gAtw}fC,W .ɟG#i J}q a'JwbPkPf9!5eӮ*%aMnb{8;kq_ rrGfگhmI~F.M*n4.oZ^knr ~DgAVG֏q}җRQVPjocw2P_w'CmH8⋷ᤊnfuMoKU{sU!4MكlRu'&. ISGe+Fk@u%y7':&ڌ{3#3!y8R㥠1P_!,d8ο~_vHA E\ھ WȱW-k;ol\m k 0狲c(;0Ζn&Xs ?7S [3Hm0CO' bɲesg{ww,_.&Lxtt̾=HG-A^ W?a!*~y_J#w{^oCjT_⍒YxlMF[ z":\w44唽eɾq*ό?VftNhn{jNT M Fg!; J"]e1>q?Y`}J#\ߝEz}Юq[_K?gE?[ IhfCu9W]25=VhN{q+ tG_)ꐊԙUa:(r:4@FQlQm"&ԛ&0W-ii>TwX8J t2U[)鹔'bC{X5׵?sEdQq{;'DqUkaާC Jj>K?MRhP=&t2=\t|?K-IW`y7Q9 #&fG %ޕW|SdaGpf!F|fi+rl]RY^}xl-z]Ye(.Y82" t}mo$9H\$EzD&%ۆ%lˉବ'\N;f]/qxqhJA۽45Ru_RA+Pu#@Gv z2-e`qzDx u#'[nm EcO,L\]LPq.ceQXπʛ*#6"8,pno(G7V%ܼ)ټm*|6X@H{]cla3ǿ;SWsG46Ӯ/Tx=C|\[O9r3xV0\7fMa7 `d Y%W ,(vgc#_\M_/uE7]k[']zܕ':MoQpou> xrvB%bJM`iYpkO?jJ$S~ceYcmO3ne0b2T޺o1A<0>Wgq *3Swüⳗ[~W)0sZlx'(p!J%Jg?VE[i\R=g^)SE{L:R0wpCgŧ]J/P I&^v&|t0ݡFߛt)2 PZ~ 9˂,AX,g؄}QGe Q$ =OP@ pgV5 &aX*ӗ &H&Z~<"m:1y1cHl-\ax-/ Fqqi RkZ"RSs"( G!Y/ȟ-&=q8fb(EBe4)M}15ڧVIb:otwfY$8 yv XN#rZ2J($=iY%PzwT%.Fgʸ,fB!+x|ġH8_!Et,ګ.F\ ɤ9dwe2w?˜0  t|rSs\ڙ7y4KfJ_i_4X!UD7wk[iG{:bH]mV"O<^ z- +(@ިlim?%a,Sfڸ;gcBOG,vFH9Fa,4JZcb[( n/][p8Z/SJZ}0$Rύ+,f mHN6f_qз!뭂/(.Hzٙx?.C`t%!ǢpTFڽ|WQ/- NR.e#X4+*<QE_1ț=W4S+$=Ut] ֗&g-MӘһJѐ]^{bo T֞>PȾl|dĜ;_᧦:ɛEvjMaS׎ ր~Ns.I3P)оPxP;+hE=f`5gfB 2_`d"Hl޾𢺛yGS;]v +oW Loe*У ØVLJE6g?Y2lvojɀ {8C6jr(Wr#4s 4K+%Oq*csɜaC=,‰87IDUs~˶Y&Dt/\@gh?yZv"zHNδ;3w?b53Fm|e]E35 ec\5v谞x&3EG}|x7'T)p(k_S5ј#-p x@d[TpLGTeg-tEj-vKl{">>oaA4a(po+g Bqd]?3Dr6RLת{vfF@Mr@ 7k&G A aS|uO uzZgPfki W["Gu7V \zhz f vke'o$Ήlvp i)5[4~fRT.c@ 1 x߭;T;IۥnȽm]iE͡x`pIWi{Wm8hbez"8M}LBe4,O񷳭x|s)nVT[\gCFk.wtbXRnn飲9΍j@7E'YRYH~1ö Fd*Oj~<u* .L}Kܒ2;pT c;=K'k\C;\;ic]`;EԹwszZ(MzaPu~r쀖3PnUy;RqL1uL'tߖ!N *Ʃ@P7G=FVൕb 9~t xҶJ dvH&@iyz[rY *Y%u8 5GjcA(kVs1]ڧG^: j'֨C`T^+adKlO쁌xu3y'2"2D4)Rz^ VnCиǧ.GJ0TE+#?QzC/?X1Yb 6\B vDg51 ݷ kVrw}u~ Ylb?(k "Ơ_ڱHD0l\SوW?c6C)8j}&!Vb|gL0~iOsզĐZ>a*o1j oqUeĻgXn8q$n8SYuTa`Ϳ=)!Fշ@y$:ņS|rb(|֗ھWP;ԐId(.%X |}YA ῁/ J@6JR K).տ]t LcMHef*LяLMNo/ivF@^@$l+o6AK/`Zg3^qG{(ϋ i= l_3ʆVO$x=J(K%|ޔ`>YwXBk_}M)N"8$,gn1+ek@ٚ+J5Si0 .q#igQҐ!c̐Ӄ26!c[.־=rE6,V(>x&bz& =sc*^kԒw=r2mŭS2Zg0o.T%c:MS;nXC(q!D `tczHOV؇rZ S2cRr>1OKF\`2k>oEYMDÏA YY?nǸQ-U'c|QhU˽p{ {ѱ!1X]6M }o5AKcӚ]DɶU` k`R\I,,źM^JK_kr%JQI>M 1:e ]m'e)ʰ84^0AWLUQwԹ798;jcpk_Z fj e'i [Ĝ[A!q`XIz0eo5@NVѕc0gyW}&*?"GۺmරiYՊu+r l)aB`hyW+jJ񻙬t CK%~kyfp7P|xfH0=g`jI6R.bѷ}ԚV]@yvXʎVݤAI`} tۅDJG] -%DӮkS8 Ƞʫ4f9(dkEV)n1!#^6W]?lU7N}5 ҈Ll"cs*m7:W?|c%SsWB[D|Vg֪AP=%󭳱^*{?,ƴ e}a8{taƪZ))KLfQum[$g8!:~;?TcL2asmsp[" flV SHY @^WO-o"FϨN@A{JGE0S_a v-uD [JC%>ap}tOC G 8%T}Qmm HqDԢzwA}`pXշ#QVrzIUKh|~wH[^GFG e0} Opaf/"Э6._g.'D߻e)E`nbe;bbSW|rhM -'L9MU<O:V4>(pU'it(nkA3hsSvB~n'CgP܌|*(&\%>:ɸARF#UJ.q7R/p 0)?P:rRuZ![ ߳5i!SjIRi4?K1`dz(v4ϩ45=YaMabt r? E.a\W"?0kotfm_3 Q^>/$X25@}%(6f"Vf?#Y{r/jjԈ ӟ礊X4n_>ac8@Nu9)9GWmUl@.X:v 흡eF 0Kx{НhpgEE &+$MngNp1b*BCa" Zl_X 'MH'AAŀ98x+Z(s( E fiHbB$sj݃EV# WpMe2-A \퇶s(DnZ-x2¶޺$|'R"c;K4ywmd*WxL!JW,؄"]ZNn{ B+L@_! I#1]Oh1b! j`s~9(粸6uƫ*jҲ(iF~{`i#n5:ErLfCqHted6G!y?W.0x3#T 9$p$s&lqmAE0(ܱ{'#NeEDoj;+u3bB>J;HGc+|jSOi32 w{oEOfKJ@(MiNyE}O_ץk7IV4Q:Erpo ᑰZ * )qzH,B(=&^Y21'ҧΠb pFv6~n "Pf /ĝB((Dq=K3Ø ߼n;ɠ$! bgE ?ȆlV)\d4\93@s WUS|K'BhPntJ"a_q0"(5rPᯒPel fҞ}b> RVu8ZK׏,3=c>oF0Sa ;s183Mt,77KFnǎ.2d=~a{\kjA "M a}4Y_G}%b= .&pɓtk6ړ]:>;`k~͝U E Gf?ă^el. q/a试 qD+YzSԭ4p׬FռkiI*ÓS0AFz-} +Ê) }X""W?xl_ UX%s T(TuLj4ICn0%ݫī~M 8lSXwߺve8y`C_.z}a2A ' z^|b#ӴGlޚGMS@vRŋ]zUy&*YG)5?" [Z6Fls{m尲Pt>Ȳ§쩡&BOOsɆ,ƯuR+.TXSL>_VhZb0rG->zgVЛcVL%֮T#4l"=EhUTX*nh:H}>2\JVRU鱡L2Cw}[Q,m1iv"$-hOYvJ[Ecc_skh`|7zzƸ2~ƅxpr+z^J\rbM(gr!E;B=Բm]\gJq#eH,G~)/v.Q0hq9Hף r7i:ku`|3O߿^U T`iI[hڣBEϳDX`]"@f ^bwc,\?mO{.d5YHYĨM([bОl<-b c@q j g&NٴgS[&7s/ehDZ9K~(J>X7 S нX?C9 L;.LA?V EeՎaL &z~4豘 ZzJ4*'1abL48`F (:?\DT3$g!^CԻu eU)L U9W6(%sVK|F20c:\[R{~R_I)h ڳjj+ !m| V tЅ"*}zt];7n0`lan20_Z9RD@ hb"'З> dg{O~S_3N:+<'IVԐ' 3H=ۏ7$2c!;.G d:ha:r73؇U"F=k`vހ|& QUKt o".υUF;͠ىJ:\AˤB)f&ro:-DPr3!-؄\Se)S{xztH>7ߑH8$< 1{C/b}+ iJ6+qڡ d{ |jfw_ꧺ yr["ΪK2q-{zB+Wp0 ]QWۍ ;o e4NW,A`0xLS]{k0sRrq#JK17 :$ C99 h=?$ D7 Z/Z-LA*y3jP>4+:.4cZ*+tZꞕu҇gș2,Iݕ!Qm4u^{G,:gcF.sye@DCIkt?;)ҼkٹE|aQƯWʌ?鹨us7:$=!>o14}1FMuC~AOols0t'M7 5FyN!G-[ *J쪂fH{E.r 1( YtjXd%Qt&b`,# _*O `btIO ywTP.SCQig)Sr&Uh6Z=e` $ $$guZ Ug9Ƙ ‹ɏ;__/ MXT,K+I`톭D*/$#m m 31BV o9{_!V͒.UęJYk >˛8@5vwM@JB\ 3. =Ǡs&T1Sz[OO`IF6d0A1+ 2qf &Vkݼd8BnΟPК3WsHJQZ<'`)NZ "_\Kj) 1cűOJ0xly"צ@А-y/[\ad9QOMY#c*wPAvF'KO\Q`䚕 go#3* OL>gGh{ }pƟ\t2A}#s +iY'gR9uCۅI#쎭!c|}ك N*! r%@Nȷ7oy2nh{ta(c~l.{i"0x\'l'K=rY6X SSZg#~to OlcRJgT=XF%Kӌ-$֟"Cb3/ޏyՖْs ^EwiW1Aw^XU>zB]}V(wn qׯ _ e[q{×n ɑwh#߲VE/Tqߖb`:~ذ_'SoamMR*茋iU_Y4a*q F7\U y0V-.qB)F4qFxېwbadWg 12Jsq,y&npA0$rTJD*eZ.%iShKTUO*͐{O4f+{h%2$9c7ֹNcuNj˼Q0殛pS鉀k8O'mH Ki~WQX1eZׂ]x'1. c4lEdʹ0 hF׼5T97jOե<£./y c[ 7ojɛ>'[KK /E9a: G8Q5qEĠ}+@oBnJy=1+F! ,KO7: 1k2,࿜9rhC&.1 xg,=Ÿ-Ë{b?T1d?s녚؊"za(׌=c\ኜpc\dNWѻr9G". |C( N1Hhc}y{!rm4to"6szs‡?dْKv|E p&heNȏ":,-<Gjܱ/UJ6u,KlRG؂' AIsm$~TUQPS.$Mt)3O݄r=q~Mx*MVz8הUkŶ5gl$B{! roS%*GЪ @*$(8j@ϰo\ +k^"|#h&%P9wȥkB# 5t\ZA0[0d Dtrcаmxt(>EŞqD>nzsfٱLsyw:eO$D?nqk ʄo`[X ,;-f%F{t O~ꡓ7/ECm,R/zlhۉ1%Ƽu]f97ǟgЩ,lДS҆("q<a;> IZ+4Z>LvI3q|a dvlP: ^4Xgi&xVqt- ,٨rq0ІH"|%,B(+FMaAO,,>jC(]No>>v@ Mddt5{tڱ`+ [ ߨ@\k6 D |{nOaﳀq2Z]rܠOa3썫|{r}-}J.i&@j0jVFp tL1^^ڸtp52/*Œ˼?. !.Ǻ Ww t 'd0y6, jp!*M V1{ C X#Jnʄ<89f;  䓪eFf|Mb ?ﲉP;ae{ |vZ>GǽQc+',wp"BTz=_Q'• ˢcxqNPDBf . ll%>~jtSPr'QZvVl]3kó( |4f|-=x537B r] {o]|yB+Q?~-}TVkRC5CfAlCF)6A7Fq$ ШoS.bJ Rƻk֤.ZtuFF G]CCu2[jěn |QJ\|j[2/G8 ̴MĺN/䇬/GfmF#lۿUbƚK H٪;j;7ϧ>۽Vc/f:}KPyeS+ 34U-*h4J3smqLT!ٌPtYv4ԍ*%WB|nGK]xBH11 X a )~+!:_w萄ңijRnNNpkKG3Ae5)e]IJ{eڂqNBƨ G2ځ[0$[qeՑ H谪pf7aJ$El5▻otGVX,KH6/ZшIn$YZ&I[Չj|uD+tHV30`kF%6FowBp/ao<24nVǡc '#rHO݆`yӔ6ZiFC,}`_9#Rhh4=1,bSn'"DSV٭6_!4f4ۚ5T0Km`UoChm>9FŠ}e22Kon&\X?V魳:!=Z:JNǞC9}k`'?) q!1 KG!fGUB )&}KG{I&ϱ-ILx*+Jx9WVA?WGד#:؁g4YowDUB+|ZER,kEy9caatH3"|8~G1^/>q8vF8 ,7~ ?FPqGy:_3@)^:LӒY߄S-hS[[r>`j܄l!MCn pO|a8EmL)ll#}6&#4w[8]5IڤK z9MjX).P*7G2}t$h8@+ާ%B-+ BJAZyЛ{W BaU[%1S#W>ór&UJk->ϩ[4H0fL P>b x39/5-HFp_{$£\$ TDr̋&|LZꩠ״ O&i!+z-Ó 젵w YFV+i{y =T1ynlh`Q&9e!Ib 0tCeY]CpvٽWkq{oa,-Xl \mݣwp-< l_VQcsܖ@{g@$ϲ8I@*`#;bG? "!fOeVmMq:Mo.m8lǩo,'t .Po`Q o@W&l#H#2 xNdPr)"AW jF0`2SH*V"6ﹺ@^F45PG#d:bcC<Njí8~Ks,> P4[L[rU灩p/JE0XV'X|ٕ",dY[8 atFڿRcx}"# Ht6H\)XվHQ`>=> Pt4NZyx1}+]]"?gݫ B1Jg}<6bl~ n ["ƍv~"r"s#6! vèxE6 49PG 6^ 5q/w9.;{;5z,gA ܿ_t3+&`D}zg@{tBU`H{FCG"3zK뤠 m0YEdW1`,B8pK˙7ʎˢ*4jHŘ@Cn4%Iu/a 4Ș]b Fx#dlLIelK̠3 NSx5,gmR~ϛcyv&&E"Sq? 1eԁBAan pfjG2jq/ZmG$6Oyɪ6 |TM{C[-3gGDVK%Vo5,{dqpe]g\ }bI2"6l*/-/QL|N]~M8Q3x fՆi+Sɣoc)Ƣ};@Y:2ߧoݒ-'-ZwDSG#,b'^\T7`#,y#kX"#@_ARR0' "0-jmFEv*;QY E:d *Ҝ} |ae`E[8e#| FOgNUz.Ξ&[` R(Lۋ>=]EpFBB9i@ům)^>.b|Ujz/yA#vjXʧq#Fl*T#6z)ilxa]_ ڢ-Y%˥ٿyfoh<˽;s>r]Gft. ղ8W=)5ޚ!$Z⒳w‘].[MqN[E)n'!J(N2pӞPB:f&yҽEhp}Y /"I8RcIG})׋fhiK*{hK9),C;BǯK5y7 FEQϭ{. Qo:b)4tv /C{a, <lY߀ * 4q!=yua]^-TgZ!tJ d)C'gO$萖-;N_v%֯jb5F9~.VN7=1I#߃\2QU#n9 aG*ym ޥӿ\1E\yXXX.isvWFaS0gMx#4~W54o}CV]^i=Sgr:+yN>رa,ā O˧`NgW {>0g>Lƅ>Y)WXp&[ҩO׃>)Fm"*!.M{tA(ݼM)؉(=C\YGvNU;4WE@;FUX~)dt=>jg~1%WCc}~+\8bέmTV΂H!0Ҭr-˕NFgǃ-[pC5G5:H]$X6vOe2-TÍkwW'ʢysIZٓw{ g/ScARwvW)D#nAPM5ВjCk–+dtJ Hv(M&Ӑ87%nrt D5t);@FvP_mW ނ\HlGӼ0)`>B]4ͻeơ,XuF #n$%P+ئt*Ջ9MSoIc7%lKi2SF_dj oT1Y|CyFfc-mYX$gچ.3޿*p-kLvnF "eyP3Qqw US|r5HXnY&2AƄsݎ+No@k{n0=2$2j= s.3WnWwM@#kJȞ j;l[E&W<_>:YP+U7D߆\呟Ff\8Pz`B8'jπ5AzP5F.WmPRWM ~}5U,hx<)&`-#?QJ:PF^cǯG b'3/+Yo{dT '6oG7ܮ_h~ ه]5MJT4)'b7` p+WX V\5>{J2 C<2h6ulþ16xKV!i>X,D&Dd1-1狍ZZQܭ"H/Is]?Ddדxבtjg_F~ô+biE tAk- a+p$i`ו>DTג # 6@ i7 Y^]~Ew'䷘ zv.ĖD|p㭝]O? L:ҰD^QZJĄnB Cزw|$`Ne-Mڻ=N|8M5ʲ2~Q< Y.Mc$8P@0elM) qVx$j%l^R=ʁi k~XyxQg'9@#5JM~0,#/d>IKyoOL_.ig ky1r.8~ t{ %M5G k%'|ji1y7OL)DvuJ1}=0kLx\@9=&PFQ}) tIOu )RyvC.TF\~;4Z^R[UGޕyUgPd&pkX``ַ,`OE4F;5" .%,y}RY!KC ~mK<ciMsOtmjyyǽG}"Gq,7? Z5TS]a?һfF@6/xL_8wYo2h{,EpI൘"zx|LpCv@W7GJjgFHRQ[{NSJWO.bGRY0iHJ~xMQT =WIB1yA =DM'Y; Hcݞ?ԁ(@nZfn #D=|tR<~%UźGAMffd-L[#VwB" t2*_kBɌ7]vf{WN%:Fb @~Ѓ D(ׇ?{#lPu66rO_4xqV{T#3g,{P6%= n"w֥M`7$.Y+YF7Z=&|#]l¥+qyI]+cFHR.̌/9y8Cҁ'2|2YJv~4!L(MIr+_Rhk/`Wd$g؍w("-{}n 3uxgldjgڟ`ߌCiK n#2,zi08lQ8)vўP_ a@WX#E3[Ore$ʐ4i>IlH }FE^PpoYmF/*+sxF\a>:4N!A;gE@[Qfbl?)7RhS$(cD=mZdpwS2{N41=li|N>EUݐoyf"M6?Ngcz5? @I:Ր&y3uvAj_f*_ccm<ݝwC{)eaω;5?s8f(5ij6vB]c-whk|7aM]4 ( oE}=:GP!.3lXת 2RDZ[ܬ/GG0@{er ϳT PkAD?sٍ-wD ߙQܭ-Y3e V349~on|xw#f(ۍm-S^@.Бy;I?gXuZ[@Js)WC=Oi@:mȷ>nLJ+ဝMU*R8jisv=΀ u|ST-Q:@ýz?Gc` rsE sK+(ۜ "9a^, j}IRr&Q)\Zi C0j I4@ Q L[Kho~`VYx30"pWl:ţW׎~Pv`R3.*3Nļ\*̫Ob/#`ЬD,e/أ>ЦӜu,ry-f$CMԍDĕ Rl"׾>OJ=} ;HYqg I ̥[_?B\0n^]t%;nPP*$qF$?闱Z[HW Wmf7c_[iT'cE@RUE{LT|~x)vVW&"6!ؓI`g<ZإΊ$7~sb祂&L&fw@SGJA~7J_]pc!'Eg1$lv-Qcná? #:#uR%51xRugˮO$S1]p1QK@@i ROX\ݘ+pr'_ {ű&b: JUQaeBŻeOeqX s?t_ Se:,/T** m4%H֝Y1$ "Ku`wX)VR'9in9u|h f[߃NOsATG2!csr3*#ctu08=89׻4 UN+Zdz1uM )";M, KBei7Y9:ۀp-dhR6EbB6r[ӹybg>fr Fj#n}0<y~s%ԧ\Nd9.'J!XBTמ Q=&5Wo' Hҙ|yCnW(*9g<A[fw/r20[ٓbbQ]nx`;`klghlannmN-spk-VPPk,}b@ŗ戀.p;لO6"%<}]z:0 '9Yi8H`ؕ9\! $\ho6 w+) U@ϐ8t/Xc9v ⟇C8K Tpl.߳!~KƟ*|Ibଡ଼_?u&./lsч8 Z0-*[{`qtCp3ж3/(y(Go$Oy8kK \*ǰd<+WËrc4췚6ߺ/ȱTi &%r["v*A!-:! ˌT8P;޳eF x-iJttu Hu= !y D<4ɪ #' /K0@^XfN37u#VN Lk'ƃXN+qXjvn OPA˽x 6f2;N^v6YDq-~90;f7+ʭUQ$!ifn51 I}/DDk7Xmԇ3Ыi:׎_^]tlE +IŅ f 5.PZ5F-; +\)E y"g).%ܔ9M" JSդ0mYU0 SAb)>wIkw'UbAJ*m+AfkAW'4^$yџ#zկBaE{շOKP(iJUgX^wAͣgn`01p6g:^k{A0=|-FꄚEsJatehe%\t胱>]$7#hEsʍ juaTHW(B(w_=1)+!\T.Yr~L/oNԎ޳^_UD(!׫+FOePF%8#[AskuA;:p? cO'1m*3e`VOY ,6ˮGIȺ㥽msʬǔWro3dRk5(qMC֙F gt`D$ڎee:'`7=ŦW KZAX|={gi-j 8S\['?4R-N+H1|5飬 0ǎ9}&Mwa*@C U:~dtiI+ EH X}Cbϼg;/"Kfgpsrn}K 였,!>zG[x=K"m|\4^s83;t$pp^Ê !ݔL@JxyHge}.k!{~a|pok>S +J]s:zG%):Jo[u{mА'5YPMmUø&u#j'䓢//#ZXK`8r*2^q$x8>$܇=9mPPMT8%I^slPU^ȄV&ARHD 8L+# N\w!X$9o\W r-wEEdȡ;KJ^}UՖ)wm4(+~v,H_bXIܞ^OErS!؉92y K1$!? ^ =!S4 ga,t(qNߛk:0n12UJJOl;Pt+Y}(")hno!pm^1̊Dfv `{Kn;Zʚ~L}Kf,'c2%>YbŠIr_GMJyVҡi]w@Db+Ms\QD;Ũ=囄mF&AغzO,#& Ò~IEerm+}?Z84@`ø~mYCb?SAm% vͣ,b1!l$!mg|nJ?TCX4XIN ;(sˈa%H2󁮸'Op+oՎ Ѯ{IYc\tfeG<OR[/=a刱D|*Ky9ֹ臗ʜƺ-h q:Xd$4Q cov2aBVʄESzgӲM@Bt2U[C%zXst);~u8f'2⑺HGUh齛Ӗq g>YݖIS_d(qu/{adQM`"B"IFhdLyYcp7og欬U0~QM2qgU5aނ+b B!F~fRhW!zlCѱA * P qa &W;lG({r:ܪ>O 04'CU=<3!|yhyEMy`fS''ԵGEKA2Z𭱫_?7 o0<}ljOE2͘odcݯNk-[V+{kG@p i(^Ev'LpF. 2 墡{e Й+| m dG tQ|\_Gz uK((ZɎ,t=h *QԬYrE'.YB.y|E8iC,p*^ 6*Ykɦ 'U z%!k=XG_j1B|f1gW6FuXDRGįˆ9\8§ẕF0:7ؘ'H,)4cW։fuϙȫ*B{A(Sߠ>A #Vİ8Ơ{} d#;Tun!Rh^˩{f݈ 8zWU坳-ܵ6([;xmʢa|Ees#e<{?sD ",Pl^a~zN7g>0d>A&P?ߢp\ 8lqf4xN~VJ&WwvL HR lab9,U/_VWDp=.^FQt} 't.lY1O:wRwAKvSؼ*cWT)ՏZE ޵+U++t J=#{U[#H:Ó OU6Bl R$JK-ycoO~qs¼OԎܠ$l]ѵC Bgws3> +cRR#@lc%%yYAjMqoX=a~I:#"T,c ah} \QٻĢzNGQx3sN:\TkOZ{ʁj-u_Qk0NN3N 9w0 &BB+C̀sc1!D;v]7K(oܗ-ޘv1Z;41UIpT>>#7qS~ڧh*wZə ǔ( Z'5(&D PvSoxLK@urc}%"lѶ#2jjoD?,[}Nzy}(?1kn>ϖI+F\")o6yOQx=~[d_ٽggn"듩MDu(1A!hƲb,> $6}9HPbl*x<`.ӷvNE؄3hy^(m®C;ު܂Z/-_T$@l|#UtBR>)ܒکN0?p'r94 ͩSKs30y [XUAKTTpx 7Ջ)oc-E;pRoq`gn9CIUkP'*kA11}?.:-?hiQaȧH,uy<e\篛P"^e.jU'~O̿FђE6 2 w_(1Yο4`_@_%.]lAlLa82OU] Y"1YVabålKS2 ̉mZN9^穖N]9쿒n"ʲ U}B.%ZU]bWGlBRߣn6]U =qܷhu;7DXrrtJrsK;&B=rPd*)<2?e˦3YX<}+5-5a=5Gu4 =B&͘is<ժ9鯝1z#9gRA(% Rעg=/asY-p6%?^Z< e_\:bf*PdOEVUTA>r]u-CJmp+K_.5CQ !_c\ok,cM+fMheգ^5*{AmlX->wtxrX.>q4| @8f@:`B\lb#FS'Є r٘]x{wiԕ9teܦ,. nDR:3ѷ ӇU9z:E={ڣT#l,O7z:_+պk˄NP9pM/9J}Y~δVL)H[FT,SJTf$7?SxW@}npZkPuЁ3Íc~ <Lnd~QYO܃]̚i p./MDoI>_GŸ. r(5QfkZ9r'{iF#54 pi ;?m0!tϷj`\Wq {wcrwㅭ]E_c;3ۼR0Cг+ˉVOR+,>L<|&2ȚIʰh>>> yuŗ㼈0F vya . bl!/Y?P T)LN .a&s)2Ǡ#$v>O,i֛jF+J 4 vo+9~cś|r%Ev'F&SKY\Q (s&ϠbA:oMl_-m2]\XYvBԸ~^ N{[Jn \@sYj6 ~FW*kws2UԢE h4Nϧ b +~>?e8 !l<4sh;Tu\T<1+*ǫ`1;V19=!bH?pzds82b`oÏOT`~(HXG O/_@(}wig4G蓆+E O(V َvD@R)' ra-ƘZAW^.78]mʩx`&KezTy tMR9eZ?~AtZS͌JJBkkF+#SE_jR9qG_۹d>'ٜ'ZXD;8t-:3'rH'wvԛ DsL_&4СCc@)M,ֶp "Pg{ Cf ςZKCNa_ܼ"-`DƑF}VV<=%o"=5 yQ}j zRD1XUk8 %opo?vB \n0{lƳqE2%%եdaCr|.4N4'1jq?yⶰ'$#$cnd5x4JLT 7=ֺcÄ)xNCկ,hcnrk8:|+YeVyhc'h- *F"ѕ 90?y{f4~_z7GXpWCR! 㵃hk;,1˨Զމ]#_`wbgMkJMR-^c]%Kc&x{r O*I/sq{K@J oJq5dX )]Df]hAZjdqDMbCW͍ o^UAY=֡ 5F1/\c&+m-GM`4L$o{SbyG8 [T$"q"NNѭP܃t9}uxܿGN 8fiRä.]!>5Q_Z[KXm% X$`b\ &j}[qSKOr|v*Z~`gVxK3d+m}F+Kas_C yKiq'RN<7/%|3T>JZ-|B)%l(äezx޿3%80ںS $zs=8(zwb%jc}+>/KvT6@FTY{1*DABDFX7YvoʵԂ6\FI b2Z O$esm'4]gJlt1ae0WyW/{ >"U7h3@(v.媐:uKp$;67+LJL,S(0ϐ_|2 j@WWjg?UAF@S&hsMpNZjTד Ik8PI>2:#g3K3ݐ /P#>T>p$.t 0$)Z6:Q%W#ZqCdF"A$˕kE d:|-[YԚn]v*]; !#P?F$RC&7n(Lo ~,__q TXj䏊%L!˴S}"y5W䥂[#z=sI;HoF-]6KNh LUSׂCLH!T*,h}nFdюH2&U2+-ZWf[U2VvĎCPX H>4w9Ҽ%\&~-?νU+py5\ϵ6cYB!s"oXUҏ +msY Ӝ[1^#˃+ŔB}me{sf*iz ,.S "9>@]u&Çr9KG+\X8/2"VCS+DCJ$ j0;%wR1%Lz$e RU"#|iQ9T*w˓vH-;)-TMuvE^H{ON9nM+U(4fF/*);q0"A#Ah /x0%6֎oS^RI i'#H}>lld T ]Pb5%a`gfj-g^ClzAZ՗7Y&sq>G_Vn+px0Tl*ccCot3rshҽvᴐ)Slm4+ * juъ&V|;3L?b^a&ZS:YׇC)yݻ=HLtJwZXq¬J˳InT+ i]K[ m/8H,HMBc.XXhXA1'98s[W ^sr&_4۰w&7cUWLR23Ca~D *F"%1_ +;Oz1R(1za$ڕRy1Aw08 +^kX\$mݨ̫oBPfsvIK^%$m4ta=݉9"EK)! SP Å8m:}y 1 MAlwXrxטK*S"(5/mY3oe0=#z7"/ R-.%d8Xq _TF,b}痜2U10Uj i`sQck?F|hG|LDľuX5,zawkUNMG^bŇt zȅThTLZc`Cnb]D>J_KKJwlD< \e=bxE(-~* !m)C5 4^ }v)%d0jRA$P^K$r-0i.3[,S`ׇv`!F+̡ū2G&2ߏc-, nu(o,P5 -­{ݼ^O5TOk6p1+suUbzlRUnsA u.iJļ8҇@)\PKyT2#rvt$+i dbֽ%oh^pupTeZRWo $ 0Y76Rt##$S(bPDr!QtP39VU}0rӐ"x8͎ísg۠L_u.NVV~rەڨGÆՋCj)NeBS뒁=`BW'q,^yf`T:QYĵ)J?no"~D^O8m:򒪦> &2Ͱ)jw OAcq@]Do=e{,9>7]!wp yw |ҧaT4̶^&d\O*M1= *$kKDr%nDu~׷F s_%fdzRja:me! =s'/6bu^TLyP8YKndrnRsH 1SqS{g HX0^'<5AVgW^F_Ul_\'SVIɁ^a­P"olVDKw2 ʷAj}n$D{ZO;UƋ;i/1@ R?s{N4*&Q&-F[FUdSjY ڣ~˛y *6W&B|xz0y[]ԋ2nYHHCЅiz[e$_p6!@yDr’68Tj|F++c MqѻY@B@MG{2onƸL]Ffcͷ3co gBrAgG~/8;&d8 ᰨ==v8j*1&vOPLH௲PU1lM=ʺ@G8u5G'JmoUv kGj[(Ana]Ey }.pgp{XDŽS)yw~^hbR&!ǁ15dn!+.pmq Խ =G+`qɟǧCv @mxߕR*ٿ8 !>Ic+,5<x\P͔Lbƌ\ep6nR5#?z +5V{R>~Xp*B)'V}¯oԡC, Ĺ ZGsCDT鞷CvsZ/(g_AJY;Ak\j5xdgD 'ȸwT<{Z;sGp[לϧQh#Ӱ]uSS&4"O_;<_i6˭<i:p;c&ÌٲcJy^I6G)xKS0E ]_0'6-0/MY3Lo!狚_{O4,D~R{*OD]iF֨X]:<"ҕ兴z͚3N6+]ׇ)?8E:/N r2.i{l04%\3@]h$ m먶W75 dŕX :4z~ X*oDy+ħ?%SU}w.@+Ez=XS`Qn:L:}U@s eׇXܲcZNcQF,dz},l3Yאb5V>>J)}nlF?dۙ,u{x&nu[>J[S\0 QXWBج'^bWob-P)<(ڴQ֦,-?N|uxPgc2Q+zwO.= 8cN{Zݾ=FM{j$LQ+sPҕ6n eӮчv ui  1rs'$?K2v%'u_OIOAx#|d^]/w&V3ѯm} hA8&T&r궹u': eϑg0W柆>[ o'RqXR<q!JB]Zcu2 h4h;'}$[ %k3tgyor1۞KAtjY|2ĵO ?*-}2jE*JT8Pn,%/,IJ͘9E?\zM}d\B\ekN|YsVjB"&@eN($tc\d:-@M^zz5&/tCgCP\eu$AXhv)cu*(al.P'yM3: 쯅 0i8ϐUh^2`lA~~ #ĥbB@o^K_KW 2m-zh{ fPp- ),+* }QAʰ8p̖ڦJe|aƫQQfKjZ0;^k3~*Ղq慁 E)΢MdY5D`M [K?X9د)J,Tb+{MRߢ+|wwSH(KTơ?4<Ȃe `+~zؔl<YJ'1cHqCII\xŴ#0Fv?~]7-X$ dD4 ҫ1ೠFu&vէw$6Oa7]9Wl.}4'qo+L/XSgCkWDo7˳*^v"2*iGߟ=a .D.L'L=Ok;߳ڠ@R ]A*`E\\$̌?Ӻb2)@bt'^C(R"[4@%O_ TB1EM Rk(ȶV/@z"ǘ;2Y.bO횖qxZ^ܲܕaDc;W@ YD2n~VkjI*qFZ/խOu R+3)_M$ ۽@~) X h uڜ5=\pX|SiMm㱒-[+t"Dw RMd3-&=7g1.zo" 낣$TP쑆zě0? ~MEj]*akL@I[6\yגhŷ! G^ ~][+Sv}`4=Hy% '1aOAc>w8kiz3qg\ѱ@]zM]އ4O)QO\@6el$c LB9_fAէNGYwJN9 yNvn"> ;DsIZnQ˗.6V$əY^(N>F/\Xfdu/(<.[R$1)Q-D/iH핋"lt^pa<*rq\Œ39BB!t0 +ɥow /mx-!Uze2%Pۂ~9f7o1 %1My7n't;|ް,j`'sd -pOT #>ZbbLMfv1>un|G)p;]]qFm+/4W2QV8k X2{ВFtIY ~76z cZlȚoF݊G]g}W|V`1M&|sB! -M[= @]xKѠXF'zI;IO]2,d84)~v=A>}EV *TPT]14&ժUQ__U-SXq*tled a$KI 5gB%= ݪ{v;q:.qɁQn( rͼ@o2sQ1}.>K"A 5ߔf*ÁҿI[xU,tO8? ѐ-OMf8Pc.O /KهzM/F) 87ҹ4@“%Oqw`{{,~`15TQ+:>"R}E"Wy)I "j#6;rA]J0^d\ʗbY{[z1Ir,F)Bt] ѠtG8":I'=o~85Jbm/mL /6X|vK[&JH> ȌFL~/^&?)Xc,yԯ{uB ҁܭcIZiq6Mj/:1bk˔1= ޝ4Rs yyU@5x@`*@j\M= 2㳺|9l `=Sʣݱ7XsarnF{dLx=9b+80™‚^npQlgRX*j{d9 ,἗'@} i VhngKuG)}ܮF!ɀ) oi۾eƀ|T4(}XiiWa[V*}KxIPyg%+,D,'L*K =mWYn@?VR.L5ĝ4UN7ʭ&X`6wakQRww":CzFp|j׶ f%mr$vt"X6CdjQ ѿ7)= !X}^]]wal7:x:{D\~cJ+@`ch(2Z%RozϮ&iAql #*̜'t$E;RSI}ad0f/{hREԟ)>/:9痿GQ4 cRf!pXE̠J R$nVOXطhsv3nFȾggB fNftueo8{D'K3XՉ`&xQ 3{C=' GKɤ*2&1PW8`y}="Fi}h\MWC h(v -̾iFTA]*DAܞd W#{$ !$E:sJ95kwt_'btsQhUǹg" ޹f9F $SX 2 +Oiqs%#Z0EL5`z&КM!ŐsG ǟ#ODdZ̨/06%{-GZ[|b*䬈prp|CFER%h9+Kɟ4;tPqCzY%X_h j{Ei e@a҈#Ow r>W,n= $**.,0PE=WI&bQ_MG8Y_͟`AHo>~jtÝ[osk?^U{\J~mTF$tz xr#lTx=g[ ~.EKRzl{Qs^.3mXG#lr` Iy@fgCSP?7S-23y y_+*T֏[̚'r%ظTWw (Kn`VFy{AVA= R-_ywj'-f}[)qW_p_|>{$.PIeLA _6E])LeUbrPIAA]l`U?S@&1wJhW&VVSY#'m8L8C-trnzz4^xe1m*G;䚒y'cDUmJk$N} k0*G~"33ARA<ӱ pvFw!CcċvblRH7?vOh.A S:X7P18HT)Y]DTg۵*,1efv{ҷF'g?PSW\>c3~K$c$ޫ;m1LK53aqJh+ECy?ۋs񅪝W'-ly8eNl'A QRs" QtҡĎv#ש "ZlV.YbP,Bl'RKR6ykjv7Rr؊Vl7Pe%3!߮JEB܉Vm۫o^n$48B'Z- c'Rƞz\P*$@:e87M?J|Miʔ;Y3J#]8ݥdۭ>[F|u3!/68Y {]t`ZKo^wE§"VH˱4fCjF0/c[:65.IMPmA㐞gLH̻˰#Gs`@f/Nz+뿢s7tW.iz(JY/m`x(e?A{L6D> rXsB"P+xؘem/%Ev6uEpyG8{ u߰ݶ3FJhF(|")\b&tIsP[ۧl"\VէLE7/ Uz"xM5؎`Kg{ytwl8d)Ͳ'ASD#s0cI}3u̖WZh~:S|5j~R8Pi)pE RO_)Gpdlmh yp+7 &V$|g)3㶩:og x_F+ճ_OxWԱ Xbm8"83?c`~Fb0ғIW~`VD)kNAB W{F[ݧ&p{+=Kw*WbH_Zu_hY*}sY4UWxsn+&rwx:XN?!8i/So"dp5g<cM>c&`sQJ#as?[Rr 1Imjl׶gji o R =@|ed Efy8{8V6+*<2@:--=^eNiG_ٖȣ'aOIG$G;=[1S &V:(mN<[Oѽ ,7QR#4,G}%:/1*S.o8 {*m M&Ё#>xrh΅? `ڴ!(8<+iRjQk^ҙż]ހj׼ I%*2ᬁ q`ȷa 3Qpub)6=fʣNnCV)Aۇ ?Vߍ8]Uo"{5=;eY ㋑=Ͷ-Nz\[.%F20`X9 q61Kv˛ރŃXT\y <+Ŭ=Oo`*P亍UZ9@=+I: S/* +sR'JX4·ۃ;(^DTUG9IRԜ̭$-iX?ՅX('bDo7Cl@%Gi0 #0e _utzb[tR _*4{,hl݇Px;`+%x7,[c=s/vh#gHU&6RšO>o]?(z#b!XP6?= ?F-smn%^5IJp`R鹘[Gszmu#3e7)H Zw4`JoUx> Gܮ?rUc,NjA{ <[:UTͻye(] ڂܦej/Jm-5D=HT|4HtЎj$6/!C(w+gx^7l {Ⱦ'2}m.eAS˃VWa +%`5-w[i@OʽiDK`tMY6TxH\;oC}'|MbPؕ4vڔWnϋ8u KMXw'ǬpirWV/̏ߧ@:g&wu UA\݃?zPLWĩpƜ4V(FXp&MԱC^K7j1hY96r=Sg ?|Gr}kVYW6j;kT |Ƈ,XZ^hSaj pV9O<[]#Q5^Q$Ї'RiV:ysNF|K1mܻ̭_44)m1~ 1V;` U!o JT2Ȁp,N|C_w1bzcƏ3 a#Zk(MΌ8(!7z60k Le/ b6r U! x*?C՜r'VޜqjGÈKR)%@ KC7NDs#B^z8攫}Iؤ-`boXֶ(_BBd4Ja@|W !UG6V z:SOPsZ[5:<{d1#ruj[sc4HkA9'V[zJ'tu!7Gނ!ReO:LS\Qɬf_[JD^v|=uCNY^X R弼$N]f&)8KA Ls{e~tU~vqޤu<]Zv~OV{BL+y`WZP{],Lnmh$fmH]*J62 r>^6P%h~(0夛[m{?l q:P*˲KO IHR;A'8s:`R.SpX!ai%"#|^r(m>Ie\ ֆȓLjo8-&wB4bWI!ZH^yw/ZKF1P=vkVsqy.o [J@-,gVumS?+!"5oݙWN  BOͯ;v1BNٝ08%_أntO3ZS}ڟ,(\6d5K?6O+h@?I=nsxFrrgwItNǚͺ#!tSf(Y_)~qEX/#B WuOސ:fi X `gڐ2U~{{n},QD Vez@NNK3pU0P -`ݺapZaE+j~m& hĤTVEDr## 8|mG&wJn$w^,(4w-4.KZ+IbuW]~onm[aP~D%-鏄r*XXp-Pܣ+C]L_2%/ճRA˚I[T@3#zRvde ^~X4Ga>F)*w)~?xkRdZ(rVt7.*(w*{%Q9 ރΫ@JPiͣ-J9p~EBw-ʸP{TOKPNju0Nfﭣgo@~k}GpXGq<]($8,f !QiJ-Im%PNJ$s 5XV~'l࿯2lۻH|@i%Š,^F퀪kR[)17Ɇs. Vnt_5yЪ,RnGpwUs/F"\ ?jV ڧيs5N.>E':bqplpfrI3_bĚ27f1},l*:Aa[1PY&t1T@ JMa%V(4!N,QIQOHBS"6[$1G^BF^(խKȇCqRit/|h>wO҄q0ƆzcvŽ%ɕ$ Q`npPA4LݬgkPF* X^(kTm|B4s#15(ӒT8~U[JWA8Cb]<@GsyP`p/A_R(ήIၪSO7.D>)!S- %#V p7 8YQ=Lf37J`|0N^k=] B&\i~73ΞulEkTdKҜ0u}f11-زRZڮxCUObG3[ p%h&{;yb!RY!0[ `b3=`(pKr_kˈZx^RaZ]j5šu؏E YKP ր_Ӭ&Uw70i:Ι&^8mW-r֊l|G\׹ȼ^uܜWNccGC>0" >Be'5Age{U kd'iPeU$^("/$GA/6ゔA(#CPPF"%)r/93̼.E5꩜1 'j0d>; %V|͊"_x{eO8x~v>` j DsUP$'zM}O! ExMi0ϱ P~dpɫرMuȏ (<XSRd6-e'h[~6@`-W'uAd;kԁqjh( "2؄f*}UN+DV_o-:J7/P͇I'w! ߵ6&`T(3@npߜ4t)*SǺqӹЗ{&*-$u܊<6..&4whյQt^rل,==xvpr0\ZHA9>WA.&;Tdƕ -,U%tz\Cͻ"ߦnpM3zVqx`qဤ%gh95[qԗ'_n`O["q5wZCFgxͨka"^grt%J]ӎxj4YFyEb"Ľe]p  I̯ˈP[jLGdbR{[9Mt)B8>S7ʪ0ʹ,D0fF{C=dW$C N˜emVaX%=Ѣڿ:Nlt3>c, ”bqm C.*ʉ߮($=)O9Wyrr%L}ZSq 7Cj)0D4v>+@ƙBKhOm 5"s!صV#_HX]h&ica2x`zf ^)HF%'[ؤ)5|;pDs/'|N*V|v!4t]"'کŒ֦G',l<޾t/m:CTF%OAEok!>9asaLI%ZFfoo#;<`V"Wa%>n4KTqvV}!љx_K.Q'T85+TI` Z1tय़g]ZD#^^OF*f ;1>rpSC׈2Eg~\X&ae[=(u_ac$WzF1\Lj + Ga{eMQ@#Ę/cDǠhbQ5+!U0߷^4[{z7s^Js1Z1b"ϔŇ';]BA@7_1JaO+xX4}TOTԅɆM=VaXq"T~%ئT 1p޸oJ7v8*yXrpj"dgB۽B ?d {Gqdez= ;G%&MULc/58rc Y!c6(0#y!\gzP-R`Na$NގO X2 $]L{Ij|x72 wfA]7twq`MS!1_N)8j# Ex%j$@74q>,pp;n2S>+Փٰ>:VɝVRWM^6NycvU൐ ;D=!b9Yk* n^2WyZYme ce ܸ8UC8oNm})?245wEorL4Fi^2iZr~c7J:.X2 .˃1? {Z@:;Fc^Ĩ&#1,43 buR6?=(:,eS^hJ?s*cGGX qaT[pNNq-O>e@/ȒavSL 28VDjI^*'ѱMB1a9]@Ng B8IL@ͼ[k s3Kl % Ǵ> "J#wG/ ೹0iwAa5p`Iı<_\ E,Q_:[*pʽ(R4&Wbo e4[毑LP'?3aV/^'vdžme/> z%J*vvqzegԩ4q}mh G"63ֳoTohS~T3Yy\>9gִ gvSD#b!*u+f s|Q2Ch>v*;Mv^IBK \6zl]ȥ*~$ `6ǐE6UP2K>.LO 6DIfktݵ ;oր'4w-+ &VhnCB?Eˍor%f\)A]ScHvFyE.RY~B:N0bU| vTgo<>Mh`n|O 9[:JӃq%’5b}*_P\H53ꒈm[\/g,.zw-5W|/ 8fhz'Th7W^2%3E p<0T Wv8՞eZO->Sc{2 pۺvSTدbzTGsj^9jLImYCw9.&4yiul_B((ʃɈylMV /Rzh(Yj[- qJ̰ rsؗ,,vhu0(Jmlz~5I4z4`||vRKe'd+CUMTt%kw&`xj̠8a:/}ܖIPxQ \ObT&j2r5^[LJ~\W:mNT&avRNV>YyaڮGjSO$MQޅ=:Uz2(l|G>+"/\w$E5V"+D[CX gD;_Gg&x:M(5NGkM9۪"1̍qQ"MI-g({vkK.k7ˆM'䫋;0A0k:Og$gđ|D;]}\k@" vhf\.KH|y$I-/Co27Z ˡ[hT}n"/ $[= Qc_zI <ڻ8CJL鰹rOB;|5]Ɵ7:H֘jW?Kf`PO,N1ndd4Twv^#h3pbnP#4"ܿA`,s?S铃ptFdW%/Hxz:R>J H"%׋r7Ew#F鶯]k<#ʾ<{xT} up@WELn7bs)A"h7P4刌cZj'|ųt[ ]TlI'fE"hkbQ@vb }_sdMv`;Y(V@|H$HXc[-ou,iǙ0^7h9x (RZ3?΍*2NrM#٦9B߶P!<nI:.Uϸn%HlGY~P*XIqlI+W]ve+P/޳ĥ7a}]#)4Ϥby4nӫ"Sb`b{Sh/ә7&ɔHLf.u;VӢubYu#Mɾ!r`#jswrH诃Jⓛf!rS -ӡ]Z$6 e3e(wR%3}[n.vyZI0Bhk\G) }֍y&M!M<$0[MX.>;:ؔ::|Ńw6]l/;j̮G敊]yV@?ž[X2΋9] UPZ9(yye8 ]e {vQzhuq7!qEY%ϝKByg" <ШZf I랚gbqCb)d(ca6ю8,E 3J}K>.Vi>SMW :Md 㱼T[;.Kr@E(Tl_h]Al8ew!$T\4tX$@^fP¬ nQTkȀ7Z`5[+Tk?!I `D aUL&/v* Ba _~ =IWI]bBLΛm<:8ch&֤^ElDzYΉc'dH?5EklAKFY w N'Mc6LLne.niK[%źpBgl95tNCe\?}Q> QŹ J Lo'lkr 6ǭE%= u;`<> T NaMFz+O'!=ZsuQ,"Oф ;ܧ1G3aPe7d43r@?y^tnox6-NY/JGŝF-LIUˋq5Dr6}IN*vdJL,;>rSSr;P n_yЕ`>Q1G=;ʙTB]Bec]6* Dr>cz.>A 0뉏EVHT +*N&ߔa)vq q7k J)ʴl5`IkE"y &2-ukc  5_ƙ= 2 G7g"SXA e9˔S7*BZF0Uω0+N>FL1\9;rǽ/W%*Cwls32q|J׸eʹF _i4+O]ѰM#(\omǹdbѥ2u;|AHnnǮmvo>(SvG!X&",m$S̘]%EއJTQ$ӃH _᫮u2#۝8MV'TWlz(} ]բ]y ՑnGܫ"EgMaL9+*g6: u?Ź&y^>bj섞I^k1S#W(rR# 9D>`C_(ir-d`,lmI:glj{h'fahe} -sFQ=s#)6 1X{J,AījG,4㫯uBwe.)v/-%k7"[{hVnj][ÒMSQP'_ru R' jFEK` {l,.h R$ Je(QTTˁ٠z F-[!}ot=ugeax34x<op8hSxrr`8 !mSEDmړeSS II7N1pe|0)E-}jeU̳ AO( NsLAӌ%BI/'Od 1I1)2둒s2 } 0eͣZjS&Nf?5LԧLON>bWŘLUn3 KnĎ0fJ|;Ÿ9GV4;Bq॓{5!L#C//V(g|7o=^1'A=+oJxV (ԜPVipHj~1 S7h"^Ase$_N:|?;4u.(ʟ0'tQSBD^. =@zHSǪ&N~+if"rؒ;s>zhJ50͑mv쎑O l6`*hku)Kn., $kmh6{|X)$Os"ymAiD 1J`yV Y%8wnG=seSVGo6k_w4[ 7$vOgMgKzA{3Tp!mKQAKFR[2,T9^J,{3'W5VN~b]]4 RH:qZΌ<Ѓ&& }z t<nHXcdٖbkK5pgؽΈ 'Xq$<?u.S'kO$!-F,fEBE I'n%^F!lnAfs>ЂŽiX ߫6e[M8WT,QVwl 4ȹs))Pz?nnPBjtiJ]ws-oNpĶ(aQאn|-#9׬rf1q#+ۭp@]`FHySN:(ُΐ1'&=uSPy=sw* *zBd׽L ;BLz9O%c9_]6'ݞpCosNpQfwUfՙ^#/}=gTE>p\f{-NLy]E0d,@4͚6U%pݟ&mejqb6#G Zp2X_`lh;Gt\2.ہ8x{+}HƉc]xc ([MYc8Y5 ccsGjH?m4Y\cO}Ёiޣ}w]F:<<:u,bR+ q蜩Qs\)fޤ/0(I{j5Ԁa4_m|^!J|28a[VN *H,Ջ6Fkr.S<ڠ w@Q+Z/{4/8 kˣ0(MnY"BGc{z'|)V7m@>H#WdD0[^*ᕣ2Խ~늢 M#3qNMu"gvv1\&ד:qT3;}S}g$Zr,!w\*g7!g*pԔEnK8x%?ӊ\{$LHP 9@uvW2$w]:M{JtеzcD3"rWQ:LE3|IG7Cʥ_Φ/ډG'kόJ&D[=Ө/\]ZO,/JߴjqmRϐY@\y&F9=nC= ѱbPK[%xƄz戔] 7sJh'聰cC>[AT.I}5q3#r/ )Re`𨠭Z/ ,Pbݼjd*m:#%)6}\)3ZaIv?Oȡ-,áҖ=E>y9T4'Sx>h*Dߦ_,mYnbO'$B.Q3˓Oăr QfKYJCUV?nS A+Y/-UY{vS LZOs@W6u`*&7 !z dUdAfr43h! ky FӲ ; (nFj0yo2(:/ɏ]x>F<E ݹ+ZFz T~,As؉Rbrp߾ǃG~+8O %9)9L2i>r-݇DmRc_BM&x=/ !ۣ5zzF;,mIB4wtJ󂈬@$QDڠBW^U_XN}[u&/\P9ח5e?2"qwInᥐRRg\ "${A= j @`o4Mdl#gbi<4a;a6\/Q {f'ȳ7t4w%!F{0~,fȠ!8b?}H>g,Më/epѡ;?9QVbyT)8(DFo˝U0Pӎ w\*x2|@d}Wx wK^hF}QdR]1HQ>NA̞QźGnJ`Q?Ee=+ȻMzaŋץHU:_ۆ=h !.󱤗ҥO2G% E{r/d]ۊ5Ył+bb;Jx2f/ 1/ڡB발 TU)B +0X*1'$'GPH\*2usa4!A=hzZ(QQZu7  lSj582Qn֧kRm'בq+@g Iûq!4vJHX͇d ܁6|aV%lv۸#Eu(oۺ] j:GBFeuh_ 8'HwPW *.Jz4snZD`%Sn&wETp&,{8;vFz2;NÇxAA39iTԺ'"Jf'ۜrh~9`Qmc{HxN,.5*T}Xu `oPN7\kG f+gD(ޅA}~Ni_"um 2^~5Au D=GrjeqJ*zS B55J#v7kgr;me: މ@Z3^tD(N6/Q_xJd&yqlZ,Iٖ<u:C"fPn-l=RDo@xUfca}33?G-`=KMS.l'FFة>#kҜ=7zXC_2bЃqDv^ SŮ6zsъd/dejR{dA+HEx5c\]l >{D]nf׷"FEΫ=ٗLSYrF'`ԣE]pE (v+i.F=| ׳ R-$͑Ȩ+2:88 Qfg/R`-u¸8EJ=j:(ܖxr.W]U3&Ŝ2"2=!l. Vq;_8jR$ʔvB?ʁ fCxJW*NPY/U¬(r_V] Aś}`=dc˺5 IiEe8n_ylCb:'ii:;yqa.⻟N>NGa%,# F1a yO1  _ZG"n (orM-'S5ZhMeXso,a**.8F/YLv.jP`s6ǹ5Ry,Q^b?WEjfٴ: mQȜYk3Uqk*ꆢ҅Ֆ|]JLAb;R+Z+%.q$U|k-9<2&+\5j~M,Y :2_K`>9udKlum{LRI"z8de^EMl֮-g|'\q z-ԴjpqhqNM" SZ Kh]:65&Y0\xg Y4Pӎۻt.Pr~j x'pII\l#Fcp>c14#0ved $x}ɂ7e8[yIQ܁{Iv <>g/ֺ^zȽhIWMcNuH K0W+$5'o^($삛>dCպ%h (jm {5w], H?ٔ_Dt%.N3@tUUX*sY2oA/c8ow0ߚzȑL))XMk,8#A@Ԉ11X~,{4T#I T :R[\ ƫ4xrL\|́*ʳp 1 c&QʰHrP2R@$ Nkk fx:gg0%A~ J1Sg#!a]J$"m^HWW(8Dk-FG41A!˲"&ˠλ!#LP9ёf)Ŏܙ&HR+$LfjB&2\G}ȶɋ+xA ze^,^\?2,5@cLzz~Ca.ǸOm ;@`T7>U__ăll.=d\=_`1dЧC1s+΍>iXM{ YDNznMz=0%EךdmRcFXiЊ^Mvb7T|?'il8G6m-Aa%2m(t}37>;#TY˦qy:gi4X3^e {F+p؆ֆeU_ʑ0\'%tl[ q,zq*i>ܢƟ:i昛AGkG?vyc T_QCTtP̩cd~, +ǝm[{Lk iVO=sP/rF}51BP̸y5 ֫GG+A.ͱjN46Ӱf M.ܨ+͢[[pP9eP3}(zOAhF/خqҿABr¿Zf\ˍl8<o"Sa'zne-_7>kqF;ϫ:A1WƖXVfzVm7eY".0.Up(c8O\ؼV!48y4aym|:UR- Xw*1FB'`~\[cS#/1ɏY]QcQnQZ{_ Z/!jSj`q00a[lSd1Q3θ$[]Eb|ӚFSk>W)Z%K恀EѳROV ^u ῏X-! 1 WWĖ=F0[2pw<&_Crm:6Sz[9w % ;e9&ɯIKFZ$ "sn$B' a/6/:і9)}XsYlkx;)rp<Շb.yNYJ/K:*b!r*0 bg!x4mDAn-*mj =vo7!8~?a" z{`'tXv&BR:LmAe6P.F̎ЮGm]?Nz~틕qĽ2" PtaU vH^dTVD_됰T#jqd//84$':hqUmG֢,/yW!╸SjX6pқT5WY,䊀_l*ҲMW){N+I@U'_X-r]>)?++k2<5upJUaҼ1qAKA~^ثl}i/@ӄH.dDjy)o2->B԰ +VW2?iV۶<_npPl(ѢBX*u:]A&ĒAf +Sܸ#ɘhMVl:HX<\XMEHǷ"lvO0#u~,7LY$DCIhm0"Mhd4ٗ=s)9dBR: g%,3AШIQ TKwQ#X[YvLOj 0*4 *ɒQ>N% 5nBޫ:@]n]d $P_/śBu* = , &i4OT۴/$ƒG37BU~0{BŐr$@sVg훂\b(ZDs "$=/:Rqr^ tEڠBSH7k8-&͌E_پvfkUe_аjO7EĖe֛Võ⥚SsǮ"pV6Kdsve=U;U@KPlH=~@5tþT ,7 WZxEi{ %eY B-ճH!F-.aU~;оֶNB.e]'0mDLd*̽@>ycȠT"rVL3]B0UB &YCAjbjig/ژ}jiH= K3ͲT{ ,}IK*6&֓a(кÖ́?c-1͍^)A[dA4CŸWc1{ܧ| ؂)(N-Ǖ{os)z)b|GGh"]3 eY A~dg5=qڤ [/8蹼TזM}M5`ѰCۄǾEsI/MK`O5ҥ:qBXiy<(_|륪Zq,N퐥{\#gOPz$ diwaXM?n[i49DzvAKⰖrh. Q*d/(}wq za=(M9mx;٠l޲f翽 SajDT"K糉Q|,v=&V-iB,;8HOZl֛2aNظH%T+ 9\B˴vݼt2}Y4E2J$K/xNgxP/OeJPpo%mVm=rqeGY8F+4MvXsO Oa?A/Mvkٙp\TS/`1h#ĆGsJ;}PtGN860;\v+F.Z+WR!?CNɮw ' =Cl7_SUk'r^hk ,@,zW!3 [fh0DREZ=,)>[.:yceYCMXՇl+t;o/;6x'Nsy g5Ӂ&Uh!~nE(Py.w!w>HJ y'Ш^ҥO 9rf18 DFX[}dʂBJ3x"wsLQƯ[޺C_ֶ $y^FI(jbP7*@$ ~D[^CjOjZ2u[)!1OETd%H-ZFV# :)zKyL;6ܗ$ '|9>{~ iTvO*\7u֒- ̊k% j- ~E-\& Rt=u#wLМ=g'I[Yjw.~_mY%:eAu[8 xc.MZ>",[4YkQ2vwj6%Xf2@o6̖5CC'fC%&ܫ0G6:h'+|VG0nxYH5>lEVc\A.,h'VF?ʑb^-x"yViU%`t;g il`A䌾m3"S52z.9teMS?O š#E5b>7<0'Vݔ9 !`"Xo<2OwJ<㵓qX#&Ż4Y(7*RR[kE]Wъo;\< XhE+(H [xuvqW'vo"6+4> r\jc9] G)Źz}gLzyƸ:T6CE-@̉>8kbA.q L!3\W)>Ǧh<붦~r.H!kΉ5~o}'؈/_^㈨(#?cW97F xG˃~i~.0UEwߡU#MadrX6)IX^3JyW7WeXQk$|`(ɏaK;H<6 $<Ʒ.:ZGU|‡$.LQ.q1cG{QLѢ!d?dD/VÂVR B3irpy9%ei[gv;WZ Nh{1)Oqf\z˔1Gت ErO[qD+È𳸩! fvŻ ZJh~%Bp6D*W`kD%oUXri%(N,\d $GLhYOUk Sq]2;'mR;g|䢷/ЫQ(CK1Mrթ>0L:APǪ7?mR;M:n?zYV={k'A>W#-^alUAԑ3I/b>'yQu ')4RY$$L.w uelkp`ةJ6&:FC&y;7>ln%uҭrIsPޥzē~4CޡhwWhbFX !V,ysHd3t5WqezF`\pmQBh_+_71b[~?Ug&)9Ÿkԓ磶,s (AkW\Z$5 S=@~{#^ P 0ˍtc^Yw꧕P+]pLU6~2&;xRM@;#l:ĵcpd}3L˶^p8c(Gω*ee"I8 sȬ{]zIĔ4%| ?4تE7s6s-Qg࿬\aF4ɍї\@5`GΏt9D*!)+نbP2P 42dƸtь5Cb')- ג ߨ.]&Ni`Y;7zH5٤ż[~<d96"X^|Δ HK_IgC@zBd\ffE[% bc]%^JMdPPq\~@{t#+qjvsq"̀,԰5fH+}{ճS| $݊Mj )1Uq3A6„BA# BO6` 4P02\oNuʱ,~P7'ObAE<]w@xmOMsa1P}Ь!%tJį"1 +QSpȰ]VU O|amR-, *Z.HN٪ NFi6 tO$w8Vrؑ|lŹIVPTWPD6-k}xVzNK~XFf.{M,6u ̀^M: $ qoKA7|sbRrX& ^<[Rhir¶.[ !~Eo3`F^d lzǧDyw缧Sָ\Η[dk@f&! ,> &wh:._Ȫ/P:Y0us2v?A:%RKlvQ{,0CHj&Md+zt{LWzRN8)jed@'фd5\[NaA8> h#Ig썛K)BRRXV/I=':Ii^`ق(‹l ء0B*ji2GSDefUYMz.պ%WzzоP>VV:)>`5$"d3nm9ŧb =Q lӉ]#$ڧ{EL=3UIGpVHiI(AEE{vɒԿ5m/٪[]%d"soT-MTM?W ^X:3.EirB25MSFmsCH >m0.0P,ia޳"#n[y-3#$*fP3(WORw5"ђyW$y"Z=RCqmǼzKe$ɆڂTh1,&9ir 0ڍӋƴ-!i[s]n;鵽e4 .c`(g`3-#9S_=#zǴ6W8c홅fB~y l쭉sd -U{.ꗹ :D#4yvNCc`aj=xE[O.godUٚxvℶ!|q ԎIq ߕܒr]WٽJ9YY$j9֟k?wpv~ EoY387Hѕ(Kt:`X~%NBP#?z;\k_nfoktt(;=G8wZ9XRRdInڰ_0; .7QEFHy 11dM,͗G%@aymsQV5T&tp,;-?q2j\d-Ty!n,6l7'Rʂ@4;Sf)/xP_ko'sz_+v;yZ򎋬Ǽfje`߄75EUOxǥ'$0B< Jx ToV^~Sı,+ʖ"M_<_++պAc6_ ^|RL|υ!= .D:Z# YCV8ݢXjHֻ磨=z*dQt#(NƝ#ُiw6$Z–$;"5_س7$k4_Ū" ܗ}ry\uڍrZU9sT~H+mR9E1]@/~!{_۔pLŕi>| ~r/ oW*$%y8HŽ0Ybj\ my7X{̣w,xxRChdydnTSKy}~-AL"^ Q,]`X^,J@ůݹ~a;)7̟&4 &l3A{ksnȰ5ՋHVYyل s>熧ųTLx~ 頔;>3T\M$5yf?^!$id$)tS!;jW1yxb (\PxXg@R _e7 xpo(mtaS uh.xfl76<5zad^Z1BN5a>`y3Kͫ.: IK{ CBh:K bkTMZ0i6/~IGsUp@K.K!$œ ~-8P>XL}ld^\&eꬿ@ jI!gfbj6}0Ҏyr_p&gSK3PN>2 ej3gƂ2oP_3\Mgl2+*gBImu1är҄e%KWck"R#f%`+T VA]"6(Z}$PG`Wjq p2щjpaUP+YPS*\oD)i2B]m21Ip5pA˟M{",kA *<64{|ɀ\#4E{2]<41K8̮!R0nvf$>a$oxKVմKaȹ-5( ^8EÆ Jܬ==Iɚ b2Gk84R#SʜyKH OiHiὗ'ǖTeYe ɘA.6?3(Snqc.ب6Gݳ\uA&F$czzM2UO%XGAʨpOl=@}AF>4 0ʯߕb  (ٔ2W[9ul7|VTMC?WvHn5ݍ(IݾG%q~oDq:9dPVVAI3H64=O}sɻYpw:qUJ/%VSWlҾN )9aXh;[k>WxK-tw(}­ )>.5%K&K4"nkjzaIݓYv;8j]ep7pxK[̗K|xpv"w.d \C$S*Enj(Xo}՗I([U*rՔ|Q,ɴ%̛%xV~6vx׾_Z"`~(#|++,E eEp ̀,Pv$.kԗJ ĥZk[n2z!*Fký9F K¯1Jk~+jH& N{=mJgG]Z(ͻ'>=isUAWu.uN : '/  䡐B Z;Љ Q_o/4E2ąyM3&%cPК9_W@WGCc:fؒޮd)m%ۘS"b쯤2ZZDFӴ$cObu6to#TCOa废촵z=]NN٪ 78[h/aEB*4'6yG0UlOx{y #ğ|9¯m.nduDkA!lPyfelƗtЩغӆ$/FGMUcC ~ȳ0,3R^s$Vj%V=23"JW|9QQU2AͲM Vєމ cT|-ߢrke.|udKo&\d7`V?`H_9E5~:/ /xp~7RL֡bb#RHZ>NJ`کn`maM"5rq}AYRɋ t r((i Tax@hЍ3*W,-VFI6fm^ٱՠ BRD6 =C^:#':; tz=z-wk@ ۘ%~ y0 Y>0MI\] -&?*] zDlǯR|&"ha1Oܾ=UX&ŧt-wn@V߾$!VB21GMDlsKٚ%)[@% $S1@j, ZC}P7^X\ 1CjKha"ؘo#ľnw="XDmF =)φNf:b[m^%\j KTzYd}ȋq0[*Im&[m0zZ*}DrbJ *բ1nCgǼ#/ nA&)`kD@Ff0 jQ!Vw:cöp W1̷[NWBԢU[oL!nTJV70`):2Y5:aCG7G6 ojS uvF6(|;rYFCRƲEX_+}Yݢb HҍT[B8uªg^}|W^q" 195Hg")H1Hl5'meKO 5RyMXӻ%yA{y0`џ?Xן< *AN"\M}ni!+IkfgAnj gRo+ٛ ~Ո*T5J=(dYUMU2T31Yt9J֧KqLmh+D>6*Fd spB_ɔ׉<QRltH _o><9 P+5}_l&`[ 0>cT Yw\_TjH L\K7ɳ5l^ru+\u\=gϺk+4 bk]ޥ!Q>=!_-F}Bu:Rg 1^Y16H|UQQBYrf ϕLUmBLpۍo97OP)ǚ X9d9q93l=#\U7|\%ӁD=*+RV)8T<}=sޒ+e'^0ЇhyMlqӫ D›38"]Z ,XDw{OezsK/;9<@Cb9:}@8kqƛ򌵐bI22ժsM+qkiK+f ID3EiSl^NOi;+};-BJM1P;$B!9cr;T.'W%玂 cQRC ٚq'1 ʉ[v['Z̘ Ma C2#wMŎ@mLzӃ7oe! G$pw?dxvbW!tYuRq{!U8^%K`F9:g3.;=oe;m_ <*n҉E`,鄜’(%w*B%q^2Wlw~;'%;X9#@v+2;!)ǃe=pdsV 澂tuCx7qEWͦ}Y*_ QL&m&}F>bx*PP(o&rS,_&5ё.>r,=3zߘ*vPل/'-կ[2C\vq\:/5a,#P;#N}7}Hf_׍F`ÂVu~7 S)<컵aD, L% Ό-)<ޞj|8g,2Bb+A* R AlvF79R$ 4WWm͚wy).pEO}/M-G!newvG [xme]brb[f<@^{ L"zt{) ' ~˰V+'33Q^u }A ~kGו֏LSgJHhekm}ԏ 4!_4n-Z#a4=<{&:D.9,ႢWGa&:_zu۔z7kdx]olExR8Y !tfMB -$0Ry+;32( 䔇I /Wl;vYit-|ll y8HڸxhR`"HSꉀTx[̐B0T_Wu3g^TI:ARD:Ӻޭ,P̿H35fFy_"y&2[q}3@.]螂ݮ%gxwdqG,/5ݣiokQL_