samba-winbind-4.15.8+git.527.8d0c05d313e-150300.3.40.2 >  A cp9|(׌u.˹߄cm/!+gsȎ+W.;X4 8[ʪ?.7ZS^V_Ocޥ]baK2@\Rũ$`{KjgQAa;P$R{zc+!ٸRE ̘͖7Yy7 _o%o/G0a QP0qsvd:{B7y;-'/聰ʴj O 1]Ap,엄26709f25ab9276b39c38d2ae834ff5c3bb8ab60870e217500195d839db55f459ccd6f5d27bfd40440815a509175b7dbc588ce372cp9| NC7د!-v1yѧ̙=1{ta{E8_ 9d z^0ѓCMT-02?Qڑ,bQLW3k=v5ZV}n^F+?;jA֬ V#1qFe,Cvƹ96SMZf!*ߎPVsf$@gI @YkB䃎L;i$d>pLY ?Xd+ 9 Q *07),X z     P4x@8(: 8:9>:O =K>K?K@KBKFKGKHL ILdXLxYLZM[M\M$]Mh^NZbOcP1dPePfPlPuPvQ wTdxTyTzX@XPXTXXXXXCsamba-winbind4.15.8+git.527.8d0c05d313e150300.3.40.2Winbind Daemon and ToolThis is the winbind-daemon and the wbinfo-tool.csheep25SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxx86_64# we need this group for squid (ntlmauth) # read access to /var/lib/samba/winbindd_privileged getent group winbind >/dev/null || groupadd -r winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in winbind.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi/sbin/ldconfig if test ${1:-0} -eq 1; then ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-down.d/55-samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-up.d/55-samba-winbindd else for if_case in if-down.d if-up.d; do test -h /etc/sysconfig/network/${if_case}/samba-winbindd || \ continue rm -f /etc/sysconfig/network/${if_case}/samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/${if_case}/55-samba-winbindd done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in winbind.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create samba.conf || : PNAME=samba SUBPNAME=-winbind SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable winbind.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop winbind.service ) || : fi/sbin/ldconfig if [ $1 -eq 0 ]; then /usr/sbin/pam-config --delete --winbind if [ -x /usr/sbin/nscd ]; then /usr/sbin/nscd -i passwd /usr/sbin/nscd -i group fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in winbind.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart winbind.service ) || : fi fi<r9ȸ%s8H^큤큤AAcvcvcvcvcvc߀c߀cccvc߃cvcޖcޙcޙ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@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwinbindsamba-4.15.8+git.527.8d0c05d313e-150300.3.40.2.src.rpmconfig(samba-winbind)samba-client:/usr/sbin/winbinddsamba-winbindsamba-winbind(x86-64)@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/sbin/ldconfig/sbin/ldconfig/usr/sbin/groupaddconfig(samba-winbind)coreutilslibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150300.3.40.2_SUSE_OS15.0_X86_64)(64bit)pam-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-clientsamba-winbind-libs4.15.8+git.527.8d0c05d313e-150300.3.40.23.0.4-14.6.0-14.0-15.2-14.15.8+git.527.8d0c05d313e4.15.8+git.527.8d0c05d313e4.14.3cM@b@b@b@ba@bascabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.denopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Update to version 4.15.3; (jsc#SLE-23329); + CVE-2021-43566: Symlink race error can allow directory creation outside of the exported share; (bso#13979); (bsc#1139519); + CVE-2021-20316: Symlink race error can allow metadata read and modify outside of the exported share; (bso#14842); (bsc#1191227); - Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- The username map [script] advice from CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails; (bsc#1192849); (bso#14901).- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899);- CVE-2020-25717: samba: A user on the domain can become root on domain members; (bsc#1192284); (bso#14556). - CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID values; (bsc#1192505); (bso#14564). - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other servers; (bsc#1192246);(bso#14558). - CVE-2020-25719: samba: AD DC Username based races when no PAC is given;(bsc#1192247);(bso#14561). - CVE-2020-25722: samba: AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues);(bsc#1192283); (bso#14564). - CVE-2021-3738: samba: crash in dsdb stack;(bsc#1192215); (bso#14468). - CVE-2021-23192: samba: dcerpc requests don't check all fragments against the first auth_state;(bsc#1192214);(bso#14875).- CVE-2016-2124: don't fallback to non spnego authentication if we require kerberos; (bsc#1014440); (bso#12444).- Update to 4.13.13 * rodc_rwdc test flaps;(bso#14868). * Backport bronze bit fixes, tests, and selftest improvements; (bso#14881). * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal;(bso#14642). * Python ldb.msg_diff() memory handling failure;(bso#14836). * "in" operator on ldb.Message is case sensitive;(bso#14845). * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871). * Allow special chars like "@" in samAccountName when generating the salt;(bso#14874). * Fix transit path validation;(bso#12998). * Prepare to operate with MIT krb5 >= 1.20;(bso#14870). * rpcclient NetFileEnum and net rpc file both cause lock order violation: brlock.tdb, share_entries.tdb;(bso#14645). * Python ldb.msg_diff() memory handling failure;(bso#14836). * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848). - Update to 4.13.12 * Address a signifcant performance regression in database access in the AD DC since Samba 4.12;(bso#14806). * Fix performance regression in lsa_LookupSids3/LookupNames4 since Samba 4.9 by using an explicit database handle cache; (bso#14807). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Address flapping samba_tool_drs_showrepl test;(bso#14818). * Address flapping dsdb_schema_attributes test;(bso#14819). * An unuthenticated user can crash the AD DC KDC by omitting the server name in a TGS-REQ;(bso#14817). * Fix CTDB flag/status update race conditions(bso#14784). - Update to 4.13.11 * smbd: panic on force-close share during offload write; (bso#14769). * Fix returned attributes on fake quota file handle and avoid hitting the VFS;(bso#14731). * smbd: "deadtime" parameter doesn't work anymore;(bso#14783). * net conf list crashes when run as normal user;(bso#14787). * Work around special SMB2 READ response behavior of NetApp Ontap 7.3.7;(bso#14607). * Start the SMB encryption as soon as possible;(bso#14793). * Winbind should not start if the socket path for the privileged pipe is too long;(bso#14792).- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/bin/sh/bin/sh/bin/shsamba-gplv3-winbindsheep25 1662115781 4.15.8+git.527.8d0c05d313e-150300.3.40.24.15.8+git.527.8d0c05d313e-150300.3.40.24.15.8+git.527.8d0c05d313e-150300.3.40.24.15.8+git.527.8d0c05d313e samba-winbindpam_winbind.conf55-samba-winbindd55-samba-winbinddsamba-winbinddntlm_authwbinfowinbind.servicercwinbindwinbinddsysconfig.samba-winbindntlm_auth.1.gzwbinfo.1.gzwinbindd.8.gzwinbind.xmlkrb5rcachewinbindd_privileged/etc/logrotate.d//etc/security//etc/sysconfig/network/if-down.d//etc/sysconfig/network/if-up.d//etc/sysconfig/network/scripts//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man8//usr/share/omc/svcinfo.d//var/cache//var/lib/samba/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25692/SUSE_SLE-15-SP3_Update/31bcd539228044ed3b978b6d5b198532-samba.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linux ASCII textemptyBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=13a0c8bb6ea0aec59d0d2cf324c49db0c676fdb7, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2ff3147bbf75189d20e34003481cf6b16d8d24a3, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=584f7e3854cac23dfc5268375f8be745fbd06c0e, for GNU/Linux 3.2.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)XML 1.0 document, ASCII textdirectory5Q4RR9RR6RsRWRoR_RRR2RRiRR[RRuR!RaRcR]R}R4RRRRRRmRrR R3R8RZRnRhR`RtRRlRR\RbRR^RR1RR|R5RRVRRYR!R2R_RWRRmRR[R}RRRRRRRR RlRRRZR1R^R|RVRXRRUR$RyRRWRSRRIR?RR&R2RsR[RYRwRkR]RCRR7R6R0R;RqR RRERR!RcRoRR.R RRaRRRRRRRR_R{R}R4RiRAReRGRR(RKR*R=RQRPRORuRMR,RRRRRRRR9RgRmRNR RR#R'RRfRTRZRhRHR RrR R>R`RxRFR+R-RR:R)RlRbRRRJRBR@RzRjRRR^R%RdR/R\RtRLRRDRR8R3R1RnRRpRvR|R&D"'fĪU>o=-i `< m-,kz:6!t^[N>QHqD2*OT+K2cο;El$U bq8A8d8JE\BkRHXՙ|C;`RJQڍ>nhDKD-!NdPJr`1o RvҜY{l$H3*ơ^y ,d"jʙ}|jׄDK֑3/?'}W]qe«I\L<4o%̯ʳz^FɋiGL'}M/ zvEAM-^L݊o=qq},`&Z|!:S*o'Nx O7#ܿ6g{wwrm,%l`4?/䕁P% *kaG 5+T\5+OfE %1&g-v lxV'^4F)6ɋ]% uEZd&?oB[Po;'S0jGy[zڬ =04S@ /!tFV^aI?%lYvHJk}p8>#fK3Psv8 4(d3Ȝ0Dz80dI y@,IqCk6L3CMF@L &h%X砘2lNk~.O3d|ʷhlT^F 6l m.t^MLl܆572I ft 4~}[?QblW`Q:60kt=+?y#V|_28 k^ݒoP+y ,r'jETZ|ny"9danT?u*dqՌ0`M|i:͟Y"΀"'l>(vDs0}„8,\ܦwzTCvKJaE`Ԋ^t2{$2 3-:x6ˊl3ͨG̨yW3KPI0D#K<UԽ R#d Ѐ_2I%x7ESߟ}y H%J]S0!S.OɧD$v;WJ%ƪ0P?qJa -G%Jg+G_,nܣL! y21("qD'9ex* zaʉ R+F*ѻVTbQH78ndz1iX@y}j icu+J:.St& 9=*)@;10N^qۆm!Eަ,ЮjyV=oX1H63 Ԑ?ڄHqS|r˨]l\&l/WT<0Py6m-fӕ8.uu"vZu9Pw`t%g@#!AG\V;LNQ/6 \!oJQ=39|F/֔mm. +o1;i!qB=٫:6{CqωfG"mPRC\樱}緔lp89_ z~ &t2x(/s1ܟ'"ʋewqKUf[mY!fR-~|j.[E&Z vk[z Ԫ]bYd|E^Nt ]%! = ^aj-Ǝwɨ-0.a͙ oFQA=ETL 4:~THc?I)iBjGSkhϤ%XKƛ?H-@,a~vbZh&LʄR3rBAU$Fu(,P8HA䥥G򧉢 mM)oFfSG*H.U.tOAr ^+@:2,hE_w1S˃Xoz#3J %F -^Uw8ҭ]zUR 0fDa7_7ffwG(޴?C2+~MJowLaR0YSp xh6 [n@sXP u9T|y†" Jl@MeSFs[\:ڣk>]]+v?"ۓЦޗqvOJlS uwymw˰>dF{ S8(^ '`RXNr'ͷ2]:~Y|m@Yx o96f^PRP85φ0+&[kY*V8BA)TIU uiUҜw̘%vu|=lmw\=*GmN}PsRU<8`0\ дDzaLDvhSיl:_k}BPӠ آ06qr%49Pn[,: C+v^|Ot"By2Ug$RT/ ߖ"]*oq$)yDgQgS0|)#E ?F#5}ֱo""}*N"5 j!NN2қfC2Y.)sd&ŷ(N@JD擅XQ)Km[s)CF h|pc.]Ϻ3"Zخʪ4^Ob}IzaX?ؕ SS'd&/N ډ=dXv)_r_:ߥÙҗ Pg`v^O z59khW/uKK˻q0IQ?-!1O)4ܮmH= y*b^=E-:Hh3NM?lէCqxuğ$ZV왠<{&YZ% 2<)6H-b{(ڵG1:ٺ!P ]\dqk1J P1/~#?36xYo µ@E+Dtbtף=1b/>MPI*|u۩2mtaKt2j*&[*7_z |ɝW^eg[,CuHq[`\^ieGIAuk^L/бqxdޫJ*;r\.aSIe8Tm cgvoT|r+CGVFMVJeٍBw~a>k;+u g07ݻ8k1]Ū=+{b+,S8# ^~HdrovT;\o]@c62b9Jݎ0z#VnL,@=x"8!*!baè'u$gs9 D%TLk=q)kmMY3K?s, n{aӵ'mR6TRCP+(Jc7l0 9!vZ%׀RixC/wDF[+%ɦ_W.oqH+>1ߨ3u^xΞ0:Ҋ*3rD*ŠQ!ȻL#+KbwK!ue|!‹F6>X;5 "'g8-Fhg3EO#ٓ@R[{H$QY0JxN7/6jW4{^#G4_ɫurpT:{/>c~Uc}F ZutCU̬P$b~dB`J1s^FL:^qj4gp!0U{d")r:yU5լdeJjH8g3 P(cz9fh@1Ɨlb`-?y75^8+N_G58J[`8V&fĘ^H"]C0>|I3&@0u/wKLeJJ(W^V:6=Ź0+_,FJ l_8I+u0q^Ј8M/kOǰir;?|ăǶJk?>-m $=TN\⮄f¥!ɦTmYFMk#MjmNyt\5bfa@3cpͰ8} 0X`D7|-rʀG+dpū!X0p9ؔ[ւ+SV,k/Jo^jFU=|R1cА'`ʏf̵<5OnLbLwuW`OCz Ĝ0CԪ 5풨~ө}l(WӾU䆄Sљy$B2H2PW {TL/zkT͍x[Ϣp?= H)^|"|K/7 <}[Y[:󺶧Ϫqj;YfD$%8q@A\T<>+Sքu:Ƽ̬WQwJtn?XMI†JIfU SMӕ]MuTΈi)2ܑj[r8Uf6<(kVIi_W3/}zpmH0b}°X` MYcwDf'yۤ)梨4gZ"ҥ$z|e쓭&+X}>Ϲc)'OլH\9_r27fx;X$jv3NL,ߜE;cQVCb&ۑA -,@`<E''w4`ME[-k} A/eexVxn$'UV!!vaIN1T,-U ]Ap/RCּ$`4V,u2 rJ;>gxȒcPk,6+)iKpfޣl >@Px$FN_BIMQ*1;iall;)MܘB8xT*=γzJ$!Kܬ+1Tq`(gU*U6t~95NV;r~5ov-ɷơNJqFC0Q;w!KUb Dab>{Ox( gӔ.:t}jݻ0w֚ Ǥ-(Y1Pt40:zD_l7RNsN`g$D DA$Y}gm[ѫ'kM{8NF }T:9&?vGʐ7 ޽ IyG>uR o(|" C,w; ˙}nZ3a䰯]~obCE'*0ҫ*G /G KR6 vKɓTRRc#6Pt]l<2rt~ʪ0p\L6W;Jz 9 56k9AN5'tf[(@=݈pat&,`Z cFIþM8-V}5s MEڀG磍E q+*f7 t0я:a}r p*s뵼An֛u,^ fYAz° E]a! gZ{!m~XS!:o'ű֠Rl܁;r<6#6$06f%:Ov(^رV xFJ9U/Av&׷mi!G!;|Lie;{wɒ0yu"KosqNVt@v8 &ٝ1uh %__"^[=y'.opN8F%cJ!m8Z?.n\Pn< #`WD1j:ުAt4JݠfȔRjƄx ١z0ieHD*pa!巰 ǘat΅hRq1rwR=jFO?5AKęs&8X~. bQ G͎Qπ3ZRlsBσ{P1HG= zPʴp|%ɯ$bZ]}]64q mn]xfy2` Q%L w;BX,*"kSӪ8)N:#JX{3Դ D-z Zie;JUVTOUdYe4S)ŹFݗ1u~5/>P\C@%KږbyJ_"q>U'GTr-SH+Vn7M Zet+#3ܨ '4kZUr b1jgs΢X>`,%DrإZg}ߦZ븫T!Py5;P܁2C\GFW$q]esV]\rd 8Kp૵a-YUhp*Iq!2#אĞe#=&$XW(9*S;GpM.d]L0 H&Dve7޾~9qk]؞uНJ P4#HUh*Ar]anGI)_ QX]OG~[xg۬, RpLR M0ͨάFcf5lin."* qoǃ%rV,YgպZfP6Vcn.<=o!ڨ1 \XwV2H\E@ ϓӧ M9HVX8X7&5=~<\QiVUʕ%R^qNr"mRmi ` s:Є]@vRlvgi2GČ" 0]GQ8UaUg,!q;g;?_U\WF}f)nf@vpv.MzYL#%c“e̍fw+E #6Trb_*x;ϝ8Ǐpuk 6PŝDapN'Pb`~d7{#vwX2C,G{KWĢG(靈579+`y@>;{OF{}hIY=%DbBw.u^"Z`7fI`:x5k>faDg\ U5-)]u#`A xZ5>]M*'X ^_|:bt%bkҫT/,L/?ƍհ aI޾-r{  #"ھ`(Jsa ԉ=L L|4k4+8Gܵmҵ7C8FG B/ie[E ]LiPM-xz;ؓO:>1cN+/` ySiBRܩs}M^r_s#~yzluFȋXK@nT<<܆EDV>O|\W;k 8ڧ5RW"V:܏dKW}Ivcvw{N3ZA }3{AR~.VJfF/}k~;d䍢CkG{lT 1ر]4ۈռjDl`6`dlz-+cYxƀ>Wi[ fBk DÞU;E\("D,w-MIW}֓)68 ,C 9vlT12`sErf<-Sֻ/C2D 눖kƕbwgVJ͵$MVʬMyOhWe!6u tPh"HO*TX =폷9p%Uc$eMZV3tjcJ7ny-t!bkoLelP.C4 hhO.U]5+F Wkd >H/|t[ Pkj/緭˸!.m|L*-,GBO:Wե*D]hH@4,Zwڥ"Y Է#8yp憿53M+3?;3j By5'+D{36s:j!ٻZbdsp.h/#WJ8ga_k;V|𑤅] v cfPƽrx>)'>SH0d(EG>VLneX7PM>(dk\VXGlŪ)Wh&`>8MĤ$z PĹ6uӹFM74i <u#8MNK~/^=?y.]VWree:{r~6_L38A;^`ήoM̨-be` 7*}tI>:B'N]KE=Ү`Xے~eo& ˢb9bgxUX92poweas<7O`}ίw\DMacMxQY8+Z6x ]zFZ>gxJ/GM.޷/y᦮\Q*Gnfѯx :?ebưF깆 f_|<+Z> kY&p\ְ, r+`=EɳWFRvvAݾR%?0}'¸M{`DF)Y'rzd:.,# vJ ּд39ן7*H)3@!ms@ ࣧh.`Fs.sq图 yrFދ؆1Ozb*c֦4l4ǰHX CUkvyrE՛]sw[a %GSӏD XcZ؎k*i8<z8I$Ch$l4 aU L4zmE޺)jB!!,W#?~#[ _cW}ĥZu39'U^&Lxfc< ;\ڴlͿ? SF(EpJ,)e/n5y݄9,O!oL.]*&KOҮ"T qzU4sxQ%j–H}f,{OtGcbrxP/nVUhe] ?5Cg$3;$2G8 )s2ZB@yS9(MtoqnaAVzym n%8i!ՔS_@"єׁ'ذe\XW‹KoB RnJG`EAIWk. ހ$^ Ml´8i&ym,S)${ϒ5eߤOKj9dɪ=X(PFo1^onbXI'QM>C~F:.'vY!//$X \ >0_ hKߘ)b BOGPǹX&uUm =&R㰍I6~cvoZ1٩:H,kfߊ+ٻ.*[䧜=鰔I䩶Q)4~w|M~ Jվ>=o]_zY|RP.mU c=|UUpMSSeȯ}V|)i(̍1iZҟ/7J ȡL7sظ0\9J|PK0w4Ċ} 6<%ILK;Rh#_9&I)JY=561jf XrLncrвv+xoH!َ$5Z`hن"Ya9;Ç=h#'jO=dKW mIaoH}¶u:$piⅤjR 2 m)C 8/P_ӡx _$2:УЦiq!kWe]t6E9CCOz7Q7vIh_2.Jgغimr43oo&hK.-Q&:P`{gtrx5z$h< _/Q=ybrNv ׉Թ D, DүH?^ʑgd~K=Z4|5ixدj+3G:fn ,eFl/S`օvU/2-(S'( 6۾Y!c$ik:Ee- 5oMSxJtA#M[L9ؚ3ncj#B;}IlпS,/"Ibz"WiUoWv1ڟm*G22#듮CK*0PgeCO8s-7lݡpk)[ )RBǺ:)ԍ򳕋F,? ~Pc:m[8腩bm!b,ie.ӣ8(^KΓT.κb$guYd|vV=pMV)oo5r^0'#r(ƥm Q'1NX(+6"Rx0n9I庙7Hpl|`v, h KJCfh# [+o-0:$PgwJг/Nv-`p6Ntf~;f\ Saei%nbd|z&ցD!\u\dqfr<'4`Ta>СZ]I9\VGn2t}Xt<#7.eh"RZgJ[BOj86MvP)=P@v-Mځ]k 5')ɽ-ǓCM4el383UBmCK˨һ!\jO$d*fF3Epqċ0ئMttHY<1Il+v2w SY޴q"L6Ɍ'82 x_[ID ԱB}aN8#جܩ&b$Yp eݯngFފTcn4oricPt~-` =ش݌xco҆ݓ DC.VUCY?R {αqڿil$JÐY[ _x{s"ă DYC,料PΐPS?+TZJX< Xs3,3I$kuV~5Y"~U* 7* ҃f@Gɲx?_gyAU0$|W3z@uZzG m*aO)~O+ٵmcJt7cZ,^ M#2k*} lr毞B'Vm5cfa t}+%\JMkg<ǔh-K"vq4 30dHB٧4ER:Xy5 85b^kM g,?{#,+aHjuDq:>\y@0;Y>З3*ix!m$^ a>͑MՓEH< r:%񗹛uILҲv S߾*iLҳcr)7 r GLƚ80 btDOCN{XDB7tfX^t>d7(߆*'Ak<'LujovD5P@- =^W#cHroJ~`: e|ܢgy7g3n@+`@- /FY?~IT.hY|R9Nm3~},!kkL<0rX1-Vv`xõADt/38͢rG]Qۓ)Ѭd>89cpO۬H˃/H,8 CV IlM=$3Eб3Ex. $uxryb5lbx& 2{1Yp! Tݺ812jb,ۦ` U[Sx]¶icU`GL6s 78P'VfbFIš!goY1 Ӌoj~|TSC qF$o͈nw0_bäEf¨:W\ׇtAT+ǗGJDf|*]ߊSBƴ-}V }%% Nɘ #% 8y >DCy:ot~Oi8[Xd 6߳ 亶3FНib  d"˥H11vqÈðJ1g6yȻ0[} VF&wLeu,J9Y#HG7<-_* M4ËuaiDSMVĩ|_9Nx,mikREgXby^DvB48{_ʼnT->؆5R%'qw:hj9NP 4+e3KGF?t&XdEZ;Fte_?˧&:,OQNhvK?)s:a#Y~f*vFqr^oTt)*jXp~QcՐS<حaNF'D9[t_F Ϋ ڒde_"C 6qlJv%n7qvl"&gWdJ/N{{ƈPzٖR!'ې*T{:;;͙Ҡ<O*/]up)v侍g5b+C]jbF[:djX1-^ $ζVS4M2u*BFzyK{ X&Gi71D2v}ц14 ii[<"ŝ2q hr|y&PjU ୔N(v!B1ۼ!<{3j]09+UzŌ/R^BF3\QTr ٌn*?X "r9SV-A8MjPs{<&kéќw!M{mVD2vsxp2Bx@Y0RGL}:e4lp7U/R'kaZصBc9BuKOҶq*&E)gK5w\άwn[R])%DR`Yi l) #vZJ/<vg)qubf*H+ c j{ǻ$ؚ>I]C@1yTXXӄt {eG4u&?;SSMUN޶h[?UDSfA(f̣ ZXJ ` x@hr=lh=O_iuMlnSЫu03"E"`D)3IuhKjH ]ULz{kr:Z++G*A& ,M/}Ee* @ڧͥ p:*@i֝N\g묚"`ϋNlZrƾGT~uFc-`3:qh65%7NktCs<+F43 ؋Z-p>֐ȧ0%} X~0 HHOvPo-5qbC)u`Wω0çOg%'g!-"q>-:H\Ä[pg>AXnd; u1J^.񹖭8%㸚QLo6`;c{% >zNP" f.%*W9cF?+rẂ*bf,~yEst%S7og~"m Qb)nw50m >c[0I!P 6g2} +fgSQYt8ꡊp \=r5|*;؇iX<Q*. ,RKTNJMkՕ=X 88h@#b%Z !GjI5~9E˾x,9^yq\(+N}m@e[؇=2'VSw8;i3du{0._si q8hz'4Ť5>Fy,OWduYԩ>_cq&e$2?pM40#> cb^,dY/xk8VebQ!xvqc^'ąCThd^\.տ,IiEB hTh2 c k4w`5fM*-ɲ-eVWq*>*}ι%ErrҾFNt,%%@!Ey8b/2II+Mh&{ÇPOZ|z}>>[t1mlB6B*0J#;D; 3ʇkoA#5h~T f„-`bfee ڤcWl"", uG,Lfjz}_ }F4L3R@vc[Oˈ?\ ..Fv gB&_@,&T6X ;t4Nsxhf7CIThΖaY7EJڬ2&ʎ G Ny@!H)L/wm%xQFAv߲q4)e:oVkow*oKb}5“;DϭpCM|^8y BrKR6 ymwfa b =o ngo3Yiqj*3w9N J>溫b8b\3t9ri+vQ >EEq9Y2LM!G%`@3sBh$~9oYٹa(=ZR)^Fvޓs'6xܼA\;k-ԝ쨖ne/Ou&C} sp8|6 )'#KC[LNWV~W7*#fC z Rw4e+] /%Oxُd3&$&4rPf961^‘1}1$A5k SΨ3|=q\1I@C`I52w~h25z9i-5-zsJX'mW:-OWfL/ufy~ES.CB\alsx)F {5(!G[/81OY:JErH_$5V VTGTR-4 wB#h"6/4ZZ. LeWNZ2g G(&QL:L2jz/KxF&$Owz3ЈO.~"vJ&@b .`qwQϺ2@yM3T.CPW-ujgG;GDJQi*hr:8W.3 ,`vsJYJ.|pЊ'L]2ʝo8w{BCU8e Xge(o  7 t[׊:Racf jR-.s*ddG~Hs.HCv)A&<#A4 [L>[04 dr0OֹWj=||Do@J?6&KB d9~R$-d3_\e)-( >izeb脅y^8j[460Q]dzt8Vi>wS&ɀ$!.H'6t~ڴ g#,8P𑀺ܬJCԩ4;N%IHEx8Qldbݶ3):sm*56R ԕH1j~4 c։ OS?-hqΠ״ 6]>HW} 3B2CzOW*ep~D73x[/յV$@r*Mj8tsˆi͂a:Ά`GKsHT(k.44Q![FNeǧ1M.}`8\!Zw`_[0*־,Yja&CM HQ;W|ı;.K_V:Ka1l(;G?~at/R俗N KB/^"k9޲=$CG@\AVR ߔ6r A7A O(J˾س!X]TN5nJ*YXO"H"&flʶ[.~%K%D@ a;-~.ĭJ.vݺH"&%#1DG%3[^9H )LPIn"L }#$Ui\L5/ ~A\!ZdNWE a]D3[.9G?̀+O^WKK8-13})`!T$n@z r(eW.yd%l &O̍/BG<bp])-[-\% kJ{N/=M!v=>8Lios&? RyY[MlB,> @eEvx$[ҍ苬vpF:7aq ~Q}gf Niݫt<@d CչɬdMr}#͉JWqV,TرHէj*qZLڞygNwmLr{J>Kj)#jb"`g-scP^vm[ >}pMnF+&vpՐI$1J2EQ2|)x\MӤ؂Pe?Lc' HLt)Vڸ2SE;!cʭ$5-H'vLě$")o6!`?.|]]S Β)n&f`Ip"^7%EJU`{W!шR禟<9Cg;BeQ 667oͥƴ(Ϊ0oQG,k^xz h~Omfdy2w)^²,">YWo.PJ za zB{VRf`i'~oMY%OC++kd|̺ gTקِ_FR ! GJY4R͏es¿|29GZ2 fDa\ʄ@֬U0 Gͦ}jV˞JIQ'uuX5h/f^ ʪzCbm@\/S)صNdڲfFzIfF.:wj\׽YE+>=.ZQ'h{t%4Ƕ hJlXk2Y!P>Or^ǎ-Kl5kcѵx"Db8nmB|)6m3t2J2x /3l0Ɗ*CF&WuvR$n.~}D!AluU$u1|ׂhl#E~|k~G{z@}L'Zt7J@b̠eHυU rn0UhY slo]1)%91YydަCl_ѫ{*܀t6c A}5Wɂ} Q~3is0yL׆r+)S081YBfϟsT\z}̡M3?;!,狣I#HVHTRcYp֒4e/yVgŘT 2={/I搟R04z& C5cU沆ЙP7sHN"3RaU Diɔo~* a[*;$ihG[^]V͏ܟk/)a瘂B^+7 <%@ .4.w`VHpچl}SFѝ}J<+P+V%l~ł_z@=I\"$9՛Qo: 1N.5,r0%%A/<)Sަ YKȁ촪K:fASl]mv5,}reb|mr`^Uk-2;xk\:5= $Iw1{@cj0٨_46Sċq{\T40O E?hNTNqyOJ#-YO&9q G2tǖfhCso@paܰ3BƄo'YrK9 9p e ]KWօ:MRhxluW.ݩg` FKo i+lqpi0Kb ^fcwgvP|-XxzNbscZ(r1F' m ͇sMX.Kjf~c|LrKO70w E{JIlqfVu+)0c.柛Hû~.%aE5]pCkPaKU{``ƆP7b)Qa\XJYAQ-%sErs0PIi\ sP01z p<+@,zEilj_aTɆMniQJaGBz*'# V}1n "/HDAp}t.l$7I;G1A"Dq6eW8.裯ɫ_N=ebu]{lWCT#_ $tqsWa+4ieTC+fxtAwV4/ #0+9*H $9PrX ɷ~GSth!.maBg |r JJc@D1Kzyn8b~,j&y 7O_߾%ĭ"@=<:4nu_c$Z*cDc=hb{[u#\$. !npNU]_rf$*`?C@GJ47Bp"r!-Ž%ZN: LѬ#Q y،EBPUJIA] EO۟}}\IQc `9KԋCH*Ew %OXs0., }I=Pq0*1T>GB,IiG,!9rfd/4D9y4{ZuV>^0NY:a[j"(Y'ZbƸω?TǑl @5[{5еW AkUc\0 $( U7?ܞmab*j/0Y̧lNiX=Fk24O\ylrØ xf-)Sv[5@^.IL- u(S~+vF9pUq:.a`O!@_K`ưNv[XČ'g+/{YБ6f^hB2az}-YbYPFǏ%)=QF`ؼ_k6m L$l %9:lJX (4By"`1ʙIT=D}!.=|u@~p2_(; 5&f>@ b l L>Bƛ@x 4E ^oֹO <%9hqLg5uGo:,K%mL=֓LTD<-Wl.Tmed3ud2sH m+l {(wvNYpRj2TbkF=5nܟO5LJ>@w' 2k@r8}K_""& OZ|ƭRw5 Zm ݳkb?[f|w8>7[Ex\F he\(͑,ԝUT|:GQ<) fnryذT7G y4[нMۤ;ihNS1g@;oqk,% \'Cv2P+YN-})&C"iɬufBkAw,EJ d Xuȯی坵*R5%|H:tlcY3U2IZNL#IN b`?$S΀Bc9R]_:bY{g{,`Ms9p$Ggm%BΓ ܺf 1UyqKV!p+>o׼l_Ơ?ukul.e;[U]Fg&h3d9nrYz!&}cv7+?v&L<- YIbpN}ǐ]lw΂&}W0nBwP hEN_>Ha rz~+lѥLH*VXz^ji!z;x:Fsmp Nd) GG8Gx7A  ʓH2v.ZW/J r)FV ̖ FDʏ zL{rY4 1; @V{>-0> ̧( c#{fﻒ\4}Kbgޒk{mi/Pݐc\hl0| f<j5-CO}`}f uf Oo?q>I^*NHCݴ"u??҄E)1MP'ΰ)4pnV20bG0b5JM,,,o_~E=\;wNh)>=1dЖYf6~8̈́/ x ra>[,n8t2lO[ʨq'refEf9p]RzVm\)]bP9 ξ yW{t5>J32rh=x5˨u'Vz?Y6D`P+ Բ eR/>kϥM ?]2S]e;ߟhŜ\au~S[bᝠΌqșf$OaH 2pU$z %3vp. :~^6QL#%"P/j(p{fT-K1 ~5N)K3d >NOX~^M0qӵdȬ SM_U3;f;kӏc~4gQh4J#;gjF~.Gѡ~~mi7VhY&(kC應U%9u{ɹ^ؘRb5Q g~ 0Cp@ՌKY{+DŢt7w.mxi̓\(([d0#iQC-/8q.ХU6ԛQEG.}T & kM50}wG=r5.5JIn风w\H*3 U[Mj="%?EOA^ ȕq`XT )Vm <{xqQC+Mqt#i87#P0aV "f %܄:%6qmEKĢ#ԟCtόr[cUQP_ΰټ5ʙAVĝq9jŒAŨms,ZDPWt7|HttRŊ_UdQ6ELOfR&g:qf0(RY[.Zb*$sRƆ i&~' y @wX2̒eإn`Lr')߽w(<X(dk2;Xp[H)0U_ x ?FU+HA/Jaݗ Pcrb茞7*>РpT᪝=w, )O9tf*W4YfK\#9Pqo#Ejiu?ë^JsLs94߻ ߫ɽ!wD*oDZx2%` q#*hc]}l-||[yp\)OaǎK&}oD#_+o-, ۪1GLV.BEwu+Km>|FJlΧff8i(ʏ_}gUɁss=J뱑7DE007$54+=όY\\|~26rcn+f9@'VfcVtYo֣K ` \Ĵԡ|Fk*{'xîRkp-ЍHdkztF Ώ@j`řx7=V`Q08oGQׅ|bg.S͚9"}j|+4±1gc)/¥yAdQ/M$f(ch5.4%JP(c]:{aF+6shD> ow3feu{OJm4CL:aOB'7Ze/O[+C< 8h}kQ[cs#q wTUXQk>=_H$݃ÄH D8fYnN>~Wm N4k% ˇ]D uJʫMhI|1#Jly#ƈrD=EhOw (`A)+x/>%w2'(-͡7FɝryySA‘80H1^0xQ*'Ѐ x2cp)*#Ÿ z13ӈ#:'$ǖ*&݅&sf|ܦ)wVb<;)-ڛ&w &[M3NĎF=`ce֨4AId$VJT< M4rlf"O AG7v9^AM3u)k2[ܻm+Y89d ט'v ,D좔h ^t[i&uS*]+h!b 9ZI-?su(u=ӺPC2ʰ0i\fͲfڏ*w })3Ǣ[:pK'E)If$zY8uE\P֤nQeB J$"]]×ULXݢRU6v'5Qϥ$|FmUŁs8jAOXIi%);TBbBOVKz(Zb&ry晱G@ˑc)gbؖSl *# ,F-᱋ch`>VI`B@CZ8FSIOݐqlxj"AmG<_#sFs7:0S&F5R&3"PwW$`1nx(WT_/$)6w ړЫfַbmpFMl9Yb?;2בlԜϭdD^K";_S%S*WA [bLj 9գ턁je2}UlCKhGUV\[ŃAQy)popTQ@4e+1lCTl*YqZy7(y/f C$%Ri;9+Rqˉ(]p?ibV$˳Y%RD4Cw7iЏa>KU Э3c1e7AG3j[;ui%Ӛpʇg.X {( 'XGH<+}A~s=fe{Ha]_4MQ휕 S`j < 6Rwxۆ!g@xOuGV^<3&tv)3?n(9tʞz 7xSB&\S/.Ok% f2h#YD3IBJmJ|Figx-+՟_v1eH& .-Δ6'hntBl)bF%Jh_++X0~|,@#"Hw ĵD:7!>"S/S96]T?R؅*Pϑth7 Lߎgφ2%.I#c /wjLڎU-2~A s𴢊&g掟Q;[L]mI[Mh ]!VfU FRAgPՄXoh$ѮӪ z#E&.kdm̺Ŗ.h+'G.#_ƅ2ۂdU!.K\ʓ8'9q{8vjѼNnC%s`HJv&`Kn:_Fv3ȫ%q ͜ .&_]hh6$i=ݰPy<{i[iK'D:.]6nLj[Jԝ7'x!lMG-[EHzş8:]x&n9#~w"K!IvU67iF!EP2׎813 .%hgltI/aN8'^/t3cl*kzƦXJ\UT+kK݃(B|=@][`JżZUj_[zaj \p{P"|KF;y-NsR^l)Zq\jڍ{Z80؟Z-WN2<Gm˷#Ey3x!+E;,ApZ_3| !A_;!5=6.vL 覶5P, ^`I#1GKf_i@D(z>Z | dH\5`6CSL3^ `C3ݴ:X W7Z[X?뉼,N`Fř!00/64ST%36{u2+qLOxz~z#.,S}q<Ά4ڶE}ãPo,m ZQ,5*5{~aamX~:gBMЩ{ ѦHXTl?ފ{lș>"M֔a'Nrμ<0݄ǒ0WwJZ8UopٝsP5F}IvXI< %2"oU4N?:g?K01~ iqª\FH ?8'Y~"EtD~$G[EuK ;tC^Pn̯ݥh?,~-}{L"ԣ.|ɪOe6װX\飍 n`&[aGk]@\ҁR.ݯ}6a2Pds͋g]Rg y[ .0, p,.,5J3%n]rўfDQ1x_$5'Amyk:EJJIä &Z}ߢVsf\$zlvv+PFsSey޻1<:&Z@ۍޚzl׬*J5ѢzN{- oj(֕b9b!}f}Ú\k\eӂ\K\wU5蚽p !(7t =,CWVMreE,UVk->ǭ68љs7A<E`iQ!AÖ́k4K\K5![!$Y~aŗD嫫/Sͥd_>!6)6Xd1 *|T^R! {_lAVyOLVs;ekhњ.@`cdr8/-ԦB1f'EW5Zz0 W3] j.N<4|]d2 惁6S'Mb{qy:\A\NBCMiF6%;)tV$f)Ժ8(|IIPqn:o`3Tq٬wS352 -\ߔ1Z߭UEMZ4/L#*j 4xQ#Rea=T/ `1d +OTp9<8!͖)`{abE"?ɩEH^g\9zؚC_1OrmQWKn@.=Qj9"-TX$WLȥ@+՚0{p^_)xZLf@4{J*FL(;ȗw)fMU4{-"GELqӆ+ڊEЮG|93¼mGSۄΨxDT+ӱzAs]io8cJ--tC]SJR4-nذT7bD#aE 2z}HnR&1)<'q)<_sT }P4=Bl~^Iuw58 ~'l=TqOPܲix ;hDXEfk]>Yu&z@5%nƤ5MyVwUVX*^7ڎ]ǐz :QK(3TZMN,ˆ[kK *Fdߣ^ӱe|Hq~|zwPO{!M  nNtnY =݋2=X)/rƞ IFʁ3w'Dg`rxS=;_"2Z)M_-I `uJn7|\wUpLCD: Zu@Oos~|;^y"r,MOLU$q-0gpOx$Бe$}qC+>A3cF}Š4t"̞HP"A*1]Fd&=kV1h[F ƶy-n%/빽8j$ VWnZn'^Lpe%e:\?%9JrRDM&MUs@+ Un-J#!' RzVP2kg!+`h@We;+2Y֚Gf_O0WM5aOSR:4WZ ӓDgyn^';n~#Er!5*%[ M,\"3pg )"4&K]v]ϥ Ew(d_f;_JIRS9ʂx,$>,΀?[Ь5NkZ+Wɜy dZ8sFǷlE{0jz{)J߷9u5I$+ 72n2s8I3sft~cҺ 2֥ QgxWP^ t*eWLbrq ZƗOhDUp7{4~mM)WvjEvE I6>.Ǫ{:@LA~(9Ǡ8#g=)CV˘dXM/ZVᝳFl~pskh([ "F$?Ѯbt;^|[ʣIdq.uVOi*H_/48-YEšo;b>DZ"u[l=™ UͬrP[kTL.ǖg@*ze M<"d!d 70X9ڇ[բጉ)i2[ _ JuTj XGhZR>\z:/RwG Mkp6'P@_i4|=0'n28>c:RCSAf %$mPăy1-D+Wk8UBY.|7Xҳ_ŝ ;g>g?5 MPe{?s;DAby=9f9CoORxZkEsB[8H6M3/./ jS>Q UIx˦n3{uP0Bj].>ٳ;:VJ*RZhi:2+/N^A1Kd)NL'P{0 "C  Z|(a<|u6ifP&*PZ. m v^pXe% G:YU%vqB< c55itzSp‡)Baz)@*Aj'P(Jn^RDŻ6?zÖ(OQ{Q[ :#O4oۈs[2߬r?ǰ\,Ćw K|dwn7,?5qCk}|z@ö{݅qn#(5l,lFSjYߺ2fl@= w4'>%-KnB._29:g `akE0[BF-=RFvv5JđA1Qi'~,EBr9N3}iKQkn5Qcg3iF;]{Alr1&IfdJL¶^GN  )32V׾QJ>w~1*y_0m lk>8kF꞉N2ꮂ"e|'jV tF6DhsҤ'v5H|!}(tfRWڢrzޜ@nq=m}3b!iK\7i5P gx#frt,]NmDb!au6"8V`)j:(wPJ\hOZeu^x\N4⅑xX 2v(8F԰\-Up2$caV 1֟~2qB4 06ٻtx%Nu 2F(^]FpvdUE^ " r&n̐qZBb5ӅuaBl6<6Ĵ**!fm+š:lCeH೥UCqP.|Ţו?#Ũ(8uÎ73 aVMoq,x0~tN\ZwZ 'q]Ԙc&RlRR]"~@uPWEʲPzj XT&9f@ HG%Yy)j_O,|i50"[>J# D \ UA3p35T[",-t!JS*[]%8xh&2 wkj:Y@&;g9ҩ~[dFӝG6ϯ)YHeD0FF90/X[['tRû!@T'r mm6yld ,֮  x& DaUĶ,K GCӃOal8GMcH%_/PnA1;٪D.bp !,+7|ojE! n 0Y `F#-/ `6 .0{t1Zȿ{5]–9_:yWoЗ^FSM b6tQ}/'U{>獓 ;m|?$U l*F"`"Z$"mR7پ118)6Hv|쀉F*.Zf&rczLd6_4΂E?eGdA^^\^+ff 8}[D<>`?39U|eEPztotlHA,bc3aZ~36V_~N!-c8cڗ<% *`f;^V Úf2iX6D8c&}#5[3:wЙ^1T\~,C0 xD'KE]ex/y^>Jh#rI}EIR&8Kn9u4:NZ>  B)9q)f OjOFgx%F!Wb%P` R`2gd;FܸkEuvCʝ}n'[ѯR K&@+a,{I Q}|ւ'zBE'W\dK/OI?RAJ%n( ^,/z9(;3ҹޚcuWyFvٛ.RԴamCj%w]'޵8MjAaH (DӢ1%zI;@Ld{;{N2P4A9}AȚPrb6#%ZNb8#[䡘Ԡ'|FEhj [#b>mb7=lx\~W ϡxƼvXhQh(GzԳha: %^3~[4+qL^,rި|KF4"~FIC_x~+$q53-e4t{Re^=#-2hUT¢QȆ芣VJÀtqjV!;b17\ٽvB2&° Jhڡ:|d8sK:>sA2*kw摺 FԼ> 9m} 8En{xo K#?E%h7OSvt,,]NjI:&fGS-o.uֈu2ĄkE 5~ DR$bS֯?;Nz51^Ɏ"EtSXݫAFa 2]cezQ~8ʌ+j'cGu+W$VhIʂy>e l<ĕgtp:qgb7{`ɂ@9>{[zob$ nL*]t2_j^$1Jjו*#ݝwHZa)aIQw](8Ϭ&'U5kOD N{n]^7uPUujmOYec( x˳|5ӝLڪ$e?ȸ%?rP~|礅c Yžr݃f 7"Td%WU E,+Ō1Jdy fNH |]D6YH)nCxAe(ْs):YOM:𼥁/_B瘃GNQRЊ7]'T>!i܉w ߍ\Nf-/xr|NQ!?v%(@sD>Lo8*?s]HbN v*'xpB8u$sJX W<|YaqazO_$`uIXEde 828wCtBlqy֍(jOAV| 2[`sOvǽt_  =\?#([gPZQbi?q"z 2Ғk2bx|jΊDDg1s_XmlΣZI,x xlsU'{Bcr# 8%cPd#k:co 88Cۏu3"o Vf8wi1"$uDʱ խ#JN3+Xog48*9!=T[H'B8sf+tjJm}Sx*RZۼ|'NdU[!5zt uE&hTQkUsCK8!ҁiR7;{p. &M[-'wQj[<uȓ|%a[ƹdeǍl&\ 9n:޽ (ĥZ<#Fc6e=4 ̲_Y2]46FIdTjxr4IXNw\c *5}£h4Ꟗƕl Q@y(FO&ͦ*BB,`N-ʚ`p,p]4wKN_0<6Ű#}%+)1y0oJٓ]!pu.'GR+DVƊJGjkN{0^ӦQ!I5R'9~'?);T|m/kqK=i+Hm[ 8:}ZiE:*_$ D! $85 @2 Q^ lWgnX[WfAL  Dyd@Y 4wR3[mLu3⸐1a֖IS=-{i#NWX2bKX1ʋA۽uu?weq%1@sf>4!ۣ+ *Bĺ=B!}&S JE`37ŴՊPB_|o3Y a phvWc&H>fU-1aύ1/U3s`#⤪KaJI¨^S 6AoM+MP1gvG%GN~nXnY eD%@i+b~zW2E (E=P^jxYd3E?SW6p4Z`.Q0ö́ bypwu*;%-޴ܵBtQ-:1_BJw{1{CV6ixiEpL%XnRZ5*~p:oYSyЄ_(<$zr5sqWO6 F~"ʛ:Ўr  пf7$qչ6R|N[+jECQ һ0 ce]sx,k6!C BUVAxz:|y>0N/>E,)5.:gg|((T+Cxߥ+PGՏR0#S V39P"ʔdXiGqh=^BbnBظ6rV 3*|"15Ă81=jXJ*;q90C5MclG޷NbĞe3⚓=bt綜ʞM-oXf]H0g܃*ήZ}<{Λ9DvF2TG+ X{4C4|EgŨpf, E~o[XB!:Fd ?o2l1KTq!; <[hР5'ZZ)= M@ls$ݖ[-!6jma; uMnx~ kwӑ4 #"ӹK"fBO2q왌"Rxڽ~X e$ig+6ZW1T9Xw^C4tAbrLm*4Ԝ^wejltK c;LI!Mz50=}v-SIB6N;8#I  "XuPp vT5z9oP r{8ȫ^QV1E`K6H،F-ZLq)#[g_R ALz<56>J:&JeP)kG>HsmO8|ię͹?}_)~Tf`=mvSd@xTgʸ6*jMZW,aײ 'Mhm'8b"}b +~aQRqJd;Vh]1tk-(W0gISF6Z+@P+Ldܛq K7xhqXIDkY[ s+Rs ū^eلyC]Sgk 1i dؽ{q?7r>W|qn( ;[}N~M ,d r 8[VP?L:qyyܦ_0ݫ*Di[:1<۞evb\ P -)}OM7`gltWr8<+(63Bng Ƹ**'s p-.sLʎ .kYEԔr.oҙmfdWQ,{3/uLx_b <.M$OL{a'8`F5fy: rv\q kܮsBɢw[XrKI5$_`6r>ӉN-OdV)_:JgG$\C[m1xVN%8vng.B=xtF=o` ʣH~n e5)΂"2~?:2,(nCt{r6")^=PH6?Y|"]}rsѺF 'chH8=Rd'mh =@@Ip0]d^GrNM1a[2@uV$PX)iFXW-.}= hFvWr|O%|J֥#xLd mB RrVJb(D„ո(_=>-X#rU?Ю`yjqH!AHDVLcϣ;Oё% (@TG͘ىWPic<+ qgTY w)<'-/O\Zك! K-yۅ}G/ֿd2q*x\^Lc\ R#*fHX4/Cu0Dw判Ҋ|Ƈ$0n2h(EJI\'g POB;#D51&r8xA-rsNEȗg+o,9n_7}3Y4۹n~q@sWm)d2Z[qFF,QZٛo@`nhjNz>w7rWpKWwOm^rԧca FIڍddNL]/؀a *I>$.z͚I!ǁ-wDFuqpR8gVI=ZW0V ' hnr^_RU$oZ]k4ZC$S;B[?SEWNQN?5-ikxD <7j{]ٷO+{4[)zQ^HϹ| {Y4FoVz6Jz$g{ʮ"GXz1 @qW+Y.R㝋(SƜ~wʵXD Q w>TR,ZGhT@n!fe=:W3 [9 ~&9U>"0_C!ۈkTkxٞLjEKfG TUvɅ|\%0#MN E@v{ Tu%-BYs:9l.w Tz@OpNl7耬L,ٞ<{E+8kn[jaO-|UOq)_8$17RoEs0Qs%L$8Qzjg~QM{;`Uw <^jIJʟ1&;np&;#n^JIta'*.eui{_t<"hVYOU(7/uhӂ^jIhQ Wc(I 2=@Bpvce5,]IT<3=YTSgf0xXwat 2ݚMV:h7^8,@\_M8^ Ll&ݬ"tASU"B^y !.ؖ_@N4%g6335i٢OJ~-MK&7ذbޖ=O.l$yFNףaJqtলcN#ճ7RAٛ48ѽMg*qW,-h̤NGǎ3%#s$Ę,{Nt^^֨(9,Uލ]iNga1ɇx(DH01^*y+2?i5XP|^pe,%33^h?qưm}vy}Mj7 )#_c% eYkW`' R-O-`gv[V,?'O@^ R8pA&4*T,T|29c:2=~6]g}b6G[\f/=nz5ϦF2 KE 4XK{B[#~%nbdL r\KE.>-   (!J*=fϮGßР$(im18<s4S$TsMGs_YeQANCD< Ċ4ף{' iU*?jIR򦑝^ƾ@:h^iCÑ(w]8λm5L#Q}C/I/Ox+bhN l9p) a QZɗ'7bAxJa`^@TYfz('cwI#C|#)'~A Ifa7.Wg2pJCğkM4q['`>I.ݩ>P#mfXinWZ(.A1B͠J4WIs7Cs\St˵u3E~30OMp&|ӛ{wk>IitigKu+~@xoU'L__X2q7̤\.ݟ1Φ枩#8z/ fV%b h $hbgwc~_'pl%U0E[٠"=Ձ*tIKe%?V=&scہ6sn`߲L/6 QG'}?g &mL mOM_Q̱PpX-`̗a&{W?T:=Qpy)=At:U:\PUeY|5T|Ml[/h 8?v.DM1@6C&͇x87J>u8@޹4"z߬ 3 gh"qV /VuإW5J]̂NhY OEܛ}ܦgḦaľ̢'B\$#ފ]^Mh UXMEH,:HK AF%h0P˳ ޾>iD;96kP%O,6U5<~˂7]k_j\VפU.z\GC׮D =k[ZK6, |*q*s)`}Fe`x7I dOUz7lzb1f6QUH4"%dp Td჊A{5WPV&cQo fPwAB o@3ʚ{Z&T1hm[YfqR?^)9[Jٓ j_qnE= 9r<xsb Osپ9T^iq/F+˷ڈ%9>тP-EE̤=|u.&6?Vu ,3c"DgU~5;Hd̑ؾI0} C?Sy|W]QVft7@jgsʻjBo5~xD-p'#EJtOb`Bsa%./VW]@6> 0ϚwУaP$EK] }qt LA:L۠ ^׭Ye үűn> Jfpt3l)` ߇w5Pyj65dui"; \7G>X6Ǧ0,'R*GmQ72$HJl}(Y\ cu<=)9eD{ Ξ/G󳓮S@83a \6Ȋ6F>,@_gNY܁ &ETr^2s6!ꫣWv#pk,]J*YkPq\M%\H~'O'$ۧo:Z,JTd6s#Cs 7{+U}17kۅc${=Q+333<%E1CKd%MGC]?DHR-ތ"J▍ PQKtL^Yֹq'^l@H"UbܚS/lV )a7q,>Κؑ˰k"dxiYP^- ShK7& i9<{ M:8:AiLuEGWN8Gj}欣)kG'Kp2ȭMFB` e98^Pt>^9y(&86QIԜc@6F귢WK .>˩%Vyo—rg|Ga|s !ߐgEcdF#jEUהoVTQ]l;pC̲bȞCa)7gmDGIs}}5%PA~XFBkƃT-%lv; &G!wIa>&j3gqN9ö62u-Q\?ݓĊߨ@ʎi yU'nB@mvb=RpjvSSRe_yhIVEW[0k޺aS>WNy5bF11תp8{6>?G԰Zus`_=\8xL&6P $B{. 1Pb?r+PH`i}5^@~;|3@Gf93Qc+eH G4>Ү;?ױ bzV&[s02GzvK*)I*;1 ;(jeM Ad?P>AHU28(06w gHt5C I 3R3=qZ$dGG%U^ܸ44aɉ3L8ut[#u\Sw>0U]ɱƏ>y~jP-d>Մ&IKnpfF/e;d\> x->f'2cuWi6 >%Bv§W넃2o~N~`iِz;/'h+xs3%8X'Qڥ G&p&6ŗ/ cz Iz;QFKlO.Cu[q8utcGMXtmk2Nʅ91v 5ʟ+^&R{N%? T&qDY*1$Ϻ{mtnu QnoKnyoG fI6 Є\nTʤ1 %zX_[zr>>?QL=%̮+渢0 GYNYDtʀVX8kfsom|\(Zӥ~jʉѡcC?]}9Tw~Rg+hΘk( [HvϐtM;WyEDvFCpBNFD*5o;56y۫sü߄M>1pwKMآTOjTF.QJ1)M2wQn;R6 B kCo)xqROUxQy±hYU(˖-?Ns"e/ZFb0q8o ,Y B_|V]Pn1 3v5R<VK= A,j }?76N}RYb|X OSW38Cq ,㕮> ; Fx\JhS8ɝv %D4#sv|ݭpA/&!UQGكw*SQ8g,QRcl`NL3r6'}wx$Dݴ9TP(¯{_媅]mbNheS&$f=~sguݫyΝ!wI)TUI /Ju3< uP3t O4 RKf¾7DN61]=%ލL2n6axFޮ(}Ӆ9"/.⑓(QV'M}d 1tw4N!kՉ)Tf}*u w+`(CBqQV[e0B. /Eφ'amAQpQ175'bqi(C*-Zm"W\آS*DZ8L80e7QRF2Q׌Vl 'zx,P oLHa5ޑTaׇs,G  黮. 50z0N"qp -Pu mY^6&'fOQ;HMiJq#*Da+55O_'Je4-Ez.Cyhu{ߓ.tɥy-b go EIP Dr2 ZeptMk5pE?Kreƈ ͥk?j)N]ktxqrD(߆Mvi2XMESɏ Mjg,پؒɾ[ȳHmx(2x Vq{KXOev xz19/D?`1$u3X{C!ӐY!lrOwMlD=%VJzT0s,l]WD4E"M.zPa\fl{2ҺEFMvrlzeY[p[;#`nym7~"7F3%m*s}wkވ53X43˼N=H|zRa>LS_fd۝B[i07:>9|=,F-8UEMcH, jQ-4>t Gڡ3C{ Ƒ#ߝ0eВ(8W~64,Y"^[*"٘rT|IŖ486L >rĸL:W5̀# o`#k^ 'cxvr(c,d۔{!W{=MSWAU =mq28[;-QE7fi9 YJrJW2W kSo,_NHocT0>{G,]$961l9 Lz9C!1U#GȜkCc=>Z.El /鱾C(?vk}cf^N+ [:h.Ž7lk=I*C2",p['sݒ\83Ж7G铠{I՘>[ pzs'/I'1J^S[m;AFY"tvfП9b);=4<'S뺓:T├!x/ߕWB5ΐoC, ?VW?kBf(9h<7x՞Įm4eVYatI[c~ؔlqʝmMM $A}Rt(67a߹-4{%ţt|twr }GMd*˖YĂң`bj|V bfGXTr$O!<` N#%?&N㥃]< <*!ޜkgjI]wnsqk¤G+Z\W7x'{|WP5Fz>8]~:rJ4c3ۥ qw/Y-c*Sj}( +tq`LUWuׯ}Qc H=#<~R~ijXɉ0V?[඿ФuqߩKe2!Cܯ:*jKN  :진 ZruÓLб% >3MA2>VCZDz/!g,=7e*/뮀}C.ˢn-Bm<ԋkW47>Z5 'J%ƋS VD!SX6TylJߡbL1 bc,h ߥhޠhis~pO`kR>WcVw}.{K*m`H@nċypHԠl:P9A<ݹ|b{Oɮ\gvt}%1Kk1zh 'Zwox&XH^50Z',P@x%%VG` ? 6ynˬ@c+i%L+A txfuKOH 57CCJ]ʬͨ@*yJ 8Czk΋⒘lRI$i$(c.dP t̛h ( ʄ[N(Iy&2&sM%, Jf)h{(+Jp2ɀ'I׺ȎZ},DPR=\r:ldಚ)Ԃ} KC[jB^ONJu‘P(KL/7 jbVԈXa(D_8V$ ᨆ`8qhXKWJV*ı*H {gb #*鐞 ;gCt.:D]: tj@7JGmX;޳}_y6t~J X]| #lA Gi6ډA /.yF{צ^ FSHko1A2;b p=ğ~*%w]]@Ⱦ+a4Tfv/lȦ$SSߤYqئ\6; `؞Q&< $6eP*(pQW&$j\D0S%0B?2ͥhh7iV־kcdx@r^ü]MF_RpaVO"ǁ 4r`%kf!0GA(lŠ|vxd7+#iE]f@J`~1~TXVKdDzV k"d;BFEZ#<:ǑZ8]4Dv._\{ʛC.=Sy6yBv"5zHa-*t*gaV*i6"(^7@*8FG!{m,c{+\1WQZv%zjF@ص8Ya`!V5EA''P,?)]/XOj +xX@X~BC |.uJ0W gP|͢jt#)3\mEf0Pɶ"Ov;X>yO)6:'Y'rA}<׹$+suPQ5=RY5xү;sJ J[ h ?]T架EԣiM?V%\f|]5fo<"8*ik~s[ϗXKp謶ɧ㪣J]_c9EKwLVԨw_lЄ}KT6=β!6P¼\o_^ɻɣ6},d䷓ ;.`C]CE(E1v]QK2 {F~D2q|CI Y,z'y澬šQ2}V>t1sEަgJ^{CኦMpԿpퟺiR@U+#` +I|#K5:V4wɾo&_>$O:S]d\ P+T=cO򖡸;m#&5MU83"n.].d~HY QYp1wIQ@ϫLJLLcݴ)sEN쀟#mf͓^< 횹 \ W:ߴi]iEy9<en^,"3"liqrǒ}^DeF7;m۪ۄkf*5J3t9}q" 9,? fNXTdJ"hATP:j5G=Ђ/ lNZ{^J,ޚGn4San@oƻ QLuD6d$2KσFjA5LZ"~Q[yo&@^}M%wV=- b2AVՓd[_0o6mHA6]~n}zMum B’ڷɯ}j;|ܜtBnֺCeV!Vը-QƩ aI]PlX\KK$lqX6w>"!dqgvżB~ˡe6!җ KKK:bvmYCKe*J\µ0C2ea"c)V}EӷCjSPC‵K@_uAKVC(A4dNs9'UT)ŠX+>zT_)xuВ{/Ac܏$.0EɅl(bs:7[hy?;X'=odETA }r[Vvᔷ5TNכ8;a<^YPSQt];"LYCi̤aVQ{b FH%*feZ鯴cuX-9ڏ)Rm[I= :Ynl꺶g_k ^FA02 @A/s~/FjQ$嘍jHw_bE f˙[ZּDSpP~{%C mAjۤ~0Hu. a-~@}c2ZۍfnF71'P4ߦsM驾꩎e G*~`]kg6&;6RO , 1>P;vpUY\GLX't1+w`dx pwؼ[QDBRlUytx5Lj+1VpwjR{|9g(L9,:%J ho1/xEcV cykY)/v0\ghiuI `bz!&Ђ,^ ㄀"?L.Шr`c!W5u'E6cWBmBH(gZ8MOdP[+rCկ(l i6`آΚ0z "DQǮI򌥮 "MfLyg4q3l+bR.ç +9+ѧN@<7y' 15&+YFJ?X)dIrbDzqL¯݇eY b jkDi7%ޘmj[%VR!n<~<=̿^1᷈Ua ծę|PA1jhy:%RFIWMĽBU>./5KlV"7leJ=ܗ+aE)Bcʰ901AfcmF\'!%3Ǿ;$s7@}"*KKH"IPO^hAg^<`jP=X@Oe>..ŽlѶ }x\飊6lo#NPVҬ/!"7fNŌŚeu>l i:۝fW tMb ]G%? GsMg!)YsG3w[{G:{wg 1H=eΚQ^Q=#Z4-{Wv[]r-D-oE&8b^չM/4R/xAm"]Yj,QY|r0T~z@r$z@ 2gh~m1{$ቑpѹQ>nt0 15T\QV2iAr"жc cFOSw*%LsYrnR{\6W񦧘_]oV:mkAׄ'S^yARI=@i__IX{sϤ-| r)᷁d#4TšS:HʥIF`o(]GU{?9r 2k2GhJ; L߄"rAaWl|"K KOv :iX8j9c{G![#ǧ#FS|o{ø *hQ?evst\܈`NGuTogjAGgbWɺ tMVOzUIײBL{jlc5n̫ʱDNz@VT=)F䩢¸BL=NVƢ52-̃YϸN '4糤#F;./4ˌkL2'hD|kX5=FiF=^0es&UK!-|FRZ'p]n:{}| c 1SOJ_t)c\-p^BFQ֕673 "5Rc2-pU&3Tg} |;wM~e%9v ·VB+n]<$Ox 7>ɵ:Ǜ^={ud+[fZ~-NtJ=ò_ڝo=DV34tdt*hM&=T؁ ]_-:LV)˥D#FZk%^̇%P,048x>CyJa6\9Ruќ+AVim9:?^E`yqNPNcD$sdD֫MFN%tcSDwpjCԭo}"75.?a>VҔ"_m_Vԗ?IF>h U{0;l\E?a%7}(%cd)2s]4(19mlsRfU]LDTEqhrT:ҹֶr /j5%ow C O.c)8PަEb%V_8 y-t:]Q ,ԂW<Ws׊|)ȌveUhJHǓ ;y38}Ai{ ]Vdp{ <1n}]Ae)㶢H5i sZ[ Qk.at;1amB z/QU#ګt.BȦE"ײy"`l cwE٣j"V[6,bޏ ͋^W ջ"|ldz_'Y}bI~gm˂kWzS'HD8IȄ,Àr&bHEmiֆ2k;Q#,S"-o88ƄAX[ھh.ِIiSĝGx(z?Mۮ&&h>Jh*f\+wQ`*j5y3+alG{-MhJvNr P+C~,)ʗPS_3A=$sXܞ*BWVaCD&0Mfo+[mK(hb9a.xGF5J)iGݥqXq+!A6Tm/I9zO%%\V%Cgu\OJ͚|YSFP (kQU {7WJ7:ɖS-SO>ծXoA]OvRjƼ戟 ItcOi&QӾܼ-zA²Wx$ Mj,e˯s Н_BP8}g[<ȏ9v_8 l|'ھCn@yk 3sLl si[ylc—-bcbAE3=h䉑{Y-JKb%W7hJt>D`k5]]Yg͛/<(04Ѫo~k`-*_qiL;\;[:#=^T8 ~XL6NhOҜҒ"*hn"dIr s H~s ;(RF袥[V( S= W ~NzSޏ<,a c.sG|#PiHt:R M`ݳ!]<\< \ -?sV-ްo*U^ӹX~ђг}և8ͦ:#Fh4Ag1a@2쮞>vCb0adsmOTI&1 =>_= ._T26+Q o(F6fx[Dz󋧢ʈ7u,YAYAW ^Kg2 ;2Dh/ s鸚?'G*:J;uic>5%soKD^I* Dn\H M礿e?mqy]-El2}nQ(k+DueN'6K _x.'>c`*ECdkq\4~4@츚s䧿ܼ/ :߻1_1<ʜiV`m4&7<ɕ]`pVf]ܧ{`t>SY3 i'*aQɀgTsT[`xzò!q6!gJ>`( a"ӀK8H?cHO׏2uL2|f >UU"(Ŷ  Kp PJlY#ݒrj>5piNJWZbgXZfeURT+'>-ct~pb"@A m}t#l*k21 8m-V4{o<4%TsƃEEiXKI PZm?nט߄jk 4F`t dwP:WGgX8j3#$XOR ZY6~@M ުu65r{Tb6:+貹.2CDh7߇ ng(|JTGnoA["fƚte7cͤfv'Pw\1f ]$[ko* Z(np5Vv !^诩u)UD41\h@7gy t"p3m#$'-I~0C\i yFjW;97paX%U*-#?+dt:Z(`#Wn~5mc|X]5KJ ,$9"BǶXȳw42XqbJBe5O6z# r=Ol)PiG&͆Qd32\/W,' #lQtO3"zv|+<6@K1S&L& Er!tqL]I+og ~/j}p93zI;VC1`u6?0^|׺dPF,+ \9tDVA<\pkl!z scJP{n {՘IL;[U=ޕ/Q_ɫ(ӀwTH(/`WJ@Gjbz%pf̖"ozM4LbaШl SŋLSfwk*&H>Է Z|ow{o ϝMG}k<_(Q->c Z&Sij(䝫Oa=3,xm{`t,!=!1ؘBlr &b.@K_hm*NƜ!qh/3 *D滝`OtdJG#l:yH2k(ɨ /  @bt)uXwR/i\@s-f=஑L)qJ~TaLpKV^J2 XjDfI]v Um;erhϋ,Fh^ҲqiUh@!FMAmBg&46KùFIL}BEg~oOpwu #U97._ouՕR16rUsq:{hJ>k=Lp{R=tRw {]6kݔ?Xkn̙_7[xzp\j!®C0b.Z ^q6вgQ&|ύro0.$OMh0f'uT<+cHc!Ju%Kk9ڡfkY!PG6#M\r_aM'<}&G1Zl Gc:Ok$3WD j6fJe䋿W =[ =l-KM)›\.޳m;1&? K1I"CE}!"Ӈ[e8FCmfYpYX\PMO]/":F2{ݶsuY,Z|]O_7߀ӯ.IIsbWn؎/F @T`M%E|ט8@7Xf* ", B`8FG7 smC!Yw7hiғt{2X4%jV9C|BwW-g5Գ5Q$z$K} 5DV뱋 :^8 7[hcoq}A0NK\jTjyr:7wbJhgl3 ԍ$ Vާ^ara)ki:*C^J 1ʋ xOHg]|(d_cWAXgsE{R{4ٰ2z+A&fsȁG_â/kGj.^ט/TAQn_i6cr+1zh~r7-WGFDN> (f۩DoYד9ɜ4xj9W;jl*Ѐk ၜezL{Wf]eIux$~=w[ 4%25 ~ȹv%r鐰ܪ_ن>SUҴG;8jcSg'D"uoB boX罏+K,Fd0RoOt T/89+=̐Zo5k^_d܇f"xkU`/Wl؉IzkSAL.X 엮_SٰELMWo^1"&bxZCp^7{<㙄`u?k|{[ozZh74Uw' &ۍaHQM VSR $CLÀŴFNB~ӛA~O ع׉ɓbiWle /u,Ƶ&It)a{qsݒ9vl ;R TyYy5դT+殑e uX|ZJV*֨>5t96.c.DqY |}ztdF>4eݰmXsW./vȕ}7V\iye14面gFej)DYSŜvjxN$4 23E< F‰H((ԬwU\>M_=UY~# G68Ci7"]zQkBI%ᕞOX5֯@xce 7VM6gl;KDI\01#N(`1 ]J*}) ̡DW97^f^u"4Sԅ4RB',=M2xpsfqQRYi-p _m+ AڴF4L^yAN֗@V|NeOֿ7S;GO!f\Tw0p-~SΰY`改/MEUЕ f$ɡĹQUV&a*O/u.;/UFucWx5VFOgΞEcoscbd#5g^J2&ϕ+쒀{,1=\ ; z2QojO [@ib Hl\6Kz3"LkQ(z<.:O6~h c )ZKCk2՝+8E}4GZ*^H贾IUkc坩J{/Gmd7% ,=,ѹ"Nv  g$sgnH kf `CV]lٳ@gw1MքwH1a1+ӤE Ub*H , >q.t XUSs:Z:{Z>҂9;!WN4:6NE2&ߔ\?V.e+m\0O%xZ`!MQbϸֶ[!+GnM$*AX~p:Qw{28?F>|vY,T"YK*zR&MpyYTbbh@qSF+':dۘ#@!D-$gYs .| N?PМðG]}:<&V/ dWIBsOk[Ot9"/'[E{v#u:6` gAٲ\J̓qT >7V~j)=a,Pj(Ҏgbn"k+lc{ֳP:W#JmL <[a=l7c:,AXAk炅8C@B`-͡x`(鷧.6:>7x zy1?t*1Tpƍgp۾0ɬh8VK߸>l t!qUwQ4HS3W}%$}𶀂@cx1^fGЌF; X*]#9*Ka}j>C"Yt@=e/h tUTں3Y|яZhFD;BRAImyw%ʝc8S.÷C_Q~JUf%ٮ6 T56\~k9iŬ0#0ĥ23s(5"7. 8Lv,J{MqEr> mx!7d f`%1]DfZ|jQ+OvNj8Y#rA?AטRi~G p!xew4sqF'Դrwg,јIHU^,qfŹnA8z1G\Dar5S֤3Ӊ4x SLI[G>FP-"ַ۠ˑQŲNwrfb-nâJRayٌ:L?8?bE&b/T#LZ$4@To轛D+rMyQLj2f`' &i{ͲuqO6/.\^l*YlQ^VbJ_ЉruCjJ_(݉GHMV ŢSdCg}O>Dgp<ȩ[5|Q'|iRfVgJ gGZIO!kk@W+&B]60dzpu84>hGx&@L0?\Ѯ^\Ӌ?]#%[s;kRܒh~ۮRSi CZ:qNJRCFont!m'hs,vvd݄;,BSثYĂc5ca w^y,Y2tOy`Mv/?Nvƫ;x e?C\4*E]&?.p?!+B#&hQ'|⥗q %6=M6?#Sכ̈́X #jdF 9+@StH)| g}1Q#irSIJN+OY7Q!|m]T$AZUr?#[M3Ht!=\o_.l\Rw 88Wq 0Fu\%J:2 jPqi< ҇EFȈ}O@Gjw<࠿x߈W慓#(e7#*fm>z|8kJB/15V>F=>ve?gmGa( ,Y'ؽ :[=qm)N:xlj`eFe|i)?f{e:`ɷ~w1M/rR L,hv{ӳnlnh=aP0$̏g:=c$;ѓ^~sz}cIL=gߣ$վibi1Fޭu~_ P5VppEyku<Ճ MMK@tozd \,$_XHS%*'%eዓ&g} 8<wc318UT*rq?|]x=Rho԰+[]2ڵ&i.(Cx!Z'11OY϶Ki 5ݱiM !vbro1Ȁ4JT𱂧nSߔx/.O†ֻxlyoq 5}MDc ~]o0WjfK0.]Wk(oހZ zK(5|S~~5̀YCi?Ĕ`j";:Me):ka7b \S&;@__%ݢTAG%kyz2 &[l 1oPjY`C]!/d)݉GZ %XT 'Ȗgtݞ)5 u$c; k!aJ 3sa~޺hs? 磩9su'v) ` #p3}dSnSMfi¸5<=#S}ܮ}1:S{CiD Z'Y+=lCh{R7; DgЫ\}OZ2G)@>ZQ_CzF'+5 }P%3CSʺէ  IGR:0w_YFX\4uo:ʋTMP;Cv_+I3˄ (ptQ^ ڇgUP؞l5+MF aq7kͯZs l& '&Oh5DZH_%<ǹ\-4 B]v)KRjw;~F9%J+RaizΈ>Aum3S6ir% y͢n>T"yٲ}mO"} C`Xӊ')ɺ 7sFr(Fg2۩ݖX!`PZi\(J5ON/4&"sN-AR2첗Glfeb.":Ĺ-?ш.*Ct̚H2(@HQl[.fH~CEȨIY* ɩ$`$`泷5ВH5m36/ R.{ɽ(HFxC[xJչo.e_Z@,(X{ߣZ)+ ]UQ+uԽ&0;h! \. [VEېJcˎSCtzhH^OĬ12JS !nb8}F5|oo<cN>>Q}"Jxö,jߒHۯM&` xzmK$xzİ̛w@ҴBjc ?Aٟ <&nN=0rzw&9F̀\ CuBL]9l$[Ͷ.=Qg6@81CgZ[|ڋ#95m6aEn3k7~گ]2=aO<E/Mi>f']r\KyH`jB_PVF$U/ l6^D Dk1{ɞ: 4oNsŽ 5tYo&׿ ,wVpa X$g_==攔HQKX:  E"֍39l >6S =(f=\$P+xud{Sewn!3_#Y8;n6$Qk S̙|'nߎכpq%;apE{t|͊qqd*w%9^3;iHq!SLMwCϤxvV[ZcdeDN[%2@79YvsܞN~Ud5FGנy%C.Q+ڪ77SXXV)o$H%s#ŀst8Vbx di&SU^ꡇPM燞QP[qqLgRJ#?cY _& #=MxOTmk% o7Z[꒹TFȫ̐?NI-,05Wm=*GRl+2Qo {(̎v :BLʳGMe>H$jCl~@wTȚwԭ-%oGOOyؼW6C^*c&?Wl;ÁT/FH ȩVThGl!UIB}Y64gL!M\tr_YFAӻ;Kpe-=wFjw `"Wt2v(a#LWq;@m+8_~.{ݧwP=%e*0Pw3s& ;~L{Y"d]~*Fnn֓:&SQvmGx2=k~.cTL m@ c9S3)Ap5(i%is:HV(˯ >5$G\p2LBYbxYR$(,y/P jb[҂֯ad'!7f Ұn7ح|>>N'HX?6#]G1^5qjRvڡbOp%|Ȯv3#8xٴk U%g(BX'_,=g %6'N;cZi( `~XO2EM*x5E;ߏ,pFKʩїVB2!*D+@:_bPɶ5Ddyp_ 'dM$2繻9ybA% vlHw^83x5y-u0 h@REph9Ib|v;RK[ȋ=ΠecIouuLZH%.ݾ.Y,7e#5hμ>@yv,L3p]8H%١S; *{W0:rPbڙ8=!_MMu \+iN;bx~!mkj~cWEcem Aw  ȳ).Л`l\$T CAG\l*LFnLA6~C@}H+|ez)-W bYm2K}]~JR;|TD*/) <حHFwݡJ|S"eZ`OX!Tz'$d(U"%y/lBzUVx6 ثn KFso^Q)J*$ \s#2XMՏBh:v)Nu rCf=?6(bS `~[zf鈧M?)'ArDػ0<}puSM3W&9X"R0{SV00ݍ^-T-7D[zqiҔR,q-Y&g a>AWSTsV^*kI"P=>L7fy+(\# >_~@$[B,x#u}{&]9آ Q\]e\7R@tN+!*tF^J7G Y$ThɌsj+|RfY}ůDZW8Q5@k/ hSel$ h(.hF=٭X/"3l?OCU8AI(p\SeScvu?H9SdV=噒. 3n[dWq^y%W.90lgarfXfe+փmO-a DG:ޤʍDuJY/96'ج]VkL2?" k\=(pI?/TA8\`{ TX̒7YaUk#REbNި1}+_ \7ё %.\so}gXs 6DxDzxȕIN 4,5?M۵$bTl@R, KI+J5l d JaL8+yE @xeca}2׳0-C}c<2m$%蔵a+Q h6R3)VʏInNvNȎ?QݶP%BNو!n:jԖw$΁e #[<nYÉStN k9ԉ~ B* }jF^q w]b|i=" 7R^`|dpA@`)SĽ;L=h5n!uSv'=ekf l!?3\e}A ? 3!17 qfNCZA\tR24a-.Aжe8cϷCɼ>nNSRg3m ܹN ,e0/ `]O+\-6-Aʎkr|W$ElqSg"ZxE Rqe14 Ifr_|8?EhnC]HTxetnY6͵ onw?ds>hSIݿּ i : k'27rE^\r "(_À x0e;}@g l!=1& K^HOs|B#fm-1n۱ժH<ȵI֒443w՟jqln)[u<WG3ο,mVamyڂ /ƟؔqL`8Ya`s*MQAd\4ziq'r~߸=~$|CT|lSj:)b=DŽ.5LMDMۘmdMzC;%ž"#g 컌}R:iX*4|Huh:Z8fӜbor< \9 (yJlIt0.61csu|Ï `^EoK*VW2Wh7791xt(WpacWw͒u^|[ݱڍB k@NLTtoENSgt˟4Ϣτ6k NpJ]Pll ьә<-_%?!,ovgu cXZQqR>Bw!,r\ol܂ B*Sf4~W=@XR.<\2=OYWEYV4+Мvm1+w`EnP C&(Հ_\Eֻ3f乜bdLmR@60Dp|&*AW9J>\Н! ǡ (¿Я.6.뫌0(e)ͤf-If/Z+1>09ڋqm3쇉Ϥ7)?pRo >-MP$ĉl3D$#7-D?Bd  CT<:t F(#3> 8_vFl|$i{ɳi[5||0zqqrC],qjF*55U,qe1DʠGbWW;Y wrX9#Kɛyht4q14Q:,&imV!t_ ZKU[8h~FIAA*耰-ח7JR>+c|)Aƭ?"R:_d> s^#AݤkJ}X-vCWԜÂዏpZe'8ojd&+5ϺyYƳ>ӌʦV{B^9ow+L'1&-ɚsqL=:7* / ; p"[Vhu#)`L扞Go9U'*8 װo5I랜uz_.Ͼ7lykwMtQe@RyT.`!Lgf VN{*$|P'tkXsnz@QvJ62Vx*[ɖ % e AQSc>_Qj|/gx-exxIC Ke&%/ZQlےe%D_|fKkuC 2m祃fS+guRDYhE[ n @z4gTRWy, MQS׾JuUwbD?MG'X}z $Ip+M"Y;ӷRa|*Dg XQBU= ~>b$gK9 `Jp?Uq<Թ='ܐOj{L2U0(+u5T!ʑ0cp.U%淰C`Wf9OY4Um?K"֏h[1E$!SLE<:Ki'C,#R EA\n}ݫ{gI*; 8| ٫QH[zOۙ3]!O3489M1e7?U-Vop,,횆K>Q{s\]YJϚ%OL %+MOJO*.m# k1 sɘ7LZ,>ӘpER 0e]ЍAhF7<|?(|zh m9|u b2?gӉoUd#i~b5УxoRjk^s=3W]kw*WTEdh<UV&`h7^)@jEB, o S'6`^Ct~AoV;/S!KM!Puɪ#x!|S=32=MwնrMyC9UrzHpTJ,V]{[>"ߵ^/;<X= mLF]z-5bxyC3 Z7"uw<|!臁f1 K5oȒQmJ\90IweeL|_F܈BǣH9Fu! tIyVRgo@.4F>ޠ8-cx\芸ROc!L2hcv⯷;:&)+n6^Gi|[b5^,Qn3] q\*G׷ͼgIZLPoF_#{r=d^чU/Lg4kﰨ uIdCy*pYm%l#J@&n=<HYKK{pG|ZW6Z%rCfŖ[#m;`F?d,QS-=b=O͗F4 f-wa^:[Dc.Xk{a*ZOB-=`5U8oU {G$3C J}+|r]+iZq'ϵmNA)RS2=.W%fR "@mh}񂸛Fqa?t@(L>5YLT*nͪ'ݙ54>N$@e]t`Drct寞ZFy /V𵝚FJIE,$.Lf/+ EPOK Cvr2lu]lP3+G$;uA zb$xt<nj35!ZY$ d:x(#M XhIߤ*/+tX0E㸧!a % )GOcaUCEJSZFJ,GSz{>Daפ1-X C#iv*?ne!Ĵbgk!Rt 7K]_nyZ ǹz0 ڝ9ćղSБ#,aALгF1l勜|m7߱'"Kw/D=x,6} =>ɂϮfI[lrv)J~Hk~ ǥߦZsfaXXm܍;@Prw?TAj`fU [巆j. Q☪A=uvtu}vtgxPDةtjR٨ێ׊̾-+88nr ϱɧ"1bNt%ܥDd1vWOswEL5VkE*I~x-e;^ $w\=[O:+~J%o3[L BĘ':KoTŁ4DX֘R Zމ`]<pVI` =>kB\ltMW].0l $5alff EiDJjH+SALVhRgj/-:\eԭH(t*T@\Oۧb5i OAZ>,o2Ŧ ]Qh _7qHbGc)8D(> (i1-Є ] s1? c`Bn!G:y~ǸsluMdF%tS !Ei]BXsԈ H(Dm]tΟ'i<3k)"kb.186ƿ o9@P;WN_ZFJIA .o71$y#ߟjM1/L ,x[ɝHC5Q3`0>QGڽzgOE3d꼷铰KK"% mMC{GFY+TxRje%<Ə2VS[XDLn1 a/R0E?[I=\+ &gR.fw`m6v#vvSw'1*5p v`SA1mYuo׸F[%jd GҍoU sֆ> ŪL7݇HTtnwNt#WHjYUWVgX2 {y!I7\ "_v9tT.'_Od#Di#5q4Љ,p- oڡfZC'ٳ_a%m_0xI&FoTHX{m)~ۆ6j bqڑѾ.wGJ,!Y~c9w;ML0 (%E#GtsK*1alzt/es_ 9Ί=vRGوiЮ9j Rk2ul~E=+8Ӧ[& u0yT`/ip55|u1 ~1 e-bi9n548Qm&$pRg1/ qD`l19'ՄFËrwɝ%T˞uV_t,Ϳ1Wo7t@d %&C0X3j\}Ȍ ,ě$~yVi=_"u\, %g6R - GkV_5̈a-%F}l,k Onw[EE2^xQwO%VUU巣ADJ梜^`G*ҹM= >guRYrC;+'Jg{r 6Јk:pjZG, k!%\&% ZR,O}v?~ovHtGh Ƨw-BZqK<ʃb w)_ƪPTKPG u_NScpu}9KĀ> oyPlУb@ϦtX"B&~{bQ-)ꏖ;]grb8$,Tc{-S݊kn;1BϬ<S̞Ţ8n ǑP9h DZglmҬgHkI Y3GfTWL2OUx^U! p d(Y8hKmܚMSv%c]M2F`zhq_mLT)_W+an?}PA;}@lUIez.;S'08ziz2 욨 YS-ڗ6 DLY*ń)^| 6} e ˤW~RW12BWLŵ8ŐAu@.W0fz]h6dkXh/]?h$P3cDhum1n%a˰G^q65V{b?tn=-yak]=ΈlYB 東 !Qf{H "H w E*7r"еzYCBs?,)קEU{^ẖ7'/|ѹ고%h%*zuG{{Ӻe؄dvqyZըQCdN~DZdhϴSGٳpwW^cq_CV֐$© y5݆ \;#G{8qz?X}'Ģw٫M?Cݗҝ Xӄ%dK,#D>YN熪~%̳V[ǒl$ w,.,=p6,4>Pۤ>"+b-Iה)ͣao܃=~uJVk+m xd'&=dY:F{^$0́AxmI~-:-pVJAUA˧K#m@吶~` u*a;YI4E9߼rEo)B&#TjJY/\Y5"c)aǒd6 ҩ8Y=2mtG)3E9K .}JfXvf֝/_Ǚ ) JoRAInD,YAN<7u"I7e'BÃ5?_lX&UgGv;XFMN5 TU}aڂ"L#HXISJN⠄ߪ>h,ު,"\`!"i ^]*T5h6ѻ(y `pIc/:OʱLv,z^2Z `2QT7GD`19k 8hFv=MvZeJ 22;EC7|,⅑%nb3 #jM)jaR!쑌α pTՎ%Őkf"<$gp?+eYM6cY5it(Q &,ܦLfEDrqd[g^Aq<$D.w]TT[}]J~ ,>[xkFGel%Ϲv|BU/+@uf|71UȉTs9*giPBzR0m wULX ^ܢaU[\-O=8695W85ex` ^x o xE@{>PpWBy!J[~y FJנTQ->$iҗ^?/3V+3q/,W[=0ɮzSq /M|'[1y{?Q}v#JJLkHgX# 4Z67lм%X$&S.\V;)czH?.7ply wnWZ]ƖxK 5cT@RYk5!`[|N8)=.ZbzDD x5xsABluOz5WdnϏ0DeD~ U["M?ΎQlS({ҹbSwzbj7kb ZQhA~Pʝ3P{'2Yudr rl'IEso}o @4"6\ B\Wj9nd ЋvV|MWҦ46] qN8?QR* 6 V{C9zゴ[\""F;;jAsŽv|yOH ӑv@T Q Ϟ6"[hi@La yk-بrfv]0Ԍݩυ`ݓӂD?kZMWf٭3-2I"%A  WQ7߷:!Jolr qW{ ݎECἡ`@$$1wPFb:~C& "!\ZiJ+zrc ?hvjM[Qt>ߤ96#T=@o=%nA?7|xFr-=`:Fs~ZL3r#NB&L:xVDhd=R$22E3zo-:O(2Je&UA_֥֡m#J|U6r+XtRhHN[ë!O#>i2|kQ @vp03wZp $o%. 9M59M~~%Rkʅw?φ%CaUx`٣HnЃ@Hm;ޤ8)?ϵ.tH(\OV*lM&{\~"z> \gV}^,&Zs-'r8bɘΥ\ #*D/`/<^؆CSA55~$n7‹Xx.4P`1ٴ=jD5G͡ ~:[/ȩlG~C Ҁt ȇTݞ ujU?!zi<ڥ\T]ډ^r¿vEUS~x/HwSUCY:Vq~ѤBCeG#FM0Bd0²Btjqq|tg,"Gh*ZKIB ?nלƩK誫Pmr=ITx+`LG܎!3ɝAlv#.>ԁyփs]UFuW)Clbj{60bij0Nq^DvܘQų*9j=&yp!M綯ឰKL ZA'ZˣHzם*)O/-6u hLo $HSaʓ-{tގ O=qֈEberGCl8+A: ϲ>*(V_TŔv 2"9k|H fib' <8X޳'|'QTc`F <c]y{P(I[.k_d݄n|AKՎҖ,;T#r;).G\Cc^ڰ5.Ņ%KLɟ8CWzi+EN6ʛDdrL24PZ0%D;mT8jii79 {6);$w3T/!HͫJÇs: v8h%5qu>V#=7LZiA#sT]n|aYX#7ee, gCm5C7 h0 ~FڕRfi0d&E4I˙uߘEhA鈘DyO!f2ZMx[s ᮶KuNuUf KyyE,ߘ=a7؅ M8 }a!(+²Qv[l! e|yZ[1z,c.'9)/ gfڟ]{oDC@cX?HbꡛO d,</,z3s)Pp훓_= x${: Jἐ!LgwK* ' mmK V134=8-r "tM'3pp\( $&OyiC (O 3 s7 wqB>Lvڡ4yi9Ceb'H|(inXqMٖެ]ǡ༔@H}x=w_9TB@ׁ]JrU@[51ߊof@,wi5nNRtIK:MMS[0C_C|bG$&CZFoϖMj킏Jg/ٯ?x_<#;p ӉwwFT:n٪aK"#q]1Mc ޔժE,{z1 a y8eE,k5E[朑2eOD#:UAIaxsZk4ӜQ;э}9_c?ێ'Vѵuvuux}45bֶL+Vs-O M5ބz4c\qA:>odkǙDM|fU}Y^U)R-]R;k?3.*j>F:=AC{@oطofG%h(2Tk¢ ͗ik*ƜGz˷IOFV U F(T1 ) r"8 4Y _`K-i!ۧ* HJVW<఻,$#] y4ť̥zPFE7~v{HW^L=2R LhMY".j̤oR>|]аOj|-*jtumD!tBf<͹|7RְR 8G{$fv,{|PAs؅k0sENB&D ygm2O Hs `:c#~FAd-dzwq%9=]m^d@6%^WaP\_ 4bz%| )a黺&>V ;+J@oWUc?#mV(ek 5!h%ū0n [F"Q\yCqۧ&7b WLsR7wӬUh0gXn\ߣ'Y!R*UyZ: ]ӏljr^Bu(%W(Nl67E‡ⓞNR\#'EQbb Ǜ <к6h2(7"(*f<8osڜԼ`(|l"30QKŃ^If[_/mg?o8/5FL3PDvڭR,b)"cCG$VG:/dٛ85eO2W0kY0v& [pOE _|),s06]`Qͻ%Gei%5*ڒՄlz pS+{Pt&t  qK awt4MHn#+t65Q:0#صmPn*utF.wd1*s:If=|5N G|D.z't {0pZ^ vz!'!P%Xfaq ?/|-ݑrQ9 ϳkϰ ͋Ty+Y?vcΑDāvת:m%pQP01%:>g9ei%:+/;Zˠ? YqX7gYp߾옪]srt ~~ekD=AJմRtӥڏD8a9~Gr:-aGKfs^ei!Z RڱS*˻]7Fk$ yz ڼM@MF`)ysIZ"G<:v#gm%w ě7גY [K=J1 y(L5%zAb<3;;k@v7&#r D}FƑ-V)~·=Ť* Z {^Ɋr. ZX nAގ %Yƹ+$Z%By䩞,TNBM6qxnjN"!ӉZHaqZGnٹ.-6Uǜ3wJ9V_nӿo{@KNSsrrs G.3 (j1_SRl #A%%A*yt!{" EE3+ %""`J. <WG]J jFɅ6ਦIЎq;HYCo|Uϣp]Gߋ<Ke}WTdpsy-ì"kJU>v:o<^>uAU݈EG~@5`20Ix0o_l H*w.:JjPAD)Y$3`d!6zTz'Z0і-x!nbV2愯V0< t<.<Sp4a+ԾEPg^%Ⱦo5mWGU,TC&^`6m=(<7q_qIS~:"+\Pml' MV/.xo'C%$|lڹgܒi nM\+;?v`Gp?v. %EQs;,њ ֭Dt2+j"}X{ws͍^VTёH1溜n-nUɍ}G#M1&r΋X~FW}XޖOMŸשޯcY㯽 ͷfZ< s&yxPVʼp[Sns›AsġDG1ӨEL'$`*;4=z"3H]wVZ bna qńqeJb?RnS2¨g) ,F{1 B?C:&4@z<W ޺sK, .A*PXB&\}e5w˷}^]1mӎF$6hPUW{ éں3 Z 21>>!-t 'SӿKQB_̙ouU4ԈT=2]\oI!sdH.5Xmq=C1o{CU {=̇I=ԋ6Rarv]2]dF;i]vS"~[ lגxX氼x#oVd}ey!K!Gs |IiDI ؿv$\bP<9AkvH> 6g-,*Q -dh3l@s?Xo V7|nàr 91E Ţ'E}}y&`T!.h5|VWS@[-Օ4ih]u,V ":3(v[kldIv'ۋ@Mt)XjZ8FxP[GyC4X'ٶϸdОQ]Ȉݛ~\~DceYs3̛ҸH%C@8= 8dLMO$2';v㺈4mj@H\~U>?&CMjP\qq% tAC*(bjIp"z^EV q7Zi=Lڈ0̶ѼQH!u4%8YېSμ1t:Ikn279b o~.XaX w%fdR Ozjf'&E>/{$(Z 2ef=M=̓@nB,Hv`nyZMh,C)lȷlHяu/F'ş_#,Ʌ(*=Ry8t0 S`sɅesL㮰 /.r\z&YT7EUj0JaּU_{#C"v‰L~M-^o`&Zɛ۹?ྶEe: e΋ -|uj;I/V'r!0 .NZ촒OHףyz]Rs}⵴rY/OZW{gꙅ#P>.n b)SΎRMU,+1C' u! &N'Fڻ` ,i͖ԃJZrSjj.AG܏l(kV m{6biqn?.G7 X a|HI-ha &o󤅲+Srīd)Cwt)z}XͭI;//NJ]ta*`=>wTBVYUu'pE}㻆<`^Pt,7s5J᭔3dQ#-큺c(ppKU T`0eG~PvaK}rzOӎr;k E^rG4gP F ;N*+f%eڰ #&@!'lx۪m +JqQU܋0~fY18xł'=>nmsB.JNUYP#RC 'c[BdV8yOS/^CR,6RI;|tIZ`+|vBdxn,o+҆ph`Z /ZvސC)8O_zptI Wc]zcV&ٷx\s fR ^ )hZl^zzTC^YBt Wim]jBbGz1H\hf+(!)Ѯ+[yw42m2>^)ګkpˍUK?dL{Wh߈Pam(+4k?ima,Oz!~ MS$eqC$,?P >@uZs?9 +J%:Ux ʝmn(8{hw1?XT'wR {dKv^dc-9Xl>%֭,FF bAzq?+pr?.oEZBxΰI #E?I"|ࢉ>-_JZҍg' [ NN1a[{|ݸ>N:s|.P!Quґ$d8YDݩP3yi#4'0o&<pȃJb㷫E;Km|rY-4@'RUӼ8-d H^WVuebjqdx񡼪pt*bi2@&kx>XIzTNk1- 'zMrRKnJ{5 +7-t׬~mp=EF&fL')>2ViAGDbu\oY5̓T7}Y=SYm $)4 m~9(׭D(wQ6d$ou`%?Pj84oCe^IkPPbTHIϚƝ=W CJd=-Ɩj+/oG첧Mbߢ5`36aa0ȫC԰Ir"tNTvQ΀ia^F_M(CXjzϦ3- 'u]9al%oF^i_W$1{fo=v'lQX\Y 黓(o#p[ެPsX29J((!fЦv|M'߈[<ȣDQG*ҧF&k7^~@)*ax ;vU}^>'2KfxuyX nJ+֩;O9q86p咜tunJ}'عFӭ>x>=#smm;02g Ͽ׋㜙F`tGd'ʿq+wj˦smqJi/g©LזYrrCgٌuNPA7rXEcsf_L u9׈&Ҿ(Gy\_uCTӐ1юӓs7q^F*hC,FKrde;{&W q;wLJD` ^.Y8¼ W%=K3yj4ZzU[j!=>KD2YʒS1$_,izhET<45KwE*p.C ۦ"*OdIVQ{,b'"y$|W|ri;Bz"Zjv^}AwӪ>dJWmd]Y3:x Òkр=ME0e(%ypd4dF٠1kʯz&◛}AN֝5 RYJK5.lT7{BUPEI>|M@G$<7O_n!oD<7"73M^D`&  Om(Ni [|s'iE.*^Rlpifs)DF˽'~/Y{\QGb/` ssE/x$^n4n X5X7$P̢:1la+Ƞbt  &Fq >y,~]ZIdДZth=xWO.BBw ,{%=툄Cª$-gVK=? R7F]Ov16ʌI}Z9,A?63,=nUr5bH r}}pK|i1՞J[_jҎQB1P:a58dJQ/;*aͧcZP3;>6;`F|7[}m[ jUF$MG.w-=y˪sYBޘw4に1ܐI`3چN_PB=z l>!N/pUZ sv6?9$K={A>Ђl^dt=/"[I@dQ@Ƥ1]%rMo Yyc<)c [/} -CƳm6 lMZm^qNIQg 6Y4sKxGI~? !gaKd;!,vHR AC͑PW[7ʤ!a$Fj`HbU Bij- i7ʹ9 xC*J̍3;N.@#S M '!xT 7_Ǟ).Z›pE GmƮL ʏ9* Zt'3eyN#ۑ![hѦ JhnI Nv֊hΎI 茭4^%#z}hw%.wJֵ/ڴn̲)%O:h hgO8cR;>&85[2{'ÖjEW\ñG/Vd@-&­J|9>dDne~R#X0,3e ProۯXnu U!o iM69QԮ s; .:_zNYZ1p( }w"*N*nge&Y&fdHDqR޼hQ"?%#`}O9+wh3RhCvQ0}=lX9LvhIЀdpz4 .Y 3R3_N>^*S y*o2?Wٺhno@{ùgZNJP_.W~B>v:[|X{^][jÀIUlZ&np&>xB`u%x Aum4JȪJ-byYi Ry U${,tjcHm:Y8^er40oy65mt!UFPX1/f" M=(&`޸ qiY5iuaU(i4z?;H-HE6)ϲ4\L̆tx~@kj LPpGҡn)Hi"R&SNsȟXGfQַ>d}g߬k78Vg&#jh mZј,,߯X ;ԯE#04Mٳ=ERx+ ŎH"Up%+՗nҞ#!A.@.d_4J\n}3Hiub1#O$y ZsvA Kв-9.ظuegqЏ56nuoC[bUoƠ oaS^|aAvv_MLiA @CB;m?6 `;?z14h~ճ3fCam7.bƋً|G_,ZV|&kʜؙc1h2X}ι "o_b%&S $  A=A{͡*-; vvU $_ Bt ܨz|d^ZP@Y2t|/)iź5f -Hx;ʭ:raglqZN"cftSi1t:=MӴPnHMו[K_)_*f:"KJ`sNĩSdA"fϰf\3U ٵ;@y}`ms?璵O7ؼpnMs7q.oDBM | $28zU ,\*kfȕ\-qI,Oc j{B.]]aQv=s5{ \So=soGWaED/%j8(q^R]=%4ksf*| 2J{?;bHK e0d)%<4s=8k.]NT"ye v0,ʊ7Cv@d7-ը&}EӤa l@ Z݇n4@2ihGOx KH_QvTkH70I̸Nv[ ]Ihϰ%<[$S }#U9xhk[+8= "¹1^o –J<@8Ǿk'n/fC,UA`y܍bGQ+ԠȆ S?:Us LρX!(ȜE'ڳnǘ*~dUL؈iWEʝ"^w"#C!DHKiipJ)fpe95ƎИh3CPݩ8(&XW]6-]0"jd\wDC̊u"wmjA&F8o6? PuBwj&*E]ӶCMt l>d~էSPN]H<f0oV慒\rgS,B{ R-E ']r}0贫JPW뎈5HʿˠG?֥!e躀ZwkPᾍ5n@j foT-Ng8C! ;}6*QV[0{jW!b>pW;,9pGhfTEcsuK(V#Gaw':V(i6_f[x}P֞7Zzci{.Q=Ry6nŒmk{ZsCӇ?TkoHRB+~rͅG\LxZd!~>r@:MT||/m]( 3sSUim< Dk=4dA+ۢ@W|u8bҨ-\̿4x@Amt|"i=Nvz<]w@hZ am3?®}$)modI_q63"=wB¥?I"*&w'nAlpڬ|.xƺrs M,25ďzC_wwފ]IFJ 5|u_s]>3Ί%U^y#` *V]]OMtM;yXFXAxm@D~ZZ;eśi=k(7$R03H E4TpH`@%HG/&"M#"ӳ.Jh圿4n/`]З?nWmO>}]Bŗbk]Ȝ Կq??WX*\~t4ؔy`؊WT9n#aL HTwX-}q͘M+NJ΂R.P F8NTy /Jv$0"Ֆ WBgQ\`D9{9DPmֳ8_dao6vBw;_-z0)05Jүh Vb`=[r7*5" H(J43#X2fME!!d ;blQmM ɨn6Ƕ)rTCXzʜ4i 1G{whs|MMud3b,E{qAl6(f!J&Y>qc70 [cpuN&ipGЙulĺNߚBdC Ț2Gc\uV Q"ڢHÆ!4YZژ4i!S)NCym||<$d@,&]͍ !Q@foLJVl"ň&Ǧ@D"@SWDGHgOM[2.Rn1DvI}AW2H5Ĩa\m* Ho #A%R>WMӇ{@#Zi69UVtS#p>mQߔycܲ҉Q̈́92Z49zv !" KH!^yz`r=6Vz ISf2=z*eqI3`ÒTH1;:ιixYrr.1a<(d~,bB\I c#wbR: E%L(%"edĚg y5T]S_lnƽH6cήN鏗I@ir1tZ["bns9rw =tL$(քc o@ɘFu6^X,d-׃k08A3EQ~hSהK{TiH8rdfmri!\eeM:sz V%՗Q/.ژLIX#'i:a$GC|"^w N7m7*wsZqb ~#'z'o"ͬ'Q{ĈISIDԏ[x "acU]5X\A -rNs](0dU_2:a \zR7bEVFSHGS5"&k HaB߽xv$pi5y %Ì%С~4Qƨ eslʰ}y1X[2Y@i$exV+2u8D(Ƥ7peeI{ ט:qa!K[HɽT% [+:!l+ zUFbصx̷\R)r8.ۼIE+UaVʊI\Z϶}?5Ɔ|f@r΍5 R]ޱZ+cqG%|= ~ .˝kqvU~JMdUm&y{x{b[ aJ ӝ>K[_l ) &]'ڧȁW^i aHh %J84;eX4ׁ;{=!,e[m0p\?`B-\}ba/asrq_:85w?y-^QrE: u?)x,̙OљWz]PcNᎀ7WVeqcdWHEs%w9oTiszþIlD{ ypE,Y/iM]Xw$RiT<٭@} 9lASQ OadiT9!}]ҪTL슅c? Mަ2k~ USF"s>íbwo7k}oRck9VHG ׷;^/ߺQzr Ҵ6_, XҔKAY|Rm/D k[׳":GEqO;Ztxw0džu>W}' mL1Gy\]+p㢃?w^֝3ٹArj@B:竍3 F 퉮vV!f}j?J̏L^ ##`V2lHeF54/RU@zAk;XD /g"ǎT?WGi;5" >>"|=~dVW"nFX+\4qܤJEE<cqJwk=9Ơd2*8oCvIZԖWi@qr:wG_KmmAI,r# |`Dr*HH旍{(Q1XȫR ǂa-7&%eNe,*Y4pXKn}:|xxWdטߢ+w9]bӐ|:0`]Sy#*u̓2Da47Ip1oXjU.aI2k $65#'NKuTgTtJٺ;&e  FRl 5۰rag/QIKm>0_Kc amenbO;/yfEoYgkO8 IG~SkeSQNaB8Ib&|T]2| H7Aj[AHƼ7gBi.nG<㥞kv\V#VsYH,ӥJG>cz]rP@QL̟=MtRo)ꙩmw!>'_q!q[ϥkpI 4J6( аt؁?:3z h:qGxS?AޝЋ")Լy]+ a|FV'Ci|an9>YC3dm!U)Ƅ8GI21Cd6 ļG ѪYa${1oLD:aǘ d\)z_ Jh6\KfPm1 ݮ3ccNaq4/}REͱ%q'w+iΫR<]JJQMp>ՏgPMеoPaУIB!ß Y]UEY)A 51*@$$*i3Op J"1I{SEY'k([p U}*Oo& 6MWRS0FTӤ5Sȸ9(-q0a: ~HHL60Ux!~}x=5bQ<?w5 p3'ivYgиG>ZS;@O[juDqѢsiCP@c0&~yb[d}|, F&P՜J)|ooBq1'~zlҟ=Zq 2(R83v;8 T$ZPP|ɑ<󔚥(OmRIɊuF!媃*%~^#.EXv"_MP `ݻbk6Ҕ&k:`,c0.c| pRVXwr CcΘNC䠻7 c;3Qnf l,WsA_ZH2[vݬd/~t,ϙ7aJWQ} )< N}()׸4^%-M En_Kr DSqgq% 69j@_4הڬityFbnGӬ(gko!Ju}LQ=kx| ;ᅙ|7Q FR hxY#JGzGΟ>IN瑱@**h_3exnZ褆?yv>^f&jD~I\10ĭp%i@}_'@bG ϑ<)cSEP;<8,:`JWh%Kw_aXڷ\?ģL Y*v-UEƍ`=åƷJ_@"zwZ{ n,10061lYp-Y)!E_F6vB8Dמ1!\\%: 4MMi‰za]t8ّH_LӊOM15f:O[5ni\] 7-3""ܼ"`€erm!ubb3.ʝc u%P"QRbqyxn½KLda{7&ڠ(Qq8l|g /VN0.S)\s1=:#[=&4sF2;Ô&*r++ \T-8d8ea%(?.l1mW shaɢ 4ycz /++-Ut"GsR)ivV3-Qu2 +<ſpc*gҞԊב}J. tG+0xRGb "qoJѫdyvp/PM=ʑkZ)ӇXٳ_qFXVAqbǞ.Q8'Q岎D|ЫR+1)JA}ƪ>NMe& MmdP%/:+|})Q#I'[] 5*/"-f]2U~k A$ r#!$"im ޭ@{dˬEHԶטOUO\:*ST4sk΅M){>YhuE)42=i?V0n4˳Z,6B?nu5 fTnbq ߣe?d v0(aF&xٯu@rK3I9a= 1O#^(IC~Xbf M,{`KV;iGpoDo3p l3VǞ9:o䏫)yS4T1bMÍK)iŽI S?'?'EE를x;I |؎j|ũF /n0)/_O_ny bz!߫绿{g xId=PA6#{$1 ynwA{`!I S)hZ BLsX~mtkM7+2HB.Ytv;}Uf!F~.}4j?0G,z&)(J;{5lnw]da }sd8*d<'a!`:g;sHdPzzH5t#HYo3Ϥ&Ҽuo% I4φ|Y|? /,A+mvaiwawRKaSQ @t2^-H_ׯ|;Yer>ьewG/Ii٪ *ݍ܂ OYg!rpG L 4lD2 -yq0:;L*Dz-]@-^da&z M&;|{1.;ʛ6~/rGorKXOaڠQ8w _ſ0IAʃDCڭbC\$$$GU 5_u $8J1DψG ~;7YJV0ԩIGJO<&6n}{'~V\$ada nC Tädadj"bJ7ٲ ӆ8lhŭ%0db51$Qyʰ#&PJcbR~FE n> G @я5S2!S-|؇/@cGp{6Gw$\6~#|^v}D| x|YZ&>A1Y{_o«Yh3i" /-Q՞&MP S"];%ԋYs&6_MJ<_"3Xд ~(,@Fx#~7q;INfN޴v-YcJ1FxXsTn|7 j BQ{y)Jּ)&]?fRg5 pkCQt:DU|$: S;q3~G |y0yḬ]^͎oyUhof%傴_FK,ƽxo#'eYB1',S;Ǩ(2]kE_ٟF]؅eޤ-)+n8Z1Kl^1OQ{eҨѼ.6IJ2p(1]\'ɖ 9gM=/ &K"vWSUs4}^a\-=n&̤&/o>P@#CgM7NN̚i?wdi qq:b{S%Jf#%.r=AFֺ2.L%eS neGKK"HY$ߎ:w)fV[6x⬤u'G/V44$%Eõ0mz fcvll=YIRnA:μ*at,Wji2$ϣ ܚt?N(Ŕ.c֓% 놩?<uZHG?9ߧOgf*u6B/|.OŴ) 1 3D.;B ^m#d@1T[؏W:055; |[< S#)1/QT3?^ :3ļ-I V+%*,G^[4-DPUx)Ҫ/E<7<͞ |{l@6Uňm.Fj-B]ԙZ$2(QH>Y*{俯׀E4[*ujO8H{MFL,ۏ^p)MDN5%尝*䞗!fI))he6#o94b`T,4tP.Hѳa_Ȧu免w GcÁ, - "[[mRrnuFsV"BhRP[(lKQj:3?C.н@\|wCwMARnㄊ܌!WMH4>`Y-\̜7zߤkZ `G:Aug\ƟMO4AjUGV<ֳÝ)8 ر*B@ҍd!$q dPi;bd -l!\ڸXԑ@$_n64,am\1wOpH):cc:Ђ-}|LA}7z] ZWFtE6/D)%M2<4bw(,6w|&4)0^kύOq3C/X)! 6v&ICr4?/r=@S9x} --# >/t>;UMӜ\Y}'=2f!{UTOPS,( g?;ՙ L%lXp/&12m?mqHw?p(D\d̮KW$.?4\Vo=]}v&*q/0ڽeđVGjVȄ^%mVkk+߸y7m}/ic"5H(SnC'@I'ᷳ_{}kc7R^0IWo$N*tҒm)F۶;P 1=Ӻni$TE2~g/~<8UWX&ew%D.%٩0`7ܶ G{C18&:qc±[NיO2,x O*Nϩ:Vֺ_N>na!eZS&h7ěDA?8w8\ v4䞏kQ xj"|ns3Tϔ߰MXzvX2Z7Yo:Njiί6|2$kN`EN`3wT|Xӕouh<>K%V D-νPZbt"L[Hc}zdx'Kdp2d@CfGb%{S(bGJpbgLO&J<6xTak)_`A©k K͒,/%Υh/B%p.(舐Ďb]@s"_Ә!C{uQaߺ'}3Z_;㷗`2FQc9=UT7YΎ%=B!u!󿲘8%sNQ l\:ң/f,//hY_j1y]5d,Q>-%'$ w+EFq[)LͣG+ 4> 6~svsaκ[:> F P:Abh^onHazjS% 7ׂ::Xp7{gO C؉ Gò Zd6Ho]#|*_KtBO9;&_eϻv)WO ^Y!߲G^ `Cm z{ ^E5G%\&#Կ fk30(s fMدvKpVz# 'Y <5D"mh&1@9[GE&g%pa֏Kw۾%0GY<ɡbʿ?aˈD2~\DUu!kֳWECȂF.)r}ڷn&YKj2 w5Iއ@+KAQ":T9Ҭ(v()Ib}x,z3O;Ak=֪ոRhcIW~f 1j A Kմ\W'U'"?I qes^?ZwwI8`o̭Ayv-A3RǎJU*jhvL b 2o^<مlYA.qB1T/ K߿D<( ҀՁ5_flP>6zCY[fp]=mekXj =J=fvK8Lda]_{2`wk5ii̦>CB FT=^%,5,UJRt`l+oGMU܁>rRV|Sgkl I0zSp x+\5.|;:&;M2 ` ! 1~1nQ!:GyQ`}~ kFJ_?ěXDzy]Ȱ}–_ " =3Ii?{(ܹF"xSS<`j D|%<RD=WxDL.cB8TٕVK8 *8L0!ɕ'FIx];}PpO-V Hn5 daeC<w9"%+'M{$ Q^C 6V90is^z {>YObq]]4/v.ܥp/|gv׆{n$>grW&nC;r1 Fotss:74řs0rЀ\?u` UF]Z*?5EAIh{ TjFh^f3no jȼp5/^.kH G7,u\gX.V7I91ކȣI$UDݛυΟ1/%c!mTH8ˌ sʷ ->4ȶu4 ]p&TTΨ{-BʕS@Nж)⶘?T-픉'm4.= Z怉v14K+z% aSsM}es_|؟ yv=dL3mQKθ%ƯF"*pFA T|A#]7$"m*Sw&;8臟3cǸj8.*u k~"E-3 -wܾRAJoCĘ:1Yv&a^:l\ֵ)V;yHƙDxK<^ǖ|Mߴ +\h-l6dw g쿉 fT$sݤƨës:5Rc[h?Nx ZP5ތlvDnsM:`ׂ|ۑqY(/]n:e9 Ez~@f+Zw-Oeũ ^V,J[OlLe c*:JxMNwG BgQL!Əm|(v7[lBm.DUk+9K}=ZkC*̯܈,_zwZXM~~1;=Q=0uznU4 9q̃J5۰ ´i1}l h`[߈1lʶOF' g.x tPuY6yZVQ РLL]^HDԉꮫKYd-"؁3Ns=6- XH(VJERGHj0 $菷k8|M,E`@wNp=vS/Zzq`u|CN 0A+k]QSjC9Xyz^OWURt]x{tMfttl2G(zv<H:ٓ`9ǔ`qZ]KGmc4.N h-LrrEi'~ov{RLItb>.?$}Fqm[NDO~4f&,K*Ż-.S]3Rk"FL'~Xc;85eW`L*=lz7nWgyڣ $\\cp>fAwV^gK@g!Ii2LM^C!&AkogpTG L]ν?00zZW$܉ё 8R`,u;ϓ,u p 硳3CAlp(~5za&}; 6hfLVF]v9d"ffZȒSL^a'odZftbxK"C/RG pbW6:g_ִ o *kZ:DXe4v/dAKibzmI\^;BKe~8*B!u ׅ8Gb4|4&)_yŚg|Wy]Ԓ8QY(_eÎtDՓӍ߳ PSA? @h(֣OZV@i4S -m@s-?uNXqw۬.UML;1Dc4=l⭜7J~;-v\ǵ{(ӤW js`EXQ,ǂ.'%R/_;~B >MJK1#09QzcIz{V}T~1L.M&,T#,Л.ͷ,E#_[UwPis(2=#3c'^9~o~?#bwR` L694``=$~~^ɞPM5%u@2Z~]#lx(bðQber tIdߩ :|Y oy8fdˎ U( EmQ rd6L2wMWYFr+BRi;lTQX'wp~ NlfkƆ13mRJU^s"!W=\8`Ww}Im}C?zg3n 忾 26 m` ȷqrB` T<{i)~[~l`9ox?2 O)&KisT$]41fif!f;^ p=63;X<[2gʙ1ceg@9'DjK8YnMG|E/8@{zp ,(W,N- tC%{-*K#vVҖ (6?oBpR6G4:Y)yV>ndoX1T7>ePR T؃p)5tڙ`RM_M͡3gW#okzK~' iB4-y9No]WϨbSWX + \fiO *Y< +6GpZCtz+Cz-T.^tKJL%՟uRz[v A9c0Im3[PuYtxIQ%7I:8}qM4q[I8<;[ڨ[}~TN8.yL SUT_xHN"B!ZVpkL2;BwN@v >hj7cBe: @i3>/t_3(%,VrjD_1gwf(]tG)s7=zt-,A0HW¶B=POs11.5: &8hIP`4 syV(9]6P1O:94T-~ej-e^58("Tuـ`Ň J"& WR7lv,xj)tևtCRK|g'@s,߆4ʰT<wmd(KN%32E i__,LQ[CT> {±4MwH:;dhC!j[P` 2J|UsCl|%׬D1+ՂWZ/oAZG1|ixoR:TԚKnTF+t[NZxv)}K,|IsPkksѴ'vM}$Z hoRsb=[62[m L _T.iL=N4|Qo!%N6lR62}"ln Ȉ+pOEc<\%{K-rHONQ41yJ5c89vݴUi`W Pvl۱z\IcS|̷`k2Zr)x@Ԫ3MV&P`1uU\23?2QwU{_;*I-"[.!kLч H7s/9eB˺VD_l7w6BA7}=o|kw͡)z\<^R pZ989nк^!+w8}uYV 8`ť!ȶ2(-{b: *e<ߏ* e-M1zd yJ>f W8U/ Mhc Oyk+%$y~8wpTc4ڶaуS+ kO:o$xMe 6Px{H\ 8s^3 )݂9MsKix^]- Ao> bBxoڍ5;:]̕3PEV#W=4yf/oxI?GHyY4# &} ɨjt _F=H5EITl ̢\:GŨ̀wEʌ>]v9Ona26],hہP@4>Z>g'mڐvҿ)p{bm#jVSŷquxWz^i X?7?M{зA˨0rR߅{apo2z1Go!VVǰp5t^ Ÿa`aɷ \VĢ$^e(rsLkR*,ۙ O1V27Rwg9EPB*>7!cNBXLɧ]Э%-5kLA y $YwDJ@8Y9b!<83V/Uy;I$<. wI{T y82>_QpȟAW < }*a=P,,:YG`ʰN燀(0.wF!풺+30nr7B1!DutmE-t**؂ka7F7$`Fp[< 6(pp7Vif<ُ᚝B=&wF[q^r"̥E32>6 VicbhK?A-S1Dғ |Z6Ҹ. h&{d)!z~#Bm[v[3_ܫ;υҟE8O:{K..C:V"T)sfķhA,0ޯwj\6Wǁ"w8k&!aU/tr#b: lty&Buuާz.&tcԠ\3#KebeCj+5F ({)yeJ{zC h /Ir`JN{Q +~UsdnVH>DEð LÅgkJ<1SO `WdBP;qb!==rz.Q>Ǩl$|< TK5W&+Bk_fWK++ _  Z< R7ŷv'U?qh7:~(ua0M&ud%ڲ/x{Cwm+4l k|߬e`&+I'Z;81vIN<ϰ%ð-}c*HIO?@6kh~ݚ(_4rspWm΀ ݧ<1?L!LVM $Cia`'wD2u8ٞ j؅gr̪'%NIsXhHtF<^ݪxHRQYn@4r2a.`K%WQlmd(]$Ek\S ށisFo* ‚"HY+ [rtcuBwd=PNWcrsh9P1!0<!U?\a[|_JdC;ڼBcF&bЅ̶h$<3|oۺNѡc,9^Ld!;TԱ8A{&V=eEf獴ezZtנBoH-0b~CK]hbnjͰr>ߪ{HSLxF!ezf}d.@UL\Db> IF&Ys8HH۾9ay5Bwm<)fӎoPÍO@ D>>U!kWvL ,hij?&mkIvOC{,"Yu7jx85nH{?v?D|:-+Ո㕹h|.^1bO@< cVFտE1UK\,rfUgnC prB1\E ! $QuΌV0O$/&ujO?9*6gjz$6!c}@b/ Wפ}{+lv `Mq{tk~$ E-*fqV4BewI:vE|>Z9gǒ. ]Uf!3ʂfR4QrL%:Eo{3\q ݼ`FNC6g QVβfW┃:U3c.G6K+x^;v fl7͏ H 4CtØT((6DT"X1@%rPI~ݞm inH84e;g+W8yX7.1@e&^ȆX_k G0Vݟ%A}wE=10PP'fE|©G_;ݫE;I+S&)1RJ|f.?G3E@aÐQDrfŧ?6|aUg\x±+KX9&6<4-gL[J :ۺdcn:_& o6i?ēG? ;-HIqH蠲a8܏`]-tg_|wE{G#gQWQYG /@4"a51Jj,&Δw.+#+}Cy"rW8}9\ORaq39QI6v)*Wj"rkpf^[/¬ EG x/Odlh{F.I!`&ۂp8#ű"={ba.\rQ-]kQ=XJ4ɻeBqiW@e俍=E^T\E%ӆD- FNUE^. wyϻ%hjD/ *4YS4FLEH׀ e|-` BwbQKYv6"/[P _IlE7u1n c;J]4Z![>/VL{BiXHs2ݰD+Y@v?25(#婝LE pmil̟LDa5T m<|;{W+2!2#h9vmb30q?<^X. |-DХ.ϑ1E6j}煦&5iS<<7` qil`s9>g~R]ޑ2me̤RN3ByF}8d:C/)&y߂%Exy}V4O1$}IfǼ(MS .tS:v%3(eI\!H/3کZ&Y:5cozI:W'~PoBƢK=L,<eDAs[h,~YuB,nMUUr ,Mj>)v+U cЩXČ ͫ# x>ǝae23>E)[᥌xHEQʮ2aC Jf+]S\Ԋ"?W/0):"ƲZ3k(&fy7fdŇǏUjͫItVA]-Y~z0;͂WVlĢ7qOhyx v(m{A@7utȈ 1xTcw|qⶪ_V6eV>١nH}{-~18Ȍ]4xd.DÕlCxjo_O 2vk~1LzE=[2O\IO>i=yO1l7d' PҐҫR?Pό ~(}$8"47(He h3ri28 I(: Ms&aM#F+٩'`*q:CQF&xGb6SQ69q*ޚ$:0^]B퇫B߃$ޜD  0WFAet/Ck`BD- bࠬC^8tR:./ L#C>CpCd6xl_|= !ƗQw&ĕL{jF` +"ci{v4a˕{>[dMǙh($F_bTEkHό(x息J[%]R|~uoDN7tnYMBaP05ޙK[GΌ<86)35hmq cSwI Ppm->FٻGyo(a[jTWb=D0tO>AnA)s ̶CI {֑u:+ʮPM$rD<^1@KrL|%?Z~{"+;=o? Mۃ;^˫RbxZq#Jtsq{fb4\T5 E3/=%ǴܑODhjHxAڏ$ze >V(-Ejw]B7Rv4# L&q9aX\T.2Ϫ r\#T%w kuI`vf^yjg#=uH1JnE׆FʾR ÝKFInj̆Cwxv B]e%x1vIm#=>na0q&(RT {J5.F/=Ȓ3삑߆VUV3.LRD e+V c V:`Y8DLozJSӷ=G2R^+<@[ }@r64||Qˡ1"!xQz%!pn.۹;i$6;ko%jcvʾ0 %' =Q),P$|it3ꥨL*̗EId94'BtXЎv : K,k(G~>wf0)forN;p>MRX@#ʻsDBO:"Vֻ(v&BQ.\ ,\Z{uS|ejY!X fd%+]dIwt+O@T8y?-gfdnaC%x7,y +BtXje7]Xdj]|\brpYq0i??kU؁.V6I!?Xa y+} ND:F"nEk`<-x%kGK7:>f6)Gcp0Ǜv3򂈟XnW$H@ lm61<γ೿})NQ&pJ.6rtؽ@s`\!as*5XpבͿL;h52|ܛr/K5jWAKGsI"5_u9lX3uO[r3a}-cѦ9^b^'8WBy%fysN5g ׍HBU?%|T]6oylT]xQݎK'7J0̚E눳Lr em7Up]@tćeüP3H[p X U~'%GϏpgꓗ0K=۵>m'/vvKɜ`գ_ꘔ!!V>:WH>%C6yJKijVь%ag1ތi ^TnᝌDNwhe7|@~nO7D>~gd'?Y^j#әwp~l)$ض%IkZн)꒶8 HfWLP8XR 65 hAV>U>n3XpLV=7iyP.IZpWks B @umZ`I~  4,^[·_gR[APa;PvNZNc)'75E#`EJ] PR@>~Au0<̓Vl9߃? {:<5FʈQ֒2ς4#]X##BVI9jYdže >d!+:+JPPgXg BDs6Uk{މ%Q8ܭ^A FإER ݛ)TF \~Bnio5!L.8?[ sIizM։-uE٣"['w=ҹ녟6g:rۜ-ȵKq(#9$C䭄r_쪧Gü2mlw+D4hI0eR Z,wL/~&lÇ*I4Q攑GdNdU[k$ ݫej<0TBŕ/L"<sL<Ȉ'?hpx_ݞq/t8tviMh#¶7Ob JTݱKqv]Z)m$7&i#}WWϚ> fOwc-J@C9$I31ʈR5f8(5+:?g*{+JT?q%Х>tz,JŬ3@]uc!gF}!0(!IC4qK:绢r3q XoK9,=ImgX+`HKN8׳h:o̹%E&윐 @Fve|ݬUya+5p U]!j0"Yis+e\{9ER8H,ieP`jH͈15^ڈ4d燓S*`~_n%El*7v\9ȽJE G'?6GpaŷڗG+Oh978WQ)H@vϱo +~#2F,j=OSX`KS /m͡ȳ)*a{pwz {4 @;0 Tbwy'ge:頻FsVQSF{[ Ś\:HO,-1N'Mè~osk}RC6?X!/&d%[SRMUS&:p![\3MJ)&c8JX B'Td!FmFʈv fWw^Czi 6kD'f)Fh Vӄ ?tY36$'gyu@"E9 (նsZDK3ʤb _9otF<ߟ%m>pםϞ`8ºq``SA C%Cty\d"9BJNo3b݌++n@rz*a -~w7Q!ա. ;4w-d7-`}ӊ/軎ݾtrcŴ:^U<]撙y o6EIcx-@dƁ?>J JG[x;/uEAٚ[$PS 3݁ Ь=.Ee<~zu(푁y NsWMa$xjRU+ ʮV\w*?,B0'Y893EŬ)) ! xljWn3teGpR#Hu8!cRk]d:f8 O-6 6Tza¦X' Dx4-GPy(ӈΧyl@Ȩ=/ܳٓ3)X&؀#Lxc|]KC{pQ"liap?- M[•sE6:s55mbejʫLB3XۂxBeI;x;trJMU>MTSNS jʨ^7B|9/Υz[U;6FGw<x}l)~_eunYۧg|?M`ͪ)j._#?TDC1λ̣Aub<脫o roj%\#}t+E Юvi@1XyQFVgWaĄH9W5 ۣa"sFqj.g[8%cڗoנ):ݬP< !}fmQ5dsza^6VIpnr\E|cSTD1RKM:^̉,h3J5n 4|O®*or4{Jhv l^WR1㤛%eY{%YM$jϳ+ciPjXJ BZ_,RRm= H/@١ٯԦ =.?GM:_(wmK_JlZi61y %}-qNz?oF-&U'hoKk vP1õVb5RpHB|Iok@ADM`}#$S| Q1 *D+sϟN 8 a$ɱ/FE[=8mW[AIQj0_K}UhTϋ;0Q߸g{Hd+sp=8+dQZ:DUx8;<|smA곓C[vE#ZR|'آ4'&"P(̤8-(kG ϯ+FFmBB&{R5upd3*^__ozKW,4gH ]6{.YOE?S3(-R&Z>3"BN1Mk"MW%J Z@qrOcUbdX[, ƀ5cfZ^ 'p]ɿi5E7n[-OT$k(A 3k/J:76Vi2tq'̪9IUxL$%OKm TəUv 惚 y2Zy3g4ܢH17(͍#q $&{ŘŞ?I+)lLFMN0r*tg5|Bt&UA e'酳\e2@2]h FhQZ|_%--srѬ`R]z2mpUȳkWk#Ggr [ <4sM3gbM+BMv;M2bb 6Sls|Q@W66׫ l?8 +b%L"杝nt w(iV{s/KC$_T~wzK:> Pٍ &kDB|+]tXg({l;Ѿ i`ϯ`UlNbm]fa=T xg]cu{hUeFM@ Y/$y O}E5Y#$VQ<M[52gZݛ6<8< m,`D<,cY71 諷;ptQ%l+IddZatr#Zƽ N*b sxѧ1Qḻ?ch65893m ul1Δo݁{aՑߗYok)dԵ=BO.@7^x5ҰO.vd0hDQhng`q /!#Lx:@y_6( [>VkUqL:obE]Ö`KIU]z5g" [S0=enP'vb KWUPs&nk)K-8neЉł൏ݧ!C#VC'iRE?|ڪ+} E:}&_v2 ~(%*)̳FyKE8ifI{)\:NQA>Ѥp;7ʉDn :9ap x"Pؓv038`F75 VnGڪ6.B`Pn6}3-'I ^h-,]E |{uER '(äFwGPp0EOu}Br\ޣI1 s̞h3խ`][Tfg[/*0ԟA b#Z(GvA)㈸,vVdb#!963)ذ̝$:<"P'$AHn&KL by_TUKS䡭u5Hq jKywШMgز7r-)/ .ج EoMsvM6~Onw'z;ZT($ŷ t T97An5!(@]p'S0Dpf)EkK/]&0osѠ K2q7+ ],5*M^ch^QS^@/:/ 2MtnJC5M>.e'rHI|mT1A@}K?\8ן~*VsO«cxtb.3t0|frmTK9C9?M,iʨg$Bz8>`66>t ')B /D=̆o %a˸~3Uh2 "9TQ+̫ тT90vJG%.Qa=PgP@OevʄORyQכ2u'IGjolhV!UvO8ŗ'vZVDx$[wj%|(wmƻyj xW@\6ZoC3:aԜBD ;rpE&ίU 9$XM"$D7 nVꩋGw7@ \y#lĹ>nGV](SmMRB gJB%n'5E' {E<F|N<ĈFAFK+.3/OF(ӄy\lC-܌!t\'?l-ԛ atw<88hՋJ@F|(Yo |-iRj2ʳ &`Y/0.^#Jq_IHWD]Ji2a6fJ/VovcH LEhƧwFHΑ<IJ1h,|=k5/Oۥprr;VOQ׷z .v놄(6s)焘mzWrt`MfPhk듘i"^v_UN<{|d|Ȱ4v957Os˦/+[>nd+ "ٶ"Ih `)-axggyιc¯ a+&6|׫0e!435Pvdd0A06ᖐ&@1YwHQo~gK,TٞȚϭl"f  ;aiS}tV=/b@8ى3 myiDP cȯs3N Ҙ:VM]iܜmz 9'ƩVgv$ LUN?ɧ;2^9!e;[2.MŒ kݫ=U:tظ$%#uy=m:1[?Ytjpz]9;վm3{MWNzڲ<}B<4 gw^SrI}atQ"''OMs m@[A벻` mz<9|,hn=w?7{B͍0m U}yw#,]>E (j =+RqޮB*Fe >z7@yQ[n9 XO7(JIuٯ<=Ī"-邺x Aa7ݥu)K^T^6e]؊Ǻ9 k+8yT.G¼W{=kS|btƀ`*2IP aҒ: +@W_1?H9 Ρ*EUݫ+J[8Xږ^^pi+sH:BNT:'Ap y-7+Bw_{= %fA:U'V&H Ir\hm9,~*Wv$5Vm Buڶ)qґB!6!fA:d"u*QJk=˼ܠ㢀Ӏ_g'HKYM '(o-,i G,+6HdZY>Ȣ ,8OXabS#1"I]؇6,~Qmfa$ѽl/v^ o)^ը&QMZM+HnyTRs4L}-* ą<m)y))R紊6ܹxi8fsFl/ س_gz(N텽)YǶ{uju譂[bvKtܢ88fgApvSeW/@%`<+Ӓ\4| %b޲@$֥R=vWGrT-W8;T}0zAY.e LWK'64fnⶉЫVLnV/WKPo@0>DϞ#yGʔ=B+_inȘ&EuU?TtaAnLҮZ$ >| %1h2ueOvl6 ⺛XPR2{9> xc(q\Zsy~PWzHK~5L0Bt `Dx AL% ?hvQ`Ea\&+.V\KU7/k%z ~߮nh 51c+.QȋK}u`@j`"9" 9q~8)>! +;ueY?_dYQD.q7n(lfWpLG~@ +kx=YIa6y1"5uXk\ AJ^lk^]4.5k/Oy1tY ל3}4^aTѼđB\Q*~+8泩2Xlz0㩿MæwS)M=( WbJQ/0xqGmL ?M?wrEoGQЌ(m!̅g\;"C]"ؾcN.j?vlԕxuH£Gl]M]=;Yi:FK{QƁ6W#$5k14i4ѹl!QKϰ\XQ"09IrKgR+dID_ѐɣ9<ݑf 12[uAqe-Em oԨ^οl ϴ")7OYP_?؈~2|ʐ]RQJC{{X |nИ1ǚSN#PW{Mh\s JM#bhNJ\טּD3~PsC 㶭{I9n,|*Pb#U*EHLg-t,i_x~Gc@2ٚ0ԢۥjI]ڞ4:ϠJ .ZOfOlDZT`dD =7졀c:j>\*jM 4m= T^;]u 5FP24ƩH*Y_c5RSO~V5^+:E@oͼ.9YKtPh'p8@}Ձ\0a~+ My^OsDLn~Z9Mp\{"B?}~d8K1-}(Ot΀Yu _?Mv-=:Uq:/]9B$ LC=X `sw2LYJA["Y'& TγZ[.8$0nd9Qx'i:Eh {78J:*l&&Gd6QH (n [YeS:?Y\x}5?d]<1 RSə`~V>I)uJ0̰sJ?Lb&TY#ŵl a@'쎂\|R MK,|J)Yj|w`0OU@4꼌TX *6yJ1., vqy7* Sh F`BOOz#u tfhQٟ8Iٟja$sF'(A[X^K XΖ7ba8ɟqe0ط&fU ~bE;ηnr1L8<$\ZNjjYc_ nHu =P͟q@f,'p̔ pk;\b*?N"qv+zxϴs<ljMop/-Fס`=@ MAɞ%~AGGm|z6QO`EAG'qqI̧ԧv7)7!ؠ{F {N;W\fR+JGdZG{Ne=bl;-bdia"9%|k 'e0 Yt+5L}Y[ u(wF`!g.9Hئ9sYl[$m! j)wԛ#ZDOiFg`Z7JZC9{kT,vY%vg%6 &3ƦO2_b(C»3`wrۡʅ:x- .*[^8pߡsEc?HRIw9؁l{FήhCBPJmwIbnexHbF EߥlX$ȭۺ(r0sذO8=~-A/U&"޹et_YkޓI\CNշBEvO^s1aĜaρ'^Wg EiMD RJ"TElz V"U`(hzӂCsB,w h3+I(nA*Y"9 L@a%~5@Vrlbu_KFJt*1< bOY7 IE %i(gv,,AIOD5>Hx1$uvߵ3hA~T6# QuaUNҗuBm G* "NUTy$xb/"/Ӌ5}puǏmw%$ :ُ%d]IpV;`_ufBw_fÛs^{2gKym5LbQ:K!3gGŲlOt۴JɯfpUZ2Kr{w |ɾ,.E56hMI ,GIǮ%AG Ë3|>e^k6v[T'ofV}tX#(ūOQ[Pѐc,͟^:QdMyZ8?&׻iR *dd(SՓ gZBv]vrO{&LhCz(31kC R7gPA@B&w{իyh=d'I;vnrȄj\"ݩA+*a]P]7% P}A* ]h`Za#9 cRQ U}iG*4Sp#PEz.l{oUȯӧ)O$ WCKKu7V͘)s*)QzMDO+^JQ%\a"ivh1^޽(:;VWqha˳ǩ|[x):gƻF$dy|N5.GI(l 亣YQT6BsӺ" wO1:\=Zrɲ9P_#U p%3&b -Gh5.搋g/'?-N֚B~k: !𺿇K4`cşap!u Q*6|7J 5 -kEcRՌ3$N1^X kaO*0jv! |g9򒦝s ylNx1M2}7Hi; Mi4odfgp_fM/5i;{`#$ӽe Cd]Mvo".q#q8ȲrظKRɓ4)(`3h1npC%۱[7 4jŦ-l`Φ>&so[!dqpQ-%I Hlֵ* NeҙCI!Em ^탒Hi&x)46P7K2\gso)6C_ӨnE:ֻjzdЩFCsDqn-]QX[PN~}K ˕t,Ϥ犹1u<Zg|fQS~.k%1@I[QkFpߦnVDE{G;V3^{ )D2uN`; K( {d\N!@:UAMثd7~:7*pBXD@47IySs+?(q/% @Ŷcvuu ։Q%twbZKSVoQSkr%;'%_gLHGu@ C" f`&P02@?wK(w9,j9#{\M~>oa* =[_ygqi "tVLУӱ)_K6-,3rFzf9/c7 jt!~X ,ޖ ^ H6J[s*d p2l­B6o/'{,Ԗ]e+A3&^))zmy!r۬h,W`0NSݙjW_awoNS)`cVޚ&BXȫ"= Jl-IfO1_lvӖp]Q}l/ e g#25V&9GfuЀU.TY0`.loX |.b c}.im ^TTyF!80w SnDS)pdt9o X!;R,v|`",;u4没u̸cGüdCH9(`PGudvSp$EAJQ= ЊQ4~lbf<@Jd3n\qJZ\_w܇xy MdICXo;[=$>v3-`w"Oe˔ /eJ&4yK,0,~R稷۸ۧ]y$ |E@ ƟRiQuD³!hD&vh=>>CNtO e-vRę\7.qĢk!~UW#8rBfmOWG]OS )5^2*~/.% p4}Y}V0 1CA *X*rgqģmOJ =N{wu/`H7a2 | fMIّ@22*  O3AXYXfC~L>Ʌ)P}3Xc"D/"4+d#*v3awuQ@Dc  ;*54!YJIJB%jE!uu8*UWodCAs Fcu8XH'hGtk&y c`rz~z~-%&֐|ݤ}Ngp8ӥ >zۅPI3 ^8̐J5{-6߰\<9"fR.5 F[3(ZʙMsZV'%pP/ V*6"Bozԫ{~dA4  gi)r+xG~ؔJdz끐F9r'Sv [)"ɋ}LG`c.;~ZVt#K`X{LZ@56|{}Y d(,c[SSb]BA}(f]%ٰ`̰S:ckրJ5-ȡhr;qi'dr B H5|}k|y{ KNUY@1ݽ.*Q kYFENzgqOC5[z.@*@Nr/&=Gt&OreVNeBɲ@D)P,1yKi{!Wl mԮD!$orѓ1*։M2FTč7q*)/aV>);T>xu&G}V">o?~蚰6k L$3Rr0UK οo'Y#i0Z/dj"$/ =.3 ;S8 y%|ٺMTDdIqTiQы^@;c* ;M kFZXRđmcCFV- Zf(L"wQudb1yxjVƨ3PES9!(~T$a:)QU䭁BYJu{Wajvhp0^nX*>Ě/[C{0ϡE/yߋ +7( Rۊsf*ɘPj[Cx:M Rjl~>Vra\&ҴB7ΕRR%"2cD?5 ;FW];:7gS&zD6Cpp.4,uYr,f8<]_n[}e%zIT)i6B+D4pM9/0cEzRcNQQ Wr2h ͶM"#kDvܘiܥ|VjOZ*ƾ ֤/|tx0mZcO6C<*7DOR牫 #Ķk2u7(-}|e1'.-uH|5K35^$?t0`f=Rl2_:9cTS"?כéfTl-bG=4 JYj\FMiv7Yg(#(=-yU3qld)RR?%vΔ0);nfFy7. D~L/pGP%>}!B:@2n_%6"YNBgjU^ڄ^9ϻWK 9 >&HHƉU;SEEJLbcK;p.pI䫾7TZsZQY["r[IX'FY-J:o0{ΏD*6Z(U>Ḿ="2Ώ0{@zyafngD%A9-:(zRj45t;n _@FKxu*9tlޜ`޵^ GgZ?M>EVVLMG< ]6LDÜJg챶vkm)>^`a˕ pØ6C7e"unY#1bsq𱬁XS6kšG('4v_)s\9Gp C˓{:_谦"k{Bs՞g5˜Z_CF.2L%mU"yLǭq^JN#:ztRܥmd\il<+)CJ˓L;LJ4 [~ELWA/Dhb#/)uF]r2K}̮j?[Z5u`_kR|4o=E7 8}RтAV$[!ڜ!a{a>,M4hZK¡ ēՊ-m3R6)<| XӨ*h^>Ƥ\eAX z^8;@,CXυHCA`6*U^[O\N0Y_d ۲6vTӱ4eӲ @"#YG6ulE_iAbLZSm*r/Bf} LUoW1Jz%Jp(>AYG$vX!%7zr3]ԗ?q 3Ia^ń$oE@|rHC%AA##L4cfB"DRš͐nŶ7\Rf1ީ0}ƨ"c'l-b̑kuJ"NtJ%jfA# .>44ҟv vdVt|C3$i.KA g|\*yj8 0|&tiE~Lr :(T4G5V yD\UBaYU{.رTvFǺ`:J*Jg25SWRyBcUg\i*e&9+hkj^iz¦Yڿ9teߪ ƜF>#n CW2ȿC,Ġ4齐(cKnu!ܘXHc. HI9a=>EZ+F@I0H/*6:&RDmHM"HTehƷ.'2s1J͈ȁ}]t[`;)& nQޗ&9êt=?T[;t%R4684C$j3ZΝLF$ _'Û&mAǛ;G?.ַ&Y XX H(I]cx^y%]?% mOp(mhC~0>B_.?j "u$Wca8tϊEFuN*j0 }'; %g,5ה rs$L8Ycmn;qV sX_2mεe6gjr 7oSSVmtOQGl::ʜFNU$}kjԧ_okiҶzґڥF̳}"@zrL,9r]r(?@Wׁ)*g6)(mV>a`IK2}˦;`W*kQ.](Nb6mu!+$&Zi٦<43FOI,nB5 DUr$E蛾d"@M6nh`YޝrTrqtB|}D.a$p+`My_=pFXŐ᧼k$)gjŞÁ[y@v.0ʴJ'2j1!3 μ[YF}Df ,]_O璻$^;+oP(#d:nQJaPwѺ >GA)rˀ)s|氛g9E&d4A$uѻy*:µج?KTYpQ=J]c*܆?)904>u! k"bhWHsz_˾Oz $F߭ ӓlޔM[КZ,{a_>(4oG/ݎV%הAe3w 1 JSb.̶:-N,pՁkêbf{  Op<򭛹 Is'h4oQGsߏY7lxlofd߇ O+.T9doT)bV'#-7gvE&PF z<#mH!):0C+ٴĞ_ ANGض :Io l>ӭЪbjm| Dxi>y|$H L! Zn`>%K~RfP]Ay 2=bGYu&[XWYr~PIQf{܋؟u6Z D֔*{S7vq(mw7%?V>1g6PjJˌtzb az ,;+^~Mru"U_s>PJSx:80@Jq|T!ƀɏۮ@)4&ory~blқx2 ak>u2I}ddza\4pr<xacq_Yx-k{qWi(},6g:\엨23Kwm^O_8@t+sg5}F',s MQJzd2DDpA=UA>>ܭtMEɻ|Tzѿ~6L@`‡wi Ytu{ǎ-9fOK`rCQjcχZ͓6ꯈkl9ʶU2&zV "\O>=HA*]WBGNY#S {4OH& f#,@V?OU#%EZ+K(y܇}C$gWD5BPA'-$Qv tTf;AM韼/m;˞]DKdʠ0Л2 t07Vh-hY-(Z%EdKAy'}*_PkŰ; /w~%xt(W8~tC?<"/yM]s9y6OHߺ?zLnzSsbO7;"9ܜ͹%SGtp'zU׶c5S)mal*ySPGao;u=w9}C<$dQb,`I!Cӄ]/86GXQwgBntmE@ R|D^pEG5=pL%7ȠB EN0mЋxӍ5=*U$3Jo-E^b]"j?Y氪2ًw@J߲gT];9¹$ ȝl&w:ڄ,er!h1ӏs#Z;e'ZfL+8̙)gQ$j(R37,l  ~~'ʯaL@9E 3G 3GyvkbΏϠJ5̮?҂txSi!E͟j.py'E+ϖN!AmGzC*rD'RtK[oz${&KZB2 {\VF5F2X()Q^D9ZO@a= Yd$i뭹0WoKA*eWM꦳b<3UvUf$L ]j`UIO, i Cyv՞0IP6;R&aʒ7%}0yղGT.岐9 ތ13R)x z|H&5:͈P (=Lw{yy(^Î`4H@3Dϼ 2r؟f^Pia( OecAKr}CTU\TKs PA[J-YMM|^.ne0= PX݅BmBGX%&i\fLyd; oC߈, ]e ^"_[E}FOPæ%X&&AXsɤkުV?2228@%r(oudOYH"GKc"`T?ˡnFk`wkSQǤ*,M;fFhj i>N,OJfL*CqG(`\{%ۂ`Jf^PkM>C7PX׏f@| QcY8Rm^ײj T-dX8RsiV<7HeA*L^\ɠVc?D%?:~gX>Zd7tZ ĕPY`oQ荏F#ܧTY!$  "h\,WdG]X|Q@DM@OOqɀFrꈠps]+aw;7R a|Y@]23M:ڻ3#k죝@.9tL?'}[; tLq78HNʊ;ͬ$J6۟jna+,m$;I<mU1[]Am-%7r'u$ 8$PBڱ[? ,Y&ҭc͞'%*9 >rfsh÷I /U@귒R +'I 4ih?N)leqoWLtUK<7+ٖy&U̽_+phGպ2[U976jkͅy! *,c Scˬv\AԥÝ9rO1SaKg u1.l߳<>.C0-cx΄S>-L*ց17'poDvU 1W9a $Qn* ECL$t˕ iN̩֛w-* "#O|>~x%CL'dM\HW})DTE֑ ^0!N_VWX:Aj/oM*$ToO߸b:/XYM?HC^*+m,#x_^hC5Ŀգ]jo^ \]^MEN5F6 TNgn|cs76Mً׏mh7ˁ4؅`7f{ҫ )Ap#ܳK-i@^.YGyINP$JSaUZ5CS8s0#8%si1HoyyaڹfiOoըrfM:qpM4XjJw.͜AuJxDSKV*3VƥK]YnEe(dj-)_><,ц`!\?"+1ȟ(Qe P(Se_Fͣ= fsqx!Hd1j8"GRƾ@:k=8(<^)()( nv%iu  ⰼ)=Xõ!dG_< Y$b_Aw=uBXy Ř e"!.ConaRWʱO#T2^!.e%1dbMDBJJ qv*lDL> K!Tas,WDMSsvCAJч#7n8{"}V~j[Y0` 0ۛe|Jڵߟ=ھG|KQٽ7{mzGa1#SYχDd=ބ?XG9,i|sr&PZ Ȁ -0 ;7<̚;21\5I6(@d:VSkqxk/+Tf$k[O!2þuP{^/ +CE:,Gr\.,6;FBB WR@I[8\ǛH"|L&wT4㈱[JD z?# ҭuF ܓIqi/=u38oʫP7g& wޢ;co Nv=[bЯ $ϢRJw>IH :eK1q; o<E'7㑙(ȲDn)pD~Hڇ+I6ҸMext^ȯŨ Q6>E(3%CN)0u:G1v95PpE$ܓBWbƋ $ =j@T Ծ3]O u ک733BW~I7oTk 6 lD͍N)-DgiF İbP0([jVh;s`p鹏G.MQ3A?40BFď µ6 "imJߩCUaN}Aɏs"T7z?3]AǯVl ,T+eU&ou$NQC4' n JwvP$C(hM_9SKvŬ@D~$!-ԫ+/biB4Zt\'!uyR&Zzi}L >rvV򉎒<}J!>~Z~SԎGgy~$.=lCª Ec6vg]Q li0y&(^)n*@f?mv:&Cgrھxɮy^Qnҿ#̷ G{_ENq9?㐊D_OUF%k{=D7)d/N.7^oƲ"ֈofR3{dxw";?2 '> A0A&^xJFN0hc6@MAcSMe.8hOxQ1xOR]N :#p?n#҇Wۿ`3:boL]U6NLH<<~*ؽ"~r6@5=(6rȶKJA>a ng]abNZpZ\4+uZ1?YE>h-Ce);r|zi:wGbA܊F ;cv4JʼsWcd6P!a&D,lep+`R@ԈmWlFSw [^-kEn١Mc-j5%`*F~T­QzwQ>KaYvnX;rl՜OX-&$.E #?íMV5,Ͷ~^9t\VGĝtʒD"\ͫ\`qK]QW\4?d gïh.\l9!ż˞K-ƻfŷUv"G\۱Mg.uճ2͢BtpYkUhY tĹkjT2c>,>bB$y}$]cM ߲⩔\G>tH g~2 Ok>I e*~Hj68]$XP<tۣ 'Rg t>9yAuoEzuvnE٩L*^;֤x}4a{VwmY{VdweyR],zC9> :!M%PN]C'M\ KȯhuAF&hiT\}IeDR%ac\ܿ_|`+r+Q85@i$+#C/$yr,ømH坶GsFNvBᔦHT>xO>+k_;[zD, Rj1y퐱=df GK8#j;Hk:悏5FUO1E3=!+fzF}t8^0獹kȟQ͠j}ͶTW|t )EC4#wHrwĕiu gp}p˾uaotD'onjbV%))㠹zhf\ʹmּ1֛pR%kZo|{qS@!.A.t[@r/)7rv MJr_1fK0{G!u;}]0bJ״:4!g,WWCM!uR=z_KQC ǼMCV|;ƃQ7 4G8h.h6c5 (zF+q#V5v/}f:Ⰹ撘^<ݖ *?q/q%a9HJU>ق6M!qo'anHyD*`턊ROܧޭ 9\0HnZx굛#<^R7z[&i1Oxtr^gр-0n@Ožy/.Z/L/i~ "TB=$Ll)^?RvzqɘʘŲ <ʿ9 VZV#}ߖA؅OZpDm=)Zfb.vae2brl`9坎|l=*R'"B e׬]*5D>|@E{)'@Ax9xN+l90;~5ٖpdUx`:kc⯅ɠVMG҄i bv.ٻ\ɨ&߾=>co)Lu޹4WDX0xs0g︧Ά#"/~w =b ylz. $yYܛNd$8w=4@-y8^(x[gXP=D-(irZˤ9FVʰI݀+mo+9 HY#ƪ:uz @S r$m28sG7J9C*6`!!3"9iCs$$Nq"x =a#h]_5蘸Ԗp4jnzPK),iFB)ٽMD/sN 5 Hˑ.G xTk|xɶYBO5 ,ȩVT>uz(vBY*-~ecωBԿɐ @Iဠq5R$-hXǙZWPb4tnbFl^4Yq麌n0P s2-9 ~Og! R8+BEa+NƔ-xR]X\%vA meXDPجm0m5g5QIoЮdH"xA}xDAQ;7oޖrhj~jOSe Ch`S]e"5,ɵu-V(E?64ah=RIiz)O`}T֍?eZy 4GЉ_c)IT^ A$ "A ?R}4*$5%yZ|U0MJmrk9޾5W{|Ⱥt!?;`ȵOftn Vl-l0mv`~c5'1/j>!D{ou_q2 2ł*Y֯gOtΘY2+߱r-My f$dhWwں*s,kJoY nkq3)n6a0XL(ʲ_t–"+IJ5L6bH|4e*0XX1:Kj Ň;(C>#`VD"՝|D5-vÌfԞ\.ԻNSy>@yةh}l,) C2%P~*8BdAQ9Cbc%)uz>X̱pI}q5:Pހ[%eRlT5M \7AsnwA`-9'd ${}~B!=%%MH^m(w`<+(S 0ՠw}KCH3 :Dzb7isenv4U $}ڐB+|2.0[cTaYA;K70j )ߝw9}x-ыt6μw%B6j<0$jD֟`׺a^<cV淶K|* V( fW W+21 QȮi!ޕC!Q'rV'eǣ(#xVz6 8˥ &KHd v\d|h|S(89woMYDqo9t,~m609B֖*3=/?hL܆|G2 = e_ #x;[9 OGVM {& M\b%jG;¬V|X%KSawG FǤ2}&r/`UVן>8m{GCoF" KA6Kc~#Abxb8a.J@b0Wܓj5A>!8/im wLvAyKLp0l݆]I3xV.m{ƊM|@O9/X\T7d%sPwTT 7][/Hy)Z(V>+VyZPIT7 -Nj ܷ!l,LS.g e*FgSFeV{22%NL Y7ag} jh2]UĦ+M4R"Nm; Iv'e$]z}>KI355:Lݨ1G"*BWƶ{[zY5}w:͈Jq%۞=cg*fx[.- 7R0eD_|+P F5m 3T椎=*&p{%:}^7/V|۲ÕvUwzcRnRrH٧jWNa敊Va;o [PRyRTfyE@WLXgi-|RuD\ }?A#Pb6l3Zv?l?kW[;@ۚ6-ZUZNjU*BAKz} TOu/A 2s`4U˟h[;7vu xltTH>XS1hr G?{m^SySIR_y\`5Dx$`U^ d tuw"GE1BDS$@I}hq4tO'lRU0)6aGhg86lgrk-I͎&![L*23A&_#"P *84Yjv54nӮh'L{#{TUz+ȼeSvNAI &&\J7 Q算I s~<6zcը8~P;WUNܑܸ}f d 16Zv ӁW crC&%t0-.~,g-1OyRT uOKG;ӝ.q^xyF,OKK"9C(raЃuL.#>Kuv"o.xfOKR fNSmM:ɀ2 *mxč3/:м0C/"An>Nkhi+om? +ȵ.|c;iP] >Ԕ5p)a@_ܸC"m/aN0o|6[Hez-b P *0Γc EWŎ0kg ~K6v!SՍ BrhShVL d.w!#'Eut ದqv2jVѽ7W'p06RҔejAk^ң;+ oqw(m›RDSo\_ ynjϨ[ ^"4ZhfvdSU@@kn$FɖUͪ!{#wqy9|؜5f95NtO X) F|"Ŧ(\AAM)E&n%^> `݃Vj 0&3*Nqȵ3=-@ Xα1Fvf񉹃׶3DA|s|G X29Ibsqz^$.k?2 ZIyyx̚ʋW 5@3 w̎Nٗh~WyC{Q.FW<2vu8)7Fd"k-B*v* eNxƟ(4jm߷I \1 LTI󇾮,&U}lzk/klۤFe2å-`tK39:Ȇ*e<9L dtV B;dOo2sfbD mY+Sjz ڢi"9!;]km?녑i8 Y\/(ZEϐa ,zCs/95̪bM{-R? Y5Ըḯ0%oZ^^Xyq¬zpN9Iڙ˟o9xE2Cـ~ ܒ&eFYe!DO1>AkC__#=F訊SS3V i%ү"%yk<, dvCHʇjsײ۔> h +-t.n3$\|=|]})ɷF^:2G?&IBV6.3̊o{ٗ m 4˖*LnՅ0ӐJ# #=2 "|;+qNui5eʣ ?vʯ+; =QXT׶E=@l*Us?fRM`@h\.Jt;WoGּI/8u!/9KŽ {)2. NA[ЍKƠM jq$$6d2hrf;nDD#aC7c'.ܽ}BGP:>CWJXߓ` keL8 (ʏg@/_:M唢`d%#v! /! %Aʀ0.GFߠN0_s['CKFֺo39Ve^TtGP6!D+{C4Yܗ9/ecݎ%r̋I9"UU;n]~L"gW(w+[}qKZli~%! qX'2f5~bt]܅!]Nsp& QŴF87+b 5c`x:=\T1FjDSES 6f[>1Q%/m,,>1x'F4 W:F}^s+s:YEGPvro\is֜Radb0Ƙ5d m?m72AmiT,{_"sCs}BwZ8Az%13bJ-dߺV~^L( C^a$\2Ү #EPDz=x?gU *ͩ7j#,f.jU4jHKƟ>HeA z-65:)BV^Z^>,Q4pͳ.3i~1mmʂ5m[A1YQlP͛KbM*MGi(2I?_NsOu=bf{A\hJ@̮n O$2tNv| iA6,5)֜)"$(S [ieT~NjO+i)̮)>Xtv|+*!…Ly*1rvu|Qgm%YLbnIkLncjyl=G[ؖ|unMfDuU+oȨQ.%^5\)s`9jw+SjY‰lBy9nH9kn.99qب-zG>.  PR :lWٔ >V&}ٌ]x3p @axb; Gك@~n0Kxޥf}>qYOj.e}~KUQWL5-jl&ʢO_z5Cʷd`@_A;Ek: wwh[xqp:`c \yHH7^ Uھr}i{Vvidޕ[Kހ雒MTLC-=qE%vEZQdfڏx@JhsSyElI,34+b6 6LJ XOesג]\-LYvRYU$Je_'Qf{B_hEw#ܷS>$;ze0~YGVB"̀K":J+H!T;_7VQsrV M\1 W5bt}sQڣ{~D@S}po\AdĞC'l0pfs^ Aڮ#qR—B9vrqwryεF(ؔ0y dYL 1c@qr"J,7D 'g5YGfQ%Ѣ$=yBÎ#qYR'~:9:/"P(u0 x2ʘX-!Ec74 CS=DJ^z7q[MmZ`HA)1?=/=ΑusHէ#M,,sjH}t 0%SCh]~S"8Nݨ5yU#l۠P> #9r8H8S^+Gt.Uv.[R&A튶>sH?㷲\/!j$'g̶ۊ-=h *ռRMf|Aɿ~ TnS˂@;li*N|jBi(O54)B/4%EHXM@⿳'ک;/A?0 ꁅJ#x)Iimɟim\$|: 8:T@Yq6>-c`̡Q,JQ@v%8FAG%(U*;idmKoQ?v8,TWQxΏ4zPqH^CD\P"I\E1nIMbI[}~O m4p-BYEYx?]|fFQф6BE2I[Ve;rH%:ȁg?wؤJD#E%e3d=~xzpZ~Ϝ0vNm\[[\I5JKMd`+VDW }UN?7yKA?]r ;e@W]f7Cx&q?)VD0ݚ7O9[v6_ c^W'=AQpw6{b]EXv'_&}w Hs򐘐`t A3TA}{'bxpf>gü+m`Dpɕ[D͡U NfzzoxΔXpp 7%&G8fox!>U޿@,1۩5;\/vqYʜ]faRYpT nڪg9X7[ZuG-!+L0QO#kȓ,h3zV Dyg!:;)0[\BE@ i|StϏ4!ez8)=sXSka.$IzcZ;FHZUN$QU^$*+XĺjONLɜ0wż!1eOď/*D*4&$"X$'.uv @󯊱)NƄc*: ~:= h <^+XE<I~jjyӲ[\|4L;mLqI{U !NIfY8Y{ GN#S9vt\J,#HY\}nz2b_ZUxC ڨCK^@ tj&_oOtLYµ* "K[U:Yr9b|j %q.eس'6_BlYkу9x- 7K(@!|IDR&خ! Yr2\9[tt*Dg9¢pֆk+Л%na1VTI9w+SH|Y\r6[DG[ob"g4Xd!ozy6)"Ug\͘׿>X}Rt9e~RJ#AeJR6kvCfX*?ۍYR#6i0֬~[fMdֿ 1OQ˔Kao WQ2|@G- cxeKe.s ZRNJ<큤ʤGF6<슦ǎ /j|=JnGT*E?[)7~q7ih0DSOk@'\pHbW$ |/߸<3/1`w^lŇog< Q}I;3D]$}dx y3w;=DƑ'H;:K; "V{H(Ƀ]`;nk!hi)qP?(> (fe@Wbd~{SOݱ;o,COWggfPR­7㎬YA  M֯ Lء]mQ!.^ͱΤi@ѻp=d}K_Xh,QZ.T/]lH+ЅS:h<GWƽc+$6OŪ vP H$<1)w"K v7q )Gĩm>tMB`Ļ:H܈\]7 y$Wǖh,btMj bBZ^ꉫǀ:-2=U Ygl eǪ4`%=q5DFM]K,4g]DW3bԂP7OuƎn?`.g2~*>m|T[Lf.h+GO0H|Rzap>6_ 5(KqCT+ɽc9a`$jIV;rHaj({L%+ M.I;B,1V\,hP0#'1w$ q ZA ibպT]O&kC h7"˺<08kg|rΠ|&w:P[WP0ɝI#p>?]do@x g'1$DwV& ;ua>ۃ w1on: wzX'-uhzRZsKR4< JIcu;)W׺V<&2,9B)#gP:-M]R5xOXXСe;(78x߫B{件>3#̫3d3>Z|Y3(YvUzk x'[5Otle{ZNwfޥ?O֢ۜ(Q}'z XЍo ZnS!YRV@me1LBE憁=&OWqGHt}5yPқɆ-~Ԭ|:QGK]"%>|%$ֈ]|x_tx_Jeo$z %Y<P蚑$⛼NG8(>bG3qIrkx[Q`@'REF rB^'{Sоn= u|c Wה\ʫ+ 0a" }A4`j:Ug5jU|d!YƻCY `˘Jݹ걾Eu#P։uRפN˗ ,/HN?'L)p ܇b'] KWsDػfO&8EHu#Xy%JFkFVܵ`%pws& v[SI"?/42뗓T9*|t`|!P.U4 8E r̗a$IObAշ#2JmN,o$2qX7c<԰mX Z]Fth ަ9}XJ"jF)*Q-<'T'Om`-벱WZv-dǽg;|<}\A_inAqA-G ǝCEwINA4w `r&/:Tdf2t E?|Q0@B^V#'IC"ʎsɔPn4<gk%ў (OԠ B;& wxu#6sbR^.,rk dn8eb& P45\' }^وEb6JBҊU)+h#i4*sQx<Gё >y0 'x0lſ$xBBne\jY\hޖ I]J$Tvákbmʆ 40RѤ%TJA[4—e?{*,okߡ}4C~U^O^,Q<22B{c:%FՉꯊf*ϗF8TUs!z '-'Z JaϜ`K&en#គ[D9>yk;hBI`Xr?Xܶ_ռ0.t1n8W yf]eUbQ|;徭:LYGy©' @Eϝl&gz"\jה{Z/?x\hx"$c?C̢S}[PIeՅQcV᭾DzඣĪ[u]8> F:;*_=!s/8}-ÅR޳sͲT/k@dv~]5SK#K&n N* ,q{f6pJ dЏgͧû-N5lH[U&5@Z+w{0F% 5n9^G{DI8 `<6CI+ dhT}T[h)z:7vgȉB;4v=6{αfVږ'.3Ƃ 7ULrSάb[[2;g("^h8`){[ݫ [d|N0 p [=RzpX|kJc&1..Zg K{G$7\[9Ue;R#JX K =4B0Arl\_sb,Nj#+B><[cqd's)i>+w2teQJ!Rc [^jߠm9II# =P#\NN-ƤtSGqFmbN;PS"xƗdr9/+Q* D'ꖰoH{09BœSg'9 ?OE-bkC)=%=P:`M6nxA6>4b^ZX^82DvzUQ F'dK]4B 9wبv(V៟[K3ZV]b8$65avq&K[}v!Qx|L;lsl?͞PzY1^ G&g>WFy<|𘠅|Xݲ_)QJrz 1l*SP6|BqR@_7ޥ~7o Rq,=+2dFm ,op{v%E6ǜ1aDeC{-\EtWv=hdSr=c8ӄg.UTcf.@ :c-NU kR ĐƎ@Իâh銶)I+ ;x:A0p^n%ヿf~5>^/zvy 4c|:M}mqO]/u"HcF)NKZu#'R"bEU5KכOP/Ѱk^#=Ë́p!b w dќz4 ?rc5!נ65"//3 ޽ 9b_9C<'T<99P1HB䐲v;(G<)N^V@+h0rت`oHF:NU7B: fBQ$G%å2Ljtp{~ѡw%S9cbYuKscړ-w2g8n=^d[ěOot3Ix-F;d)NOMGe-RA%.Mˈ~Dh ? q¬^fFHs}g ! ^ͣ])9Kɫ <6 7 ?U ߳5%K-7 "*X`(nꍒI%[cfT,v.`k؂ޯ2V2f7m##fDz 7*J$҆ZJ˜<͉z~pxAw3j\RȖx8/ꯎzV c1Qb+?r K|XRvPP\e/2hh o zFH^Lv\*f`n <"-=,r6$;G.b\X3'\kXNo# ыQo1R{S.^%<~Q#*W<8Y\<{)<8q?FSh'L~uY7v ^%.8!pϳʊv~DlOx}>]J[+e3.laP,=" ^Xg㷺E#qgX=>er/l:Z',bPkK>N6LA .-RDb6>2; TjǸTJ)'T9+X-1+ڷ喏(ߜ|"h op/|G bc1D+0'-sh_LP:a]T;'? =@'ߑ[cU "nr] n )侞ݤ.qg+ZPPmƦⴢ># 98ߴICxpKZf=xI0kîj?bjNX|W9_>ډr*Wj~v3Pt>fe_7oVw{Q>gI?+>d޶>ԵŞDj*v_[:p6{)<偢;TiiYCyݤ  Doۺ,&z{m6ΰYX$!$*|h0eSt 2j{?4wy} pS_%|An5'#a̲aÙcKr4\PvrLκy`4SK:I;0 ЅjЀ $ ooݽn{A[\_Q c4 ^%F0{t31y}_'n8Oa'[MM;9<{k^6oyXEb! /1W7Uy(Bh󛼻# AT=r(䓃̑KyI*J[yNnMYxrIbgBָYFɹa&16aћqι-vb5(5\SDyO(k$q(Kg80e{1q-uoINZֳ1bmu QVRi ARa5hR" Sj]d1xL05DrG yX){ɢs-BL}) F% r|(&2Hd; 0~N (D=c^;W#*3XwL.t󰐏\Edgz.%?fCPw2bMG70* &'odG,`~w t~ϬkցWXΓ.eHo9kȭ%sR#6VylZ'p.WvB&Tv!Ѫ9~[ ٖ߻V=̕:wx>4p`cǃ>2ʌq$(ߣ0(n]Ԗ3ԛl 1n&+%2L1cQ%%57pU۲M }i(Pz&/kr#ٗ2>PBU zMl4_fY;~"|̮WhϢP,:@>i_,u|F@{]Q;z7ج 須 6.y;xU*1xu~?"cGwq1Qؚ9*GKi.6۸*ʁoX[R-ƪ"x=EI蹎c[UDJKB_x*B@_aJ<׎[zӲ$j `?f[3$Ywde/ .'}؋uvU#^CkHX}?W(ցk(V4# RjxMpS+"F aީ3'e-5a=YE7SԴ-,3lG ILvK IneEcf/WbO'U VQLԻ($`q%`xBI깄fFR% :nlW.(fJB"QgňR9j  /cՍ8h*<i#kEG:rh͔<h$]="eo,ZF @E0v U{ $S'?߳r##`LW9jMZu9%6VbͣK.n1vRz Bz=;7t5cسohD8^W6A3|Lj\W:Pj҇S$_t& PδMt~=Nr7E=S2`hD۱ŀA 䇚LeH{mCyhei"^4 q8xo}]%cI&+,J+k[akB 3,Yb.uSlt֐i} 7>̵6'U@WW~tǤ_o0iqje1ݾ "&Q`w;_4<_KA!9t7VP%;^YK_L@q5"&?,tGMkJRta\DS$"4*eWY?C*TrևvwbDp\;R ^4Y&i 5Im~TaөHR9h=nkȌNs("y&e!Wҳw(l \1^T*KB$ O]c/s'VP0)Lڈb K4 uڝ>Gِ>ht=.I֨ Q#ZYY}`?*Ia0vYw=鈬aIn9[`S-qT3zq YFl ḀMH81\l{׿R?Jm>5Bk1J_ lB0 m-[XȏPr6~O2ٓ4N X&`ڴ˵&RH;Y 9cIޥ:߽!SyCTxU!WpxO 2ܳ n#A[ߖ$WdA8JsUWSz7Sї\#Ő؍?.:,4x|2%d2$ +7?>J1!{|n|hh-bz->ɴV$DfyLtV6 ]۴j*a6|K$]޾taLjOvu:֏Pꀲkz|8rT$R=XrKVL1 $T;^;x P|!u:=m9͹"@N5* :BSL;JޏT3xOo^ %1fˍZ}"_'Lc[;6΅sm/ӗ)-kfܗɪg s&t?X4 ؿɛUqgB鐳<*<".ٹіf9ԈYލUʪQy%3RK Oq;1l&#׼\OtB 0SS}Ã߹NB+ GJt DEu8!O)xg F|dc*W)ȗWs<4rhާɋ d'{=oupT#[1jҡSg3iy/=(UaD1C=B@4(\q IŚ.d-ǻƯJ-#-~Ϝ`à|Uۘ.\D_ ׬~G4Nm41 aw{ЇׂZ8$Awݘ?8wݰm E04wr `rg9?FO#@6|)RFmXϞ)ϕ/a@Kycs[>NQ){.G&֣_z~s@Ÿ !V*wV] p|5ma>N~jZ]Gѿ`ƴ~a䕩`vV񭤳۞'U>.W!d XM +fۻFiPr9`;QDx|q8?] 3g"sKS73Ǩ@eU4 _+b|ǺɆ1j>\ú뙚G[;2/N7#n N.lob]daOvv[. E1a*27KRZ5aEY6QGHCpRtڣK\L(ZUS\4=^[LΕ0߲vKhi_ @sI8#X;3Ӣ\ AbqAAo%Ln#&']אU Ͱ%$v(? 3 J|7E61],OiCzÐ%Ĥ!V72h1OREG_pu B7teY-Ф Sg+ ?lM⺻CJSHڠy{^+k3Ơ h]aAu,ON .Gw?3!]䊞a,MI=HIX!tt2>Dn힖jɖ 0njjjP5fr78NQ +QCVfu ܿԠ脞d2tҤ04B$nH<o-5Bq[Jn…u>"$͂'r*yȩb`aь5jD$o;b$JJCu]n:y% Ry(7vbi|3LbvQO}Y[5KhgmNy⹵GIr6}6PC֐İpz"f釅4tH7w]Տf7W.Y&JDYl2<"gmKs{7-Ul Ƒgk[w[M֫ Sr\-'EIWc AZ.7Q-q+Hz( V8f(b] O 4_7{p(zQpwsJ&R0N-b+@{k2‹H]_X:;:z8;c G-~WQ}T:^zJ*a|uNLoh_`ԳLi_}_Kp9Ew;ȿt=+4xN5kv^˜ǀ+yRtP95!ysȜ EA-$=0#ڊ QN0(z ¢,ar\䥄v+ˍ :v| .~d&)$,z1v&mqT+KCDkIpdud [0$T h4V<.v?SVec396hwNO%OaDc&Ir҈ 󆩸'p6u"ÕPݘ=wG͆R oؔc_`fnދT!YXyў |?`I`RT(O]#vhl2Ũ XTJ~^u~#ak7f|4gVRJwb6^}z&΀ beuh' 0Ǵs"t;~h TxgGf9,ɚ/&]UbR^?|'x)Ԁ ˉjtj?P-ɂ?]ĤS}a-<Ǎt!h(Ϙ/@QY0e߃@% ӡJ~#t{ܗQy'M#i ^/ԅo yMm&r .hw gODv2,'Dd[19UseML12"[f]=OfkhY7G0r~ȋd9lӂtQږYՄ*FF7>t(Vr~c]D<7򑠃W5\*wa[&:#V)"i, A's1ǥ>q@+ZRqbj=Aa֣l٩XȔRpI]I)P^ek0e X8yLS  {^]#+}f̟a) u@q^M|p0Y^)JͲ=>MsϻF!M'gNx[/}2H1.fGeΈVڴ&;5GceDvJ9|!᎜ߞt'p^-М[5E B䡊wltWsiԅ9YpUgTZfD @/lZj $/M g]0 bI$S?|E12@f`'Φ4Psܰ>ݾ~KKLz:K#J袨R}t4\[nW]+ցR" 9#'=fqfd9Bϟw3R!YAd e"|-* e<u#- ~ _6.BRB^<\W`pkUG =telNQcmߐxFE'`,Q}NXl{"@ְL!/H6{{2Wnuuҙ?[.vov/tu}]pq}nۊbyre)5fjZ7n. }sk-~D)fOY0[u K<;a̲]f?ju/ueWjG\iz篷z)\,|{J&bdA k&V1+RN•S'f![h$F5w|bW, ̉ROb$|⿸g`W6:0aHA EJ")d(у;$  zx:X!M'w9oQz.r3Y$j=ijf.C&`֛bm `a:S=Q^]4vcaLg|DsaK7pl yrV 3If[iW_b[9ZbbѲi4$ ͥY\yFEN:1k%tsӗz;TXV.mbd5t1L{h"k4s*Υ5vcXOh t&Ljrڻym m69"T/$" k4A2CgQ! qlnJdÀvOs!)G͊O8F"Q+C!}XO/5v+fbzCbA_"):tcnV=K|gBWP5k5Q{0Z <mΕfuoܮr[NꡨEF' QC0zQ^fz k½ʎ}Ueks92КW,JPݯZI; ߒ3 iH M{ki֣_`!O F| Lo6F#f){A>Cܙ`[ҙP9"i/pU@ Zޣ ]Q(^!j?d~O#X(_2>WTKV2Cr]cPmnQJ 2/EWxlALn|f 3=6ٸ8)30kj]V3ApP 1tSBa8jeO"/ X@FfdEqmݖ8*<J!o[ѸLv`A']ӥ@#eЄ:^`5:lpS\T#]45uFޒ5Q{lyU|>; Z%=kɪY ?3ط.Ae`zi>=z%ؔQv%j@2'prg+4!E?.Nʛ5`TW{)x)IxXy4TfkS%sŚUXO0; ~cGj}N?B"io]%9$*O Q̼t]H?e9W5E@E T&Xhǫv}  br/ ʲЃOV/ә-<"!IĨ4Vޝs3]$mP>.`at2(Aqq#;G#/x='-XTm;J-{pČ*w&tN:" e"VlAUW1T`B Ў拚Yt א?$D R5 E NQ(J]g Fa|zM>bͱ)6k iG)k EIA7$՛I%5*!+DkW8 U\ېS.J:`!b'<->O`%%tڄ-=+<&wxBRp/F[wS#dxU"q/ l.]6ӈ<!F{[נmHa'#rfz=2ToKh)w,QtH @q#O˪ORZDHsp7 8Q~,ii "{Hߴ!ݢ zTye`Lv~iL[6uKqVUE>⣜yjkCQlR~$\ vwCMv$"D}v {'P*Ç$f/+%} }@۝DA]a:9`S T@?"?HpF:!̞ >AB#<)n5h uDB5W̢yB/"o~}L_—fFs?*@FyyZ?xZ1`\^v=x]ɝIX&p@uV;}a؍|IS \p{&]m_(h8ejy ndLMU>Ϸ\MY~8ET#Ӏeߪ+ApYLv1hwgE0C `trlj"|>%/=vW k݉riQϡp@tMNOCd'K!cI,3ϗb[2 QH5$sr[1bCUӊh(*<\g2ş3Ԁ˒e<1=FpT;!+}`ۑ g|"޹eNStv6^o4Ws3av'Js&_p`r&8 9C'"z1TWnoBl]V*̯ aSHqLO&s6y7.D=wq9ڳkk L"IG VcPwKw-5ebio n^p4 D!IyRW7@jnF~27꓉JpY-\ DHTfA%$Yc\C` BAf/%'0+V{Vs>'zcd\͎eGX\eȄT#8x6W*o?ɐEf)-w!\}Ǡk}sU%D% ̷Uj;xzPN^0_o=(ÃskE%U؂K!]A%.k}CR7BV-$EdWtMq.n1NJ^xvԵ#a^-õuMYQ 2ԕJ8Io, 'BʧT[ ޕj"V{ʞ0)fM+uZuQ0vP-ppBz7KކgOtL2!Qd!ɷ*۫otΥt$wM¹Un(v[-VoXrF'ߐg,eO8wYG Xa #KU|T ZɹHv :k_l']RҢ碑y2 hc{fs4domzz:[ IJNނ.$Y󙳱.>!kFHwuHN9C|L^n"h5_2bcu#UJ(/ Y2# 0m/_;zBI h#siK>T }dn|YFC@-lš،Uz4]0R^:I|Iܨ19ݦm 6T4LAڭkO,t%/m_(q+։%jO}ϯObTZ<,-.:Aet46m\+!Zv/5p$>3:v%)J!Bk:H"?\-oR ;W5@SӉy7 ]bIA}2$:=p].J+06q }+lE4.Bwf(Z=& ;7Xg@XxRU n+ݛ kGGl.5 6|%$41:EM YA1^]Xj/A'/cU0cJP ²ە`C7Ytޠj)yDBr{yT P&6H#!MbFnr8 ySLGFݴo|=))3:Ns:\EmkNIJP'1rVj2L$/ 5/2 iN7*򁜊E57 ..'<XgjjvҪXOA^r;^&HO箮4'UY ZNf,u;)M܆V>T L@ 7]&姄D|k)'. 6 xQOAvIYwi*s`9er;G'.4騰;Bu^><0n\WBahOWE[]^uZ n{z`> .EP ( 1Tz."ۤb2EMЅC}jIV; $rWQ jnI5iL,C|?#*xv$ 0B i9767BO KW3|o!񜳻YC 5mg:,"S׵ !P7[ >aR T!CĴ:A#kMI[+>$&,2:l^d彶ˇNJZ yl_g#PT~!^ SsaMh1bdG}ȹDx=4ϸ%*w wj!u[g,xY2CKCzi< Fd|/o-- bȁGF5/gIP EGvhIk;zL( zR(1+ Ku±$r* -6=߅`W%q~t{ 3{sNө 6]]NSdXl05nF i^)r5oK ( l;du"֋A#֘Vn`'{cx#Dƚh秨5KbtSVa-<(RPufyq)c,c^|1*N@W7W{aTv*e; 23i)«K lޡl K}-ZW9oݧ~+~ Z 5d/I&_dJǸ&6ͥ;^u+56ە4%Ib?7W9vꭓw;:f [4xq$T.m^|n6ozV+4AbF?LQ )]9P?/z|1\'X~m&N*=`{h$T}cl'V"K ._MG(F$Zl(__ <rP: ǽ=vӤx}o@Ku $Z0;N˗o2exC(G;Sq V%#qWU8Fؑ9OM*< MCdxc8&^c>ID׽1#)GmދֽO l\ hMbM=VقtzD<^´/f`f4t(!ncJ,u [uqb:ƓӶ#e0O\3Ts|뵁+WF] A,X:\hg`ⶥ}ľVDէsםL"!DuΩGodOOаoff.^LY.tN{E4 ˪֤n^!"4T8&]8%2'P: f@@,洎@,!+Bl@S]Ex)o"ڼ5YN <1=qh; E%&YIvi-GA"! `Ժe D6SԵc?QG&D zz-LlL;0tRi]mlaʹV,wd#3gd4 vsЏ~r"^9ڛؖ'פo0=~7A98n=c KLe uJHyJN*8.7ާM7=*xg?E S ;EJ_isٰҏ#d7m>WbL=00KS癒?JI+\-Ů1āiuzϡ|Ep2>{v)1>_XƀO ȋI'c7gAr[z: J8r@ Mo_zK\8.߇$Lʲ &tV1pyB?Xsy|з(/^SYH5fH@6Kwr 6*\+~Yc_);? 1C Gb %Ž_B`2 ^<҇ 3:Sm@VFDZKsL؁{_9cL VLNMl TC兢!.twnxf@Y{Rv4ՙʮsr߶)SjV'-áboEmd'2 ;>ppct%w'-y[`.eЭqs\w!OW 32(p^'u'/ʃi09ʬXoj/ "IPmV[hpYq,0*JA0." !A1)>r7pdlM,ʗ'Y,ztS6;^tЇ4N':,e/V!PN/܁`ph3~oI!1kJSG@Cj,K@YW;iVDh;f>}]پAcۼSј%"}8P>[YmHF<I WTO$8a~`%nS\~ae:wvif|,P6]t>K=d'cj7vy~ x;17$IZv[_l6ߍz^VQ g?XǸA[')'%%6#=09Zfxw`Z2yZ]@^<<5 "`J1}^nșm`~){HuMMCá Dӥ,~'tEo)CڵoeSj;S"'IV&B9mԘ}{)/KZrNNCO;PujʹqBX=bˤn8);L`_YODl+X"q+aw<"+\b2lld8h]0گzC`pk+9ryS9% 6պ"}% EMA=V a +iFQYEr]٘8S!yD0 XUmBofc@ -'\n#dA[;qx<[_ZFhE']]/ёQYҰ[y;37R.]~ #;J8P_sO j"{oG!2R:Qm$ HggNz|ؙ`p+:*,H_VHol 9{mOJ/)UՏ=8ݸc5 )΂ݲ]kM(=oԢLC8B*Ԅ_Og.2RU\elC)3ldtxi, )уM @ɰ>a; \D(XqR)Kvtz3 R%s !1ItmIr?X p0hZiis'fwY,u7,`Q_6φBML$]bxHbKIw=U์Ӎ6<Vŧb~%'OBەn)i*žA ՒB-Sp!%-!+2 n4%Q.5B M!G :@쩒ހhsgDWI^,Qs5áUsmVN 51B'}TD. ce  a_&ғ.SeߠU^}&16uX[) ʗFUP–A>iJnwi ")*gl~r7K7];:xE!sM6JjS~y5\8VHMw+̻66BzRnz,/K+oXw/3[u`Hg\~%ҁv5i ,Shy=Wi%`=NS Jkr$|j)^7yF;b2:|Kbrs-T]$dX伢Kx0Ae Dŋyn|Y܆qudB} U}|Wء(,` htz;FmCM-?`j؎F/le w@uS-Qih8iKSD5C@}VxV5oxۣ!X7Ymbi!2c'Pl.̿"#9ŎsXӿѺycdz=C94D$';K?_^ܵCsϦT>ţo-a f|s[ 3"j=n$A3P[dž?^GmˤXk;j%GzE"Tw"kfhh}}/]GtuYY,n>91n삠s Cvl ղVvSF]_JU6w&?DDJ#z%{⡷y6\cmyaU|^)|L[?$6݊87Z;<:`;wIP\{EAsprLwQ! W=zOo->ST]Yqbu!Mcvp|v&%"epvw|v&I9vl>$k)mL|'SŘ"|D TOL]ǒ {f-&"#U':|;ezN;;M͕^IvnR1~D0N t%4z!Ф<ΈQIҌ{QskO}:S rH9P=DuG]RE}Ӣ3U!SY)Y&Ǐ]\i u0fOˬڰLR/[jvX$7@2gXNz"}U] Ϣ{[[~}caq"SM c,pwt㔻Xg3aGX6RVu}$Or8-Z%'#u&CC; V$*&@г?~P_-B̿bC$c<Zq[JS4΍|6{otP -C4T£Hy*h} N:ȋ"ڌ~c+( IqaG҂)7M ?{l*3^+ZXLZ(؅Ƕ^7DT Gw .,{%r-Og׽\/K>֤ 6E|W/vtיr{I`ZcO۔TiQsLSټhY ɵvn6joOۅ 1We<+a}ٛ d͎{KLŋF;٭#^ޅ. 6~%P65ـ&Vf{U55IZShDFR\)cȪ@T%Ԓz~$:/q]XTM !XSje/FbL`fj41hfRlk#0e<E "]SM(;CWgܩx 4Tv~d3*("az$kV["W*D3/Gu'fsaF#ebuTDAsȽSC8x4VS. y[;|Hx@!Lm&BC@gc%<؀.[КϿ|[3lkT瓺-Z8` z'Pm5N)zr HoZݣB Hg֍Zx95j|Wʾnz0@_(* If(su 1Ls~r%V} AjB`$x5jpؽ8Ǿ'VXwoM!p绨IHo"8o)2d lZTfhgBm aTRQѭ0 OXv(i5ywȔK(AU3{?{ma[ҽ.%xy6dZƄ(a;qQa\VB,Z梵K>Y{g]Dʲ+DD4u>Uinpi,֟R3c Gn/^޶';w-%e%bVrNVMCx3AN~XԢt5ydm2xD|lKd]G]5 rd? {@t*Gr8cþ^Yh@aM UGbV\:#6s"wQ,ͬ;mnKT^n6YVM1? 'es;0 5d{J^"kENw폜.Z#osA8gw3UsDIP}_8?MioO.JWOqaHv-QvLAsKN"ڻ)AsO7?q=#!Xh^k֒ؖ(mE7fiK= gY:BrٰMCɬށ:FĻ;./ =E0IɕY=\E44i1.)JߚKJ тZIq$֑ $b 'z!ͯ&OfUUv2,g'k_7.[!ZXv3遽|zg(%E(M~#VfxUD!f+{O .JDVgL?`g`E_\|t.y)j?\A|aw1vi[8>J嫅=fs<;Tzi5Ԉ׬c EF~&} f $%xTO94 d_1pǦ5?/j )Sx3W)ȥIB[}xYA/bed[_.驢fu[H1~|lMM>MYpVq2X>z$fE4IЅ; Z"^XU9fw#h0e2җl[Qy^άQ^ \DDU1OXo0׌Zl 0l]ڲ{gneɢ4z`^DǬ?E}~ n&3Ҙ5G+n7`+%bׂ΅^ϒ(S1M4b)aU=I)n.NnO YmnKxٿ\E[jΟnFpt7MU%*WyP XleHI/ɶY,^|&0NG|I]̛v"Q d05=q aFH! pٯlj4>u`("p,LJBMD4,5)%_P2tow'{yZg!\0<0,mѺe9;PYDۍ-C@bxtÁ.Ă%mԎ\ߪ N"Pq8{oӖu.¦W53uښdr(Eg>~T$;=θ;#] ,3\U rn3])25T+:+' SZ T З{_Ǵפq$HHDɬm hp<@fk 4wqH#8g =v–lq|uU>G/zvx\?hwz]^^FuQqdXg܃dS[@LhB_Ovh>{5Ŕ|_/8䧚K'+gPV7.ZWī= !\\fTJf*Sx;$?BL% M]Fmsvl1FǓ<Hz40g$,k|> 9SCܥݤ [CJ/ȃ9Dd>F\X^AąH&z V`KZ]COgWzL{-0ۤIa*fb~[Nw,֨-|īD` 4-؜HWX=k?6;awo=eX}^wyT@*vw7kKJMlpf Yhjl%@EZ8!YǨH'#e&ՒGxJ Xlܭ `xGo@pxSKVDƘN77IhnPd*'zUYz+1iDj۔t'ط[dBPmԷB: 68e-D$vkb#Yaʪ &NBC5iW~'jUDZTOsJ禾~VҊMTjA<3 E_]U8a&>5xH[{pCt5Q=j2mnkl6ؕ> s>,(ԣPj= 1zȞOkrFIſ8:GZҩg VZ痿Y2xⷥ㜚L1N ֙a{!]\W+\Z]<+RnNX!C"pt\ُ83XyQԼG|y6pxH%g !?ھqU! wQ:&mH ]>iEwF4Uɭi@U :krMFCN|c%A%7h$ϥ{Z>5??h7 :zܖOw]Y?‹ٳTܬYy Ԃ| &d}9@-xtth9˙AzU4R8lK5n7+Y ɚ.ax׊ d+ 1 H}'wIXF¹~2`,3KmERB]P뚹f>W(ʜSR]qGWD.AEOgAC>x6 ]Ab)ŏ }p.ZmTy#8M?3-b=./97oA\]SM "qT[E? o$6YF=s>D/'8BVv]5xYYwp6]ʑZEW~n؝T"3x*[ۋ,b!b́im﹖6$Y+gn0Xr+RQ,|HW {,ЮHdĶңR_'OR&wFWV@qE( %Z4l?)wd`߼T"8bSze\L kʺ뮥q.&#OB?1UYͮfC(1-!)WF㽈T; O'e=6;.7juJX=bG5PuQuVd7%X3uvA+hq聮%a!^!E<.K w xTȫSvT6`YGe U|h!G|+_#7IXh87Scn{y;2HÄ~ f)#U֠nVa=6^Jã_T(l#罻X'ۘӫ;i+"irV~++k$'* ;둂zp&51ύCa»-:}4sokFux/cMunۤߣf!κqLȳN_V%6O2j傶-$3eK"TM͖7>y;kC eB4v@wB^$|{=j \~xK5$;εK'gWf>j, ލ3^2v&&_#=\w{` #/}]z?FHib[iSe\~EⴼIbԤ55K[QKy 䝧gzޥ0^SoeȞ)ZVD#ST#0s2B-!8c 6cr(6\}U坓&xx2exS'wY\N5rϋUXo0^~NGMB[gh}` wa"2%(?H=X@bϡWI鸘1qIZgB9녌v0ܛ7e}B2EiH{5"jE+=qhsM+T4'#C#\nyyJ=wHwqg.ZIqVsQ|mn:[vk n+8Ȼ, pPMlי r- =q1M>66g<`pY TtD}dh0y@_fSg؊U"ycJ\6]k6 .M[M-ǎS!e@Y:0_(FMb6MϮ>` ?;= bh]=VS3~@~pLk"ʹд*{X_q`Tj@HQk//~_E 7\aavV󰀔EEz"ߜ:(t7r/D; 0 =DAmD^3*Ɵ Ċpi;('<`l6YWc]kNsTڟ%~rȍGUڛ^'3cYetݧFzDs]M2Y/2*=K"RZxY}DzArϷo)4 BEţ:xqc#+l%-vDD/oc~A.Ӊ֨OlX;!Bh;>\t$\ٗ*]0lufϔʣAV`F a%*SO݋?,1v 1Iľaus)(.ɓW~BB1\^7MxiTO$Lxl/4H)y_E}HW@3|F6 {gsK_ReȾv2D!R O>Uڌ*azM-׮nН!ESpin+cc7cDI kygB)eG̠&,8)lkW2i<_l =:$M>(+nOcA'AAcIvƔK@Ģk%`pu.pD8TdkL#yW5ݛ%OdU~?$g^a| -'@쀠3V.ukL,+e^741>?*-J88k,Rۦެw푿-Z=yAtŜ8C9Ul𕎮QTOr-x ҲcZ ?YDF 2]rǔE=N|"eH L.9wjs&r~j dg2 U)fzs:Qޅ*Fy-ܽ=̜@BHtjv w釺j|ۙ@EXWj$x I#t%M){eH͍bJ(CϮaY9y1QACmWUY̟#cq9nf=->BwDhu !oЧv_F:8KdA*)+RJs7nlʮ#s[vYF(IAK6yIbD'.@&O uڿԿR@HVWM^J$0M HK^"J3Eoj8Txp3QEv6/[) FUo{xiA!!Ӏz1oik ÁSd䊦QLӁ-Ng~=(Oiԓ4KS"/+-햧f.Q+d F 9dXD@JWr#堞WҾte-Ngϸge /,&«&dJ`E({N`>΂2 IuݤNZjsd]UGyM:ɪ^WA(x-~b͎ȥYe-(KNqyEapK<2h{=pZ>d,AN^է[wKՌP_a'Hˌ{{M c&9t:?I,s~UÐ;o>} IFTΨIIR;m1]~pSJWL< v~6Il=x:Y@qE/'A%Tw!O>~r6iCE!`2$Ո#NǗֲ2ySQ+@lLLԶjU֪4OuU)7++j| x$?ES0CAeiؕk=7YyE",A9%ԁ?ZH!QFd Ž+m^i6зRеBԲ&NO$|؇[̿#34FGfG`I$ C'*_ndv, =|2v#ELQ@ƕYWcE_2̥tt֊{55-N]XPJCxK:suԉ!@h kk,-r_xa"zC iMׄ:p_s `#V@T҄As;7Ȋt&@ SҎ9VMMڶTB}S3wD7')J!OʑfR%4vfe*sRCm?"ϳqJrУm!'CSH$Ɇ= of<)zGry164Q\odZJ"=`{r #X<'fZQa4a<,WtYsKI@7!-Ѹ,"Sj>˻; F1QKrc~2yk ϣ\+? "3+@.+DzrccTIx}s"oeje,:랝I|^d/Vɷy(yyK.b(C"̃ze_T}x3ڢZaX AdFne]5x I_$wT$lBCg (rؐSs&6gpgX@jz񜮄ms^Cn(FI"ZfB/ca`|r#QS87)ՏWeAΒF8"_vzDU!gI2\k@1BWovi[3+]YgVOhUڵ2wv&Gv ,6ޮAM%ӎOnmE:Y2rݼ 3m~ !\İ2 X@>zW;mvx&yrd]$QKrg3nSj6ƗNw.yй?5>yԬFP-VbFqXTe\v6R  ~yQEor?U܁ J>Nn,7EWJ<hf#)`a1FJ(ajd^j_+ݖ#+O6q}( sn~Xr*rУwrkT:s 1fH+Q9ܢj{U̷);*9hmd¬qLGN۹fm]uk/t'J4xtH;+ua$ :g!h:6Kd k a߄!\b$تԚ(k?=ZTNEv,2§j%W n&#+M8wiǤUat5a!1 SJ钅 I?=Fb=r*r{^.pZ&B#`@Z`Kgc&lqd=DU02Bo.Kxh 4gc6F(Xtpw\FW@*,ي& 4* T1aM/S 3 F$-!p 徽a r}fϓ=.eO5_bqFKv\=!O#mNF`+\ ƮHx`#sEk]&zg|@aV?et)S֮\>UC익=owr ,Z|5\9z^H Ծl6xOC*t=K{h%66bEW Tn=9gVrv5O!ŝC{fzқ. yJT~c#P,.B:AV5Fc7nyWTcg[^e:xn|̉r%<&L+)?UE|;~r~/ou,HiZ̜cJP%߯^9GVтZmAcT]f6UK/HvfN=B!zv֬$w6Ń(ϥmX3Bnتԣ'/P‡Mu*4ցk0ú ;=nX2<6YL{ .\eZ% L$e. Spe!O'{p c,~}S>27 ›Bdց񻧿>>?v%o *\ueѣydTJS꘷@&Y3RDZ T*(@|ViU>m3z$קk( Ln(E:F12\fʅ;+pb0ZZONv?r@m?T{/[3 \biI5 u턃|?mAYd_#Tr,4DP\\l !t:I,.㔌OڸBA S$BOkDb*\VwWc . ,y°3x)ҡ lFZfyT[7.|ꋪgJ\,iz$C4D /re pj>g>"Ipﵮ"vou?O;=:7vXW{7ױTEsd ;-% Z7q }g/ IS1Pcy};VX#t V53zTiW4dƚz-IF'o2<<͒oyZ,t<| 7i^~"y~*dI/ϞM,D T1og\i7UɡQJT~{"*ׇ%~$Nm/mO'lΕLc%3Wz>dS%6ԗ- h3HpCoJ ''We )&̒B%AVr#}SeUЦ7'Ȩ2~U]D82\kfZP#~'3#%E%(XfJAMOKW4)w-_2Lt ^q=0'c{.XT]B`pvMi op.|;jS3ODy^wU~r]Zsl}5Icy' {5 ߲Fj})AP뱾n{غݡVi1 VCMs"6#bGYNȕBpC">>Wjޝ5i#&vED&wӚ{<w%NY6k5tN4eMq=xtkG~V—ov~iw62h lnM]+Qu(f?M&owK|^'C.؁Ik'Njl"7^'j\ៜXX4{n0{kjdee;qr%he;jAwuJZ@0hݐF樚CE7{ީf1A7οXقUTY(s,6>bL}W^X(&tXDF 'e;&yhlxng9͔nȓ[%: ?MqFtBCԶoo`3Hlq ?s$=r&>]'o2QtwrShY%޶0yQ@3v~&~Ӷ E-c'"g8$1NZlc嫰E>fS${3~6<>]Qb,@}Iv6"TLe\?~eD[8uL?صlM/̙B_^v]۾ CRZ(esd&JYvM}#섻g6j:u8c2lyz#1(x&Vcy-u9w[[('3"N)ZnɿIP"Obp|8nIKq< tL|Q[U.iOW,Y^ΚqK'92d\H|]1<^84ˠ)ՖsU] +pT`lEoc)w01K[LFߒ#eZp)5jsJ.fc.xjyo([/W 2{>I6,)QvoL?P}C K$fvJ9~=$ES{o&lY ,ׅ ]o͐!L>F蔛²j;P"*1mXp",YhZZZhvCK.}p0럷}}Le g\?$Y^^F ն19Z5aݺ?_/G{9p64AB'PC2X0=n P"o< ϬiB(q]qzmgKQM@e[~tg8@xN¡ e&(Lm}5sS7!L`1^"6쫯! 佷̕kW'QRH`']^wh fƨ/z@RoLLS)n'Z'G)J.,} |.̃ 5,(M-;\N ,,ޝrK #2ѥ@xdZg9N5oηjmJؙY9dMr(!֝/b\^2MbHg%8`N p_9YrݯU ۦd[!%P&v.5feV[Nvk| RͫER,)@ɁbߩP34(IrQ1.7  j>2ǏEGqacƢlê6  e5M7Np}JR7 U?[.n׀v8mSvw:AE Doy#85=mѡh4:̵ ;r|96QJV͎ c^  ^lrk+Q^͵ӣJڧP{># NgVtsJL/M ߹oC^`#ztg\,] 5g56[ۇĉWfɗGe>ֆŵ\(w nի G=5+*6o:龖cpCwoOF^'6W 9ԚW8‡R Q+UZs1f2[ fyJ(8V@k0Cw!ZJ%; `E5ZCOjU>|i#' 聵.KeĕYRORy?vQi" +}\ {+.7weR_7%T03ƧÀW3JY-gӵ52e'4vEł5gV%v#p .Qs"hHw,Kw{${?BXH#ឩjzQ+d4a5q{vzB؎A:><]7Β5e!&rŵ:fO ҘHÏа2M wc_gIb g /?w2~!- }AР]c6T/U[ ȧ>x}tJP-<4!@`M,PQ}\W9 'UKΪ;toԹMĹϰ@SIǤ '*HPJMIViqsgN:l6|r6HemT%T 1RidiE5fk@nR9 hįL:51@{.צ-n04BW(;7AmKJz.s{gbxI,.ߵOpZ]Y[Or|,zp8#TX㪹xz0_`%}MQ_9z9eM:^m>J6hJ+iQ\9>om\`E eb}oD@>jfMY$XDu5M˿bf"6cO;3lv+ DX9*{HStƳ0fF+0Jxr6Q6} R  9d\ 1n]q_Kcnjn78G q!P.Y[ni :ۉB F9"]l?:Yv뻸vs~OEU]h#ưp#yŦ,Hbm3l(=r8G ۤsָpӽH]ıpID@~kl'D@ޱNS/jwBW9)QӇ7̽$uwUrN75q I 26?ܜi;,Gp,@`9 \'`#_dp'nXCz/.-B4S2EIuX+sD $8ohhK~=G3Ś3* )~;R:kF#`qv"zv@4ڜVC)*0fviE;/ N`Kg۰><Z (v#6~ LO jmm*'f5vhAqV'J%u@>Um#J|`/@WGIyw|zH\fK6a|%o&ÍJ;-<+C:d錪*6ˌƳF{bljELBͷt,cM7 "bbiHP+Cy~/-Tl猅b 2RѸ3\ iQE)>3: U),Wdw7ES,\eTRe-u}бv j-"k:#=N~uChY"FۥCU},=#YoXtlZc^ brSfO[wYI@?#! ʕtڠ7× 9],_>DLfܶڣa/muL"OJ1|a-o C8}_N[̪GZ3ҡB{d cy6x2KjHamm)9$;J3:vtBs?*' g̓2D*e,))Do4R~yYv'^D=X $ȹZ|ߑ6P#i~F7fQ**0S= ipEpuVHoP"ls8|fEP=i |lqjfeCl_j^WI',/qse#0`LyJfX|OfFӷloFif2dˠGHb"h] U2_M 6;E_vJSذ@PΩjjHǙAH|C0̺uWRrW W/'XWkFDkH;41m)>JgZ^Wt;3ʝGj"jɄmқ-J岂$W% YԧcPuWVgx~)¥"ZדG"Po…ĩLg &?96(?'R H: ZD> a5POߨ-*(B'ݸaE |A8 Яcj3i=HRڜ)O^(5t$XV=H7M~7N/u^ƚE>Bo-Yq/XfC~bOZЕWH)F)'N((Ŀm8#.z9)\a=%]i~ @'yqe*e1Ex!ϥۈNhi ] 4")Ay0?7r+7l\Zݏ Q53E,IW 4Whgw6utŊ3@Gy䆘Ck`B!1hSN45}ze9\yy%⦅7~W~i?ܯ$gȒ} 6ף8~3PÝu{CvI_''L&ewK)I ҽ{RHbvrw`lHXI#Yg$%Ze^>tfQ=h ѶyezD5H[p+Ɠz9kFG$dFĜm={1zokع^mX W({C\^MAݫ0 zqiX핐z?i&?&d߇J IBQ/ ~?w) Ԩ!o qY.!sEyU gVe<ׂSEae@%![Z@93b)q]mW01{ <y UX$( ktx}rEX#'sR68ޙ0ϛJ:MOS\Q q#aXLw񫩹V\x :, $v"ȥ,=eÉKF $0ȌmSt0n/$ _=ZCB.㝴ZHg~zSNx놽^94Z"=]=m@0oJˋMW-.ᅌ|P DqJ^gB!_33[&L+T01 QqoR$ 9D#e11ҴJO%me?)$..`%Wapݓm#y {sB$D* Ũ\'0S8:o |QHK,f]V01"7u'U_Џ+pޮZkvM(Hp!u°Qǘ=| ":AMT'`*Ehud^$ԙ/͠B#՗ܚH9f˷ITu"GV!^֌:_7 k6.s?9T DzSPH}LeTBC➾rO\DB۰ElQKړ [X:=[0QPŁ-c.J Sh\f'f^^| l{(JR\LJ)"F)HRuoX,<= '7__pC̆A5nKĺԜqs">$ ayC nfIyc׸4lA8iR5˵WH 3'A/K|D.%_ק Pu| wmn'-ئQ#g$c¼h}_O=›\:%a."yŏVT;"D.@j0(f G4Vh8^>>ݨs+00?Q򏈒Aq3,@ .MAc|S(cP;$*Gxݨ%fZ|Ě2K4Ȋ+ Ot)83#JOf5فT btc#뼹ip9KԩeQz)RrÏ"ұ[+w H&E8'1s%7uCҎ57„?2L"k>&:6D7h3~~ aM32A?J Ǥi.'~{miRdr,DH5TE|H8P.C,OdtP1R=i\ +hvZ:N߱lc{uu"Ȟ1.힧X|Lօ;⸱3ZO^z3;AtA$)r@(r( 9%C)Xg]CpkO1 ɷp,U٣-^J`raρœA>qEF~QȆ6Lة/E&t UEA -$z#;?#r)gSo :ێQDyoyxE\__BPalFͮO,1|7~X9~n d'QG3zTQXO|}L8HQQWptܒKc[O^҃jF$<åN I(kFg [1N ]̻脝R") 09߿$:4ջ礆Q~l9BNqR/6C21#RHzК2)wN+xpBE=-n A͔pi!N.M@W&@Dĺ-n?*3n!=9Do%mrL{-r&Sc~=Co[[-M'CzSRx47ǰ(װϤ;c$et:3.V,RN4$ɟOva FiyLfO2 E|06 ֆs*E]0Sd(|s[\H ^=NbAPt=>SU;(|КF~sIe8 "ٷ b*\m4Dn@IX,5f%ҥk &{3>,²Ⱥl1nj;ܑxCPZvdV{ކ>|ć}ڄu$_vwWw Y3I B}n^ay2ӟ٨rk]|FRRum '<.;CQV+Bcz'>me~ݤ'FmPbU;x^I-Im"OBxHV6^@nykT0:@ Pahɒ$"$8iKau @xc: qP*%H8&\D,SU\!jt] `:8Krn`fCxDdYlq3Rz)OQgDuKBfG76m2%cSkZ!i?1H vDdžmFԛhktb|1gLX&W՟b bcSb`hBy[vS:84>Ljj#=25s4Z0Srÿl#C=9mNM&Nw|,TڪxҺnC ]dt%q\Kճa3ܖEovwtھ9*2TMT'v@[%b3 ^(:y,ض'_o=$wJ5Dl]T޷ zy nue[{+WO],Rn;O\yue6 7)HL4 ? ɓ'x4ED|=|O*`T_o_n!Xx>>qX*H#d}C.H???zPi VSYuՎisΨ,/£Α(K@2G[=T2iu^Y-Si%ĐYf>6)13$Vp9B gBsRUOt#k\~lE7{a\\.ŝ9g:ŘхN`aw*4|5NnJ^lU]Y@~36v0s{ s\cBԫٯ=Q E[RG>_ZK*bKV"u5<+qo[164Fuh6۩K-N=[ {*`z)FR\rFˌ޹VA4տ-@ ɾncy 'K_#Mi(#=*wq u(t6s9/@Wds cd;nQҋ)mauRnMxqժh1PIת76l:PO{TW*gܞ6c%І k`Bڦ-4??tH[EW*MpzًmPVSҳ ]0/]߻pO ;0>YYQ)tN> {Yl֚lKhN az 9v3"ԁ:֢$`"4ܟ=q :)x}:"@ #VL`իb*z[ȝqdnNXZ`P^8b/Dg<$Mٻg['dJ:e}V&zn1g_L@976Mcc|ԧXUf[>')B0|x^8W^JQzq %(9}Z'ΨUq.v*F6zv_;R$"UG9+'ld@_ȧҾaar^˃UHؾ{xA k叆TX+;)3 R_bJU@:Rޛ GIDG +&0܉b*qj).%zb'/k;&[Np ƗYv'c2 1՞pQ`шys9P:tw,_$| XW6pǢQ$ p Sީ=#BTO'S~+4CpQjA3t%5p,waJ'A,l,`PہITe,%81%$F_ B&' %EXpbʀ(C8V,/ I!w\MRvbKV]CP)]}|YXj4żaŇXyRۼx^+eL~q-(+&HBK]=|n;*4G@9oP4X`yRMqugUk}FpIF9EԈ%.\o~.DngI2O??š+;+r8%%!½ rH;챽cf}u!ꎂaT$pmLfdžإ2"z-"%wKAg^Ռ$~20f[v=>K[-[rDpB7\}>|djbg#]iQ]N(x؜$Lt[%ځ;}LG_AeVz$ 4t3xY 0/,\uЯհi|}%AV;HX*-V܂!޺`yY#8OkE XhW !RkE!#}B^nHZAܻuOoy -J?9Kzv ))A27|W7WCM\~vfn+Z8F/\KTy4~Ұ չv R8IQܴ7`>դ%Υ]{b#e"E)n Pz|rVx4X넣W}';7fXn@Q2vԌTҋOL~ #G}ԽGm^@6Vcwd@wxY=Y6k^,ͳ ϸNk޽ɛ9^l0D|lM ZHTMaQc|D͜VE*#}^+> LpԴJ#Qy^:if S;IH\0c{Jb Jsc9r`b ^V@+>6="٤r`؋w Sp}#ɷsil-eDE^*-ߑÔY0f#?mFc$ g%ItےTYcRhon 3#RjHke┳ ZOITVI'$h'uD7b b|4쏚 zQ9ip⨰  DnZw{M'g 'sq6э>ښ /ʬ$g1Vz.F6[_?on:YP8LjͶy>|˘>9w1?KvLH}oB(4)`SYӍn+!n 9SLt$!sJOԝ ֧=姑yZ%>n5lnjZq4iR_(%lٲ_}fW 56 JKx<6L%V+ z:>_Lڊvo$gl- uPB QyQqUz#gA/؜C`m O]Hjh=샮|CJ3Lh/ oW0x@:ڦ?ҵJ 5L&Q֪9bEd^Q _F8$3ntUO@C{j2wF|lk# vn"U ঁF Jhڦ"|y I*{ɛ*iPA=(h6|ׅU^fNath.M2/O'+ԋ/-W{ק7-V kͪNğP^˩kSXfsM_H}Fvv:7T|ҟҽ1K>|Gxo/q p$tҀv+db8YO:cti=1> (7-#iy4'LgVc=q P^Nkp^=scJScJfLRg  a '߭ QR^t-TΒ5? A؀ g"lx^>KW瘤kL1&Xۤk HW#Ʒ rn:b-/#,:qdx:ĉ #Lt[8ԍ)PtEtp"ty<YfXڒs9gsv:i$,aY9($ ,!'3\ (BRYyw7pw79z 7m\\(T"!rΕNF 1W<jy` .irpsp$aD.fAq*v M$(4jq_Ô+S0yZhIZCʾ/ˑ~a˪lM㇡鞓2Ck{K3QۍsehKɫ.[[k+T_!߆P`aVEfk]8TV+ޏƵ_>E쀣q>#0N. ,EbN!4 ѢZ!-4%h9g(8}W\ Wh(zgP"![1J]9m ڶͅ[lǮ?4Y91]f߇V92yG T԰ #zPϯM\n{M̆%@&, b0UC|\/7}sQZl1tN袳r^2ɳ¦^gGQP~$쫠O/lӑ.:ya|k yFZ/l5hOHCqjfܷB NNi04]XلSAi5Za樘ޫƎB4ҁ JG$%dRq+.lwbLPf. 9Ok.U^o9/tɝh26o&PF\K9sLV#\/6Q`d#2ɪ[x@Q" !^A @Εn@l7Sْ`{b6Q}s0)AJPg^P\2Sb+;V״ Ȉ;/y: Ě7s12v+3DBH y]$a!u{~Hdj/1dAFKÿ}~![gNAG;.M#zT3zoAek?)QK}ZQ]JUJV j ni¡WNZ'ŊX}YZoJp=5k!h5 ڹ/p&0/>z4Ut EqWvc÷eB[F s!,1a*uHO_l6GC~PMwZWi\s2ӿIxPkr)1 __SiJj*/AD2bScȯ ^ܨ1ą{e,X*oϙ?[Y X͹PQُ/%\JGEr 1~gTzDi!:IP1`!F^d+;)nb$JҗhZ|a> Q(HUۯqGK4N! ZiR LߍX\06or^l&V(f4:a]r)lr1cYk-QB@$=QM?1}m O[KjƓhmkOgŒ#Bvzv1fXr olo4)Tڎm#p + $q/] " #:|}ޭYs5OQ =1նhN Ty<% T68S&]e#H ȎM)pzsaP|`Ð-Au)kIBTV#T"54p^W7o |}&7ALL̢%GUԷz XXsXBpjh *$yWXUB17Hhp)Fȿ縸=W)C]`ƺ:Jg7p\q.#Y]ᢥ}FЫ7S"1QD;텋zBnK_Ce`~m4D~xwBl˜H  %MŌ#"x] tO]&2kNA0n /-!c?A>p|-^rrD2NPR$PW"RȌe3E=Fg1oAhP&V:П Sh^ @=;> 3W~]s:o !K] y_/YsNDLVyr X~S3dv (DZslU>h_Wh(dfJHLO'*E:%ɱt/vz8e_giۑ ׎UTu- ߉ƃ:/\/*\o`F_ͮ'&vم(^J|<",e 73C_@<!HI[8   ˈҷ2R4PP<~wvtڢZ,wՓ;%iOdtfh@'՘&Ɏ];L0؎:[Vlp<3/ s PSU%Ѝ_28n+ַ}6L(#]ř#ߵ% MĻgK>!( c㦧N`ItR9sZ@ΟF@~ʫ;nV?ln1 7|:Uҍ#d,;ɜg]w4_ O$e#|BS}{shĝ?Y!0*KFy G'.q3kfp̊lj;yF |$]bTIǂWT&8bQ be<ƵlPZljDJ(Z[m>%ctdV0 m*䴏y%CCJf'mg(6ΦPږE*R|YV'jF@Y,@Anpn2nꬻ #]>puǑ[_OpFg|"҅kAdD[ }F!(;}@g\V'125K۔ၧn |/v.xBԞ3;4]s!RWM>}(rcRu!Ny1ba$fݧ8(!Cgqؽ`Y<"yo(*,)*$~,8ZQqeDK.j\gPԳKKɜL2hs'«;D#KUL5K'714(?q*ʬ˃kwm./1ۏDwggC(,<2eV`}ӛФ8/c='W- 4U*;m1F[ E-ڢ2 |Ȯ\.rYGwF HVԌM/xhɤʤLx5m-]ld7tUV*iRǶDR~\lw0ޘ(Z[d#79f5mѱ֨ƭF@EC' 2>1KdH E_">Q[+p㖪 kQCsnN],p3pI\ Dl6F Dm֌OiGG)ϛb%[:dW><ҐEZjmG8A%ӶoKboDFFC9dm`<+C60#a'Wn0^:>ƫt9R2NXLr3j[h e%WG\x`9گԃmmc{\cU&g917vx9ob/r jϹB jnf1i]hhD:п. z D :"lmB)ls^6 DgmFV Nu糔ܸnCSpKxi`&. AlowRHd$f,1/s9D;_g1RZIP}~0+~cÚXyRpRnmKVKbEڧ$Cp8uSjXl.l͗8>Z1>*$;Gr8^\.+ d'{O"ݰUˍ"H)X[j;w3)+bbmqZ8h#i+ЅۮK!zXK㹠m)ȵ NMM ~^rI%8i 7O i.>[֒x%40͍ĀGha'.K! w+x;鰿qL>!ۇ̶'w\-;,Oܞ9Aή<AGT }T#+ zfb} |a:[RX(%[O 4 ?`9Qߑ7:KK|6Whϊ'oџQ/t\5JF c$)1L&0*hxA3e(ajFJ`uj|7(m|qqO1ahU-q n2ZGW= Oa F$ԩ+Jid;\I~[(` {!w\xh爒}"'ب Ny*imY8À뙐Od'F(lrJRsO-kNri=5%b C]L*FK0ora+0_-Z@D>`1)J9]Q ykn;BQn_iWECu/zW$M`"^d![\UﰳuǍk;Gp@2HB Jd*xZiZ-(e HI <QE}*IOVr[CTKQ\Ǚ m:{Qa_bpܮ 8-K0X֛u.yQvz0FE甔}~{<'6wA> uۻUIOZYI $8{&[1@0J!&` Ԅ}Xw +H+qZ`lR[$a\_g)L2[H_M-v.קU=Ճ5n-{HoTz}-3oU|sGBTluZCi j;7PDݦBWj0H;PW^  ȱ`YlLh9RagYÛwrvp@5%"mkTx#r_\n騜CIAtl ~Va paRSjJVDKЊ1X`/+rQiAO@Y؛[eqVr"K+u9KVQlEhJ*-xME8nNUӷACᢴa!M@StQkV<*E< RfR]"S6A"UCt/IXUv 0GB5UaOLp P]%)޿Ζ1EW^'=V]>fv*TYih?rI?^v4x~øߕ[T%꥟͚e7D <7!W_ I-'Y c .KZŐPyF:䘨Asp4o`p<M# q `6Uȏ FϸW\YS3aW k8ٵ |&SQfe5L Xjʐ흦p Y&#Wwvq wU!abJ`;q+A&I GV^sloYA"2LS :"bζd.n| 54}vZBsu;,Lp;c^oe<-jdIF1i ?k TU 4*Uu*iUpaP5>Y[V&fC8;s?Ե 8TkO02Foh jh=Z%zr>L-`5)9#k0} 0 ڰjJ th,b+^'; V /.(%e%A\7FÃ3t]j>ܣ=3[ *Ё1a%.& Q E%+@VjΏPb[i/Vqo;1_lEg>Lސ9}O~5$rdýTThtIF)A%14Pm ; f Z y&\ѿHb{_$aΎbk:wq戎f٥DHt&v}b:'^|ƞl٘iY_Բ@*qc"hޮ8H"☼^vt.Lr** I-p4 Mq\'Or/@I ~^rW=ßj#7}D2V,#33*t;&c>\`۷W2Ǿ>rTTbBw<2 jQxhB'ndٕ28^o 'njT27ɠ῀cn^foaUU݅m\ ˰^1a1wY0HxZ~7p1jYPⲼd\ BFMd棊9W*&A+.6kL}*:]b5 ?|@ˢVRĬ+ P& Xs@}_ @^G_5h6M"PB;s ۴0ۀFVNFiGI[v>CFn~TE\!1$Lwi6yHӆ̨*WjX2|vjWn|`2 =:΂֪g߹nt]YC3X϶rx~+ :ĮjnFi@@˦c."KGDrNÚIh^j85GyM|<":~6ytVS7ZE;Pu- t(,Q3+;y^d hzoD蕣:/Hf'hwɸUJ\V(Do(.,p f4l7ߜnlyfb o#铲evpzjgRC>8Š.fܑsu]ˇ 㹰!;aGFw1u"d.~A#qm7Ni.~!Vآ 1@㓞 )g <ܿ;L !4-(s V^i1$lJ-X{]n69l%mw>B oBjƐ]li@\v-sJA MsOzeX^}+b*d3ѝo! V^CQk$z:tȺ4Sj޺o6R}v8 Xޓ:?KF}? dBZywə6G;S4",ϖF[24YvGǃE}jh\YvrB/T8b3 +j:$i -w'_Jhrˁz宴׊B#~FCVΖcLށ+EC4}&7'jI1=6z ?I5$` ZG7+!r~Z`gJ]ݐDƄf6Y )F"UKVON(vdbjt\]RJ>WpeժK.$ +p_ZlNod;Ϗ"c+RY!gqJ~kO}jFczN$䴕?uPq'9dj1!_ W<݁~Z:(C~[@̎b^ǥI O,v}%LC{0qx K!cCԕ#@p1Y #<k#(@}[?rX~QVWᩃ&hh@:SY7Wp/EtW"2jda3׽\©'{JS&ŨERblI3@f;0dipN֎aja 9jZ=d>i9ieNYj1fn! _|Y* Z1OiT؍U:*=۬Z|?ɺJ0 [u2p2Avj,''z+|Q݌p! 6X'\hz у3-B ,,YPPH#Ydˠ:whb0[B!D%a@j%ooe@\YR3yMOXO(,%maFS yD s"ڀM(R~e;&q ƧobnI24NF#]:#r<~K,0Y g>GSf546a}_=#M@r@o^c$oYnT=≽28uh*FZ igB_l70Q]}|!ZJ 7<һzrGf*v&#bg@iZc%xK2xtfz%5&CM>T1F9[bdM 5!huƴ43!$ㄨ)*zU߃bh-uV/A#^Q3 @ƘZ7ar38Yv9֒}A|ftOc1Ɲb7)vX?ߛW9l .40U.ae6BdC9 'f1|ƺ)1 F~k֟sH@'maޖHdT1m9JPtw-諒V7ЀIҟ'6͵QX'oT-kÑA&lig$&fAy|C[zPfKe#eZCm'@gw߄;J,5Q.5!`h}"g(Y{9K4>Oc6_e Hf L ||/K3B?+ܦe7Ӕ;LesU0c}d/r@7yw_{RSX Hyw(TAfS4c^%,Q %\}_ MM{CX+\*a\p烑v̈́Qm.Nt݊6 Z;T #/fIjFyc8+.xqFcP[%L\ƦآB) yN!z?A h08vr T/ƙ`81($G{[H;jIOa: Tl}5Ǝ""H=vߎU³RwLo=p"ҙp nNTZO9׷r BUpu貊Sl{6qzVԊ -'B;߯hLp/9jK}ƥ\«Q _D  ou/TuOIrd=!:~5ELEffgM'\U7x;;zXk90ْ ܺwh8P}5nO0b?XE dČ|+eB3QԹ8֠()h6-h{ՑW*ۡ‚ᵈONwCJ)H?]I!X~p$AxMu<蓖XLpOĺmU{V?Usﬨ&H>׊{>e/Hc$DOC:$kZt>HGqtȠ*kO/ 6;UC:In ·6S#t@ǩfu s=vgUbw&mTօi8$n"8GWn.CQ( AyZĄ}'447khUr]>=REkM۪#dX<~['6d{+ )gSba V&'=28]C T͔ץ>T0cPڞdMdݻ:'򬤲%1y]KqU JOƝ[x)Hl5:B;IO_zA-oHՃkYK>}dg t"p^͝}.u'lV  ڳl 1hd"g#Sd{?6wW_paZy·DKDw{TOpirD,:Lf#%qB `*f]H.$E_I sEWNXՊ]Xzf#!ZVC6mM#g߉@Jܬ[!iX1Un i,ZF={gwԚ(p S@/Lfxo+*9 rVo#!q뎛5)Chۿkpm_.r:`s^NW=X3"~̄ŲA/>?Wo9~!g B(N8>qbH˥"K.#keQ.B ^3 }::=`V|q av-Cm(Րa~{7wBYIJ6a/s *\3^$UBK/髚y(gڞh_$ +W^D9ˋ[NJ{yٴs"dZX4iɁ 5f M L~4(VC*=z/}NO9Rӝe`{:Mǡ>" M4ܫ5C ntω# uD#51-^i\mշ:1#=ɸ+ v`Wx㎅H1Rs]TS?}]@|ƃYn b r t3p%Hц箨}U]^ [2MIKX{ lLv^}4JFxV!ചnP_V ʫR]gAo6H'Q85Ȥ۵QT9/#Ay^4ģź 'EhP {^yTcvv{I7fst%#қF m:(hOw^ۙ=ƅ ~# #S( t~AA |.OPNÕG |`K,oiw1⽤㣯O;yW-nCV2 >5+OyAJ^k^sԘB-^["?ՙbA.RtQrآc@%ڌ߅?d<ʒR6"&t:Ă: y6}JIPB3_qU'u..砡~`G2J`jDef:TbI`ϊI W""Џ)H=d 5a1@~ T9GR  bioSgǽ7P%xV5rZ˰2\d$SXNA/;B|%tPs £ t?iE](|ir k0/鈭mĔ_2)tMN?jm_#ǡ/ 09LXL]"?~{/Bo"Lqf2UF#;GS2VCaBltq.w{Af!]#EpI> nVHۣ kT5m/uTJ ;Sf8t8\d%h{#.9(x WDoHZ8̕Ȣ<~S!EO#~ZvQHdzA-:_]i^0h<6r p f8n%[BsCn7Aʋ=c/GJ5z/SѶ́CmlՄ!Zk0(W#::?7sGãи~@^u]<[: P 7U)Y8Fq" F1Q6kCCq)2q/><=&W_ٕfwgg)A-Im wߓmZS9kJu;ZY (%ue*W؍p5Q/|YBU| rTcDFL3P/l)7>J ;Q(AMXo0\AӾG:9[Ъ&`mqW}/V8+sˤSURm]y.[3wj *[e" І6 -j涀Qpn0Lܿ b=d86O!׎LNѠ|!0Wjrw!eaxp0.N 6y ~Ns$hURo|ŞHU|1dK{8Lcbeys3K艪<[cNxV- N巐Fу@2YFoW6o~!SbTgLpCMkV ˅UR/"!b:؆" hXBf~r;'TE&6;U1cQo 5hg`)@R%Mo9 kM!xI!ًKsio8VpkI;NWdAjyxΫ0Kŋa\Y^ S Y'Lc{o"WəJ e'S qZ(ScWV̹'=J{L6ibGC~ )?i=쫡?/ 9* GW>ɨ)"RJ:/MGT]ed?s'k 7I4e/8K=4^޻xSh˙w3R^{̸Q FK1=^U oMe;{uNm7}^ E2'AkOHUƳeE/-, zFB8`umXUfܗl*]fdZL#)NEZ"χ!c28YPwLfL7K |fF.:'9a&53əK\9'k>yßVBqbMl3o3s)>azf*h03i9-b)Zv>(FmUG ܅fҒ4ǥ%P`ít2\{v_YƲzaƉ2}~%6w*{ݟu'ti-Ԁw^LX QC3shKO~r"!(jq@k4WN9)ul`cLrɗǣ&:mfUVN)\wVkY:5$PR]T>I}zU- N*aETP0GwOhshx+ύ?zf18N@h ;s"8ҵ5suTŦ HL"X/0TI2xOO< )`]#4*uOxHg4U°aVL$=H`k/UJ 1'0iԋZ~M=aF-g\x"ʍ0kV<QTg_vؼ, fU lxMnDxEQ&>|^YK?&p0-nPӠ- /6} xBOsKD%,W3*?>6_ kC"7lIu@ށ;*_ `!:-C3XGce.E@B+MDuIMH(0.EZuQ56DJQR:Hg9\nF5*7OL%r=ּCPD)O_c<"O)(9_Ȟ"$D(k̋rvl>/EuH$I4G=ҊV[ 5 x dMФR-fBSnˍE~6M #=_RI 8w^V 0Ar%TucJG3 oî(q|*VfÂ@E@@Dn9P뿤Y$T-_84>w0kY ;Ma~{]L opLb;O[餸Hk/@+@ڷ-HSɔ_i;w+KZ`c[$>#^(%v!;kxS=Sf<#핫azFQXwQT5On 7hx&߲ CMb͟vZ2 Hy[ |#zkDTđ47y!hkZy?c鑔ܱs+iYYdBwfǘo0`Z_\~CTMOΟA<„!;_Ptz huo%H"{oRͻ]@ćq\O{z(9ō$ wBQ-zqZ;KE4+Li*?y,iI#/f Fț8bjXQFb)2"o7 %҄mvAdl6H%>GB;(.Gh <͎l z|\ȵ'-r)H{PXݦ馜"'o!XkK"7`_Vtr"bC>o!N@ ѺKeD9&eLTDXA8mM$/cx6I0KcSWY%]ZjY] -_ o&B),8g hlm68zSN^eAKcZUTjr6J1!8fpY :ˠFZ.gZKFH·!S 2IJM]7LW/PJ}A SFEL8*zRCc#K\HPv+I-7>Ɗw@>_MoW?C,Y 0!;S튚Y`EB(3j@ExyM. Yaz&f<5Yk5B>ҖӐNKV}m:@('_/eВ'#Ʊu)ɸMJP~E=6P̖x]f<.ث6j,)Su~nϿUڅ:GNLn,R/$j ;#@3X(7}r(-q?v9徛>c3@[ߛtyc[#6;;pJޜ fAe~} 5`.I9d "c84v&ɤަ%!% ׭~0 ;xR}Hp <w]FwJÇS§bĂI!`$iy<[: ߨ2/7< +8tRq#%M(v^61 Ά`4NOK2u [gDt8ͣYs;jWPqw$qkTzXkzv)׻a?`jsu7CYGM:R}",@Ot̋%l(.[z^aӗ-T<žހ fa31GIrHQsa2+A~Q}|'xA/4aԂ,IƳAI6'; 9vdժbP-.]Ukٞ-LSF#ZM?ތF;YVDW]bgةg!k{wC!vGsz *ʶ" ъ_5FQ`h_+MUvY`w#=c;Tx05/M{͸[\iq;Gu3S )ŊN_<_N;f^0#VabUcxƣd,vLUyA~?JhUƤ0Ng\QxG~lVc_^8qYl) ʬIfVFSКg@8j#F2A7[=)|,ݗ@}a}Z̽C-+KX؍K#lWn bIn1͇L9?U`7*Jbfږ~͔CӻDa$`S #`x5yRŏƒ $[py1jgc^jG7QЄ 6lٯ CiG,C&oAFEQI2h''ҳB>@|oEjLWV̬0+QvsT쀣$mpÇlD;0==׶jb<,~~5 +5N9>DOt /egI-B';Bu*Fͩ!L-yaWckz_ZLD-!|4U:T;SeΡ߿Y:(?H|}ʅo>6hZ\~2iWPy ö&lK['v'dF{wP}M4 O{Ÿ~[Y}U/7{ ɔ:L߱A@^>ѢFSFTp($p%Qaغ_ȭjgє *" RE,6ze!ģv e=r r= R bpwGi-ސȏMK=1e[ 9x9e!BLN$dڊZxk01#8ie VGGV.%5y2CYAEcf돤'%&s-.`웋K#űZ%Uy+2q# Jr#4bhGۙ_yhvCslΫgzƚ Є[x͗6Km TmNVmcZӱS= D WQf&vD]R?O}eG{C}]SLv~ox#:0B=4> [ aˮM JQ@>HSKku L u(f;OgJ"l+`RŷSˏ bcg$d8Y=üj1erncm`HRtYT5Ze;ȠY 1e$8OϦ#c{K~'vSuq C/U뿺A=b,8$W݈Ө5s%* l*t#[y,OM,a6!8>5͙:ğ*<U*dG|ÍKy✪Wt$8(CK?p-hXHS~J"}ǘMV5ARY(T:/V4'WX M/AQSELNg'v*H^mLtw8ТM J05!30#gOG*WKh eoh %#0ڮrT(Y0<$ڇa&pM)5UNA,*)[ Ie5$b Omujv+V^+4px2SD-U]\9 8inW}O_S&4kͱ͸At֝7S8N@y֌4 6@fi 5XLuY{5?¦#[L?~`6,5LrŘh9 h]`Fe2?!@qnr=Mlr6 m&&$䳛bQ;OD:r.q|;a PB6@ZD]yA܅Q26̃q-8ØcxHjPz^Vc;vEt3uʀ\.QhދG?qF,%4kh퐕%FzO{DIQ{ք ۟_S2.¥)eD2lJP`c#JD[rE-"Ekpo:T̜Ph>Hf1[h^Ʉnf1z\\X+#/n苨 ʢe7K*'Ŀ±8I^K{ua0Y}4;NaP#^=IwJ+Mf$),% &zmhd".Z­ߪ3"IZ[g|Ơd$D;SjDԵf=}簱v=l|$D/, ոjǤi"[~.]rZi@g ;DJ#+CހfaOTMڷ[p |uIM=w)/Tkc^զd5aڂE\Q%Ct_ՎͲIcUVy^<և#[d%uVLhFQ+nK~&8}s**(ԏPxP8"X[mkL#IjR!BLlj&C e{`cVdOua@;\f_2 .3xGS~#Vtz^>MD-Q;oV|Gę:A[pgs| ^En? iu}&$nn4 T?E{>8Jg/靨:zUj R!^GH\FlsR1P)"Y`L_$y)Wl~PtU2E9#TNt?ScEutf@  I vq_d)uQ&=a󆤖kF ;;:/Dr׋ Z[5* hcj\#=bhu8D<8{v;fpsJ G5<7 tc9BNcQNPwP9} $,hU ᆢZئv|dǐ-*8#9 |b2Vv >'Rn;([qjbȘ=4|j!z!Έd uf/sL´ɽ59{4iCS)L6i^ŨJSr%z6w©ZQkoe3N!:}۵M+4lyQIɖ %0[8̎KNE ss@[ ͤ ڐ2Y[ ׂܣ ҕQPF rWa(|&uќ#;Ʃ/=piIEżP{5==\>e9Irsbƒbpgr-CB$c|Vr")O&pYv^Ddlզ/!%xv&n0LZ^"`KA~2iCI#NU'bAd;a}@Ik\Et~ZB.g5<6@D& ݤd:#Xm^~%-]OJ̏v{}d]ߝ2)XN>62Hʉ :[P6' Ӈ~~({fR3 $S 5CqւFt+7%ŀPIم#v24Ra'aթ`'_FkGT6QDgcŻdDn"}^11X? d'{o 4p ;#>~%⭃kl <ǂ~cq{]^&nk(HAtFH夬}cmѠ4JP]&ƼUS#(^\ _{T[o͎`<%K9vV^1̾TmHWkjA3Z1?K6bƇB&2f}_Sj6`Kz|uQlڦ1)FщEy+Ù4 OE[eu4Kֈ.}VE/gQx%71NPOc8zF>?}G6\@P?\)Aʼn{FTbarkדִ/t<I/4b=eLm?}ŝ^T#M(!MEKPW?6Ɯb ˴XI{IfRfQMXBBe t=^\X?|~?+%ZX=l,F_[?Qۓ.6amJUdWD B&\N/PJd6ЅPq0ՓCy-VU)th6iC\~ur!д.IycAgF7i g,XcB8|u PD<'Pי>C@O}1wC7e-0;W^Cި橃gҍʳe5ؿ se(ۜ I_8rҟb FTBR\ь\Ad[7u A[Ec̪Gq։`m 8S:pV9_4 #O=J3 ;MHt/ѹ(^(Uʠ$mGWNK>'c:}BTƥL2$UktPY;_enV tgn}meuLLӏ䯺00؞CRRgMD_l5*xTNuZ*/01q5m"HY3rom|:ܶ_y@SV2쉩-Ud6xc,}bT* tYT+Ƒ2ofjP>a# if8\3u! 9Q:Cf¨y[ 7#w~tWedwA,8m!vB 'Δ9g,$+M< K҂f9>( dzKz# -I6t7ElwQ*ӾvfiZvz4 "E6)Y=NCy=#(<ږp/_FJӈ"H4Iv·V'vCjx0~}VV9D&&(Ԑ$Cg|fJh3d4|bt3wZ˔+fy.!P],l)jBO8G;b51O^|?+a6 ՖƏ?T}ހź/pvYxgjROEBZ&( Y+$@H>WsOҫOhԶgy;)!7^qOh*{`v>M}rG4j/,py5 |[:AvNZ@88,Z0l&C|2" p* ~wd쎩R\f۴,606o|e59[-ؗMKJkzf\)+BY\<݈LG wÞZB9r打 z ѤVMKՎvWpDͬuR+wU:_w@E`IZ!}=LZ_ލұyR@*_bu'>ܦsD@+dX=ﮤK?a]~1ՊY_n $rפ2hZ`:n/n-JÚ4{| b6jyfmZpPE]ѢR-.*Zʈd(z;9Q.h`HP;ϊ  (Xc+qg;Z'|-vώhRg-Q趜(1jk_ھYRrpEͲ]#5` MST!j5xOrԩHvʰ`,y͐ XLu=MKN-}Yf7PL Rz 5{R\ N>PI@~$LRu:/.$LFM&ӿ$ET}FKUAc|&(C$ I!eńme^RA{nfN%N<othòcr&FUZj'V[aUboʝ,8Y5VrO ꈖ|YSԕtylff Uɧa0"DC"HPZB6Yӡk[` j< _dtM^zHa`U\yU`E UYD+[;O5E&}T` ^fã{<%bjqWkɪ)>al$Ug횎=V fVuCn=UJVCYjA6"C ;ȶOY଒1#3xxzb˫p u* SLY[kGQ.CH$FS}H 4`d~ݲSsv;dv:YH²X#5Ơ3 K ps2u摆VԤ7Ӕ]y[NYдEZם^f:/=T:[ОMP),sGvX!Mt$wLlfROpygPKEd6[,vbjU NMB/B:#miA$ S#؁uQ`ك60lwi[;SLI&PgG TO6YɲH;CN-C8k1dk$P<6B`@i~.o!s}5Y*籠otcWfh4fr?3PXB]GAkF>&O SD@D\`$q8* SR%BΩ3KSɞC^gI5Ӫhۂ3 ]4[ĢH;9W@Z.=}<u;V wA54).}"j1BeWG&J&yi"1g7o{OuJ?+0V&Lya\˗ɣ}B_QfE5+( Bnغ/f-0Kaʱlxv8. a|,|<vyTB)%.9G1h,`*ܳ-c"&v&}lDO/-̎$ɜt n=1j<(Mjq1R! KVMD5/3v֦X)aʍr!Bn.&~,r49.ה>V1i]GZ|a44ţR{ _?v\-{iK#( L]9D!kԘj,.TwdS ؅'+L;& 8OygkN .h/sPB"#9y=m&33'w{gAJ/BC8/f%1O,jxHlZ .DO #1!m~js2E}ok-4Iz+ M3o^iv}>ʹl9w)V̶maYE,O-&^V 89μVQD{Nv;pΏ(q`!5Q*`_ν$%0:SͮFW+P%;ATW$UAR.>?J%+o~)6۾)X2~ݽO*e)6+"ljx@Gx/#`UjD`6c,M^5+fԿGnq$rrbȦՌڏoӝ NG!doͨbQ4ր4nHh'X'LŖ= ̟zWD/'6q*Ԉ[`EKL1ABc{m+`}(ojү= $y_ _q(;4rs_C\JI#`)݇;Ok B58rΑ__XbsSIdCyk@90ߨ.[c%V{_4!w Y=n;_=[qyVS@#ɋJ]HKBq4O^ ;6RKko$7$|f"< Ei]. C?0'MRN4Og]?NY,Xos͕NNKOkkph;44rZkk4w'xmM>>[nDjP̡e F fz)u7@2@+@? P0--L]˱w{`Ppؐ>9xXfկTN0;Lb$tŝesɴe6R!jbתi9!F?z9';-:=ЅRI K1ACalr.B,oȵZ9'ק"J3D@隺`Y'^m}EKnT.x`퀡2o DBM! s1h5ϗho6֭qMKej"tOYd_~9vtCQ7VNJ3wi5,m G}pRa `/V[@k_1MbryЯ2u >+;`rޔߝ 5uW͞irL[qYjpMFs2sa"VIO6of\:j/%|[RP9K=5+*Eq>p~=P训Jw>49O؀cPj?aA Ԥ0Ď[LR#+cݔ&!Bغ%{ "k+{.z/jPU4uY<2u>/=x3}uȭ>+8dTNlO5.flAX:TOoZU`?7 t]Www&-['zvZ vFaq+Q ƞ덮,zϩ;ƕ(#,OpaY6 i0ؗ4WonII9WzRI1ߑ$!.d y/yOq]-!TV>i#4Yk&"b?9TFrM>@N/0eSRzJ SKl6 k*zn*\T+brj4 U Tr{kD"(>v[Z'{gRXELvrvwu%po6wCfWI`cDQH@IglfFj RZ[g?85 3j{,M.%/pI_n h?O,NA$7G6#Qݑ^cx-rgZ$7kBPb>|=ӣI3 V]ƈo0/,QױT:wfF~/ٸSAIg0TWʐ.WE$fK0-jO9~%$05b)KbFQAjOZKvqd$I1O}ei2\XDgIF~U*RzV0,kt}D^EK&F=F^DҵnShGȸR[t ShFʊٰ݅ޜ9}Q+A>(v:/OɗZR}v"hKk<_qgn?{ESVqd^ 1!o:Ō U w/Em RB.?tӵϻށ SRb6_K&1 e ,k1YB|-1>N'Xb@ 2vȅ4AQWz7=Vd#]\^i˶HwdO%l B4]Rb=N¦ zMrΫ9X`qڑCƋaW\DjG}$A/Y x`FC5;bhן7o?I9Y mͺl==W)yYB}kUP AͶu}l]!?~f\_!'ޞYhn,\2m\9W&3jAbw|+? 6SLܒz+`eILdj@2a7fӐ$hX%{S]=J3@k$5.*ei uoY=.$>wLڔV;##x U9ekm6pުm-W3NhBk3uNg渔oDh:(v=eKeXmܯrFu?S" *%@ ~GP*Y o{n:x~8QzPg|$#1|}yvچ]Ne;|oc&XHfʬ)ܛ ~ǖPI&qlU6Ns_;Б :Bhw0#FK/H~L~OWt^XG]$&T.7ߕEiq0_`25-J N>:KgA,Ķx?I{9ʵl+[No+"`+`))-K­PߑDaP2KEz ^ZsevݹCV`V6-4`o:b3Z47xMS1h?U?P+~"#%z LݩLOf,24Wp ?lގ~@Zĕ!En[FݿKN*70R39U> ] "b0,[c>Nf| dP<IZQ>p|,ث;ܵkπib[Y-*)ݥu ,EL2H"Ɂ8E,K"6z-;a9yX,kra.C- BKM5޲W}lp9Kf#g `=֪!`gNm1خsT\K:PBh|hډXgEG]P [_ h?Tĕdߺ-.":^#]X%r GA|jG)f:U'ǙpXn /鱃M %8tRd6C/vsDDQV_` )V^h-R˞bz[;Eb1kqbc4c&NYY9'y1O4Q1]nմL%\zC0'ZpU2>!  ^^~ O4H2Ba2l}KZ7y&&5w sz:Rϐif(*=<9Ʃ% oBx>d-]C?Z$Ԑ`eRʛ ~bfo^piS%Į?0_;84Za5΢+;pӋqa=f&ϩY$c}*'ކaK]Z Ue KWq^Ñ*?7 ,m[BScJ͌H0)XK DHOwL <0RUmgmglvTnUT;D QlE14{E3$^%dž׭"L]~}PJjڠ,Be |]n (FHoTZ]cJsf&_JĝN,Y T@rU3+Sa,n{w2wA&)CٿNg~+L]F&A@c+Th?I& s:IVrHuذ㮝 4>WW3g']' X̳X cS͗yk.'4#䦰\wNj&|[µ&_Q`mJcNԒW4xbdѺR[;*B9L Hd1+3(4 |BC39Fru6I7y#q1hFY=fp};,%ÃE 3/!"'Zܢg8FTc1gW&zJ=(Քs]K/ħ^IoaVWܟC[#]jʼ6b8^QpIoj2|!\W2bNߐb3}p TO[]HG 4N;q'onq xW[#. R/aclIag`j5Tf}$ Yxdjv(@@(EI_;TK cy[1(tU&ɻҔ1=uz:(T2ȷBQ}?)h+׼9%mĒ YqλD9B6zǓ<OQ\o8a=}bs1b/%.x ,CVضYq e2 "=GE&oQLo/?awH)B^ NVNn4YwZLH1u?1$=^"2ߍ{Tw6ʱ33$pl75O+?;Iv q"˲3yvE7OJ$g֯ 兽1~nt-V0oW4(=B`X"x8 WgY 3kcd圕ƟE|)ҳ{ѴE !wrA3{{!3O ǸLvP7( #< pwLcJݪɃDf]V& DSk{0.Sˑ\րf4!蚡4K;ۂ ?2^˖N) fWH_-[6K2q+ i%Ցš D#*9.myMIyEr$g'+dsu21i*",{ @%%g dT۫ef@AuUR:OC-c\+dF##][>U`ng=84%Ʈh˖v?rH?DQ=PՈ\:9Ja%еl%U[/tz^dp1zo>Yx;F¼^m:yS%oYX-A{DɻYB`bi7qN,Hr j)Гa 3Raxo${{ VUSj&/JME5FKsYׅSS2rS1V*dE+u= m||H ץB\{.~φf_=$˭/MY :ECJ#@#{w`7,[s\?#,?(y674-UUZcB,L)9PRw|_b+y,DQPa;5fHIt/9VpڶOZ`~.-` R&qp%^ep ǺU,c*)+|hlJÑrːr9c1$I/:o J\&aM=׹VbXK.`Okc]Ő6'B޵Qϝh蜱w"4Ds$iy.Cuse[Pd„mEa$\{ɁnNMV!1vҀ⻸5G{"NpM|(Va6 -GT >mыCrغY#eBbnm=d;4 ˈQ<|(/N,-U>6wvEɹ!Co{ UnBp pqd5jqOEW<-aݜV]XPijtTG`J\ 0MzktOm3Ȝڽ4qr=gUAJjCo{v 36Jf6lFy _-ðjмo0 lZߊ?is,RVͨb^WF!Ny$iSLցd6+ti4vgu"i?a:v~?:ѷ&!=lͫ5{ʿϱX5*􄁇&WB&@Xj;V5-`0QqyOyJi Fj׃k.-?^n(JAg$So|Y>7N2mޕH&)v!{6bX^ /?u$_A%]@'|~&ux8hcyF@(RVueh]-A<3*_cxɎCF܀a H|adr' [aEEcHs>5md@zFA*:İ1j:@n)>9 T2o -G@hʑ70l bRS#F}n^ڋpRdE>72: =6þR=}6<7kCiA\̧@{sDF1`|xK?Â5\;:t3R#޻:3fTVJRZZ5o8$IEr?n6^  15CgZ{lQI1'gB:7fWW~xP{Q..o [c5cJfAcX 2z^_Nrשg!tռ&>%(r_.@@#}yB;qhHd.,_s53Y Zp腗|f3ڠkdq#2Ojd 'fz:[@63c{ fy08)rf"MWݮ~2g)owv-b{ĉ;7ex8#yBY?锢b Z*V9v} W$en9&1 昨XM\fiZ-X[d R(k^|j%?4[BL˿79L#v7KX!g;o*@ %xGM\?w8r3_JsC'g,-cv{AifzZTE4&M:x-DAsOn-EiLA<ᣯPWS _!h;3=FxQ7ZM*`Dv4Er'irIe۩p֜Oڻ[ØQi*/<,e~U otLDsMUReC/eO:`bVZC%=@ ѻ:G43pe:1jB{'ߗ L9 HS]3.jBter9ٓ;!)%da1Y1Mgo ~5AP&-#\W G{3q/:O]ZCS[02whc/@ ,&/1 e4ZuC^}Tĵ2^IX,țDTV вJ\N[$#+7S-[.p2fKh%R; &t !Ya<)yBpG}`6"b[l$7[9-=XjX+dSD.)\k>nkq?3ݹoϡ# _0"\p8IZwYlbi9#ߨyS?->%4 YlH\2k'ˊ_ $Pݹڵ6c 9h]s{5JPuA6&zlAҙ5 L,GvKs/>Ƭ=aRe2#RVNO)1csE&|A2=?3l(e ×u nRђ]BV߯+ҳEG֠ eLUF P 1ļYờw JoMm]C6um`:/!63C?.QW)9tԶ&nw/K>Yzq6%[<޼¼K^GT>n1=>/RplF\DhUWJ~Вw oL4a=^ DhWaB'.!)TD&7CBᅺ!,kJjӡ@,( 2AɿV8D-{6k 7({>ZSufߏD ^zN`ϼ'tPx?فIVb227e'hX4lߪl6zko}{P`u&w DZ(4L~nNGm*=#=R9r̝uHmC$8n:G:/X =EMzhbE~ rC==eKxR]ܨP*>D BaN&KRtw)~,-ZYsR< |@{Ncu 0q'Gke}wffgѳ=L֙=Ϟ dVAotRtT=l<:)BJϠ5 9&lg$^Du<<8=҉>dGy¾a^+CEa`ES^KBۯCکv ŎYӀcWk108SXt~^V|n3xhS,۹$[bΒU s%>rav_jE$3YJ=Q-B+0H^a>+]!ebS*I#5ϳuh-8.0U֘c, "{x!@3)MNN|9Uɶ*mYXO6*XPWvpb(_C:2/,HѕO}[J+5sr]p7Kh.OCZG^@}Q;`@z8-6p9!⦽d'p5CϥTf8Q >L iXPLF3nłm\]PS s(xO*:tvB̓y݋,UFKXXIǻN[ً#M}skZ6"-+hve}Vom|K9zցtІF3-uX0X&$Bj$*= rVhqH@ޓ2fI-Zt^g]+o^)\%!O([!f,!aUu-"Q3${}ſ/ٚsW%(%wK Il_3C+P>z³ܥTW/UOX3贎l kCrqidr >ڇ^C^--?!Cj]? [b`oU9J3?QKKjW>:Q'5o^ Qt:5F;im*r:}`?cH>B5-,A ᲂcxX3{8(5(fÙTEj JԟBrՒmD hގ}M FbLyq鸣u:`O=)֡NߧE:UiܱHf!2)E  ?:$DMo_ksnT0t&ÜH[ּ51&5okiRޕ' @xqMeMxPGAĕ(%x< b&_j%#Fp$t' NӔ*7EwfЃ,޵  -j^mǞxCm-nDBP|RC\`g)FZjK2(W PMm>9L'ˑM!"YۋaV P+/s~kDjMI{|Ōe8 {)ǚ¹Nim0BVqׂTEh.. H]fR]Mq d#@cJk-T\ x[hGhp,\{,fJwI4dUk|\KF?jᏻ$޲_Ypl4Ny[F.+M<) Ծ.Ih[:P|8(WէDzfZ$Fyi|[]ųz %*gXޙ;0p PMB/e4#]<,=RW.㥔eu'k/`i Bd<;]JT jj*vug|Ʌry) l3D?w2]:rT?,^5C^*ebD_’A3({tiWځzc_"0_n?ݑ'S!rk1{tH$+^1Q5'Pw`XUcR*حh2(T"cqzdwxL `A>Ax,S[Xj\xSTy4@B F 4 i((NEЙ*i&s$NBf&EKꃙ]sw0!{d0 OL7w[?7RVp\*8bĎM00W0bvRlTH[+g8a:^&#IK?h;Zu7k4dsNP_Hf47\&S?skV|ѿ3Ϗv%'+$TiTQ7Hե|U5 ~>;@A ^n=6"S}cQHq@Yj uo\YN"|,GDH9g;t;x3O|Fan` vz`<^я{Ĥhߴ҃R'=/^K Wy*؊\Stdʽ_W ݗUöG9$4ϭJ \=Ʀ*!mY Z&`/rf̧ fU"Z{oKX:IW@t%X28ǐQT!ǪUH8 %%;af+,SxA4*4 o-`R4+oC]J2w(2(9"{ |{Ls>F Blĉ"'sr!~Ѣ"Y"$x$<B8UdZ̤,1RON=gr%Wio+YǠ|zV4cR>c ӣI% 7#Doz%m[&6ZݝMEr^eGhE Kw Pw-[(bj$Pdgc io9*h`ls8Nol% n31ya'% sWŒf7qU*8n5QH\2 #'yMW{+F- ZT?gsz/:!UOS&,0n#}v^Ђu ǯ%\NK.,\Œ}M!yp",9TEe>wI/0r =Z؍A)0 Tc4p|itN:C>Ufl#MaӃ$@r~Ku ~-{y Qw30{Ϛw$eh;~۝0'GTgjqPH 8R$H`+#]&tdJSb ٵ:OJ]dg)ҔiJ׷spwbݼcRewz [#SU e4vSJRM pf˄v z[;4G")旅/ot$%ĜpxgϽ )vn?錷өw*d;w*K7,7<L<>cwT7n9)|lH/ 0YрR&OvyD ato圊t;_A+DMwX3)oHoŌYWkrNQ {lfFA Z'/u>c*>BYȋ}vINk9^'$ubׅ+ҪX$m)Ӟc)ǘF7-GeXWWQl#ٟEY71{Gg^J+AwAf{"U}4y iڂ/x{U,ExvO0qs]^H6G8Ƚ0˴MQU2$֩7Q ^y,!-Ve pqvNV;#Dcm0Ӥh6Q5c͞*@k |ǐ9:fƠfd'oC# =lC>vK#>ڵx'.^ul%r-̨#ٺxEJZ/FYuߵX_Q4A4e ?j!@{Vڛ4 8ق &H|O9b!TdhpSohk08J!850o 2x _V|M@_GF;%JKP:!xRT #_KaQgB;YSJh! n|3zԠ&dcB.0j59LVc8鉨ח8v0ޛ@yc-.D%k~Ci B~376n&:}m'IDia]N*\J#i0fMwpֲd<,o{U/M zjGc}YnY^`v0<=3,8ԌH=n\I9|Tzz:j 9*nx[.@P17T_aR=*1Dn\ V #YY'6\_*@#ϳ^&p=VYzx\tkaO]XR|] fg}we1a{|gfDȗcM=%q5I_ׂd jO4f#< Awnqgc̝ IYwZx$sR'L;>aG}ǑGrT6.=Q*r!%|1L3,ԫ.9ؗfp?à> 0coAUWgFwzո,͙:z]T*?}X[f^+*A^.޵7H9ZZjT^UrZ($^;kFl~SX-d2hHqn;̞`ܬơ/\Zx]EMϨm|@fHΫ|ﮃe][J?1vٓ";? ?3"eU2;t2?sJ_5&Ѫ _3, s {ؽBLZPť.^T  V{@+\a%mL{_jD2{Re Ik_\7C3ϼC]lPIkMv$*τRBR)U"J3 i5S!bYUӈ]Hn*pjtcH;ʃ-W ^!}  5@ !ДX|OC `*6tVȶǞJ'gӃp6<ٟ\^sIY F Z/G[UBkO/Tk 5[P䮅cKRƸf47#x; yx2lJ*Rf"zDI|$e>a?5ֽܽmps6? Sĝ/: DTҟ10L!i5Uu[@Gsw:ɮN_,.i@?T~,ùFBkdkט|,Kx`DA[^ >۬";FAP]E`լ> CWy+A)/VyФ 4ww;8ډS%A뮁3 @`pFZha$' sklc_&daakSڍ}3 Ks5Y&amEbʤ([V(өA/8 S#:;tWӰ"VR4JN3Eg NMX4j;>,msdL!KxE^~5NVY[&+VЫIĕhn}oWNF.+<,ǰJ0̕kLgLF[hCAQHЯi0?e~Оy|50(nBkzq-.Ed9?p:K}c`1\x̀Gˊ{_50L'S7Fm! C:kO"M&DKJO:m{@P qG-qU8-@<9!ٙT@VHZ.6!م \#kQT!%7gѶ/ OX"W4ì4vZ| KoCK!%u u=Kut=+kB9?% Qx'n@<-OQc#`qI~s`'0$qJJN>RUr#S/5m#QiK=[8 ڰy)RQCVlcMۅ2ͩ߇!oD\vGG  v`]d J^q-[>v-}zz@^U)h~vuռoOr 0]榞7wx9@ڥ=\H@5bR쒑X/٢T*Qt)AdD'L J4EZp7p]J4^֔E'u68q" y݀_G뮷M' S>㴺yaCҚ߽N(#ںYǝWUfˋL~\vv>g)B*c|ydžqSƂ".hJ%\qiblV#74fρZQY/b_dDE?YŹ3B%CuIE j|UZ0ܠ֡#(EZaR[n|_yQ-{7u9f]%;|/.ע{g7Ap+9>B ) j66OW_g]9'8l y}Cmx<ؤ񌙿ͣpMcFz0oY4D/tW p˪zdwнl}xr q?QtVJ=!BŎ̽6'9Rfi6H3 5H31 f-[p$-'SdEQQ"_,0ĎȚxljxt#j}AD: HO1Y xoab-7M|~O0Ttg$\颴_ԜM|=V]iʸ1j![sTk>f/* [D)p`9` `ylY;.IidmdILѤɆGuqRZJ/Jkm0? Ё7]' rH;xeZQ47o o!GȼVx*NtwvU%e^6; mj:f5=QEqIeMׯt4uPw͜lWCiv8gXY6 ɓG8`,O"pSnXUi1=>oңj[_]# !Lg>L/N{  t +nSY?ܞ:I҈dOf8~Y\55 5;m[)$ ϔrf2{ 8%^9aW 34K)hMP+g LP0Eg &fM7#XIM'j 5>„g%&h^\TaŴj!1rgXkD'B$!gFn9$En yᙒo`1 ٛ(b>R^Pas. 7O%r^s14cЊ$)&c^̆L󋤉dM.&_ږxO+'o }(sؖ ;Ml>+ I L>>j X9F%lQ\-m2z=unX7ƹ\xMAU\U& +z+1knۑs,. (7XXݖ{p2X6lglIN#q.\h&G-_h/<;x);.<9B hN[w +TUf(e?*tMv=@]l1(@KC<ڒvXs>dqHssNhN0TC PIF#2ă'.N{.[7scqK.ߡa?i-`ѲjP4ժ^\VݬLμ;$F3һW°@EYi5tż0{-ۑ(#:iy)Z렷p| [! kS@Ḷ^x skkp>E+Fi RA2#\/@Ԛw?<,EDgmHl~/Eb*Su,nA l6c 0@>F)bNbX~.HqzHcqw{nٻh9X[GDMJ9F4B`#иxR$KN @tc~z6?looG )y$S~6!AfvT Ą< f iJJgp?qn^()lHoBe+d:xu3Ƙ NvUHۜB>t(;m[M4S289\& |thY #hq/6I+(ށ'WKvҝfaȊMFQ09`BO̼OfHFD>^4ѓSJ3X0C1Av*F?iۿ+L-> Kn ꎀ[uUSK篥~ô+&4-aQzur(=Kd%:Һ` رH,S.Vd5zAf|?!m{kA"b\(M8;mb"m>Θxԧj7w͎QX(j{%贺RBXA >Y8=]7&M_|}T!l?Gˣ̚l8LVڠ<$Y4Շ TWIbU  ȕ&}o:LVd p~l`c\ј馞Yk3Bē*`AqYtFC #H Z>oLP*uq=>Wsiuފ R(?NK0cJX\v a,mӎkH{jZlZm#c2Ip nLjN:ϱ.{7?$GM,JN(ù KtMGmcÿ=5 FoB^ \ɯST0 (S U8sa:h侜UX)ɜ'H}#>'(/ mWU98<$W}Kd7u}D -[h4OEe!!yP4>Dqq  I XҘʯ%$'(=.À{ƨ1uo2"WFF'Y[-RY:DU^8}ن/=szZչLq4=gya!5ϠrhyeOj.,=vDYt~t%p/1X.E!䙹^vƬQ /XRNS``k$_첈$E, !sB| Ԉ kCR5eKc#JW@6HaՉUE(1]OmpE_Fۧqej]ޭU~oef4NA KG+/qfJAբ9+p*mXBۧ`E|eUʁN.d7َzpJs#,Nu_dΟb4Y#VF<C~}+7%SG*N, ;9?yBwzέHGΙLa1w6&~&Qa&ͽTGn-tv3v~ qNKOmujN謭>1%/kXzj'0\c5ڂih'$09M ֪O-Pв+tZ Nb8@3*M7dfZɠ[ .NLčBF86 k YC)1UMU $u[FA6ͥ#{ωڭ$j')v =;J?dnp3ӷNykN jni e4]m gie_mT?n6ֳ.߇E Y"T<ʁ13@KIC.W,S Jid@k G 7:>رOy 3O8iV?vee[|㳙DwMcí0])VjE$1o@?+,Um0֔)96U)J^)|eQ*ֹ"$I ˦0]r w%J8+iLfR=h5DEhH~bYxbM!;DTp q|TqCQk{ ٔnW$D!"0flR(]_0lPnϯ)g?~і!llÍf߁״4wff<Σ&XqEPl7nVתQfzT(TfйK*¹6`LŌ ]~ G_JY=]ϝa`x*JU*դlizԈ1\r|@a/׬^\aeXܢ:gkPPO8ϛ ?&ISD H8ͺQ灛XX~?(n]Gi; ,,2::ÂH1B`zQKp ; i ߆+\ZYPJ%hkkX]Kf$jAm#a@wP2.XV@īHOQkc8ܣ[,%"f? 9+" vtXiE20$]kxK VprR;VWmq  -נ˲RkiCʼnycMц4[J,^p]m@;p`Cu`v[LWP_.qɑ T j0HӥQ6:ٿEؽg\P *P#Z1GmIh'/qױÏJ du҉-muu' R~g:VPoV.J^,N E ),ȸyi_r֯Q%\dȀ #E.Z )H?.Z$ LmzCw+T珱2tˁ@Ӝ͖RrE"xgGEVs٢&v6񧴛E Ai=-Pnef+E wMtGl@E{S鑨3eעdV!;4iXFs1-85E$@6 j5[SW&V^`ϓkz#Y-2Z)΃2n~ӫ׼K@uExg2Gb;f+?5<9sh{(@ΤNL0 Ӣh&' 'u_ ۈV!Kn"vLh,l`^V0kOmqq==#LR{|mΚ tJ*}NA /EI|;=n@B5ۙVu3`5 QUw 1BFdotJp+e0pd'g CXLV(ufɡv'b;gQC顕 bf\-Jnv`+aڎ˄bp{ H]-n(R&Jվ!^A|w%IX M p$:okcyvrfn>1R`fFTAf@7|R|/X![ֺ! "}9ܐ_k$J7HG7,>i|:5/}_rWRVcC|P>\2j׹MO'r@<]KM3 j;\Th8$W4 0UP 1!M{(U.lb/e5T%ni)|q$۵KmNR|!+l"KKٯYօc $:Ƨ3^~CtKipmn]+sko耫}AkE])#1׊#&[@@\z:ZBj9rv!N]NGQ4Yf2ξ4eK I #m,I:_/ҵV>+Ϣ5R+蒡Gak!%]495n{I:߀,~H@%=cڼ !ռH٭V^-d3N$UOGrƼsJ uM=D8"-OuP.JR#_L)oeo]dx^;ǔ?وFkpݧL@Ӱ ?nOʒcQ_R̎sJiF[ -uCK8ADJָnuf,x\   8ę޶ ]m +"TAf ,(+#'jf͟(?Đ O|Ekm)bHo?ʘ4/Q.:mPW|A}!dz zwW@dipШ}Wh %< qۇG!v3fgdS~ v n`G3aAa 7s0+jc?˦4 #opӼ1vIMPBB3(3~/@N$J |loDxit3 lPMJ@G^M̥w068E%<ՃDRsQ`j`z58YobQ +;`~H#9I!F:tk)!d`h5%[#0{€i-l edqZF{DOKωJ[3Ń֨#E?/PIkhf  ۠[ +Ի R6P׾QʨY$ m[cYĦĄR4ݐwoJg㏬gM!P70%Te:oJ䄇}%5wܚLHbKr~<^Nk߹qVKS^:&d۠y?\EQN!ؙ{P hCbIl8nԚ4D"#lPwOXQ?AFDa%څG"/H^{[0uj8`ѧ Pߡ j)"d3O8}n((_t]]wSzvy .z-MB̬ؽ~6_yF(rSEOCܸYa.XҨڞKp@~V͹,Y-1'|Xu6"Lc(t u.Utg ̨m˷Z^qآdԖG}<~VNTaAŃ4kW%42&z/1:BNC7ĝb9YЯjN"(P_0'E fZ@PydkuIV\eptN80: vȵlѶq>Ne_*Fޝ4OAG8v{% w.Aa61?)%_q["2ZN$HO0KrK&>'Wd9DY[A_k/* ]_`kߔNnaj} SPlRTFI\$X=<[[UJn[Yq+eʗXz(/:ab7MOמ YSlԗ.,ŷۼ~Vż UP-ULKgs!!oSsVFL\_d۞J~jU=OIXPT 3%.u2R$k(xmMgRM6mcG:-6zS-?wu5#%X!Բf  b'[ <9\wVd(ɛ'* n.Z0x|AG^*XNcJp o*Hԓ5sBSk?x$Ǟ#z/K.fQkדLa٪h!4Ƒq^4&4.=_vځ:ʵuձO%~ae,jԲS9+u" 5r(Ǫ298 d0x57^"<]?da ?^w>y5rL1 7f2!ijM?* Hg0`zŧiWWM+oߛYl{Zc>cx*|v3*"oK,AܢOhPL y@:e61s#l%Fl<+\U(;p_W^.1? fUffDG 8&$!1m9e݉lS&-{O(f iqGhs7q!.o3`%J`soІFu;mFl"kw oVزR<ưk8=TkީC?,3_ |,i:<\bvǗKo"&(=*pA NgG7"cmH9y =Z@ՓVȗA5.Fwg`oJGӢEer# PJPt8L!#NMm:# 1^K=اja|.EK1bAe x ꟪i=Y.?.!0EJVI%Mwz#8SJ V)K vS6Kjo`.N r*vF\Ptuu c-8X aAhQ ٸ~EEڬ]T$4zCN$kj3=; =jfXD1LuF ^:;a;qմ&Bp^*'DMqRbWj ׂ'rܟ5Vl&kTi 8tws$kD0¬sžUqqq)BW\TwO 5KclNqigNgI;rV& =Kѷ |#,x/*ǭv~c@mHB)/hƖK񛇞T*%ڴP3Y"T룒r&Gҹ//IT%Fp-,wU9.2=,<-}Tz/7yYfՇ/vD3W=,k{N.fi rM^xZx>|kTs9&"u %ў%1u:t]pe6kg@$PXPU=gw-kM57s?~=] KSɠB`=:-괦95ٙZS&zM.47?R7ڬ]whPd鬰A(ƞ[5FU&S*ᣠgVKMK{2h׺:krUCa&;n"o1"u&|%)w%cJ<^c2_~Pշ+_ ._iɺS>S =r~+Yw@,dpic 4 &4#ɄBƵZ ZuXHaT5؁E90{Q7%]-|ܼ̉dWDlȱI{djYΤReg7tMS-ɘdv1ڷ)tP|z#1l[TaTKz;ZBC ^zƧ@^V;~tLApx%35f[8ӮTݸ䁰 C] "ۘصDP6?l}!5(so0@~`GڋjfƄoЖySGB6ol≪{+Ɵ+r". {Z̒;'a&QWOg\baD$([i ,fP޾qwH;PO6g~yॣ}qK`O8; Z}9.6H["D1(Ў?%~MrF!A35)inBh+L;ވuEiq5ʃD$ Ph[MA|tſRYFJH[ tU ޘq6GFq/0jk50AՄϽ(E(%FHX＋7FbzǛ-EHN\#<@N9"fўCX:IEj^|)M=?TL>6NT1r|2{EĦ.6@|Gbq2fhZHn=K<|pOow2-_mςH AG/[a3j'51* (}j,;5BqMjQle3}Y(7ǝ'Er2|m5KhfE=V/-9'±cO~; sIi0ڼs=mAή5]2nUT@c?ě.0%H L5@&f#,o k0Y!ʠm%Ve:!w[gdq |8mIfKZ؇׿$Xyӈu2DՁq[l^.m{OFZ]lrm(y ԆX ƃK\B˶6US8Y,{;WDa4.9b:).1ZB bjq5"KM\}% zxo*KR gG,ܮqwc٤[W[7\9K*'oGzg ~kQ#G:$DRv$D{;g%q. 䡷IqV ;dvҍK.#6p3l=RC?NY&AmTZ;Gа?I)c1NXnm s$4WUVٶ;tE8lU{y}LswSPR9t['49Tѕ_wRcG|ԁ nLp(PrpfTRI$>ap܏>36rPϹUN}_%Q{@0pޛD"d,4Gx,c3dn"9޷DHIⲻ{8t W\󄃲n?vnq4"WM mzWPhwL:嵳%5Rp%*Q"I fjJv0iv )[?ic=i] (Pm+UP]y,])'ب^# x:28]}DK:Z20CT)=wGdƒٌzyگ!J"S7GR 4@L.]K$0eDm(ɺ-JX^%C/QNLC=K~>cФCJ#_MgU9 LB5' x^OCDc8qb :#sy?/m K>uʉM$ XS* >W13iG\?s/3G \P{(5W9׃{b˛Ar?ObVKɞf7B.{#D| sOG k|jaG=HEǰ5ٺqYn*(~syJ I:ᯔ`~%!@۷Eq[P i1hT\pѩ fH]HRhwDzs#2_>ɯ=? N; Ĝw7&-~1`EY.*cuO0ueXD'Heh-f8f}z^~*mGC|QT6ST_Moɕ<e/>]Er03y?q@芄qq*uvZ 2;eSM[/E~TDH/cQE ډ`bøO^/DL%Z̞f&60}s/lg?dd|8]at i*fU{(--?0P[kFS~?(鶰s,P p{=#:JN*3و4.q7Tb.>V#{.̯3-d,qj60_=#4e?V^Fhe]کMtiSݕ|qbrn6PU?wF@dpޛ"df-cq}]dEel}Hrqt8[1?AwP'JǖttYI^;jC}O OWV[Gn*e4NN$\ ` mk,Imxh7'4{Y{}za()CB7鴊ASň99yé^ IDS Uæ.\Zs"P׼{ez^l~S%{fkx!мzȾ.0q{In!Aڷ<7_kq;;lQ4{*tYH0 PcOOQ/,p qzl;DglOy9fp Qop :5ǡt< b3m9 HNgF:koOKڈ ۠+a#,`3K8st;+ZP0JW+l&؋ j(HìZ -f=瞉dF7@,.!+oPdFOs@T . ]`*1舺{qW` ' qSn_^|C'FH٥afil'JRYM6 ..I|.ED}:߄9_N@ra/܅+O!ݣW8-scǜWը lt2}f vVlF2`6[u"*@~vp0/P3g#(Ƀ?Ld_`!17J!3N+&RyWo[匾UHl oXuggq `*ϥKۖSmMk4C q6D)K'GP:&hGE:E b&x=٣QUX#hϳi~K|BLujs e=8;kˁ^w%nd, ;0W.T$_->Pye@AS.Tr~8{e6 $- Wo25{dĊ%cluUs vl^,23rK)ֺ*mߊ l'[]enņ ;gPCwK K64Ejdd p괿3B|bǡ$xNxmR_}|gKqZQߙk7ȈT3WX(ej> kb+6Q4^udP}>9_&,:gZ3'FM`v_eNIMpD5 +gE>kA Pn@--b՛t^$,гr/ cߖ8Q9!Fߛ>*nk#:9G8kѐ fr :^ T;ߊ*A5g>j&Tn$^}5U?ۆg_guⳞmpM3m튐&3+;e'يskЮ%$<.b@ɘ;M pmjv:n +4+bc+Ģc/]‘[%@(4XN BzX_6{U ["g>E. d /,; \~bZ+Rij{y⟽h:8mq7 ȖBCFl-QGd}$ SV41GE&?ǩ-ʄX`in& w Ugk8SRp GRۈ>][ y\*-|GO԰kpr@u:wђCVdd2e8.rnǼh1UdzY [.h-%dutŮSɨoU'8֝ksΤ3$Ps:=E:lEp$_wl_aw8pJ3/X-\Oj63lϓWV %U/-bf^'Dʨna8\Xj`=5f:Of9.p[ Q !DcwڞcEj5r->[txlhZ XauHEiIZd͏s-h qݧ^r7vyY0)#MŦe`F3637ͶK$x?Twnӿfn+U#ש;Z\D.N*%[?O*(HvsTZ@d`!!M}+U 鵴Gu̥ma)]*9"h)+r 5C(>lid.]BG!#TFŒKHAnrd˳:aX gaN3+r˵S"D+ݏA;9Wewf{GZ#(5X.Ur:ƅI <~ ڛd0789flz$*n DpSwӵw3$@q{SWyAT8JE)B]c?镩ԇZðWU0"oJ.? $"N1A$gFcr"B֬_q^<9} XԚ?88Ue^ MWI&HpELÚߘkcXfsYH&b9Wn V;OTdEv\qr;e+qbxz ܍\1b p-ʺhجԊg9N)^Keg8j$噏0<НchSlEW܋1[i#+ .E5ht`\/0Ruofv8 $O{*4Wk}>g D焩:h`#`M y hI蔂*2k/s̵.5z`-8ݐ_4D4D 阥WWˆJ/[ȣ2UM3#1V1{ Ȱs>\ZZU&b3.!ߏ4u|,nlMu3Q2~mHt k%}'UJ8/r}pH (COCRcA&n SX{S+zCM]4_޵TO&NPZ `|54KH*Z*^(󹿷[Ϊk=Vj5lƜlhC+}\RAQzc <[ pK Cu s6gFN a f/w v(-;cwuw*hVw];|}@y(#B Dq42\NKa 1ř-oumiU&f3BE  \/G& #/2825l+I.3˫m3|5UA#qJ;?T&⌠~ohs1&yEudT~܃%YSki @qYiJɝ,+ߦFZWԨې{Q[;3E (okbLzOVag? `Mq}zkEJ4~.d?OuSÿn3zvZU5X9y<>b)tƇLN#(Se}cK@$z(PBN> rJVPyАǭ6*{Hf.OzvFZ=9nXѴn.d:|e'{0,'4,+~`s؊Be- 7ZD븀ˣ5uPЬ/RQ b }Yequpf6+vbd^-LGl cFO Y*X{Dž#v53@vXx9qLNLy6*b9*jLJ{=Uv߉{;j+>5 +-\p)v76S+uɁ N/hݮ7Ha> Ez 5^zrs淢 wϒ,Rň}zhBu)\,y,\ڲ{_s;Y]fXR%C rnQQ $NqQvpRBd skس+,9d"cĝJ8:A]@ !+@rU.YhDg /F.+CIxg^Hz;3 jdR%\T,:S}Âyx?L-EHdltsOaV.2+*uë>k\x)]d-fE(~8LxhEN(_3n@IXI0f3bMg{Zk%0Ccr2nx.0I3$X^I93Yip*DJr X֢/drO[.L[<4("\Px@ k'ۼ'8:CiF^Nݍ);/$ޖ QI;DdQt!D(ڰ:!6m16w$kI߳Κ%c)e;:qب߭(UohpA(?@cIg\˲!=ģ*- fEFhM5oH(_!7mm<9/,_9A%Qs4ˑx1o̤b* |t3yHh0uL =Ka1j^rNpjg4[m9cg#89L+&56vsCZ|ATZ`šy 7[>QJ- SL1nURBMI+gO5@I/51E"aFP8'*U8j4KBݯ05:M̐$6FQ(won/>j"[z*L5F+ l xl2.% 2HsrG4cWq$κ~yaVAcs |T*qHo8;3)e0_`E܋Q=R^Hh?~T{DcN*m o WpG2+;{ xw?h#Sa~e!ؒb?ԝV\bmQvmǑ܀#w/I&=|g(` _׮/hs~[ %mM @rdB348^bWˬ7Dn#DK02k=@@$s1[xx`?^ھ{ ȲJ85f˲?)vz JnVjQ߅^VA5,'vZ4<2D$aa9fuQ+/bİ54KҰ jwGV܂<.62+x#6vĊ`;J>K.{ЂA%_̴B)]u:.!&?oV$$F1j P„,nqnr<{)MJ^9ڊE] A' $QkjwcOUzߢ uv5 n˜ܶQ_@l{P(x!Y?]cswuTz?S!'< |ˋ^ k튏Re2WHJ-Xp \!mFT]+m<+BT jSDwsKVʥ1}B?s:*yqLiȲBTqO]m83Ah Nc8곤٧ZTds? ~C}"7B;[1u,W?xIbn%UietZ@Vwb>Ѹxf1")e_:H=aD ý3Ȣ|P]go 5%]f|!WMXIĺ$;.xS0!)Q9=y6|  J"@ꃨ1M0Ҹ?P%Vls?FKmήd.ū\'3N}% 8c% Ƈsѳ`r28 opNu$#xc-:/P.cIQT$n*9Z?* 3%#jJIҝdWlE/}͒*nD%x&g{w[<: V%1wP6Ey;O`N,NsqڮҸ'ŁQkՂR.Tޭu-؝c@3j9vT=pd7SŨ0HRX+STL. gL NZ?wDbbcɠ%H?bdK6ZG3 ԠrP/OB ڼd!9C&^to.A˖6[@i6ďPɥ~ w(v+ :],YlQ5-QiR|iG5LڙMH9@ޜ5x7O:!1"#uB7w}/x'ǿmO~0)TJ7I 16]|&&4&{m mSZBt`>NM*(F՞9ȆVڼ;85iXzO:}Z3oǒn?qe%CP.&G[Z5 ׹# =/`s@r B_rAu{I ̨ty?+cȶx[+0DeWkΰelٷ·C‚0_>r!ע M9hpڕ!TH:o_oYM}Rgo't@< V; ĈGATEE |Zi"N]f>azl/1;bkΓ⒦P Gf#V{r͍kEOzM!]'1 ^UHz<d}rNsY/PڟL|'q ȓ<d2MFï~J2 [[6y8RX t^`ߟ7(NGKB0) Lkփ;_ T5v{V? tdiq MGv:: Fo{ɟ9E͌#iśm8ʔw bB"* l"3 94)"|dH{%"9xEOT7b]"v! 诇LCiNAJY]jci|0w4yxɫs><~ID8,:d8w)+JVv{N'$yHa3>Fm zê1c|9Skp0m8E/퓥n25n{7ّbuWprF81T@r~]Y̟-RKπBXu4 cC2 zSJ*\q|p .{Ur3I\aVfx$ "+P8t㙴zJ?T[>'s$F1UD">}Psmks󼥖TF!& ˵KZDѴJVT?qXKE}Μt8@gMnOg>%o8/ma5r[|0}yR(ve5,ZA*,6w Agnsv7[%JG(xWpmܧmBuL^pVŜöyЋظ~_W%vEUqr}78^X$[|d"Dkűzid"?!ҁR :)qˎgWD/:"Qv}V|ƽB*Sg&+YC$h4&"*{vu䈆؅LgN]Hmh< k2]*8V8oq} 0_P$Uu1n9}1JQ'5D@.0,FF]t=8S8D-D&R:/ZssRuIXd}}QW²4:1"&(Ň#)ۤ.-/GC_ 1V-lj쯬Lj>'D_?ϝZp) t 1="Z+#4'? j$-d~A-Z2 @/Ս[H ^:F5Fc4N LdnL{nNK2$))YSե6Vi)2uѹ) ׶$/{= JW& qAv)SKjUmq԰FxQ-\˞* ~k2д ,}Dds5&IZjMM/G>: iaZ#HIW+ 0$:vxP*N)*(#}I99R￉:DüeZ0#Kf~b(R8I~[XB~w)O]-dDS61d2E ϯ g߇kQYOY0wJ|&),\-s2l' X!<G{HH7帡1)`3DQZ~CxC0gFN鹹aW2Uo `X\ 3zTdTJyO>QTɧ3e'睦:HwDRѺarbYUt~GtT,)xxsSV}/ULBfਢ9h J;pL'&HQsS y,?$ 2. 43Os_Hǿ7\ulDU?̀Y.5A|&cQ%T.#7 _\7Dez95e$xϹb',6q>(5@8Ζ`詗% oSE=~1x.[?|ש7dF?{ /6LD\ToK24HFC~IO:,liNJrZr| eaC+WAAbl t Яm !=d!@4Ol/v/3[d_ ;a Fvf葽wZcpN}%ps-!Ԫ֎)U׿ lBuAR;UqΫHjqМ'tMRuc~y *ۥgA4ڥ[Ҷy4wϛad'zYr5z󤰃كM(8Ps"Օ`̤!2Wp5|EUl_kcsݭ@lMq lī\b]_1}YK AdVuu +L|2!~|hqmHoxGJH JJ21>i (h>&gQ>ǘtkNx$y~^NЀbKQl' ,?FOwh?Җ#O%Q(oKϑ kP6-3(7$[>ܛ-Fr!m?5e?~6{zbRb9#}-Vg`Ǵ<’}c؆AAu ˞]ShPfЇPIṄ ilٜYs %.mU^`ڛ4qH/ Ha^J~YcozOKb>i`Mܫ#忰5.PQI`]2A@PTQBUl?B\Nv/,PGd&W+oVl>;` m9)ލ9`zI-gX=U4$p'˅q 6p*6&z, Ԗ!@܅sIݸ^e䝣~{l-.!@). xPG򨆹> y.^& 9U U./"2[uM^R>G4jQ|􄧖S?b*ޡYCuO c΅-Tvlջ kJk$PB:uc\Lap@Nj"˃:|c/á ?!w'^:S?YFG`vHtÝ3(L?ȽwX7_b4ci: JDo($pU0ŀ+,R;\M?pmDoǿ{ݖ*fxo4N868Jx|ML=Jz"8}15ۑ)B|/}Ėo|]DtJ"r<}H[V6ž1\T4*Ii1 C $&6a3Xʓ!* cFNSt! TKz0Z2OHc+׆L.kq \ zUvC9)BX&PPvȗ'-$xI#/>B0|2IotKeS'4ӿFkZ\Țz`G45PS)6uz^CnC| <*ZrpQ%\pBon;m<]'f㘻;gxdԤϸ9*Gft0"NӶpH%J"6l|sx#d0~6'i/Zf-籒J A;5]<"$+7#븵F)R4Jnp`|ƱC=x-Nl%Z"&g˻{\[ s:Bݔf(yTrM^IVEt+S%!ϠٯӜ5ÿdƶ?PϐpLYy{UHgbE(1&rD9}bJu$]O.=ŧR:o򧽧,5/Ji} rbZ "Dx- iGM4%cPS<è5ѿQ[̙KW_>O;q鉭6ɘ ŸD" 9V[ d_aa= u'dl{XNx#V#=sD;N(>{R/P6>ij Ć$l7CoUUǐvy'"v!YN/0ekb$Q5Nw&4O,P}cڼn݆Na S_&dl\聲&HcsrDY (LndP8$F%.;a("oQE)uH|[{axDc l\bI*Ōإ@d b|N-uH+PT -01N'9AVhu->.(Wt ^QH-xL[؏PjjNK{fp%PFhTcд&20W媃0^i@YOTjf*Gjﺜ#9g`H%T;Ujb ؝ύfҾu)POaZniFZ**5OY_1LW0$,Z^<"MafVҧC)qgrUW90(ݪ7|{Ė,|L}>lгͺƙᥰѷ KstH xb2IF@#$Qb19`dPYUNh,**wb?t0k40!V;H_?^͠ I٩v=\edQ[#ut}{yȹi5?)"ce?[ Q- ȘÂkD\-8]X2Q=Sj_׈K>cF`F6[{HW "L$L01:{Da<#0$8L;]x#m*O\{x5O|xlԶ'_(g5!y(=݀$<-Ĉ8 []_KuX0ۏx:yj\v 4}G+$po`V)p_|6'\'+27Dk{b7LW9zPK/q]裾e[NKd9?5a$V4X7jk21wvGWMeX"6h !ۧ)jlیy^cAË.)g%3$lM:Ei>g]A7u~<$"HTჹ@xUΐm|vz'I ԀxwA6*30U/H'k=9-*l!'#Vӄx5zԈYaѵ2Ƽ-9}f>_+ [^*~`9@f N4RшSvͧ\-+GuN/#"gKԻ1;w?Jγn*МcyړFdgi\⩗<㒟cN-z3G`X4o!ko MkJ.1>F5~*3ῦty5+p4Oy1rI2b5gU}c!u3|,u1a +eMji{*$ sP@ 5) rрBk҄k, RhbhWm8SiH{>W;-N |6pkQҭD9P4y]8z ~o۫G sIa5FOÀW X.a4 Re'S8ǃ?S46$]i|72xP~-Q6 ҟވ["[0La ΎБ_kܴ 7Sk> Zdw<>wHlqJt#gN)73w])_N0 T/?cN ZTVkE-/ESW׏#c!!󄨸"VȦl^ f76& ||.L'ګ<v4Е]2L)Pv Pu $S͓Dl㴽Pۗoxo@Ey_xrE3]0cCZƧI<P>I)Q<6+"6=佽ב430FuK|Y'iSُ$_aB5YYXS/ feuW̛ƝFPIxST|A>VWC=yV.S҅͒ e5~Vk韨eǐ=m)օy+*4bb,t喤u>?%rSjр4w^g@+|OlnSTSXY3%1ME* =Q JO-ṇWԋQyb89.DWp[cƏeK2'lv94_ym{t, p Sh6+9dAN.ߓq9b|]5 z/w.eV%xB jC_DBe1f{uiTB ^|'Zc>f/S\G"pк'shv7qfr>yi45}"cElXqJ/\@4U) .}~hõ ljZr:% zՍ [..W{u5mz %OX2ϭA=\AIlr裘ra Uߢ3Txi9 vj2`ISʁ'8"ta1qMǾp,/` AY$$ꈉ6VfS} lYxWDlQ :"%s_,&SY=`s`9/Zₚ|FԜ_p:572X@LIiEi pRjbXjOMGO?xvEn* Z4RZKM4UUCCBr/e:{-:&kKlAhk8ڼ@CuMĽQ^HHqg;Չl;x-GkюqE_L^TEzwq  M|.l2S,y1&Y Ih"/M,Rv T^7( Pzi͖>{@=.tI27:@Βǻķ<"??EzNR8wg5Cq2b-i H 9%3H6MHv2nvE((OuKs>k1=|=7}ِ ď, J<˖ v}3Ev&L{\#$1l<69^-XFG1-%.ɊN+5d+P2YROQS2WT-1Vq,!Mo;QrO~bg@dž7S+a/%*C8y1us*_2Hֱjִ7w;=떺^u$g,<}S!?[[r=,Dzw,aXuJמ4'9L(ѥ380x[7ۇ{gl`G0 n b78ADhl 51` ݉G15y}fA-Xq']Ё+_0+K.ֵ"֯R@/pv̰ljf`mjV@ eGd}+bԌJkU(Ԗ~v U@,p]_MYh16TxQj~)O^ZM{Q W^7b`xػ!:7^w_fEv ]p/J^jy]?1Z =}X?H?c*~{4٢hF0_9巧U|{Xt7O_&4>@u-W{tԯBhNui\ΧVl4YT% (쉓 k(q܌tt1 x$0籎[qI&@WPO(yYޖ5]T?Ux{튗h#B:>q[J 8a-.*s{?z+uB^TCtDCI \76{Z/`yn3?s%\"DiLIŴ.̱cpryjA$֦Ji$}/CRH[Vb*0t5I^+Ufee(o|1gCl$S 4h ۀ9?-ob]V^+Q-RzݲL *7eNuZ=rtnS u^Ly&E y 1nDž6PckU+t;Nf}T9!tgLܳzjx Et^ٕoB>~y#- /&Oh<{anֲ3Y?0XvlgQ Gs~p(da(o^$bh$|vyec~XU8l^U@un@obaR&˸EGv+X)oZKjfH6tTXYpk g. aː{]k bY9{533DvӌW1D#)xx8YRtp 23UD +@;qP/Oͣ_N½+hG|#%<`<?[J}?C SV|epﻱ<|@>W <%~Y~@qw( &ʝֽ4ZbD;QIm*6D7BK:Aeк \c蟛1T07H%$$ Zw:#@<61J`HEq *6`  q+LDdZnք~Jbm}A<^e:Ji|{ZѰ]8ӔHgڗG wU>8ܼ+Ogud]kܽiUjղgh{;H;X^UG۷PҚ?, 7'cy#d籯P4||zKRٛyK0!w;k)J&3E[Jxx+رTXėG=YԭS. 翆b3ipe+^ʪ""@e{,UqƔ_,g-$z".vlB׀=Rjp UF! unlvJ>pHܣ~9lq>/=^ZƚI O :$́dt/ZW,Li.YWetn;fkv$(^ +őWNBZGlX/AƖVٜ}zJyĊ-d \r!LZ篭 sܤux!초Lexxk <[X1_tc7v~<[ۇ'{ *q'8x!0Ϋ0uSJKL:+$AzճA6IpXʁܾRu= \ !ݪxn,[Έ]i!u1K.5U>zn\Џ@񾌧uc9ڜU__zll YJ%׍ gzN=®k() ZJɞM$Lf%؎QCxyKcQ_ |Éui#RMDv"O>kq PžbVeq|M1[Kq%}P 48 ,owe%Fǘk -`9f-6`^_lHzU~ѷ4-0,>zca1 ֆ63FKPz_J:%(}\u-.FQlk T1K6g*t6 J`SdD/Du˷Oe/HYe6!MzdvT6@U4p8W,5z[C!0Jxo^CBfDHU!憓\"ycfAM<\= 4wgcЌ[%{Hr 0\|+bbSɒvA|6<MTd2O2#YQ?2>BrVqrLl;+53xJ"㪝h**O^9K0"1z Qԍ=cX)(f*qJ )M0w x$^Js a8I~gA2DaD:đe<HsH_[oPZ2́>c"Oһt5eiO.L׆⫴|Vz͟ w6V]aIJg9f\[) yf1-VM!'ȫ$A)2/b/8*C9e ƢCɅmyRJI M~(*${(K:QnAi@!zf'}d|UR@FGUҵlo+$z;cXc)d};cƼ#Ұ =? Z\4r 2ܖ/Mؠ_#VwF:2YX7+7;OVsT,P7tυ!sPmBs8'kCY _OL\кU`/wEt$Zۦ4%ԶP.`atG̜bl'i~7sMo?x; U6,B{t4z~+*CORO1d/lwߓZ{: 5ُ}OZ{?O5(fi#!p,3TT$iHh\ӏȒ4V`TRnM[?Ph{hoqFV46TwG6(H/t,r+_mh@(+ogEV:Eq{6uU?V|vYQPNV^ 6TkY}Shs1Z[AƯ`RqQFXw5ŦIa #]RU8O!y%;ob'fz̵8s9i-K[P[vw:|,ܠ]m N;ާ j/C@CowzpS?* X~Ӄ[އeƧE9З7۔)-~jDw/rY/ OYv\[x~M-*EZXIW@S}i4VhK/Ұ8gv6=^ 6s.ִh:@wX=EzIgڡv+3+%$:/Q)r;D>f./7}q}` ωu2')`YP$AX ަG(VKZ}V%5{ \K#g2jpտ$}.!ZAnpe&r\/tm |uFw1NHmLṱ5'a>ɠ$7[6 YǢa}+8BW4c&2.AKX#v_PR7IG7VިkFm>utyci0R0=!gMZreJIjlѽ}gTIP@9^?s7mعf޹9Y>u AmtMa4^ԉ|'|h,zUiuCtw×f89glb<)nPE$8庖Ujp3L |4/u:m@(MM%>/_-@5봬GkfuiiJڸCZ. ƭZz jY-| C]&(@"9OZ>mјr +,H[vzIBY\Bq.Թ"CּUbuay!7PӻLV1 Pn@d8kV 3Ƌ&%#!d-CH5v0LQb}Aѥ]%'$3J-}ۨ[M#ͤw=#l3.I1FJgM+IT,St* 9,q*mv[ d^i/eW"W xeO1-"Ɋ׵ck)h/^̸"5bz"ó/3?SsY] Xm{!̥u眂+}ߐK{icmnFNsښ81mn-b2A+B]jTlu)ih͈K)$}3!X y,Ġ1f3'G%—rFDu%ܔ=. ߧ0_]BLg5?KeZ.f_.ŢKX VZH|fm 6)mt>Q2Sv_$|Rŀ'a] _Qgg5VfL"H-|?>E KDbt޿ew/["%HfD ٭FTi*s}&7 ې}Fٓ3s!6l1|zkAqV%5QS. ؎*NPc+(vP2Y;g+xHsAॽH5KWVc\y+0N)Nzw5f|[!ͧj9FQVfUNH&E~8CA$` C]i[H%F.cJ$t͕ AȲ(d˚W uyzc,b4WF@4?6 HPY4hv|ȤI <3HɔNQcɌyQ`Kmܽ-wVL8rgע`Vs ªs 9砩{XSY0u"upz\U'γk"Iz!]/m~c !="n8+\/+LiM\]Rd`fU 00#$ M=6 NYFŌW5 ctvJYQ$U]̅/„'C. 8Zomn1,C5cnk\&/=f|Ō00x_0N-)gj& OmӖ { #YUjF6XA⛑\iݳ~9eC<}Z ?[kpdC))x}W,!Hav7{?K#TT%?nۡ iqQ4b%1BUȓmD$en擲k"^d NcP&`k_A8}/T葺n81oʧK )<)+*uǸ;U3 /\Eb!0y ((mVS*_56@E_@Oeņ)Oix{4Ŏ2 Mӫ P,bqZeFJd<2m8YpT]Nk"vmEau-u$6vm5|SYxSv8KcɭH_I轾fLDBRHf@DB湎$Kv*yn:= uL@lK0w>3QsL*B|*̍8*D+2nLoa19Y+rpmm[k `K=O^b24{y&G'uBT$a e_իjIjTjWGÉszn{}_ӫD<`jN7?&59ďɯA}`0Zkj&?)EMlCԋ*/ Rr|Vd}8C4*cVIki#"VB u~Fk =%p.^b6P4^7O @YKbvii9zF`@[4L$C7yi<^\Q ^A&xѠsob-C Y.u~#p|@5g4W2ơXiEcF"lCK/J+OhY7G&b~<$.1T^7t)tԳk bMIEuǯI-oqn0<j.%nyآ iPZ@CL}vOU9S~hpPcK]_ = #pg\biHX*ǣ'L%c6+wz&Vdڟo`0IU&kF ໦x2caC/Y3Á?:.cިǴWwcHi -GtizR?ĂWfUIy],TY=(Qͦ<|/}.y)ٔ\Vs 1̙#tqzPr^ cn2XΌ4~MȂ~VO~祿$ϧr qڤ&mU9l?=[r*;q\^?;уdיYudK:PyvH- G"Xp$Ve: #qbo9-DVPf`VÓo-ñѦ(:onhw+YլN0˷?L]4'1AbH&|.eH=׼Z-tI452r qfJ'l30~ T#_'/V_FֿՇ%S[ h-P5 +þe~nAE $˝%dYj|m6Dl17`=CW"Q cZcF%?Vaf62'؞r_J,wۈ[Ӹ*.kNtMSnwUMAl3%tϭB\+ gI|M5Y֤ٞzu* 5I39g mLW\KrU 1HXUƾ:YBДj8e.Y2aFF2D2X.oɪ|\hD]xa$woM L܋6i@70Ց?@VXBgnm#q௡KyR[vpR<]e>NC4ϭ!凸.Vo| k z2LNZ`rXb_ȒϧNh҇[gÜo zL TF1غHJ"-ñ$B,άgML|>1r ۮ2BKu̙H?8Ce v-ܪ;ze:5$B y=+,os-71[((ŹNQNj 31͡1ՙg( j? ap* j܍S^1ʌ;a5oU}>aгH}FR=ntb`Şݗ1Xf!x2J2#Z博.V6X/"v'VE :ۣdfߞ;:웕]g,j4 _¦CN\R)m,^ |{+Xq¶1fxӫk$,KŲYk$9/@Ke˶ YZ