samba-winbind-4.15.7+git.376.dd43aca9ab2-150400.3.5.3 >  A bp9|5rP2>LS$+W˜;es/Xt@ woˠ5L8gp8M528,4PXЅU(iB Ρdݓhج/V3z&" #gvSj _*ȿA׼tZ[m6YA^Y=\bFBĢJ8EךR볚lNS#Vn#c(7bcb3c88e1327f78ce7eec83e4bab2c0972b00518e5a45c4bfe27cd13db292f87f166f9e221232635c38023b5c0fe1e661519358pbp9|l3/%%a rrE~8%8T;k:|MdDԤXm?~ hv;F(?Ŭ9W༈;^$Rh.f VehN7dDdBoK$GX{_ )T6zK`h c<5\9py0+W`OcKs Γ)kRvaowCЗ܂!fBC` X]`{W:];wXB!rzu>pLW?Wd+ 8 P *08*-X z     P4x48(9899=:N=J^>Jf?Jn@JvBJ~FJGJHJIK0XKDYKTZK[K\K]L4^M&bNTcNdO}eOfOlOuOvO wS<xSySzWWWWAW`WpWvWCsamba-winbind4.15.7+git.376.dd43aca9ab2150400.3.5.3Winbind Daemon and ToolThis is the winbind-daemon and the wbinfo-tool.bibs-arm-3lSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxaarch64# we need this group for squid (ntlmauth) # read access to /var/lib/samba/winbindd_privileged getent group winbind >/dev/null || groupadd -r winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in winbind.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi/sbin/ldconfig if test ${1:-0} -eq 1; then ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-down.d/55-samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-up.d/55-samba-winbindd else for if_case in if-down.d if-up.d; do test -h /etc/sysconfig/network/${if_case}/samba-winbindd || \ continue rm -f /etc/sysconfig/network/${if_case}/samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/${if_case}/55-samba-winbindd done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in winbind.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create samba.conf || : PNAME=samba SUBPNAME=-winbind SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable winbind.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop winbind.service ) || : fi/sbin/ldconfig if [ $1 -eq 0 ]; then /usr/sbin/pam-config --delete --winbind if [ -x /usr/sbin/nscd ]; then /usr/sbin/nscd -i passwd /usr/sbin/nscd -i group fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in winbind.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart winbind.service ) || : fi fi<rX%0C^큤큤AAbbbbbbbb1bbbbbbbbbdbd95eb7e0d1e8c973d39fb53be9be46276b21bcacd8b0ae1adeeb63651f6fbea676af835bac5e037fd6f6d9950ea49ff3f39bc693d479069190927c1c53083993a1caa0988f1da58a965d7a954f36d791af7b63f8f4d458a49b7b48dedc7909092bf648ad8b2379c0c7817674278671621eb5a9402ba9e4b515706776d36dfbc6aa76dd5a414df2ea8048e7e0218ae3a879f58ba19dac26828a1bda76bdf17248c787a47c3127f9c5fdde2848eeac71a06e22cbf997c132d74ada549c086e0d6e35bdb54133950a486ff54c1f39403e4c124d7055a8795ca6528263aecb57239a16eb3e6b8e2bf0b1ee56f8a98e8ed307633badc5f3c02d8a82a4293ea474397bf2f35a2fd6c2b072f5dae72bc617bb36d0dbe176e8d67776ecb8f8e0d75adbdd5194e1ca6bbd83b1995e942fd07089fa77c8d30995664bf11df524a07c5a45ac6bcf73ab5ed8f228b228be26e938283bc3dd195f8c98d4d21022391c3624edc6b4b0325dd3211474ac785379683cc4e7f17e211327fb9d536c1ff9138de03eservice@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwinbindsamba-4.15.7+git.376.dd43aca9ab2-150400.3.5.3.src.rpmconfig(samba-winbind)samba-client:/usr/sbin/winbinddsamba-winbindsamba-winbind(aarch-64)@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/sbin/ldconfig/sbin/ldconfig/usr/sbin/groupaddconfig(samba-winbind)coreutilsld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_AARCH64)(64bit)pam-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-clientsamba-libssamba-winbind-libs4.15.7+git.376.dd43aca9ab2-150400.3.5.33.0.4-14.6.0-14.0-15.2-14.15.7+git.376.dd43aca9ab24.15.7+git.376.dd43aca9ab24.15.7+git.376.dd43aca9ab24.14.3bascabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/bin/sh/bin/sh/bin/shsamba-gplv3-winbindibs-arm-3 1655107815 4.15.7+git.376.dd43aca9ab2-150400.3.5.34.15.7+git.376.dd43aca9ab2-150400.3.5.34.15.7+git.376.dd43aca9ab2-150400.3.5.34.15.7+git.376.dd43aca9ab2 samba-winbindpam_winbind.conf55-samba-winbindd55-samba-winbinddsamba-winbinddntlm_authwbinfowinbind.servicercwinbindwinbinddsysconfig.samba-winbindntlm_auth.1.gzwbinfo.1.gzwinbindd.8.gzwinbind.xmlkrb5rcachewinbindd_privileged/etc/logrotate.d//etc/security//etc/sysconfig/network/if-down.d//etc/sysconfig/network/if-up.d//etc/sysconfig/network/scripts//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man8//usr/share/omc/svcinfo.d//var/cache//var/lib/samba/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:23822/SUSE_SLE-15-SP4_Update/b64126b71a588c6018bc481f4b00e0f6-samba.SUSE_SLE-15-SP4_Updatecpioxz5aarch64-suse-linux ASCII textemptyBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=36b49ff7f835ea95b7bf2d6022f8a447b570955c, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=fe1908522d0e5da1f9c4318e4a12ed6849bf2ddb, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=2300d496cd6e8c24a11dee0ec87460f374448a14, for GNU/Linux 3.7.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)XML 1.0 document, ASCII textdirectory3O2RR.R RR2RkRSR5RRRRoR}RRWR]R_RYRR[RqRyR0RReRiRnRR/R4RVRjRdR\RpR|RhRRXR^RRZRR-RRxR1R~RRRR RR.R RSRURiRyRRRWRR[RRRRRRhRRRVR-RZRxRRRTRR RR.R RmRRORaRER"R,RSRQR?R;RwRRsRGR R=RRoRYRuR5R3R2RR{RWReR_RR}RgRRARkR*R R[R&R7R(R]RRRRRRRRyRCR0R$RR9RRMRLRKRqRRIRURcRiRJR RRR#RRbRPRVRdRDRRnRR:R\RtRBR'R)R|R6R%RhR^RNRFR>Rb#/90vΏen 8o?gN%EqKjv=0G9[d{}uOt 2^rUH3?$Yk&,EȰ7@4ׄ>*bt5gE#TMq$QR>tnI,q=/b~e]^xfÉO L6<NYUS5[%V|]˕V2gcSfCaydq(VuE@ 9,jIf糄 TSN;'ϰL~%"aF=-ZڅR?LJiMRBw1TH{`dyIe1 QBaSc[aR͏j]#qx(/˲_H {0`ICEWU.[sL,>6\v<\to7BIds~F罽t0pVVۺ#&Ufx$́H̀**1 )0zˢ&[D:@>*1BMYuE,N&e x}1uTHBсk0Ign" *0w 0nJ~8B ȣb&?;U_JNi,Q~) D7p[zĚB [!y*J6(x!b+jlGrTX$W:ZqX":zhE,‰~?S0lh yP9Yc׶Xe=11$GnF+P;;7oR3 "vM֔+3-*P(²#LN&㵛PSb*ۀo=oE#Dc ժtf%@a]L=rhWSD(^ICog `8GYL<9p9)*:@Lnϋ^hҸ|+nDAU*]` @ί|V&hh^Y3o7]2m+#;AOMqXנHH3[^cިEiW#rU'8)QW9e: D @#'9 E`B݁ k8seF p3- DG˸x5y^R z-caLH2U*ѵw Sͪ.#4ƭUl'jwBKeeur=hUu/9=q;vEX, 6N rJ'!׵foA*DWI6<[5xdmYcn pJ\GE4NO7z'PWKZk`t "kGŃv.Ǽ>5Ad&d$/Fo& MH-IK#.Cࠡ:ϐ54U ]PU+_SJ1[,˄3*r+qE5ʔXUί@a9X>ԟuTҥ'egKB'*${ݍ8}o!TDVf#=+0]ώډ&%Z}Aȑ^eLMKB=!ʀUgv XxoWf:#E#[ةV%JmVd2܆:Kozxa>N ؏lQej~Pt xFZOˤ eM WN,qLe; ̠: !RY텘`}N6y" F,G(ETILev$ԮmJ;-faW<(xrugRFtP4@>ky,+Voj[(9ــ׃vGɸyn 4u5VTkB#xp[,_u.t0c5 d?OL;R:vs3@+#ʎLOq[ ٕ: bO^ 1lCH" i$51ì?$3ej6ue9PnzD>JSޏ coT.t{lɓA,T 63J6SsFb{Ѵ[<δP7wzea(rA3maUh&C}U빔zɱ 1qט3%>ρg&/Ր_%6Ӗu$ tۏ&joGjy-pQN.UnJNQbpE-D+/mME@q76$XhY{'ewIMb}^=AFы'N94Z'S0Xn+JG-RxL(xFl$.ꬖ+,~HQM%mzeZtf =UeӥH|yC?H18j,t5)@,}BE N`0@ʶpV6'Tc/>ʂ#Ͻ[X&>J%ݓ##~ҶglU%8.XZXWhw-[x'|%ɷ'qM\`l$^䣺mc5RS;i{1eڊ:>X B`)N4_6HGH\R(0;+45\MTv 㗓 * "#1}fM);\)Χx5`>[8*U{%*^'+=.JlaFXO) BHf:QѭCdOːNŧ%I {˘X4~si/NtQb>,6uG%DXQv,. .Y{l ͫ (Gqdb!zM4${BnՉ|V;#-_Qt㉞zgӾqosְ,r/W(aimD[Et<",EuYDe`#S5 %~dD"L~I6|RL Ɨa3*kUH.1RBk ^|n6~ ]^=@z䈉nX^ \'ഭE)P<'sOy}&Y{`*]0}L DO4,ˋCjˤ%V c!Ts`}S*/Vk׊;QcЂ Lz 3NUvk(,Vr4DDO&48k'b,TZ G.XJ+ ߏuLܵOCMYXO\MOeZ9dJ,.F|3l'qu <%,;o_<|"f(s%FK2V?ڽdcXFװr'z8&$;\X6h) h`kgQ%l y ?JQ[.m쩇=nUɬ/1+ ?DxBX(UjT4y=1K\?Ow7>ɚ?W"ۏǢ&zE@["du*b \TqKﱺ[G`=&y 8 jP@YP_0;^ّq3IW=|7؞4UӫftG/b;O-darrQHSo\Kı#nhC|3/3IƔ%&y'M$M$ @vO oѽ4PaaXqSa*٘D ­P8Ga_NqaZ.Ֆ,eTTn[t]uJAk $'d8,`_e`&M(7v@F?AF+݀=AIrh2>Pjdxpx@% a[AS\5+iA0"GZ뗗iZR_,GTLpQ>sD ɢc}3l Ω2%콊ξA.s]2HMKsE/趴xF=g t0Qύy@pS@~c13Cl=l,NgHeFrOV@V`7$ucRMN wIaM~lf9+nt㎿Q{ 1Fa+`&oGZ C%zwpM a?^7ʨkƬ>.>W@|0d N4#߆84^ Mޅ<\mnV4WBHл FB2=6&q7v&o%hm㳓'YÚƎf{&Ӡ$<2i+{sB 9]8b/+7]T^m+H:^DZ/pt88Q0^ϟy⡳fq U,GMY,ԃ) ;гr|P8k5VGOJV_iL[޷.IZC=JCT`q9(ӥ%EUu> R&̙ϘXҤZ޽CiD >ZBZqd}3K?MؘĒ 5ƕ.- i-x:O1~pT5lw#!> bw])ab SUxR%mʡo񢔵ҳBQF.js=`l8-5bjT{&ZfH 5g)_jZ3zFKkf`Wz#itŭ Z8쮝Nu,- Cۘ 2]R y鑹tȏz_d_Y97Ϟ\U<|4ŴC';685޺"H=5'#8j:(WĈLS|pݢ~XkPsX!0{p]O< $# gTCgM߶n~n11MWcSpمB-Dz^ABd1fBȔ4q܆g(s̸Aô^+9NYlukw=;]@Ao& MP>_Y~ʝ L Sx/E6).DE_n e*.م:1bcy+=\bJ <@GكטgVoסDQ;7<+&V! l\8k\rU느Q/f)">嬁g?Fg  lWkz+JM+Y< dޙФt*'|,%-m|׸EPkF׼6牲{q3m_x&yپGm{Ȅ6֦к^I8Ky \%’N74lwAj\8dcwX͟tKaUKk2QM5[bğ\ExiZSq(4+ILξvķvzVSAm\&:jh(#H\:/'EjyjIe*η}k/a]*GElVcAi:eM|?ev08*}2UZf1>3}l3K`:|>ƸYnL̒p+_)_]-Ħ5-{2@IS e ҕ?ӳKvJhq8=0vC)ALj^7<"P-aN% N$g9)`OFPpG [)NP4nRcWbF%j `>qmkI@U|RŜo!aVvYVhD>uָ1ɾR{f _Sf8^lMVn|p9`2VI5Q>[_8V\\b %IjL\eЄjGv>c6hrsŹ7" MDNLQS]>vNѩ= n B2[UiK6!I*Y@,:d@aSXQQ7AcaxRx!Oր(+3u$bҰ^2aEiCZ,yUO\t 37wshwqwG)o6䬑+p,E.8{fشqIgyA؉DN$#awblx } _oGZ=RaWnjx ۷ _s+աáAţ0GQʞc:Lv. I42Y,&6j=4\$%>UgV\>ɱ xpqIۋ*\ Mkz{,q5>*{t.>S@MM"O CfwSh=QmoΖ:& egeTP;1L_o ^=p 9FJv_nv4} lj,.R4fѷoŐ(P3lrqj֐Ok4 _A,,mRVR[F(v`׷KvNy>6J#,GUZ s !JGq/kI@ΛYp/O#|s)tZsq'Y7ND{ӤTƮ2mwGS ņMZ(0H}wأ`(-W{Q4t'+n/wK(FYAȸBTux=|-|Q#ץv9WlG [~'z~7VdQyyV;5vE5z2pjJe2TI?|׽Ւ>sj XhW,sEeLkAGYjb__$oA|dCJ@!H[ۜ6Oo(&,*kY:)y5Uuiv}/ʃVfAx!8@E|2΄tvZ48A1AH.͒ :Zϼ_lnUW:1 Jt<~ms8v$0V9"Z\\k醦GS}[ߒl/"$f*{Kr5l;Y[=zF 'I 6z,dDKrcQ̶~5/#wD)_p Gk( ]ԇ8, Bʞt^C"a.󥲳'^EA98:czH/6j1_Fbؒ}Bֶҵ`@]!|rv,H2JW>Av 'j3tTs/{I8]gb29M{V_junFyKBPj< )UO4vҍz:Hg 3*.jHan1XD jVt*Z4!^7S]:ܬgNeZܠZ@FS靦Mِ$>sR&*z 4'<oϯ8XѾS{hC9=hdCg Q#C@T끧mU`.e|> M3M?Q$s q.7_S$ *XnR]Uֲo%G ûx1NHgHL~!?].P@"-iVgϓð;#R4ȡ b&ih(E:fٜF-x s8#9+ nT\Mu̹vm\FWN"`z)0\~v*byӘ*!W Wbǎ녒mַ%{(2'Q_keR(mU%Z:I?G`Ԗ];Sx00l%mŗrk+dtuaV#kWY @+DEZ\+*v|Ml*fCJZ zJVz N2gTf;8V..=\h03۷|CGeeʻ[o*mSMr÷) 5gzo4+FJz0+E:Ì+:V nPqMX^'0u0,6 #L/E/$}\s}h>8T I"'7UzU(|EJ>-=qEv4m<[\$eԀmrd2O*#qČ*TbMLELZ c4w@#8-Ԓ +e~ 4E}@3m(W ]@zMq GL#ueNu2(~Y{(4-'l|m(au'5b}= rh:j؂9Lc+؟5!*<]pq)2oDH_UPQgpࡾ>$r-?$?2f7RVp+P}/bnJY/)Tk0ⷫ<@"z4:A˩В?Bt u4y)A1˄xy0h[-ΈEx1c]$X.26׊d)E/XeX!6R:\)Ch#GfZD7SҮ0p-+VgiףGI 4XXVf$&20G:!V!wlZ;XlNs%f~ P&4h[3_[KBf3`۠I.즇!a4Sô ohl2 o0p(+ jw`ԫ#uqT>G&z\œ o u2_?wkiY"Cإ $1cUVp词'g>C? D-\qʔϬ'=1 l33 W¼Hg#9 B onO ТY: MLhS['4$syr?U*oɒR (P} + axc[vj%A8 _?,y +:֙@ 2#o*Fc;񋂴ݏ®xq74` %-gмN% ݍE 08sp/ِ>zD^rgxQJzY?Fn|U6O r=Y!mPssUI|;G`}XK OIz_{ݝn%Jx,@,|=\'[mAeC-)Fݓ'ͧ.G|8#A݁Kmfa4O2^21J8+4DD07)\ P6vetSQTX xY5#I'83 w+鉬J[bd`0~ʱ\uٝb(h;bh`!XxfCO" @ڋB1 |QWȖ{hvduqNjFe{OVnvU|n1V` RL4䢔Bj9qQ~ 琳χ~(s la?dGaPMֹp8t;!^TF쥧2z$Γ>n}ⷥ%sP̻   }̎H'v-~9}֧`ypH;鋲 i, LdqQsSy/Z IiR^RfL+[XSL%P\|̗x7ΑsuQmO(ج@u7k8Y:GbjUa6@ku9cUJPL!R OC/HC)ޕ-t;  8'>S@+>l\-زбݐ FwR1 ‹WySZ䴇G&Jd| {Kd<]5'[*{Mb*#]1s>'CJ՜i P5=A np@]?VMu;~ncJ2B0i#ks ˨§<jZ0]񱱛 GS=ʫirǬ;oIn|jQ9e2#%e>;="Ȝ#j ]T@gD{@Je218b[ޫS@O|r"eg%ʗ H}]tNyVV i΋1#F5+Pڃx_jhdhՀgh)kt - grN<`.:Z"i]K]VIj& dZYe9j'zZ-I?#5Rs~J{؆XA%( !q0;Eȉ57r3-kBi3ng(۴'Y/Y|0+VGb@@ \ãpq'35Dgߊ#9ڧcB2> (zzB |H'ht HMV Okai2s#ݗmZd =)X86E`,bXwPp8*{'{f ;/!1_J3gPmh Ճ{č{@w d`X>wYC?.u۶.wPD`_ +:I.$˿JBNy%߼^qyi%.`5,#)\Ejz|@~Eʛ(UWܐMto+W~cv -S1A$39,z-ѹ59Z֣ܺ8;bcYƁV$IVuddw,c73R`1Ŏd!FB( 綳Hq!730bNbh+v*v5ǣCQQ%['d^aN]޺muwx`%88g!wTr*QzV% ׏?![h; :KOr%Xl0j}$h q5؟?3C/Qu ^m,""ncF6eK@G ^ߨO܂P+1)3;-Zd Xz ,w4M6!҇ǕD6jC<-rxCi Alr= 3v3g9sYDG, ]/L dvy]]0l_(vpe+BL\މ/yڮty秼)~vPk0nTjČ2) h.rU7y_)[#D<\Z9H/Ǐmx#"aǭei/[Inl'Z^WOUMǯ` Nd=FW նEd8 ltK٫BS(L9~RIc On7`@nyeK)"pk=|rlvJ6K^oIc;tT)9w==Фq0[u"`dm|{?e ۑ7L^Q|IeZ#&qA ߱ zXFؚmWzhm+-#|)Wxf{?+Ug!+eu{~mY5LjtD-6(} M Bs%3(8tv+HGu³`o ^jU1%قE O*BtbjV*hi7]V-$ F؋x Z]1 Tӓaj6OOGzQ ddzOЀs@WVkemv'dcn%϶)O7{Pkc8FZ^I~,Y1/زD,bsO#l_љHU&?]_7J>8 Q4J֕Yz6{gB <SșTHh 0^#!w,6JIf=b8'd  (@n[ufL˷Mp 5s_疞 NTB0R6rSεƙo8!_z)7h_ʮpS|LlUA[뢈BQ8SJDt=KmeW_f!M- 0C%>u :@(]J&[^麴2)TIAۗڹԿҽfh [ 1 kȘ|)B=CS@~Mezr?y9DF&*ܨǏ3n?rb6S>t=0\|+5&ĸW$bvdZ:°G\<* \,6!?%3]U[;x=R]Uwk\e:jT/yYq(`d<26c0[pL lR%9Zs}A)ڨ✸*^-mY$sh҅^P /lk`P i~]bR<"@~K{#Uu*q61)Յ[l0VOE/K[)M MFz[oD5fq!燴Z 6N}%ƀ/}kCHbYtu% l;U&vVpW=䢚q5 N]+hC<#ДrπKJU0n ]:T`0mLqIp_ANx3pgTN| r`g@Y-_^{'-L#tz4m 7nLC<ΐ~UXsFX^N]ܹ. Au)ϩ^6Y_>}IrmZA+\ zJg4c-?< KZDgM]AG!!L[@e fO`t޷Bk"& &n_C0`Ri2i.@JR6zKQYJ7L1AaA ^DhME6mJH񐿉ג7N9nRlRJ>c.DINf8wjC~ё::Yr)jL?{yIOg?+ .> $Q#rG{я{4TD+@n")8HeBiq4UDxb-߬kX.U@t%?W8|ȽXv[ZoB, "|ܧvI|~ՀEԥorFV% = 6+;3u65n"X[.\An^ ;Y4pM?j|ȚM ʠ7W)-bZC82|Ĕ=W~^\fsrW[Q]zd,DELbykL 9eGwÕ첚?D:in=ch8lS"iWs?5&5G{Zh]Y2ꥆgއ:yBI~S`oDgKLHoL_,;PRA=s>R]X'h-?4߄&&M<:LŹ=h 4AƖt4u|4J|ŏs2A_dj6CXUfmx,k˖=[PʨWP=eQs 2s5 QQ{;,cůbVڢO9O^&4:un[4<ԭx\ZN;RZr-S=|7oQ0G׉*4;1-a6Px_KLq?l.LS? ұl(B5/E?տ*^?j=z :NQV*xNfKB"WVa3> l9otFeXފ]A DS_"$ڷ³pN%` xYv"!<1h1"LtZ97_7NОc!FȺ"IƮ+иUZ#*{ |SF)xLGɻx0Տ> hˢ N{OikZ.I5Pm=;enu=B KcK{{Q z4c"yg.f 8ێQR:/Ka=;1b 嚄 @ҍ]nvWu#ctT&Ž|4}8A`b^оC"!SS4W%Ȯao`Qϕnc#*ߡ =de~CW b$L+Q$89%'"O 7w;ӈBg<&'|)wzM}[1wLH;I")U)S~jOJځь8J|c;=ry>yxq1&R'1€. Ы8HCmЪ Zȷ&5YVA{#ykput$lOzkĄD5¿Aݖď&_EϦ$gJGP"/=nl+A ;hQ"uE^+P-:($5"FoS.=<57HuEIt2Ub1WO3Sչd.prPZI络gf5v.C{g~f.K *JR$TtW~H;J/ECMڕdbhCgmʥLghxhes AlWb~絾J$T~n]RS]**7r3z?'11(&bFTKV2h,3Z)qϘnRoH$=wO}v{#q^4(:A**ۑV9Cb,9"VY^乌8'R͹HbQK`-w7+ipns;2s<40U@+{ ;\׶LZIwm[2-]~Y*!ƈ E,S5|Xj }H׏l#< |'T׼ɪ^\ҼAI|w3t-W;@p~MkBw.z+py4bll;\)٪D}3偓g7wp9UJR)?S3n𘕋1Ʌ;1hˋ= I4r:,-nm尿}crᜈĚe䅪 Gl8jc>-dyM xee^ Y_SVIl!f~YN0h^>r0L XWmQ/!mDO8$\2v&}fƩn4Q_ۮpf4]`V͇Ha;^pb_ xb⥈mkM^Hcg[m暻jk|>{rFht`- 79 K,};!HОxԱ`Q݄C;#7TzQa`J3;^~u, w{ 63Ǹ f, ך~NVi|rZa,#akc*zDX?hH?tWԏ'lz h$yo>dravi@|d6X¼G׎ݸX'/=a'nV!^mY+N>qG_C~ 8 9 [B__ein-Ph8ƣgZŸB\WF^w:ZlMMS EsPu;{26wCtu vΤv5U} ^e.}N,\v?\ٽl;*GϢkUT8XƼH]$xE!V M"i&!fG] HʤЩKp$r_ɇ"˶]R;]UwXpE:s%V2$ V"1Ap Y<_L"t5$A$ķȏ (үUOƓ_+P߯"WXiwo3[`Ns8ӭ՘o6Y_NZўG|an ROH @'vIĶd s@9\IJ]N# ;TޏF{?'m-*5Wh  E*BQW=uDE֍ oQAQ7*Y+ܼY }/+GĶDëڝ"E͟v`1*63%>skP-R:y?"qː6l:(8zտx!ѻQ._/5Q7`qn Lzt4K>bl(/ն5U||0dUvkPgDFsS8,t:@ti ߎܠKvy/v.EyDSL \gvKwdc/s(ulSdV47/eFK쟚́p[85^(1NYKF+,s?=Ha = o`W+zf쏅ٖ2 2'|0%+8THΏ*G])$;q2佊%સ*@}+$&A8=µ o_UcLPʥ:!Л13/Kbg&0s <#45#ZdG 2!.oIXpP#Uk5/mHp GQ#sSiU^!߅\K,5^G8o#&JD8yYGڛ>\Of #لPLPYX#~Fͬ#$-@)7)fQDƎݜXm/akN $y1GN~B1w3$KN%EA5*e{3 H.D.A~H[!# uD 4+fgY0j/CCG+ 4 N^d)"Yv@̸МHÆZluDI{{2tceFOyg;AvtWBHg^F(8eGW;]F͹rN0vI0+ǣKCB7"@޸;0b6pS]잖M^&0%ӝrKe3'yHk),i<H~ Ċqzsjk y񽙬rs/dO 3T`2^iF#/`? ysT_C@cفz)KpJϟo U4Ɵq#d ? ^"́caϕI$!5%kl@x .ih!MM{pښ(1X;%tm72 2bVXUщ4I:[/ \ND7CpBJQLEXAV ku3B~!J]r__*g9ԝJ<'mD <^ggI!3 MXb*?AFZ1e&Bs/ǿŎZ[!ǻkW)#2w=k6GE{#*'4)tIj]b G!ؖ!׵?GzUk 13bHx*S}}ʋH%0F ZvЮFqYU8O/wgZ gĠy Ƃ>oc1J6Jnղg 9F0_b{X)]X2+ bsS.?nZnzX(pbCE92VŹM.::5/VxaUs.2~0 y y2ӡf!I'=tпbR7k'hu%pTQ%rk64L uu̚Z$ ƞmU{iҀvᅜZ BSLtFRHQ/y+&FlYP E#kUoF۷.$wT/҈3ȓ~>l Lg`144׫H*:b5l#|oa-M)C䇝  yҙ20&7*\𲟚aiʲ"s_K4b}9=`\kL!xEih.Cb'r@7n{ܽ0-٭Q]k5|0vfDѫv>!PM~XMG=j]7!OԀ:<M;ߍ SA[ ΀=%Y"a)hquI!i}}$qlwirj8Q,!p؃fjA"  xdH9I]IaYձJ?uaT)RN(56LKϕ>y!U3"stsP'NʴĵkDN-YMh)5b!-.f %sՓqMϭI?GaCx $v9 M/a)KْboQEqo?FZܴ>R$ԭ/wqJՔX2:(a:fƒWy0jXX q}agl;Pg,l q3{Ճ#.m>iZB.Uln;X]٥S8q^ds5Hy{c P6uP8܀^l@%7u*?xqfPN4P"dL˖_Dǰѣ_$"$YН;&~OG_D~98?0!V\u*-j8KUjpl e5UOY#s:d?wP|\V +]BXe)1>O*c꣔9[8 bn|g퐨(ZіM*k+#oIvAY7J|-.V>P/meTq |.ߖ&9j3j(>i}nq'h8!b. N﷜v3'L߄,#̻'CBn_ # 8ʧ"R딳'ˤ %hZbG{p<8I*kΩ%$>>Z|<-#Az(s,PXL BТ]RIb'&-3;U/Z%!&#Z''2TؗpUYsN g AXw7opbשr=Xq7- 8kUXۋK=>WD\S(9x0A2Ǿnl}gu{Zҵ?;Y m0 z1̈tiɡJֱ a8O4lW34QpeB<4 <ń!2DphA#9XkZ| $Ɗf]aDCw6OU .幜*8aRKV}v T$`:3) A1Ī(gM0[oWulVVEjv}6KH@Ȧ`N$QTohBEoD{~<3Hiv>.$%GdN^ DKWuMN`ceOG^MS Bs*Gzj#UDsg#شɉ&e$Z+;"F2Ҽ!o2 ]|`~bVP}ϯMHAE_z \twrl{oLM!>vגoA363NA2aoUܒ$\2"pfX]~D"fq|E*rst;Sgqe+Fn$爩V=:m98F㺊[ XY$N~LO-,tp4c=q Z˃\6{A0dXvZKkZ`mC Kys- /mIw'obDd6Ұ= W9Uxd#< F+M%64nDPV'|jpy֏\7;|2IV&q}KA_U%m܍X"Y:V% E /Lԫ9#WW&hl}8@\ldodgg6FrU3sM9Sin=nC߯'07j?//OBsjچ`z G0QI Tz'>DbLyK-l83L'1q@kG Mf-JTy5: HQR+eܨDe C<[ DT@ɝb g%V .N}:*cWQ?SXt8?_F[?1#!3y*A^-=;ԍg% R! |\>sb)_ģNT^aր?4^QWnfKAA dT)JpYoO4^elXpI5fV_ kM%%a E>TgoA pHvJ1ƵWq3,׮IO2VіAqóu^pAxALpFd8{i9r10ϜL67붊(X)#x \s.+޵Cjx;j'(89 ^Vw,nD@q9iG @o`"@E]+>}Ug/x}"#P'P/KVBmC]"jtv\OZ)󵺸hXHniI!,8M yWYJ:ÓP 'JLv/y{5!`Ti߼x7?#~^4Ψm\?o}lmPfm58V&f[fƱ!BݥgtLMl{1m7B(La.]T7 !߮~%-a$ 1Aa[b )ĉ!RI0=O:WxΥσȮFrO; U`4j?RkdؼMz:Mϐ E1K\{,#&gٛ[Xp3U*BrSGtn rhnh}`fɇ)z Rz{($+bz=d^B-3+M C.ӥay>#L;&>NM"gu{b>k2ZoM,'y5(Q_gɵ}H্1|{@P|8'! #['&*tq\{4?_4{Cx3ȶl^L$y8M\ vg ' !%>ʗdlC98 7$ްQ2 h"AjD%h'H/d:D*$?zG)ȵ+;u7%S7( ?zr2~+-( kLL,BmKi.fз6j1*씸Zձ7@|!/5gT^#gc5h-f(l h$E,sgU:)<1Mn#0!q߇Ÿr PO6,=T^kCeMy=>]#iFvmy9|)msH 1>>qzWᶖ3c *#E4Tbx\rtٹճwDru;ʦpcq+exR&so=:m!ox"Ǟl*9=-+wVsR0EzMk"ƶTK9ǮT.8 ڳ͞=ZQ]y׳I8|"s: &nmi"~0R/@ry7Uxb)B* Eql r P$Hb#V9uz(6}B4b4"Rf@1c MD]=iGݤkJ0Q˴ְHYNCo^S$LƦŠ/bW|'?% ]K*hΌ؞5qk ?9^EBsٸfZ_^Zpڨ9fʺmӞ Q8@ 4Բɗ\?3[^ !'iwAPGJ9>l~ӼXL-X̛Kvǹ`Ïoс`kلXT>F.S(lHC :~O6@!PQ ^n)R㦟*bWQ4DĦh5$2VJBRG.|\7"({.{o6䋄_XHnJSŀ.Za1BNz)T=wtN# ڈ!Oԟ74qS$G \%.' sq]@Ck؃YK|ܱk(E{aF9uQRR&cc!6Kt4 7BTؽv&`_Ӣ 4$]AyZF_E'9Rh!I _eB_XP:t

#ga,U1M9VKOdhHiګ^M!Th|wD;#x}(s1 1(x×\L.J*1IjɎSڜP=:K1 e'Oʱ]I;j#ip';)kHQ ?kqrZYƅw'aNI gR#YA" 2ASIEr-[+"܁@ F4 ^¼5|@yb:=uL]qLc.DVQ5֯jjP=/Rq:{F="*1*U=NJzۮ~l~SWT}q}1,Sr|GQ=rrfC>XCa|@~# :Lk^$iqСoE=~/#( 9H@ܞ;1CH:lK>Hxyk·{KѺHؽ}MR#]ny ^5)ȔˤeB /&VwՌ }G-,QX9@W'_ 8FweWELKC˗nFuT#51دtHdQٲ$ox;Q{򺲿1N2'K=n %VҽK_Hl #)3[e*m >ߌo!%3coISfw< Fʃ%ُ`@Q{^퐙-kqA+023e Wd]51L6H8el0;b\ѫ_"$!< :H;8Ε 3hBr$s_c2 cp~X,"Q mMڠ:^ S@:ni9nޑ=M+NzBC&t*ܗK 7@¸o_*Yhy$aךfWU$>'9Ȼo''0Op<ɸN.H l ȥP¬/,lͻ!eE܈j^^Rk(ff櫅x"3lYȜ6]1\͸JxA{/ɆsI43R1N˝6dV4>߾H|E.Ȳo7=;JV@׫4.t G4h6d8ÈvؑaBB}7Z׾#zdC($R]C![5K(M#E͖9DjqQmDbDgH+H5oP&CjQ R)W}g{bĘ%l}So@Bں 0HCjOB%yN| ԽkQ֩ Lab)i@s%|iƢADM `0hAҧ|H6ucH\Fs,cATD3ϙ:E.WF|^CCkgC,…L=4:VCpظtj,>g?P?&5SM*%ܻr;G(ƪX "zڷ^e ܒh:A a1R=yuXG lĜb#^< & Y BC֮zD Y:Gyej[_w-@I~*!BK8D!6Rcf}Ȯ ja #'SH^|_cwSGY6Q:8E&Hjљg`/Ui$=yal1 _am b_*  qtZ56K?M:`Kb5MVLJx.%EQYg ԍ?cBWQ8ޞ& 0urwx\ ̷ k=IJ+nKsA}܃>ka1C?6Z0#W_.Y쒋 h '{Ȅ^vOj#?-X&~ Ta2L5 d7qhhvqj?BU4Dž9j!ӟ^-]zV:έQjGéP\&z|l.aS4iĩ:Yf;tȫ&J0/EVf=}ʥБBKq3,24P?+hSkf9ix͒\=Gc|yخP^.YPn!oGO'NA?*D4Wͩ*#?S4{ab;of-(𗃆oa@3A'ힹ˒$ce, Db-un!_T} ޑ dzxCTWS!kDbHqƀW,9)nP2*3.HL x<[-մp0[50j}^ħruRU> <@k4 w еJB_nς1>QrՍ RK 5P bjߌ,-Pv#D=‚.h 3[ 3N(gI|Z703dBɺsRz:6o pkwKΞ$lSlxRܑapLJbt*}3&Mk8 %BTA#ҌHθvUH΢9s&pJDc+gtu .Q2VbGה ї."y >Иݐ]%G$C ιpBAqϝƒ.`SiL['*hHYk!*)\t\KB*Xb^Mnc|UW(b8GJc4yRfѧ/&0gg4 WXFvɪэTEQ/vvH1Vq)2Ncs)Bi{ +DٹY7k͖هMQe8[n*YHuq۩[zD9uK䇦?aQ `,S7$}/H|J^K&1TNV-;{]l[횒>x=vY%[c~7S_y 2(o̰ȰHk1SkdvG7Xb6ĹG@߈f􎟁8,=O ߍWz Rkܴ8k~D EW@Nh'M{})ǵ\9a}D 㚾,ÃoP'*>يQBf2+; zk=z6V[ae呇G8j,ٳ%yd{=p!fƯktwH ?[m'̻llz_ .|`YVZQts'TV 0Hѡ$>FhD E\"ym%ud)%֡ ;<7JFl' Vs6ƢUY7$_<]-Viؽnف+5hW8zdIҜ רנK'!/, ClrVt衦W6OŽ,v"},+>^* mDi SaMN'/5w_eϢȧk>-?}[H]Y4\v ]PCdI2 U 5yj0㱷c eq#=69+D,okѠ:7]"MԮ(C7 p? EaLhv:B|A)!=^w…q~S\?^{I}.t6yU G0-C9{G7>T>? L@ 8ΩV6B H =R1 %Ѣi>/\T$_cPi(ɬ:s<>vr>h)h*SsNy+GCS#!ZDr ɀP0懄!t> 02dB/3+i5_b*i̔{wq`YRiOt|sٴ1C~RHQ+evܤ+5e@,=$0 0J~:Shrjv9 0Fq̡j8E$rPptan%H;;)?U933LRĵU%R0*Wdrl:G|@pIl4DR1Vn+؁Ce鬈_9n+iؑhVz;\xC}O_&ٍ0EH18TK¶Р/?5 ʹ[LxP^,;୉=3#9.]XO!I)v Z߿┐HhJؤH/JsQMf1Jh.Aᗘ'G4 =ŗwF-sB dX`b(f546:˷`Zj VVGH_Wh*v08'4"2r ϸƐ9EB[WO27.X">Ft\G_X]#o 'Ğtsiح׻;C|g7&HYoMI nˆuZ!?U'&T\~ ㉡Jޙ`-FɏT$0 7mpZþtz!ĉ@ eANe{]'3 7LpC,)#Ubyg$O_f‡KXI -D70Q1s;E+FiX|zUJȫ|t]:^Y̌TiY>G+ ZW˩9Q7فEJF=ܯ{1 ֥ge%q'1 /Bvf>]C <%,oul |v KE78gd"Yn`Sjw<Vr,@˛2yc$7i NV_t̴'ʀJmfp*B%oY#C  Zze2 >}_t4THo3?zO\8'qCwӔK ݠ vΎ.VRqeͫUHࡖJ\$vq sp*˄8yj-!D:D\v- ij`ݱLJz}~i\/1gx#P?chjCÃc |ɦ`EW_.4}M3y .u>Sr/E;'ojVG Uwٿ\a}N";+D7G0Mw8硪(Z~ 5PΜN/Q L'Ksk',B*ff"]9\."D\[uIk-G?]3:}Ya^ ~7<}FnA|ߎ1CZB˟mW̚${thB8l\*5F쨴u?zGJɎU{/@-eXCl aЫLW'M1ha>ܶһNI)Xo;>zYٌպG<܋:Vd"t=]r(͵ %ӡzMUm#ef\Y2lF!xyT1ɇ WܢeDżAA%z})b@"Л{m~J&В6?M~q(g-}xU.Do ~Ht*ʍyg`%yv4\ {/l/1/HmlOX|KZMQ7ch|,eҸ- U|@;z"~O=,9]i!"Dn84?*+JWhLTgxSpODXD@}Y6ϪBXQ<9idK%L!-otlE!Kh`F ۜW0seE7 ^~xPK51J `Kg$|1)}T1Mgɔ/k:N!s> JDTp) rn-("O}xg)hu%p/U>[D8)6"ldahZpʗǤ^+vrߚBLx pO5"n}灓Iu GOuaτ;&)@kP2; /D9B=RƛJ%dd4on㟎GVzy(Li~:~;˩[sjɗ6g! u@E̿oM>S _4[DP-P6E4ҞF9NӅ4&mO=?@,[ ]$O"`q%PO0?%(hD,T3u{b mޢEQ i7K?Nˎ\CK˙c/U8b~Ro!HxIUn"ϰ̳7$v+4Zx+7Kȝvg?Qw47mh-1UZa*j鿬;3ήR%:Ԍo.ry2^xV{+ m 9l*Xr5;cYQU9|i09pm`A PS@pID,% i{9mᲐ51~uf ;\km]3BU}u Z?L'ۿZpUZJ]~eWTuy:{dIb| tGs[b,zd[;JEV^[;}.6N!W VyFp Ѡ"w9vNqN,0hծ:9R'ש3G^[;t`/%GnSXe&5euHA 40gƛY60\LBS?Ƀg<1C״Pp5ԠU5|`~ {-K3H w:C-<-;+œf"YIʭ1 B&U*6B`5,D-J%=tdJz$і6>M%&)S#)%yWriX^4, W.c~H#uǝWIeЂ+S"LL =bָ&AϦDF` .`'7SZ P҃V.'b:}IN y5aqU87xKA/ ~vEF bW۲l* =:ZGoo)H\yjuM-ц]-܍NG=8~[rg;?^R¬35;仟3Ք 6qAZ:B/T~==)5E,`ܨ`SHk4`Sʬ\}3^:ߚ(!μFV9at;9Ԙ~fX?>cM=v\&ð~4Kw'w;˄ hL1 ! ͋ (.~~ 8k3t PmrM ݋_ET)!R*sKd{lyۢΡ D` 76tNo_LfFj`#z G4_G0'b/iE!Jjz6#@YK"4rH9rFa֞ }z~^]4\{G0Q#/z;K+lW/J4ȴ~J7frb`1=ۚF'~ 5L(wcg9"V94A!,Һ< RXu/QT("Ke[Y`,(Cii^cFMb2NܚYGh 2^Pv6|~2x2rG {B{8i-d׵OQM_w"P$xg7=~-Ϝc)vtFWa-t4iHaYEĪYyCo}oqJ%&>_7$fz22 RӘ ={uLpE"Btɜԥqt;G~¥00^&P({?FrjT g|Ǡ&w+ y <>:{nT=1E &gǓU-nTA*Uc^iK>$q =ʎJ*ڤ TB#l@]hpizMVE j2r }waDS>ZQa  ؉K _ɺ*UzUnڔ8GW5'Yo\RdPʱXN bfy$IfnO[!rQw`QVg!7&XKٶv '#Ϲ>s_}ps ҜV9bs'5N 'gBB4G[n zG!mD<~1WMVbi:y|#Խ4a;6q/'!} ⒎C{ hEFn]X`@X>vkZx6 C\yU.x۵o24 TAdd<]$yTǥ,NKT$8xˎe$Zۊ+Rv ()MKxvH]G=/շR@[캼<]NEċ~?q uaSA+<]#W+JKdkscBvtoxA~T3vIO%N$ [\(W]D,0,cv6A6f\uh1w-m0ܠ[cAH r!gǡ˾DIْK:*qVyF 2ÍT%J~&Y^ 0 UPP;XҞo88Y/Q@GMFvي"HN8@Y>H 5%qw,0lC-a4*0\z3Dy*M  =bg:ؘ՝=\" X)K-s>t-DYjЎrxӤ̷2=ǽu\Rޥj/2]K@;Qᶣƶ9C et]"VJDvA9϶;F ;5E=ED'?wnx̳1$Pz<PLO҈?7WKۍ<h;s<5ȦszekK0ΡPc\.Z긤% hKUO@ׇY-sh&,Ai}gVs6*k%Q!.dRyPZ:9{r2ʘk1l'xh]:U8Ӱ ?} [ 9(]a𖱯N:Ym0UNm>mul_Q4p#bn_^AӜ.mI{͍fcf<bot:G)Mq'1oE/[c:,bY]ײBᛎ}Z۳<('(Ū)q\pH}2P[5}H.5xEị7N=L= Mu%jHaPS K'?B+EUa:e,Y  ^,ds_4"|7u`|#:s,S`J7< 9dpIy-q8"maFK%$ǝ.gq ȱ6;H,HqocbխV_A;} .-*e(z23Mt#kYJ5ţokQupNjz}4bKmUuQ/S3RL4]av%|J?.3s9jS$ES6h[ov]yb=l \ iv=5 )Ԭ~u$c[/4`砾ooRd6醆з|ֿ  Vql]n}=}0LW}4O '='\VLtcq8BN0a=y%Blvk~Y3my!!͹. ᱃SL^Cһ~*FE*p;L9h"ms5J4U7GD|#t#>%ޜGkͩȑșf\*1WE8wJM%fo4?I*(\ng}Uwn |:K y UXI\E.^,Ō[4O82D%řLv<^ݚ6,G&]?wYiPlI Tz#teN\%% Oeո:4Cڹ9fG =+gރBr"_T">`۔e VCJ}կx3Ĺb n&;-0 Q@>\߇qP [C;u<Զ lyc_!IB394 Ǟ 'u"=, N7dS"&ktІK3C5/`!"`3WP?k/:@6ZVM@gʩqjEχhskiPxRbNꪛ1ZJC-\cBHP)70!4B{EbcJ5o I][ӗ )oBwvIo? ;{4q6IBv9<@ NADO&HŗuZr ѓ%O{s=exnˀ DFTf@GƉIN0F_0 sC|yKޝ𕥾2VzZÛ2cS " j,X"lw̧҅SSnWw$|ʾ j5pƃ D9*am_f[ݘ>/|-=3$m#ų=Қ<%T\u[&p\i|J*X iLt8im?%# ^2KVCǦNrt4(=+9@yvڧ}e N7DSÂ杋#oBo{a51 ߳SF;^{2n] lA1$Lj(~m׍ʨЉ >G0xޙ8s[]B*F:w>.uG Ef(mrsn%Hb,-nB}OtC.N$2>VjuG-e%[wB:?-KxUVVCc<&/KIev Hk$7KM]m<0B.zLKlL]oOQTj=.S3%0a&bm!GT;z`uQ|o _$\[oS,`Ϝ200 3Q3DL &@-2^%vKFk6[:?{tG0ꖔܛ*[w&=1]c}argQC̚ Ҷ(Mur#;'N#~V/#ɮ&oEbBG;5l#P׃2ovFfDTuG<!В&[ڸ7"nӂr$? h)`43^ds}dM#2ɫ!G qWgl[ЧhȞɥEj,u}RrxpAW]Cs~Ж{Iib跶H _;źWZ,NI'{i*')_amqɁCF?u"ijM^%&DRz njQ=V]Ep,,We1{81E{[@2.!QfzFu! "^&HЯ"3mqSsX([ϡF[ēTFT`@V25 5_J?I.43WPUֿ:CIc "-_AMg=ð:޶E矂qX~aLd#.mZ,ߗqo Fb_;fKy!16Rs3WY윦d۫J). ,ID.uE"oۆp;=oſL0͹qڕޕ5 {e"tk E!"o]s ·'=BEE`ӫ Dpc\/g_'M`kœ\G\$,WM).궂s{)dE9ϰjIwV0>rKo>3^t$E7ke_܅y(ڠD׌ԳJkqص|Tcdo&^Ͱrw~/cE5AyHy*'|L /)@yRip5H *fO W^a61HcH!ש3'7vi\A^LqR{ |K,Cu,B;eL٫EGѦk6ZTV!(4q?XQ»<`9frAؤHk|M$1h o5(ִBcU@BFG9z_^$7[do7mN- Y#[j4q2$ CmKEWKB4>W sepLj;jpI( $;^?EPAMMAlM Rzn%T;3.:"ZdV6J&t|ӛʣmnGMWzq]]DHeV<%5PH3 Rf [}?h;av\ݪN7{r;dRQEgZF[@ yl:;tӳKШd3b$:LvN30m&Bv8Qh,QB()! _SV"׊ڥء C52jtu%vOEDv%XFQebki&t+=Nj-"aD5 |Ct:`v ۻ_N.DZE]-A]K7d}v;q&kާPXi`oIgva_,X[my }(X$s#P(*[$Qy3EɔdMGp/cUlKU }ȠٮCmg1xNPu'ě n= ?⪃OFC}vr.юYqjҚQ3']gij8C< -iaC8<_'=>Mևi:/lN.y]ROMHSTt95I-f} :$Xe!s@WXctH[`TNMd@V&ύ'hY- Im ΠG4nqL3mSANHl 4PJjn Y0JNK&J{YT3HKKh 9&= Od K@aHgEw-Sby!}E [@l#8A攑;ětkMNH6zy?˜i|XeD_mG!4)cBsboA*P_w#)sQ]-!}R(RAEc7!B]^PJYs\HB:o{F w U_ۢM='\ Ƈkpj5rLsPWi7<L 8=RY"( PO ʼnn (Y}cM$jd6AHLd#$|7 2KALmX5yd(G܇2r̈x'Ry[HŻq{#:Oo| ltݚTNH-gJ_Yuiƌ۽C0ȭM#!Dɘarp2-0fT,7΍%$L[U}$l;x>p 409LtO"tK|Ekزf߷ԊÖJpꮫ~e\E(N eXZQzdseD%%wf)K?v[[ɉ`-Wa}ė8iy_r^]VV)no {}mE |9MNǝ1RTr˴0{Y|n:[:PGD(Z;wyR޹W \-q47Ϗ a]?`':g'7rÅf3pe+]=`Y)yʨݒ[2MURo JMy͟'jBNIWo@xA#ٵ\؊Hd\5'Ir)kheswx+-7H-ScfG8ȭ|F^.yaEGzq}nLټ)#{M;XpeV4D;;/?D)IcUw@y[2!oQ`]}:7긏5;P"%;)ޟZDzef][9Å}"Yaܕ;|Ro x2d9};H|=ۺB┻sp]horwT=߼Cr Ț/@݀+ BO$!H isc~oSaC=iH=[򦘏k5,LMleo/_nX Clu5H*!Π'OhGFk;˻6ClQ W"yX'~Fdu<YqU)λ*>o(ܵnf%>' Ý,~vgbY -KjvvGT(/Қ]z!p^1qumyhߨ$ޏH$V =  T$vMɵ)q!wA]1=|nyдSnNƵPBVf IKsex"JoS &5\G7GT)g^EA6w*e]15>7at^yD(W1yGP(!^%ZΛDHB8 aP^UI ;N 75'"U$!jVޫǏH7-|FċE3&$ڬ'ȩURlЉȆW61w+pI{=4rOxٞve3:L E\#T]/ ϭVvu w WiOi*r{3Loyl5PTZ>tĭ#zxgIt~S)@hH-P䧸9bMHΧ74_F>#׭h˪Ak)8r;.:hb=^2]߯K3<6g*yE7 {YO[gLi/#.˵{NbN3w'tQ? |ϱ6h>.A hhsN{3؉*߃W W$XFidx k+%3< >d3?dUZg'I!jEzXvo$^NvȚM<-Ξ mANRqX'-@X$݀5ܷ">+c:ThU)_Ήe~=aT_V!cV(ζ&Xϙz@yjQ2Z&]n%v^'hd8j.Qbnt?MF+1 KsN1>?*]ht* q=(V]D+f{KM+{mK۷+s}2ۿ.GBuRd ɥԢO1z?r1ΉoIĺn82Cj=~6J&0qjQ.jNBrʂZ]Su\G:~>Nj}ҞAo eqsJ5gՅ&5,H w+,`|ȭGrP!+-\WG1] hU ؠ;fd'/!-qdI%56 `=vN NrbPu$xŸ;Ӻx׿: zƤCv0P.z^.R-q#Ѩ,T_[&ſnƄA-پ#$dl<ނfcڸh!,il c3}wWVi mk$ei-ꏵһ"u dV45ų0[nv~[d Q9 kB ;VFiסk**J`ق2:Ry2H%l9סPC-cհCΤޥ@7_΃F{<ٖvD> w܏ɞ ݠ5\Z}j8 @vS>WMR<<:bī+I{fuJ-GC>4.}x}#xX0о"*]/̺uې7"0#M.S|d%$^~;$^Ax5K2nCbYC[=#+Qݝ]8Sc1p,W;dd&ɦh= j`yLS쒂w`uI ?CGwc swV7[F}U٨׫U+( @ݨ2w%TX෢]ᛛhK;o]W(&\L脢i:IiS#j|LK&x&Ha ];ݟp4(]t_8WYWU. Q瘍HD{fuy5,0NV`f™N(^U`tU -K/Ʈ_z%W,&eqXpl}iDRG"Z˕5x^0Ɏ,/V %'^|˸"Ehr'%r 'D0fIR*m_} }F>ZuA?<$IoDt-4du2yd\Rbjl4;E{x밐8"(0(qE] 鬗CSXzJH4P(#7K!چ?ڈ#4W&o!P 8c`"-rJ]2+kݾaNꞢT" #F-ia'5*o{9h^Xo;HI939?VQ u!kz#L.e+ /Q3@^ۂ+Z7Щ-=QO4ؤŐ'簔 8[L_TiM؀7l4^69`I1;X05;sz XrQ, 0&Yʐɨ*Z 1XNL:7yMlrO\pxa2zkG En&B31+0I,=8둗,2~So.)AG(D1n wkXNd?+$"|==Q@wgKx0óUtVӼV5]X /듡-a)=jKE)"ź`׵ZHZlemӊW4mmҭ-X!i7+fvضk-$O:N "G#q]+yx 4 ),¾|$3DG)Wko~hʚ ` *=ZS cm!C|E2fdKqG;P-,i=!L=u("fx UO%˿$@N?<ezS̊{ncg ʼng2:^v9Ғ<}k&h5'2[pcO , C\&aS.rg+ohꙜ LqCnCNCKF(&t@H˘2_i&A=j)BRv4ô w%;`B Ӝo- y88dQQ\,i5{_ [\:Ebɗ>[ º8d;n F,6QE"vt(g8TCYskeT i16@E0fc8Qر1U$q7M]]~ۣ]G ۤ7` 7t`zzO T7~o.eY8SfQ}7uW{$$Ñ9}$;~<4Cס+zU#7^8cnY2*m&8"+~Pǭ!FHVXEx7YxT'T`d']71}NZo@8Me^aƊzD$$ڄ/2H=Hn}B&on#6N"Ϊ9=0'jFuF^K*GǐI dZP# >fܚ̕lࡇ)|P'W66ab#K2|wf#Z}&ګY`ʾw_ vXz5W Xdi,Lyל"uA'3ݹ+]cX|;Uu-i̽nO y:e=knR&ϳ-;S2|ʹx4FYDﱚu _ W  KԱc#kxid ҉E1p6)fz j`;&W&Gۑu?|q܀)!'GBf~z>[kG/FZu F/乑[>$Ty5Y8B^y n܌䌐B6KSJ-W0ͮP#3&d9BS=IOq+o't5!еN*'R:&-2#2,_ C ) Lǩ"`徂J{$I|6'Qv@1p8t~ Pfz HzR\7]R-yA@{VC %JMWb{95qa^%@ΒC$ؾ~R4n u*iğ&_ `V$yF=]%bKmCB.\CܠSp\C̱͸h5۞ǘm[f mM `K@R vݨh7D@X]ѧϤ+6+>f(S"#k:һB1[L]AJr4 W=+=AB1^VqσD|3&@9bxArHu6 2n?n,fB}r- 5zT2ډT2 3,2ԋ$gqS1xuدZ $#)dX jilVo#GXXng*6Ԗ՚@>DЙ3R\[5=Yy#D5ixIh}15O~U)\+ۇUc_uZ&Gu$xm&`۩)']P) v@.ٴ<@G3bwIk_._~&XIuB? dCuԒo' m^Zfլ;iuxGazel#Tm `%&0&sy7_{+~0($SUxfJWdKT*~GA5) `4Kh JL%T8(#[~*\>EoC"@U^G ڎ`@ĬvVޓ09/$}'?'-RbFF Ru$z_U7>֭rJ lztn,sn۴}}zV1O!B҈({LR:u8p]oEƠAGZJ߀ݬ`Lcl3|h̑]$|189.˱wxtgG/OtVt-ƃOMa#>}-9" d "4 jȡ'u,$(eK55gaQD~$cϦP]24ֱ%z'){)(ȃe GOxq/Dmޤ=-.iϏ$Z%h bI[ &rNsly~ny]($!VcuгPgGRi3qMKRFӔl=HFG8 :SV߿a&$8S 7Z,?\oΏ%}׉ʨ=bry04+0[I$%|M~b@?ѿEBKg(Wp0cѝ.ijCGFn>]M4^Erhc0 yQ &ė"Q-$uR'c<.A~ 5s_ %c{/;'5i#VdNjw}#X?w˽Gi?"!9)aw\Z'U:(!;׳YL[*HsjW]&uݽu-3Qs]3{y\=Oҍ:$] |M|Dr9"I΋z/A$*Mr>o A 9xh J]|3`䓖9H>vCe(m 7+#2QKUt^rl5˵.nbՌgyAȊ m.t\r1|-^|*h_G;!W:c6ʿWt3إ" 4 ̉O`3&#);`K|cלC˫"xT6l (03qz`8%u'Ba.or(Ui`oŬH`?LL22c7sjK!S}Q5`_|U/"HwD ]ϓ u06vYUYcԓV[OlpS D9R#I%]{nr0 9@+9!&i8 .!^= 6§%,^Z>D"[ALV@`$|Ѿa%$f_kn »K6o!b; "L?[|dh[>w|L.IC0ZY'T݉cHW ~ Ȩ~P\3HgfMۘC,K>л9׎;G͖R$׀b1r Xnve=CptkFgc(2l9.fvmiTqv[ÐM ocIj&%+2yJں"Ew$\;$Z1;A`Ld7Vl>-(6U) z@)+X rL  }tj4W~T^΍2Pke#xr@;wѬysZ4x0I G4-vU@_$M$ъKW#Q{xFTUׂl%9W/#JrVѶȥYqQ ezyY9{>,+<=gڏH|Uc'џƂMB3jeW '%# SgHfj9#C9сƺl\+K̸}jiN h SLSsҾ^ [կQ9`H0[kqre8PyB;}IfOA5M$+Oˤ|K/3`5u({g3Npc>V"06 `-sSe5rGNۻ_x^z屗ZP؁"+|6_蔣2ت#X~4=}86# _Tf3/!IK W6q a_'njdtif54l$e3nubۗ(_+L_SB6~~g8bՕGtϾ{=l`c|2p/7$rl hSA~ĕ˵;(=]a;a oGo9}ƔCx'Q~ôG$6:uՠIHimLido"ٶ;P>sE;SB+קoh K1wnFW{(*O0I[$xctf;\&J{p͢I*DNϞ Ⱦ4ި3 vqjzRipGpԸ偌Z6 te.Q|I2TX4 Qo%D7^l [&x6-3bBtVW@2 -5{PCn`h .7{{'bCUQ Ŀ[to<7beripU4Shvr @i1{:(i sne#@ڈg*_ȑZt9µWıPEz Ti"v 1iX16qS"BĩIOVf\wo'ﯕx `t'D̍@Jm$0N ibjgӓ*1Ϟps^(CԊ(H J>=# Z U/.=O֠Eo$&+ܿM3CM@q{8Ɔ9i& eZW嵐;.r.]2Ԍ6ݐ5qyl`!sb= ﶰk-.2nX#imRY˩Lf5K)1:䧲WР6Z `ye71lӛWcpT1+Cܱ., !:EC3=nK H9QBT7d:'#uw-#Of+%4lRS1 Q}3Y8˖As\4W 8YHEw *C^aMg9rN 7Rl[2WPn[jAwطDzXia kS{KYԶd# ;FX$~[ =ȑj$d׬A$٥tnc7¶cI˯y6i[ى,6u'],V\Ҹ~2 u_@Un6I rCFd0^W].5Z7ưTi{?/xa g:*8ȪE\a uUMɜG믮E)565'OP'~N3m2_/b2`c']uOlʫtňnV71Un{^$S,PV@ nѐ_&i"(-e ֻL[EacynO,Կ8"rz8a{|ŶC!y$2 7vCC$S ; )ܯX p2< K] lZ e3 (ZPTņuQeNN>v5opN\OCyf'K3)xPcWfK1 /U瀐.x_Fu:}U{g",i칺FP+͂iG%ʨ]&cG\y' (ټ4ޞ6Ýcy;#f֜@u> ãH{aJjqr tuٷ`<~ v^йQ1u_\S T.4ŨQDH|"$TYx"MNҶ/B@ ͊k9c,Z(V砢=7drRX2vc EIpǔ9Lm.Sـi`_Szo/ 6AѹD{]R-SpXW= &G|_C|Xi:-E˝{@[.@;(TU'LpCc&Wu@w1, |~Z"Gk n 30|ӟK~"Ⱦ3Ԕ\8 UMօy|`._* EAJ H}۸o) qi_3I yAf`3@%] e^ \dt%f)lݖ&htRDRPcJԓ1H7'<4`Wsh-hֽa uVcefRvmץGTzR'qocBlcZ2#vuwxҞ5=2~6+Bv.=qTnZZ80_^TTV=aݞS)QJуV&h??\h,. (l{\jҌv5*.EsfAF٤c#*3D ۮƓ'b9! CDRxs>BtV@LgJ%D5(=[cnp}-'6J9ܚ8Gi-|bk/i7URLc{k'~L{3/[Բ3P'aMJ+nfiaL西a/C.&u}3tv9&DP嵧m %?@ݳ) eʩ]Rw!p# 1}Vxo,j`e| e%k5VJ&e*22'9D^zq CyA}j:a`SY.Jɩ-U9.U2WN^oԋf]HF39!/ހrY#) s [CXFI}/C:ZXǨ2|!dfRD;GSq`+~^; JFTc̷lR_L8ELf$Xӌ@- 1O1@[fdK$`gx; swG 65WeEMh`GP~j.'w_>ek>j:^^gÒ`BW2ҏG ̡%{(hّ.nETlLezOmv& C#zVl'Jם6T  ?J%-e6setixt}55 lyed9R4.umt0C.;ʯ5Ǩɛ54ʇ V!ۚҴ J<:M{qcڮym,A©a ZUɵ@OR6|okES8u`t'˶DA_p=#+UI$"e:޻47mZMWXVaeaHY6ч= ,G@xg=ȬX!w$(rT/rHBpF$LM[ OoOu23gh=鋌~v)P*ascRp|v&̏YP().mnN0x/@4B%G'/t*b@1H6 +\_\vKvX/C<'ʓf*)wo"U6#GoI瘨cRGcQ^ÔFϮ,wcMx KcG|8рz|Koy0 ZdbTéּyo̗ ?Vɹ!1^xc(:5%\k{ɕҥ-o_rnDo/?ZkM`Bi;/W~pد'` k>X '`ԥtFy~'nt+ LήNyJcz )[moU87,vLHP+%`ޖ-[0 S+2AJSOQ|2KW^"QuXF7)~Mċ'ixM B0Tussg(rƤ}kٜԜ8zYȑ6x ?+=`=r793{F WBE x^> ?;>Ӓ]YSc¦ "'ޭѲ٣tĉlUY}xgu>VP~8^(R`Su'YI7*dRJװ#}`tHa}IvkD\) ϡ뎤xumZ@z ָHK?xdb@ BgVh0qfN!+-sf9&jܸ2rTNcB#0gYTn f@0.7Xh7<è wcjQv^> t!ch~۾?Z1J?,EnVcEnR34Vh6pKcPqVJ$P3vpॗcaf/ #(2 8ꂗ.̐$xpмXplM RNSڨ᚞Fs8 FFgZpaeI~FG0Pujp0mr.0ʻ_HR&. /9r~8fzթb6 > 曞}>_t$BպnӎJ 0qjR?-s#K6~u_3=f;()jJ1fyh8Cn]$J̈́&,Y -$7z;fvo=0Og[<5 ͑ e0@Ra*|WF4xsMYM!n6$TF6TeeZ];ܿbS7Ó75M A;2]McJ ]R= ~wNq$Y7ʿjp N9dΊ3LpL -NdhOgc`g-3s + aғHp'^Ϥik?YvP #tXHT[,Ynj<;OO5 O>u?YVATYi}Nz'ijRQ7kd[\Ivuhrʜ.+J~—les^o֬{>5MH0g n,%s _ ~r,Eዷh\-5 -0-x4J? !dԕ钥FiP+ >Mq}} lG?,RL|̼Do=u{Y :?[&cq Q5Y@T6 G)0@r$'U4^Gܥn\,uQi9~-X{;ߴfRbFN3THZȨ,2>B77OQRʔ t.FN^<]Іhupjb֚d8 wUjW*r;+?up|.kBCۇ=D$ 1H[,Mk1K UXGs<|8H' L"1  V\ɒyI$H'l8ob`+"ɅM;UtFk-8dY@ G i'TqowpCP5rdv+-̇Jم]Ғ? -2;0TԴy؆vf4.b#|N }oܒ=ЩoEMZ+m؏GeBsԫ2 g882uN0{ۨmQxONEj탽, 4fU"jvBS1' ͪz0b,(΁`)d ?s/[UW"@b;A!LuhI-S0á2~Zp/<=OA-WB/Ɩq ד;ƿOV,L,e #we^gޫt|p),E/VM_Hv4=~!7ʗ5lN]%& ͗JV,})+iF*Њ2j Q1SbBB){oWB՟lGPfKJIPd Oϙ[/WQ_RtG-?8[U@=W^+ۡ3b<:9? :%E.rw5 '\P\1$[m!53U;+&ǯS#]QR[ly;xNKm 4*h<*Q҇_[ _ L^*qP N? |c6>Dzdf0Ɂ:S#Ď55Iط9H_-qòc!^@>ַAɹAUO}ph?/]at8ch s}*g@X Yp wJF¨R@ 1UDأU^W 2mNB8WR @ u.k)3>KyJ}g M?cBKe$l!hlia (9-W}zk#& #59EA5%lߖ k(A2flfv?BH58i^a6Dp? \P0pXw3To4;)6עXD(J+ :UF!۹9R'k#\KBB FԤej}0 3*´GvqKsk`ؑ֋m/`X5T4CGM".vK/ͯBt+tG$W7:]͛ٱ>/Zֿi=+\Cڰ;ܱ%Oo( :%Z.ߝ"PFl^|[)s)߿dggd\" .JWNBlh.R歟D>U|nMJJDSu{;u_I q)mߩDŎm3?އf"$^x_,(%.ȵx4grs8swNʣ)Z*A뀆L7|NѭI~~wRI7@xdi3 &`HIK\IzY7R[Ľ,]V*,SM^:Ĉ"y1Ke[~ ofkDq2dkIYvO Gá-+tF}V*}߱7}Tw`l'vb_5Qg*pJ eH~PxPYάnm~tLT²>XO ˬ6:6VBm1_n4r6;n۳]BKIq;yGqmuJM/ݫc=5<@ t:HgCdbv8c7<7tǏEGؿVCD>GTr% [ ųn2|$nкRF+Hxwn?S#mΧko$PPdFj^D*.>](8GJ.ej~#1\a:r鿟X=+(;Mq4?^@+udž |f[v\”k0!FУG2ө}i"!8lRd n@2dmMKP%;V >#G>𣬟vDT* p ]h]z0ۼx"〆bĶ~\qX^sG"~ 2Gl@v4_P8 ъށڇٍ kkC"o8uX3;VjCt3Um%nTtzM=ӡ\,$WXT/ nNˀ02)P] /sÖ!0EK5sH5qIB~P6^NF@[lqq? !+J{{KV$+VEoiA\ڔpzwYo űRqzk:cc՛$m}ƈn+BK}a]zޓ Dx 8Np7 JL>u#'>[Ӯ(Yg`8ꝫD{Ҳ |ʣ9H _Qv)byԃ&c/qsX_{yk7w-MDъ`@$.ZgG/岶/YmU8F؃N?+eڤDxp> n_"wt #K=.ayXbPcǠP j{:a) M`91=I<1{7bz#m>BEEOI/yqFp):FN{g<eN¡ry$d%PىXb[_P3n ˖PPMH:+?ڠ2@hI-Φ)Ȩ]5`Ceoگ[hE*m(}LjYeVPAp4´)zU2 z5Rq !M9JZ✡Zu s?lߙQ|Ð^0P<o+|Fnb+B%{>umdP@c{F=$I.} .%N`%$XR0dp[kt5`;?BjQ[in2TP_k͐NܭBy*(MGKw64I1ƋG']̪ KR=sqfK9:C #]}D#REђA<:QS`*K (VH: ѻT K.v^B/;҅,v[W00wB.%Y魈D1N}z5hkL o-50 판ūd=&+.2\zۏcmm|9/:z>c9kk YZ'PVL&,g@̪mw$NpBcqe/C2tDN8UNɑVMK J nWq g[G ǵmj22$F$^~|ڇ_v3]Q SO66ű'~O72h) M'=](65X3J5.$}F:CyzM^$@8IVHGVsuQ1ĶfvY:&^PQqnAtFC7؞22fbϳ'"'TDmߕ^ui*1>_wBXKZ:]Y˭朦Ӡ"0Z*wJ#nVH\>L)dj^  PLp#+ʃ܊ &u}qM5Guu G"bɩA8(cI-/'@ful| t}ίsE9@»2hBѓ[A,Nx e\1"mۺ040ڞScolz%UZt+xڱE56{c_yd.*.B7>yj+` Gyl[V,>h6O[d&3/f'! H?ד&hjp~aNkg`ْFH;dZbMpZ.U0$t)`;O u5Hh3 َdv#뺻Ay Ѭԭ-Ym2^0(⣑q,` @| } |V롬@XnВd0Oݲf{7Xs/unicжW9;:&f 1ٮ`QV]{Y1B^;NT34Z!Paج;;7q8yX3cĆRV%z8Mt1%X>6 10\ %=\d -٪EX1aR^E6C >:Q,-yQ&/ A U6=D |LiL@`K8ԁpu^)}N\\Rϭ}JY&gFׇuKN#8Rt*Lz;J?ۂDnb(1K+3qȣBtOT&Bծ, PgY X՝{A ޚQ79w}ratN!wpRZ'GAɫZ7,c2+*ׂaNR-GtFi;-R/B;j0YO9C'+ JJ^‚Pʞ6MiYP$=.!ajil s|{"muF,^zeT<[d[eM^=zｐ2#{c .h6V&]U ׺h? ~Sv)|;!yDly+$x5#{#Ҧ2i0UkݹEI6Mе;ƕqdDHwcX)\ĪY\{*5~yކ= ;[CN(c!+ ¼US|,|(`̫aI`$==NN^,4L{%X/K{U$J:Z;n<:4Hb, r}? |6 :/NdJТKCupw~m`l՜ZɖY;%A946,{\ˮ~%>^\UZ㻟DhYH@/GkĮj%cܨۓ[xlt-7xpXfU#:,5Yk6_A&sфVdKUWҍ7^_WKg(f-> BGɯAl@ #SP@)x˒{޽@~VgiJvzdN@=<V{&NԔ_xIE%`_~3dwT<~R$}9P88\k0M4E1T`$-Imgji#DZ`CJ"ԒHaxb/.+/^?v4h[VJBЄ)D.v}5UlL ꚤiXP*Fٸ)4UWҭ;]}1S ٶSA:R2ٗ" &ĭaOzYLͼ>b6[htK8|vy:+'m]ېY6ϸq= ؊z +",t؃͏>- C^NxlkQ')Q\u'Ƙ%ä_Riqm74Z|}d&[]o̝%2Ť`ow[+ΎuG8{ɼg[n0nЪB56 ˘u.ɣ{z|k{Th( _~LY>I5jT_ = Ghv Ëq̂VXn.ҞŅkY$oz2D7[nP=:EW VAJNQWn>zUKIr.aI.s`"sfyHT-TĘw&@D_IK;t"OZS" …—KrVŖA5#|:#`~VWnɄM=yGu32_ZwW&tQ!a/4b($$y5Pu/9ӟfV<1@"IhX"Ϩ l@tgz8W=BDki"QPjj}[PEB?bT|mzAc0QQ9dքSCzdtMJyn¨#¨]/_VeQTCg-Z'I=|[~Rx˘ë/kSEeMDԏ䛓P!^|vLgcp{_&JRs"FNλݸz(g+<.y\5Y eVseUKTS{ML~,5@Edd "kF Ɯ?!4ff @_o&. ΰK +u8uUn{}h}@xGuA;<){b_Qb݂Ck" 1!~2v ٽ妽"%9Rw2|Qn lE| tn? "ҲVhJqٯɗ/^3G|`fq1&j%fHM q"jKa%$끥^?r9`(`qF8Vp+zv;S;2't&(p,%{ yX ޢt5"wJ/R=^i8m>@"yBpP|ղAl]fm#H.p|d01nBB3kL_2~5V uR'ς:P]B [`u=h\0eOXq^IWy>LN,"1&pc >GF!5^*raiͳgn*O//sDƱ֤h6MlI.Rs,8$&3p:>2 up`4go7pz}f7z!$;ea߇0a>X=X{Oe| UX$Ae̯dO-|ͭ$F>2KF|` USFS.(?:t7JC抟hDY"+Fn1*8&3KE8@^'JvJi%Zl^]iU{DGMǺ7!EҲ91f-뺊PETz)8@=ܫ>^*OK)WcEa&Z*wNq}N}l܆^' 3D}Jd'8T+I Aam|S?ΙalذzzOctVE&A Sj Y+6ᙦ⪍?GC|ǹ8؆UlDX@Z_pF,Z]3e |SugJ 6g Y#By&!bX¼%e‚-pҭCľ(Ìmd1Ο6n`s^FK=615#+K"?b0\ <ߘ/FOdǭ$Bgg1T '4Srvզ]3k7m%P.APE3G723\Fv7煍~qʮpmd,aJA> i`<˩-$' #/xbE8Ԇn[o4o`#)9:SD+?L=p+v,IVpWVPL+ƳƉ% [j~1ϳs:sq@ /JB\27b}M&>=Ñƙ* O]ϑi t'1ۢ/.-3|漦c~6_:zu}vtpV_' ~H/F)cmrƲD-t5{FDiTF;J_PTsQ. QCO@7)I1#>I/?D˄<@]!/ 5XE04pŚc+[䩕tܤ {@GA+ְ1elb8 “pZ),p1 #)WRK2]E}ѤHhb yԚ}>ڬ4wp&ق| k2}T]ą@K~%"têQB[Ԟd Dm taP {) SxHI衉A"UhTe{)EV65LIYZ֙EktrU2OG3Z.v`椟 XJr#|^<2z8Zb2e`@g IMGҀ.Hg)!^EJƎ|?4iha mHM _`-6-H<<`"48)& gJ4GUuimyl1Ñ||/-XaFJXNp`D@&azC51<cM,/SF'e<_k3`?PhږiBR>FOo$PahEm`MNHIYw&pkBIOtfV%{sbH/4O ^bvx_A޾l_2E`|FD|j3XBVnׁלyY,;'I ED 8o3h֎ݷlP5%Ss7q/vJQHk3w>~4 Ęc4ٕDB eOXLyJ9 j lagꮎHQɦ(3% ϒ"4wCXyC X^s X"v( UM .9Ȥ:,Cq8as 4FaV-5GʵV  >2z%JΪOť\Fꍇwϧɴ0ƍdFήLw[YS,pD:X-cf)\yf?k[+j 'Wfd׵eGk>N:3R !\G l!x0 }bUI9}; wWDlI*0'¯6Y,wwI x9ߨnoHP6.;9S1HH(S>l bi lyq-aƳsx/Ӡfi?h7J<[(ETսMKSz8kє#$Ε!$E#.lQ . ȫs4~2$QQPh OC>f_}E,CJ#RT$fT V:?X]i,Ԣl$ѫhI7stӱK(/t7t>^|?/$s‘V 4Quj2z8] :`U ~Br@i=! V[|$0Z/>\6-?M< *!)G~ANn? &R `^9nl](dz=٘w60sɐ%dKweoy4 ceHΐSjaXOAE.;& :CRބ׈Rddoj21`슆AR>;JLRa!ai>S)c,U$r"5t3er+"Xh(tqqӶAA\Fq㹃 j=n  ~"*<;P9Xci31ihwpYb¿] /DRp{9h{*nt#<rXN`=GJm-FKxji p˾%<~"9RK "}U1U\Q`SX*y`),_mIg`KV"mGA\6{4VS p4iq.]Q5Xh4|L=v~ZB'l_ p>4')TEyA"-Dgn{y2>55p?kIoN;S>jr-vp8`{z|cfNJ_SHm49v<GMFǶ}ԙQ| 7"o:)ߟ:,+t_N:ґ1 )R唂;/=ыiiYR?+\sra,Y;|-1 il4oB3)Ɲ&fH(n!=I ٍlkDf ߡzDaF%0/[!; NވLx'B"߃~K?+Vz/ihT+~ljWtu,*k㘳E; ɯg74{ziS9Tc" NΑdpB#.k(}uD~4z%fDH dc75NqhaTQsIwun>KֱZ $qr@RQ6')܆u"JJI$$1 קpqD`N}no44ڻt]t筕::t:ʎ_Gi3!*" d 3"cLe^7eyw>dyQk  A?loL%/!"ZW{F8p}jd:ﱣQC`qeO@4h?Qo(;UdAT_A7 'YLb0^)x,  f E&+RHi`+UZ9m>"1^Ex'ǃ`x @,K) Pʍ>BUt"*&&E9>{ bNH7,v {G*g{.APl4Ccٱ|PJp!Ppy9FYE]PUAn`]RfC 9d]ȵ|Aդ\"?Ond?k S_#ªLEtBmz|?6Uʽ=m;=d*KסqP;&@\o*W5n]V \1.,v՘+)~=x=0nKNp}8r4<9҂6$|+ HKo$ c0Ǫja {_91Exa&_}B+\֛cdZpA L) y/s,&ˀ}X:$[0d+i>0([ F{5d80-)KOR9yΔkr4p}2fyf2η`cK˿TI|dOw߱"ŵ ѣA}\* 24mr /W~ W9h"4RyΊ]nͭh4mzyPɠF/K"dhmB i}Ix?#lE㿎'RTTniJq·N(#zơjGvgHi 9e._§*e'Xq/OlJg7۾SJv^^4|ו #Ư*&F+Rq+6ok*}?[m2h>l֮ט_pGHPϺ z:,r!bIpt*(~/"oȣ/-hms&M[Oْϐmy[>2ZHC%'n(17?duJ))tX^nzFyڇ5]Dz[֚l9CmZM P'&o)W }E;`٭hj{.[,ת-H1TcIbb5.K9_$E`[&[A5P33'E:j%ӈM^mq.JYoLm}f~C6%p8^˿XHb%tQf@{|B!2zHIS;سjW ҽ{j'38>9 wiLpnq-3ɨvm/-!UBt ,/)Ж Xiђ=k2Lϛ(ޙ )^JԬaա*>,tOdjz;O#O{ lA膹jon44aCY7"W;e Tzww Ҋ:׸k!7nI dne>EYviMr%Zӣ 2|/0wwx_MF ';=tRsBϏ pOxHHR|b~' Y,5Xd WAmj-Z i)-Cilk- R^vM]ajp_"^G_F~;B>8Wz%5T3pvq%RADH {~2fѳ.m&nrWaXd+(_U7, ^G-k(&eyY,QwZ58䐹` عiP Ȳ;vߦO%u6l+af$]գia'7 2@U`XK16^ ͺ 70zub*ۢ9̞}XJ:p.q =6$a 쓣'NO5Eɼ'S>,`&E;lru9cչ/btŏG(b0v%,.0HRsG;uLH8१rЮGb}I(Mxt+?/ /EzNJQ[GLTnCey~v5~=J*BmXsxcӇ凴.Bzu}H9!?zMR"QN*o⨥jQ07t=MT2 wq9g2 |ϐR#,+y=$Y9{@1x]HZĪN%b<w}6[*GuMU9Ŀ%28fTmJS&`#/f*(gDDC:TZv0 Q$؟>(H"+9V8 7َAEFSbYn_ِruX;Waqc% A: ]Yۮ)5tPgUQ Y"$Eӝ[AS.fNn q1fˠ;S~n3}[թr-p2G-ޜEC>%YSށk#5\a,YSD{!vяqΫ*Ȣ]Ǝ]lG00ϰX}_,GK. (f{&'0 슱/aK{>5_uBSW2JJnPw; )үHR)ʕr&3n4툄 q#GDuһCY^Ce8! BXs YW 鑓@´>4W 3FNj .˹#u kPKV(`Ի'{mbVo49UK!ڵvXjѣp"[mBD1n};aFKCKd3`:-j0# GCNxcG[)^e<&(Yu}E+H[%di4,6[:d`r n;&h~mT99KTi<</Kf!A[wvE\ssA!遬5pĆܳhC5s^; x٣PǑqJ *6{>,}hrA//%,'2W1hpkH6T T<d2~5X-: rR"+~}͸[ָ]3@fN}:ttƛS^;כ:9._2G `髚!Ο$Aqx(jՍQVYt"v!]|̫-(˽n:?Qt`gخ]r'uyMC a%~ש s/{W!W*;+˵c@7>`%SIŻ= L#8toB/vPY^HT3N+M%4_?@qY5D:ws`2C'Cv85ԃǡ@a9|Ox.w<|Jɾ ū]ɏnV1x/׷ɋ׾2z͎%@5df A TB?L[d XǏާsqQGzOG07 יgg=Bc a2EU MC̯g>׽flsvPلjB<@68;O凜襌lѥ2L^:B : "rHy*XȰ4ʭZx+Zf r|Vt0yYl+U!tZZ L˫!-r`T:QQr[~VTv ZӻrR6 ` Tρ4Plrz9fm Zu15N&Mo!#:6Bj~ȭB^yѠJ 쁏1L:rZh.>5U0KK&]}@9h7U*|sgKn 2 9Zc1 ^{qC_Hn~GIqh0m(k>{JHBX7f?!U ]&5 _Jo3uch@`Od+P{`1j7P6+S7\x:1tOy-u ⑮y|/p L7Okj@t'>o݁^ʈ:zb61h \U*);6٫)CtyYcgσiJ}v Ňz]2 }В^YjLRV7#:+ y)~1vWm?a%Xe$Nb}&WЙgѻ|lv~ʧs(+/-7ICHmJtG> ʰ"iNu;l;" FXLxQzχH,4"W㵒snCq|N1nK[ O,63ic-|,#$ph;_]iIz ѥK {\zW˕ߢ]:VwXSeݝ`驃^gf6{LGsyx9rY3r_.%˥ȣޡ'LkS,dpoY*Zfq!G2j7@S7ܙFP?o(jOJ)c^8-OLA @Y mnY[eie2||m)ڰsA  \UuYk|>V}%dsיmcYm^] Bm"1b""%o'c텡o-͸{y)g+:I&;2@'k˺%2-9[8*-0#_#LհBɬcE[=LW'(6#2Li2gxzp_ZIο.L񊡱h__UqLgTDԣl5U a̚ u3h[fDSrRKKCRܱZ:(Y g`V'QTX, {[\`ͬrm›TT'֝0-4_!N;~x3p:`J %P$W-Rާ4RYEP8QetG<2!o~-bJtd>77:ϣy0"mN X:%q1qi^9X\0t։$3sm="Oy,AłUWxAC"J)Wu> 3 4e; t(+z[=븛+g|+ثY֎HrIf׺y|Fq&S  n:ct/0"{j)r#)7/n/U1`oQT?٫Z;u~Z3NCj SҝĸXGVk8F6mƴ\R{p LCCh$. wM ũ@%^ j/AH!-L?h/; aG%U#4k⡷lj?jQfE7KZB.q r[k pG}BMpm=CP"csUXoM5އ/{> j,0.vczby['w^1T0!x-?rqv|YM+UFCJ*Y^4H@]%)خ[|{\ SYQGpzz٤k]!_ *bS2[6j O}r:A dtLMZcJf$[r# "|D;z(HI[ZMTbWeܞYQ~{daaC fÐ.x﯋ɻdjqr,;q9U4v: ߄<4)ڸrgwm`Cѩ 694%SD*|'ą| f^ep#% A];`l,`1ͪVW*}B^kJƻ}OZ&k?Bx&O>9p}zp=V뙳IEL?䅇2C (;tbEebl]& O͊#!:`֝T4RdwyJ [M/Xn6A$LI}CV Yw&c%!Ȩ2``kDWC?wI;Hu[Ĝd6K۹5z/aՂ?<ĂPq2P8CɪIS۩<(?:.O"(6'W~QvGl3wOLfdHpQ7t1] <U Sc /ə=+ffo[}ųWҷgnA1Ȍ/۵m ,TEBcIYUܗ],#5= A[qMI\^/- FLa&pOTĦFrˑ+]fdfa`%?swC6b@ 7|xJdnF)쮧лӊ;u0$~Ѕp힄恑cYэ(̆6۞? Ds>$0}Eg .02S=[{ ?%*NJdG ]s-%*HՒJ |'H9.ˡAa@ꂧl3oyO:~ vQ8Sp,4[y6alQe ŭԱ\4{a7 pٯȣtu H3v`|$:Ӟ' տa.59ȿPyxQKdL%A*p>ܼjalA'6j+!y[: 3(V?=f4kT'KrG>VL萗pn[D*Sf>."Y}О~k=,_ۜ`YH${ w)H$db$G>׫}j;."z sr8ojBOψNF=GfD:vC@wd A\ީq xdn!JvL:G{T9ɍ\PƸ @$;I<n9pP aF_B? >ʨAo2*fc[YjEBBU/Qj?:!s9NxkN hi;Jh/ $uX@Q9$Y7`/s93oWd 8PN0VJAY|=i# !y9"!O5簚M*Iza(RoP:6E^o6Vt8'm 1HRS,#a/K2.h$)n*|R{2e kb8BmL ]1M+Y "mbxzHQhKLD? qjH>sQ{uk87g\][_/K=~~RM+cg3vܘR 6vUGAcq|X^vcնAdd%V3n2v\ƜB1/oޮC)OfZnCk3F\VC!;9|,j:^}9aqf)mo OU'}fcvN1~!Nw0eh+ꪠ ys_wD.;<S0{\p0GvwWΉ8S4]^8^yj(MׄRb-,3&̞kO!v bpܙ/#kxz+?l]Dof5 @SXu魓U'C:Л$`b ES ?z#4('H <=Y\Zpv$w|GY6#llbiH+`TDMr;/NtVK؃CڞqDž,ZnlH֐I2@OJa( a 4j8B.8bA%2cT{R.S9 9/[?rv"MϸGծYA^"zO-9r@}pGРB!C2iv/}\o?-d@y@d;Jб,]9ECFYY\y(REsFZ,?im}eu ?j6pN o<ީ6DANv(8'4LWHˀAK V@|&D o T 5(LrhzvdMh^{>ɜCsj9CNBIKG+8^Qј;tgYcx{joh$H-pDVZЫ*[۟[{,Vtp(KvcP͛LAA_blDtHy0 Q Pc@̵ hd/5p3:B Ʃ*,&v[=9&CX.մW=ԓD!ç<(t&jLu B(vkG Uj'|R'w~4eDX[I-*hf=YpB#n<]'T{[Q~K2U \u; Ak>9౽$D0~gָS,[[} DZ>+Yټe5Zw;Jߖ]&Zgx>$3}\T.teDDK\3U<qڥ0gtT󚙖'~PL-TfD?= %wdw÷ĉ% މ~1rQ*d)G:3ir#8z+"L3tGc_4fi$Yoѡ41y4BzS5RF jz,(|~VNV_ޮ*6X˄8A>p>oCpT{DQo,|ZbX?dq%{`۬f;4/٤qLsL1oSO; )=Q7dQRGVٓ/s :xuZm66frŏ#A@4:pxy>CήqdH3&>)h5& ct+~OxU],"muTItM0-W(ߛnKP0KyԈ]$Ћj|C驺K3I;<̅]K+; 2;' 0+X I b-ènmRDpEa˔>ϳ"cf1' 7*&kL |'xA^ ̂`"A^&{)rrNuESQ9w^GEя.U# Vp{-+|u_2vyaaѠ$+?Fu; mMư3C8(Mz-MBUH? ' 7"S_pls;@zV6;x,,R~ sVeXInlI 8r!/"nرZx҅l3>T@D8 ,&k;GUvFnQr29:ن5i{q`) vBC3s[ T#tz~s+ʏO:GrzL@eAB/2UP^-<~$,buX)a^+(ρq㣥9lxӶGduls1NI%I'_viZEه$ GݛyZ\2Y4Hr=#F ɭY}ni~~ GpCxf܇`];_nҽLO{P{=T86|)16#@FuS WLln__cLAo] p7oTbXJO]BCo ƙ9;*d{3i;]CT/{"oJ3!]@f6ʬA3M]UmZ#k+û U&t BŊys VU $!X !x*A*y/gAm֛tl/"{mAZy—>y"g~A~~ %,)$qÎ9p!""`*]c;Zp Rڽ7ذcEzP& 3v>LSoĺhC/3 |G'HT7I,l2""CB*h ;$ҝKN"ZJy7u+M+hwrXt(pEkm<F?g _Q@]bʍrw=I#-HE\N{) k:ËʥNaq|g7!*_ *v*3&]y]S<@-iLZivRi4lN"8nSي:V0߮ʺh kըQ$o.G% &MƼ*ٗ;ݛ,EGa%Qlufی kRl*a;OL \%]+H܄cMK[ Cu, dφ1FMPW0e f\h۰;0ә*Ė0nz!5vRZKbj-ifc!Aݧ4mBD8~?o#NJW mS W.Iń8<B(taɚǘpO$"O\*0!ja6ɫઔɯj7aMkJR~, O, "{N[RWO,4Y l: IB?1Zښ u\np >>N 'N)Ȼ2;%w\W۳4@MNfRݭG.f?s'U-/isxK\QDd]_ GkO)*c^> .2!uOQ*wM\<>kuC-m-w&Z|$P#,t,}l\>Sd4-oκw"5??FG3/ف)x*BH)kzQ=,|1^$5HozxH\!ZH //唾֌?}&0fx;8Mnʓ1RU52#SԿO^ob@uKiZO*ī vh$i`@UY-ì8ƺ74P)m}gi7ŴogU Ԛ z&d68b0Dn S@XEz'dӷ.cӄK5D%5y Z8# vDH{$QZND< P< Kx!zJjuIAִ״6Im:4ťQG Y1,= Dy0ߌ~ *3_QAe T e,mFNpx CAC<`PUPn@š즃;"s{+$6c.A 0+cMդ!D;0ЛwW&\3o]@T1Ų;k\慛,X_:\LO*<4Iqwd=)wJ%Pa?D **p;k(fp]Okk9aZf2f'1Kc8=Q[wϿ.Eqʷp/5tzR6)>TMK_%iNAл$ӂNj( a=P*6i~͈ux7`hV ys 0@sqT>ۈ##N~/"%f僯vP/$9NwΨN !Pf6pvh`sëi|jtg5$ngujNSl^m0\}2<ِhҕj?b!%FH5؍GB#re~o'!oibʷLV#?Ms(0Tяl]83w;ᛣNݮ)\=lSF< }#3 $-) T~Nf㎻w(4;٬{ֆ *db`MԴ9Ilzۃ}u?ĹΝlF `xdgpPol20yXZQm=T|c5TˤD#Ebr~CCz4 lV7`s2njw9"ojxj8wM-WHGARۏۜu5KzU[uak <G)@:_ڍ:'A {6^uph*`?C,~~[*Oّ0Fu輑AjJ'>˩V:4rtOR|T2 wA/D3sڄ܎}7 Lž5[k@~;8r{zhPv |}@d"TXhꁚR-jE4CDJJ22c*Rt'q+ G৿*Bd; _2}4W`K/Q^zH'xP N{8 KAxN\n?G)3t.ɩcL[/ i,Qz  ta&[Iu}У "L;ZYieἷRtNܝlw#&26ZSH% R+z)ҊUl^cV~ W~5lOe٘->ؖe&t/;/B!F H gQxyY'-°1|]Iߨo/Gy檼T[?dvzakI4T܆=5kP Փ=\.ZUY!NTj KƤ]gmV&abc_U%UR+geK6X]\@hb yd)ʛEë! i\.(U2P\=D߶y.yz? ׂTiǧnsxoHw-Ӥ,2 v Jm37 j mL9gb] #9sfSph0jS⓱D69-Ƒ.PP G#x(uм;]GR-Mi>3C~6Vbz@B l^0vy[ɓyBYLtߑ|zg!b+*{Q}{Ļ%24w:}?q˾Kܡ) VwZBlw+.sЖC"@Y֜Z11*&!rI_ ~i8ǿ zj0Jxp Z-G7Bg7=O=h8kD6X[%x)b oC†(۲]J?I̗/՛3vްug'=//U_U i(֩Q׌=Ubb22}5:Ca0H{YZFs 9Uy4u)0b.G;-偕j}o뗂+\|=y-6dj@Bp6-'@)?ȋr3K# C6%%#խ6%7, \MFim_="seB^kZKos~f͔"oH A}j ÌͮKRUR{\Oxlg`Q6O>$H-޲OЅ䃝15V"ܞp!\-D}: I:+֑ 't"YEr mOت: }Q14=6Pu℣Ig.Ci.ձd*ԝ+3d5l auqOԇnmhlv(+Mh4k')=.;X/W086=61L%?kD9e+Ͳ$AF]M8go DSq80%ٛ`aO7%g_'>:D#K#Fl$AN+k14&к7ixJzGI顝UKA}7k[7"™;M  `tr@ L@c749PywEKd>EXz~.b6TxD<:w<*n +Q$Q,mB*tbCc,U% i \ZYgK:W`R/gX;'6vRJ?`X ۃ4zI.uϪ(%8I_wBoqڕn^,:ꑘ'n eM_{ijyy9ɮ.HUJӱv>*`P~mZ?WPRؤB!=|^۶ky#|mA_eU %zFR{SB%PuoCGӲQ\z Hhi gOY1D-D%ld+v[ 6" 1%-YqϢ>(CW'&lȟ5iW}~{ D@ ; *Q-,lS I&9wI |%jF!)x0D(&B~IL';BC*tYCk#XD挛ͱìFai}FfC:DÞ/ eFbe݄@"4Npa1/뗛nN4zZ_? OuF-0d7a,5s=ḩy0U Ys{]V<~τ?x>;u[a6fVNpIRjl@G_~DL *D /9!vO?=:b2TL n PFA9Lk p< z V(^pXO%s& WAl}}ղ D+7SѪjіX,HU@T/m]> / GݪEҳFzR,Ev1nleY2$lu~x2*_JP19:h0O-U"/tlgu?:B|3iJ>W {pşwՎK0[q0⊎^ZxxkK(GݟJgHMq=>˷(^Y<I}>As#lFL!tj켞=~"4`'8YukO2#uQvTTAyɒR Ѣg-۲ik(9{5V^ :+[l>8D‚q+J׫#ȟ̋|9B@-ͥ( z6)ᲤM1tGˉW( .{OR4Q϶&a1;xCܙp i =#~V |<;"/!\]r2.KĎGݻI<DiH)lIz>l{ 3*ON |@P_F]~E}!7 -gH- 8 {&yL$kojiO'_M9=X$[v?;faTU~cR9m)HHT´L ~0*ϨL$o'v r] q\w,Υz/D8[ 2~Ml~׋09kޔUw^bZ=cwU)swDgN%'&T,9hl'*#0 -}]k|Y_^Lʆm.oBqz ߇Ϭ`ғ;/Ɯ?n0(  1u1G\-B${^W8?m&;pJd ^?K;2m)N.H3At:&4MrQՀvpVESƺ]]h$ _ Ȩ@TJ}j%)l 0&H"i_$1řWxɊ#mI;@pA&sVY~=ֲnVϔlJr J:Չw%14,-Ob.Oo۱P(*^'5Mh Sm\KL`?fAqG{5ÛԽ~4uTp9-]+页jDĐ7PQ^n e e)dt 3g;4y־X;?B{GYa@jy8`#VFVQlo'bYǟ6ك޹L)]]Lzer\~$H`NMۅr 2懖m&iTpmAzZXt]TDЋ:nI(D\)'v0qO:^eH?~ʺxmH]!l96>{ؑv{{ktw<ګ y;`tw?n_IQvҁF-ƑQؕ q}.GrBys#aɖ)5^='& &ozOc$+<]'=( q::.4v]IvGo&,׮}B7cl sʩ}[|.Sfz..}oA\y<Wͥ{D.AwZ`ة0oc77QSr^ꇝ:!(f''B.ʣMXu䅧W'KIJq|~Ѐy=Tƍ|E[M}d jy &VDM؍Ff :Z*T98?K(REO]uFa|-Ű8 ڿ۫u*}_Qѿw!vp҄n֯^EkX]J˲?1E $3Y6h&E, IJlAQ@Vw떉ULVC9 ֫Z!g.k5 _TXAQX18aif\PLz-A+F2I2Hd3hRXK%kjvwQ{ruh̒+iK?wRQMRIopjBtvN6BΠ(X yo69R:MYۏ|%O]ͨ5ǽ10R]\^̙z1)?e_bja>#|s='eHCʩ+)]c5xLA CkȪH+.R0jճ0;,hVtZ/W&@B e9 bt4vҢQ%gzNa2vvm`WZm訴Cag9c}X )N[t%Vo'\ @3w8GR^:9N͙5uMn6V,Lz^ݳ޹V~OP0\+\dXr+Z_CTfݮMB/DWKz|d\ؼF~֭ .X`Z],&7P]6 7UFp~UA*CAx\ 1ę59KI5/hYlñ.eY?Q)F5_bC ZuhR|$YK# NQc`͟LTcMBɿznP0eEԁz=ay]tYІ˛VN%tgK;d)ʪ=K\S?=--BQ7ԗʸGC iucX 8{tp6/=/F*ZC 9O2S@1ر'eSt5fڮmn/ɊdX)_,1"/`nxZb"mTv\h| exx{5ȷZdg[`lč 7撸Dg]%@ ;rKπӶ!tVS{OcFNNAwd*\B; bgXY=>\TPӀ/)O"n@z`LQfN=0BT3 (Ƿ3?UouBVAFT̻AIFfnjdND=]iM1~`_k2Ѐ*`EkIL5 ./ڮY&>ND7.d^#|0"aWD̔~Ld<Vc'h4g~|qU{$*D^#me@@V .Dܒ Gݶ`涱'XBt^_EFL5 fގxt9խ6nY¸I}|U7]%d ?ӻlk/zidN ~;L5(Pt;50eXE7ՠlAPL;# L<\\#  ٸJ Q?ߴi%0řd)&;XUӗ nhRpkJXFB$rAv 2W7|4 Yt; W5F \p= 8ḯ\z\ԛHdjOԓ{ lzD[ѣ Wo'1`.T oX .?=qKeK7&dRpE_ܴUut&%5ntW@%e[c| ʀbA:!IN/ B ׷hBzD9M4d&%3T1I @vSǏ BnnHg#SygU!#⅟P\/A#[zפ 3W]-4W:,NP2&kB_%9񉟙v1(hZJ[US}Wı,&JeAOp$ø@fF\5_kZ}IU߶ ϽeDhA8!UeYP3+H#{SW~͏mJ3|Z4>:W([ph"b|?FI]#zsI,V\l+JLF@#F6VA5U}ALŠB-<''wP 5F߶ۄLjR-}C5?CD}V҇q=bg9Фm&fmHdhN̺ci+;hvq t_<ĵ2 uI鲏zLE'wБdn/qfc䦯J{/t.>)R" lg˰8k,wlV0Q_jZ&}_|FZgF9WmԓBVbN$9KPgLcMAR?:}| g P/FZ'rn*9bqj$É X́8 WS_{a  ;8Hʂ*\?Eq^CZ#Ǖ2w2X*WZK?k/v@(D*1P3q?lP54)] hYfijZλ(k%P?PbPɦb?O{]3P惵\t'l)L󂉝bikspk,mːndz'㖲_p4[ŏXd1/xJ,9WU-Xz!-7U ̄ʞqfUݮF@7?.Sz?_i$OZڈ|cl~8nSNGu}Vq-*{Iwp⻙ `KD Zݼx]UNB|;յ&+DUpQEY} LU=Kէ=^O/qIhN3"m7iɧtrS 8X =x)2ut^x QLKy#q-:͂Tcƣ@uӃ0ӝ:h0ImI'26[Ai^C ~[.ȕ!6|֢|`4{E&'W&>ͅp<WY2k4 C:t ?LvqN{ "PF 3$ZEC\>q8WިC:)rl`kC8VDjpT/_2gQRr_Ao-?GswXR@&Y' LH^c( 7!!=;hmKҔ8  c $f<ƹ@ĢkT縇{ K,B7:'M~: Օ ).*Mʣ33/. I49ӢXG'VGQy͗uXISd>@?rIg!N*6Y(ET[<43`t>AAcCNoۢ&åHZKɏ:B05w䑆|$ĘO h~_d/?+gfsvi.h9~KF b h=u\@6l iFu үa5iFLLi"mOo (Ro"0h]\ V4GjvOo 3'":p[P-;tyY>dVk_S.j˙_+|ەAh ΊV  Ca&>]]μau?%FuaQVyכgSI{Z jA!Qqcz p?3BЏk}ŎPCN#֥󖴑}&Ydn Y!JjQG/)L/cN|#7ˎ<e`޶X~8;C>1AVY8p,_/DSa"Y'AݧcޥuW^aL1]W󭉧M-PxreO:ړrv14r0tXj\di9{Yn_ )гɨv?Rc@"~C;a'Z.6yCa*=t޺O<^ 7ߚ3lSA`I(*2ɳk@Pν8&VhdU%:z'=[D-z0 ~>c(ez?uGRѺUv3l]QxOz;Y du(RԘ55O=x2oD :^GKB]4Q(^r0dDGu[[RehcWY a1ezI\pv}aEWj eXX^qKlcZL\r'vzquѽr|ܲIc+'K<\p!>W?8nR #qȤ~WOj,_Q tEM\GjM5^ /'>pt=ESɚ1t3Ja:.4};0b:?$ڒ:G'޶'}f[Z, ] $˅!(TU~Z_HďKtB{x(6ќ N-2bњX uR%R%\A?`†BP6hl:N>Ihn o: x^YnRT'l~˜#r]LBol"ٳ8z= \HϩhF24r@}2H^GA^X~#16N6x(FD %KђJC57 xTM .\r^IZ\,^|lH^,l[ Ɗ΄ *֟EtJ j³ _rm_gT&n @D­:@()|YwX}WX˨ Њ04g%xE!?+WWщZ_zuZ[J3|CwHyLhzczӥy?=$*ǜdGG1oŸˢѫӱO8=NZßA&0pCƕ֦-V 4V (C,m,T~n(&2”TGF^^w"`t uF C=M Âf=P !bOi Κaܲ3A?\s)5c.TKd;9BEyXghQ<9T}j9_Ws+}VϿdb;~u7K jR$銾U^T}+Ie.Wu"6̠eA$'cvhxO- [uӁ NIOl s~=%+Q ѻqР~l;7ؓ׆ qRVdZpI4`9N\RdL=X?eq/hEi/ cSUnQGgT$p Nic3*~IB#%qweٔDO9PF(.Rg <a]]bcs%&AdU5*=o y~vh/)^ߖ{}O'l䡖0|Sď(>8$0@Τ5񰯔̚5ryפ>'4[GERgϛKId/+ Se]&vF+xsWVT7ݧl!峛+ނse3 /r/5 T۟>.@n:#Z[ 66YD|fm|@#')3^@IP FMC:âas~oٿ>$գG>;Kr S7?No|og A' 'DUQ, ! DD>'Lqےw%~:ʐfi#d]!c gx2zU(fzC昢G- 7 Z:; {$UWC9 q15fc P_*d@3';p }v|RqlrB=.Z2<| &pZ4n~Z0 餩w62nT}$좨]Vr ;iWßk/1MJ*<[ɿLIQmbNDd4n/\؇% a,g36b*N{+_0g^m>!] i){5?pFrʦF1g`cD*D]gIi:_K S!["8[SiSDžfMjM:4Z 11{}M௺l`KX!20Vw6 ^K \==|hw~y/z֨\ꢞzp6A!b):+.pcUn%tpN*WOrUFloJCkn8jF ]_5HeL ŰO,Ϻ?ߒlbTz\:j܇5kp g5% 3vb!@V>lu$=Sfhci i=~tٮiJ,?H?еtےlvY"C;X]KZ=қL*+{zƎ6;FSߍ8!ӣ"p(.B.9pS4ȦL(^}гYP*XO F .%%>[˯|m_exs҂=dOfmt'O 5 $WЗ$;UܓN T,e& .-1akD_ҷ:)66G ̍5.gwHl/QTN 2aO&Qw*=7K=;W5)Đ=G'xhvVDž0BmQa"*PoC-vv.jw; ׍Jc!h)i(H!ퟙB}=/~tct0.>~86-ij:l|6Ղ+sa88jCLYak6 n'款-jS#6{b;6_>jt5bia&> b.Vh-&&];N7cw#n $6_ե[W8+Zk>4pDߘtzT  LJ+~y<ϫIyGo4}L{##o?mV-Yxgby5orMiy%vKi7?<أnV!@ +Fro>?"} :c` ^iw -069&8%bZqbfDWjD˦:Z<ߘ}ܗ/DY"͐A7b?Np.l oטmЌkPQ̟\pɔg ̇QY6'ĊxAAE3p"egle;*9,ڤ"a vKԚƝ_['{afKک}';H pQ?0C]w@ CO&seRǺ'afH4`H`tj$ ! >~Y$"`Go:7/v@cAJniX҇in>ٚ& 0pFK30mQ_Ӂ 7OVZ\EU5JKzd(:? D{V˳E[~ތL1F>QAeJ@ #)X* 1vIdد -`-UCݘiu601Yw@/+feXf QCkRuԇA,bu\G)-sd"2+ CŏӓkGn#1rXQ$f[PK^X҈3T`[| m0:Y028gg4`,(!2&_@*TDk? ĉ5q5FAk H ϵȨU} x"}BàN-qxtP_T7rzCzFXG!ZTw&?٩fTCHnE1VbkBiH oEE |RƢ#5E+..Q<$REF-cZ^|A#5#XUaΌcP(C;1H]Z_N.u- i T%'jQ{o IJDʕ,/MC*@.Ywp\:hwH8+|MS tg9QA;|7P܏hwn ;4p81}ک0km(85hU.KwEo+ӌa/KmA ("~1 0Bskɧ~%c!9Smz c GZc;`}ŸL ?BO4 ܄]X&ٻ Uc#ԝAE:P.?1(#?Lx8db5fqJ,3Zl_xhV`D\kua ݳOYxUvOY:m---6ӘI)4´=N[x]fQ!z5._Fqx7Nibhh?kSb E2L]]|ŏ5]/qߑ~W9̇{ w,A*|u g+wRb\ȡLbqJ%"\ 'w*<}ndL形 ׁ~+~]X$T)=s o(H9Fp U 4KKdd;dS~@ܣ'%yB*?t$کg%ry_u ;Hg荢&"jiH\N 73uoYu©N?(Ѕ8,KLq/{@$S8y+kIJ'ӝ Fe^F itcRjDGR>k LEPnjKL䲛%!͆ȴ VI$y'ID HhhB;W4|cV?k'.]%J/M1-_ )H#آs$B"UܽJ]2FUzwòrOӒZH<@C<_`^[^cND\Ґ;#NzAbOE>Bqؠ'cgO&ے s%S88Dڒүeh>y|پ3НV;WM[2L/EODhny%X(*vj9 IBP~'3w6 A,bkF8YkQq@2=Wonu A8w?w,HB$4(3/^zya]ib;AʴE+!O!20HN5qJ4rX.zZZ+Oޟ} %5M*à 5jډ;%f'2ـr Ypܩ){ljwxq.xI[vu,uBj/Lr0?+_f:Uh9q񸂄%va ˌ݉Q̬6bdtkUf4 o Wmaɷa+jKg Fy\ON+Nc8H>Ke˚J>Ңݤ:Ӗ+Ϻ%jzNA%3zXJTgHOh@'-dqz4Nѱ(/|R·w7#P,RxY80pFC:% T⣪q:W)"{,yculRxJYo1s>-^ y4Z:OۖRK HֳF4weӈ'w-mu)0sD EWAz"ɭ_b#{-u9OQ'^G]imfMǖޒ6q nCf?f} ~l"`t3 "`җji<4Y =r704#6!3{X(Oo+^JF2"Ü䴟 ygVnJHP O5hɌZ-krO7JiƄ_;L+94\N"x)Bg02[TcMuCTM -vZF_Pa 1M[[Zz#pn.@v5,hew5! hr*zYXp@oLbmRQ&0~\M ΐŌ}q}Zxo'k#>RWf[alK߂.jRU]*5[qv~ꝉc!*#6dcB(hh"%+6[!ױXP`sSA&cNuJꋨ owDCeͽRjRٷ'G_گ${`Q0Coy[TƩ`݋[Lr` I.n> lw6&B1$![S?emYgt׻ژkK.FE0rh<*ϳBjVbB"PN _걳M @3}2:=m9K&+Gu5qU8IK{u?<_ㄌ+PZJ `5;'O<:Unƀ!xB0tdF_8FMFV LDA碡RqjQ^@ Aڛ>C#Gy@5sj^׳v0Au4PH-؈n~ Ghc.uB,Lf{;/|MŦ`kCKc blvKgZR!6)i')NA0Hi" BRPq-vI+ޙj>á]si>($gNmY!^ݗ5C2=mID$5lju#1m?ԕIeώb'$oJ]%3Xq=fYUjgc.>8#*n8y7je`s迹xf͡= v8e MݚyjJӎIgVL;ordyB0f1SqI׺Uf|4_ [!fmN(aͨsBfoKy?K3(hӽa+!r7LqsruZ[̢]p"m9QmЂ#  iawWk>|"H %?ircXPv4yP\V7݃U0x]L%[*&r!3zD} `upeMQ21+ C;kA5D~oWer)sD0w7;q sIR8V6.OZF>I Ҙ|&ðE\δ@"1؂[@/񱆩y\D)+yzHt 9_Fnl*AW] 뎾ێ 3Y]mw!U :+D4x?E |'YWҗg互$? @p:%}R( NuG' B-s!BUR4M-hǪ!ͺKXgx-3%RoP#u{҉lP]~Қx!zL}uuՂ6Pm~V;;B`3-ݎ|]`2kw L[3y,0!;TdOܬS&Q|_'X5mD=։,١U92G,lSA[TN@IZ'ZXmH11p-ܨ2;Ƥ+;+r ? Xn`붒U{ p.>8Ff?#i75v -e/ Aivpe#lc4{Zm9n:{^F.W5? k7d&װR?ԅ!D"'YPMO9 eDv8@:K@.7a9geŖ@GFo:c9ZuUI>_ɾ:> 捨orοP8J(O;X~\uq}MBPPN%d!F梢p(5cTļ#?Cڥ.Y#>T012= ϟ%*Sޞ=gHah?"qhKB/Mt{1}]S,B{aWh04 U |[eDKjl1xO .`(W1yk'MwH2>X~>4*^ #:&rv ^{}ieoj&3#y4(|s't”l3U\zGu9a0{]pl)3fF+pSif(Ro"=")pb#V jg_!xRV/S |ң`YkMA |#̦/{2d mlneg&?ם 1))~XeFxB56 [RE:k8]BWײt%`Lw߷2=͜"J26 Eg.v" `_E`ے@٭el4ȉ1q!ujzҹrK6 0ۑw+܇1ʀdih]r˘L<7Q^e2ѣK+:3&cmRНC%}g?An6k?aaIxã'JK@ v)G/\r@t"'rn-㌦^QR9r~Ղ3._ Ѭ~wCe>;0{Q$w+}EGg \9ؒGဒ4֊]2fnqTG--Ԋ'4-!FMF.8C] C' rs sU<eugjl 7B`(}B)ږ CFH$Qމ`B?1E 5^ ٤s-0zİz&KHr*t۬ߌ;va3IHfAs_ i P'S4xy"OGœr!Lh)3Etv&}>Vj>>q`?~q>9v$cFG_cazlͤU %qG)˙E85 OʗrX_ӒWH .=&ibM8 Q-YTˣjb| )w0c XdJpOI 0FRbi^.u UTF:鎝 c-_i @ϷNJ6-b- ջcYLeY# əj(OyǕhp 9D{| Uf0yf]CIf~ dԍTrOq+s[J|Fw ,ώoTk+80xIL„1_#!Q\H9S pJҋC-a(&EjTZ=f@~v3o:?y)\T$ob6$☛}fֳoU%1? FYEpuIB7d!i3g!Қdžꑈk.CXM&]mW&O#y#kK1:iE 'w7-s.[`5XY% {c=XlEu͈~, F6wL&hnY<@*" PX)4b*yڤ]{XY#`Zs .ďGow65pgt8e8_Z]1!_&F_wMvp+ȋcfgq.(иGkm]p)^ҷ5l@o5FUY)=߿k`37{`u"údRUrVt~MOL0Edwr[/"4e]H] p5f斎Eݱ!Q;9 c9hwܞZ4: `)TJg1K:&jFvN1x.N~ZeYhϑjwָp}:? ۍ6 f] ]Ȱ8~f\\o/J43p; m ċCɐ3ZWIт EUlJ{Mw2@AK78G6~ҡU"+2UWĈs(z"S2\=3(\ czYnՋQ8A W6i<u#wQ]TFa&]yÚ>Mde S ?unC>^`N@ְ Mu1k3 A0@I!f/j^NWz9Mnbwl]ȾF&,#ۨVD.j꒓"wT^!%p s#uFxx 8kE2dGJK3DVz~g34h P]3fQ0擹TUwNu}F̣$=gAꋗMٱ`>)ʐtmԀ: P!i*ch sj'@qQbz(2,(O8_ Y8L@uC,'[g}U[)>"u@ll.eUÕOl`Cue^mfG \LW GzeIarTLKn~iX}cE9@]i_e@22Һ_]s:҄Xm ޙ0S3*= P{x /~[%\WbS1a7AT OHdFM@5ϖò@f7үhwQ/gigD~5J \.-(XL=L%ChZc>JaWjeY/)R<"*i.E",,N^W~V[g@ j``Ų1vw>4A.eղ-pbDn #,m"PՕe`fZ2Qrw]|BT{FlNyv[x Wi6\]?ɴzF1C0 ]B#`@EЩySV\Ja>y-xU՟4kEP ]SدP3rX.%q-t(AJ&4 <ωR3c;eQm k@|=^272ڴ](|tl/@;ZՆPMfx{*B;~piI,_[b1C zO!\70}2z;)_ KvַZJ?omL{QF_g> 5oⵊu$SlA:b>N[ K #4Y"w, C?+G+hz`IH'`U> e@sh|YlKE"`(_ԅ 5ƒ[-K!WoהodO?! ^[C=!PYcfX|mCH ;T#GXtπVv8&D.][ZyD@v6:,ۗygRꞢyQz>J~:}N cx "Ođ6 R˚U?+  '$LWSnXV yQV| 3W Bݵ( .ge)}~?R7w+E@W(Q⥱xt:P87*5 il4<Ӟz7ƲW%V xdsOtVL~4HXϕs IbN_rp_f)qyIuVJ<:#ϐ28Iz[G*ئ[%H+ufve[ f&-cֲHZ,'0+;~x , &{sW$p9XM|h MSOAZ7.ZâتRD5vS  /5jLg ZN㠴Ã\zȐ|!՜㙎b+@V2c3KuN9D8p+tގxG;]ɏ5ܑj:mj+Ɓ9yM>kRP:TI$ :n| _+'nfF@MԾJP` % o:`l$ ;R=,`ܫt ,n;'"LvRDۘ^}7YǼjq0@A*- ͻPK qZ]^ X5Fc>\B_ FnwpP!4A$#kX L借3*X9kɎ^#i *6s7= \~Jw@TkF0#տeOdZ\F0R#^ cB.r{{G?_^q~δ=Z?|?f%߀I6lA@gZ6'IGq*#OZInC"-6+}eCh_20.X\me(eόy,=v?7sWK<\A6r9u@5IJx$z w`GC!pcnM<7QG'3v"|Q]┦$Y=z'~oJ ڲ1vp31SjGl$ުתӄ#">On1mHʗs:}J%ĵh@K7$#3epp%q k)h>.I'S0{’b5QXI^"Ǯ)mUt've w$W߇.(98,G%4@P,bVdJ,U &L50%:A.j~X-g^ZՖ_zhJӛ ڽ/ga1*o/67$\aHtfʝi<۝W4Qc= %Uep,zTn]hu[+"Aۅo, 'a$ē#Ki] :5`Pؓd{B:'QSY@{yYຸ8%4S k:eMT3ͼHP+PքLg9 EFXDc92>}ԙz<|&?$q֎#vEԭ}!B+1bƚ@㒽rj,0q]~4p'uE(fԨ[SkՄdjK9~)X~\K2r\@@>{Դ]ƚGQVmڇ)WgtE5d ZG#O}ݒT%6-;]F:h %f ܔQM !R2Ыƾлϒ5Rw1v<Y:϶Bh0 @Laj\lCA0G|\F9XK輶o"*^k5 8jj3I[Xf*1!__H;1@+T.\H6,$),-Զ7\"P7Q!(@7m;$K6kٙ2їb4{.?\Qk&4a@&g{БSheI$.FcCbf&Q %=pQMAJRgYESBδހ﵆N̨T ֖cR#y1lIyq|"]z~{5\A* ~YՔHodc6!8oߴƌM5tF}@<+i7Hh &׷U9 H#%42zP)A̹j -|TW$`damE1p d}4zZ[g(@_<խ 9Vã`gu0iԃ35 RÊ0w+ @QrV.%T饏~/.'1S"/Q4v[/ X/INbb!/EO3D~Q?- PTF3}B8XPwe0g"jrB6K.bsi'V;xG% #\DzZg'iQ<<^/qh`'pDÖW:߈w ޚjnnL&l5{]\^P2sA ߒ(96d۱)Vf Z4:w"V- Sl2@&rQ Q-iG9]~ ۡ`bKv̿muK]$ 8k֙w'LKF.) x+50#=%x+$Nna^:U|ir?{͋c/*eZpRܴKݮ]iCwe:*@r,lp [+8 |Nom9STO4t]s*Ca%A6\uZ,h% K -Zm.:F-JRA ?*$MJgTAyuPCU$|yNC4,blF!C/uCpmzgDȵ$YDyYW>?0h e\*E@{I{P8ZX1mKeכ1aYXv ߅{!@xzX.PxoŘO("b;iW?i>,WB[Bߎ5Xh>µn.l 'tq U iYUvR.t@ L:Zʭ{7OA>q Q+~Kps/"MJ# 9WD by/7,v e*AbfO*\?/TLYEϼ:UWBޠyeC :6xQpGjo )WE 1/lJ.vЄƪu> _$HD϶9= xWu۩iH $t 0Һ\"7D@!5axMwΥ/h-@rşAQc(pHBy"A.SE1,BZ#o-q֯?5Zqw%-Q nG }T/_Rѻ h=9ҥSҝ3{##"SlMՆ~Юkj-;qkYja[OgrhO0^$O;Ÿ)t 7]GRB/jODk|hk}́&0`iE꺪 AWXϣX~hSGso ]Tb WoiS8ǻ9:RvÆyKjGo~Vt ]@OEDTkGS Q6v#8AMos-'*Fh g}~0H ͭ'`ս:E'+#Q0"='R7bt1<[ . ^᙭nW6xix,^Z&*-?E0ri@!b;-w9_ӻgBjxjzl)[.s[F a8q Ygrnops?h1~h#ӽʣleneP,mABtEJ.:1qLA} ,BI9l{~b]llA|<HkFܮ7l~MŐ=iv`[EIvb[4OAٵHķOk& KKsNm@'őT^z;#W6ᤃZe!QZ4Q q#M1`2o[g8{DHӱz~ݿav I"CܑO<Z4p{5;q }Ph(\}f*NQ b'H Jh&Q! FZY'P3- v󣠉WFfjiʍʼnQm̸܀Uz١S2Ϣ)RJچ8s>S̛'ءGs}[9;8 >%Q3&dd TIǵ/iT-ݳT:3ǥB/гc \#Ԃ6pno;:s#T43t>-KNNkTt[FUhQdmE4bdg9Gj+Luaܻdh%Z*8L{$;vul\5 g+8QR Xbzg0^87ҏD SyzjY^,;;YE5U?3|!*(R9*"]9a~#ZRzrgj%.svRB `>$)\&Vg ":ikswAXS&sh{M#G>+u{Ӑ rXh!mga~(pe ̨Aj#Nl*,4!@{!j^Gm,tLt09lj<%] D*NG|(<qR.OkS~TYF _ N5D>VDYsSGM8W>*lV A/5] )t6U=%:XW0{c1.waoI^&HKcj=ofnWw($5䘖C:>k c9~ |fZZϳi!/ JJ-Iq:_ؔX 9!Pb엻pe2.{˄89uQMox-{@:2vW߰Js=lI8d8$(,?`ot9}/\b8iOr{6{fACєtg|L'XG^ z 21e#3uu3f P@lyJԪOQпASCd׸hW8y4M7Wfv{BZ>9-֨ja[wgjym&22= ?&ŋ7Ίߦe}jIkgNwGyf>O0߇ `;"Q|+ݾZ6Jv,Vw JhN j߂>͜P엽߅8yҌqG *7<جb3NEbE}2 =I|R_N<}@(mQ)8{N)S WpG+\J&W [_X!/G`fd%,NelqS[?&^fd)PF y:{tN<\Rq+1HgFLTPva;JCg(xYa,vT?2dWvL[v4PNRÙ9hMsQPϺzWg\1<'嘄1fr ED7\eJds++％=?OέUg7H߀oP'^M[*c(3}wK}|?u̞ =Pfh3sN~^FtٯϖT/FJSrq蹺7{,nVoxfN=3-P0u8Ƣ7E7ď(Hjt_p4~)$|}mq{gpP1|7]ޏulͿ[FM3%J򬹤\1N4p3V8z:Iy=( %?$P+,quܤyFT܅ 0CD =AG Ͻ?cFߜ'ԆˌS]>!i7 n 0'ab8 _XO$BR ѿu `h'%d,Dr;t-2{&AZ:` ]80 i|'BtU_.U\s/Jas޳M͙;K 'f _'V>20ׁ'u :³Oc!&~M~10zMI*w+A\y}u!5iHOckA]_jw}K -s&z,dw e\^6ϝ$8Grj_X;_6JcT jFf Z8,P.{ y*[ZjҦ6L MwZ84D{EB(#.e^ \4I_' Q![pzd?'^K&=bX1ain _Vmv<VZzPd;:J"HS I =3;;z0mِF[h~0?_\X\?-8cc?NfT'}J.3`IZƚ% ~)=VQ[M;F{S _7]VMU=D.,"/fhLjX.anh8_/l` YKOط.8W6|<@[I\QudY>5ߙrH. }M^?FNZrmݚ{x'LsGM9ŗ[⹬?Jm̸!}/tޜ"4uE̮ (:lC($J$Lz1򲻙J_l:QO5{ۃe7jmWǓf8Y!"yN2T  יa$dby-D.U!еy@]Jߋ܀g7 ]uLu%v#qQmcI\r] P Ņ]}VY$`/@׾+l*P@7{gmvjQf% M^q cU";W,(|_1!gkhzjrYo /` } v``i62\Ɔ뭰jʄKjݏāA!Uykp\8sxN]t/ IyQXyI78824@_k]0K81œ6](0Wo"Q^P*btLbſ@-lNǻY1UghLLal2s+LȰ/Y>gO9;kuN#Yp2͆r`B4X/0:AfX4˕0bZ!Q#Bdrg8'X:m(-wq)Wc~a\0O<<s ~i S#j&"ӑJ;VQ;w%EyjVʙ_aΒ$ E4ciMgj:V2 Q ^םLjE5ÿ\Ihڳjx9f7|z8bЭ?.UlmLAl ^7FMEΆPWwQ4ཱི}Zi: 1%bq-דM32N#K@bxo2tx!.lPTU:3V i2S1,=JDq"\#5OUkgYTZǚ~UZ' Guq Gv"FX*c% 'kc {h>DO5 >CHbn * 9qJ0Pۮ 7kҝ*5I,~l`I^;"LNxT#о7|]ۥ,eF $grט5i ib0OApi]% _~ &'B7 W=7/t:<7V_Mn0]t1x z)p fqu d ha ?r;'"b!YEic-Za<A+kV-3\bAa R_tUM(t)2n##E<(+wwۗ #|D]*+v>Xc2ݙ}E[Ε[^FZ%Eຘ{~h?࠽:JB$ g>% 0XpQ @vWdžU|ac$xRh+ӑf=Zfbq3-tA;ƌ;dCw=MsV]/tQPvc)$A{P&f.E@ Q#&^y>:4caq~k8j`j9~\ρ}_ YݦVKWš$I߆SjmS?J;y-0_Vv|j wz51U.fiMpmvcjWpF&3m6vMAw}{E5N.9v{ޖ"}k|nSlszCM]*VRYK&\WErQ4vi=V? yѦ o#Ub7I9h<Tj 3fVn< ªa71@)S:EUJ4Ɋߴaǟb!EM=3+cb>0VY}Ł`9 'g uRV.`O<>\E/[771Jzl1?g??5ieVSB5A 7Tʆf".j [ΈJFh*gG.L :ٲD0\FCKY2]:U*c ®4o)ܧ-_'>~Pv2/W%g=´SɥD}*P d$cR!AO9Sʇ2v |:3]q3DBt/Ǖ=pl8*P;.]XY[;GҲn]*j9<˷skg VOLЊ,T6y9:K{t_td㗣3E@AsمT܈~On4@.ab-sHv٦upn)]Fq}ňϭ%N=<1#cpS}/oM# Dݰ߿C+0\1=&q҆Bi8va9:9Oxe7%B!`ˣfWVX?Ͱ4ؖ@[5#gQ3 MG;15sA)!u}ɝݗY^Є/.-L {@ͳ81yM,pj=:^D(ʡ3.yG(Pwws'{->v'kPN:ItNjK}o5갖^ū1c kΧv| Σ.uڏ ?;Cyzi C '%4ρj=]`\8G`zVw̒2PvB]jl gI:iC|LAbi1LGrlڔX|!dR] ! uOn/Z/(>.T΀hsGt/gpMBLt%)[|Þ"#%͗"+Nź}աeM`95V9C :}0x@r ղ+F"A_DE3֎7Vr/5qFZNxv9OY(u ;2"#HYn$kJg14 y.=bX|D\XvlY_SemM^JQq4炾@˹ B9L7ewP!ol8$C9 ZC";Ky!lVj!U5%=7JEPQ2/_Q "XP87v0E<aAg! wQ`_Z8ѵo>,HeC.z{r)ܹ5 ]2pF3L{T"Ԡ;?v=/bn啔9^b48q7chlƘ[yD/2 gWf|0@2ѧcA~img9S2\@w2(뼣kt.Ya>>N!dPkqRyS UF~[ H8b'24h{!c0IDX(ڤhnT&ӔS4͝U`軝xQLq3ʍC Wop8jÐT՜0Jsɑ/^ ( 6 $]>34 r !P&oSס& 'L>JaǨO8ԓթZ'Q7V{iW3M*n,k3x.dy YmƗ{* ߒ7:M{.CZSQ h=iyc+SP81 y@~:q6pXڋ^14gcr=FV'>'Z:~^7 ȜwYp>/8K6Z" ΰƢr{d j4 Y $M=d^V@%DxS.ݓrLא4v0=VAw^QW DxyEf[FW/v\ ud\>R& %Yn[MȐ[aϤ:c~|X'їR W(" ~m.eYٺh񓌯וWExiS]D#FΠ:acF:?<^/H(d L #[C#j J7mWǠ@uAZ(z0u/Id|CaCz!BZK(رTAܡy)x"(i SZ/9J)w(')L IPmcw ,X#~{ƸsUK/\/-"PR@,=g$> N2/5my6+UX^2DO"Q10u]^ahǵ2PRHf˫vA>$srBH\WӇۯ؈ rpq_eu+d 3"k) ĝZ盃u8k UTGܔg1pNN[F)-!ǕUJ~]v>=GT]`ޞnQH@pBJ>[cC .-K#[@t?f^ܬ{=T&Fmmi}Q .HBE?7z2GiiA홓tUq83gJy/]WQ'K:8py$zӤv&꾡 {r5CM8zo/Ibp&K 7ƾ`BiM-s3_à|0 ,2 M+Wz4)D)A[O8)}RP=a=rɳ~+یHE&~ KX|+uGI[{~Hy:|%ܖ,e3M5uלn{f]lgJCVVywaH WP߆׆c,L|Yo@/L#L82V' U^ƴLU!o*:_l˝i/-3&.{Ko^ёkpkx79=$N~Î__5C<Ա<8:P/ Ȑ^6=˳\th9-t 簯$1oFT$!]sYbS6Vw1=lVG;Sj\)55hVxew4:0=MRQyq- pzSN !|Qga͔;}&b_m[1\"ҹ/t8n>bב8EX)d,03.!BS,GFU:еH/X\8*Uki}1N50u)D Y5}o(PUSU{㜮:;؄[/߸-#pM>կ^ZTzY^=O/I$G}[v+#}m2sdD_[oٓ{D>HXc /tQ3,>p-\qϰ4$m0_~l`6k-GXI/p35Y&pÔ6q矯rU  /FV.xiE{ɵuhNVZZR-qP,b, u[\.ޞO@0swL&i/g,2gbOkDH7=YSQ>N'PC&uVnN\CLfh-Dd(A(S~J+b?bbY: m M)&4 Ca%??v1 !Hۋ[6veyT!SV17="Ƙ2d `h= &LsX8d(f>ve^J##XluDG85{*F9QdG|MERs4wN 3HڷCEĮ"4-SF(ϱ!v4?"+إGiIT]A PELsƷ@m'jRS*}p\q;][_ӷ*АY|Lg2_#cͳ2G޲-qbI\qo=DPtF6O_3tt@u($bs{>7?Dʧ$3ZTU3S(cPs1t!Ysw/8-Zp^]U u6=>A(0Mo&]sRU؀|C='?o\R:6zŷq )=цj Pf"4dOFu%w29 }7*5 zB7f9Bmjzh XRN- +PS sDK3:]pS ȵ[ H# :X:y`c67uCc2bt-5"9{&r7+M|GI3M3Z$I9n[NxuwWfvϒؤ ~E-b5IOLB]'bfp06Llj 9zeI/YtPy=W;\-HdkĐvn4"AQuq$33߮4h0@k)V<G}x잽$3!*/=$k7K 68>!Akoͳ%{o52w]4acEbxg%{ܬ:8l *Gjt nk}$=1o^vW$Y;8/֪[mQ.nhnXRa˜(ѐ35mPC[mf[KsJ`2mf!_hr>0WΑoW۷gc!QyؐZQu"k.QȹIrJȾ"I!ԽakB j,#h4vok~G}me6㸺 &s[NK$XiD[%E g9~Q$_.1&U.' H?3gMʌDW[g;q%|'Ё['Xkxl2x`X"©,:84CJ- us>FqMNyMY :0#M)2G.杁hSf=WHFW=7{ rnW˓S묉{`_"xz2Ӽ>!u5ft;.ݧa>#hJug'{BIGAfSuE>"aiz&Oؗ:n܍܈I:dUx;U*|sZ/+k /2}w+p7Ut(p~1 4gXLw@ š WX vrUc* |9]"dV߄vEleI{tC+,Dk᯿rMY I'zI!R!nH`Txv!pn4vǝt^tjWwTvrmtІUA4v-{,[gQqa)Nd_7L$ˆ"j%=+ϧA/3h`ӉX{,̈˥X ¶׾-OKl:g¯,3jQX=w数3֤YRsv1D8! H/pk.^VGCaہ`gB{BhDAOe1,)}y"J#; bځ؛hi_Ш";b0=p4PI q) ;✞,)EK"=OM QOٺa$FW좐}JEj]su-ێ;T//F)nL<$X7 RCB_ P$+>cʱ{6O R;iI#U `Eʑ^{,CdĠm9yʦ%Af?´ڟ,5GGN3˚C.og')3C)c_)ڗ ĊwOy(DNiWqFc=Lf3o <('K-BZW.cOINp-ŁWhX`T'o+ "ĺazC j% μ>1&<( g7 WpS`NV>bpU =ϩMteBL$d!/s_&nni#i"(lv~}Ȗ)2x+eX/G(d4Hc%uawAJj5OQHCF P߯ 8c"!F Z>cDdɇf{z!o_eͭ@+| _Z~-:bZW0O:+&>8GiԞuQhіuU̦MˢE/)nS(e{GI0߆0Lu lwVBC-vJhCbndˎ!u5%]t$l݋,M~ fkqR3DM/OB6Ne;&c {W> 15u%/?rz2TFtJ^ dTUT!6:֌=b 4j= /z VU:'hoăCoh#xJ!Fv‘-,u8٣\K ߍ9hjkY+ Y}QTRИV9*j] ?[XL5V%GYK_> 爈X_B<:?<ШP5j )Q^Vb )XTK)J#oTySp 4 *g긮F^b ;.3pfBalW.?C[nhc}23A;oe7vϺTM:_9'im*y X{ Ykg;kwRV9G/ ҅:xPJ=A7B/3Zw EEpFvg K=/ycyioX^ߴ%0O2#WYZ[肺@^BbC[)$/huhup _ 9Kb*[I-d3 X:+ +>nqNStح4Fz)gLL >s%^6bÁ!38@@tU~I=*.~0GK5u ɀ\GR(L$]e#e]& V<5.cЃhLv eg?!ZYGW7PSl[5 5CcbAMDLKVa""lߞ2d9&cߴ=Msd.CG u̒{72*zT[@&qHw۟ʏ aP1.}u#]Vp~;<L&i4XJr>hDŽGw@y؍꧙^ͱj37&ևfχQhIcAK8 YH`Qt GwO" _}VoL]zZ&#T$JyƏ,|2>=;:԰k<<;]W֠嶖|4Qo IvKB $Li} u~E ow:)L95˟d63(/&悓/L`ϒɯуC".ͥii9RW*OqB56mr ,=c{r9HxguoC (brK^pn,Yi}Ga\~IT QךajX"p0"r ;lTc3,MDX'Ʊ2HYz; Ul~+˩҄A $rc_~`\J8YܸR8vf{`'J,xlIk[Җ/شN [J^Ig%#F[z𠡍c&s*ԲrIaR!k̓~-b#'2 EzM>!;ߒ2?nV r)l V=&D ~/vڬXc)7vҞjzac' bԳqI}vq%ҼG ӼᒳEҟ)i\0}Zŋ^{l ~'6AR|1+= )Ӟh?>tأ}}r9:yo3q&zQF.=4Ljmta<.Vv5Xw1SvO1_R`-)-IW- H%A}$ |nĠ,+r1޺6ůqdΐ/`l檚t^É .V.gy7RbI?Q}I\jaL716abS4 ,靎x#钾r+\f%Fviւ)lc9h}T| ~07WܬoFYđ\MTRDö.fzf 77Ҷ@Iv[$G#w;5,h VɄ ;;%CR7ڒMa&H:޼Va >@4"ӣi9Oכ|m' 5QOE-/==)fr^z&L+7=|HW)^h&ntUP)~ NziPaܸ}=溔PƇvg;Z֓&ʔ>qXLp Ȋb< _UjL{,"k'5=Po9C+#:_U}zm<џ\lbK֧w O; m#OxB{mISa>T@ lę4GQy'isK!œ'>@&=mt""R]J"% &.cЎt;Ԗr5VB!r_vW9ZQS R SG#4j||}q#_88xCPw'$4QI̅[cH%ℤRVP{ȜN_Sׇ%mK G[Yc1# }˫Yi, n70ɫܩ;1)ھ xc^1>~2e)"W8*.'۳vMн(]x:zH6P}B?by."K;=a:z!{,Qt}IotD ُIZt[{ zmcu cSLP}rr%*!#yzJ@_;wkiT;v5B2EmHb3,+^QPz&RY1(%êVtViP !F.!Nx05 yV=_g ]HxLe?g(F O Y 훇v[(Ϳ|٬=t"5~m~jsw5U'EVΡUi c:`b;W7h8};ǜ|\:9xwbZIϖm(iˌ(u `r#Mc;3G'@}G[3Yͷ>+XjDR9y| kZkTRaZOs{%ڿCz|U ado3W}n'>*#{l.f,$q~E[K`JmR8a;V61h@ 04? p?Nxk%ŗQ6NUnR}GdZIy_<6#:<iHWmEV^u%6 .|ñ1r!Y-.n$i}aj%ق[Q] xc;e6+&v~VSL5mjL+mM(=w;Z2q"iy3AGUPSpusq!O2VFbŜk[w\i!Tb<@ oMyîq'0m뒠oe=#kLQQ=QdAH o=,2Mc4~2=Ӳi?oš8!nwIDb=˄ zϕ2d]/RK 0njd϶ Х =Ҟh_o9ˢFJfl~GC Mr 6pmc2 6e4q {XkuIX5v?IiwZ~24^Džۙc&UĬJ*oF x*0,|$_e1v[I9Фr$؋+ [6A!:z$N~wF6jU#ŧl DfLhBxrV6pg*\W&u0yCfTs@? I|17uBejY[¯F?[7|`d5\v 7Ez>V)v1`&zXě>r^=j!5$,Pv5 :Zpܲ!S ߵRCS1(/*u`:h刨ÅG!ձ % RRRzSF y1}H= QOX'0"+2+4&.UxL&*2MχӤ (NfGE<_ݗ&K萭Qd$x,ؤ_q C0V OGi$\ .T&d٤Aϡz͈<)`&B}XGPgd}:TAXN7}2IY^c>mBi]Ԭ!tWXUwj-M=#t3y,MFPr8tb+B$HӊR y>?ޫ0^.0QG8{Z#$P=ʥ~a)_Gౢ푏C-Yǎ|ݹ$ƻ*Xw{HLjp-k0V-y`imFCi&*!#εѡ!ѫ' ~+qI8I6fݽl5mN" zJ46 ړQ@~a,Ab$"_\s%f&v+E_sIд-\e6b&ViZ}&1VvrD" kE-P|-(WY 1`CԦ 5 Ǹ ly{0zs B-} \ tv܁즆[&׵N;[Y# j}c/nZ9N:Ǿ(rwKU<񔝻u 2a_.*YhoL:>9Ut<4MT╦k |éY. 0we\@[ J3+z]ħHl5b]Jzv&P|ud1VĬ܅p[XE}pUYpȴhIȍ]+ul}Da'S΂d3|1=* 7U vE,౺s̗qȓdihn`X(!HTVbimIҚ )pNp%ڞ c~QS?`6bP}D: ĂmVW?P$v#y]-kxT腿&HWyIϛʡ~@] NcÈl3i'\06U}ㅃqC!F ,p]qJ|` )*4f=4ÕvLw톥(Ę6'L:Ngt7Г >sЕjEXM_%] [@FȹZFAřa`bI Z dNvh~]#U_ a9*m=O}X[i5\{vɢFmkrH8?+o[ũ PƥD@Xwy谡56/}M6c-h }ʭ?*=D4AΫ)v>:`A7TM6q{oY2f71&>$G +!*bB L4/$vS ;XNڔRR qSKO! \PY x_;5 ǽ vY /"gŝ3vDGޑbu:AF$'d }sF\K˨Hy0"{5nIi$9uhNx|HٽQ+/}Fxކޫ!|e$NB\-60p&wM}eqEFzZSM(உ*R ZAA]]ǥ ll۱A3ף%8:Ԕ҈l/7f(A3Kb7GҨ[!Q<55kP`Oq݂CgvVƧ u$0^a̗{T,zDa[rh`ǙxfoWnMʦUlKzPH|>[R2;̽m ercA[ Iu YfǂYqXB*ʹNu0K8C*| rtGnÔAŚ ʼAArVs˜[]x(Wʀ98}3Œ/ڔ7bw}FQUF&x1q}.]nUuګD \sFIŇ*Z~چ$F5R: KG&C" w*kLڴx7(5'[\ Jh(BuD{؋jl @菏&H _+r-guȈ.(oU;{tarϜ iMJ$;UDG}5 _:gtS3y?˅cڌzf 535 n}QTq;: xj&4$ /|E7rwif9]ϣȔ2儍ak]/vG,%,К?De{X9c9hecnK<8Uӂ if>(CL@pB>|ţ:;ͬL& wyYvlӱnH?rKc1tcn<5bTa(xx29m]O_ ITRIbH/d3 ܻ\[3Ј̳2H!iFs ˑѶRs{jT/n:o6sF6RlG Ѥ Ոj-c2V02l^]w,:zbŇfy&0f`cgGr K-ueNp [ XS,UKѤgPXđ}b~dOv2{߲z-ݔCWʑUqS5 9:0|lki^G^ ojZ)䔯s*^:xa]?}GCgavNg FH,45( >*]8WhkB|a0Gb:2@jԱ^7]732Ve~ ەUHI,p'U<6ݬYZ-jHR@o~n1D4D''XX5"rI+CRJvګ,UJzp'_z# Z91btJ!)ƻJL, GYHEoyX@xIq( ӧdTK{\L@7 ;.x״0+_ [Kؖ,C]Kl%,e0\ [CԉU9PЛԹvM/IޠLd>H +Ңx2IG} S:ϑ?Q?hwNEIQ"}2j ʼ&!yRX 0$xOaķBfe"5=VcI F`7i? 0/&YU`3`O O0G0iI Pc{oA6b턜8]ͻYΖOkS;$?EZ'KR 1'=d觯ַG&8bO~BYg=ȊP[x|tչنQЪBOb [>!K'0<@!񘭦mKbBNN/u,'8#sq 5ńT)1F ̭<:]PA>ݳ(DO@zST|jKm-0L9|*4d?@rmU5S~SR- *cZUh^)T-fB\tiC칋iC2E#6!qghQL#)j7wd"AbgL KAW[c lOgHlPRP'>~08x6̢""uԜJ]dc70%8> /(B~eI%9__EoOH 0DGqn,)"[+yeB'5×Y\-?!읥u!gP+\Nmpr m zLޟCq&g=yYAseV~KOu ="Hmu : * J|%  L-;ܿջ l*ɚ783bt4Pc kH3e]oJ}^0PyQRAys56(~uV|s!ņp3J㐤q^[̢y1 5YFuMkؔ0V+mv/8r7YGO4 n{7qlvΒ$g~} #䟭`{=TblDv]]-`wTp'뾕.EL[_UܭEaE;\ܨKW<ػрKhq7lkwgdP6':݇hkmO6raE:4Z=^P@RNoH~z4["TiB*Cy5:@*TF53{PL䇇ĺCrkI*S 3%^VAl8Dd0A7`Uݜ ܍jL^⫠X$TYH7 gWؿxJph߶:z8wXҼg彯.XA=p(iGǀ]CjIqr>buVVD)_ Nb3H2 1=vЎ,-osTwh;.!) b;U!HfF!݉7KzISa'˺sZi3%+&GbH?pTK+lah308ulXQ a5N)fk7w"N\ C+@7J/h":IZO(5}F*+s[2jCh`^Jp^鶬\[[1"k\ Ԙl0oW߻sRWzt&j.N:O! MZ '}Ӽ 9 V9˺'"~x(fD|îgȓsĨ(ZNNA' :dazJ!ڸ_HĜ_f#c~Wd?!""aR;[?\ 5}3w{]ƙcg|U3,@A2{[FOxomPZUYGH 2c+;>>*-Pw*㟕 9Qp/m9D5st5y<(M=f~,8\ի@M6~p  9` Ȥ#O[$? *;<|Kᝠ紫7z{Uf_P wƐYbEyiN#R˼y`C.{.x$[3_]ᯮ噞O''{>EWhנyVV}l#jA˲A xCuEH^̔jM1Wӎ!J2tG< a'04)qd=tC=)-5еpx9t(Q_%*94|[#';~@Liyؙ:]N7?K\ Y\o<% oYDOEGF6-wf0x bHA1@ٴ^앁T A]L/HGDZ:i h@}!=fA/ ѫt }@/UA5I5~d_a-"-.rsF;?djch6=;@=7aA?4;\]cUC9˙ S.(x=z%M`l//+< J 3 ]^JkEjވM1c /gmK GvL΀WNb}w8bM(W$ëvtqJbȓe# qK\${#MR̞B!)gf@`3$3#ńm/vÏ?f6^4vnmCq#paHGfX3۝,%(ZnN$iMnY8˫'fO^]%T0]N45T%<*cyo%>q+(^EOk @":GQ}Fv&c-uԬd̨-ZPm_ u4I$3Jbf:agrNbtzAb N&=@ _I||WOp냂t>7:nF 3R@VfsܒI=ڃtWJySA*& _=,\DIfAM!N༭Z!X՝5Lx%ã}0!j=T0}"8'T>ZJ"b^|eի%?ɗ[5WBxwm?uT^9 N,gKc$g?OvQDl@^`,j%d܄8[#+6u>s"qZj\k㊒ LNfsF+jx8sʹ0RqgDK|㞕YH ,B1"5]8eUNRHM٧bcƈ@\7;9u!\A>,<2ud(?7$zZU]Ay?v]4 NCΣUcaEw cYPYL"*,+Uv!M}ewkZ,j,;62Cq,+cwS$cV6D\ s,H!?!DP>(^aѡ&U?[.AMekLaCNri(re'U\o|g"`$Z}Oteb E@~VCQO )H228U0N -~TnurwX,FaEQ|'Ak^]F S~ㅑ;/|EqYTuĶ灒) AW0CjDT 0Sq8.e?1!. jC2[ 4 ;!0}1, I`P-.JdΩ5^RNz4\,ǼUgg@"^sr-j&,ZV /SHzsQxPnZ³Ml!%7Г<:/=i̶`;"*3Ls`þS(a6:ູW\14Lx|FgfB݄BAvz|o @41u0W+8͓yj'<l[Ej5+ r2ǻOW4Kzghb-E! :IA #I-jՎeoSث\|E&}6s E ] Qr2kZƅ79W 2"F0WԐYAZH&7xF,|)KF'[&FСj?CR=4X!̐"IVH]Hkk#;J+eo 5?$ә>&NqViF#l$dy{\7/ wnH/舴q1ddl;{mIȩ)^?,qi^ Co.ޣFkv]p,LEp67MߍrhTL`݋"݀yacQZ*:%=†Hw Gzr#Fo*x0cSS"NLlwr؈' Df*?F,._e Lp>4cL2~Ooi5O0/c=~C-ԫNjaBYM*Xr EΧ0D+"" ͎v'tG!KrP;B`ny2}BCZSq3HfLY }Z/5FDaM?.u:"w5EecWlWwKͶ;H~<LBv(ک`U1}`Sr%E:&u1~Պ5>3qO򇰨Z7/i`%]IaR4lGA"tee 'dcaNLP3m1#჋A&fj8/+N">@Bmb`>?DB^̸TCkvPyX 4,ʯ DaMA$ ˤ)ǙCUJf~b=9|Nyyywq?h ib0@Q HϮ(72ٛ/0;Lؖ:Al&曾F>X #[_!㥌&nHfg.Z۝%"]/5Yi`.%4K/}on>3_HO(O$`cHw^Yld/ `nSYJ{";ހa(IS +{ qQIYٻֲ)AMZ}J8= 1PR I˖~CxC܎V)Y["YnV/pj{R"ܟ(-( U\teb+WIE]2g!U#~t+hHѠaNM@Xǯs͋uпI6m'YUrV-ϟ5%of(6vyl#ӴcΚ 2L0&\qC)2sP Ù[‹ -+tBb*ٳ[zbkQ^o␎a쥻 Mn-r\,UyhǟΉ%i@Ѫ+X::nPqnR̀bo>#trV+uX܇Z{UE1G~E:;J'T8FL71Z#(t ͯrJ8r_UG}j[OGC)˯Άx[Xc<(DbMozK{;\#T; 11œ@Tv=&=ht^Hbd/I%] !iYeJȾ hgTQO:l%jNE՛mÍ~%sNOIU˺.gk#* ;#rcjSZ4h[;]P*fpnP=4,3adIrZ9PCD;CV=JMsy.xMDIEZH ρ"F-::AƊ8m`Hx`/`Z;O7 9a`EnUMsfC35a UDꇬxвdJ8KЯnnv8'\~'CJSvݹ%Z-Eޢ1"%k\n`:N.J AgfjYL' n{[3d)>}Ho~sl( 6/TR3X<5@G߁ؙ@T eʥծrQ`v*Z4i/cwa5.zWP-DRzUw$2&iTgQ5YT1mVIl0<"(T"bU|P0 Ju"mQ3ȂN#΀1V^oKO|C~*DEDׯL ԧ? l@FYp `?ǝ͢swG}iIT;"Ti i m&[ C,j$ e.8e a}W :f}W)$G#%Y>yo/X2hƱ=P/-9uۦa]p">CJa"SlMn :5-H-ygԌ E,J.U"Mk\;QҸ)ۂ5HDe$Y@wV(,NTYATw TC9I`Sz%>xd6STwH+H=u QaL)£D6&Mȹ.YHrExޞªɎ='z/T@'nC=ďcy rfçQB2: 0"M M.?yj H$w?Hi5}^O?yTSui_]і"Ufx㾙4SE<&R'(7c"IƂ\0Y]W\ h *~!kg NPǮwW(:"2wWq||=Iohn?ցƻV)p9~UUZU%&`] ٴS2h,>2Z5M%:XĽkb"aj)34&_ܛF8a(Y=ُ_x+I+>J1;{Ȭd;X@cSs1Zj>ǡx]X&˩(E&3,{jIEoRG(ZAǒ|l`F*;u.Xm4g2Z[EWlJ;1镂4A\/Oa;Ry/2{[G#}{2U?gBQ^F`d!h1)[iL%-w@%fVZp`?D2QVCR [HMd"*xT`eBuj5υ̼BVYXiYqh#/@ 7ނ~z~#Zkg=ĠFzт@#yB@F+&dSz(b9~;54 m2n\0Oځj$_{;eWMoZ=biT5;V@ʕ_]S}nMgFΧ)ue8t! 4B4ٜ`zlAf R^P6l>+yht<~w1.#CHrXBE=&Lyg^H8Iom|%bo in$dp?[Rgb.tgP trUwbWGʌ6 y=$tKhCP 'Zu6 :g\&)]ʠas5,H >c] 3gb_1+7a)3gOrэ^hM峩=GCA`X|X6"ː#ŔxXIII0j \'.OC]D$wzC8,#.~`w=C㄀OE5w7l:h5O3q^ixrkb<UT:CZ0bce0ܛq<^*`Sp hh-n}M qy8e1MGonrR+&JnUjO%D7:щ @nB7hq-w~]ֱR ҧgS<5z##A=&Д|!_ZkqNM]æ^I4E~0tϠ́ߝmF8v,iiC0/+N5Z4 ldXŸԍd6TXFK0Yo*^ \~mRND +owemB4aq}1,9Wt?\iuJߤZ&G<(Mi.˙dn z*zNJV駢\Nl`Z!~Yh0rs]k͜Y:i`O0c߃7vhRxm:3C&xU"͍ 9t*r{åk/d|K%NOYPJj>*[>d4?%ӛ1;so go氟q (jh`Q:bo\CEAާ?I3i S)}O_CJAEm\ !];ȄD㚗:vNAeeӓˆb?-W (/}S;^= vfW#I[(^[6z7xKȉS<0c8RՐWЂqYe'ܩ߮bP3;IQR\MTǛ?|xQa؆ >Tv6#UCxP6{#R^ɤ)LpsDTE"[2PX.>U3m-;NQ{gMg'C8Px$٦H}JV=7xƼ/drsGZ'UX>"c`ASs!Eą~rUSl<KO }M7D3$*69ϝIǑʨd `/# l8M}qt\U2X0*k, u9g y 7. 8h*SzN:pTQBlՐ"T 2wDeQ$/Q$]Wvb{uC<*xZ7Bŏ&3ws!L:6"(ȿ"@XG b?my>zu)a!**tw*$ٮhmXـ^U ? QiߡfӵPt uk>g*A`{1w\I}ltRUub p!+-#-1Ӽ!~gۮL8d]*0N4$NCtWN1Zx_Q3`6z+) 6} O-sɩ lCUz\ġ@])t}*G O³k: Q#Q\c7vKHYox̧㠏OhmR1#]6n^pÀA-[*ZL(T"+TIu !2X DϦr5ɿ(بvnj}0Dpl_.s>hubN KϷbS$yGjR(ot?WM»g+T/SHyN,@N؆w[](kRe+=br٧lh^>{*He.e 袑xyXU +Q+7/>|ѓaCBST1 `f&Y@0::2ǿgn߳+27zkhmg2ձGچ93сzGa~z6R\}$ %ΣY@W˒wA.u_k]euElOQa/OTv{@SĀ $ zC.m|Ȓ1R(UrXiYt}nAuEK75 +RhŬ|Ŏ&XrƏآR,bV׳̿>b3 痢%t@'&GEɷUEB8 2ݓGNX4.Cb] #sgfeSHI_zMwUm 7)$y?Z'-q UEа}LPV{3@ʳuuUvSlU{DdPېIr$qC[pY 8DGsEU9rjvMހZ1_ZO1P HZ>PM9=pu{(>7 <*M1r{7#1.}y.fRz9P_2&t' hTFI\C%`8aWc9|}]^ߥTVGă׺*{[d2ЗQ*Z>jθ=R(iqyL-"JW4ێ\Bd'xo"y7n{͟J'`A7v/` /NWYꅦ.b@ѱ>:XP.^8ڱ6uCAA]8UU#hyQxe;I|ubL!e<,3ðG1D*{txtǡUiC۷/hd Ư=2Λ?0q9{ ȐˆdyCߧ(SA2Ђ% _ޟJEpy[, 5;#ȿ4Xk6V] B)'QNc >VQrA#P6 )+*:ؔ֯9-Qwhwb`}Nj\RRhn6Zژd,|lѧ›; ԩȃd-NgOQ$;<`#.W 73ϲ YN?L%ܭZi^5`yKegy4Eӆzv}DH*]tH/{T_ӿim8JdDu*T q݄!|oRÕPE!-WhsSn"|~'cb4E"o˙Ⱦ~(eU473_=ql P"BkY--IIA5'"ey|Lyuq Jʦ!~A6?Щzgެ|;pS[5q x-^}*b/*rOÃRHi{o |<y?xQzh1]A3\G0*"4I1|Y!Z }J̿[vHS ^GIB(vV?'@@Ǹ3Hb-#E'A@nDw %e(๔:Ѷ # Pm)X8.(vhz࿕= !Vրf9\Rx iD Y9AV[*ж߳IUԗZ=ٯ"&1`u]f(3Z:ʁx2>RS5r[:y23/xTif?#heO.鶪%5ZRf0;RtdPu?"5F;F@WÙ|b?jsK e=v@&,66 \鶯2E8{<TZͻfo/k6:`tIuaCdžQɣ}1An;9B$ܐةII=+ "mJը ʦ| C5?{[l \GwZ;0ֱšlof{"JhW%l M1F}i) QȪM垧ޝp,";]8f#4c,ceE8dBǛpm=ԧVa6]fMY'L;mLd\F0B0ywqbiT2\p$fdz>Ӫa/-k-A;F*`y*zn}ky5 V6_o:mnՒ1NNOjc; ĐC Kk/͛{P&N?ZZVJ Q0c^&Bv2.Ѻ0Fg$t 毦Nnf heyHfڹ{gpCa]oٓ)NB+Wx &7O .V_ugksu ?+D5譛`:ecP_x 7:}VYÀ i=5 m|e~Q/Y"RXu@'ɣ:Bv_ w9 (ƙ.wyo˽8ꆓW: "M 06CLN@1V$O!-ф{HE~$!2#/3ԋMv;W>=ji~kL5E# 1&q]w |L jsSq4b'i)JoSWdҼ݇g&@L@;_;5rX Z]j8 7W>N|=F[ԍLW37vUP4y蕭+ɰ;WUߟW^lqT9R9%vaϘʁwFJz{[+?х\I8ScKΞ_~O({( nd@qLvmzRvQoo ֟y;/xylҽY}J UsIKRWOjDz잱t,BG/҃Vë 9ɓ4vFIY{S+KP:H_ Wyaڢ;(h)u s#6 ǡA2q&C6Rb ПXzif`/" IKa('Uh /I7˧XΓ&^KjdEp7y[w{F*6{oYN{#"Q!tNf!TEX9%"rZwr$J'Aٗ\|Ƽj ۺ'W{єɘjjMnK1 ZwRwE\ȪRdħCpȮE] #t rv 5/ŋC0 pa^ Yz&pT(k' I+%xU~,'l33?$a:o3wZ+ke 5J j˶] X|"KPҪlH6+DJj'<ݔ{49c[& oQx'Kԛ;j;))&gɚKB|/V"Ky>}ų15đwrn(J9ȭ94T\3MQ"L+ s/@3A:i:X`gTP $5FN:)P \ma_0 N%e@J%i&i^#]P^栴NIdl2RZ켦̎}͟L(bbdԶàŷ) HOsTj,Bʎbd4YRNmUN0h'T 6,C6]27CG h&$W $[/l17,iLk^PT wkѓ~^iL;yh_6a<̄j5qߑ8=D5^b){MT}(\e"eR'z1b~k?Ĥ;U| Q !"wCM%ѭB?>Fh\5ITqU(XoB,{ iHޚYodZ cgTgbPųnF*5-AMz>8 R%2J7~˄"6guyg. X@Hu_"ZB"-"ƍXM8Kzem1%Mee1x.l dOmxӁCbg$',ϗ @J)Z{:L[iV.]v#fQVd!39WR28^$u`uHE&ԥx)o7v݃sObn!q@CBI!4⍕ TkmW+|~np/@PI<{%r_oA!NKu09ځn:+eƦSDW= &i▫7 műN=}zՁ\_ggj%w\b=r6QAR}89lDC2^>Opt iv͏‰ZӨ%?gqv\F#r!NHyĵTq Z!$EZ8XkTYȘh"kH,WCW,#p W/WXv.fC1,,=E9сi@2Zpc{sض Fi (_ 7!+lq ue nEy8:ro֭ >K `T=a98r5 b:w>FSNSlc1-wzks)w|v=<߱ ?PYUW ɽb+˧9?X!kB-k. >-LJYVC}Jؾ= ^x).HjbGB.=귏CraE0UG bHRuBP-ݛb/hMd8)M2:w֩Φx_x{]Ts*S b$z mXLs8t s[iQÄ#7춚 E{xkz*aV7bgE92MIϓFs%(Hn㈰}yJ:0J?:Z:E=]ee*gzҭVЁ7{`S[f 8iOlГ2I~C'ӑ8Vԁwgд SݓL.^A6(HmzI"ZxI;sݳQEX~#Ǘq-q)J,p?4Kc2Ow !E`Fx HS_ĊĮ;HYChU^vjqs.DR/n)吻{ג2Z0˕p(x7>Oc惰-ld22JCۥ-hZ֧їLh2qBtӆM"{yzRgLE5 <5K䑈Or)i Tϡc:a͑ܺN^ÂX.Hd:jaRЪ@@^eشMscg^NрuZO^LR\x^m;]qxgcE,/}6dYhD̰uEzطG#]sW$f* Jkez%`".o&THXRvCs= dUFl5ڢ5tq@~Cojpv68~2}ļ\1r3>p -zy|}!$^,r]=zP ȧNqnQ-ĊϓnO H1 мo|E %;H[94=z _c-B^/t|ձvP Փ{SՕL |b~U)VZx/uGD;8ُE6^d ;!~hUEF.<-52 4]-^ta_>k:8O~4~|F#A'-\c\O;*x !ra~QApX&W9>SDH9bsǭF0IL"v·Sü!)JCMrfDuth4G@ֵ֣gsm6:Ƒڐ ,,dr[K*y瓎ƥH#FH4gVZ8PRJ`O*͸nHIǎ;D~+Mwcsb)9|@6ZSƍHHlϏi뜥^@8*"*,X]|d]ũvٌۢØK|gjT]+J\Ԏߐk\m$Y/ rA(mPQ[kN5kA )DoC;Cwjvى V;LO3IZcKחHCy`OEpU"/sǝ"xgqy\'H*JK R/:Ww/(ʔiJ'4[@#=bY²xt1_xhLBG:C, ="RΌZ<78>22C΂뤰$q ?.Y Naw?hV);qxH$Xst!5=Z {UdDt#]_BkH®BW .6q.%$|Kleؔ52(x̤[L&'nuZ ׬1;ɂypPMțeE% S60d,{;dP,P`+Q7^Oz1G9,$aBmO/ȼ'0q$\xaIZozAaG f/G3EɟTMQ`,J‘}RD#shDj!G)I4WHi}A.9 1V@/l?luS@ sG#@KUSg]Osf<7}JkjDgß>)뫗:VE._xoYC~tw?N3͛Z~$RSFm?zl! :U]ZYy>|.z:]xY0R6" _e_mX~~0$3_X!wQi,:A,FZ)> x_ -/46F$|bhSh<6dZ٘7}N9)yT)}YO/޻fL#5g+LbnHr{hoy")py6mW~?pe4e{Qw{naq!f`lg9BPfK!/57{޸<9Ndg*o0L Z0<[W/ 8[lQ6ҏ\k6;zgIݏ[K5MXi%^wL2y# q +TGBEMjaǛOQQ e5Gvu@)y>=Ob>>`tq#9!w(|")\hޤJ|-@C}sw2/Ѷ_CIB F 4*Vk"A|/ i&»YE󼶠FwB"¯ IpQߚzݤjdfF>=MUьg 5xKW veǑCQ$hgvpUHh5WsPF 6 3?=C8%M+k-`sR7DJ&'j1T~C(dbn"M(o cȷYGR"O@j9]6xZ'd3zdY>41j>$4 ?G*[q&$@hk #{ _}Z_;HƺbOZ:{o_aʴzN⮇. f|Ćf<ʣ7~X[8S{ ?{,r2*-OU˿a0Wɢ9|\[ >0`1u= 61ܰ~onC17,.s!UsO#_0*5=~ٽdA& ЁSèLu>cG_]"ٞW3Ep6% yreRE7.(ES2Z.^fRs%+kKG8K  J^yW ($:¾eB'7>~'Ǐ0ѓ< MLreNJĕK߇o'-S,"Zh'6 cNtd3#d>A!{ #RбФGq&],0~4kr8ʲ˪0_&x<>U_1]1?#cCdNS0b%kȫ4bbnYr H%z"!s8nBnWl1uC՘}՞b?tZ9#>c~їUHq;D"^cAVV;=1{h)f9ƵstIsѻ{69'*9Bz)Q . z. ?dX ,=ҨebTadHhto(0T(.q&up퍤W*xřfO~lbt?O=K֍ޏZH?XRI?HjN]:?qWixGGD[ q<>jtؿ̊F͎|QR>9+=_tr8>`X~) (?.Nl2E.袮_Y:-H!k# mG=u=X#Q RNzAO?e]~[v|Ci2#x̜k[&OFn _?W*{ThpG_9l>9D!S'א`YQ쉦>S=ZFx8RBX`RҏSv+;mȆ-l(]JtPȫK `0VIT;I_FmLGa#u2p5<飡c+ /n4r[M4Ikuaeg3#ljL3׌ 8i]vލfqzWLey s9[Sxk鴭֬n5lׁ;`0-4Kʖ|V<.,O~5l/I'+26bA8=Wg 5_R~ woEDpc'ujڣ2q2!z%l@R_ "'kT!k3f´Nt,;/INB4N/ SO=PCzŤ3v*t)54a˻g݄ .)ڈ1>,4ʙ=*BPcV!M)z9rѝO5r(,:?"q[5Q &^0wmɂ !7:L tW J]T%<:gZlKRpY5<\7OFʋX=Zep/oh.~VdVFUA;ʣ$boԬ49-{nS3بܘsR>V㵾,q|Ε~ܑ^ $Zc+!-Ӆ^\m B/p̅~ B,U-Z^l'`"74*D;aP7Zx۞ֲNɐLYUqMnЪg 6$ԁٹdL}(( X[5EPLm+Eb_e7FJ(!;T`$'xQaxvJ,=0Ә.[/ᇐDٮk06CRoAM# v'8 BnyItXL~ZذU6hK0!qVv=FOwlEHOko8@R(?nD(1rؿSjA2ӵIf\Ʀ"XQwd=֞>NG48+ oZ4]ґÇaa kJ6|p:u Ʉ510%3p?`mO[i%X < ФMtzd a&|=lWU5rԉ7eIUks=J(I:#?*\@aJLǪkO)h۷a&1g JtS+)p?8Uv`H'mURdezRv=۶.2LqE9W:ǹ(nz`X^C N ib!AbZT՗"YwJfAZ;w"LO+{vu=@ 35-9$5;FJr#b γ-Ξn/tjjO<_Q:Aޤx7~?(s'a8+p(FBm1pS)=%i 7+_ .*f!}C6BsQ89lW`@G5'FfK1hƝMΉ&mŏAM_a+QgeΛnSH8PlG8UB8h:e=K+P@ժp+´/24wh>fS %idEqCS%$F'~@Տ^SftJוE\\TƁކ=2ޞ1 x6bd㾝kq\ވ);<6Ci+Ek q'a%Lj~k0sI[;%Tf2bֳS`Gw"ڐ{+vՈH/ȹr(bW}ka%#[?g4swܳWa2-vH(˘[%&%փ6`Go`Sx'z;~k<1sA+gLPg 'Y]}AyKʪ]Yf3gvw8Aخ㪁HjX!T}Q~Z6Yb:h+ &L v3$ҍ!?whj^]gDij ,ZKaiwkI1t3p#}}k¡U/dqS~wMDFŕ18y "xm/ vC3#'I~ Mz IڥT+"vm܄{߁Tl9=z fF@30c7V'F蘿_ۉ #p*]rنb ;N8'\?!`4&"7^#5[Z%b* :ĶFGVǯ_.eR+`h/gb|΄ad٬0ۢVd܀Rxsdޘ g/ĒH{@ѴN++fw5_?3<DMAyve*h٨~>* D`E͍Ϯ-.(A"6୛1:u$w?!I'CRYjbfuM^Sj{}o:x)WnϺ c_'+=!J k).~D-J/bq]X ,kUsZИVE&.;Cϥ|m#L^I>=M~{4C)e G˴ϧxyүۿjd UppsOlN.2~ۓz'Ά*]L4T$2p  qyʁOVU ֫=8!/G^H!of1M%h okw.OѬG,2X*]5IQdV_kH/_YxQ+}ܐt(/y)'X-_ǡ_ 6TZkh4y}XU*!~}?P Rhh{yG@lg/mڝ}+ x[cjI*\)Ueѹ[$(~ؙ{\scg^8+)]2Hkׯe+'!0#&R{Co Aٳ+%XŝZOcӬ;Zꦿ[ ۲8bٺ֩!*qs>JqiD2@FhٳIN_r9_eb26}3kI,ARh-#4uя,.ܜRx GJ ǧ2r9)u\T=9LUfdUF8uڗ(*S]\Cm#9\߱骯qqGn'D<<xC3Uuj̋o(Nv/O/m$fxOι ʂ>2k/sN52-ޯ.g|s9 q4Ok;̞E##oG(ѵY+yI1!?qq7?bЍC_Ȑ˅?X ׻T4YY3BZ5+z=ͭO{v@E2Q6 ,ЌJrg>X*glLW 2(<]BBbboF~Oy70\uVv\ Q8U{ݛ>,@h#pN(sQ}Se~`M7 2[]o32GG҃oMA_ 28}{$cXvͨ=(zм[+e:厨(GgVrf@7%)piR>ND/Tt~bRZU%adr~~z3~rN$$҅H?gS4EOT*vƂ,m=PFzV9]LAŪV8%8juFbcN[M]w&{g Q슞tSN(-͚KUiu&DLu4.}l25rJѓ!udQg"xxP)+e;;;' ,H8pnW97o,Gwc`#śoal_דO̘6F8Z4_jF?(8]0 c=LQa %:"Ր5S*;e^,8Ը gΑQԯ=jqR: N˸pIjɎ*L'ez,^S*e8"29S{b tİE}{oA$5H_y pu ڽ[c  Z$9VJD Kyh)^3[ց80(aإH_Fwռ% <XUb1!7qwK dGL'p3  ϫ"ə:-a*B~ iHkVT LӼ.+夘|!V4[QEE2]Nm8Y#up32liH/mN'G9ߎ"7UuPu7SY|Wѿs,Sw2L(l|1_O*{hGlvؐY3AqBi>u]HD??ƜW@NG37N Ҕr@0mdB(p?1Ruh!zG :%6^oDGek̊V} IO1ʢPb1ҟq$LpCS4g'-qLP S vy8Yh!Džq:nf y;eE4QoN覹‡΍mR8бjˡKW&({; Yx*ɺZ)/! JFEi!-z}#|L$ O>EְI}iKj7M2$B>@yvD(&x%*\m#~D@q̃J1 9)8p&CR0늳1 ¦F Ha sSE!SonJK]f>&°.mi疅$ы9ZWI!Bm`eDq28y&~! L~eT(d"{hX&߇ʞ̍>d$xO62f ԑ]%8*wk0lm:#/\KiI퍅;Y\* \Q#qA xGZrzȎAN?J *:Yi|CH9g쨋KJ'7 Ovה]ff@rʑvR4S [<[) ݫ_9/d a;vNBѹVU4{sDB9鵏,]oпqOzcMaZB` ev?o*噆-o+hMb"eOaD"D;UyVJ6lq -3ĿwΆ2`-ѵSD 3^Mn'F NơE[[PR.d_H㚑J, ɕW */E-,f]rؙR݇]tnl볎Ŗ: Q ?NTu'w1a 8:kȠnѭ8->pMՀ]ܠ%.NT` dp7˻,ݵ7YXn{߷lXA0͖@&<'Uw|i`_l 5IwtUѸD]U]%sвc9o>\<.7`d T8Z\t'10YFm UAЉLoƲAΛsi'ed?{A/<|{RV;=&toU,}%_5/skj慭+8Iy3̨0-J|<E|Yzv 9v~KGt$ cPL  GbX7\\zGv<}#eq@O+Dw$ܐ}.Si#v9LW}&ӿ_'1Fgr~Rth u k. YERi#= HC1SO*1+B_BG8{lH𝴑YſwS$Uj"{2 BpcVs.%T tS8+qfpЯ>1D+:EI_#\z%nˑ"݅=Tf2UICRNnlԌ> tP^lsȫ&L@#cc$ЗMNex! ^,L)DIsM@ᩈƑ_ w_p#)8Z2N.ݼ33MJ!B0)o㺫>1CeOE)xQyV#+wXf'`P» u<4bdR&7(C]ev"'|#Km`[ ",iȋ9ٱQP3-X4=%ev"`$mQ6!3yD^@a7 +j44tZ/{f\OiNw\/ ,u9]#Y c]}wO9ߚz/e7mbg#h.*CwTwBet8_ZsVc]@}MWہOvp($tiD omT1r ArM*.{ܓ_3Qbp,b^,45 A @Oԝ'-(]=Lщ9T8A")fkgTpD J`KmmO 75`rmryЅ<_3ԹS&u0?T|~M@ĮxFhiF2b# ek(g3\eϨ׌F?3S΢"*57?(eD\M8*;c' bbJIn-H1Ow@},ͣk?uـr2|L{砄 eEO?_μt T㿴-˗4=Dt?%EnL :gc*.ua):[HEVټf~ee:I)dy;xLJhT"bO}8$IJ 흘'bzl `gN u|Jҏ|, ]1wNjˍ]ݟot;,WyZ8.n0~R$$YKd E Sv5h$| RZoT)Pm(dEMޗ'ᔊ2]@_o@ mtF<휵Yt"GseZ9#ׯE TuB nXX'@.m< H?H*w̳ gK>/?"j?Osz@aJ$|Xph=iHc6ao7Z_׮B4[f.>bۨ#g~xB}qtwzb2nSzx:!"U^ҝ|O Fi<o|{`/ugd!/5d1X͙DiʱΨu:pREc+借1l.%̓zx Xs5fSb"hK:v`jjU$v}7zg ֭ՉdI[&/e7 S[Vz[Pqd.Fo(( ۨsk~cWMo-jtT`b;ls_RuyD+%2gju`ZTQK4 ob*'|E,XECܷ "y!jlQ\׎w|RZӅβ0R$7g L0* R [DJpe71SΞ?! 5I˯0F;0};"ha|<9Hw* @z Ψ]CfC\F9uAr .)}\t=dzKdF hq?s1h AȂA}ClC`g^X*JTb( lk*n?a><QR.qIj&m%_ m_~lm[5!L.t dFB ox g /uT+Syr(2ffiSƬUŦXx,exٟcNOƄBHG=ALD_q-$ɵHb&?}cv*Όjg.@^%0%79Qgs,)+SVː#`Ԥk?6XZGuT ~@KRhdLiST࿂O!G&-DeCXvo])4(<@Z.ɩ 7oMAA0i[IE΀-T#O%^|ZJ8>=Y{kwYo =;k:YЈQ4堡ִ\ODI=KsT^mћ58R{+O*;dJ2N!Ra.^?z9YHoQA _F=.W86)S, /kM[P̍~͗51'uSxXTYfQQpu)u-aNײ`C6V$G a T'A;Z)[_ @Cbg 0~Ep8;k'8|ݖ񭍿CWUX|S2܀Y{Lb骿\?tP&FW(`t8vveCAk}2|i0VdJVp`mhY#5 i"iu2_teEւvkzj˿acݟ{9I)#8/\w&3רvB۷:#g'`>pp^QniiT^ ]3~b:9v";-?~_rkt #5-^ R /#:}h"A/ο×E9^oN6CT+ Nl¤X,DA?q{.:!^xi8ۧK:Nwor%j<ҒLۓ9)ᱪܧ'(eB:K'&"wg.Eq$D`ß"N CcZE>͠!7$Ob,N KKܧ܅#ؤuG-5ͨ(腚 -b0G1M^g[4l@j Eڙv| cfmrOH轨1a0KH=4&xQ/9mը }j1raZ AfaY%-#]9ŨunE -%{>qBy>?75S!p,w^R'?'={CDZH|[K̃jQ:Ur/m7 5jJrLeÂVi!7^ff `sX*styzz7{ qJP#Mg5|A9.!^vAC<(Ye6.lj2 FФR ]=Uھ&b"{3KthH4M\Cm\h\qB'ЂoӬ}2F8 7ތXQe? 5ty#͡q^\a2UwǬ91RSϼfr_fjAgL.iߎ7 4pNe'5&φG~/hS]zvB w ya0>K]@tA\RPyv| |YAչI'M+n>5} dc͟ Y俦gMy#ȻC~N갻 Gqh2D~W3i{yYg@gTYS=\ [Kμ.5W( Ojsz A~ *R⥾1=z ,$0yn$OaS T =iJ¡ 9V?qoѳ_hPVL?+UsF\)iA)eǰXhsӥ]`W Q?bDdcTSte+xf[&vz<ڔ"Qt& YO7&eW*k6yy s@mpoBTT!DxQXn|3T<^"W­p` ud K<bC\GtN'ޡO3H~~l+Ķak00*#g il ״Ɲ|pY>_X/UHD^2w)MQ!OUR'4QW-rh@'_#ЪβL*Fzo=i Eu -̯&6)Id[d@R' :pG|JG2b=w2ܝȹC3_]=KQ*ml$<<H6Pk`=omG34S]d`k6odkͼ@D(cw}-chi6ɈS= F9I0iH[4^0 'lIkc0dWDڳa|,L{G-5:v W?6יC.vߡa.adB!R7sׄk$w:Ht=HNnf$C3+JV!dx^ FȭRA/!d/#ZBA S *\M1Irq_\Õ$)쩇b=` AD_by*܇^2 StY',X)}l1H ̈́G=\ⰾJ_-L ELeRGֱI[cpIy.gWNRqjvWH5c,E#9;1DBx) ?/ g-}HM k?SP-U,X]Ʃopoڟpy>]8 "UE@Q viBnf%r݅ I R7cX~ o˴nWW^5T1n̐iw⃚Y-y+ Lξ™Y47JE)FIz8? '%{6a-Fi\Ѭhֿjm}Ur*S&(rj>yvBes],[ϙN*,KJߝ\!S.76(z!xʞ ~r$U%uz?5RX[D*{AZg\II63y N kZ8JTwq5!J+rwf5G*TEz4;|û~G#=F|,Ϛc hɠ c%jAɑ :/m"N[m.BD zu,9z}vl_P_DL' *@NW h{z)|}; ;mQk׷$}lgApoN]WńDV)GD)sC8ǶD< #V1 a#p,ο9Ap@U7+M6t?C&WGTH?^DReNDq*6o~vAHa?h:ZH#+Yf$Bi߇y( 0Peǵ2u;oZz,7n&TUOJ*1M[lm]-E489TF5<Ȟid[.{jj*`%Iq.P 3k= ^1?hY͛wx`k@ʗ* h71Hx,2s/ r*} 'ns9u^ ҌE-ǰ$5szJPR5V1&E|[r#^85=Ca +~ͰS2f7V_b] neSi~l?)αYd)n..GÑf)o qxFx ^m_V:N 4V#rJ=:_nx 21ϼ@y]Ls>mS9 DFm u_u=Yrie#N)\33k-6_cW z;>NՁIe\n/ԉe`,1~=Ǻg"W 6Eˠ=5UR@6y*޻ o[{ ۻfUlL:%aV^,SuN ڬCrYP#mX[߲6ktUQrw3e#1m5w v\Ƕvi()Uqy(*(d&6"m W iC\8_[;db}9L8Z]N$?Y*h;retK|W>65!F|P^w(I* zOӽ ODDˆ*wHrͫY,쿵pZvv ~XS7ۏۣe 2M)Є҃V+Th,$S B .&V=ۧPOǮ0cA~-U~ TҦ(ڏ:;7)eIc79x]/ﮘGa+v^^{*3$>VZ2q՜䌳0*D?w@ +$+U{B!6q(;=LvD- '7&jbPZtw_hܚ Y5V!> /4T殭Daԉh42 3E)8sT ȈgT^U {n})|b[n'nC.Sv\hy4s[|BV("w/g$heD=~ ݸ3 >rT1kQbN_ ֪|pd7,xʢ۵4LlcFu4x~]yLQ;ZDmmm΅SY zjŲ gy߄ۣ1Z"8VMFz #`"&BCYZ0L&3ڃ[C9zz;rP' y'!4R,Wɣ`X$+2;IHy}/umx߶2yɮo?81 rZxg\= kg7iʑ '?ԬʮtH^U#7rB@oZ͗Y"2B9K5ͲeTgB1 `*BR/'UtƦܢL4]><&ggi֤+UIH\7Gp5KV\8ngcEvnQNbc1WWY>Sp9gM$a>w0"$VpݥDȧXV~&1V ɒD mhnY\]F.{0 E(# 6qD=;/PY`D)ur4 g ½9ـY;\j1w}"b/ʚ@F5a,֪nwweۿg1N/?̳в SA M`:j(u;zߓXx#T'2x֍ʤRc ;[fvc]#}6]I$&H/O)"n)xו D`:q#=[jЬ^ iOF0L%涫V{9g|9#K9ڏP*gkY0BQmw$k;<^:|ف 3{E T qz1GF_>w& Ԭ'((*dKmWy:ഭJ% C{ra&jd"3By/v$7` a ǹK3kJnBnv}~<, U(3,L8Vf;W;Oa+Ss4E%R8%=wB#`&}W߳]d^d_mj7;c,~ Q󃹄ak iQqR8bND5HFHe"Џ|W"͋WͥLBBEN ;7u+p mm0s[ b+o~B,TBe`Ǚl˛a1"IF`UĐ1wb:jM6)[B?r8$kF1XB\ߒnZfT=P`pM&ٿ3aY*"VS 0?0_w=oSu?w.-*'hlv7y@q\8p`oF~tTRifJs{hZUxUR\ݹeEO@bHdr{3NA\?[eC)mEmV=dNcҒ3YHvEHՐ@x{\=K^ӏ0gC!d,F*1u7$^o;I NzFa]hMT^H 椐 krT(b@=g׸nj5ƚ RNʬ戈E4cp,`zk\=fO8$o\P6z^s=D ` $e<<`!x9&IR[#VFwݶ3Ċ}a*cAmX~4u{]dӞR)XO5;=GZ>~ADG0 9Mhv}To )evk8Gݰ5Pic}Ø,ٳmQ2[+v"vt}u}N% Ӷ: b 8cg4ʃN|"T_,]Z sʈMo?[WOkpHyJUC`_` 7d֎g8E 8_嵆Ѕ[Ǘ᪔Ck*[ӈ6?DzZic+?=SvYL0E8 slglQkx*%Bs*2=@|]BmWPHA}$C8mdkB^#bJΈՈpuo<+;gpXhS&KJpG9co?XSG<|` &610nv$yEGCGBR Bݮh,-cX/Iupo\cZ>N'!z~*2WM!*~,\ibCU7gAm ɆwU{FW; 2Ajѱ{Di¯l5"3\xAja}bM:ner-g\ly IۣQ6-ߒ   LAfүg`DCtY0avC];+Jߗ J\sQ:bA53ׄDʖUzIc ۏ-0)/'/pt,j7sK]E=]ܾ&WDtYE m#]rNnK{_\&`Ӏ>eQ-/ͶWf0֏Io7?%OXg$UJzscnLg8adP0I3sG 3%\n%l D t[QZZ,jY ǿ/NHA,l m\T33p;?LSN}b~'#cT]ىCbm$P4?&aN"]>IA,L(ߥä>0$~Z _eӣ2Sx/TvL]N$0:_B۠âv.Kσ_DA.sd1 g/8vNVvx*<(¯){O`_m{0vA4.5c]׮5fskPz}ʴQɡjDMGcуonEX\ih~PN7+pA ¯9L*w-L_@wy5E.PuӒZ(|x&.?=3bЅeVvEC{{ 5Q ҡmb(6k$&/ e_)`H1Rnm&ljv!ٮO` !==܀6'MqM;rCty'`gݨ㐖I%eacX f+IbZ$j{bDP ,{jڿ7jDzBN+EVBqH}"sPZ$CTaӌ!X t]3b[ u?D UN6oB s60uHށΪN-j2 SJuWEElw 1ػG>|b _ɣqvӱlen '&xLv)#;lgPN:/<C` +m56ZuP]yPsXRy3' <>`p j݁P_aɥU%l6wTkƮ$[r7g]3E'@΁zx}lhVta!Q|-CvFuM28tXFsl>nLlk(AD a6 'FE>O_K?5fdp;~$Ԙz?go;)Iϸ Ţ~'_&XG&>dB9LbEV,>'*ڃLÆ䯿}5bWgn) :WFHu~DYTGʕB}"G Fe`:#]ӖuE( O6Z|ڒ)+ag*Vu70^!:tN4 7ME( z7n 垂t#3%>uFT,~KA4b]BC1nRmϰ\NOZ 5u:9Oj-,d{Qx;||1G/Ќ700pUA,mîun)ҏ@3PU eL| )Kg_vi)>L/j>9~BHNhRdڬDm}y;ci]}!h%nAӫ軕d* K2L8~tĺ#֬{pj 诸&>kcL:JsذL l{mUq KjȜ-;)xSՐWC ~uASǣH=ܨ4J9 L7L;a"ʝ)g~r0{N§[͗SJ>mMκڨeXRuQ^2cM)MFgbk|>\hD;YٶzZBK~$^Mr NJ|rd) | XGo~?7|t ld g8lGb/2}Ute'M醕ܖtfݏ57|nKyg#$WO۫8IYSbzacͼ=2?RU*'4=Ogyh|4S+Twhf 431 l|X=|d)mRJQǎJ?!G*)'d$&^ qwVtM_Seq\pd\eP.y~\7rEU$ӵZʑi[J֫lk" Kb$VVbO1`1_k;Zp-]h-boj/'/{ S8Dt8Yv-/:Ri <ﱕebEt}QBX8B|lz<(P^x`YK)Oz.E]WdR]#65%9)0uv@jCP墔tyMۦ-&pQpJr[vn{{X!&P݈Gz ],W!ܥJXRȻ,YՠFPT͑FtA%N BK1eDjvz%ƛlVު#YMK!Tz0H*-qAX΅]f*K۹ XV:Y2DR$_[B|OoEPwևv`MK|4ǘ%?̞T*g5* ;vrI&!g3=_m/ТY(f:toz_SC.$[!8; ѼkLzomiȅ!9l rF dDп#@="Bq'[nbKS80~ 2Pb5k5kͩY9wgzG֒Wj׽OVgrpxlykWaZ/"cEP~ <S(\ߕ푠"b@n|[''a4(f:.NGBf0yuӄ fn];Pa&Qגn3X7;MU"J u'7-wy .>w ;~|ro'=4crB]VdGJW+Q/.5)c\L&wK1x5}NTï,S#);TnrێσC!s~'eܶ"7sղ6޺vuRio$v`a%6~◳ H`Z +52cA{O֨BdqsF8v?utMkrQfثL0ՠ.Zb51ZtYU" 5ȳL3 D \ֵU*H~_M|DL)"~xUwlEIfK2Ņ,l":/zt9P(SsjH^IAQ9klc`~U^s,ÙZ81T)B.4%0֗Vmߗ+NukoS6( -̧Ʒʸ?L[Vg &eUZI^N)]:iy/Gu'-5cKNKx˝eB5,vjO `5tAIVzъ^'W}WBqHR` e|KH{gI6 P x+Bd+\Zڨۍys&p(3ItQ[4ȶ -TurV4#䲰I ]~uF베r]\9>uDa~+x# ,nȼ/,['_P}X'*Q[GL+O/D2 6[ ϓqT5lz}|Z1KS@{ \*x6Rx r)8d[[<ם2F|龞4#B#M޷W)%Is}Nm st}jBiEqG 52zpW^jH>T{S 3ށjQ"OF;<*ظGp^b- ||MrzǮKmlJwYh`b}e}e]^WK}ϊtK6}7H"VGY"#Cio2k} Yqg.eՁ|PLAM_/4u|%%L/tgf,22ӻNhF%,l PțG״]NN13$n"P֌^v|EP^, Hue/࿻&~Usc g_5 V0̬yTո8ٌ3福':ZbG'0; A5H#%a4I ԶM N (toj쉁5 uFVfLcn ' ~KތG)0k/F[@ ne{!eߢ9qHO'g I& h1 'ФNaK[9O0aBq`Wd`<@Y;.Gketd#&^(AR67#4F4&l(UYe9 ߁8$Zu}b `6lNo5ߛ9W9REϜ}ٌڝ7l մ?A3exDR_Ϲa1ZM!5Z BS_FKoMb#~S!/?ifΞ-IOctŤlMYJ0:rY ¬E뼞wN=~DC}~f>й|=T0_\ ;!1G} D|9O<8! r DhΪiy6xZD'Ǵ$Jr_O7R@04649. ֦#%\0@`LoYfy}8b@@E+y;>>'( :rk{cbl{! _7A >Dqi79Q.Ź26*Lnh8П$[Ť!NH $p+wȾ/$7rhwod*+"]wƨib1A ",5`#%[ y*[aD\K\q]0n>R}3a-Z") 3;'~"C:;" - zSTk9r߽+G!TH*pbEޜCV+wfV$7J6 )MW5z>̕:5G;aE<É[ȵw@,Gh ❷ù8(rTp0x:)Sӥү2?I& }̷\7k [=3.’~+& ’jF*6e0 {GԲpbC92.-~ⴱ2Y&Yogپ@=*"ԙɑ.ϾT _''οy,E5ߧAl|@lu\%4Qi|VVpߍjͯE>zpRzWK]ƟXd?z?e.7[{LI@h5rRaLu -MgܑF b$nU5Dk"@RGI?g$sz4ֵU3PT@?h` @XdﯙOZϬ 5t'/N-{Wp4Jd[>)G? D*p~`T~cx{Z*z{qх[tVɏѹW4hcAT@U!q4 %MUm3 I6][QZZWGomh& Kf.`v(a $Hu5ҖH)mB H9WG kW)?kd4)a~JN!9K7Aex߲`u_Hڞm]9n>|K!c!M77`eKDS l6xӄ)?kS)}˱㤝ɺfpd"Gm.D+^gg:Iɶ% rqnik ˃Z"= gd=u-F<.;s].8W6vǷihc 8[С7_}5CFvb>/*=졞C.Q(O=V[$Z&Mԅ8+yl BJb%;.M61Z'Jx71| o Ta^+WڽJ)u .+FUPhFMs/BL39;嚇[)Lt?Z35 nĒ#uX,zU_8:,!+F =1{~#APƨTs_OZ1[SuX.VVQTf {/`8s1t GO2n5Ƀ.6)kyH"r">Z^ s)L_+04 5iJԸ;p [sw;a( Bl3§DŽj. ?A6vZ0[t34y fANMP !MfןH2#zQztl>#Q}2b?"s:IS[_6NVVȕ<[^*|v$2o%A#dN%w+>e c)qݨ2񮪰k2Z&N$NdʔM9Eq،%zZK]eP[nch S$okOEu:=J&Or5ۙzYքYNzav޴ ȼBz\3FP ܤLnYI7h\ʑexABePv7IQ)Bem,"B pN9`tB &U?:cD<]:@Ѧ]FִrnnARwh#X `LtK*mTթ5|`Aj0,)lU ak!?yf/F7Ta(2 'z@Uϕ(qnCwc@{!^JdS"9އO;qChiX|=hj÷ƈPcyj9pY*q-6 *xTw]UC5J8k#E!NMڻK  ڕ[芡!@\ĐӷXu/l>Y߇VFjȻY{:܃qȈFvb1:)d=T%o]Ea2؎RID"f[$!,QaQsͧb nS _*Kܜ0νjcc`,iA8n@+SB 8Yþp xM tVqM̙4@HȴY\8eʏDm~bLl+bl1m:"B8ͅp4Dž6¼_^>س["GV^LP涂`El+ejnI'iLH3 [^: 쳋oMoDJ֠W%T`b>F-y?ŊVt;u0IGhtWuشy.~jV]'uQ$JSrjےͿ2o,0_o?`5 do%^ 0 =5zÐt.naO~!oB4Q"? \I֬1oC rw/ޥ wBGrw@zE֗wE'q&u׻ՏE?[[ Iᨄ%iDk ۴kh:/HJqhjL1{lI1ɀV~v mr< Բ(JgEf###CilK2N$xpM|@1>SrOT{(,>:u@0 ٚ,W^չ֦Ch.V¾%jh(j7 ̄ "9%ž6ҴfBd`ΡmpKӣ=YYAGIt,(nAI w,; dxL~X$]G*A*G2ܓjW+b.0E+W1jw׵W^JZ J;El7hݴvP)]G(Z`X2ztrq*ݑvgYL8lPA|YU|\ R65"y_FC?PRg `ZwrЧ}&k2 >WB2ÄAtU#R嗷0//Hֽt2FTק9a'|b`@E4pZ.vm5fS03ш"mtp;1]֡RhlVC[&6:iv=PIHh`Ň6C 5#,M- Kz"o(оIe_x-Q]sͪ8l|#²d[FPdC HYtYhvɕPrl!(pF[De|v>bc}@;otp3ω4reǹ*y)g|T#;'@!5/#25+Ս7.u"Ӯ "?㮖?/ ^h\0Qu;v< OX2J oOqaW4ۢ.%崞5 AĠ9UqzcCgԲ lWhZ?.1ͭ7#Á.z #4JG͍Ŭ֒&"i:u"k"G% ']@^rØ54+ Z B"Rn(({J%\56)׿j R;MN3մIHke$ -Ց[aɻ)E1rm22nnP̉η~˚N"(:QC"}Q =y _bLb=] oQͺZBv2*/& `YDVwpގ(a ZL{W*@]kR_d-$asAf(7QxyQkL F $o4H9H_ AzpQhz}UPF:BB"a*hf-i"ݶ%h1p#Q6*S0jg ^Hg bC~BK 'W8."]6iЌSIE0 %޳FqV::QvﭥJ` Fibcv6#D7a<;#Ѩ_2ٴa,:$FgXw݉1tFdǵEEmn F}m:fĦx\iIy^'':0XW>|f ʷD؆nެgoΞfQ1 7 H!i <1LqգZ_3A9:`}8ʬB]B2 CZl=P aĒqjmkLg*l굉N/_!{;Q@q Gj^3q Ҧos1a{+u 8^aZHTY*2)r(@J?"; ammmeN ~9'z>ܩBĿs QJ4!3]NǕa4i렓hпp,+;nS!& ɤlK$wtݛ:(xt}~ S Dr,'jqR7d]-;J4 1-ȥ^70Uo0"rȋDQE`j:); tKY~ =B{eu>t`~.t&.nŻȁ~÷[fUeKwkwפ"),$K!ҵ-e%t9Hz%V*na:u;5Y34Sntɧ|=D289wqv)n1:B=)轀\:Sgmˌ [JT9> 2)Y:@WG?9"n&76_Iխl <Sv:=_"! Vc*qS4Tz?|->ZKq5qTѱl^}Cj*Wq$\'7N&Uݠ:o}y+rdn,{'Ω~eЗޜkq~Gx^&ׁ_I0[ꚩp-އAc>?^pʏ ~bo#xeuT6ť QѦXe#}~(L/z#y.=Si_T^费ˌ7Dyr=ӜȠ!vN]R~'Ld99{@~ :HѼ1Œi]y=2,Q&e ӛ5EMu4sWQ8阰}G;¯+`Q#=1Xmp ȻSҤCCM*Y|VNKqiǃұ*`sbu{!GXE<ٻ>aU CL4G(f Tͱhw` @+?s|Wsqp.g3CLZLS xqb`ֺ5J4s-&w&bb^F ZݏbC>ߎmm|I@d7_Flc1P~֋$E{=CfMdgT6D/M4N6j.?H0B=0u :Ro4{/5ʦn]pρq8UzϜk/ C֤}'qq3k[e4Wh;Zpm%H/bь@\ ;YCHnګ ʥtVc`Qaa-#bF fğ!y'<~z ;sNZ# Ղ3K/懷D k|љbU^@tC}\21ؘPƅpp jr[?kPED!fxw)r6cl"O'Y)ojδ#7fM*LІb *z c;hrV&0l?epNFp$-ģyNШ Np\vW@e@POt^/U %0,^Ѐ>rnȅY?LS7y65dP~S+n}TYC© KTif֙'Lp{ ە1%<4D{Cf=l??G%; %} !/5znW8ލ`(f9ٟ<"Mn჆-(kNv]d0$ƊFۺQS X%<+.`Ӕ޴,b|˓͖;;In0l#TZ=&R_b99&!դ"I{ SɾKtZEy-o:nCp&sPV(Ed5?_nD<Þ}Nwswbhc,71 #rМo("]q}r[N lVQN +Gd$]x2Eׄ1SiƏ*CUXt) *Σ6Bn>-} :;-` t85fF-ƥ}l~I!Xp9eFY CzcA҈ͽ ?VP!L(w ?6čcaϵ:jo"ZLD _[E&5G=-f&j& =z{R >YR;F`p85SVL׿(Ŝ^]oN60Dy'AToZ  ~v03"rE4s UH#?<-s,///_3$vz/zE'f݆-aSC'n%jW' Mw?vM\tYK<~M 4*]*(e#QDF"@"*P4.jW/n$ZȞO)~V02e#Tn}׸c5"h]ezk 0;Q8xsG _mߋ]33ԏ7&52Jd#Qū)Kv/yPO*P%L`Ɖ?D1{+P&x.3,TҪxC?ll`dz]R:b-f'&pԗ$ea؟@΁JcbP3wJ-~N>iHBEH5 g I;Foڭ~1Atuܞ.Q_G_>. :QbUhp8D<' M p0]QiB9r~ !\x7uH3=Az0@;XtnC>[|$Y? GxDZyG >t׊!%عʬe=m tR;Ba)/Yo$7ٓ{փn!5`B-qcQ nJԮdZGY}5.8-KL f,U+ [OӃ^:Ţ95*ɨ0ޒudY7O \Pxr}2v}FrH< Ǖ.%x(] = ukB&FE^ۑ1 @0^#[ m-nK6Q,S .(WÎ+ KW_+q#KA};[e,7 ji=u(2ڐWW iȟ`*:(q=bI|S@P%pPv!3"Q\Ƙw౛1ZUSrE]H%l(WSQl1Xq6Lo҉fi*=' ĈdFɁkT+[4}}PsP"@e_ï2]^7Qm6ʻez>!yNؿg߱OHOISPrO Vu&: bL]7iQg- 5 yBrLI0( M-Ĵb4n/⬴8]md ^iؐ|1M2+ *(c٩lk.I;B:$0F(n,UʚTdxShMpڦx7Aߐ2wTkW[R'M 2XX]Pfv RXݕыl:վ_52MQQc gt(%c<)0;.~@Zv% :[3L1^@J.)/FT{[qΔOYA52 #W2|CD̗4RP. JHSn >9B Kre-E\%I ):7Wq!Fh2E魌x{mkz usu .ٶtkKFYZ+D+hcu._/y~/IB`:mO;V:FeÊHYidJS6#4ƍs9he7qir/4=d*n);H2 Ωkܥ : B` ޹(1te#Nh20_GjAϜi 0m2r;ݩ],iy[ߋ5Bz,Eʹʿv]JDbj`6u-mT ǒ*h<㋩ƣ&ӒsXD6Baiy@u6bKhqvPSxʘۋ/>J( 9Ro+Tw|W>0t$8%4 7!\h$?{CW}w<!P Jp+Z<"UU7'c/ Ɓ7(H 8jQ@~_ȳِϗGmjY,o^jtVH<ڃhI<=s0sbyi+,'f>g~ނ#‰&ܦ7S7WBEWT/zdZg>d$>kj/o=lc̗PY`l#;_$h`ٔlðLSv#$eRA oneR5^A%PLH19G-9l8k5-$ xjxЩK)nC;\bO;6xO-h}t2 ji7K lc2gcWS-yOWad)IX9L\Kw9M?c@2h\|ިjd5M![A6B6AiHe1$<74ėylG1Mvqj?[ NҠfDŽ-Tc0Ȓ0b}8@gIY$ 5fa{ӾGII `iy@phPVEFp>0sPjjAP wQ!#k rDpPsvqEqI{rN1(Ս:x# UY=}9Ceadsŗs`+ Pco=-J^.%+f,`^KVHI% 3OMtEHw K&wePr'Gζ,VqR٩ E-eL1 *h ^dJ.'Lvf~#JL/6v'8(#>Ma]B# ,5,n)TtHX '~"AgjXsډzޒȯ.m~mU0o?Jv< 2U+6|GI熑P%XۥݯGlX)d.zԎrXJ̡)Ğ{5[8#%k FzwGgseKOJхSaC\%#l %BQ_Cߕ}A7P'眱F8|E 7Qkh^$Pj#Eo;c(%o^h| kཕZvP?Dҕy8SJ)sߍJ4YЗO3˫Zz˕609$HT4Nd&ӏ(?݀-6IXUՋ6JN&};ܠ((=RK%ڈ+03ɠpB84i ~C*妅yZÃV!٭{%9kn(v3Qc v2svNџ_D#jȸt䠧P7󷢁`| ~dκq6*,ԟ-/gt8n/& S=P`grQLўuv IaY>;fIy!ÓLeT,1ԣdJY9#:(vIcvN"a}VI"jp})Lx@ڮ6$KYQ'dxPyT2]ї"RuT1r(i' ]#0 DxfO\-9ׄݚ]ٌLhC~nYN綧9w#uU%\-{u !@MGà6XlUN Ib?*4 %Or$ቊ Ge]*.E)5 &֪Bg)槄`ܵ0E)/Z݈?ke/Sx?A3r+TаWf0g+cIWo@T'cN<5x׊6bcA-Feʞ Ukhe()GX '{!M#t9W+~z@y鶛UAK` tEw$6te7+K4V^{?DOT=b@4_`#EgIf&eeVN㲹\Zld h 2ϐB25B;BKdޮR+ Z㉯`d~u=۶ ]a׬+X|CxF#-W!˔1xÇ S_+84QDN|銍2ğkU\xp{8e/gv5O%yW^:ax%ⴅa&AyȐ0Av|)30+a6Ҭڷ24R^6G>8n>t!Gˮn*ǵ Yz]w>_,nRVDa!玵 ,lIdJ_D .+M$w4uNʿ%#bt/6iI' Vy3]a+pH8TK|@4Hj+dvhu8zopWl"pSG0P ֳP=jvP}]vC ha_u}c2SD~* -#>&3?!?f.$N/ ~r#v ҙ6F4iujSq lc6cJ`$$=*QڬXd+1aZɆmn!޹m/͗3mA0d.۹<@!RUSHP蒑l;FkmKqO#YhDſ i!sbYy`S_R<[7]5*}2v( :vZ|T_pVIi7](_1 Ca/53-E6Lӄ%;oV(8mODrD&ZZu ӚŶ" vd;Ӓ}]=0 gm&_sL-alW NIOϟR42ȋ<~JЗ &ef'8(a]Y26.ve{GY+5ܑ>J1*t˟c #ou_Jy 2˦·nk7~88ꛍ-X|+g@Fz~ It]7ƭAnuREUe<`JB| P -|ԄDأ"JUy]Gm sw|HU1@hYL\Q9d oT8B"yD!T(?ځd>6wBK$%~܍mdG-U[*]ieWLPݤⶏw.Wri͟hƎqF8 !\-z_Gu_]O͋S-;]h'D(6 Y!1K c1Uu? B#6E$/x)s;>SWyXv&qb dGCZ)c/)ݗ- n9폍1sOzӨGjR. yZ6Ig1gB@^PUntʏYmA|cxy}NPRFJoM\l(_A;l1xN%(@c,PaY$Ty;, >^! [Bx`^h fu]sڱg>#0)IlIG .{t_eՠ!c;sYHJG6^yk__O7@Z*7DUPOw' `UKsE~[רrWdR>*)!]f LH/VBKzď+sM ZhI7 EKzKwUtNPWe}߰ tr#w>mÒkӰZ*_u籏p™R:ɂѼd=\XV&z#O l6^G c`[J\Gׇ 4DRl`tMMAMs JUm;- yG^kCjZvLZOugt4wIy5&WplTc2(4i#[3e蒞2F'vP򸉧~RI\R C-%+wυ%̧'^pԀv{6AQcFn(ׯ.?O |a|[]>+tc&T@7;;^{3s`ID +p2Q6 Y9X7MlR?ŇwS蠮Y2-<ܟTenͽyx{]f,r*E]"^ 2qhL_ Npk (:w`M)Zz 2;7X0 )Iӳd∬ NTb ](sMv!>zVw>kџGEiRVJ/䉍hͣ6nӟ=W#pQn2΂դ}䓥J9“Б(ɹ9 ὿n@qN<7qUG0xp`}3Z#ՙd=:)  PL9qԮ#]!# ny;+XoY`AGQ6Rr~#8Ue1WSׅW2⶯ٱG#rՒyHw ioJ˨Tčƥd' 4i`aDjg7Оӣ?Ýr%UZ0c@rs 9~Kӆ0UXDW]Ԗ B״:r\z`>&\#k !AdR?x:K_R %4Yw1i "t聛vUZ`OxQfo6r;x2ۛ/[5x{ ܄5Y%x{D?^B! swN 2#ճRR|-ee Ӧ0t}881 on-=&h*@|o*| |H(__OGI0z}e AЁء`b&Rk3mhBxHw\3_sH`K`zlOcUUw އ2EnF\4 ;frJ` dQ2]:&*Ť%?? gy?2A+ݢ8愆]F^ryOx#\`qM5, B!5M|G便Nh -/iʔ%zv:JmR a ="3| tza445X)*M1&8 [K?7QV45{Vw:Cm;>e\YpRZƀf 4N읖JoSaE®(h>4D5qO@jSBrʾ|Yi{zW+DCW?ڰHDVs$m&"tu ^P,m$ڛgYdJt&kCgۖƀ#WM5堦\i4`M` G-l F ,@^51dz Z~Ț^яZ,̨0d |z2p j@V-z/Px|]JkhqX~f ryA//Nq̡ջ9_LK\K3*'+Xv/9Bk+gW7pq5qK84|DP%uiX2L=[{`Ȯ^C]C(m<;[S񣌑gw:dFa/ :F^9ɸ64 " <,~eQtyRzY'9b7}X+V̆s"ĻH>xEo$ (ջNP#Ǥ@sVjޡDso|qDEȱ93-B M Z8!oY ebs[S&&*>KD!&$+{"׶hX <( {SWB*S@*OdBzW$:Vd@^׷S]wHPە.ʮycWJ`6ZX AbC#0Z'KDcʜ=+iK0)œg)ȱb3 Va  P_k|Qls,~p̻.\U5V7VF[Jjm ٜP Kw 0- kPa04y0C }ipVa d f+ijg ](0m0YI;5ϓc)~CǛ $9_}64'hˋW ub{\&G,N21vXia$%^盔JAɜJc;W>2V6S=6I] J9L93?D *d)O^*@BY!v|Ec`Q}%Pf}7AP/2V`kC3?3=]HLK4 blT l|D*"}S?Ӕe)Y릍bT7wS?~Pʿi0ŭ6u!NPTyb/4"KMժ _TY /:/x(6r}vleb^nA6e_1ʟSֿi pEO̸Py3/d^tWGE;/}*_DźO&w nÅ6kj#,VNC.CޯZz,rٰ #n!hX9#L#ЊsHz 'yаTIP]C"44T^]V'!ݭf0$~+ЩK({2t7>PN>7yn9ŷbc}RxM5ך'2p.;ܕwA$X?T[bS@$G awrpBkR58+R$)zh(τb{3<˜\ՂPxtDP`@d' Zʃ,R@j~Z*G 6m+ET>SуHJI[Gon0fO)jwY'X{uڭ968oJ(>q4g3D\IC<;<R7m~O f_-n/JV-$*J >|^` ʂ ?bwk 654N-5Fyʼ%neX`7V$Kj@r6`Jy ]t%=U\m*3>{ җ%RrOaueva^>c4[aa*u6'ӈg(Y0ם^g&A:X`T{c*jߴ9FgDMY/ʶh!MƋz3Wm;q.S6K0dM PHAZPchVܵ,Y͎)#_7 @3h4 m& D젟eWqJ b2OB.|i unC4Llko5l`7\ɗa~R_;ʂ]ke vk3Ve'5=+omoz)n PI[XOL"̔dn|d"E(s^ytl~[#!nf% O !8&涊9#/HhX*Cu*Ff7:jbI+:Ei=dmT{H|e{i߲'ݸya?٪倧m\4ד;n{+2 `==r˽DY:Ȟ"J].Sۣ%oBʶm Tޜ?Ag6&n-AncEB"(չ ?*IF+ D09Js {Î&H _.V m-C&ZMu5rGJq[g sӵzh"x]ڶORd>Ȇ$h-x5XK0@ΡP>~b͈h,|<3-yRSӧ  d$ gx ZXf b[Pٲ(7@p\p),-q=.Ϙ ;@;vKqDsE9qs`*:ZEa? dfMyQ| V :An}B"^sE ቁ:+AUCvɷ7[j]QLOm~'-v?)8N ]z- 44f#(2hTͱ_A`NjUc [bPt|Hʟ̪!N1+ە*P)Q`5&8\z ,s犤E.g'աuNE|ބZ9x7OXt!9Xz2dicM=w0V6bD)zRy2TWçܗ0k6-9)cnjz\ ayyrmvԘ>\w2vBEVW:4QnkLT<ƶ׶h A^XΔiO_ + Ub> "F*hI䝛I6BWPhiaXrOmPc{3>\7ɇk/^g] )!mhIPyxu*ۓcuG|2G8JlB*ԶrDQ]gvpˎL(#,6Bq$--tʞ]ЉN4@=o-g*_R6@,e;Y*&rc(m,g|W(Ll;o/zq`ȑ0>?%+S2]Q.#'TzQ\B՛$ 2)rm r<^d@p:jkȝ~aY֨zmXsebF ڦ~N;/k@|Yu/IXJϞAy.1,9oޯ=c_7՗zlGZ8+F蕦FYK:J#-wnhibӑm#]%B'H46mKoG0[굡]Vb{$=]wpQC̑7z[\p~d@:%lmYRBNl9ykyE"ׅsB"1}&WBRmKȱ:x5PpIT޸*^җ@\Syr U!RL#t=-RIXgG + wF2 Ӳ@1WСJ_=0$! HZ48(;sMsi,Urc~~ e)Fghn,>f3j1X ipϮδ2B"BN9^jRnW Bd|+O*5,zqB< hR 1hS 6WjV@{V]T stPmc+,98U7Jjvg KԱ;9 ="FSQO m14^'tɩY+RW)s?!㽑kBzau.8R y$Gg7c(>4S& Hi`1Vm>!5疍~c_ ;dωT:dT|Sh^S#'xQ9\*uZ~+AN4 }0LP*py- 63HCB[y,xqivb1램'PL_HL ®NSȒ:Es*!3ê씔\c!~71(W;&R#.޳(` wAFUƊ認2ĺ> Wl@mB=:I3*^{QR| W+ = brY8Du6wz=%HG$`vH8Nevh8avHA_@#ê:Áj"c1; r#WYs%ݛ*U(.?\-+CZOJѠ \sr*\jJ8~dV {:6ooUg"` ml6"ab0!MNxhbEeLԌܾ3u^gyۖ$Y^h/K{_@8y3S6xsd: DkO?9 1 n}z'#4+9J(1w̫raÛH{)|Ĩjh+72QD'i\FE @*"ckބٱ!(EL(&}|tk ]1PIBf][s][WёbܳPx'J B) %gR|;HAJ(u9-'*$ᬹȠ,N{}t]ndi̭#dCQ`;R-k5xn$aHpg}2wHnۼNU lq %5wɨGcnHᑠyݼ8[`F&MX#R0'UyT9@J>> L@] %f1_Nz":yyt!\R|@!M(KP嗱`猃rIDt褨|{cd@{$6 rb+wm_iWə~LB/;$G%ФҀЙݷ? {K tAByH PYK8et"7:1`+ 3* @ܖaס(=B2}T6"4@U';&ٌ91$fV{[uBt,LAZv,mD&$tG7VQٶ\2p5% #sA#zCqme}iW^)']efGr/֨f{5IO`fR%\Yck-«R5R6[lv]t;%wgeJ1P< u7:25Y2tVZfAv)MPS=e`Z yNJ;WrΓrhͫGdeFLL"Y_.Ǒ䤏(;gcu^%ܨu=!>#0"Q~>yYzT>JGo^j!Jո(ļ|Yy%d+cot\\_y̹FE8yep*6܃/, Td06fI 2Kј*8z>jG2FX38@9_:J.CtP h|^twD7Y9hԦIЯPdf.zLYh r46X[`b9ҏޏY:|{wSorwtEL2/Z0XڮƧJV<[IiżDaGG/`eztkcBG=xUJqûdv_+4ѳPܠ5sWN x\W勵ܽ@̓24k lId_V&8quY#t*bIdrQr[B̫ei`7(̧p dϖUiEa 7:dK2m,+w:?.wz@5|HmT(XENJG^;HqSZPmc5|䄮ϘT\:w 1U}fI~Y -K/R< e8n9T-#kS]`UOX/lx?_yɆհ^acZ3:!lX64_?qCjr֧*.5N1$[n¢wg B~ V*薧1)MCFQ~{{BӥFZo24"|ṶD"\LKbPlz!w9yNv ]Z%Z0϶+-Σio up3`:BjgΉqu̦hId0Ҧ)?3Eӷ NĠ*C >wt1  ӭs+>V> ;]dݛv;O|)@k("$-.0LLrҐ6L@xNه!?l4󤈝OPᡵfJÇ5ۊjwBth܋_Τ&&H2^$bBeW {{/p]MiG/Ir 8f=pM6A#'$ |HT1L&Kbᩄ"B`8h"ym d%{];OzE6I@PeÞvYaɛSWS,cfBqR`,CXI]ZztΎ(D\d!`i.|MV5?`va  {Ճ7/1){mUصa fz(Lvh K MÎgEQꔡ`5&CF'[̥ްt=-|ՄS V^|+Fls~=TzSn*OJr!U v Y򎟜(9b3"m3MuCPͶs@É#fj*R97-,c7qlPk6CDY#h E!i9rБ_ U)`a8Vp +_9:βc~U5G}VV/bnl[_wq&EޝATr+"ESۼ? AܻpR2^)Z;!v9uaڈ3avl /{ H(v ƹiı8qNԶ='n=297h1狫Z7vPcC @Am0՜ YKg9^0 ŏw{}գ"1fp>0Zq8HCݝ3hq/0m*F IXx(2$?TyhUת R83LR̛k@ Qe.9!dܥ_VQB}-X k7$o@_x!~c!O_m n<j!jL 6N6!iXl)sa&*P.vټ_ω0?f rm{z G[DUN[RK^( S3ގ*u!Nn:l3@aFYKr:Gs*6xߙ- c#'&*¯9ژ}1f3PuAVV mBv駢$/VǓ2$MKgJQ3_ZheVR)tzYr`Og zh蝗67*8ݑ[%nv$;(ԗ*Mr!Q# ۹l&,3VͿ| XcA >{wu IQj6^pg2N5z.>pE?D)f(> (eHh@ٶ9 E.ޤ ~W6LRp~gzS{5$Pȧx.Fh5 @U?)' NrAakMߵ'#  K?Cѵai!`g! : A/+<8|{q':1=mWzQ#*< Kҥ=1!p/ӬD坼++AC޹[NcJf8LQjmXCcuFp`Dk7]mb7/d#Tz(ܡ}\3W-}٬?{"s^qI$$TI+G^G}a7mcVdw#s͘nI|ɁHT&?JS G5PD ɪL@6Çn[|AJfJpX v l& 9\@ul)J fsߊZJh:K?-ڭs1?F| z@ސJp84Hgt4@kά4zix7>MbJg&%N4.ӦeP > 58 %(>hEI&"SGDf !_ɊP_*#ca/㓠GtK_e}r)~:eK?٪K)H>%#T6-Ny`Ӿ q,_\? DTCݻu#q! AtU G‘k2 oNI]Jf0H . tGz:FV,~IF0lۇ0au2ێ=W>h"U{17ΰC1d`\,m[4r1y$ݠA*dI*2h!)NI4-?X/LǤ>OUڈPu4*aF紲)kQ*Tf!;џ8}iJ?Zf  ؄mQLY5o8>۽}uQJrOXeb?6Kȍu@cݢ5f4M J(7RGR▴am #9_. nS)2}s ^vδ5Ì'h^h~;|R[Rw@Ԇ:}&+7XmZw&vX|M_#HѪF21YOј5IHo3=@pq~tԤnXh1=A٭aFMK_%v:_5|?P#7`wbʤ-%{d8TekC7 ^S&HS1J^&%1j&qQV隱'ӹ-<B oCP'n]>.XOZ*k: 0;pیeBf!<|qgSxOeh Q>]5}O8K]~PT B>F,a6$@sEaLdQ7Le`Ι&)=A2.I#8u?/ugch>VCq=zGYn vsjiB;˰"`}:drk,p5rA`193LKPB*lf34Vx(Q=ΩЉ-7b '4v&c*ePTd@ IyMq#"Yֽde3A/\Jq~!lVYGdޙ6J -|D)Zx×JBK!1aYJ{ʰCEN <^dMlf _W`7;>e MGH0H &,3xd>S^:iQ!f}̮x7#ޔ{MBXI Je<#n`/L{c3 0["ʸz"gnqzzC[H@ v5X9J*&oӡDecs#!na.]%W@_?etѳgć8ڇK?.k7l*TkGDŽEG!,smٽҒ<615>{*kfC?I@NhMV65‹`]#֠'P+fLёIaj*ϊlP |5 يr!,D* 6*+u<zSW4ul)L)Z{➩64] E3Nj&J; )4CmYNWt3e$?dʛѦgJ_ctPb'E"Sq2Dg+\! tsB!yS푼߂0 V)gaݻ/]$oDc kIz~7;+VvtFQ#`3ؼ_+iƻ1lP V$Owvݬ[ 8&szQc'e2z >h'ߛ/O*4$p\fG ~6 n XK T=qtVaZ-y3Yk~~屲߹e`ˬsc[vnm-q̿ Hk b=k1 [3kՊuCmBc iG wX4UnDվ4w[ sJdu۴+"ޓᦚTa5 l:..zW1 #@*s .nqU5,6_%{-9T!GǮPkJ[ﶹ.֪'f#?e!`l02>YاVR/U7D JmTO%ZD%\P*UHTs$׭T6zv)Ah}B[_MG7o"h2\Y㿂o/^C; AE7˅!q.Â9\D'EBC`!OU9"nRdð=N%iͤ:N-0g{*)t3cf|rǒٵMH7+@t}E&W%R 10+cD5PhqkJo;qBYyl"XD En Fm4SW^OaJŞ]4l7: vW⌓U t"1o!%&"$ < 6y锃:! p5EgQgutV~6jn] )HFDwz5Bj%Xo Zjӗ|@-WA8@y_i O3暡\9+j&w<҆2 J9+ٵ7i3ߩQSS}5#tQ4u.8W'YҥdrRutB.C2_s</طȌm@cnpόW`ϻinnC,m tE^*=4Ukbmjݱ ]O9KVҝJr6r8zg-Ï%,M2&I/Q-DU=@gFeqf' Ƶ~5ЯS)ǼF+{s?oRc"e0OvN0`ʮH%N+8?`o+n 9|U_j_kWD &<|35sntzPDn@D߲>VLv8Xq&tɌT/-a=Վ VV5 77NUsC]yky)0"#mC[4N_Z83 .Mp,;{{IN\yF>YWm}< n,e϶Ć/8Oz0Y|0K `PmU93ռ=dh:Ѓ>Υ 49Hl1oGJ c;_ ̋Ah1H,&#:)@ _!+!/HM,MԁZpAod4'! `-})n2~bo}S{+6L񷵥c~+8.N7ixZoFys @!ԵZVFۋ cH^˅GJ?XVN۷=+b ́Xp(j6t[|U74Ǯo[lQzk)j>ƻ)V%*.!;2qܦchJɸ骈'[srU AYZEͣ:F&<3!j_®nHL"$t£YNptIDYFp~8BV+@;69Ԗ8mlV> tn y(γ؇Y/.(&]M|oם;ӫrkFOctYz^,vj<64`$.f98@)Q1I:>t!ɜ$` 2{`Fn?V#DŽl 1 CK?j,>wnlX€0#bBRA\K13O /KckZy8=?pxŮex!8U>1/\'CӴVR` ݬ8MaY6^舟4O_ltBlXD/$蜆gto0>+MAimLp+EDt&H`ks`E3=)o$I [@0 ᚙ 3vwmQ: }I'Y!il܎}n0x0}u 7|MC5} :P%YIm@݂X~0֟D߆'HQ-򑱬[p78mHf B.37#[YtVp[oGRt: fֻ7BpK1Ɖu_Mأ erO)ViyOP"as(ir\1i xt]؉'Y79tp,T[q* ;WƂ݊߆n"6Ќ3uZ /ab=5;,ڡR-s*"TJ齐v6W4'/\z۟b8V:A83up~n#} vՊ,O"c6ǎG oyQee[!Уw_ڬWN C%ݓ(.[ ’1&(W%i+RsJ=}TQ\YZHk K-{(g4T# #h!}%饌>G i``L:Vf . =~CKbA$$K `-zk_Wf:ޙJ3.cEvkӪo4]"jLuFI-Ik[QQuq;]yQ\1|.;37aEy,.q oOoKQ^7cТa_ѱ}) >S7$`$kfhTV-}ѽM֘s PƐ$7k+-hRM`AR}3*4 }t]ꬻ-ûF39 휐O,A\n*y\%q}_(ui1 ,w*QY,}Fw|B@+l1$9CeG[=B詛-G~(XMU7EK"i*}E2:†> "gv'k8L1B|.89d8p[$J4Yx\l6$:G љ5 -<'C:u:H{(&Aw#A yd|ې-K* |ʿ&YiXnjmS?vRkLj.(6<`iR\n3O UzF~Fٝj"ZCfBfg5n$6 ƉcԷ߬5rvLS[[e+?"_sS !opC9_BFHPfʙf+q^OYDdmWh|T(^q7]`s~USӵ@>\y8G~BPkE7 m߾^e4HUKl9S ybg64^]霰lD,_*aO _gxDb1Ԙro9s>34Řϑ^q^#/0/W_lr%ѽ!-& R3;1|zM1Z8Zhu\;71-Pd);R*f,ct `k*ZdN"} lҫݤ5 %y-"GL3W)eG4qz1}VKAZtL6 AfKOO_+{Kk@+^C_yHq#bϾ]#`JqHI*˹ V"bl1v1q_%=OȽF j1afsZ|ҥ z7 qD(sdx R4yY!#9`UɊdQCمJ,̦JkbNH3Ah M"*촱6"?.o!+GX`j;~O3aP)ϲ/kֻ+Վ#ģ_ۂ|w#iI~E>fHh'ȸB,9}CI^;-'f&Ưb ri_2 t^<7.|}M Բ 2â%7|vfNX4j;<Ҏ-G]:ȉ-@(_γ<үNw1la43J%ÕtMc &MMJ)$-p '~ ϯ:Խז6dȄ޴D89+~( :E)Zer ^23^:[V})%-Ɩ.L@FSvDK "j*Ŵ203ÿVt&k3 (M 4:`f[ۦkܡ:mg¦fP+n@}v2"EYڦA,sc(䞠CRXPM/2Ne-=zak>8~y|Yv)M9ra&)Us5 .EQ[sv23(q8ьB:1daAf}NxӈTkyT?m9ZmǩgaۉVXRq՜c xd 14бDp~vƼb :o6IoL/Aד]0Hth"N.uS+ҳ4xV)L"`t@i4؊V^W <^F̃XmtL3c-?.OA/iBRyw&3 Z2mpu_}ef-58m?zO2Q@nƯڷ+¤7AN0%XH^֚YZ !&֧-2N|/,!0MNqol;wT̲ײW3y^k۩J̥ic$v _('ŮJ+*ˡ&r6$Ce"q߁|ӝKmkZ^UG@kXBi- Gu2yGC> ;JP"@Kp Ys!'^Mk5˦K!pdS"ggM Q`<8'\eME?ҷN'܃Ϥxvha $UjXhJ?Q28[V*CkL6ƔŮH`X{l|  r]7 $ߩ1Ɠ7})f}HͩS@6׊ ˱ 7)dڕ(oP[:XUFW^a8Ɍ+><0^S/ٿUC/ P Yp]82"oʳ(pcr9CrPԯ:q x~ǎcؠHtKi7|^*\/ &r_%[նE AdyE3--qe}q(]k78$?enaMw̾4t!ì!ul:YTJ呍#mig/>ob~Bl"g|h,L|hcS'Q»K"kkYx"*xJ3vP7&yԴ{:l-, PlV_„Rk":'7hجK#EbkOPd4Osl޶ R4I~3ÖAQu"fdO+@vȒ8t3@7g!Z%`h=֬ OCrF1/C뺢4NX֕44!!)U}26;@ W;H{ r,7"9eZ=B=YÝΞ)\!=cpܗUwij4aQZ>FV4[$Jb ޫAZoզHm3P~~nwm:㴘ٱFSZhu)c }˷Wks{{Y'nV+yx+W'D 1OfHgv0:V#n\G,qVf/6}5%BIP!WQWhd,Ȟ#@70[,X{~ D@T~M͏p'; K| .I;߯1;ѐJB}|2L#DND_ l]Y15*0Tߓm0S+;Ic->R>9$D9$#O _Iƈ0_ǀu..mԊ-;ECXw#'PpfD|<ln?/sTi Kl9>Kv%vD*ٞw&a'S3J鈣yq\n~(uI͙r3{>s#A15 2ǥ`o` ^y(A/08t;$a8::!de!> ͓-gorRQ񑨚cYԦ/܃%z!J/RXMd8!SQ wnv _qGvNr>. 66|іN 0*0#*+6^U "0ogdM3q494Bycљ8)k &R1XILvuvT;˾^`@Ickue+t2)qJ@pf|֬-m+Ǣ[}jrJxbB@%Kjp?Ǜ0ƊlyϱlE>3jS-xoȖ H5MQ[^a-˖!0$ I`S@MwqMtbfybn^EGF i@ꪤiӠ7}9h˭vQ(pI끁vۚsMږ$eSu%sۊBBoRf9z4aVfHاjba/i2-Z{0Dxԓ`(j(Y:'q`-x4D+K~#2T]%Lb&Ͳi6?$DLf'ȄQ=b|v]LE>l^#Bp_HU|Ge_Uj5Yh:EA=?dQ0hGYiCg/%XB0F- GytdJV`>Q^N~zhs(g'υq3v TN@LHGq ϻO!yFCN+>4cI-F޵S`B_@ћ5_[$3Q ڐ'wsOZ9_-]Q9+BcNGزFr/`Zboٔ~'R+lHQr>07^疻^!}eȁdD/tVL_b+- ` ⎐/naQ\ܚGѼM\r:r#UpWWh⢰-:{"Q/jq@ 'W1a \Oh6ѻ2Ik$ZqUT>;\k?Wn? p`y= 6fvGzlA3.v=F6F>;hq`ktabm ً_ I.b􀃓T+藅wSӖs!AA<3Ae:mR $ L7<,(N{BiHaUj\Xc3 V3bѤBP©C!3*:j+~`:A=I~qoDzRжh hNO4qx 0t bƶܝA#:_H([|@`ϭ.;^5IVUHL3CKת.$=*-i60s~މ+ 䎿@yXFpar4^N<xQtXf1Y(һ;Bn8n%u`(fO.b ږ1@~z#cr=U :2jt?ֈh"I$ں}8ZEY6794dbcY ̫s#:]v.Jhjy(Z{WOt}Ǵ}6O93F'5<8Jeʴ3;eRqͅ{%tdhЇ{X=I'k:J=7t<M%#qժD~3IB]̓)int6 E?"tmw?U_4?vGv2rf 7PẌB}ĩ[6 Z_K[rh--g] :y#Eϖ;gZd uvby 꽧?<- fyckiݘ ~>սJ8{:a웰E7A,4!z;χ,i`Wu&AP~ sJyUyOhz> fBV-򇛎Uv΅2 ;ۻv|FSnyZ5FmC=aL;ö^12U_5eG$[ ,8^rOCmVcKaVgC^S*YTғMe+ylwSi|A|á âGLyٳ0Xgʽ^öa)UΠ_=Zٲzj%d>n^>jwc.@£md@4?2gKd{wtw7;G>c&!#N'2#_Ȃ1c}^Ѹ8T_c< cEa*K`[ϫ( d  o@r2.ãG5=QsUPmw3G7Όn .`j7Lؤ}Nzwnr#;M~Tx@~Oq>pU0ŀ棌bz2%_L h@! G?~l?L҆UG0[=vy]1|먎 =^zjN,*wfKt]$e`kľGXo@VpU]G.!s7wזNKt}77=3i陹X>L~r˪r+?f@X+BݛNS$mHZZ륧!鋱lbf"m*Y $2TÙ!URS5 =&=I"Jrܶ\If(_ _σ"j*^"[ԏGq&X$V9D/dʞTFL /R9oze}.7dVUNJE#̟9YpMeAGΪIW9GP<7y$GJ (cwW^ |h z^ʋnuU>䢥^K5cO$`-ܪJo!8m{`uD 2{rmo[Zb]D޷$⫳|="_ȋS[fHԮч1*6qUX'ERا--*:SBр[:NSZEte&5;U\=d_ b/8ҠTC`pCQh^6pr{|n(mIgHX3=4r;3sluZͳ%3,XsR%cLFc܋:Eo’W;HF8lmKq6H}N$ȏX X> 8tWt 0U"QuJݑ6麆6>/+ś2Px{QK8(j%w2,ȑMu7x0@)Ʌ8L^z=Č;bd)REHMLMP؋ӇX6m<Zŝ17;{ѡtڷXP7D3z+7WR)I[wCx|oXU{VOʾۈx֛u?ҭEWu؏;R_ #! 8;Z OHI!zhğB K6*1G9mvY=U5r"HOLpzb+!0S?ҹ-}XqVAWtpC "S2KMc+1(n{&}YiVcܑZJbW$AL :ϑ!D9/egKWo#'EpL`"o4GXÒC'\ dO`֍ol Y_% Ud,3O}uYỦҙS{$nқ(ټ̀V#`r|3hfprkXrmH/G ~Ӎp3Os]f~.; u~wx{IP;珧M`vMzj7ƲJߴV!= ML>4}FCoG |:Js3Rya.)CZif~^o* ܸVС@=ٚ4/ReaJj)n:26tV\[Ka1W䇵O[G[(ioÎʸku{KW1J hk8M-*_ox2%b$L0?;Ccf#Pi1g_@_u(A29J,u~l7! nU$eM͌u>jy͜( >%/3&yRY3FYZktŒC\6`mg"Ⳑz xS<c^cp^wHH1y@Wu~_!;/;tCܡhё_& YZf:,aL-q)~~O{8N +ORص P:.{q> FSښ(v*ou\~l@1R0 ƫĆ r}s1 $#`/cy ~l\'P^4F]/ }7X917aG(xy9f%5) p@-$aʉ?| M[ 5:7;7io)J9y6\YnEX*:(o∈oD;hnW/vwr:reGήp8ͭq? gY$ ^*+ ( vkxVlZSԃҚ]S,/3n2# J1Zkyk CU^֚\ a nxVK✃KB.Z~$2杢~q*dRNU; ~!aVV mq.^\_Te)t\O4ka7Sv?V5h/ ;.+ޓhڒ]ܲV@dC4Ό"++*)gi >>փM?]"ZT1+2W?qYkWU?I ](؄K/rHKUUVE+`N&d_6Nau7,ۺoN%3Ѳ9*e?rGSfީB`HG (]y;mY\,?rfT׀MIY6OU"&mvlw(?dnVNqQf0.!SeSvo*,/;oďO!ӱ2)tl\-1pNE*, !Y7[k/|SfH.ˈ:VM n_Tdxx$_~lKόn8É>([UBJ613Pd$ji外&OPnImmNB Ib"2fJTU`v*~Pbpf-EF-]Kؾ t[t!sYPϽצ!>mv njجOg /,K} = a5FBzJ>PO3gSJ5 ijkߙ ΅WxZM vrL>=ӌ=t6m;!-.ȄЙeWw (`񄊉(·%fk1 "5i; 0gOȒ$!|6EsS9N>g=Q #Pzh"/wԖX&ӧ+l57is,mB]Vݙ9C]t2i?y|+E#\E<3QYKEּ^ _\g##ǭzV {$[PWv >W^Ӄ])ūfMV/x%=783r^J~ze# ǟq@ops6eN5Epod<Ԇ"4үķ|08 v "p$s5o8Z\ 꿼 /HwzSܐPf_޹*㓶C%rfӞExS?يJ|^ĬT%|`14H&Fpwi45~qܽV@F Hq-~ܾ.`W/EQcHG–plW^k2T8gw"QO>D ZԺ(]'7_*<#jbvH[9p\I!@H}Mr i_ЁSgx8jF/F_Ph+wLңxKݧ#@Qv>>UcVwzȢ!(6L\.7s74 諺gH̋Qt @)]'zԎ |d{.aW;.%S*XoOo*K:ES3eyJT.2-ױpQ'V|Wt_ؤCxWTVsѽ ZJ.šJVU`5zZ?Ec ikvyAO;!( yX]2>i #+#rs#"ehT2;m+UeXT3s89ZE49ݲݔ<0|en౩ähD4:OIc줧q~TRȰUt~Vefh #M.Yq)xlW<➋̠wFj8UWOzr&9% {Ε[ɼΎ <!͔a d/:j+`f8%仛tkGYw1Uѣ!!ikpIbN t)QD*Adf2TE߉=^KQv27JCej+#K!R V/~T\11@2g339kd^nbRdI0&uNF!ȋu3G9X͚g_;A=L=ii*QB%&y< FL\\q+WuE0A‚U'X͆9$ ? 3_* ,~5Of AGϠwм%N`ah53%/2|&PfQ"Ax%Tya+3K9sK hqu5@b ?!8n.(- {93)7qEfF8B_GKӖ nS]{Fsn6S% w":AU-BE9r~gcZ nHWhyO6`+7%#a$`kL&°2#66ݍ$  2N?+s-yݧyZX N2>( ȗ^<>F/dPWÍ-{/d pgm96h|DYފKheN>A7W T6'29D,m&! $>ŕei蒜L'Gջ4-nPY0M6UQ@h'QSB 6G-l5\dY(Iɸ*wagމ_dmQ@ + uE.7MNUnβWQng7pZ5DPc4A9FIzxe |hLvYJXEtc ~~ew:H.?zc:CSOM#S0"8;7j©9`lvq+)R >k|^E oӺTB)[/+-$vh݄wE"v)'VѐV{ CrikP2XԎhF.+N9kyUЫ eV0iNZETL,#ڕn׶8u H, *>1fzij@هR;a$·F`*d_Z' İH޹׶TXKNX羇;r+U=qNפu"x#}Vʴ7c'.I0jׇ  m[>.",LX )r *wNVٟՕ}?H+ F#:4ݢK=\YVPF -#r(`ȐϪ;puZϟVZC#V؟^MI;K =(N߼`U`9.8$dfܝҲN'>̺U0hqMB;P!J)%C^\M.q$6Zz㗸V'dpdaaǨ?ӧ.|.c/=G?dzwyn}d \Vx9!iF#$93dk~1tXCQm]oX'xm1Ø1u*[0;=gBc  B֯,isZ5j uYH9-{d)MIV;Nsµz)Jɝ@0Yt,Tlxx+QIv_RVz2M;AtǴKx3ݍ 8={}@(3~`,|"6\^<ǔ 2+*"}RϮIAII{}z^;Q%?8]Ę[po=p8A>? 9BwUO" ;!? %4Fju8Ym%5 4ި}f֯o;"Gc%3P+X\8(=qJ\"mZ~Ō!\CgC"H.;u2ڗ~1 ۽bh3Lc?=Sܘt5{POXա׷QAebs kg·^  h;,!6M`Ǡ&CtozЫ#>nK?3 } $諮B,R4q2 "wCQg_86]Z(ȪVxWնQTh%_SvB*$p yzoBA"X3*y=#)VP6g S b"[EP#=K9fugbH)7m$7zwV`QdWgTEe1rC>SAEݤ}͘!Mw2sEz>;z& χ: 3^?1anug4CtN0^ ɛh|'F_dPg428}~?!q2ˎF.'l+,9H?-Şݘ]N? w[1 xRHT-x/^e NU8}y7z$ *E?_{;w d@_\+kuqgCV7Pئcu|Տl@bb4$%QL)K>* <œqrBrn!rI!of95 }C!q H0[ V >ex.ĵV|kZUkhI"Zyr`0'bnr[k(C !^G36 .S7T*%M;vx/h۠ и4dV/-e ZxM32ͬ5QwepJqs\^7 A4"U׶XϰA'aS*RCneͲ"?R9tttxPU9nv]~Qv=dD=$"nHJ#&?>DCa$'^E$C{8e[)R硽Uшq\xuIt,za AcSAScqp'rG#^`&ob5$Py2 ^RL՟3K!'s!dKhɻpTcx< 32v7<QՐ$:PLKA~r;'򔸴ax'@Ø1oDܮүFֲƔn]ҹ@Ϻz6o~m_Dͩ'hRnFeϢYd$&VKeX$S fi oVsFXsb3P*-a[7J2mU\]q 怒8xz *?x2Wp46GP`Kt@2Ju? qhx8c +/|Ӊ?Z젗0x&ʊqק >gp_֏[UPRPTxm{VgN ћO 2GR 1M HKw82x*S|&\utBSAƍNl0Ĕ.ZyHI~xs=|Y/O $[f''b:b352PMxNss d_-WxT?Bs|>QAIË;ۓ{OLqVb|\&!\uBW{" f&9Mm#%M{!Ν45G|ʖpPު,.Qwv>(eP01 g/V(ggS)6p?lQkxu>F#0Rd:90 b`XLB@cI)`^{c$|!G"8gp5ۅ6i̻usQ8֑bj^a>-5K:fbw1Sۃ{&d;3̺7=$idQ+q9ny#61 RgJ91m/N~rKesT~ tiLZF]?+jEtVj$$r=&ogwBjBȮM=AG;E{E֢+? ,V?Sbd&٫D*.?^vr˦ ,6 KZs)u͛_ZaI7  +@*0f散X NܵA0jjtP:)R\li L ʛZ@Нf8FxeXj;'pt B -L6ϨKd 780U?6|qy吖Sc̣w/ue"a*f'.#!vIoI0k~/76e.Tw71x6ׅE(fR@t޾ؿNrmbA˼l>#Sv\VZ8b,t2uy:U3WF@m2.+$413GnMvnW!@#פQ%9=!\86 z<2+!aǧ4Pmκ4{i&I9ue.]p ׿ ˄"j-HAaZ5жI q?8va V3 P9l6.Y XSZ6}osԺC HQ-VbY3֞t^ee۱'nk԰04>"{7Pv~TvW{&!ϲ]6#:<`q7d$]>%\d0VC]HL齠p Ϥf#(eOóK~#\˵D % *ڸ}TsvфvS0_GC"P  '38J,=CJ cs%ȟx(kE O#c _՘5b[-H75B .paj@:Cq$@:[[GA[ iȓk==Vnkn[mso.݋:L RV?hmWA0Zq̉45oni:KIW,`;M:%hjA[O||7nROI~R+8?< =n^LkLҁYB fp5P B~a<ٷX=J#Ӝ$YLd,9 !11輍,+/.(SI"ٓjc:ڝPXU @]+ eG}p7TEv|;ah*RPft*'K|㢗FjMԳ딠C/b]f3oN1!J,`Ǚ ZXM֊+:8{۶Lc>A*܁ ;(&`ۊxCCk d}i\Ey43XDf0u09c=fMcCN̻嶣n~s.XoO@hо \~q&Kc5F=E7p:1ZC\%ތ [Mdwn=;I|"Ej(marjMD*~,a"a[݌Wge:T~ÍM=캍iu%&2lvysl 2edKdo~6jIc)b{NKƆuppĥ5KRMgCptxzGue{npSzCX縼j2a3jVZ$Q`ԈKqY},{Fbc_hn6/ łK:fvPkm|Rt3.!&#%O*FD; EǏaAϛ.#E#a}"y!%`6rbͣ%$v!;Sk m㷔1͌z]7eQGӍ2"D a;jnOz09&v=ļ#VXH5q(@nG\#gӕjq?U8cN|s= F-yg`LI`A^2x`?D݋nOn?MFh,*V}< ݞ]2/|f >zզM T\Lsه'$y' M{ܘ;˛Um Xv@w9 ݠ-ZWIxqr`+j] D{7#CfkUPT$DB9öBLzX(m*aw zރ>d򳭄,j~cӗ6ثvpbs:sķag5hЁ \(kfaLX)5uǸzo1lQEڎXTՒ_ضi5@N1IAml/J8 +oҢwfz )ٷع`4'Sh_D.\ٖ' crfrSVv=ɨfrnpn22 842r&,Af,3UUϠ56+ mlZ=&p*%23' #T` qڋTØ @qل5Jm^Nu19+".oZ]z)|"~p7?-WFn䆜- .VϷO~T<9AߜCHLWX^K&_H?'uSwfzIY!+LbⵐBtJVij n~_ %}d|Ya+ּϚ.v&"Ӝ=wH}kJMY[9X"KTvbOt ɴUͤc⍵]wwIfYQL) =!x~DV{{{t~)4uWţbnR+u'Nvx7J-QR0Б?4W3.-)DSu@ 3nLS9 @`k>aEL-(g E4.~ÎipQ}ab: ZLo v,uk2PlֳGtb*h:Ɵ=+Y^[J~m*(zQO"R0 w` Ԉ{ۉ0F!^:rVVA|V;si:qBP8F #|faTHK=i ЅርIq `~ǽβSEx%c*[噀y6Ժ}1,/pRasXMг6`7]OɄdQǚ|D *B, U,Qi5<[Ǣ5nN%V*` >qg g5KH1p%ք &9Tdc\v\rff6]'-em-%УOl @; mʢ 9-n9E>P6ﳆ$]|_d:x.xO(3De]VL~ټOXB3ht@ &v X)qx}2U XwI%uL{Rbd_MmUM|}HfQ6 gZx 0wt*2K&cHYg u*w>:ptWY0}8xY2 tQ}S+籮I\qxMДRhۉsBHߑ x?umy'|iTRiOrŸ{`[uX(6~uaiV==Ykޤ ?:Py| =iQ~zP{:Y94_׋ w+|MzID"sXqkӢtn-52rg7V0e,M-z aFDF 5yOdj"E DXh[" IqlCNKoFMZ1u߾*OA>:0xVd_dW!6: 5S^cFm)2Rgl`kݬAbfçjR y1ٻK+_ ]8^9$Ӻt,0•&!w8^?RNϨ=.ǰ:u`%Ep3kxI$_/nWyd%l*XBksToM1OX 鼭8⎼?%J;U [S׊վ`($u;7Q{^ꟾJg8Tk?^WS ) H;XW%ROξtwL=Gn)͹R>(_8Rz ,c~>Ev6F)OBْ9o:w6Eš(ܐMٷƮu1.^:{̬W1D8$JsGFN';m}LV \]b6bf3gq1~ysgMX Qd5m%k@9/Gmc #^Nz;`}v_|xPfrt@f q2fQaQ\9[6\̒㵐uqM=?he86G)v "'?=l:~g63DR 9Ķ3<*.`|?aYr>sYVި348g&.%|-dW%,_ 6]uUwB(lgޡޏ9AZrCy6͈_qુ,Dm m:$T.urTۙlu-Ne}x{Sږab6FO=63ltj_{ (|/`ǤD:oTNBB\!P^/u6)q d*B$(ΒnuꪟUA:E<;p/a1G M3pz']g$2 RDltP1⪅wЏ>spiN qh o~Kl#Y!~|_C85…;a6{jɬ6- X9!Tw7ECD aj붐qdQg̃(壔{cc( OO4t*Ii\{㈿MUN u]OWN\STlM5AØʧbеH97De=|(I Lxt~[E_2A6&qP8m 2_uRxRIdSݿݨ$-Zƈ_ŵ޲%ɳXuy{pc ؊QlIr5.NfpS` >Wx׫VdW(8(+i'Re.b6FÅ t 34A"QPi|{[ HlO%#=g]H*GI5fAnK)؈jnd]%/Q-r0ʥ0KF Ñ汥*¼B֓evLk %N $NH6JIr󺑷vF 5{<2&NY=`/BpVzqbB/aDѭ:JJ^Q圬7P>8;}VI%izt$WAHHO1(YtowbSo3&xOPJ*|Mo)Hu# `LN?"vV(Ч&eznKڅjA}*B\-QLm٧5Q+b: m~d[h.|Eb B:,BY(ۻ"L7 y( Ld{;dߋZastd|w:E9V BcǰʮuҀcP"8ToW"mק*h" 4z0:%  YP./qUj YαSIgKmB=A3 Ha2&'K6ɨ@8l1snhQt.Oѥk?q*r<_`SC9YdcguuELt2Fٍ]K Kw 7FsK"̥t%$  › voJi\{TKçh:O\~քv_PuĢwNMܻ D-\ͿPhh.%{y`KOB>^̷lq< >{#\#GyQ|bzRIj֠ .RP?NʨL5'N <= ghO$XP霁)^ajrThC'>YֻH‚RRaX4WB^ ~!*23bT>lNFco.PL %Q\X4=Q nOy"V#F[ M` [$טM¿<Ǟ߈nWt:#VeRPJ|I`1MFm=f!񕠘0f݈Wێ2)w˘ M05[HŀB\$+ioV wlPKFdzz5zV79&asʊcnmk.3Qy:hVgoGG-t]XT&i6jS9%|b8aλT 'NɂxiN8*ǩCʿce ̕  0ϣ AEf@S&Q%*,Cs7\ GwnY$p14?lO a69[c }5q4?c^jmh4;p4HHrgkptzmL*!'"^/`a`ɮћ7fz%uf1coZvģ22ѤpeNlZrq:1n3GAhDcb,څVp5+3yG!߶f谛5QL߅,;2|66N!։ 1<6?!4xEiz?Nok,DGEQ\ibs^)   ȅwxf1uCNfצ2[(Jl0f'yD:"4yu 4t$ޏh'ZBCj6>[< '[l}`(Q,MF_&XZi uvei6o96<Wه;nO ~胐c|j&#f+w>dS!ِ=7Pb}"%V c1r/z њaeBW<\Q3{v5Hb>4dcFCѷHZFk\X_HNכ2>S[1?mJ1sdtINTu1Rf`q z{lQŶ8zP 8⥯vS4E#}<2h:pIwfBm#G*]D}QxphRwq젳X|.ZJx81?N8Kq&KvFݹmMSgpob]˕:pBJ;yTjIëv*-ˋN{3UJ QhyX[qvfN3άȽ*U YHXmGh6 NފLvs᷸T +w.oocbS;F L(@88+f즪ꧨ)UR>=9--6! nX =Kx6e#S'G7\fgl vl@v6ӂu7 !6aTi ˢ8w]J@/MzoY.TJeT]5a 6PZ\ ?l ͛(Z߸.P8[vSwU@@q^,e&p7r*)\Rԃ~U5x· f\c$@mRHd͚M=_Z 8:r҃ ֈ& I*a̧"( G9SI#*D`5'2y$ cd%8#xP1ۨ~5 %J{JVx`'yC6.;P%}9xA6 J|XdpO.$Sga8tA68OB0u_(z*Z? ZMBe0'.T㸌) > "h~T"iwPBXς 90ៅxΛG[Xc<3Kj %g>hUxiGb' (T[-vLz| #n >t^֚ GcZh0Rlʥ"A}ܜNu`=cp[=Q#oq5i6GvJtB ؾadqGmͲS?҆/^I/rK bȈ|-ZM7w1\*zkodUu{lm8mΚwgEh$zKb{೭Ũ EsS&"ҟ#S-K ތː9MnO:wҒ:Ni{lҒ+2L/&Qf`JoHp!F_;25od^ wj;/-i(8wsvEN?R.zq ŏqWUGlXOLM^VZYZ& |t'UM?lw`k"0neH.hOvGoIry\SRpԴC+L&Ly~ncMH3a6ݚ0*@r!_& DBQR'jE"ų})A8JH#4_zUyr+Ã|W ҡ5`6,ռ6R*[L}SQkL%lΗJ/K\Zb_̴) ;(t0MS,4 JX8;PK`Nk>#븛tCS>ތlX'>~>`BKdq!㺹c5{'R<ݐN-zmnO^oR^Ag_A6c5 >)VyJ¡31# ɎU%/˶pϡf`+GEF\50ư4**O5/sIՔT,\#`j%k>IўOŇbd?Rt:t5K B#wm&N㖂GnB˜޻y=+Á9vs&.eXi-raơT=+69*( wzeX|}U3܇4ȅ6CXNRH\wpDKO: hw牥*la8 ZP/BLsk2pV/G~+ґn(> @>Z)8J''e-{3"B;MƯn}+YG\wDLq˸^2Ck:6aWMDٷ0h*(R~: #>o"v|@8I[ݯʑap.% !z$Kf.-_+1~PeΤ/}ުpZHOQGBA{J1c~wr;~+R? ^T&NMyWTisH}):) H CΜ, `X7VBL,}Zw#i$;Xm$/#;g߯;g%qMO~5&͐r RDԲ}5]!CƬe^vKe:0锰?{6i1/P^6vˣN+QT[agze0m EXxd}H6Bs(BODG/`F.l{#Īic8ƙ ]IP= WG[hKtjK!ojJyN4"f"Y+h{7-jAmn45\LߗbznVJs@*4s,DqZH BoAP!:~z~a/x t$%&Gd|Fge+n݊gв4l2үpj8p'VE.iz- ^7;,CYI| 'fOh_f3A+ u9/fT4BVDua|z[[&~2 0ش^R!"U9>P#/] ZlV֍R,`OT8-3=>>Pn3)E6Rtšl:\2ؐ;>џ_X䮍k<ZyX ; ު;[zљ.TS2N!Ybɠ㏍hb/z-fReb5*@ЙAzHw!GG4,+cL a \UDrV}3Ӎf3oj:pn?؏OObPLu,E5\ntQ>~[s.8\al̑VB߂+y^tk04^UZU/CeY4%}-Ck!^;"D* kQ| ߮ V'kضA(Dg!ԧb&=H oIq;aR4wב3b>J*H}`63n19o1Wy&Jܗ+-{WpWuRbI3`~'HnGE7]2cm5x] rlŽLE x}-QbGÐ7e%ץ0 lRTW;(WɈ$]6DBavD4*:_e~9(_ #/HdP~e!7pn66rrnߩI|,(xr@f4)A2$72"B]9?~&V(jM$0W,D42Ĵ~6X{xP؏ :!㽨K$Te/N/*=q2Eq n0'$3.OzU}?4iD$dSeVE+{ǬL7 Ð3B Y$5xnk'4]62Wsޭ O:sC o[F% |-[8dBW_nY?3A E?Cүѐ81~Js99M9vT⅙8w1#b x*y AeW-l TρfdTH,p{"+:$BZ3h&5B4&,F>CBG΍f@m4 Nci:)%Lԇgnk=yƨf-R60%)!/+}+JKDgC8}7 O:N C1r_bO2QX=8>6hIǥ?4V-P/<^@ (i-,x)mbpV2jjİP7d/+1EvؼQLOC(vDlEa#`d zL 빣*fJ n(}Rݾ]:1E~J/JXQH U2|0M6aOg zpa?wf$>Un@),+cK8QT&A_X1OA{B;ՖiviV^&(rm4wyyiݟXScrr"Ƅy,_ S.&=k$8c')*kt; _xe8Y9 #,⋲pm%`E 8d:ܫZ5ĺaY@GV~}/3z޲9MA-]jDANKYdIKH L -W|*9~K^. jMZPU}<,:H-7:0|qsRI7s;-5#V|X >egƐF<$j[a۱pG÷l9%R:1 u%lS̺B1͚Kщ1\?sq4RBp(Ϣ=|Eƈ9 6;9yF)0%ÇxrwðvBNEqL?I>?Ϩ n2?$0:Fn˾oDL&?5+-gaw!O ׃wg*Wi(;džA@<S/eϊj\w"H*n)TA2[lf8,jqLHsqT]M~Ϥ#c'3f%ʤ6Mm445;J8_>ϳK^>di 04omC 0}IP#]Y\] QQ3 Lq[b@og@*w>u:-@JOی@ Ѥ fFw25! cl\S)-ʚu#W,D7AS#j~6v7\FcɞXXrGT4 ӲЁF g]/^t˶36| 6 2u( \d\ZJ&g4Q&g!_.Ix+:<i8:ueFp>a-0,v%2e0"CVtg!c,v/E-51+ H;2=yXX aْډiY }?H!. C=,?:,o V▪G"%T_\lpB-t(;?4W~U}S5D޳p$C"yghh{ C#֫v~mW V{\uc{B%qв Y dNTxfGc5I$ ?Jxp^ x]29IARxVcfgKZI3)fywi 7r`7`4~mZ$o]ʠej\ Jd`cn$p `Yo`uqipb²8އ삔 NHdC F;h-$_/(.qW?][7y2WF40o.6ui>Q#wGY;cRTOx3M/ƔGWa42‹4LZM뼈yM0-qrK7#Z`F=t"2kɣV ? (RYɝ}7q=q:8A;*ta+?;YCW\+e-jy< ?ں.IHV h_Hn+pBr}Xl [P$ʩh;9L Xo>rdO9hxC/U(|T! P#vx }q#had9bS:/ֺ |3ORfyoKY2Kg6̩=g]rrD11 dx7HN;I/R )gێ .TG ;ƌ2=f]jfSL-#Qd X-b` jQ ? %@yN[8 m]ؙgU;z*da/}F9J6@*ҡkq%c[ϔH%2eb*s|EN*3} Q=GUA@1[N*~]3dÂYZ_$ g+ rXFI.U[wP?Zħ@dRz#B G]]aXFMY~.˅ '9'+|'FV.wneS)5!Q0w0Ui!yݖXb[됂 >bm dK;iC?,?d|'<[422Np %hI^{Q[(O_p(i%|1IRS ,Q'/t=O+$bceU,Sna= _hĔ4bfyG PeW9Vb?@K/e[[ܮ̅dᠽtPga6:i~h>@rp%ڭQzuY31/ OySFq炙H7$&iF#lV LW[Kp70Ʋ%$Y}9 ZA&mNC."]ꢖU<˝C݊ѡն"2'E ᪥){ )#y,z9UU=͠n2Ȣ.D8+0xB9xeH^봜/suS> +ұxj:~IYv(:l;Tv蔱/E 2Q!瑶_t C?,&֝9 K8#I !O vs!zBiTO4ՠP@T1$awTahfv bEd_|^ֺ ,k ?BNZx\&wIՄ35:36SmL 3Le|;^*9wYQɾRk͛7=u_v8M8=V8R(?\{ed<ze-3httoIgqt* Qɧ^# I%knRVM-SȹDft8fHInRMrpa`Pquua(y:\E}Jau_B 1*^9頻6)5o}DRK1 IYfHWтh}.(͓)t[< ;0ďy+Q[#/JOi fՄgpU\Dt1_woHֺ;BV&#~Y_b4 G'#=d.w/G}'ljg|;)0,cGGOVbqLÃ6-8k~@{@HC |O(w@+@QņEd#$B։)16\#(Ă X,O3hfZOxZ-} S~G*Fj{q^`5Vy痴l+Cð!?*Pķ+7zqdl~T$jm/Qsru뼍H6AC1NBdo׾1wSm֖Vz n1TBHz;¬Zx@)?Tl R (& JAqk&-@o} []tlvwEF)V]ADaђU"r/J0Qp5Dϟ|r@2XwנMF`Cs5v "2 -`]67Ǎ q$%>2ܫ/LDRtƿ7c|a; 4 *(v,Cg {m NC1^nY%Zp^ɮ{l6 R Q.2V"ԟ(@h;,m  T| 2>Y) ΕV !1ptfL.3!ᓱ6dQ3󃭂M;5C;ut!UJt.h %_Vp qc*hCP8JpxeM]q}H `lԘm[ SHF3& =ԧ8=.(v~,Nku( |q6;ԟDMQ~j#,MI$UGTEG_A'ًd$O>~8v@:SnQ KOvō_Z#8_PX*¦pvPn ٺVjks8@sK|ۣu/IC%o3+<[썴%$HRGg?k{Hp;$m!~/f U. l 7Kt,{Y7|<ƛ wS9K|I> 5<FT4gHi#o=v-b ʫ+ѱ1 `wP>|y[3%*;펿]t,8볉z@6MBe_7Hz낀_W^hgl]#8φD{K5. 'B %}?/&E0bl}uldla^}hx~XMS$-:'I{qp5.9AFOJ{r<~]WQ9C!i,[9h+䑂Nͯ/;~ӦUa !6<K4:RU2M6{=U]in"؃qi)A6@_$;"*O]3ЎuffY7W|N_,vĸtaT3Y0OrBl.Rc]>0Ftsȿ` Y/2p#~SouɪI/%~]Qݥǐ2k@B'#Y}ߋ{ v v\,l80/Su$&(]"Uѣ(vE.̓mlQbAitod~]bOﵤt7mpl Dy^[҄M0 *C@$ I؁ K]\Yn7*~nF98?qOϩV Ka/~l~:|bsA$\6y2ӿ$ழja J͆|e&K@(U]HAXW8Aۮ6Ǔ׆#Iị^F.Y8N^z`?'D1;&9ږT'tʔT#x.bM!{ŵ,cCQCX7/~1|Dw &'_+*6S_b?3~n4- 1IaKhmc417By6UӐύ|ߝy.]Nk .:]@;S&sە˸-S| QHhɛRa(b%;jkM{Iv9usn0URDEۤR#j$ ]rroW1Hь2 C5&jb~ -:67"Ȥuwjּ/%hC]ltd" AbS?q\wi嚆fA҇A4%Dzf73ѤjUJww xRZ +8bI / $f>X4c^YD0F2gF4\(NN2J_cZDpHdInZO n5N]ѮT,C; p+|W{9Zf\no ]cd`gug+ LfR69f{_JӀՅ3nkdtJf2+nLA\%oYcO.`M*\uϢV4X{w(ՂC9+:v{l*f Q{h*yG[C!"^%Aut5i!DBqN WI0 Ť;;r .=ۺ,ypiIo2!x'!N`xrY R@Ku?GׁFsQJlEђS-Ag hp5>oy fE`^@Ct)o)fweDPZcA8 "2Di93y3Ї1vXz|'`-bIibp =1>J1X%U@>UmVX:Z&DuUbir.=o׀@nEiih$j F->M[س¸ճV,=v g. 0n r(>tfoߨnjam:A:y1"b8qNSUB[aجwi ZHCp;DG`.7wE5jшV!Cވn2ں@)2GIALN[kE?+C{!VMt :t\ZaNLeN'::g,1@sӫ5(_d#+P_cE8;کIf/L<{&fpWoNNó&D¯?;K~bx .2wNuB>6`EcJtyC׬{A%VPEO.X_"FA+ncA$mZLX彥}"e)E!8|1 Lvng⾲cP21q| d*TᬧCg_ f^d%Y$] ]2`MtzQSc{o/웋fiEIMr.n,GC! t| ?"0 _㮥'jgظ\W:Un;dsoΥ# x$`"5k%`Q$soY6U7$*l"4ֿ3.u$*}Hidihd8:vYnA!XP^D`@WbpG%eTk_e~C@MsʌC9D;@9sO'.f4,0O+FP-)gk1/Y?n?*nN%^n8^A4\ HiV|ei9BRdDf%isfu҈v%n\\dw05v|Fz} XdIEt[Gw q:}$RѢəxݐ=a]?r1>i.#aIt(rgsK(!Kolu9&,͖ŨbR4B 1g4ޘJƂG_nKxتԂli!,J>#ZfʅF\=fSq|vX.W3ɴ\P^zP%# 9$+m;j&ZeFWu|cFcaEBSyf%/xz"p%V'iaԃkHBQ>?%AvM^~HA-oHz+ m԰0&lffDM 7)9q[)z_iB-(M0ocwTTe` 8EV#ZhUAM';3G3)r g.{DZI=;1sv"Hqi@Q,KA5HX˽\2{9/3')iG95x07&1`} )bH ۑSEKYx"PGS#ze4mZpA\b^{,@4ot1U K?T-THa~%%#{h U>렓c$wjG/rL{_©,9+-`IhjsiL dRQ+.t4Ys^Ů<.y4jC1J( g(Woۥ/f8Ed #$j3/'w i(rh$M<_=-6lU'mvbd‹+mŷzRvK VM+8#$x9 DW'7Xn@&pjK&Uh-U2eQ,_@FR+A_%cj"BZyߨ)g^N s|&^wk8EpALWC g珰}TcЂE\]f .|j@ .zy%*Mzm<P%o_in,E3F/yǧ8eKD*jc&jcdZI KD׷~mJ+ϥPh޳(0Е<= bq, MhB`iiOQ]d)|ǟ?BG"~ 42;O4A!-ȼQXKbE$$Urwdj6],s!'~ Ls$h'Fܱ,/!o1>|6TH h9~nJCDpͶ$%)a'r.d"X < LD&7pq 9J@`=w7X&^2|vq_%\LF׶ -iN5"~~W|*rS!)WYIp\(x&ȉݐ]]peY<]̣RNĘ=I u; FyK9:,`Z/dݦYդh]l]PjK]ag$pHU;{;l>q4T"jMSINiG=߿d\ eSkNU-}txP[r`'GS>َb~mV< ہҌ 9 L9[%ѠHRAo=Y`peM,3w}x_O}F3&КPIaд޳`JQ&I$hOpybGl6VNnHbh O 6ˆj>+]L\&~6LYQ1pUc)噚%#N=Vkgc- @¥c2C;0O9% e6k i;G~QQ[p,^*jDCpEd8LpoU&YJܔf_$X̡սNRU4wp" zIKs%x2afVUW#JBV/Tҋ/0E_Fk;("m?aۚ2!qE2K` r*ҀΚZ;{BV x.gs#p)#6SsHAsBC1xg o8 ip[6uHݫ*.SqdTh.gu,J-@eɩ07<]ֻ0/{xżNΦOp!.yLNݮ۞|T\T2Y|z_i, *5F Cdb.N^-> .v'$_;vʈ/PI|$&ύ [F^跸/|ŶHȚ7c3}Rh=/렇?W澋B:b?6L`,@*n3(3Z7Wpe Űו.H1M{/nMO mu{KU'5;Ɩ3Xi/<@H"qW @W4LsNkף;3}L/ZĶDip޹ !ѻ1sų.%DU)9^`^369t=#W%0{Z">:HUIZRnX1TR|ך%jl n>C>_1km/Zg?jI=HtqDD_Z(VڋթQ m40J_,<pޡOcKtWRA{ 8i!OUfw&87߻]ׯJPZŁTLDFؔN)_v&qf3ql>_,|)%=1!L%5H>C"@90,xM- AiRY" S#ް1!QQ}h/ w۩$./[njGfnOFV xUb'CBl̪1FYj_fbûT12%NH˴M`+SlhQ)nimBpLIG ֙Jd:jΊ@ovn&Ja`>bH]TِJ˒hgb)2 0bx;4U^,Dsjf`;26J?a4i歳يW?漉zI.*==B-~DMW"Zѷo0޾h磥eAn,u0R q۸>_^Iac3NȰѿ3\/Vҋ  c?#,a{MGPS%9\ڀM^yɀl8S"`vdGT+%S'?*ZRj`W;KRliEx,6sWAM,trůhKjcT_AdCҁn:hG؛UW  Xë YUG3k.)KÜlع6g\sE|ͥ1H7*(PH)*]]7i鳞IEKȉ)KD$\Çn+W~VT6r\d^Kr #$ǡ$.7ԂPzȈ͓p=b =4M# u c=*l@\YY5^"K%J_E7v'au1@JP*&\vtZ%{ȬY(&_4]fp|<`i14xݥMA}h1uj.UCWuGJhc0ԔH^3 5RYs:_c$6WݮT h7ߧ||=>d )EqF sOs0 #Zt1< z<(ZjpDTaHEU~L=39ve_ݑ}D2 MfO8Ǜ g8Rtj +1TeWkj[Ɯl 6Iz^.nꤦ~udh[ }姵ҮqI{1?4c?E٫4@UKC$ Ra.51֗iVv 3A֮HdIuFDPEvst2@HOHj8o*lMu l15ejs-s$]؄j۲ȉA y LYt߻;f7>8VE$yaӈwqYd J!Us NoE$ҙ0PBUؐ2VĦhFI2d$a=pVH6T {OƉhȦ"m2e7/vSva֠`4Flކ! 8ZsϞpv(afMt*\Ll5Yq"(Uh$2ZjuKtFj *!Mgl [Lp@ h@P+@i]T! t2,sk1pT|zQ=L Yd=⠄1X}ݜe$%iqID@yesc qj<-obIP :ߪj1B9RY7gd8e– o-3P!@LԎP=[~W[^`PʏH#nܐyC8žŝ7:!Z/p2T:0yu(Y BP:-Ss؜ u\%ʦRDEP^a/!f(tf~.b=W8n E&# SɳT!ޢ. Z-] Ǜ LohYW!PAI8U$Ηܸ&ޝA.%^KQX\{Oc'Q^1N1@z8M~(T{dMP>O&О j6gRuf3A[2YbX bcOhxM慎.6&&`gn1%4 vKJ ='w;~ I.ߴ7~pC\Gr3+3;iս(;:-.28nB Sy)PFy9+3^te1 yϑVyt$xW_zW?}TՁ)ʑ{,"ض I.ї4 0da:(cGr\`2!2u@?V 0 i%2E)#2aנ} a=95VyLAnB$6% B,^)̍8oy-QO9`孇"Z+ws9L옂i>-ˆPu5M\MM:am0ov ˮ$jCKƝЪ [# <L߂j Pɺ8)K8CD(rYlnd׸x&S&i܀gs@x_p5=R`0R'2WwH"!Xvk2M'rᓖP)j ixp5f"]o~`rb"~mװ%!)p- 0)ix ,ow?`mB*խ>WĴ C?v,+V4\.A8#4>i%2VJjvw;'G$ӴƆ ~ԮҊMkl0g-׆UR* *[czP2ҴH)L`  O-8!,Xޘ몷'#Wf}u \gPζ=8~5vww8deFOi.j*94{JuL$l }M b%+Rax)%!䄺弋"fxѴnR4քwa(!~ܬ7W7K:r΍OI7ńGr^W)A/xsD$mejS0/Ǽlː xOg\C<O$!n [n6wD<4 X.yro"[/ 5c:|.eY}Iޡ]≧%R%+{3IBZ\[A.MLޏ $ &&f3ˡvoȨiP4/Υ2&ʴ읾qrEMo˦L> nxx Rt:[#h攵>r I#3Ö}N܂xn*^:}Sw牫_ʸX@g7`qxz=3p<Nϗ$]xbqûZOs3WUcw7'/KGxj~ SJ%'EEncHiIVȍ @( )>^2PM& /$P8(#j5 d& >.uYܞBNKL2N4.CnJ-i9A/`#蜕6W۾?e/9t-0뜼kݸm&i }W3*~* :-QױTRuhBɳ2;ڱX[2 ?$e4 BﲪBWJ>f[rZ>,o[f*gl}Vg7gM^ǐ v7d.XhW4dH 1> 94<$m6iJ YSpA d K" {77l]:rMD#-rOFO?VZYmZQxf}v+& b͟+T`w,xc0O|*PJS F CqZ_ X)I~kP7gK,vP$>_`2 \S: =Fe$Y"|6A5[1cQ| pSP zH$J \}8IaJլ@ͦݿ|zyf lWZiaX % #kD>(a*7~9O FXMLd3 ۗSQT"x_Ѱ]j@v "EeRQ"y6'T+jG *~"N2tWDV|bɵ8/_$>fYһrMI"ښpATFKzIm\k+ѲnoKel17)ymafS㤿;oxIR)1^)ŰGMT8, :S:jwd S3Y$8BM*E-zY-ËDA&eDČ%[mi\^U=]# [f/ߑ"1JA+ W?ܢbt>yP>Mm1)-gDE~(B{dfU6\\)gMdWdc8yRi _0hS*5="r@BHi"% u3X] l5$mQ>my{v^Gw̭OY리!)_c"ST"_ZJ7s(x2ˠTvDsD4}u]7vw ,3\'] c=6ҠSF[8['$mOvT|k3Z4뿋㋘W%Ja(Dof@^4[q媚#(䛜-Y1{k1$M>mXw6yGz.mVR:KsG7@@t}k]^z&TGȢg8sOwkZR\}qD5B,4:2kA"$X~YuŝܿZX%跄/?s[UnvaVeeZr\;+], u{ץ^E ,u/{h.=VNJk5z\keAq3i{l?q?>$֜۵2ψ$G9p2ͨ,"ah.GOڦt^`AbW7c"nL G4C"fHZ-s tINpxAZXUmVnۓ4 ;޴n1_j`m/s@_||E \Y=.&?h\]=mw:ط2}q"iq1Hzr@ \L(f؃_X@s'R?02/Ն-pn2/-g#[K|~P+ڂRտJGCMO>4l RdDmR:FkB+MI=6HDT!?UKRl]ςw?,{|2^LLkI3L4@9V傞}|Gt&]/n2ӂe"a ˯HCsPDhV~8?d_cnB1NAMxaY*zzV|WaSW~-gyuR/n*"x+q29(܆KSq#m Iw UrɌ$Ym1, ER Z \PP\D<]5J>{[QUE{z)]18EݢN;E9k. 6stY&p7t#M{֥͕KO%?m{b~ˆ~;M+9)TjiڽHkLBsIke eJv-Z ,\$/(VXc\Fh Z)|tT5k{T*4\AHlYJ }g6Y40CˍdɘTr#{JR]41lg | [9nUnBۚaHyYkӯBJhngAhN$sEĚsӶpU&2ΣN9*)&6vSL)vC83"8duaE$@30'TQWm9{="~Ax:<:6D`Ci˃^ZZ(3vaEua 3hctoG4_Ą\75S JU;R3*Mq&b\9vJOYXJYaJHQ]6UTy:ccI ? +݁@}mX+c;Bp_cmPH~zQT:E2ڝ'5+@g!%^T^*:Dsm跚X^ 6˟@U,c+<o6sƌE'![0D@qVet&M\[CP16KAF3mu~ɣ`[` Dp6)yQߛoj֣HTa6ϸz8PqA4K4hvʩfKwYzn$& ă$c\ h̄ cu#x1Ǻɣq:QCM k#(=_^eL*breC2>X̵^&Avs݉My̼ nGOxmgo3G|s~ӷN̬m B;ÓdjL´A!Mx挠i9UENo#A"YVL]!QU6;m8*pnK{ M&!cUZ[c:y,lO,p-WP, u:  '` ^NoEˤļ%Rǭo!rXC>O&%\v4;XSm)!ä i$s_h!xM,Jl+J!U4iA< 1'ăW晾hd]QpUٗ2cN9{xPyJbP|*Y22pBbG ,F8"ν sʣ'ӞΜGl gHVf'AI ;dGԴwb\T$̚9wۊOk|1t1.j3!$`[u+++lr<)/kJ ~. ~,2S!-d t/dХnoI{)%1OL>ĘcejJϊE[mKǴ|3ͻ/DOo3=+2}0̏\K3;JhEk1+F0@Gv9sr2Sx QDyXȀ`//3Dږұ_z갇k٣oxoqp.WQDɗ\{~Eڑr\cCܞxpOoU>$Cԃ0]Jƹ˚\v7t646-r1,KX8C~R? :ْ@nOLw6B!(GDW|w 77!fk'äǭoLu2ֲ{_Ae촪ٺ1#y#&{w:r%B3IC~#r3mSIf,jOO2dJӐ_^>*ɓo{r,k 67 iNsֶLx%=y!ϖ)譋(H)"jO+QY (f'a4'4pА/m>Q$%R#)y`8=V{VkGr0PfGFCe w7j0~HGdu?/-V!8KFi 4x>hVEb7M @y o.Y`^=L :5YHWL? !'Tn)L,q21.[֭V#}2GJm~(2WuQaʬ]\yyͰ$졽af4PSk3púSnRQ{Lʶ YZ